@aglyn/plugins-outreach 1.0.0-beta.143

package/src/lib/routes/sequence-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/sequence-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createResourceUid } from '@aglyn/aglyn/app-utils/create-resource-uid'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { applyOutreachEnrollmentEvent } from '../engine/enrollment-state'\nimport {\n  validateOutreachSequence,\n  validateOutreachSequenceActivation,\n} from '../engine/sequence-validation'\nimport type {\n  OutreachSequenceAction,\n  OutreachSequenceSaveResponse,\n  OutreachSequenceStatusResponse,\n} from '../model/outreach-api'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type { OutreachMailbox, OutreachSequence, OutreachSequenceStatus } from '../model/outreach.types'\nimport {\n  outreachEnrolledSequenceIssues,\n  outreachMailboxActivationIssue,\n  readOutreachSequenceDraft,\n  type OutreachSequenceDraft,\n  type OutreachSequenceIssue,\n} from '../model/sequence-draft'\nimport { readOutreachComplianceSettingsDoc } from '../storage/compliance-settings-store'\nimport {\n  outreachOrgCollection,\n  readStoredOutreachEnrollment,\n  readStoredOutreachMailbox,\n  readStoredOutreachSequence,\n} from '../storage/outreach-records'\nimport { OUTREACH_SEQUENCE_ACTIVITY_TARGET, type OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate, type OutreachRouteCaller } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * THE SEQUENCE ROUTES (AGL-2980): save, activate, pause, archive, delete.\n *\n * ## Who may change a sequence\n *\n * A sequence sends as the member whose mailbox it names, so it is theirs to\n * change: the member who connected the mailbox, or an organization owner or\n * admin, may save it, activate it and send from it — the same two the\n * mailbox's own routes let manage the mailbox. Anyone with `outreach.use`\n * may pause or archive any sequence, because stopping mail is never the act\n * that needs guarding.\n *\n * ## Saving\n *\n * The draft is read with the editor's reader and judged by the engine's\n * validator, so the save refuses exactly what the editor showed beside a\n * field. On top of that, the site must be one of the organization's, the\n * mailbox one of its connected mailboxes, the countries ones the\n * organization allows, and — once anyone is enrolled — the steps, site and\n * mailbox fixed (`outreachEnrolledSequenceIssues`). A new sequence is a\n * draft; an edit keeps the status it had, and an active sequence stays\n * active only because the edit passed the same validator activation does.\n *\n * ## Activating\n *\n * `validateOutreachSequenceActivation`: everything a save refuses on, and an\n * organization whose footer cannot be written — no legal name, or no postal\n * address. And its mailbox must be sending (`outreachMailboxActivationIssue`):\n * chosen, still connected, not paused, and not waiting to be reconnected —\n * the same words the sequence page shows beside its disabled Activate.\n *\n * ## Archiving\n *\n * Final. Every person still active or paused in the sequence is stopped\n * with `sequence_archived`, in batches, so no archived sequence goes on\n * sending.\n */\n\n/** A batch holds 500 writes; a page of enrollments stops this many. */\nconst ARCHIVE_PAGE = 400\n\n/** The activity line each lifecycle act writes. */\nexport const OUTREACH_SEQUENCE_ACTIVITY = {\n  create: 'Created a sequence',\n  activate: 'Activated a sequence',\n  pause: 'Paused a sequence',\n  archive: 'Archived a sequence',\n  delete: 'Deleted a sequence',\n} as const\n\n/** Where each action may start, and where it ends. */\nconst TRANSITIONS: Record<\n  OutreachSequenceAction,\n  { from: readonly OutreachSequenceStatus[]; to: OutreachSequenceStatus }\n> = {\n  activate: { from: ['draft', 'paused'], to: 'active' },\n  pause: { from: ['active'], to: 'paused' },\n  archive: { from: ['draft', 'active', 'paused'], to: 'archived' },\n}\n\nconst ACTION_REFUSALS: Record<OutreachSequenceAction, string> = {\n  activate: 'Only a draft or paused sequence can be activated.',\n  pause: 'Only an active sequence can be paused.',\n  archive: 'This sequence is already archived.',\n}\n\nexport interface OutreachSequenceRoutes {\n  save: PluginWebApiHandler\n  status: PluginWebApiHandler\n  remove: PluginWebApiHandler\n}\n\ntype Firestore = FirebaseFirestore.Firestore\n\nasync function loadSequence(\n  firestore: Firestore,\n  orgId: string,\n  sequenceId: string,\n): Promise<OutreachSequence | null> {\n  const snapshot = await outreachOrgCollection(firestore, orgId, 'sequences').doc(sequenceId).get()\n  return readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined)\n}\n\n/** Whether anyone was ever enrolled in the sequence. */\nasync function hasEnrollments(firestore: Firestore, orgId: string, sequenceId: string): Promise<boolean> {\n  const found = await outreachOrgCollection(firestore, orgId, 'enrollments')\n    .where('sequenceId', '==', sequenceId)\n    .limit(1)\n    .get()\n  return !found.empty\n}\n\nconst issue = (\n  path: string,\n  code: OutreachSequenceIssue['code'],\n  message: string,\n): OutreachSequenceIssue => ({ path, code, message, severity: 'error' })\n\n/**\n * The organization-level facts a draft has to agree with: its site is the\n * organization's, its mailbox is connected and the caller may send from it,\n * and its countries are ones the organization allows. `activating` adds\n * that the mailbox is sending now — chosen, and neither paused nor waiting\n * to be reconnected.\n */\nasync function draftPlacementIssues(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  draft: OutreachSequenceDraft,\n  options: { activating?: boolean } = {},\n): Promise<OutreachSequenceIssue[]> {\n  const issues: OutreachSequenceIssue[] = []\n  if (draft.hostId) {\n    const host = readOutreachDocumentId(draft.hostId)\n      ? await firestore.collection('hosts').doc(draft.hostId).get()\n      : null\n    if (!host?.exists || host.get('orgId') !== caller.orgId) {\n      issues.push(issue('hostId', 'host_unknown', \"Choose one of this organization's sites.\"))\n    }\n  } else {\n    issues.push(issue('hostId', 'host_unknown', \"Choose the site whose contacts this sequence emails.\"))\n  }\n  const mailbox = draft.mailboxId ? await loadMailbox(firestore, caller.orgId, draft.mailboxId) : null\n  const activation = options.activating ? outreachMailboxActivationIssue(draft.mailboxId, mailbox) : null\n  if (draft.mailboxId) {\n    const placement = mailboxIssues(caller, mailbox)\n    // A mailbox that is gone is refused once, in activation's words when\n    // activating: they say what to do next.\n    issues.push(\n      ...(activation?.code === 'mailbox_unknown'\n        ? placement.filter((entry) => entry.code !== 'mailbox_unknown')\n        : placement),\n    )\n  }\n  if (activation && !issues.some((entry) => entry.code === 'mailbox_not_yours')) issues.push(activation)\n  const settings = await readOutreachComplianceSettingsDoc(firestore, caller.orgId)\n  const outside = draft.settings.allowedCountries.filter(\n    (code) => !settings.allowedCountries.includes(code),\n  )\n  if (outside.length) {\n    issues.push(\n      issue(\n        'settings.allowedCountries',\n        'country_not_in_org',\n        `${outside.join(', ')} ${outside.length === 1 ? \"isn't\" : \"aren't\"} among the countries your organization allows. Add ${outside.length === 1 ? 'it' : 'them'} in Sequences compliance settings first.`,\n      ),\n    )\n  }\n  return issues\n}\n\n/** A mailbox of this organization's, as stored; `null` when there is none by that id. */\nasync function loadMailbox(firestore: Firestore, orgId: string, mailboxId: string): Promise<OutreachMailbox | null> {\n  const snapshot = readOutreachDocumentId(mailboxId)\n    ? await outreachOrgCollection(firestore, orgId, 'mailboxes').doc(mailboxId).get()\n    : null\n  return readStoredOutreachMailbox(mailboxId, snapshot?.exists ? snapshot.data() : undefined)\n}\n\n/** Whether the mailbox is connected here, and the caller may send from it. */\nfunction mailboxIssues(caller: OutreachRouteCaller, mailbox: OutreachMailbox | null): OutreachSequenceIssue[] {\n  if (!mailbox || mailbox.status === 'disconnected') {\n    return [issue('mailboxId', 'mailbox_unknown', 'That mailbox is not connected to this organization.')]\n  }\n  if (mailbox.connectedByUid !== caller.uid && !caller.isOrgAdmin) {\n    return [\n      issue(\n        'mailboxId',\n        'mailbox_not_yours',\n        'Only the member who connected this mailbox, or an organization owner or admin, can send from it.',\n      ),\n    ]\n  }\n  return []\n}\n\n/** One issue per field and code: activation and the engine can both ask for a mailbox. */\nfunction distinctIssues(issues: readonly OutreachSequenceIssue[]): OutreachSequenceIssue[] {\n  const seen = new Set<string>()\n  return issues.filter((entry) => {\n    const key = `${entry.path}|${entry.code}`\n    if (seen.has(key)) return false\n    seen.add(key)\n    return true\n  })\n}\n\nexport function createOutreachSequenceRoutes(deps: OutreachRouteDeps): OutreachSequenceRoutes {\n  const activity = (caller: OutreachRouteCaller, action: string, sequence: Pick<OutreachSequence, 'id' | 'name'>) =>\n    deps.logOrgActivity(caller.orgId, { uid: caller.uid, email: caller.email }, action, {\n      type: OUTREACH_SEQUENCE_ACTIVITY_TARGET,\n      id: sequence.id,\n      name: sequence.name,\n    })\n\n  const save: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const firestore = deps.firestore()\n\n    const rawId = body['sequenceId']\n    const sequenceId = rawId === undefined || rawId === null || rawId === '' ? null : readOutreachDocumentId(rawId)\n    if (rawId && !sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to save.')\n    const existing = sequenceId ? await loadSequence(firestore, caller.orgId, sequenceId) : null\n    if (sequenceId && !existing) {\n      return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n    }\n    if (existing?.status === 'archived') {\n      return outreachRefusal(409, 'sequence-archived', \"An archived sequence can't be edited.\")\n    }\n\n    const draft = readOutreachSequenceDraft(body['sequence'])\n    // A sequence sends as its mailbox's member, so it is theirs (or an\n    // admin's) to change — the stored mailbox as well as a new one: moving\n    // a colleague's sequence onto your own mailbox is still changing theirs.\n    if (existing?.mailboxId && existing.mailboxId !== draft.mailboxId) {\n      const stored = mailboxIssues(caller, await loadMailbox(firestore, caller.orgId, existing.mailboxId))\n      const refused = stored.find((entry) => entry.code === 'mailbox_not_yours')\n      if (refused) return outreachRefusal(403, 'permission', refused.message)\n    }\n    const judged: OutreachSequenceIssue[] = [\n      ...validateOutreachSequence(draft),\n      ...(await draftPlacementIssues(firestore, caller, draft)),\n    ]\n    const ownership = judged.find((entry) => entry.code === 'mailbox_not_yours')\n    if (ownership) return outreachRefusal(403, 'permission', ownership.message)\n    if (existing && (await hasEnrollments(firestore, caller.orgId, existing.id))) {\n      judged.push(...outreachEnrolledSequenceIssues(existing, draft))\n    }\n    const errors = judged.filter((entry) => entry.severity === 'error')\n    if (errors.length) {\n      return outreachRefusal(400, 'invalid-sequence', errors[0].message, { issues: judged })\n    }\n\n    const nowMs = deps.now()\n    const ref = existing\n      ? outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(existing.id)\n      : outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(createResourceUid())\n    const sequence: OutreachSequence = {\n      id: ref.id,\n      ...draft,\n      status: existing?.status ?? 'draft',\n      createdAtMs: existing?.createdAtMs || nowMs,\n      updatedAtMs: nowMs,\n    }\n    await ref.set(sequence)\n    if (!existing) await activity(caller, OUTREACH_SEQUENCE_ACTIVITY.create, sequence)\n    return outreachOk({\n      ok: true,\n      sequence,\n      created: !existing,\n      warnings: judged.filter((entry) => entry.severity === 'warning'),\n    } satisfies OutreachSequenceSaveResponse)\n  }\n\n  const status: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const action = body['action'] as OutreachSequenceAction\n    const sequenceId = readOutreachDocumentId(body['sequenceId'])\n    if (!sequenceId || !Object.prototype.hasOwnProperty.call(TRANSITIONS, action)) {\n      return outreachRefusal(400, 'invalid-request', 'Name the sequence, and activate, pause or archive.')\n    }\n    const firestore = deps.firestore()\n    const sequence = await loadSequence(firestore, caller.orgId, sequenceId)\n    if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n    const transition = TRANSITIONS[action]\n    if (sequence.status === transition.to) {\n      return outreachOk({ ok: true, sequence, stoppedEnrollments: 0 } satisfies OutreachSequenceStatusResponse)\n    }\n    if (!transition.from.includes(sequence.status)) {\n      return outreachRefusal(409, 'transition-refused', ACTION_REFUSALS[action])\n    }\n\n    if (action === 'activate') {\n      const orgSettings = await readOutreachComplianceSettingsDoc(firestore, caller.orgId)\n      const judged: OutreachSequenceIssue[] = distinctIssues([\n        ...validateOutreachSequenceActivation(sequence, orgSettings),\n        ...(await draftPlacementIssues(firestore, caller, sequence, { activating: true })),\n      ]).filter((entry) => entry.severity === 'error')\n      if (judged.length) {\n        const ownership = judged.find((entry) => entry.code === 'mailbox_not_yours')\n        return ownership\n          ? outreachRefusal(403, 'permission', ownership.message)\n          : outreachRefusal(409, 'activation-refused', judged[0].message, { issues: judged })\n      }\n    }\n\n    const nowMs = deps.now()\n    const next: OutreachSequence = { ...sequence, status: transition.to, updatedAtMs: nowMs }\n    await outreachOrgCollection(firestore, caller.orgId, 'sequences')\n      .doc(sequence.id)\n      .update({ status: next.status, updatedAtMs: nowMs })\n    const stoppedEnrollments =\n      action === 'archive' ? await stopOpenEnrollments(firestore, caller, sequence.id, nowMs) : 0\n    await activity(caller, OUTREACH_SEQUENCE_ACTIVITY[action], sequence)\n    return outreachOk({ ok: true, sequence: next, stoppedEnrollments } satisfies OutreachSequenceStatusResponse)\n  }\n\n  const remove: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const sequenceId = readOutreachDocumentId(body['sequenceId'])\n    if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to delete.')\n    const firestore = deps.firestore()\n    const sequence = await loadSequence(firestore, caller.orgId, sequenceId)\n    if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n    if (sequence.status !== 'draft' || (await hasEnrollments(firestore, caller.orgId, sequence.id))) {\n      // What people were sent, and why they stopped, is the record of what\n      // this organization did; only a draft nobody was enrolled in has none.\n      return outreachRefusal(\n        409,\n        'delete-refused',\n        'Only a draft nobody was enrolled in can be deleted. Archive this sequence instead.',\n      )\n    }\n    await outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(sequence.id).delete()\n    await activity(caller, OUTREACH_SEQUENCE_ACTIVITY.delete, sequence)\n    return outreachOk({ ok: true })\n  }\n\n  return { save, status, remove }\n}\n\n/**\n * Stops everyone still active or paused in an archived sequence, a page at\n * a time, through the engine's own transition. Returns how many it stopped.\n */\nasync function stopOpenEnrollments(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  sequenceId: string,\n  nowMs: number,\n): Promise<number> {\n  const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n  let stopped = 0\n  let after: FirebaseFirestore.QueryDocumentSnapshot | null = null\n  for (;;) {\n    let page = enrollments.where('sequenceId', '==', sequenceId).orderBy('__name__').limit(ARCHIVE_PAGE)\n    if (after) page = page.startAfter(after)\n    const snapshot = await page.get()\n    if (snapshot.empty) break\n    const batch = firestore.batch()\n    let writes = 0\n    for (const doc of snapshot.docs) {\n      const enrollment = readStoredOutreachEnrollment(doc.id, doc.data())\n      if (!enrollment || !OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(enrollment.status)) continue\n      const { patch } = applyOutreachEnrollmentEvent(enrollment, {\n        type: 'stop',\n        reason: 'sequence_archived',\n        atMs: nowMs,\n        byUid: caller.uid,\n      })\n      if (!patch) continue\n      batch.update(doc.ref, { ...patch, updatedAtMs: nowMs })\n      writes += 1\n    }\n    if (writes) await batch.commit()\n    stopped += writes\n    after = snapshot.docs[snapshot.docs.length - 1]\n    if (snapshot.size < ARCHIVE_PAGE) break\n  }\n  return stopped\n}\n"],"names":["createResourceUid","applyOutreachEnrollmentEvent","validateOutreachSequence","validateOutreachSequenceActivation","OUTREACH_OPEN_ENROLLMENT_STATUSES","outreachEnrolledSequenceIssues","outreachMailboxActivationIssue","readOutreachSequenceDraft","readOutreachComplianceSettingsDoc","outreachOrgCollection","readStoredOutreachEnrollment","readStoredOutreachMailbox","readStoredOutreachSequence","OUTREACH_SEQUENCE_ACTIVITY_TARGET","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","ARCHIVE_PAGE","OUTREACH_SEQUENCE_ACTIVITY","create","activate","pause","archive","delete","TRANSITIONS","from","to","ACTION_REFUSALS","loadSequence","firestore","orgId","sequenceId","snapshot","doc","get","exists","data","undefined","hasEnrollments","found","where","limit","empty","issue","path","code","message","severity","draftPlacementIssues","caller","draft","options","issues","hostId","host","collection","push","mailbox","mailboxId","loadMailbox","activation","activating","placement","mailboxIssues","filter","entry","some","settings","outside","allowedCountries","includes","length","join","status","connectedByUid","uid","isOrgAdmin","distinctIssues","seen","Set","key","has","add","createOutreachSequenceRoutes","deps","activity","action","sequence","logOrgActivity","email","type","id","name","save","request","method","body","gate","Response","rawId","existing","stored","refused","find","judged","ownership","errors","nowMs","now","ref","createdAtMs","updatedAtMs","set","ok","created","warnings","Object","prototype","hasOwnProperty","call","transition","stoppedEnrollments","orgSettings","next","update","stopOpenEnrollments","remove","enrollments","stopped","after","page","orderBy","startAfter","batch","writes","docs","enrollment","patch","reason","atMs","byUid","commit","size"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SACEC,wBAAwB,EACxBC,kCAAkC,QAC7B,mCAA+B;AAMtC,SAASC,iCAAiC,QAAQ,qBAAiB;AAEnE,SACEC,8BAA8B,EAC9BC,8BAA8B,EAC9BC,yBAAyB,QAGpB,6BAAyB;AAChC,SAASC,iCAAiC,QAAQ,0CAAsC;AACxF,SACEC,qBAAqB,EACrBC,4BAA4B,EAC5BC,yBAAyB,EACzBC,0BAA0B,QACrB,iCAA6B;AACpC,SAASC,iCAAiC,QAAgC,kBAAc;AACxF,SAASC,iBAAiB,QAAkC,kBAAc;AAC1E,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GAED,qEAAqE,GACrE,MAAMC,eAAe;AAErB,iDAAiD,GACjD,OAAO,MAAMC,6BAA6B;IACxCC,QAAQ;IACRC,UAAU;IACVC,OAAO;IACPC,SAAS;IACTC,QAAQ;AACV,EAAU;AAEV,oDAAoD,GACpD,MAAMC,cAGF;IACFJ,UAAU;QAAEK,MAAM;YAAC;YAAS;SAAS;QAAEC,IAAI;IAAS;IACpDL,OAAO;QAAEI,MAAM;YAAC;SAAS;QAAEC,IAAI;IAAS;IACxCJ,SAAS;QAAEG,MAAM;YAAC;YAAS;YAAU;SAAS;QAAEC,IAAI;IAAW;AACjE;AAEA,MAAMC,kBAA0D;IAC9DP,UAAU;IACVC,OAAO;IACPC,SAAS;AACX;AAUA,eAAeM,aACbC,SAAoB,EACpBC,KAAa,EACbC,UAAkB;IAElB,MAAMC,WAAW,MAAM1B,sBAAsBuB,WAAWC,OAAO,aAAaG,GAAG,CAACF,YAAYG,GAAG;IAC/F,OAAOzB,2BAA2BsB,YAAYC,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKC;AACpF;AAEA,sDAAsD,GACtD,eAAeC,eAAeT,SAAoB,EAAEC,KAAa,EAAEC,UAAkB;IACnF,MAAMQ,QAAQ,MAAMjC,sBAAsBuB,WAAWC,OAAO,eACzDU,KAAK,CAAC,cAAc,MAAMT,YAC1BU,KAAK,CAAC,GACNP,GAAG;IACN,OAAO,CAACK,MAAMG,KAAK;AACrB;AAEA,MAAMC,QAAQ,CACZC,MACAC,MACAC,UAC2B,CAAA;QAAEF;QAAMC;QAAMC;QAASC,UAAU;IAAQ,CAAA;AAEtE;;;;;;CAMC,GACD,eAAeC,qBACbnB,SAAoB,EACpBoB,MAA2B,EAC3BC,KAA4B,EAC5BC,UAAoC,CAAC,CAAC;IAEtC,MAAMC,SAAkC,EAAE;IAC1C,IAAIF,MAAMG,MAAM,EAAE;QAChB,MAAMC,OAAOvC,uBAAuBmC,MAAMG,MAAM,IAC5C,MAAMxB,UAAU0B,UAAU,CAAC,SAAStB,GAAG,CAACiB,MAAMG,MAAM,EAAEnB,GAAG,KACzD;QACJ,IAAI,EAACoB,wBAAAA,KAAMnB,MAAM,KAAImB,KAAKpB,GAAG,CAAC,aAAae,OAAOnB,KAAK,EAAE;YACvDsB,OAAOI,IAAI,CAACb,MAAM,UAAU,gBAAgB;QAC9C;IACF,OAAO;QACLS,OAAOI,IAAI,CAACb,MAAM,UAAU,gBAAgB;IAC9C;IACA,MAAMc,UAAUP,MAAMQ,SAAS,GAAG,MAAMC,YAAY9B,WAAWoB,OAAOnB,KAAK,EAAEoB,MAAMQ,SAAS,IAAI;IAChG,MAAME,aAAaT,QAAQU,UAAU,GAAG1D,+BAA+B+C,MAAMQ,SAAS,EAAED,WAAW;IACnG,IAAIP,MAAMQ,SAAS,EAAE;QACnB,MAAMI,YAAYC,cAAcd,QAAQQ;QACxC,qEAAqE;QACrE,wCAAwC;QACxCL,OAAOI,IAAI,IACLI,CAAAA,8BAAAA,WAAYf,IAAI,MAAK,oBACrBiB,UAAUE,MAAM,CAAC,CAACC,QAAUA,MAAMpB,IAAI,KAAK,qBAC3CiB;IAER;IACA,IAAIF,cAAc,CAACR,OAAOc,IAAI,CAAC,CAACD,QAAUA,MAAMpB,IAAI,KAAK,sBAAsBO,OAAOI,IAAI,CAACI;IAC3F,MAAMO,WAAW,MAAM9D,kCAAkCwB,WAAWoB,OAAOnB,KAAK;IAChF,MAAMsC,UAAUlB,MAAMiB,QAAQ,CAACE,gBAAgB,CAACL,MAAM,CACpD,CAACnB,OAAS,CAACsB,SAASE,gBAAgB,CAACC,QAAQ,CAACzB;IAEhD,IAAIuB,QAAQG,MAAM,EAAE;QAClBnB,OAAOI,IAAI,CACTb,MACE,6BACA,sBACA,GAAGyB,QAAQI,IAAI,CAAC,MAAM,CAAC,EAAEJ,QAAQG,MAAM,KAAK,IAAI,UAAU,SAAS,mDAAmD,EAAEH,QAAQG,MAAM,KAAK,IAAI,OAAO,OAAO,wCAAwC,CAAC;IAG5M;IACA,OAAOnB;AACT;AAEA,uFAAuF,GACvF,eAAeO,YAAY9B,SAAoB,EAAEC,KAAa,EAAE4B,SAAiB;IAC/E,MAAM1B,WAAWjB,uBAAuB2C,aACpC,MAAMpD,sBAAsBuB,WAAWC,OAAO,aAAaG,GAAG,CAACyB,WAAWxB,GAAG,KAC7E;IACJ,OAAO1B,0BAA0BkD,WAAW1B,CAAAA,4BAAAA,SAAUG,MAAM,IAAGH,SAASI,IAAI,KAAKC;AACnF;AAEA,4EAA4E,GAC5E,SAAS0B,cAAcd,MAA2B,EAAEQ,OAA+B;IACjF,IAAI,CAACA,WAAWA,QAAQgB,MAAM,KAAK,gBAAgB;QACjD,OAAO;YAAC9B,MAAM,aAAa,mBAAmB;SAAuD;IACvG;IACA,IAAIc,QAAQiB,cAAc,KAAKzB,OAAO0B,GAAG,IAAI,CAAC1B,OAAO2B,UAAU,EAAE;QAC/D,OAAO;YACLjC,MACE,aACA,qBACA;SAEH;IACH;IACA,OAAO,EAAE;AACX;AAEA,wFAAwF,GACxF,SAASkC,eAAezB,MAAwC;IAC9D,MAAM0B,OAAO,IAAIC;IACjB,OAAO3B,OAAOY,MAAM,CAAC,CAACC;QACpB,MAAMe,MAAM,GAAGf,MAAMrB,IAAI,CAAC,CAAC,EAAEqB,MAAMpB,IAAI,EAAE;QACzC,IAAIiC,KAAKG,GAAG,CAACD,MAAM,OAAO;QAC1BF,KAAKI,GAAG,CAACF;QACT,OAAO;IACT;AACF;AAEA,OAAO,SAASG,6BAA6BC,IAAuB;IAClE,MAAMC,WAAW,CAACpC,QAA6BqC,QAAgBC,WAC7DH,KAAKI,cAAc,CAACvC,OAAOnB,KAAK,EAAE;YAAE6C,KAAK1B,OAAO0B,GAAG;YAAEc,OAAOxC,OAAOwC,KAAK;QAAC,GAAGH,QAAQ;YAClFI,MAAMhF;YACNiF,IAAIJ,SAASI,EAAE;YACfC,MAAML,SAASK,IAAI;QACrB;IAEF,MAAMC,OAA4B,OAAOC;;QACvC,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOnF,yBAAyB;QAC/D,MAAMoF,OAAO,MAAMhF,qBAAqB8E;QACxC,MAAM7C,SAAS,MAAMtC,kBAAkBmF,SAASE,IAAI,CAAC,QAAQ,EAAEZ,KAAKa,IAAI;QACxE,IAAIhD,kBAAkBiD,UAAU,OAAOjD;QACvC,MAAMpB,YAAYuD,KAAKvD,SAAS;QAEhC,MAAMsE,QAAQH,IAAI,CAAC,aAAa;QAChC,MAAMjE,aAAaoE,UAAU9D,aAAa8D,UAAU,QAAQA,UAAU,KAAK,OAAOpF,uBAAuBoF;QACzG,IAAIA,SAAS,CAACpE,YAAY,OAAOjB,gBAAgB,KAAK,mBAAmB;QACzE,MAAMsF,WAAWrE,aAAa,MAAMH,aAAaC,WAAWoB,OAAOnB,KAAK,EAAEC,cAAc;QACxF,IAAIA,cAAc,CAACqE,UAAU;YAC3B,OAAOtF,gBAAgB,KAAK,sBAAsB;QACpD;QACA,IAAIsF,CAAAA,4BAAAA,SAAU3B,MAAM,MAAK,YAAY;YACnC,OAAO3D,gBAAgB,KAAK,qBAAqB;QACnD;QAEA,MAAMoC,QAAQ9C,0BAA0B4F,IAAI,CAAC,WAAW;QACxD,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,IAAII,CAAAA,4BAAAA,SAAU1C,SAAS,KAAI0C,SAAS1C,SAAS,KAAKR,MAAMQ,SAAS,EAAE;YACjE,MAAM2C,SAAStC,cAAcd,QAAQ,MAAMU,YAAY9B,WAAWoB,OAAOnB,KAAK,EAAEsE,SAAS1C,SAAS;YAClG,MAAM4C,UAAUD,OAAOE,IAAI,CAAC,CAACtC,QAAUA,MAAMpB,IAAI,KAAK;YACtD,IAAIyD,SAAS,OAAOxF,gBAAgB,KAAK,cAAcwF,QAAQxD,OAAO;QACxE;QACA,MAAM0D,SAAkC;eACnCzG,yBAAyBmD;eACxB,MAAMF,qBAAqBnB,WAAWoB,QAAQC;SACnD;QACD,MAAMuD,YAAYD,OAAOD,IAAI,CAAC,CAACtC,QAAUA,MAAMpB,IAAI,KAAK;QACxD,IAAI4D,WAAW,OAAO3F,gBAAgB,KAAK,cAAc2F,UAAU3D,OAAO;QAC1E,IAAIsD,YAAa,MAAM9D,eAAeT,WAAWoB,OAAOnB,KAAK,EAAEsE,SAAST,EAAE,GAAI;YAC5Ea,OAAOhD,IAAI,IAAItD,+BAA+BkG,UAAUlD;QAC1D;QACA,MAAMwD,SAASF,OAAOxC,MAAM,CAAC,CAACC,QAAUA,MAAMlB,QAAQ,KAAK;QAC3D,IAAI2D,OAAOnC,MAAM,EAAE;YACjB,OAAOzD,gBAAgB,KAAK,oBAAoB4F,MAAM,CAAC,EAAE,CAAC5D,OAAO,EAAE;gBAAEM,QAAQoD;YAAO;QACtF;QAEA,MAAMG,QAAQvB,KAAKwB,GAAG;QACtB,MAAMC,MAAMT,WACR9F,sBAAsBuB,WAAWoB,OAAOnB,KAAK,EAAE,aAAaG,GAAG,CAACmE,SAAST,EAAE,IAC3ErF,sBAAsBuB,WAAWoB,OAAOnB,KAAK,EAAE,aAAaG,GAAG,CAACpC;QACpE,MAAM0F,WAA6B;YACjCI,IAAIkB,IAAIlB,EAAE;WACPzC;YACHuB,MAAM,UAAE2B,4BAAAA,SAAU3B,MAAM,mBAAI;YAC5BqC,aAAaV,CAAAA,4BAAAA,SAAUU,WAAW,KAAIH;YACtCI,aAAaJ;;QAEf,MAAME,IAAIG,GAAG,CAACzB;QACd,IAAI,CAACa,UAAU,MAAMf,SAASpC,QAAQ/B,2BAA2BC,MAAM,EAAEoE;QACzE,OAAO1E,WAAW;YAChBoG,IAAI;YACJ1B;YACA2B,SAAS,CAACd;YACVe,UAAUX,OAAOxC,MAAM,CAAC,CAACC,QAAUA,MAAMlB,QAAQ,KAAK;QACxD;IACF;IAEA,MAAM0B,SAA8B,OAAOqB;QACzC,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOnF,yBAAyB;QAC/D,MAAMoF,OAAO,MAAMhF,qBAAqB8E;QACxC,MAAM7C,SAAS,MAAMtC,kBAAkBmF,SAASE,IAAI,CAAC,QAAQ,EAAEZ,KAAKa,IAAI;QACxE,IAAIhD,kBAAkBiD,UAAU,OAAOjD;QACvC,MAAMqC,SAASU,IAAI,CAAC,SAAS;QAC7B,MAAMjE,aAAahB,uBAAuBiF,IAAI,CAAC,aAAa;QAC5D,IAAI,CAACjE,cAAc,CAACqF,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAAC/F,aAAa8D,SAAS;YAC7E,OAAOxE,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMe,YAAYuD,KAAKvD,SAAS;QAChC,MAAM0D,WAAW,MAAM3D,aAAaC,WAAWoB,OAAOnB,KAAK,EAAEC;QAC7D,IAAI,CAACwD,UAAU,OAAOzE,gBAAgB,KAAK,sBAAsB;QACjE,MAAM0G,aAAahG,WAAW,CAAC8D,OAAO;QACtC,IAAIC,SAASd,MAAM,KAAK+C,WAAW9F,EAAE,EAAE;YACrC,OAAOb,WAAW;gBAAEoG,IAAI;gBAAM1B;gBAAUkC,oBAAoB;YAAE;QAChE;QACA,IAAI,CAACD,WAAW/F,IAAI,CAAC6C,QAAQ,CAACiB,SAASd,MAAM,GAAG;YAC9C,OAAO3D,gBAAgB,KAAK,sBAAsBa,eAAe,CAAC2D,OAAO;QAC3E;QAEA,IAAIA,WAAW,YAAY;YACzB,MAAMoC,cAAc,MAAMrH,kCAAkCwB,WAAWoB,OAAOnB,KAAK;YACnF,MAAM0E,SAAkC3B,eAAe;mBAClD7E,mCAAmCuF,UAAUmC;mBAC5C,MAAM1E,qBAAqBnB,WAAWoB,QAAQsC,UAAU;oBAAE1B,YAAY;gBAAK;aAChF,EAAEG,MAAM,CAAC,CAACC,QAAUA,MAAMlB,QAAQ,KAAK;YACxC,IAAIyD,OAAOjC,MAAM,EAAE;gBACjB,MAAMkC,YAAYD,OAAOD,IAAI,CAAC,CAACtC,QAAUA,MAAMpB,IAAI,KAAK;gBACxD,OAAO4D,YACH3F,gBAAgB,KAAK,cAAc2F,UAAU3D,OAAO,IACpDhC,gBAAgB,KAAK,sBAAsB0F,MAAM,CAAC,EAAE,CAAC1D,OAAO,EAAE;oBAAEM,QAAQoD;gBAAO;YACrF;QACF;QAEA,MAAMG,QAAQvB,KAAKwB,GAAG;QACtB,MAAMe,OAAyB,aAAKpC;YAAUd,QAAQ+C,WAAW9F,EAAE;YAAEqF,aAAaJ;;QAClF,MAAMrG,sBAAsBuB,WAAWoB,OAAOnB,KAAK,EAAE,aAClDG,GAAG,CAACsD,SAASI,EAAE,EACfiC,MAAM,CAAC;YAAEnD,QAAQkD,KAAKlD,MAAM;YAAEsC,aAAaJ;QAAM;QACpD,MAAMc,qBACJnC,WAAW,YAAY,MAAMuC,oBAAoBhG,WAAWoB,QAAQsC,SAASI,EAAE,EAAEgB,SAAS;QAC5F,MAAMtB,SAASpC,QAAQ/B,0BAA0B,CAACoE,OAAO,EAAEC;QAC3D,OAAO1E,WAAW;YAAEoG,IAAI;YAAM1B,UAAUoC;YAAMF;QAAmB;IACnE;IAEA,MAAMK,SAA8B,OAAOhC;QACzC,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOnF,yBAAyB;QAC/D,MAAMoF,OAAO,MAAMhF,qBAAqB8E;QACxC,MAAM7C,SAAS,MAAMtC,kBAAkBmF,SAASE,IAAI,CAAC,QAAQ,EAAEZ,KAAKa,IAAI;QACxE,IAAIhD,kBAAkBiD,UAAU,OAAOjD;QACvC,MAAMlB,aAAahB,uBAAuBiF,IAAI,CAAC,aAAa;QAC5D,IAAI,CAACjE,YAAY,OAAOjB,gBAAgB,KAAK,mBAAmB;QAChE,MAAMe,YAAYuD,KAAKvD,SAAS;QAChC,MAAM0D,WAAW,MAAM3D,aAAaC,WAAWoB,OAAOnB,KAAK,EAAEC;QAC7D,IAAI,CAACwD,UAAU,OAAOzE,gBAAgB,KAAK,sBAAsB;QACjE,IAAIyE,SAASd,MAAM,KAAK,WAAY,MAAMnC,eAAeT,WAAWoB,OAAOnB,KAAK,EAAEyD,SAASI,EAAE,GAAI;YAC/F,qEAAqE;YACrE,uEAAuE;YACvE,OAAO7E,gBACL,KACA,kBACA;QAEJ;QACA,MAAMR,sBAAsBuB,WAAWoB,OAAOnB,KAAK,EAAE,aAAaG,GAAG,CAACsD,SAASI,EAAE,EAAEpE,MAAM;QACzF,MAAM8D,SAASpC,QAAQ/B,2BAA2BK,MAAM,EAAEgE;QAC1D,OAAO1E,WAAW;YAAEoG,IAAI;QAAK;IAC/B;IAEA,OAAO;QAAEpB;QAAMpB;QAAQqD;IAAO;AAChC;AAEA;;;CAGC,GACD,eAAeD,oBACbhG,SAAoB,EACpBoB,MAA2B,EAC3BlB,UAAkB,EAClB4E,KAAa;IAEb,MAAMoB,cAAczH,sBAAsBuB,WAAWoB,OAAOnB,KAAK,EAAE;IACnE,IAAIkG,UAAU;IACd,IAAIC,QAAwD;IAC5D,OAAS;QACP,IAAIC,OAAOH,YAAYvF,KAAK,CAAC,cAAc,MAAMT,YAAYoG,OAAO,CAAC,YAAY1F,KAAK,CAACxB;QACvF,IAAIgH,OAAOC,OAAOA,KAAKE,UAAU,CAACH;QAClC,MAAMjG,WAAW,MAAMkG,KAAKhG,GAAG;QAC/B,IAAIF,SAASU,KAAK,EAAE;QACpB,MAAM2F,QAAQxG,UAAUwG,KAAK;QAC7B,IAAIC,SAAS;QACb,KAAK,MAAMrG,OAAOD,SAASuG,IAAI,CAAE;YAC/B,MAAMC,aAAajI,6BAA6B0B,IAAI0D,EAAE,EAAE1D,IAAIG,IAAI;YAChE,IAAI,CAACoG,cAAc,CAACvI,kCAAkCqE,QAAQ,CAACkE,WAAW/D,MAAM,GAAG;YACnF,MAAM,EAAEgE,KAAK,EAAE,GAAG3I,6BAA6B0I,YAAY;gBACzD9C,MAAM;gBACNgD,QAAQ;gBACRC,MAAMhC;gBACNiC,OAAO3F,OAAO0B,GAAG;YACnB;YACA,IAAI,CAAC8D,OAAO;YACZJ,MAAMT,MAAM,CAAC3F,IAAI4E,GAAG,EAAE,aAAK4B;gBAAO1B,aAAaJ;;YAC/C2B,UAAU;QACZ;QACA,IAAIA,QAAQ,MAAMD,MAAMQ,MAAM;QAC9Bb,WAAWM;QACXL,QAAQjG,SAASuG,IAAI,CAACvG,SAASuG,IAAI,CAAChE,MAAM,GAAG,EAAE;QAC/C,IAAIvC,SAAS8G,IAAI,GAAG7H,cAAc;IACpC;IACA,OAAO+G;AACT"}

package/src/lib/routes/settings-routes.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginWebApiHandler } from '@aglyn/aglyn/server';
+import type { OutreachRouteDeps } from './route-deps';
+/**
+ * THE COMPLIANCE SETTINGS ROUTE (AGL-2980): `outreach/settings`.
+ *
+ * `GET ?orgId` answers the organization's settings with the defaults
+ * applied; `POST` validates a save with the function the Compliance page
+ * validates with and stores it. A save that changes something writes one
+ * line to the organization's activity feed, because the footer every email
+ * carries is a legal statement and who last changed it is worth knowing.
+ */
+/** The activity line a changed save writes. */
+export declare const OUTREACH_SETTINGS_ACTIVITY = "Updated Outreach compliance settings";
+export declare function createOutreachSettingsRoute(deps: OutreachRouteDeps): PluginWebApiHandler;

package/src/lib/routes/settings-routes.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { validateOutreachComplianceSettings } from "../model/compliance-settings.js";
+import { readOutreachComplianceSettingsDoc, writeOutreachComplianceSettings } from "../storage/compliance-settings-store.js";
+import { outreachRouteGate } from "./route-gate.js";
+import { outreachMethodNotAllowed, outreachOk, outreachRefusal, readOutreachJsonBody } from "./route-http.js";
+/**
+ * THE COMPLIANCE SETTINGS ROUTE (AGL-2980): `outreach/settings`.
+ *
+ * `GET ?orgId` answers the organization's settings with the defaults
+ * applied; `POST` validates a save with the function the Compliance page
+ * validates with and stores it. A save that changes something writes one
+ * line to the organization's activity feed, because the footer every email
+ * carries is a legal statement and who last changed it is worth knowing.
+ */ /** The activity line a changed save writes. */ export const OUTREACH_SETTINGS_ACTIVITY = 'Updated Outreach compliance settings';
+export function createOutreachSettingsRoute(deps) {
+    return async (request)=>{
+        if (request.method === 'GET') {
+            const gate = await outreachRouteGate(request, new URL(request.url).searchParams.get('orgId'), deps.gate);
+            if (gate instanceof Response) return gate;
+            const settings = await readOutreachComplianceSettingsDoc(deps.firestore(), gate.orgId);
+            return outreachOk({
+                ok: true,
+                settings
+            });
+        }
+        if (request.method !== 'POST') return outreachMethodNotAllowed('GET, POST');
+        const body = await readOutreachJsonBody(request);
+        const gate = await outreachRouteGate(request, body['orgId'], deps.gate);
+        if (gate instanceof Response) return gate;
+        const { settings, issues } = validateOutreachComplianceSettings(body);
+        if (issues.length) {
+            return outreachRefusal(400, 'invalid-settings', issues[0].message, {
+                issues
+            });
+        }
+        const result = await writeOutreachComplianceSettings(deps.firestore(), {
+            orgId: gate.orgId,
+            settings,
+            byUid: gate.uid,
+            nowMs: deps.now()
+        });
+        if (result.changed) {
+            await deps.logOrgActivity(gate.orgId, {
+                uid: gate.uid,
+                email: gate.email
+            }, OUTREACH_SETTINGS_ACTIVITY, {
+                type: 'org',
+                id: gate.orgId
+            });
+        }
+        return outreachOk({
+            ok: true,
+            settings: result.settings,
+            changed: result.changed
+        });
+    };
+}
+
+//# sourceMappingURL=settings-routes.js.map

package/src/lib/routes/settings-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/settings-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { validateOutreachComplianceSettings } from '../model/compliance-settings'\nimport type {\n  OutreachSettingsResponse,\n  OutreachSettingsSaveResponse,\n} from '../model/outreach-api'\nimport {\n  readOutreachComplianceSettingsDoc,\n  writeOutreachComplianceSettings,\n} from '../storage/compliance-settings-store'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * THE COMPLIANCE SETTINGS ROUTE (AGL-2980): `outreach/settings`.\n *\n * `GET ?orgId` answers the organization's settings with the defaults\n * applied; `POST` validates a save with the function the Compliance page\n * validates with and stores it. A save that changes something writes one\n * line to the organization's activity feed, because the footer every email\n * carries is a legal statement and who last changed it is worth knowing.\n */\n\n/** The activity line a changed save writes. */\nexport const OUTREACH_SETTINGS_ACTIVITY = 'Updated Outreach compliance settings'\n\nexport function createOutreachSettingsRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method === 'GET') {\n      const gate = await outreachRouteGate(\n        request,\n        new URL(request.url).searchParams.get('orgId'),\n        deps.gate,\n      )\n      if (gate instanceof Response) return gate\n      const settings = await readOutreachComplianceSettingsDoc(deps.firestore(), gate.orgId)\n      return outreachOk({ ok: true, settings } satisfies OutreachSettingsResponse)\n    }\n    if (request.method !== 'POST') return outreachMethodNotAllowed('GET, POST')\n\n    const body = await readOutreachJsonBody(request)\n    const gate = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (gate instanceof Response) return gate\n    const { settings, issues } = validateOutreachComplianceSettings(body)\n    if (issues.length) {\n      return outreachRefusal(400, 'invalid-settings', issues[0].message, { issues })\n    }\n    const result = await writeOutreachComplianceSettings(deps.firestore(), {\n      orgId: gate.orgId,\n      settings,\n      byUid: gate.uid,\n      nowMs: deps.now(),\n    })\n    if (result.changed) {\n      await deps.logOrgActivity(\n        gate.orgId,\n        { uid: gate.uid, email: gate.email },\n        OUTREACH_SETTINGS_ACTIVITY,\n        { type: 'org', id: gate.orgId },\n      )\n    }\n    return outreachOk({\n      ok: true,\n      settings: result.settings,\n      changed: result.changed,\n    } satisfies OutreachSettingsSaveResponse)\n  }\n}\n"],"names":["validateOutreachComplianceSettings","readOutreachComplianceSettingsDoc","writeOutreachComplianceSettings","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachJsonBody","OUTREACH_SETTINGS_ACTIVITY","createOutreachSettingsRoute","deps","request","method","gate","URL","url","searchParams","get","Response","settings","firestore","orgId","ok","body","issues","length","message","result","byUid","uid","nowMs","now","changed","logOrgActivity","email","type","id"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SAASA,kCAAkC,QAAQ,kCAA8B;AAKjF,SACEC,iCAAiC,EACjCC,+BAA+B,QAC1B,0CAAsC;AAE7C,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;CAQC,GAED,6CAA6C,GAC7C,OAAO,MAAMC,6BAA6B,uCAAsC;AAEhF,OAAO,SAASC,4BAA4BC,IAAuB;IACjE,OAAO,OAAOC;QACZ,IAAIA,QAAQC,MAAM,KAAK,OAAO;YAC5B,MAAMC,OAAO,MAAMV,kBACjBQ,SACA,IAAIG,IAAIH,QAAQI,GAAG,EAAEC,YAAY,CAACC,GAAG,CAAC,UACtCP,KAAKG,IAAI;YAEX,IAAIA,gBAAgBK,UAAU,OAAOL;YACrC,MAAMM,WAAW,MAAMlB,kCAAkCS,KAAKU,SAAS,IAAIP,KAAKQ,KAAK;YACrF,OAAOhB,WAAW;gBAAEiB,IAAI;gBAAMH;YAAS;QACzC;QACA,IAAIR,QAAQC,MAAM,KAAK,QAAQ,OAAOR,yBAAyB;QAE/D,MAAMmB,OAAO,MAAMhB,qBAAqBI;QACxC,MAAME,OAAO,MAAMV,kBAAkBQ,SAASY,IAAI,CAAC,QAAQ,EAAEb,KAAKG,IAAI;QACtE,IAAIA,gBAAgBK,UAAU,OAAOL;QACrC,MAAM,EAAEM,QAAQ,EAAEK,MAAM,EAAE,GAAGxB,mCAAmCuB;QAChE,IAAIC,OAAOC,MAAM,EAAE;YACjB,OAAOnB,gBAAgB,KAAK,oBAAoBkB,MAAM,CAAC,EAAE,CAACE,OAAO,EAAE;gBAAEF;YAAO;QAC9E;QACA,MAAMG,SAAS,MAAMzB,gCAAgCQ,KAAKU,SAAS,IAAI;YACrEC,OAAOR,KAAKQ,KAAK;YACjBF;YACAS,OAAOf,KAAKgB,GAAG;YACfC,OAAOpB,KAAKqB,GAAG;QACjB;QACA,IAAIJ,OAAOK,OAAO,EAAE;YAClB,MAAMtB,KAAKuB,cAAc,CACvBpB,KAAKQ,KAAK,EACV;gBAAEQ,KAAKhB,KAAKgB,GAAG;gBAAEK,OAAOrB,KAAKqB,KAAK;YAAC,GACnC1B,4BACA;gBAAE2B,MAAM;gBAAOC,IAAIvB,KAAKQ,KAAK;YAAC;QAElC;QACA,OAAOhB,WAAW;YAChBiB,IAAI;YACJH,UAAUQ,OAAOR,QAAQ;YACzBa,SAASL,OAAOK,OAAO;QACzB;IACF;AACF"}

package/src/lib/runtime/enrollment-events.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type OutreachEnrollmentEvent } from '../engine/enrollment-state';
+import type { OutreachDoNotContactReason, OutreachEnrollment } from '../model/outreach.types';
+import type { OutreachRuntimeDeps } from './runtime-deps';
+/**
+ * WHAT THE RUNTIME DOES TO ENROLLMENTS, AND TO THE LISTS BESIDE THEM
+ * (AGL-2981).
+ *
+ * Every status change is the engine's (`applyOutreachEnrollmentEvent`),
+ * written in a transaction over the one enrollment so a member's pause and a
+ * run's step completion never interleave. The runtime's events name no
+ * member: `stoppedByUid` stays `null`.
+ */
+type Firestore = FirebaseFirestore.Firestore;
+/** The enrollment after an event, and whether the event changed it. */
+export interface OutreachEventOutcome {
+    enrollment: OutreachEnrollment | null;
+    changed: boolean;
+}
+/**
+ * Applies one event to one enrollment, with any fields the caller writes
+ * beside it — its handled message ids, a postponed due time. A transition
+ * the engine refuses writes only the extra fields.
+ */
+export declare function applyOutreachEvent(firestore: Firestore, input: {
+    orgId: string;
+    enrollmentId: string;
+    event: OutreachEnrollmentEvent | null;
+    extra?: (enrollment: OutreachEnrollment) => Record<string, unknown> | null;
+    nowMs: number;
+}): Promise<OutreachEventOutcome>;
+/**
+ * Opts every OTHER open enrollment of an address in the organization out,
+ * as `do_not_contact`: the person asked not to be emailed, so no sequence
+ * is next. Answers how many moved.
+ */
+export declare function optOutOtherOutreachEnrollments(firestore: Firestore, input: {
+    orgId: string;
+    email: string;
+    exceptEnrollmentId: string | null;
+    nowMs: number;
+    detail: string;
+}): Promise<number>;
+/** Where an opt-out came from. */
+export type OutreachOptOutSource = Extract<OutreachDoNotContactReason, 'opt_out_reply' | 'unsubscribe'>;
+/**
+ * A person asked not to be emailed — by the unsubscribe link, the `mailto:`
+ * or a reply — and every list that has to remember it does:
+ *
+ *  1. the organization's do-not-contact list, which every sequence checks
+ *     before every send (its first entry for the address stands);
+ *  2. the `sales` topic of each site named, which the site's own sales
+ *     email reads too;
+ *  3. every open enrollment of the address in the organization: the one it
+ *     came from with the reason given, the others as `do_not_contact`.
+ *
+ * Each is idempotent, so a second request — the link used twice, a reply
+ * read by two runs — changes nothing.
+ */
+export declare function recordOutreachOptOut(deps: Pick<OutreachRuntimeDeps, 'firestore' | 'optOutOfSalesTopic'>, input: {
+    orgId: string;
+    email: string;
+    source: OutreachOptOutSource;
+    enrollment: Pick<OutreachEnrollment, 'id' | 'sequenceId' | 'hostId'> | null;
+    hostIds: readonly string[];
+    detail: string | null;
+    nowMs: number;
+}): Promise<{
+    stopped: number;
+}>;
+export {};

package/src/lib/runtime/enrollment-events.js

@@ -0,0 +1,141 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { normalizeContactEmail } from "@aglyn/aglyn/app-utils/contacts";
+import { applyOutreachEnrollmentEvent } from "../engine/enrollment-state.js";
+import { OUTREACH_OPEN_ENROLLMENT_STATUSES } from "../engine/gates.js";
+import { addOutreachDoNotContact } from "../storage/do-not-contact-store.js";
+import { outreachOrgCollection, readStoredOutreachEnrollment } from "../storage/outreach-records.js";
+/**
+ * Applies one event to one enrollment, with any fields the caller writes
+ * beside it — its handled message ids, a postponed due time. A transition
+ * the engine refuses writes only the extra fields.
+ */ export async function applyOutreachEvent(firestore, input) {
+    const ref = outreachOrgCollection(firestore, input.orgId, 'enrollments').doc(input.enrollmentId);
+    return firestore.runTransaction(async (transaction)=>{
+        var _ref;
+        const snapshot = await transaction.get(ref);
+        const enrollment = readStoredOutreachEnrollment(input.enrollmentId, snapshot.exists ? snapshot.data() : undefined);
+        if (!enrollment) return {
+            enrollment: null,
+            changed: false
+        };
+        const patch = input.event ? applyOutreachEnrollmentEvent(enrollment, input.event).patch : null;
+        const extra = (_ref = input.extra == null ? void 0 : input.extra.call(input, enrollment)) != null ? _ref : null;
+        if (!patch && !extra) return {
+            enrollment,
+            changed: false
+        };
+        const written = _extends({}, patch != null ? patch : {}, extra != null ? extra : {}, {
+            updatedAtMs: input.nowMs
+        });
+        transaction.update(ref, written);
+        return {
+            enrollment: _extends({}, enrollment, written),
+            changed: patch !== null
+        };
+    });
+}
+/**
+ * Opts every OTHER open enrollment of an address in the organization out,
+ * as `do_not_contact`: the person asked not to be emailed, so no sequence
+ * is next. Answers how many moved.
+ */ export async function optOutOtherOutreachEnrollments(firestore, input) {
+    const found = await outreachOrgCollection(firestore, input.orgId, 'enrollments').where('email', '==', input.email).get();
+    let moved = 0;
+    for (const doc of found.docs){
+        if (doc.id === input.exceptEnrollmentId) continue;
+        if (!OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(doc.get('status'))) continue;
+        const outcome = await applyOutreachEvent(firestore, {
+            orgId: input.orgId,
+            enrollmentId: doc.id,
+            event: {
+                type: 'opt_out',
+                atMs: input.nowMs,
+                reason: 'do_not_contact',
+                detail: input.detail
+            },
+            nowMs: input.nowMs
+        });
+        if (outcome.changed) moved += 1;
+    }
+    return moved;
+}
+/**
+ * A person asked not to be emailed — by the unsubscribe link, the `mailto:`
+ * or a reply — and every list that has to remember it does:
+ *
+ *  1. the organization's do-not-contact list, which every sequence checks
+ *     before every send (its first entry for the address stands);
+ *  2. the `sales` topic of each site named, which the site's own sales
+ *     email reads too;
+ *  3. every open enrollment of the address in the organization: the one it
+ *     came from with the reason given, the others as `do_not_contact`.
+ *
+ * Each is idempotent, so a second request — the link used twice, a reply
+ * read by two runs — changes nothing.
+ */ export async function recordOutreachOptOut(deps, input) {
+    var _ref, _ref1, _ref2;
+    var _input_enrollment, _input_enrollment1, _input_enrollment2;
+    const email = normalizeContactEmail(input.email);
+    if (!email) return {
+        stopped: 0
+    };
+    const firestore = deps.firestore();
+    await addOutreachDoNotContact(firestore, {
+        orgId: input.orgId,
+        email,
+        reason: input.source,
+        source: 'runtime',
+        nowMs: input.nowMs,
+        enrollmentId: (_ref = (_input_enrollment = input.enrollment) == null ? void 0 : _input_enrollment.id) != null ? _ref : null,
+        sequenceId: (_ref1 = (_input_enrollment1 = input.enrollment) == null ? void 0 : _input_enrollment1.sequenceId) != null ? _ref1 : null,
+        detail: input.detail
+    });
+    for (const hostId of new Set(input.hostIds.filter(Boolean))){
+        await deps.optOutOfSalesTopic({
+            hostId,
+            email
+        });
+    }
+    let stopped = 0;
+    if (input.enrollment) {
+        const own = await applyOutreachEvent(firestore, {
+            orgId: input.orgId,
+            enrollmentId: input.enrollment.id,
+            event: {
+                type: 'opt_out',
+                atMs: input.nowMs,
+                reason: input.source,
+                detail: input.detail
+            },
+            nowMs: input.nowMs
+        });
+        if (own.changed) stopped += 1;
+    }
+    stopped += await optOutOtherOutreachEnrollments(firestore, {
+        orgId: input.orgId,
+        email,
+        exceptEnrollmentId: (_ref2 = (_input_enrollment2 = input.enrollment) == null ? void 0 : _input_enrollment2.id) != null ? _ref2 : null,
+        nowMs: input.nowMs,
+        detail: input.source === 'unsubscribe' ? 'Unsubscribed from another sequence.' : 'Asked not to be emailed in a reply to another sequence.'
+    });
+    return {
+        stopped
+    };
+}
+
+//# sourceMappingURL=enrollment-events.js.map

package/src/lib/runtime/enrollment-events.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/runtime/enrollment-events.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { normalizeContactEmail } from '@aglyn/aglyn/app-utils/contacts'\nimport {\n  applyOutreachEnrollmentEvent,\n  type OutreachEnrollmentEvent,\n} from '../engine/enrollment-state'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type { OutreachDoNotContactReason, OutreachEnrollment } from '../model/outreach.types'\nimport { addOutreachDoNotContact } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection, readStoredOutreachEnrollment } from '../storage/outreach-records'\nimport type { OutreachRuntimeDeps } from './runtime-deps'\n\n/**\n * WHAT THE RUNTIME DOES TO ENROLLMENTS, AND TO THE LISTS BESIDE THEM\n * (AGL-2981).\n *\n * Every status change is the engine's (`applyOutreachEnrollmentEvent`),\n * written in a transaction over the one enrollment so a member's pause and a\n * run's step completion never interleave. The runtime's events name no\n * member: `stoppedByUid` stays `null`.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/** The enrollment after an event, and whether the event changed it. */\nexport interface OutreachEventOutcome {\n  enrollment: OutreachEnrollment | null\n  changed: boolean\n}\n\n/**\n * Applies one event to one enrollment, with any fields the caller writes\n * beside it — its handled message ids, a postponed due time. A transition\n * the engine refuses writes only the extra fields.\n */\nexport async function applyOutreachEvent(\n  firestore: Firestore,\n  input: {\n    orgId: string\n    enrollmentId: string\n    event: OutreachEnrollmentEvent | null\n    extra?: (enrollment: OutreachEnrollment) => Record<string, unknown> | null\n    nowMs: number\n  },\n): Promise<OutreachEventOutcome> {\n  const ref = outreachOrgCollection(firestore, input.orgId, 'enrollments').doc(input.enrollmentId)\n  return firestore.runTransaction(async (transaction) => {\n    const snapshot = await transaction.get(ref)\n    const enrollment = readStoredOutreachEnrollment(input.enrollmentId, snapshot.exists ? snapshot.data() : undefined)\n    if (!enrollment) return { enrollment: null, changed: false }\n    const patch = input.event ? applyOutreachEnrollmentEvent(enrollment, input.event).patch : null\n    const extra = input.extra?.(enrollment) ?? null\n    if (!patch && !extra) return { enrollment, changed: false }\n    const written = { ...(patch ?? {}), ...(extra ?? {}), updatedAtMs: input.nowMs }\n    transaction.update(ref, written)\n    return { enrollment: { ...enrollment, ...written } as OutreachEnrollment, changed: patch !== null }\n  })\n}\n\n/**\n * Opts every OTHER open enrollment of an address in the organization out,\n * as `do_not_contact`: the person asked not to be emailed, so no sequence\n * is next. Answers how many moved.\n */\nexport async function optOutOtherOutreachEnrollments(\n  firestore: Firestore,\n  input: { orgId: string; email: string; exceptEnrollmentId: string | null; nowMs: number; detail: string },\n): Promise<number> {\n  const found = await outreachOrgCollection(firestore, input.orgId, 'enrollments')\n    .where('email', '==', input.email)\n    .get()\n  let moved = 0\n  for (const doc of found.docs) {\n    if (doc.id === input.exceptEnrollmentId) continue\n    if (!OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(doc.get('status'))) continue\n    const outcome = await applyOutreachEvent(firestore, {\n      orgId: input.orgId,\n      enrollmentId: doc.id,\n      event: { type: 'opt_out', atMs: input.nowMs, reason: 'do_not_contact', detail: input.detail },\n      nowMs: input.nowMs,\n    })\n    if (outcome.changed) moved += 1\n  }\n  return moved\n}\n\n/** Where an opt-out came from. */\nexport type OutreachOptOutSource = Extract<OutreachDoNotContactReason, 'opt_out_reply' | 'unsubscribe'>\n\n/**\n * A person asked not to be emailed — by the unsubscribe link, the `mailto:`\n * or a reply — and every list that has to remember it does:\n *\n *  1. the organization's do-not-contact list, which every sequence checks\n *     before every send (its first entry for the address stands);\n *  2. the `sales` topic of each site named, which the site's own sales\n *     email reads too;\n *  3. every open enrollment of the address in the organization: the one it\n *     came from with the reason given, the others as `do_not_contact`.\n *\n * Each is idempotent, so a second request — the link used twice, a reply\n * read by two runs — changes nothing.\n */\nexport async function recordOutreachOptOut(\n  deps: Pick<OutreachRuntimeDeps, 'firestore' | 'optOutOfSalesTopic'>,\n  input: {\n    orgId: string\n    email: string\n    source: OutreachOptOutSource\n    enrollment: Pick<OutreachEnrollment, 'id' | 'sequenceId' | 'hostId'> | null\n    hostIds: readonly string[]\n    detail: string | null\n    nowMs: number\n  },\n): Promise<{ stopped: number }> {\n  const email = normalizeContactEmail(input.email)\n  if (!email) return { stopped: 0 }\n  const firestore = deps.firestore()\n  await addOutreachDoNotContact(firestore, {\n    orgId: input.orgId,\n    email,\n    reason: input.source,\n    source: 'runtime',\n    nowMs: input.nowMs,\n    enrollmentId: input.enrollment?.id ?? null,\n    sequenceId: input.enrollment?.sequenceId ?? null,\n    detail: input.detail,\n  })\n  for (const hostId of new Set(input.hostIds.filter(Boolean))) {\n    await deps.optOutOfSalesTopic({ hostId, email })\n  }\n  let stopped = 0\n  if (input.enrollment) {\n    const own = await applyOutreachEvent(firestore, {\n      orgId: input.orgId,\n      enrollmentId: input.enrollment.id,\n      event: { type: 'opt_out', atMs: input.nowMs, reason: input.source, detail: input.detail },\n      nowMs: input.nowMs,\n    })\n    if (own.changed) stopped += 1\n  }\n  stopped += await optOutOtherOutreachEnrollments(firestore, {\n    orgId: input.orgId,\n    email,\n    exceptEnrollmentId: input.enrollment?.id ?? null,\n    nowMs: input.nowMs,\n    detail:\n      input.source === 'unsubscribe'\n        ? 'Unsubscribed from another sequence.'\n        : 'Asked not to be emailed in a reply to another sequence.',\n  })\n  return { stopped }\n}\n"],"names":["normalizeContactEmail","applyOutreachEnrollmentEvent","OUTREACH_OPEN_ENROLLMENT_STATUSES","addOutreachDoNotContact","outreachOrgCollection","readStoredOutreachEnrollment","applyOutreachEvent","firestore","input","ref","orgId","doc","enrollmentId","runTransaction","transaction","snapshot","get","enrollment","exists","data","undefined","changed","patch","event","extra","written","updatedAtMs","nowMs","update","optOutOtherOutreachEnrollments","found","where","email","moved","docs","id","exceptEnrollmentId","includes","outcome","type","atMs","reason","detail","recordOutreachOptOut","deps","stopped","source","sequenceId","hostId","Set","hostIds","filter","Boolean","optOutOfSalesTopic","own"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,qBAAqB,QAAQ,kCAAiC;AACvE,SACEC,4BAA4B,QAEvB,gCAA4B;AACnC,SAASC,iCAAiC,QAAQ,qBAAiB;AAEnE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,qBAAqB,EAAEC,4BAA4B,QAAQ,iCAA6B;AAqBjG;;;;CAIC,GACD,OAAO,eAAeC,mBACpBC,SAAoB,EACpBC,KAMC;IAED,MAAMC,MAAML,sBAAsBG,WAAWC,MAAME,KAAK,EAAE,eAAeC,GAAG,CAACH,MAAMI,YAAY;IAC/F,OAAOL,UAAUM,cAAc,CAAC,OAAOC;;QACrC,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACP;QACvC,MAAMQ,aAAaZ,6BAA6BG,MAAMI,YAAY,EAAEG,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKC;QACxG,IAAI,CAACH,YAAY,OAAO;YAAEA,YAAY;YAAMI,SAAS;QAAM;QAC3D,MAAMC,QAAQd,MAAMe,KAAK,GAAGtB,6BAA6BgB,YAAYT,MAAMe,KAAK,EAAED,KAAK,GAAG;QAC1F,MAAME,gBAAQhB,MAAMgB,KAAK,oBAAXhB,MAAMgB,KAAK,MAAXhB,OAAcS,8BAAe;QAC3C,IAAI,CAACK,SAAS,CAACE,OAAO,OAAO;YAAEP;YAAYI,SAAS;QAAM;QAC1D,MAAMI,UAAU,aAAMH,gBAAAA,QAAS,CAAC,GAAQE,gBAAAA,QAAS,CAAC;YAAIE,aAAalB,MAAMmB,KAAK;;QAC9Eb,YAAYc,MAAM,CAACnB,KAAKgB;QACxB,OAAO;YAAER,YAAY,aAAKA,YAAeQ;YAAiCJ,SAASC,UAAU;QAAK;IACpG;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeO,+BACpBtB,SAAoB,EACpBC,KAAyG;IAEzG,MAAMsB,QAAQ,MAAM1B,sBAAsBG,WAAWC,MAAME,KAAK,EAAE,eAC/DqB,KAAK,CAAC,SAAS,MAAMvB,MAAMwB,KAAK,EAChChB,GAAG;IACN,IAAIiB,QAAQ;IACZ,KAAK,MAAMtB,OAAOmB,MAAMI,IAAI,CAAE;QAC5B,IAAIvB,IAAIwB,EAAE,KAAK3B,MAAM4B,kBAAkB,EAAE;QACzC,IAAI,CAAClC,kCAAkCmC,QAAQ,CAAC1B,IAAIK,GAAG,CAAC,YAAY;QACpE,MAAMsB,UAAU,MAAMhC,mBAAmBC,WAAW;YAClDG,OAAOF,MAAME,KAAK;YAClBE,cAAcD,IAAIwB,EAAE;YACpBZ,OAAO;gBAAEgB,MAAM;gBAAWC,MAAMhC,MAAMmB,KAAK;gBAAEc,QAAQ;gBAAkBC,QAAQlC,MAAMkC,MAAM;YAAC;YAC5Ff,OAAOnB,MAAMmB,KAAK;QACpB;QACA,IAAIW,QAAQjB,OAAO,EAAEY,SAAS;IAChC;IACA,OAAOA;AACT;AAKA;;;;;;;;;;;;;CAaC,GACD,OAAO,eAAeU,qBACpBC,IAAmE,EACnEpC,KAQC;;QAWeA,mBACFA,oBAmBQA;IA7BtB,MAAMwB,QAAQhC,sBAAsBQ,MAAMwB,KAAK;IAC/C,IAAI,CAACA,OAAO,OAAO;QAAEa,SAAS;IAAE;IAChC,MAAMtC,YAAYqC,KAAKrC,SAAS;IAChC,MAAMJ,wBAAwBI,WAAW;QACvCG,OAAOF,MAAME,KAAK;QAClBsB;QACAS,QAAQjC,MAAMsC,MAAM;QACpBA,QAAQ;QACRnB,OAAOnB,MAAMmB,KAAK;QAClBf,YAAY,WAAEJ,oBAAAA,MAAMS,UAAU,qBAAhBT,kBAAkB2B,EAAE,mBAAI;QACtCY,UAAU,YAAEvC,qBAAAA,MAAMS,UAAU,qBAAhBT,mBAAkBuC,UAAU,oBAAI;QAC5CL,QAAQlC,MAAMkC,MAAM;IACtB;IACA,KAAK,MAAMM,UAAU,IAAIC,IAAIzC,MAAM0C,OAAO,CAACC,MAAM,CAACC,UAAW;QAC3D,MAAMR,KAAKS,kBAAkB,CAAC;YAAEL;YAAQhB;QAAM;IAChD;IACA,IAAIa,UAAU;IACd,IAAIrC,MAAMS,UAAU,EAAE;QACpB,MAAMqC,MAAM,MAAMhD,mBAAmBC,WAAW;YAC9CG,OAAOF,MAAME,KAAK;YAClBE,cAAcJ,MAAMS,UAAU,CAACkB,EAAE;YACjCZ,OAAO;gBAAEgB,MAAM;gBAAWC,MAAMhC,MAAMmB,KAAK;gBAAEc,QAAQjC,MAAMsC,MAAM;gBAAEJ,QAAQlC,MAAMkC,MAAM;YAAC;YACxFf,OAAOnB,MAAMmB,KAAK;QACpB;QACA,IAAI2B,IAAIjC,OAAO,EAAEwB,WAAW;IAC9B;IACAA,WAAW,MAAMhB,+BAA+BtB,WAAW;QACzDG,OAAOF,MAAME,KAAK;QAClBsB;QACAI,kBAAkB,YAAE5B,qBAAAA,MAAMS,UAAU,qBAAhBT,mBAAkB2B,EAAE,oBAAI;QAC5CR,OAAOnB,MAAMmB,KAAK;QAClBe,QACElC,MAAMsC,MAAM,KAAK,gBACb,wCACA;IACR;IACA,OAAO;QAAED;IAAQ;AACnB"}

package/src/lib/runtime/fixtures/fake-gmail.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { GmailApiMessage, GmailApiMessagePart } from '../../engine/thread-message';
+import type { GmailClient, GmailMessageMetadata } from '../../transport/gmail-client';
+/**
+ * A MAILBOX IN MEMORY, for the runtime's specs (AGL-2981).
+ *
+ * Implements the whole `GmailClient` the runtime reaches a mailbox through,
+ * over messages held here: a send is parsed back out of the raw RFC 5322 it
+ * was handed and filed in its thread, and mail "arrives" through
+ * {@link FakeGmail.deliver}. The searches the runtime makes are answered with
+ * the Gmail operators it uses — `after:`, `-from:me`, `from:`, `to:`,
+ * `rfc822msgid:` — so a spec exercises the real queries. Nothing reaches
+ * Google and nothing is sent anywhere.
+ */
+interface Stored {
+    message: GmailApiMessage;
+    from: string;
+    to: string;
+    internalDateMs: number;
+    sent: boolean;
+    labelIds: string[];
+}
+export interface FakeGmailOptions {
+    /** The mailbox's own addresses: what `from:me` means. */
+    self: readonly string[];
+    /** Makes the next `sendMessage` throw this. */
+    failNextSend?: Error | null;
+}
+export declare class FakeGmail implements GmailClient {
+    readonly messages: Map<string, Stored>;
+    readonly sent: Array<{
+        raw: string;
+        threadId: string | null;
+        headers: Array<{
+            name: string;
+            value: string;
+        }>;
+        body: string;
+    }>;
+    readonly calls: string[];
+    failNextSend: Error | null;
+    private readonly self;
+    private sequence;
+    constructor(options: FakeGmailOptions);
+    private nextId;
+    /** Files an inbound message, as the mailbox would receive it. */
+    deliver(input: {
+        threadId?: string;
+        from: string;
+        to: string;
+        subject: string;
+        text?: string;
+        atMs: number;
+        messageId?: string;
+        headers?: Record<string, string>;
+        /** A multipart/report's parts, for a delivery status notification. */
+        parts?: GmailApiMessagePart[];
+        contentType?: string;
+    }): GmailApiMessage;
+    /** Every message the runtime sent, parsed. */
+    sentHeaders(index: number): Record<string, string>;
+    private matches;
+    getAccessToken(): Promise<string>;
+    getProfile(): Promise<{
+        emailAddress: string;
+        messagesTotal: number;
+        threadsTotal: number;
+        historyId: string;
+    }>;
+    listSendAs(): Promise<any[]>;
+    sendMessage(input: {
+        raw: string;
+        threadId?: string | null;
+    }): Promise<{
+        id: string;
+        threadId: string;
+        labelIds: string[];
+    }>;
+    getThread(threadId: string): Promise<{
+        id: string;
+        historyId: any;
+        messages: GmailMessageMetadata[];
+    }>;
+    getFullThread(threadId: string): Promise<{
+        id: string;
+        historyId: any;
+        messages: GmailApiMessage[];
+    }>;
+    private metadataOf;
+    getMessage(messageId: string): Promise<GmailMessageMetadata>;
+    getFullMessage(messageId: string): Promise<GmailApiMessage>;
+    listMessages(options: {
+        q: string;
+        maxResults?: number;
+        pageToken?: string | null;
+    }): Promise<{
+        messages: {
+            id: string;
+            threadId: string;
+        }[];
+        nextPageToken: any;
+        resultSizeEstimate: number;
+    }>;
+    revoke(): Promise<'revoked'>;
+}
+export {};