@odla-ai/chapter 0.3.0 → 0.5.0

package/dist/index.d.cts

@@ -466,6 +466,88 @@ declare function verifyStripeSignature(payload: string, header: string, secret:
     now?: number;
     toleranceSec?: number;
 }): Promise<boolean>;
+/** A group row's payment configuration, as far as readiness cares. */
+interface PaymentsGroup {
+    stripePublishableKey?: string | null;
+    stripePriceId?: string | null;
+}
+/** Whether a group can take payment: a publishable key + a price id (both on the
+ *  group row) AND a secret key (the vault). Anything missing drops the join
+ *  flow's payment step (paymentsReady:false) rather than half-charging. */
+declare function paymentsReady(group: PaymentsGroup, hasSecretKey: boolean): boolean;
+/** Form-encode params for Stripe's x-www-form-urlencoded API, expanding one level
+ *  of nested objects into bracket syntax (`metadata[applicationId]=...`). */
+declare function stripeForm(params: Record<string, unknown>): string;
+/** The Stripe idempotency key for creating an application's subscription — one
+ *  per application, so a client retry can't orphan a second subscription (S&S
+ *  lacked this; the package enforces it). */
+declare function subscriptionIdempotencyKey(applicationId: string): string;
+/** The db mutationId for a webhook-driven write — exactly-once per Stripe event,
+ *  so replays are deduped at the db layer. */
+declare function webhookMutationId(eventId: string): string;
+/** A raw Stripe event, as far as normalization cares. */
+interface StripeEvent {
+    id: string;
+    type: string;
+    data?: {
+        object?: Record<string, unknown>;
+    };
+}
+/** A normalized, provider-agnostic webhook event. `kind` drives the db write;
+ *  the application is resolved from `applicationId` (metadata) or `customerId`. */
+type WebhookEvent = {
+    kind: "first_payment";
+    applicationId?: string;
+    customerId?: string;
+    renewalAt?: number;
+} | {
+    kind: "renewal";
+    applicationId?: string;
+    customerId?: string;
+    renewalAt?: number;
+} | {
+    kind: "refunded";
+    applicationId?: string;
+    customerId?: string;
+} | {
+    kind: "canceled";
+    applicationId?: string;
+    customerId?: string;
+} | {
+    kind: "ignored";
+    type: string;
+};
+/** Resolve the application reference on a Stripe object: `applicationId` from
+ *  metadata (direct, then subscription_details, then nested
+ *  parent.subscription_details), plus the customer id for the db fallback. */
+declare function findApplicationRef(obj: Record<string, unknown>): {
+    applicationId?: string;
+    customerId?: string;
+};
+/** Normalize a verified Stripe event into a {@link WebhookEvent}. `invoice.paid`
+ *  splits into first_payment vs renewal by `billing_reason`; refunds and
+ *  cancellations map directly; everything else is ignored (acked, not retried). */
+declare function normalizeWebhookEvent(event: StripeEvent): WebhookEvent;
+/** First-payment patch: advance submitted→paid_pending_vetting (never any other
+ *  transition) and record the renewal date. Empty when nothing changed, so the
+ *  caller can skip the write. */
+declare function firstPaymentPatch(currentStatus: string, renewalAt?: number): {
+    status?: "paid_pending_vetting";
+    renewalAt?: number;
+};
+/** Renewal-invoice patch: just the new renewal date. */
+declare function renewalPatch(renewalAt: number): {
+    renewalAt: number;
+};
+/** Refund patch — the SOLE writer of status "refunded" (the admin refund route
+ *  issues the Stripe refund but never sets this; the webhook does). */
+declare function refundedPatch(): {
+    status: "refunded";
+};
+/** Subscription-cancellation patch. */
+declare function canceledPatch(): {
+    canceled: true;
+};
 
 /** Apply defaults + validate the application config. Throws at import on bad shape. */
 declare function resolveApplication(a: ChapterApplication | undefined): ResolvedApplication;
@@ -546,4 +628,190 @@ declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson)
     recordId: string;
 }>;
 
