@odla-ai/chapter 0.33.2 → 0.35.0

package/dist/index.d.cts

@@ -1,6 +1,7 @@
 import { CrmConfig, Crm, FieldConditions, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
 import { StripeRequestResult } from '@odla-ai/stripe';
 export { stripeForm, verifyStripeSignature } from '@odla-ai/stripe';
+import { PromotionAdapterResult } from '@odla-ai/promotion';
 
 /** One membership tier a chapter offers. `priceCents: 0` means free. */
 interface ChapterTier {
@@ -300,16 +301,26 @@ interface ChapterPolicy {
 type ChapterMode = "chapter" | "hub";
 /** One odla-db transaction op — the wire shape both the real admin client and a
  *  test double (`FakeDb`) accept. Built as a plain object, never via a `tx` proxy. */
-interface DbOp<Id extends string | {
+type DbOp<Id extends string | {
     ns: string;
     attr: string;
     value: string | number | boolean;
-} = string> {
-    t: "update" | "merge" | "retract" | "delete";
+} = string> = {
+    t: "update" | "merge";
     ns: string;
     id: Id;
-    attrs?: Record<string, unknown>;
-}
+    attrs: Record<string, unknown>;
+} | {
+    t: "retract";
+    ns: string;
+    id: Id;
+    attrs: string[];
+} | {
+    t: "delete";
+    ns: string;
+    id: Id;
+    attrs?: undefined;
+};
 /** The structural view of the odla-db admin client the worker builds and the
  *  member routes consume — so route logic is testable against an in-memory fake. */
 interface ChapterDb {
@@ -2057,6 +2068,59 @@ declare function createSignupControlEnvelope(document: SignupControlDocument): P
 /** Validate and normalize one complete desired signup state. */
 declare function validateSignupControlDocument(input: unknown): SignupControlValidation;
 
+/** Stable marker a static document can place where managed signup tokens belong. */
+declare const SIGNUP_CONTROL_THEME_MARKER: "<!--odla:signup-control-theme-->";
+/** Stable id shared by the server renderer and browser hydration helper. */
+declare const SIGNUP_CONTROL_THEME_STYLE_ID: "odla-signup-control-theme";
+/** The active revision shape exposed by `GET /api/join-config`. */
+interface SignupControlThemeRevision {
+    revision: number;
+    digest: string;
+    theme?: SignupControlTheme;
+}
+/** Identity shared by initial HTML, response caching, and client hydration. */
+interface SignupControlThemeMetadata {
+    source: "active" | "bootstrap";
+    revision: number | null;
+    digest: string | null;
+    /** Include this value in any host-owned cache key for transformed HTML. */
+    cacheKey: string;
+}
+/** A validated style block ready to place in an HTML head. */
+interface SignupControlThemeHead {
+    css: string;
+    head: string;
+    metadata: SignupControlThemeMetadata;
+}
+/** Minimal DOM surface required by {@link hydrateSignupControlTheme}. */
+interface SignupControlThemeStyleTarget {
+    textContent: string | null;
+    getAttribute(name: string): string | null;
+    setAttribute(name: string, value: string): void;
+    removeAttribute(name: string): void;
+}
+/** Host-owned fallback inputs shared by server rendering and hydration. */
+interface SignupControlThemeOptions {
+    /** Local site-owned tokens used only when no active managed revision exists. */
+    bootstrapTokens?: Readonly<Record<string, string | number>>;
+}
+/**
+ * Render validated signup-control tokens for the initial HTML head. Passing
+ * `null` emits the deterministic local bootstrap state; it never performs I/O.
+ */
+declare function renderSignupControlThemeHead(revision: SignupControlThemeRevision | null, options?: SignupControlThemeOptions): SignupControlThemeHead;
+/**
+ * Replace the stable marker (preferred), an earlier Chapter style block, or the
+ * closing head tag. The returned HTML always contains exactly one managed block.
+ */
+declare function injectSignupControlThemeHead(html: string, rendered: SignupControlThemeHead, marker?: string): string;
+/**
+ * Apply a newly fetched revision to the server-rendered style element. When the
+ * revision and digest already match, this performs no writes and returns false,
+ * so hydration cannot cause a visual token change.
+ */
+declare function hydrateSignupControlTheme(target: SignupControlThemeStyleTarget, revision: SignupControlThemeRevision | null, options?: SignupControlThemeOptions): boolean;
+
 /** A presentation overlay parsed from the constrained membership Markdown convention. */
 type MembershipTierMarkdownResult = {
     ok: true;
@@ -2080,4 +2144,14 @@ declare function applyMembershipTierMarkdown(presentation: MembershipTierPresent
 /** Apply constrained membership Markdown or fail closed with actionable errors. */
 declare function membershipTierPresentationFromMarkdown(presentation: MembershipTierPresentation, source: string): MembershipTierPresentation;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, MEMBERSHIP_PAGE_RENDERER, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlTheme, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, applyMembershipTierMarkdown, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, canonicalSignupControl, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, membershipPageDocument, membershipTierPresentationFromMarkdown, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateMembershipPageDocument, validateScheduling, validateSignupControlDocument, webhookMutationId };
+/** Stable adapter identity bound into Chapter artifact provenance. */
+declare const CHAPTER_PROMOTION_ADAPTER = "@odla-ai/chapter/v1";
+/** One exact, digest-verified signup-control revision to export. */
+interface ChapterPromotionInput {
+    document: SignupControlDocument;
+    digest: string;
+}
+/** Export the provider-independent pieces of one exact active signup revision. */
+declare function exportChapterPromotion(input: ChapterPromotionInput): Promise<PromotionAdapterResult>;
+
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, CHAPTER_PROMOTION_ADAPTER, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterPromotionInput, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, MEMBERSHIP_PAGE_RENDERER, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, SIGNUP_CONTROL_THEME_MARKER, SIGNUP_CONTROL_THEME_STYLE_ID, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlTheme, type SignupControlThemeHead, type SignupControlThemeMetadata, type SignupControlThemeOptions, type SignupControlThemeRevision, type SignupControlThemeStyleTarget, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, applyMembershipTierMarkdown, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, canonicalSignupControl, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, exportChapterPromotion, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, hydrateSignupControlTheme, injectSignupControlThemeHead, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, membershipPageDocument, membershipTierPresentationFromMarkdown, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSignupControlThemeHead, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateMembershipPageDocument, validateScheduling, validateSignupControlDocument, webhookMutationId };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { CrmConfig, Crm, FieldConditions, TypeDef, FieldDef, TypeSummary, CrmRecord } from '@odla-ai/crm';
 import { StripeRequestResult } from '@odla-ai/stripe';
 export { stripeForm, verifyStripeSignature } from '@odla-ai/stripe';
+import { PromotionAdapterResult } from '@odla-ai/promotion';
 
 /** One membership tier a chapter offers. `priceCents: 0` means free. */
 interface ChapterTier {
@@ -300,16 +301,26 @@ interface ChapterPolicy {
 type ChapterMode = "chapter" | "hub";
 /** One odla-db transaction op — the wire shape both the real admin client and a
  *  test double (`FakeDb`) accept. Built as a plain object, never via a `tx` proxy. */
-interface DbOp<Id extends string | {
+type DbOp<Id extends string | {
     ns: string;
     attr: string;
     value: string | number | boolean;
-} = string> {
-    t: "update" | "merge" | "retract" | "delete";
+} = string> = {
+    t: "update" | "merge";
     ns: string;
     id: Id;
-    attrs?: Record<string, unknown>;
-}
+    attrs: Record<string, unknown>;
+} | {
+    t: "retract";
+    ns: string;
+    id: Id;
+    attrs: string[];
+} | {
+    t: "delete";
+    ns: string;
+    id: Id;
+    attrs?: undefined;
+};
 /** The structural view of the odla-db admin client the worker builds and the
  *  member routes consume — so route logic is testable against an in-memory fake. */
 interface ChapterDb {
@@ -2057,6 +2068,59 @@ declare function createSignupControlEnvelope(document: SignupControlDocument): P
 /** Validate and normalize one complete desired signup state. */
 declare function validateSignupControlDocument(input: unknown): SignupControlValidation;
 
+/** Stable marker a static document can place where managed signup tokens belong. */
+declare const SIGNUP_CONTROL_THEME_MARKER: "<!--odla:signup-control-theme-->";
+/** Stable id shared by the server renderer and browser hydration helper. */
+declare const SIGNUP_CONTROL_THEME_STYLE_ID: "odla-signup-control-theme";
+/** The active revision shape exposed by `GET /api/join-config`. */
+interface SignupControlThemeRevision {
+    revision: number;
+    digest: string;
+    theme?: SignupControlTheme;
+}
+/** Identity shared by initial HTML, response caching, and client hydration. */
+interface SignupControlThemeMetadata {
+    source: "active" | "bootstrap";
+    revision: number | null;
+    digest: string | null;
+    /** Include this value in any host-owned cache key for transformed HTML. */
+    cacheKey: string;
+}
+/** A validated style block ready to place in an HTML head. */
+interface SignupControlThemeHead {
+    css: string;
+    head: string;
+    metadata: SignupControlThemeMetadata;
+}
+/** Minimal DOM surface required by {@link hydrateSignupControlTheme}. */
+interface SignupControlThemeStyleTarget {
+    textContent: string | null;
+    getAttribute(name: string): string | null;
+    setAttribute(name: string, value: string): void;
+    removeAttribute(name: string): void;
+}
+/** Host-owned fallback inputs shared by server rendering and hydration. */
+interface SignupControlThemeOptions {
+    /** Local site-owned tokens used only when no active managed revision exists. */
+    bootstrapTokens?: Readonly<Record<string, string | number>>;
+}
+/**
+ * Render validated signup-control tokens for the initial HTML head. Passing
+ * `null` emits the deterministic local bootstrap state; it never performs I/O.
