@odla-ai/chapter 0.42.0 → 0.42.2

package/dist/{copy-context-DuJkH4U9.d.ts → copy-context-BBPsYe24.d.ts}

@@ -186,6 +186,16 @@ interface ChapterNetworkTarget {
      * this follower. Omitted by default: a target never gains write permission
      * merely because its records are browsable. */
     sharedNotes?: readonly string[];
+    /** Per-record-type upper bound on profile fields this leader permits its
+     * admins to edit remotely. The follower must independently delegate the
+     * same field; readable fields never become writable implicitly. */
+    editableFields?: Record<string, readonly string[]>;
+    /** Record types on which this leader permits remote lifecycle transitions.
+     * The follower must independently opt in and remains pipeline authority. */
+    stageTransitions?: readonly string[];
+    /** Allow package-owned desired admission decisions for existing leader CRM
+     * people to be delivered to this target. Omitted means default deny. */
+    admissionGrants?: boolean;
 }
 /** One signed peer allowed to browse a privacy-bounded projection of this
  * site's CRM. The follower owns this allowlist; a leader target declaration
@@ -195,11 +205,21 @@ interface ChapterNetworkReader {
     id: string;
     /** Per-record-type field allowlist. Omitted types and fields never leave
      * this site. Record id, name, stage, and timestamps are bounded metadata. */
-    fields: Record<string, readonly string[]>;
+    fields?: Record<string, readonly string[]>;
     /** Record types on which this reader may append an explicitly shared note.
      * Omitted by default: browse permission never silently grants write access.
      * Shared notes land in the follower CRM activity feed. */
     sharedNotes?: readonly string[];
+    /** Exact local CRM fields this reader may edit remotely, by record type.
+     * Every field must also be readable so the peer can perform an optimistic
+     * edit against the value and revision it actually reviewed. */
+    editableFields?: Record<string, readonly string[]>;
+    /** Local CRM record types on which this reader may request a lifecycle
+     * transition. Chapter still enforces the local pipeline and gates. */
+    stageTransitions?: readonly string[];
+    /** Accept signed desired admission decisions from this reader. Independent
+     * of record browsing; an admission-only reader may omit `fields`. */
+    admissionGrants?: boolean;
 }
 /** Leader/follower network configuration. A follower needs no code config to
  * receive pushed records. It must explicitly declare `readers` before any peer
@@ -242,12 +262,18 @@ interface ResolvedNetworkTarget {
     secretName: string;
     fields?: Record<string, readonly string[]>;
     sharedNotes: readonly string[];
+    editableFields: Record<string, readonly string[]>;
+    stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** A validated follower-owned record projection for one signed reader. */
 interface ResolvedNetworkReader {
     id: string;
     fields: Record<string, readonly string[]>;
     sharedNotes: readonly string[];
+    editableFields: Record<string, readonly string[]>;
+    stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** Fully-resolved leader network configuration. */
 interface ResolvedNetwork {

package/dist/index.cjs

@@ -486,6 +486,50 @@ var admissionGrantRevisionsEntity = {
     receivedAt: attr2("number", { indexed: true })
   }
 };
+var leaderAdmissionAssignmentsEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    personId: attr2("string", { indexed: true }),
+    grantId: attr2("string", { indexed: true }),
+    decision: attr2("string", { indexed: true }),
+    note: attr2("string", { optional: true }),
+    expiresAt: attr2("number", { optional: true, indexed: true }),
+    active: attr2("boolean", { indexed: true }),
+    lastMutationId: attr2("string", { indexed: true }),
+    lastRequestDigest: attr2("string"),
+    createdAt: attr2("number", { indexed: true }),
+    createdBy: attr2("string", { indexed: true }),
+    updatedAt: attr2("number", { indexed: true }),
+    updatedBy: attr2("string", { indexed: true })
+  }
+};
+var leaderAdmissionDeliveriesEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    environment: attr2("string", { indexed: true }),
+    revision: attr2("number", { indexed: true }),
+    digest: attr2("string", { indexed: true }),
+    envelope: attr2("json"),
+    status: attr2("string", { indexed: true }),
+    attempts: attr2("number", { indexed: true }),
+    lastAttemptAt: attr2("number", { optional: true, indexed: true }),
+    lastError: attr2("string", { optional: true }),
+    acknowledgedAt: attr2("number", { optional: true, indexed: true }),
+    updatedAt: attr2("number", { indexed: true })
+  }
+};
+var leaderAdmissionMutationsEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    personId: attr2("string", { indexed: true }),
+    requestDigest: attr2("string", { indexed: true }),
+    revision: attr2("number", { indexed: true }),
+    createdAt: attr2("number", { indexed: true })
+  }
+};
 
 // src/schema-gifts.ts
 var attr3 = (type, flags = {}) => ({
@@ -757,7 +801,7 @@ var emailLog = {
     sentAt: attr4("number", { indexed: true })
   }
 };
-function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false) {
+function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false, includeLeaderAdmissions = false) {
   const entities = {};
   if (mode === "chapter") {
     entities.applications = applicationsFor(application);
@@ -785,6 +829,11 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.builderLibraryControls = builderLibraryControls;
     entities.builderLibraryLocal = builderLibraryLocal;
   }
+  if (includeLeaderAdmissions) {
+    entities.leaderAdmissionAssignments = leaderAdmissionAssignmentsEntity;
+    entities.leaderAdmissionDeliveries = leaderAdmissionDeliveriesEntity;
+    entities.leaderAdmissionMutations = leaderAdmissionMutationsEntity;
+  }
   const schema = { entities, links: {} };
   const rules = {};
   for (const ns of Object.keys(entities)) {
@@ -1553,6 +1602,12 @@ function formationFields(crm, formation) {
   return resolveFormationFlowFields(crm, formation);
 }
 
+// src/network-contract.ts
+var DEFAULT_SHARE_FIELDS = {
+  person: ["name", "email", "firstName", "lastName", "phone", "linkedin"],
+  company: ["name", "domain", "industry", "location", "linkedin", "notes"]
+};
+
 // src/config-network.ts
 var SLUG = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var FIELD = /^[a-z][a-zA-Z0-9_]*$/;
@@ -1564,6 +1619,34 @@ function validateSharedNotes(opts) {
     throw new Error(`${opts.path}: must contain unique CRM types allowed by fields`);
   }
 }
+function validateEditableFields(opts) {
+  for (const [type, names] of Object.entries(opts.values)) {
+    const readable = opts.readable?.[type];
+    const def = opts.crm.config.types[type];
+    const duplicate = names.some((name, index) => names.indexOf(name) !== index);
+    const unknown = names.some((name) => !FIELD.test(name) || !def?.fields[name]);
+    const hidden = opts.readable ? !readable || names.some((name) => !readable.includes(name)) : false;
+    if (!FIELD.test(type) || names.length === 0 || duplicate || !def || unknown || hidden) {
+      throw new Error(
+        `${opts.path}.${type}: must contain unique, readable fields declared on CRM type "${type}"`
+      );
+    }
+  }
+}
+function validateStageTransitions(opts) {
+  const duplicate = opts.values.some((type, index) => opts.values.indexOf(type) !== index);
+  const invalid = opts.values.some((type) => !FIELD.test(type) || !opts.crm.config.types[type]?.pipeline || (opts.readable ? !opts.readable[type] : false));
+  if (duplicate || invalid) {
+    throw new Error(`${opts.path}: must contain unique, readable CRM types with pipelines`);
+  }
+}
+function validateAdmissionCapability(path, enabled, crm) {
+  if (!enabled) return;
+  const person = crm.config.types.person;
+  if (!person?.emailField || person.fields[person.emailField]?.type !== "email") {
+    throw new Error(`${path}: requires a CRM person type with an emailField`);
+  }
+}
 function resolveNetwork(config, crm) {
   const seen = /* @__PURE__ */ new Set();
   const targets = [];
@@ -1622,6 +1705,26 @@ function resolveNetwork(config, crm) {
       crm,
       fields
     });
+    const readableFields = fields ?? DEFAULT_SHARE_FIELDS;
+    const editableFields = target.editableFields ?? {};
+    validateEditableFields({
+      path: `defineChapter.network.targets.${target.id}.editableFields`,
+      values: editableFields,
+      crm,
+      readable: readableFields
+    });
+    const stageTransitions = target.stageTransitions ?? [];
+    validateStageTransitions({
+      path: `defineChapter.network.targets.${target.id}.stageTransitions`,
+      values: stageTransitions,
+      crm,
+      readable: readableFields
+    });
+    validateAdmissionCapability(
+      `defineChapter.network.targets.${target.id}.admissionGrants`,
+      target.admissionGrants,
+      crm
+    );
     targets.push({
       id: target.id,
       name: target.name?.trim() || target.id,
@@ -1629,7 +1732,10 @@ function resolveNetwork(config, crm) {
       ...binding ? { binding } : {},
       secretName,
       ...fields ? { fields } : {},
-      sharedNotes
+      sharedNotes,
+      editableFields,
+      stageTransitions,
+      ...target.admissionGrants === true ? { admissionGrants: true } : {}
     });
   }
   const readerIds = /* @__PURE__ */ new Set();
@@ -1642,9 +1748,12 @@ function resolveNetwork(config, crm) {
       throw new Error(`defineChapter.network.readers: duplicate reader "${reader.id}"`);
     }
     readerIds.add(reader.id);
-    const entries = Object.entries(reader.fields ?? {});
-    if (entries.length === 0) {
-      throw new Error(`defineChapter.network.readers.${reader.id}.fields: at least one CRM type is required`);
+    const readerFields = reader.fields ?? {};
+    const entries = Object.entries(readerFields);
+    if (entries.length === 0 && !reader.admissionGrants) {
+      throw new Error(
+        `defineChapter.network.readers.${reader.id}.fields: at least one CRM type is required unless this is an admission-only reader`
+      );
     }
     for (const [type, names] of entries) {
       if (!FIELD.test(type) || names.length === 0 || names.some((name) => !FIELD.test(name))) {
@@ -1674,9 +1783,35 @@ function resolveNetwork(config, crm) {
       path: `defineChapter.network.readers.${reader.id}.sharedNotes`,
       values: sharedNotes,
       crm,
-      fields: reader.fields
+      fields: readerFields
+    });
+    const editableFields = reader.editableFields ?? {};
+    validateEditableFields({
+      path: `defineChapter.network.readers.${reader.id}.editableFields`,
+      values: editableFields,
+      crm,
+      readable: readerFields
+    });
+    const stageTransitions = reader.stageTransitions ?? [];
+    validateStageTransitions({
+      path: `defineChapter.network.readers.${reader.id}.stageTransitions`,
+      values: stageTransitions,
+      crm,
+      readable: readerFields
+    });
+    validateAdmissionCapability(
+      `defineChapter.network.readers.${reader.id}.admissionGrants`,
+      reader.admissionGrants,
+      crm
+    );
+    readers.push({
+      id: reader.id,
+      fields: readerFields,
+      sharedNotes,
+      editableFields,
+      stageTransitions,
+      ...reader.admissionGrants === true ? { admissionGrants: true } : {}
     });
-    readers.push({ id: reader.id, fields: reader.fields, sharedNotes });
   }
   return { targets, readers };
 }
@@ -1807,7 +1942,8 @@ function defineChapter(config) {
     application,
     Boolean(signupControl),
     Boolean(memberContent),
-    Boolean(builderLibrary)
+    Boolean(builderLibrary),
+    network.targets.some((target) => target.admissionGrants)
   );
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";
@@ -3254,14 +3390,6 @@ function findGiftOffer(catalog, offerId, now) {
 
 // src/network.ts
 var import_crm5 = require("@odla-ai/crm");
-
-// src/network-contract.ts
-var DEFAULT_SHARE_FIELDS = {
-  person: ["name", "email", "firstName", "lastName", "phone", "linkedin"],
-  company: ["name", "domain", "industry", "location", "linkedin", "notes"]
-};
-
-// src/network.ts
 function sharedPersonInput(person) {
   const email = person.email.toLowerCase();
   const fullName = [person.firstName, person.lastName].filter(Boolean).join(" ").trim();