@odla-ai/chapter 0.36.0 → 0.38.0

package/dist/worker/index.d.cts

@@ -92,6 +92,55 @@ interface ResolvedSignupControl {
     stripeMode: "test" | "live";
 }
 
+/** Optional authenticated member-content surface for a chapter site. */
+interface ChapterMemberContent {
+    /** Keep Chapter-admin authoring enabled. Defaults to true. */
+    localAuthoring?: boolean;
+    /** Optional Parent/Built Not Found authority for signed inherited revisions. */
+    parent?: {
+        sourceId: string;
+        /** Follower-vault key holding the dedicated content edge secret. */
+        secretName?: string;
+    };
+}
+/** Validated member-content settings carried on a resolved Chapter. */
+interface ResolvedMemberContent {
+    enabled: true;
+    localAuthoring: boolean;
+    parent: {
+        sourceId: string;
+        secretName: string;
+    } | null;
+}
+
+/** Scalar kinds accepted by the Chapter schema adapter. */
+type AttrType = "string" | "number" | "boolean" | "json";
+/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
+interface Attr {
+    type: AttrType;
+    unique: boolean;
+    indexed: boolean;
+    optional: boolean;
+}
+/** One odla-db namespace: its attribute map. */
+interface Entity {
+    attrs: Record<string, Attr>;
+}
+/** A serialized odla-db schema fragment (namespaces + links). */
+interface DbSchema {
+    entities: Record<string, Entity>;
+    links: Record<string, unknown>;
+}
+/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
+interface Rule {
+    view: string;
+    create: string;
+    update: string;
+    delete: string;
+}
+/** Namespace → rule set. */
+type DbRules = Record<string, Rule>;
+
 /** One follower site a leader can push CRM records to. The secret VALUE never
  * lives in config: `secretName` names the leader tenant's vaulted copy of the
  * follower's `network_share_secret`. */
@@ -270,33 +319,6 @@ interface ChapterDb {
         get(name: string): Promise<string>;
     };
 }
-/** Scalar kinds accepted by the Chapter schema adapter. */
-type AttrType = "string" | "number" | "boolean" | "json";
-/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
-interface Attr {
-    type: AttrType;
-    unique: boolean;
-    indexed: boolean;
-    optional: boolean;
-}
-/** One odla-db namespace: its attribute map. */
-interface Entity {
-    attrs: Record<string, Attr>;
-}
-/** A serialized odla-db schema fragment (namespaces + links). */
-interface DbSchema {
-    entities: Record<string, Entity>;
-    links: Record<string, unknown>;
-}
-/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
-interface Rule {
-    view: string;
-    create: string;
-    update: string;
-    delete: string;
-}
-/** Namespace → rule set. */
-type DbRules = Record<string, Rule>;
 /** Typed semantic roles shared by the public site and application surfaces. */
 interface ChapterBrandTokens {
     background?: string;
@@ -520,6 +542,8 @@ interface ChapterConfig {
     network?: ChapterNetwork;
     /** A separate signed edge that may control this chapter's complete signup. */
     signupControl?: ChapterSignupControl;
+    /** Authenticated parent + chapter member pages with server-enforced tier access. */
+    memberContent?: ChapterMemberContent;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -616,6 +640,8 @@ interface Chapter {
     network: ResolvedNetwork;
     /** Null unless this follower explicitly delegates signup authority. */
     signupControl: ResolvedSignupControl | null;
+    /** Null unless the standard authenticated member-content surface is enabled. */
+    memberContent: ResolvedMemberContent | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
@@ -883,6 +909,103 @@ interface SignupControlDeliveryOptions {
 /** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
 declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
 
+/** Versioned contract for authenticated member content. */
+declare const MEMBER_CONTENT_SCHEMA_VERSION: 1;
+/** Authority that authored one independently stored member-content layer. */
+type MemberContentSourceType = "parent" | "chapter";
+/** Stable author identity attached to every member-content document and page. */
+interface MemberContentSource {
+    type: MemberContentSourceType;
+    appId: string;
+}
+/** Chapter deployment that a parent member-content revision is intended for. */
+interface MemberContentTarget {
+    chapterId: string;
+    environment: string;
+}
+/** Navigation is data, so agents do not have to coordinate route code. */
+interface MemberPageNavigation {
+    section: string;
+    order: number;
+    parentId?: string;
+}
+/** Explicit sets avoid unsafe assumptions that commercial tiers form a ladder. */
+type MemberPageAudience = {
+    kind: "all-members";
+} | {
+    kind: "tiers";
+    tierIds: readonly string[];
+};
+/** Authored offer copy. Price and provider identity deliberately do not live here. */
+interface MemberPageUpsellOffer {
+    tierId: string;
+    label?: string;
+    bodyMarkdown?: string;
+    ctaLabel?: string;
+}
+/** Parent offer authority is explicit; a Chapter can edit only a delegated offer. */
+type MemberPageUpsell = {
+    owner: "parent";
+    offer: MemberPageUpsellOffer;
+} | {
+    owner: "chapter";
+    offer?: MemberPageUpsellOffer;
+};
+/** Authored member page whose body is disclosed only after server-side projection. */
+interface MemberContentPage {
+    id: string;
+    slug: string;
+    title: string;
+    summary?: string;
+    navigation: MemberPageNavigation;
+    audience: MemberPageAudience;
+    /** Safe Markdown shown while the body is withheld. */
+    teaserMarkdown?: string;
+    /** Never serialized to a viewer whose audience does not match. */
+    bodyMarkdown: string;
+    upsell?: MemberPageUpsell;
+}
+/** Chapter-owned offer attached to a Parent page that delegated offer authority. */
+interface MemberPageUpsellOverride {
+    pageId: string;
+    offer: MemberPageUpsellOffer;
+}
+/** One complete source layer. Parent and Chapter layers are stored independently. */
+interface MemberContentDocument {
+    schemaVersion: typeof MEMBER_CONTENT_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: MemberContentSource;
+    target?: MemberContentTarget;
+    pages: readonly MemberContentPage[];
+    upsellOverrides?: readonly MemberPageUpsellOverride[];
+}
+/** Canonical parent document and digest transmitted over the signed control edge. */
+interface MemberContentEnvelope {
+    digest: string;
+    document: MemberContentDocument;
+}
+/** Durable Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface MemberContentReceipt {
+    ok: true;
+    target: MemberContentTarget;
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs for one signed Parent → Chapter member-content delivery. */
+interface MemberContentDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: MemberContentEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one exact revision. Durable retry and approval remain Parent concerns. */
+declare function deliverMemberContent(options: MemberContentDeliveryOptions): Promise<MemberContentReceipt>;
+
 /** Current wire version for parent-authored admission decisions. */
 declare const ADMISSION_GRANTS_SCHEMA_VERSION: 1;
 /** Whether an exact email can skip or must retain the Chapter interview. */
@@ -1009,4 +1132,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };
+export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type MemberContentDeliveryOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverMemberContent, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };

package/dist/worker/index.d.ts

@@ -92,6 +92,55 @@ interface ResolvedSignupControl {
     stripeMode: "test" | "live";
 }
 
+/** Optional authenticated member-content surface for a chapter site. */
+interface ChapterMemberContent {
+    /** Keep Chapter-admin authoring enabled. Defaults to true. */
+    localAuthoring?: boolean;
+    /** Optional Parent/Built Not Found authority for signed inherited revisions. */
+    parent?: {
+        sourceId: string;
+        /** Follower-vault key holding the dedicated content edge secret. */
+        secretName?: string;
+    };
+}
+/** Validated member-content settings carried on a resolved Chapter. */
+interface ResolvedMemberContent {
+    enabled: true;
+    localAuthoring: boolean;
+    parent: {
+        sourceId: string;
+        secretName: string;
+    } | null;
+}
+
+/** Scalar kinds accepted by the Chapter schema adapter. */
+type AttrType = "string" | "number" | "boolean" | "json";
+/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
+interface Attr {
+    type: AttrType;
+    unique: boolean;
+    indexed: boolean;
+    optional: boolean;
+}
+/** One odla-db namespace: its attribute map. */
+interface Entity {
+    attrs: Record<string, Attr>;
+}
+/** A serialized odla-db schema fragment (namespaces + links). */
+interface DbSchema {
+    entities: Record<string, Entity>;
+    links: Record<string, unknown>;
+}
+/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
+interface Rule {
+    view: string;
+    create: string;
+    update: string;
+    delete: string;
+}
+/** Namespace → rule set. */
+type DbRules = Record<string, Rule>;
+
 /** One follower site a leader can push CRM records to. The secret VALUE never
  * lives in config: `secretName` names the leader tenant's vaulted copy of the
  * follower's `network_share_secret`. */
@@ -270,33 +319,6 @@ interface ChapterDb {
         get(name: string): Promise<string>;
     };
 }
-/** Scalar kinds accepted by the Chapter schema adapter. */
-type AttrType = "string" | "number" | "boolean" | "json";
-/** One odla-db attribute: its type and index/uniqueness/optionality flags. */
-interface Attr {
-    type: AttrType;
-    unique: boolean;
-    indexed: boolean;
-    optional: boolean;
-}
-/** One odla-db namespace: its attribute map. */
-interface Entity {
-    attrs: Record<string, Attr>;
-}
-/** A serialized odla-db schema fragment (namespaces + links). */
-interface DbSchema {
-    entities: Record<string, Entity>;
-    links: Record<string, unknown>;
-}
-/** Per-namespace CEL rule strings (deny-all is `"false"` for each action). */
-interface Rule {
-    view: string;
-    create: string;
-    update: string;
-    delete: string;
-}
-/** Namespace → rule set. */
-type DbRules = Record<string, Rule>;
 /** Typed semantic roles shared by the public site and application surfaces. */
 interface ChapterBrandTokens {
     background?: string;
@@ -520,6 +542,8 @@ interface ChapterConfig {
     network?: ChapterNetwork;
     /** A separate signed edge that may control this chapter's complete signup. */
     signupControl?: ChapterSignupControl;
+    /** Authenticated parent + chapter member pages with server-enforced tier access. */
+    memberContent?: ChapterMemberContent;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -616,6 +640,8 @@ interface Chapter {
     network: ResolvedNetwork;
     /** Null unless this follower explicitly delegates signup authority. */
     signupControl: ResolvedSignupControl | null;
+    /** Null unless the standard authenticated member-content surface is enabled. */
+    memberContent: ResolvedMemberContent | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */
@@ -883,6 +909,103 @@ interface SignupControlDeliveryOptions {
 /** Build and send one signed desired-state delivery. Durable retry belongs to the hub outbox. */
 declare function deliverSignupControl(options: SignupControlDeliveryOptions): Promise<SignupControlReceipt>;
 
+/** Versioned contract for authenticated member content. */
+declare const MEMBER_CONTENT_SCHEMA_VERSION: 1;
+/** Authority that authored one independently stored member-content layer. */
+type MemberContentSourceType = "parent" | "chapter";
+/** Stable author identity attached to every member-content document and page. */
+interface MemberContentSource {
+    type: MemberContentSourceType;
+    appId: string;
+}
+/** Chapter deployment that a parent member-content revision is intended for. */
+interface MemberContentTarget {
+    chapterId: string;
+    environment: string;
+}
+/** Navigation is data, so agents do not have to coordinate route code. */
+interface MemberPageNavigation {
+    section: string;
+    order: number;
+    parentId?: string;
+}
+/** Explicit sets avoid unsafe assumptions that commercial tiers form a ladder. */
+type MemberPageAudience = {
+    kind: "all-members";
+} | {
+    kind: "tiers";
+    tierIds: readonly string[];
+};
+/** Authored offer copy. Price and provider identity deliberately do not live here. */
+interface MemberPageUpsellOffer {
+    tierId: string;
+    label?: string;
+    bodyMarkdown?: string;
+    ctaLabel?: string;
+}
+/** Parent offer authority is explicit; a Chapter can edit only a delegated offer. */
+type MemberPageUpsell = {
+    owner: "parent";
+    offer: MemberPageUpsellOffer;
+} | {
+    owner: "chapter";
+    offer?: MemberPageUpsellOffer;
+};
+/** Authored member page whose body is disclosed only after server-side projection. */
+interface MemberContentPage {
+    id: string;
+    slug: string;
+    title: string;
+    summary?: string;
+    navigation: MemberPageNavigation;
+    audience: MemberPageAudience;
+    /** Safe Markdown shown while the body is withheld. */
+    teaserMarkdown?: string;
+    /** Never serialized to a viewer whose audience does not match. */
+    bodyMarkdown: string;
+    upsell?: MemberPageUpsell;
+}
+/** Chapter-owned offer attached to a Parent page that delegated offer authority. */
+interface MemberPageUpsellOverride {
+    pageId: string;
+    offer: MemberPageUpsellOffer;
+}
+/** One complete source layer. Parent and Chapter layers are stored independently. */
+interface MemberContentDocument {
+    schemaVersion: typeof MEMBER_CONTENT_SCHEMA_VERSION;
+    revision: number;
+    generatedAt: number;
+    source: MemberContentSource;
+    target?: MemberContentTarget;
+    pages: readonly MemberContentPage[];
+    upsellOverrides?: readonly MemberPageUpsellOverride[];
+}
+/** Canonical parent document and digest transmitted over the signed control edge. */
+interface MemberContentEnvelope {
+    digest: string;
+    document: MemberContentDocument;
+}
+/** Durable Chapter acknowledgement for an accepted or idempotently replayed revision. */
+interface MemberContentReceipt {
+    ok: true;
+    target: MemberContentTarget;
+    revision: number;
+    digest: string;
+    status: "accepted" | "replayed";
+    acknowledgedAt: number;
+}
+
+/** Inputs for one signed Parent → Chapter member-content delivery. */
+interface MemberContentDeliveryOptions {
+    secret: string;
+    sender: string;
+    targetUrl: string | URL;
+    envelope: MemberContentEnvelope;
+    fetch?: typeof globalThis.fetch;
+}
+/** Deliver one exact revision. Durable retry and approval remain Parent concerns. */
+declare function deliverMemberContent(options: MemberContentDeliveryOptions): Promise<MemberContentReceipt>;
+
 /** Current wire version for parent-authored admission decisions. */
 declare const ADMISSION_GRANTS_SCHEMA_VERSION: 1;
 /** Whether an exact email can skip or must retain the Chapter interview. */
@@ -1009,4 +1132,4 @@ declare function chapterWorker(options: ChapterWorkerOptions): {
     fetch(req: Request, env: ChapterEnv): Promise<Response>;
 };
 
-export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };
+export { type ActiveSignupControlHtml, type ActiveSignupControlThemeOptions, type AdmissionGrantDeliveryOptions, type ChapterEnv, type ChapterWorkerOptions, type MemberContentDeliveryOptions, type Route, type SignupControlDeliveryOptions, type WorkerContext, chapterWorker, createWorkerContext, deliverAdmissionGrants, deliverMemberContent, deliverSignupControl, renderActiveSignupControlHtml, withActiveSignupControlTheme };