@odla-ai/chapter 0.43.2 → 0.45.0

package/dist/index.cjs

@@ -122,6 +122,7 @@ __export(index_exports, {
   joinConfig: () => joinConfig,
   joinConfigTiers: () => joinConfigTiers,
   leaderCrmConfig: () => leaderCrmConfig,
+  listStripeObjects: () => listStripeObjects,
   loadLatestAdmissionRevision: () => loadLatestAdmissionRevision,
   loadOfferableTiers: () => loadOfferableTiers,
   loadTiers: () => loadTiers,
@@ -136,9 +137,11 @@ __export(index_exports, {
   memberSystemRollbackPlan: () => memberSystemRollbackPlan,
   membershipPageDocument: () => membershipPageDocument,
   membershipTierPresentationFromMarkdown: () => membershipTierPresentationFromMarkdown,
+  networkCommercialSourceKey: () => networkCommercialSourceKey,
   networkSourceTag: () => networkSourceTag,
   normalizeAdmissionEmail: () => normalizeAdmissionEmail,
   normalizeChapterEmail: () => normalizeChapterEmail,
+  normalizeNetworkCommercialStripeEvent: () => normalizeNetworkCommercialStripeEvent,
   normalizeSharedRecord: () => normalizeSharedRecord,
   normalizeWebhookEvent: () => normalizeWebhookEvent,
   offerableTiers: () => offerableTiers,
@@ -151,10 +154,12 @@ __export(index_exports, {
   projectBuilderLibraryDelivery: () => projectBuilderLibraryDelivery,
   projectMemberContent: () => projectMemberContent,
   projectMemberSelf: () => projectMemberSelf,
+  projectNetworkCommercialEvents: () => projectNetworkCommercialEvents,
   projectSharedRecord: () => projectSharedRecord,
   promoteBuilderLibraryResource: () => promoteBuilderLibraryResource,
   publicGiftOffers: () => publicGiftOffers,
   reconcileMeetings: () => reconcileMeetings,
+  reconcileStripeSnapshot: () => reconcileStripeSnapshot,
   refundedPatch: () => refundedPatch,
   render: () => render,
   renderSignupControlThemeHead: () => renderSignupControlThemeHead,
@@ -168,6 +173,8 @@ __export(index_exports, {
   resolveJoinContinuation: () => resolveJoinContinuation,
   resolveLeaderFormation: () => resolveLeaderFormation,
   resolveMemberContent: () => resolveMemberContent,
+  resolveNetworkCommercialReadModel: () => resolveNetworkCommercialReadModel,
+  resolveNetworkPersonRegistry: () => resolveNetworkPersonRegistry,
   resolvePipeline: () => resolvePipeline,
   resolveScheduling: () => resolveScheduling,
   resolveSignupControl: () => resolveSignupControl,
@@ -240,7 +247,7 @@ function resolveApplication(a) {
       throw new Error(`defineChapter.application.${name}: field "${unsafe}" must match ${SCHEMA_FIELD.source}`);
     }
   }
-  const duplicate = [...required, ...optional].find((field, index, fields) => fields.indexOf(field) !== index);
+  const duplicate = [...required, ...optional].find((field, index2, fields) => fields.indexOf(field) !== index2);
   if (duplicate) {
     throw new Error(`defineChapter.application: duplicate field "${duplicate}" across required/optional lists`);
   }
@@ -319,8 +326,8 @@ async function submitApplication(db, chapter, fields, opts) {
   if (app.requireDisclaimerAck && !acked) {
     return { ok: false, error: "disclaimerAck is required" };
   }
-  const id4 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
-  const row = { id: id4, status: chapter.pipeline.initial, createdAt: opts.now };
+  const id6 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
+  const row = { id: id6, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
     if (fieldStates[f]?.visible === false) continue;
     if (typeof fields[f] === "string") row[f] = fields[f].trim();
@@ -344,19 +351,19 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (acked) row.disclaimerAckAt = opts.now;
   const ops = [
-    { t: "update", ns: "applications", id: id4, attrs: row }
+    { t: "update", ns: "applications", id: id6, attrs: row }
   ];
   if (opts.admissionGrant?.decision === "waive_interview") {
     ops.push({ t: "update", ns: "admissionGrants", id: opts.admissionGrant.id, attrs: {
       consumedAt: opts.now,
-      consumedApplicationId: id4
+      consumedApplicationId: id6
     } });
   }
   const { duplicate } = await db.transact(
     ops,
     opts.submissionId ? { mutationId: `join:${opts.submissionId}` } : void 0
   );
-  return { ok: true, id: id4, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
+  return { ok: true, id: id6, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
 }
 function joinConfig(group, paymentsReady2, tiers2 = [], conditions = {}) {
   return {
@@ -670,6 +677,146 @@ var stripeEventReceiptsEntity = {
   }
 };
 
+// src/schema-network-person.ts
+var string = (flags = {}) => ({
+  type: "string",
+  unique: flags.unique ?? false,
+  indexed: flags.indexed ?? false,
+  optional: flags.optional ?? false
+});
+var number = (flags = {}) => ({
+  type: "number",
+  unique: false,
+  indexed: flags.indexed ?? false,
+  optional: flags.optional ?? false
+});
+var json = (flags = {}) => ({
+  type: "json",
+  unique: false,
+  indexed: false,
+  optional: flags.optional ?? false
+});
+var id3 = () => string({ unique: true, indexed: true });
+var networkPersonsEntity = { attrs: {
+  id: id3(),
+  displayName: string({ indexed: true }),
+  state: string({ indexed: true }),
+  mergedIntoId: string({ indexed: true, optional: true }),
+  contactPolicy: json(),
+  revision: number({ indexed: true }),
+  createdAt: number({ indexed: true }),
+  updatedAt: number({ indexed: true })
+} };
+var networkIdentityClaimsEntity = { attrs: {
+  id: id3(),
+  personId: string({ indexed: true }),
+  kind: string({ indexed: true }),
+  value: string(),
+  hint: string({ optional: true }),
+  verifiedAt: number({ indexed: true }),
+  createdAt: number({ indexed: true })
+} };
+var networkPersonAliasesEntity = { attrs: {
+  id: id3(),
+  sourceSystem: string({ indexed: true }),
+  sourceRecordId: string({ indexed: true }),
+  sourceKey: string({ unique: true, indexed: true }),
+  displayName: string({ indexed: true }),
+  provenance: string(),
+  consent: json(),
+  status: string({ indexed: true }),
+  personId: string({ indexed: true, optional: true }),
+  candidatePersonIds: json({ optional: true }),
+  identityClaims: json(),
+  chapterLinks: json(),
+  revision: number({ indexed: true }),
+  createdAt: number({ indexed: true }),
+  updatedAt: number({ indexed: true })
+} };
+var networkChapterPersonLinksEntity = { attrs: {
+  id: id3(),
+  personId: string({ indexed: true }),
+  chapterId: string({ indexed: true }),
+  chapterPersonId: string({ indexed: true }),
+  state: string({ indexed: true }),
+  createdAt: number({ indexed: true })
+} };
+var networkPersonEventsEntity = { attrs: {
+  id: id3(),
+  kind: string({ indexed: true }),
+  personId: string({ indexed: true, optional: true }),
+  aliasId: string({ indexed: true, optional: true }),
+  actorId: string({ indexed: true }),
+  mutationId: string({ unique: true, indexed: true }),
+  detail: json(),
+  createdAt: number({ indexed: true })
+} };
+var networkPersonEntities = {
+  networkPersons: networkPersonsEntity,
+  networkIdentityClaims: networkIdentityClaimsEntity,
+  networkPersonAliases: networkPersonAliasesEntity,
+  networkChapterPersonLinks: networkChapterPersonLinksEntity,
+  networkPersonEvents: networkPersonEventsEntity
+};
+
+// src/schema-network-commercial.ts
+var string2 = (flags = {}) => ({
+  type: "string",
+  unique: flags.unique ?? false,
+  indexed: flags.indexed ?? false,
+  optional: flags.optional ?? false
+});
+var number2 = (flags = {}) => ({
+  type: "number",
+  unique: false,
+  indexed: flags.indexed ?? false,
+  optional: flags.optional ?? false
+});
+var boolean = (flags = {}) => ({
+  type: "boolean",
+  unique: false,
+  indexed: flags.indexed ?? false,
+  optional: false
+});
+var json2 = () => ({ type: "json", unique: false, indexed: false, optional: false });
+var id4 = () => string2({ unique: true, indexed: true });
+var events = { attrs: {
+  id: id4(),
+  eventId: string2({ unique: true, indexed: true }),
+  digest: string2({ indexed: true }),
+  eventType: string2({ indexed: true }),
+  eventCreated: number2({ indexed: true }),
+  livemode: boolean({ indexed: true }),
+  fact: json2(),
+  receivedAt: number2({ indexed: true })
+} };
+var projection = () => ({ attrs: {
+  id: id4(),
+  providerId: string2({ indexed: true }),
+  sourceKey: string2({ indexed: true }),
+  status: string2({ indexed: true }),
+  snapshot: json2(),
+  eventCreated: number2({ indexed: true }),
+  updatedAt: number2({ indexed: true })
+} });
+var exceptions = { attrs: {
+  id: id4(),
+  eventId: string2({ indexed: true }),
+  kind: string2({ indexed: true }),
+  sourceKey: string2({ indexed: true, optional: true }),
+  status: string2({ indexed: true }),
+  detail: json2(),
+  updatedAt: number2({ indexed: true })
+} };
+var networkCommercialEntities = {
+  networkCommercialEvents: events,
+  networkCommercialCustomers: projection(),
+  networkCommercialSubscriptions: projection(),
+  networkCommercialInvoices: projection(),
+  networkCommercialRefunds: projection(),
+  networkCommercialExceptions: exceptions
+};
+
 // src/schema.ts
 function attr5(type, flags = {}) {
   return {
@@ -679,10 +826,10 @@ function attr5(type, flags = {}) {
     optional: flags.optional ?? false
   };
 }
-var id3 = () => attr5("string", { unique: true, indexed: true });
+var id5 = () => attr5("string", { unique: true, indexed: true });
 var admins = {
   attrs: {
-    id: id3(),
+    id: id5(),
     email: attr5("string", { unique: true, indexed: true }),
     name: attr5("string", { optional: true }),
     note: attr5("string", { optional: true })
@@ -690,7 +837,7 @@ var admins = {
 };
 var superAdmins = {
   attrs: {
-    id: id3(),
+    id: id5(),
     email: attr5("string", { unique: true, indexed: true }),
     note: attr5("string", { optional: true }),
     createdAt: attr5("number", { indexed: true })
@@ -698,7 +845,7 @@ var superAdmins = {
 };
 var networkNotes = {
   attrs: {
-    id: id3(),
+    id: id5(),
     recordKey: attr5("string", { indexed: true }),
     targetId: attr5("string", { indexed: true }),
     recordType: attr5("string", { indexed: true }),
@@ -711,7 +858,7 @@ var networkNotes = {
 };
 var signupControls = {
   attrs: {
-    id: id3(),
+    id: id5(),
     sourceId: attr5("string", { indexed: true }),
     targetId: attr5("string", { indexed: true }),
     environment: attr5("string", { indexed: true }),
@@ -724,7 +871,7 @@ var signupControls = {
 };
 var memberContentControls = {
   attrs: {
-    id: id3(),
+    id: id5(),
     sourceId: attr5("string", { indexed: true }),
     targetId: attr5("string", { indexed: true }),
     environment: attr5("string", { indexed: true }),
@@ -737,7 +884,7 @@ var memberContentControls = {
 };
 var memberContentLocal = {
   attrs: {
-    id: id3(),
+    id: id5(),
     chapterId: attr5("string", { indexed: true }),
     environment: attr5("string", { indexed: true }),
     revision: attr5("number", { indexed: true }),
@@ -748,7 +895,7 @@ var memberContentLocal = {
 };
 var builderLibraryControls = {
   attrs: {
-    id: id3(),
+    id: id5(),
     sourceId: attr5("string", { indexed: true }),
     targetId: attr5("string", { indexed: true }),
     environment: attr5("string", { indexed: true }),
@@ -761,7 +908,7 @@ var builderLibraryControls = {
 };
 var builderLibraryLocal = {
   attrs: {
-    id: id3(),
+    id: id5(),
     appId: attr5("string", { indexed: true }),
     environment: attr5("string", { indexed: true }),
     revision: attr5("number", { indexed: true }),
@@ -772,7 +919,7 @@ var builderLibraryLocal = {
 };
 var groups = {
   attrs: {
-    id: id3(),
+    id: id5(),
     name: attr5("string"),
     standardPriceCents: attr5("number"),
     foundingDiscountCents: attr5("number"),
@@ -795,7 +942,7 @@ var groups = {
