@odla-ai/chapter 0.4.0 → 0.7.0

package/dist/index.d.cts

@@ -433,6 +433,54 @@ declare function planDelivery(input: {
     force?: boolean;
 }): DeliveryDecision;
 
+/** The mail transport (the worker's Cloudflare SEND_EMAIL binding). */
+interface MailSender {
+    send(payload: {
+        from: string;
+        to: string[];
+        subject: string;
+        text?: string;
+        replyTo?: string;
+    }): Promise<{
+        messageId: string;
+    }>;
+}
+/** Deps for {@link sendTemplated} — the db, the env name (drives the fail-safe),
+ *  the transport + from (absent ⇒ log-only), and injected clock/id. */
+interface NotifyDeps {
+    db: ChapterDb;
+    envName: string;
+    sender?: MailSender;
+    from?: string;
+    now: () => number;
+    newId: () => string;
+}
+/** One templated send. `dedupeKey` is the exactly-once key. */
+interface NotifyInput {
+    group: EmailGroup;
+    template: string;
+    to: string;
+    vars: Record<string, string>;
+    dedupeKey: string;
+    applicationId?: string;
+    /** The admin test route may send a disabled template. */
+    force?: boolean;
+}
+/** The outcome. `sent:true` includes the already-sent short-circuit. */
+interface NotifyResult {
+    sent: boolean;
+    reason?: string;
+}
+/**
+ * Send a templated lifecycle email exactly once. Short-circuits on a prior
+ * successful send; otherwise plans delivery (dev fail-safe applies), sends via the
+ * transport when one is wired and the plan calls for it, and records an emailLog
+ * row either way (success keyed for exactly-once, failure unkeyed for retry).
+ */
+declare function sendTemplated(deps: NotifyDeps, input: NotifyInput): Promise<NotifyResult>;
+/** Project a `groups` row into the {@link EmailGroup} the email pipeline reads. */
+declare function emailGroupFrom(row: Record<string, unknown>): EmailGroup;
+
 /**
  * Apply defaults + validate the pipeline config. With no config, the full Silver
  * & Salt pipeline. With `stages` given but the subsets omitted, the subsets
@@ -619,14 +667,50 @@ interface ProjectionDeps {
 }
 /**
  * Upsert a hub-shared prospect into this chapter's `crm_record` (push
- * projection). Resolves an existing person by lowercased `primaryEmail` and
- * updates it, else creates one with a `share:${hubRecordId}` mutationId. Returns
- * the chapter-side record id. Callers wrap this in `.catch` so a projection
- * failure never fails the hub's share request.
+ * projection), idempotent by the hub record id and unified by email. Callers wrap
+ * this in `.catch` so a projection failure never fails the hub's share request.
  */
 declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson): Promise<{
     recordId: string;
 }>;
+/** An arriving applicant, as far as the CRM projection cares. */
+interface Applicant {
+    applicationId: string;
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    phone?: string;
+    linkedin?: string;
+}
+/**
+ * Project an arriving applicant into this chapter's `crm_record`, so a new
+ * application shows up in the CRM immediately, unified by email with any prior
+ * record. Idempotent per application (`apply:${applicationId}`). Best-effort at
+ * the call site — a projection failure never fails the application.
+ */
+declare function projectApplicant(deps: ProjectionDeps, applicant: Applicant): Promise<{
+    recordId: string;
+}>;
+
+/** Inputs for a Clerk invitation. */
+interface ClerkInviteInput {
+    email: string;
+    /** Where the accept-invitation link lands (usually the member area). */
+    redirectUrl?: string;
+}
+/** Build the Clerk Backend API invitation request (path + JSON body). Pure, so
+ *  the wire shape is testable without a network call. */
+declare function clerkInviteRequest(input: ClerkInviteInput): {
+    path: string;
+    body: Record<string, unknown>;
+};
+/** POST the invitation to the Clerk Backend API. `ignore_existing` isn't set, so
+ *  a repeat invite for an already-invited/known email returns non-ok — the caller
+ *  swallows that (idempotent-enough for a best-effort apply-time invite). */
+declare function createClerkInvitation(secretKey: string, input: ClerkInviteInput, fetchImpl?: typeof fetch): Promise<{
+    ok: boolean;
+    status: number;
+}>;
 
