@odla-ai/chapter 0.42.3 → 0.42.4

package/dist/index.js

@@ -2032,8 +2032,8 @@ function tierPayable(tier, group, hasSecretKey) {
 function byOrder(a, b) {
   return a.sortOrder - b.sortOrder || a.id.localeCompare(b.id);
 }
-function resolveTiers(group, rows2 = []) {
-  const stored = rows2.filter((tier) => tier.active);
+function resolveTiers(group, rows3 = []) {
+  const stored = rows3.filter((tier) => tier.active);
   if (stored.length) return [...stored].sort(byOrder);
   return [{
     id: "standard",
@@ -4066,15 +4066,15 @@ function rowToTier(row, groupId) {
 }
 async function loadTiers(db, group) {
   const groupId = String(group.id ?? "");
-  let rows2;
+  let rows3;
   try {
-    rows2 = (await db.query({
+    rows3 = (await db.query({
       tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
     })).tiers;
   } catch {
-    rows2 = void 0;
+    rows3 = void 0;
   }
-  const list = Array.isArray(rows2) ? rows2.map((row) => rowToTier(row, groupId)) : [];
+  const list = Array.isArray(rows3) ? rows3.map((row) => rowToTier(row, groupId)) : [];
   return resolveTiers(group, list);
 }
 async function loadOfferableTiers(db, group, hasSecretKey) {
@@ -4774,6 +4774,448 @@ async function exportChapterPromotion(input) {
     ]
   };
 }
+
+// src/member-system-authority.ts
+var rows2 = (group) => group.fields.map((id4) => ({ ...group, id: id4 }));
+var MEMBER_SYSTEM_AUTHORITY_MATRIX = [
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "pii",
+    memberAccess: "edit",
+    fields: [
+      "person.legalName",
+      "person.preferredName",
+      "person.namePronunciation",
+      "person.pronouns",
+      "person.displayLegalName",
+      "person.primaryEmail",
+      "person.secondaryEmails",
+      "person.phone",
+      "person.linkedinUrl",
+      "person.photo",
+      "person.homeAddress",
+      "person.fulfillmentFit",
+      "person.fulfillmentSize"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "edit",
+    fields: [
+      "person.title",
+      "person.company",
+      "person.companyObservedAt",
+      "person.region",
+      "person.whyText",
+      "person.whyTokens",
+      "person.skillsOffered",
+      "person.openToRequests",
+      "person.directoryPhotoConsent"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "person.linkedinMemberId",
+      "person.identityClaims",
+      "person.aliases",
+      "person.mergeHistory",
+      "person.introducedByPersonId",
+      "person.introducedAt",
+      "person.firstTouch",
+      "person.globalSuppression",
+      "person.deceasedAt",
+      "person.archivedAt"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "sensitive",
+    memberAccess: "edit",
+    fields: ["person.accreditationSelfCertification", "person.accreditationCategory", "person.accreditationExpiresAt"]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "restricted",
+    memberAccess: "read",
+    fields: ["person.acknowledgements"]
+  }),
+  ...rows2({
+    scope: "provider",
+    writer: "clerk",
+    projections: ["clerk_identity", "bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: ["identity.clerkUserIds", "identity.clerkEmailVerification"]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm", "bnf_admin"],
+    sensitivity: "ordinary",
+    memberAccess: "none",
+    fields: [
+      "journey.chapterId",
+      "journey.stage",
+      "journey.stageEnteredAt",
+      "journey.stageHistory",
+      "journey.ending",
+      "journey.endingReason",
+      "journey.source",
+      "journey.entryChapterId",
+      "journey.route",
+      "journey.flags",
+      "journey.applicationStartedAt",
+      "journey.appliedAt",
+      "journey.paidAt",
+      "journey.callBookedAt",
+      "journey.metAt",
+      "journey.approvedAt",
+      "journey.onboardedAt",
+      "journey.firstLoginAt",
+      "journey.firstDealAt"
+    ]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm"],
+    sensitivity: "sensitive",
+    memberAccess: "none",
+    fields: [
+      "journey.relationshipOwnerId",
+      "journey.lastContactAt",
+      "journey.nextAction",
+      "journey.owes",
+      "journey.asks",
+      "journey.preparation",
+      "journey.notes"
+    ]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "edit",
+    fields: ["journey.dealFlowConsent", "journey.directoryConsent", "journey.emailConsent", "journey.smsConsent"]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "bnf_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: ["journey.memberNumber"]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_membership",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "membership.chapterId",
+      "membership.journeyId",
+      "membership.termStartsAt",
+      "membership.termEndsAt",
+      "membership.tier",
+      "membership.status",
+      "membership.joinedAt",
+      "membership.autoRenews",
+      "membership.renewalAt",
+      "membership.cancelsAt",
+      "membership.graceEndsAt",
+      "membership.foundingCohort",
+      "membership.offeringPolicyVersion",
+      "membership.discountPolicyVersion"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_commercial_projection",
+    projections: ["bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "membership.stripeCustomerId",
+      "membership.stripeSubscriptionId",
+      "membership.stripePriceId",
+      "membership.lastInvoiceId",
+      "membership.paymentOutcome",
+      "membership.refundOutcome"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_discount_policy",
+    projections: ["bnf_admin", "chapter_admin", "stripe_billing"],
+    sensitivity: "ordinary",
+    memberAccess: "none",
+    fields: [
+      "discountPolicy.chapterId",
+      "discountPolicy.version",
+      "discountPolicy.eligibleOfferingIds",
+      "discountPolicy.percentOff",
+      "discountPolicy.amountOff",
+      "discountPolicy.activatesOn",
+      "discountPolicy.invoiceCount",
+      "discountPolicy.expiresAt",
+      "discountPolicy.stackingOrder",
+      "discountPolicy.status"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_entitlement",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service", "stripe_billing"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "entitlement.membershipId",
+      "entitlement.kind",
+      "entitlement.priceCents",
+      "entitlement.currency",
+      "entitlement.payerPersonId",
+      "entitlement.purchasedAt",
+      "entitlement.termEndsAt",
+      "entitlement.renewsWithMembership",
+      "entitlement.status"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_seat",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "pii",
+    memberAccess: "read",
+    fields: [
+      "seat.membershipId",
+      "seat.entitlementId",
+      "seat.personId",
+      "seat.recipientName",
+      "seat.recipientEmail",
+      "seat.role",
+      "seat.status",
+      "seat.acceptanceExpiresAt",
+      "seat.acceptedAt",
+      "seat.activatedAt",
+      "seat.refundedAt"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_referral_ledger",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "referral.referrerPersonId",
+      "referral.referredPersonId",
+      "referral.qualifiedMembershipId",
+      "referral.creditCents",
+      "referral.status",
+      "referral.appliedInvoiceId",
+      "referral.carryForwardCents",
+      "referral.adjustmentOf"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_investment_ledger",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "restricted",
+    memberAccess: "read",
+    fields: [
+      "investment.personId",
+      "investment.chapterId",
+      "investment.season",
+      "investment.purpose",
+      "investment.targetCount",
+      "investment.status",
+      "investment.amountCents",
+      "investment.closedAt",
+      "investment.sourceReference"
+    ]
+  }),
+  ...rows2({
+    scope: "provider",
+    writer: "stripe",
+    projections: ["stripe_billing", "bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "commercial.charge",
+      "commercial.invoice",
+      "commercial.refund",
+      "commercial.providerSubscription",
+      "commercial.paymentMethod"
+    ]
+  })
+];
+var MEMBER_SELF_EDITABLE_FIELDS = new Set(
+  MEMBER_SYSTEM_AUTHORITY_MATRIX.filter((row) => row.memberAccess === "edit").map((row) => row.id)
+);
+var MEMBER_SELF_READABLE_FIELDS = new Set(
+  MEMBER_SYSTEM_AUTHORITY_MATRIX.filter((row) => row.memberAccess !== "none").map((row) => row.id)
+);
+function projectMemberSelf(record4) {
+  return Object.fromEntries(Object.entries(record4).filter(([field]) => MEMBER_SELF_READABLE_FIELDS.has(field)));
+}
+function classifyMemberSystemWrite(intent) {
+  if (intent.actor === "bnf") return "reject_bnf_surface";
+  const authority = MEMBER_SYSTEM_AUTHORITY_MATRIX.find((row) => row.id === intent.field);
+  if (!authority) return "reject_unknown_field";
+  if (authority.writer !== intent.actor) return "reject_wrong_writer";
+  if (intent.expectedRevision !== intent.actualRevision) return "reject_stale_revision";
+  return "apply";
+}
+function validateMemberSystemAuthority(matrix = MEMBER_SYSTEM_AUTHORITY_MATRIX) {
+  const errors = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const row of matrix) {
+    if (!row.id || !row.id.includes(".")) errors.push(`invalid field id "${row.id}"`);
+    if (ids.has(row.id)) errors.push(`duplicate field authority "${row.id}"`);
+    ids.add(row.id);
+    if (row.memberAccess !== "none" && !row.projections.includes("member_self_service")) {
+      errors.push(`${row.id} grants member access without a member_self_service projection`);
+    }
+    if (row.id.startsWith("person.") && (row.scope !== "network" || row.writer !== "network_person")) {
+      errors.push(`${row.id} must be network_person authority`);
+    }
+    if (row.id.startsWith("journey.") && (row.scope !== "chapter" || row.writer !== "chapter_journey")) {
+      errors.push(`${row.id} must be chapter_journey authority`);
+    }
+  }
+  return { ok: errors.length === 0, errors };
+}
+
+// src/member-system-contract.ts
+var MEMBER_SYSTEM_CONTRACT_VERSION = 1;
+var JOURNEY_STAGES = [
+  "identified",
+  "researched",
+  "outreach",
+  "in_conversation",
+  "invited_or_requested",
+  "application_started",
+  "applied",
+  "paid_awaiting_conversation",
+  "ready_to_book",
+  "booked",
+  "met",
+  "approved",
+  "onboarded",
+  "active",
+  "first_deal"
+];
+var JOURNEY_ENDINGS = ["passed", "declined", "withdrew", "lapsed"];
+var REQUIRED_NOTICE_KINDS = [
+  "payment_receipt",
+  "refund_confirmation",
+  "security_alert",
+  "legal_notice",
+  "membership_status",
+  "renewal_notice",
+  "cancellation_confirmation"
+];
+function memberSystemAvailability(input) {
+  if (!input.odlaReachable) {
+    return {
+      bnfAdministration: false,
+      chapterWorkflow: false,
+      memberSelfService: false,
+      newApplication: false,
+      newCheckout: false,
+      providerRenewalsMayContinue: true,
+      reason: "odla_unavailable"
+    };
+  }
+  return {
+    bnfAdministration: input.bnfFrontendReachable,
+    chapterWorkflow: true,
+    memberSelfService: true,
+    newApplication: true,
+    newCheckout: true,
+    providerRenewalsMayContinue: true,
+    ...!input.bnfFrontendReachable ? { reason: "bnf_frontend_unavailable" } : {}
+  };
+}
+function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
+  const keys = ["appId", "environment", "dataEnvironment", "runtime", "chapterId"];
+  const supplied = keys.filter((key) => identity[key] !== void 0);
+  if (supplied.some((key) => identity[key] !== target[key])) return "ignore_sibling";
+  if (supplied.length === keys.length) return "apply";
+  return hasProvenLegacyLocalLink ? "apply_legacy" : "quarantine_unmatched";
+}
+function planMemberSystemEventReplay(events) {
+  const seen = /* @__PURE__ */ new Map();
+  const plan = { accepted: [], replayed: [], collisions: [] };
+  for (const event of events) {
+    const digest = seen.get(event.id);
+    if (digest === void 0) {
+      seen.set(event.id, event.digest);
+      plan.accepted.push(event.id);
+    } else if (digest === event.digest) plan.replayed.push(event.id);
+    else plan.collisions.push(event.id);
+  }
+  return plan;
+}
+var MEMBER_SYSTEM_RECOVERY_OBJECTIVES = {
+  failClosedWithinMs: 0,
+  replayProjectionWithinMinutes: 15,
+  providerEventsRemainReplayable: true,
+  requireHumanReviewForCollision: true
+};
+function planMemberSystemMigration(rows3) {
+  const plan = { importIds: [], fixtureIds: [], rejectedIds: [] };
+  for (const row of rows3) {
+    if (row.source === "synthetic_fixture" && !row.isRealPerson) plan.fixtureIds.push(row.id);
+    else if (row.source === "external_reimport" && row.isRealPerson && row.provenance) plan.importIds.push(row.id);
+    else plan.rejectedIds.push(row.id);
+  }
+  return plan;
+}
+function memberSystemRollbackPlan() {
+  return {
+    stopNetworkWrites: true,
+    disableBnfMemberMutations: true,
+    keepChapterProductionReads: true,
+    keepStripeBillingAuthority: true,
+    deleteProviderObjects: false,
+    reverseProviderPayments: false,
+    reconciliationRequired: true
+  };
+}
+var SILVER_SALT_P0_FIXTURE = {
+  sourceInventory: { applications: 36, meetings: 7, emails: 49, realPeople: 0 },
+  application: { id: "fixture_application_001", personId: "fixture_person_001", migrates: false },
+  crm: { recordId: "fixture_crm_001", email: "fixture.member@example.invalid", migrates: false },
+  clerk: { userId: "user_fixture_001", verifiedEmail: "fixture.member@example.invalid", migrates: false },
+  stripe: {
+    customerId: "cus_fixture_001",
+    subscriptionId: "sub_fixture_001",
+    productId: "prod_fixture_001",
+    priceId: "price_fixture_001",
+    eventId: "evt_fixture_001",
+    migrates: false
+  },
+  unmatchedStripeEvent: { id: "evt_fixture_unmatched", disposition: "quarantine_unmatched" },
+  legacyStripeEvent: { id: "evt_fixture_legacy", requiresProvenLocalLink: true }
+};
 export {
   ADMISSION_GRANTS_PATH,
   ADMISSION_GRANTS_SCHEMA_VERSION,
@@ -4787,16 +5229,25 @@ export {
   DEFAULT_CHAPTER_COPY,
   DEFAULT_SHARE_FIELDS,
   GIFT_OFFER_CATALOG_VERSION,
+  JOURNEY_ENDINGS,
+  JOURNEY_STAGES,
   MAX_GIFT_OFFERS,
   MEMBERSHIP_PAGE_RENDERER,
   MEMBER_CONTENT_CONTROL_PATH,
   MEMBER_CONTENT_PATH,
   MEMBER_CONTENT_SCHEMA_VERSION,
+  MEMBER_SELF_EDITABLE_FIELDS,
+  MEMBER_SELF_READABLE_FIELDS,
+  MEMBER_SYSTEM_AUTHORITY_MATRIX,
+  MEMBER_SYSTEM_CONTRACT_VERSION,
+  MEMBER_SYSTEM_RECOVERY_OBJECTIVES,
+  REQUIRED_NOTICE_KINDS,
   SCHEDULING_DEFAULTS,
   SIGNUP_CONTROL_PATH,
   SIGNUP_CONTROL_SCHEMA_VERSION,
   SIGNUP_CONTROL_THEME_MARKER,
   SIGNUP_CONTROL_THEME_STYLE_ID,
+  SILVER_SALT_P0_FIXTURE,
   applicantProfile,
   applicationBookingUpdate,
   applicationFlowFields,
@@ -4823,6 +5274,8 @@ export {
   chapterDb,
   chapterFlowFieldContract,
   clampArray,
+  classifyMemberStripeEvent,
+  classifyMemberSystemWrite,
   clerkGetUser,
   clerkGetUserByEmail,
   clerkIntegration,
@@ -4876,6 +5329,8 @@ export {
   memberContentDigest,
   memberContentDocument,
   memberSession,
+  memberSystemAvailability,
+  memberSystemRollbackPlan,
   membershipPageDocument,
   membershipTierPresentationFromMarkdown,
   networkSourceTag,
@@ -4887,9 +5342,12 @@ export {
   paymentsReady,
   personInputFromApp,
   planDelivery,
+  planMemberSystemEventReplay,
+  planMemberSystemMigration,
   projectApplicant,
   projectBuilderLibraryDelivery,
   projectMemberContent,
+  projectMemberSelf,
   projectSharedRecord,
   promoteBuilderLibraryResource,
   publicGiftOffers,
@@ -4932,6 +5390,7 @@ export {
   validateBuilderLibraryDocument,
   validateGiftOfferCatalog,
   validateMemberContentDocument,
+  validateMemberSystemAuthority,
   validateMembershipPageDocument,
   validateScheduling,
   validateSignupControlDocument,