-export { type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type GuardResult, type JoinConfigGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type RoleChangeContext, type Rule, type SecretStore, type SharedPerson, type SubmitResult, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, chapterDb, createChapterIntegration, defaultCrm, defineChapter, getVaultSecret, isAdminRole, isAlreadySent, joinConfig, planDelivery, projectSharedRecord, render, renderTemplateBody, resolveApplication, resolveAuth, resolvePipeline, roleFromClaim, sharedPersonInput, stageIndex, submitApplication, verifyStripeSignature };
+/** An application row, as far as the session cares about it. */
+interface ApplicationRecord {
+    id: string;
+    firstName?: string | null;
+    lastName?: string | null;
+    email?: string | null;
+    status: string;
+    meetingAt?: number | null;
+    meetingLink?: string | null;
+    createdAt?: number | null;
+    stripeSubscriptionId?: string | null;
+    renewalAt?: number | null;
+    canceled?: boolean;
+}
+/** The reconciled meeting row (already adopted against the calendar), or null. */
+interface MeetingRecord {
+    status: string;
+    startAt?: number | null;
+    meetUrl?: string | null;
+    timezone?: string | null;
+}
+/** The stable, non-meeting fields of an application (safe to expose to its own
+ *  owner). */
+interface ApplicationSummary {
+    id: string;
+    firstName: string | null;
+    lastName: string | null;
+    email: string | null;
+    status: string;
+    createdAt: number | null;
+    meetingLink: string | null;
+    paid: boolean;
+    renewalAt: number | null;
+    canceled: boolean;
+}
+/** A summary plus the reconciled meeting fields — the `application` the member
+ *  area renders. */
+interface MemberApplication extends ApplicationSummary {
+    meetingAt: number | null;
+    meetUrl: string | null;
+    timezone: string;
+}
+/** The full GET /api/me payload for a signed-in user. */
+interface MemberSession {
+    userId: string;
+    email: string | null;
+    role: string;
+    superAdmin: boolean;
+    application: MemberApplication | null;
+}
+/** Derive the summary fields from an application row. `paid` is computed, not
+ *  read, so it can never contradict Stripe. */
+declare function applicationSummary(app: ApplicationRecord): ApplicationSummary;
+/** Fold a (possibly absent, already-reconciled) meeting into the application the
+ *  member area renders. The live meeting overrides the application's cached
+ *  meeting fields; a non-`scheduled` meeting clears the booking. */
+declare function memberApplication(app: ApplicationRecord, meeting: MeetingRecord | null | undefined, defaultTimezone: string): MemberApplication;
+/** Identity of the signed-in user, from the verified session. */
+interface SessionUser {
+    userId: string;
+    email?: string | null;
+    role: string;
+}
+/** Assemble the GET /api/me payload. `application` is null when the user has no
+ *  application on file (an admin who never applied, or a brand-new account). */
+declare function memberSession(user: SessionUser, opts: {
+    application: MemberApplication | null;
+    superAdmin: boolean;
+}): MemberSession;
+
+/**
+ * Build the `:root { … }` CSS that maps a chapter's brand onto the design tokens
+ * the UI reads: each `palette` entry becomes a custom property, and `fonts`
+ * (display/body/numeral) map to `--ui-font-display` / `--ui-font-sans` /
+ * `--ui-font-numeral`. Returns "" when there is nothing to theme.
+ */
+declare function brandTokens(brand: ChapterBrand | undefined): string;
+
+/** A fully-resolved scheduling config (every field present). */
+interface ResolvedScheduling {
+    slotMinutes: number;
+    days: readonly number[];
+    startHour: number;
+    endHour: number;
+    timezone: string;
+    minNoticeHours: number;
+    windowDays: number;
+    summaryTemplate: string;
+}
+/** The S&S-proven defaults: 45-minute weekday slots, 9–5 Pacific, 24h notice,
+ *  a 14-day window. The summary is generic (a chapter's group seed supplies a
+ *  name-branded one). */
+declare const SCHEDULING_DEFAULTS: ResolvedScheduling;
+/**
+ * Resolve a group's scheduling config against the defaults, validating every
+ * bound the way S&S does at config-write time (throws on a bad config, so a
+ * misconfiguration surfaces immediately rather than yielding empty slots).
+ * `windowDays` is capped at 62 because Google FreeBusy is.
+ */
+declare function resolveScheduling(config?: ChapterScheduling): ResolvedScheduling;
+/** Statuses a member may book/reschedule from (early pipeline only). */
+declare const BOOKABLE_STATUSES: readonly string[];
+/** Whether an application at `status` may book a call. */
+declare function canBookFrom(status: string): boolean;
+/** The availability window: `[now, now + windowDays]` in epoch ms. */
+declare function slotWindow(now: number, windowDays: number): {
+    from: number;
+    to: number;
+};
+/** The slot's end instant, always derived from its start (never client-supplied). */
+declare function endForSlot(startAt: number, slotMinutes: number): number;
+/** Double-book pre-check: the requested start must land exactly on a currently
+ *  bookable slot boundary. */
+declare function isSlotAvailable(slots: readonly {
+    startAt: number;
+}[], startAt: number): boolean;
+/** Render a meeting summary from its template (`{{firstName}}`/`{{lastName}}`). */
+declare function renderSummary(template: string, app: {
+    firstName?: string | null;
+    lastName?: string | null;
+}): string;
+/** The prior scheduled meeting for an application, as far as booking cares. */
+interface ExistingMeeting {
+    id: string;
+    googleEventId?: string | null;
+    meetUrl?: string | null;
+    htmlLink?: string | null;
+}
+/** Decide reschedule-vs-create: reschedule iff there's an existing event to move,
+ *  so the Meet link + invite thread survive and no second event is minted. */
+declare function bookingDecision(existing: ExistingMeeting | null | undefined): {
+    reschedule: boolean;
+    eventId: string | null;
+};
+/** The create idempotency key — one intro event per application, forever, so a
+ *  retried create returns the same booking rather than a duplicate. */
+declare function introIdempotencyKey(applicationId: string): string;
+/** The canonical `meetings` row for a first booking. A `type` (not `interface`)
+ *  so it stays assignable to a db op's `attrs` (Record<string, unknown>). */
+type NewMeetingRow = {
+    id: string;
+    applicationId: string;
+    groupId: string;
+    startAt: number;
+    endAt: number;
+    timezone: string;
+    status: "scheduled";
+    googleEventId: string;
+    meetUrl?: string;
+    htmlLink?: string;
+    drift: "none";
+    createdAt: number;
+};
+/** Build the new `meetings` row after the calendar created the event. Optional
+ *  scalars are omitted (never null), per the odla-db porting rule. */
+declare function meetingCreateRow(i: {
+    meetingId: string;
+    applicationId: string;
+    groupId: string;
+    startAt: number;
+    endAt: number;
+    timezone: string;
+    googleEventId: string;
+    meetUrl?: string | null;
+    htmlLink?: string | null;
+    createdAt: number;
+}): NewMeetingRow;
+/** The `meetings`-row patch for a reschedule (same row id, moved in place). */
+type MeetingReschedulePatch = {
+    startAt: number;
+    endAt: number;
+    drift: "none";
+};
+/** Patch to move an existing meeting to a new window. */
+declare function meetingRescheduleUpdate(startAt: number, endAt: number): MeetingReschedulePatch;
+/** The `applications`-row patch after a booking. */
+type ApplicationBookingPatch = {
+    meetingAt: number;
+    meetingLink?: string;
+    status?: "call_scheduled";
+};
+/** Project the booking onto the application row: cache the time, adopt the
+ *  calendar link if any, and advance the status to `call_scheduled` unless it is
+ *  already there (never backward). */
+declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
+
+export { type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BOOKABLE_STATUSES, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type PaymentsGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canBookFrom, canChangeRole, canTransition, canceledPatch, chapterDb, createChapterIntegration, defaultCrm, defineChapter, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectSharedRecord, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };

package/dist/index.d.ts

@@ -466,6 +466,88 @@ declare function verifyStripeSignature(payload: string, header: string, secret:
     now?: number;
     toleranceSec?: number;
 }): Promise<boolean>;
+/** A group row's payment configuration, as far as readiness cares. */
+interface PaymentsGroup {
+    stripePublishableKey?: string | null;
+    stripePriceId?: string | null;
+}
+/** Whether a group can take payment: a publishable key + a price id (both on the
+ *  group row) AND a secret key (the vault). Anything missing drops the join
+ *  flow's payment step (paymentsReady:false) rather than half-charging. */
+declare function paymentsReady(group: PaymentsGroup, hasSecretKey: boolean): boolean;
+/** Form-encode params for Stripe's x-www-form-urlencoded API, expanding one level
+ *  of nested objects into bracket syntax (`metadata[applicationId]=...`). */
+declare function stripeForm(params: Record<string, unknown>): string;
+/** The Stripe idempotency key for creating an application's subscription — one
+ *  per application, so a client retry can't orphan a second subscription (S&S
+ *  lacked this; the package enforces it). */
+declare function subscriptionIdempotencyKey(applicationId: string): string;
+/** The db mutationId for a webhook-driven write — exactly-once per Stripe event,
+ *  so replays are deduped at the db layer. */
+declare function webhookMutationId(eventId: string): string;
+/** A raw Stripe event, as far as normalization cares. */
+interface StripeEvent {
+    id: string;
+    type: string;
+    data?: {
+        object?: Record<string, unknown>;
+    };
+}
+/** A normalized, provider-agnostic webhook event. `kind` drives the db write;
+ *  the application is resolved from `applicationId` (metadata) or `customerId`. */
+type WebhookEvent = {
+    kind: "first_payment";
+    applicationId?: string;
+    customerId?: string;
+    renewalAt?: number;
+} | {
+    kind: "renewal";
+    applicationId?: string;
+    customerId?: string;
+    renewalAt?: number;
+} | {
+    kind: "refunded";
+    applicationId?: string;
+    customerId?: string;
+} | {
+    kind: "canceled";
+    applicationId?: string;
+    customerId?: string;
+} | {
+    kind: "ignored";
+    type: string;
+};
+/** Resolve the application reference on a Stripe object: `applicationId` from
+ *  metadata (direct, then subscription_details, then nested
+ *  parent.subscription_details), plus the customer id for the db fallback. */
+declare function findApplicationRef(obj: Record<string, unknown>): {
+    applicationId?: string;
+    customerId?: string;
+};
+/** Normalize a verified Stripe event into a {@link WebhookEvent}. `invoice.paid`
+ *  splits into first_payment vs renewal by `billing_reason`; refunds and
+ *  cancellations map directly; everything else is ignored (acked, not retried). */
+declare function normalizeWebhookEvent(event: StripeEvent): WebhookEvent;
+/** First-payment patch: advance submitted→paid_pending_vetting (never any other
+ *  transition) and record the renewal date. Empty when nothing changed, so the
+ *  caller can skip the write. */
+declare function firstPaymentPatch(currentStatus: string, renewalAt?: number): {
+    status?: "paid_pending_vetting";
+    renewalAt?: number;
+};
+/** Renewal-invoice patch: just the new renewal date. */
+declare function renewalPatch(renewalAt: number): {
+    renewalAt: number;
+};
+/** Refund patch — the SOLE writer of status "refunded" (the admin refund route
+ *  issues the Stripe refund but never sets this; the webhook does). */
+declare function refundedPatch(): {
+    status: "refunded";
+};
+/** Subscription-cancellation patch. */
+declare function canceledPatch(): {
+    canceled: true;
+};
 
 /** Apply defaults + validate the application config. Throws at import on bad shape. */
 declare function resolveApplication(a: ChapterApplication | undefined): ResolvedApplication;
@@ -546,4 +628,190 @@ declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson)
     recordId: string;
 }>;
 
