@odla-ai/chapter 0.32.3 → 0.33.0

package/dist/worker/index.d.cts

@@ -72,6 +72,22 @@ type DeepPartial<T> = T extends readonly (infer Item)[] ? readonly Item[] : T ex
 /** Recursively partial copy overrides accepted by `defineChapter({ copy })`. */
 type ChapterCopyInput = DeepPartial<ChapterCopy>;
 
+/** Explicit authority a chapter grants to one Built Not Found-style hub. */
+interface ChapterSignupControl {
+    /** Stable app id expected in the signed delivery envelope. */
+    sourceId: string;
+    /** Follower-vault key holding the dedicated edge secret. */
+    secretName?: string;
+    /** Stripe mode this deployed environment accepts. */
+    stripeMode: "test" | "live";
+}
+/** Validated signup-control authority carried on a resolved Chapter. */
+interface ResolvedSignupControl {
+    sourceId: string;
+    secretName: string;
+    stripeMode: "test" | "live";
+}
+
 /** One follower site a leader can push CRM records to. The secret VALUE never
  * lives in config: `secretName` names the leader tenant's vaulted copy of the
  * follower's `network_share_secret`. */
@@ -441,6 +457,8 @@ interface ChapterConfig {
     /** Signed network edges: leader delivery targets and follower-owned,
      * privacy-bounded record readers. Secret values stay in tenant vaults. */
     network?: ChapterNetwork;
+    /** A separate signed edge that may control this chapter's complete signup. */
+    signupControl?: ChapterSignupControl;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -535,6 +553,8 @@ interface Chapter {
     copy: ChapterCopy;
     /** Validated follower targets for leader-driven record pushes. */
     network: ResolvedNetwork;
+    /** Null unless this follower explicitly delegates signup authority. */
+    signupControl: ResolvedSignupControl | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
@@ -646,6 +666,130 @@ type WorkerContext = ReturnType<typeof createWorkerContext>;
  *  {@link WorkerContext} the built-ins receive. */
 type Route = (req: Request, url: URL, env: ChapterEnv, ctx: WorkerContext) => Promise<Response | null>;
 
+/** The first stable, shared Chapter membership-page renderer contract. */
+declare const MEMBERSHIP_PAGE_RENDERER: "membership-cards-v1";
+/** Fixed visual emphasis choices supported by the versioned card renderer. */
+type MembershipTierVariant = "standard" | "featured" | "supporting";
+/** A bounded, token-rendered aside within one membership card. */
+interface MembershipTierCallout {
+    label?: string;
+    bodyMarkdown: string;
+}
+/** Scarcity copy displayed without changing tier availability or checkout. */
+interface MembershipTierCapacity {
+    total: number;
+    label?: string;
+}
+/**
+ * Presentation attached to one server-authoritative membership tier.
+ *
+ * Price, free/paid state, identity, and application targeting deliberately do
+ * not live here. They are resolved from the public Chapter join config so
+ * authored marketing copy can never change what checkout charges.
+ */
+interface MembershipTierPresentation {
+    tierId: string;
+    variant?: MembershipTierVariant;
+    badge?: string;
+    summaryMarkdown?: string;
+    priceEyebrow?: string;
+    compareAtPriceCents?: number;
+    billingLabel?: string;
+    priceNoteMarkdown?: string;
+    capacity?: MembershipTierCapacity;
+    benefits?: readonly string[];
+    callout?: MembershipTierCallout;
+    ctaLabel?: string;
+}
+/** A bounded document that can be reviewed once and rendered by any Chapter host. */
+interface MembershipPageDocument {
+    schemaVersion: 1;
+    renderer: typeof MEMBERSHIP_PAGE_RENDERER;
+    tiers: readonly MembershipTierPresentation[];
+    footnoteMarkdown?: string;
+}
+
+/** Current wire-format version for complete signup-control documents. */
+declare const SIGNUP_CONTROL_SCHEMA_VERSION: 1;
+/** One authoritative membership tier in a signup-control revision. */
+interface SignupControlTier {
+    id: string;
+    name: string;
+    available: boolean;
+    sortOrder: number;
+    priceCents: number;
+    stripePriceId?: string;
+    blurb?: string;
+}
+/** A bounded application contract. Fields must already exist in the follower schema. */
+interface SignupControlApplication {
+    required: readonly string[];
+    optional: readonly string[];
+    conditions?: Readonly<Record<string, FieldConditions>>;
+    copy?: Readonly<Record<string, string>>;
+}
+/** Delegated legal and trust copy used by the packaged join journey. */
+interface SignupControlPolicy {
+    disclaimerText: string;
+    refundPolicyText: string;
+    trustCopy?: string;
+    commitmentText?: string;
+    normsText?: string;
+}
+/** Bounded semantic design tokens delegated to the chapter signup surface. */
+interface SignupControlTheme {
+    /** Includes color, spacing, and typography tokens such as font families. */
+    tokens: Readonly<Record<string, string | number>>;
+}
+/** Complete desired state delivered by a controlling hub. */
+interface SignupControlDocument {
+    schemaVersion: typeof SIGNUP_CONTROL_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: {
+        appId: string;
+    };
+    target: {
+        chapterId: string;
+        environment: string;
+        stripeMode: "test" | "live";
+    };
+    tiers: readonly SignupControlTier[];
+    membershipPage: MembershipPageDocument;
+    application?: SignupControlApplication;
+    policy?: SignupControlPolicy;
+    scheduling?: ChapterScheduling;
+    theme?: SignupControlTheme;
+}
+/** Digest travels beside the document so the exact desired state is attestable. */
+interface SignupControlEnvelope {
+    digest: string;
+    document: SignupControlDocument;
+}
+/** Exact follower acknowledgement for one accepted or replayed revision. */
+interface SignupControlReceipt {
+    ok: true;
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs for one signed hub-to-follower signup-control request. */
+interface SignupControlDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: SignupControlEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
+declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
+
 /**
  * Build the Cloudflare `ExportedHandler` for a chapter/hub site: Clerk-JWT
  * verification, the source-aware admin gate, the mounted @odla-ai/crm routes, the
@@ -668,4 +812,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ChapterEnv, type ChapterWorkerOptions, type Route, type WorkerContext, chapterWorker, createWorkerContext };
+export { type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverSignupControl };

package/dist/worker/index.d.ts

@@ -72,6 +72,22 @@ type DeepPartial<T> = T extends readonly (infer Item)[] ? readonly Item[] : T ex
 /** Recursively partial copy overrides accepted by `defineChapter({ copy })`. */
 type ChapterCopyInput = DeepPartial<ChapterCopy>;
 
+/** Explicit authority a chapter grants to one Built Not Found-style hub. */
+interface ChapterSignupControl {
+    /** Stable app id expected in the signed delivery envelope. */
+    sourceId: string;
+    /** Follower-vault key holding the dedicated edge secret. */
+    secretName?: string;
+    /** Stripe mode this deployed environment accepts. */
+    stripeMode: "test" | "live";
+}
+/** Validated signup-control authority carried on a resolved Chapter. */
+interface ResolvedSignupControl {
+    sourceId: string;
+    secretName: string;
+    stripeMode: "test" | "live";
+}
+
 /** One follower site a leader can push CRM records to. The secret VALUE never
  * lives in config: `secretName` names the leader tenant's vaulted copy of the
  * follower's `network_share_secret`. */
@@ -441,6 +457,8 @@ interface ChapterConfig {
     /** Signed network edges: leader delivery targets and follower-owned,
      * privacy-bounded record readers. Secret values stay in tenant vaults. */
     network?: ChapterNetwork;
+    /** A separate signed edge that may control this chapter's complete signup. */
+    signupControl?: ChapterSignupControl;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -535,6 +553,8 @@ interface Chapter {
     copy: ChapterCopy;
     /** Validated follower targets for leader-driven record pushes. */
     network: ResolvedNetwork;
+    /** Null unless this follower explicitly delegates signup authority. */
+    signupControl: ResolvedSignupControl | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
@@ -646,6 +666,130 @@ type WorkerContext = ReturnType<typeof createWorkerContext>;
  *  {@link WorkerContext} the built-ins receive. */
 type Route = (req: Request, url: URL, env: ChapterEnv, ctx: WorkerContext) => Promise<Response | null>;
 
