@odla-ai/chapter 0.25.6 → 0.26.0

package/dist/worker/index.d.cts

@@ -1,15 +1,16 @@
 import { CrmConfig, Crm } from '@odla-ai/crm';
 import { initAdmin } from '@odla-ai/db';
 
+type TextFields$1<Key extends string> = {
+    [Field in Key]: string;
+};
+/** User-visible language for sharing, delivery state, and leader rollups. */
+type AdminNetworkCopy = TextFields$1<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed" | "loadingRollup" | "loadRollupFailed" | "overview" | "configuredFollowers" | "reachableFollowers" | "recordsAcrossFollowers" | "noFollowers" | "followers" | "available" | "unavailable" | "recordTotals" | "noRecordTotals">;
+
 type TextFields<Key extends string> = {
     [Field in Key]: string;
 };
-/**
- * Complete user-visible language owned by Chapter's packaged surfaces.
- *
- * Copy is serializable text; use render slots when presentation needs markup and
- * `formatChapterCopy()` for typed placeholders.
- */
+/** Complete serializable language for Chapter surfaces; use render slots for markup and `formatChapterCopy()` for placeholders. */
 interface ChapterCopy {
     common: TextFields<"loading" | "saved" | "unknown">;
     join: {
@@ -35,7 +36,7 @@ interface ChapterCopy {
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
-        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "settings" | "calendar" | "email" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel">;
+        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
         dashboard: TextFields<"loading" | "loadFailed" | "upcomingCalls" | "callsNeedAttention" | "noUpcomingCalls" | "drift" | "open" | "meet" | "applications" | "newMembers" | "newMembersUnavailable" | "revenueAdded" | "revenue" | "revenueUnavailable" | "pipeline" | "pipelineLabel" | "thisWeek" | "noChange" | "activeMemberships" | "annualRunRate" | "testMode">;
         billing: TextFields<"loading" | "loadFailed" | "notConfigured" | "active" | "annualized" | "renewingSoon" | "pastDue" | "subscriptions" | "testMode" | "truncated" | "name" | "email" | "application" | "subscription" | "cancelling" | "amount" | "renews">;
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
@@ -43,7 +44,7 @@ interface ChapterCopy {
         };
         email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
-        network: TextFields<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed">;
+        network: AdminNetworkCopy;
         records: TextFields<"workflowMissing" | "comms" | "commsHistory" | "scheduling" | "billing" | "notes" | "access" | "sharing" | "lifecycle" | "role" | "superAdminHint" | "noAccount" | "approve" | "refund" | "approved" | "refunded" | "roleSet" | "messageSent" | "messageNotSent" | "loadingTemplates" | "template" | "chooseTemplate" | "sending" | "send" | "noMessages" | "message" | "newStartPrompt" | "parseFailed" | "cancelConfirm" | "callCancelled" | "callRescheduled" | "noApplication" | "loadingMeetings" | "noMeetings" | "joinMeeting" | "openCalendar" | "reschedule" | "cancel">;
     };
 }
@@ -53,6 +54,66 @@ type DeepPartial<T> = T extends readonly (infer Item)[] ? readonly Item[] : T ex
 /** Recursively partial copy overrides accepted by `defineChapter({ copy })`. */
 type ChapterCopyInput = DeepPartial<ChapterCopy>;
 
