@odla-ai/chapter 0.62.0 → 0.63.1

package/dist/index.js

@@ -281,7 +281,10 @@ var applicationAttrs = {
   namedSeatAcceptedAt: attr("number", { optional: true }),
   approvedAt: attr("number", { optional: true }),
   entitlementTierId: attr("string", { optional: true, indexed: true }),
-  entitlementTierEndsAt: attr("number", { optional: true })
+  entitlementTierEndsAt: attr("number", { optional: true }),
+  referredByMemberId: attr("string", { optional: true, indexed: true }),
+  referralCode: attr("string", { optional: true }),
+  referredAt: attr("number", { optional: true })
 };
 function applicationsFor(application) {
   const attrs = {};
@@ -1723,6 +1726,89 @@ var DEFAULT_PORTAL_COPY = {
     saved: "Saved",
     conflict: "Your profile changed in another window. Reload to see the latest version.",
     saveFailed: "Your profile could not be saved. Please try again."
+  },
+  share: {
+    eyebrow: "Community",
+    intro: "Invite the people you would like to have beside you.",
+    officialTitle: "Make it official on LinkedIn",
+    officialBody: "Add your membership to your LinkedIn profile. It takes two minutes.",
+    showMeHow: "Show me how",
+    stepsEyebrow: "Two minutes, three steps",
+    steps: [
+      "On your profile, select Add profile section, then Add position.",
+      "Title: {tierName}. Company: choose us from the list.",
+      "Paste the description into the description box and save."
+    ],
+    openLinkedIn: "Open my LinkedIn profile",
+    copyDescription: "Copy description",
+    linkedinDescription: "{tierName}.",
+    postTitle: "Post about us",
+    postBody: "Tell your network you are here. The post is already written.",
+    shareOnLinkedIn: "Share on LinkedIn",
+    previewPost: "Preview the post",
+    linkedinPost: "I'm proud to be {article} {tierName}.",
+    linkTitle: "Your personal invite link",
+    linkBody: "Send it to anyone you would like beside you.",
+    linkCredit: "When a friend joins as a paying member with your link, {credit} comes off your next year's membership.",
+    referralsCredit: "Each friend who joins as a paying member takes {credit} off your next year's membership.",
+    copyLink: "Copy link",
+    copied: "Copied!",
+    copyBlocked: "Copy not allowed here",
+    emailInvite: "Email an invitation",
+    textInvite: "Text an invitation",
+    inviteNote: "Each opens your email or messages with a note already written. You choose who it goes to.",
+    emailSubject: "Join me",
+    emailBody: "Hi,\n\nI thought of you. Here's my personal invite link:\n{inviteUrl}\n\n{firstName}",
+    textBody: "Here's my invite link if you're curious: {inviteUrl}",
+    fallbackEmail: "Your email is ready. If your mail app didn't open, copy the message and paste it into an email.",
+    fallbackText: "Your text is ready. If your messages app didn't open, copy the message and paste it into a text.",
+    copyMessage: "Copy message",
+    close: "Close",
+    referralsTitle: "Your referrals",
+    referralsBody: "People who joined with your personal invite link.",
+    inviteFriend: "Invite a friend",
+    joined: "Joined",
+    inProcess: "In process",
+    offNextYear: "Off next year",
+    joinedWith: "Joined with your link: {names}"
+  },
+  course: {
+    eyebrow: "Live course \xB7 Registration open",
+    reserve: "Reserve my seat",
+    seeDetails: "See details",
+    courseDetails: "Course details",
+    youreIn: "You're in",
+    invitesOnWay: "Calendar invitations for every session are on their way, each with the Google Meet link.",
+    openMeet: "Open Google Meet",
+    giveUp: "Give up my seat",
+    confirmGiveUp: "Give up your seat? Your calendar invitations will be canceled.",
+    joinWaitlist: "Join the waitlist",
+    onWaitlist: "On the waitlist, number {position}",
+    leaveWaitlist: "Leave the waitlist",
+    seatsOpen: "{left} of {capacity} seats open",
+    full: "The course is full",
+    closed: "Sign-up has closed",
+    when: "When",
+    dates: "Dates",
+    where: "Where",
+    seats: "Seats",
+    googleMeet: "Google Meet",
+    inviteEvery: "We'll send a calendar invitation for every session.",
+    guidesTitle: "Your guides",
+    sessionsTitle: "Sessions",
+    materialsOpen: "Open a session for what to watch, read, and do beforehand.",
+    materialsLocked: "Materials open when you reserve your seat.",
+    items: "{count} items",
+    outcomesTitle: "You'll leave with",
+    toolkitTitle: "Your toolkit",
+    timeTitle: "Time",
+    open: "Open",
+    read: "Read",
+    do: "Do",
+    watch: "Watch",
+    extra: "Optional",
+    failed: "Something went wrong. Please try again.",
+    reserveYourSeat: "Reserve your seat"
   }
 };
 
@@ -1782,8 +1868,8 @@ var APPLICATION_LABELS = {
   state: "State"
 };
 function humanize(id12) {
-  const text8 = id12.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
-  return text8 ? `${text8[0].toUpperCase()}${text8.slice(1)}` : id12;
+  const text9 = id12.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_-]+/g, " ").trim();
+  return text9 ? `${text9[0].toUpperCase()}${text9.slice(1)}` : id12;
 }
 function applicationDefs(chapter) {
   try {
@@ -4378,24 +4464,24 @@ async function refundSubscriptionPayment(secretKey, input) {
   let earliest;
   const seen = /* @__PURE__ */ new Set();
   for (let page = 0; page < 10; page++) {
-    const list = await call("GET", "/v1/invoices", {
+    const list2 = await call("GET", "/v1/invoices", {
       subscription: input.subscriptionId,
       customer: input.customerId,
       status: "paid",
       limit: 100,
       ...cursor ? { starting_after: cursor } : {}
     });
-    if (!Array.isArray(list.data) || typeof list.has_more !== "boolean") fail3("stripe_invalid_response");
-    for (const value of list.data) {
+    if (!Array.isArray(list2.data) || typeof list2.has_more !== "boolean") fail3("stripe_invalid_response");
+    for (const value of list2.data) {
       const invoice2 = row(value);
       const subscription = invoice2.subscription ?? row(row(invoice2.parent).subscription_details).subscription;
       if (!providerId2(id8(invoice2), "in") || seen.has(id8(invoice2)) || id8(subscription) !== input.subscriptionId || id8(invoice2.customer) !== input.customerId || invoice2.status !== "paid" || !Number.isSafeInteger(invoice2.created) || !Number.isSafeInteger(invoice2.amount_paid) || Number(invoice2.amount_paid) < 0) fail3();
       seen.add(id8(invoice2));
       if (Number(invoice2.amount_paid) > 0 && (!earliest || Number(invoice2.created) < Number(earliest.created))) earliest = invoice2;
     }
-    if (!list.has_more) break;
-    if (!list.data.length || page === 9) fail3("refund_history_incomplete");
-    cursor = id8(list.data[list.data.length - 1]);
+    if (!list2.has_more) break;
+    if (!list2.data.length || page === 9) fail3("refund_history_incomplete");
+    cursor = id8(list2.data[list2.data.length - 1]);
   }
   if (!earliest) fail3("no_charge");
   const invoice = earliest;
@@ -5631,11 +5717,11 @@ async function refundCheckoutNamedSeat(secretKey, seat) {
     if (removed.id !== item.id || removed.deleted !== true) fail4("named_seat_renewal_removal_unconfirmed");
   }
   if (charge.amount_refunded === charge.amount && charge.refunded === true) return { refundedCents: seat.amountCents, refundIds: [] };
-  const list = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail4("named_seat_refund_history_incomplete");
+  const list2 = await call("GET", "/v1/refunds", { charge: chargeId, limit: 100 });
+  if (!Array.isArray(list2.data) || list2.has_more !== false || list2.data.length >= 100) fail4("named_seat_refund_history_incomplete");
   let refundedCents = 0;
   const refundIds = [];
-  for (const refund of list.data) {
+  for (const refund of list2.data) {
     if (id9(refund.charge) !== chargeId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !/^re_[A-Za-z0-9_]+$/.test(refund.id) || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail4();
     if (["pending", "requires_action"].includes(refund.status)) fail4("named_seat_refund_pending");
     if (refund.status === "succeeded") {
@@ -5686,11 +5772,11 @@ async function refundNamedSeatStripePayment(secretKey, seat) {
     const removed = await call("DELETE", `/v1/subscription_items/${encodeURIComponent(item.id)}`, { proration_behavior: "none" });
     if (removed.id !== item.id || removed.deleted !== true) fail5("named_seat_renewal_removal_unconfirmed");
   }
-  const list = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
-  if (!Array.isArray(list.data) || list.has_more !== false || list.data.length >= 100) fail5("named_seat_refund_history_incomplete");
+  const list2 = await call("GET", "/v1/refunds", { payment_intent: seat.providerPaymentIntentId, limit: 100 });
+  if (!Array.isArray(list2.data) || list2.has_more !== false || list2.data.length >= 100) fail5("named_seat_refund_history_incomplete");
   let refundedCents = 0, pendingCents = 0;
   const refundIds = [];
-  for (const refund of list.data) {
+  for (const refund of list2.data) {
     if (!/^re_[A-Za-z0-9_]+$/.test(refund.id) || refund.payment_intent !== seat.providerPaymentIntentId || refund.currency !== seat.currency || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !["succeeded", "pending", "requires_action", "failed", "canceled"].includes(refund.status)) fail5();
     if (refund.status === "succeeded") {
       refundedCents += refund.amount;
@@ -6371,7 +6457,7 @@ async function readBoundedJson(response, signal, maxBytes, label) {
   };
   signal.addEventListener("abort", cancel, { once: true });
   let size = 0;
-  let text8 = "";
+  let text9 = "";
   const decoder = new TextDecoder();
   try {
     while (true) {
@@ -6381,10 +6467,10 @@ async function readBoundedJson(response, signal, maxBytes, label) {
       if (done) break;
       size += value.byteLength;
       if (size > maxBytes) throw new TypeError(`${label} exceeds limit`);
-      text8 += decoder.decode(value, { stream: true });
+      text9 += decoder.decode(value, { stream: true });
     }
     try {
-      return JSON.parse(text8 + decoder.decode());
+      return JSON.parse(text9 + decoder.decode());
     } catch {
       throw new TypeError(`invalid ${label}`);
     }
@@ -7771,6 +7857,14 @@ async function createBuilderLibraryEnvelope(document) {
   return { document, digest: await builderLibraryDigest(document) };
 }
 
+// src/member-entitlement.ts
+function entitledTierId(app, now = Date.now()) {
+  const granted = typeof app.entitlementTierId === "string" && app.entitlementTierId ? app.entitlementTierId : null;
+  const endsAt = typeof app.entitlementTierEndsAt === "number" ? app.entitlementTierEndsAt : null;
+  if (granted && (endsAt === null || endsAt > now)) return granted;
+  return typeof app.tierId === "string" && app.tierId ? app.tierId : null;
+}
+
 // src/scheduling.ts
 var SCHEDULING_DEFAULTS = {
   slotMinutes: 45,
@@ -7952,8 +8046,8 @@ async function loadTiers(db, group) {
     throw Object.assign(new Error("membership tiers are unavailable"), { code: "tiers_unavailable" });
   }
   if (!Array.isArray(rows3)) throw Object.assign(new Error("membership tiers response is invalid"), { code: "tiers_unavailable" });
-  const list = rows3.map((row2) => rowToTier(row2, groupId));
-  return resolveTiers(group, list);
+  const list2 = rows3.map((row2) => rowToTier(row2, groupId));
+  return resolveTiers(group, list2);
 }
 async function loadOfferableTiers(db, group, hasSecretKey) {
   return offerableTiers(await loadTiers(db, group), group, hasSecretKey);
@@ -8319,9 +8413,9 @@ function optionalText(body, key4, max, errors) {
     errors.push(`${key4} must be a string`);
     return void 0;
   }
-  const text8 = clean(value);
-  if (text8.length > max) errors.push(`${key4} must be at most ${max} characters`);
-  return text8 || null;
+  const text9 = clean(value);
+  if (text9.length > max) errors.push(`${key4} must be at most ${max} characters`);
+  return text9 || null;
 }
 function validateProfilePatch(body, portal) {
   const errors = [];
@@ -8599,10 +8693,248 @@ var PHOTO_SIZE = 400;
 // src/worker-routes-hub-members.ts
 var HUB_MEMBERS_PATH = "/api/admin/hub-members";
 
+// src/referral-codes.ts
+var REFERRAL_CODE_ALPHABET = "23456789abcdefghjkmnpqrstuvwxyz";
+var REFERRAL_CODE_PATTERN = /^[23456789abcdefghjkmnpqrstuvwxyz]{5,8}$/;
+var LENGTH = 5;
+function newReferralCode(random = (n) => crypto.getRandomValues(new Uint8Array(n))) {
+  const bytes = random(LENGTH * 2);
+  let code = "";
+  for (const byte of bytes) {
+    if (byte >= 248) continue;
+    code += REFERRAL_CODE_ALPHABET[byte % REFERRAL_CODE_ALPHABET.length];
+    if (code.length === LENGTH) return code;
+  }
+  return newReferralCode(random);
+}
+var generationOf = (rows3) => rows3.reduce((max, row2) => Math.max(max, Number(String(row2.id).split(":").pop()) || 0), 0);
+async function ensureReferralCode(db, memberId, now = Date.now()) {
+  for (let attempt = 0; attempt < 6; attempt += 1) {
+    const rows3 = (await db.query({ referralCodes: { $: { where: { memberId }, limit: 100 } } })).referralCodes ?? [];
+    const live = rows3.find((row3) => row3.status === "active");
+    if (live) return live;
+    const id12 = `ref:${memberId}:${generationOf(rows3) + 1}`;
+    const row2 = { id: id12, code: newReferralCode(), memberId, status: "active", createdAt: now };
+    try {
+      await db.transact([{ t: "update", ns: "referralCodes", id: id12, attrs: row2 }], { guards: [{ ns: "referralCodes", id: id12, exists: false }] });
+      return row2;
+    } catch (error) {
+      const code = error.code;
+      if (code !== "transact_guard_failed" && code !== "unique_violation") throw error;
+    }
+  }
+  throw new Error("referral code could not be issued");
+}
+async function reissueReferralCode(db, memberId, actor, now = Date.now()) {
+  for (let attempt = 0; attempt < 6; attempt += 1) {
+    const rows3 = (await db.query({ referralCodes: { $: { where: { memberId }, limit: 100 } } })).referralCodes ?? [];
+    const live = rows3.find((row2) => row2.status === "active");
+    const id12 = `ref:${memberId}:${generationOf(rows3) + 1}`;
+    const next = { id: id12, code: newReferralCode(), memberId, status: "active", createdAt: now };
+    const ops = [{ t: "update", ns: "referralCodes", id: id12, attrs: next }];
+    if (live) ops.unshift({ t: "update", ns: "referralCodes", id: String(live.id), attrs: { status: "deactivated", deactivatedAt: now, deactivatedBy: actor, replacedBy: id12 } });
+    try {
+      await db.transact(ops, { guards: [
+        { ns: "referralCodes", id: id12, exists: false },
+        ...live ? [{ ns: "referralCodes", id: String(live.id), exists: true, equals: { status: "active" } }] : []
+      ] });
+      return next;
+    } catch (error) {
+      const code = error.code;
+      if (code !== "transact_guard_failed" && code !== "unique_violation") throw error;
+    }
+  }
+  throw new Error("referral code could not be reissued");
+}
+
+// src/referral-events.ts
+var REFERRAL_COOKIE = "odla_ref";
+function referralCodeFromCookie(header) {
+  for (const part of (header ?? "").split(";")) {
+    const [name, ...rest] = part.trim().split("=");
+    if (name === REFERRAL_COOKIE) {
+      const value = decodeURIComponent(rest.join("="));
+      return REFERRAL_CODE_PATTERN.test(value) ? value : null;
+    }
+  }
+  return null;
+}
+
+// src/referral-ledger.ts
+function foldLedger(rows3) {
+  const sum = (status2) => rows3.filter((row2) => row2.status === status2).reduce((total, row2) => total + Number(row2.valueCents ?? 0), 0);
+  const earnedCents = sum("earned"), appliedCents = sum("applied"), voidedCents = sum("void");
+  return { earnedCents, appliedCents, voidedCents, carriedForwardCents: sum("carried_forward"), balanceCents: earnedCents - appliedCents - voidedCents };
+}
+
+// src/worker-routes-member-referrals.ts
+var MEMBER_REFERRALS_PATH = "/api/member/referrals";
+
+// src/worker-routes-referral-link.ts
+function membershipRedirect(membershipUrl2, origin, code) {
+  const url = new URL(membershipUrl2, origin);
+  if (code) url.searchParams.set("ref", code);
+  return url.toString();
+}
+
+// src/course-validate.ts
+var ID3 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var KINDS2 = /* @__PURE__ */ new Set(["read", "do", "watch", "extra"]);
+var rec = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : null;
+function text6(v, path, errors, max, required = false) {
+  if (v === void 0 || v === null || v === "") {
+    if (required) errors.push(`${path} is required`);
+    return void 0;
+  }
+  if (typeof v !== "string") {
+    errors.push(`${path} must be a string`);
+    return void 0;
+  }
+  const t = v.trim();
+  if (t.length > max) errors.push(`${path} must be at most ${max} characters`);
+  return t || void 0;
+}
+function https(v, path, errors) {
+  const t = text6(v, path, errors, 2e3);
+  if (!t) return void 0;
+  try {
+    if (new URL(t).protocol === "https:") return t;
+  } catch {
+  }
+  errors.push(`${path} must be an https URL`);
+  return void 0;
+}
+function list(v, path, errors, max, item) {
+  if (v === void 0) return [];
+  if (!Array.isArray(v)) {
+    errors.push(`${path} must be an array`);
+    return [];
+  }
+  if (v.length > max) errors.push(`${path} supports at most ${max} entries`);
+  return v.slice(0, max).flatMap((raw2, i) => {
+    const r = rec(raw2);
+    if (!r) {
+      errors.push(`${path}[${i}] must be an object`);
+      return [];
+    }
+    const out = item(r, `${path}[${i}]`);
+    return out === void 0 ? [] : [out];
+  });
+}
+var material = (errors, withKind) => (r, at2) => {
+  if (withKind && !KINDS2.has(String(r.kind))) errors.push(`${at2}.kind must be read, do, watch or extra`);
+  const label = text6(r.label, `${at2}.label`, errors, 200, true) ?? "";
+  const meta = text6(r.meta, `${at2}.meta`, errors, 200), url = https(r.url, `${at2}.url`, errors);
+  return { ...withKind ? { kind: r.kind } : {}, label, ...meta ? { meta } : {}, ...url ? { url } : {} };
+};
+function validateCourseSettings(input, enrolledCount = 0) {
+  const errors = [];
+  const r = rec(input);
+  if (!r) return { ok: false, errors: ["course must be an object"] };
+  const id12 = text6(r.id, "id", errors, 80, true) ?? "";
+  if (id12 && !ID3.test(id12)) errors.push("id must be a lowercase slug");
+  const title = text6(r.title, "title", errors, 200, true) ?? "";
+  const timezone = text6(r.timezone, "timezone", errors, 64, true) ?? "";
+  if (timezone) {
+    try {
+      new Intl.DateTimeFormat("en-US", { timeZone: timezone });
+    } catch {
+      errors.push("timezone must be an IANA time zone");
+    }
+  }
+  const capacity = Number(r.capacity);
+  if (!Number.isInteger(capacity) || capacity < 1 || capacity > 100) errors.push("capacity must be an integer from 1 to 100");
+  else if (capacity < enrolledCount) errors.push(`capacity cannot be below the ${enrolledCount} seats already taken`);
+  const signupClosesAt = Number(r.signupClosesAt);
+  if (!Number.isSafeInteger(signupClosesAt) || signupClosesAt <= 0) errors.push("signupClosesAt must be a timestamp");
+  const c = rec(r.content ?? {}) ?? {};
+  const outcomes = Array.isArray(c.outcomes) ? c.outcomes.slice(0, 12).map((o, i) => text6(o, `content.outcomes[${i}]`, errors, 300, true) ?? "") : [];
+  const content = {};
+  for (const key4 of ["basedOn", "short", "when", "start", "dates", "time"]) {
+    const v = text6(c[key4], `content.${key4}`, errors, 600);
+    if (v) content[key4] = v;
+  }
+  const partner = text6(c.partnerMarkdown, "content.partnerMarkdown", errors, 4e3);
+  if (partner) content.partnerMarkdown = partner;
+  if (outcomes.length) content.outcomes = outcomes;
+  const sessions = list(r.sessions, "sessions", errors, 26, (s, at2) => {
+    const startsAt = Number(s.startsAt), endsAt = Number(s.endsAt);
+    if (!Number.isSafeInteger(startsAt) || !Number.isSafeInteger(endsAt) || endsAt <= startsAt) errors.push(`${at2} needs startsAt before endsAt`);
+    const date = text6(s.date, `${at2}.date`, errors, 40, true) ?? "";
+    const topic = text6(s.topic, `${at2}.topic`, errors, 200, true) ?? "";
+    const description = text6(s.description, `${at2}.description`, errors, 1e3);
+    return { date, startsAt, endsAt, topic, ...description ? { description } : {}, materials: list(s.materials, `${at2}.materials`, errors, 20, material(errors, true)) };
+  });
+  if (!sessions.length) errors.push("sessions must list at least one session");
+  for (let i = 1; i < sessions.length; i += 1) if (sessions[i].startsAt <= sessions[i - 1].startsAt) errors.push(`sessions[${i}] must start after sessions[${i - 1}]`);
+  const toolkit = list(r.toolkit, "toolkit", errors, 20, material(errors, false));
+  const guides = list(r.guides, "guides", errors, 8, (g, at2) => {
+    const name = text6(g.name, `${at2}.name`, errors, 120, true) ?? "";
+    const role = text6(g.role, `${at2}.role`, errors, 200), bio = text6(g.bio, `${at2}.bio`, errors, 1500), photoUrl = https(g.photoUrl, `${at2}.photoUrl`, errors);
+    return { name, ...role ? { role } : {}, ...bio ? { bio } : {}, ...photoUrl ? { photoUrl } : {} };
+  });
+  if (errors.length) return { ok: false, errors };
+  return { ok: true, value: { id: id12, title, timezone, capacity, signupClosesAt, content, sessions, toolkit, guides } };
+}
+
+// src/course-calendar.ts
+import { initCalendar } from "@odla-ai/calendar";
+function courseEventInput(course) {
+  const first = course.sessions[0];
+  return {
+    summary: course.title,
+    startAt: first.startsAt,
+    endAt: first.endsAt,
+    timezone: course.timezone,
+    attendees: [],
+    meet: true,
+    recurrence: [`RRULE:FREQ=WEEKLY;COUNT=${course.sessions.length}`],
+    guestsCanSeeOtherGuests: false,
+    guestsCanInviteOthers: false,
+    guestsCanModify: false,
+    skipAvailabilityCheck: true
+  };
+}
+
+// src/course-store.ts
+var waitlistPosition = (enrollments, memberId) => {
+  const index2 = enrollments.filter((row2) => row2.status === "waitlisted").findIndex((row2) => row2.memberId === memberId);
+  return index2 < 0 ? null : index2 + 1;
+};
+
+// src/worker-routes-member-course.ts
+function memberCourseView(course, enrollments, memberId, now = Date.now()) {
+  const mine = enrollments.find((row2) => row2.memberId === memberId && ["enrolled", "waitlisted", "pending"].includes(String(row2.status)));
+  const enrolled = mine?.status === "enrolled";
+  const seatsLeft = Math.max(0, Number(course.capacity) - Number(course.enrolledCount));
+  const visible = (material2) => enrolled ? material2 : (({ url: _url, ...rest }) => rest)(material2);
+  const sessions = (course.sessions ?? []).map((session) => ({
+    ...session,
+    materials: session.materials.filter((material2) => material2.url).map(visible)
+  }));
+  return {
+    course: {
+      id: course.id,
+      title: course.title,
+      timezone: course.timezone,
+      content: course.content ?? {},
+      guides: course.guides ?? [],
+      capacity: Number(course.capacity),
+      seatsLeft,
+      signupClosesAt: course.signupClosesAt,
+      sessions,
+      toolkit: (course.toolkit ?? []).filter((item) => item.url).map(visible),
+      status: now >= Number(course.signupClosesAt) ? "closed" : seatsLeft === 0 ? "full" : "open"
+    },
+    enrollment: mine ? { status: mine.status, waitlistPosition: waitlistPosition(enrollments, memberId) } : null,
+    ...enrolled && course.meetUrl ? { meetUrl: course.meetUrl } : {}
+  };
+}
+
 // src/email-retirement.ts
-function isRetiredEmailCopy(subject, text8) {
+function isRetiredEmailCopy(subject, text9) {
   const subjectCopy = subject.trimStart().replace(/^\[dev\]\s*/i, "");
-  const bodyCopy = text8.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
+  const bodyCopy = text9.trimStart().replace(/^\(dev redirect; original recipient: [^\r\n]*\)\r?\n\r?\n/, "");
   return /^\(\s*unused\s*:/i.test(subjectCopy) || /^Unused\.\s*Switched off\b/i.test(bodyCopy);
 }
 
@@ -8627,8 +8959,8 @@ function lineHtml(line) {
   }
   return out + escapeHtml(line.slice(last));
 }
-function textToHtml(text8) {
-  const paragraphs = text8.replace(/\r\n/g, "\n").trim().split(/\n{2,}/).filter((paragraph) => paragraph.trim());
+function textToHtml(text9) {
+  const paragraphs = text9.replace(/\r\n/g, "\n").trim().split(/\n{2,}/).filter((paragraph) => paragraph.trim());
   const body = paragraphs.map((paragraph) => `<p>${paragraph.split("\n").map(lineHtml).join("<br>\n")}</p>`).join("\n");
   return `<!doctype html>
 <html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"></head>
@@ -8733,12 +9065,12 @@ function planDelivery(input) {
   if (isRetiredEmailCopy(renderedSubject, renderedText)) return { deliver: false, reason: "template-retired" };
   if (validateEmailCopy({ subject: renderedSubject, text: renderedText }, { allowedVariables: [] }).length) return { deliver: false, reason: "template-invalid" };
   const subject = (redirect ? "[dev] " : "") + renderedSubject;
-  const text8 = redirect ? `(dev redirect; original recipient: ${input.to})
+  const text9 = redirect ? `(dev redirect; original recipient: ${input.to})
 
 ` + renderedText : renderedText;
   const renderedHtml = html ? renderHtmlBody(html, vars) : void 0;
   const htmlOut = renderedHtml && redirect ? `<p style="font:13px monospace;color:#555;margin:0 0 12px">(dev redirect; original recipient: ${escapeHtml(input.to)})</p>` + renderedHtml : renderedHtml;
-  return { deliver: true, transport, to, subject, text: text8, ...htmlOut ? { html: htmlOut } : {}, redirected: redirect };
+  return { deliver: true, transport, to, subject, text: text9, ...htmlOut ? { html: htmlOut } : {}, redirected: redirect };
 }
 
 // src/email-readiness.ts
@@ -8778,7 +9110,7 @@ var words = (s) => strip(s).split(/\s+/).filter(Boolean);
 var phraseIn = (phrases, haystack) => phrases.find((phrase) => new RegExp(`(?:^|[^a-z0-9])${phrase.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![a-z0-9])`, "i").test(haystack));
 function emailSpamSignals(copy) {
   const subject = typeof copy.subject === "string" ? copy.subject : "";
-  const text8 = typeof copy.text === "string" ? copy.text : "";
+  const text9 = typeof copy.text === "string" ? copy.text : "";
   const html = typeof copy.html === "string" ? copy.html : "";
   const out = [];
   const letters = strip(subject).replace(/[^A-Za-z]/g, "");
@@ -8788,11 +9120,11 @@ function emailSpamSignals(copy) {
   if (/^\s*(?:re|fw|fwd)\s*:/i.test(subject)) out.push({ code: "subject-fake-reply", message: "A subject that starts like a reply or forward reads as a spoof when the recipient never wrote first." });
   const subjectHit = phraseIn(SUBJECT_TRIGGERS, strip(subject));
   if (subjectHit) out.push({ code: "subject-trigger-words", message: `The subject uses "${subjectHit}", a word filters weight against the sender.` });
-  const bodyHit = phraseIn(TRIGGER_PHRASES, strip(text8));
+  const bodyHit = phraseIn(TRIGGER_PHRASES, strip(text9));
   if (bodyHit) out.push({ code: "body-trigger-words", message: `The body uses "${bodyHit}", a phrase filters weight against the sender.` });
-  if (/(?:^|\s)[A-Z]{3,}(?:\s+[A-Z]{3,}){2,}(?=\s|$)/.test(strip(text8))) out.push({ code: "body-caps", message: "The body shouts a run of capitalised words; use sentence case." });
-  if (/!{2,}/.test(text8)) out.push({ code: "body-punctuation", message: "Repeated exclamation marks in the body are a classic spam signal." });
-  const urls = [...`${text8}
+  if (/(?:^|\s)[A-Z]{3,}(?:\s+[A-Z]{3,}){2,}(?=\s|$)/.test(strip(text9))) out.push({ code: "body-caps", message: "The body shouts a run of capitalised words; use sentence case." });
+  if (/!{2,}/.test(text9)) out.push({ code: "body-punctuation", message: "Repeated exclamation marks in the body are a classic spam signal." });
+  const urls = [...`${text9}
 ${html}`.matchAll(URL_RE2)].map((match) => match[0].replace(/&quot;.*$/, ""));
   const hosts = urls.map((url) => {
     try {
@@ -8805,7 +9137,7 @@ ${html}`.matchAll(URL_RE2)].map((match) => match[0].replace(/&quot;.*$/, ""));
   if (hosts.some((host) => DEV_HOSTS.test(host) || /^\d+\.\d+\.\d+\.\d+$/.test(host))) out.push({ code: "link-origin", message: "A link points at a development host (workers.dev, pages.dev, localhost or a raw IP). Link to the site's own domain." });
   if (hosts.some((host) => SHORTENERS.test(host))) out.push({ code: "link-shortener", message: "A link uses a URL shortener, which hides the destination and is heavily abused. Link to the real address." });
   if (new Set(urls).size > 5) out.push({ code: "link-many", message: "The body has more than five links. Keep lifecycle mail to the one or two the reader needs." });
-  if (urls.length && words(text8).length < 20) out.push({ code: "body-link-only", message: "The body is little more than a link. Say what the reader is being sent and why before the address." });
+  if (urls.length && words(text9).length < 20) out.push({ code: "body-link-only", message: "The body is little more than a link. Say what the reader is being sent and why before the address." });
   return out;
 }
 function emailSenderWarnings(input) {
@@ -9009,14 +9341,14 @@ async function sendTemplated(deps, input) {
   if (decision.transport === "log-only") return { sent: true };
   let messageId;
   try {
-    const text8 = String(row2.body);
-    const html = deps.renderHtml === false ? void 0 : decision.html ?? (deps.renderHtml ?? textToHtml)(text8);
+    const text9 = String(row2.body);
+    const html = deps.renderHtml === false ? void 0 : decision.html ?? (deps.renderHtml ?? textToHtml)(text9);
     const headers = deliverabilityHeaders({ event: event2, replyTo: input.group.replyTo });
     const response = await deps.sender.send({
       from: fromAddress(deps.from, input.group.fromName),
       to: [decision.to],
       subject: String(row2.subject),
-      text: text8,
+      text: text9,
       ...html ? { html } : {},
       ...headers ? { headers } : {},
       replyTo: input.group.replyTo
@@ -9268,7 +9600,7 @@ async function readAdmissionRows(db, namespace, where, maximum) {
 }
 
 // src/admission-grants.ts
-var ID3 = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
+var ID4 = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
 var MAX_GRANTS = 2e3;
 var MAX_NOTE = 2e3;
 var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -9290,10 +9622,10 @@ function validateAdmissionGrantDocument(input) {
   const sourceActor = typeof source.actor === "string" ? source.actor.trim() : "";
   const chapterId = typeof target.chapterId === "string" ? target.chapterId : "";
   const environment = typeof target.environment === "string" ? target.environment : "";
-  if (!ID3.test(sourceId)) errors.push("document.source.appId must be an identifier");
+  if (!ID4.test(sourceId)) errors.push("document.source.appId must be an identifier");
   if (!sourceActor || sourceActor.length > 256) errors.push("document.source.actor must be 1-256 characters");
-  if (!ID3.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
-  if (!ID3.test(environment)) errors.push("document.target.environment must be an identifier");
+  if (!ID4.test(chapterId)) errors.push("document.target.chapterId must be an identifier");
+  if (!ID4.test(environment)) errors.push("document.target.environment must be an identifier");
   if (!Array.isArray(root.grants)) errors.push("document.grants must be an array");
   const rawGrants = Array.isArray(root.grants) ? root.grants : [];
   if (rawGrants.length > MAX_GRANTS) errors.push(`document.grants supports at most ${MAX_GRANTS} entries`);
@@ -9308,7 +9640,7 @@ function validateAdmissionGrantDocument(input) {
     const decision = grant.decision;
     const note = typeof grant.note === "string" ? grant.note.trim() : void 0;
     const expiresAt = grant.expiresAt === void 0 ? void 0 : Number(grant.expiresAt);
-    if (!ID3.test(id12)) errors.push(`document.grants[${index2}].id must be an identifier`);
+    if (!ID4.test(id12)) errors.push(`document.grants[${index2}].id must be an identifier`);
     if (seenIds.has(id12)) errors.push(`document.grants repeats id "${id12}"`);
     if (!isAdmissionEmail(normalized)) errors.push(`document.grants[${index2}].email must be valid`);
     if (seenEmails.has(normalized)) errors.push(`document.grants repeats email "${normalized}"`);
@@ -9467,11 +9799,11 @@ function resolveJoinContinuation(input) {
 // src/gift-offers.ts
 var GIFT_OFFER_CATALOG_VERSION = 1;
 var MAX_GIFT_OFFERS = 20;
-var ID4 = /^[a-z][a-z0-9-]{1,79}$/;
+var ID5 = /^[a-z][a-z0-9-]{1,79}$/;
 var PRICE = /^price_[A-Za-z0-9]{12,}$/;
 var CURRENCY = /^[a-z]{3}$/;
 var record3 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var text6 = (value, path, errors, max) => {
+var text7 = (value, path, errors, max) => {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -9499,23 +9831,23 @@ function validateGiftOfferCatalog(input, tierIds) {
     }
     const allowed = /* @__PURE__ */ new Set(["id", "target", "billingMode", "stripePriceId", "priceCents", "currency", "redemptionLifetimeHours", "activeFrom", "activeUntil", "title", "description", "ctaLabel"]);
     for (const key4 of Object.keys(item)) if (!allowed.has(key4)) errors.push(`${path}.${key4} is not supported`);
-    const id12 = text6(item.id, `${path}.id`, errors, 80);
-    if (id12 && !ID4.test(id12)) errors.push(`${path}.id must be a lowercase kebab-case id`);
+    const id12 = text7(item.id, `${path}.id`, errors, 80);
+    if (id12 && !ID5.test(id12)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (ids2.has(id12)) errors.push(`${path}.id duplicates "${id12}"`);
     ids2.add(id12);
     const targetRaw = record3(item.target);
     let target = { type: "entitlement", entitlementKey: "invalid" };
     if (targetRaw?.type === "tier") {
-      const tierId = text6(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
+      const tierId = text7(targetRaw.tierId, `${path}.target.tierId`, errors, 80);
       if (!tierIds.has(tierId)) errors.push(`${path}.target.tierId must reference a declared tier`);
       target = { type: "tier", tierId };
     } else if (targetRaw?.type === "entitlement") {
-      const entitlementKey = text6(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
-      if (entitlementKey && !ID4.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
+      const entitlementKey = text7(targetRaw.entitlementKey, `${path}.target.entitlementKey`, errors, 80);
+      if (entitlementKey && !ID5.test(entitlementKey)) errors.push(`${path}.target.entitlementKey must be a lowercase kebab-case id`);
       target = { type: "entitlement", entitlementKey };
     } else errors.push(`${path}.target.type must be tier or entitlement`);
     if (item.billingMode !== "one_time" && item.billingMode !== "subscription") errors.push(`${path}.billingMode must be one_time or subscription`);
-    const stripePriceId = text6(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
+    const stripePriceId = text7(item.stripePriceId, `${path}.stripePriceId`, errors, 128);
     if (stripePriceId && !PRICE.test(stripePriceId)) errors.push(`${path}.stripePriceId must be a real Stripe Price id`);
     if (!Number.isSafeInteger(item.priceCents) || Number(item.priceCents) < 1 || Number(item.priceCents) > 1e8) errors.push(`${path}.priceCents must be an integer from 1 to 100,000,000`);
     const currency = typeof item.currency === "string" ? item.currency.trim().toLowerCase() : "";
@@ -9537,9 +9869,9 @@ function validateGiftOfferCatalog(input, tierIds) {
       redemptionLifetimeHours: lifetime,
       ...activeFrom !== void 0 ? { activeFrom } : {},
       ...activeUntil !== void 0 ? { activeUntil } : {},
-      title: text6(item.title, `${path}.title`, errors, 160),
-      description: text6(item.description, `${path}.description`, errors, 2e3),
-      ctaLabel: text6(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
+      title: text7(item.title, `${path}.title`, errors, 160),
+      description: text7(item.description, `${path}.description`, errors, 2e3),
+      ctaLabel: text7(item.ctaLabel, `${path}.ctaLabel`, errors, 120)
     });
   }
   return errors.length ? { ok: false, errors } : { ok: true, value: { schemaVersion: 1, offers } };
@@ -10322,10 +10654,10 @@ function boundedString(value, path, errors, max, required = false) {
     errors.push(`${path} must be a string`);
     return void 0;
   }
-  const text8 = value.trim();
-  if (required && !text8) errors.push(`${path} is required`);
-  if (text8.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
-  return text8;
+  const text9 = value.trim();
+  if (required && !text9) errors.push(`${path} is required`);
+  if (text9.length > max) errors.push(`${path} must be at most ${max.toLocaleString("en-US")} characters`);
+  return text9;
 }
 function validateMembershipPageDocument(input, options = {}) {
   const errors = [];
@@ -10374,8 +10706,8 @@ function validateMembershipPageDocument(input, options = {}) {
       else {
         if (item.benefits.length > MAX_BENEFITS) errors.push(`${path}.benefits supports at most ${MAX_BENEFITS} entries`);
         benefits = item.benefits.slice(0, MAX_BENEFITS).flatMap((benefit, benefitIndex) => {
-          const text8 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
-          return text8 ? [text8] : [];
+          const text9 = boundedString(benefit, `${path}.benefits[${benefitIndex}]`, errors, 2e3, true);
+          return text9 ? [text9] : [];
         });
       }
     }
@@ -10474,7 +10806,7 @@ var recordOf = (value) => value !== null && typeof value === "object" && !Array.
 function unknownKeys3(value, allowed, path, errors) {
   for (const key4 of Object.keys(value)) if (!allowed.has(key4)) errors.push(`${path}.${key4} is not supported`);
 }
-function text7(value, path, errors, max = 65536) {
+function text8(value, path, errors, max = 65536) {
   if (typeof value !== "string" || !value.trim()) {
     errors.push(`${path} is required`);
     return "";
@@ -10497,11 +10829,11 @@ function tiersOf(value, errors) {
       return [];
     }
     unknownKeys3(item, TIER_KEYS2, path, errors);
-    const id12 = text7(item.id, `${path}.id`, errors, 80);
+    const id12 = text8(item.id, `${path}.id`, errors, 80);
     if (id12 && !TIER.test(id12)) errors.push(`${path}.id must be a lowercase kebab-case id`);
     if (seen.has(id12)) errors.push(`${path}.id duplicates "${id12}"`);
     seen.add(id12);
-    const name = text7(item.name, `${path}.name`, errors, 160);
+    const name = text8(item.name, `${path}.name`, errors, 160);
     if (typeof item.available !== "boolean") errors.push(`${path}.available must be boolean`);
     if (!Number.isInteger(item.sortOrder) || Number(item.sortOrder) < 0) errors.push(`${path}.sortOrder must be a non-negative integer`);
     if (!Number.isInteger(item.priceCents) || Number(item.priceCents) < 0 || Number(item.priceCents) > 1e8) {
@@ -10519,7 +10851,7 @@ function tiersOf(value, errors) {
     if (item.interval !== void 0 && item.interval !== "year" && item.interval !== "month") {
       errors.push(`${path}.interval must be year or month`);
     }
-    const blurb = item.blurb === void 0 ? void 0 : text7(item.blurb, `${path}.blurb`, errors, 4e3);
+    const blurb = item.blurb === void 0 ? void 0 : text8(item.blurb, `${path}.blurb`, errors, 4e3);
     return [{
       id: id12,
       name,
@@ -10577,7 +10909,7 @@ function policyOf(value, errors, tiers2) {
   const result = {};
   for (const key4 of allowed) {
     if (input[key4] === void 0 && key4 !== "disclaimerText" && key4 !== "refundPolicyText") continue;
-    result[key4] = text7(input[key4], `document.policy.${key4}`, errors);
+    result[key4] = text8(input[key4], `document.policy.${key4}`, errors);
   }
   const tierPolicies = {};
   if (input.tierPolicies !== void 0) {
@@ -10592,8 +10924,8 @@ function policyOf(value, errors, tiers2) {
       }
       unknownKeys3(policy2, /* @__PURE__ */ new Set(["refundPolicyText", "trustCopy"]), path, errors);
       tierPolicies[id12] = {
-        refundPolicyText: text7(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
-        ...policy2.trustCopy !== void 0 ? { trustCopy: text7(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
+        refundPolicyText: text8(policy2.refundPolicyText, `${path}.refundPolicyText`, errors),
+        ...policy2.trustCopy !== void 0 ? { trustCopy: text8(policy2.trustCopy, `${path}.trustCopy`, errors) } : {}
       };
     }
   }
@@ -10633,9 +10965,9 @@ function validateSignupControlDocument(input) {
   if (!Number.isSafeInteger(root.generatedAt) || Number(root.generatedAt) < 1) errors.push("document.generatedAt must be epoch milliseconds");
   const source = recordOf(root.source);
   const target = recordOf(root.target);
-  const appId = text7(source?.appId, "document.source.appId", errors, 63);
-  const chapterId = text7(target?.chapterId, "document.target.chapterId", errors, 63);
-  const environment = text7(target?.environment, "document.target.environment", errors, 63);
+  const appId = text8(source?.appId, "document.source.appId", errors, 63);
+  const chapterId = text8(target?.chapterId, "document.target.chapterId", errors, 63);
+  const environment = text8(target?.environment, "document.target.environment", errors, 63);
   if (appId && !SLUG9.test(appId)) errors.push("document.source.appId must be a lowercase app slug");
   if (chapterId && !SLUG9.test(chapterId)) errors.push("document.target.chapterId must be a lowercase app slug");
   if (environment && !ENVIRONMENT.test(environment)) errors.push("document.target.environment is invalid");
@@ -10812,9 +11144,9 @@ function markdownBenefits(lines, path, errors) {
       errors.push(`${path} line ${index2 + 1} must be a Markdown bullet`);
       continue;
     }
-    const text8 = (match[1] ?? "").trim();
-    if (text8.length > 2e3) errors.push(`${path} line ${index2 + 1} must be at most 2,000 characters`);
-    if (text8) benefits.push(text8);
+    const text9 = (match[1] ?? "").trim();
+    if (text9.length > 2e3) errors.push(`${path} line ${index2 + 1} must be at most 2,000 characters`);
+    if (text9) benefits.push(text9);
   }
   if (benefits.length > MAX_BENEFITS2) errors.push(`${path} supports at most ${MAX_BENEFITS2} entries`);
   return benefits.slice(0, MAX_BENEFITS2);
@@ -11173,6 +11505,7 @@ export {
   MEMBER_PHOTO_PATH,
   MEMBER_PROFILE_FIELDS,
   MEMBER_PROFILE_PATH,
+  MEMBER_REFERRALS_PATH,
   MEMBER_SELF_EDITABLE_FIELDS,
   MEMBER_SELF_READABLE_FIELDS,
   MEMBER_SYSTEM_AUTHORITY_MATRIX,
@@ -11180,6 +11513,9 @@ export {
   MEMBER_SYSTEM_RECORD_OWNERS,
   MEMBER_SYSTEM_RECOVERY_OBJECTIVES,
   PHOTO_SIZE,
+  REFERRAL_CODE_ALPHABET,
+  REFERRAL_CODE_PATTERN,
+  REFERRAL_COOKIE,
   REQUIRED_NOTICE_KINDS,
   SCHEDULING_DEFAULTS,
   SIGNUP_CONTROL_PATH,
@@ -11234,6 +11570,7 @@ export {
   composeMemberContent,
   composeMemberSections,
   confirmMembershipPayment,
+  courseEventInput,
   createAdmissionGrantEnvelope,
   createBuilderLibraryEnvelope,
   createChapterIntegration,
@@ -11254,12 +11591,15 @@ export {
   emailSenderWarnings,
   emailSpamSignals,
   endForSlot,
+  ensureReferralCode,
+  entitledTierId,
   exportChapterPromotion,
   findAdmissionGrant,
   findApplicationRef,
   findGiftOffer,
   findTier,
   firstPaymentPatch,
+  foldLedger,
   formatChapterCopy,
   formationFields,
   formationFlowFields,
@@ -11293,6 +11633,7 @@ export {
   memberApplication,
   memberContentDigest,
   memberContentDocument,
+  memberCourseView,
   memberFeatureAccess,
   memberPageAllowed,
   memberPortalEntities,
@@ -11309,12 +11650,14 @@ export {
   membershipOfferRules,
   membershipOfferingVersion,
   membershipPageDocument,
+  membershipRedirect,
   membershipTierPresentationFromMarkdown,
   nameKey,
   namedSeatOfferDigest,
   networkCommercialSourceKey,
   networkMembershipId,
   networkSourceTag,
+  newReferralCode,
   normalizeAdmissionEmail,
   normalizeChapterEmail,
   normalizeNetworkCommercialStripeEvent,
@@ -11348,8 +11691,10 @@ export {
   reconcileMembershipBilling,
   reconcileMembershipRenewal,
   reconcileStripeSnapshot,
+  referralCodeFromCookie,
   refundNetworkMembership,
   refundedPatch,
+  reissueReferralCode,
   render,
   renderHtmlBody,
   renderSignupControlThemeHead,
@@ -11415,6 +11760,7 @@ export {
   updateClerkUserMetadataByEmail,
   validateAdmissionGrantDocument,
   validateBuilderLibraryDocument,
+  validateCourseSettings,
   validateEmailReadiness,
   validateGiftOfferCatalog,
   validateMemberContentDocument,