@odla-ai/chapter 0.48.2 → 0.49.0

package/dist/index.cjs

@@ -204,12 +204,14 @@ __export(src_exports, {
   renewalPatch: () => renewalPatch,
   requestMembershipAccess: () => requestMembershipAccess,
   requestMembershipApproval: () => requestMembershipApproval,
+  requestMembershipCancellation: () => requestMembershipCancellation,
   requestMembershipChapterEffect: () => requestMembershipChapterEffect,
   requestMembershipCheckoutBinding: () => requestMembershipCheckoutBinding,
   requestMembershipCommercialOffer: () => requestMembershipCommercialOffer,
   requestMembershipPayment: () => requestMembershipPayment,
   requestMembershipRefund: () => requestMembershipRefund,
   requestMembershipRenewal: () => requestMembershipRenewal,
+  requestMembershipRestart: () => requestMembershipRestart,
   requestNamedSeatAcceptance: () => requestNamedSeatAcceptance,
   requestNamedSeatAccess: () => requestNamedSeatAccess,
   requestNamedSeatApproval: () => requestNamedSeatApproval,
@@ -241,7 +243,7 @@ __export(src_exports, {
   slotWindow: () => slotWindow,
   stageIndex: () => stageIndex,
   stripeCall: () => stripeCall,
-  stripeForm: () => import_stripe8.stripeForm,
+  stripeForm: () => import_stripe10.stripeForm,
   subAnnualCents: () => subAnnualCents,
   submitApplication: () => submitApplication,
   subscriptionIdempotencyKey: () => subscriptionIdempotencyKey,
@@ -262,7 +264,7 @@ __export(src_exports, {
   verifyMembershipAccessReceipt: () => verifyMembershipAccessReceipt,
   verifyMembershipCheckoutBinding: () => verifyMembershipCheckoutBinding,
   verifyMembershipPaymentReceipt: () => verifyMembershipPaymentReceipt,
-  verifyStripeSignature: () => import_stripe8.verifyStripeSignature,
+  verifyStripeSignature: () => import_stripe10.verifyStripeSignature,
   webhookMutationId: () => webhookMutationId
 });
 module.exports = __toCommonJS(src_exports);
@@ -307,12 +309,12 @@ function resolveApplication(a) {
     if (!Array.isArray(arr) || !arr.every((f) => typeof f === "string" && f !== "")) {
       throw new Error(`defineChapter.application.${name}: must be an array of field-name strings`);
     }
-    const unsafe = arr.find((field) => !SCHEMA_FIELD.test(field));
+    const unsafe = arr.find((field2) => !SCHEMA_FIELD.test(field2));
     if (unsafe) {
       throw new Error(`defineChapter.application.${name}: field "${unsafe}" must match ${SCHEMA_FIELD.source}`);
     }
   }
-  const duplicate = [...required, ...optional].find((field, index2, fields) => fields.indexOf(field) !== index2);
+  const duplicate = [...required, ...optional].find((field2, index2, fields) => fields.indexOf(field2) !== index2);
   if (duplicate) {
     throw new Error(`defineChapter.application: duplicate field "${duplicate}" across required/optional lists`);
   }
@@ -323,14 +325,14 @@ function resolveApplication(a) {
     throw new Error("defineChapter.application.crmFields: must be an array of field-name strings");
   }
   const conditions = a?.conditions ?? {};
-  for (const [field, declared] of Object.entries(conditions)) {
+  for (const [field2, declared] of Object.entries(conditions)) {
     for (const key3 of ["visibleWhen", "requiredWhen"]) {
       const expression = declared?.[key3];
       if (expression === void 0) continue;
       if (typeof expression !== "string" || !expression.trim()) {
-        throw new Error(`defineChapter.application.conditions.${field}.${key3}: must be a non-empty CEL condition`);
+        throw new Error(`defineChapter.application.conditions.${field2}.${key3}: must be a non-empty CEL condition`);
       }
-      (0, import_crm.assertFieldCondition)(expression, `defineChapter.application.conditions.${field}.${key3}`);
+      (0, import_crm.assertFieldCondition)(expression, `defineChapter.application.conditions.${field2}.${key3}`);
     }
   }
   return {
@@ -401,6 +403,13 @@ async function submitApplication(db, chapter, fields, opts) {
   if (opts.groupId) row2.groupId = opts.groupId;
   if (opts.runtime) row2.stripeRuntime = opts.runtime;
   if (chapter.account !== "none") row2.clerkAccountPending = true;
+  if (opts.namedSeat) Object.assign(row2, {
+    namedSeatId: opts.namedSeat.seatId,
+    namedSeatPrimaryApplicationId: opts.namedSeat.primaryApplicationId,
+    namedSeatClaimPending: true,
+    clerkUserId: opts.namedSeat.userId,
+    clerkAccountPending: false
+  });
   if (typeof fields.email === "string" && isValidEmail(fields.email.trim())) {
     row2.emailNormalized = normalizeChapterEmail(fields.email);
     row2.signupEmailKey = row2.emailNormalized;
@@ -530,6 +539,10 @@ var applicationAttrs = {
   giftPaidAt: attr("number", { optional: true, indexed: true }),
   giftRevokedAt: attr("number", { optional: true, indexed: true }),
   giftCheckoutStartedAt: attr("number", { optional: true, indexed: true }),
+  membershipRestartId: attr("string", { optional: true, indexed: true }),
+  membershipStatus: attr("string", { optional: true }),
+  membershipGraceEndsAt: attr("number", { optional: true }),
+  membershipAutoRenew: attr("boolean", { optional: true }),
   namedSeatId: attr("string", { optional: true, unique: true, indexed: true }),
   namedSeatPrimaryApplicationId: attr("string", { optional: true }),
   namedSeatClaimPending: attr("boolean", { optional: true, indexed: true }),
@@ -540,19 +553,19 @@ function applicationsFor(application) {
   for (const [name, spec] of Object.entries(applicationAttrs)) {
     attrs[name] = { ...spec, optional: APPLICATION_INPUT_FIELDS.has(name) ? true : spec.optional };
   }
-  const apply = (field, optional) => {
-    const existing = Object.hasOwn(attrs, field) ? attrs[field] : void 0;
-    if (existing && !APPLICATION_INPUT_FIELDS.has(field)) throw new Error(`defineChapter.application: field "${field}" is reserved by the applications schema`);
-    if (existing && existing.type !== "string") throw new Error(`defineChapter.application: field "${field}" is not a configurable string field`);
-    Object.defineProperty(attrs, field, {
+  const apply = (field2, optional) => {
+    const existing = Object.hasOwn(attrs, field2) ? attrs[field2] : void 0;
+    if (existing && !APPLICATION_INPUT_FIELDS.has(field2)) throw new Error(`defineChapter.application: field "${field2}" is reserved by the applications schema`);
+    if (existing && existing.type !== "string") throw new Error(`defineChapter.application: field "${field2}" is not a configurable string field`);
+    Object.defineProperty(attrs, field2, {
       value: existing ? { ...existing, optional } : attr("string", { optional }),
       enumerable: true,
       configurable: true,
       writable: true
     });
   };
-  for (const field of application.required) apply(field, false);
-  for (const field of application.optional) apply(field, true);
+  for (const field2 of application.required) apply(field2, false);
+  for (const field2 of application.optional) apply(field2, true);
   return { attrs };
 }
 
@@ -759,6 +772,19 @@ var giftRedemptionAttemptsEntity = { attrs: {
   updatedAt: attr4("number")
 } };
 
+// src/payment-recovery-schema.ts
+var field = (type, unique = false) => ({ type, unique, indexed: type !== "json", optional: false });
+var paymentRecoveryReviewsEntity = { attrs: {
+  id: field("string", true),
+  eventId: field("string"),
+  actorUserId: field("string"),
+  reviewedAt: field("number"),
+  previousDigest: field("string"),
+  providerDigest: field("string"),
+  scope: field("string"),
+  previousState: field("json")
+} };
+
 // src/schema-stripe.ts
 var attr5 = (type, flags = {}) => ({
   type,
@@ -779,6 +805,10 @@ var stripeEventReceiptsEntity = {
     dataEnvironment: attr5("string", { indexed: true, optional: true }),
     runtime: attr5("string", { indexed: true, optional: true }),
     chapterId: attr5("string", { indexed: true, optional: true }),
+    retryReady: attr5("boolean", { optional: true }),
+    reviewedDigest: attr5("string", { optional: true }),
+    reviewId: attr5("string", { optional: true }),
+    collisionDigest: attr5("string", { optional: true }),
     receivedAt: attr5("number", { indexed: true })
   }
 };
@@ -803,6 +833,7 @@ var subscriptionCheckoutIntentsEntity = {
     requestedCustomerId: attr5("string", { indexed: true, optional: true }),
     providerCustomerId: attr5("string", { indexed: true, optional: true }),
     providerSubscriptionId: attr5("string", { unique: true, indexed: true, optional: true }),
+    purchaseAttemptId: attr5("string", { optional: true }),
     status: attr5("string", { indexed: true }),
     createdAt: attr5("number", { indexed: true }),
     updatedAt: attr5("number", { indexed: true })
@@ -827,6 +858,20 @@ var membershipQuoteProjectionsEntity = {
     quote: attr5("json", { optional: true })
   }
 };
+var membershipCheckoutHistoryEntity = { attrs: {
+  id: attr5("string", { unique: true, indexed: true }),
+  applicationId: attr5("string", { indexed: true }),
+  appId: attr5("string"),
+  chapterId: attr5("string"),
+  environment: attr5("string"),
+  runtime: attr5("string"),
+  skuId: attr5("string"),
+  providerSubscriptionId: attr5("string", { indexed: true }),
+  applicationSnapshot: attr5("json"),
+  intentSnapshot: attr5("json"),
+  quoteSnapshot: attr5("json"),
+  archivedAt: attr5("number")
+} };
 
 // src/schema-network-person.ts
 var string = (flags = {}) => ({
@@ -960,15 +1005,19 @@ var exceptions = { attrs: {
   kind: string2({ indexed: true }),
   sourceKey: string2({ indexed: true, optional: true }),
   status: string2({ indexed: true }),
+  resolvedDigest: string2({ optional: true }),
+  incomingDigest: string2({ optional: true }),
   detail: json2(),
   updatedAt: number2({ indexed: true })
 } };
 var networkCommercialEntities = {
+  paymentRecoveryReviews: paymentRecoveryReviewsEntity,
   networkCommercialEvents: events,
   networkCommercialCustomers: projection(),
   networkCommercialSubscriptions: projection(),
   networkCommercialInvoices: projection(),
   networkCommercialRefunds: projection(),
+  networkCommercialSeats: projection(),
   networkCommercialExceptions: exceptions
 };
 
@@ -1171,8 +1220,9 @@ function chapterDb(mode, auth, includeNetworkNotes = false, application = resolv
     entities.tiers = tiers;
     entities.meetings = meetings;
     entities.emailLog = emailLog;
+    entities.paymentRecoveryReviews = paymentRecoveryReviewsEntity;
     entities.stripeEventReceipts = stripeEventReceiptsEntity;
-    entities.subscriptionCheckoutIntents = subscriptionCheckoutIntentsEntity;
+    Object.assign(entities, { subscriptionCheckoutIntents: subscriptionCheckoutIntentsEntity, membershipCheckoutHistory: membershipCheckoutHistoryEntity });
     entities.membershipQuoteProjections = membershipQuoteProjectionsEntity;
     entities.namedSeatConsents = namedSeatConsentsEntity;
     entities.admissionGrants = admissionGrantsEntity;
@@ -1710,6 +1760,19 @@ var DEFAULT_COMMON_COPY = {
   unknown: "(unknown)"
 };
 var DEFAULT_JOIN_COPY = {
+  namedSeat: {
+    title: "Your membership invitation",
+    from: "{purchaserName} invited you.",
+    prepaid: "Your {tierName} seat is already paid for.",
+    body: "Accept your invitation, then complete your own application requirements. You will not be asked to pay for this seat.",
+    consent: "I accept this membership for myself. It cannot be transferred and remains current while the purchaser's membership and my seat are current.",
+    accept: "Accept my invitation",
+    accepting: "Confirming your invitation\u2026",
+    loading: "Loading your invitation\u2026",
+    unavailable: "Your invitation is unavailable. Sign in with the invited email address, then try again.",
+    retry: "Try again",
+    failure: "We could not confirm acceptance. Retry this invitation; you do not need to purchase another membership."
+  },
   form: {
     submit: "Submit application",
     submitting: "Submitting\u2026",
@@ -1717,6 +1780,8 @@ var DEFAULT_JOIN_COPY = {
     unexpectedFailure: "Something went wrong. Please try again."
   },
   booking: {
+    title: "Book your introduction",
+    intro: "Choose a time to meet your chapter and get to know each other.",
     unavailable: "Scheduling is briefly unavailable. We'll reach out by email to arrange your call.",
     loadFailed: "Times are briefly unavailable. Please try again.",
     slotTaken: "That time was just taken. Here are the current openings.",
@@ -1908,16 +1973,16 @@ function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
   return [...formation.required, ...formation.optional].map((id10, order2) => {
-    const field = def.fields[id10];
+    const field2 = def.fields[id10];
     return {
       id: id10,
-      label: field.label ?? humanize(id10),
-      type: field.type,
+      label: field2.label ?? humanize(id10),
+      type: field2.type,
       required: formation.required.includes(id10),
       order: order2,
       maxLength: formation.maxLen[id10] ?? formation.defaultMaxLen,
-      ...field.options ? { options: [...field.options] } : {},
-      ...id10 === def.emailField || field.type === "email" ? { emailIdentity: "literal" } : {}
+      ...field2.options ? { options: [...field2.options] } : {},
+      ...id10 === def.emailField || field2.type === "email" ? { emailIdentity: "literal" } : {}
     };
   });
 }
@@ -1953,19 +2018,19 @@ function resolveLeaderFormation(input, crm) {
   const required = input.required ?? (type === "chapter_application" ? DEFAULT_REQUIRED2 : []);
   const optional = input.optional ?? (type === "chapter_application" ? DEFAULT_OPTIONAL2 : []);
   for (const [name, values] of [["required", required], ["optional", optional]]) {
-    if (!Array.isArray(values) || !values.every((field) => typeof field === "string" && field !== "")) {
+    if (!Array.isArray(values) || !values.every((field2) => typeof field2 === "string" && field2 !== "")) {
       throw new Error(`defineChapter.formation.${name}: must be an array of field-name strings`);
     }
   }
-  const duplicates = [...required, ...optional].filter((field, index2, fields) => fields.indexOf(field) !== index2);
+  const duplicates = [...required, ...optional].filter((field2, index2, fields) => fields.indexOf(field2) !== index2);
   if (duplicates.length) throw new Error(`defineChapter.formation: duplicate public field "${duplicates[0]}"`);
-  const unknown = [...required, ...optional].filter((field) => !def.fields[field]);
+  const unknown = [...required, ...optional].filter((field2) => !def.fields[field2]);
   if (unknown.length) throw new Error(`defineChapter.formation: field "${unknown[0]}" is not declared on CRM type "${type}"`);
-  const missingRequired = Object.entries(def.fields).filter(([, field]) => field.required).map(([field]) => field).filter((field) => !required.includes(field));
+  const missingRequired = Object.entries(def.fields).filter(([, field2]) => field2.required).map(([field2]) => field2).filter((field2) => !required.includes(field2));
   if (missingRequired.length) {
     throw new Error(`defineChapter.formation.required: must include required CRM field "${missingRequired[0]}"`);
   }
-  const unsupportedRequired = required.find((field) => !["string", "email", "url", "enum"].includes(def.fields[field].type));
+  const unsupportedRequired = required.find((field2) => !["string", "email", "url", "enum"].includes(def.fields[field2].type));
   if (unsupportedRequired) {
     throw new Error(`defineChapter.formation.required: field "${unsupportedRequired}" must be string-like`);
   }
@@ -1978,9 +2043,9 @@ function resolveLeaderFormation(input, crm) {
   if (!Number.isSafeInteger(bodyCap) || bodyCap < 1024 || bodyCap > 131072) {
     throw new Error("defineChapter.formation.bodyCap: must be an integer from 1024 to 131072");
   }
-  for (const [field, cap] of Object.entries(input.maxLen ?? {})) {
-    if (![...required, ...optional].includes(field) || !Number.isSafeInteger(cap) || cap < 1 || cap > 32768) {
-      throw new Error(`defineChapter.formation.maxLen.${field}: must name a public field and be an integer from 1 to 32768`);
+  for (const [field2, cap] of Object.entries(input.maxLen ?? {})) {
+    if (![...required, ...optional].includes(field2) || !Number.isSafeInteger(cap) || cap < 1 || cap > 32768) {
+      throw new Error(`defineChapter.formation.maxLen.${field2}: must name a public field and be an integer from 1 to 32768`);
     }
   }
   return {
@@ -2070,10 +2135,10 @@ function resolveNetwork(config, crm) {
       }
       const def = crm.config.types[type];
       if (!def) throw new Error(`defineChapter.network.targets.${target.id}.fields: unknown leader CRM type "${type}"`);
-      const unknown = names.filter((field) => !def.fields[field]);
+      const unknown = names.filter((field2) => !def.fields[field2]);
       if (unknown.length > 0) {
         throw new Error(
-          `defineChapter.network.targets.${target.id}.fields.${type}: ${unknown.map((field) => `"${field}"`).join(", ")} not declared on the leader CRM type`
+          `defineChapter.network.targets.${target.id}.fields.${type}: ${unknown.map((field2) => `"${field2}"`).join(", ")} not declared on the leader CRM type`
         );
       }
       const nameField = def.nameField ?? "name";
@@ -2161,10 +2226,10 @@ function resolveNetwork(config, crm) {
       if (!def) {
         throw new Error(`defineChapter.network.readers.${reader.id}.fields: unknown local CRM type "${type}"`);
       }
-      const unknown = names.filter((field) => !def.fields[field]);
+      const unknown = names.filter((field2) => !def.fields[field2]);
       if (unknown.length > 0) {
         throw new Error(
-          `defineChapter.network.readers.${reader.id}.fields.${type}: ${unknown.map((field) => `"${field}"`).join(", ")} not declared on the local CRM type`
+          `defineChapter.network.readers.${reader.id}.fields.${type}: ${unknown.map((field2) => `"${field2}"`).join(", ")} not declared on the local CRM type`
         );
       }
       const nameField = def.nameField ?? "name";
@@ -2482,6 +2547,48 @@ function defineChapter(config) {
   return chapter;
 }
 
+// src/network-commercial-seats.ts
+function commercialSeatItems(object2) {
+  const items = object2.items;
+  if (!items || items.has_more !== false || !Array.isArray(items.data) || items.data.length > 100) return void 0;
+  const result = [];
+  for (const item of items.data) {
+    const metadata = item.metadata;
+    if (!metadata?.seatId || !metadata.membershipId) continue;
+    const price = typeof item.price === "string" ? item.price : item.price?.id;
+    if (typeof metadata.seatId !== "string" || !/^seat_[a-f0-9]{64}$/.test(metadata.seatId) || typeof metadata.membershipId !== "string" || !/^membership_[a-f0-9]{64}$/.test(metadata.membershipId) || typeof item.id !== "string" || !/^si_[A-Za-z0-9_]+$/.test(item.id) || typeof price !== "string" || !/^price_[A-Za-z0-9_]+$/.test(price) || item.quantity !== 1) continue;
+    result.push({
+      seatId: metadata.seatId,
+      membershipId: metadata.membershipId,
+      subscriptionItemId: item.id,
+      priceId: price,
+      ...Number.isSafeInteger(item.current_period_end) ? { currentPeriodEnd: Number(item.current_period_end) } : {}
+    });
+  }
+  return result;
+}
+function projectCommercialSeats(payments, subscriptions, refunds) {
+  return payments.map((payment) => {
+    const matches2 = subscriptions.flatMap((subscription) => subscription.sourceKey === payment.sourceKey && subscription.customerId === payment.customerId && subscription.applicationId === payment.applicationId ? (subscription.seatSubscriptionItems ?? []).filter((item) => item.seatId === payment.seatId && item.membershipId === payment.membershipId).map((item) => ({ subscription, item })) : []);
+    const match = matches2.length === 1 ? matches2[0] : void 0;
+    const refundedCents = refunds.filter((refund) => refund.sourceKey === payment.sourceKey && refund.currency === payment.currency && refund.paymentIntentId === payment.paymentIntentId && refund.status === "succeeded").reduce((sum, refund) => sum + Number(refund.amountCents ?? 0), 0);
+    return {
+      ...payment,
+      objectKind: "seat",
+      objectId: payment.seatId,
+      refundedCents,
+      ...refundedCents >= Number(payment.amountReceivedCents) && refundedCents > 0 ? { status: "refunded" } : {},
+      ...match ? {
+        subscriptionId: match.subscription.subscriptionId,
+        subscriptionItemId: match.item.subscriptionItemId,
+        priceId: match.item.priceId,
+        currentPeriodEnd: match.item.currentPeriodEnd ?? match.subscription.currentPeriodEnd,
+        cancelAtPeriodEnd: match.subscription.cancelAtPeriodEnd
+      } : {}
+    };
+  });
+}
+
 // src/subscription-billing-terms.ts
 var import_stripe = require("@odla-ai/stripe");
 
@@ -2653,6 +2760,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
     ...chargeId ? { chargeId } : {},
     ...paymentIntentId ? { paymentIntentId } : {},
     ...price,
+    ...objectKind === "subscription" && commercialSeatItems(object2) ? { seatSubscriptionItems: commercialSeatItems(object2) } : {},
     ...status2 ? { status: status2 } : {},
     ...currency ? { currency } : {},
     ...amountCents !== void 0 ? { amountCents } : {},
@@ -2674,8 +2782,8 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
 var identityFields = ["appId", "chapterId", "environment", "dataEnvironment", "runtime"];
 function directSource(fact, sources) {
   const mode = fact.livemode ? "live" : "test";
-  const supplied = identityFields.filter((field) => fact.identity[field] !== void 0);
-  const candidates = sources.filter((source) => source.stripeMode === mode && supplied.every((field) => source[field] === fact.identity[field]));
+  const supplied = identityFields.filter((field2) => fact.identity[field2] !== void 0);
+  const candidates = sources.filter((source) => source.stripeMode === mode && supplied.every((field2) => source[field2] === fact.identity[field2]));
   if (supplied.length === identityFields.length) return candidates.length === 1 ? candidates[0] : "wrong";
   if (supplied.length > 0 && candidates.length === 0) return "wrong";
   return null;
@@ -2771,11 +2879,11 @@ function projectNetworkCommercialEvents(input, sources) {
     }
   }
   const totalsMap = /* @__PURE__ */ new Map();
-  const add = (row2, field, amount) => {
+  const add = (row2, field2, amount) => {
     if (!row2.currency) return;
     const key3 = `${row2.sourceKey}:${row2.currency}`;
     const total = totalsMap.get(key3) ?? { sourceKey: row2.sourceKey, currency: row2.currency, paidCents: 0, refundedCents: 0, netCents: 0 };
-    total[field] += amount;
+    total[field2] += amount;
     total.netCents = total.paidCents - total.refundedCents;
     totalsMap.set(key3, total);
   };
@@ -2783,7 +2891,7 @@ function projectNetworkCommercialEvents(input, sources) {
   for (const row2 of seatPayments) add(row2, "paidCents", row2.amountReceivedCents ?? 0);
   for (const row2 of refunds) add(row2, "refundedCents", row2.amountCents ?? 0);
   return {
-    ...seatPayments.length ? { seatPayments } : {},
+    ...seatPayments.length ? { seatPayments, seats: projectCommercialSeats(seatPayments, subscriptions, refunds) } : {},
     customers,
     subscriptions,
     invoices,
@@ -3357,8 +3465,8 @@ function createChapterIntegration(chapter, options = {}) {
 }
 
 // src/membership-policy.ts
-var fail2 = (field) => {
-  throw new TypeError(`invalid membership policy: ${field}`);
+var fail2 = (field2) => {
+  throw new TypeError(`invalid membership policy: ${field2}`);
 };
 var object = (value) => {
   if (!value || typeof value !== "object" || Array.isArray(value)) return fail2("object");
@@ -3555,7 +3663,8 @@ async function issueMembershipCommercialOffer(db, input) {
   const offerings = rows3.membershipOfferingVersion.map((row3) => membershipOfferingVersion(row3.snapshot)).filter((offer) => offer.chapterId === input.chapterId && offer.baseSkuId === input.skuId && offer.status === "published" && input.now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || input.now < offer.effectiveUntil));
   const policies = rows3.discountPolicyVersion.map((row3) => membershipDiscountPolicyVersion(row3.snapshot)).filter((policy2) => policy2.chapterId === input.chapterId && policy2.status === "published" && policy2.cohortEligibleSkuIds.includes(input.skuId) && input.now >= policy2.qualifyingStartsAt && input.now < policy2.qualifyingEndsAt);
   const offering = offerings.sort((a, b) => b.version - a.version)[0];
-  const policy = policies.sort((a, b) => b.version - a.version)[0];
+  const restart = await load(db, "membershipRestart", (await membershipOfferIdForRequest({ ...input, requestId: "checkout_binding" })).replace(/^offer_/, "membership_"));
+  const policy = restart ? void 0 : policies.sort((a, b) => b.version - a.version)[0];
   if (!offering || offerings.filter((item) => item.version === offering.version).length !== 1 || policy && policies.filter((item) => item.version === policy.version).length !== 1) reject("ambiguous_membership_policy");
   const approvedFoundingCount = policy ? state.cohortCounts[policy.cohortLabel] ?? 0 : 0;
   if (!Number.isSafeInteger(approvedFoundingCount) || Number(approvedFoundingCount) < 0) reject("invalid_cohort_count");
@@ -3593,8 +3702,73 @@ async function issueMembershipCommercialOffer(db, input) {
   return restore(stored, input);
 }
 
-// src/membership-authority-handler.ts
-var import_db = require("@odla-ai/db");
+// src/membership-cancel-authority.ts
+var import_stripe2 = require("@odla-ai/stripe");
+
+// src/commercial-evidence-guard.ts
+async function commercialEvidenceGuard(db, eventId, digest, code = "membership_payment_evidence_quarantined") {
+  const ns = "networkCommercialExceptions", id10 = `network-commercial-exception:${eventId}:collision`;
+  const row2 = (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+  if (!row2) return { ns, id: id10, exists: false };
+  if (row2.status !== "resolved" || row2.resolvedDigest !== digest || typeof digest !== "string") {
+    throw Object.assign(new Error(code), { code });
+  }
+  return { ns, id: id10, exists: true, equals: { status: "resolved", resolvedDigest: digest, updatedAt: row2.updatedAt } };
+}
+
+// src/membership-authority-state.ts
+var membershipFail = (code) => {
+  throw Object.assign(new Error(code), { code });
+};
+var membershipLoad = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+var membershipScopeKeys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId"];
+var membershipScope = (input) => Object.fromEntries(membershipScopeKeys.map((key3) => [key3, input[key3]]));
+function requireMembershipScope(row2, input) {
+  if (!row2 || membershipScopeKeys.some((key3) => row2[key3] !== input[key3])) membershipFail("membership_scope_mismatch");
+}
+async function loadMembershipAuthorityState(db, input) {
+  const row2 = await membershipLoad(db, "membershipAuthorityState", `${input.chapterId}:${input.environment}`);
+  if (!row2 || row2.mode !== "authoritative" || row2.chapterId !== input.chapterId || row2.environment !== input.environment || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1) return membershipFail("membership_authority_unavailable");
+  return row2;
+}
+var membershipUpdate = (ns, id10, attrs) => ({ t: "update", ns, id: id10, attrs });
+var membershipClock = (now) => {
+  if (!Number.isSafeInteger(now) || now < 0) membershipFail("invalid_membership_clock");
+};
+
+// src/membership-restart-payment.ts
+async function membershipRestartPayment(db, target, member, now) {
+  const id10 = String(member.id), restart = await membershipLoad(db, "membershipRestart", id10);
+  requireMembershipScope(restart, target);
+  const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+  requireMembershipScope(entitlement, target);
+  if (entitlement.membershipId !== id10 || entitlement.kind !== "primary") membershipFail("membership_restart_conflict");
+  if (restart.status !== "ready" || member.status !== "restarting" || member.restartId !== restart.restartId || member.memberNumber !== restart.memberNumber || !Number.isSafeInteger(member.journeyApprovedAt)) membershipFail("membership_restart_conflict");
+  return {
+    restartId: String(restart.restartId),
+    entitlementAttrs: { revision: Number(entitlement.revision) + 1, createdAt: entitlement.createdAt },
+    attrs: {
+      memberNumber: member.memberNumber,
+      journeyApprovedAt: member.journeyApprovedAt,
+      founding: member.founding,
+      cohort: member.cohort,
+      ...member.personId ? { personId: member.personId } : {},
+      status: "active",
+      revision: Number(member.revision) + 1,
+      createdAt: member.createdAt,
+      graceEndsAt: 0
+    },
+    ops: [
+      membershipUpdate("membershipRestart", id10, { status: "complete" }),
+      { t: "retract", ns: "networkMembership", id: id10, attrs: ["refundRequestedAt", "cancellationRequestedAt", "discountPolicyVersionId", "discountSnapshot"] }
+    ],
+    guards: [
+      { ns: "networkMembership", id: id10, exists: true, equals: { status: "restarting", revision: member.revision, restartId: restart.restartId } },
+      { ns: "membershipRestart", id: id10, exists: true, equals: { status: "ready", restartId: restart.restartId } },
+      { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision, status: entitlement.status } }
+    ]
+  };
+}
 
 // src/membership-checkout-binding.ts
 var keys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId", "offerId", "offerDigest", "quoteDigest", "priceId"];
@@ -3621,10 +3795,11 @@ async function bindMembershipCheckout(db, input, now) {
   const row2 = await load2(db, "membershipCheckoutOffer", input.offerId);
   const offer = await verifyIssuedMembershipOffer(row2, { ...input, now, lifetimeMs: 6e4 });
   if (offer.digest !== input.offerDigest || offer.expiresAt <= now || offer.issuedAt > now) return reject2("membership_offer_expired");
+  const restart = await load2(db, "membershipRestart", id10.replace(/^checkout_/, "membership_"));
   const receipt = { id: id10, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: now };
   try {
     await db.transact([{ t: "update", ns: "membershipOfferCheckout", id: id10, attrs: receipt }], {
-      mutationId: `membership-checkout:${id10}`,
+      mutationId: `membership-checkout:${id10}${restart?.restartId ? `:${restart.restartId}` : ""}`,
       guards: [
         { ns: "membershipOfferCheckout", id: id10, exists: false },
         { ns: "membershipCheckoutOffer", id: input.offerId, exists: true, equals: { digest: input.offerDigest } },
@@ -3639,26 +3814,6 @@ async function bindMembershipCheckout(db, input, now) {
   return verifyMembershipCheckoutBinding(saved, input);
 }
 
-// src/membership-authority-state.ts
-var membershipFail = (code) => {
-  throw Object.assign(new Error(code), { code });
-};
-var membershipLoad = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
-var membershipScopeKeys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId"];
-var membershipScope = (input) => Object.fromEntries(membershipScopeKeys.map((key3) => [key3, input[key3]]));
-function requireMembershipScope(row2, input) {
-  if (!row2 || membershipScopeKeys.some((key3) => row2[key3] !== input[key3])) membershipFail("membership_scope_mismatch");
-}
-async function loadMembershipAuthorityState(db, input) {
-  const row2 = await membershipLoad(db, "membershipAuthorityState", `${input.chapterId}:${input.environment}`);
-  if (!row2 || row2.mode !== "authoritative" || row2.chapterId !== input.chapterId || row2.environment !== input.environment || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1) return membershipFail("membership_authority_unavailable");
-  return row2;
-}
-var membershipUpdate = (ns, id10, attrs) => ({ t: "update", ns, id: id10, attrs });
-var membershipClock = (now) => {
-  if (!Number.isSafeInteger(now) || now < 0) membershipFail("invalid_membership_clock");
-};
-
 // src/membership-payment-authority.ts
 async function networkMembershipId(input) {
   return (await membershipCheckoutBindingId(input)).replace(/^checkout_/, "membership_");
@@ -3676,9 +3831,7 @@ async function confirmMembershipPayment(db, input, now) {
   if (binding.offerDigest !== offer.digest) membershipFail("membership_checkout_conflict");
   const eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   if (!eventRow) membershipFail("membership_payment_evidence_pending");
-  if (await membershipLoad(db, "networkCommercialExceptions", `network-commercial-exception:${input.eventId}:collision`)) {
-    membershipFail("membership_payment_evidence_quarantined");
-  }
+  const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow.digest);
   const fact = eventRow.fact;
   if (!fact || !fact.identity || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.eventType !== "invoice.payment_succeeded" || fact.objectKind !== "invoice" || fact.billingReason !== "subscription_create" || fact.livemode !== (input.environment === "prod") || fact.status !== "paid" || fact.applicationId !== input.applicationId || fact.subscriptionId !== input.providerSubscriptionId || fact.customerId !== input.providerCustomerId || !/^in_[A-Za-z0-9_]+$/.test(fact.invoiceId ?? "") || fact.currency !== offer.contract.offering.currency || fact.invoiceTotalCents !== offer.contract.dueTodayCents || fact.amountPaidCents !== offer.contract.dueTodayCents || Object.entries({
     appId: input.appId,
@@ -3694,8 +3847,9 @@ async function confirmMembershipPayment(db, input, now) {
   if (!Number.isSafeInteger(paidAt) || Number(paidAt) < Math.floor(Number(binding.boundAt) / 1e3) * 1e3 || Number(paidAt) > now + 3e4 || !Number.isSafeInteger(endsAt) || Number(endsAt) <= Number(paidAt)) membershipFail("membership_payment_period_mismatch");
   const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
   let member = await membershipLoad(db, "networkMembership", id10);
-  if (!member) {
+  if (!member || member.status === "restarting") {
     const offering = offer.contract.offering;
+    const restart = member ? await membershipRestartPayment(db, input, member, now) : null;
     const attrs = {
       id: id10,
       membershipId: id10,
@@ -3727,7 +3881,8 @@ async function confirmMembershipPayment(db, input, now) {
       refundedCents: 0,
       revision: 1,
       createdAt: now,
-      updatedAt: now
+      updatedAt: now,
+      ...restart?.attrs
     };
     try {
       await db.transact([
@@ -3737,21 +3892,23 @@ async function confirmMembershipPayment(db, input, now) {
           ...membershipScope(input),
           membershipId: id10,
           kind: "primary",
-          status: "pending_approval",
+          status: restart?.attrs.status === "active" ? "active" : "pending_approval",
           termStartedAt: paidAt,
           termEndsAt: endsAt,
           offeringSnapshot: offering,
           sourceEventId: input.eventId,
           revision: 1,
           createdAt: now,
-          updatedAt: now
-        })
-      ], { mutationId: `membership-paid:${id10}`, guards: [
-        { ns: "networkMembership", id: id10, exists: false },
+          updatedAt: now,
+          ...restart?.entitlementAttrs
+        }),
+        ...restart?.ops ?? []
+      ], { mutationId: `membership-paid:${id10}${restart ? `:${restart.restartId}` : ""}`, guards: [
+        ...restart?.guards ?? [{ ns: "networkMembership", id: id10, exists: false }],
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
         { ns: "membershipOfferCheckout", id: String(binding.id), exists: true, equals: { offerDigest: offer.digest } },
         { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
-        { ns: "networkCommercialExceptions", id: `network-commercial-exception:${input.eventId}:collision`, exists: false }
+        evidenceGuard
       ] });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
@@ -3770,6 +3927,57 @@ async function confirmMembershipPayment(db, input, now) {
   };
 }
 
+// src/membership-cancel-authority.ts
+async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
+  membershipClock(now);
+  const id10 = await networkMembershipId(target);
+  const state = await loadMembershipAuthorityState(db, target);
+  const member = await membershipLoad(db, "networkMembership", id10);
+  requireMembershipScope(member, target);
+  if (!["active", "cancel_at_term_end", "payment_grace", "paid_pending_approval", "lapsed"].includes(String(member.status))) {
+    membershipFail("membership_cancellation_unavailable");
+  }
+  const path = `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`;
+  const read2 = await (0, import_stripe2.stripeRequest)({ secretKey: stripeSecret }, "GET", path);
+  const sub = read2.body;
+  if (!read2.ok || sub.id !== member.providerSubscriptionId || sub.customer !== member.providerCustomerId || sub.livemode !== (target.environment === "prod") || !Object.entries({
+    ...stripePartitionMetadata(target),
+    applicationId: target.applicationId
+  }).every(([key3, value]) => sub.metadata?.[key3] === value)) membershipFail("membership_cancellation_provider_mismatch");
+  if (sub.status !== "canceled" && sub.cancel_at_period_end !== true) {
+    const write = await (0, import_stripe2.stripeRequest)(
+      { secretKey: stripeSecret },
+      "POST",
+      path,
+      { cancel_at_period_end: true, proration_behavior: "none" },
+      { idempotencyKey: `membership-cancel-at-term:${id10}:${member.providerSubscriptionId}` }
+    );
+    if (!write.ok || write.body.id !== member.providerSubscriptionId || write.body.cancel_at_period_end !== true) {
+      membershipFail("membership_cancellation_pending");
+    }
+  }
+  const status2 = Number(member.termEndsAt) <= now ? "lapsed" : member.journeyApprovedAt ? "cancel_at_term_end" : "paid_pending_approval";
+  if (member.status !== status2 || member.autoRenew !== false || Number(member.graceEndsAt ?? 0) !== 0) {
+    await db.transact([membershipUpdate("networkMembership", id10, {
+      status: status2,
+      autoRenew: false,
+      graceEndsAt: 0,
+      cancellationRequestedAt: now,
+      revision: Number(member.revision) + 1,
+      updatedAt: now
+    })], {
+      guards: [
+        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } }
+      ]
+    });
+  }
+  return { membershipId: id10, status: status2, termEndsAt: Number(member.termEndsAt), graceEndsAt: 0, autoRenew: false };
+}
+
+// src/membership-authority-handler.ts
+var import_db = require("@odla-ai/db");
+
 // src/membership-seat-activation.ts
 async function namedSeatPrimaryActivation(db, member, now) {
   if (!member.namedSeatId) return { ops: [], guards: [] };
@@ -3862,7 +4070,7 @@ async function approveNetworkMembership(db, input, now) {
 }
 
 // src/payments-refund.ts
-var import_stripe2 = require("@odla-ai/stripe");
+var import_stripe3 = require("@odla-ai/stripe");
 var row = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 var id7 = (value) => typeof value === "string" ? value : String(row(value).id ?? "");
 var providerId2 = (value, prefix) => new RegExp(`^${prefix}_[A-Za-z0-9]+$`).test(value);
@@ -3872,7 +4080,7 @@ function fail3(code = "refund_target_mismatch") {
 async function refundSubscriptionPayment(secretKey, input) {
   if (!providerId2(input.customerId, "cus") || !providerId2(input.subscriptionId, "sub")) fail3();
   const call = async (method, path, params, key3) => {
-    const result = await (0, import_stripe2.stripeRequest)({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    const result = await (0, import_stripe3.stripeRequest)({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
     if (!result.ok) fail3("stripe_error");
     if (!result.body || typeof result.body !== "object" || Array.isArray(result.body)) fail3("stripe_invalid_response");
     return result.body;
@@ -4043,12 +4251,13 @@ async function refundNetworkMembership(db, input, secretKey, now) {
 }
 
 // src/membership-provider-lifecycle.ts
-var import_stripe3 = require("@odla-ai/stripe");
+var import_stripe4 = require("@odla-ai/stripe");
 
 // src/membership-renewal-authority.ts
 async function reconcileMembershipRenewal(db, input, now) {
   membershipClock(now);
   const id10 = await networkMembershipId(input), eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
+  const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow?.digest, "membership_renewal_evidence_pending");
   const fact = eventRow?.fact;
   if (!fact || !/^evt_[A-Za-z0-9_]+$/.test(input.eventId) || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.objectKind !== "invoice" || !["invoice.payment_succeeded", "invoice.payment_failed"].includes(fact.eventType) || fact.billingReason !== "subscription_cycle" || fact.livemode !== (input.environment === "prod") || fact.applicationId !== input.applicationId || Object.entries({
     appId: input.appId,
@@ -4056,7 +4265,7 @@ async function reconcileMembershipRenewal(db, input, now) {
     environment: input.environment,
     dataEnvironment: input.environment,
     runtime: input.runtime
-  }).some(([key3, value]) => fact.identity[key3] !== value) || await membershipLoad(db, "networkCommercialExceptions", `network-commercial-exception:${input.eventId}:collision`)) {
+  }).some(([key3, value]) => fact.identity[key3] !== value)) {
     return membershipFail("membership_renewal_evidence_pending");
   }
   for (let attempt = 0; attempt < 8; attempt++) {
@@ -4070,7 +4279,7 @@ async function reconcileMembershipRenewal(db, input, now) {
       autoRenew: member.autoRenew === true
     });
     if (fact.subscriptionId !== member.providerSubscriptionId || fact.customerId !== member.providerCustomerId || fact.currency !== member.currency) membershipFail("membership_renewal_scope_mismatch");
-    if (["refunded", "refund_pending", "canceled", "declined"].includes(String(member.status))) return receipt();
+    if (["refunded", "refund_pending", "canceled", "declined", "restarting", "superseded"].includes(String(member.status))) return receipt();
     const lines = fact.recurringInvoiceLines;
     if (!lines?.length || lines.length > 2) membershipFail("membership_renewal_lines_missing");
     const start = lines[0].startsAt, end = lines[0].endsAt;
@@ -4079,7 +4288,7 @@ async function reconcileMembershipRenewal(db, input, now) {
     if (start !== member.termEndsAt || start > now + 3e4) membershipFail("membership_renewal_period_gap");
     const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
     if (seat) requireMembershipScope(seat, input);
-    const billedSeat = seat && seat.providerSubscriptionItemId && !["refunded", "refund_pending"].includes(String(seat.status)) ? seat : void 0;
+    const billedSeat = seat && seat.providerSubscriptionId === member.providerSubscriptionId && seat.providerSubscriptionItemId && !["refunded", "refund_pending"].includes(String(seat.status)) ? seat : void 0;
     const prices = [String(member.providerPriceId), ...billedSeat ? [String(billedSeat.priceId)] : []].sort();
     const amount = Number(member.renewalAmountCents) + Number(billedSeat?.amountCents ?? 0);
     if (!Number.isSafeInteger(amount) || amount <= 0 || fact.invoiceTotalCents !== amount || JSON.stringify(lines.map((line) => line.priceId).sort()) !== JSON.stringify(prices)) membershipFail("membership_renewal_amount_mismatch");
@@ -4112,7 +4321,7 @@ async function reconcileMembershipRenewal(db, input, now) {
       { ns: "networkEntitlement", id: `${id10}:primary`, exists: true, equals: { revision: entitlement.revision } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } },
       { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
-      { ns: "networkCommercialExceptions", id: `network-commercial-exception:${input.eventId}:collision`, exists: false }
+      evidenceGuard
     ];
     if (seat) guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision } });
     if (billedSeat?.entitlementId) {
@@ -4158,14 +4367,14 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   const row2 = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   const fact = row2?.fact;
   if (fact?.objectKind === "invoice") return reconcileMembershipRenewal(db, input, now);
-  const collisionId = `network-commercial-exception:${input.eventId}:collision`;
+  const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
   if (!fact || fact.eventId !== input.eventId || fact.digest !== row2.digest || !/^[a-f0-9]{64}$/.test(fact.digest) || !["customer.subscription.updated", "customer.subscription.deleted", "charge.refunded"].includes(fact.eventType) || fact.livemode !== (input.environment === "prod") || fact.applicationId !== input.applicationId || !fact.identity || Object.entries({
     appId: input.appId,
     chapterId: input.chapterId,
     environment: input.environment,
     dataEnvironment: input.environment,
     runtime: input.runtime
-  }).some(([key3, value]) => fact.identity[key3] !== value) || await membershipLoad(db, "networkCommercialExceptions", collisionId)) membershipFail("membership_billing_evidence_pending");
+  }).some(([key3, value]) => fact.identity[key3] !== value)) membershipFail("membership_billing_evidence_pending");
   const sk = await getVaultSecret(db, stripeSecretName);
   if (!sk) membershipFail("membership_billing_provider_unavailable");
   const id10 = await networkMembershipId(input);
@@ -4179,6 +4388,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
       graceEndsAt: Number(value.graceEndsAt ?? 0),
       autoRenew: value.autoRenew === true
     });
+    if (["restarting"].includes(String(member.status))) return receipt();
     if (fact.customerId !== member.providerCustomerId) membershipFail("membership_billing_scope_mismatch");
     if (fact.eventType === "charge.refunded") {
       if (!fact.chargeId || fact.seatId || fact.amountCents !== member.amountCents || fact.currency !== member.currency) membershipFail("membership_refund_evidence_mismatch");
@@ -4191,15 +4401,15 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
         alreadyRefundedChargeId: fact.chargeId,
         cancelSubscription: false
       });
-      if (await membershipLoad(db, "networkCommercialExceptions", collisionId)) membershipFail("membership_billing_evidence_pending");
+      await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
       await refundNetworkMembership(db, input, sk, now);
       const saved2 = await membershipLoad(db, "networkMembership", id10);
       requireMembershipScope(saved2, input);
       return receipt(saved2);
     }
     if (fact.subscriptionId !== member.providerSubscriptionId || fact.objectKind !== "subscription") membershipFail("membership_billing_scope_mismatch");
-    if (["refund_pending", "refunded", "declined", "canceled"].includes(String(member.status))) return receipt();
-    const result = await (0, import_stripe3.stripeRequest)({ secretKey: sk }, "GET", `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`);
+    if (["refund_pending", "refunded", "declined", "canceled", "restarting"].includes(String(member.status))) return receipt();
+    const result = await (0, import_stripe4.stripeRequest)({ secretKey: sk }, "GET", `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`);
     const sub = result.body;
     if (!result.ok || sub.id !== member.providerSubscriptionId || sub.customer !== member.providerCustomerId || sub.livemode !== (input.environment === "prod") || typeof sub.cancel_at_period_end !== "boolean" || !["active", "trialing", "past_due", "unpaid", "canceled"].includes(sub.status) || !Object.entries({ ...stripePartitionMetadata(input), applicationId: input.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value)) {
       membershipFail("membership_billing_provider_mismatch");
@@ -4223,7 +4433,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
         { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
         { ns: "networkCommercialEvents", id: String(row2.id), exists: true, equals: { digest: fact.digest } },
-        { ns: "networkCommercialExceptions", id: collisionId, exists: false }
+        evidenceGuard
       ] });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
@@ -4236,6 +4446,120 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   return membershipFail("membership_billing_retry_required");
 }
 
+// src/membership-restart-seat.ts
+async function expireRestartedMembershipSeat(db, target, member, now) {
+  const ops = [], guards = [];
+  if (!member.namedSeatId) return { ops, guards };
+  const seat = await membershipLoad(db, "networkSeat", String(member.namedSeatId));
+  requireMembershipScope(seat, target);
+  if (!["refunded", "refund_pending", "expired"].includes(String(seat.status))) {
+    ops.push(membershipUpdate("networkSeat", String(seat.id), { status: "expired", revision: Number(seat.revision) + 1, updatedAt: now }));
+    guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision } });
+  }
+  if (seat.entitlementId) {
+    const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
+    requireMembershipScope(entitlement, target);
+    ops.push(membershipUpdate("networkEntitlement", String(entitlement.id), { status: "closed", revision: Number(entitlement.revision) + 1, updatedAt: now }));
+    guards.push({ ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } });
+  }
+  return { ops, guards };
+}
+
+// src/membership-restart-authority.ts
+var import_stripe5 = require("@odla-ai/stripe");
+
+// src/stripe-event-digest.ts
+async function stripePayloadDigest(value) {
+  const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
+  return [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+
+// src/membership-restart-authority.ts
+function membershipCanRestart(member, now) {
+  const end = member.status === "payment_grace" ? Number(member.graceEndsAt) : Number(member.termEndsAt);
+  return Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && Number.isSafeInteger(member.journeyApprovedAt) && (["refunded", "canceled", "lapsed"].includes(String(member.status)) || ["active", "cancel_at_term_end", "payment_grace"].includes(String(member.status)) && Number.isSafeInteger(end) && end <= now);
+}
+async function stopPreviousSubscription(member, target, secret) {
+  const path = `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`;
+  const result = await (0, import_stripe5.stripeRequest)({ secretKey: secret }, "GET", path);
+  const sub = result.body;
+  if (!result.ok || sub.id !== member.providerSubscriptionId || sub.customer !== member.providerCustomerId || sub.livemode !== (target.environment === "prod") || !Object.entries({
+    ...stripePartitionMetadata(target),
+    applicationId: target.applicationId
+  }).every(([key3, value]) => sub.metadata?.[key3] === value)) membershipFail("membership_restart_provider_mismatch");
+  if (sub.status === "canceled") return;
+  const canceled = await (0, import_stripe5.stripeRequest)(
+    { secretKey: secret },
+    "DELETE",
+    path,
+    { invoice_now: false, prorate: false },
+    { idempotencyKey: `membership-restart-cancel:${member.providerSubscriptionId}` }
+  );
+  if (!canceled.ok || canceled.body.id !== member.providerSubscriptionId || canceled.body.status !== "canceled") membershipFail("membership_restart_cancellation_pending");
+}
+async function prepareMembershipRestart(db, input, now, stripeSecret) {
+  membershipClock(now);
+  if (!/^sub_[A-Za-z0-9_]+$/.test(input.previousSubscriptionId)) membershipFail("membership_restart_conflict");
+  const id10 = await networkMembershipId(input), bindingId = await membershipCheckoutBindingId(input);
+  const restartId = `restart_${await stripePayloadDigest(JSON.stringify([id10, input.previousSubscriptionId]))}`;
+  const state = await loadMembershipAuthorityState(db, input);
+  const previous = await membershipLoad(db, "networkMembership", id10);
+  requireMembershipScope(previous, input);
+  const receipt = {
+    applicationId: input.applicationId,
+    membershipId: id10,
+    restartId,
+    memberNumber: Number(previous.memberNumber),
+    status: "ready"
+  };
+  const existing = await membershipLoad(db, "membershipRestart", id10);
+  if (existing?.restartId === restartId && existing.status === "ready") {
+    requireMembershipScope(existing, input);
+    return receipt;
+  }
+  if (previous.providerSubscriptionId !== input.previousSubscriptionId) membershipFail("membership_restart_conflict");
+  if (previous.status !== "restarting") {
+    if (!membershipCanRestart(previous, now)) membershipFail("membership_restart_not_eligible");
+    const binding2 = await membershipLoad(db, "membershipOfferCheckout", bindingId);
+    requireMembershipScope(binding2, input);
+    const seats = await expireRestartedMembershipSeat(db, input, previous, now);
+    await db.transact([
+      ...seats.ops,
+      membershipUpdate("membershipPurchaseHistory", restartId, {
+        id: restartId,
+        ...membershipScope(input),
+        membershipId: id10,
+        providerSubscriptionId: input.previousSubscriptionId,
+        memberSnapshot: previous,
+        bindingSnapshot: binding2,
+        archivedAt: now
+      }),
+      membershipUpdate("networkMembership", id10, { status: "restarting", restartId, revision: Number(previous.revision) + 1, updatedAt: now })
+    ], { mutationId: `membership-restart-reserve:${restartId}`, guards: [
+      ...seats.guards,
+      { ns: "networkMembership", id: id10, exists: true, equals: { revision: previous.revision, status: previous.status } },
+      { ns: "membershipPurchaseHistory", id: restartId, exists: false },
+      { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding2.offerDigest } },
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+    ] });
+  } else if (previous.restartId !== restartId) membershipFail("membership_restart_conflict");
+  const reserved = await membershipLoad(db, "networkMembership", id10);
+  requireMembershipScope(reserved, input);
+  if (reserved.status !== "restarting" || reserved.restartId !== restartId) membershipFail("membership_restart_conflict");
+  await stopPreviousSubscription(reserved, input, stripeSecret);
+  const binding = await membershipLoad(db, "membershipOfferCheckout", bindingId);
+  requireMembershipScope(binding, input);
+  await db.transact([
+    membershipUpdate("membershipRestart", id10, { id: id10, ...membershipScope(input), ...receipt, previousSubscriptionId: input.previousSubscriptionId, createdAt: now }),
+    { t: "delete", ns: "membershipOfferCheckout", id: bindingId }
+  ], { mutationId: `membership-restart-ready:${restartId}`, guards: [
+    { ns: "membershipRestart", id: id10, exists: Boolean(existing), ...existing ? { equals: { restartId: existing.restartId, status: existing.status } } : {} },
+    { ns: "networkMembership", id: id10, exists: true, equals: { revision: reserved.revision, status: "restarting", restartId } },
+    { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding.offerDigest } }
+  ] });
+  return receipt;
+}
+
 // src/membership-access-authority.ts
 async function readMembershipAccess(db, input, now) {
   membershipClock(now);
@@ -4252,7 +4576,8 @@ async function readMembershipAccess(db, input, now) {
     allowed: allowed2,
     status: String(member.status),
     accessEndsAt: Number.isSafeInteger(endsAt) ? endsAt : 0,
-    revision: Number(member.revision)
+    revision: Number(member.revision),
+    restartEligible: !allowed2 && membershipCanRestart(member, now)
   };
 }
 async function verifyMembershipAccessReceipt(value, input, now) {
@@ -4260,7 +4585,7 @@ async function verifyMembershipAccessReceipt(value, input, now) {
   if (!row2 || row2.membershipId !== await networkMembershipId(input) || typeof row2.allowed !== "boolean" || typeof row2.status !== "string" || !Number.isSafeInteger(row2.revision) || row2.revision < 0 || !Number.isSafeInteger(row2.accessEndsAt) || row2.accessEndsAt < 0 || row2.allowed && (!["active", "cancel_at_term_end", "payment_grace"].includes(row2.status) || row2.accessEndsAt <= now || row2.revision < 1)) {
     throw new Error("invalid network access receipt");
   }
-  return { membershipId: row2.membershipId, allowed: row2.allowed, status: row2.status, accessEndsAt: row2.accessEndsAt, revision: row2.revision };
+  return { membershipId: row2.membershipId, allowed: row2.allowed, status: row2.status, accessEndsAt: row2.accessEndsAt, revision: row2.revision, ...row2.restartEligible === true && !row2.allowed ? { restartEligible: true } : {} };
 }
 
 // src/membership-seat-reservation.ts
@@ -4341,16 +4666,16 @@ async function reserveNamedMembershipSeat(db, input, now) {
 }
 
 // src/membership-seat-stripe.ts
-var import_stripe5 = require("@odla-ai/stripe");
+var import_stripe7 = require("@odla-ai/stripe");
 
 // src/subscription-provider-contract.ts
-var import_stripe4 = require("@odla-ai/stripe");
+var import_stripe6 = require("@odla-ai/stripe");
 function subscriptionContractMismatch() {
   throw Object.assign(new Error("Stripe subscription does not match the checkout contract"), { code: "stripe_contract_mismatch" });
 }
 async function verifySubscriptionPrice(secretKey, input, resume = false) {
   if (!/^price_[A-Za-z0-9]+$/.test(input.priceId) || !Number.isSafeInteger(input.priceCents) || input.priceCents <= 0 || !/^[a-z]{3}$/.test(input.currency) || !["month", "year"].includes(input.interval)) subscriptionContractMismatch();
-  const result = await (0, import_stripe4.stripeRequest)({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
+  const result = await (0, import_stripe6.stripeRequest)({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
   const price = result.body;
   if (!result.ok || !price || price.id !== input.priceId || !resume && price.active !== true || price.unit_amount !== input.priceCents || price.currency !== input.currency || price.type !== "recurring" || price.billing_scheme !== "per_unit" || price.custom_unit_amount || price.transform_quantity || price.recurring?.interval !== input.interval || price.recurring?.interval_count !== 1 || price.recurring?.usage_type !== "licensed" || price.livemode !== (input.environment === "prod")) subscriptionContractMismatch();
   return typeof price.product === "string" ? price.product : void 0;
@@ -4368,7 +4693,7 @@ var metadataFor = (seat) => ({
 });
 var matches = (value, expected) => value && Object.entries(expected).every(([key3, item]) => value[key3] === item);
 async function read(sk, path, params) {
-  const response = await (0, import_stripe5.stripeRequest)({ secretKey: sk }, "GET", path, params);
+  const response = await (0, import_stripe7.stripeRequest)({ secretKey: sk }, "GET", path, params);
   if (!response.ok) return reject3();
   return response.body;
 }
@@ -4405,11 +4730,11 @@ async function createNamedSeatStripePayment(sk, seat, now) {
   }
   await subscriptionForSeat(sk, seat);
   const metadata = metadataFor(seat);
-  const result = seat.providerPaymentIntentId ? await (0, import_stripe5.stripeRequest)(
+  const result = seat.providerPaymentIntentId ? await (0, import_stripe7.stripeRequest)(
     { secretKey: sk },
     "GET",
     `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`
-  ) : await (0, import_stripe5.stripeRequest)({ secretKey: sk }, "POST", "/v1/payment_intents", {
+  ) : await (0, import_stripe7.stripeRequest)({ secretKey: sk }, "POST", "/v1/payment_intents", {
     amount: seat.amountCents,
     currency: seat.currency,
     customer: seat.providerCustomerId,
@@ -4427,7 +4752,7 @@ async function attachNamedSeatStripeRenewal(sk, seat) {
   const sub = await subscriptionForSeat(sk, seat);
   const existing = sub.items.data.find((item2) => item2.metadata?.seatId === seat.id);
   if (existing) return String(existing.id);
-  const result = await (0, import_stripe5.stripeRequest)({ secretKey: sk }, "POST", "/v1/subscription_items", {
+  const result = await (0, import_stripe7.stripeRequest)({ secretKey: sk }, "POST", "/v1/subscription_items", {
     subscription: seat.providerSubscriptionId,
     price: seat.priceId,
     quantity: 1,
@@ -4505,8 +4830,7 @@ async function confirmNamedMembershipSeatPayment(db, input, now) {
   requireMembershipScope(member, input);
   const row2 = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   if (!row2 || !seat.providerPaymentIntentId) membershipFail("named_seat_payment_evidence_pending");
-  const collisionId = `network-commercial-exception:${input.eventId}:collision`;
-  if (await membershipLoad(db, "networkCommercialExceptions", collisionId)) membershipFail("named_seat_payment_evidence_quarantined");
+  const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, row2.digest, "named_seat_payment_evidence_quarantined");
   const fact = row2.fact;
   if (!fact || fact.eventId !== input.eventId || fact.digest !== row2.digest || !/^[a-f0-9]{64}$/.test(fact.digest) || fact.eventType !== "payment_intent.succeeded" || fact.objectKind !== "payment_intent" || fact.status !== "succeeded" || fact.livemode !== (input.environment === "prod") || fact.paymentIntentId !== seat.providerPaymentIntentId || fact.seatId !== seat.id || fact.membershipId !== member.id || fact.customerId !== seat.providerCustomerId || fact.applicationId !== input.applicationId || fact.amountCents !== seat.amountCents || fact.amountReceivedCents !== seat.amountCents || fact.currency !== seat.currency || !fact.identity || Object.entries({
     appId: input.appId,
@@ -4553,7 +4877,7 @@ async function confirmNamedMembershipSeatPayment(db, input, now) {
         { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
         { ns: "networkCommercialEvents", id: String(row2.id), exists: true, equals: { digest: fact.digest } },
-        { ns: "networkCommercialExceptions", id: collisionId, exists: false }
+        evidenceGuard
       ] });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
@@ -4702,14 +5026,14 @@ async function recordRecipient(db, input, now, approve) {
 }
 
 // src/membership-seat-refund-stripe.ts
-var import_stripe6 = require("@odla-ai/stripe");
+var import_stripe8 = require("@odla-ai/stripe");
 var fail4 = (code = "named_seat_refund_mismatch") => {
   throw Object.assign(new Error(code), { code });
 };
 async function refundNamedSeatStripePayment(secretKey, seat) {
   if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail4();
   const call = async (method, path, params, idempotencyKey) => {
-    const result = await (0, import_stripe6.stripeRequest)({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
+    const result = await (0, import_stripe8.stripeRequest)({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
     if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
     return result.body;
   };
@@ -4831,7 +5155,7 @@ async function confirmNamedSeatProviderRefund(db, input, now) {
   const row2 = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   if (!row2) return membershipFail("named_seat_refund_evidence_pending");
   const fact = row2.fact;
-  if (await membershipLoad(db, "networkCommercialExceptions", `network-commercial-exception:${input.eventId}:collision`)) membershipFail("named_seat_refund_evidence_quarantined");
+  await commercialEvidenceGuard(db, input.eventId, row2.digest, "named_seat_refund_evidence_quarantined");
   if (!fact || fact.eventId !== input.eventId || fact.digest !== row2.digest || !/^[a-f0-9]{64}$/.test(fact.digest) || fact.eventType !== "charge.refunded" || fact.seatId !== seat.id || fact.membershipId !== seat.primaryMembershipId || fact.paymentIntentId !== seat.providerPaymentIntentId || fact.amountCents !== seat.amountCents || fact.currency !== seat.currency || fact.customerId !== seat.providerCustomerId || fact.applicationId !== input.applicationId || fact.livemode !== (input.environment === "prod") || !fact.identity || Object.entries({ appId: input.appId, chapterId: input.chapterId, environment: input.environment, dataEnvironment: input.environment, runtime: input.runtime }).some(([key3, value]) => fact.identity[key3] !== value)) membershipFail("named_seat_refund_evidence_mismatch");
   await requestNamedSeatRefund(db, { ...input, reason: "provider_refund" }, now);
 }
@@ -5103,7 +5427,7 @@ function createMembershipAuthorityHandler(options) {
     if (req.method !== "POST") return respond({ error: "method_not_allowed" }, 405);
     const sender = req.headers.get(import_db.FEDERATION_HEADERS.sender);
     const action = url.pathname.split("/").at(-1);
-    if (!["offers", "checkouts", "payments", "approvals", "refunds", "renewals", "access", ...Object.keys(MEMBERSHIP_SEAT_ACTION_FIELDS)].includes(action ?? "")) return respond({ error: "unauthorized" }, 401);
+    if (!["offers", "checkouts", "payments", "approvals", "refunds", "renewals", "access", "restarts", "cancel-renewal", ...Object.keys(MEMBERSHIP_SEAT_ACTION_FIELDS)].includes(action ?? "")) return respond({ error: "unauthorized" }, 401);
     const peer = peers.find((candidate) => candidate.appId === sender && url.pathname === `${MEMBERSHIP_AUTHORITY_PATH}/${candidate.runtime}/${action}` && !url.search);
     if (!peer) return respond({ error: "unauthorized" }, 401);
     let body;
@@ -5125,7 +5449,7 @@ function createMembershipAuthorityHandler(options) {
       let input;
       try {
         input = JSON.parse(verified.body);
-        const fields = action === "seat-invitation" ? MEMBERSHIP_SEAT_ACTION_FIELDS[action] : ["applicationId", "skuId", ...action === "offers" ? ["requestId"] : action === "checkouts" ? ["offerId", "offerDigest", "quoteDigest", "priceId"] : action === "payments" ? ["eventId", "providerSubscriptionId", "providerCustomerId"] : action === "renewals" ? ["eventId"] : MEMBERSHIP_SEAT_ACTION_FIELDS[action] ?? []];
+        const fields = action === "seat-invitation" ? MEMBERSHIP_SEAT_ACTION_FIELDS[action] : ["applicationId", "skuId", ...action === "offers" ? ["requestId"] : action === "checkouts" ? ["offerId", "offerDigest", "quoteDigest", "priceId"] : action === "payments" ? ["eventId", "providerSubscriptionId", "providerCustomerId"] : action === "renewals" ? ["eventId"] : action === "restarts" ? ["previousSubscriptionId"] : MEMBERSHIP_SEAT_ACTION_FIELDS[action] ?? []];
         if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key3) => !fields.includes(key3)) || !fields.every((key3) => typeof input[key3] === "string" && (["recipientName", "recipientEmail", "purchaserEmail", "verifiedRecipientEmail"].includes(key3) ? input[key3].length > 0 && input[key3].length <= 254 && !/[\u0000-\u001f\u007f]/.test(input[key3]) : SAFE.test(input[key3])))) {
           throw new TypeError("invalid request");
         }
@@ -5150,6 +5474,15 @@ function createMembershipAuthorityHandler(options) {
         applicationId: String(input.applicationId),
         skuId: String(input.skuId)
       };
+      if (action === "restarts" || action === "cancel-renewal") {
+        const stripeSecret = await getVaultSecret(db, options.stripeSecretName ?? "stripe_secret_key");
+        if (!stripeSecret) return respond({ error: "membership_authority_unavailable" }, 503);
+        if (action === "cancel-renewal") return respond({ ok: true, renewal: await cancelMembershipAtTermEnd(db, target, options.now?.() ?? Date.now(), stripeSecret) });
+        return respond({ ok: true, restart: await prepareMembershipRestart(db, {
+          ...target,
+          previousSubscriptionId: String(input.previousSubscriptionId)
+        }, options.now?.() ?? Date.now(), stripeSecret) });
+      }
       if (action === "access") return respond({ ok: true, access: await readMembershipAccess(db, target, options.now?.() ?? Date.now()) });
       if (action === "renewals") return respond({ ok: true, renewal: await reconcileMembershipBilling(
         db,
@@ -5423,7 +5756,7 @@ async function requestMembershipRefund(options) {
 async function requestMembershipRenewal(options) {
   const result = await requestAuthority(options, "renewals", { applicationId: options.applicationId, skuId: options.skuId, eventId: options.eventId });
   const row2 = result.renewal;
-  if (!row2 || row2.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined"].includes(row2.status)) {
+  if (!row2 || row2.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined", "restarting"].includes(row2.status)) {
     throw new Error("invalid membership renewal receipt");
   }
   return { membershipId: row2.membershipId, status: row2.status, termEndsAt: row2.termEndsAt, graceEndsAt: row2.graceEndsAt, autoRenew: row2.autoRenew };
@@ -5465,9 +5798,25 @@ async function requestMembershipAccess(options) {
   const result = await requestAuthority(options, "access", { applicationId: options.applicationId, skuId: options.skuId });
   return verifyMembershipAccessReceipt(result.access, options, Date.now());
 }
+async function requestMembershipRestart(options) {
+  const result = await requestAuthority(options, "restarts", {
+    applicationId: options.applicationId,
+    skuId: options.skuId,
+    previousSubscriptionId: options.previousSubscriptionId
+  });
+  const row2 = result.restart;
+  if (!row2 || row2.applicationId !== options.applicationId || row2.status !== "ready" || row2.membershipId !== await networkMembershipId(options) || !/^restart_[a-f0-9]{64}$/.test(row2.restartId) || !Number.isSafeInteger(row2.memberNumber) || row2.memberNumber < 1) throw new Error("invalid membership restart receipt");
+  return { applicationId: row2.applicationId, membershipId: row2.membershipId, restartId: row2.restartId, memberNumber: row2.memberNumber, status: "ready" };
+}
+async function requestMembershipCancellation(options) {
+  const result = await requestAuthority(options, "cancel-renewal", { applicationId: options.applicationId, skuId: options.skuId });
+  const row2 = result.renewal;
+  if (!row2 || row2.membershipId !== await networkMembershipId(options) || row2.autoRenew !== false || row2.graceEndsAt !== 0 || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !["cancel_at_term_end", "lapsed", "paid_pending_approval"].includes(row2.status)) throw new Error("invalid membership cancellation receipt");
+  return { membershipId: row2.membershipId, status: row2.status, termEndsAt: row2.termEndsAt, graceEndsAt: 0, autoRenew: false };
+}
 
 // src/membership-seat-cancel.ts
-var import_stripe7 = require("@odla-ai/stripe");
+var import_stripe9 = require("@odla-ai/stripe");
 async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   membershipClock(now);
   const state = await loadMembershipAuthorityState(db, target);
@@ -5495,7 +5844,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   }
   const metadata = { ...stripePartitionMetadata(target), applicationId: target.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const request = async (method, path, params) => {
-    const result = await (0, import_stripe7.stripeRequest)(
+    const result = await (0, import_stripe9.stripeRequest)(
       { secretKey },
       method,
       path,
@@ -5508,7 +5857,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   let payment;
   if (seat.providerPaymentIntentId) payment = await request("GET", `/v1/payment_intents/${encodeURIComponent(String(seat.providerPaymentIntentId))}`);
   else {
-    const snapshot = await listStripeObjects((0, import_stripe7.initStripe)({ secretKey }), "/v1/payment_intents", { customer: String(seat.providerCustomerId) });
+    const snapshot = await listStripeObjects((0, import_stripe9.initStripe)({ secretKey }), "/v1/payment_intents", { customer: String(seat.providerCustomerId) });
     const matches2 = snapshot.objects.filter((row2) => row2.metadata?.seatId === target.seatId);
     if (!snapshot.complete || matches2.length !== 1) throw new Error("seat payment creation outcome unresolved");
     payment = matches2[0];
@@ -5732,7 +6081,27 @@ var membershipAuthorityEntities = {
     cancellationRequestedAt: attr9("number", true),
     graceEndsAt: attr9("number", true),
     ...times(),
-    refundRequestedAt: attr9("number", true)
+    refundRequestedAt: attr9("number", true),
+    restartId: key2(true)
+  } },
+  membershipRestart: { attrs: {
+    id: id9(),
+    ...scope(),
+    membershipId: key2(),
+    restartId: key2(),
+    previousSubscriptionId: key2(),
+    memberNumber: attr9("number"),
+    status: key2(),
+    createdAt: attr9("number")
+  } },
+  membershipPurchaseHistory: { attrs: {
+    id: id9(),
+    ...scope(),
+    membershipId: key2(),
+    providerSubscriptionId: key2(),
+    memberSnapshot: attr9("json"),
+    bindingSnapshot: attr9("json"),
+    archivedAt: attr9("number")
   } },
   networkEntitlement: { attrs: {
     id: id9(),
@@ -6531,7 +6900,7 @@ async function reconcileLifecycleDelivery(db, input, now) {
 }
 
 // src/payments.ts
-var import_stripe8 = require("@odla-ai/stripe");
+var import_stripe10 = require("@odla-ai/stripe");
 function paymentsReady(group, hasSecretKey) {
   return Boolean(group.stripePublishableKey && group.stripePriceId && hasSecretKey);
 }
@@ -7158,9 +7527,9 @@ function sharedRecordFromCrm(crm, record4, target, sourceId) {
   }
   const nameField = def.nameField ?? "name";
   const input = {};
-  for (const field of /* @__PURE__ */ new Set([nameField, ...fields])) {
-    const value = record4.fields?.[field];
-    if (value !== void 0) input[field] = value;
+  for (const field2 of /* @__PURE__ */ new Set([nameField, ...fields])) {
+    const value = record4.fields?.[field2];
+    if (value !== void 0) input[field2] = value;
   }
   if (input[nameField] === void 0) input[nameField] = record4.name;
   return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record4.id }, type: record4.type, input } : { version: 1, type: record4.type, hubRecordId: record4.id, input };
@@ -7429,9 +7798,9 @@ function subAnnualCents(sub) {
 }
 
 // src/payments-stripe.ts
-var import_stripe9 = require("@odla-ai/stripe");
+var import_stripe11 = require("@odla-ai/stripe");
 async function stripeCall(sk, method, path, params, idempotencyKey) {
-  return (0, import_stripe9.stripeRequest)(
+  return (0, import_stripe11.stripeRequest)(
     { secretKey: sk },
     method,
     path,
@@ -7741,7 +8110,8 @@ function applicationSummary(app) {
     status: app.status,
     createdAt: app.createdAt ?? null,
     meetingLink: app.meetingLink ?? null,
-    paid: Boolean(app.stripeSubscriptionId) && app.status !== "refunded",
+    paid: Boolean(app.stripeSubscriptionId) && app.status !== "refunded" && app.canceled !== true && !["lapsed", "refunded", "refund_pending", "canceled", "restarting"].includes(app.membershipStatus ?? ""),
+    ...app.membershipStatus ? { membershipStatus: app.membershipStatus, membershipGraceEndsAt: app.membershipGraceEndsAt, membershipAutoRenew: app.membershipAutoRenew } : {},
     renewalAt: app.renewalAt ?? null,
     canceled: app.canceled === true,
     tierId: app.tierId ?? null
@@ -7923,7 +8293,7 @@ function isValidTimeZone(tz) {
 function resolveScheduling(config) {
   const result = validateScheduling(config);
   if (result.ok) return result.value;
-  const detail = Object.entries(result.errors).map(([field, message]) => `${field}: ${message}`).join(" ");
+  const detail = Object.entries(result.errors).map(([field2, message]) => `${field2}: ${message}`).join(" ");
   throw new Error(`scheduling: ${detail}`);
 }
 function validateScheduling(config) {
@@ -9068,7 +9438,7 @@ var MEMBER_SELF_READABLE_FIELDS = new Set(
   MEMBER_SYSTEM_AUTHORITY_MATRIX.filter((row2) => row2.memberAccess !== "none").map((row2) => row2.id)
 );
 function projectMemberSelf(record4) {
-  return Object.fromEntries(Object.entries(record4).filter(([field]) => MEMBER_SELF_READABLE_FIELDS.has(field)));
+  return Object.fromEntries(Object.entries(record4).filter(([field2]) => MEMBER_SELF_READABLE_FIELDS.has(field2)));
 }
 function classifyMemberSystemWrite(intent) {
   if (intent.actor === "bnf") return "reject_bnf_surface";