@aglyn/aglyn 1.0.0-beta.219 → 1.0.0-beta.221

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/aglyn",
-  "version": "1.0.0-beta.219",
+  "version": "1.0.0-beta.221",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -33,16 +33,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.219",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.219",
-    "@aglyn/shared-data-types": "1.0.0-beta.219",
-    "@aglyn/shared-util-email": "1.0.0-beta.219",
-    "@aglyn/shared-util-first-touch": "1.0.0-beta.219",
-    "@aglyn/shared-util-http": "1.0.0-beta.219",
-    "@aglyn/shared-util-logger": "1.0.0-beta.219",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.219",
-    "@aglyn/shared-util-tools": "1.0.0-beta.219",
-    "@aglyn/shared-util-vendor": "1.0.0-beta.219",
+    "@aglyn/shared-data-enums": "1.0.0-beta.221",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.221",
+    "@aglyn/shared-data-types": "1.0.0-beta.221",
+    "@aglyn/shared-util-email": "1.0.0-beta.221",
+    "@aglyn/shared-util-first-touch": "1.0.0-beta.221",
+    "@aglyn/shared-util-http": "1.0.0-beta.221",
+    "@aglyn/shared-util-logger": "1.0.0-beta.221",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.221",
+    "@aglyn/shared-util-tools": "1.0.0-beta.221",
+    "@aglyn/shared-util-vendor": "1.0.0-beta.221",
     "@data-driven-forms/react-form-renderer": "^4.2.0",
     "@msgpack/msgpack": "^3.1.3",
     "@types/unist": "^3.0.3",
@@ -58,7 +58,7 @@
     "@mui/material": "^9.3.1",
     "@mui/system": "^9.2.0",
     "firebase": "^12.18.0",
-    "next": "16.3.3",
+    "next": "^16.3.3",
     "react": "^19.2.8"
   },
   "peerDependenciesMeta": {

package/src/lib/app-utils/actions.d.ts

@@ -163,18 +163,6 @@ export type HostActionStep = ClientInteractionStep | ServerActionStep;
  */
 export declare const FLOW_SUSPENDING_STEP_TYPES: ReadonlySet<HostActionStepType>;
 export declare function isFlowSuspendingStep(step: HostActionStep): boolean;
-/**
- * The steps that act on the CRM (AGL-2605) — named as a set because the
- * executor dispatches all five to one module and the docs list them as one
- * group, and a step added to the union but not here would be a server step
- * the executor silently skipped.
- */
-export declare const CRM_ACTION_STEP_TYPES: ReadonlySet<HostActionStepType>;
-/** The CRM steps, as the type the executor narrows to. */
-export type CrmActionStep = Extract<HostActionStep, {
-    type: 'setContactStage' | 'addContactTag' | 'assignContactOwner' | 'createCrmTask' | 'logCrmActivity';
-}>;
-export declare function isCrmActionStep(step: HostActionStep): step is CrmActionStep;
 /** Longest tag an automation may write — the console's own tag field cap. */
 export declare const CONTACT_TAG_MAX_LENGTH = 60;
 export declare const CRM_ACTION_RECIPE_IDS: readonly ["welcomeNewLead", "followUpWonDeal", "reengageStaleLead", "tagByForm"];
@@ -295,8 +283,6 @@ export interface HostAction extends SiteInteraction<HostActionStep> {
      */
     recipe?: CrmActionRecipeId | null;
 }
-/** Custom-event chaining depth cap (mirrors CROSS_MAX_DEPTH). */
-export declare const ACTION_MAX_EVENT_DEPTH = 3;
 /**
  * The shortest and longest a flow may wait.
  *
@@ -311,31 +297,6 @@ export declare const ACTION_MAX_EVENT_DEPTH = 3;
 export declare const FLOW_WAIT_MIN_MINUTES = 1;
 export declare const FLOW_WAIT_MAX_MINUTES: number;
 export declare const HOST_ACTION_STEP_LABELS: Record<HostActionStepType, string>;
-/**
- * Past-tense phrases for a run summary (AGL-2171).
- *
- * `HOST_ACTION_STEP_LABELS` above names what a step WILL do, in the
- * imperative, for a `Do` select — "Send an email". A run history is the
- * opposite tense and a different audience: it says what already happened,
- * on one line, several steps at a time. `/product/workflows` advertises
- * exactly that shape — `Sent email · saved to Leads · webhook 200`.
- *
- * Two maps rather than one derived from the other, because "Send a webhook
- * (Business)" cannot be mechanically turned into "webhook" — the plan
- * suffix is part of the picker's label and has no business in a log line.
- * Only the steps a SERVER run can perform appear here; the client-side
- * steps run in the visitor's browser and never reach the activity write.
- */
-export declare const HOST_ACTION_STEP_OUTCOMES: Partial<Record<HostActionStepType, string>>;
-/**
- * One step's line in a run summary, with the detail that makes it useful.
- *
- * `saved to Leads` beats `saved to dataset`, and `webhook 200` beats
- * `webhook` — the status code is the entire reason anyone opens a run
- * history after a webhook, and it was being discarded on the line it
- * arrived.
- */
-export declare function describeStepOutcome(type: HostActionStepType, detail?: string): string;
 /** A whole number of minutes inside the wait band. */
 export declare function isFlowWaitMinutes(value: unknown): boolean;
 /** True for a custom (non-built-in) event name an action may fire. */
@@ -345,24 +306,5 @@ export declare function isCustomEventName(event: string): boolean;
  * Server and console share this so bad steps never persist or run.
  */
 export declare function validateHostAction(action: HostAction): string | null;
-/**
- * Webhooks (AGL-149) at `hosts/{hostId}/webhooks/{id}`. Outbound entries
- * are targets a `webhookPost` action step delivers to (HMAC-signed);
- * inbound entries mint `/api/hooks/{hostId}/{hookId}` endpoints that run
- * a workflow with the posted JSON in scope. Business tier (`webhooks`
- * flag); Pro can be enabled per-tenant via entitlement overrides.
- */
-export interface HostWebhook {
-    name: string;
-    direction: 'outbound' | 'inbound';
-    /** Outbound delivery URL (https only; checked again at send time). */
-    url?: string;
-    /** Shared secret: signs outbound bodies, verifies inbound callers. */
-    secret?: string;
-    /** Inbound: workflow (by name) enrolled with the payload in scope. */
-    workflowName?: string;
-    enabled?: boolean;
-}
+/** The most webhooks one site keeps; the site create route enforces it. */
 export declare const WEBHOOK_MAX_PER_HOST = 5;
-/** Outbound URLs must be public https — first-line SSRF guard. */
-export declare const WEBHOOK_URL_PATTERN: RegExp;

package/src/lib/app-utils/actions.js

@@ -54,21 +54,6 @@ import { HOST_EVENT_TYPES } from "./host-events.js";
 export function isFlowSuspendingStep(step) {
     return FLOW_SUSPENDING_STEP_TYPES.has(step.type);
 }
-/**
- * The steps that act on the CRM (AGL-2605) — named as a set because the
- * executor dispatches all five to one module and the docs list them as one
- * group, and a step added to the union but not here would be a server step
- * the executor silently skipped.
- */ export const CRM_ACTION_STEP_TYPES = new Set([
-    'setContactStage',
-    'addContactTag',
-    'assignContactOwner',
-    'createCrmTask',
-    'logCrmActivity'
-]);
-export function isCrmActionStep(step) {
-    return CRM_ACTION_STEP_TYPES.has(step.type);
-}
 /** Longest tag an automation may write — the console's own tag field cap. */ export const CONTACT_TAG_MAX_LENGTH = 60;
 /*
  * THE RECIPES (AGL-2626).
@@ -125,6 +110,11 @@ export const CRM_ACTION_RECIPES = [
      * The email comes before any wait, which makes it an immediate reply to
      * what the visitor just did — transactional, sent from the org's own
      * identity, to the address the event carries.
+     *
+     * Its words promise no response time. The org hub installs this recipe
+     * into a site without its editor opening, so the business never reads
+     * the sentence it is sending, and a "within a day" written here would be
+     * a commitment made on its behalf that nothing in the run keeps.
      */ build: ()=>({
                 recipe: 'welcomeNewLead',
                 name: 'Welcome a new lead',
@@ -153,7 +143,7 @@ export const CRM_ACTION_RECIPES = [
                     {
                         type: 'sendEmail',
                         subject: 'Thanks for getting in touch',
-                        body: 'Thanks for reaching out — we have your message, and someone ' + 'from our team will be in touch within a day.'
+                        body: 'Thanks for reaching out. We have your message and will reply ' + 'to this email address.'
                     },
                     {
                         type: 'addContactTag',
@@ -335,7 +325,6 @@ export function hostActionDocument(action) {
         ...suspendAt < 0 ? list : list.slice(0, suspendAt)
     ];
 }
-/** Custom-event chaining depth cap (mirrors CROSS_MAX_DEPTH). */ export const ACTION_MAX_EVENT_DEPTH = 3;
 /**
  * The shortest and longest a flow may wait.
  *
@@ -390,59 +379,6 @@ export const HOST_ACTION_STEP_LABELS = {
     createCrmTask: 'Create a CRM task',
     logCrmActivity: 'Log a CRM activity'
 };
-/**
- * Past-tense phrases for a run summary (AGL-2171).
- *
- * `HOST_ACTION_STEP_LABELS` above names what a step WILL do, in the
- * imperative, for a `Do` select — "Send an email". A run history is the
- * opposite tense and a different audience: it says what already happened,
- * on one line, several steps at a time. `/product/workflows` advertises
- * exactly that shape — `Sent email · saved to Leads · webhook 200`.
- *
- * Two maps rather than one derived from the other, because "Send a webhook
- * (Business)" cannot be mechanically turned into "webhook" — the plan
- * suffix is part of the picker's label and has no business in a log line.
- * Only the steps a SERVER run can perform appear here; the client-side
- * steps run in the visitor's browser and never reach the activity write.
- */ export const HOST_ACTION_STEP_OUTCOMES = {
-    runWorkflow: 'ran workflow',
-    siteAlert: 'showed an alert',
-    customEvent: 'fired an event',
-    datasetAppend: 'saved to dataset',
-    updateDataset: 'updated dataset',
-    webhookPost: 'webhook',
-    sendEmail: 'sent email',
-    notifyAdmins: 'notified admins',
-    enrollList: 'enrolled in list',
-    assignCampaign: 'assigned to campaign',
-    wait: 'waiting',
-    waitForEvent: 'waiting for',
-    exitFlow: 'ended the flow',
-    setContactStage: 'set stage',
-    addContactTag: 'tagged',
-    assignContactOwner: 'assigned owner',
-    createCrmTask: 'created task',
-    logCrmActivity: 'logged activity'
-};
-/**
- * One step's line in a run summary, with the detail that makes it useful.
- *
- * `saved to Leads` beats `saved to dataset`, and `webhook 200` beats
- * `webhook` — the status code is the entire reason anyone opens a run
- * history after a webhook, and it was being discarded on the line it
- * arrived.
- */ export function describeStepOutcome(type, detail) {
-    var _HOST_ACTION_STEP_OUTCOMES_type;
-    const base = (_HOST_ACTION_STEP_OUTCOMES_type = HOST_ACTION_STEP_OUTCOMES[type]) != null ? _HOST_ACTION_STEP_OUTCOMES_type : String(type);
-    const trimmed = detail == null ? void 0 : detail.trim();
-    if (!trimmed) return base;
-    if (type === 'datasetAppend' || type === 'updateDataset') {
-        // `saved to dataset` + `Leads` reads as `saved to Leads`, not
-        // `saved to dataset Leads`.
-        return `${base.replace(/ dataset$/, '')} ${trimmed}`;
-    }
-    return `${base} ${trimmed}`;
-}
 /** A whole number of minutes inside the wait band. */ export function isFlowWaitMinutes(value) {
     return Number.isInteger(value) && value >= FLOW_WAIT_MIN_MINUTES && value <= FLOW_WAIT_MAX_MINUTES;
 }
@@ -565,7 +501,6 @@ export const HOST_ACTION_STEP_LABELS = {
     }
     return null;
 }
-export const WEBHOOK_MAX_PER_HOST = 5;
-/** Outbound URLs must be public https — first-line SSRF guard. */ export const WEBHOOK_URL_PATTERN = /^https:\/\/(?!localhost)(?!127\.)(?!0\.)(?!10\.)(?!172\.(1[6-9]|2\d|3[01])\.)(?!192\.168\.)(?!169\.254\.)[^\s]+$/i;
+/** The most webhooks one site keeps; the site create route enforces it. */ export const WEBHOOK_MAX_PER_HOST = 5;
 
 //# sourceMappingURL=actions.js.map

package/src/lib/app-utils/actions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/actions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type ContactLifecycleStage,\n  CRM_TASK_MAX_DUE_DAYS,\n  type CrmActivityKind,\n  type CrmTaskKind,\n  isContactLifecycleStage,\n  isCrmActivityKind,\n  isCrmTaskKind,\n} from './crm-kinds'\nimport {\n  type ClientInteractionStep,\n  CUSTOM_EVENT_PATTERN,\n  type InteractionCondition,\n  type InteractionStepGuard,\n  type InteractionTrigger,\n  type SiteAlert,\n  type SiteInteraction,\n  type TriggerCombinator,\n  validateInteraction,\n} from './site-interactions'\nimport { HOST_EVENT_TYPES } from './host-events'\n\n/**\n * Actions builder (AGL-148): HubSpot-style event → action automation on\n * top of the AGL-128 event triggers. An action listens for a host event\n * (built-in or a custom name fired by another action), optionally filters\n * on the payload, and runs an ordered step list. Pure types + validation\n * here; the executor lives in the workflows plugin, where the I/O is.\n *\n * An action is a SITE INTERACTION (`site-interactions.ts`) with server steps\n * added: its trigger, its conditions, its client steps and its storage are\n * the platform's, and are re-exported here for the readers that take both\n * from this module. What is declared below is the automation's own — the\n * server steps, flows, recipes and webhooks.\n */\nexport * from './site-interactions'\n\n/** The automation's names for the platform's interaction shapes. */\nexport type HostActionTriggerCondition = InteractionCondition\nexport type HostActionTrigger = InteractionTrigger\nexport type HostActionStepGuard = InteractionStepGuard\n/** Alert produced by a `siteAlert` step, surfaced to the emitting client. */\nexport type HostActionAlert = SiteAlert\n\n/**\n * The scope key a resumed flow carries to say the wait ended on the CLOCK\n * rather than on the event it was watching for.\n *\n * This is how a `waitForEvent` gets its timeout branch without a nested step\n * list: the flow resumes either way, and the step after it carries a `when`\n * naming this field. Underscored because it shares a namespace with the\n * event payload's own fields, which are merchant-authored form field names.\n */\nexport const FLOW_TIMED_OUT_FIELD = '_waitTimedOut'\n\n/** The steps an automation adds to the platform's client steps: the server's, run by the workflows plugin. */\ntype ServerActionStep = (\n  // Entity references carry a doc id (AGL-261, rename-safe) with the name\n  // kept as a display hint; pre-AGL-261 docs have only the name and the\n  // executor resolves either.\n  | { type: 'runWorkflow'; workflowId?: string; workflowName?: string }\n  | { type: 'customEvent'; eventName: string }\n  | { type: 'datasetAppend'; datasetId?: string; datasetName?: string }\n  | { type: 'webhookPost'; webhookId?: string; webhookName?: string }\n  // Server-side steps (AGL-257).\n  | {\n      type: 'sendEmail'\n      subject: string\n      body: string\n      toField?: string\n      /**\n       * The stream this message belongs to, so a recipient who left it is not\n       * mailed. Absent on every step authored before topics reached the\n       * actions editor, which the executor resolves to the default topic.\n       */\n      topicId?: string\n    }\n  | { type: 'notifyAdmins'; title: string; body?: string }\n  | { type: 'enrollList'; listId?: string; listName?: string }\n  | { type: 'updateDataset'; datasetId?: string; datasetName?: string }\n  | { type: 'assignCampaign'; campaignId?: string; campaignName?: string }\n  /*\n   * THE THREE FLOW STEPS.\n   *\n   * `wait` is the one that matters: without a durable delay an automation is\n   * always trigger → immediate actions, so no welcome series, win-back or\n   * post-purchase follow-up can exist at all. The other two are what make a\n   * delay useful — something to end the flow early, and a wait that ends on\n   * an event instead of on the clock.\n   *\n   * All three are SERVER steps. A delay outlives the page view that started\n   * it by days, so the browser that fired the trigger is long gone by the time\n   * the flow continues; `hostActionStepsForClient` truncates the client's copy\n   * of the step list at the first of these for that reason.\n   */\n  | {\n      type: 'wait'\n      /** Whole minutes to hold before the next step. */\n      delayMinutes: number\n    }\n  | {\n      type: 'waitForEvent'\n      /** The host or custom event that resumes this person's flow. */\n      eventName: string\n      /**\n       * Whole minutes after which the flow continues anyway, with\n       * {@link FLOW_TIMED_OUT_FIELD} true in scope. There is always a\n       * deadline: a wait with no timeout is an enrollment that lives forever.\n       */\n      timeoutMinutes: number\n    }\n  /** Ends the enrollment here. Paired with a `when`, this is the exit branch. */\n  | { type: 'exitFlow' }\n  /*\n   * THE CRM STEPS (AGL-2605).\n   *\n   * Server steps, every one, because each writes a record only the Admin\n   * SDK may write on a visitor's behalf. Each acts on ONE person — the\n   * contact the event names, resolved by `contactId` when the payload\n   * carries one and by `email` otherwise — and each writes inside the\n   * site's own facet or stamps the site's own scope, for the reason\n   * `assignCampaign` gives: a contact row is shared by every site in the\n   * org, and a stage or a tag is one holder's business record. A step whose\n   * event names nobody the site can see does nothing and says so in the run.\n   *\n   * None of them carries a doc-id reference for the reference audit to\n   * check: a stage and a kind are fixed vocabularies, a tag is free text,\n   * and an owner is a member who is resolved at run time.\n   */\n  | { type: 'setContactStage'; lifecycleStage: ContactLifecycleStage }\n  | { type: 'addContactTag'; tag: string }\n  /**\n   * The owner by uid when a member id was typed or a picker wrote the step,\n   * by email when an address was typed; the executor resolves either against\n   * the org's roster, and only the roster (AGL-2614).\n   * Or `roundRobin`, and the owner is the next member of the pool the CRM's\n   * settings keep (AGL-2618) — a step that names nobody and hands the\n   * choice to the rotation, so a stage change can spread its follow-ups\n   * across a team rather than pile them on one rep. The two are exclusive:\n   * a rotation step carries no member, and the validator refuses one that\n   * names both.\n   */\n  | {\n      type: 'assignContactOwner'\n      ownerUid?: string\n      ownerEmail?: string\n      roundRobin?: boolean\n    }\n  | {\n      type: 'createCrmTask'\n      title: string\n      kind: CrmTaskKind\n      /** Days from the run to the due date; `0` is due today. */\n      dueInDays: number\n      /**\n       * Who gets it — by uid or by an address, both resolved against the\n       * roster the way the owner step's are. Neither named, the task goes\n       * to the contact's owner, then to nobody.\n       */\n      assigneeUid?: string\n      assigneeEmail?: string\n    }\n  | { type: 'logCrmActivity'; kind: CrmActivityKind; body: string }\n) & {\n  /** See {@link InteractionStepGuard}. Absent means the step always runs. */\n  when?: InteractionStepGuard | null\n}\n\n/** A step of an automation: one of the platform's client steps, or one of its server steps. */\nexport type HostActionStep = ClientInteractionStep | ServerActionStep\n\n/**\n * The steps that suspend a run and continue it later, from a job beat.\n *\n * Named as a set rather than checked inline because three surfaces have to\n * agree on it: the executor stops here and writes an enrollment, the client\n * payload is truncated here, and the validator refuses a flow that waits\n * without a person to wait for.\n */\nexport const FLOW_SUSPENDING_STEP_TYPES: ReadonlySet<HostActionStepType> =\n  new Set(['wait', 'waitForEvent'] as const)\n\nexport function isFlowSuspendingStep(step: HostActionStep): boolean {\n  return FLOW_SUSPENDING_STEP_TYPES.has(step.type)\n}\n\n/**\n * The steps that act on the CRM (AGL-2605) — named as a set because the\n * executor dispatches all five to one module and the docs list them as one\n * group, and a step added to the union but not here would be a server step\n * the executor silently skipped.\n */\nexport const CRM_ACTION_STEP_TYPES: ReadonlySet<HostActionStepType> = new Set([\n  'setContactStage',\n  'addContactTag',\n  'assignContactOwner',\n  'createCrmTask',\n  'logCrmActivity',\n] as const)\n\n/** The CRM steps, as the type the executor narrows to. */\nexport type CrmActionStep = Extract<\n  HostActionStep,\n  {\n    type:\n      | 'setContactStage'\n      | 'addContactTag'\n      | 'assignContactOwner'\n      | 'createCrmTask'\n      | 'logCrmActivity'\n  }\n>\n\nexport function isCrmActionStep(step: HostActionStep): step is CrmActionStep {\n  return CRM_ACTION_STEP_TYPES.has(step.type)\n}\n\n/** Longest tag an automation may write — the console's own tag field cap. */\nexport const CONTACT_TAG_MAX_LENGTH = 60\n\n/*\n * THE RECIPES (AGL-2626).\n *\n * A recipe is a ready-to-edit action — a trigger, its conditions and an\n * ordered step list — built from the vocabulary the editor already offers\n * and handed to the editor as a draft. Nothing is written until the person\n * saves, and every field is theirs to change first: the recipe decides\n * where the editor starts, not what the site runs.\n *\n * Defined here, beside the step catalog, rather than in the builder, so the\n * docs page that lists the recipes and the menu that offers them read ONE\n * list, and so a step the catalog renames or retires breaks a recipe at\n * compile time rather than in a menu nobody tests.\n *\n * Definitions only. Three of the four are complete as written. `tagByForm`\n * needs a form, and a form belongs to a site (`hosts/{hostId}/forms`), so\n * the picker that supplies it is the builder's business and host-scoped by\n * nature. That is the seam an org-level mount keeps: the recipes are the\n * same at either level, and only the form picker knows where it is.\n */\nexport const CRM_ACTION_RECIPE_IDS = [\n  'welcomeNewLead',\n  'followUpWonDeal',\n  'reengageStaleLead',\n  'tagByForm',\n] as const\n\nexport type CrmActionRecipeId = (typeof CRM_ACTION_RECIPE_IDS)[number]\n\n/** What a recipe is handed before it builds — today only the form `tagByForm` reads. */\nexport interface CrmActionRecipeInput {\n  form?: { id: string; name: string }\n}\n\nexport interface CrmActionRecipe {\n  id: CrmActionRecipeId\n  /** How the recipe reads in the menu; also the action's starting name. */\n  title: string\n  /** One sentence under the title. */\n  description: string\n  /**\n   * What must be picked before the recipe can be built. A recipe that needs\n   * nothing opens the editor at once; one that needs a form opens a picker\n   * first. Built WITHOUT its pick, such a recipe yields an action the\n   * validator refuses — a condition with no value — rather than one that\n   * saves and then silently matches nothing.\n   */\n  needs?: 'form'\n  /**\n   * A fresh action each call, because the draft is edited in place. The\n   * action carries `recipe: id` — the provenance is the builder's to stamp,\n   * so a writer that saves what it was handed cannot forget it.\n   */\n  build: (input?: CrmActionRecipeInput) => HostAction\n}\n\n/**\n * How long the stale-lead recipe holds before it decides a lead has gone\n * quiet. A week: long enough that a rep who is working the lead has had a\n * chance to move its stage, short enough that a lead nobody touched is\n * still warm when the reminder lands.\n */\nexport const STALE_LEAD_WAIT_MINUTES = 7 * 24 * 60\n\n/**\n * The tag a form's captures get: the form's own name, cut to the tag cap.\n * The name is what the person calls the form, so it is the tag they would\n * have typed; the editor is open to change it before anything is saved.\n */\nexport function crmRecipeTagForForm(formName: string): string {\n  return formName.trim().slice(0, CONTACT_TAG_MAX_LENGTH)\n}\n\nexport const CRM_ACTION_RECIPES: readonly CrmActionRecipe[] = [\n  {\n    id: 'welcomeNewLead',\n    title: 'Welcome a new lead',\n    description:\n      'When a form makes a new contact: rotate in an owner, book a call for ' +\n      'tomorrow, send a thank-you, and tag them website.',\n    /*\n     * The owner first, because the task that follows names no assignee and\n     * so goes to whoever owns the contact when it is created — the member\n     * the rotation just chose. Round robin rather than a named member: a\n     * recipe cannot know who is on the team, and the pool under CRM →\n     * Settings is the one place that does. On a workspace with no pool the\n     * step fails and the run continues, so the call, the email and the tag\n     * still land and the run history says who was not assigned.\n     *\n     * The email comes before any wait, which makes it an immediate reply to\n     * what the visitor just did — transactional, sent from the org's own\n     * identity, to the address the event carries.\n     */\n    build: () => ({\n      recipe: 'welcomeNewLead',\n      name: 'Welcome a new lead',\n      trigger: {\n        event: 'contactCreated',\n        conditions: [{ field: 'source', op: 'equals', value: 'form' }],\n        combinator: 'and',\n      },\n      steps: [\n        { type: 'assignContactOwner', roundRobin: true },\n        {\n          type: 'createCrmTask',\n          title: 'Call the new lead',\n          kind: 'call',\n          dueInDays: 1,\n        },\n        {\n          type: 'sendEmail',\n          subject: 'Thanks for getting in touch',\n          body:\n            'Thanks for reaching out — we have your message, and someone ' +\n            'from our team will be in touch within a day.',\n        },\n        { type: 'addContactTag', tag: 'website' },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'followUpWonDeal',\n    title: 'Follow up a won deal',\n    description:\n      'When a deal is won — which makes the contact a Customer on its own — ' +\n      'book a check-in call a week out.',\n    /*\n     * No stage step (AGL-2641): the win itself floors the contact at\n     * `customer` before `dealWon` is announced, so a step setting the stage\n     * here would at best repeat the write and at worst move an evangelist\n     * back to customer — a SET, which is what the step is, and not the\n     * floor the win applies. The recipe books the follow-up and nothing\n     * else.\n     */\n    build: () => ({\n      recipe: 'followUpWonDeal',\n      name: 'Follow up a won deal',\n      trigger: { event: 'dealWon' },\n      steps: [\n        {\n          type: 'createCrmTask',\n          title: 'Check in with the new customer',\n          kind: 'call',\n          dueInDays: 7,\n        },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'reengageStaleLead',\n    title: 'Re-engage a stale lead',\n    description:\n      'When a contact becomes a lead: wait a week, and if their stage has ' +\n      'not moved, book a call to bring them back.',\n    /*\n     * \"Unless the stage moved on\" is the wait's own event: the flow watches\n     * for the next stage change on this person and gives up after a week.\n     * Resumed by the clock, the run carries `_waitTimedOut`, and the task\n     * step's guard reads it; resumed by the event, the field is absent and\n     * the task is skipped — the lead was worked, and nobody is told to\n     * re-engage somebody who just moved to Sales qualified.\n     */\n    build: () => ({\n      recipe: 'reengageStaleLead',\n      name: 'Re-engage a stale lead',\n      trigger: {\n        event: 'contactStageChanged',\n        conditions: [{ field: 'lifecycleStage', op: 'equals', value: 'lead' }],\n        combinator: 'and',\n      },\n      steps: [\n        {\n          type: 'waitForEvent',\n          eventName: 'contactStageChanged',\n          timeoutMinutes: STALE_LEAD_WAIT_MINUTES,\n        },\n        {\n          type: 'createCrmTask',\n          title: 'Re-engage a lead that has gone quiet',\n          kind: 'call',\n          dueInDays: 1,\n          when: {\n            conditions: [{ field: FLOW_TIMED_OUT_FIELD, op: 'notEmpty' }],\n          },\n        },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'tagByForm',\n    title: 'Tag by form',\n    description:\n      'When a form you pick makes a new contact: tag them with the form’s ' +\n      'name.',\n    needs: 'form',\n    build: (input) => {\n      const form = input?.form\n      return {\n        recipe: 'tagByForm',\n        name: form ? `Tag ${form.name.trim()} submissions` : 'Tag by form',\n        trigger: {\n          event: 'contactCreated',\n          conditions: [{ field: 'formId', op: 'equals', value: form?.id ?? '' }],\n          combinator: 'and',\n        },\n        steps: [\n          { type: 'addContactTag', tag: form ? crmRecipeTagForForm(form.name) : '' },\n        ],\n        enabled: true,\n      }\n    },\n  },\n]\n\n/** The recipe with this id, or null for a string that names none. */\nexport function crmActionRecipe(id: unknown): CrmActionRecipe | null {\n  return CRM_ACTION_RECIPES.find((recipe) => recipe.id === id) ?? null\n}\n\n/**\n * The recipe a STORED action came from, read off its document (AGL-2639).\n *\n * Three answers, and the third is the one that matters. A known id: the\n * action was installed from, or begun as, that recipe. `null`: the action\n * was begun blank, or from a recipe this build no longer knows — the\n * editor wrote the field and said \"no recipe\". `undefined`: the document\n * carries no `recipe` field at all, which is every action saved before the\n * stamp existed. Such an action may well have started from a recipe — the\n * menu opened the editor prefilled long before anything recorded it — so a\n * reader that needs to know whether a site has a recipe treats `undefined`\n * as UNKNOWN, never as absent, and never writes a `null` over it.\n */\nexport function hostActionRecipeId(\n  action: { recipe?: unknown } | null | undefined,\n): CrmActionRecipeId | null | undefined {\n  const stamp = action?.recipe\n  if (stamp === undefined) return undefined\n  return crmActionRecipe(stamp)?.id ?? null\n}\n\n/**\n * A HostAction as the document at `hosts/{hostId}/actions/{id}` holds it.\n *\n * Every optional trigger key is written OUT — a boolean cap as `false`, a\n * cleared list as `null` — because the editor saves with a merge-set, and\n * a merge keeps whatever key the payload omits: a frequency cap switched\n * off, left out of the payload, would stay on. The legacy single\n * `condition` is always nulled; `conditions` has been canonical since the\n * list shape arrived and a document that carried both would have the\n * reader pick. Everything else is the action, unchanged.\n *\n * `recipe` rides along only when the action SAYS something about it: an\n * id or `null`. An action that carries no stamp (an older document, edited\n * and saved again) keeps carrying none — see {@link hostActionRecipeId}\n * for why an absent stamp must not become a `null` one.\n */\nexport interface HostActionDocument extends HostAction {\n  trigger: HostActionTrigger & {\n    oncePerVisitor: boolean\n    oncePerSession: boolean\n    cooldownMinutes: number | null\n    everyTime: boolean\n    condition: null\n    conditions: HostActionTriggerCondition[] | null\n    combinator: TriggerCombinator | null\n  }\n  enabled: boolean\n}\n\nexport function hostActionDocument(action: HostAction): HostActionDocument {\n  const { recipe, ...rest } = action\n  const trigger = action.trigger\n  return {\n    ...rest,\n    trigger: {\n      ...trigger,\n      oncePerVisitor: trigger.oncePerVisitor === true,\n      oncePerSession: trigger.oncePerSession === true,\n      cooldownMinutes:\n        Number(trigger.cooldownMinutes) >= 1 ? Number(trigger.cooldownMinutes) : null,\n      everyTime: trigger.everyTime === true,\n      condition: null,\n      conditions: trigger.conditions ?? null,\n      combinator: trigger.combinator ?? null,\n    },\n    enabled: action.enabled !== false,\n    ...(recipe !== undefined ? { recipe } : {}),\n  }\n}\n\n/**\n * The step list as the visitor's browser may see it.\n *\n * A client step AFTER a wait must never reach the page. The client engine\n * runs its slice of the list immediately, so shipping the whole list would\n * make \"wait three days, then show the popup\" show the popup at once — the\n * delay would appear to work on the server, be ignored in the browser, and\n * the two halves of one authored flow would disagree about when it happened.\n *\n * Truncating rather than filtering: everything past the first wait belongs to\n * a run that has not happened yet, whichever side would have executed it.\n */\nexport function hostActionStepsForClient(\n  steps: readonly HostActionStep[] | undefined | null,\n): HostActionStep[] {\n  const list = steps ?? []\n  const suspendAt = list.findIndex(isFlowSuspendingStep)\n  return [...(suspendAt < 0 ? list : list.slice(0, suspendAt))]\n}\n\nexport type HostActionStepType = HostActionStep['type']\n\n/**\n * `hosts/{hostId}/actions/{id}` doc: a site interaction whose steps may be\n * the automation's server steps as well as the platform's client steps.\n */\nexport interface HostAction extends SiteInteraction<HostActionStep> {\n  /**\n   * The recipe this action was installed from or begun as (AGL-2639), or\n   * `null` for one begun blank. Absent on a document from before the stamp\n   * existed — read it through {@link hostActionRecipeId}, which keeps the\n   * three cases apart.\n   */\n  recipe?: CrmActionRecipeId | null\n}\n\n/** Custom-event chaining depth cap (mirrors CROSS_MAX_DEPTH). */\nexport const ACTION_MAX_EVENT_DEPTH = 3\n\n/**\n * The shortest and longest a flow may wait.\n *\n * The floor is a minute because the resume beat runs on a minute, so anything\n * under one is a delay the scheduler cannot honor and would only read as\n * imprecision. The ceiling is ninety days: long enough for the win-back that\n * is the longest sequence anybody writes, and short enough that an enrollment\n * is not an unbounded lease on a document. A person waiting inside a flow is\n * storage the merchant is not looking at, and a wait measured in years is\n * indistinguishable from one nobody will ever collect.\n */\nexport const FLOW_WAIT_MIN_MINUTES = 1\nexport const FLOW_WAIT_MAX_MINUTES = 90 * 24 * 60\n\nexport const HOST_ACTION_STEP_LABELS: Record<HostActionStepType, string> = {\n  runWorkflow: 'Run a workflow',\n  siteAlert: 'Show a site alert',\n  customEvent: 'Fire a custom event',\n  datasetAppend: 'Write to a dataset',\n  webhookPost: 'Send a webhook (Business)',\n  showOverlay: 'Show a popup or bar',\n  stickyNav: 'Make navigation sticky',\n  addClass: 'Add a CSS class',\n  toggleClass: 'Toggle a CSS class',\n  removeClass: 'Remove a CSS class',\n  showElement: 'Show an element',\n  hideElement: 'Hide an element',\n  toggleElement: 'Show/hide an element',\n  openDrawer: 'Open a drawer',\n  closeDrawer: 'Close a drawer',\n  toggleDrawer: 'Open/close a drawer',\n  openMenu: 'Open a menu',\n  closeMenu: 'Close a menu',\n  toggleMenu: 'Open/close a menu',\n  setAttribute: 'Set an ARIA or data attribute',\n  removeAttribute: 'Remove an ARIA or data attribute',\n  scrollTo: 'Scroll to element',\n  playVideo: 'Play a video',\n  showHtml: 'Show custom HTML',\n  runJs: 'Run custom JS (Business)',\n  redirect: 'Redirect the visitor',\n  trackGaEvent: 'Track an analytics event',\n  sendEmail: 'Send an email',\n  notifyAdmins: 'Notify site admins',\n  enrollList: 'Enroll in a list',\n  updateDataset: 'Update a dataset record',\n  assignCampaign: 'Assign to a campaign',\n  wait: 'Wait',\n  waitForEvent: 'Wait for something to happen',\n  exitFlow: 'End the flow here',\n  setContactStage: 'Set the contact’s lifecycle stage',\n  addContactTag: 'Tag the contact',\n  assignContactOwner: 'Assign the contact an owner',\n  createCrmTask: 'Create a CRM task',\n  logCrmActivity: 'Log a CRM activity',\n}\n\n/**\n * Past-tense phrases for a run summary (AGL-2171).