@odla-ai/chapter 0.30.0 → 0.31.0

package/dist/index.d.cts

@@ -1,4 +1,103 @@
-import { CrmConfig, Crm, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
+import { CrmConfig, Crm, FieldConditions, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
+
+/** One membership tier a chapter offers. `priceCents: 0` means free. */
+interface ChapterTier {
+    /** Stable slug, referenced by `applications.tierId`. Never renumbered. */
+    id: string;
+    /** The group this tier belongs to. */
+    groupId: string;
+    /** Display name, e.g. "Founding". */
+    name: string;
+    /** Price in minor units. `0` is free and needs no Stripe price. */
+    priceCents: number;
+    /** Stripe price to subscribe. Required only when `priceCents > 0`. */
+    stripePriceId?: string | null;
+    /** Short description shown beside the tier on the join page. */
+    blurb?: string;
+    /** Ascending display order; ties fall back to `id` for a stable sort. */
+    sortOrder: number;
+    /** An inactive tier is retained for existing members but never offered. */
+    active: boolean;
+}
+/**
+ * A tier as declared in `defineChapter`, before it becomes a row.
+ *
+ * `groupId` is absent here because the chapter owns exactly one group at seed
+ * time; the seeder fills it in.
+ */
+interface ChapterTierConfig {
+    id: string;
+    name: string;
+    priceCents: number;
+    stripePriceId?: string;
+    blurb?: string;
+    /** Defaults to declaration order when omitted. */
+    sortOrder?: number;
+    /** Defaults to true; set false to retire a tier without deleting it. */
+    active?: boolean;
+}
+/** Build the seed rows for a chapter's declared tiers. */
+declare function buildTierSeeds(groupId: string, configured?: readonly ChapterTierConfig[], now?: number): Array<Record<string, unknown>>;
+/** The `groups`-row fields tier payability depends on. */
+interface TierGroup {
+    id?: string;
+    stripePublishableKey?: string | null;
+    /** Legacy single price, used only to synthesize an implicit tier. */
+    stripePriceId?: string | null;
+    standardPriceCents?: number;
+    foundingDiscountCents?: number;
+}
+/**
+ * Whether this tier costs nothing. A free tier never touches Stripe.
+ *
+ * Free means both no price AND no Stripe price to charge against. The second
+ * half matters for chapters that predate tiers: a group can carry a real
+ * `stripePriceId` while `standardPriceCents` is 0, because the cents field is
+ * display copy and the amount actually lives in Stripe. Reading such a group as
+ * free would silently stop charging an existing paying chapter.
+ */
+declare function tierIsFree(tier: Pick<ChapterTier, "priceCents"> & {
+    stripePriceId?: string | null;
+}): boolean;
+/**
+ * Whether a tier can actually be joined right now.
+ *
+ * A free tier is always joinable — there is nothing to charge, so Stripe being
+ * unconfigured is irrelevant to it. A paid tier needs the group's publishable
+ * key, its own Stripe price, and the vault secret; missing any of those drops
+ * the tier rather than half-charging for it.
+ */
+declare function tierPayable(tier: Pick<ChapterTier, "priceCents" | "stripePriceId">, group: TierGroup, hasSecretKey: boolean): boolean;
+/**
+ * The tiers a chapter offers, given the stored rows.
+ *
+ * A chapter that predates tiers has no rows, and must keep working untouched:
+ * one implicit `"standard"` tier is synthesized from the group's legacy
+ * `standardPriceCents`/`stripePriceId` columns. That is why there is no
+ * migration — an existing chapter reads exactly as it did before, and writing
+ * its first real tier row takes over.
+ */
+declare function resolveTiers(group: TierGroup, rows?: readonly ChapterTier[]): ChapterTier[];
+/** The tiers to show on the join page: active, and joinable as configured. */
+declare function offerableTiers(tiers: readonly ChapterTier[], group: TierGroup, hasSecretKey: boolean): ChapterTier[];
+/**
+ * Resolve the tier an application chose.
+ *
+ * An absent `tierId` is the pre-tier case and selects the only offered tier
+ * when exactly one exists; with several it is genuinely ambiguous and returns
+ * `null`, because guessing would charge someone the wrong price.
+ */
+declare function findTier(tiers: readonly ChapterTier[], tierId: string | null | undefined): ChapterTier | null;
+/** The public shape of a tier on the join config. Never exposes Stripe ids. */
+interface JoinConfigTier {
+    id: string;
+    name: string;
+    priceCents: number;
+    blurb: string;
+    free: boolean;
+}
+/** Project tiers for the public join config, dropping provider identifiers. */
+declare function joinConfigTiers(tiers: readonly ChapterTier[]): JoinConfigTier[];
 
