@odla-ai/chapter 0.54.0 → 0.54.2

package/dist/index.js

@@ -1101,6 +1101,7 @@ Warmly,
 ${name}`;
   return {
     adminNotification: {
+      enabled: true,
       subject: `New application: {{firstName}} {{lastName}}`,
       text: `A new application came in for ${name}.
 
@@ -1111,18 +1112,21 @@ Tier: {{tier}}
 Review it: {{adminUrl}}`
     },
     submitConfirmation: {
+      enabled: true,
       subject: `We received your application to ${name}`,
       text: `Hi {{firstName}},
 
 Thanks for applying to ${name}. {{submitNextStep}}${sign}`
     },
     paymentConfirmation: {
+      enabled: true,
       subject: `Welcome to ${name}`,
       text: `Hi {{firstName}},
 
 Your membership payment{{paymentAmountSummary}} is confirmed. {{paymentNextStep}}${sign}`
     },
     prepEmail: {
+      enabled: true,
       subject: `Your ${name} intro call`,
       text: `Hi {{firstName}},
 
@@ -1131,18 +1135,19 @@ You are all set{{paymentAmountSummary}}. Looking forward to our call on {{startA
 Join here: {{meetingLink}}${sign}`
     },
     onboardingInvite: {
+      enabled: true,
       subject: `You're in, ${name}`,
       text: `Hi {{firstName}},
 
 Welcome to ${name}. Your member area is here: {{membersUrl}}${sign}`
     },
-    seatAccepted: SEAT_ACCEPTED_TEMPLATE
+    seatAccepted: { ...SEAT_ACCEPTED_TEMPLATE, enabled: true }
   };
 }
 function buildGroupSeed(config) {
   const prices = config.prices;
   const emails = config.emails;
-  const policy = config.policy ?? {};
+  const policy2 = config.policy ?? {};
   const scheduling = {
     ...DEFAULT_SCHEDULING,
     ...config.scheduling ?? {},
@@ -1157,17 +1162,17 @@ function buildGroupSeed(config) {
     interval: prices?.interval ?? "year",
     notificationEmail: emails?.notificationEmail ?? "",
     replyTo: emails?.replyTo ?? emails?.notificationEmail ?? "",
-    disclaimerText: policy.disclaimerText ?? "",
-    refundPolicyText: policy.refundPolicyText ?? "",
-    merchantDisclosureText: policy.merchantDisclosureText ?? "",
-    trustCopy: policy.trustCopy ?? "",
+    disclaimerText: policy2.disclaimerText ?? "",
+    refundPolicyText: policy2.refundPolicyText ?? "",
+    merchantDisclosureText: policy2.merchantDisclosureText ?? "",
+    trustCopy: policy2.trustCopy ?? "",
     emailTemplates: emails?.templates ?? defaultEmailTemplates(config.name),
     schedulingJson: scheduling
   };
   if (emails?.debugEmail) row2.debugEmail = emails.debugEmail;
   if (emails?.fromName?.trim()) row2.fromName = emails.fromName.trim();
-  if (policy.commitmentText) row2.commitmentText = policy.commitmentText;
-  if (policy.normsText) row2.normsText = policy.normsText;
+  if (policy2.commitmentText) row2.commitmentText = policy2.commitmentText;
+  if (policy2.normsText) row2.normsText = policy2.normsText;
   return row2;
 }
 
@@ -2476,13 +2481,13 @@ function firstPrice(object2) {
   return { ...priceId ? { priceId } : {}, ...quantity !== void 0 ? { quantity } : {} };
 }
 function normalizeNetworkCommercialStripeEvent(input, digest) {
-  const event = raw(input);
-  const eventId = providerId(event.id, "evt_") ?? "";
-  const eventType = text(event.type) ?? "";
-  const object2 = raw(raw(event.data).object);
+  const event2 = raw(input);
+  const eventId = providerId(event2.id, "evt_") ?? "";
+  const eventType = text(event2.type) ?? "";
+  const object2 = raw(raw(event2.data).object);
   const objectId = providerId(object2.id) ?? "";
   const candidates = metadataCandidates(object2);
-  const identity = {};
+  const identity2 = {};
   const identityKeys2 = {
     appId: "odlaAppId",
     chapterId: "chapterId",
@@ -2492,7 +2497,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
   };
   for (const [target, source] of Object.entries(identityKeys2)) {
     const value = metadataValue(candidates, source);
-    if (value) identity[target] = value;
+    if (value) identity2[target] = value;
   }
   let objectKind = "ignored";
   if (eventType.startsWith("customer.subscription.")) objectKind = "subscription";
@@ -2514,11 +2519,11 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
     eventId,
     digest,
     eventType,
-    eventCreated: integer(event.created) ?? 0,
-    livemode: event.livemode === true,
+    eventCreated: integer(event2.created) ?? 0,
+    livemode: event2.livemode === true,
     objectKind,
     objectId,
-    identity,
+    identity: identity2,
     ...metadataValue(candidates, "applicationId") ? { applicationId: metadataValue(candidates, "applicationId") } : {},
     ...metadataValue(candidates, "personId") ? { personId: metadataValue(candidates, "personId") } : {},
     ...metadataValue(candidates, "membershipId") ? { membershipId: metadataValue(candidates, "membershipId") } : {},
@@ -3365,15 +3370,15 @@ function membershipDiscountPolicyVersion(value) {
 // src/membership-offer.ts
 function createMembershipCommercialOffer(input) {
   const offering = membershipOfferingVersion(input.offering);
-  const policy = input.discountPolicy === void 0 || input.discountPolicy === null ? null : membershipDiscountPolicyVersion(input.discountPolicy);
+  const policy2 = input.discountPolicy === void 0 || input.discountPolicy === null ? null : membershipDiscountPolicyVersion(input.discountPolicy);
   const now = input.now;
   if (!Number.isSafeInteger(now) || now < 0 || !Number.isSafeInteger(input.approvedFoundingCount) || input.approvedFoundingCount < 0) {
     throw new TypeError("invalid offer clock or founding count");
   }
   if (offering.status !== "published" || now < offering.effectiveFrom || offering.effectiveUntil !== void 0 && now >= offering.effectiveUntil) throw new TypeError("offering is unavailable");
-  if (policy && policy.chapterId !== offering.chapterId) throw new TypeError("policy belongs to another chapter");
-  const founding = Boolean(policy && policy.status === "published" && offering.basePriceCents > 0 && policy.cohortEligibleSkuIds.includes(offering.baseSkuId) && now >= policy.qualifyingStartsAt && now < policy.qualifyingEndsAt && input.approvedFoundingCount < policy.softTarget);
-  const earned = founding ? policy : null;
+  if (policy2 && policy2.chapterId !== offering.chapterId) throw new TypeError("policy belongs to another chapter");
+  const founding = Boolean(policy2 && policy2.status === "published" && offering.basePriceCents > 0 && policy2.cohortEligibleSkuIds.includes(offering.baseSkuId) && now >= policy2.qualifyingStartsAt && now < policy2.qualifyingEndsAt && input.approvedFoundingCount < policy2.softTarget);
+  const earned = founding ? policy2 : null;
   const initialTermEndsAt = offering.term.kind === "fixed_end" ? offering.term.endsAt : addMembershipCalendarMonths(now, offering.term.months);
   if (initialTermEndsAt <= now) throw new TypeError("membership service term has ended");
   if (offering.term.kind === "rolling_months" && offering.term.months !== (offering.interval === "year" ? 12 : 1)) {
@@ -3465,15 +3470,15 @@ async function previewMembershipCommercialOffer(db, input) {
   }
   if (!Number.isSafeInteger(input.now) || input.now < 0) reject("invalid_offer_window");
   const state = await authoritativeState(db, input);
-  const { offering, policy } = await currentPolicy(db, input, false, state);
-  const approvedFoundingCount = policy ? state.cohortCounts[policy.cohortLabel] ?? 0 : 0;
+  const { offering, policy: policy2 } = await currentPolicy(db, input, false, state);
+  const approvedFoundingCount = policy2 ? state.cohortCounts[policy2.cohortLabel] ?? 0 : 0;
   if (!Number.isSafeInteger(approvedFoundingCount) || Number(approvedFoundingCount) < 0) reject("invalid_cohort_count");
   const contract = createMembershipCommercialOffer({
     offering,
-    discountPolicy: policy,
+    discountPolicy: policy2,
     approvedFoundingCount: Number(approvedFoundingCount),
     now: input.now,
-    couponId: await membershipDiscountCouponId(input, policy?.id)
+    couponId: await membershipDiscountCouponId(input, policy2?.id)
   });
   const discount = contract.billingTerms.discount;
   return {
@@ -3502,12 +3507,12 @@ async function currentPolicy(db, input, restartAware, state) {
   });
   if (!Array.isArray(rows3.membershipOfferingVersion) || !Array.isArray(rows3.discountPolicyVersion) || rows3.membershipOfferingVersion.length >= 200 || rows3.discountPolicyVersion.length >= 200) return reject("policy_history_incomplete");
   const offerings = rows3.membershipOfferingVersion.map((row2) => membershipOfferingVersion(row2.snapshot)).filter((offer) => offer.chapterId === input.chapterId && offer.baseSkuId === input.skuId && offer.status === "published" && input.now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || input.now < offer.effectiveUntil));
-  const policies = rows3.discountPolicyVersion.map((row2) => membershipDiscountPolicyVersion(row2.snapshot)).filter((policy2) => policy2.chapterId === input.chapterId && policy2.status === "published" && policy2.cohortEligibleSkuIds.includes(input.skuId) && input.now >= policy2.qualifyingStartsAt && input.now < policy2.qualifyingEndsAt);
+  const policies = rows3.discountPolicyVersion.map((row2) => membershipDiscountPolicyVersion(row2.snapshot)).filter((policy3) => policy3.chapterId === input.chapterId && policy3.status === "published" && policy3.cohortEligibleSkuIds.includes(input.skuId) && input.now >= policy3.qualifyingStartsAt && input.now < policy3.qualifyingEndsAt);
   const offering = offerings.sort((a, b) => b.version - a.version)[0];
   const restart = restartAware && input.applicationId ? await load(db, "membershipRestart", (await membershipOfferIdForRequest({ ...input, applicationId: input.applicationId, requestId: "checkout_binding" })).replace(/^offer_/, "membership_")) : void 0;
-  const policy = restart ? void 0 : policies.sort((a, b) => b.version - a.version)[0];
-  if (!offering || offerings.filter((item) => item.version === offering.version).length !== 1 || policy && policies.filter((item) => item.version === policy.version).length !== 1) reject("ambiguous_membership_policy");
-  return { offering, policy };
+  const policy2 = restart ? void 0 : policies.sort((a, b) => b.version - a.version)[0];
+  if (!offering || offerings.filter((item) => item.version === offering.version).length !== 1 || policy2 && policies.filter((item) => item.version === policy2.version).length !== 1) reject("ambiguous_membership_policy");
+  return { offering, policy: policy2 };
 }
 async function issueMembershipCommercialOffer(db, input) {
   validate(input);
@@ -3515,15 +3520,15 @@ async function issueMembershipCommercialOffer(db, input) {
   const state = await authoritativeState(db, input);
   const existing = await load(db, "membershipCheckoutOffer", input.offerId);
   if (existing) return restore(existing, input);
-  const { offering, policy } = await currentPolicy(db, input, true, state);
-  const approvedFoundingCount = policy ? state.cohortCounts[policy.cohortLabel] ?? 0 : 0;
+  const { offering, policy: policy2 } = await currentPolicy(db, input, true, state);
+  const approvedFoundingCount = policy2 ? state.cohortCounts[policy2.cohortLabel] ?? 0 : 0;
   if (!Number.isSafeInteger(approvedFoundingCount) || Number(approvedFoundingCount) < 0) reject("invalid_cohort_count");
   const contract = createMembershipCommercialOffer({
     offering,
-    discountPolicy: policy,
+    discountPolicy: policy2,
     approvedFoundingCount: Number(approvedFoundingCount),
     now: input.now,
-    couponId: await membershipDiscountCouponId(input, policy?.id)
+    couponId: await membershipDiscountCouponId(input, policy2?.id)
   });
   const value = {
     id: input.offerId,
@@ -5305,7 +5310,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
   };
   if (action === "seat-accept") return acceptNamedSeatRecipient(db, recipientInput, now);
   if (action === "seat-approve") return approveNamedSeatRecipient(db, recipientInput, now);
-  const checkout = {
+  const checkout2 = {
     ...target,
     priceId: peer.seatPriceId,
     recipientName: String(input.recipientName),
@@ -5313,7 +5318,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     purchaserEmail: String(input.purchaserEmail),
     purchaserUserId: String(input.purchaserUserId)
   };
-  if (action === "seat-checkouts" && namedSeatIncluded(await reserveNamedMembershipSeat(db, checkout, now))) return grantIncludedNamedSeat(db, checkout, now);
+  if (action === "seat-checkouts" && namedSeatIncluded(await reserveNamedMembershipSeat(db, checkout2, now))) return grantIncludedNamedSeat(db, checkout2, now);
   const secret = await getVaultSecret(db, stripeSecretName);
   if (!secret) throw new Error("network Stripe provider is unavailable");
   if (action === "seat-decline") {
@@ -5329,7 +5334,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     return { seatId: seat.id, status: "refunded", refundedCents: refunded.refundedCents, subscriptionCanceled: false };
   }
   if (action === "seat-operator-refund") return refundNamedSeatByOperator(db, { ...target, seatId: String(input.seatId) }, secret, now);
-  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, checkout, secret, now);
+  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, checkout2, secret, now);
   const evidence = { ...target, seatId: String(input.seatId), eventId: String(input.eventId) };
   if (action === "seat-payments") {
     const receipt = await confirmNamedMembershipSeatPayment(db, evidence, now);
@@ -5400,9 +5405,9 @@ function createMembershipAuthorityHandler(options) {
   const identities = /* @__PURE__ */ new Set();
   for (const peer of peers) {
     if (!/^[a-z0-9][a-z0-9-]{1,62}$/.test(peer.appId) || !SAFE.test(peer.chapterId) || !/^[a-z0-9][a-z0-9-]{1,31}$/.test(peer.environment) || !/^[a-z0-9]{2,12}$/.test(peer.runtime) || !/^[A-Za-z][A-Za-z0-9_-]{1,127}$/.test(peer.secretName)) throw new TypeError("invalid authority peer");
-    const identity = `${peer.appId}:${peer.runtime}`;
-    if (identities.has(identity)) throw new TypeError("ambiguous authority peer");
-    identities.add(identity);
+    const identity2 = `${peer.appId}:${peer.runtime}`;
+    if (identities.has(identity2)) throw new TypeError("ambiguous authority peer");
+    identities.add(identity2);
     if (peer.seatPriceId !== void 0 && !/^price_[A-Za-z0-9]+$/.test(peer.seatPriceId)) throw new TypeError("invalid seat Price");
   }
   return async (req) => {
@@ -6714,6 +6719,41 @@ async function createBuilderLibraryEnvelope(document) {
   return { document, digest: await builderLibraryDigest(document) };
 }
 
+// src/email-retirement.ts
+function isRetiredEmailCopy(subject, text6) {
+  const subjectCopy = subject.trimStart().replace(/^\[dev\]\s*/i, "");
+  const bodyCopy = text6.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
+  return /^\(\s*unused\s*:/i.test(subjectCopy) || /^Unused\.\s*Switched off\b/i.test(bodyCopy);
+}
+
+// src/email.ts
+import { validateEmailCopy } from "@odla-ai/crm";
+
+// src/email-events.ts
+var identity = ["firstName", "lastName", "email", "phone", "state"];
+var policy = ["refundPolicyText", "commitmentText", "normsText"];
+var checkout = ["tier", "tierName", "paymentAmount", "paymentAmountSummary"];
+var optionalVariables = ["phone", "state", "paymentAmount", "paymentAmountSummary"];
+var event = (label, trigger, audience, variables, requiresTier = true) => ({ label, trigger, audience, variables: [...variables, ...policy], optionalVariables, requiresTier });
+var CHAPTER_EMAIL_EVENTS = {
+  adminNotification: event("Application notification", "Application submitted or payment received, according to notification settings", "Administrator", [...identity, ...checkout, "adminUrl", "membersUrl"]),
+  submitConfirmation: event("Application receipt", "Application submitted", "Applicant", [...identity, ...checkout, "submitNextStep", "membersUrl"]),
+  paymentConfirmation: event("Payment confirmation", "Membership payment received", "Applicant", ["firstName", ...checkout, "paymentNextStep"]),
+  prepEmail: event("Call confirmation", "Introduction call booked", "Applicant", [...identity, ...checkout, "startAt", "endAt", "timezone", "meetUrl", "htmlLink", "meetingTime", "meetingLink"]),
+  onboardingInvite: event("Membership welcome", "Membership approved", "Member", ["firstName", "membersUrl", "tierName"]),
+  namedSeatInvitation: event("Gift membership invitation", "A gift membership is ready to be accepted", "Gift recipient", ["firstName", "purchaserName", "chapterName", "acceptBy", "joinUrl", "tierName"]),
+  seatAccepted: event("Gift accepted", "Gift recipient accepts their membership", "Purchaser", ["firstName", "purchaserName", "recipientName", "tierName", "chapterName", "membersUrl"])
+};
+function chapterEmailEvents(chapter) {
+  const base = chapter.mode === "hub" ? Object.fromEntries(Object.entries(chapter.crm.config.templates ?? {}).map(([key3, spec]) => [key3, {
+    label: key3,
+    trigger: "Administrator sends a message",
+    audience: "Selected contact",
+    variables: spec.vars
+  }])) : CHAPTER_EMAIL_EVENTS;
+  return { ...base, ...chapter.config.emails?.events };
+}
+
 // src/email.ts
 function render(template, vars) {
   return template.replace(/\{\{(\w+)\}\}/g, (_, key3) => vars[key3] ?? "");
@@ -6737,19 +6777,158 @@ function isAlreadySent(priorRows) {
 function planDelivery(input) {
   const tpl = input.group.emailTemplates?.[input.template];
   if (!tpl) return { deliver: false, reason: "template-missing" };
-  if (tpl.enabled === false && !input.force) return { deliver: false, reason: "disabled" };
+  if (typeof tpl.enabled !== "boolean") return { deliver: false, reason: "template-invalid", issues: ["Choose explicitly whether this email is enabled."] };
+  if (tpl.enabled !== true && !input.force) return { deliver: false, reason: "disabled" };
+  if (!/^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/.test(input.to)) return { deliver: false, reason: "recipient-invalid" };
   const vars = groupVars(input.group, input.vars);
+  if (isRetiredEmailCopy(String(tpl.subject ?? ""), String(tpl.text ?? ""))) return { deliver: false, reason: "template-retired" };
+  const event2 = input.event ?? CHAPTER_EMAIL_EVENTS[input.template];
+  const issues = validateEmailCopy(tpl, {
+    allowedVariables: event2?.variables,
+    optionalVariables: event2?.optionalVariables,
+    requiredVariables: event2?.requiresTier ? ["tierName"] : [],
+    values: vars,
+    tierId: vars.tierId
+  });
+  if (issues.length) return { deliver: false, reason: "template-invalid", issues: issues.map((issue) => issue.message) };
   const isProd = input.envName === "prod";
   const redirect = !isProd && !!input.group.debugEmail;
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
-  const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
+  const renderedSubject = render(tpl.subject, vars);
+  const renderedText = render(tpl.text, vars);
+  if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
+  if (validateEmailCopy({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
+  const subject = (redirect ? "[dev] " : "") + renderedSubject;
   const text6 = redirect ? `(dev redirect; original recipient: ${input.to})
 
-` + render(tpl.text, vars) : render(tpl.text, vars);
+` + renderedText : renderedText;
   return { deliver: true, transport, to, subject, text: text6, redirected: redirect };
 }
 
+// src/email-readiness.ts
+import { isEmailTierName, validateEmailCopy as validateEmailCopy2 } from "@odla-ai/crm";
+function validateEmailReadiness(input) {
+  const issues = [];
+  for (const key3 of Object.keys(input.templates)) if (!input.events[key3]) {
+    issues.push({ code: "event-undeclared", message: `Stored email ${key3} has no declared event. Review its trigger before using it.` });
+  }
+  if (input.tiersUnavailable) issues.push({ code: "tiers-unavailable", message: "Tier names could not be checked. Membership emails cannot send until their tier is resolved." });
+  for (const tier of input.tiers ?? []) {
+    if (!isEmailTierName(tier.name, tier.id)) issues.push({ code: "tier-name-invalid", message: `Tier ${tier.id} needs a recipient-facing display name.` });
+  }
+  const noTierNames = input.tiers !== void 0 && !input.tiers.some((tier) => isEmailTierName(tier.name, tier.id));
+  if (noTierNames && !input.tiersUnavailable) issues.push({ code: "tiers-missing", message: "No membership tiers have a recipient-facing display name." });
+  const events2 = Object.entries(input.events).map(([key3, event2]) => {
+    const template = input.templates[key3];
+    const problems = !template ? [{ code: "template-missing", message: "No email is configured for this event." }] : validateEmailCopy2(template, { allowedVariables: event2.variables });
+    if (template && typeof template.enabled !== "boolean") problems.push({ code: "enabled-missing", message: "Choose explicitly whether this email is enabled. Sending is blocked until then." });
+    if (template) {
+      const used = [...`${template.subject ?? ""}
+${template.text ?? ""}`.matchAll(/\{\{(\w+)\}\}/g)].map((match) => match[1]);
+      for (const name of used) if (name in input.groupValues && !input.groupValues[name]?.trim()) {
+        problems.push({ code: "value-missing", variable: name, message: `Add the ${name} used by this email.` });
+      }
+    }
+    if (event2.requiresTier && input.tiersUnavailable) problems.push({ code: "tiers-unavailable", message: "Tier names are unavailable; delivery checks will block unresolved memberships." });
+    else if (event2.requiresTier && noTierNames) problems.push({ code: "tiers-missing", message: "Configure the membership tier names needed by this event." });
+    return { ...event2, key: key3, status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready", issues: problems };
+  });
+  return { checkedAt: input.now ?? Date.now(), events: events2, issues };
+}
+
+// src/notify.ts
+import { validateEmailCopy as validateEmailCopy3 } from "@odla-ai/crm";
+
+// src/email-event-values.ts
+import { isEmailTierName as isEmailTierName2 } from "@odla-ai/crm";
+
+// src/tiers-store.ts
+function rowToTier(row2, groupId) {
+  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || typeof row2.id !== "string" || !row2.id || row2.groupId !== void 0 && row2.groupId !== groupId || !Number.isSafeInteger(row2.priceCents) || Number(row2.priceCents) < 0 || row2.currency !== void 0 && (typeof row2.currency !== "string" || !/^[a-z]{3}$/.test(row2.currency)) || row2.interval !== void 0 && row2.interval !== "month" && row2.interval !== "year") {
+    throw Object.assign(new Error("stored membership tier is invalid"), { code: "tiers_unavailable" });
+  }
+  return {
+    id: String(row2.id ?? ""),
+    groupId: String(row2.groupId ?? groupId),
+    name: String(row2.name ?? ""),
+    priceCents: typeof row2.priceCents === "number" ? row2.priceCents : 0,
+    ...typeof row2.currency === "string" && row2.currency ? { currency: row2.currency } : {},
+    ...row2.interval === "year" || row2.interval === "month" ? { interval: row2.interval } : {},
+    ...typeof row2.stripePriceId === "string" && row2.stripePriceId ? { stripePriceId: row2.stripePriceId } : {},
+    ...typeof row2.blurb === "string" ? { blurb: row2.blurb } : {},
+    sortOrder: typeof row2.sortOrder === "number" ? row2.sortOrder : 0,
+    // A row that never set `active` is offered; only an explicit false retires
+    // a tier, so a half-seeded row cannot silently hide a membership.
+    active: row2.active !== false
+  };
+}
+async function loadTiers(db, group) {
+  const groupId = String(group.id ?? "");
+  let rows3;
+  try {
+    rows3 = (await db.query({
+      tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
+    })).tiers;
+  } catch {
+    throw Object.assign(new Error("membership tiers are unavailable"), { code: "tiers_unavailable" });
+  }
+  if (!Array.isArray(rows3)) throw Object.assign(new Error("membership tiers response is invalid"), { code: "tiers_unavailable" });
+  const list = rows3.map((row2) => rowToTier(row2, groupId));
+  return resolveTiers(group, list);
+}
+async function loadOfferableTiers(db, group, hasSecretKey) {
+  return offerableTiers(await loadTiers(db, group), group, hasSecretKey);
+}
+
+// src/notification-variables.ts
+async function frozenCheckoutVariables(db, app) {
+  const intent = (await db.query({ subscriptionCheckoutIntents: { $: { where: { id: String(app.id) }, limit: 1 } } })).subscriptionCheckoutIntents?.[0];
+  const offer = intent?.membershipOffer, contract = offer?.contract;
+  const offering = contract?.offering, quote = intent?.paymentQuote;
+  const amount = contract?.dueTodayCents ?? intent?.priceCents;
+  const currency = offering?.currency ?? intent?.currency;
+  let formatted = "";
+  if (Number.isSafeInteger(amount) && Number(amount) > 0 && typeof currency === "string" && /^[a-z]{3}$/.test(currency)) {
+    formatted = new Intl.NumberFormat("en-US", { style: "currency", currency: currency.toUpperCase() }).format(Number(amount) / 100);
+  }
+  return {
+    paymentAmount: formatted,
+    paymentAmountSummary: formatted ? ` of ${formatted}` : "",
+    tierName: typeof quote?.tierName === "string" ? quote.tierName : ""
+  };
+}
+async function catalogTierName(db, group, app) {
+  try {
+    return findTier(await loadTiers(db, group), typeof app.tierId === "string" ? app.tierId : null)?.name ?? "";
+  } catch {
+    return "";
+  }
+}
+async function checkoutVariables(db, group, app) {
+  const frozen = await frozenCheckoutVariables(db, app);
+  return frozen.tierName ? frozen : { ...frozen, tierName: await catalogTierName(db, group, app) };
+}
+
+// src/email-event-values.ts
+async function emailTierVariables(db, input) {
+  try {
+    const [apps, groups2] = await Promise.all([
+      db.query({ applications: { $: { where: { id: input.applicationId }, limit: 1 } } }),
+      db.query({ groups: { $: { where: { id: input.groupId }, limit: 1 } } })
+    ]);
+    const app = apps.applications?.[0], group = groups2.groups?.[0];
+    if (!app || !group || app.groupId !== input.groupId) return { tierName: "", tier: "" };
+    const tierId = input.tierId ?? (typeof app.tierId === "string" ? app.tierId : "");
+    if (!tierId) return { tierName: "", tier: "" };
+    const name = input.tierId ? await catalogTierName(db, group, { ...app, tierId }) : (await checkoutVariables(db, group, app)).tierName;
+    const tierName = isEmailTierName2(name, tierId) ? name.trim() : "";
+    return { tierName, tier: tierName, tierId };
+  } catch {
+    return { tierName: "", tier: "" };
+  }
+}
+
 // src/notify.ts
 function fromAddress(configured, name) {
   const display = name?.trim();
@@ -6767,14 +6946,17 @@ async function sendTemplated(deps, input) {
   const cloudflareReady = Boolean(deps.sender && deps.from);
   const override = deps.debugEmail?.trim();
   const group = deps.envName !== "prod" && deps.debugEmail !== void 0 ? { ...input.group, debugEmail: override && /^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/.test(override) ? override : void 0 } : input.group;
+  const event2 = input.event ?? CHAPTER_EMAIL_EVENTS[input.template];
+  const vars = event2?.requiresTier && input.applicationId ? { ...input.vars, ...await emailTierVariables(deps.db, { applicationId: input.applicationId, groupId: group.id, tierId: input.tierId }) } : input.vars;
   const decision = planDelivery({
     envName: deps.envName,
     group,
     template: input.template,
     to: input.to,
-    vars: input.vars,
+    vars,
     cloudflareReady,
-    force: input.force
+    force: input.force,
+    event: event2
   });
   if (!decision.deliver) return { sent: false, reason: decision.reason };
   const previous = prior[0];
@@ -6799,6 +6981,8 @@ async function sendTemplated(deps, input) {
     error: decision.transport === "log-only" ? "" : "delivery-pending",
     ...input.applicationId ? { applicationId: input.applicationId } : {}
   };
+  if (isRetiredEmailCopy(String(row2.subject), String(row2.body))) return { sent: false, reason: "template-retired" };
+  if (validateEmailCopy3({ subject: row2.subject, text: row2.body }, { allowedVariables: [] }).length) return { sent: false, reason: "template-invalid" };
   try {
     const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: row2 }], {
       mutationId: `email-claim:${id10}:${attempt}`,
@@ -6952,35 +7136,35 @@ function findGiftRef(obj) {
     ...chapterId ? { chapterId } : {}
   };
 }
-function normalizeWebhookEvent(event, options = {}) {
-  const obj = event.data?.object ?? {};
-  if (event.type === "charge.refunded" && (!Number.isSafeInteger(obj.amount) || Number(obj.amount) <= 0 || obj.amount_refunded !== obj.amount || obj.refunded !== true)) return { kind: "ignored", type: event.type };
+function normalizeWebhookEvent(event2, options = {}) {
+  const obj = event2.data?.object ?? {};
+  if (event2.type === "charge.refunded" && (!Number.isSafeInteger(obj.amount) || Number(obj.amount) <= 0 || obj.amount_refunded !== obj.amount || obj.refunded !== true)) return { kind: "ignored", type: event2.type };
   const gift = findGiftRef(obj);
   if (gift.giftIntentId) {
-    const { giftIntentId, providerObjectId, ...identity } = gift;
-    if (event.type === "payment_intent.succeeded" || event.type === "invoice.paid" && obj.billing_reason === "subscription_create") {
-      return { kind: "gift_paid", giftIntentId, providerObjectId, ...identity };
+    const { giftIntentId, providerObjectId, ...identity2 } = gift;
+    if (event2.type === "payment_intent.succeeded" || event2.type === "invoice.paid" && obj.billing_reason === "subscription_create") {
+      return { kind: "gift_paid", giftIntentId, providerObjectId, ...identity2 };
     }
-    if (event.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "refunded" };
-    if (event.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "canceled" };
-    return { kind: "ignored", type: event.type };
+    if (event2.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId, ...identity2, reason: "refunded" };
+    if (event2.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId, ...identity2, reason: "canceled" };
+    return { kind: "ignored", type: event2.type };
   }
   const ref = findApplicationRef(obj);
   const seatId = obj.metadata?.seatId;
   if (typeof seatId === "string" && seatId) {
-    if (!options.requireProviderPayment) return { kind: "ignored", type: event.type };
-    if (event.type === "payment_intent.succeeded") return { kind: "seat_paid", seatId, ...ref };
-    if (event.type === "charge.refunded") return { kind: "seat_refunded", seatId, ...ref };
-    return { kind: "ignored", type: event.type };
+    if (!options.requireProviderPayment) return { kind: "ignored", type: event2.type };
+    if (event2.type === "payment_intent.succeeded") return { kind: "seat_paid", seatId, ...ref };
+    if (event2.type === "charge.refunded") return { kind: "seat_refunded", seatId, ...ref };
+    return { kind: "ignored", type: event2.type };
   }
-  if (event.type === "invoice.paid" && options.requireProviderPayment || event.type === "invoice.payment_succeeded" && !options.requireProviderPayment) return { kind: "ignored", type: event.type };
-  switch (event.type) {
+  if (event2.type === "invoice.paid" && options.requireProviderPayment || event2.type === "invoice.payment_succeeded" && !options.requireProviderPayment) return { kind: "ignored", type: event2.type };
+  switch (event2.type) {
     case "invoice.payment_failed":
-      return options.requireProviderPayment && obj.billing_reason === "subscription_cycle" ? { kind: "renewal_failed", ...ref } : { kind: "ignored", type: event.type };
+      return options.requireProviderPayment && obj.billing_reason === "subscription_cycle" ? { kind: "renewal_failed", ...ref } : { kind: "ignored", type: event2.type };
     case "invoice.paid":
     case "invoice.payment_succeeded": {
       if (obj.billing_reason !== "subscription_create" && obj.billing_reason !== "subscription_cycle") {
-        return { kind: "ignored", type: event.type };
+        return { kind: "ignored", type: event2.type };
       }
       const renewalAt = membershipInvoicePeriodEnd(obj);
       const kind = obj.billing_reason === "subscription_create" ? "first_payment" : "renewal";
@@ -6994,11 +7178,11 @@ function normalizeWebhookEvent(event, options = {}) {
     case "charge.refunded":
       return { kind: "refunded", ...ref };
     case "customer.subscription.updated":
-      return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "ignored", type: event.type };
+      return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "ignored", type: event2.type };
     case "customer.subscription.deleted":
       return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "canceled", ...ref };
     default:
-      return { kind: "ignored", type: event.type };
+      return { kind: "ignored", type: event2.type };
   }
 }
 function firstPaymentPatch(currentStatus, renewalAt) {
@@ -8376,44 +8560,6 @@ function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
   };
 }
 
-// src/tiers-store.ts
-function rowToTier(row2, groupId) {
-  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || typeof row2.id !== "string" || !row2.id || row2.groupId !== void 0 && row2.groupId !== groupId || !Number.isSafeInteger(row2.priceCents) || Number(row2.priceCents) < 0 || row2.currency !== void 0 && (typeof row2.currency !== "string" || !/^[a-z]{3}$/.test(row2.currency)) || row2.interval !== void 0 && row2.interval !== "month" && row2.interval !== "year") {
-    throw Object.assign(new Error("stored membership tier is invalid"), { code: "tiers_unavailable" });
-  }
-  return {
-    id: String(row2.id ?? ""),
-    groupId: String(row2.groupId ?? groupId),
-    name: String(row2.name ?? ""),
-    priceCents: typeof row2.priceCents === "number" ? row2.priceCents : 0,
-    ...typeof row2.currency === "string" && row2.currency ? { currency: row2.currency } : {},
-    ...row2.interval === "year" || row2.interval === "month" ? { interval: row2.interval } : {},
-    ...typeof row2.stripePriceId === "string" && row2.stripePriceId ? { stripePriceId: row2.stripePriceId } : {},
-    ...typeof row2.blurb === "string" ? { blurb: row2.blurb } : {},
-    sortOrder: typeof row2.sortOrder === "number" ? row2.sortOrder : 0,
-    // A row that never set `active` is offered; only an explicit false retires
-    // a tier, so a half-seeded row cannot silently hide a membership.
-    active: row2.active !== false
-  };
-}
-async function loadTiers(db, group) {
-  const groupId = String(group.id ?? "");
-  let rows3;
-  try {
-    rows3 = (await db.query({
-      tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
-    })).tiers;
-  } catch {
-    throw Object.assign(new Error("membership tiers are unavailable"), { code: "tiers_unavailable" });
-  }
-  if (!Array.isArray(rows3)) throw Object.assign(new Error("membership tiers response is invalid"), { code: "tiers_unavailable" });
-  const list = rows3.map((row2) => rowToTier(row2, groupId));
-  return resolveTiers(group, list);
-}
-async function loadOfferableTiers(db, group, hasSecretKey) {
-  return offerableTiers(await loadTiers(db, group), group, hasSecretKey);
-}
-
 // src/signup-control-contract.ts
 var SIGNUP_CONTROL_SCHEMA_VERSION = 1;
 var SIGNUP_CONTROL_PATH = "/api/signup-control";
@@ -8721,15 +8867,15 @@ function policyOf(value, errors, tiers2) {
     if (!overrides || Object.keys(overrides).length > 20) errors.push("document.policy.tierPolicies must be a bounded tier map");
     else for (const [id10, raw2] of Object.entries(overrides)) {
       const path = `document.policy.tierPolicies.${id10}`;
-      const policy = recordOf(raw2);
-      if (!tiers2.some((tier) => tier.id === id10) || !policy) {
+      const policy2 = recordOf(raw2);
+      if (!tiers2.some((tier) => tier.id === id10) || !policy2) {
         errors.push(`${path} must name a declared tier and policy`);
         continue;
       }
-      unknownKeys3(policy, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
+      unknownKeys3(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
       tierPolicies[id10] = {
-        refundPolicyText: text5(policy.refundPolicyText, `${path}.refundPolicyText`, errors),
-        ...policy.trustCopy !== void 0 ? { trustCopy: text5(policy.trustCopy, `${path}.trustCopy`, errors) } : {}
+        refundPolicyText: text5(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
+        ...policy2.trustCopy !== void 0 ? { trustCopy: text5(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
     }
   }
@@ -8784,7 +8930,7 @@ function validateSignupControlDocument(input) {
     errors.push("document.membershipPage.tiers must follow the available tier display order");
   }
   const application = applicationOf(root.application, errors);
-  const policy = policyOf(root.policy, errors, tiers2);
+  const policy2 = policyOf(root.policy, errors, tiers2);
   let scheduling;
   if (root.scheduling !== void 0) {
     const checked = validateScheduling(root.scheduling);
@@ -8804,7 +8950,7 @@ function validateSignupControlDocument(input) {
     tiers: tiers2,
     membershipPage: page.value,
     ...application ? { application } : {},
-    ...policy ? { policy } : {},
+    ...policy2 ? { policy: policy2 } : {},
     ...scheduling ? { scheduling } : {},
     ...theme ? { theme } : {},
     ...giftOffers?.ok ? { giftOffers: giftOffers.value } : {}
@@ -9519,23 +9665,23 @@ function memberSystemAvailability(input) {
     ...!input.bnfFrontendReachable ? { reason: "bnf_frontend_unavailable" } : {}
   };
 }
-function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
+function classifyMemberStripeEvent(identity2, target, hasProvenLegacyLocalLink) {
   const keys2 = ["appId", "environment", "dataEnvironment", "runtime", "chapterId"];
-  const supplied = keys2.filter((key3) => identity[key3] !== void 0);
-  if (supplied.some((key3) => identity[key3] !== target[key3])) return "ignore_sibling";
+  const supplied = keys2.filter((key3) => identity2[key3] !== void 0);
+  if (supplied.some((key3) => identity2[key3] !== target[key3])) return "ignore_sibling";
   if (supplied.length === keys2.length) return "apply";
   return hasProvenLegacyLocalLink ? "apply_legacy" : "quarantine_unmatched";
 }
 function planMemberSystemEventReplay(events2) {
   const seen = /* @__PURE__ */ new Map();
   const plan = { accepted: [], replayed: [], collisions: [] };
-  for (const event of events2) {
-    const digest = seen.get(event.id);
+  for (const event2 of events2) {
+    const digest = seen.get(event2.id);
     if (digest === void 0) {
-      seen.set(event.id, event.digest);
-      plan.accepted.push(event.id);
-    } else if (digest === event.digest) plan.replayed.push(event.id);
-    else plan.collisions.push(event.id);
+      seen.set(event2.id, event2.digest);
+      plan.accepted.push(event2.id);
+    } else if (digest === event2.digest) plan.replayed.push(event2.id);
+    else plan.collisions.push(event2.id);
   }
   return plan;
 }
@@ -9615,6 +9761,7 @@ export {
   BUILDER_LIBRARY_MANIFEST_PATH,
   BUILDER_LIBRARY_PROMOTE_PATH,
   BUILDER_LIBRARY_SCHEMA_VERSION,
+  CHAPTER_EMAIL_EVENTS,
   CHAPTER_FLOW_FIELDS_SCHEMA_VERSION,
   CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY,
@@ -9671,6 +9818,7 @@ export {
   canonicalSignupControl,
   chapterBrandFromTokens,
   chapterDb,
+  chapterEmailEvents,
   chapterFlowFieldContract,
   clampArray,
   classifyMemberStripeEvent,
@@ -9850,6 +9998,7 @@ export {
   updateClerkUserMetadataByEmail,
   validateAdmissionGrantDocument,
   validateBuilderLibraryDocument,
+  validateEmailReadiness,
   validateGiftOfferCatalog,
   validateMemberContentDocument,
   validateMemberSystemAuthority,