+/** One follower site a leader can push CRM records to. The secret VALUE never
+ * lives in config: `secretName` names the leader tenant's vaulted copy of the
+ * follower's `network_share_secret`. */
+interface ChapterNetworkTarget {
+    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
+    id: string;
+    /** Human-facing site name. Defaults to `id`. */
+    name?: string;
+    /** Absolute follower origin, e.g. `https://chapter.example.com`. */
+    url: string;
+    /** Leader-vault key holding this follower's share secret. Defaults to
+     * `network_share_<id-with-underscores>`. */
+    secretName?: string;
+    /** Per-record-type field allowlist. If present, omitted types cannot be sent
+     * to this target. Without it, package-safe person/company defaults apply. */
+    fields?: Record<string, readonly string[]>;
+}
+/** Leader/follower network configuration. Followers need no code config to
+ * receive records; they only vault `network_share_secret`. */
+interface ChapterNetwork {
+    targets?: readonly ChapterNetworkTarget[];
+}
+/** Public chapter-formation intake backed by one CRM record type. The host owns
+ * the branded form; Chapter owns the bounded, idempotent write contract. */
+interface LeaderFormationConfig {
+    /** CRM type receiving submissions. Default `"chapter_application"`. */
+    type?: string;
+    /** Public fields that must be non-empty strings. */
+    required?: readonly string[];
+    /** Additional public fields accepted by the route. */
+    optional?: readonly string[];
+    maxLen?: Record<string, number>;
+    /** Per-string cap when `maxLen` has no field override. Default 4000. */
+    defaultMaxLen?: number;
+    /** Maximum JSON request size in characters. Default 32768. */
+    bodyCap?: number;
+}
+/** Fully resolved formation intake policy. */
+interface ResolvedLeaderFormation {
+    enabled: boolean;
+    type: string;
+    required: readonly string[];
+    optional: readonly string[];
+    maxLen: Record<string, number>;
+    defaultMaxLen: number;
+    bodyCap: number;
+}
+/** A validated network target carried on the resolved chapter engine. */
+interface ResolvedNetworkTarget {
+    id: string;
+    name: string;
+    url: string;
+    secretName: string;
+    fields?: Record<string, readonly string[]>;
+}
+/** Fully-resolved leader network configuration. */
+interface ResolvedNetwork {
+    targets: readonly ResolvedNetworkTarget[];
+}
+
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
@@ -158,40 +219,6 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
-/** One follower site a leader can push CRM records to. The secret VALUE never
- * lives in config: `secretName` names the leader tenant's vaulted copy of the
- * follower's `network_share_secret`. */
-interface ChapterNetworkTarget {
-    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
-    id: string;
-    /** Human-facing site name. Defaults to `id`. */
-    name?: string;
-    /** Absolute follower origin, e.g. `https://chapter.example.com`. */
-    url: string;
-    /** Leader-vault key holding this follower's share secret. Defaults to
-     * `network_share_<id-with-underscores>`. */
-    secretName?: string;
-    /** Per-record-type field allowlist. If present, omitted types cannot be sent
-     * to this target. Without it, package-safe person/company defaults apply. */
-    fields?: Record<string, readonly string[]>;
-}
-/** Leader/follower network configuration. Followers need no code config to
- * receive records; they only vault `network_share_secret`. */
-interface ChapterNetwork {
-    targets?: readonly ChapterNetworkTarget[];
-}
-/** A validated network target carried on the resolved chapter engine. */
-interface ResolvedNetworkTarget {
-    id: string;
-    name: string;
-    url: string;
-    secretName: string;
-    fields?: Record<string, readonly string[]>;
-}
-/** Fully-resolved leader network configuration. */
-interface ResolvedNetwork {
-    targets: readonly ResolvedNetworkTarget[];
-}
 /** Membership pricing for the group row (chapter mode). */
 interface ChapterPrices {
     standardCents: number;
@@ -348,6 +375,8 @@ interface ChapterConfig {
     /** Leader → follower delivery targets. Secret values stay in the leader
      * tenant vault; see {@link ChapterNetworkTarget}. */
     network?: ChapterNetwork;
+    /** Enable a public, host-rendered formation application workflow. */
+    formation?: LeaderFormationConfig;
     thesis?: unknown;
     /** Required in `chapter` mode. */
     prices?: ChapterPrices;
@@ -438,6 +467,8 @@ interface Chapter {
     copy: ChapterCopy;
     /** Validated follower targets for leader-driven record pushes. */
     network: ResolvedNetwork;
+    /** Resolved public formation intake contract (disabled when omitted). */
+    formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
     crm: Crm;
     /** Resolved auth policy (source, claim, ladder, super-admin tier). */
@@ -480,6 +511,9 @@ interface ChapterEnv {
     ODLA_TENANT: string;
     ODLA_PLATFORM: string;
     ODLA_APP_ID: string;
+    /** Registry lifetime for this exact app/database. Discussion reference
+     * reads fail closed when it is absent or stale. */
+    ODLA_APP_INCARNATION?: string;
     ODLA_ENV: string;
     ODLA_API_KEY: string;
     SEND_EMAIL?: {

package/dist/worker/index.d.ts

@@ -1,15 +1,16 @@
 import { CrmConfig, Crm } from '@odla-ai/crm';
 import { initAdmin } from '@odla-ai/db';
 
