@odla-ai/chapter 0.44.0 → 0.46.0

package/dist/worker/index.d.cts

@@ -146,6 +146,26 @@ interface ResolvedNetworkPersonRegistry {
     chapterIds: readonly string[];
 }
 
+/** One exact Stripe event partition accepted by the network commercial shadow. */
+interface NetworkCommercialSource {
+    appId: string;
+    chapterId: string;
+    environment: string;
+    dataEnvironment: string;
+    runtime: string;
+    stripeMode: "test" | "live";
+}
+/** Opt-in, read-only projection of a shared Stripe account. */
+interface ChapterNetworkCommercialReadModel {
+    mode: "shadow";
+    sources: readonly NetworkCommercialSource[];
+}
+/** Validated settings carried by a resolved hub. */
+interface ResolvedNetworkCommercialReadModel {
+    mode: "shadow";
+    sources: readonly NetworkCommercialSource[];
+}
+
 /** Scalar kinds accepted by the Chapter schema adapter. */
 type AttrType = "string" | "number" | "boolean" | "json";
 /** One odla-db attribute: its type and index/uniqueness/optionality flags. */
@@ -208,6 +228,10 @@ interface ChapterNetworkTarget {
     /** Allow package-owned desired admission decisions for existing leader CRM
      * people to be delivered to this target. Omitted means default deny. */
     admissionGrants?: boolean;
+    /** Allow this leader to request a PII-free commercial parity snapshot from
+     * this follower. The follower must independently enable the same reader;
+     * omitted means no application or Stripe identifier digest crosses. */
+    commercialParity?: boolean;
 }
 /** One signed peer allowed to browse a privacy-bounded projection of this
  * site's CRM. The follower owns this allowlist; a leader target declaration
@@ -232,6 +256,9 @@ interface ChapterNetworkReader {
     /** Accept signed desired admission decisions from this reader. Independent
      * of record browsing; an admission-only reader may omit `fields`. */
     admissionGrants?: boolean;
+    /** Disclose a bounded, PII-free commercial parity snapshot to this signed
+     * reader. Identifiers leave only as edge-keyed, domain-separated HMACs. */
+    commercialParity?: boolean;
 }
 /** Leader/follower network configuration. A follower needs no code config to
  * receive pushed records. It must explicitly declare `readers` before any peer
@@ -277,6 +304,7 @@ interface ResolvedNetworkTarget {
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
     admissionGrants?: boolean;
+    commercialParity?: boolean;
 }
 /** A validated follower-owned record projection for one signed reader. */
 interface ResolvedNetworkReader {
@@ -286,6 +314,7 @@ interface ResolvedNetworkReader {
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
     admissionGrants?: boolean;
+    commercialParity?: boolean;
 }
 /** Fully-resolved leader network configuration. */
 interface ResolvedNetwork {
@@ -610,6 +639,8 @@ interface ChapterConfig {
     /** Network-scoped canonical Person registry. Shadow mode is additive only:
      * Chapter workflows and access continue to read their existing authority. */
     networkPersonRegistry?: ChapterNetworkPersonRegistry;
+    /** Read-only, rebuildable commercial projection from a shared Stripe account. */
+    networkCommercialReadModel?: ChapterNetworkCommercialReadModel;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -712,6 +743,8 @@ interface Chapter {
     builderLibrary: ResolvedBuilderLibrary | null;
     /** Null unless this hub explicitly enables the shadow Person registry. */
     networkPersonRegistry: ResolvedNetworkPersonRegistry | null;
+    /** Null unless this hub explicitly enables the commercial shadow. */
+    networkCommercialReadModel: ResolvedNetworkCommercialReadModel | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */

package/dist/worker/index.d.ts

@@ -146,6 +146,26 @@ interface ResolvedNetworkPersonRegistry {
     chapterIds: readonly string[];
 }
 
+/** One exact Stripe event partition accepted by the network commercial shadow. */
+interface NetworkCommercialSource {
+    appId: string;
+    chapterId: string;
+    environment: string;
+    dataEnvironment: string;
+    runtime: string;
+    stripeMode: "test" | "live";
+}
+/** Opt-in, read-only projection of a shared Stripe account. */
+interface ChapterNetworkCommercialReadModel {
+    mode: "shadow";
+    sources: readonly NetworkCommercialSource[];
+}
+/** Validated settings carried by a resolved hub. */
+interface ResolvedNetworkCommercialReadModel {
+    mode: "shadow";
+    sources: readonly NetworkCommercialSource[];
+}
+
 /** Scalar kinds accepted by the Chapter schema adapter. */
 type AttrType = "string" | "number" | "boolean" | "json";
 /** One odla-db attribute: its type and index/uniqueness/optionality flags. */
@@ -208,6 +228,10 @@ interface ChapterNetworkTarget {
     /** Allow package-owned desired admission decisions for existing leader CRM
      * people to be delivered to this target. Omitted means default deny. */
     admissionGrants?: boolean;
+    /** Allow this leader to request a PII-free commercial parity snapshot from
+     * this follower. The follower must independently enable the same reader;
+     * omitted means no application or Stripe identifier digest crosses. */
+    commercialParity?: boolean;
 }
 /** One signed peer allowed to browse a privacy-bounded projection of this
  * site's CRM. The follower owns this allowlist; a leader target declaration
@@ -232,6 +256,9 @@ interface ChapterNetworkReader {
     /** Accept signed desired admission decisions from this reader. Independent
      * of record browsing; an admission-only reader may omit `fields`. */
     admissionGrants?: boolean;
+    /** Disclose a bounded, PII-free commercial parity snapshot to this signed
+     * reader. Identifiers leave only as edge-keyed, domain-separated HMACs. */
+    commercialParity?: boolean;
 }
 /** Leader/follower network configuration. A follower needs no code config to
  * receive pushed records. It must explicitly declare `readers` before any peer
@@ -277,6 +304,7 @@ interface ResolvedNetworkTarget {
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
     admissionGrants?: boolean;
+    commercialParity?: boolean;
 }
 /** A validated follower-owned record projection for one signed reader. */
 interface ResolvedNetworkReader {
@@ -286,6 +314,7 @@ interface ResolvedNetworkReader {
     editableFields: Record<string, readonly string[]>;
     stageTransitions: readonly string[];
     admissionGrants?: boolean;
+    commercialParity?: boolean;
 }
 /** Fully-resolved leader network configuration. */
 interface ResolvedNetwork {
@@ -610,6 +639,8 @@ interface ChapterConfig {
     /** Network-scoped canonical Person registry. Shadow mode is additive only:
      * Chapter workflows and access continue to read their existing authority. */
     networkPersonRegistry?: ChapterNetworkPersonRegistry;
+    /** Read-only, rebuildable commercial projection from a shared Stripe account. */
+    networkCommercialReadModel?: ChapterNetworkCommercialReadModel;
     /** Enable a public, host-rendered formation application workflow. */
     formation?: LeaderFormationConfig;
     thesis?: unknown;
@@ -712,6 +743,8 @@ interface Chapter {
     builderLibrary: ResolvedBuilderLibrary | null;
     /** Null unless this hub explicitly enables the shadow Person registry. */
     networkPersonRegistry: ResolvedNetworkPersonRegistry | null;
+    /** Null unless this hub explicitly enables the commercial shadow. */
+    networkCommercialReadModel: ResolvedNetworkCommercialReadModel | null;
     /** Resolved public formation intake contract (disabled when omitted). */
     formation: ResolvedLeaderFormation;
     /** Resolved CRM engine (from `defineCrm`). */