+ */
+declare function renderSignupControlThemeHead(revision: SignupControlThemeRevision | null, options?: SignupControlThemeOptions): SignupControlThemeHead;
+/**
+ * Replace the stable marker (preferred), an earlier Chapter style block, or the
+ * closing head tag. The returned HTML always contains exactly one managed block.
+ */
+declare function injectSignupControlThemeHead(html: string, rendered: SignupControlThemeHead, marker?: string): string;
+/**
+ * Apply a newly fetched revision to the server-rendered style element. When the
+ * revision and digest already match, this performs no writes and returns false,
+ * so hydration cannot cause a visual token change.
+ */
+declare function hydrateSignupControlTheme(target: SignupControlThemeStyleTarget, revision: SignupControlThemeRevision | null, options?: SignupControlThemeOptions): boolean;
+
 /** A presentation overlay parsed from the constrained membership Markdown convention. */
 type MembershipTierMarkdownResult = {
     ok: true;
@@ -2080,4 +2144,14 @@ declare function applyMembershipTierMarkdown(presentation: MembershipTierPresent
 /** Apply constrained membership Markdown or fail closed with actionable errors. */
 declare function membershipTierPresentationFromMarkdown(presentation: MembershipTierPresentation, source: string): MembershipTierPresentation;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, MEMBERSHIP_PAGE_RENDERER, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlTheme, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, applyMembershipTierMarkdown, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, canonicalSignupControl, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, membershipPageDocument, membershipTierPresentationFromMarkdown, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateMembershipPageDocument, validateScheduling, validateSignupControlDocument, webhookMutationId };
+/** Stable adapter identity bound into Chapter artifact provenance. */
+declare const CHAPTER_PROMOTION_ADAPTER = "@odla-ai/chapter/v1";
+/** One exact, digest-verified signup-control revision to export. */
+interface ChapterPromotionInput {
+    document: SignupControlDocument;
+    digest: string;
+}
+/** Export the provider-independent pieces of one exact active signup revision. */
+declare function exportChapterPromotion(input: ChapterPromotionInput): Promise<PromotionAdapterResult>;
+
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, CHAPTER_PROMOTION_ADAPTER, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterPromotionInput, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type CompiledChapterBrandTokens, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type JoinConfigTier, type LeaderCrmOptions, type LeaderFormationConfig, type LiveEvent, MEMBERSHIP_PAGE_RENDERER, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NetworkRecord, type NetworkRecordNote, type NetworkRecordPage, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedLeaderFormation, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, SIGNUP_CONTROL_THEME_MARKER, SIGNUP_CONTROL_THEME_STYLE_ID, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlTheme, type SignupControlThemeHead, type SignupControlThemeMetadata, type SignupControlThemeOptions, type SignupControlThemeRevision, type SignupControlThemeStyleTarget, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, applyMembershipTierMarkdown, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, buildTierSeeds, canApprove, canBook, canChangeRole, canTransition, canceledPatch, canonicalSignupControl, chapterBrandFromTokens, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, emailGroupFrom, endForSlot, exportChapterPromotion, findApplicationRef, findTier, firstPaymentPatch, formatChapterCopy, formationFields, getVaultSecret, hasDisclaimerAck, hydrateSignupControlTheme, injectSignupControlThemeHead, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, joinConfigTiers, leaderCrmConfig, loadOfferableTiers, loadTiers, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, membershipPageDocument, membershipTierPresentationFromMarkdown, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSignupControlThemeHead, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolveChapterCopy, resolveLeaderFormation, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateMembershipPageDocument, validateScheduling, validateSignupControlDocument, webhookMutationId };

package/dist/index.js

@@ -2894,12 +2894,18 @@ function themeOf(value, errors) {
   }
   unknownKeys(input, /* @__PURE__ */ new Set(["tokens"]), "document.theme", errors);
   if (Object.keys(tokens).length > 256) errors.push("document.theme.tokens supports at most 256 entries");
+  let serializedLength = 0;
   for (const [key, token] of Object.entries(tokens)) {
-    if (!/^--[a-z0-9-]{1,100}$/.test(key)) errors.push(`document.theme.tokens.${key} must be a CSS custom-property name`);
-    if (typeof token !== "string" && typeof token !== "number" || String(token).length > 1e3) {
-      errors.push(`document.theme.tokens.${key} must be a bounded string or number`);
+    if (!/^--ui-[a-z0-9][a-z0-9-]{0,94}$/.test(key)) {
+      errors.push(`document.theme.tokens.${key} must be an allowlisted --ui-* custom property`);
+    }
+    const rendered = String(token).trim();
+    serializedLength += key.length + rendered.length + 4;
+    if (typeof token !== "string" && typeof token !== "number" || typeof token === "number" && !Number.isFinite(token) || !rendered || rendered.length > 1e3 || /[\u0000-\u001f\u007f\\<>{};]|\/\*|\*\/|(?:^|[^a-z])(?:url|expression)\s*\(|@import/i.test(rendered)) {
+      errors.push(`document.theme.tokens.${key} must be a bounded breakout-safe CSS value`);
     }
   }
+  if (serializedLength > 65536) errors.push("document.theme.tokens exceeds the serialized size bound");
   return { tokens };
 }
 function validateSignupControlDocument(input) {
@@ -2951,6 +2957,116 @@ function validateSignupControlDocument(input) {
   } };
 }
 
+// src/signup-control-theme.ts
+var SIGNUP_CONTROL_THEME_MARKER = "<!--odla:signup-control-theme-->";
+var SIGNUP_CONTROL_THEME_STYLE_ID = "odla-signup-control-theme";
+var TOKEN_NAME = /^--ui-[a-z0-9][a-z0-9-]{0,94}$/;
+var DIGEST = /^sha256:[0-9a-f]{64}$/;
+var UNSAFE_VALUE = /[\u0000-\u001f\u007f\\<>{};]|\/\*|\*\/|(?:^|[^a-z])(?:url|expression)\s*\(|@import/i;
+var MAX_TOKENS = 256;
+var MAX_VALUE_LENGTH = 1e3;
+var MAX_SERIALIZED_LENGTH = 65536;
+function validatedTokens(input) {
+  const entries = Object.entries(input ?? {});
+  if (entries.length > MAX_TOKENS) {
+    throw new TypeError(`signup-control theme supports at most ${MAX_TOKENS} tokens`);
+  }
+  const tokens = {};
+  let serializedLength = 0;
+  for (const [name, raw] of entries.sort(([left], [right]) => left.localeCompare(right))) {
+    if (!TOKEN_NAME.test(name)) {
+      throw new TypeError(`signup-control theme token "${name}" must be an allowlisted --ui-* property`);
+    }
+    if (typeof raw !== "string" && typeof raw !== "number" || typeof raw === "number" && !Number.isFinite(raw)) {
+      throw new TypeError(`signup-control theme token "${name}" must be a finite string or number`);
+    }
+    const value = String(raw).trim();
+    if (!value || value.length > MAX_VALUE_LENGTH || UNSAFE_VALUE.test(value)) {
+      throw new TypeError(`signup-control theme token "${name}" has an unsafe or oversized value`);
+    }
+    serializedLength += name.length + value.length + 4;
+    if (serializedLength > MAX_SERIALIZED_LENGTH) {
+      throw new TypeError("signup-control theme exceeds the serialized size bound");
+    }
+    tokens[name] = value;
+  }
+  return tokens;
+}
+function cssFor(tokens) {
+  const declarations = Object.entries(tokens).map(([name, value]) => `  ${name}: ${value};`);
+  return declarations.length ? `:root {
+${declarations.join("\n")}
+}` : "";
+}
+function stateFor(revision, options) {
+  if (!revision) {
+    return {
+      css: cssFor(validatedTokens(options.bootstrapTokens)),
+      metadata: { source: "bootstrap", revision: null, digest: null, cacheKey: "signup-control:bootstrap" }
+    };
+  }
+  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !DIGEST.test(revision.digest)) {
+    throw new TypeError("signup-control theme revision metadata is invalid");
+  }
+  return {
+    css: cssFor(validatedTokens(revision.theme?.tokens)),
+    metadata: {
+      source: "active",
+      revision: revision.revision,
+      digest: revision.digest,
+      cacheKey: `signup-control:${revision.digest}`
+    }
+  };
+}
+function attributes(metadata) {
+  return [
+    `id="${SIGNUP_CONTROL_THEME_STYLE_ID}"`,
+    `data-signup-control-source="${metadata.source}"`,
+    `data-signup-control-cache-key="${metadata.cacheKey}"`,
+    ...metadata.revision === null ? [] : [`data-signup-control-revision="${metadata.revision}"`],
+    ...metadata.digest === null ? [] : [`data-signup-control-digest="${metadata.digest}"`]
+  ].join(" ");
+}
+function renderSignupControlThemeHead(revision, options = {}) {
+  const { css, metadata } = stateFor(revision, options);
+  return { css, metadata, head: `<style ${attributes(metadata)}>${css}</style>` };
+}
+function injectSignupControlThemeHead(html, rendered, marker = SIGNUP_CONTROL_THEME_MARKER) {
+  const existing = /<style\b(?=[^>]*\bid\s*=\s*["']odla-signup-control-theme["'])[^>]*>[\s\S]*?<\/style>/gi;
+  const existingBlocks = html.match(existing) ?? [];
+  if (existingBlocks.length > 1) {
+    throw new TypeError("signup-control theme style block must appear at most once");
+  }
+  if (existingBlocks.length === 1) return html.replace(existing, rendered.head);
+  const markerIndex = html.indexOf(marker);
+  if (markerIndex >= 0) {
+    if (html.indexOf(marker, markerIndex + marker.length) >= 0) {
+      throw new TypeError("signup-control theme marker must appear exactly once");
+    }
+    return `${html.slice(0, markerIndex)}${rendered.head}${html.slice(markerIndex + marker.length)}`;
+  }
+  const closingHead = html.search(/<\/head\s*>/i);
+  if (closingHead < 0) throw new TypeError("signup-control theme requires an HTML head");
+  return `${html.slice(0, closingHead)}${rendered.head}${html.slice(closingHead)}`;
+}
+function hydrateSignupControlTheme(target, revision, options = {}) {
+  const next = stateFor(revision, options);
+  const currentSource = target.getAttribute("data-signup-control-source");
+  const currentRevision = target.getAttribute("data-signup-control-revision");
+  const currentDigest = target.getAttribute("data-signup-control-digest");
+  if (currentSource === next.metadata.source && currentRevision === (next.metadata.revision === null ? null : String(next.metadata.revision)) && currentDigest === next.metadata.digest) {
+    return false;
+  }
+  target.textContent = next.css;
+  target.setAttribute("data-signup-control-source", next.metadata.source);
+  target.setAttribute("data-signup-control-cache-key", next.metadata.cacheKey);
+  if (next.metadata.revision === null) target.removeAttribute("data-signup-control-revision");
+  else target.setAttribute("data-signup-control-revision", String(next.metadata.revision));
+  if (next.metadata.digest === null) target.removeAttribute("data-signup-control-digest");
+  else target.setAttribute("data-signup-control-digest", next.metadata.digest);
+  return true;
+}
+
 // src/membership-markdown.ts
 var MAX_BENEFITS2 = 24;
 var MAX_MARKDOWN2 = 65536;
@@ -3070,13 +3186,109 @@ function membershipTierPresentationFromMarkdown(presentation, source) {
   if (!result.ok) throw new TypeError(`Invalid membership Markdown: ${result.errors.join("; ")}`);
   return result.value;
 }
+
+// src/promotion.ts
+import {
+  canonicalPromotionValue
+} from "@odla-ai/promotion";
+var CHAPTER_PROMOTION_ADAPTER = "@odla-ai/chapter/v1";
+var exclusions = (chapterId, paidTierIds) => [
+  {
+    kind: "chapter.providers",
+    id: chapterId,
+    reason: "provider_identity",
+    paths: [
+      ...paidTierIds.map((id2) => `tiers[${id2}].stripePriceId`),
+      "groups.stripePublishableKey",
+      "applications.stripeCustomerId",
+      "applications.stripeSubscriptionId",
+      "meetings.googleEventId"
+    ],
+    detail: "Stripe, Clerk, and Google identities are resolved independently in each target environment."
