@aglyn/plugins-outreach 1.0.0-beta.143

package/src/lib/runtime/person-erasure.js

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { outreachDoNotContactCollection } from "../storage/do-not-contact-store.js";
+import { outreachOrgCollection } from "../storage/outreach-records.js";
+/** Firestore refuses a batch of more than 500 writes. */ const BATCH_LIMIT = 450;
+/** `in` takes this many values at most. */ const IN_LIMIT = 30;
+export function createOutreachPersonEraser(deps) {
+    return async ({ orgId, email, key, contactIds, dryRun })=>{
+        const firestore = deps.firestore();
+        const enrollments = outreachOrgCollection(firestore, orgId, 'enrollments');
+        const found = new Map();
+        for (const doc of (await enrollments.where('email', '==', email).get()).docs)found.set(doc.id, doc.ref);
+        for(let start = 0; start < contactIds.length; start += IN_LIMIT){
+            const chunk = contactIds.slice(start, start + IN_LIMIT);
+            for (const doc of (await enrollments.where('contactId', 'in', chunk).get()).docs)found.set(doc.id, doc.ref);
+        }
+        const entry = outreachDoNotContactCollection(firestore, orgId).doc(key);
+        const listed = (await entry.get()).exists;
+        if (dryRun) return {
+            enrollments: found.size,
+            doNotContactKept: listed,
+            doNotContactScrubbed: null
+        };
+        const refs = [
+            ...found.values()
+        ];
+        for(let start = 0; start < refs.length; start += BATCH_LIMIT){
+            const batch = firestore.batch();
+            for (const ref of refs.slice(start, start + BATCH_LIMIT))batch.delete(ref);
+            await batch.commit();
+        }
+        if (listed) await entry.update({
+            detail: null,
+            enrollmentId: null
+        });
+        return {
+            enrollments: refs.length,
+            doNotContactKept: listed,
+            doNotContactScrubbed: listed
+        };
+    };
+}
+
+//# sourceMappingURL=person-erasure.js.map

