@aglyn/aglyn 1.0.0-beta.160 → 1.0.0-beta.162

package/src/lib/app-utils/email-state.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Every state, weakest first. */
+export declare const EMAIL_STATE_STATUSES: readonly ["ok", "bounced", "blocked", "unsubscribed", "complained", "do_not_contact"];
+export type EmailStateStatus = (typeof EMAIL_STATE_STATUSES)[number];
+/** Which sender's verdict it is. */
+export type EmailStateSource = 'sequence' | 'campaign' | 'member';
+/** The field on the lead and the contact. */
+export declare const EMAIL_STATE_FIELD = "emailState";
+export interface EmailState {
+    status: EmailStateStatus;
+    /** When the verdict was given, epoch ms. */
+    atMs: number;
+    source: EmailStateSource;
+    /** The sender's own words: the bounce's diagnostic, a member's note. */
+    detail: string | null;
+    /** The sequence enrollment it came from, when one did. */
+    enrollmentId?: string;
+}
+/** How a state reads on the chip — typed so a state cannot ship unlabeled. */
+export declare const EMAIL_STATE_LABELS: Record<EmailStateStatus, string>;
+export declare function isEmailStateStatus(value: unknown): value is EmailStateStatus;
+/** The state a record holds, held to its shape, or `null` when it holds none. */
+export declare function readEmailState(record: Record<string, unknown> | null | undefined): EmailState | null;
+/** Whether the state means the address must not be emailed by hand. */
+export declare function emailStateForbidsEmail(state: EmailState | null | undefined): boolean;
+/**
+ * The state a record holds after one more verdict: the incoming one when it
+ * ranks at least as high as the current — a fresh bounce replaces an old
+ * one, a block replaces a bounce, a member's mark replaces anything — else
+ * the current. `force` writes the incoming state whatever stands, which is
+ * how a release lands.
+ */
+export declare function nextEmailState(current: EmailState | null | undefined, incoming: EmailState, options?: {
+    force?: boolean;
+}): EmailState;
+/** When the verdict was given, as the chip's tooltip and the refusal say it. */
+export declare function emailStateWhen(state: Pick<EmailState, 'atMs'>): string;
+/**
+ * Why the record must not be emailed, in one sentence a disabled button or
+ * a refused enrollment can show — or `null` when it may be.
+ */
+export declare function emailStateRefusal(state: EmailState | null | undefined): string | null;

package/src/lib/app-utils/email-state.js

@@ -0,0 +1,136 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /*==========================================
+ * A RECORD'S EMAIL STATE (AGL-3245).
+ *
+ * The lists the senders consult — the platform suppression list, a site's
+ * suppressions, an organization's do-not-contact list — are keyed by a
+ * hash nobody can read. The record a person opens is the lead or the
+ * contact, and until now it said nothing: an address that hard-bounced at
+ * 10:30 still read as "Sent" at 12:30, and a member reading it would have
+ * emailed the person again by hand.
+ *
+ * So the record carries `emailState`: what the last verdict on its address
+ * was, when, from which sender, and in the sender's own words. It is
+ * WRITTEN BY THE PLATFORM ONLY — the outreach runtime, the campaign
+ * webhook, a member's do-not-contact mark — never by a form, an import or
+ * the record's own editor, and the rules hold clients off the field. It
+ * is a mirror of the lists, not a list: a send still asks the lists, and
+ * the record says what they hold in words a person can act on.
+ *
+ * Absent means nothing is known. `ok` is a verdict too — a release, a
+ * confirmed re-subscription — and it is the one state that never
+ * overwrites a refusal on its own: the ranking below decides.
+ *==========================================*/ /** Every state, weakest first. */ export const EMAIL_STATE_STATUSES = [
+    /** The address may be emailed: released, or confirmed again. */ 'ok',
+    /** Mail to it bounced for good: the mailbox does not exist. */ 'bounced',
+    /** The recipient's mail gateway refused the sender on policy or reputation. */ 'blocked',
+    /** The unsubscribe link or header was used. */ 'unsubscribed',
+    /** A reply called the email spam, or the recipient reported it. */ 'complained',
+    /** On the organization's do-not-contact list — a member's or the runtime's entry. */ 'do_not_contact'
+];
+/** The field on the lead and the contact. */ export const EMAIL_STATE_FIELD = 'emailState';
+/** How a state reads on the chip — typed so a state cannot ship unlabeled. */ export const EMAIL_STATE_LABELS = {
+    ok: 'Email OK',
+    bounced: 'Bounced',
+    blocked: 'Blocked by their mail gateway',
+    unsubscribed: 'Unsubscribed',
+    complained: 'Marked as spam',
+    do_not_contact: 'Do not contact'
+};
+/**
+ * The rank a later verdict must reach to replace an earlier one. A member's
+ * do-not-contact mark stands over every automatic verdict; a complaint
+ * over an unsubscribe, which is the person's own act over a server's; a
+ * block over a bounce, since the block names the whole domain; and `ok`
+ * over nothing — a release is written on purpose, by a path that forces it.
+ */ const EMAIL_STATE_RANK = {
+    ok: 0,
+    bounced: 1,
+    blocked: 2,
+    unsubscribed: 3,
+    complained: 4,
+    do_not_contact: 5
+};
+export function isEmailStateStatus(value) {
+    return typeof value === 'string' && EMAIL_STATE_STATUSES.includes(value);
+}
+/** The state a record holds, held to its shape, or `null` when it holds none. */ export function readEmailState(record) {
+    const raw = record == null ? void 0 : record[EMAIL_STATE_FIELD];
+    if (!raw || typeof raw !== 'object') return null;
+    const state = raw;
+    if (!isEmailStateStatus(state['status'])) return null;
+    const atMs = Number(state['atMs']);
+    const source = state['source'];
+    const enrollmentId = typeof state['enrollmentId'] === 'string' && state['enrollmentId'] ? state['enrollmentId'] : undefined;
+    return _extends({
+        status: state['status'],
+        atMs: Number.isFinite(atMs) && atMs > 0 ? atMs : 0,
+        source: source === 'sequence' || source === 'campaign' || source === 'member' ? source : 'campaign',
+        detail: typeof state['detail'] === 'string' && state['detail'] ? state['detail'] : null
+    }, enrollmentId ? {
+        enrollmentId
+    } : {});
+}
+/** Whether the state means the address must not be emailed by hand. */ export function emailStateForbidsEmail(state) {
+    return Boolean(state) && (state == null ? void 0 : state.status) !== 'ok';
+}
+/**
+ * The state a record holds after one more verdict: the incoming one when it
+ * ranks at least as high as the current — a fresh bounce replaces an old
+ * one, a block replaces a bounce, a member's mark replaces anything — else
+ * the current. `force` writes the incoming state whatever stands, which is
+ * how a release lands.
+ */ export function nextEmailState(current, incoming, options = {}) {
+    if (!current || options.force) return incoming;
+    return EMAIL_STATE_RANK[incoming.status] >= EMAIL_STATE_RANK[current.status] ? incoming : current;
+}
+/** When the verdict was given, as the chip's tooltip and the refusal say it. */ export function emailStateWhen(state) {
+    if (!state.atMs) return '';
+    try {
+        return new Intl.DateTimeFormat('en-US', {
+            dateStyle: 'medium'
+        }).format(state.atMs);
+    } catch (unused) {
+        return new Date(state.atMs).toDateString();
+    }
+}
+/**
+ * Why the record must not be emailed, in one sentence a disabled button or
+ * a refused enrollment can show — or `null` when it may be.
+ */ export function emailStateRefusal(state) {
+    if (!state || !emailStateForbidsEmail(state)) return null;
+    const when = emailStateWhen(state);
+    const since = when ? ` on ${when}` : '';
+    const said = state.detail ? ` ${state.detail}` : '';
+    switch(state.status){
+        case 'bounced':
+            return `Email to this address bounced${since}: the mailbox does not exist.${said}`;
+        case 'blocked':
+            return `Their mail gateway blocked email to this address${since}.${said}`;
+        case 'unsubscribed':
+            return `They unsubscribed${since}.${said}`;
+        case 'complained':
+            return `They marked an email as spam${since}.${said}`;
+        case 'do_not_contact':
+            return `On the do-not-contact list${since}.${said}`;
+        default:
+            return null;
+    }
+}
+
+//# sourceMappingURL=email-state.js.map

package/src/lib/app-utils/email-state.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * A RECORD'S EMAIL STATE (AGL-3245).\n *\n * The lists the senders consult — the platform suppression list, a site's\n * suppressions, an organization's do-not-contact list — are keyed by a\n * hash nobody can read. The record a person opens is the lead or the\n * contact, and until now it said nothing: an address that hard-bounced at\n * 10:30 still read as \"Sent\" at 12:30, and a member reading it would have\n * emailed the person again by hand.\n *\n * So the record carries `emailState`: what the last verdict on its address\n * was, when, from which sender, and in the sender's own words. It is\n * WRITTEN BY THE PLATFORM ONLY — the outreach runtime, the campaign\n * webhook, a member's do-not-contact mark — never by a form, an import or\n * the record's own editor, and the rules hold clients off the field. It\n * is a mirror of the lists, not a list: a send still asks the lists, and\n * the record says what they hold in words a person can act on.\n *\n * Absent means nothing is known. `ok` is a verdict too — a release, a\n * confirmed re-subscription — and it is the one state that never\n * overwrites a refusal on its own: the ranking below decides.\n *==========================================*/\n\n/** Every state, weakest first. */\nexport const EMAIL_STATE_STATUSES = [\n  /** The address may be emailed: released, or confirmed again. */\n  'ok',\n  /** Mail to it bounced for good: the mailbox does not exist. */\n  'bounced',\n  /** The recipient's mail gateway refused the sender on policy or reputation. */\n  'blocked',\n  /** The unsubscribe link or header was used. */\n  'unsubscribed',\n  /** A reply called the email spam, or the recipient reported it. */\n  'complained',\n  /** On the organization's do-not-contact list — a member's or the runtime's entry. */\n  'do_not_contact',\n] as const\n\nexport type EmailStateStatus = (typeof EMAIL_STATE_STATUSES)[number]\n\n/** Which sender's verdict it is. */\nexport type EmailStateSource = 'sequence' | 'campaign' | 'member'\n\n/** The field on the lead and the contact. */\nexport const EMAIL_STATE_FIELD = 'emailState'\n\nexport interface EmailState {\n  status: EmailStateStatus\n  /** When the verdict was given, epoch ms. */\n  atMs: number\n  source: EmailStateSource\n  /** The sender's own words: the bounce's diagnostic, a member's note. */\n  detail: string | null\n  /** The sequence enrollment it came from, when one did. */\n  enrollmentId?: string\n}\n\n/** How a state reads on the chip — typed so a state cannot ship unlabeled. */\nexport const EMAIL_STATE_LABELS: Record<EmailStateStatus, string> = {\n  ok: 'Email OK',\n  bounced: 'Bounced',\n  blocked: 'Blocked by their mail gateway',\n  unsubscribed: 'Unsubscribed',\n  complained: 'Marked as spam',\n  do_not_contact: 'Do not contact',\n}\n\n/**\n * The rank a later verdict must reach to replace an earlier one. A member's\n * do-not-contact mark stands over every automatic verdict; a complaint\n * over an unsubscribe, which is the person's own act over a server's; a\n * block over a bounce, since the block names the whole domain; and `ok`\n * over nothing — a release is written on purpose, by a path that forces it.\n */\nconst EMAIL_STATE_RANK: Record<EmailStateStatus, number> = {\n  ok: 0,\n  bounced: 1,\n  blocked: 2,\n  unsubscribed: 3,\n  complained: 4,\n  do_not_contact: 5,\n}\n\nexport function isEmailStateStatus(value: unknown): value is EmailStateStatus {\n  return typeof value === 'string' && (EMAIL_STATE_STATUSES as readonly string[]).includes(value)\n}\n\n/** The state a record holds, held to its shape, or `null` when it holds none. */\nexport function readEmailState(record: Record<string, unknown> | null | undefined): EmailState | null {\n  const raw = record?.[EMAIL_STATE_FIELD]\n  if (!raw || typeof raw !== 'object') return null\n  const state = raw as Record<string, unknown>\n  if (!isEmailStateStatus(state['status'])) return null\n  const atMs = Number(state['atMs'])\n  const source = state['source']\n  const enrollmentId = typeof state['enrollmentId'] === 'string' && state['enrollmentId'] ? state['enrollmentId'] : undefined\n  return {\n    status: state['status'],\n    atMs: Number.isFinite(atMs) && atMs > 0 ? atMs : 0,\n    source: source === 'sequence' || source === 'campaign' || source === 'member' ? source : 'campaign',\n    detail: typeof state['detail'] === 'string' && state['detail'] ? state['detail'] : null,\n    ...(enrollmentId ? { enrollmentId } : {}),\n  }\n}\n\n/** Whether the state means the address must not be emailed by hand. */\nexport function emailStateForbidsEmail(state: EmailState | null | undefined): boolean {\n  return Boolean(state) && state?.status !== 'ok'\n}\n\n/**\n * The state a record holds after one more verdict: the incoming one when it\n * ranks at least as high as the current — a fresh bounce replaces an old\n * one, a block replaces a bounce, a member's mark replaces anything — else\n * the current. `force` writes the incoming state whatever stands, which is\n * how a release lands.\n */\nexport function nextEmailState(\n  current: EmailState | null | undefined,\n  incoming: EmailState,\n  options: { force?: boolean } = {},\n): EmailState {\n  if (!current || options.force) return incoming\n  return EMAIL_STATE_RANK[incoming.status] >= EMAIL_STATE_RANK[current.status] ? incoming : current\n}\n\n/** When the verdict was given, as the chip's tooltip and the refusal say it. */\nexport function emailStateWhen(state: Pick<EmailState, 'atMs'>): string {\n  if (!state.atMs) return ''\n  try {\n    return new Intl.DateTimeFormat('en-US', { dateStyle: 'medium' }).format(state.atMs)\n  } catch {\n    return new Date(state.atMs).toDateString()\n  }\n}\n\n/**\n * Why the record must not be emailed, in one sentence a disabled button or\n * a refused enrollment can show — or `null` when it may be.\n */\nexport function emailStateRefusal(state: EmailState | null | undefined): string | null {\n  if (!state || !emailStateForbidsEmail(state)) return null\n  const when = emailStateWhen(state)\n  const since = when ? ` on ${when}` : ''\n  const said = state.detail ? ` ${state.detail}` : ''\n  switch (state.status) {\n    case 'bounced':\n      return `Email to this address bounced${since}: the mailbox does not exist.${said}`\n    case 'blocked':\n      return `Their mail gateway blocked email to this address${since}.${said}`\n    case 'unsubscribed':\n      return `They unsubscribed${since}.${said}`\n    case 'complained':\n      return `They marked an email as spam${since}.${said}`\n    case 'do_not_contact':\n      return `On the do-not-contact list${since}.${said}`\n    default:\n      return null\n  }\n}\n"],"names":["EMAIL_STATE_STATUSES","EMAIL_STATE_FIELD","EMAIL_STATE_LABELS","ok","bounced","blocked","unsubscribed","complained","do_not_contact","EMAIL_STATE_RANK","isEmailStateStatus","value","includes","readEmailState","record","raw","state","atMs","Number","source","enrollmentId","undefined","status","isFinite","detail","emailStateForbidsEmail","Boolean","nextEmailState","current","incoming","options","force","emailStateWhen","Intl","DateTimeFormat","dateStyle","format","Date","toDateString","emailStateRefusal","when","since","said"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;4CAqB4C,GAE5C,gCAAgC,GAChC,OAAO,MAAMA,uBAAuB;IAClC,8DAA8D,GAC9D;IACA,6DAA6D,GAC7D;IACA,6EAA6E,GAC7E;IACA,6CAA6C,GAC7C;IACA,iEAAiE,GACjE;IACA,mFAAmF,GACnF;CACD,CAAS;AAOV,2CAA2C,GAC3C,OAAO,MAAMC,oBAAoB,aAAY;AAa7C,4EAA4E,GAC5E,OAAO,MAAMC,qBAAuD;IAClEC,IAAI;IACJC,SAAS;IACTC,SAAS;IACTC,cAAc;IACdC,YAAY;IACZC,gBAAgB;AAClB,EAAC;AAED;;;;;;CAMC,GACD,MAAMC,mBAAqD;IACzDN,IAAI;IACJC,SAAS;IACTC,SAAS;IACTC,cAAc;IACdC,YAAY;IACZC,gBAAgB;AAClB;AAEA,OAAO,SAASE,mBAAmBC,KAAc;IAC/C,OAAO,OAAOA,UAAU,YAAY,AAACX,qBAA2CY,QAAQ,CAACD;AAC3F;AAEA,+EAA+E,GAC/E,OAAO,SAASE,eAAeC,MAAkD;IAC/E,MAAMC,MAAMD,0BAAAA,MAAQ,CAACb,kBAAkB;IACvC,IAAI,CAACc,OAAO,OAAOA,QAAQ,UAAU,OAAO;IAC5C,MAAMC,QAAQD;IACd,IAAI,CAACL,mBAAmBM,KAAK,CAAC,SAAS,GAAG,OAAO;IACjD,MAAMC,OAAOC,OAAOF,KAAK,CAAC,OAAO;IACjC,MAAMG,SAASH,KAAK,CAAC,SAAS;IAC9B,MAAMI,eAAe,OAAOJ,KAAK,CAAC,eAAe,KAAK,YAAYA,KAAK,CAAC,eAAe,GAAGA,KAAK,CAAC,eAAe,GAAGK;IAClH,OAAO;QACLC,QAAQN,KAAK,CAAC,SAAS;QACvBC,MAAMC,OAAOK,QAAQ,CAACN,SAASA,OAAO,IAAIA,OAAO;QACjDE,QAAQA,WAAW,cAAcA,WAAW,cAAcA,WAAW,WAAWA,SAAS;QACzFK,QAAQ,OAAOR,KAAK,CAAC,SAAS,KAAK,YAAYA,KAAK,CAAC,SAAS,GAAGA,KAAK,CAAC,SAAS,GAAG;OAC/EI,eAAe;QAAEA;IAAa,IAAI,CAAC;AAE3C;AAEA,qEAAqE,GACrE,OAAO,SAASK,uBAAuBT,KAAoC;IACzE,OAAOU,QAAQV,UAAUA,CAAAA,yBAAAA,MAAOM,MAAM,MAAK;AAC7C;AAEA;;;;;;CAMC,GACD,OAAO,SAASK,eACdC,OAAsC,EACtCC,QAAoB,EACpBC,UAA+B,CAAC,CAAC;IAEjC,IAAI,CAACF,WAAWE,QAAQC,KAAK,EAAE,OAAOF;IACtC,OAAOpB,gBAAgB,CAACoB,SAASP,MAAM,CAAC,IAAIb,gBAAgB,CAACmB,QAAQN,MAAM,CAAC,GAAGO,WAAWD;AAC5F;AAEA,8EAA8E,GAC9E,OAAO,SAASI,eAAehB,KAA+B;IAC5D,IAAI,CAACA,MAAMC,IAAI,EAAE,OAAO;IACxB,IAAI;QACF,OAAO,IAAIgB,KAAKC,cAAc,CAAC,SAAS;YAAEC,WAAW;QAAS,GAAGC,MAAM,CAACpB,MAAMC,IAAI;IACpF,EAAE,eAAM;QACN,OAAO,IAAIoB,KAAKrB,MAAMC,IAAI,EAAEqB,YAAY;IAC1C;AACF;AAEA;;;CAGC,GACD,OAAO,SAASC,kBAAkBvB,KAAoC;IACpE,IAAI,CAACA,SAAS,CAACS,uBAAuBT,QAAQ,OAAO;IACrD,MAAMwB,OAAOR,eAAehB;IAC5B,MAAMyB,QAAQD,OAAO,CAAC,IAAI,EAAEA,MAAM,GAAG;IACrC,MAAME,OAAO1B,MAAMQ,MAAM,GAAG,CAAC,CAAC,EAAER,MAAMQ,MAAM,EAAE,GAAG;IACjD,OAAQR,MAAMM,MAAM;QAClB,KAAK;YACH,OAAO,CAAC,6BAA6B,EAAEmB,MAAM,6BAA6B,EAAEC,MAAM;QACpF,KAAK;YACH,OAAO,CAAC,gDAAgD,EAAED,MAAM,CAAC,EAAEC,MAAM;QAC3E,KAAK;YACH,OAAO,CAAC,iBAAiB,EAAED,MAAM,CAAC,EAAEC,MAAM;QAC5C,KAAK;YACH,OAAO,CAAC,4BAA4B,EAAED,MAAM,CAAC,EAAEC,MAAM;QACvD,KAAK;YACH,OAAO,CAAC,0BAA0B,EAAED,MAAM,CAAC,EAAEC,MAAM;QACrD;YACE,OAAO;IACX;AACF"}

package/src/lib/app-utils/health-report.d.ts

@@ -1517,6 +1517,34 @@ export declare const SIGNUP_CANARY_ORG_SLUG_PREFIX = "signup-canary-";
  * number looks wrong.
  */
 export declare function isSignupCanaryOrgSlug(slug: string | null | undefined): boolean;
+/**
+ * The plus tag every canary address carries.
+ *
+ * Identity Platform will not reuse an address, so the walk stamps a fresh one
+ * per run by appending to the LOCAL PART of `SIGNUP_CANARY_EMAIL`:
+ * `name+signup-canary@example.com` becomes
+ * `name+signup-canary-m2rso9ab12@example.com`, which still reaches the same
+ * mailbox. The tag is therefore the only part of a canary account that the
+ * console can recognize at the moment it first sees one — there is no org yet,
+ * no claim, and nothing on the token that says CI.
+ *
+ * The address is operator-supplied, so this is a convention rather than a
+ * fact, and `tools/e2e/signup-canary.mjs` is what makes it one: it refuses to
+ * start on a base address whose tag is not this. Held together by
+ * `apps/console/specs/signup-canary-marker-wiring.spec.ts`, exactly as the
+ * slug prefix above is.
+ */
+export declare const SIGNUP_CANARY_EMAIL_TAG = "signup-canary";
+/**
+ * Is this sign-up the canary's own?
+ *
+ * The cost mirrors the slug prefix's: a stranger who signs up as
+ * `them+signup-canary@example.com` goes unannounced. That is bounded to the
+ * one address, it cannot hide anything staff need — the account still exists,
+ * still appears in the admin user list, and still bills — and it is the price
+ * of a check that needs no secret and no second code path.
+ */
+export declare function isSignupCanaryEmail(email: string | null | undefined): boolean;
 /**
  * How old the last walk may be before the check goes red.
  *

package/src/lib/app-utils/health-report.js

@@ -1806,6 +1806,42 @@ export async function writeCronBeat(store, jobId, now = Date.now()) {
  */ export function isSignupCanaryOrgSlug(slug) {
     return typeof slug === 'string' && slug.startsWith(SIGNUP_CANARY_ORG_SLUG_PREFIX);
 }
+/**
+ * The plus tag every canary address carries.
+ *
+ * Identity Platform will not reuse an address, so the walk stamps a fresh one
+ * per run by appending to the LOCAL PART of `SIGNUP_CANARY_EMAIL`:
+ * `name+signup-canary@example.com` becomes
+ * `name+signup-canary-m2rso9ab12@example.com`, which still reaches the same
+ * mailbox. The tag is therefore the only part of a canary account that the
+ * console can recognize at the moment it first sees one — there is no org yet,
+ * no claim, and nothing on the token that says CI.
+ *
+ * The address is operator-supplied, so this is a convention rather than a
+ * fact, and `tools/e2e/signup-canary.mjs` is what makes it one: it refuses to
+ * start on a base address whose tag is not this. Held together by
+ * `apps/console/specs/signup-canary-marker-wiring.spec.ts`, exactly as the
+ * slug prefix above is.
+ */ export const SIGNUP_CANARY_EMAIL_TAG = 'signup-canary';
+/**
+ * Is this sign-up the canary's own?
+ *
+ * The cost mirrors the slug prefix's: a stranger who signs up as
+ * `them+signup-canary@example.com` goes unannounced. That is bounded to the
+ * one address, it cannot hide anything staff need — the account still exists,
+ * still appears in the admin user list, and still bills — and it is the price
+ * of a check that needs no secret and no second code path.
+ */ export function isSignupCanaryEmail(email) {
+    var _email_toLowerCase_split_;
+    if (typeof email !== 'string') return false;
+    const local = (_email_toLowerCase_split_ = email.toLowerCase().split('@')[0]) != null ? _email_toLowerCase_split_ : '';
+    const plus = local.indexOf('+');
+    if (plus < 0) return false;
+    // `startsWith`, not equality: the walk's own address is the base tag plus a
+    // stamp, and the base address itself must match too — a human reading the
+    // mailbox should not find the two classified differently.
+    return local.slice(plus + 1).startsWith(SIGNUP_CANARY_EMAIL_TAG);
+}
 /**
  * How old the last walk may be before the check goes red.
  *