@odla-ai/chapter 0.59.1 → 0.61.0

package/dist/worker/index.cjs

@@ -1707,20 +1707,74 @@ function isRetiredEmailCopy(subject, text10) {
 }
 
 // src/email.ts
+var import_crm6 = require("@odla-ai/crm");
+
+// src/email-render.ts
 var import_crm5 = require("@odla-ai/crm");
 
+// src/email-html.ts
+var URL_RE = /https?:\/\/[^\s<>"')\]]+[^\s<>"').,;:!?\]]/g;
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function lineHtml(line) {
+  let out = "", last = 0;
+  for (const match of line.matchAll(URL_RE)) {
+    out += escapeHtml(line.slice(last, match.index));
+    const url = escapeHtml(match[0]);
+    out += `<a href="${url}">${url}</a>`;
+    last = match.index + match[0].length;
+  }
+  return out + escapeHtml(line.slice(last));
+}
+function textToHtml(text10) {
+  const paragraphs = text10.replace(/\r\n/g, "\n").trim().split(/\n{2,}/).filter((paragraph) => paragraph.trim());
+  const body = paragraphs.map((paragraph) => `<p>${paragraph.split("\n").map(lineHtml).join("<br>\n")}</p>`).join("\n");
+  return `<!doctype html>
+<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"></head>
+<body style="margin:0;padding:24px 16px;background:#ffffff;color:#1a1a1a;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;font-size:16px;line-height:1.5">
+${body}
+</body></html>`;
+}
+
+// src/email-render.ts
+function render(template, vars) {
+  return (0, import_crm5.renderTemplate)(template, vars);
+}
+var HTML_BODY_LIMIT = 2e5;
+function renderHtmlBody(template, vars) {
+  const escaped = Object.fromEntries(Object.entries(vars).map(([name, value]) => [name, escapeHtml(value).replace(/\r?\n/g, "<br>")]));
+  return (0, import_crm5.renderTemplate)(template, escaped);
+}
+function htmlBodyIssues(html, options) {
+  const issues = [];
+  if (html.length > HTML_BODY_LIMIT) issues.push({ code: "html-invalid", message: `Keep the HTML body within ${HTML_BODY_LIMIT.toLocaleString("en-US")} characters.` });
+  for (const message of (0, import_crm5.templateSectionIssues)(html)) issues.push({ code: "section-invalid", message: `${message} (HTML body)` });
+  const unknown = new Set((0, import_crm5.templateVars)(html).filter((variable) => options.allowedVariables && !options.allowedVariables.includes(variable)));
+  for (const variable of unknown) issues.push({ code: "variable-unknown", variable, message: `This event does not supply {{${variable}}} (HTML body).` });
+  if (options.values) {
+    for (const name of (0, import_crm5.templateSectionNames)(html)) if (typeof options.values[name] !== "string") issues.push({ code: "value-missing", variable: name, message: `Missing event value: ${name} (HTML body).` });
+    for (const variable of (0, import_crm5.templateLiveVars)(html, options.values)) {
+      if (unknown.has(variable)) continue;
+      const value = options.values[variable];
+      if (typeof value !== "string" || !value.trim() && !options.optionalVariables?.includes(variable)) issues.push({ code: "value-missing", variable, message: `Missing event value: ${variable} (HTML body).` });
+    }
+  }
+  return issues;
+}
+
 // src/email-events.ts
 var identity = ["firstName", "lastName", "email", "phone", "state"];
 var policy = ["refundPolicyText", "commitmentText", "normsText"];
-var checkout = ["tier", "tierName", "paymentAmount", "paymentAmountSummary"];
-var optionalVariables = ["phone", "state", "paymentAmount", "paymentAmountSummary"];
+var checkout = ["tier", "tierName", "paymentAmount", "paymentAmountSummary", "namedSeat", "namedSeatRecipientName"];
+var optionalVariables = ["phone", "state", "paymentAmount", "paymentAmountSummary", "namedSeat", "namedSeatRecipientName"];
 var event = (label, trigger, audience, variables, requiresTier = true) => ({ label, trigger, audience, variables: [...variables, ...policy], optionalVariables, requiresTier });
 var CHAPTER_EMAIL_EVENTS = {
   adminNotification: event("Application notification", "Application submitted or payment received, according to notification settings", "Administrator", [...identity, ...checkout, "adminUrl", "membersUrl"]),
   submitConfirmation: event("Application receipt", "Application submitted", "Applicant", [...identity, ...checkout, "submitNextStep", "membersUrl"]),
   paymentConfirmation: event("Payment confirmation", "Membership payment received", "Applicant", ["firstName", ...checkout, "paymentNextStep"]),
   prepEmail: event("Call confirmation", "Introduction call booked", "Applicant", [...identity, ...checkout, "startAt", "endAt", "timezone", "meetUrl", "htmlLink", "meetingTime", "meetingLink"]),
-  onboardingInvite: event("Membership welcome", "Membership approved", "Member", ["firstName", "membersUrl", "tierName"]),
+  onboardingInvite: event("Membership welcome", "Membership approved", "Member", ["firstName", "membersUrl", "tierName", "namedSeat", "namedSeatRecipientName"]),
   namedSeatInvitation: event("Gift membership invitation", "A gift membership is ready to be accepted", "Gift recipient", ["firstName", "purchaserName", "chapterName", "acceptBy", "joinUrl", "tierName"]),
   seatAccepted: event("Gift accepted", "Gift recipient accepts their membership", "Purchaser", ["firstName", "purchaserName", "recipientName", "tierName", "chapterName", "membersUrl"])
 };
@@ -1735,9 +1789,6 @@ function chapterEmailEvents(chapter) {
 }
 
 // src/email.ts
-function render(template, vars) {
-  return template.replace(/\{\{(\w+)\}\}/g, (_, key3) => vars[key3] ?? "");
-}
 function groupVars(group, vars) {
   return {
     ...vars,
@@ -1763,14 +1814,16 @@ function planDelivery(input) {
   const vars = groupVars(input.group, input.vars);
   if (isRetiredEmailCopy(String(tpl.subject ?? ""), String(tpl.text ?? ""))) return { deliver: false, reason: "template-retired" };
   const event2 = input.event ?? CHAPTER_EMAIL_EVENTS[input.template];
-  const issues = (0, import_crm5.validateEmailCopy)(tpl, {
+  const issues = (0, import_crm6.validateEmailCopy)(tpl, {
     allowedVariables: event2?.variables,
     optionalVariables: event2?.optionalVariables,
     requiredVariables: event2?.requiresTier ? ["tierName"] : [],
     values: vars,
     tierId: vars.tierId
   });
-  if (issues.length) return { deliver: false, reason: "template-invalid", issues: issues.map((issue) => issue.message) };
+  const html = typeof tpl.html === "string" && tpl.html.trim() ? tpl.html : void 0;
+  const htmlIssues = html ? htmlBodyIssues(html, { allowedVariables: event2?.variables, optionalVariables: event2?.optionalVariables, values: vars }) : [];
+  if (issues.length || htmlIssues.length) return { deliver: false, reason: "template-invalid", issues: [...issues, ...htmlIssues].map((issue) => issue.message) };
   const isProd = input.envName === "prod";
   const redirect = !isProd && !!input.group.debugEmail;
   const transport = !isProd && !redirect ? "log-only" : input.cloudflareReady ? "cloudflare" : "log-only";
@@ -1778,19 +1831,37 @@ function planDelivery(input) {
   const renderedSubject = render(tpl.subject, vars);
   const renderedText = render(tpl.text, vars);
   if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
-  if ((0, import_crm5.validateEmailCopy)({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
+  if ((0, import_crm6.validateEmailCopy)({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
   const subject = (redirect ? "[dev] " : "") + renderedSubject;
   const text10 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + renderedText : renderedText;
-  return { deliver: true, transport, to, subject, text: text10, redirected: redirect };
+  const renderedHtml = html ? renderHtmlBody(html, vars) : void 0;
+  const htmlOut = renderedHtml && redirect ? `<p style="font:13px monospace;color:#555;margin:0 0 12px">(dev redirect; original recipient: ${escapeHtml(input.to)})</p>` + renderedHtml : renderedHtml;
+  return { deliver: true, transport, to, subject, text: text10, ...htmlOut ? { html: htmlOut } : {}, redirected: redirect };
+}
+
+// src/email-deliverability.ts
+var ADMINISTRATOR_AUDIENCE = /^(?:administrator|admin|team|operator|owner|staff)s?$/i;
+function isRecipientFacing(event2) {
+  return !event2 || !ADMINISTRATOR_AUDIENCE.test(event2.audience.trim());
+}
+function listUnsubscribeHeader(replyTo) {
+  const address = replyTo.trim();
+  if (!/^[^\s@,;<>?]+@[^\s@,;<>?]+\.[^\s@,;<>?]+$/.test(address)) return void 0;
+  return `<mailto:${address}?subject=${encodeURIComponent("unsubscribe")}>`;
+}
+function deliverabilityHeaders(input) {
+  if (!isRecipientFacing(input.event)) return void 0;
+  const value = listUnsubscribeHeader(input.replyTo);
+  return value ? { "List-Unsubscribe": value } : void 0;
 }
 
 // src/notify.ts
-var import_crm7 = require("@odla-ai/crm");
+var import_crm8 = require("@odla-ai/crm");
 
 // src/email-event-values.ts
-var import_crm6 = require("@odla-ai/crm");
+var import_crm7 = require("@odla-ai/crm");
 
 // src/tiers.ts
 function tierIsFree(tier) {
@@ -1899,10 +1970,14 @@ async function frozenCheckoutVariables(db, app) {
   if (Number.isSafeInteger(amount) && Number(amount) > 0 && typeof currency === "string" && /^[a-z]{3}$/.test(currency)) {
     formatted = new Intl.NumberFormat("en-US", { style: "currency", currency: currency.toUpperCase() }).format(Number(amount) / 100);
   }
+  const seat = quote?.namedSeat, seatCents = quote?.lineItems?.namedSeatCents;
+  const namedSeatRecipientName = typeof seat?.recipientName === "string" ? seat.recipientName.trim() : "";
   return {
     paymentAmount: formatted,
     paymentAmountSummary: formatted ? ` of ${formatted}` : "",
-    tierName: typeof quote?.tierName === "string" ? quote.tierName : ""
+    tierName: typeof quote?.tierName === "string" ? quote.tierName : "",
+    namedSeat: namedSeatRecipientName ? Number.isSafeInteger(seatCents) && Number(seatCents) > 0 ? "paid" : "included" : "",
+    namedSeatRecipientName
   };
 }
 async function catalogTierName(db, group, app) {
@@ -1960,6 +2035,8 @@ function sampleVariables(origin, timeZone, now = Date.now()) {
     purchaserName: "Sample Purchaser",
     recipientName: "Sample Recipient",
     chapterName: "Sample Chapter",
+    namedSeat: "paid",
+    namedSeatRecipientName: "Sample Recipient",
     acceptBy: new Date(now + 7 * 864e5).toISOString().slice(0, 10),
     joinUrl: `${origin}/join?seat=sample`
   };
@@ -1977,7 +2054,7 @@ async function emailTierVariables(db, input) {
     const tierId = input.tierId ?? (typeof app.tierId === "string" ? app.tierId : "");
     if (!tierId) return { tierName: "", tier: "" };
     const name = input.tierId ? await catalogTierName(db, group, { ...app, tierId }) : (await checkoutVariables(db, group, app)).tierName;
-    const tierName2 = (0, import_crm6.isEmailTierName)(name, tierId) ? name.trim() : "";
+    const tierName2 = (0, import_crm7.isEmailTierName)(name, tierId) ? name.trim() : "";
     return { tierName: tierName2, tier: tierName2, tierId };
   } catch {
     return { tierName: "", tier: "" };
@@ -2037,7 +2114,7 @@ async function sendTemplated(deps, input) {
     ...input.applicationId ? { applicationId: input.applicationId } : {}
   };
   if (isRetiredEmailCopy(String(row2.subject), String(row2.body))) return { sent: false, reason: "template-retired" };
-  if ((0, import_crm7.validateEmailCopy)({ subject: row2.subject, text: row2.body }, { allowedVariables: [] }).length) return { sent: false, reason: "template-invalid" };
+  if ((0, import_crm8.validateEmailCopy)({ subject: row2.subject, text: row2.body }, { allowedVariables: [] }).length) return { sent: false, reason: "template-invalid" };
   try {
     const claim = await deps.db.transact([{ t: "update", ns: "emailLog", id: id7, attrs: row2 }], {
       mutationId: `email-claim:${id7}:${attempt}`,
@@ -2057,11 +2134,16 @@ async function sendTemplated(deps, input) {
   if (decision.transport === "log-only") return { sent: true };
   let messageId;
   try {
+    const text10 = String(row2.body);
+    const html = deps.renderHtml === false ? void 0 : decision.html ?? (deps.renderHtml ?? textToHtml)(text10);
+    const headers = deliverabilityHeaders({ event: event2, replyTo: input.group.replyTo });
     const response = await deps.sender.send({
       from: fromAddress(deps.from, input.group.fromName),
       to: [decision.to],
       subject: String(row2.subject),
-      text: String(row2.body),
+      text: text10,
+      ...html ? { html } : {},
+      ...headers ? { headers } : {},
       replyTo: input.group.replyTo
     });
     if (!response || typeof response.messageId !== "string" || !response.messageId) throw new Error("missing delivery receipt");
@@ -5957,7 +6039,7 @@ function belongsToSignup(account, applicationId) {
 }
 
 // src/member.ts
-var import_crm8 = require("@odla-ai/crm");
+var import_crm9 = require("@odla-ai/crm");
 var DEFAULT_REQUIRED = ["firstName", "lastName", "email", "referral", "whoYouAre", "message"];
 var DEFAULT_OPTIONAL = ["referralName", "linkedin", "phone", "state"];
 var SCHEMA_FIELD = /^[A-Za-z_][A-Za-z0-9_-]*$/;
@@ -5991,7 +6073,7 @@ function resolveApplication(a) {
       if (typeof expression !== "string" || !expression.trim()) {
         throw new Error(`defineChapter.application.conditions.${field}.${key3}: must be a non-empty CEL condition`);
       }
-      (0, import_crm8.assertFieldCondition)(expression, `defineChapter.application.conditions.${field}.${key3}`);
+      (0, import_crm9.assertFieldCondition)(expression, `defineChapter.application.conditions.${field}.${key3}`);
     }
   }
   return {
@@ -6034,7 +6116,7 @@ function applicantProfile(chapter, fields) {
 }
 async function submitApplication(db, chapter, fields, opts) {
   const app = chapter.application;
-  const fieldStates = (0, import_crm8.resolveFieldStates)(app.conditions ?? {}, fields, app.required);
+  const fieldStates = (0, import_crm9.resolveFieldStates)(app.conditions ?? {}, fields, app.required);
   for (const [f, state] of Object.entries(fieldStates)) {
     if (!state.required) continue;
     const v = fields[f];
@@ -6175,7 +6257,7 @@ async function rejectUnprovisionedSignup(db, applicationId, status2) {
 }
 
 // src/worker-routes.ts
-var import_crm9 = require("@odla-ai/crm");
+var import_crm10 = require("@odla-ai/crm");
 
 // src/discussion-reference-security.ts
 async function authorizeCrmDiscussionReference(req, env, fetcher = fetch) {
@@ -7776,7 +7858,7 @@ var handleCrm = async (req, url, env, ctx) => {
   const crmBase = ctx.crmBase;
   if (url.pathname !== crmBase && !url.pathname.startsWith(crmBase + "/")) return null;
   const db = ctx.makeDb(env);
-  const routes = (0, import_crm9.createCrmRoutes)({
+  const routes = (0, import_crm10.createCrmRoutes)({
     crm: ctx.chapter.crm,
     db,
     authorize: async (r) => {
@@ -9187,7 +9269,7 @@ async function networkWriteAllowed(req, db, user, ctx, sensitiveRead = false) {
 
 // src/network-person-reference.ts
 var import_db6 = require("@odla-ai/db");
-var import_crm11 = require("@odla-ai/crm");
+var import_crm12 = require("@odla-ai/crm");
 
 // src/worker-network-fetch.ts
 var NetworkTargetTransportError = class extends Error {
@@ -9223,7 +9305,7 @@ function fetchNetworkTarget(env, target, destination, init) {
 }
 
 // src/worker-network-admission-state.ts
-var import_crm10 = require("@odla-ai/crm");
+var import_crm11 = require("@odla-ai/crm");
 var MAX_ASSIGNMENTS = 2e3;
 var admissionRows = (value) => Array.isArray(value) ? value : [];
 function assignmentId(targetId, personId) {
@@ -9250,7 +9332,7 @@ function personAdmissionEmail(ctx, record4) {
   return isValidEmail(normalized) ? normalized : null;
 }
 async function grantInput(db, ctx, assignment, resolveEmail) {
-  const person = resolveEmail ? null : await (0, import_crm10.getRecord)({ crm: ctx.chapter.crm, db }, assignment.personId);
+  const person = resolveEmail ? null : await (0, import_crm11.getRecord)({ crm: ctx.chapter.crm, db }, assignment.personId);
   const email = resolveEmail ? await resolveEmail(assignment.personId) : person ? personAdmissionEmail(ctx, person) : null;
   if (!email) throw new Error(`person ${assignment.personId} has no valid authoritative email`);
   return {
@@ -9456,7 +9538,7 @@ function chapterPersonReference(targetId, recordId) {
 }
 async function resolveAdmissionPersonEmail(db, env, ctx, target, personId) {
   if (!personId.startsWith("chapter-person:")) {
-    const person2 = await (0, import_crm11.getRecord)({ crm: ctx.chapter.crm, db }, personId);
+    const person2 = await (0, import_crm12.getRecord)({ crm: ctx.chapter.crm, db }, personId);
     return person2 ? personAdmissionEmail(ctx, person2) : null;
   }
   const prefix = `chapter-person:${target.id}:`;
@@ -11355,10 +11437,10 @@ var handleEmailDeliveryResolution = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-people-profile.ts
-var import_crm13 = require("@odla-ai/crm");
+var import_crm14 = require("@odla-ai/crm");
 
 // src/people-profile.ts
-var import_crm12 = require("@odla-ai/crm");
+var import_crm13 = require("@odla-ai/crm");
 var sameValue = (a, b) => (a == null || a === "") && (b == null || b === "") || JSON.stringify(a) === JSON.stringify(b);
 function profileReadOnlyFields(record4, ctx) {
   return [
@@ -11373,17 +11455,17 @@ async function updateChapterPerson(opts) {
   const { db, env, ctx, record: record4 } = opts;
   const input = Object.fromEntries(Object.entries(opts.input).filter(([key3, value]) => !sameValue(value, record4.fields[key3])));
   const forbidden = profileReadOnlyFields(record4, ctx).filter((key3) => key3 in input);
-  if (forbidden.length) throw new import_crm12.CrmInputError(
+  if (forbidden.length) throw new import_crm13.CrmInputError(
     "Use the verified identity or application workflow for protected fields",
     Object.fromEntries(forbidden.map((key3) => [key3, "This field is managed by its authoritative workflow"]))
   );
   const appId = record4.fields.applicationId;
   const app = typeof appId === "string" && appId ? (await db.query({ applications: { $: { where: { id: appId }, limit: 1 } } })).applications?.[0] : null;
   if (appId && (!app || !chapterBillingApplication(app, ctx.chapter.id, env.ODLA_RUNTIME) || String(app.email).trim().toLowerCase() !== String(record4.primaryEmail).trim().toLowerCase())) {
-    throw new import_crm12.CrmInputError("The application identity must be repaired before editing this profile");
+    throw new import_crm13.CrmInputError("The application identity must be repaired before editing this profile");
   }
   const prepared = ctx.chapter.crm.prepare(record4.type, input, record4);
-  if (!prepared.ok) throw new import_crm12.CrmInputError("invalid input", prepared.errors);
+  if (!prepared.ok) throw new import_crm13.CrmInputError("invalid input", prepared.errors);
   const appAttrs = {};
   if (app) {
     const mirrored = /* @__PURE__ */ new Set(["firstName", "lastName", "phone", "linkedin", ...ctx.chapter.application.crmFields]);
@@ -11412,7 +11494,7 @@ async function updateChapterPerson(opts) {
       }] });
     }
   };
-  return (0, import_crm12.updateRecord)({ crm: ctx.chapter.crm, db: projectionDb }, {
+  return (0, import_crm13.updateRecord)({ crm: ctx.chapter.crm, db: projectionDb }, {
     id: record4.id,
     input,
     expectedUpdatedAt: opts.expectedRevision ?? record4.updatedAt,
@@ -11457,7 +11539,7 @@ var handlePeopleProfile = async (req, url, env, ctx) => {
   } catch {
     return json({ error: "invalid record id" }, 422);
   }
-  const record4 = await (0, import_crm13.getRecord)({ crm: ctx.chapter.crm, db }, id7);
+  const record4 = await (0, import_crm14.getRecord)({ crm: ctx.chapter.crm, db }, id7);
   if (!record4) return json({ error: "not found" }, 404);
   if (record4.type !== "person") return dedicated ? json({ error: "person required" }, 422) : null;
   if (match?.[2]) {
@@ -11509,7 +11591,7 @@ var handlePeopleProfile = async (req, url, env, ctx) => {
     });
     return json(result);
   } catch (error) {
-    if (error instanceof import_crm13.CrmInputError) return json({ error: error.message, fields: error.fields }, 422);
+    if (error instanceof import_crm14.CrmInputError) return json({ error: error.message, fields: error.fields }, 422);
     if (error.code === "transact_guard_failed") return json({ error: "profile changed; reload before saving" }, 409);
     return json({ error: "profile update failed" }, 503);
   }
@@ -11684,10 +11766,10 @@ async function repairAccountPeoplePage(deps, after) {
 }
 
 // src/crm-application-repair.ts
-var import_crm14 = require("@odla-ai/crm");
+var import_crm15 = require("@odla-ai/crm");
 async function repairApplicationLink(db, chapter, recordId, actorId) {
   const deps = { crm: chapter.crm, db };
-  const record4 = await (0, import_crm14.getRecord)(deps, recordId);
+  const record4 = await (0, import_crm15.getRecord)(deps, recordId);
   if (!record4 || record4.type !== "person" || record4.archived === true) return { status: 404, error: "person_not_found" };
   if (!chapter.crm.type("person").fields.applicationId) return { status: 409, error: "application_link_field_not_configured" };
   const fields = record4.fields;
@@ -11705,7 +11787,7 @@ async function repairApplicationLink(db, chapter, recordId, actorId) {
   }
   const app = [...applications.values()][0];
   if (!app || typeof app.id !== "string" || typeof record4.updatedAt !== "number") return { status: 409, error: "application_link_evidence_incomplete" };
-  await (0, import_crm14.updateRecord)(deps, {
+  await (0, import_crm15.updateRecord)(deps, {
     id: recordId,
     input: applicationCrmFields(chapter.crm, { applicationId: app.id, tierId: app.tierId }),
     expectedUpdatedAt: record4.updatedAt,
@@ -12526,10 +12608,90 @@ var handleAdminApplicationPatch = async (req, url, env, ctx) => {
 };
 
 // src/email-admin-config.ts
+var import_crm17 = require("@odla-ai/crm");
+
+// src/email-readiness.ts
 var import_crm16 = require("@odla-ai/crm");
 
+// src/email-spam-signals.ts
+var TRIGGER_PHRASES = [
+  "act now",
+  "click here",
+  "limited time",
+  "guaranteed",
+  "risk-free",
+  "risk free",
+  "no obligation",
+  "100% free",
+  "winner",
+  "congratulations",
+  "urgent",
+  "double your",
+  "earn money",
+  "make money",
+  "cash bonus",
+  "once in a lifetime",
+  "exclusive deal",
+  "order now",
+  "buy now",
+  "this is not spam",
+  "dear friend",
+  "dear customer"
+];
+var SUBJECT_TRIGGERS = ["free", ...TRIGGER_PHRASES];
+var DEV_HOSTS = /(?:^|\.)(?:workers\.dev|pages\.dev|localhost|ngrok(?:-free)?\.app|trycloudflare\.com)$/i;
+var SHORTENERS = /^(?:bit\.ly|tinyurl\.com|t\.co|goo\.gl|ow\.ly|is\.gd|buff\.ly|rebrand\.ly|cutt\.ly|tiny\.cc|shorturl\.at|rb\.gy)$/i;
+var URL_RE2 = /https?:\/\/[^\s<>"')\]]+/g;
+var strip = (s) => s.replace(/\{\{\w+\}\}/g, " ");
+var words = (s) => strip(s).split(/\s+/).filter(Boolean);
+var phraseIn = (phrases, haystack) => phrases.find((phrase) => new RegExp(`(?:^|[^a-z0-9])${phrase.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![a-z0-9])`, "i").test(haystack));
+function emailSpamSignals(copy) {
+  const subject = typeof copy.subject === "string" ? copy.subject : "";
+  const text10 = typeof copy.text === "string" ? copy.text : "";
+  const html = typeof copy.html === "string" ? copy.html : "";
+  const out = [];
+  const letters = strip(subject).replace(/[^A-Za-z]/g, "");
+  const shouting = letters.length >= 6 && letters.replace(/[^A-Z]/g, "").length / letters.length > 0.5 || words(subject).some((word) => /^[A-Z]{4,}$/.test(word.replace(/[^A-Za-z]/g, "")));
+  if (shouting) out.push({ code: "subject-caps", message: "The subject shouts in capital letters. Filters read that as a spam signal; use sentence case." });
+  if (/[!?]{2,}|!\s*$/.test(subject)) out.push({ code: "subject-punctuation", message: "Repeated or trailing exclamation marks in the subject are a classic spam signal." });
+  if (/^\s*(?:re|fw|fwd)\s*:/i.test(subject)) out.push({ code: "subject-fake-reply", message: "A subject that starts like a reply or forward reads as a spoof when the recipient never wrote first." });
+  const subjectHit = phraseIn(SUBJECT_TRIGGERS, strip(subject));
+  if (subjectHit) out.push({ code: "subject-trigger-words", message: `The subject uses "${subjectHit}", a word filters weight against the sender.` });
+  const bodyHit = phraseIn(TRIGGER_PHRASES, strip(text10));
+  if (bodyHit) out.push({ code: "body-trigger-words", message: `The body uses "${bodyHit}", a phrase filters weight against the sender.` });
+  if (/(?:^|\s)[A-Z]{3,}(?:\s+[A-Z]{3,}){2,}(?=\s|$)/.test(strip(text10))) out.push({ code: "body-caps", message: "The body shouts a run of capitalised words; use sentence case." });
+  if (/!{2,}/.test(text10)) out.push({ code: "body-punctuation", message: "Repeated exclamation marks in the body are a classic spam signal." });
+  const urls = [...`${text10}
+${html}`.matchAll(URL_RE2)].map((match) => match[0].replace(/&quot;.*$/, ""));
+  const hosts = urls.map((url) => {
+    try {
+      return new URL(url).hostname;
+    } catch {
+      return "";
+    }
+  });
+  if (urls.some((url) => /^http:\/\//i.test(url))) out.push({ code: "link-insecure", message: "A link uses http:// instead of https://. Filters flag insecure links." });
+  if (hosts.some((host) => DEV_HOSTS.test(host) || /^\d+\.\d+\.\d+\.\d+$/.test(host))) out.push({ code: "link-origin", message: "A link points at a development host (workers.dev, pages.dev, localhost or a raw IP). Link to the site's own domain." });
+  if (hosts.some((host) => SHORTENERS.test(host))) out.push({ code: "link-shortener", message: "A link uses a URL shortener, which hides the destination and is heavily abused. Link to the real address." });
+  if (new Set(urls).size > 5) out.push({ code: "link-many", message: "The body has more than five links. Keep lifecycle mail to the one or two the reader needs." });
+  if (urls.length && words(text10).length < 20) out.push({ code: "body-link-only", message: "The body is little more than a link. Say what the reader is being sent and why before the address." });
+  return out;
+}
+function emailSenderWarnings(input) {
+  const out = [];
+  const from = (input.fromEmail ?? "").trim().toLowerCase().replace(/^.*<([^>]+)>.*$/, "$1");
+  const reply = (input.replyTo ?? "").trim().toLowerCase();
+  const domain = (address) => address.split("@")[1] ?? "";
+  if (/^(?:no-?reply|do-?not-?reply|donotreply)(?:[+.-][^@]*)?@/.test(from)) {
+    out.push({ code: "sender-no-reply", message: "Mail is sent from a no-reply address. Gmail's sender guidelines advise against it; send from a monitored address so replies and unsubscribe requests reach someone." });
+  }
+  if (domain(from) && domain(reply) && domain(from) !== domain(reply)) {
+    out.push({ code: "reply-to-domain", message: `Replies go to ${domain(reply)} while mail is sent from ${domain(from)}. A Reply-To on another domain is a mild spam signal; prefer an address on the sending domain.` });
+  }
+  return out;
+}
+
 // src/email-readiness.ts
-var import_crm15 = require("@odla-ai/crm");
 function validateEmailReadiness(input) {
   const issues = [];
   for (const key3 of Object.keys(input.templates)) if (!input.events[key3]) {
@@ -12537,26 +12699,36 @@ function validateEmailReadiness(input) {
   }
   if (input.tiersUnavailable) issues.push({ code: "tiers-unavailable", message: "Tier names could not be checked. Membership emails cannot send until their tier is resolved." });
   for (const tier of input.tiers ?? []) {
-    if (!(0, import_crm15.isEmailTierName)(tier.name, tier.id)) issues.push({ code: "tier-name-invalid", message: `Tier ${tier.id} needs a recipient-facing display name.` });
+    if (!(0, import_crm16.isEmailTierName)(tier.name, tier.id)) issues.push({ code: "tier-name-invalid", message: `Tier ${tier.id} needs a recipient-facing display name.` });
   }
-  const noTierNames = input.tiers !== void 0 && !input.tiers.some((tier) => (0, import_crm15.isEmailTierName)(tier.name, tier.id));
+  const noTierNames = input.tiers !== void 0 && !input.tiers.some((tier) => (0, import_crm16.isEmailTierName)(tier.name, tier.id));
   if (noTierNames && !input.tiersUnavailable) issues.push({ code: "tiers-missing", message: "No membership tiers have a recipient-facing display name." });
   const events = Object.entries(input.events).map(([key3, event2]) => {
     const template = input.templates[key3];
-    const problems = !template ? [{ code: "template-missing", message: "No email is configured for this event." }] : (0, import_crm15.validateEmailCopy)(template, { allowedVariables: event2.variables });
+    const problems = !template ? [{ code: "template-missing", message: "No email is configured for this event." }] : (0, import_crm16.validateEmailCopy)(template, { allowedVariables: event2.variables });
     if (template && typeof template.enabled !== "boolean") problems.push({ code: "enabled-missing", message: "Choose explicitly whether this email is enabled. Sending is blocked until then." });
+    const html = typeof template?.html === "string" && template.html.trim() ? template.html : "";
+    if (html) problems.push(...htmlBodyIssues(html, { allowedVariables: event2.variables }));
     if (template) {
-      const used = [...`${template.subject ?? ""}
-${template.text ?? ""}`.matchAll(/\{\{(\w+)\}\}/g)].map((match) => match[1]);
-      for (const name of used) if (name in input.groupValues && !input.groupValues[name]?.trim()) {
+      const copy = `${template.subject ?? ""}
+${template.text ?? ""}
+${html}`;
+      const sectionOnly = new Set((0, import_crm16.templateSectionNames)(copy));
+      for (const name of (0, import_crm16.templateVars)(copy)) if (name in input.groupValues && !input.groupValues[name]?.trim() && !sectionOnly.has(name)) {
         problems.push({ code: "value-missing", variable: name, message: `Add the ${name} used by this email.` });
       }
     }
     if (event2.requiresTier && input.tiersUnavailable) problems.push({ code: "tiers-unavailable", message: "Tier names are unavailable; delivery checks will block unresolved memberships." });
     else if (event2.requiresTier && noTierNames) problems.push({ code: "tiers-missing", message: "Configure the membership tier names needed by this event." });
-    return { ...event2, key: key3, status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready", issues: problems };
+    return {
+      ...event2,
+      key: key3,
+      status: template?.enabled === false ? "disabled" : problems.length ? "blocked" : "ready",
+      issues: problems,
+      warnings: template ? emailSpamSignals(template) : []
+    };
   });
-  return { checkedAt: input.now ?? Date.now(), events, issues };
+  return { checkedAt: input.now ?? Date.now(), events, issues, warnings: emailSenderWarnings(input.sender ?? {}) };
 }
 
 // src/email-admin-config.ts
@@ -12564,13 +12736,14 @@ var str2 = (value) => typeof value === "string" ? value : "";
 async function emailSettings(db, ctx, env) {
   const hub = ctx.chapter.mode === "hub";
   const crmDeps3 = { db, crm: ctx.chapter.crm };
-  const group = hub ? await (0, import_crm16.getConfig)(crmDeps3) : (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
+  const group = hub ? await (0, import_crm17.getConfig)(crmDeps3) : (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
   const raw2 = group?.emailTemplates;
   const stored = raw2 && typeof raw2 === "object" && !Array.isArray(raw2) ? raw2 : {};
   const events = chapterEmailEvents(ctx.chapter);
   const emailTemplates = Object.fromEntries(Object.keys(events).filter((key3) => key3 in stored).map((key3) => [key3, {
     subject: str2(stored[key3]?.subject),
     text: str2(stored[key3]?.text),
+    html: str2(stored[key3]?.html),
     enabled: stored[key3]?.enabled
   }]));
   let tiers = [], tiersUnavailable = false;
@@ -12582,7 +12755,14 @@ async function emailSettings(db, ctx, env) {
     }
   }
   const groupValues = Object.fromEntries(["refundPolicyText", "commitmentText", "normsText"].map((key3) => [key3, str2(group?.[key3])]));
-  const validation = validateEmailReadiness({ events, templates: stored, groupValues, tiers: hub ? void 0 : tiers, tiersUnavailable });
+  const validation = validateEmailReadiness({
+    events,
+    templates: stored,
+    groupValues,
+    tiers: hub ? void 0 : tiers,
+    tiersUnavailable,
+    sender: { fromEmail: env.EMAIL_FROM ?? null, replyTo: str2(group?.replyTo) }
+  });
   return { group, events, data: {
     groupId: ctx.chapter.id,
     name: ctx.chapter.name,
@@ -12610,12 +12790,14 @@ async function updateEmailSettings(db, ctx, env, body) {
     if (!value || typeof value !== "object" || Array.isArray(value)) return json({ error: `Invalid template: ${key3}` }, 400);
     const t = value;
     if (typeof t.enabled !== "boolean") return json({ error: `Choose whether ${key3} is enabled.` }, 400);
-    const subject = str2(t.subject).trim(), text10 = str2(t.text);
-    const issues = (0, import_crm16.validateEmailCopy)({ subject, text: text10 }, { allowedVariables: events[key3].variables });
-    if (t.enabled && issues.length || issues.some((issue) => ["subject-invalid", "body-invalid"].includes(issue.code))) {
-      return json({ error: `${events[key3].label} is incomplete.`, errors: issues.map((issue) => issue.message) }, 400);
+    const subject = str2(t.subject).trim(), text10 = str2(t.text), html = str2(t.html);
+    if (t.html !== void 0 && typeof t.html !== "string") return json({ error: `Invalid HTML body: ${key3}` }, 400);
+    const issues = (0, import_crm17.validateEmailCopy)({ subject, text: text10 }, { allowedVariables: events[key3].variables });
+    const htmlIssues = html.trim() ? htmlBodyIssues(html, { allowedVariables: events[key3].variables }) : [];
+    if (t.enabled && (issues.length || htmlIssues.length) || issues.some((issue) => ["subject-invalid", "body-invalid"].includes(issue.code)) || html.length > HTML_BODY_LIMIT) {
+      return json({ error: `${events[key3].label} is incomplete.`, errors: [...issues, ...htmlIssues].map((issue) => issue.message) }, 400);
     }
-    clean[key3] = { subject, text: text10, enabled: t.enabled };
+    clean[key3] = { subject, text: text10, ...html.trim() ? { html } : {}, enabled: t.enabled };
   }
   const notificationEmail = str2(body.notificationEmail).trim(), replyTo = str2(body.replyTo).trim(), debugEmail = str2(body.debugEmail).trim();
   const emailish = /^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/;
@@ -12628,7 +12810,7 @@ async function updateEmailSettings(db, ctx, env, body) {
   if (commitmentText.length > 5e3 || normsText.length > 5e3) return json({ error: "commitment/norms text is too long" }, 400);
   if (ctx.chapter.mode === "hub") {
     const missing = Object.fromEntries(Object.keys(events).filter((key3) => !group?.emailTemplates?.[key3]).map((key3) => [key3, { subject: "", text: "", enabled: false }]));
-    await (0, import_crm16.saveConfig)({ db, crm: ctx.chapter.crm }, { emailTemplates: { ...missing, ...clean }, notificationEmail, replyTo, debugEmail });
+    await (0, import_crm17.saveConfig)({ db, crm: ctx.chapter.crm }, { emailTemplates: { ...missing, ...clean }, notificationEmail, replyTo, debugEmail });
   } else {
     const id7 = { ns: "groups", attr: "id", value: ctx.chapter.id };
     await db.transact([
@@ -12636,11 +12818,12 @@ async function updateEmailSettings(db, ctx, env, body) {
       { t: "update", ns: "groups", id: id7, attrs: { commitmentText, normsText, notificationEmail, replyTo, debugEmail, fromName } }
     ]);
   }
-  return json({ ok: true });
+  const warnings = Object.fromEntries(Object.entries(clean).map(([key3, template]) => [key3, emailSpamSignals(template)]).filter(([, found]) => found.length));
+  return json({ ok: true, warnings });
 }
 
 // src/worker-routes-admin-comms.ts
-var import_crm17 = require("@odla-ai/crm");
+var import_crm18 = require("@odla-ai/crm");
 async function gate5(req, env, ctx) {
   const rawDb = ctx.makeDb(env);
   const u = await ctx.verifyUser(req, env);
@@ -12673,7 +12856,7 @@ var handleAdminEmailLog = async (req, url, env, ctx) => {
   const got = await gate5(req, env, ctx);
   if (got instanceof Response) return got;
   if (ctx.chapter.mode === "hub") {
-    const rows5 = await (0, import_crm17.listEmailLog)({ db: got, crm: ctx.chapter.crm }, { limit: 50 });
+    const rows5 = await (0, import_crm18.listEmailLog)({ db: got, crm: ctx.chapter.crm }, { limit: 50 });
     return json({ sends: rows5.map((row2) => ({ ...row2, template: row2.templateId })) });
   }
   const { emailLog } = await got.query({ emailLog: { $: { where: { groupId: ctx.chapter.id }, order: { sentAt: "desc" }, limit: 50 } } });
@@ -12770,7 +12953,7 @@ var handleAdminComms = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-network.ts
-var import_crm19 = require("@odla-ai/crm");
+var import_crm20 = require("@odla-ai/crm");
 var import_db9 = require("@odla-ai/db");
 
 // src/network-edge.ts
@@ -12796,7 +12979,7 @@ function unpairedResponse(unpaired) {
 }
 
 // src/worker-network-push.ts
-var import_crm18 = require("@odla-ai/crm");
+var import_crm19 = require("@odla-ai/crm");
 var import_db8 = require("@odla-ai/db");
 async function pushNetworkRecord(db, env, ctx, target, record4) {
   const secret = await getVaultSecret(db, target.secretName);
@@ -12808,7 +12991,7 @@ async function pushNetworkRecord(db, env, ctx, target, record4) {
   };
   if (!secret) {
     const unpaired = edgeUnpaired(ctx.chapter.id, target, env.ODLA_ENV);
-    await (0, import_crm18.recordDeliveryAttempt)(crmDeps3, {
+    await (0, import_crm19.recordDeliveryAttempt)(crmDeps3, {
       recordId: record4.id,
       targetId: target.id,
       status: "failed",
@@ -12847,7 +13030,7 @@ async function pushNetworkRecord(db, env, ctx, target, record4) {
     const responseBody = await res.json().catch(() => ({}));
     if (!res.ok) {
       const error = responseBody.error ?? "follower rejected the record";
-      await (0, import_crm18.recordDeliveryAttempt)(crmDeps3, {
+      await (0, import_crm19.recordDeliveryAttempt)(crmDeps3, {
         recordId: record4.id,
         targetId: target.id,
         status: "failed",
@@ -12862,7 +13045,7 @@ async function pushNetworkRecord(db, env, ctx, target, record4) {
         error
       };
     }
-    await (0, import_crm18.recordDeliveryAttempt)(crmDeps3, {
+    await (0, import_crm19.recordDeliveryAttempt)(crmDeps3, {
       recordId: record4.id,
       targetId: target.id,
       status: "delivered",
@@ -12878,7 +13061,7 @@ async function pushNetworkRecord(db, env, ctx, target, record4) {
     };
   } catch (err) {
     const error = err instanceof Error ? err.message : "delivery failed";
-    await (0, import_crm18.recordDeliveryAttempt)(crmDeps3, {
+    await (0, import_crm19.recordDeliveryAttempt)(crmDeps3, {
       recordId: record4.id,
       targetId: target.id,
       status: "failed",
@@ -12931,7 +13114,7 @@ var handleNetworkSnapshot = async (req, url, env, ctx) => {
   const verified = await (0, import_db9.verifyFederatedRequest)(req, { secret });
   if (!verified.ok) return json({ error: "unauthorized", reason: verified.reason }, 401);
   const types = await Promise.all(
-    Object.keys(ctx.chapter.crm.config.types).map((type) => (0, import_crm19.typeSummary)({ crm: ctx.chapter.crm, db }, type))
+    Object.keys(ctx.chapter.crm.config.types).map((type) => (0, import_crm20.typeSummary)({ crm: ctx.chapter.crm, db }, type))
   );
   const activeConfiguration = ctx.chapter.signupControl ? await loadActiveSignupControl(db, ctx.chapter.id, env.ODLA_ENV) : null;
   const snapshot = {
@@ -13078,7 +13261,7 @@ var handleAdminNetworkPush = async (req, url, env, ctx) => {
   if (requested.size !== body.targetIds.length) return json({ error: "targetIds must contain unique strings" }, 400);
   const targets = ctx.chapter.network.targets.filter((target) => requested.has(target.id));
   if (targets.length !== requested.size) return json({ error: "one or more targetIds are not configured" }, 400);
-  const record4 = await (0, import_crm19.getRecord)({ crm: ctx.chapter.crm, db: got.db }, body.recordId);
+  const record4 = await (0, import_crm20.getRecord)({ crm: ctx.chapter.crm, db: got.db }, body.recordId);
   if (!record4) return json({ error: "record not found" }, 404);
   const results = await Promise.all(
     targets.map((target) => pushNetworkRecord(got.db, env, ctx, target, record4))
@@ -13087,11 +13270,11 @@ var handleAdminNetworkPush = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-network-records-follower.ts
-var import_crm23 = require("@odla-ai/crm");
+var import_crm24 = require("@odla-ai/crm");
 var import_db10 = require("@odla-ai/db");
 
 // src/network-application-action.ts
-var import_crm20 = require("@odla-ai/crm");
+var import_crm21 = require("@odla-ai/crm");
 var ACTION_META = "chapterNetworkMutation";
 async function networkApplicationAction(opts) {
   const { db, env, ctx, record: record4, input, sourceId, activityId, fingerprint } = opts;
@@ -13181,7 +13364,7 @@ async function networkApplicationAction(opts) {
   const current = (await db.query({ applications: { $: { where: { id: appId }, limit: 1 } } })).applications?.[0];
   if (!current || current.status !== input.stage) return json({ error: "application reconciliation pending", code: "action_pending" }, 503);
   await syncApplicationToCrm(crmDeps(db, ctx), { app: current, stage: String(current.status) });
-  const projected = await (0, import_crm20.getRecord)({ crm: ctx.chapter.crm, db }, record4.id);
+  const projected = await (0, import_crm21.getRecord)({ crm: ctx.chapter.crm, db }, record4.id);
   if (!projected || projected.stage !== input.stage) return json({ error: "CRM reconciliation pending", code: "action_pending" }, 503);
   const audit = (await db.query({ crm_activity: { $: { where: { id: activityId }, limit: 1 } } })).crm_activity?.[0];
   const priorMeta = audit?.meta;
@@ -13191,7 +13374,7 @@ async function networkApplicationAction(opts) {
     } },
     { t: "update", ns: "crm_activity", id: lockId, attrs: { meta: { state: "complete", activityId } } }
   ], { guards: [{ ns: "crm_activity", id: lockId, exists: true, equals: { meta: { state: "pending", activityId } } }] });
-  const updated = await (0, import_crm20.getRecord)({ crm: ctx.chapter.crm, db }, record4.id);
+  const updated = await (0, import_crm21.getRecord)({ crm: ctx.chapter.crm, db }, record4.id);
   if (!updated) return json({ error: "record not found" }, 404);
   return { record: updated, duplicate: Boolean(receipt) };
 }
@@ -13227,7 +13410,7 @@ async function operationalReaderRecord(record4, reader, db, env, ctx) {
 }
 
 // src/worker-routes-network-records-search.ts
-var import_crm21 = require("@odla-ai/crm");
+var import_crm22 = require("@odla-ai/crm");
 var SEARCH_BATCH_SIZE = 1e3;
 var MAX_READER_SEARCH_POPULATION = 1e4;
 var ReaderSearchPopulationError = class extends Error {
@@ -13268,19 +13451,19 @@ async function listVisibleSearchPopulation(db, where, window, count) {
     (_, index2) => index2 * SEARCH_BATCH_SIZE
   );
   const pages = await Promise.all(offsets.map((offset) => db.query({
-    [import_crm21.CRM_NS.record]: { $: {
+    [import_crm22.CRM_NS.record]: { $: {
       where,
       order: { [window.sort.field]: window.sort.dir },
       limit: Math.min(SEARCH_BATCH_SIZE, count - offset),
       offset
     } }
   })));
-  return pages.flatMap((page) => (page[import_crm21.CRM_NS.record] ?? []).map(import_crm21.rowToRecord));
+  return pages.flatMap((page) => (page[import_crm22.CRM_NS.record] ?? []).map(import_crm22.rowToRecord));
 }
 async function listReaderRecords(db, type, allowed2, emailField, window) {
   const where = baseWhere(type, window.stage);
   const crmDb = db;
-  const aggregate = await crmDb.aggregate(import_crm21.CRM_NS.record, { count: true }, { where });
+  const aggregate = await crmDb.aggregate(import_crm22.CRM_NS.record, { count: true }, { where });
   const candidateCount = aggregate.count ?? 0;
   if (window.search) {
     const population = await listVisibleSearchPopulation(crmDb, where, window, candidateCount);
@@ -13292,7 +13475,7 @@ async function listReaderRecords(db, type, allowed2, emailField, window) {
     };
   }
   const result = await crmDb.query({
-    [import_crm21.CRM_NS.record]: { $: {
+    [import_crm22.CRM_NS.record]: { $: {
       where,
       order: { [window.sort.field]: window.sort.dir },
       limit: window.limit,
@@ -13300,19 +13483,19 @@ async function listReaderRecords(db, type, allowed2, emailField, window) {
     } }
   });
   return {
-    records: (result[import_crm21.CRM_NS.record] ?? []).map(import_crm21.rowToRecord),
+    records: (result[import_crm22.CRM_NS.record] ?? []).map(import_crm22.rowToRecord),
     total: candidateCount
   };
 }
 
 // src/network-mutation-receipt.ts
-var import_crm22 = require("@odla-ai/crm");
+var import_crm23 = require("@odla-ai/crm");
 var NETWORK_MUTATION_META = "chapterNetworkMutation";
 async function priorMutation(db, id7) {
   const result = await db.query({
-    [import_crm22.CRM_NS.activity]: { $: { where: { id: id7 }, limit: 1 } }
+    [import_crm23.CRM_NS.activity]: { $: { where: { id: id7 }, limit: 1 } }
   });
-  const row2 = (result[import_crm22.CRM_NS.activity] ?? [])[0];
+  const row2 = (result[import_crm23.CRM_NS.activity] ?? [])[0];
   const meta = row2?.meta;
   const receipt = meta?.[NETWORK_MUTATION_META];
   return typeof receipt?.fingerprint === "string" ? { fingerprint: receipt.fingerprint, pending: receipt.state === "pending", failed: receipt.state === "failed" } : null;
@@ -13336,7 +13519,7 @@ function mutationError(error) {
   if (error?.code === "transact_guard_failed") {
     return json({ error: "record changed since it was reviewed", code: "stale_revision" }, 409);
   }
-  if (error instanceof import_crm23.CrmInputError) {
+  if (error instanceof import_crm24.CrmInputError) {
     return json({ error: error.message, code: "invalid_transition_or_fields", ...error.fields ? { fields: error.fields } : {} }, 422);
   }
   return json({ error: "follower mutation failed", code: "mutation_failed" }, 500);
@@ -13391,7 +13574,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
     }
     if (prior?.failed) return json({ error: "this operation was not applied; reload before choosing a new action", code: "action_failed" }, 409);
     if (prior && !prior.pending) {
-      const replayed = await (0, import_crm23.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
+      const replayed = await (0, import_crm24.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
       if (!replayed || replayed.type !== input.type) return json({ error: "record not found", code: "not_found" }, 404);
       const result = {
         version: 1,
@@ -13401,7 +13584,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
       };
       return json(result);
     }
-    const record4 = await (0, import_crm23.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
+    const record4 = await (0, import_crm24.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
     if (!record4 || record4.type !== input.type) return json({ error: "record not found", code: "not_found" }, 404);
     if (!prior?.pending && record4.updatedAt !== input.expectedRevision) {
       return json({ error: "record changed since it was reviewed", code: "stale_revision" }, 409);
@@ -13464,7 +13647,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
           record: await operationalReaderRecord(updated2.record, reader, db, env, ctx)
         });
       }
-      const updated = hasFields ? await (0, import_crm23.updateRecord)(deps, {
+      const updated = hasFields ? await (0, import_crm24.updateRecord)(deps, {
         id: record4.id,
         input: fields,
         mutationId: activityId,
@@ -13475,7 +13658,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
           authorId: `network:${verified.sender}`,
           meta: auditMeta
         }
-      }) : await (0, import_crm23.setStage)(deps, {
+      }) : await (0, import_crm24.setStage)(deps, {
         id: record4.id,
         to: input.stage,
         authorId: `network:${verified.sender}`,
@@ -13502,7 +13685,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
   const recordId = url.searchParams.get("recordId");
   if (recordId !== null) {
     if (!RECORD_ID.test(recordId)) return json({ error: "invalid record id" }, 400);
-    const record4 = await (0, import_crm23.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
+    const record4 = await (0, import_crm24.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
     if (!record4 || record4.type !== type || record4.archived) return json({ error: "record not found" }, 404);
     return json({
       version: 1,
@@ -13797,7 +13980,7 @@ var handleAdminNetworkNotes = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-network-shared-notes.ts
-var import_crm24 = require("@odla-ai/crm");
+var import_crm25 = require("@odla-ai/crm");
 var import_db12 = require("@odla-ai/db");
 var IDENTIFIER3 = /^[a-z][a-zA-Z0-9_]*$/;
 var RECORD_ID3 = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,255}$/;
@@ -13828,7 +14011,7 @@ function sharedNote(activity, sourceId) {
 }
 async function listSharedNotes(db, sourceId, recordId) {
   const result = await db.query({
-    [import_crm24.CRM_NS.activity]: {
+    [import_crm25.CRM_NS.activity]: {
       $: {
         where: {
           and: [
@@ -13841,7 +14024,7 @@ async function listSharedNotes(db, sourceId, recordId) {
       }
     }
   });
-  return (result[import_crm24.CRM_NS.activity] ?? []).flatMap((activity) => {
+  return (result[import_crm25.CRM_NS.activity] ?? []).flatMap((activity) => {
     const note = sharedNote(activity, sourceId);
     return note ? [note] : [];
   });
@@ -13869,7 +14052,7 @@ var handleNetworkSharedNotes = async (req, url, env, ctx) => {
   if (!IDENTIFIER3.test(recordType) || !RECORD_ID3.test(recordId) || !reader?.sharedNotes.includes(recordType)) {
     return json({ error: "shared notes are not enabled for this reader and record type" }, 403);
   }
-  const record4 = await (0, import_crm24.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
+  const record4 = await (0, import_crm25.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
   if (!record4 || record4.type !== recordType) return json({ error: "record not found" }, 404);
   if (req.method === "GET") {
     return json({
@@ -13891,7 +14074,7 @@ var handleNetworkSharedNotes = async (req, url, env, ctx) => {
   }
   const createdAt = Date.now();
   const id7 = `network:${verified.sender}:${mutationId}`;
-  const result = await (0, import_crm24.addActivity)(
+  const result = await (0, import_crm25.addActivity)(
     {
       crm: ctx.chapter.crm,
       db,
@@ -15520,7 +15703,7 @@ var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-formation.ts
-var import_crm25 = require("@odla-ai/crm");
+var import_crm26 = require("@odla-ai/crm");
 var SUBMISSION = /^[A-Za-z0-9_-]{8,128}$/;
 var handleFormation = async (req, url, env, ctx) => {
   const formation = ctx.chapter.formation;
@@ -15572,7 +15755,7 @@ var handleFormation = async (req, url, env, ctx) => {
   const db = ctx.makeDb(env);
   const id7 = submissionId ? await applicationIdForSubmission(`formation:${ctx.chapter.id}:${submissionId}`) : crypto.randomUUID();
   try {
-    const created = await (0, import_crm25.createRecord)(
+    const created = await (0, import_crm26.createRecord)(
       {
         crm: ctx.chapter.crm,
         db,
@@ -17763,7 +17946,7 @@ async function readBoundedJson(response, signal, maxBytes, label) {
 }
 
 // src/membership-chapter-delivery.ts
-var import_crm26 = require("@odla-ai/crm");
+var import_crm27 = require("@odla-ai/crm");
 
 // src/invitation-test-delivery.ts
 function invitationDelivery(env, recipientEmail) {
@@ -17828,7 +18011,7 @@ function createMembershipChapterEffectRoute(options) {
           join.searchParams.set("seat", effect.seatId);
           join.searchParams.set("tier", effect.skuId);
           const template = config.emailTemplates.namedSeatInvitation;
-          if (template && !(0, import_crm26.validateEmailCopy)(template).length && !template.text.includes("{{purchaserName}}")) {
+          if (template && !(0, import_crm27.validateEmailCopy)(template).length && !template.text.includes("{{purchaserName}}")) {
             config.emailTemplates = { ...config.emailTemplates, namedSeatInvitation: {
               ...template,
               text: "{{purchaserName}} has purchased a membership for you at {{chapterName}}.\n\n" + template.text