\n *\n * `HOST_ACTION_STEP_LABELS` above names what a step WILL do, in the\n * imperative, for a `Do` select — \"Send an email\". A run history is the\n * opposite tense and a different audience: it says what already happened,\n * on one line, several steps at a time. `/product/workflows` advertises\n * exactly that shape — `Sent email · saved to Leads · webhook 200`.\n *\n * Two maps rather than one derived from the other, because \"Send a webhook\n * (Business)\" cannot be mechanically turned into \"webhook\" — the plan\n * suffix is part of the picker's label and has no business in a log line.\n * Only the steps a SERVER run can perform appear here; the client-side\n * steps run in the visitor's browser and never reach the activity write.\n */\nexport const HOST_ACTION_STEP_OUTCOMES: Partial<\n  Record<HostActionStepType, string>\n> = {\n  runWorkflow: 'ran workflow',\n  siteAlert: 'showed an alert',\n  customEvent: 'fired an event',\n  datasetAppend: 'saved to dataset',\n  updateDataset: 'updated dataset',\n  webhookPost: 'webhook',\n  sendEmail: 'sent email',\n  notifyAdmins: 'notified admins',\n  enrollList: 'enrolled in list',\n  assignCampaign: 'assigned to campaign',\n  wait: 'waiting',\n  waitForEvent: 'waiting for',\n  exitFlow: 'ended the flow',\n  setContactStage: 'set stage',\n  addContactTag: 'tagged',\n  assignContactOwner: 'assigned owner',\n  createCrmTask: 'created task',\n  logCrmActivity: 'logged activity',\n}\n\n/**\n * One step's line in a run summary, with the detail that makes it useful.\n *\n * `saved to Leads` beats `saved to dataset`, and `webhook 200` beats\n * `webhook` — the status code is the entire reason anyone opens a run\n * history after a webhook, and it was being discarded on the line it\n * arrived.\n */\nexport function describeStepOutcome(\n  type: HostActionStepType,\n  detail?: string,\n): string {\n  const base = HOST_ACTION_STEP_OUTCOMES[type] ?? String(type)\n  const trimmed = detail?.trim()\n  if (!trimmed) return base\n  if (type === 'datasetAppend' || type === 'updateDataset') {\n    // `saved to dataset` + `Leads` reads as `saved to Leads`, not\n    // `saved to dataset Leads`.\n    return `${base.replace(/ dataset$/, '')} ${trimmed}`\n  }\n  return `${base} ${trimmed}`\n}\n\n/** A whole number of minutes inside the wait band. */\nexport function isFlowWaitMinutes(value: unknown): boolean {\n  return (\n    Number.isInteger(value) &&\n    (value as number) >= FLOW_WAIT_MIN_MINUTES &&\n    (value as number) <= FLOW_WAIT_MAX_MINUTES\n  )\n}\n\n/** True for a custom (non-built-in) event name an action may fire. */\nexport function isCustomEventName(event: string): boolean {\n  return (\n    !HOST_EVENT_TYPES.includes(event as any) &&\n    CUSTOM_EVENT_PATTERN.test(event)\n  )\n}\n\n/**\n * Validates an action doc shape; returns a human-readable error or null.\n * Server and console share this so bad steps never persist or run.\n */\nexport function validateHostAction(action: HostAction): string | null {\n  if (!action.name?.trim()) return 'Name the action'\n  // A stamp is provenance, and provenance naming a recipe that does not\n  // exist is a document nothing can read back; `null` and absent both pass.\n  if (action.recipe != null && !crmActionRecipe(action.recipe)) {\n    return 'Unknown recipe'\n  }\n  // The trigger, the step guards, the client steps and every declared step's\n  // pick are the platform's to check; the server steps are this module's.\n  return validateInteraction(action, {\n    validateStep: (step, label) => serverStepProblem(step as HostActionStep, label),\n  })\n}\n\n/**\n * A server step's own complaint, or null. A `runWorkflow` step's pick is\n * checked with every other declared step's (`interactionSteps` in\n * `plugins.config.json`), by `validateInteraction`.\n */\nfunction serverStepProblem(step: HostActionStep, label: string): string | null {\n  if (step.type === 'wait' && !isFlowWaitMinutes(step.delayMinutes)) {\n    return `${label}: wait between ${FLOW_WAIT_MIN_MINUTES} minute and ${FLOW_WAIT_MAX_MINUTES} minutes`\n  }\n  if (step.type === 'waitForEvent') {\n    const waited = step.eventName?.trim() ?? ''\n    if (\n      !waited ||\n      (!HOST_EVENT_TYPES.includes(waited as any) && !isCustomEventName(waited))\n    ) {\n      return `${label}: pick the event to wait for`\n    }\n    if (!isFlowWaitMinutes(step.timeoutMinutes)) {\n      return `${label}: give up after ${FLOW_WAIT_MIN_MINUTES}–${FLOW_WAIT_MAX_MINUTES} minutes`\n    }\n  }\n  if (step.type === 'customEvent') {\n    if (!isCustomEventName(step.eventName?.trim() ?? '')) {\n      return `${label}: custom event names are 2–40 letters, digits, dashes`\n    }\n  }\n  if (\n    step.type === 'datasetAppend' &&\n    !step.datasetId?.trim() &&\n    !step.datasetName?.trim()\n  ) {\n    return `${label}: pick a dataset`\n  }\n  if (\n    step.type === 'webhookPost' &&\n    !step.webhookId?.trim() &&\n    !step.webhookName?.trim()\n  ) {\n    return `${label}: pick a webhook`\n  }\n  if (step.type === 'sendEmail') {\n    if (!step.subject?.trim()) return `${label}: enter the subject`\n    if (!step.body?.trim()) return `${label}: enter the email body`\n  }\n  if (step.type === 'notifyAdmins' && !step.title?.trim()) {\n    return `${label}: enter the notification title`\n  }\n  if (\n    step.type === 'enrollList' &&\n    !step.listId?.trim() &&\n    !step.listName?.trim()\n  ) {\n    return `${label}: pick a list`\n  }\n  if (\n    step.type === 'updateDataset' &&\n    !step.datasetId?.trim() &&\n    !step.datasetName?.trim()\n  ) {\n    return `${label}: pick a dataset`\n  }\n  if (\n    step.type === 'assignCampaign' &&\n    !step.campaignId?.trim() &&\n    !step.campaignName?.trim()\n  ) {\n    return `${label}: pick a campaign`\n  }\n  // CRM steps (AGL-2605). A stage or a kind outside its vocabulary is\n  // refused here rather than stored: the executor treats the value as\n  // trusted and would write it into a facet every stage report counts.\n  if (\n    step.type === 'setContactStage' &&\n    !isContactLifecycleStage(step.lifecycleStage)\n  ) {\n    return `${label}: pick a lifecycle stage`\n  }\n  if (step.type === 'addContactTag') {\n    const tag = step.tag?.trim() ?? ''\n    if (!tag) return `${label}: enter the tag`\n    if (tag.length > CONTACT_TAG_MAX_LENGTH) {\n      return `${label}: tags are at most ${CONTACT_TAG_MAX_LENGTH} characters`\n    }\n  }\n  if (step.type === 'assignContactOwner') {\n    const named = Boolean(step.ownerUid?.trim() || step.ownerEmail?.trim())\n    if (step.roundRobin === true && named) {\n      return `${label}: pick round robin or a member, not both`\n    }\n    if (\n      step.roundRobin !== true &&\n      !step.ownerUid?.trim() &&\n      !step.ownerEmail?.trim().includes('@')\n    ) {\n      return `${label}: enter the owner’s email address`\n    }\n  }\n  if (step.type === 'createCrmTask') {\n    if (!step.title?.trim()) return `${label}: give the task a title`\n    if (!isCrmTaskKind(step.kind)) return `${label}: pick the kind of task`\n    if (\n      !Number.isInteger(step.dueInDays) ||\n      step.dueInDays < 0 ||\n      step.dueInDays > CRM_TASK_MAX_DUE_DAYS\n    ) {\n      return `${label}: due in 0–${CRM_TASK_MAX_DUE_DAYS} days`\n    }\n    // Optional — but an address that is not one would resolve to nobody at\n    // run time, and the task would land unassigned with no word why.\n    const assigneeEmail = step.assigneeEmail?.trim() ?? ''\n    if (assigneeEmail && !assigneeEmail.includes('@')) {\n      return `${label}: enter the assignee’s email address`\n    }\n  }\n  if (step.type === 'logCrmActivity') {\n    if (!isCrmActivityKind(step.kind)) {\n      return `${label}: pick the kind of activity`\n    }\n    if (!step.body?.trim()) return `${label}: write what happened`\n  }\n  return null\n}\n\n/**\n * Webhooks (AGL-149) at `hosts/{hostId}/webhooks/{id}`. Outbound entries\n * are targets a `webhookPost` action step delivers to (HMAC-signed);\n * inbound entries mint `/api/hooks/{hostId}/{hookId}` endpoints that run\n * a workflow with the posted JSON in scope. Business tier (`webhooks`\n * flag); Pro can be enabled per-tenant via entitlement overrides.\n */\nexport interface HostWebhook {\n  name: string\n  direction: 'outbound' | 'inbound'\n  /** Outbound delivery URL (https only; checked again at send time). */\n  url?: string\n  /** Shared secret: signs outbound bodies, verifies inbound callers. */\n  secret?: string\n  /** Inbound: workflow (by name) enrolled with the payload in scope. */\n  workflowName?: string\n  enabled?: boolean\n}\n\nexport const WEBHOOK_MAX_PER_HOST = 5\n\n/** Outbound URLs must be public https — first-line SSRF guard. */\nexport const WEBHOOK_URL_PATTERN =\n  /^https:\\/\\/(?!localhost)(?!127\\.)(?!0\\.)(?!10\\.)(?!172\\.(1[6-9]|2\\d|3[01])\\.)(?!192\\.168\\.)(?!169\\.254\\.)[^\\s]+$/i\n\n"],"names":["CRM_TASK_MAX_DUE_DAYS","isContactLifecycleStage","isCrmActivityKind","isCrmTaskKind","CUSTOM_EVENT_PATTERN","validateInteraction","HOST_EVENT_TYPES","FLOW_TIMED_OUT_FIELD","FLOW_SUSPENDING_STEP_TYPES","Set","isFlowSuspendingStep","step","has","type","CRM_ACTION_STEP_TYPES","isCrmActionStep","CONTACT_TAG_MAX_LENGTH","CRM_ACTION_RECIPE_IDS","STALE_LEAD_WAIT_MINUTES","crmRecipeTagForForm","formName","trim","slice","CRM_ACTION_RECIPES","id","title","description","build","recipe","name","trigger","event","conditions","field","op","value","combinator","steps","roundRobin","kind","dueInDays","subject","body","tag","enabled","eventName","timeoutMinutes","when","needs","input","form","crmActionRecipe","find","hostActionRecipeId","action","stamp","undefined","hostActionDocument","rest","oncePerVisitor","oncePerSession","cooldownMinutes","Number","everyTime","condition","hostActionStepsForClient","list","suspendAt","findIndex","ACTION_MAX_EVENT_DEPTH","FLOW_WAIT_MIN_MINUTES","FLOW_WAIT_MAX_MINUTES","HOST_ACTION_STEP_LABELS","runWorkflow","siteAlert","customEvent","datasetAppend","webhookPost","showOverlay","stickyNav","addClass","toggleClass","removeClass","showElement","hideElement","toggleElement","openDrawer","closeDrawer","toggleDrawer","openMenu","closeMenu","toggleMenu","setAttribute","removeAttribute","scrollTo","playVideo","showHtml","runJs","redirect","trackGaEvent","sendEmail","notifyAdmins","enrollList","updateDataset","assignCampaign","wait","waitForEvent","exitFlow","setContactStage","addContactTag","assignContactOwner","createCrmTask","logCrmActivity","HOST_ACTION_STEP_OUTCOMES","describeStepOutcome","detail","base","String","trimmed","replace","isFlowWaitMinutes","isInteger","isCustomEventName","includes","test","validateHostAction","validateStep","label","serverStepProblem","delayMinutes","waited","datasetId","datasetName","webhookId","webhookName","listId","listName","campaignId","campaignName","lifecycleStage","length","named","Boolean","ownerUid","ownerEmail","assigneeEmail","WEBHOOK_MAX_PER_HOST","WEBHOOK_URL_PATTERN"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,qBAAqB,EAGrBC,uBAAuB,EACvBC,iBAAiB,EACjBC,aAAa,QACR,iBAAa;AACpB,SAEEC,oBAAoB,EAOpBC,mBAAmB,QACd,yBAAqB;AAC5B,SAASC,gBAAgB,QAAQ,mBAAe;AAEhD;;;;;;;;;;;;CAYC,GACD,cAAc,yBAAqB;AASnC;;;;;;;;CAQC,GACD,OAAO,MAAMC,uBAAuB,gBAAe;AAsHnD;;;;;;;CAOC,GACD,OAAO,MAAMC,6BACX,IAAIC,IAAI;IAAC;IAAQ;CAAe,EAAU;AAE5C,OAAO,SAASC,qBAAqBC,IAAoB;IACvD,OAAOH,2BAA2BI,GAAG,CAACD,KAAKE,IAAI;AACjD;AAEA;;;;;CAKC,GACD,OAAO,MAAMC,wBAAyD,IAAIL,IAAI;IAC5E;IACA;IACA;IACA;IACA;CACD,EAAU;AAeX,OAAO,SAASM,gBAAgBJ,IAAoB;IAClD,OAAOG,sBAAsBF,GAAG,CAACD,KAAKE,IAAI;AAC5C;AAEA,2EAA2E,GAC3E,OAAO,MAAMG,yBAAyB,GAAE;AAExC;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,MAAMC,wBAAwB;IACnC;IACA;IACA;IACA;CACD,CAAS;AA+BV;;;;;CAKC,GACD,OAAO,MAAMC,0BAA0B,IAAI,KAAK,GAAE;AAElD;;;;CAIC,GACD,OAAO,SAASC,oBAAoBC,QAAgB;IAClD,OAAOA,SAASC,IAAI,GAAGC,KAAK,CAAC,GAAGN;AAClC;AAEA,OAAO,MAAMO,qBAAiD;IAC5D;QACEC,IAAI;QACJC,OAAO;QACPC,aACE,0EACA;QACF;;;;;;;;;;;;KAYC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAUC,IAAI;4BAAUC,OAAO;wBAAO;qBAAE;oBAC9DC,YAAY;gBACd;gBACAC,OAAO;oBACL;wBAAExB,MAAM;wBAAsByB,YAAY;oBAAK;oBAC/C;wBACEzB,MAAM;wBACNY,OAAO;wBACPc,MAAM;wBACNC,WAAW;oBACb;oBACA;wBACE3B,MAAM;wBACN4B,SAAS;wBACTC,MACE,iEACA;oBACJ;oBACA;wBAAE7B,MAAM;wBAAiB8B,KAAK;oBAAU;iBACzC;gBACDC,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,0EACA;QACF;;;;;;;KAOC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBAAEC,OAAO;gBAAU;gBAC5BM,OAAO;oBACL;wBACExB,MAAM;wBACNY,OAAO;wBACPc,MAAM;wBACNC,WAAW;oBACb;iBACD;gBACDI,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,wEACA;QACF;;;;;;;KAOC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAkBC,IAAI;4BAAUC,OAAO;wBAAO;qBAAE;oBACtEC,YAAY;gBACd;gBACAC,OAAO;oBACL;wBACExB,MAAM;wBACNgC,WAAW;wBACXC,gBAAgB5B;oBAClB;oBACA;wBACEL,MAAM;wBACNY,OAAO;wBACPc,MAAM;wBACNC,WAAW;wBACXO,MAAM;4BACJf,YAAY;gCAAC;oCAAEC,OAAO1B;oCAAsB2B,IAAI;gCAAW;6BAAE;wBAC/D;oBACF;iBACD;gBACDU,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,wEACA;QACFsB,OAAO;QACPrB,OAAO,CAACsB;;YACN,MAAMC,OAAOD,yBAAAA,MAAOC,IAAI;YACxB,OAAO;gBACLtB,QAAQ;gBACRC,MAAMqB,OAAO,CAAC,IAAI,EAAEA,KAAKrB,IAAI,CAACR,IAAI,GAAG,YAAY,CAAC,GAAG;gBACrDS,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAUC,IAAI;4BAAUC,KAAK,UAAEe,wBAAAA,KAAM1B,EAAE,mBAAI;wBAAG;qBAAE;oBACtEY,YAAY;gBACd;gBACAC,OAAO;oBACL;wBAAExB,MAAM;wBAAiB8B,KAAKO,OAAO/B,oBAAoB+B,KAAKrB,IAAI,IAAI;oBAAG;iBAC1E;gBACDe,SAAS;YACX;QACF;IACF;CACD,CAAA;AAED,mEAAmE,GACnE,OAAO,SAASO,gBAAgB3B,EAAW;QAClCD;IAAP,QAAOA,2BAAAA,mBAAmB6B,IAAI,CAAC,CAACxB,SAAWA,OAAOJ,EAAE,KAAKA,eAAlDD,2BAAyD;AAClE;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAAS8B,mBACdC,MAA+C;;QAIxCH;IAFP,MAAMI,QAAQD,0BAAAA,OAAQ1B,MAAM;IAC5B,IAAI2B,UAAUC,WAAW,OAAOA;IAChC,gBAAOL,mBAAAA,gBAAgBI,2BAAhBJ,iBAAwB3B,EAAE,mBAAI;AACvC;AA+BA,OAAO,SAASiC,mBAAmBH,MAAkB;QAanCxB,qBACAA;IAbhB,MAAM,EAAEF,MAAM,EAAW,GAAG0B,QAATI,wCAASJ;;;IAC5B,MAAMxB,UAAUwB,OAAOxB,OAAO;IAC9B,OAAO,aACF4B;QACH5B,SAAS,aACJA;YACH6B,gBAAgB7B,QAAQ6B,cAAc,KAAK;YAC3CC,gBAAgB9B,QAAQ8B,cAAc,KAAK;YAC3CC,iBACEC,OAAOhC,QAAQ+B,eAAe,KAAK,IAAIC,OAAOhC,QAAQ+B,eAAe,IAAI;YAC3EE,WAAWjC,QAAQiC,SAAS,KAAK;YACjCC,WAAW;YACXhC,UAAU,GAAEF,sBAAAA,QAAQE,UAAU,YAAlBF,sBAAsB;YAClCM,UAAU,GAAEN,sBAAAA,QAAQM,UAAU,YAAlBN,sBAAsB;;QAEpCc,SAASU,OAAOV,OAAO,KAAK;OACxBhB,WAAW4B,YAAY;QAAE5B;IAAO,IAAI,CAAC;AAE7C;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASqC,yBACd5B,KAAmD;IAEnD,MAAM6B,OAAO7B,gBAAAA,QAAS,EAAE;IACxB,MAAM8B,YAAYD,KAAKE,SAAS,CAAC1D;IACjC,OAAO;WAAKyD,YAAY,IAAID,OAAOA,KAAK5C,KAAK,CAAC,GAAG6C;KAAY;AAC/D;AAkBA,+DAA+D,GAC/D,OAAO,MAAME,yBAAyB,EAAC;AAEvC;;;;;;;;;;CAUC,GACD,OAAO,MAAMC,wBAAwB,EAAC;AACtC,OAAO,MAAMC,wBAAwB,KAAK,KAAK,GAAE;AAEjD,OAAO,MAAMC,0BAA8D;IACzEC,aAAa;IACbC,WAAW;IACXC,aAAa;IACbC,eAAe;IACfC,aAAa;IACbC,aAAa;IACbC,WAAW;IACXC,UAAU;IACVC,aAAa;IACbC,aAAa;IACbC,aAAa;IACbC,aAAa;IACbC,eAAe;IACfC,YAAY;IACZC,aAAa;IACbC,cAAc;IACdC,UAAU;IACVC,WAAW;IACXC,YAAY;IACZC,cAAc;IACdC,iBAAiB;IACjBC,UAAU;IACVC,WAAW;IACXC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,cAAc;IACdC,WAAW;IACXC,cAAc;IACdC,YAAY;IACZC,eAAe;IACfC,gBAAgB;IAChBC,MAAM;IACNC,cAAc;IACdC,UAAU;IACVC,iBAAiB;IACjBC,eAAe;IACfC,oBAAoB;IACpBC,eAAe;IACfC,gBAAgB;AAClB,EAAC;AAED;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMC,4BAET;IACFxC,aAAa;IACbC,WAAW;IACXC,aAAa;IACbC,eAAe;IACf2B,eAAe;IACf1B,aAAa;IACbuB,WAAW;IACXC,cAAc;IACdC,YAAY;IACZE,gBAAgB;IAChBC,MAAM;IACNC,cAAc;IACdC,UAAU;IACVC,iBAAiB;IACjBC,eAAe;IACfC,oBAAoB;IACpBC,eAAe;IACfC,gBAAgB;AAClB,EAAC;AAED;;;;;;;CAOC,GACD,OAAO,SAASE,oBACdrG,IAAwB,EACxBsG,MAAe;QAEFF;IAAb,MAAMG,QAAOH,kCAAAA,yBAAyB,CAACpG,KAAK,YAA/BoG,kCAAmCI,OAAOxG;IACvD,MAAMyG,UAAUH,0BAAAA,OAAQ9F,IAAI;IAC5B,IAAI,CAACiG,SAAS,OAAOF;IACrB,IAAIvG,SAAS,mBAAmBA,SAAS,iBAAiB;QACxD,8DAA8D;QAC9D,4BAA4B;QAC5B,OAAO,GAAGuG,KAAKG,OAAO,CAAC,aAAa,IAAI,CAAC,EAAED,SAAS;IACtD;IACA,OAAO,GAAGF,KAAK,CAAC,EAAEE,SAAS;AAC7B;AAEA,oDAAoD,GACpD,OAAO,SAASE,kBAAkBrF,KAAc;IAC9C,OACE2B,OAAO2D,SAAS,CAACtF,UACjB,AAACA,SAAoBmC,yBACrB,AAACnC,SAAoBoC;AAEzB;AAEA,oEAAoE,GACpE,OAAO,SAASmD,kBAAkB3F,KAAa;IAC7C,OACE,CAACzB,iBAAiBqH,QAAQ,CAAC5F,UAC3B3B,qBAAqBwH,IAAI,CAAC7F;AAE9B;AAEA;;;CAGC,GACD,OAAO,SAAS8F,mBAAmBvE,MAAkB;QAC9CA;IAAL,IAAI,GAACA,eAAAA,OAAOzB,IAAI,qBAAXyB,aAAajC,IAAI,KAAI,OAAO;IACjC,sEAAsE;IACtE,0EAA0E;IAC1E,IAAIiC,OAAO1B,MAAM,IAAI,QAAQ,CAACuB,gBAAgBG,OAAO1B,MAAM,GAAG;QAC5D,OAAO;IACT;IACA,2EAA2E;IAC3E,wEAAwE;IACxE,OAAOvB,oBAAoBiD,QAAQ;QACjCwE,cAAc,CAACnH,MAAMoH,QAAUC,kBAAkBrH,MAAwBoH;IAC3E;AACF;AAEA;;;;CAIC,GACD,SAASC,kBAAkBrH,IAAoB,EAAEoH,KAAa;QAuBzDpH,iBACAA,mBAMAA,iBACAA,mBAQkCA,aAKlCA,cACAA,gBAMAA,kBACAA,oBAMAA,kBACAA;IA1DH,IAAIA,KAAKE,IAAI,KAAK,UAAU,CAAC2G,kBAAkB7G,KAAKsH,YAAY,GAAG;QACjE,OAAO,GAAGF,MAAM,eAAe,EAAEzD,sBAAsB,YAAY,EAAEC,sBAAsB,QAAQ,CAAC;IACtG;IACA,IAAI5D,KAAKE,IAAI,KAAK,gBAAgB;;YACjBF;QAAf,MAAMuH,kBAASvH,kBAAAA,KAAKkC,SAAS,qBAAdlC,gBAAgBU,IAAI,qBAAM;QACzC,IACE,CAAC6G,UACA,CAAC5H,iBAAiBqH,QAAQ,CAACO,WAAkB,CAACR,kBAAkBQ,SACjE;YACA,OAAO,GAAGH,MAAM,4BAA4B,CAAC;QAC/C;QACA,IAAI,CAACP,kBAAkB7G,KAAKmC,cAAc,GAAG;YAC3C,OAAO,GAAGiF,MAAM,gBAAgB,EAAEzD,sBAAsB,CAAC,EAAEC,sBAAsB,QAAQ,CAAC;QAC5F;IACF;IACA,IAAI5D,KAAKE,IAAI,KAAK,eAAe;;YACRF;QAAvB,IAAI,CAAC+G,4BAAkB/G,mBAAAA,KAAKkC,SAAS,qBAAdlC,iBAAgBU,IAAI,sBAAM,KAAK;YACpD,OAAO,GAAG0G,MAAM,qDAAqD,CAAC;QACxE;IACF;IACA,IACEpH,KAAKE,IAAI,KAAK,mBACd,GAACF,kBAAAA,KAAKwH,SAAS,qBAAdxH,gBAAgBU,IAAI,OACrB,GAACV,oBAAAA,KAAKyH,WAAW,qBAAhBzH,kBAAkBU,IAAI,KACvB;QACA,OAAO,GAAG0G,MAAM,gBAAgB,CAAC;IACnC;IACA,IACEpH,KAAKE,IAAI,KAAK,iBACd,GAACF,kBAAAA,KAAK0H,SAAS,qBAAd1H,gBAAgBU,IAAI,OACrB,GAACV,oBAAAA,KAAK2H,WAAW,qBAAhB3H,kBAAkBU,IAAI,KACvB;QACA,OAAO,GAAG0G,MAAM,gBAAgB,CAAC;IACnC;IACA,IAAIpH,KAAKE,IAAI,KAAK,aAAa;YACxBF,eACAA;QADL,IAAI,GAACA,gBAAAA,KAAK8B,OAAO,qBAAZ9B,cAAcU,IAAI,KAAI,OAAO,GAAG0G,MAAM,mBAAmB,CAAC;QAC/D,IAAI,GAACpH,aAAAA,KAAK+B,IAAI,qBAAT/B,WAAWU,IAAI,KAAI,OAAO,GAAG0G,MAAM,sBAAsB,CAAC;IACjE;IACA,IAAIpH,KAAKE,IAAI,KAAK,kBAAkB,GAACF,cAAAA,KAAKc,KAAK,qBAAVd,YAAYU,IAAI,KAAI;QACvD,OAAO,GAAG0G,MAAM,8BAA8B,CAAC;IACjD;IACA,IACEpH,KAAKE,IAAI,KAAK,gBACd,GAACF,eAAAA,KAAK4H,MAAM,qBAAX5H,aAAaU,IAAI,OAClB,GAACV,iBAAAA,KAAK6H,QAAQ,qBAAb7H,eAAeU,IAAI,KACpB;QACA,OAAO,GAAG0G,MAAM,aAAa,CAAC;IAChC;IACA,IACEpH,KAAKE,IAAI,KAAK,mBACd,GAACF,mBAAAA,KAAKwH,SAAS,qBAAdxH,iBAAgBU,IAAI,OACrB,GAACV,qBAAAA,KAAKyH,WAAW,qBAAhBzH,mBAAkBU,IAAI,KACvB;QACA,OAAO,GAAG0G,MAAM,gBAAgB,CAAC;IACnC;IACA,IACEpH,KAAKE,IAAI,KAAK,oBACd,GAACF,mBAAAA,KAAK8H,UAAU,qBAAf9H,iBAAiBU,IAAI,OACtB,GAACV,qBAAAA,KAAK+H,YAAY,qBAAjB/H,mBAAmBU,IAAI,KACxB;QACA,OAAO,GAAG0G,MAAM,iBAAiB,CAAC;IACpC;IACA,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,IACEpH,KAAKE,IAAI,KAAK,qBACd,CAACZ,wBAAwBU,KAAKgI,cAAc,GAC5C;QACA,OAAO,GAAGZ,MAAM,wBAAwB,CAAC;IAC3C;IACA,IAAIpH,KAAKE,IAAI,KAAK,iBAAiB;;YACrBF;QAAZ,MAAMgC,gBAAMhC,YAAAA,KAAKgC,GAAG,qBAARhC,UAAUU,IAAI,sBAAM;QAChC,IAAI,CAACsB,KAAK,OAAO,GAAGoF,MAAM,eAAe,CAAC;QAC1C,IAAIpF,IAAIiG,MAAM,GAAG5H,wBAAwB;YACvC,OAAO,GAAG+G,MAAM,mBAAmB,EAAE/G,uBAAuB,WAAW,CAAC;QAC1E;IACF;IACA,IAAIL,KAAKE,IAAI,KAAK,sBAAsB;YAChBF,gBAAyBA,kBAM5CA,iBACAA;QAPH,MAAMkI,QAAQC,QAAQnI,EAAAA,iBAAAA,KAAKoI,QAAQ,qBAAbpI,eAAeU,IAAI,SAAMV,mBAAAA,KAAKqI,UAAU,qBAAfrI,iBAAiBU,IAAI;QACpE,IAAIV,KAAK2B,UAAU,KAAK,QAAQuG,OAAO;YACrC,OAAO,GAAGd,MAAM,wCAAwC,CAAC;QAC3D;QACA,IACEpH,KAAK2B,UAAU,KAAK,QACpB,GAAC3B,kBAAAA,KAAKoI,QAAQ,qBAAbpI,gBAAeU,IAAI,OACpB,GAACV,oBAAAA,KAAKqI,UAAU,qBAAfrI,kBAAiBU,IAAI,GAAGsG,QAAQ,CAAC,OAClC;YACA,OAAO,GAAGI,MAAM,iCAAiC,CAAC;QACpD;IACF;IACA,IAAIpH,KAAKE,IAAI,KAAK,iBAAiB;;YAC5BF,cAWiBA;QAXtB,IAAI,GAACA,eAAAA,KAAKc,KAAK,qBAAVd,aAAYU,IAAI,KAAI,OAAO,GAAG0G,MAAM,uBAAuB,CAAC;QACjE,IAAI,CAAC5H,cAAcQ,KAAK4B,IAAI,GAAG,OAAO,GAAGwF,MAAM,uBAAuB,CAAC;QACvE,IACE,CAACjE,OAAO2D,SAAS,CAAC9G,KAAK6B,SAAS,KAChC7B,KAAK6B,SAAS,GAAG,KACjB7B,KAAK6B,SAAS,GAAGxC,uBACjB;YACA,OAAO,GAAG+H,MAAM,WAAW,EAAE/H,sBAAsB,KAAK,CAAC;QAC3D;QACA,uEAAuE;QACvE,iEAAiE;QACjE,MAAMiJ,0BAAgBtI,sBAAAA,KAAKsI,aAAa,qBAAlBtI,oBAAoBU,IAAI,sBAAM;QACpD,IAAI4H,iBAAiB,CAACA,cAActB,QAAQ,CAAC,MAAM;YACjD,OAAO,GAAGI,MAAM,oCAAoC,CAAC;QACvD;IACF;IACA,IAAIpH,KAAKE,IAAI,KAAK,kBAAkB;YAI7BF;QAHL,IAAI,CAACT,kBAAkBS,KAAK4B,IAAI,GAAG;YACjC,OAAO,GAAGwF,MAAM,2BAA2B,CAAC;QAC9C;QACA,IAAI,GAACpH,cAAAA,KAAK+B,IAAI,qBAAT/B,YAAWU,IAAI,KAAI,OAAO,GAAG0G,MAAM,qBAAqB,CAAC;IAChE;IACA,OAAO;AACT;AAqBA,OAAO,MAAMmB,uBAAuB,EAAC;AAErC,gEAAgE,GAChE,OAAO,MAAMC,sBACX,oHAAmH"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/actions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type ContactLifecycleStage,\n  CRM_TASK_MAX_DUE_DAYS,\n  type CrmActivityKind,\n  type CrmTaskKind,\n  isContactLifecycleStage,\n  isCrmActivityKind,\n  isCrmTaskKind,\n} from './crm-kinds'\nimport {\n  type ClientInteractionStep,\n  CUSTOM_EVENT_PATTERN,\n  type InteractionCondition,\n  type InteractionStepGuard,\n  type InteractionTrigger,\n  type SiteAlert,\n  type SiteInteraction,\n  type TriggerCombinator,\n  validateInteraction,\n} from './site-interactions'\nimport { HOST_EVENT_TYPES } from './host-events'\n\n/**\n * Actions builder (AGL-148): HubSpot-style event → action automation on\n * top of the AGL-128 event triggers. An action listens for a host event\n * (built-in or a custom name fired by another action), optionally filters\n * on the payload, and runs an ordered step list. Pure types + validation\n * here; the executor lives in the workflows plugin, where the I/O is.\n *\n * An action is a SITE INTERACTION (`site-interactions.ts`) with server steps\n * added: its trigger, its conditions, its client steps and its storage are\n * the platform's, and are re-exported here for the readers that take both\n * from this module. What is declared below is the automation's own — the\n * server steps, flows, recipes and webhooks.\n */\nexport * from './site-interactions'\n\n/** The automation's names for the platform's interaction shapes. */\nexport type HostActionTriggerCondition = InteractionCondition\nexport type HostActionTrigger = InteractionTrigger\nexport type HostActionStepGuard = InteractionStepGuard\n/** Alert produced by a `siteAlert` step, surfaced to the emitting client. */\nexport type HostActionAlert = SiteAlert\n\n/**\n * The scope key a resumed flow carries to say the wait ended on the CLOCK\n * rather than on the event it was watching for.\n *\n * This is how a `waitForEvent` gets its timeout branch without a nested step\n * list: the flow resumes either way, and the step after it carries a `when`\n * naming this field. Underscored because it shares a namespace with the\n * event payload's own fields, which are merchant-authored form field names.\n */\nexport const FLOW_TIMED_OUT_FIELD = '_waitTimedOut'\n\n/** The steps an automation adds to the platform's client steps: the server's, run by the workflows plugin. */\ntype ServerActionStep = (\n  // Entity references carry a doc id (AGL-261, rename-safe) with the name\n  // kept as a display hint; pre-AGL-261 docs have only the name and the\n  // executor resolves either.\n  | { type: 'runWorkflow'; workflowId?: string; workflowName?: string }\n  | { type: 'customEvent'; eventName: string }\n  | { type: 'datasetAppend'; datasetId?: string; datasetName?: string }\n  | { type: 'webhookPost'; webhookId?: string; webhookName?: string }\n  // Server-side steps (AGL-257).\n  | {\n      type: 'sendEmail'\n      subject: string\n      body: string\n      toField?: string\n      /**\n       * The stream this message belongs to, so a recipient who left it is not\n       * mailed. Absent on every step authored before topics reached the\n       * actions editor, which the executor resolves to the default topic.\n       */\n      topicId?: string\n    }\n  | { type: 'notifyAdmins'; title: string; body?: string }\n  | { type: 'enrollList'; listId?: string; listName?: string }\n  | { type: 'updateDataset'; datasetId?: string; datasetName?: string }\n  | { type: 'assignCampaign'; campaignId?: string; campaignName?: string }\n  /*\n   * THE THREE FLOW STEPS.\n   *\n   * `wait` is the one that matters: without a durable delay an automation is\n   * always trigger → immediate actions, so no welcome series, win-back or\n   * post-purchase follow-up can exist at all. The other two are what make a\n   * delay useful — something to end the flow early, and a wait that ends on\n   * an event instead of on the clock.\n   *\n   * All three are SERVER steps. A delay outlives the page view that started\n   * it by days, so the browser that fired the trigger is long gone by the time\n   * the flow continues; `hostActionStepsForClient` truncates the client's copy\n   * of the step list at the first of these for that reason.\n   */\n  | {\n      type: 'wait'\n      /** Whole minutes to hold before the next step. */\n      delayMinutes: number\n    }\n  | {\n      type: 'waitForEvent'\n      /** The host or custom event that resumes this person's flow. */\n      eventName: string\n      /**\n       * Whole minutes after which the flow continues anyway, with\n       * {@link FLOW_TIMED_OUT_FIELD} true in scope. There is always a\n       * deadline: a wait with no timeout is an enrollment that lives forever.\n       */\n      timeoutMinutes: number\n    }\n  /** Ends the enrollment here. Paired with a `when`, this is the exit branch. */\n  | { type: 'exitFlow' }\n  /*\n   * THE CRM STEPS (AGL-2605).\n   *\n   * Server steps, every one, because each writes a record only the Admin\n   * SDK may write on a visitor's behalf. Each acts on ONE person — the\n   * contact the event names, resolved by `contactId` when the payload\n   * carries one and by `email` otherwise — and each writes inside the\n   * site's own facet or stamps the site's own scope, for the reason\n   * `assignCampaign` gives: a contact row is shared by every site in the\n   * org, and a stage or a tag is one holder's business record. A step whose\n   * event names nobody the site can see does nothing and says so in the run.\n   *\n   * None of them carries a doc-id reference for the reference audit to\n   * check: a stage and a kind are fixed vocabularies, a tag is free text,\n   * and an owner is a member who is resolved at run time.\n   */\n  | { type: 'setContactStage'; lifecycleStage: ContactLifecycleStage }\n  | { type: 'addContactTag'; tag: string }\n  /**\n   * The owner by uid when a member id was typed or a picker wrote the step,\n   * by email when an address was typed; the executor resolves either against\n   * the org's roster, and only the roster (AGL-2614).\n   * Or `roundRobin`, and the owner is the next member of the pool the CRM's\n   * settings keep (AGL-2618) — a step that names nobody and hands the\n   * choice to the rotation, so a stage change can spread its follow-ups\n   * across a team rather than pile them on one rep. The two are exclusive:\n   * a rotation step carries no member, and the validator refuses one that\n   * names both.\n   */\n  | {\n      type: 'assignContactOwner'\n      ownerUid?: string\n      ownerEmail?: string\n      roundRobin?: boolean\n    }\n  | {\n      type: 'createCrmTask'\n      title: string\n      kind: CrmTaskKind\n      /** Days from the run to the due date; `0` is due today. */\n      dueInDays: number\n      /**\n       * Who gets it — by uid or by an address, both resolved against the\n       * roster the way the owner step's are. Neither named, the task goes\n       * to the contact's owner, then to nobody.\n       */\n      assigneeUid?: string\n      assigneeEmail?: string\n    }\n  | { type: 'logCrmActivity'; kind: CrmActivityKind; body: string }\n) & {\n  /** See {@link InteractionStepGuard}. Absent means the step always runs. */\n  when?: InteractionStepGuard | null\n}\n\n/** A step of an automation: one of the platform's client steps, or one of its server steps. */\nexport type HostActionStep = ClientInteractionStep | ServerActionStep\n\n/**\n * The steps that suspend a run and continue it later, from a job beat.\n *\n * Named as a set rather than checked inline because three surfaces have to\n * agree on it: the executor stops here and writes an enrollment, the client\n * payload is truncated here, and the validator refuses a flow that waits\n * without a person to wait for.\n */\nexport const FLOW_SUSPENDING_STEP_TYPES: ReadonlySet<HostActionStepType> =\n  new Set(['wait', 'waitForEvent'] as const)\n\nexport function isFlowSuspendingStep(step: HostActionStep): boolean {\n  return FLOW_SUSPENDING_STEP_TYPES.has(step.type)\n}\n\n/** Longest tag an automation may write — the console's own tag field cap. */\nexport const CONTACT_TAG_MAX_LENGTH = 60\n\n/*\n * THE RECIPES (AGL-2626).\n *\n * A recipe is a ready-to-edit action — a trigger, its conditions and an\n * ordered step list — built from the vocabulary the editor already offers\n * and handed to the editor as a draft. Nothing is written until the person\n * saves, and every field is theirs to change first: the recipe decides\n * where the editor starts, not what the site runs.\n *\n * Defined here, beside the step catalog, rather than in the builder, so the\n * docs page that lists the recipes and the menu that offers them read ONE\n * list, and so a step the catalog renames or retires breaks a recipe at\n * compile time rather than in a menu nobody tests.\n *\n * Definitions only. Three of the four are complete as written. `tagByForm`\n * needs a form, and a form belongs to a site (`hosts/{hostId}/forms`), so\n * the picker that supplies it is the builder's business and host-scoped by\n * nature. That is the seam an org-level mount keeps: the recipes are the\n * same at either level, and only the form picker knows where it is.\n */\nexport const CRM_ACTION_RECIPE_IDS = [\n  'welcomeNewLead',\n  'followUpWonDeal',\n  'reengageStaleLead',\n  'tagByForm',\n] as const\n\nexport type CrmActionRecipeId = (typeof CRM_ACTION_RECIPE_IDS)[number]\n\n/** What a recipe is handed before it builds — today only the form `tagByForm` reads. */\nexport interface CrmActionRecipeInput {\n  form?: { id: string; name: string }\n}\n\nexport interface CrmActionRecipe {\n  id: CrmActionRecipeId\n  /** How the recipe reads in the menu; also the action's starting name. */\n  title: string\n  /** One sentence under the title. */\n  description: string\n  /**\n   * What must be picked before the recipe can be built. A recipe that needs\n   * nothing opens the editor at once; one that needs a form opens a picker\n   * first. Built WITHOUT its pick, such a recipe yields an action the\n   * validator refuses — a condition with no value — rather than one that\n   * saves and then silently matches nothing.\n   */\n  needs?: 'form'\n  /**\n   * A fresh action each call, because the draft is edited in place. The\n   * action carries `recipe: id` — the provenance is the builder's to stamp,\n   * so a writer that saves what it was handed cannot forget it.\n   */\n  build: (input?: CrmActionRecipeInput) => HostAction\n}\n\n/**\n * How long the stale-lead recipe holds before it decides a lead has gone\n * quiet. A week: long enough that a rep who is working the lead has had a\n * chance to move its stage, short enough that a lead nobody touched is\n * still warm when the reminder lands.\n */\nexport const STALE_LEAD_WAIT_MINUTES = 7 * 24 * 60\n\n/**\n * The tag a form's captures get: the form's own name, cut to the tag cap.\n * The name is what the person calls the form, so it is the tag they would\n * have typed; the editor is open to change it before anything is saved.\n */\nexport function crmRecipeTagForForm(formName: string): string {\n  return formName.trim().slice(0, CONTACT_TAG_MAX_LENGTH)\n}\n\nexport const CRM_ACTION_RECIPES: readonly CrmActionRecipe[] = [\n  {\n    id: 'welcomeNewLead',\n    title: 'Welcome a new lead',\n    description:\n      'When a form makes a new contact: rotate in an owner, book a call for ' +\n      'tomorrow, send a thank-you, and tag them website.',\n    /*\n     * The owner first, because the task that follows names no assignee and\n     * so goes to whoever owns the contact when it is created — the member\n     * the rotation just chose. Round robin rather than a named member: a\n     * recipe cannot know who is on the team, and the pool under CRM →\n     * Settings is the one place that does. On a workspace with no pool the\n     * step fails and the run continues, so the call, the email and the tag\n     * still land and the run history says who was not assigned.\n     *\n     * The email comes before any wait, which makes it an immediate reply to\n     * what the visitor just did — transactional, sent from the org's own\n     * identity, to the address the event carries.\n     *\n     * Its words promise no response time. The org hub installs this recipe\n     * into a site without its editor opening, so the business never reads\n     * the sentence it is sending, and a \"within a day\" written here would be\n     * a commitment made on its behalf that nothing in the run keeps.\n     */\n    build: () => ({\n      recipe: 'welcomeNewLead',\n      name: 'Welcome a new lead',\n      trigger: {\n        event: 'contactCreated',\n        conditions: [{ field: 'source', op: 'equals', value: 'form' }],\n        combinator: 'and',\n      },\n      steps: [\n        { type: 'assignContactOwner', roundRobin: true },\n        {\n          type: 'createCrmTask',\n          title: 'Call the new lead',\n          kind: 'call',\n          dueInDays: 1,\n        },\n        {\n          type: 'sendEmail',\n          subject: 'Thanks for getting in touch',\n          body:\n            'Thanks for reaching out. We have your message and will reply ' +\n            'to this email address.',\n        },\n        { type: 'addContactTag', tag: 'website' },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'followUpWonDeal',\n    title: 'Follow up a won deal',\n    description:\n      'When a deal is won — which makes the contact a Customer on its own — ' +\n      'book a check-in call a week out.',\n    /*\n     * No stage step (AGL-2641): the win itself floors the contact at\n     * `customer` before `dealWon` is announced, so a step setting the stage\n     * here would at best repeat the write and at worst move an evangelist\n     * back to customer — a SET, which is what the step is, and not the\n     * floor the win applies. The recipe books the follow-up and nothing\n     * else.\n     */\n    build: () => ({\n      recipe: 'followUpWonDeal',\n      name: 'Follow up a won deal',\n      trigger: { event: 'dealWon' },\n      steps: [\n        {\n          type: 'createCrmTask',\n          title: 'Check in with the new customer',\n          kind: 'call',\n          dueInDays: 7,\n        },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'reengageStaleLead',\n    title: 'Re-engage a stale lead',\n    description:\n      'When a contact becomes a lead: wait a week, and if their stage has ' +\n      'not moved, book a call to bring them back.',\n    /*\n     * \"Unless the stage moved on\" is the wait's own event: the flow watches\n     * for the next stage change on this person and gives up after a week.\n     * Resumed by the clock, the run carries `_waitTimedOut`, and the task\n     * step's guard reads it; resumed by the event, the field is absent and\n     * the task is skipped — the lead was worked, and nobody is told to\n     * re-engage somebody who just moved to Sales qualified.\n     */\n    build: () => ({\n      recipe: 'reengageStaleLead',\n      name: 'Re-engage a stale lead',\n      trigger: {\n        event: 'contactStageChanged',\n        conditions: [{ field: 'lifecycleStage', op: 'equals', value: 'lead' }],\n        combinator: 'and',\n      },\n      steps: [\n        {\n          type: 'waitForEvent',\n          eventName: 'contactStageChanged',\n          timeoutMinutes: STALE_LEAD_WAIT_MINUTES,\n        },\n        {\n          type: 'createCrmTask',\n          title: 'Re-engage a lead that has gone quiet',\n          kind: 'call',\n          dueInDays: 1,\n          when: {\n            conditions: [{ field: FLOW_TIMED_OUT_FIELD, op: 'notEmpty' }],\n          },\n        },\n      ],\n      enabled: true,\n    }),\n  },\n  {\n    id: 'tagByForm',\n    title: 'Tag by form',\n    description:\n      'When a form you pick makes a new contact: tag them with the form’s ' +\n      'name.',\n    needs: 'form',\n    build: (input) => {\n      const form = input?.form\n      return {\n        recipe: 'tagByForm',\n        name: form ? `Tag ${form.name.trim()} submissions` : 'Tag by form',\n        trigger: {\n          event: 'contactCreated',\n          conditions: [{ field: 'formId', op: 'equals', value: form?.id ?? '' }],\n          combinator: 'and',\n        },\n        steps: [\n          { type: 'addContactTag', tag: form ? crmRecipeTagForForm(form.name) : '' },\n        ],\n        enabled: true,\n      }\n    },\n  },\n]\n\n/** The recipe with this id, or null for a string that names none. */\nexport function crmActionRecipe(id: unknown): CrmActionRecipe | null {\n  return CRM_ACTION_RECIPES.find((recipe) => recipe.id === id) ?? null\n}\n\n/**\n * The recipe a STORED action came from, read off its document (AGL-2639).\n *\n * Three answers, and the third is the one that matters. A known id: the\n * action was installed from, or begun as, that recipe. `null`: the action\n * was begun blank, or from a recipe this build no longer knows — the\n * editor wrote the field and said \"no recipe\". `undefined`: the document\n * carries no `recipe` field at all, which is every action saved before the\n * stamp existed. Such an action may well have started from a recipe — the\n * menu opened the editor prefilled long before anything recorded it — so a\n * reader that needs to know whether a site has a recipe treats `undefined`\n * as UNKNOWN, never as absent, and never writes a `null` over it.\n */\nexport function hostActionRecipeId(\n  action: { recipe?: unknown } | null | undefined,\n): CrmActionRecipeId | null | undefined {\n  const stamp = action?.recipe\n  if (stamp === undefined) return undefined\n  return crmActionRecipe(stamp)?.id ?? null\n}\n\n/**\n * A HostAction as the document at `hosts/{hostId}/actions/{id}` holds it.\n *\n * Every optional trigger key is written OUT — a boolean cap as `false`, a\n * cleared list as `null` — because the editor saves with a merge-set, and\n * a merge keeps whatever key the payload omits: a frequency cap switched\n * off, left out of the payload, would stay on. The legacy single\n * `condition` is always nulled; `conditions` has been canonical since the\n * list shape arrived and a document that carried both would have the\n * reader pick. Everything else is the action, unchanged.\n *\n * `recipe` rides along only when the action SAYS something about it: an\n * id or `null`. An action that carries no stamp (an older document, edited\n * and saved again) keeps carrying none — see {@link hostActionRecipeId}\n * for why an absent stamp must not become a `null` one.\n */\nexport interface HostActionDocument extends HostAction {\n  trigger: HostActionTrigger & {\n    oncePerVisitor: boolean\n    oncePerSession: boolean\n    cooldownMinutes: number | null\n    everyTime: boolean\n    condition: null\n    conditions: HostActionTriggerCondition[] | null\n    combinator: TriggerCombinator | null\n  }\n  enabled: boolean\n}\n\nexport function hostActionDocument(action: HostAction): HostActionDocument {\n  const { recipe, ...rest } = action\n  const trigger = action.trigger\n  return {\n    ...rest,\n    trigger: {\n      ...trigger,\n      oncePerVisitor: trigger.oncePerVisitor === true,\n      oncePerSession: trigger.oncePerSession === true,\n      cooldownMinutes:\n        Number(trigger.cooldownMinutes) >= 1 ? Number(trigger.cooldownMinutes) : null,\n      everyTime: trigger.everyTime === true,\n      condition: null,\n      conditions: trigger.conditions ?? null,\n      combinator: trigger.combinator ?? null,\n    },\n    enabled: action.enabled !== false,\n    ...(recipe !== undefined ? { recipe } : {}),\n  }\n}\n\n/**\n * The step list as the visitor's browser may see it.\n *\n * A client step AFTER a wait must never reach the page. The client engine\n * runs its slice of the list immediately, so shipping the whole list would\n * make \"wait three days, then show the popup\" show the popup at once — the\n * delay would appear to work on the server, be ignored in the browser, and\n * the two halves of one authored flow would disagree about when it happened.\n *\n * Truncating rather than filtering: everything past the first wait belongs to\n * a run that has not happened yet, whichever side would have executed it.\n */\nexport function hostActionStepsForClient(\n  steps: readonly HostActionStep[] | undefined | null,\n): HostActionStep[] {\n  const list = steps ?? []\n  const suspendAt = list.findIndex(isFlowSuspendingStep)\n  return [...(suspendAt < 0 ? list : list.slice(0, suspendAt))]\n}\n\nexport type HostActionStepType = HostActionStep['type']\n\n/**\n * `hosts/{hostId}/actions/{id}` doc: a site interaction whose steps may be\n * the automation's server steps as well as the platform's client steps.\n */\nexport interface HostAction extends SiteInteraction<HostActionStep> {\n  /**\n   * The recipe this action was installed from or begun as (AGL-2639), or\n   * `null` for one begun blank. Absent on a document from before the stamp\n   * existed — read it through {@link hostActionRecipeId}, which keeps the\n   * three cases apart.\n   */\n  recipe?: CrmActionRecipeId | null\n}\n\n/**\n * The shortest and longest a flow may wait.\n *\n * The floor is a minute because the resume beat runs on a minute, so anything\n * under one is a delay the scheduler cannot honor and would only read as\n * imprecision. The ceiling is ninety days: long enough for the win-back that\n * is the longest sequence anybody writes, and short enough that an enrollment\n * is not an unbounded lease on a document. A person waiting inside a flow is\n * storage the merchant is not looking at, and a wait measured in years is\n * indistinguishable from one nobody will ever collect.\n */\nexport const FLOW_WAIT_MIN_MINUTES = 1\nexport const FLOW_WAIT_MAX_MINUTES = 90 * 24 * 60\n\nexport const HOST_ACTION_STEP_LABELS: Record<HostActionStepType, string> = {\n  runWorkflow: 'Run a workflow',\n  siteAlert: 'Show a site alert',\n  customEvent: 'Fire a custom event',\n  datasetAppend: 'Write to a dataset',\n  webhookPost: 'Send a webhook (Business)',\n  showOverlay: 'Show a popup or bar',\n  stickyNav: 'Make navigation sticky',\n  addClass: 'Add a CSS class',\n  toggleClass: 'Toggle a CSS class',\n  removeClass: 'Remove a CSS class',\n  showElement: 'Show an element',\n  hideElement: 'Hide an element',\n  toggleElement: 'Show/hide an element',\n  openDrawer: 'Open a drawer',\n  closeDrawer: 'Close a drawer',\n  toggleDrawer: 'Open/close a drawer',\n  openMenu: 'Open a menu',\n  closeMenu: 'Close a menu',\n  toggleMenu: 'Open/close a menu',\n  setAttribute: 'Set an ARIA or data attribute',\n  removeAttribute: 'Remove an ARIA or data attribute',\n  scrollTo: 'Scroll to element',\n  playVideo: 'Play a video',\n  showHtml: 'Show custom HTML',\n  runJs: 'Run custom JS (Business)',\n  redirect: 'Redirect the visitor',\n  trackGaEvent: 'Track an analytics event',\n  sendEmail: 'Send an email',\n  notifyAdmins: 'Notify site admins',\n  enrollList: 'Enroll in a list',\n  updateDataset: 'Update a dataset record',\n  assignCampaign: 'Assign to a campaign',\n  wait: 'Wait',\n  waitForEvent: 'Wait for something to happen',\n  exitFlow: 'End the flow here',\n  setContactStage: 'Set the contact’s lifecycle stage',\n  addContactTag: 'Tag the contact',\n  assignContactOwner: 'Assign the contact an owner',\n  createCrmTask: 'Create a CRM task',\n  logCrmActivity: 'Log a CRM activity',\n}\n\n/** A whole number of minutes inside the wait band. */\nexport function isFlowWaitMinutes(value: unknown): boolean {\n  return (\n    Number.isInteger(value) &&\n    (value as number) >= FLOW_WAIT_MIN_MINUTES &&\n    (value as number) <= FLOW_WAIT_MAX_MINUTES\n  )\n}\n\n/** True for a custom (non-built-in) event name an action may fire. */\nexport function isCustomEventName(event: string): boolean {\n  return (\n    !HOST_EVENT_TYPES.includes(event as any) &&\n    CUSTOM_EVENT_PATTERN.test(event)\n  )\n}\n\n/**\n * Validates an action doc shape; returns a human-readable error or null.\n * Server and console share this so bad steps never persist or run.\n */\nexport function validateHostAction(action: HostAction): string | null {\n  if (!action.name?.trim()) return 'Name the action'\n  // A stamp is provenance, and provenance naming a recipe that does not\n  // exist is a document nothing can read back; `null` and absent both pass.\n  if (action.recipe != null && !crmActionRecipe(action.recipe)) {\n    return 'Unknown recipe'\n  }\n  // The trigger, the step guards, the client steps and every declared step's\n  // pick are the platform's to check; the server steps are this module's.\n  return validateInteraction(action, {\n    validateStep: (step, label) => serverStepProblem(step as HostActionStep, label),\n  })\n}\n\n/**\n * A server step's own complaint, or null. A `runWorkflow` step's pick is\n * checked with every other declared step's (`interactionSteps` in\n * `plugins.config.json`), by `validateInteraction`.\n */\nfunction serverStepProblem(step: HostActionStep, label: string): string | null {\n  if (step.type === 'wait' && !isFlowWaitMinutes(step.delayMinutes)) {\n    return `${label}: wait between ${FLOW_WAIT_MIN_MINUTES} minute and ${FLOW_WAIT_MAX_MINUTES} minutes`\n  }\n  if (step.type === 'waitForEvent') {\n    const waited = step.eventName?.trim() ?? ''\n    if (\n      !waited ||\n      (!HOST_EVENT_TYPES.includes(waited as any) && !isCustomEventName(waited))\n    ) {\n      return `${label}: pick the event to wait for`\n    }\n    if (!isFlowWaitMinutes(step.timeoutMinutes)) {\n      return `${label}: give up after ${FLOW_WAIT_MIN_MINUTES}–${FLOW_WAIT_MAX_MINUTES} minutes`\n    }\n  }\n  if (step.type === 'customEvent') {\n    if (!isCustomEventName(step.eventName?.trim() ?? '')) {\n      return `${label}: custom event names are 2–40 letters, digits, dashes`\n    }\n  }\n  if (\n    step.type === 'datasetAppend' &&\n    !step.datasetId?.trim() &&\n    !step.datasetName?.trim()\n  ) {\n    return `${label}: pick a dataset`\n  }\n  if (\n    step.type === 'webhookPost' &&\n    !step.webhookId?.trim() &&\n    !step.webhookName?.trim()\n  ) {\n    return `${label}: pick a webhook`\n  }\n  if (step.type === 'sendEmail') {\n    if (!step.subject?.trim()) return `${label}: enter the subject`\n    if (!step.body?.trim()) return `${label}: enter the email body`\n  }\n  if (step.type === 'notifyAdmins' && !step.title?.trim()) {\n    return `${label}: enter the notification title`\n  }\n  if (\n    step.type === 'enrollList' &&\n    !step.listId?.trim() &&\n    !step.listName?.trim()\n  ) {\n    return `${label}: pick a list`\n  }\n  if (\n    step.type === 'updateDataset' &&\n    !step.datasetId?.trim() &&\n    !step.datasetName?.trim()\n  ) {\n    return `${label}: pick a dataset`\n  }\n  if (\n    step.type === 'assignCampaign' &&\n    !step.campaignId?.trim() &&\n    !step.campaignName?.trim()\n  ) {\n    return `${label}: pick a campaign`\n  }\n  // CRM steps (AGL-2605). A stage or a kind outside its vocabulary is\n  // refused here rather than stored: the executor treats the value as\n  // trusted and would write it into a facet every stage report counts.\n  if (\n    step.type === 'setContactStage' &&\n    !isContactLifecycleStage(step.lifecycleStage)\n  ) {\n    return `${label}: pick a lifecycle stage`\n  }\n  if (step.type === 'addContactTag') {\n    const tag = step.tag?.trim() ?? ''\n    if (!tag) return `${label}: enter the tag`\n    if (tag.length > CONTACT_TAG_MAX_LENGTH) {\n      return `${label}: tags are at most ${CONTACT_TAG_MAX_LENGTH} characters`\n    }\n  }\n  if (step.type === 'assignContactOwner') {\n    const named = Boolean(step.ownerUid?.trim() || step.ownerEmail?.trim())\n    if (step.roundRobin === true && named) {\n      return `${label}: pick round robin or a member, not both`\n    }\n    if (\n      step.roundRobin !== true &&\n      !step.ownerUid?.trim() &&\n      !step.ownerEmail?.trim().includes('@')\n    ) {\n      return `${label}: enter the owner’s email address`\n    }\n  }\n  if (step.type === 'createCrmTask') {\n    if (!step.title?.trim()) return `${label}: give the task a title`\n    if (!isCrmTaskKind(step.kind)) return `${label}: pick the kind of task`\n    if (\n      !Number.isInteger(step.dueInDays) ||\n      step.dueInDays < 0 ||\n      step.dueInDays > CRM_TASK_MAX_DUE_DAYS\n    ) {\n      return `${label}: due in 0–${CRM_TASK_MAX_DUE_DAYS} days`\n    }\n    // Optional — but an address that is not one would resolve to nobody at\n    // run time, and the task would land unassigned with no word why.\n    const assigneeEmail = step.assigneeEmail?.trim() ?? ''\n    if (assigneeEmail && !assigneeEmail.includes('@')) {\n      return `${label}: enter the assignee’s email address`\n    }\n  }\n  if (step.type === 'logCrmActivity') {\n    if (!isCrmActivityKind(step.kind)) {\n      return `${label}: pick the kind of activity`\n    }\n    if (!step.body?.trim()) return `${label}: write what happened`\n  }\n  return null\n}\n\n/** The most webhooks one site keeps; the site create route enforces it. */\nexport const WEBHOOK_MAX_PER_HOST = 5\n"],"names":["CRM_TASK_MAX_DUE_DAYS","isContactLifecycleStage","isCrmActivityKind","isCrmTaskKind","CUSTOM_EVENT_PATTERN","validateInteraction","HOST_EVENT_TYPES","FLOW_TIMED_OUT_FIELD","FLOW_SUSPENDING_STEP_TYPES","Set","isFlowSuspendingStep","step","has","type","CONTACT_TAG_MAX_LENGTH","CRM_ACTION_RECIPE_IDS","STALE_LEAD_WAIT_MINUTES","crmRecipeTagForForm","formName","trim","slice","CRM_ACTION_RECIPES","id","title","description","build","recipe","name","trigger","event","conditions","field","op","value","combinator","steps","roundRobin","kind","dueInDays","subject","body","tag","enabled","eventName","timeoutMinutes","when","needs","input","form","crmActionRecipe","find","hostActionRecipeId","action","stamp","undefined","hostActionDocument","rest","oncePerVisitor","oncePerSession","cooldownMinutes","Number","everyTime","condition","hostActionStepsForClient","list","suspendAt","findIndex","FLOW_WAIT_MIN_MINUTES","FLOW_WAIT_MAX_MINUTES","HOST_ACTION_STEP_LABELS","runWorkflow","siteAlert","customEvent","datasetAppend","webhookPost","showOverlay","stickyNav","addClass","toggleClass","removeClass","showElement","hideElement","toggleElement","openDrawer","closeDrawer","toggleDrawer","openMenu","closeMenu","toggleMenu","setAttribute","removeAttribute","scrollTo","playVideo","showHtml","runJs","redirect","trackGaEvent","sendEmail","notifyAdmins","enrollList","updateDataset","assignCampaign","wait","waitForEvent","exitFlow","setContactStage","addContactTag","assignContactOwner","createCrmTask","logCrmActivity","isFlowWaitMinutes","isInteger","isCustomEventName","includes","test","validateHostAction","validateStep","label","serverStepProblem","delayMinutes","waited","datasetId","datasetName","webhookId","webhookName","listId","listName","campaignId","campaignName","lifecycleStage","length","named","Boolean","ownerUid","ownerEmail","assigneeEmail","WEBHOOK_MAX_PER_HOST"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,qBAAqB,EAGrBC,uBAAuB,EACvBC,iBAAiB,EACjBC,aAAa,QACR,iBAAa;AACpB,SAEEC,oBAAoB,EAOpBC,mBAAmB,QACd,yBAAqB;AAC5B,SAASC,gBAAgB,QAAQ,mBAAe;AAEhD;;;;;;;;;;;;CAYC,GACD,cAAc,yBAAqB;AASnC;;;;;;;;CAQC,GACD,OAAO,MAAMC,uBAAuB,gBAAe;AAsHnD;;;;;;;CAOC,GACD,OAAO,MAAMC,6BACX,IAAIC,IAAI;IAAC;IAAQ;CAAe,EAAU;AAE5C,OAAO,SAASC,qBAAqBC,IAAoB;IACvD,OAAOH,2BAA2BI,GAAG,CAACD,KAAKE,IAAI;AACjD;AAEA,2EAA2E,GAC3E,OAAO,MAAMC,yBAAyB,GAAE;AAExC;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,MAAMC,wBAAwB;IACnC;IACA;IACA;IACA;CACD,CAAS;AA+BV;;;;;CAKC,GACD,OAAO,MAAMC,0BAA0B,IAAI,KAAK,GAAE;AAElD;;;;CAIC,GACD,OAAO,SAASC,oBAAoBC,QAAgB;IAClD,OAAOA,SAASC,IAAI,GAAGC,KAAK,CAAC,GAAGN;AAClC;AAEA,OAAO,MAAMO,qBAAiD;IAC5D;QACEC,IAAI;QACJC,OAAO;QACPC,aACE,0EACA;QACF;;;;;;;;;;;;;;;;;KAiBC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAUC,IAAI;4BAAUC,OAAO;wBAAO;qBAAE;oBAC9DC,YAAY;gBACd;gBACAC,OAAO;oBACL;wBAAEtB,MAAM;wBAAsBuB,YAAY;oBAAK;oBAC/C;wBACEvB,MAAM;wBACNU,OAAO;wBACPc,MAAM;wBACNC,WAAW;oBACb;oBACA;wBACEzB,MAAM;wBACN0B,SAAS;wBACTC,MACE,kEACA;oBACJ;oBACA;wBAAE3B,MAAM;wBAAiB4B,KAAK;oBAAU;iBACzC;gBACDC,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,0EACA;QACF;;;;;;;KAOC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBAAEC,OAAO;gBAAU;gBAC5BM,OAAO;oBACL;wBACEtB,MAAM;wBACNU,OAAO;wBACPc,MAAM;wBACNC,WAAW;oBACb;iBACD;gBACDI,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,wEACA;QACF;;;;;;;KAOC,GACDC,OAAO,IAAO,CAAA;gBACZC,QAAQ;gBACRC,MAAM;gBACNC,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAkBC,IAAI;4BAAUC,OAAO;wBAAO;qBAAE;oBACtEC,YAAY;gBACd;gBACAC,OAAO;oBACL;wBACEtB,MAAM;wBACN8B,WAAW;wBACXC,gBAAgB5B;oBAClB;oBACA;wBACEH,MAAM;wBACNU,OAAO;wBACPc,MAAM;wBACNC,WAAW;wBACXO,MAAM;4BACJf,YAAY;gCAAC;oCAAEC,OAAOxB;oCAAsByB,IAAI;gCAAW;6BAAE;wBAC/D;oBACF;iBACD;gBACDU,SAAS;YACX,CAAA;IACF;IACA;QACEpB,IAAI;QACJC,OAAO;QACPC,aACE,wEACA;QACFsB,OAAO;QACPrB,OAAO,CAACsB;;YACN,MAAMC,OAAOD,yBAAAA,MAAOC,IAAI;YACxB,OAAO;gBACLtB,QAAQ;gBACRC,MAAMqB,OAAO,CAAC,IAAI,EAAEA,KAAKrB,IAAI,CAACR,IAAI,GAAG,YAAY,CAAC,GAAG;gBACrDS,SAAS;oBACPC,OAAO;oBACPC,YAAY;wBAAC;4BAAEC,OAAO;4BAAUC,IAAI;4BAAUC,KAAK,UAAEe,wBAAAA,KAAM1B,EAAE,mBAAI;wBAAG;qBAAE;oBACtEY,YAAY;gBACd;gBACAC,OAAO;oBACL;wBAAEtB,MAAM;wBAAiB4B,KAAKO,OAAO/B,oBAAoB+B,KAAKrB,IAAI,IAAI;oBAAG;iBAC1E;gBACDe,SAAS;YACX;QACF;IACF;CACD,CAAA;AAED,mEAAmE,GACnE,OAAO,SAASO,gBAAgB3B,EAAW;QAClCD;IAAP,QAAOA,2BAAAA,mBAAmB6B,IAAI,CAAC,CAACxB,SAAWA,OAAOJ,EAAE,KAAKA,eAAlDD,2BAAyD;AAClE;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAAS8B,mBACdC,MAA+C;;QAIxCH;IAFP,MAAMI,QAAQD,0BAAAA,OAAQ1B,MAAM;IAC5B,IAAI2B,UAAUC,WAAW,OAAOA;IAChC,gBAAOL,mBAAAA,gBAAgBI,2BAAhBJ,iBAAwB3B,EAAE,mBAAI;AACvC;AA+BA,OAAO,SAASiC,mBAAmBH,MAAkB;QAanCxB,qBACAA;IAbhB,MAAM,EAAEF,MAAM,EAAW,GAAG0B,QAATI,wCAASJ;;;IAC5B,MAAMxB,UAAUwB,OAAOxB,OAAO;IAC9B,OAAO,aACF4B;QACH5B,SAAS,aACJA;YACH6B,gBAAgB7B,QAAQ6B,cAAc,KAAK;YAC3CC,gBAAgB9B,QAAQ8B,cAAc,KAAK;YAC3CC,iBACEC,OAAOhC,QAAQ+B,eAAe,KAAK,IAAIC,OAAOhC,QAAQ+B,eAAe,IAAI;YAC3EE,WAAWjC,QAAQiC,SAAS,KAAK;YACjCC,WAAW;YACXhC,UAAU,GAAEF,sBAAAA,QAAQE,UAAU,YAAlBF,sBAAsB;YAClCM,UAAU,GAAEN,sBAAAA,QAAQM,UAAU,YAAlBN,sBAAsB;;QAEpCc,SAASU,OAAOV,OAAO,KAAK;OACxBhB,WAAW4B,YAAY;QAAE5B;IAAO,IAAI,CAAC;AAE7C;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASqC,yBACd5B,KAAmD;IAEnD,MAAM6B,OAAO7B,gBAAAA,QAAS,EAAE;IACxB,MAAM8B,YAAYD,KAAKE,SAAS,CAACxD;IACjC,OAAO;WAAKuD,YAAY,IAAID,OAAOA,KAAK5C,KAAK,CAAC,GAAG6C;KAAY;AAC/D;AAkBA;;;;;;;;;;CAUC,GACD,OAAO,MAAME,wBAAwB,EAAC;AACtC,OAAO,MAAMC,wBAAwB,KAAK,KAAK,GAAE;AAEjD,OAAO,MAAMC,0BAA8D;IACzEC,aAAa;IACbC,WAAW;IACXC,aAAa;IACbC,eAAe;IACfC,aAAa;IACbC,aAAa;IACbC,WAAW;IACXC,UAAU;IACVC,aAAa;IACbC,aAAa;IACbC,aAAa;IACbC,aAAa;IACbC,eAAe;IACfC,YAAY;IACZC,aAAa;IACbC,cAAc;IACdC,UAAU;IACVC,WAAW;IACXC,YAAY;IACZC,cAAc;IACdC,iBAAiB;IACjBC,UAAU;IACVC,WAAW;IACXC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,cAAc;IACdC,WAAW;IACXC,cAAc;IACdC,YAAY;IACZC,eAAe;IACfC,gBAAgB;IAChBC,MAAM;IACNC,cAAc;IACdC,UAAU;IACVC,iBAAiB;IACjBC,eAAe;IACfC,oBAAoB;IACpBC,eAAe;IACfC,gBAAgB;AAClB,EAAC;AAED,oDAAoD,GACpD,OAAO,SAASC,kBAAkB7E,KAAc;IAC9C,OACE2B,OAAOmD,SAAS,CAAC9E,UACjB,AAACA,SAAoBkC,yBACrB,AAAClC,SAAoBmC;AAEzB;AAEA,oEAAoE,GACpE,OAAO,SAAS4C,kBAAkBnF,KAAa;IAC7C,OACE,CAACvB,iBAAiB2G,QAAQ,CAACpF,UAC3BzB,qBAAqB8G,IAAI,CAACrF;AAE9B;AAEA;;;CAGC,GACD,OAAO,SAASsF,mBAAmB/D,MAAkB;QAC9CA;IAAL,IAAI,GAACA,eAAAA,OAAOzB,IAAI,qBAAXyB,aAAajC,IAAI,KAAI,OAAO;IACjC,sEAAsE;IACtE,0EAA0E;IAC1E,IAAIiC,OAAO1B,MAAM,IAAI,QAAQ,CAACuB,gBAAgBG,OAAO1B,MAAM,GAAG;QAC5D,OAAO;IACT;IACA,2EAA2E;IAC3E,wEAAwE;IACxE,OAAOrB,oBAAoB+C,QAAQ;QACjCgE,cAAc,CAACzG,MAAM0G,QAAUC,kBAAkB3G,MAAwB0G;IAC3E;AACF;AAEA;;;;CAIC,GACD,SAASC,kBAAkB3G,IAAoB,EAAE0G,KAAa;QAuBzD1G,iBACAA,mBAMAA,iBACAA,mBAQkCA,aAKlCA,cACAA,gBAMAA,kBACAA,oBAMAA,kBACAA;IA1DH,IAAIA,KAAKE,IAAI,KAAK,UAAU,CAACiG,kBAAkBnG,KAAK4G,YAAY,GAAG;QACjE,OAAO,GAAGF,MAAM,eAAe,EAAElD,sBAAsB,YAAY,EAAEC,sBAAsB,QAAQ,CAAC;IACtG;IACA,IAAIzD,KAAKE,IAAI,KAAK,gBAAgB;;YACjBF;QAAf,MAAM6G,kBAAS7G,kBAAAA,KAAKgC,SAAS,qBAAdhC,gBAAgBQ,IAAI,qBAAM;QACzC,IACE,CAACqG,UACA,CAAClH,iBAAiB2G,QAAQ,CAACO,WAAkB,CAACR,kBAAkBQ,SACjE;YACA,OAAO,GAAGH,MAAM,4BAA4B,CAAC;QAC/C;QACA,IAAI,CAACP,kBAAkBnG,KAAKiC,cAAc,GAAG;YAC3C,OAAO,GAAGyE,MAAM,gBAAgB,EAAElD,sBAAsB,CAAC,EAAEC,sBAAsB,QAAQ,CAAC;QAC5F;IACF;IACA,IAAIzD,KAAKE,IAAI,KAAK,eAAe;;YACRF;QAAvB,IAAI,CAACqG,4BAAkBrG,mBAAAA,KAAKgC,SAAS,qBAAdhC,iBAAgBQ,IAAI,sBAAM,KAAK;YACpD,OAAO,GAAGkG,MAAM,qDAAqD,CAAC;QACxE;IACF;IACA,IACE1G,KAAKE,IAAI,KAAK,mBACd,GAACF,kBAAAA,KAAK8G,SAAS,qBAAd9G,gBAAgBQ,IAAI,OACrB,GAACR,oBAAAA,KAAK+G,WAAW,qBAAhB/G,kBAAkBQ,IAAI,KACvB;QACA,OAAO,GAAGkG,MAAM,gBAAgB,CAAC;IACnC;IACA,IACE1G,KAAKE,IAAI,KAAK,iBACd,GAACF,kBAAAA,KAAKgH,SAAS,qBAAdhH,gBAAgBQ,IAAI,OACrB,GAACR,oBAAAA,KAAKiH,WAAW,qBAAhBjH,kBAAkBQ,IAAI,KACvB;QACA,OAAO,GAAGkG,MAAM,gBAAgB,CAAC;IACnC;IACA,IAAI1G,KAAKE,IAAI,KAAK,aAAa;YACxBF,eACAA;QADL,IAAI,GAACA,gBAAAA,KAAK4B,OAAO,qBAAZ5B,cAAcQ,IAAI,KAAI,OAAO,GAAGkG,MAAM,mBAAmB,CAAC;QAC/D,IAAI,GAAC1G,aAAAA,KAAK6B,IAAI,qBAAT7B,WAAWQ,IAAI,KAAI,OAAO,GAAGkG,MAAM,sBAAsB,CAAC;IACjE;IACA,IAAI1G,KAAKE,IAAI,KAAK,kBAAkB,GAACF,cAAAA,KAAKY,KAAK,qBAAVZ,YAAYQ,IAAI,KAAI;QACvD,OAAO,GAAGkG,MAAM,8BAA8B,CAAC;IACjD;IACA,IACE1G,KAAKE,IAAI,KAAK,gBACd,GAACF,eAAAA,KAAKkH,MAAM,qBAAXlH,aAAaQ,IAAI,OAClB,GAACR,iBAAAA,KAAKmH,QAAQ,qBAAbnH,eAAeQ,IAAI,KACpB;QACA,OAAO,GAAGkG,MAAM,aAAa,CAAC;IAChC;IACA,IACE1G,KAAKE,IAAI,KAAK,mBACd,GAACF,mBAAAA,KAAK8G,SAAS,qBAAd9G,iBAAgBQ,IAAI,OACrB,GAACR,qBAAAA,KAAK+G,WAAW,qBAAhB/G,mBAAkBQ,IAAI,KACvB;QACA,OAAO,GAAGkG,MAAM,gBAAgB,CAAC;IACnC;IACA,IACE1G,KAAKE,IAAI,KAAK,oBACd,GAACF,mBAAAA,KAAKoH,UAAU,qBAAfpH,iBAAiBQ,IAAI,OACtB,GAACR,qBAAAA,KAAKqH,YAAY,qBAAjBrH,mBAAmBQ,IAAI,KACxB;QACA,OAAO,GAAGkG,MAAM,iBAAiB,CAAC;IACpC;IACA,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,IACE1G,KAAKE,IAAI,KAAK,qBACd,CAACZ,wBAAwBU,KAAKsH,cAAc,GAC5C;QACA,OAAO,GAAGZ,MAAM,wBAAwB,CAAC;IAC3C;IACA,IAAI1G,KAAKE,IAAI,KAAK,iBAAiB;;YACrBF;QAAZ,MAAM8B,gBAAM9B,YAAAA,KAAK8B,GAAG,qBAAR9B,UAAUQ,IAAI,sBAAM;QAChC,IAAI,CAACsB,KAAK,OAAO,GAAG4E,MAAM,eAAe,CAAC;QAC1C,IAAI5E,IAAIyF,MAAM,GAAGpH,wBAAwB;YACvC,OAAO,GAAGuG,MAAM,mBAAmB,EAAEvG,uBAAuB,WAAW,CAAC;QAC1E;IACF;IACA,IAAIH,KAAKE,IAAI,KAAK,sBAAsB;YAChBF,gBAAyBA,kBAM5CA,iBACAA;QAPH,MAAMwH,QAAQC,QAAQzH,EAAAA,iBAAAA,KAAK0H,QAAQ,qBAAb1H,eAAeQ,IAAI,SAAMR,mBAAAA,KAAK2H,UAAU,qBAAf3H,iBAAiBQ,IAAI;QACpE,IAAIR,KAAKyB,UAAU,KAAK,QAAQ+F,OAAO;YACrC,OAAO,GAAGd,MAAM,wCAAwC,CAAC;QAC3D;QACA,IACE1G,KAAKyB,UAAU,KAAK,QACpB,GAACzB,kBAAAA,KAAK0H,QAAQ,qBAAb1H,gBAAeQ,IAAI,OACpB,GAACR,oBAAAA,KAAK2H,UAAU,qBAAf3H,kBAAiBQ,IAAI,GAAG8F,QAAQ,CAAC,OAClC;YACA,OAAO,GAAGI,MAAM,iCAAiC,CAAC;QACpD;IACF;IACA,IAAI1G,KAAKE,IAAI,KAAK,iBAAiB;;YAC5BF,cAWiBA;QAXtB,IAAI,GAACA,eAAAA,KAAKY,KAAK,qBAAVZ,aAAYQ,IAAI,KAAI,OAAO,GAAGkG,MAAM,uBAAuB,CAAC;QACjE,IAAI,CAAClH,cAAcQ,KAAK0B,IAAI,GAAG,OAAO,GAAGgF,MAAM,uBAAuB,CAAC;QACvE,IACE,CAACzD,OAAOmD,SAAS,CAACpG,KAAK2B,SAAS,KAChC3B,KAAK2B,SAAS,GAAG,KACjB3B,KAAK2B,SAAS,GAAGtC,uBACjB;YACA,OAAO,GAAGqH,MAAM,WAAW,EAAErH,sBAAsB,KAAK,CAAC;QAC3D;QACA,uEAAuE;QACvE,iEAAiE;QACjE,MAAMuI,0BAAgB5H,sBAAAA,KAAK4H,aAAa,qBAAlB5H,oBAAoBQ,IAAI,sBAAM;QACpD,IAAIoH,iBAAiB,CAACA,cAActB,QAAQ,CAAC,MAAM;YACjD,OAAO,GAAGI,MAAM,oCAAoC,CAAC;QACvD;IACF;IACA,IAAI1G,KAAKE,IAAI,KAAK,kBAAkB;YAI7BF;QAHL,IAAI,CAACT,kBAAkBS,KAAK0B,IAAI,GAAG;YACjC,OAAO,GAAGgF,MAAM,2BAA2B,CAAC;QAC9C;QACA,IAAI,GAAC1G,cAAAA,KAAK6B,IAAI,qBAAT7B,YAAWQ,IAAI,KAAI,OAAO,GAAGkG,MAAM,qBAAqB,CAAC;IAChE;IACA,OAAO;AACT;AAEA,yEAAyE,GACzE,OAAO,MAAMmB,uBAAuB,EAAC"}

package/src/lib/app-utils/consent-groups.d.ts

@@ -128,7 +128,7 @@
  * are resolved by different functions on purpose, and neither reads the
  * other.
  */
-import type { TopicSubscriptionState } from './email-topics';
+import type { TopicSubscriptionState } from './subscription-topics';
 import { type ScopeToken } from './scope-tokens';
 /**
  * The org field holding the declarations: