@odla-ai/chapter 0.39.0 → 0.39.1

package/dist/index.cjs

@@ -22,6 +22,11 @@ var index_exports = {};
 __export(index_exports, {
   ADMISSION_GRANTS_PATH: () => ADMISSION_GRANTS_PATH,
   ADMISSION_GRANTS_SCHEMA_VERSION: () => ADMISSION_GRANTS_SCHEMA_VERSION,
+  BUILDER_LIBRARY_ADMIN_PATH: () => BUILDER_LIBRARY_ADMIN_PATH,
+  BUILDER_LIBRARY_CONTROL_PATH: () => BUILDER_LIBRARY_CONTROL_PATH,
+  BUILDER_LIBRARY_MANIFEST_PATH: () => BUILDER_LIBRARY_MANIFEST_PATH,
+  BUILDER_LIBRARY_PROMOTE_PATH: () => BUILDER_LIBRARY_PROMOTE_PATH,
+  BUILDER_LIBRARY_SCHEMA_VERSION: () => BUILDER_LIBRARY_SCHEMA_VERSION,
   CHAPTER_FLOW_FIELDS_SCHEMA_VERSION: () => CHAPTER_FLOW_FIELDS_SCHEMA_VERSION,
   CHAPTER_PROMOTION_ADAPTER: () => CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY: () => DEFAULT_CHAPTER_COPY,
@@ -46,13 +51,17 @@ __export(index_exports, {
   bookingDecision: () => bookingDecision,
   brandTokens: () => brandTokens,
   bucketSeries: () => bucketSeries,
+  buildBuilderLibraryManifest: () => buildBuilderLibraryManifest,
   buildGroupSeed: () => buildGroupSeed,
   buildTierSeeds: () => buildTierSeeds,
+  builderLibraryDigest: () => builderLibraryDigest,
   canApprove: () => canApprove,
   canBook: () => canBook,
   canChangeRole: () => canChangeRole,
   canTransition: () => canTransition,
+  canViewBuilderLibraryResource: () => canViewBuilderLibraryResource,
   canceledPatch: () => canceledPatch,
+  canonicalBuilderLibrary: () => canonicalBuilderLibrary,
   canonicalMemberContent: () => canonicalMemberContent,
   canonicalSignupControl: () => canonicalSignupControl,
   chapterBrandFromTokens: () => chapterBrandFromTokens,
@@ -68,6 +77,7 @@ __export(index_exports, {
   clerkUserRequest: () => clerkUserRequest,
   composeMemberContent: () => composeMemberContent,
   createAdmissionGrantEnvelope: () => createAdmissionGrantEnvelope,
+  createBuilderLibraryEnvelope: () => createBuilderLibraryEnvelope,
   createChapterIntegration: () => createChapterIntegration,
   createClerkInvitation: () => createClerkInvitation,
   createClerkUser: () => createClerkUser,
@@ -123,8 +133,10 @@ __export(index_exports, {
   personInputFromApp: () => personInputFromApp,
   planDelivery: () => planDelivery,
   projectApplicant: () => projectApplicant,
+  projectBuilderLibraryDelivery: () => projectBuilderLibraryDelivery,
   projectMemberContent: () => projectMemberContent,
   projectSharedRecord: () => projectSharedRecord,
+  promoteBuilderLibraryResource: () => promoteBuilderLibraryResource,
   publicGiftOffers: () => publicGiftOffers,
   reconcileMeetings: () => reconcileMeetings,
   refundedPatch: () => refundedPatch,
@@ -135,6 +147,7 @@ __export(index_exports, {
   renewalPatch: () => renewalPatch,
   resolveApplication: () => resolveApplication,
   resolveAuth: () => resolveAuth,
+  resolveBuilderLibrary: () => resolveBuilderLibrary,
   resolveChapterCopy: () => resolveChapterCopy,
   resolveJoinContinuation: () => resolveJoinContinuation,
   resolveLeaderFormation: () => resolveLeaderFormation,
@@ -161,6 +174,7 @@ __export(index_exports, {
   updateClerkUserMetadata: () => updateClerkUserMetadata,
   updateClerkUserMetadataByEmail: () => updateClerkUserMetadataByEmail,
   validateAdmissionGrantDocument: () => validateAdmissionGrantDocument,
+  validateBuilderLibraryDocument: () => validateBuilderLibraryDocument,
   validateGiftOfferCatalog: () => validateGiftOfferCatalog,
   validateMemberContentDocument: () => validateMemberContentDocument,
   validateMembershipPageDocument: () => validateMembershipPageDocument,
@@ -644,6 +658,30 @@ var memberContentLocal = {
     updatedBy: attr4("string", { optional: true })
   }
 };
+var builderLibraryControls = {
+  attrs: {
+    id: id3(),
+    sourceId: attr4("string", { indexed: true }),
+    targetId: attr4("string", { indexed: true }),
+    environment: attr4("string", { indexed: true }),
+    revision: attr4("number", { indexed: true }),
+    digest: attr4("string", { indexed: true }),
+    document: attr4("json"),
+    active: attr4("boolean", { indexed: true }),
+    receivedAt: attr4("number", { indexed: true })
+  }
+};
+var builderLibraryLocal = {
+  attrs: {
+    id: id3(),
+    appId: attr4("string", { indexed: true }),
+    environment: attr4("string", { indexed: true }),
+    revision: attr4("number", { indexed: true }),
+    document: attr4("json"),
+    updatedAt: attr4("number", { indexed: true }),
+    updatedBy: attr4("string", { optional: true })
+  }
+};
 var groups = {
   attrs: {
     id: id3(),
@@ -715,7 +753,7 @@ var emailLog = {
     sentAt: attr4("number", { indexed: true })
   }
 };
-function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false) {
+function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false) {
   const entities = {};
   if (mode === "chapter") {
     entities.applications = applicationsFor(application);
@@ -739,6 +777,10 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
   if (auth.source === "table") entities.admins = admins;
   if (auth.superAdmins) entities.superAdmins = superAdmins;
   if (includeNetworkNotes) entities.networkNotes = networkNotes;
+  if (includeBuilderLibrary) {
+    entities.builderLibraryControls = builderLibraryControls;
+    entities.builderLibraryLocal = builderLibraryLocal;
+  }
   const schema = { entities, links: {} };
   const rules = {};
   for (const ns of Object.keys(entities)) {
@@ -1374,8 +1416,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id4) {
-  const text3 = id4.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text3 ? `${text3[0].toUpperCase()}${text3.slice(1)}` : id4;
+  const text4 = id4.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text4 ? `${text4[0].toUpperCase()}${text4.slice(1)}` : id4;
 }
 function applicationDefs(chapter) {
   try {
@@ -1666,15 +1708,47 @@ function resolveMemberContent(input) {
   };
 }
 
-// src/config.ts
+// src/config-builder-library.ts
 var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SECRET_NAME3 = /^[a-z][a-z0-9_]{1,127}$/;
+function resolveBuilderLibrary(mode, input) {
+  if (!input) return null;
+  if (input.sources !== void 0 && !Array.isArray(input.sources)) {
+    throw new Error("defineChapter.builderLibrary.sources: must be an array");
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const sources = (input.sources ?? []).map((source, index) => {
+    if (!source || typeof source !== "object" || !SLUG4.test(source.sourceId)) {
+      throw new Error(`defineChapter.builderLibrary.sources[${index}].sourceId: must be a lowercase app slug`);
+    }
+    if (source.sourceId === "built-not-found" && mode === "hub") {
+      throw new Error(`defineChapter.builderLibrary.sources[${index}]: a hub accepts Chapter sources, not itself`);
+    }
+    if (mode === "chapter" && source.sourceId !== "built-not-found") {
+      throw new Error(`defineChapter.builderLibrary.sources[${index}]: Chapters may accept only the built-not-found source`);
+    }
+    if (seen.has(source.sourceId)) {
+      throw new Error(`defineChapter.builderLibrary.sources: duplicate source "${source.sourceId}"`);
+    }
+    seen.add(source.sourceId);
+    const secretName = source.secretName?.trim() || "builder_library_control_secret";
+    if (!SECRET_NAME3.test(secretName)) {
+      throw new Error(`defineChapter.builderLibrary.sources[${index}].secretName: must be a vault-key identifier`);
+    }
+    return { sourceId: source.sourceId, secretName };
+  });
+  return { enabled: true, localAuthoring: input.localAuthoring !== false, sources };
+}
+
+// src/config.ts
+var SLUG5 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 function isResolvedCrm(x) {
   return !!x && typeof x === "object" && "prepare" in x && typeof x.prepare === "function";
 }
 function defineChapter(config) {
   if (!config || typeof config !== "object") throw new Error("defineChapter: a config object is required");
   const { id: id4, name } = config;
-  if (typeof id4 !== "string" || !SLUG4.test(id4)) {
+  if (typeof id4 !== "string" || !SLUG5.test(id4)) {
     throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id4)}`);
   }
   if (typeof name !== "string" || name.trim() === "") throw new Error("defineChapter.name: a non-empty name is required");
@@ -1700,6 +1774,7 @@ function defineChapter(config) {
   const network = resolveNetwork(config, crm);
   const signupControl = resolveSignupControl(config.signupControl);
   const memberContent = resolveMemberContent(config.memberContent);
+  const builderLibrary = resolveBuilderLibrary(mode, config.builderLibrary);
   const formation = resolveLeaderFormation(config.formation, crm);
   if (signupControl && mode !== "chapter") {
     throw new Error("defineChapter.signupControl: only chapter-mode followers can receive signup control");
@@ -1713,7 +1788,8 @@ function defineChapter(config) {
     network.targets.length > 0,
     application,
     Boolean(signupControl),
-    Boolean(memberContent)
+    Boolean(memberContent),
+    Boolean(builderLibrary)
   );
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";
@@ -1771,6 +1847,7 @@ function defineChapter(config) {
     network,
     signupControl,
     memberContent,
+    builderLibrary,
     formation,
     crm,
     auth,
@@ -2021,6 +2098,13 @@ function createChapterIntegration(chapter, options = {}) {
     ...emails?.debugEmail ? { debugEmail: emails.debugEmail } : {}
   });
   const seeds = [...crmDesc.seeds ?? []];
+  const builderLibrarySecrets = [...new Set(
+    chapter.builderLibrary?.sources.map((source) => source.secretName) ?? []
+  )].map((name) => ({
+    name,
+    description: "Signing secret for private Builder Library delivery from a configured source.",
+    required: true
+  }));
   const group = chapter.groupSeed();
   if (group) {
     seeds.push({ id: "group", ns: "groups", key: { attr: "id", value: chapter.id }, attrs: { ...group, createdAt: now } });
@@ -2053,6 +2137,7 @@ function createChapterIntegration(chapter, options = {}) {
     },
     rules: { ...crmDesc.rules, ...chapter.rules },
     seeds,
+    secrets: builderLibrarySecrets,
     probes: [
       ...crmDesc.probes ?? [],
       // The snapshot route is deliberately private. A credential-free smoke
@@ -2069,6 +2154,11 @@ function createChapterIntegration(chapter, options = {}) {
       ...chapter.memberContent ? [
         { path: "/api/member-content", expectedStatus: 401 },
         { path: "/api/admin/member-content", expectedStatus: 401 }
+      ] : [],
+      ...chapter.builderLibrary ? [
+        { path: "/api/builder-library-control", expectedStatus: 401 },
+        { path: "/api/admin/builder-library", expectedStatus: 401 },
+        { path: "/api/admin/builder-library/manifest", expectedStatus: 401 }
       ] : []
     ],
     runbooks
@@ -2077,7 +2167,7 @@ function createChapterIntegration(chapter, options = {}) {
 
 // src/member-content-validation-helpers.ts
 var ID = /^[a-z][a-z0-9-]{0,79}$/;
-var SLUG5 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var SLUG6 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var ROOT_KEYS = /* @__PURE__ */ new Set(["schemaVersion", "revision", "generatedAt", "source", "target", "pages", "upsellOverrides"]);
 var SOURCE_KEYS = /* @__PURE__ */ new Set(["type", "appId"]);
 var TARGET_KEYS = /* @__PURE__ */ new Set(["chapterId", "environment"]);
@@ -2187,7 +2277,7 @@ function validateMemberContentDocument(input, options = {}) {
     const slug = textValue(raw.slug, `${path}.slug`, errors, 120, true) ?? "";
     const title = textValue(raw.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
     if (id4 && !ID.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (slug && !SLUG5.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
+    if (slug && !SLUG6.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
     if (ids.has(id4) || knownParentIds.has(id4)) errors.push(`${path}.id duplicates page "${id4}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
     ids.add(id4);
@@ -2373,9 +2463,9 @@ function canonicalValue(value) {
   }
   if (Array.isArray(value)) return `[${value.map(canonicalValue).join(",")}]`;
   if (typeof value !== "object") throw new TypeError("member content contains an unsupported value");
-  const record3 = value;
-  const entries = Object.keys(record3).sort().flatMap((key) => {
-    const item = record3[key];
+  const record4 = value;
+  const entries = Object.keys(record4).sort().flatMap((key) => {
+    const item = record4[key];
     return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue(item)}`];
   });
   return `{${entries.join(",")}}`;
@@ -2391,6 +2481,243 @@ async function createMemberContentEnvelope(document) {
   return { document, digest: await memberContentDigest(document) };
 }
 
+// src/builder-library-validation.ts
+var ID2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var APP_ID = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var MAX_RESOURCES = 200;
+var MAX_MARKDOWN2 = 65536;
+var MAX_TEXT2 = 500;
+var MAX_TAGS = 20;
+var KINDS = /* @__PURE__ */ new Set(["document", "note", "link", "inspiration", "image", "file"]);
+var STATUSES = /* @__PURE__ */ new Set(["draft", "published", "archived"]);
+var ROOT_KEYS2 = /* @__PURE__ */ new Set(["schemaVersion", "revision", "generatedAt", "source", "target", "resources"]);
+var SOURCE_KEYS2 = /* @__PURE__ */ new Set(["type", "appId"]);
+var TARGET_KEYS2 = /* @__PURE__ */ new Set(["appId", "environment"]);
+var RESOURCE_KEYS = /* @__PURE__ */ new Set(["id", "kind", "title", "summary", "tags", "scope", "status", "revision", "bodyMarkdown", "url", "brandAsset", "provenance"]);
+var SCOPE_KEYS = /* @__PURE__ */ new Set(["kind", "chapterId"]);
+var ASSET_KEYS = /* @__PURE__ */ new Set(["bookId", "assetId", "filename"]);
+var PROVENANCE_KEYS = /* @__PURE__ */ new Set(["createdBy", "createdAt", "updatedBy", "updatedAt", "promotedFrom"]);
+var PROMOTION_KEYS = /* @__PURE__ */ new Set(["chapterId", "resourceId", "resourceRevision", "documentRevision", "promotedBy", "promotedAt"]);
+var record2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+function unknownKeys2(value, allowed2, path, errors) {
+  for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
+}
+function text(value, path, errors, max = MAX_TEXT2, required = true) {
+  if (value === void 0 && !required) return void 0;
+  if (typeof value !== "string" || required && !value.trim()) {
+    errors.push(`${path} must be a non-empty string`);
+    return void 0;
+  }
+  const result = value.trim();
+  if (result.length > max) errors.push(`${path} must be at most ${max} characters`);
+  return result;
+}
+function integer(value, path, errors, minimum = 1) {
+  if (!Number.isSafeInteger(value) || Number(value) < minimum) errors.push(`${path} must be an integer >= ${minimum}`);
+  return Number(value);
+}
+function scopeValue(value, path, errors) {
+  const raw = record2(value);
+  if (!raw) {
+    errors.push(`${path} must be an object`);
+    return null;
+  }
+  unknownKeys2(raw, SCOPE_KEYS, path, errors);
+  if (raw.kind === "global" || raw.kind === "built_not_found") {
+    if (raw.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
+    return { kind: raw.kind };
+  }
+  if (raw.kind === "chapter") {
+    const chapterId = text(raw.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+    if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
+    return { kind: "chapter", chapterId };
+  }
+  errors.push(`${path}.kind must be chapter, built_not_found, or global`);
+  return null;
+}
+function resourceValue(value, path, errors) {
+  const raw = record2(value);
+  if (!raw) {
+    errors.push(`${path} must be an object`);
+    return null;
+  }
+  unknownKeys2(raw, RESOURCE_KEYS, path, errors);
+  const id4 = text(raw.id, `${path}.id`, errors, 80) ?? "";
+  if (id4 && !ID2.test(id4)) errors.push(`${path}.id must be lowercase kebab-case`);
+  const kind = text(raw.kind, `${path}.kind`, errors) ?? "";
+  if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
+  const title = text(raw.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text(raw.summary, `${path}.summary`, errors, 1e3, false);
+  const status = text(raw.status, `${path}.status`, errors) ?? "";
+  if (!STATUSES.has(status)) errors.push(`${path}.status must be draft, published, or archived`);
+  const revision = integer(raw.revision, `${path}.revision`, errors);
+  const scope = scopeValue(raw.scope, `${path}.scope`, errors) ?? { kind: "global" };
+  const tags = Array.isArray(raw.tags) ? raw.tags.map((tag, index) => text(tag, `${path}.tags[${index}]`, errors, 80) ?? "") : [];
+  if (!Array.isArray(raw.tags)) errors.push(`${path}.tags must be an array`);
+  if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
+  if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
+  const bodyMarkdown = text(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, false);
+  const url = text(raw.url, `${path}.url`, errors, 2048, false);
+  if (url) {
+    try {
+      if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
+    } catch {
+      errors.push(`${path}.url must be a valid https URL`);
+    }
+  }
+  const asset = raw.brandAsset === void 0 ? null : record2(raw.brandAsset);
+  if (raw.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
+  if (asset) unknownKeys2(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
+  const brandAsset = asset ? {
+    bookId: text(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+  } : void 0;
+  if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
+  if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
+  if ((kind === "image" || kind === "file") && !brandAsset) errors.push(`${path}.brandAsset is required for ${kind}`);
+  if (!["document", "note"].includes(kind) && bodyMarkdown) errors.push(`${path}.bodyMarkdown is not allowed for ${kind}`);
+  if (!["link", "inspiration"].includes(kind) && url) errors.push(`${path}.url is not allowed for ${kind}`);
+  if (!["image", "file"].includes(kind) && brandAsset) errors.push(`${path}.brandAsset is not allowed for ${kind}`);
+  const provenanceRaw = record2(raw.provenance);
+  if (!provenanceRaw) errors.push(`${path}.provenance must be an object`);
+  if (provenanceRaw) unknownKeys2(provenanceRaw, PROVENANCE_KEYS, `${path}.provenance`, errors);
+  const promotedRaw = provenanceRaw?.promotedFrom === void 0 ? null : record2(provenanceRaw.promotedFrom);
+  if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
+  if (promotedRaw) unknownKeys2(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
+  const promotedFrom = promotedRaw ? {
+    chapterId: text(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    resourceRevision: integer(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
+    documentRevision: integer(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
+    promotedBy: text(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedAt: integer(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
+  } : void 0;
+  const provenance = {
+    createdBy: text(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdAt: integer(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
+    updatedBy: text(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedAt: integer(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
+    ...promotedFrom ? { promotedFrom } : {}
+  };
+  return { id: id4, kind, title, ...summary ? { summary } : {}, tags, scope, status, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
+}
+function validateBuilderLibraryDocument(value, options = {}) {
+  const errors = [];
+  const raw = record2(value);
+  if (!raw) return { ok: false, errors: ["document must be an object"] };
+  unknownKeys2(raw, ROOT_KEYS2, "document", errors);
+  if (raw.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  const revision = integer(raw.revision, "document.revision", errors);
+  const generatedAt = integer(raw.generatedAt, "document.generatedAt", errors, 0);
+  const sourceRaw = record2(raw.source);
+  if (!sourceRaw) errors.push("document.source must be an object");
+  if (sourceRaw) unknownKeys2(sourceRaw, SOURCE_KEYS2, "document.source", errors);
+  const sourceType = sourceRaw?.type;
+  if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
+  const sourceAppId = text(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
+  if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
+  if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
+  const targetRaw = raw.target === void 0 ? null : record2(raw.target);
+  if (raw.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
+  if (targetRaw) unknownKeys2(targetRaw, TARGET_KEYS2, "document.target", errors);
+  const target = targetRaw ? {
+    appId: text(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+  } : void 0;
+  if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
+  if (!Array.isArray(raw.resources)) errors.push("document.resources must be an array");
+  const inputs = Array.isArray(raw.resources) ? raw.resources : [];
+  if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
+  const resources = inputs.map((item, index) => resourceValue(item, `document.resources[${index}]`, errors)).filter(Boolean);
+  const ids = resources.map(({ id: id4 }) => id4);
+  if (new Set(ids).size !== ids.length) errors.push("document.resources ids must be unique");
+  for (const resource of resources) {
+    if (sourceType === "chapter" && (resource.scope.kind !== "chapter" || resource.scope.chapterId !== sourceAppId)) {
+      errors.push(`document.resources.${resource.id}: Chapter sources may author only their own chapter scope`);
+    }
+    if (sourceType === "built_not_found" && resource.scope.kind === "chapter") {
+      errors.push(`document.resources.${resource.id}: Built Not Found sources may author only built_not_found or global scope`);
+    }
+  }
+  if (errors.length) return { ok: false, errors };
+  return { ok: true, value: { schemaVersion: 1, revision, generatedAt, source: { type: sourceType, appId: sourceAppId }, ...target ? { target } : {}, resources } };
+}
+
+// src/builder-library.ts
+var BUILDER_LIBRARY_SCHEMA_VERSION = 1;
+var BUILDER_LIBRARY_ADMIN_PATH = "/api/admin/builder-library";
+var BUILDER_LIBRARY_MANIFEST_PATH = "/api/admin/builder-library/manifest";
+var BUILDER_LIBRARY_PROMOTE_PATH = "/api/admin/builder-library/promote";
+var BUILDER_LIBRARY_CONTROL_PATH = "/api/builder-library-control";
+function canViewBuilderLibraryResource(resource, viewer) {
+  if (viewer.kind === "built_not_found") return true;
+  return resource.scope.kind === "global" || resource.scope.kind === "chapter" && resource.scope.chapterId === viewer.chapterId;
+}
+function buildBuilderLibraryManifest(documents, viewer, generatedAt = Date.now(), limit = 100) {
+  const ordered = documents.flatMap((document) => document.resources.map((resource) => ({ document, resource }))).filter(({ resource }) => resource.status === "published" && canViewBuilderLibraryResource(resource, viewer)).sort((a, b) => a.resource.title.localeCompare(b.resource.title) || a.document.source.appId.localeCompare(b.document.source.appId) || a.resource.id.localeCompare(b.resource.id));
+  return {
+    schemaVersion: BUILDER_LIBRARY_SCHEMA_VERSION,
+    generatedAt,
+    viewer,
+    revisions: documents.map(({ source, revision }) => ({ source, revision })),
+    resources: ordered.slice(0, limit).map(({ resource }) => resource),
+    truncated: ordered.length > limit
+  };
+}
+function projectBuilderLibraryDelivery(document, target) {
+  return {
+    ...document,
+    target,
+    resources: document.source.type === "built_not_found" ? document.resources.filter((resource) => resource.scope.kind === "global") : document.resources
+  };
+}
+function promoteBuilderLibraryResource(input) {
+  if (input.resource.scope.kind !== "chapter") throw new TypeError("only a Chapter-scoped resource can be promoted");
+  const chapterId = input.resource.scope.chapterId;
+  return {
+    ...input.resource,
+    id: input.globalId ?? `${chapterId}-${input.resource.id}`,
+    scope: { kind: "global" },
+    revision: 1,
+    provenance: {
+      createdBy: input.actor,
+      createdAt: input.promotedAt,
+      updatedBy: input.actor,
+      updatedAt: input.promotedAt,
+      promotedFrom: {
+        chapterId,
+        resourceId: input.resource.id,
+        resourceRevision: input.resource.revision,
+        documentRevision: input.chapterDocumentRevision,
+        promotedBy: input.actor,
+        promotedAt: input.promotedAt
+      }
+    }
+  };
+}
+
+// src/builder-library-canonical.ts
+var encoder2 = new TextEncoder();
+function canonicalValue2(value) {
+  if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(canonicalValue2).join(",")}]`;
+  if (typeof value !== "object") throw new TypeError("Builder Library contains an unsupported value");
+  const record4 = value;
+  return `{${Object.keys(record4).sort().flatMap((key) => record4[key] === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue2(record4[key])}`]).join(",")}}`;
+}
+function canonicalBuilderLibrary(value) {
+  return canonicalValue2(value);
+}
+async function builderLibraryDigest(document) {
+  const digest = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalBuilderLibrary(document)));
+  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+async function createBuilderLibraryEnvelope(document) {
+  return { document, digest: await builderLibraryDigest(document) };
+}
+
 // src/email.ts
 function render(template, vars) {
   return template.replace(/\{\{(\w+)\}\}/g, (_, key) => vars[key] ?? "");
@@ -2421,10 +2748,10 @@ function planDelivery(input) {
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
   const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
-  const text3 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text4 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + render(tpl.text, vars) : render(tpl.text, vars);
-  return { deliver: true, transport, to, subject, text: text3, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text4, redirected: redirect };
 }
 
 // src/notify.ts
@@ -2581,25 +2908,25 @@ var ADMISSION_GRANTS_SCHEMA_VERSION = 1;
 var ADMISSION_GRANTS_PATH = "/api/admission-grants";
 
 // src/signup-control-canonical.ts
-var encoder2 = new TextEncoder();
-function canonicalValue2(value) {
+var encoder3 = new TextEncoder();
+function canonicalValue3(value) {
   if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
     return JSON.stringify(value);
   }
-  if (Array.isArray(value)) return `[${value.map(canonicalValue2).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map(canonicalValue3).join(",")}]`;
   if (typeof value !== "object") throw new TypeError("signup control contains an unsupported value");
-  const record3 = value;
-  const entries = Object.keys(record3).sort().flatMap((key) => {
-    const item = record3[key];
-    return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue2(item)}`];
+  const record4 = value;
+  const entries = Object.keys(record4).sort().flatMap((key) => {
+    const item = record4[key];
+    return item === void 0 ? [] : [`${JSON.stringify(key)}:${canonicalValue3(item)}`];
   });
   return `{${entries.join(",")}}`;
 }
 function canonicalSignupControl(value) {
-  return canonicalValue2(value);
+  return canonicalValue3(value);
 }
 async function signupControlDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalSignupControl(document)));
+  const digest = await crypto.subtle.digest("SHA-256", encoder3.encode(canonicalSignupControl(document)));
   return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 async function createSignupControlEnvelope(document) {
@@ -2607,7 +2934,7 @@ async function createSignupControlEnvelope(document) {
 }
 
 // src/admission-grants.ts
-var ID2 = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
+var ID3 = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
 var MAX_GRANTS = 2e3;
 var MAX_NOTE = 2e3;
 var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -2629,10 +2956,10 @@ function validateAdmissionGrantDocument(input) {
   const sourceActor = typeof source.actor === "string" ? source.actor.trim() : "";
   const chapterId = typeof target.chapterId === "string" ? target.chapterId : "";
   const environment = typeof target.environment === "string" ? target.environment : "";
-  if (!ID2.test(sourceId)) errors.push("document.source.appId must be an identifier");
+  if (!ID3.test(sourceId)) errors.push("document.source.appId must be an identifier");
   if (!sourceActor || sourceActor.length > 256) errors.push("document.source.actor must be 1-256 characters");
-  if (!ID2.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
-  if (!ID2.test(environment)) errors.push("document.target.environment must be an identifier");
+  if (!ID3.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
+  if (!ID3.test(environment)) errors.push("document.target.environment must be an identifier");
   if (!Array.isArray(root.grants)) errors.push("document.grants must be an array");
   const rawGrants = Array.isArray(root.grants) ? root.grants : [];
   if (rawGrants.length > MAX_GRANTS) errors.push(`document.grants supports at most ${MAX_GRANTS} entries`);
@@ -2647,7 +2974,7 @@ function validateAdmissionGrantDocument(input) {
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID2.test(id4)) errors.push(`document.grants[${index}].id must be an identifier`);
+    if (!ID3.test(id4)) errors.push(`document.grants[${index}].id must be an identifier`);
     if (seenIds.has(id4)) errors.push(`document.grants repeats id "${id4}"`);
     if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
@@ -2804,11 +3131,11 @@ function resolveJoinContinuation(input) {
 // src/gift-offers.ts
 var GIFT_OFFER_CATALOG_VERSION = 1;
 var MAX_GIFT_OFFERS = 20;
-var ID3 = /^[a-z][a-z0-9-]{1,79}$/;
+var ID4 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
-var record2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var text = (value, path, errors, max) => {
+var record3 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var text2 = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -2818,7 +3145,7 @@ var text = (value, path, errors, max) => {
 };
 function validateGiftOfferCatalog(input, tierIds) {
   const errors = [];
-  const root = record2(input);
+  const root = record3(input);
   if (!root) return { ok: false, errors: ["document.giftOffers must be an object"] };
   for (const key of Object.keys(root)) if (key !== "schemaVersion" && key !== "offers") errors.push(`document.giftOffers.${key} is not supported`);
   if (root.schemaVersion !== GIFT_OFFER_CATALOG_VERSION) errors.push("document.giftOffers.schemaVersion must be 1");
@@ -2829,30 +3156,30 @@ function validateGiftOfferCatalog(input, tierIds) {
   const offers = [];
   for (const [index, raw] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
     const path = `document.giftOffers.offers[${index}]`;
-    const item = record2(raw);
+    const item = record3(raw);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key of Object.keys(item)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
-    const id4 = text(item.id, `${path}.id`, errors, 80);
-    if (id4 && !ID3.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    const id4 = text2(item.id, `${path}.id`, errors, 80);
+    if (id4 && !ID4.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (ids.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
     ids.add(id4);
-    const targetRaw = record2(item.target);
+    const targetRaw = record3(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
-      const tierId = text(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
+      const tierId = text2(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
       if (!tierIds.has(tierId)) errors.push(`${path}.target.tierId must reference a declared tier`);
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
-      const entitlementKey = text(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
-      if (entitlementKey && !ID3.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
+      const entitlementKey = text2(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
+      if (entitlementKey && !ID4.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
-    const stripePriceId = text(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
+    const stripePriceId = text2(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
     if (stripePriceId && !PRICE.test(stripePriceId)) errors.push(`${path}.stripePriceId must be a real Stripe Price id`);
     if (!Number.isSafeInteger(item.priceCents) || Number(item.priceCents) < 1 || Number(item.priceCents) > 1e8) errors.push(`${path}.priceCents must be an integer from 1 to 100,000,000`);
     const currency = typeof item.currency === "string" ? item.currency.trim().toLowerCase() : "";
@@ -2874,9 +3201,9 @@ function validateGiftOfferCatalog(input, tierIds) {
       redemptionLifetimeHours: lifetime,
       ...activeFrom !== void 0 ? { activeFrom } : {},
       ...activeUntil !== void 0 ? { activeUntil } : {},
-      title: text(item.title, `${path}.title`, errors, 160),
-      description: text(item.description, `${path}.description`, errors, 2e3),
-      ctaLabel: text(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
+      title: text2(item.title, `${path}.title`, errors, 160),
+      description: text2(item.description, `${path}.description`, errors, 2e3),
+      ctaLabel: text2(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
     });
   }
   return errors.length ? { ok: false, errors } : { ok: true, value: { schemaVersion: 1, offers } };
@@ -2928,34 +3255,34 @@ function networkSourceTag(type, hubRecordId, sourceId) {
   if (readable && raw.length <= 64) return raw;
   return `network:${typeKey.slice(0, 16)}:${shortHash(`${sourceId ?? ""}\0${type}\0${hubRecordId}`)}`;
 }
-function normalizeSharedRecord(record3, fallbackSourceId = "legacy-source") {
-  if ("input" in record3 && record3.version === 2) {
+function normalizeSharedRecord(record4, fallbackSourceId = "legacy-source") {
+  if ("input" in record4 && record4.version === 2) {
     return {
       version: 2,
-      sourceId: record3.source.siteId,
-      sourceRecordId: record3.source.recordId,
-      type: record3.type,
-      input: record3.input
+      sourceId: record4.source.siteId,
+      sourceRecordId: record4.source.recordId,
+      type: record4.type,
+      input: record4.input
     };
   }
-  if ("input" in record3) {
+  if ("input" in record4) {
     return {
       version: 1,
       sourceId: fallbackSourceId,
-      sourceRecordId: record3.hubRecordId,
-      type: record3.type,
-      input: record3.input
+      sourceRecordId: record4.hubRecordId,
+      type: record4.type,
+      input: record4.input
     };
   }
-  if ("type" in record3 && record3.type === "company") {
-    const input = { name: record3.name };
+  if ("type" in record4 && record4.type === "company") {
+    const input = { name: record4.name };
     for (const key of ["domain", "industry", "location", "linkedin", "notes"]) {
-      if (record3[key]) input[key] = record3[key];
+      if (record4[key]) input[key] = record4[key];
     }
     return {
       version: 1,
       sourceId: fallbackSourceId,
-      sourceRecordId: record3.hubRecordId,
+      sourceRecordId: record4.hubRecordId,
       type: "company",
       input
     };
@@ -2963,28 +3290,28 @@ function normalizeSharedRecord(record3, fallbackSourceId = "legacy-source") {
   return {
     version: 1,
     sourceId: fallbackSourceId,
-    sourceRecordId: record3.hubRecordId,
+    sourceRecordId: record4.hubRecordId,
     type: "person",
-    input: sharedPersonInput(record3)
+    input: sharedPersonInput(record4)
   };
 }
-function sharedRecordFromCrm(crm, record3, target, sourceId) {
-  if (target.fields && !target.fields[record3.type]) {
-    throw new Error(`${target.name} does not accept "${record3.type}" records`);
+function sharedRecordFromCrm(crm, record4, target, sourceId) {
+  if (target.fields && !target.fields[record4.type]) {
+    throw new Error(`${target.name} does not accept "${record4.type}" records`);
   }
-  const def = crm.type(record3.type);
-  const fields = target.fields?.[record3.type] ?? DEFAULT_SHARE_FIELDS[record3.type];
+  const def = crm.type(record4.type);
+  const fields = target.fields?.[record4.type] ?? DEFAULT_SHARE_FIELDS[record4.type];
   if (!fields) {
-    throw new Error(`${target.name} requires an explicit field allowlist for "${record3.type}" records`);
+    throw new Error(`${target.name} requires an explicit field allowlist for "${record4.type}" records`);
   }
   const nameField = def.nameField ?? "name";
   const input = {};
   for (const field of /* @__PURE__ */ new Set([nameField, ...fields])) {
-    const value = record3.fields?.[field];
+    const value = record4.fields?.[field];
     if (value !== void 0) input[field] = value;
   }
-  if (input[nameField] === void 0) input[nameField] = record3.name;
-  return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record3.id }, type: record3.type, input } : { version: 1, type: record3.type, hubRecordId: record3.id, input };
+  if (input[nameField] === void 0) input[nameField] = record4.name;
+  return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record4.id }, type: record4.type, input } : { version: 1, type: record4.type, hubRecordId: record4.id, input };
 }
 async function upsertPerson(deps, opts) {
   const email = opts.email.toLowerCase();
@@ -2998,11 +3325,11 @@ async function upsertPerson(deps, opts) {
   const created = await (0, import_crm5.createRecord)(crmDeps, { type: "person", input: opts.input, mutationId: opts.mutationId });
   return { recordId: created.id };
 }
-async function findSharedRecord(deps, record3, tag) {
+async function findSharedRecord(deps, record4, tag) {
   const structured = await (0, import_crm5.getRecordByOrigin)(
     { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId },
-    record3.sourceId,
-    record3.sourceRecordId
+    record4.sourceId,
+    record4.sourceRecordId
   );
   if (structured) return structured;
   const mapped = await deps.db.query({ crm_tag: { $: { where: { tag }, limit: 1 } } });
@@ -3011,53 +3338,53 @@ async function findSharedRecord(deps, record3, tag) {
     const found = await deps.db.query({ crm_record: { $: { where: { id: mappedId }, limit: 1 } } });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
-  const def = deps.crm.type(record3.type);
+  const def = deps.crm.type(record4.type);
   const emailField = def.emailField;
-  if (emailField && typeof record3.input[emailField] === "string") {
-    const primaryEmail = record3.input[emailField].toLowerCase();
+  if (emailField && typeof record4.input[emailField] === "string") {
+    const primaryEmail = record4.input[emailField].toLowerCase();
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record3.type, primaryEmail }, limit: 1 } }
+      crm_record: { $: { where: { type: record4.type, primaryEmail }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
-  const domain = record3.input.domain;
+  const domain = record4.input.domain;
   const domainSlot = def.fields.domain?.slot;
   if (typeof domain === "string" && domainSlot) {
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record3.type, [domainSlot]: domain }, limit: 1 } }
+      crm_record: { $: { where: { type: record4.type, [domainSlot]: domain }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
   const nameField = def.nameField ?? "name";
-  const name = record3.input[nameField];
-  if (record3.type === "company" && typeof name === "string" && name.trim()) {
+  const name = record4.input[nameField];
+  if (record4.type === "company" && typeof name === "string" && name.trim()) {
     const found = await deps.db.query({
-      crm_record: { $: { where: { type: record3.type, name: name.trim() }, limit: 1 } }
+      crm_record: { $: { where: { type: record4.type, name: name.trim() }, limit: 1 } }
     });
     if (found.crm_record?.[0]) return found.crm_record[0];
   }
   return void 0;
 }
 async function projectSharedRecord(deps, shared, options = {}) {
-  const record3 = normalizeSharedRecord(shared, options.sourceId);
-  if (!record3.type.trim() || !record3.sourceId.trim() || !record3.sourceRecordId.trim()) {
+  const record4 = normalizeSharedRecord(shared, options.sourceId);
+  if (!record4.type.trim() || !record4.sourceId.trim() || !record4.sourceRecordId.trim()) {
     throw new Error("type, source site id, and source record id must be non-empty");
   }
-  if (options.sourceId && options.sourceId !== record3.sourceId) {
+  if (options.sourceId && options.sourceId !== record4.sourceId) {
     throw new Error("signed sender does not match payload source");
   }
-  const tag = networkSourceTag(record3.type, record3.sourceRecordId, record3.version === 2 ? record3.sourceId : void 0);
+  const tag = networkSourceTag(record4.type, record4.sourceRecordId, record4.version === 2 ? record4.sourceId : void 0);
   const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
-  const existing = await findSharedRecord(deps, record3, tag);
+  const existing = await findSharedRecord(deps, record4, tag);
   let recordId;
   if (existing && typeof existing.id === "string") {
-    await (0, import_crm5.updateRecord)(crmDeps, { id: existing.id, input: record3.input });
+    await (0, import_crm5.updateRecord)(crmDeps, { id: existing.id, input: record4.input });
     recordId = existing.id;
   } else {
-    recordId = `network_${shortHash(`${record3.sourceId}\0${record3.type}\0${record3.sourceRecordId}`)}`;
+    recordId = `network_${shortHash(`${record4.sourceId}\0${record4.type}\0${record4.sourceRecordId}`)}`;
     await (0, import_crm5.createRecord)({ ...crmDeps, newId: () => recordId }, {
-      type: record3.type,
-      input: record3.input,
+      type: record4.type,
+      input: record4.input,
       mutationId: `share-create:${tag}`
     });
   }
@@ -3067,10 +3394,10 @@ async function projectSharedRecord(deps, shared, options = {}) {
   );
   await (0, import_crm5.upsertRecordOrigin)(crmDeps, {
     recordId,
-    sourceId: record3.sourceId,
-    sourceRecordId: record3.sourceRecordId,
+    sourceId: record4.sourceId,
+    sourceRecordId: record4.sourceRecordId,
     ...options.sourceUrl ? { sourceUrl: options.sourceUrl } : {},
-    payloadVersion: record3.version
+    payloadVersion: record4.version
   });
   return { recordId };
 }
@@ -3354,8 +3681,8 @@ async function clerkListUsers(secretKey, fetchImpl = fetch) {
     const data = await clerkGet(`/v1/users?limit=${PAGE}&offset=${offset}`, secretKey, fetchImpl);
     const page = Array.isArray(data) ? data : [];
     for (const u of page) {
-      const record3 = toRecord(u);
-      if (record3) out.push(record3);
+      const record4 = toRecord(u);
+      if (record4) out.push(record4);
     }
     if (page.length < PAGE) break;
   }
@@ -3762,7 +4089,7 @@ var SIGNUP_CONTROL_PATH = "/api/signup-control";
 var MEMBERSHIP_PAGE_RENDERER = "membership-cards-v1";
 var TIER_ID = /^[a-z][a-z0-9-]{0,79}$/;
 var VARIANTS = /* @__PURE__ */ new Set(["standard", "featured", "supporting"]);
-var ROOT_KEYS2 = /* @__PURE__ */ new Set(["schemaVersion", "renderer", "tiers", "footnoteMarkdown"]);
+var ROOT_KEYS3 = /* @__PURE__ */ new Set(["schemaVersion", "renderer", "tiers", "footnoteMarkdown"]);
 var TIER_KEYS = /* @__PURE__ */ new Set([
   "tierId",
   "variant",
@@ -3781,7 +4108,7 @@ var CALLOUT_KEYS = /* @__PURE__ */ new Set(["label", "bodyMarkdown"]);
 var CAPACITY_KEYS = /* @__PURE__ */ new Set(["total", "label"]);
 var MAX_TIERS = 20;
 var MAX_BENEFITS = 24;
-var MAX_MARKDOWN2 = 65536;
+var MAX_MARKDOWN3 = 65536;
 var MAX_LABEL = 160;
 var objectRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 function rejectUnknownKeys(value, allowed2, path, errors) {
@@ -3798,16 +4125,16 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text3 = value.trim();
-  if (required && !text3) errors.push(`${path} is required`);
-  if (text3.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text3;
+  const text4 = value.trim();
+  if (required && !text4) errors.push(`${path} is required`);
+  if (text4.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text4;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
   const root = objectRecord(input);
   if (!root) return { ok: false, errors: ["document must be an object"] };
-  rejectUnknownKeys(root, ROOT_KEYS2, "document", errors);
+  rejectUnknownKeys(root, ROOT_KEYS3, "document", errors);
   if (root.schemaVersion !== 1) errors.push("document.schemaVersion must be 1");
   if (root.renderer !== MEMBERSHIP_PAGE_RENDERER) {
     errors.push(`document.renderer must be "${MEMBERSHIP_PAGE_RENDERER}"`);
@@ -3850,8 +4177,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text3 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text3 ? [text3] : [];
+          const text4 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text4 ? [text4] : [];
         });
       }
     }
@@ -3861,7 +4188,7 @@ function validateMembershipPageDocument(input, options = {}) {
       if (!rawCallout) errors.push(`${path}.callout must be an object`);
       else {
         rejectUnknownKeys(rawCallout, CALLOUT_KEYS, `${path}.callout`, errors);
-        const bodyMarkdown = boundedString(rawCallout.bodyMarkdown, `${path}.callout.bodyMarkdown`, errors, MAX_MARKDOWN2, true);
+        const bodyMarkdown = boundedString(rawCallout.bodyMarkdown, `${path}.callout.bodyMarkdown`, errors, MAX_MARKDOWN3, true);
         const label = boundedString(rawCallout.label, `${path}.callout.label`, errors, MAX_LABEL);
         if (bodyMarkdown) callout = { ...label ? { label } : {}, bodyMarkdown };
       }
@@ -3883,10 +4210,10 @@ function validateMembershipPageDocument(input, options = {}) {
       }
     }
     const badge = boundedString(item.badge, `${path}.badge`, errors, MAX_LABEL);
-    const summaryMarkdown = boundedString(item.summaryMarkdown, `${path}.summaryMarkdown`, errors, MAX_MARKDOWN2);
+    const summaryMarkdown = boundedString(item.summaryMarkdown, `${path}.summaryMarkdown`, errors, MAX_MARKDOWN3);
     const priceEyebrow = boundedString(item.priceEyebrow, `${path}.priceEyebrow`, errors, MAX_LABEL);
     const billingLabel = boundedString(item.billingLabel, `${path}.billingLabel`, errors, MAX_LABEL);
-    const priceNoteMarkdown = boundedString(item.priceNoteMarkdown, `${path}.priceNoteMarkdown`, errors, MAX_MARKDOWN2);
+    const priceNoteMarkdown = boundedString(item.priceNoteMarkdown, `${path}.priceNoteMarkdown`, errors, MAX_MARKDOWN3);
     const ctaLabel = boundedString(item.ctaLabel, `${path}.ctaLabel`, errors, MAX_LABEL);
     tiers2.push({
       tierId,
@@ -3908,7 +4235,7 @@ function validateMembershipPageDocument(input, options = {}) {
       if (!seen.has(tierId)) errors.push(`document.tiers is missing offered tier "${tierId}"`);
     }
   }
-  const footnoteMarkdown = boundedString(root.footnoteMarkdown, "document.footnoteMarkdown", errors, MAX_MARKDOWN2);
+  const footnoteMarkdown = boundedString(root.footnoteMarkdown, "document.footnoteMarkdown", errors, MAX_MARKDOWN3);
   if (errors.length) return { ok: false, errors };
   return {
     ok: true,
@@ -3927,11 +4254,11 @@ function membershipPageDocument(input, options = {}) {
 }
 
 // src/signup-control-validate.ts
-var SLUG6 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG7 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var ENVIRONMENT = /^[a-z][a-z0-9_-]{0,62}$/;
 var TIER = /^[a-z][a-z0-9-]{0,79}$/;
 var PRICE2 = /^price_[A-Za-z0-9]{12,}$/;
-var ROOT_KEYS3 = /* @__PURE__ */ new Set([
+var ROOT_KEYS4 = /* @__PURE__ */ new Set([
   "schemaVersion",
   "revision",
   "generatedAt",
@@ -3947,10 +4274,10 @@ var ROOT_KEYS3 = /* @__PURE__ */ new Set([
 ]);
 var TIER_KEYS2 = /* @__PURE__ */ new Set(["id", "name", "available", "sortOrder", "priceCents", "stripePriceId", "blurb"]);
 var recordOf = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-function unknownKeys2(value, allowed2, path, errors) {
+function unknownKeys3(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text2(value, path, errors, max = 65536) {
+function text3(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -3972,12 +4299,12 @@ function tiersOf(value, errors) {
       errors.push(`${path} must be an object`);
       return [];
     }
-    unknownKeys2(item, TIER_KEYS2, path, errors);
-    const id4 = text2(item.id, `${path}.id`, errors, 80);
+    unknownKeys3(item, TIER_KEYS2, path, errors);
+    const id4 = text3(item.id, `${path}.id`, errors, 80);
     if (id4 && !TIER.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (seen.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
     seen.add(id4);
-    const name = text2(item.name, `${path}.name`, errors, 160);
+    const name = text3(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
     if (!Number.isInteger(item.priceCents) || Number(item.priceCents) < 0 || Number(item.priceCents) > 1e8) {
@@ -3989,7 +4316,7 @@ function tiersOf(value, errors) {
     if (item.available === true && Number(item.priceCents) > 0 && !item.stripePriceId) {
       errors.push(`${path}.stripePriceId is required for an available paid tier`);
     }
-    const blurb = item.blurb === void 0 ? void 0 : text2(item.blurb, `${path}.blurb`, errors, 4e3);
+    const blurb = item.blurb === void 0 ? void 0 : text3(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
       id: id4,
       name,
@@ -4008,7 +4335,7 @@ function applicationOf(value, errors) {
     errors.push("document.application must be an object");
     return void 0;
   }
-  unknownKeys2(input, /* @__PURE__ */ new Set(["required", "optional", "conditions", "copy"]), "document.application", errors);
+  unknownKeys3(input, /* @__PURE__ */ new Set(["required", "optional", "conditions", "copy"]), "document.application", errors);
   try {
     const resolved = resolveApplication(input);
     const copy = recordOf(input.copy);
@@ -4034,11 +4361,11 @@ function policyOf(value, errors) {
     return void 0;
   }
   const allowed2 = /* @__PURE__ */ new Set(["disclaimerText", "refundPolicyText", "trustCopy", "commitmentText", "normsText"]);
-  unknownKeys2(input, allowed2, "document.policy", errors);
+  unknownKeys3(input, allowed2, "document.policy", errors);
   const result = {};
   for (const key of allowed2) {
     if (input[key] === void 0 && key !== "disclaimerText" && key !== "refundPolicyText") continue;
-    result[key] = text2(input[key], `document.policy.${key}`, errors);
+    result[key] = text3(input[key], `document.policy.${key}`, errors);
   }
   return result;
 }
@@ -4050,7 +4377,7 @@ function themeOf(value, errors) {
     errors.push("document.theme.tokens must be an object");
     return void 0;
   }
-  unknownKeys2(input, /* @__PURE__ */ new Set(["tokens"]), "document.theme", errors);
+  unknownKeys3(input, /* @__PURE__ */ new Set(["tokens"]), "document.theme", errors);
   if (Object.keys(tokens).length > 256) errors.push("document.theme.tokens supports at most 256 entries");
   let serializedLength = 0;
   for (const [key, token] of Object.entries(tokens)) {
@@ -4070,17 +4397,17 @@ function validateSignupControlDocument(input) {
   const errors = [];
   const root = recordOf(input);
   if (!root) return { ok: false, errors: ["document must be an object"] };
-  unknownKeys2(root, ROOT_KEYS3, "document", errors);
+  unknownKeys3(root, ROOT_KEYS4, "document", errors);
   if (root.schemaVersion !== 1) errors.push("document.schemaVersion must be 1");
   if (!Number.isSafeInteger(root.revision) || Number(root.revision) < 1) errors.push("document.revision must be a positive integer");
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
   const source = recordOf(root.source);
   const target = recordOf(root.target);
-  const appId = text2(source?.appId, "document.source.appId", errors, 63);
-  const chapterId = text2(target?.chapterId, "document.target.chapterId", errors, 63);
-  const environment = text2(target?.environment, "document.target.environment", errors, 63);
-  if (appId && !SLUG6.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
-  if (chapterId && !SLUG6.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
+  const appId = text3(source?.appId, "document.source.appId", errors, 63);
+  const chapterId = text3(target?.chapterId, "document.target.chapterId", errors, 63);
+  const environment = text3(target?.environment, "document.target.environment", errors, 63);
+  if (appId && !SLUG7.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
+  if (chapterId && !SLUG7.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
   if (target?.stripeMode !== "test" && target?.stripeMode !== "live") errors.push("document.target.stripeMode must be test or live");
   const tiers2 = tiersOf(root.tiers, errors);
@@ -4230,7 +4557,7 @@ function hydrateSignupControlTheme(target, revision, options = {}) {
 
 // src/membership-markdown.ts
 var MAX_BENEFITS2 = 24;
-var MAX_MARKDOWN3 = 65536;
+var MAX_MARKDOWN4 = 65536;
 var MAX_LABEL2 = 160;
 var MARKDOWN_SECTION = /^##\s+(.+?)\s*$/;
 var MARKDOWN_HEADING = /^#{1,6}\s+/;
@@ -4255,17 +4582,17 @@ function markdownBenefits(lines, path, errors) {
       errors.push(`${path} line ${index + 1} must be a Markdown bullet`);
       continue;
     }
-    const text3 = (match[1] ?? "").trim();
-    if (text3.length > 2e3) errors.push(`${path} line ${index + 1} must be at most 2,000 characters`);
-    if (text3) benefits.push(text3);
+    const text4 = (match[1] ?? "").trim();
+    if (text4.length > 2e3) errors.push(`${path} line ${index + 1} must be at most 2,000 characters`);
+    if (text4) benefits.push(text4);
   }
   if (benefits.length > MAX_BENEFITS2) errors.push(`${path} supports at most ${MAX_BENEFITS2} entries`);
   return benefits.slice(0, MAX_BENEFITS2);
 }
 function applyMembershipTierMarkdown(presentation, source) {
   if (typeof source !== "string") return { ok: false, errors: ["membership Markdown must be a string"] };
-  if (source.length > MAX_MARKDOWN3) {
-    return { ok: false, errors: [`membership Markdown must be at most ${MAX_MARKDOWN3.toLocaleString("en-US")} characters`] };
+  if (source.length > MAX_MARKDOWN4) {
+    return { ok: false, errors: [`membership Markdown must be at most ${MAX_MARKDOWN4.toLocaleString("en-US")} characters`] };
   }
   if (!source.trim()) return { ok: true, value: { ...presentation } };
   const errors = [];