 type TextFields$1<Key extends string> = {
     [Field in Key]: string;
@@ -153,6 +252,30 @@ interface ResolvedNetwork {
     readers: readonly ResolvedNetworkReader[];
 }
 
+/**
+ * Membership pricing for the group row (chapter mode).
+ *
+ * This is the single-price model that predates tiers. It still seeds the group
+ * row and remains the fallback a chapter reads when it declares no tiers, so
+ * existing chapters keep working; new work should prefer `tiers`.
+ */
+interface ChapterPrices {
+    standardCents: number;
+    foundingDiscountCents?: number;
+    /** ISO currency, default "usd". */
+    currency?: string;
+    /** Billing interval, default "year". */
+    interval?: "year" | "month";
+}
+/** Membership policy + compliance copy stored on the group row. */
+interface ChapterPolicy {
+    disclaimerText?: string;
+    refundPolicyText?: string;
+    trustCopy?: string;
+    commitmentText?: string;
+    normsText?: string;
+}
+
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
@@ -280,23 +403,7 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
-/** Membership pricing for the group row (chapter mode). */
-interface ChapterPrices {
-    standardCents: number;
-    foundingDiscountCents?: number;
-    /** ISO currency, default "usd". */
-    currency?: string;
-    /** Billing interval, default "year". */
-    interval?: "year" | "month";
-}
-/** Membership policy + compliance copy stored on the group row. */
-interface ChapterPolicy {
-    disclaimerText?: string;
-    refundPolicyText?: string;
-    trustCopy?: string;
-    commitmentText?: string;
-    normsText?: string;
-}
+
 /** One owner-editable transactional email template. */
 interface EmailTemplate {
     subject: string;
@@ -378,6 +485,11 @@ interface ResolvedPipeline {
 interface ChapterApplication {
     required?: readonly string[];
     optional?: readonly string[];
+    /** Per-field CEL conditions — show a field, or demand it, based on the
+     *  answers so far. Enforced server-side as well as rendered, so a hidden
+     *  field is never demanded and a conditionally-required one cannot be
+     *  skipped by posting directly. Validated when the chapter is defined. */
+    conditions?: Record<string, FieldConditions>;
     /** Per-field character cap. Fields not listed use `defaultMaxLen`. */
     maxLen?: Record<string, number>;
     defaultMaxLen?: number;
@@ -418,6 +530,8 @@ interface ResolvedApplication {
     crmFields: readonly string[];
     maxArrayLen: number;
     validateEmail: boolean;
+    /** Resolved per-field conditions. Empty means every field is unconditional. */
+    conditions: Record<string, FieldConditions>;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {
@@ -439,8 +553,10 @@ interface ChapterConfig {
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
-    /** Required in `chapter` mode. */
+    /** Required in `chapter` mode, and the fallback when `tiers` is empty. */
     prices?: ChapterPrices;
+    /** Membership tiers. A tier priced at 0 is free and never touches Stripe. */
+    tiers?: ChapterTierConfig[];
     policy?: ChapterPolicy;
     /** `notificationEmail` required in `chapter` mode. */
     emails?: ChapterEmails;
@@ -1005,6 +1121,9 @@ declare function submitApplication(db: ChapterDb, chapter: Chapter, fields: Reco
     groupId?: string;
     now: number;
     newId: () => string;
+    /** Tier ids this chapter offers. A posted `tierId` outside it is refused;
+     *  omit to accept any (pre-tier callers). */
+    tierIds?: readonly string[];
 }): Promise<SubmitResult>;
 /** The `groups`-row fields the join config exposes. */
 interface JoinConfigGroup {
@@ -1023,8 +1142,14 @@ interface JoinConfigGroup {
  * group row plus `paymentsReady`. When payments aren't wired the join flow drops
  * the payment step (C2) — the worker computes `paymentsReady` from the group's
  * Stripe keys + vault secret. Pure.
+ *
+ * `tiers` carries the offerable membership tiers. It is additive: the legacy
+ * `standardPriceCents`/`foundingDiscountCents` fields still describe the first
+ * tier, so a join page written before tiers keeps rendering unchanged. A free
+ * tier appears here with `free: true` even when Stripe is unconfigured, because
+ * nothing needs charging for it.
  */
-declare function joinConfig(group: JoinConfigGroup, paymentsReady: boolean): Record<string, unknown>;
+declare function joinConfig(group: JoinConfigGroup, paymentsReady: boolean, tiers?: readonly JoinConfigTier[], conditions?: Readonly<Record<string, FieldConditions>>): Record<string, unknown>;
 
 /** The contact data the hub shares for a prospect. `hubRecordId` is the stable
  * idempotency key (the hub's crm_record id). */
@@ -1724,4 +1849,18 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, leaderCrmConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateScheduling, verifyStripeSignature, webhookMutationId };
+/** A `groups` row as the tier loader needs it. */
+type TierGroupRow = TierGroup & {
+    id?: string;
+};
+/**
+ * Every tier a group offers, ordered, including the implicit tier synthesized
+ * for a chapter that predates tiers. Never throws on a missing namespace: a
+ * deployment whose schema has not been pushed yet reads as "no rows", which
+ * resolves to the legacy single tier.
+ */
+declare function loadTiers(db: ChapterDb, group: TierGroupRow): Promise<ChapterTier[]>;
+/** The tiers a join page may show: active, and joinable as configured. */
+declare function loadOfferableTiers(db: ChapterDb, group: TierGroupRow, hasSecretKey: boolean): Promise<ChapterTier[]>;
+
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateScheduling, verifyStripeSignature, webhookMutationId };

package/dist/index.d.ts

@@ -1,4 +1,103 @@
-import { CrmConfig, Crm, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
+import { CrmConfig, Crm, FieldConditions, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
+
+/** One membership tier a chapter offers. `priceCents: 0` means free. */
+interface ChapterTier {
+    /** Stable slug, referenced by `applications.tierId`. Never renumbered. */
+    id: string;
+    /** The group this tier belongs to. */
+    groupId: string;
+    /** Display name, e.g. "Founding". */
+    name: string;
+    /** Price in minor units. `0` is free and needs no Stripe price. */
+    priceCents: number;
+    /** Stripe price to subscribe. Required only when `priceCents > 0`. */
+    stripePriceId?: string | null;
+    /** Short description shown beside the tier on the join page. */
+    blurb?: string;
+    /** Ascending display order; ties fall back to `id` for a stable sort. */
+    sortOrder: number;
+    /** An inactive tier is retained for existing members but never offered. */
+    active: boolean;
+}
+/**
+ * A tier as declared in `defineChapter`, before it becomes a row.
+ *
+ * `groupId` is absent here because the chapter owns exactly one group at seed
+ * time; the seeder fills it in.
+ */
+interface ChapterTierConfig {
+    id: string;
+    name: string;
+    priceCents: number;
+    stripePriceId?: string;
+    blurb?: string;
+    /** Defaults to declaration order when omitted. */
+    sortOrder?: number;
+    /** Defaults to true; set false to retire a tier without deleting it. */
+    active?: boolean;
+}
+/** Build the seed rows for a chapter's declared tiers. */
+declare function buildTierSeeds(groupId: string, configured?: readonly ChapterTierConfig[], now?: number): Array<Record<string, unknown>>;
+/** The `groups`-row fields tier payability depends on. */
+interface TierGroup {
+    id?: string;
+    stripePublishableKey?: string | null;
+    /** Legacy single price, used only to synthesize an implicit tier. */
+    stripePriceId?: string | null;
+    standardPriceCents?: number;
+    foundingDiscountCents?: number;
+}
+/**
+ * Whether this tier costs nothing. A free tier never touches Stripe.
+ *
+ * Free means both no price AND no Stripe price to charge against. The second
+ * half matters for chapters that predate tiers: a group can carry a real
+ * `stripePriceId` while `standardPriceCents` is 0, because the cents field is
+ * display copy and the amount actually lives in Stripe. Reading such a group as
+ * free would silently stop charging an existing paying chapter.
+ */
+declare function tierIsFree(tier: Pick<ChapterTier, "priceCents"> & {
+    stripePriceId?: string | null;
+}): boolean;
+/**
+ * Whether a tier can actually be joined right now.
+ *
+ * A free tier is always joinable — there is nothing to charge, so Stripe being
+ * unconfigured is irrelevant to it. A paid tier needs the group's publishable
+ * key, its own Stripe price, and the vault secret; missing any of those drops
+ * the tier rather than half-charging for it.
+ */
+declare function tierPayable(tier: Pick<ChapterTier, "priceCents" | "stripePriceId">, group: TierGroup, hasSecretKey: boolean): boolean;
+/**
+ * The tiers a chapter offers, given the stored rows.
+ *
+ * A chapter that predates tiers has no rows, and must keep working untouched:
+ * one implicit `"standard"` tier is synthesized from the group's legacy
+ * `standardPriceCents`/`stripePriceId` columns. That is why there is no
+ * migration — an existing chapter reads exactly as it did before, and writing
+ * its first real tier row takes over.
+ */
+declare function resolveTiers(group: TierGroup, rows?: readonly ChapterTier[]): ChapterTier[];
+/** The tiers to show on the join page: active, and joinable as configured. */
+declare function offerableTiers(tiers: readonly ChapterTier[], group: TierGroup, hasSecretKey: boolean): ChapterTier[];
+/**
+ * Resolve the tier an application chose.
+ *
+ * An absent `tierId` is the pre-tier case and selects the only offered tier
+ * when exactly one exists; with several it is genuinely ambiguous and returns
+ * `null`, because guessing would charge someone the wrong price.
+ */
+declare function findTier(tiers: readonly ChapterTier[], tierId: string | null | undefined): ChapterTier | null;
+/** The public shape of a tier on the join config. Never exposes Stripe ids. */
+interface JoinConfigTier {
+    id: string;
+    name: string;
+    priceCents: number;
+    blurb: string;
+    free: boolean;
+}
+/** Project tiers for the public join config, dropping provider identifiers. */
+declare function joinConfigTiers(tiers: readonly ChapterTier[]): JoinConfigTier[];
 
 type TextFields$1<Key extends string> = {
     [Field in Key]: string;
@@ -153,6 +252,30 @@ interface ResolvedNetwork {
     readers: readonly ResolvedNetworkReader[];
 }
 
