@odla-ai/chapter 0.59.0 → 0.60.0

package/dist/worker/index.cjs

@@ -42,6 +42,7 @@ __export(worker_exports, {
   deliverMemberContent: () => deliverMemberContent,
   deliverMembershipChapterEffect: () => deliverMembershipChapterEffect,
   deliverSignupControl: () => deliverSignupControl,
+  disputedChargeCoversSeat: () => disputedChargeCoversSeat,
   drainMembershipEffects: () => drainMembershipEffects,
   grantIncludedNamedSeat: () => grantIncludedNamedSeat,
   liftSeatPurchaseWindow: () => liftSeatPurchaseWindow,
@@ -53,7 +54,9 @@ __export(worker_exports, {
   readDisputedCharge: () => readDisputedCharge,
   readNamedSeatOffer: () => readNamedSeatOffer,
   rechargeDisputedMembership: () => rechargeDisputedMembership,
+  rechargeDisputedSeat: () => rechargeDisputedSeat,
   reconcileMembershipDispute: () => reconcileMembershipDispute,
+  reconcileNamedSeatDispute: () => reconcileNamedSeatDispute,
   refundNamedSeatByOperator: () => refundNamedSeatByOperator,
   regiftNamedSeat: () => regiftNamedSeat,
   releaseNamedSeatRecipientApplications: () => releaseNamedSeatRecipientApplications,
@@ -1697,9 +1700,9 @@ async function backfillCrm(deps) {
 }
 
 // src/email-retirement.ts
-function isRetiredEmailCopy(subject, text9) {
+function isRetiredEmailCopy(subject, text10) {
   const subjectCopy = subject.trimStart().replace(/^\[dev\]\s*/i, "");
-  const bodyCopy = text9.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
+  const bodyCopy = text10.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
   return /^\(\s*unused\s*:/i.test(subjectCopy) || /^Unused\.\s*Switched off\b/i.test(bodyCopy);
 }
 
@@ -1777,10 +1780,51 @@ function planDelivery(input) {
   if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
   if ((0, import_crm5.validateEmailCopy)({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
   const subject = (redirect ? "[dev] " : "") + renderedSubject;
-  const text9 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text10 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + renderedText : renderedText;
-  return { deliver: true, transport, to, subject, text: text9, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text10, redirected: redirect };
+}
+
+// src/email-html.ts
+var URL_RE = /https?:\/\/[^\s<>"')\]]+[^\s<>"').,;:!?\]]/g;
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function lineHtml(line) {
+  let out = "", last = 0;
+  for (const match of line.matchAll(URL_RE)) {
+    out += escapeHtml(line.slice(last, match.index));
+    const url = escapeHtml(match[0]);
+    out += `<a href="${url}">${url}</a>`;
+    last = match.index + match[0].length;
+  }
+  return out + escapeHtml(line.slice(last));
+}
+function textToHtml(text10) {
+  const paragraphs = text10.replace(/\r\n/g, "\n").trim().split(/\n{2,}/).filter((paragraph) => paragraph.trim());
+  const body = paragraphs.map((paragraph) => `<p>${paragraph.split("\n").map(lineHtml).join("<br>\n")}</p>`).join("\n");
+  return `<!doctype html>
+<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"></head>
+<body style="margin:0;padding:24px 16px;background:#ffffff;color:#1a1a1a;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;font-size:16px;line-height:1.5">
+${body}
+</body></html>`;
+}
+
+// src/email-deliverability.ts
+var ADMINISTRATOR_AUDIENCE = /^(?:administrator|admin|team|operator|owner|staff)s?$/i;
+function isRecipientFacing(event2) {
+  return !event2 || !ADMINISTRATOR_AUDIENCE.test(event2.audience.trim());
+}
+function listUnsubscribeHeader(replyTo) {
+  const address = replyTo.trim();
+  if (!/^[^\s@,;<>?]+@[^\s@,;<>?]+\.[^\s@,;<>?]+$/.test(address)) return void 0;
+  return `<mailto:${address}?subject=${encodeURIComponent("unsubscribe")}>`;
+}
+function deliverabilityHeaders(input) {
+  if (!isRecipientFacing(input.event)) return void 0;
+  const value = listUnsubscribeHeader(input.replyTo);
+  return value ? { "List-Unsubscribe": value } : void 0;
 }
 
 // src/notify.ts
@@ -1928,8 +1972,8 @@ function formatInstant(at2, timeZone) {
 var adminUrlFor = (origin) => `${origin}/admin/`;
 var membersUrlFor = (origin) => `${origin}/members/`;
 function applicantVariables(app) {
-  const text9 = (v) => typeof v === "string" ? v : "";
-  return { firstName: text9(app.firstName), lastName: text9(app.lastName), email: text9(app.email), phone: text9(app.phone), state: text9(app.state) };
+  const text10 = (v) => typeof v === "string" ? v : "";
+  return { firstName: text10(app.firstName), lastName: text10(app.lastName), email: text10(app.email), phone: text10(app.phone), state: text10(app.state) };
 }
 function sampleVariables(origin, timeZone, now = Date.now()) {
   const startAt = formatInstant(now + 864e5, timeZone);
@@ -2054,11 +2098,16 @@ async function sendTemplated(deps, input) {
   if (decision.transport === "log-only") return { sent: true };
   let messageId;
   try {
+    const text10 = String(row2.body);
+    const html = deps.renderHtml === false ? void 0 : (deps.renderHtml ?? textToHtml)(text10);
+    const headers = deliverabilityHeaders({ event: event2, replyTo: input.group.replyTo });
     const response = await deps.sender.send({
       from: fromAddress(deps.from, input.group.fromName),
       to: [decision.to],
       subject: String(row2.subject),
-      text: String(row2.body),
+      text: text10,
+      ...html ? { html } : {},
+      ...headers ? { headers } : {},
       replyTo: input.group.replyTo
     });
     if (!response || typeof response.messageId !== "string" || !response.messageId) throw new Error("missing delivery receipt");
@@ -3663,12 +3712,87 @@ function paymentLineItems(group, tier) {
 
 // src/membership-dispute-authority.ts
 var import_stripe6 = require("@odla-ai/stripe");
+
+// src/membership-dispute-transition.ts
 var MEMBERSHIP_DISPUTED_STATUS = "payment_disputed";
 var DISPUTE_WON_STATUSES = ["won", "warning_closed"];
 var CLOSED_STATUSES = [...DISPUTE_WON_STATUSES, "lost"];
-var TERMINAL = ["refunded", "refund_pending", "canceled", "declined", "restarting", "superseded"];
+function disputeTransition(row2, fact, eventId, now, terminal) {
+  const status2 = String(fact.status ?? "unknown"), closed = CLOSED_STATUSES.includes(status2);
+  const sameDispute = row2.disputeId === fact.objectId;
+  if (sameDispute && Number(row2.disputeClosedAt ?? 0) > 0 && !closed) return null;
+  const won = DISPUTE_WON_STATUSES.includes(status2);
+  const suspended = row2.status === MEMBERSHIP_DISPUTED_STATUS, done = terminal.includes(String(row2.status));
+  const restored = String(row2.disputePriorStatus ?? (row2.journeyApprovedAt ? "active" : "paid_pending_approval"));
+  const next = done ? String(row2.status) : won ? suspended ? restored : String(row2.status) : MEMBERSHIP_DISPUTED_STATUS;
+  return {
+    status: next,
+    disputeId: fact.objectId,
+    disputeStatus: status2,
+    disputeEventId: eventId,
+    disputeClosedAt: closed ? now : 0,
+    ...fact.disputeReason ? { disputeReason: fact.disputeReason } : {},
+    ...fact.amountCents !== void 0 ? { disputeAmountCents: fact.amountCents } : {},
+    ...sameDispute ? {} : { disputedAt: now },
+    ...next === MEMBERSHIP_DISPUTED_STATUS && !suspended ? { disputePriorStatus: String(row2.status) } : {},
+    revision: Number(row2.revision) + 1,
+    updatedAt: now
+  };
+}
+
+// src/membership-seat-dispute.ts
 var text2 = (value) => typeof value === "string" && value ? value : void 0;
-var refOf = (value) => typeof value === "string" ? text2(value) : text2(value?.id);
+var TERMINAL = ["payment_pending", "payment_processing", "payment_canceling", "refund_pending", "refunded", "canceled"];
+var namedSeatDisputeStanding = (seat, applied) => ({ seatId: String(seat.id), status: String(seat.status), ...text2(seat.disputeStatus) ? { disputeStatus: text2(seat.disputeStatus) } : {}, applied });
+function disputedChargeCoversSeat(charge, seat) {
+  return charge.seatId === seat.id && charge.customerId === seat.providerCustomerId && charge.paymentIntentId !== void 0 && (charge.paymentIntentId === seat.providerPaymentIntentId || charge.paymentIntentId === seat.rechargePaymentIntentId);
+}
+async function reconcileNamedSeatDispute(db, input, now, charge, evidence) {
+  if (!charge.seatId) membershipFail("membership_dispute_scope_mismatch");
+  const membership = async (applied, seat) => {
+    const id7 = await networkMembershipId(input), member = await membershipLoad(db, "networkMembership", id7);
+    requireMembershipScope(member, input);
+    return {
+      membershipId: id7,
+      status: String(member.status),
+      termEndsAt: Number(member.termEndsAt),
+      graceEndsAt: Number(member.graceEndsAt ?? 0),
+      autoRenew: member.autoRenew === true,
+      applied,
+      ...text2(member.disputeStatus) ? { disputeStatus: text2(member.disputeStatus) } : {},
+      ...seat ? { seat: namedSeatDisputeStanding(seat, applied) } : {}
+    };
+  };
+  for (let attempt = 0; attempt < 8; attempt++) {
+    const state = await loadMembershipAuthorityState(db, input), seat = await membershipLoad(db, "networkSeat", charge.seatId);
+    if (!seat) return membership(false);
+    requireMembershipScope(seat, input);
+    if (charge.customerId !== seat.providerCustomerId) membershipFail("membership_dispute_scope_mismatch");
+    if (!disputedChargeCoversSeat(charge, seat) || seat.disputeEventId === input.eventId) return membership(seat.disputeEventId === input.eventId, seat);
+    const attrs = disputeTransition(seat, evidence.fact, input.eventId, now, TERMINAL);
+    if (!attrs) return membership(false, seat);
+    try {
+      await db.transact([membershipUpdate("networkSeat", String(seat.id), attrs)], { mutationId: `seat-dispute:${seat.id}:${input.eventId}`, guards: [
+        { ns: "networkSeat", id: String(seat.id), exists: true, equals: { revision: seat.revision } },
+        { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } },
+        { ns: "networkCommercialEvents", id: String(evidence.row.id), exists: true, equals: { digest: evidence.fact.digest } },
+        evidence.guard
+      ] });
+    } catch (error) {
+      if (error.code !== "transact_guard_failed") throw error;
+      continue;
+    }
+    const saved = await membershipLoad(db, "networkSeat", String(seat.id));
+    requireMembershipScope(saved, input);
+    return membership(true, saved);
+  }
+  return membershipFail("membership_dispute_retry_required");
+}
+
+// src/membership-dispute-authority.ts
+var TERMINAL2 = ["refunded", "refund_pending", "canceled", "declined", "restarting", "superseded"];
+var text3 = (value) => typeof value === "string" && value ? value : void 0;
+var refOf = (value) => typeof value === "string" ? text3(value) : text3(value?.id);
 async function readDisputedCharge(secretKey, chargeId, fetch2) {
   if (!/^ch_[A-Za-z0-9]+$/.test(chargeId)) membershipFail("invalid_dispute_charge");
   const config = { secretKey, ...fetch2 ? { fetch: fetch2 } : {} };
@@ -3682,7 +3806,7 @@ async function readDisputedCharge(secretKey, chargeId, fetch2) {
     if (!invoice.ok || invoice.body.id !== invoiceId) membershipFail("membership_dispute_provider_unavailable");
     subscriptionId = refOf(invoice.body.subscription) ?? refOf(invoice.body.parent?.subscription_details?.subscription);
   }
-  const seatId = text2(charge.body.metadata?.seatId);
+  const seatId = text3(charge.body.metadata?.seatId);
   return {
     chargeId,
     customerId,
@@ -3708,37 +3832,23 @@ async function reconcileMembershipDispute(db, input, now, secretKey, resolved) {
     termEndsAt: Number(value.termEndsAt),
     graceEndsAt: Number(value.graceEndsAt ?? 0),
     autoRenew: value.autoRenew === true,
-    ...text2(value.disputeStatus) ? { disputeStatus: text2(value.disputeStatus) } : {},
+    ...text3(value.disputeStatus) ? { disputeStatus: text3(value.disputeStatus) } : {},
     applied
   });
   const known = await membershipLoad(db, "networkMembership", id7);
   requireMembershipScope(known, input);
   if (known.disputeEventId === input.eventId) return receipt(known);
+  const seatKnown = known.namedSeatId ? await membershipLoad(db, "networkSeat", String(known.namedSeatId)) : void 0;
+  if (seatKnown?.disputeEventId === input.eventId) return { ...receipt(known, true), seat: namedSeatDisputeStanding(seatKnown, true) };
   const charge = resolved && resolved.chargeId === fact.chargeId ? resolved : await readDisputedCharge(secretKey, fact.chargeId);
+  if (charge.customerId !== known.providerCustomerId) membershipFail("membership_dispute_scope_mismatch");
+  if (charge.seatId) return reconcileNamedSeatDispute(db, input, now, charge, { row: row2, fact, guard: evidenceGuard });
   for (let attempt = 0; attempt < 8; attempt++) {
     const state = await loadMembershipAuthorityState(db, input), member = await membershipLoad(db, "networkMembership", id7);
     requireMembershipScope(member, input);
-    if (charge.customerId !== member.providerCustomerId) membershipFail("membership_dispute_scope_mismatch");
     if (!disputedChargeCoversMembership(charge, member) || member.disputeEventId === input.eventId) return receipt(member);
-    const status2 = String(fact.status ?? "unknown"), closed = CLOSED_STATUSES.includes(status2);
-    const sameDispute = member.disputeId === fact.objectId;
-    if (sameDispute && Number(member.disputeClosedAt ?? 0) > 0 && !closed) return receipt(member, false);
-    const won = DISPUTE_WON_STATUSES.includes(status2);
-    const suspended = member.status === MEMBERSHIP_DISPUTED_STATUS, terminal = TERMINAL.includes(String(member.status));
-    const next = terminal ? String(member.status) : won ? suspended ? String(member.disputePriorStatus ?? (member.journeyApprovedAt ? "active" : "paid_pending_approval")) : String(member.status) : MEMBERSHIP_DISPUTED_STATUS;
-    const attrs = {
-      status: next,
-      disputeId: fact.objectId,
-      disputeStatus: status2,
-      disputeEventId: input.eventId,
-      disputeClosedAt: closed ? now : 0,
-      ...fact.disputeReason ? { disputeReason: fact.disputeReason } : {},
-      ...fact.amountCents !== void 0 ? { disputeAmountCents: fact.amountCents } : {},
-      ...sameDispute ? {} : { disputedAt: now },
-      ...next === MEMBERSHIP_DISPUTED_STATUS && !suspended ? { disputePriorStatus: String(member.status) } : {},
-      revision: Number(member.revision) + 1,
-      updatedAt: now
-    };
+    const attrs = disputeTransition(member, fact, input.eventId, now, TERMINAL2);
+    if (!attrs) return receipt(member, false);
     try {
       await db.transact([membershipUpdate("networkMembership", id7, attrs)], { mutationId: `membership-dispute:${id7}:${input.eventId}`, guards: [
         { ns: "networkMembership", id: id7, exists: true, equals: { revision: member.revision } },
@@ -4860,6 +4970,9 @@ function namedSeatRecipientState(seat) {
       return seat.refundReason === "declined" ? "declined" : "refunded";
     case "canceled":
       return "canceled";
+    // A card-network dispute on the seat's own payment pauses the recipient until it is won or re-charged.
+    case "payment_disputed":
+      return "disputed";
     default:
       return "payment_pending";
   }
@@ -5188,6 +5301,7 @@ var handleAdminMembershipSeats = async (req, url, env, ctx) => {
 
 // src/membership-dispute-recharge.ts
 var import_stripe9 = require("@odla-ai/stripe");
+var NS = { membership: "networkMembership", seat: "networkSeat" };
 var fail6 = (code, extra = {}) => {
   throw Object.assign(new Error(code), { code, ...extra });
 };
@@ -5201,65 +5315,64 @@ async function defaultPaymentMethod(config, subscriptionId, customerId) {
   if (!customer.ok) fail6("membership_dispute_provider_unavailable");
   return refOf2(customer.body.invoice_settings?.default_payment_method);
 }
-async function rechargeDisputedMembership(db, membershipId, secretKey, now) {
+async function rechargeDisputed(db, kind, id7, secretKey, now) {
   membershipClock(now);
-  let member = await membershipLoad(db, "networkMembership", membershipId);
-  if (!member) fail6("membership_not_found");
-  const scope2 = { chapterId: String(member.chapterId), environment: String(member.environment) };
-  const amountCents = Number(member.disputeAmountCents ?? member.amountCents), currency = String(member.currency);
+  const ns = NS[kind];
+  let row2 = await membershipLoad(db, ns, id7);
+  if (!row2) fail6("membership_not_found");
+  const scope2 = { chapterId: String(row2.chapterId), environment: String(row2.environment) };
+  const membershipId = kind === "membership" ? id7 : String(row2.primaryMembershipId);
+  const amountCents = Number(row2.disputeAmountCents ?? row2.amountCents), currency = String(row2.currency);
   const done = (value, replayed) => ({
     membershipId,
+    ...kind === "seat" ? { seatId: id7 } : {},
     status: String(value.status),
     paymentIntentId: String(value.rechargePaymentIntentId),
     amountCents,
     currency,
     ...replayed ? { replayed } : {}
   });
-  if (member.status !== MEMBERSHIP_DISPUTED_STATUS) {
-    if (member.disputeStatus === "recharged" && member.rechargePaymentIntentId) return done(member, true);
+  if (row2.status !== MEMBERSHIP_DISPUTED_STATUS) {
+    if (row2.disputeStatus === "recharged" && row2.rechargePaymentIntentId) return done(row2, true);
     fail6("membership_not_disputed");
   }
-  if (member.disputeStatus !== "lost") fail6("membership_dispute_open");
+  if (row2.disputeStatus !== "lost") fail6("membership_dispute_open");
   if (!Number.isSafeInteger(amountCents) || amountCents <= 0 || !/^[a-z]{3}$/.test(currency)) fail6("membership_dispute_amount_invalid");
-  let attempt = member.rechargeAttempt;
+  let attempt = row2.rechargeAttempt;
   if (!attempt || attempt.finishedAt !== void 0) {
-    attempt = { key: `membership-recharge:${membershipId}:${String(member.disputeId)}:${now}`, startedAt: now };
+    attempt = { key: `${kind}-recharge:${id7}:${String(row2.disputeId)}:${now}`, startedAt: now };
     await db.transact(
-      [membershipUpdate("networkMembership", membershipId, { rechargeAttempt: attempt, revision: Number(member.revision) + 1, updatedAt: now })],
-      { mutationId: `membership-recharge-attempt:${attempt.key}`, guards: [{
-        ns: "networkMembership",
-        id: membershipId,
-        exists: true,
-        equals: { revision: member.revision, status: MEMBERSHIP_DISPUTED_STATUS }
-      }] }
+      [membershipUpdate(ns, id7, { rechargeAttempt: attempt, revision: Number(row2.revision) + 1, updatedAt: now })],
+      { mutationId: `membership-recharge-attempt:${attempt.key}`, guards: [{ ns, id: id7, exists: true, equals: { revision: row2.revision, status: MEMBERSHIP_DISPUTED_STATUS } }] }
     );
-    member = await membershipLoad(db, "networkMembership", membershipId);
-    if (!member || member.status !== MEMBERSHIP_DISPUTED_STATUS) fail6("membership_dispute_changed");
+    row2 = await membershipLoad(db, ns, id7);
+    if (!row2 || row2.status !== MEMBERSHIP_DISPUTED_STATUS) fail6("membership_dispute_changed");
   }
   const config = { secretKey };
-  const paymentMethod = await defaultPaymentMethod(config, String(member.providerSubscriptionId), String(member.providerCustomerId));
+  const paymentMethod = await defaultPaymentMethod(config, String(row2.providerSubscriptionId), String(row2.providerCustomerId));
   if (!paymentMethod) fail6("recharge_payment_method_unavailable");
   const intent = await (0, import_stripe9.stripeRequest)(config, "POST", "/v1/payment_intents", {
     amount: amountCents,
     currency,
-    customer: String(member.providerCustomerId),
+    customer: String(row2.providerCustomerId),
     payment_method: paymentMethod,
     off_session: "true",
     confirm: "true",
-    description: `Membership payment reissued after dispute ${String(member.disputeId)}`,
+    description: `${kind === "seat" ? "Named seat" : "Membership"} payment reissued after dispute ${String(row2.disputeId)}`,
     metadata: {
-      ...stripePartitionMetadata({ appId: String(member.appId), chapterId: scope2.chapterId, environment: scope2.environment, runtime: String(member.runtime) }),
-      applicationId: String(member.applicationId),
+      ...stripePartitionMetadata({ appId: String(row2.appId), chapterId: scope2.chapterId, environment: scope2.environment, runtime: String(row2.runtime) }),
+      applicationId: String(row2.applicationId),
       membershipId,
-      disputeId: String(member.disputeId),
+      ...kind === "seat" ? { seatId: id7 } : {},
+      disputeId: String(row2.disputeId),
       membershipRecharge: "true"
     }
   }, { idempotencyKey: attempt.key });
   const body = intent.body, error = body.error ?? {}, paymentStatus = String(body.status ?? "");
   const finish = async (outcome) => {
-    const current = await membershipLoad(db, "networkMembership", membershipId);
+    const current = await membershipLoad(db, ns, id7);
     if (!current) return;
-    await db.transact([membershipUpdate("networkMembership", membershipId, {
+    await db.transact([membershipUpdate(ns, id7, {
       rechargeAttempt: { ...attempt, finishedAt: now, outcome },
       revision: Number(current.revision) + 1,
       updatedAt: now
@@ -5277,15 +5390,15 @@ async function rechargeDisputedMembership(db, membershipId, secretKey, now) {
     fail6("recharge_declined", { declineCode: String(body.last_payment_error?.decline_code ?? paymentStatus) });
   }
   if (paymentStatus !== "succeeded") fail6("recharge_pending", { paymentStatus });
-  if (refOf2(body.customer) !== member.providerCustomerId || body.amount !== amountCents) fail6("recharge_mismatch");
+  if (refOf2(body.customer) !== row2.providerCustomerId || body.amount !== amountCents) fail6("recharge_mismatch");
   for (let retry = 0; retry < 8; retry++) {
-    const state = await loadMembershipAuthorityState(db, scope2), current = await membershipLoad(db, "networkMembership", membershipId);
+    const state = await loadMembershipAuthorityState(db, scope2), current = await membershipLoad(db, ns, id7);
     if (!current) fail6("membership_not_found");
     if (current.rechargePaymentIntentId === body.id && current.status !== MEMBERSHIP_DISPUTED_STATUS) return done(current, true);
-    const status2 = String(current.disputePriorStatus ?? (current.journeyApprovedAt ? "active" : "paid_pending_approval"));
+    const status2 = String(current.disputePriorStatus ?? (kind === "seat" ? "active" : current.journeyApprovedAt ? "active" : "paid_pending_approval"));
     try {
       await db.transact(
-        [membershipUpdate("networkMembership", membershipId, {
+        [membershipUpdate(ns, id7, {
           status: status2,
           disputeStatus: "recharged",
           rechargePaymentIntentId: String(body.id),
@@ -5295,7 +5408,7 @@ async function rechargeDisputedMembership(db, membershipId, secretKey, now) {
           updatedAt: now
         })],
         { mutationId: `membership-recharged:${attempt.key}`, guards: [
-          { ns: "networkMembership", id: membershipId, exists: true, equals: { revision: current.revision, status: MEMBERSHIP_DISPUTED_STATUS } },
+          { ns, id: id7, exists: true, equals: { revision: current.revision, status: MEMBERSHIP_DISPUTED_STATUS } },
           { ns: "membershipAuthorityState", id: String(state.id), exists: true, equals: { mode: "authoritative", revision: state.revision } }
         ] }
       );
@@ -5303,10 +5416,12 @@ async function rechargeDisputedMembership(db, membershipId, secretKey, now) {
       if (cause.code !== "transact_guard_failed") throw cause;
       continue;
     }
-    return done(await membershipLoad(db, "networkMembership", membershipId));
+    return done(await membershipLoad(db, ns, id7));
   }
   return fail6("membership_dispute_retry_required");
 }
+var rechargeDisputedMembership = (db, membershipId, secretKey, now) => rechargeDisputed(db, "membership", membershipId, secretKey, now);
+var rechargeDisputedSeat = (db, seatId, secretKey, now) => rechargeDisputed(db, "seat", seatId, secretKey, now);
 
 // src/worker-routes-admin-membership-disputes.ts
 var LIST2 = "/api/admin/membership-disputes";
@@ -5323,6 +5438,9 @@ var PUBLIC2 = [
   "memberNumber",
   "amountCents",
   "currency",
+  "recipientName",
+  "primaryMembershipId",
+  "purchasedAt",
   "disputeId",
   "disputeStatus",
   "disputeReason",
@@ -5370,14 +5488,17 @@ var handleAdminMembershipDisputes = async (req, url, env, ctx) => {
     return json({ error: "the membership authority is not hosted by this deployment" }, 404);
   }
   if (!one) {
-    const rows5 = (await db.query({ networkMembership: { $: { where: { environment: env.ODLA_ENV }, order: { updatedAt: "desc" }, limit: 500 } } })).networkMembership ?? [];
+    const page = { $: { where: { environment: env.ODLA_ENV }, order: { updatedAt: "desc" }, limit: 500 } };
+    const found = await db.query({ networkMembership: page, networkSeat: page });
+    const memberships = found.networkMembership ?? [], seats = found.networkSeat ?? [];
+    const rows5 = [...memberships.map((row2) => ({ ...project2(row2), kind: "membership" })), ...seats.map((row2) => ({ ...project2(row2), kind: "seat" }))];
     const disputes = rows5.filter((row2) => typeof row2.disputeId === "string").sort((a, b) => Number(b.disputedAt ?? 0) - Number(a.disputedAt ?? 0));
-    return json({ disputes: disputes.map(project2), truncated: rows5.length >= 500 });
+    return json({ disputes, truncated: memberships.length >= 500 || seats.length >= 500 });
   }
   const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
   if (!secret) return json({ error: "network payment provider unavailable" }, 503);
   try {
-    const receipt = await rechargeDisputedMembership(db, one[1], secret, Date.now());
+    const receipt = await (one[1].startsWith("seat_") ? rechargeDisputedSeat : rechargeDisputedMembership)(db, one[1], secret, Date.now());
     return json({ ok: true, ...receipt });
   } catch (error) {
     const failure = error;
@@ -5397,13 +5518,13 @@ var handleAdminMembershipDisputes = async (req, url, env, ctx) => {
 
 // src/membership-policy-versions.ts
 var LIMIT = 200;
-var text3 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
+var text4 = (value) => typeof value === "string" && value.length > 0 && value.length <= 200 ? value : void 0;
 var instant = (value) => {
   const at2 = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : NaN;
   return Number.isSafeInteger(at2) && at2 >= 0 ? at2 : void 0;
 };
 function provenance(row2) {
-  const source = text3(row2.source), actor = text3(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
+  const source = text4(row2.source), actor = text4(row2.actor ?? row2.$createdBy), recordedAt = instant(row2.recordedAt ?? row2.createdAt ?? row2.$createdAt);
   return { ...source ? { source } : {}, ...actor ? { actor } : {}, ...recordedAt !== void 0 ? { recordedAt } : {} };
 }
 var live = (w, now) => w.from <= now && (w.until === void 0 || now < w.until);
@@ -6404,8 +6525,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id7) {
-  const text9 = id7.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text9 ? `${text9[0].toUpperCase()}${text9.slice(1)}` : id7;
+  const text10 = id7.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text10 ? `${text10[0].toUpperCase()}${text10.slice(1)}` : id7;
 }
 function applicationDefs(chapter) {
   try {
@@ -6472,7 +6593,7 @@ var ID3 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var text4 = (value, path, errors, max) => {
+var text5 = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -6500,23 +6621,23 @@ function validateGiftOfferCatalog(input, tierIds) {
     }
     const allowed2 = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key3 of Object.keys(item)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
-    const id7 = text4(item.id, `${path}.id`, errors, 80);
+    const id7 = text5(item.id, `${path}.id`, errors, 80);
     if (id7 && !ID3.test(id7)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (ids2.has(id7)) errors.push(`${path}.id duplicates "${id7}"`);
     ids2.add(id7);
     const targetRaw = record(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
-      const tierId = text4(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
+      const tierId = text5(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
       if (!tierIds.has(tierId)) errors.push(`${path}.target.tierId must reference a declared tier`);
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
-      const entitlementKey = text4(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
+      const entitlementKey = text5(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
       if (entitlementKey && !ID3.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
-    const stripePriceId = text4(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
+    const stripePriceId = text5(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
     if (stripePriceId && !PRICE.test(stripePriceId)) errors.push(`${path}.stripePriceId must be a real Stripe Price id`);
     if (!Number.isSafeInteger(item.priceCents) || Number(item.priceCents) < 1 || Number(item.priceCents) > 1e8) errors.push(`${path}.priceCents must be an integer from 1 to 100,000,000`);
     const currency = typeof item.currency === "string" ? item.currency.trim().toLowerCase() : "";
@@ -6538,9 +6659,9 @@ function validateGiftOfferCatalog(input, tierIds) {
       redemptionLifetimeHours: lifetime,
       ...activeFrom !== void 0 ? { activeFrom } : {},
       ...activeUntil !== void 0 ? { activeUntil } : {},
-      title: text4(item.title, `${path}.title`, errors, 160),
-      description: text4(item.description, `${path}.description`, errors, 2e3),
-      ctaLabel: text4(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
+      title: text5(item.title, `${path}.title`, errors, 160),
+      description: text5(item.description, `${path}.description`, errors, 2e3),
+      ctaLabel: text5(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
     });
   }
   return errors.length ? { ok: false, errors } : { ok: true, value: { schemaVersion: 1, offers } };
@@ -6956,17 +7077,17 @@ async function readBoundedRequestText(req, maxBytes) {
     if (!reader) return "";
     const decoder = new TextDecoder();
     let bytes = 0;
-    let text9 = "";
+    let text10 = "";
     for (; ; ) {
       const { done, value } = await reader.read();
       if (req.signal.aborted) return invalid2();
       if (done) {
         complete = true;
-        return text9 + decoder.decode();
+        return text10 + decoder.decode();
       }
       bytes += value.byteLength;
       if (bytes > maxBytes) return json({ error: "request body too large" }, 413);
-      text9 += decoder.decode(value, { stream: true });
+      text10 += decoder.decode(value, { stream: true });
     }
   } catch {
     return invalid2();
@@ -7070,9 +7191,9 @@ async function paymentQuoteRoute(url, env, ctx, prepare = false, request) {
   let selection;
   if (request?.body) {
     try {
-      const text9 = await readBoundedRequestText(request, 2048);
-      if (text9 instanceof Response) return text9;
-      const body = JSON.parse(text9);
+      const text10 = await readBoundedRequestText(request, 2048);
+      if (text10 instanceof Response) return text10;
+      const body = JSON.parse(text10);
       if (!body || typeof body !== "object" || Array.isArray(body) || Object.keys(body).some((key3) => key3 !== "namedSeat")) throw new Error("invalid body");
       selection = body.namedSeat;
     } catch {
@@ -7954,10 +8075,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text9 = value.trim();
-  if (required && !text9) errors.push(`${path} is required`);
-  if (text9.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text9;
+  const text10 = value.trim();
+  if (required && !text10) errors.push(`${path} is required`);
+  if (text10.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text10;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -8006,8 +8127,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text9 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text9 ? [text9] : [];
+          const text10 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text10 ? [text10] : [];
         });
       }
     }
@@ -8101,7 +8222,7 @@ var recordOf = (value) => value !== null && typeof value === "object" && !Array.
 function unknownKeys(value, allowed2, path, errors) {
   for (const key3 of Object.keys(value)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
 }
-function text5(value, path, errors, max = 65536) {
+function text6(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -8124,11 +8245,11 @@ function tiersOf(value, errors) {
       return [];
     }
     unknownKeys(item, TIER_KEYS2, path, errors);
-    const id7 = text5(item.id, `${path}.id`, errors, 80);
+    const id7 = text6(item.id, `${path}.id`, errors, 80);
     if (id7 && !TIER.test(id7)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (seen.has(id7)) errors.push(`${path}.id duplicates "${id7}"`);
     seen.add(id7);
-    const name = text5(item.name, `${path}.name`, errors, 160);
+    const name = text6(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
     if (!Number.isInteger(item.priceCents) || Number(item.priceCents) < 0 || Number(item.priceCents) > 1e8) {
@@ -8146,7 +8267,7 @@ function tiersOf(value, errors) {
     if (item.interval !== void 0 && item.interval !== "year" && item.interval !== "month") {
       errors.push(`${path}.interval must be year or month`);
     }
-    const blurb = item.blurb === void 0 ? void 0 : text5(item.blurb, `${path}.blurb`, errors, 4e3);
+    const blurb = item.blurb === void 0 ? void 0 : text6(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
       id: id7,
       name,
@@ -8204,7 +8325,7 @@ function policyOf(value, errors, tiers) {
   const result = {};
   for (const key3 of allowed2) {
     if (input[key3] === void 0 && key3 !== "disclaimerText" && key3 !== "refundPolicyText") continue;
-    result[key3] = text5(input[key3], `document.policy.${key3}`, errors);
+    result[key3] = text6(input[key3], `document.policy.${key3}`, errors);
   }
   const tierPolicies = {};
   if (input.tierPolicies !== void 0) {
@@ -8219,8 +8340,8 @@ function policyOf(value, errors, tiers) {
       }
       unknownKeys(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
       tierPolicies[id7] = {
-        refundPolicyText: text5(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
-        ...policy2.trustCopy !== void 0 ? { trustCopy: text5(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
+        refundPolicyText: text6(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
+        ...policy2.trustCopy !== void 0 ? { trustCopy: text6(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
     }
   }
@@ -8260,9 +8381,9 @@ function validateSignupControlDocument(input) {
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
   const source = recordOf(root.source);
   const target = recordOf(root.target);
-  const appId = text5(source?.appId, "document.source.appId", errors, 63);
-  const chapterId = text5(target?.chapterId, "document.target.chapterId", errors, 63);
-  const environment = text5(target?.environment, "document.target.environment", errors, 63);
+  const appId = text6(source?.appId, "document.source.appId", errors, 63);
+  const chapterId = text6(target?.chapterId, "document.target.chapterId", errors, 63);
+  const environment = text6(target?.environment, "document.target.environment", errors, 63);
   if (appId && !SLUG.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
   if (chapterId && !SLUG.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
@@ -10533,7 +10654,7 @@ async function startSubscription(req, env, ctx) {
 
 // src/worker-payment-receipt.ts
 var json2 = (value, status2 = 200) => Response.json(value, { status: status2, headers: { "cache-control": "no-store", "referrer-policy": "no-referrer" } });
-var escape = (text9) => text9.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
+var escape = (text10) => text10.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
 async function paymentReceiptRoute(req, url, env, ctx) {
   const id7 = url.searchParams.get("application");
   if (!id7 || id7.length > 160) return json2({ error: "application required" }, 400);
@@ -10544,7 +10665,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
   if (!app || app.groupId !== ctx.chapter.id || !intent || intent.applicationId !== id7 || intent.appId !== env.ODLA_APP_ID || intent.chapterId !== ctx.chapter.id || intent.environment !== env.ODLA_ENV || intent.runtime !== stripeRuntimeIdentity(env.ODLA_RUNTIME) || app.stripeRuntime !== intent.runtime || app.stripeSubscriptionId !== intent.providerSubscriptionId) return json2({ error: "receipt not found" }, 404);
   const receipt = intent.paymentReceipt;
   if (!receipt) return json2({ pending: true }, 202);
-  const text9 = paymentReceiptText(receipt, ctx.chapter.name);
+  const text10 = paymentReceiptText(receipt, ctx.chapter.name);
   if (req.method === "POST") {
     if (!env.SEND_EMAIL || !env.EMAIL_FROM) return json2({ error: "Email is unavailable. You can print or save your receipt." }, 503);
     const group = (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
@@ -10562,7 +10683,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
       template: "paymentReceipt",
       to: String(intent.purchaserEmailNormalized),
       applicationId: id7,
-      vars: { chapterName: ctx.chapter.name, receiptText: text9 },
+      vars: { chapterName: ctx.chapter.name, receiptText: text10 },
       dedupeKey: `requested-payment-receipt:${receipt.invoiceId}`,
       event: { label: "Payment receipt", trigger: "Purchaser requests their receipt", audience: "Purchaser", variables: ["chapterName", "receiptText"] }
     });
@@ -10572,7 +10693,7 @@ async function paymentReceiptRoute(req, url, env, ctx) {
   const nonce = crypto.randomUUID();
   return new Response(`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Payment receipt</title>
     <style>body{font:16px/1.6 system-ui;max-width:680px;margin:48px auto;padding:24px;color:#17252d}pre{font:inherit;white-space:pre-wrap}button{font:inherit;padding:10px 16px}@media print{button{display:none}body{margin:0}}</style>
-    <h1>Payment receipt</h1><pre>${escape(text9)}</pre><button id="print">Print / save PDF</button>
+    <h1>Payment receipt</h1><pre>${escape(text10)}</pre><button id="print">Print / save PDF</button>
     <script nonce="${nonce}">document.getElementById('print').addEventListener('click',()=>window.print())</script></html>`, {
     headers: {
       "content-type": "text/html; charset=utf-8",
@@ -11042,16 +11163,16 @@ var handleNamedSeat = async (req, url, env, ctx) => {
 };
 
 // src/named-seat-accepted-notice.ts
-var text6 = (value) => typeof value === "string" ? value : "";
+var text7 = (value) => typeof value === "string" ? value : "";
 async function notifyNamedSeatAccepted(db, env, ctx, input) {
   const purchaser = await membershipLoad(db, "applications", input.primaryApplicationId);
-  if (!purchaser || !chapterBillingApplication(purchaser, ctx.chapter.id, env.ODLA_RUNTIME) || !text6(purchaser.email)) {
+  if (!purchaser || !chapterBillingApplication(purchaser, ctx.chapter.id, env.ODLA_RUNTIME) || !text7(purchaser.email)) {
     return { sent: false, reason: "purchaser-missing" };
   }
   const group = await membershipLoad(db, "groups", ctx.chapter.id);
   if (!group) return { sent: false, reason: "group-missing" };
   const config = emailGroupFrom(group);
-  const purchaserName = [purchaser.firstName, purchaser.lastName].map(text6).join(" ").replace(/\s+/g, " ").trim();
+  const purchaserName = [purchaser.firstName, purchaser.lastName].map(text7).join(" ").replace(/\s+/g, " ").trim();
   return sendTemplated({
     db,
     envName: env.ODLA_ENV,
@@ -11063,12 +11184,12 @@ async function notifyNamedSeatAccepted(db, env, ctx, input) {
   }, {
     group: config,
     template: "seatAccepted",
-    to: text6(purchaser.email),
+    to: text7(purchaser.email),
     dedupeKey: `named-seat-accepted:${input.seatId}`,
     applicationId: input.primaryApplicationId,
     tierId: input.skuId,
     vars: {
-      firstName: text6(purchaser.firstName),
+      firstName: text7(purchaser.firstName),
       purchaserName,
       recipientName: input.recipientName,
       tierName: await tierName(db, group, input.skuId),
@@ -12455,6 +12576,84 @@ var import_crm16 = require("@odla-ai/crm");
 
 // src/email-readiness.ts
 var import_crm15 = require("@odla-ai/crm");
+
+// src/email-spam-signals.ts
+var TRIGGER_PHRASES = [
+  "act now",
+  "click here",
+  "limited time",
+  "guaranteed",
+  "risk-free",
+  "risk free",
+  "no obligation",
+  "100% free",
+  "winner",
+  "congratulations",
+  "urgent",
+  "double your",
+  "earn money",
+  "make money",
+  "cash bonus",
+  "once in a lifetime",
+  "exclusive deal",
+  "order now",
+  "buy now",
+  "this is not spam",
+  "dear friend",
+  "dear customer"
+];
+var SUBJECT_TRIGGERS = ["free", ...TRIGGER_PHRASES];
+var DEV_HOSTS = /(?:^|\.)(?:workers\.dev|pages\.dev|localhost|ngrok(?:-free)?\.app|trycloudflare\.com)$/i;
+var SHORTENERS = /^(?:bit\.ly|tinyurl\.com|t\.co|goo\.gl|ow\.ly|is\.gd|buff\.ly|rebrand\.ly|cutt\.ly|tiny\.cc|shorturl\.at|rb\.gy)$/i;
+var URL_RE2 = /https?:\/\/[^\s<>"')\]]+/g;
+var strip = (s) => s.replace(/\{\{\w+\}\}/g, " ");
+var words = (s) => strip(s).split(/\s+/).filter(Boolean);
+var phraseIn = (phrases, haystack) => phrases.find((phrase) => new RegExp(`(?:^|[^a-z0-9])${phrase.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![a-z0-9])`, "i").test(haystack));
+function emailSpamSignals(copy) {
+  const subject = typeof copy.subject === "string" ? copy.subject : "";
+  const text10 = typeof copy.text === "string" ? copy.text : "";
+  const out = [];
+  const letters = strip(subject).replace(/[^A-Za-z]/g, "");
+  const shouting = letters.length >= 6 && letters.replace(/[^A-Z]/g, "").length / letters.length > 0.5 || words(subject).some((word) => /^[A-Z]{4,}$/.test(word.replace(/[^A-Za-z]/g, "")));
+  if (shouting) out.push({ code: "subject-caps", message: "The subject shouts in capital letters. Filters read that as a spam signal; use sentence case." });
+  if (/[!?]{2,}|!\s*$/.test(subject)) out.push({ code: "subject-punctuation", message: "Repeated or trailing exclamation marks in the subject are a classic spam signal." });
+  if (/^\s*(?:re|fw|fwd)\s*:/i.test(subject)) out.push({ code: "subject-fake-reply", message: "A subject that starts like a reply or forward reads as a spoof when the recipient never wrote first." });
+  const subjectHit = phraseIn(SUBJECT_TRIGGERS, strip(subject));
+  if (subjectHit) out.push({ code: "subject-trigger-words", message: `The subject uses "${subjectHit}", a word filters weight against the sender.` });
+  const bodyHit = phraseIn(TRIGGER_PHRASES, strip(text10));
+  if (bodyHit) out.push({ code: "body-trigger-words", message: `The body uses "${bodyHit}", a phrase filters weight against the sender.` });
+  if (/(?:^|\s)[A-Z]{3,}(?:\s+[A-Z]{3,}){2,}(?=\s|$)/.test(strip(text10))) out.push({ code: "body-caps", message: "The body shouts a run of capitalised words; use sentence case." });
+  if (/!{2,}/.test(text10)) out.push({ code: "body-punctuation", message: "Repeated exclamation marks in the body are a classic spam signal." });
+  const urls = [...text10.matchAll(URL_RE2)].map((match) => match[0]);
+  const hosts = urls.map((url) => {
+    try {
+      return new URL(url).hostname;
+    } catch {
+      return "";
+    }
+  });
+  if (urls.some((url) => /^http:\/\//i.test(url))) out.push({ code: "link-insecure", message: "A link uses http:// instead of https://. Filters flag insecure links." });
+  if (hosts.some((host) => DEV_HOSTS.test(host) || /^\d+\.\d+\.\d+\.\d+$/.test(host))) out.push({ code: "link-origin", message: "A link points at a development host (workers.dev, pages.dev, localhost or a raw IP). Link to the site's own domain." });
+  if (hosts.some((host) => SHORTENERS.test(host))) out.push({ code: "link-shortener", message: "A link uses a URL shortener, which hides the destination and is heavily abused. Link to the real address." });
+  if (new Set(urls).size > 5) out.push({ code: "link-many", message: "The body has more than five links. Keep lifecycle mail to the one or two the reader needs." });
+  if (urls.length && words(text10).length < 20) out.push({ code: "body-link-only", message: "The body is little more than a link. Say what the reader is being sent and why before the address." });
+  return out;
+}
+function emailSenderWarnings(input) {
+  const out = [];
+  const from = (input.fromEmail ?? "").trim().toLowerCase().replace(/^.*<([^>]+)>.*$/, "$1");
+  const reply = (input.replyTo ?? "").trim().toLowerCase();
+  const domain = (address) => address.split("@")[1] ?? "";
+  if (/^(?:no-?reply|do-?not-?reply|donotreply)(?:[+.-][^@]*)?@/.test(from)) {
+    out.push({ code: "sender-no-reply", message: "Mail is sent from a no-reply address. Gmail's sender guidelines advise against it; send from a monitored address so replies and unsubscribe requests reach someone." });
+  }
+  if (domain(from) && domain(reply) && domain(from) !== domain(reply)) {
+    out.push({ code: "reply-to-domain", message: `Replies go to ${domain(reply)} while mail is sent from ${domain(from)}. A Reply-To on another domain is a mild spam signal; prefer an address on the sending domain.` });
+  }
+  return out;
+}
+
+// src/email-readiness.ts
 function validateEmailReadiness(input) {
   const issues = [];
   for (const key3 of Object.keys(input.templates)) if (!input.events[key3]) {
@@ -12479,9 +12678,15 @@ ${template.text ?? ""}`.matchAll(/\{\{(\w+)\}\}/g)].map((match) => match[1]);
     }
     if (event2.requiresTier && input.tiersUnavailable) problems.push({ code: "tiers-unavailable", message: "Tier names are unavailable; delivery checks will block unresolved memberships." });
     else if (event2.requiresTier && noTierNames) problems.push({ code: "tiers-missing", message: "Configure the membership tier names needed by this event." });
-    return { ...event2, key: key3, status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready", issues: problems };
+    return {
+      ...event2,
+      key: key3,
+      status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready",
+      issues: problems,
+      warnings: template ? emailSpamSignals(template) : []
+    };
   });
-  return { checkedAt: input.now ?? Date.now(), events, issues };
+  return { checkedAt: input.now ?? Date.now(), events, issues, warnings: emailSenderWarnings(input.sender ?? {}) };
 }
 
 // src/email-admin-config.ts
@@ -12507,7 +12712,14 @@ async function emailSettings(db, ctx, env) {
     }
   }
   const groupValues = Object.fromEntries(["refundPolicyText", "commitmentText", "normsText"].map((key3) => [key3, str2(group?.[key3])]));
-  const validation = validateEmailReadiness({ events, templates: stored, groupValues, tiers: hub ? void 0 : tiers, tiersUnavailable });
+  const validation = validateEmailReadiness({
+    events,
+    templates: stored,
+    groupValues,
+    tiers: hub ? void 0 : tiers,
+    tiersUnavailable,
+    sender: { fromEmail: env.EMAIL_FROM ?? null, replyTo: str2(group?.replyTo) }
+  });
   return { group, events, data: {
     groupId: ctx.chapter.id,
     name: ctx.chapter.name,
@@ -12535,12 +12747,12 @@ async function updateEmailSettings(db, ctx, env, body) {
     if (!value || typeof value !== "object" || Array.isArray(value)) return json({ error: `Invalid template: ${key3}` }, 400);
     const t = value;
     if (typeof t.enabled !== "boolean") return json({ error: `Choose whether ${key3} is enabled.` }, 400);
-    const subject = str2(t.subject).trim(), text9 = str2(t.text);
-    const issues = (0, import_crm16.validateEmailCopy)({ subject, text: text9 }, { allowedVariables: events[key3].variables });
+    const subject = str2(t.subject).trim(), text10 = str2(t.text);
+    const issues = (0, import_crm16.validateEmailCopy)({ subject, text: text10 }, { allowedVariables: events[key3].variables });
     if (t.enabled && issues.length || issues.some((issue) => ["subject-invalid", "body-invalid"].includes(issue.code))) {
       return json({ error: `${events[key3].label} is incomplete.`, errors: issues.map((issue) => issue.message) }, 400);
     }
-    clean[key3] = { subject, text: text9, enabled: t.enabled };
+    clean[key3] = { subject, text: text10, enabled: t.enabled };
   }
   const notificationEmail = str2(body.notificationEmail).trim(), replyTo = str2(body.replyTo).trim(), debugEmail = str2(body.debugEmail).trim();
   const emailish = /^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/;
@@ -12561,7 +12773,8 @@ async function updateEmailSettings(db, ctx, env, body) {
       { t: "update", ns: "groups", id: id7, attrs: { commitmentText, normsText, notificationEmail, replyTo, debugEmail, fromName } }
     ]);
   }
-  return json({ ok: true });
+  const warnings = Object.fromEntries(Object.entries(clean).map(([key3, template]) => [key3, emailSpamSignals(template)]).filter(([, found]) => found.length));
+  return json({ ok: true, warnings });
 }
 
 // src/worker-routes-admin-comms.ts
@@ -14744,9 +14957,9 @@ var handleAdminNetworkPersonRegistry = async (req, url, env, ctx) => {
   if (req.method === "POST") {
     let body;
     try {
-      const text9 = await req.text();
-      if (new TextEncoder().encode(text9).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
-      const parsed = JSON.parse(text9);
+      const text10 = await req.text();
+      if (new TextEncoder().encode(text10).byteLength > MAX_BODY2) return json({ error: "request is too large" }, 413);
+      const parsed = JSON.parse(text10);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("invalid");
       body = parsed;
     } catch {
@@ -14915,7 +15128,7 @@ var import_db13 = require("@odla-ai/db");
 // src/network-commercial-parity.ts
 var DIGEST = /^[0-9a-f]{64}$/;
 var MAX_RECORDS = 500;
-var text7 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
+var text8 = (value, max = 255) => typeof value === "string" && value.length > 0 && value.length <= max ? value : null;
 function parityMessage(partition, kind, value) {
   return [
     "chapter-commercial-parity",
@@ -14947,18 +15160,18 @@ async function digestWithKey(key3, partition, kind, value) {
 async function buildChapterCommercialParitySnapshot(input) {
   const requestedMax = input.maxRecords ?? MAX_RECORDS;
   const maxRecords = Number.isSafeInteger(requestedMax) ? Math.max(0, Math.min(requestedMax, MAX_RECORDS)) : MAX_RECORDS;
-  const eligible = input.rows.filter((row2) => text7(row2.id) && (text7(row2.stripeCustomerId) || text7(row2.stripeSubscriptionId)));
+  const eligible = input.rows.filter((row2) => text8(row2.id) && (text8(row2.stripeCustomerId) || text8(row2.stripeSubscriptionId)));
   const selected2 = eligible.slice(0, maxRecords);
   const key3 = await parityKey(input.secret);
   const records = await Promise.all(selected2.map(async (row2) => {
-    const applicationId = text7(row2.id);
-    const customerId = text7(row2.stripeCustomerId);
-    const subscriptionId = text7(row2.stripeSubscriptionId);
+    const applicationId = text8(row2.id);
+    const customerId = text8(row2.stripeCustomerId);
+    const subscriptionId = text8(row2.stripeSubscriptionId);
     return {
       applicationDigest: await digestWithKey(key3, input.partition, "application", applicationId),
       customerDigest: customerId ? await digestWithKey(key3, input.partition, "customer", customerId) : null,
       subscriptionDigest: subscriptionId ? await digestWithKey(key3, input.partition, "subscription", subscriptionId) : null,
-      status: text7(row2.status, 64),
+      status: text8(row2.status, 64),
       canceled: row2.canceled === true
     };
   }));
@@ -14984,7 +15197,7 @@ function validSnapshot(snapshot, source) {
   if (snapshot?.version !== 1 || snapshot.site?.id !== source.chapterId || !partition || !Array.isArray(records) || records.length > MAX_RECORDS || partition.appId !== source.appId || partition.chapterId !== source.chapterId || partition.environment !== source.environment || partition.dataEnvironment !== source.dataEnvironment || partition.runtime !== source.runtime || typeof snapshot.complete !== "boolean" || typeof snapshot.truncated !== "boolean" || !snapshot.counts) return false;
   const seen = /* @__PURE__ */ new Set();
   for (const record4 of records) {
-    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text7(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
+    if (!DIGEST.test(record4.applicationDigest) || record4.customerDigest !== null && !DIGEST.test(record4.customerDigest) || record4.subscriptionDigest !== null && !DIGEST.test(record4.subscriptionDigest) || record4.status !== null && text8(record4.status, 64) === null || typeof record4.canceled !== "boolean") return false;
     const key3 = recordKey(record4);
     if (seen.has(key3)) return false;
     seen.add(key3);
@@ -14995,16 +15208,16 @@ async function reconcileCommercialParitySnapshot(input) {
   if (!validSnapshot(input.snapshot, input.source)) throw new Error("invalid chapter commercial parity snapshot");
   const sourceKey = networkCommercialSourceKey(input.source);
   const key3 = await parityKey(input.secret);
-  const shadow = await Promise.all(input.projection.subscriptions.filter((row2) => row2.sourceKey === sourceKey && text7(row2.applicationId) && text7(row2.objectId)).map(async (row2) => {
-    const customerId = text7(row2.customerId);
-    const subscriptionId = text7(row2.subscriptionId) ?? text7(row2.objectId);
+  const shadow = await Promise.all(input.projection.subscriptions.filter((row2) => row2.sourceKey === sourceKey && text8(row2.applicationId) && text8(row2.objectId)).map(async (row2) => {
+    const customerId = text8(row2.customerId);
+    const subscriptionId = text8(row2.subscriptionId) ?? text8(row2.objectId);
     return {
       applicationDigest: await digestWithKey(key3, input.snapshot.partition, "application", row2.applicationId),
       customerDigest: customerId ? await digestWithKey(key3, input.snapshot.partition, "customer", customerId) : null,
       subscriptionDigest: subscriptionId ? await digestWithKey(key3, input.snapshot.partition, "subscription", subscriptionId) : null,
       status: null,
       canceled: false,
-      stripeStatus: text7(row2.status, 64),
+      stripeStatus: text8(row2.status, 64),
       stripeCanceled: row2.status === "canceled"
     };
   }));
@@ -15214,18 +15427,24 @@ async function applyHostedMembershipDispute(env, ctx, fact, now) {
   const secret = await getVaultSecret(db, operator.stripeSecretName ?? "stripe_secret_key");
   if (!secret) throw Object.assign(new Error("membership_dispute_provider_unavailable"), { code: "membership_dispute_provider_unavailable" });
   const charge = await readDisputedCharge(secret, fact.chargeId);
+  const scopeOf = (row2) => ({
+    appId: String(row2.appId),
+    chapterId: String(row2.chapterId),
+    environment: String(row2.environment),
+    runtime: String(row2.runtime),
+    applicationId: String(row2.applicationId),
+    skuId: String(row2.skuId)
+  });
+  if (charge.seatId) {
+    const seat = await membershipLoad(db, "networkSeat", charge.seatId);
+    if (!seat || seat.environment !== env.ODLA_ENV || !disputedChargeCoversSeat(charge, seat)) return { disposition: "not_applicable" };
+    const receipt2 = await reconcileMembershipDispute(db, { ...scopeOf(seat), eventId: fact.eventId }, now, secret, charge);
+    return { disposition: "applied", membershipId: receipt2.membershipId, seatId: charge.seatId };
+  }
   const rows5 = (await db.query({ networkMembership: { $: { where: { providerCustomerId: charge.customerId, environment: env.ODLA_ENV }, limit: 5 } } })).networkMembership ?? [];
   const member = rows5.find((row2) => disputedChargeCoversMembership(charge, row2));
   if (!member) return { disposition: "not_applicable" };
-  const target = {
-    appId: String(member.appId),
-    chapterId: String(member.chapterId),
-    environment: String(member.environment),
-    runtime: String(member.runtime),
-    applicationId: String(member.applicationId),
-    skuId: String(member.skuId)
-  };
-  const receipt = await reconcileMembershipDispute(db, { ...target, eventId: fact.eventId }, now, secret, charge);
+  const receipt = await reconcileMembershipDispute(db, { ...scopeOf(member), eventId: fact.eventId }, now, secret, charge);
   return { disposition: "applied", membershipId: receipt.membershipId };
 }
 
@@ -15293,11 +15512,11 @@ function safeProjection(projection) {
       amountReceivedCents: seat.amountReceivedCents,
       refundedCents: seat.refundedCents ?? 0
     })),
-    disputes: (projection.disputes ?? []).map((dispute) => ({
-      ...row2(dispute),
-      chargeId: dispute.chargeId ?? null,
-      paymentIntentId: dispute.paymentIntentId ?? null,
-      reason: dispute.disputeReason ?? null
+    disputes: (projection.disputes ?? []).map((dispute2) => ({
+      ...row2(dispute2),
+      chargeId: dispute2.chargeId ?? null,
+      paymentIntentId: dispute2.paymentIntentId ?? null,
+      reason: dispute2.disputeReason ?? null
     })),
     exceptions: projection.exceptions
   };
@@ -15331,10 +15550,10 @@ var handleNetworkCommercialStripeWebhook = async (req, url, env, ctx) => {
     if (result.status === "collision") {
       console.error("network commercial event collision", JSON.stringify({ eventId: fact.eventId, eventType: fact.eventType }));
     }
-    let dispute;
+    let dispute2;
     if (fact.objectKind === "dispute" && result.status !== "collision") {
       try {
-        dispute = await applyHostedMembershipDispute(env, ctx, fact, Date.now());
+        dispute2 = await applyHostedMembershipDispute(env, ctx, fact, Date.now());
       } catch (error) {
         console.warn("membership dispute pending", JSON.stringify({ eventId: fact.eventId, code: error.code ?? "unknown" }));
         return json({ error: "membership dispute reconciliation pending", eventId: fact.eventId }, 503);
@@ -15344,7 +15563,7 @@ var handleNetworkCommercialStripeWebhook = async (req, url, env, ctx) => {
       ok: true,
       status: result.status,
       eventId: fact.eventId,
-      ...dispute ? { dispute: dispute.disposition } : {},
+      ...dispute2 ? { dispute: dispute2.disposition } : {},
       ...result.status === "replayed" && result.resolvedCollision ? { resolvedCollision: true } : {}
     });
   } catch (error) {
@@ -15542,7 +15761,7 @@ var record3 = (value) => value !== null && typeof value === "object" && !Array.i
 function unknownKeys3(value, allowed2, path, errors) {
   for (const key3 of Object.keys(value)) if (!allowed2.has(key3)) errors.push(`${path}.${key3} is not supported`);
 }
-function text8(value, path, errors, max = MAX_TEXT2, required = true) {
+function text9(value, path, errors, max = MAX_TEXT2, required = true) {
   if (value === void 0 && !required) return void 0;
   if (typeof value !== "string" || required && !value.trim()) {
     errors.push(`${path} must be a non-empty string`);
@@ -15568,7 +15787,7 @@ function scopeValue(value, path, errors) {
     return { kind: raw2.kind };
   }
   if (raw2.kind === "chapter") {
-    const chapterId = text8(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
+    const chapterId = text9(raw2.chapterId, `${path}.chapterId`, errors, 63) ?? "";
     if (chapterId && !APP_ID.test(chapterId)) errors.push(`${path}.chapterId must be a lowercase app slug`);
     return { kind: "chapter", chapterId };
   }
@@ -15582,22 +15801,22 @@ function resourceValue(value, path, errors) {
     return null;
   }
   unknownKeys3(raw2, RESOURCE_KEYS, path, errors);
-  const id7 = text8(raw2.id, `${path}.id`, errors, 80) ?? "";
+  const id7 = text9(raw2.id, `${path}.id`, errors, 80) ?? "";
   if (id7 && !ID5.test(id7)) errors.push(`${path}.id must be lowercase kebab-case`);
-  const kind = text8(raw2.kind, `${path}.kind`, errors) ?? "";
+  const kind = text9(raw2.kind, `${path}.kind`, errors) ?? "";
   if (!KINDS.has(kind)) errors.push(`${path}.kind is unsupported`);
-  const title = text8(raw2.title, `${path}.title`, errors, 240) ?? "";
-  const summary = text8(raw2.summary, `${path}.summary`, errors, 1e3, false);
-  const status2 = text8(raw2.status, `${path}.status`, errors) ?? "";
+  const title = text9(raw2.title, `${path}.title`, errors, 240) ?? "";
+  const summary = text9(raw2.summary, `${path}.summary`, errors, 1e3, false);
+  const status2 = text9(raw2.status, `${path}.status`, errors) ?? "";
   if (!STATUSES.has(status2)) errors.push(`${path}.status must be draft, published, or archived`);
   const revision = integer4(raw2.revision, `${path}.revision`, errors);
   const scope2 = scopeValue(raw2.scope, `${path}.scope`, errors) ?? { kind: "global" };
-  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text8(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
+  const tags = Array.isArray(raw2.tags) ? raw2.tags.map((tag, index2) => text9(tag, `${path}.tags[${index2}]`, errors, 80) ?? "") : [];
   if (!Array.isArray(raw2.tags)) errors.push(`${path}.tags must be an array`);
   if (tags.length > MAX_TAGS) errors.push(`${path}.tags may contain at most ${MAX_TAGS} items`);
   if (new Set(tags).size !== tags.length) errors.push(`${path}.tags must be unique`);
-  const bodyMarkdown = text8(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
-  const url = text8(raw2.url, `${path}.url`, errors, 2048, false);
+  const bodyMarkdown = text9(raw2.bodyMarkdown, `${path}.bodyMarkdown`, errors, MAX_MARKDOWN3, false);
+  const url = text9(raw2.url, `${path}.url`, errors, 2048, false);
   if (url) {
     try {
       if (new URL(url).protocol !== "https:") errors.push(`${path}.url must use https`);
@@ -15609,9 +15828,9 @@ function resourceValue(value, path, errors) {
   if (raw2.brandAsset !== void 0 && !asset) errors.push(`${path}.brandAsset must be an object`);
   if (asset) unknownKeys3(asset, ASSET_KEYS, `${path}.brandAsset`, errors);
   const brandAsset = asset ? {
-    bookId: text8(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
-    assetId: text8(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
-    ...asset.filename === void 0 ? {} : { filename: text8(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
+    bookId: text9(asset.bookId, `${path}.brandAsset.bookId`, errors, 160) ?? "",
+    assetId: text9(asset.assetId, `${path}.brandAsset.assetId`, errors, 160) ?? "",
+    ...asset.filename === void 0 ? {} : { filename: text9(asset.filename, `${path}.brandAsset.filename`, errors, 240) ?? "" }
   } : void 0;
   if ((kind === "document" || kind === "note") && !bodyMarkdown) errors.push(`${path}.bodyMarkdown is required for ${kind}`);
   if ((kind === "link" || kind === "inspiration") && !url) errors.push(`${path}.url is required for ${kind}`);
@@ -15626,17 +15845,17 @@ function resourceValue(value, path, errors) {
   if (provenanceRaw?.promotedFrom !== void 0 && !promotedRaw) errors.push(`${path}.provenance.promotedFrom must be an object`);
   if (promotedRaw) unknownKeys3(promotedRaw, PROMOTION_KEYS, `${path}.provenance.promotedFrom`, errors);
   const promotedFrom = promotedRaw ? {
-    chapterId: text8(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
-    resourceId: text8(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
+    chapterId: text9(promotedRaw.chapterId, `${path}.provenance.promotedFrom.chapterId`, errors, 63) ?? "",
+    resourceId: text9(promotedRaw.resourceId, `${path}.provenance.promotedFrom.resourceId`, errors, 80) ?? "",
     resourceRevision: integer4(promotedRaw.resourceRevision, `${path}.provenance.promotedFrom.resourceRevision`, errors),
     documentRevision: integer4(promotedRaw.documentRevision, `${path}.provenance.promotedFrom.documentRevision`, errors),
-    promotedBy: text8(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
+    promotedBy: text9(promotedRaw.promotedBy, `${path}.provenance.promotedFrom.promotedBy`, errors, 320) ?? "",
     promotedAt: integer4(promotedRaw.promotedAt, `${path}.provenance.promotedFrom.promotedAt`, errors, 0)
   } : void 0;
   const provenance2 = {
-    createdBy: text8(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
+    createdBy: text9(provenanceRaw?.createdBy, `${path}.provenance.createdBy`, errors, 320) ?? "",
     createdAt: integer4(provenanceRaw?.createdAt, `${path}.provenance.createdAt`, errors, 0),
-    updatedBy: text8(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
+    updatedBy: text9(provenanceRaw?.updatedBy, `${path}.provenance.updatedBy`, errors, 320) ?? "",
     updatedAt: integer4(provenanceRaw?.updatedAt, `${path}.provenance.updatedAt`, errors, 0),
     ...promotedFrom ? { promotedFrom } : {}
   };
@@ -15655,7 +15874,7 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (sourceRaw) unknownKeys3(sourceRaw, SOURCE_KEYS2, "document.source", errors);
   const sourceType = sourceRaw?.type;
   if (sourceType !== "chapter" && sourceType !== "built_not_found") errors.push("document.source.type must be chapter or built_not_found");
-  const sourceAppId = text8(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
+  const sourceAppId = text9(sourceRaw?.appId, "document.source.appId", errors, 63) ?? "";
   if (sourceAppId && !APP_ID.test(sourceAppId)) errors.push("document.source.appId must be a lowercase app slug");
   if (options.sourceType && sourceType !== options.sourceType) errors.push(`document.source.type must be ${options.sourceType}`);
   if (options.sourceAppId && sourceAppId !== options.sourceAppId) errors.push(`document.source.appId must be ${options.sourceAppId}`);
@@ -15663,8 +15882,8 @@ function validateBuilderLibraryDocument(value, options = {}) {
   if (raw2.target !== void 0 && !targetRaw) errors.push("document.target must be an object");
   if (targetRaw) unknownKeys3(targetRaw, TARGET_KEYS2, "document.target", errors);
   const target = targetRaw ? {
-    appId: text8(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
-    environment: text8(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
+    appId: text9(targetRaw.appId, "document.target.appId", errors, 63) ?? "",
+    environment: text9(targetRaw.environment, "document.target.environment", errors, 80) ?? ""
   } : void 0;
   if (options.targetAppId && target?.appId !== options.targetAppId) errors.push(`document.target.appId must be ${options.targetAppId}`);
   if (!Array.isArray(raw2.resources)) errors.push("document.resources must be an array");
@@ -17189,6 +17408,19 @@ var id5 = () => attr("string", false, true, true);
 var key = (optional = false) => attr("string", optional, false, true);
 var scope = () => ({ appId: key(), chapterId: key(), environment: key(), runtime: key(), applicationId: key(), skuId: key() });
 var times = () => ({ revision: attr("number"), createdAt: attr("number"), updatedAt: attr("number") });
+var dispute = () => ({
+  disputeId: key(true),
+  disputeStatus: attr("string", true),
+  disputeReason: attr("string", true),
+  disputeAmountCents: attr("number", true),
+  disputedAt: attr("number", true),
+  disputeClosedAt: attr("number", true),
+  disputePriorStatus: attr("string", true),
+  disputeEventId: key(true),
+  rechargePaymentIntentId: key(true),
+  rechargedAt: attr("number", true),
+  rechargeAttempt: attr("json", true)
+});
 var membershipAuthorityEntities = {
   networkMembership: { attrs: {
     id: id5(),
@@ -17229,19 +17461,7 @@ var membershipAuthorityEntities = {
     ...times(),
     refundRequestedAt: attr("number", true),
     restartId: key(true),
-    // A card-network dispute on this membership's payment: Stripe's dispute id and status, the reason the cardholder gave,
-    // the status the membership held before it was suspended, and the re-issued charge once an operator collected again.
-    disputeId: key(true),
-    disputeStatus: attr("string", true),
-    disputeReason: attr("string", true),
-    disputeAmountCents: attr("number", true),
-    disputedAt: attr("number", true),
-    disputeClosedAt: attr("number", true),
-    disputePriorStatus: attr("string", true),
-    disputeEventId: key(true),
-    rechargePaymentIntentId: key(true),
-    rechargedAt: attr("number", true),
-    rechargeAttempt: attr("json", true)
+    ...dispute()
   } },
   membershipRestart: { attrs: {
     id: id5(),
@@ -17317,7 +17537,8 @@ var membershipAuthorityEntities = {
     refundedCents: attr("number", true),
     providerRefundIds: attr("json", true),
     regiftedAt: attr("number", true),
-    formerRecipients: attr("json", true)
+    formerRecipients: attr("json", true),
+    ...dispute()
   } },
   networkSeatRecipient: { attrs: { id: id5(), appId: key(), chapterId: key(), environment: key(), runtime: key(), seatId: key(), recipientEmailNormalized: key(), createdAt: attr("number") } },
   membershipEffect: { attrs: {
@@ -17654,7 +17875,7 @@ async function readBoundedJson(response, signal, maxBytes, label) {
   };
   signal.addEventListener("abort", cancel, { once: true });
   let size = 0;
-  let text9 = "";
+  let text10 = "";
   const decoder = new TextDecoder();
   try {
     while (true) {
@@ -17664,10 +17885,10 @@ async function readBoundedJson(response, signal, maxBytes, label) {
       if (done) break;
       size += value.byteLength;
       if (size > maxBytes) throw new TypeError(`${label} exceeds limit`);
-      text9 += decoder.decode(value, { stream: true });
+      text10 += decoder.decode(value, { stream: true });
     }
     try {
-      return JSON.parse(text9 + decoder.decode());
+      return JSON.parse(text10 + decoder.decode());
     } catch {
       throw new TypeError(`invalid ${label}`);
     }