@odla-ai/chapter 0.44.0 → 0.46.0

package/dist/worker/index.js

@@ -4,8 +4,8 @@ import { createRemoteJWKSet, jwtVerify } from "jose";
 
 // src/auth.ts
 function roleFromClaim(payload, auth) {
-  const raw = payload[auth.claim];
-  return typeof raw === "string" && auth.ladder.includes(raw) ? raw : auth.ladder[0];
+  const raw2 = payload[auth.claim];
+  return typeof raw2 === "string" && auth.ladder.includes(raw2) ? raw2 : auth.ladder[0];
 }
 function isAdminRole(role, auth) {
   return role === auth.adminRole;
@@ -188,7 +188,7 @@ function resolveApplication(a) {
       throw new Error(`defineChapter.application.${name}: field "${unsafe}" must match ${SCHEMA_FIELD.source}`);
     }
   }
-  const duplicate = [...required, ...optional].find((field, index, fields) => fields.indexOf(field) !== index);
+  const duplicate = [...required, ...optional].find((field, index2, fields) => fields.indexOf(field) !== index2);
   if (duplicate) {
     throw new Error(`defineChapter.application: duplicate field "${duplicate}" across required/optional lists`);
   }
@@ -336,8 +336,8 @@ function tierPayable(tier, group, hasSecretKey) {
 function byOrder(a, b) {
   return a.sortOrder - b.sortOrder || a.id.localeCompare(b.id);
 }
-function resolveTiers(group, rows5 = []) {
-  const stored = rows5.filter((tier) => tier.active);
+function resolveTiers(group, rows6 = []) {
+  const stored = rows6.filter((tier) => tier.active);
   if (stored.length) return [...stored].sort(byOrder);
   return [{
     id: "standard",
@@ -383,15 +383,15 @@ function rowToTier(row, groupId) {
 }
 async function loadTiers(db, group) {
   const groupId = String(group.id ?? "");
-  let rows5;
+  let rows6;
   try {
-    rows5 = (await db.query({
+    rows6 = (await db.query({
       tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
     })).tiers;
   } catch {
-    rows5 = void 0;
+    rows6 = void 0;
   }
-  const list = Array.isArray(rows5) ? rows5.map((row) => rowToTier(row, groupId)) : [];
+  const list = Array.isArray(rows6) ? rows6.map((row) => rowToTier(row, groupId)) : [];
   return resolveTiers(group, list);
 }
 async function loadOfferableTiers(db, group, hasSecretKey) {
@@ -528,8 +528,8 @@ function canonicalSignupControl(value) {
   return canonicalValue(value);
 }
 async function signupControlDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalSignupControl(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder.encode(canonicalSignupControl(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/admission-grants.ts
@@ -565,24 +565,24 @@ function validateAdmissionGrantDocument(input) {
   const grants = [];
   const seenIds = /* @__PURE__ */ new Set();
   const seenEmails = /* @__PURE__ */ new Set();
-  for (const [index, raw] of rawGrants.slice(0, MAX_GRANTS).entries()) {
-    const grant = raw && typeof raw === "object" ? raw : {};
+  for (const [index2, raw2] of rawGrants.slice(0, MAX_GRANTS).entries()) {
+    const grant = raw2 && typeof raw2 === "object" ? raw2 : {};
     const id = typeof grant.id === "string" ? grant.id : "";
     const email = typeof grant.email === "string" ? grant.email.trim() : "";
     const normalized = normalizeAdmissionEmail(email);
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID.test(id)) errors.push(`document.grants[${index}].id must be an identifier`);
+    if (!ID.test(id)) errors.push(`document.grants[${index2}].id must be an identifier`);
     if (seenIds.has(id)) errors.push(`document.grants repeats id "${id}"`);
-    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index}].email must be valid`);
+    if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
     if (decision !== "waive_interview" && decision !== "require_interview") {
-      errors.push(`document.grants[${index}].decision is invalid`);
+      errors.push(`document.grants[${index2}].decision is invalid`);
     }
-    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index}].note is too long`);
+    if (note && note.length > MAX_NOTE) errors.push(`document.grants[${index2}].note is too long`);
     if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
-      errors.push(`document.grants[${index}].expiresAt must be epoch milliseconds`);
+      errors.push(`document.grants[${index2}].expiresAt must be epoch milliseconds`);
     }
     seenIds.add(id);
     seenEmails.add(normalized);
@@ -650,7 +650,7 @@ async function loadLatestAdmissionRevision(db, sourceId, targetId, environment)
   return row ? row : null;
 }
 async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const current = rows((await db.query({ admissionGrants: { $: {
     where: { sourceScope: "parent", sourceId: document.source.appId, targetId: document.target.chapterId },
     limit: MAX_GRANTS
@@ -702,11 +702,11 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
     targetId: document.target.chapterId,
     environment: document.target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `admission-grants:${document.source.appId}:${document.target.environment}:${document.revision}:${digest2}` });
 }
 
 // src/flow-fields.ts
@@ -724,8 +724,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id) {
-  const text4 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text4 ? `${text4[0].toUpperCase()}${text4.slice(1)}` : id;
+  const text6 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id;
 }
 function applicationDefs(chapter) {
   try {
@@ -740,7 +740,7 @@ function applicationType(id, def) {
 }
 function applicationFlowFields(chapter, application = chapter.application) {
   const defs = applicationDefs(chapter);
-  return [...application.required, ...application.optional].map((id, order) => {
+  return [...application.required, ...application.optional].map((id, order2) => {
     const def = defs[id];
     const conditions = application.conditions[id];
     const type = applicationType(id, def);
@@ -749,7 +749,7 @@ function applicationFlowFields(chapter, application = chapter.application) {
       label: def?.label ?? APPLICATION_LABELS[id] ?? humanize(id),
       type,
       required: application.required.includes(id),
-      order,
+      order: order2,
       maxLength: application.maxLen[id] ?? application.defaultMaxLen,
       ...type === "enum" && def?.options ? { options: [...def.options] } : {},
       ...conditions ? { conditions: { ...conditions } } : {},
@@ -760,14 +760,14 @@ function applicationFlowFields(chapter, application = chapter.application) {
 function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id, order) => {
+  return [...formation.required, ...formation.optional].map((id, order2) => {
     const field = def.fields[id];
     return {
       id,
       label: field.label ?? humanize(id),
       type: field.type,
       required: formation.required.includes(id),
-      order,
+      order: order2,
       maxLength: formation.maxLen[id] ?? formation.defaultMaxLen,
       ...field.options ? { options: [...field.options] } : {},
       ...id === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
@@ -811,9 +811,9 @@ function validateGiftOfferCatalog(input, tierIds) {
   if (rawOffers.length > MAX_GIFT_OFFERS) errors.push(`document.giftOffers.offers supports at most ${MAX_GIFT_OFFERS} entries`);
   const ids = /* @__PURE__ */ new Set();
   const offers = [];
-  for (const [index, raw] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
-    const path = `document.giftOffers.offers[${index}]`;
-    const item = record(raw);
+  for (const [index2, raw2] of rawOffers.slice(0, MAX_GIFT_OFFERS).entries()) {
+    const path = `document.giftOffers.offers[${index2}]`;
+    const item = record(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
@@ -975,8 +975,8 @@ function networkSourceTag(type, hubRecordId, sourceId) {
   const typeKey = type.toLowerCase();
   const readable = /^[a-z0-9_-]+$/.test(hubRecordId);
   const prefix = sourceId ? `network:${sourceId.toLowerCase()}:${typeKey}` : `network:${typeKey}`;
-  const raw = `${prefix}:${hubRecordId}`;
-  if (readable && raw.length <= 64) return raw;
+  const raw2 = `${prefix}:${hubRecordId}`;
+  if (readable && raw2.length <= 64) return raw2;
   return `network:${typeKey.slice(0, 16)}:${shortHash(`${sourceId ?? ""}\0${type}\0${hubRecordId}`)}`;
 }
 function normalizeSharedRecord(record4, fallbackSourceId = "legacy-source") {
@@ -1260,10 +1260,10 @@ function planDelivery(input) {
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
   const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
-  const text4 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text6 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + render(tpl.text, vars) : render(tpl.text, vars);
-  return { deliver: true, transport, to, subject, text: text4, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text6, redirected: redirect };
 }
 
 // src/notify.ts
@@ -1450,27 +1450,27 @@ async function hasSignupControl(db, targetId, environment, active) {
   if (db.aggregate) {
     return Number((await db.aggregate("signupControls", { count: true }, { where })).count ?? 0) > 0;
   }
-  const rows5 = (await db.query({ signupControls: {} })).signupControls;
-  return Array.isArray(rows5) && rows5.some((row) => row.targetId === targetId && row.environment === environment && (!active || row.active === true));
+  const rows6 = (await db.query({ signupControls: {} })).signupControls;
+  return Array.isArray(rows6) && rows6.some((row) => row.targetId === targetId && row.environment === environment && (!active || row.active === true));
 }
 async function loadLatestSignupControl(db, targetId, environment) {
   if (!await hasSignupControl(db, targetId, environment)) return null;
-  const rows5 = (await db.query({ signupControls: { $: {
+  const rows6 = (await db.query({ signupControls: { $: {
     where: { targetId, environment },
     order: { revision: "desc" },
     limit: 1
   } } })).signupControls;
-  const latest = Array.isArray(rows5) ? [...rows5].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
+  const latest = Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
   return asStored(latest);
 }
 async function loadActiveSignupControl(db, targetId, environment) {
   if (!await hasSignupControl(db, targetId, environment, true)) return null;
-  const rows5 = (await db.query({ signupControls: { $: {
+  const rows6 = (await db.query({ signupControls: { $: {
     where: { targetId, environment, active: true },
     order: { revision: "desc" },
     limit: 1
   } } })).signupControls;
-  const active = Array.isArray(rows5) ? [...rows5].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
+  const active = Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision ?? 0) - Number(a.revision ?? 0))[0] : void 0;
   return asStored(active);
 }
 function controlledApplication(base, document) {
@@ -1499,7 +1499,7 @@ var byPublicId = (ns, value) => ({
   value
 });
 async function materializeSignupControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const currentRows = (await db.query({ tiers: { $: {
     where: { groupId: document.target.chapterId },
     limit: 100
@@ -1550,12 +1550,12 @@ async function materializeSignupControl(db, envelope, previous, receivedAt) {
     targetId: document.target.chapterId,
     environment: document.target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `signup-control:${document.target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `signup-control:${document.target.environment}:${document.revision}:${digest2}` });
 }
 
 // src/session.ts
@@ -1995,11 +1995,11 @@ var handleMember = async (req, url, env, ctx) => {
     return json({ error: `application cannot resume from status "${String(app.status ?? "")}"` }, 409);
   }
   if (req.method === "POST" && url.pathname === "/api/applications") {
-    const raw = await req.text();
-    if (raw.length > chapter.application.bodyCap) return json({ error: "request body too large" }, 413);
+    const raw2 = await req.text();
+    if (raw2.length > chapter.application.bodyCap) return json({ error: "request body too large" }, 413);
     let parsed;
     try {
-      parsed = JSON.parse(raw);
+      parsed = JSON.parse(raw2);
     } catch {
       return json({ error: "invalid JSON body" }, 400);
     }
@@ -2056,23 +2056,23 @@ var handleNetworkShared = async (req, url, env, ctx) => {
   const db = ctx.makeDb(env);
   const secret = await getVaultSecret(db, "network_share_secret");
   if (!secret) return json({ error: "unauthorized" }, 401);
-  let raw;
+  let raw2;
   let sourceId;
   if (req.headers.has(FEDERATION_HEADERS.version)) {
     const verified = await verifyFederatedRequest(req, { secret });
     if (!verified.ok) return json({ error: "unauthorized", reason: verified.reason }, 401);
-    raw = verified.body;
+    raw2 = verified.body;
     sourceId = verified.sender;
   } else {
     const provided = (req.headers.get("authorization") ?? "").replace(/^Bearer /, "");
     if (provided.length !== secret.length || provided !== secret) {
       return json({ error: "unauthorized" }, 401);
     }
-    raw = await req.text();
+    raw2 = await req.text();
   }
   let payload;
   try {
-    payload = JSON.parse(raw);
+    payload = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -2151,10 +2151,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text4 = value.trim();
-  if (required && !text4) errors.push(`${path} is required`);
-  if (text4.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text4;
+  const text6 = value.trim();
+  if (required && !text6) errors.push(`${path} is required`);
+  if (text6.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text6;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -2172,9 +2172,9 @@ function validateMembershipPageDocument(input, options = {}) {
   const authority = new Map((options.tiers ?? []).map((tier) => [tier.id, tier]));
   const seen = /* @__PURE__ */ new Set();
   const tiers = [];
-  for (const [index, raw] of rawTiers.slice(0, MAX_TIERS).entries()) {
-    const path = `document.tiers[${index}]`;
-    const item = objectRecord(raw);
+  for (const [index2, raw2] of rawTiers.slice(0, MAX_TIERS).entries()) {
+    const path = `document.tiers[${index2}]`;
+    const item = objectRecord(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       continue;
@@ -2203,8 +2203,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text4 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text4 ? [text4] : [];
+          const text6 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text6 ? [text6] : [];
         });
       }
     }
@@ -2313,9 +2313,9 @@ function tiersOf(value, errors) {
   }
   if (value.length > 20) errors.push("document.tiers supports at most 20 entries");
   const seen = /* @__PURE__ */ new Set();
-  return value.slice(0, 20).flatMap((raw, index) => {
-    const path = `document.tiers[${index}]`;
-    const item = recordOf(raw);
+  return value.slice(0, 20).flatMap((raw2, index2) => {
+    const path = `document.tiers[${index2}]`;
+    const item = recordOf(raw2);
     if (!item) {
       errors.push(`${path} must be an object`);
       return [];
@@ -2442,7 +2442,7 @@ function validateSignupControlDocument(input) {
   const available = tiers.filter((tier) => tier.available).sort((a, b) => a.sortOrder - b.sortOrder);
   const page = validateMembershipPageDocument(root.membershipPage, { tiers: available });
   if (!page.ok) errors.push(...page.errors);
-  else if (page.value.tiers.some((tier, index) => tier.tierId !== available[index]?.id)) {
+  else if (page.value.tiers.some((tier, index2) => tier.tierId !== available[index2]?.id)) {
     errors.push("document.membershipPage.tiers must follow the available tier display order");
   }
   const application = applicationOf(root.application, errors);
@@ -2490,7 +2490,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
   } catch {
     return reject("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const checked = validateSignupControlDocument(input.document);
   if (!checked.ok) return reject("invalid_document", 400, checked.errors);
   const document = checked.value;
@@ -2500,11 +2500,11 @@ var handleSignupControl = async (req, url, env, ctx) => {
   if (document.target.stripeMode !== authority.stripeMode) return reject("wrong_stripe_mode", 409);
   const applicationErrors = validateControlledApplication(ctx.chapter, document);
   if (applicationErrors.length) return reject("invalid_document", 400, applicationErrors);
-  if (!digest || await signupControlDigest(document) !== digest) return reject("invalid_digest", 400);
+  if (!digest2 || await signupControlDigest(document) !== digest2) return reject("invalid_digest", 400);
   const latest = await loadLatestSignupControl(db, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject("conflicting_revision", 409);
     return json({
       ok: true,
       target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
@@ -2516,7 +2516,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeSignupControl(db, { digest, document }, latest, receivedAt);
+    await materializeSignupControl(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject("materialization_failed", 503);
   }
@@ -2524,7 +2524,7 @@ var handleSignupControl = async (req, url, env, ctx) => {
     ok: true,
     target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -2552,8 +2552,8 @@ function canonicalMemberContent(value) {
   return canonicalValue2(value);
 }
 async function memberContentDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalMemberContent(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder2.encode(canonicalMemberContent(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/member-content-validation-helpers.ts
@@ -2590,21 +2590,21 @@ function textValue(value, path, errors, max = MAX_TEXT, required = false) {
   return valueText;
 }
 function offerValue(value, path, errors, tiers, audience) {
-  const raw = record2(value);
-  if (!raw) {
+  const raw2 = record2(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return void 0;
   }
-  unknownKeys2(raw, OFFER_KEYS, path, errors);
-  const tierId = textValue(raw.tierId, `${path}.tierId`, errors, 80, true) ?? "";
+  unknownKeys2(raw2, OFFER_KEYS, path, errors);
+  const tierId = textValue(raw2.tierId, `${path}.tierId`, errors, 80, true) ?? "";
   if (tierId && !ID3.test(tierId)) errors.push(`${path}.tierId must be a lowercase kebab-case id`);
   if (tiers.size && !tiers.has(tierId)) errors.push(`${path}.tierId must reference a declared tier`);
   if (audience?.kind === "tiers" && tierId && !audience.tierIds.includes(tierId)) {
     errors.push(`${path}.tierId must grant access to this page`);
   }
-  const label = textValue(raw.label, `${path}.label`, errors);
-  const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2);
-  const ctaLabel = textValue(raw.ctaLabel, `${path}.ctaLabel`, errors);
+  const label = textValue(raw2.label, `${path}.label`, errors);
+  const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2);
+  const ctaLabel = textValue(raw2.ctaLabel, `${path}.ctaLabel`, errors);
   return {
     tierId,
     ...label ? { label } : {},
@@ -2656,37 +2656,37 @@ function validateMemberContentDocument(input, options = {}) {
   const ids = /* @__PURE__ */ new Set();
   const slugs = /* @__PURE__ */ new Set();
   const pages = [];
-  for (const [index, value] of rawPages.slice(0, MAX_PAGES).entries()) {
-    const path = `document.pages[${index}]`;
-    const raw = record2(value);
-    if (!raw) {
+  for (const [index2, value] of rawPages.slice(0, MAX_PAGES).entries()) {
+    const path = `document.pages[${index2}]`;
+    const raw2 = record2(value);
+    if (!raw2) {
       errors.push(`${path} must be an object`);
       continue;
     }
-    unknownKeys2(raw, PAGE_KEYS, path, errors);
-    const id = textValue(raw.id, `${path}.id`, errors, 80, true) ?? "";
-    const slug = textValue(raw.slug, `${path}.slug`, errors, 120, true) ?? "";
-    const title = textValue(raw.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
+    unknownKeys2(raw2, PAGE_KEYS, path, errors);
+    const id = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
+    const slug = textValue(raw2.slug, `${path}.slug`, errors, 120, true) ?? "";
+    const title = textValue(raw2.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
     if (id && !ID3.test(id)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (slug && !SLUG2.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
     if (ids.has(id) || knownParentIds.has(id)) errors.push(`${path}.id duplicates page "${id}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
     ids.add(id);
     slugs.add(slug);
-    const navRaw = record2(raw.navigation);
-    let navigation = { section: "General", order: index };
+    const navRaw = record2(raw2.navigation);
+    let navigation = { section: "General", order: index2 };
     if (!navRaw) errors.push(`${path}.navigation must be an object`);
     else {
       unknownKeys2(navRaw, NAV_KEYS, `${path}.navigation`, errors);
       const section = textValue(navRaw.section, `${path}.navigation.section`, errors, 120, true) ?? "";
-      const order = navRaw.order;
-      if (!Number.isInteger(order) || Number(order) < 0 || Number(order) > 1e6) {
+      const order2 = navRaw.order;
+      if (!Number.isInteger(order2) || Number(order2) < 0 || Number(order2) > 1e6) {
         errors.push(`${path}.navigation.order must be an integer from 0 to 1,000,000`);
       }
       const parentId = textValue(navRaw.parentId, `${path}.navigation.parentId`, errors, 80);
-      navigation = { section, order: Number.isInteger(order) ? Number(order) : index, ...parentId ? { parentId } : {} };
+      navigation = { section, order: Number.isInteger(order2) ? Number(order2) : index2, ...parentId ? { parentId } : {} };
     }
-    const audienceRaw = record2(raw.audience);
+    const audienceRaw = record2(raw2.audience);
     let audience = { kind: "all-members" };
     if (!audienceRaw) errors.push(`${path}.audience must be an object`);
     else {
@@ -2708,12 +2708,12 @@ function validateMemberContentDocument(input, options = {}) {
         audience = { kind: "tiers", tierIds: normalized };
       } else errors.push(`${path}.audience.kind must be all-members or tiers`);
     }
-    const summary = textValue(raw.summary, `${path}.summary`, errors, 2e3);
-    const teaserMarkdown = textValue(raw.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN2);
-    const bodyMarkdown = textValue(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, true) ?? "";
+    const summary = textValue(raw2.summary, `${path}.summary`, errors, 2e3);
+    const teaserMarkdown = textValue(raw2.teaserMarkdown, `${path}.teaserMarkdown`, errors, MAX_MARKDOWN2);
+    const bodyMarkdown = textValue(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN2, true) ?? "";
     let upsell;
-    if (raw.upsell !== void 0) {
-      const upsellRaw = record2(raw.upsell);
+    if (raw2.upsell !== void 0) {
+      const upsellRaw = record2(raw2.upsell);
       if (!upsellRaw) errors.push(`${path}.upsell must be an object`);
       else {
         unknownKeys2(upsellRaw, UPSELL_KEYS, `${path}.upsell`, errors);
@@ -2730,10 +2730,10 @@ function validateMemberContentDocument(input, options = {}) {
     pages.push({ id, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
   }
   const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids]);
-  for (const [index, page] of pages.entries()) {
+  for (const [index2, page] of pages.entries()) {
     const parentId = page.navigation.parentId;
-    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index}].navigation.parentId references unknown page "${parentId}"`);
-    if (parentId === page.id) errors.push(`document.pages[${index}].navigation.parentId cannot reference itself`);
+    if (parentId && !allIds.has(parentId)) errors.push(`document.pages[${index2}].navigation.parentId references unknown page "${parentId}"`);
+    if (parentId === page.id) errors.push(`document.pages[${index2}].navigation.parentId cannot reference itself`);
   }
   for (const page of pages) {
     const seen = /* @__PURE__ */ new Set([page.id]);
@@ -2754,21 +2754,21 @@ function validateMemberContentDocument(input, options = {}) {
     const values = Array.isArray(root.upsellOverrides) ? root.upsellOverrides : [];
     const seen = /* @__PURE__ */ new Set();
     upsellOverrides = [];
-    for (const [index, value] of values.entries()) {
-      const path = `document.upsellOverrides[${index}]`;
-      const raw = record2(value);
-      if (!raw) {
+    for (const [index2, value] of values.entries()) {
+      const path = `document.upsellOverrides[${index2}]`;
+      const raw2 = record2(value);
+      if (!raw2) {
         errors.push(`${path} must be an object`);
         continue;
       }
-      unknownKeys2(raw, OVERRIDE_KEYS, path, errors);
-      const pageId = textValue(raw.pageId, `${path}.pageId`, errors, 80, true) ?? "";
+      unknownKeys2(raw2, OVERRIDE_KEYS, path, errors);
+      const pageId = textValue(raw2.pageId, `${path}.pageId`, errors, 80, true) ?? "";
       if (seen.has(pageId)) errors.push(`${path}.pageId duplicates "${pageId}"`);
       seen.add(pageId);
       const parentPage = (options.parentPages ?? []).find((page) => page.id === pageId);
       if (!parentPage) errors.push(`${path}.pageId must reference a parent page`);
       else if (parentPage.upsell?.owner !== "chapter") errors.push(`${path}.pageId does not delegate upsell authority to the chapter`);
-      const offer = offerValue(raw.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
+      const offer = offerValue(raw2.offer, `${path}.offer`, errors, tierIds, parentPage?.audience);
       if (offer) upsellOverrides.push({ pageId, offer });
     }
   }
@@ -2846,36 +2846,36 @@ var control = (row) => row && row.document && typeof row.document === "object" ?
 var local = (row) => row && row.document && typeof row.document === "object" ? row : null;
 async function exists(db, ns, where) {
   if (db.aggregate) return Number((await db.aggregate(ns, { count: true }, { where })).count ?? 0) > 0;
-  const rows5 = (await db.query({ [ns]: {} }))[ns] ?? [];
-  return rows5.some((row) => Object.entries(where).every(([key, value]) => row[key] === value));
+  const rows6 = (await db.query({ [ns]: {} }))[ns] ?? [];
+  return rows6.some((row) => Object.entries(where).every(([key, value]) => row[key] === value));
 }
 async function loadActiveMemberContentControl(db, targetId, environment) {
   const where = { targetId, environment, active: true };
   if (!await exists(db, "memberContentControls", where)) return null;
-  const rows5 = (await db.query({ memberContentControls: { $: {
+  const rows6 = (await db.query({ memberContentControls: { $: {
     where,
     order: { revision: "desc" },
     limit: 1
   } } })).memberContentControls;
-  return control(Array.isArray(rows5) ? [...rows5].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  return control(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLatestMemberContentControl(db, targetId, environment) {
   const where = { targetId, environment };
   if (!await exists(db, "memberContentControls", where)) return null;
-  const rows5 = (await db.query({ memberContentControls: { $: {
+  const rows6 = (await db.query({ memberContentControls: { $: {
     where,
     order: { revision: "desc" },
     limit: 1
   } } })).memberContentControls;
-  return control(Array.isArray(rows5) ? [...rows5].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  return control(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLocalMemberContent(db, chapterId, environment) {
   const id = `member-content-local:${environment}`;
-  const rows5 = (await db.query({ memberContentLocal: { $: { where: { id }, limit: 1 } } })).memberContentLocal;
-  return local(Array.isArray(rows5) ? rows5[0] : void 0);
+  const rows6 = (await db.query({ memberContentLocal: { $: { where: { id }, limit: 1 } } })).memberContentLocal;
+  return local(Array.isArray(rows6) ? rows6[0] : void 0);
 }
 async function materializeMemberContentControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const target = document.target;
   const id = `member-content-control:${target.environment}:${document.revision}`;
   const ops = [];
@@ -2888,12 +2888,12 @@ async function materializeMemberContentControl(db, envelope, previous, receivedA
     targetId: target.chapterId,
     environment: target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `member-content-control:${target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `member-content-control:${target.environment}:${document.revision}:${digest2}` });
 }
 async function saveLocalMemberContent(db, document, environment, expectedRevision, updatedAt, updatedBy) {
   const id = `member-content-local:${environment}`;
@@ -2927,12 +2927,12 @@ async function groupAndTiers(db, chapterId) {
 }
 async function memberTierId(db, chapterId, email) {
   if (!email) return null;
-  let rows5 = (await db.query({ applications: { $: {
+  let rows6 = (await db.query({ applications: { $: {
     where: { emailNormalized: normalizeAdmissionEmail(email) },
     limit: 20
   } } })).applications;
-  if (!rows5?.length) rows5 = (await db.query({ applications: { $: { where: { email }, limit: 20 } } })).applications;
-  const latest = Array.isArray(rows5) ? [...rows5].filter((row) => String(row.groupId ?? chapterId) === chapterId).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0] : void 0;
+  if (!rows6?.length) rows6 = (await db.query({ applications: { $: { where: { email }, limit: 20 } } })).applications;
+  const latest = Array.isArray(rows6) ? [...rows6].filter((row) => String(row.groupId ?? chapterId) === chapterId).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0] : void 0;
   return typeof latest?.tierId === "string" && latest.tierId ? latest.tierId : null;
 }
 async function activeDocuments(db, chapterId, environment) {
@@ -2957,7 +2957,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
   } catch {
     return reject2("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const initial = validateMemberContentDocument(input.document, {
     sourceType: "parent"
   });
@@ -2985,11 +2985,11 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
       return reject2("invalid_document", 409, localCheck.errors.map((error) => `existing chapter content: ${error}`));
     }
   }
-  if (!digest || await memberContentDigest(document) !== digest) return reject2("invalid_digest", 400);
+  if (!digest2 || await memberContentDigest(document) !== digest2) return reject2("invalid_digest", 400);
   const latest = await loadLatestMemberContentControl(db, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject2("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject2("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject2("conflicting_revision", 409);
     return json({
       ok: true,
       target: document.target,
@@ -3001,7 +3001,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeMemberContentControl(db, { digest, document }, latest, receivedAt);
+    await materializeMemberContentControl(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject2("materialization_failed", 503);
   }
@@ -3009,7 +3009,7 @@ var handleMemberContentControl = async (req, url, env, ctx) => {
     ok: true,
     target: document.target,
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -3061,11 +3061,11 @@ var handleAdminMemberContent = async (req, url, env, ctx) => {
   }
   if (req.method !== "PUT") return json({ error: "method not allowed" }, 405);
   if (!ctx.chapter.memberContent.localAuthoring) return json({ error: "local authoring is disabled" }, 403);
-  const raw = await req.text();
-  if (raw.length > BODY_CAP) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > BODY_CAP) return json({ error: "request body too large" }, 413);
   let input;
   try {
-    input = JSON.parse(raw);
+    input = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -3133,18 +3133,18 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
   } catch {
     return reject3("invalid_document", 400, ["request body must be JSON"]);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const checked = validateAdmissionGrantDocument(input.document);
   if (!checked.ok) return reject3("invalid_document", 400, checked.errors);
   const document = checked.value;
   if (document.source.appId !== claimedSender) return reject3("wrong_source", 403);
   if (document.target.chapterId !== ctx.chapter.id) return reject3("wrong_target", 409);
   if (document.target.environment !== env.ODLA_ENV) return reject3("wrong_environment", 409);
-  if (!digest || await signupControlDigest(document) !== digest) return reject3("invalid_digest", 400);
+  if (!digest2 || await signupControlDigest(document) !== digest2) return reject3("invalid_digest", 400);
   const latest = await loadLatestAdmissionRevision(db, claimedSender, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return reject3("stale_revision", 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return reject3("conflicting_revision", 409);
+    if (latest.digest !== digest2) return reject3("conflicting_revision", 409);
     return json({
       ok: true,
       target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
@@ -3156,7 +3156,7 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
   }
   const receivedAt = Date.now();
   try {
-    await materializeAdmissionGrants(db, { digest, document }, latest, receivedAt);
+    await materializeAdmissionGrants(db, { digest: digest2, document }, latest, receivedAt);
   } catch {
     return reject3("materialization_failed", 503);
   }
@@ -3164,7 +3164,7 @@ var handleAdmissionGrants = async (req, url, env, ctx) => {
     ok: true,
     target: { chapterId: ctx.chapter.id, environment: env.ODLA_ENV },
     revision: document.revision,
-    digest,
+    digest: digest2,
     status: "accepted",
     acknowledgedAt: receivedAt
   });
@@ -3367,9 +3367,9 @@ function personAdmissionEmail(ctx, record4) {
   if (record4.type !== "person") return null;
   const field = ctx.chapter.crm.config.types.person?.emailField;
   if (!field) return null;
-  const raw = record4.fields[field] ?? record4.primaryEmail;
-  if (typeof raw !== "string") return null;
-  const normalized = normalizeAdmissionEmail(raw);
+  const raw2 = record4.fields[field] ?? record4.primaryEmail;
+  if (typeof raw2 !== "string") return null;
+  const normalized = normalizeAdmissionEmail(raw2);
   return isValidEmail(normalized) ? normalized : null;
 }
 async function grantInput(db, ctx, assignment) {
@@ -3389,7 +3389,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
   const current = await loadLeaderAdmissionAssignments(opts.db, opts.target.id);
   const id = assignmentId(opts.target.id, opts.personId);
   const existing = current.find((row) => row.id === id);
-  const digest = await signupControlDigest({
+  const digest2 = await signupControlDigest({
     targetId: opts.target.id,
     personId: opts.personId,
     decision: opts.decision,
@@ -3404,7 +3404,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
   } } });
   const receipt = admissionRows(priorMutation2.leaderAdmissionMutations)[0];
   if (receipt) {
-    if (receipt.requestDigest !== digest || receipt.personId !== opts.personId) {
+    if (receipt.requestDigest !== digest2 || receipt.personId !== opts.personId) {
       throw new Error("mutation_conflict");
     }
     const saved = await loadLeaderAdmissionDelivery(opts.db, opts.target.id, opts.env.ODLA_ENV);
@@ -3412,7 +3412,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
     return { delivery: saved, duplicate: true };
   }
   if (existing?.lastMutationId === opts.mutationId) {
-    if (existing.lastRequestDigest !== digest) throw new Error("mutation_conflict");
+    if (existing.lastRequestDigest !== digest2) throw new Error("mutation_conflict");
     const saved = await loadLeaderAdmissionDelivery(opts.db, opts.target.id, opts.env.ODLA_ENV);
     if (!saved) throw new Error("delivery_missing");
     return { delivery: saved, duplicate: true };
@@ -3427,7 +3427,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
     ...opts.expiresAt !== void 0 ? { expiresAt: opts.expiresAt } : {},
     active: opts.active,
     lastMutationId: opts.mutationId,
-    lastRequestDigest: digest,
+    lastRequestDigest: digest2,
     createdAt: existing?.createdAt ?? now,
     createdBy: existing?.createdBy ?? opts.actor,
     updatedAt: now,
@@ -3463,7 +3463,7 @@ async function persistLeaderAdmissionDesiredSet(opts) {
       id: mutationReceiptId,
       targetId: opts.target.id,
       personId: opts.personId,
-      requestDigest: digest,
+      requestDigest: digest2,
       revision,
       createdAt: now
     } }
@@ -3658,8 +3658,8 @@ function makeCalendar(env) {
 }
 async function firstRow(db, ns, q) {
   const res = await db.query({ [ns]: { $: q } });
-  const rows5 = res[ns];
-  return Array.isArray(rows5) ? rows5[0] : void 0;
+  const rows6 = res[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 }
 async function computeSlots(cal, cfg) {
   const { from, to } = slotWindow(Date.now(), cfg.windowDays);
@@ -3916,17 +3916,17 @@ async function notifyAdminOfPayment(db, env, eventId, app) {
   try {
     const group = await groupFor(db, app);
     if (!group || typeof group.notificationEmail !== "string" || !group.notificationEmail) return;
-    const text4 = (value) => typeof value === "string" ? value : "";
+    const text6 = (value) => typeof value === "string" ? value : "";
     await sendTemplated(deps(db, env), {
       group: emailGroupFrom(group),
       template: "adminNotification",
       to: group.notificationEmail,
       vars: {
-        firstName: text4(app.firstName),
-        lastName: text4(app.lastName),
-        email: text4(app.email),
-        phone: text4(app.phone),
-        state: text4(app.state)
+        firstName: text6(app.firstName),
+        lastName: text6(app.lastName),
+        email: text6(app.email),
+        phone: text6(app.phone),
+        state: text6(app.state)
       },
       dedupeKey: `${eventId}:admin`,
       applicationId: String(app.id)
@@ -4059,8 +4059,8 @@ function createStripeProvider(config) {
       const sk = requireSecret(secretKey);
       const charges = await stripeCall(sk, "GET", "/v1/charges", { customer: input.customerId, limit: 100 });
       if (!charges.ok) fail("charges list", charges);
-      const rows5 = charges.body.data ?? [];
-      const paid = rows5.filter((c) => c.status === "succeeded" && c.refunded !== true);
+      const rows6 = charges.body.data ?? [];
+      const paid = rows6.filter((c) => c.status === "succeeded" && c.refunded !== true);
       const charge = paid[paid.length - 1];
       if (!charge) {
         const err = new Error("no paid charge to refund");
@@ -4168,8 +4168,8 @@ async function issueGiftClaim(db, intent, provider, now) {
     throw new Error("gift issuance conflict");
   }
 }
-function buyerGiftClaims(rows5, now) {
-  return rows5.map((row) => {
+function buyerGiftClaims(rows6, now) {
+  return rows6.map((row) => {
     const stored = String(row.status ?? "pending");
     const status = stored === "pending" && Number(row.codeExpiresAt) <= now ? "expired" : stored;
     return {
@@ -4461,8 +4461,8 @@ function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
 
 // src/stripe-webhook-partition.ts
 var firstRow2 = async (db, ns, q) => {
-  const rows5 = (await db.query({ [ns]: { $: q } }))[ns];
-  return Array.isArray(rows5) ? rows5[0] : void 0;
+  const rows6 = (await db.query({ [ns]: { $: q } }))[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 };
 var stripeEventDigest = async (rawBody) => {
   const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(rawBody));
@@ -4509,9 +4509,9 @@ async function storeStripeReceipt(db, input) {
   const raced = await receiptFor(db, input.eventId);
   return raced?.digest === input.digest ? "replayed" : "collision";
 }
-async function quarantineStripeEvent(db, eventId, digest, event) {
+async function quarantineStripeEvent(db, eventId, digest2, event) {
   const disposition = "quarantine_unmatched";
-  const stored = await storeStripeReceipt(db, { eventId, digest, event, disposition, matched: false });
+  const stored = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition, matched: false });
   if (stored === "collision") {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
@@ -4519,10 +4519,10 @@ async function quarantineStripeEvent(db, eventId, digest, event) {
   reportStripePartition("warn", eventId, event, disposition);
   return json({ ok: true, matched: false, disposition, ...stored === "replayed" ? { replayed: true } : {} });
 }
-async function replayedStripeReceipt(db, eventId, digest, event) {
+async function replayedStripeReceipt(db, eventId, digest2, event) {
   const existing = await receiptFor(db, eventId);
   if (!existing) return null;
-  if (existing.digest !== digest) {
+  if (existing.digest !== digest2) {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
   }
@@ -4532,8 +4532,8 @@ async function replayedStripeReceipt(db, eventId, digest, event) {
 // src/worker-routes-payments.ts
 async function firstRow3(db, ns, q) {
   const res = await db.query({ [ns]: { $: q } });
-  const rows5 = res[ns];
-  return Array.isArray(rows5) ? rows5[0] : void 0;
+  const rows6 = res[ns];
+  return Array.isArray(rows6) ? rows6[0] : void 0;
 }
 async function findApplication(db, event) {
   if ("applicationId" in event && event.applicationId) {
@@ -4657,7 +4657,7 @@ async function ingestWebhook(req, env, ctx) {
   if (!ingest.ok) return json({ error: "invalid signature" }, 400);
   const { eventId, event } = ingest;
   if (event.kind === "ignored") return json({ ok: true, ignored: event.type });
-  const digest = await stripeEventDigest(rawBody);
+  const digest2 = await stripeEventDigest(rawBody);
   const identity = stripeEventIdentity(event);
   const target = stripeEventTarget(env, ctx);
   const preliminary = classifyMemberStripeEvent(identity, target, false);
@@ -4671,23 +4671,23 @@ async function ingestWebhook(req, env, ctx) {
       reportStripePartition("warn", eventId, event, "ignore_sibling");
       return json({ ok: true, matched: false, disposition: "ignore_sibling" });
     }
-    const replay2 = await replayedStripeReceipt(db, eventId, digest, event);
+    const replay2 = await replayedStripeReceipt(db, eventId, digest2, event);
     if (replay2) return replay2;
     const localIntent = Boolean(intent && intent.chapterId === ctx.chapter.id && intent.environment === env.ODLA_ENV && (typeof intent.runtime !== "string" || intent.runtime === target.runtime));
     const disposition2 = classifyMemberStripeEvent(identity, target, localIntent);
     if (!localIntent || disposition2 === "quarantine_unmatched") {
-      return quarantineStripeEvent(db, eventId, digest, event);
+      return quarantineStripeEvent(db, eventId, digest2, event);
     }
     if (event.kind === "gift_paid") {
       if (intent.providerObjectId !== event.providerObjectId || intent.status === "refunded" || intent.status === "canceled") {
-        return quarantineStripeEvent(db, eventId, digest, event);
+        return quarantineStripeEvent(db, eventId, digest2, event);
       }
       try {
         const issued = await issueGiftClaim(db, intent, {
           eventId,
           objectId: event.providerObjectId
         }, Date.now());
-        const stored3 = await storeStripeReceipt(db, { eventId, digest, event, disposition: disposition2, matched: true });
+        const stored3 = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition: disposition2, matched: true });
         if (stored3 === "collision") {
           reportStripePartition("error", eventId, event, "quarantine_collision");
           return json({ ok: true, matched: false, collision: true });
@@ -4703,7 +4703,7 @@ async function ingestWebhook(req, env, ctx) {
     } }], { mutationId: `gift-revoked-intent:${eventId}` });
     const claim = await firstRow3(db, "giftClaims", { where: { intentId: event.giftIntentId }, limit: 1 });
     if (claim) await revokeGiftClaim(db, claim, event.reason, Date.now());
-    const stored2 = await storeStripeReceipt(db, { eventId, digest, event, disposition: disposition2, matched: Boolean(claim) });
+    const stored2 = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition: disposition2, matched: Boolean(claim) });
     if (stored2 === "collision") {
       reportStripePartition("error", eventId, event, "quarantine_collision");
       return json({ ok: true, matched: false, collision: true });
@@ -4715,12 +4715,12 @@ async function ingestWebhook(req, env, ctx) {
     reportStripePartition("warn", eventId, event, "ignore_sibling");
     return json({ ok: true, matched: false, disposition: "ignore_sibling" });
   }
-  const replay = await replayedStripeReceipt(db, eventId, digest, event);
+  const replay = await replayedStripeReceipt(db, eventId, digest2, event);
   if (replay) return replay;
   const localApplication = Boolean(app && (typeof app.stripeRuntime !== "string" || app.stripeRuntime === target.runtime));
   const disposition = classifyMemberStripeEvent(identity, target, localApplication);
   if (!localApplication || disposition === "quarantine_unmatched") {
-    return quarantineStripeEvent(db, eventId, digest, event);
+    return quarantineStripeEvent(db, eventId, digest2, event);
   }
   const patch = webhookPatch(event, String(app.status ?? ""));
   let next = app;
@@ -4743,7 +4743,7 @@ async function ingestWebhook(req, env, ctx) {
       });
     }
   }
-  const stored = await storeStripeReceipt(db, { eventId, digest, event, disposition, matched: true });
+  const stored = await storeStripeReceipt(db, { eventId, digest: digest2, event, disposition, matched: true });
   if (stored === "collision") {
     reportStripePartition("error", eventId, event, "quarantine_collision");
     return json({ ok: true, matched: false, collision: true });
@@ -4999,8 +4999,8 @@ async function upcomingEvents(env) {
   const res = await cal.availability.upcoming();
   return res.events.map((e) => ({ eventId: e.eventId, status: e.status, startAt: e.startAt, endAt: e.endAt }));
 }
-function toReconcile(rows5) {
-  return rows5.map((m) => ({
+function toReconcile(rows6) {
+  return rows6.map((m) => ({
     id: String(m.id),
     applicationId: String(m.applicationId),
     googleEventId: typeof m.googleEventId === "string" ? m.googleEventId : null,
@@ -5022,12 +5022,12 @@ var handleAdminMeetings = async (req, url, env, ctx) => {
   const query = await db.query({
     meetings: { $: { where: all ? {} : { status: "scheduled" }, order: { startAt: "asc" }, limit: 500 } }
   });
-  let rows5 = Array.isArray(query.meetings) ? query.meetings : [];
-  if (Number.isFinite(from)) rows5 = rows5.filter((m) => Number(m.startAt ?? 0) >= from);
-  if (Number.isFinite(to)) rows5 = rows5.filter((m) => Number(m.startAt ?? 0) <= to);
+  let rows6 = Array.isArray(query.meetings) ? query.meetings : [];
+  if (Number.isFinite(from)) rows6 = rows6.filter((m) => Number(m.startAt ?? 0) >= from);
+  if (Number.isFinite(to)) rows6 = rows6.filter((m) => Number(m.startAt ?? 0) <= to);
   let decisions = [];
   try {
-    decisions = reconcileMeetings(toReconcile(rows5), await upcomingEvents(env), Date.now());
+    decisions = reconcileMeetings(toReconcile(rows6), await upcomingEvents(env), Date.now());
   } catch {
   }
   const patched = /* @__PURE__ */ new Map();
@@ -5054,7 +5054,7 @@ var handleAdminMeetings = async (req, url, env, ctx) => {
   };
   const group = (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
   const timezone = resolveScheduling(group?.schedulingJson).timezone;
-  const meetings = rows5.map((m) => ({ ...m, ...patched.get(String(m.id)) ?? {}, applicant: applicantOf(m) })).filter((m) => all || m.status === "scheduled");
+  const meetings = rows6.map((m) => ({ ...m, ...patched.get(String(m.id)) ?? {}, applicant: applicantOf(m) })).filter((m) => all || m.status === "scheduled");
   return json({ meetings, adopted: decisions.length, timezone });
 };
 
@@ -5075,16 +5075,16 @@ var crmDeps2 = (db, ctx) => ({
 });
 var handleAdminCrmSync = async (req, url, env, ctx) => {
   if (req.method !== "POST" || url.pathname !== "/api/admin/crm/sync") return null;
-  const gate11 = await adminGate(req, env, ctx);
-  if (gate11 instanceof Response) return gate11;
-  const result = await backfillCrm(crmDeps2(gate11.db, ctx));
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const result = await backfillCrm(crmDeps2(gate12.db, ctx));
   return json({ ok: true, ...result });
 };
 var handleAdminPeople = async (req, url, env, ctx) => {
   if (req.method !== "GET" || url.pathname !== "/api/admin/people") return null;
-  const gate11 = await adminGate(req, env, ctx);
-  if (gate11 instanceof Response) return gate11;
-  const { db } = gate11;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db } = gate12;
   const sk = await getVaultSecret(db, "clerk_secret_key");
   const [data, roleList] = await Promise.all([
     db.query({
@@ -5130,16 +5130,16 @@ var handleAdminPeople = async (req, url, env, ctx) => {
       });
     }
   }
-  const rows5 = [...people.values()].sort(
+  const rows6 = [...people.values()].sort(
     (x, y) => (y.application?.createdAt ?? -1) - (x.application?.createdAt ?? -1)
   );
-  return json({ people: rows5 });
+  return json({ people: rows6 });
 };
 var handleAdminPeopleAccess = async (req, url, env, ctx) => {
   if (req.method !== "GET" || url.pathname !== "/api/admin/people/access") return null;
-  const gate11 = await adminGate(req, env, ctx);
-  if (gate11 instanceof Response) return gate11;
-  const { db } = gate11;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db } = gate12;
   const targetId = url.searchParams.get("userId") ?? "";
   if (!targetId.startsWith("user_")) return json({ error: "invalid userId" }, 400);
   const sk = await getVaultSecret(db, "clerk_secret_key");
@@ -5150,9 +5150,9 @@ var handleAdminPeopleAccess = async (req, url, env, ctx) => {
 };
 var handleAdminPeopleRole = async (req, url, env, ctx) => {
   if (req.method !== "POST" || url.pathname !== "/api/admin/people/role") return null;
-  const gate11 = await adminGate(req, env, ctx);
-  if (gate11 instanceof Response) return gate11;
-  const { db, actor } = gate11;
+  const gate12 = await adminGate(req, env, ctx);
+  if (gate12 instanceof Response) return gate12;
+  const { db, actor } = gate12;
   let body;
   try {
     body = await req.json();
@@ -5188,8 +5188,8 @@ function canonical(value) {
   }
   return JSON.stringify(value) ?? "undefined";
 }
-function positiveInt(raw, fallback, max) {
-  const parsed = Number(raw);
+function positiveInt(raw2, fallback, max) {
+  const parsed = Number(raw2);
   return Number.isSafeInteger(parsed) && parsed >= 0 ? Math.min(parsed, max) : fallback;
 }
 var handleAdminClerkPrivateProfileSync = async (req, url, env, ctx) => {
@@ -5270,14 +5270,14 @@ function periodSeries(points, now, count, periodMs) {
   for (const point of points) {
     if (!Number.isFinite(point.t) || !Number.isFinite(point.v)) continue;
     if (point.t >= start && point.t <= now) {
-      const index = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
-      current[index] = (current[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - start) / periodMs));
+      current[index2] = (current[index2] ?? 0) + point.v;
     } else if (point.t >= previousStart && point.t < start) {
-      const index = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
-      previous[index] = (previous[index] ?? 0) + point.v;
+      const index2 = Math.min(count - 1, Math.floor((point.t - previousStart) / periodMs));
+      previous[index2] = (previous[index2] ?? 0) + point.v;
     }
   }
-  const labels = current.map((_, index) => new Date(start + index * periodMs).toISOString().slice(5, 10));
+  const labels = current.map((_, index2) => new Date(start + index2 * periodMs).toISOString().slice(5, 10));
   return { labels, current, previous };
 }
 function dashboardMetricData(points, now) {
@@ -5690,11 +5690,11 @@ var handleAdminGroupEmail = async (req, url, env, ctx) => {
   for (const key of EMAIL_TEMPLATE_NAMES) {
     const t = templates[key];
     const subject = typeof t?.subject === "string" ? t.subject.trim() : "";
-    const text4 = typeof t?.text === "string" ? t.text : "";
-    if (!subject || !text4.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
+    const text6 = typeof t?.text === "string" ? t.text : "";
+    if (!subject || !text6.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
     if (/[\r\n]/.test(subject) || subject.length > 200) return json({ error: `template "${key}" subject must be a single line under 200 characters` }, 400);
-    if (text4.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
-    clean[key] = { subject, text: text4, enabled: t?.enabled !== false };
+    if (text6.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
+    clean[key] = { subject, text: text6, enabled: t?.enabled !== false };
   }
   const emailish = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
   const notificationEmail = str2(body.notificationEmail).trim();
@@ -5911,7 +5911,8 @@ var handleAdminNetworkTargets = async (req, url, env, ctx) => {
       fields,
       sharedNotes,
       editableFields,
-      stageTransitions
+      stageTransitions,
+      commercialParity
     }) => ({
       id,
       name,
@@ -5919,7 +5920,8 @@ var handleAdminNetworkTargets = async (req, url, env, ctx) => {
       types: Object.keys(fields ?? DEFAULT_SHARE_FIELDS),
       sharedNotes,
       editableFields,
-      stageTransitions
+      stageTransitions,
+      commercialParity
     }))
   });
 };
@@ -6743,18 +6745,18 @@ function emailLooksReal(value) {
 function validateNetworkPersonImport(input, allowedChapterIds) {
   const errors = [];
   if (!input || typeof input !== "object" || Array.isArray(input)) return { ok: false, errors: ["import must be an object"] };
-  const raw = input;
-  if (raw.sourceKind !== "external_reimport") errors.push("sourceKind must be external_reimport");
-  if (raw.approved !== true || raw.isRealPerson !== true) errors.push("import must be approved and identify a real person");
-  const sourceSystem = typeof raw.sourceSystem === "string" ? raw.sourceSystem.trim().toLowerCase() : "";
-  const sourceRecordId = typeof raw.sourceRecordId === "string" ? raw.sourceRecordId.trim() : "";
-  const provenance = typeof raw.provenance === "string" ? raw.provenance.trim() : "";
-  const displayName = typeof raw.displayName === "string" ? raw.displayName.trim() : "";
+  const raw2 = input;
+  if (raw2.sourceKind !== "external_reimport") errors.push("sourceKind must be external_reimport");
+  if (raw2.approved !== true || raw2.isRealPerson !== true) errors.push("import must be approved and identify a real person");
+  const sourceSystem = typeof raw2.sourceSystem === "string" ? raw2.sourceSystem.trim().toLowerCase() : "";
+  const sourceRecordId = typeof raw2.sourceRecordId === "string" ? raw2.sourceRecordId.trim() : "";
+  const provenance = typeof raw2.provenance === "string" ? raw2.provenance.trim() : "";
+  const displayName = typeof raw2.displayName === "string" ? raw2.displayName.trim() : "";
   if (!TOKEN.test(sourceSystem) || /(?:^|[._:-])(fixture|test|development|dev)(?:$|[._:-])/.test(sourceSystem)) errors.push("sourceSystem must name an approved non-development external system");
   if (!sourceRecordId || sourceRecordId.length > 200) errors.push("sourceRecordId is required and bounded");
   if (!provenance || provenance.length > 500) errors.push("provenance is required and bounded");
   if (!displayName || displayName.length > 200) errors.push("displayName is required and bounded");
-  const rawConsent = raw.consent && typeof raw.consent === "object" && !Array.isArray(raw.consent) ? raw.consent : {};
+  const rawConsent = raw2.consent && typeof raw2.consent === "object" && !Array.isArray(raw2.consent) ? raw2.consent : {};
   const consentStates = ["unknown", "granted", "denied"];
   const marketing = typeof rawConsent.marketing === "string" ? rawConsent.marketing : "";
   const discretionary = typeof rawConsent.discretionary === "string" ? rawConsent.discretionary : "";
@@ -6764,10 +6766,10 @@ function validateNetworkPersonImport(input, allowedChapterIds) {
     errors.push("consent must include marketing and discretionary states, recordedAt, and a bounded basis");
   }
   const identities = [];
-  if (!Array.isArray(raw.identities) || raw.identities.length < 1 || raw.identities.length > 8) {
+  if (!Array.isArray(raw2.identities) || raw2.identities.length < 1 || raw2.identities.length > 8) {
     errors.push("one to eight verified identities are required");
   } else {
-    for (const item of raw.identities) {
+    for (const item of raw2.identities) {
       if (!item || typeof item !== "object" || Array.isArray(item)) {
         errors.push("identity must be an object");
         continue;
@@ -6799,9 +6801,9 @@ function validateNetworkPersonImport(input, allowedChapterIds) {
     seen.add(key);
   }
   const chapterLinks = [];
-  if (raw.chapterLinks !== void 0) {
-    if (!Array.isArray(raw.chapterLinks) || raw.chapterLinks.length > allowedChapterIds.length) errors.push("chapterLinks are invalid or too numerous");
-    else for (const item of raw.chapterLinks) {
+  if (raw2.chapterLinks !== void 0) {
+    if (!Array.isArray(raw2.chapterLinks) || raw2.chapterLinks.length > allowedChapterIds.length) errors.push("chapterLinks are invalid or too numerous");
+    else for (const item of raw2.chapterLinks) {
       if (!item || typeof item !== "object" || Array.isArray(item)) {
         errors.push("chapter link must be an object");
         continue;
@@ -6837,9 +6839,9 @@ async function sha256(value) {
 }
 async function networkIdentityClaim(input) {
   const normalized = normalizeNetworkIdentity(input.kind, input.value);
-  const digest = await sha256(`${input.kind}\0${normalized}`);
+  const digest2 = await sha256(`${input.kind}\0${normalized}`);
   const hint = input.kind === "email" ? `${normalized.slice(0, 1)}***@${normalized.split("@")[1]}` : input.kind === "phone" ? `***${normalized.slice(-4)}` : void 0;
-  return { id: `identity_${digest}`, kind: input.kind, value: normalized, ...hint ? { hint } : {}, verifiedAt: input.verifiedAt };
+  return { id: `identity_${digest2}`, kind: input.kind, value: normalized, ...hint ? { hint } : {}, verifiedAt: input.verifiedAt };
 }
 async function networkSourceKey(sourceSystem, sourceRecordId) {
   return `alias_${await sha256(`${sourceSystem}\0${sourceRecordId}`)}`;
@@ -7181,9 +7183,9 @@ var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
   if (req.method === "POST") {
     let body;
     try {
-      const text4 = await req.text();
-      if (new TextEncoder().encode(text4).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
-      const parsed = JSON.parse(text4);
+      const text6 = await req.text();
+      if (new TextEncoder().encode(text6).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
+      const parsed = JSON.parse(text6);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid");
       body = parsed;
     } catch {
@@ -7315,6 +7317,898 @@ var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
   });
 };
 
+// src/worker-routes-network-commercial.ts
+import { constructStripeEvent, initStripe, StripeError } from "@odla-ai/stripe";
+
+// src/config-network-commercial.ts
+function networkCommercialSourceKey(source) {
+  return [source.stripeMode, source.appId, source.environment, source.dataEnvironment, source.runtime, source.chapterId].join(":");
+}
+
+// src/network-commercial.ts
+var raw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var text3 = (value) => typeof value === "string" && value.length > 0 && value.length <= 255 ? value : void 0;
+var integer2 = (value) => typeof value === "number" && Number.isSafeInteger(value) ? value : void 0;
+var bool = (value) => typeof value === "boolean" ? value : void 0;
+var providerId = (value, prefix) => {
+  const valueText = text3(value);
+  return valueText && (!prefix || valueText.startsWith(prefix)) ? valueText : void 0;
+};
+function metadataCandidates(object) {
+  const parent = raw(object.parent);
+  const subscriptionDetails = raw(object.subscription_details);
+  const parentSubscription = raw(parent.subscription_details);
+  return [raw(object.metadata), raw(subscriptionDetails.metadata), raw(parentSubscription.metadata)];
+}
+function metadataValue(candidates, key) {
+  return candidates.map((candidate) => text3(candidate[key])).find(Boolean);
+}
+function refId(value, prefix) {
+  if (typeof value === "string") return providerId(value, prefix);
+  return providerId(raw(value).id, prefix);
+}
+function subscriptionRef(object) {
+  return refId(object.subscription, "sub_") ?? refId(raw(object.subscription_details).subscription, "sub_") ?? refId(raw(raw(object.parent).subscription_details).subscription, "sub_");
+}
+function firstPrice(object) {
+  const data = raw(object.items).data;
+  const item = Array.isArray(data) ? raw(data[0]) : {};
+  const priceId = refId(item.price, "price_");
+  const quantity = integer2(item.quantity);
+  return { ...priceId ? { priceId } : {}, ...quantity !== void 0 ? { quantity } : {} };
+}
+function normalizeNetworkCommercialStripeEvent(input, digest2) {
+  const event = raw(input);
+  const eventId = providerId(event.id, "evt_") ?? "";
+  const eventType = text3(event.type) ?? "";
+  const object = raw(raw(event.data).object);
+  const objectId = providerId(object.id) ?? "";
+  const candidates = metadataCandidates(object);
+  const identity = {};
+  const identityKeys = {
+    appId: "odlaAppId",
+    chapterId: "chapterId",
+    environment: "odlaEnvironment",
+    dataEnvironment: "odlaDataEnvironment",
+    runtime: "odlaRuntime"
+  };
+  for (const [target, source] of Object.entries(identityKeys)) {
+    const value = metadataValue(candidates, source);
+    if (value) identity[target] = value;
+  }
+  let objectKind = "ignored";
+  if (eventType.startsWith("customer.subscription.")) objectKind = "subscription";
+  else if (eventType.startsWith("customer.")) objectKind = "customer";
+  else if (eventType.startsWith("invoice.")) objectKind = "invoice";
+  else if (eventType.startsWith("refund.")) objectKind = "refund";
+  else if (eventType === "charge.refunded") objectKind = "refund";
+  const customerId = refId(object.customer, "cus_");
+  const subscriptionId = objectKind === "subscription" ? providerId(objectId, "sub_") : subscriptionRef(object);
+  const invoiceId = objectKind === "invoice" ? providerId(objectId, "in_") : refId(object.invoice, "in_");
+  const chargeId = eventType === "charge.refunded" ? providerId(objectId, "ch_") : refId(object.charge, "ch_");
+  const paymentIntentId = refId(object.payment_intent, "pi_");
+  const price = firstPrice(object);
+  const amountCents = integer2(eventType === "charge.refunded" ? object.amount_refunded : object.amount);
+  const currency = text3(object.currency)?.toLowerCase();
+  const status = text3(object.status);
+  return {
+    eventId,
+    digest: digest2,
+    eventType,
+    eventCreated: integer2(event.created) ?? 0,
+    livemode: event.livemode === true,
+    objectKind,
+    objectId,
+    identity,
+    ...metadataValue(candidates, "applicationId") ? { applicationId: metadataValue(candidates, "applicationId") } : {},
+    ...metadataValue(candidates, "personId") ? { personId: metadataValue(candidates, "personId") } : {},
+    ...metadataValue(candidates, "membershipId") ? { membershipId: metadataValue(candidates, "membershipId") } : {},
+    ...customerId ? { customerId } : {},
+    ...subscriptionId ? { subscriptionId } : {},
+    ...invoiceId ? { invoiceId } : {},
+    ...chargeId ? { chargeId } : {},
+    ...paymentIntentId ? { paymentIntentId } : {},
+    ...price,
+    ...status ? { status } : {},
+    ...currency ? { currency } : {},
+    ...amountCents !== void 0 ? { amountCents } : {},
+    ...integer2(object.amount_paid) !== void 0 ? { amountPaidCents: integer2(object.amount_paid) } : {},
+    ...integer2(object.amount_remaining) !== void 0 ? { amountRemainingCents: integer2(object.amount_remaining) } : {},
+    ...integer2(object.current_period_start) !== void 0 ? { currentPeriodStart: integer2(object.current_period_start) } : {},
+    ...integer2(object.current_period_end) !== void 0 ? { currentPeriodEnd: integer2(object.current_period_end) } : {},
+    ...bool(object.cancel_at_period_end) !== void 0 ? { cancelAtPeriodEnd: bool(object.cancel_at_period_end) } : {}
+  };
+}
+var identityFields = ["appId", "chapterId", "environment", "dataEnvironment", "runtime"];
+function directSource(fact, sources) {
+  const mode = fact.livemode ? "live" : "test";
+  const supplied = identityFields.filter((field) => fact.identity[field] !== void 0);
+  const candidates = sources.filter((source) => source.stripeMode === mode && supplied.every((field) => source[field] === fact.identity[field]));
+  if (supplied.length === identityFields.length) return candidates.length === 1 ? candidates[0] : "wrong";
+  if (supplied.length > 0 && candidates.length === 0) return "wrong";
+  return null;
+}
+var objectRefs = (fact) => [
+  fact.customerId && `customer:${fact.customerId}`,
+  fact.subscriptionId && `subscription:${fact.subscriptionId}`,
+  fact.invoiceId && `invoice:${fact.invoiceId}`,
+  fact.chargeId && `charge:${fact.chargeId}`,
+  fact.paymentIntentId && `payment_intent:${fact.paymentIntentId}`
+].filter((value) => Boolean(value));
+function ownRef(fact) {
+  if (!fact.objectId) return null;
+  if (fact.objectKind === "customer") return `customer:${fact.objectId}`;
+  if (fact.objectKind === "subscription") return `subscription:${fact.objectId}`;
+  if (fact.objectKind === "invoice") return `invoice:${fact.objectId}`;
+  if (fact.eventType.startsWith("refund.")) return `refund:${fact.objectId}`;
+  return fact.eventType === "charge.refunded" ? `charge:${fact.objectId}` : null;
+}
+var order = (left, right) => left.eventCreated - right.eventCreated || left.eventId.localeCompare(right.eventId);
+function projectNetworkCommercialEvents(input, sources) {
+  const facts2 = [...input].sort(order);
+  const exceptions = [];
+  const unique = [];
+  const digests = /* @__PURE__ */ new Map();
+  for (const fact of facts2) {
+    const prior = digests.get(fact.eventId);
+    if (prior === void 0) {
+      digests.set(fact.eventId, fact.digest);
+      unique.push(fact);
+    } else if (prior !== fact.digest) exceptions.push({ eventId: fact.eventId, kind: "collision", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+  }
+  const assignments = /* @__PURE__ */ new Map();
+  const refs = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    const direct = directSource(fact, sources);
+    if (direct && direct !== "wrong") assignments.set(fact.eventId, direct);
+  }
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const fact of unique) {
+      const assigned = assignments.get(fact.eventId);
+      if (assigned) {
+        const key = networkCommercialSourceKey(assigned);
+        for (const ref of [...objectRefs(fact), ownRef(fact)].filter((value) => Boolean(value))) {
+          const keys2 = refs.get(ref) ?? /* @__PURE__ */ new Set();
+          const before = keys2.size;
+          keys2.add(key);
+          refs.set(ref, keys2);
+          if (keys2.size !== before) changed = true;
+        }
+        continue;
+      }
+      if (directSource(fact, sources) === "wrong") continue;
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      if (keys.size !== 1) continue;
+      const candidate = sources.find((source) => networkCommercialSourceKey(source) === [...keys][0]);
+      if (candidate && directSource({ ...fact, identity: fact.identity }, [candidate]) !== "wrong") {
+        assignments.set(fact.eventId, candidate);
+        changed = true;
+      }
+    }
+  }
+  const latest = /* @__PURE__ */ new Map();
+  for (const fact of unique) {
+    if (fact.objectKind === "ignored" || !fact.eventId || !fact.objectId) {
+      exceptions.push({ eventId: fact.eventId, kind: "unsupported", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const source = assignments.get(fact.eventId);
+    if (!source) {
+      const direct = directSource(fact, sources);
+      const keys = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
+      exceptions.push({ eventId: fact.eventId, kind: direct === "wrong" ? "wrong_partition" : keys.size > 1 ? "ambiguous_partition" : "unmatched_partition", detail: { eventType: fact.eventType, objectId: fact.objectId } });
+      continue;
+    }
+    const row = { ...fact, sourceKey: networkCommercialSourceKey(source) };
+    const key = `${fact.objectKind}:${fact.objectId}`;
+    const prior = latest.get(key);
+    if (!prior || order(prior, fact) <= 0) latest.set(key, row);
+  }
+  const rows6 = [...latest.values()];
+  const customers = rows6.filter((row) => row.objectKind === "customer");
+  const subscriptions = rows6.filter((row) => row.objectKind === "subscription");
+  const invoices = rows6.filter((row) => row.objectKind === "invoice");
+  const refunds = rows6.filter((row) => row.objectKind === "refund" && row.eventType.startsWith("refund."));
+  for (const charge of rows6.filter((row) => row.eventType === "charge.refunded")) {
+    if (!refunds.some((refund) => refund.chargeId === charge.objectId)) {
+      exceptions.push({ eventId: charge.eventId, kind: "charge_refund_without_refund_object", sourceKey: charge.sourceKey, detail: { eventType: charge.eventType, objectId: charge.objectId } });
+    }
+  }
+  const totalsMap = /* @__PURE__ */ new Map();
+  const add = (row, field, amount) => {
+    if (!row.currency) return;
+    const key = `${row.sourceKey}:${row.currency}`;
+    const total = totalsMap.get(key) ?? { sourceKey: row.sourceKey, currency: row.currency, paidCents: 0, refundedCents: 0, netCents: 0 };
+    total[field] += amount;
+    total.netCents = total.paidCents - total.refundedCents;
+    totalsMap.set(key, total);
+  };
+  for (const row of invoices) add(row, "paidCents", row.amountPaidCents ?? 0);
+  for (const row of refunds) add(row, "refundedCents", row.amountCents ?? 0);
+  return { customers, subscriptions, invoices, refunds, exceptions, totals: [...totalsMap.values()].sort((a, b) => `${a.sourceKey}:${a.currency}`.localeCompare(`${b.sourceKey}:${b.currency}`)) };
+}
+
+// src/network-commercial-store.ts
+var eventRowId = (eventId) => `network-commercial-event:${eventId}`;
+var projectionId = (kind, sourceKey, providerId2) => `network-commercial:${kind}:${sourceKey}:${providerId2}`;
+var exceptionId = (eventId, kind) => `network-commercial-exception:${eventId}:${kind}`;
+var materializedNamespaces = [
+  "networkCommercialCustomers",
+  "networkCommercialSubscriptions",
+  "networkCommercialInvoices",
+  "networkCommercialRefunds"
+];
+async function rows5(db, ns) {
+  const all = [];
+  const pageSize = 500;
+  for (let offset = 0; ; offset += pageSize) {
+    const result = await db.query({ [ns]: { $: { limit: pageSize, offset } } });
+    const page = Array.isArray(result[ns]) ? result[ns] : [];
+    all.push(...page);
+    if (page.length < pageSize) return all;
+  }
+}
+async function loadNetworkCommercialProjection(db, sources) {
+  const stored = await rows5(db, "networkCommercialEvents");
+  const projection = projectNetworkCommercialEvents(stored.map((row) => row.fact), sources);
+  const persisted = await rows5(db, "networkCommercialExceptions");
+  for (const row of persisted) {
+    if (row.status !== "active" || row.kind !== "collision") continue;
+    if (projection.exceptions.some((item) => item.eventId === row.eventId && item.kind === "collision")) continue;
+    projection.exceptions.push({
+      eventId: String(row.eventId),
+      kind: "collision",
+      ...typeof row.sourceKey === "string" ? { sourceKey: row.sourceKey } : {},
+      detail: row.detail
+    });
+  }
+  return projection;
+}
+function projectionOps(projection, now) {
+  const groups = [
+    ["networkCommercialCustomers", "customer", projection.customers],
+    ["networkCommercialSubscriptions", "subscription", projection.subscriptions],
+    ["networkCommercialInvoices", "invoice", projection.invoices],
+    ["networkCommercialRefunds", "refund", projection.refunds]
+  ];
+  return groups.flatMap(([ns, kind, projected]) => projected.map((snapshot) => ({
+    t: "update",
+    ns,
+    id: projectionId(kind, snapshot.sourceKey, snapshot.objectId),
+    attrs: {
+      id: projectionId(kind, snapshot.sourceKey, snapshot.objectId),
+      providerId: snapshot.objectId,
+      sourceKey: snapshot.sourceKey,
+      status: "active",
+      snapshot,
+      eventCreated: snapshot.eventCreated,
+      updatedAt: now
+    }
+  })));
+}
+async function rebuildNetworkCommercialProjection(db, sources, mutationId, now = Date.now()) {
+  const projection = await loadNetworkCommercialProjection(db, sources);
+  const [existing, ...materialized] = await Promise.all([
+    rows5(db, "networkCommercialExceptions"),
+    ...materializedNamespaces.map((ns) => rows5(db, ns))
+  ]);
+  const activeIds = new Set(projection.exceptions.map((item) => exceptionId(item.eventId, item.kind)));
+  const projectedIds = new Set(projectionOps(projection, now).map((op) => String(op.id)));
+  const ops = [
+    ...projectionOps(projection, now),
+    ...materializedNamespaces.flatMap((ns, index2) => materialized[index2].filter((row) => row.status === "active" && !projectedIds.has(String(row.id))).map((row) => ({ t: "update", ns, id: String(row.id), attrs: { status: "inactive", updatedAt: now } }))),
+    ...existing.filter((row) => row.status === "active" && !activeIds.has(String(row.id))).map((row) => ({
+      t: "update",
+      ns: "networkCommercialExceptions",
+      id: String(row.id),
+      attrs: { status: "resolved", updatedAt: now }
+    })),
+    ...projection.exceptions.map((item) => ({
+      t: "update",
+      ns: "networkCommercialExceptions",
+      id: exceptionId(item.eventId, item.kind),
+      attrs: {
+        id: exceptionId(item.eventId, item.kind),
+        eventId: item.eventId,
+        kind: item.kind,
+        ...item.sourceKey ? { sourceKey: item.sourceKey } : {},
+        status: "active",
+        detail: item.detail,
+        updatedAt: now
+      }
+    }))
+  ];
+  if (ops.length > 0) await db.transact(ops, { mutationId });
+  return projection;
+}
+async function ingestNetworkCommercialFact(db, sources, fact, now = Date.now()) {
+  const found = await db.query({ networkCommercialEvents: { $: { where: { eventId: fact.eventId }, limit: 1 } } });
+  const existing = found.networkCommercialEvents?.[0];
+  if (existing) {
+    const projection2 = await loadNetworkCommercialProjection(db, sources);
+    if (existing.digest === fact.digest) return { status: "replayed", projection: projection2 };
+    const id2 = exceptionId(fact.eventId, "collision");
+    await db.transact([{ t: "update", ns: "networkCommercialExceptions", id: id2, attrs: {
+      id: id2,
+      eventId: fact.eventId,
+      kind: "collision",
+      status: "active",
+      detail: { eventType: fact.eventType, objectId: fact.objectId },
+      updatedAt: now
+    } }], { mutationId: `network-commercial-collision:${fact.eventId}:${fact.digest}` });
+    return { status: "collision", projection: await loadNetworkCommercialProjection(db, sources) };
+  }
+  const id = eventRowId(fact.eventId);
+  let lostRace = false;
+  let duplicate = false;
+  try {
+    const write = await db.transact([{ t: "update", ns: "networkCommercialEvents", id, attrs: {
+      id,
+      eventId: fact.eventId,
+      digest: fact.digest,
+      eventType: fact.eventType,
+      eventCreated: fact.eventCreated,
+      livemode: fact.livemode,
+      fact,
+      receivedAt: now
+    } }], {
+      mutationId: `network-commercial-ingest:${fact.eventId}:${fact.digest}`,
+      guards: [{ ns: "networkCommercialEvents", id, exists: false }]
+    });
+    duplicate = write.duplicate;
+  } catch (error) {
+    if (error.code !== "transact_guard_failed") throw error;
+    lostRace = true;
+  }
+  if (duplicate || lostRace) {
+    const raced = await db.query({ networkCommercialEvents: { $: { where: { eventId: fact.eventId }, limit: 1 } } });
+    const row = raced.networkCommercialEvents?.[0];
+    const projection2 = await loadNetworkCommercialProjection(db, sources);
+    if (row?.digest === fact.digest) return { status: "replayed", projection: projection2 };
+    const id2 = exceptionId(fact.eventId, "collision");
+    await db.transact([{ t: "update", ns: "networkCommercialExceptions", id: id2, attrs: {
+      id: id2,
+      eventId: fact.eventId,
+      kind: "collision",
+      status: "active",
+      detail: { eventType: fact.eventType, objectId: fact.objectId },
+      updatedAt: now
+    } }], { mutationId: `network-commercial-collision:${fact.eventId}:${fact.digest}` });
+    return { status: "collision", projection: await loadNetworkCommercialProjection(db, sources) };
+  }
+  const projection = await rebuildNetworkCommercialProjection(
+    db,
+    sources,
+    `network-commercial-project:${fact.eventId}:${fact.digest}`,
+    now
+  );
+  return { status: "stored", projection };
+}
+
+// src/network-commercial-reconcile.ts
+var asRaw = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+async function listStripeObjects(client, path, params = {}, maxPages = 20) {
+  const objects = [];
+  let startingAfter;
+  for (let pageNumber = 0; pageNumber < maxPages; pageNumber += 1) {
+    const page = await client.request("GET", path, {
+      ...params,
+      limit: 100,
+      ...startingAfter ? { starting_after: startingAfter } : {}
+    });
+    if (!Array.isArray(page.data) || typeof page.has_more !== "boolean") {
+      throw new Error("Stripe returned an invalid commercial list response");
+    }
+    const rows6 = page.data.map(asRaw).filter((row) => row !== null);
+    if (rows6.length !== page.data.length) throw new Error("Stripe returned a malformed commercial object");
+    objects.push(...rows6);
+    if (!page.has_more) return { objects, complete: true };
+    const cursor = rows6.at(-1)?.id;
+    if (typeof cursor !== "string" || !cursor) throw new Error("Stripe pagination did not provide a cursor");
+    startingAfter = cursor;
+  }
+  return { objects, complete: false };
+}
+function facts(snapshots) {
+  const groups = [
+    ["customer.updated", snapshots.customers.objects],
+    ["customer.subscription.updated", snapshots.subscriptions.objects],
+    ["invoice.updated", snapshots.invoices.objects],
+    ["refund.updated", snapshots.refunds.objects]
+  ];
+  return groups.flatMap(([eventType, objects]) => objects.map((object) => {
+    const id = typeof object.id === "string" ? object.id : "invalid";
+    return normalizeNetworkCommercialStripeEvent({
+      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id}`,
+      type: eventType,
+      created: typeof object.created === "number" ? object.created : 0,
+      livemode: object.livemode === true,
+      data: { object }
+    }, `stripe-snapshot:${eventType}:${id}`);
+  }));
+}
+var selected = (row) => ({
+  status: row.status ?? null,
+  currency: row.currency ?? null,
+  amountCents: row.amountCents ?? null,
+  amountPaidCents: row.amountPaidCents ?? null,
+  amountRemainingCents: row.amountRemainingCents ?? null,
+  customerId: row.customerId ?? null,
+  subscriptionId: row.subscriptionId ?? null,
+  invoiceId: row.invoiceId ?? null,
+  priceId: row.priceId ?? null,
+  quantity: row.quantity ?? null,
+  applicationId: row.applicationId ?? null,
+  personId: row.personId ?? null,
+  membershipId: row.membershipId ?? null,
+  currentPeriodStart: row.currentPeriodStart ?? null,
+  currentPeriodEnd: row.currentPeriodEnd ?? null,
+  cancelAtPeriodEnd: row.cancelAtPeriodEnd ?? null
+});
+var index = (projection) => new Map(
+  [...projection.customers, ...projection.subscriptions, ...projection.invoices, ...projection.refunds].map((row) => [`${row.sourceKey}:${row.objectKind}:${row.objectId}`, row])
+);
+function reconcileStripeSnapshot(shadow, snapshots, sources) {
+  const stripe = projectNetworkCommercialEvents(facts(snapshots), sources);
+  const shadowRows = index(shadow);
+  const stripeRows = index(stripe);
+  const exceptions = [];
+  const complete = Object.values(snapshots).every((snapshot) => snapshot.complete);
+  if (!complete) exceptions.push({ kind: "stripe_snapshot_truncated", detail: {} });
+  for (const [key, row] of shadowRows) {
+    const other = stripeRows.get(key);
+    if (!other) {
+      exceptions.push({ kind: "missing_from_stripe", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+    } else if (JSON.stringify(selected(row)) !== JSON.stringify(selected(other))) {
+      exceptions.push({ kind: "object_mismatch", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: { shadow: selected(row), stripe: selected(other) } });
+    }
+  }
+  for (const [key, row] of stripeRows) {
+    if (!shadowRows.has(key)) exceptions.push({ kind: "missing_from_shadow", sourceKey: row.sourceKey, objectKind: row.objectKind, providerId: row.objectId, detail: {} });
+  }
+  if (JSON.stringify(shadow.totals) !== JSON.stringify(stripe.totals)) {
+    exceptions.push({ kind: "totals_mismatch", detail: { shadow: shadow.totals, stripe: stripe.totals } });
+  }
+  return {
+    ok: exceptions.length === 0,
+    complete,
+    ignoredObjects: stripe.exceptions.filter((item) => item.kind === "wrong_partition" || item.kind === "unmatched_partition").length,
+    exceptions,
+    stripeTotals: stripe.totals
+  };
+}
+
+// src/worker-routes-network-commercial-parity.ts
+import { signFederatedRequest as signFederatedRequest6, verifyFederatedRequest as verifyFederatedRequest8 } from "@odla-ai/db";
+
+// src/network-commercial-parity.ts
+var DIGEST = /^[0-9a-f]{64}$/;
+var MAX_RECORDS = 500;
+var text4 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
+function parityMessage(partition, kind, value) {
+  return [
+    "chapter-commercial-parity",
+    "v1",
+    partition.appId,
+    partition.chapterId,
+    partition.environment,
+    partition.dataEnvironment,
+    partition.runtime,
+    kind,
+    value
+  ].join("");
+}
+async function parityKey(secret) {
+  const encoder4 = new TextEncoder();
+  return crypto.subtle.importKey(
+    "raw",
+    encoder4.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+}
+async function digestWithKey(key, partition, kind, value) {
+  const encoder4 = new TextEncoder();
+  const signed = await crypto.subtle.sign("HMAC", key, encoder4.encode(parityMessage(partition, kind, value)));
+  return [...new Uint8Array(signed)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+async function buildChapterCommercialParitySnapshot(input) {
+  const requestedMax = input.maxRecords ?? MAX_RECORDS;
+  const maxRecords = Number.isSafeInteger(requestedMax) ? Math.max(0, Math.min(requestedMax, MAX_RECORDS)) : MAX_RECORDS;
+  const eligible = input.rows.filter((row) => text4(row.id) && (text4(row.stripeCustomerId) || text4(row.stripeSubscriptionId)));
+  const selected2 = eligible.slice(0, maxRecords);
+  const key = await parityKey(input.secret);
+  const records = await Promise.all(selected2.map(async (row) => {
+    const applicationId = text4(row.id);
+    const customerId = text4(row.stripeCustomerId);
+    const subscriptionId = text4(row.stripeSubscriptionId);
+    return {
+      applicationDigest: await digestWithKey(key, input.partition, "application", applicationId),
+      customerDigest: customerId ? await digestWithKey(key, input.partition, "customer", customerId) : null,
+      subscriptionDigest: subscriptionId ? await digestWithKey(key, input.partition, "subscription", subscriptionId) : null,
+      status: text4(row.status, 64),
+      canceled: row.canceled === true
+    };
+  }));
+  records.sort((left, right) => left.applicationDigest.localeCompare(right.applicationDigest));
+  const truncated = input.scanTruncated || eligible.length > maxRecords;
+  return {
+    version: 1,
+    site: { id: input.siteId },
+    partition: input.partition,
+    generatedAt: input.now ?? Date.now(),
+    complete: !truncated,
+    truncated,
+    counts: { scanned: input.scanned, eligible: eligible.length, returned: records.length },
+    records
+  };
+}
+function recordKey(record4) {
+  return `${record4.applicationDigest}:${record4.customerDigest ?? "-"}:${record4.subscriptionDigest ?? "-"}`;
+}
+function validSnapshot(snapshot, source) {
+  const partition = snapshot?.partition;
+  const records = snapshot?.records;
+  if (snapshot?.version !== 1 || snapshot.site?.id !== source.chapterId || !partition || !Array.isArray(records) || records.length > MAX_RECORDS || partition.appId !== source.appId || partition.chapterId !== source.chapterId || partition.environment !== source.environment || partition.dataEnvironment !== source.dataEnvironment || partition.runtime !== source.runtime || typeof snapshot.complete !== "boolean" || typeof snapshot.truncated !== "boolean" || !snapshot.counts) return false;
+  const seen = /* @__PURE__ */ new Set();
+  for (const record4 of records) {
+    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text4(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
+    const key = recordKey(record4);
+    if (seen.has(key)) return false;
+    seen.add(key);
+  }
+  return Number.isSafeInteger(snapshot.counts.scanned) && Number.isSafeInteger(snapshot.counts.eligible) && Number.isSafeInteger(snapshot.counts.returned) && snapshot.counts.returned === records.length && snapshot.counts.scanned >= snapshot.counts.eligible && snapshot.counts.eligible >= snapshot.counts.returned;
+}
+async function reconcileCommercialParitySnapshot(input) {
+  if (!validSnapshot(input.snapshot, input.source)) throw new Error("invalid chapter commercial parity snapshot");
+  const sourceKey = networkCommercialSourceKey(input.source);
+  const key = await parityKey(input.secret);
+  const shadow = await Promise.all(input.projection.subscriptions.filter((row) => row.sourceKey === sourceKey && text4(row.applicationId) && text4(row.objectId)).map(async (row) => {
+    const customerId = text4(row.customerId);
+    const subscriptionId = text4(row.subscriptionId) ?? text4(row.objectId);
+    return {
+      applicationDigest: await digestWithKey(key, input.snapshot.partition, "application", row.applicationId),
+      customerDigest: customerId ? await digestWithKey(key, input.snapshot.partition, "customer", customerId) : null,
+      subscriptionDigest: subscriptionId ? await digestWithKey(key, input.snapshot.partition, "subscription", subscriptionId) : null,
+      status: null,
+      canceled: false,
+      stripeStatus: text4(row.status, 64),
+      stripeCanceled: row.status === "canceled"
+    };
+  }));
+  const chapterByKey = new Map(input.snapshot.records.map((record4) => [recordKey(record4), record4]));
+  const shadowByKey = new Map(shadow.map((record4) => [recordKey(record4), record4]));
+  const exceptions = [];
+  const records = [];
+  for (const [key2, chapter] of chapterByKey) {
+    const stripe = shadowByKey.get(key2);
+    if (!stripe) {
+      exceptions.push({ kind: "chapter_only", applicationDigest: chapter.applicationDigest, detail: { chapterStatus: chapter.status } });
+      continue;
+    }
+    const compared = { ...chapter, stripeStatus: stripe.stripeStatus, stripeCanceled: stripe.stripeCanceled };
+    records.push(compared);
+    if (chapter.canceled !== stripe.stripeCanceled) {
+      exceptions.push({
+        kind: "cancellation_mismatch",
+        applicationDigest: chapter.applicationDigest,
+        detail: { chapterCanceled: chapter.canceled, stripeCanceled: stripe.stripeCanceled }
+      });
+    }
+  }
+  for (const [key2, stripe] of shadowByKey) {
+    if (!chapterByKey.has(key2)) {
+      exceptions.push({ kind: "shadow_only", applicationDigest: stripe.applicationDigest, detail: { stripeStatus: stripe.stripeStatus } });
+    }
+  }
+  if (!input.snapshot.complete || input.snapshot.truncated) {
+    exceptions.push({
+      kind: "chapter_truncated",
+      detail: { scanned: input.snapshot.counts.scanned, eligible: input.snapshot.counts.eligible, returned: input.snapshot.counts.returned }
+    });
+  }
+  if (chapterByKey.size !== shadowByKey.size) {
+    exceptions.push({ kind: "count_mismatch", detail: { chapter: chapterByKey.size, shadow: shadowByKey.size } });
+  }
+  records.sort((left, right) => left.applicationDigest.localeCompare(right.applicationDigest));
+  return {
+    ok: input.snapshot.complete && exceptions.length === 0,
+    complete: input.snapshot.complete,
+    counts: { chapter: chapterByKey.size, shadow: shadowByKey.size, matched: records.length },
+    records,
+    exceptions
+  };
+}
+
+// src/network-commercial-parity-response.ts
+var MAX_RESPONSE_BYTES = 512e3;
+async function readBoundedCommercialParityResponse(response) {
+  const declared = Number(response.headers.get("content-length") ?? 0);
+  if (declared > MAX_RESPONSE_BYTES) return null;
+  if (!response.body) return "";
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const next = await reader.read();
+    if (next.done) break;
+    total += next.value.byteLength;
+    if (total > MAX_RESPONSE_BYTES) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(next.value);
+  }
+  const body = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    body.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return new TextDecoder().decode(body);
+}
+
+// src/worker-routes-network-commercial-parity.ts
+var PARITY_PATH = "/api/network/commercial-parity";
+var PAGE2 = 500;
+var MAX_SCAN = 5e3;
+var MAX_RECORDS2 = 500;
+async function localCommercialRows(db) {
+  const rows6 = [];
+  for (let offset = 0; offset < MAX_SCAN; offset += PAGE2) {
+    const result = await db.query({ applications: { $: { limit: PAGE2, offset, order: { createdAt: "asc" } } } });
+    const page = Array.isArray(result.applications) ? result.applications : [];
+    rows6.push(...page.slice(0, MAX_SCAN - rows6.length));
+    if (page.length < PAGE2) return { rows: rows6, truncated: false };
+  }
+  return { rows: rows6, truncated: true };
+}
+var handleNetworkCommercialParity = async (req, url, env, ctx) => {
+  if (req.method !== "GET" || url.pathname !== PARITY_PATH) return null;
+  if (ctx.chapter.mode !== "chapter") return json({ error: "not found" }, 404);
+  const readers = ctx.chapter.network.readers.filter((reader) => reader.commercialParity);
+  if (readers.length === 0) return json({ error: "unauthorized" }, 401);
+  const db = ctx.makeDb(env);
+  const secret = await getVaultSecret(db, "network_share_secret");
+  if (!secret) return json({ error: "unauthorized" }, 401);
+  const verified = await verifyFederatedRequest8(req, { secret, senders: readers.map((reader) => reader.id) });
+  if (!verified.ok) return json({ error: "unauthorized", reason: verified.reason }, 401);
+  const partition = {
+    appId: env.ODLA_APP_ID,
+    chapterId: ctx.chapter.id,
+    environment: env.ODLA_ENV,
+    dataEnvironment: env.ODLA_ENV,
+    runtime: env.ODLA_RUNTIME?.trim() || "default"
+  };
+  try {
+    const local3 = await localCommercialRows(db);
+    return json(await buildChapterCommercialParitySnapshot({
+      rows: local3.rows,
+      secret,
+      partition,
+      siteId: ctx.chapter.id,
+      scanned: local3.rows.length,
+      scanTruncated: local3.truncated,
+      maxRecords: MAX_RECORDS2
+    }));
+  } catch {
+    return json({ error: "commercial parity unavailable" }, 503);
+  }
+};
+async function reconcileTarget(db, env, ctx, target, projection) {
+  const base = { targetId: target.id, name: target.name, url: target.url };
+  const secret = await getVaultSecret(db, target.secretName);
+  if (!secret) return { ...base, available: false, ok: false, error: { code: "edge_secret_missing" } };
+  const destination = new URL(PARITY_PATH, target.url);
+  try {
+    const transport = resolveNetworkTargetTransport(env, target);
+    const headers = await signFederatedRequest6({ secret, sender: ctx.chapter.id, method: "GET", url: destination });
+    const response = await transport.fetch(destination, { headers, signal: AbortSignal.timeout(1e4) });
+    const responseBody = await readBoundedCommercialParityResponse(response);
+    const snapshot = responseBody !== null ? (() => {
+      try {
+        return JSON.parse(responseBody);
+      } catch {
+        return null;
+      }
+    })() : null;
+    if (!response.ok || !snapshot) {
+      return {
+        ...base,
+        available: false,
+        ok: false,
+        transport: transport.kind,
+        error: { code: "chapter_response_failed", status: response.status }
+      };
+    }
+    const sources = ctx.chapter.networkCommercialReadModel?.sources ?? [];
+    const matchingSources = sources.filter((candidate) => candidate.appId === snapshot.partition?.appId && candidate.chapterId === snapshot.partition?.chapterId && candidate.environment === snapshot.partition?.environment && candidate.dataEnvironment === snapshot.partition?.dataEnvironment && candidate.runtime === snapshot.partition?.runtime);
+    if (matchingSources.length !== 1) {
+      return {
+        ...base,
+        available: true,
+        ok: false,
+        transport: transport.kind,
+        error: { code: matchingSources.length === 0 ? "source_not_configured" : "source_ambiguous" }
+      };
+    }
+    return {
+      ...base,
+      available: true,
+      transport: transport.kind,
+      generatedAt: snapshot.generatedAt,
+      ...await reconcileCommercialParitySnapshot({
+        projection,
+        source: matchingSources[0],
+        snapshot,
+        secret
+      })
+    };
+  } catch (error) {
+    return {
+      ...base,
+      available: false,
+      ok: false,
+      error: {
+        code: error instanceof NetworkTargetTransportError ? "binding_unavailable" : error instanceof Error && error.message === "invalid chapter commercial parity snapshot" ? "invalid_chapter_snapshot" : "chapter_request_failed"
+      }
+    };
+  }
+}
+async function reconcileChapterCommercialTargets(db, env, ctx, projection) {
+  const targets = ctx.chapter.network.targets.filter((target) => target.commercialParity);
+  const results = await Promise.all(targets.map((target) => reconcileTarget(db, env, ctx, target, projection)));
+  return {
+    reconciled: true,
+    provider: "chapters",
+    writable: false,
+    configured: targets.length,
+    available: results.filter((result) => result.available).length,
+    ok: results.every((result) => result.ok),
+    targets: results
+  };
+}
+
+// src/worker-routes-network-commercial.ts
+var ADMIN_PATH2 = "/api/admin/network-commercial-read-model";
+var WEBHOOK_PATH = "/api/network-commercial/stripe-webhook";
+var MAX_BODY3 = 512e3;
+var MUTATION_ID5 = /^[A-Za-z0-9_-]{16,128}$/;
+async function digest(body) {
+  const value = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(body));
+  return [...new Uint8Array(value)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+async function boundedBody(req) {
+  if (Number(req.headers.get("content-length") ?? 0) > MAX_BODY3) return null;
+  const body = await req.text();
+  return new TextEncoder().encode(body).byteLength <= MAX_BODY3 ? body : null;
+}
+async function gate11(req, env, ctx) {
+  const db = ctx.makeDb(env);
+  const user = await ctx.verifyUser(req, env);
+  if (!user) return { response: json({ error: "unauthorized" }, 401) };
+  if (!await ctx.isSuperAdminEmail(db, user.email)) return { response: json({ error: "forbidden" }, 403) };
+  return { db, user };
+}
+function safeProjection(projection) {
+  const row = (item) => ({
+    sourceKey: item.sourceKey,
+    providerId: item.objectId,
+    eventType: item.eventType,
+    eventCreated: item.eventCreated,
+    status: item.status ?? null,
+    currency: item.currency ?? null,
+    amountCents: item.amountCents ?? null,
+    amountPaidCents: item.amountPaidCents ?? null,
+    amountRemainingCents: item.amountRemainingCents ?? null,
+    customerId: item.customerId ?? null,
+    subscriptionId: item.subscriptionId ?? null,
+    invoiceId: item.invoiceId ?? null,
+    priceId: item.priceId ?? null,
+    quantity: item.quantity ?? null,
+    applicationId: item.applicationId ?? null,
+    personId: item.personId ?? null,
+    membershipId: item.membershipId ?? null,
+    currentPeriodStart: item.currentPeriodStart ?? null,
+    currentPeriodEnd: item.currentPeriodEnd ?? null,
+    cancelAtPeriodEnd: item.cancelAtPeriodEnd ?? null
+  });
+  return {
+    version: 1,
+    mode: "shadow",
+    writable: false,
+    authoritativeForCharges: false,
+    totals: projection.totals,
+    customers: projection.customers.map(row),
+    subscriptions: projection.subscriptions.map(row),
+    invoices: projection.invoices.map(row),
+    refunds: projection.refunds.map(row),
+    exceptions: projection.exceptions
+  };
+}
+var handleNetworkCommercialStripeWebhook = async (req, url, env, ctx) => {
+  if (url.pathname !== WEBHOOK_PATH) return null;
+  if (!ctx.chapter.networkCommercialReadModel) return json({ error: "not found" }, 404);
+  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const body = await boundedBody(req);
+  if (body === null) return json({ error: "request is too large" }, 413);
+  const signature = req.headers.get("stripe-signature") ?? "";
+  const db = ctx.makeDb(env);
+  let secret;
+  try {
+    secret = await db.secrets.get("network_commercial_stripe_webhook_secret");
+  } catch {
+    return json({ error: "commercial webhook is not configured" }, 503);
+  }
+  try {
+    const event = await constructStripeEvent(body, signature, secret);
+    const fact = normalizeNetworkCommercialStripeEvent(event, await digest(body));
+    if (!fact.eventId || !fact.eventType || !fact.objectId) return json({ error: "Stripe event identity is invalid" }, 400);
+    const result = await ingestNetworkCommercialFact(db, ctx.chapter.networkCommercialReadModel.sources, fact);
+    if (result.status === "collision") {
+      console.error("network commercial event collision", JSON.stringify({ eventId: fact.eventId, eventType: fact.eventType }));
+    }
+    return json({ ok: true, status: result.status, eventId: fact.eventId });
+  } catch (error) {
+    if (error instanceof StripeError) return json({ error: error.message, code: error.code }, 400);
+    throw error;
+  }
+};
+var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
+  if (url.pathname !== ADMIN_PATH2) return null;
+  if (!ctx.chapter.networkCommercialReadModel) return json({ error: "not found" }, 404);
+  if (req.method !== "GET" && req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const got = await gate11(req, env, ctx);
+  if ("response" in got) return got.response;
+  const db = got.db;
+  if (req.method === "POST") {
+    const body = await boundedBody(req);
+    if (body === null) return json({ error: "request is too large" }, 413);
+    let parsed;
+    try {
+      const value = JSON.parse(body);
+      if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("shape");
+      parsed = value;
+    } catch {
+      return json({ error: "invalid JSON body" }, 400);
+    }
+    if (parsed.command === "reconcile-chapters") {
+      const projection2 = await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources);
+      return json(await reconcileChapterCommercialTargets(db, env, ctx, projection2));
+    }
+    if (parsed.command === "reconcile-stripe") {
+      const secretKey = await getVaultSecret(db, "stripe_secret_key");
+      if (!secretKey) return json({ error: "Stripe reconciliation is not configured" }, 503);
+      try {
+        const stripe = initStripe({ secretKey });
+        const [customers, subscriptions, invoices, refunds] = await Promise.all([
+          listStripeObjects(stripe, "/v1/customers"),
+          listStripeObjects(stripe, "/v1/subscriptions", { status: "all" }),
+          listStripeObjects(stripe, "/v1/invoices"),
+          listStripeObjects(stripe, "/v1/refunds")
+        ]);
+        const projection2 = await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources);
+        return json({
+          reconciled: true,
+          ...reconcileStripeSnapshot(projection2, { customers, subscriptions, invoices, refunds }, ctx.chapter.networkCommercialReadModel.sources)
+        });
+      } catch (error) {
+        if (error instanceof StripeError) return json({ error: "Stripe reconciliation failed", code: error.code }, 502);
+        return json({ error: "Stripe reconciliation failed" }, 502);
+      }
+    }
+    if (parsed.command !== "rebuild" || typeof parsed.mutationId !== "string" || !MUTATION_ID5.test(parsed.mutationId)) {
+      return json({ error: "rebuild, reconcile-stripe, or reconcile-chapters command is required; rebuild also requires a valid mutationId" }, 400);
+    }
+    const projection = await rebuildNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources, parsed.mutationId);
+    return json({ rebuilt: true, ...safeProjection(projection) });
+  }
+  return json(safeProjection(await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources)));
+};
+
 // src/worker-routes-formation.ts
 import { createRecord as createRecord3 } from "@odla-ai/crm";
 var SUBMISSION = /^[A-Za-z0-9_-]{8,128}$/;
@@ -7331,11 +8225,11 @@ var handleFormation = async (req, url, env, ctx) => {
     });
   }
   if (req.method !== "POST" || url.pathname !== "/api/formation/applications") return null;
-  const raw = await req.text();
-  if (raw.length > formation.bodyCap) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > formation.bodyCap) return json({ error: "request body too large" }, 413);
   let body;
   try {
-    body = JSON.parse(raw);
+    body = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -7396,7 +8290,7 @@ var handleFormation = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-builder-library.ts
-import { verifyFederatedRequest as verifyFederatedRequest8 } from "@odla-ai/db";
+import { verifyFederatedRequest as verifyFederatedRequest9 } from "@odla-ai/db";
 
 // src/builder-library-validation.ts
 var ID4 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
@@ -7419,7 +8313,7 @@ var record3 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text3(value, path, errors, max = MAX_TEXT2, required = true) {
+function text5(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -7429,23 +8323,23 @@ function text3(value, path, errors, max = MAX_TEXT2, required = true) {
   if (result.length > max) errors.push(`${path} must be at most ${max} characters`);
   return result;
 }
-function integer2(value, path, errors, minimum = 1) {
+function integer3(value, path, errors, minimum = 1) {
   if (!Number.isSafeInteger(value) || Number(value) < minimum) errors.push(`${path} must be an integer >= ${minimum}`);
   return Number(value);
 }
 function scopeValue(value, path, errors) {
-  const raw = record3(value);
-  if (!raw) {
+  const raw2 = record3(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys3(raw, SCOPE_KEYS, path, errors);
-  if (raw.kind === "global" || raw.kind === "built_not_found") {
-    if (raw.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
-    return { kind: raw.kind };
+  unknownKeys3(raw2, SCOPE_KEYS, path, errors);
+  if (raw2.kind === "global" || raw2.kind === "built_not_found") {
+    if (raw2.chapterId !== void 0) errors.push(`${path}.chapterId is allowed only for chapter scope`);
+    return { kind: raw2.kind };
   }
-  if (raw.kind === "chapter") {
-    const chapterId = text3(raw.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+  if (raw2.kind === "chapter") {
+    const chapterId = text5(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -7453,28 +8347,28 @@ function scopeValue(value, path, errors) {
   return null;
 }
 function resourceValue(value, path, errors) {
-  const raw = record3(value);
-  if (!raw) {
+  const raw2 = record3(value);
+  if (!raw2) {
     errors.push(`${path} must be an object`);
     return null;
   }
-  unknownKeys3(raw, RESOURCE_KEYS, path, errors);
-  const id = text3(raw.id, `${path}.id`, errors, 80) ?? "";
+  unknownKeys3(raw2, RESOURCE_KEYS, path, errors);
+  const id = text5(raw2.id, `${path}.id`, errors, 80) ?? "";
   if (id && !ID4.test(id)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text3(raw.kind, `${path}.kind`, errors) ?? "";
+  const kind = text5(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text3(raw.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text3(raw.summary, `${path}.summary`, errors, 1e3, false);
-  const status = text3(raw.status, `${path}.status`, errors) ?? "";
+  const title = text5(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text5(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status = text5(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status)) errors.push(`${path}.status must be draft, published, or archived`);
-  const revision = integer2(raw.revision, `${path}.revision`, errors);
-  const scope = scopeValue(raw.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw.tags) ? raw.tags.map((tag, index) => text3(tag, `${path}.tags[${index}]`, errors, 80) ?? "") : [];
-  if (!Array.isArray(raw.tags)) errors.push(`${path}.tags must be an array`);
+  const revision = integer3(raw2.revision, `${path}.revision`, errors);
+  const scope = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text5(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text3(raw.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
-  const url = text3(raw.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text5(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
+  const url = text5(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -7482,13 +8376,13 @@ function resourceValue(value, path, errors) {
       errors.push(`${path}.url must be a valid https URL`);
     }
   }
-  const asset = raw.brandAsset === void 0 ? null : record3(raw.brandAsset);
-  if (raw.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
+  const asset = raw2.brandAsset === void 0 ? null : record3(raw2.brandAsset);
+  if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys3(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text3(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text3(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text3(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text5(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text5(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text5(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -7496,58 +8390,58 @@ function resourceValue(value, path, errors) {
   if (!["document", "note"].includes(kind) && bodyMarkdown) errors.push(`${path}.bodyMarkdown is not allowed for ${kind}`);
   if (!["link", "inspiration"].includes(kind) && url) errors.push(`${path}.url is not allowed for ${kind}`);
   if (!["image", "file"].includes(kind) && brandAsset) errors.push(`${path}.brandAsset is not allowed for ${kind}`);
-  const provenanceRaw = record3(raw.provenance);
+  const provenanceRaw = record3(raw2.provenance);
   if (!provenanceRaw) errors.push(`${path}.provenance must be an object`);
   if (provenanceRaw) unknownKeys3(provenanceRaw, PROVENANCE_KEYS, `${path}.provenance`, errors);
   const promotedRaw = provenanceRaw?.promotedFrom === void 0 ? null : record3(provenanceRaw.promotedFrom);
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys3(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text3(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text3(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
-    resourceRevision: integer2(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
-    documentRevision: integer2(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text3(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
-    promotedAt: integer2(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
+    chapterId: text5(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text5(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    resourceRevision: integer3(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
+    documentRevision: integer3(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
+    promotedBy: text5(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedAt: integer3(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance = {
-    createdBy: text3(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
-    createdAt: integer2(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text3(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
-    updatedAt: integer2(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
+    createdBy: text5(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdAt: integer3(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
+    updatedBy: text5(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedAt: integer3(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
   return { id, kind, title, ...summary ? { summary } : {}, tags, scope, status, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
 }
 function validateBuilderLibraryDocument(value, options = {}) {
   const errors = [];
-  const raw = record3(value);
-  if (!raw) return { ok: false, errors: ["document must be an object"] };
-  unknownKeys3(raw, ROOT_KEYS4, "document", errors);
-  if (raw.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
-  const revision = integer2(raw.revision, "document.revision", errors);
-  const generatedAt = integer2(raw.generatedAt, "document.generatedAt", errors, 0);
-  const sourceRaw = record3(raw.source);
+  const raw2 = record3(value);
+  if (!raw2) return { ok: false, errors: ["document must be an object"] };
+  unknownKeys3(raw2, ROOT_KEYS4, "document", errors);
+  if (raw2.schemaVersion !== BUILDER_LIBRARY_SCHEMA_VERSION) errors.push("document.schemaVersion must be 1");
+  const revision = integer3(raw2.revision, "document.revision", errors);
+  const generatedAt = integer3(raw2.generatedAt, "document.generatedAt", errors, 0);
+  const sourceRaw = record3(raw2.source);
   if (!sourceRaw) errors.push("document.source must be an object");
   if (sourceRaw) unknownKeys3(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text3(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text5(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
-  const targetRaw = raw.target === void 0 ? null : record3(raw.target);
-  if (raw.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
+  const targetRaw = raw2.target === void 0 ? null : record3(raw2.target);
+  if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys3(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text3(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text3(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text5(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text5(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
-  if (!Array.isArray(raw.resources)) errors.push("document.resources must be an array");
-  const inputs = Array.isArray(raw.resources) ? raw.resources : [];
+  if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
+  const inputs = Array.isArray(raw2.resources) ? raw2.resources : [];
   if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
-  const resources = inputs.map((item, index) => resourceValue(item, `document.resources[${index}]`, errors)).filter(Boolean);
+  const resources = inputs.map((item, index2) => resourceValue(item, `document.resources[${index2}]`, errors)).filter(Boolean);
   const ids = resources.map(({ id }) => id);
   if (new Set(ids).size !== ids.length) errors.push("document.resources ids must be unique");
   for (const resource of resources) {
@@ -7621,28 +8515,28 @@ function canonicalBuilderLibrary(value) {
   return canonicalValue3(value);
 }
 async function builderLibraryDigest(document) {
-  const digest = await crypto.subtle.digest("SHA-256", encoder3.encode(canonicalBuilderLibrary(document)));
-  return `sha256:${Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const digest2 = await crypto.subtle.digest("SHA-256", encoder3.encode(canonicalBuilderLibrary(document)));
+  return `sha256:${Array.from(new Uint8Array(digest2), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
 
 // src/builder-library-store.ts
 var control2 = (row) => row?.document && typeof row.document === "object" ? row : null;
 var local2 = (row) => row?.document && typeof row.document === "object" ? row : null;
 async function loadActiveBuilderLibraryControls(db, targetId, environment) {
-  const rows5 = (await db.query({ builderLibraryControls: { $: { where: { targetId, environment, active: true }, limit: 500 } } })).builderLibraryControls;
-  return Array.isArray(rows5) ? rows5.map(control2).filter(Boolean) : [];
+  const rows6 = (await db.query({ builderLibraryControls: { $: { where: { targetId, environment, active: true }, limit: 500 } } })).builderLibraryControls;
+  return Array.isArray(rows6) ? rows6.map(control2).filter(Boolean) : [];
 }
 async function loadLatestBuilderLibraryControl(db, sourceId, targetId, environment) {
-  const rows5 = (await db.query({ builderLibraryControls: { $: { where: { sourceId, targetId, environment }, order: { revision: "desc" }, limit: 20 } } })).builderLibraryControls;
-  return control2(Array.isArray(rows5) ? [...rows5].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
+  const rows6 = (await db.query({ builderLibraryControls: { $: { where: { sourceId, targetId, environment }, order: { revision: "desc" }, limit: 20 } } })).builderLibraryControls;
+  return control2(Array.isArray(rows6) ? [...rows6].sort((a, b) => Number(b.revision) - Number(a.revision))[0] : void 0);
 }
 async function loadLocalBuilderLibrary(db, appId, environment) {
   const id = `builder-library-local:${environment}`;
-  const rows5 = (await db.query({ builderLibraryLocal: { $: { where: { id }, limit: 1 } } })).builderLibraryLocal;
-  return local2(Array.isArray(rows5) ? rows5[0] : void 0);
+  const rows6 = (await db.query({ builderLibraryLocal: { $: { where: { id }, limit: 1 } } })).builderLibraryLocal;
+  return local2(Array.isArray(rows6) ? rows6[0] : void 0);
 }
 async function materializeBuilderLibraryControl(db, envelope, previous, receivedAt) {
-  const { document, digest } = envelope;
+  const { document, digest: digest2 } = envelope;
   const target = document.target;
   const id = `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}`;
   const ops = [];
@@ -7653,12 +8547,12 @@ async function materializeBuilderLibraryControl(db, envelope, previous, received
     targetId: target.appId,
     environment: target.environment,
     revision: document.revision,
-    digest,
+    digest: digest2,
     document,
     active: true,
     receivedAt
   } });
-  await db.transact(ops, { mutationId: `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}:${digest}` });
+  await db.transact(ops, { mutationId: `builder-library-control:${document.source.appId}:${target.environment}:${document.revision}:${digest2}` });
 }
 async function saveLocalBuilderLibrary(db, document, environment, expectedRevision, updatedAt, updatedBy) {
   const id = `builder-library-local:${environment}`;
@@ -7679,7 +8573,7 @@ async function verifySource(req, db, ctx) {
   if (ctx.chapter.mode === "chapter") {
     const secret = await getVaultSecret(db, "network_share_secret");
     if (!secret) return null;
-    const verified = await verifyFederatedRequest8(req, {
+    const verified = await verifyFederatedRequest9(req, {
       secret,
       senders: sources.map((source2) => source2.sourceId)
     });
@@ -7692,7 +8586,7 @@ async function verifySource(req, db, ctx) {
     if (!target) continue;
     const secret = await getVaultSecret(db, target.secretName);
     if (!secret) continue;
-    const verified = await verifyFederatedRequest8(req.clone(), { secret, senders: [source.sourceId] });
+    const verified = await verifyFederatedRequest9(req.clone(), { secret, senders: [source.sourceId] });
     if (verified.ok) return { source, body: verified.body };
   }
   return null;
@@ -7711,7 +8605,7 @@ var handleBuilderLibraryControl = async (req, url, env, ctx) => {
   } catch {
     return json({ ok: false, reason: "invalid_document", errors: ["request body must be JSON"] }, 400);
   }
-  const digest = typeof input.digest === "string" ? input.digest : "";
+  const digest2 = typeof input.digest === "string" ? input.digest : "";
   const sourceType = ctx.chapter.mode === "hub" ? "chapter" : "built_not_found";
   const checked = validateBuilderLibraryDocument(input.document, {
     sourceType,
@@ -7725,29 +8619,29 @@ var handleBuilderLibraryControl = async (req, url, env, ctx) => {
     return json({ ok: false, reason: "invalid_document", errors: ["Built Not Found may deliver only global or this Chapter's resources"] }, 400);
   }
   if (!document.target || document.target.environment !== env.ODLA_ENV) return json({ ok: false, reason: "wrong_environment" }, 409);
-  if (!digest || await builderLibraryDigest(document) !== digest) return json({ ok: false, reason: "invalid_digest" }, 400);
+  if (!digest2 || await builderLibraryDigest(document) !== digest2) return json({ ok: false, reason: "invalid_digest" }, 400);
   const latest = await loadLatestBuilderLibraryControl(db, document.source.appId, ctx.chapter.id, env.ODLA_ENV);
   if (latest && document.revision < latest.revision) return json({ ok: false, reason: "stale_revision" }, 409);
   if (latest && document.revision === latest.revision) {
-    if (latest.digest !== digest) return json({ ok: false, reason: "conflicting_revision" }, 409);
+    if (latest.digest !== digest2) return json({ ok: false, reason: "conflicting_revision" }, 409);
     return json({ ok: true, target: document.target, revision: latest.revision, digest: latest.digest, status: "replayed", acknowledgedAt: latest.receivedAt });
   }
   const receivedAt = Date.now();
   try {
-    await materializeBuilderLibraryControl(db, { document, digest }, latest, receivedAt);
+    await materializeBuilderLibraryControl(db, { document, digest: digest2 }, latest, receivedAt);
   } catch {
     return json({ ok: false, reason: "materialization_failed" }, 503);
   }
-  return json({ ok: true, target: document.target, revision: document.revision, digest, status: "accepted", acknowledgedAt: receivedAt });
+  return json({ ok: true, target: document.target, revision: document.revision, digest: digest2, status: "accepted", acknowledgedAt: receivedAt });
 };
 function actorFor(user) {
   return user.email ?? user.userId;
 }
 function withLocalAuthority2(value, mode, appId, revision, now, actor, current) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return value;
-  const raw = value;
+  const raw2 = value;
   const currentById = new Map((current?.resources ?? []).map((item) => [item.id, item]));
-  const resources = Array.isArray(raw.resources) ? raw.resources.map((input) => {
+  const resources = Array.isArray(raw2.resources) ? raw2.resources.map((input) => {
     if (!input || typeof input !== "object" || Array.isArray(input)) return input;
     const item = input;
     const existing = typeof item.id === "string" ? currentById.get(item.id) : void 0;
@@ -7762,9 +8656,9 @@ function withLocalAuthority2(value, mode, appId, revision, now, actor, current)
         ...existing?.provenance.promotedFrom ? { promotedFrom: existing.provenance.promotedFrom } : {}
       }
     };
-  }) : raw.resources;
+  }) : raw2.resources;
   return {
-    ...raw,
+    ...raw2,
     schemaVersion: 1,
     revision,
     generatedAt: now,
@@ -7845,7 +8739,7 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
     return json({
       mode: ctx.chapter.mode,
       local: local3 ? { revision: local3.revision, document: local3.document } : null,
-      sources: controls.map(({ sourceId, revision, digest, document, receivedAt }) => ({ sourceId, revision, digest, document, receivedAt })),
+      sources: controls.map(({ sourceId, revision, digest: digest2, document, receivedAt }) => ({ sourceId, revision, digest: digest2, document, receivedAt })),
       localAuthoring: ctx.chapter.builderLibrary.localAuthoring,
       chapterTargets: ctx.chapter.mode === "hub" ? ctx.chapter.builderLibrary.sources.map((source) => ({ chapterId: source.sourceId })) : [{ chapterId: ctx.chapter.id }],
       visibility: { builtNotFoundSeesChapterSources: ctx.chapter.mode === "hub", chaptersSeeSiblingSources: false }
@@ -7853,11 +8747,11 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
   }
   if (req.method !== "PUT") return json({ error: "method not allowed" }, 405);
   if (!ctx.chapter.builderLibrary.localAuthoring) return json({ error: "local authoring is disabled" }, 403);
-  const raw = await req.text();
-  if (raw.length > BODY_CAP2) return json({ error: "request body too large" }, 413);
+  const raw2 = await req.text();
+  if (raw2.length > BODY_CAP2) return json({ error: "request body too large" }, 413);
   let input;
   try {
-    input = JSON.parse(raw);
+    input = JSON.parse(raw2);
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
@@ -7882,11 +8776,11 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
 };
 
 // src/signup-control-delivery.ts
-import { signFederatedRequest as signFederatedRequest6 } from "@odla-ai/db";
+import { signFederatedRequest as signFederatedRequest7 } from "@odla-ai/db";
 async function deliverSignupControl(options) {
   const destination = new URL(SIGNUP_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await signFederatedRequest6({
+  const signed = await signFederatedRequest7({
     secret: options.secret,
     sender: options.sender,
     method: "POST",
@@ -7907,11 +8801,11 @@ async function deliverSignupControl(options) {
 }
 
 // src/member-content-delivery.ts
-import { signFederatedRequest as signFederatedRequest7 } from "@odla-ai/db";
+import { signFederatedRequest as signFederatedRequest8 } from "@odla-ai/db";
 async function deliverMemberContent(options) {
   const destination = new URL(MEMBER_CONTENT_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await signFederatedRequest7({
+  const signed = await signFederatedRequest8({
     secret: options.secret,
     sender: options.sender,
     method: "POST",
@@ -7932,11 +8826,11 @@ async function deliverMemberContent(options) {
 }
 
 // src/builder-library-delivery.ts
-import { signFederatedRequest as signFederatedRequest8 } from "@odla-ai/db";
+import { signFederatedRequest as signFederatedRequest9 } from "@odla-ai/db";
 async function deliverBuilderLibrary(options) {
   const destination = new URL(BUILDER_LIBRARY_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await signFederatedRequest8({ secret: options.secret, sender: options.sender, method: "POST", url: destination, body });
+  const signed = await signFederatedRequest9({ secret: options.secret, sender: options.sender, method: "POST", url: destination, body });
   const response = await (options.fetch ?? globalThis.fetch)(destination, { method: "POST", headers: { ...signed, "content-type": "application/json" }, body });
   const result = await response.json();
   if (!response.ok || !("ok" in result) || result.ok !== true) {
@@ -7950,7 +8844,7 @@ async function deliverBuilderLibrary(options) {
 var SIGNUP_CONTROL_THEME_MARKER = "<!--odla:signup-control-theme-->";
 var SIGNUP_CONTROL_THEME_STYLE_ID = "odla-signup-control-theme";
 var TOKEN_NAME = /^--ui-[a-z0-9][a-z0-9-]{0,94}$/;
-var DIGEST = /^sha256:[0-9a-f]{64}$/;
+var DIGEST2 = /^sha256:[0-9a-f]{64}$/;
 var UNSAFE_VALUE = /[\u0000-\u001f\u007f\\<>{};]|\/\*|\*\/|(?:^|[^a-z])(?:url|expression)\s*\(|@import/i;
 var MAX_TOKENS = 256;
 var MAX_VALUE_LENGTH = 1e3;
@@ -7962,14 +8856,14 @@ function validatedTokens(input) {
   }
   const tokens = {};
   let serializedLength = 0;
-  for (const [name, raw] of entries.sort(([left], [right]) => left.localeCompare(right))) {
+  for (const [name, raw2] of entries.sort(([left], [right]) => left.localeCompare(right))) {
     if (!TOKEN_NAME.test(name)) {
       throw new TypeError(`signup-control theme token "${name}" must be an allowlisted --ui-* property`);
     }
-    if (typeof raw !== "string" && typeof raw !== "number" || typeof raw === "number" && !Number.isFinite(raw)) {
+    if (typeof raw2 !== "string" && typeof raw2 !== "number" || typeof raw2 === "number" && !Number.isFinite(raw2)) {
       throw new TypeError(`signup-control theme token "${name}" must be a finite string or number`);
     }
-    const value = String(raw).trim();
+    const value = String(raw2).trim();
     if (!value || value.length > MAX_VALUE_LENGTH || UNSAFE_VALUE.test(value)) {
       throw new TypeError(`signup-control theme token "${name}" has an unsafe or oversized value`);
     }
@@ -7994,7 +8888,7 @@ function stateFor(revision, options) {
       metadata: { source: "bootstrap", revision: null, digest: null, cacheKey: "signup-control:bootstrap" }
     };
   }
-  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !DIGEST.test(revision.digest)) {
+  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !DIGEST2.test(revision.digest)) {
     throw new TypeError("signup-control theme revision metadata is invalid");
   }
   return {
@@ -8091,6 +8985,8 @@ var BUILTIN_ROUTES = [
   handleNetworkSnapshot,
   handleNetworkRecords,
   handleNetworkSharedNotes,
+  handleNetworkCommercialParity,
+  handleNetworkCommercialStripeWebhook,
   handleFormation,
   handleMember,
   handleMemberContent,
@@ -8131,6 +9027,7 @@ var BUILTIN_ROUTES = [
   handleAdminNetworkNotes,
   handleAdminNetworkSharedNotes,
   handleAdminNetworkPersonRegistry,
+  handleAdminNetworkCommercialReadModel,
   // API requests must never fall through to an SPA asset response. Hosts still
   // get first refusal through options.routes, then this terminates unknown API
   // paths with an explicit machine-readable 404.