@odla-ai/chapter 0.53.0 → 0.54.1

package/dist/worker/index.cjs

@@ -36,6 +36,12 @@ __export(worker_exports, {
   deliverMembershipChapterEffect: () => deliverMembershipChapterEffect,
   deliverSignupControl: () => deliverSignupControl,
   drainMembershipEffects: () => drainMembershipEffects,
+  grantIncludedNamedSeat: () => grantIncludedNamedSeat,
+  liftSeatPurchaseWindow: () => liftSeatPurchaseWindow,
+  lowerSeatPrice: () => lowerSeatPrice,
+  namedSeatIncluded: () => namedSeatIncluded,
+  namedSeatRecipientState: () => namedSeatRecipientState,
+  readNamedSeatOffer: () => readNamedSeatOffer,
   refundNamedSeatByOperator: () => refundNamedSeatByOperator,
   renderActiveSignupControlHtml: () => renderActiveSignupControlHtml,
   resolveNetworkTargetTransport: () => resolveNetworkTargetTransport,
@@ -1803,8 +1809,8 @@ var object = (value) => {
 var id = (value) => typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/.test(value) ? value : fail2("id");
 var integer2 = (value, min, max) => typeof value === "number" && Number.isSafeInteger(value) && value >= min && value <= max ? value : fail2("integer");
 var time = (value) => {
-  const at = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
-  return integer2(at, 0, 864e13);
+  const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+  return integer2(at2, 0, 864e13);
 };
 var ids = (value, allowEmpty = false) => {
   if (!Array.isArray(value) || value.length > 100 || !allowEmpty && value.length === 0) return fail2("ids");
@@ -1848,7 +1854,7 @@ function membershipOfferingVersion(value) {
     term: normalizedTerm,
     autoRenew: true,
     paymentGraceDays: integer2(input.paymentGraceDays, 0, 60),
-    seatPriceCents: integer2(input.seatPriceCents, 1, Number.MAX_SAFE_INTEGER),
+    seatPriceCents: integer2(input.seatPriceCents, 0, Number.MAX_SAFE_INTEGER),
     ...input.seatPurchaseWindowCalendarMonths === void 0 || input.seatPurchaseWindowCalendarMonths === null ? {} : { seatPurchaseWindowCalendarMonths: integer2(input.seatPurchaseWindowCalendarMonths, 1, 120) },
     requiredDisclosures: ids(input.requiredDisclosures)
   };
@@ -2936,7 +2942,7 @@ async function checkoutVariables(db, group, app) {
   const frozen = await frozenCheckoutVariables(db, app);
   return frozen.tierName ? frozen : { ...frozen, tierName: await catalogTierName(db, group, app) };
 }
-function formatInstant(at, timeZone) {
+function formatInstant(at2, timeZone) {
   return new Intl.DateTimeFormat("en-US", {
     weekday: "long",
     month: "long",
@@ -2946,7 +2952,7 @@ function formatInstant(at, timeZone) {
     minute: "2-digit",
     timeZoneName: "short",
     timeZone
-  }).format(new Date(at));
+  }).format(new Date(at2));
 }
 var adminUrlFor = (origin) => `${origin}/admin/`;
 var membersUrlFor = (origin) => `${origin}/members/`;
@@ -3894,6 +3900,181 @@ async function refundNamedSeatStripePayment(secretKey, seat) {
   return { refundedCents, refundIds };
 }
 
+// src/membership-seat-reservation.ts
+async function recipientKey(input, email) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([input.appId, input.chapterId, input.environment, input.runtime, email])));
+  return `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+async function reserveNamedMembershipSeat(db, input, now) {
+  membershipClock(now);
+  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
+  const purchaser = normalizeChapterEmail(typeof input.purchaserEmail === "string" ? input.purchaserEmail : "");
+  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !purchaser || email === purchaser || !/^price_[A-Za-z0-9_]+$/.test(input.priceId) || !/^user_[A-Za-z0-9_]+$/.test(input.purchaserUserId)) membershipFail("invalid_named_seat_recipient");
+  const state = await loadMembershipAuthorityState(db, input);
+  const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
+  requireMembershipScope(member, input);
+  if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
+  const id6 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
+  let seat = await membershipLoad(db, "networkSeat", id6);
+  if (!seat) {
+    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
+    const purchaseEndsAt = seatPurchaseDeadline(offering, member);
+    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
+      membershipFail("named_seat_purchase_unavailable");
+    }
+    const attrs = {
+      id: id6,
+      ...membershipScope(input),
+      primaryMembershipId: memberId,
+      recipientName: name,
+      recipientEmailNormalized: email,
+      purchaserUserId: input.purchaserUserId,
+      recipientClaimId: claimId,
+      priceId: input.priceId,
+      primaryPriceId: member.providerPriceId,
+      amountCents: offering.seatPriceCents,
+      currency: offering.currency,
+      interval: offering.interval,
+      providerCustomerId: member.providerCustomerId,
+      providerSubscriptionId: member.providerSubscriptionId,
+      status: "payment_pending",
+      preparedAt: now,
+      termEndsAt: member.termEndsAt,
+      seatPurchaseEndsAt: purchaseEndsAt,
+      offeringSnapshot: offering,
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    };
+    try {
+      await db.transact([
+        membershipUpdate("networkSeat", id6, attrs),
+        membershipUpdate("networkSeatRecipient", claimId, {
+          id: claimId,
+          appId: input.appId,
+          chapterId: input.chapterId,
+          environment: input.environment,
+          runtime: input.runtime,
+          seatId: id6,
+          recipientEmailNormalized: email,
+          createdAt: now
+        }),
+        membershipUpdate("networkMembership", memberId, { namedSeatId: id6, revision: Number(member.revision) + 1, updatedAt: now })
+      ], { mutationId: `named-seat-reserve:${id6}`, guards: [
+        { ns: "networkSeat", id: id6, exists: false },
+        { ns: "networkSeatRecipient", id: claimId, exists: false },
+        { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+    }
+    seat = await membershipLoad(db, "networkSeat", id6);
+    if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
+  }
+  requireMembershipScope(seat, input);
+  if (seat.primaryMembershipId !== memberId || seat.recipientName !== name || seat.recipientEmailNormalized !== email || seat.priceId !== input.priceId || seat.purchaserUserId !== input.purchaserUserId) membershipFail("named_seat_purchase_conflict");
+  return seat;
+}
+
+// src/membership-seat-included.ts
+var namedSeatIncluded = (seat) => Number(seat.amountCents) === 0;
+var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean(seat.providerPaymentIntentId && seat.providerSubscriptionItemId);
+function namedSeatRecipientState(seat) {
+  switch (String(seat.status)) {
+    case "renewal_pending":
+    case "pending_acceptance":
+      return "invited";
+    case "pending_approval":
+    case "pending_primary":
+      return "accepted";
+    case "active":
+      return "joined";
+    case "refund_pending":
+    case "refunded":
+      return seat.refundReason === "declined" ? "declined" : "refunded";
+    case "canceled":
+      return "canceled";
+    default:
+      return "payment_pending";
+  }
+}
+var OPEN = ["pending_acceptance", "pending_approval", "pending_primary", "active"];
+async function grantIncludedNamedSeat(db, input, now) {
+  membershipClock(now);
+  const seat = await reserveNamedMembershipSeat(db, input, now);
+  if (!namedSeatIncluded(seat)) membershipFail("named_seat_not_included");
+  const state = await loadMembershipAuthorityState(db, input);
+  const member = await membershipLoad(db, "networkMembership", seat.primaryMembershipId);
+  requireMembershipScope(member, input);
+  if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || member.namedSeatId !== seat.id || now >= Number(member.termEndsAt)) {
+    membershipFail("named_seat_purchase_unavailable");
+  }
+  if (seat.status === "payment_pending") {
+    const entitlementId = `${seat.id}:entitlement`, inviteId = `${seat.id}:invite`, source = `included:${seat.id}`;
+    try {
+      await db.transact([
+        membershipUpdate("networkSeat", seat.id, {
+          status: "pending_acceptance",
+          purchasedAt: now,
+          termStartedAt: now,
+          termEndsAt: member.termEndsAt,
+          acceptanceEndsAt: Number(member.termEndsAt),
+          entitlementId,
+          revision: Number(seat.revision) + 1,
+          updatedAt: now
+        }),
+        membershipUpdate("networkEntitlement", entitlementId, {
+          id: entitlementId,
+          ...membershipScope(input),
+          membershipId: member.id,
+          seatId: seat.id,
+          kind: "named_seat",
+          status: "pending_acceptance",
+          termStartedAt: now,
+          termEndsAt: member.termEndsAt,
+          offeringSnapshot: member.offeringSnapshot,
+          sourceEventId: source,
+          revision: 1,
+          createdAt: now,
+          updatedAt: now
+        }),
+        membershipUpdate("membershipEffect", inviteId, {
+          id: inviteId,
+          chapterId: input.chapterId,
+          environment: input.environment,
+          runtime: input.runtime,
+          membershipId: member.id,
+          seatId: seat.id,
+          kind: "invite_named_recipient",
+          status: "pending",
+          attempts: 0,
+          createdAt: now,
+          updatedAt: now
+        })
+      ], { mutationId: `named-seat-included:${seat.id}`, guards: [
+        {
+          ns: "networkSeat",
+          id: seat.id,
+          exists: true,
+          equals: { status: "payment_pending", revision: seat.revision, amountCents: 0 },
+          absent: ["purchasedAt", "providerPaymentIntentId"]
+        },
+        { ns: "networkEntitlement", id: entitlementId, exists: false },
+        { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision, namedSeatId: seat.id } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+    }
+  }
+  const current = await membershipLoad(db, "networkSeat", seat.id);
+  requireMembershipScope(current, input);
+  if (!namedSeatIncluded(current) || current.purchasedAt === void 0 || !OPEN.includes(String(current.status))) membershipFail("named_seat_purchase_unavailable");
+  return { seatId: seat.id, amountCents: 0, currency: seat.currency, termEndsAt: Number(current.termEndsAt), status: String(current.status), included: true };
+}
+
 // src/membership-seat-refund.ts
 async function requestNamedSeatRefund(db, input, now) {
   membershipClock(now);
@@ -3903,7 +4084,7 @@ async function requestNamedSeatRefund(db, input, now) {
   const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
   requireMembershipScope(member, input);
   if (seat.status === "refunded" || seat.status === "refund_pending") return;
-  if (!seat.purchasedAt || !seat.providerPaymentIntentId || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
+  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
   const entitlement = seat.entitlementId ? await membershipLoad(db, "networkEntitlement", String(seat.entitlementId)) : void 0;
   await db.transact([
     membershipUpdate("networkSeat", input.seatId, { status: "refund_pending", refundReason: input.reason, revision: Number(seat.revision) + 1, updatedAt: now }),
@@ -3948,7 +4129,7 @@ async function completeNamedSeatRefund(db, seatId, secretKey, now) {
   await loadMembershipAuthorityState(db, seat);
   if (seat.status === "refunded") return;
   if (seat.status !== "refund_pending") membershipFail("named_seat_refund_not_ready");
-  const result = await refundNamedSeatStripePayment(secretKey, seat);
+  const result = namedSeatIncluded(seat) ? { refundedCents: 0, refundIds: [] } : await refundNamedSeatStripePayment(secretKey, seat);
   await db.transact([
     membershipUpdate("networkSeat", seatId, {
       status: "refunded",
@@ -3970,7 +4151,7 @@ async function refundNamedSeatByOperator(db, input, stripeSecretKey, now) {
   await requestNamedSeatRefund(db, { ...input, reason: "operator" }, now);
   await completeNamedSeatRefund(db, input.seatId, stripeSecretKey, now);
   const refunded = await membershipLoad(db, "networkSeat", input.seatId);
-  if (refunded?.status !== "refunded" || !Number.isSafeInteger(refunded.refundedCents) || Number(refunded.refundedCents) <= 0) {
+  if (refunded?.status !== "refunded" || !Number.isSafeInteger(refunded.refundedCents) || Number(refunded.refundedCents) !== Number(seat.amountCents)) {
     throw new Error("named seat refund unconfirmed");
   }
   return { seatId: String(seat.id), status: "refunded", refundedCents: Number(refunded.refundedCents), subscriptionCanceled: false };
@@ -4002,9 +4183,56 @@ async function liftSeatPurchaseWindow(db, scope2, now, limit = 100) {
   return { lifted, more: rows5.length > limit };
 }
 
+// src/membership-seat-reprice.ts
+async function lowerSeatPrice(db, scope2, now, limit = 100) {
+  membershipClock(now);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid reprice limit");
+  const state = await loadMembershipAuthorityState(db, scope2);
+  const versions = (await db.query({ membershipOfferingVersion: { $: { where: { chapterId: scope2.chapterId }, limit: 200 } } })).membershipOfferingVersion ?? [];
+  if (versions.length >= 200) throw Object.assign(new Error("policy_history_incomplete"), { code: "policy_history_incomplete" });
+  const current = versions.map((row2) => membershipOfferingVersion(row2.snapshot)).filter((offer) => offer.baseSkuId === scope2.skuId && offer.status === "published" && now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || now < offer.effectiveUntil)).sort((a, b) => b.version - a.version)[0];
+  if (!current) throw Object.assign(new Error("ambiguous_membership_policy"), { code: "ambiguous_membership_policy" });
+  const target = current.seatPriceCents;
+  const rows5 = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
+  const receipt = { seatPriceCents: target, repriced: 0, skipped: [], more: rows5.length > limit };
+  for (const member of rows5.slice(0, limit)) {
+    if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) throw new Error("membership reprice scope mismatch");
+    const id6 = String(member.id), skip = (reason) => {
+      receipt.skipped.push({ membershipId: id6, reason });
+    };
+    const offering = membershipOfferingVersion(member.offeringSnapshot);
+    if (offering.seatPriceCents <= target) {
+      skip("seat price already at or below the current offering");
+      continue;
+    }
+    if (!["paid_pending_approval", "active", "cancel_at_term_end", "payment_grace"].includes(String(member.status))) {
+      skip(`membership is ${String(member.status)}`);
+      continue;
+    }
+    const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
+    if (seat && (seat.status !== "payment_pending" || seat.providerPaymentIntentId !== void 0)) {
+      skip(`seat is ${String(seat.status)}`);
+      continue;
+    }
+    const ops = [membershipUpdate("networkMembership", id6, { offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(member.revision) + 1, updatedAt: now })];
+    const guards = [
+      { ns: "networkMembership", id: id6, exists: true, equals: { revision: member.revision } },
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } }
+    ];
+    if (seat) {
+      ops.push(membershipUpdate("networkSeat", String(seat.id), { amountCents: target, offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(seat.revision) + 1, updatedAt: now }));
+      guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision, status: "payment_pending" } });
+    }
+    await db.transact(ops, { mutationId: `seat-reprice:${id6}:${member.revision}`, guards });
+    receipt.repriced++;
+  }
+  return receipt;
+}
+
 // src/worker-routes-admin-membership-seats.ts
 var LIST = "/api/admin/membership-seats";
 var LIFT = "/api/admin/membership-seats/lift-purchase-window";
+var REPRICE = "/api/admin/membership-seats/reprice";
 var ONE = /^\/api\/admin\/membership-seats\/([A-Za-z0-9][A-Za-z0-9_.:-]{2,159})\/refund$/;
 var SCOPE = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var PUBLIC = [
@@ -4031,11 +4259,11 @@ var PUBLIC = [
 ];
 var project = (row2) => Object.fromEntries(PUBLIC.filter((key3) => row2[key3] !== void 0).map((key3) => [key3, row2[key3]]));
 var handleAdminMembershipSeats = async (req, url, env, ctx) => {
-  const one = url.pathname.match(ONE), lift = url.pathname === LIFT;
-  if (url.pathname !== LIST && !one && !lift) return null;
+  const one = url.pathname.match(ONE), lift = url.pathname === LIFT, reprice = url.pathname === REPRICE;
+  if (url.pathname !== LIST && !one && !lift && !reprice) return null;
   const operator = ctx.membershipAuthorityOperator;
   if (!operator) return json({ error: "not found" }, 404);
-  if (req.method !== (one || lift ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
+  if (req.method !== (one || lift || reprice ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
   const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
   if (!user) return json({ error: "unauthorized" }, 401);
   if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
@@ -4045,7 +4273,7 @@ var handleAdminMembershipSeats = async (req, url, env, ctx) => {
   } catch {
     return json({ error: "the membership authority is not hosted by this deployment" }, 404);
   }
-  if (lift) {
+  if (lift || reprice) {
     let body;
     try {
       body = await req.json();
@@ -4053,14 +4281,16 @@ var handleAdminMembershipSeats = async (req, url, env, ctx) => {
       return json({ error: "chapterId and runtime are required" }, 400);
     }
     const appId = body.appId ?? body.chapterId;
-    if (typeof body.chapterId !== "string" || !SCOPE.test(body.chapterId) || typeof appId !== "string" || !SCOPE.test(appId) || typeof body.runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(body.runtime)) {
-      return json({ error: "chapterId and runtime are required" }, 400);
+    if (typeof body.chapterId !== "string" || !SCOPE.test(body.chapterId) || typeof appId !== "string" || !SCOPE.test(appId) || typeof body.runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(body.runtime) || reprice && (typeof body.skuId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/.test(body.skuId))) {
+      return json({ error: reprice ? "chapterId, runtime and skuId are required" : "chapterId and runtime are required" }, 400);
     }
+    const scope2 = { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime: body.runtime };
     try {
-      return json({ ok: true, ...await liftSeatPurchaseWindow(db, { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime: body.runtime }, Date.now()) });
+      if (reprice) return json({ ok: true, ...await lowerSeatPrice(db, { ...scope2, skuId: String(body.skuId) }, Date.now()) });
+      return json({ ok: true, ...await liftSeatPurchaseWindow(db, scope2, Date.now()) });
     } catch (error) {
       const code = error.code;
-      return json({ error: "purchase window lift is pending; retry to confirm", ...code ? { code } : {} }, code ? 409 : 503);
+      return json({ error: `${reprice ? "seat reprice" : "purchase window lift"} is pending; retry to confirm`, ...code ? { code } : {} }, code ? 409 : 503);
     }
   }
   if (!one) {
@@ -4096,8 +4326,8 @@ var handleAdminMembershipSeats = async (req, url, env, ctx) => {
 var LIMIT = 200;
 var text2 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
 var instant = (value) => {
-  const at = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
-  return Number.isSafeInteger(at) && at >= 0 ? at : void 0;
+  const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+  return Number.isSafeInteger(at2) && at2 >= 0 ? at2 : void 0;
 };
 function provenance(row2) {
   const source = text2(row2.source), actor = text2(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
@@ -6470,7 +6700,7 @@ var handleMe = async (req, url, env, ctx) => {
     } catch {
     }
   }
-  return json({ ...base, memberAccess, membershipRestart, application: member?.application ?? null, namedSeatsEnabled: Boolean(memberAccess && ctx.membershipAuthority?.namedSeats && member?.source.stripeSubscriptionId && member.source.status !== "submitted") });
+  return json({ ...base, memberAccess, membershipRestart, application: member?.application ?? null, namedSeatsEnabled: Boolean(ctx.membershipAuthority?.namedSeats && member?.application.paid && member.source.status !== "submitted") });
 };
 var handleCrm = async (req, url, env, ctx) => {
   const crmBase = ctx.crmBase;
@@ -9468,6 +9698,7 @@ async function namedSeatOfferDigest(offer) {
   ])));
   return [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
 }
+var at = (value) => Number.isSafeInteger(value) ? Number(value) : void 0;
 async function readNamedSeatOffer(db, input, now) {
   membershipClock(now);
   await loadMembershipAuthorityState(db, input);
@@ -9490,10 +9721,19 @@ async function readNamedSeatOffer(db, input, now) {
       seatId: String(seat.id),
       status: String(seat.status),
       recipientName: String(seat.recipientName),
-      recipientEmail: String(seat.recipientEmailNormalized)
+      recipientEmail: String(seat.recipientEmailNormalized),
+      recipientState: namedSeatRecipientState(seat),
+      ...at(seat.purchasedAt) !== void 0 ? { purchasedAt: at(seat.purchasedAt) } : {},
+      ...at(seat.acceptedAt) !== void 0 ? { acceptedAt: at(seat.acceptedAt) } : {},
+      ...seat.status === "active" && at(seat.journeyApprovedAt) !== void 0 ? { joinedAt: at(seat.journeyApprovedAt) } : {}
     } } : {}
   };
-  return { ...offer, digest: await namedSeatOfferDigest(offer), purchaseWindowed: offering.seatPurchaseWindowCalendarMonths !== void 0 };
+  return {
+    ...offer,
+    digest: await namedSeatOfferDigest(offer),
+    included: offering.seatPriceCents === 0,
+    purchaseWindowed: offering.seatPurchaseWindowCalendarMonths !== void 0
+  };
 }
 
 // src/named-seat-request.ts
@@ -9569,8 +9809,9 @@ var handleNamedSeat = async (req, url, env, ctx) => {
     if (recipientName.length < 2 || /[\u0000-\u001f\u007f]/.test(body.recipientName) || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(recipientEmail) || recipientEmail === normalizeChapterEmail(user.email)) {
       return json({ error: "a valid name and email for someone other than the purchaser are required" }, 400);
     }
-    if (!offer.eligible || body.quoteDigest !== offer.digest) return json({ error: "seat offer changed or is unavailable; refresh before paying" }, 409);
-    if (!group?.stripePublishableKey || !group.refundPolicyText || !group.merchantDisclosureText) return json({ error: "seat checkout disclosures unavailable" }, 503);
+    const granted = offer.included && offer.seat !== void 0 && offer.seat.recipientEmail === recipientEmail && offer.seat.recipientName === recipientName && ["pending_acceptance", "pending_approval", "pending_primary", "active"].includes(offer.seat.status);
+    if (!offer.eligible && !granted || body.quoteDigest !== offer.digest) return json({ error: "seat offer changed or is unavailable; refresh before paying" }, 409);
+    if (!group?.refundPolicyText || !group.merchantDisclosureText || !offer.included && !group.stripePublishableKey) return json({ error: "seat checkout disclosures unavailable" }, 503);
     const consentId = `${offer.membershipId}:named-seat-consent`;
     const prior = await membershipLoad(db, "namedSeatConsents", consentId);
     const attrs = {
@@ -9609,7 +9850,7 @@ var handleNamedSeat = async (req, url, env, ctx) => {
     }
     return json({
       ...receipt,
-      publishableKey: String(group.stripePublishableKey),
+      ...group.stripePublishableKey ? { publishableKey: String(group.stripePublishableKey) } : {},
       lineItems: { standardCents: offer.amountCents, discountCents: 0, dueTodayCents: offer.amountCents }
     });
   } catch {
@@ -11406,7 +11647,7 @@ async function networkApplicationAction(opts) {
     if (app.status !== input.expectedStage || !applicationActionStages(app, env, ctx).includes(input.stage)) {
       return json({ error: "application action is no longer available; reload", code: "invalid_application_action" }, 409);
     }
-    const at = Date.now();
+    const at2 = Date.now();
     const meta = { [ACTION_META]: {
       version: 1,
       state: "pending",
@@ -11426,7 +11667,7 @@ async function networkApplicationAction(opts) {
         recordId: record4.id,
         kind: "note",
         authorId: `network:${sourceId}`,
-        createdAt: at,
+        createdAt: at2,
         body: `Requested ${input.expectedStage} \u2192 ${input.stage} from ${sourceId}`,
         meta
       } },
@@ -11435,7 +11676,7 @@ async function networkApplicationAction(opts) {
         recordId: record4.id,
         kind: "note",
         authorId: `network:${sourceId}`,
-        createdAt: at,
+        createdAt: at2,
         body: "Application operation reconciliation",
         meta: { state: "pending", activityId }
       } }
@@ -12282,9 +12523,9 @@ function normalizeNetworkIdentity(kind, value) {
   return trimmed;
 }
 function emailLooksReal(value) {
-  const at = value.lastIndexOf("@");
-  if (at <= 0 || at === value.length - 1) return false;
-  const domain = value.slice(at + 1).toLowerCase();
+  const at2 = value.lastIndexOf("@");
+  if (at2 <= 0 || at2 === value.length - 1) return false;
+  const domain = value.slice(at2 + 1).toLowerCase();
   return !domain.endsWith(".invalid") && domain !== "example.com" && domain !== "example.test";
 }
 function validateNetworkPersonImport(input, allowedChapterIds) {
@@ -14603,7 +14844,9 @@ async function reconcileMembershipRenewal(db, input, now) {
     if (start !== member.termEndsAt || start > now + 3e4) membershipFail("membership_renewal_period_gap");
     const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
     if (seat) requireMembershipScope(seat, input);
-    const billedSeat = seat && seat.providerSubscriptionId === member.providerSubscriptionId && seat.providerSubscriptionItemId && !["refunded", "refund_pending"].includes(String(seat.status)) ? seat : void 0;
+    const openSeat = seat && !["refunded", "refund_pending", "canceled"].includes(String(seat.status)) ? seat : void 0;
+    const billedSeat = openSeat && openSeat.providerSubscriptionId === member.providerSubscriptionId && openSeat.providerSubscriptionItemId ? openSeat : void 0;
+    const carriedSeat = billedSeat ?? (openSeat && namedSeatIncluded(openSeat) && openSeat.purchasedAt !== void 0 ? openSeat : void 0);
     const prices = [String(member.providerPriceId), ...billedSeat ? [String(billedSeat.priceId)] : []].sort();
     const amount = Number(member.renewalAmountCents) + Number(billedSeat?.amountCents ?? 0);
     if (!Number.isSafeInteger(amount) || amount <= 0 || fact.invoiceTotalCents !== amount || JSON.stringify(lines.map((line) => line.priceId).sort()) !== JSON.stringify(prices)) membershipFail("membership_renewal_amount_mismatch");
@@ -14643,19 +14886,19 @@ async function reconcileMembershipRenewal(db, input, now) {
       evidenceGuard
     ];
     if (seat) guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision } });
-    if (billedSeat?.entitlementId) {
-      const seatEntitlement = await membershipLoad(db, "networkEntitlement", String(billedSeat.entitlementId));
+    if (carriedSeat?.entitlementId) {
+      const seatEntitlement = await membershipLoad(db, "networkEntitlement", String(carriedSeat.entitlementId));
       requireMembershipScope(seatEntitlement, input);
       guards.push({ ns: "networkEntitlement", id: String(seatEntitlement.id), exists: true, equals: { revision: seatEntitlement.revision } });
       ops.push(
-        membershipUpdate("networkSeat", String(billedSeat.id), {
+        membershipUpdate("networkSeat", String(carriedSeat.id), {
           ...paid ? { termStartedAt: start, termEndsAt: end } : {},
-          revision: Number(billedSeat.revision) + 1,
+          revision: Number(carriedSeat.revision) + 1,
           updatedAt: now
         }),
         membershipUpdate("networkEntitlement", String(seatEntitlement.id), {
           ...paid ? { termStartedAt: start, termEndsAt: end } : {},
-          status: billedSeat.journeyApprovedAt ? entitlementStatus : seatEntitlement.status,
+          status: carriedSeat.journeyApprovedAt ? entitlementStatus : seatEntitlement.status,
           revision: Number(seatEntitlement.revision) + 1,
           updatedAt: now
         })
@@ -14765,84 +15008,6 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   return membershipFail("membership_billing_retry_required");
 }
 
-// src/membership-seat-reservation.ts
-async function recipientKey(input, email) {
-  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([input.appId, input.chapterId, input.environment, input.runtime, email])));
-  return `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
-}
-async function reserveNamedMembershipSeat(db, input, now) {
-  membershipClock(now);
-  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
-  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
-  const purchaser = normalizeChapterEmail(typeof input.purchaserEmail === "string" ? input.purchaserEmail : "");
-  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !purchaser || email === purchaser || !/^price_[A-Za-z0-9_]+$/.test(input.priceId) || !/^user_[A-Za-z0-9_]+$/.test(input.purchaserUserId)) membershipFail("invalid_named_seat_recipient");
-  const state = await loadMembershipAuthorityState(db, input);
-  const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
-  requireMembershipScope(member, input);
-  if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
-  const id6 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  let seat = await membershipLoad(db, "networkSeat", id6);
-  if (!seat) {
-    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
-    const purchaseEndsAt = seatPurchaseDeadline(offering, member);
-    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
-      membershipFail("named_seat_purchase_unavailable");
-    }
-    const attrs = {
-      id: id6,
-      ...membershipScope(input),
-      primaryMembershipId: memberId,
-      recipientName: name,
-      recipientEmailNormalized: email,
-      purchaserUserId: input.purchaserUserId,
-      recipientClaimId: claimId,
-      priceId: input.priceId,
-      primaryPriceId: member.providerPriceId,
-      amountCents: offering.seatPriceCents,
-      currency: offering.currency,
-      interval: offering.interval,
-      providerCustomerId: member.providerCustomerId,
-      providerSubscriptionId: member.providerSubscriptionId,
-      status: "payment_pending",
-      preparedAt: now,
-      termEndsAt: member.termEndsAt,
-      seatPurchaseEndsAt: purchaseEndsAt,
-      offeringSnapshot: offering,
-      revision: 1,
-      createdAt: now,
-      updatedAt: now
-    };
-    try {
-      await db.transact([
-        membershipUpdate("networkSeat", id6, attrs),
-        membershipUpdate("networkSeatRecipient", claimId, {
-          id: claimId,
-          appId: input.appId,
-          chapterId: input.chapterId,
-          environment: input.environment,
-          runtime: input.runtime,
-          seatId: id6,
-          recipientEmailNormalized: email,
-          createdAt: now
-        }),
-        membershipUpdate("networkMembership", memberId, { namedSeatId: id6, revision: Number(member.revision) + 1, updatedAt: now })
-      ], { mutationId: `named-seat-reserve:${id6}`, guards: [
-        { ns: "networkSeat", id: id6, exists: false },
-        { ns: "networkSeatRecipient", id: claimId, exists: false },
-        { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
-        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
-      ] });
-    } catch (error) {
-      if (error.code !== "transact_guard_failed") throw error;
-    }
-    seat = await membershipLoad(db, "networkSeat", id6);
-    if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
-  }
-  requireMembershipScope(seat, input);
-  if (seat.primaryMembershipId !== memberId || seat.recipientName !== name || seat.recipientEmailNormalized !== email || seat.priceId !== input.priceId || seat.purchaserUserId !== input.purchaserUserId) membershipFail("named_seat_purchase_conflict");
-  return seat;
-}
-
 // src/membership-seat-stripe.ts
 var import_stripe15 = require("@odla-ai/stripe");
 var reject7 = () => {
@@ -14930,6 +15095,7 @@ async function attachNamedSeatStripeRenewal(sk, seat) {
 // src/membership-seat-checkout.ts
 async function prepareNamedMembershipSeatPayment(db, input, secretKey, now) {
   let seat = await reserveNamedMembershipSeat(db, input, now);
+  if (namedSeatIncluded(seat)) membershipFail("named_seat_included");
   const state = await loadMembershipAuthorityState(db, input);
   const member = await membershipLoad(db, "networkMembership", seat.primaryMembershipId);
   requireMembershipScope(member, input);
@@ -15136,7 +15302,7 @@ async function recordRecipient(db, input, now, approve) {
     requireMembershipScope(member, input);
     const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
     requireMembershipScope(entitlement, input);
-    if (!["pending_acceptance", "pending_approval", "pending_primary", "active"].includes(String(seat.status)) || !["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now >= Number(member.termEndsAt) || !seat.providerPaymentIntentId || !seat.providerSubscriptionItemId) membershipFail("named_seat_acceptance_unavailable");
+    if (!["pending_acceptance", "pending_approval", "pending_primary", "active"].includes(String(seat.status)) || !["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now >= Number(member.termEndsAt) || !namedSeatSettled(seat)) membershipFail("named_seat_acceptance_unavailable");
     if (seat.acceptedAt === void 0) {
       if (approve || normalizeChapterEmail(input.verifiedRecipientEmail) !== seat.recipientEmailNormalized) {
         membershipFail("named_seat_recipient_verification_required");
@@ -15323,6 +15489,15 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
   };
   if (action === "seat-accept") return acceptNamedSeatRecipient(db, recipientInput, now);
   if (action === "seat-approve") return approveNamedSeatRecipient(db, recipientInput, now);
+  const checkout = {
+    ...target,
+    priceId: peer.seatPriceId,
+    recipientName: String(input.recipientName),
+    recipientEmail: String(input.recipientEmail),
+    purchaserEmail: String(input.purchaserEmail),
+    purchaserUserId: String(input.purchaserUserId)
+  };
+  if (action === "seat-checkouts" && namedSeatIncluded(await reserveNamedMembershipSeat(db, checkout, now))) return grantIncludedNamedSeat(db, checkout, now);
   const secret = await getVaultSecret(db, stripeSecretName);
   if (!secret) throw new Error("network Stripe provider is unavailable");
   if (action === "seat-decline") {
@@ -15338,14 +15513,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     return { seatId: seat.id, status: "refunded", refundedCents: refunded.refundedCents, subscriptionCanceled: false };
   }
   if (action === "seat-operator-refund") return refundNamedSeatByOperator(db, { ...target, seatId: String(input.seatId) }, secret, now);
-  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, {
-    ...target,
-    priceId: peer.seatPriceId,
-    recipientName: String(input.recipientName),
-    recipientEmail: String(input.recipientEmail),
-    purchaserEmail: String(input.purchaserEmail),
-    purchaserUserId: String(input.purchaserUserId)
-  }, secret, now);
+  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, checkout, secret, now);
   const evidence = { ...target, seatId: String(input.seatId), eventId: String(input.eventId) };
   if (action === "seat-payments") {
     const receipt = await confirmNamedMembershipSeatPayment(db, evidence, now);
@@ -16201,13 +16369,13 @@ async function requestNamedSeatDecline(options) {
     verifiedRecipientEmail: options.verifiedRecipientEmail
   });
   const seat = result.seat;
-  if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents <= 0) throw new Error("invalid named seat refund receipt");
+  if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents < 0) throw new Error("invalid named seat refund receipt");
   return seat;
 }
 async function requestNamedSeatOperatorRefund(options) {
   const result = await requestAuthority(options, "seat-operator-refund", { applicationId: options.applicationId, skuId: options.skuId, seatId: options.seatId });
   const seat = result.seat;
-  if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents <= 0) throw new Error("invalid named seat refund receipt");
+  if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents < 0) throw new Error("invalid named seat refund receipt");
   return seat;
 }
 async function requestNamedSeatReservation(options) {
@@ -16221,13 +16389,13 @@ async function requestNamedSeatReservation(options) {
   });
   const seat = result.seat;
   const expected = (await membershipOfferIdForRequest({ ...options, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  if (!seat || seat.seatId !== expected || !Number.isSafeInteger(seat.amountCents) || seat.amountCents <= 0 || !/^[a-z]{3}$/.test(seat.currency) || !Number.isSafeInteger(seat.termEndsAt)) throw new Error("invalid seat reservation receipt");
+  if (!seat || seat.seatId !== expected || !Number.isSafeInteger(seat.amountCents) || seat.amountCents < 0 || !/^[a-z]{3}$/.test(seat.currency) || !Number.isSafeInteger(seat.termEndsAt)) throw new Error("invalid seat reservation receipt");
   return { seatId: seat.seatId, amountCents: seat.amountCents, currency: seat.currency, termEndsAt: seat.termEndsAt };
 }
 async function requestNamedSeatOffer(options) {
   const result = await requestAuthority(options, "seat-offer", { applicationId: options.applicationId, skuId: options.skuId });
   const offer = result.seat;
-  if (!offer || offer.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(offer.amountCents) || offer.amountCents <= 0 || !/^[a-z]{3}$/.test(offer.currency) || !["month", "year"].includes(offer.interval) || typeof offer.eligible !== "boolean" || typeof offer.autoRenew !== "boolean" || !Number.isSafeInteger(offer.termEndsAt) || !Number.isSafeInteger(offer.purchaseEndsAt) || offer.purchaseWindowed !== void 0 && typeof offer.purchaseWindowed !== "boolean" || offer.digest !== await namedSeatOfferDigest(offer)) throw new Error("invalid named seat offer");
+  if (!offer || offer.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(offer.amountCents) || offer.amountCents < 0 || offer.included !== (offer.amountCents === 0) || !/^[a-z]{3}$/.test(offer.currency) || !["month", "year"].includes(offer.interval) || typeof offer.eligible !== "boolean" || typeof offer.autoRenew !== "boolean" || !Number.isSafeInteger(offer.termEndsAt) || !Number.isSafeInteger(offer.purchaseEndsAt) || offer.purchaseWindowed !== void 0 && typeof offer.purchaseWindowed !== "boolean" || offer.digest !== await namedSeatOfferDigest(offer)) throw new Error("invalid named seat offer");
   return offer;
 }
 async function requestNamedSeatInvitation(options) {
@@ -16263,7 +16431,8 @@ async function requestNamedSeatCheckout(options) {
   });
   const seat = result.seat;
   const expected = (await membershipOfferIdForRequest({ ...options, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  if (!seat || seat.seatId !== expected || !/^pi_[A-Za-z0-9_]+$/.test(seat.paymentIntentId) || typeof seat.clientSecret !== "string" || !Number.isSafeInteger(seat.amountCents) || seat.amountCents <= 0 || !/^[a-z]{3}$/.test(seat.currency) || !Number.isSafeInteger(seat.termEndsAt) || !["payment_processing", "renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status)) {
+  const included = seat?.amountCents === 0;
+  if (!seat || seat.seatId !== expected || !Number.isSafeInteger(seat.amountCents) || seat.amountCents < 0 || !/^[a-z]{3}$/.test(seat.currency) || !Number.isSafeInteger(seat.termEndsAt) || (included ? seat.included !== true || seat.paymentIntentId !== void 0 || seat.clientSecret !== void 0 || !["pending_acceptance", "pending_approval", "pending_primary", "active"].includes(seat.status) : seat.included !== void 0 || !/^pi_[A-Za-z0-9_]+$/.test(String(seat.paymentIntentId)) || typeof seat.clientSecret !== "string" || !["payment_processing", "renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status))) {
     throw new Error("invalid named seat checkout receipt");
   }
   return seat;