@odla-ai/chapter 0.45.0 → 0.47.0

package/dist/worker/index.cjs

@@ -115,12 +115,16 @@ function createWorkerContext(options) {
   }
   async function isAdminEmail(db, email) {
     if (!email) return false;
-    const { admins } = await db.query({ admins: { $: { where: { email: email.toLowerCase() }, limit: 1 } } });
+    const { admins } = await db.query({ admins: { $: { where: { email: email.trim().toLowerCase() }, limit: 1 } } });
     return Array.isArray(admins) && admins.length > 0;
   }
   async function isSuperAdminEmail(db, email) {
     if (!auth.superAdmins || !email) return false;
-    const { superAdmins } = await db.query({ superAdmins: { $: { where: { email: email.toLowerCase() }, limit: 1 } } });
+    if (auth.superAdminSource === "odla") {
+      const { $users } = await db.query({ $users: { $: { where: { email: email.trim().toLowerCase(), role: "super_admin" }, limit: 1 } } });
+      return Array.isArray($users) && $users.length > 0;
+    }
+    const { superAdmins } = await db.query({ superAdmins: { $: { where: { email: email.trim().toLowerCase() }, limit: 1 } } });
     return Array.isArray(superAdmins) && superAdmins.length > 0;
   }
   async function roleFor(db, u) {
@@ -759,8 +763,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id) {
-  const text5 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text5 ? `${text5[0].toUpperCase()}${text5.slice(1)}` : id;
+  const text6 = id.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id;
 }
 function applicationDefs(chapter) {
   try {
@@ -1290,10 +1294,10 @@ function planDelivery(input) {
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
   const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
-  const text5 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text6 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + render(tpl.text, vars) : render(tpl.text, vars);
-  return { deliver: true, transport, to, subject, text: text5, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text6, redirected: redirect };
 }
 
 // src/notify.ts
@@ -2181,10 +2185,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text5 = value.trim();
-  if (required && !text5) errors.push(`${path} is required`);
-  if (text5.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text5;
+  const text6 = value.trim();
+  if (required && !text6) errors.push(`${path} is required`);
+  if (text6.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text6;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -2233,8 +2237,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text5 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text5 ? [text5] : [];
+          const text6 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text6 ? [text6] : [];
         });
       }
     }
@@ -3946,17 +3950,17 @@ async function notifyAdminOfPayment(db, env, eventId, app) {
   try {
     const group = await groupFor(db, app);
     if (!group || typeof group.notificationEmail !== "string" || !group.notificationEmail) return;
-    const text5 = (value) => typeof value === "string" ? value : "";
+    const text6 = (value) => typeof value === "string" ? value : "";
     await sendTemplated(deps(db, env), {
       group: emailGroupFrom(group),
       template: "adminNotification",
       to: group.notificationEmail,
       vars: {
-        firstName: text5(app.firstName),
-        lastName: text5(app.lastName),
-        email: text5(app.email),
-        phone: text5(app.phone),
-        state: text5(app.state)
+        firstName: text6(app.firstName),
+        lastName: text6(app.lastName),
+        email: text6(app.email),
+        phone: text6(app.phone),
+        state: text6(app.state)
       },
       dedupeKey: `${eventId}:admin`,
       applicationId: String(app.id)
@@ -5720,11 +5724,11 @@ var handleAdminGroupEmail = async (req, url, env, ctx) => {
   for (const key of EMAIL_TEMPLATE_NAMES) {
     const t = templates[key];
     const subject = typeof t?.subject === "string" ? t.subject.trim() : "";
-    const text5 = typeof t?.text === "string" ? t.text : "";
-    if (!subject || !text5.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
+    const text6 = typeof t?.text === "string" ? t.text : "";
+    if (!subject || !text6.trim()) return json({ error: `template "${key}" needs a subject and a body` }, 400);
     if (/[\r\n]/.test(subject) || subject.length > 200) return json({ error: `template "${key}" subject must be a single line under 200 characters` }, 400);
-    if (text5.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
-    clean[key] = { subject, text: text5, enabled: t?.enabled !== false };
+    if (text6.length > 1e4) return json({ error: `template "${key}" body is too long` }, 400);
+    clean[key] = { subject, text: text6, enabled: t?.enabled !== false };
   }
   const emailish = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
   const notificationEmail = str2(body.notificationEmail).trim();
@@ -5941,7 +5945,8 @@ var handleAdminNetworkTargets = async (req, url, env, ctx) => {
       fields,
       sharedNotes,
       editableFields,
-      stageTransitions
+      stageTransitions,
+      commercialParity
     }) => ({
       id,
       name,
@@ -5949,7 +5954,8 @@ var handleAdminNetworkTargets = async (req, url, env, ctx) => {
       types: Object.keys(fields ?? DEFAULT_SHARE_FIELDS),
       sharedNotes,
       editableFields,
-      stageTransitions
+      stageTransitions,
+      commercialParity
     }))
   });
 };
@@ -7207,9 +7213,9 @@ var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
   if (req.method === "POST") {
     let body;
     try {
-      const text5 = await req.text();
-      if (new TextEncoder().encode(text5).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
-      const parsed = JSON.parse(text5);
+      const text6 = await req.text();
+      if (new TextEncoder().encode(text6).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
+      const parsed = JSON.parse(text6);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid");
       body = parsed;
     } catch {
@@ -7804,6 +7810,298 @@ function reconcileStripeSnapshot(shadow, snapshots, sources) {
   };
 }
 
+// src/worker-routes-network-commercial-parity.ts
+var import_db12 = require("@odla-ai/db");
+
+// src/network-commercial-parity.ts
+var DIGEST = /^[0-9a-f]{64}$/;
+var MAX_RECORDS = 500;
+var text4 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
+function parityMessage(partition, kind, value) {
+  return [
+    "chapter-commercial-parity",
+    "v1",
+    partition.appId,
+    partition.chapterId,
+    partition.environment,
+    partition.dataEnvironment,
+    partition.runtime,
+    kind,
+    value
+  ].join("");
+}
+async function parityKey(secret) {
+  const encoder4 = new TextEncoder();
+  return crypto.subtle.importKey(
+    "raw",
+    encoder4.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+}
+async function digestWithKey(key, partition, kind, value) {
+  const encoder4 = new TextEncoder();
+  const signed = await crypto.subtle.sign("HMAC", key, encoder4.encode(parityMessage(partition, kind, value)));
+  return [...new Uint8Array(signed)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+async function buildChapterCommercialParitySnapshot(input) {
+  const requestedMax = input.maxRecords ?? MAX_RECORDS;
+  const maxRecords = Number.isSafeInteger(requestedMax) ? Math.max(0, Math.min(requestedMax, MAX_RECORDS)) : MAX_RECORDS;
+  const eligible = input.rows.filter((row) => text4(row.id) && (text4(row.stripeCustomerId) || text4(row.stripeSubscriptionId)));
+  const selected2 = eligible.slice(0, maxRecords);
+  const key = await parityKey(input.secret);
+  const records = await Promise.all(selected2.map(async (row) => {
+    const applicationId = text4(row.id);
+    const customerId = text4(row.stripeCustomerId);
+    const subscriptionId = text4(row.stripeSubscriptionId);
+    return {
+      applicationDigest: await digestWithKey(key, input.partition, "application", applicationId),
+      customerDigest: customerId ? await digestWithKey(key, input.partition, "customer", customerId) : null,
+      subscriptionDigest: subscriptionId ? await digestWithKey(key, input.partition, "subscription", subscriptionId) : null,
+      status: text4(row.status, 64),
+      canceled: row.canceled === true
+    };
+  }));
+  records.sort((left, right) => left.applicationDigest.localeCompare(right.applicationDigest));
+  const truncated = input.scanTruncated || eligible.length > maxRecords;
+  return {
+    version: 1,
+    site: { id: input.siteId },
+    partition: input.partition,
+    generatedAt: input.now ?? Date.now(),
+    complete: !truncated,
+    truncated,
+    counts: { scanned: input.scanned, eligible: eligible.length, returned: records.length },
+    records
+  };
+}
+function recordKey(record4) {
+  return `${record4.applicationDigest}:${record4.customerDigest ?? "-"}:${record4.subscriptionDigest ?? "-"}`;
+}
+function validSnapshot(snapshot, source) {
+  const partition = snapshot?.partition;
+  const records = snapshot?.records;
+  if (snapshot?.version !== 1 || snapshot.site?.id !== source.chapterId || !partition || !Array.isArray(records) || records.length > MAX_RECORDS || partition.appId !== source.appId || partition.chapterId !== source.chapterId || partition.environment !== source.environment || partition.dataEnvironment !== source.dataEnvironment || partition.runtime !== source.runtime || typeof snapshot.complete !== "boolean" || typeof snapshot.truncated !== "boolean" || !snapshot.counts) return false;
+  const seen = /* @__PURE__ */ new Set();
+  for (const record4 of records) {
+    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text4(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
+    const key = recordKey(record4);
+    if (seen.has(key)) return false;
+    seen.add(key);
+  }
+  return Number.isSafeInteger(snapshot.counts.scanned) && Number.isSafeInteger(snapshot.counts.eligible) && Number.isSafeInteger(snapshot.counts.returned) && snapshot.counts.returned === records.length && snapshot.counts.scanned >= snapshot.counts.eligible && snapshot.counts.eligible >= snapshot.counts.returned;
+}
+async function reconcileCommercialParitySnapshot(input) {
+  if (!validSnapshot(input.snapshot, input.source)) throw new Error("invalid chapter commercial parity snapshot");
+  const sourceKey = networkCommercialSourceKey(input.source);
+  const key = await parityKey(input.secret);
+  const shadow = await Promise.all(input.projection.subscriptions.filter((row) => row.sourceKey === sourceKey && text4(row.applicationId) && text4(row.objectId)).map(async (row) => {
+    const customerId = text4(row.customerId);
+    const subscriptionId = text4(row.subscriptionId) ?? text4(row.objectId);
+    return {
+      applicationDigest: await digestWithKey(key, input.snapshot.partition, "application", row.applicationId),
+      customerDigest: customerId ? await digestWithKey(key, input.snapshot.partition, "customer", customerId) : null,
+      subscriptionDigest: subscriptionId ? await digestWithKey(key, input.snapshot.partition, "subscription", subscriptionId) : null,
+      status: null,
+      canceled: false,
+      stripeStatus: text4(row.status, 64),
+      stripeCanceled: row.status === "canceled"
+    };
+  }));
+  const chapterByKey = new Map(input.snapshot.records.map((record4) => [recordKey(record4), record4]));
+  const shadowByKey = new Map(shadow.map((record4) => [recordKey(record4), record4]));
+  const exceptions = [];
+  const records = [];
+  for (const [key2, chapter] of chapterByKey) {
+    const stripe = shadowByKey.get(key2);
+    if (!stripe) {
+      exceptions.push({ kind: "chapter_only", applicationDigest: chapter.applicationDigest, detail: { chapterStatus: chapter.status } });
+      continue;
+    }
+    const compared = { ...chapter, stripeStatus: stripe.stripeStatus, stripeCanceled: stripe.stripeCanceled };
+    records.push(compared);
+    if (chapter.canceled !== stripe.stripeCanceled) {
+      exceptions.push({
+        kind: "cancellation_mismatch",
+        applicationDigest: chapter.applicationDigest,
+        detail: { chapterCanceled: chapter.canceled, stripeCanceled: stripe.stripeCanceled }
+      });
+    }
+  }
+  for (const [key2, stripe] of shadowByKey) {
+    if (!chapterByKey.has(key2)) {
+      exceptions.push({ kind: "shadow_only", applicationDigest: stripe.applicationDigest, detail: { stripeStatus: stripe.stripeStatus } });
+    }
+  }
+  if (!input.snapshot.complete || input.snapshot.truncated) {
+    exceptions.push({
+      kind: "chapter_truncated",
+      detail: { scanned: input.snapshot.counts.scanned, eligible: input.snapshot.counts.eligible, returned: input.snapshot.counts.returned }
+    });
+  }
+  if (chapterByKey.size !== shadowByKey.size) {
+    exceptions.push({ kind: "count_mismatch", detail: { chapter: chapterByKey.size, shadow: shadowByKey.size } });
+  }
+  records.sort((left, right) => left.applicationDigest.localeCompare(right.applicationDigest));
+  return {
+    ok: input.snapshot.complete && exceptions.length === 0,
+    complete: input.snapshot.complete,
+    counts: { chapter: chapterByKey.size, shadow: shadowByKey.size, matched: records.length },
+    records,
+    exceptions
+  };
+}
+
+// src/network-commercial-parity-response.ts
+var MAX_RESPONSE_BYTES = 512e3;
+async function readBoundedCommercialParityResponse(response) {
+  const declared = Number(response.headers.get("content-length") ?? 0);
+  if (declared > MAX_RESPONSE_BYTES) return null;
+  if (!response.body) return "";
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const next = await reader.read();
+    if (next.done) break;
+    total += next.value.byteLength;
+    if (total > MAX_RESPONSE_BYTES) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(next.value);
+  }
+  const body = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    body.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return new TextDecoder().decode(body);
+}
+
+// src/worker-routes-network-commercial-parity.ts
+var PARITY_PATH = "/api/network/commercial-parity";
+var PAGE2 = 500;
+var MAX_SCAN = 5e3;
+var MAX_RECORDS2 = 500;
+async function localCommercialRows(db) {
+  const rows6 = [];
+  for (let offset = 0; offset < MAX_SCAN; offset += PAGE2) {
+    const result = await db.query({ applications: { $: { limit: PAGE2, offset, order: { createdAt: "asc" } } } });
+    const page = Array.isArray(result.applications) ? result.applications : [];
+    rows6.push(...page.slice(0, MAX_SCAN - rows6.length));
+    if (page.length < PAGE2) return { rows: rows6, truncated: false };
+  }
+  return { rows: rows6, truncated: true };
+}
+var handleNetworkCommercialParity = async (req, url, env, ctx) => {
+  if (req.method !== "GET" || url.pathname !== PARITY_PATH) return null;
+  if (ctx.chapter.mode !== "chapter") return json({ error: "not found" }, 404);
+  const readers = ctx.chapter.network.readers.filter((reader) => reader.commercialParity);
+  if (readers.length === 0) return json({ error: "unauthorized" }, 401);
+  const db = ctx.makeDb(env);
+  const secret = await getVaultSecret(db, "network_share_secret");
+  if (!secret) return json({ error: "unauthorized" }, 401);
+  const verified = await (0, import_db12.verifyFederatedRequest)(req, { secret, senders: readers.map((reader) => reader.id) });
+  if (!verified.ok) return json({ error: "unauthorized", reason: verified.reason }, 401);
+  const partition = {
+    appId: env.ODLA_APP_ID,
+    chapterId: ctx.chapter.id,
+    environment: env.ODLA_ENV,
+    dataEnvironment: env.ODLA_ENV,
+    runtime: env.ODLA_RUNTIME?.trim() || "default"
+  };
+  try {
+    const local3 = await localCommercialRows(db);
+    return json(await buildChapterCommercialParitySnapshot({
+      rows: local3.rows,
+      secret,
+      partition,
+      siteId: ctx.chapter.id,
+      scanned: local3.rows.length,
+      scanTruncated: local3.truncated,
+      maxRecords: MAX_RECORDS2
+    }));
+  } catch {
+    return json({ error: "commercial parity unavailable" }, 503);
+  }
+};
+async function reconcileTarget(db, env, ctx, target, projection) {
+  const base = { targetId: target.id, name: target.name, url: target.url };
+  const secret = await getVaultSecret(db, target.secretName);
+  if (!secret) return { ...base, available: false, ok: false, error: { code: "edge_secret_missing" } };
+  const destination = new URL(PARITY_PATH, target.url);
+  try {
+    const transport = resolveNetworkTargetTransport(env, target);
+    const headers = await (0, import_db12.signFederatedRequest)({ secret, sender: ctx.chapter.id, method: "GET", url: destination });
+    const response = await transport.fetch(destination, { headers, signal: AbortSignal.timeout(1e4) });
+    const responseBody = await readBoundedCommercialParityResponse(response);
+    const snapshot = responseBody !== null ? (() => {
+      try {
+        return JSON.parse(responseBody);
+      } catch {
+        return null;
+      }
+    })() : null;
+    if (!response.ok || !snapshot) {
+      return {
+        ...base,
+        available: false,
+        ok: false,
+        transport: transport.kind,
+        error: { code: "chapter_response_failed", status: response.status }
+      };
+    }
+    const sources = ctx.chapter.networkCommercialReadModel?.sources ?? [];
+    const matchingSources = sources.filter((candidate) => candidate.appId === snapshot.partition?.appId && candidate.chapterId === snapshot.partition?.chapterId && candidate.environment === snapshot.partition?.environment && candidate.dataEnvironment === snapshot.partition?.dataEnvironment && candidate.runtime === snapshot.partition?.runtime);
+    if (matchingSources.length !== 1) {
+      return {
+        ...base,
+        available: true,
+        ok: false,
+        transport: transport.kind,
+        error: { code: matchingSources.length === 0 ? "source_not_configured" : "source_ambiguous" }
+      };
+    }
+    return {
+      ...base,
+      available: true,
+      transport: transport.kind,
+      generatedAt: snapshot.generatedAt,
+      ...await reconcileCommercialParitySnapshot({
+        projection,
+        source: matchingSources[0],
+        snapshot,
+        secret
+      })
+    };
+  } catch (error) {
+    return {
+      ...base,
+      available: false,
+      ok: false,
+      error: {
+        code: error instanceof NetworkTargetTransportError ? "binding_unavailable" : error instanceof Error && error.message === "invalid chapter commercial parity snapshot" ? "invalid_chapter_snapshot" : "chapter_request_failed"
+      }
+    };
+  }
+}
+async function reconcileChapterCommercialTargets(db, env, ctx, projection) {
+  const targets = ctx.chapter.network.targets.filter((target) => target.commercialParity);
+  const results = await Promise.all(targets.map((target) => reconcileTarget(db, env, ctx, target, projection)));
+  return {
+    reconciled: true,
+    provider: "chapters",
+    writable: false,
+    configured: targets.length,
+    available: results.filter((result) => result.available).length,
+    ok: results.every((result) => result.ok),
+    targets: results
+  };
+}
+
 // src/worker-routes-network-commercial.ts
 var ADMIN_PATH2 = "/api/admin/network-commercial-read-model";
 var WEBHOOK_PATH = "/api/network-commercial/stripe-webhook";
@@ -7907,6 +8205,10 @@ var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
     } catch {
       return json({ error: "invalid JSON body" }, 400);
     }
+    if (parsed.command === "reconcile-chapters") {
+      const projection2 = await loadNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources);
+      return json(await reconcileChapterCommercialTargets(db, env, ctx, projection2));
+    }
     if (parsed.command === "reconcile-stripe") {
       const secretKey = await getVaultSecret(db, "stripe_secret_key");
       if (!secretKey) return json({ error: "Stripe reconciliation is not configured" }, 503);
@@ -7929,7 +8231,7 @@ var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
       }
     }
     if (parsed.command !== "rebuild" || typeof parsed.mutationId !== "string" || !MUTATION_ID5.test(parsed.mutationId)) {
-      return json({ error: "rebuild or reconcile-stripe command is required; rebuild also requires a valid mutationId" }, 400);
+      return json({ error: "rebuild, reconcile-stripe, or reconcile-chapters command is required; rebuild also requires a valid mutationId" }, 400);
     }
     const projection = await rebuildNetworkCommercialProjection(db, ctx.chapter.networkCommercialReadModel.sources, parsed.mutationId);
     return json({ rebuilt: true, ...safeProjection(projection) });
@@ -8018,7 +8320,7 @@ var handleFormation = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-builder-library.ts
-var import_db12 = require("@odla-ai/db");
+var import_db13 = require("@odla-ai/db");
 
 // src/builder-library-validation.ts
 var ID4 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
@@ -8041,7 +8343,7 @@ var record3 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key of Object.keys(value)) if (!allowed2.has(key)) errors.push(`${path}.${key} is not supported`);
 }
-function text4(value, path, errors, max = MAX_TEXT2, required = true) {
+function text5(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -8067,7 +8369,7 @@ function scopeValue(value, path, errors) {
     return { kind: raw2.kind };
   }
   if (raw2.kind === "chapter") {
-    const chapterId = text4(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+    const chapterId = text5(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -8081,22 +8383,22 @@ function resourceValue(value, path, errors) {
     return null;
   }
   unknownKeys3(raw2, RESOURCE_KEYS, path, errors);
-  const id = text4(raw2.id, `${path}.id`, errors, 80) ?? "";
+  const id = text5(raw2.id, `${path}.id`, errors, 80) ?? "";
   if (id && !ID4.test(id)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text4(raw2.kind, `${path}.kind`, errors) ?? "";
+  const kind = text5(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text4(raw2.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text4(raw2.summary, `${path}.summary`, errors, 1e3, false);
-  const status = text4(raw2.status, `${path}.status`, errors) ?? "";
+  const title = text5(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text5(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status = text5(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status)) errors.push(`${path}.status must be draft, published, or archived`);
   const revision = integer3(raw2.revision, `${path}.revision`, errors);
   const scope = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text4(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text5(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
   if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text4(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
-  const url = text4(raw2.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text5(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
+  const url = text5(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -8108,9 +8410,9 @@ function resourceValue(value, path, errors) {
   if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys3(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text4(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text4(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text4(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text5(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text5(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text5(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -8125,17 +8427,17 @@ function resourceValue(value, path, errors) {
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys3(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text4(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text4(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    chapterId: text5(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text5(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
     resourceRevision: integer3(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
     documentRevision: integer3(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text4(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedBy: text5(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
     promotedAt: integer3(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance = {
-    createdBy: text4(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdBy: text5(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
     createdAt: integer3(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text4(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedBy: text5(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
     updatedAt: integer3(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
@@ -8154,7 +8456,7 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (sourceRaw) unknownKeys3(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text4(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text5(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
@@ -8162,8 +8464,8 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys3(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text4(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text4(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text5(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text5(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
   if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
@@ -8301,7 +8603,7 @@ async function verifySource(req, db, ctx) {
   if (ctx.chapter.mode === "chapter") {
     const secret = await getVaultSecret(db, "network_share_secret");
     if (!secret) return null;
-    const verified = await (0, import_db12.verifyFederatedRequest)(req, {
+    const verified = await (0, import_db13.verifyFederatedRequest)(req, {
       secret,
       senders: sources.map((source2) => source2.sourceId)
     });
@@ -8314,7 +8616,7 @@ async function verifySource(req, db, ctx) {
     if (!target) continue;
     const secret = await getVaultSecret(db, target.secretName);
     if (!secret) continue;
-    const verified = await (0, import_db12.verifyFederatedRequest)(req.clone(), { secret, senders: [source.sourceId] });
+    const verified = await (0, import_db13.verifyFederatedRequest)(req.clone(), { secret, senders: [source.sourceId] });
     if (verified.ok) return { source, body: verified.body };
   }
   return null;
@@ -8504,11 +8806,11 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
 };
 
 // src/signup-control-delivery.ts
-var import_db13 = require("@odla-ai/db");
+var import_db14 = require("@odla-ai/db");
 async function deliverSignupControl(options) {
   const destination = new URL(SIGNUP_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await (0, import_db13.signFederatedRequest)({
+  const signed = await (0, import_db14.signFederatedRequest)({
     secret: options.secret,
     sender: options.sender,
     method: "POST",
@@ -8529,11 +8831,11 @@ async function deliverSignupControl(options) {
 }
 
 // src/member-content-delivery.ts
-var import_db14 = require("@odla-ai/db");
+var import_db15 = require("@odla-ai/db");
 async function deliverMemberContent(options) {
   const destination = new URL(MEMBER_CONTENT_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await (0, import_db14.signFederatedRequest)({
+  const signed = await (0, import_db15.signFederatedRequest)({
     secret: options.secret,
     sender: options.sender,
     method: "POST",
@@ -8554,11 +8856,11 @@ async function deliverMemberContent(options) {
 }
 
 // src/builder-library-delivery.ts
-var import_db15 = require("@odla-ai/db");
+var import_db16 = require("@odla-ai/db");
 async function deliverBuilderLibrary(options) {
   const destination = new URL(BUILDER_LIBRARY_CONTROL_PATH, options.targetUrl);
   const body = JSON.stringify(options.envelope);
-  const signed = await (0, import_db15.signFederatedRequest)({ secret: options.secret, sender: options.sender, method: "POST", url: destination, body });
+  const signed = await (0, import_db16.signFederatedRequest)({ secret: options.secret, sender: options.sender, method: "POST", url: destination, body });
   const response = await (options.fetch ?? globalThis.fetch)(destination, { method: "POST", headers: { ...signed, "content-type": "application/json" }, body });
   const result = await response.json();
   if (!response.ok || !("ok" in result) || result.ok !== true) {
@@ -8572,7 +8874,7 @@ async function deliverBuilderLibrary(options) {
 var SIGNUP_CONTROL_THEME_MARKER = "<!--odla:signup-control-theme-->";
 var SIGNUP_CONTROL_THEME_STYLE_ID = "odla-signup-control-theme";
 var TOKEN_NAME = /^--ui-[a-z0-9][a-z0-9-]{0,94}$/;
-var DIGEST = /^sha256:[0-9a-f]{64}$/;
+var DIGEST2 = /^sha256:[0-9a-f]{64}$/;
 var UNSAFE_VALUE = /[\u0000-\u001f\u007f\\<>{};]|\/\*|\*\/|(?:^|[^a-z])(?:url|expression)\s*\(|@import/i;
 var MAX_TOKENS = 256;
 var MAX_VALUE_LENGTH = 1e3;
@@ -8616,7 +8918,7 @@ function stateFor(revision, options) {
       metadata: { source: "bootstrap", revision: null, digest: null, cacheKey: "signup-control:bootstrap" }
     };
   }
-  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !DIGEST.test(revision.digest)) {
+  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !DIGEST2.test(revision.digest)) {
     throw new TypeError("signup-control theme revision metadata is invalid");
   }
   return {
@@ -8713,6 +9015,7 @@ var BUILTIN_ROUTES = [
   handleNetworkSnapshot,
   handleNetworkRecords,
   handleNetworkSharedNotes,
+  handleNetworkCommercialParity,
   handleNetworkCommercialStripeWebhook,
   handleFormation,
   handleMember,