 };
 var tiers = {
   attrs: {
-    id: id3(),
+    id: id5(),
     groupId: attr5("string", { indexed: true }),
     name: attr5("string"),
     priceCents: attr5("number"),
@@ -808,7 +955,7 @@ var tiers = {
 };
 var meetings = {
   attrs: {
-    id: id3(),
+    id: id5(),
     applicationId: attr5("string", { indexed: true }),
     groupId: attr5("string", { indexed: true }),
     startAt: attr5("number", { indexed: true }),
@@ -827,7 +974,7 @@ var meetings = {
 };
 var emailLog = {
   attrs: {
-    id: id3(),
+    id: id5(),
     groupId: attr5("string", { indexed: true }),
     applicationId: attr5("string", { indexed: true, optional: true }),
     to: attr5("string", { indexed: true }),
@@ -842,7 +989,7 @@ var emailLog = {
     sentAt: attr5("number", { indexed: true })
   }
 };
-function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false, includeLeaderAdmissions = false) {
+function chapterDb(mode, auth, includeNetworkNotes = false, application = resolveApplication(void 0), includeSignupControl = false, includeMemberContent = false, includeBuilderLibrary = false, includeLeaderAdmissions = false, includeNetworkPersonRegistry = false, includeNetworkCommercialReadModel = false) {
   const entities = {};
   if (mode === "chapter") {
     entities.applications = applicationsFor(application);
@@ -876,6 +1023,10 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.leaderAdmissionDeliveries = leaderAdmissionDeliveriesEntity;
     entities.leaderAdmissionMutations = leaderAdmissionMutationsEntity;
   }
+  if (includeNetworkPersonRegistry) {
+    Object.assign(entities, networkPersonEntities);
+  }
+  if (includeNetworkCommercialReadModel) Object.assign(entities, networkCommercialEntities);
   const schema = { entities, links: {} };
   const rules = {};
   for (const ns of Object.keys(entities)) {
@@ -1047,8 +1198,8 @@ function resolveAuth(mode, auth) {
   return { source, claim, ladder, adminRole, superAdmins: superAdmins2 };
 }
 function roleFromClaim(payload, auth) {
-  const raw = payload[auth.claim];
-  return typeof raw === "string" && auth.ladder.includes(raw) ? raw : auth.ladder[0];
+  const raw2 = payload[auth.claim];
+  return typeof raw2 === "string" && auth.ladder.includes(raw2) ? raw2 : auth.ladder[0];
 }
 function isAdminRole(role, auth) {
   return role === auth.adminRole;
@@ -1527,9 +1678,9 @@ var APPLICATION_LABELS = {
   phone: "Phone",
   state: "State"
 };
-function humanize(id4) {
-  const text4 = id4.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text4 ? `${text4[0].toUpperCase()}${text4.slice(1)}` : id4;
+function humanize(id6) {
+  const text5 = id6.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text5 ? `${text5[0].toUpperCase()}${text5.slice(1)}` : id6;
 }
 function applicationDefs(chapter) {
   try {
@@ -1538,23 +1689,23 @@ function applicationDefs(chapter) {
     return {};
   }
 }
-function applicationType(id4, def) {
+function applicationType(id6, def) {
   if (def && ["string", "email", "url", "enum"].includes(def.type)) return def.type;
-  return id4 === "email" ? "email" : id4 === "linkedin" ? "url" : "string";
+  return id6 === "email" ? "email" : id6 === "linkedin" ? "url" : "string";
 }
 function applicationFlowFields(chapter, application = chapter.application) {
   const defs = applicationDefs(chapter);
-  return [...application.required, ...application.optional].map((id4, order) => {
-    const def = defs[id4];
-    const conditions = application.conditions[id4];
-    const type = applicationType(id4, def);
+  return [...application.required, ...application.optional].map((id6, order2) => {
+    const def = defs[id6];
+    const conditions = application.conditions[id6];
+    const type = applicationType(id6, def);
     return {
-      id: id4,
-      label: def?.label ?? APPLICATION_LABELS[id4] ?? humanize(id4),
+      id: id6,
+      label: def?.label ?? APPLICATION_LABELS[id6] ?? humanize(id6),
       type,
-      required: application.required.includes(id4),
-      order,
-      maxLength: application.maxLen[id4] ?? application.defaultMaxLen,
+      required: application.required.includes(id6),
+      order: order2,
+      maxLength: application.maxLen[id6] ?? application.defaultMaxLen,
       ...type === "enum" && def?.options ? { options: [...def.options] } : {},
       ...conditions ? { conditions: { ...conditions } } : {},
       ...type === "email" ? { emailIdentity: "literal" } : {}
@@ -1564,17 +1715,17 @@ function applicationFlowFields(chapter, application = chapter.application) {
 function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id4, order) => {
-    const field = def.fields[id4];
+  return [...formation.required, ...formation.optional].map((id6, order2) => {
+    const field = def.fields[id6];
     return {
-      id: id4,
-      label: field.label ?? humanize(id4),
+      id: id6,
+      label: field.label ?? humanize(id6),
       type: field.type,
-      required: formation.required.includes(id4),
-      order,
-      maxLength: formation.maxLen[id4] ?? formation.defaultMaxLen,
+      required: formation.required.includes(id6),
+      order: order2,
+      maxLength: formation.maxLen[id6] ?? formation.defaultMaxLen,
       ...field.options ? { options: [...field.options] } : {},
-      ...id4 === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
+      ...id6 === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
     };
   });
 }
@@ -1614,7 +1765,7 @@ function resolveLeaderFormation(input, crm) {
       throw new Error(`defineChapter.formation.${name}: must be an array of field-name strings`);
     }
   }
-  const duplicates = [...required, ...optional].filter((field, index, fields) => fields.indexOf(field) !== index);
+  const duplicates = [...required, ...optional].filter((field, index2, fields) => fields.indexOf(field) !== index2);
   if (duplicates.length) throw new Error(`defineChapter.formation: duplicate public field "${duplicates[0]}"`);
   const unknown = [...required, ...optional].filter((field) => !def.fields[field]);
   if (unknown.length) throw new Error(`defineChapter.formation: field "${unknown[0]}" is not declared on CRM type "${type}"`);
@@ -1665,7 +1816,7 @@ var SLUG = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var FIELD = /^[a-z][a-zA-Z0-9_]*$/;
 var BINDING = /^[A-Z][A-Z0-9_]{0,127}$/;
 function validateSharedNotes(opts) {
-  const duplicate = opts.values.some((type, index) => opts.values.indexOf(type) !== index);
+  const duplicate = opts.values.some((type, index2) => opts.values.indexOf(type) !== index2);
   const invalid = opts.values.some((type) => !FIELD.test(type) || !opts.crm.config.types[type] || (opts.fields ? !opts.fields[type] : false));
   if (duplicate || invalid) {
     throw new Error(`${opts.path}: must contain unique CRM types allowed by fields`);
@@ -1675,7 +1826,7 @@ function validateEditableFields(opts) {
   for (const [type, names] of Object.entries(opts.values)) {
     const readable = opts.readable?.[type];
     const def = opts.crm.config.types[type];
-    const duplicate = names.some((name, index) => names.indexOf(name) !== index);
+    const duplicate = names.some((name, index2) => names.indexOf(name) !== index2);
     const unknown = names.some((name) => !FIELD.test(name) || !def?.fields[name]);
     const hidden = opts.readable ? !readable || names.some((name) => !readable.includes(name)) : false;
     if (!FIELD.test(type) || names.length === 0 || duplicate || !def || unknown || hidden) {
@@ -1686,7 +1837,7 @@ function validateEditableFields(opts) {
   }
 }
 function validateStageTransitions(opts) {
-  const duplicate = opts.values.some((type, index) => opts.values.indexOf(type) !== index);
+  const duplicate = opts.values.some((type, index2) => opts.values.indexOf(type) !== index2);
   const invalid = opts.values.some((type) => !FIELD.test(type) || !opts.crm.config.types[type]?.pipeline || (opts.readable ? !opts.readable[type] : false));
   if (duplicate || invalid) {
     throw new Error(`${opts.path}: must contain unique, readable CRM types with pipelines`);
@@ -1868,12 +2019,58 @@ function resolveNetwork(config, crm) {
   return { targets, readers };
 }
 
+// src/config-network-person.ts
+var SLUG2 = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+function resolveNetworkPersonRegistry(mode, input, targetIds) {
+  if (!input) return null;
+  if (mode !== "hub") throw new Error("defineChapter.networkPersonRegistry: only hub mode may own network Person authority");
+  if (input.mode !== "shadow") throw new Error('defineChapter.networkPersonRegistry.mode: must be "shadow"');
+  const chapterIds = input.chapterIds ? [...input.chapterIds] : [...targetIds];
+  if (chapterIds.length === 0) throw new Error("defineChapter.networkPersonRegistry.chapterIds: at least one chapter is required");
+  if (new Set(chapterIds).size !== chapterIds.length || chapterIds.some((id6) => !SLUG2.test(id6))) {
+    throw new Error("defineChapter.networkPersonRegistry.chapterIds: expected distinct lowercase slugs");
+  }
+  const unknown = chapterIds.filter((id6) => !targetIds.includes(id6));
+  if (unknown.length) {
+    throw new Error(`defineChapter.networkPersonRegistry.chapterIds: ${unknown.map((id6) => `"${id6}"`).join(", ")} are not configured network targets`);
+  }
+  return { mode: "shadow", chapterIds };
+}
+
+// src/config-network-commercial.ts
+var SLUG3 = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var TOKEN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+function networkCommercialSourceKey(source) {
+  return [source.stripeMode, source.appId, source.environment, source.dataEnvironment, source.runtime, source.chapterId].join(":");
+}
+function resolveNetworkCommercialReadModel(mode, input, targetIds) {
+  if (!input) return null;
+  if (mode !== "hub") throw new Error("defineChapter.networkCommercialReadModel: only hub mode may own the network commercial projection");
+  if (input.mode !== "shadow") throw new Error('defineChapter.networkCommercialReadModel.mode: must be "shadow"');
+  if (!Array.isArray(input.sources) || input.sources.length === 0) {
+    throw new Error("defineChapter.networkCommercialReadModel.sources: at least one exact source is required");
+  }
+  const sources = input.sources.map((source) => ({ ...source }));
+  for (const source of sources) {
+    if (!SLUG3.test(source.appId) || !SLUG3.test(source.chapterId) || !TOKEN.test(source.environment) || !TOKEN.test(source.dataEnvironment) || !TOKEN.test(source.runtime) || source.stripeMode !== "test" && source.stripeMode !== "live") {
+      throw new Error("defineChapter.networkCommercialReadModel.sources: every source requires valid app, chapter, environment, data-environment, runtime, and Stripe mode values");
+    }
+    if (!targetIds.includes(source.chapterId)) {
+      throw new Error(`defineChapter.networkCommercialReadModel.sources: chapter "${source.chapterId}" is not a configured network target`);
+    }
+  }
+  if (new Set(sources.map(networkCommercialSourceKey)).size !== sources.length) {
+    throw new Error("defineChapter.networkCommercialReadModel.sources: exact source partitions must be distinct");
+  }
+  return { mode: "shadow", sources };
+}
+
 // src/config-signup-control.ts
-var SLUG2 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var SECRET_NAME = /^[a-z][a-z0-9_]{1,127}$/;
 function resolveSignupControl(input) {
   if (!input) return null;
-  if (!SLUG2.test(input.sourceId)) {
+  if (!SLUG4.test(input.sourceId)) {
     throw new Error("defineChapter.signupControl.sourceId: must be a lowercase app slug");
   }
   if (input.stripeMode !== "test" && input.stripeMode !== "live") {
@@ -1887,12 +2084,12 @@ function resolveSignupControl(input) {
 }
 
 // src/config-member-content.ts
-var SLUG3 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG5 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var SECRET_NAME2 = /^[a-z][a-z0-9_]{1,127}$/;
 function resolveMemberContent(input) {
   if (!input) return null;
   const parent = input.parent;
-  if (parent && !SLUG3.test(parent.sourceId)) {
+  if (parent && !SLUG5.test(parent.sourceId)) {
     throw new Error("defineChapter.memberContent.parent.sourceId: must be a lowercase app slug");
   }
   const secretName = parent?.secretName?.trim() || "member_content_control_secret";
@@ -1907,22 +2104,22 @@ function resolveMemberContent(input) {
 }
 
 // src/config-builder-library.ts
-var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG6 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 function resolveBuilderLibrary(mode, input, network = { targets: [], readers: [] }) {
   if (!input) return null;
   if (input.sources !== void 0 && !Array.isArray(input.sources)) {
     throw new Error("defineChapter.builderLibrary.sources: must be an array");
   }
   const seen = /* @__PURE__ */ new Set();
-  const sources = (input.sources ?? []).map((source, index) => {
-    if (!source || typeof source !== "object" || !SLUG4.test(source.sourceId)) {
-      throw new Error(`defineChapter.builderLibrary.sources[${index}].sourceId: must be a lowercase app slug`);
+  const sources = (input.sources ?? []).map((source, index2) => {
+    if (!source || typeof source !== "object" || !SLUG6.test(source.sourceId)) {
+      throw new Error(`defineChapter.builderLibrary.sources[${index2}].sourceId: must be a lowercase app slug`);
     }
     if (source.sourceId === "built-not-found" && mode === "hub") {
-      throw new Error(`defineChapter.builderLibrary.sources[${index}]: a hub accepts Chapter sources, not itself`);
+      throw new Error(`defineChapter.builderLibrary.sources[${index2}]: a hub accepts Chapter sources, not itself`);
     }
     if (mode === "chapter" && source.sourceId !== "built-not-found") {
-      throw new Error(`defineChapter.builderLibrary.sources[${index}]: Chapters may accept only the built-not-found source`);
+      throw new Error(`defineChapter.builderLibrary.sources[${index2}]: Chapters may accept only the built-not-found source`);
     }
     if (seen.has(source.sourceId)) {
       throw new Error(`defineChapter.builderLibrary.sources: duplicate source "${source.sourceId}"`);
@@ -1930,14 +2127,14 @@ function resolveBuilderLibrary(mode, input, network = { targets: [], readers: []
     seen.add(source.sourceId);
     if ("secretName" in source) {
       throw new Error(
-        `defineChapter.builderLibrary.sources[${index}].secretName: remove this field; Builder Library reuses the Chapter network edge`
+        `defineChapter.builderLibrary.sources[${index2}].secretName: remove this field; Builder Library reuses the Chapter network edge`
       );
     }
     const networkPeer = mode === "hub" ? network.targets.some((target) => target.id === source.sourceId) : network.readers.some((reader) => reader.id === source.sourceId);
     if (!networkPeer) {
       const side = mode === "hub" ? "targets" : "readers";
       throw new Error(
-        `defineChapter.builderLibrary.sources[${index}]: "${source.sourceId}" must already be configured in network.${side}`
+        `defineChapter.builderLibrary.sources[${index2}]: "${source.sourceId}" must already be configured in network.${side}`
       );
     }
     return { sourceId: source.sourceId };
@@ -1946,15 +2143,15 @@ function resolveBuilderLibrary(mode, input, network = { targets: [], readers: []
 }
 
 // src/config.ts
-var SLUG5 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG7 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 function isResolvedCrm(x) {
   return !!x && typeof x === "object" && "prepare" in x && typeof x.prepare === "function";
 }
 function defineChapter(config) {
   if (!config || typeof config !== "object") throw new Error("defineChapter: a config object is required");
-  const { id: id4, name } = config;
-  if (typeof id4 !== "string" || !SLUG5.test(id4)) {
-    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id4)}`);
+  const { id: id6, name } = config;
+  if (typeof id6 !== "string" || !SLUG7.test(id6)) {
+    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id6)}`);
   }
   if (typeof name !== "string" || name.trim() === "") throw new Error("defineChapter.name: a non-empty name is required");
   const mode = config.mode ?? "chapter";
@@ -1977,6 +2174,16 @@ function defineChapter(config) {
   const brand = { ...config.brand, wordmark: config.brand?.wordmark ?? name };
   const copy = resolveChapterCopy(config.copy);
   const network = resolveNetwork(config, crm);
+  const networkPersonRegistry = resolveNetworkPersonRegistry(
+    mode,
+    config.networkPersonRegistry,
+    network.targets.map((target) => target.id)
+  );
+  const networkCommercialReadModel = resolveNetworkCommercialReadModel(
+    mode,
+    config.networkCommercialReadModel,
+    network.targets.map((target) => target.id)
+  );
   const signupControl = resolveSignupControl(config.signupControl);
   const memberContent = resolveMemberContent(config.memberContent);
   const builderLibrary = resolveBuilderLibrary(mode, config.builderLibrary, network);
@@ -1995,7 +2202,9 @@ function defineChapter(config) {
     Boolean(signupControl),
     Boolean(memberContent),
     Boolean(builderLibrary),
-    network.targets.some((target) => target.admissionGrants)
+    network.targets.some((target) => target.admissionGrants),
+    Boolean(networkPersonRegistry),
+    Boolean(networkCommercialReadModel)
   );
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";
@@ -2045,7 +2254,7 @@ function defineChapter(config) {
   };
   const chapter = {
     config,
-    id: id4,
+    id: id6,
     name,
     mode,
     brand,
@@ -2054,6 +2263,8 @@ function defineChapter(config) {
     signupControl,
     memberContent,
     builderLibrary,
+    networkPersonRegistry,
+    networkCommercialReadModel,
     formation,
     crm,
     auth,
@@ -2071,6 +2282,304 @@ function defineChapter(config) {
   return chapter;
 }
 
+// src/network-commercial.ts
+var raw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var text = (value) => typeof value === "string" && value.length > 0 && value.length <= 255 ? value : void 0;
+var integer = (value) => typeof value === "number" && Number.isSafeInteger(value) ? value : void 0;
+var bool = (value) => typeof value === "boolean" ? value : void 0;
+var providerId = (value, prefix) => {
+  const valueText = text(value);
+  return valueText && (!prefix || valueText.startsWith(prefix)) ? valueText : void 0;
+};
+function metadataCandidates(object) {
+  const parent = raw(object.parent);
+  const subscriptionDetails = raw(object.subscription_details);
+  const parentSubscription = raw(parent.subscription_details);
+  return [raw(object.metadata), raw(subscriptionDetails.metadata), raw(parentSubscription.metadata)];
+}
+function metadataValue(candidates, key) {
+  return candidates.map((candidate) => text(candidate[key])).find(Boolean);
+}
+function refId(value, prefix) {
+  if (typeof value === "string") return providerId(value, prefix);
+  return providerId(raw(value).id, prefix);
+}
+function subscriptionRef(object) {
+  return refId(object.subscription, "sub_") ?? refId(raw(object.subscription_details).subscription, "sub_") ?? refId(raw(raw(object.parent).subscription_details).subscription, "sub_");
+}
+function firstPrice(object) {
+  const data = raw(object.items).data;
+  const item = Array.isArray(data) ? raw(data[0]) : {};
+  const priceId = refId(item.price, "price_");
+  const quantity = integer(item.quantity);
+  return { ...priceId ? { priceId } : {}, ...quantity !== void 0 ? { quantity } : {} };
+}
+function normalizeNetworkCommercialStripeEvent(input, digest) {
+  const event = raw(input);
+  const eventId = providerId(event.id, "evt_") ?? "";
+  const eventType = text(event.type) ?? "";
+  const object = raw(raw(event.data).object);
+  const objectId = providerId(object.id) ?? "";
+  const candidates = metadataCandidates(object);
+  const identity = {};
+  const identityKeys = {
+    appId: "odlaAppId",
+    chapterId: "chapterId",
+    environment: "odlaEnvironment",
+    dataEnvironment: "odlaDataEnvironment",
+    runtime: "odlaRuntime"
+  };
+  for (const [target, source] of Object.entries(identityKeys)) {
+    const value = metadataValue(candidates, source);
+    if (value) identity[target] = value;
+  }
+  let objectKind = "ignored";
+  if (eventType.startsWith("customer.subscription.")) objectKind = "subscription";
+  else if (eventType.startsWith("customer.")) objectKind = "customer";
+  else if (eventType.startsWith("invoice.")) objectKind = "invoice";
+  else if (eventType.startsWith("refund.")) objectKind = "refund";
+  else if (eventType === "charge.refunded") objectKind = "refund";
+  const customerId = refId(object.customer, "cus_");
+  const subscriptionId = objectKind === "subscription" ? providerId(objectId, "sub_") : subscriptionRef(object);
+  const invoiceId = objectKind === "invoice" ? providerId(objectId, "in_") : refId(object.invoice, "in_");
+  const chargeId = eventType === "charge.refunded" ? providerId(objectId, "ch_") : refId(object.charge, "ch_");
+  const paymentIntentId = refId(object.payment_intent, "pi_");
+  const price = firstPrice(object);
+  const amountCents = integer(eventType === "charge.refunded" ? object.amount_refunded : object.amount);
+  const currency = text(object.currency)?.toLowerCase();
+  const status = text(object.status);
+  return {
+    eventId,
+    digest,
+    eventType,
+    eventCreated: integer(event.created) ?? 0,
+    livemode: event.livemode === true,
+    objectKind,
+    objectId,
+    identity,
+    ...metadataValue(candidates, "applicationId") ? { applicationId: metadataValue(candidates, "applicationId") } : {},
+    ...metadataValue(candidates, "personId") ? { personId: metadataValue(candidates, "personId") } : {},
+    ...metadataValue(candidates, "membershipId") ? { membershipId: metadataValue(candidates, "membershipId") } : {},
+    ...customerId ? { customerId } : {},
+    ...subscriptionId ? { subscriptionId } : {},
+    ...invoiceId ? { invoiceId } : {},
+    ...chargeId ? { chargeId } : {},
+    ...paymentIntentId ? { paymentIntentId } : {},
+    ...price,
+    ...status ? { status } : {},
+    ...currency ? { currency } : {},
+    ...amountCents !== void 0 ? { amountCents } : {},
+    ...integer(object.amount_paid) !== void 0 ? { amountPaidCents: integer(object.amount_paid) } : {},
+    ...integer(object.amount_remaining) !== void 0 ? { amountRemainingCents: integer(object.amount_remaining) } : {},
+    ...integer(object.current_period_start) !== void 0 ? { currentPeriodStart: integer(object.current_period_start) } : {},
+    ...integer(object.current_period_end) !== void 0 ? { currentPeriodEnd: integer(object.current_period_end) } : {},
+    ...bool(object.cancel_at_period_end) !== void 0 ? { cancelAtPeriodEnd: bool(object.cancel_at_period_end) } : {}
+  };
+}
+var identityFields = ["appId", "chapterId", "environment", "dataEnvironment", "runtime"];
+function directSource(fact, sources) {
+  const mode = fact.livemode ? "live" : "test";
+  const supplied = identityFields.filter((field) => fact.identity[field] !== void 0);
+  const candidates = sources.filter((source) => source.stripeMode === mode && supplied.every((field) => source[field] === fact.identity[field]));
+  if (supplied.length === identityFields.length) return candidates.length === 1 ? candidates[0] : "wrong";
+  if (supplied.length > 0 && candidates.length === 0) return "wrong";