-export { type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type GuardResult, type JoinConfigGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type RoleChangeContext, type Rule, type SecretStore, type SharedPerson, type SubmitResult, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, chapterDb, createChapterIntegration, defaultCrm, defineChapter, getVaultSecret, isAdminRole, isAlreadySent, joinConfig, planDelivery, projectSharedRecord, render, renderTemplateBody, resolveApplication, resolveAuth, resolvePipeline, roleFromClaim, sharedPersonInput, stageIndex, submitApplication, verifyStripeSignature };
+/** An application row, as far as the session cares about it. */
+interface ApplicationRecord {
+    id: string;
+    firstName?: string | null;
+    lastName?: string | null;
+    email?: string | null;
+    status: string;
+    meetingAt?: number | null;
+    meetingLink?: string | null;
+    createdAt?: number | null;
+    stripeSubscriptionId?: string | null;
+    renewalAt?: number | null;
+    canceled?: boolean;
+}
+/** The reconciled meeting row (already adopted against the calendar), or null. */
+interface MeetingRecord {
+    status: string;
+    startAt?: number | null;
+    meetUrl?: string | null;
+    timezone?: string | null;
+}
+/** The stable, non-meeting fields of an application (safe to expose to its own
+ *  owner). */
+interface ApplicationSummary {
+    id: string;
+    firstName: string | null;
+    lastName: string | null;
+    email: string | null;
+    status: string;
+    createdAt: number | null;
+    meetingLink: string | null;
+    paid: boolean;
+    renewalAt: number | null;
+    canceled: boolean;
+}
+/** A summary plus the reconciled meeting fields — the `application` the member
+ *  area renders. */
+interface MemberApplication extends ApplicationSummary {
+    meetingAt: number | null;
+    meetUrl: string | null;
+    timezone: string;
+}
+/** The full GET /api/me payload for a signed-in user. */
+interface MemberSession {
+    userId: string;
+    email: string | null;
+    role: string;
+    superAdmin: boolean;
+    application: MemberApplication | null;
+}
+/** Derive the summary fields from an application row. `paid` is computed, not
+ *  read, so it can never contradict Stripe. */
+declare function applicationSummary(app: ApplicationRecord): ApplicationSummary;
+/** Fold a (possibly absent, already-reconciled) meeting into the application the
+ *  member area renders. The live meeting overrides the application's cached
+ *  meeting fields; a non-`scheduled` meeting clears the booking. */
+declare function memberApplication(app: ApplicationRecord, meeting: MeetingRecord | null | undefined, defaultTimezone: string): MemberApplication;
+/** Identity of the signed-in user, from the verified session. */
+interface SessionUser {
+    userId: string;
+    email?: string | null;
+    role: string;
+}
+/** Assemble the GET /api/me payload. `application` is null when the user has no
+ *  application on file (an admin who never applied, or a brand-new account). */
+declare function memberSession(user: SessionUser, opts: {
+    application: MemberApplication | null;
+    superAdmin: boolean;
+}): MemberSession;
+
+/**
+ * Build the `:root { … }` CSS that maps a chapter's brand onto the design tokens
+ * the UI reads: each `palette` entry becomes a custom property, and `fonts`
+ * (display/body/numeral) map to `--ui-font-display` / `--ui-font-sans` /
+ * `--ui-font-numeral`. Returns "" when there is nothing to theme.
+ */
+declare function brandTokens(brand: ChapterBrand | undefined): string;
+
+/** A fully-resolved scheduling config (every field present). */
+interface ResolvedScheduling {
+    slotMinutes: number;
+    days: readonly number[];
+    startHour: number;
+    endHour: number;
+    timezone: string;
+    minNoticeHours: number;
+    windowDays: number;
+    summaryTemplate: string;
+}
+/** The S&S-proven defaults: 45-minute weekday slots, 9–5 Pacific, 24h notice,
+ *  a 14-day window. The summary is generic (a chapter's group seed supplies a
+ *  name-branded one). */
+declare const SCHEDULING_DEFAULTS: ResolvedScheduling;
+/**
+ * Resolve a group's scheduling config against the defaults, validating every
+ * bound the way S&S does at config-write time (throws on a bad config, so a
+ * misconfiguration surfaces immediately rather than yielding empty slots).
+ * `windowDays` is capped at 62 because Google FreeBusy is.
+ */
+declare function resolveScheduling(config?: ChapterScheduling): ResolvedScheduling;
+/** Statuses a member may book/reschedule from (early pipeline only). */
+declare const BOOKABLE_STATUSES: readonly string[];
+/** Whether an application at `status` may book a call. */
+declare function canBookFrom(status: string): boolean;
+/** The availability window: `[now, now + windowDays]` in epoch ms. */
+declare function slotWindow(now: number, windowDays: number): {
+    from: number;
+    to: number;
+};
+/** The slot's end instant, always derived from its start (never client-supplied). */
+declare function endForSlot(startAt: number, slotMinutes: number): number;
+/** Double-book pre-check: the requested start must land exactly on a currently
+ *  bookable slot boundary. */
+declare function isSlotAvailable(slots: readonly {
+    startAt: number;
+}[], startAt: number): boolean;
+/** Render a meeting summary from its template (`{{firstName}}`/`{{lastName}}`). */
+declare function renderSummary(template: string, app: {
+    firstName?: string | null;
+    lastName?: string | null;
+}): string;
+/** The prior scheduled meeting for an application, as far as booking cares. */
+interface ExistingMeeting {
+    id: string;
+    googleEventId?: string | null;
+    meetUrl?: string | null;
+    htmlLink?: string | null;
+}
+/** Decide reschedule-vs-create: reschedule iff there's an existing event to move,
+ *  so the Meet link + invite thread survive and no second event is minted. */
+declare function bookingDecision(existing: ExistingMeeting | null | undefined): {
+    reschedule: boolean;
+    eventId: string | null;
+};
+/** The create idempotency key — one intro event per application, forever, so a
+ *  retried create returns the same booking rather than a duplicate. */
+declare function introIdempotencyKey(applicationId: string): string;
+/** The canonical `meetings` row for a first booking. A `type` (not `interface`)
+ *  so it stays assignable to a db op's `attrs` (Record<string, unknown>). */
+type NewMeetingRow = {
+    id: string;
+    applicationId: string;
+    groupId: string;
+    startAt: number;
+    endAt: number;
+    timezone: string;
+    status: "scheduled";
+    googleEventId: string;
+    meetUrl?: string;
+    htmlLink?: string;
+    drift: "none";
+    createdAt: number;
+};
+/** Build the new `meetings` row after the calendar created the event. Optional
+ *  scalars are omitted (never null), per the odla-db porting rule. */
+declare function meetingCreateRow(i: {
+    meetingId: string;
+    applicationId: string;
+    groupId: string;
+    startAt: number;
+    endAt: number;
+    timezone: string;
+    googleEventId: string;
+    meetUrl?: string | null;
+    htmlLink?: string | null;
+    createdAt: number;
+}): NewMeetingRow;
+/** The `meetings`-row patch for a reschedule (same row id, moved in place). */
+type MeetingReschedulePatch = {
+    startAt: number;
+    endAt: number;
+    drift: "none";
+};
+/** Patch to move an existing meeting to a new window. */
+declare function meetingRescheduleUpdate(startAt: number, endAt: number): MeetingReschedulePatch;
+/** The `applications`-row patch after a booking. */
+type ApplicationBookingPatch = {
+    meetingAt: number;
+    meetingLink?: string;
+    status?: "call_scheduled";
+};
+/** Project the booking onto the application row: cache the time, adopt the
+ *  calendar link if any, and advance the status to `call_scheduled` unless it is
+ *  already there (never backward). */
+declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
+
+export { type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BOOKABLE_STATUSES, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type PaymentsGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canBookFrom, canChangeRole, canTransition, canceledPatch, chapterDb, createChapterIntegration, defaultCrm, defineChapter, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectSharedRecord, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };