@odla-ai/chapter 0.47.9 → 0.48.0

package/dist/testing.cjs

@@ -20,6 +20,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/testing.ts
 var testing_exports = {};
 __export(testing_exports, {
+  assertCommercialQuote: () => assertCommercialQuote,
+  assessChapterReleaseEvidence: () => assessChapterReleaseEvidence,
   formatChapterAcceptanceRun: () => formatChapterAcceptanceRun,
   planChapterAcceptanceMatrix: () => planChapterAcceptanceMatrix,
   probeChapterJoinContracts: () => probeChapterJoinContracts,
@@ -28,7 +30,146 @@ __export(testing_exports, {
 });
 module.exports = __toCommonJS(testing_exports);
 
+// src/testing-commercial.ts
+var object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+var id = (value) => typeof value === "string" && /^[a-z0-9][a-z0-9_.:-]{1,159}$/.test(value);
+var time = (value) => Number.isSafeInteger(value) && Number(value) > 0;
+function validateCommercialCases(value, skus, path) {
+  if (value === void 0) return [];
+  if (!Array.isArray(value) || !value.length || value.length > 32) return [`${path} must be a non-empty array of at most 32 cases`];
+  const errors = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const [index, raw] of value.entries()) {
+    const item = object(raw);
+    const at = `${path}[${index}]`;
+    if (!item) {
+      errors.push(`${at} must be an object`);
+      continue;
+    }
+    if (!id(item.id) || ids.has(String(item.id))) errors.push(`${at}.id must be a unique stable id`);
+    ids.add(String(item.id));
+    const sku = skus.find((candidate) => candidate.id === item.skuId && candidate.active && candidate.kind === "membership" && candidate.priceCents > 0);
+    if (!sku) errors.push(`${at}.skuId must name an active paid base membership SKU`);
+    if (sku?.compareAtPriceCents !== void 0 || sku?.discountDuration !== void 0) {
+      errors.push(`${at} must not combine a discounted SKU with a separate commercial policy`);
+    }
+    if (!id(item.offeringVersionId)) errors.push(`${at}.offeringVersionId is required`);
+    if (typeof item.founding !== "boolean" || item.founding && !id(item.cohortPolicyVersionId) || item.cohortPolicyVersionId !== void 0 && !id(item.cohortPolicyVersionId)) errors.push(`${at}.founding requires a stable cohort policy identity`);
+    if (!time(item.purchasedAt) || !time(item.initialTermEndsAt) || item.initialTermEndsAt <= item.purchasedAt) {
+      errors.push(`${at} must specify a purchase instant and a later initial term end`);
+    }
+    const discount = object(item.discount);
+    if (item.discount !== void 0 && (!discount || !id(discount.policyVersionId) || !Number.isInteger(discount.percentOffBps) || Number(discount.percentOffBps) <= 0 || Number(discount.percentOffBps) >= 1e4 || !["first_term", "while_active", "fixed_end"].includes(String(discount.duration)) || (discount.duration === "fixed_end" ? !time(discount.endsAt) || Number(discount.endsAt) <= Number(item.purchasedAt) : discount.endsAt !== void 0))) {
+      errors.push(`${at}.discount must specify a version, percentage, and explicit expiry policy`);
+    }
+    if (sku) {
+      const due = Math.round(sku.priceCents * (1e4 - Number(discount?.percentOffBps ?? 0)) / 1e4);
+      const ongoing = discount?.duration === "while_active" || discount?.duration === "fixed_end" && Number(discount.endsAt) > Number(item.initialTermEndsAt);
+      if (item.dueTodayCents !== due || item.renewalCents !== (ongoing ? due : sku.priceCents)) {
+        errors.push(`${at} expected initial and renewal amounts must match the separate policy on the base price`);
+      }
+    }
+  }
+  return errors;
+}
+function assertCommercialQuote(expected, sku, actual) {
+  const quote = object(actual), lines = object(quote?.lineItems), terms = object(quote?.commercial);
+  return Boolean(quote && terms && sku.id === expected.skuId && quote.tierId === expected.skuId && quote.currency === sku.currency && quote.interval === sku.billing && lines?.standardCents === sku.priceCents && lines.discountCents === sku.priceCents - expected.dueTodayCents && lines.dueTodayCents === expected.dueTodayCents && terms.offeringVersionId === expected.offeringVersionId && terms.initialTermEndsAt === expected.initialTermEndsAt && terms.renewalCents === expected.renewalCents && terms.autoRenew === true && terms.discountPolicyVersionId === expected.discount?.policyVersionId && terms.discountDuration === expected.discount?.duration);
+}
+
 // src/testing-probe.ts
+var MAX_BODY_BYTES = 64 * 1024;
+var TIMEOUT_MS = 1e4;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+async function readBoundedJson(response, signal) {
+  const reader = response.body?.getReader();
+  if (!reader) throw new Error("invalid_json");
+  const chunks = [];
+  let size = 0;
+  const abort = () => {
+    void reader.cancel().catch(() => {
+    });
+  };
+  signal.addEventListener("abort", abort, { once: true });
+  try {
+    if (signal.aborted) throw new Error("response_failed");
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > MAX_BODY_BYTES) throw new Error("response_too_large");
+      chunks.push(value);
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.byteLength;
+    }
+    try {
+      return JSON.parse(new TextDecoder().decode(bytes));
+    } catch {
+      throw new Error("invalid_json");
+    }
+  } finally {
+    signal.removeEventListener("abort", abort);
+    await reader.cancel().catch(() => {
+    });
+    reader.releaseLock();
+  }
+}
+async function probe(url, fetcher, json) {
+  const controller = new AbortController();
+  let timer;
+  const timeout = new Promise((resolve) => {
+    timer = setTimeout(() => {
+      controller.abort();
+      resolve({ status: 0, error: "request_timeout" });
+    }, TIMEOUT_MS);
+  });
+  try {
+    return await Promise.race([timeout, (async () => {
+      let response;
+      try {
+        response = await fetcher(url, {
+          headers: { "cache-control": "no-cache" },
+          redirect: "manual",
+          signal: controller.signal
+        });
+      } catch {
+        return { status: 0, error: "request_failed" };
+      }
+      if (!json || !response.ok) {
+        await response.body?.cancel().catch(() => {
+        });
+        return { status: response.status };
+      }
+      try {
+        return {
+          status: response.status,
+          json: await readBoundedJson(response, controller.signal),
+          identity: Object.fromEntries(["app-id", "chapter-id", "data-environment", "runtime"].map((name) => [name, slug(response.headers.get(`x-odla-${name}`) ?? void 0)]))
+        };
+      } catch (error) {
+        const code = error instanceof Error && ["invalid_json", "response_too_large"].includes(error.message) ? error.message : "response_failed";
+        return { status: response.status, error: code };
+      }
+    })()]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function slug(value) {
+  return value === void 0 ? void 0 : typeof value === "string" && /^[a-z0-9][a-z0-9-]{1,62}$/.test(value) ? value : "invalid_value";
+}
+function amount(value) {
+  return value === void 0 ? void 0 : Number.isSafeInteger(value) && Number(value) >= 0 ? value : "invalid_value";
+}
+function boolean(value) {
+  return value === void 0 ? void 0 : typeof value === "boolean" ? value : "invalid_value";
+}
 function activeMemberships(site) {
   return site.skus.filter((sku) => sku.active && sku.kind === "membership");
 }
@@ -37,31 +178,35 @@ async function probeChapterJoinContracts(manifest, fetcher = fetch) {
   if (!validation.ok) throw new TypeError(`invalid Chapter acceptance manifest: ${validation.errors.join("; ")}`);
   const findings = [];
   for (const site of manifest.targets) {
-    let health;
-    let configResponse;
-    try {
-      [health, configResponse] = await Promise.all([
-        fetcher(`${site.origin}/api/health`, { headers: { "cache-control": "no-cache" } }),
-        fetcher(`${site.origin}/api/join-config`, { headers: { "cache-control": "no-cache" } })
-      ]);
-    } catch (error) {
-      findings.push({ targetId: site.targetId, siteId: site.siteId, path: "fetch", expected: "reachable", actual: error instanceof Error ? error.message : String(error) });
-      continue;
-    }
+    const [health, configResponse] = await Promise.all([
+      probe(`${site.origin}/api/health`, fetcher, true),
+      probe(`${site.origin}/api/join-config`, fetcher, true)
+    ]);
     const targetNote = (path, expected, actual) => {
       if (JSON.stringify(expected) !== JSON.stringify(actual)) findings.push({ targetId: site.targetId, siteId: site.siteId, path, expected, actual });
     };
-    targetNote("/api/health status", 200, health.status);
-    targetNote("/api/join-config status", 200, configResponse.status);
-    if (!configResponse.ok) continue;
-    let config;
-    try {
-      config = await configResponse.json();
-    } catch {
-      targetNote("/api/join-config JSON", "object", "invalid JSON");
+    targetNote("/api/health status", 200, health.error ?? health.status);
+    if (health.status === 200 && !health.error) targetNote("/api/health ok", true, boolean(record(health.json)?.ok));
+    if (health.status === 200 && !health.error) {
+      for (const [name, expected] of Object.entries({
+        "app-id": site.target.appId,
+        "chapter-id": site.target.chapterId,
+        "data-environment": site.target.dataEnvironment,
+        "runtime": site.target.runtime
+      })) targetNote(`/api/health x-odla-${name}`, expected, health.identity?.[name]);
+    }
+    targetNote("/api/join-config status", 200, configResponse.status || configResponse.error);
+    if (configResponse.status !== 200) continue;
+    if (configResponse.error) {
+      targetNote("/api/join-config JSON", "object", configResponse.error === "invalid_json" ? "invalid JSON" : configResponse.error);
+      continue;
+    }
+    const config = record(configResponse.json);
+    if (!config) {
+      targetNote("/api/join-config JSON", "object", "invalid shape");
       continue;
     }
-    targetNote("id", site.target.chapterId, config.id);
+    targetNote("id", site.target.chapterId, slug(config.id));
     const actualTiers = Array.isArray(config.tiers) ? config.tiers : [];
     const expectedTiers = activeMemberships(site).map((sku) => ({
       id: sku.id,
@@ -71,17 +216,18 @@ async function probeChapterJoinContracts(manifest, fetcher = fetch) {
       free: sku.priceCents === 0
     }));
     const projected = actualTiers.map((tier) => {
-      const value = tier;
+      const value = record(tier);
+      if (!value) return "invalid_tier";
       return {
-        id: value.id,
-        priceCents: value.priceCents,
-        currency: value.currency,
-        interval: value.interval,
-        free: value.free
+        id: slug(value.id),
+        priceCents: amount(value.priceCents),
+        currency: value.currency === void 0 ? void 0 : typeof value.currency === "string" && /^[a-z]{3}$/.test(value.currency) ? value.currency : "invalid_value",
+        interval: value.interval === void 0 ? void 0 : ["month", "year", "once"].includes(String(value.interval)) ? value.interval : "invalid_value",
+        free: boolean(value.free)
       };
     });
     targetNote("tiers", expectedTiers, projected);
-    targetNote("paymentsReady", expectedTiers.some((tier) => !tier.free), config.paymentsReady);
+    targetNote("paymentsReady", expectedTiers.some((tier) => !tier.free), boolean(config.paymentsReady));
   }
   return { ok: findings.length === 0, findings };
 }
@@ -89,16 +235,21 @@ async function probeChapterJoinContracts(manifest, fetcher = fetch) {
 // src/testing-runner.ts
 var SAFE_LABEL = /^[a-z0-9][a-z0-9._:-]{0,159}$/;
 var SAFE_REFERENCE = /^[A-Za-z0-9_:.=-]{3,240}$/;
+var CREDENTIAL = /(?:^|[_.:-])(?:sk|rk|pk)_(?:test|live)_|whsec_|_secret_|eyJ[A-Za-z0-9_-]+\./i;
+var ERROR_CODES = /* @__PURE__ */ new Set(["invalid_evidence", "assertion_failed", "preflight_failed", "unsupported_scenario", "execution_failed"]);
+function safeValue(value, pattern) {
+  return pattern.test(value) && !CREDENTIAL.test(value);
+}
 function safeErrorCode(error) {
   if (error && typeof error === "object") {
     const code = error.code;
-    if (typeof code === "string" && SAFE_LABEL.test(code)) return code;
+    if (typeof code === "string" && ERROR_CODES.has(code)) return code;
   }
   return "execution_failed";
 }
 function validateLabels(values, path) {
   if (!Array.isArray(values) || values.length === 0) throw Object.assign(new TypeError(`${path} must be non-empty`), { code: "invalid_evidence" });
-  if (values.length > 64 || values.some((value) => typeof value !== "string" || !SAFE_LABEL.test(value))) {
+  if (values.length > 64 || values.some((value) => typeof value !== "string" || !safeValue(value, SAFE_LABEL))) {
     throw Object.assign(new TypeError(`${path} contains an unsafe or unbounded label`), { code: "invalid_evidence" });
   }
 }
@@ -107,7 +258,7 @@ function validateReferences(values) {
   if (!Array.isArray(values) || values.length > 64) throw Object.assign(new TypeError("references must be bounded"), { code: "invalid_evidence" });
   const kinds = /* @__PURE__ */ new Set(["stripe_event", "stripe_object", "clerk_user", "calendar_event", "email_message", "event_digest"]);
   for (const reference of values) {
-    if (!reference || !kinds.has(reference.kind) || typeof reference.value !== "string" || !SAFE_REFERENCE.test(reference.value) || reference.value.includes("@")) {
+    if (!reference || !kinds.has(reference.kind) || typeof reference.value !== "string" || !safeValue(reference.value, SAFE_REFERENCE) || reference.value.includes("@")) {
       throw Object.assign(new TypeError("references may contain only opaque provider ids or digests"), { code: "invalid_evidence" });
     }
   }
@@ -116,52 +267,70 @@ function validateEvidence(evidence, provider) {
   if (!evidence || typeof evidence !== "object") throw Object.assign(new TypeError("executor returned no evidence"), { code: "invalid_evidence" });
   validateLabels(evidence.checks, "evidence.checks");
   validateReferences(evidence.references);
-  if (provider && (typeof evidence.deploymentVersion !== "string" || !SAFE_REFERENCE.test(evidence.deploymentVersion))) {
+  if ((provider || evidence.deploymentVersion !== void 0) && (typeof evidence.deploymentVersion !== "string" || !safeValue(evidence.deploymentVersion, SAFE_REFERENCE))) {
     throw Object.assign(new TypeError("provider evidence requires a safe deploymentVersion"), { code: "invalid_evidence" });
   }
+  return {
+    checks: [...evidence.checks],
+    ...evidence.deploymentVersion !== void 0 ? { deploymentVersion: evidence.deploymentVersion } : {},
+    ...evidence.references !== void 0 ? {
+      references: evidence.references.map(({ kind, value }) => ({ kind, value }))
+    } : {}
+  };
 }
 function validateCleanup(cleanup) {
   if (!cleanup || cleanup.status !== "complete" && cleanup.status !== "incomplete") {
     throw Object.assign(new TypeError("executor returned invalid cleanup evidence"), { code: "cleanup_failed" });
   }
   validateLabels(cleanup.checks, "cleanup.checks");
+  return { status: cleanup.status, checks: [...cleanup.checks] };
 }
-function contextFor(manifest, id) {
-  const scenario2 = planChapterAcceptanceMatrix(manifest).find((item) => item.id === id);
-  if (!scenario2) throw new TypeError(`unknown acceptance scenario ${id}`);
+function contextFor(manifest, id2) {
+  const scenario2 = planChapterAcceptanceMatrix(manifest).find((item) => item.id === id2);
+  if (!scenario2) throw new TypeError(`unknown acceptance scenario ${id2}`);
   const target = manifest.targets.find((item) => item.targetId === scenario2.targetId);
   return {
     scenario: scenario2,
     target,
     ...scenario2.skuId ? { sku: target.skus.find((item) => item.id === scenario2.skuId) } : {},
+    ...scenario2.parentSkuId ? { parentSku: target.skus.find((item) => item.id === scenario2.parentSkuId) } : {},
+    ...scenario2.commercialCaseId ? { commercialCase: target.commercialCases?.find((item) => item.id === scenario2.commercialCaseId) } : {},
     ...scenario2.siblingTargetId ? {
       siblingTarget: manifest.targets.find((item) => item.targetId === scenario2.siblingTargetId)
     } : {}
   };
 }
 async function runChapterAcceptanceSuite(manifest, suite, executor) {
+  if (suite !== "hermetic" && suite !== "provider_dev") throw new TypeError("unknown acceptance suite");
   const scenarios = planChapterAcceptanceMatrix(manifest).filter((item) => item.suite === suite);
   if (suite === "provider_dev" && typeof executor.cleanup !== "function") {
     throw new TypeError("provider_dev acceptance requires a cleanup executor before any case can run");
   }
   const cases = [];
+  let cleanupFailed = false;
   for (const scenario2 of scenarios) {
+    if (cleanupFailed) {
+      cases.push({ id: scenario2.id, suite, outcome: "failed", errorCode: "not_run_cleanup_failed" });
+      continue;
+    }
     const context = contextFor(manifest, scenario2.id);
     let evidence;
     let errorCode;
     let cleanup;
     try {
-      evidence = await executor.execute(context);
-      validateEvidence(evidence, suite === "provider_dev");
+      evidence = validateEvidence(await executor.execute(context), suite === "provider_dev");
     } catch (error) {
       errorCode = safeErrorCode(error);
     } finally {
       if (suite === "provider_dev") {
         try {
-          cleanup = await executor.cleanup(context);
-          validateCleanup(cleanup);
-          if (cleanup.status !== "complete") errorCode = "cleanup_incomplete";
+          cleanup = validateCleanup(await executor.cleanup(context));
+          if (cleanup.status !== "complete") {
+            cleanupFailed = true;
+            errorCode = "cleanup_incomplete";
+          }
         } catch {
+          cleanupFailed = true;
           errorCode = "cleanup_failed";
         }
       }
@@ -186,6 +355,66 @@ function formatChapterAcceptanceRun(result) {
   return lines.join("\n");
 }
 
+// src/testing-release.ts
+var ID = /^[a-z0-9][a-z0-9_.:-]{1,199}$/;
+var validId = (value) => typeof value === "string" && ID.test(value);
+var opaque = (value) => typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9_:-]{2,159}$/.test(value) && !/(?:sk|rk|pk|whsec)_(?:test_|live_)?|_secret_|bearer|password|token/i.test(value);
+var keys = ["targetId", "appId", "chapterId", "runtime", "environment", "dataEnvironment", "stripeMode", "sourceCommit", "deploymentVersion"];
+function assessChapterReleaseEvidence(plan, proofs) {
+  const blockers = [];
+  const block = (requirementId, code) => blockers.push({ requirementId, code });
+  const targets = /* @__PURE__ */ new Map();
+  if (!plan || plan.schemaVersion !== 1 || !Array.isArray(plan.targets) || !plan.targets.length || plan.targets.length > 64 || !Array.isArray(plan.requirements) || !plan.requirements.length || plan.requirements.length > 4096 || !Array.isArray(proofs) || proofs.length > 8192) {
+    return {
+      readyForReview: false,
+      productionAuthorized: false,
+      required: 0,
+      passed: 0,
+      blockers: [{ requirementId: "plan", code: "invalid_release_plan" }]
+    };
+  }
+  for (const target of plan.targets) {
+    if (!target || !validId(target.targetId) || targets.has(target.targetId) || ![target.appId, target.chapterId, target.runtime].every(validId) || target.environment !== "dev" || target.dataEnvironment !== "dev" || target.stripeMode !== "test" || typeof target.sourceCommit !== "string" || !/^[0-9a-f]{40}$/.test(target.sourceCommit) || !opaque(target.deploymentVersion)) {
+      block("plan", "invalid_or_undeployed_target");
+      continue;
+    }
+    targets.set(target.targetId, target);
+  }
+  const requirementIds = /* @__PURE__ */ new Set();
+  let passed = 0;
+  for (const requirement of plan.requirements) {
+    if (!requirement || !validId(requirement.id) || requirementIds.has(requirement.id) || !["deterministic", "deployed_contract", "provider_dev", "browser_dev"].includes(requirement.phase) || !Array.isArray(requirement.assertions) || !requirement.assertions.length || !requirement.assertions.every(validId) || new Set(requirement.assertions).size !== requirement.assertions.length || !Array.isArray(requirement.providers) || requirement.providers.some((kind) => !["stripe", "clerk", "calendar", "email"].includes(kind)) || !Array.isArray(requirement.cleanup) || !requirement.cleanup.every(validId) || requirement.phase === "provider_dev" && (!requirement.providers.length || !requirement.cleanup.length)) {
+      block("plan", "invalid_requirement");
+      continue;
+    }
+    requirementIds.add(requirement.id);
+    const target = targets.get(requirement.targetId);
+    if (!target) {
+      block(requirement.id, "missing_candidate_target");
+      continue;
+    }
+    const matching = proofs.filter((proof2) => proof2?.requirementId === requirement.id);
+    if (matching.length !== 1) {
+      block(requirement.id, matching.length ? "duplicate_proof" : "missing_proof");
+      continue;
+    }
+    const proof = matching[0];
+    const before = blockers.length;
+    if (!proof.target || keys.some((key) => proof.target[key] !== target[key])) block(requirement.id, "candidate_mismatch");
+    if (proof.phase !== requirement.phase) block(requirement.id, "wrong_execution_phase");
+    if (proof.outcome !== "passed") block(requirement.id, "attempt_not_passed");
+    if (!proof.assertions || requirement.assertions.some((id2) => proof.assertions[id2] !== true)) block(requirement.id, "assertions_incomplete");
+    if (!Array.isArray(proof.references) || proof.references.some((reference) => !reference || !opaque(reference.id) || !["stripe", "clerk", "calendar", "email"].includes(reference.provider)) || requirement.providers.some((provider) => !proof.references.some((reference) => reference.provider === provider))) block(requirement.id, "provider_evidence_incomplete");
+    if (!proof.cleanup || requirement.cleanup.some((id2) => proof.cleanup[id2] !== true)) block(requirement.id, "cleanup_incomplete");
+    if (blockers.length === before) passed++;
+  }
+  if (proofs.some((proof) => !proof || !requirementIds.has(proof.requirementId))) block("plan", "unexpected_proof");
+  for (const target of targets.values()) {
+    if (!plan.requirements.some((requirement) => requirement?.targetId === target.targetId)) block("plan", "uncovered_target");
+  }
+  return { readyForReview: blockers.length === 0, productionAuthorized: false, required: plan.requirements.length, passed, blockers };
+}
+
 // src/testing.ts
 var SLUG = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var CURRENCY = /^[a-z]{3}$/;
@@ -193,15 +422,12 @@ var STRIPE_PRICE = /^price_[A-Za-z0-9]{8,}$/;
 function activeMemberships2(site) {
   return site.skus.filter((sku) => sku.active && sku.kind === "membership");
 }
-function representativePaidMembership(site) {
-  return activeMemberships2(site).find((sku) => sku.priceCents > 0);
-}
-function record(value) {
+function record2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function validateChapterAcceptanceManifest(value) {
   const errors = [];
-  const input = record(value);
+  const input = record2(value);
   if (!input) return { ok: false, errors: ["manifest must be an object"] };
   if (input.schemaVersion !== 1) errors.push("schemaVersion must be 1");
   const inputTargets = Array.isArray(input.targets) ? input.targets : [];
@@ -212,7 +438,7 @@ function validateChapterAcceptanceManifest(value) {
   const priceOwners = /* @__PURE__ */ new Map();
   for (const [siteIndex, rawSite] of inputTargets.entries()) {
     const path = `targets[${siteIndex}]`;
-    const site = record(rawSite);
+    const site = record2(rawSite);
     if (!site) {
       errors.push(`${path} must be an object`);
       continue;
@@ -227,13 +453,13 @@ function validateChapterAcceptanceManifest(value) {
     try {
       if (typeof site.origin !== "string") throw new TypeError("origin");
       const origin = new URL(site.origin);
-      if (origin.protocol !== "https:" || origin.pathname !== "/" || origin.search || origin.hash) {
+      if (origin.protocol !== "https:" || origin.pathname !== "/" || origin.search || origin.hash || origin.username || origin.password) {
         errors.push(`${path}.origin must be an HTTPS origin without a path, query, or fragment`);
       }
     } catch {
       errors.push(`${path}.origin must be a valid HTTPS origin`);
     }
-    const target = record(site.target);
+    const target = record2(site.target);
     const targetValues = {};
     for (const key of ["appId", "environment", "dataEnvironment", "runtime", "chapterId"]) {
       targetValues[key] = typeof target?.[key] === "string" ? String(target[key]) : "";
@@ -254,15 +480,15 @@ function validateChapterAcceptanceManifest(value) {
     const skus = [];
     for (const [skuIndex, rawSku] of inputSkus.entries()) {
       const skuPath = `${path}.skus[${skuIndex}]`;
-      const sku = record(rawSku);
+      const sku = record2(rawSku);
       if (!sku) {
         errors.push(`${skuPath} must be an object`);
         continue;
       }
-      const id = typeof sku.id === "string" ? sku.id : "";
-      if (!SLUG.test(id)) errors.push(`${skuPath}.id must be a stable lowercase slug`);
-      if (skuIds.has(id)) errors.push(`${skuPath}.id duplicates ${JSON.stringify(id)}`);
-      if (id) skuIds.add(id);
+      const id2 = typeof sku.id === "string" ? sku.id : "";
+      if (!SLUG.test(id2)) errors.push(`${skuPath}.id must be a stable lowercase slug`);
+      if (skuIds.has(id2)) errors.push(`${skuPath}.id duplicates ${JSON.stringify(id2)}`);
+      if (id2) skuIds.add(id2);
       if (sku.kind !== "membership" && sku.kind !== "add_on") errors.push(`${skuPath}.kind must be membership or add_on`);
       if (typeof sku.active !== "boolean") errors.push(`${skuPath}.active must be boolean`);
       const priceCents = typeof sku.priceCents === "number" ? sku.priceCents : Number.NaN;
@@ -279,7 +505,7 @@ function validateChapterAcceptanceManifest(value) {
       }
       if (priceCents === 0 && sku.stripePriceId) errors.push(`${skuPath}.stripePriceId must be absent for a free SKU`);
       if (typeof sku.stripePriceId === "string" && sku.stripePriceId) {
-        const owner = `${siteId}/${id}`;
+        const owner = `${siteId}/${id2}`;
         const previous = priceOwners.get(sku.stripePriceId);
         if (previous && previous !== owner) errors.push(`${skuPath}.stripePriceId is already owned by ${previous}`);
         else priceOwners.set(sku.stripePriceId, owner);
@@ -297,12 +523,13 @@ function validateChapterAcceptanceManifest(value) {
       skus.push(sku);
     }
     if (!skus.some((sku) => sku.active && sku.kind === "membership")) errors.push(`${path}.skus must contain an active membership SKU`);
-    const options = record(site.options);
+    errors.push(...validateCommercialCases(site.commercialCases, skus, `${path}.commercialCases`));
+    const options = record2(site.options);
     if (!options) errors.push(`${path}.options must be an object`);
     if (options?.ordinaryInterview !== true) errors.push(`${path}.options.ordinaryInterview must be true`);
     if (typeof options?.invitationInterviewWaiver !== "boolean") errors.push(`${path}.options.invitationInterviewWaiver must be boolean`);
     if (options?.autoRenew !== true) errors.push(`${path}.options.autoRenew must be true`);
-    const seat = record(options?.additionalSeat);
+    const seat = record2(options?.additionalSeat);
     if (options?.additionalSeat !== void 0 && !seat) errors.push(`${path}.options.additionalSeat must be an object`);
     if (seat) {
       const seatSku = skus.find((sku) => sku.id === seat.skuId);
@@ -325,17 +552,23 @@ function validateChapterAcceptanceManifest(value) {
 function scenario(input) {
   return {
     ...input,
-    id: [input.suite, input.targetId, input.skuId, input.siblingTargetId, input.kind].filter(Boolean).join(":")
+    id: [input.suite, input.targetId, input.skuId, input.parentSkuId, input.commercialCaseId, input.siblingTargetId, input.kind].filter(Boolean).join(":")
   };
 }
 function planChapterAcceptanceMatrix(manifest) {
   const validation = validateChapterAcceptanceManifest(manifest);
   if (!validation.ok) throw new TypeError(`invalid Chapter acceptance manifest: ${validation.errors.join("; ")}`);
-  if (manifest.targets.some((site) => site.stripeMode !== "test")) {
-    throw new TypeError("provider acceptance runs are development-only and require Stripe test mode on every target");
+  if (manifest.targets.some((site) => site.stripeMode !== "test" || site.target.environment !== "dev" || site.target.dataEnvironment !== "dev")) {
+    throw new TypeError("provider acceptance runs are development-only and require Stripe test mode and dev runtime/data environments on every target");
   }
   const scenarios = [];
   for (const site of manifest.targets) {
+    for (const vector of site.commercialCases ?? []) {
+      const base = { targetId: site.targetId, siteId: site.siteId, skuId: vector.skuId, commercialCaseId: vector.id };
+      scenarios.push(scenario({ ...base, suite: "hermetic", kind: "commercial_policy_replay" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "commercial_quote" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "commercial_renewal" }));
+    }
     for (const sku of site.skus.filter((candidate) => candidate.active)) {
       scenarios.push(scenario({ suite: "hermetic", kind: "catalog_contract", targetId: site.targetId, siteId: site.siteId, skuId: sku.id }));
       if (sku.priceCents > 0) {
@@ -364,40 +597,27 @@ function planChapterAcceptanceMatrix(manifest) {
         skuId: sku.id
       }));
     }
-    const paid = representativePaidMembership(site);
-    if (paid) {
-      scenarios.push(scenario({ suite: "provider_dev", kind: "ordinary_interview", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-      scenarios.push(scenario({ suite: "provider_dev", kind: "renewal", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-      scenarios.push(scenario({ suite: "provider_dev", kind: "refund_cancel", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+    for (const membership of activeMemberships2(site)) {
+      const base = { targetId: site.targetId, siteId: site.siteId, skuId: membership.id };
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "ordinary_interview" }));
       if (site.options.invitationInterviewWaiver) {
-        scenarios.push(scenario({ suite: "provider_dev", kind: "invitation_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-        scenarios.push(scenario({ suite: "hermetic", kind: "expired_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
-        scenarios.push(scenario({ suite: "hermetic", kind: "replayed_interview_waiver", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+        scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "invitation_interview_waiver" }));
+        scenarios.push(scenario({ ...base, suite: "hermetic", kind: "expired_interview_waiver" }));
+        scenarios.push(scenario({ ...base, suite: "hermetic", kind: "replayed_interview_waiver" }));
       }
+      if (membership.priceCents === 0) continue;
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "renewal" }));
+      scenarios.push(scenario({ ...base, suite: "provider_dev", kind: "refund_cancel" }));
       if (site.options.additionalSeat) {
-        scenarios.push(scenario({
-          suite: "provider_dev",
-          kind: "named_seat",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
-        scenarios.push(scenario({
-          suite: "hermetic",
-          kind: "duplicate_seat_email",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
-        scenarios.push(scenario({
-          suite: "hermetic",
-          kind: "expired_seat_window",
-          targetId: site.targetId,
-          siteId: site.siteId,
-          skuId: site.options.additionalSeat.skuId
-        }));
+        const seat = { ...base, skuId: site.options.additionalSeat.skuId, parentSkuId: membership.id };
+        for (const kind of ["named_seat", "seat_declined_refund", "unaccepted_seat_refund", "seat_membership_alignment"]) {
+          scenarios.push(scenario({ ...seat, suite: "provider_dev", kind }));
+        }
+        for (const kind of ["duplicate_seat_email", "expired_seat_window"]) {
+          scenarios.push(scenario({ ...seat, suite: "hermetic", kind }));
+        }
       }
-      scenarios.push(scenario({ suite: "hermetic", kind: "canceled_membership", targetId: site.targetId, siteId: site.siteId, skuId: paid.id }));
+      scenarios.push(scenario({ ...base, suite: "hermetic", kind: "canceled_membership" }));
     }
   }
   return scenarios;