@odla-ai/chapter 0.50.0 → 0.52.0

package/dist/index.js

@@ -502,7 +502,7 @@ var giftRedemptionAttemptsEntity = { attrs: {
 } };
 
 // src/payment-recovery-schema.ts
-var field = (type, unique = false) => ({ type, unique, indexed: type !== "json", optional: false });
+var field = (type, unique = false, optional = false) => ({ type, unique, indexed: type !== "json", optional });
 var paymentRecoveryReviewsEntity = { attrs: {
   id: field("string", true),
   eventId: field("string"),
@@ -511,7 +511,9 @@ var paymentRecoveryReviewsEntity = { attrs: {
   previousDigest: field("string"),
   providerDigest: field("string"),
   scope: field("string"),
-  previousState: field("json")
+  previousState: field("json"),
+  action: field("string", false, true),
+  reason: field("string", false, true)
 } };
 
 // src/schema-stripe.ts
@@ -707,7 +709,7 @@ var boolean = (flags = {}) => ({
   indexed: flags.indexed ?? false,
   optional: false
 });
-var json2 = () => ({ type: "json", unique: false, indexed: false, optional: false });
+var json2 = (flags = {}) => ({ type: "json", unique: false, indexed: false, optional: flags.optional ?? false });
 var id4 = () => string2({ unique: true, indexed: true });
 var events = { attrs: {
   id: id4(),
@@ -736,6 +738,10 @@ var exceptions = { attrs: {
   status: string2({ indexed: true }),
   resolvedDigest: string2({ optional: true }),
   incomingDigest: string2({ optional: true }),
+  incomingFact: json2({ optional: true }),
+  reviewedDigest: string2({ optional: true }),
+  resolvedBy: string2({ optional: true }),
+  reviewId: string2({ optional: true }),
   detail: json2(),
   updatedAt: number2({ indexed: true })
 } };
@@ -874,6 +880,7 @@ var groups = {
     stripePublishableKey: attr7("string", { optional: true }),
     notificationEmail: attr7("string"),
     replyTo: attr7("string"),
+    fromName: attr7("string", { optional: true }),
     debugEmail: attr7("string", { optional: true }),
     calendarLink: attr7("string", { optional: true }),
     disclaimerText: attr7("string"),
@@ -1070,6 +1077,13 @@ function defaultCrm(mode) {
   };
 }
 
+// src/named-seat-accepted-template.ts
+var SEAT_ACCEPTED_TEMPLATE = {
+  enabled: true,
+  subject: "{{recipientName}} accepted your {{chapterName}} seat",
+  text: "Hi {{firstName}},\n\n{{recipientName}} has accepted the {{tierName}} seat you purchased at {{chapterName}}. They will complete their own application and any membership requirements from here; nothing more is needed from you.\n\nWarmly,\n{{chapterName}}"
+};
+
 // src/group.ts
 var DEFAULT_SCHEDULING = {
   slotMinutes: 45,
@@ -1091,7 +1105,16 @@ ${name}`;
       text: `A new application came in for ${name}.
 
 Name: {{firstName}} {{lastName}}
-Email: {{email}}`
+Email: {{email}}
+Tier: {{tier}}
+
+Review it: {{adminUrl}}`
+    },
+    submitConfirmation: {
+      subject: `We received your application to ${name}`,
+      text: `Hi {{firstName}},
+
+Thanks for applying to ${name}. {{submitNextStep}}${sign}`
     },
     paymentConfirmation: {
       subject: `Welcome to ${name}`,
@@ -1103,14 +1126,17 @@ Your membership payment{{paymentAmountSummary}} is confirmed. {{paymentNextStep}
       subject: `Your ${name} intro call`,
       text: `Hi {{firstName}},
 
-Looking forward to our call at {{meetingTime}}. {{meetingLink}}${sign}`
+You are all set{{paymentAmountSummary}}. Looking forward to our call on {{startAt}}.
+
+Join here: {{meetingLink}}${sign}`
     },
     onboardingInvite: {
       subject: `You're in, ${name}`,
       text: `Hi {{firstName}},
 
 Welcome to ${name}. Your member area is here: {{membersUrl}}${sign}`
-    }
+    },
+    seatAccepted: SEAT_ACCEPTED_TEMPLATE
   };
 }
 function buildGroupSeed(config) {
@@ -1139,6 +1165,7 @@ function buildGroupSeed(config) {
     schedulingJson: scheduling
   };
   if (emails?.debugEmail) row2.debugEmail = emails.debugEmail;
+  if (emails?.fromName?.trim()) row2.fromName = emails.fromName.trim();
   if (policy.commitmentText) row2.commitmentText = policy.commitmentText;
   if (policy.normsText) row2.normsText = policy.normsText;
   return row2;
@@ -1359,6 +1386,8 @@ var DEFAULT_ADMIN_COPY = {
     delivery: "Delivery",
     notificationAddress: "Notification address",
     replyTo: "Reply-to",
+    fromName: "From name",
+    fromNameHint: "Shown as the sender; the address stays the Worker's configured one.",
     debugInbox: "Debug inbox",
     debugInboxHint: "Non-production sends redirect here.",
     sendTest: "Send test",
@@ -1430,6 +1459,8 @@ var DEFAULT_ADMIN_COPY = {
     transportReachable: "transport reachable",
     transportUnavailable: "transport unavailable",
     transportNotChecked: "transport not checked",
+    edgeUnpaired: "edge unpaired",
+    edgeUnpairedHint: "This follower's shared secret is not in the leader vault, so nothing can be signed. Pair both vaults from an enrolled machine:",
     bindingTransport: "service binding {binding}",
     urlTransport: "public URL transport",
     activeConfiguration: "active configuration r{revision}",
@@ -2158,6 +2189,10 @@ function defineChapter(config) {
     if (!config.emails || typeof config.emails.notificationEmail !== "string" || config.emails.notificationEmail === "") {
       throw new Error("defineChapter.emails.notificationEmail: required in chapter mode");
     }
+    const fromName = config.emails.fromName;
+    if (fromName !== void 0 && (typeof fromName !== "string" || /[\r\n<>]/.test(fromName) || fromName.trim().length > 100)) {
+      throw new Error("defineChapter.emails.fromName: must be one line of at most 100 characters with no angle brackets");
+    }
     if (!config.prices || typeof config.prices.standardCents !== "number") {
       throw new Error("defineChapter.prices.standardCents: required in chapter mode");
     }
@@ -3153,6 +3188,7 @@ function createChapterIntegration(chapter, options = {}) {
     description: "Signing secret for the read-only network commercial Stripe webhook endpoint.",
     required: true
   });
+  secrets.push(...federationEdgeSecrets(chapter));
   return {
     id: "chapter",
     title: `Chapter: ${chapter.name}`,
@@ -3196,8 +3232,48 @@ function createChapterIntegration(chapter, options = {}) {
     runbooks
   };
 }
+function federationEdgeSecrets(chapter) {
+  const secrets = chapter.network.targets.map((target) => ({
+    name: target.secretName,
+    description: `Shared secret for the signed federation edge to follower "${target.id}"; pair both vaults with "odla-ai chapter edge pair --leader ${chapter.id} --follower ${target.id}".`,
+    required: true,
+    edge: { role: "leader", peers: [target.id] }
+  }));
+  const peers = [.../* @__PURE__ */ new Set([
+    ...chapter.network.readers.map((reader) => reader.id),
+    ...(chapter.builderLibrary?.sources ?? []).map((source) => source.sourceId)
+  ])];
+  if (peers.length > 0) secrets.push({
+    name: "network_share_secret",
+    description: `Shared secret every declared leader (${peers.join(", ")}) signs federation requests with; pair it with "odla-ai chapter edge pair --leader <leader> --follower ${chapter.id}".`,
+    required: true,
+    edge: { role: "follower", peers }
+  });
+  return secrets;
+}
+
+// src/network-edge.ts
+var EDGE_UNPAIRED = "edge_unpaired";
+function pairingCommand(leaderId, targetId, env) {
+  const scope2 = env ? ` --env ${env}` : "";
+  return `odla-ai chapter edge pair --leader ${leaderId} --follower ${targetId}${scope2}`;
+}
+function edgeUnpaired(leaderId, target, env) {
+  return {
+    code: EDGE_UNPAIRED,
+    target: target.id,
+    secretName: target.secretName,
+    message: `edge to "${target.id}" is unpaired: leader vault slot "${target.secretName}" is empty`,
+    hint: pairingCommand(leaderId, target.id, env)
+  };
+}
 
 // src/membership-policy.ts
+function seatPurchaseDeadline(offering, member) {
+  if (offering.seatPurchaseWindowCalendarMonths === void 0) return Number(member.termEndsAt);
+  if (Number.isSafeInteger(member.seatPurchaseEndsAt)) return Number(member.seatPurchaseEndsAt);
+  return addMembershipCalendarMonths(Number(member.initialTermStartedAt ?? member.termStartedAt), offering.seatPurchaseWindowCalendarMonths);
+}
 var fail2 = (field2) => {
   throw new TypeError(`invalid membership policy: ${field2}`);
 };
@@ -3254,7 +3330,7 @@ function membershipOfferingVersion(value) {
     autoRenew: true,
     paymentGraceDays: integer2(input.paymentGraceDays, 0, 60),
     seatPriceCents: integer2(input.seatPriceCents, 1, Number.MAX_SAFE_INTEGER),
-    seatPurchaseWindowCalendarMonths: integer2(input.seatPurchaseWindowCalendarMonths, 1, 120),
+    ...input.seatPurchaseWindowCalendarMonths === void 0 || input.seatPurchaseWindowCalendarMonths === null ? {} : { seatPurchaseWindowCalendarMonths: integer2(input.seatPurchaseWindowCalendarMonths, 1, 120) },
     requiredDisclosures: ids(input.requiredDisclosures)
   };
 }
@@ -3648,7 +3724,7 @@ async function confirmMembershipPayment(db, input, now) {
       initialTermEndsAt: endsAt,
       termStartedAt: paidAt,
       termEndsAt: endsAt,
-      seatPurchaseEndsAt: addMembershipCalendarMonths(Number(paidAt), offering.seatPurchaseWindowCalendarMonths),
+      seatPurchaseEndsAt: seatPurchaseDeadline(offering, { initialTermStartedAt: paidAt, termEndsAt: endsAt }),
       autoRenew: true,
       refundedCents: 0,
       revision: 1,
@@ -4076,7 +4152,11 @@ async function reconcileMembershipRenewal(db, input, now) {
       membershipUpdate("networkMembership", id10, {
         status: status2,
         graceEndsAt,
-        ...paid ? { termStartedAt: start, termEndsAt: end } : {},
+        ...paid ? {
+          termStartedAt: start,
+          termEndsAt: end,
+          ...membershipOfferingVersion(member.offeringSnapshot).seatPurchaseWindowCalendarMonths === void 0 ? { seatPurchaseEndsAt: end } : {}
+        } : {},
         revision: Number(member.revision) + 1,
         updatedAt: now
       }),
@@ -4378,10 +4458,11 @@ async function reserveNamedMembershipSeat(db, input, now) {
   const id10 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
   let seat = await membershipLoad(db, "networkSeat", id10);
   if (!seat) {
-    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > Number(member.seatPurchaseEndsAt) || !Number.isSafeInteger(member.seatPurchaseEndsAt) || member.namedSeatId !== void 0) {
+    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
+    const purchaseEndsAt = seatPurchaseDeadline(offering, member);
+    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
       membershipFail("named_seat_purchase_unavailable");
     }
-    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
     const attrs = {
       id: id10,
       ...membershipScope(input),
@@ -4400,7 +4481,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
       status: "payment_pending",
       preparedAt: now,
       termEndsAt: member.termEndsAt,
-      seatPurchaseEndsAt: member.seatPurchaseEndsAt,
+      seatPurchaseEndsAt: purchaseEndsAt,
       offeringSnapshot: offering,
       revision: 1,
       createdAt: now,
@@ -4617,7 +4698,7 @@ async function confirmNamedMembershipSeatPayment(db, input, now) {
   }
   if (seat.purchasedAt === void 0) {
     if (!["payment_processing", "payment_canceling"].includes(String(seat.status))) membershipFail("named_seat_payment_not_expected");
-    const eligible = seat.status !== "payment_canceling" && ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) && Number(member.refundedCents) === 0 && paidAt <= Number(member.seatPurchaseEndsAt) && now < Number(member.termEndsAt);
+    const eligible = seat.status !== "payment_canceling" && ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) && Number(member.refundedCents) === 0 && paidAt <= seatPurchaseDeadline(membershipOfferingVersion(member.offeringSnapshot), member) && now < Number(member.termEndsAt);
     const status2 = eligible ? "renewal_pending" : "refund_pending", effectId = `${seat.id}:${eligible ? "attach-renewal" : "refund"}`;
     try {
       await db.transact([
@@ -4969,15 +5050,16 @@ async function readNamedSeatOffer(db, input, now) {
   const offering = membershipOfferingVersion(member.offeringSnapshot);
   const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
   if (seat) requireMembershipScope(seat, input);
+  const purchaseEndsAt = seatPurchaseDeadline(offering, member);
   const offer = {
     membershipId: id10,
     amountCents: offering.seatPriceCents,
     currency: offering.currency,
     interval: offering.interval,
     termEndsAt: Number(member.termEndsAt),
-    purchaseEndsAt: Number(member.seatPurchaseEndsAt),
+    purchaseEndsAt,
     autoRenew: member.autoRenew === true,
-    eligible: ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) && member.refundedCents === 0 && now >= Number(member.initialTermStartedAt) && now < Number(member.termEndsAt) && now <= Number(member.seatPurchaseEndsAt) && (!seat || ["payment_pending", "payment_processing"].includes(String(seat.status))),
+    eligible: ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) && member.refundedCents === 0 && now >= Number(member.initialTermStartedAt) && now < Number(member.termEndsAt) && now <= purchaseEndsAt && (!seat || ["payment_pending", "payment_processing"].includes(String(seat.status))),
     ...seat ? { seat: {
       seatId: String(seat.id),
       status: String(seat.status),
@@ -4985,7 +5067,7 @@ async function readNamedSeatOffer(db, input, now) {
       recipientEmail: String(seat.recipientEmailNormalized)
     } } : {}
   };
-  return { ...offer, digest: await namedSeatOfferDigest(offer) };
+  return { ...offer, digest: await namedSeatOfferDigest(offer), purchaseWindowed: offering.seatPurchaseWindowCalendarMonths !== void 0 };
 }
 
 // src/membership-seat-invitation.ts
@@ -5470,7 +5552,7 @@ async function requestNamedSeatReservation(options) {
 async function requestNamedSeatOffer(options) {
   const result = await requestAuthority(options, "seat-offer", { applicationId: options.applicationId, skuId: options.skuId });
   const offer = result.seat;
-  if (!offer || offer.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(offer.amountCents) || offer.amountCents <= 0 || !/^[a-z]{3}$/.test(offer.currency) || !["month", "year"].includes(offer.interval) || typeof offer.eligible !== "boolean" || typeof offer.autoRenew !== "boolean" || !Number.isSafeInteger(offer.termEndsAt) || !Number.isSafeInteger(offer.purchaseEndsAt) || offer.digest !== await namedSeatOfferDigest(offer)) throw new Error("invalid named seat offer");
+  if (!offer || offer.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(offer.amountCents) || offer.amountCents <= 0 || !/^[a-z]{3}$/.test(offer.currency) || !["month", "year"].includes(offer.interval) || typeof offer.eligible !== "boolean" || typeof offer.autoRenew !== "boolean" || !Number.isSafeInteger(offer.termEndsAt) || !Number.isSafeInteger(offer.purchaseEndsAt) || offer.purchaseWindowed !== void 0 && typeof offer.purchaseWindowed !== "boolean" || offer.digest !== await namedSeatOfferDigest(offer)) throw new Error("invalid named seat offer");
   return offer;
 }
 async function requestNamedSeatInvitation(options) {
@@ -6554,6 +6636,12 @@ function planDelivery(input) {
 }
 
 // src/notify.ts
+function fromAddress(configured, name) {
+  const display = name?.trim();
+  if (!display) return configured;
+  const angled = configured.match(/<([^>]+)>/);
+  return { name: display, email: (angled ? angled[1] : configured).trim() };
+}
 async function sendTemplated(deps, input) {
   const { emailLog: emailLog2 } = await deps.db.query({ emailLog: { $: { where: { dedupeKey: input.dedupeKey } } } });
   const prior = Array.isArray(emailLog2) ? emailLog2 : [];
@@ -6616,7 +6704,7 @@ async function sendTemplated(deps, input) {
   let messageId;
   try {
     const response = await deps.sender.send({
-      from: deps.from,
+      from: fromAddress(deps.from, input.group.fromName),
       to: [decision.to],
       subject: String(row2.subject),
       text: String(row2.body),
@@ -6649,6 +6737,7 @@ function emailGroupFrom(row2) {
     name: String(row2.name ?? ""),
     replyTo: str2(row2.replyTo) ?? "",
     debugEmail: str2(row2.debugEmail),
+    fromName: str2(row2.fromName),
     refundPolicyText: str2(row2.refundPolicyText),
     commitmentText: str2(row2.commitmentText),
     normsText: str2(row2.normsText),
@@ -9415,6 +9504,7 @@ export {
   CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY,
   DEFAULT_SHARE_FIELDS,
+  EDGE_UNPAIRED,
   GIFT_OFFER_CATALOG_VERSION,
   JOURNEY_ENDINGS,
   JOURNEY_STAGES,
@@ -9495,6 +9585,7 @@ export {
   defaultCrm,
   defineChapter,
   drainMembershipEffects,
+  edgeUnpaired,
   emailGroupFrom,
   endForSlot,
   exportChapterPromotion,
@@ -9554,6 +9645,7 @@ export {
   normalizeSharedRecord,
   normalizeWebhookEvent,
   offerableTiers,
+  pairingCommand,
   paymentsReady,
   personInputFromApp,
   planDelivery,
@@ -9623,6 +9715,7 @@ export {
   resolveSignupControl,
   resolveTiers,
   roleFromClaim,
+  seatPurchaseDeadline,
   sendTemplated,
   sharedPersonInput,
   sharedRecordFromCrm,