@odla-ai/chapter 0.49.0 → 0.51.0

package/README.md

@@ -1631,8 +1631,18 @@ These bite silently — a smoke test won't catch them:
   Full renewal/refund/seat lifecycle wiring and live provider journey proof
   remain prerequisites for enabling this adapter in a host.
 
-  `drainMembershipEffects` recovers pending provider work and expires unpaid or
-  unaccepted seats within one exact configured runtime. Pair its
+  `drainMembershipEffects` recovers pending provider work and cancels unpaid
+  seats within one exact configured runtime. It never refunds an unaccepted
+  seat: a purchased seat waits for its recipient for the whole paid term, and a
+  refund is a super admin's decision on request. Refunding the recipient's own
+  application (`POST /api/admin/applications/:id/refund`) requires a super
+  admin when it carries a gifted seat. On a chapter,
+  `GET /api/admin/applications/:id/named-seat` shows a purchaser's seat and
+  `POST …/named-seat/refund` returns its payment through the signed edge; on the
+  network owner, `membershipAuthorityOperator: { makeDb }` mounts
+  `GET /api/admin/membership-seats` and `POST …/membership-seats/:seatId/refund`
+  over the authority storage. Both refuse anyone but a super admin, and the
+  recipient's own `…/refund` route does the same for a gifted seat. Pair its
   `deliverChapterEffect` callback with `deliverMembershipChapterEffect` and a
   chapter `createMembershipChapterEffectRoute({ sender, secretName, origin,
   readEffect: adapter.readEffect })`. The receiver reloads current network state
@@ -1655,6 +1665,30 @@ These bite silently — a smoke test won't catch them:
   it never sends mail. Confirmed non-delivery permits only the original workflow
   to retry its frozen payload. Non-production recipient redirection still applies.
 
+  An offering may omit `seatPurchaseWindowCalendarMonths`: then a seat may be
+  bought for as long as the primary membership is paid and active, renewals
+  included, and the offer reports `purchaseWindowed: false`. Memberships frozen
+  under an earlier windowed offering keep their window until the network owner
+  lifts it once per chapter with `POST /api/admin/membership-seats/lift-purchase-window`
+  (super admin; only ever widens).
+
+  The public join config asks the authority, per paid tier, what a founding
+  applicant pays today (`offer-preview`, read-only: nothing is reserved) and
+  exposes it as `tiers[].founding` ({ cohortLabel, dueTodayCents, discountCents,
+  renewalCents, discountDuration }). The placeholder chooser and membership
+  cards show that rate with the list price struck; a site's `renderTiers` should
+  read the same field instead of hard-coding a founding price. The issued offer
+  at checkout remains the only promise.
+
+  On a chapter, a person record with no linked application — someone invited or
+  a candidate — is managed by the chapter's own admins the way the network
+  owner manages it: the record's Invitation tab sets or revokes the local
+  admission decision (`/api/admin/admission-grants`), and its Stage tab moves the
+  person only through the CRM's pre-application stages. Declare those stages
+  ahead of the application statuses in the person pipeline (for example
+  `candidate` and `invited`); an application status is never set by hand, on
+  the chapter or through the leader's delegated lane.
+
 ### Install + scope notes
 
 - **Bootstrap the first admin according to the selected auth source.** Prefer