@odla-ai/chapter 0.42.1 → 0.42.2

package/dist/index.d.cts

@@ -282,6 +282,9 @@ interface ChapterNetworkTarget {
     /** Record types on which this leader permits remote lifecycle transitions.
      * The follower must independently opt in and remains pipeline authority. */
     stageTransitions?: readonly string[];
+    /** Allow package-owned desired admission decisions for existing leader CRM
+     * people to be delivered to this target. Omitted means default deny. */
+    admissionGrants?: boolean;
 }
 /** One signed peer allowed to browse a privacy-bounded projection of this
  * site's CRM. The follower owns this allowlist; a leader target declaration
@@ -291,7 +294,7 @@ interface ChapterNetworkReader {
     id: string;
     /** Per-record-type field allowlist. Omitted types and fields never leave
      * this site. Record id, name, stage, and timestamps are bounded metadata. */
-    fields: Record<string, readonly string[]>;
+    fields?: Record<string, readonly string[]>;
     /** Record types on which this reader may append an explicitly shared note.
      * Omitted by default: browse permission never silently grants write access.
      * Shared notes land in the follower CRM activity feed. */
@@ -303,6 +306,9 @@ interface ChapterNetworkReader {
     /** Local CRM record types on which this reader may request a lifecycle
      * transition. Chapter still enforces the local pipeline and gates. */
     stageTransitions?: readonly string[];
+    /** Accept signed desired admission decisions from this reader. Independent
+     * of record browsing; an admission-only reader may omit `fields`. */
+    admissionGrants?: boolean;
 }
 /** Leader/follower network configuration. A follower needs no code config to
  * receive pushed records. It must explicitly declare `readers` before any peer
@@ -347,6 +353,7 @@ interface ResolvedNetworkTarget {
     sharedNotes: readonly string[];
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** A validated follower-owned record projection for one signed reader. */
 interface ResolvedNetworkReader {
@@ -355,6 +362,7 @@ interface ResolvedNetworkReader {
     sharedNotes: readonly string[];
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** Fully-resolved leader network configuration. */
 interface ResolvedNetwork {
@@ -956,7 +964,7 @@ declare function createChapterIntegration(chapter: Chapter, options?: ChapterInt
  * read-only super-admin tier (default on for the `"claim"` ladder). A `"claim"`
  * chapter therefore emits the reference namespace set — `applications`,
  * `groups`, `meetings`, `emailLog`, `superAdmins` — with no `admins` table. */
-declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth, includeNetworkNotes?: boolean, application?: ResolvedApplication, includeSignupControl?: boolean, includeMemberContent?: boolean, includeBuilderLibrary?: boolean): {
+declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth, includeNetworkNotes?: boolean, application?: ResolvedApplication, includeSignupControl?: boolean, includeMemberContent?: boolean, includeBuilderLibrary?: boolean, includeLeaderAdmissions?: boolean): {
     schema: DbSchema;
     rules: DbRules;
 };

package/dist/index.d.ts

@@ -282,6 +282,9 @@ interface ChapterNetworkTarget {
     /** Record types on which this leader permits remote lifecycle transitions.
      * The follower must independently opt in and remains pipeline authority. */
     stageTransitions?: readonly string[];
+    /** Allow package-owned desired admission decisions for existing leader CRM
+     * people to be delivered to this target. Omitted means default deny. */
+    admissionGrants?: boolean;
 }
 /** One signed peer allowed to browse a privacy-bounded projection of this
  * site's CRM. The follower owns this allowlist; a leader target declaration
@@ -291,7 +294,7 @@ interface ChapterNetworkReader {
     id: string;
     /** Per-record-type field allowlist. Omitted types and fields never leave
      * this site. Record id, name, stage, and timestamps are bounded metadata. */
-    fields: Record<string, readonly string[]>;
+    fields?: Record<string, readonly string[]>;
     /** Record types on which this reader may append an explicitly shared note.
      * Omitted by default: browse permission never silently grants write access.
      * Shared notes land in the follower CRM activity feed. */
@@ -303,6 +306,9 @@ interface ChapterNetworkReader {
     /** Local CRM record types on which this reader may request a lifecycle
      * transition. Chapter still enforces the local pipeline and gates. */
     stageTransitions?: readonly string[];
+    /** Accept signed desired admission decisions from this reader. Independent
+     * of record browsing; an admission-only reader may omit `fields`. */
+    admissionGrants?: boolean;
 }
 /** Leader/follower network configuration. A follower needs no code config to
  * receive pushed records. It must explicitly declare `readers` before any peer
@@ -347,6 +353,7 @@ interface ResolvedNetworkTarget {
     sharedNotes: readonly string[];
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** A validated follower-owned record projection for one signed reader. */
 interface ResolvedNetworkReader {
@@ -355,6 +362,7 @@ interface ResolvedNetworkReader {
     sharedNotes: readonly string[];
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
+    admissionGrants?: boolean;
 }
 /** Fully-resolved leader network configuration. */
 interface ResolvedNetwork {
@@ -956,7 +964,7 @@ declare function createChapterIntegration(chapter: Chapter, options?: ChapterInt
  * read-only super-admin tier (default on for the `"claim"` ladder). A `"claim"`
  * chapter therefore emits the reference namespace set — `applications`,
  * `groups`, `meetings`, `emailLog`, `superAdmins` — with no `admins` table. */
-declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth, includeNetworkNotes?: boolean, application?: ResolvedApplication, includeSignupControl?: boolean, includeMemberContent?: boolean, includeBuilderLibrary?: boolean): {
+declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth, includeNetworkNotes?: boolean, application?: ResolvedApplication, includeSignupControl?: boolean, includeMemberContent?: boolean, includeBuilderLibrary?: boolean, includeLeaderAdmissions?: boolean): {
     schema: DbSchema;
     rules: DbRules;
 };

package/dist/index.js

@@ -299,6 +299,50 @@ var admissionGrantRevisionsEntity = {
     receivedAt: attr2("number", { indexed: true })
   }
 };
+var leaderAdmissionAssignmentsEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    personId: attr2("string", { indexed: true }),
+    grantId: attr2("string", { indexed: true }),
+    decision: attr2("string", { indexed: true }),
+    note: attr2("string", { optional: true }),
+    expiresAt: attr2("number", { optional: true, indexed: true }),
+    active: attr2("boolean", { indexed: true }),
+    lastMutationId: attr2("string", { indexed: true }),
+    lastRequestDigest: attr2("string"),
+    createdAt: attr2("number", { indexed: true }),
+    createdBy: attr2("string", { indexed: true }),
+    updatedAt: attr2("number", { indexed: true }),
+    updatedBy: attr2("string", { indexed: true })
+  }
+};
+var leaderAdmissionDeliveriesEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    environment: attr2("string", { indexed: true }),
+    revision: attr2("number", { indexed: true }),
+    digest: attr2("string", { indexed: true }),
+    envelope: attr2("json"),
+    status: attr2("string", { indexed: true }),
+    attempts: attr2("number", { indexed: true }),
+    lastAttemptAt: attr2("number", { optional: true, indexed: true }),
+    lastError: attr2("string", { optional: true }),
+    acknowledgedAt: attr2("number", { optional: true, indexed: true }),
+    updatedAt: attr2("number", { indexed: true })
+  }
+};
+var leaderAdmissionMutationsEntity = {
+  attrs: {
+    id: id(),
+    targetId: attr2("string", { indexed: true }),
+    personId: attr2("string", { indexed: true }),
+    requestDigest: attr2("string", { indexed: true }),
+    revision: attr2("number", { indexed: true }),
+    createdAt: attr2("number", { indexed: true })
+  }
+};
 
