@odla-ai/chapter 0.34.0 → 0.36.0

package/dist/worker/index.d.cts

@@ -43,18 +43,21 @@ interface ChapterCopy {
          */
         payment: TextFields<"setupFailed" | "preparing" | "pending" | "processing" | "payAndContinue" | "incomplete" | "consent">;
         done: TextFields<"label" | "calendarInvite" | "memberArea">;
+        accepted: TextFields<"label" | "body">;
+        gift: TextFields<"chooseSelf" | "optionsLabel" | "label" | "body" | "save" | "rotate" | "rotateFailed">;
     };
     members: {
         loadFailed: string;
         account: TextFields<"signOut" | "adminConsole">;
         provisional: TextFields<"cardLabel" | "applicationNeeded" | "applicationNeededBody" | "apply" | "refunded" | "refundedBody" | "active" | "renews" | "introductionCall" | "calendarInvite" | "joinCall" | "bookCall" | "bookCallBody" | "chooseTime">;
         full: TextFields<"welcome">;
+        gifts: TextFields<"title" | "body" | "noneAvailable" | "paid" | "saveCode" | "purchases" | "noPurchases" | "pending" | "redeemed" | "expired" | "revoked" | "rotate" | "rotated" | "rotateFailed" | "redeemTitle" | "code" | "redeem" | "redeemFailed">;
         reschedule: TextFields<"changeTime" | "unavailable" | "loadFailed" | "slotGone" | "loading" | "noTimes" | "rescheduling" | "keepTime">;
     };
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
-        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
+        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "admission" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
         dashboard: TextFields<"loading" | "loadFailed" | "upcomingCalls" | "callsNeedAttention" | "noUpcomingCalls" | "drift" | "open" | "meet" | "applications" | "newMembers" | "newMembersUnavailable" | "revenueAdded" | "revenue" | "revenueUnavailable" | "pipeline" | "pipelineLabel" | "thisWeek" | "noChange" | "activeMemberships" | "annualRunRate" | "testMode">;
         billing: TextFields<"loading" | "loadFailed" | "notConfigured" | "active" | "annualized" | "renewingSoon" | "pastDue" | "subscriptions" | "testMode" | "truncated" | "name" | "email" | "application" | "subscription" | "cancelling" | "amount" | "renews">;
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
@@ -62,6 +65,7 @@ interface ChapterCopy {
         };
         email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
+        admission: TextFields<"title" | "description" | "email" | "decision" | "expires" | "note" | "waive" | "require" | "add" | "ledger" | "loading" | "consumed" | "revoked" | "expired" | "active" | "local" | "parent" | "revoke">;
         network: AdminNetworkCopy;
         records: TextFields<"workflowMissing" | "comms" | "commsHistory" | "scheduling" | "billing" | "notes" | "access" | "sharing" | "lifecycle" | "role" | "superAdminHint" | "noAccount" | "approve" | "refund" | "approved" | "refunded" | "roleSet" | "messageSent" | "messageNotSent" | "loadingTemplates" | "template" | "chooseTemplate" | "sending" | "send" | "noMessages" | "message" | "newStartPrompt" | "parseFailed" | "cancelConfirm" | "callCancelled" | "callRescheduled" | "noApplication" | "loadingMeetings" | "noMeetings" | "joinMeeting" | "openCalendar" | "reschedule" | "cancel">;
     };
@@ -209,7 +213,64 @@ interface ChapterPolicy {
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
 type ChapterMode = "chapter" | "hub";
-/** The scalar kinds an odla-db attribute can hold. */
+/** One odla-db transaction op — the wire shape both the real admin client and a
+ *  test double (`FakeDb`) accept. Built as a plain object, never via a `tx` proxy. */
+type DbOp<Id extends string | {
+    ns: string;
+    attr: string;
+    value: string | number | boolean;
+} = string> = {
+    t: "update" | "merge";
+    ns: string;
+    id: Id;
+    attrs: Record<string, unknown>;
+} | {
+    t: "retract";
+    ns: string;
+    id: Id;
+    attrs: string[];
+} | {
+    t: "delete";
+    ns: string;
+    id: Id;
+    attrs?: undefined;
+};
+/** The structural view of the odla-db admin client the worker builds and the
+ *  member routes consume — so route logic is testable against an in-memory fake. */
+interface ChapterDb {
+    query(q: Record<string, unknown>): Promise<Record<string, Array<Record<string, unknown>>>>;
+    /** Optional bounded aggregate supported by the real privileged odla-db
+     * client. Routes use it to prove a result set is non-empty before issuing
+     * an ordered lookup, while small test doubles may continue to omit it. */
+    aggregate?(ns: string, spec: {
+        count?: boolean;
+    }, opts?: {
+        where?: Record<string, unknown>;
+    }): Promise<{
+        count?: number;
+    }>;
+    transact(ops: DbOp<string | {
+        ns: string;
+        attr: string;
+        value: string | number | boolean;
+    }>[], opts?: {
+        mutationId?: string;
+        guards?: Array<{
+            ns: string;
+            id: string;
+            exists: boolean;
+            equals?: Record<string, unknown>;
+            absent?: string[];
+        }>;
+    }): Promise<{
+        txId: number;
+        duplicate: boolean;
+    }>;
+    secrets: {
+        get(name: string): Promise<string>;
+    };
+}
+/** Scalar kinds accepted by the Chapter schema adapter. */
 type AttrType = "string" | "number" | "boolean" | "json";
 /** One odla-db attribute: its type and index/uniqueness/optionality flags. */
 interface Attr {
@@ -709,6 +770,37 @@ interface MembershipPageDocument {
     footnoteMarkdown?: string;
 }
 
+/** Current nested gift-catalog version inside signup-control. */
+declare const GIFT_OFFER_CATALOG_VERSION: 1;
+/** Membership tier or standalone entitlement fulfilled by redemption. */
+type GiftOfferTarget = {
+    type: "tier";
+    tierId: string;
+} | {
+    type: "entitlement";
+    entitlementKey: string;
+};
+/** Server-authored gift SKU; provider identifiers never reach public config. */
+interface GiftOffer {
+    id: string;
+    target: GiftOfferTarget;
+    billingMode: "one_time" | "subscription";
+    stripePriceId: string;
+    priceCents: number;
+    currency: string;
+    redemptionLifetimeHours: number;
+    activeFrom?: number;
+    activeUntil?: number;
+    title: string;
+    description: string;
+    ctaLabel: string;
+}
+/** Versioned bounded collection delegated through signed signup control. */
+interface GiftOfferCatalog {
+    schemaVersion: typeof GIFT_OFFER_CATALOG_VERSION;
+    offers: readonly GiftOffer[];
+}
+
 /** Current wire-format version for complete signup-control documents. */
 declare const SIGNUP_CONTROL_SCHEMA_VERSION: 1;
 /** One authoritative membership tier in a signup-control revision. */
@@ -760,6 +852,7 @@ interface SignupControlDocument {
     policy?: SignupControlPolicy;
     scheduling?: ChapterScheduling;
     theme?: SignupControlTheme;
+    giftOffers?: GiftOfferCatalog;
 }
 /** Digest travels beside the document so the exact desired state is attestable. */
 interface SignupControlEnvelope {
@@ -790,6 +883,110 @@ interface SignupControlDeliveryOptions {
 /** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
 declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
 
+/** Current wire version for parent-authored admission decisions. */
+declare const ADMISSION_GRANTS_SCHEMA_VERSION: 1;
+/** Whether an exact email can skip or must retain the Chapter interview. */
+type AdmissionDecision = "waive_interview" | "require_interview";
+/** One bounded admission decision. Email is PII and never enters public config. */
+interface AdmissionGrantInput {
+    id: string;
+    email: string;
+    decision: AdmissionDecision;
+    note?: string;
+    expiresAt?: number;
+}
+/** Complete desired Parent state for one Chapter and environment. */
+interface AdmissionGrantDocument {
+    schemaVersion: typeof ADMISSION_GRANTS_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: {
+        appId: string;
+        actor: string;
+    };
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    grants: readonly AdmissionGrantInput[];
+}
+/** Canonical desired-state document paired with its integrity digest. */
+interface AdmissionGrantEnvelope {
+    digest: string;
+    document: AdmissionGrantDocument;
+}
+/** Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface AdmissionGrantReceipt {
+    ok: true;
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs required to sign and deliver one Parent admission revision. */
+interface AdmissionGrantDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: AdmissionGrantEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one signed Parent admission revision. Durable retry belongs upstream. */
+declare function deliverAdmissionGrants(options: AdmissionGrantDeliveryOptions): Promise<AdmissionGrantReceipt>;
+
+/** Identity shared by initial HTML, response caching, and client hydration. */
+interface SignupControlThemeMetadata {
+    source: "active" | "bootstrap";
+    revision: number | null;
+    digest: string | null;
+    /** Include this value in any host-owned cache key for transformed HTML. */
+    cacheKey: string;
+}
+/** A validated style block ready to place in an HTML head. */
+interface SignupControlThemeHead {
+    css: string;
+    head: string;
+    metadata: SignupControlThemeMetadata;
+}
+/** Host-owned fallback inputs shared by server rendering and hydration. */
+interface SignupControlThemeOptions {
+    /** Local site-owned tokens used only when no active managed revision exists. */
+    bootstrapTokens?: Readonly<Record<string, string | number>>;
+}
+
+/** Inputs required to resolve one follower-local active signup theme. */
+interface ActiveSignupControlThemeOptions extends SignupControlThemeOptions {
+    /** Follower-local database client. No controlling-hub request is performed. */
+    db: ChapterDb;
+    chapterId: string;
+    environment: string;
+    /** Optional host marker; defaults to `SIGNUP_CONTROL_THEME_MARKER`. */
+    marker?: string;
+}
+/** Transformed HTML plus the exact theme and cache identity it contains. */
+interface ActiveSignupControlHtml {
+    html: string;
+    theme: SignupControlThemeHead;
+}
+/**
+ * Transform trusted host HTML with the follower-local last-known-good signup
+ * theme. A missing active revision uses the documented bootstrap state; a read
+ * failure or corrupt active row fails closed instead of fetching the hub.
+ */
+declare function renderActiveSignupControlHtml(html: string, options: ActiveSignupControlThemeOptions): Promise<ActiveSignupControlHtml>;
+/**
+ * Transform an HTML response and make the cache contract safe by default.
+ * `no-store` prevents a prior digest from surviving activation; hosts that own
+ * a cache may instead key it with `result.theme.metadata.cacheKey` from
+ * {@link renderActiveSignupControlHtml}.
+ */
+declare function withActiveSignupControlTheme(response: Response, options: ActiveSignupControlThemeOptions): Promise<Response>;
+
 /**
  * Build the Cloudflare `ExportedHandler` for a chapter/hub site: Clerk-JWT
  * verification, the source-aware admin gate, the mounted @odla-ai/crm routes, the
@@ -812,4 +1009,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverSignupControl };
+export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };

package/dist/worker/index.d.ts

@@ -43,18 +43,21 @@ interface ChapterCopy {
          */
         payment: TextFields<"setupFailed" | "preparing" | "pending" | "processing" | "payAndContinue" | "incomplete" | "consent">;
         done: TextFields<"label" | "calendarInvite" | "memberArea">;
+        accepted: TextFields<"label" | "body">;
+        gift: TextFields<"chooseSelf" | "optionsLabel" | "label" | "body" | "save" | "rotate" | "rotateFailed">;
     };
     members: {
         loadFailed: string;
         account: TextFields<"signOut" | "adminConsole">;
         provisional: TextFields<"cardLabel" | "applicationNeeded" | "applicationNeededBody" | "apply" | "refunded" | "refundedBody" | "active" | "renews" | "introductionCall" | "calendarInvite" | "joinCall" | "bookCall" | "bookCallBody" | "chooseTime">;
         full: TextFields<"welcome">;
+        gifts: TextFields<"title" | "body" | "noneAvailable" | "paid" | "saveCode" | "purchases" | "noPurchases" | "pending" | "redeemed" | "expired" | "revoked" | "rotate" | "rotated" | "rotateFailed" | "redeemTitle" | "code" | "redeem" | "redeemFailed">;
         reschedule: TextFields<"changeTime" | "unavailable" | "loadFailed" | "slotGone" | "loading" | "noTimes" | "rescheduling" | "keepTime">;
     };
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
-        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
+        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "admission" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
         dashboard: TextFields<"loading" | "loadFailed" | "upcomingCalls" | "callsNeedAttention" | "noUpcomingCalls" | "drift" | "open" | "meet" | "applications" | "newMembers" | "newMembersUnavailable" | "revenueAdded" | "revenue" | "revenueUnavailable" | "pipeline" | "pipelineLabel" | "thisWeek" | "noChange" | "activeMemberships" | "annualRunRate" | "testMode">;
         billing: TextFields<"loading" | "loadFailed" | "notConfigured" | "active" | "annualized" | "renewingSoon" | "pastDue" | "subscriptions" | "testMode" | "truncated" | "name" | "email" | "application" | "subscription" | "cancelling" | "amount" | "renews">;
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
@@ -62,6 +65,7 @@ interface ChapterCopy {
         };
         email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
+        admission: TextFields<"title" | "description" | "email" | "decision" | "expires" | "note" | "waive" | "require" | "add" | "ledger" | "loading" | "consumed" | "revoked" | "expired" | "active" | "local" | "parent" | "revoke">;
         network: AdminNetworkCopy;
         records: TextFields<"workflowMissing" | "comms" | "commsHistory" | "scheduling" | "billing" | "notes" | "access" | "sharing" | "lifecycle" | "role" | "superAdminHint" | "noAccount" | "approve" | "refund" | "approved" | "refunded" | "roleSet" | "messageSent" | "messageNotSent" | "loadingTemplates" | "template" | "chooseTemplate" | "sending" | "send" | "noMessages" | "message" | "newStartPrompt" | "parseFailed" | "cancelConfirm" | "callCancelled" | "callRescheduled" | "noApplication" | "loadingMeetings" | "noMeetings" | "joinMeeting" | "openCalendar" | "reschedule" | "cancel">;
     };
@@ -209,7 +213,64 @@ interface ChapterPolicy {
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
  * admin-only and CRM-focused (a directory/registry over the same CRM). */
 type ChapterMode = "chapter" | "hub";
-/** The scalar kinds an odla-db attribute can hold. */
+/** One odla-db transaction op — the wire shape both the real admin client and a
+ *  test double (`FakeDb`) accept. Built as a plain object, never via a `tx` proxy. */
+type DbOp<Id extends string | {
+    ns: string;
+    attr: string;
+    value: string | number | boolean;
+} = string> = {
+    t: "update" | "merge";
+    ns: string;
+    id: Id;
+    attrs: Record<string, unknown>;
+} | {
+    t: "retract";
+    ns: string;
+    id: Id;
+    attrs: string[];
+} | {
+    t: "delete";
+    ns: string;
+    id: Id;
+    attrs?: undefined;
+};
+/** The structural view of the odla-db admin client the worker builds and the
+ *  member routes consume — so route logic is testable against an in-memory fake. */
+interface ChapterDb {
+    query(q: Record<string, unknown>): Promise<Record<string, Array<Record<string, unknown>>>>;
+    /** Optional bounded aggregate supported by the real privileged odla-db
+     * client. Routes use it to prove a result set is non-empty before issuing
+     * an ordered lookup, while small test doubles may continue to omit it. */
+    aggregate?(ns: string, spec: {
+        count?: boolean;
+    }, opts?: {
+        where?: Record<string, unknown>;
+    }): Promise<{
+        count?: number;
+    }>;
+    transact(ops: DbOp<string | {
+        ns: string;
+        attr: string;
+        value: string | number | boolean;
+    }>[], opts?: {
+        mutationId?: string;
+        guards?: Array<{
+            ns: string;
+            id: string;
+            exists: boolean;
+            equals?: Record<string, unknown>;
+            absent?: string[];
+        }>;
+    }): Promise<{
+        txId: number;
+        duplicate: boolean;
+    }>;
+    secrets: {
+        get(name: string): Promise<string>;
+    };
+}
+/** Scalar kinds accepted by the Chapter schema adapter. */
 type AttrType = "string" | "number" | "boolean" | "json";
 /** One odla-db attribute: its type and index/uniqueness/optionality flags. */
 interface Attr {
@@ -709,6 +770,37 @@ interface MembershipPageDocument {
     footnoteMarkdown?: string;
 }
 
+/** Current nested gift-catalog version inside signup-control. */
+declare const GIFT_OFFER_CATALOG_VERSION: 1;
+/** Membership tier or standalone entitlement fulfilled by redemption. */
+type GiftOfferTarget = {
+    type: "tier";
+    tierId: string;
+} | {
+    type: "entitlement";
+    entitlementKey: string;
+};
+/** Server-authored gift SKU; provider identifiers never reach public config. */
+interface GiftOffer {
+    id: string;
+    target: GiftOfferTarget;
+    billingMode: "one_time" | "subscription";
+    stripePriceId: string;
+    priceCents: number;
+    currency: string;
+    redemptionLifetimeHours: number;
+    activeFrom?: number;
+    activeUntil?: number;
+    title: string;
+    description: string;
+    ctaLabel: string;
+}
+/** Versioned bounded collection delegated through signed signup control. */
+interface GiftOfferCatalog {
+    schemaVersion: typeof GIFT_OFFER_CATALOG_VERSION;
+    offers: readonly GiftOffer[];
+}
+
 /** Current wire-format version for complete signup-control documents. */
 declare const SIGNUP_CONTROL_SCHEMA_VERSION: 1;
 /** One authoritative membership tier in a signup-control revision. */
@@ -760,6 +852,7 @@ interface SignupControlDocument {
     policy?: SignupControlPolicy;
     scheduling?: ChapterScheduling;
     theme?: SignupControlTheme;
+    giftOffers?: GiftOfferCatalog;
 }
 /** Digest travels beside the document so the exact desired state is attestable. */
 interface SignupControlEnvelope {
@@ -790,6 +883,110 @@ interface SignupControlDeliveryOptions {
 /** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
 declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
 
+/** Current wire version for parent-authored admission decisions. */
+declare const ADMISSION_GRANTS_SCHEMA_VERSION: 1;
+/** Whether an exact email can skip or must retain the Chapter interview. */
+type AdmissionDecision = "waive_interview" | "require_interview";
+/** One bounded admission decision. Email is PII and never enters public config. */
+interface AdmissionGrantInput {
+    id: string;
+    email: string;
+    decision: AdmissionDecision;
+    note?: string;
+    expiresAt?: number;
+}
+/** Complete desired Parent state for one Chapter and environment. */
+interface AdmissionGrantDocument {
+    schemaVersion: typeof ADMISSION_GRANTS_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: {
+        appId: string;
+        actor: string;
+    };
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    grants: readonly AdmissionGrantInput[];
+}
+/** Canonical desired-state document paired with its integrity digest. */
+interface AdmissionGrantEnvelope {
+    digest: string;
+    document: AdmissionGrantDocument;
+}
+/** Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface AdmissionGrantReceipt {
+    ok: true;
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs required to sign and deliver one Parent admission revision. */
+interface AdmissionGrantDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: AdmissionGrantEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one signed Parent admission revision. Durable retry belongs upstream. */
+declare function deliverAdmissionGrants(options: AdmissionGrantDeliveryOptions): Promise<AdmissionGrantReceipt>;
+
+/** Identity shared by initial HTML, response caching, and client hydration. */
+interface SignupControlThemeMetadata {
+    source: "active" | "bootstrap";
+    revision: number | null;
+    digest: string | null;
+    /** Include this value in any host-owned cache key for transformed HTML. */
+    cacheKey: string;
+}
+/** A validated style block ready to place in an HTML head. */
+interface SignupControlThemeHead {
+    css: string;
+    head: string;
+    metadata: SignupControlThemeMetadata;
+}
+/** Host-owned fallback inputs shared by server rendering and hydration. */
+interface SignupControlThemeOptions {
+    /** Local site-owned tokens used only when no active managed revision exists. */
+    bootstrapTokens?: Readonly<Record<string, string | number>>;
+}
+
+/** Inputs required to resolve one follower-local active signup theme. */
+interface ActiveSignupControlThemeOptions extends SignupControlThemeOptions {
+    /** Follower-local database client. No controlling-hub request is performed. */
+    db: ChapterDb;
+    chapterId: string;
+    environment: string;
+    /** Optional host marker; defaults to `SIGNUP_CONTROL_THEME_MARKER`. */
+    marker?: string;
+}
+/** Transformed HTML plus the exact theme and cache identity it contains. */
+interface ActiveSignupControlHtml {
+    html: string;
+    theme: SignupControlThemeHead;
+}
+/**
+ * Transform trusted host HTML with the follower-local last-known-good signup
+ * theme. A missing active revision uses the documented bootstrap state; a read
+ * failure or corrupt active row fails closed instead of fetching the hub.
+ */
+declare function renderActiveSignupControlHtml(html: string, options: ActiveSignupControlThemeOptions): Promise<ActiveSignupControlHtml>;
+/**
+ * Transform an HTML response and make the cache contract safe by default.
+ * `no-store` prevents a prior digest from surviving activation; hosts that own
+ * a cache may instead key it with `result.theme.metadata.cacheKey` from
+ * {@link renderActiveSignupControlHtml}.
+ */
+declare function withActiveSignupControlTheme(response: Response, options: ActiveSignupControlThemeOptions): Promise<Response>;
+
 /**
  * Build the Cloudflare `ExportedHandler` for a chapter/hub site: Clerk-JWT
  * verification, the source-aware admin gate, the mounted @odla-ai/crm routes, the
@@ -812,4 +1009,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverSignupControl };
+export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };