@odla-ai/chapter 0.36.0 → 0.38.0

package/dist/index.cjs

@@ -22,12 +22,16 @@ var index_exports = {};
 __export(index_exports, {
   ADMISSION_GRANTS_PATH: () => ADMISSION_GRANTS_PATH,
   ADMISSION_GRANTS_SCHEMA_VERSION: () => ADMISSION_GRANTS_SCHEMA_VERSION,
+  CHAPTER_FLOW_FIELDS_SCHEMA_VERSION: () => CHAPTER_FLOW_FIELDS_SCHEMA_VERSION,
   CHAPTER_PROMOTION_ADAPTER: () => CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY: () => DEFAULT_CHAPTER_COPY,
   DEFAULT_SHARE_FIELDS: () => DEFAULT_SHARE_FIELDS,
   GIFT_OFFER_CATALOG_VERSION: () => GIFT_OFFER_CATALOG_VERSION,
   MAX_GIFT_OFFERS: () => MAX_GIFT_OFFERS,
   MEMBERSHIP_PAGE_RENDERER: () => MEMBERSHIP_PAGE_RENDERER,
+  MEMBER_CONTENT_CONTROL_PATH: () => MEMBER_CONTENT_CONTROL_PATH,
+  MEMBER_CONTENT_PATH: () => MEMBER_CONTENT_PATH,
+  MEMBER_CONTENT_SCHEMA_VERSION: () => MEMBER_CONTENT_SCHEMA_VERSION,
   SCHEDULING_DEFAULTS: () => SCHEDULING_DEFAULTS,
   SIGNUP_CONTROL_PATH: () => SIGNUP_CONTROL_PATH,
   SIGNUP_CONTROL_SCHEMA_VERSION: () => SIGNUP_CONTROL_SCHEMA_VERSION,
@@ -35,6 +39,7 @@ __export(index_exports, {
   SIGNUP_CONTROL_THEME_STYLE_ID: () => SIGNUP_CONTROL_THEME_STYLE_ID,
   applicantProfile: () => applicantProfile,
   applicationBookingUpdate: () => applicationBookingUpdate,
+  applicationFlowFields: () => applicationFlowFields,
   applicationSummary: () => applicationSummary,
   applyMembershipTierMarkdown: () => applyMembershipTierMarkdown,
   backfillCrm: () => backfillCrm,
@@ -48,9 +53,11 @@ __export(index_exports, {
   canChangeRole: () => canChangeRole,
   canTransition: () => canTransition,
   canceledPatch: () => canceledPatch,
+  canonicalMemberContent: () => canonicalMemberContent,
   canonicalSignupControl: () => canonicalSignupControl,
   chapterBrandFromTokens: () => chapterBrandFromTokens,
   chapterDb: () => chapterDb,
+  chapterFlowFieldContract: () => chapterFlowFieldContract,
   clampArray: () => clampArray,
   clerkGetUser: () => clerkGetUser,
   clerkGetUserByEmail: () => clerkGetUserByEmail,
@@ -59,10 +66,12 @@ __export(index_exports, {
   clerkListUsers: () => clerkListUsers,
   clerkSetRole: () => clerkSetRole,
   clerkUserRequest: () => clerkUserRequest,
+  composeMemberContent: () => composeMemberContent,
   createAdmissionGrantEnvelope: () => createAdmissionGrantEnvelope,
   createChapterIntegration: () => createChapterIntegration,
   createClerkInvitation: () => createClerkInvitation,
   createClerkUser: () => createClerkUser,
+  createMemberContentEnvelope: () => createMemberContentEnvelope,
   createSignupControlEnvelope: () => createSignupControlEnvelope,
   dashboardMetricData: () => dashboardMetricData,
   defaultCrm: () => defaultCrm,
@@ -77,6 +86,7 @@ __export(index_exports, {
   firstPaymentPatch: () => firstPaymentPatch,
   formatChapterCopy: () => formatChapterCopy,
   formationFields: () => formationFields,
+  formationFlowFields: () => formationFlowFields,
   getVaultSecret: () => getVaultSecret,
   giftOfferActive: () => giftOfferActive,
   hasDisclaimerAck: () => hasDisclaimerAck,
@@ -98,11 +108,14 @@ __export(index_exports, {
   meetingCreateRow: () => meetingCreateRow,
   meetingRescheduleUpdate: () => meetingRescheduleUpdate,
   memberApplication: () => memberApplication,
+  memberContentDigest: () => memberContentDigest,
+  memberContentDocument: () => memberContentDocument,
   memberSession: () => memberSession,
   membershipPageDocument: () => membershipPageDocument,
   membershipTierPresentationFromMarkdown: () => membershipTierPresentationFromMarkdown,
   networkSourceTag: () => networkSourceTag,
   normalizeAdmissionEmail: () => normalizeAdmissionEmail,
+  normalizeChapterEmail: () => normalizeChapterEmail,
   normalizeSharedRecord: () => normalizeSharedRecord,
   normalizeWebhookEvent: () => normalizeWebhookEvent,
   offerableTiers: () => offerableTiers,
@@ -110,6 +123,7 @@ __export(index_exports, {
   personInputFromApp: () => personInputFromApp,
   planDelivery: () => planDelivery,
   projectApplicant: () => projectApplicant,
+  projectMemberContent: () => projectMemberContent,
   projectSharedRecord: () => projectSharedRecord,
   publicGiftOffers: () => publicGiftOffers,
   reconcileMeetings: () => reconcileMeetings,
@@ -124,6 +138,7 @@ __export(index_exports, {
   resolveChapterCopy: () => resolveChapterCopy,
   resolveJoinContinuation: () => resolveJoinContinuation,
   resolveLeaderFormation: () => resolveLeaderFormation,
+  resolveMemberContent: () => resolveMemberContent,
   resolvePipeline: () => resolvePipeline,
   resolveScheduling: () => resolveScheduling,
   resolveSignupControl: () => resolveSignupControl,
@@ -147,6 +162,7 @@ __export(index_exports, {
   updateClerkUserMetadataByEmail: () => updateClerkUserMetadataByEmail,
   validateAdmissionGrantDocument: () => validateAdmissionGrantDocument,
   validateGiftOfferCatalog: () => validateGiftOfferCatalog,
+  validateMemberContentDocument: () => validateMemberContentDocument,
   validateMembershipPageDocument: () => validateMembershipPageDocument,
   validateScheduling: () => validateScheduling,
   validateSignupControlDocument: () => validateSignupControlDocument,
@@ -172,212 +188,10 @@ async function applicationIdForSubmission(submissionId) {
   return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 
-// src/admission-grants-contract.ts
-var ADMISSION_GRANTS_SCHEMA_VERSION = 1;
-var ADMISSION_GRANTS_PATH = "/api/admission-grants";
-
-// src/signup-control-canonical.ts
-var encoder = new TextEncoder();
-function canonicalValue(value) {
-  if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
-    return JSON.stringify(value);
-  }
-  if (Array.isArray(value)) return `[${value.map(canonicalValue).join(",")}]`;
-  if (typeof value !== "object") throw new TypeError("signup control contains an unsupported value");
-  const record2 = value;
-  const entries = Object.keys(record2).sort().flatMap((key) => {
-    const item = record2[key];
-    return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue(item)}`];
-  });
-  return `{${entries.join(",")}}`;
-}
-function canonicalSignupControl(value) {
-  return canonicalValue(value);
-}
-async function signupControlDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalSignupControl(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
-}
-async function createSignupControlEnvelope(document) {
-  return { document, digest: await signupControlDigest(document) };
-}
-
-// src/admission-grants.ts
-var ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
-var MAX_GRANTS = 2e3;
-var MAX_NOTE = 2e3;
-var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-var isAdmissionEmail = (value) => EMAIL_RE.test(value);
-function normalizeAdmissionEmail(email) {
+// src/email-identity.ts
+function normalizeChapterEmail(email) {
   return email.trim().toLowerCase();
 }
-function validateAdmissionGrantDocument(input) {
-  const errors = [];
-  const root = input && typeof input === "object" ? input : {};
-  if (root.schemaVersion !== ADMISSION_GRANTS_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
-  const revision = Number(root.revision);
-  const generatedAt = Number(root.generatedAt);
-  if (!Number.isSafeInteger(revision) || revision < 1) errors.push("document.revision must be a positive integer");
-  if (!Number.isFinite(generatedAt) || generatedAt <= 0) errors.push("document.generatedAt must be epoch milliseconds");
-  const source = root.source && typeof root.source === "object" ? root.source : {};
-  const target = root.target && typeof root.target === "object" ? root.target : {};
-  const sourceId = typeof source.appId === "string" ? source.appId : "";
-  const sourceActor = typeof source.actor === "string" ? source.actor.trim() : "";
-  const chapterId = typeof target.chapterId === "string" ? target.chapterId : "";
-  const environment = typeof target.environment === "string" ? target.environment : "";
-  if (!ID.test(sourceId)) errors.push("document.source.appId must be an identifier");
-  if (!sourceActor || sourceActor.length > 256) errors.push("document.source.actor must be 1-256 characters");
-  if (!ID.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
-  if (!ID.test(environment)) errors.push("document.target.environment must be an identifier");
-  if (!Array.isArray(root.grants)) errors.push("document.grants must be an array");
-  const rawGrants = Array.isArray(root.grants) ? root.grants : [];
-  if (rawGrants.length > MAX_GRANTS) errors.push(`document.grants supports at most ${MAX_GRANTS} entries`);
-  const grants = [];
-  const seenIds = /* @__PURE__ */ new Set();
-  const seenEmails = /* @__PURE__ */ new Set();
-  for (const [index, raw] of rawGrants.slice(0, MAX_GRANTS).entries()) {
-    const grant = raw && typeof raw === "object" ? raw : {};
-    const id4 = typeof grant.id === "string" ? grant.id : "";
-    const email = typeof grant.email === "string" ? grant.email.trim() : "";
-    const normalized = normalizeAdmissionEmail(email);
-    const decision = grant.decision;
-    const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
-    const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID.test(id4)) errors.push(`document.grants[${index}].id must be an identifier`);
-    if (seenIds.has(id4)) errors.push(`document.grants repeats id "${id4}"`);
-    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
-    if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
-    if (decision !== "waive_interview" && decision !== "require_interview") {
-      errors.push(`document.grants[${index}].decision is invalid`);
-    }
-    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index}].note is too long`);
-    if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
-      errors.push(`document.grants[${index}].expiresAt must be epoch milliseconds`);
-    }
-    seenIds.add(id4);
-    seenEmails.add(normalized);
-    grants.push({
-      id: id4,
-      email,
-      decision,
-      ...note ? { note } : {},
-      ...expiresAt !== void 0 ? { expiresAt } : {}
-    });
-  }
-  if (errors.length) return { ok: false, errors };
-  return {
-    ok: true,
-    value: {
-      schemaVersion: ADMISSION_GRANTS_SCHEMA_VERSION,
-      revision,
-      generatedAt,
-      source: { appId: sourceId, actor: sourceActor },
-      target: { chapterId, environment },
-      grants
-    }
-  };
-}
-async function createAdmissionGrantEnvelope(document) {
-  const checked = validateAdmissionGrantDocument(document);
-  if (!checked.ok) throw new TypeError(`Invalid admission grant document: ${checked.errors.join("; ")}`);
-  return { document: checked.value, digest: await signupControlDigest(checked.value) };
-}
-var rows = (value) => Array.isArray(value) ? value : [];
-function asGrant(row) {
-  if (typeof row.id !== "string" || typeof row.emailNormalized !== "string") return null;
-  if (row.sourceScope !== "local" && row.sourceScope !== "parent") return null;
-  if (row.decision !== "waive_interview" && row.decision !== "require_interview") return null;
-  return row;
-}
-async function findAdmissionGrant(db, targetId, email, now) {
-  const emailNormalized = normalizeAdmissionEmail(email);
-  if (!isAdmissionEmail(emailNormalized)) return null;
-  const result = await db.query({ admissionGrants: { $: { where: { emailNormalized }, limit: 100 } } });
-  const active = rows(result.admissionGrants).map(asGrant).filter((grant) => Boolean(
-    grant && grant.targetId === targetId && grant.active === true && !grant.revokedAt && (!grant.expiresAt || grant.expiresAt > now) && !grant.consumedApplicationId
-  )).sort((a, b) => {
-    const scope = Number(b.sourceScope === "local") - Number(a.sourceScope === "local");
-    return scope || b.createdAt - a.createdAt;
-  });
-  return active[0] ?? null;
-}
-async function hasAdmissionRevision(db, sourceId, targetId, environment) {
-  const where = { sourceId, targetId, environment };
-  if (db.aggregate) {
-    return Number((await db.aggregate("admissionGrantRevisions", { count: true }, { where })).count ?? 0) > 0;
-  }
-  const found = await db.query({ admissionGrantRevisions: {} });
-  return rows(found.admissionGrantRevisions).some((row) => row.sourceId === sourceId && row.targetId === targetId && row.environment === environment);
-}
-async function loadLatestAdmissionRevision(db, sourceId, targetId, environment) {
-  if (!await hasAdmissionRevision(db, sourceId, targetId, environment)) return null;
-  const result = await db.query({ admissionGrantRevisions: { $: {
-    where: { sourceId, targetId, environment },
-    order: { revision: "desc" },
-    limit: 1
-  } } });
-  const row = rows(result.admissionGrantRevisions).sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0];
-  return row ? row : null;
-}
-async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
-  const current = rows((await db.query({ admissionGrants: { $: {
-    where: { sourceScope: "parent", sourceId: document.source.appId, targetId: document.target.chapterId },
-    limit: MAX_GRANTS
-  } } })).admissionGrants);
-  const incomingIds = new Set(document.grants.map((grant) => `admission:parent:${document.source.appId}:${grant.id}`));
-  const ops = [];
-  for (const row of current) {
-    const id4 = String(row.id ?? "");
-    if (id4 && !incomingIds.has(id4)) ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
-      active: false,
-      revokedAt: receivedAt,
-      revokedBy: document.source.actor,
-      updatedAt: receivedAt,
-      updatedBy: document.source.actor
-    } });
-  }
-  for (const grant of document.grants) {
-    const id4 = `admission:parent:${document.source.appId}:${grant.id}`;
-    const existing = current.find((row) => row.id === id4);
-    ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
-      id: id4,
-      sourceGrantId: grant.id,
-      sourceScope: "parent",
-      sourceId: document.source.appId,
-      targetId: document.target.chapterId,
-      email: grant.email,
-      emailNormalized: normalizeAdmissionEmail(grant.email),
-      decision: grant.decision,
-      ...grant.note ? { note: grant.note } : {},
-      ...grant.expiresAt ? { expiresAt: grant.expiresAt } : {},
-      active: true,
-      sourceRevision: document.revision,
-      createdAt: Number(existing?.createdAt ?? receivedAt),
-      createdBy: String(existing?.createdBy ?? document.source.actor),
-      updatedAt: receivedAt,
-      updatedBy: document.source.actor
-    } });
-    const retract = [
-      ...!grant.note && existing?.note !== void 0 ? ["note"] : [],
-      ...grant.expiresAt === void 0 && existing?.expiresAt !== void 0 ? ["expiresAt"] : []
-    ];
-    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id4, attrs: retract });
-  }
-  if (previous?.active) ops.push({ t: "update", ns: "admissionGrantRevisions", id: previous.id, attrs: { active: false } });
-  const revisionId = `admission-revision:${document.source.appId}:${document.target.environment}:${document.revision}`;
-  ops.push({ t: "update", ns: "admissionGrantRevisions", id: revisionId, attrs: {
-    id: revisionId,
-    sourceId: document.source.appId,
-    targetId: document.target.chapterId,
-    environment: document.target.environment,
-    revision: document.revision,
-    digest,
-    active: true,
-    receivedAt
-  } });
-  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest}` });
-}
 
 // src/member.ts
 var DEFAULT_REQUIRED = ["firstName", "lastName", "email", "referral", "whoYouAre", "message"];
@@ -430,9 +244,9 @@ function resolveApplication(a) {
     validateEmail: a?.validateEmail ?? true
   };
 }
-var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function isValidEmail(value) {
-  return typeof value === "string" && EMAIL_RE2.test(value);
+  return typeof value === "string" && EMAIL_RE.test(value);
 }
 function clampArray(value, max) {
   if (!Array.isArray(value)) return value;
@@ -444,14 +258,14 @@ function hasDisclaimerAck(fields) {
 var IDENTITY_FIELDS = /* @__PURE__ */ new Set(["email", "firstName", "lastName"]);
 function applicantProfile(chapter, fields) {
   const app = chapter.application;
-  const allowed = (f) => app.profileFields.includes(f);
+  const allowed2 = (f) => app.profileFields.includes(f);
   const profile = {};
   for (const f of [...app.required, ...app.optional]) {
-    if (IDENTITY_FIELDS.has(f) || !allowed(f)) continue;
+    if (IDENTITY_FIELDS.has(f) || !allowed2(f)) continue;
     const v = fields[f];
     if (typeof v === "string" && v.trim() !== "") profile[f] = v.trim();
   }
-  if (fields.focus !== void 0 && allowed("focus")) profile.focus = clampArray(fields.focus, app.maxArrayLen);
+  if (fields.focus !== void 0 && allowed2("focus")) profile.focus = clampArray(fields.focus, app.maxArrayLen);
   return Object.keys(profile).length > 0 ? profile : void 0;
 }
 async function submitApplication(db, chapter, fields, opts) {
@@ -467,7 +281,7 @@ async function submitApplication(db, chapter, fields, opts) {
     const cap = app.maxLen[f] ?? app.defaultMaxLen;
     if (typeof v === "string" && v.length > cap) return { ok: false, error: `${f} exceeds ${cap} characters` };
   }
-  if (app.validateEmail && typeof fields.email === "string" && !isValidEmail(fields.email)) {
+  if (app.validateEmail && typeof fields.email === "string" && !isValidEmail(fields.email.trim())) {
     return { ok: false, error: "email must be a valid email address" };
   }
   const acked = hasDisclaimerAck(fields);
@@ -483,7 +297,7 @@ async function submitApplication(db, chapter, fields, opts) {
   if (fields.focus !== void 0) row.focus = clampArray(fields.focus, app.maxArrayLen);
   if (opts.groupId) row.groupId = opts.groupId;
   if (typeof fields.email === "string" && isValidEmail(fields.email.trim())) {
-    row.emailNormalized = normalizeAdmissionEmail(fields.email);
+    row.emailNormalized = normalizeChapterEmail(fields.email);
   }
   if (opts.admissionGrant?.decision === "waive_interview") {
     row.admissionGrantId = opts.admissionGrant.id;
@@ -806,6 +620,30 @@ var signupControls = {
     receivedAt: attr4("number", { indexed: true })
   }
 };
+var memberContentControls = {
+  attrs: {
+    id: id3(),
+    sourceId: attr4("string", { indexed: true }),
+    targetId: attr4("string", { indexed: true }),
+    environment: attr4("string", { indexed: true }),
+    revision: attr4("number", { indexed: true }),
+    digest: attr4("string", { indexed: true }),
+    document: attr4("json"),
+    active: attr4("boolean", { indexed: true }),
+    receivedAt: attr4("number", { indexed: true })
+  }
+};
+var memberContentLocal = {
+  attrs: {
+    id: id3(),
+    chapterId: attr4("string", { indexed: true }),
+    environment: attr4("string", { indexed: true }),
+    revision: attr4("number", { indexed: true }),
+    document: attr4("json"),
+    updatedAt: attr4("number", { indexed: true }),
+    updatedBy: attr4("string", { optional: true })
+  }
+};
 var groups = {
   attrs: {
     id: id3(),
@@ -877,7 +715,7 @@ var emailLog = {
     sentAt: attr4("number", { indexed: true })
   }
 };
-function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false) {
+function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false) {
   const entities = {};
   if (mode === "chapter") {
     entities.applications = applicationsFor(application);
@@ -893,6 +731,10 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.giftEntitlements = giftEntitlementsEntity;
     entities.giftRedemptionAttempts = giftRedemptionAttemptsEntity;
     if (includeSignupControl) entities.signupControls = signupControls;
+    if (includeMemberContent) {
+      entities.memberContentControls = memberContentControls;
+      entities.memberContentLocal = memberContentLocal;
+    }
   }
   if (auth.source === "table") entities.admins = admins;
   if (auth.superAdmins) entities.superAdmins = superAdmins;
@@ -1517,6 +1359,82 @@ function formatChapterCopy(template, values) {
   );
 }
 
+// src/flow-fields.ts
+var CHAPTER_FLOW_FIELDS_SCHEMA_VERSION = 1;
+var APPLICATION_LABELS = {
+  firstName: "First name",
+  lastName: "Last name",
+  email: "Email",
+  referral: "Referral source",
+  referralName: "Referral name",
+  whoYouAre: "Who you are",
+  linkedin: "LinkedIn",
+  message: "Intro message",
+  phone: "Phone",
+  state: "State"
+};
+function humanize(id4) {
+  const text3 = id4.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text3 ? `${text3[0].toUpperCase()}${text3.slice(1)}` : id4;
+}
+function applicationDefs(chapter) {
+  try {
+    return chapter.crm.type("person").fields;
+  } catch {
+    return {};
+  }
+}
+function applicationType(id4, def) {
+  if (def && ["string", "email", "url", "enum"].includes(def.type)) return def.type;
+  return id4 === "email" ? "email" : id4 === "linkedin" ? "url" : "string";
+}
+function applicationFlowFields(chapter, application = chapter.application) {
+  const defs = applicationDefs(chapter);
+  return [...application.required, ...application.optional].map((id4, order) => {
+    const def = defs[id4];
+    const conditions = application.conditions[id4];
+    const type = applicationType(id4, def);
+    return {
+      id: id4,
+      label: def?.label ?? APPLICATION_LABELS[id4] ?? humanize(id4),
+      type,
+      required: application.required.includes(id4),
+      order,
+      maxLength: application.maxLen[id4] ?? application.defaultMaxLen,
+      ...type === "enum" && def?.options ? { options: [...def.options] } : {},
+      ...conditions ? { conditions: { ...conditions } } : {},
+      ...type === "email" ? { emailIdentity: "literal" } : {}
+    };
+  });
+}
+function resolveFormationFlowFields(crm, formation) {
+  if (!formation.enabled) return [];
+  const def = crm.type(formation.type);
+  return [...formation.required, ...formation.optional].map((id4, order) => {
+    const field = def.fields[id4];
+    return {
+      id: id4,
+      label: field.label ?? humanize(id4),
+      type: field.type,
+      required: formation.required.includes(id4),
+      order,
+      maxLength: formation.maxLen[id4] ?? formation.defaultMaxLen,
+      ...field.options ? { options: [...field.options] } : {},
+      ...id4 === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
+    };
+  });
+}
+function formationFlowFields(chapter, formation = chapter.formation) {
+  return resolveFormationFlowFields(chapter.crm, formation);
+}
+function chapterFlowFieldContract(chapter, flow, application = chapter.application) {
+  return {
+    schemaVersion: CHAPTER_FLOW_FIELDS_SCHEMA_VERSION,
+    flow,
+    fields: flow === "join" ? applicationFlowFields(chapter, application) : formationFlowFields(chapter)
+  };
+}
+
 // src/formation.ts
 var DEFAULT_REQUIRED2 = ["name", "email", "location", "thesis"];
 var DEFAULT_OPTIONAL2 = ["proposedChapter", "experience", "collaborators"];
@@ -1579,17 +1497,7 @@ function resolveLeaderFormation(input, crm) {
   };
 }
 function formationFields(crm, formation) {
-  const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id4) => {
-    const field = def.fields[id4];
-    return {
-      id: id4,
-      label: field.label ?? id4,
-      type: field.type,
-      required: formation.required.includes(id4),
-      ...field.options ? { options: field.options } : {}
-    };
-  });
+  return resolveFormationFlowFields(crm, formation);
 }
 
 // src/config-network.ts
@@ -1738,15 +1646,35 @@ function resolveSignupControl(input) {
   return { sourceId: input.sourceId, secretName, stripeMode: input.stripeMode };
 }
 
-// src/config.ts
+// src/config-member-content.ts
 var SLUG3 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SECRET_NAME2 = /^[a-z][a-z0-9_]{1,127}$/;
+function resolveMemberContent(input) {
+  if (!input) return null;
+  const parent = input.parent;
+  if (parent && !SLUG3.test(parent.sourceId)) {
+    throw new Error("defineChapter.memberContent.parent.sourceId: must be a lowercase app slug");
+  }
+  const secretName = parent?.secretName?.trim() || "member_content_control_secret";
+  if (parent && !SECRET_NAME2.test(secretName)) {
+    throw new Error("defineChapter.memberContent.parent.secretName: must be a vault-key identifier");
+  }
+  return {
+    enabled: true,
+    localAuthoring: input.localAuthoring !== false,
+    parent: parent ? { sourceId: parent.sourceId, secretName } : null
+  };
+}
+
+// src/config.ts
+var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 function isResolvedCrm(x) {
   return !!x && typeof x === "object" && "prepare" in x && typeof x.prepare === "function";
 }
 function defineChapter(config) {
   if (!config || typeof config !== "object") throw new Error("defineChapter: a config object is required");
   const { id: id4, name } = config;
-  if (typeof id4 !== "string" || !SLUG3.test(id4)) {
+  if (typeof id4 !== "string" || !SLUG4.test(id4)) {
     throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id4)}`);
   }
   if (typeof name !== "string" || name.trim() === "") throw new Error("defineChapter.name: a non-empty name is required");
@@ -1771,16 +1699,21 @@ function defineChapter(config) {
   const copy = resolveChapterCopy(config.copy);
   const network = resolveNetwork(config, crm);
   const signupControl = resolveSignupControl(config.signupControl);
+  const memberContent = resolveMemberContent(config.memberContent);
   const formation = resolveLeaderFormation(config.formation, crm);
   if (signupControl && mode !== "chapter") {
     throw new Error("defineChapter.signupControl: only chapter-mode followers can receive signup control");
   }
+  if (memberContent && mode !== "chapter") {
+    throw new Error("defineChapter.memberContent: only chapter-mode sites can serve member content");
+  }
   const { schema, rules } = chapterDb(
     mode,
     auth,
     network.targets.length > 0,
     application,
-    Boolean(signupControl)
+    Boolean(signupControl),
+    Boolean(memberContent)
   );
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";
@@ -1837,6 +1770,7 @@ function defineChapter(config) {
     copy,
     network,
     signupControl,
+    memberContent,
     formation,
     crm,
     auth,
@@ -2099,44 +2033,364 @@ function createChapterIntegration(chapter, options = {}) {
       });
     }
   }
-  const isLeader = (chapter.config.network?.targets?.length ?? 0) > 0;
-  const runbooks = isLeader ? {
-    role: "leader",
-    slugs: ["chapter-leader", "chapter-network", "crm"],
-    guidance: `${chapter.name} is a LEADER hub: it holds the CRM and shares records with its chapters. Read it with \`odla-ai runbook get chapter-leader\`.`
-  } : {
-    role: "follower",
-    slugs: ["chapter-follower", "chapter-network"],
-    guidance: `${chapter.name} is a FOLLOWER site: it receives people and records from a leader hub. Read it with \`odla-ai runbook get chapter-follower\`.`
+  const isLeader = (chapter.config.network?.targets?.length ?? 0) > 0;
+  const runbooks = isLeader ? {
+    role: "leader",
+    slugs: ["chapter-leader", "chapter-network", "crm"],
+    guidance: `${chapter.name} is a LEADER hub: it holds the CRM and shares records with its chapters. Read it with \`odla-ai runbook get chapter-leader\`.`
+  } : {
+    role: "follower",
+    slugs: ["chapter-follower", "chapter-network"],
+    guidance: `${chapter.name} is a FOLLOWER site: it receives people and records from a leader hub. Read it with \`odla-ai runbook get chapter-follower\`.`
+  };
+  return {
+    id: "chapter",
+    title: `Chapter: ${chapter.name}`,
+    npm: "@odla-ai/chapter",
+    schema: {
+      entities: { ...crmDesc.schema.entities, ...chapter.schema.entities },
+      links: { ...crmDesc.schema.links, ...chapter.schema.links }
+    },
+    rules: { ...crmDesc.rules, ...chapter.rules },
+    seeds,
+    probes: [
+      ...crmDesc.probes ?? [],
+      // The snapshot route is deliberately private. A credential-free smoke
+      // request must prove that the route is mounted and closed.
+      { path: "/api/network/snapshot", expectedStatus: 401 },
+      ...chapter.network.readers.length > 0 ? [{ path: "/api/network/records", expectedStatus: 401 }] : [],
+      ...chapter.network.readers.some((reader) => reader.sharedNotes.length > 0) ? [{
+        path: "/api/network/shared-notes",
+        expectedStatus: 401
+      }] : [],
+      // Formation metadata is public only when the host explicitly enables
+      // the bounded intake contract.
+      ...chapter.formation.enabled ? [{ path: "/api/formation/config", expectedStatus: 200 }] : [],
+      ...chapter.memberContent ? [
+        { path: "/api/member-content", expectedStatus: 401 },
+        { path: "/api/admin/member-content", expectedStatus: 401 }
+      ] : []
+    ],
+    runbooks
+  };
+}
+
+// src/member-content-validation-helpers.ts
+var ID = /^[a-z][a-z0-9-]{0,79}$/;
+var SLUG5 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var ROOT_KEYS = /* @__PURE__ */ new Set(["schemaVersion", "revision", "generatedAt", "source", "target", "pages", "upsellOverrides"]);
+var SOURCE_KEYS = /* @__PURE__ */ new Set(["type", "appId"]);
+var TARGET_KEYS = /* @__PURE__ */ new Set(["chapterId", "environment"]);
+var PAGE_KEYS = /* @__PURE__ */ new Set(["id", "slug", "title", "summary", "navigation", "audience", "teaserMarkdown", "bodyMarkdown", "upsell"]);
+var NAV_KEYS = /* @__PURE__ */ new Set(["section", "order", "parentId"]);
+var AUDIENCE_KEYS = /* @__PURE__ */ new Set(["kind", "tierIds"]);
+var UPSELL_KEYS = /* @__PURE__ */ new Set(["owner", "offer"]);
+var OFFER_KEYS = /* @__PURE__ */ new Set(["tierId", "label", "bodyMarkdown", "ctaLabel"]);
+var OVERRIDE_KEYS = /* @__PURE__ */ new Set(["pageId", "offer"]);
+var MAX_PAGES = 100;
+var MAX_MARKDOWN = 65536;
+var MAX_TEXT = 240;
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+function unknownKeys(value, allowed2, path, errors) {
+  for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
+}
+function textValue(value, path, errors, max = MAX_TEXT, required = false) {
+  if (value === void 0) {
+    if (required) errors.push(`${path} is required`);
+    return void 0;
+  }
+  if (typeof value !== "string") {
+    errors.push(`${path} must be a string`);
+    return void 0;
+  }
+  const valueText = value.trim();
+  if (required && !valueText) errors.push(`${path} is required`);
+  if (valueText.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return valueText;
+}
+function offerValue(value, path, errors, tiers2, audience) {
+  const raw = record(value);
+  if (!raw) {
+    errors.push(`${path} must be an object`);
+    return void 0;
+  }
+  unknownKeys(raw, OFFER_KEYS, path, errors);
+  const tierId = textValue(raw.tierId, `${path}.tierId`, errors, 80, true) ?? "";
+  if (tierId && !ID.test(tierId)) errors.push(`${path}.tierId must be a lowercase kebab-case id`);
+  if (tiers2.size && !tiers2.has(tierId)) errors.push(`${path}.tierId must reference a declared tier`);
+  if (audience?.kind === "tiers" && tierId && !audience.tierIds.includes(tierId)) {
+    errors.push(`${path}.tierId must grant access to this page`);
+  }
+  const label = textValue(raw.label, `${path}.label`, errors);
+  const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN);
+  const ctaLabel = textValue(raw.ctaLabel, `${path}.ctaLabel`, errors);
+  return {
+    tierId,
+    ...label ? { label } : {},
+    ...bodyMarkdown ? { bodyMarkdown } : {},
+    ...ctaLabel ? { ctaLabel } : {}
+  };
+}
+
+// src/member-content-validation.ts
+function validateMemberContentDocument(input, options = {}) {
+  const errors = [];
+  const root = record(input);
+  if (!root) return { ok: false, errors: ["document must be an object"] };
+  unknownKeys(root, ROOT_KEYS, "document", errors);
+  if (root.schemaVersion !== MEMBER_CONTENT_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  if (!Number.isInteger(root.revision) || Number(root.revision) < 1) errors.push("document.revision must be a positive integer");
+  if (!Number.isInteger(root.generatedAt) || Number(root.generatedAt) < 0) errors.push("document.generatedAt must be a non-negative integer timestamp");
+  const sourceRaw = record(root.source);
+  let source = { type: "chapter", appId: "invalid" };
+  if (!sourceRaw) errors.push("document.source must be an object");
+  else {
+    unknownKeys(sourceRaw, SOURCE_KEYS, "document.source", errors);
+    const type = sourceRaw.type;
+    const appId = textValue(sourceRaw.appId, "document.source.appId", errors, 63, true) ?? "";
+    if (type !== "parent" && type !== "chapter") errors.push("document.source.type must be parent or chapter");
+    if (appId && !ID.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
+    if (options.sourceType && type !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
+    if (options.sourceAppId && appId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
+    if (type === "parent" || type === "chapter") source = { type, appId };
+  }
+  let target;
+  if (root.target !== void 0) {
+    const targetRaw = record(root.target);
+    if (!targetRaw) errors.push("document.target must be an object");
+    else {
+      unknownKeys(targetRaw, TARGET_KEYS, "document.target", errors);
+      const chapterId = textValue(targetRaw.chapterId, "document.target.chapterId", errors, 63, true) ?? "";
+      const environment = textValue(targetRaw.environment, "document.target.environment", errors, 80, true) ?? "";
+      target = { chapterId, environment };
+    }
+  }
+  if (source.type === "parent" && !target) errors.push("document.target is required for parent content");
+  if (source.type === "chapter" && target) errors.push("document.target is not supported for chapter content");
+  if (!Array.isArray(root.pages)) errors.push("document.pages must be an array");
+  const rawPages = Array.isArray(root.pages) ? root.pages : [];
+  if (rawPages.length > MAX_PAGES) errors.push(`document.pages supports at most ${MAX_PAGES} entries`);
+  const tierIds = new Set((options.tiers ?? []).map((tier) => tier.id));
+  const knownParentIds = new Set((options.parentPages ?? []).map((page) => page.id));
+  const ids = /* @__PURE__ */ new Set();
+  const slugs = /* @__PURE__ */ new Set();
+  const pages = [];
+  for (const [index, value] of rawPages.slice(0, MAX_PAGES).entries()) {
+    const path = `document.pages[${index}]`;
+    const raw = record(value);
+    if (!raw) {
+      errors.push(`${path} must be an object`);
+      continue;
+    }
+    unknownKeys(raw, PAGE_KEYS, path, errors);
+    const id4 = textValue(raw.id, `${path}.id`, errors, 80, true) ?? "";
+    const slug = textValue(raw.slug, `${path}.slug`, errors, 120, true) ?? "";
+    const title = textValue(raw.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
+    if (id4 && !ID.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (slug && !SLUG5.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
+    if (ids.has(id4) || knownParentIds.has(id4)) errors.push(`${path}.id duplicates page "${id4}"`);
+    if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
+    ids.add(id4);
+    slugs.add(slug);
+    const navRaw = record(raw.navigation);
+    let navigation = { section: "General", order: index };
+    if (!navRaw) errors.push(`${path}.navigation must be an object`);
+    else {
+      unknownKeys(navRaw, NAV_KEYS, `${path}.navigation`, errors);
+      const section = textValue(navRaw.section, `${path}.navigation.section`, errors, 120, true) ?? "";
+      const order = navRaw.order;
+      if (!Number.isInteger(order) || Number(order) < 0 || Number(order) > 1e6) {
+        errors.push(`${path}.navigation.order must be an integer from 0 to 1,000,000`);
+      }
+      const parentId = textValue(navRaw.parentId, `${path}.navigation.parentId`, errors, 80);
+      navigation = { section, order: Number.isInteger(order) ? Number(order) : index, ...parentId ? { parentId } : {} };
+    }
+    const audienceRaw = record(raw.audience);
+    let audience = { kind: "all-members" };
+    if (!audienceRaw) errors.push(`${path}.audience must be an object`);
+    else {
+      unknownKeys(audienceRaw, AUDIENCE_KEYS, `${path}.audience`, errors);
+      if (audienceRaw.kind === "all-members") {
+        if (audienceRaw.tierIds !== void 0) errors.push(`${path}.audience.tierIds is not supported for all-members`);
+      } else if (audienceRaw.kind === "tiers") {
+        if (!Array.isArray(audienceRaw.tierIds) || audienceRaw.tierIds.length === 0) {
+          errors.push(`${path}.audience.tierIds must be a non-empty array`);
+        }
+        const values = Array.isArray(audienceRaw.tierIds) ? audienceRaw.tierIds : [];
+        const normalized = [];
+        for (const [tierIndex, value2] of values.entries()) {
+          const tier = textValue(value2, `${path}.audience.tierIds[${tierIndex}]`, errors, 80, true) ?? "";
+          if (normalized.includes(tier)) errors.push(`${path}.audience.tierIds duplicates "${tier}"`);
+          if (tierIds.size && !tierIds.has(tier)) errors.push(`${path}.audience.tierIds references undeclared tier "${tier}"`);
+          normalized.push(tier);
+        }
+        audience = { kind: "tiers", tierIds: normalized };
+      } else errors.push(`${path}.audience.kind must be all-members or tiers`);
+    }
+    const summary = textValue(raw.summary, `${path}.summary`, errors, 2e3);
+    const teaserMarkdown = textValue(raw.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN);
+    const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN, true) ?? "";
+    let upsell;
+    if (raw.upsell !== void 0) {
+      const upsellRaw = record(raw.upsell);
+      if (!upsellRaw) errors.push(`${path}.upsell must be an object`);
+      else {
+        unknownKeys(upsellRaw, UPSELL_KEYS, `${path}.upsell`, errors);
+        const owner = upsellRaw.owner;
+        if (owner !== "parent" && owner !== "chapter") errors.push(`${path}.upsell.owner must be parent or chapter`);
+        if (source.type === "chapter" && owner === "parent") errors.push(`${path}.upsell.owner cannot be parent on a chapter page`);
+        if (source.type === "parent" && owner === "parent" && upsellRaw.offer === void 0) errors.push(`${path}.upsell.offer is required when the parent owns the offer`);
+        if (source.type === "parent" && owner === "chapter" && upsellRaw.offer !== void 0) errors.push(`${path}.upsell.offer must be set by the chapter after delegation`);
+        const offer = upsellRaw.offer === void 0 ? void 0 : offerValue(upsellRaw.offer, `${path}.upsell.offer`, errors, tierIds, audience);
+        if (owner === "parent") upsell = { owner, offer: offer ?? { tierId: "" } };
+        else if (owner === "chapter") upsell = { owner, ...offer ? { offer } : {} };
+      }
+    }
+    pages.push({ id: id4, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
+  }
+  const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids]);
+  for (const [index, page] of pages.entries()) {
+    const parentId = page.navigation.parentId;
+    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index}].navigation.parentId references unknown page "${parentId}"`);
+    if (parentId === page.id) errors.push(`document.pages[${index}].navigation.parentId cannot reference itself`);
+  }
+  for (const page of pages) {
+    const seen = /* @__PURE__ */ new Set([page.id]);
+    let parentId = page.navigation.parentId;
+    while (parentId) {
+      if (seen.has(parentId)) {
+        errors.push(`document.pages contains a navigation cycle at "${page.id}"`);
+        break;
+      }
+      seen.add(parentId);
+      parentId = pages.find((candidate) => candidate.id === parentId)?.navigation.parentId;
+    }
+  }
+  let upsellOverrides;
+  if (root.upsellOverrides !== void 0) {
+    if (source.type !== "chapter") errors.push("document.upsellOverrides is supported only for chapter content");
+    if (!Array.isArray(root.upsellOverrides)) errors.push("document.upsellOverrides must be an array");
+    const values = Array.isArray(root.upsellOverrides) ? root.upsellOverrides : [];
+    const seen = /* @__PURE__ */ new Set();
+    upsellOverrides = [];
+    for (const [index, value] of values.entries()) {
+      const path = `document.upsellOverrides[${index}]`;
+      const raw = record(value);
+      if (!raw) {
+        errors.push(`${path} must be an object`);
+        continue;
+      }
+      unknownKeys(raw, OVERRIDE_KEYS, path, errors);
+      const pageId = textValue(raw.pageId, `${path}.pageId`, errors, 80, true) ?? "";
+      if (seen.has(pageId)) errors.push(`${path}.pageId duplicates "${pageId}"`);
+      seen.add(pageId);
+      const parentPage = (options.parentPages ?? []).find((page) => page.id === pageId);
+      if (!parentPage) errors.push(`${path}.pageId must reference a parent page`);
+      else if (parentPage.upsell?.owner !== "chapter") errors.push(`${path}.pageId does not delegate upsell authority to the chapter`);
+      const offer = offerValue(raw.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
+      if (offer) upsellOverrides.push({ pageId, offer });
+    }
+  }
+  if (errors.length) return { ok: false, errors };
+  return { ok: true, value: {
+    schemaVersion: MEMBER_CONTENT_SCHEMA_VERSION,
+    revision: Number(root.revision),
+    generatedAt: Number(root.generatedAt),
+    source,
+    ...target ? { target } : {},
+    pages,
+    ...upsellOverrides ? { upsellOverrides } : {}
+  } };
+}
+function memberContentDocument(input, options = {}) {
+  const result = validateMemberContentDocument(input, options);
+  if (!result.ok) throw new TypeError(`Invalid member content document: ${result.errors.join("; ")}`);
+  return result.value;
+}
+
+// src/member-content.ts
+var MEMBER_CONTENT_SCHEMA_VERSION = 1;
+var MEMBER_CONTENT_PATH = "/api/member-content";
+var MEMBER_CONTENT_CONTROL_PATH = "/api/member-content-control";
+var pageOrder = (a, b) => a.navigation.section.localeCompare(b.navigation.section) || a.navigation.order - b.navigation.order || a.title.localeCompare(b.title) || a.id.localeCompare(b.id);
+function composeMemberContent(parent, chapter) {
+  const pages = [];
+  const parentPages = /* @__PURE__ */ new Map();
+  for (const page of parent?.pages ?? []) {
+    const effective = { ...page, source: parent.source };
+    parentPages.set(page.id, effective);
+    pages.push(effective);
+  }
+  for (const override of chapter?.upsellOverrides ?? []) {
+    const page = parentPages.get(override.pageId);
+    if (page?.upsell?.owner === "chapter") page.upsell = { owner: "chapter", offer: override.offer };
+  }
+  for (const page of chapter?.pages ?? []) {
+    if (parentPages.has(page.id) || pages.some((candidate) => candidate.slug === page.slug)) {
+      throw new TypeError(`Chapter member page "${page.id}" conflicts with parent content`);
+    }
+    pages.push({ ...page, source: chapter.source });
+  }
+  return {
+    pages: pages.sort(pageOrder),
+    parentRevision: parent?.revision ?? null,
+    chapterRevision: chapter?.revision ?? null
   };
+}
+var allowed = (page, viewer) => viewer.admin || page.audience.kind === "all-members" || viewer.tierId !== null && page.audience.tierIds.includes(viewer.tierId);
+function projectMemberContent(content, viewer, tiers2) {
+  const authority = new Map(tiers2.filter((tier) => tier.active !== false).map((tier) => [tier.id, tier]));
   return {
-    id: "chapter",
-    title: `Chapter: ${chapter.name}`,
-    npm: "@odla-ai/chapter",
-    schema: {
-      entities: { ...crmDesc.schema.entities, ...chapter.schema.entities },
-      links: { ...crmDesc.schema.links, ...chapter.schema.links }
-    },
-    rules: { ...crmDesc.rules, ...chapter.rules },
-    seeds,
-    probes: [
-      ...crmDesc.probes ?? [],
-      // The snapshot route is deliberately private. A credential-free smoke
-      // request must prove that the route is mounted and closed.
-      { path: "/api/network/snapshot", expectedStatus: 401 },
-      ...chapter.network.readers.length > 0 ? [{ path: "/api/network/records", expectedStatus: 401 }] : [],
-      ...chapter.network.readers.some((reader) => reader.sharedNotes.length > 0) ? [{
-        path: "/api/network/shared-notes",
-        expectedStatus: 401
-      }] : [],
-      // Formation metadata is public only when the host explicitly enables
-      // the bounded intake contract.
-      ...chapter.formation.enabled ? [{ path: "/api/formation/config", expectedStatus: 200 }] : []
-    ],
-    runbooks
+    viewer: { ...viewer },
+    revisions: { parent: content.parentRevision, chapter: content.chapterRevision },
+    pages: content.pages.map((page) => {
+      const canRead = allowed(page, viewer);
+      const offer = !canRead ? page.upsell?.offer : void 0;
+      const tier = offer ? authority.get(offer.tierId) : void 0;
+      const upsell = offer && tier && typeof tier.name === "string" && typeof tier.priceCents === "number" ? { ...offer, tierName: tier.name, priceCents: tier.priceCents } : void 0;
+      return {
+        id: page.id,
+        slug: page.slug,
+        title: page.title,
+        ...page.summary ? { summary: page.summary } : {},
+        navigation: page.navigation,
+        audience: page.audience,
+        source: page.source,
+        access: canRead ? "allowed" : "locked",
+        ...page.teaserMarkdown ? { teaserMarkdown: page.teaserMarkdown } : {},
+        ...canRead ? { bodyMarkdown: page.bodyMarkdown } : {},
+        ...upsell ? { upsell } : {}
+      };
+    })
   };
 }
 
+// src/member-content-canonical.ts
+var encoder = new TextEncoder();
+function canonicalValue(value) {
+  if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) return `[${value.map(canonicalValue).join(",")}]`;
+  if (typeof value !== "object") throw new TypeError("member content contains an unsupported value");
+  const record3 = value;
+  const entries = Object.keys(record3).sort().flatMap((key) => {
+    const item = record3[key];
+    return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue(item)}`];
+  });
+  return `{${entries.join(",")}}`;
+}
+function canonicalMemberContent(value) {
+  return canonicalValue(value);
+}
+async function memberContentDigest(document) {
+  const digest = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalMemberContent(document)));
+  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+async function createMemberContentEnvelope(document) {
+  return { document, digest: await memberContentDigest(document) };
+}
+
 // src/email.ts
 function render(template, vars) {
   return template.replace(/\{\{(\w+)\}\}/g, (_, key) => vars[key] ?? "");
@@ -2310,6 +2564,213 @@ function canceledPatch() {
   return { canceled: true };
 }
 
+// src/admission-grants-contract.ts
+var ADMISSION_GRANTS_SCHEMA_VERSION = 1;
+var ADMISSION_GRANTS_PATH = "/api/admission-grants";
+
+// src/signup-control-canonical.ts
+var encoder2 = new TextEncoder();
+function canonicalValue2(value) {
+  if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) return `[${value.map(canonicalValue2).join(",")}]`;
+  if (typeof value !== "object") throw new TypeError("signup control contains an unsupported value");
+  const record3 = value;
+  const entries = Object.keys(record3).sort().flatMap((key) => {
+    const item = record3[key];
+    return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue2(item)}`];
+  });
+  return `{${entries.join(",")}}`;
+}
+function canonicalSignupControl(value) {
+  return canonicalValue2(value);
+}
+async function signupControlDigest(document) {
+  const digest = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalSignupControl(document)));
+  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+async function createSignupControlEnvelope(document) {
+  return { document, digest: await signupControlDigest(document) };
+}
+
+// src/admission-grants.ts
+var ID2 = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
+var MAX_GRANTS = 2e3;
+var MAX_NOTE = 2e3;
+var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+var isAdmissionEmail = (value) => EMAIL_RE2.test(value);
+function normalizeAdmissionEmail(email) {
+  return normalizeChapterEmail(email);
+}
+function validateAdmissionGrantDocument(input) {
+  const errors = [];
+  const root = input && typeof input === "object" ? input : {};
+  if (root.schemaVersion !== ADMISSION_GRANTS_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  const revision = Number(root.revision);
+  const generatedAt = Number(root.generatedAt);
+  if (!Number.isSafeInteger(revision) || revision < 1) errors.push("document.revision must be a positive integer");
+  if (!Number.isFinite(generatedAt) || generatedAt <= 0) errors.push("document.generatedAt must be epoch milliseconds");
+  const source = root.source && typeof root.source === "object" ? root.source : {};
+  const target = root.target && typeof root.target === "object" ? root.target : {};
+  const sourceId = typeof source.appId === "string" ? source.appId : "";
+  const sourceActor = typeof source.actor === "string" ? source.actor.trim() : "";
+  const chapterId = typeof target.chapterId === "string" ? target.chapterId : "";
+  const environment = typeof target.environment === "string" ? target.environment : "";
+  if (!ID2.test(sourceId)) errors.push("document.source.appId must be an identifier");
+  if (!sourceActor || sourceActor.length > 256) errors.push("document.source.actor must be 1-256 characters");
+  if (!ID2.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
+  if (!ID2.test(environment)) errors.push("document.target.environment must be an identifier");
+  if (!Array.isArray(root.grants)) errors.push("document.grants must be an array");
+  const rawGrants = Array.isArray(root.grants) ? root.grants : [];
+  if (rawGrants.length > MAX_GRANTS) errors.push(`document.grants supports at most ${MAX_GRANTS} entries`);
+  const grants = [];
+  const seenIds = /* @__PURE__ */ new Set();
+  const seenEmails = /* @__PURE__ */ new Set();
+  for (const [index, raw] of rawGrants.slice(0, MAX_GRANTS).entries()) {
+    const grant = raw && typeof raw === "object" ? raw : {};
+    const id4 = typeof grant.id === "string" ? grant.id : "";
+    const email = typeof grant.email === "string" ? grant.email.trim() : "";
+    const normalized = normalizeAdmissionEmail(email);
+    const decision = grant.decision;
+    const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
+    const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
+    if (!ID2.test(id4)) errors.push(`document.grants[${index}].id must be an identifier`);
+    if (seenIds.has(id4)) errors.push(`document.grants repeats id "${id4}"`);
+    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
+    if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
+    if (decision !== "waive_interview" && decision !== "require_interview") {
+      errors.push(`document.grants[${index}].decision is invalid`);
+    }
+    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index}].note is too long`);
+    if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
+      errors.push(`document.grants[${index}].expiresAt must be epoch milliseconds`);
+    }
+    seenIds.add(id4);
+    seenEmails.add(normalized);
+    grants.push({
+      id: id4,
+      email,
+      decision,
+      ...note ? { note } : {},
+      ...expiresAt !== void 0 ? { expiresAt } : {}
+    });
+  }
+  if (errors.length) return { ok: false, errors };
+  return {
+    ok: true,
+    value: {
+      schemaVersion: ADMISSION_GRANTS_SCHEMA_VERSION,
+      revision,
+      generatedAt,
+      source: { appId: sourceId, actor: sourceActor },
+      target: { chapterId, environment },
+      grants
+    }
+  };
+}
+async function createAdmissionGrantEnvelope(document) {
+  const checked = validateAdmissionGrantDocument(document);
+  if (!checked.ok) throw new TypeError(`Invalid admission grant document: ${checked.errors.join("; ")}`);
+  return { document: checked.value, digest: await signupControlDigest(checked.value) };
+}
+var rows = (value) => Array.isArray(value) ? value : [];
+function asGrant(row) {
+  if (typeof row.id !== "string" || typeof row.emailNormalized !== "string") return null;
+  if (row.sourceScope !== "local" && row.sourceScope !== "parent") return null;
+  if (row.decision !== "waive_interview" && row.decision !== "require_interview") return null;
+  return row;
+}
+async function findAdmissionGrant(db, targetId, email, now) {
+  const emailNormalized = normalizeAdmissionEmail(email);
+  if (!isAdmissionEmail(emailNormalized)) return null;
+  const result = await db.query({ admissionGrants: { $: { where: { emailNormalized }, limit: 100 } } });
+  const active = rows(result.admissionGrants).map(asGrant).filter((grant) => Boolean(
+    grant && grant.targetId === targetId && grant.active === true && !grant.revokedAt && (!grant.expiresAt || grant.expiresAt > now) && !grant.consumedApplicationId
+  )).sort((a, b) => {
+    const scope = Number(b.sourceScope === "local") - Number(a.sourceScope === "local");
+    return scope || b.createdAt - a.createdAt;
+  });
+  return active[0] ?? null;
+}
+async function hasAdmissionRevision(db, sourceId, targetId, environment) {
+  const where = { sourceId, targetId, environment };
+  if (db.aggregate) {
+    return Number((await db.aggregate("admissionGrantRevisions", { count: true }, { where })).count ?? 0) > 0;
+  }
+  const found = await db.query({ admissionGrantRevisions: {} });
+  return rows(found.admissionGrantRevisions).some((row) => row.sourceId === sourceId && row.targetId === targetId && row.environment === environment);
+}
+async function loadLatestAdmissionRevision(db, sourceId, targetId, environment) {
+  if (!await hasAdmissionRevision(db, sourceId, targetId, environment)) return null;
+  const result = await db.query({ admissionGrantRevisions: { $: {
+    where: { sourceId, targetId, environment },
+    order: { revision: "desc" },
+    limit: 1
+  } } });
+  const row = rows(result.admissionGrantRevisions).sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0];
+  return row ? row : null;
+}
+async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
+  const { document, digest } = envelope;
+  const current = rows((await db.query({ admissionGrants: { $: {
+    where: { sourceScope: "parent", sourceId: document.source.appId, targetId: document.target.chapterId },
+    limit: MAX_GRANTS
+  } } })).admissionGrants);
+  const incomingIds = new Set(document.grants.map((grant) => `admission:parent:${document.source.appId}:${grant.id}`));
+  const ops = [];
+  for (const row of current) {
+    const id4 = String(row.id ?? "");
+    if (id4 && !incomingIds.has(id4)) ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
+      active: false,
+      revokedAt: receivedAt,
+      revokedBy: document.source.actor,
+      updatedAt: receivedAt,
+      updatedBy: document.source.actor
+    } });
+  }
+  for (const grant of document.grants) {
+    const id4 = `admission:parent:${document.source.appId}:${grant.id}`;
+    const existing = current.find((row) => row.id === id4);
+    ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
+      id: id4,
+      sourceGrantId: grant.id,
+      sourceScope: "parent",
+      sourceId: document.source.appId,
+      targetId: document.target.chapterId,
+      email: grant.email,
+      emailNormalized: normalizeAdmissionEmail(grant.email),
+      decision: grant.decision,
+      ...grant.note ? { note: grant.note } : {},
+      ...grant.expiresAt ? { expiresAt: grant.expiresAt } : {},
+      active: true,
+      sourceRevision: document.revision,
+      createdAt: Number(existing?.createdAt ?? receivedAt),
+      createdBy: String(existing?.createdBy ?? document.source.actor),
+      updatedAt: receivedAt,
+      updatedBy: document.source.actor
+    } });
+    const retract = [
+      ...!grant.note && existing?.note !== void 0 ? ["note"] : [],
+      ...grant.expiresAt === void 0 && existing?.expiresAt !== void 0 ? ["expiresAt"] : []
+    ];
+    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id4, attrs: retract });
+  }
+  if (previous?.active) ops.push({ t: "update", ns: "admissionGrantRevisions", id: previous.id, attrs: { active: false } });
+  const revisionId = `admission-revision:${document.source.appId}:${document.target.environment}:${document.revision}`;
+  ops.push({ t: "update", ns: "admissionGrantRevisions", id: revisionId, attrs: {
+    id: revisionId,
+    sourceId: document.source.appId,
+    targetId: document.target.chapterId,
+    environment: document.target.environment,
+    revision: document.revision,
+    digest,
+    active: true,
+    receivedAt
+  } });
+  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest}` });
+}
+
 // src/join-continuation.ts
 function resolveJoinContinuation(input) {
   if (input.status === "approved") return "accepted";
@@ -2331,10 +2792,10 @@ function resolveJoinContinuation(input) {
 // src/gift-offers.ts
 var GIFT_OFFER_CATALOG_VERSION = 1;
 var MAX_GIFT_OFFERS = 20;
-var ID2 = /^[a-z][a-z0-9-]{1,79}$/;
+var ID3 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
-var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var record2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 var text = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
@@ -2345,7 +2806,7 @@ var text = (value, path, errors, max) => {
 };
 function validateGiftOfferCatalog(input, tierIds) {
   const errors = [];
-  const root = record(input);
+  const root = record2(input);
   if (!root) return { ok: false, errors: ["document.giftOffers must be an object"] };
   for (const key of Object.keys(root)) if (key !== "schemaVersion" && key !== "offers") errors.push(`document.giftOffers.${key} is not supported`);
   if (root.schemaVersion !== GIFT_OFFER_CATALOG_VERSION) errors.push("document.giftOffers.schemaVersion must be 1");
@@ -2356,18 +2817,18 @@ function validateGiftOfferCatalog(input, tierIds) {
   const offers = [];
   for (const [index, raw] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
     const path = `document.giftOffers.offers[${index}]`;
-    const item = record(raw);
+    const item = record2(raw);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
     }
-    const allowed = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
-    for (const key of Object.keys(item)) if (!allowed.has(key)) errors.push(`${path}.${key} is not supported`);
+    const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
+    for (const key of Object.keys(item)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
     const id4 = text(item.id, `${path}.id`, errors, 80);
-    if (id4 && !ID2.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (id4 && !ID3.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (ids.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
     ids.add(id4);
-    const targetRaw = record(item.target);
+    const targetRaw = record2(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
       const tierId = text(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
@@ -2375,7 +2836,7 @@ function validateGiftOfferCatalog(input, tierIds) {
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
       const entitlementKey = text(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
-      if (entitlementKey && !ID2.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
+      if (entitlementKey && !ID3.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
@@ -2455,34 +2916,34 @@ function networkSourceTag(type, hubRecordId, sourceId) {
   if (readable && raw.length <= 64) return raw;
   return `network:${typeKey.slice(0, 16)}:${shortHash(`${sourceId ?? ""}\0${type}\0${hubRecordId}`)}`;
 }
-function normalizeSharedRecord(record2, fallbackSourceId = "legacy-source") {
-  if ("input" in record2 && record2.version === 2) {
+function normalizeSharedRecord(record3, fallbackSourceId = "legacy-source") {
+  if ("input" in record3 && record3.version === 2) {
     return {
       version: 2,
-      sourceId: record2.source.siteId,
-      sourceRecordId: record2.source.recordId,
-      type: record2.type,
-      input: record2.input
+      sourceId: record3.source.siteId,
+      sourceRecordId: record3.source.recordId,
+      type: record3.type,
+      input: record3.input
     };
   }
-  if ("input" in record2) {
+  if ("input" in record3) {
     return {
       version: 1,
       sourceId: fallbackSourceId,
-      sourceRecordId: record2.hubRecordId,
-      type: record2.type,
-      input: record2.input
+      sourceRecordId: record3.hubRecordId,
+      type: record3.type,
+      input: record3.input
     };
   }
-  if ("type" in record2 && record2.type === "company") {
-    const input = { name: record2.name };
+  if ("type" in record3 && record3.type === "company") {
+    const input = { name: record3.name };
     for (const key of ["domain", "industry", "location", "linkedin", "notes"]) {
-      if (record2[key]) input[key] = record2[key];
+      if (record3[key]) input[key] = record3[key];
     }
     return {
       version: 1,
       sourceId: fallbackSourceId,
-      sourceRecordId: record2.hubRecordId,
+      sourceRecordId: record3.hubRecordId,
       type: "company",
       input
     };
@@ -2490,28 +2951,28 @@ function normalizeSharedRecord(record2, fallbackSourceId = "legacy-source") {
   return {
     version: 1,
     sourceId: fallbackSourceId,
-    sourceRecordId: record2.hubRecordId,
+    sourceRecordId: record3.hubRecordId,
     type: "person",
-    input: sharedPersonInput(record2)
+    input: sharedPersonInput(record3)
   };
 }
-function sharedRecordFromCrm(crm, record2, target, sourceId) {
-  if (target.fields && !target.fields[record2.type]) {
-    throw new Error(`${target.name} does not accept "${record2.type}" records`);
+function sharedRecordFromCrm(crm, record3, target, sourceId) {
+  if (target.fields && !target.fields[record3.type]) {
+    throw new Error(`${target.name} does not accept "${record3.type}" records`);
   }
-  const def = crm.type(record2.type);
-  const fields = target.fields?.[record2.type] ?? DEFAULT_SHARE_FIELDS[record2.type];
+  const def = crm.type(record3.type);
+  const fields = target.fields?.[record3.type] ?? DEFAULT_SHARE_FIELDS[record3.type];
   if (!fields) {
-    throw new Error(`${target.name} requires an explicit field allowlist for "${record2.type}" records`);
+    throw new Error(`${target.name} requires an explicit field allowlist for "${record3.type}" records`);
   }
   const nameField = def.nameField ?? "name";
   const input = {};
   for (const field of /* @__PURE__ */ new Set([nameField, ...fields])) {
-    const value = record2.fields?.[field];
+    const value = record3.fields?.[field];
     if (value !== void 0) input[field] = value;
   }
-  if (input[nameField] === void 0) input[nameField] = record2.name;
-  return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record2.id }, type: record2.type, input } : { version: 1, type: record2.type, hubRecordId: record2.id, input };
+  if (input[nameField] === void 0) input[nameField] = record3.name;
+  return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record3.id }, type: record3.type, input } : { version: 1, type: record3.type, hubRecordId: record3.id, input };
 }
 async function upsertPerson(deps, opts) {
   const email = opts.email.toLowerCase();
@@ -2525,11 +2986,11 @@ async function upsertPerson(deps, opts) {
   const created = await (0, import_crm5.createRecord)(crmDeps, { type: "person", input: opts.input, mutationId: opts.mutationId });
   return { recordId: created.id };
 }
-async function findSharedRecord(deps, record2, tag) {
+async function findSharedRecord(deps, record3, tag) {
   const structured = await (0, import_crm5.getRecordByOrigin)(
     { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId },
-    record2.sourceId,
-    record2.sourceRecordId
+    record3.sourceId,
+    record3.sourceRecordId
   );
   if (structured) return structured;
   const mapped = await deps.db.query({ crm_tag: { $: { where: { tag }, limit: 1 } } });
@@ -2538,53 +2999,53 @@ async function findSharedRecord(deps, record2, tag) {
     const found = await deps.db.query({ crm_record: { $: { where: { id: mappedId }, limit: 1 } } });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
-  const def = deps.crm.type(record2.type);
+  const def = deps.crm.type(record3.type);
   const emailField = def.emailField;
-  if (emailField && typeof record2.input[emailField] === "string") {
-    const primaryEmail = record2.input[emailField].toLowerCase();
+  if (emailField && typeof record3.input[emailField] === "string") {
+    const primaryEmail = record3.input[emailField].toLowerCase();
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record2.type, primaryEmail }, limit: 1 } }
+      crm_record: { $: { where: { type: record3.type, primaryEmail }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
-  const domain = record2.input.domain;
+  const domain = record3.input.domain;
   const domainSlot = def.fields.domain?.slot;
   if (typeof domain === "string" && domainSlot) {
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record2.type, [domainSlot]: domain }, limit: 1 } }
+      crm_record: { $: { where: { type: record3.type, [domainSlot]: domain }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
   const nameField = def.nameField ?? "name";
-  const name = record2.input[nameField];
-  if (record2.type === "company" && typeof name === "string" && name.trim()) {
+  const name = record3.input[nameField];
+  if (record3.type === "company" && typeof name === "string" && name.trim()) {
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record2.type, name: name.trim() }, limit: 1 } }
+      crm_record: { $: { where: { type: record3.type, name: name.trim() }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
   return void 0;
 }
 async function projectSharedRecord(deps, shared, options = {}) {
-  const record2 = normalizeSharedRecord(shared, options.sourceId);
-  if (!record2.type.trim() || !record2.sourceId.trim() || !record2.sourceRecordId.trim()) {
+  const record3 = normalizeSharedRecord(shared, options.sourceId);
+  if (!record3.type.trim() || !record3.sourceId.trim() || !record3.sourceRecordId.trim()) {
     throw new Error("type, source site id, and source record id must be non-empty");
   }
-  if (options.sourceId && options.sourceId !== record2.sourceId) {
+  if (options.sourceId && options.sourceId !== record3.sourceId) {
     throw new Error("signed sender does not match payload source");
   }
-  const tag = networkSourceTag(record2.type, record2.sourceRecordId, record2.version === 2 ? record2.sourceId : void 0);
+  const tag = networkSourceTag(record3.type, record3.sourceRecordId, record3.version === 2 ? record3.sourceId : void 0);
   const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
-  const existing = await findSharedRecord(deps, record2, tag);
+  const existing = await findSharedRecord(deps, record3, tag);
   let recordId;
   if (existing && typeof existing.id === "string") {
-    await (0, import_crm5.updateRecord)(crmDeps, { id: existing.id, input: record2.input });
+    await (0, import_crm5.updateRecord)(crmDeps, { id: existing.id, input: record3.input });
     recordId = existing.id;
   } else {
-    recordId = `network_${shortHash(`${record2.sourceId}\0${record2.type}\0${record2.sourceRecordId}`)}`;
+    recordId = `network_${shortHash(`${record3.sourceId}\0${record3.type}\0${record3.sourceRecordId}`)}`;
     await (0, import_crm5.createRecord)({ ...crmDeps, newId: () => recordId }, {
-      type: record2.type,
-      input: record2.input,
+      type: record3.type,
+      input: record3.input,
       mutationId: `share-create:${tag}`
     });
   }
@@ -2594,10 +3055,10 @@ async function projectSharedRecord(deps, shared, options = {}) {
   );
   await (0, import_crm5.upsertRecordOrigin)(crmDeps, {
     recordId,
-    sourceId: record2.sourceId,
-    sourceRecordId: record2.sourceRecordId,
+    sourceId: record3.sourceId,
+    sourceRecordId: record3.sourceRecordId,
     ...options.sourceUrl ? { sourceUrl: options.sourceUrl } : {},
-    payloadVersion: record2.version
+    payloadVersion: record3.version
   });
   return { recordId };
 }
@@ -2881,8 +3342,8 @@ async function clerkListUsers(secretKey, fetchImpl = fetch) {
     const data = await clerkGet(`/v1/users?limit=${PAGE}&offset=${offset}`, secretKey, fetchImpl);
     const page = Array.isArray(data) ? data : [];
     for (const u of page) {
-      const record2 = toRecord(u);
-      if (record2) out.push(record2);
+      const record3 = toRecord(u);
+      if (record3) out.push(record3);
     }
     if (page.length < PAGE) break;
   }
@@ -2984,7 +3445,8 @@ function applicationSummary(app) {
     meetingLink: app.meetingLink ?? null,
     paid: Boolean(app.stripeSubscriptionId) && app.status !== "refunded",
     renewalAt: app.renewalAt ?? null,
-    canceled: app.canceled === true
+    canceled: app.canceled === true,
+    tierId: app.tierId ?? null
   };
 }
 function memberApplication(app, meeting, defaultTimezone) {
@@ -3288,7 +3750,7 @@ var SIGNUP_CONTROL_PATH = "/api/signup-control";
 var MEMBERSHIP_PAGE_RENDERER = "membership-cards-v1";
 var TIER_ID = /^[a-z][a-z0-9-]{0,79}$/;
 var VARIANTS = /* @__PURE__ */ new Set(["standard", "featured", "supporting"]);
-var ROOT_KEYS = /* @__PURE__ */ new Set(["schemaVersion", "renderer", "tiers", "footnoteMarkdown"]);
+var ROOT_KEYS2 = /* @__PURE__ */ new Set(["schemaVersion", "renderer", "tiers", "footnoteMarkdown"]);
 var TIER_KEYS = /* @__PURE__ */ new Set([
   "tierId",
   "variant",
@@ -3307,12 +3769,12 @@ var CALLOUT_KEYS = /* @__PURE__ */ new Set(["label", "bodyMarkdown"]);
 var CAPACITY_KEYS = /* @__PURE__ */ new Set(["total", "label"]);
 var MAX_TIERS = 20;
 var MAX_BENEFITS = 24;
-var MAX_MARKDOWN = 65536;
+var MAX_MARKDOWN2 = 65536;
 var MAX_LABEL = 160;
 var objectRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-function rejectUnknownKeys(value, allowed, path, errors) {
+function rejectUnknownKeys(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) {
-    if (!allowed.has(key)) errors.push(`${path}.${key} is not supported`);
+    if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
   }
 }
 function boundedString(value, path, errors, max, required = false) {
@@ -3333,7 +3795,7 @@ function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
   const root = objectRecord(input);
   if (!root) return { ok: false, errors: ["document must be an object"] };
-  rejectUnknownKeys(root, ROOT_KEYS, "document", errors);
+  rejectUnknownKeys(root, ROOT_KEYS2, "document", errors);
   if (root.schemaVersion !== 1) errors.push("document.schemaVersion must be 1");
   if (root.renderer !== MEMBERSHIP_PAGE_RENDERER) {
     errors.push(`document.renderer must be "${MEMBERSHIP_PAGE_RENDERER}"`);
@@ -3387,7 +3849,7 @@ function validateMembershipPageDocument(input, options = {}) {
       if (!rawCallout) errors.push(`${path}.callout must be an object`);
       else {
         rejectUnknownKeys(rawCallout, CALLOUT_KEYS, `${path}.callout`, errors);
-        const bodyMarkdown = boundedString(rawCallout.bodyMarkdown, `${path}.callout.bodyMarkdown`, errors, MAX_MARKDOWN, true);
+        const bodyMarkdown = boundedString(rawCallout.bodyMarkdown, `${path}.callout.bodyMarkdown`, errors, MAX_MARKDOWN2, true);
         const label = boundedString(rawCallout.label, `${path}.callout.label`, errors, MAX_LABEL);
         if (bodyMarkdown) callout = { ...label ? { label } : {}, bodyMarkdown };
       }
@@ -3409,10 +3871,10 @@ function validateMembershipPageDocument(input, options = {}) {
       }
     }
     const badge = boundedString(item.badge, `${path}.badge`, errors, MAX_LABEL);
-    const summaryMarkdown = boundedString(item.summaryMarkdown, `${path}.summaryMarkdown`, errors, MAX_MARKDOWN);
+    const summaryMarkdown = boundedString(item.summaryMarkdown, `${path}.summaryMarkdown`, errors, MAX_MARKDOWN2);
     const priceEyebrow = boundedString(item.priceEyebrow, `${path}.priceEyebrow`, errors, MAX_LABEL);
     const billingLabel = boundedString(item.billingLabel, `${path}.billingLabel`, errors, MAX_LABEL);
-    const priceNoteMarkdown = boundedString(item.priceNoteMarkdown, `${path}.priceNoteMarkdown`, errors, MAX_MARKDOWN);
+    const priceNoteMarkdown = boundedString(item.priceNoteMarkdown, `${path}.priceNoteMarkdown`, errors, MAX_MARKDOWN2);
     const ctaLabel = boundedString(item.ctaLabel, `${path}.ctaLabel`, errors, MAX_LABEL);
     tiers2.push({
       tierId,
@@ -3434,7 +3896,7 @@ function validateMembershipPageDocument(input, options = {}) {
       if (!seen.has(tierId)) errors.push(`document.tiers is missing offered tier "${tierId}"`);
     }
   }
-  const footnoteMarkdown = boundedString(root.footnoteMarkdown, "document.footnoteMarkdown", errors, MAX_MARKDOWN);
+  const footnoteMarkdown = boundedString(root.footnoteMarkdown, "document.footnoteMarkdown", errors, MAX_MARKDOWN2);
   if (errors.length) return { ok: false, errors };
   return {
     ok: true,
@@ -3453,11 +3915,11 @@ function membershipPageDocument(input, options = {}) {
 }
 
 // src/signup-control-validate.ts
-var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG6 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var ENVIRONMENT = /^[a-z][a-z0-9_-]{0,62}$/;
 var TIER = /^[a-z][a-z0-9-]{0,79}$/;
 var PRICE2 = /^price_[A-Za-z0-9]{12,}$/;
-var ROOT_KEYS2 = /* @__PURE__ */ new Set([
+var ROOT_KEYS3 = /* @__PURE__ */ new Set([
   "schemaVersion",
   "revision",
   "generatedAt",
@@ -3473,8 +3935,8 @@ var ROOT_KEYS2 = /* @__PURE__ */ new Set([
 ]);
 var TIER_KEYS2 = /* @__PURE__ */ new Set(["id", "name", "available", "sortOrder", "priceCents", "stripePriceId", "blurb"]);
 var recordOf = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-function unknownKeys(value, allowed, path, errors) {
-  for (const key of Object.keys(value)) if (!allowed.has(key)) errors.push(`${path}.${key} is not supported`);
+function unknownKeys2(value, allowed2, path, errors) {
+  for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
 function text2(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
@@ -3498,7 +3960,7 @@ function tiersOf(value, errors) {
       errors.push(`${path} must be an object`);
       return [];
     }
-    unknownKeys(item, TIER_KEYS2, path, errors);
+    unknownKeys2(item, TIER_KEYS2, path, errors);
     const id4 = text2(item.id, `${path}.id`, errors, 80);
     if (id4 && !TIER.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (seen.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
@@ -3534,7 +3996,7 @@ function applicationOf(value, errors) {
     errors.push("document.application must be an object");
     return void 0;
   }
-  unknownKeys(input, /* @__PURE__ */ new Set(["required", "optional", "conditions", "copy"]), "document.application", errors);
+  unknownKeys2(input, /* @__PURE__ */ new Set(["required", "optional", "conditions", "copy"]), "document.application", errors);
   try {
     const resolved = resolveApplication(input);
     const copy = recordOf(input.copy);
@@ -3559,10 +4021,10 @@ function policyOf(value, errors) {
     errors.push("document.policy must be an object");
     return void 0;
   }
-  const allowed = /* @__PURE__ */ new Set(["disclaimerText", "refundPolicyText", "trustCopy", "commitmentText", "normsText"]);
-  unknownKeys(input, allowed, "document.policy", errors);
+  const allowed2 = /* @__PURE__ */ new Set(["disclaimerText", "refundPolicyText", "trustCopy", "commitmentText", "normsText"]);
+  unknownKeys2(input, allowed2, "document.policy", errors);
   const result = {};
-  for (const key of allowed) {
+  for (const key of allowed2) {
     if (input[key] === void 0 && key !== "disclaimerText" && key !== "refundPolicyText") continue;
     result[key] = text2(input[key], `document.policy.${key}`, errors);
   }
@@ -3576,7 +4038,7 @@ function themeOf(value, errors) {
     errors.push("document.theme.tokens must be an object");
     return void 0;
   }
-  unknownKeys(input, /* @__PURE__ */ new Set(["tokens"]), "document.theme", errors);
+  unknownKeys2(input, /* @__PURE__ */ new Set(["tokens"]), "document.theme", errors);
   if (Object.keys(tokens).length > 256) errors.push("document.theme.tokens supports at most 256 entries");
   let serializedLength = 0;
   for (const [key, token] of Object.entries(tokens)) {
@@ -3596,7 +4058,7 @@ function validateSignupControlDocument(input) {
   const errors = [];
   const root = recordOf(input);
   if (!root) return { ok: false, errors: ["document must be an object"] };
-  unknownKeys(root, ROOT_KEYS2, "document", errors);
+  unknownKeys2(root, ROOT_KEYS3, "document", errors);
   if (root.schemaVersion !== 1) errors.push("document.schemaVersion must be 1");
   if (!Number.isSafeInteger(root.revision) || Number(root.revision) < 1) errors.push("document.revision must be a positive integer");
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
@@ -3605,8 +4067,8 @@ function validateSignupControlDocument(input) {
   const appId = text2(source?.appId, "document.source.appId", errors, 63);
   const chapterId = text2(target?.chapterId, "document.target.chapterId", errors, 63);
   const environment = text2(target?.environment, "document.target.environment", errors, 63);
-  if (appId && !SLUG4.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
-  if (chapterId && !SLUG4.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
+  if (appId && !SLUG6.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
+  if (chapterId && !SLUG6.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
   if (target?.stripeMode !== "test" && target?.stripeMode !== "live") errors.push("document.target.stripeMode must be test or live");
   const tiers2 = tiersOf(root.tiers, errors);
@@ -3756,7 +4218,7 @@ function hydrateSignupControlTheme(target, revision, options = {}) {
 
 // src/membership-markdown.ts
 var MAX_BENEFITS2 = 24;
-var MAX_MARKDOWN2 = 65536;
+var MAX_MARKDOWN3 = 65536;
 var MAX_LABEL2 = 160;
 var MARKDOWN_SECTION = /^##\s+(.+?)\s*$/;
 var MARKDOWN_HEADING = /^#{1,6}\s+/;
@@ -3790,8 +4252,8 @@ function markdownBenefits(lines, path, errors) {
 }
 function applyMembershipTierMarkdown(presentation, source) {
   if (typeof source !== "string") return { ok: false, errors: ["membership Markdown must be a string"] };
-  if (source.length > MAX_MARKDOWN2) {
-    return { ok: false, errors: [`membership Markdown must be at most ${MAX_MARKDOWN2.toLocaleString("en-US")} characters`] };
+  if (source.length > MAX_MARKDOWN3) {
+    return { ok: false, errors: [`membership Markdown must be at most ${MAX_MARKDOWN3.toLocaleString("en-US")} characters`] };
   }
   if (!source.trim()) return { ok: true, value: { ...presentation } };
   const errors = [];