@odla-ai/chapter 0.54.2 → 0.55.0

package/dist/index.js

@@ -122,8 +122,8 @@ async function submitApplication(db, chapter, fields, opts) {
   if (app.requireDisclaimerAck && !acked) {
     return { ok: false, error: "disclaimerAck is required" };
   }
-  const id10 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
-  const row2 = { id: id10, status: chapter.pipeline.initial, createdAt: opts.now };
+  const id11 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
+  const row2 = { id: id11, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
     if (fieldStates[f]?.visible === false) continue;
     if (typeof fields[f] === "string") row2[f] = fields[f].trim();
@@ -157,12 +157,12 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (acked) row2.disclaimerAckAt = opts.now;
   const ops = [
-    { t: "update", ns: "applications", id: id10, attrs: row2 }
+    { t: "update", ns: "applications", id: id11, attrs: row2 }
   ];
   if (opts.admissionGrant?.decision === "waive_interview") {
     ops.push({ t: "update", ns: "admissionGrants", id: opts.admissionGrant.id, attrs: {
       consumedAt: opts.now,
-      consumedApplicationId: id10
+      consumedApplicationId: id11
     } });
   }
   try {
@@ -170,7 +170,7 @@ async function submitApplication(db, chapter, fields, opts) {
       ops,
       opts.submissionId ? { mutationId: `join:${opts.submissionId}` } : void 0
     );
-    return { ok: true, id: id10, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
+    return { ok: true, id: id11, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
   } catch (error) {
     if (error.code === "unique_violation") return {
       ok: false,
@@ -1705,9 +1705,9 @@ var APPLICATION_LABELS = {
   phone: "Phone",
   state: "State"
 };
-function humanize(id10) {
-  const text6 = id10.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id10;
+function humanize(id11) {
+  const text6 = id11.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text6 ? `${text6[0].toUpperCase()}${text6.slice(1)}` : id11;
 }
 function applicationDefs(chapter) {
   try {
@@ -1716,23 +1716,23 @@ function applicationDefs(chapter) {
     return {};
   }
 }
-function applicationType(id10, def) {
+function applicationType(id11, def) {
   if (def && ["string", "email", "url", "enum"].includes(def.type)) return def.type;
-  return id10 === "email" ? "email" : id10 === "linkedin" ? "url" : "string";
+  return id11 === "email" ? "email" : id11 === "linkedin" ? "url" : "string";
 }
 function applicationFlowFields(chapter, application = chapter.application) {
   const defs = applicationDefs(chapter);
-  return [...application.required, ...application.optional].map((id10, order2) => {
-    const def = defs[id10];
-    const conditions = application.conditions[id10];
-    const type = applicationType(id10, def);
+  return [...application.required, ...application.optional].map((id11, order2) => {
+    const def = defs[id11];
+    const conditions = application.conditions[id11];
+    const type = applicationType(id11, def);
     return {
-      id: id10,
-      label: def?.label ?? APPLICATION_LABELS[id10] ?? humanize(id10),
+      id: id11,
+      label: def?.label ?? APPLICATION_LABELS[id11] ?? humanize(id11),
       type,
-      required: application.required.includes(id10),
+      required: application.required.includes(id11),
       order: order2,
-      maxLength: application.maxLen[id10] ?? application.defaultMaxLen,
+      maxLength: application.maxLen[id11] ?? application.defaultMaxLen,
       ...type === "enum" && def?.options ? { options: [...def.options] } : {},
       ...conditions ? { conditions: { ...conditions } } : {},
       ...type === "email" ? { emailIdentity: "literal" } : {}
@@ -1742,17 +1742,17 @@ function applicationFlowFields(chapter, application = chapter.application) {
 function resolveFormationFlowFields(crm, formation) {
   if (!formation.enabled) return [];
   const def = crm.type(formation.type);
-  return [...formation.required, ...formation.optional].map((id10, order2) => {
-    const field2 = def.fields[id10];
+  return [...formation.required, ...formation.optional].map((id11, order2) => {
+    const field2 = def.fields[id11];
     return {
-      id: id10,
-      label: field2.label ?? humanize(id10),
+      id: id11,
+      label: field2.label ?? humanize(id11),
       type: field2.type,
-      required: formation.required.includes(id10),
+      required: formation.required.includes(id11),
       order: order2,
-      maxLength: formation.maxLen[id10] ?? formation.defaultMaxLen,
+      maxLength: formation.maxLen[id11] ?? formation.defaultMaxLen,
       ...field2.options ? { options: [...field2.options] } : {},
-      ...id10 === def.emailField || field2.type === "email" ? { emailIdentity: "literal" } : {}
+      ...id11 === def.emailField || field2.type === "email" ? { emailIdentity: "literal" } : {}
     };
   });
 }
@@ -2056,12 +2056,12 @@ function resolveNetworkPersonRegistry(mode, input, targetIds) {
   if (input.mode !== "shadow") throw new Error('defineChapter.networkPersonRegistry.mode: must be "shadow"');
   const chapterIds = input.chapterIds ? [...input.chapterIds] : [...targetIds];
   if (chapterIds.length === 0) throw new Error("defineChapter.networkPersonRegistry.chapterIds: at least one chapter is required");
-  if (new Set(chapterIds).size !== chapterIds.length || chapterIds.some((id10) => !SLUG2.test(id10))) {
+  if (new Set(chapterIds).size !== chapterIds.length || chapterIds.some((id11) => !SLUG2.test(id11))) {
     throw new Error("defineChapter.networkPersonRegistry.chapterIds: expected distinct lowercase slugs");
   }
-  const unknown = chapterIds.filter((id10) => !targetIds.includes(id10));
+  const unknown = chapterIds.filter((id11) => !targetIds.includes(id11));
   if (unknown.length) {
-    throw new Error(`defineChapter.networkPersonRegistry.chapterIds: ${unknown.map((id10) => `"${id10}"`).join(", ")} are not configured network targets`);
+    throw new Error(`defineChapter.networkPersonRegistry.chapterIds: ${unknown.map((id11) => `"${id11}"`).join(", ")} are not configured network targets`);
   }
   return { mode: "shadow", chapterIds };
 }
@@ -2184,9 +2184,9 @@ function isResolvedCrm(x) {
 }
 function defineChapter(config) {
   if (!config || typeof config !== "object") throw new Error("defineChapter: a config object is required");
-  const { id: id10, name } = config;
-  if (typeof id10 !== "string" || !SLUG7.test(id10)) {
-    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id10)}`);
+  const { id: id11, name } = config;
+  if (typeof id11 !== "string" || !SLUG7.test(id11)) {
+    throw new Error(`defineChapter.id: must be a lowercase slug [a-z0-9-] (2-63 chars) \u2014 got ${JSON.stringify(id11)}`);
   }
   if (typeof name !== "string" || name.trim() === "") throw new Error("defineChapter.name: a non-empty name is required");
   const mode = config.mode ?? "chapter";
@@ -2293,7 +2293,7 @@ function defineChapter(config) {
   };
   const chapter = {
     config,
-    id: id10,
+    id: id11,
     name,
     mode,
     brand,
@@ -2708,14 +2708,14 @@ function facts(snapshots) {
     ["payment_intent.updated", snapshots.payments?.objects ?? []]
   ];
   return groups2.flatMap(([eventType, objects]) => objects.map((object2) => {
-    const id10 = typeof object2.id === "string" ? object2.id : "invalid";
+    const id11 = typeof object2.id === "string" ? object2.id : "invalid";
     return normalizeNetworkCommercialStripeEvent({
-      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id10}`,
+      id: `evt_snapshot_${eventType.replaceAll(".", "_")}_${id11}`,
       type: eventType,
       created: typeof object2.created === "number" ? object2.created : 0,
       livemode: object2.livemode === true,
       data: { object: object2 }
-    }, `stripe-snapshot:${eventType}:${id10}`);
+    }, `stripe-snapshot:${eventType}:${id11}`);
   }));
 }
 var selected = (row2) => ({
@@ -3424,8 +3424,8 @@ async function hash(value) {
 async function membershipDiscountCouponId(input, policyId) {
   return policyId ? `odla_m_${await hash([input.appId, input.chapterId, input.environment, input.runtime, input.skuId, policyId])}` : void 0;
 }
-async function load(db, ns, id10) {
-  return (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+async function load(db, ns, id11) {
+  return (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 }
 async function membershipOfferIdForRequest(input) {
   return `offer_${await hash([input.appId, input.chapterId, input.environment, input.runtime, input.applicationId, input.requestId])}`;
@@ -3562,20 +3562,20 @@ import { stripeRequest as stripeRequest2 } from "@odla-ai/stripe";
 
 // src/commercial-evidence-guard.ts
 async function commercialEvidenceGuard(db, eventId, digest, code = "membership_payment_evidence_quarantined") {
-  const ns = "networkCommercialExceptions", id10 = `network-commercial-exception:${eventId}:collision`;
-  const row2 = (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
-  if (!row2) return { ns, id: id10, exists: false };
+  const ns = "networkCommercialExceptions", id11 = `network-commercial-exception:${eventId}:collision`;
+  const row2 = (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
+  if (!row2) return { ns, id: id11, exists: false };
   if (row2.status !== "resolved" || row2.resolvedDigest !== digest || typeof digest !== "string") {
     throw Object.assign(new Error(code), { code });
   }
-  return { ns, id: id10, exists: true, equals: { status: "resolved", resolvedDigest: digest, updatedAt: row2.updatedAt } };
+  return { ns, id: id11, exists: true, equals: { status: "resolved", resolvedDigest: digest, updatedAt: row2.updatedAt } };
 }
 
 // src/membership-authority-state.ts
 var membershipFail = (code) => {
   throw Object.assign(new Error(code), { code });
 };
-var membershipLoad = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+var membershipLoad = async (db, ns, id11) => (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 var membershipScopeKeys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId"];
 var membershipScope = (input) => Object.fromEntries(membershipScopeKeys.map((key3) => [key3, input[key3]]));
 function requireMembershipScope(row2, input) {
@@ -3586,18 +3586,18 @@ async function loadMembershipAuthorityState(db, input) {
   if (!row2 || row2.mode !== "authoritative" || row2.chapterId !== input.chapterId || row2.environment !== input.environment || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1) return membershipFail("membership_authority_unavailable");
   return row2;
 }
-var membershipUpdate = (ns, id10, attrs) => ({ t: "update", ns, id: id10, attrs });
+var membershipUpdate = (ns, id11, attrs) => ({ t: "update", ns, id: id11, attrs });
 var membershipClock = (now) => {
   if (!Number.isSafeInteger(now) || now < 0) membershipFail("invalid_membership_clock");
 };
 
 // src/membership-restart-payment.ts
 async function membershipRestartPayment(db, target, member, now) {
-  const id10 = String(member.id), restart = await membershipLoad(db, "membershipRestart", id10);
+  const id11 = String(member.id), restart = await membershipLoad(db, "membershipRestart", id11);
   requireMembershipScope(restart, target);
-  const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+  const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
   requireMembershipScope(entitlement, target);
-  if (entitlement.membershipId !== id10 || entitlement.kind !== "primary") membershipFail("membership_restart_conflict");
+  if (entitlement.membershipId !== id11 || entitlement.kind !== "primary") membershipFail("membership_restart_conflict");
   if (restart.status !== "ready" || member.status !== "restarting" || member.restartId !== restart.restartId || member.memberNumber !== restart.memberNumber || !Number.isSafeInteger(member.journeyApprovedAt)) membershipFail("membership_restart_conflict");
   return {
     restartId: String(restart.restartId),
@@ -3614,49 +3614,117 @@ async function membershipRestartPayment(db, target, member, now) {
       graceEndsAt: 0
     },
     ops: [
-      membershipUpdate("membershipRestart", id10, { status: "complete" }),
-      { t: "retract", ns: "networkMembership", id: id10, attrs: ["refundRequestedAt", "cancellationRequestedAt", "discountPolicyVersionId", "discountSnapshot"] }
+      membershipUpdate("membershipRestart", id11, { status: "complete" }),
+      { t: "retract", ns: "networkMembership", id: id11, attrs: ["refundRequestedAt", "cancellationRequestedAt", "discountPolicyVersionId", "discountSnapshot"] }
     ],
     guards: [
-      { ns: "networkMembership", id: id10, exists: true, equals: { status: "restarting", revision: member.revision, restartId: restart.restartId } },
-      { ns: "membershipRestart", id: id10, exists: true, equals: { status: "ready", restartId: restart.restartId } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { status: "restarting", revision: member.revision, restartId: restart.restartId } },
+      { ns: "membershipRestart", id: id11, exists: true, equals: { status: "ready", restartId: restart.restartId } },
       { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision, status: entitlement.status } }
     ]
   };
 }
 
+// src/checkout-named-seat.ts
+function checkoutNamedSeatSelection(value, purchaserEmail) {
+  const row2 = value;
+  const name = typeof row2?.recipientName === "string" ? row2.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof row2?.recipientEmail === "string" ? row2.recipientEmail : "");
+  const purchaser = normalizeChapterEmail(purchaserEmail);
+  if (!row2 || typeof row2 !== "object" || Array.isArray(row2) || name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(row2.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(purchaser) || email === purchaser) {
+    throw Object.assign(new Error("Enter a different recipient's name and email."), { code: "invalid_named_seat_recipient" });
+  }
+  return { recipientName: name, recipientEmail: email };
+}
+async function checkoutNamedSeatIdentity(target, email) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
+    target.appId,
+    target.chapterId,
+    target.environment,
+    target.runtime,
+    email
+  ])));
+  return {
+    seatId: (await membershipOfferIdForRequest({ ...target, requestId: "named_seat" })).replace(/^offer_/, "seat_"),
+    membershipId: (await membershipOfferIdForRequest({ ...target, requestId: "checkout_binding" })).replace(/^offer_/, "membership_"),
+    recipientClaimId: `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`
+  };
+}
+
 // src/membership-checkout-binding.ts
 var keys = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId", "offerId", "offerDigest", "quoteDigest", "priceId"];
 var reject2 = (code) => {
   throw Object.assign(new Error(code), { code });
 };
-var load2 = async (db, ns, id10) => (await db.query({ [ns]: { $: { where: { id: id10 }, limit: 1 } } }))[ns]?.[0];
+var load2 = async (db, ns, id11) => (await db.query({ [ns]: { $: { where: { id: id11 }, limit: 1 } } }))[ns]?.[0];
 async function membershipCheckoutBindingId(input) {
   return (await membershipOfferIdForRequest({ ...input, requestId: "checkout_binding" })).replace(/^offer_/, "checkout_");
 }
 async function verifyMembershipCheckoutBinding(value, input) {
   const row2 = value;
   if (!row2 || typeof row2 !== "object" || row2.id !== await membershipCheckoutBindingId(input) || keys.some((key3) => row2[key3] !== input[key3]) || !Number.isSafeInteger(row2.boundAt) || row2.boundAt < 0) return reject2("membership_checkout_conflict");
-  return { id: row2.id, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: row2.boundAt };
+  if (Boolean(row2.namedSeat) !== Boolean(input.namedSeat)) return reject2("membership_checkout_conflict");
+  if (input.namedSeat) {
+    const expected = {
+      ...checkoutNamedSeatSelection(input.namedSeat, input.namedSeat.purchaserEmail),
+      purchaserEmail: normalizeChapterEmail(input.namedSeat.purchaserEmail)
+    };
+    const identity2 = await checkoutNamedSeatIdentity(input, expected.recipientEmail);
+    if (!row2.namedSeat || Object.entries({ ...expected, ...identity2 }).some(([key3, value2]) => row2.namedSeat[key3] !== value2) || !/^price_[A-Za-z0-9_]+$/.test(row2.namedSeat.priceId) || row2.namedSeat.priceId === input.priceId || !Number.isSafeInteger(row2.namedSeat.amountCents) || row2.namedSeat.amountCents < 0) return reject2("membership_checkout_conflict");
+  }
+  return {
+    id: row2.id,
+    ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])),
+    boundAt: row2.boundAt,
+    ...row2.namedSeat ? { namedSeat: row2.namedSeat } : {}
+  };
 }
-async function bindMembershipCheckout(db, input, now) {
+async function bindMembershipCheckout(db, input, now, seatPriceId) {
   if (!Number.isSafeInteger(now) || now < 0 || !/^[a-f0-9]{64}$/.test(input.offerDigest) || !/^[a-f0-9]{64}$/.test(input.quoteDigest) || !/^price_[A-Za-z0-9_]+$/.test(input.priceId)) return reject2("invalid_membership_checkout");
   const stateId = `${input.chapterId}:${input.environment}`;
   const state = await load2(db, "membershipAuthorityState", stateId);
   if (!state || state.mode !== "authoritative" || state.chapterId !== input.chapterId || state.environment !== input.environment || !Number.isSafeInteger(state.revision) || Number(state.revision) < 1) return reject2("membership_authority_unavailable");
-  const id10 = await membershipCheckoutBindingId(input);
-  const existing = await load2(db, "membershipOfferCheckout", id10);
+  const id11 = await membershipCheckoutBindingId(input);
+  const existing = await load2(db, "membershipOfferCheckout", id11);
   if (existing) return verifyMembershipCheckoutBinding(existing, input);
   const row2 = await load2(db, "membershipCheckoutOffer", input.offerId);
   const offer = await verifyIssuedMembershipOffer(row2, { ...input, now, lifetimeMs: 6e4 });
   if (offer.digest !== input.offerDigest || offer.expiresAt <= now || offer.issuedAt > now) return reject2("membership_offer_expired");
-  const restart = await load2(db, "membershipRestart", id10.replace(/^checkout_/, "membership_"));
-  const receipt = { id: id10, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: now };
+  const restart = await load2(db, "membershipRestart", id11.replace(/^checkout_/, "membership_"));
+  let namedSeat;
+  if (input.namedSeat) {
+    if (!seatPriceId || !/^price_[A-Za-z0-9_]+$/.test(seatPriceId) || seatPriceId === input.priceId || restart) return reject2("named_seat_purchase_unavailable");
+    const selection = checkoutNamedSeatSelection(input.namedSeat, input.namedSeat.purchaserEmail);
+    namedSeat = {
+      ...selection,
+      purchaserEmail: normalizeChapterEmail(input.namedSeat.purchaserEmail),
+      ...await checkoutNamedSeatIdentity(input, selection.recipientEmail),
+      priceId: seatPriceId,
+      amountCents: offer.contract.offering.seatPriceCents
+    };
+  }
+  const receipt = { id: id11, ...Object.fromEntries(keys.map((key3) => [key3, input[key3]])), boundAt: now, ...namedSeat ? { namedSeat } : {} };
   try {
-    await db.transact([{ t: "update", ns: "membershipOfferCheckout", id: id10, attrs: receipt }], {
-      mutationId: `membership-checkout:${id10}${restart?.restartId ? `:${restart.restartId}` : ""}`,
+    await db.transact([
+      { t: "update", ns: "membershipOfferCheckout", id: id11, attrs: receipt },
+      ...namedSeat ? [{ t: "update", ns: "networkSeatRecipient", id: namedSeat.recipientClaimId, attrs: {
+        id: namedSeat.recipientClaimId,
+        appId: input.appId,
+        chapterId: input.chapterId,
+        environment: input.environment,
+        runtime: input.runtime,
+        seatId: namedSeat.seatId,
+        recipientEmailNormalized: namedSeat.recipientEmail,
+        createdAt: now
+      } }] : []
+    ], {
+      mutationId: `membership-checkout:${id11}${restart?.restartId ? `:${restart.restartId}` : ""}`,
       guards: [
-        { ns: "membershipOfferCheckout", id: id10, exists: false },
+        { ns: "membershipOfferCheckout", id: id11, exists: false },
+        ...namedSeat ? [
+          { ns: "networkSeat", id: namedSeat.seatId, exists: false },
+          { ns: "networkSeatRecipient", id: namedSeat.recipientClaimId, exists: false }
+        ] : [],
         { ns: "membershipCheckoutOffer", id: input.offerId, exists: true, equals: { digest: input.offerDigest } },
         { ns: "membershipAuthorityState", id: stateId, exists: true, equals: { mode: "authoritative", revision: state.revision } }
       ]
@@ -3664,11 +3732,78 @@ async function bindMembershipCheckout(db, input, now) {
   } catch (error) {
     if (error.code !== "transact_guard_failed") throw error;
   }
-  const saved = await load2(db, "membershipOfferCheckout", id10);
+  const saved = await load2(db, "membershipOfferCheckout", id11);
   if (!saved) return reject2("membership_binding_unconfirmed");
   return verifyMembershipCheckoutBinding(saved, input);
 }
 
+// src/membership-checkout-seat-payment.ts
+function checkoutSeatPaymentOperations(target, seat, input) {
+  const { now, paidAt, endsAt } = input;
+  const included = seat.amountCents === 0, entitlementId = `${seat.seatId}:entitlement`;
+  const effectId = `${seat.seatId}:${included ? "invite" : "attach-renewal"}`;
+  return [
+    membershipUpdate("networkSeat", seat.seatId, {
+      id: seat.seatId,
+      ...membershipScope(target),
+      primaryMembershipId: seat.membershipId,
+      purchaserEmailNormalized: seat.purchaserEmail,
+      recipientName: seat.recipientName,
+      recipientEmailNormalized: seat.recipientEmail,
+      recipientClaimId: seat.recipientClaimId,
+      priceId: seat.priceId,
+      primaryPriceId: input.primaryPriceId,
+      amountCents: seat.amountCents,
+      currency: input.offering.currency,
+      interval: input.offering.interval,
+      providerCustomerId: input.customerId,
+      providerSubscriptionId: input.subscriptionId,
+      combinedInvoice: { invoiceId: input.invoiceId, totalCents: input.invoiceTotalCents },
+      status: included ? "pending_acceptance" : "renewal_pending",
+      preparedAt: input.boundAt,
+      purchasedAt: paidAt,
+      termStartedAt: paidAt,
+      termEndsAt: endsAt,
+      acceptanceEndsAt: endsAt,
+      seatPurchaseEndsAt: seatPurchaseDeadline(input.offering, { initialTermStartedAt: paidAt, termEndsAt: endsAt }),
+      offeringSnapshot: input.offering,
+      paymentEventId: input.eventId,
+      ...included ? { entitlementId } : {},
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    }),
+    ...included ? [membershipUpdate("networkEntitlement", entitlementId, {
+      id: entitlementId,
+      ...membershipScope(target),
+      membershipId: seat.membershipId,
+      seatId: seat.seatId,
+      kind: "named_seat",
+      status: "pending_acceptance",
+      termStartedAt: paidAt,
+      termEndsAt: endsAt,
+      offeringSnapshot: input.offering,
+      sourceEventId: input.eventId,
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    })] : [],
+    membershipUpdate("membershipEffect", effectId, {
+      id: effectId,
+      chapterId: target.chapterId,
+      environment: target.environment,
+      runtime: target.runtime,
+      membershipId: seat.membershipId,
+      seatId: seat.seatId,
+      kind: included ? "invite_named_recipient" : "attach_seat_renewal",
+      status: "pending",
+      attempts: 0,
+      createdAt: now,
+      updatedAt: now
+    })
+  ];
+}
+
 // src/membership-payment-authority.ts
 async function networkMembershipId(input) {
   return (await membershipCheckoutBindingId(input)).replace(/^checkout_/, "membership_");
@@ -3684,11 +3819,14 @@ async function confirmMembershipPayment(db, input, now) {
     { ...input, offerId: String(binding.offerId), now, lifetimeMs: 6e4 }
   );
   if (binding.offerDigest !== offer.digest) membershipFail("membership_checkout_conflict");
+  const { namedSeat } = await verifyMembershipCheckoutBinding(binding, binding);
+  if (namedSeat && namedSeat.amountCents !== offer.contract.offering.seatPriceCents) membershipFail("membership_checkout_conflict");
+  const totalCents = offer.contract.dueTodayCents + (namedSeat?.amountCents ?? 0);
   const eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   if (!eventRow) membershipFail("membership_payment_evidence_pending");
   const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow.digest);
   const fact = eventRow.fact;
-  if (!fact || !fact.identity || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.eventType !== "invoice.payment_succeeded" || fact.objectKind !== "invoice" || fact.billingReason !== "subscription_create" || fact.livemode !== (input.environment === "prod") || fact.status !== "paid" || fact.applicationId !== input.applicationId || fact.subscriptionId !== input.providerSubscriptionId || fact.customerId !== input.providerCustomerId || !/^in_[A-Za-z0-9_]+$/.test(fact.invoiceId ?? "") || fact.currency !== offer.contract.offering.currency || fact.invoiceTotalCents !== offer.contract.dueTodayCents || fact.amountPaidCents !== offer.contract.dueTodayCents || Object.entries({
+  if (!fact || !fact.identity || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.eventType !== "invoice.payment_succeeded" || fact.objectKind !== "invoice" || fact.billingReason !== "subscription_create" || fact.livemode !== (input.environment === "prod") || fact.status !== "paid" || fact.applicationId !== input.applicationId || fact.subscriptionId !== input.providerSubscriptionId || fact.customerId !== input.providerCustomerId || !/^in_[A-Za-z0-9_]+$/.test(fact.invoiceId ?? "") || fact.currency !== offer.contract.offering.currency || fact.invoiceTotalCents !== totalCents || fact.amountPaidCents !== totalCents || Object.entries({
     appId: input.appId,
     chapterId: input.chapterId,
     environment: input.environment,
@@ -3700,14 +3838,14 @@ async function confirmMembershipPayment(db, input, now) {
   const paidAt = fact.invoicePaidAt;
   const endsAt = offer.contract.initialTermEndsAt ?? fact.invoicePeriodEndsAt;
   if (!Number.isSafeInteger(paidAt) || Number(paidAt) < Math.floor(Number(binding.boundAt) / 1e3) * 1e3 || Number(paidAt) > now + 3e4 || !Number.isSafeInteger(endsAt) || Number(endsAt) <= Number(paidAt)) membershipFail("membership_payment_period_mismatch");
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
-  let member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
+  let member = await membershipLoad(db, "networkMembership", id11);
   if (!member || member.status === "restarting") {
     const offering = offer.contract.offering;
     const restart = member ? await membershipRestartPayment(db, input, member, now) : null;
     const attrs = {
-      id: id10,
-      membershipId: id10,
+      id: id11,
+      membershipId: id11,
       ...membershipScope(input),
       baseSkuId: input.skuId,
       status: "paid_pending_approval",
@@ -3723,8 +3861,9 @@ async function confirmMembershipPayment(db, input, now) {
       founding: offer.contract.founding,
       cohort: offer.contract.founding ? offer.contract.discountPolicy.cohortLabel : "standard",
       baseAmountCents: offering.basePriceCents,
-      amountCents: offer.contract.dueTodayCents,
+      amountCents: totalCents,
       renewalAmountCents: offer.contract.renewalCents,
+      ...namedSeat ? { namedSeatId: namedSeat.seatId } : {},
       currency: offering.currency,
       interval: offering.interval,
       initialTermStartedAt: paidAt,
@@ -3741,11 +3880,11 @@ async function confirmMembershipPayment(db, input, now) {
     };
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, attrs),
+        membershipUpdate("networkMembership", id11, attrs),
         membershipUpdate("networkEntitlement", entitlementId, {
           id: entitlementId,
           ...membershipScope(input),
-          membershipId: id10,
+          membershipId: id11,
           kind: "primary",
           status: restart?.attrs.status === "active" ? "active" : "pending_approval",
           termStartedAt: paidAt,
@@ -3757,23 +3896,45 @@ async function confirmMembershipPayment(db, input, now) {
           updatedAt: now,
           ...restart?.entitlementAttrs
         }),
-        ...restart?.ops ?? []
-      ], { mutationId: `membership-paid:${id10}${restart ? `:${restart.restartId}` : ""}`, guards: [
-        ...restart?.guards ?? [{ ns: "networkMembership", id: id10, exists: false }],
+        ...restart?.ops ?? [],
+        ...namedSeat ? checkoutSeatPaymentOperations(input, namedSeat, {
+          offering,
+          primaryPriceId: String(binding.priceId),
+          invoiceId: fact.invoiceId,
+          invoiceTotalCents: totalCents,
+          subscriptionId: input.providerSubscriptionId,
+          customerId: input.providerCustomerId,
+          eventId: input.eventId,
+          paidAt: Number(paidAt),
+          endsAt: Number(endsAt),
+          boundAt: Number(binding.boundAt),
+          now
+        }) : []
+      ], { mutationId: `membership-paid:${id11}${restart ? `:${restart.restartId}` : ""}`, guards: [
+        ...restart?.guards ?? [{ ns: "networkMembership", id: id11, exists: false }],
+        ...namedSeat ? [
+          { ns: "networkSeat", id: namedSeat.seatId, exists: false },
+          {
+            ns: "networkSeatRecipient",
+            id: namedSeat.recipientClaimId,
+            exists: true,
+            equals: { seatId: namedSeat.seatId, recipientEmailNormalized: namedSeat.recipientEmail }
+          }
+        ] : [],
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
-        { ns: "membershipOfferCheckout", id: String(binding.id), exists: true, equals: { offerDigest: offer.digest } },
+        { ns: "membershipOfferCheckout", id: String(binding.id), exists: true, equals: { offerDigest: offer.digest, quoteDigest: binding.quoteDigest } },
         { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
         evidenceGuard
       ] });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
     }
-    member = await membershipLoad(db, "networkMembership", id10);
+    member = await membershipLoad(db, "networkMembership", id11);
   }
   requireMembershipScope(member, input);
   if (member.purchaseOfferDigest !== offer.digest || member.providerInitialInvoiceId !== fact.invoiceId || member.providerSubscriptionId !== fact.subscriptionId || member.providerCustomerId !== fact.customerId) membershipFail("membership_purchase_conflict");
   return {
-    membershipId: id10,
+    membershipId: id11,
     status: String(member.status),
     cohort: String(member.cohort),
     initialTermStartedAt: Number(member.initialTermStartedAt),
@@ -3785,9 +3946,9 @@ async function confirmMembershipPayment(db, input, now) {
 // src/membership-cancel-authority.ts
 async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
   membershipClock(now);
-  const id10 = await networkMembershipId(target);
+  const id11 = await networkMembershipId(target);
   const state = await loadMembershipAuthorityState(db, target);
-  const member = await membershipLoad(db, "networkMembership", id10);
+  const member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, target);
   if (!["active", "cancel_at_term_end", "payment_grace", "paid_pending_approval", "lapsed"].includes(String(member.status))) {
     membershipFail("membership_cancellation_unavailable");
@@ -3805,7 +3966,7 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
       "POST",
       path,
       { cancel_at_period_end: true, proration_behavior: "none" },
-      { idempotencyKey: `membership-cancel-at-term:${id10}:${member.providerSubscriptionId}` }
+      { idempotencyKey: `membership-cancel-at-term:${id11}:${member.providerSubscriptionId}` }
     );
     if (!write.ok || write.body.id !== member.providerSubscriptionId || write.body.cancel_at_period_end !== true) {
       membershipFail("membership_cancellation_pending");
@@ -3813,7 +3974,7 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
   }
   const status2 = Number(member.termEndsAt) <= now ? "lapsed" : member.journeyApprovedAt ? "cancel_at_term_end" : "paid_pending_approval";
   if (member.status !== status2 || member.autoRenew !== false || Number(member.graceEndsAt ?? 0) !== 0) {
-    await db.transact([membershipUpdate("networkMembership", id10, {
+    await db.transact([membershipUpdate("networkMembership", id11, {
       status: status2,
       autoRenew: false,
       graceEndsAt: 0,
@@ -3822,12 +3983,12 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
       updatedAt: now
     })], {
       guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } }
       ]
     });
   }
-  return { membershipId: id10, status: status2, termEndsAt: Number(member.termEndsAt), graceEndsAt: 0, autoRenew: false };
+  return { membershipId: id11, status: status2, termEndsAt: Number(member.termEndsAt), graceEndsAt: 0, autoRenew: false };
 }
 
 // src/membership-authority-handler.ts
@@ -3866,17 +4027,17 @@ async function namedSeatPrimaryActivation(db, member, now) {
 // src/membership-approval-authority.ts
 async function approveNetworkMembership(db, input, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
   for (let attempt = 0; attempt < 8; attempt++) {
     const state = await loadMembershipAuthorityState(db, input);
-    const member = await membershipLoad(db, "networkMembership", id10);
+    const member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const entitlement = await membershipLoad(db, "networkEntitlement", entitlementId);
     requireMembershipScope(entitlement, input);
-    if (entitlement.membershipId !== id10 || entitlement.kind !== "primary") membershipFail("membership_entitlement_conflict");
+    if (entitlement.membershipId !== id11 || entitlement.kind !== "primary") membershipFail("membership_entitlement_conflict");
     if (["active", "cancel_at_term_end"].includes(String(member.status)) && entitlement.status === "active" && Number(member.refundedCents) === 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && Number(member.termEndsAt) > now) {
       return {
-        membershipId: id10,
+        membershipId: id11,
         status: String(member.status),
         cohort: String(member.cohort),
         memberNumber: Number(member.memberNumber),
@@ -3896,7 +4057,7 @@ async function approveNetworkMembership(db, input, now) {
     const seatActivation = await namedSeatPrimaryActivation(db, member, now);
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, {
+        membershipUpdate("networkMembership", id11, {
           status: member.autoRenew ? "active" : "cancel_at_term_end",
           memberNumber,
           journeyApprovedAt: now,
@@ -3911,8 +4072,8 @@ async function approveNetworkMembership(db, input, now) {
           updatedAt: now
         }),
         ...seatActivation.ops
-      ], { mutationId: `membership-approve:${id10}`, guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision, status: "paid_pending_approval" }, absent: ["memberNumber"] },
+      ], { mutationId: `membership-approve:${id11}`, guards: [
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision, status: "paid_pending_approval" }, absent: ["memberNumber"] },
         { ns: "networkEntitlement", id: entitlementId, exists: true, equals: { revision: entitlement.revision, status: "pending_approval" } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } },
         ...seatActivation.guards
@@ -4011,41 +4172,41 @@ async function refundSubscriptionPayment(secretKey, input) {
 // src/membership-refund-authority.ts
 async function refundNetworkMembership(db, input, secretKey, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), entitlementId = `${id10}:primary`;
-  let state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), entitlementId = `${id11}:primary`;
+  let state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
-  if (member.status === "refunded") return { membershipId: id10, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
+  if (member.status === "refunded") return { membershipId: id11, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
   if (!["paid_pending_approval", "active", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending"].includes(String(member.status))) membershipFail("membership_refund_not_eligible");
   if (member.status !== "refund_pending") {
     const entitlement = await membershipLoad(db, "networkEntitlement", entitlementId);
     requireMembershipScope(entitlement, input);
     await db.transact([
-      membershipUpdate("networkMembership", id10, {
+      membershipUpdate("networkMembership", id11, {
         status: "refund_pending",
         refundRequestedAt: now,
         revision: Number(member.revision) + 1,
         updatedAt: now
       }),
       membershipUpdate("networkEntitlement", entitlementId, { status: "closed", revision: Number(entitlement.revision) + 1, updatedAt: now }),
-      membershipUpdate("membershipEffect", `${id10}:refund`, {
-        id: `${id10}:refund`,
+      membershipUpdate("membershipEffect", `${id11}:refund`, {
+        id: `${id11}:refund`,
         chapterId: input.chapterId,
         environment: input.environment,
         runtime: input.runtime,
-        membershipId: id10,
+        membershipId: id11,
         kind: "refund_membership",
         status: "pending",
         attempts: 0,
         createdAt: now,
         updatedAt: now
       })
-    ], { mutationId: `membership-refund-request:${id10}`, guards: [
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+    ], { mutationId: `membership-refund-request:${id11}`, guards: [
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
       { ns: "networkEntitlement", id: entitlementId, exists: true, equals: { revision: entitlement.revision } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } }
     ] });
   }
-  member = await membershipLoad(db, "networkMembership", id10);
+  member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
   if (member.status !== "refund_pending") membershipFail("membership_refund_retry_required");
   const result = await refundSubscriptionPayment(secretKey, {
@@ -4059,23 +4220,23 @@ async function refundNetworkMembership(db, input, secretKey, now) {
   if (!result.subscriptionCanceled || result.refundedCents !== member.amountCents) membershipFail("membership_refund_unconfirmed");
   for (let attempt = 0; attempt < 8; attempt++) {
     state = await loadMembershipAuthorityState(db, input);
-    member = await membershipLoad(db, "networkMembership", id10);
+    member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
-    if (member.status === "refunded") return { membershipId: id10, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
+    if (member.status === "refunded") return { membershipId: id11, status: "refunded", refundedCents: Number(member.refundedCents), subscriptionCanceled: true };
     if (member.status !== "refund_pending") membershipFail("membership_refund_retry_required");
     const counted = member.founding === true && member.memberNumber !== void 0;
     const counts = state.cohortCounts;
     if (!counts || counted && (!Number.isSafeInteger(counts[String(member.cohort)]) || counts[String(member.cohort)] < 1)) membershipFail("invalid_cohort_count");
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, {
+        membershipUpdate("networkMembership", id11, {
           status: "refunded",
           refundedCents: result.refundedCents,
           autoRenew: false,
           revision: Number(member.revision) + 1,
           updatedAt: now
         }),
-        membershipUpdate("membershipEffect", `${id10}:refund`, { status: "complete", updatedAt: now }),
+        membershipUpdate("membershipEffect", `${id11}:refund`, { status: "complete", updatedAt: now }),
         ...counted ? [membershipUpdate("membershipAuthorityState", String(state.id), {
           cohortCounts: { ...counts, [String(member.cohort)]: counts[String(member.cohort)] - 1 },
           revision: Number(state.revision) + 1,
@@ -4086,7 +4247,7 @@ async function refundNetworkMembership(db, input, secretKey, now) {
           chapterId: input.chapterId,
           environment: input.environment,
           runtime: input.runtime,
-          membershipId: id10,
+          membershipId: id11,
           seatId: member.namedSeatId,
           kind: "refund_seat_with_primary",
           status: "pending",
@@ -4094,8 +4255,8 @@ async function refundNetworkMembership(db, input, secretKey, now) {
           createdAt: now,
           updatedAt: now
         })] : []
-      ], { mutationId: `membership-refunded:${id10}`, guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { status: "refund_pending", revision: member.revision } },
+      ], { mutationId: `membership-refunded:${id11}`, guards: [
+        { ns: "networkMembership", id: id11, exists: true, equals: { status: "refund_pending", revision: member.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
       ] });
     } catch (error) {
@@ -4123,8 +4284,8 @@ async function reserveNamedMembershipSeat(db, input, now) {
   const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
   requireMembershipScope(member, input);
   if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
-  const id10 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  let seat = await membershipLoad(db, "networkSeat", id10);
+  const id11 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
+  let seat = await membershipLoad(db, "networkSeat", id11);
   if (!seat) {
     const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
     const purchaseEndsAt = seatPurchaseDeadline(offering, member);
@@ -4132,7 +4293,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
       membershipFail("named_seat_purchase_unavailable");
     }
     const attrs = {
-      id: id10,
+      id: id11,
       ...membershipScope(input),
       primaryMembershipId: memberId,
       recipientName: name,
@@ -4157,20 +4318,20 @@ async function reserveNamedMembershipSeat(db, input, now) {
     };
     try {
       await db.transact([
-        membershipUpdate("networkSeat", id10, attrs),
+        membershipUpdate("networkSeat", id11, attrs),
         membershipUpdate("networkSeatRecipient", claimId, {
           id: claimId,
           appId: input.appId,
           chapterId: input.chapterId,
           environment: input.environment,
           runtime: input.runtime,
-          seatId: id10,
+          seatId: id11,
           recipientEmailNormalized: email,
           createdAt: now
         }),
-        membershipUpdate("networkMembership", memberId, { namedSeatId: id10, revision: Number(member.revision) + 1, updatedAt: now })
-      ], { mutationId: `named-seat-reserve:${id10}`, guards: [
-        { ns: "networkSeat", id: id10, exists: false },
+        membershipUpdate("networkMembership", memberId, { namedSeatId: id11, revision: Number(member.revision) + 1, updatedAt: now })
+      ], { mutationId: `named-seat-reserve:${id11}`, guards: [
+        { ns: "networkSeat", id: id11, exists: false },
         { ns: "networkSeatRecipient", id: claimId, exists: false },
         { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
@@ -4178,7 +4339,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
     }
-    seat = await membershipLoad(db, "networkSeat", id10);
+    seat = await membershipLoad(db, "networkSeat", id11);
     if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
   }
   requireMembershipScope(seat, input);
@@ -4188,7 +4349,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
 
 // src/membership-seat-included.ts
 var namedSeatIncluded = (seat) => Number(seat.amountCents) === 0;
-var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean(seat.providerPaymentIntentId && seat.providerSubscriptionItemId);
+var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean((seat.providerPaymentIntentId || seat.combinedInvoice) && seat.providerSubscriptionItemId);
 function namedSeatRecipientState(seat) {
   switch (String(seat.status)) {
     case "renewal_pending":
@@ -4286,7 +4447,7 @@ async function grantIncludedNamedSeat(db, input, now) {
 // src/membership-renewal-authority.ts
 async function reconcileMembershipRenewal(db, input, now) {
   membershipClock(now);
-  const id10 = await networkMembershipId(input), eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
+  const id11 = await networkMembershipId(input), eventRow = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, eventRow?.digest, "membership_renewal_evidence_pending");
   const fact = eventRow?.fact;
   if (!fact || !/^evt_[A-Za-z0-9_]+$/.test(input.eventId) || !/^[a-f0-9]{64}$/.test(String(eventRow.digest)) || fact.digest !== eventRow.digest || fact.eventId !== input.eventId || fact.objectKind !== "invoice" || !["invoice.payment_succeeded", "invoice.payment_failed"].includes(fact.eventType) || fact.billingReason !== "subscription_cycle" || fact.livemode !== (input.environment === "prod") || fact.applicationId !== input.applicationId || Object.entries({
@@ -4299,10 +4460,10 @@ async function reconcileMembershipRenewal(db, input, now) {
     return membershipFail("membership_renewal_evidence_pending");
   }
   for (let attempt = 0; attempt < 8; attempt++) {
-    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const receipt = () => ({
-      membershipId: id10,
+      membershipId: id11,
       status: String(member.status),
       termEndsAt: Number(member.termEndsAt),
       graceEndsAt: Number(member.graceEndsAt ?? 0),
@@ -4327,13 +4488,13 @@ async function reconcileMembershipRenewal(db, input, now) {
     const paid = fact.eventType === "invoice.payment_succeeded";
     if (!paid && (fact.status !== "open" || !Number.isSafeInteger(fact.amountPaidCents) || Number(fact.amountPaidCents) < 0 || Number(fact.amountPaidCents) >= amount)) membershipFail("membership_renewal_failure_mismatch");
     if (paid && (fact.status !== "paid" || fact.amountPaidCents !== amount || !Number.isSafeInteger(fact.invoicePaidAt) || Number(fact.invoicePaidAt) < start || Number(fact.invoicePaidAt) > now + 3e4)) membershipFail("membership_renewal_unpaid");
-    const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+    const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
     requireMembershipScope(entitlement, input);
     const graceEndsAt = paid ? 0 : start + 14 * 864e5;
     const status2 = paid ? member.journeyApprovedAt ? member.autoRenew ? "active" : "cancel_at_term_end" : "paid_pending_approval" : now < graceEndsAt ? "payment_grace" : "lapsed";
     const entitlementStatus = member.journeyApprovedAt && (paid || now < graceEndsAt) ? "active" : member.journeyApprovedAt ? "closed" : "pending_approval";
     const ops = [
-      membershipUpdate("networkMembership", id10, {
+      membershipUpdate("networkMembership", id11, {
         status: status2,
         graceEndsAt,
         ...paid ? {
@@ -4344,7 +4505,7 @@ async function reconcileMembershipRenewal(db, input, now) {
         revision: Number(member.revision) + 1,
         updatedAt: now
       }),
-      membershipUpdate("networkEntitlement", `${id10}:primary`, {
+      membershipUpdate("networkEntitlement", `${id11}:primary`, {
         status: entitlementStatus,
         ...paid ? { termStartedAt: start, termEndsAt: end } : {},
         sourceEventId: input.eventId,
@@ -4353,8 +4514,8 @@ async function reconcileMembershipRenewal(db, input, now) {
       })
     ];
     const guards = [
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
-      { ns: "networkEntitlement", id: `${id10}:primary`, exists: true, equals: { revision: entitlement.revision } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
+      { ns: "networkEntitlement", id: `${id11}:primary`, exists: true, equals: { revision: entitlement.revision } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { revision: state.revision, mode: "authoritative" } },
       { ns: "networkCommercialEvents", id: String(eventRow.id), exists: true, equals: { digest: eventRow.digest } },
       evidenceGuard
@@ -4379,15 +4540,15 @@ async function reconcileMembershipRenewal(db, input, now) {
       );
     }
     try {
-      await db.transact(ops, { mutationId: `membership-renewal:${id10}:${input.eventId}`, guards });
+      await db.transact(ops, { mutationId: `membership-renewal:${id11}:${input.eventId}`, guards });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
       continue;
     }
-    const saved = await membershipLoad(db, "networkMembership", id10);
+    const saved = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(saved, input);
     return {
-      membershipId: id10,
+      membershipId: id11,
       status: String(saved.status),
       termEndsAt: Number(saved.termEndsAt),
       graceEndsAt: Number(saved.graceEndsAt ?? 0),
@@ -4413,12 +4574,12 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   }).some(([key3, value]) => fact.identity[key3] !== value)) membershipFail("membership_billing_evidence_pending");
   const sk = await getVaultSecret(db, stripeSecretName);
   if (!sk) membershipFail("membership_billing_provider_unavailable");
-  const id10 = await networkMembershipId(input);
+  const id11 = await networkMembershipId(input);
   for (let attempt = 0; attempt < 8; attempt++) {
-    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id10);
+    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(member, input);
     const receipt = (value = member) => ({
-      membershipId: id10,
+      membershipId: id11,
       status: String(value.status),
       termEndsAt: Number(value.termEndsAt),
       graceEndsAt: Number(value.graceEndsAt ?? 0),
@@ -4439,7 +4600,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
       });
       await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
       await refundNetworkMembership(db, input, sk, now);
-      const saved2 = await membershipLoad(db, "networkMembership", id10);
+      const saved2 = await membershipLoad(db, "networkMembership", id11);
       requireMembershipScope(saved2, input);
       return receipt(saved2);
     }
@@ -4454,18 +4615,18 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
     const status2 = autoRenew ? member.status === "cancel_at_term_end" ? "active" : String(member.status) : now >= Number(member.termEndsAt) ? "lapsed" : member.journeyApprovedAt ? "cancel_at_term_end" : "paid_pending_approval";
     const graceEndsAt = autoRenew ? Number(member.graceEndsAt ?? 0) : 0;
     if (member.autoRenew === autoRenew && member.status === status2 && Number(member.graceEndsAt ?? 0) === graceEndsAt) return receipt();
-    const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+    const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
     requireMembershipScope(entitlement, input);
     try {
       await db.transact([
-        membershipUpdate("networkMembership", id10, { status: status2, autoRenew, graceEndsAt, revision: Number(member.revision) + 1, updatedAt: now }),
+        membershipUpdate("networkMembership", id11, { status: status2, autoRenew, graceEndsAt, revision: Number(member.revision) + 1, updatedAt: now }),
         membershipUpdate("networkEntitlement", String(entitlement.id), {
           status: status2 === "lapsed" ? "closed" : entitlement.status,
           revision: Number(entitlement.revision) + 1,
           updatedAt: now
         })
       ], { guards: [
-        { ns: "networkMembership", id: id10, exists: true, equals: { revision: member.revision } },
+        { ns: "networkMembership", id: id11, exists: true, equals: { revision: member.revision } },
         { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } },
         { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
         { ns: "networkCommercialEvents", id: String(row2.id), exists: true, equals: { digest: fact.digest } },
@@ -4475,7 +4636,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
       if (error.code !== "transact_guard_failed") throw error;
       continue;
     }
-    const saved = await membershipLoad(db, "networkMembership", id10);
+    const saved = await membershipLoad(db, "networkMembership", id11);
     requireMembershipScope(saved, input);
     return receipt(saved);
   }
@@ -4536,19 +4697,19 @@ async function stopPreviousSubscription(member, target, secret) {
 async function prepareMembershipRestart(db, input, now, stripeSecret) {
   membershipClock(now);
   if (!/^sub_[A-Za-z0-9_]+$/.test(input.previousSubscriptionId)) membershipFail("membership_restart_conflict");
-  const id10 = await networkMembershipId(input), bindingId = await membershipCheckoutBindingId(input);
-  const restartId = `restart_${await stripePayloadDigest(JSON.stringify([id10, input.previousSubscriptionId]))}`;
+  const id11 = await networkMembershipId(input), bindingId = await membershipCheckoutBindingId(input);
+  const restartId = `restart_${await stripePayloadDigest(JSON.stringify([id11, input.previousSubscriptionId]))}`;
   const state = await loadMembershipAuthorityState(db, input);
-  const previous = await membershipLoad(db, "networkMembership", id10);
+  const previous = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(previous, input);
   const receipt = {
     applicationId: input.applicationId,
-    membershipId: id10,
+    membershipId: id11,
     restartId,
     memberNumber: Number(previous.memberNumber),
     status: "ready"
   };
-  const existing = await membershipLoad(db, "membershipRestart", id10);
+  const existing = await membershipLoad(db, "membershipRestart", id11);
   if (existing?.restartId === restartId && existing.status === "ready") {
     requireMembershipScope(existing, input);
     return receipt;
@@ -4564,33 +4725,33 @@ async function prepareMembershipRestart(db, input, now, stripeSecret) {
       membershipUpdate("membershipPurchaseHistory", restartId, {
         id: restartId,
         ...membershipScope(input),
-        membershipId: id10,
+        membershipId: id11,
         providerSubscriptionId: input.previousSubscriptionId,
         memberSnapshot: previous,
         bindingSnapshot: binding2,
         archivedAt: now
       }),
-      membershipUpdate("networkMembership", id10, { status: "restarting", restartId, revision: Number(previous.revision) + 1, updatedAt: now })
+      membershipUpdate("networkMembership", id11, { status: "restarting", restartId, revision: Number(previous.revision) + 1, updatedAt: now })
     ], { mutationId: `membership-restart-reserve:${restartId}`, guards: [
       ...seats.guards,
-      { ns: "networkMembership", id: id10, exists: true, equals: { revision: previous.revision, status: previous.status } },
+      { ns: "networkMembership", id: id11, exists: true, equals: { revision: previous.revision, status: previous.status } },
       { ns: "membershipPurchaseHistory", id: restartId, exists: false },
       { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding2.offerDigest } },
       { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
     ] });
   } else if (previous.restartId !== restartId) membershipFail("membership_restart_conflict");
-  const reserved = await membershipLoad(db, "networkMembership", id10);
+  const reserved = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(reserved, input);
   if (reserved.status !== "restarting" || reserved.restartId !== restartId) membershipFail("membership_restart_conflict");
   await stopPreviousSubscription(reserved, input, stripeSecret);
   const binding = await membershipLoad(db, "membershipOfferCheckout", bindingId);
   requireMembershipScope(binding, input);
   await db.transact([
-    membershipUpdate("membershipRestart", id10, { id: id10, ...membershipScope(input), ...receipt, previousSubscriptionId: input.previousSubscriptionId, createdAt: now }),
+    membershipUpdate("membershipRestart", id11, { id: id11, ...membershipScope(input), ...receipt, previousSubscriptionId: input.previousSubscriptionId, createdAt: now }),
     { t: "delete", ns: "membershipOfferCheckout", id: bindingId }
   ], { mutationId: `membership-restart-ready:${restartId}`, guards: [
-    { ns: "membershipRestart", id: id10, exists: Boolean(existing), ...existing ? { equals: { restartId: existing.restartId, status: existing.status } } : {} },
-    { ns: "networkMembership", id: id10, exists: true, equals: { revision: reserved.revision, status: "restarting", restartId } },
+    { ns: "membershipRestart", id: id11, exists: Boolean(existing), ...existing ? { equals: { restartId: existing.restartId, status: existing.status } } : {} },
+    { ns: "networkMembership", id: id11, exists: true, equals: { revision: reserved.revision, status: "restarting", restartId } },
     { ns: "membershipOfferCheckout", id: bindingId, exists: true, equals: { offerDigest: binding.offerDigest } }
   ] });
   return receipt;
@@ -4600,15 +4761,15 @@ async function prepareMembershipRestart(db, input, now, stripeSecret) {
 async function readMembershipAccess(db, input, now) {
   membershipClock(now);
   await loadMembershipAuthorityState(db, input);
-  const id10 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id10);
-  if (!member) return { membershipId: id10, allowed: false, status: "unpaid", accessEndsAt: 0, revision: 0 };
+  const id11 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id11);
+  if (!member) return { membershipId: id11, allowed: false, status: "unpaid", accessEndsAt: 0, revision: 0 };
   requireMembershipScope(member, input);
-  const entitlement = await membershipLoad(db, "networkEntitlement", `${id10}:primary`);
+  const entitlement = await membershipLoad(db, "networkEntitlement", `${id11}:primary`);
   requireMembershipScope(entitlement, input);
   const endsAt = member.status === "payment_grace" ? Number(member.graceEndsAt) : Number(member.termEndsAt);
-  const allowed2 = ["active", "cancel_at_term_end", "payment_grace"].includes(String(member.status)) && member.journeyApprovedAt !== void 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && member.refundedCents === 0 && entitlement.status === "active" && entitlement.membershipId === id10 && entitlement.kind === "primary" && Number.isSafeInteger(endsAt) && endsAt > now && Number(member.termStartedAt) <= now;
+  const allowed2 = ["active", "cancel_at_term_end", "payment_grace"].includes(String(member.status)) && member.journeyApprovedAt !== void 0 && Number.isSafeInteger(member.memberNumber) && Number(member.memberNumber) > 0 && member.refundedCents === 0 && entitlement.status === "active" && entitlement.membershipId === id11 && entitlement.kind === "primary" && Number.isSafeInteger(endsAt) && endsAt > now && Number(member.termStartedAt) <= now;
   return {
-    membershipId: id10,
+    membershipId: id11,
     allowed: allowed2,
     status: String(member.status),
     accessEndsAt: Number.isSafeInteger(endsAt) ? endsAt : 0,
@@ -4663,7 +4824,7 @@ async function subscriptionForSeat(sk, seat) {
     currency: seat.currency,
     interval: seat.interval,
     environment: seat.environment
-  }, Boolean(seat.providerPaymentIntentId));
+  }, Boolean(seat.providerPaymentIntentId || seat.combinedInvoice));
   if (!productId) reject3();
   const sub = await read(sk, `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}?expand[]=discounts`);
   const items = sub.items?.data;
@@ -4707,10 +4868,14 @@ async function createNamedSeatStripePayment(sk, seat, now) {
   return { paymentIntentId: pi.id, clientSecret: pi.client_secret, status: pi.status };
 }
 async function attachNamedSeatStripeRenewal(sk, seat) {
-  if (!seat.providerPaymentIntentId || !["renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status)) reject3();
+  if (!seat.providerPaymentIntentId && !seat.combinedInvoice || !["renewal_pending", "pending_acceptance", "pending_approval", "active"].includes(seat.status)) reject3();
   const sub = await subscriptionForSeat(sk, seat);
   const existing = sub.items.data.find((item2) => item2.metadata?.seatId === seat.id);
-  if (existing) return String(existing.id);
+  if (existing) {
+    if (!/^si_[A-Za-z0-9_]+$/.test(existing.id)) reject3();
+    return String(existing.id);
+  }
+  if (seat.combinedInvoice) reject3();
   const result = await stripeRequest7({ secretKey: sk }, "POST", "/v1/subscription_items", {
     subscription: seat.providerSubscriptionId,
     price: seat.priceId,
@@ -4928,7 +5093,7 @@ async function recordRecipient(db, input, now, approve) {
     const state = await loadMembershipAuthorityState(db, input);
     const seat = await membershipLoad(db, "networkSeat", input.seatId);
     requireMembershipScope(seat, input);
-    if (!seat.purchaserUserId || seat.purchaserUserId === input.recipientUserId) membershipFail("named_seat_recipient_must_differ_from_purchaser");
+    if (!seat.purchaserUserId && !seat.purchaserEmailNormalized || seat.purchaserUserId === input.recipientUserId || seat.purchaserEmailNormalized === normalizeChapterEmail(input.verifiedRecipientEmail)) membershipFail("named_seat_recipient_must_differ_from_purchaser");
     const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
     requireMembershipScope(member, input);
     const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
@@ -4986,43 +5151,121 @@ async function recordRecipient(db, input, now, approve) {
 }
 
 // src/membership-seat-refund-stripe.ts
+import { stripeRequest as stripeRequest9 } from "@odla-ai/stripe";
+
+// src/membership-checkout-seat-refund.ts
 import { stripeRequest as stripeRequest8 } from "@odla-ai/stripe";
 var fail4 = (code = "named_seat_refund_mismatch") => {
   throw Object.assign(new Error(code), { code });
 };
+var id8 = (value) => typeof value === "string" ? value : value?.id ?? "";
+async function refundCheckoutNamedSeat(secretKey, seat) {
+  const invoiceRef = seat.combinedInvoice;
+  if (!invoiceRef || !/^in_[A-Za-z0-9_]+$/.test(invoiceRef.invoiceId) || !Number.isSafeInteger(invoiceRef.totalCents) || invoiceRef.totalCents <= seat.amountCents || seat.amountCents <= 0 || seat.status !== "refund_pending") fail4();
+  const call = async (method, path, params, key3) => {
+    const result = await stripeRequest8({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
+    return result.body;
+  };
+  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId };
+  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
+  if (sub.id !== seat.providerSubscriptionId || id8(sub.customer) !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(sub.items?.data) || sub.items.has_more !== false) fail4();
+  const invoice = await call("GET", `/v1/invoices/${encodeURIComponent(invoiceRef.invoiceId)}`);
+  if (invoice.id !== invoiceRef.invoiceId || id8(invoice.subscription ?? invoice.parent?.subscription_details?.subscription) !== sub.id || id8(invoice.customer) !== seat.providerCustomerId || invoice.status !== "paid" || invoice.billing_reason !== "subscription_create" || invoice.total !== invoiceRef.totalCents || invoice.amount_paid !== invoiceRef.totalCents || invoice.currency !== seat.currency || invoice.livemode !== (seat.environment === "prod")) fail4();
+  let chargeId = id8(invoice.charge), paymentId = id8(invoice.payment_intent);
+  if (!chargeId && !paymentId) {
+    const payments = await call("GET", "/v1/invoice_payments", { invoice: invoice.id, status: "paid", limit: 100 });
+    if (!Array.isArray(payments.data) || payments.data.length !== 1 || payments.has_more !== false) fail4();
+    const payment = payments.data[0];
+    if (id8(payment.invoice) !== invoice.id || payment.status !== "paid" || payment.payment?.type !== "payment_intent") fail4();
+    paymentId = id8(payment.payment.payment_intent);
+  }
+  if (!chargeId) {
+    if (!/^pi_[A-Za-z0-9_]+$/.test(paymentId)) fail4();
+    const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(paymentId)}`);
+    if (payment.id !== paymentId || id8(payment.customer) !== seat.providerCustomerId || payment.status !== "succeeded" || payment.amount_received !== invoiceRef.totalCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod")) fail4();
+    chargeId = id8(payment.latest_charge);
+  }
+  if (!/^ch_[A-Za-z0-9_]+$/.test(chargeId)) fail4();
+  const charge = await call("GET", `/v1/charges/${encodeURIComponent(chargeId)}`);
+  if (charge.id !== chargeId || id8(charge.customer) !== seat.providerCustomerId || charge.status !== "succeeded" || charge.livemode !== (seat.environment === "prod") || charge.amount !== invoiceRef.totalCents || charge.currency !== seat.currency || charge.invoice != null && id8(charge.invoice) !== invoice.id || paymentId && id8(charge.payment_intent) !== paymentId || !Number.isSafeInteger(charge.amount_refunded) || charge.amount_refunded < 0 || charge.amount_refunded > charge.amount) fail4();
+  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
+  if (items.length > 1) fail4();
+  if (items.length && sub.status !== "canceled") {
+    const item = items[0];
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.quantity !== 1 || item.price?.id !== seat.priceId) fail4();
+    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
+    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
+  }
+  if (charge.amount_refunded === charge.amount && charge.refunded === true) return { refundedCents: seat.amountCents, refundIds: [] };
+  const list = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  let refundedCents = 0;
+  const refundIds = [];
+  for (const refund of list.data) {
+    if (id8(refund.charge) !== chargeId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !/^re_[A-Za-z0-9_]+$/.test(refund.id) || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
+    if (["pending", "requires_action"].includes(refund.status)) fail4("named_seat_refund_pending");
+    if (refund.status === "succeeded") {
+      if (refund.metadata?.seatId !== seat.id || refund.metadata?.membershipId !== seat.primaryMembershipId) fail4("named_seat_refund_allocation_ambiguous");
+      refundedCents += refund.amount;
+      refundIds.push(refund.id);
+    }
+  }
+  if (refundedCents !== charge.amount_refunded || refundedCents > seat.amountCents) fail4();
+  if (refundedCents < seat.amountCents) {
+    const remaining = seat.amountCents - refundedCents;
+    const refund = await call("POST", "/v1/refunds", {
+      charge: chargeId,
+      amount: remaining,
+      reason: "requested_by_customer",
+      metadata: { ...metadata, membershipId: seat.primaryMembershipId, seatId: seat.id }
+    }, `combined-seat-refund:${seat.id}:${remaining}`);
+    if (id8(refund.charge) !== chargeId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
+    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
+    refundedCents += remaining;
+    refundIds.push(refund.id);
+  }
+  return { refundedCents, refundIds };
+}
+
+// src/membership-seat-refund-stripe.ts
+var fail5 = (code = "named_seat_refund_mismatch") => {
+  throw Object.assign(new Error(code), { code });
+};
 async function refundNamedSeatStripePayment(secretKey, seat) {
-  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail4();
+  if (seat.combinedInvoice) return refundCheckoutNamedSeat(secretKey, seat);
+  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail5();
   const call = async (method, path, params, idempotencyKey) => {
-    const result = await stripeRequest8({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
-    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
+    const result = await stripeRequest9({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
+    if (!result.ok || !result.body) return fail5("named_seat_refund_provider_unavailable");
     return result.body;
   };
   const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`);
-  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail4();
+  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail5();
   const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
-  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail4();
+  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail5();
   const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
-  if (items.length > 1) fail4();
+  if (items.length > 1) fail5();
   if (items.length && sub.status !== "canceled") {
     const item = items[0];
-    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail4();
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail5();
     const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
-    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
+    if (removed.id !== item.id || removed.deleted !== true) fail5("named_seat_renewal_removal_unconfirmed");
   }
   const list = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail5("named_seat_refund_history_incomplete");
   let refundedCents = 0, pendingCents = 0;
   const refundIds = [];
   for (const refund of list.data) {
-    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
+    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail5();
     if (refund.status === "succeeded") {
       refundedCents += refund.amount;
       refundIds.push(refund.id);
     } else if (refund.status === "pending" || refund.status === "requires_action") pendingCents += refund.amount;
   }
-  if (refundedCents + pendingCents > seat.amountCents) fail4();
-  if (pendingCents) fail4("named_seat_refund_pending");
+  if (refundedCents + pendingCents > seat.amountCents) fail5();
+  if (pendingCents) fail5("named_seat_refund_pending");
   if (refundedCents < seat.amountCents) {
     const remaining = seat.amountCents - refundedCents;
     const refund = await call("POST", "/v1/refunds", {
@@ -5031,8 +5274,8 @@ async function refundNamedSeatStripePayment(secretKey, seat) {
       reason: "requested_by_customer",
       metadata
     }, `named-seat-refund:${seat.id}:${remaining}`);
-    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
-    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
+    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail5();
+    if (refund.status !== "succeeded") fail5("named_seat_refund_pending");
     refundedCents += remaining;
     refundIds.push(refund.id);
   }
@@ -5048,7 +5291,7 @@ async function requestNamedSeatRefund(db, input, now) {
   const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
   requireMembershipScope(member, input);
   if (seat.status === "refunded" || seat.status === "refund_pending") return;
-  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
+  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !seat.combinedInvoice && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
   const entitlement = seat.entitlementId ? await membershipLoad(db, "networkEntitlement", String(seat.entitlementId)) : void 0;
   await db.transact([
     membershipUpdate("networkSeat", input.seatId, { status: "refund_pending", refundReason: input.reason, revision: Number(seat.revision) + 1, updatedAt: now }),
@@ -5153,14 +5396,14 @@ var at = (value) => Number.isSafeInteger(value) ? Number(value) : void 0;
 async function readNamedSeatOffer(db, input, now) {
   membershipClock(now);
   await loadMembershipAuthorityState(db, input);
-  const id10 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id10);
+  const id11 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id11);
   requireMembershipScope(member, input);
   const offering = membershipOfferingVersion(member.offeringSnapshot);
   const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
   if (seat) requireMembershipScope(seat, input);
   const purchaseEndsAt = seatPurchaseDeadline(offering, member);
   const offer = {
-    membershipId: id10,
+    membershipId: id11,
     amountCents: offering.seatPriceCents,
     currency: offering.currency,
     interval: offering.interval,
@@ -5438,9 +5681,14 @@ function createMembershipAuthorityHandler(options) {
       try {
         input = JSON.parse(verified.body);
         const fields = action === "seat-invitation" ? MEMBERSHIP_SEAT_ACTION_FIELDS[action] : action === "offer-preview" ? ["skuId"] : ["applicationId", "skuId", ...action === "offers" ? ["requestId"] : action === "checkouts" ? ["offerId", "offerDigest", "quoteDigest", "priceId"] : action === "payments" ? ["eventId", "providerSubscriptionId", "providerCustomerId"] : action === "renewals" ? ["eventId"] : action === "restarts" ? ["previousSubscriptionId"] : MEMBERSHIP_SEAT_ACTION_FIELDS[action] ?? []];
-        if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key3) => !fields.includes(key3)) || !fields.every((key3) => typeof input[key3] === "string" && (["recipientName", "recipientEmail", "purchaserEmail", "verifiedRecipientEmail"].includes(key3) ? input[key3].length > 0 && input[key3].length <= 254 && !/[\u0000-\u001f\u007f]/.test(input[key3]) : SAFE.test(input[key3])))) {
+        if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).some((key3) => !fields.includes(key3) && !(action === "checkouts" && key3 === "namedSeat")) || !fields.every((key3) => typeof input[key3] === "string" && (["recipientName", "recipientEmail", "purchaserEmail", "verifiedRecipientEmail"].includes(key3) ? input[key3].length > 0 && input[key3].length <= 254 && !/[\u0000-\u001f\u007f]/.test(input[key3]) : SAFE.test(input[key3])))) {
           throw new TypeError("invalid request");
         }
+        if (action === "checkouts" && input.namedSeat !== void 0) {
+          const seat = input.namedSeat;
+          if (!seat || Object.keys(seat).some((key3) => !["recipientName", "recipientEmail", "purchaserEmail"].includes(key3)) || typeof seat.purchaserEmail !== "string" || seat.purchaserEmail.length > 254) throw new TypeError("invalid seat");
+          checkoutNamedSeatSelection(seat, seat.purchaserEmail);
+        }
       } catch {
         return respond({ error: "invalid_offer_request" }, 400);
       }
@@ -5513,8 +5761,9 @@ function createMembershipAuthorityHandler(options) {
           offerId: String(input.offerId),
           offerDigest: String(input.offerDigest),
           quoteDigest: String(input.quoteDigest),
-          priceId: String(input.priceId)
-        }, options.now?.() ?? Date.now());
+          priceId: String(input.priceId),
+          ...input.namedSeat ? { namedSeat: input.namedSeat } : {}
+        }, options.now?.() ?? Date.now(), peer.seatPriceId);
         return respond({ ok: true, binding });
       }
       const offerId = await membershipOfferIdForRequest({ ...peer, applicationId: String(input.applicationId), requestId: String(input.requestId) });
@@ -5617,7 +5866,8 @@ async function requestMembershipCheckoutBinding(options) {
     offerId: options.offerId,
     offerDigest: options.offerDigest,
     quoteDigest: options.quoteDigest,
-    priceId: options.priceId
+    priceId: options.priceId,
+    ...options.namedSeat ? { namedSeat: options.namedSeat } : {}
   });
   return verifyMembershipCheckoutBinding(result.binding, options);
 }
@@ -5827,7 +6077,7 @@ async function requestMembershipCancellation(options) {
 }
 
 // src/membership-seat-cancel.ts
-import { initStripe, stripeRequest as stripeRequest9 } from "@odla-ai/stripe";
+import { initStripe, stripeRequest as stripeRequest10 } from "@odla-ai/stripe";
 async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   membershipClock(now);
   const state = await loadMembershipAuthorityState(db, target);
@@ -5855,7 +6105,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   }
   const metadata = { ...stripePartitionMetadata(target), applicationId: target.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const request = async (method, path, params) => {
-    const result = await stripeRequest9(
+    const result = await stripeRequest10(
       { secretKey },
       method,
       path,
@@ -5881,9 +6131,9 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   if (payment.status === "succeeded" || payment.amount_received > 0) throw new Error("paid seat requires payment evidence and full refund");
   if (payment.status !== "canceled") {
     if (!["requires_payment_method", "requires_confirmation", "requires_action", "processing"].includes(payment.status)) throw new Error("seat payment outcome unresolved");
-    const id10 = payment.id;
-    payment = await request("POST", `/v1/payment_intents/${encodeURIComponent(id10)}/cancel`, { cancellation_reason: "abandoned" });
-    if (payment.id !== id10) throw new Error("seat cancellation receipt mismatch");
+    const id11 = payment.id;
+    payment = await request("POST", `/v1/payment_intents/${encodeURIComponent(id11)}/cancel`, { cancellation_reason: "abandoned" });
+    if (payment.id !== id11) throw new Error("seat cancellation receipt mismatch");
   }
   if (!valid(payment) || payment.status !== "canceled" || payment.amount_received !== 0) throw new Error("seat cancellation unconfirmed");
   await db.transact([membershipUpdate("networkSeat", target.seatId, { status: "canceled", revision: Number(seat.revision) + 1, updatedAt: now })], {
@@ -5983,11 +6233,11 @@ async function drainMembershipEffects(db, options, now) {
 
 // src/schema-membership-offers.ts
 var attr8 = (type, optional = false, unique = false, indexed = false) => ({ type, optional, unique, indexed });
-var id8 = () => attr8("string", false, true, true);
+var id9 = () => attr8("string", false, true, true);
 var key = () => attr8("string", false, false, true);
 var membershipOfferEntities = {
   membershipAuthorityState: { attrs: {
-    id: id8(),
+    id: id9(),
     chapterId: key(),
     environment: key(),
     mode: key(),
@@ -5997,7 +6247,7 @@ var membershipOfferEntities = {
     updatedAt: attr8("number")
   } },
   membershipCheckoutOffer: { attrs: {
-    id: id8(),
+    id: id9(),
     applicationId: key(),
     appId: key(),
     chapterId: key(),
@@ -6012,7 +6262,7 @@ var membershipOfferEntities = {
     authorityRevision: attr8("number")
   } },
   membershipOfferCheckout: { attrs: {
-    id: id8(),
+    id: id9(),
     appId: key(),
     chapterId: key(),
     environment: key(),
@@ -6023,20 +6273,21 @@ var membershipOfferEntities = {
     offerDigest: attr8("string"),
     quoteDigest: attr8("string"),
     priceId: attr8("string"),
-    boundAt: attr8("number")
+    boundAt: attr8("number"),
+    namedSeat: attr8("json", true)
   } }
 };
 var membershipOfferRules = Object.fromEntries(Object.keys(membershipOfferEntities).map((ns) => [ns, { view: "false", create: "false", update: "false", delete: "false" }]));
 
 // src/schema-membership-authority.ts
 var attr9 = (type, optional = false, unique = false, indexed = false) => ({ type, optional, unique, indexed });
-var id9 = () => attr9("string", false, true, true);
+var id10 = () => attr9("string", false, true, true);
 var key2 = (optional = false) => attr9("string", optional, false, true);
 var scope = () => ({ appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), applicationId: key2(), skuId: key2() });
 var times = () => ({ revision: attr9("number"), createdAt: attr9("number"), updatedAt: attr9("number") });
 var membershipAuthorityEntities = {
   networkMembership: { attrs: {
-    id: id9(),
+    id: id10(),
     membershipId: key2(),
     ...scope(),
     personId: key2(true),
@@ -6076,7 +6327,7 @@ var membershipAuthorityEntities = {
     restartId: key2(true)
   } },
   membershipRestart: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     restartId: key2(),
@@ -6086,7 +6337,7 @@ var membershipAuthorityEntities = {
     createdAt: attr9("number")
   } },
   membershipPurchaseHistory: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     providerSubscriptionId: key2(),
@@ -6095,7 +6346,7 @@ var membershipAuthorityEntities = {
     archivedAt: attr9("number")
   } },
   networkEntitlement: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     membershipId: key2(),
     seatId: key2(true),
@@ -6112,10 +6363,12 @@ var membershipAuthorityEntities = {
     journeyApprovedAt: attr9("number", true)
   } },
   networkSeat: { attrs: {
-    id: id9(),
+    id: id10(),
     ...scope(),
     primaryMembershipId: key2(),
-    purchaserUserId: key2(),
+    purchaserUserId: key2(true),
+    purchaserEmailNormalized: key2(true),
+    combinedInvoice: attr9("json", true),
     recipientName: attr9("string"),
     recipientEmailNormalized: key2(),
     recipientClaimId: key2(),
@@ -6147,9 +6400,9 @@ var membershipAuthorityEntities = {
     refundedCents: attr9("number", true),
     providerRefundIds: attr9("json", true)
   } },
-  networkSeatRecipient: { attrs: { id: id9(), appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), seatId: key2(), recipientEmailNormalized: key2(), createdAt: attr9("number") } },
+  networkSeatRecipient: { attrs: { id: id10(), appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), seatId: key2(), recipientEmailNormalized: key2(), createdAt: attr9("number") } },
   membershipEffect: { attrs: {
-    id: id9(),
+    id: id10(),
     chapterId: key2(),
     environment: key2(),
     runtime: key2(),
@@ -6274,14 +6527,14 @@ function validateMemberContentDocument(input, options = {}) {
       continue;
     }
     unknownKeys(raw2, PAGE_KEYS, path, errors);
-    const id10 = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
+    const id11 = textValue(raw2.id, `${path}.id`, errors, 80, true) ?? "";
     const slug = textValue(raw2.slug, `${path}.slug`, errors, 120, true) ?? "";
     const title = textValue(raw2.title, `${path}.title`, errors, MAX_TEXT, true) ?? "";
-    if (id10 && !ID.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (id11 && !ID.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (slug && !SLUG8.test(slug)) errors.push(`${path}.slug must be a lowercase URL slug`);
-    if (ids2.has(id10) || knownParentIds.has(id10)) errors.push(`${path}.id duplicates page "${id10}"`);
+    if (ids2.has(id11) || knownParentIds.has(id11)) errors.push(`${path}.id duplicates page "${id11}"`);
     if (slugs.has(slug) || (options.parentPages ?? []).some((page) => page.slug === slug)) errors.push(`${path}.slug duplicates "${slug}"`);
-    ids2.add(id10);
+    ids2.add(id11);
     slugs.add(slug);
     const navRaw = record(raw2.navigation);
     let navigation = { section: "General", order: index2 };
@@ -6337,7 +6590,7 @@ function validateMemberContentDocument(input, options = {}) {
         else if (owner === "chapter") upsell = { owner, ...offer ? { offer } : {} };
       }
     }
-    pages.push({ id: id10, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
+    pages.push({ id: id11, slug, title, ...summary ? { summary } : {}, navigation, audience, ...teaserMarkdown ? { teaserMarkdown } : {}, bodyMarkdown, ...upsell ? { upsell } : {} });
   }
   const allIds = /* @__PURE__ */ new Set([...knownParentIds, ...ids2]);
   for (const [index2, page] of pages.entries()) {
@@ -6543,8 +6796,8 @@ function resourceValue(value, path, errors) {
     return null;
   }
   unknownKeys2(raw2, RESOURCE_KEYS, path, errors);
-  const id10 = text3(raw2.id, `${path}.id`, errors, 80) ?? "";
-  if (id10 && !ID2.test(id10)) errors.push(`${path}.id must be lowercase kebab-case`);
+  const id11 = text3(raw2.id, `${path}.id`, errors, 80) ?? "";
+  if (id11 && !ID2.test(id11)) errors.push(`${path}.id must be lowercase kebab-case`);
   const kind = text3(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
   const title = text3(raw2.title, `${path}.title`, errors, 240) ?? "";
@@ -6601,7 +6854,7 @@ function resourceValue(value, path, errors) {
     updatedAt: integer3(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
-  return { id: id10, kind, title, ...summary ? { summary } : {}, tags, scope: scope2, status: status2, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
+  return { id: id11, kind, title, ...summary ? { summary } : {}, tags, scope: scope2, status: status2, revision, ...bodyMarkdown ? { bodyMarkdown } : {}, ...url ? { url } : {}, ...brandAsset ? { brandAsset } : {}, provenance };
 }
 function validateBuilderLibraryDocument(value, options = {}) {
   const errors = [];
@@ -6632,7 +6885,7 @@ function validateBuilderLibraryDocument(value, options = {}) {
   const inputs = Array.isArray(raw2.resources) ? raw2.resources : [];
   if (inputs.length > MAX_RESOURCES) errors.push(`document.resources may contain at most ${MAX_RESOURCES} items`);
   const resources = inputs.map((item, index2) => resourceValue(item, `document.resources[${index2}]`, errors)).filter(Boolean);
-  const ids2 = resources.map(({ id: id10 }) => id10);
+  const ids2 = resources.map(({ id: id11 }) => id11);
   if (new Set(ids2).size !== ids2.length) errors.push("document.resources ids must be unique");
   for (const resource of resources) {
     if (sourceType === "chapter" && (resource.scope.kind !== "chapter" || resource.scope.chapterId !== sourceAppId)) {
@@ -6962,11 +7215,11 @@ async function sendTemplated(deps, input) {
   const previous = prior[0];
   if (previous && (previous.groupId !== input.group.id || previous.template !== input.template || previous.to !== decision.to || previous.transport !== decision.transport || previous.applicationId !== input.applicationId)) return { sent: false, reason: "delivery-identity-conflict" };
   const hash2 = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input.dedupeKey));
-  const id10 = previous ? String(previous.id) : `email_${Array.from(new Uint8Array(hash2), (b) => b.toString(16).padStart(2, "0")).join("")}`;
+  const id11 = previous ? String(previous.id) : `email_${Array.from(new Uint8Array(hash2), (b) => b.toString(16).padStart(2, "0")).join("")}`;
   const attempt = Number(previous?.deliveryAttempt ?? 0) + 1;
   if (!Number.isSafeInteger(attempt) || attempt < 1) return { sent: false, reason: "delivery-state-invalid" };
   const row2 = {
-    id: id10,
+    id: id11,
     groupId: input.group.id,
     to: decision.to,
     template: input.template,
@@ -6984,15 +7237,15 @@ async function sendTemplated(deps, input) {
   if (isRetiredEmailCopy(String(row2.subject), String(row2.body))) return { sent: false, reason: "template-retired" };
   if (validateEmailCopy3({ subject: row2.subject, text: row2.body }, { allowedVariables: [] }).length) return { sent: false, reason: "template-invalid" };
   try {
-    const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: row2 }], {
-      mutationId: `email-claim:${id10}:${attempt}`,
+    const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: row2 }], {
+      mutationId: `email-claim:${id11}:${attempt}`,
       guards: [previous ? {
         ns: "emailLog",
-        id: id10,
+        id: id11,
         exists: true,
         equals: { deliveryState: "retry_ready", ...previous.deliveryAttempt !== void 0 ? { deliveryAttempt: previous.deliveryAttempt } : {} },
         ...previous.deliveryAttempt === void 0 ? { absent: ["deliveryAttempt"] } : {}
-      } : { ns: "emailLog", id: id10, exists: false }]
+      } : { ns: "emailLog", id: id11, exists: false }]
     });
     if (claim.duplicate) return { sent: false, reason: "delivery-uncertain" };
   } catch (error) {
@@ -7012,16 +7265,16 @@ async function sendTemplated(deps, input) {
     if (!response || typeof response.messageId !== "string" || !response.messageId) throw new Error("missing delivery receipt");
     messageId = response.messageId;
   } catch {
-    await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: { deliveryState: "uncertain", error: "delivery-uncertain" } }], {
-      guards: [{ ns: "emailLog", id: id10, exists: true, equals: { deliveryState: "sending", deliveryAttempt: attempt } }]
+    await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: { deliveryState: "uncertain", error: "delivery-uncertain" } }], {
+      guards: [{ ns: "emailLog", id: id11, exists: true, equals: { deliveryState: "sending", deliveryAttempt: attempt } }]
     });
     return { sent: false, reason: "delivery-uncertain" };
   }
-  await deps.db.transact([{ t: "update", ns: "emailLog", id: id10, attrs: { deliveryState: "sent", error: "", messageId, sentAt: deps.now() } }], {
-    mutationId: `email-confirmed:${id10}:${attempt}`,
+  await deps.db.transact([{ t: "update", ns: "emailLog", id: id11, attrs: { deliveryState: "sent", error: "", messageId, sentAt: deps.now() } }], {
+    mutationId: `email-confirmed:${id11}:${attempt}`,
     guards: [{
       ns: "emailLog",
-      id: id10,
+      id: id11,
       exists: true,
       equals: { deliveryState: "sending", deliveryAttempt: attempt }
     }]
@@ -7279,14 +7532,14 @@ function validateAdmissionGrantDocument(input) {
   const seenEmails = /* @__PURE__ */ new Set();
   for (const [index2, raw2] of rawGrants.slice(0, MAX_GRANTS).entries()) {
     const grant = raw2 && typeof raw2 === "object" ? raw2 : {};
-    const id10 = typeof grant.id === "string" ? grant.id : "";
+    const id11 = typeof grant.id === "string" ? grant.id : "";
     const email = typeof grant.email === "string" ? grant.email.trim() : "";
     const normalized = normalizeAdmissionEmail(email);
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID3.test(id10)) errors.push(`document.grants[${index2}].id must be an identifier`);
-    if (seenIds.has(id10)) errors.push(`document.grants repeats id "${id10}"`);
+    if (!ID3.test(id11)) errors.push(`document.grants[${index2}].id must be an identifier`);
+    if (seenIds.has(id11)) errors.push(`document.grants repeats id "${id11}"`);
     if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
     if (decision !== "waive_interview" && decision !== "require_interview") {
@@ -7296,10 +7549,10 @@ function validateAdmissionGrantDocument(input) {
     if (expiresAt !== void 0 && (!Number.isFinite(expiresAt) || expiresAt <= 0)) {
       errors.push(`document.grants[${index2}].expiresAt must be epoch milliseconds`);
     }
-    seenIds.add(id10);
+    seenIds.add(id11);
     seenEmails.add(normalized);
     grants.push({
-      id: id10,
+      id: id11,
       email,
       decision,
       ...note ? { note } : {},
@@ -7371,8 +7624,8 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
   const incomingIds = new Set(document.grants.map((grant) => `admission:parent:${document.source.appId}:${grant.id}`));
   const ops = [];
   for (const row2 of current) {
-    const id10 = String(row2.id ?? "");
-    if (id10 && !incomingIds.has(id10)) ops.push({ t: "update", ns: "admissionGrants", id: id10, attrs: {
+    const id11 = String(row2.id ?? "");
+    if (id11 && !incomingIds.has(id11)) ops.push({ t: "update", ns: "admissionGrants", id: id11, attrs: {
       active: false,
       revokedAt: receivedAt,
       revokedBy: document.source.actor,
@@ -7381,10 +7634,10 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
     } });
   }
   for (const grant of document.grants) {
-    const id10 = `admission:parent:${document.source.appId}:${grant.id}`;
-    const existing = current.find((row2) => row2.id === id10);
-    ops.push({ t: "update", ns: "admissionGrants", id: id10, attrs: {
-      id: id10,
+    const id11 = `admission:parent:${document.source.appId}:${grant.id}`;
+    const existing = current.find((row2) => row2.id === id11);
+    ops.push({ t: "update", ns: "admissionGrants", id: id11, attrs: {
+      id: id11,
       sourceGrantId: grant.id,
       sourceScope: "parent",
       sourceId: document.source.appId,
@@ -7405,7 +7658,7 @@ async function materializeAdmissionGrants(db, envelope, previous, receivedAt) {
       ...!grant.note && existing?.note !== void 0 ? ["note"] : [],
       ...grant.expiresAt === void 0 && existing?.expiresAt !== void 0 ? ["expiresAt"] : []
     ];
-    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id10, attrs: retract });
+    if (retract.length) ops.push({ t: "retract", ns: "admissionGrants", id: id11, attrs: retract });
   }
   if (previous?.active) ops.push({ t: "update", ns: "admissionGrantRevisions", id: previous.id, attrs: { active: false } });
   const revisionId = `admission-revision:${document.source.appId}:${document.target.environment}:${document.revision}`;
@@ -7476,10 +7729,10 @@ function validateGiftOfferCatalog(input, tierIds) {
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key3 of Object.keys(item)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
-    const id10 = text4(item.id, `${path}.id`, errors, 80);
-    if (id10 && !ID4.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (ids2.has(id10)) errors.push(`${path}.id duplicates "${id10}"`);
-    ids2.add(id10);
+    const id11 = text4(item.id, `${path}.id`, errors, 80);
+    if (id11 && !ID4.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (ids2.has(id11)) errors.push(`${path}.id duplicates "${id11}"`);
+    ids2.add(id11);
     const targetRaw = record3(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
@@ -7505,7 +7758,7 @@ function validateGiftOfferCatalog(input, tierIds) {
     if (activeUntil !== void 0 && (!Number.isSafeInteger(activeUntil) || activeUntil < 1)) errors.push(`${path}.activeUntil must be epoch milliseconds`);
     if (activeFrom !== void 0 && activeUntil !== void 0 && activeUntil <= activeFrom) errors.push(`${path}.activeUntil must follow activeFrom`);
     offers.push({
-      id: id10,
+      id: id11,
       target,
       billingMode: item.billingMode,
       stripePriceId,
@@ -7554,10 +7807,10 @@ async function ensureProjectedPerson(deps, input, options = {}) {
   const existing = await find();
   if (existing) return { record: existing, created: false };
   const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(`chapter:person:v1:${email}`)));
-  const id10 = `person-${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+  const id11 = `person-${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
   try {
     const created = await createRecord({ ...deps, db: deps.db }, {
-      id: id10,
+      id: id11,
       type: "person",
       input: { ...input, email },
       ...options
@@ -7980,9 +8233,9 @@ function subAnnualCents(sub) {
 }
 
 // src/payments-stripe.ts
-import { stripeRequest as stripeRequest10, verifyStripeSignature as verifyStripeSignature2 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest11, verifyStripeSignature as verifyStripeSignature2 } from "@odla-ai/stripe";
 async function stripeCall(sk, method, path, params, idempotencyKey) {
-  return stripeRequest10(
+  return stripeRequest11(
     { secretKey: sk },
     method,
     path,
@@ -8060,8 +8313,8 @@ async function updateClerkUserMetadata(secretKey, userId, input, fetchImpl = fet
   return res.ok;
 }
 async function updateClerkUserMetadataByEmail(secretKey, email, input, fetchImpl = fetch) {
-  const id10 = await existingClerkUserId(secretKey, email, fetchImpl);
-  return id10 ? updateClerkUserMetadata(secretKey, id10, input, fetchImpl) : false;
+  const id11 = await existingClerkUserId(secretKey, email, fetchImpl);
+  return id11 ? updateClerkUserMetadata(secretKey, id11, input, fetchImpl) : false;
 }
 async function existingClerkUserId(secretKey, email, fetchImpl) {
   const auth = { authorization: `Bearer ${secretKey}` };
@@ -8134,10 +8387,10 @@ async function clerkGetUserByEmail(secretKey, email, fetchImpl = fetch, source =
   const user = Array.isArray(data) ? data[0] : void 0;
   return user ? toRecord(user, source) : null;
 }
-async function clerkGetUser(secretKey, id10, fetchImpl = fetch, source = "public") {
-  const data = await clerkGet(`/v1/users/${encodeURIComponent(id10)}`, secretKey, fetchImpl).catch(() => null);
+async function clerkGetUser(secretKey, id11, fetchImpl = fetch, source = "public") {
+  const data = await clerkGet(`/v1/users/${encodeURIComponent(id11)}`, secretKey, fetchImpl).catch(() => null);
   const record4 = data ? toRecord(data, source) : null;
-  return record4?.id === id10 ? record4 : null;
+  return record4?.id === id11 ? record4 : null;
 }
 async function clerkListUsers(secretKey, fetchImpl = fetch, source = "public") {
   const out = [];
@@ -8153,8 +8406,8 @@ async function clerkListUsers(secretKey, fetchImpl = fetch, source = "public") {
   }
   return out;
 }
-async function clerkSetRole(secretKey, id10, role, fetchImpl = fetch, source = "public") {
-  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id10)}/metadata`, {
+async function clerkSetRole(secretKey, id11, role, fetchImpl = fetch, source = "public") {
+  const res = await fetchImpl(`${CLERK_API}/v1/users/${encodeURIComponent(id11)}/metadata`, {
     method: "PATCH",
     headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
     redirect: "manual",
@@ -8171,7 +8424,7 @@ function planPrivateRoleMigration(input) {
   if (input.environment !== "dev") blockers.push("dev_only");
   if (!input.ladder.length || new Set(input.ladder).size !== input.ladder.length || input.ladder.some((role) => !role || role === "super_admin")) blockers.push("invalid_role_ladder");
   const expected = new Set(input.expectedRuntimes);
-  if (!expected.size || expected.size !== input.expectedRuntimes.length || input.expectedRuntimes.some((id10) => !id10)) blockers.push("runtime_inventory_required");
+  if (!expected.size || expected.size !== input.expectedRuntimes.length || input.expectedRuntimes.some((id11) => !id11)) blockers.push("runtime_inventory_required");
   if (input.runtimes.length !== expected.size || new Set(input.runtimes.map((r) => r.runtime)).size !== expected.size || input.runtimes.some((r) => !expected.has(r.runtime))) blockers.push("runtime_inventory_mismatch");
   for (const runtime of input.expectedRuntimes) {
     const proof = input.runtimes.find((r) => r.runtime === runtime);
@@ -8201,7 +8454,7 @@ function planPrivateRoleMigration(input) {
     if (privateRole === role && !Object.hasOwn(user.publicMetadata, "role")) alreadyCurrent++;
     else changes.push({ userId: user.id, role, publicRole, privateRole });
   }
-  if (!input.protectedSuperAdminUserIds.some((id10) => ids2.has(id10))) blockers.push("protected_operator_grant_required");
+  if (!input.protectedSuperAdminUserIds.some((id11) => ids2.has(id11))) blockers.push("protected_operator_grant_required");
   return { ready: blockers.length === 0, blockers, changes, alreadyCurrent, totalUsers: input.users.length };
 }
 
@@ -8779,10 +9032,10 @@ function tiersOf(value, errors) {
       return [];
     }
     unknownKeys3(item, TIER_KEYS2, path, errors);
-    const id10 = text5(item.id, `${path}.id`, errors, 80);
-    if (id10 && !TIER.test(id10)) errors.push(`${path}.id must be a lowercase kebab-case id`);
-    if (seen.has(id10)) errors.push(`${path}.id duplicates "${id10}"`);
-    seen.add(id10);
+    const id11 = text5(item.id, `${path}.id`, errors, 80);
+    if (id11 && !TIER.test(id11)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    if (seen.has(id11)) errors.push(`${path}.id duplicates "${id11}"`);
+    seen.add(id11);
     const name = text5(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
@@ -8803,7 +9056,7 @@ function tiersOf(value, errors) {
     }
     const blurb = item.blurb === void 0 ? void 0 : text5(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
-      id: id10,
+      id: id11,
       name,
       available: item.available === true,
       sortOrder: Number(item.sortOrder) || 0,
@@ -8865,15 +9118,15 @@ function policyOf(value, errors, tiers2) {
   if (input.tierPolicies !== void 0) {
     const overrides = recordOf(input.tierPolicies);
     if (!overrides || Object.keys(overrides).length > 20) errors.push("document.policy.tierPolicies must be a bounded tier map");
-    else for (const [id10, raw2] of Object.entries(overrides)) {
-      const path = `document.policy.tierPolicies.${id10}`;
+    else for (const [id11, raw2] of Object.entries(overrides)) {
+      const path = `document.policy.tierPolicies.${id11}`;
       const policy2 = recordOf(raw2);
-      if (!tiers2.some((tier) => tier.id === id10) || !policy2) {
+      if (!tiers2.some((tier) => tier.id === id11) || !policy2) {
         errors.push(`${path} must name a declared tier and policy`);
         continue;
       }
       unknownKeys3(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
-      tierPolicies[id10] = {
+      tierPolicies[id11] = {
         refundPolicyText: text5(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
         ...policy2.trustCopy !== void 0 ? { trustCopy: text5(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
@@ -9198,7 +9451,7 @@ var exclusions = (chapterId, paidTierIds) => [
     id: chapterId,
     reason: "provider_identity",
     paths: [
-      ...paidTierIds.map((id10) => `tiers[${id10}].stripePriceId`),
+      ...paidTierIds.map((id11) => `tiers[${id11}].stripePriceId`),
       "groups.stripePublishableKey",
       "applications.stripeCustomerId",
       "applications.stripeSubscriptionId",
@@ -9240,9 +9493,9 @@ async function exportChapterPromotion(input) {
     sourceIds: [`signup-control:${document.revision}`, document.source.appId, document.target.chapterId].sort(),
     receiptDigests: [input.digest]
   };
-  const artifact = (kind, id10, content) => ({
+  const artifact = (kind, id11, content) => ({
     kind,
-    id: id10,
+    id: id11,
     sourceRevision: revision,
     provenance: promotionProvenance,
     content: canonicalPromotionValue(content)
@@ -9287,7 +9540,7 @@ var MEMBER_SYSTEM_RECORD_OWNERS = {
   provider: "originating-provider",
   protectedRoles: "odla-platform"
 };
-var rows2 = (group) => group.fields.map((id10) => ({ ...group, id: id10 }));
+var rows2 = (group) => group.fields.map((id11) => ({ ...group, id: id11 }));
 var MEMBER_SYSTEM_AUTHORITY_MATRIX = [
   ...rows2({
     scope: "network",