@odla-ai/chapter 0.58.1 → 0.59.1

package/dist/worker/index.js

@@ -246,12 +246,37 @@ function networkCommercialAlerts(ctx, route) {
   };
 }
 
+// src/worker-defer.ts
+function deferWork(ctx, req, task) {
+  return ctx.defer ? ctx.defer(req, task) : task().then(() => void 0, () => void 0);
+}
+function createDeferral() {
+  const executions = /* @__PURE__ */ new WeakMap();
+  const settle = (task) => task().then(() => void 0, (error) => {
+    console.warn("chapter_deferred_task_failed", JSON.stringify({ message: String(error?.message ?? error).slice(0, 200) }));
+  });
+  return {
+    /** Remember the runtime's ExecutionContext for this request. */
+    bind(req, execution) {
+      if (execution) executions.set(req, execution);
+    },
+    /** Run `task` after the response when the request has an ExecutionContext, else now. Resolves once the task is scheduled or done. */
+    defer(req, task) {
+      const execution = executions.get(req);
+      if (!execution) return settle(task);
+      execution.waitUntil(settle(task));
+      return Promise.resolve();
+    }
+  };
+}
+
 // src/worker-context.ts
 var json = (body, status2 = 200) => new Response(JSON.stringify(body), { status: status2, headers: { "content-type": "application/json" } });
 function createWorkerContext(options) {
   const { chapter } = options;
   const auth = chapter.auth;
   const crmBase = options.crmBasePath ?? "/api/crm";
+  const deferral = createDeferral();
   let publicConfigCache = null;
   const jwksByIssuer = /* @__PURE__ */ new Map();
   async function getPublicConfig(env) {
@@ -356,6 +381,8 @@ function createWorkerContext(options) {
     membershipAuthority: options.membershipAuthority,
     membershipAuthorityOperator: options.membershipAuthorityOperator,
     recordError: options.recordError ?? consoleErrorRecorder,
+    bindExecution: deferral.bind,
+    defer: deferral.defer,
     getPublicConfig,
     verifyUser,
     makeDb,
@@ -683,6 +710,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
   else if (eventType.startsWith("refund.")) objectKind = "refund";
   else if (eventType === "charge.refunded") objectKind = "refund";
   else if (eventType.startsWith("payment_intent.")) objectKind = "payment_intent";
+  else if (eventType.startsWith("charge.dispute.")) objectKind = "dispute";
   const customerId = refId(object2.customer, "cus_");
   const subscriptionId = objectKind === "subscription" ? providerId(objectId, "sub_") : subscriptionRef(object2);
   const invoiceId = objectKind === "invoice" ? providerId(objectId, "in_") : refId(object2.invoice, "in_");
@@ -692,6 +720,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
   const amountCents = integer(eventType === "charge.refunded" ? object2.amount_refunded : object2.amount);
   const currency = text(object2.currency)?.toLowerCase();
   const status2 = text(object2.status);
+  const disputeReason = objectKind === "dispute" ? text(object2.reason) : void 0;
   return {
     eventId,
     digest,
@@ -710,6 +739,7 @@ function normalizeNetworkCommercialStripeEvent(input, digest) {
     ...invoiceId ? { invoiceId } : {},
     ...chargeId ? { chargeId } : {},
     ...paymentIntentId ? { paymentIntentId } : {},
+    ...disputeReason ? { disputeReason } : {},
     ...price,
     ...objectKind === "subscription" && commercialSeatItems(object2) ? { seatSubscriptionItems: commercialSeatItems(object2) } : {},
     ...status2 ? { status: status2 } : {},
@@ -752,6 +782,7 @@ function ownRef(fact) {
   if (fact.objectKind === "subscription") return `subscription:${fact.objectId}`;
   if (fact.objectKind === "invoice") return `invoice:${fact.objectId}`;
   if (fact.objectKind === "payment_intent") return `payment_intent:${fact.objectId}`;
+  if (fact.objectKind === "dispute") return `dispute:${fact.objectId}`;
   if (fact.eventType.startsWith("refund.")) return `refund:${fact.objectId}`;
   return fact.eventType === "charge.refunded" ? `charge:${fact.objectId}` : null;
 }
@@ -807,6 +838,7 @@ function projectNetworkCommercialEvents(input, sources) {
       continue;
     }
     const source = assignments.get(fact.eventId);
+    if (!source && fact.objectKind === "dispute") continue;
     if (!source) {
       const direct = directSource(fact, sources);
       const keys3 = new Set(objectRefs(fact).flatMap((ref) => [...refs.get(ref) ?? []]));
@@ -823,6 +855,7 @@ function projectNetworkCommercialEvents(input, sources) {
   const subscriptions = rows5.filter((row2) => row2.objectKind === "subscription");
   const invoices = rows5.filter((row2) => row2.objectKind === "invoice");
   const seatPayments = rows5.filter((row2) => row2.objectKind === "payment_intent" && row2.seatId && row2.membershipId && !row2.invoiceId);
+  const disputes = rows5.filter((row2) => row2.objectKind === "dispute");
   const refunds = rows5.filter((row2) => row2.objectKind === "refund" && row2.eventType.startsWith("refund."));
   for (const charge of rows5.filter((row2) => row2.eventType === "charge.refunded")) {
     if (!refunds.some((refund) => refund.chargeId === charge.objectId)) {
@@ -843,6 +876,7 @@ function projectNetworkCommercialEvents(input, sources) {
   for (const row2 of refunds) add(row2, "refundedCents", row2.amountCents ?? 0);
   return {
     ...seatPayments.length ? { seatPayments, seats: projectCommercialSeats(seatPayments, subscriptions, refunds) } : {},
+    ...disputes.length ? { disputes } : {},
     customers,
     subscriptions,
     invoices,
@@ -1179,6 +1213,17 @@ function findGiftRef(obj) {
 }
 function normalizeWebhookEvent(event2, options = {}) {
   const obj = event2.data?.object ?? {};
+  if (event2.type.startsWith("charge.dispute.")) {
+    const chargeId = typeof obj.charge === "string" ? obj.charge : String(obj.charge?.id ?? "");
+    if (!/^ch_[A-Za-z0-9]+$/.test(chargeId) || typeof obj.id !== "string" || !obj.id) return { kind: "ignored", type: event2.type };
+    return {
+      kind: "disputed",
+      chargeId,
+      disputeId: obj.id,
+      disputeStatus: typeof obj.status === "string" ? obj.status : "unknown",
+      ...typeof obj.payment_intent === "string" ? { paymentIntentId: obj.payment_intent } : {}
+    };
+  }
   if (event2.type === "charge.refunded" && (!Number.isSafeInteger(obj.amount) || Number(obj.amount) <= 0 || obj.amount_refunded !== obj.amount || obj.refunded !== true)) return { kind: "ignored", type: event2.type };
   const gift = findGiftRef(obj);
   if (gift.giftIntentId) {
@@ -1588,9 +1633,9 @@ async function backfillCrm(deps) {
 }
 
 // src/email-retirement.ts
-function isRetiredEmailCopy(subject, text8) {
+function isRetiredEmailCopy(subject, text10) {
   const subjectCopy = subject.trimStart().replace(/^\[dev\]\s*/i, "");
-  const bodyCopy = text8.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
+  const bodyCopy = text10.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
   return /^\(\s*unused\s*:/i.test(subjectCopy) || /^Unused\.\s*Switched off\b/i.test(bodyCopy);
 }
 
@@ -1668,10 +1713,10 @@ function planDelivery(input) {
   if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
   if (validateEmailCopy({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
   const subject = (redirect ? "[dev] " : "") + renderedSubject;
-  const text8 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text10 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + renderedText : renderedText;
-  return { deliver: true, transport, to, subject, text: text8, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text10, redirected: redirect };
 }
 
 // src/notify.ts
@@ -1819,8 +1864,8 @@ function formatInstant(at2, timeZone) {
 var adminUrlFor = (origin) => `${origin}/admin/`;
 var membersUrlFor = (origin) => `${origin}/members/`;
 function applicantVariables(app) {
-  const text8 = (v) => typeof v === "string" ? v : "";
-  return { firstName: text8(app.firstName), lastName: text8(app.lastName), email: text8(app.email), phone: text8(app.phone), state: text8(app.state) };
+  const text10 = (v) => typeof v === "string" ? v : "";
+  return { firstName: text10(app.firstName), lastName: text10(app.lastName), email: text10(app.email), phone: text10(app.phone), state: text10(app.state) };
 }
 function sampleVariables(origin, timeZone, now = Date.now()) {
   const startAt = formatInstant(now + 864e5, timeZone);
@@ -2927,7 +2972,7 @@ async function renewChapterNetworkMembership(db, env, ctx, app, eventId) {
   if (!intent) throw new Error("membership checkout reconciliation pending");
   const target = await membershipTargetForIntent(intent, app, env, ctx);
   const row2 = await ctx.membershipAuthority.reconcileRenewal({ ...target, eventId }, env);
-  if (!row2 || row2.membershipId !== await networkMembershipId(target) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined", "restarting"].includes(row2.status)) {
+  if (!row2 || row2.membershipId !== await networkMembershipId(target) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined", "restarting", "payment_disputed"].includes(row2.status)) {
     throw new Error("invalid network renewal receipt");
   }
   return row2;
@@ -3552,6 +3597,163 @@ function paymentLineItems(group, tier) {
   return { standardCents: standard, discountCents: discount, dueTodayCents: standard - discount };
 }
 
+// src/membership-dispute-authority.ts
+import { stripeRequest as stripeRequest4 } from "@odla-ai/stripe";
+
+// src/membership-dispute-transition.ts
+var MEMBERSHIP_DISPUTED_STATUS = "payment_disputed";
+var DISPUTE_WON_STATUSES = ["won", "warning_closed"];
+var CLOSED_STATUSES = [...DISPUTE_WON_STATUSES, "lost"];
+function disputeTransition(row2, fact, eventId, now, terminal) {
+  const status2 = String(fact.status ?? "unknown"), closed = CLOSED_STATUSES.includes(status2);
+  const sameDispute = row2.disputeId === fact.objectId;
+  if (sameDispute && Number(row2.disputeClosedAt ?? 0) > 0 && !closed) return null;
+  const won = DISPUTE_WON_STATUSES.includes(status2);
+  const suspended = row2.status === MEMBERSHIP_DISPUTED_STATUS, done = terminal.includes(String(row2.status));
+  const restored = String(row2.disputePriorStatus ?? (row2.journeyApprovedAt ? "active" : "paid_pending_approval"));
+  const next = done ? String(row2.status) : won ? suspended ? restored : String(row2.status) : MEMBERSHIP_DISPUTED_STATUS;
+  return {
+    status: next,
+    disputeId: fact.objectId,
+    disputeStatus: status2,
+    disputeEventId: eventId,
+    disputeClosedAt: closed ? now : 0,
+    ...fact.disputeReason ? { disputeReason: fact.disputeReason } : {},
+    ...fact.amountCents !== void 0 ? { disputeAmountCents: fact.amountCents } : {},
+    ...sameDispute ? {} : { disputedAt: now },
+    ...next === MEMBERSHIP_DISPUTED_STATUS && !suspended ? { disputePriorStatus: String(row2.status) } : {},
+    revision: Number(row2.revision) + 1,
+    updatedAt: now
+  };
+}
+
+// src/membership-seat-dispute.ts
+var text2 = (value) => typeof value === "string" && value ? value : void 0;
+var TERMINAL = ["payment_pending", "payment_processing", "payment_canceling", "refund_pending", "refunded", "canceled"];
+var namedSeatDisputeStanding = (seat, applied) => ({ seatId: String(seat.id), status: String(seat.status), ...text2(seat.disputeStatus) ? { disputeStatus: text2(seat.disputeStatus) } : {}, applied });
+function disputedChargeCoversSeat(charge, seat) {
+  return charge.seatId === seat.id && charge.customerId === seat.providerCustomerId && charge.paymentIntentId !== void 0 && (charge.paymentIntentId === seat.providerPaymentIntentId || charge.paymentIntentId === seat.rechargePaymentIntentId);
+}
+async function reconcileNamedSeatDispute(db, input, now, charge, evidence) {
+  if (!charge.seatId) membershipFail("membership_dispute_scope_mismatch");
+  const membership = async (applied, seat) => {
+    const id7 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id7);
+    requireMembershipScope(member, input);
+    return {
+      membershipId: id7,
+      status: String(member.status),
+      termEndsAt: Number(member.termEndsAt),
+      graceEndsAt: Number(member.graceEndsAt ?? 0),
+      autoRenew: member.autoRenew === true,
+      applied,
+      ...text2(member.disputeStatus) ? { disputeStatus: text2(member.disputeStatus) } : {},
+      ...seat ? { seat: namedSeatDisputeStanding(seat, applied) } : {}
+    };
+  };
+  for (let attempt = 0; attempt < 8; attempt++) {
+    const state = await loadMembershipAuthorityState(db, input), seat = await membershipLoad(db, "networkSeat", charge.seatId);
+    if (!seat) return membership(false);
+    requireMembershipScope(seat, input);
+    if (charge.customerId !== seat.providerCustomerId) membershipFail("membership_dispute_scope_mismatch");
+    if (!disputedChargeCoversSeat(charge, seat) || seat.disputeEventId === input.eventId) return membership(seat.disputeEventId === input.eventId, seat);
+    const attrs = disputeTransition(seat, evidence.fact, input.eventId, now, TERMINAL);
+    if (!attrs) return membership(false, seat);
+    try {
+      await db.transact([membershipUpdate("networkSeat", String(seat.id), attrs)], { mutationId: `seat-dispute:${seat.id}:${input.eventId}`, guards: [
+        { ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
+        { ns: "networkCommercialEvents", id: String(evidence.row.id), exists: true, equals: { digest: evidence.fact.digest } },
+        evidence.guard
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+      continue;
+    }
+    const saved = await membershipLoad(db, "networkSeat", String(seat.id));
+    requireMembershipScope(saved, input);
+    return membership(true, saved);
+  }
+  return membershipFail("membership_dispute_retry_required");
+}
+
+// src/membership-dispute-authority.ts
+var TERMINAL2 = ["refunded", "refund_pending", "canceled", "declined", "restarting", "superseded"];
+var text3 = (value) => typeof value === "string" && value ? value : void 0;
+var refOf = (value) => typeof value === "string" ? text3(value) : text3(value?.id);
+async function readDisputedCharge(secretKey, chargeId, fetch2) {
+  if (!/^ch_[A-Za-z0-9]+$/.test(chargeId)) membershipFail("invalid_dispute_charge");
+  const config = { secretKey, ...fetch2 ? { fetch: fetch2 } : {} };
+  const charge = await stripeRequest4(config, "GET", `/v1/charges/${chargeId}`);
+  if (!charge.ok || charge.body.id !== chargeId) membershipFail("membership_dispute_provider_unavailable");
+  const customerId = refOf(charge.body.customer), invoiceId = refOf(charge.body.invoice), paymentIntentId = refOf(charge.body.payment_intent);
+  if (!customerId) membershipFail("membership_dispute_provider_unavailable");
+  let subscriptionId;
+  if (invoiceId) {
+    const invoice = await stripeRequest4(config, "GET", `/v1/invoices/${invoiceId}`);
+    if (!invoice.ok || invoice.body.id !== invoiceId) membershipFail("membership_dispute_provider_unavailable");
+    subscriptionId = refOf(invoice.body.subscription) ?? refOf(invoice.body.parent?.subscription_details?.subscription);
+  }
+  const seatId = text3(charge.body.metadata?.seatId);
+  return {
+    chargeId,
+    customerId,
+    ...invoiceId ? { invoiceId } : {},
+    ...subscriptionId ? { subscriptionId } : {},
+    ...paymentIntentId ? { paymentIntentId } : {},
+    ...seatId ? { seatId } : {}
+  };
+}
+function disputedChargeCoversMembership(charge, member) {
+  return charge.customerId === member.providerCustomerId && !charge.seatId && (charge.invoiceId !== void 0 && charge.invoiceId === member.providerInitialInvoiceId || charge.subscriptionId !== void 0 && charge.subscriptionId === member.providerSubscriptionId || charge.paymentIntentId !== void 0 && charge.paymentIntentId === member.rechargePaymentIntentId);
+}
+async function reconcileMembershipDispute(db, input, now, secretKey, resolved) {
+  membershipClock(now);
+  const row2 = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
+  const fact = row2?.fact;
+  const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
+  if (!fact || fact.objectKind !== "dispute" || fact.eventId !== input.eventId || fact.digest !== row2.digest || !fact.chargeId || !fact.objectId || fact.livemode !== (input.environment === "prod")) membershipFail("membership_billing_evidence_pending");
+  const id7 = await networkMembershipId(input);
+  const receipt = (value, applied = value.disputeEventId === input.eventId) => ({
+    membershipId: id7,
+    status: String(value.status),
+    termEndsAt: Number(value.termEndsAt),
+    graceEndsAt: Number(value.graceEndsAt ?? 0),
+    autoRenew: value.autoRenew === true,
+    ...text3(value.disputeStatus) ? { disputeStatus: text3(value.disputeStatus) } : {},
+    applied
+  });
+  const known = await membershipLoad(db, "networkMembership", id7);
+  requireMembershipScope(known, input);
+  if (known.disputeEventId === input.eventId) return receipt(known);
+  const seatKnown = known.namedSeatId ? await membershipLoad(db, "networkSeat", String(known.namedSeatId)) : void 0;
+  if (seatKnown?.disputeEventId === input.eventId) return { ...receipt(known, true), seat: namedSeatDisputeStanding(seatKnown, true) };
+  const charge = resolved && resolved.chargeId === fact.chargeId ? resolved : await readDisputedCharge(secretKey, fact.chargeId);
+  if (charge.customerId !== known.providerCustomerId) membershipFail("membership_dispute_scope_mismatch");
+  if (charge.seatId) return reconcileNamedSeatDispute(db, input, now, charge, { row: row2, fact, guard: evidenceGuard });
+  for (let attempt = 0; attempt < 8; attempt++) {
+    const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id7);
+    requireMembershipScope(member, input);
+    if (!disputedChargeCoversMembership(charge, member) || member.disputeEventId === input.eventId) return receipt(member);
+    const attrs = disputeTransition(member, fact, input.eventId, now, TERMINAL2);
+    if (!attrs) return receipt(member, false);
+    try {
+      await db.transact([membershipUpdate("networkMembership", id7, attrs)], { mutationId: `membership-dispute:${id7}:${input.eventId}`, guards: [
+        { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
+        { ns: "networkCommercialEvents", id: String(row2.id), exists: true, equals: { digest: fact.digest } },
+        evidenceGuard
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+      continue;
+    }
+    const saved = await membershipLoad(db, "networkMembership", id7);
+    requireMembershipScope(saved, input);
+    return receipt(saved, true);
+  }
+  return membershipFail("membership_dispute_retry_required");
+}
+
 // src/member-system-contract.ts
 function classifyMemberStripeEvent(identity2, target, hasProvenLegacyLocalLink) {
   const keys3 = ["appId", "environment", "dataEnvironment", "runtime", "chapterId"];
@@ -3676,7 +3878,8 @@ async function firstRow2(db, ns, q) {
 }
 async function reconcileChapterStripeEvent(input, env, ctx) {
   const db = ctx.makeDb(env);
-  const { rawBody, eventId, event: event2 } = input;
+  const { rawBody, eventId } = input;
+  let { event: event2 } = input;
   if (event2.kind === "ignored") return json({ ok: true, ignored: event2.type });
   const digest = await stripeEventDigest(rawBody);
   const legacyDigest = await stripePayloadDigest(rawBody);
@@ -3732,6 +3935,11 @@ async function reconcileChapterStripeEvent(input, env, ctx) {
     }
     return json({ ok: true, matched: Boolean(claim) });
   }
+  if (event2.kind === "disputed" && !event2.customerId) {
+    const secret = await getVaultSecret(db, "stripe_secret_key");
+    const charge = secret ? await readDisputedCharge(secret, event2.chargeId).catch(() => null) : null;
+    if (charge) event2 = { ...event2, customerId: charge.customerId };
+  }
   const app = await findPaymentApplication(db, event2);
   if (app && typeof app.stripeRuntime === "string" && app.stripeRuntime !== target.runtime) {
     reportStripePartition("warn", eventId, event2, "ignore_sibling");
@@ -3769,11 +3977,11 @@ async function reconcileChapterStripeEvent(input, env, ctx) {
   }
   let authoritativeEvent = event2;
   let membershipProjection = {};
-  if (ctx.membershipAuthority && ["renewal", "renewal_failed", "subscription_changed", "refunded"].includes(event2.kind)) {
+  if (ctx.membershipAuthority && ["renewal", "renewal_failed", "subscription_changed", "refunded", "disputed"].includes(event2.kind)) {
     try {
       const receipt = await renewChapterNetworkMembership(db, env, ctx, app, eventId);
       membershipProjection = { membershipStatus: receipt.status, membershipGraceEndsAt: receipt.graceEndsAt, membershipAutoRenew: receipt.autoRenew };
-      authoritativeEvent = receipt.status === "refunded" ? { kind: "refunded" } : { kind: "renewal", renewalAt: ["refunded", "refund_pending", "canceled", "declined", "restarting"].includes(receipt.status) ? 0 : receipt.termEndsAt };
+      authoritativeEvent = event2.kind === "disputed" ? event2 : receipt.status === "refunded" ? { kind: "refunded" } : { kind: "renewal", renewalAt: ["refunded", "refund_pending", "canceled", "declined", "restarting"].includes(receipt.status) ? 0 : receipt.termEndsAt };
     } catch {
       return json({ error: "network membership renewal reconciliation pending" }, 503);
     }
@@ -4422,10 +4630,10 @@ async function closeRecipientApplication(db, env, ctx, seatId) {
 }
 
 // src/membership-seat-refund-stripe.ts
-import { stripeRequest as stripeRequest5 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest6 } from "@odla-ai/stripe";
 
 // src/membership-checkout-seat-refund.ts
-import { stripeRequest as stripeRequest4 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest5 } from "@odla-ai/stripe";
 var fail4 = (code = "named_seat_refund_mismatch") => {
   throw Object.assign(new Error(code), { code });
 };
@@ -4434,7 +4642,7 @@ async function refundCheckoutNamedSeat(secretKey, seat) {
   const invoiceRef = seat.combinedInvoice;
   if (!invoiceRef || !/^in_[A-Za-z0-9_]+$/.test(invoiceRef.invoiceId) || !Number.isSafeInteger(invoiceRef.totalCents) || invoiceRef.totalCents <= seat.amountCents || seat.amountCents <= 0 || seat.status !== "refund_pending") fail4();
   const call = async (method, path, params, key3) => {
-    const result = await stripeRequest4({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    const result = await stripeRequest5({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
     if (!result.ok || !result.body) return fail4("named_seat_refund_provider_unavailable");
     return result.body;
   };
@@ -4507,7 +4715,7 @@ async function refundNamedSeatStripePayment(secretKey, seat) {
   if (seat.combinedInvoice) return refundCheckoutNamedSeat(secretKey, seat);
   if (!seat.providerPaymentIntentId || seat.status !== "refund_pending") fail5();
   const call = async (method, path, params, idempotencyKey) => {
-    const result = await stripeRequest5({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
+    const result = await stripeRequest6({ secretKey }, method, path, params, idempotencyKey ? { idempotencyKey } : {});
     if (!result.ok || !result.body) return fail5("named_seat_refund_provider_unavailable");
     return result.body;
   };
@@ -4649,6 +4857,9 @@ function namedSeatRecipientState(seat) {
       return seat.refundReason === "declined" ? "declined" : "refunded";
     case "canceled":
       return "canceled";
+    // A card-network dispute on the seat's own payment pauses the recipient until it is won or re-charged.
+    case "payment_disputed":
+      return "disputed";
     default:
       return "payment_pending";
   }
@@ -4975,15 +5186,232 @@ var handleAdminMembershipSeats = async (req, url, env, ctx) => {
   }
 };
 
+// src/membership-dispute-recharge.ts
+import { stripeRequest as stripeRequest7 } from "@odla-ai/stripe";
+var NS = { membership: "networkMembership", seat: "networkSeat" };
+var fail6 = (code, extra = {}) => {
+  throw Object.assign(new Error(code), { code, ...extra });
+};
+var refOf2 = (value) => typeof value === "string" && value ? value : typeof value?.id === "string" ? String(value.id) : void 0;
+async function defaultPaymentMethod(config, subscriptionId, customerId) {
+  const subscription = await stripeRequest7(config, "GET", `/v1/subscriptions/${encodeURIComponent(subscriptionId)}`);
+  if (!subscription.ok) fail6("membership_dispute_provider_unavailable");
+  const onSubscription = refOf2(subscription.body.default_payment_method);
+  if (onSubscription) return onSubscription;
+  const customer = await stripeRequest7(config, "GET", `/v1/customers/${encodeURIComponent(customerId)}`);
+  if (!customer.ok) fail6("membership_dispute_provider_unavailable");
+  return refOf2(customer.body.invoice_settings?.default_payment_method);
+}
+async function rechargeDisputed(db, kind, id7, secretKey, now) {
+  membershipClock(now);
+  const ns = NS[kind];
+  let row2 = await membershipLoad(db, ns, id7);
+  if (!row2) fail6("membership_not_found");
+  const scope2 = { chapterId: String(row2.chapterId), environment: String(row2.environment) };
+  const membershipId = kind === "membership" ? id7 : String(row2.primaryMembershipId);
+  const amountCents = Number(row2.disputeAmountCents ?? row2.amountCents), currency = String(row2.currency);
+  const done = (value, replayed) => ({
+    membershipId,
+    ...kind === "seat" ? { seatId: id7 } : {},
+    status: String(value.status),
+    paymentIntentId: String(value.rechargePaymentIntentId),
+    amountCents,
+    currency,
+    ...replayed ? { replayed } : {}
+  });
+  if (row2.status !== MEMBERSHIP_DISPUTED_STATUS) {
+    if (row2.disputeStatus === "recharged" && row2.rechargePaymentIntentId) return done(row2, true);
+    fail6("membership_not_disputed");
+  }
+  if (row2.disputeStatus !== "lost") fail6("membership_dispute_open");
+  if (!Number.isSafeInteger(amountCents) || amountCents <= 0 || !/^[a-z]{3}$/.test(currency)) fail6("membership_dispute_amount_invalid");
+  let attempt = row2.rechargeAttempt;
+  if (!attempt || attempt.finishedAt !== void 0) {
+    attempt = { key: `${kind}-recharge:${id7}:${String(row2.disputeId)}:${now}`, startedAt: now };
+    await db.transact(
+      [membershipUpdate(ns, id7, { rechargeAttempt: attempt, revision: Number(row2.revision) + 1, updatedAt: now })],
+      { mutationId: `membership-recharge-attempt:${attempt.key}`, guards: [{ ns, id: id7, exists: true, equals: { revision: row2.revision, status: MEMBERSHIP_DISPUTED_STATUS } }] }
+    );
+    row2 = await membershipLoad(db, ns, id7);
+    if (!row2 || row2.status !== MEMBERSHIP_DISPUTED_STATUS) fail6("membership_dispute_changed");
+  }
+  const config = { secretKey };
+  const paymentMethod = await defaultPaymentMethod(config, String(row2.providerSubscriptionId), String(row2.providerCustomerId));
+  if (!paymentMethod) fail6("recharge_payment_method_unavailable");
+  const intent = await stripeRequest7(config, "POST", "/v1/payment_intents", {
+    amount: amountCents,
+    currency,
+    customer: String(row2.providerCustomerId),
+    payment_method: paymentMethod,
+    off_session: "true",
+    confirm: "true",
+    description: `${kind === "seat" ? "Named seat" : "Membership"} payment reissued after dispute ${String(row2.disputeId)}`,
+    metadata: {
+      ...stripePartitionMetadata({ appId: String(row2.appId), chapterId: scope2.chapterId, environment: scope2.environment, runtime: String(row2.runtime) }),
+      applicationId: String(row2.applicationId),
+      membershipId,
+      ...kind === "seat" ? { seatId: id7 } : {},
+      disputeId: String(row2.disputeId),
+      membershipRecharge: "true"
+    }
+  }, { idempotencyKey: attempt.key });
+  const body = intent.body, error = body.error ?? {}, paymentStatus = String(body.status ?? "");
+  const finish = async (outcome) => {
+    const current = await membershipLoad(db, ns, id7);
+    if (!current) return;
+    await db.transact([membershipUpdate(ns, id7, {
+      rechargeAttempt: { ...attempt, finishedAt: now, outcome },
+      revision: Number(current.revision) + 1,
+      updatedAt: now
+    })], { mutationId: `membership-recharge-finish:${attempt.key}:${outcome}` });
+  };
+  if (!intent.ok) {
+    if (intent.status === 402 || error.type === "card_error" || typeof error.decline_code === "string") {
+      await finish("declined");
+      fail6("recharge_declined", { declineCode: typeof error.decline_code === "string" ? error.decline_code : String(error.code ?? "card_declined") });
+    }
+    fail6("membership_dispute_provider_unavailable");
+  }
+  if (["requires_payment_method", "canceled"].includes(paymentStatus)) {
+    await finish("declined");
+    fail6("recharge_declined", { declineCode: String(body.last_payment_error?.decline_code ?? paymentStatus) });
+  }
+  if (paymentStatus !== "succeeded") fail6("recharge_pending", { paymentStatus });
+  if (refOf2(body.customer) !== row2.providerCustomerId || body.amount !== amountCents) fail6("recharge_mismatch");
+  for (let retry = 0; retry < 8; retry++) {
+    const state = await loadMembershipAuthorityState(db, scope2), current = await membershipLoad(db, ns, id7);
+    if (!current) fail6("membership_not_found");
+    if (current.rechargePaymentIntentId === body.id && current.status !== MEMBERSHIP_DISPUTED_STATUS) return done(current, true);
+    const status2 = String(current.disputePriorStatus ?? (kind === "seat" ? "active" : current.journeyApprovedAt ? "active" : "paid_pending_approval"));
+    try {
+      await db.transact(
+        [membershipUpdate(ns, id7, {
+          status: status2,
+          disputeStatus: "recharged",
+          rechargePaymentIntentId: String(body.id),
+          rechargedAt: now,
+          rechargeAttempt: { ...attempt, finishedAt: now, outcome: "succeeded" },
+          revision: Number(current.revision) + 1,
+          updatedAt: now
+        })],
+        { mutationId: `membership-recharged:${attempt.key}`, guards: [
+          { ns, id: id7, exists: true, equals: { revision: current.revision, status: MEMBERSHIP_DISPUTED_STATUS } },
+          { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
+        ] }
+      );
+    } catch (cause) {
+      if (cause.code !== "transact_guard_failed") throw cause;
+      continue;
+    }
+    return done(await membershipLoad(db, ns, id7));
+  }
+  return fail6("membership_dispute_retry_required");
+}
+var rechargeDisputedMembership = (db, membershipId, secretKey, now) => rechargeDisputed(db, "membership", membershipId, secretKey, now);
+var rechargeDisputedSeat = (db, seatId, secretKey, now) => rechargeDisputed(db, "seat", seatId, secretKey, now);
+
+// src/worker-routes-admin-membership-disputes.ts
+var LIST2 = "/api/admin/membership-disputes";
+var ONE2 = /^\/api\/admin\/membership-disputes\/([A-Za-z0-9][A-Za-z0-9_.:-]{2,199})\/recharge$/;
+var PUBLIC2 = [
+  "id",
+  "appId",
+  "chapterId",
+  "environment",
+  "runtime",
+  "applicationId",
+  "skuId",
+  "status",
+  "memberNumber",
+  "amountCents",
+  "currency",
+  "recipientName",
+  "primaryMembershipId",
+  "purchasedAt",
+  "disputeId",
+  "disputeStatus",
+  "disputeReason",
+  "disputeAmountCents",
+  "disputedAt",
+  "disputeClosedAt",
+  "disputePriorStatus",
+  "rechargePaymentIntentId",
+  "rechargedAt",
+  "termEndsAt",
+  "updatedAt"
+];
+var project2 = (row2) => ({
+  ...Object.fromEntries(PUBLIC2.filter((key3) => row2[key3] !== void 0).map((key3) => [key3, row2[key3]])),
+  ...row2.rechargeAttempt && typeof row2.rechargeAttempt === "object" ? { rechargeAttempt: {
+    startedAt: row2.rechargeAttempt.startedAt ?? null,
+    finishedAt: row2.rechargeAttempt.finishedAt ?? null,
+    outcome: row2.rechargeAttempt.outcome ?? null
+  } } : {}
+});
+var FINAL = /* @__PURE__ */ new Set([
+  "membership_not_found",
+  "membership_not_disputed",
+  "membership_dispute_open",
+  "membership_dispute_amount_invalid",
+  "recharge_payment_method_unavailable",
+  "recharge_declined",
+  "recharge_pending",
+  "recharge_mismatch",
+  "membership_dispute_changed"
+]);
+var handleAdminMembershipDisputes = async (req, url, env, ctx) => {
+  const one = url.pathname.match(ONE2);
+  if (url.pathname !== LIST2 && !one) return null;
+  const operator = ctx.membershipAuthorityOperator;
+  if (!operator) return json({ error: "not found" }, 404);
+  if (req.method !== (one ? "POST" : "GET")) return json({ error: "method not allowed" }, 405);
+  const raw2 = ctx.makeDb(env), user = await ctx.verifyUser(req, env);
+  if (!user) return json({ error: "unauthorized" }, 401);
+  if (!await ctx.isSuperAdminEmail(raw2, user.email, user.userId)) return json({ error: "super-admin required", code: "super_admin_required" }, 403);
+  let db;
+  try {
+    db = operator.makeDb(env);
+  } catch {
+    return json({ error: "the membership authority is not hosted by this deployment" }, 404);
+  }
+  if (!one) {
+    const page = { $: { where: { environment: env.ODLA_ENV }, order: { updatedAt: "desc" }, limit: 500 } };
+    const found = await db.query({ networkMembership: page, networkSeat: page });
+    const memberships = found.networkMembership ?? [], seats = found.networkSeat ?? [];
+    const rows5 = [...memberships.map((row2) => ({ ...project2(row2), kind: "membership" })), ...seats.map((row2) => ({ ...project2(row2), kind: "seat" }))];
+    const disputes = rows5.filter((row2) => typeof row2.disputeId === "string").sort((a, b) => Number(b.disputedAt ?? 0) - Number(a.disputedAt ?? 0));
+    return json({ disputes, truncated: memberships.length >= 500 || seats.length >= 500 });
+  }
+  const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
+  if (!secret) return json({ error: "network payment provider unavailable" }, 503);
+  try {
+    const receipt = await (one[1].startsWith("seat_") ? rechargeDisputedSeat : rechargeDisputedMembership)(db, one[1], secret, Date.now());
+    return json({ ok: true, ...receipt });
+  } catch (error) {
+    const failure = error;
+    const code = typeof failure.code === "string" ? failure.code : void 0;
+    if (code === "membership_not_found") return json({ error: "not found", code }, 404);
+    if (code && FINAL.has(code)) {
+      return json({
+        error: "the charge could not be re-issued",
+        code,
+        ...failure.declineCode ? { declineCode: failure.declineCode } : {},
+        ...failure.paymentStatus ? { paymentStatus: failure.paymentStatus } : {}
+      }, 409);
+    }
+    return json({ error: "re-charge is pending; retry to confirm", ...code ? { code } : {} }, 503);
+  }
+};
+
 // src/membership-policy-versions.ts
 var LIMIT = 200;
-var text2 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
+var text4 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
 var instant = (value) => {
   const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
   return Number.isSafeInteger(at2) && at2 >= 0 ? at2 : void 0;
 };
 function provenance(row2) {
-  const source = text2(row2.source), actor = text2(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
+  const source = text4(row2.source), actor = text4(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
   return { ...source ? { source } : {}, ...actor ? { actor } : {}, ...recordedAt !== void 0 ? { recordedAt } : {} };
 }
 var live = (w, now) => w.from <= now && (w.until === void 0 || now < w.until);
@@ -5077,16 +5505,16 @@ var handleAdminMembershipPolicyVersions = async (req, url, env, ctx) => {
 };
 
 // src/membership-discount-reterm.ts
-import { stripeRequest as stripeRequest7 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest9 } from "@odla-ai/stripe";
 
 // src/subscription-provider-contract.ts
-import { stripeRequest as stripeRequest6 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest8 } from "@odla-ai/stripe";
 function subscriptionContractMismatch() {
   throw Object.assign(new Error("Stripe subscription does not match the checkout contract"), { code: "stripe_contract_mismatch" });
 }
 async function verifySubscriptionPrice(secretKey, input, resume = false) {
   if (!/^price_[A-Za-z0-9]+$/.test(input.priceId) || !Number.isSafeInteger(input.priceCents) || input.priceCents <= 0 || !/^[a-z]{3}$/.test(input.currency) || !["month", "year"].includes(input.interval)) subscriptionContractMismatch();
-  const result = await stripeRequest6({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
+  const result = await stripeRequest8({ secretKey }, "GET", `/v1/prices/${encodeURIComponent(input.priceId)}`);
   const price = result.body;
   if (!result.ok || !price || price.id !== input.priceId || !resume && price.active !== true || price.unit_amount !== input.priceCents || price.currency !== input.currency || price.type !== "recurring" || price.billing_scheme !== "per_unit" || price.custom_unit_amount || price.transform_quantity || price.recurring?.interval !== input.interval || price.recurring?.interval_count !== 1 || price.recurring?.usage_type !== "licensed" || price.livemode !== (input.environment === "prod")) subscriptionContractMismatch();
   return typeof price.product === "string" ? price.product : void 0;
@@ -5124,7 +5552,7 @@ async function retermPolicy(db, scope2, id7) {
 }
 async function attachProviderDiscount(sk, scope2, member, policy2, couponId, productId) {
   const subId = String(member.providerSubscriptionId), path = `/v1/subscriptions/${encodeURIComponent(subId)}`;
-  const read2 = await stripeRequest7({ secretKey: sk }, "GET", path, { "expand[0]": "discounts" });
+  const read2 = await stripeRequest9({ secretKey: sk }, "GET", path, { "expand[0]": "discounts" });
   const sub = read2.body, items = sub?.items?.data;
   const metadata = { ...stripePartitionMetadata(scope2), applicationId: String(member.applicationId) };
   if (!read2.ok || sub.id !== subId || sub.customer !== member.providerCustomerId || sub.livemode !== (scope2.environment === "prod") || !PROVIDER_LIVE.has(sub.status) || !Object.entries(metadata).every(([key3, value]) => sub.metadata?.[key3] === value) || sub.items?.has_more !== false || !Array.isArray(items) || items.length < 1 || items.length > 2 || items.filter((item) => item.price?.id === member.providerPriceId && item.quantity === 1 && item.price?.product === productId).length !== 1) {
@@ -5135,7 +5563,7 @@ async function attachProviderDiscount(sk, scope2, member, policy2, couponId, pro
   const present = discounts.map(couponOf);
   if (present.length === 1 && present[0] === couponId) return false;
   if (present.length > 0) throw Object.assign(new Error("provider subscription carries an unrelated discount"), { code: "provider_mismatch" });
-  const written = await stripeRequest7({ secretKey: sk }, "POST", path, {
+  const written = await stripeRequest9({ secretKey: sk }, "POST", path, {
     "discounts[0][coupon]": couponId,
     "expand[0]": "discounts",
     "metadata[discountPolicyVersionId]": policy2.id
@@ -5984,8 +6412,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id7) {
-  const text8 = id7.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text8 ? `${text8[0].toUpperCase()}${text8.slice(1)}` : id7;
+  const text10 = id7.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text10 ? `${text10[0].toUpperCase()}${text10.slice(1)}` : id7;
 }
 function applicationDefs(chapter) {
   try {
@@ -6052,7 +6480,7 @@ var ID3 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var text3 = (value, path, errors, max) => {
+var text5 = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -6080,23 +6508,23 @@ function validateGiftOfferCatalog(input, tierIds) {
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key3 of Object.keys(item)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
-    const id7 = text3(item.id, `${path}.id`, errors, 80);
+    const id7 = text5(item.id, `${path}.id`, errors, 80);
     if (id7 && !ID3.test(id7)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (ids2.has(id7)) errors.push(`${path}.id duplicates "${id7}"`);
     ids2.add(id7);
     const targetRaw = record(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
-      const tierId = text3(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
+      const tierId = text5(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
       if (!tierIds.has(tierId)) errors.push(`${path}.target.tierId must reference a declared tier`);
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
-      const entitlementKey = text3(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
+      const entitlementKey = text5(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
       if (entitlementKey && !ID3.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
-    const stripePriceId = text3(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
+    const stripePriceId = text5(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
     if (stripePriceId && !PRICE.test(stripePriceId)) errors.push(`${path}.stripePriceId must be a real Stripe Price id`);
     if (!Number.isSafeInteger(item.priceCents) || Number(item.priceCents) < 1 || Number(item.priceCents) > 1e8) errors.push(`${path}.priceCents must be an integer from 1 to 100,000,000`);
     const currency = typeof item.currency === "string" ? item.currency.trim().toLowerCase() : "";
@@ -6118,9 +6546,9 @@ function validateGiftOfferCatalog(input, tierIds) {
       redemptionLifetimeHours: lifetime,
       ...activeFrom !== void 0 ? { activeFrom } : {},
       ...activeUntil !== void 0 ? { activeUntil } : {},
-      title: text3(item.title, `${path}.title`, errors, 160),
-      description: text3(item.description, `${path}.description`, errors, 2e3),
-      ctaLabel: text3(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
+      title: text5(item.title, `${path}.title`, errors, 160),
+      description: text5(item.description, `${path}.description`, errors, 2e3),
+      ctaLabel: text5(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
     });
   }
   return errors.length ? { ok: false, errors } : { ok: true, value: { schemaVersion: 1, offers } };
@@ -6347,23 +6775,23 @@ async function createPaymentQuote(input) {
 // src/membership-quote-projection.ts
 var MEMBERSHIP_QUOTE_NAMESPACE = "membershipQuoteProjections";
 var keys2 = ["appId", "chapterId", "environment", "runtime", "applicationId", "skuId"];
-var fail6 = (code) => {
+var fail7 = (code) => {
   throw Object.assign(new Error(code), { code });
 };
 var load3 = async (db, ns, id7) => (await db.query({ [ns]: { $: { where: { id: id7 }, limit: 1 } } }))[ns]?.[0];
 async function restore2(row2, target, now, allowExpired = false) {
-  if (!row2 || keys2.some((key3) => row2[key3] !== target[key3]) || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1 || typeof row2.requestId !== "string") return fail6("membership_quote_unavailable");
-  if (row2.status !== "ready") return fail6("membership_quote_pending");
+  if (!row2 || keys2.some((key3) => row2[key3] !== target[key3]) || !Number.isSafeInteger(row2.revision) || Number(row2.revision) < 1 || typeof row2.requestId !== "string") return fail7("membership_quote_unavailable");
+  if (row2.status !== "ready") return fail7("membership_quote_pending");
   const offer = await verifyIssuedMembershipOffer(row2.offer, { ...target, offerId: await membershipOfferIdForRequest({
     ...target,
     requestId: row2.requestId
   }), now, lifetimeMs: 6e4 });
-  if (offer.issuedAt > now + 3e4 || !allowExpired && offer.expiresAt <= now) return fail6("membership_quote_expired");
+  if (offer.issuedAt > now + 3e4 || !allowExpired && offer.expiresAt <= now) return fail7("membership_quote_expired");
   const tier = row2.tier, quote = row2.quote;
   const offering = offer.contract.offering;
-  if (quote?.seatOffer && quote.seatOffer.amountCents !== offering.seatPriceCents) return fail6("membership_quote_conflict");
+  if (quote?.seatOffer && quote.seatOffer.amountCents !== offering.seatPriceCents) return fail7("membership_quote_conflict");
   if (!tier || tier.id !== target.skuId || tier.groupId !== target.chapterId || !tier.stripePriceId || tier.priceCents !== offering.basePriceCents || tier.currency !== offering.currency || tier.interval !== offering.interval || !quote) {
-    return fail6("membership_catalog_mismatch");
+    return fail7("membership_catalog_mismatch");
   }
   const expected = await createPaymentQuote({
     ...target,
@@ -6376,7 +6804,7 @@ async function restore2(row2, target, now, allowExpired = false) {
     seatOffer: quote.seatOffer,
     namedSeat: quote.namedSeat
   });
-  if (quote.digest !== expected.digest) return fail6("membership_quote_conflict");
+  if (quote.digest !== expected.digest) return fail7("membership_quote_conflict");
   return { tier, quote: expected, billingTerms: offer.contract.billingTerms, membershipOffer: offer, projectionRevision: Number(row2.revision) };
 }
 async function readMembershipQuote(db, target, now) {
@@ -6384,9 +6812,9 @@ async function readMembershipQuote(db, target, now) {
 }
 async function prepareMembershipQuote(db, input, issue) {
   const { applicationId: id7, now, app } = input;
-  if (app.id !== id7 || app.groupId !== input.chapterId || app.tierId !== input.skuId || app.stripeRuntime !== input.runtime || app.status !== "submitted" || app.canceled === true || app.giftOfferId || app.giftClaimId || app.namedSeatId || app.namedSeatClaimPending) return fail6("membership_quote_unavailable");
+  if (app.id !== id7 || app.groupId !== input.chapterId || app.tierId !== input.skuId || app.stripeRuntime !== input.runtime || app.status !== "submitted" || app.canceled === true || app.giftOfferId || app.giftClaimId || app.namedSeatId || app.namedSeatClaimPending) return fail7("membership_quote_unavailable");
   let row2 = await load3(db, MEMBERSHIP_QUOTE_NAMESPACE, id7);
-  if (row2 && keys2.some((key3) => row2[key3] !== input[key3])) return fail6("membership_quote_conflict");
+  if (row2 && keys2.some((key3) => row2[key3] !== input[key3])) return fail7("membership_quote_conflict");
   if (row2?.status === "ready") {
     try {
       return await restore2(row2, input, now);
@@ -6431,7 +6859,7 @@ async function prepareMembershipQuote(db, input, issue) {
   }
   if (row2?.status === "ready") return restore2(row2, input, now);
   if (!row2 || row2.status !== "pending" || keys2.some((key3) => row2[key3] !== input[key3]) || typeof row2.requestId !== "string") {
-    return fail6("membership_quote_pending");
+    return fail7("membership_quote_pending");
   }
   const target = Object.fromEntries(keys2.map((key3) => [key3, input[key3]]));
   const offer = await verifyIssuedMembershipOffer(await issue({ ...target, requestId: row2.requestId }), {
@@ -6480,7 +6908,7 @@ async function prepareMembershipQuote(db, input, issue) {
   return restore2(await load3(db, MEMBERSHIP_QUOTE_NAMESPACE, id7), target, now);
 }
 async function selectCheckoutNamedSeat(db, target, input) {
-  if (!input.enabled) return fail6("named_seat_purchase_unavailable");
+  if (!input.enabled) return fail7("named_seat_purchase_unavailable");
   const row2 = await load3(db, MEMBERSHIP_QUOTE_NAMESPACE, target.applicationId);
   const current = await restore2(row2, target, input.now);
   const namedSeat = input.selection === null ? void 0 : checkoutNamedSeatSelection(input.selection, input.purchaserEmail);
@@ -6536,17 +6964,17 @@ async function readBoundedRequestText(req, maxBytes) {
     if (!reader) return "";
     const decoder = new TextDecoder();
     let bytes = 0;
-    let text8 = "";
+    let text10 = "";
     for (; ; ) {
       const { done, value } = await reader.read();
       if (req.signal.aborted) return invalid2();
       if (done) {
         complete = true;
-        return text8 + decoder.decode();
+        return text10 + decoder.decode();
       }
       bytes += value.byteLength;
       if (bytes > maxBytes) return json({ error: "request body too large" }, 413);
-      text8 += decoder.decode(value, { stream: true });
+      text10 += decoder.decode(value, { stream: true });
     }
   } catch {
     return invalid2();
@@ -6650,9 +7078,9 @@ async function paymentQuoteRoute(url, env, ctx, prepare = false, request) {
   let selection;
   if (request?.body) {
     try {
-      const text8 = await readBoundedRequestText(request, 2048);
-      if (text8 instanceof Response) return text8;
-      const body = JSON.parse(text8);
+      const text10 = await readBoundedRequestText(request, 2048);
+      if (text10 instanceof Response) return text10;
+      const body = JSON.parse(text10);
       if (!body || typeof body !== "object" || Array.isArray(body) || Object.keys(body).some((key3) => key3 !== "namedSeat")) throw new Error("invalid body");
       selection = body.namedSeat;
     } catch {
@@ -7307,10 +7735,13 @@ var handleMember = async (req, url, env, ctx) => {
     const db = ctx.makeDb(env);
     const groupId = url.searchParams.get("group") ?? chapter.id;
     if (groupId !== chapter.id) return json({ error: "not found" }, 404);
-    const { groups } = await db.query({ groups: { $: { where: { id: groupId }, limit: 1 } } });
+    const [{ groups }, stripeKey, activeControl] = await Promise.all([
+      db.query({ groups: { $: { where: { id: groupId }, limit: 1 } } }),
+      getVaultSecret(db, "stripe_secret_key"),
+      chapter.signupControl ? loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : Promise.resolve(null)
+    ]);
     const group = Array.isArray(groups) ? groups[0] : void 0;
     if (!group) return json({ error: "not found" }, 404);
-    const stripeKey = await getVaultSecret(db, "stripe_secret_key");
     const paymentsReady = Boolean(group.stripePublishableKey && group.stripePriceId && stripeKey);
     const offered = await loadOfferableTiers(
       db,
@@ -7319,7 +7750,6 @@ var handleMember = async (req, url, env, ctx) => {
     );
     const seats = /* @__PURE__ */ new Map();
     const founding = await foundingPreviews(offered, env, ctx, seats);
-    const activeControl = chapter.signupControl ? await loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : null;
     const application = controlledApplication(chapter.application, activeControl?.document);
     return json({
       ...joinConfig(group, paymentsReady, joinConfigTiers(offered, { currency: typeof group.currency === "string" ? group.currency : void 0, interval: group.interval === "month" ? "month" : "year" }, founding, seats), application.conditions),
@@ -7357,11 +7787,14 @@ var handleMember = async (req, url, env, ctx) => {
       parsed.tierId = named.invitation.skuId;
       submissionId = `named-seat:${named.invitation.seatId}:${named.userId}`;
     }
-    const eligibility = named ? null : await resolveSignupEligibility(db, chapter, parsed, submissionId);
+    const [eligibility, activeControl, offeredTierIds, group] = await Promise.all([
+      named ? null : resolveSignupEligibility(db, chapter, parsed, submissionId),
+      chapter.signupControl ? loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : null,
+      typeof parsed.tierId === "string" && parsed.tierId ? loadTiers(db, { id: chapter.id }).then((tiers) => tiers.map((tier) => tier.id)) : void 0,
+      db.query({ groups: { $: { where: { id: chapter.id }, limit: 1 } } }).then(({ groups }) => Array.isArray(groups) ? groups[0] : void 0)
+    ]);
     if (eligibility?.conflict) return eligibility.conflict;
-    const activeControl = chapter.signupControl ? await loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : null;
     const effectiveChapter = activeControl ? { ...chapter, application: controlledApplication(chapter.application, activeControl.document) } : chapter;
-    const offeredTierIds = typeof parsed.tierId === "string" && parsed.tierId ? (await loadTiers(db, { id: chapter.id })).map((tier) => tier.id) : void 0;
     const now = Date.now();
     const requestedGiftId = typeof parsed.giftOfferId === "string" ? parsed.giftOfferId : "";
     const giftOffer = requestedGiftId ? findGiftOffer(activeControl?.document.giftOffers, requestedGiftId, now) : null;
@@ -7400,18 +7833,16 @@ var handleMember = async (req, url, env, ctx) => {
       if (provisioningFailure.status === 409) await rejectUnprovisionedSignup(db, result.id, canonical3.status);
       return json(provisioningFailure.body, provisioningFailure.status);
     }
-    if (predecessor) await syncApplicationToCrm(crmDeps(db, ctx), { app: canonical3, stage: String(canonical3.status) }).catch(() => void 0);
-    const groups = (await db.query({ groups: { $: { where: { id: chapter.id }, limit: 1 } } })).groups;
-    const group = Array.isArray(groups) ? groups[0] : void 0;
+    if (predecessor) await deferWork(ctx, req, () => syncApplicationToCrm(crmDeps(db, ctx), { app: canonical3, stage: String(canonical3.status) }).catch(() => void 0));
     const notice = group ? { group, application: canonical3, origin: url.origin } : null;
-    if (notice && !result.duplicate && effectiveChapter.sends.adminNotification === "submit") await notifyAdminOfApplication(db, env, notice);
+    if (notice && !result.duplicate && effectiveChapter.sends.adminNotification === "submit") await deferWork(ctx, req, () => notifyAdminOfApplication(db, env, notice));
     const state = notice ? await continueJoin(db, ctx, env, url.origin, canonical3, notice.group) : null;
     if (!state) return json({
       error: "Application saved; its next step is temporarily unavailable. Retry this submission.",
       code: "application_continuation_unavailable",
       id: result.id
     }, 503);
-    if (notice && !result.duplicate) await notifySubmitConfirmed(db, env, { ...notice, state });
+    if (notice && !result.duplicate) await deferWork(ctx, req, () => notifySubmitConfirmed(db, env, { ...notice, state }));
     const final = (await db.query({ applications: { $: { where: { id: result.id }, limit: 1 } } })).applications?.[0];
     if (!final || final.groupId !== chapter.id || state === "accepted" && final.status !== "approved") {
       return json({ error: "application changed; reload its current state" }, 409);
@@ -7531,10 +7962,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text8 = value.trim();
-  if (required && !text8) errors.push(`${path} is required`);
-  if (text8.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text8;
+  const text10 = value.trim();
+  if (required && !text10) errors.push(`${path} is required`);
+  if (text10.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text10;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -7583,8 +8014,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text8 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text8 ? [text8] : [];
+          const text10 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text10 ? [text10] : [];
         });
       }
     }
@@ -7678,7 +8109,7 @@ var recordOf = (value) => value !== null && typeof value === "object" && !Array.
 function unknownKeys(value, allowed2, path, errors) {
   for (const key3 of Object.keys(value)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
 }
-function text4(value, path, errors, max = 65536) {
+function text6(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -7701,11 +8132,11 @@ function tiersOf(value, errors) {
       return [];
     }
     unknownKeys(item, TIER_KEYS2, path, errors);
-    const id7 = text4(item.id, `${path}.id`, errors, 80);
+    const id7 = text6(item.id, `${path}.id`, errors, 80);
     if (id7 && !TIER.test(id7)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (seen.has(id7)) errors.push(`${path}.id duplicates "${id7}"`);
     seen.add(id7);
-    const name = text4(item.name, `${path}.name`, errors, 160);
+    const name = text6(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
     if (!Number.isInteger(item.priceCents) || Number(item.priceCents) < 0 || Number(item.priceCents) > 1e8) {
@@ -7723,7 +8154,7 @@ function tiersOf(value, errors) {
     if (item.interval !== void 0 && item.interval !== "year" && item.interval !== "month") {
       errors.push(`${path}.interval must be year or month`);
     }
-    const blurb = item.blurb === void 0 ? void 0 : text4(item.blurb, `${path}.blurb`, errors, 4e3);
+    const blurb = item.blurb === void 0 ? void 0 : text6(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
       id: id7,
       name,
@@ -7781,7 +8212,7 @@ function policyOf(value, errors, tiers) {
   const result = {};
   for (const key3 of allowed2) {
     if (input[key3] === void 0 && key3 !== "disclaimerText" && key3 !== "refundPolicyText") continue;
-    result[key3] = text4(input[key3], `document.policy.${key3}`, errors);
+    result[key3] = text6(input[key3], `document.policy.${key3}`, errors);
   }
   const tierPolicies = {};
   if (input.tierPolicies !== void 0) {
@@ -7796,8 +8227,8 @@ function policyOf(value, errors, tiers) {
       }
       unknownKeys(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
       tierPolicies[id7] = {
-        refundPolicyText: text4(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
-        ...policy2.trustCopy !== void 0 ? { trustCopy: text4(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
+        refundPolicyText: text6(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
+        ...policy2.trustCopy !== void 0 ? { trustCopy: text6(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
     }
   }
@@ -7837,9 +8268,9 @@ function validateSignupControlDocument(input) {
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
   const source = recordOf(root.source);
   const target = recordOf(root.target);
-  const appId = text4(source?.appId, "document.source.appId", errors, 63);
-  const chapterId = text4(target?.chapterId, "document.target.chapterId", errors, 63);
-  const environment = text4(target?.environment, "document.target.environment", errors, 63);
+  const appId = text6(source?.appId, "document.source.appId", errors, 63);
+  const chapterId = text6(target?.chapterId, "document.target.chapterId", errors, 63);
+  const environment = text6(target?.environment, "document.target.environment", errors, 63);
   if (appId && !SLUG.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
   if (chapterId && !SLUG.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
@@ -9351,8 +9782,8 @@ async function bookSlot(req, env, ctx) {
   const appOp = { t: "update", ns: "applications", id: applicationId, attrs: bookingAttrs };
   await db.transact([meetingOp, appOp]);
   const booked = { ...app, ...bookingAttrs };
-  await syncApplicationToCrm(crmDeps(db, ctx), { app: booked, stage: String(booked.status ?? "") }).catch(() => void 0);
-  await notifyBookingConfirmed(db, env, { group, application: app, meeting: { startAt, endAt, timezone: cfg.timezone, meetUrl, htmlLink } });
+  await deferWork(ctx, req, () => syncApplicationToCrm(crmDeps(db, ctx), { app: booked, stage: String(booked.status ?? "") }).catch(() => void 0));
+  await deferWork(ctx, req, () => notifyBookingConfirmed(db, env, { group, application: app, meeting: { startAt, endAt, timezone: cfg.timezone, meetUrl, htmlLink } }));
   return json({ ok: true, startAt, endAt, meetUrl, rescheduled: decision.reschedule });
 }
 var handleSchedule = async (req, url, env, ctx) => {
@@ -9376,28 +9807,28 @@ var handleSchedule = async (req, url, env, ctx) => {
 };
 
 // src/payments-stripe.ts
-import { stripeRequest as stripeRequest10, verifyStripeSignature as verifyStripeSignature2 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest12, verifyStripeSignature as verifyStripeSignature2 } from "@odla-ai/stripe";
 
 // src/payments-refund.ts
-import { stripeRequest as stripeRequest8 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest10 } from "@odla-ai/stripe";
 var row = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 var id3 = (value) => typeof value === "string" ? value : String(row(value).id ?? "");
 var providerId2 = (value, prefix) => new RegExp(`^${prefix}_[A-Za-z0-9]+$`).test(value);
-function fail7(code = "refund_target_mismatch") {
+function fail8(code = "refund_target_mismatch") {
   throw Object.assign(new Error(code), { code });
 }
 async function refundSubscriptionPayment(secretKey, input) {
-  if (!providerId2(input.customerId, "cus") || !providerId2(input.subscriptionId, "sub")) fail7();
+  if (!providerId2(input.customerId, "cus") || !providerId2(input.subscriptionId, "sub")) fail8();
   const call = async (method, path, params, key3) => {
-    const result = await stripeRequest8({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
-    if (!result.ok) fail7("stripe_error");
-    if (!result.body || typeof result.body !== "object" || Array.isArray(result.body)) fail7("stripe_invalid_response");
+    const result = await stripeRequest10({ secretKey }, method, path, params, key3 ? { idempotencyKey: key3 } : {});
+    if (!result.ok) fail8("stripe_error");
+    if (!result.body || typeof result.body !== "object" || Array.isArray(result.body)) fail8("stripe_invalid_response");
     return result.body;
   };
   const sub = await call("GET", `/v1/subscriptions/${input.subscriptionId}`);
-  if (id3(sub) !== input.subscriptionId || id3(sub.customer) !== input.customerId) fail7();
+  if (id3(sub) !== input.subscriptionId || id3(sub.customer) !== input.customerId) fail8();
   for (const [key3, value] of Object.entries(input.metadata ?? {})) {
-    if (row(sub.metadata)[key3] !== value) fail7();
+    if (row(sub.metadata)[key3] !== value) fail8();
   }
   let cursor;
   let earliest;
@@ -9410,66 +9841,66 @@ async function refundSubscriptionPayment(secretKey, input) {
       limit: 100,
       ...cursor ? { starting_after: cursor } : {}
     });
-    if (!Array.isArray(list.data) || typeof list.has_more !== "boolean") fail7("stripe_invalid_response");
+    if (!Array.isArray(list.data) || typeof list.has_more !== "boolean") fail8("stripe_invalid_response");
     for (const value of list.data) {
       const invoice2 = row(value);
       const subscription = invoice2.subscription ?? row(row(invoice2.parent).subscription_details).subscription;
-      if (!providerId2(id3(invoice2), "in") || seen.has(id3(invoice2)) || id3(subscription) !== input.subscriptionId || id3(invoice2.customer) !== input.customerId || invoice2.status !== "paid" || !Number.isSafeInteger(invoice2.created) || !Number.isSafeInteger(invoice2.amount_paid) || Number(invoice2.amount_paid) < 0) fail7();
+      if (!providerId2(id3(invoice2), "in") || seen.has(id3(invoice2)) || id3(subscription) !== input.subscriptionId || id3(invoice2.customer) !== input.customerId || invoice2.status !== "paid" || !Number.isSafeInteger(invoice2.created) || !Number.isSafeInteger(invoice2.amount_paid) || Number(invoice2.amount_paid) < 0) fail8();
       seen.add(id3(invoice2));
       if (Number(invoice2.amount_paid) > 0 && (!earliest || Number(invoice2.created) < Number(earliest.created))) earliest = invoice2;
     }
     if (!list.has_more) break;
-    if (!list.data.length || page === 9) fail7("refund_history_incomplete");
+    if (!list.data.length || page === 9) fail8("refund_history_incomplete");
     cursor = id3(list.data[list.data.length - 1]);
   }
-  if (!earliest) fail7("no_charge");
+  if (!earliest) fail8("no_charge");
   const invoice = earliest;
-  if (input.expectedInvoiceId !== void 0 && id3(invoice) !== input.expectedInvoiceId || input.expectedAmountCents !== void 0 && invoice.amount_paid !== input.expectedAmountCents) fail7();
+  if (input.expectedInvoiceId !== void 0 && id3(invoice) !== input.expectedInvoiceId || input.expectedAmountCents !== void 0 && invoice.amount_paid !== input.expectedAmountCents) fail8();
   let chargeId = id3(invoice.charge);
   let paymentIntentId = id3(invoice.payment_intent);
   if (!chargeId && !paymentIntentId) {
     const payments = await call("GET", "/v1/invoice_payments", { invoice: id3(invoice), status: "paid", limit: 100 });
-    if (payments.has_more !== false || !Array.isArray(payments.data) || payments.data.length !== 1) fail7("refund_payment_ambiguous");
+    if (payments.has_more !== false || !Array.isArray(payments.data) || payments.data.length !== 1) fail8("refund_payment_ambiguous");
     const payment = row(payments.data[0]);
-    if (id3(payment.invoice) !== id3(invoice) || payment.status !== "paid" || row(payment.payment).type !== "payment_intent") fail7();
+    if (id3(payment.invoice) !== id3(invoice) || payment.status !== "paid" || row(payment.payment).type !== "payment_intent") fail8();
     paymentIntentId = id3(row(payment.payment).payment_intent);
   }
   if (!chargeId) {
-    if (!providerId2(paymentIntentId, "pi")) fail7();
+    if (!providerId2(paymentIntentId, "pi")) fail8();
     const payment = await call("GET", `/v1/payment_intents/${paymentIntentId}`);
-    if (id3(payment) !== paymentIntentId || id3(payment.customer) !== input.customerId || payment.status !== "succeeded") fail7();
+    if (id3(payment) !== paymentIntentId || id3(payment.customer) !== input.customerId || payment.status !== "succeeded") fail8();
     chargeId = id3(payment.latest_charge);
   }
-  if (!providerId2(chargeId, "ch")) fail7();
+  if (!providerId2(chargeId, "ch")) fail8();
   const charge = await call("GET", `/v1/charges/${chargeId}`);
-  if (id3(charge) !== chargeId || id3(charge.customer) !== input.customerId || charge.status !== "succeeded" || charge.invoice != null && id3(charge.invoice) !== id3(invoice) || paymentIntentId && id3(charge.payment_intent) !== paymentIntentId || !Number.isSafeInteger(charge.amount) || Number(charge.amount) <= 0 || !Number.isSafeInteger(charge.amount_refunded) || Number(charge.amount_refunded) < 0 || Number(charge.amount_refunded) > Number(charge.amount) || charge.currency !== invoice.currency || Number(charge.amount) !== Number(invoice.amount_paid)) fail7();
-  if (input.alreadyRefundedChargeId !== void 0 && (chargeId !== input.alreadyRefundedChargeId || charge.amount_refunded !== charge.amount || charge.refunded !== true)) fail7();
+  if (id3(charge) !== chargeId || id3(charge.customer) !== input.customerId || charge.status !== "succeeded" || charge.invoice != null && id3(charge.invoice) !== id3(invoice) || paymentIntentId && id3(charge.payment_intent) !== paymentIntentId || !Number.isSafeInteger(charge.amount) || Number(charge.amount) <= 0 || !Number.isSafeInteger(charge.amount_refunded) || Number(charge.amount_refunded) < 0 || Number(charge.amount_refunded) > Number(charge.amount) || charge.currency !== invoice.currency || Number(charge.amount) !== Number(invoice.amount_paid)) fail8();
+  if (input.alreadyRefundedChargeId !== void 0 && (chargeId !== input.alreadyRefundedChargeId || charge.amount_refunded !== charge.amount || charge.refunded !== true)) fail8();
   if (charge.amount_refunded !== charge.amount) {
     const refund = await call("POST", "/v1/refunds", {
       charge: chargeId,
       ...input.metadata ? { metadata: input.metadata } : {}
     }, `chapter-initial-refund:${input.subscriptionId}:${chargeId}`);
-    if (id3(refund.charge) !== chargeId || !["succeeded", "pending"].includes(String(refund.status)) || !Number.isSafeInteger(refund.amount) || Number(refund.amount) !== Number(charge.amount) - Number(charge.amount_refunded)) fail7("refund_not_confirmed");
+    if (id3(refund.charge) !== chargeId || !["succeeded", "pending"].includes(String(refund.status)) || !Number.isSafeInteger(refund.amount) || Number(refund.amount) !== Number(charge.amount) - Number(charge.amount_refunded)) fail8("refund_not_confirmed");
   }
   let subscriptionCanceled = sub.status === "canceled";
   if (input.cancelSubscription !== false && !subscriptionCanceled) {
     const canceled = await call("DELETE", `/v1/subscriptions/${input.subscriptionId}`);
-    if (id3(canceled) !== input.subscriptionId || canceled.status !== "canceled") fail7("refund_cancel_incomplete");
+    if (id3(canceled) !== input.subscriptionId || canceled.status !== "canceled") fail8("refund_cancel_incomplete");
     subscriptionCanceled = true;
   }
   const confirmed = await call("GET", `/v1/charges/${chargeId}`);
-  if (id3(confirmed) !== chargeId || id3(confirmed.customer) !== input.customerId || confirmed.amount !== charge.amount || confirmed.currency !== charge.currency || confirmed.amount_refunded !== charge.amount || confirmed.refunded !== true) fail7("refund_not_confirmed");
+  if (id3(confirmed) !== chargeId || id3(confirmed.customer) !== input.customerId || confirmed.amount !== charge.amount || confirmed.currency !== charge.currency || confirmed.amount_refunded !== charge.amount || confirmed.refunded !== true) fail8("refund_not_confirmed");
   return { refundedCents: Number(charge.amount), subscriptionCanceled };
 }
 
 // src/subscription-payment-identity.ts
-import { stripeRequest as stripeRequest9 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest11 } from "@odla-ai/stripe";
 var id4 = (value) => typeof value === "string" ? value : String(value?.id ?? "");
 async function tagSubscriptionPayment(secretKey, invoice, customerId, metadata, clientSecret2, applicationId) {
   let paymentId = id4(invoice.payment_intent);
   if (!paymentId) {
     if (!/^in_[A-Za-z0-9]+$/.test(id4(invoice))) subscriptionContractMismatch();
-    const result2 = await stripeRequest9({ secretKey }, "GET", "/v1/invoice_payments", { invoice: id4(invoice), limit: 100 });
+    const result2 = await stripeRequest11({ secretKey }, "GET", "/v1/invoice_payments", { invoice: id4(invoice), limit: 100 });
     const list = result2.body;
     if (!result2.ok || list?.has_more !== false || !Array.isArray(list.data) || list.data.length !== 1) subscriptionContractMismatch();
     const link = list.data[0];
@@ -9478,11 +9909,11 @@ async function tagSubscriptionPayment(secretKey, invoice, customerId, metadata,
   }
   if (!/^pi_[A-Za-z0-9]+$/.test(paymentId)) subscriptionContractMismatch();
   const path = `/v1/payment_intents/${paymentId}`;
-  const result = await stripeRequest9({ secretKey }, "GET", path);
+  const result = await stripeRequest11({ secretKey }, "GET", path);
   const payment = result.body;
   if (!result.ok || payment?.id !== paymentId || id4(payment.customer) !== customerId || payment.amount !== invoice.total || payment.currency !== invoice.currency || payment.client_secret !== clientSecret2 || payment.livemode !== (metadata.odlaEnvironment === "prod") || !Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === void 0 || payment.metadata[key3] === value)) subscriptionContractMismatch();
   if (Object.entries(metadata).every(([key3, value]) => payment.metadata?.[key3] === value)) return;
-  const tagged = await stripeRequest9(
+  const tagged = await stripeRequest11(
     { secretKey },
     "POST",
     path,
@@ -9494,7 +9925,7 @@ async function tagSubscriptionPayment(secretKey, invoice, customerId, metadata,
 
 // src/payments-stripe.ts
 async function stripeCall(sk, method, path, params, idempotencyKey) {
-  return stripeRequest10(
+  return stripeRequest12(
     { secretKey: sk },
     method,
     path,
@@ -9502,7 +9933,7 @@ async function stripeCall(sk, method, path, params, idempotencyKey) {
     idempotencyKey ? { idempotencyKey } : {}
   );
 }
-function fail8(op, r) {
+function fail9(op, r) {
   const err = new Error(`stripe ${op} failed: ${r.status}`);
   err.code = "stripe_error";
   throw err;
@@ -9561,7 +9992,7 @@ function createStripeProvider(config) {
           { email: input.email, name: input.name, metadata: meta },
           `cus:${input.applicationId}`
         );
-        if (!cust.ok) fail8("customer create", cust);
+        if (!cust.ok) fail9("customer create", cust);
         if (typeof cust.body.id !== "string" || !/^cus_[A-Za-z0-9]+$/.test(cust.body.id)) subscriptionContractMismatch();
         customerId = cust.body.id;
       }
@@ -9606,7 +10037,7 @@ function createStripeProvider(config) {
         // retry between create and the db write can't orphan a second one.
         `sub:${input.applicationId}${input.purchaseAttemptId ? `:${input.purchaseAttemptId}` : ""}`
       );
-      if (!sub.ok) fail8("subscription create", sub);
+      if (!sub.ok) fail9("subscription create", sub);
       if (input.billingTerms?.discount?.duration === "once" && Array.isArray(sub.body.discounts) && sub.body.discounts.length === 0) {
         const subscriptionId = sub.body.id;
         if (typeof subscriptionId !== "string" || !/^sub_[A-Za-z0-9]+$/.test(subscriptionId)) subscriptionContractMismatch();
@@ -9616,14 +10047,14 @@ function createStripeProvider(config) {
           "expand[2]": "discounts",
           "expand[3]": "latest_invoice.discounts"
         });
-        if (!expanded.ok) fail8("subscription invoice evidence", expanded);
+        if (!expanded.ok) fail9("subscription invoice evidence", expanded);
         if (expanded.body.id !== subscriptionId) subscriptionContractMismatch();
         sub = expanded;
       }
       verifySubscriptionResult(sub.body, input, customerId, meta);
       const invoice = sub.body.latest_invoice;
       const clientSecret2 = clientSecretOf(sub.body);
-      if (!clientSecret2) fail8("subscription confirmation-secret missing", sub);
+      if (!clientSecret2) fail9("subscription confirmation-secret missing", sub);
       await tagSubscriptionPayment(
         sk,
         invoice,
@@ -10110,7 +10541,7 @@ async function startSubscription(req, env, ctx) {
 
 // src/worker-payment-receipt.ts
 var json2 = (value, status2 = 200) => Response.json(value, { status: status2, headers: { "cache-control": "no-store", "referrer-policy": "no-referrer" } });
-var escape = (text8) => text8.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
+var escape = (text10) => text10.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
 async function paymentReceiptRoute(req, url, env, ctx) {
   const id7 = url.searchParams.get("application");
   if (!id7 || id7.length > 160) return json2({ error: "application required" }, 400);
@@ -10121,7 +10552,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
   if (!app || app.groupId !== ctx.chapter.id || !intent || intent.applicationId !== id7 || intent.appId !== env.ODLA_APP_ID || intent.chapterId !== ctx.chapter.id || intent.environment !== env.ODLA_ENV || intent.runtime !== stripeRuntimeIdentity(env.ODLA_RUNTIME) || app.stripeRuntime !== intent.runtime || app.stripeSubscriptionId !== intent.providerSubscriptionId) return json2({ error: "receipt not found" }, 404);
   const receipt = intent.paymentReceipt;
   if (!receipt) return json2({ pending: true }, 202);
-  const text8 = paymentReceiptText(receipt, ctx.chapter.name);
+  const text10 = paymentReceiptText(receipt, ctx.chapter.name);
   if (req.method === "POST") {
     if (!env.SEND_EMAIL || !env.EMAIL_FROM) return json2({ error: "Email is unavailable. You can print or save your receipt." }, 503);
     const group = (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
@@ -10139,7 +10570,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
       template: "paymentReceipt",
       to: String(intent.purchaserEmailNormalized),
       applicationId: id7,
-      vars: { chapterName: ctx.chapter.name, receiptText: text8 },
+      vars: { chapterName: ctx.chapter.name, receiptText: text10 },
       dedupeKey: `requested-payment-receipt:${receipt.invoiceId}`,
       event: { label: "Payment receipt", trigger: "Purchaser requests their receipt", audience: "Purchaser", variables: ["chapterName", "receiptText"] }
     });
@@ -10149,7 +10580,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
   const nonce = crypto.randomUUID();
   return new Response(`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Payment receipt</title>
     <style>body{font:16px/1.6 system-ui;max-width:680px;margin:48px auto;padding:24px;color:#17252d}pre{font:inherit;white-space:pre-wrap}button{font:inherit;padding:10px 16px}@media print{button{display:none}body{margin:0}}</style>
-    <h1>Payment receipt</h1><pre>${escape(text8)}</pre><button id="print">Print / save PDF</button>
+    <h1>Payment receipt</h1><pre>${escape(text10)}</pre><button id="print">Print / save PDF</button>
     <script nonce="${nonce}">document.getElementById('print').addEventListener('click',()=>window.print())</script></html>`, {
     headers: {
       "content-type": "text/html; charset=utf-8",
@@ -10619,16 +11050,16 @@ var handleNamedSeat = async (req, url, env, ctx) => {
 };
 
 // src/named-seat-accepted-notice.ts
-var text5 = (value) => typeof value === "string" ? value : "";
+var text7 = (value) => typeof value === "string" ? value : "";
 async function notifyNamedSeatAccepted(db, env, ctx, input) {
   const purchaser = await membershipLoad(db, "applications", input.primaryApplicationId);
-  if (!purchaser || !chapterBillingApplication(purchaser, ctx.chapter.id, env.ODLA_RUNTIME) || !text5(purchaser.email)) {
+  if (!purchaser || !chapterBillingApplication(purchaser, ctx.chapter.id, env.ODLA_RUNTIME) || !text7(purchaser.email)) {
     return { sent: false, reason: "purchaser-missing" };
   }
   const group = await membershipLoad(db, "groups", ctx.chapter.id);
   if (!group) return { sent: false, reason: "group-missing" };
   const config = emailGroupFrom(group);
-  const purchaserName = [purchaser.firstName, purchaser.lastName].map(text5).join(" ").replace(/\s+/g, " ").trim();
+  const purchaserName = [purchaser.firstName, purchaser.lastName].map(text7).join(" ").replace(/\s+/g, " ").trim();
   return sendTemplated({
     db,
     envName: env.ODLA_ENV,
@@ -10640,12 +11071,12 @@ async function notifyNamedSeatAccepted(db, env, ctx, input) {
   }, {
     group: config,
     template: "seatAccepted",
-    to: text5(purchaser.email),
+    to: text7(purchaser.email),
     dedupeKey: `named-seat-accepted:${input.seatId}`,
     applicationId: input.primaryApplicationId,
     tierId: input.skuId,
     vars: {
-      firstName: text5(purchaser.firstName),
+      firstName: text7(purchaser.firstName),
       purchaserName,
       recipientName: input.recipientName,
       tierName: await tierName(db, group, input.skuId),
@@ -12112,12 +12543,12 @@ async function updateEmailSettings(db, ctx, env, body) {
     if (!value || typeof value !== "object" || Array.isArray(value)) return json({ error: `Invalid template: ${key3}` }, 400);
     const t = value;
     if (typeof t.enabled !== "boolean") return json({ error: `Choose whether ${key3} is enabled.` }, 400);
-    const subject = str2(t.subject).trim(), text8 = str2(t.text);
-    const issues = validateEmailCopy4({ subject, text: text8 }, { allowedVariables: events[key3].variables });
+    const subject = str2(t.subject).trim(), text10 = str2(t.text);
+    const issues = validateEmailCopy4({ subject, text: text10 }, { allowedVariables: events[key3].variables });
     if (t.enabled && issues.length || issues.some((issue) => ["subject-invalid", "body-invalid"].includes(issue.code))) {
       return json({ error: `${events[key3].label} is incomplete.`, errors: issues.map((issue) => issue.message) }, 400);
     }
-    clean[key3] = { subject, text: text8, enabled: t.enabled };
+    clean[key3] = { subject, text: text10, enabled: t.enabled };
   }
   const notificationEmail = str2(body.notificationEmail).trim(), replyTo = str2(body.replyTo).trim(), debugEmail = str2(body.debugEmail).trim();
   const emailish = /^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/;
@@ -14330,9 +14761,9 @@ var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
   if (req.method === "POST") {
     let body;
     try {
-      const text8 = await req.text();
-      if (new TextEncoder().encode(text8).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
-      const parsed = JSON.parse(text8);
+      const text10 = await req.text();
+      if (new TextEncoder().encode(text10).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
+      const parsed = JSON.parse(text10);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid");
       body = parsed;
     } catch {
@@ -14501,7 +14932,7 @@ import { signFederatedRequest as signFederatedRequest7, verifyFederatedRequest a
 // src/network-commercial-parity.ts
 var DIGEST = /^[0-9a-f]{64}$/;
 var MAX_RECORDS = 500;
-var text6 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
+var text8 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
 function parityMessage(partition, kind, value) {
   return [
     "chapter-commercial-parity",
@@ -14533,18 +14964,18 @@ async function digestWithKey(key3, partition, kind, value) {
 async function buildChapterCommercialParitySnapshot(input) {
   const requestedMax = input.maxRecords ?? MAX_RECORDS;
   const maxRecords = Number.isSafeInteger(requestedMax) ? Math.max(0, Math.min(requestedMax, MAX_RECORDS)) : MAX_RECORDS;
-  const eligible = input.rows.filter((row2) => text6(row2.id) && (text6(row2.stripeCustomerId) || text6(row2.stripeSubscriptionId)));
+  const eligible = input.rows.filter((row2) => text8(row2.id) && (text8(row2.stripeCustomerId) || text8(row2.stripeSubscriptionId)));
   const selected2 = eligible.slice(0, maxRecords);
   const key3 = await parityKey(input.secret);
   const records = await Promise.all(selected2.map(async (row2) => {
-    const applicationId = text6(row2.id);
-    const customerId = text6(row2.stripeCustomerId);
-    const subscriptionId = text6(row2.stripeSubscriptionId);
+    const applicationId = text8(row2.id);
+    const customerId = text8(row2.stripeCustomerId);
+    const subscriptionId = text8(row2.stripeSubscriptionId);
     return {
       applicationDigest: await digestWithKey(key3, input.partition, "application", applicationId),
       customerDigest: customerId ? await digestWithKey(key3, input.partition, "customer", customerId) : null,
       subscriptionDigest: subscriptionId ? await digestWithKey(key3, input.partition, "subscription", subscriptionId) : null,
-      status: text6(row2.status, 64),
+      status: text8(row2.status, 64),
       canceled: row2.canceled === true
     };
   }));
@@ -14570,7 +15001,7 @@ function validSnapshot(snapshot, source) {
   if (snapshot?.version !== 1 || snapshot.site?.id !== source.chapterId || !partition || !Array.isArray(records) || records.length > MAX_RECORDS || partition.appId !== source.appId || partition.chapterId !== source.chapterId || partition.environment !== source.environment || partition.dataEnvironment !== source.dataEnvironment || partition.runtime !== source.runtime || typeof snapshot.complete !== "boolean" || typeof snapshot.truncated !== "boolean" || !snapshot.counts) return false;
   const seen = /* @__PURE__ */ new Set();
   for (const record4 of records) {
-    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text6(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
+    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text8(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
     const key3 = recordKey(record4);
     if (seen.has(key3)) return false;
     seen.add(key3);
@@ -14581,16 +15012,16 @@ async function reconcileCommercialParitySnapshot(input) {
   if (!validSnapshot(input.snapshot, input.source)) throw new Error("invalid chapter commercial parity snapshot");
   const sourceKey = networkCommercialSourceKey(input.source);
   const key3 = await parityKey(input.secret);
-  const shadow = await Promise.all(input.projection.subscriptions.filter((row2) => row2.sourceKey === sourceKey && text6(row2.applicationId) && text6(row2.objectId)).map(async (row2) => {
-    const customerId = text6(row2.customerId);
-    const subscriptionId = text6(row2.subscriptionId) ?? text6(row2.objectId);
+  const shadow = await Promise.all(input.projection.subscriptions.filter((row2) => row2.sourceKey === sourceKey && text8(row2.applicationId) && text8(row2.objectId)).map(async (row2) => {
+    const customerId = text8(row2.customerId);
+    const subscriptionId = text8(row2.subscriptionId) ?? text8(row2.objectId);
     return {
       applicationDigest: await digestWithKey(key3, input.snapshot.partition, "application", row2.applicationId),
       customerDigest: customerId ? await digestWithKey(key3, input.snapshot.partition, "customer", customerId) : null,
       subscriptionDigest: subscriptionId ? await digestWithKey(key3, input.snapshot.partition, "subscription", subscriptionId) : null,
       status: null,
       canceled: false,
-      stripeStatus: text6(row2.status, 64),
+      stripeStatus: text8(row2.status, 64),
       stripeCanceled: row2.status === "canceled"
     };
   }));
@@ -14787,6 +15218,40 @@ async function reconcileChapterCommercialTargets(db, env, ctx, projection) {
   };
 }
 
+// src/worker-network-commercial-dispute.ts
+async function applyHostedMembershipDispute(env, ctx, fact, now) {
+  const operator = ctx.membershipAuthorityOperator;
+  if (!operator || !fact.chargeId) return { disposition: "unhosted" };
+  let db;
+  try {
+    db = operator.makeDb(env);
+  } catch {
+    return { disposition: "unhosted" };
+  }
+  const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
+  if (!secret) throw Object.assign(new Error("membership_dispute_provider_unavailable"), { code: "membership_dispute_provider_unavailable" });
+  const charge = await readDisputedCharge(secret, fact.chargeId);
+  const scopeOf = (row2) => ({
+    appId: String(row2.appId),
+    chapterId: String(row2.chapterId),
+    environment: String(row2.environment),
+    runtime: String(row2.runtime),
+    applicationId: String(row2.applicationId),
+    skuId: String(row2.skuId)
+  });
+  if (charge.seatId) {
+    const seat = await membershipLoad(db, "networkSeat", charge.seatId);
+    if (!seat || seat.environment !== env.ODLA_ENV || !disputedChargeCoversSeat(charge, seat)) return { disposition: "not_applicable" };
+    const receipt2 = await reconcileMembershipDispute(db, { ...scopeOf(seat), eventId: fact.eventId }, now, secret, charge);
+    return { disposition: "applied", membershipId: receipt2.membershipId, seatId: charge.seatId };
+  }
+  const rows5 = (await db.query({ networkMembership: { $: { where: { providerCustomerId: charge.customerId, environment: env.ODLA_ENV }, limit: 5 } } })).networkMembership ?? [];
+  const member = rows5.find((row2) => disputedChargeCoversMembership(charge, row2));
+  if (!member) return { disposition: "not_applicable" };
+  const receipt = await reconcileMembershipDispute(db, { ...scopeOf(member), eventId: fact.eventId }, now, secret, charge);
+  return { disposition: "applied", membershipId: receipt.membershipId };
+}
+
 // src/worker-routes-network-commercial.ts
 var ADMIN_PATH2 = "/api/admin/network-commercial-read-model";
 var WEBHOOK_PATH = "/api/network-commercial/stripe-webhook";
@@ -14851,6 +15316,12 @@ function safeProjection(projection) {
       amountReceivedCents: seat.amountReceivedCents,
       refundedCents: seat.refundedCents ?? 0
     })),
+    disputes: (projection.disputes ?? []).map((dispute2) => ({
+      ...row2(dispute2),
+      chargeId: dispute2.chargeId ?? null,
+      paymentIntentId: dispute2.paymentIntentId ?? null,
+      reason: dispute2.disputeReason ?? null
+    })),
     exceptions: projection.exceptions
   };
 }
@@ -14883,10 +15354,20 @@ var handleNetworkCommercialStripeWebhook = async (req, url, env, ctx) => {
     if (result.status === "collision") {
       console.error("network commercial event collision", JSON.stringify({ eventId: fact.eventId, eventType: fact.eventType }));
     }
+    let dispute2;
+    if (fact.objectKind === "dispute" && result.status !== "collision") {
+      try {
+        dispute2 = await applyHostedMembershipDispute(env, ctx, fact, Date.now());
+      } catch (error) {
+        console.warn("membership dispute pending", JSON.stringify({ eventId: fact.eventId, code: error.code ?? "unknown" }));
+        return json({ error: "membership dispute reconciliation pending", eventId: fact.eventId }, 503);
+      }
+    }
     return json({
       ok: true,
       status: result.status,
       eventId: fact.eventId,
+      ...dispute2 ? { dispute: dispute2.disposition } : {},
       ...result.status === "replayed" && result.resolvedCollision ? { resolvedCollision: true } : {}
     });
   } catch (error) {
@@ -15084,7 +15565,7 @@ var record3 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key3 of Object.keys(value)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
 }
-function text7(value, path, errors, max = MAX_TEXT2, required = true) {
+function text9(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -15110,7 +15591,7 @@ function scopeValue(value, path, errors) {
     return { kind: raw2.kind };
   }
   if (raw2.kind === "chapter") {
-    const chapterId = text7(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+    const chapterId = text9(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -15124,22 +15605,22 @@ function resourceValue(value, path, errors) {
     return null;
   }
   unknownKeys3(raw2, RESOURCE_KEYS, path, errors);
-  const id7 = text7(raw2.id, `${path}.id`, errors, 80) ?? "";
+  const id7 = text9(raw2.id, `${path}.id`, errors, 80) ?? "";
   if (id7 && !ID5.test(id7)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text7(raw2.kind, `${path}.kind`, errors) ?? "";
+  const kind = text9(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text7(raw2.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text7(raw2.summary, `${path}.summary`, errors, 1e3, false);
-  const status2 = text7(raw2.status, `${path}.status`, errors) ?? "";
+  const title = text9(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text9(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status2 = text9(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status2)) errors.push(`${path}.status must be draft, published, or archived`);
   const revision = integer4(raw2.revision, `${path}.revision`, errors);
   const scope2 = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text7(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text9(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
   if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text7(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
-  const url = text7(raw2.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text9(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
+  const url = text9(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -15151,9 +15632,9 @@ function resourceValue(value, path, errors) {
   if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys3(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text7(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text7(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text7(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text9(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text9(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text9(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -15168,17 +15649,17 @@ function resourceValue(value, path, errors) {
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys3(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text7(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text7(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    chapterId: text9(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text9(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
     resourceRevision: integer4(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
     documentRevision: integer4(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text7(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedBy: text9(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
     promotedAt: integer4(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance2 = {
-    createdBy: text7(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdBy: text9(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
     createdAt: integer4(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text7(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedBy: text9(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
     updatedAt: integer4(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
@@ -15197,7 +15678,7 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (sourceRaw) unknownKeys3(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text7(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text9(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
@@ -15205,8 +15686,8 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys3(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text7(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text7(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text9(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text9(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
   if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
@@ -15547,7 +16028,7 @@ var handleAdminBuilderLibrary = async (req, url, env, ctx) => {
 };
 
 // src/membership-cancel-authority.ts
-import { stripeRequest as stripeRequest11 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest13 } from "@odla-ai/stripe";
 async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
   membershipClock(now);
   const id7 = await networkMembershipId(target);
@@ -15558,14 +16039,14 @@ async function cancelMembershipAtTermEnd(db, target, now, stripeSecret) {
     membershipFail("membership_cancellation_unavailable");
   }
   const path = `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`;
-  const read2 = await stripeRequest11({ secretKey: stripeSecret }, "GET", path);
+  const read2 = await stripeRequest13({ secretKey: stripeSecret }, "GET", path);
   const sub = read2.body;
   if (!read2.ok || sub.id !== member.providerSubscriptionId || sub.customer !== member.providerCustomerId || sub.livemode !== (target.environment === "prod") || !Object.entries({
     ...stripePartitionMetadata(target),
     applicationId: target.applicationId
   }).every(([key3, value]) => sub.metadata?.[key3] === value)) membershipFail("membership_cancellation_provider_mismatch");
   if (sub.status !== "canceled" && sub.cancel_at_period_end !== true) {
-    const write = await stripeRequest11(
+    const write = await stripeRequest13(
       { secretKey: stripeSecret },
       "POST",
       path,
@@ -15787,7 +16268,7 @@ async function refundNetworkMembership(db, input, secretKey, now) {
 }
 
 // src/membership-provider-lifecycle.ts
-import { stripeRequest as stripeRequest12 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest14 } from "@odla-ai/stripe";
 
 // src/membership-renewal-authority.ts
 async function reconcileMembershipRenewal(db, input, now) {
@@ -15909,6 +16390,11 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
   const row2 = await membershipLoad(db, "networkCommercialEvents", `network-commercial-event:${input.eventId}`);
   const fact = row2?.fact;
   if (fact?.objectKind === "invoice") return reconcileMembershipRenewal(db, input, now);
+  if (fact?.objectKind === "dispute") {
+    const secret = await getVaultSecret(db, stripeSecretName);
+    if (!secret) membershipFail("membership_billing_provider_unavailable");
+    return reconcileMembershipDispute(db, input, now, secret);
+  }
   const evidenceGuard = await commercialEvidenceGuard(db, input.eventId, row2?.digest, "membership_billing_evidence_pending");
   if (!fact || fact.eventId !== input.eventId || fact.digest !== row2.digest || !/^[a-f0-9]{64}$/.test(fact.digest) || !["customer.subscription.updated", "customer.subscription.deleted", "charge.refunded"].includes(fact.eventType) || fact.livemode !== (input.environment === "prod") || fact.applicationId !== input.applicationId || !fact.identity || Object.entries({
     appId: input.appId,
@@ -15951,7 +16437,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
     }
     if (fact.subscriptionId !== member.providerSubscriptionId || fact.objectKind !== "subscription") membershipFail("membership_billing_scope_mismatch");
     if (["refund_pending", "refunded", "declined", "canceled", "restarting"].includes(String(member.status))) return receipt();
-    const result = await stripeRequest12({ secretKey: sk }, "GET", `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`);
+    const result = await stripeRequest14({ secretKey: sk }, "GET", `/v1/subscriptions/${encodeURIComponent(String(member.providerSubscriptionId))}`);
     const sub = result.body;
     if (!result.ok || sub.id !== member.providerSubscriptionId || sub.customer !== member.providerCustomerId || sub.livemode !== (input.environment === "prod") || typeof sub.cancel_at_period_end !== "boolean" || !["active", "trialing", "past_due", "unpaid", "canceled"].includes(sub.status) || !Object.entries({ ...stripePartitionMetadata(input), applicationId: input.applicationId }).every(([key3, value]) => sub.metadata?.[key3] === value)) {
       membershipFail("membership_billing_provider_mismatch");
@@ -15989,7 +16475,7 @@ async function reconcileMembershipBilling(db, input, now, stripeSecretName = "st
 }
 
 // src/membership-seat-stripe.ts
-import { stripeRequest as stripeRequest13 } from "@odla-ai/stripe";
+import { stripeRequest as stripeRequest15 } from "@odla-ai/stripe";
 var reject7 = () => {
   throw Object.assign(new Error("named seat provider contract mismatch"), { code: "named_seat_provider_mismatch" });
 };
@@ -16001,7 +16487,7 @@ var metadataFor = (seat) => ({
 });
 var matches = (value, expected) => value && Object.entries(expected).every(([key3, item]) => value[key3] === item);
 async function read(sk, path, params) {
-  const response = await stripeRequest13({ secretKey: sk }, "GET", path, params);
+  const response = await stripeRequest15({ secretKey: sk }, "GET", path, params);
   if (!response.ok) return reject7();
   return response.body;
 }
@@ -16038,11 +16524,11 @@ async function createNamedSeatStripePayment(sk, seat, now) {
   }
   await subscriptionForSeat(sk, seat);
   const metadata = metadataFor(seat);
-  const result = seat.providerPaymentIntentId ? await stripeRequest13(
+  const result = seat.providerPaymentIntentId ? await stripeRequest15(
     { secretKey: sk },
     "GET",
     `/v1/payment_intents/${encodeURIComponent(seat.providerPaymentIntentId)}`
-  ) : await stripeRequest13({ secretKey: sk }, "POST", "/v1/payment_intents", {
+  ) : await stripeRequest15({ secretKey: sk }, "POST", "/v1/payment_intents", {
     amount: seat.amountCents,
     currency: seat.currency,
     customer: seat.providerCustomerId,
@@ -16064,7 +16550,7 @@ async function attachNamedSeatStripeRenewal(sk, seat) {
     return String(existing.id);
   }
   if (seat.combinedInvoice) reject7();
-  const result = await stripeRequest13({ secretKey: sk }, "POST", "/v1/subscription_items", {
+  const result = await stripeRequest15({ secretKey: sk }, "POST", "/v1/subscription_items", {
     subscription: seat.providerSubscriptionId,
     price: seat.priceId,
     quantity: 1,
@@ -16726,6 +17212,19 @@ var id5 = () => attr("string", false, true, true);
 var key = (optional = false) => attr("string", optional, false, true);
 var scope = () => ({ appId: key(), chapterId: key(), environment: key(), runtime: key(), applicationId: key(), skuId: key() });
 var times = () => ({ revision: attr("number"), createdAt: attr("number"), updatedAt: attr("number") });
+var dispute = () => ({
+  disputeId: key(true),
+  disputeStatus: attr("string", true),
+  disputeReason: attr("string", true),
+  disputeAmountCents: attr("number", true),
+  disputedAt: attr("number", true),
+  disputeClosedAt: attr("number", true),
+  disputePriorStatus: attr("string", true),
+  disputeEventId: key(true),
+  rechargePaymentIntentId: key(true),
+  rechargedAt: attr("number", true),
+  rechargeAttempt: attr("json", true)
+});
 var membershipAuthorityEntities = {
   networkMembership: { attrs: {
     id: id5(),
@@ -16765,7 +17264,8 @@ var membershipAuthorityEntities = {
     graceEndsAt: attr("number", true),
     ...times(),
     refundRequestedAt: attr("number", true),
-    restartId: key(true)
+    restartId: key(true),
+    ...dispute()
   } },
   membershipRestart: { attrs: {
     id: id5(),
@@ -16841,7 +17341,8 @@ var membershipAuthorityEntities = {
     refundedCents: attr("number", true),
     providerRefundIds: attr("json", true),
     regiftedAt: attr("number", true),
-    formerRecipients: attr("json", true)
+    formerRecipients: attr("json", true),
+    ...dispute()
   } },
   networkSeatRecipient: { attrs: { id: id5(), appId: key(), chapterId: key(), environment: key(), runtime: key(), seatId: key(), recipientEmailNormalized: key(), createdAt: attr("number") } },
   membershipEffect: { attrs: {
@@ -16962,7 +17463,7 @@ function createMembershipAuthorityStorage(db, secretNames) {
 }
 
 // src/membership-seat-cancel.ts
-import { initStripe as initStripe3, stripeRequest as stripeRequest14 } from "@odla-ai/stripe";
+import { initStripe as initStripe3, stripeRequest as stripeRequest16 } from "@odla-ai/stripe";
 async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   membershipClock(now);
   const state = await loadMembershipAuthorityState(db, target);
@@ -16990,7 +17491,7 @@ async function cancelUnpaidNamedSeat(db, target, secretKey, now) {
   }
   const metadata = { ...stripePartitionMetadata(target), applicationId: target.applicationId, membershipId: seat.primaryMembershipId, seatId: seat.id };
   const request = async (method, path, params) => {
-    const result = await stripeRequest14(
+    const result = await stripeRequest16(
       { secretKey },
       method,
       path,
@@ -17178,7 +17679,7 @@ async function readBoundedJson(response, signal, maxBytes, label) {
   };
   signal.addEventListener("abort", cancel, { once: true });
   let size = 0;
-  let text8 = "";
+  let text10 = "";
   const decoder = new TextDecoder();
   try {
     while (true) {
@@ -17188,10 +17689,10 @@ async function readBoundedJson(response, signal, maxBytes, label) {
       if (done) break;
       size += value.byteLength;
       if (size > maxBytes) throw new TypeError(`${label} exceeds limit`);
-      text8 += decoder.decode(value, { stream: true });
+      text10 += decoder.decode(value, { stream: true });
     }
     try {
-      return JSON.parse(text8 + decoder.decode());
+      return JSON.parse(text10 + decoder.decode());
     } catch {
       throw new TypeError(`invalid ${label}`);
     }
@@ -17526,7 +18027,7 @@ async function requestMembershipRefund(options) {
 async function requestMembershipRenewal(options) {
   const result = await requestAuthority(options, "renewals", { applicationId: options.applicationId, skuId: options.skuId, eventId: options.eventId });
   const row2 = result.renewal;
-  if (!row2 || row2.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined", "restarting"].includes(row2.status)) {
+  if (!row2 || row2.membershipId !== await networkMembershipId(options) || !Number.isSafeInteger(row2.termEndsAt) || row2.termEndsAt <= 0 || !Number.isSafeInteger(row2.graceEndsAt) || row2.graceEndsAt < 0 || typeof row2.autoRenew !== "boolean" || !["active", "paid_pending_approval", "cancel_at_term_end", "payment_grace", "lapsed", "refund_pending", "refunded", "canceled", "declined", "restarting", "payment_disputed"].includes(row2.status)) {
     throw new Error("invalid membership renewal receipt");
   }
   return { membershipId: row2.membershipId, status: row2.status, termEndsAt: row2.termEndsAt, graceEndsAt: row2.graceEndsAt, autoRenew: row2.autoRenew };
@@ -17878,6 +18379,7 @@ var BUILTIN_ROUTES = [
   handlePaymentRecovery,
   handleAdminNamedSeat,
   handleAdminMembershipSeats,
+  handleAdminMembershipDisputes,
   handleAdminMembershipPolicyVersions,
   handleAdminMembershipReterm,
   handleAdminMeetings,
@@ -17926,8 +18428,9 @@ function chapterWorker(options) {
   const ctx = createWorkerContext(options);
   const routes = [...options.routes ?? [], ...BUILTIN_ROUTES];
   return {
-    async fetch(req, env) {
+    async fetch(req, env, execution) {
       const url = new URL(req.url);
+      ctx.bindExecution(req, execution);
       for (const route of routes) {
         let res;
         try {
@@ -17949,6 +18452,7 @@ export {
   DECLINABLE_FROM,
   MEMBERSHIP_AUTHORITY_PATH,
   MEMBERSHIP_CHAPTER_EFFECT_KINDS,
+  MEMBERSHIP_DISPUTED_STATUS,
   NetworkTargetTransportError,
   REGIFTABLE_SEAT_STATUSES,
   chapterMembershipAccess,
@@ -17966,6 +18470,7 @@ export {
   deliverMemberContent,
   deliverMembershipChapterEffect,
   deliverSignupControl,
+  disputedChargeCoversSeat,
   drainMembershipEffects,
   grantIncludedNamedSeat,
   liftSeatPurchaseWindow,
@@ -17974,7 +18479,12 @@ export {
   namedSeatInvitationOpen,
   namedSeatRecipientState,
   namedSeatRegiftable,
+  readDisputedCharge,
   readNamedSeatOffer,
+  rechargeDisputedMembership,
+  rechargeDisputedSeat,
+  reconcileMembershipDispute,
+  reconcileNamedSeatDispute,
   refundNamedSeatByOperator,
   regiftNamedSeat,
   releaseNamedSeatRecipientApplications,