@odla-ai/chapter 0.54.1 → 0.55.0

package/dist/index.cjs

@@ -27,6 +27,7 @@ __export(src_exports, {
   BUILDER_LIBRARY_MANIFEST_PATH: () => BUILDER_LIBRARY_MANIFEST_PATH,
   BUILDER_LIBRARY_PROMOTE_PATH: () => BUILDER_LIBRARY_PROMOTE_PATH,
   BUILDER_LIBRARY_SCHEMA_VERSION: () => BUILDER_LIBRARY_SCHEMA_VERSION,
+  CHAPTER_EMAIL_EVENTS: () => CHAPTER_EMAIL_EVENTS,
   CHAPTER_FLOW_FIELDS_SCHEMA_VERSION: () => CHAPTER_FLOW_FIELDS_SCHEMA_VERSION,
   CHAPTER_PROMOTION_ADAPTER: () => CHAPTER_PROMOTION_ADAPTER,
   DEFAULT_CHAPTER_COPY: () => DEFAULT_CHAPTER_COPY,
@@ -83,6 +84,7 @@ __export(src_exports, {
   canonicalSignupControl: () => canonicalSignupControl,
   chapterBrandFromTokens: () => chapterBrandFromTokens,
   chapterDb: () => chapterDb,
+  chapterEmailEvents: () => chapterEmailEvents,
   chapterFlowFieldContract: () => chapterFlowFieldContract,
   clampArray: () => clampArray,
   classifyMemberStripeEvent: () => classifyMemberStripeEvent,
@@ -251,7 +253,7 @@ __export(src_exports, {
   slotWindow: () => slotWindow,
   stageIndex: () => stageIndex,
   stripeCall: () => stripeCall,
-  stripeForm: () => import_stripe10.stripeForm,
+  stripeForm: () => import_stripe11.stripeForm,
   subAnnualCents: () => subAnnualCents,
   submitApplication: () => submitApplication,
   subscriptionIdempotencyKey: () => subscriptionIdempotencyKey,
@@ -262,6 +264,7 @@ __export(src_exports, {
   updateClerkUserMetadataByEmail: () => updateClerkUserMetadataByEmail,
   validateAdmissionGrantDocument: () => validateAdmissionGrantDocument,
   validateBuilderLibraryDocument: () => validateBuilderLibraryDocument,
+  validateEmailReadiness: () => validateEmailReadiness,
   validateGiftOfferCatalog: () => validateGiftOfferCatalog,
   validateMemberContentDocument: () => validateMemberContentDocument,
   validateMemberSystemAuthority: () => validateMemberSystemAuthority,
@@ -272,7 +275,7 @@ __export(src_exports, {
   verifyMembershipAccessReceipt: () => verifyMembershipAccessReceipt,
   verifyMembershipCheckoutBinding: () => verifyMembershipCheckoutBinding,
   verifyMembershipPaymentReceipt: () => verifyMembershipPaymentReceipt,
-  verifyStripeSignature: () => import_stripe10.verifyStripeSignature,
+  verifyStripeSignature: () => import_stripe11.verifyStripeSignature,
   webhookMutationId: () => webhookMutationId
 });
 module.exports = __toCommonJS(src_exports);
@@ -401,8 +404,8 @@ async function submitApplication(db, chapter, fields, opts) {
   if (app.requireDisclaimerAck && !acked) {
     return { ok: false, error: "disclaimerAck is required" };
   }
-  const id10 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
-  const row2 = { id: id10, status: chapter.pipeline.initial, createdAt: opts.now };
+  const id11 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
+  const row2 = { id: id11, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
     if (fieldStates[f]?.visible === false) continue;
     if (typeof fields[f] === "string") row2[f] = fields[f].trim();
@@ -436,12 +439,12 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (acked) row2.disclaimerAckAt = opts.now;
   const ops = [
-    { t: "update", ns: "applications", id: id10, attrs: row2 }
+    { t: "update", ns: "applications", id: id11, attrs: row2 }
   ];
   if (opts.admissionGrant?.decision === "waive_interview") {
     ops.push({ t: "update", ns: "admissionGrants", id: opts.admissionGrant.id, attrs: {
       consumedAt: opts.now,
-      consumedApplicationId: id10
+      consumedApplicationId: id11
     } });
   }
   try {
@@ -449,7 +452,7 @@ async function submitApplication(db, chapter, fields, opts) {
       ops,
       opts.submissionId ? { mutationId: `join:${opts.submissionId}` } : void 0
     );
-    return { ok: true, id: id10, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
+    return { ok: true, id: id11, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
   } catch (error) {
     if (error.code === "unique_violation") return {
       ok: false,
@@ -1380,6 +1383,7 @@ Warmly,
 ${name}`;
   return {
     adminNotification: {
+      enabled: true,
       subject: `New application: {{firstName}} {{lastName}}`,
       text: `A new application came in for ${name}.
 
@@ -1390,18 +1394,21 @@ Tier: {{tier}}
 Review it: {{adminUrl}}`
     },
     submitConfirmation: {
+      enabled: true,
       subject: `We received your application to ${name}`,
       text: `Hi {{firstName}},
 
 Thanks for applying to ${name}. {{submitNextStep}}${sign}`
     },
     paymentConfirmation: {
+      enabled: true,
       subject: `Welcome to ${name}`,
       text: `Hi {{firstName}},
 
 Your membership payment{{paymentAmountSummary}} is confirmed. {{paymentNextStep}}${sign}`
     },
     prepEmail: {
+      enabled: true,
       subject: `Your ${name} intro call`,
       text: `Hi {{firstName}},
 
@@ -1410,18 +1417,19 @@ You are all set{{paymentAmountSummary}}. Looking forward to our call on {{startA
 Join here: {{meetingLink}}${sign}`
     },
     onboardingInvite: {
+      enabled: true,
       subject: `You're in, ${name}`,
       text: `Hi {{firstName}},
 
 Welcome to ${name}. Your member area is here: {{membersUrl}}${sign}`
     },
-    seatAccepted: SEAT_ACCEPTED_TEMPLATE
+    seatAccepted: { ...SEAT_ACCEPTED_TEMPLATE, enabled: true }
   };
 }
 function buildGroupSeed(config) {
   const prices = config.prices;
   const emails = config.emails;
-  const policy = config.policy ?? {};
+  const policy2 = config.policy ?? {};
   const scheduling = {
     ...DEFAULT_SCHEDULING,
     ...config.scheduling ?? {},
@@ -1436,17 +1444,17 @@ function buildGroupSeed(config) {
     interval: prices?.interval ?? "year",
     notificationEmail: emails?.notificationEmail ?? "",
     replyTo: emails?.replyTo ?? emails?.notificationEmail ?? "",
-    disclaimerText: policy.disclaimerText ?? "",
-    refundPolicyText: policy.refundPolicyText ?? "",
-    merchantDisclosureText: policy.merchantDisclosureText ?? "",
-    trustCopy: policy.trustCopy ?? "",
+    disclaimerText: policy2.disclaimerText ?? "",
+    refundPolicyText: policy2.refundPolicyText ?? "",
+    merchantDisclosureText: policy2.merchantDisclosureText ?? "",
+    trustCopy: policy2.trustCopy ?? "",
     emailTemplates: emails?.templates ?? defaultEmailTemplates(config.name),
     schedulingJson: scheduling
   };
   if (emails?.debugEmail) row2.debugEmail = emails.debugEmail;
   if (emails?.fromName?.trim()) row2.fromName = emails.fromName.trim();
-  if (policy.commitmentText) row2.commitmentText = policy.commitmentText;
-  if (policy.normsText) row2.normsText = policy.normsText;
+  if (policy2.commitmentText) row2.commitmentText = policy2.commitmentText;
+  if (policy2.normsText) row2.normsText = policy2.normsText;
   return row2;
 }
 
@@ -1979,9 +1987,9 @@ var APPLICATION_LABELS = {
   phone: "Phone",
   state: "State"
 };
-function humanize(id10) {
-  const text6 = id10.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id10;
+function humanize(id11) {
+  const text6 = id11.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id11;
 }
 function applicationDefs(chapter) {
   try {
@@ -1990,23 +1998,23 @@ function applicationDefs(chapter) {
     return {};
   }
 }
-function applicationType(id10, def) {
+function applicationType(id11, def) {
   if (def && ["string", "email", "url", "enum"].includes(def.type)) return def.type;
-  return id10 === "email" ? "email" : id10 === "linkedin" ? "url" : "string";
+  return id11 === "email" ? "email" : id11 === "linkedin" ? "url" : "string";
 }
 function applicationFlowFields(chapter, application = chapter.application) {
   const defs = applicationDefs(chapter);
-  return [...application.required, ...application.optional].map((id10, order2) => {
-    const def = defs[id10];
-    const conditions = application.conditions[id10];
-    const type = applicationType(id10, def);
+  return [...application.required, ...application.optional].map((id11, order2) => {
+    const def = defs[id11];
+    const conditions = application.conditions[id11];
+    const type = applicationType(id11, def);
     return {
-      id: id10,
-      label: def?.label ?? APPLICATION_LABELS[id10] ?? humanize(id10),
+      id: id11,
+      label: def?.label ?? APPLICATION_LABELS[id11] ?? humanize(id11),
       type,
-      required: application.required.includes(id10),
+      required: application.required.includes(id11),
       order: order2,
-      maxLength: application.maxLen[id10] ?? application.defaultMaxLen,
+      maxLength: application.maxLen[id11] ?? application.defaultMaxLen,
       ...type === "enum" && def?.options ? { options: [...def.options] } : {},
       ...conditions ? { conditions: { ...conditions } } : {},
       ...type === "email" ? { emailIdentity: "literal" } : {}
@@ -2016,17 +2024,17 @@ function applicationFlowFields(chapter, application = chapter.application) {
 function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id10, order2) => {
-    const field2 = def.fields[id10];
+  return [...formation.required, ...formation.optional].map((id11, order2) => {
+    const field2 = def.fields[id11];
     return {
-      id: id10,
-      label: field2.label ?? humanize(id10),
+      id: id11,
+      label: field2.label ?? humanize(id11),
       type: field2.type,
-      required: formation.required.includes(id10),
+      required: formation.required.includes(id11),
       order: order2,
-      maxLength: formation.maxLen[id10] ?? formation.defaultMaxLen,
+      maxLength: formation.maxLen[id11] ?? formation.defaultMaxLen,
       ...field2.options ? { options: [...field2.options] } : {},
-      ...id10 === def.emailField || field2.type === "email" ? { emailIdentity: "literal" } : {}
+      ...id11 === def.emailField || field2.type === "email" ? { emailIdentity: "literal" } : {}
     };
   });
 }
@@ -2330,12 +2338,12 @@ function resolveNetworkPersonRegistry(mode, input, targetIds) {
   if (input.mode !== "shadow") throw new Error('defineChapter.networkPersonRegistry.mode: must be "shadow"');
   const chapterIds = input.chapterIds ? [...input.chapterIds] : [...targetIds];
   if (chapterIds.length === 0) throw new Error("defineChapter.networkPersonRegistry.chapterIds: at least one chapter is required");
-  if (new Set(chapterIds).size !== chapterIds.length || chapterIds.some((id10) => !SLUG2.test(id10))) {
+  if (new Set(chapterIds).size !== chapterIds.length || chapterIds.some((id11) => !SLUG2.test(id11))) {
     throw new Error("defineChapter.networkPersonRegistry.chapterIds: expected distinct lowercase slugs");
   }
-  const unknown = chapterIds.filter((id10) => !targetIds.includes(id10));
+  const unknown = chapterIds.filter((id11) => !targetIds.includes(id11));
   if (unknown.length) {
-    throw new Error(`defineChapter.networkPersonRegistry.chapterIds: ${unknown.map((id10) => `"${id10}"`).join(", ")} are not configured network targets`);
+    throw new Error(`defineChapter.networkPersonRegistry.chapterIds: ${unknown.map((id11) => `"${id11}"`).join(", ")} are not configured network targets`);
   }
   return { mode: "shadow", chapterIds };
 }
@@ -2458,9 +2466,9 @@ function isResolvedCrm(x) {
 }
 function defineChapter(config) {
   if (!config || typeof config !== "object") throw new Error("defineChapter: a config object is required");
-  const { id: id10, name } = config;
-  if (typeof id10 !== "string" || !SLUG7.test(id10)) {
-    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id10)}`);
+  const { id: id11, name } = config;
+  if (typeof id11 !== "string" || !SLUG7.test(id11)) {
+    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id11)}`);
   }
   if (typeof name !== "string" || name.trim() === "") throw new Error("defineChapter.name: a non-empty name is required");
   const mode = config.mode ?? "chapter";
@@ -2567,7 +2575,7 @@ function defineChapter(config) {
   };
   const chapter = {
     config,
-    id: id10,
+    id: id11,
     name,
     mode,
     brand,
@@ -2755,13 +2763,13 @@ function firstPrice(object2) {
   return { ...priceId ? { priceId } : {}, ...quantity !== void 0 ? { quantity } : {} };
 }
 function normalizeNetworkCommercialStripeEvent(input, digest) {
-  const event = raw(input);
-  const eventId = providerId(event.id, "evt_") ?? "";
-  const eventType = text(event.type) ?? "";
-  const object2 = raw(raw(event.data).object);
+  const event2 = raw(input);
+  const eventId = providerId(event2.id, "evt_") ?? "";
+  const eventType = text(event2.type) ?? "";
+  const object2 = raw(raw(event2.data).object);
   const objectId = providerId(object2.id) ?? "";
   const candidates = metadataCandidates(object2);
-  const identity = {};
+  const identity2 = {};
   const identityKeys2 = {
     appId: "odlaAppId",
     chapterId: "chapterId",
@@ -2771,7 +2779,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
   };
   for (const [target, source] of Object.entries(identityKeys2)) {
     const value = metadataValue(candidates, source);
-    if (value) identity[target] = value;
+    if (value) identity2[target] = value;
   }
   let objectKind = "ignored";
   if (eventType.startsWith("customer.subscription.")) objectKind = "subscription";
@@ -2793,11 +2801,11 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
     eventId,
     digest,
     eventType,
-    eventCreated: integer(event.created) ?? 0,
-    livemode: event.livemode === true,
+    eventCreated: integer(event2.created) ?? 0,
+    livemode: event2.livemode === true,
     objectKind,
     objectId,
-    identity,
+    identity: identity2,
     ...metadataValue(candidates, "applicationId") ? { applicationId: metadataValue(candidates, "applicationId") } : {},
     ...metadataValue(candidates, "personId") ? { personId: metadataValue(candidates, "personId") } : {},
     ...metadataValue(candidates, "membershipId") ? { membershipId: metadataValue(candidates, "membershipId") } : {},
@@ -2982,14 +2990,14 @@ function facts(snapshots) {
     ["payment_intent.updated", snapshots.payments?.objects ?? []]
   ];
   return groups2.flatMap(([eventType, objects]) => objects.map((object2) => {
-    const id10 = typeof object2.id === "string" ? object2.id : "invalid";
+    const id11 = typeof object2.id === "string" ? object2.id : "invalid";
     return normalizeNetworkCommercialStripeEvent({
-      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id10}`,
+      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id11}`,
       type: eventType,
       created: typeof object2.created === "number" ? object2.created : 0,
       livemode: object2.livemode === true,
       data: { object: object2 }
-    }, `stripe-snapshot:${eventType}:${id10}`);
+    }, `stripe-snapshot:${eventType}:${id11}`);
   }));
 }
 var selected = (row2) => ({
@@ -3644,15 +3652,15 @@ function membershipDiscountPolicyVersion(value) {
 // src/membership-offer.ts
 function createMembershipCommercialOffer(input) {
   const offering = membershipOfferingVersion(input.offering);
-  const policy = input.discountPolicy === void 0 || input.discountPolicy === null ? null : membershipDiscountPolicyVersion(input.discountPolicy);
+  const policy2 = input.discountPolicy === void 0 || input.discountPolicy === null ? null : membershipDiscountPolicyVersion(input.discountPolicy);
   const now = input.now;
   if (!Number.isSafeInteger(now) || now < 0 || !Number.isSafeInteger(input.approvedFoundingCount) || input.approvedFoundingCount < 0) {
     throw new TypeError("invalid offer clock or founding count");
   }
   if (offering.status !== "published" || now < offering.effectiveFrom || offering.effectiveUntil !== void 0 && now >= offering.effectiveUntil) throw new TypeError("offering is unavailable");
-  if (policy && policy.chapterId !== offering.chapterId) throw new TypeError("policy belongs to another chapter");
-  const founding = Boolean(policy && policy.status === "published" && offering.basePriceCents > 0 && policy.cohortEligibleSkuIds.includes(offering.baseSkuId) && now >= policy.qualifyingStartsAt && now < policy.qualifyingEndsAt && input.approvedFoundingCount < policy.softTarget);
-  const earned = founding ? policy : null;
+  if (policy2 && policy2.chapterId !== offering.chapterId) throw new TypeError("policy belongs to another chapter");
+  const founding = Boolean(policy2 && policy2.status === "published" && offering.basePriceCents > 0 && policy2.cohortEligibleSkuIds.includes(offering.baseSkuId) && now >= policy2.qualifyingStartsAt && now < policy2.qualifyingEndsAt && input.approvedFoundingCount < policy2.softTarget);
+  const earned = founding ? policy2 : null;
   const initialTermEndsAt = offering.term.kind === "fixed_end" ? offering.term.endsAt : addMembershipCalendarMonths(now, offering.term.months);
   if (initialTermEndsAt <= now) throw new TypeError("membership service term has ended");
   if (offering.term.kind === "rolling_months" && offering.term.months !== (offering.interval === "year" ? 12 : 1)) {
@@ -3698,8 +3706,8 @@ async function hash(value) {
 async function membershipDiscountCouponId(input, policyId) {
   return policyId ? `odla_m_${await hash([input.appId, input.chapterId, input.environment, input.runtime, input.skuId, policyId])}` : void 0;
 }
-async function load(db, ns, id10) {
-  return (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+async function load(db, ns, id11) {
+  return (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 }
 async function membershipOfferIdForRequest(input) {
   return `offer_${await hash([input.appId, input.chapterId, input.environment, input.runtime, input.applicationId, input.requestId])}`;
@@ -3744,15 +3752,15 @@ async function previewMembershipCommercialOffer(db, input) {
   }
   if (!Number.isSafeInteger(input.now) || input.now < 0) reject("invalid_offer_window");
   const state = await authoritativeState(db, input);
-  const { offering, policy } = await currentPolicy(db, input, false, state);
-  const approvedFoundingCount = policy ? state.cohortCounts[policy.cohortLabel] ?? 0 : 0;
+  const { offering, policy: policy2 } = await currentPolicy(db, input, false, state);
+  const approvedFoundingCount = policy2 ? state.cohortCounts[policy2.cohortLabel] ?? 0 : 0;
   if (!Number.isSafeInteger(approvedFoundingCount) || Number(approvedFoundingCount) < 0) reject("invalid_cohort_count");
   const contract = createMembershipCommercialOffer({
     offering,
-    discountPolicy: policy,
+    discountPolicy: policy2,
     approvedFoundingCount: Number(approvedFoundingCount),
     now: input.now,
-    couponId: await membershipDiscountCouponId(input, policy?.id)
+    couponId: await membershipDiscountCouponId(input, policy2?.id)
   });
   const discount = contract.billingTerms.discount;
   return {
@@ -3781,12 +3789,12 @@ async function currentPolicy(db, input, restartAware, state) {
   });
   if (!Array.isArray(rows3.membershipOfferingVersion) || !Array.isArray(rows3.discountPolicyVersion) || rows3.membershipOfferingVersion.length >= 200 || rows3.discountPolicyVersion.length >= 200) return reject("policy_history_incomplete");
   const offerings = rows3.membershipOfferingVersion.map((row2) => membershipOfferingVersion(row2.snapshot)).filter((offer) => offer.chapterId === input.chapterId && offer.baseSkuId === input.skuId && offer.status === "published" && input.now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || input.now < offer.effectiveUntil));
-  const policies = rows3.discountPolicyVersion.map((row2) => membershipDiscountPolicyVersion(row2.snapshot)).filter((policy2) => policy2.chapterId === input.chapterId && policy2.status === "published" && policy2.cohortEligibleSkuIds.includes(input.skuId) && input.now >= policy2.qualifyingStartsAt && input.now < policy2.qualifyingEndsAt);
+  const policies = rows3.discountPolicyVersion.map((row2) => membershipDiscountPolicyVersion(row2.snapshot)).filter((policy3) => policy3.chapterId === input.chapterId && policy3.status === "published" && policy3.cohortEligibleSkuIds.includes(input.skuId) && input.now >= policy3.qualifyingStartsAt && input.now < policy3.qualifyingEndsAt);
   const offering = offerings.sort((a, b) => b.version - a.version)[0];
   const restart = restartAware && input.applicationId ? await load(db, "membershipRestart", (await membershipOfferIdForRequest({ ...input, applicationId: input.applicationId, requestId: "checkout_binding" })).replace(/^offer_/, "membership_")) : void 0;
-  const policy = restart ? void 0 : policies.sort((a, b) => b.version - a.version)[0];
-  if (!offering || offerings.filter((item) => item.version === offering.version).length !== 1 || policy && policies.filter((item) => item.version === policy.version).length !== 1) reject("ambiguous_membership_policy");
-  return { offering, policy };
+  const policy2 = restart ? void 0 : policies.sort((a, b) => b.version - a.version)[0];
+  if (!offering || offerings.filter((item) => item.version === offering.version).length !== 1 || policy2 && policies.filter((item) => item.version === policy2.version).length !== 1) reject("ambiguous_membership_policy");
+  return { offering, policy: policy2 };
 }
 async function issueMembershipCommercialOffer(db, input) {
   validate(input);
@@ -3794,15 +3802,15 @@ async function issueMembershipCommercialOffer(db, input) {
   const state = await authoritativeState(db, input);
   const existing = await load(db, "membershipCheckoutOffer", input.offerId);
   if (existing) return restore(existing, input);
-  const { offering, policy } = await currentPolicy(db, input, true, state);
-  const approvedFoundingCount = policy ? state.cohortCounts[policy.cohortLabel] ?? 0 : 0;
+  const { offering, policy: policy2 } = await currentPolicy(db, input, true, state);
+  const approvedFoundingCount = policy2 ? state.cohortCounts[policy2.cohortLabel] ?? 0 : 0;
   if (!Number.isSafeInteger(approvedFoundingCount) || Number(approvedFoundingCount) < 0) reject("invalid_cohort_count");
   const contract = createMembershipCommercialOffer({
     offering,
-    discountPolicy: policy,
+    discountPolicy: policy2,
     approvedFoundingCount: Number(approvedFoundingCount),
     now: input.now,
-    couponId: await membershipDiscountCouponId(input, policy?.id)
+    couponId: await membershipDiscountCouponId(input, policy2?.id)
   });
   const value = {
     id: input.offerId,
@@ -3836,20 +3844,20 @@ var import_stripe2 = require("@odla-ai/stripe");
 
 // src/commercial-evidence-guard.ts
 async function commercialEvidenceGuard(db, eventId, digest, code = "membership_payment_evidence_quarantined") {
-  const ns = "networkCommercialExceptions", id10 = `network-commercial-exception:${eventId}:collision`;
-  const row2 = (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
-  if (!row2) return { ns, id: id10, exists: false };
+  const ns = "networkCommercialExceptions", id11 = `network-commercial-exception:${eventId}:collision`;
+  const row2 = (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
+  if (!row2) return { ns, id: id11, exists: false };
   if (row2.status !== "resolved" || row2.resolvedDigest !== digest || typeof digest !== "string") {
     throw Object.assign(new Error(code), { code });
   }
-  return { ns, id: id10, exists: true, equals: { status: "resolved", resolvedDigest: digest, updatedAt: row2.updatedAt } };
+  return { ns, id: id11, exists: true, equals: { status: "resolved", resolvedDigest: digest, updatedAt: row2.updatedAt } };
 }
 
 // src/membership-authority-state.ts
 var membershipFail = (code) => {
   throw Object.assign(new Error(code), { code });
 };
-var membershipLoad = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+var membershipLoad = async (db, ns, id11) => (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 var membershipScopeKeys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId"];
 var membershipScope = (input) => Object.fromEntries(membershipScopeKeys.map((key3) => [key3, input[key3]]));
 function requireMembershipScope(row2, input) {
@@ -3860,18 +3868,18 @@ async function loadMembershipAuthorityState(db, input) {
   if (!row2 || row2.mode !== "authoritative" || row2.chapterId !== input.chapterId || row2.environment !== input.environment || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1) return membershipFail("membership_authority_unavailable");
   return row2;
 }
-var membershipUpdate = (ns, id10, attrs) => ({ t: "update", ns, id: id10, attrs });
+var membershipUpdate = (ns, id11, attrs) => ({ t: "update", ns, id: id11, attrs });
 var membershipClock = (now) => {
   if (!Number.isSafeInteger(now) || now < 0) membershipFail("invalid_membership_clock");
 };
 
 // src/membership-restart-payment.ts
 async function membershipRestartPayment(db, target, member, now) {
-  const id10 = String(member.id), restart = await membershipLoad(db, "membershipRestart", id10);
+  const id11 = String(member.id), restart = await membershipLoad(db, "membershipRestart", id11);
   requireMembershipScope(restart, target);
-  const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+  const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
   requireMembershipScope(entitlement, target);
-  if (entitlement.membershipId !== id10 || entitlement.kind !== "primary") membershipFail("membership_restart_conflict");
+  if (entitlement.membershipId !== id11 || entitlement.kind !== "primary") membershipFail("membership_restart_conflict");
   if (restart.status !== "ready" || member.status !== "restarting" || member.restartId !== restart.restartId || member.memberNumber !== restart.memberNumber || !Number.isSafeInteger(member.journeyApprovedAt)) membershipFail("membership_restart_conflict");
   return {
     restartId: String(restart.restartId),
@@ -3888,49 +3896,117 @@ async function membershipRestartPayment(db, target, member, now) {
       graceEndsAt: 0
     },
     ops: [
-      membershipUpdate("membershipRestart", id10, { status: "complete" }),
-      { t: "retract", ns: "networkMembership", id: id10, attrs: ["refundRequestedAt", "cancellationRequestedAt", "discountPolicyVersionId", "discountSnapshot"] }
+      membershipUpdate("membershipRestart", id11, { status: "complete" }),
+      { t: "retract", ns: "networkMembership", id: id11, attrs: ["refundRequestedAt", "cancellationRequestedAt", "discountPolicyVersionId", "discountSnapshot"] }
     ],
     guards: [
-      { ns: "networkMembership", id: id10, exists: true, equals: { status: "restarting", revision: member.revision, restartId: restart.restartId } },
-      { ns: "membershipRestart", id: id10, exists: true, equals: { status: "ready", restartId: restart.restartId } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { status: "restarting", revision: member.revision, restartId: restart.restartId } },
+      { ns: "membershipRestart", id: id11, exists: true, equals: { status: "ready", restartId: restart.restartId } },
       { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision, status: entitlement.status } }
     ]
   };
 }
 
+// src/checkout-named-seat.ts
+function checkoutNamedSeatSelection(value, purchaserEmail) {
+  const row2 = value;
+  const name = typeof row2?.recipientName === "string" ? row2.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof row2?.recipientEmail === "string" ? row2.recipientEmail : "");
+  const purchaser = normalizeChapterEmail(purchaserEmail);
+  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(row2.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(purchaser) || email === purchaser) {
+    throw Object.assign(new Error("Enter a different recipient's name and email."), { code: "invalid_named_seat_recipient" });
+  }
+  return { recipientName: name, recipientEmail: email };
+}
+async function checkoutNamedSeatIdentity(target, email) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
+    target.appId,
+    target.chapterId,
+    target.environment,
+    target.runtime,
+    email
+  ])));
+  return {
+    seatId: (await membershipOfferIdForRequest({ ...target, requestId: "named_seat" })).replace(/^offer_/, "seat_"),
+    membershipId: (await membershipOfferIdForRequest({ ...target, requestId: "checkout_binding" })).replace(/^offer_/, "membership_"),
+    recipientClaimId: `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`
+  };
+}
+
 // src/membership-checkout-binding.ts
 var keys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId", "offerId", "offerDigest", "quoteDigest", "priceId"];
 var reject2 = (code) => {
   throw Object.assign(new Error(code), { code });
 };
-var load2 = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+var load2 = async (db, ns, id11) => (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 async function membershipCheckoutBindingId(input) {
   return (await membershipOfferIdForRequest({ ...input, requestId: "checkout_binding" })).replace(/^offer_/, "checkout_");
 }
 async function verifyMembershipCheckoutBinding(value, input) {
   const row2 = value;
   if (!row2 || typeof row2 !== "object" || row2.id !== await membershipCheckoutBindingId(input) || keys.some((key3) => row2[key3] !== input[key3]) || !Number.isSafeInteger(row2.boundAt) || row2.boundAt < 0) return reject2("membership_checkout_conflict");
-  return { id: row2.id, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: row2.boundAt };
+  if (Boolean(row2.namedSeat) !== Boolean(input.namedSeat)) return reject2("membership_checkout_conflict");
+  if (input.namedSeat) {
+    const expected = {
+      ...checkoutNamedSeatSelection(input.namedSeat, input.namedSeat.purchaserEmail),
+      purchaserEmail: normalizeChapterEmail(input.namedSeat.purchaserEmail)
+    };
+    const identity2 = await checkoutNamedSeatIdentity(input, expected.recipientEmail);
+    if (!row2.namedSeat || Object.entries({ ...expected, ...identity2 }).some(([key3, value2]) => row2.namedSeat[key3] !== value2) || !/^price_[A-Za-z0-9_]+$/.test(row2.namedSeat.priceId) || row2.namedSeat.priceId === input.priceId || !Number.isSafeInteger(row2.namedSeat.amountCents) || row2.namedSeat.amountCents < 0) return reject2("membership_checkout_conflict");
+  }
+  return {
+    id: row2.id,
+    ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])),
+    boundAt: row2.boundAt,
+    ...row2.namedSeat ? { namedSeat: row2.namedSeat } : {}
+  };
 }
-async function bindMembershipCheckout(db, input, now) {
+async function bindMembershipCheckout(db, input, now, seatPriceId) {
   if (!Number.isSafeInteger(now) || now < 0 || !/^[a-f0-9]{64}$/.test(input.offerDigest) || !/^[a-f0-9]{64}$/.test(input.quoteDigest) || !/^price_[A-Za-z0-9_]+$/.test(input.priceId)) return reject2("invalid_membership_checkout");
   const stateId = `${input.chapterId}:${input.environment}`;
   const state = await load2(db, "membershipAuthorityState", stateId);
   if (!state || state.mode !== "authoritative" || state.chapterId !== input.chapterId || state.environment !== input.environment || !Number.isSafeInteger(state.revision) || Number(state.revision) < 1) return reject2("membership_authority_unavailable");
-  const id10 = await membershipCheckoutBindingId(input);
-  const existing = await load2(db, "membershipOfferCheckout", id10);
+  const id11 = await membershipCheckoutBindingId(input);
+  const existing = await load2(db, "membershipOfferCheckout", id11);
   if (existing) return verifyMembershipCheckoutBinding(existing, input);
   const row2 = await load2(db, "membershipCheckoutOffer", input.offerId);
   const offer = await verifyIssuedMembershipOffer(row2, { ...input, now, lifetimeMs: 6e4 });
   if (offer.digest !== input.offerDigest || offer.expiresAt <= now || offer.issuedAt > now) return reject2("membership_offer_expired");
-  const restart = await load2(db, "membershipRestart", id10.replace(/^checkout_/, "membership_"));
-  const receipt = { id: id10, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: now };
+  const restart = await load2(db, "membershipRestart", id11.replace(/^checkout_/, "membership_"));
+  let namedSeat;
+  if (input.namedSeat) {
+    if (!seatPriceId || !/^price_[A-Za-z0-9_]+$/.test(seatPriceId) || seatPriceId === input.priceId || restart) return reject2("named_seat_purchase_unavailable");
+    const selection = checkoutNamedSeatSelection(input.namedSeat, input.namedSeat.purchaserEmail);
+    namedSeat = {
+      ...selection,
+      purchaserEmail: normalizeChapterEmail(input.namedSeat.purchaserEmail),
+      ...await checkoutNamedSeatIdentity(input, selection.recipientEmail),
+      priceId: seatPriceId,
+      amountCents: offer.contract.offering.seatPriceCents
+    };
+  }
+  const receipt = { id: id11, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: now, ...namedSeat ? { namedSeat } : {} };
   try {
-    await db.transact([{ t: "update", ns: "membershipOfferCheckout", id: id10, attrs: receipt }], {
-      mutationId: `membership-checkout:${id10}${restart?.restartId ? `:${restart.restartId}` : ""}`,
+    await db.transact([
+      { t: "update", ns: "membershipOfferCheckout", id: id11, attrs: receipt },
+      ...namedSeat ? [{ t: "update", ns: "networkSeatRecipient", id: namedSeat.recipientClaimId, attrs: {
+        id: namedSeat.recipientClaimId,
+        appId: input.appId,
+        chapterId: input.chapterId,
+        environment: input.environment,
+        runtime: input.runtime,
+        seatId: namedSeat.seatId,
+        recipientEmailNormalized: namedSeat.recipientEmail,
+        createdAt: now
+      } }] : []
+    ], {
+      mutationId: `membership-checkout:${id11}${restart?.restartId ? `:${restart.restartId}` : ""}`,
       guards: [
-        { ns: "membershipOfferCheckout", id: id10, exists: false },
+        { ns: "membershipOfferCheckout", id: id11, exists: false },
+        ...namedSeat ? [
+          { ns: "networkSeat", id: namedSeat.seatId, exists: false },
+          { ns: "networkSeatRecipient", id: namedSeat.recipientClaimId, exists: false }
+        ] : [],
         { ns: "membershipCheckoutOffer", id: input.offerId, exists: true, equals: { digest: input.offerDigest } },
         { ns: "membershipAuthorityState", id: stateId, exists: true, equals: { mode: "authoritative", revision: state.revision } }
       ]
@@ -3938,11 +4014,78 @@ async function bindMembershipCheckout(db, input, now) {
   } catch (error) {
     if (error.code !== "transact_guard_failed") throw error;
   }
-  const saved = await load2(db, "membershipOfferCheckout", id10);
+  const saved = await load2(db, "membershipOfferCheckout", id11);
   if (!saved) return reject2("membership_binding_unconfirmed");
   return verifyMembershipCheckoutBinding(saved, input);
 }
 
+// src/membership-checkout-seat-payment.ts
+function checkoutSeatPaymentOperations(target, seat, input) {
+  const { now, paidAt, endsAt } = input;
+  const included = seat.amountCents === 0, entitlementId = `${seat.seatId}:entitlement`;
+  const effectId = `${seat.seatId}:${included ? "invite" : "attach-renewal"}`;
+  return [
+    membershipUpdate("networkSeat", seat.seatId, {
+      id: seat.seatId,
+      ...membershipScope(target),
+      primaryMembershipId: seat.membershipId,
+      purchaserEmailNormalized: seat.purchaserEmail,
+      recipientName: seat.recipientName,
+      recipientEmailNormalized: seat.recipientEmail,
+      recipientClaimId: seat.recipientClaimId,
+      priceId: seat.priceId,
+      primaryPriceId: input.primaryPriceId,
+      amountCents: seat.amountCents,
+      currency: input.offering.currency,
+      interval: input.offering.interval,
+      providerCustomerId: input.customerId,
+      providerSubscriptionId: input.subscriptionId,
+      combinedInvoice: { invoiceId: input.invoiceId, totalCents: input.invoiceTotalCents },
+      status: included ? "pending_acceptance" : "renewal_pending",
+      preparedAt: input.boundAt,
+      purchasedAt: paidAt,
+      termStartedAt: paidAt,
+      termEndsAt: endsAt,
+      acceptanceEndsAt: endsAt,
+      seatPurchaseEndsAt: seatPurchaseDeadline(input.offering, { initialTermStartedAt: paidAt, termEndsAt: endsAt }),
+      offeringSnapshot: input.offering,
+      paymentEventId: input.eventId,
+      ...included ? { entitlementId } : {},
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    }),
+    ...included ? [membershipUpdate("networkEntitlement", entitlementId, {
+      id: entitlementId,
+      ...membershipScope(target),
+      membershipId: seat.membershipId,
+      seatId: seat.seatId,
+      kind: "named_seat",
+      status: "pending_acceptance",
+      termStartedAt: paidAt,
+      termEndsAt: endsAt,
+      offeringSnapshot: input.offering,
+      sourceEventId: input.eventId,
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    })] : [],
+    membershipUpdate("membershipEffect", effectId, {
+      id: effectId,
+      chapterId: target.chapterId,
+      environment: target.environment,
+      runtime: target.runtime,
+      membershipId: seat.membershipId,
+      seatId: seat.seatId,
+      kind: included ? "invite_named_recipient" : "attach_seat_renewal",
+      status: "pending",
+      attempts: 0,
+      createdAt: now,
+      updatedAt: now
+    })
+  ];
+}
+
 // src/membership-payment-authority.ts
 async function networkMembershipId(input) {
   return (await membershipCheckoutBindingId(input)).replace(/^checkout_/, "membership_");
@@ -3958,11 +4101,14 @@ async function confirmMembershipPayment(db, input, now) {
     { ...input, offerId: String(binding.offerId), now, lifetimeMs: 6e4 }
   );
   if (binding.offerDigest !== offer.digest) membershipFail("membership_checkout_conflict");
+  const { namedSeat } = await verifyMembershipCheckoutBinding(binding, binding);
+  if (namedSeat && namedSeat.amountCents !== offer.contract.offering.seatPriceCents) membershipFail("membership_checkout_conflict");
+  const totalCents = offer.contract.dueTodayCents + (namedSeat?.amountCents ?? 0);
   const eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   if (!eventRow) membershipFail("membership_payment_evidence_pending");
   const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow.digest);
   const fact = eventRow.fact;
-  if (!fact || !fact.identity || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.eventType !== "invoice.payment_succeeded" || fact.objectKind !== "invoice" || fact.billingReason !== "subscription_create" || fact.livemode !== (input.environment === "prod") || fact.status !== "paid" || fact.applicationId !== input.applicationId || fact.subscriptionId !== input.providerSubscriptionId || fact.customerId !== input.providerCustomerId || !/^in_[A-Za-z0-9_]+$/.test(fact.invoiceId ?? "") || fact.currency !== offer.contract.offering.currency || fact.invoiceTotalCents !== offer.contract.dueTodayCents || fact.amountPaidCents !== offer.contract.dueTodayCents || Object.entries({
+  if (!fact || !fact.identity || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.eventType !== "invoice.payment_succeeded" || fact.objectKind !== "invoice" || fact.billingReason !== "subscription_create" || fact.livemode !== (input.environment === "prod") || fact.status !== "paid" || fact.applicationId !== input.applicationId || fact.subscriptionId !== input.providerSubscriptionId || fact.customerId !== input.providerCustomerId || !/^in_[A-Za-z0-9_]+$/.test(fact.invoiceId ?? "") || fact.currency !== offer.contract.offering.currency || fact.invoiceTotalCents !== totalCents || fact.amountPaidCents !== totalCents || Object.entries({
     appId: input.appId,
     chapterId: input.chapterId,
     environment: input.environment,
@@ -3974,14 +4120,14 @@ async function confirmMembershipPayment(db, input, now) {
   const paidAt = fact.invoicePaidAt;
   const endsAt = offer.contract.initialTermEndsAt ?? fact.invoicePeriodEndsAt;
   if (!Number.isSafeInteger(paidAt) || Number(paidAt) < Math.floor(Number(binding.boundAt) / 1e3) * 1e3 || Number(paidAt) > now + 3e4 || !Number.isSafeInteger(endsAt) || Number(endsAt) <= Number(paidAt)) membershipFail("membership_payment_period_mismatch");
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
-  let member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
+  let member = await membershipLoad(db, "networkMembership", id11);
   if (!member || member.status === "restarting") {
     const offering = offer.contract.offering;
     const restart = member ? await membershipRestartPayment(db, input, member, now) : null;
     const attrs = {
-      id: id10,
-      membershipId: id10,
+      id: id11,
+      membershipId: id11,
       ...membershipScope(input),
       baseSkuId: input.skuId,
       status: "paid_pending_approval",
@@ -3997,8 +4143,9 @@ async function confirmMembershipPayment(db, input, now) {
       founding: offer.contract.founding,
       cohort: offer.contract.founding ? offer.contract.discountPolicy.cohortLabel : "standard",
       baseAmountCents: offering.basePriceCents,
-      amountCents: offer.contract.dueTodayCents,
+      amountCents: totalCents,
       renewalAmountCents: offer.contract.renewalCents,
+      ...namedSeat ? { namedSeatId: namedSeat.seatId } : {},
       currency: offering.currency,
       interval: offering.interval,
       initialTermStartedAt: paidAt,
@@ -4015,11 +4162,11 @@ async function confirmMembershipPayment(db, input, now) {
     };
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, attrs),
+        membershipUpdate("networkMembership", id11, attrs),
         membershipUpdate("networkEntitlement", entitlementId, {
           id: entitlementId,
           ...membershipScope(input),
-          membershipId: id10,
+          membershipId: id11,
           kind: "primary",
           status: restart?.attrs.status === "active" ? "active" : "pending_approval",
           termStartedAt: paidAt,
@@ -4031,23 +4178,45 @@ async function confirmMembershipPayment(db, input, now) {
           updatedAt: now,
           ...restart?.entitlementAttrs
         }),
-        ...restart?.ops ?? []
-      ], { mutationId: `membership-paid:${id10}${restart ? `:${restart.restartId}` : ""}`, guards: [
-        ...restart?.guards ?? [{ ns: "networkMembership", id: id10, exists: false }],
+        ...restart?.ops ?? [],
+        ...namedSeat ? checkoutSeatPaymentOperations(input, namedSeat, {
+          offering,
+          primaryPriceId: String(binding.priceId),
+          invoiceId: fact.invoiceId,
+          invoiceTotalCents: totalCents,
+          subscriptionId: input.providerSubscriptionId,
+          customerId: input.providerCustomerId,
+          eventId: input.eventId,
+          paidAt: Number(paidAt),
+          endsAt: Number(endsAt),
+          boundAt: Number(binding.boundAt),
+          now
+        }) : []
+      ], { mutationId: `membership-paid:${id11}${restart ? `:${restart.restartId}` : ""}`, guards: [
+        ...restart?.guards ?? [{ ns: "networkMembership", id: id11, exists: false }],
+        ...namedSeat ? [
+          { ns: "networkSeat", id: namedSeat.seatId, exists: false },
+          {
+            ns: "networkSeatRecipient",
+            id: namedSeat.recipientClaimId,
+            exists: true,
+            equals: { seatId: namedSeat.seatId, recipientEmailNormalized: namedSeat.recipientEmail }
+          }
+        ] : [],
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
-        { ns: "membershipOfferCheckout", id: String(binding.id), exists: true, equals: { offerDigest: offer.digest } },
+        { ns: "membershipOfferCheckout", id: String(binding.id), exists: true, equals: { offerDigest: offer.digest, quoteDigest: binding.quoteDigest } },
         { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
         evidenceGuard
       ] });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
     }
-    member = await membershipLoad(db, "networkMembership", id10);
+    member = await membershipLoad(db, "networkMembership", id11);
   }
   requireMembershipScope(member, input);
   if (member.purchaseOfferDigest !== offer.digest || member.providerInitialInvoiceId !== fact.invoiceId || member.providerSubscriptionId !== fact.subscriptionId || member.providerCustomerId !== fact.customerId) membershipFail("membership_purchase_conflict");
   return {
-    membershipId: id10,
+    membershipId: id11,
     status: String(member.status),
     cohort: String(member.cohort),
     initialTermStartedAt: Number(member.initialTermStartedAt),
@@ -4059,9 +4228,9 @@ async function confirmMembershipPayment(db, input, now) {
 // src/membership-cancel-authority.ts
 async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
   membershipClock(now);
-  const id10 = await networkMembershipId(target);
+  const id11 = await networkMembershipId(target);
   const state = await loadMembershipAuthorityState(db, target);
-  const member = await membershipLoad(db, "networkMembership", id10);
+  const member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, target);
   if (!["active", "cancel_at_term_end", "payment_grace", "paid_pending_approval", "lapsed"].includes(String(member.status))) {
     membershipFail("membership_cancellation_unavailable");
@@ -4079,7 +4248,7 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
       "POST",
       path,
       { cancel_at_period_end: true, proration_behavior: "none" },
-      { idempotencyKey: `membership-cancel-at-term:${id10}:${member.providerSubscriptionId}` }
+      { idempotencyKey: `membership-cancel-at-term:${id11}:${member.providerSubscriptionId}` }
     );
     if (!write.ok || write.body.id !== member.providerSubscriptionId || write.body.cancel_at_period_end !== true) {
       membershipFail("membership_cancellation_pending");
@@ -4087,7 +4256,7 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
   }
   const status2 = Number(member.termEndsAt) <= now ? "lapsed" : member.journeyApprovedAt ? "cancel_at_term_end" : "paid_pending_approval";
   if (member.status !== status2 || member.autoRenew !== false || Number(member.graceEndsAt ?? 0) !== 0) {
-    await db.transact([membershipUpdate("networkMembership", id10, {
+    await db.transact([membershipUpdate("networkMembership", id11, {
       status: status2,
       autoRenew: false,
       graceEndsAt: 0,
@@ -4096,12 +4265,12 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
       updatedAt: now
     })], {
       guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } }
       ]
     });
   }
-  return { membershipId: id10, status: status2, termEndsAt: Number(member.termEndsAt), graceEndsAt: 0, autoRenew: false };
+  return { membershipId: id11, status: status2, termEndsAt: Number(member.termEndsAt), graceEndsAt: 0, autoRenew: false };
 }
 
 // src/membership-authority-handler.ts
@@ -4140,17 +4309,17 @@ async function namedSeatPrimaryActivation(db, member, now) {
 // src/membership-approval-authority.ts
 async function approveNetworkMembership(db, input, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
   for (let attempt = 0; attempt < 8; attempt++) {
     const state = await loadMembershipAuthorityState(db, input);
-    const member = await membershipLoad(db, "networkMembership", id10);
+    const member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const entitlement = await membershipLoad(db, "networkEntitlement", entitlementId);
     requireMembershipScope(entitlement, input);
-    if (entitlement.membershipId !== id10 || entitlement.kind !== "primary") membershipFail("membership_entitlement_conflict");
+    if (entitlement.membershipId !== id11 || entitlement.kind !== "primary") membershipFail("membership_entitlement_conflict");
     if (["active", "cancel_at_term_end"].includes(String(member.status)) && entitlement.status === "active" && Number(member.refundedCents) === 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && Number(member.termEndsAt) > now) {
       return {
-        membershipId: id10,
+        membershipId: id11,
         status: String(member.status),
         cohort: String(member.cohort),
         memberNumber: Number(member.memberNumber),
@@ -4170,7 +4339,7 @@ async function approveNetworkMembership(db, input, now) {
     const seatActivation = await namedSeatPrimaryActivation(db, member, now);
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, {
+        membershipUpdate("networkMembership", id11, {
           status: member.autoRenew ? "active" : "cancel_at_term_end",
           memberNumber,
           journeyApprovedAt: now,
@@ -4185,8 +4354,8 @@ async function approveNetworkMembership(db, input, now) {
           updatedAt: now
         }),
         ...seatActivation.ops
-      ], { mutationId: `membership-approve:${id10}`, guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision, status: "paid_pending_approval" }, absent: ["memberNumber"] },
+      ], { mutationId: `membership-approve:${id11}`, guards: [
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision, status: "paid_pending_approval" }, absent: ["memberNumber"] },
         { ns: "networkEntitlement", id: entitlementId, exists: true, equals: { revision: entitlement.revision, status: "pending_approval" } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } },
         ...seatActivation.guards
@@ -4285,41 +4454,41 @@ async function refundSubscriptionPayment(secretKey, input) {
 // src/membership-refund-authority.ts
 async function refundNetworkMembership(db, input, secretKey, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
-  let state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
+  let state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
-  if (member.status === "refunded") return { membershipId: id10, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
+  if (member.status === "refunded") return { membershipId: id11, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
   if (!["paid_pending_approval", "active", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending"].includes(String(member.status))) membershipFail("membership_refund_not_eligible");
   if (member.status !== "refund_pending") {
     const entitlement = await membershipLoad(db, "networkEntitlement", entitlementId);
     requireMembershipScope(entitlement, input);
     await db.transact([
-      membershipUpdate("networkMembership", id10, {
+      membershipUpdate("networkMembership", id11, {
         status: "refund_pending",
         refundRequestedAt: now,
         revision: Number(member.revision) + 1,
         updatedAt: now
       }),
       membershipUpdate("networkEntitlement", entitlementId, { status: "closed", revision: Number(entitlement.revision) + 1, updatedAt: now }),
-      membershipUpdate("membershipEffect", `${id10}:refund`, {
-        id: `${id10}:refund`,
+      membershipUpdate("membershipEffect", `${id11}:refund`, {
+        id: `${id11}:refund`,
         chapterId: input.chapterId,
         environment: input.environment,
         runtime: input.runtime,
-        membershipId: id10,
+        membershipId: id11,
         kind: "refund_membership",
         status: "pending",
         attempts: 0,
         createdAt: now,
         updatedAt: now
       })
-    ], { mutationId: `membership-refund-request:${id10}`, guards: [
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+    ], { mutationId: `membership-refund-request:${id11}`, guards: [
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
       { ns: "networkEntitlement", id: entitlementId, exists: true, equals: { revision: entitlement.revision } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } }
     ] });
   }
-  member = await membershipLoad(db, "networkMembership", id10);
+  member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
   if (member.status !== "refund_pending") membershipFail("membership_refund_retry_required");
   const result = await refundSubscriptionPayment(secretKey, {
@@ -4333,23 +4502,23 @@ async function refundNetworkMembership(db, input, secretKey, now) {
   if (!result.subscriptionCanceled || result.refundedCents !== member.amountCents) membershipFail("membership_refund_unconfirmed");
   for (let attempt = 0; attempt < 8; attempt++) {
     state = await loadMembershipAuthorityState(db, input);
-    member = await membershipLoad(db, "networkMembership", id10);
+    member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
-    if (member.status === "refunded") return { membershipId: id10, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
+    if (member.status === "refunded") return { membershipId: id11, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
     if (member.status !== "refund_pending") membershipFail("membership_refund_retry_required");
     const counted = member.founding === true && member.memberNumber !== void 0;
     const counts = state.cohortCounts;
     if (!counts || counted && (!Number.isSafeInteger(counts[String(member.cohort)]) || counts[String(member.cohort)] < 1)) membershipFail("invalid_cohort_count");
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, {
+        membershipUpdate("networkMembership", id11, {
           status: "refunded",
           refundedCents: result.refundedCents,
           autoRenew: false,
           revision: Number(member.revision) + 1,
           updatedAt: now
         }),
-        membershipUpdate("membershipEffect", `${id10}:refund`, { status: "complete", updatedAt: now }),
+        membershipUpdate("membershipEffect", `${id11}:refund`, { status: "complete", updatedAt: now }),
         ...counted ? [membershipUpdate("membershipAuthorityState", String(state.id), {
           cohortCounts: { ...counts, [String(member.cohort)]: counts[String(member.cohort)] - 1 },
           revision: Number(state.revision) + 1,
@@ -4360,7 +4529,7 @@ async function refundNetworkMembership(db, input, secretKey, now) {
           chapterId: input.chapterId,
           environment: input.environment,
           runtime: input.runtime,
-          membershipId: id10,
+          membershipId: id11,
           seatId: member.namedSeatId,
           kind: "refund_seat_with_primary",
           status: "pending",
@@ -4368,8 +4537,8 @@ async function refundNetworkMembership(db, input, secretKey, now) {
           createdAt: now,
           updatedAt: now
         })] : []
-      ], { mutationId: `membership-refunded:${id10}`, guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { status: "refund_pending", revision: member.revision } },
+      ], { mutationId: `membership-refunded:${id11}`, guards: [
+        { ns: "networkMembership", id: id11, exists: true, equals: { status: "refund_pending", revision: member.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
       ] });
     } catch (error) {
@@ -4397,8 +4566,8 @@ async function reserveNamedMembershipSeat(db, input, now) {
   const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
   requireMembershipScope(member, input);
   if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
-  const id10 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  let seat = await membershipLoad(db, "networkSeat", id10);
+  const id11 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
+  let seat = await membershipLoad(db, "networkSeat", id11);
   if (!seat) {
     const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
     const purchaseEndsAt = seatPurchaseDeadline(offering, member);
@@ -4406,7 +4575,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
       membershipFail("named_seat_purchase_unavailable");
     }
     const attrs = {
-      id: id10,
+      id: id11,
       ...membershipScope(input),
       primaryMembershipId: memberId,
       recipientName: name,
@@ -4431,20 +4600,20 @@ async function reserveNamedMembershipSeat(db, input, now) {
     };
     try {
       await db.transact([
-        membershipUpdate("networkSeat", id10, attrs),
+        membershipUpdate("networkSeat", id11, attrs),
         membershipUpdate("networkSeatRecipient", claimId, {
           id: claimId,
           appId: input.appId,
           chapterId: input.chapterId,
           environment: input.environment,
           runtime: input.runtime,
-          seatId: id10,
+          seatId: id11,
           recipientEmailNormalized: email,
           createdAt: now
         }),
-        membershipUpdate("networkMembership", memberId, { namedSeatId: id10, revision: Number(member.revision) + 1, updatedAt: now })
-      ], { mutationId: `named-seat-reserve:${id10}`, guards: [
-        { ns: "networkSeat", id: id10, exists: false },
+        membershipUpdate("networkMembership", memberId, { namedSeatId: id11, revision: Number(member.revision) + 1, updatedAt: now })
+      ], { mutationId: `named-seat-reserve:${id11}`, guards: [
+        { ns: "networkSeat", id: id11, exists: false },
         { ns: "networkSeatRecipient", id: claimId, exists: false },
         { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
@@ -4452,7 +4621,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
     }
-    seat = await membershipLoad(db, "networkSeat", id10);
+    seat = await membershipLoad(db, "networkSeat", id11);
     if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
   }
   requireMembershipScope(seat, input);
@@ -4462,7 +4631,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
 
 // src/membership-seat-included.ts
 var namedSeatIncluded = (seat) => Number(seat.amountCents) === 0;
-var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean(seat.providerPaymentIntentId && seat.providerSubscriptionItemId);
+var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean((seat.providerPaymentIntentId || seat.combinedInvoice) && seat.providerSubscriptionItemId);
 function namedSeatRecipientState(seat) {
   switch (String(seat.status)) {
     case "renewal_pending":
@@ -4560,7 +4729,7 @@ async function grantIncludedNamedSeat(db, input, now) {
 // src/membership-renewal-authority.ts
 async function reconcileMembershipRenewal(db, input, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
+  const id11 = await networkMembershipId(input), eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow?.digest, "membership_renewal_evidence_pending");
   const fact = eventRow?.fact;
   if (!fact || !/^evt_[A-Za-z0-9_]+$/.test(input.eventId) || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.objectKind !== "invoice" || !["invoice.payment_succeeded", "invoice.payment_failed"].includes(fact.eventType) || fact.billingReason !== "subscription_cycle" || fact.livemode !== (input.environment === "prod") || fact.applicationId !== input.applicationId || Object.entries({
@@ -4573,10 +4742,10 @@ async function reconcileMembershipRenewal(db, input, now) {
     return membershipFail("membership_renewal_evidence_pending");
   }
   for (let attempt = 0; attempt < 8; attempt++) {
-    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const receipt = () => ({
-      membershipId: id10,
+      membershipId: id11,
       status: String(member.status),
       termEndsAt: Number(member.termEndsAt),
       graceEndsAt: Number(member.graceEndsAt ?? 0),
@@ -4601,13 +4770,13 @@ async function reconcileMembershipRenewal(db, input, now) {
     const paid = fact.eventType === "invoice.payment_succeeded";
     if (!paid && (fact.status !== "open" || !Number.isSafeInteger(fact.amountPaidCents) || Number(fact.amountPaidCents) < 0 || Number(fact.amountPaidCents) >= amount)) membershipFail("membership_renewal_failure_mismatch");
     if (paid && (fact.status !== "paid" || fact.amountPaidCents !== amount || !Number.isSafeInteger(fact.invoicePaidAt) || Number(fact.invoicePaidAt) < start || Number(fact.invoicePaidAt) > now + 3e4)) membershipFail("membership_renewal_unpaid");
-    const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+    const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
     requireMembershipScope(entitlement, input);
     const graceEndsAt = paid ? 0 : start + 14 * 864e5;
     const status2 = paid ? member.journeyApprovedAt ? member.autoRenew ? "active" : "cancel_at_term_end" : "paid_pending_approval" : now < graceEndsAt ? "payment_grace" : "lapsed";
     const entitlementStatus = member.journeyApprovedAt && (paid || now < graceEndsAt) ? "active" : member.journeyApprovedAt ? "closed" : "pending_approval";
     const ops = [
-      membershipUpdate("networkMembership", id10, {
+      membershipUpdate("networkMembership", id11, {
         status: status2,
         graceEndsAt,
         ...paid ? {
@@ -4618,7 +4787,7 @@ async function reconcileMembershipRenewal(db, input, now) {
         revision: Number(member.revision) + 1,
         updatedAt: now
       }),
-      membershipUpdate("networkEntitlement", `${id10}:primary`, {
+      membershipUpdate("networkEntitlement", `${id11}:primary`, {
         status: entitlementStatus,
         ...paid ? { termStartedAt: start, termEndsAt: end } : {},
         sourceEventId: input.eventId,
@@ -4627,8 +4796,8 @@ async function reconcileMembershipRenewal(db, input, now) {
       })
     ];
     const guards = [
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
-      { ns: "networkEntitlement", id: `${id10}:primary`, exists: true, equals: { revision: entitlement.revision } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
+      { ns: "networkEntitlement", id: `${id11}:primary`, exists: true, equals: { revision: entitlement.revision } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } },
       { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
       evidenceGuard
@@ -4653,15 +4822,15 @@ async function reconcileMembershipRenewal(db, input, now) {
       );
     }
     try {
-      await db.transact(ops, { mutationId: `membership-renewal:${id10}:${input.eventId}`, guards });
+      await db.transact(ops, { mutationId: `membership-renewal:${id11}:${input.eventId}`, guards });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
       continue;
     }
-    const saved = await membershipLoad(db, "networkMembership", id10);
+    const saved = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(saved, input);
     return {
-      membershipId: id10,
+      membershipId: id11,
       status: String(saved.status),
       termEndsAt: Number(saved.termEndsAt),
       graceEndsAt: Number(saved.graceEndsAt ?? 0),
@@ -4687,12 +4856,12 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   }).some(([key3, value]) => fact.identity[key3] !== value)) membershipFail("membership_billing_evidence_pending");
   const sk = await getVaultSecret(db, stripeSecretName);
   if (!sk) membershipFail("membership_billing_provider_unavailable");
-  const id10 = await networkMembershipId(input);
+  const id11 = await networkMembershipId(input);
   for (let attempt = 0; attempt < 8; attempt++) {
-    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const receipt = (value = member) => ({
-      membershipId: id10,
+      membershipId: id11,
       status: String(value.status),
       termEndsAt: Number(value.termEndsAt),
       graceEndsAt: Number(value.graceEndsAt ?? 0),
@@ -4713,7 +4882,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
       });
       await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
       await refundNetworkMembership(db, input, sk, now);
-      const saved2 = await membershipLoad(db, "networkMembership", id10);
+      const saved2 = await membershipLoad(db, "networkMembership", id11);
       requireMembershipScope(saved2, input);
       return receipt(saved2);
     }
@@ -4728,18 +4897,18 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
     const status2 = autoRenew ? member.status === "cancel_at_term_end" ? "active" : String(member.status) : now >= Number(member.termEndsAt) ? "lapsed" : member.journeyApprovedAt ? "cancel_at_term_end" : "paid_pending_approval";
     const graceEndsAt = autoRenew ? Number(member.graceEndsAt ?? 0) : 0;
     if (member.autoRenew === autoRenew && member.status === status2 && Number(member.graceEndsAt ?? 0) === graceEndsAt) return receipt();
-    const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+    const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
     requireMembershipScope(entitlement, input);
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, { status: status2, autoRenew, graceEndsAt, revision: Number(member.revision) + 1, updatedAt: now }),
+        membershipUpdate("networkMembership", id11, { status: status2, autoRenew, graceEndsAt, revision: Number(member.revision) + 1, updatedAt: now }),
         membershipUpdate("networkEntitlement", String(entitlement.id), {
           status: status2 === "lapsed" ? "closed" : entitlement.status,
           revision: Number(entitlement.revision) + 1,
           updatedAt: now
         })
       ], { guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
         { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
         { ns: "networkCommercialEvents", id: String(row2.id), exists: true, equals: { digest: fact.digest } },
@@ -4749,7 +4918,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
       if (error.code !== "transact_guard_failed") throw error;
       continue;
     }
-    const saved = await membershipLoad(db, "networkMembership", id10);
+    const saved = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(saved, input);
     return receipt(saved);
   }
@@ -4810,19 +4979,19 @@ async function stopPreviousSubscription(member, target, secret) {
 async function prepareMembershipRestart(db, input, now, stripeSecret) {
   membershipClock(now);
   if (!/^sub_[A-Za-z0-9_]+$/.test(input.previousSubscriptionId)) membershipFail("membership_restart_conflict");
-  const id10 = await networkMembershipId(input), bindingId = await membershipCheckoutBindingId(input);
-  const restartId = `restart_${await stripePayloadDigest(JSON.stringify([id10, input.previousSubscriptionId]))}`;
+  const id11 = await networkMembershipId(input), bindingId = await membershipCheckoutBindingId(input);
+  const restartId = `restart_${await stripePayloadDigest(JSON.stringify([id11, input.previousSubscriptionId]))}`;
   const state = await loadMembershipAuthorityState(db, input);
-  const previous = await membershipLoad(db, "networkMembership", id10);
+  const previous = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(previous, input);
   const receipt = {
     applicationId: input.applicationId,
-    membershipId: id10,
+    membershipId: id11,
     restartId,
     memberNumber: Number(previous.memberNumber),
     status: "ready"
   };
-  const existing = await membershipLoad(db, "membershipRestart", id10);
+  const existing = await membershipLoad(db, "membershipRestart", id11);
   if (existing?.restartId === restartId && existing.status === "ready") {
     requireMembershipScope(existing, input);
     return receipt;
@@ -4838,33 +5007,33 @@ async function prepareMembershipRestart(db, input, now, stripeSecret) {
       membershipUpdate("membershipPurchaseHistory", restartId, {
         id: restartId,
         ...membershipScope(input),
-        membershipId: id10,
+        membershipId: id11,
         providerSubscriptionId: input.previousSubscriptionId,
         memberSnapshot: previous,
         bindingSnapshot: binding2,
         archivedAt: now
       }),
-      membershipUpdate("networkMembership", id10, { status: "restarting", restartId, revision: Number(previous.revision) + 1, updatedAt: now })
+      membershipUpdate("networkMembership", id11, { status: "restarting", restartId, revision: Number(previous.revision) + 1, updatedAt: now })
     ], { mutationId: `membership-restart-reserve:${restartId}`, guards: [
       ...seats.guards,
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: previous.revision, status: previous.status } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: previous.revision, status: previous.status } },
       { ns: "membershipPurchaseHistory", id: restartId, exists: false },
       { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding2.offerDigest } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
     ] });
   } else if (previous.restartId !== restartId) membershipFail("membership_restart_conflict");
-  const reserved = await membershipLoad(db, "networkMembership", id10);
+  const reserved = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(reserved, input);
   if (reserved.status !== "restarting" || reserved.restartId !== restartId) membershipFail("membership_restart_conflict");
   await stopPreviousSubscription(reserved, input, stripeSecret);
   const binding = await membershipLoad(db, "membershipOfferCheckout", bindingId);
   requireMembershipScope(binding, input);
   await db.transact([
-    membershipUpdate("membershipRestart", id10, { id: id10, ...membershipScope(input), ...receipt, previousSubscriptionId: input.previousSubscriptionId, createdAt: now }),
+    membershipUpdate("membershipRestart", id11, { id: id11, ...membershipScope(input), ...receipt, previousSubscriptionId: input.previousSubscriptionId, createdAt: now }),
     { t: "delete", ns: "membershipOfferCheckout", id: bindingId }
   ], { mutationId: `membership-restart-ready:${restartId}`, guards: [
-    { ns: "membershipRestart", id: id10, exists: Boolean(existing), ...existing ? { equals: { restartId: existing.restartId, status: existing.status } } : {} },
-    { ns: "networkMembership", id: id10, exists: true, equals: { revision: reserved.revision, status: "restarting", restartId } },
+    { ns: "membershipRestart", id: id11, exists: Boolean(existing), ...existing ? { equals: { restartId: existing.restartId, status: existing.status } } : {} },
+    { ns: "networkMembership", id: id11, exists: true, equals: { revision: reserved.revision, status: "restarting", restartId } },
     { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding.offerDigest } }
   ] });
   return receipt;
@@ -4874,15 +5043,15 @@ async function prepareMembershipRestart(db, input, now, stripeSecret) {
 async function readMembershipAccess(db, input, now) {
   membershipClock(now);
   await loadMembershipAuthorityState(db, input);
-  const id10 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id10);
-  if (!member) return { membershipId: id10, allowed: false, status: "unpaid", accessEndsAt: 0, revision: 0 };
+  const id11 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id11);
+  if (!member) return { membershipId: id11, allowed: false, status: "unpaid", accessEndsAt: 0, revision: 0 };
   requireMembershipScope(member, input);
-  const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+  const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
   requireMembershipScope(entitlement, input);
   const endsAt = member.status === "payment_grace" ? Number(member.graceEndsAt) : Number(member.termEndsAt);
-  const allowed2 = ["active", "cancel_at_term_end", "payment_grace"].includes(String(member.status)) && member.journeyApprovedAt !== void 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && member.refundedCents === 0 && entitlement.status === "active" && entitlement.membershipId === id10 && entitlement.kind === "primary" && Number.isSafeInteger(endsAt) && endsAt > now && Number(member.termStartedAt) <= now;
+  const allowed2 = ["active", "cancel_at_term_end", "payment_grace"].includes(String(member.status)) && member.journeyApprovedAt !== void 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && member.refundedCents === 0 && entitlement.status === "active" && entitlement.membershipId === id11 && entitlement.kind === "primary" && Number.isSafeInteger(endsAt) && endsAt > now && Number(member.termStartedAt) <= now;
   return {
-    membershipId: id10,
+    membershipId: id11,
     allowed: allowed2,
     status: String(member.status),
     accessEndsAt: Number.isSafeInteger(endsAt) ? endsAt : 0,
@@ -4937,7 +5106,7 @@ async function subscriptionForSeat(sk, seat) {
     currency: seat.currency,
     interval: seat.interval,
     environment: seat.environment
-  }, Boolean(seat.providerPaymentIntentId));
+  }, Boolean(seat.providerPaymentIntentId || seat.combinedInvoice));
   if (!productId) reject3();
   const sub = await read(sk, `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}?expand[]=discounts`);
   const items = sub.items?.data;
@@ -4981,10 +5150,14 @@ async function createNamedSeatStripePayment(sk, seat, now) {
   return { paymentIntentId: pi.id, clientSecret: pi.client_secret, status: pi.status };
 }
 async function attachNamedSeatStripeRenewal(sk, seat) {
-  if (!seat.providerPaymentIntentId || !["renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status)) reject3();
+  if (!seat.providerPaymentIntentId && !seat.combinedInvoice || !["renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status)) reject3();
   const sub = await subscriptionForSeat(sk, seat);
   const existing = sub.items.data.find((item2) => item2.metadata?.seatId === seat.id);
-  if (existing) return String(existing.id);
+  if (existing) {
+    if (!/^si_[A-Za-z0-9_]+$/.test(existing.id)) reject3();
+    return String(existing.id);
+  }
+  if (seat.combinedInvoice) reject3();
   const result = await (0, import_stripe7.stripeRequest)({ secretKey: sk }, "POST", "/v1/subscription_items", {
     subscription: seat.providerSubscriptionId,
     price: seat.priceId,
@@ -5202,7 +5375,7 @@ async function recordRecipient(db, input, now, approve) {
     const state = await loadMembershipAuthorityState(db, input);
     const seat = await membershipLoad(db, "networkSeat", input.seatId);
     requireMembershipScope(seat, input);
-    if (!seat.purchaserUserId || seat.purchaserUserId === input.recipientUserId) membershipFail("named_seat_recipient_must_differ_from_purchaser");
+    if (!seat.purchaserUserId && !seat.purchaserEmailNormalized || seat.purchaserUserId === input.recipientUserId || seat.purchaserEmailNormalized === normalizeChapterEmail(input.verifiedRecipientEmail)) membershipFail("named_seat_recipient_must_differ_from_purchaser");
     const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
     requireMembershipScope(member, input);
     const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
@@ -5260,43 +5433,121 @@ async function recordRecipient(db, input, now, approve) {
 }
 
 // src/membership-seat-refund-stripe.ts
+var import_stripe9 = require("@odla-ai/stripe");
+
+// src/membership-checkout-seat-refund.ts
 var import_stripe8 = require("@odla-ai/stripe");
 var fail4 = (code = "named_seat_refund_mismatch") => {
   throw Object.assign(new Error(code), { code });
 };
+var id8 = (value) => typeof value === "string" ? value : value?.id ?? "";
+async function refundCheckoutNamedSeat(secretKey, seat) {
+  const invoiceRef = seat.combinedInvoice;
+  if (!invoiceRef || !/^in_[A-Za-z0-9_]+$/.test(invoiceRef.invoiceId) || !Number.isSafeInteger(invoiceRef.totalCents) || invoiceRef.totalCents <= seat.amountCents || seat.amountCents <= 0 || seat.status !== "refund_pending") fail4();
+  const call = async (method, path, params, key3) => {
+    const result = await (0, import_stripe8.stripeRequest)({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
+    return result.body;
+  };
+  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId };
+  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
+  if (sub.id !== seat.providerSubscriptionId || id8(sub.customer) !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(sub.items?.data) || sub.items.has_more !== false) fail4();
+  const invoice = await call("GET", `/v1/invoices/${encodeURIComponent(invoiceRef.invoiceId)}`);
+  if (invoice.id !== invoiceRef.invoiceId || id8(invoice.subscription ?? invoice.parent?.subscription_details?.subscription) !== sub.id || id8(invoice.customer) !== seat.providerCustomerId || invoice.status !== "paid" || invoice.billing_reason !== "subscription_create" || invoice.total !== invoiceRef.totalCents || invoice.amount_paid !== invoiceRef.totalCents || invoice.currency !== seat.currency || invoice.livemode !== (seat.environment === "prod")) fail4();
+  let chargeId = id8(invoice.charge), paymentId = id8(invoice.payment_intent);
+  if (!chargeId && !paymentId) {
+    const payments = await call("GET", "/v1/invoice_payments", { invoice: invoice.id, status: "paid", limit: 100 });
+    if (!Array.isArray(payments.data) || payments.data.length !== 1 || payments.has_more !== false) fail4();
+    const payment = payments.data[0];
+    if (id8(payment.invoice) !== invoice.id || payment.status !== "paid" || payment.payment?.type !== "payment_intent") fail4();
+    paymentId = id8(payment.payment.payment_intent);
+  }
+  if (!chargeId) {
+    if (!/^pi_[A-Za-z0-9_]+$/.test(paymentId)) fail4();
+    const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(paymentId)}`);
+    if (payment.id !== paymentId || id8(payment.customer) !== seat.providerCustomerId || payment.status !== "succeeded" || payment.amount_received !== invoiceRef.totalCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod")) fail4();
+    chargeId = id8(payment.latest_charge);
+  }
+  if (!/^ch_[A-Za-z0-9_]+$/.test(chargeId)) fail4();
+  const charge = await call("GET", `/v1/charges/${encodeURIComponent(chargeId)}`);
+  if (charge.id !== chargeId || id8(charge.customer) !== seat.providerCustomerId || charge.status !== "succeeded" || charge.livemode !== (seat.environment === "prod") || charge.amount !== invoiceRef.totalCents || charge.currency !== seat.currency || charge.invoice != null && id8(charge.invoice) !== invoice.id || paymentId && id8(charge.payment_intent) !== paymentId || !Number.isSafeInteger(charge.amount_refunded) || charge.amount_refunded < 0 || charge.amount_refunded > charge.amount) fail4();
+  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
+  if (items.length > 1) fail4();
+  if (items.length && sub.status !== "canceled") {
+    const item = items[0];
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.quantity !== 1 || item.price?.id !== seat.priceId) fail4();
+    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
+    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
+  }
+  if (charge.amount_refunded === charge.amount && charge.refunded === true) return { refundedCents: seat.amountCents, refundIds: [] };
+  const list = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  let refundedCents = 0;
+  const refundIds = [];
+  for (const refund of list.data) {
+    if (id8(refund.charge) !== chargeId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !/^re_[A-Za-z0-9_]+$/.test(refund.id) || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
+    if (["pending", "requires_action"].includes(refund.status)) fail4("named_seat_refund_pending");
+    if (refund.status === "succeeded") {
+      if (refund.metadata?.seatId !== seat.id || refund.metadata?.membershipId !== seat.primaryMembershipId) fail4("named_seat_refund_allocation_ambiguous");
+      refundedCents += refund.amount;
+      refundIds.push(refund.id);
+    }
+  }
+  if (refundedCents !== charge.amount_refunded || refundedCents > seat.amountCents) fail4();
+  if (refundedCents < seat.amountCents) {
+    const remaining = seat.amountCents - refundedCents;
+    const refund = await call("POST", "/v1/refunds", {
+      charge: chargeId,
+      amount: remaining,
+      reason: "requested_by_customer",
+      metadata: { ...metadata, membershipId: seat.primaryMembershipId, seatId: seat.id }
+    }, `combined-seat-refund:${seat.id}:${remaining}`);
+    if (id8(refund.charge) !== chargeId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
+    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
+    refundedCents += remaining;
+    refundIds.push(refund.id);
+  }
+  return { refundedCents, refundIds };
+}
+
+// src/membership-seat-refund-stripe.ts
+var fail5 = (code = "named_seat_refund_mismatch") => {
+  throw Object.assign(new Error(code), { code });
+};
 async function refundNamedSeatStripePayment(secretKey, seat) {
-  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail4();
+  if (seat.combinedInvoice) return refundCheckoutNamedSeat(secretKey, seat);
+  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail5();
   const call = async (method, path, params, idempotencyKey) => {
-    const result = await (0, import_stripe8.stripeRequest)({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
-    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
+    const result = await (0, import_stripe9.stripeRequest)({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
+    if (!result.ok || !result.body) return fail5("named_seat_refund_provider_unavailable");
     return result.body;
   };
   const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`);
-  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail4();
+  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail5();
   const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
-  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail4();
+  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail5();
   const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
-  if (items.length > 1) fail4();
+  if (items.length > 1) fail5();
   if (items.length && sub.status !== "canceled") {
     const item = items[0];
-    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail4();
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail5();
     const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
-    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
+    if (removed.id !== item.id || removed.deleted !== true) fail5("named_seat_renewal_removal_unconfirmed");
   }
   const list = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail5("named_seat_refund_history_incomplete");
   let refundedCents = 0, pendingCents = 0;
   const refundIds = [];
   for (const refund of list.data) {
-    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
+    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail5();
     if (refund.status === "succeeded") {
       refundedCents += refund.amount;
       refundIds.push(refund.id);
     } else if (refund.status === "pending" || refund.status === "requires_action") pendingCents += refund.amount;
   }
-  if (refundedCents + pendingCents > seat.amountCents) fail4();
-  if (pendingCents) fail4("named_seat_refund_pending");
+  if (refundedCents + pendingCents > seat.amountCents) fail5();
+  if (pendingCents) fail5("named_seat_refund_pending");
   if (refundedCents < seat.amountCents) {
     const remaining = seat.amountCents - refundedCents;
     const refund = await call("POST", "/v1/refunds", {
@@ -5305,8 +5556,8 @@ async function refundNamedSeatStripePayment(secretKey, seat) {
       reason: "requested_by_customer",
       metadata
     }, `named-seat-refund:${seat.id}:${remaining}`);
-    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
-    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
+    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail5();
+    if (refund.status !== "succeeded") fail5("named_seat_refund_pending");
     refundedCents += remaining;
     refundIds.push(refund.id);
   }
@@ -5322,7 +5573,7 @@ async function requestNamedSeatRefund(db, input, now) {
   const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
   requireMembershipScope(member, input);
   if (seat.status === "refunded" || seat.status === "refund_pending") return;
-  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
+  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !seat.combinedInvoice && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
   const entitlement = seat.entitlementId ? await membershipLoad(db, "networkEntitlement", String(seat.entitlementId)) : void 0;
   await db.transact([
     membershipUpdate("networkSeat", input.seatId, { status: "refund_pending", refundReason: input.reason, revision: Number(seat.revision) + 1, updatedAt: now }),
@@ -5427,14 +5678,14 @@ var at = (value) => Number.isSafeInteger(value) ? Number(value) : void 0;
 async function readNamedSeatOffer(db, input, now) {
   membershipClock(now);
   await loadMembershipAuthorityState(db, input);
-  const id10 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
   const offering = membershipOfferingVersion(member.offeringSnapshot);
   const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
   if (seat) requireMembershipScope(seat, input);
   const purchaseEndsAt = seatPurchaseDeadline(offering, member);
   const offer = {
-    membershipId: id10,
+    membershipId: id11,
     amountCents: offering.seatPriceCents,
     currency: offering.currency,
     interval: offering.interval,
@@ -5584,7 +5835,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
   };
   if (action === "seat-accept") return acceptNamedSeatRecipient(db, recipientInput, now);
   if (action === "seat-approve") return approveNamedSeatRecipient(db, recipientInput, now);
-  const checkout = {
+  const checkout2 = {
     ...target,
     priceId: peer.seatPriceId,
     recipientName: String(input.recipientName),
@@ -5592,7 +5843,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     purchaserEmail: String(input.purchaserEmail),
     purchaserUserId: String(input.purchaserUserId)
   };
-  if (action === "seat-checkouts" && namedSeatIncluded(await reserveNamedMembershipSeat(db, checkout, now))) return grantIncludedNamedSeat(db, checkout, now);
+  if (action === "seat-checkouts" && namedSeatIncluded(await reserveNamedMembershipSeat(db, checkout2, now))) return grantIncludedNamedSeat(db, checkout2, now);
   const secret = await getVaultSecret(db, stripeSecretName);
   if (!secret) throw new Error("network Stripe provider is unavailable");
   if (action === "seat-decline") {
@@ -5608,7 +5859,7 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     return { seatId: seat.id, status: "refunded", refundedCents: refunded.refundedCents, subscriptionCanceled: false };
   }
   if (action === "seat-operator-refund") return refundNamedSeatByOperator(db, { ...target, seatId: String(input.seatId) }, secret, now);
-  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, checkout, secret, now);
+  if (action === "seat-checkouts") return prepareNamedMembershipSeatPayment(db, checkout2, secret, now);
   const evidence = { ...target, seatId: String(input.seatId), eventId: String(input.eventId) };
   if (action === "seat-payments") {
     const receipt = await confirmNamedMembershipSeatPayment(db, evidence, now);
@@ -5679,9 +5930,9 @@ function createMembershipAuthorityHandler(options) {
   const identities = /* @__PURE__ */ new Set();
   for (const peer of peers) {
     if (!/^[a-z0-9][a-z0-9-]{1,62}$/.test(peer.appId) || !SAFE.test(peer.chapterId) || !/^[a-z0-9][a-z0-9-]{1,31}$/.test(peer.environment) || !/^[a-z0-9]{2,12}$/.test(peer.runtime) || !/^[A-Za-z][A-Za-z0-9_-]{1,127}$/.test(peer.secretName)) throw new TypeError("invalid authority peer");
-    const identity = `${peer.appId}:${peer.runtime}`;
-    if (identities.has(identity)) throw new TypeError("ambiguous authority peer");
-    identities.add(identity);
+    const identity2 = `${peer.appId}:${peer.runtime}`;
+    if (identities.has(identity2)) throw new TypeError("ambiguous authority peer");
+    identities.add(identity2);
     if (peer.seatPriceId !== void 0 && !/^price_[A-Za-z0-9]+$/.test(peer.seatPriceId)) throw new TypeError("invalid seat Price");
   }
   return async (req) => {
@@ -5712,9 +5963,14 @@ function createMembershipAuthorityHandler(options) {
       try {
         input = JSON.parse(verified.body);
         const fields = action === "seat-invitation" ? MEMBERSHIP_SEAT_ACTION_FIELDS[action] : action === "offer-preview" ? ["skuId"] : ["applicationId", "skuId", ...action === "offers" ? ["requestId"] : action === "checkouts" ? ["offerId", "offerDigest", "quoteDigest", "priceId"] : action === "payments" ? ["eventId", "providerSubscriptionId", "providerCustomerId"] : action === "renewals" ? ["eventId"] : action === "restarts" ? ["previousSubscriptionId"] : MEMBERSHIP_SEAT_ACTION_FIELDS[action] ?? []];
-        if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key3) => !fields.includes(key3)) || !fields.every((key3) => typeof input[key3] === "string" && (["recipientName", "recipientEmail", "purchaserEmail", "verifiedRecipientEmail"].includes(key3) ? input[key3].length > 0 && input[key3].length <= 254 && !/[\u0000-\u001f\u007f]/.test(input[key3]) : SAFE.test(input[key3])))) {
+        if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key3) => !fields.includes(key3) && !(action === "checkouts" && key3 === "namedSeat")) || !fields.every((key3) => typeof input[key3] === "string" && (["recipientName", "recipientEmail", "purchaserEmail", "verifiedRecipientEmail"].includes(key3) ? input[key3].length > 0 && input[key3].length <= 254 && !/[\u0000-\u001f\u007f]/.test(input[key3]) : SAFE.test(input[key3])))) {
           throw new TypeError("invalid request");
         }
+        if (action === "checkouts" && input.namedSeat !== void 0) {
+          const seat = input.namedSeat;
+          if (!seat || Object.keys(seat).some((key3) => !["recipientName", "recipientEmail", "purchaserEmail"].includes(key3)) || typeof seat.purchaserEmail !== "string" || seat.purchaserEmail.length > 254) throw new TypeError("invalid seat");
+          checkoutNamedSeatSelection(seat, seat.purchaserEmail);
+        }
       } catch {
         return respond({ error: "invalid_offer_request" }, 400);
       }
@@ -5787,8 +6043,9 @@ function createMembershipAuthorityHandler(options) {
           offerId: String(input.offerId),
           offerDigest: String(input.offerDigest),
           quoteDigest: String(input.quoteDigest),
-          priceId: String(input.priceId)
-        }, options.now?.() ?? Date.now());
+          priceId: String(input.priceId),
+          ...input.namedSeat ? { namedSeat: input.namedSeat } : {}
+        }, options.now?.() ?? Date.now(), peer.seatPriceId);
         return respond({ ok: true, binding });
       }
       const offerId = await membershipOfferIdForRequest({ ...peer, applicationId: String(input.applicationId), requestId: String(input.requestId) });
@@ -5891,7 +6148,8 @@ async function requestMembershipCheckoutBinding(options) {
     offerId: options.offerId,
     offerDigest: options.offerDigest,
     quoteDigest: options.quoteDigest,
-    priceId: options.priceId
+    priceId: options.priceId,
+    ...options.namedSeat ? { namedSeat: options.namedSeat } : {}
   });
   return verifyMembershipCheckoutBinding(result.binding, options);
 }
@@ -6101,7 +6359,7 @@ async function requestMembershipCancellation(options) {
 }
 
 // src/membership-seat-cancel.ts
-var import_stripe9 = require("@odla-ai/stripe");
+var import_stripe10 = require("@odla-ai/stripe");
 async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   membershipClock(now);
   const state = await loadMembershipAuthorityState(db, target);
@@ -6129,7 +6387,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   }
   const metadata = { ...stripePartitionMetadata(target), applicationId: target.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const request = async (method, path, params) => {
-    const result = await (0, import_stripe9.stripeRequest)(
+    const result = await (0, import_stripe10.stripeRequest)(
       { secretKey },
       method,
       path,
@@ -6142,7 +6400,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   let payment;
   if (seat.providerPaymentIntentId) payment = await request("GET", `/v1/payment_intents/${encodeURIComponent(String(seat.providerPaymentIntentId))}`);
   else {
-    const snapshot = await listStripeObjects((0, import_stripe9.initStripe)({ secretKey }), "/v1/payment_intents", { customer: String(seat.providerCustomerId) });
+    const snapshot = await listStripeObjects((0, import_stripe10.initStripe)({ secretKey }), "/v1/payment_intents", { customer: String(seat.providerCustomerId) });
     const matches2 = snapshot.objects.filter((row2) => row2.metadata?.seatId === target.seatId);
     if (!snapshot.complete || matches2.length !== 1) throw new Error("seat payment creation outcome unresolved");
     payment = matches2[0];
@@ -6155,9 +6413,9 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   if (payment.status === "succeeded" || payment.amount_received > 0) throw new Error("paid seat requires payment evidence and full refund");
   if (payment.status !== "canceled") {
     if (!["requires_payment_method", "requires_confirmation", "requires_action", "processing"].includes(payment.status)) throw new Error("seat payment outcome unresolved");
-    const id10 = payment.id;
-    payment = await request("POST", `/v1/payment_intents/${encodeURIComponent(id10)}/cancel`, { cancellation_reason: "abandoned" });
-    if (payment.id !== id10) throw new Error("seat cancellation receipt mismatch");
+    const id11 = payment.id;
+    payment = await request("POST", `/v1/payment_intents/${encodeURIComponent(id11)}/cancel`, { cancellation_reason: "abandoned" });
+    if (payment.id !== id11) throw new Error("seat cancellation receipt mismatch");
   }
   if (!valid(payment) || payment.status !== "canceled" || payment.amount_received !== 0) throw new Error("seat cancellation unconfirmed");
   await db.transact([membershipUpdate("networkSeat", target.seatId, { status: "canceled", revision: Number(seat.revision) + 1, updatedAt: now })], {
@@ -6257,11 +6515,11 @@ async function drainMembershipEffects(db, options, now) {
 
 // src/schema-membership-offers.ts
 var attr8 = (type, optional = false, unique = false, indexed = false) => ({ type, optional, unique, indexed });
-var id8 = () => attr8("string", false, true, true);
+var id9 = () => attr8("string", false, true, true);
 var key = () => attr8("string", false, false, true);
 var membershipOfferEntities = {
   membershipAuthorityState: { attrs: {
-    id: id8(),
+    id: id9(),
     chapterId: key(),
     environment: key(),
     mode: key(),
@@ -6271,7 +6529,7 @@ var membershipOfferEntities = {
     updatedAt: attr8("number")
   } },
   membershipCheckoutOffer: { attrs: {
-    id: id8(),
+    id: id9(),
     applicationId: key(),
     appId: key(),
     chapterId: key(),
@@ -6286,7 +6544,7 @@ var membershipOfferEntities = {
     authorityRevision: attr8("number")
   } },
   membershipOfferCheckout: { attrs: {
-    id: id8(),
+    id: id9(),
     appId: key(),
     chapterId: key(),
     environment: key(),
@@ -6297,20 +6555,21 @@ var membershipOfferEntities = {
     offerDigest: attr8("string"),
     quoteDigest: attr8("string"),
     priceId: attr8("string"),
-    boundAt: attr8("number")
+    boundAt: attr8("number"),
+    namedSeat: attr8("json", true)
   } }
 };
 var membershipOfferRules = Object.fromEntries(Object.keys(membershipOfferEntities).map((ns) => [ns, { view: "false", create: "false", update: "false", delete: "false" }]));
 
 // src/schema-membership-authority.ts
 var attr9 = (type, optional = false, unique = false, indexed = false) => ({ type, optional, unique, indexed });
-var id9 = () => attr9("string", false, true, true);
+var id10 = () => attr9("string", false, true, true);
 var key2 = (optional = false) => attr9("string", optional, false, true);
 var scope = () => ({ appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), applicationId: key2(), skuId: key2() });
 var times = () => ({ revision: attr9("number"), createdAt: attr9("number"), updatedAt: attr9("number") });
 var membershipAuthorityEntities = {
   networkMembership: { attrs: {
-    id: id9(),
+    id: id10(),
     membershipId: key2(),
     ...scope(),
     personId: key2(true),
@@ -6350,7 +6609,7 @@ var membershipAuthorityEntities = {
     restartId: key2(true)
   } },
   membershipRestart: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     restartId: key2(),
@@ -6360,7 +6619,7 @@ var membershipAuthorityEntities = {
     createdAt: attr9("number")
   } },
   membershipPurchaseHistory: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     providerSubscriptionId: key2(),
@@ -6369,7 +6628,7 @@ var membershipAuthorityEntities = {
     archivedAt: attr9("number")
   } },
   networkEntitlement: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     seatId: key2(true),
@@ -6386,10 +6645,12 @@ var membershipAuthorityEntities = {
     journeyApprovedAt: attr9("number", true)
   } },
   networkSeat: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     primaryMembershipId: key2(),
-    purchaserUserId: key2(),
+    purchaserUserId: key2(true),
+    purchaserEmailNormalized: key2(true),
+    combinedInvoice: attr9("json", true),
     recipientName: attr9("string"),
     recipientEmailNormalized: key2(),
     recipientClaimId: key2(),
@@ -6421,9 +6682,9 @@ var membershipAuthorityEntities = {
     refundedCents: attr9("number", true),
     providerRefundIds: attr9("json", true)
   } },
-  networkSeatRecipient: { attrs: { id: id9(), appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), seatId: key2(), recipientEmailNormalized: key2(), createdAt: attr9("number") } },
+  networkSeatRecipient: { attrs: { id: id10(), appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), seatId: key2(), recipientEmailNormalized: key2(), createdAt: attr9("number") } },
   membershipEffect: { attrs: {
-    id: id9(),
+    id: id10(),
     chapterId: key2(),
     environment: key2(),
     runtime: key2(),
@@ -6548,14 +6809,14 @@ function validateMemberContentDocument(input, options = {}) {
       continue;
     }
     unknownKeys(raw2, PAGE_KEYS, path, errors);
-    const id10 = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
+    const id11 = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
     const slug = textValue(raw2.slug, `${path}.slug`, errors, 120, true) ?? "";
     const title = textValue(raw2.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
-    if (id10 && !ID.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (id11 && !ID.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (slug && !SLUG8.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
-    if (ids2.has(id10) || knownParentIds.has(id10)) errors.push(`${path}.id duplicates page "${id10}"`);
+    if (ids2.has(id11) || knownParentIds.has(id11)) errors.push(`${path}.id duplicates page "${id11}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
-    ids2.add(id10);
+    ids2.add(id11);
     slugs.add(slug);
     const navRaw = record(raw2.navigation);
     let navigation = { section: "General", order: index2 };
@@ -6611,7 +6872,7 @@ function validateMemberContentDocument(input, options = {}) {
         else if (owner === "chapter") upsell = { owner, ...offer ? { offer } : {} };
       }
     }
-    pages.push({ id: id10, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
+    pages.push({ id: id11, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
   }
   const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids2]);
   for (const [index2, page] of pages.entries()) {
@@ -6817,8 +7078,8 @@ function resourceValue(value, path, errors) {
     return null;
   }
   unknownKeys2(raw2, RESOURCE_KEYS, path, errors);
-  const id10 = text3(raw2.id, `${path}.id`, errors, 80) ?? "";
-  if (id10 && !ID2.test(id10)) errors.push(`${path}.id must be lowercase kebab-case`);
+  const id11 = text3(raw2.id, `${path}.id`, errors, 80) ?? "";
+  if (id11 && !ID2.test(id11)) errors.push(`${path}.id must be lowercase kebab-case`);
   const kind = text3(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
   const title = text3(raw2.title, `${path}.title`, errors, 240) ?? "";
@@ -6875,7 +7136,7 @@ function resourceValue(value, path, errors) {
     updatedAt: integer3(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
-  return { id: id10, kind, title, ...summary ? { summary } : {}, tags, scope: scope2, status: status2, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
+  return { id: id11, kind, title, ...summary ? { summary } : {}, tags, scope: scope2, status: status2, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
 }
 function validateBuilderLibraryDocument(value, options = {}) {
   const errors = [];
@@ -6906,7 +7167,7 @@ function validateBuilderLibraryDocument(value, options = {}) {
   const inputs = Array.isArray(raw2.resources) ? raw2.resources : [];
   if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
   const resources = inputs.map((item, index2) => resourceValue(item, `document.resources[${index2}]`, errors)).filter(Boolean);
-  const ids2 = resources.map(({ id: id10 }) => id10);
+  const ids2 = resources.map(({ id: id11 }) => id11);
   if (new Set(ids2).size !== ids2.length) errors.push("document.resources ids must be unique");
   for (const resource of resources) {
     if (sourceType === "chapter" && (resource.scope.kind !== "chapter" || resource.scope.chapterId !== sourceAppId)) {
@@ -6993,6 +7254,41 @@ async function createBuilderLibraryEnvelope(document) {
   return { document, digest: await builderLibraryDigest(document) };
 }
 
+// src/email-retirement.ts
+function isRetiredEmailCopy(subject, text6) {
+  const subjectCopy = subject.trimStart().replace(/^\[dev\]\s*/i, "");
+  const bodyCopy = text6.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
+  return /^\(\s*unused\s*:/i.test(subjectCopy) || /^Unused\.\s*Switched off\b/i.test(bodyCopy);
+}
+
+// src/email.ts
+var import_crm5 = require("@odla-ai/crm");
+
+// src/email-events.ts
+var identity = ["firstName", "lastName", "email", "phone", "state"];
+var policy = ["refundPolicyText", "commitmentText", "normsText"];
+var checkout = ["tier", "tierName", "paymentAmount", "paymentAmountSummary"];
+var optionalVariables = ["phone", "state", "paymentAmount", "paymentAmountSummary"];
+var event = (label, trigger, audience, variables, requiresTier = true) => ({ label, trigger, audience, variables: [...variables, ...policy], optionalVariables, requiresTier });
+var CHAPTER_EMAIL_EVENTS = {
+  adminNotification: event("Application notification", "Application submitted or payment received, according to notification settings", "Administrator", [...identity, ...checkout, "adminUrl", "membersUrl"]),
+  submitConfirmation: event("Application receipt", "Application submitted", "Applicant", [...identity, ...checkout, "submitNextStep", "membersUrl"]),
+  paymentConfirmation: event("Payment confirmation", "Membership payment received", "Applicant", ["firstName", ...checkout, "paymentNextStep"]),
+  prepEmail: event("Call confirmation", "Introduction call booked", "Applicant", [...identity, ...checkout, "startAt", "endAt", "timezone", "meetUrl", "htmlLink", "meetingTime", "meetingLink"]),
+  onboardingInvite: event("Membership welcome", "Membership approved", "Member", ["firstName", "membersUrl", "tierName"]),
+  namedSeatInvitation: event("Gift membership invitation", "A gift membership is ready to be accepted", "Gift recipient", ["firstName", "purchaserName", "chapterName", "acceptBy", "joinUrl", "tierName"]),
+  seatAccepted: event("Gift accepted", "Gift recipient accepts their membership", "Purchaser", ["firstName", "purchaserName", "recipientName", "tierName", "chapterName", "membersUrl"])
+};
+function chapterEmailEvents(chapter) {
+  const base = chapter.mode === "hub" ? Object.fromEntries(Object.entries(chapter.crm.config.templates ?? {}).map(([key3, spec]) => [key3, {
+    label: key3,
+    trigger: "Administrator sends a message",
+    audience: "Selected contact",
+    variables: spec.vars
+  }])) : CHAPTER_EMAIL_EVENTS;
+  return { ...base, ...chapter.config.emails?.events };
+}
+
 // src/email.ts
 function render(template, vars) {
   return template.replace(/\{\{(\w+)\}\}/g, (_, key3) => vars[key3] ?? "");
@@ -7016,19 +7312,158 @@ function isAlreadySent(priorRows) {
 function planDelivery(input) {
   const tpl = input.group.emailTemplates?.[input.template];
   if (!tpl) return { deliver: false, reason: "template-missing" };
-  if (tpl.enabled === false && !input.force) return { deliver: false, reason: "disabled" };
+  if (typeof tpl.enabled !== "boolean") return { deliver: false, reason: "template-invalid", issues: ["Choose explicitly whether this email is enabled."] };
+  if (tpl.enabled !== true && !input.force) return { deliver: false, reason: "disabled" };
+  if (!/^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/.test(input.to)) return { deliver: false, reason: "recipient-invalid" };
   const vars = groupVars(input.group, input.vars);
+  if (isRetiredEmailCopy(String(tpl.subject ?? ""), String(tpl.text ?? ""))) return { deliver: false, reason: "template-retired" };
+  const event2 = input.event ?? CHAPTER_EMAIL_EVENTS[input.template];
+  const issues = (0, import_crm5.validateEmailCopy)(tpl, {
+    allowedVariables: event2?.variables,
+    optionalVariables: event2?.optionalVariables,
+    requiredVariables: event2?.requiresTier ? ["tierName"] : [],
+    values: vars,
+    tierId: vars.tierId
+  });
+  if (issues.length) return { deliver: false, reason: "template-invalid", issues: issues.map((issue) => issue.message) };
   const isProd = input.envName === "prod";
   const redirect = !isProd && !!input.group.debugEmail;
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
   const to = redirect ? input.group.debugEmail : input.to;
-  const subject = (redirect ? "[dev] " : "") + render(tpl.subject, vars);
+  const renderedSubject = render(tpl.subject, vars);
+  const renderedText = render(tpl.text, vars);
+  if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
+  if ((0, import_crm5.validateEmailCopy)({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
+  const subject = (redirect ? "[dev] " : "") + renderedSubject;
   const text6 = redirect ? `(dev redirect; original recipient: ${input.to})
 
-` + render(tpl.text, vars) : render(tpl.text, vars);
+` + renderedText : renderedText;
   return { deliver: true, transport, to, subject, text: text6, redirected: redirect };
 }
 
+// src/email-readiness.ts
+var import_crm6 = require("@odla-ai/crm");
+function validateEmailReadiness(input) {
+  const issues = [];
+  for (const key3 of Object.keys(input.templates)) if (!input.events[key3]) {
+    issues.push({ code: "event-undeclared", message: `Stored email ${key3} has no declared event. Review its trigger before using it.` });
+  }
+  if (input.tiersUnavailable) issues.push({ code: "tiers-unavailable", message: "Tier names could not be checked. Membership emails cannot send until their tier is resolved." });
+  for (const tier of input.tiers ?? []) {
+    if (!(0, import_crm6.isEmailTierName)(tier.name, tier.id)) issues.push({ code: "tier-name-invalid", message: `Tier ${tier.id} needs a recipient-facing display name.` });
+  }
+  const noTierNames = input.tiers !== void 0 && !input.tiers.some((tier) => (0, import_crm6.isEmailTierName)(tier.name, tier.id));
+  if (noTierNames && !input.tiersUnavailable) issues.push({ code: "tiers-missing", message: "No membership tiers have a recipient-facing display name." });
+  const events2 = Object.entries(input.events).map(([key3, event2]) => {
+    const template = input.templates[key3];
+    const problems = !template ? [{ code: "template-missing", message: "No email is configured for this event." }] : (0, import_crm6.validateEmailCopy)(template, { allowedVariables: event2.variables });
+    if (template && typeof template.enabled !== "boolean") problems.push({ code: "enabled-missing", message: "Choose explicitly whether this email is enabled. Sending is blocked until then." });
+    if (template) {
+      const used = [...`${template.subject ?? ""}
+${template.text ?? ""}`.matchAll(/\{\{(\w+)\}\}/g)].map((match) => match[1]);
+      for (const name of used) if (name in input.groupValues && !input.groupValues[name]?.trim()) {
+        problems.push({ code: "value-missing", variable: name, message: `Add the ${name} used by this email.` });
+      }
+    }
+    if (event2.requiresTier && input.tiersUnavailable) problems.push({ code: "tiers-unavailable", message: "Tier names are unavailable; delivery checks will block unresolved memberships." });
+    else if (event2.requiresTier && noTierNames) problems.push({ code: "tiers-missing", message: "Configure the membership tier names needed by this event." });
+    return { ...event2, key: key3, status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready", issues: problems };
+  });
+  return { checkedAt: input.now ?? Date.now(), events: events2, issues };
+}
+
+// src/notify.ts
+var import_crm8 = require("@odla-ai/crm");
+
+// src/email-event-values.ts
+var import_crm7 = require("@odla-ai/crm");
+
+// src/tiers-store.ts
+function rowToTier(row2, groupId) {
+  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || typeof row2.id !== "string" || !row2.id || row2.groupId !== void 0 && row2.groupId !== groupId || !Number.isSafeInteger(row2.priceCents) || Number(row2.priceCents) < 0 || row2.currency !== void 0 && (typeof row2.currency !== "string" || !/^[a-z]{3}$/.test(row2.currency)) || row2.interval !== void 0 && row2.interval !== "month" && row2.interval !== "year") {
+    throw Object.assign(new Error("stored membership tier is invalid"), { code: "tiers_unavailable" });
+  }
+  return {
+    id: String(row2.id ?? ""),
+    groupId: String(row2.groupId ?? groupId),
+    name: String(row2.name ?? ""),
+    priceCents: typeof row2.priceCents === "number" ? row2.priceCents : 0,
+    ...typeof row2.currency === "string" && row2.currency ? { currency: row2.currency } : {},
+    ...row2.interval === "year" || row2.interval === "month" ? { interval: row2.interval } : {},
+    ...typeof row2.stripePriceId === "string" && row2.stripePriceId ? { stripePriceId: row2.stripePriceId } : {},
+    ...typeof row2.blurb === "string" ? { blurb: row2.blurb } : {},
+    sortOrder: typeof row2.sortOrder === "number" ? row2.sortOrder : 0,
+    // A row that never set `active` is offered; only an explicit false retires
+    // a tier, so a half-seeded row cannot silently hide a membership.
+    active: row2.active !== false
+  };
+}
+async function loadTiers(db, group) {
+  const groupId = String(group.id ?? "");
+  let rows3;
+  try {
+    rows3 = (await db.query({
+      tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
+    })).tiers;
+  } catch {
+    throw Object.assign(new Error("membership tiers are unavailable"), { code: "tiers_unavailable" });
+  }
+  if (!Array.isArray(rows3)) throw Object.assign(new Error("membership tiers response is invalid"), { code: "tiers_unavailable" });
+  const list = rows3.map((row2) => rowToTier(row2, groupId));
+  return resolveTiers(group, list);
+}
+async function loadOfferableTiers(db, group, hasSecretKey) {
+  return offerableTiers(await loadTiers(db, group), group, hasSecretKey);
+}
+
+// src/notification-variables.ts
+async function frozenCheckoutVariables(db, app) {
+  const intent = (await db.query({ subscriptionCheckoutIntents: { $: { where: { id: String(app.id) }, limit: 1 } } })).subscriptionCheckoutIntents?.[0];
+  const offer = intent?.membershipOffer, contract = offer?.contract;
+  const offering = contract?.offering, quote = intent?.paymentQuote;
+  const amount = contract?.dueTodayCents ?? intent?.priceCents;
+  const currency = offering?.currency ?? intent?.currency;
+  let formatted = "";
+  if (Number.isSafeInteger(amount) && Number(amount) > 0 && typeof currency === "string" && /^[a-z]{3}$/.test(currency)) {
+    formatted = new Intl.NumberFormat("en-US", { style: "currency", currency: currency.toUpperCase() }).format(Number(amount) / 100);
+  }
+  return {
+    paymentAmount: formatted,
+    paymentAmountSummary: formatted ? ` of ${formatted}` : "",
+    tierName: typeof quote?.tierName === "string" ? quote.tierName : ""
+  };
+}
+async function catalogTierName(db, group, app) {
+  try {
+    return findTier(await loadTiers(db, group), typeof app.tierId === "string" ? app.tierId : null)?.name ?? "";
+  } catch {
+    return "";
+  }
+}
+async function checkoutVariables(db, group, app) {
+  const frozen = await frozenCheckoutVariables(db, app);
+  return frozen.tierName ? frozen : { ...frozen, tierName: await catalogTierName(db, group, app) };
+}
+
+// src/email-event-values.ts
+async function emailTierVariables(db, input) {
+  try {
+    const [apps, groups2] = await Promise.all([
+      db.query({ applications: { $: { where: { id: input.applicationId }, limit: 1 } } }),
+      db.query({ groups: { $: { where: { id: input.groupId }, limit: 1 } } })
+    ]);
+    const app = apps.applications?.[0], group = groups2.groups?.[0];
+    if (!app || !group || app.groupId !== input.groupId) return { tierName: "", tier: "" };
+    const tierId = input.tierId ?? (typeof app.tierId === "string" ? app.tierId : "");
+    if (!tierId) return { tierName: "", tier: "" };
+    const name = input.tierId ? await catalogTierName(db, group, { ...app, tierId }) : (await checkoutVariables(db, group, app)).tierName;
+    const tierName = (0, import_crm7.isEmailTierName)(name, tierId) ? name.trim() : "";
+    return { tierName, tier: tierName, tierId };
+  } catch {
+    return { tierName: "", tier: "" };
+  }
+}
+
 // src/notify.ts
 function fromAddress(configured, name) {
   const display = name?.trim();
@@ -7046,24 +7481,27 @@ async function sendTemplated(deps, input) {
   const cloudflareReady = Boolean(deps.sender && deps.from);
   const override = deps.debugEmail?.trim();
   const group = deps.envName !== "prod" && deps.debugEmail !== void 0 ? { ...input.group, debugEmail: override && /^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/.test(override) ? override : void 0 } : input.group;
+  const event2 = input.event ?? CHAPTER_EMAIL_EVENTS[input.template];
+  const vars = event2?.requiresTier && input.applicationId ? { ...input.vars, ...await emailTierVariables(deps.db, { applicationId: input.applicationId, groupId: group.id, tierId: input.tierId }) } : input.vars;
   const decision = planDelivery({
     envName: deps.envName,
     group,
     template: input.template,
     to: input.to,
-    vars: input.vars,
+    vars,
     cloudflareReady,
-    force: input.force
+    force: input.force,
+    event: event2
   });
   if (!decision.deliver) return { sent: false, reason: decision.reason };
   const previous = prior[0];
   if (previous && (previous.groupId !== input.group.id || previous.template !== input.template || previous.to !== decision.to || previous.transport !== decision.transport || previous.applicationId !== input.applicationId)) return { sent: false, reason: "delivery-identity-conflict" };
   const hash2 = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input.dedupeKey));
-  const id10 = previous ? String(previous.id) : `email_${Array.from(new Uint8Array(hash2), (b) => b.toString(16).padStart(2, "0")).join("")}`;
+  const id11 = previous ? String(previous.id) : `email_${Array.from(new Uint8Array(hash2), (b) => b.toString(16).padStart(2, "0")).join("")}`;
   const attempt = Number(previous?.deliveryAttempt ?? 0) + 1;
   if (!Number.isSafeInteger(attempt) || attempt < 1) return { sent: false, reason: "delivery-state-invalid" };
   const row2 = {
-    id: id10,
+    id: id11,
     groupId: input.group.id,
     to: decision.to,
     template: input.template,
@@ -7078,16 +7516,18 @@ async function sendTemplated(deps, input) {
     error: decision.transport === "log-only" ? "" : "delivery-pending",
     ...input.applicationId ? { applicationId: input.applicationId } : {}
   };
+  if (isRetiredEmailCopy(String(row2.subject), String(row2.body))) return { sent: false, reason: "template-retired" };
+  if ((0, import_crm8.validateEmailCopy)({ subject: row2.subject, text: row2.body }, { allowedVariables: [] }).length) return { sent: false, reason: "template-invalid" };
   try {
-    const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: row2 }], {
-      mutationId: `email-claim:${id10}:${attempt}`,
+    const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: row2 }], {
+      mutationId: `email-claim:${id11}:${attempt}`,
       guards: [previous ? {
         ns: "emailLog",
-        id: id10,
+        id: id11,
         exists: true,
         equals: { deliveryState: "retry_ready", ...previous.deliveryAttempt !== void 0 ? { deliveryAttempt: previous.deliveryAttempt } : {} },
         ...previous.deliveryAttempt === void 0 ? { absent: ["deliveryAttempt"] } : {}
-      } : { ns: "emailLog", id: id10, exists: false }]
+      } : { ns: "emailLog", id: id11, exists: false }]
     });
     if (claim.duplicate) return { sent: false, reason: "delivery-uncertain" };
   } catch (error) {
@@ -7107,16 +7547,16 @@ async function sendTemplated(deps, input) {
     if (!response || typeof response.messageId !== "string" || !response.messageId) throw new Error("missing delivery receipt");
     messageId = response.messageId;
   } catch {
-    await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: { deliveryState: "uncertain", error: "delivery-uncertain" } }], {
-      guards: [{ ns: "emailLog", id: id10, exists: true, equals: { deliveryState: "sending", deliveryAttempt: attempt } }]
+    await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: { deliveryState: "uncertain", error: "delivery-uncertain" } }], {
+      guards: [{ ns: "emailLog", id: id11, exists: true, equals: { deliveryState: "sending", deliveryAttempt: attempt } }]
     });
     return { sent: false, reason: "delivery-uncertain" };
   }
-  await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: { deliveryState: "sent", error: "", messageId, sentAt: deps.now() } }], {
-    mutationId: `email-confirmed:${id10}:${attempt}`,
+  await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: { deliveryState: "sent", error: "", messageId, sentAt: deps.now() } }], {
+    mutationId: `email-confirmed:${id11}:${attempt}`,
     guards: [{
       ns: "emailLog",
-      id: id10,
+      id: id11,
       exists: true,
       equals: { deliveryState: "sending", deliveryAttempt: attempt }
     }]
@@ -7172,7 +7612,7 @@ async function reconcileLifecycleDelivery(db, input, now) {
 }
 
 // src/payments.ts
-var import_stripe10 = require("@odla-ai/stripe");
+var import_stripe11 = require("@odla-ai/stripe");
 function paymentsReady(group, hasSecretKey) {
   return Boolean(group.stripePublishableKey && group.stripePriceId && hasSecretKey);
 }
@@ -7231,35 +7671,35 @@ function findGiftRef(obj) {
     ...chapterId ? { chapterId } : {}
   };
 }
-function normalizeWebhookEvent(event, options = {}) {
-  const obj = event.data?.object ?? {};
-  if (event.type === "charge.refunded" && (!Number.isSafeInteger(obj.amount) || Number(obj.amount) <= 0 || obj.amount_refunded !== obj.amount || obj.refunded !== true)) return { kind: "ignored", type: event.type };
+function normalizeWebhookEvent(event2, options = {}) {
+  const obj = event2.data?.object ?? {};
+  if (event2.type === "charge.refunded" && (!Number.isSafeInteger(obj.amount) || Number(obj.amount) <= 0 || obj.amount_refunded !== obj.amount || obj.refunded !== true)) return { kind: "ignored", type: event2.type };
   const gift = findGiftRef(obj);
   if (gift.giftIntentId) {
-    const { giftIntentId, providerObjectId, ...identity } = gift;
-    if (event.type === "payment_intent.succeeded" || event.type === "invoice.paid" && obj.billing_reason === "subscription_create") {
-      return { kind: "gift_paid", giftIntentId, providerObjectId, ...identity };
+    const { giftIntentId, providerObjectId, ...identity2 } = gift;
+    if (event2.type === "payment_intent.succeeded" || event2.type === "invoice.paid" && obj.billing_reason === "subscription_create") {
+      return { kind: "gift_paid", giftIntentId, providerObjectId, ...identity2 };
     }
-    if (event.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "refunded" };
-    if (event.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "canceled" };
-    return { kind: "ignored", type: event.type };
+    if (event2.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId, ...identity2, reason: "refunded" };
+    if (event2.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId, ...identity2, reason: "canceled" };
+    return { kind: "ignored", type: event2.type };
   }
   const ref = findApplicationRef(obj);
   const seatId = obj.metadata?.seatId;
   if (typeof seatId === "string" && seatId) {
-    if (!options.requireProviderPayment) return { kind: "ignored", type: event.type };
-    if (event.type === "payment_intent.succeeded") return { kind: "seat_paid", seatId, ...ref };
-    if (event.type === "charge.refunded") return { kind: "seat_refunded", seatId, ...ref };
-    return { kind: "ignored", type: event.type };
+    if (!options.requireProviderPayment) return { kind: "ignored", type: event2.type };
+    if (event2.type === "payment_intent.succeeded") return { kind: "seat_paid", seatId, ...ref };
+    if (event2.type === "charge.refunded") return { kind: "seat_refunded", seatId, ...ref };
+    return { kind: "ignored", type: event2.type };
   }
-  if (event.type === "invoice.paid" && options.requireProviderPayment || event.type === "invoice.payment_succeeded" && !options.requireProviderPayment) return { kind: "ignored", type: event.type };
-  switch (event.type) {
+  if (event2.type === "invoice.paid" && options.requireProviderPayment || event2.type === "invoice.payment_succeeded" && !options.requireProviderPayment) return { kind: "ignored", type: event2.type };
+  switch (event2.type) {
     case "invoice.payment_failed":
-      return options.requireProviderPayment && obj.billing_reason === "subscription_cycle" ? { kind: "renewal_failed", ...ref } : { kind: "ignored", type: event.type };
+      return options.requireProviderPayment && obj.billing_reason === "subscription_cycle" ? { kind: "renewal_failed", ...ref } : { kind: "ignored", type: event2.type };
     case "invoice.paid":
     case "invoice.payment_succeeded": {
       if (obj.billing_reason !== "subscription_create" && obj.billing_reason !== "subscription_cycle") {
-        return { kind: "ignored", type: event.type };
+        return { kind: "ignored", type: event2.type };
       }
       const renewalAt = membershipInvoicePeriodEnd(obj);
       const kind = obj.billing_reason === "subscription_create" ? "first_payment" : "renewal";
@@ -7273,11 +7713,11 @@ function normalizeWebhookEvent(event, options = {}) {
     case "charge.refunded":
       return { kind: "refunded", ...ref };
     case "customer.subscription.updated":
-      return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "ignored", type: event.type };
+      return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "ignored", type: event2.type };
     case "customer.subscription.deleted":
       return options.requireProviderPayment ? { kind: "subscription_changed", ...ref } : { kind: "canceled", ...ref };
     default:
-      return { kind: "ignored", type: event.type };
+      return { kind: "ignored", type: event2.type };
   }
 }
 function firstPaymentPatch(currentStatus, renewalAt) {
@@ -7374,14 +7814,14 @@ function validateAdmissionGrantDocument(input) {
   const seenEmails = /* @__PURE__ */ new Set();
   for (const [index2, raw2] of rawGrants.slice(0, MAX_GRANTS).entries()) {
     const grant = raw2 && typeof raw2 === "object" ? raw2 : {};
-    const id10 = typeof grant.id === "string" ? grant.id : "";
+    const id11 = typeof grant.id === "string" ? grant.id : "";
     const email = typeof grant.email === "string" ? grant.email.trim() : "";
     const normalized = normalizeAdmissionEmail(email);
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID3.test(id10)) errors.push(`document.grants[${index2}].id must be an identifier`);
-    if (seenIds.has(id10)) errors.push(`document.grants repeats id "${id10}"`);
+    if (!ID3.test(id11)) errors.push(`document.grants[${index2}].id must be an identifier`);
+    if (seenIds.has(id11)) errors.push(`document.grants repeats id "${id11}"`);
     if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
     if (decision !== "waive_interview" && decision !== "require_interview") {
@@ -7391,10 +7831,10 @@ function validateAdmissionGrantDocument(input) {
     if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
       errors.push(`document.grants[${index2}].expiresAt must be epoch milliseconds`);
     }
-    seenIds.add(id10);
+    seenIds.add(id11);
     seenEmails.add(normalized);
     grants.push({
-      id: id10,
+      id: id11,
       email,
       decision,
       ...note ? { note } : {},
@@ -7466,8 +7906,8 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
   const incomingIds = new Set(document.grants.map((grant) => `admission:parent:${document.source.appId}:${grant.id}`));
   const ops = [];
   for (const row2 of current) {
-    const id10 = String(row2.id ?? "");
-    if (id10 && !incomingIds.has(id10)) ops.push({ t: "update", ns: "admissionGrants", id: id10, attrs: {
+    const id11 = String(row2.id ?? "");
+    if (id11 && !incomingIds.has(id11)) ops.push({ t: "update", ns: "admissionGrants", id: id11, attrs: {
       active: false,
       revokedAt: receivedAt,
       revokedBy: document.source.actor,
@@ -7476,10 +7916,10 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
     } });
   }
   for (const grant of document.grants) {
-    const id10 = `admission:parent:${document.source.appId}:${grant.id}`;
-    const existing = current.find((row2) => row2.id === id10);
-    ops.push({ t: "update", ns: "admissionGrants", id: id10, attrs: {
-      id: id10,
+    const id11 = `admission:parent:${document.source.appId}:${grant.id}`;
+    const existing = current.find((row2) => row2.id === id11);
+    ops.push({ t: "update", ns: "admissionGrants", id: id11, attrs: {
+      id: id11,
       sourceGrantId: grant.id,
       sourceScope: "parent",
       sourceId: document.source.appId,
@@ -7500,7 +7940,7 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
       ...!grant.note && existing?.note !== void 0 ? ["note"] : [],
       ...grant.expiresAt === void 0 && existing?.expiresAt !== void 0 ? ["expiresAt"] : []
     ];
-    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id10, attrs: retract });
+    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id11, attrs: retract });
   }
   if (previous?.active) ops.push({ t: "update", ns: "admissionGrantRevisions", id: previous.id, attrs: { active: false } });
   const revisionId = `admission-revision:${document.source.appId}:${document.target.environment}:${document.revision}`;
@@ -7571,10 +8011,10 @@ function validateGiftOfferCatalog(input, tierIds) {
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key3 of Object.keys(item)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
-    const id10 = text4(item.id, `${path}.id`, errors, 80);
-    if (id10 && !ID4.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (ids2.has(id10)) errors.push(`${path}.id duplicates "${id10}"`);
-    ids2.add(id10);
+    const id11 = text4(item.id, `${path}.id`, errors, 80);
+    if (id11 && !ID4.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (ids2.has(id11)) errors.push(`${path}.id duplicates "${id11}"`);
+    ids2.add(id11);
     const targetRaw = record3(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
@@ -7600,7 +8040,7 @@ function validateGiftOfferCatalog(input, tierIds) {
     if (activeUntil !== void 0 && (!Number.isSafeInteger(activeUntil) || activeUntil < 1)) errors.push(`${path}.activeUntil must be epoch milliseconds`);
     if (activeFrom !== void 0 && activeUntil !== void 0 && activeUntil <= activeFrom) errors.push(`${path}.activeUntil must follow activeFrom`);
     offers.push({
-      id: id10,
+      id: id11,
       target,
       billingMode: item.billingMode,
       stripePriceId,
@@ -7625,10 +8065,10 @@ function findGiftOffer(catalog, offerId, now) {
 }
 
 // src/network.ts
-var import_crm7 = require("@odla-ai/crm");
+var import_crm11 = require("@odla-ai/crm");
 
 // src/crm-person-projection.ts
-var import_crm5 = require("@odla-ai/crm");
+var import_crm9 = require("@odla-ai/crm");
 async function ensureProjectedPerson(deps, input, options = {}) {
   const email = String(input.email ?? "").trim().toLowerCase();
   if (!email) throw new Error("crm_projection_email_required");
@@ -7644,10 +8084,10 @@ async function ensureProjectedPerson(deps, input, options = {}) {
   const existing = await find();
   if (existing) return { record: existing, created: false };
   const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(`chapter:person:v1:${email}`)));
-  const id10 = `person-${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const id11 = `person-${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
   try {
-    const created = await (0, import_crm5.createRecord)({ ...deps, db: deps.db }, {
-      id: id10,
+    const created = await (0, import_crm9.createRecord)({ ...deps, db: deps.db }, {
+      id: id11,
       type: "person",
       input: { ...input, email },
       ...options
@@ -7662,7 +8102,7 @@ async function ensureProjectedPerson(deps, input, options = {}) {
 }
 
 // src/applicant-projection.ts
-var import_crm6 = require("@odla-ai/crm");
+var import_crm10 = require("@odla-ai/crm");
 
 // src/crm-application-fields.ts
 function applicationCrmFields(crm, app) {
@@ -7681,10 +8121,10 @@ async function upsertPerson(deps, opts) {
   const email = opts.email.toLowerCase();
   const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
   const { record: record4, created } = await ensureProjectedPerson(deps, { ...opts.input, email });
-  if (!created) await (0, import_crm6.updateRecord)(crmDeps, { id: String(record4.id), input: opts.input, mutationId: opts.mutationId });
+  if (!created) await (0, import_crm10.updateRecord)(crmDeps, { id: String(record4.id), input: opts.input, mutationId: opts.mutationId });
   const initial = deps.crm.initialStage("person");
   if (!created && record4.stage == null && initial) {
-    await (0, import_crm6.setStage)(crmDeps, {
+    await (0, import_crm10.setStage)(crmDeps, {
       id: String(record4.id),
       to: initial,
       authorId: "system",
@@ -7807,7 +8247,7 @@ function sharedRecordFromCrm(crm, record4, target, sourceId) {
   return sourceId ? { version: 2, source: { siteId: sourceId, recordId: record4.id }, type: record4.type, input } : { version: 1, type: record4.type, hubRecordId: record4.id, input };
 }
 async function findSharedRecord(deps, record4, tag) {
-  const structured = await (0, import_crm7.getRecordByOrigin)(
+  const structured = await (0, import_crm11.getRecordByOrigin)(
     { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId },
     record4.sourceId,
     record4.sourceRecordId
@@ -7859,15 +8299,15 @@ async function projectSharedRecord(deps, shared, options = {}) {
   const existing = await findSharedRecord(deps, record4, tag);
   let recordId;
   if (existing && typeof existing.id === "string") {
-    await (0, import_crm7.updateRecord)(crmDeps, { id: existing.id, input: record4.input });
+    await (0, import_crm11.updateRecord)(crmDeps, { id: existing.id, input: record4.input });
     recordId = existing.id;
   } else if (record4.type === "person" && typeof record4.input.email === "string") {
     const projected = await ensureProjectedPerson(deps, record4.input);
     recordId = String(projected.record.id);
-    if (!projected.created) await (0, import_crm7.updateRecord)(crmDeps, { id: recordId, input: record4.input });
+    if (!projected.created) await (0, import_crm11.updateRecord)(crmDeps, { id: recordId, input: record4.input });
   } else {
     recordId = `network_${shortHash(`${record4.sourceId}\0${record4.type}\0${record4.sourceRecordId}`)}`;
-    await (0, import_crm7.createRecord)({ ...crmDeps, newId: () => recordId }, {
+    await (0, import_crm11.createRecord)({ ...crmDeps, newId: () => recordId }, {
       type: record4.type,
       input: record4.input,
       mutationId: `share-create:${tag}`
@@ -7877,7 +8317,7 @@ async function projectSharedRecord(deps, shared, options = {}) {
     [{ t: "update", ns: "crm_tag", id: tag, attrs: { key: `${recordId}:${tag}`, recordId, tag, createdAt: deps.now() } }],
     { mutationId: `share-map:${tag}:${recordId}` }
   );
-  await (0, import_crm7.upsertRecordOrigin)(crmDeps, {
+  await (0, import_crm11.upsertRecordOrigin)(crmDeps, {
     recordId,
     sourceId: record4.sourceId,
     sourceRecordId: record4.sourceRecordId,
@@ -7888,7 +8328,7 @@ async function projectSharedRecord(deps, shared, options = {}) {
 }
 
 // src/crm-sync.ts
-var import_crm8 = require("@odla-ai/crm");
+var import_crm12 = require("@odla-ai/crm");
 
 // src/crm-account-projection.ts
 async function syncAccountToCrm(deps, userId) {
@@ -7973,9 +8413,9 @@ async function syncApplicationToCrm(deps, opts) {
   const stage = opts.stage || void 0;
   const { record: existing, created } = await ensureProjectedPerson(deps, input, { stage });
   const recordId = String(existing.id);
-  if (!created) await (0, import_crm8.updateRecord)(recordDeps, { id: recordId, input });
+  if (!created) await (0, import_crm12.updateRecord)(recordDeps, { id: recordId, input });
   if (!created && stage && existing.stage !== stage) {
-    await (0, import_crm8.setStage)(recordDeps, { id: recordId, to: stage, authorId: "system", mutationId: `crm:stage:${recordId}:${existing.updatedAt}:${stage}` });
+    await (0, import_crm12.setStage)(recordDeps, { id: recordId, to: stage, authorId: "system", mutationId: `crm:stage:${recordId}:${existing.updatedAt}:${stage}` });
   }
   const billing = billingColumns(opts.app);
   await deps.db.transact([
@@ -7983,7 +8423,7 @@ async function syncApplicationToCrm(deps, opts) {
     // Optional typed dates are removed with a retract, never an invalid null.
     ...!("renewalAt" in billing) ? [{ t: "retract", ns: "crm_record", id: recordId, attrs: ["renewalAt"] }] : []
   ]);
-  await (0, import_crm8.linkIdentity)(recordDeps, { recordId, email: emailKey, mutationId: `crm:link:${recordId}:${emailKey}` }).catch(() => void 0);
+  await (0, import_crm12.linkIdentity)(recordDeps, { recordId, email: emailKey, mutationId: `crm:link:${recordId}:${emailKey}` }).catch(() => void 0);
   return recordId;
 }
 async function backfillCrm(deps) {
@@ -8070,9 +8510,9 @@ function subAnnualCents(sub) {
 }
 
 // src/payments-stripe.ts
-var import_stripe11 = require("@odla-ai/stripe");
+var import_stripe12 = require("@odla-ai/stripe");
 async function stripeCall(sk, method, path, params, idempotencyKey) {
-  return (0, import_stripe11.stripeRequest)(
+  return (0, import_stripe12.stripeRequest)(
     { secretKey: sk },
     method,
     path,
@@ -8150,8 +8590,8 @@ async function updateClerkUserMetadata(secretKey, userId, input, fetchImpl = fet
   return res.ok;
 }
 async function updateClerkUserMetadataByEmail(secretKey, email, input, fetchImpl = fetch) {
-  const id10 = await existingClerkUserId(secretKey, email, fetchImpl);
-  return id10 ? updateClerkUserMetadata(secretKey, id10, input, fetchImpl) : false;
+  const id11 = await existingClerkUserId(secretKey, email, fetchImpl);
+  return id11 ? updateClerkUserMetadata(secretKey, id11, input, fetchImpl) : false;
 }
 async function existingClerkUserId(secretKey, email, fetchImpl) {
   const auth = { authorization: `Bearer ${secretKey}` };
@@ -8224,10 +8664,10 @@ async function clerkGetUserByEmail(secretKey, email, fetchImpl = fetch, source =
   const user = Array.isArray(data) ? data[0] : void 0;
   return user ? toRecord(user, source) : null;
 }
-async function clerkGetUser(secretKey, id10, fetchImpl = fetch, source = "public") {
-  const data = await clerkGet(`/v1/users/${encodeURIComponent(id10)}`, secretKey, fetchImpl).catch(() => null);
+async function clerkGetUser(secretKey, id11, fetchImpl = fetch, source = "public") {
+  const data = await clerkGet(`/v1/users/${encodeURIComponent(id11)}`, secretKey, fetchImpl).catch(() => null);
   const record4 = data ? toRecord(data, source) : null;
-  return record4?.id === id10 ? record4 : null;
+  return record4?.id === id11 ? record4 : null;
 }
 async function clerkListUsers(secretKey, fetchImpl = fetch, source = "public") {
   const out = [];
@@ -8243,8 +8683,8 @@ async function clerkListUsers(secretKey, fetchImpl = fetch, source = "public") {
   }
   return out;
 }
-async function clerkSetRole(secretKey, id10, role, fetchImpl = fetch, source = "public") {
-  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id10)}/metadata`, {
+async function clerkSetRole(secretKey, id11, role, fetchImpl = fetch, source = "public") {
+  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id11)}/metadata`, {
     method: "PATCH",
     headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
     redirect: "manual",
@@ -8261,7 +8701,7 @@ function planPrivateRoleMigration(input) {
   if (input.environment !== "dev") blockers.push("dev_only");
   if (!input.ladder.length || new Set(input.ladder).size !== input.ladder.length || input.ladder.some((role) => !role || role === "super_admin")) blockers.push("invalid_role_ladder");
   const expected = new Set(input.expectedRuntimes);
-  if (!expected.size || expected.size !== input.expectedRuntimes.length || input.expectedRuntimes.some((id10) => !id10)) blockers.push("runtime_inventory_required");
+  if (!expected.size || expected.size !== input.expectedRuntimes.length || input.expectedRuntimes.some((id11) => !id11)) blockers.push("runtime_inventory_required");
   if (input.runtimes.length !== expected.size || new Set(input.runtimes.map((r) => r.runtime)).size !== expected.size || input.runtimes.some((r) => !expected.has(r.runtime))) blockers.push("runtime_inventory_mismatch");
   for (const runtime of input.expectedRuntimes) {
     const proof = input.runtimes.find((r) => r.runtime === runtime);
@@ -8291,7 +8731,7 @@ function planPrivateRoleMigration(input) {
     if (privateRole === role && !Object.hasOwn(user.publicMetadata, "role")) alreadyCurrent++;
     else changes.push({ userId: user.id, role, publicRole, privateRole });
   }
-  if (!input.protectedSuperAdminUserIds.some((id10) => ids2.has(id10))) blockers.push("protected_operator_grant_required");
+  if (!input.protectedSuperAdminUserIds.some((id11) => ids2.has(id11))) blockers.push("protected_operator_grant_required");
   return { ready: blockers.length === 0, blockers, changes, alreadyCurrent, totalUsers: input.users.length };
 }
 
@@ -8650,44 +9090,6 @@ function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
   };
 }
 
-// src/tiers-store.ts
-function rowToTier(row2, groupId) {
-  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || typeof row2.id !== "string" || !row2.id || row2.groupId !== void 0 && row2.groupId !== groupId || !Number.isSafeInteger(row2.priceCents) || Number(row2.priceCents) < 0 || row2.currency !== void 0 && (typeof row2.currency !== "string" || !/^[a-z]{3}$/.test(row2.currency)) || row2.interval !== void 0 && row2.interval !== "month" && row2.interval !== "year") {
-    throw Object.assign(new Error("stored membership tier is invalid"), { code: "tiers_unavailable" });
-  }
-  return {
-    id: String(row2.id ?? ""),
-    groupId: String(row2.groupId ?? groupId),
-    name: String(row2.name ?? ""),
-    priceCents: typeof row2.priceCents === "number" ? row2.priceCents : 0,
-    ...typeof row2.currency === "string" && row2.currency ? { currency: row2.currency } : {},
-    ...row2.interval === "year" || row2.interval === "month" ? { interval: row2.interval } : {},
-    ...typeof row2.stripePriceId === "string" && row2.stripePriceId ? { stripePriceId: row2.stripePriceId } : {},
-    ...typeof row2.blurb === "string" ? { blurb: row2.blurb } : {},
-    sortOrder: typeof row2.sortOrder === "number" ? row2.sortOrder : 0,
-    // A row that never set `active` is offered; only an explicit false retires
-    // a tier, so a half-seeded row cannot silently hide a membership.
-    active: row2.active !== false
-  };
-}
-async function loadTiers(db, group) {
-  const groupId = String(group.id ?? "");
-  let rows3;
-  try {
-    rows3 = (await db.query({
-      tiers: { $: { where: { groupId }, order: { sortOrder: "asc" }, limit: 100 } }
-    })).tiers;
-  } catch {
-    throw Object.assign(new Error("membership tiers are unavailable"), { code: "tiers_unavailable" });
-  }
-  if (!Array.isArray(rows3)) throw Object.assign(new Error("membership tiers response is invalid"), { code: "tiers_unavailable" });
-  const list = rows3.map((row2) => rowToTier(row2, groupId));
-  return resolveTiers(group, list);
-}
-async function loadOfferableTiers(db, group, hasSecretKey) {
-  return offerableTiers(await loadTiers(db, group), group, hasSecretKey);
-}
-
 // src/signup-control-contract.ts
 var SIGNUP_CONTROL_SCHEMA_VERSION = 1;
 var SIGNUP_CONTROL_PATH = "/api/signup-control";
@@ -8907,10 +9309,10 @@ function tiersOf(value, errors) {
       return [];
     }
     unknownKeys3(item, TIER_KEYS2, path, errors);
-    const id10 = text5(item.id, `${path}.id`, errors, 80);
-    if (id10 && !TIER.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (seen.has(id10)) errors.push(`${path}.id duplicates "${id10}"`);
-    seen.add(id10);
+    const id11 = text5(item.id, `${path}.id`, errors, 80);
+    if (id11 && !TIER.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (seen.has(id11)) errors.push(`${path}.id duplicates "${id11}"`);
+    seen.add(id11);
     const name = text5(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
@@ -8931,7 +9333,7 @@ function tiersOf(value, errors) {
     }
     const blurb = item.blurb === void 0 ? void 0 : text5(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
-      id: id10,
+      id: id11,
       name,
       available: item.available === true,
       sortOrder: Number(item.sortOrder) || 0,
@@ -8993,17 +9395,17 @@ function policyOf(value, errors, tiers2) {
   if (input.tierPolicies !== void 0) {
     const overrides = recordOf(input.tierPolicies);
     if (!overrides || Object.keys(overrides).length > 20) errors.push("document.policy.tierPolicies must be a bounded tier map");
-    else for (const [id10, raw2] of Object.entries(overrides)) {
-      const path = `document.policy.tierPolicies.${id10}`;
-      const policy = recordOf(raw2);
-      if (!tiers2.some((tier) => tier.id === id10) || !policy) {
+    else for (const [id11, raw2] of Object.entries(overrides)) {
+      const path = `document.policy.tierPolicies.${id11}`;
+      const policy2 = recordOf(raw2);
+      if (!tiers2.some((tier) => tier.id === id11) || !policy2) {
         errors.push(`${path} must name a declared tier and policy`);
         continue;
       }
-      unknownKeys3(policy, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
-      tierPolicies[id10] = {
-        refundPolicyText: text5(policy.refundPolicyText, `${path}.refundPolicyText`, errors),
-        ...policy.trustCopy !== void 0 ? { trustCopy: text5(policy.trustCopy, `${path}.trustCopy`, errors) } : {}
+      unknownKeys3(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
+      tierPolicies[id11] = {
+        refundPolicyText: text5(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
+        ...policy2.trustCopy !== void 0 ? { trustCopy: text5(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
     }
   }
@@ -9058,7 +9460,7 @@ function validateSignupControlDocument(input) {
     errors.push("document.membershipPage.tiers must follow the available tier display order");
   }
   const application = applicationOf(root.application, errors);
-  const policy = policyOf(root.policy, errors, tiers2);
+  const policy2 = policyOf(root.policy, errors, tiers2);
   let scheduling;
   if (root.scheduling !== void 0) {
     const checked = validateScheduling(root.scheduling);
@@ -9078,7 +9480,7 @@ function validateSignupControlDocument(input) {
     tiers: tiers2,
     membershipPage: page.value,
     ...application ? { application } : {},
-    ...policy ? { policy } : {},
+    ...policy2 ? { policy: policy2 } : {},
     ...scheduling ? { scheduling } : {},
     ...theme ? { theme } : {},
     ...giftOffers?.ok ? { giftOffers: giftOffers.value } : {}
@@ -9324,7 +9726,7 @@ var exclusions = (chapterId, paidTierIds) => [
     id: chapterId,
     reason: "provider_identity",
     paths: [
-      ...paidTierIds.map((id10) => `tiers[${id10}].stripePriceId`),
+      ...paidTierIds.map((id11) => `tiers[${id11}].stripePriceId`),
       "groups.stripePublishableKey",
       "applications.stripeCustomerId",
       "applications.stripeSubscriptionId",
@@ -9366,9 +9768,9 @@ async function exportChapterPromotion(input) {
     sourceIds: [`signup-control:${document.revision}`, document.source.appId, document.target.chapterId].sort(),
     receiptDigests: [input.digest]
   };
-  const artifact = (kind, id10, content) => ({
+  const artifact = (kind, id11, content) => ({
     kind,
-    id: id10,
+    id: id11,
     sourceRevision: revision,
     provenance: promotionProvenance,
     content: (0, import_promotion.canonicalPromotionValue)(content)
@@ -9413,7 +9815,7 @@ var MEMBER_SYSTEM_RECORD_OWNERS = {
   provider: "originating-provider",
   protectedRoles: "odla-platform"
 };
-var rows2 = (group) => group.fields.map((id10) => ({ ...group, id: id10 }));
+var rows2 = (group) => group.fields.map((id11) => ({ ...group, id: id11 }));
 var MEMBER_SYSTEM_AUTHORITY_MATRIX = [
   ...rows2({
     scope: "network",
@@ -9791,23 +10193,23 @@ function memberSystemAvailability(input) {
     ...!input.bnfFrontendReachable ? { reason: "bnf_frontend_unavailable" } : {}
   };
 }
-function classifyMemberStripeEvent(identity, target, hasProvenLegacyLocalLink) {
+function classifyMemberStripeEvent(identity2, target, hasProvenLegacyLocalLink) {
   const keys2 = ["appId", "environment", "dataEnvironment", "runtime", "chapterId"];
-  const supplied = keys2.filter((key3) => identity[key3] !== void 0);
-  if (supplied.some((key3) => identity[key3] !== target[key3])) return "ignore_sibling";
+  const supplied = keys2.filter((key3) => identity2[key3] !== void 0);
+  if (supplied.some((key3) => identity2[key3] !== target[key3])) return "ignore_sibling";
   if (supplied.length === keys2.length) return "apply";
   return hasProvenLegacyLocalLink ? "apply_legacy" : "quarantine_unmatched";
 }
 function planMemberSystemEventReplay(events2) {
   const seen = /* @__PURE__ */ new Map();
   const plan = { accepted: [], replayed: [], collisions: [] };
-  for (const event of events2) {
-    const digest = seen.get(event.id);
+  for (const event2 of events2) {
+    const digest = seen.get(event2.id);
     if (digest === void 0) {
-      seen.set(event.id, event.digest);
-      plan.accepted.push(event.id);
-    } else if (digest === event.digest) plan.replayed.push(event.id);
-    else plan.collisions.push(event.id);
+      seen.set(event2.id, event2.digest);
+      plan.accepted.push(event2.id);
+    } else if (digest === event2.digest) plan.replayed.push(event2.id);
+    else plan.collisions.push(event2.id);
   }
   return plan;
 }