+  return null;
+}
+var objectRefs = (fact) => [
+  fact.customerId && `customer:${fact.customerId}`,
+  fact.subscriptionId && `subscription:${fact.subscriptionId}`,
+  fact.invoiceId && `invoice:${fact.invoiceId}`,
+  fact.chargeId && `charge:${fact.chargeId}`,
+  fact.paymentIntentId && `payment_intent:${fact.paymentIntentId}`
+].filter((value) => Boolean(value));
+function ownRef(fact) {
+  if (!fact.objectId) return null;
+  if (fact.objectKind === "customer") return `customer:${fact.objectId}`;
+  if (fact.objectKind === "subscription") return `subscription:${fact.objectId}`;
+  if (fact.objectKind === "invoice") return `invoice:${fact.objectId}`;
+  if (fact.eventType.startsWith("refund.")) return `refund:${fact.objectId}`;
+  return fact.eventType === "charge.refunded" ? `charge:${fact.objectId}` : null;
+}
+var order = (left, right) => left.eventCreated - right.eventCreated || left.eventId.localeCompare(right.eventId);
+function projectNetworkCommercialEvents(input, sources) {
+  const facts2 = [...input].sort(order);
+  const exceptions2 = [];
+  const unique = [];
+  const digests = /* @__PURE__ */ new Map();
+  for (const fact of facts2) {
+    const prior = digests.get(fact.eventId);
+    if (prior === void 0) {
+      digests.set(fact.eventId, fact.digest);
+      unique.push(fact);
+    } else if (prior !== fact.digest) exceptions2.push({ eventId: fact.eventId, kind: "collision", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+  }
+  const assignments = /* @__PURE__ */ new Map();
+  const refs = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    const direct = directSource(fact, sources);
+    if (direct && direct !== "wrong") assignments.set(fact.eventId, direct);
+  }
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const fact of unique) {
+      const assigned = assignments.get(fact.eventId);
+      if (assigned) {
+        const key = networkCommercialSourceKey(assigned);
+        for (const ref of [...objectRefs(fact), ownRef(fact)].filter((value) => Boolean(value))) {
+          const keys2 = refs.get(ref) ?? /* @__PURE__ */ new Set();
+          const before = keys2.size;
+          keys2.add(key);
+          refs.set(ref, keys2);
+          if (keys2.size !== before) changed = true;
+        }
+        continue;
+      }
+      if (directSource(fact, sources) === "wrong") continue;
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      if (keys.size !== 1) continue;
+      const candidate = sources.find((source) => networkCommercialSourceKey(source) === [...keys][0]);
+      if (candidate && directSource({ ...fact, identity: fact.identity }, [candidate]) !== "wrong") {
+        assignments.set(fact.eventId, candidate);
+        changed = true;
+      }
+    }
+  }
+  const latest = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    if (fact.objectKind === "ignored" || !fact.eventId || !fact.objectId) {
+      exceptions2.push({ eventId: fact.eventId, kind: "unsupported", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const source = assignments.get(fact.eventId);
+    if (!source) {
+      const direct = directSource(fact, sources);
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      exceptions2.push({ eventId: fact.eventId, kind: direct === "wrong" ? "wrong_partition" : keys.size > 1 ? "ambiguous_partition" : "unmatched_partition", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const row = { ...fact, sourceKey: networkCommercialSourceKey(source) };
+    const key = `${fact.objectKind}:${fact.objectId}`;
+    const prior = latest.get(key);
+    if (!prior || order(prior, fact) <= 0) latest.set(key, row);
+  }
+  const rows3 = [...latest.values()];
+  const customers = rows3.filter((row) => row.objectKind === "customer");
+  const subscriptions = rows3.filter((row) => row.objectKind === "subscription");
+  const invoices = rows3.filter((row) => row.objectKind === "invoice");
+  const refunds = rows3.filter((row) => row.objectKind === "refund" && row.eventType.startsWith("refund."));
+  for (const charge of rows3.filter((row) => row.eventType === "charge.refunded")) {
+    if (!refunds.some((refund) => refund.chargeId === charge.objectId)) {
+      exceptions2.push({ eventId: charge.eventId, kind: "charge_refund_without_refund_object", sourceKey: charge.sourceKey, detail: { eventType: charge.eventType, objectId: charge.objectId } });
+    }
+  }
+  const totalsMap = /* @__PURE__ */ new Map();
+  const add = (row, field, amount) => {
+    if (!row.currency) return;
+    const key = `${row.sourceKey}:${row.currency}`;
+    const total = totalsMap.get(key) ?? { sourceKey: row.sourceKey, currency: row.currency, paidCents: 0, refundedCents: 0, netCents: 0 };
+    total[field] += amount;
+    total.netCents = total.paidCents - total.refundedCents;
+    totalsMap.set(key, total);
+  };
+  for (const row of invoices) add(row, "paidCents", row.amountPaidCents ?? 0);
+  for (const row of refunds) add(row, "refundedCents", row.amountCents ?? 0);
+  return { customers, subscriptions, invoices, refunds, exceptions: exceptions2, totals: [...totalsMap.values()].sort((a, b) => `${a.sourceKey}:${a.currency}`.localeCompare(`${b.sourceKey}:${b.currency}`)) };
+}
+
+// src/network-commercial-reconcile.ts
+var asRaw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+async function listStripeObjects(client, path, params = {}, maxPages = 20) {
+  const objects = [];
+  let startingAfter;
+  for (let pageNumber = 0; pageNumber < maxPages; pageNumber += 1) {
+    const page = await client.request("GET", path, {
+      ...params,
+      limit: 100,
+      ...startingAfter ? { starting_after: startingAfter } : {}
+    });
+    if (!Array.isArray(page.data) || typeof page.has_more !== "boolean") {
+      throw new Error("Stripe returned an invalid commercial list response");
+    }
+    const rows3 = page.data.map(asRaw).filter((row) => row !== null);
+    if (rows3.length !== page.data.length) throw new Error("Stripe returned a malformed commercial object");
+    objects.push(...rows3);
+    if (!page.has_more) return { objects, complete: true };
+    const cursor = rows3.at(-1)?.id;
+    if (typeof cursor !== "string" || !cursor) throw new Error("Stripe pagination did not provide a cursor");
+    startingAfter = cursor;
+  }
+  return { objects, complete: false };
+}
+function facts(snapshots) {
+  const groups2 = [
+    ["customer.updated", snapshots.customers.objects],
+    ["customer.subscription.updated", snapshots.subscriptions.objects],
+    ["invoice.updated", snapshots.invoices.objects],
+    ["refund.updated", snapshots.refunds.objects]
+  ];
+  return groups2.flatMap(([eventType, objects]) => objects.map((object) => {
+    const id6 = typeof object.id === "string" ? object.id : "invalid";
+    return normalizeNetworkCommercialStripeEvent({
+      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id6}`,
+      type: eventType,
+      created: typeof object.created === "number" ? object.created : 0,
+      livemode: object.livemode === true,
+      data: { object }
+    }, `stripe-snapshot:${eventType}:${id6}`);
+  }));
+}
+var selected = (row) => ({
+  status: row.status ?? null,
+  currency: row.currency ?? null,
+  amountCents: row.amountCents ?? null,
+  amountPaidCents: row.amountPaidCents ?? null,
+  amountRemainingCents: row.amountRemainingCents ?? null,
+  customerId: row.customerId ?? null,
+  subscriptionId: row.subscriptionId ?? null,
+  invoiceId: row.invoiceId ?? null,
+  priceId: row.priceId ?? null,
+  quantity: row.quantity ?? null,
+  applicationId: row.applicationId ?? null,
+  personId: row.personId ?? null,
+  membershipId: row.membershipId ?? null,
+  currentPeriodStart: row.currentPeriodStart ?? null,
+  currentPeriodEnd: row.currentPeriodEnd ?? null,
+  cancelAtPeriodEnd: row.cancelAtPeriodEnd ?? null
+});
+var index = (projection2) => new Map(
+  [...projection2.customers, ...projection2.subscriptions, ...projection2.invoices, ...projection2.refunds].map((row) => [`${row.sourceKey}:${row.objectKind}:${row.objectId}`, row])
+);
+function reconcileStripeSnapshot(shadow, snapshots, sources) {
+  const stripe = projectNetworkCommercialEvents(facts(snapshots), sources);
+  const shadowRows = index(shadow);
+  const stripeRows = index(stripe);
+  const exceptions2 = [];
+  const complete = Object.values(snapshots).every((snapshot) => snapshot.complete);
+  if (!complete) exceptions2.push({ kind: "stripe_snapshot_truncated", detail: {} });
+  for (const [key, row] of shadowRows) {
+    const other = stripeRows.get(key);
+    if (!other) {
+      exceptions2.push({ kind: "missing_from_stripe", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+    } else if (JSON.stringify(selected(row)) !== JSON.stringify(selected(other))) {
+      exceptions2.push({ kind: "object_mismatch", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: { shadow: selected(row), stripe: selected(other) } });
+    }
+  }
+  for (const [key, row] of stripeRows) {
+    if (!shadowRows.has(key)) exceptions2.push({ kind: "missing_from_shadow", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+  }
+  if (JSON.stringify(shadow.totals) !== JSON.stringify(stripe.totals)) {
+    exceptions2.push({ kind: "totals_mismatch", detail: { shadow: shadow.totals, stripe: stripe.totals } });
+  }
+  return {
+    ok: exceptions2.length === 0,
+    complete,
+    ignoredObjects: stripe.exceptions.filter((item) => item.kind === "wrong_partition" || item.kind === "unmatched_partition").length,
+    exceptions: exceptions2,
+    stripeTotals: stripe.totals
+  };
+}
+
 // src/leader.ts
 var import_crm3 = require("@odla-ai/crm");
 function leaderCrmConfig(options = {}) {
@@ -2239,14 +2748,14 @@ var import_crm4 = require("@odla-ai/crm");
 
 // src/tiers.ts
 function buildTierSeeds(groupId, configured = [], now = 0) {
-  return configured.map((tier, index) => ({
+  return configured.map((tier, index2) => ({
     id: tier.id,
     groupId,
     name: tier.name,
     priceCents: tier.priceCents,
     ...tier.stripePriceId ? { stripePriceId: tier.stripePriceId } : {},
     ...tier.blurb ? { blurb: tier.blurb } : {},
-    sortOrder: tier.sortOrder ?? index,
+    sortOrder: tier.sortOrder ?? index2,
     active: tier.active !== false,
     createdAt: now
   }));
@@ -2319,13 +2828,26 @@ function createChapterIntegration(chapter, options = {}) {
   const isLeader = (chapter.config.network?.targets?.length ?? 0) > 0;
   const runbooks = isLeader ? {
     role: "leader",
-    slugs: ["chapter-leader", "chapter-network", "crm"],
+    slugs: ["chapter-leader", "chapter-network", "crm", ...chapter.networkCommercialReadModel ? ["stripe-network-shadow"] : []],
     guidance: `${chapter.name} is a LEADER hub: it holds the CRM and shares records with its chapters. Read it with \`odla-ai runbook get chapter-leader\`.`
   } : {
     role: "follower",
     slugs: ["chapter-follower", "chapter-network"],
     guidance: `${chapter.name} is a FOLLOWER site: it receives people and records from a leader hub. Read it with \`odla-ai runbook get chapter-follower\`.`
   };
+  const secrets = [];
+  if (chapter.account !== "none") secrets.push({
+    // Released Chapter workers request this effective name. odla-db maps it to
+    // the canonical reserved `$clerk_secret` value written by the CLI.
+    name: "clerk_secret_key",
+    description: "Clerk backend key (set with odla-ai secrets set-clerk-key) required by the configured Chapter account model.",
+    required: true
+  });
+  if (chapter.networkCommercialReadModel) secrets.push({
+    name: "network_commercial_stripe_webhook_secret",
+    description: "Signing secret for the read-only network commercial Stripe webhook endpoint.",
+    required: true
+  });
   return {
     id: "chapter",
     title: `Chapter: ${chapter.name}`,
@@ -2336,14 +2858,7 @@ function createChapterIntegration(chapter, options = {}) {
     },
     rules: { ...crmDesc.rules, ...chapter.rules },
     seeds,
-    secrets: chapter.account === "none" ? [] : [{
-      // Released Chapter workers request this effective name. odla-db maps
-      // it to the canonical reserved `$clerk_secret` value written by
-      // `odla-ai secrets set-clerk-key`.
-      name: "clerk_secret_key",
-      description: "Clerk backend key (set with odla-ai secrets set-clerk-key) required by the configured Chapter account model.",
-      required: true
-    }],
+    secrets,
     probes: [
       ...crmDesc.probes ?? [],
       // The snapshot route is deliberately private. A credential-free smoke
@@ -2365,6 +2880,11 @@ function createChapterIntegration(chapter, options = {}) {
         { path: "/api/builder-library-control", expectedStatus: 401 },
         { path: "/api/admin/builder-library", expectedStatus: 401 },
         { path: "/api/admin/builder-library/manifest", expectedStatus: 401 }
+      ] : [],
+      ...chapter.networkPersonRegistry ? [{ path: "/api/admin/network-person-registry", expectedStatus: 401 }] : [],
+      ...chapter.networkCommercialReadModel ? [
+        { path: "/api/network-commercial/stripe-webhook", expectedStatus: 405 },
+        { path: "/api/admin/network-commercial-read-model", expectedStatus: 401 }
       ] : []
     ],
     runbooks
@@ -2373,7 +2893,7 @@ function createChapterIntegration(chapter, options = {}) {
 
 // src/member-content-validation-helpers.ts
 var ID = /^[a-z][a-z0-9-]{0,79}$/;
-var SLUG6 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var SLUG8 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var ROOT_KEYS = /* @__PURE__ */ new Set(["schemaVersion", "revision", "generatedAt", "source", "target", "pages", "upsellOverrides"]);
 var SOURCE_KEYS = /* @__PURE__ */ new Set(["type", "appId"]);
 var TARGET_KEYS = /* @__PURE__ */ new Set(["chapterId", "environment"]);
@@ -2405,21 +2925,21 @@ function textValue(value, path, errors, max = MAX_TEXT, required = false) {
   return valueText;
 }
 function offerValue(value, path, errors, tiers2, audience) {
-  const raw = record(value);
-  if (!raw) {
+  const raw2 = record(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return void 0;
   }
-  unknownKeys(raw, OFFER_KEYS, path, errors);
-  const tierId = textValue(raw.tierId, `${path}.tierId`, errors, 80, true) ?? "";
+  unknownKeys(raw2, OFFER_KEYS, path, errors);
+  const tierId = textValue(raw2.tierId, `${path}.tierId`, errors, 80, true) ?? "";
   if (tierId && !ID.test(tierId)) errors.push(`${path}.tierId must be a lowercase kebab-case id`);
   if (tiers2.size && !tiers2.has(tierId)) errors.push(`${path}.tierId must reference a declared tier`);
   if (audience?.kind === "tiers" && tierId && !audience.tierIds.includes(tierId)) {
     errors.push(`${path}.tierId must grant access to this page`);
   }
-  const label = textValue(raw.label, `${path}.label`, errors);
-  const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN);
-  const ctaLabel = textValue(raw.ctaLabel, `${path}.ctaLabel`, errors);
+  const label = textValue(raw2.label, `${path}.label`, errors);
+  const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN);
+  const ctaLabel = textValue(raw2.ctaLabel, `${path}.ctaLabel`, errors);
   return {
     tierId,
     ...label ? { label } : {},
@@ -2471,37 +2991,37 @@ function validateMemberContentDocument(input, options = {}) {
   const ids = /* @__PURE__ */ new Set();
   const slugs = /* @__PURE__ */ new Set();
   const pages = [];
-  for (const [index, value] of rawPages.slice(0, MAX_PAGES).entries()) {
-    const path = `document.pages[${index}]`;
-    const raw = record(value);
-    if (!raw) {
+  for (const [index2, value] of rawPages.slice(0, MAX_PAGES).entries()) {
+    const path = `document.pages[${index2}]`;
+    const raw2 = record(value);
+    if (!raw2) {
       errors.push(`${path} must be an object`);
       continue;
     }
-    unknownKeys(raw, PAGE_KEYS, path, errors);
-    const id4 = textValue(raw.id, `${path}.id`, errors, 80, true) ?? "";
-    const slug = textValue(raw.slug, `${path}.slug`, errors, 120, true) ?? "";
-    const title = textValue(raw.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
-    if (id4 && !ID.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (slug && !SLUG6.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
-    if (ids.has(id4) || knownParentIds.has(id4)) errors.push(`${path}.id duplicates page "${id4}"`);
+    unknownKeys(raw2, PAGE_KEYS, path, errors);
+    const id6 = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
+    const slug = textValue(raw2.slug, `${path}.slug`, errors, 120, true) ?? "";
+    const title = textValue(raw2.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
+    if (id6 && !ID.test(id6)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (slug && !SLUG8.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
+    if (ids.has(id6) || knownParentIds.has(id6)) errors.push(`${path}.id duplicates page "${id6}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
-    ids.add(id4);
+    ids.add(id6);
     slugs.add(slug);
-    const navRaw = record(raw.navigation);
-    let navigation = { section: "General", order: index };
+    const navRaw = record(raw2.navigation);
+    let navigation = { section: "General", order: index2 };
     if (!navRaw) errors.push(`${path}.navigation must be an object`);
     else {
       unknownKeys(navRaw, NAV_KEYS, `${path}.navigation`, errors);
       const section = textValue(navRaw.section, `${path}.navigation.section`, errors, 120, true) ?? "";
-      const order = navRaw.order;
-      if (!Number.isInteger(order) || Number(order) < 0 || Number(order) > 1e6) {
+      const order2 = navRaw.order;
+      if (!Number.isInteger(order2) || Number(order2) < 0 || Number(order2) > 1e6) {
         errors.push(`${path}.navigation.order must be an integer from 0 to 1,000,000`);
       }
       const parentId = textValue(navRaw.parentId, `${path}.navigation.parentId`, errors, 80);
-      navigation = { section, order: Number.isInteger(order) ? Number(order) : index, ...parentId ? { parentId } : {} };
+      navigation = { section, order: Number.isInteger(order2) ? Number(order2) : index2, ...parentId ? { parentId } : {} };
     }
-    const audienceRaw = record(raw.audience);
+    const audienceRaw = record(raw2.audience);
     let audience = { kind: "all-members" };
     if (!audienceRaw) errors.push(`${path}.audience must be an object`);
     else {
@@ -2523,12 +3043,12 @@ function validateMemberContentDocument(input, options = {}) {
         audience = { kind: "tiers", tierIds: normalized };
       } else errors.push(`${path}.audience.kind must be all-members or tiers`);
     }
-    const summary = textValue(raw.summary, `${path}.summary`, errors, 2e3);
-    const teaserMarkdown = textValue(raw.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN);
-    const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN, true) ?? "";
+    const summary = textValue(raw2.summary, `${path}.summary`, errors, 2e3);
+    const teaserMarkdown = textValue(raw2.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN);
+    const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN, true) ?? "";
     let upsell;
-    if (raw.upsell !== void 0) {
-      const upsellRaw = record(raw.upsell);
+    if (raw2.upsell !== void 0) {
+      const upsellRaw = record(raw2.upsell);
       if (!upsellRaw) errors.push(`${path}.upsell must be an object`);
       else {
         unknownKeys(upsellRaw, UPSELL_KEYS, `${path}.upsell`, errors);
@@ -2542,13 +3062,13 @@ function validateMemberContentDocument(input, options = {}) {
         else if (owner === "chapter") upsell = { owner, ...offer ? { offer } : {} };
       }
     }
-    pages.push({ id: id4, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
+    pages.push({ id: id6, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
   }
   const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids]);
-  for (const [index, page] of pages.entries()) {
+  for (const [index2, page] of pages.entries()) {
     const parentId = page.navigation.parentId;
-    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index}].navigation.parentId references unknown page "${parentId}"`);
-    if (parentId === page.id) errors.push(`document.pages[${index}].navigation.parentId cannot reference itself`);
+    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index2}].navigation.parentId references unknown page "${parentId}"`);
+    if (parentId === page.id) errors.push(`document.pages[${index2}].navigation.parentId cannot reference itself`);
   }
   for (const page of pages) {
     const seen = /* @__PURE__ */ new Set([page.id]);
@@ -2569,21 +3089,21 @@ function validateMemberContentDocument(input, options = {}) {
     const values = Array.isArray(root.upsellOverrides) ? root.upsellOverrides : [];
     const seen = /* @__PURE__ */ new Set();
     upsellOverrides = [];
-    for (const [index, value] of values.entries()) {
-      const path = `document.upsellOverrides[${index}]`;
-      const raw = record(value);
-      if (!raw) {
+    for (const [index2, value] of values.entries()) {
+      const path = `document.upsellOverrides[${index2}]`;
+      const raw2 = record(value);
+      if (!raw2) {
         errors.push(`${path} must be an object`);
         continue;
       }
-      unknownKeys(raw, OVERRIDE_KEYS, path, errors);
-      const pageId = textValue(raw.pageId, `${path}.pageId`, errors, 80, true) ?? "";
+      unknownKeys(raw2, OVERRIDE_KEYS, path, errors);
+      const pageId = textValue(raw2.pageId, `${path}.pageId`, errors, 80, true) ?? "";
       if (seen.has(pageId)) errors.push(`${path}.pageId duplicates "${pageId}"`);
       seen.add(pageId);
       const parentPage = (options.parentPages ?? []).find((page) => page.id === pageId);
       if (!parentPage) errors.push(`${path}.pageId must reference a parent page`);
       else if (parentPage.upsell?.owner !== "chapter") errors.push(`${path}.pageId does not delegate upsell authority to the chapter`);
-      const offer = offerValue(raw.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
+      const offer = offerValue(raw2.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
       if (offer) upsellOverrides.push({ pageId, offer });
     }
   }
@@ -2708,7 +3228,7 @@ var record2 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys2(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text(value, path, errors, max = MAX_TEXT2, required = true) {
+function text2(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -2718,23 +3238,23 @@ function text(value, path, errors, max = MAX_TEXT2, required = true) {
   if (result.length > max) errors.push(`${path} must be at most ${max} characters`);
   return result;
 }
-function integer(value, path, errors, minimum = 1) {
+function integer2(value, path, errors, minimum = 1) {
   if (!Number.isSafeInteger(value) || Number(value) < minimum) errors.push(`${path} must be an integer >= ${minimum}`);
   return Number(value);
 }
 function scopeValue(value, path, errors) {
-  const raw = record2(value);
-  if (!raw) {
+  const raw2 = record2(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys2(raw, SCOPE_KEYS, path, errors);
-  if (raw.kind === "global" || raw.kind === "built_not_found") {
-    if (raw.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
-    return { kind: raw.kind };
+  unknownKeys2(raw2, SCOPE_KEYS, path, errors);
+  if (raw2.kind === "global" || raw2.kind === "built_not_found") {
+    if (raw2.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
+    return { kind: raw2.kind };
   }
-  if (raw.kind === "chapter") {
-    const chapterId = text(raw.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+  if (raw2.kind === "chapter") {
+    const chapterId = text2(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -2742,28 +3262,28 @@ function scopeValue(value, path, errors) {
   return null;
 }
 function resourceValue(value, path, errors) {
-  const raw = record2(value);
-  if (!raw) {
+  const raw2 = record2(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys2(raw, RESOURCE_KEYS, path, errors);
-  const id4 = text(raw.id, `${path}.id`, errors, 80) ?? "";
-  if (id4 && !ID2.test(id4)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text(raw.kind, `${path}.kind`, errors) ?? "";
+  unknownKeys2(raw2, RESOURCE_KEYS, path, errors);
+  const id6 = text2(raw2.id, `${path}.id`, errors, 80) ?? "";
+  if (id6 && !ID2.test(id6)) errors.push(`${path}.id must be lowercase kebab-case`);
+  const kind = text2(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text(raw.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text(raw.summary, `${path}.summary`, errors, 1e3, false);
-  const status = text(raw.status, `${path}.status`, errors) ?? "";
+  const title = text2(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text2(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status = text2(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status)) errors.push(`${path}.status must be draft, published, or archived`);
-  const revision = integer(raw.revision, `${path}.revision`, errors);
-  const scope = scopeValue(raw.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw.tags) ? raw.tags.map((tag, index) => text(tag, `${path}.tags[${index}]`, errors, 80) ?? "") : [];
-  if (!Array.isArray(raw.tags)) errors.push(`${path}.tags must be an array`);
+  const revision = integer2(raw2.revision, `${path}.revision`, errors);
+  const scope = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text2(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, false);
-  const url = text(raw.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text2(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, false);
+  const url = text2(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -2771,13 +3291,13 @@ function resourceValue(value, path, errors) {
       errors.push(`${path}.url must be a valid https URL`);
     }
   }
-  const asset = raw.brandAsset === void 0 ? null : record2(raw.brandAsset);
-  if (raw.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
+  const asset = raw2.brandAsset === void 0 ? null : record2(raw2.brandAsset);
+  if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys2(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text2(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text2(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text2(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -2785,59 +3305,59 @@ function resourceValue(value, path, errors) {
   if (!["document", "note"].includes(kind) && bodyMarkdown) errors.push(`${path}.bodyMarkdown is not allowed for ${kind}`);
   if (!["link", "inspiration"].includes(kind) && url) errors.push(`${path}.url is not allowed for ${kind}`);
   if (!["image", "file"].includes(kind) && brandAsset) errors.push(`${path}.brandAsset is not allowed for ${kind}`);
-  const provenanceRaw = record2(raw.provenance);
+  const provenanceRaw = record2(raw2.provenance);
   if (!provenanceRaw) errors.push(`${path}.provenance must be an object`);
   if (provenanceRaw) unknownKeys2(provenanceRaw, PROVENANCE_KEYS, `${path}.provenance`, errors);
   const promotedRaw = provenanceRaw?.promotedFrom === void 0 ? null : record2(provenanceRaw.promotedFrom);
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys2(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
-    resourceRevision: integer(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
-    documentRevision: integer(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
-    promotedAt: integer(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
+    chapterId: text2(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text2(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    resourceRevision: integer2(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
+    documentRevision: integer2(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
+    promotedBy: text2(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedAt: integer2(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance = {
-    createdBy: text(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
-    createdAt: integer(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
-    updatedAt: integer(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
+    createdBy: text2(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdAt: integer2(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
+    updatedBy: text2(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedAt: integer2(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
-  return { id: id4, kind, title, ...summary ? { summary } : {}, tags, scope, status, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
+  return { id: id6, kind, title, ...summary ? { summary } : {}, tags, scope, status, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
 }
 function validateBuilderLibraryDocument(value, options = {}) {
   const errors = [];
-  const raw = record2(value);
-  if (!raw) return { ok: false, errors: ["document must be an object"] };
-  unknownKeys2(raw, ROOT_KEYS2, "document", errors);
-  if (raw.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
-  const revision = integer(raw.revision, "document.revision", errors);
-  const generatedAt = integer(raw.generatedAt, "document.generatedAt", errors, 0);
-  const sourceRaw = record2(raw.source);
+  const raw2 = record2(value);
+  if (!raw2) return { ok: false, errors: ["document must be an object"] };
+  unknownKeys2(raw2, ROOT_KEYS2, "document", errors);
+  if (raw2.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  const revision = integer2(raw2.revision, "document.revision", errors);
+  const generatedAt = integer2(raw2.generatedAt, "document.generatedAt", errors, 0);
+  const sourceRaw = record2(raw2.source);
   if (!sourceRaw) errors.push("document.source must be an object");
   if (sourceRaw) unknownKeys2(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text2(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
-  const targetRaw = raw.target === void 0 ? null : record2(raw.target);
-  if (raw.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
+  const targetRaw = raw2.target === void 0 ? null : record2(raw2.target);
+  if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys2(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text2(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text2(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
-  if (!Array.isArray(raw.resources)) errors.push("document.resources must be an array");
-  const inputs = Array.isArray(raw.resources) ? raw.resources : [];
+  if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
+  const inputs = Array.isArray(raw2.resources) ? raw2.resources : [];
   if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
-  const resources = inputs.map((item, index) => resourceValue(item, `document.resources[${index}]`, errors)).filter(Boolean);
-  const ids = resources.map(({ id: id4 }) => id4);
+  const resources = inputs.map((item, index2) => resourceValue(item, `document.resources[${index2}]`, errors)).filter(Boolean);
+  const ids = resources.map(({ id: id6 }) => id6);
   if (new Set(ids).size !== ids.length) errors.push("document.resources ids must be unique");
   for (const resource of resources) {
     if (sourceType === "chapter" && (resource.scope.kind !== "chapter" || resource.scope.chapterId !== sourceAppId)) {
@@ -2954,10 +3474,10 @@ function planDelivery(input) {
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
   const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
-  const text4 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text5 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + render(tpl.text, vars) : render(tpl.text, vars);
-  return { deliver: true, transport, to, subject, text: text4, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text5, redirected: redirect };
 }
 
 // src/notify.ts
@@ -2992,9 +3512,9 @@ async function sendTemplated(deps, input) {
       error = e instanceof Error ? e.message : String(e);
     }
   }
-  const id4 = deps.newId();
+  const id6 = deps.newId();
   const row = {
-    id: id4,
+    id: id6,
     groupId: input.group.id,
     to: decision.to,
     template: input.template,
@@ -3008,7 +3528,7 @@ async function sendTemplated(deps, input) {
     ...messageId ? { messageId } : {},
     ...error ? { error } : {}
   };
-  await deps.db.transact([{ t: "update", ns: "emailLog", id: id4, attrs: row }], error ? void 0 : { mutationId: `email:${input.dedupeKey}` });
+  await deps.db.transact([{ t: "update", ns: "emailLog", id: id6, attrs: row }], error ? void 0 : { mutationId: `email:${input.dedupeKey}` });
   return error ? { sent: false, reason: error } : { sent: true };
 }
 function emailGroupFrom(row) {
@@ -3194,29 +3714,29 @@ function validateAdmissionGrantDocument(input) {
   const grants = [];
   const seenIds = /* @__PURE__ */ new Set();
   const seenEmails = /* @__PURE__ */ new Set();
-  for (const [index, raw] of rawGrants.slice(0, MAX_GRANTS).entries()) {
-    const grant = raw && typeof raw === "object" ? raw : {};
-    const id4 = typeof grant.id === "string" ? grant.id : "";
+  for (const [index2, raw2] of rawGrants.slice(0, MAX_GRANTS).entries()) {
+    const grant = raw2 && typeof raw2 === "object" ? raw2 : {};
+    const id6 = typeof grant.id === "string" ? grant.id : "";
     const email = typeof grant.email === "string" ? grant.email.trim() : "";
     const normalized = normalizeAdmissionEmail(email);
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID3.test(id4)) errors.push(`document.grants[${index}].id must be an identifier`);
-    if (seenIds.has(id4)) errors.push(`document.grants repeats id "${id4}"`);
-    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
+    if (!ID3.test(id6)) errors.push(`document.grants[${index2}].id must be an identifier`);
+    if (seenIds.has(id6)) errors.push(`document.grants repeats id "${id6}"`);
+    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
     if (decision !== "waive_interview" && decision !== "require_interview") {
-      errors.push(`document.grants[${index}].decision is invalid`);
+      errors.push(`document.grants[${index2}].decision is invalid`);
     }
-    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index}].note is too long`);
+    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index2}].note is too long`);
     if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
-      errors.push(`document.grants[${index}].expiresAt must be epoch milliseconds`);
+      errors.push(`document.grants[${index2}].expiresAt must be epoch milliseconds`);
     }
-    seenIds.add(id4);
+    seenIds.add(id6);
     seenEmails.add(normalized);
     grants.push({
-      id: id4,
+      id: id6,
       email,
       decision,
       ...note ? { note } : {},
@@ -3287,8 +3807,8 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
   const incomingIds = new Set(document.grants.map((grant) => `admission:parent:${document.source.appId}:${grant.id}`));
   const ops = [];
   for (const row of current) {
-    const id4 = String(row.id ?? "");
-    if (id4 && !incomingIds.has(id4)) ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
+    const id6 = String(row.id ?? "");
+    if (id6 && !incomingIds.has(id6)) ops.push({ t: "update", ns: "admissionGrants", id: id6, attrs: {
       active: false,
       revokedAt: receivedAt,
       revokedBy: document.source.actor,
@@ -3297,10 +3817,10 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
     } });
   }
   for (const grant of document.grants) {
-    const id4 = `admission:parent:${document.source.appId}:${grant.id}`;
-    const existing = current.find((row) => row.id === id4);
-    ops.push({ t: "update", ns: "admissionGrants", id: id4, attrs: {
-      id: id4,
+    const id6 = `admission:parent:${document.source.appId}:${grant.id}`;
+    const existing = current.find((row) => row.id === id6);
+    ops.push({ t: "update", ns: "admissionGrants", id: id6, attrs: {
+      id: id6,
       sourceGrantId: grant.id,
       sourceScope: "parent",
       sourceId: document.source.appId,
@@ -3321,7 +3841,7 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
       ...!grant.note && existing?.note !== void 0 ? ["note"] : [],
       ...grant.expiresAt === void 0 && existing?.expiresAt !== void 0 ? ["expiresAt"] : []
     ];
-    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id4, attrs: retract });
+    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id6, attrs: retract });
   }
   if (previous?.active) ops.push({ t: "update", ns: "admissionGrantRevisions", id: previous.id, attrs: { active: false } });
   const revisionId = `admission-revision:${document.source.appId}:${document.target.environment}:${document.revision}`;
@@ -3363,7 +3883,7 @@ var ID4 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
 var record3 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var text2 = (value, path, errors, max) => {
+var text3 = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -3382,32 +3902,32 @@ function validateGiftOfferCatalog(input, tierIds) {
   if (rawOffers.length > MAX_GIFT_OFFERS) errors.push(`document.giftOffers.offers supports at most ${MAX_GIFT_OFFERS} entries`);
   const ids = /* @__PURE__ */ new Set();
   const offers = [];
-  for (const [index, raw] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
-    const path = `document.giftOffers.offers[${index}]`;
-    const item = record3(raw);
+  for (const [index2, raw2] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
+    const path = `document.giftOffers.offers[${index2}]`;
+    const item = record3(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key of Object.keys(item)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
-    const id4 = text2(item.id, `${path}.id`, errors, 80);
-    if (id4 && !ID4.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (ids.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
-    ids.add(id4);
+    const id6 = text3(item.id, `${path}.id`, errors, 80);
+    if (id6 && !ID4.test(id6)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (ids.has(id6)) errors.push(`${path}.id duplicates "${id6}"`);
+    ids.add(id6);
     const targetRaw = record3(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
-      const tierId = text2(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
+      const tierId = text3(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
       if (!tierIds.has(tierId)) errors.push(`${path}.target.tierId must reference a declared tier`);
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
-      const entitlementKey = text2(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
+      const entitlementKey = text3(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
       if (entitlementKey && !ID4.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
-    const stripePriceId = text2(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
+    const stripePriceId = text3(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
     if (stripePriceId && !PRICE.test(stripePriceId)) errors.push(`${path}.stripePriceId must be a real Stripe Price id`);
     if (!Number.isSafeInteger(item.priceCents) || Number(item.priceCents) < 1 || Number(item.priceCents) > 1e8) errors.push(`${path}.priceCents must be an integer from 1 to 100,000,000`);
     const currency = typeof item.currency === "string" ? item.currency.trim().toLowerCase() : "";
@@ -3420,7 +3940,7 @@ function validateGiftOfferCatalog(input, tierIds) {
     if (activeUntil !== void 0 && (!Number.isSafeInteger(activeUntil) || activeUntil < 1)) errors.push(`${path}.activeUntil must be epoch milliseconds`);
     if (activeFrom !== void 0 && activeUntil !== void 0 && activeUntil <= activeFrom) errors.push(`${path}.activeUntil must follow activeFrom`);
     offers.push({
-      id: id4,
+      id: id6,
       target,
       billingMode: item.billingMode,
       stripePriceId,
@@ -3429,9 +3949,9 @@ function validateGiftOfferCatalog(input, tierIds) {
       redemptionLifetimeHours: lifetime,
       ...activeFrom !== void 0 ? { activeFrom } : {},
       ...activeUntil !== void 0 ? { activeUntil } : {},
-      title: text2(item.title, `${path}.title`, errors, 160),
-      description: text2(item.description, `${path}.description`, errors, 2e3),
-      ctaLabel: text2(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
+      title: text3(item.title, `${path}.title`, errors, 160),
+      description: text3(item.description, `${path}.description`, errors, 2e3),
+      ctaLabel: text3(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
     });
   }
   return errors.length ? { ok: false, errors } : { ok: true, value: { schemaVersion: 1, offers } };
@@ -3471,8 +3991,8 @@ function networkSourceTag(type, hubRecordId, sourceId) {
   const typeKey = type.toLowerCase();
   const readable = /^[a-z0-9_-]+$/.test(hubRecordId);
   const prefix = sourceId ? `network:${sourceId.toLowerCase()}:${typeKey}` : `network:${typeKey}`;
-  const raw = `${prefix}:${hubRecordId}`;
-  if (readable && raw.length <= 64) return raw;
+  const raw2 = `${prefix}:${hubRecordId}`;
+  if (readable && raw2.length <= 64) return raw2;
   return `network:${typeKey.slice(0, 16)}:${shortHash(`${sourceId ?? ""}\0${type}\0${hubRecordId}`)}`;
 }
 function normalizeSharedRecord(record4, fallbackSourceId = "legacy-source") {
@@ -3742,14 +4262,14 @@ function periodSeries(points, now, count, periodMs) {
   for (const point of points) {
     if (!Number.isFinite(point.t) || !Number.isFinite(point.v)) continue;
     if (point.t >= start && point.t <= now) {
-      const index = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
-      current[index] = (current[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
+      current[index2] = (current[index2] ?? 0) + point.v;
     } else if (point.t >= previousStart && point.t < start) {
-      const index = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
-      previous[index] = (previous[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
+      previous[index2] = (previous[index2] ?? 0) + point.v;
     }
   }
-  const labels = current.map((_, index) => new Date(start + index * periodMs).toISOString().slice(5, 10));
+  const labels = current.map((_, index2) => new Date(start + index2 * periodMs).toISOString().slice(5, 10));
   return { labels, current, previous };
 }
 function dashboardMetricData(points, now) {
@@ -3833,9 +4353,9 @@ async function updateClerkUserMetadataByEmail(secretKey, email, input, fetchImpl
   const found = await fetchImpl(`https://api.clerk.com/v1/users?email_address=${encodeURIComponent(email)}&limit=1`, { headers: auth });
   if (!found.ok) return false;
   const users = await found.json().catch(() => null);
-  const id4 = Array.isArray(users) && typeof users[0]?.id === "string" ? users[0].id : void 0;
-  if (!id4) return false;
-  return updateClerkUserMetadata(secretKey, id4, input, fetchImpl);
+  const id6 = Array.isArray(users) && typeof users[0]?.id === "string" ? users[0].id : void 0;
+  if (!id6) return false;
+  return updateClerkUserMetadata(secretKey, id6, input, fetchImpl);
 }
 async function createClerkUser(secretKey, input, fetchImpl = fetch) {
   const { path, body } = clerkUserRequest(input);
@@ -3898,8 +4418,8 @@ async function clerkGetUserByEmail(secretKey, email, fetchImpl = fetch) {
   const user = Array.isArray(data) ? data[0] : void 0;
   return user ? toRecord(user) : null;
 }
-async function clerkGetUser(secretKey, id4, fetchImpl = fetch) {
-  const data = await clerkGet(`/v1/users/${encodeURIComponent(id4)}`, secretKey, fetchImpl).catch(() => null);
+async function clerkGetUser(secretKey, id6, fetchImpl = fetch) {
+  const data = await clerkGet(`/v1/users/${encodeURIComponent(id6)}`, secretKey, fetchImpl).catch(() => null);
   return data ? toRecord(data) : null;
 }
 async function clerkListUsers(secretKey, fetchImpl = fetch) {
@@ -3915,8 +4435,8 @@ async function clerkListUsers(secretKey, fetchImpl = fetch) {
   }
   return out;
 }
-async function clerkSetRole(secretKey, id4, role, fetchImpl = fetch) {
-  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id4)}/metadata`, {
+async function clerkSetRole(secretKey, id6, role, fetchImpl = fetch) {
+  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id6)}/metadata`, {
     method: "PATCH",
     headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
     body: JSON.stringify({ public_metadata: { role } })
@@ -4142,8 +4662,8 @@ function chapterBrandFromTokens(compiled, base = {}) {
 function isReconcilable(meeting, now) {
   return meeting.status === "scheduled" && Boolean(meeting.googleEventId) && (meeting.startAt ?? 0) > now - 36e5;
 }
-function reconcileMeetings(meetings2, events, now) {
-  const byEvent = new Map(events.map((e) => [e.eventId, e]));
+function reconcileMeetings(meetings2, events2, now) {
+  const byEvent = new Map(events2.map((e) => [e.eventId, e]));
   const decisions = [];
   for (const m of meetings2) {
     if (!isReconcilable(m, now) || !m.googleEventId) continue;
@@ -4353,10 +4873,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text4 = value.trim();
-  if (required && !text4) errors.push(`${path} is required`);
-  if (text4.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text4;
+  const text5 = value.trim();
+  if (required && !text5) errors.push(`${path} is required`);
+  if (text5.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text5;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -4374,9 +4894,9 @@ function validateMembershipPageDocument(input, options = {}) {
   const authority = new Map((options.tiers ?? []).map((tier) => [tier.id, tier]));
   const seen = /* @__PURE__ */ new Set();
   const tiers2 = [];
-  for (const [index, raw] of rawTiers.slice(0, MAX_TIERS).entries()) {
-    const path = `document.tiers[${index}]`;
-    const item = objectRecord(raw);
+  for (const [index2, raw2] of rawTiers.slice(0, MAX_TIERS).entries()) {
+    const path = `document.tiers[${index2}]`;
+    const item = objectRecord(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
@@ -4405,8 +4925,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text4 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text4 ? [text4] : [];
+          const text5 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text5 ? [text5] : [];
         });
       }
     }
@@ -4482,7 +5002,7 @@ function membershipPageDocument(input, options = {}) {
 }
 
 // src/signup-control-validate.ts
-var SLUG7 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var SLUG9 = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var ENVIRONMENT = /^[a-z][a-z0-9_-]{0,62}$/;
 var TIER = /^[a-z][a-z0-9-]{0,79}$/;
 var PRICE2 = /^price_[A-Za-z0-9]{12,}$/;
@@ -4505,7 +5025,7 @@ var recordOf = (value) => value !== null && typeof value === "object" && !Array.
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text3(value, path, errors, max = 65536) {
+function text4(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -4520,19 +5040,19 @@ function tiersOf(value, errors) {
   }
   if (value.length > 20) errors.push("document.tiers supports at most 20 entries");
   const seen = /* @__PURE__ */ new Set();
-  return value.slice(0, 20).flatMap((raw, index) => {
-    const path = `document.tiers[${index}]`;
-    const item = recordOf(raw);
+  return value.slice(0, 20).flatMap((raw2, index2) => {
+    const path = `document.tiers[${index2}]`;
+    const item = recordOf(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       return [];
     }
     unknownKeys3(item, TIER_KEYS2, path, errors);
-    const id4 = text3(item.id, `${path}.id`, errors, 80);
-    if (id4 && !TIER.test(id4)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (seen.has(id4)) errors.push(`${path}.id duplicates "${id4}"`);
-    seen.add(id4);
-    const name = text3(item.name, `${path}.name`, errors, 160);
+    const id6 = text4(item.id, `${path}.id`, errors, 80);
+    if (id6 && !TIER.test(id6)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (seen.has(id6)) errors.push(`${path}.id duplicates "${id6}"`);
+    seen.add(id6);
+    const name = text4(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
     if (!Number.isInteger(item.priceCents) || Number(item.priceCents) < 0 || Number(item.priceCents) > 1e8) {
@@ -4544,9 +5064,9 @@ function tiersOf(value, errors) {
     if (item.available === true && Number(item.priceCents) > 0 && !item.stripePriceId) {
       errors.push(`${path}.stripePriceId is required for an available paid tier`);
     }
-    const blurb = item.blurb === void 0 ? void 0 : text3(item.blurb, `${path}.blurb`, errors, 4e3);
+    const blurb = item.blurb === void 0 ? void 0 : text4(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
-      id: id4,
+      id: id6,
       name,
       available: item.available === true,
       sortOrder: Number(item.sortOrder) || 0,
@@ -4600,7 +5120,7 @@ function policyOf(value, errors) {
   const result = {};
   for (const key of allowed2) {
     if (input[key] === void 0 && key !== "disclaimerText" && key !== "refundPolicyText") continue;
-    result[key] = text3(input[key], `document.policy.${key}`, errors);
+    result[key] = text4(input[key], `document.policy.${key}`, errors);
   }
   return result;
 }
@@ -4638,18 +5158,18 @@ function validateSignupControlDocument(input) {
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
   const source = recordOf(root.source);
   const target = recordOf(root.target);
-  const appId = text3(source?.appId, "document.source.appId", errors, 63);
-  const chapterId = text3(target?.chapterId, "document.target.chapterId", errors, 63);
-  const environment = text3(target?.environment, "document.target.environment", errors, 63);
-  if (appId && !SLUG7.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
-  if (chapterId && !SLUG7.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
+  const appId = text4(source?.appId, "document.source.appId", errors, 63);
+  const chapterId = text4(target?.chapterId, "document.target.chapterId", errors, 63);
+  const environment = text4(target?.environment, "document.target.environment", errors, 63);
+  if (appId && !SLUG9.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
+  if (chapterId && !SLUG9.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
   if (target?.stripeMode !== "test" && target?.stripeMode !== "live") errors.push("document.target.stripeMode must be test or live");
   const tiers2 = tiersOf(root.tiers, errors);
   const available = tiers2.filter((tier) => tier.available).sort((a, b) => a.sortOrder - b.sortOrder);
   const page = validateMembershipPageDocument(root.membershipPage, { tiers: available });
   if (!page.ok) errors.push(...page.errors);
-  else if (page.value.tiers.some((tier, index) => tier.tierId !== available[index]?.id)) {
+  else if (page.value.tiers.some((tier, index2) => tier.tierId !== available[index2]?.id)) {
     errors.push("document.membershipPage.tiers must follow the available tier display order");
   }
   const application = applicationOf(root.application, errors);
@@ -4696,14 +5216,14 @@ function validatedTokens(input) {
   }
   const tokens = {};
   let serializedLength = 0;
-  for (const [name, raw] of entries.sort(([left], [right]) => left.localeCompare(right))) {
+  for (const [name, raw2] of entries.sort(([left], [right]) => left.localeCompare(right))) {
     if (!TOKEN_NAME.test(name)) {
       throw new TypeError(`signup-control theme token "${name}" must be an allowlisted --ui-* property`);
     }
-    if (typeof raw !== "string" && typeof raw !== "number" || typeof raw === "number" && !Number.isFinite(raw)) {
+    if (typeof raw2 !== "string" && typeof raw2 !== "number" || typeof raw2 === "number" && !Number.isFinite(raw2)) {
       throw new TypeError(`signup-control theme token "${name}" must be a finite string or number`);
     }
-    const value = String(raw).trim();
+    const value = String(raw2).trim();
     if (!value || value.length > MAX_VALUE_LENGTH || UNSAFE_VALUE.test(value)) {
       throw new TypeError(`signup-control theme token "${name}" has an unsafe or oversized value`);
     }
@@ -4810,16 +5330,16 @@ function markdownSection(rawHeading) {
 }
 function markdownBenefits(lines, path, errors) {
   const benefits = [];
-  for (const [index, line] of lines.entries()) {
+  for (const [index2, line] of lines.entries()) {
     if (!line.trim()) continue;
     const match = line.match(MARKDOWN_BENEFIT);
     if (!match) {
-      errors.push(`${path} line ${index + 1} must be a Markdown bullet`);
+      errors.push(`${path} line ${index2 + 1} must be a Markdown bullet`);
       continue;
     }
-    const text4 = (match[1] ?? "").trim();
-    if (text4.length > 2e3) errors.push(`${path} line ${index + 1} must be at most 2,000 characters`);
-    if (text4) benefits.push(text4);
+    const text5 = (match[1] ?? "").trim();
+    if (text5.length > 2e3) errors.push(`${path} line ${index2 + 1} must be at most 2,000 characters`);
+    if (text5) benefits.push(text5);
   }
   if (benefits.length > MAX_BENEFITS2) errors.push(`${path} supports at most ${MAX_BENEFITS2} entries`);
   return benefits.slice(0, MAX_BENEFITS2);
@@ -4834,7 +5354,7 @@ function applyMembershipTierMarkdown(presentation, source) {
   const sections = /* @__PURE__ */ new Map();
   const prelude = [];
   let current = null;
-  for (const [index, line] of source.replace(/\r\n?/g, "\n").split("\n").entries()) {
+  for (const [index2, line] of source.replace(/\r\n?/g, "\n").split("\n").entries()) {
     const heading = line.match(MARKDOWN_SECTION);
     if (heading) {
       const headingText = heading[1] ?? "";
@@ -4854,7 +5374,7 @@ function applyMembershipTierMarkdown(presentation, source) {
       continue;
     }
     if (MARKDOWN_HEADING.test(line)) {
-      errors.push(`membership Markdown line ${index + 1} uses an unsupported heading`);
+      errors.push(`membership Markdown line ${index2 + 1} uses an unsupported heading`);
       continue;
     }
     if (current) sections.get(current)?.lines.push(line);
@@ -4919,7 +5439,7 @@ var exclusions = (chapterId, paidTierIds) => [
     id: chapterId,
     reason: "provider_identity",
     paths: [
-      ...paidTierIds.map((id4) => `tiers[${id4}].stripePriceId`),
+      ...paidTierIds.map((id6) => `tiers[${id6}].stripePriceId`),
       "groups.stripePublishableKey",
       "applications.stripeCustomerId",
       "applications.stripeSubscriptionId",
@@ -4961,9 +5481,9 @@ async function exportChapterPromotion(input) {
     sourceIds: [`signup-control:${document.revision}`, document.source.appId, document.target.chapterId].sort(),
     receiptDigests: [input.digest]
   };
-  const artifact = (kind, id4, content) => ({
+  const artifact = (kind, id6, content) => ({
     kind,
-    id: id4,
+    id: id6,
     sourceRevision: revision,
     provenance: promotionProvenance,
     content: (0, import_promotion.canonicalPromotionValue)(content)
@@ -5002,7 +5522,7 @@ async function exportChapterPromotion(input) {
 }
 
 // src/member-system-authority.ts
-var rows2 = (group) => group.fields.map((id4) => ({ ...group, id: id4 }));
+var rows2 = (group) => group.fields.map((id6) => ({ ...group, id: id6 }));
 var MEMBER_SYSTEM_AUTHORITY_MATRIX = [
   ...rows2({
     scope: "network",
@@ -5387,10 +5907,10 @@ function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
   if (supplied.length === keys.length) return "apply";
   return hasProvenLegacyLocalLink ? "apply_legacy" : "quarantine_unmatched";
 }
-function planMemberSystemEventReplay(events) {
+function planMemberSystemEventReplay(events2) {
   const seen = /* @__PURE__ */ new Map();
   const plan = { accepted: [], replayed: [], collisions: [] };
-  for (const event of events) {
+  for (const event of events2) {
     const digest = seen.get(event.id);
     if (digest === void 0) {
       seen.set(event.id, event.digest);