+  },
+  {
+    kind: "chapter.runtime",
+    id: chapterId,
+    reason: "runtime_state",
+    paths: ["applications.*", "meetings.*", "emailLog.*", "crm_*.*"],
+    detail: "Applicants, meetings, messages, and CRM rows are operational state, not managed signup content."
+  },
+  {
+    kind: "chapter.access",
+    id: chapterId,
+    reason: "personal_data",
+    paths: ["admins.*", "superAdmins.*", "networkNotes.*"],
+    detail: "People, access lists, and private network notes remain local to the target environment."
+  },
+  {
+    kind: "chapter.history",
+    id: chapterId,
+    reason: "authority_history",
+    paths: ["signupControls[active=false]", "signupControls.*At", "signupControls.environment"],
+    detail: "The source retains immutable delivery history; only selected published content is exported."
+  }
+];
+async function exportChapterPromotion(input) {
+  if (!/^sha256:[0-9a-f]{64}$/.test(input.digest)) throw new TypeError("chapter promotion digest is invalid");
+  const checked = validateSignupControlDocument(input.document);
+  if (!checked.ok) throw new TypeError(checked.errors.join("; "));
+  const document = checked.value;
+  if (await signupControlDigest(document) !== input.digest) throw new TypeError("chapter promotion digest does not match its document");
+  const revision = `chapter:${document.target.chapterId}:${document.revision}`;
+  const promotionProvenance = {
+    adapter: CHAPTER_PROMOTION_ADAPTER,
+    sourceIds: [`signup-control:${document.revision}`, document.source.appId, document.target.chapterId].sort(),
+    receiptDigests: [input.digest]
+  };
+  const artifact = (kind, id2, content) => ({
+    kind,
+    id: id2,
+    sourceRevision: revision,
+    provenance: promotionProvenance,
+    content: canonicalPromotionValue(content)
+  });
+  const chapterId = document.target.chapterId;
+  const artifacts = [
+    artifact("chapter.catalog", chapterId, {
+      chapterId,
+      tiers: document.tiers.map(({ stripePriceId: _providerId, ...tier }) => tier)
+    }),
+    artifact("chapter.membership-page", chapterId, document.membershipPage),
+    ...document.application ? [artifact("chapter.application", chapterId, document.application)] : [],
+    ...document.policy ? [artifact("chapter.policy", chapterId, document.policy)] : [],
+    ...document.scheduling ? [artifact("chapter.scheduling", chapterId, document.scheduling)] : [],
+    ...document.theme ? [artifact("chapter.theme", chapterId, document.theme)] : []
+  ];
+  return {
+    adapter: CHAPTER_PROMOTION_ADAPTER,
+    artifacts,
+    exclusions: exclusions(chapterId, document.tiers.filter((tier) => tier.stripePriceId).map((tier) => tier.id)),
+    preconditions: [
+      {
+        code: "chapter.signup-control.schema",
+        path: "services.chapter.signupControl.schemaVersion",
+        expected: document.schemaVersion,
+        detail: "The target must support this Chapter signup-control document version."
+      },
+      {
+        code: "chapter.identity",
+        path: "app.appId",
+        expected: chapterId,
+        detail: "Chapter content can only target the chapter named by the signed source revision."
+      }
+    ]
+  };
+}
 export {
+  CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY,
   DEFAULT_SHARE_FIELDS,
   MEMBERSHIP_PAGE_RENDERER,
   SCHEDULING_DEFAULTS,
   SIGNUP_CONTROL_PATH,
   SIGNUP_CONTROL_SCHEMA_VERSION,
+  SIGNUP_CONTROL_THEME_MARKER,
+  SIGNUP_CONTROL_THEME_STYLE_ID,
   applicantProfile,
   applicationBookingUpdate,
   applicationSummary,
@@ -3112,6 +3324,7 @@ export {
   defineChapter,
   emailGroupFrom,
   endForSlot,
+  exportChapterPromotion,
   findApplicationRef,
   findTier,
   firstPaymentPatch,
@@ -3119,6 +3332,8 @@ export {
   formationFields,
   getVaultSecret,
   hasDisclaimerAck,
+  hydrateSignupControlTheme,
+  injectSignupControlThemeHead,
   introIdempotencyKey,
   isAdminRole,
   isAlreadySent,
@@ -3148,6 +3363,7 @@ export {
   reconcileMeetings,
   refundedPatch,
   render,
+  renderSignupControlThemeHead,
   renderSummary,
   renderTemplateBody,
   renewalPatch,