@odla-ai/chapter 0.43.2 → 0.45.0

package/dist/worker/index.cjs

@@ -39,8 +39,8 @@ var import_jose = require("jose");
 
 // src/auth.ts
 function roleFromClaim(payload, auth) {
-  const raw = payload[auth.claim];
-  return typeof raw === "string" && auth.ladder.includes(raw) ? raw : auth.ladder[0];
+  const raw2 = payload[auth.claim];
+  return typeof raw2 === "string" && auth.ladder.includes(raw2) ? raw2 : auth.ladder[0];
 }
 function isAdminRole(role, auth) {
   return role === auth.adminRole;
@@ -223,7 +223,7 @@ function resolveApplication(a) {
       throw new Error(`defineChapter.application.${name}: field "${unsafe}" must match ${SCHEMA_FIELD.source}`);
     }
   }
-  const duplicate = [...required, ...optional].find((field, index, fields) => fields.indexOf(field) !== index);
+  const duplicate = [...required, ...optional].find((field, index2, fields) => fields.indexOf(field) !== index2);
   if (duplicate) {
     throw new Error(`defineChapter.application: duplicate field "${duplicate}" across required/optional lists`);
   }
@@ -371,8 +371,8 @@ function tierPayable(tier, group, hasSecretKey) {
 function byOrder(a, b) {
   return a.sortOrder - b.sortOrder || a.id.localeCompare(b.id);
 }
-function resolveTiers(group, rows4 = []) {
-  const stored = rows4.filter((tier) => tier.active);
+function resolveTiers(group, rows6 = []) {
+  const stored = rows6.filter((tier) => tier.active);
   if (stored.length) return [...stored].sort(byOrder);
   return [{
     id: "standard",
@@ -418,15 +418,15 @@ function rowToTier(row, groupId) {
 }
 async function loadTiers(db, group) {
   const groupId = String(group.id ?? "");
-  let rows4;
+  let rows6;
   try {
-    rows4 = (await db.query({
+    rows6 = (await db.query({
       tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
     })).tiers;
   } catch {
-    rows4 = void 0;
+    rows6 = void 0;
   }
-  const list = Array.isArray(rows4) ? rows4.map((row) => rowToTier(row, groupId)) : [];
+  const list = Array.isArray(rows6) ? rows6.map((row) => rowToTier(row, groupId)) : [];
   return resolveTiers(group, list);
 }
 async function loadOfferableTiers(db, group, hasSecretKey) {
@@ -563,8 +563,8 @@ function canonicalSignupControl(value) {
   return canonicalValue(value);
 }
 async function signupControlDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalSignupControl(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalSignupControl(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/admission-grants.ts
@@ -600,24 +600,24 @@ function validateAdmissionGrantDocument(input) {
   const grants = [];
   const seenIds = /* @__PURE__ */ new Set();
   const seenEmails = /* @__PURE__ */ new Set();
-  for (const [index, raw] of rawGrants.slice(0, MAX_GRANTS).entries()) {
-    const grant = raw && typeof raw === "object" ? raw : {};
+  for (const [index2, raw2] of rawGrants.slice(0, MAX_GRANTS).entries()) {
+    const grant = raw2 && typeof raw2 === "object" ? raw2 : {};
     const id = typeof grant.id === "string" ? grant.id : "";
     const email = typeof grant.email === "string" ? grant.email.trim() : "";
     const normalized = normalizeAdmissionEmail(email);
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID.test(id)) errors.push(`document.grants[${index}].id must be an identifier`);
+    if (!ID.test(id)) errors.push(`document.grants[${index2}].id must be an identifier`);
     if (seenIds.has(id)) errors.push(`document.grants repeats id "${id}"`);
-    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
+    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
     if (decision !== "waive_interview" && decision !== "require_interview") {
-      errors.push(`document.grants[${index}].decision is invalid`);
+      errors.push(`document.grants[${index2}].decision is invalid`);
     }
-    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index}].note is too long`);
+    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index2}].note is too long`);
     if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
-      errors.push(`document.grants[${index}].expiresAt must be epoch milliseconds`);
+      errors.push(`document.grants[${index2}].expiresAt must be epoch milliseconds`);
     }
     seenIds.add(id);
     seenEmails.add(normalized);
@@ -685,7 +685,7 @@ async function loadLatestAdmissionRevision(db, sourceId, targetId, environment)
   return row ? row : null;
 }
 async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const current = rows((await db.query({ admissionGrants: { $: {
     where: { sourceScope: "parent", sourceId: document.source.appId, targetId: document.target.chapterId },
     limit: MAX_GRANTS
@@ -737,11 +737,11 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
     targetId: document.target.chapterId,
     environment: document.target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest2}` });
 }
 
 // src/flow-fields.ts
@@ -759,8 +759,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id) {
-  const text4 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text4 ? `${text4[0].toUpperCase()}${text4.slice(1)}` : id;
+  const text5 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text5 ? `${text5[0].toUpperCase()}${text5.slice(1)}` : id;
 }
 function applicationDefs(chapter) {
   try {
@@ -775,7 +775,7 @@ function applicationType(id, def) {
 }
 function applicationFlowFields(chapter, application = chapter.application) {
   const defs = applicationDefs(chapter);
-  return [...application.required, ...application.optional].map((id, order) => {
+  return [...application.required, ...application.optional].map((id, order2) => {
     const def = defs[id];
     const conditions = application.conditions[id];
     const type = applicationType(id, def);
@@ -784,7 +784,7 @@ function applicationFlowFields(chapter, application = chapter.application) {
       label: def?.label ?? APPLICATION_LABELS[id] ?? humanize(id),
       type,
       required: application.required.includes(id),
-      order,
+      order: order2,
       maxLength: application.maxLen[id] ?? application.defaultMaxLen,
       ...type === "enum" && def?.options ? { options: [...def.options] } : {},
       ...conditions ? { conditions: { ...conditions } } : {},
@@ -795,14 +795,14 @@ function applicationFlowFields(chapter, application = chapter.application) {
 function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id, order) => {
+  return [...formation.required, ...formation.optional].map((id, order2) => {
     const field = def.fields[id];
     return {
       id,
       label: field.label ?? humanize(id),
       type: field.type,
       required: formation.required.includes(id),
-      order,
+      order: order2,
       maxLength: formation.maxLen[id] ?? formation.defaultMaxLen,
       ...field.options ? { options: [...field.options] } : {},
       ...id === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
@@ -846,9 +846,9 @@ function validateGiftOfferCatalog(input, tierIds) {
   if (rawOffers.length > MAX_GIFT_OFFERS) errors.push(`document.giftOffers.offers supports at most ${MAX_GIFT_OFFERS} entries`);
   const ids = /* @__PURE__ */ new Set();
   const offers = [];
-  for (const [index, raw] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
-    const path = `document.giftOffers.offers[${index}]`;
-    const item = record(raw);
+  for (const [index2, raw2] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
+    const path = `document.giftOffers.offers[${index2}]`;
+    const item = record(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
@@ -1005,8 +1005,8 @@ function networkSourceTag(type, hubRecordId, sourceId) {
   const typeKey = type.toLowerCase();
   const readable = /^[a-z0-9_-]+$/.test(hubRecordId);
   const prefix = sourceId ? `network:${sourceId.toLowerCase()}:${typeKey}` : `network:${typeKey}`;
-  const raw = `${prefix}:${hubRecordId}`;
-  if (readable && raw.length <= 64) return raw;
+  const raw2 = `${prefix}:${hubRecordId}`;
+  if (readable && raw2.length <= 64) return raw2;
   return `network:${typeKey.slice(0, 16)}:${shortHash(`${sourceId ?? ""}\0${type}\0${hubRecordId}`)}`;
 }
 function normalizeSharedRecord(record4, fallbackSourceId = "legacy-source") {
@@ -1290,10 +1290,10 @@ function planDelivery(input) {
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
   const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
-  const text4 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text5 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + render(tpl.text, vars) : render(tpl.text, vars);
-  return { deliver: true, transport, to, subject, text: text4, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text5, redirected: redirect };
 }
 
 // src/notify.ts
@@ -1480,27 +1480,27 @@ async function hasSignupControl(db, targetId, environment, active) {
   if (db.aggregate) {
     return Number((await db.aggregate("signupControls", { count: true }, { where })).count ?? 0) > 0;
   }
-  const rows4 = (await db.query({ signupControls: {} })).signupControls;
-  return Array.isArray(rows4) && rows4.some((row) => row.targetId === targetId && row.environment === environment && (!active || row.active === true));
+  const rows6 = (await db.query({ signupControls: {} })).signupControls;
+  return Array.isArray(rows6) && rows6.some((row) => row.targetId === targetId && row.environment === environment && (!active || row.active === true));
 }
 async function loadLatestSignupControl(db, targetId, environment) {
   if (!await hasSignupControl(db, targetId, environment)) return null;
-  const rows4 = (await db.query({ signupControls: { $: {
+  const rows6 = (await db.query({ signupControls: { $: {
     where: { targetId, environment },
     order: { revision: "desc" },
     limit: 1
   } } })).signupControls;
-  const latest = Array.isArray(rows4) ? [...rows4].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
+  const latest = Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
   return asStored(latest);
 }
 async function loadActiveSignupControl(db, targetId, environment) {
   if (!await hasSignupControl(db, targetId, environment, true)) return null;
-  const rows4 = (await db.query({ signupControls: { $: {
+  const rows6 = (await db.query({ signupControls: { $: {
     where: { targetId, environment, active: true },
     order: { revision: "desc" },
     limit: 1
   } } })).signupControls;
-  const active = Array.isArray(rows4) ? [...rows4].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
+  const active = Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
   return asStored(active);
 }
 function controlledApplication(base, document) {
@@ -1529,7 +1529,7 @@ var byPublicId = (ns, value) => ({
   value
 });
 async function materializeSignupControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const currentRows = (await db.query({ tiers: { $: {
     where: { groupId: document.target.chapterId },
     limit: 100
@@ -1580,12 +1580,12 @@ async function materializeSignupControl(db, envelope, previous, receivedAt) {
     targetId: document.target.chapterId,
     environment: document.target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `signup-control:${document.target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `signup-control:${document.target.environment}:${document.revision}:${digest2}` });
 }
 
 // src/session.ts
@@ -2025,11 +2025,11 @@ var handleMember = async (req, url, env, ctx) => {
     return json({ error: `application cannot resume from status "${String(app.status ?? "")}"` }, 409);
   }
   if (req.method === "POST" && url.pathname === "/api/applications") {
-    const raw = await req.text();
-    if (raw.length > chapter.application.bodyCap) return json({ error: "request body too large" }, 413);
+    const raw2 = await req.text();
+    if (raw2.length > chapter.application.bodyCap) return json({ error: "request body too large" }, 413);
     let parsed;
     try {
-      parsed = JSON.parse(raw);
+      parsed = JSON.parse(raw2);
     } catch {
       return json({ error: "invalid JSON body" }, 400);
     }
@@ -2086,23 +2086,23 @@ var handleNetworkShared = async (req, url, env, ctx) => {
   const db = ctx.makeDb(env);
   const secret = await getVaultSecret(db, "network_share_secret");
   if (!secret) return json({ error: "unauthorized" }, 401);
-  let raw;
+  let raw2;
   let sourceId;
   if (req.headers.has(import_db2.FEDERATION_HEADERS.version)) {
     const verified = await (0, import_db2.verifyFederatedRequest)(req, { secret });
     if (!verified.ok) return json({ error: "unauthorized", reason: verified.reason }, 401);
-    raw = verified.body;
+    raw2 = verified.body;
     sourceId = verified.sender;
   } else {
     const provided = (req.headers.get("authorization") ?? "").replace(/^Bearer /, "");
     if (provided.length !== secret.length || provided !== secret) {
       return json({ error: "unauthorized" }, 401);
     }
-    raw = await req.text();
+    raw2 = await req.text();
   }
   let payload;
   try {
-    payload = JSON.parse(raw);
+    payload = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -2181,10 +2181,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text4 = value.trim();
-  if (required && !text4) errors.push(`${path} is required`);
-  if (text4.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text4;
+  const text5 = value.trim();
+  if (required && !text5) errors.push(`${path} is required`);
+  if (text5.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text5;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -2202,9 +2202,9 @@ function validateMembershipPageDocument(input, options = {}) {
   const authority = new Map((options.tiers ?? []).map((tier) => [tier.id, tier]));
   const seen = /* @__PURE__ */ new Set();
   const tiers = [];
-  for (const [index, raw] of rawTiers.slice(0, MAX_TIERS).entries()) {
-    const path = `document.tiers[${index}]`;
-    const item = objectRecord(raw);
+  for (const [index2, raw2] of rawTiers.slice(0, MAX_TIERS).entries()) {
+    const path = `document.tiers[${index2}]`;
+    const item = objectRecord(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
@@ -2233,8 +2233,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text4 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text4 ? [text4] : [];
+          const text5 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text5 ? [text5] : [];
         });
       }
     }
@@ -2343,9 +2343,9 @@ function tiersOf(value, errors) {
   }
   if (value.length > 20) errors.push("document.tiers supports at most 20 entries");
   const seen = /* @__PURE__ */ new Set();
-  return value.slice(0, 20).flatMap((raw, index) => {
-    const path = `document.tiers[${index}]`;
-    const item = recordOf(raw);
+  return value.slice(0, 20).flatMap((raw2, index2) => {
+    const path = `document.tiers[${index2}]`;
+    const item = recordOf(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       return [];
@@ -2472,7 +2472,7 @@ function validateSignupControlDocument(input) {
   const available = tiers.filter((tier) => tier.available).sort((a, b) => a.sortOrder - b.sortOrder);
   const page = validateMembershipPageDocument(root.membershipPage, { tiers: available });
   if (!page.ok) errors.push(...page.errors);
-  else if (page.value.tiers.some((tier, index) => tier.tierId !== available[index]?.id)) {
+  else if (page.value.tiers.some((tier, index2) => tier.tierId !== available[index2]?.id)) {
     errors.push("document.membershipPage.tiers must follow the available tier display order");
   }
   const application = applicationOf(root.application, errors);
@@ -2520,7 +2520,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
   } catch {
     return reject("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const checked = validateSignupControlDocument(input.document);
   if (!checked.ok) return reject("invalid_document", 400, checked.errors);
   const document = checked.value;
@@ -2530,11 +2530,11 @@ var handleSignupControl = async (req, url, env, ctx) => {
   if (document.target.stripeMode !== authority.stripeMode) return reject("wrong_stripe_mode", 409);
   const applicationErrors = validateControlledApplication(ctx.chapter, document);
   if (applicationErrors.length) return reject("invalid_document", 400, applicationErrors);
-  if (!digest || await signupControlDigest(document) !== digest) return reject("invalid_digest", 400);
+  if (!digest2 || await signupControlDigest(document) !== digest2) return reject("invalid_digest", 400);
   const latest = await loadLatestSignupControl(db, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject("conflicting_revision", 409);
     return json({
       ok: true,
       target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
@@ -2546,7 +2546,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeSignupControl(db, { digest, document }, latest, receivedAt);
+    await materializeSignupControl(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject("materialization_failed", 503);
   }
@@ -2554,7 +2554,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
     ok: true,
     target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -2582,8 +2582,8 @@ function canonicalMemberContent(value) {
   return canonicalValue2(value);
 }
 async function memberContentDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalMemberContent(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalMemberContent(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/member-content-validation-helpers.ts
@@ -2620,21 +2620,21 @@ function textValue(value, path, errors, max = MAX_TEXT, required = false) {
   return valueText;
 }
 function offerValue(value, path, errors, tiers, audience) {
-  const raw = record2(value);
-  if (!raw) {
+  const raw2 = record2(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return void 0;
   }
-  unknownKeys2(raw, OFFER_KEYS, path, errors);
-  const tierId = textValue(raw.tierId, `${path}.tierId`, errors, 80, true) ?? "";
+  unknownKeys2(raw2, OFFER_KEYS, path, errors);
+  const tierId = textValue(raw2.tierId, `${path}.tierId`, errors, 80, true) ?? "";
   if (tierId && !ID3.test(tierId)) errors.push(`${path}.tierId must be a lowercase kebab-case id`);
   if (tiers.size && !tiers.has(tierId)) errors.push(`${path}.tierId must reference a declared tier`);
   if (audience?.kind === "tiers" && tierId && !audience.tierIds.includes(tierId)) {
     errors.push(`${path}.tierId must grant access to this page`);
   }
-  const label = textValue(raw.label, `${path}.label`, errors);
-  const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2);
-  const ctaLabel = textValue(raw.ctaLabel, `${path}.ctaLabel`, errors);
+  const label = textValue(raw2.label, `${path}.label`, errors);
+  const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2);
+  const ctaLabel = textValue(raw2.ctaLabel, `${path}.ctaLabel`, errors);
   return {
     tierId,
     ...label ? { label } : {},
@@ -2686,37 +2686,37 @@ function validateMemberContentDocument(input, options = {}) {
   const ids = /* @__PURE__ */ new Set();
   const slugs = /* @__PURE__ */ new Set();
   const pages = [];
-  for (const [index, value] of rawPages.slice(0, MAX_PAGES).entries()) {
-    const path = `document.pages[${index}]`;
-    const raw = record2(value);
-    if (!raw) {
+  for (const [index2, value] of rawPages.slice(0, MAX_PAGES).entries()) {
+    const path = `document.pages[${index2}]`;
+    const raw2 = record2(value);
+    if (!raw2) {
       errors.push(`${path} must be an object`);
       continue;
     }
-    unknownKeys2(raw, PAGE_KEYS, path, errors);
-    const id = textValue(raw.id, `${path}.id`, errors, 80, true) ?? "";
-    const slug = textValue(raw.slug, `${path}.slug`, errors, 120, true) ?? "";
-    const title = textValue(raw.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
+    unknownKeys2(raw2, PAGE_KEYS, path, errors);
+    const id = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
+    const slug = textValue(raw2.slug, `${path}.slug`, errors, 120, true) ?? "";
+    const title = textValue(raw2.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
     if (id && !ID3.test(id)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (slug && !SLUG2.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
     if (ids.has(id) || knownParentIds.has(id)) errors.push(`${path}.id duplicates page "${id}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
     ids.add(id);
     slugs.add(slug);
-    const navRaw = record2(raw.navigation);
-    let navigation = { section: "General", order: index };
+    const navRaw = record2(raw2.navigation);
+    let navigation = { section: "General", order: index2 };
     if (!navRaw) errors.push(`${path}.navigation must be an object`);
     else {
       unknownKeys2(navRaw, NAV_KEYS, `${path}.navigation`, errors);
       const section = textValue(navRaw.section, `${path}.navigation.section`, errors, 120, true) ?? "";
-      const order = navRaw.order;
-      if (!Number.isInteger(order) || Number(order) < 0 || Number(order) > 1e6) {
+      const order2 = navRaw.order;
+      if (!Number.isInteger(order2) || Number(order2) < 0 || Number(order2) > 1e6) {
         errors.push(`${path}.navigation.order must be an integer from 0 to 1,000,000`);
       }
       const parentId = textValue(navRaw.parentId, `${path}.navigation.parentId`, errors, 80);
-      navigation = { section, order: Number.isInteger(order) ? Number(order) : index, ...parentId ? { parentId } : {} };
+      navigation = { section, order: Number.isInteger(order2) ? Number(order2) : index2, ...parentId ? { parentId } : {} };
     }
-    const audienceRaw = record2(raw.audience);
+    const audienceRaw = record2(raw2.audience);
     let audience = { kind: "all-members" };
     if (!audienceRaw) errors.push(`${path}.audience must be an object`);
     else {
@@ -2738,12 +2738,12 @@ function validateMemberContentDocument(input, options = {}) {
         audience = { kind: "tiers", tierIds: normalized };
       } else errors.push(`${path}.audience.kind must be all-members or tiers`);
     }
-    const summary = textValue(raw.summary, `${path}.summary`, errors, 2e3);
-    const teaserMarkdown = textValue(raw.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN2);
-    const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, true) ?? "";
+    const summary = textValue(raw2.summary, `${path}.summary`, errors, 2e3);
+    const teaserMarkdown = textValue(raw2.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN2);
+    const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, true) ?? "";
     let upsell;
-    if (raw.upsell !== void 0) {
-      const upsellRaw = record2(raw.upsell);
+    if (raw2.upsell !== void 0) {
+      const upsellRaw = record2(raw2.upsell);
       if (!upsellRaw) errors.push(`${path}.upsell must be an object`);
       else {
         unknownKeys2(upsellRaw, UPSELL_KEYS, `${path}.upsell`, errors);
@@ -2760,10 +2760,10 @@ function validateMemberContentDocument(input, options = {}) {
     pages.push({ id, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
   }
   const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids]);
-  for (const [index, page] of pages.entries()) {
+  for (const [index2, page] of pages.entries()) {
     const parentId = page.navigation.parentId;
-    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index}].navigation.parentId references unknown page "${parentId}"`);
-    if (parentId === page.id) errors.push(`document.pages[${index}].navigation.parentId cannot reference itself`);
+    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index2}].navigation.parentId references unknown page "${parentId}"`);
+    if (parentId === page.id) errors.push(`document.pages[${index2}].navigation.parentId cannot reference itself`);
   }
   for (const page of pages) {
     const seen = /* @__PURE__ */ new Set([page.id]);
@@ -2784,21 +2784,21 @@ function validateMemberContentDocument(input, options = {}) {
     const values = Array.isArray(root.upsellOverrides) ? root.upsellOverrides : [];
     const seen = /* @__PURE__ */ new Set();
     upsellOverrides = [];
-    for (const [index, value] of values.entries()) {
-      const path = `document.upsellOverrides[${index}]`;
-      const raw = record2(value);
-      if (!raw) {
+    for (const [index2, value] of values.entries()) {
+      const path = `document.upsellOverrides[${index2}]`;
+      const raw2 = record2(value);
+      if (!raw2) {
         errors.push(`${path} must be an object`);
         continue;
       }
-      unknownKeys2(raw, OVERRIDE_KEYS, path, errors);
-      const pageId = textValue(raw.pageId, `${path}.pageId`, errors, 80, true) ?? "";
+      unknownKeys2(raw2, OVERRIDE_KEYS, path, errors);
+      const pageId = textValue(raw2.pageId, `${path}.pageId`, errors, 80, true) ?? "";
       if (seen.has(pageId)) errors.push(`${path}.pageId duplicates "${pageId}"`);
       seen.add(pageId);
       const parentPage = (options.parentPages ?? []).find((page) => page.id === pageId);
       if (!parentPage) errors.push(`${path}.pageId must reference a parent page`);
       else if (parentPage.upsell?.owner !== "chapter") errors.push(`${path}.pageId does not delegate upsell authority to the chapter`);
-      const offer = offerValue(raw.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
+      const offer = offerValue(raw2.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
       if (offer) upsellOverrides.push({ pageId, offer });
     }
   }
@@ -2876,36 +2876,36 @@ var control = (row) => row && row.document && typeof row.document === "object" ?
 var local = (row) => row && row.document && typeof row.document === "object" ? row : null;
 async function exists(db, ns, where) {
   if (db.aggregate) return Number((await db.aggregate(ns, { count: true }, { where })).count ?? 0) > 0;
-  const rows4 = (await db.query({ [ns]: {} }))[ns] ?? [];
-  return rows4.some((row) => Object.entries(where).every(([key, value]) => row[key] === value));
+  const rows6 = (await db.query({ [ns]: {} }))[ns] ?? [];
+  return rows6.some((row) => Object.entries(where).every(([key, value]) => row[key] === value));
 }
 async function loadActiveMemberContentControl(db, targetId, environment) {
   const where = { targetId, environment, active: true };
   if (!await exists(db, "memberContentControls", where)) return null;
-  const rows4 = (await db.query({ memberContentControls: { $: {
+  const rows6 = (await db.query({ memberContentControls: { $: {
     where,
     order: { revision: "desc" },
     limit: 1
   } } })).memberContentControls;
-  return control(Array.isArray(rows4) ? [...rows4].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  return control(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLatestMemberContentControl(db, targetId, environment) {
   const where = { targetId, environment };
   if (!await exists(db, "memberContentControls", where)) return null;
-  const rows4 = (await db.query({ memberContentControls: { $: {
+  const rows6 = (await db.query({ memberContentControls: { $: {
     where,
     order: { revision: "desc" },
     limit: 1
   } } })).memberContentControls;
-  return control(Array.isArray(rows4) ? [...rows4].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  return control(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLocalMemberContent(db, chapterId, environment) {
   const id = `member-content-local:${environment}`;
-  const rows4 = (await db.query({ memberContentLocal: { $: { where: { id }, limit: 1 } } })).memberContentLocal;
-  return local(Array.isArray(rows4) ? rows4[0] : void 0);
+  const rows6 = (await db.query({ memberContentLocal: { $: { where: { id }, limit: 1 } } })).memberContentLocal;
+  return local(Array.isArray(rows6) ? rows6[0] : void 0);
 }
 async function materializeMemberContentControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const target = document.target;
   const id = `member-content-control:${target.environment}:${document.revision}`;
   const ops = [];
@@ -2918,12 +2918,12 @@ async function materializeMemberContentControl(db, envelope, previous, receivedA
     targetId: target.chapterId,
     environment: target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `member-content-control:${target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `member-content-control:${target.environment}:${document.revision}:${digest2}` });
 }
 async function saveLocalMemberContent(db, document, environment, expectedRevision, updatedAt, updatedBy) {
   const id = `member-content-local:${environment}`;
@@ -2957,12 +2957,12 @@ async function groupAndTiers(db, chapterId) {
 }
 async function memberTierId(db, chapterId, email) {
   if (!email) return null;
-  let rows4 = (await db.query({ applications: { $: {
+  let rows6 = (await db.query({ applications: { $: {
     where: { emailNormalized: normalizeAdmissionEmail(email) },
     limit: 20
   } } })).applications;
-  if (!rows4?.length) rows4 = (await db.query({ applications: { $: { where: { email }, limit: 20 } } })).applications;
-  const latest = Array.isArray(rows4) ? [...rows4].filter((row) => String(row.groupId ?? chapterId) === chapterId).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0] : void 0;
+  if (!rows6?.length) rows6 = (await db.query({ applications: { $: { where: { email }, limit: 20 } } })).applications;
+  const latest = Array.isArray(rows6) ? [...rows6].filter((row) => String(row.groupId ?? chapterId) === chapterId).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0] : void 0;
   return typeof latest?.tierId === "string" && latest.tierId ? latest.tierId : null;
 }
 async function activeDocuments(db, chapterId, environment) {
@@ -2987,7 +2987,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
   } catch {
     return reject2("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const initial = validateMemberContentDocument(input.document, {
     sourceType: "parent"
   });
@@ -3015,11 +3015,11 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
       return reject2("invalid_document", 409, localCheck.errors.map((error) => `existing chapter content: ${error}`));
     }
   }
-  if (!digest || await memberContentDigest(document) !== digest) return reject2("invalid_digest", 400);
+  if (!digest2 || await memberContentDigest(document) !== digest2) return reject2("invalid_digest", 400);
   const latest = await loadLatestMemberContentControl(db, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject2("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject2("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject2("conflicting_revision", 409);
     return json({
       ok: true,
       target: document.target,
@@ -3031,7 +3031,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeMemberContentControl(db, { digest, document }, latest, receivedAt);
+    await materializeMemberContentControl(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject2("materialization_failed", 503);
   }
@@ -3039,7 +3039,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
     ok: true,
     target: document.target,
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -3091,11 +3091,11 @@ var handleAdminMemberContent = async (req, url, env, ctx) => {
   }
   if (req.method !== "PUT") return json({ error: "method not allowed" }, 405);
   if (!ctx.chapter.memberContent.localAuthoring) return json({ error: "local authoring is disabled" }, 403);
-  const raw = await req.text();
-  if (raw.length > BODY_CAP) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > BODY_CAP) return json({ error: "request body too large" }, 413);
   let input;
   try {
-    input = JSON.parse(raw);
+    input = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -3163,18 +3163,18 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
   } catch {
     return reject3("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const checked = validateAdmissionGrantDocument(input.document);
   if (!checked.ok) return reject3("invalid_document", 400, checked.errors);
   const document = checked.value;
   if (document.source.appId !== claimedSender) return reject3("wrong_source", 403);
   if (document.target.chapterId !== ctx.chapter.id) return reject3("wrong_target", 409);
   if (document.target.environment !== env.ODLA_ENV) return reject3("wrong_environment", 409);
-  if (!digest || await signupControlDigest(document) !== digest) return reject3("invalid_digest", 400);
+  if (!digest2 || await signupControlDigest(document) !== digest2) return reject3("invalid_digest", 400);
   const latest = await loadLatestAdmissionRevision(db, claimedSender, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject3("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject3("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject3("conflicting_revision", 409);
     return json({
       ok: true,
       target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
@@ -3186,7 +3186,7 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeAdmissionGrants(db, { digest, document }, latest, receivedAt);
+    await materializeAdmissionGrants(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject3("materialization_failed", 503);
   }
@@ -3194,7 +3194,7 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
     ok: true,
     target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -3397,9 +3397,9 @@ function personAdmissionEmail(ctx, record4) {
   if (record4.type !== "person") return null;
   const field = ctx.chapter.crm.config.types.person?.emailField;
   if (!field) return null;
-  const raw = record4.fields[field] ?? record4.primaryEmail;
-  if (typeof raw !== "string") return null;
-  const normalized = normalizeAdmissionEmail(raw);
+  const raw2 = record4.fields[field] ?? record4.primaryEmail;
+  if (typeof raw2 !== "string") return null;
+  const normalized = normalizeAdmissionEmail(raw2);
   return isValidEmail(normalized) ? normalized : null;
 }
 async function grantInput(db, ctx, assignment) {
@@ -3419,7 +3419,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
   const current = await loadLeaderAdmissionAssignments(opts.db, opts.target.id);
   const id = assignmentId(opts.target.id, opts.personId);
   const existing = current.find((row) => row.id === id);
-  const digest = await signupControlDigest({
+  const digest2 = await signupControlDigest({
     targetId: opts.target.id,
     personId: opts.personId,
     decision: opts.decision,
@@ -3434,7 +3434,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
   } } });
   const receipt = admissionRows(priorMutation2.leaderAdmissionMutations)[0];
   if (receipt) {
-    if (receipt.requestDigest !== digest || receipt.personId !== opts.personId) {
+    if (receipt.requestDigest !== digest2 || receipt.personId !== opts.personId) {
       throw new Error("mutation_conflict");
     }
     const saved = await loadLeaderAdmissionDelivery(opts.db, opts.target.id, opts.env.ODLA_ENV);
@@ -3442,7 +3442,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
     return { delivery: saved, duplicate: true };
   }
   if (existing?.lastMutationId === opts.mutationId) {
-    if (existing.lastRequestDigest !== digest) throw new Error("mutation_conflict");
+    if (existing.lastRequestDigest !== digest2) throw new Error("mutation_conflict");
     const saved = await loadLeaderAdmissionDelivery(opts.db, opts.target.id, opts.env.ODLA_ENV);
     if (!saved) throw new Error("delivery_missing");
     return { delivery: saved, duplicate: true };
@@ -3457,7 +3457,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
     ...opts.expiresAt !== void 0 ? { expiresAt: opts.expiresAt } : {},
     active: opts.active,
     lastMutationId: opts.mutationId,
-    lastRequestDigest: digest,
+    lastRequestDigest: digest2,
     createdAt: existing?.createdAt ?? now,
     createdBy: existing?.createdBy ?? opts.actor,
     updatedAt: now,
@@ -3493,7 +3493,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
       id: mutationReceiptId,
       targetId: opts.target.id,
       personId: opts.personId,
-      requestDigest: digest,
+      requestDigest: digest2,
       revision,
       createdAt: now
     } }
@@ -3688,8 +3688,8 @@ function makeCalendar(env) {
 }
 async function firstRow(db, ns, q) {
   const res = await db.query({ [ns]: { $: q } });
-  const rows4 = res[ns];
-  return Array.isArray(rows4) ? rows4[0] : void 0;
+  const rows6 = res[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 }
 async function computeSlots(cal, cfg) {
   const { from, to } = slotWindow(Date.now(), cfg.windowDays);
@@ -3946,17 +3946,17 @@ async function notifyAdminOfPayment(db, env, eventId, app) {
   try {
     const group = await groupFor(db, app);
     if (!group || typeof group.notificationEmail !== "string" || !group.notificationEmail) return;
-    const text4 = (value) => typeof value === "string" ? value : "";
+    const text5 = (value) => typeof value === "string" ? value : "";
     await sendTemplated(deps(db, env), {
       group: emailGroupFrom(group),
       template: "adminNotification",
       to: group.notificationEmail,
       vars: {
-        firstName: text4(app.firstName),
-        lastName: text4(app.lastName),
-        email: text4(app.email),
-        phone: text4(app.phone),
-        state: text4(app.state)
+        firstName: text5(app.firstName),
+        lastName: text5(app.lastName),
+        email: text5(app.email),
+        phone: text5(app.phone),
+        state: text5(app.state)
       },
       dedupeKey: `${eventId}:admin`,
       applicationId: String(app.id)
@@ -4089,8 +4089,8 @@ function createStripeProvider(config) {
       const sk = requireSecret(secretKey);
       const charges = await stripeCall(sk, "GET", "/v1/charges", { customer: input.customerId, limit: 100 });
       if (!charges.ok) fail("charges list", charges);
-      const rows4 = charges.body.data ?? [];
-      const paid = rows4.filter((c) => c.status === "succeeded" && c.refunded !== true);
+      const rows6 = charges.body.data ?? [];
+      const paid = rows6.filter((c) => c.status === "succeeded" && c.refunded !== true);
       const charge = paid[paid.length - 1];
       if (!charge) {
         const err = new Error("no paid charge to refund");
@@ -4198,8 +4198,8 @@ async function issueGiftClaim(db, intent, provider, now) {
     throw new Error("gift issuance conflict");
   }
 }
-function buyerGiftClaims(rows4, now) {
-  return rows4.map((row) => {
+function buyerGiftClaims(rows6, now) {
+  return rows6.map((row) => {
     const stored = String(row.status ?? "pending");
     const status = stored === "pending" && Number(row.codeExpiresAt) <= now ? "expired" : stored;
     return {
@@ -4491,8 +4491,8 @@ function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
 
 // src/stripe-webhook-partition.ts
 var firstRow2 = async (db, ns, q) => {
-  const rows4 = (await db.query({ [ns]: { $: q } }))[ns];
-  return Array.isArray(rows4) ? rows4[0] : void 0;
+  const rows6 = (await db.query({ [ns]: { $: q } }))[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 };
 var stripeEventDigest = async (rawBody) => {
   const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(rawBody));
@@ -4539,9 +4539,9 @@ async function storeStripeReceipt(db, input) {
   const raced = await receiptFor(db, input.eventId);
   return raced?.digest === input.digest ? "replayed" : "collision";
 }
-async function quarantineStripeEvent(db, eventId, digest, event) {
+async function quarantineStripeEvent(db, eventId, digest2, event) {
   const disposition = "quarantine_unmatched";
-  const stored = await storeStripeReceipt(db, { eventId, digest, event, disposition, matched: false });
+  const stored = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition, matched: false });
   if (stored === "collision") {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
@@ -4549,10 +4549,10 @@ async function quarantineStripeEvent(db, eventId, digest, event) {
   reportStripePartition("warn", eventId, event, disposition);
   return json({ ok: true, matched: false, disposition, ...stored === "replayed" ? { replayed: true } : {} });
 }
-async function replayedStripeReceipt(db, eventId, digest, event) {
+async function replayedStripeReceipt(db, eventId, digest2, event) {
   const existing = await receiptFor(db, eventId);
   if (!existing) return null;
-  if (existing.digest !== digest) {
+  if (existing.digest !== digest2) {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
   }
@@ -4562,8 +4562,8 @@ async function replayedStripeReceipt(db, eventId, digest, event) {
 // src/worker-routes-payments.ts
 async function firstRow3(db, ns, q) {
   const res = await db.query({ [ns]: { $: q } });
-  const rows4 = res[ns];
-  return Array.isArray(rows4) ? rows4[0] : void 0;
+  const rows6 = res[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 }
 async function findApplication(db, event) {
   if ("applicationId" in event && event.applicationId) {
@@ -4687,7 +4687,7 @@ async function ingestWebhook(req, env, ctx) {
   if (!ingest.ok) return json({ error: "invalid signature" }, 400);
   const { eventId, event } = ingest;
   if (event.kind === "ignored") return json({ ok: true, ignored: event.type });
-  const digest = await stripeEventDigest(rawBody);
+  const digest2 = await stripeEventDigest(rawBody);
   const identity = stripeEventIdentity(event);
   const target = stripeEventTarget(env, ctx);
   const preliminary = classifyMemberStripeEvent(identity, target, false);
@@ -4701,23 +4701,23 @@ async function ingestWebhook(req, env, ctx) {
       reportStripePartition("warn", eventId, event, "ignore_sibling");
       return json({ ok: true, matched: false, disposition: "ignore_sibling" });
     }
-    const replay2 = await replayedStripeReceipt(db, eventId, digest, event);
+    const replay2 = await replayedStripeReceipt(db, eventId, digest2, event);
     if (replay2) return replay2;
     const localIntent = Boolean(intent && intent.chapterId === ctx.chapter.id && intent.environment === env.ODLA_ENV && (typeof intent.runtime !== "string" || intent.runtime === target.runtime));
     const disposition2 = classifyMemberStripeEvent(identity, target, localIntent);
     if (!localIntent || disposition2 === "quarantine_unmatched") {
-      return quarantineStripeEvent(db, eventId, digest, event);
+      return quarantineStripeEvent(db, eventId, digest2, event);
     }
     if (event.kind === "gift_paid") {
       if (intent.providerObjectId !== event.providerObjectId || intent.status === "refunded" || intent.status === "canceled") {
-        return quarantineStripeEvent(db, eventId, digest, event);
+        return quarantineStripeEvent(db, eventId, digest2, event);
       }
       try {
         const issued = await issueGiftClaim(db, intent, {
           eventId,
           objectId: event.providerObjectId
         }, Date.now());
-        const stored3 = await storeStripeReceipt(db, { eventId, digest, event, disposition: disposition2, matched: true });
+        const stored3 = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition: disposition2, matched: true });
         if (stored3 === "collision") {
           reportStripePartition("error", eventId, event, "quarantine_collision");
           return json({ ok: true, matched: false, collision: true });
@@ -4733,7 +4733,7 @@ async function ingestWebhook(req, env, ctx) {
     } }], { mutationId: `gift-revoked-intent:${eventId}` });
     const claim = await firstRow3(db, "giftClaims", { where: { intentId: event.giftIntentId }, limit: 1 });
     if (claim) await revokeGiftClaim(db, claim, event.reason, Date.now());
-    const stored2 = await storeStripeReceipt(db, { eventId, digest, event, disposition: disposition2, matched: Boolean(claim) });
+    const stored2 = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition: disposition2, matched: Boolean(claim) });
     if (stored2 === "collision") {
       reportStripePartition("error", eventId, event, "quarantine_collision");
       return json({ ok: true, matched: false, collision: true });
@@ -4745,12 +4745,12 @@ async function ingestWebhook(req, env, ctx) {
     reportStripePartition("warn", eventId, event, "ignore_sibling");
     return json({ ok: true, matched: false, disposition: "ignore_sibling" });
   }
-  const replay = await replayedStripeReceipt(db, eventId, digest, event);
+  const replay = await replayedStripeReceipt(db, eventId, digest2, event);
   if (replay) return replay;
   const localApplication = Boolean(app && (typeof app.stripeRuntime !== "string" || app.stripeRuntime === target.runtime));
   const disposition = classifyMemberStripeEvent(identity, target, localApplication);
   if (!localApplication || disposition === "quarantine_unmatched") {
-    return quarantineStripeEvent(db, eventId, digest, event);
+    return quarantineStripeEvent(db, eventId, digest2, event);
   }
   const patch = webhookPatch(event, String(app.status ?? ""));
   let next = app;
@@ -4773,7 +4773,7 @@ async function ingestWebhook(req, env, ctx) {
       });
     }
   }
-  const stored = await storeStripeReceipt(db, { eventId, digest, event, disposition, matched: true });
+  const stored = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition, matched: true });
   if (stored === "collision") {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
@@ -5029,8 +5029,8 @@ async function upcomingEvents(env) {
   const res = await cal.availability.upcoming();
   return res.events.map((e) => ({ eventId: e.eventId, status: e.status, startAt: e.startAt, endAt: e.endAt }));
 }
-function toReconcile(rows4) {
-  return rows4.map((m) => ({
+function toReconcile(rows6) {
+  return rows6.map((m) => ({
     id: String(m.id),
     applicationId: String(m.applicationId),
     googleEventId: typeof m.googleEventId === "string" ? m.googleEventId : null,
@@ -5052,12 +5052,12 @@ var handleAdminMeetings = async (req, url, env, ctx) => {
   const query = await db.query({
     meetings: { $: { where: all ? {} : { status: "scheduled" }, order: { startAt: "asc" }, limit: 500 } }
   });
-  let rows4 = Array.isArray(query.meetings) ? query.meetings : [];
-  if (Number.isFinite(from)) rows4 = rows4.filter((m) => Number(m.startAt ?? 0) >= from);
-  if (Number.isFinite(to)) rows4 = rows4.filter((m) => Number(m.startAt ?? 0) <= to);
+  let rows6 = Array.isArray(query.meetings) ? query.meetings : [];
+  if (Number.isFinite(from)) rows6 = rows6.filter((m) => Number(m.startAt ?? 0) >= from);
+  if (Number.isFinite(to)) rows6 = rows6.filter((m) => Number(m.startAt ?? 0) <= to);
   let decisions = [];
   try {
-    decisions = reconcileMeetings(toReconcile(rows4), await upcomingEvents(env), Date.now());
+    decisions = reconcileMeetings(toReconcile(rows6), await upcomingEvents(env), Date.now());
   } catch {
   }
   const patched = /* @__PURE__ */ new Map();
@@ -5084,7 +5084,7 @@ var handleAdminMeetings = async (req, url, env, ctx) => {
   };
   const group = (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
   const timezone = resolveScheduling(group?.schedulingJson).timezone;
-  const meetings = rows4.map((m) => ({ ...m, ...patched.get(String(m.id)) ?? {}, applicant: applicantOf(m) })).filter((m) => all || m.status === "scheduled");
+  const meetings = rows6.map((m) => ({ ...m, ...patched.get(String(m.id)) ?? {}, applicant: applicantOf(m) })).filter((m) => all || m.status === "scheduled");
   return json({ meetings, adopted: decisions.length, timezone });
 };
 
@@ -5105,16 +5105,16 @@ var crmDeps2 = (db, ctx) => ({
 });
 var handleAdminCrmSync = async (req, url, env, ctx) => {
   if (req.method !== "POST" || url.pathname !== "/api/admin/crm/sync") return null;
-  const gate10 = await adminGate(req, env, ctx);
-  if (gate10 instanceof Response) return gate10;
-  const result = await backfillCrm(crmDeps2(gate10.db, ctx));
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const result = await backfillCrm(crmDeps2(gate12.db, ctx));
   return json({ ok: true, ...result });
 };
 var handleAdminPeople = async (req, url, env, ctx) => {
   if (req.method !== "GET" || url.pathname !== "/api/admin/people") return null;
-  const gate10 = await adminGate(req, env, ctx);
-  if (gate10 instanceof Response) return gate10;
-  const { db } = gate10;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db } = gate12;
   const sk = await getVaultSecret(db, "clerk_secret_key");
   const [data, roleList] = await Promise.all([
     db.query({
@@ -5160,16 +5160,16 @@ var handleAdminPeople = async (req, url, env, ctx) => {
       });
     }
   }
-  const rows4 = [...people.values()].sort(
+  const rows6 = [...people.values()].sort(
     (x, y) => (y.application?.createdAt ?? -1) - (x.application?.createdAt ?? -1)
   );
-  return json({ people: rows4 });
+  return json({ people: rows6 });
 };
 var handleAdminPeopleAccess = async (req, url, env, ctx) => {
   if (req.method !== "GET" || url.pathname !== "/api/admin/people/access") return null;
-  const gate10 = await adminGate(req, env, ctx);
-  if (gate10 instanceof Response) return gate10;
-  const { db } = gate10;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db } = gate12;
   const targetId = url.searchParams.get("userId") ?? "";
   if (!targetId.startsWith("user_")) return json({ error: "invalid userId" }, 400);
   const sk = await getVaultSecret(db, "clerk_secret_key");
@@ -5180,9 +5180,9 @@ var handleAdminPeopleAccess = async (req, url, env, ctx) => {
 };
 var handleAdminPeopleRole = async (req, url, env, ctx) => {
   if (req.method !== "POST" || url.pathname !== "/api/admin/people/role") return null;
-  const gate10 = await adminGate(req, env, ctx);
-  if (gate10 instanceof Response) return gate10;
-  const { db, actor } = gate10;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db, actor } = gate12;
   let body;
   try {
     body = await req.json();
@@ -5218,8 +5218,8 @@ function canonical(value) {
   }
   return JSON.stringify(value) ?? "undefined";
 }
-function positiveInt(raw, fallback, max) {
-  const parsed = Number(raw);
+function positiveInt(raw2, fallback, max) {
+  const parsed = Number(raw2);
   return Number.isSafeInteger(parsed) && parsed >= 0 ? Math.min(parsed, max) : fallback;
 }
 var handleAdminClerkPrivateProfileSync = async (req, url, env, ctx) => {
@@ -5300,14 +5300,14 @@ function periodSeries(points, now, count, periodMs) {
   for (const point of points) {
     if (!Number.isFinite(point.t) || !Number.isFinite(point.v)) continue;
     if (point.t >= start && point.t <= now) {
-      const index = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
-      current[index] = (current[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
+      current[index2] = (current[index2] ?? 0) + point.v;
     } else if (point.t >= previousStart && point.t < start) {
-      const index = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
-      previous[index] = (previous[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
+      previous[index2] = (previous[index2] ?? 0) + point.v;
     }
   }
-  const labels = current.map((_, index) => new Date(start + index * periodMs).toISOString().slice(5, 10));
+  const labels = current.map((_, index2) => new Date(start + index2 * periodMs).toISOString().slice(5, 10));
   return { labels, current, previous };
 }
 function dashboardMetricData(points, now) {
@@ -5720,11 +5720,11 @@ var handleAdminGroupEmail = async (req, url, env, ctx) => {
   for (const key of EMAIL_TEMPLATE_NAMES) {
     const t = templates[key];
     const subject = typeof t?.subject === "string" ? t.subject.trim() : "";
-    const text4 = typeof t?.text === "string" ? t.text : "";
-    if (!subject || !text4.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
+    const text5 = typeof t?.text === "string" ? t.text : "";
+    if (!subject || !text5.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
     if (/[\r\n]/.test(subject) || subject.length > 200) return json({ error: `template "${key}" subject must be a single line under 200 characters` }, 400);
-    if (text4.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
-    clean[key] = { subject, text: text4, enabled: t?.enabled !== false };
+    if (text5.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
+    clean[key] = { subject, text: text5, enabled: t?.enabled !== false };
   }
   const emailish = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
   const notificationEmail = str2(body.notificationEmail).trim();
@@ -6751,6 +6751,1192 @@ var handleAdminNetworkSharedNotes = async (req, url, env, ctx) => {
   }
 };
 
+// src/network-person-registry.ts
+var TOKEN = /^[a-z0-9][a-z0-9._:-]{0,127}$/;
+var CHAPTER_ID = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+function normalizeNetworkIdentity(kind, value) {
+  const trimmed = value.trim();
+  if (kind === "email") return trimmed.toLowerCase();
+  if (kind === "phone") return trimmed.replace(/[\s().-]/g, "");
+  return trimmed;
+}
+function emailLooksReal(value) {
+  const at = value.lastIndexOf("@");
+  if (at <= 0 || at === value.length - 1) return false;
+  const domain = value.slice(at + 1).toLowerCase();
+  return !domain.endsWith(".invalid") && domain !== "example.com" && domain !== "example.test";
+}
+function validateNetworkPersonImport(input, allowedChapterIds) {
+  const errors = [];
+  if (!input || typeof input !== "object" || Array.isArray(input)) return { ok: false, errors: ["import must be an object"] };
+  const raw2 = input;
+  if (raw2.sourceKind !== "external_reimport") errors.push("sourceKind must be external_reimport");
+  if (raw2.approved !== true || raw2.isRealPerson !== true) errors.push("import must be approved and identify a real person");
+  const sourceSystem = typeof raw2.sourceSystem === "string" ? raw2.sourceSystem.trim().toLowerCase() : "";
+  const sourceRecordId = typeof raw2.sourceRecordId === "string" ? raw2.sourceRecordId.trim() : "";
+  const provenance = typeof raw2.provenance === "string" ? raw2.provenance.trim() : "";
+  const displayName = typeof raw2.displayName === "string" ? raw2.displayName.trim() : "";
+  if (!TOKEN.test(sourceSystem) || /(?:^|[._:-])(fixture|test|development|dev)(?:$|[._:-])/.test(sourceSystem)) errors.push("sourceSystem must name an approved non-development external system");
+  if (!sourceRecordId || sourceRecordId.length > 200) errors.push("sourceRecordId is required and bounded");
+  if (!provenance || provenance.length > 500) errors.push("provenance is required and bounded");
+  if (!displayName || displayName.length > 200) errors.push("displayName is required and bounded");
+  const rawConsent = raw2.consent && typeof raw2.consent === "object" && !Array.isArray(raw2.consent) ? raw2.consent : {};
+  const consentStates = ["unknown", "granted", "denied"];
+  const marketing = typeof rawConsent.marketing === "string" ? rawConsent.marketing : "";
+  const discretionary = typeof rawConsent.discretionary === "string" ? rawConsent.discretionary : "";
+  const recordedAt = Number(rawConsent.recordedAt);
+  const basis = typeof rawConsent.basis === "string" ? rawConsent.basis.trim() : "";
+  if (!consentStates.includes(marketing) || !consentStates.includes(discretionary) || !Number.isSafeInteger(recordedAt) || recordedAt <= 0 || !basis || basis.length > 500) {
+    errors.push("consent must include marketing and discretionary states, recordedAt, and a bounded basis");
+  }
+  const identities = [];
+  if (!Array.isArray(raw2.identities) || raw2.identities.length < 1 || raw2.identities.length > 8) {
+    errors.push("one to eight verified identities are required");
+  } else {
+    for (const item of raw2.identities) {
+      if (!item || typeof item !== "object" || Array.isArray(item)) {
+        errors.push("identity must be an object");
+        continue;
+      }
+      const candidate = item;
+      const kind = candidate.kind;
+      const value = typeof candidate.value === "string" ? candidate.value : "";
+      const verifiedAt = Number(candidate.verifiedAt);
+      if (kind !== "email" && kind !== "phone" && kind !== "external") {
+        errors.push("identity kind is invalid");
+        continue;
+      }
+      const normalized = normalizeNetworkIdentity(kind, value);
+      if (!normalized || normalized.length > 320 || !Number.isSafeInteger(verifiedAt) || verifiedAt <= 0) {
+        errors.push("identity value and verifiedAt are required and bounded");
+        continue;
+      }
+      if (kind === "email" && !emailLooksReal(normalized)) {
+        errors.push("development or invalid email identities cannot become Persons");
+        continue;
+      }
+      identities.push({ kind, value: normalized, verifiedAt });
+    }
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const identity of identities) {
+    const key = `${identity.kind}:${identity.value}`;
+    if (seen.has(key)) errors.push("duplicate identity in import");
+    seen.add(key);
+  }
+  const chapterLinks = [];
+  if (raw2.chapterLinks !== void 0) {
+    if (!Array.isArray(raw2.chapterLinks) || raw2.chapterLinks.length > allowedChapterIds.length) errors.push("chapterLinks are invalid or too numerous");
+    else for (const item of raw2.chapterLinks) {
+      if (!item || typeof item !== "object" || Array.isArray(item)) {
+        errors.push("chapter link must be an object");
+        continue;
+      }
+      const chapterId = typeof item.chapterId === "string" ? String(item.chapterId) : "";
+      const chapterPersonId = typeof item.chapterPersonId === "string" ? String(item.chapterPersonId).trim() : "";
+      if (!CHAPTER_ID.test(chapterId) || !allowedChapterIds.includes(chapterId) || !chapterPersonId || chapterPersonId.length > 200) errors.push("chapter link is outside the configured network");
+      else chapterLinks.push({ chapterId, chapterPersonId });
+    }
+  }
+  if (errors.length) return { ok: false, errors };
+  return { ok: true, errors: [], value: {
+    sourceKind: "external_reimport",
+    sourceSystem,
+    sourceRecordId,
+    provenance,
+    approved: true,
+    isRealPerson: true,
+    displayName,
+    consent: {
+      marketing,
+      discretionary,
+      recordedAt,
+      basis
+    },
+    identities,
+    ...chapterLinks.length ? { chapterLinks } : {}
+  } };
+}
+async function sha256(value) {
+  const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
+  return [...new Uint8Array(bytes)].map((part) => part.toString(16).padStart(2, "0")).join("");
+}
+async function networkIdentityClaim(input) {
+  const normalized = normalizeNetworkIdentity(input.kind, input.value);
+  const digest2 = await sha256(`${input.kind}\0${normalized}`);
+  const hint = input.kind === "email" ? `${normalized.slice(0, 1)}***@${normalized.split("@")[1]}` : input.kind === "phone" ? `***${normalized.slice(-4)}` : void 0;
+  return { id: `identity_${digest2}`, kind: input.kind, value: normalized, ...hint ? { hint } : {}, verifiedAt: input.verifiedAt };
+}
+async function networkSourceKey(sourceSystem, sourceRecordId) {
+  return `alias_${await sha256(`${sourceSystem}\0${sourceRecordId}`)}`;
+}
+async function networkChapterLinkId(personId, chapterId, chapterPersonId) {
+  return `chapter_person_${await sha256(`${personId}\0${chapterId}\0${chapterPersonId}`)}`;
+}
+function projectNetworkContactPolicy(policy, links) {
+  return links.map((link) => ({ ...link, contactPolicy: { ...policy } }));
+}
+function canonicalNetworkPersonId(personId, persons) {
+  const byId = new Map(persons.map((person) => [person.id, person]));
+  const seen = /* @__PURE__ */ new Set();
+  let current = personId;
+  while (true) {
+    if (seen.has(current)) return null;
+    seen.add(current);
+    const person = byId.get(current);
+    if (!person) return null;
+    if (!person.mergedIntoId) return person.id;
+    current = person.mergedIntoId;
+  }
+}
+
+// src/network-person-store.ts
+var NetworkPersonRegistryError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+  code;
+};
+var rows4 = (value) => Array.isArray(value) ? value : [];
+async function loadNetworkPersonRegistry(db) {
+  const result = await db.query({
+    networkPersons: { $: { order: { updatedAt: "desc" }, limit: 1e3 } },
+    networkIdentityClaims: { $: { limit: 1e3 } },
+    networkPersonAliases: { $: { order: { updatedAt: "desc" }, limit: 1e3 } },
+    networkChapterPersonLinks: { $: { limit: 1e3 } },
+    networkPersonEvents: { $: { order: { createdAt: "desc" }, limit: 1e3 } }
+  });
+  return {
+    persons: rows4(result.networkPersons),
+    claims: rows4(result.networkIdentityClaims),
+    aliases: rows4(result.networkPersonAliases),
+    links: rows4(result.networkChapterPersonLinks),
+    events: rows4(result.networkPersonEvents)
+  };
+}
+var eventOp = (kind, mutationId, actor, now, detail, ids = {}) => ({
+  t: "update",
+  ns: "networkPersonEvents",
+  id: `network_person_event:${mutationId}`,
+  attrs: { id: `network_person_event:${mutationId}`, kind, actorId: actor.id, ...ids, mutationId, detail, createdAt: now }
+});
+var defaultPolicy = (now, consent) => ({
+  marketingSuppressed: consent.marketing !== "granted",
+  discretionarySuppressed: consent.discretionary !== "granted",
+  updatedAt: now
+});
+var isGuardConflict = (error) => error instanceof Error && error.code === "transact_guard_failed";
+async function linkOps(personId, links, now) {
+  return Promise.all(links.map(async (link) => {
+    const id = await networkChapterLinkId(personId, link.chapterId, link.chapterPersonId);
+    return { t: "update", ns: "networkChapterPersonLinks", id, attrs: { id, personId, chapterId: link.chapterId, chapterPersonId: link.chapterPersonId, state: "shadow", createdAt: now } };
+  }));
+}
+async function ambiguousAlias(db, input, aliasId, claims, candidates, mutationId, actor, now) {
+  const alias = {
+    id: aliasId,
+    sourceSystem: input.sourceSystem,
+    sourceRecordId: input.sourceRecordId,
+    sourceKey: aliasId,
+    displayName: input.displayName,
+    provenance: input.provenance,
+    consent: input.consent,
+    status: "ambiguous",
+    candidatePersonIds: candidates,
+    identityClaims: claims,
+    chapterLinks: [...input.chapterLinks ?? []],
+    revision: 1,
+    createdAt: now,
+    updatedAt: now
+  };
+  await db.transact([
+    { t: "update", ns: "networkPersonAliases", id: alias.id, attrs: { ...alias } },
+    eventOp("import_queued_ambiguous", mutationId, actor, now, { candidateCount: candidates.length, sourceSystem: input.sourceSystem }, { aliasId })
+  ], { mutationId, guards: [{ ns: "networkPersonAliases", id: alias.id, exists: false }] });
+  return { status: "ambiguous", alias };
+}
+async function importNetworkPerson(db, input, mutationId, actor, now = Date.now()) {
+  const aliasId = await networkSourceKey(input.sourceSystem, input.sourceRecordId);
+  let state = await loadNetworkPersonRegistry(db);
+  const replay = state.aliases.find((alias2) => alias2.id === aliasId);
+  if (replay) return { status: replay.status, alias: replay, replayed: true };
+  const claims = await Promise.all(input.identities.map(networkIdentityClaim));
+  const candidates = [...new Set(claims.flatMap((claim) => state.claims.filter((row) => row.id === claim.id).map((row) => row.personId)))];
+  if (candidates.length) return ambiguousAlias(db, input, aliasId, claims, candidates, mutationId, actor, now);
+  const personId = `person_${aliasId.slice("alias_".length)}`;
+  const person = { id: personId, displayName: input.displayName, state: "active", contactPolicy: defaultPolicy(now, input.consent), revision: 1, createdAt: now, updatedAt: now };
+  const alias = {
+    id: aliasId,
+    sourceSystem: input.sourceSystem,
+    sourceRecordId: input.sourceRecordId,
+    sourceKey: aliasId,
+    displayName: input.displayName,
+    provenance: input.provenance,
+    consent: input.consent,
+    status: "linked",
+    personId,
+    identityClaims: claims,
+    chapterLinks: [...input.chapterLinks ?? []],
+    revision: 1,
+    createdAt: now,
+    updatedAt: now
+  };
+  const claimOps = claims.map((claim) => ({ t: "update", ns: "networkIdentityClaims", id: claim.id, attrs: { ...claim, personId, createdAt: now } }));
+  const ops = [
+    { t: "update", ns: "networkPersons", id: personId, attrs: { ...person } },
+    { t: "update", ns: "networkPersonAliases", id: aliasId, attrs: { ...alias } },
+    ...claimOps,
+    ...await linkOps(personId, input.chapterLinks ?? [], now),
+    eventOp("person_imported", mutationId, actor, now, { sourceSystem: input.sourceSystem, identityCount: claims.length }, { personId, aliasId })
+  ];
+  try {
+    await db.transact(ops, { mutationId, guards: [
+      { ns: "networkPersonAliases", id: aliasId, exists: false },
+      ...claims.map((claim) => ({ ns: "networkIdentityClaims", id: claim.id, exists: false }))
+    ] });
+    return { status: "linked", alias, person };
+  } catch (error) {
+    if (!isGuardConflict(error)) throw error;
+    state = await loadNetworkPersonRegistry(db);
+    const existing = state.aliases.find((item) => item.id === aliasId);
+    if (existing) return { status: existing.status, alias: existing, replayed: true };
+    const raced = [...new Set(claims.flatMap((claim) => state.claims.filter((row) => row.id === claim.id).map((row) => row.personId)))];
+    if (!raced.length) throw error;
+    return ambiguousAlias(db, input, aliasId, claims, raced, `${mutationId}:review`, actor, now);
+  }
+}
+async function reviewNetworkPersonAlias(db, input, mutationId, actor, now = Date.now()) {
+  const state = await loadNetworkPersonRegistry(db);
+  const alias = state.aliases.find((row) => row.id === input.aliasId);
+  if (!alias) throw new NetworkPersonRegistryError("alias_not_found", "source alias not found");
+  if (alias.revision !== input.expectedRevision || alias.status !== "ambiguous") throw new NetworkPersonRegistryError("stale_review", "source alias changed; reload before reviewing");
+  if (input.decision === "exclude") {
+    const next2 = { ...alias, status: "excluded", revision: alias.revision + 1, updatedAt: now };
+    await db.transact([
+      { t: "update", ns: "networkPersonAliases", id: alias.id, attrs: { ...next2 } },
+      eventOp("alias_excluded", mutationId, actor, now, { sourceSystem: alias.sourceSystem }, { aliasId: alias.id })
+    ], { mutationId, guards: [{ ns: "networkPersonAliases", id: alias.id, exists: true, equals: { revision: alias.revision, status: "ambiguous" } }] });
+    return next2;
+  }
+  const canonicalId = input.personId ? canonicalNetworkPersonId(input.personId, state.persons) : null;
+  if (!canonicalId || canonicalId !== input.personId) throw new NetworkPersonRegistryError("person_not_active", "link target must be an active canonical Person");
+  const conflicting = alias.identityClaims.find((claim) => state.claims.some((row) => row.id === claim.id && row.personId !== canonicalId));
+  if (conflicting) throw new NetworkPersonRegistryError("identity_conflict", "verified identity belongs to another Person; merge or choose that Person explicitly");
+  const missing = alias.identityClaims.filter((claim) => !state.claims.some((row) => row.id === claim.id));
+  const { candidatePersonIds: _candidatePersonIds, ...aliasWithoutCandidates } = alias;
+  const next = { ...aliasWithoutCandidates, status: "linked", personId: canonicalId, revision: alias.revision + 1, updatedAt: now };
+  await db.transact([
+    { t: "update", ns: "networkPersonAliases", id: alias.id, attrs: { ...next } },
+    { t: "retract", ns: "networkPersonAliases", id: alias.id, attrs: ["candidatePersonIds"] },
+    ...missing.map((claim) => ({ t: "update", ns: "networkIdentityClaims", id: claim.id, attrs: { ...claim, personId: canonicalId, createdAt: now } })),
+    ...await linkOps(canonicalId, alias.chapterLinks, now),
+    eventOp("alias_linked", mutationId, actor, now, { identityCount: alias.identityClaims.length }, { personId: canonicalId, aliasId: alias.id })
+  ], { mutationId, guards: [
+    { ns: "networkPersonAliases", id: alias.id, exists: true, equals: { revision: alias.revision, status: "ambiguous" } },
+    ...missing.map((claim) => ({ ns: "networkIdentityClaims", id: claim.id, exists: false }))
+  ] });
+  return next;
+}
+async function mergeNetworkPersons(db, input, mutationId, actor, now = Date.now()) {
+  const state = await loadNetworkPersonRegistry(db);
+  const source = state.persons.find((person) => person.id === input.sourcePersonId);
+  const target = state.persons.find((person) => person.id === input.targetPersonId);
+  if (!source || !target || source.id === target.id || source.state !== "active" || target.state !== "active") throw new NetworkPersonRegistryError("invalid_merge", "merge requires two distinct active Persons");
+  if (source.revision !== input.expectedRevision || target.revision !== input.expectedTargetRevision || canonicalNetworkPersonId(target.id, state.persons) !== target.id) {
+    throw new NetworkPersonRegistryError("stale_merge", "Person changed; reload before merging");
+  }
+  const sourceNext = { ...source, state: "merged", mergedIntoId: target.id, revision: source.revision + 1, updatedAt: now };
+  const targetNext = {
+    ...target,
+    contactPolicy: {
+      marketingSuppressed: source.contactPolicy.marketingSuppressed || target.contactPolicy.marketingSuppressed,
+      discretionarySuppressed: source.contactPolicy.discretionarySuppressed || target.contactPolicy.discretionarySuppressed,
+      ...target.contactPolicy.reason || source.contactPolicy.reason ? { reason: target.contactPolicy.reason ?? source.contactPolicy.reason } : {},
+      updatedAt: now
+    },
+    revision: target.revision + 1,
+    updatedAt: now
+  };
+  await db.transact([
+    { t: "update", ns: "networkPersons", id: source.id, attrs: { ...sourceNext } },
+    { t: "update", ns: "networkPersons", id: target.id, attrs: { ...targetNext } },
+    eventOp("persons_merged", mutationId, actor, now, { targetPersonId: target.id }, { personId: source.id })
+  ], { mutationId, guards: [
+    { ns: "networkPersons", id: source.id, exists: true, equals: { revision: source.revision, state: "active" } },
+    { ns: "networkPersons", id: target.id, exists: true, equals: { revision: target.revision, state: "active" } }
+  ] });
+  return { source: sourceNext, target: targetNext };
+}
+async function unmergeNetworkPerson(db, input, mutationId, actor, now = Date.now()) {
+  const state = await loadNetworkPersonRegistry(db);
+  const person = state.persons.find((row) => row.id === input.personId);
+  if (!person || person.state !== "merged" || person.revision !== input.expectedRevision) throw new NetworkPersonRegistryError("stale_unmerge", "merged Person changed; reload before unmerging");
+  const next = { ...person, state: "active", revision: person.revision + 1, updatedAt: now };
+  delete next.mergedIntoId;
+  await db.transact([
+    { t: "update", ns: "networkPersons", id: person.id, attrs: { state: "active", revision: next.revision, updatedAt: now } },
+    { t: "retract", ns: "networkPersons", id: person.id, attrs: ["mergedIntoId"] },
+    eventOp("person_unmerged", mutationId, actor, now, {}, { personId: person.id })
+  ], { mutationId, guards: [{ ns: "networkPersons", id: person.id, exists: true, equals: { revision: person.revision, state: "merged", mergedIntoId: person.mergedIntoId } }] });
+  return next;
+}
+async function suppressNetworkPerson(db, input, mutationId, actor, now = Date.now()) {
+  const state = await loadNetworkPersonRegistry(db);
+  const person = state.persons.find((row) => row.id === input.personId);
+  if (!person || person.state !== "active" || canonicalNetworkPersonId(person.id, state.persons) !== person.id || person.revision !== input.expectedRevision) {
+    throw new NetworkPersonRegistryError("stale_suppression", "active canonical Person changed; reload before updating suppression");
+  }
+  const policy = { marketingSuppressed: input.marketingSuppressed, discretionarySuppressed: input.discretionarySuppressed, ...input.reason ? { reason: input.reason } : {}, updatedAt: now };
+  const next = { ...person, contactPolicy: policy, revision: person.revision + 1, updatedAt: now };
+  await db.transact([
+    { t: "update", ns: "networkPersons", id: person.id, attrs: { ...next } },
+    eventOp("contact_suppression_changed", mutationId, actor, now, { marketingSuppressed: policy.marketingSuppressed, discretionarySuppressed: policy.discretionarySuppressed }, { personId: person.id })
+  ], { mutationId, guards: [{ ns: "networkPersons", id: person.id, exists: true, equals: { revision: person.revision } }] });
+  return next;
+}
+
+// src/network-person-reveal.ts
+async function revealNetworkPersonRegistryRecord(db, input, mutationId, actor, now = Date.now()) {
+  const reason = input.reason.trim();
+  if (!reason || reason.length > 500) {
+    throw new NetworkPersonRegistryError("invalid_reveal", "a bounded reveal reason is required");
+  }
+  const state = await loadNetworkPersonRegistry(db);
+  const target = input.kind === "person" ? state.persons.find((row) => row.id === input.id) : state.aliases.find((row) => row.id === input.id);
+  if (!target) throw new NetworkPersonRegistryError("reveal_not_found", "registry record not found");
+  const ids = input.kind === "person" ? { personId: input.id } : { aliasId: input.id };
+  const event = {
+    t: "update",
+    ns: "networkPersonEvents",
+    id: `network_person_event:${mutationId}`,
+    attrs: {
+      id: `network_person_event:${mutationId}`,
+      kind: "pii_revealed",
+      actorId: actor.id,
+      ...ids,
+      mutationId,
+      detail: { targetKind: input.kind, reason },
+      createdAt: now
+    }
+  };
+  await db.transact([event], {
+    mutationId,
+    guards: [{ ns: "networkPersonEvents", id: `network_person_event:${mutationId}`, exists: false }]
+  });
+  return input.kind === "person" ? { kind: "person", person: target, identities: state.claims.filter((claim) => claim.personId === input.id) } : { kind: "alias", alias: target };
+}
+
+// src/worker-routes-network-person-registry.ts
+var PATH2 = "/api/admin/network-person-registry";
+var MAX_BODY2 = 32e3;
+var MUTATION_ID4 = /^[A-Za-z0-9_-]{16,128}$/;
+function redactedName(displayName) {
+  return displayName.split(/\s+/).filter(Boolean).map((part) => `${part[0]?.toUpperCase() ?? ""}\u2026`).join(" ");
+}
+var redactedLink = (link) => ({
+  id: link.id,
+  personId: link.personId,
+  chapterId: link.chapterId,
+  state: link.state,
+  createdAt: link.createdAt
+});
+var safePolicy = (policy) => ({
+  marketingSuppressed: policy.marketingSuppressed,
+  discretionarySuppressed: policy.discretionarySuppressed,
+  hasReason: Boolean(policy.reason),
+  updatedAt: policy.updatedAt
+});
+var safeAlias = (alias) => ({
+  id: alias.id,
+  sourceSystem: alias.sourceSystem,
+  displayNameHint: redactedName(alias.displayName),
+  status: alias.status,
+  personId: alias.personId ?? null,
+  candidatePersonIds: alias.candidatePersonIds ?? [],
+  consent: {
+    marketing: alias.consent.marketing,
+    discretionary: alias.consent.discretionary,
+    recordedAt: alias.consent.recordedAt,
+    hasBasis: Boolean(alias.consent.basis)
+  },
+  identityClaims: alias.identityClaims.map(({ id, kind, hint, verifiedAt }) => ({ id, kind, hint: hint ?? null, verifiedAt })),
+  chapterIds: [...new Set(alias.chapterLinks.map((link) => link.chapterId))],
+  revision: alias.revision,
+  updatedAt: alias.updatedAt
+});
+var safePerson = (person) => ({
+  id: person.id,
+  displayNameHint: redactedName(person.displayName),
+  state: person.state,
+  mergedIntoId: person.mergedIntoId ?? null,
+  revision: person.revision,
+  contactPolicy: safePolicy(person.contactPolicy)
+});
+var positiveRevision = (value) => {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
+};
+async function gate10(req, env, ctx) {
+  const db = ctx.makeDb(env);
+  const user = await ctx.verifyUser(req, env);
+  if (!user) return { response: json({ error: "unauthorized" }, 401) };
+  if (!await ctx.isSuperAdminEmail(db, user.email)) return { response: json({ error: "forbidden" }, 403) };
+  return { db, user };
+}
+function registryError(error) {
+  if (error instanceof NetworkPersonRegistryError) {
+    const status = error.code.includes("stale") || error.code === "identity_conflict" ? 409 : error.code.endsWith("not_found") ? 404 : 400;
+    return json({ error: error.message, code: error.code }, status);
+  }
+  if (error instanceof Error && error.code === "transact_guard_failed") {
+    return json({ error: "registry changed; reload and retry", code: "stale_write" }, 409);
+  }
+  return null;
+}
+var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
+  if (url.pathname !== PATH2) return null;
+  if (!ctx.chapter.networkPersonRegistry) return json({ error: "not found" }, 404);
+  if (req.method !== "GET" && req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  if (req.method === "POST" && Number(req.headers.get("content-length") ?? 0) > MAX_BODY2) {
+    return json({ error: "request is too large" }, 413);
+  }
+  const got = await gate10(req, env, ctx);
+  if ("response" in got) return got.response;
+  const db = got.db;
+  if (req.method === "POST") {
+    let body;
+    try {
+      const text5 = await req.text();
+      if (new TextEncoder().encode(text5).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
+      const parsed = JSON.parse(text5);
+      if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid");
+      body = parsed;
+    } catch {
+      return json({ error: "invalid JSON body" }, 400);
+    }
+    const command = typeof body.command === "string" ? body.command : "";
+    const mutationId = typeof body.mutationId === "string" ? body.mutationId : "";
+    const input = body.input && typeof body.input === "object" && !Array.isArray(body.input) ? body.input : {};
+    if (!MUTATION_ID4.test(mutationId)) return json({ error: "a valid mutationId is required" }, 400);
+    const actionActor = { id: got.user.userId };
+    try {
+      if (command === "import") {
+        const validated = validateNetworkPersonImport(input, ctx.chapter.networkPersonRegistry.chapterIds);
+        if (!validated.ok || !validated.value) return json({ error: "invalid import", details: validated.errors }, 400);
+        const result = await importNetworkPerson(db, validated.value, mutationId, actionActor);
+        return json({
+          result: {
+            status: result.status,
+            alias: safeAlias(result.alias),
+            ..."person" in result && result.person ? { person: safePerson(result.person) } : {},
+            ..."replayed" in result ? { replayed: result.replayed } : {}
+          }
+        }, 201);
+      }
+      if (command === "review") {
+        if (input.decision !== "link" && input.decision !== "exclude") return json({ error: "review decision must be link or exclude" }, 400);
+        const expectedRevision = positiveRevision(input.expectedRevision);
+        if (!expectedRevision) return json({ error: "expectedRevision is required" }, 400);
+        if (input.decision === "link" && typeof input.personId !== "string") return json({ error: "personId is required when linking" }, 400);
+        const result = await reviewNetworkPersonAlias(db, {
+          aliasId: typeof input.aliasId === "string" ? input.aliasId : "",
+          expectedRevision,
+          decision: input.decision,
+          ...typeof input.personId === "string" ? { personId: input.personId } : {}
+        }, mutationId, actionActor);
+        return json({ result: safeAlias(result) });
+      }
+      if (command === "merge") {
+        const expectedRevision = positiveRevision(input.expectedRevision);
+        const expectedTargetRevision = positiveRevision(input.expectedTargetRevision);
+        if (!expectedRevision || !expectedTargetRevision) return json({ error: "source and target revisions are required" }, 400);
+        const result = await mergeNetworkPersons(db, {
+          sourcePersonId: typeof input.sourcePersonId === "string" ? input.sourcePersonId : "",
+          targetPersonId: typeof input.targetPersonId === "string" ? input.targetPersonId : "",
+          expectedRevision,
+          expectedTargetRevision
+        }, mutationId, actionActor);
+        return json({ result: { source: safePerson(result.source), target: safePerson(result.target) } });
+      }
+      if (command === "unmerge") {
+        const expectedRevision = positiveRevision(input.expectedRevision);
+        if (!expectedRevision) return json({ error: "expectedRevision is required" }, 400);
+        const result = await unmergeNetworkPerson(db, {
+          personId: typeof input.personId === "string" ? input.personId : "",
+          expectedRevision
+        }, mutationId, actionActor);
+        return json({ result: safePerson(result) });
+      }
+      if (command === "suppression") {
+        const expectedRevision = positiveRevision(input.expectedRevision);
+        if (!expectedRevision || typeof input.marketingSuppressed !== "boolean" || typeof input.discretionarySuppressed !== "boolean") {
+          return json({ error: "expectedRevision and both suppression flags are required" }, 400);
+        }
+        const reason = typeof input.reason === "string" ? input.reason.trim() : "";
+        if (reason.length > 500) return json({ error: "suppression reason is too long" }, 400);
+        const result = await suppressNetworkPerson(db, {
+          personId: typeof input.personId === "string" ? input.personId : "",
+          expectedRevision,
+          marketingSuppressed: input.marketingSuppressed,
+          discretionarySuppressed: input.discretionarySuppressed,
+          ...reason ? { reason } : {}
+        }, mutationId, actionActor);
+        return json({ result: safePerson(result) });
+      }
+      if (command === "reveal") {
+        if (input.kind !== "person" && input.kind !== "alias") return json({ error: "reveal kind must be person or alias" }, 400);
+        const result = await revealNetworkPersonRegistryRecord(db, {
+          kind: input.kind,
+          id: typeof input.id === "string" ? input.id : "",
+          reason: typeof input.reason === "string" ? input.reason : ""
+        }, mutationId, actionActor);
+        return json({ sensitive: true, result });
+      }
+      return json({ error: "unknown registry command" }, 400);
+    } catch (error) {
+      const response = registryError(error);
+      if (response) return response;
+      throw error;
+    }
+  }
+  const state = await loadNetworkPersonRegistry(db);
+  const persons = state.persons.map((person) => {
+    const links = state.links.filter((link) => link.personId === person.id);
+    const canonicalId = canonicalNetworkPersonId(person.id, state.persons);
+    const canonical2 = state.persons.find((candidate) => candidate.id === canonicalId) ?? person;
+    return {
+      id: person.id,
+      displayNameHint: redactedName(person.displayName),
+      state: person.state,
+      canonicalPersonId: canonicalId,
+      mergedIntoId: person.mergedIntoId ?? null,
+      revision: person.revision,
+      contactPolicy: safePolicy(person.contactPolicy),
+      identityClaims: state.claims.filter((claim) => claim.personId === person.id).map(({ id, kind, hint, verifiedAt }) => ({ id, kind, hint: hint ?? null, verifiedAt })),
+      chapterLinks: links.map(redactedLink),
+      chapterProjections: projectNetworkContactPolicy(canonical2.contactPolicy, links.map(redactedLink)).map(({ contactPolicy, ...projection }) => ({ ...projection, contactPolicy: safePolicy(contactPolicy) }))
+    };
+  });
+  const aliases = state.aliases.map(safeAlias);
+  return json({
+    version: 1,
+    mode: "shadow",
+    writable: true,
+    authoritativeForChapterOperation: false,
+    configuredChapterIds: ctx.chapter.networkPersonRegistry.chapterIds,
+    persons,
+    aliases,
+    reviewQueue: aliases.filter((alias) => alias.status === "ambiguous"),
+    excluded: aliases.filter((alias) => alias.status === "excluded"),
+    recentEvents: state.events.slice(0, 100).map((event) => ({
+      id: event.id,
+      kind: event.kind,
+      personId: event.personId ?? null,
+      aliasId: event.aliasId ?? null,
+      actorId: event.actorId,
+      mutationId: event.mutationId,
+      createdAt: event.createdAt
+    }))
+  });
+};
+
+// src/worker-routes-network-commercial.ts
+var import_stripe3 = require("@odla-ai/stripe");
+
+// src/config-network-commercial.ts
+function networkCommercialSourceKey(source) {
+  return [source.stripeMode, source.appId, source.environment, source.dataEnvironment, source.runtime, source.chapterId].join(":");
+}
+
+// src/network-commercial.ts
+var raw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var text3 = (value) => typeof value === "string" && value.length > 0 && value.length <= 255 ? value : void 0;
+var integer2 = (value) => typeof value === "number" && Number.isSafeInteger(value) ? value : void 0;
+var bool = (value) => typeof value === "boolean" ? value : void 0;
+var providerId = (value, prefix) => {
+  const valueText = text3(value);
+  return valueText && (!prefix || valueText.startsWith(prefix)) ? valueText : void 0;
+};
+function metadataCandidates(object) {
+  const parent = raw(object.parent);
+  const subscriptionDetails = raw(object.subscription_details);
+  const parentSubscription = raw(parent.subscription_details);
+  return [raw(object.metadata), raw(subscriptionDetails.metadata), raw(parentSubscription.metadata)];
+}
+function metadataValue(candidates, key) {
+  return candidates.map((candidate) => text3(candidate[key])).find(Boolean);
+}
+function refId(value, prefix) {
+  if (typeof value === "string") return providerId(value, prefix);
+  return providerId(raw(value).id, prefix);
+}
+function subscriptionRef(object) {
+  return refId(object.subscription, "sub_") ?? refId(raw(object.subscription_details).subscription, "sub_") ?? refId(raw(raw(object.parent).subscription_details).subscription, "sub_");
+}
+function firstPrice(object) {
+  const data = raw(object.items).data;
+  const item = Array.isArray(data) ? raw(data[0]) : {};
+  const priceId = refId(item.price, "price_");
+  const quantity = integer2(item.quantity);
+  return { ...priceId ? { priceId } : {}, ...quantity !== void 0 ? { quantity } : {} };
+}
+function normalizeNetworkCommercialStripeEvent(input, digest2) {
+  const event = raw(input);
+  const eventId = providerId(event.id, "evt_") ?? "";
+  const eventType = text3(event.type) ?? "";
+  const object = raw(raw(event.data).object);
+  const objectId = providerId(object.id) ?? "";
+  const candidates = metadataCandidates(object);
+  const identity = {};
+  const identityKeys = {
+    appId: "odlaAppId",
+    chapterId: "chapterId",
+    environment: "odlaEnvironment",
+    dataEnvironment: "odlaDataEnvironment",
+    runtime: "odlaRuntime"
+  };
+  for (const [target, source] of Object.entries(identityKeys)) {
+    const value = metadataValue(candidates, source);
+    if (value) identity[target] = value;
+  }
+  let objectKind = "ignored";
+  if (eventType.startsWith("customer.subscription.")) objectKind = "subscription";
+  else if (eventType.startsWith("customer.")) objectKind = "customer";
+  else if (eventType.startsWith("invoice.")) objectKind = "invoice";
+  else if (eventType.startsWith("refund.")) objectKind = "refund";
+  else if (eventType === "charge.refunded") objectKind = "refund";
+  const customerId = refId(object.customer, "cus_");
+  const subscriptionId = objectKind === "subscription" ? providerId(objectId, "sub_") : subscriptionRef(object);
+  const invoiceId = objectKind === "invoice" ? providerId(objectId, "in_") : refId(object.invoice, "in_");
+  const chargeId = eventType === "charge.refunded" ? providerId(objectId, "ch_") : refId(object.charge, "ch_");
+  const paymentIntentId = refId(object.payment_intent, "pi_");
+  const price = firstPrice(object);
+  const amountCents = integer2(eventType === "charge.refunded" ? object.amount_refunded : object.amount);
+  const currency = text3(object.currency)?.toLowerCase();
+  const status = text3(object.status);
+  return {
+    eventId,
+    digest: digest2,
+    eventType,
+    eventCreated: integer2(event.created) ?? 0,
+    livemode: event.livemode === true,
+    objectKind,
+    objectId,
+    identity,
+    ...metadataValue(candidates, "applicationId") ? { applicationId: metadataValue(candidates, "applicationId") } : {},
+    ...metadataValue(candidates, "personId") ? { personId: metadataValue(candidates, "personId") } : {},
+    ...metadataValue(candidates, "membershipId") ? { membershipId: metadataValue(candidates, "membershipId") } : {},
+    ...customerId ? { customerId } : {},
+    ...subscriptionId ? { subscriptionId } : {},
+    ...invoiceId ? { invoiceId } : {},
+    ...chargeId ? { chargeId } : {},
+    ...paymentIntentId ? { paymentIntentId } : {},
+    ...price,
+    ...status ? { status } : {},
+    ...currency ? { currency } : {},
+    ...amountCents !== void 0 ? { amountCents } : {},
+    ...integer2(object.amount_paid) !== void 0 ? { amountPaidCents: integer2(object.amount_paid) } : {},
+    ...integer2(object.amount_remaining) !== void 0 ? { amountRemainingCents: integer2(object.amount_remaining) } : {},
+    ...integer2(object.current_period_start) !== void 0 ? { currentPeriodStart: integer2(object.current_period_start) } : {},
+    ...integer2(object.current_period_end) !== void 0 ? { currentPeriodEnd: integer2(object.current_period_end) } : {},
+    ...bool(object.cancel_at_period_end) !== void 0 ? { cancelAtPeriodEnd: bool(object.cancel_at_period_end) } : {}
+  };
+}
+var identityFields = ["appId", "chapterId", "environment", "dataEnvironment", "runtime"];
+function directSource(fact, sources) {
+  const mode = fact.livemode ? "live" : "test";
+  const supplied = identityFields.filter((field) => fact.identity[field] !== void 0);
+  const candidates = sources.filter((source) => source.stripeMode === mode && supplied.every((field) => source[field] === fact.identity[field]));
+  if (supplied.length === identityFields.length) return candidates.length === 1 ? candidates[0] : "wrong";
+  if (supplied.length > 0 && candidates.length === 0) return "wrong";
+  return null;
+}
+var objectRefs = (fact) => [
+  fact.customerId && `customer:${fact.customerId}`,
+  fact.subscriptionId && `subscription:${fact.subscriptionId}`,
+  fact.invoiceId && `invoice:${fact.invoiceId}`,
+  fact.chargeId && `charge:${fact.chargeId}`,
+  fact.paymentIntentId && `payment_intent:${fact.paymentIntentId}`
+].filter((value) => Boolean(value));
+function ownRef(fact) {
+  if (!fact.objectId) return null;
+  if (fact.objectKind === "customer") return `customer:${fact.objectId}`;
+  if (fact.objectKind === "subscription") return `subscription:${fact.objectId}`;
+  if (fact.objectKind === "invoice") return `invoice:${fact.objectId}`;
+  if (fact.eventType.startsWith("refund.")) return `refund:${fact.objectId}`;
+  return fact.eventType === "charge.refunded" ? `charge:${fact.objectId}` : null;
+}
+var order = (left, right) => left.eventCreated - right.eventCreated || left.eventId.localeCompare(right.eventId);
+function projectNetworkCommercialEvents(input, sources) {
+  const facts2 = [...input].sort(order);
+  const exceptions = [];
+  const unique = [];
+  const digests = /* @__PURE__ */ new Map();
+  for (const fact of facts2) {
+    const prior = digests.get(fact.eventId);
+    if (prior === void 0) {
+      digests.set(fact.eventId, fact.digest);
+      unique.push(fact);
+    } else if (prior !== fact.digest) exceptions.push({ eventId: fact.eventId, kind: "collision", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+  }
+  const assignments = /* @__PURE__ */ new Map();
+  const refs = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    const direct = directSource(fact, sources);
+    if (direct && direct !== "wrong") assignments.set(fact.eventId, direct);
+  }
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const fact of unique) {
+      const assigned = assignments.get(fact.eventId);
+      if (assigned) {
+        const key = networkCommercialSourceKey(assigned);
+        for (const ref of [...objectRefs(fact), ownRef(fact)].filter((value) => Boolean(value))) {
+          const keys2 = refs.get(ref) ?? /* @__PURE__ */ new Set();
+          const before = keys2.size;
+          keys2.add(key);
+          refs.set(ref, keys2);
+          if (keys2.size !== before) changed = true;
+        }
+        continue;
+      }
+      if (directSource(fact, sources) === "wrong") continue;
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      if (keys.size !== 1) continue;
+      const candidate = sources.find((source) => networkCommercialSourceKey(source) === [...keys][0]);
+      if (candidate && directSource({ ...fact, identity: fact.identity }, [candidate]) !== "wrong") {
+        assignments.set(fact.eventId, candidate);
+        changed = true;
+      }
+    }
+  }
+  const latest = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    if (fact.objectKind === "ignored" || !fact.eventId || !fact.objectId) {
+      exceptions.push({ eventId: fact.eventId, kind: "unsupported", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const source = assignments.get(fact.eventId);
+    if (!source) {
+      const direct = directSource(fact, sources);
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      exceptions.push({ eventId: fact.eventId, kind: direct === "wrong" ? "wrong_partition" : keys.size > 1 ? "ambiguous_partition" : "unmatched_partition", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const row = { ...fact, sourceKey: networkCommercialSourceKey(source) };
+    const key = `${fact.objectKind}:${fact.objectId}`;
+    const prior = latest.get(key);
+    if (!prior || order(prior, fact) <= 0) latest.set(key, row);
+  }
+  const rows6 = [...latest.values()];
+  const customers = rows6.filter((row) => row.objectKind === "customer");
+  const subscriptions = rows6.filter((row) => row.objectKind === "subscription");
+  const invoices = rows6.filter((row) => row.objectKind === "invoice");
+  const refunds = rows6.filter((row) => row.objectKind === "refund" && row.eventType.startsWith("refund."));
+  for (const charge of rows6.filter((row) => row.eventType === "charge.refunded")) {
+    if (!refunds.some((refund) => refund.chargeId === charge.objectId)) {
+      exceptions.push({ eventId: charge.eventId, kind: "charge_refund_without_refund_object", sourceKey: charge.sourceKey, detail: { eventType: charge.eventType, objectId: charge.objectId } });
+    }
+  }
+  const totalsMap = /* @__PURE__ */ new Map();
+  const add = (row, field, amount) => {
+    if (!row.currency) return;
+    const key = `${row.sourceKey}:${row.currency}`;
+    const total = totalsMap.get(key) ?? { sourceKey: row.sourceKey, currency: row.currency, paidCents: 0, refundedCents: 0, netCents: 0 };
+    total[field] += amount;
+    total.netCents = total.paidCents - total.refundedCents;
+    totalsMap.set(key, total);
+  };
+  for (const row of invoices) add(row, "paidCents", row.amountPaidCents ?? 0);
+  for (const row of refunds) add(row, "refundedCents", row.amountCents ?? 0);
+  return { customers, subscriptions, invoices, refunds, exceptions, totals: [...totalsMap.values()].sort((a, b) => `${a.sourceKey}:${a.currency}`.localeCompare(`${b.sourceKey}:${b.currency}`)) };
+}
+
+// src/network-commercial-store.ts
+var eventRowId = (eventId) => `network-commercial-event:${eventId}`;
+var projectionId = (kind, sourceKey, providerId2) => `network-commercial:${kind}:${sourceKey}:${providerId2}`;
+var exceptionId = (eventId, kind) => `network-commercial-exception:${eventId}:${kind}`;
+var materializedNamespaces = [
+  "networkCommercialCustomers",
+  "networkCommercialSubscriptions",
+  "networkCommercialInvoices",
+  "networkCommercialRefunds"
+];
+async function rows5(db, ns) {
+  const all = [];
+  const pageSize = 500;
+  for (let offset = 0; ; offset += pageSize) {
+    const result = await db.query({ [ns]: { $: { limit: pageSize, offset } } });
+    const page = Array.isArray(result[ns]) ? result[ns] : [];
+    all.push(...page);
+    if (page.length < pageSize) return all;
+  }
+}
+async function loadNetworkCommercialProjection(db, sources) {
+  const stored = await rows5(db, "networkCommercialEvents");
+  const projection = projectNetworkCommercialEvents(stored.map((row) => row.fact), sources);
+  const persisted = await rows5(db, "networkCommercialExceptions");
+  for (const row of persisted) {
+    if (row.status !== "active" || row.kind !== "collision") continue;
+    if (projection.exceptions.some((item) => item.eventId === row.eventId && item.kind === "collision")) continue;
+    projection.exceptions.push({
+      eventId: String(row.eventId),
+      kind: "collision",
+      ...typeof row.sourceKey === "string" ? { sourceKey: row.sourceKey } : {},
+      detail: row.detail
+    });
+  }
+  return projection;
+}
+function projectionOps(projection, now) {
+  const groups = [
+    ["networkCommercialCustomers", "customer", projection.customers],
+    ["networkCommercialSubscriptions", "subscription", projection.subscriptions],
+    ["networkCommercialInvoices", "invoice", projection.invoices],
+    ["networkCommercialRefunds", "refund", projection.refunds]
+  ];
+  return groups.flatMap(([ns, kind, projected]) => projected.map((snapshot) => ({
+    t: "update",
+    ns,
+    id: projectionId(kind, snapshot.sourceKey, snapshot.objectId),
+    attrs: {
+      id: projectionId(kind, snapshot.sourceKey, snapshot.objectId),
+      providerId: snapshot.objectId,
+      sourceKey: snapshot.sourceKey,
+      status: "active",
+      snapshot,
+      eventCreated: snapshot.eventCreated,
+      updatedAt: now
+    }
+  })));
+}
+async function rebuildNetworkCommercialProjection(db, sources, mutationId, now = Date.now()) {
+  const projection = await loadNetworkCommercialProjection(db, sources);
+  const [existing, ...materialized] = await Promise.all([
+    rows5(db, "networkCommercialExceptions"),
+    ...materializedNamespaces.map((ns) => rows5(db, ns))
+  ]);
+  const activeIds = new Set(projection.exceptions.map((item) => exceptionId(item.eventId, item.kind)));
+  const projectedIds = new Set(projectionOps(projection, now).map((op) => String(op.id)));
+  const ops = [
+    ...projectionOps(projection, now),
+    ...materializedNamespaces.flatMap((ns, index2) => materialized[index2].filter((row) => row.status === "active" && !projectedIds.has(String(row.id))).map((row) => ({ t: "update", ns, id: String(row.id), attrs: { status: "inactive", updatedAt: now } }))),
+    ...existing.filter((row) => row.status === "active" && !activeIds.has(String(row.id))).map((row) => ({
+      t: "update",
+      ns: "networkCommercialExceptions",
+      id: String(row.id),
+      attrs: { status: "resolved", updatedAt: now }
+    })),
+    ...projection.exceptions.map((item) => ({
+      t: "update",
+      ns: "networkCommercialExceptions",
+      id: exceptionId(item.eventId, item.kind),
+      attrs: {
+        id: exceptionId(item.eventId, item.kind),
+        eventId: item.eventId,
+        kind: item.kind,
+        ...item.sourceKey ? { sourceKey: item.sourceKey } : {},
+        status: "active",
+        detail: item.detail,
+        updatedAt: now
+      }
+    }))
+  ];
+  if (ops.length > 0) await db.transact(ops, { mutationId });
+  return projection;
+}
+async function ingestNetworkCommercialFact(db, sources, fact, now = Date.now()) {
+  const found = await db.query({ networkCommercialEvents: { $: { where: { eventId: fact.eventId }, limit: 1 } } });
+  const existing = found.networkCommercialEvents?.[0];
+  if (existing) {
+    const projection2 = await loadNetworkCommercialProjection(db, sources);
+    if (existing.digest === fact.digest) return { status: "replayed", projection: projection2 };
+    const id2 = exceptionId(fact.eventId, "collision");
+    await db.transact([{ t: "update", ns: "networkCommercialExceptions", id: id2, attrs: {
+      id: id2,
+      eventId: fact.eventId,
+      kind: "collision",
+      status: "active",
+      detail: { eventType: fact.eventType, objectId: fact.objectId },
+      updatedAt: now
+    } }], { mutationId: `network-commercial-collision:${fact.eventId}:${fact.digest}` });
+    return { status: "collision", projection: await loadNetworkCommercialProjection(db, sources) };
+  }
+  const id = eventRowId(fact.eventId);
+  let lostRace = false;
+  let duplicate = false;
+  try {
+    const write = await db.transact([{ t: "update", ns: "networkCommercialEvents", id, attrs: {
+      id,
+      eventId: fact.eventId,
+      digest: fact.digest,
+      eventType: fact.eventType,
+      eventCreated: fact.eventCreated,
+      livemode: fact.livemode,
+      fact,
+      receivedAt: now
+    } }], {
+      mutationId: `network-commercial-ingest:${fact.eventId}:${fact.digest}`,
+      guards: [{ ns: "networkCommercialEvents", id, exists: false }]
+    });
+    duplicate = write.duplicate;
+  } catch (error) {
+    if (error.code !== "transact_guard_failed") throw error;
+    lostRace = true;
+  }
+  if (duplicate || lostRace) {
+    const raced = await db.query({ networkCommercialEvents: { $: { where: { eventId: fact.eventId }, limit: 1 } } });
+    const row = raced.networkCommercialEvents?.[0];
+    const projection2 = await loadNetworkCommercialProjection(db, sources);
+    if (row?.digest === fact.digest) return { status: "replayed", projection: projection2 };
+    const id2 = exceptionId(fact.eventId, "collision");
+    await db.transact([{ t: "update", ns: "networkCommercialExceptions", id: id2, attrs: {
+      id: id2,
+      eventId: fact.eventId,
+      kind: "collision",
+      status: "active",
+      detail: { eventType: fact.eventType, objectId: fact.objectId },
+      updatedAt: now
+    } }], { mutationId: `network-commercial-collision:${fact.eventId}:${fact.digest}` });
+    return { status: "collision", projection: await loadNetworkCommercialProjection(db, sources) };
+  }
+  const projection = await rebuildNetworkCommercialProjection(
+    db,
+    sources,
+    `network-commercial-project:${fact.eventId}:${fact.digest}`,
+    now
+  );
+  return { status: "stored", projection };
+}
+
+// src/network-commercial-reconcile.ts
+var asRaw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+async function listStripeObjects(client, path, params = {}, maxPages = 20) {
+  const objects = [];
+  let startingAfter;
+  for (let pageNumber = 0; pageNumber < maxPages; pageNumber += 1) {
+    const page = await client.request("GET", path, {
+      ...params,
+      limit: 100,
+      ...startingAfter ? { starting_after: startingAfter } : {}
+    });
+    if (!Array.isArray(page.data) || typeof page.has_more !== "boolean") {
+      throw new Error("Stripe returned an invalid commercial list response");
+    }
+    const rows6 = page.data.map(asRaw).filter((row) => row !== null);
+    if (rows6.length !== page.data.length) throw new Error("Stripe returned a malformed commercial object");
+    objects.push(...rows6);
+    if (!page.has_more) return { objects, complete: true };
+    const cursor = rows6.at(-1)?.id;
+    if (typeof cursor !== "string" || !cursor) throw new Error("Stripe pagination did not provide a cursor");
+    startingAfter = cursor;
+  }
+  return { objects, complete: false };
+}
+function facts(snapshots) {
+  const groups = [
+    ["customer.updated", snapshots.customers.objects],
+    ["customer.subscription.updated", snapshots.subscriptions.objects],
+    ["invoice.updated", snapshots.invoices.objects],
+    ["refund.updated", snapshots.refunds.objects]
+  ];
+  return groups.flatMap(([eventType, objects]) => objects.map((object) => {
+    const id = typeof object.id === "string" ? object.id : "invalid";
+    return normalizeNetworkCommercialStripeEvent({
+      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id}`,
+      type: eventType,
+      created: typeof object.created === "number" ? object.created : 0,
+      livemode: object.livemode === true,
+      data: { object }
+    }, `stripe-snapshot:${eventType}:${id}`);
+  }));
+}
+var selected = (row) => ({
+  status: row.status ?? null,
+  currency: row.currency ?? null,
+  amountCents: row.amountCents ?? null,
+  amountPaidCents: row.amountPaidCents ?? null,
+  amountRemainingCents: row.amountRemainingCents ?? null,
+  customerId: row.customerId ?? null,
+  subscriptionId: row.subscriptionId ?? null,
+  invoiceId: row.invoiceId ?? null,
+  priceId: row.priceId ?? null,
+  quantity: row.quantity ?? null,
+  applicationId: row.applicationId ?? null,
+  personId: row.personId ?? null,
+  membershipId: row.membershipId ?? null,
+  currentPeriodStart: row.currentPeriodStart ?? null,
+  currentPeriodEnd: row.currentPeriodEnd ?? null,
+  cancelAtPeriodEnd: row.cancelAtPeriodEnd ?? null
+});
+var index = (projection) => new Map(
+  [...projection.customers, ...projection.subscriptions, ...projection.invoices, ...projection.refunds].map((row) => [`${row.sourceKey}:${row.objectKind}:${row.objectId}`, row])
+);
+function reconcileStripeSnapshot(shadow, snapshots, sources) {
+  const stripe = projectNetworkCommercialEvents(facts(snapshots), sources);
+  const shadowRows = index(shadow);
+  const stripeRows = index(stripe);
+  const exceptions = [];
+  const complete = Object.values(snapshots).every((snapshot) => snapshot.complete);
+  if (!complete) exceptions.push({ kind: "stripe_snapshot_truncated", detail: {} });
+  for (const [key, row] of shadowRows) {
+    const other = stripeRows.get(key);
+    if (!other) {
+      exceptions.push({ kind: "missing_from_stripe", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+    } else if (JSON.stringify(selected(row)) !== JSON.stringify(selected(other))) {
+      exceptions.push({ kind: "object_mismatch", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: { shadow: selected(row), stripe: selected(other) } });
+    }
+  }
+  for (const [key, row] of stripeRows) {
+    if (!shadowRows.has(key)) exceptions.push({ kind: "missing_from_shadow", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+  }
+  if (JSON.stringify(shadow.totals) !== JSON.stringify(stripe.totals)) {
+    exceptions.push({ kind: "totals_mismatch", detail: { shadow: shadow.totals, stripe: stripe.totals } });
+  }
+  return {
+    ok: exceptions.length === 0,
+    complete,
+    ignoredObjects: stripe.exceptions.filter((item) => item.kind === "wrong_partition" || item.kind === "unmatched_partition").length,
+    exceptions,
+    stripeTotals: stripe.totals
+  };
+}
+
+// src/worker-routes-network-commercial.ts
+var ADMIN_PATH2 = "/api/admin/network-commercial-read-model";
+var WEBHOOK_PATH = "/api/network-commercial/stripe-webhook";
+var MAX_BODY3 = 512e3;
+var MUTATION_ID5 = /^[A-Za-z0-9_-]{16,128}$/;
+async function digest(body) {
+  const value = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(body));
+  return [...new Uint8Array(value)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+async function boundedBody(req) {
+  if (Number(req.headers.get("content-length") ?? 0) > MAX_BODY3) return null;
+  const body = await req.text();
+  return new TextEncoder().encode(body).byteLength <= MAX_BODY3 ? body : null;
+}
+async function gate11(req, env, ctx) {
+  const db = ctx.makeDb(env);
+  const user = await ctx.verifyUser(req, env);
+  if (!user) return { response: json({ error: "unauthorized" }, 401) };
+  if (!await ctx.isSuperAdminEmail(db, user.email)) return { response: json({ error: "forbidden" }, 403) };
+  return { db, user };
+}
+function safeProjection(projection) {
+  const row = (item) => ({
+    sourceKey: item.sourceKey,
+    providerId: item.objectId,
+    eventType: item.eventType,
+    eventCreated: item.eventCreated,
+    status: item.status ?? null,
+    currency: item.currency ?? null,
+    amountCents: item.amountCents ?? null,
+    amountPaidCents: item.amountPaidCents ?? null,
+    amountRemainingCents: item.amountRemainingCents ?? null,
+    customerId: item.customerId ?? null,
+    subscriptionId: item.subscriptionId ?? null,
+    invoiceId: item.invoiceId ?? null,
+    priceId: item.priceId ?? null,
+    quantity: item.quantity ?? null,
+    applicationId: item.applicationId ?? null,
+    personId: item.personId ?? null,
+    membershipId: item.membershipId ?? null,
+    currentPeriodStart: item.currentPeriodStart ?? null,
+    currentPeriodEnd: item.currentPeriodEnd ?? null,
+    cancelAtPeriodEnd: item.cancelAtPeriodEnd ?? null
+  });
+  return {
+    version: 1,
+    mode: "shadow",
+    writable: false,
+    authoritativeForCharges: false,
+    totals: projection.totals,
+    customers: projection.customers.map(row),
+    subscriptions: projection.subscriptions.map(row),
+    invoices: projection.invoices.map(row),
+    refunds: projection.refunds.map(row),
+    exceptions: projection.exceptions
+  };
+}
+var handleNetworkCommercialStripeWebhook = async (req, url, env, ctx) => {
+  if (url.pathname !== WEBHOOK_PATH) return null;
+  if (!ctx.chapter.networkCommercialReadModel) return json({ error: "not found" }, 404);
+  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const body = await boundedBody(req);
+  if (body === null) return json({ error: "request is too large" }, 413);
+  const signature = req.headers.get("stripe-signature") ?? "";
+  const db = ctx.makeDb(env);
+  let secret;
+  try {
+    secret = await db.secrets.get("network_commercial_stripe_webhook_secret");
+  } catch {
+    return json({ error: "commercial webhook is not configured" }, 503);
+  }
+  try {
+    const event = await (0, import_stripe3.constructStripeEvent)(body, signature, secret);
+    const fact = normalizeNetworkCommercialStripeEvent(event, await digest(body));
+    if (!fact.eventId || !fact.eventType || !fact.objectId) return json({ error: "Stripe event identity is invalid" }, 400);
+    const result = await ingestNetworkCommercialFact(db, ctx.chapter.networkCommercialReadModel.sources, fact);
+    if (result.status === "collision") {
+      console.error("network commercial event collision", JSON.stringify({ eventId: fact.eventId, eventType: fact.eventType }));
+    }
+    return json({ ok: true, status: result.status, eventId: fact.eventId });
+  } catch (error) {
+    if (error instanceof import_stripe3.StripeError) return json({ error: error.message, code: error.code }, 400);
+    throw error;
+  }
+};
+var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
+  if (url.pathname !== ADMIN_PATH2) return null;
+  if (!ctx.chapter.networkCommercialReadModel) return json({ error: "not found" }, 404);
+  if (req.method !== "GET" && req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const got = await gate11(req, env, ctx);
+  if ("response" in got) return got.response;
+  const db = got.db;
+  if (req.method === "POST") {
+    const body = await boundedBody(req);
+    if (body === null) return json({ error: "request is too large" }, 413);
+    let parsed;
+    try {
+      const value = JSON.parse(body);
+      if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("shape");
+      parsed = value;
+    } catch {
+      return json({ error: "invalid JSON body" }, 400);
+    }
+    if (parsed.command === "reconcile-stripe") {
+      const secretKey = await getVaultSecret(db, "stripe_secret_key");
+      if (!secretKey) return json({ error: "Stripe reconciliation is not configured" }, 503);
+      try {
+        const stripe = (0, import_stripe3.initStripe)({ secretKey });
+        const [customers, subscriptions, invoices, refunds] = await Promise.all([
+          listStripeObjects(stripe, "/v1/customers"),
+          listStripeObjects(stripe, "/v1/subscriptions", { status: "all" }),
+          listStripeObjects(stripe, "/v1/invoices"),
+          listStripeObjects(stripe, "/v1/refunds")
+        ]);
+        const projection2 = await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources);
+        return json({
+          reconciled: true,
+          ...reconcileStripeSnapshot(projection2, { customers, subscriptions, invoices, refunds }, ctx.chapter.networkCommercialReadModel.sources)
+        });
+      } catch (error) {
+        if (error instanceof import_stripe3.StripeError) return json({ error: "Stripe reconciliation failed", code: error.code }, 502);
+        return json({ error: "Stripe reconciliation failed" }, 502);
+      }
+    }
+    if (parsed.command !== "rebuild" || typeof parsed.mutationId !== "string" || !MUTATION_ID5.test(parsed.mutationId)) {
+      return json({ error: "rebuild or reconcile-stripe command is required; rebuild also requires a valid mutationId" }, 400);
+    }
+    const projection = await rebuildNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources, parsed.mutationId);
+    return json({ rebuilt: true, ...safeProjection(projection) });
+  }
+  return json(safeProjection(await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources)));
+};
+
 // src/worker-routes-formation.ts
 var import_crm11 = require("@odla-ai/crm");
 var SUBMISSION = /^[A-Za-z0-9_-]{8,128}$/;
@@ -6767,11 +7953,11 @@ var handleFormation = async (req, url, env, ctx) => {
     });
   }
   if (req.method !== "POST" || url.pathname !== "/api/formation/applications") return null;
-  const raw = await req.text();
-  if (raw.length > formation.bodyCap) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > formation.bodyCap) return json({ error: "request body too large" }, 413);
   let body;
   try {
-    body = JSON.parse(raw);
+    body = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -6855,7 +8041,7 @@ var record3 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text3(value, path, errors, max = MAX_TEXT2, required = true) {
+function text4(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -6865,23 +8051,23 @@ function text3(value, path, errors, max = MAX_TEXT2, required = true) {
   if (result.length > max) errors.push(`${path} must be at most ${max} characters`);
   return result;
 }
-function integer2(value, path, errors, minimum = 1) {
+function integer3(value, path, errors, minimum = 1) {
   if (!Number.isSafeInteger(value) || Number(value) < minimum) errors.push(`${path} must be an integer >= ${minimum}`);
   return Number(value);
 }
 function scopeValue(value, path, errors) {
-  const raw = record3(value);
-  if (!raw) {
+  const raw2 = record3(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys3(raw, SCOPE_KEYS, path, errors);
-  if (raw.kind === "global" || raw.kind === "built_not_found") {
-    if (raw.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
-    return { kind: raw.kind };
+  unknownKeys3(raw2, SCOPE_KEYS, path, errors);
+  if (raw2.kind === "global" || raw2.kind === "built_not_found") {
+    if (raw2.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
+    return { kind: raw2.kind };
   }
-  if (raw.kind === "chapter") {
-    const chapterId = text3(raw.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+  if (raw2.kind === "chapter") {
+    const chapterId = text4(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -6889,28 +8075,28 @@ function scopeValue(value, path, errors) {
   return null;
 }
 function resourceValue(value, path, errors) {
-  const raw = record3(value);
-  if (!raw) {
+  const raw2 = record3(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys3(raw, RESOURCE_KEYS, path, errors);
-  const id = text3(raw.id, `${path}.id`, errors, 80) ?? "";
+  unknownKeys3(raw2, RESOURCE_KEYS, path, errors);
+  const id = text4(raw2.id, `${path}.id`, errors, 80) ?? "";
   if (id && !ID4.test(id)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text3(raw.kind, `${path}.kind`, errors) ?? "";
+  const kind = text4(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text3(raw.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text3(raw.summary, `${path}.summary`, errors, 1e3, false);
-  const status = text3(raw.status, `${path}.status`, errors) ?? "";
+  const title = text4(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text4(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status = text4(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status)) errors.push(`${path}.status must be draft, published, or archived`);
-  const revision = integer2(raw.revision, `${path}.revision`, errors);
-  const scope = scopeValue(raw.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw.tags) ? raw.tags.map((tag, index) => text3(tag, `${path}.tags[${index}]`, errors, 80) ?? "") : [];
-  if (!Array.isArray(raw.tags)) errors.push(`${path}.tags must be an array`);
+  const revision = integer3(raw2.revision, `${path}.revision`, errors);
+  const scope = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text4(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text3(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
-  const url = text3(raw.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text4(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
+  const url = text4(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -6918,13 +8104,13 @@ function resourceValue(value, path, errors) {
       errors.push(`${path}.url must be a valid https URL`);
     }
   }
-  const asset = raw.brandAsset === void 0 ? null : record3(raw.brandAsset);
-  if (raw.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
+  const asset = raw2.brandAsset === void 0 ? null : record3(raw2.brandAsset);
+  if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys3(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text3(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text3(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text3(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text4(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text4(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text4(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -6932,58 +8118,58 @@ function resourceValue(value, path, errors) {
   if (!["document", "note"].includes(kind) && bodyMarkdown) errors.push(`${path}.bodyMarkdown is not allowed for ${kind}`);
   if (!["link", "inspiration"].includes(kind) && url) errors.push(`${path}.url is not allowed for ${kind}`);
   if (!["image", "file"].includes(kind) && brandAsset) errors.push(`${path}.brandAsset is not allowed for ${kind}`);
-  const provenanceRaw = record3(raw.provenance);
+  const provenanceRaw = record3(raw2.provenance);
   if (!provenanceRaw) errors.push(`${path}.provenance must be an object`);
   if (provenanceRaw) unknownKeys3(provenanceRaw, PROVENANCE_KEYS, `${path}.provenance`, errors);
   const promotedRaw = provenanceRaw?.promotedFrom === void 0 ? null : record3(provenanceRaw.promotedFrom);
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys3(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text3(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text3(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
-    resourceRevision: integer2(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
-    documentRevision: integer2(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text3(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
-    promotedAt: integer2(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
+    chapterId: text4(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text4(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    resourceRevision: integer3(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
+    documentRevision: integer3(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
+    promotedBy: text4(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedAt: integer3(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance = {
-    createdBy: text3(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
-    createdAt: integer2(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text3(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
-    updatedAt: integer2(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
+    createdBy: text4(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdAt: integer3(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
+    updatedBy: text4(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedAt: integer3(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
   return { id, kind, title, ...summary ? { summary } : {}, tags, scope, status, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
 }
 function validateBuilderLibraryDocument(value, options = {}) {
   const errors = [];
-  const raw = record3(value);
-  if (!raw) return { ok: false, errors: ["document must be an object"] };
-  unknownKeys3(raw, ROOT_KEYS4, "document", errors);
-  if (raw.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
-  const revision = integer2(raw.revision, "document.revision", errors);
-  const generatedAt = integer2(raw.generatedAt, "document.generatedAt", errors, 0);
-  const sourceRaw = record3(raw.source);
+  const raw2 = record3(value);
+  if (!raw2) return { ok: false, errors: ["document must be an object"] };
+  unknownKeys3(raw2, ROOT_KEYS4, "document", errors);
+  if (raw2.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  const revision = integer3(raw2.revision, "document.revision", errors);
+  const generatedAt = integer3(raw2.generatedAt, "document.generatedAt", errors, 0);
+  const sourceRaw = record3(raw2.source);
   if (!sourceRaw) errors.push("document.source must be an object");
   if (sourceRaw) unknownKeys3(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text3(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text4(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
-  const targetRaw = raw.target === void 0 ? null : record3(raw.target);
-  if (raw.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
+  const targetRaw = raw2.target === void 0 ? null : record3(raw2.target);
+  if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys3(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text3(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text3(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text4(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text4(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
-  if (!Array.isArray(raw.resources)) errors.push("document.resources must be an array");
-  const inputs = Array.isArray(raw.resources) ? raw.resources : [];
+  if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
+  const inputs = Array.isArray(raw2.resources) ? raw2.resources : [];
   if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
-  const resources = inputs.map((item, index) => resourceValue(item, `document.resources[${index}]`, errors)).filter(Boolean);
+  const resources = inputs.map((item, index2) => resourceValue(item, `document.resources[${index2}]`, errors)).filter(Boolean);
   const ids = resources.map(({ id }) => id);
   if (new Set(ids).size !== ids.length) errors.push("document.resources ids must be unique");
   for (const resource of resources) {
@@ -7057,28 +8243,28 @@ function canonicalBuilderLibrary(value) {
   return canonicalValue3(value);
 }
 async function builderLibraryDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder3.encode(canonicalBuilderLibrary(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder3.encode(canonicalBuilderLibrary(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/builder-library-store.ts
 var control2 = (row) => row?.document && typeof row.document === "object" ? row : null;
 var local2 = (row) => row?.document && typeof row.document === "object" ? row : null;
 async function loadActiveBuilderLibraryControls(db, targetId, environment) {
-  const rows4 = (await db.query({ builderLibraryControls: { $: { where: { targetId, environment, active: true }, limit: 500 } } })).builderLibraryControls;
-  return Array.isArray(rows4) ? rows4.map(control2).filter(Boolean) : [];
+  const rows6 = (await db.query({ builderLibraryControls: { $: { where: { targetId, environment, active: true }, limit: 500 } } })).builderLibraryControls;
+  return Array.isArray(rows6) ? rows6.map(control2).filter(Boolean) : [];
 }
 async function loadLatestBuilderLibraryControl(db, sourceId, targetId, environment) {
-  const rows4 = (await db.query({ builderLibraryControls: { $: { where: { sourceId, targetId, environment }, order: { revision: "desc" }, limit: 20 } } })).builderLibraryControls;
-  return control2(Array.isArray(rows4) ? [...rows4].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  const rows6 = (await db.query({ builderLibraryControls: { $: { where: { sourceId, targetId, environment }, order: { revision: "desc" }, limit: 20 } } })).builderLibraryControls;
+  return control2(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLocalBuilderLibrary(db, appId, environment) {
   const id = `builder-library-local:${environment}`;
-  const rows4 = (await db.query({ builderLibraryLocal: { $: { where: { id }, limit: 1 } } })).builderLibraryLocal;
-  return local2(Array.isArray(rows4) ? rows4[0] : void 0);
+  const rows6 = (await db.query({ builderLibraryLocal: { $: { where: { id }, limit: 1 } } })).builderLibraryLocal;
+  return local2(Array.isArray(rows6) ? rows6[0] : void 0);
 }
 async function materializeBuilderLibraryControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const target = document.target;
   const id = `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}`;
   const ops = [];
@@ -7089,12 +8275,12 @@ async function materializeBuilderLibraryControl(db, envelope, previous, received
     targetId: target.appId,
     environment: target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}:${digest2}` });
 }
 async function saveLocalBuilderLibrary(db, document, environment, expectedRevision, updatedAt, updatedBy) {
   const id = `builder-library-local:${environment}`;
@@ -7147,7 +8333,7 @@ var handleBuilderLibraryControl = async (req, url, env, ctx) => {
   } catch {
     return json({ ok: false, reason: "invalid_document", errors: ["request body must be JSON"] }, 400);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const sourceType = ctx.chapter.mode === "hub" ? "chapter" : "built_not_found";
   const checked = validateBuilderLibraryDocument(input.document, {
     sourceType,
@@ -7161,29 +8347,29 @@ var handleBuilderLibraryControl = async (req, url, env, ctx) => {
     return json({ ok: false, reason: "invalid_document", errors: ["Built Not Found may deliver only global or this Chapter's resources"] }, 400);
   }
   if (!document.target || document.target.environment !== env.ODLA_ENV) return json({ ok: false, reason: "wrong_environment" }, 409);
-  if (!digest || await builderLibraryDigest(document) !== digest) return json({ ok: false, reason: "invalid_digest" }, 400);
+  if (!digest2 || await builderLibraryDigest(document) !== digest2) return json({ ok: false, reason: "invalid_digest" }, 400);
   const latest = await loadLatestBuilderLibraryControl(db, document.source.appId, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return json({ ok: false, reason: "stale_revision" }, 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return json({ ok: false, reason: "conflicting_revision" }, 409);
+    if (latest.digest !== digest2) return json({ ok: false, reason: "conflicting_revision" }, 409);
     return json({ ok: true, target: document.target, revision: latest.revision, digest: latest.digest, status: "replayed", acknowledgedAt: latest.receivedAt });
   }
   const receivedAt = Date.now();
   try {
-    await materializeBuilderLibraryControl(db, { document, digest }, latest, receivedAt);
+    await materializeBuilderLibraryControl(db, { document, digest: digest2 }, latest, receivedAt);
   } catch {
     return json({ ok: false, reason: "materialization_failed" }, 503);
   }
-  return json({ ok: true, target: document.target, revision: document.revision, digest, status: "accepted", acknowledgedAt: receivedAt });
+  return json({ ok: true, target: document.target, revision: document.revision, digest: digest2, status: "accepted", acknowledgedAt: receivedAt });
 };
 function actorFor(user) {
   return user.email ?? user.userId;
 }
 function withLocalAuthority2(value, mode, appId, revision, now, actor, current) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return value;
-  const raw = value;
+  const raw2 = value;
   const currentById = new Map((current?.resources ?? []).map((item) => [item.id, item]));
-  const resources = Array.isArray(raw.resources) ? raw.resources.map((input) => {
+  const resources = Array.isArray(raw2.resources) ? raw2.resources.map((input) => {
     if (!input || typeof input !== "object" || Array.isArray(input)) return input;
     const item = input;
     const existing = typeof item.id === "string" ? currentById.get(item.id) : void 0;
@@ -7198,9 +8384,9 @@ function withLocalAuthority2(value, mode, appId, revision, now, actor, current)
         ...existing?.provenance.promotedFrom ? { promotedFrom: existing.provenance.promotedFrom } : {}
       }
     };
-  }) : raw.resources;
+  }) : raw2.resources;
   return {
-    ...raw,
+    ...raw2,
     schemaVersion: 1,
     revision,
     generatedAt: now,
@@ -7281,7 +8467,7 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
     return json({
       mode: ctx.chapter.mode,
       local: local3 ? { revision: local3.revision, document: local3.document } : null,
-      sources: controls.map(({ sourceId, revision, digest, document, receivedAt }) => ({ sourceId, revision, digest, document, receivedAt })),
+      sources: controls.map(({ sourceId, revision, digest: digest2, document, receivedAt }) => ({ sourceId, revision, digest: digest2, document, receivedAt })),
       localAuthoring: ctx.chapter.builderLibrary.localAuthoring,
       chapterTargets: ctx.chapter.mode === "hub" ? ctx.chapter.builderLibrary.sources.map((source) => ({ chapterId: source.sourceId })) : [{ chapterId: ctx.chapter.id }],
       visibility: { builtNotFoundSeesChapterSources: ctx.chapter.mode === "hub", chaptersSeeSiblingSources: false }
@@ -7289,11 +8475,11 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
   }
   if (req.method !== "PUT") return json({ error: "method not allowed" }, 405);
   if (!ctx.chapter.builderLibrary.localAuthoring) return json({ error: "local authoring is disabled" }, 403);
-  const raw = await req.text();
-  if (raw.length > BODY_CAP2) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > BODY_CAP2) return json({ error: "request body too large" }, 413);
   let input;
   try {
-    input = JSON.parse(raw);
+    input = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -7398,14 +8584,14 @@ function validatedTokens(input) {
   }
   const tokens = {};
   let serializedLength = 0;
-  for (const [name, raw] of entries.sort(([left], [right]) => left.localeCompare(right))) {
+  for (const [name, raw2] of entries.sort(([left], [right]) => left.localeCompare(right))) {
     if (!TOKEN_NAME.test(name)) {
       throw new TypeError(`signup-control theme token "${name}" must be an allowlisted --ui-* property`);
     }
-    if (typeof raw !== "string" && typeof raw !== "number" || typeof raw === "number" && !Number.isFinite(raw)) {
+    if (typeof raw2 !== "string" && typeof raw2 !== "number" || typeof raw2 === "number" && !Number.isFinite(raw2)) {
       throw new TypeError(`signup-control theme token "${name}" must be a finite string or number`);
     }
-    const value = String(raw).trim();
+    const value = String(raw2).trim();
     if (!value || value.length > MAX_VALUE_LENGTH || UNSAFE_VALUE.test(value)) {
       throw new TypeError(`signup-control theme token "${name}" has an unsafe or oversized value`);
     }
@@ -7527,6 +8713,7 @@ var BUILTIN_ROUTES = [
   handleNetworkSnapshot,
   handleNetworkRecords,
   handleNetworkSharedNotes,
+  handleNetworkCommercialStripeWebhook,
   handleFormation,
   handleMember,
   handleMemberContent,
@@ -7566,6 +8753,8 @@ var BUILTIN_ROUTES = [
   handleAdminNetworkRecords,
   handleAdminNetworkNotes,
   handleAdminNetworkSharedNotes,
+  handleAdminNetworkPersonRegistry,
+  handleAdminNetworkCommercialReadModel,
   // API requests must never fall through to an SPA asset response. Hosts still
   // get first refusal through options.routes, then this terminates unknown API
   // paths with an explicit machine-readable 404.