@odla-ai/chapter 0.42.3 → 0.43.0

package/dist/index.js

@@ -442,8 +442,32 @@ var giftRedemptionAttemptsEntity = { attrs: {
   updatedAt: attr3("number")
 } };
 
+// src/schema-stripe.ts
+var attr4 = (type, flags = {}) => ({
+  type,
+  unique: flags.unique ?? false,
+  indexed: flags.indexed ?? false,
+  optional: flags.optional ?? false
+});
+var stripeEventReceiptsEntity = {
+  attrs: {
+    id: attr4("string", { unique: true, indexed: true }),
+    eventId: attr4("string", { unique: true, indexed: true }),
+    digest: attr4("string", { indexed: true }),
+    disposition: attr4("string", { indexed: true }),
+    kind: attr4("string", { indexed: true }),
+    matched: attr4("boolean", { indexed: true }),
+    appId: attr4("string", { indexed: true, optional: true }),
+    environment: attr4("string", { indexed: true, optional: true }),
+    dataEnvironment: attr4("string", { indexed: true, optional: true }),
+    runtime: attr4("string", { indexed: true, optional: true }),
+    chapterId: attr4("string", { indexed: true, optional: true }),
+    receivedAt: attr4("number", { indexed: true })
+  }
+};
+
 // src/schema.ts
-function attr4(type, flags = {}) {
+function attr5(type, flags = {}) {
   return {
     type,
     unique: flags.unique ?? false,
@@ -451,167 +475,167 @@ function attr4(type, flags = {}) {
     optional: flags.optional ?? false
   };
 }
-var id3 = () => attr4("string", { unique: true, indexed: true });
+var id3 = () => attr5("string", { unique: true, indexed: true });
 var admins = {
   attrs: {
     id: id3(),
-    email: attr4("string", { unique: true, indexed: true }),
-    name: attr4("string", { optional: true }),
-    note: attr4("string", { optional: true })
+    email: attr5("string", { unique: true, indexed: true }),
+    name: attr5("string", { optional: true }),
+    note: attr5("string", { optional: true })
   }
 };
 var superAdmins = {
   attrs: {
     id: id3(),
-    email: attr4("string", { unique: true, indexed: true }),
-    note: attr4("string", { optional: true }),
-    createdAt: attr4("number", { indexed: true })
+    email: attr5("string", { unique: true, indexed: true }),
+    note: attr5("string", { optional: true }),
+    createdAt: attr5("number", { indexed: true })
   }
 };
 var networkNotes = {
   attrs: {
     id: id3(),
-    recordKey: attr4("string", { indexed: true }),
-    targetId: attr4("string", { indexed: true }),
-    recordType: attr4("string", { indexed: true }),
-    recordId: attr4("string", { indexed: true }),
-    body: attr4("string"),
-    authorId: attr4("string", { indexed: true }),
-    authorEmail: attr4("string", { optional: true }),
-    createdAt: attr4("number", { indexed: true })
+    recordKey: attr5("string", { indexed: true }),
+    targetId: attr5("string", { indexed: true }),
+    recordType: attr5("string", { indexed: true }),
+    recordId: attr5("string", { indexed: true }),
+    body: attr5("string"),
+    authorId: attr5("string", { indexed: true }),
+    authorEmail: attr5("string", { optional: true }),
+    createdAt: attr5("number", { indexed: true })
   }
 };
 var signupControls = {
   attrs: {
     id: id3(),
-    sourceId: attr4("string", { indexed: true }),
-    targetId: attr4("string", { indexed: true }),
-    environment: attr4("string", { indexed: true }),
-    revision: attr4("number", { indexed: true }),
-    digest: attr4("string", { indexed: true }),
-    document: attr4("json"),
-    active: attr4("boolean", { indexed: true }),
-    receivedAt: attr4("number", { indexed: true })
+    sourceId: attr5("string", { indexed: true }),
+    targetId: attr5("string", { indexed: true }),
+    environment: attr5("string", { indexed: true }),
+    revision: attr5("number", { indexed: true }),
+    digest: attr5("string", { indexed: true }),
+    document: attr5("json"),
+    active: attr5("boolean", { indexed: true }),
+    receivedAt: attr5("number", { indexed: true })
   }
 };
 var memberContentControls = {
   attrs: {
     id: id3(),
-    sourceId: attr4("string", { indexed: true }),
-    targetId: attr4("string", { indexed: true }),
-    environment: attr4("string", { indexed: true }),
-    revision: attr4("number", { indexed: true }),
-    digest: attr4("string", { indexed: true }),
-    document: attr4("json"),
-    active: attr4("boolean", { indexed: true }),
-    receivedAt: attr4("number", { indexed: true })
+    sourceId: attr5("string", { indexed: true }),
+    targetId: attr5("string", { indexed: true }),
+    environment: attr5("string", { indexed: true }),
+    revision: attr5("number", { indexed: true }),
+    digest: attr5("string", { indexed: true }),
+    document: attr5("json"),
+    active: attr5("boolean", { indexed: true }),
+    receivedAt: attr5("number", { indexed: true })
   }
 };
 var memberContentLocal = {
   attrs: {
     id: id3(),
-    chapterId: attr4("string", { indexed: true }),
-    environment: attr4("string", { indexed: true }),
-    revision: attr4("number", { indexed: true }),
-    document: attr4("json"),
-    updatedAt: attr4("number", { indexed: true }),
-    updatedBy: attr4("string", { optional: true })
+    chapterId: attr5("string", { indexed: true }),
+    environment: attr5("string", { indexed: true }),
+    revision: attr5("number", { indexed: true }),
+    document: attr5("json"),
+    updatedAt: attr5("number", { indexed: true }),
+    updatedBy: attr5("string", { optional: true })
   }
 };
 var builderLibraryControls = {
   attrs: {
     id: id3(),
-    sourceId: attr4("string", { indexed: true }),
-    targetId: attr4("string", { indexed: true }),
-    environment: attr4("string", { indexed: true }),
-    revision: attr4("number", { indexed: true }),
-    digest: attr4("string", { indexed: true }),
-    document: attr4("json"),
-    active: attr4("boolean", { indexed: true }),
-    receivedAt: attr4("number", { indexed: true })
+    sourceId: attr5("string", { indexed: true }),
+    targetId: attr5("string", { indexed: true }),
+    environment: attr5("string", { indexed: true }),
+    revision: attr5("number", { indexed: true }),
+    digest: attr5("string", { indexed: true }),
+    document: attr5("json"),
+    active: attr5("boolean", { indexed: true }),
+    receivedAt: attr5("number", { indexed: true })
   }
 };
 var builderLibraryLocal = {
   attrs: {
     id: id3(),
-    appId: attr4("string", { indexed: true }),
-    environment: attr4("string", { indexed: true }),
-    revision: attr4("number", { indexed: true }),
-    document: attr4("json"),
-    updatedAt: attr4("number", { indexed: true }),
-    updatedBy: attr4("string", { optional: true })
+    appId: attr5("string", { indexed: true }),
+    environment: attr5("string", { indexed: true }),
+    revision: attr5("number", { indexed: true }),
+    document: attr5("json"),
+    updatedAt: attr5("number", { indexed: true }),
+    updatedBy: attr5("string", { optional: true })
   }
 };
 var groups = {
   attrs: {
     id: id3(),
-    name: attr4("string"),
-    standardPriceCents: attr4("number"),
-    foundingDiscountCents: attr4("number"),
-    stripePriceId: attr4("string", { optional: true }),
-    stripePublishableKey: attr4("string", { optional: true }),
-    notificationEmail: attr4("string"),
-    replyTo: attr4("string"),
-    debugEmail: attr4("string", { optional: true }),
-    calendarLink: attr4("string", { optional: true }),
-    disclaimerText: attr4("string"),
-    refundPolicyText: attr4("string"),
-    merchantDisclosureText: attr4("string", { optional: true }),
-    trustCopy: attr4("string"),
-    commitmentText: attr4("string", { optional: true }),
-    normsText: attr4("string", { optional: true }),
-    emailTemplates: attr4("json"),
-    schedulingJson: attr4("json", { optional: true }),
-    createdAt: attr4("number", { indexed: true })
+    name: attr5("string"),
+    standardPriceCents: attr5("number"),
+    foundingDiscountCents: attr5("number"),
+    stripePriceId: attr5("string", { optional: true }),
+    stripePublishableKey: attr5("string", { optional: true }),
+    notificationEmail: attr5("string"),
+    replyTo: attr5("string"),
+    debugEmail: attr5("string", { optional: true }),
+    calendarLink: attr5("string", { optional: true }),
+    disclaimerText: attr5("string"),
+    refundPolicyText: attr5("string"),
+    merchantDisclosureText: attr5("string", { optional: true }),
+    trustCopy: attr5("string"),
+    commitmentText: attr5("string", { optional: true }),
+    normsText: attr5("string", { optional: true }),
+    emailTemplates: attr5("json"),
+    schedulingJson: attr5("json", { optional: true }),
+    createdAt: attr5("number", { indexed: true })
   }
 };
 var tiers = {
   attrs: {
     id: id3(),
-    groupId: attr4("string", { indexed: true }),
-    name: attr4("string"),
-    priceCents: attr4("number"),
-    stripePriceId: attr4("string", { optional: true }),
-    blurb: attr4("string", { optional: true }),
-    sortOrder: attr4("number", { indexed: true }),
-    active: attr4("boolean", { indexed: true }),
-    createdAt: attr4("number", { indexed: true })
+    groupId: attr5("string", { indexed: true }),
+    name: attr5("string"),
+    priceCents: attr5("number"),
+    stripePriceId: attr5("string", { optional: true }),
+    blurb: attr5("string", { optional: true }),
+    sortOrder: attr5("number", { indexed: true }),
+    active: attr5("boolean", { indexed: true }),
+    createdAt: attr5("number", { indexed: true })
   }
 };
 var meetings = {
   attrs: {
     id: id3(),
-    applicationId: attr4("string", { indexed: true }),
-    groupId: attr4("string", { indexed: true }),
-    startAt: attr4("number", { indexed: true }),
-    endAt: attr4("number"),
-    timezone: attr4("string"),
-    status: attr4("string", { indexed: true }),
-    googleEventId: attr4("string", { indexed: true, optional: true }),
-    meetUrl: attr4("string", { optional: true }),
-    htmlLink: attr4("string", { optional: true }),
-    drift: attr4("string", { indexed: true, optional: true }),
-    driftGoogleStartAt: attr4("number", { optional: true }),
-    driftDetectedAt: attr4("number", { optional: true }),
-    adoptedFromGoogleAt: attr4("number", { optional: true }),
-    createdAt: attr4("number", { indexed: true })
+    applicationId: attr5("string", { indexed: true }),
+    groupId: attr5("string", { indexed: true }),
+    startAt: attr5("number", { indexed: true }),
+    endAt: attr5("number"),
+    timezone: attr5("string"),
+    status: attr5("string", { indexed: true }),
+    googleEventId: attr5("string", { indexed: true, optional: true }),
+    meetUrl: attr5("string", { optional: true }),
+    htmlLink: attr5("string", { optional: true }),
+    drift: attr5("string", { indexed: true, optional: true }),
+    driftGoogleStartAt: attr5("number", { optional: true }),
+    driftDetectedAt: attr5("number", { optional: true }),
+    adoptedFromGoogleAt: attr5("number", { optional: true }),
+    createdAt: attr5("number", { indexed: true })
   }
 };
 var emailLog = {
   attrs: {
     id: id3(),
-    groupId: attr4("string", { indexed: true }),
-    applicationId: attr4("string", { indexed: true, optional: true }),
-    to: attr4("string", { indexed: true }),
-    template: attr4("string", { indexed: true }),
-    subject: attr4("string"),
-    body: attr4("string", { optional: true }),
-    transport: attr4("string"),
-    messageId: attr4("string", { optional: true }),
-    redirected: attr4("boolean", { optional: true }),