 /** An application row, as far as the session cares about it. */
 interface ApplicationRecord {
@@ -698,6 +782,53 @@ declare function memberSession(user: SessionUser, opts: {
     superAdmin: boolean;
 }): MemberSession;
 
+/**
+ * Build the `:root { … }` CSS that maps a chapter's brand onto the design tokens
+ * the UI reads: each `palette` entry becomes a custom property, and `fonts`
+ * (display/body/numeral) map to `--ui-font-display` / `--ui-font-sans` /
+ * `--ui-font-numeral`. Returns "" when there is nothing to theme.
+ */
+declare function brandTokens(brand: ChapterBrand | undefined): string;
+
+/** A `meetings` row, as far as reconciliation cares. */
+interface MeetingForReconcile {
+    id: string;
+    applicationId: string;
+    googleEventId?: string | null;
+    status: string;
+    startAt?: number | null;
+    endAt?: number | null;
+}
+/** One live calendar event (a subset of @odla-ai/calendar's Booking). */
+interface LiveEvent {
+    eventId: string;
+    status?: string;
+    startAt?: number;
+    endAt?: number;
+}
+/** An adopt decision: mirror a Google move/cancel onto our rows. */
+interface ReconcileDecision {
+    meetingId: string;
+    applicationId: string;
+    kind: "cancelled" | "moved";
+    /** Attrs to write onto the `meetings` row. */
+    meetingPatch: Record<string, unknown>;
+    /** Attrs to write onto the `applications` row (the projection). */
+    applicationPatch: Record<string, unknown>;
+}
+/** Meetings still worth reconciling: a scheduled booking with a Google event that
+ *  starts in the future (or within the last hour, to catch a just-passed edit). */
+declare function isReconcilable(meeting: MeetingForReconcile, now: number): boolean;
+/**
+ * Diff canonical `meetings` against the live calendar events and return the adopt
+ * decisions — only for meetings that actually changed (a still-matching meeting
+ * is omitted). A meeting whose event vanished or is `cancelled` in Google is
+ * adopted as cancelled (application `meetingAt` zeroed — 0 means "was booked,
+ * then cancelled"); a meeting whose event moved adopts the new window (duration
+ * preserved when the event omits `endAt`).
+ */
+declare function reconcileMeetings(meetings: readonly MeetingForReconcile[], events: readonly LiveEvent[], now: number): ReconcileDecision[];
+
 /** A fully-resolved scheduling config (every field present). */
 interface ResolvedScheduling {
     slotMinutes: number;
@@ -721,9 +852,6 @@ declare const SCHEDULING_DEFAULTS: ResolvedScheduling;
  */
 declare function resolveScheduling(config?: ChapterScheduling): ResolvedScheduling;
 /** Statuses a member may book/reschedule from (early pipeline only). */
-declare const BOOKABLE_STATUSES: readonly string[];
-/** Whether an application at `status` may book a call. */
-declare function canBookFrom(status: string): boolean;
 /** The availability window: `[now, now + windowDays]` in epoch ms. */
 declare function slotWindow(now: number, windowDays: number): {
     from: number;
@@ -806,4 +934,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BOOKABLE_STATUSES, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type PaymentsGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, buildGroupSeed, canApprove, canBook, canBookFrom, canChangeRole, canTransition, canceledPatch, chapterDb, createChapterIntegration, defaultCrm, defineChapter, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectSharedRecord, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };
+export { type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ClerkInviteInput, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clerkInviteRequest, createChapterIntegration, createClerkInvitation, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };

package/dist/index.d.ts

@@ -433,6 +433,54 @@ declare function planDelivery(input: {
     force?: boolean;
 }): DeliveryDecision;
 
+/** The mail transport (the worker's Cloudflare SEND_EMAIL binding). */
+interface MailSender {
+    send(payload: {
+        from: string;
+        to: string[];
+        subject: string;
+        text?: string;
+        replyTo?: string;
+    }): Promise<{
+        messageId: string;
+    }>;
+}
+/** Deps for {@link sendTemplated} — the db, the env name (drives the fail-safe),
+ *  the transport + from (absent ⇒ log-only), and injected clock/id. */
+interface NotifyDeps {
+    db: ChapterDb;
+    envName: string;
+    sender?: MailSender;
+    from?: string;
+    now: () => number;
+    newId: () => string;
+}
+/** One templated send. `dedupeKey` is the exactly-once key. */
+interface NotifyInput {
+    group: EmailGroup;
+    template: string;
+    to: string;
+    vars: Record<string, string>;
+    dedupeKey: string;
+    applicationId?: string;
+    /** The admin test route may send a disabled template. */
+    force?: boolean;
+}
+/** The outcome. `sent:true` includes the already-sent short-circuit. */
+interface NotifyResult {
+    sent: boolean;
+    reason?: string;
+}
+/**
+ * Send a templated lifecycle email exactly once. Short-circuits on a prior
+ * successful send; otherwise plans delivery (dev fail-safe applies), sends via the
+ * transport when one is wired and the plan calls for it, and records an emailLog
+ * row either way (success keyed for exactly-once, failure unkeyed for retry).
+ */
+declare function sendTemplated(deps: NotifyDeps, input: NotifyInput): Promise<NotifyResult>;
+/** Project a `groups` row into the {@link EmailGroup} the email pipeline reads. */
+declare function emailGroupFrom(row: Record<string, unknown>): EmailGroup;
+
 /**
  * Apply defaults + validate the pipeline config. With no config, the full Silver
  * & Salt pipeline. With `stages` given but the subsets omitted, the subsets
@@ -619,14 +667,50 @@ interface ProjectionDeps {
 }
 /**
  * Upsert a hub-shared prospect into this chapter's `crm_record` (push
- * projection). Resolves an existing person by lowercased `primaryEmail` and
- * updates it, else creates one with a `share:${hubRecordId}` mutationId. Returns
- * the chapter-side record id. Callers wrap this in `.catch` so a projection
- * failure never fails the hub's share request.
+ * projection), idempotent by the hub record id and unified by email. Callers wrap
+ * this in `.catch` so a projection failure never fails the hub's share request.
  */
 declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson): Promise<{
     recordId: string;
 }>;
+/** An arriving applicant, as far as the CRM projection cares. */
+interface Applicant {
+    applicationId: string;
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    phone?: string;
+    linkedin?: string;
+}
+/**
+ * Project an arriving applicant into this chapter's `crm_record`, so a new
+ * application shows up in the CRM immediately, unified by email with any prior
+ * record. Idempotent per application (`apply:${applicationId}`). Best-effort at
+ * the call site — a projection failure never fails the application.
+ */
+declare function projectApplicant(deps: ProjectionDeps, applicant: Applicant): Promise<{
+    recordId: string;
+}>;
+
+/** Inputs for a Clerk invitation. */
+interface ClerkInviteInput {
+    email: string;
+    /** Where the accept-invitation link lands (usually the member area). */
+    redirectUrl?: string;
+}
+/** Build the Clerk Backend API invitation request (path + JSON body). Pure, so
+ *  the wire shape is testable without a network call. */
+declare function clerkInviteRequest(input: ClerkInviteInput): {
+    path: string;
+    body: Record<string, unknown>;
+};
+/** POST the invitation to the Clerk Backend API. `ignore_existing` isn't set, so
+ *  a repeat invite for an already-invited/known email returns non-ok — the caller
+ *  swallows that (idempotent-enough for a best-effort apply-time invite). */
+declare function createClerkInvitation(secretKey: string, input: ClerkInviteInput, fetchImpl?: typeof fetch): Promise<{
+    ok: boolean;
+    status: number;
+}>;
 
 /** An application row, as far as the session cares about it. */
 interface ApplicationRecord {
@@ -698,6 +782,53 @@ declare function memberSession(user: SessionUser, opts: {
     superAdmin: boolean;
 }): MemberSession;
 
+/**
+ * Build the `:root { … }` CSS that maps a chapter's brand onto the design tokens
+ * the UI reads: each `palette` entry becomes a custom property, and `fonts`
+ * (display/body/numeral) map to `--ui-font-display` / `--ui-font-sans` /
+ * `--ui-font-numeral`. Returns "" when there is nothing to theme.
+ */
+declare function brandTokens(brand: ChapterBrand | undefined): string;
+
+/** A `meetings` row, as far as reconciliation cares. */
+interface MeetingForReconcile {
+    id: string;
+    applicationId: string;
+    googleEventId?: string | null;
+    status: string;
+    startAt?: number | null;
+    endAt?: number | null;
+}
+/** One live calendar event (a subset of @odla-ai/calendar's Booking). */
+interface LiveEvent {
+    eventId: string;
+    status?: string;
+    startAt?: number;
+    endAt?: number;
+}
+/** An adopt decision: mirror a Google move/cancel onto our rows. */
+interface ReconcileDecision {
+    meetingId: string;
+    applicationId: string;
+    kind: "cancelled" | "moved";
+    /** Attrs to write onto the `meetings` row. */
+    meetingPatch: Record<string, unknown>;
+    /** Attrs to write onto the `applications` row (the projection). */
+    applicationPatch: Record<string, unknown>;
+}
+/** Meetings still worth reconciling: a scheduled booking with a Google event that
+ *  starts in the future (or within the last hour, to catch a just-passed edit). */
+declare function isReconcilable(meeting: MeetingForReconcile, now: number): boolean;
+/**
+ * Diff canonical `meetings` against the live calendar events and return the adopt
+ * decisions — only for meetings that actually changed (a still-matching meeting
+ * is omitted). A meeting whose event vanished or is `cancelled` in Google is
+ * adopted as cancelled (application `meetingAt` zeroed — 0 means "was booked,
+ * then cancelled"); a meeting whose event moved adopts the new window (duration
+ * preserved when the event omits `endAt`).
+ */
+declare function reconcileMeetings(meetings: readonly MeetingForReconcile[], events: readonly LiveEvent[], now: number): ReconcileDecision[];
+
 /** A fully-resolved scheduling config (every field present). */
 interface ResolvedScheduling {
     slotMinutes: number;
@@ -721,9 +852,6 @@ declare const SCHEDULING_DEFAULTS: ResolvedScheduling;
  */
 declare function resolveScheduling(config?: ChapterScheduling): ResolvedScheduling;
 /** Statuses a member may book/reschedule from (early pipeline only). */
-declare const BOOKABLE_STATUSES: readonly string[];
-/** Whether an application at `status` may book a call. */
-declare function canBookFrom(status: string): boolean;
 /** The availability window: `[now, now + windowDays]` in epoch ms. */
 declare function slotWindow(now: number, windowDays: number): {
     from: number;
@@ -806,4 +934,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BOOKABLE_STATUSES, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type PaymentsGroup, type ProjectionDeps, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, buildGroupSeed, canApprove, canBook, canBookFrom, canChangeRole, canTransition, canceledPatch, chapterDb, createChapterIntegration, defaultCrm, defineChapter, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectSharedRecord, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };
+export { type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ClerkInviteInput, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clerkInviteRequest, createChapterIntegration, createClerkInvitation, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, verifyStripeSignature, webhookMutationId };

package/dist/index.js

@@ -556,6 +556,72 @@ function planDelivery(input) {
   return { deliver: true, transport, to, subject, text, redirected: redirect };
 }
 
+// src/notify.ts
+async function sendTemplated(deps, input) {
+  const { emailLog: emailLog2 } = await deps.db.query({ emailLog: { $: { where: { dedupeKey: input.dedupeKey } } } });
+  const prior = Array.isArray(emailLog2) ? emailLog2 : [];
+  if (isAlreadySent(prior)) return { sent: true, reason: "already-sent" };
+  const cloudflareReady = Boolean(deps.sender && deps.from);
+  const decision = planDelivery({
+    envName: deps.envName,
+    group: input.group,
+    template: input.template,
+    to: input.to,
+    vars: input.vars,
+    cloudflareReady,
+    force: input.force
+  });
+  if (!decision.deliver) return { sent: false, reason: decision.reason };
+  let error;
+  let messageId;
+  if (decision.transport === "cloudflare" && deps.sender && deps.from) {
+    try {
+      const res = await deps.sender.send({
+        from: deps.from,
+        to: [decision.to],
+        subject: decision.subject,
+        text: decision.text,
+        replyTo: input.group.replyTo
+      });
+      messageId = res.messageId;
+    } catch (e) {
+      error = e instanceof Error ? e.message : String(e);
+    }
+  }
+  const id2 = deps.newId();
+  const row = {
+    id: id2,
+    groupId: input.group.id,
+    to: decision.to,
+    template: input.template,
+    subject: decision.subject,
+    body: decision.text,
+    transport: decision.transport,
+    redirected: decision.redirected,
+    dedupeKey: input.dedupeKey,
+    sentAt: deps.now(),
+    ...input.applicationId ? { applicationId: input.applicationId } : {},
+    ...messageId ? { messageId } : {},
+    ...error ? { error } : {}
+  };
+  await deps.db.transact([{ t: "update", ns: "emailLog", id: id2, attrs: row }], error ? void 0 : { mutationId: `email:${input.dedupeKey}` });
+  return error ? { sent: false, reason: error } : { sent: true };
+}
+function emailGroupFrom(row) {
+  const str = (v) => typeof v === "string" ? v : void 0;
+  const templates = row.emailTemplates && typeof row.emailTemplates === "object" ? row.emailTemplates : {};
+  return {
+    id: String(row.id),
+    name: String(row.name ?? ""),
+    replyTo: str(row.replyTo) ?? "",
+    debugEmail: str(row.debugEmail),
+    refundPolicyText: str(row.refundPolicyText),
+    commitmentText: str(row.commitmentText),
+    normsText: str(row.normsText),
+    emailTemplates: templates
+  };
+}
+
 // src/payments.ts
 function parseSigHeader(header) {
   const parts = {};
@@ -665,21 +731,53 @@ function sharedPersonInput(person) {
   if (person.linkedin) input.linkedin = person.linkedin;
   return input;
 }
-async function projectSharedRecord(deps, person) {
-  const email = person.email.toLowerCase();
-  const input = sharedPersonInput(person);
+async function upsertPerson(deps, opts) {
+  const email = opts.email.toLowerCase();
   const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
-  const { crm_record } = await deps.db.query({
-    crm_record: { $: { where: { type: "person", primaryEmail: email }, limit: 1 } }
-  });
+  const { crm_record } = await deps.db.query({ crm_record: { $: { where: { type: "person", primaryEmail: email }, limit: 1 } } });
   const existing = crm_record?.[0];
   if (existing && typeof existing.id === "string") {
-    await updateRecord(crmDeps, { id: existing.id, input });
+    await updateRecord(crmDeps, { id: existing.id, input: opts.input });
     return { recordId: existing.id };
   }
-  const created = await createRecord(crmDeps, { type: "person", input, mutationId: `share:${person.hubRecordId}` });
+  const created = await createRecord(crmDeps, { type: "person", input: opts.input, mutationId: opts.mutationId });
   return { recordId: created.id };
 }
+async function projectSharedRecord(deps, person) {
+  return upsertPerson(deps, { email: person.email, input: sharedPersonInput(person), mutationId: `share:${person.hubRecordId}` });
+}
+async function projectApplicant(deps, applicant) {
+  const input = sharedPersonInput({
+    email: applicant.email,
+    firstName: applicant.firstName,
+    lastName: applicant.lastName,
+    phone: applicant.phone,
+    linkedin: applicant.linkedin,
+    hubRecordId: applicant.applicationId
+  });
+  return upsertPerson(deps, { email: applicant.email, input, mutationId: `apply:${applicant.applicationId}` });
+}
+
+// src/clerk.ts
+function clerkInviteRequest(input) {
+  return {
+    path: "/v1/invitations",
+    body: {
+      email_address: input.email,
+      notify: true,
+      ...input.redirectUrl ? { redirect_url: input.redirectUrl } : {}
+    }
+  };
+}
+async function createClerkInvitation(secretKey, input, fetchImpl = fetch) {
+  const { path, body } = clerkInviteRequest(input);
+  const res = await fetchImpl(`https://api.clerk.com${path}`, {
+    method: "POST",
+    headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  return { ok: res.ok, status: res.status };
+}
 
 // src/session.ts
 function applicationSummary(app) {
@@ -722,6 +820,61 @@ function memberSession(user, opts) {
   };
 }
 
+// src/brand.ts
+function paletteVar(key) {
+  return key.startsWith("--") ? key : `--${key}`;
+}
+function cleanValue(value) {
+  return value.replace(/[<>{};]/g, "").trim();
+}
+function brandTokens(brand) {
+  if (!brand) return "";
+  const decls = [];
+  for (const [key, value] of Object.entries(brand.palette ?? {})) {
+    if (typeof value === "string" && value.trim()) decls.push(`${paletteVar(key)}: ${cleanValue(value)};`);
+  }
+  const fonts = brand.fonts;
+  if (fonts?.display) decls.push(`--ui-font-display: ${cleanValue(fonts.display)};`);
+  if (fonts?.body) decls.push(`--ui-font-sans: ${cleanValue(fonts.body)};`);
+  if (fonts?.numeral) decls.push(`--ui-font-numeral: ${cleanValue(fonts.numeral)};`);
+  return decls.length ? `:root {
+  ${decls.join("\n  ")}
+}
+` : "";
+}
+
+// src/reconcile.ts
+function isReconcilable(meeting, now) {
+  return meeting.status === "scheduled" && Boolean(meeting.googleEventId) && (meeting.startAt ?? 0) > now - 36e5;
+}
+function reconcileMeetings(meetings2, events, now) {
+  const byEvent = new Map(events.map((e) => [e.eventId, e]));
+  const decisions = [];
+  for (const m of meetings2) {
+    if (!isReconcilable(m, now) || !m.googleEventId) continue;
+    const g = byEvent.get(m.googleEventId);
+    if (!g || g.status === "cancelled") {
+      decisions.push({
+        meetingId: m.id,
+        applicationId: m.applicationId,
+        kind: "cancelled",
+        meetingPatch: { status: "cancelled", drift: "none", adoptedFromGoogleAt: now },
+        applicationPatch: { meetingAt: 0, meetingLink: "" }
+      });
+    } else if (g.startAt !== void 0 && g.startAt !== m.startAt) {
+      const duration = (m.endAt ?? 0) - (m.startAt ?? 0);
+      decisions.push({
+        meetingId: m.id,
+        applicationId: m.applicationId,
+        kind: "moved",
+        meetingPatch: { startAt: g.startAt, endAt: g.endAt ?? g.startAt + duration, drift: "none", adoptedFromGoogleAt: now },
+        applicationPatch: { meetingAt: g.startAt }
+      });
+    }
+  }
+  return decisions;
+}
+
 // src/scheduling.ts
 var SCHEDULING_DEFAULTS = {
   slotMinutes: 45,
@@ -768,10 +921,6 @@ function resolveScheduling(config) {
   if (typeof c.summaryTemplate !== "string") fail("summaryTemplate must be a string");
   return { ...c, days };
 }
-var BOOKABLE_STATUSES = ["submitted", "paid_pending_vetting", "call_scheduled"];
-function canBookFrom(status) {
-  return BOOKABLE_STATUSES.includes(status);
-}
 function slotWindow(now, windowDays) {
   return { from: now, to: now + windowDays * 864e5 };
 }
@@ -818,22 +967,24 @@ function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
   };
 }
 export {
-  BOOKABLE_STATUSES,
   SCHEDULING_DEFAULTS,
   applicationBookingUpdate,
   applicationSummary,
   bookingDecision,
+  brandTokens,
   buildGroupSeed,
   canApprove,
   canBook,
-  canBookFrom,
   canChangeRole,
   canTransition,
   canceledPatch,
   chapterDb,
+  clerkInviteRequest,
   createChapterIntegration,
+  createClerkInvitation,
   defaultCrm,
   defineChapter,
+  emailGroupFrom,
   endForSlot,
   findApplicationRef,
   firstPaymentPatch,
@@ -841,6 +992,7 @@ export {
   introIdempotencyKey,
   isAdminRole,
   isAlreadySent,
+  isReconcilable,
   isSlotAvailable,
   joinConfig,
   meetingCreateRow,
@@ -850,7 +1002,9 @@ export {
   normalizeWebhookEvent,
   paymentsReady,
   planDelivery,
+  projectApplicant,
   projectSharedRecord,
+  reconcileMeetings,
   refundedPatch,
   render,
   renderSummary,
@@ -861,6 +1015,7 @@ export {
   resolvePipeline,
   resolveScheduling,
   roleFromClaim,
+  sendTemplated,
   sharedPersonInput,
   slotWindow,
   stageIndex,