package/src/lib/runtime/person-erasure.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/runtime/person-erasure.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  PluginPersonEraser,\n  PluginPersonErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-person-erasure'\nimport { outreachDoNotContactCollection } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection } from '../storage/outreach-records'\n\n/**\n * OUTREACH'S SHARE OF A PERSON ERASURE (AGL-2981).\n *\n * The person's ENROLLMENTS go: each names them — their address, their\n * contact, the personal line a rep wrote about them, the attestations — and\n * is about them. They are found by the address and by the contacts the\n * erasure is deleting, and deleted whatever their status.\n *\n * Their DO-NOT-CONTACT entry STAYS, on the rule every suppression list\n * follows through an erasure: it is keyed by `personKey`, carries no\n * address, and is the one promise the workspace made the person that has to\n * outlive their data. What in it could point back at them is cleared: the\n * detail — a member's note, a bounce's diagnostic — and the enrollment it\n * came from, which no longer exists.\n *\n * A dry run counts both and writes nothing.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/** Firestore refuses a batch of more than 500 writes. */\nconst BATCH_LIMIT = 450\n\n/** `in` takes this many values at most. */\nconst IN_LIMIT = 30\n\nexport function createOutreachPersonEraser(deps: { firestore(): Firestore }): PluginPersonEraser {\n  return async ({ orgId, email, key, contactIds, dryRun }): Promise<PluginPersonErasureReport> => {\n    const firestore = deps.firestore()\n    const enrollments = outreachOrgCollection(firestore, orgId, 'enrollments')\n    const found = new Map<string, FirebaseFirestore.DocumentReference>()\n    for (const doc of (await enrollments.where('email', '==', email).get()).docs) found.set(doc.id, doc.ref)\n    for (let start = 0; start < contactIds.length; start += IN_LIMIT) {\n      const chunk = contactIds.slice(start, start + IN_LIMIT)\n      for (const doc of (await enrollments.where('contactId', 'in', chunk).get()).docs) found.set(doc.id, doc.ref)\n    }\n    const entry = outreachDoNotContactCollection(firestore, orgId).doc(key)\n    const listed = (await entry.get()).exists\n    if (dryRun) return { enrollments: found.size, doNotContactKept: listed, doNotContactScrubbed: null }\n\n    const refs = [...found.values()]\n    for (let start = 0; start < refs.length; start += BATCH_LIMIT) {\n      const batch = firestore.batch()\n      for (const ref of refs.slice(start, start + BATCH_LIMIT)) batch.delete(ref)\n      await batch.commit()\n    }\n    if (listed) await entry.update({ detail: null, enrollmentId: null })\n    return { enrollments: refs.length, doNotContactKept: listed, doNotContactScrubbed: listed }\n  }\n}\n"],"names":["outreachDoNotContactCollection","outreachOrgCollection","BATCH_LIMIT","IN_LIMIT","createOutreachPersonEraser","deps","orgId","email","key","contactIds","dryRun","firestore","enrollments","found","Map","doc","where","get","docs","set","id","ref","start","length","chunk","slice","entry","listed","exists","size","doNotContactKept","doNotContactScrubbed","refs","values","batch","delete","commit","update","detail","enrollmentId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAMD,SAASA,8BAA8B,QAAQ,qCAAiC;AAChF,SAASC,qBAAqB,QAAQ,iCAA6B;AAsBnE,uDAAuD,GACvD,MAAMC,cAAc;AAEpB,yCAAyC,GACzC,MAAMC,WAAW;AAEjB,OAAO,SAASC,2BAA2BC,IAAgC;IACzE,OAAO,OAAO,EAAEC,KAAK,EAAEC,KAAK,EAAEC,GAAG,EAAEC,UAAU,EAAEC,MAAM,EAAE;QACrD,MAAMC,YAAYN,KAAKM,SAAS;QAChC,MAAMC,cAAcX,sBAAsBU,WAAWL,OAAO;QAC5D,MAAMO,QAAQ,IAAIC;QAClB,KAAK,MAAMC,OAAO,AAAC,CAAA,MAAMH,YAAYI,KAAK,CAAC,SAAS,MAAMT,OAAOU,GAAG,EAAC,EAAGC,IAAI,CAAEL,MAAMM,GAAG,CAACJ,IAAIK,EAAE,EAAEL,IAAIM,GAAG;QACvG,IAAK,IAAIC,QAAQ,GAAGA,QAAQb,WAAWc,MAAM,EAAED,SAASnB,SAAU;YAChE,MAAMqB,QAAQf,WAAWgB,KAAK,CAACH,OAAOA,QAAQnB;YAC9C,KAAK,MAAMY,OAAO,AAAC,CAAA,MAAMH,YAAYI,KAAK,CAAC,aAAa,MAAMQ,OAAOP,GAAG,EAAC,EAAGC,IAAI,CAAEL,MAAMM,GAAG,CAACJ,IAAIK,EAAE,EAAEL,IAAIM,GAAG;QAC7G;QACA,MAAMK,QAAQ1B,+BAA+BW,WAAWL,OAAOS,GAAG,CAACP;QACnE,MAAMmB,SAAS,AAAC,CAAA,MAAMD,MAAMT,GAAG,EAAC,EAAGW,MAAM;QACzC,IAAIlB,QAAQ,OAAO;YAAEE,aAAaC,MAAMgB,IAAI;YAAEC,kBAAkBH;YAAQI,sBAAsB;QAAK;QAEnG,MAAMC,OAAO;eAAInB,MAAMoB,MAAM;SAAG;QAChC,IAAK,IAAIX,QAAQ,GAAGA,QAAQU,KAAKT,MAAM,EAAED,SAASpB,YAAa;YAC7D,MAAMgC,QAAQvB,UAAUuB,KAAK;YAC7B,KAAK,MAAMb,OAAOW,KAAKP,KAAK,CAACH,OAAOA,QAAQpB,aAAcgC,MAAMC,MAAM,CAACd;YACvE,MAAMa,MAAME,MAAM;QACpB;QACA,IAAIT,QAAQ,MAAMD,MAAMW,MAAM,CAAC;YAAEC,QAAQ;YAAMC,cAAc;QAAK;QAClE,OAAO;YAAE3B,aAAaoB,KAAKT,MAAM;YAAEO,kBAAkBH;YAAQI,sBAAsBJ;QAAO;IAC5F;AACF"}

package/src/lib/runtime/platform-runtime-deps.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginWebApiHandler } from '@aglyn/aglyn/server';
+import type { PluginPersonEraser } from '@aglyn/aglyn/plugin-manager/plugin-person-erasure';
+import type { OutreachRuntimeDeps } from './runtime-deps';
+/**
+ * The platform's own reach for the sending runtime (AGL-2981). Loaded only
+ * when a job runs or the unsubscribe route answers — never at boot — so the
+ * console pays for these modules when Outreach does work.
+ */
+export declare function platformOutreachRuntimeDeps(): OutreachRuntimeDeps;
+/** The unsubscribe route on the platform's own reach. */
+export declare function platformOutreachUnsubscribeRoute(): PluginWebApiHandler;
+/** The person eraser on the platform's own Firestore. */
+export declare function platformOutreachPersonEraser(): PluginPersonEraser;

package/src/lib/runtime/platform-runtime-deps.js

@@ -0,0 +1,98 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { EMAIL_TOPIC_SALES } from "@aglyn/aglyn/app-utils/email-topics";
+import { checkEntitlement } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { isPluginEnabled } from "@aglyn/aglyn/plugin-manager/enabled-plugins";
+import { pluginRecordTimelineWriter } from "@aglyn/aglyn/plugin-manager/plugin-record-timeline";
+import { suppressEmail } from "@aglyn/tenant-data-admin/server/email-suppression";
+import { recordTopicOptOut } from "@aglyn/tenant-data-admin/server/email-topic-confirmation";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
+import { getLockdownVerdict } from "@aglyn/tenant-data-admin/server/lockdown";
+import { logOrgActivity } from "@aglyn/tenant-data-admin/server/organizations";
+import { filterEnabledPluginsByReleaseFlags } from "@aglyn/tenant-data-admin/server/release-flags";
+import { OUTREACH_PLUGIN_ID } from "../constants/bundle-common.js";
+import { openOutreachMailboxClient } from "../mailboxes/mailbox-transport.js";
+import { canonicalConsoleOrigin } from "../mailboxes/oauth-redirect.js";
+import { createOutreachPersonEraser } from "./person-erasure.js";
+import { outreachUnsubscribeUrl } from "./unsubscribe-link.js";
+import { createOutreachUnsubscribeRoute } from "./unsubscribe-route.js";
+/**
+ * The platform's own reach for the sending runtime (AGL-2981). Loaded only
+ * when a job runs or the unsubscribe route answers — never at boot — so the
+ * console pays for these modules when Outreach does work.
+ */ export function platformOutreachRuntimeDeps() {
+    const firestore = ()=>firebaseAdmin.app().firestore();
+    return {
+        firestore,
+        now: Date.now,
+        random: Math.random,
+        openMailbox: (mailboxId)=>openOutreachMailboxClient(firestore(), {
+                mailboxId
+            }),
+        async orgRefusal (orgId, org) {
+            if (!isPluginEnabled(org, OUTREACH_PLUGIN_ID)) return 'plugin-disabled';
+            if (!checkEntitlement(org, 'outreach')) return 'not-entitled';
+            const released = await filterEnabledPluginsByReleaseFlags([
+                OUTREACH_PLUGIN_ID
+            ], {
+                orgId
+            });
+            return released.length ? null : 'not-released';
+        },
+        async sendRefusal ({ org, uid }) {
+            const locked = await getLockdownVerdict({
+                org,
+                uid,
+                intent: 'write'
+            });
+            return locked ? `locked:${locked.scope}` : null;
+        },
+        timeline: ()=>{
+            var _ref;
+            var _pluginRecordTimelineWriter;
+            return (_ref = (_pluginRecordTimelineWriter = pluginRecordTimelineWriter()) == null ? void 0 : _pluginRecordTimelineWriter.writer) != null ? _ref : null;
+        },
+        logOrgActivity: (orgId, actor, action, target)=>logOrgActivity(orgId, actor, action, target),
+        async optOutOfSalesTopic ({ hostId, email }) {
+            await recordTopicOptOut(hostId, email, EMAIL_TOPIC_SALES, {
+                firestore: firestore()
+            });
+        },
+        async suppressBouncedEmail ({ email, hostId }) {
+            await suppressEmail({
+                email,
+                reason: 'bounce',
+                context: 'outreach',
+                hostId,
+                firestore: firestore()
+            });
+        },
+        unsubscribeUrl: (target)=>outreachUnsubscribeUrl({
+                origin: canonicalConsoleOrigin(),
+                target
+            })
+    };
+}
+/** The unsubscribe route on the platform's own reach. */ export function platformOutreachUnsubscribeRoute() {
+    return createOutreachUnsubscribeRoute(platformOutreachRuntimeDeps());
+}
+/** The person eraser on the platform's own Firestore. */ export function platformOutreachPersonEraser() {
+    return createOutreachPersonEraser({
+        firestore: ()=>firebaseAdmin.app().firestore()
+    });
+}
+
+//# sourceMappingURL=platform-runtime-deps.js.map

package/src/lib/runtime/platform-runtime-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/runtime/platform-runtime-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { EMAIL_TOPIC_SALES } from '@aglyn/aglyn/app-utils/email-topics'\nimport { checkEntitlement } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { isPluginEnabled } from '@aglyn/aglyn/plugin-manager/enabled-plugins'\nimport { pluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport { suppressEmail } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport { recordTopicOptOut } from '@aglyn/tenant-data-admin/server/email-topic-confirmation'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { getLockdownVerdict } from '@aglyn/tenant-data-admin/server/lockdown'\nimport { logOrgActivity } from '@aglyn/tenant-data-admin/server/organizations'\nimport { filterEnabledPluginsByReleaseFlags } from '@aglyn/tenant-data-admin/server/release-flags'\nimport { OUTREACH_PLUGIN_ID } from '../constants/bundle-common'\nimport { openOutreachMailboxClient } from '../mailboxes/mailbox-transport'\nimport { canonicalConsoleOrigin } from '../mailboxes/oauth-redirect'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport type { PluginPersonEraser } from '@aglyn/aglyn/plugin-manager/plugin-person-erasure'\nimport { createOutreachPersonEraser } from './person-erasure'\nimport type { OutreachRuntimeDeps } from './runtime-deps'\nimport { outreachUnsubscribeUrl } from './unsubscribe-link'\nimport { createOutreachUnsubscribeRoute } from './unsubscribe-route'\n\n/**\n * The platform's own reach for the sending runtime (AGL-2981). Loaded only\n * when a job runs or the unsubscribe route answers — never at boot — so the\n * console pays for these modules when Outreach does work.\n */\nexport function platformOutreachRuntimeDeps(): OutreachRuntimeDeps {\n  const firestore = () => firebaseAdmin.app().firestore()\n  return {\n    firestore,\n    now: Date.now,\n    random: Math.random,\n    openMailbox: (mailboxId) => openOutreachMailboxClient(firestore(), { mailboxId }),\n    async orgRefusal(orgId, org) {\n      if (!isPluginEnabled(org as { enabledPlugins?: string[] }, OUTREACH_PLUGIN_ID)) return 'plugin-disabled'\n      if (!checkEntitlement(org, 'outreach')) return 'not-entitled'\n      const released = await filterEnabledPluginsByReleaseFlags([OUTREACH_PLUGIN_ID], { orgId })\n      return released.length ? null : 'not-released'\n    },\n    async sendRefusal({ org, uid }) {\n      const locked = await getLockdownVerdict({ org, uid, intent: 'write' })\n      return locked ? `locked:${locked.scope}` : null\n    },\n    timeline: () => pluginRecordTimelineWriter()?.writer ?? null,\n    logOrgActivity: (orgId, actor, action, target) => logOrgActivity(orgId, actor, action, target),\n    async optOutOfSalesTopic({ hostId, email }) {\n      await recordTopicOptOut(hostId, email, EMAIL_TOPIC_SALES, { firestore: firestore() })\n    },\n    async suppressBouncedEmail({ email, hostId }) {\n      await suppressEmail({ email, reason: 'bounce', context: 'outreach', hostId, firestore: firestore() })\n    },\n    unsubscribeUrl: (target) => outreachUnsubscribeUrl({ origin: canonicalConsoleOrigin(), target }),\n  }\n}\n\n/** The unsubscribe route on the platform's own reach. */\nexport function platformOutreachUnsubscribeRoute(): PluginWebApiHandler {\n  return createOutreachUnsubscribeRoute(platformOutreachRuntimeDeps())\n}\n\n/** The person eraser on the platform's own Firestore. */\nexport function platformOutreachPersonEraser(): PluginPersonEraser {\n  return createOutreachPersonEraser({ firestore: () => firebaseAdmin.app().firestore() })\n}\n"],"names":["EMAIL_TOPIC_SALES","checkEntitlement","isPluginEnabled","pluginRecordTimelineWriter","suppressEmail","recordTopicOptOut","firebaseAdmin","getLockdownVerdict","logOrgActivity","filterEnabledPluginsByReleaseFlags","OUTREACH_PLUGIN_ID","openOutreachMailboxClient","canonicalConsoleOrigin","createOutreachPersonEraser","outreachUnsubscribeUrl","createOutreachUnsubscribeRoute","platformOutreachRuntimeDeps","firestore","app","now","Date","random","Math","openMailbox","mailboxId","orgRefusal","orgId","org","released","length","sendRefusal","uid","locked","intent","scope","timeline","writer","actor","action","target","optOutOfSalesTopic","hostId","email","suppressBouncedEmail","reason","context","unsubscribeUrl","origin","platformOutreachUnsubscribeRoute","platformOutreachPersonEraser"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,QAAQ,sCAAqC;AACvE,SAASC,gBAAgB,QAAQ,2CAA0C;AAC3E,SAASC,eAAe,QAAQ,8CAA6C;AAC7E,SAASC,0BAA0B,QAAQ,qDAAoD;AAC/F,SAASC,aAAa,QAAQ,oDAAmD;AACjF,SAASC,iBAAiB,QAAQ,2DAA0D;AAC5F,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,cAAc,QAAQ,gDAA+C;AAC9E,SAASC,kCAAkC,QAAQ,gDAA+C;AAClG,SAASC,kBAAkB,QAAQ,gCAA4B;AAC/D,SAASC,yBAAyB,QAAQ,oCAAgC;AAC1E,SAASC,sBAAsB,QAAQ,iCAA6B;AAGpE,SAASC,0BAA0B,QAAQ,sBAAkB;AAE7D,SAASC,sBAAsB,QAAQ,wBAAoB;AAC3D,SAASC,8BAA8B,QAAQ,yBAAqB;AAEpE;;;;CAIC,GACD,OAAO,SAASC;IACd,MAAMC,YAAY,IAAMX,cAAcY,GAAG,GAAGD,SAAS;IACrD,OAAO;QACLA;QACAE,KAAKC,KAAKD,GAAG;QACbE,QAAQC,KAAKD,MAAM;QACnBE,aAAa,CAACC,YAAcb,0BAA0BM,aAAa;gBAAEO;YAAU;QAC/E,MAAMC,YAAWC,KAAK,EAAEC,GAAG;YACzB,IAAI,CAACzB,gBAAgByB,KAAsCjB,qBAAqB,OAAO;YACvF,IAAI,CAACT,iBAAiB0B,KAAK,aAAa,OAAO;YAC/C,MAAMC,WAAW,MAAMnB,mCAAmC;gBAACC;aAAmB,EAAE;gBAAEgB;YAAM;YACxF,OAAOE,SAASC,MAAM,GAAG,OAAO;QAClC;QACA,MAAMC,aAAY,EAAEH,GAAG,EAAEI,GAAG,EAAE;YAC5B,MAAMC,SAAS,MAAMzB,mBAAmB;gBAAEoB;gBAAKI;gBAAKE,QAAQ;YAAQ;YACpE,OAAOD,SAAS,CAAC,OAAO,EAAEA,OAAOE,KAAK,EAAE,GAAG;QAC7C;QACAC,UAAU;;gBAAMhC;4BAAAA,8BAAAA,iDAAAA,4BAA8BiC,MAAM,mBAAI;;QACxD5B,gBAAgB,CAACkB,OAAOW,OAAOC,QAAQC,SAAW/B,eAAekB,OAAOW,OAAOC,QAAQC;QACvF,MAAMC,oBAAmB,EAAEC,MAAM,EAAEC,KAAK,EAAE;YACxC,MAAMrC,kBAAkBoC,QAAQC,OAAO1C,mBAAmB;gBAAEiB,WAAWA;YAAY;QACrF;QACA,MAAM0B,sBAAqB,EAAED,KAAK,EAAED,MAAM,EAAE;YAC1C,MAAMrC,cAAc;gBAAEsC;gBAAOE,QAAQ;gBAAUC,SAAS;gBAAYJ;gBAAQxB,WAAWA;YAAY;QACrG;QACA6B,gBAAgB,CAACP,SAAWzB,uBAAuB;gBAAEiC,QAAQnC;gBAA0B2B;YAAO;IAChG;AACF;AAEA,uDAAuD,GACvD,OAAO,SAASS;IACd,OAAOjC,+BAA+BC;AACxC;AAEA,uDAAuD,GACvD,OAAO,SAASiC;IACd,OAAOpC,2BAA2B;QAAEI,WAAW,IAAMX,cAAcY,GAAG,GAAGD,SAAS;IAAG;AACvF"}

package/src/lib/runtime/runtime-deps.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline';
+import type { OpenedOutreachMailbox } from '../mailboxes/mailbox-transport';
+import type { OutreachUnsubscribeTarget } from './unsubscribe-link';
+/**
+ * EVERYTHING THE SENDING RUNTIME REACHES OUTSIDE ITS OWN DOCUMENTS (AGL-2981).
+ *
+ * The send and sync jobs and the unsubscribe route read and write Outreach's
+ * collections through the Firestore they are handed, and reach everything
+ * else through these: the mailbox's Gmail, the record system, the platform's
+ * suppression and topic lists, the activity feed and the gates that decide
+ * whether Outreach may act for a workspace at all. The platform's own are
+ * `platform-runtime-deps.ts`; the emulator specs hand in a fake Gmail and
+ * recorders, so no test reaches Google or sends mail.
+ */
+/** A target an org activity line written by the runtime points at. */
+export interface OutreachRuntimeActivityTarget {
+    type: `${string}:${string}`;
+    id: string;
+    name: string;
+}
+export interface OutreachRuntimeDeps {
+    firestore(): FirebaseFirestore.Firestore;
+    now(): number;
+    /** A source of numbers in `[0, 1)` — the scheduler's jitter. */
+    random(): number;
+    /** Opens a mailbox's Gmail client from its sealed grant. */
+    openMailbox(mailboxId: string): Promise<OpenedOutreachMailbox>;
+    /**
+     * Why Outreach may not act for this workspace now, or `null` when it may:
+     * the plugin switched on and entitled, and its release flag on for the
+     * organization.
+     */
+    orgRefusal(orgId: string, org: Record<string, unknown>): Promise<string | null>;
+    /**
+     * Why nothing may be sent as this member now — a lockdown of the platform,
+     * the workspace or the member — or `null`.
+     */
+    sendRefusal(input: {
+        orgId: string;
+        org: Record<string, unknown>;
+        uid: string;
+    }): Promise<string | null>;
+    /** The workspace's record system on the timeline seam, when a plugin keeps one. */
+    timeline(): PluginRecordTimelineWriter | null;
+    logOrgActivity(orgId: string, actor: {
+        uid: string | null;
+        email?: string | null;
+    }, action: string, target: OutreachRuntimeActivityTarget): Promise<void>;
+    /** Takes an address off one site's `sales` email topic. */
+    optOutOfSalesTopic(input: {
+        hostId: string;
+        email: string;
+    }): Promise<void>;
+    /** Files a hard bounce on the platform's suppression list. */
+    suppressBouncedEmail(input: {
+        email: string;
+        hostId: string | null;
+    }): Promise<void>;
+    /** The signed one-click link for an enrollment, or `null` when none can be minted. */
+    unsubscribeUrl(target: OutreachUnsubscribeTarget): string | null;
+}

package/src/lib/runtime/runtime-deps.js

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export { };
+
+//# sourceMappingURL=runtime-deps.js.map

package/src/lib/runtime/runtime-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/runtime/runtime-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport type { OpenedOutreachMailbox } from '../mailboxes/mailbox-transport'\nimport type { OutreachUnsubscribeTarget } from './unsubscribe-link'\n\n/**\n * EVERYTHING THE SENDING RUNTIME REACHES OUTSIDE ITS OWN DOCUMENTS (AGL-2981).\n *\n * The send and sync jobs and the unsubscribe route read and write Outreach's\n * collections through the Firestore they are handed, and reach everything\n * else through these: the mailbox's Gmail, the record system, the platform's\n * suppression and topic lists, the activity feed and the gates that decide\n * whether Outreach may act for a workspace at all. The platform's own are\n * `platform-runtime-deps.ts`; the emulator specs hand in a fake Gmail and\n * recorders, so no test reaches Google or sends mail.\n */\n\n/** A target an org activity line written by the runtime points at. */\nexport interface OutreachRuntimeActivityTarget {\n  type: `${string}:${string}`\n  id: string\n  name: string\n}\n\nexport interface OutreachRuntimeDeps {\n  firestore(): FirebaseFirestore.Firestore\n  now(): number\n  /** A source of numbers in `[0, 1)` — the scheduler's jitter. */\n  random(): number\n  /** Opens a mailbox's Gmail client from its sealed grant. */\n  openMailbox(mailboxId: string): Promise<OpenedOutreachMailbox>\n  /**\n   * Why Outreach may not act for this workspace now, or `null` when it may:\n   * the plugin switched on and entitled, and its release flag on for the\n   * organization.\n   */\n  orgRefusal(orgId: string, org: Record<string, unknown>): Promise<string | null>\n  /**\n   * Why nothing may be sent as this member now — a lockdown of the platform,\n   * the workspace or the member — or `null`.\n   */\n  sendRefusal(input: { orgId: string; org: Record<string, unknown>; uid: string }): Promise<string | null>\n  /** The workspace's record system on the timeline seam, when a plugin keeps one. */\n  timeline(): PluginRecordTimelineWriter | null\n  logOrgActivity(\n    orgId: string,\n    actor: { uid: string | null; email?: string | null },\n    action: string,\n    target: OutreachRuntimeActivityTarget,\n  ): Promise<void>\n  /** Takes an address off one site's `sales` email topic. */\n  optOutOfSalesTopic(input: { hostId: string; email: string }): Promise<void>\n  /** Files a hard bounce on the platform's suppression list. */\n  suppressBouncedEmail(input: { email: string; hostId: string | null }): Promise<void>\n  /** The signed one-click link for an enrollment, or `null` when none can be minted. */\n  unsubscribeUrl(target: OutreachUnsubscribeTarget): string | null\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAyBD,WAgCC"}

package/src/lib/runtime/send-job.d.ts

@@ -0,0 +1,42 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { OutreachRuntimeDeps } from './runtime-deps';
+export { OUTREACH_SEND_JOB_ID } from '../constants/runtime-jobs';
+/** The most due enrollments one run reads. */
+export declare const OUTREACH_SEND_SCAN_LIMIT = 300;
+/** How long a claim holds before a later run settles it. */
+export declare const OUTREACH_CLAIM_STALE_MS: number;
+/** What one run did, for the tick's answer. */
+export interface OutreachSendReport {
+    [key: string]: number;
+    due: number;
+    sent: number;
+    tasks: number;
+    /** Stopped by a gate or an unusable mailbox. */
+    stopped: number;
+    /** Paused for the rep to fix, or failed for good. */
+    failed: number;
+    /** Due, and left for a later run: the allowance, a lookup, a hold. */
+    held: number;
+    /** Claims a dead run left, settled. */
+    recovered: number;
+}
+/** Runs the send job once — see the module note. */
+export declare function runOutreachSendJob(deps: OutreachRuntimeDeps, context: {
+    nowMs: number;
+    deadlineMs: number;
+}): Promise<OutreachSendReport>;