+/** The first stable, shared Chapter membership-page renderer contract. */
+declare const MEMBERSHIP_PAGE_RENDERER: "membership-cards-v1";
+/** Fixed visual emphasis choices supported by the versioned card renderer. */
+type MembershipTierVariant = "standard" | "featured" | "supporting";
+/** A bounded, token-rendered aside within one membership card. */
+interface MembershipTierCallout {
+    label?: string;
+    bodyMarkdown: string;
+}
+/** Scarcity copy displayed without changing tier availability or checkout. */
+interface MembershipTierCapacity {
+    total: number;
+    label?: string;
+}
+/**
+ * Presentation attached to one server-authoritative membership tier.
+ *
+ * Price, free/paid state, identity, and application targeting deliberately do
+ * not live here. They are resolved from the public Chapter join config so
+ * authored marketing copy can never change what checkout charges.
+ */
+interface MembershipTierPresentation {
+    tierId: string;
+    variant?: MembershipTierVariant;
+    badge?: string;
+    summaryMarkdown?: string;
+    priceEyebrow?: string;
+    compareAtPriceCents?: number;
+    billingLabel?: string;
+    priceNoteMarkdown?: string;
+    capacity?: MembershipTierCapacity;
+    benefits?: readonly string[];
+    callout?: MembershipTierCallout;
+    ctaLabel?: string;
+}
+/** A bounded document that can be reviewed once and rendered by any Chapter host. */
+interface MembershipPageDocument {
+    schemaVersion: 1;
+    renderer: typeof MEMBERSHIP_PAGE_RENDERER;
+    tiers: readonly MembershipTierPresentation[];
+    footnoteMarkdown?: string;
+}
+
+/** Current wire-format version for complete signup-control documents. */
+declare const SIGNUP_CONTROL_SCHEMA_VERSION: 1;
+/** One authoritative membership tier in a signup-control revision. */
+interface SignupControlTier {
+    id: string;
+    name: string;
+    available: boolean;
+    sortOrder: number;
+    priceCents: number;
+    stripePriceId?: string;
+    blurb?: string;
+}
+/** A bounded application contract. Fields must already exist in the follower schema. */
+interface SignupControlApplication {
+    required: readonly string[];
+    optional: readonly string[];
+    conditions?: Readonly<Record<string, FieldConditions>>;
+    copy?: Readonly<Record<string, string>>;
+}
+/** Delegated legal and trust copy used by the packaged join journey. */
+interface SignupControlPolicy {
+    disclaimerText: string;
+    refundPolicyText: string;
+    trustCopy?: string;
+    commitmentText?: string;
+    normsText?: string;
+}
+/** Bounded semantic design tokens delegated to the chapter signup surface. */
+interface SignupControlTheme {
+    /** Includes color, spacing, and typography tokens such as font families. */
+    tokens: Readonly<Record<string, string | number>>;
+}
+/** Complete desired state delivered by a controlling hub. */
+interface SignupControlDocument {
+    schemaVersion: typeof SIGNUP_CONTROL_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: {
+        appId: string;
+    };
+    target: {
+        chapterId: string;
+        environment: string;
+        stripeMode: "test" | "live";
+    };
+    tiers: readonly SignupControlTier[];
+    membershipPage: MembershipPageDocument;
+    application?: SignupControlApplication;
+    policy?: SignupControlPolicy;
+    scheduling?: ChapterScheduling;
+    theme?: SignupControlTheme;
+}
+/** Digest travels beside the document so the exact desired state is attestable. */
+interface SignupControlEnvelope {
+    digest: string;
+    document: SignupControlDocument;
+}
+/** Exact follower acknowledgement for one accepted or replayed revision. */
+interface SignupControlReceipt {
+    ok: true;
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs for one signed hub-to-follower signup-control request. */
+interface SignupControlDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: SignupControlEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
+declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
+
 /**
  * Build the Cloudflare `ExportedHandler` for a chapter/hub site: Clerk-JWT
  * verification, the source-aware admin gate, the mounted @odla-ai/crm routes, the
@@ -668,4 +812,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ChapterEnv, type ChapterWorkerOptions, type Route, type WorkerContext, chapterWorker, createWorkerContext };
+export { type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverSignupControl };