@odla-ai/chapter 0.35.0 → 0.37.0

package/dist/worker/index.d.ts

@@ -43,18 +43,21 @@ interface ChapterCopy {
          */
         payment: TextFields<"setupFailed" | "preparing" | "pending" | "processing" | "payAndContinue" | "incomplete" | "consent">;
         done: TextFields<"label" | "calendarInvite" | "memberArea">;
+        accepted: TextFields<"label" | "body">;
+        gift: TextFields<"chooseSelf" | "optionsLabel" | "label" | "body" | "save" | "rotate" | "rotateFailed">;
     };
     members: {
         loadFailed: string;
         account: TextFields<"signOut" | "adminConsole">;
         provisional: TextFields<"cardLabel" | "applicationNeeded" | "applicationNeededBody" | "apply" | "refunded" | "refundedBody" | "active" | "renews" | "introductionCall" | "calendarInvite" | "joinCall" | "bookCall" | "bookCallBody" | "chooseTime">;
         full: TextFields<"welcome">;
+        gifts: TextFields<"title" | "body" | "noneAvailable" | "paid" | "saveCode" | "purchases" | "noPurchases" | "pending" | "redeemed" | "expired" | "revoked" | "rotate" | "rotated" | "rotateFailed" | "redeemTitle" | "code" | "redeem" | "redeemFailed">;
         reschedule: TextFields<"changeTime" | "unavailable" | "loadFailed" | "slotGone" | "loading" | "noTimes" | "rescheduling" | "keepTime">;
     };
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
-        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
+        workspaces: TextFields<"dashboard" | "overview" | "billing" | "people" | "admission" | "network" | "portfolio" | "settings" | "calendar" | "email" | "chapters" | "formations" | "dealFlow" | "dashboardViewsLabel" | "settingsViewsLabel" | "collectionsLabel" | "portfolioViewsLabel">;
         dashboard: TextFields<"loading" | "loadFailed" | "upcomingCalls" | "callsNeedAttention" | "noUpcomingCalls" | "drift" | "open" | "meet" | "applications" | "newMembers" | "newMembersUnavailable" | "revenueAdded" | "revenue" | "revenueUnavailable" | "pipeline" | "pipelineLabel" | "thisWeek" | "noChange" | "activeMemberships" | "annualRunRate" | "testMode">;
         billing: TextFields<"loading" | "loadFailed" | "notConfigured" | "active" | "annualized" | "renewingSoon" | "pastDue" | "subscriptions" | "testMode" | "truncated" | "name" | "email" | "application" | "subscription" | "cancelling" | "amount" | "renews">;
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
@@ -62,6 +65,7 @@ interface ChapterCopy {
         };
         email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
+        admission: TextFields<"title" | "description" | "email" | "decision" | "expires" | "note" | "waive" | "require" | "add" | "ledger" | "loading" | "consumed" | "revoked" | "expired" | "active" | "local" | "parent" | "revoke">;
         network: AdminNetworkCopy;
         records: TextFields<"workflowMissing" | "comms" | "commsHistory" | "scheduling" | "billing" | "notes" | "access" | "sharing" | "lifecycle" | "role" | "superAdminHint" | "noAccount" | "approve" | "refund" | "approved" | "refunded" | "roleSet" | "messageSent" | "messageNotSent" | "loadingTemplates" | "template" | "chooseTemplate" | "sending" | "send" | "noMessages" | "message" | "newStartPrompt" | "parseFailed" | "cancelConfirm" | "callCancelled" | "callRescheduled" | "noApplication" | "loadingMeetings" | "noMeetings" | "joinMeeting" | "openCalendar" | "reschedule" | "cancel">;
     };
@@ -88,6 +92,55 @@ interface ResolvedSignupControl {
     stripeMode: "test" | "live";
 }
 
+/** Optional authenticated member-content surface for a chapter site. */
+interface ChapterMemberContent {
+    /** Keep Chapter-admin authoring enabled. Defaults to true. */
+    localAuthoring?: boolean;
+    /** Optional Parent/Built Not Found authority for signed inherited revisions. */
+    parent?: {
+        sourceId: string;
+        /** Follower-vault key holding the dedicated content edge secret. */
+        secretName?: string;
+    };
+}
+/** Validated member-content settings carried on a resolved Chapter. */
+interface ResolvedMemberContent {
+    enabled: true;
+    localAuthoring: boolean;
+    parent: {
+        sourceId: string;
+        secretName: string;
+    } | null;
+}
+
+/** Scalar kinds accepted by the Chapter schema adapter. */
+type AttrType = "string" | "number" | "boolean" | "json";
+/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
+interface Attr {
+    type: AttrType;
+    unique: boolean;
+    indexed: boolean;
+    optional: boolean;
+}
+/** One odla-db namespace: its attribute map. */
+interface Entity {
+    attrs: Record<string, Attr>;
+}
+/** A serialized odla-db schema fragment (namespaces + links). */
+interface DbSchema {
+    entities: Record<string, Entity>;
+    links: Record<string, unknown>;
+}
+/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
+interface Rule {
+    view: string;
+    create: string;
+    update: string;
+    delete: string;
+}
+/** Namespace → rule set. */
+type DbRules = Record<string, Rule>;
+
 /** One follower site a leader can push CRM records to. The secret VALUE never
  * lives in config: `secretName` names the leader tenant's vaulted copy of the
  * follower's `network_share_secret`. */
@@ -251,6 +304,13 @@ interface ChapterDb {
         value: string | number | boolean;
     }>[], opts?: {
         mutationId?: string;
+        guards?: Array<{
+            ns: string;
+            id: string;
+            exists: boolean;
+            equals?: Record<string, unknown>;
+            absent?: string[];
+        }>;
     }): Promise<{
         txId: number;
         duplicate: boolean;
@@ -259,33 +319,6 @@ interface ChapterDb {
         get(name: string): Promise<string>;
     };
 }
-/** The scalar kinds an odla-db attribute can hold. */
-type AttrType = "string" | "number" | "boolean" | "json";
-/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
-interface Attr {
-    type: AttrType;
-    unique: boolean;
-    indexed: boolean;
-    optional: boolean;
-}
-/** One odla-db namespace: its attribute map. */
-interface Entity {
-    attrs: Record<string, Attr>;
-}
-/** A serialized odla-db schema fragment (namespaces + links). */
-interface DbSchema {
-    entities: Record<string, Entity>;
-    links: Record<string, unknown>;
-}
-/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
-interface Rule {
-    view: string;
-    create: string;
-    update: string;
-    delete: string;
-}
-/** Namespace → rule set. */
-type DbRules = Record<string, Rule>;
 /** Typed semantic roles shared by the public site and application surfaces. */
 interface ChapterBrandTokens {
     background?: string;
@@ -509,6 +542,8 @@ interface ChapterConfig {
     network?: ChapterNetwork;
     /** A separate signed edge that may control this chapter's complete signup. */
     signupControl?: ChapterSignupControl;
+    /** Authenticated parent + chapter member pages with server-enforced tier access. */
+    memberContent?: ChapterMemberContent;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -605,6 +640,8 @@ interface Chapter {
     network: ResolvedNetwork;
     /** Null unless this follower explicitly delegates signup authority. */
     signupControl: ResolvedSignupControl | null;
+    /** Null unless the standard authenticated member-content surface is enabled. */
+    memberContent: ResolvedMemberContent | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
@@ -759,6 +796,37 @@ interface MembershipPageDocument {
     footnoteMarkdown?: string;
 }
 
+/** Current nested gift-catalog version inside signup-control. */
+declare const GIFT_OFFER_CATALOG_VERSION: 1;
+/** Membership tier or standalone entitlement fulfilled by redemption. */
+type GiftOfferTarget = {
+    type: "tier";
+    tierId: string;
+} | {
+    type: "entitlement";
+    entitlementKey: string;
+};
+/** Server-authored gift SKU; provider identifiers never reach public config. */
+interface GiftOffer {
+    id: string;
+    target: GiftOfferTarget;
+    billingMode: "one_time" | "subscription";
+    stripePriceId: string;
+    priceCents: number;
+    currency: string;
+    redemptionLifetimeHours: number;
+    activeFrom?: number;
+    activeUntil?: number;
+    title: string;
+    description: string;
+    ctaLabel: string;
+}
+/** Versioned bounded collection delegated through signed signup control. */
+interface GiftOfferCatalog {
+    schemaVersion: typeof GIFT_OFFER_CATALOG_VERSION;
+    offers: readonly GiftOffer[];
+}
+
 /** Current wire-format version for complete signup-control documents. */
 declare const SIGNUP_CONTROL_SCHEMA_VERSION: 1;
 /** One authoritative membership tier in a signup-control revision. */
@@ -810,6 +878,7 @@ interface SignupControlDocument {
     policy?: SignupControlPolicy;
     scheduling?: ChapterScheduling;
     theme?: SignupControlTheme;
+    giftOffers?: GiftOfferCatalog;
 }
 /** Digest travels beside the document so the exact desired state is attestable. */
 interface SignupControlEnvelope {
@@ -840,6 +909,159 @@ interface SignupControlDeliveryOptions {
 /** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
 declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
 
+/** Versioned contract for authenticated member content. */
+declare const MEMBER_CONTENT_SCHEMA_VERSION: 1;
+/** Authority that authored one independently stored member-content layer. */
+type MemberContentSourceType = "parent" | "chapter";
+/** Stable author identity attached to every member-content document and page. */
+interface MemberContentSource {
+    type: MemberContentSourceType;
+    appId: string;
+}
+/** Chapter deployment that a parent member-content revision is intended for. */
+interface MemberContentTarget {
+    chapterId: string;
+    environment: string;
+}
+/** Navigation is data, so agents do not have to coordinate route code. */
+interface MemberPageNavigation {
+    section: string;
+    order: number;
+    parentId?: string;
+}
+/** Explicit sets avoid unsafe assumptions that commercial tiers form a ladder. */
+type MemberPageAudience = {
+    kind: "all-members";
+} | {
+    kind: "tiers";
+    tierIds: readonly string[];
+};
+/** Authored offer copy. Price and provider identity deliberately do not live here. */
+interface MemberPageUpsellOffer {
+    tierId: string;
+    label?: string;
+    bodyMarkdown?: string;
+    ctaLabel?: string;
+}
+/** Parent offer authority is explicit; a Chapter can edit only a delegated offer. */
+type MemberPageUpsell = {
+    owner: "parent";
+    offer: MemberPageUpsellOffer;
+} | {
+    owner: "chapter";
+    offer?: MemberPageUpsellOffer;
+};
+/** Authored member page whose body is disclosed only after server-side projection. */
+interface MemberContentPage {
+    id: string;
+    slug: string;
+    title: string;
+    summary?: string;
+    navigation: MemberPageNavigation;
+    audience: MemberPageAudience;
+    /** Safe Markdown shown while the body is withheld. */
+    teaserMarkdown?: string;
+    /** Never serialized to a viewer whose audience does not match. */
+    bodyMarkdown: string;
+    upsell?: MemberPageUpsell;
+}
+/** Chapter-owned offer attached to a Parent page that delegated offer authority. */
+interface MemberPageUpsellOverride {
+    pageId: string;
+    offer: MemberPageUpsellOffer;
+}
+/** One complete source layer. Parent and Chapter layers are stored independently. */
+interface MemberContentDocument {
+    schemaVersion: typeof MEMBER_CONTENT_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: MemberContentSource;
+    target?: MemberContentTarget;
+    pages: readonly MemberContentPage[];
+    upsellOverrides?: readonly MemberPageUpsellOverride[];
+}
+/** Canonical parent document and digest transmitted over the signed control edge. */
+interface MemberContentEnvelope {
+    digest: string;
+    document: MemberContentDocument;
+}
+/** Durable Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface MemberContentReceipt {
+    ok: true;
+    target: MemberContentTarget;
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs for one signed Parent → Chapter member-content delivery. */
+interface MemberContentDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: MemberContentEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one exact revision. Durable retry and approval remain Parent concerns. */
+declare function deliverMemberContent(options: MemberContentDeliveryOptions): Promise<MemberContentReceipt>;
+
+/** Current wire version for parent-authored admission decisions. */
+declare const ADMISSION_GRANTS_SCHEMA_VERSION: 1;
+/** Whether an exact email can skip or must retain the Chapter interview. */
+type AdmissionDecision = "waive_interview" | "require_interview";
+/** One bounded admission decision. Email is PII and never enters public config. */
+interface AdmissionGrantInput {
+    id: string;
+    email: string;
+    decision: AdmissionDecision;
+    note?: string;
+    expiresAt?: number;
+}
+/** Complete desired Parent state for one Chapter and environment. */
+interface AdmissionGrantDocument {
+    schemaVersion: typeof ADMISSION_GRANTS_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: {
+        appId: string;
+        actor: string;
+    };
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    grants: readonly AdmissionGrantInput[];
+}
+/** Canonical desired-state document paired with its integrity digest. */
+interface AdmissionGrantEnvelope {
+    digest: string;
+    document: AdmissionGrantDocument;
+}
+/** Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface AdmissionGrantReceipt {
+    ok: true;
+    target: {
+        chapterId: string;
+        environment: string;
+    };
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs required to sign and deliver one Parent admission revision. */
+interface AdmissionGrantDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: AdmissionGrantEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one signed Parent admission revision. Durable retry belongs upstream. */
+declare function deliverAdmissionGrants(options: AdmissionGrantDeliveryOptions): Promise<AdmissionGrantReceipt>;
+
 /** Identity shared by initial HTML, response caching, and client hydration. */
 interface SignupControlThemeMetadata {
     source: "active" | "bootstrap";
@@ -910,4 +1132,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };
+export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type MemberContentDeliveryOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverMemberContent, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };