@odla-ai/chapter 0.47.10 → 0.48.0

package/dist/testing.d.cts

@@ -14,6 +14,27 @@ interface ChapterAcceptanceSku {
     /** How long the difference from compareAtPriceCents is retained. */
     discountDuration?: "first_term" | "while_active";
 }
+/** Explicit expected terms at a test-clock instant, independent of the SKU price.
+ * These are acceptance assertions, never permission to issue an offer or change Stripe.
+ */
+interface ChapterAcceptanceCommercialCase {
+    id: string;
+    skuId: string;
+    purchasedAt: number;
+    offeringVersionId: string;
+    founding: boolean;
+    /** Cohort policy may apply to a Steward without granting a price discount. */
+    cohortPolicyVersionId?: string;
+    dueTodayCents: number;
+    initialTermEndsAt: number;
+    renewalCents: number;
+    discount?: {
+        policyVersionId: string;
+        percentOffBps: number;
+        duration: "first_term" | "while_active" | "fixed_end";
+        endsAt?: number;
+    };
+}
 /** Named-seat behavior that must be exercised as a membership add-on. */
 interface ChapterAcceptanceSeatOption {
     skuId: string;
@@ -45,6 +66,7 @@ interface ChapterAcceptanceTarget {
     stripeMode: "test" | "live";
     skus: readonly ChapterAcceptanceSku[];
     options: ChapterAcceptanceOptions;
+    commercialCases?: readonly ChapterAcceptanceCommercialCase[];
 }
 /** Complete multi-site contract consumed by hermetic and deployed-dev tests. */
 interface ChapterAcceptanceManifest {
@@ -60,7 +82,7 @@ type ChapterAcceptanceValidation = {
     errors: readonly string[];
 };
 /** Closed set of deterministic and provider-backed acceptance behaviors. */
-type ChapterAcceptanceScenarioKind = "catalog_contract" | "amount_tamper" | "wrong_environment_event" | "sibling_event_isolation" | "submit_replay" | "post_stripe_compensation" | "paid_signup" | "free_signup" | "ordinary_interview" | "invitation_interview_waiver" | "expired_interview_waiver" | "replayed_interview_waiver" | "named_seat" | "duplicate_seat_email" | "expired_seat_window" | "canceled_membership" | "renewal" | "refund_cancel";
+type ChapterAcceptanceScenarioKind = "catalog_contract" | "commercial_quote" | "commercial_renewal" | "commercial_policy_replay" | "amount_tamper" | "wrong_environment_event" | "sibling_event_isolation" | "submit_replay" | "post_stripe_compensation" | "paid_signup" | "free_signup" | "ordinary_interview" | "invitation_interview_waiver" | "expired_interview_waiver" | "replayed_interview_waiver" | "named_seat" | "duplicate_seat_email" | "expired_seat_window" | "seat_declined_refund" | "unaccepted_seat_refund" | "seat_membership_alignment" | "canceled_membership" | "renewal" | "refund_cancel";
 /** One stable generated case. Provider cases are opt-in and test-mode only. */
 interface ChapterAcceptanceScenario {
     id: string;
@@ -69,6 +91,9 @@ interface ChapterAcceptanceScenario {
     targetId: string;
     siteId: string;
     skuId?: string;
+    /** Membership whose add-on path is exercised; never assume the first paid SKU. */
+    parentSkuId?: string;
+    commercialCaseId?: string;
     siblingTargetId?: string;
 }
 /** Public response shape needed by the non-mutating deployed contract probe. */
@@ -95,6 +120,8 @@ interface ChapterAcceptanceExecutionContext {
     scenario: ChapterAcceptanceScenario;
     target: ChapterAcceptanceTarget;
     sku?: ChapterAcceptanceSku;
+    parentSku?: ChapterAcceptanceSku;
+    commercialCase?: ChapterAcceptanceCommercialCase;
     siblingTarget?: ChapterAcceptanceTarget;
 }
 /** Provider references permitted in durable evidence. Values must be opaque ids or digests, never PII. */
@@ -137,6 +164,9 @@ interface ChapterAcceptanceRunResult {
     cases: ChapterAcceptanceCaseResult[];
 }
 
+/** Compare real observed checkout terms against a separately authored acceptance vector. */
+declare function assertCommercialQuote(expected: ChapterAcceptanceCommercialCase, sku: ChapterAcceptanceSku, actual: unknown): boolean;
+
 /**
  * Probe public deployed join contracts without creating applications or provider objects.
  * Each request, including its body, is limited to ten seconds and 64 KiB. Redirects
@@ -157,6 +187,66 @@ declare function runChapterAcceptanceSuite(manifest: ChapterAcceptanceManifest,
 /** PII-free line report suitable for CI logs and PM evidence. */
 declare function formatChapterAcceptanceRun(result: ChapterAcceptanceRunResult): string;
 
+/** A release proof is tied to a reviewed source commit and one exact dev deployment. */
+interface ChapterReleaseTarget {
+    targetId: string;
+    appId: string;
+    chapterId: string;
+    runtime: string;
+    environment: "dev";
+    dataEnvironment: "dev";
+    stripeMode: "test";
+    sourceCommit: string;
+    deploymentVersion: string;
+}
+/** Required behavior is defined independently of currently enabled feature flags. */
+interface ChapterReleaseRequirement {
+    id: string;
+    targetId: string;
+    phase: "deterministic" | "deployed_contract" | "provider_dev" | "browser_dev";
+    assertions: readonly string[];
+    /** Each provider kind needs at least one opaque id/digest from the real attempt. */
+    providers: readonly ("stripe" | "clerk" | "calendar" | "email")[];
+    cleanup: readonly string[];
+}
+/** An independent release contract, not a list inferred from whichever tests happened to run. */
+interface ChapterReleasePlan {
+    schemaVersion: 1;
+    targets: readonly ChapterReleaseTarget[];
+    requirements: readonly ChapterReleaseRequirement[];
+}
+/** Structured result from an actual driver; this completeness check does not execute or authenticate a driver. */
+interface ChapterReleaseProof {
+    requirementId: string;
+    target: ChapterReleaseTarget;
+    phase: ChapterReleaseRequirement["phase"];
+    outcome: "passed" | "failed" | "blocked";
+    assertions: Readonly<Record<string, boolean>>;
+    references: readonly {
+        provider: ChapterReleaseRequirement["providers"][number];
+        id: string;
+    }[];
+    cleanup: Readonly<Record<string, boolean>>;
+}
+/** Bounded release blockers. Passing requests a human review, never permission to deploy. */
+interface ChapterReleaseAssessment {
+    readyForReview: boolean;
+    productionAuthorized: false;
+    required: number;
+    passed: number;
+    blockers: readonly {
+        requirementId: string;
+        code: string;
+    }[];
+}
+/**
+ * Require a complete, exact-candidate release evidence set. Missing, duplicate,
+ * failed, stale, wrong-runtime, skipped, or incompletely cleaned attempts block
+ * review. This is evidence validation, not provider execution: callers must use
+ * real drivers and retain their independently inspectable run artifacts.
+ */
+declare function assessChapterReleaseEvidence(plan: ChapterReleasePlan, proofs: readonly ChapterReleaseProof[]): ChapterReleaseAssessment;
+
 /** Validate the exact facts a multi-site acceptance run needs before it writes anywhere. */
 declare function validateChapterAcceptanceManifest(value: unknown): ChapterAcceptanceValidation;
 /**
@@ -165,4 +255,4 @@ declare function validateChapterAcceptanceManifest(value: unknown): ChapterAccep
  */
 declare function planChapterAcceptanceMatrix(manifest: ChapterAcceptanceManifest): ChapterAcceptanceScenario[];
 
-export { type ChapterAcceptanceCaseResult, type ChapterAcceptanceCleanupEvidence, type ChapterAcceptanceEvidence, type ChapterAcceptanceExecutionContext, type ChapterAcceptanceExecutor, type ChapterAcceptanceManifest, type ChapterAcceptanceOptions, type ChapterAcceptanceProviderReference, type ChapterAcceptanceRunResult, type ChapterAcceptanceScenario, type ChapterAcceptanceScenarioKind, type ChapterAcceptanceSeatOption, type ChapterAcceptanceSku, type ChapterAcceptanceTarget, type ChapterAcceptanceValidation, type ChapterJoinConfigProbe, type ChapterJoinContractFinding, type ChapterJoinContractProbeResult, formatChapterAcceptanceRun, planChapterAcceptanceMatrix, probeChapterJoinContracts, runChapterAcceptanceSuite, validateChapterAcceptanceManifest };
+export { type ChapterAcceptanceCaseResult, type ChapterAcceptanceCleanupEvidence, type ChapterAcceptanceCommercialCase, type ChapterAcceptanceEvidence, type ChapterAcceptanceExecutionContext, type ChapterAcceptanceExecutor, type ChapterAcceptanceManifest, type ChapterAcceptanceOptions, type ChapterAcceptanceProviderReference, type ChapterAcceptanceRunResult, type ChapterAcceptanceScenario, type ChapterAcceptanceScenarioKind, type ChapterAcceptanceSeatOption, type ChapterAcceptanceSku, type ChapterAcceptanceTarget, type ChapterAcceptanceValidation, type ChapterJoinConfigProbe, type ChapterJoinContractFinding, type ChapterJoinContractProbeResult, type ChapterReleaseAssessment, type ChapterReleasePlan, type ChapterReleaseProof, type ChapterReleaseRequirement, type ChapterReleaseTarget, assertCommercialQuote, assessChapterReleaseEvidence, formatChapterAcceptanceRun, planChapterAcceptanceMatrix, probeChapterJoinContracts, runChapterAcceptanceSuite, validateChapterAcceptanceManifest };

package/dist/testing.d.ts

@@ -14,6 +14,27 @@ interface ChapterAcceptanceSku {
     /** How long the difference from compareAtPriceCents is retained. */
     discountDuration?: "first_term" | "while_active";
 }
+/** Explicit expected terms at a test-clock instant, independent of the SKU price.
+ * These are acceptance assertions, never permission to issue an offer or change Stripe.
+ */
+interface ChapterAcceptanceCommercialCase {
+    id: string;
+    skuId: string;
+    purchasedAt: number;
+    offeringVersionId: string;
+    founding: boolean;
+    /** Cohort policy may apply to a Steward without granting a price discount. */
+    cohortPolicyVersionId?: string;
+    dueTodayCents: number;
+    initialTermEndsAt: number;
+    renewalCents: number;
+    discount?: {
+        policyVersionId: string;
+        percentOffBps: number;
+        duration: "first_term" | "while_active" | "fixed_end";
+        endsAt?: number;
+    };
+}
 /** Named-seat behavior that must be exercised as a membership add-on. */
 interface ChapterAcceptanceSeatOption {
     skuId: string;
@@ -45,6 +66,7 @@ interface ChapterAcceptanceTarget {
     stripeMode: "test" | "live";
     skus: readonly ChapterAcceptanceSku[];
     options: ChapterAcceptanceOptions;
+    commercialCases?: readonly ChapterAcceptanceCommercialCase[];
 }
 /** Complete multi-site contract consumed by hermetic and deployed-dev tests. */
 interface ChapterAcceptanceManifest {
@@ -60,7 +82,7 @@ type ChapterAcceptanceValidation = {
     errors: readonly string[];
 };
 /** Closed set of deterministic and provider-backed acceptance behaviors. */
-type ChapterAcceptanceScenarioKind = "catalog_contract" | "amount_tamper" | "wrong_environment_event" | "sibling_event_isolation" | "submit_replay" | "post_stripe_compensation" | "paid_signup" | "free_signup" | "ordinary_interview" | "invitation_interview_waiver" | "expired_interview_waiver" | "replayed_interview_waiver" | "named_seat" | "duplicate_seat_email" | "expired_seat_window" | "canceled_membership" | "renewal" | "refund_cancel";
+type ChapterAcceptanceScenarioKind = "catalog_contract" | "commercial_quote" | "commercial_renewal" | "commercial_policy_replay" | "amount_tamper" | "wrong_environment_event" | "sibling_event_isolation" | "submit_replay" | "post_stripe_compensation" | "paid_signup" | "free_signup" | "ordinary_interview" | "invitation_interview_waiver" | "expired_interview_waiver" | "replayed_interview_waiver" | "named_seat" | "duplicate_seat_email" | "expired_seat_window" | "seat_declined_refund" | "unaccepted_seat_refund" | "seat_membership_alignment" | "canceled_membership" | "renewal" | "refund_cancel";
 /** One stable generated case. Provider cases are opt-in and test-mode only. */
 interface ChapterAcceptanceScenario {
     id: string;
@@ -69,6 +91,9 @@ interface ChapterAcceptanceScenario {
     targetId: string;
     siteId: string;
     skuId?: string;
+    /** Membership whose add-on path is exercised; never assume the first paid SKU. */
+    parentSkuId?: string;
+    commercialCaseId?: string;
     siblingTargetId?: string;
 }
 /** Public response shape needed by the non-mutating deployed contract probe. */
@@ -95,6 +120,8 @@ interface ChapterAcceptanceExecutionContext {
     scenario: ChapterAcceptanceScenario;
     target: ChapterAcceptanceTarget;
     sku?: ChapterAcceptanceSku;
+    parentSku?: ChapterAcceptanceSku;
+    commercialCase?: ChapterAcceptanceCommercialCase;
     siblingTarget?: ChapterAcceptanceTarget;
 }
 /** Provider references permitted in durable evidence. Values must be opaque ids or digests, never PII. */
@@ -137,6 +164,9 @@ interface ChapterAcceptanceRunResult {
     cases: ChapterAcceptanceCaseResult[];
 }
 
+/** Compare real observed checkout terms against a separately authored acceptance vector. */
+declare function assertCommercialQuote(expected: ChapterAcceptanceCommercialCase, sku: ChapterAcceptanceSku, actual: unknown): boolean;
+
 /**
  * Probe public deployed join contracts without creating applications or provider objects.
  * Each request, including its body, is limited to ten seconds and 64 KiB. Redirects
@@ -157,6 +187,66 @@ declare function runChapterAcceptanceSuite(manifest: ChapterAcceptanceManifest,
 /** PII-free line report suitable for CI logs and PM evidence. */
 declare function formatChapterAcceptanceRun(result: ChapterAcceptanceRunResult): string;
 
+/** A release proof is tied to a reviewed source commit and one exact dev deployment. */
+interface ChapterReleaseTarget {
+    targetId: string;
+    appId: string;
+    chapterId: string;
+    runtime: string;
+    environment: "dev";
+    dataEnvironment: "dev";
+    stripeMode: "test";
+    sourceCommit: string;
+    deploymentVersion: string;
+}
+/** Required behavior is defined independently of currently enabled feature flags. */
+interface ChapterReleaseRequirement {
+    id: string;
+    targetId: string;
+    phase: "deterministic" | "deployed_contract" | "provider_dev" | "browser_dev";
+    assertions: readonly string[];
+    /** Each provider kind needs at least one opaque id/digest from the real attempt. */
+    providers: readonly ("stripe" | "clerk" | "calendar" | "email")[];
+    cleanup: readonly string[];
+}
+/** An independent release contract, not a list inferred from whichever tests happened to run. */
+interface ChapterReleasePlan {
+    schemaVersion: 1;
+    targets: readonly ChapterReleaseTarget[];
+    requirements: readonly ChapterReleaseRequirement[];
+}
+/** Structured result from an actual driver; this completeness check does not execute or authenticate a driver. */
+interface ChapterReleaseProof {
+    requirementId: string;
+    target: ChapterReleaseTarget;
+    phase: ChapterReleaseRequirement["phase"];
+    outcome: "passed" | "failed" | "blocked";
+    assertions: Readonly<Record<string, boolean>>;
+    references: readonly {
+        provider: ChapterReleaseRequirement["providers"][number];
+        id: string;
+    }[];
+    cleanup: Readonly<Record<string, boolean>>;
+}
+/** Bounded release blockers. Passing requests a human review, never permission to deploy. */
+interface ChapterReleaseAssessment {
+    readyForReview: boolean;
+    productionAuthorized: false;
+    required: number;
+    passed: number;
+    blockers: readonly {
+        requirementId: string;
+        code: string;
+    }[];
+}
+/**
+ * Require a complete, exact-candidate release evidence set. Missing, duplicate,
+ * failed, stale, wrong-runtime, skipped, or incompletely cleaned attempts block
+ * review. This is evidence validation, not provider execution: callers must use
+ * real drivers and retain their independently inspectable run artifacts.
+ */
+declare function assessChapterReleaseEvidence(plan: ChapterReleasePlan, proofs: readonly ChapterReleaseProof[]): ChapterReleaseAssessment;
+
 /** Validate the exact facts a multi-site acceptance run needs before it writes anywhere. */
 declare function validateChapterAcceptanceManifest(value: unknown): ChapterAcceptanceValidation;
 /**
@@ -165,4 +255,4 @@ declare function validateChapterAcceptanceManifest(value: unknown): ChapterAccep
  */
 declare function planChapterAcceptanceMatrix(manifest: ChapterAcceptanceManifest): ChapterAcceptanceScenario[];
 
-export { type ChapterAcceptanceCaseResult, type ChapterAcceptanceCleanupEvidence, type ChapterAcceptanceEvidence, type ChapterAcceptanceExecutionContext, type ChapterAcceptanceExecutor, type ChapterAcceptanceManifest, type ChapterAcceptanceOptions, type ChapterAcceptanceProviderReference, type ChapterAcceptanceRunResult, type ChapterAcceptanceScenario, type ChapterAcceptanceScenarioKind, type ChapterAcceptanceSeatOption, type ChapterAcceptanceSku, type ChapterAcceptanceTarget, type ChapterAcceptanceValidation, type ChapterJoinConfigProbe, type ChapterJoinContractFinding, type ChapterJoinContractProbeResult, formatChapterAcceptanceRun, planChapterAcceptanceMatrix, probeChapterJoinContracts, runChapterAcceptanceSuite, validateChapterAcceptanceManifest };
+export { type ChapterAcceptanceCaseResult, type ChapterAcceptanceCleanupEvidence, type ChapterAcceptanceCommercialCase, type ChapterAcceptanceEvidence, type ChapterAcceptanceExecutionContext, type ChapterAcceptanceExecutor, type ChapterAcceptanceManifest, type ChapterAcceptanceOptions, type ChapterAcceptanceProviderReference, type ChapterAcceptanceRunResult, type ChapterAcceptanceScenario, type ChapterAcceptanceScenarioKind, type ChapterAcceptanceSeatOption, type ChapterAcceptanceSku, type ChapterAcceptanceTarget, type ChapterAcceptanceValidation, type ChapterJoinConfigProbe, type ChapterJoinContractFinding, type ChapterJoinContractProbeResult, type ChapterReleaseAssessment, type ChapterReleasePlan, type ChapterReleaseProof, type ChapterReleaseRequirement, type ChapterReleaseTarget, assertCommercialQuote, assessChapterReleaseEvidence, formatChapterAcceptanceRun, planChapterAcceptanceMatrix, probeChapterJoinContracts, runChapterAcceptanceSuite, validateChapterAcceptanceManifest };

package/dist/testing.js

@@ -1,3 +1,50 @@
+// src/testing-commercial.ts
+var object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+var id = (value) => typeof value === "string" && /^[a-z0-9][a-z0-9_.:-]{1,159}$/.test(value);
+var time = (value) => Number.isSafeInteger(value) && Number(value) > 0;
+function validateCommercialCases(value, skus, path) {
+  if (value === void 0) return [];
+  if (!Array.isArray(value) || !value.length || value.length > 32) return [`${path} must be a non-empty array of at most 32 cases`];
+  const errors = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const [index, raw] of value.entries()) {
+    const item = object(raw);
+    const at = `${path}[${index}]`;
+    if (!item) {
+      errors.push(`${at} must be an object`);
+      continue;
+    }
+    if (!id(item.id) || ids.has(String(item.id))) errors.push(`${at}.id must be a unique stable id`);
+    ids.add(String(item.id));
+    const sku = skus.find((candidate) => candidate.id === item.skuId && candidate.active && candidate.kind === "membership" && candidate.priceCents > 0);
+    if (!sku) errors.push(`${at}.skuId must name an active paid base membership SKU`);
+    if (sku?.compareAtPriceCents !== void 0 || sku?.discountDuration !== void 0) {
+      errors.push(`${at} must not combine a discounted SKU with a separate commercial policy`);
+    }
+    if (!id(item.offeringVersionId)) errors.push(`${at}.offeringVersionId is required`);
+    if (typeof item.founding !== "boolean" || item.founding && !id(item.cohortPolicyVersionId) || item.cohortPolicyVersionId !== void 0 && !id(item.cohortPolicyVersionId)) errors.push(`${at}.founding requires a stable cohort policy identity`);
+    if (!time(item.purchasedAt) || !time(item.initialTermEndsAt) || item.initialTermEndsAt <= item.purchasedAt) {
+      errors.push(`${at} must specify a purchase instant and a later initial term end`);
+    }
+    const discount = object(item.discount);
+    if (item.discount !== void 0 && (!discount || !id(discount.policyVersionId) || !Number.isInteger(discount.percentOffBps) || Number(discount.percentOffBps) <= 0 || Number(discount.percentOffBps) >= 1e4 || !["first_term", "while_active", "fixed_end"].includes(String(discount.duration)) || (discount.duration === "fixed_end" ? !time(discount.endsAt) || Number(discount.endsAt) <= Number(item.purchasedAt) : discount.endsAt !== void 0))) {
+      errors.push(`${at}.discount must specify a version, percentage, and explicit expiry policy`);
+    }
+    if (sku) {
+      const due = Math.round(sku.priceCents * (1e4 - Number(discount?.percentOffBps ?? 0)) / 1e4);
+      const ongoing = discount?.duration === "while_active" || discount?.duration === "fixed_end" && Number(discount.endsAt) > Number(item.initialTermEndsAt);
+      if (item.dueTodayCents !== due || item.renewalCents !== (ongoing ? due : sku.priceCents)) {
+        errors.push(`${at} expected initial and renewal amounts must match the separate policy on the base price`);
+      }
+    }
+  }
+  return errors;
+}
+function assertCommercialQuote(expected, sku, actual) {
+  const quote = object(actual), lines = object(quote?.lineItems), terms = object(quote?.commercial);
+  return Boolean(quote && terms && sku.id === expected.skuId && quote.tierId === expected.skuId && quote.currency === sku.currency && quote.interval === sku.billing && lines?.standardCents === sku.priceCents && lines.discountCents === sku.priceCents - expected.dueTodayCents && lines.dueTodayCents === expected.dueTodayCents && terms.offeringVersionId === expected.offeringVersionId && terms.initialTermEndsAt === expected.initialTermEndsAt && terms.renewalCents === expected.renewalCents && terms.autoRenew === true && terms.discountPolicyVersionId === expected.discount?.policyVersionId && terms.discountDuration === expected.discount?.duration);
+}
+
 // src/testing-probe.ts
 var MAX_BODY_BYTES = 64 * 1024;
 var TIMEOUT_MS = 1e4;
@@ -206,14 +253,16 @@ function validateCleanup(cleanup) {
   validateLabels(cleanup.checks, "cleanup.checks");
   return { status: cleanup.status, checks: [...cleanup.checks] };
 }
-function contextFor(manifest, id) {
-  const scenario2 = planChapterAcceptanceMatrix(manifest).find((item) => item.id === id);
-  if (!scenario2) throw new TypeError(`unknown acceptance scenario ${id}`);
+function contextFor(manifest, id2) {
+  const scenario2 = planChapterAcceptanceMatrix(manifest).find((item) => item.id === id2);
+  if (!scenario2) throw new TypeError(`unknown acceptance scenario ${id2}`);
   const target = manifest.targets.find((item) => item.targetId === scenario2.targetId);
   return {
     scenario: scenario2,
     target,
     ...scenario2.skuId ? { sku: target.skus.find((item) => item.id === scenario2.skuId) } : {},
+    ...scenario2.parentSkuId ? { parentSku: target.skus.find((item) => item.id === scenario2.parentSkuId) } : {},
+    ...scenario2.commercialCaseId ? { commercialCase: target.commercialCases?.find((item) => item.id === scenario2.commercialCaseId) } : {},
     ...scenario2.siblingTargetId ? {
       siblingTarget: manifest.targets.find((item) => item.targetId === scenario2.siblingTargetId)
     } : {}
@@ -274,6 +323,66 @@ function formatChapterAcceptanceRun(result) {
   return lines.join("\n");
 }
 
+// src/testing-release.ts
+var ID = /^[a-z0-9][a-z0-9_.:-]{1,199}$/;
+var validId = (value) => typeof value === "string" && ID.test(value);
+var opaque = (value) => typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9_:-]{2,159}$/.test(value) && !/(?:sk|rk|pk|whsec)_(?:test_|live_)?|_secret_|bearer|password|token/i.test(value);
+var keys = ["targetId", "appId", "chapterId", "runtime", "environment", "dataEnvironment", "stripeMode", "sourceCommit", "deploymentVersion"];
+function assessChapterReleaseEvidence(plan, proofs) {
+  const blockers = [];
+  const block = (requirementId, code) => blockers.push({ requirementId, code });
+  const targets = /* @__PURE__ */ new Map();
+  if (!plan || plan.schemaVersion !== 1 || !Array.isArray(plan.targets) || !plan.targets.length || plan.targets.length > 64 || !Array.isArray(plan.requirements) || !plan.requirements.length || plan.requirements.length > 4096 || !Array.isArray(proofs) || proofs.length > 8192) {
+    return {
+      readyForReview: false,
+      productionAuthorized: false,
+      required: 0,
+      passed: 0,
+      blockers: [{ requirementId: "plan", code: "invalid_release_plan" }]
+    };
+  }
+  for (const target of plan.targets) {
+    if (!target || !validId(target.targetId) || targets.has(target.targetId) || ![target.appId, target.chapterId, target.runtime].every(validId) || target.environment !== "dev" || target.dataEnvironment !== "dev" || target.stripeMode !== "test" || typeof target.sourceCommit !== "string" || !/^[0-9a-f]{40}$/.test(target.sourceCommit) || !opaque(target.deploymentVersion)) {
+      block("plan", "invalid_or_undeployed_target");
+      continue;
+    }
+    targets.set(target.targetId, target);
+  }
+  const requirementIds = /* @__PURE__ */ new Set();
+  let passed = 0;
+  for (const requirement of plan.requirements) {
+    if (!requirement || !validId(requirement.id) || requirementIds.has(requirement.id) || !["deterministic", "deployed_contract", "provider_dev", "browser_dev"].includes(requirement.phase) || !Array.isArray(requirement.assertions) || !requirement.assertions.length || !requirement.assertions.every(validId) || new Set(requirement.assertions).size !== requirement.assertions.length || !Array.isArray(requirement.providers) || requirement.providers.some((kind) => !["stripe", "clerk", "calendar", "email"].includes(kind)) || !Array.isArray(requirement.cleanup) || !requirement.cleanup.every(validId) || requirement.phase === "provider_dev" && (!requirement.providers.length || !requirement.cleanup.length)) {
+      block("plan", "invalid_requirement");
+      continue;
+    }
+    requirementIds.add(requirement.id);
+    const target = targets.get(requirement.targetId);
+    if (!target) {
+      block(requirement.id, "missing_candidate_target");
+      continue;
+    }
+    const matching = proofs.filter((proof2) => proof2?.requirementId === requirement.id);
+    if (matching.length !== 1) {
+      block(requirement.id, matching.length ? "duplicate_proof" : "missing_proof");
+      continue;
+    }
+    const proof = matching[0];
+    const before = blockers.length;
+    if (!proof.target || keys.some((key) => proof.target[key] !== target[key])) block(requirement.id, "candidate_mismatch");
+    if (proof.phase !== requirement.phase) block(requirement.id, "wrong_execution_phase");
+    if (proof.outcome !== "passed") block(requirement.id, "attempt_not_passed");
+    if (!proof.assertions || requirement.assertions.some((id2) => proof.assertions[id2] !== true)) block(requirement.id, "assertions_incomplete");
+    if (!Array.isArray(proof.references) || proof.references.some((reference) => !reference || !opaque(reference.id) || !["stripe", "clerk", "calendar", "email"].includes(reference.provider)) || requirement.providers.some((provider) => !proof.references.some((reference) => reference.provider === provider))) block(requirement.id, "provider_evidence_incomplete");
+    if (!proof.cleanup || requirement.cleanup.some((id2) => proof.cleanup[id2] !== true)) block(requirement.id, "cleanup_incomplete");
+    if (blockers.length === before) passed++;
+  }
+  if (proofs.some((proof) => !proof || !requirementIds.has(proof.requirementId))) block("plan", "unexpected_proof");
+  for (const target of targets.values()) {
+    if (!plan.requirements.some((requirement) => requirement?.targetId === target.targetId)) block("plan", "uncovered_target");
+  }
+  return { readyForReview: blockers.length === 0, productionAuthorized: false, required: plan.requirements.length, passed, blockers };
+}
+
 // src/testing.ts
 var SLUG = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var CURRENCY = /^[a-z]{3}$/;
@@ -281,9 +390,6 @@ var STRIPE_PRICE = /^price_[A-Za-z0-9]{8,}$/;
 function activeMemberships2(site) {
   return site.skus.filter((sku) => sku.active && sku.kind === "membership");
 }
-function representativePaidMembership(site) {
-  return activeMemberships2(site).find((sku) => sku.priceCents > 0);
-}
 function record2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -347,10 +453,10 @@ function validateChapterAcceptanceManifest(value) {
         errors.push(`${skuPath} must be an object`);
         continue;
       }
-      const id = typeof sku.id === "string" ? sku.id : "";
-      if (!SLUG.test(id)) errors.push(`${skuPath}.id must be a stable lowercase slug`);
-      if (skuIds.has(id)) errors.push(`${skuPath}.id duplicates ${JSON.stringify(id)}`);
-      if (id) skuIds.add(id);
+      const id2 = typeof sku.id === "string" ? sku.id : "";
+      if (!SLUG.test(id2)) errors.push(`${skuPath}.id must be a stable lowercase slug`);
+      if (skuIds.has(id2)) errors.push(`${skuPath}.id duplicates ${JSON.stringify(id2)}`);
+      if (id2) skuIds.add(id2);
       if (sku.kind !== "membership" && sku.kind !== "add_on") errors.push(`${skuPath}.kind must be membership or add_on`);
       if (typeof sku.active !== "boolean") errors.push(`${skuPath}.active must be boolean`);
       const priceCents = typeof sku.priceCents === "number" ? sku.priceCents : Number.NaN;
@@ -367,7 +473,7 @@ function validateChapterAcceptanceManifest(value) {
       }
       if (priceCents === 0 && sku.stripePriceId) errors.push(`${skuPath}.stripePriceId must be absent for a free SKU`);
       if (typeof sku.stripePriceId === "string" && sku.stripePriceId) {
-        const owner = `${siteId}/${id}`;
+        const owner = `${siteId}/${id2}`;
         const previous = priceOwners.get(sku.stripePriceId);
         if (previous && previous !== owner) errors.push(`${skuPath}.stripePriceId is already owned by ${previous}`);
         else priceOwners.set(sku.stripePriceId, owner);
@@ -385,6 +491,7 @@ function validateChapterAcceptanceManifest(value) {
       skus.push(sku);
     }
     if (!skus.some((sku) => sku.active && sku.kind === "membership")) errors.push(`${path}.skus must contain an active membership SKU`);
+    errors.push(...validateCommercialCases(site.commercialCases, skus, `${path}.commercialCases`));
     const options = record2(site.options);
     if (!options) errors.push(`${path}.options must be an object`);
     if (options?.ordinaryInterview !== true) errors.push(`${path}.options.ordinaryInterview must be true`);
@@ -413,7 +520,7 @@ function validateChapterAcceptanceManifest(value) {
 function scenario(input) {
   return {
     ...input,
-    id: [input.suite, input.targetId, input.skuId, input.siblingTargetId, input.kind].filter(Boolean).join(":")
+    id: [input.suite, input.targetId, input.skuId, input.parentSkuId, input.commercialCaseId, input.siblingTargetId, input.kind].filter(Boolean).join(":")
   };
 }
 function planChapterAcceptanceMatrix(manifest) {
@@ -424,6 +531,12 @@ function planChapterAcceptanceMatrix(manifest) {
   }
   const scenarios = [];
   for (const site of manifest.targets) {
+    for (const vector of site.commercialCases ?? []) {
+      const base = { targetId: site.targetId, siteId: site.siteId, skuId: vector.skuId, commercialCaseId: vector.id };
+      scenarios.push(scenario({ ...base, suite: "hermetic", kind: "commercial_policy_replay" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "commercial_quote" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "commercial_renewal" }));
+    }
     for (const sku of site.skus.filter((candidate) => candidate.active)) {
       scenarios.push(scenario({ suite: "hermetic", kind: "catalog_contract", targetId: site.targetId, siteId: site.siteId, skuId: sku.id }));
       if (sku.priceCents > 0) {
@@ -452,45 +565,34 @@ function planChapterAcceptanceMatrix(manifest) {
         skuId: sku.id
       }));
     }
-    const paid = representativePaidMembership(site);
-    if (paid) {
-      scenarios.push(scenario({ suite: "provider_dev", kind: "ordinary_interview", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-      scenarios.push(scenario({ suite: "provider_dev", kind: "renewal", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-      scenarios.push(scenario({ suite: "provider_dev", kind: "refund_cancel", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+    for (const membership of activeMemberships2(site)) {
+      const base = { targetId: site.targetId, siteId: site.siteId, skuId: membership.id };
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "ordinary_interview" }));
       if (site.options.invitationInterviewWaiver) {
-        scenarios.push(scenario({ suite: "provider_dev", kind: "invitation_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-        scenarios.push(scenario({ suite: "hermetic", kind: "expired_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-        scenarios.push(scenario({ suite: "hermetic", kind: "replayed_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+        scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "invitation_interview_waiver" }));
+        scenarios.push(scenario({ ...base, suite: "hermetic", kind: "expired_interview_waiver" }));
+        scenarios.push(scenario({ ...base, suite: "hermetic", kind: "replayed_interview_waiver" }));
       }
+      if (membership.priceCents === 0) continue;
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "renewal" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "refund_cancel" }));
       if (site.options.additionalSeat) {
-        scenarios.push(scenario({
-          suite: "provider_dev",
-          kind: "named_seat",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
-        scenarios.push(scenario({
-          suite: "hermetic",
-          kind: "duplicate_seat_email",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
-        scenarios.push(scenario({
-          suite: "hermetic",
-          kind: "expired_seat_window",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
+        const seat = { ...base, skuId: site.options.additionalSeat.skuId, parentSkuId: membership.id };
+        for (const kind of ["named_seat", "seat_declined_refund", "unaccepted_seat_refund", "seat_membership_alignment"]) {
+          scenarios.push(scenario({ ...seat, suite: "provider_dev", kind }));
+        }
+        for (const kind of ["duplicate_seat_email", "expired_seat_window"]) {
+          scenarios.push(scenario({ ...seat, suite: "hermetic", kind }));
+        }
       }
-      scenarios.push(scenario({ suite: "hermetic", kind: "canceled_membership", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+      scenarios.push(scenario({ ...base, suite: "hermetic", kind: "canceled_membership" }));
     }
   }
   return scenarios;
 }
 export {
+  assertCommercialQuote,
+  assessChapterReleaseEvidence,
   formatChapterAcceptanceRun,
   planChapterAcceptanceMatrix,
   probeChapterJoinContracts,