 // src/schema-gifts.ts
 var attr3 = (type, flags = {}) => ({
@@ -570,7 +614,7 @@ var emailLog = {
     sentAt: attr4("number", { indexed: true })
   }
 };
-function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false) {
+function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false, includeLeaderAdmissions = false) {
   const entities = {};
   if (mode === "chapter") {
     entities.applications = applicationsFor(application);
@@ -598,6 +642,11 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.builderLibraryControls = builderLibraryControls;
     entities.builderLibraryLocal = builderLibraryLocal;
   }
+  if (includeLeaderAdmissions) {
+    entities.leaderAdmissionAssignments = leaderAdmissionAssignmentsEntity;
+    entities.leaderAdmissionDeliveries = leaderAdmissionDeliveriesEntity;
+    entities.leaderAdmissionMutations = leaderAdmissionMutationsEntity;
+  }
   const schema = { entities, links: {} };
   const rules = {};
   for (const ns of Object.keys(entities)) {
@@ -1404,6 +1453,13 @@ function validateStageTransitions(opts) {
     throw new Error(`${opts.path}: must contain unique, readable CRM types with pipelines`);
   }
 }
+function validateAdmissionCapability(path, enabled, crm) {
+  if (!enabled) return;
+  const person = crm.config.types.person;
+  if (!person?.emailField || person.fields[person.emailField]?.type !== "email") {
+    throw new Error(`${path}: requires a CRM person type with an emailField`);
+  }
+}
 function resolveNetwork(config, crm) {
   const seen = /* @__PURE__ */ new Set();
   const targets = [];
@@ -1477,6 +1533,11 @@ function resolveNetwork(config, crm) {
       crm,
       readable: readableFields
     });
+    validateAdmissionCapability(
+      `defineChapter.network.targets.${target.id}.admissionGrants`,
+      target.admissionGrants,
+      crm
+    );
     targets.push({
       id: target.id,
       name: target.name?.trim() || target.id,
@@ -1486,7 +1547,8 @@ function resolveNetwork(config, crm) {
       ...fields ? { fields } : {},
       sharedNotes,
       editableFields,
-      stageTransitions
+      stageTransitions,
+      ...target.admissionGrants === true ? { admissionGrants: true } : {}
     });
   }
   const readerIds = /* @__PURE__ */ new Set();
@@ -1499,9 +1561,12 @@ function resolveNetwork(config, crm) {
       throw new Error(`defineChapter.network.readers: duplicate reader "${reader.id}"`);
     }
     readerIds.add(reader.id);
-    const entries = Object.entries(reader.fields ?? {});
-    if (entries.length === 0) {
-      throw new Error(`defineChapter.network.readers.${reader.id}.fields: at least one CRM type is required`);
+    const readerFields = reader.fields ?? {};
+    const entries = Object.entries(readerFields);
+    if (entries.length === 0 && !reader.admissionGrants) {
+      throw new Error(
+        `defineChapter.network.readers.${reader.id}.fields: at least one CRM type is required unless this is an admission-only reader`
+      );
     }
     for (const [type, names] of entries) {
       if (!FIELD.test(type) || names.length === 0 || names.some((name) => !FIELD.test(name))) {
@@ -1531,23 +1596,35 @@ function resolveNetwork(config, crm) {
       path: `defineChapter.network.readers.${reader.id}.sharedNotes`,
       values: sharedNotes,
       crm,
-      fields: reader.fields
+      fields: readerFields
     });
     const editableFields = reader.editableFields ?? {};
     validateEditableFields({
       path: `defineChapter.network.readers.${reader.id}.editableFields`,
       values: editableFields,
       crm,
-      readable: reader.fields
+      readable: readerFields
     });
     const stageTransitions = reader.stageTransitions ?? [];
     validateStageTransitions({
       path: `defineChapter.network.readers.${reader.id}.stageTransitions`,
       values: stageTransitions,
       crm,
-      readable: reader.fields
+      readable: readerFields
+    });
+    validateAdmissionCapability(
+      `defineChapter.network.readers.${reader.id}.admissionGrants`,
+      reader.admissionGrants,
+      crm
+    );
+    readers.push({
+      id: reader.id,
+      fields: readerFields,
+      sharedNotes,
+      editableFields,
+      stageTransitions,
+      ...reader.admissionGrants === true ? { admissionGrants: true } : {}
     });
-    readers.push({ id: reader.id, fields: reader.fields, sharedNotes, editableFields, stageTransitions });
   }
   return { targets, readers };
 }
@@ -1678,7 +1755,8 @@ function defineChapter(config) {
     application,
     Boolean(signupControl),
     Boolean(memberContent),
-    Boolean(builderLibrary)
+    Boolean(builderLibrary),
+    network.targets.some((target) => target.admissionGrants)
   );
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";