+type TextFields$1<Key extends string> = {
+    [Field in Key]: string;
+};
+/** User-visible language for sharing, delivery state, and leader rollups. */
+type AdminNetworkCopy = TextFields$1<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed" | "loadingRollup" | "loadRollupFailed" | "overview" | "configuredFollowers" | "reachableFollowers" | "recordsAcrossFollowers" | "noFollowers" | "followers" | "available" | "unavailable" | "recordTotals" | "noRecordTotals">;
+
 type TextFields<Key extends string> = {
     [Field in Key]: string;
 };
-/**
- * Complete user-visible language owned by Chapter's packaged surfaces.
- *
- * Copy is serializable text; use render slots when presentation needs markup and
- * `formatChapterCopy()` for typed placeholders.
- */
+/** Complete serializable language for Chapter surfaces; use render slots for markup and `formatChapterCopy()` for placeholders. */
 interface ChapterCopy {
     common: TextFields<"loading" | "saved" | "unknown">;
     join: {
@@ -35,7 +36,7 @@ interface ChapterCopy {
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
-        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "settings" | "calendar" | "email" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel">;
+        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
         dashboard: TextFields<"loading" | "loadFailed" | "upcomingCalls" | "callsNeedAttention" | "noUpcomingCalls" | "drift" | "open" | "meet" | "applications" | "newMembers" | "newMembersUnavailable" | "revenueAdded" | "revenue" | "revenueUnavailable" | "pipeline" | "pipelineLabel" | "thisWeek" | "noChange" | "activeMemberships" | "annualRunRate" | "testMode">;
         billing: TextFields<"loading" | "loadFailed" | "notConfigured" | "active" | "annualized" | "renewingSoon" | "pastDue" | "subscriptions" | "testMode" | "truncated" | "name" | "email" | "application" | "subscription" | "cancelling" | "amount" | "renews">;
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
@@ -43,7 +44,7 @@ interface ChapterCopy {
         };
         email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
-        network: TextFields<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed">;
+        network: AdminNetworkCopy;
         records: TextFields<"workflowMissing" | "comms" | "commsHistory" | "scheduling" | "billing" | "notes" | "access" | "sharing" | "lifecycle" | "role" | "superAdminHint" | "noAccount" | "approve" | "refund" | "approved" | "refunded" | "roleSet" | "messageSent" | "messageNotSent" | "loadingTemplates" | "template" | "chooseTemplate" | "sending" | "send" | "noMessages" | "message" | "newStartPrompt" | "parseFailed" | "cancelConfirm" | "callCancelled" | "callRescheduled" | "noApplication" | "loadingMeetings" | "noMeetings" | "joinMeeting" | "openCalendar" | "reschedule" | "cancel">;
     };
 }
@@ -53,6 +54,66 @@ type DeepPartial<T> = T extends readonly (infer Item)[] ? readonly Item[] : T ex
 /** Recursively partial copy overrides accepted by `defineChapter({ copy })`. */
 type ChapterCopyInput = DeepPartial<ChapterCopy>;
 
+/** One follower site a leader can push CRM records to. The secret VALUE never
+ * lives in config: `secretName` names the leader tenant's vaulted copy of the
+ * follower's `network_share_secret`. */
+interface ChapterNetworkTarget {
+    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
+    id: string;
+    /** Human-facing site name. Defaults to `id`. */
+    name?: string;
+    /** Absolute follower origin, e.g. `https://chapter.example.com`. */
+    url: string;
+    /** Leader-vault key holding this follower's share secret. Defaults to
+     * `network_share_<id-with-underscores>`. */
+    secretName?: string;
+    /** Per-record-type field allowlist. If present, omitted types cannot be sent
+     * to this target. Without it, package-safe person/company defaults apply. */
+    fields?: Record<string, readonly string[]>;
+}
+/** Leader/follower network configuration. Followers need no code config to
+ * receive records; they only vault `network_share_secret`. */
+interface ChapterNetwork {
+    targets?: readonly ChapterNetworkTarget[];
+}
+/** Public chapter-formation intake backed by one CRM record type. The host owns
+ * the branded form; Chapter owns the bounded, idempotent write contract. */
+interface LeaderFormationConfig {
+    /** CRM type receiving submissions. Default `"chapter_application"`. */
+    type?: string;
+    /** Public fields that must be non-empty strings. */
+    required?: readonly string[];
+    /** Additional public fields accepted by the route. */
+    optional?: readonly string[];
+    maxLen?: Record<string, number>;
+    /** Per-string cap when `maxLen` has no field override. Default 4000. */
+    defaultMaxLen?: number;
+    /** Maximum JSON request size in characters. Default 32768. */
+    bodyCap?: number;
+}
+/** Fully resolved formation intake policy. */
+interface ResolvedLeaderFormation {
+    enabled: boolean;
+    type: string;
+    required: readonly string[];
+    optional: readonly string[];
+    maxLen: Record<string, number>;
+    defaultMaxLen: number;
+    bodyCap: number;
+}
+/** A validated network target carried on the resolved chapter engine. */
+interface ResolvedNetworkTarget {
+    id: string;
+    name: string;
+    url: string;
+    secretName: string;
+    fields?: Record<string, readonly string[]>;
+}
+/** Fully-resolved leader network configuration. */
+interface ResolvedNetwork {
+    targets: readonly ResolvedNetworkTarget[];
+}
+
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
@@ -158,40 +219,6 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
-/** One follower site a leader can push CRM records to. The secret VALUE never
- * lives in config: `secretName` names the leader tenant's vaulted copy of the
- * follower's `network_share_secret`. */
-interface ChapterNetworkTarget {
-    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
-    id: string;
-    /** Human-facing site name. Defaults to `id`. */
-    name?: string;
-    /** Absolute follower origin, e.g. `https://chapter.example.com`. */
-    url: string;
-    /** Leader-vault key holding this follower's share secret. Defaults to
-     * `network_share_<id-with-underscores>`. */
-    secretName?: string;
-    /** Per-record-type field allowlist. If present, omitted types cannot be sent
-     * to this target. Without it, package-safe person/company defaults apply. */
-    fields?: Record<string, readonly string[]>;
-}
-/** Leader/follower network configuration. Followers need no code config to
- * receive records; they only vault `network_share_secret`. */
-interface ChapterNetwork {
-    targets?: readonly ChapterNetworkTarget[];
-}
-/** A validated network target carried on the resolved chapter engine. */
-interface ResolvedNetworkTarget {
-    id: string;
-    name: string;
-    url: string;
-    secretName: string;
-    fields?: Record<string, readonly string[]>;
-}
-/** Fully-resolved leader network configuration. */
-interface ResolvedNetwork {
-    targets: readonly ResolvedNetworkTarget[];
-}
 /** Membership pricing for the group row (chapter mode). */
 interface ChapterPrices {
     standardCents: number;
@@ -348,6 +375,8 @@ interface ChapterConfig {
     /** Leader → follower delivery targets. Secret values stay in the leader
      * tenant vault; see {@link ChapterNetworkTarget}. */
     network?: ChapterNetwork;
+    /** Enable a public, host-rendered formation application workflow. */
+    formation?: LeaderFormationConfig;
     thesis?: unknown;
     /** Required in `chapter` mode. */
     prices?: ChapterPrices;
@@ -438,6 +467,8 @@ interface Chapter {
     copy: ChapterCopy;
     /** Validated follower targets for leader-driven record pushes. */
     network: ResolvedNetwork;
+    /** Resolved public formation intake contract (disabled when omitted). */
+    formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
     crm: Crm;
     /** Resolved auth policy (source, claim, ladder, super-admin tier). */
@@ -480,6 +511,9 @@ interface ChapterEnv {
     ODLA_TENANT: string;
     ODLA_PLATFORM: string;
     ODLA_APP_ID: string;
+    /** Registry lifetime for this exact app/database. Discussion reference
+     * reads fail closed when it is absent or stale. */
+    ODLA_APP_INCARNATION?: string;
     ODLA_ENV: string;
     ODLA_API_KEY: string;
     SEND_EMAIL?: {