@odla-ai/chapter 0.56.2 → 0.58.0

package/dist/index.js

@@ -139,6 +139,7 @@ async function submitApplication(db, chapter, fields, opts) {
     clerkUserId: opts.namedSeat.userId,
     clerkAccountPending: false
   });
+  if (opts.predecessor?.clerkUserId && !opts.namedSeat) Object.assign(row2, { clerkUserId: opts.predecessor.clerkUserId, clerkAccountPending: false });
   if (typeof fields.email === "string" && isValidEmail(fields.email.trim())) {
     row2.emailNormalized = normalizeChapterEmail(fields.email);
     row2.signupEmailKey = row2.emailNormalized;
@@ -157,6 +158,8 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (acked) row2.disclaimerAckAt = opts.now;
   const ops = [
+    // The unique signup key leaves the closed predecessor before the new attempt takes it.
+    ...opts.predecessor && opts.predecessor.id !== id11 ? [{ t: "retract", ns: "applications", id: opts.predecessor.id, attrs: ["signupEmailKey"] }] : [],
     { t: "update", ns: "applications", id: id11, attrs: row2 }
   ];
   if (opts.admissionGrant?.decision === "waive_interview") {
@@ -1093,7 +1096,7 @@ var DEFAULT_SCHEDULING = {
   endHour: 17,
   timezone: "America/Los_Angeles",
   minNoticeHours: 24,
-  windowDays: 14
+  windowDays: 21
 };
 function defaultEmailTemplates(name) {
   const sign = `
@@ -1492,8 +1495,10 @@ var DEFAULT_ADMIN_COPY = {
     superAdminHint: "Super-admin, managed in odla Studio.",
     noAccount: "No linked account yet. The role is set once they sign in.",
     approve: "Approve",
+    decline: "Decline",
     refund: "Refund",
     approved: "Approved.",
+    declined: "Declined.",
     refunded: "Refund issued.",
     roleSet: "Role set to {role}.",
     messageSent: "Message sent.",
@@ -4273,7 +4278,7 @@ async function refundNetworkMembership(db, input, secretKey, now) {
 import { stripeRequest as stripeRequest4 } from "@odla-ai/stripe";
 
 // src/membership-seat-reservation.ts
-async function recipientKey(input, email) {
+async function namedSeatRecipientClaimId(input, email) {
   const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([input.appId, input.chapterId, input.environment, input.runtime, email])));
   return `seat-recipient:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
@@ -4290,7 +4295,7 @@ async function reserveNamedMembershipSeat(db, input, now) {
   const id11 = (await membershipOfferIdForRequest({ ...input, requestId: "named_seat" })).replace(/^offer_/, "seat_");
   let seat = await membershipLoad(db, "networkSeat", id11);
   if (!seat) {
-    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await recipientKey(input, email);
+    const offering = membershipOfferingVersion(member.offeringSnapshot), claimId = await namedSeatRecipientClaimId(input, email);
     const purchaseEndsAt = seatPurchaseDeadline(offering, member);
     if (!["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status)) || Number(member.refundedCents) !== 0 || now < Number(member.initialTermStartedAt) || now >= Number(member.termEndsAt) || now > purchaseEndsAt || !Number.isSafeInteger(purchaseEndsAt) || member.namedSeatId !== void 0) {
       membershipFail("named_seat_purchase_unavailable");
@@ -5379,6 +5384,128 @@ async function refundNamedSeatByOperator(db, input, stripeSecretKey, now) {
   return { seatId: String(seat.id), status: "refunded", refundedCents: Number(refunded.refundedCents), subscriptionCanceled: false };
 }
 
+// src/membership-effect-kinds.ts
+var MEMBERSHIP_CHAPTER_EFFECT_KINDS = [
+  "invite_named_recipient",
+  "grant_named_recipient_access",
+  "revoke_named_recipient_access",
+  "release_named_recipient"
+];
+var namedSeatInvitationOpen = (member) => ["active", "cancel_at_term_end"].includes(String(member.status)) && Number.isSafeInteger(member.journeyApprovedAt);
+
+// src/membership-seat-regift.ts
+var REGIFTABLE_SEAT_STATUSES = ["pending_acceptance", "pending_approval", "pending_primary"];
+var namedSeatRegiftable = (seat) => REGIFTABLE_SEAT_STATUSES.includes(String(seat.status));
+var receiptFor = (seat, released) => ({
+  seatId: String(seat.id),
+  status: "pending_acceptance",
+  recipientName: String(seat.recipientName),
+  recipientEmail: String(seat.recipientEmailNormalized),
+  regiftedAt: Number(seat.regiftedAt),
+  releasedRecipientApplicationId: released
+});
+async function regiftNamedSeat(db, input, now) {
+  membershipClock(now);
+  const name = typeof input.recipientName === "string" ? input.recipientName.trim().replace(/\s+/g, " ") : "";
+  const email = normalizeChapterEmail(typeof input.recipientEmail === "string" ? input.recipientEmail : "");
+  if (name.length < 2 || name.length > 160 || /[\u0000-\u001f\u007f]/.test(input.recipientName) || email.length > 254 || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) membershipFail("invalid_named_seat_recipient");
+  const state = await loadMembershipAuthorityState(db, input);
+  const seat = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(seat, input);
+  const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
+  requireMembershipScope(member, input);
+  if (member.namedSeatId !== seat.id) membershipFail("named_seat_primary_conflict");
+  if (typeof seat.purchaserEmailNormalized === "string" && seat.purchaserEmailNormalized === email) membershipFail("invalid_named_seat_recipient");
+  const history = Array.isArray(seat.formerRecipients) ? seat.formerRecipients : [];
+  if (seat.recipientEmailNormalized === email && seat.recipientName === name && seat.regiftedAt !== void 0 && seat.status === "pending_acceptance") {
+    return receiptFor(seat, history.at(-1)?.recipientApplicationId ?? null);
+  }
+  if (!namedSeatRegiftable(seat)) membershipFail("named_seat_not_regiftable");
+  if (seat.recipientEmailNormalized === email) membershipFail("named_seat_recipient_unchanged");
+  const entitlement = await membershipLoad(db, "networkEntitlement", String(seat.entitlementId));
+  requireMembershipScope(entitlement, input);
+  const claimId = await namedSeatRecipientClaimId(input, email);
+  const former = {
+    recipientName: String(seat.recipientName),
+    recipientEmail: String(seat.recipientEmailNormalized),
+    recipientClaimId: String(seat.recipientClaimId),
+    releasedAt: now,
+    ...typeof seat.recipientUserId === "string" ? { recipientUserId: seat.recipientUserId } : {},
+    ...typeof seat.recipientApplicationId === "string" ? { recipientApplicationId: seat.recipientApplicationId } : {},
+    ...Number.isSafeInteger(seat.acceptedAt) ? { acceptedAt: Number(seat.acceptedAt) } : {},
+    ...Number.isSafeInteger(seat.journeyApprovedAt) ? { journeyApprovedAt: Number(seat.journeyApprovedAt) } : {}
+  };
+  const generation = history.length + 1, inviteId = `${seat.id}:invite:${generation}`, releaseId = `${seat.id}:release:${generation}`;
+  const bound = Boolean(former.recipientUserId && former.recipientApplicationId);
+  const stale = ((await db.query({ membershipEffect: { $: { where: { seatId: seat.id, kind: "invite_named_recipient", status: "pending" }, limit: 10 } } })).membershipEffect ?? []).filter((row2) => row2.chapterId === input.chapterId && row2.environment === input.environment && row2.runtime === input.runtime);
+  const cleared = ["recipientUserId", "recipientApplicationId", "acceptedAt", "journeyApprovedAt"];
+  const effect = (id11, kind, extra = {}) => membershipUpdate("membershipEffect", id11, {
+    id: id11,
+    chapterId: input.chapterId,
+    environment: input.environment,
+    runtime: input.runtime,
+    membershipId: member.id,
+    seatId: seat.id,
+    kind,
+    status: "pending",
+    attempts: 0,
+    createdAt: now,
+    updatedAt: now,
+    ...extra
+  });
+  const ops = [
+    membershipUpdate("networkSeat", String(seat.id), {
+      recipientName: name,
+      recipientEmailNormalized: email,
+      recipientClaimId: claimId,
+      status: "pending_acceptance",
+      regiftedAt: now,
+      formerRecipients: [...history, former],
+      revision: Number(seat.revision) + 1,
+      updatedAt: now
+    }),
+    { t: "retract", ns: "networkSeat", id: String(seat.id), attrs: cleared },
+    membershipUpdate("networkEntitlement", String(entitlement.id), { status: "pending_acceptance", revision: Number(entitlement.revision) + 1, updatedAt: now }),
+    { t: "retract", ns: "networkEntitlement", id: String(entitlement.id), attrs: cleared },
+    { t: "delete", ns: "networkSeatRecipient", id: String(seat.recipientClaimId) },
+    membershipUpdate("networkSeatRecipient", claimId, {
+      id: claimId,
+      appId: input.appId,
+      chapterId: input.chapterId,
+      environment: input.environment,
+      runtime: input.runtime,
+      seatId: seat.id,
+      recipientEmailNormalized: email,
+      createdAt: now
+    }),
+    ...stale.map((row2) => membershipUpdate("membershipEffect", String(row2.id), { status: "complete", updatedAt: now })),
+    effect(inviteId, "invite_named_recipient"),
+    ...bound ? [effect(releaseId, "release_named_recipient", { recipientUserId: former.recipientUserId, recipientApplicationId: former.recipientApplicationId })] : []
+  ];
+  try {
+    await db.transact(ops, { mutationId: `named-seat-regift:${seat.id}:${generation}`, guards: [
+      { ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision, status: seat.status } },
+      { ns: "networkEntitlement", id: String(entitlement.id), exists: true, equals: { revision: entitlement.revision } },
+      { ns: "networkMembership", id: String(member.id), exists: true, equals: { revision: member.revision, namedSeatId: seat.id } },
+      { ns: "networkSeatRecipient", id: claimId, exists: false },
+      ...stale.map((row2) => ({ ns: "membershipEffect", id: String(row2.id), exists: true, equals: { status: "pending" } })),
+      { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+    ] });
+  } catch (error) {
+    if (error.code !== "transact_guard_failed") throw error;
+    const current = await membershipLoad(db, "networkSeat", input.seatId);
+    requireMembershipScope(current, input);
+    if (current.recipientEmailNormalized === email && current.status === "pending_acceptance") return receiptFor(current, former.recipientApplicationId ?? null);
+    const claim = await membershipLoad(db, "networkSeatRecipient", claimId);
+    if (claim && claim.seatId !== seat.id) membershipFail("named_seat_recipient_unavailable");
+    membershipFail("named_seat_regift_retry_required");
+  }
+  const saved = await membershipLoad(db, "networkSeat", input.seatId);
+  requireMembershipScope(saved, input);
+  if (saved.recipientEmailNormalized !== email || saved.status !== "pending_acceptance") membershipFail("named_seat_regift_retry_required");
+  return receiptFor(saved, former.recipientApplicationId ?? null);
+}
+
 // src/membership-seat-offer.ts
 async function namedSeatOfferDigest(offer) {
   const bytes = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
@@ -5422,7 +5549,10 @@ async function readNamedSeatOffer(db, input, now) {
       recipientState: namedSeatRecipientState(seat),
       ...at(seat.purchasedAt) !== void 0 ? { purchasedAt: at(seat.purchasedAt) } : {},
       ...at(seat.acceptedAt) !== void 0 ? { acceptedAt: at(seat.acceptedAt) } : {},
-      ...seat.status === "active" && at(seat.journeyApprovedAt) !== void 0 ? { joinedAt: at(seat.journeyApprovedAt) } : {}
+      ...seat.status === "active" && at(seat.journeyApprovedAt) !== void 0 ? { joinedAt: at(seat.journeyApprovedAt) } : {},
+      ...seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && !namedSeatInvitationOpen(member) ? { invitationHeld: true } : {},
+      ...namedSeatRegiftable(seat) ? { regiftable: true } : {},
+      ...at(seat.regiftedAt) !== void 0 ? { regiftedAt: at(seat.regiftedAt) } : {}
     } } : {}
   };
   return {
@@ -5470,10 +5600,14 @@ async function readMembershipChapterEffect(db, input, now) {
   requireMembershipScope(seat, input);
   const member = await membershipLoad(db, "networkMembership", String(seat.primaryMembershipId));
   requireMembershipScope(member, input);
-  if (!effect || effect.kind !== input.kind || effect.seatId !== seat.id || effect.membershipId !== member.id || ["chapterId", "environment", "runtime"].some((key3) => effect[key3] !== seat[key3]) || !["invite_named_recipient", "grant_named_recipient_access", "revoke_named_recipient_access"].includes(input.kind)) throw new Error("invalid chapter effect");
+  if (!effect || effect.kind !== input.kind || effect.seatId !== seat.id || effect.membershipId !== member.id || ["chapterId", "environment", "runtime"].some((key3) => effect[key3] !== seat[key3]) || !MEMBERSHIP_CHAPTER_EFFECT_KINDS.includes(input.kind)) throw new Error("invalid chapter effect");
+  const released = input.kind === "release_named_recipient";
+  const recipientUserId = released ? effect.recipientUserId : seat.recipientUserId;
+  const recipientApplicationId = released ? effect.recipientApplicationId : seat.recipientApplicationId;
   let applicable;
-  if (input.kind === "invite_named_recipient") applicable = seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && now < Number(member.termEndsAt) && ["paid_pending_approval", "active", "cancel_at_term_end"].includes(String(member.status));
+  if (input.kind === "invite_named_recipient") applicable = seat.status === "pending_acceptance" && seat.acceptedAt === void 0 && now < Number(member.termEndsAt) && namedSeatInvitationOpen(member);
   else if (input.kind === "revoke_named_recipient_access") applicable = ["refund_pending", "refunded"].includes(String(seat.status));
+  else if (released) applicable = typeof recipientApplicationId === "string" && seat.recipientApplicationId !== recipientApplicationId;
   else applicable = (await readNamedSeatAccess(db, {
     ...input,
     recipientUserId: String(seat.recipientUserId),
@@ -5483,8 +5617,8 @@ async function readMembershipChapterEffect(db, input, now) {
     ...input,
     recipientName: String(seat.recipientName),
     recipientEmail: String(seat.recipientEmailNormalized),
-    recipientUserId: typeof seat.recipientUserId === "string" ? seat.recipientUserId : null,
-    recipientApplicationId: typeof seat.recipientApplicationId === "string" ? seat.recipientApplicationId : null,
+    recipientUserId: typeof recipientUserId === "string" ? recipientUserId : null,
+    recipientApplicationId: typeof recipientApplicationId === "string" ? recipientApplicationId : null,
     acceptanceEndsAt: Number(seat.acceptanceEndsAt),
     termEndsAt: Number(seat.termEndsAt),
     applicable
@@ -5505,7 +5639,8 @@ var MEMBERSHIP_SEAT_ACTION_FIELDS = {
   "seat-accept": recipient,
   "seat-approve": recipient,
   "seat-decline": recipient,
-  "seat-effect": ["seatId", "effectId", "kind"]
+  "seat-effect": ["seatId", "effectId", "kind"],
+  "seat-regift": ["seatId", "recipientName", "recipientEmail"]
 };
 async function handleMembershipSeatAction(action, db, peer, input, now, stripeSecretName) {
   if (!peer.seatPriceId) throw new Error("named seats are not configured");
@@ -5530,6 +5665,12 @@ async function handleMembershipSeatAction(action, db, peer, input, now, stripeSe
     kind: String(input.kind)
   }, now);
   if (action === "seat-offer") return readNamedSeatOffer(db, target, now);
+  if (action === "seat-regift") return regiftNamedSeat(db, {
+    ...target,
+    seatId: String(input.seatId),
+    recipientName: String(input.recipientName),
+    recipientEmail: String(input.recipientEmail)
+  }, now);
   if (action === "seat-reservations") {
     const seat = await reserveNamedMembershipSeat(db, {
       ...target,
@@ -5907,6 +6048,18 @@ async function requestNamedSeatOperatorRefund(options) {
   if (!seat || seat.seatId !== options.seatId || seat.status !== "refunded" || seat.subscriptionCanceled !== false || !Number.isSafeInteger(seat.refundedCents) || seat.refundedCents < 0) throw new Error("invalid named seat refund receipt");
   return seat;
 }
+async function requestNamedSeatRegift(options) {
+  const result = await requestAuthority(options, "seat-regift", {
+    applicationId: options.applicationId,
+    skuId: options.skuId,
+    seatId: options.seatId,
+    recipientName: options.recipientName,
+    recipientEmail: options.recipientEmail
+  });
+  const seat = result.seat;
+  if (!seat || seat.seatId !== options.seatId || seat.status !== "pending_acceptance" || typeof seat.recipientName !== "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(seat.recipientEmail)) || !Number.isSafeInteger(seat.regiftedAt) || seat.releasedRecipientApplicationId !== null && typeof seat.releasedRecipientApplicationId !== "string") throw new Error("invalid named seat regift receipt");
+  return seat;
+}
 async function requestNamedSeatReservation(options) {
   const result = await requestAuthority(options, "seat-reservations", {
     applicationId: options.applicationId,
@@ -6152,7 +6305,7 @@ async function drainMembershipEffects(db, options, now) {
   if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 || !options.stripeSecretKey) throw new TypeError("invalid membership recovery configuration");
   await loadMembershipAuthorityState(db, scope2);
   const matches2 = (row2) => Object.entries(scope2).every(([key3, value]) => row2[key3] === value);
-  let pending = 0, complete = 0, more = false;
+  let pending = 0, complete = 0, held = 0, more = false;
   for (const status2 of ["payment_pending", "payment_processing", "payment_canceling"]) {
     const seats = (await db.query({ networkSeat: { $: { where: { ...scope2, status: status2 }, order: { updatedAt: "asc" }, limit: limit + 1 } } })).networkSeat ?? [];
     more ||= seats.length > limit;
@@ -6188,6 +6341,10 @@ async function drainMembershipEffects(db, options, now) {
       requireMembershipScope(seat, target);
       if (seat.primaryMembershipId !== member.id) throw new Error("membership seat scope mismatch");
     }
+    if (effect.kind === "invite_named_recipient" && seat?.acceptedAt === void 0 && !namedSeatInvitationOpen(member) && !["refund_pending", "refunded"].includes(String(seat?.status))) {
+      held++;
+      continue;
+    }
     try {
       const attempts = Number(effect.attempts);
       if (!Number.isSafeInteger(attempts) || attempts < 0) throw new Error("invalid membership effect attempt");
@@ -6211,9 +6368,10 @@ async function drainMembershipEffects(db, options, now) {
           break;
         case "invite_named_recipient":
         case "grant_named_recipient_access":
-        case "revoke_named_recipient_access": {
+        case "revoke_named_recipient_access":
+        case "release_named_recipient": {
           if (!seat) throw new Error("named seat effect missing seat");
-          if (effect.kind !== "revoke_named_recipient_access" && ["refund_pending", "refunded"].includes(String(seat.status))) break;
+          if (["invite_named_recipient", "grant_named_recipient_access"].includes(String(effect.kind)) && ["refund_pending", "refunded"].includes(String(seat.status))) break;
           if (!options.deliverChapterEffect) throw new Error("chapter effect receiver unavailable");
           const receipt = await options.deliverChapterEffect({ ...target, effectId: String(effect.id), seatId: String(effect.seatId), kind: effect.kind });
           if (receipt.effectId !== effect.id || receipt.complete !== true) throw new Error("chapter effect receipt unconfirmed");
@@ -6231,7 +6389,7 @@ async function drainMembershipEffects(db, options, now) {
       pending++;
     }
   }
-  return { complete, pending, more };
+  return { complete, pending, held, more };
 }
 
 // src/schema-membership-offers.ts
@@ -6401,7 +6559,9 @@ var membershipAuthorityEntities = {
     ...times(),
     refundReason: attr9("string", true),
     refundedCents: attr9("number", true),
-    providerRefundIds: attr9("json", true)
+    providerRefundIds: attr9("json", true),
+    regiftedAt: attr9("number", true),
+    formerRecipients: attr9("json", true)
   } },
   networkSeatRecipient: { attrs: { id: id10(), appId: key2(), chapterId: key2(), environment: key2(), runtime: key2(), seatId: key2(), recipientEmailNormalized: key2(), createdAt: attr9("number") } },
   membershipEffect: { attrs: {
@@ -6416,6 +6576,8 @@ var membershipAuthorityEntities = {
     attempts: attr9("number"),
     providerObjectId: key2(true),
     error: attr9("string", true),
+    recipientUserId: key2(true),
+    recipientApplicationId: key2(true),
     createdAt: attr9("number"),
     updatedAt: attr9("number", false, false, true)
   } }
@@ -8717,7 +8879,7 @@ var SCHEDULING_DEFAULTS = {
   endHour: 17,
   timezone: "America/Los_Angeles",
   minNoticeHours: 24,
-  windowDays: 14,
+  windowDays: 21,
   summaryTemplate: "Introduction call with {{firstName}} {{lastName}}"
 };
 function isValidTimeZone(tz) {
@@ -10220,6 +10382,7 @@ export {
   requestNamedSeatOperatorRefund,
   requestNamedSeatPayment,
   requestNamedSeatRefund2 as requestNamedSeatRefund,
+  requestNamedSeatRegift,
   requestNamedSeatReservation,
   resolveApplication,
   resolveAuth,