@odla-ai/chapter 0.56.2 → 0.58.0

package/dist/worker/index.js

@@ -4036,912 +4036,887 @@ var handlePaymentRecovery = async (req, url, env, ctx) => {
   }
 };
 
-// src/worker-routes-admin-named-seat.ts
-var PATH2 = /^\/api\/admin\/applications\/([0-9a-f-]+)\/named-seat(\/refund)?$/;
-var REFUNDABLE = /* @__PURE__ */ new Set(["renewal_pending", "pending_acceptance", "pending_approval", "pending_primary", "active"]);
-var handleAdminNamedSeat = async (req, url, env, ctx) => {
-  const match = url.pathname.match(PATH2);
-  if (!match) return null;
-  const seats = ctx.membershipAuthority?.namedSeats;
-  if (ctx.chapter.mode !== "chapter" || !seats) return json({ error: "named seats are not configured" }, 404);
-  const refund = Boolean(match[2]);
-  if (req.method !== (refund ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
-  const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
-  if (!user) return json({ error: "unauthorized" }, 401);
-  if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
-  const db = raw2, app = await membershipLoad(db, "applications", match[1]);
-  if (!app || !chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME) || app.namedSeatId) return json({ error: "not found" }, 404);
-  const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(app.id));
-  if (!intent) return json({ error: "paid membership required" }, 409);
+// src/scheduling.ts
+var SCHEDULING_DEFAULTS = {
+  slotMinutes: 45,
+  days: [1, 2, 3, 4, 5],
+  startHour: 9,
+  endHour: 17,
+  timezone: "America/Los_Angeles",
+  minNoticeHours: 24,
+  windowDays: 21,
+  summaryTemplate: "Introduction call with {{firstName}} {{lastName}}"
+};
+function isValidTimeZone(tz) {
   try {
-    const target = await membershipTargetForIntent(intent, app, env, ctx);
-    const offer = await seats.offer(target, env);
-    const seat = offer.seat ?? null, refundable = Boolean(seat && REFUNDABLE.has(seat.status));
-    if (!refund) {
-      return json({
-        seat,
-        amountCents: offer.amountCents,
-        currency: offer.currency,
-        termEndsAt: offer.termEndsAt,
-        purchaseEndsAt: offer.purchaseEndsAt,
-        refundable
-      });
-    }
-    if (!seat) return json({ error: "no purchased seat", code: "seat_not_found" }, 409);
-    if (seat.status === "refunded") {
-      await closeRecipientApplication(db, env, ctx, seat.seatId);
-      return json({ ok: true, seatId: seat.seatId, status: "refunded", replayed: true });
-    }
-    if (!refundable) return json({ error: `seat is ${seat.status.replaceAll("_", " ")}`, code: "seat_not_refundable" }, 409);
-    const receipt = await seats.operatorRefund({ ...target, seatId: seat.seatId }, env);
-    await closeRecipientApplication(db, env, ctx, seat.seatId);
-    return json({ ok: true, ...receipt });
+    new Intl.DateTimeFormat(void 0, { timeZone: tz });
+    return true;
   } catch {
-    return json({ error: "named seat service unavailable; retry to confirm" }, 503);
+    return false;
   }
-};
-async function closeRecipientApplication(db, env, ctx, seatId) {
-  const recipient2 = (await db.query({ applications: { $: { where: { namedSeatId: seatId }, limit: 1 } } })).applications?.[0];
-  if (!recipient2 || !chapterBillingApplication(recipient2, ctx.chapter.id, env.ODLA_RUNTIME) || recipient2.status === "refunded") return;
-  const attrs = { status: "refunded", renewalAt: 0, canceled: true };
-  await db.transact(
-    [{ t: "update", ns: "applications", id: String(recipient2.id), attrs }],
-    { mutationId: `verified-refund:${String(recipient2.id)}:${seatId}` }
-  );
-  await syncApplicationToCrm(crmDeps(db, ctx), { app: { ...recipient2, ...attrs }, stage: "refunded" }).catch(() => void 0);
 }
-
-// src/membership-seat-refund-stripe.ts
-import { stripeRequest as stripeRequest5 } from "@odla-ai/stripe";
-
-// src/membership-checkout-seat-refund.ts
-import { stripeRequest as stripeRequest4 } from "@odla-ai/stripe";
-var fail4 = (code = "named_seat_refund_mismatch") => {
-  throw Object.assign(new Error(code), { code });
-};
-var id2 = (value) => typeof value === "string" ? value : value?.id ?? "";
-async function refundCheckoutNamedSeat(secretKey, seat) {
-  const invoiceRef = seat.combinedInvoice;
-  if (!invoiceRef || !/^in_[A-Za-z0-9_]+$/.test(invoiceRef.invoiceId) || !Number.isSafeInteger(invoiceRef.totalCents) || invoiceRef.totalCents <= seat.amountCents || seat.amountCents <= 0 || seat.status !== "refund_pending") fail4();
-  const call = async (method, path, params, key3) => {
-    const result = await stripeRequest4({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
-    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
-    return result.body;
+function resolveScheduling(config) {
+  const result = validateScheduling(config);
+  if (result.ok) return result.value;
+  const detail = Object.entries(result.errors).map(([field, message]) => `${field}: ${message}`).join(" ");
+  throw new Error(`scheduling: ${detail}`);
+}
+function validateScheduling(config) {
+  const d = config ?? {};
+  const c = {
+    slotMinutes: d.slotMinutes ?? SCHEDULING_DEFAULTS.slotMinutes,
+    days: d.days ?? SCHEDULING_DEFAULTS.days,
+    startHour: d.startHour ?? SCHEDULING_DEFAULTS.startHour,
+    endHour: d.endHour ?? SCHEDULING_DEFAULTS.endHour,
+    timezone: d.timezone ?? SCHEDULING_DEFAULTS.timezone,
+    minNoticeHours: d.minNoticeHours ?? SCHEDULING_DEFAULTS.minNoticeHours,
+    windowDays: d.windowDays ?? SCHEDULING_DEFAULTS.windowDays,
+    summaryTemplate: d.summaryTemplate ?? SCHEDULING_DEFAULTS.summaryTemplate
   };
-  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId };
-  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
-  if (sub.id !== seat.providerSubscriptionId || id2(sub.customer) !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(sub.items?.data) || sub.items.has_more !== false) fail4();
-  const invoice = await call("GET", `/v1/invoices/${encodeURIComponent(invoiceRef.invoiceId)}`);
-  if (invoice.id !== invoiceRef.invoiceId || id2(invoice.subscription ?? invoice.parent?.subscription_details?.subscription) !== sub.id || id2(invoice.customer) !== seat.providerCustomerId || invoice.status !== "paid" || invoice.billing_reason !== "subscription_create" || invoice.total !== invoiceRef.totalCents || invoice.amount_paid !== invoiceRef.totalCents || invoice.currency !== seat.currency || invoice.livemode !== (seat.environment === "prod")) fail4();
-  let chargeId = id2(invoice.charge), paymentId = id2(invoice.payment_intent);
-  if (!chargeId && !paymentId) {
-    const payments = await call("GET", "/v1/invoice_payments", { invoice: invoice.id, status: "paid", limit: 100 });
-    if (!Array.isArray(payments.data) || payments.data.length !== 1 || payments.has_more !== false) fail4();
-    const payment = payments.data[0];
-    if (id2(payment.invoice) !== invoice.id || payment.status !== "paid" || payment.payment?.type !== "payment_intent") fail4();
-    paymentId = id2(payment.payment.payment_intent);
-  }
-  if (!chargeId) {
-    if (!/^pi_[A-Za-z0-9_]+$/.test(paymentId)) fail4();
-    const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(paymentId)}`);
-    if (payment.id !== paymentId || id2(payment.customer) !== seat.providerCustomerId || payment.status !== "succeeded" || payment.amount_received !== invoiceRef.totalCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod")) fail4();
-    chargeId = id2(payment.latest_charge);
-  }
-  if (!/^ch_[A-Za-z0-9_]+$/.test(chargeId)) fail4();
-  const charge = await call("GET", `/v1/charges/${encodeURIComponent(chargeId)}`);
-  if (charge.id !== chargeId || id2(charge.customer) !== seat.providerCustomerId || charge.status !== "succeeded" || charge.livemode !== (seat.environment === "prod") || charge.amount !== invoiceRef.totalCents || charge.currency !== seat.currency || charge.invoice != null && id2(charge.invoice) !== invoice.id || paymentId && id2(charge.payment_intent) !== paymentId || !Number.isSafeInteger(charge.amount_refunded) || charge.amount_refunded < 0 || charge.amount_refunded > charge.amount) fail4();
-  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
-  if (items.length > 1) fail4();
-  if (items.length && sub.status !== "canceled") {
-    const item = items[0];
-    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.quantity !== 1 || item.price?.id !== seat.priceId) fail4();
-    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
-    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
+  const errors = {};
+  if (!(c.slotMinutes >= 15 && c.slotMinutes <= 240)) {
+    errors.slotMinutes = "Slot length must be between 15 and 240 minutes.";
   }
-  if (charge.amount_refunded === charge.amount && charge.refunded === true) return { refundedCents: seat.amountCents, refundIds: [] };
-  const list = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
-  let refundedCents = 0;
-  const refundIds = [];
-  for (const refund of list.data) {
-    if (id2(refund.charge) !== chargeId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !/^re_[A-Za-z0-9_]+$/.test(refund.id) || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
-    if (["pending", "requires_action"].includes(refund.status)) fail4("named_seat_refund_pending");
-    if (refund.status === "succeeded") {
-      if (refund.metadata?.seatId !== seat.id || refund.metadata?.membershipId !== seat.primaryMembershipId) fail4("named_seat_refund_allocation_ambiguous");
-      refundedCents += refund.amount;
-      refundIds.push(refund.id);
-    }
+  if (!(c.windowDays >= 1 && c.windowDays <= 62)) {
+    errors.windowDays = "Booking window must be between 1 and 62 days (the calendar caps look-ahead at 62).";
   }
-  if (refundedCents !== charge.amount_refunded || refundedCents > seat.amountCents) fail4();
-  if (refundedCents < seat.amountCents) {
-    const remaining = seat.amountCents - refundedCents;
-    const refund = await call("POST", "/v1/refunds", {
-      charge: chargeId,
-      amount: remaining,
-      reason: "requested_by_customer",
-      metadata: { ...metadata, membershipId: seat.primaryMembershipId, seatId: seat.id }
-    }, `combined-seat-refund:${seat.id}:${remaining}`);
-    if (id2(refund.charge) !== chargeId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
-    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
-    refundedCents += remaining;
-    refundIds.push(refund.id);
+  if (!(c.minNoticeHours >= 0 && c.minNoticeHours <= 336)) {
+    errors.minNoticeHours = "Minimum notice must be between 0 and 336 hours.";
   }
-  return { refundedCents, refundIds };
-}
-
-// src/membership-seat-refund-stripe.ts
-var fail5 = (code = "named_seat_refund_mismatch") => {
-  throw Object.assign(new Error(code), { code });
-};
-async function refundNamedSeatStripePayment(secretKey, seat) {
-  if (seat.combinedInvoice) return refundCheckoutNamedSeat(secretKey, seat);
-  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail5();
-  const call = async (method, path, params, idempotencyKey) => {
-    const result = await stripeRequest5({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
-    if (!result.ok || !result.body) return fail5("named_seat_refund_provider_unavailable");
-    return result.body;
-  };
-  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
-  const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`);
-  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail5();
-  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
-  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail5();
-  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
-  if (items.length > 1) fail5();
-  if (items.length && sub.status !== "canceled") {
-    const item = items[0];
-    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail5();
-    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
-    if (removed.id !== item.id || removed.deleted !== true) fail5("named_seat_renewal_removal_unconfirmed");
+  if (!(c.startHour >= 0 && c.startHour < c.endHour && c.endHour <= 24)) {
+    errors.hours = "Hours must satisfy 0 \u2264 start < end \u2264 24.";
   }
-  const list = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail5("named_seat_refund_history_incomplete");
-  let refundedCents = 0, pendingCents = 0;
-  const refundIds = [];
-  for (const refund of list.data) {
-    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail5();
-    if (refund.status === "succeeded") {
-      refundedCents += refund.amount;
-      refundIds.push(refund.id);
-    } else if (refund.status === "pending" || refund.status === "requires_action") pendingCents += refund.amount;
+  const days = [...c.days];
+  if (!days.length) errors.days = "Pick at least one day.";
+  else if (!days.every((n) => Number.isInteger(n) && n >= 0 && n <= 6)) {
+    errors.days = "Days must be weekday numbers, 0 (Sunday) through 6 (Saturday).";
   }
-  if (refundedCents + pendingCents > seat.amountCents) fail5();
-  if (pendingCents) fail5("named_seat_refund_pending");
-  if (refundedCents < seat.amountCents) {
-    const remaining = seat.amountCents - refundedCents;
-    const refund = await call("POST", "/v1/refunds", {
-      payment_intent: seat.providerPaymentIntentId,
-      amount: remaining,
-      reason: "requested_by_customer",
-      metadata
-    }, `named-seat-refund:${seat.id}:${remaining}`);
-    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail5();
-    if (refund.status !== "succeeded") fail5("named_seat_refund_pending");
-    refundedCents += remaining;
-    refundIds.push(refund.id);
+  if (typeof c.timezone !== "string" || !isValidTimeZone(c.timezone)) {
+    errors.timezone = `"${String(c.timezone)}" is not a valid IANA timezone (for example "America/Los_Angeles").`;
   }
-  return { refundedCents, refundIds };
+  if (typeof c.summaryTemplate !== "string") errors.summaryTemplate = "Calendar summary template must be text.";
+  return Object.keys(errors).length > 0 ? { ok: false, errors } : { ok: true, value: { ...c, days } };
 }
-
-// src/membership-seat-reservation.ts
-async function recipientKey(input, email) {
-  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([input.appId, input.chapterId, input.environment, input.runtime, email])));
-  return `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+function slotWindow(now, windowDays) {
+  return { from: now, to: now + windowDays * 864e5 };
 }
-async function reserveNamedMembershipSeat(db, input, now) {
-  membershipClock(now);
-  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
-  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
-  const purchaser = normalizeChapterEmail(typeof input.purchaserEmail === "string" ? input.purchaserEmail : "");
-  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !purchaser || email === purchaser || !/^price_[A-Za-z0-9_]+$/.test(input.priceId) || !/^user_[A-Za-z0-9_]+$/.test(input.purchaserUserId)) membershipFail("invalid_named_seat_recipient");
-  const state = await loadMembershipAuthorityState(db, input);
-  const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
-  requireMembershipScope(member, input);
-  if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
-  const id7 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
-  let seat = await membershipLoad(db, "networkSeat", id7);
-  if (!seat) {
-    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
-    const purchaseEndsAt = seatPurchaseDeadline(offering, member);
-    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
-      membershipFail("named_seat_purchase_unavailable");
-    }
-    const attrs = {
-      id: id7,
-      ...membershipScope(input),
-      primaryMembershipId: memberId,
-      recipientName: name,
-      recipientEmailNormalized: email,
-      purchaserUserId: input.purchaserUserId,
-      recipientClaimId: claimId,
-      priceId: input.priceId,
-      primaryPriceId: member.providerPriceId,
-      amountCents: offering.seatPriceCents,
-      currency: offering.currency,
-      interval: offering.interval,
-      providerCustomerId: member.providerCustomerId,
-      providerSubscriptionId: member.providerSubscriptionId,
-      status: "payment_pending",
-      preparedAt: now,
-      termEndsAt: member.termEndsAt,
-      seatPurchaseEndsAt: purchaseEndsAt,
-      offeringSnapshot: offering,
-      revision: 1,
-      createdAt: now,
-      updatedAt: now
-    };
-    try {
-      await db.transact([
-        membershipUpdate("networkSeat", id7, attrs),
-        membershipUpdate("networkSeatRecipient", claimId, {
-          id: claimId,
-          appId: input.appId,
-          chapterId: input.chapterId,
-          environment: input.environment,
-          runtime: input.runtime,
-          seatId: id7,
-          recipientEmailNormalized: email,
-          createdAt: now
-        }),
-        membershipUpdate("networkMembership", memberId, { namedSeatId: id7, revision: Number(member.revision) + 1, updatedAt: now })
-      ], { mutationId: `named-seat-reserve:${id7}`, guards: [
-        { ns: "networkSeat", id: id7, exists: false },
-        { ns: "networkSeatRecipient", id: claimId, exists: false },
-        { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
-        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
-      ] });
-    } catch (error) {
-      if (error.code !== "transact_guard_failed") throw error;
-    }
-    seat = await membershipLoad(db, "networkSeat", id7);
-    if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
-  }
-  requireMembershipScope(seat, input);
-  if (seat.primaryMembershipId !== memberId || seat.recipientName !== name || seat.recipientEmailNormalized !== email || seat.priceId !== input.priceId || seat.purchaserUserId !== input.purchaserUserId) membershipFail("named_seat_purchase_conflict");
-  return seat;
+function endForSlot(startAt, slotMinutes) {
+  return startAt + slotMinutes * 6e4;
+}
+function isSlotAvailable(slots, startAt) {
+  return slots.some((s) => s.startAt === startAt);
+}
+function renderSummary(template, app) {
+  return template.replace("{{firstName}}", app.firstName ?? "").replace("{{lastName}}", app.lastName ?? "");
+}
+function bookingDecision(existing) {
+  const eventId = existing?.googleEventId ?? null;
+  return { reschedule: Boolean(eventId), eventId };
+}
+function introIdempotencyKey(applicationId) {
+  return `application:${applicationId}:intro`;
+}
+function meetingCreateRow(i) {
+  return {
+    id: i.meetingId,
+    applicationId: i.applicationId,
+    groupId: i.groupId,
+    startAt: i.startAt,
+    endAt: i.endAt,
+    timezone: i.timezone,
+    status: "scheduled",
+    googleEventId: i.googleEventId,
+    ...i.meetUrl ? { meetUrl: i.meetUrl } : {},
+    ...i.htmlLink ? { htmlLink: i.htmlLink } : {},
+    drift: "none",
+    createdAt: i.createdAt
+  };
+}
+function meetingRescheduleUpdate(startAt, endAt) {
+  return { startAt, endAt, drift: "none" };
+}
+function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
+  return {
+    meetingAt: startAt,
+    ...htmlLink ? { meetingLink: htmlLink } : {},
+    ...currentStatus !== "call_scheduled" ? { status: "call_scheduled" } : {}
+  };
 }
 
-// src/membership-seat-included.ts
-var namedSeatIncluded = (seat) => Number(seat.amountCents) === 0;
-var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean((seat.providerPaymentIntentId || seat.combinedInvoice) && seat.providerSubscriptionItemId);
-function namedSeatRecipientState(seat) {
-  switch (String(seat.status)) {
-    case "renewal_pending":
-    case "pending_acceptance":
-      return "invited";
-    case "pending_approval":
-    case "pending_primary":
-      return "accepted";
-    case "active":
-      return "joined";
-    case "refund_pending":
-    case "refunded":
-      return seat.refundReason === "declined" ? "declined" : "refunded";
-    case "canceled":
-      return "canceled";
-    default:
-      return "payment_pending";
+// src/session.ts
+function applicationSummary(app) {
+  return {
+    id: app.id,
+    firstName: app.firstName ?? null,
+    lastName: app.lastName ?? null,
+    email: app.email ?? null,
+    status: app.status,
+    createdAt: app.createdAt ?? null,
+    meetingLink: app.meetingLink ?? null,
+    paid: Boolean(app.stripeSubscriptionId) && app.status !== "refunded" && app.canceled !== true && !["lapsed", "refunded", "refund_pending", "canceled", "restarting"].includes(app.membershipStatus ?? ""),
+    ...app.membershipStatus ? { membershipStatus: app.membershipStatus, membershipGraceEndsAt: app.membershipGraceEndsAt, membershipAutoRenew: app.membershipAutoRenew } : {},
+    renewalAt: app.renewalAt ?? null,
+    canceled: app.canceled === true,
+    tierId: app.tierId ?? null
+  };
+}
+function memberApplication(app, meeting, defaultTimezone) {
+  const summary = applicationSummary(app);
+  let meetingAt = app.meetingAt ?? null;
+  let meetUrl = null;
+  let timezone = defaultTimezone;
+  if (meeting) {
+    timezone = meeting.timezone ?? timezone;
+    if (meeting.status === "scheduled") {
+      meetingAt = meeting.startAt ?? null;
+      meetUrl = meeting.meetUrl ?? null;
+    } else {
+      meetingAt = null;
+    }
   }
+  return { ...summary, meetingAt, meetUrl, timezone };
 }
-var OPEN = ["pending_acceptance", "pending_approval", "pending_primary", "active"];
-async function grantIncludedNamedSeat(db, input, now) {
-  membershipClock(now);
-  const seat = await reserveNamedMembershipSeat(db, input, now);
-  if (!namedSeatIncluded(seat)) membershipFail("named_seat_not_included");
-  const state = await loadMembershipAuthorityState(db, input);
-  const member = await membershipLoad(db, "networkMembership", seat.primaryMembershipId);
-  requireMembershipScope(member, input);
-  if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || member.namedSeatId !== seat.id || now >= Number(member.termEndsAt)) {
-    membershipFail("named_seat_purchase_unavailable");
+
+// src/member-session-application.ts
+var local = (row2, chapterId, runtime) => row2.groupId === chapterId && (runtime ? row2.stripeRuntime === runtime : row2.stripeRuntime === void 0 || row2.stripeRuntime === "default");
+async function memberSessionApplication(db, chapterId, runtime, identity2) {
+  const lookup = async (where) => {
+    const rows5 = (await db.query({ applications: { $: { where: { groupId: chapterId, ...where }, limit: 100 } } })).applications;
+    if (!Array.isArray(rows5) || rows5.length >= 100) throw new Error("member identity lookup incomplete");
+    return rows5.filter((row2) => local(row2, chapterId, runtime));
+  };
+  let apps = await lookup({ clerkUserId: identity2.userId });
+  let emailFallback = false;
+  if (!apps.length && identity2.email) {
+    const normalized = normalizeChapterEmail(identity2.email);
+    const normalizedRows = await lookup({ emailNormalized: normalized });
+    const legacyRows = await lookup({ email: identity2.email });
+    apps = [...new Map([...normalizedRows, ...legacyRows].map((row2) => [row2.id, row2])).values()];
+    if (apps.length !== 1 || apps[0]?.clerkUserId !== void 0 || apps[0]?.clerkAccountPending === true || ["declined", "canceled", "refunded"].includes(String(apps[0]?.status))) return null;
+    emailFallback = true;
   }
-  if (seat.status === "payment_pending") {
-    const entitlementId = `${seat.id}:entitlement`, inviteId = `${seat.id}:invite`, source = `included:${seat.id}`;
+  let app = apps.sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0];
+  if (!app) return null;
+  if (emailFallback) {
+    const keys3 = ["groupId", "stripeRuntime", "email", "emailNormalized", "status", "clerkAccountPending"];
     try {
-      await db.transact([
-        membershipUpdate("networkSeat", seat.id, {
-          status: "pending_acceptance",
-          purchasedAt: now,
-          termStartedAt: now,
-          termEndsAt: member.termEndsAt,
-          acceptanceEndsAt: Number(member.termEndsAt),
-          entitlementId,
-          revision: Number(seat.revision) + 1,
-          updatedAt: now
-        }),
-        membershipUpdate("networkEntitlement", entitlementId, {
-          id: entitlementId,
-          ...membershipScope(input),
-          membershipId: member.id,
-          seatId: seat.id,
-          kind: "named_seat",
-          status: "pending_acceptance",
-          termStartedAt: now,
-          termEndsAt: member.termEndsAt,
-          offeringSnapshot: member.offeringSnapshot,
-          sourceEventId: source,
-          revision: 1,
-          createdAt: now,
-          updatedAt: now
-        }),
-        membershipUpdate("membershipEffect", inviteId, {
-          id: inviteId,
-          chapterId: input.chapterId,
-          environment: input.environment,
-          runtime: input.runtime,
-          membershipId: member.id,
-          seatId: seat.id,
-          kind: "invite_named_recipient",
-          status: "pending",
-          attempts: 0,
-          createdAt: now,
-          updatedAt: now
-        })
-      ], { mutationId: `named-seat-included:${seat.id}`, guards: [
-        {
-          ns: "networkSeat",
-          id: seat.id,
+      await db.transact([{ t: "update", ns: "applications", id: String(app.id), attrs: { clerkUserId: identity2.userId } }], {
+        mutationId: `member-account-link:${app.id}:${identity2.userId}`,
+        guards: [{
+          ns: "applications",
+          id: String(app.id),
           exists: true,
-          equals: { status: "payment_pending", revision: seat.revision, amountCents: 0 },
-          absent: ["purchasedAt", "providerPaymentIntentId"]
-        },
-        { ns: "networkEntitlement", id: entitlementId, exists: false },
-        { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision, namedSeatId: seat.id } },
-        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
-      ] });
+          equals: Object.fromEntries(keys3.filter((key3) => app[key3] !== void 0).map((key3) => [key3, app[key3]])),
+          absent: ["clerkUserId", ...keys3.filter((key3) => app[key3] === void 0)]
+        }]
+      });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
     }
+    const saved = (await db.query({ applications: { $: { where: { id: app.id }, limit: 1 } } })).applications?.[0];
+    if (!saved || !local(saved, chapterId, runtime) || saved.clerkUserId !== identity2.userId || keys3.some((key3) => saved[key3] !== app[key3])) return null;
+    app = saved;
   }
-  const current = await membershipLoad(db, "networkSeat", seat.id);
-  requireMembershipScope(current, input);
-  if (!namedSeatIncluded(current) || current.purchasedAt === void 0 || !OPEN.includes(String(current.status))) membershipFail("named_seat_purchase_unavailable");
-  return { seatId: seat.id, amountCents: 0, currency: seat.currency, termEndsAt: Number(current.termEndsAt), status: String(current.status), included: true };
+  const meeting = (await db.query({ meetings: { $: {
+    where: { applicationId: app.id, status: "scheduled" },
+    order: { createdAt: "desc" },
+    limit: 1
+  } } })).meetings?.[0];
+  const group = (await db.query({ groups: { $: { where: { id: chapterId }, limit: 1 } } })).groups?.[0];
+  const timezone = resolveScheduling(group?.schedulingJson).timezone;
+  return { source: app, application: memberApplication(
+    app,
+    meeting,
+    timezone
+  ) };
 }
 
-// src/membership-seat-refund.ts
-async function requestNamedSeatRefund(db, input, now) {
-  membershipClock(now);
-  const state = await loadMembershipAuthorityState(db, input);
-  const seat = await membershipLoad(db, "networkSeat", input.seatId);
-  requireMembershipScope(seat, input);
-  const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
-  requireMembershipScope(member, input);
-  if (seat.status === "refunded" || seat.status === "refund_pending") return;
-  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !seat.combinedInvoice && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
-  const entitlement = seat.entitlementId ? await membershipLoad(db, "networkEntitlement", String(seat.entitlementId)) : void 0;
-  await db.transact([
-    membershipUpdate("networkSeat", input.seatId, { status: "refund_pending", refundReason: input.reason, revision: Number(seat.revision) + 1, updatedAt: now }),
-    ...entitlement ? [membershipUpdate("networkEntitlement", String(entitlement.id), { status: "closed", revision: Number(entitlement.revision) + 1, updatedAt: now })] : [],
-    membershipUpdate("membershipEffect", `${seat.id}:refund`, {
-      id: `${seat.id}:refund`,
-      chapterId: input.chapterId,
-      environment: input.environment,
-      runtime: input.runtime,
-      membershipId: member.id,
-      seatId: seat.id,
-      kind: "refund_seat",
-      status: "pending",
-      attempts: 0,
-      createdAt: now,
-      updatedAt: now
-    }),
-    ...seat.recipientUserId ? [membershipUpdate("membershipEffect", `${seat.id}:revoke`, {
-      id: `${seat.id}:revoke`,
-      chapterId: input.chapterId,
-      environment: input.environment,
-      runtime: input.runtime,
-      membershipId: member.id,
-      seatId: seat.id,
-      kind: "revoke_named_recipient_access",
-      status: "pending",
-      attempts: 0,
-      createdAt: now,
-      updatedAt: now
-    })] : []
-  ], { mutationId: `named-seat-refund-request:${seat.id}`, guards: [
-    { ns: "networkSeat", id: input.seatId, exists: true, equals: { revision: seat.revision } },
-    { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision } },
-    { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
-    ...entitlement ? [{ ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } }] : []
-  ] });
-}
-async function completeNamedSeatRefund(db, seatId, secretKey, now) {
-  membershipClock(now);
-  const seat = await membershipLoad(db, "networkSeat", seatId);
-  if (!seat) return membershipFail("named_seat_not_found");
-  await loadMembershipAuthorityState(db, seat);
-  if (seat.status === "refunded") return;
-  if (seat.status !== "refund_pending") membershipFail("named_seat_refund_not_ready");
-  const result = namedSeatIncluded(seat) ? { refundedCents: 0, refundIds: [] } : await refundNamedSeatStripePayment(secretKey, seat);
-  await db.transact([
-    membershipUpdate("networkSeat", seatId, {
-      status: "refunded",
-      refundedCents: result.refundedCents,
-      providerRefundIds: result.refundIds,
-      revision: Number(seat.revision) + 1,
-      updatedAt: now
-    }),
-    membershipUpdate("membershipEffect", `${seatId}:refund`, { status: "complete", updatedAt: now })
-  ], { mutationId: `named-seat-refunded:${seatId}`, guards: [
-    { ns: "networkSeat", id: seatId, exists: true, equals: { status: "refund_pending", revision: seat.revision } }
-  ] });
-}
-
-// src/membership-seat-operator-refund.ts
-async function refundNamedSeatByOperator(db, input, stripeSecretKey, now) {
-  const seat = await membershipLoad(db, "networkSeat", input.seatId);
-  requireMembershipScope(seat, input);
-  await requestNamedSeatRefund(db, { ...input, reason: "operator" }, now);
-  await completeNamedSeatRefund(db, input.seatId, stripeSecretKey, now);
-  const refunded = await membershipLoad(db, "networkSeat", input.seatId);
-  if (refunded?.status !== "refunded" || !Number.isSafeInteger(refunded.refundedCents) || Number(refunded.refundedCents) !== Number(seat.amountCents)) {
-    throw new Error("named seat refund unconfirmed");
+// src/named-seat-request.ts
+async function smallRequestBody(req) {
+  const reader = req.body?.getReader();
+  if (!reader) throw new Error("request body required");
+  const chunks = [];
+  let size = 0;
+  try {
+    while (true) {
+      const chunk = await reader.read();
+      if (chunk.done) break;
+      size += chunk.value.byteLength;
+      if (size > 4096) {
+        await reader.cancel();
+        throw new Error("request too large");
+      }
+      chunks.push(chunk.value);
+    }
+  } finally {
+    reader.releaseLock();
   }
-  return { seatId: String(seat.id), status: "refunded", refundedCents: Number(refunded.refundedCents), subscriptionCanceled: false };
+  const bytes = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+}
+async function namedSeatRequest(req) {
+  const body = JSON.parse(await smallRequestBody(req));
+  if (!body || typeof body !== "object" || Array.isArray(body)) throw new Error("object required");
+  return body;
 }
 
-// src/membership-seat-window.ts
-async function liftSeatPurchaseWindow(db, scope2, now, limit = 100) {
-  membershipClock(now);
-  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid lift limit");
-  const state = await loadMembershipAuthorityState(db, scope2);
-  const rows5 = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
-  let lifted = 0;
-  for (const member of rows5.slice(0, limit)) {
-    if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) throw new Error("membership lift scope mismatch");
-    const offering = membershipOfferingVersion(member.offeringSnapshot);
-    if (offering.seatPurchaseWindowCalendarMonths === void 0) continue;
-    const { seatPurchaseWindowCalendarMonths: _window, ...windowless } = offering;
-    await db.transact([membershipUpdate("networkMembership", String(member.id), {
-      offeringSnapshot: windowless,
-      seatPurchaseEndsAt: Number(member.termEndsAt),
-      revision: Number(member.revision) + 1,
-      updatedAt: now
-    })], { mutationId: `seat-window-lift:${member.id}:${member.revision}`, guards: [
-      { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision } },
-      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } }
+// src/named-seat-release.ts
+var SEAT_FIELDS = ["namedSeatId", "namedSeatPrimaryApplicationId", "namedSeatClaimPending", "namedSeatAcceptedAt"];
+async function releaseNamedSeatRecipientApplications(db, env, ctx, input) {
+  const bound = (await db.query({ applications: { $: { where: { namedSeatId: input.seatId }, limit: 5 } } })).applications ?? [];
+  const keep = input.keepRecipientEmail ? normalizeChapterEmail(input.keepRecipientEmail) : null;
+  const released = [];
+  for (const app of bound) {
+    if (!chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME)) continue;
+    if (input.recipientApplicationId && app.id !== input.recipientApplicationId) continue;
+    if (input.recipientUserId && app.clerkUserId !== input.recipientUserId) continue;
+    if (keep && normalizeChapterEmail(String(app.emailNormalized ?? app.email ?? "")) === keep) continue;
+    await releaseOne(db, env, ctx, app);
+    released.push(String(app.id));
+  }
+  return { released };
+}
+async function releaseOne(db, env, ctx, app) {
+  const id7 = String(app.id), closed = app.status === "declined" && app.canceled === true;
+  if (!closed) {
+    await db.transact([
+      { t: "update", ns: "applications", id: id7, attrs: { status: "declined", canceled: true } },
+      { t: "retract", ns: "applications", id: id7, attrs: SEAT_FIELDS.filter((key3) => app[key3] !== void 0) }
+    ], { mutationId: `named-seat-release:${id7}:${String(app.namedSeatId)}`, guards: [
+      { ns: "applications", id: id7, exists: true, equals: { namedSeatId: app.namedSeatId, status: app.status } }
     ] });
-    lifted++;
+  } else if (SEAT_FIELDS.some((key3) => app[key3] !== void 0)) {
+    await db.transact(
+      [{ t: "retract", ns: "applications", id: id7, attrs: SEAT_FIELDS.filter((key3) => app[key3] !== void 0) }],
+      { guards: [{ ns: "applications", id: id7, exists: true, equals: { namedSeatId: app.namedSeatId } }] }
+    );
   }
-  return { lifted, more: rows5.length > limit };
-}
-
-// src/membership-seat-reprice.ts
-async function lowerSeatPrice(db, scope2, now, limit = 100) {
-  membershipClock(now);
-  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid reprice limit");
-  const state = await loadMembershipAuthorityState(db, scope2);
-  const versions = (await db.query({ membershipOfferingVersion: { $: { where: { chapterId: scope2.chapterId }, limit: 200 } } })).membershipOfferingVersion ?? [];
-  if (versions.length >= 200) throw Object.assign(new Error("policy_history_incomplete"), { code: "policy_history_incomplete" });
-  const current = versions.map((row2) => membershipOfferingVersion(row2.snapshot)).filter((offer) => offer.baseSkuId === scope2.skuId && offer.status === "published" && now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || now < offer.effectiveUntil)).sort((a, b) => b.version - a.version)[0];
-  if (!current) throw Object.assign(new Error("ambiguous_membership_policy"), { code: "ambiguous_membership_policy" });
-  const target = current.seatPriceCents;
-  const rows5 = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
-  const receipt = { seatPriceCents: target, repriced: 0, skipped: [], more: rows5.length > limit };
-  for (const member of rows5.slice(0, limit)) {
-    if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) throw new Error("membership reprice scope mismatch");
-    const id7 = String(member.id), skip = (reason) => {
-      receipt.skipped.push({ membershipId: id7, reason });
-    };
-    const offering = membershipOfferingVersion(member.offeringSnapshot);
-    if (offering.seatPriceCents <= target) {
-      skip("seat price already at or below the current offering");
-      continue;
-    }
-    if (!["paid_pending_approval", "active", "cancel_at_term_end", "payment_grace"].includes(String(member.status))) {
-      skip(`membership is ${String(member.status)}`);
-      continue;
-    }
-    const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
-    if (seat && (seat.status !== "payment_pending" || seat.providerPaymentIntentId !== void 0)) {
-      skip(`seat is ${String(seat.status)}`);
-      continue;
-    }
-    const ops = [membershipUpdate("networkMembership", id7, { offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(member.revision) + 1, updatedAt: now })];
-    const guards = [
-      { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision } },
-      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } }
-    ];
-    if (seat) {
-      ops.push(membershipUpdate("networkSeat", String(seat.id), { amountCents: target, offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(seat.revision) + 1, updatedAt: now }));
-      guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision, status: "payment_pending" } });
-    }
-    await db.transact(ops, { mutationId: `seat-reprice:${id7}:${member.revision}`, guards });
-    receipt.repriced++;
+  const promoteTo = ctx.chapter.operations.onApprove.promoteTo;
+  if (promoteTo !== false && typeof app.clerkUserId === "string" && app.clerkUserId) {
+    const secret = await getVaultSecret(db, "clerk_secret_key");
+    if (!secret) throw new Error("named seat release provider unavailable");
+    const user = await clerkGetUser(secret, app.clerkUserId, fetch, clerkRoleMetadata(ctx.chapter.auth));
+    if (!user) throw new Error("named seat release provider unavailable");
+    if (user.role !== ctx.chapter.auth.adminRole && user.role === promoteTo && !await clerkSetRole(secret, user.id, ctx.chapter.auth.ladder[0], fetch, clerkRoleMetadata(ctx.chapter.auth))) throw new Error("named seat release role pending");
   }
-  return receipt;
+  const seatless = Object.fromEntries(Object.entries({ ...app, status: "declined", canceled: true }).filter(([key3]) => !SEAT_FIELDS.includes(key3)));
+  await syncApplicationToCrm(crmDeps(db, ctx), { app: seatless, stage: "declined" }).catch(() => void 0);
 }
 
-// src/worker-routes-admin-membership-seats.ts
-var LIST = "/api/admin/membership-seats";
-var LIFT = "/api/admin/membership-seats/lift-purchase-window";
-var REPRICE = "/api/admin/membership-seats/reprice";
-var ONE = /^\/api\/admin\/membership-seats\/([A-Za-z0-9][A-Za-z0-9_.:-]{2,159})\/refund$/;
-var SCOPE = /^[a-z0-9][a-z0-9-]{1,62}$/;
-var PUBLIC = [
-  "id",
-  "appId",
-  "chapterId",
-  "environment",
-  "runtime",
-  "applicationId",
-  "skuId",
-  "status",
-  "amountCents",
-  "currency",
-  "recipientName",
-  "recipientEmailNormalized",
-  "purchaserUserId",
-  "purchasedAt",
-  "acceptedAt",
-  "journeyApprovedAt",
-  "refundedCents",
-  "refundReason",
-  "termEndsAt",
-  "updatedAt"
-];
-var project = (row2) => Object.fromEntries(PUBLIC.filter((key3) => row2[key3] !== void 0).map((key3) => [key3, row2[key3]]));
-var handleAdminMembershipSeats = async (req, url, env, ctx) => {
-  const one = url.pathname.match(ONE), lift = url.pathname === LIFT, reprice = url.pathname === REPRICE;
-  if (url.pathname !== LIST && !one && !lift && !reprice) return null;
-  const operator = ctx.membershipAuthorityOperator;
-  if (!operator) return json({ error: "not found" }, 404);
-  if (req.method !== (one || lift || reprice ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
-  const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
-  if (!user) return json({ error: "unauthorized" }, 401);
-  if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
-  let db;
+// src/worker-routes-named-seat-regift.ts
+async function recipientFrom(req, purchaserEmail) {
+  let body;
   try {
-    db = operator.makeDb(env);
+    body = await namedSeatRequest(req);
   } catch {
-    return json({ error: "the membership authority is not hosted by this deployment" }, 404);
-  }
-  if (lift || reprice) {
-    let body;
-    try {
-      body = await req.json();
-    } catch {
-      return json({ error: "chapterId and runtime are required" }, 400);
-    }
-    const appId = body.appId ?? body.chapterId;
-    if (typeof body.chapterId !== "string" || !SCOPE.test(body.chapterId) || typeof appId !== "string" || !SCOPE.test(appId) || typeof body.runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(body.runtime) || reprice && (typeof body.skuId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/.test(body.skuId))) {
-      return json({ error: reprice ? "chapterId, runtime and skuId are required" : "chapterId and runtime are required" }, 400);
-    }
-    const scope2 = { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime: body.runtime };
-    try {
-      if (reprice) return json({ ok: true, ...await lowerSeatPrice(db, { ...scope2, skuId: String(body.skuId) }, Date.now()) });
-      return json({ ok: true, ...await liftSeatPurchaseWindow(db, scope2, Date.now()) });
-    } catch (error) {
-      const code = error.code;
-      return json({ error: `${reprice ? "seat reprice" : "purchase window lift"} is pending; retry to confirm`, ...code ? { code } : {} }, code ? 409 : 503);
-    }
+    return json({ error: "invalid request" }, 400);
   }
-  if (!one) {
-    const rows5 = (await db.query({ networkSeat: { $: { where: { environment: env.ODLA_ENV }, order: { updatedAt: "desc" }, limit: 201 } } })).networkSeat ?? [];
-    return json({ seats: rows5.slice(0, 200).map(project), truncated: rows5.length > 200 });
+  if (Object.keys(body).some((key3) => !["recipientName", "recipientEmail"].includes(key3)) || typeof body.recipientName !== "string" || typeof body.recipientEmail !== "string" || body.recipientName.length > 160 || body.recipientEmail.length > 254) {
+    return json({ error: "a recipient name and email are required" }, 400);
   }
-  const seat = await membershipLoad(db, "networkSeat", one[1]);
-  if (!seat || seat.environment !== env.ODLA_ENV) return json({ error: "not found" }, 404);
-  if (seat.status === "refunded") {
-    return json({ ok: true, seatId: seat.id, status: "refunded", refundedCents: seat.refundedCents, subscriptionCanceled: false, replayed: true });
+  const recipientName = body.recipientName.trim().replace(/\s+/g, " "), recipientEmail = normalizeChapterEmail(body.recipientEmail);
+  if (recipientName.length < 2 || /[\u0000-\u001f\u007f]/.test(body.recipientName) || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(recipientEmail) || purchaserEmail && recipientEmail === normalizeChapterEmail(purchaserEmail)) {
+    return json({ error: "a valid name and email for someone other than the purchaser are required" }, 400);
   }
-  if (!seat.purchasedAt) return json({ error: "seat has no completed payment to refund", code: "seat_not_refundable" }, 409);
-  const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
-  if (!secret) return json({ error: "network payment provider unavailable" }, 503);
+  return { recipientName, recipientEmail };
+}
+async function regiftChapterNamedSeat(db, env, ctx, req, target, purchaserEmail) {
+  const seats = ctx.membershipAuthority?.namedSeats;
+  if (!seats?.regift) return json({ error: "naming a different recipient is not available on this network authority" }, 503);
+  const recipient2 = await recipientFrom(req, purchaserEmail);
+  if (recipient2 instanceof Response) return recipient2;
+  const offer = await seats.offer(target, env), seat = offer.seat;
+  if (!seat) return json({ error: "no purchased seat", code: "seat_not_found" }, 409);
+  if (seat.regiftable !== true) return json({ error: `the seat is ${seat.status.replaceAll("_", " ")} and can no longer be given to someone else`, code: "seat_not_regiftable" }, 409);
+  const receipt = await seats.regift({ ...target, seatId: seat.seatId, ...recipient2 }, env);
+  if (receipt.seatId !== seat.seatId || receipt.recipientEmail !== recipient2.recipientEmail) throw new Error("named seat regift differs from the request");
+  const released = await releaseNamedSeatRecipientApplications(db, env, ctx, { seatId: seat.seatId, keepRecipientEmail: receipt.recipientEmail });
+  const consentId = `${offer.membershipId}:named-seat-consent`, consent = await membershipLoad(db, "namedSeatConsents", consentId);
+  if (consent) await db.transact([{ t: "update", ns: "namedSeatConsents", id: consentId, attrs: {
+    recipientName: receipt.recipientName,
+    recipientEmail: receipt.recipientEmail,
+    acceptedAt: Date.now()
+  } }], { guards: [{ ns: "namedSeatConsents", id: consentId, exists: true }] });
+  return json({ ok: true, seat: receipt, releasedApplicationIds: released.released });
+}
+var handleNamedSeatRegift = async (req, url, env, ctx) => {
+  if (url.pathname !== "/api/named-seat/regift") return null;
+  const seats = ctx.membershipAuthority?.namedSeats;
+  if (ctx.chapter.mode !== "chapter" || !seats) return json({ error: "named seats are not configured" }, 404);
+  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const user = await ctx.verifyUser(req, env);
+  if (!user?.email) return json({ error: "unauthorized" }, 401);
+  const db = ctx.makeDb(env);
   try {
-    const receipt = await refundNamedSeatByOperator(db, {
-      appId: String(seat.appId),
-      chapterId: String(seat.chapterId),
-      environment: String(seat.environment),
-      runtime: String(seat.runtime),
-      applicationId: String(seat.applicationId),
-      skuId: String(seat.skuId),
-      seatId: String(seat.id)
-    }, secret, Date.now());
-    return json({ ok: true, ...receipt });
-  } catch (error) {
-    const code = error.code;
-    return json({ error: "seat refund is pending; retry to confirm", ...code ? { code } : {} }, code ? 409 : 503);
+    const member = await memberSessionApplication(db, ctx.chapter.id, env.ODLA_RUNTIME, { userId: user.userId, email: user.email });
+    if (!member || member.source.clerkUserId !== user.userId) return json({ error: "membership required" }, 403);
+    const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(member.source.id));
+    if (!intent) return json({ error: "paid membership required" }, 409);
+    const target = await membershipTargetForIntent(intent, member.source, env, ctx);
+    return await regiftChapterNamedSeat(db, env, ctx, req, target, user.email);
+  } catch {
+    return json({ error: "named seat service unavailable; refresh to check the seat before trying again" }, 503);
   }
 };
 
-// src/membership-policy-versions.ts
-var LIMIT = 200;
-var text2 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
-var instant = (value) => {
-  const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
-  return Number.isSafeInteger(at2) && at2 >= 0 ? at2 : void 0;
-};
-function provenance(row2) {
-  const source = text2(row2.source), actor = text2(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
-  return { ...source ? { source } : {}, ...actor ? { actor } : {}, ...recordedAt !== void 0 ? { recordedAt } : {} };
-}
-var live = (w, now) => w.from <= now && (w.until === void 0 || now < w.until);
-function stateOf(item, all, now, window, rivals) {
-  if (item.status !== "published") return { state: item.status };
-  const mine = window(item);
-  if (now < mine.from) return { state: "scheduled" };
-  const closed = mine.until !== void 0 && mine.until <= now;
-  const higher = all.filter((other) => other.id !== item.id && other.status === "published" && other.version > item.version && rivals(item, other)).map(window).filter((w) => w.from <= now && (w.until === void 0 || w.until > mine.from));
-  if (!closed && !higher.some((w) => live(w, now))) return { state: "active" };
-  const dates = higher.map((w) => Math.max(w.from, mine.from));
-  if (closed) dates.push(mine.until);
-  return { state: "superseded", supersededAt: Math.min(...dates) };
-}
-var mechanism = (policy2) => policy2.percentOffBps === 0 || policy2.discountEligibleSkuIds.length === 0 ? "none" : policy2.benefitDuration.kind === "while_active" ? "stripe_coupon_forever" : policy2.benefitDuration.kind === "first_term" ? "stripe_coupon_once" : "stripe_coupon_term_bound";
-var sharesSku = (a, b) => a.cohortEligibleSkuIds.some((sku) => b.cohortEligibleSkuIds.includes(sku));
-var byChapter = (a, b) => a.chapterId.localeCompare(b.chapterId);
-function normalize(rows5, collection, parse, invalid2) {
-  const out = [];
-  for (const row2 of rows5) {
-    try {
-      out.push({ value: parse(row2.snapshot), row: row2 });
-    } catch (error) {
-      invalid2.push({ collection, id: String(row2.id ?? ""), error: error instanceof Error ? error.message : String(error) });
-    }
-  }
-  return out;
-}
-async function listMembershipPolicyVersions(db, input) {
-  const where = input.chapterId ? { chapterId: input.chapterId } : {};
-  const rows5 = await db.query({
-    membershipOfferingVersion: { $: { where, limit: LIMIT } },
-    discountPolicyVersion: { $: { where, limit: LIMIT } }
-  });
-  const offeringRows = rows5.membershipOfferingVersion ?? [], policyRows = rows5.discountPolicyVersion ?? [];
-  const invalid2 = [];
-  const offerings = normalize(offeringRows, "membershipOfferingVersion", membershipOfferingVersion, invalid2);
-  const policies = normalize(policyRows, "discountPolicyVersion", membershipDiscountPolicyVersion, invalid2);
-  const offeringValues = offerings.map((item) => item.value), policyValues = policies.map((item) => item.value);
-  return {
-    now: input.now,
-    chapterId: input.chapterId ?? null,
-    offerings: offerings.map(({ value, row: row2 }) => ({
-      ...value,
-      ...provenance(row2),
-      ...stateOf(
-        value,
-        offeringValues,
-        input.now,
-        (v) => ({ from: v.effectiveFrom, ...v.effectiveUntil !== void 0 ? { until: v.effectiveUntil } : {} }),
-        (a, b) => a.chapterId === b.chapterId && a.baseSkuId === b.baseSkuId
-      )
-    })).sort((a, b) => byChapter(a, b) || a.baseSkuId.localeCompare(b.baseSkuId) || b.version - a.version),
-    discountPolicies: policies.map(({ value, row: row2 }) => ({
-      ...value,
-      ...provenance(row2),
-      mechanism: mechanism(value),
-      ...stateOf(
-        value,
-        policyValues,
-        input.now,
-        (v) => ({ from: v.qualifyingStartsAt, until: v.qualifyingEndsAt }),
-        (a, b) => a.chapterId === b.chapterId && sharesSku(a, b)
-      )
-    })).sort((a, b) => byChapter(a, b) || b.version - a.version),
-    invalid: invalid2,
-    truncated: offeringRows.length >= LIMIT || policyRows.length >= LIMIT
-  };
-}
-
-// src/worker-routes-admin-membership-policy.ts
-var PATH3 = "/api/admin/membership-policy-versions";
-var SCOPE2 = /^[a-z0-9][a-z0-9-]{1,62}$/;
-var handleAdminMembershipPolicyVersions = async (req, url, env, ctx) => {
-  if (url.pathname !== PATH3) return null;
-  const operator = ctx.membershipAuthorityOperator;
-  if (!operator) return json({ error: "not found" }, 404);
-  if (req.method !== "GET") return json({ error: "method not allowed" }, 405);
+// src/worker-routes-admin-named-seat.ts
+var PATH2 = /^\/api\/admin\/applications\/([0-9a-f-]+)\/named-seat(\/refund|\/regift)?$/;
+var REFUNDABLE = /* @__PURE__ */ new Set(["renewal_pending", "pending_acceptance", "pending_approval", "pending_primary", "active"]);
+var handleAdminNamedSeat = async (req, url, env, ctx) => {
+  const match = url.pathname.match(PATH2);
+  if (!match) return null;
+  const seats = ctx.membershipAuthority?.namedSeats;
+  if (ctx.chapter.mode !== "chapter" || !seats) return json({ error: "named seats are not configured" }, 404);
+  const refund = match[2] === "/refund", regift = match[2] === "/regift";
+  if (req.method !== (refund || regift ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
   const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
   if (!user) return json({ error: "unauthorized" }, 401);
   if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
-  const chapterId = url.searchParams.get("chapterId");
-  if (chapterId !== null && !SCOPE2.test(chapterId)) return json({ error: "chapterId is invalid" }, 400);
-  let db;
+  const db = raw2, app = await membershipLoad(db, "applications", match[1]);
+  if (!app || !chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME) || app.namedSeatId) return json({ error: "not found" }, 404);
+  const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(app.id));
+  if (!intent) return json({ error: "paid membership required" }, 409);
   try {
-    db = operator.makeDb(env);
+    const target = await membershipTargetForIntent(intent, app, env, ctx);
+    if (regift) return await regiftChapterNamedSeat(db, env, ctx, req, target, typeof app.email === "string" ? app.email : void 0);
+    const offer = await seats.offer(target, env);
+    const seat = offer.seat ?? null, refundable = Boolean(seat && REFUNDABLE.has(seat.status));
+    if (!refund) {
+      return json({
+        seat,
+        amountCents: offer.amountCents,
+        currency: offer.currency,
+        termEndsAt: offer.termEndsAt,
+        purchaseEndsAt: offer.purchaseEndsAt,
+        refundable,
+        regiftable: seat?.regiftable === true
+      });
+    }
+    if (!seat) return json({ error: "no purchased seat", code: "seat_not_found" }, 409);
+    if (seat.status === "refunded") {
+      await closeRecipientApplication(db, env, ctx, seat.seatId);
+      return json({ ok: true, seatId: seat.seatId, status: "refunded", replayed: true });
+    }
+    if (!refundable) return json({ error: `seat is ${seat.status.replaceAll("_", " ")}`, code: "seat_not_refundable" }, 409);
+    const receipt = await seats.operatorRefund({ ...target, seatId: seat.seatId }, env);
+    await closeRecipientApplication(db, env, ctx, seat.seatId);
+    return json({ ok: true, ...receipt });
   } catch {
-    return json({ error: "the membership authority is not hosted by this deployment" }, 404);
+    return json({ error: "named seat service unavailable; retry to confirm" }, 503);
   }
-  return json(await listMembershipPolicyVersions(db, { chapterId, now: Date.now() }));
 };
-
-// src/membership-discount-reterm.ts
-import { stripeRequest as stripeRequest7 } from "@odla-ai/stripe";
-
-// src/subscription-provider-contract.ts
-import { stripeRequest as stripeRequest6 } from "@odla-ai/stripe";
-function subscriptionContractMismatch() {
-  throw Object.assign(new Error("Stripe subscription does not match the checkout contract"), { code: "stripe_contract_mismatch" });
-}
-async function verifySubscriptionPrice(secretKey, input, resume = false) {
-  if (!/^price_[A-Za-z0-9]+$/.test(input.priceId) || !Number.isSafeInteger(input.priceCents) || input.priceCents <= 0 || !/^[a-z]{3}$/.test(input.currency) || !["month", "year"].includes(input.interval)) subscriptionContractMismatch();
-  const result = await stripeRequest6({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
-  const price = result.body;
-  if (!result.ok || !price || price.id !== input.priceId || !resume && price.active !== true || price.unit_amount !== input.priceCents || price.currency !== input.currency || price.type !== "recurring" || price.billing_scheme !== "per_unit" || price.custom_unit_amount || price.transform_quantity || price.recurring?.interval !== input.interval || price.recurring?.interval_count !== 1 || price.recurring?.usage_type !== "licensed" || price.livemode !== (input.environment === "prod")) subscriptionContractMismatch();
-  return typeof price.product === "string" ? price.product : void 0;
-}
-function verifySubscriptionResult(sub, input, customerId, metadata) {
-  const items = sub?.items;
-  const seat = input.namedSeat?.amountCents ? input.namedSeat : void 0;
-  const primary = items?.data?.find((item) => item.price?.id === input.priceId);
-  const seatItem = seat && items?.data?.find((item) => item.price?.id === seat.priceId);
-  if (!sub || !/^sub_[A-Za-z0-9]+$/.test(sub.id) || sub.customer !== customerId || input.existingSubscriptionId && sub.id !== input.existingSubscriptionId || !(input.billingTerms?.initialTermEndsAt ? ["incomplete", "active", "trialing"] : ["incomplete", "active"]).includes(sub.status) || sub.livemode !== (input.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(items?.data) || items.has_more !== false || items.data.length !== (seat ? 2 : 1) || primary?.quantity !== 1 || seat && (seatItem?.quantity !== 1 || seatItem.metadata?.seatId !== seat.seatId || seatItem.metadata?.membershipId !== seat.membershipId)) subscriptionContractMismatch();
-  const invoice = sub.latest_invoice;
-  if (!invoice || typeof invoice !== "object" || invoice.customer !== customerId || invoice.currency !== input.currency || invoice.total !== subscriptionAmountDue(input) + (seat?.amountCents ?? 0) || invoice.billing_reason !== "subscription_create") subscriptionContractMismatch();
-  verifySubscriptionBillingResult(sub, input);
+async function closeRecipientApplication(db, env, ctx, seatId) {
+  const recipient2 = (await db.query({ applications: { $: { where: { namedSeatId: seatId }, limit: 1 } } })).applications?.[0];
+  if (!recipient2 || !chapterBillingApplication(recipient2, ctx.chapter.id, env.ODLA_RUNTIME) || recipient2.status === "refunded") return;
+  const attrs = { status: "refunded", renewalAt: 0, canceled: true };
+  await db.transact(
+    [{ t: "update", ns: "applications", id: String(recipient2.id), attrs }],
+    { mutationId: `verified-refund:${String(recipient2.id)}:${seatId}` }
+  );
+  await syncApplicationToCrm(crmDeps(db, ctx), { app: { ...recipient2, ...attrs }, stage: "refunded" }).catch(() => void 0);
 }
 
-// src/membership-discount-reterm.ts
-var SAFE = /^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/;
-var RETERMABLE = /* @__PURE__ */ new Set(["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace"]);
-var PROVIDER_LIVE = /* @__PURE__ */ new Set(["active", "trialing", "past_due"]);
-var couponOf = (discount) => {
-  const ref = discount?.source?.coupon ?? discount?.coupon;
-  return typeof ref === "string" ? ref : typeof ref?.id === "string" ? ref.id : void 0;
+// src/membership-seat-refund-stripe.ts
+import { stripeRequest as stripeRequest5 } from "@odla-ai/stripe";
+
+// src/membership-checkout-seat-refund.ts
+import { stripeRequest as stripeRequest4 } from "@odla-ai/stripe";
+var fail4 = (code = "named_seat_refund_mismatch") => {
+  throw Object.assign(new Error(code), { code });
 };
-async function retermPolicy(db, scope2, id7) {
-  const row2 = await membershipLoad(db, "discountPolicyVersion", id7);
-  if (!row2) membershipFail("membership_reterm_policy_unknown");
-  let policy2;
-  try {
-    policy2 = membershipDiscountPolicyVersion(row2.snapshot);
-  } catch {
-    return membershipFail("membership_reterm_policy_ineligible");
+var id2 = (value) => typeof value === "string" ? value : value?.id ?? "";
+async function refundCheckoutNamedSeat(secretKey, seat) {
+  const invoiceRef = seat.combinedInvoice;
+  if (!invoiceRef || !/^in_[A-Za-z0-9_]+$/.test(invoiceRef.invoiceId) || !Number.isSafeInteger(invoiceRef.totalCents) || invoiceRef.totalCents <= seat.amountCents || seat.amountCents <= 0 || seat.status !== "refund_pending") fail4();
+  const call = async (method, path, params, key3) => {
+    const result = await stripeRequest4({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
+    return result.body;
+  };
+  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId };
+  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
+  if (sub.id !== seat.providerSubscriptionId || id2(sub.customer) !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(sub.items?.data) || sub.items.has_more !== false) fail4();
+  const invoice = await call("GET", `/v1/invoices/${encodeURIComponent(invoiceRef.invoiceId)}`);
+  if (invoice.id !== invoiceRef.invoiceId || id2(invoice.subscription ?? invoice.parent?.subscription_details?.subscription) !== sub.id || id2(invoice.customer) !== seat.providerCustomerId || invoice.status !== "paid" || invoice.billing_reason !== "subscription_create" || invoice.total !== invoiceRef.totalCents || invoice.amount_paid !== invoiceRef.totalCents || invoice.currency !== seat.currency || invoice.livemode !== (seat.environment === "prod")) fail4();
+  let chargeId = id2(invoice.charge), paymentId = id2(invoice.payment_intent);
+  if (!chargeId && !paymentId) {
+    const payments = await call("GET", "/v1/invoice_payments", { invoice: invoice.id, status: "paid", limit: 100 });
+    if (!Array.isArray(payments.data) || payments.data.length !== 1 || payments.has_more !== false) fail4();
+    const payment = payments.data[0];
+    if (id2(payment.invoice) !== invoice.id || payment.status !== "paid" || payment.payment?.type !== "payment_intent") fail4();
+    paymentId = id2(payment.payment.payment_intent);
   }
-  if (policy2.id !== id7 || policy2.chapterId !== scope2.chapterId || policy2.status !== "published" || policy2.benefitDuration.kind !== "while_active" || policy2.percentOffBps <= 0 || policy2.discountEligibleSkuIds.length === 0) membershipFail("membership_reterm_policy_ineligible");
-  return policy2;
-}
-async function attachProviderDiscount(sk, scope2, member, policy2, couponId, productId) {
-  const subId = String(member.providerSubscriptionId), path = `/v1/subscriptions/${encodeURIComponent(subId)}`;
-  const read2 = await stripeRequest7({ secretKey: sk }, "GET", path, { "expand[0]": "discounts" });
-  const sub = read2.body, items = sub?.items?.data;
-  const metadata = { ...stripePartitionMetadata(scope2), applicationId: String(member.applicationId) };
-  if (!read2.ok || sub.id !== subId || sub.customer !== member.providerCustomerId || sub.livemode !== (scope2.environment === "prod") || !PROVIDER_LIVE.has(sub.status) || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(items) || items.length < 1 || items.length > 2 || items.filter((item) => item.price?.id === member.providerPriceId && item.quantity === 1 && item.price?.product === productId).length !== 1) {
-    throw Object.assign(new Error("provider subscription does not match the frozen membership"), { code: "provider_mismatch" });
+  if (!chargeId) {
+    if (!/^pi_[A-Za-z0-9_]+$/.test(paymentId)) fail4();
+    const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(paymentId)}`);
+    if (payment.id !== paymentId || id2(payment.customer) !== seat.providerCustomerId || payment.status !== "succeeded" || payment.amount_received !== invoiceRef.totalCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod")) fail4();
+    chargeId = id2(payment.latest_charge);
   }
-  const discounts = sub.discounts ?? (sub.discount ? [sub.discount] : []);
-  if (!Array.isArray(discounts)) throw Object.assign(new Error("provider discounts unreadable"), { code: "provider_mismatch" });
-  const present = discounts.map(couponOf);
-  if (present.length === 1 && present[0] === couponId) return false;
-  if (present.length > 0) throw Object.assign(new Error("provider subscription carries an unrelated discount"), { code: "provider_mismatch" });
-  const written = await stripeRequest7({ secretKey: sk }, "POST", path, {
-    "discounts[0][coupon]": couponId,
-    "expand[0]": "discounts",
-    "metadata[discountPolicyVersionId]": policy2.id
-  }, { idempotencyKey: `membership-reterm:${String(member.id)}:${policy2.id}` });
-  const after = written.body?.discounts;
-  if (!written.ok || written.body?.id !== subId || !Array.isArray(after) || after.length !== 1 || couponOf(after[0]) !== couponId) {
-    membershipFail("membership_reterm_provider_unconfirmed");
+  if (!/^ch_[A-Za-z0-9_]+$/.test(chargeId)) fail4();
+  const charge = await call("GET", `/v1/charges/${encodeURIComponent(chargeId)}`);
+  if (charge.id !== chargeId || id2(charge.customer) !== seat.providerCustomerId || charge.status !== "succeeded" || charge.livemode !== (seat.environment === "prod") || charge.amount !== invoiceRef.totalCents || charge.currency !== seat.currency || charge.invoice != null && id2(charge.invoice) !== invoice.id || paymentId && id2(charge.payment_intent) !== paymentId || !Number.isSafeInteger(charge.amount_refunded) || charge.amount_refunded < 0 || charge.amount_refunded > charge.amount) fail4();
+  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
+  if (items.length > 1) fail4();
+  if (items.length && sub.status !== "canceled") {
+    const item = items[0];
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.quantity !== 1 || item.price?.id !== seat.priceId) fail4();
+    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
+    if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
   }
-  return true;
-}
-async function retermMembershipDiscount(db, stripeSecretKey, scope2, input, now) {
+  if (charge.amount_refunded === charge.amount && charge.refunded === true) return { refundedCents: seat.amountCents, refundIds: [] };
+  const list = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  let refundedCents = 0;
+  const refundIds = [];
+  for (const refund of list.data) {
+    if (id2(refund.charge) !== chargeId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !/^re_[A-Za-z0-9_]+$/.test(refund.id) || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
+    if (["pending", "requires_action"].includes(refund.status)) fail4("named_seat_refund_pending");
+    if (refund.status === "succeeded") {
+      if (refund.metadata?.seatId !== seat.id || refund.metadata?.membershipId !== seat.primaryMembershipId) fail4("named_seat_refund_allocation_ambiguous");
+      refundedCents += refund.amount;
+      refundIds.push(refund.id);
+    }
+  }
+  if (refundedCents !== charge.amount_refunded || refundedCents > seat.amountCents) fail4();
+  if (refundedCents < seat.amountCents) {
+    const remaining = seat.amountCents - refundedCents;
+    const refund = await call("POST", "/v1/refunds", {
+      charge: chargeId,
+      amount: remaining,
+      reason: "requested_by_customer",
+      metadata: { ...metadata, membershipId: seat.primaryMembershipId, seatId: seat.id }
+    }, `combined-seat-refund:${seat.id}:${remaining}`);
+    if (id2(refund.charge) !== chargeId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail4();
+    if (refund.status !== "succeeded") fail4("named_seat_refund_pending");
+    refundedCents += remaining;
+    refundIds.push(refund.id);
+  }
+  return { refundedCents, refundIds };
+}
+
+// src/membership-seat-refund-stripe.ts
+var fail5 = (code = "named_seat_refund_mismatch") => {
+  throw Object.assign(new Error(code), { code });
+};
+async function refundNamedSeatStripePayment(secretKey, seat) {
+  if (seat.combinedInvoice) return refundCheckoutNamedSeat(secretKey, seat);
+  if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail5();
+  const call = async (method, path, params, idempotencyKey) => {
+    const result = await stripeRequest5({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
+    if (!result.ok || !result.body) return fail5("named_seat_refund_provider_unavailable");
+    return result.body;
+  };
+  const metadata = { ...stripePartitionMetadata(seat), applicationId: seat.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
+  const payment = await call("GET", `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`);
+  if (payment.id !== seat.providerPaymentIntentId || payment.customer !== seat.providerCustomerId || payment.amount !== seat.amountCents || payment.amount_received !== seat.amountCents || payment.currency !== seat.currency || payment.livemode !== (seat.environment === "prod") || payment.status !== "succeeded" || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) fail5();
+  const sub = await call("GET", `/v1/subscriptions/${encodeURIComponent(seat.providerSubscriptionId)}`);
+  if (sub.id !== seat.providerSubscriptionId || sub.customer !== seat.providerCustomerId || sub.livemode !== (seat.environment === "prod") || !Object.entries({ ...stripePartitionMetadata(seat), applicationId: seat.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(sub.items?.data)) fail5();
+  const items = sub.items.data.filter((item) => item.metadata?.seatId === seat.id);
+  if (items.length > 1) fail5();
+  if (items.length && sub.status !== "canceled") {
+    const item = items[0];
+    if (!/^si_[A-Za-z0-9_]+$/.test(item.id) || item.price?.id !== seat.priceId || item.quantity !== 1) fail5();
+    const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
+    if (removed.id !== item.id || removed.deleted !== true) fail5("named_seat_renewal_removal_unconfirmed");
+  }
+  const list = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
+  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail5("named_seat_refund_history_incomplete");
+  let refundedCents = 0, pendingCents = 0;
+  const refundIds = [];
+  for (const refund of list.data) {
+    if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail5();
+    if (refund.status === "succeeded") {
+      refundedCents += refund.amount;
+      refundIds.push(refund.id);
+    } else if (refund.status === "pending" || refund.status === "requires_action") pendingCents += refund.amount;
+  }
+  if (refundedCents + pendingCents > seat.amountCents) fail5();
+  if (pendingCents) fail5("named_seat_refund_pending");
+  if (refundedCents < seat.amountCents) {
+    const remaining = seat.amountCents - refundedCents;
+    const refund = await call("POST", "/v1/refunds", {
+      payment_intent: seat.providerPaymentIntentId,
+      amount: remaining,
+      reason: "requested_by_customer",
+      metadata
+    }, `named-seat-refund:${seat.id}:${remaining}`);
+    if (refund.payment_intent !== seat.providerPaymentIntentId || refund.amount !== remaining || refund.currency !== seat.currency || !/^re_[A-Za-z0-9_]+$/.test(refund.id)) fail5();
+    if (refund.status !== "succeeded") fail5("named_seat_refund_pending");
+    refundedCents += remaining;
+    refundIds.push(refund.id);
+  }
+  return { refundedCents, refundIds };
+}
+
+// src/membership-seat-reservation.ts
+async function namedSeatRecipientClaimId(input, email) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([input.appId, input.chapterId, input.environment, input.runtime, email])));
+  return `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+async function reserveNamedMembershipSeat(db, input, now) {
+  membershipClock(now);
+  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
+  const purchaser = normalizeChapterEmail(typeof input.purchaserEmail === "string" ? input.purchaserEmail : "");
+  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || !purchaser || email === purchaser || !/^price_[A-Za-z0-9_]+$/.test(input.priceId) || !/^user_[A-Za-z0-9_]+$/.test(input.purchaserUserId)) membershipFail("invalid_named_seat_recipient");
+  const state = await loadMembershipAuthorityState(db, input);
+  const memberId = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", memberId);
+  requireMembershipScope(member, input);
+  if (!Number.isSafeInteger(member.revision) || !/^price_[A-Za-z0-9_]+$/.test(String(member.providerPriceId)) || member.providerPriceId === input.priceId) membershipFail("named_seat_purchase_unavailable");
+  const id7 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
+  let seat = await membershipLoad(db, "networkSeat", id7);
+  if (!seat) {
+    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await namedSeatRecipientClaimId(input, email);
+    const purchaseEndsAt = seatPurchaseDeadline(offering, member);
+    if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
+      membershipFail("named_seat_purchase_unavailable");
+    }
+    const attrs = {
+      id: id7,
+      ...membershipScope(input),
+      primaryMembershipId: memberId,
+      recipientName: name,
+      recipientEmailNormalized: email,
+      purchaserUserId: input.purchaserUserId,
+      recipientClaimId: claimId,
+      priceId: input.priceId,
+      primaryPriceId: member.providerPriceId,
+      amountCents: offering.seatPriceCents,
+      currency: offering.currency,
+      interval: offering.interval,
+      providerCustomerId: member.providerCustomerId,
+      providerSubscriptionId: member.providerSubscriptionId,
+      status: "payment_pending",
+      preparedAt: now,
+      termEndsAt: member.termEndsAt,
+      seatPurchaseEndsAt: purchaseEndsAt,
+      offeringSnapshot: offering,
+      revision: 1,
+      createdAt: now,
+      updatedAt: now
+    };
+    try {
+      await db.transact([
+        membershipUpdate("networkSeat", id7, attrs),
+        membershipUpdate("networkSeatRecipient", claimId, {
+          id: claimId,
+          appId: input.appId,
+          chapterId: input.chapterId,
+          environment: input.environment,
+          runtime: input.runtime,
+          seatId: id7,
+          recipientEmailNormalized: email,
+          createdAt: now
+        }),
+        membershipUpdate("networkMembership", memberId, { namedSeatId: id7, revision: Number(member.revision) + 1, updatedAt: now })
+      ], { mutationId: `named-seat-reserve:${id7}`, guards: [
+        { ns: "networkSeat", id: id7, exists: false },
+        { ns: "networkSeatRecipient", id: claimId, exists: false },
+        { ns: "networkMembership", id: memberId, exists: true, equals: { revision: member.revision }, absent: ["namedSeatId"] },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+    }
+    seat = await membershipLoad(db, "networkSeat", id7);
+    if (!seat && await membershipLoad(db, "networkSeatRecipient", claimId)) membershipFail("named_seat_recipient_unavailable");
+  }
+  requireMembershipScope(seat, input);
+  if (seat.primaryMembershipId !== memberId || seat.recipientName !== name || seat.recipientEmailNormalized !== email || seat.priceId !== input.priceId || seat.purchaserUserId !== input.purchaserUserId) membershipFail("named_seat_purchase_conflict");
+  return seat;
+}
+
+// src/membership-seat-included.ts
+var namedSeatIncluded = (seat) => Number(seat.amountCents) === 0;
+var namedSeatSettled = (seat) => namedSeatIncluded(seat) ? seat.purchasedAt !== void 0 : Boolean((seat.providerPaymentIntentId || seat.combinedInvoice) && seat.providerSubscriptionItemId);
+function namedSeatRecipientState(seat) {
+  switch (String(seat.status)) {
+    case "renewal_pending":
+    case "pending_acceptance":
+      return "invited";
+    case "pending_approval":
+    case "pending_primary":
+      return "accepted";
+    case "active":
+      return "joined";
+    case "refund_pending":
+    case "refunded":
+      return seat.refundReason === "declined" ? "declined" : "refunded";
+    case "canceled":
+      return "canceled";
+    default:
+      return "payment_pending";
+  }
+}
+var OPEN = ["pending_acceptance", "pending_approval", "pending_primary", "active"];
+async function grantIncludedNamedSeat(db, input, now) {
+  membershipClock(now);
+  const seat = await reserveNamedMembershipSeat(db, input, now);
+  if (!namedSeatIncluded(seat)) membershipFail("named_seat_not_included");
+  const state = await loadMembershipAuthorityState(db, input);
+  const member = await membershipLoad(db, "networkMembership", seat.primaryMembershipId);
+  requireMembershipScope(member, input);
+  if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || member.namedSeatId !== seat.id || now >= Number(member.termEndsAt)) {
+    membershipFail("named_seat_purchase_unavailable");
+  }
+  if (seat.status === "payment_pending") {
+    const entitlementId = `${seat.id}:entitlement`, inviteId = `${seat.id}:invite`, source = `included:${seat.id}`;
+    try {
+      await db.transact([
+        membershipUpdate("networkSeat", seat.id, {
+          status: "pending_acceptance",
+          purchasedAt: now,
+          termStartedAt: now,
+          termEndsAt: member.termEndsAt,
+          acceptanceEndsAt: Number(member.termEndsAt),
+          entitlementId,
+          revision: Number(seat.revision) + 1,
+          updatedAt: now
+        }),
+        membershipUpdate("networkEntitlement", entitlementId, {
+          id: entitlementId,
+          ...membershipScope(input),
+          membershipId: member.id,
+          seatId: seat.id,
+          kind: "named_seat",
+          status: "pending_acceptance",
+          termStartedAt: now,
+          termEndsAt: member.termEndsAt,
+          offeringSnapshot: member.offeringSnapshot,
+          sourceEventId: source,
+          revision: 1,
+          createdAt: now,
+          updatedAt: now
+        }),
+        membershipUpdate("membershipEffect", inviteId, {
+          id: inviteId,
+          chapterId: input.chapterId,
+          environment: input.environment,
+          runtime: input.runtime,
+          membershipId: member.id,
+          seatId: seat.id,
+          kind: "invite_named_recipient",
+          status: "pending",
+          attempts: 0,
+          createdAt: now,
+          updatedAt: now
+        })
+      ], { mutationId: `named-seat-included:${seat.id}`, guards: [
+        {
+          ns: "networkSeat",
+          id: seat.id,
+          exists: true,
+          equals: { status: "payment_pending", revision: seat.revision, amountCents: 0 },
+          absent: ["purchasedAt", "providerPaymentIntentId"]
+        },
+        { ns: "networkEntitlement", id: entitlementId, exists: false },
+        { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision, namedSeatId: seat.id } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+    }
+  }
+  const current = await membershipLoad(db, "networkSeat", seat.id);
+  requireMembershipScope(current, input);
+  if (!namedSeatIncluded(current) || current.purchasedAt === void 0 || !OPEN.includes(String(current.status))) membershipFail("named_seat_purchase_unavailable");
+  return { seatId: seat.id, amountCents: 0, currency: seat.currency, termEndsAt: Number(current.termEndsAt), status: String(current.status), included: true };
+}
+
+// src/membership-seat-refund.ts
+async function requestNamedSeatRefund(db, input, now) {
+  membershipClock(now);
+  const state = await loadMembershipAuthorityState(db, input);
+  const seat = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(seat, input);
+  const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
+  requireMembershipScope(member, input);
+  if (seat.status === "refunded" || seat.status === "refund_pending") return;
+  if (!seat.purchasedAt || !seat.providerPaymentIntentId && !seat.combinedInvoice && !namedSeatIncluded(seat) || input.reason === "declined" && seat.journeyApprovedAt !== void 0 || input.reason === "primary_closed" && !["refunded", "declined"].includes(String(member.status))) membershipFail("named_seat_refund_not_eligible");
+  const entitlement = seat.entitlementId ? await membershipLoad(db, "networkEntitlement", String(seat.entitlementId)) : void 0;
+  await db.transact([
+    membershipUpdate("networkSeat", input.seatId, { status: "refund_pending", refundReason: input.reason, revision: Number(seat.revision) + 1, updatedAt: now }),
+    ...entitlement ? [membershipUpdate("networkEntitlement", String(entitlement.id), { status: "closed", revision: Number(entitlement.revision) + 1, updatedAt: now })] : [],
+    membershipUpdate("membershipEffect", `${seat.id}:refund`, {
+      id: `${seat.id}:refund`,
+      chapterId: input.chapterId,
+      environment: input.environment,
+      runtime: input.runtime,
+      membershipId: member.id,
+      seatId: seat.id,
+      kind: "refund_seat",
+      status: "pending",
+      attempts: 0,
+      createdAt: now,
+      updatedAt: now
+    }),
+    ...seat.recipientUserId ? [membershipUpdate("membershipEffect", `${seat.id}:revoke`, {
+      id: `${seat.id}:revoke`,
+      chapterId: input.chapterId,
+      environment: input.environment,
+      runtime: input.runtime,
+      membershipId: member.id,
+      seatId: seat.id,
+      kind: "revoke_named_recipient_access",
+      status: "pending",
+      attempts: 0,
+      createdAt: now,
+      updatedAt: now
+    })] : []
+  ], { mutationId: `named-seat-refund-request:${seat.id}`, guards: [
+    { ns: "networkSeat", id: input.seatId, exists: true, equals: { revision: seat.revision } },
+    { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision } },
+    { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
+    ...entitlement ? [{ ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } }] : []
+  ] });
+}
+async function completeNamedSeatRefund(db, seatId, secretKey, now) {
   membershipClock(now);
-  const limit = input.limit ?? 100;
-  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid reterm limit");
-  if (typeof input.policyVersionId !== "string" || !SAFE.test(input.policyVersionId)) throw new TypeError("invalid policy version id");
-  if (input.membershipIds !== void 0 && (!Array.isArray(input.membershipIds) || input.membershipIds.length === 0 || input.membershipIds.length > limit || input.membershipIds.some((id7) => typeof id7 !== "string" || !SAFE.test(id7)))) throw new TypeError("invalid membership ids");
+  const seat = await membershipLoad(db, "networkSeat", seatId);
+  if (!seat) return membershipFail("named_seat_not_found");
+  await loadMembershipAuthorityState(db, seat);
+  if (seat.status === "refunded") return;
+  if (seat.status !== "refund_pending") membershipFail("named_seat_refund_not_ready");
+  const result = namedSeatIncluded(seat) ? { refundedCents: 0, refundIds: [] } : await refundNamedSeatStripePayment(secretKey, seat);
+  await db.transact([
+    membershipUpdate("networkSeat", seatId, {
+      status: "refunded",
+      refundedCents: result.refundedCents,
+      providerRefundIds: result.refundIds,
+      revision: Number(seat.revision) + 1,
+      updatedAt: now
+    }),
+    membershipUpdate("membershipEffect", `${seatId}:refund`, { status: "complete", updatedAt: now })
+  ], { mutationId: `named-seat-refunded:${seatId}`, guards: [
+    { ns: "networkSeat", id: seatId, exists: true, equals: { status: "refund_pending", revision: seat.revision } }
+  ] });
+}
+
+// src/membership-seat-operator-refund.ts
+async function refundNamedSeatByOperator(db, input, stripeSecretKey, now) {
+  const seat = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(seat, input);
+  await requestNamedSeatRefund(db, { ...input, reason: "operator" }, now);
+  await completeNamedSeatRefund(db, input.seatId, stripeSecretKey, now);
+  const refunded = await membershipLoad(db, "networkSeat", input.seatId);
+  if (refunded?.status !== "refunded" || !Number.isSafeInteger(refunded.refundedCents) || Number(refunded.refundedCents) !== Number(seat.amountCents)) {
+    throw new Error("named seat refund unconfirmed");
+  }
+  return { seatId: String(seat.id), status: "refunded", refundedCents: Number(refunded.refundedCents), subscriptionCanceled: false };
+}
+
+// src/membership-seat-window.ts
+async function liftSeatPurchaseWindow(db, scope2, now, limit = 100) {
+  membershipClock(now);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid lift limit");
   const state = await loadMembershipAuthorityState(db, scope2);
-  const policy2 = await retermPolicy(db, scope2, input.policyVersionId);
-  const receipt = { policyVersionId: policy2.id, retermed: [], unchanged: [], skipped: [], more: false };
-  const skip = (membershipId, reason) => {
-    receipt.skipped.push({ membershipId, reason });
-  };
-  let rows5;
-  if (input.membershipIds) {
-    rows5 = [];
-    for (const id7 of input.membershipIds) {
-      const member = await membershipLoad(db, "networkMembership", id7);
-      if (!member) skip(id7, "not_found");
-      else if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) skip(id7, "scope_mismatch");
-      else rows5.push(member);
-    }
-  } else {
-    const found = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
-    if (found.some((member) => Object.entries(scope2).some(([key3, value]) => member[key3] !== value))) throw new Error("membership reterm scope mismatch");
-    receipt.more = found.length > limit;
-    rows5 = found.slice(0, limit);
+  const rows5 = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
+  let lifted = 0;
+  for (const member of rows5.slice(0, limit)) {
+    if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) throw new Error("membership lift scope mismatch");
+    const offering = membershipOfferingVersion(member.offeringSnapshot);
+    if (offering.seatPurchaseWindowCalendarMonths === void 0) continue;
+    const { seatPurchaseWindowCalendarMonths: _window, ...windowless } = offering;
+    await db.transact([membershipUpdate("networkMembership", String(member.id), {
+      offeringSnapshot: windowless,
+      seatPurchaseEndsAt: Number(member.termEndsAt),
+      revision: Number(member.revision) + 1,
+      updatedAt: now
+    })], { mutationId: `seat-window-lift:${member.id}:${member.revision}`, guards: [
+      { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision } },
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } }
+    ] });
+    lifted++;
   }
-  for (const member of rows5) {
-    const id7 = String(member.id);
-    if (member.discountPolicyVersionId === policy2.id) {
-      receipt.unchanged.push(id7);
-      continue;
-    }
-    if (!RETERMABLE.has(String(member.status))) {
-      skip(id7, "status");
-      continue;
-    }
-    if (member.founding !== true) {
-      skip(id7, "not_founding");
-      continue;
-    }
-    if (member.cohort !== policy2.cohortLabel) {
-      skip(id7, "cohort_mismatch");
+  return { lifted, more: rows5.length > limit };
+}
+
+// src/membership-seat-reprice.ts
+async function lowerSeatPrice(db, scope2, now, limit = 100) {
+  membershipClock(now);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid reprice limit");
+  const state = await loadMembershipAuthorityState(db, scope2);
+  const versions = (await db.query({ membershipOfferingVersion: { $: { where: { chapterId: scope2.chapterId }, limit: 200 } } })).membershipOfferingVersion ?? [];
+  if (versions.length >= 200) throw Object.assign(new Error("policy_history_incomplete"), { code: "policy_history_incomplete" });
+  const current = versions.map((row2) => membershipOfferingVersion(row2.snapshot)).filter((offer) => offer.baseSkuId === scope2.skuId && offer.status === "published" && now >= offer.effectiveFrom && (offer.effectiveUntil === void 0 || now < offer.effectiveUntil)).sort((a, b) => b.version - a.version)[0];
+  if (!current) throw Object.assign(new Error("ambiguous_membership_policy"), { code: "ambiguous_membership_policy" });
+  const target = current.seatPriceCents;
+  const rows5 = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
+  const receipt = { seatPriceCents: target, repriced: 0, skipped: [], more: rows5.length > limit };
+  for (const member of rows5.slice(0, limit)) {
+    if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) throw new Error("membership reprice scope mismatch");
+    const id7 = String(member.id), skip = (reason) => {
+      receipt.skipped.push({ membershipId: id7, reason });
+    };
+    const offering = membershipOfferingVersion(member.offeringSnapshot);
+    if (offering.seatPriceCents <= target) {
+      skip("seat price already at or below the current offering");
       continue;
     }
-    const skuId = String(member.baseSkuId);
-    if (!policy2.discountEligibleSkuIds.includes(skuId)) {
-      skip(id7, "sku_not_discounted");
+    if (!["paid_pending_approval", "active", "cancel_at_term_end", "payment_grace"].includes(String(member.status))) {
+      skip(`membership is ${String(member.status)}`);
       continue;
     }
-    const base = Number(member.baseAmountCents), current = Number(member.renewalAmountCents);
-    const renewal = Math.round(base * (1e4 - policy2.percentOffBps) / 1e4);
-    if (!Number.isSafeInteger(base) || base <= 0 || !Number.isSafeInteger(current) || renewal > current) {
-      skip(id7, "would_not_widen");
+    const seat = member.namedSeatId ? await membershipLoad(db, "networkSeat", String(member.namedSeatId)) : void 0;
+    if (seat && (seat.status !== "payment_pending" || seat.providerPaymentIntentId !== void 0)) {
+      skip(`seat is ${String(seat.status)}`);
       continue;
     }
-    const couponId = await membershipDiscountCouponId({ ...scope2, skuId }, policy2.id);
-    let providerUpdated;
-    try {
-      const productId = await verifySubscriptionPrice(stripeSecretKey, {
-        priceId: String(member.providerPriceId),
-        priceCents: base,
-        currency: String(member.currency),
-        interval: member.interval === "month" ? "month" : "year",
-        environment: scope2.environment
-      }, true);
-      if (!productId) throw Object.assign(new Error("price has no product"), { code: "provider_mismatch" });
-      await prepareSubscriptionBillingTerms(stripeSecretKey, {
-        ...scope2,
-        priceCents: base,
-        currency: String(member.currency),
-        discountProductId: productId,
-        billingTerms: {
-          offeringVersionId: String(member.offeringVersionId),
-          discount: { policyVersionId: policy2.id, couponId, percentOffBps: policy2.percentOffBps, duration: "forever" }
-        }
-      }, false);
-      providerUpdated = await attachProviderDiscount(stripeSecretKey, scope2, member, policy2, couponId, productId);
-    } catch (error) {
-      const code = error.code;
-      if (code === "provider_mismatch" || code === "stripe_contract_mismatch") {
-        skip(id7, "provider_mismatch");
-        continue;
-      }
-      throw error;
-    }
-    try {
-      await db.transact([membershipUpdate("networkMembership", id7, {
-        discountPolicyVersionId: policy2.id,
-        discountSnapshot: policy2,
-        renewalAmountCents: renewal,
-        revision: Number(member.revision) + 1,
-        updatedAt: now
-      })], {
-        mutationId: `membership-reterm:${id7}:${policy2.id}:${member.revision}`,
-        guards: [
-          { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision, status: member.status } },
-          { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } },
-          { ns: "discountPolicyVersion", id: policy2.id, exists: true }
-        ]
-      });
-    } catch (error) {
-      if (error.code !== "transact_guard_failed") throw error;
-      return membershipFail("membership_reterm_retry_required");
+    const ops = [membershipUpdate("networkMembership", id7, { offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(member.revision) + 1, updatedAt: now })];
+    const guards = [
+      { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision } },
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } }
+    ];
+    if (seat) {
+      ops.push(membershipUpdate("networkSeat", String(seat.id), { amountCents: target, offeringSnapshot: { ...offering, seatPriceCents: target }, revision: Number(seat.revision) + 1, updatedAt: now }));
+      guards.push({ ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision, status: "payment_pending" } });
     }
-    receipt.retermed.push({
-      membershipId: id7,
-      ...typeof member.discountPolicyVersionId === "string" ? { previousPolicyVersionId: member.discountPolicyVersionId } : {},
-      previousRenewalAmountCents: current,
-      renewalAmountCents: renewal,
-      providerUpdated
-    });
+    await db.transact(ops, { mutationId: `seat-reprice:${id7}:${member.revision}`, guards });
+    receipt.repriced++;
   }
   return receipt;
 }
 
-// src/worker-routes-admin-membership-reterm.ts
-var PATH4 = "/api/admin/membership-discount/reterm";
-var SCOPE3 = /^[a-z0-9][a-z0-9-]{1,62}$/;
-var ID = /^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/;
-var BAD = "chapterId and policyVersionId are required; runtime, appId, membershipIds and limit are optional";
-var handleAdminMembershipReterm = async (req, url, env, ctx) => {
-  if (url.pathname !== PATH4) return null;
+// src/worker-routes-admin-membership-seats.ts
+var LIST = "/api/admin/membership-seats";
+var LIFT = "/api/admin/membership-seats/lift-purchase-window";
+var REPRICE = "/api/admin/membership-seats/reprice";
+var ONE = /^\/api\/admin\/membership-seats\/([A-Za-z0-9][A-Za-z0-9_.:-]{2,159})\/refund$/;
+var SCOPE = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var PUBLIC = [
+  "id",
+  "appId",
+  "chapterId",
+  "environment",
+  "runtime",
+  "applicationId",
+  "skuId",
+  "status",
+  "amountCents",
+  "currency",
+  "recipientName",
+  "recipientEmailNormalized",
+  "purchaserUserId",
+  "purchasedAt",
+  "acceptedAt",
+  "journeyApprovedAt",
+  "refundedCents",
+  "refundReason",
+  "termEndsAt",
+  "updatedAt"
+];
+var project = (row2) => Object.fromEntries(PUBLIC.filter((key3) => row2[key3] !== void 0).map((key3) => [key3, row2[key3]]));
+var handleAdminMembershipSeats = async (req, url, env, ctx) => {
+  const one = url.pathname.match(ONE), lift = url.pathname === LIFT, reprice = url.pathname === REPRICE;
+  if (url.pathname !== LIST && !one && !lift && !reprice) return null;
   const operator = ctx.membershipAuthorityOperator;
   if (!operator) return json({ error: "not found" }, 404);
-  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  if (req.method !== (one || lift || reprice ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
   const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
   if (!user) return json({ error: "unauthorized" }, 401);
   if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
@@ -4951,267 +4926,427 @@ var handleAdminMembershipReterm = async (req, url, env, ctx) => {
   } catch {
     return json({ error: "the membership authority is not hosted by this deployment" }, 404);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return json({ error: BAD }, 400);
+  if (lift || reprice) {
+    let body;
+    try {
+      body = await req.json();
+    } catch {
+      return json({ error: "chapterId and runtime are required" }, 400);
+    }
+    const appId = body.appId ?? body.chapterId;
+    if (typeof body.chapterId !== "string" || !SCOPE.test(body.chapterId) || typeof appId !== "string" || !SCOPE.test(appId) || typeof body.runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(body.runtime) || reprice && (typeof body.skuId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/.test(body.skuId))) {
+      return json({ error: reprice ? "chapterId, runtime and skuId are required" : "chapterId and runtime are required" }, 400);
+    }
+    const scope2 = { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime: body.runtime };
+    try {
+      if (reprice) return json({ ok: true, ...await lowerSeatPrice(db, { ...scope2, skuId: String(body.skuId) }, Date.now()) });
+      return json({ ok: true, ...await liftSeatPurchaseWindow(db, scope2, Date.now()) });
+    } catch (error) {
+      const code = error.code;
+      return json({ error: `${reprice ? "seat reprice" : "purchase window lift"} is pending; retry to confirm`, ...code ? { code } : {} }, code ? 409 : 503);
+    }
   }
-  const appId = body.appId ?? body.chapterId, runtime = body.runtime ?? env.ODLA_RUNTIME;
-  if (typeof body.chapterId !== "string" || !SCOPE3.test(body.chapterId) || typeof appId !== "string" || !SCOPE3.test(appId) || typeof runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(runtime) || typeof body.policyVersionId !== "string" || !ID.test(body.policyVersionId) || body.membershipIds !== void 0 && (!Array.isArray(body.membershipIds) || body.membershipIds.length === 0 || body.membershipIds.length > 200 || body.membershipIds.some((id7) => typeof id7 !== "string" || !ID.test(id7))) || body.limit !== void 0 && (!Number.isSafeInteger(body.limit) || Number(body.limit) < 1 || Number(body.limit) > 200)) {
-    return json({ error: BAD }, 400);
+  if (!one) {
+    const rows5 = (await db.query({ networkSeat: { $: { where: { environment: env.ODLA_ENV }, order: { updatedAt: "desc" }, limit: 201 } } })).networkSeat ?? [];
+    return json({ seats: rows5.slice(0, 200).map(project), truncated: rows5.length > 200 });
+  }
+  const seat = await membershipLoad(db, "networkSeat", one[1]);
+  if (!seat || seat.environment !== env.ODLA_ENV) return json({ error: "not found" }, 404);
+  if (seat.status === "refunded") {
+    return json({ ok: true, seatId: seat.id, status: "refunded", refundedCents: seat.refundedCents, subscriptionCanceled: false, replayed: true });
   }
+  if (!seat.purchasedAt) return json({ error: "seat has no completed payment to refund", code: "seat_not_refundable" }, 409);
   const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
   if (!secret) return json({ error: "network payment provider unavailable" }, 503);
   try {
-    const receipt = await retermMembershipDiscount(
-      db,
-      secret,
-      { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime },
-      {
-        policyVersionId: body.policyVersionId,
-        ...body.membershipIds ? { membershipIds: body.membershipIds } : {},
-        ...body.limit !== void 0 ? { limit: Number(body.limit) } : {}
-      },
-      Date.now()
-    );
+    const receipt = await refundNamedSeatByOperator(db, {
+      appId: String(seat.appId),
+      chapterId: String(seat.chapterId),
+      environment: String(seat.environment),
+      runtime: String(seat.runtime),
+      applicationId: String(seat.applicationId),
+      skuId: String(seat.skuId),
+      seatId: String(seat.id)
+    }, secret, Date.now());
     return json({ ok: true, ...receipt });
   } catch (error) {
     const code = error.code;
-    return json({ error: "re-term is pending; retry to confirm", ...code ? { code } : {} }, code ? 409 : 503);
-  }
-};
-
-// src/worker-routes-membership-cancel.ts
-var handleMembershipCancellation = async (req, url, env, ctx) => {
-  const match = url.pathname.match(/^\/api\/admin\/applications\/([0-9a-f-]+)\/cancel-renewal$/);
-  if (!match) return null;
-  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
-  const user = await ctx.verifyUser(req, env), raw2 = ctx.makeDb(env);
-  if (!user) return json({ error: "unauthorized" }, 401);
-  if (!await ctx.isAdmin(raw2, user)) return json({ error: "forbidden" }, 403);
-  if (!ctx.membershipAuthority?.cancelRenewal) return json({ error: "renewal cancellation unavailable" }, 503);
-  const db = raw2, app = await membershipLoad(db, "applications", match[1]);
-  if (!app || !chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME)) return json({ error: "not found" }, 404);
-  if (app.namedSeatId || app.giftClaimId) return json({ error: "this membership has no independently renewing subscription" }, 409);
-  const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(app.id));
-  if (!intent) return json({ error: "membership history needs reconciliation" }, 409);
-  try {
-    const target = await membershipTargetForIntent(intent, app, env, ctx);
-    const receipt = await ctx.membershipAuthority.cancelRenewal(target, env);
-    if (receipt.membershipId !== await networkMembershipId(target) || receipt.autoRenew !== false || !Number.isSafeInteger(receipt.termEndsAt) || !["cancel_at_term_end", "lapsed", "paid_pending_approval"].includes(receipt.status)) throw new Error("invalid cancellation receipt");
-    await db.transact([{ t: "update", ns: "applications", id: String(app.id), attrs: {
-      membershipStatus: receipt.status,
-      membershipAutoRenew: false,
-      membershipGraceEndsAt: 0,
-      renewalAt: receipt.termEndsAt
-    } }], { guards: [{
-      ns: "applications",
-      id: String(app.id),
-      exists: true,
-      equals: { status: app.status, stripeSubscriptionId: app.stripeSubscriptionId }
-    }] });
-    return json({ ok: true, accessEndsAt: receipt.termEndsAt, status: receipt.status });
-  } catch {
-    return json({ error: "renewal cancellation is pending; retry to confirm" }, 503);
+    return json({ error: "seat refund is pending; retry to confirm", ...code ? { code } : {} }, code ? 409 : 503);
   }
 };
 
-// src/scheduling.ts
-var SCHEDULING_DEFAULTS = {
-  slotMinutes: 45,
-  days: [1, 2, 3, 4, 5],
-  startHour: 9,
-  endHour: 17,
-  timezone: "America/Los_Angeles",
-  minNoticeHours: 24,
-  windowDays: 14,
-  summaryTemplate: "Introduction call with {{firstName}} {{lastName}}"
+// src/membership-policy-versions.ts
+var LIMIT = 200;
+var text2 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
+var instant = (value) => {
+  const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
+  return Number.isSafeInteger(at2) && at2 >= 0 ? at2 : void 0;
 };
-function isValidTimeZone(tz) {
-  try {
-    new Intl.DateTimeFormat(void 0, { timeZone: tz });
-    return true;
-  } catch {
-    return false;
-  }
+function provenance(row2) {
+  const source = text2(row2.source), actor = text2(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
+  return { ...source ? { source } : {}, ...actor ? { actor } : {}, ...recordedAt !== void 0 ? { recordedAt } : {} };
 }
-function resolveScheduling(config) {
-  const result = validateScheduling(config);
-  if (result.ok) return result.value;
-  const detail = Object.entries(result.errors).map(([field, message]) => `${field}: ${message}`).join(" ");
-  throw new Error(`scheduling: ${detail}`);
+var live = (w, now) => w.from <= now && (w.until === void 0 || now < w.until);
+function stateOf(item, all, now, window, rivals) {
+  if (item.status !== "published") return { state: item.status };
+  const mine = window(item);
+  if (now < mine.from) return { state: "scheduled" };
+  const closed = mine.until !== void 0 && mine.until <= now;
+  const higher = all.filter((other) => other.id !== item.id && other.status === "published" && other.version > item.version && rivals(item, other)).map(window).filter((w) => w.from <= now && (w.until === void 0 || w.until > mine.from));
+  if (!closed && !higher.some((w) => live(w, now))) return { state: "active" };
+  const dates = higher.map((w) => Math.max(w.from, mine.from));
+  if (closed) dates.push(mine.until);
+  return { state: "superseded", supersededAt: Math.min(...dates) };
 }
-function validateScheduling(config) {
-  const d = config ?? {};
-  const c = {
-    slotMinutes: d.slotMinutes ?? SCHEDULING_DEFAULTS.slotMinutes,
-    days: d.days ?? SCHEDULING_DEFAULTS.days,
-    startHour: d.startHour ?? SCHEDULING_DEFAULTS.startHour,
-    endHour: d.endHour ?? SCHEDULING_DEFAULTS.endHour,
-    timezone: d.timezone ?? SCHEDULING_DEFAULTS.timezone,
-    minNoticeHours: d.minNoticeHours ?? SCHEDULING_DEFAULTS.minNoticeHours,
-    windowDays: d.windowDays ?? SCHEDULING_DEFAULTS.windowDays,
-    summaryTemplate: d.summaryTemplate ?? SCHEDULING_DEFAULTS.summaryTemplate
-  };
-  const errors = {};
-  if (!(c.slotMinutes >= 15 && c.slotMinutes <= 240)) {
-    errors.slotMinutes = "Slot length must be between 15 and 240 minutes.";
-  }
-  if (!(c.windowDays >= 1 && c.windowDays <= 62)) {
-    errors.windowDays = "Booking window must be between 1 and 62 days (the calendar caps look-ahead at 62).";
-  }
-  if (!(c.minNoticeHours >= 0 && c.minNoticeHours <= 336)) {
-    errors.minNoticeHours = "Minimum notice must be between 0 and 336 hours.";
-  }
-  if (!(c.startHour >= 0 && c.startHour < c.endHour && c.endHour <= 24)) {
-    errors.hours = "Hours must satisfy 0 \u2264 start < end \u2264 24.";
-  }
-  const days = [...c.days];
-  if (!days.length) errors.days = "Pick at least one day.";
-  else if (!days.every((n) => Number.isInteger(n) && n >= 0 && n <= 6)) {
-    errors.days = "Days must be weekday numbers, 0 (Sunday) through 6 (Saturday).";
-  }
-  if (typeof c.timezone !== "string" || !isValidTimeZone(c.timezone)) {
-    errors.timezone = `"${String(c.timezone)}" is not a valid IANA timezone (for example "America/Los_Angeles").`;
+var mechanism = (policy2) => policy2.percentOffBps === 0 || policy2.discountEligibleSkuIds.length === 0 ? "none" : policy2.benefitDuration.kind === "while_active" ? "stripe_coupon_forever" : policy2.benefitDuration.kind === "first_term" ? "stripe_coupon_once" : "stripe_coupon_term_bound";
+var sharesSku = (a, b) => a.cohortEligibleSkuIds.some((sku) => b.cohortEligibleSkuIds.includes(sku));
+var byChapter = (a, b) => a.chapterId.localeCompare(b.chapterId);
+function normalize(rows5, collection, parse, invalid2) {
+  const out = [];
+  for (const row2 of rows5) {
+    try {
+      out.push({ value: parse(row2.snapshot), row: row2 });
+    } catch (error) {
+      invalid2.push({ collection, id: String(row2.id ?? ""), error: error instanceof Error ? error.message : String(error) });
+    }
   }
-  if (typeof c.summaryTemplate !== "string") errors.summaryTemplate = "Calendar summary template must be text.";
-  return Object.keys(errors).length > 0 ? { ok: false, errors } : { ok: true, value: { ...c, days } };
-}
-function slotWindow(now, windowDays) {
-  return { from: now, to: now + windowDays * 864e5 };
-}
-function endForSlot(startAt, slotMinutes) {
-  return startAt + slotMinutes * 6e4;
-}
-function isSlotAvailable(slots, startAt) {
-  return slots.some((s) => s.startAt === startAt);
-}
-function renderSummary(template, app) {
-  return template.replace("{{firstName}}", app.firstName ?? "").replace("{{lastName}}", app.lastName ?? "");
-}
-function bookingDecision(existing) {
-  const eventId = existing?.googleEventId ?? null;
-  return { reschedule: Boolean(eventId), eventId };
-}
-function introIdempotencyKey(applicationId) {
-  return `application:${applicationId}:intro`;
+  return out;
 }
-function meetingCreateRow(i) {
+async function listMembershipPolicyVersions(db, input) {
+  const where = input.chapterId ? { chapterId: input.chapterId } : {};
+  const rows5 = await db.query({
+    membershipOfferingVersion: { $: { where, limit: LIMIT } },
+    discountPolicyVersion: { $: { where, limit: LIMIT } }
+  });
+  const offeringRows = rows5.membershipOfferingVersion ?? [], policyRows = rows5.discountPolicyVersion ?? [];
+  const invalid2 = [];
+  const offerings = normalize(offeringRows, "membershipOfferingVersion", membershipOfferingVersion, invalid2);
+  const policies = normalize(policyRows, "discountPolicyVersion", membershipDiscountPolicyVersion, invalid2);
+  const offeringValues = offerings.map((item) => item.value), policyValues = policies.map((item) => item.value);
   return {
-    id: i.meetingId,
-    applicationId: i.applicationId,
-    groupId: i.groupId,
-    startAt: i.startAt,
-    endAt: i.endAt,
-    timezone: i.timezone,
-    status: "scheduled",
-    googleEventId: i.googleEventId,
-    ...i.meetUrl ? { meetUrl: i.meetUrl } : {},
-    ...i.htmlLink ? { htmlLink: i.htmlLink } : {},
-    drift: "none",
-    createdAt: i.createdAt
+    now: input.now,
+    chapterId: input.chapterId ?? null,
+    offerings: offerings.map(({ value, row: row2 }) => ({
+      ...value,
+      ...provenance(row2),
+      ...stateOf(
+        value,
+        offeringValues,
+        input.now,
+        (v) => ({ from: v.effectiveFrom, ...v.effectiveUntil !== void 0 ? { until: v.effectiveUntil } : {} }),
+        (a, b) => a.chapterId === b.chapterId && a.baseSkuId === b.baseSkuId
+      )
+    })).sort((a, b) => byChapter(a, b) || a.baseSkuId.localeCompare(b.baseSkuId) || b.version - a.version),
+    discountPolicies: policies.map(({ value, row: row2 }) => ({
+      ...value,
+      ...provenance(row2),
+      mechanism: mechanism(value),
+      ...stateOf(
+        value,
+        policyValues,
+        input.now,
+        (v) => ({ from: v.qualifyingStartsAt, until: v.qualifyingEndsAt }),
+        (a, b) => a.chapterId === b.chapterId && sharesSku(a, b)
+      )
+    })).sort((a, b) => byChapter(a, b) || b.version - a.version),
+    invalid: invalid2,
+    truncated: offeringRows.length >= LIMIT || policyRows.length >= LIMIT
   };
 }
-function meetingRescheduleUpdate(startAt, endAt) {
-  return { startAt, endAt, drift: "none" };
+
+// src/worker-routes-admin-membership-policy.ts
+var PATH3 = "/api/admin/membership-policy-versions";
+var SCOPE2 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var handleAdminMembershipPolicyVersions = async (req, url, env, ctx) => {
+  if (url.pathname !== PATH3) return null;
+  const operator = ctx.membershipAuthorityOperator;
+  if (!operator) return json({ error: "not found" }, 404);
+  if (req.method !== "GET") return json({ error: "method not allowed" }, 405);
+  const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
+  if (!user) return json({ error: "unauthorized" }, 401);
+  if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
+  const chapterId = url.searchParams.get("chapterId");
+  if (chapterId !== null && !SCOPE2.test(chapterId)) return json({ error: "chapterId is invalid" }, 400);
+  let db;
+  try {
+    db = operator.makeDb(env);
+  } catch {
+    return json({ error: "the membership authority is not hosted by this deployment" }, 404);
+  }
+  return json(await listMembershipPolicyVersions(db, { chapterId, now: Date.now() }));
+};
+
+// src/membership-discount-reterm.ts
+import { stripeRequest as stripeRequest7 } from "@odla-ai/stripe";
+
+// src/subscription-provider-contract.ts
+import { stripeRequest as stripeRequest6 } from "@odla-ai/stripe";
+function subscriptionContractMismatch() {
+  throw Object.assign(new Error("Stripe subscription does not match the checkout contract"), { code: "stripe_contract_mismatch" });
 }
-function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
-  return {
-    meetingAt: startAt,
-    ...htmlLink ? { meetingLink: htmlLink } : {},
-    ...currentStatus !== "call_scheduled" ? { status: "call_scheduled" } : {}
-  };
+async function verifySubscriptionPrice(secretKey, input, resume = false) {
+  if (!/^price_[A-Za-z0-9]+$/.test(input.priceId) || !Number.isSafeInteger(input.priceCents) || input.priceCents <= 0 || !/^[a-z]{3}$/.test(input.currency) || !["month", "year"].includes(input.interval)) subscriptionContractMismatch();
+  const result = await stripeRequest6({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
+  const price = result.body;
+  if (!result.ok || !price || price.id !== input.priceId || !resume && price.active !== true || price.unit_amount !== input.priceCents || price.currency !== input.currency || price.type !== "recurring" || price.billing_scheme !== "per_unit" || price.custom_unit_amount || price.transform_quantity || price.recurring?.interval !== input.interval || price.recurring?.interval_count !== 1 || price.recurring?.usage_type !== "licensed" || price.livemode !== (input.environment === "prod")) subscriptionContractMismatch();
+  return typeof price.product === "string" ? price.product : void 0;
+}
+function verifySubscriptionResult(sub, input, customerId, metadata) {
+  const items = sub?.items;
+  const seat = input.namedSeat?.amountCents ? input.namedSeat : void 0;
+  const primary = items?.data?.find((item) => item.price?.id === input.priceId);
+  const seatItem = seat && items?.data?.find((item) => item.price?.id === seat.priceId);
+  if (!sub || !/^sub_[A-Za-z0-9]+$/.test(sub.id) || sub.customer !== customerId || input.existingSubscriptionId && sub.id !== input.existingSubscriptionId || !(input.billingTerms?.initialTermEndsAt ? ["incomplete", "active", "trialing"] : ["incomplete", "active"]).includes(sub.status) || sub.livemode !== (input.environment === "prod") || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || !Array.isArray(items?.data) || items.has_more !== false || items.data.length !== (seat ? 2 : 1) || primary?.quantity !== 1 || seat && (seatItem?.quantity !== 1 || seatItem.metadata?.seatId !== seat.seatId || seatItem.metadata?.membershipId !== seat.membershipId)) subscriptionContractMismatch();
+  const invoice = sub.latest_invoice;
+  if (!invoice || typeof invoice !== "object" || invoice.customer !== customerId || invoice.currency !== input.currency || invoice.total !== subscriptionAmountDue(input) + (seat?.amountCents ?? 0) || invoice.billing_reason !== "subscription_create") subscriptionContractMismatch();
+  verifySubscriptionBillingResult(sub, input);
 }
 
-// src/session.ts
-function applicationSummary(app) {
-  return {
-    id: app.id,
-    firstName: app.firstName ?? null,
-    lastName: app.lastName ?? null,
-    email: app.email ?? null,
-    status: app.status,
-    createdAt: app.createdAt ?? null,
-    meetingLink: app.meetingLink ?? null,
-    paid: Boolean(app.stripeSubscriptionId) && app.status !== "refunded" && app.canceled !== true && !["lapsed", "refunded", "refund_pending", "canceled", "restarting"].includes(app.membershipStatus ?? ""),
-    ...app.membershipStatus ? { membershipStatus: app.membershipStatus, membershipGraceEndsAt: app.membershipGraceEndsAt, membershipAutoRenew: app.membershipAutoRenew } : {},
-    renewalAt: app.renewalAt ?? null,
-    canceled: app.canceled === true,
-    tierId: app.tierId ?? null
-  };
+// src/membership-discount-reterm.ts
+var SAFE = /^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/;
+var RETERMABLE = /* @__PURE__ */ new Set(["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace"]);
+var PROVIDER_LIVE = /* @__PURE__ */ new Set(["active", "trialing", "past_due"]);
+var couponOf = (discount) => {
+  const ref = discount?.source?.coupon ?? discount?.coupon;
+  return typeof ref === "string" ? ref : typeof ref?.id === "string" ? ref.id : void 0;
+};
+async function retermPolicy(db, scope2, id7) {
+  const row2 = await membershipLoad(db, "discountPolicyVersion", id7);
+  if (!row2) membershipFail("membership_reterm_policy_unknown");
+  let policy2;
+  try {
+    policy2 = membershipDiscountPolicyVersion(row2.snapshot);
+  } catch {
+    return membershipFail("membership_reterm_policy_ineligible");
+  }
+  if (policy2.id !== id7 || policy2.chapterId !== scope2.chapterId || policy2.status !== "published" || policy2.benefitDuration.kind !== "while_active" || policy2.percentOffBps <= 0 || policy2.discountEligibleSkuIds.length === 0) membershipFail("membership_reterm_policy_ineligible");
+  return policy2;
 }
-function memberApplication(app, meeting, defaultTimezone) {
-  const summary = applicationSummary(app);
-  let meetingAt = app.meetingAt ?? null;
-  let meetUrl = null;
-  let timezone = defaultTimezone;
-  if (meeting) {
-    timezone = meeting.timezone ?? timezone;
-    if (meeting.status === "scheduled") {
-      meetingAt = meeting.startAt ?? null;
-      meetUrl = meeting.meetUrl ?? null;
-    } else {
-      meetingAt = null;
-    }
+async function attachProviderDiscount(sk, scope2, member, policy2, couponId, productId) {
+  const subId = String(member.providerSubscriptionId), path = `/v1/subscriptions/${encodeURIComponent(subId)}`;
+  const read2 = await stripeRequest7({ secretKey: sk }, "GET", path, { "expand[0]": "discounts" });
+  const sub = read2.body, items = sub?.items?.data;
+  const metadata = { ...stripePartitionMetadata(scope2), applicationId: String(member.applicationId) };
+  if (!read2.ok || sub.id !== subId || sub.customer !== member.providerCustomerId || sub.livemode !== (scope2.environment === "prod") || !PROVIDER_LIVE.has(sub.status) || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(items) || items.length < 1 || items.length > 2 || items.filter((item) => item.price?.id === member.providerPriceId && item.quantity === 1 && item.price?.product === productId).length !== 1) {
+    throw Object.assign(new Error("provider subscription does not match the frozen membership"), { code: "provider_mismatch" });
   }
-  return { ...summary, meetingAt, meetUrl, timezone };
+  const discounts = sub.discounts ?? (sub.discount ? [sub.discount] : []);
+  if (!Array.isArray(discounts)) throw Object.assign(new Error("provider discounts unreadable"), { code: "provider_mismatch" });
+  const present = discounts.map(couponOf);
+  if (present.length === 1 && present[0] === couponId) return false;
+  if (present.length > 0) throw Object.assign(new Error("provider subscription carries an unrelated discount"), { code: "provider_mismatch" });
+  const written = await stripeRequest7({ secretKey: sk }, "POST", path, {
+    "discounts[0][coupon]": couponId,
+    "expand[0]": "discounts",
+    "metadata[discountPolicyVersionId]": policy2.id
+  }, { idempotencyKey: `membership-reterm:${String(member.id)}:${policy2.id}` });
+  const after = written.body?.discounts;
+  if (!written.ok || written.body?.id !== subId || !Array.isArray(after) || after.length !== 1 || couponOf(after[0]) !== couponId) {
+    membershipFail("membership_reterm_provider_unconfirmed");
+  }
+  return true;
 }
-
-// src/member-session-application.ts
-var local = (row2, chapterId, runtime) => row2.groupId === chapterId && (runtime ? row2.stripeRuntime === runtime : row2.stripeRuntime === void 0 || row2.stripeRuntime === "default");
-async function memberSessionApplication(db, chapterId, runtime, identity2) {
-  const lookup = async (where) => {
-    const rows5 = (await db.query({ applications: { $: { where: { groupId: chapterId, ...where }, limit: 100 } } })).applications;
-    if (!Array.isArray(rows5) || rows5.length >= 100) throw new Error("member identity lookup incomplete");
-    return rows5.filter((row2) => local(row2, chapterId, runtime));
+async function retermMembershipDiscount(db, stripeSecretKey, scope2, input, now) {
+  membershipClock(now);
+  const limit = input.limit ?? 100;
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 200) throw new TypeError("invalid reterm limit");
+  if (typeof input.policyVersionId !== "string" || !SAFE.test(input.policyVersionId)) throw new TypeError("invalid policy version id");
+  if (input.membershipIds !== void 0 && (!Array.isArray(input.membershipIds) || input.membershipIds.length === 0 || input.membershipIds.length > limit || input.membershipIds.some((id7) => typeof id7 !== "string" || !SAFE.test(id7)))) throw new TypeError("invalid membership ids");
+  const state = await loadMembershipAuthorityState(db, scope2);
+  const policy2 = await retermPolicy(db, scope2, input.policyVersionId);
+  const receipt = { policyVersionId: policy2.id, retermed: [], unchanged: [], skipped: [], more: false };
+  const skip = (membershipId, reason) => {
+    receipt.skipped.push({ membershipId, reason });
   };
-  let apps = await lookup({ clerkUserId: identity2.userId });
-  let emailFallback = false;
-  if (!apps.length && identity2.email) {
-    const normalized = normalizeChapterEmail(identity2.email);
-    const normalizedRows = await lookup({ emailNormalized: normalized });
-    const legacyRows = await lookup({ email: identity2.email });
-    apps = [...new Map([...normalizedRows, ...legacyRows].map((row2) => [row2.id, row2])).values()];
-    if (apps.length !== 1 || apps[0]?.clerkUserId !== void 0 || apps[0]?.clerkAccountPending === true || ["declined", "canceled", "refunded"].includes(String(apps[0]?.status))) return null;
-    emailFallback = true;
+  let rows5;
+  if (input.membershipIds) {
+    rows5 = [];
+    for (const id7 of input.membershipIds) {
+      const member = await membershipLoad(db, "networkMembership", id7);
+      if (!member) skip(id7, "not_found");
+      else if (Object.entries(scope2).some(([key3, value]) => member[key3] !== value)) skip(id7, "scope_mismatch");
+      else rows5.push(member);
+    }
+  } else {
+    const found = (await db.query({ networkMembership: { $: { where: { ...scope2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkMembership ?? [];
+    if (found.some((member) => Object.entries(scope2).some(([key3, value]) => member[key3] !== value))) throw new Error("membership reterm scope mismatch");
+    receipt.more = found.length > limit;
+    rows5 = found.slice(0, limit);
   }
-  let app = apps.sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0];
-  if (!app) return null;
-  if (emailFallback) {
-    const keys3 = ["groupId", "stripeRuntime", "email", "emailNormalized", "status", "clerkAccountPending"];
+  for (const member of rows5) {
+    const id7 = String(member.id);
+    if (member.discountPolicyVersionId === policy2.id) {
+      receipt.unchanged.push(id7);
+      continue;
+    }
+    if (!RETERMABLE.has(String(member.status))) {
+      skip(id7, "status");
+      continue;
+    }
+    if (member.founding !== true) {
+      skip(id7, "not_founding");
+      continue;
+    }
+    if (member.cohort !== policy2.cohortLabel) {
+      skip(id7, "cohort_mismatch");
+      continue;
+    }
+    const skuId = String(member.baseSkuId);
+    if (!policy2.discountEligibleSkuIds.includes(skuId)) {
+      skip(id7, "sku_not_discounted");
+      continue;
+    }
+    const base = Number(member.baseAmountCents), current = Number(member.renewalAmountCents);
+    const renewal = Math.round(base * (1e4 - policy2.percentOffBps) / 1e4);
+    if (!Number.isSafeInteger(base) || base <= 0 || !Number.isSafeInteger(current) || renewal > current) {
+      skip(id7, "would_not_widen");
+      continue;
+    }
+    const couponId = await membershipDiscountCouponId({ ...scope2, skuId }, policy2.id);
+    let providerUpdated;
     try {
-      await db.transact([{ t: "update", ns: "applications", id: String(app.id), attrs: { clerkUserId: identity2.userId } }], {
-        mutationId: `member-account-link:${app.id}:${identity2.userId}`,
-        guards: [{
-          ns: "applications",
-          id: String(app.id),
-          exists: true,
-          equals: Object.fromEntries(keys3.filter((key3) => app[key3] !== void 0).map((key3) => [key3, app[key3]])),
-          absent: ["clerkUserId", ...keys3.filter((key3) => app[key3] === void 0)]
-        }]
+      const productId = await verifySubscriptionPrice(stripeSecretKey, {
+        priceId: String(member.providerPriceId),
+        priceCents: base,
+        currency: String(member.currency),
+        interval: member.interval === "month" ? "month" : "year",
+        environment: scope2.environment
+      }, true);
+      if (!productId) throw Object.assign(new Error("price has no product"), { code: "provider_mismatch" });
+      await prepareSubscriptionBillingTerms(stripeSecretKey, {
+        ...scope2,
+        priceCents: base,
+        currency: String(member.currency),
+        discountProductId: productId,
+        billingTerms: {
+          offeringVersionId: String(member.offeringVersionId),
+          discount: { policyVersionId: policy2.id, couponId, percentOffBps: policy2.percentOffBps, duration: "forever" }
+        }
+      }, false);
+      providerUpdated = await attachProviderDiscount(stripeSecretKey, scope2, member, policy2, couponId, productId);
+    } catch (error) {
+      const code = error.code;
+      if (code === "provider_mismatch" || code === "stripe_contract_mismatch") {
+        skip(id7, "provider_mismatch");
+        continue;
+      }
+      throw error;
+    }
+    try {
+      await db.transact([membershipUpdate("networkMembership", id7, {
+        discountPolicyVersionId: policy2.id,
+        discountSnapshot: policy2,
+        renewalAmountCents: renewal,
+        revision: Number(member.revision) + 1,
+        updatedAt: now
+      })], {
+        mutationId: `membership-reterm:${id7}:${policy2.id}:${member.revision}`,
+        guards: [
+          { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision, status: member.status } },
+          { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative" } },
+          { ns: "discountPolicyVersion", id: policy2.id, exists: true }
+        ]
       });
     } catch (error) {
       if (error.code !== "transact_guard_failed") throw error;
+      return membershipFail("membership_reterm_retry_required");
     }
-    const saved = (await db.query({ applications: { $: { where: { id: app.id }, limit: 1 } } })).applications?.[0];
-    if (!saved || !local(saved, chapterId, runtime) || saved.clerkUserId !== identity2.userId || keys3.some((key3) => saved[key3] !== app[key3])) return null;
-    app = saved;
+    receipt.retermed.push({
+      membershipId: id7,
+      ...typeof member.discountPolicyVersionId === "string" ? { previousPolicyVersionId: member.discountPolicyVersionId } : {},
+      previousRenewalAmountCents: current,
+      renewalAmountCents: renewal,
+      providerUpdated
+    });
   }
-  const meeting = (await db.query({ meetings: { $: {
-    where: { applicationId: app.id, status: "scheduled" },
-    order: { createdAt: "desc" },
-    limit: 1
-  } } })).meetings?.[0];
-  const group = (await db.query({ groups: { $: { where: { id: chapterId }, limit: 1 } } })).groups?.[0];
-  const timezone = resolveScheduling(group?.schedulingJson).timezone;
-  return { source: app, application: memberApplication(
-    app,
-    meeting,
-    timezone
-  ) };
+  return receipt;
 }
 
+// src/worker-routes-admin-membership-reterm.ts
+var PATH4 = "/api/admin/membership-discount/reterm";
+var SCOPE3 = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var ID = /^[A-Za-z0-9][A-Za-z0-9_.:-]{2,159}$/;
+var BAD = "chapterId and policyVersionId are required; runtime, appId, membershipIds and limit are optional";
+var handleAdminMembershipReterm = async (req, url, env, ctx) => {
+  if (url.pathname !== PATH4) return null;
+  const operator = ctx.membershipAuthorityOperator;
+  if (!operator) return json({ error: "not found" }, 404);
+  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
+  if (!user) return json({ error: "unauthorized" }, 401);
+  if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
+  let db;
+  try {
+    db = operator.makeDb(env);
+  } catch {
+    return json({ error: "the membership authority is not hosted by this deployment" }, 404);
+  }
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return json({ error: BAD }, 400);
+  }
+  const appId = body.appId ?? body.chapterId, runtime = body.runtime ?? env.ODLA_RUNTIME;
+  if (typeof body.chapterId !== "string" || !SCOPE3.test(body.chapterId) || typeof appId !== "string" || !SCOPE3.test(appId) || typeof runtime !== "string" || !/^[a-z0-9]{2,12}$/.test(runtime) || typeof body.policyVersionId !== "string" || !ID.test(body.policyVersionId) || body.membershipIds !== void 0 && (!Array.isArray(body.membershipIds) || body.membershipIds.length === 0 || body.membershipIds.length > 200 || body.membershipIds.some((id7) => typeof id7 !== "string" || !ID.test(id7))) || body.limit !== void 0 && (!Number.isSafeInteger(body.limit) || Number(body.limit) < 1 || Number(body.limit) > 200)) {
+    return json({ error: BAD }, 400);
+  }
+  const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
+  if (!secret) return json({ error: "network payment provider unavailable" }, 503);
+  try {
+    const receipt = await retermMembershipDiscount(
+      db,
+      secret,
+      { appId, chapterId: body.chapterId, environment: env.ODLA_ENV, runtime },
+      {
+        policyVersionId: body.policyVersionId,
+        ...body.membershipIds ? { membershipIds: body.membershipIds } : {},
+        ...body.limit !== void 0 ? { limit: Number(body.limit) } : {}
+      },
+      Date.now()
+    );
+    return json({ ok: true, ...receipt });
+  } catch (error) {
+    const code = error.code;
+    return json({ error: "re-term is pending; retry to confirm", ...code ? { code } : {} }, code ? 409 : 503);
+  }
+};
+
+// src/worker-routes-membership-cancel.ts
+var handleMembershipCancellation = async (req, url, env, ctx) => {
+  const match = url.pathname.match(/^\/api\/admin\/applications\/([0-9a-f-]+)\/cancel-renewal$/);
+  if (!match) return null;
+  if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+  const user = await ctx.verifyUser(req, env), raw2 = ctx.makeDb(env);
+  if (!user) return json({ error: "unauthorized" }, 401);
+  if (!await ctx.isAdmin(raw2, user)) return json({ error: "forbidden" }, 403);
+  if (!ctx.membershipAuthority?.cancelRenewal) return json({ error: "renewal cancellation unavailable" }, 503);
+  const db = raw2, app = await membershipLoad(db, "applications", match[1]);
+  if (!app || !chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME)) return json({ error: "not found" }, 404);
+  if (app.namedSeatId || app.giftClaimId) return json({ error: "this membership has no independently renewing subscription" }, 409);
+  const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(app.id));
+  if (!intent) return json({ error: "membership history needs reconciliation" }, 409);
+  try {
+    const target = await membershipTargetForIntent(intent, app, env, ctx);
+    const receipt = await ctx.membershipAuthority.cancelRenewal(target, env);
+    if (receipt.membershipId !== await networkMembershipId(target) || receipt.autoRenew !== false || !Number.isSafeInteger(receipt.termEndsAt) || !["cancel_at_term_end", "lapsed", "paid_pending_approval"].includes(receipt.status)) throw new Error("invalid cancellation receipt");
+    await db.transact([{ t: "update", ns: "applications", id: String(app.id), attrs: {
+      membershipStatus: receipt.status,
+      membershipAutoRenew: false,
+      membershipGraceEndsAt: 0,
+      renewalAt: receipt.termEndsAt
+    } }], { guards: [{
+      ns: "applications",
+      id: String(app.id),
+      exists: true,
+      equals: { status: app.status, stripeSubscriptionId: app.stripeSubscriptionId }
+    }] });
+    return json({ ok: true, accessEndsAt: receipt.termEndsAt, status: receipt.status });
+  } catch {
+    return json({ error: "renewal cancellation is pending; retry to confirm" }, 503);
+  }
+};
+
 // src/worker-routes-membership-restart.ts
 async function memberRestartState(db, env, ctx, app) {
   if (!ctx.membershipAuthority?.restart || app.namedSeatId || app.giftClaimId) return null;
@@ -5439,6 +5574,7 @@ async function submitApplication(db, chapter, fields, opts) {
     clerkUserId: opts.namedSeat.userId,
     clerkAccountPending: false
   });
+  if (opts.predecessor?.clerkUserId && !opts.namedSeat) Object.assign(row2, { clerkUserId: opts.predecessor.clerkUserId, clerkAccountPending: false });
   if (typeof fields.email === "string" && isValidEmail(fields.email.trim())) {
     row2.emailNormalized = normalizeChapterEmail(fields.email);
     row2.signupEmailKey = row2.emailNormalized;
@@ -5457,6 +5593,8 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (acked) row2.disclaimerAckAt = opts.now;
   const ops = [
+    // The unique signup key leaves the closed predecessor before the new attempt takes it.
+    ...opts.predecessor && opts.predecessor.id !== id7 ? [{ t: "retract", ns: "applications", id: opts.predecessor.id, attrs: ["signupEmailKey"] }] : [],
     { t: "update", ns: "applications", id: id7, attrs: row2 }
   ];
   if (opts.admissionGrant?.decision === "waive_interview") {
@@ -5504,27 +5642,35 @@ function joinConfig(group, paymentsReady, tiers = [], conditions = {}) {
 
 // src/signup-eligibility.ts
 var signupConflict = { code: "account_already_exists", message: "An account or application already exists for this email. Please sign in to continue." };
-async function checkSignupEligibility(db, chapter, fields, submissionId) {
-  if (typeof fields.email !== "string" || !isValidEmail(fields.email.trim())) return null;
+var closedApplication = (row2) => row2.canceled === true || ["declined", "refunded", "canceled"].includes(String(row2.status));
+async function resolveSignupEligibility(db, chapter, fields, submissionId) {
+  if (typeof fields.email !== "string" || !isValidEmail(fields.email.trim())) return { conflict: null, predecessor: null };
   const email = normalizeChapterEmail(fields.email);
   const applicationId = submissionId ? await applicationIdForSubmission(submissionId) : void 0;
-  const conflict = () => Response.json({ error: signupConflict }, { status: 409 });
+  const conflict = () => ({ conflict: Response.json({ error: signupConflict }, { status: 409 }), predecessor: null });
   try {
     const data = await db.query({
-      applications: { $: { where: { emailNormalized: email }, limit: 2 } },
+      applications: { $: { where: { emailNormalized: email }, limit: 10 } },
       $users: { $: { where: { email }, limit: 2 } }
     });
-    if ((data.applications ?? []).some((row2) => row2.id !== applicationId)) return conflict();
-    const original = (data.applications ?? []).find((row2) => row2.id === applicationId && row2.groupId === chapter.id);
-    if ((data.$users ?? []).some((row2) => row2.deleted !== true && row2.id !== original?.clerkUserId)) return conflict();
-    if (chapter.account === "none") return null;
+    const rows5 = data.applications ?? [], others = rows5.filter((row2) => row2.id !== applicationId);
+    const closed = others.filter((row2) => row2.groupId === chapter.id && closedApplication(row2)).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0));
+    if (others.length !== closed.length) return conflict();
+    const original = rows5.find((row2) => row2.id === applicationId && row2.groupId === chapter.id);
+    const owned = (userId) => original?.clerkUserId === userId || closed.some((row2) => row2.clerkUserId === userId);
+    if ((data.$users ?? []).some((row2) => row2.deleted !== true && !owned(row2.id))) return conflict();
+    const predecessor = (clerkUserId) => closed.length ? { id: String(closed[0].id), ...clerkUserId ? { clerkUserId } : {} } : null;
+    if (chapter.account === "none") return { conflict: null, predecessor: predecessor(typeof closed[0]?.clerkUserId === "string" ? closed[0].clerkUserId : void 0) };
     const secret = await getVaultSecret(db, "clerk_secret_key");
-    if (!secret) return Response.json({ error: { code: "clerk_secret_unavailable", message: "account provisioning credential is unavailable" } }, { status: 503 });
+    if (!secret) return { conflict: Response.json({ error: { code: "clerk_secret_unavailable", message: "account provisioning credential is unavailable" } }, { status: 503 }), predecessor: null };
     const account = await findSignupAccount(secret, email);
-    if (account && !(original && (original.clerkUserId === account.id || belongsToSignup(account, original.id)))) return conflict();
-    return null;
+    if (!account) return { conflict: null, predecessor: predecessor() };
+    if (original && (original.clerkUserId === account.id || belongsToSignup(account, original.id))) return { conflict: null, predecessor: null };
+    const owner = closed.find((row2) => row2.clerkUserId === account.id || belongsToSignup(account, row2.id));
+    if (!owner) return conflict();
+    return { conflict: null, predecessor: { id: String(owner.id), clerkUserId: account.id } };
   } catch {
-    return Response.json({ error: { code: "signup_lookup_unavailable", message: "Signup is temporarily unavailable. Please try again." } }, { status: 503 });
+    return { conflict: Response.json({ error: { code: "signup_lookup_unavailable", message: "Signup is temporarily unavailable. Please try again." } }, { status: 503 }), predecessor: null };
   }
 }
 async function rejectUnprovisionedSignup(db, applicationId, status2) {
@@ -6690,8 +6836,12 @@ async function namedSeatApplicationContext(req, seatId, env, ctx) {
 }
 async function existingNamedSeatApplication(context, env, ctx) {
   const { db, userId, email, invitation } = context;
-  const apps = (await db.query({ applications: { $: { where: { emailNormalized: normalizeChapterEmail(email) }, limit: 2 } } })).applications ?? [];
-  if (!apps.length) return null;
+  const rows5 = (await db.query({ applications: { $: { where: { emailNormalized: normalizeChapterEmail(email) }, limit: 10 } } })).applications ?? [];
+  const apps = rows5.filter((row2) => !closedApplication(row2));
+  if (!apps.length) {
+    const closed = rows5.filter((row2) => row2.groupId === ctx.chapter.id).sort((a, b) => Number(b.createdAt ?? 0) - Number(a.createdAt ?? 0))[0];
+    return { predecessor: closed ? { id: String(closed.id) } : null };
+  }
   const app = apps[0];
   if (apps.length !== 1 || app.clerkUserId !== userId || app.groupId !== ctx.chapter.id || stripeRuntimeIdentity(app.stripeRuntime) !== stripeRuntimeIdentity(env.ODLA_RUNTIME) || app.canceled === true || app.stripeSubscriptionId || app.giftClaimId || app.giftOfferId || app.giftIntentId || app.membershipRestartId || (app.namedSeatId ? app.namedSeatId !== invitation.seatId : app.status !== ctx.chapter.pipeline.initial)) {
     return json({ error: "Your existing application cannot accept this invitation. Contact the chapter for help.", code: "application_conflict" }, 409);
@@ -7207,8 +7357,8 @@ var handleMember = async (req, url, env, ctx) => {
       parsed.tierId = named.invitation.skuId;
       submissionId = `named-seat:${named.invitation.seatId}:${named.userId}`;
     }
-    const signupFailure = named ? null : await checkSignupEligibility(db, chapter, parsed, submissionId);
-    if (signupFailure) return signupFailure;
+    const eligibility = named ? null : await resolveSignupEligibility(db, chapter, parsed, submissionId);
+    if (eligibility?.conflict) return eligibility.conflict;
     const activeControl = chapter.signupControl ? await loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : null;
     const effectiveChapter = activeControl ? { ...chapter, application: controlledApplication(chapter.application, activeControl.document) } : chapter;
     const offeredTierIds = typeof parsed.tierId === "string" && parsed.tierId ? (await loadTiers(db, { id: chapter.id })).map((tier) => tier.id) : void 0;
@@ -7219,7 +7369,8 @@ var handleMember = async (req, url, env, ctx) => {
     const effectiveGrant = !named && !giftOffer && typeof parsed.email === "string" ? await findAdmissionGrant(db, chapter.id, parsed.email, now) : null;
     const existing = named ? await existingNamedSeatApplication(named, env, ctx) : null;
     if (existing instanceof Response) return existing;
-    const result = existing ?? await submitApplication(db, effectiveChapter, parsed, {
+    const predecessor = existing && "predecessor" in existing ? existing.predecessor : eligibility?.predecessor ?? null;
+    const result = existing && "ok" in existing ? existing : await submitApplication(db, effectiveChapter, parsed, {
       submissionId,
       groupId: chapter.id,
       runtime: stripeRuntimeIdentity(env.ODLA_RUNTIME),
@@ -7228,7 +7379,8 @@ var handleMember = async (req, url, env, ctx) => {
       ...named ? { namedSeat: { seatId: named.invitation.seatId, primaryApplicationId: named.invitation.primaryApplicationId, userId: named.userId } } : {},
       ...named ? { tierIds: [named.invitation.skuId] } : offeredTierIds ? { tierIds: offeredTierIds } : {},
       ...effectiveGrant?.decision === "waive_interview" ? { admissionGrant: effectiveGrant } : {},
-      ...giftOffer ? { giftOfferId: giftOffer.id } : {}
+      ...giftOffer ? { giftOfferId: giftOffer.id } : {},
+      ...predecessor ? { predecessor } : {}
     });
     if (!result.ok) return json({ error: result.error, ...result.code ? { code: result.code } : {} }, result.status ?? 400);
     const apps = (await db.query({ applications: { $: { where: { id: result.id }, limit: 1 } } })).applications;
@@ -7248,6 +7400,7 @@ var handleMember = async (req, url, env, ctx) => {
       if (provisioningFailure.status === 409) await rejectUnprovisionedSignup(db, result.id, canonical3.status);
       return json(provisioningFailure.body, provisioningFailure.status);
     }
+    if (predecessor) await syncApplicationToCrm(crmDeps(db, ctx), { app: canonical3, stage: String(canonical3.status) }).catch(() => void 0);
     const groups = (await db.query({ groups: { $: { where: { id: chapter.id }, limit: 1 } } })).groups;
     const group = Array.isArray(groups) ? groups[0] : void 0;
     const notice = group ? { group, application: canonical3, origin: url.origin } : null;
@@ -10198,6 +10351,128 @@ var handleGifts = async (req, url, env, ctx) => {
   return null;
 };
 
+// src/membership-effect-kinds.ts
+var MEMBERSHIP_CHAPTER_EFFECT_KINDS = [
+  "invite_named_recipient",
+  "grant_named_recipient_access",
+  "revoke_named_recipient_access",
+  "release_named_recipient"
+];
+var namedSeatInvitationOpen = (member) => ["active", "cancel_at_term_end"].includes(String(member.status)) && Number.isSafeInteger(member.journeyApprovedAt);
+
+// src/membership-seat-regift.ts
+var REGIFTABLE_SEAT_STATUSES = ["pending_acceptance", "pending_approval", "pending_primary"];
+var namedSeatRegiftable = (seat) => REGIFTABLE_SEAT_STATUSES.includes(String(seat.status));
+var receiptFor2 = (seat, released) => ({
+  seatId: String(seat.id),
+  status: "pending_acceptance",
+  recipientName: String(seat.recipientName),
+  recipientEmail: String(seat.recipientEmailNormalized),
+  regiftedAt: Number(seat.regiftedAt),
+  releasedRecipientApplicationId: released
+});
+async function regiftNamedSeat(db, input, now) {
+  membershipClock(now);
+  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
+  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) membershipFail("invalid_named_seat_recipient");
+  const state = await loadMembershipAuthorityState(db, input);
+  const seat = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(seat, input);
+  const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
+  requireMembershipScope(member, input);
+  if (member.namedSeatId !== seat.id) membershipFail("named_seat_primary_conflict");
+  if (typeof seat.purchaserEmailNormalized === "string" && seat.purchaserEmailNormalized === email) membershipFail("invalid_named_seat_recipient");
+  const history = Array.isArray(seat.formerRecipients) ? seat.formerRecipients : [];
+  if (seat.recipientEmailNormalized === email && seat.recipientName === name && seat.regiftedAt !== void 0 && seat.status === "pending_acceptance") {
+    return receiptFor2(seat, history.at(-1)?.recipientApplicationId ?? null);
+  }
+  if (!namedSeatRegiftable(seat)) membershipFail("named_seat_not_regiftable");
+  if (seat.recipientEmailNormalized === email) membershipFail("named_seat_recipient_unchanged");
+  const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
+  requireMembershipScope(entitlement, input);
+  const claimId = await namedSeatRecipientClaimId(input, email);
+  const former = {
+    recipientName: String(seat.recipientName),
+    recipientEmail: String(seat.recipientEmailNormalized),
+    recipientClaimId: String(seat.recipientClaimId),
+    releasedAt: now,
+    ...typeof seat.recipientUserId === "string" ? { recipientUserId: seat.recipientUserId } : {},
+    ...typeof seat.recipientApplicationId === "string" ? { recipientApplicationId: seat.recipientApplicationId } : {},
+    ...Number.isSafeInteger(seat.acceptedAt) ? { acceptedAt: Number(seat.acceptedAt) } : {},
+    ...Number.isSafeInteger(seat.journeyApprovedAt) ? { journeyApprovedAt: Number(seat.journeyApprovedAt) } : {}
+  };
+  const generation = history.length + 1, inviteId = `${seat.id}:invite:${generation}`, releaseId = `${seat.id}:release:${generation}`;
+  const bound = Boolean(former.recipientUserId && former.recipientApplicationId);
+  const stale = ((await db.query({ membershipEffect: { $: { where: { seatId: seat.id, kind: "invite_named_recipient", status: "pending" }, limit: 10 } } })).membershipEffect ?? []).filter((row2) => row2.chapterId === input.chapterId && row2.environment === input.environment && row2.runtime === input.runtime);
+  const cleared = ["recipientUserId", "recipientApplicationId", "acceptedAt", "journeyApprovedAt"];
+  const effect = (id7, kind, extra = {}) => membershipUpdate("membershipEffect", id7, {
+    id: id7,
+    chapterId: input.chapterId,
+    environment: input.environment,
+    runtime: input.runtime,
+    membershipId: member.id,
+    seatId: seat.id,
+    kind,
+    status: "pending",
+    attempts: 0,
+    createdAt: now,
+    updatedAt: now,
+    ...extra
+  });
+  const ops = [
+    membershipUpdate("networkSeat", String(seat.id), {
+      recipientName: name,
+      recipientEmailNormalized: email,
+      recipientClaimId: claimId,
+      status: "pending_acceptance",
+      regiftedAt: now,
+      formerRecipients: [...history, former],
+      revision: Number(seat.revision) + 1,
+      updatedAt: now
+    }),
+    { t: "retract", ns: "networkSeat", id: String(seat.id), attrs: cleared },
+    membershipUpdate("networkEntitlement", String(entitlement.id), { status: "pending_acceptance", revision: Number(entitlement.revision) + 1, updatedAt: now }),
+    { t: "retract", ns: "networkEntitlement", id: String(entitlement.id), attrs: cleared },
+    { t: "delete", ns: "networkSeatRecipient", id: String(seat.recipientClaimId) },
+    membershipUpdate("networkSeatRecipient", claimId, {
+      id: claimId,
+      appId: input.appId,
+      chapterId: input.chapterId,
+      environment: input.environment,
+      runtime: input.runtime,
+      seatId: seat.id,
+      recipientEmailNormalized: email,
+      createdAt: now
+    }),
+    ...stale.map((row2) => membershipUpdate("membershipEffect", String(row2.id), { status: "complete", updatedAt: now })),
+    effect(inviteId, "invite_named_recipient"),
+    ...bound ? [effect(releaseId, "release_named_recipient", { recipientUserId: former.recipientUserId, recipientApplicationId: former.recipientApplicationId })] : []
+  ];
+  try {
+    await db.transact(ops, { mutationId: `named-seat-regift:${seat.id}:${generation}`, guards: [
+      { ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision, status: seat.status } },
+      { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } },
+      { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision, namedSeatId: seat.id } },
+      { ns: "networkSeatRecipient", id: claimId, exists: false },
+      ...stale.map((row2) => ({ ns: "membershipEffect", id: String(row2.id), exists: true, equals: { status: "pending" } })),
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+    ] });
+  } catch (error) {
+    if (error.code !== "transact_guard_failed") throw error;
+    const current = await membershipLoad(db, "networkSeat", input.seatId);
+    requireMembershipScope(current, input);
+    if (current.recipientEmailNormalized === email && current.status === "pending_acceptance") return receiptFor2(current, former.recipientApplicationId ?? null);
+    const claim = await membershipLoad(db, "networkSeatRecipient", claimId);
+    if (claim && claim.seatId !== seat.id) membershipFail("named_seat_recipient_unavailable");
+    membershipFail("named_seat_regift_retry_required");
+  }
+  const saved = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(saved, input);
+  if (saved.recipientEmailNormalized !== email || saved.status !== "pending_acceptance") membershipFail("named_seat_regift_retry_required");
+  return receiptFor2(saved, former.recipientApplicationId ?? null);
+}
+
 // src/membership-seat-offer.ts
 async function namedSeatOfferDigest(offer) {
   const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
@@ -10241,7 +10516,10 @@ async function readNamedSeatOffer(db, input, now) {
       recipientState: namedSeatRecipientState(seat),
       ...at(seat.purchasedAt) !== void 0 ? { purchasedAt: at(seat.purchasedAt) } : {},
       ...at(seat.acceptedAt) !== void 0 ? { acceptedAt: at(seat.acceptedAt) } : {},
-      ...seat.status === "active" && at(seat.journeyApprovedAt) !== void 0 ? { joinedAt: at(seat.journeyApprovedAt) } : {}
+      ...seat.status === "active" && at(seat.journeyApprovedAt) !== void 0 ? { joinedAt: at(seat.journeyApprovedAt) } : {},
+      ...seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && !namedSeatInvitationOpen(member) ? { invitationHeld: true } : {},
+      ...namedSeatRegiftable(seat) ? { regiftable: true } : {},
+      ...at(seat.regiftedAt) !== void 0 ? { regiftedAt: at(seat.regiftedAt) } : {}
     } } : {}
   };
   return {
@@ -10252,40 +10530,6 @@ async function readNamedSeatOffer(db, input, now) {
   };
 }
 
-// src/named-seat-request.ts
-async function smallRequestBody(req) {
-  const reader = req.body?.getReader();
-  if (!reader) throw new Error("request body required");
-  const chunks = [];
-  let size = 0;
-  try {
-    while (true) {
-      const chunk = await reader.read();
-      if (chunk.done) break;
-      size += chunk.value.byteLength;
-      if (size > 4096) {
-        await reader.cancel();
-        throw new Error("request too large");
-      }
-      chunks.push(chunk.value);
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  const bytes = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-}
-async function namedSeatRequest(req) {
-  const body = JSON.parse(await smallRequestBody(req));
-  if (!body || typeof body !== "object" || Array.isArray(body)) throw new Error("object required");
-  return body;
-}
-
 // src/worker-routes-named-seat.ts
 var handleNamedSeat = async (req, url, env, ctx) => {
   if (!["/api/named-seat", "/api/named-seat/checkout"].includes(url.pathname)) return null;
@@ -10691,7 +10935,8 @@ function applicationActionStages(app, env, ctx) {
     if (to === from) return false;
     if (to === "approved") return canApprove(from, ctx.chapter.pipeline) && from !== "declined";
     if (to === "refunded") return Boolean(app.namedSeatId || app.stripeCustomerId && app.stripeSubscriptionId) && (!ctx.chapter.operations.refund.allowedFrom || ctx.chapter.operations.refund.allowedFrom.includes(from));
-    if (ctx.membershipAuthority && ["submitted", "paid_pending_vetting", "declined", "canceled"].includes(to)) return false;
+    if (to === "declined" && ctx.membershipAuthority) return !app.namedSeatId && !app.stripeSubscriptionId && canTransition(from, to, ctx.chapter.pipeline);
+    if (ctx.membershipAuthority && ["submitted", "paid_pending_vetting", "canceled"].includes(to)) return false;
     return canTransition(from, to, ctx.chapter.pipeline);
   });
 }
@@ -10824,18 +11069,36 @@ var handleAdminScheduling = async (req, url, env, ctx) => {
   const got = await adminGroup(req, env, ctx, url);
   if (got instanceof Response) return got;
   const { db, group } = got;
+  const stored = group.schedulingJson && typeof group.schedulingJson === "object" && !Array.isArray(group.schedulingJson) ? group.schedulingJson : {};
   if (req.method === "GET") {
-    return json({ scheduling: resolveScheduling(group.schedulingJson) });
+    const current = validateScheduling(stored);
+    if (!current.ok) return json({
+      error: "stored scheduling config is invalid; save the form to repair it",
+      errors: current.errors,
+      scheduling: { ...resolveScheduling(void 0), ...stored }
+    }, 409);
+    return json({ scheduling: current.value });
   }
   let body;
   try {
     body = JSON.parse(await req.text());
+    if (!body || typeof body !== "object" || Array.isArray(body)) throw new TypeError("object required");
   } catch {
     return json({ error: "invalid JSON body" }, 400);
   }
-  const checked = validateScheduling(body);
+  const checked = validateScheduling({ ...stored, ...body });
   if (!checked.ok) return json({ error: "invalid scheduling config", errors: checked.errors }, 400);
-  await db.transact([{ t: "update", ns: "groups", id: String(group.id), attrs: { schedulingJson: checked.value } }]);
+  try {
+    await db.transact([{ t: "update", ns: "groups", id: String(group.id), attrs: { schedulingJson: checked.value } }]);
+  } catch (error) {
+    const code = error.code;
+    console.error("admin_scheduling_write_failed", { code: typeof code === "string" ? code : "unknown" });
+    return json({
+      error: "availability could not be saved; retry",
+      code: "scheduling_write_failed",
+      ...typeof code === "string" ? { cause: code } : {}
+    }, 503);
+  }
   return json({ scheduling: checked.value });
 };
 async function upcomingEvents(env) {
@@ -11461,6 +11724,116 @@ async function refundApplication(db, env, ctx, app) {
   }
 }
 
+// src/decline-application.ts
+var DECLINABLE_FROM = (status2) => !["approved", "declined", "refunded", "canceled"].includes(status2);
+async function paymentHeld(db, env, ctx, app) {
+  const intent = await membershipLoad(db, "subscriptionCheckoutIntents", String(app.id));
+  if (ctx.membershipAuthority && intent) {
+    try {
+      const target = await membershipTargetForIntent(intent, app, env, ctx);
+      const receipt = await verifyMembershipAccessReceipt(await ctx.membershipAuthority.readAccess(target, env), target, Date.now());
+      return receipt.status !== "unpaid";
+    } catch {
+      return json({ error: "membership authority unavailable; retry before declining", code: "authority_unavailable" }, 503);
+    }
+  }
+  return applicationSummary(app).paid || Boolean(intent?.paymentReceipt);
+}
+async function declineApplication(db, env, ctx, app) {
+  if (!chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME)) return json({ error: "not found" }, 404);
+  const id7 = String(app.id), status2 = String(app.status ?? "");
+  if (status2 === "declined") return json({ ok: true, status: "declined", replayed: true });
+  if (app.canceled === true || !DECLINABLE_FROM(status2)) return json({ error: `cannot decline from status "${status2}"`, code: "not_declinable" }, 409);
+  if (app.namedSeatId) return json({ error: "a gifted seat is released by naming someone else, or refunded", code: "named_seat_recipient" }, 409);
+  if (!ctx.chapter.pipeline.stages.includes("declined")) return json({ error: "this chapter's pipeline has no declined stage" }, 409);
+  const held = await paymentHeld(db, env, ctx, app);
+  if (held instanceof Response) return held;
+  if (held) return json({ error: "a payment is held for this application; refund it instead", code: "payment_held" }, 409);
+  try {
+    await db.transact(
+      [{ t: "update", ns: "applications", id: id7, attrs: { status: "declined", canceled: true } }],
+      { mutationId: `decline:${id7}:${status2}`, guards: [{ ns: "applications", id: id7, exists: true, equals: { status: status2 } }] }
+    );
+  } catch (error) {
+    if (error.code !== "transact_guard_failed") throw error;
+    return json({ error: "application changed; reload before declining" }, 409);
+  }
+  await syncApplicationToCrm(crmDeps(db, ctx), { app: { ...app, status: "declined", canceled: true }, stage: "declined" }).catch(() => void 0);
+  return json({ ok: true, status: "declined" });
+}
+
+// src/refund-continue.ts
+var BILLING_FIELDS = [
+  "stripeSubscriptionId",
+  "stripeCustomerId",
+  "canceled",
+  "renewalAt",
+  "refundPolicyAckAt",
+  "membershipStatus",
+  "membershipGraceEndsAt",
+  "membershipAutoRenew",
+  "approvalEffectsPending",
+  "approvalEffectsOrigin",
+  "approvalEffectsLastAttemptAt",
+  "membershipRestartId"
+];
+async function resolveFreeTier(db, ctx, app, tierId) {
+  const group = await membershipLoad(db, "groups", String(app.groupId ?? ctx.chapter.id));
+  const tier = group ? findTier(await loadTiers(db, group), tierId) : null;
+  if (!tier || !tierIsFree(tier) || tier.active === false) return json({ error: "continueAs must name an active free tier of this chapter", code: "free_tier_required" }, 400);
+  if (!ctx.chapter.pipeline.approvableFrom.length) return json({ error: "this chapter's pipeline has no approvable stage" }, 409);
+  if (app.namedSeatId) return json({ error: "a gifted seat cannot continue as a free member", code: "named_seat_recipient" }, 409);
+  return tier;
+}
+async function continueApplicationOnFreeTier(db, env, ctx, app, tier, origin) {
+  const id7 = String(app.id), now = Date.now();
+  const approvable = ctx.chapter.pipeline.approvableFrom.at(-1);
+  if (!approvable) return json({ error: "this chapter's pipeline has no approvable stage" }, 409);
+  const current = await membershipLoad(db, "applications", id7);
+  if (!current || !chapterBillingApplication(current, ctx.chapter.id, env.ODLA_RUNTIME)) return json({ error: "not found" }, 404);
+  if (current.status === "refunded") {
+    const intent = await membershipLoad(db, "subscriptionCheckoutIntents", id7), quote = await membershipLoad(db, "membershipQuoteProjections", id7);
+    const subscription = typeof intent?.providerSubscriptionId === "string" ? intent.providerSubscriptionId : null;
+    const historyId = `${id7}:continue:${subscription ?? "none"}`;
+    const ops = [
+      ...intent && subscription ? [{ t: "update", ns: "membershipCheckoutHistory", id: historyId, attrs: {
+        id: historyId,
+        applicationId: id7,
+        appId: env.ODLA_APP_ID,
+        chapterId: ctx.chapter.id,
+        environment: env.ODLA_ENV,
+        runtime: stripeRuntimeIdentity(env.ODLA_RUNTIME),
+        skuId: String(current.tierId ?? intent.tierId ?? ""),
+        providerSubscriptionId: subscription,
+        applicationSnapshot: current,
+        intentSnapshot: intent,
+        quoteSnapshot: quote ?? {},
+        archivedAt: now
+      } }] : [],
+      ...intent ? [{ t: "delete", ns: "subscriptionCheckoutIntents", id: id7 }] : [],
+      ...quote ? [{ t: "update", ns: "membershipQuoteProjections", id: id7, attrs: { status: "continued", updatedAt: now } }] : [],
+      { t: "retract", ns: "applications", id: id7, attrs: BILLING_FIELDS.filter((key3) => current[key3] !== void 0) },
+      { t: "update", ns: "applications", id: id7, attrs: { tierId: tier.id, status: approvable } }
+    ];
+    try {
+      await db.transact(ops, { mutationId: `continue-free:${id7}:${subscription ?? "none"}`, guards: [
+        { ns: "applications", id: id7, exists: true, equals: { status: "refunded", ...current.tierId !== void 0 ? { tierId: current.tierId } : {} } },
+        ...intent && subscription ? [{ ns: "membershipCheckoutHistory", id: historyId, exists: false }] : []
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+      return json({ error: "application changed; reload before continuing", code: "continue_conflict" }, 409);
+    }
+  } else if (current.tierId !== tier.id || ![approvable, "approved"].includes(String(current.status))) {
+    return json({ error: `cannot continue as ${tier.id} from status "${String(current.status)}"; refund first`, code: "continue_conflict" }, 409);
+  }
+  const converted = await membershipLoad(db, "applications", id7);
+  if (!converted || converted.tierId !== tier.id) return json({ error: "conversion pending; retry", code: "continue_pending" }, 503);
+  const approved = await approveApplication({ db, env, ctx, app: converted, origin, reason: "manual" });
+  if (!approved.ok) return json({ error: approved.error, code: "continue_pending" }, approved.status);
+  return json({ ok: true, continued: { tierId: tier.id, status: "approved", rolePromoted: approved.rolePromoted, emailLogged: approved.emailLogged } });
+}
+
 // src/patch-application.ts
 async function patchApplication(db, env, ctx, app, body) {
   const attrs = {};
@@ -11600,6 +11973,15 @@ var handleAdminApprove = async (req, url, env, ctx) => {
   if (!result.ok) return json({ error: result.error }, result.status);
   return json({ ok: true, status: "approved", rolePromoted: result.rolePromoted, emailLogged: result.emailLogged });
 };
+var handleAdminDecline = async (req, url, env, ctx) => {
+  const m = url.pathname.match(/^\/api\/admin\/applications\/([0-9a-f-]+)\/decline$/);
+  if (req.method !== "POST" || !m) return null;
+  const got = await gate4(req, env, ctx);
+  if (got instanceof Response) return got;
+  const app = await loadApp(got, m[1]);
+  if (!app) return json({ error: "not found" }, 404);
+  return declineApplication(got, env, ctx, app);
+};
 var handleAdminRefund = async (req, url, env, ctx) => {
   const m = url.pathname.match(/^\/api\/admin\/applications\/([0-9a-f-]+)\/refund$/);
   if (req.method !== "POST" || !m) return null;
@@ -11615,7 +11997,21 @@ var handleAdminRefund = async (req, url, env, ctx) => {
       return json({ error: "super-admin required", code: "super_admin_required" }, 403);
     }
   }
-  return refundApplication(db, env, ctx, app);
+  const body = req.headers.get("content-length") === "0" || !req.body ? {} : await readJson(req);
+  if (body === null) return json({ error: "invalid JSON body" }, 400);
+  const continueAs = typeof body.continueAs === "string" ? body.continueAs : void 0;
+  if (continueAs === void 0) return refundApplication(db, env, ctx, app);
+  const tier = await resolveFreeTier(db, ctx, app, continueAs);
+  if (tier instanceof Response) return tier;
+  let receipt = {};
+  if (app.stripeSubscriptionId || app.namedSeatId) {
+    const refunded = await refundApplication(db, env, ctx, app);
+    if (!refunded.ok) return refunded;
+    receipt = await refunded.json();
+  }
+  const continued = await continueApplicationOnFreeTier(db, env, ctx, app, tier, url.origin);
+  if (!continued.ok) return continued;
+  return json({ ...receipt, ...await continued.json() });
 };
 var handleAdminApplicationPatch = async (req, url, env, ctx) => {
   const m = url.pathname.match(/^\/api\/admin\/applications\/([0-9a-f-]+)$/);
@@ -12275,6 +12671,7 @@ async function networkApplicationAction(opts) {
     const approval = await approveApplication({ db, env, ctx, app, origin: opts.origin, reason: "manual" });
     result = json(approval, approval.status);
   } else if (input.stage === "refunded") result = await refundApplication(db, env, ctx, app);
+  else if (input.stage === "declined" && ctx.membershipAuthority) result = await declineApplication(db, env, ctx, app);
   else result = app.status === input.stage ? json({ ok: true }) : await patchApplication(db, env, ctx, app, { status: input.stage });
   if (!result.ok) {
     const latest = (await db.query({ applications: { $: { where: { id: appId }, limit: 1 } } })).applications?.[0];
@@ -15990,10 +16387,14 @@ async function readMembershipChapterEffect(db, input, now) {
   requireMembershipScope(seat, input);
   const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
   requireMembershipScope(member, input);
-  if (!effect || effect.kind !== input.kind || effect.seatId !== seat.id || effect.membershipId !== member.id || ["chapterId", "environment", "runtime"].some((key3) => effect[key3] !== seat[key3]) || !["invite_named_recipient", "grant_named_recipient_access", "revoke_named_recipient_access"].includes(input.kind)) throw new Error("invalid chapter effect");
+  if (!effect || effect.kind !== input.kind || effect.seatId !== seat.id || effect.membershipId !== member.id || ["chapterId", "environment", "runtime"].some((key3) => effect[key3] !== seat[key3]) || !MEMBERSHIP_CHAPTER_EFFECT_KINDS.includes(input.kind)) throw new Error("invalid chapter effect");
+  const released = input.kind === "release_named_recipient";
+  const recipientUserId = released ? effect.recipientUserId : seat.recipientUserId;
+  const recipientApplicationId = released ? effect.recipientApplicationId : seat.recipientApplicationId;
   let applicable;
-  if (input.kind === "invite_named_recipient") applicable = seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && now < Number(member.termEndsAt) && ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status));
+  if (input.kind === "invite_named_recipient") applicable = seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && now < Number(member.termEndsAt) && namedSeatInvitationOpen(member);
   else if (input.kind === "revoke_named_recipient_access") applicable = ["refund_pending", "refunded"].includes(String(seat.status));
+  else if (released) applicable = typeof recipientApplicationId === "string" && seat.recipientApplicationId !== recipientApplicationId;
   else applicable = (await readNamedSeatAccess(db, {
     ...input,
     recipientUserId: String(seat.recipientUserId),
@@ -16003,8 +16404,8 @@ async function readMembershipChapterEffect(db, input, now) {
     ...input,
     recipientName: String(seat.recipientName),
     recipientEmail: String(seat.recipientEmailNormalized),
-    recipientUserId: typeof seat.recipientUserId === "string" ? seat.recipientUserId : null,
-    recipientApplicationId: typeof seat.recipientApplicationId === "string" ? seat.recipientApplicationId : null,
+    recipientUserId: typeof recipientUserId === "string" ? recipientUserId : null,
+    recipientApplicationId: typeof recipientApplicationId === "string" ? recipientApplicationId : null,
     acceptanceEndsAt: Number(seat.acceptanceEndsAt),
     termEndsAt: Number(seat.termEndsAt),
     applicable
@@ -16025,7 +16426,8 @@ var MEMBERSHIP_SEAT_ACTION_FIELDS = {
   "seat-accept": recipient,
   "seat-approve": recipient,
   "seat-decline": recipient,
-  "seat-effect": ["seatId", "effectId", "kind"]
+  "seat-effect": ["seatId", "effectId", "kind"],
+  "seat-regift": ["seatId", "recipientName", "recipientEmail"]
 };
 async function handleMembershipSeatAction(action, db, peer, input, now, stripeSecretName) {
   if (!peer.seatPriceId) throw new Error("named seats are not configured");
@@ -16050,6 +16452,12 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     kind: String(input.kind)
   }, now);
   if (action === "seat-offer") return readNamedSeatOffer(db, target, now);
+  if (action === "seat-regift") return regiftNamedSeat(db, {
+    ...target,
+    seatId: String(input.seatId),
+    recipientName: String(input.recipientName),
+    recipientEmail: String(input.recipientEmail)
+  }, now);
   if (action === "seat-reservations") {
     const seat = await reserveNamedMembershipSeat(db, {
       ...target,
@@ -16431,7 +16839,9 @@ var membershipAuthorityEntities = {
     ...times(),
     refundReason: attr("string", true),
     refundedCents: attr("number", true),
-    providerRefundIds: attr("json", true)
+    providerRefundIds: attr("json", true),
+    regiftedAt: attr("number", true),
+    formerRecipients: attr("json", true)
   } },
   networkSeatRecipient: { attrs: { id: id5(), appId: key(), chapterId: key(), environment: key(), runtime: key(), seatId: key(), recipientEmailNormalized: key(), createdAt: attr("number") } },
   membershipEffect: { attrs: {
@@ -16446,6 +16856,8 @@ var membershipAuthorityEntities = {
     attempts: attr("number"),
     providerObjectId: key(true),
     error: attr("string", true),
+    recipientUserId: key(true),
+    recipientApplicationId: key(true),
     createdAt: attr("number"),
     updatedAt: attr("number", false, false, true)
   } }
@@ -16622,7 +17034,7 @@ async function drainMembershipEffects(db, options, now) {
   if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 || !options.stripeSecretKey) throw new TypeError("invalid membership recovery configuration");
   await loadMembershipAuthorityState(db, scope2);
   const matches2 = (row2) => Object.entries(scope2).every(([key3, value]) => row2[key3] === value);
-  let pending = 0, complete = 0, more = false;
+  let pending = 0, complete = 0, held = 0, more = false;
   for (const status2 of ["payment_pending", "payment_processing", "payment_canceling"]) {
     const seats = (await db.query({ networkSeat: { $: { where: { ...scope2, status: status2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkSeat ?? [];
     more ||= seats.length > limit;
@@ -16658,6 +17070,10 @@ async function drainMembershipEffects(db, options, now) {
       requireMembershipScope(seat, target);
       if (seat.primaryMembershipId !== member.id) throw new Error("membership seat scope mismatch");
     }
+    if (effect.kind === "invite_named_recipient" && seat?.acceptedAt === void 0 && !namedSeatInvitationOpen(member) && !["refund_pending", "refunded"].includes(String(seat?.status))) {
+      held++;
+      continue;
+    }
     try {
       const attempts = Number(effect.attempts);
       if (!Number.isSafeInteger(attempts) || attempts < 0) throw new Error("invalid membership effect attempt");
@@ -16681,9 +17097,10 @@ async function drainMembershipEffects(db, options, now) {
           break;
         case "invite_named_recipient":
         case "grant_named_recipient_access":
-        case "revoke_named_recipient_access": {
+        case "revoke_named_recipient_access":
+        case "release_named_recipient": {
           if (!seat) throw new Error("named seat effect missing seat");
-          if (effect.kind !== "revoke_named_recipient_access" && ["refund_pending", "refunded"].includes(String(seat.status))) break;
+          if (["invite_named_recipient", "grant_named_recipient_access"].includes(String(effect.kind)) && ["refund_pending", "refunded"].includes(String(seat.status))) break;
           if (!options.deliverChapterEffect) throw new Error("chapter effect receiver unavailable");
           const receipt = await options.deliverChapterEffect({ ...target, effectId: String(effect.id), seatId: String(effect.seatId), kind: effect.kind });
           if (receipt.effectId !== effect.id || receipt.complete !== true) throw new Error("chapter effect receipt unconfirmed");
@@ -16701,7 +17118,7 @@ async function drainMembershipEffects(db, options, now) {
       pending++;
     }
   }
-  return { complete, pending, more };
+  return { complete, pending, held, more };
 }
 
 // src/approval-effects-retry.ts
@@ -16881,6 +17298,14 @@ function createMembershipChapterEffectRoute(options) {
             tierId: effect.skuId
           });
           if (!result.sent) throw new Error("invitation delivery unconfirmed");
+        } else if (effect.kind === "release_named_recipient") {
+          stage = "release_recipient";
+          if (!effect.recipientApplicationId || !effect.recipientUserId) throw new Error("recipient not bound");
+          await releaseNamedSeatRecipientApplications(db, env, ctx, {
+            seatId: effect.seatId,
+            recipientApplicationId: effect.recipientApplicationId,
+            recipientUserId: effect.recipientUserId
+          });
         } else {
           stage = "recipient_load";
           if (!effect.recipientApplicationId || !effect.recipientUserId) throw new Error("recipient not bound");
@@ -16976,6 +17401,18 @@ async function requestNamedSeatOperatorRefund(options) {
   if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents < 0) throw new Error("invalid named seat refund receipt");
   return seat;
 }
+async function requestNamedSeatRegift(options) {
+  const result = await requestAuthority(options, "seat-regift", {
+    applicationId: options.applicationId,
+    skuId: options.skuId,
+    seatId: options.seatId,
+    recipientName: options.recipientName,
+    recipientEmail: options.recipientEmail
+  });
+  const seat = result.seat;
+  if (!seat || seat.seatId !== options.seatId || seat.status !== "pending_acceptance" || typeof seat.recipientName !== "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(seat.recipientEmail)) || !Number.isSafeInteger(seat.regiftedAt) || seat.releasedRecipientApplicationId !== null && typeof seat.releasedRecipientApplicationId !== "string") throw new Error("invalid named seat regift receipt");
+  return seat;
+}
 async function requestNamedSeatReservation(options) {
   const result = await requestAuthority(options, "seat-reservations", {
     applicationId: options.applicationId,
@@ -17182,7 +17619,8 @@ function createMembershipWorkerAdapter(options) {
         accept: async (input, env) => requestNamedSeatAcceptance({ ...input, ...await transport(input, env) }),
         approve: async (input, env) => requestNamedSeatApproval({ ...input, ...await transport(input, env) }),
         decline: async (input, env) => requestNamedSeatDecline({ ...input, ...await transport(input, env) }),
-        operatorRefund: async (input, env) => requestNamedSeatOperatorRefund({ ...input, ...await transport(input, env) })
+        operatorRefund: async (input, env) => requestNamedSeatOperatorRefund({ ...input, ...await transport(input, env) }),
+        regift: async (input, env) => requestNamedSeatRegift({ ...input, ...await transport(input, env) })
       } } : {}
     },
     readEffect: async (input, env) => requestMembershipChapterEffect({ ...input, ...await transport(input, env) })
@@ -17430,6 +17868,7 @@ var BUILTIN_ROUTES = [
   handleMemberContent,
   handleGifts,
   handleNamedSeat,
+  handleNamedSeatRegift,
   handleNamedSeatRecipient,
   handleEmailDeliveryResolution,
   handleSchedule,
@@ -17460,6 +17899,7 @@ var BUILTIN_ROUTES = [
   handleAdminMeetingReschedule,
   handleAdminMeetingCancel,
   handleAdminApprove,
+  handleAdminDecline,
   handleAdminRefund,
   handleAdminApplicationPatch,
   handleAdminApplicationActions,
@@ -17506,15 +17946,21 @@ function chapterWorker(options) {
 }
 export {
   AdmissionGrantDeliveryError,
+  DECLINABLE_FROM,
   MEMBERSHIP_AUTHORITY_PATH,
+  MEMBERSHIP_CHAPTER_EFFECT_KINDS,
   NetworkTargetTransportError,
+  REGIFTABLE_SEAT_STATUSES,
   chapterMembershipAccess,
   chapterWorker,
+  closedApplication,
+  continueApplicationOnFreeTier,
   createMembershipAuthorityHandler,
   createMembershipAuthorityStorage,
   createMembershipChapterEffectRoute,
   createMembershipWorkerAdapter,
   createWorkerContext,
+  declineApplication,
   deliverAdmissionGrants,
   deliverBuilderLibrary,
   deliverMemberContent,
@@ -17525,11 +17971,16 @@ export {
   liftSeatPurchaseWindow,
   lowerSeatPrice,
   namedSeatIncluded,
+  namedSeatInvitationOpen,
   namedSeatRecipientState,
+  namedSeatRegiftable,
   readNamedSeatOffer,
   refundNamedSeatByOperator,
+  regiftNamedSeat,
+  releaseNamedSeatRecipientApplications,
   renderActiveSignupControlHtml,
   resolveNetworkTargetTransport,
+  resolveSignupEligibility,
   retermMembershipDiscount,
   retryChapterApprovalEffects,
   retryLeaderAdmissionDeliveries,