-    dedupeKey: attr4("string", { indexed: true, optional: true }),
-    error: attr4("string", { optional: true }),
-    sentAt: attr4("number", { indexed: true })
+    groupId: attr5("string", { indexed: true }),
+    applicationId: attr5("string", { indexed: true, optional: true }),
+    to: attr5("string", { indexed: true }),
+    template: attr5("string", { indexed: true }),
+    subject: attr5("string"),
+    body: attr5("string", { optional: true }),
+    transport: attr5("string"),
+    messageId: attr5("string", { optional: true }),
+    redirected: attr5("boolean", { optional: true }),
+    dedupeKey: attr5("string", { indexed: true, optional: true }),
+    error: attr5("string", { optional: true }),
+    sentAt: attr5("number", { indexed: true })
   }
 };
 function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false, includeLeaderAdmissions = false) {
@@ -622,6 +646,7 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.tiers = tiers;
     entities.meetings = meetings;
     entities.emailLog = emailLog;
+    entities.stripeEventReceipts = stripeEventReceiptsEntity;
     entities.admissionGrants = admissionGrantsEntity;
     entities.admissionGrantRevisions = admissionGrantRevisionsEntity;
     entities.giftPurchaseIntents = giftPurchaseIntentsEntity;
@@ -2032,8 +2057,8 @@ function tierPayable(tier, group, hasSecretKey) {
 function byOrder(a, b) {
   return a.sortOrder - b.sortOrder || a.id.localeCompare(b.id);
 }
-function resolveTiers(group, rows2 = []) {
-  const stored = rows2.filter((tier) => tier.active);
+function resolveTiers(group, rows3 = []) {
+  const stored = rows3.filter((tier) => tier.active);
   if (stored.length) return [...stored].sort(byOrder);
   return [{
     id: "standard",
@@ -2821,6 +2846,7 @@ function findApplicationRef(obj) {
   const environment = candidates.map((metadata) => typeof metadata.odlaEnvironment === "string" ? metadata.odlaEnvironment : void 0).find(Boolean);
   const dataEnvironment = candidates.map((metadata) => typeof metadata.odlaDataEnvironment === "string" ? metadata.odlaDataEnvironment : void 0).find(Boolean);
   const runtime = candidates.map((metadata) => typeof metadata.odlaRuntime === "string" ? metadata.odlaRuntime : void 0).find(Boolean);
+  const chapterId = candidates.map((metadata) => typeof metadata.chapterId === "string" ? metadata.chapterId : void 0).find(Boolean);
   const customerId = typeof obj.customer === "string" ? obj.customer : void 0;
   return {
     ...applicationId ? { applicationId } : {},
@@ -2828,7 +2854,8 @@ function findApplicationRef(obj) {
     ...appId ? { appId } : {},
     ...environment ? { environment } : {},
     ...dataEnvironment ? { dataEnvironment } : {},
-    ...runtime ? { runtime } : {}
+    ...runtime ? { runtime } : {},
+    ...chapterId ? { chapterId } : {}
   };
 }
 function findGiftRef(obj) {
@@ -2844,13 +2871,15 @@ function findGiftRef(obj) {
   const environment = pickIdentity("odlaEnvironment");
   const dataEnvironment = pickIdentity("odlaDataEnvironment");
   const runtime = pickIdentity("odlaRuntime");
+  const chapterId = pickIdentity("chapterId");
   return {
     ...giftIntentId ? { giftIntentId } : {},
     providerObjectId: subscriptionId ?? String(obj.id ?? ""),
     ...appId ? { appId } : {},
     ...environment ? { environment } : {},
     ...dataEnvironment ? { dataEnvironment } : {},
-    ...runtime ? { runtime } : {}
+    ...runtime ? { runtime } : {},
+    ...chapterId ? { chapterId } : {}
   };
 }
 function normalizeWebhookEvent(event) {
@@ -4066,15 +4095,15 @@ function rowToTier(row, groupId) {
 }
 async function loadTiers(db, group) {
   const groupId = String(group.id ?? "");
-  let rows2;
+  let rows3;
   try {
-    rows2 = (await db.query({
+    rows3 = (await db.query({
       tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
     })).tiers;
   } catch {
-    rows2 = void 0;
+    rows3 = void 0;
   }
-  const list = Array.isArray(rows2) ? rows2.map((row) => rowToTier(row, groupId)) : [];
+  const list = Array.isArray(rows3) ? rows3.map((row) => rowToTier(row, groupId)) : [];
   return resolveTiers(group, list);
 }
 async function loadOfferableTiers(db, group, hasSecretKey) {
@@ -4774,6 +4803,448 @@ async function exportChapterPromotion(input) {
     ]
   };
 }
+
+// src/member-system-authority.ts
+var rows2 = (group) => group.fields.map((id4) => ({ ...group, id: id4 }));
+var MEMBER_SYSTEM_AUTHORITY_MATRIX = [
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "pii",
+    memberAccess: "edit",
+    fields: [
+      "person.legalName",
+      "person.preferredName",
+      "person.namePronunciation",
+      "person.pronouns",
+      "person.displayLegalName",
+      "person.primaryEmail",
+      "person.secondaryEmails",
+      "person.phone",
+      "person.linkedinUrl",
+      "person.photo",
+      "person.homeAddress",
+      "person.fulfillmentFit",
+      "person.fulfillmentSize"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "edit",
+    fields: [
+      "person.title",
+      "person.company",
+      "person.companyObservedAt",
+      "person.region",
+      "person.whyText",
+      "person.whyTokens",
+      "person.skillsOffered",
+      "person.openToRequests",
+      "person.directoryPhotoConsent"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "person.linkedinMemberId",
+      "person.identityClaims",
+      "person.aliases",
+      "person.mergeHistory",
+      "person.introducedByPersonId",
+      "person.introducedAt",
+      "person.firstTouch",
+      "person.globalSuppression",
+      "person.deceasedAt",
+      "person.archivedAt"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "sensitive",
+    memberAccess: "edit",
+    fields: ["person.accreditationSelfCertification", "person.accreditationCategory", "person.accreditationExpiresAt"]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_person",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "restricted",
+    memberAccess: "read",
+    fields: ["person.acknowledgements"]
+  }),
+  ...rows2({
+    scope: "provider",
+    writer: "clerk",
+    projections: ["clerk_identity", "bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: ["identity.clerkUserIds", "identity.clerkEmailVerification"]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm", "bnf_admin"],
+    sensitivity: "ordinary",
+    memberAccess: "none",
+    fields: [
+      "journey.chapterId",
+      "journey.stage",
+      "journey.stageEnteredAt",
+      "journey.stageHistory",
+      "journey.ending",
+      "journey.endingReason",
+      "journey.source",
+      "journey.entryChapterId",
+      "journey.route",
+      "journey.flags",
+      "journey.applicationStartedAt",
+      "journey.appliedAt",
+      "journey.paidAt",
+      "journey.callBookedAt",
+      "journey.metAt",
+      "journey.approvedAt",
+      "journey.onboardedAt",
+      "journey.firstLoginAt",
+      "journey.firstDealAt"
+    ]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm"],
+    sensitivity: "sensitive",
+    memberAccess: "none",
+    fields: [
+      "journey.relationshipOwnerId",
+      "journey.lastContactAt",
+      "journey.nextAction",
+      "journey.owes",
+      "journey.asks",
+      "journey.preparation",
+      "journey.notes"
+    ]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "chapter_crm", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "edit",
+    fields: ["journey.dealFlowConsent", "journey.directoryConsent", "journey.emailConsent", "journey.smsConsent"]
+  }),
+  ...rows2({
+    scope: "chapter",
+    writer: "chapter_journey",
+    projections: ["chapter_admin", "bnf_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: ["journey.memberNumber"]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_membership",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "membership.chapterId",
+      "membership.journeyId",
+      "membership.termStartsAt",
+      "membership.termEndsAt",
+      "membership.tier",
+      "membership.status",
+      "membership.joinedAt",
+      "membership.autoRenews",
+      "membership.renewalAt",
+      "membership.cancelsAt",
+      "membership.graceEndsAt",
+      "membership.foundingCohort",
+      "membership.offeringPolicyVersion",
+      "membership.discountPolicyVersion"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_commercial_projection",
+    projections: ["bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "membership.stripeCustomerId",
+      "membership.stripeSubscriptionId",
+      "membership.stripePriceId",
+      "membership.lastInvoiceId",
+      "membership.paymentOutcome",
+      "membership.refundOutcome"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_discount_policy",
+    projections: ["bnf_admin", "chapter_admin", "stripe_billing"],
+    sensitivity: "ordinary",
+    memberAccess: "none",
+    fields: [
+      "discountPolicy.chapterId",
+      "discountPolicy.version",
+      "discountPolicy.eligibleOfferingIds",
+      "discountPolicy.percentOff",
+      "discountPolicy.amountOff",
+      "discountPolicy.activatesOn",
+      "discountPolicy.invoiceCount",
+      "discountPolicy.expiresAt",
+      "discountPolicy.stackingOrder",
+      "discountPolicy.status"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_entitlement",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service", "stripe_billing"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "entitlement.membershipId",
+      "entitlement.kind",
+      "entitlement.priceCents",
+      "entitlement.currency",
+      "entitlement.payerPersonId",
+      "entitlement.purchasedAt",
+      "entitlement.termEndsAt",
+      "entitlement.renewsWithMembership",
+      "entitlement.status"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_seat",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "pii",
+    memberAccess: "read",
+    fields: [
+      "seat.membershipId",
+      "seat.entitlementId",
+      "seat.personId",
+      "seat.recipientName",
+      "seat.recipientEmail",
+      "seat.role",
+      "seat.status",
+      "seat.acceptanceExpiresAt",
+      "seat.acceptedAt",
+      "seat.activatedAt",
+      "seat.refundedAt"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_referral_ledger",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "ordinary",
+    memberAccess: "read",
+    fields: [
+      "referral.referrerPersonId",
+      "referral.referredPersonId",
+      "referral.qualifiedMembershipId",
+      "referral.creditCents",
+      "referral.status",
+      "referral.appliedInvoiceId",
+      "referral.carryForwardCents",
+      "referral.adjustmentOf"
+    ]
+  }),
+  ...rows2({
+    scope: "network",
+    writer: "network_investment_ledger",
+    projections: ["bnf_admin", "chapter_admin", "member_self_service"],
+    sensitivity: "restricted",
+    memberAccess: "read",
+    fields: [
+      "investment.personId",
+      "investment.chapterId",
+      "investment.season",
+      "investment.purpose",
+      "investment.targetCount",
+      "investment.status",
+      "investment.amountCents",
+      "investment.closedAt",
+      "investment.sourceReference"
+    ]
+  }),
+  ...rows2({
+    scope: "provider",
+    writer: "stripe",
+    projections: ["stripe_billing", "bnf_admin", "chapter_admin"],
+    sensitivity: "restricted",
+    memberAccess: "none",
+    fields: [
+      "commercial.charge",
+      "commercial.invoice",
+      "commercial.refund",
+      "commercial.providerSubscription",
+      "commercial.paymentMethod"
+    ]
+  })
+];
+var MEMBER_SELF_EDITABLE_FIELDS = new Set(
+  MEMBER_SYSTEM_AUTHORITY_MATRIX.filter((row) => row.memberAccess === "edit").map((row) => row.id)
+);
+var MEMBER_SELF_READABLE_FIELDS = new Set(
+  MEMBER_SYSTEM_AUTHORITY_MATRIX.filter((row) => row.memberAccess !== "none").map((row) => row.id)
+);
+function projectMemberSelf(record4) {
+  return Object.fromEntries(Object.entries(record4).filter(([field]) => MEMBER_SELF_READABLE_FIELDS.has(field)));
+}
+function classifyMemberSystemWrite(intent) {
+  if (intent.actor === "bnf") return "reject_bnf_surface";
+  const authority = MEMBER_SYSTEM_AUTHORITY_MATRIX.find((row) => row.id === intent.field);
+  if (!authority) return "reject_unknown_field";
+  if (authority.writer !== intent.actor) return "reject_wrong_writer";
+  if (intent.expectedRevision !== intent.actualRevision) return "reject_stale_revision";
+  return "apply";
+}
+function validateMemberSystemAuthority(matrix = MEMBER_SYSTEM_AUTHORITY_MATRIX) {
+  const errors = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const row of matrix) {
+    if (!row.id || !row.id.includes(".")) errors.push(`invalid field id "${row.id}"`);
+    if (ids.has(row.id)) errors.push(`duplicate field authority "${row.id}"`);
+    ids.add(row.id);
+    if (row.memberAccess !== "none" && !row.projections.includes("member_self_service")) {
+      errors.push(`${row.id} grants member access without a member_self_service projection`);
+    }
+    if (row.id.startsWith("person.") && (row.scope !== "network" || row.writer !== "network_person")) {
+      errors.push(`${row.id} must be network_person authority`);
+    }
+    if (row.id.startsWith("journey.") && (row.scope !== "chapter" || row.writer !== "chapter_journey")) {
+      errors.push(`${row.id} must be chapter_journey authority`);
+    }
+  }
+  return { ok: errors.length === 0, errors };
+}
+
+// src/member-system-contract.ts
+var MEMBER_SYSTEM_CONTRACT_VERSION = 1;
+var JOURNEY_STAGES = [
+  "identified",
+  "researched",
+  "outreach",
+  "in_conversation",
+  "invited_or_requested",
+  "application_started",
+  "applied",
+  "paid_awaiting_conversation",
+  "ready_to_book",
+  "booked",
+  "met",
+  "approved",
+  "onboarded",
+  "active",
+  "first_deal"
+];
+var JOURNEY_ENDINGS = ["passed", "declined", "withdrew", "lapsed"];
+var REQUIRED_NOTICE_KINDS = [
+  "payment_receipt",
+  "refund_confirmation",
+  "security_alert",
+  "legal_notice",
+  "membership_status",
+  "renewal_notice",
+  "cancellation_confirmation"
+];
+function memberSystemAvailability(input) {
+  if (!input.odlaReachable) {
+    return {
+      bnfAdministration: false,
+      chapterWorkflow: false,
+      memberSelfService: false,
+      newApplication: false,
+      newCheckout: false,
+      providerRenewalsMayContinue: true,
+      reason: "odla_unavailable"
+    };
+  }
+  return {
+    bnfAdministration: input.bnfFrontendReachable,
+    chapterWorkflow: true,
+    memberSelfService: true,
+    newApplication: true,
+    newCheckout: true,
+    providerRenewalsMayContinue: true,
+    ...!input.bnfFrontendReachable ? { reason: "bnf_frontend_unavailable" } : {}
+  };
+}
+function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
+  const keys = ["appId", "environment", "dataEnvironment", "runtime", "chapterId"];
+  const supplied = keys.filter((key) => identity[key] !== void 0);
+  if (supplied.some((key) => identity[key] !== target[key])) return "ignore_sibling";
+  if (supplied.length === keys.length) return "apply";
+  return hasProvenLegacyLocalLink ? "apply_legacy" : "quarantine_unmatched";
+}
+function planMemberSystemEventReplay(events) {
+  const seen = /* @__PURE__ */ new Map();
+  const plan = { accepted: [], replayed: [], collisions: [] };
+  for (const event of events) {
+    const digest = seen.get(event.id);
+    if (digest === void 0) {
+      seen.set(event.id, event.digest);
+      plan.accepted.push(event.id);
+    } else if (digest === event.digest) plan.replayed.push(event.id);
+    else plan.collisions.push(event.id);
+  }
+  return plan;
+}
+var MEMBER_SYSTEM_RECOVERY_OBJECTIVES = {
+  failClosedWithinMs: 0,
+  replayProjectionWithinMinutes: 15,
+  providerEventsRemainReplayable: true,
+  requireHumanReviewForCollision: true
+};
+function planMemberSystemMigration(rows3) {
+  const plan = { importIds: [], fixtureIds: [], rejectedIds: [] };
+  for (const row of rows3) {
+    if (row.source === "synthetic_fixture" && !row.isRealPerson) plan.fixtureIds.push(row.id);
+    else if (row.source === "external_reimport" && row.isRealPerson && row.provenance) plan.importIds.push(row.id);
+    else plan.rejectedIds.push(row.id);
+  }
+  return plan;
+}
+function memberSystemRollbackPlan() {
+  return {
+    stopNetworkWrites: true,
+    disableBnfMemberMutations: true,
+    keepChapterProductionReads: true,
+    keepStripeBillingAuthority: true,
+    deleteProviderObjects: false,
+    reverseProviderPayments: false,
+    reconciliationRequired: true
+  };
+}
+var SILVER_SALT_P0_FIXTURE = {
+  sourceInventory: { applications: 36, meetings: 7, emails: 49, realPeople: 0 },
+  application: { id: "fixture_application_001", personId: "fixture_person_001", migrates: false },
+  crm: { recordId: "fixture_crm_001", email: "fixture.member@example.invalid", migrates: false },
+  clerk: { userId: "user_fixture_001", verifiedEmail: "fixture.member@example.invalid", migrates: false },
+  stripe: {
+    customerId: "cus_fixture_001",
+    subscriptionId: "sub_fixture_001",
+    productId: "prod_fixture_001",
+    priceId: "price_fixture_001",
+    eventId: "evt_fixture_001",
+    migrates: false
+  },
+  unmatchedStripeEvent: { id: "evt_fixture_unmatched", disposition: "quarantine_unmatched" },
+  legacyStripeEvent: { id: "evt_fixture_legacy", requiresProvenLocalLink: true }
+};
 export {
   ADMISSION_GRANTS_PATH,
   ADMISSION_GRANTS_SCHEMA_VERSION,
@@ -4787,16 +5258,25 @@ export {
   DEFAULT_CHAPTER_COPY,
   DEFAULT_SHARE_FIELDS,
   GIFT_OFFER_CATALOG_VERSION,
+  JOURNEY_ENDINGS,
+  JOURNEY_STAGES,
   MAX_GIFT_OFFERS,
   MEMBERSHIP_PAGE_RENDERER,
   MEMBER_CONTENT_CONTROL_PATH,
   MEMBER_CONTENT_PATH,
   MEMBER_CONTENT_SCHEMA_VERSION,
+  MEMBER_SELF_EDITABLE_FIELDS,
+  MEMBER_SELF_READABLE_FIELDS,
+  MEMBER_SYSTEM_AUTHORITY_MATRIX,
+  MEMBER_SYSTEM_CONTRACT_VERSION,
+  MEMBER_SYSTEM_RECOVERY_OBJECTIVES,
+  REQUIRED_NOTICE_KINDS,
   SCHEDULING_DEFAULTS,
   SIGNUP_CONTROL_PATH,
   SIGNUP_CONTROL_SCHEMA_VERSION,
   SIGNUP_CONTROL_THEME_MARKER,
   SIGNUP_CONTROL_THEME_STYLE_ID,
+  SILVER_SALT_P0_FIXTURE,
   applicantProfile,
   applicationBookingUpdate,
   applicationFlowFields,
@@ -4823,6 +5303,8 @@ export {
   chapterDb,
   chapterFlowFieldContract,
   clampArray,
+  classifyMemberStripeEvent,
+  classifyMemberSystemWrite,
   clerkGetUser,
   clerkGetUserByEmail,
   clerkIntegration,
@@ -4876,6 +5358,8 @@ export {
   memberContentDigest,
   memberContentDocument,
   memberSession,
+  memberSystemAvailability,
+  memberSystemRollbackPlan,
   membershipPageDocument,
   membershipTierPresentationFromMarkdown,
   networkSourceTag,
@@ -4887,9 +5371,12 @@ export {
   paymentsReady,
   personInputFromApp,
   planDelivery,
+  planMemberSystemEventReplay,
+  planMemberSystemMigration,
   projectApplicant,
   projectBuilderLibraryDelivery,
   projectMemberContent,
+  projectMemberSelf,
   projectSharedRecord,
   promoteBuilderLibraryResource,
   publicGiftOffers,
@@ -4932,6 +5419,7 @@ export {
   validateBuilderLibraryDocument,
   validateGiftOfferCatalog,
   validateMemberContentDocument,
+  validateMemberSystemAuthority,
   validateMembershipPageDocument,
   validateScheduling,
   validateSignupControlDocument,