+/**
+ * Membership pricing for the group row (chapter mode).
+ *
+ * This is the single-price model that predates tiers. It still seeds the group
+ * row and remains the fallback a chapter reads when it declares no tiers, so
+ * existing chapters keep working; new work should prefer `tiers`.
+ */
+interface ChapterPrices {
+    standardCents: number;
+    foundingDiscountCents?: number;
+    /** ISO currency, default "usd". */
+    currency?: string;
+    /** Billing interval, default "year". */
+    interval?: "year" | "month";
+}
+/** Membership policy + compliance copy stored on the group row. */
+interface ChapterPolicy {
+    disclaimerText?: string;
+    refundPolicyText?: string;
+    trustCopy?: string;
+    commitmentText?: string;
+    normsText?: string;
+}
+
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
@@ -280,23 +403,7 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
-/** Membership pricing for the group row (chapter mode). */
-interface ChapterPrices {
-    standardCents: number;
-    foundingDiscountCents?: number;
-    /** ISO currency, default "usd". */
-    currency?: string;
-    /** Billing interval, default "year". */
-    interval?: "year" | "month";
-}
-/** Membership policy + compliance copy stored on the group row. */
-interface ChapterPolicy {
-    disclaimerText?: string;
-    refundPolicyText?: string;
-    trustCopy?: string;
-    commitmentText?: string;
-    normsText?: string;
-}
+
 /** One owner-editable transactional email template. */
 interface EmailTemplate {
     subject: string;
@@ -378,6 +485,11 @@ interface ResolvedPipeline {
 interface ChapterApplication {
     required?: readonly string[];
     optional?: readonly string[];
+    /** Per-field CEL conditions — show a field, or demand it, based on the
+     *  answers so far. Enforced server-side as well as rendered, so a hidden
+     *  field is never demanded and a conditionally-required one cannot be
+     *  skipped by posting directly. Validated when the chapter is defined. */
+    conditions?: Record<string, FieldConditions>;
     /** Per-field character cap. Fields not listed use `defaultMaxLen`. */
     maxLen?: Record<string, number>;
     defaultMaxLen?: number;
@@ -418,6 +530,8 @@ interface ResolvedApplication {
     crmFields: readonly string[];
     maxArrayLen: number;
     validateEmail: boolean;
+    /** Resolved per-field conditions. Empty means every field is unconditional. */
+    conditions: Record<string, FieldConditions>;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {
@@ -439,8 +553,10 @@ interface ChapterConfig {
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
-    /** Required in `chapter` mode. */
+    /** Required in `chapter` mode, and the fallback when `tiers` is empty. */
     prices?: ChapterPrices;
+    /** Membership tiers. A tier priced at 0 is free and never touches Stripe. */
+    tiers?: ChapterTierConfig[];
     policy?: ChapterPolicy;
     /** `notificationEmail` required in `chapter` mode. */
     emails?: ChapterEmails;
@@ -1005,6 +1121,9 @@ declare function submitApplication(db: ChapterDb, chapter: Chapter, fields: Reco
     groupId?: string;
     now: number;
     newId: () => string;
+    /** Tier ids this chapter offers. A posted `tierId` outside it is refused;
+     *  omit to accept any (pre-tier callers). */
+    tierIds?: readonly string[];
 }): Promise<SubmitResult>;
 /** The `groups`-row fields the join config exposes. */
 interface JoinConfigGroup {
@@ -1023,8 +1142,14 @@ interface JoinConfigGroup {
  * group row plus `paymentsReady`. When payments aren't wired the join flow drops
  * the payment step (C2) — the worker computes `paymentsReady` from the group's
  * Stripe keys + vault secret. Pure.
+ *
+ * `tiers` carries the offerable membership tiers. It is additive: the legacy
+ * `standardPriceCents`/`foundingDiscountCents` fields still describe the first
+ * tier, so a join page written before tiers keeps rendering unchanged. A free
+ * tier appears here with `free: true` even when Stripe is unconfigured, because
+ * nothing needs charging for it.
  */
-declare function joinConfig(group: JoinConfigGroup, paymentsReady: boolean): Record<string, unknown>;
+declare function joinConfig(group: JoinConfigGroup, paymentsReady: boolean, tiers?: readonly JoinConfigTier[], conditions?: Readonly<Record<string, FieldConditions>>): Record<string, unknown>;
 
 /** The contact data the hub shares for a prospect. `hubRecordId` is the stable
  * idempotency key (the hub's crm_record id). */
@@ -1724,4 +1849,18 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, leaderCrmConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateScheduling, verifyStripeSignature, webhookMutationId };
+/** A `groups` row as the tier loader needs it. */
+type TierGroupRow = TierGroup & {
+    id?: string;
+};
+/**
+ * Every tier a group offers, ordered, including the implicit tier synthesized
+ * for a chapter that predates tiers. Never throws on a missing namespace: a
+ * deployment whose schema has not been pushed yet reads as "no rows", which
+ * resolves to the legacy single tier.
+ */
+declare function loadTiers(db: ChapterDb, group: TierGroupRow): Promise<ChapterTier[]>;
+/** The tiers a join page may show: active, and joinable as configured. */
+declare function loadOfferableTiers(db: ChapterDb, group: TierGroupRow, hasSecretKey: boolean): Promise<ChapterTier[]>;
+
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateScheduling, verifyStripeSignature, webhookMutationId };