@aglyn/plugins-outreach 1.0.0-beta.161 → 1.0.0-beta.162

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-outreach",
-  "version": "1.0.0-beta.161",
+  "version": "1.0.0-beta.162",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,18 +25,18 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.161",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.161",
-    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.161",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.161",
-    "@aglyn/shared-ui-next": "1.0.0-beta.161",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.161",
-    "@aglyn/shared-util-http": "1.0.0-beta.161",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.161",
-    "@aglyn/shared-util-tools": "1.0.0-beta.161",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.161",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.161",
-    "@aglyn/tenant-runtime": "1.0.0-beta.161",
+    "@aglyn/aglyn": "1.0.0-beta.162",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.162",
+    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.162",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.162",
+    "@aglyn/shared-ui-next": "1.0.0-beta.162",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.162",
+    "@aglyn/shared-util-http": "1.0.0-beta.162",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.162",
+    "@aglyn/shared-util-tools": "1.0.0-beta.162",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.162",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.162",
+    "@aglyn/tenant-runtime": "1.0.0-beta.162",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/engine/gates.d.ts

@@ -95,7 +95,7 @@ export interface OutreachGateInput {
     enrollmentId?: string | null;
     lookups: OutreachGateLookups;
 }
-export type OutreachGateCode = 'contact_missing' | 'invalid_email' | 'email_not_on_contact' | 'free_mail' | 'country_not_allowed' | 'country_unknown' | 'platform_suppressed' | 'host_suppressed' | 'sales_opted_out' | 'do_not_contact' | 'do_not_contact_domain' | 'workspace_member' | 'customer' | 'already_enrolled' | 'attestations_missing' | 'personal_line_missing' | 'personal_line_too_long';
+export type OutreachGateCode = 'contact_missing' | 'invalid_email' | 'email_not_on_contact' | 'free_mail' | 'country_not_allowed' | 'country_unknown' | 'platform_suppressed' | 'host_suppressed' | 'email_state' | 'sales_opted_out' | 'do_not_contact' | 'do_not_contact_domain' | 'workspace_member' | 'customer' | 'already_enrolled' | 'attestations_missing' | 'personal_line_missing' | 'personal_line_too_long';
 export interface OutreachGateBlock {
     code: OutreachGateCode;
     /** A sentence a rep can act on. */

package/src/lib/engine/gates.js

@@ -47,6 +47,7 @@
  * be emailed must not be emailed because a read timed out.
  *==========================================*/ import { contactEmails, normalizeContactEmail, readContactFacet } from "@aglyn/aglyn/app-utils/contacts";
 import { isPublicMailboxDomain } from "@aglyn/aglyn/app-utils/crm";
+import { emailStateRefusal, readEmailState } from "@aglyn/aglyn/app-utils/email-state";
 import { findMemberByEmailAddress } from "@aglyn/aglyn/app-utils/member-email-aliases";
 import { OUTREACH_ATTESTATION_KINDS, OUTREACH_PERSONAL_LINE_MAX } from "../model/outreach.types.js";
 import { outreachCountryName, resolveOutreachRecipientCountry } from "./recipient-country.js";
@@ -167,7 +168,11 @@ const COULD_NOT_CHECK = 'Try again in a moment.';
     } else if (!attestedUs) {
         block('country_unknown', `We don't know which country ${email} is in. Confirm it's a US business address, or add the country to the contact.`);
     }
-    // 4. Every list that says not to.
+    // 4. Every list that says not to — the record's own verdict first
+    //    (AGL-3245), in the words the record page shows: what the lists below
+    //    hold, said by the reason it is held.
+    const recordRefusal = emailStateRefusal(readEmailState(contact));
+    if (recordRefusal) block('email_state', recordRefusal);
     if ((lookups == null ? void 0 : lookups.platformSuppressed) === true) {
         block('platform_suppressed', `${email} is on the platform's suppression list after a hard bounce or a spam complaint.`);
     } else if ((lookups == null ? void 0 : lookups.platformSuppressed) !== false) {

package/src/lib/engine/gates.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/engine/gates.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * WHO MAY BE EMAILED (AGL-2979).\n *\n * One pure decision, run twice: when a rep enrolls a person, so the dialog\n * can say everything that stands in the way at once, and again before every\n * send, because a person enrolled on Monday can unsubscribe, become a\n * customer or join the team by Thursday. It reads a contact as stored and\n * the RESULTS of the lookups the runtime makes; it makes none itself.\n *\n * ## Every block, not the first\n *\n * The result lists each gate that refuses, in the order below, with a\n * sentence a rep can act on. A dialog that revealed one problem per attempt\n * would be a dialog people learn to fight.\n *\n * ## Cold\n *\n * A contact is COLD when no inbound door ever brought them to the sending\n * site's business — no form, sign-up, order or booking recorded on that\n * site's facet of the contact, and no email they wrote to the workspace.\n * Cold contacts carry the heavier rules: a business address rather than a\n * personal mailbox, a United States address, a personal line from the rep,\n * and the three attestations only the rep can make. The facet is read, never\n * the whole document, because a form filled in on another client's site is\n * that client's relationship and not this one's.\n *\n * ## Lookups fail closed\n *\n * A lookup the runtime could not complete is passed as `null`, and `null`\n * refuses — with a sentence that says the check could not be made rather\n * than one that accuses the address of something. A person who asked not to\n * be emailed must not be emailed because a read timed out.\n *==========================================*/\n\nimport {\n  type ContactSource,\n  contactEmails,\n  normalizeContactEmail,\n  readContactFacet,\n} from '@aglyn/aglyn/app-utils/contacts'\nimport { isPublicMailboxDomain } from '@aglyn/aglyn/app-utils/crm'\nimport type { TopicSubscriptionState } from '@aglyn/aglyn/app-utils/email-topics'\nimport {\n  findMemberByEmailAddress,\n  type MemberAddresses,\n} from '@aglyn/aglyn/app-utils/member-email-aliases'\nimport {\n  OUTREACH_ATTESTATION_KINDS,\n  OUTREACH_PERSONAL_LINE_MAX,\n  type OutreachAttestationKind,\n  type OutreachAttestations,\n  type OutreachEnrollmentStatus,\n  type OutreachSequenceSettings,\n} from '../model/outreach.types'\nimport {\n  type OutreachRecipientCountry,\n  outreachCountryName,\n  resolveOutreachRecipientCountry,\n} from './recipient-country'\nimport { readOutreachSequenceSettings } from './sequence-validation'\n\n/**\n * The capture doors that mean a person came to the business: a form, a\n * sign-up to the site or its newsletter, an order, a booking. `api`,\n * `import` and `manual` are how a business adds people it found, which is\n * exactly what cold means.\n */\nexport const OUTREACH_INBOUND_CONTACT_SOURCES: readonly ContactSource[] = [\n  'form',\n  'member',\n  'newsletter',\n  'order',\n  'booking',\n]\n\n/** The enrollment statuses that hold a person: one sequence at a time. */\nexport const OUTREACH_OPEN_ENROLLMENT_STATUSES: readonly OutreachEnrollmentStatus[] = [\n  'active',\n  'paused',\n]\n\n/**\n * What the runtime looked up about the address before asking. Every field is\n * `null` when its read failed, and a `null` refuses.\n */\nexport interface OutreachGateLookups {\n  /**\n   * `emailSuppressions/{key}` holds a record in force — a hard bounce or a\n   * spam complaint anywhere on the platform (`isEmailSuppressed`).\n   */\n  platformSuppressed: boolean | null\n  /** `hosts/{hostId}/suppressions/{key}` exists for the sequence's site. */\n  hostSuppressed: boolean | null\n  /**\n   * The address's standing on the site's `sales` topic —\n   * `readTopicSubscriptionState` of the `sales` entry in\n   * `hosts/{hostId}/topicOptOuts/{key}`. Only `opted-out` refuses: a pending\n   * confirmation is about a subscription, and a sales email does not rest on\n   * one.\n   */\n  salesTopicState: TopicSubscriptionState | null\n  /** The address is on the organization's Outreach do-not-contact list. */\n  doNotContact: boolean | null\n  /**\n   * The address's DOMAIN is on that list (AGL-3244): a member put it there,\n   * or the domain's mail gateway blocked the sender outright.\n   */\n  doNotContactDomain: boolean | null\n  /**\n   * The organization's roster: each member's sign-in address and confirmed\n   * aliases, as `crmInboundRoster` builds it.\n   */\n  workspaceMembers: readonly MemberAddresses[] | null\n  /**\n   * The person's enrollments that are `active` or `paused`, found by contact\n   * id or by address. Other statuses are ignored, so passing every\n   * enrollment is safe too.\n   */\n  openEnrollments: ReadonlyArray<{\n    id: string\n    sequenceId: string\n    status: OutreachEnrollmentStatus\n  }> | null\n  /**\n   * An email the person wrote (`direction: 'inbound'`) is filed on the\n   * contact. `null` reads as `false`, which only makes the contact cold and\n   * the rules stricter.\n   */\n  hasInboundEmail: boolean | null\n}\n\nexport interface OutreachGateInput {\n  /** The address the steps go to. */\n  email: string\n  /** The contact document as stored (`orgs/{orgId}/contacts/{id}`), or `null` when it is gone. */\n  contact: Record<string, unknown> | null | undefined\n  /** The consent group of the sequence's site: whose facet holds stage, sources and address. */\n  contactGroupId: string\n  /** The company document the contact is filed under, when there is one. */\n  company?: Record<string, unknown> | null\n  /** The sequence's settings as stored; a missing field reads as its default. */\n  settings: Partial<OutreachSequenceSettings> | null | undefined\n  /** The rep's signal sentence. */\n  personalLine: string | null | undefined\n  attestations: OutreachAttestations | null | undefined\n  /** The enrollment being re-checked before a send, so it does not count as another. */\n  enrollmentId?: string | null\n  lookups: OutreachGateLookups\n}\n\nexport type OutreachGateCode =\n  | 'contact_missing'\n  | 'invalid_email'\n  | 'email_not_on_contact'\n  | 'free_mail'\n  | 'country_not_allowed'\n  | 'country_unknown'\n  | 'platform_suppressed'\n  | 'host_suppressed'\n  | 'sales_opted_out'\n  | 'do_not_contact'\n  | 'do_not_contact_domain'\n  | 'workspace_member'\n  | 'customer'\n  | 'already_enrolled'\n  | 'attestations_missing'\n  | 'personal_line_missing'\n  | 'personal_line_too_long'\n\nexport interface OutreachGateBlock {\n  code: OutreachGateCode\n  /** A sentence a rep can act on. */\n  reason: string\n}\n\nexport interface OutreachGateResult {\n  allowed: boolean\n  /** The address, normalized, or `null` when it is not one. */\n  email: string | null\n  cold: boolean\n  country: OutreachRecipientCountry\n  /** Every gate that refuses, in gate order. */\n  blocks: OutreachGateBlock[]\n  /** The attestations a cold contact still needs, in the order they are asked. */\n  missingAttestations: OutreachAttestationKind[]\n}\n\n/** Local parts that answer no person: nobody reads a reply sent there. */\nconst MACHINE_LOCAL_PART = /^(no-?reply|do-?not-?reply|mailer-daemon|postmaster|bounces?)(\\+.*)?$/\n\n/**\n * Whether a contact came to the sending site's business through no inbound\n * door — see the module note.\n */\nexport function isColdOutreachContact(\n  contact: Record<string, unknown> | null | undefined,\n  contactGroupId: string,\n  hasInboundEmail: boolean,\n): boolean {\n  if (hasInboundEmail) return false\n  const { sources } = readContactFacet(contact, contactGroupId)\n  return !OUTREACH_INBOUND_CONTACT_SOURCES.some((source) => sources?.[source] === true)\n}\n\n/**\n * Whether the sending site's business counts the contact as a customer: a\n * `customer` stage, the `evangelist` stage past it, or an order on record.\n */\nexport function isOutreachCustomer(\n  contact: Record<string, unknown> | null | undefined,\n  contactGroupId: string,\n): boolean {\n  const facet = readContactFacet(contact, contactGroupId)\n  return (\n    facet.lifecycleStage === 'customer' ||\n    facet.lifecycleStage === 'evangelist' ||\n    facet.sources?.order === true ||\n    Number(facet.ordersCount) > 0\n  )\n}\n\n/** A confirmation counts only when it says who confirmed it and when. */\nexport function outreachAttestationHolds(\n  attestations: OutreachAttestations | null | undefined,\n  kind: OutreachAttestationKind,\n): boolean {\n  const entry = attestations?.[kind]\n  return (\n    typeof entry?.uid === 'string' &&\n    entry.uid.trim() !== '' &&\n    typeof entry.atMs === 'number' &&\n    Number.isFinite(entry.atMs) &&\n    entry.atMs > 0\n  )\n}\n\n/** The personal line as stored: one line, whitespace settled. */\nexport function normalizeOutreachPersonalLine(value: unknown): string {\n  return typeof value === 'string' ? value.replace(/\\s+/g, ' ').trim() : ''\n}\n\n/** Each attestation as the sentence that asks for it reads it. */\nconst ATTESTATION_PHRASES: Record<OutreachAttestationKind, string> = {\n  us_business_address: \"it's a US business address\",\n  published_or_given: 'they or their company published it, or they gave it to you',\n  verified_deliverable: 'it was verified as deliverable',\n}\n\nfunction listInWords(items: readonly string[]): string {\n  if (items.length <= 1) return items.join('')\n  return `${items.slice(0, -1).join('; ')}; and ${items[items.length - 1]}`\n}\n\nconst COULD_NOT_CHECK = 'Try again in a moment.'\n\n/** Every gate an address and a contact must pass — see the module note. */\nexport function evaluateOutreachGates(input: OutreachGateInput): OutreachGateResult {\n  const lookups = input.lookups\n  const settings = readOutreachSequenceSettings(input.settings)\n  const email = normalizeContactEmail(input.email)\n  const contact = input.contact ?? null\n  const cold = isColdOutreachContact(\n    contact,\n    input.contactGroupId,\n    lookups?.hasInboundEmail === true,\n  )\n  const blocks: OutreachGateBlock[] = []\n  const block = (code: OutreachGateCode, reason: string) => blocks.push({ code, reason })\n  // The gates below need both a record and an address to read.\n  const refusedOutright = (): OutreachGateResult => ({\n    allowed: false,\n    email,\n    cold,\n    country: { country: null, source: null },\n    blocks,\n    missingAttestations: [],\n  })\n\n  if (!contact) {\n    block('contact_missing', 'This contact no longer exists in the CRM.')\n    return refusedOutright()\n  }\n\n  // 1. A valid address, one that belongs to this contact and to a person.\n  if (!email) {\n    block('invalid_email', `\"${String(input.email ?? '').trim()}\" isn't a valid email address.`)\n    return refusedOutright()\n  }\n  if (MACHINE_LOCAL_PART.test(email.slice(0, email.lastIndexOf('@')))) {\n    block('invalid_email', `${email} is an automated address that no person reads.`)\n  }\n  if (!contactEmails(contact).includes(email)) {\n    block('email_not_on_contact', `${email} isn't an address on this contact's record.`)\n  }\n\n  // 2. A business address for a cold contact.\n  if (cold && isPublicMailboxDomain(email)) {\n    block(\n      'free_mail',\n      `${email} is a personal mailbox. Cold outreach goes only to business addresses.`,\n    )\n  }\n\n  // 3. The country.\n  const facet = readContactFacet(contact, input.contactGroupId)\n  const companyAddress = input.company ? input.company['address'] : null\n  const country = resolveOutreachRecipientCountry({\n    email,\n    contactAddress: facet.address,\n    companyAddress,\n  })\n  const attestedUs = outreachAttestationHolds(input.attestations, 'us_business_address')\n  if (country.country) {\n    const name = outreachCountryName(country.country)\n    const evidence =\n      country.source === 'domain' ? `its domain places it in ${name}` : `it's in ${name}`\n    if (!settings.allowedCountries.includes(country.country)) {\n      block(\n        'country_not_allowed',\n        `${email} can't be emailed from this sequence: ${evidence}, which isn't one of its countries.`,\n      )\n    } else if (cold && country.country !== 'US') {\n      block(\n        'country_not_allowed',\n        `Cold outreach goes only to US business addresses, and ${evidence}.`,\n      )\n    }\n  } else if (!settings.allowedCountries.includes('US')) {\n    block(\n      'country_unknown',\n      `We don't know which country ${email} is in. Add the country to the contact's address.`,\n    )\n  } else if (!attestedUs) {\n    block(\n      'country_unknown',\n      `We don't know which country ${email} is in. Confirm it's a US business address, or add the country to the contact.`,\n    )\n  }\n\n  // 4. Every list that says not to.\n  if (lookups?.platformSuppressed === true) {\n    block(\n      'platform_suppressed',\n      `${email} is on the platform's suppression list after a hard bounce or a spam complaint.`,\n    )\n  } else if (lookups?.platformSuppressed !== false) {\n    block(\n      'platform_suppressed',\n      `We couldn't check the platform's suppression list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.hostSuppressed === true) {\n    block('host_suppressed', `${email} unsubscribed from this site's email, or mail to it bounced.`)\n  } else if (lookups?.hostSuppressed !== false) {\n    block(\n      'host_suppressed',\n      `We couldn't check this site's suppression list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.salesTopicState === 'opted-out') {\n    block('sales_opted_out', `${email} opted out of sales outreach from this site.`)\n  } else if (lookups?.salesTopicState !== 'subscribed' && lookups?.salesTopicState !== 'pending') {\n    block(\n      'sales_opted_out',\n      `We couldn't check whether ${email} opted out of sales outreach. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.doNotContact === true) {\n    block('do_not_contact', `${email} is on your organization's do-not-contact list.`)\n  } else if (lookups?.doNotContact !== false) {\n    block(\n      'do_not_contact',\n      `We couldn't check your do-not-contact list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  const domain = email.slice(email.lastIndexOf('@') + 1)\n  if (lookups?.doNotContactDomain === true) {\n    block(\n      'do_not_contact_domain',\n      `${email} is at ${domain}, which is on your organization's do-not-contact list: no address there is emailed.`,\n    )\n  } else if (lookups?.doNotContactDomain !== false) {\n    block(\n      'do_not_contact_domain',\n      `We couldn't check your do-not-contact list for ${domain}. ${COULD_NOT_CHECK}`,\n    )\n  }\n\n  // 5. Not one of the workspace's own people.\n  const members = lookups?.workspaceMembers\n  if (!Array.isArray(members)) {\n    block(\n      'workspace_member',\n      `We couldn't check whether ${email} belongs to a member of this workspace. ${COULD_NOT_CHECK}`,\n    )\n  } else if (findMemberByEmailAddress(members, email)) {\n    block('workspace_member', `${email} belongs to a member of this workspace.`)\n  }\n\n  // 6. Not a customer, unless the sequence is written for them.\n  if (!settings.allowCustomers && isOutreachCustomer(contact, input.contactGroupId)) {\n    block('customer', \"This contact is a customer, and this sequence doesn't include customers.\")\n  }\n\n  // 7. One sequence at a time.\n  const enrollments = lookups?.openEnrollments\n  if (!Array.isArray(enrollments)) {\n    block(\n      'already_enrolled',\n      `We couldn't check this contact's other sequences. ${COULD_NOT_CHECK}`,\n    )\n  } else if (\n    enrollments.some(\n      (enrollment) =>\n        enrollment?.id !== input.enrollmentId &&\n        OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(enrollment?.status),\n    )\n  ) {\n    block(\n      'already_enrolled',\n      'This contact is already in another sequence. Finish or stop that one first.',\n    )\n  }\n\n  // 8. What only the rep can vouch for, on a cold contact.\n  const personalLine = normalizeOutreachPersonalLine(input.personalLine)\n  const missingAttestations = cold\n    ? OUTREACH_ATTESTATION_KINDS.filter(\n        (kind) => !outreachAttestationHolds(input.attestations, kind),\n      )\n    : []\n  if (missingAttestations.length) {\n    const phrases = missingAttestations.map((kind) => `that ${ATTESTATION_PHRASES[kind]}`)\n    block(\n      'attestations_missing',\n      `Before emailing a cold contact, confirm ${listInWords(phrases)}.`,\n    )\n  }\n  if (cold && !personalLine) {\n    block(\n      'personal_line_missing',\n      'Write a personal line: one sentence on why you are writing to this person now.',\n    )\n  }\n  if (personalLine.length > OUTREACH_PERSONAL_LINE_MAX) {\n    block(\n      'personal_line_too_long',\n      `Keep the personal line to one sentence, under ${OUTREACH_PERSONAL_LINE_MAX} characters.`,\n    )\n  }\n\n  return {\n    allowed: blocks.length === 0,\n    email,\n    cold,\n    country,\n    blocks,\n    missingAttestations,\n  }\n}\n"],"names":["contactEmails","normalizeContactEmail","readContactFacet","isPublicMailboxDomain","findMemberByEmailAddress","OUTREACH_ATTESTATION_KINDS","OUTREACH_PERSONAL_LINE_MAX","outreachCountryName","resolveOutreachRecipientCountry","readOutreachSequenceSettings","OUTREACH_INBOUND_CONTACT_SOURCES","OUTREACH_OPEN_ENROLLMENT_STATUSES","MACHINE_LOCAL_PART","isColdOutreachContact","contact","contactGroupId","hasInboundEmail","sources","some","source","isOutreachCustomer","facet","lifecycleStage","order","Number","ordersCount","outreachAttestationHolds","attestations","kind","entry","uid","trim","atMs","isFinite","normalizeOutreachPersonalLine","value","replace","ATTESTATION_PHRASES","us_business_address","published_or_given","verified_deliverable","listInWords","items","length","join","slice","COULD_NOT_CHECK","evaluateOutreachGates","input","lookups","settings","email","cold","blocks","block","code","reason","push","refusedOutright","allowed","country","missingAttestations","String","test","lastIndexOf","includes","companyAddress","company","contactAddress","address","attestedUs","name","evidence","allowedCountries","platformSuppressed","hostSuppressed","salesTopicState","doNotContact","domain","doNotContactDomain","members","workspaceMembers","Array","isArray","allowCustomers","enrollments","openEnrollments","enrollment","id","enrollmentId","status","personalLine","filter","phrases","map"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAgC4C,GAE5C,SAEEA,aAAa,EACbC,qBAAqB,EACrBC,gBAAgB,QACX,kCAAiC;AACxC,SAASC,qBAAqB,QAAQ,6BAA4B;AAElE,SACEC,wBAAwB,QAEnB,8CAA6C;AACpD,SACEC,0BAA0B,EAC1BC,0BAA0B,QAKrB,6BAAyB;AAChC,SAEEC,mBAAmB,EACnBC,+BAA+B,QAC1B,yBAAqB;AAC5B,SAASC,4BAA4B,QAAQ,2BAAuB;AAEpE;;;;;CAKC,GACD,OAAO,MAAMC,mCAA6D;IACxE;IACA;IACA;IACA;IACA;CACD,CAAA;AAED,wEAAwE,GACxE,OAAO,MAAMC,oCAAyE;IACpF;IACA;CACD,CAAA;AA4GD,wEAAwE,GACxE,MAAMC,qBAAqB;AAE3B;;;CAGC,GACD,OAAO,SAASC,sBACdC,OAAmD,EACnDC,cAAsB,EACtBC,eAAwB;IAExB,IAAIA,iBAAiB,OAAO;IAC5B,MAAM,EAAEC,OAAO,EAAE,GAAGf,iBAAiBY,SAASC;IAC9C,OAAO,CAACL,iCAAiCQ,IAAI,CAAC,CAACC,SAAWF,CAAAA,2BAAAA,OAAS,CAACE,OAAO,MAAK;AAClF;AAEA;;;CAGC,GACD,OAAO,SAASC,mBACdN,OAAmD,EACnDC,cAAsB;QAMpBM;IAJF,MAAMA,QAAQnB,iBAAiBY,SAASC;IACxC,OACEM,MAAMC,cAAc,KAAK,cACzBD,MAAMC,cAAc,KAAK,gBACzBD,EAAAA,iBAAAA,MAAMJ,OAAO,qBAAbI,eAAeE,KAAK,MAAK,QACzBC,OAAOH,MAAMI,WAAW,IAAI;AAEhC;AAEA,uEAAuE,GACvE,OAAO,SAASC,yBACdC,YAAqD,EACrDC,IAA6B;IAE7B,MAAMC,QAAQF,gCAAAA,YAAc,CAACC,KAAK;IAClC,OACE,QAAOC,yBAAAA,MAAOC,GAAG,MAAK,YACtBD,MAAMC,GAAG,CAACC,IAAI,OAAO,MACrB,OAAOF,MAAMG,IAAI,KAAK,YACtBR,OAAOS,QAAQ,CAACJ,MAAMG,IAAI,KAC1BH,MAAMG,IAAI,GAAG;AAEjB;AAEA,+DAA+D,GAC/D,OAAO,SAASE,8BAA8BC,KAAc;IAC1D,OAAO,OAAOA,UAAU,WAAWA,MAAMC,OAAO,CAAC,QAAQ,KAAKL,IAAI,KAAK;AACzE;AAEA,gEAAgE,GAChE,MAAMM,sBAA+D;IACnEC,qBAAqB;IACrBC,oBAAoB;IACpBC,sBAAsB;AACxB;AAEA,SAASC,YAAYC,KAAwB;IAC3C,IAAIA,MAAMC,MAAM,IAAI,GAAG,OAAOD,MAAME,IAAI,CAAC;IACzC,OAAO,GAAGF,MAAMG,KAAK,CAAC,GAAG,CAAC,GAAGD,IAAI,CAAC,MAAM,MAAM,EAAEF,KAAK,CAACA,MAAMC,MAAM,GAAG,EAAE,EAAE;AAC3E;AAEA,MAAMG,kBAAkB;AAExB,yEAAyE,GACzE,OAAO,SAASC,sBAAsBC,KAAwB;QAI5CA;IAHhB,MAAMC,UAAUD,MAAMC,OAAO;IAC7B,MAAMC,WAAWzC,6BAA6BuC,MAAME,QAAQ;IAC5D,MAAMC,QAAQlD,sBAAsB+C,MAAMG,KAAK;IAC/C,MAAMrC,WAAUkC,iBAAAA,MAAMlC,OAAO,YAAbkC,iBAAiB;IACjC,MAAMI,OAAOvC,sBACXC,SACAkC,MAAMjC,cAAc,EACpBkC,CAAAA,2BAAAA,QAASjC,eAAe,MAAK;IAE/B,MAAMqC,SAA8B,EAAE;IACtC,MAAMC,QAAQ,CAACC,MAAwBC,SAAmBH,OAAOI,IAAI,CAAC;YAAEF;YAAMC;QAAO;IACrF,6DAA6D;IAC7D,MAAME,kBAAkB,IAA2B,CAAA;YACjDC,SAAS;YACTR;YACAC;YACAQ,SAAS;gBAAEA,SAAS;gBAAMzC,QAAQ;YAAK;YACvCkC;YACAQ,qBAAqB,EAAE;QACzB,CAAA;IAEA,IAAI,CAAC/C,SAAS;QACZwC,MAAM,mBAAmB;QACzB,OAAOI;IACT;IAEA,wEAAwE;IACxE,IAAI,CAACP,OAAO;YACwBH;QAAlCM,MAAM,iBAAiB,CAAC,CAAC,EAAEQ,QAAOd,eAAAA,MAAMG,KAAK,YAAXH,eAAe,IAAIjB,IAAI,GAAG,8BAA8B,CAAC;QAC3F,OAAO2B;IACT;IACA,IAAI9C,mBAAmBmD,IAAI,CAACZ,MAAMN,KAAK,CAAC,GAAGM,MAAMa,WAAW,CAAC,QAAQ;QACnEV,MAAM,iBAAiB,GAAGH,MAAM,8CAA8C,CAAC;IACjF;IACA,IAAI,CAACnD,cAAcc,SAASmD,QAAQ,CAACd,QAAQ;QAC3CG,MAAM,wBAAwB,GAAGH,MAAM,2CAA2C,CAAC;IACrF;IAEA,4CAA4C;IAC5C,IAAIC,QAAQjD,sBAAsBgD,QAAQ;QACxCG,MACE,aACA,GAAGH,MAAM,sEAAsE,CAAC;IAEpF;IAEA,kBAAkB;IAClB,MAAM9B,QAAQnB,iBAAiBY,SAASkC,MAAMjC,cAAc;IAC5D,MAAMmD,iBAAiBlB,MAAMmB,OAAO,GAAGnB,MAAMmB,OAAO,CAAC,UAAU,GAAG;IAClE,MAAMP,UAAUpD,gCAAgC;QAC9C2C;QACAiB,gBAAgB/C,MAAMgD,OAAO;QAC7BH;IACF;IACA,MAAMI,aAAa5C,yBAAyBsB,MAAMrB,YAAY,EAAE;IAChE,IAAIiC,QAAQA,OAAO,EAAE;QACnB,MAAMW,OAAOhE,oBAAoBqD,QAAQA,OAAO;QAChD,MAAMY,WACJZ,QAAQzC,MAAM,KAAK,WAAW,CAAC,wBAAwB,EAAEoD,MAAM,GAAG,CAAC,QAAQ,EAAEA,MAAM;QACrF,IAAI,CAACrB,SAASuB,gBAAgB,CAACR,QAAQ,CAACL,QAAQA,OAAO,GAAG;YACxDN,MACE,uBACA,GAAGH,MAAM,sCAAsC,EAAEqB,SAAS,mCAAmC,CAAC;QAElG,OAAO,IAAIpB,QAAQQ,QAAQA,OAAO,KAAK,MAAM;YAC3CN,MACE,uBACA,CAAC,sDAAsD,EAAEkB,SAAS,CAAC,CAAC;QAExE;IACF,OAAO,IAAI,CAACtB,SAASuB,gBAAgB,CAACR,QAAQ,CAAC,OAAO;QACpDX,MACE,mBACA,CAAC,4BAA4B,EAAEH,MAAM,iDAAiD,CAAC;IAE3F,OAAO,IAAI,CAACmB,YAAY;QACtBhB,MACE,mBACA,CAAC,4BAA4B,EAAEH,MAAM,8EAA8E,CAAC;IAExH;IAEA,kCAAkC;IAClC,IAAIF,CAAAA,2BAAAA,QAASyB,kBAAkB,MAAK,MAAM;QACxCpB,MACE,uBACA,GAAGH,MAAM,+EAA+E,CAAC;IAE7F,OAAO,IAAIF,CAAAA,2BAAAA,QAASyB,kBAAkB,MAAK,OAAO;QAChDpB,MACE,uBACA,CAAC,sDAAsD,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAExF;IACA,IAAIG,CAAAA,2BAAAA,QAAS0B,cAAc,MAAK,MAAM;QACpCrB,MAAM,mBAAmB,GAAGH,MAAM,4DAA4D,CAAC;IACjG,OAAO,IAAIF,CAAAA,2BAAAA,QAAS0B,cAAc,MAAK,OAAO;QAC5CrB,MACE,mBACA,CAAC,mDAAmD,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAErF;IACA,IAAIG,CAAAA,2BAAAA,QAAS2B,eAAe,MAAK,aAAa;QAC5CtB,MAAM,mBAAmB,GAAGH,MAAM,4CAA4C,CAAC;IACjF,OAAO,IAAIF,CAAAA,2BAAAA,QAAS2B,eAAe,MAAK,gBAAgB3B,CAAAA,2BAAAA,QAAS2B,eAAe,MAAK,WAAW;QAC9FtB,MACE,mBACA,CAAC,0BAA0B,EAAEH,MAAM,8BAA8B,EAAEL,iBAAiB;IAExF;IACA,IAAIG,CAAAA,2BAAAA,QAAS4B,YAAY,MAAK,MAAM;QAClCvB,MAAM,kBAAkB,GAAGH,MAAM,+CAA+C,CAAC;IACnF,OAAO,IAAIF,CAAAA,2BAAAA,QAAS4B,YAAY,MAAK,OAAO;QAC1CvB,MACE,kBACA,CAAC,+CAA+C,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAEjF;IACA,MAAMgC,SAAS3B,MAAMN,KAAK,CAACM,MAAMa,WAAW,CAAC,OAAO;IACpD,IAAIf,CAAAA,2BAAAA,QAAS8B,kBAAkB,MAAK,MAAM;QACxCzB,MACE,yBACA,GAAGH,MAAM,OAAO,EAAE2B,OAAO,mFAAmF,CAAC;IAEjH,OAAO,IAAI7B,CAAAA,2BAAAA,QAAS8B,kBAAkB,MAAK,OAAO;QAChDzB,MACE,yBACA,CAAC,+CAA+C,EAAEwB,OAAO,EAAE,EAAEhC,iBAAiB;IAElF;IAEA,4CAA4C;IAC5C,MAAMkC,UAAU/B,2BAAAA,QAASgC,gBAAgB;IACzC,IAAI,CAACC,MAAMC,OAAO,CAACH,UAAU;QAC3B1B,MACE,oBACA,CAAC,0BAA0B,EAAEH,MAAM,wCAAwC,EAAEL,iBAAiB;IAElG,OAAO,IAAI1C,yBAAyB4E,SAAS7B,QAAQ;QACnDG,MAAM,oBAAoB,GAAGH,MAAM,uCAAuC,CAAC;IAC7E;IAEA,8DAA8D;IAC9D,IAAI,CAACD,SAASkC,cAAc,IAAIhE,mBAAmBN,SAASkC,MAAMjC,cAAc,GAAG;QACjFuC,MAAM,YAAY;IACpB;IAEA,6BAA6B;IAC7B,MAAM+B,cAAcpC,2BAAAA,QAASqC,eAAe;IAC5C,IAAI,CAACJ,MAAMC,OAAO,CAACE,cAAc;QAC/B/B,MACE,oBACA,CAAC,kDAAkD,EAAER,iBAAiB;IAE1E,OAAO,IACLuC,YAAYnE,IAAI,CACd,CAACqE,aACCA,CAAAA,8BAAAA,WAAYC,EAAE,MAAKxC,MAAMyC,YAAY,IACrC9E,kCAAkCsD,QAAQ,CAACsB,8BAAAA,WAAYG,MAAM,IAEjE;QACApC,MACE,oBACA;IAEJ;IAEA,yDAAyD;IACzD,MAAMqC,eAAezD,8BAA8Bc,MAAM2C,YAAY;IACrE,MAAM9B,sBAAsBT,OACxB/C,2BAA2BuF,MAAM,CAC/B,CAAChE,OAAS,CAACF,yBAAyBsB,MAAMrB,YAAY,EAAEC,SAE1D,EAAE;IACN,IAAIiC,oBAAoBlB,MAAM,EAAE;QAC9B,MAAMkD,UAAUhC,oBAAoBiC,GAAG,CAAC,CAAClE,OAAS,CAAC,KAAK,EAAES,mBAAmB,CAACT,KAAK,EAAE;QACrF0B,MACE,wBACA,CAAC,wCAAwC,EAAEb,YAAYoD,SAAS,CAAC,CAAC;IAEtE;IACA,IAAIzC,QAAQ,CAACuC,cAAc;QACzBrC,MACE,yBACA;IAEJ;IACA,IAAIqC,aAAahD,MAAM,GAAGrC,4BAA4B;QACpDgD,MACE,0BACA,CAAC,8CAA8C,EAAEhD,2BAA2B,YAAY,CAAC;IAE7F;IAEA,OAAO;QACLqD,SAASN,OAAOV,MAAM,KAAK;QAC3BQ;QACAC;QACAQ;QACAP;QACAQ;IACF;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/engine/gates.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * WHO MAY BE EMAILED (AGL-2979).\n *\n * One pure decision, run twice: when a rep enrolls a person, so the dialog\n * can say everything that stands in the way at once, and again before every\n * send, because a person enrolled on Monday can unsubscribe, become a\n * customer or join the team by Thursday. It reads a contact as stored and\n * the RESULTS of the lookups the runtime makes; it makes none itself.\n *\n * ## Every block, not the first\n *\n * The result lists each gate that refuses, in the order below, with a\n * sentence a rep can act on. A dialog that revealed one problem per attempt\n * would be a dialog people learn to fight.\n *\n * ## Cold\n *\n * A contact is COLD when no inbound door ever brought them to the sending\n * site's business — no form, sign-up, order or booking recorded on that\n * site's facet of the contact, and no email they wrote to the workspace.\n * Cold contacts carry the heavier rules: a business address rather than a\n * personal mailbox, a United States address, a personal line from the rep,\n * and the three attestations only the rep can make. The facet is read, never\n * the whole document, because a form filled in on another client's site is\n * that client's relationship and not this one's.\n *\n * ## Lookups fail closed\n *\n * A lookup the runtime could not complete is passed as `null`, and `null`\n * refuses — with a sentence that says the check could not be made rather\n * than one that accuses the address of something. A person who asked not to\n * be emailed must not be emailed because a read timed out.\n *==========================================*/\n\nimport {\n  type ContactSource,\n  contactEmails,\n  normalizeContactEmail,\n  readContactFacet,\n} from '@aglyn/aglyn/app-utils/contacts'\nimport { isPublicMailboxDomain } from '@aglyn/aglyn/app-utils/crm'\nimport { emailStateRefusal, readEmailState } from '@aglyn/aglyn/app-utils/email-state'\nimport type { TopicSubscriptionState } from '@aglyn/aglyn/app-utils/email-topics'\nimport {\n  findMemberByEmailAddress,\n  type MemberAddresses,\n} from '@aglyn/aglyn/app-utils/member-email-aliases'\nimport {\n  OUTREACH_ATTESTATION_KINDS,\n  OUTREACH_PERSONAL_LINE_MAX,\n  type OutreachAttestationKind,\n  type OutreachAttestations,\n  type OutreachEnrollmentStatus,\n  type OutreachSequenceSettings,\n} from '../model/outreach.types'\nimport {\n  type OutreachRecipientCountry,\n  outreachCountryName,\n  resolveOutreachRecipientCountry,\n} from './recipient-country'\nimport { readOutreachSequenceSettings } from './sequence-validation'\n\n/**\n * The capture doors that mean a person came to the business: a form, a\n * sign-up to the site or its newsletter, an order, a booking. `api`,\n * `import` and `manual` are how a business adds people it found, which is\n * exactly what cold means.\n */\nexport const OUTREACH_INBOUND_CONTACT_SOURCES: readonly ContactSource[] = [\n  'form',\n  'member',\n  'newsletter',\n  'order',\n  'booking',\n]\n\n/** The enrollment statuses that hold a person: one sequence at a time. */\nexport const OUTREACH_OPEN_ENROLLMENT_STATUSES: readonly OutreachEnrollmentStatus[] = [\n  'active',\n  'paused',\n]\n\n/**\n * What the runtime looked up about the address before asking. Every field is\n * `null` when its read failed, and a `null` refuses.\n */\nexport interface OutreachGateLookups {\n  /**\n   * `emailSuppressions/{key}` holds a record in force — a hard bounce or a\n   * spam complaint anywhere on the platform (`isEmailSuppressed`).\n   */\n  platformSuppressed: boolean | null\n  /** `hosts/{hostId}/suppressions/{key}` exists for the sequence's site. */\n  hostSuppressed: boolean | null\n  /**\n   * The address's standing on the site's `sales` topic —\n   * `readTopicSubscriptionState` of the `sales` entry in\n   * `hosts/{hostId}/topicOptOuts/{key}`. Only `opted-out` refuses: a pending\n   * confirmation is about a subscription, and a sales email does not rest on\n   * one.\n   */\n  salesTopicState: TopicSubscriptionState | null\n  /** The address is on the organization's Outreach do-not-contact list. */\n  doNotContact: boolean | null\n  /**\n   * The address's DOMAIN is on that list (AGL-3244): a member put it there,\n   * or the domain's mail gateway blocked the sender outright.\n   */\n  doNotContactDomain: boolean | null\n  /**\n   * The organization's roster: each member's sign-in address and confirmed\n   * aliases, as `crmInboundRoster` builds it.\n   */\n  workspaceMembers: readonly MemberAddresses[] | null\n  /**\n   * The person's enrollments that are `active` or `paused`, found by contact\n   * id or by address. Other statuses are ignored, so passing every\n   * enrollment is safe too.\n   */\n  openEnrollments: ReadonlyArray<{\n    id: string\n    sequenceId: string\n    status: OutreachEnrollmentStatus\n  }> | null\n  /**\n   * An email the person wrote (`direction: 'inbound'`) is filed on the\n   * contact. `null` reads as `false`, which only makes the contact cold and\n   * the rules stricter.\n   */\n  hasInboundEmail: boolean | null\n}\n\nexport interface OutreachGateInput {\n  /** The address the steps go to. */\n  email: string\n  /** The contact document as stored (`orgs/{orgId}/contacts/{id}`), or `null` when it is gone. */\n  contact: Record<string, unknown> | null | undefined\n  /** The consent group of the sequence's site: whose facet holds stage, sources and address. */\n  contactGroupId: string\n  /** The company document the contact is filed under, when there is one. */\n  company?: Record<string, unknown> | null\n  /** The sequence's settings as stored; a missing field reads as its default. */\n  settings: Partial<OutreachSequenceSettings> | null | undefined\n  /** The rep's signal sentence. */\n  personalLine: string | null | undefined\n  attestations: OutreachAttestations | null | undefined\n  /** The enrollment being re-checked before a send, so it does not count as another. */\n  enrollmentId?: string | null\n  lookups: OutreachGateLookups\n}\n\nexport type OutreachGateCode =\n  | 'contact_missing'\n  | 'invalid_email'\n  | 'email_not_on_contact'\n  | 'free_mail'\n  | 'country_not_allowed'\n  | 'country_unknown'\n  | 'platform_suppressed'\n  | 'host_suppressed'\n  | 'email_state'\n  | 'sales_opted_out'\n  | 'do_not_contact'\n  | 'do_not_contact_domain'\n  | 'workspace_member'\n  | 'customer'\n  | 'already_enrolled'\n  | 'attestations_missing'\n  | 'personal_line_missing'\n  | 'personal_line_too_long'\n\nexport interface OutreachGateBlock {\n  code: OutreachGateCode\n  /** A sentence a rep can act on. */\n  reason: string\n}\n\nexport interface OutreachGateResult {\n  allowed: boolean\n  /** The address, normalized, or `null` when it is not one. */\n  email: string | null\n  cold: boolean\n  country: OutreachRecipientCountry\n  /** Every gate that refuses, in gate order. */\n  blocks: OutreachGateBlock[]\n  /** The attestations a cold contact still needs, in the order they are asked. */\n  missingAttestations: OutreachAttestationKind[]\n}\n\n/** Local parts that answer no person: nobody reads a reply sent there. */\nconst MACHINE_LOCAL_PART = /^(no-?reply|do-?not-?reply|mailer-daemon|postmaster|bounces?)(\\+.*)?$/\n\n/**\n * Whether a contact came to the sending site's business through no inbound\n * door — see the module note.\n */\nexport function isColdOutreachContact(\n  contact: Record<string, unknown> | null | undefined,\n  contactGroupId: string,\n  hasInboundEmail: boolean,\n): boolean {\n  if (hasInboundEmail) return false\n  const { sources } = readContactFacet(contact, contactGroupId)\n  return !OUTREACH_INBOUND_CONTACT_SOURCES.some((source) => sources?.[source] === true)\n}\n\n/**\n * Whether the sending site's business counts the contact as a customer: a\n * `customer` stage, the `evangelist` stage past it, or an order on record.\n */\nexport function isOutreachCustomer(\n  contact: Record<string, unknown> | null | undefined,\n  contactGroupId: string,\n): boolean {\n  const facet = readContactFacet(contact, contactGroupId)\n  return (\n    facet.lifecycleStage === 'customer' ||\n    facet.lifecycleStage === 'evangelist' ||\n    facet.sources?.order === true ||\n    Number(facet.ordersCount) > 0\n  )\n}\n\n/** A confirmation counts only when it says who confirmed it and when. */\nexport function outreachAttestationHolds(\n  attestations: OutreachAttestations | null | undefined,\n  kind: OutreachAttestationKind,\n): boolean {\n  const entry = attestations?.[kind]\n  return (\n    typeof entry?.uid === 'string' &&\n    entry.uid.trim() !== '' &&\n    typeof entry.atMs === 'number' &&\n    Number.isFinite(entry.atMs) &&\n    entry.atMs > 0\n  )\n}\n\n/** The personal line as stored: one line, whitespace settled. */\nexport function normalizeOutreachPersonalLine(value: unknown): string {\n  return typeof value === 'string' ? value.replace(/\\s+/g, ' ').trim() : ''\n}\n\n/** Each attestation as the sentence that asks for it reads it. */\nconst ATTESTATION_PHRASES: Record<OutreachAttestationKind, string> = {\n  us_business_address: \"it's a US business address\",\n  published_or_given: 'they or their company published it, or they gave it to you',\n  verified_deliverable: 'it was verified as deliverable',\n}\n\nfunction listInWords(items: readonly string[]): string {\n  if (items.length <= 1) return items.join('')\n  return `${items.slice(0, -1).join('; ')}; and ${items[items.length - 1]}`\n}\n\nconst COULD_NOT_CHECK = 'Try again in a moment.'\n\n/** Every gate an address and a contact must pass — see the module note. */\nexport function evaluateOutreachGates(input: OutreachGateInput): OutreachGateResult {\n  const lookups = input.lookups\n  const settings = readOutreachSequenceSettings(input.settings)\n  const email = normalizeContactEmail(input.email)\n  const contact = input.contact ?? null\n  const cold = isColdOutreachContact(\n    contact,\n    input.contactGroupId,\n    lookups?.hasInboundEmail === true,\n  )\n  const blocks: OutreachGateBlock[] = []\n  const block = (code: OutreachGateCode, reason: string) => blocks.push({ code, reason })\n  // The gates below need both a record and an address to read.\n  const refusedOutright = (): OutreachGateResult => ({\n    allowed: false,\n    email,\n    cold,\n    country: { country: null, source: null },\n    blocks,\n    missingAttestations: [],\n  })\n\n  if (!contact) {\n    block('contact_missing', 'This contact no longer exists in the CRM.')\n    return refusedOutright()\n  }\n\n  // 1. A valid address, one that belongs to this contact and to a person.\n  if (!email) {\n    block('invalid_email', `\"${String(input.email ?? '').trim()}\" isn't a valid email address.`)\n    return refusedOutright()\n  }\n  if (MACHINE_LOCAL_PART.test(email.slice(0, email.lastIndexOf('@')))) {\n    block('invalid_email', `${email} is an automated address that no person reads.`)\n  }\n  if (!contactEmails(contact).includes(email)) {\n    block('email_not_on_contact', `${email} isn't an address on this contact's record.`)\n  }\n\n  // 2. A business address for a cold contact.\n  if (cold && isPublicMailboxDomain(email)) {\n    block(\n      'free_mail',\n      `${email} is a personal mailbox. Cold outreach goes only to business addresses.`,\n    )\n  }\n\n  // 3. The country.\n  const facet = readContactFacet(contact, input.contactGroupId)\n  const companyAddress = input.company ? input.company['address'] : null\n  const country = resolveOutreachRecipientCountry({\n    email,\n    contactAddress: facet.address,\n    companyAddress,\n  })\n  const attestedUs = outreachAttestationHolds(input.attestations, 'us_business_address')\n  if (country.country) {\n    const name = outreachCountryName(country.country)\n    const evidence =\n      country.source === 'domain' ? `its domain places it in ${name}` : `it's in ${name}`\n    if (!settings.allowedCountries.includes(country.country)) {\n      block(\n        'country_not_allowed',\n        `${email} can't be emailed from this sequence: ${evidence}, which isn't one of its countries.`,\n      )\n    } else if (cold && country.country !== 'US') {\n      block(\n        'country_not_allowed',\n        `Cold outreach goes only to US business addresses, and ${evidence}.`,\n      )\n    }\n  } else if (!settings.allowedCountries.includes('US')) {\n    block(\n      'country_unknown',\n      `We don't know which country ${email} is in. Add the country to the contact's address.`,\n    )\n  } else if (!attestedUs) {\n    block(\n      'country_unknown',\n      `We don't know which country ${email} is in. Confirm it's a US business address, or add the country to the contact.`,\n    )\n  }\n\n  // 4. Every list that says not to — the record's own verdict first\n  //    (AGL-3245), in the words the record page shows: what the lists below\n  //    hold, said by the reason it is held.\n  const recordRefusal = emailStateRefusal(readEmailState(contact))\n  if (recordRefusal) block('email_state', recordRefusal)\n  if (lookups?.platformSuppressed === true) {\n    block(\n      'platform_suppressed',\n      `${email} is on the platform's suppression list after a hard bounce or a spam complaint.`,\n    )\n  } else if (lookups?.platformSuppressed !== false) {\n    block(\n      'platform_suppressed',\n      `We couldn't check the platform's suppression list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.hostSuppressed === true) {\n    block('host_suppressed', `${email} unsubscribed from this site's email, or mail to it bounced.`)\n  } else if (lookups?.hostSuppressed !== false) {\n    block(\n      'host_suppressed',\n      `We couldn't check this site's suppression list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.salesTopicState === 'opted-out') {\n    block('sales_opted_out', `${email} opted out of sales outreach from this site.`)\n  } else if (lookups?.salesTopicState !== 'subscribed' && lookups?.salesTopicState !== 'pending') {\n    block(\n      'sales_opted_out',\n      `We couldn't check whether ${email} opted out of sales outreach. ${COULD_NOT_CHECK}`,\n    )\n  }\n  if (lookups?.doNotContact === true) {\n    block('do_not_contact', `${email} is on your organization's do-not-contact list.`)\n  } else if (lookups?.doNotContact !== false) {\n    block(\n      'do_not_contact',\n      `We couldn't check your do-not-contact list for ${email}. ${COULD_NOT_CHECK}`,\n    )\n  }\n  const domain = email.slice(email.lastIndexOf('@') + 1)\n  if (lookups?.doNotContactDomain === true) {\n    block(\n      'do_not_contact_domain',\n      `${email} is at ${domain}, which is on your organization's do-not-contact list: no address there is emailed.`,\n    )\n  } else if (lookups?.doNotContactDomain !== false) {\n    block(\n      'do_not_contact_domain',\n      `We couldn't check your do-not-contact list for ${domain}. ${COULD_NOT_CHECK}`,\n    )\n  }\n\n  // 5. Not one of the workspace's own people.\n  const members = lookups?.workspaceMembers\n  if (!Array.isArray(members)) {\n    block(\n      'workspace_member',\n      `We couldn't check whether ${email} belongs to a member of this workspace. ${COULD_NOT_CHECK}`,\n    )\n  } else if (findMemberByEmailAddress(members, email)) {\n    block('workspace_member', `${email} belongs to a member of this workspace.`)\n  }\n\n  // 6. Not a customer, unless the sequence is written for them.\n  if (!settings.allowCustomers && isOutreachCustomer(contact, input.contactGroupId)) {\n    block('customer', \"This contact is a customer, and this sequence doesn't include customers.\")\n  }\n\n  // 7. One sequence at a time.\n  const enrollments = lookups?.openEnrollments\n  if (!Array.isArray(enrollments)) {\n    block(\n      'already_enrolled',\n      `We couldn't check this contact's other sequences. ${COULD_NOT_CHECK}`,\n    )\n  } else if (\n    enrollments.some(\n      (enrollment) =>\n        enrollment?.id !== input.enrollmentId &&\n        OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(enrollment?.status),\n    )\n  ) {\n    block(\n      'already_enrolled',\n      'This contact is already in another sequence. Finish or stop that one first.',\n    )\n  }\n\n  // 8. What only the rep can vouch for, on a cold contact.\n  const personalLine = normalizeOutreachPersonalLine(input.personalLine)\n  const missingAttestations = cold\n    ? OUTREACH_ATTESTATION_KINDS.filter(\n        (kind) => !outreachAttestationHolds(input.attestations, kind),\n      )\n    : []\n  if (missingAttestations.length) {\n    const phrases = missingAttestations.map((kind) => `that ${ATTESTATION_PHRASES[kind]}`)\n    block(\n      'attestations_missing',\n      `Before emailing a cold contact, confirm ${listInWords(phrases)}.`,\n    )\n  }\n  if (cold && !personalLine) {\n    block(\n      'personal_line_missing',\n      'Write a personal line: one sentence on why you are writing to this person now.',\n    )\n  }\n  if (personalLine.length > OUTREACH_PERSONAL_LINE_MAX) {\n    block(\n      'personal_line_too_long',\n      `Keep the personal line to one sentence, under ${OUTREACH_PERSONAL_LINE_MAX} characters.`,\n    )\n  }\n\n  return {\n    allowed: blocks.length === 0,\n    email,\n    cold,\n    country,\n    blocks,\n    missingAttestations,\n  }\n}\n"],"names":["contactEmails","normalizeContactEmail","readContactFacet","isPublicMailboxDomain","emailStateRefusal","readEmailState","findMemberByEmailAddress","OUTREACH_ATTESTATION_KINDS","OUTREACH_PERSONAL_LINE_MAX","outreachCountryName","resolveOutreachRecipientCountry","readOutreachSequenceSettings","OUTREACH_INBOUND_CONTACT_SOURCES","OUTREACH_OPEN_ENROLLMENT_STATUSES","MACHINE_LOCAL_PART","isColdOutreachContact","contact","contactGroupId","hasInboundEmail","sources","some","source","isOutreachCustomer","facet","lifecycleStage","order","Number","ordersCount","outreachAttestationHolds","attestations","kind","entry","uid","trim","atMs","isFinite","normalizeOutreachPersonalLine","value","replace","ATTESTATION_PHRASES","us_business_address","published_or_given","verified_deliverable","listInWords","items","length","join","slice","COULD_NOT_CHECK","evaluateOutreachGates","input","lookups","settings","email","cold","blocks","block","code","reason","push","refusedOutright","allowed","country","missingAttestations","String","test","lastIndexOf","includes","companyAddress","company","contactAddress","address","attestedUs","name","evidence","allowedCountries","recordRefusal","platformSuppressed","hostSuppressed","salesTopicState","doNotContact","domain","doNotContactDomain","members","workspaceMembers","Array","isArray","allowCustomers","enrollments","openEnrollments","enrollment","id","enrollmentId","status","personalLine","filter","phrases","map"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAgC4C,GAE5C,SAEEA,aAAa,EACbC,qBAAqB,EACrBC,gBAAgB,QACX,kCAAiC;AACxC,SAASC,qBAAqB,QAAQ,6BAA4B;AAClE,SAASC,iBAAiB,EAAEC,cAAc,QAAQ,qCAAoC;AAEtF,SACEC,wBAAwB,QAEnB,8CAA6C;AACpD,SACEC,0BAA0B,EAC1BC,0BAA0B,QAKrB,6BAAyB;AAChC,SAEEC,mBAAmB,EACnBC,+BAA+B,QAC1B,yBAAqB;AAC5B,SAASC,4BAA4B,QAAQ,2BAAuB;AAEpE;;;;;CAKC,GACD,OAAO,MAAMC,mCAA6D;IACxE;IACA;IACA;IACA;IACA;CACD,CAAA;AAED,wEAAwE,GACxE,OAAO,MAAMC,oCAAyE;IACpF;IACA;CACD,CAAA;AA6GD,wEAAwE,GACxE,MAAMC,qBAAqB;AAE3B;;;CAGC,GACD,OAAO,SAASC,sBACdC,OAAmD,EACnDC,cAAsB,EACtBC,eAAwB;IAExB,IAAIA,iBAAiB,OAAO;IAC5B,MAAM,EAAEC,OAAO,EAAE,GAAGjB,iBAAiBc,SAASC;IAC9C,OAAO,CAACL,iCAAiCQ,IAAI,CAAC,CAACC,SAAWF,CAAAA,2BAAAA,OAAS,CAACE,OAAO,MAAK;AAClF;AAEA;;;CAGC,GACD,OAAO,SAASC,mBACdN,OAAmD,EACnDC,cAAsB;QAMpBM;IAJF,MAAMA,QAAQrB,iBAAiBc,SAASC;IACxC,OACEM,MAAMC,cAAc,KAAK,cACzBD,MAAMC,cAAc,KAAK,gBACzBD,EAAAA,iBAAAA,MAAMJ,OAAO,qBAAbI,eAAeE,KAAK,MAAK,QACzBC,OAAOH,MAAMI,WAAW,IAAI;AAEhC;AAEA,uEAAuE,GACvE,OAAO,SAASC,yBACdC,YAAqD,EACrDC,IAA6B;IAE7B,MAAMC,QAAQF,gCAAAA,YAAc,CAACC,KAAK;IAClC,OACE,QAAOC,yBAAAA,MAAOC,GAAG,MAAK,YACtBD,MAAMC,GAAG,CAACC,IAAI,OAAO,MACrB,OAAOF,MAAMG,IAAI,KAAK,YACtBR,OAAOS,QAAQ,CAACJ,MAAMG,IAAI,KAC1BH,MAAMG,IAAI,GAAG;AAEjB;AAEA,+DAA+D,GAC/D,OAAO,SAASE,8BAA8BC,KAAc;IAC1D,OAAO,OAAOA,UAAU,WAAWA,MAAMC,OAAO,CAAC,QAAQ,KAAKL,IAAI,KAAK;AACzE;AAEA,gEAAgE,GAChE,MAAMM,sBAA+D;IACnEC,qBAAqB;IACrBC,oBAAoB;IACpBC,sBAAsB;AACxB;AAEA,SAASC,YAAYC,KAAwB;IAC3C,IAAIA,MAAMC,MAAM,IAAI,GAAG,OAAOD,MAAME,IAAI,CAAC;IACzC,OAAO,GAAGF,MAAMG,KAAK,CAAC,GAAG,CAAC,GAAGD,IAAI,CAAC,MAAM,MAAM,EAAEF,KAAK,CAACA,MAAMC,MAAM,GAAG,EAAE,EAAE;AAC3E;AAEA,MAAMG,kBAAkB;AAExB,yEAAyE,GACzE,OAAO,SAASC,sBAAsBC,KAAwB;QAI5CA;IAHhB,MAAMC,UAAUD,MAAMC,OAAO;IAC7B,MAAMC,WAAWzC,6BAA6BuC,MAAME,QAAQ;IAC5D,MAAMC,QAAQpD,sBAAsBiD,MAAMG,KAAK;IAC/C,MAAMrC,WAAUkC,iBAAAA,MAAMlC,OAAO,YAAbkC,iBAAiB;IACjC,MAAMI,OAAOvC,sBACXC,SACAkC,MAAMjC,cAAc,EACpBkC,CAAAA,2BAAAA,QAASjC,eAAe,MAAK;IAE/B,MAAMqC,SAA8B,EAAE;IACtC,MAAMC,QAAQ,CAACC,MAAwBC,SAAmBH,OAAOI,IAAI,CAAC;YAAEF;YAAMC;QAAO;IACrF,6DAA6D;IAC7D,MAAME,kBAAkB,IAA2B,CAAA;YACjDC,SAAS;YACTR;YACAC;YACAQ,SAAS;gBAAEA,SAAS;gBAAMzC,QAAQ;YAAK;YACvCkC;YACAQ,qBAAqB,EAAE;QACzB,CAAA;IAEA,IAAI,CAAC/C,SAAS;QACZwC,MAAM,mBAAmB;QACzB,OAAOI;IACT;IAEA,wEAAwE;IACxE,IAAI,CAACP,OAAO;YACwBH;QAAlCM,MAAM,iBAAiB,CAAC,CAAC,EAAEQ,QAAOd,eAAAA,MAAMG,KAAK,YAAXH,eAAe,IAAIjB,IAAI,GAAG,8BAA8B,CAAC;QAC3F,OAAO2B;IACT;IACA,IAAI9C,mBAAmBmD,IAAI,CAACZ,MAAMN,KAAK,CAAC,GAAGM,MAAMa,WAAW,CAAC,QAAQ;QACnEV,MAAM,iBAAiB,GAAGH,MAAM,8CAA8C,CAAC;IACjF;IACA,IAAI,CAACrD,cAAcgB,SAASmD,QAAQ,CAACd,QAAQ;QAC3CG,MAAM,wBAAwB,GAAGH,MAAM,2CAA2C,CAAC;IACrF;IAEA,4CAA4C;IAC5C,IAAIC,QAAQnD,sBAAsBkD,QAAQ;QACxCG,MACE,aACA,GAAGH,MAAM,sEAAsE,CAAC;IAEpF;IAEA,kBAAkB;IAClB,MAAM9B,QAAQrB,iBAAiBc,SAASkC,MAAMjC,cAAc;IAC5D,MAAMmD,iBAAiBlB,MAAMmB,OAAO,GAAGnB,MAAMmB,OAAO,CAAC,UAAU,GAAG;IAClE,MAAMP,UAAUpD,gCAAgC;QAC9C2C;QACAiB,gBAAgB/C,MAAMgD,OAAO;QAC7BH;IACF;IACA,MAAMI,aAAa5C,yBAAyBsB,MAAMrB,YAAY,EAAE;IAChE,IAAIiC,QAAQA,OAAO,EAAE;QACnB,MAAMW,OAAOhE,oBAAoBqD,QAAQA,OAAO;QAChD,MAAMY,WACJZ,QAAQzC,MAAM,KAAK,WAAW,CAAC,wBAAwB,EAAEoD,MAAM,GAAG,CAAC,QAAQ,EAAEA,MAAM;QACrF,IAAI,CAACrB,SAASuB,gBAAgB,CAACR,QAAQ,CAACL,QAAQA,OAAO,GAAG;YACxDN,MACE,uBACA,GAAGH,MAAM,sCAAsC,EAAEqB,SAAS,mCAAmC,CAAC;QAElG,OAAO,IAAIpB,QAAQQ,QAAQA,OAAO,KAAK,MAAM;YAC3CN,MACE,uBACA,CAAC,sDAAsD,EAAEkB,SAAS,CAAC,CAAC;QAExE;IACF,OAAO,IAAI,CAACtB,SAASuB,gBAAgB,CAACR,QAAQ,CAAC,OAAO;QACpDX,MACE,mBACA,CAAC,4BAA4B,EAAEH,MAAM,iDAAiD,CAAC;IAE3F,OAAO,IAAI,CAACmB,YAAY;QACtBhB,MACE,mBACA,CAAC,4BAA4B,EAAEH,MAAM,8EAA8E,CAAC;IAExH;IAEA,kEAAkE;IAClE,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAMuB,gBAAgBxE,kBAAkBC,eAAeW;IACvD,IAAI4D,eAAepB,MAAM,eAAeoB;IACxC,IAAIzB,CAAAA,2BAAAA,QAAS0B,kBAAkB,MAAK,MAAM;QACxCrB,MACE,uBACA,GAAGH,MAAM,+EAA+E,CAAC;IAE7F,OAAO,IAAIF,CAAAA,2BAAAA,QAAS0B,kBAAkB,MAAK,OAAO;QAChDrB,MACE,uBACA,CAAC,sDAAsD,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAExF;IACA,IAAIG,CAAAA,2BAAAA,QAAS2B,cAAc,MAAK,MAAM;QACpCtB,MAAM,mBAAmB,GAAGH,MAAM,4DAA4D,CAAC;IACjG,OAAO,IAAIF,CAAAA,2BAAAA,QAAS2B,cAAc,MAAK,OAAO;QAC5CtB,MACE,mBACA,CAAC,mDAAmD,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAErF;IACA,IAAIG,CAAAA,2BAAAA,QAAS4B,eAAe,MAAK,aAAa;QAC5CvB,MAAM,mBAAmB,GAAGH,MAAM,4CAA4C,CAAC;IACjF,OAAO,IAAIF,CAAAA,2BAAAA,QAAS4B,eAAe,MAAK,gBAAgB5B,CAAAA,2BAAAA,QAAS4B,eAAe,MAAK,WAAW;QAC9FvB,MACE,mBACA,CAAC,0BAA0B,EAAEH,MAAM,8BAA8B,EAAEL,iBAAiB;IAExF;IACA,IAAIG,CAAAA,2BAAAA,QAAS6B,YAAY,MAAK,MAAM;QAClCxB,MAAM,kBAAkB,GAAGH,MAAM,+CAA+C,CAAC;IACnF,OAAO,IAAIF,CAAAA,2BAAAA,QAAS6B,YAAY,MAAK,OAAO;QAC1CxB,MACE,kBACA,CAAC,+CAA+C,EAAEH,MAAM,EAAE,EAAEL,iBAAiB;IAEjF;IACA,MAAMiC,SAAS5B,MAAMN,KAAK,CAACM,MAAMa,WAAW,CAAC,OAAO;IACpD,IAAIf,CAAAA,2BAAAA,QAAS+B,kBAAkB,MAAK,MAAM;QACxC1B,MACE,yBACA,GAAGH,MAAM,OAAO,EAAE4B,OAAO,mFAAmF,CAAC;IAEjH,OAAO,IAAI9B,CAAAA,2BAAAA,QAAS+B,kBAAkB,MAAK,OAAO;QAChD1B,MACE,yBACA,CAAC,+CAA+C,EAAEyB,OAAO,EAAE,EAAEjC,iBAAiB;IAElF;IAEA,4CAA4C;IAC5C,MAAMmC,UAAUhC,2BAAAA,QAASiC,gBAAgB;IACzC,IAAI,CAACC,MAAMC,OAAO,CAACH,UAAU;QAC3B3B,MACE,oBACA,CAAC,0BAA0B,EAAEH,MAAM,wCAAwC,EAAEL,iBAAiB;IAElG,OAAO,IAAI1C,yBAAyB6E,SAAS9B,QAAQ;QACnDG,MAAM,oBAAoB,GAAGH,MAAM,uCAAuC,CAAC;IAC7E;IAEA,8DAA8D;IAC9D,IAAI,CAACD,SAASmC,cAAc,IAAIjE,mBAAmBN,SAASkC,MAAMjC,cAAc,GAAG;QACjFuC,MAAM,YAAY;IACpB;IAEA,6BAA6B;IAC7B,MAAMgC,cAAcrC,2BAAAA,QAASsC,eAAe;IAC5C,IAAI,CAACJ,MAAMC,OAAO,CAACE,cAAc;QAC/BhC,MACE,oBACA,CAAC,kDAAkD,EAAER,iBAAiB;IAE1E,OAAO,IACLwC,YAAYpE,IAAI,CACd,CAACsE,aACCA,CAAAA,8BAAAA,WAAYC,EAAE,MAAKzC,MAAM0C,YAAY,IACrC/E,kCAAkCsD,QAAQ,CAACuB,8BAAAA,WAAYG,MAAM,IAEjE;QACArC,MACE,oBACA;IAEJ;IAEA,yDAAyD;IACzD,MAAMsC,eAAe1D,8BAA8Bc,MAAM4C,YAAY;IACrE,MAAM/B,sBAAsBT,OACxB/C,2BAA2BwF,MAAM,CAC/B,CAACjE,OAAS,CAACF,yBAAyBsB,MAAMrB,YAAY,EAAEC,SAE1D,EAAE;IACN,IAAIiC,oBAAoBlB,MAAM,EAAE;QAC9B,MAAMmD,UAAUjC,oBAAoBkC,GAAG,CAAC,CAACnE,OAAS,CAAC,KAAK,EAAES,mBAAmB,CAACT,KAAK,EAAE;QACrF0B,MACE,wBACA,CAAC,wCAAwC,EAAEb,YAAYqD,SAAS,CAAC,CAAC;IAEtE;IACA,IAAI1C,QAAQ,CAACwC,cAAc;QACzBtC,MACE,yBACA;IAEJ;IACA,IAAIsC,aAAajD,MAAM,GAAGrC,4BAA4B;QACpDgD,MACE,0BACA,CAAC,8CAA8C,EAAEhD,2BAA2B,YAAY,CAAC;IAE7F;IAEA,OAAO;QACLqD,SAASN,OAAOV,MAAM,KAAK;QAC3BQ;QACAC;QACAQ;QACAP;QACAQ;IACF;AACF"}

package/src/lib/enrollment/enroll-people.js

@@ -67,9 +67,12 @@ import { OUTREACH_ATTESTATION_KINDS } from "../model/outreach.types.js";
         const kind = source.startsWith('form:') ? 'form' : source === 'signup' ? 'member' : source;
         if (kind) sources[kind] = true;
     }
-    return {
+    return _extends({
         email: lead['email'],
-        name: lead['name'],
+        name: lead['name']
+    }, lead['emailState'] && typeof lead['emailState'] === 'object' ? {
+        emailState: lead['emailState']
+    } : {}, {
         facets: {
             [contactGroupId]: _extends({
                 sources
@@ -85,7 +88,7 @@ import { OUTREACH_ATTESTATION_KINDS } from "../model/outreach.types.js";
                 tags: lead['tags']
             } : {})
         }
-    };
+    });
 }
 /** `getAll` takes this many references at most per call. */ const GET_ALL_CHUNK = 300;
 async function getAllChunked(firestore, refs) {

package/src/lib/enrollment/enroll-people.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/enrollment/enroll-people.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * WHO CAN BE ENROLLED, AND WHAT THE REP STILL OWES (AGL-2980).\n *\n * The enroll dialog shows every person a view or a search named, each\n * marked eligible, blocked, or waiting on the rep; Confirm asks the same\n * question again, on the server, with what the rep supplied. Both answers\n * come from the engine's `evaluateOutreachGates` — this module only reads\n * the people and asks it the right questions.\n *\n * ## Three questions of one pure function\n *\n * The gates refuse a cold contact until the rep writes a personal line and\n * ticks the attestations, and refuse an address in an unknown country until\n * the rep confirms it is a US business address. So a preview asks:\n *\n *   1. as the person stands, with nothing confirmed — allowed means\n *      ELIGIBLE;\n *   2. as if the rep confirmed everything they can — refused means BLOCKED,\n *      for the reasons that remain, which no tick can clear;\n *   3. otherwise the person is WAITING ON THE REP, for what (1) found\n *      missing.\n *\n * The confirmation in (2) is hypothetical and never stored: Confirm stamps\n * only what the rep ticked, with their uid and the time, and asks again.\n *\n * ## One enrollment per person per sequence, ever\n *\n * The enrollment's id is the sequence and the contact\n * (`outreachEnrollmentId`), and it is written with `create()`. A person who\n * finished, replied or was stopped is not sent the same emails a second\n * time by being enrolled again, and two members confirming the same person\n * at once write one enrollment.\n *==========================================*/\n\nimport { normalizeContactEmail, contactDisplayName, readContactFacet } from '@aglyn/aglyn/app-utils/contacts'\nimport { crmLeadDisplayName, crmLeadStatus } from '@aglyn/aglyn/app-utils/crm'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport {\n  evaluateOutreachGates,\n  type OutreachGateBlock,\n  type OutreachGateLookups,\n} from '../engine/gates'\nimport { outreachAttestationsFrom } from '../engine/enrollment-state'\nimport {\n  OUTREACH_ATTESTATION_KINDS,\n  type OutreachAttestationKind,\n  type OutreachAttestations,\n  type OutreachSequenceSettings,\n} from '../model/outreach.types'\nimport type {\n  OutreachEnrollBlock,\n  OutreachEnrollPreviewPerson,\n  OutreachPersonRef,\n} from '../model/outreach-api'\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/**\n * One person as the preview and the enroll read them: a contact, or a lead\n * the sequence's site holds (AGL-3234).\n *\n * ## A lead is judged as the contact it would be\n *\n * The gates, the merge fields and the country rule all read a CONTACT\n * document — its facet's sources, stage, address, company and title. A lead\n * carries the same facts in its own shape, so rather than teach every gate\n * two records, a lead is handed to them as {@link leadAsContact}: a\n * contact-shaped view whose one facet, under the sequence's group, holds\n * what the lead holds. An imported lead has no inbound source and is cold;\n * one that wrote in through a form is not; a lead is never a customer; its\n * address decides its country; and `{{contact.firstName}}` or\n * `{{contact.company}}` in a step reads the lead's name and company text,\n * so a sequence written for contacts sends to leads unchanged — which is\n * also what lets an enrollment made on a lead keep sending after the lead\n * converts and the view becomes the real contact.\n */\nexport interface OutreachEnrollCandidate {\n  /** The record's own id: the contact's, or the lead's person key. */\n  personId: string\n  target: 'contact' | 'lead'\n  /** The contact's id; `''` for a lead. */\n  contactId: string\n  /** The lead's person key; `null` for a contact. */\n  leadId: string | null\n  /**\n   * The contact document (`orgs/{orgId}/contacts/{id}`), or for a lead the\n   * contact-shaped view of it — see the module note. `null` when the record\n   * no longer exists.\n   */\n  contact: Record<string, unknown> | null\n  /** The lead document as stored, for a lead; `null` for a contact. */\n  lead: Record<string, unknown> | null\n  /** Whether the sequence's site may see the record. A lead is the site's own. */\n  visible: boolean\n  /** The name the sequence's site knows them by; `''` for none. */\n  name: string\n  /** The primary address, normalized, or `null` when there is none. */\n  email: string | null\n  /** The company the contact is filed under at that site, when there is one. */\n  company: Record<string, unknown> | null\n  /** A lead already converted: the contact it became. Enroll that instead. */\n  convertedContactId: string | null\n  /** A lead whose address the workspace already holds as a contact. Enroll that instead. */\n  heldAsContactId: string | null\n}\n\n/**\n * A lead as the gates and the merge fields read a contact — see the\n * module note. The facet is the sequence's group's, which is the one every\n * reader asks for. The lead's `sources` — `form:{id}`, `booking`, `import`,\n * `manual`, `api`, `signup` — become the facet's source flags by kind, so\n * the inbound rule reads them as it reads a contact's.\n */\nexport function leadAsContact(\n  lead: Record<string, unknown>,\n  contactGroupId: string,\n): Record<string, unknown> {\n  const sources: Record<string, true> = {}\n  for (const raw of Array.isArray(lead['sources']) ? lead['sources'] : []) {\n    const source = String(raw)\n    const kind = source.startsWith('form:') ? 'form' : source === 'signup' ? 'member' : source\n    if (kind) sources[kind] = true\n  }\n  return {\n    email: lead['email'],\n    name: lead['name'],\n    facets: {\n      [contactGroupId]: {\n        sources,\n        ...(lead['address'] && typeof lead['address'] === 'object' ? { address: lead['address'] } : {}),\n        ...(typeof lead['company'] === 'string' ? { companyName: lead['company'] } : {}),\n        ...(typeof lead['jobTitle'] === 'string' ? { jobTitle: lead['jobTitle'] } : {}),\n        ...(typeof lead['phone'] === 'string' ? { phone: lead['phone'] } : {}),\n        ...(Array.isArray(lead['tags']) ? { tags: lead['tags'] } : {}),\n      },\n    },\n  }\n}\n\n/** `getAll` takes this many references at most per call. */\nconst GET_ALL_CHUNK = 300\n\nasync function getAllChunked(\n  firestore: Firestore,\n  refs: readonly FirebaseFirestore.DocumentReference[],\n): Promise<FirebaseFirestore.DocumentSnapshot[]> {\n  const snapshots: FirebaseFirestore.DocumentSnapshot[] = []\n  for (let start = 0; start < refs.length; start += GET_ALL_CHUNK) {\n    snapshots.push(...(await firestore.getAll(...refs.slice(start, start + GET_ALL_CHUNK))))\n  }\n  return snapshots\n}\n\n/**\n * The people, as the sequence's site knows them, and the company each\n * contact is filed under there — batched reads for everyone: the contacts\n * and the leads by id, the companies once, and for each lead one address\n * lookup, because a lead the workspace already holds as a contact is that\n * contact's to enroll.\n */\nexport async function readOutreachEnrollCandidates(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; contactGroupId: string; people: readonly OutreachPersonRef[] },\n): Promise<OutreachEnrollCandidate[]> {\n  if (!input.people.length) return []\n  const org = firestore.collection('orgs').doc(input.orgId)\n  const leads = firestore.collection('hosts').doc(input.hostId).collection('leads')\n  const snapshots = await getAllChunked(\n    firestore,\n    input.people.map((person) =>\n      person.kind === 'lead' ? leads.doc(person.id) : org.collection('contacts').doc(person.id),\n    ),\n  )\n  const read = await Promise.all(\n    input.people.map(async (person, index) => {\n      const data = snapshots[index]?.exists ? (snapshots[index].data() as Record<string, unknown>) : null\n      if (person.kind === 'lead') {\n        const email = data ? normalizeContactEmail(data['email']) : null\n        const held =\n          data && email ? await findContactByEmail(org.collection('contacts'), email) : null\n        return {\n          personId: person.id,\n          target: 'lead' as const,\n          contactId: '',\n          leadId: person.id,\n          contact: data ? leadAsContact(data, input.contactGroupId) : null,\n          lead: data,\n          // A lead is the site's own record: no scope to check.\n          visible: data !== null,\n          name: data ? crmLeadDisplayName(data) : '',\n          email,\n          companyId: '',\n          convertedContactId: data && typeof data['convertedContactId'] === 'string' ? data['convertedContactId'] : null,\n          heldAsContactId: held ? held.id : null,\n        }\n      }\n      return {\n        personId: person.id,\n        target: 'contact' as const,\n        contactId: person.id,\n        leadId: null,\n        contact: data,\n        lead: null,\n        visible: data ? visibleToHost(data['visibleTo'] as string[] | undefined, input.hostId) : false,\n        name: data ? contactDisplayName(data, input.contactGroupId).trim() : '',\n        email: data ? normalizeContactEmail(data['email']) : null,\n        companyId: data ? String(readContactFacet(data, input.contactGroupId).companyId ?? '') : '',\n        convertedContactId: null,\n        heldAsContactId: null,\n      }\n    }),\n  )\n  const companyIds = [...new Set(read.map((entry) => entry.companyId).filter(Boolean))]\n  const companies = new Map<string, Record<string, unknown>>()\n  if (companyIds.length) {\n    const found = await getAllChunked(\n      firestore,\n      companyIds.map((id) => org.collection('companies').doc(id)),\n    )\n    found.forEach((snapshot, index) => {\n      if (snapshot.exists) companies.set(companyIds[index], snapshot.data() as Record<string, unknown>)\n    })\n  }\n  return read.map(({ companyId, ...candidate }) => ({\n    ...candidate,\n    company: companyId ? (companies.get(companyId) ?? null) : null,\n  }))\n}\n\n/** The person as every answer names them. */\nfunction personOf(candidate: OutreachEnrollCandidate) {\n  return {\n    personId: candidate.personId,\n    target: candidate.target,\n    contactId: candidate.contactId,\n    leadId: candidate.leadId,\n  }\n}\n\n/** What stands in the way before the gates are asked anything. */\nexport function outreachCandidateBlocks(\n  candidate: OutreachEnrollCandidate,\n  facts: { siteName: string; alreadyInSequence: boolean },\n): OutreachEnrollBlock[] {\n  if (!candidate.contact) {\n    return candidate.target === 'lead'\n      ? [{ code: 'lead_missing', reason: \"This lead no longer exists in this sequence's site's CRM.\" }]\n      : [{ code: 'contact_missing', reason: 'This contact no longer exists in the CRM.' }]\n  }\n  const blocks: OutreachEnrollBlock[] = []\n  if (candidate.target === 'lead') {\n    // A lead that converted, or whose address the workspace already holds\n    // as a contact, is that contact's to enroll — one person, one record.\n    if (candidate.convertedContactId) {\n      blocks.push({\n        code: 'lead_converted',\n        reason: 'This lead was converted into a contact. Enroll the contact instead.',\n      })\n    } else if (candidate.heldAsContactId) {\n      blocks.push({\n        code: 'lead_is_contact',\n        reason: 'This address is already a contact in your CRM. Enroll the contact instead.',\n      })\n    }\n    if (crmLeadStatus(candidate.lead) === 'unqualified') {\n      blocks.push({\n        code: 'lead_unqualified',\n        reason: 'This lead was closed as unqualified. Reopen it before enrolling.',\n      })\n    }\n  }\n  if (!candidate.visible) {\n    blocks.push({\n      code: 'not_in_site',\n      reason: `This contact isn't in ${facts.siteName || \"this sequence's site\"}'s CRM.`,\n    })\n  }\n  if (!candidate.email) {\n    blocks.push({ code: 'no_email', reason: 'This contact has no email address.' })\n  }\n  if (facts.alreadyInSequence) {\n    blocks.push({\n      code: 'already_in_sequence',\n      reason: \"This person has already been in this sequence, so they won't be sent its emails again.\",\n    })\n  }\n  return blocks\n}\n\n/** Every attestation, stamped for a hypothetical question only — never stored. */\nconst EVERYTHING_CONFIRMED: OutreachAttestations = Object.fromEntries(\n  OUTREACH_ATTESTATION_KINDS.map((kind) => [kind, { uid: 'preview', atMs: 1 }]),\n)\n\nconst blocksOf = (blocks: readonly OutreachGateBlock[]): OutreachEnrollBlock[] =>\n  blocks.map(({ code, reason }) => ({ code, reason }))\n\nexport interface OutreachGateQuestion {\n  candidate: OutreachEnrollCandidate\n  lookups: OutreachGateLookups\n  /** The sequence's settings, its countries already capped by the organization's. */\n  settings: OutreachSequenceSettings\n  contactGroupId: string\n}\n\n/** Where one person stands before the rep confirms anything — see the module note. */\nexport function previewOutreachPerson(\n  question: OutreachGateQuestion,\n  facts: { siteName: string; alreadyInSequence: boolean },\n): OutreachEnrollPreviewPerson {\n  const { candidate } = question\n  const person = {\n    ...personOf(candidate),\n    name: candidate.name,\n    email: candidate.email,\n  }\n  const early = outreachCandidateBlocks(candidate, facts)\n  if (early.length) {\n    return {\n      ...person,\n      cold: false,\n      country: null,\n      status: 'blocked',\n      blocks: early,\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  const ask = (personalLine: string, attestations: OutreachAttestations) =>\n    evaluateOutreachGates({\n      email: candidate.email ?? '',\n      contact: candidate.contact,\n      contactGroupId: question.contactGroupId,\n      company: candidate.company,\n      settings: question.settings,\n      personalLine,\n      attestations,\n      lookups: question.lookups,\n    })\n  const asIs = ask('', {})\n  const known = { cold: asIs.cold, country: asIs.country.country }\n  if (asIs.allowed) {\n    return {\n      ...person,\n      ...known,\n      status: 'eligible',\n      blocks: [],\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  // The line is only checked for being present, so any sentence stands in.\n  const confirmed = ask('A personal line.', EVERYTHING_CONFIRMED)\n  if (!confirmed.allowed) {\n    return {\n      ...person,\n      ...known,\n      status: 'blocked',\n      blocks: blocksOf(confirmed.blocks),\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  const attestations: OutreachAttestationKind[] = asIs.cold\n    ? [...asIs.missingAttestations]\n    : asIs.blocks.some((block) => block.code === 'country_unknown')\n      ? ['us_business_address']\n      : []\n  return {\n    ...person,\n    ...known,\n    status: 'needs_confirmation',\n    blocks: [],\n    requires: {\n      personalLine: asIs.blocks.some((block) => block.code === 'personal_line_missing'),\n      attestations,\n    },\n  }\n}\n\nexport interface OutreachEnrollDecision {\n  allowed: boolean\n  blocks: OutreachEnrollBlock[]\n  cold: boolean\n  /** The address as the gates normalized it. */\n  email: string | null\n  /** What the rep confirmed, stamped with who and when. */\n  attestations: OutreachAttestations\n}\n\n/** Confirm's answer for one person, with what the rep supplied — see the module note. */\nexport function decideOutreachEnrollment(\n  question: OutreachGateQuestion,\n  facts: { siteName: string; alreadyInSequence: boolean },\n  supplied: {\n    personalLine: string\n    attestations: readonly unknown[]\n    uid: string\n    nowMs: number\n  },\n): OutreachEnrollDecision {\n  const attestations = outreachAttestationsFrom(supplied.attestations, supplied.uid, supplied.nowMs)\n  const early = outreachCandidateBlocks(question.candidate, facts)\n  if (early.length) {\n    return { allowed: false, blocks: early, cold: false, email: question.candidate.email, attestations }\n  }\n  const result = evaluateOutreachGates({\n    email: question.candidate.email ?? '',\n    contact: question.candidate.contact,\n    contactGroupId: question.contactGroupId,\n    company: question.candidate.company,\n    settings: question.settings,\n    personalLine: supplied.personalLine,\n    attestations,\n    lookups: question.lookups,\n  })\n  return {\n    allowed: result.allowed,\n    blocks: blocksOf(result.blocks),\n    cold: result.cold,\n    email: result.email,\n    attestations,\n  }\n}\n"],"names":["normalizeContactEmail","contactDisplayName","readContactFacet","crmLeadDisplayName","crmLeadStatus","visibleToHost","findContactByEmail","evaluateOutreachGates","outreachAttestationsFrom","OUTREACH_ATTESTATION_KINDS","leadAsContact","lead","contactGroupId","sources","raw","Array","isArray","source","String","kind","startsWith","email","name","facets","address","companyName","jobTitle","phone","tags","GET_ALL_CHUNK","getAllChunked","firestore","refs","snapshots","start","length","push","getAll","slice","readOutreachEnrollCandidates","input","people","org","collection","doc","orgId","leads","hostId","map","person","id","read","Promise","all","index","data","exists","held","personId","target","contactId","leadId","contact","visible","companyId","convertedContactId","heldAsContactId","trim","companyIds","Set","entry","filter","Boolean","companies","Map","found","forEach","snapshot","set","candidate","company","get","personOf","outreachCandidateBlocks","facts","code","reason","blocks","siteName","alreadyInSequence","EVERYTHING_CONFIRMED","Object","fromEntries","uid","atMs","blocksOf","previewOutreachPerson","question","early","cold","country","status","requires","personalLine","attestations","ask","settings","lookups","asIs","known","allowed","confirmed","missingAttestations","some","block","decideOutreachEnrollment","supplied","nowMs","result"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAgC4C,GAE5C,SAASA,qBAAqB,EAAEC,kBAAkB,EAAEC,gBAAgB,QAAQ,kCAAiC;AAC7G,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,6BAA4B;AAC9E,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SACEC,qBAAqB,QAGhB,qBAAiB;AACxB,SAASC,wBAAwB,QAAQ,gCAA4B;AACrE,SACEC,0BAA0B,QAIrB,6BAAyB;AA0DhC;;;;;;CAMC,GACD,OAAO,SAASC,cACdC,IAA6B,EAC7BC,cAAsB;IAEtB,MAAMC,UAAgC,CAAC;IACvC,KAAK,MAAMC,OAAOC,MAAMC,OAAO,CAACL,IAAI,CAAC,UAAU,IAAIA,IAAI,CAAC,UAAU,GAAG,EAAE,CAAE;QACvE,MAAMM,SAASC,OAAOJ;QACtB,MAAMK,OAAOF,OAAOG,UAAU,CAAC,WAAW,SAASH,WAAW,WAAW,WAAWA;QACpF,IAAIE,MAAMN,OAAO,CAACM,KAAK,GAAG;IAC5B;IACA,OAAO;QACLE,OAAOV,IAAI,CAAC,QAAQ;QACpBW,MAAMX,IAAI,CAAC,OAAO;QAClBY,QAAQ;YACN,CAACX,eAAe,EAAE;gBAChBC;eACIF,IAAI,CAAC,UAAU,IAAI,OAAOA,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAEa,SAASb,IAAI,CAAC,UAAU;YAAC,IAAI,CAAC,GACzF,OAAOA,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAEc,aAAad,IAAI,CAAC,UAAU;YAAC,IAAI,CAAC,GAC1E,OAAOA,IAAI,CAAC,WAAW,KAAK,WAAW;gBAAEe,UAAUf,IAAI,CAAC,WAAW;YAAC,IAAI,CAAC,GACzE,OAAOA,IAAI,CAAC,QAAQ,KAAK,WAAW;gBAAEgB,OAAOhB,IAAI,CAAC,QAAQ;YAAC,IAAI,CAAC,GAChEI,MAAMC,OAAO,CAACL,IAAI,CAAC,OAAO,IAAI;gBAAEiB,MAAMjB,IAAI,CAAC,OAAO;YAAC,IAAI,CAAC;QAEhE;IACF;AACF;AAEA,0DAA0D,GAC1D,MAAMkB,gBAAgB;AAEtB,eAAeC,cACbC,SAAoB,EACpBC,IAAoD;IAEpD,MAAMC,YAAkD,EAAE;IAC1D,IAAK,IAAIC,QAAQ,GAAGA,QAAQF,KAAKG,MAAM,EAAED,SAASL,cAAe;QAC/DI,UAAUG,IAAI,IAAK,MAAML,UAAUM,MAAM,IAAIL,KAAKM,KAAK,CAACJ,OAAOA,QAAQL;IACzE;IACA,OAAOI;AACT;AAEA;;;;;;CAMC,GACD,OAAO,eAAeM,6BACpBR,SAAoB,EACpBS,KAAsG;IAEtG,IAAI,CAACA,MAAMC,MAAM,CAACN,MAAM,EAAE,OAAO,EAAE;IACnC,MAAMO,MAAMX,UAAUY,UAAU,CAAC,QAAQC,GAAG,CAACJ,MAAMK,KAAK;IACxD,MAAMC,QAAQf,UAAUY,UAAU,CAAC,SAASC,GAAG,CAACJ,MAAMO,MAAM,EAAEJ,UAAU,CAAC;IACzE,MAAMV,YAAY,MAAMH,cACtBC,WACAS,MAAMC,MAAM,CAACO,GAAG,CAAC,CAACC,SAChBA,OAAO9B,IAAI,KAAK,SAAS2B,MAAMF,GAAG,CAACK,OAAOC,EAAE,IAAIR,IAAIC,UAAU,CAAC,YAAYC,GAAG,CAACK,OAAOC,EAAE;IAG5F,MAAMC,OAAO,MAAMC,QAAQC,GAAG,CAC5Bb,MAAMC,MAAM,CAACO,GAAG,CAAC,OAAOC,QAAQK;YAgCHpD;YA/Bd+B;QAAb,MAAMsB,OAAOtB,EAAAA,mBAAAA,SAAS,CAACqB,MAAM,qBAAhBrB,iBAAkBuB,MAAM,IAAIvB,SAAS,CAACqB,MAAM,CAACC,IAAI,KAAiC;QAC/F,IAAIN,OAAO9B,IAAI,KAAK,QAAQ;YAC1B,MAAME,QAAQkC,OAAOvD,sBAAsBuD,IAAI,CAAC,QAAQ,IAAI;YAC5D,MAAME,OACJF,QAAQlC,QAAQ,MAAMf,mBAAmBoC,IAAIC,UAAU,CAAC,aAAatB,SAAS;YAChF,OAAO;gBACLqC,UAAUT,OAAOC,EAAE;gBACnBS,QAAQ;gBACRC,WAAW;gBACXC,QAAQZ,OAAOC,EAAE;gBACjBY,SAASP,OAAO7C,cAAc6C,MAAMf,MAAM5B,cAAc,IAAI;gBAC5DD,MAAM4C;gBACN,sDAAsD;gBACtDQ,SAASR,SAAS;gBAClBjC,MAAMiC,OAAOpD,mBAAmBoD,QAAQ;gBACxClC;gBACA2C,WAAW;gBACXC,oBAAoBV,QAAQ,OAAOA,IAAI,CAAC,qBAAqB,KAAK,WAAWA,IAAI,CAAC,qBAAqB,GAAG;gBAC1GW,iBAAiBT,OAAOA,KAAKP,EAAE,GAAG;YACpC;QACF;QACA,OAAO;YACLQ,UAAUT,OAAOC,EAAE;YACnBS,QAAQ;YACRC,WAAWX,OAAOC,EAAE;YACpBW,QAAQ;YACRC,SAASP;YACT5C,MAAM;YACNoD,SAASR,OAAOlD,cAAckD,IAAI,CAAC,YAAY,EAA0Bf,MAAMO,MAAM,IAAI;YACzFzB,MAAMiC,OAAOtD,mBAAmBsD,MAAMf,MAAM5B,cAAc,EAAEuD,IAAI,KAAK;YACrE9C,OAAOkC,OAAOvD,sBAAsBuD,IAAI,CAAC,QAAQ,IAAI;YACrDS,WAAWT,OAAOrC,QAAOhB,8BAAAA,iBAAiBqD,MAAMf,MAAM5B,cAAc,EAAEoD,SAAS,YAAtD9D,8BAA0D,MAAM;YACzF+D,oBAAoB;YACpBC,iBAAiB;QACnB;IACF;IAEF,MAAME,aAAa;WAAI,IAAIC,IAAIlB,KAAKH,GAAG,CAAC,CAACsB,QAAUA,MAAMN,SAAS,EAAEO,MAAM,CAACC;KAAU;IACrF,MAAMC,YAAY,IAAIC;IACtB,IAAIN,WAAWjC,MAAM,EAAE;QACrB,MAAMwC,QAAQ,MAAM7C,cAClBC,WACAqC,WAAWpB,GAAG,CAAC,CAACE,KAAOR,IAAIC,UAAU,CAAC,aAAaC,GAAG,CAACM;QAEzDyB,MAAMC,OAAO,CAAC,CAACC,UAAUvB;YACvB,IAAIuB,SAASrB,MAAM,EAAEiB,UAAUK,GAAG,CAACV,UAAU,CAACd,MAAM,EAAEuB,SAAStB,IAAI;QACrE;IACF;IACA,OAAOJ,KAAKH,GAAG,CAAC;YAAC,EAAEgB,SAAS,EAAgB,OAAXe;;;YAETN;eAF0B,aAC7CM;YACHC,SAAShB,aAAaS,iBAAAA,UAAUQ,GAAG,CAACjB,sBAAdS,iBAA4B,OAAQ;;;AAE9D;AAEA,2CAA2C,GAC3C,SAASS,SAASH,SAAkC;IAClD,OAAO;QACLrB,UAAUqB,UAAUrB,QAAQ;QAC5BC,QAAQoB,UAAUpB,MAAM;QACxBC,WAAWmB,UAAUnB,SAAS;QAC9BC,QAAQkB,UAAUlB,MAAM;IAC1B;AACF;AAEA,gEAAgE,GAChE,OAAO,SAASsB,wBACdJ,SAAkC,EAClCK,KAAuD;IAEvD,IAAI,CAACL,UAAUjB,OAAO,EAAE;QACtB,OAAOiB,UAAUpB,MAAM,KAAK,SACxB;YAAC;gBAAE0B,MAAM;gBAAgBC,QAAQ;YAA4D;SAAE,GAC/F;YAAC;gBAAED,MAAM;gBAAmBC,QAAQ;YAA4C;SAAE;IACxF;IACA,MAAMC,SAAgC,EAAE;IACxC,IAAIR,UAAUpB,MAAM,KAAK,QAAQ;QAC/B,sEAAsE;QACtE,sEAAsE;QACtE,IAAIoB,UAAUd,kBAAkB,EAAE;YAChCsB,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF,OAAO,IAAIP,UAAUb,eAAe,EAAE;YACpCqB,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF;QACA,IAAIlF,cAAc2E,UAAUpE,IAAI,MAAM,eAAe;YACnD4E,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF;IACF;IACA,IAAI,CAACP,UAAUhB,OAAO,EAAE;QACtBwB,OAAOnD,IAAI,CAAC;YACViD,MAAM;YACNC,QAAQ,CAAC,sBAAsB,EAAEF,MAAMI,QAAQ,IAAI,uBAAuB,OAAO,CAAC;QACpF;IACF;IACA,IAAI,CAACT,UAAU1D,KAAK,EAAE;QACpBkE,OAAOnD,IAAI,CAAC;YAAEiD,MAAM;YAAYC,QAAQ;QAAqC;IAC/E;IACA,IAAIF,MAAMK,iBAAiB,EAAE;QAC3BF,OAAOnD,IAAI,CAAC;YACViD,MAAM;YACNC,QAAQ;QACV;IACF;IACA,OAAOC;AACT;AAEA,gFAAgF,GAChF,MAAMG,uBAA6CC,OAAOC,WAAW,CACnEnF,2BAA2BuC,GAAG,CAAC,CAAC7B,OAAS;QAACA;QAAM;YAAE0E,KAAK;YAAWC,MAAM;QAAE;KAAE;AAG9E,MAAMC,WAAW,CAACR,SAChBA,OAAOvC,GAAG,CAAC,CAAC,EAAEqC,IAAI,EAAEC,MAAM,EAAE,GAAM,CAAA;YAAED;YAAMC;QAAO,CAAA;AAUnD,oFAAoF,GACpF,OAAO,SAASU,sBACdC,QAA8B,EAC9Bb,KAAuD;IAEvD,MAAM,EAAEL,SAAS,EAAE,GAAGkB;IACtB,MAAMhD,SAAS,aACViC,SAASH;QACZzD,MAAMyD,UAAUzD,IAAI;QACpBD,OAAO0D,UAAU1D,KAAK;;IAExB,MAAM6E,QAAQf,wBAAwBJ,WAAWK;IACjD,IAAIc,MAAM/D,MAAM,EAAE;QAChB,OAAO,aACFc;YACHkD,MAAM;YACNC,SAAS;YACTC,QAAQ;YACRd,QAAQW;YACRI,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,MAAMC,MAAM,CAACF,cAAsBC;YAExBzB;eADTxE,sBAAsB;YACpBc,KAAK,GAAE0D,mBAAAA,UAAU1D,KAAK,YAAf0D,mBAAmB;YAC1BjB,SAASiB,UAAUjB,OAAO;YAC1BlD,gBAAgBqF,SAASrF,cAAc;YACvCoE,SAASD,UAAUC,OAAO;YAC1B0B,UAAUT,SAASS,QAAQ;YAC3BH;YACAC;YACAG,SAASV,SAASU,OAAO;QAC3B;;IACF,MAAMC,OAAOH,IAAI,IAAI,CAAC;IACtB,MAAMI,QAAQ;QAAEV,MAAMS,KAAKT,IAAI;QAAEC,SAASQ,KAAKR,OAAO,CAACA,OAAO;IAAC;IAC/D,IAAIQ,KAAKE,OAAO,EAAE;QAChB,OAAO,aACF7D,QACA4D;YACHR,QAAQ;YACRd,QAAQ,EAAE;YACVe,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,yEAAyE;IACzE,MAAMO,YAAYN,IAAI,oBAAoBf;IAC1C,IAAI,CAACqB,UAAUD,OAAO,EAAE;QACtB,OAAO,aACF7D,QACA4D;YACHR,QAAQ;YACRd,QAAQQ,SAASgB,UAAUxB,MAAM;YACjCe,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,MAAMA,eAA0CI,KAAKT,IAAI,GACrD;WAAIS,KAAKI,mBAAmB;KAAC,GAC7BJ,KAAKrB,MAAM,CAAC0B,IAAI,CAAC,CAACC,QAAUA,MAAM7B,IAAI,KAAK,qBACzC;QAAC;KAAsB,GACvB,EAAE;IACR,OAAO,aACFpC,QACA4D;QACHR,QAAQ;QACRd,QAAQ,EAAE;QACVe,UAAU;YACRC,cAAcK,KAAKrB,MAAM,CAAC0B,IAAI,CAAC,CAACC,QAAUA,MAAM7B,IAAI,KAAK;YACzDmB;QACF;;AAEJ;AAYA,uFAAuF,GACvF,OAAO,SAASW,yBACdlB,QAA8B,EAC9Bb,KAAuD,EACvDgC,QAKC;QAQQnB;IANT,MAAMO,eAAehG,yBAAyB4G,SAASZ,YAAY,EAAEY,SAASvB,GAAG,EAAEuB,SAASC,KAAK;IACjG,MAAMnB,QAAQf,wBAAwBc,SAASlB,SAAS,EAAEK;IAC1D,IAAIc,MAAM/D,MAAM,EAAE;QAChB,OAAO;YAAE2E,SAAS;YAAOvB,QAAQW;YAAOC,MAAM;YAAO9E,OAAO4E,SAASlB,SAAS,CAAC1D,KAAK;YAAEmF;QAAa;IACrG;IACA,MAAMc,SAAS/G,sBAAsB;QACnCc,KAAK,GAAE4E,4BAAAA,SAASlB,SAAS,CAAC1D,KAAK,YAAxB4E,4BAA4B;QACnCnC,SAASmC,SAASlB,SAAS,CAACjB,OAAO;QACnClD,gBAAgBqF,SAASrF,cAAc;QACvCoE,SAASiB,SAASlB,SAAS,CAACC,OAAO;QACnC0B,UAAUT,SAASS,QAAQ;QAC3BH,cAAca,SAASb,YAAY;QACnCC;QACAG,SAASV,SAASU,OAAO;IAC3B;IACA,OAAO;QACLG,SAASQ,OAAOR,OAAO;QACvBvB,QAAQQ,SAASuB,OAAO/B,MAAM;QAC9BY,MAAMmB,OAAOnB,IAAI;QACjB9E,OAAOiG,OAAOjG,KAAK;QACnBmF;IACF;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/enrollment/enroll-people.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * WHO CAN BE ENROLLED, AND WHAT THE REP STILL OWES (AGL-2980).\n *\n * The enroll dialog shows every person a view or a search named, each\n * marked eligible, blocked, or waiting on the rep; Confirm asks the same\n * question again, on the server, with what the rep supplied. Both answers\n * come from the engine's `evaluateOutreachGates` — this module only reads\n * the people and asks it the right questions.\n *\n * ## Three questions of one pure function\n *\n * The gates refuse a cold contact until the rep writes a personal line and\n * ticks the attestations, and refuse an address in an unknown country until\n * the rep confirms it is a US business address. So a preview asks:\n *\n *   1. as the person stands, with nothing confirmed — allowed means\n *      ELIGIBLE;\n *   2. as if the rep confirmed everything they can — refused means BLOCKED,\n *      for the reasons that remain, which no tick can clear;\n *   3. otherwise the person is WAITING ON THE REP, for what (1) found\n *      missing.\n *\n * The confirmation in (2) is hypothetical and never stored: Confirm stamps\n * only what the rep ticked, with their uid and the time, and asks again.\n *\n * ## One enrollment per person per sequence, ever\n *\n * The enrollment's id is the sequence and the contact\n * (`outreachEnrollmentId`), and it is written with `create()`. A person who\n * finished, replied or was stopped is not sent the same emails a second\n * time by being enrolled again, and two members confirming the same person\n * at once write one enrollment.\n *==========================================*/\n\nimport { normalizeContactEmail, contactDisplayName, readContactFacet } from '@aglyn/aglyn/app-utils/contacts'\nimport { crmLeadDisplayName, crmLeadStatus } from '@aglyn/aglyn/app-utils/crm'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport {\n  evaluateOutreachGates,\n  type OutreachGateBlock,\n  type OutreachGateLookups,\n} from '../engine/gates'\nimport { outreachAttestationsFrom } from '../engine/enrollment-state'\nimport {\n  OUTREACH_ATTESTATION_KINDS,\n  type OutreachAttestationKind,\n  type OutreachAttestations,\n  type OutreachSequenceSettings,\n} from '../model/outreach.types'\nimport type {\n  OutreachEnrollBlock,\n  OutreachEnrollPreviewPerson,\n  OutreachPersonRef,\n} from '../model/outreach-api'\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/**\n * One person as the preview and the enroll read them: a contact, or a lead\n * the sequence's site holds (AGL-3234).\n *\n * ## A lead is judged as the contact it would be\n *\n * The gates, the merge fields and the country rule all read a CONTACT\n * document — its facet's sources, stage, address, company and title. A lead\n * carries the same facts in its own shape, so rather than teach every gate\n * two records, a lead is handed to them as {@link leadAsContact}: a\n * contact-shaped view whose one facet, under the sequence's group, holds\n * what the lead holds. An imported lead has no inbound source and is cold;\n * one that wrote in through a form is not; a lead is never a customer; its\n * address decides its country; and `{{contact.firstName}}` or\n * `{{contact.company}}` in a step reads the lead's name and company text,\n * so a sequence written for contacts sends to leads unchanged — which is\n * also what lets an enrollment made on a lead keep sending after the lead\n * converts and the view becomes the real contact.\n */\nexport interface OutreachEnrollCandidate {\n  /** The record's own id: the contact's, or the lead's person key. */\n  personId: string\n  target: 'contact' | 'lead'\n  /** The contact's id; `''` for a lead. */\n  contactId: string\n  /** The lead's person key; `null` for a contact. */\n  leadId: string | null\n  /**\n   * The contact document (`orgs/{orgId}/contacts/{id}`), or for a lead the\n   * contact-shaped view of it — see the module note. `null` when the record\n   * no longer exists.\n   */\n  contact: Record<string, unknown> | null\n  /** The lead document as stored, for a lead; `null` for a contact. */\n  lead: Record<string, unknown> | null\n  /** Whether the sequence's site may see the record. A lead is the site's own. */\n  visible: boolean\n  /** The name the sequence's site knows them by; `''` for none. */\n  name: string\n  /** The primary address, normalized, or `null` when there is none. */\n  email: string | null\n  /** The company the contact is filed under at that site, when there is one. */\n  company: Record<string, unknown> | null\n  /** A lead already converted: the contact it became. Enroll that instead. */\n  convertedContactId: string | null\n  /** A lead whose address the workspace already holds as a contact. Enroll that instead. */\n  heldAsContactId: string | null\n}\n\n/**\n * A lead as the gates and the merge fields read a contact — see the\n * module note. The facet is the sequence's group's, which is the one every\n * reader asks for. The lead's `sources` — `form:{id}`, `booking`, `import`,\n * `manual`, `api`, `signup` — become the facet's source flags by kind, so\n * the inbound rule reads them as it reads a contact's.\n */\nexport function leadAsContact(\n  lead: Record<string, unknown>,\n  contactGroupId: string,\n): Record<string, unknown> {\n  const sources: Record<string, true> = {}\n  for (const raw of Array.isArray(lead['sources']) ? lead['sources'] : []) {\n    const source = String(raw)\n    const kind = source.startsWith('form:') ? 'form' : source === 'signup' ? 'member' : source\n    if (kind) sources[kind] = true\n  }\n  return {\n    email: lead['email'],\n    name: lead['name'],\n    // The verdict on the address (AGL-3245) is the lead's own top-level\n    // field, as it is the contact's, so the gates quote it either way.\n    ...(lead['emailState'] && typeof lead['emailState'] === 'object' ? { emailState: lead['emailState'] } : {}),\n    facets: {\n      [contactGroupId]: {\n        sources,\n        ...(lead['address'] && typeof lead['address'] === 'object' ? { address: lead['address'] } : {}),\n        ...(typeof lead['company'] === 'string' ? { companyName: lead['company'] } : {}),\n        ...(typeof lead['jobTitle'] === 'string' ? { jobTitle: lead['jobTitle'] } : {}),\n        ...(typeof lead['phone'] === 'string' ? { phone: lead['phone'] } : {}),\n        ...(Array.isArray(lead['tags']) ? { tags: lead['tags'] } : {}),\n      },\n    },\n  }\n}\n\n/** `getAll` takes this many references at most per call. */\nconst GET_ALL_CHUNK = 300\n\nasync function getAllChunked(\n  firestore: Firestore,\n  refs: readonly FirebaseFirestore.DocumentReference[],\n): Promise<FirebaseFirestore.DocumentSnapshot[]> {\n  const snapshots: FirebaseFirestore.DocumentSnapshot[] = []\n  for (let start = 0; start < refs.length; start += GET_ALL_CHUNK) {\n    snapshots.push(...(await firestore.getAll(...refs.slice(start, start + GET_ALL_CHUNK))))\n  }\n  return snapshots\n}\n\n/**\n * The people, as the sequence's site knows them, and the company each\n * contact is filed under there — batched reads for everyone: the contacts\n * and the leads by id, the companies once, and for each lead one address\n * lookup, because a lead the workspace already holds as a contact is that\n * contact's to enroll.\n */\nexport async function readOutreachEnrollCandidates(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; contactGroupId: string; people: readonly OutreachPersonRef[] },\n): Promise<OutreachEnrollCandidate[]> {\n  if (!input.people.length) return []\n  const org = firestore.collection('orgs').doc(input.orgId)\n  const leads = firestore.collection('hosts').doc(input.hostId).collection('leads')\n  const snapshots = await getAllChunked(\n    firestore,\n    input.people.map((person) =>\n      person.kind === 'lead' ? leads.doc(person.id) : org.collection('contacts').doc(person.id),\n    ),\n  )\n  const read = await Promise.all(\n    input.people.map(async (person, index) => {\n      const data = snapshots[index]?.exists ? (snapshots[index].data() as Record<string, unknown>) : null\n      if (person.kind === 'lead') {\n        const email = data ? normalizeContactEmail(data['email']) : null\n        const held =\n          data && email ? await findContactByEmail(org.collection('contacts'), email) : null\n        return {\n          personId: person.id,\n          target: 'lead' as const,\n          contactId: '',\n          leadId: person.id,\n          contact: data ? leadAsContact(data, input.contactGroupId) : null,\n          lead: data,\n          // A lead is the site's own record: no scope to check.\n          visible: data !== null,\n          name: data ? crmLeadDisplayName(data) : '',\n          email,\n          companyId: '',\n          convertedContactId: data && typeof data['convertedContactId'] === 'string' ? data['convertedContactId'] : null,\n          heldAsContactId: held ? held.id : null,\n        }\n      }\n      return {\n        personId: person.id,\n        target: 'contact' as const,\n        contactId: person.id,\n        leadId: null,\n        contact: data,\n        lead: null,\n        visible: data ? visibleToHost(data['visibleTo'] as string[] | undefined, input.hostId) : false,\n        name: data ? contactDisplayName(data, input.contactGroupId).trim() : '',\n        email: data ? normalizeContactEmail(data['email']) : null,\n        companyId: data ? String(readContactFacet(data, input.contactGroupId).companyId ?? '') : '',\n        convertedContactId: null,\n        heldAsContactId: null,\n      }\n    }),\n  )\n  const companyIds = [...new Set(read.map((entry) => entry.companyId).filter(Boolean))]\n  const companies = new Map<string, Record<string, unknown>>()\n  if (companyIds.length) {\n    const found = await getAllChunked(\n      firestore,\n      companyIds.map((id) => org.collection('companies').doc(id)),\n    )\n    found.forEach((snapshot, index) => {\n      if (snapshot.exists) companies.set(companyIds[index], snapshot.data() as Record<string, unknown>)\n    })\n  }\n  return read.map(({ companyId, ...candidate }) => ({\n    ...candidate,\n    company: companyId ? (companies.get(companyId) ?? null) : null,\n  }))\n}\n\n/** The person as every answer names them. */\nfunction personOf(candidate: OutreachEnrollCandidate) {\n  return {\n    personId: candidate.personId,\n    target: candidate.target,\n    contactId: candidate.contactId,\n    leadId: candidate.leadId,\n  }\n}\n\n/** What stands in the way before the gates are asked anything. */\nexport function outreachCandidateBlocks(\n  candidate: OutreachEnrollCandidate,\n  facts: { siteName: string; alreadyInSequence: boolean },\n): OutreachEnrollBlock[] {\n  if (!candidate.contact) {\n    return candidate.target === 'lead'\n      ? [{ code: 'lead_missing', reason: \"This lead no longer exists in this sequence's site's CRM.\" }]\n      : [{ code: 'contact_missing', reason: 'This contact no longer exists in the CRM.' }]\n  }\n  const blocks: OutreachEnrollBlock[] = []\n  if (candidate.target === 'lead') {\n    // A lead that converted, or whose address the workspace already holds\n    // as a contact, is that contact's to enroll — one person, one record.\n    if (candidate.convertedContactId) {\n      blocks.push({\n        code: 'lead_converted',\n        reason: 'This lead was converted into a contact. Enroll the contact instead.',\n      })\n    } else if (candidate.heldAsContactId) {\n      blocks.push({\n        code: 'lead_is_contact',\n        reason: 'This address is already a contact in your CRM. Enroll the contact instead.',\n      })\n    }\n    if (crmLeadStatus(candidate.lead) === 'unqualified') {\n      blocks.push({\n        code: 'lead_unqualified',\n        reason: 'This lead was closed as unqualified. Reopen it before enrolling.',\n      })\n    }\n  }\n  if (!candidate.visible) {\n    blocks.push({\n      code: 'not_in_site',\n      reason: `This contact isn't in ${facts.siteName || \"this sequence's site\"}'s CRM.`,\n    })\n  }\n  if (!candidate.email) {\n    blocks.push({ code: 'no_email', reason: 'This contact has no email address.' })\n  }\n  if (facts.alreadyInSequence) {\n    blocks.push({\n      code: 'already_in_sequence',\n      reason: \"This person has already been in this sequence, so they won't be sent its emails again.\",\n    })\n  }\n  return blocks\n}\n\n/** Every attestation, stamped for a hypothetical question only — never stored. */\nconst EVERYTHING_CONFIRMED: OutreachAttestations = Object.fromEntries(\n  OUTREACH_ATTESTATION_KINDS.map((kind) => [kind, { uid: 'preview', atMs: 1 }]),\n)\n\nconst blocksOf = (blocks: readonly OutreachGateBlock[]): OutreachEnrollBlock[] =>\n  blocks.map(({ code, reason }) => ({ code, reason }))\n\nexport interface OutreachGateQuestion {\n  candidate: OutreachEnrollCandidate\n  lookups: OutreachGateLookups\n  /** The sequence's settings, its countries already capped by the organization's. */\n  settings: OutreachSequenceSettings\n  contactGroupId: string\n}\n\n/** Where one person stands before the rep confirms anything — see the module note. */\nexport function previewOutreachPerson(\n  question: OutreachGateQuestion,\n  facts: { siteName: string; alreadyInSequence: boolean },\n): OutreachEnrollPreviewPerson {\n  const { candidate } = question\n  const person = {\n    ...personOf(candidate),\n    name: candidate.name,\n    email: candidate.email,\n  }\n  const early = outreachCandidateBlocks(candidate, facts)\n  if (early.length) {\n    return {\n      ...person,\n      cold: false,\n      country: null,\n      status: 'blocked',\n      blocks: early,\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  const ask = (personalLine: string, attestations: OutreachAttestations) =>\n    evaluateOutreachGates({\n      email: candidate.email ?? '',\n      contact: candidate.contact,\n      contactGroupId: question.contactGroupId,\n      company: candidate.company,\n      settings: question.settings,\n      personalLine,\n      attestations,\n      lookups: question.lookups,\n    })\n  const asIs = ask('', {})\n  const known = { cold: asIs.cold, country: asIs.country.country }\n  if (asIs.allowed) {\n    return {\n      ...person,\n      ...known,\n      status: 'eligible',\n      blocks: [],\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  // The line is only checked for being present, so any sentence stands in.\n  const confirmed = ask('A personal line.', EVERYTHING_CONFIRMED)\n  if (!confirmed.allowed) {\n    return {\n      ...person,\n      ...known,\n      status: 'blocked',\n      blocks: blocksOf(confirmed.blocks),\n      requires: { personalLine: false, attestations: [] },\n    }\n  }\n  const attestations: OutreachAttestationKind[] = asIs.cold\n    ? [...asIs.missingAttestations]\n    : asIs.blocks.some((block) => block.code === 'country_unknown')\n      ? ['us_business_address']\n      : []\n  return {\n    ...person,\n    ...known,\n    status: 'needs_confirmation',\n    blocks: [],\n    requires: {\n      personalLine: asIs.blocks.some((block) => block.code === 'personal_line_missing'),\n      attestations,\n    },\n  }\n}\n\nexport interface OutreachEnrollDecision {\n  allowed: boolean\n  blocks: OutreachEnrollBlock[]\n  cold: boolean\n  /** The address as the gates normalized it. */\n  email: string | null\n  /** What the rep confirmed, stamped with who and when. */\n  attestations: OutreachAttestations\n}\n\n/** Confirm's answer for one person, with what the rep supplied — see the module note. */\nexport function decideOutreachEnrollment(\n  question: OutreachGateQuestion,\n  facts: { siteName: string; alreadyInSequence: boolean },\n  supplied: {\n    personalLine: string\n    attestations: readonly unknown[]\n    uid: string\n    nowMs: number\n  },\n): OutreachEnrollDecision {\n  const attestations = outreachAttestationsFrom(supplied.attestations, supplied.uid, supplied.nowMs)\n  const early = outreachCandidateBlocks(question.candidate, facts)\n  if (early.length) {\n    return { allowed: false, blocks: early, cold: false, email: question.candidate.email, attestations }\n  }\n  const result = evaluateOutreachGates({\n    email: question.candidate.email ?? '',\n    contact: question.candidate.contact,\n    contactGroupId: question.contactGroupId,\n    company: question.candidate.company,\n    settings: question.settings,\n    personalLine: supplied.personalLine,\n    attestations,\n    lookups: question.lookups,\n  })\n  return {\n    allowed: result.allowed,\n    blocks: blocksOf(result.blocks),\n    cold: result.cold,\n    email: result.email,\n    attestations,\n  }\n}\n"],"names":["normalizeContactEmail","contactDisplayName","readContactFacet","crmLeadDisplayName","crmLeadStatus","visibleToHost","findContactByEmail","evaluateOutreachGates","outreachAttestationsFrom","OUTREACH_ATTESTATION_KINDS","leadAsContact","lead","contactGroupId","sources","raw","Array","isArray","source","String","kind","startsWith","email","name","emailState","facets","address","companyName","jobTitle","phone","tags","GET_ALL_CHUNK","getAllChunked","firestore","refs","snapshots","start","length","push","getAll","slice","readOutreachEnrollCandidates","input","people","org","collection","doc","orgId","leads","hostId","map","person","id","read","Promise","all","index","data","exists","held","personId","target","contactId","leadId","contact","visible","companyId","convertedContactId","heldAsContactId","trim","companyIds","Set","entry","filter","Boolean","companies","Map","found","forEach","snapshot","set","candidate","company","get","personOf","outreachCandidateBlocks","facts","code","reason","blocks","siteName","alreadyInSequence","EVERYTHING_CONFIRMED","Object","fromEntries","uid","atMs","blocksOf","previewOutreachPerson","question","early","cold","country","status","requires","personalLine","attestations","ask","settings","lookups","asIs","known","allowed","confirmed","missingAttestations","some","block","decideOutreachEnrollment","supplied","nowMs","result"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAgC4C,GAE5C,SAASA,qBAAqB,EAAEC,kBAAkB,EAAEC,gBAAgB,QAAQ,kCAAiC;AAC7G,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,6BAA4B;AAC9E,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SACEC,qBAAqB,QAGhB,qBAAiB;AACxB,SAASC,wBAAwB,QAAQ,gCAA4B;AACrE,SACEC,0BAA0B,QAIrB,6BAAyB;AA0DhC;;;;;;CAMC,GACD,OAAO,SAASC,cACdC,IAA6B,EAC7BC,cAAsB;IAEtB,MAAMC,UAAgC,CAAC;IACvC,KAAK,MAAMC,OAAOC,MAAMC,OAAO,CAACL,IAAI,CAAC,UAAU,IAAIA,IAAI,CAAC,UAAU,GAAG,EAAE,CAAE;QACvE,MAAMM,SAASC,OAAOJ;QACtB,MAAMK,OAAOF,OAAOG,UAAU,CAAC,WAAW,SAASH,WAAW,WAAW,WAAWA;QACpF,IAAIE,MAAMN,OAAO,CAACM,KAAK,GAAG;IAC5B;IACA,OAAO;QACLE,OAAOV,IAAI,CAAC,QAAQ;QACpBW,MAAMX,IAAI,CAAC,OAAO;OAGdA,IAAI,CAAC,aAAa,IAAI,OAAOA,IAAI,CAAC,aAAa,KAAK,WAAW;QAAEY,YAAYZ,IAAI,CAAC,aAAa;IAAC,IAAI,CAAC;QACzGa,QAAQ;YACN,CAACZ,eAAe,EAAE;gBAChBC;eACIF,IAAI,CAAC,UAAU,IAAI,OAAOA,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAEc,SAASd,IAAI,CAAC,UAAU;YAAC,IAAI,CAAC,GACzF,OAAOA,IAAI,CAAC,UAAU,KAAK,WAAW;gBAAEe,aAAaf,IAAI,CAAC,UAAU;YAAC,IAAI,CAAC,GAC1E,OAAOA,IAAI,CAAC,WAAW,KAAK,WAAW;gBAAEgB,UAAUhB,IAAI,CAAC,WAAW;YAAC,IAAI,CAAC,GACzE,OAAOA,IAAI,CAAC,QAAQ,KAAK,WAAW;gBAAEiB,OAAOjB,IAAI,CAAC,QAAQ;YAAC,IAAI,CAAC,GAChEI,MAAMC,OAAO,CAACL,IAAI,CAAC,OAAO,IAAI;gBAAEkB,MAAMlB,IAAI,CAAC,OAAO;YAAC,IAAI,CAAC;QAEhE;;AAEJ;AAEA,0DAA0D,GAC1D,MAAMmB,gBAAgB;AAEtB,eAAeC,cACbC,SAAoB,EACpBC,IAAoD;IAEpD,MAAMC,YAAkD,EAAE;IAC1D,IAAK,IAAIC,QAAQ,GAAGA,QAAQF,KAAKG,MAAM,EAAED,SAASL,cAAe;QAC/DI,UAAUG,IAAI,IAAK,MAAML,UAAUM,MAAM,IAAIL,KAAKM,KAAK,CAACJ,OAAOA,QAAQL;IACzE;IACA,OAAOI;AACT;AAEA;;;;;;CAMC,GACD,OAAO,eAAeM,6BACpBR,SAAoB,EACpBS,KAAsG;IAEtG,IAAI,CAACA,MAAMC,MAAM,CAACN,MAAM,EAAE,OAAO,EAAE;IACnC,MAAMO,MAAMX,UAAUY,UAAU,CAAC,QAAQC,GAAG,CAACJ,MAAMK,KAAK;IACxD,MAAMC,QAAQf,UAAUY,UAAU,CAAC,SAASC,GAAG,CAACJ,MAAMO,MAAM,EAAEJ,UAAU,CAAC;IACzE,MAAMV,YAAY,MAAMH,cACtBC,WACAS,MAAMC,MAAM,CAACO,GAAG,CAAC,CAACC,SAChBA,OAAO/B,IAAI,KAAK,SAAS4B,MAAMF,GAAG,CAACK,OAAOC,EAAE,IAAIR,IAAIC,UAAU,CAAC,YAAYC,GAAG,CAACK,OAAOC,EAAE;IAG5F,MAAMC,OAAO,MAAMC,QAAQC,GAAG,CAC5Bb,MAAMC,MAAM,CAACO,GAAG,CAAC,OAAOC,QAAQK;YAgCHrD;YA/BdgC;QAAb,MAAMsB,OAAOtB,EAAAA,mBAAAA,SAAS,CAACqB,MAAM,qBAAhBrB,iBAAkBuB,MAAM,IAAIvB,SAAS,CAACqB,MAAM,CAACC,IAAI,KAAiC;QAC/F,IAAIN,OAAO/B,IAAI,KAAK,QAAQ;YAC1B,MAAME,QAAQmC,OAAOxD,sBAAsBwD,IAAI,CAAC,QAAQ,IAAI;YAC5D,MAAME,OACJF,QAAQnC,QAAQ,MAAMf,mBAAmBqC,IAAIC,UAAU,CAAC,aAAavB,SAAS;YAChF,OAAO;gBACLsC,UAAUT,OAAOC,EAAE;gBACnBS,QAAQ;gBACRC,WAAW;gBACXC,QAAQZ,OAAOC,EAAE;gBACjBY,SAASP,OAAO9C,cAAc8C,MAAMf,MAAM7B,cAAc,IAAI;gBAC5DD,MAAM6C;gBACN,sDAAsD;gBACtDQ,SAASR,SAAS;gBAClBlC,MAAMkC,OAAOrD,mBAAmBqD,QAAQ;gBACxCnC;gBACA4C,WAAW;gBACXC,oBAAoBV,QAAQ,OAAOA,IAAI,CAAC,qBAAqB,KAAK,WAAWA,IAAI,CAAC,qBAAqB,GAAG;gBAC1GW,iBAAiBT,OAAOA,KAAKP,EAAE,GAAG;YACpC;QACF;QACA,OAAO;YACLQ,UAAUT,OAAOC,EAAE;YACnBS,QAAQ;YACRC,WAAWX,OAAOC,EAAE;YACpBW,QAAQ;YACRC,SAASP;YACT7C,MAAM;YACNqD,SAASR,OAAOnD,cAAcmD,IAAI,CAAC,YAAY,EAA0Bf,MAAMO,MAAM,IAAI;YACzF1B,MAAMkC,OAAOvD,mBAAmBuD,MAAMf,MAAM7B,cAAc,EAAEwD,IAAI,KAAK;YACrE/C,OAAOmC,OAAOxD,sBAAsBwD,IAAI,CAAC,QAAQ,IAAI;YACrDS,WAAWT,OAAOtC,QAAOhB,8BAAAA,iBAAiBsD,MAAMf,MAAM7B,cAAc,EAAEqD,SAAS,YAAtD/D,8BAA0D,MAAM;YACzFgE,oBAAoB;YACpBC,iBAAiB;QACnB;IACF;IAEF,MAAME,aAAa;WAAI,IAAIC,IAAIlB,KAAKH,GAAG,CAAC,CAACsB,QAAUA,MAAMN,SAAS,EAAEO,MAAM,CAACC;KAAU;IACrF,MAAMC,YAAY,IAAIC;IACtB,IAAIN,WAAWjC,MAAM,EAAE;QACrB,MAAMwC,QAAQ,MAAM7C,cAClBC,WACAqC,WAAWpB,GAAG,CAAC,CAACE,KAAOR,IAAIC,UAAU,CAAC,aAAaC,GAAG,CAACM;QAEzDyB,MAAMC,OAAO,CAAC,CAACC,UAAUvB;YACvB,IAAIuB,SAASrB,MAAM,EAAEiB,UAAUK,GAAG,CAACV,UAAU,CAACd,MAAM,EAAEuB,SAAStB,IAAI;QACrE;IACF;IACA,OAAOJ,KAAKH,GAAG,CAAC;YAAC,EAAEgB,SAAS,EAAgB,OAAXe;;;YAETN;eAF0B,aAC7CM;YACHC,SAAShB,aAAaS,iBAAAA,UAAUQ,GAAG,CAACjB,sBAAdS,iBAA4B,OAAQ;;;AAE9D;AAEA,2CAA2C,GAC3C,SAASS,SAASH,SAAkC;IAClD,OAAO;QACLrB,UAAUqB,UAAUrB,QAAQ;QAC5BC,QAAQoB,UAAUpB,MAAM;QACxBC,WAAWmB,UAAUnB,SAAS;QAC9BC,QAAQkB,UAAUlB,MAAM;IAC1B;AACF;AAEA,gEAAgE,GAChE,OAAO,SAASsB,wBACdJ,SAAkC,EAClCK,KAAuD;IAEvD,IAAI,CAACL,UAAUjB,OAAO,EAAE;QACtB,OAAOiB,UAAUpB,MAAM,KAAK,SACxB;YAAC;gBAAE0B,MAAM;gBAAgBC,QAAQ;YAA4D;SAAE,GAC/F;YAAC;gBAAED,MAAM;gBAAmBC,QAAQ;YAA4C;SAAE;IACxF;IACA,MAAMC,SAAgC,EAAE;IACxC,IAAIR,UAAUpB,MAAM,KAAK,QAAQ;QAC/B,sEAAsE;QACtE,sEAAsE;QACtE,IAAIoB,UAAUd,kBAAkB,EAAE;YAChCsB,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF,OAAO,IAAIP,UAAUb,eAAe,EAAE;YACpCqB,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF;QACA,IAAInF,cAAc4E,UAAUrE,IAAI,MAAM,eAAe;YACnD6E,OAAOnD,IAAI,CAAC;gBACViD,MAAM;gBACNC,QAAQ;YACV;QACF;IACF;IACA,IAAI,CAACP,UAAUhB,OAAO,EAAE;QACtBwB,OAAOnD,IAAI,CAAC;YACViD,MAAM;YACNC,QAAQ,CAAC,sBAAsB,EAAEF,MAAMI,QAAQ,IAAI,uBAAuB,OAAO,CAAC;QACpF;IACF;IACA,IAAI,CAACT,UAAU3D,KAAK,EAAE;QACpBmE,OAAOnD,IAAI,CAAC;YAAEiD,MAAM;YAAYC,QAAQ;QAAqC;IAC/E;IACA,IAAIF,MAAMK,iBAAiB,EAAE;QAC3BF,OAAOnD,IAAI,CAAC;YACViD,MAAM;YACNC,QAAQ;QACV;IACF;IACA,OAAOC;AACT;AAEA,gFAAgF,GAChF,MAAMG,uBAA6CC,OAAOC,WAAW,CACnEpF,2BAA2BwC,GAAG,CAAC,CAAC9B,OAAS;QAACA;QAAM;YAAE2E,KAAK;YAAWC,MAAM;QAAE;KAAE;AAG9E,MAAMC,WAAW,CAACR,SAChBA,OAAOvC,GAAG,CAAC,CAAC,EAAEqC,IAAI,EAAEC,MAAM,EAAE,GAAM,CAAA;YAAED;YAAMC;QAAO,CAAA;AAUnD,oFAAoF,GACpF,OAAO,SAASU,sBACdC,QAA8B,EAC9Bb,KAAuD;IAEvD,MAAM,EAAEL,SAAS,EAAE,GAAGkB;IACtB,MAAMhD,SAAS,aACViC,SAASH;QACZ1D,MAAM0D,UAAU1D,IAAI;QACpBD,OAAO2D,UAAU3D,KAAK;;IAExB,MAAM8E,QAAQf,wBAAwBJ,WAAWK;IACjD,IAAIc,MAAM/D,MAAM,EAAE;QAChB,OAAO,aACFc;YACHkD,MAAM;YACNC,SAAS;YACTC,QAAQ;YACRd,QAAQW;YACRI,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,MAAMC,MAAM,CAACF,cAAsBC;YAExBzB;eADTzE,sBAAsB;YACpBc,KAAK,GAAE2D,mBAAAA,UAAU3D,KAAK,YAAf2D,mBAAmB;YAC1BjB,SAASiB,UAAUjB,OAAO;YAC1BnD,gBAAgBsF,SAAStF,cAAc;YACvCqE,SAASD,UAAUC,OAAO;YAC1B0B,UAAUT,SAASS,QAAQ;YAC3BH;YACAC;YACAG,SAASV,SAASU,OAAO;QAC3B;;IACF,MAAMC,OAAOH,IAAI,IAAI,CAAC;IACtB,MAAMI,QAAQ;QAAEV,MAAMS,KAAKT,IAAI;QAAEC,SAASQ,KAAKR,OAAO,CAACA,OAAO;IAAC;IAC/D,IAAIQ,KAAKE,OAAO,EAAE;QAChB,OAAO,aACF7D,QACA4D;YACHR,QAAQ;YACRd,QAAQ,EAAE;YACVe,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,yEAAyE;IACzE,MAAMO,YAAYN,IAAI,oBAAoBf;IAC1C,IAAI,CAACqB,UAAUD,OAAO,EAAE;QACtB,OAAO,aACF7D,QACA4D;YACHR,QAAQ;YACRd,QAAQQ,SAASgB,UAAUxB,MAAM;YACjCe,UAAU;gBAAEC,cAAc;gBAAOC,cAAc,EAAE;YAAC;;IAEtD;IACA,MAAMA,eAA0CI,KAAKT,IAAI,GACrD;WAAIS,KAAKI,mBAAmB;KAAC,GAC7BJ,KAAKrB,MAAM,CAAC0B,IAAI,CAAC,CAACC,QAAUA,MAAM7B,IAAI,KAAK,qBACzC;QAAC;KAAsB,GACvB,EAAE;IACR,OAAO,aACFpC,QACA4D;QACHR,QAAQ;QACRd,QAAQ,EAAE;QACVe,UAAU;YACRC,cAAcK,KAAKrB,MAAM,CAAC0B,IAAI,CAAC,CAACC,QAAUA,MAAM7B,IAAI,KAAK;YACzDmB;QACF;;AAEJ;AAYA,uFAAuF,GACvF,OAAO,SAASW,yBACdlB,QAA8B,EAC9Bb,KAAuD,EACvDgC,QAKC;QAQQnB;IANT,MAAMO,eAAejG,yBAAyB6G,SAASZ,YAAY,EAAEY,SAASvB,GAAG,EAAEuB,SAASC,KAAK;IACjG,MAAMnB,QAAQf,wBAAwBc,SAASlB,SAAS,EAAEK;IAC1D,IAAIc,MAAM/D,MAAM,EAAE;QAChB,OAAO;YAAE2E,SAAS;YAAOvB,QAAQW;YAAOC,MAAM;YAAO/E,OAAO6E,SAASlB,SAAS,CAAC3D,KAAK;YAAEoF;QAAa;IACrG;IACA,MAAMc,SAAShH,sBAAsB;QACnCc,KAAK,GAAE6E,4BAAAA,SAASlB,SAAS,CAAC3D,KAAK,YAAxB6E,4BAA4B;QACnCnC,SAASmC,SAASlB,SAAS,CAACjB,OAAO;QACnCnD,gBAAgBsF,SAAStF,cAAc;QACvCqE,SAASiB,SAASlB,SAAS,CAACC,OAAO;QACnC0B,UAAUT,SAASS,QAAQ;QAC3BH,cAAca,SAASb,YAAY;QACnCC;QACAG,SAASV,SAASU,OAAO;IAC3B;IACA,OAAO;QACLG,SAASQ,OAAOR,OAAO;QACvBvB,QAAQQ,SAASuB,OAAO/B,MAAM;QAC9BY,MAAMmB,OAAOnB,IAAI;QACjB/E,OAAOkG,OAAOlG,KAAK;QACnBoF;IACF;AACF"}

package/src/lib/routes/enrollment-routes.js

@@ -134,6 +134,19 @@ export function createOutreachEnrollmentActionRoute(deps) {
                 detail
             });
             stoppedOthers = await optOutOtherEnrollments(firestore, enrollments, applied.enrollment, caller.uid, nowMs);
+            // The mark on the record the person is (AGL-3245): the member's verdict
+            // stands over every automatic one.
+            await deps.stampRecordEmailState({
+                orgId: caller.orgId,
+                email: applied.enrollment.email,
+                state: {
+                    status: 'do_not_contact',
+                    atMs: nowMs,
+                    source: 'member',
+                    detail,
+                    enrollmentId
+                }
+            });
         }
         return outreachOk({
             ok: true,

package/src/lib/routes/enrollment-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enrollment-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport {\n  applyOutreachEnrollmentEvent,\n  type OutreachEnrollmentEvent,\n} from '../engine/enrollment-state'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type {\n  OutreachEnrollmentAction,\n  OutreachEnrollmentActionResponse,\n} from '../model/outreach-api'\nimport type { OutreachEnrollment } from '../model/outreach.types'\nimport { addOutreachDoNotContact } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection, readStoredOutreachEnrollment } from '../storage/outreach-records'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * WHAT A MEMBER DOES TO ONE ENROLLMENT (AGL-2980):\n * `outreach/enrollments/action` — pause, resume, stop, or mark the person\n * do-not-contact.\n *\n * Every transition is the engine's (`applyOutreachEnrollmentEvent`): the\n * route decides nothing about which status may follow which. Each write is\n * a transaction over the one document, so a member's pause and the sending\n * runtime's step completion cannot interleave and leave a paused enrollment\n * with a step it should not have run.\n *\n * MARK DO-NOT-CONTACT puts the address on the organization's list, with\n * the member as its author, and then opts out every enrollment that address\n * has in the organization — this one wherever it stood, and any other that\n * is still active or paused — so no sequence emails it again, whichever one\n * would have been next.\n */\n\nconst ACTIONS: readonly OutreachEnrollmentAction[] = ['pause', 'resume', 'stop', 'do_not_contact']\n\nfunction eventFor(\n  action: OutreachEnrollmentAction,\n  atMs: number,\n  byUid: string,\n  detail: string | null,\n): OutreachEnrollmentEvent {\n  switch (action) {\n    case 'pause':\n      return { type: 'pause', atMs, byUid, detail }\n    case 'resume':\n      return { type: 'resume', atMs, byUid }\n    case 'stop':\n      return { type: 'stop', atMs, byUid, reason: 'manual', detail }\n    case 'do_not_contact':\n      return { type: 'opt_out', atMs, reason: 'do_not_contact', detail }\n  }\n}\n\nexport function createOutreachEnrollmentActionRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const enrollmentId = readOutreachDocumentId(body['enrollmentId'])\n    const action = body['action'] as OutreachEnrollmentAction\n    if (!enrollmentId || !ACTIONS.includes(action)) {\n      return outreachRefusal(400, 'invalid-request', 'Name the enrollment, and pause, resume, stop or mark it do-not-contact.')\n    }\n    const detail = typeof body['detail'] === 'string' ? body['detail'] : null\n    const firestore = deps.firestore()\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const ref = enrollments.doc(enrollmentId)\n    const nowMs = deps.now()\n\n    const applied = await firestore.runTransaction(async (transaction) => {\n      const snapshot = await transaction.get(ref)\n      const enrollment = readStoredOutreachEnrollment(enrollmentId, snapshot.exists ? snapshot.data() : undefined)\n      if (!enrollment) return null\n      const { patch, error } = applyOutreachEnrollmentEvent(\n        enrollment,\n        eventFor(action, nowMs, caller.uid, detail),\n      )\n      if (!patch) return { enrollment, error, changed: false }\n      // The opt-out event names no member; the person who marked it is\n      // recorded here, beside the reason, and on the list entry.\n      const written = {\n        ...patch,\n        stoppedByUid: action === 'do_not_contact' ? caller.uid : patch.stoppedByUid,\n        updatedAtMs: nowMs,\n      }\n      transaction.update(ref, written)\n      return { enrollment: { ...enrollment, ...written } as OutreachEnrollment, error: null, changed: true }\n    })\n    if (!applied) return outreachRefusal(404, 'enrollment-not-found', 'That enrollment no longer exists.')\n    // An address that bounced still goes on the list when a member asks:\n    // the enrollment's own status stays final, the list entry is what they\n    // asked for.\n    if (applied.error && action !== 'do_not_contact') {\n      return outreachRefusal(409, 'transition-refused', applied.error)\n    }\n\n    let stoppedOthers = 0\n    if (action === 'do_not_contact') {\n      await addOutreachDoNotContact(firestore, {\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        reason: 'manual',\n        source: 'member',\n        addedByUid: caller.uid,\n        nowMs,\n        enrollmentId,\n        sequenceId: applied.enrollment.sequenceId,\n        detail,\n      })\n      stoppedOthers = await optOutOtherEnrollments(firestore, enrollments, applied.enrollment, caller.uid, nowMs)\n    }\n    return outreachOk({\n      ok: true,\n      changed: applied.changed,\n      enrollment: applied.enrollment,\n      stoppedOthers,\n    } satisfies OutreachEnrollmentActionResponse)\n  }\n}\n\n/** Opts out every OTHER open enrollment of the same address; returns how many. */\nasync function optOutOtherEnrollments(\n  firestore: FirebaseFirestore.Firestore,\n  enrollments: FirebaseFirestore.CollectionReference,\n  marked: OutreachEnrollment,\n  byUid: string,\n  nowMs: number,\n): Promise<number> {\n  const found = await enrollments.where('email', '==', marked.email).get()\n  const batch = firestore.batch()\n  let writes = 0\n  for (const doc of found.docs) {\n    if (doc.id === marked.id) continue\n    const other = readStoredOutreachEnrollment(doc.id, doc.data())\n    if (!other || !OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(other.status)) continue\n    const { patch } = applyOutreachEnrollmentEvent(other, {\n      type: 'opt_out',\n      atMs: nowMs,\n      reason: 'do_not_contact',\n      detail: 'Marked do-not-contact from another sequence.',\n    })\n    if (!patch) continue\n    batch.update(doc.ref, { ...patch, stoppedByUid: byUid, updatedAtMs: nowMs })\n    writes += 1\n  }\n  if (writes) await batch.commit()\n  return writes\n}\n"],"names":["applyOutreachEnrollmentEvent","OUTREACH_OPEN_ENROLLMENT_STATUSES","addOutreachDoNotContact","outreachOrgCollection","readStoredOutreachEnrollment","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","ACTIONS","eventFor","action","atMs","byUid","detail","type","reason","createOutreachEnrollmentActionRoute","deps","request","method","body","caller","gate","Response","enrollmentId","includes","firestore","enrollments","orgId","ref","doc","nowMs","now","applied","runTransaction","transaction","snapshot","get","enrollment","exists","data","undefined","patch","error","uid","changed","written","stoppedByUid","updatedAtMs","update","stoppedOthers","email","source","addedByUid","sequenceId","optOutOtherEnrollments","ok","marked","found","where","batch","writes","docs","id","other","status","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,4BAA4B,QAEvB,gCAA4B;AACnC,SAASC,iCAAiC,QAAQ,qBAAiB;AAMnE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,qBAAqB,EAAEC,4BAA4B,QAAQ,iCAA6B;AAEjG,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;CAgBC,GAED,MAAMC,UAA+C;IAAC;IAAS;IAAU;IAAQ;CAAiB;AAElG,SAASC,SACPC,MAAgC,EAChCC,IAAY,EACZC,KAAa,EACbC,MAAqB;IAErB,OAAQH;QACN,KAAK;YACH,OAAO;gBAAEI,MAAM;gBAASH;gBAAMC;gBAAOC;YAAO;QAC9C,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAUH;gBAAMC;YAAM;QACvC,KAAK;YACH,OAAO;gBAAEE,MAAM;gBAAQH;gBAAMC;gBAAOG,QAAQ;gBAAUF;YAAO;QAC/D,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAWH;gBAAMI,QAAQ;gBAAkBF;YAAO;IACrE;AACF;AAEA,OAAO,SAASG,oCAAoCC,IAAuB;IACzE,OAAO,OAAOC;QACZ,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOhB,yBAAyB;QAC/D,MAAMiB,OAAO,MAAMb,qBAAqBW;QACxC,MAAMG,SAAS,MAAMnB,kBAAkBgB,SAASE,IAAI,CAAC,QAAQ,EAAEH,KAAKK,IAAI;QACxE,IAAID,kBAAkBE,UAAU,OAAOF;QACvC,MAAMG,eAAelB,uBAAuBc,IAAI,CAAC,eAAe;QAChE,MAAMV,SAASU,IAAI,CAAC,SAAS;QAC7B,IAAI,CAACI,gBAAgB,CAAChB,QAAQiB,QAAQ,CAACf,SAAS;YAC9C,OAAOL,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMQ,SAAS,OAAOO,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QACrE,MAAMM,YAAYT,KAAKS,SAAS;QAChC,MAAMC,cAAc3B,sBAAsB0B,WAAWL,OAAOO,KAAK,EAAE;QACnE,MAAMC,MAAMF,YAAYG,GAAG,CAACN;QAC5B,MAAMO,QAAQd,KAAKe,GAAG;QAEtB,MAAMC,UAAU,MAAMP,UAAUQ,cAAc,CAAC,OAAOC;YACpD,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACR;YACvC,MAAMS,aAAarC,6BAA6BuB,cAAcY,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKC;YAClG,IAAI,CAACH,YAAY,OAAO;YACxB,MAAM,EAAEI,KAAK,EAAEC,KAAK,EAAE,GAAG9C,6BACvByC,YACA7B,SAASC,QAAQqB,OAAOV,OAAOuB,GAAG,EAAE/B;YAEtC,IAAI,CAAC6B,OAAO,OAAO;gBAAEJ;gBAAYK;gBAAOE,SAAS;YAAM;YACvD,iEAAiE;YACjE,2DAA2D;YAC3D,MAAMC,UAAU,aACXJ;gBACHK,cAAcrC,WAAW,mBAAmBW,OAAOuB,GAAG,GAAGF,MAAMK,YAAY;gBAC3EC,aAAajB;;YAEfI,YAAYc,MAAM,CAACpB,KAAKiB;YACxB,OAAO;gBAAER,YAAY,aAAKA,YAAeQ;gBAAiCH,OAAO;gBAAME,SAAS;YAAK;QACvG;QACA,IAAI,CAACZ,SAAS,OAAO5B,gBAAgB,KAAK,wBAAwB;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,aAAa;QACb,IAAI4B,QAAQU,KAAK,IAAIjC,WAAW,kBAAkB;YAChD,OAAOL,gBAAgB,KAAK,sBAAsB4B,QAAQU,KAAK;QACjE;QAEA,IAAIO,gBAAgB;QACpB,IAAIxC,WAAW,kBAAkB;YAC/B,MAAMX,wBAAwB2B,WAAW;gBACvCE,OAAOP,OAAOO,KAAK;gBACnBuB,OAAOlB,QAAQK,UAAU,CAACa,KAAK;gBAC/BpC,QAAQ;gBACRqC,QAAQ;gBACRC,YAAYhC,OAAOuB,GAAG;gBACtBb;gBACAP;gBACA8B,YAAYrB,QAAQK,UAAU,CAACgB,UAAU;gBACzCzC;YACF;YACAqC,gBAAgB,MAAMK,uBAAuB7B,WAAWC,aAAaM,QAAQK,UAAU,EAAEjB,OAAOuB,GAAG,EAAEb;QACvG;QACA,OAAO3B,WAAW;YAChBoD,IAAI;YACJX,SAASZ,QAAQY,OAAO;YACxBP,YAAYL,QAAQK,UAAU;YAC9BY;QACF;IACF;AACF;AAEA,gFAAgF,GAChF,eAAeK,uBACb7B,SAAsC,EACtCC,WAAkD,EAClD8B,MAA0B,EAC1B7C,KAAa,EACbmB,KAAa;IAEb,MAAM2B,QAAQ,MAAM/B,YAAYgC,KAAK,CAAC,SAAS,MAAMF,OAAON,KAAK,EAAEd,GAAG;IACtE,MAAMuB,QAAQlC,UAAUkC,KAAK;IAC7B,IAAIC,SAAS;IACb,KAAK,MAAM/B,OAAO4B,MAAMI,IAAI,CAAE;QAC5B,IAAIhC,IAAIiC,EAAE,KAAKN,OAAOM,EAAE,EAAE;QAC1B,MAAMC,QAAQ/D,6BAA6B6B,IAAIiC,EAAE,EAAEjC,IAAIU,IAAI;QAC3D,IAAI,CAACwB,SAAS,CAAClE,kCAAkC2B,QAAQ,CAACuC,MAAMC,MAAM,GAAG;QACzE,MAAM,EAAEvB,KAAK,EAAE,GAAG7C,6BAA6BmE,OAAO;YACpDlD,MAAM;YACNH,MAAMoB;YACNhB,QAAQ;YACRF,QAAQ;QACV;QACA,IAAI,CAAC6B,OAAO;QACZkB,MAAMX,MAAM,CAACnB,IAAID,GAAG,EAAE,aAAKa;YAAOK,cAAcnC;YAAOoC,aAAajB;;QACpE8B,UAAU;IACZ;IACA,IAAIA,QAAQ,MAAMD,MAAMM,MAAM;IAC9B,OAAOL;AACT"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enrollment-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport {\n  applyOutreachEnrollmentEvent,\n  type OutreachEnrollmentEvent,\n} from '../engine/enrollment-state'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type {\n  OutreachEnrollmentAction,\n  OutreachEnrollmentActionResponse,\n} from '../model/outreach-api'\nimport type { OutreachEnrollment } from '../model/outreach.types'\nimport { addOutreachDoNotContact } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection, readStoredOutreachEnrollment } from '../storage/outreach-records'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * WHAT A MEMBER DOES TO ONE ENROLLMENT (AGL-2980):\n * `outreach/enrollments/action` — pause, resume, stop, or mark the person\n * do-not-contact.\n *\n * Every transition is the engine's (`applyOutreachEnrollmentEvent`): the\n * route decides nothing about which status may follow which. Each write is\n * a transaction over the one document, so a member's pause and the sending\n * runtime's step completion cannot interleave and leave a paused enrollment\n * with a step it should not have run.\n *\n * MARK DO-NOT-CONTACT puts the address on the organization's list, with\n * the member as its author, and then opts out every enrollment that address\n * has in the organization — this one wherever it stood, and any other that\n * is still active or paused — so no sequence emails it again, whichever one\n * would have been next.\n */\n\nconst ACTIONS: readonly OutreachEnrollmentAction[] = ['pause', 'resume', 'stop', 'do_not_contact']\n\nfunction eventFor(\n  action: OutreachEnrollmentAction,\n  atMs: number,\n  byUid: string,\n  detail: string | null,\n): OutreachEnrollmentEvent {\n  switch (action) {\n    case 'pause':\n      return { type: 'pause', atMs, byUid, detail }\n    case 'resume':\n      return { type: 'resume', atMs, byUid }\n    case 'stop':\n      return { type: 'stop', atMs, byUid, reason: 'manual', detail }\n    case 'do_not_contact':\n      return { type: 'opt_out', atMs, reason: 'do_not_contact', detail }\n  }\n}\n\nexport function createOutreachEnrollmentActionRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const enrollmentId = readOutreachDocumentId(body['enrollmentId'])\n    const action = body['action'] as OutreachEnrollmentAction\n    if (!enrollmentId || !ACTIONS.includes(action)) {\n      return outreachRefusal(400, 'invalid-request', 'Name the enrollment, and pause, resume, stop or mark it do-not-contact.')\n    }\n    const detail = typeof body['detail'] === 'string' ? body['detail'] : null\n    const firestore = deps.firestore()\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const ref = enrollments.doc(enrollmentId)\n    const nowMs = deps.now()\n\n    const applied = await firestore.runTransaction(async (transaction) => {\n      const snapshot = await transaction.get(ref)\n      const enrollment = readStoredOutreachEnrollment(enrollmentId, snapshot.exists ? snapshot.data() : undefined)\n      if (!enrollment) return null\n      const { patch, error } = applyOutreachEnrollmentEvent(\n        enrollment,\n        eventFor(action, nowMs, caller.uid, detail),\n      )\n      if (!patch) return { enrollment, error, changed: false }\n      // The opt-out event names no member; the person who marked it is\n      // recorded here, beside the reason, and on the list entry.\n      const written = {\n        ...patch,\n        stoppedByUid: action === 'do_not_contact' ? caller.uid : patch.stoppedByUid,\n        updatedAtMs: nowMs,\n      }\n      transaction.update(ref, written)\n      return { enrollment: { ...enrollment, ...written } as OutreachEnrollment, error: null, changed: true }\n    })\n    if (!applied) return outreachRefusal(404, 'enrollment-not-found', 'That enrollment no longer exists.')\n    // An address that bounced still goes on the list when a member asks:\n    // the enrollment's own status stays final, the list entry is what they\n    // asked for.\n    if (applied.error && action !== 'do_not_contact') {\n      return outreachRefusal(409, 'transition-refused', applied.error)\n    }\n\n    let stoppedOthers = 0\n    if (action === 'do_not_contact') {\n      await addOutreachDoNotContact(firestore, {\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        reason: 'manual',\n        source: 'member',\n        addedByUid: caller.uid,\n        nowMs,\n        enrollmentId,\n        sequenceId: applied.enrollment.sequenceId,\n        detail,\n      })\n      stoppedOthers = await optOutOtherEnrollments(firestore, enrollments, applied.enrollment, caller.uid, nowMs)\n      // The mark on the record the person is (AGL-3245): the member's verdict\n      // stands over every automatic one.\n      await deps.stampRecordEmailState({\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        state: { status: 'do_not_contact', atMs: nowMs, source: 'member', detail, enrollmentId },\n      })\n    }\n    return outreachOk({\n      ok: true,\n      changed: applied.changed,\n      enrollment: applied.enrollment,\n      stoppedOthers,\n    } satisfies OutreachEnrollmentActionResponse)\n  }\n}\n\n/** Opts out every OTHER open enrollment of the same address; returns how many. */\nasync function optOutOtherEnrollments(\n  firestore: FirebaseFirestore.Firestore,\n  enrollments: FirebaseFirestore.CollectionReference,\n  marked: OutreachEnrollment,\n  byUid: string,\n  nowMs: number,\n): Promise<number> {\n  const found = await enrollments.where('email', '==', marked.email).get()\n  const batch = firestore.batch()\n  let writes = 0\n  for (const doc of found.docs) {\n    if (doc.id === marked.id) continue\n    const other = readStoredOutreachEnrollment(doc.id, doc.data())\n    if (!other || !OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(other.status)) continue\n    const { patch } = applyOutreachEnrollmentEvent(other, {\n      type: 'opt_out',\n      atMs: nowMs,\n      reason: 'do_not_contact',\n      detail: 'Marked do-not-contact from another sequence.',\n    })\n    if (!patch) continue\n    batch.update(doc.ref, { ...patch, stoppedByUid: byUid, updatedAtMs: nowMs })\n    writes += 1\n  }\n  if (writes) await batch.commit()\n  return writes\n}\n"],"names":["applyOutreachEnrollmentEvent","OUTREACH_OPEN_ENROLLMENT_STATUSES","addOutreachDoNotContact","outreachOrgCollection","readStoredOutreachEnrollment","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","ACTIONS","eventFor","action","atMs","byUid","detail","type","reason","createOutreachEnrollmentActionRoute","deps","request","method","body","caller","gate","Response","enrollmentId","includes","firestore","enrollments","orgId","ref","doc","nowMs","now","applied","runTransaction","transaction","snapshot","get","enrollment","exists","data","undefined","patch","error","uid","changed","written","stoppedByUid","updatedAtMs","update","stoppedOthers","email","source","addedByUid","sequenceId","optOutOtherEnrollments","stampRecordEmailState","state","status","ok","marked","found","where","batch","writes","docs","id","other","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,4BAA4B,QAEvB,gCAA4B;AACnC,SAASC,iCAAiC,QAAQ,qBAAiB;AAMnE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,qBAAqB,EAAEC,4BAA4B,QAAQ,iCAA6B;AAEjG,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;CAgBC,GAED,MAAMC,UAA+C;IAAC;IAAS;IAAU;IAAQ;CAAiB;AAElG,SAASC,SACPC,MAAgC,EAChCC,IAAY,EACZC,KAAa,EACbC,MAAqB;IAErB,OAAQH;QACN,KAAK;YACH,OAAO;gBAAEI,MAAM;gBAASH;gBAAMC;gBAAOC;YAAO;QAC9C,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAUH;gBAAMC;YAAM;QACvC,KAAK;YACH,OAAO;gBAAEE,MAAM;gBAAQH;gBAAMC;gBAAOG,QAAQ;gBAAUF;YAAO;QAC/D,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAWH;gBAAMI,QAAQ;gBAAkBF;YAAO;IACrE;AACF;AAEA,OAAO,SAASG,oCAAoCC,IAAuB;IACzE,OAAO,OAAOC;QACZ,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOhB,yBAAyB;QAC/D,MAAMiB,OAAO,MAAMb,qBAAqBW;QACxC,MAAMG,SAAS,MAAMnB,kBAAkBgB,SAASE,IAAI,CAAC,QAAQ,EAAEH,KAAKK,IAAI;QACxE,IAAID,kBAAkBE,UAAU,OAAOF;QACvC,MAAMG,eAAelB,uBAAuBc,IAAI,CAAC,eAAe;QAChE,MAAMV,SAASU,IAAI,CAAC,SAAS;QAC7B,IAAI,CAACI,gBAAgB,CAAChB,QAAQiB,QAAQ,CAACf,SAAS;YAC9C,OAAOL,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMQ,SAAS,OAAOO,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QACrE,MAAMM,YAAYT,KAAKS,SAAS;QAChC,MAAMC,cAAc3B,sBAAsB0B,WAAWL,OAAOO,KAAK,EAAE;QACnE,MAAMC,MAAMF,YAAYG,GAAG,CAACN;QAC5B,MAAMO,QAAQd,KAAKe,GAAG;QAEtB,MAAMC,UAAU,MAAMP,UAAUQ,cAAc,CAAC,OAAOC;YACpD,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACR;YACvC,MAAMS,aAAarC,6BAA6BuB,cAAcY,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKC;YAClG,IAAI,CAACH,YAAY,OAAO;YACxB,MAAM,EAAEI,KAAK,EAAEC,KAAK,EAAE,GAAG9C,6BACvByC,YACA7B,SAASC,QAAQqB,OAAOV,OAAOuB,GAAG,EAAE/B;YAEtC,IAAI,CAAC6B,OAAO,OAAO;gBAAEJ;gBAAYK;gBAAOE,SAAS;YAAM;YACvD,iEAAiE;YACjE,2DAA2D;YAC3D,MAAMC,UAAU,aACXJ;gBACHK,cAAcrC,WAAW,mBAAmBW,OAAOuB,GAAG,GAAGF,MAAMK,YAAY;gBAC3EC,aAAajB;;YAEfI,YAAYc,MAAM,CAACpB,KAAKiB;YACxB,OAAO;gBAAER,YAAY,aAAKA,YAAeQ;gBAAiCH,OAAO;gBAAME,SAAS;YAAK;QACvG;QACA,IAAI,CAACZ,SAAS,OAAO5B,gBAAgB,KAAK,wBAAwB;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,aAAa;QACb,IAAI4B,QAAQU,KAAK,IAAIjC,WAAW,kBAAkB;YAChD,OAAOL,gBAAgB,KAAK,sBAAsB4B,QAAQU,KAAK;QACjE;QAEA,IAAIO,gBAAgB;QACpB,IAAIxC,WAAW,kBAAkB;YAC/B,MAAMX,wBAAwB2B,WAAW;gBACvCE,OAAOP,OAAOO,KAAK;gBACnBuB,OAAOlB,QAAQK,UAAU,CAACa,KAAK;gBAC/BpC,QAAQ;gBACRqC,QAAQ;gBACRC,YAAYhC,OAAOuB,GAAG;gBACtBb;gBACAP;gBACA8B,YAAYrB,QAAQK,UAAU,CAACgB,UAAU;gBACzCzC;YACF;YACAqC,gBAAgB,MAAMK,uBAAuB7B,WAAWC,aAAaM,QAAQK,UAAU,EAAEjB,OAAOuB,GAAG,EAAEb;YACrG,wEAAwE;YACxE,mCAAmC;YACnC,MAAMd,KAAKuC,qBAAqB,CAAC;gBAC/B5B,OAAOP,OAAOO,KAAK;gBACnBuB,OAAOlB,QAAQK,UAAU,CAACa,KAAK;gBAC/BM,OAAO;oBAAEC,QAAQ;oBAAkB/C,MAAMoB;oBAAOqB,QAAQ;oBAAUvC;oBAAQW;gBAAa;YACzF;QACF;QACA,OAAOpB,WAAW;YAChBuD,IAAI;YACJd,SAASZ,QAAQY,OAAO;YACxBP,YAAYL,QAAQK,UAAU;YAC9BY;QACF;IACF;AACF;AAEA,gFAAgF,GAChF,eAAeK,uBACb7B,SAAsC,EACtCC,WAAkD,EAClDiC,MAA0B,EAC1BhD,KAAa,EACbmB,KAAa;IAEb,MAAM8B,QAAQ,MAAMlC,YAAYmC,KAAK,CAAC,SAAS,MAAMF,OAAOT,KAAK,EAAEd,GAAG;IACtE,MAAM0B,QAAQrC,UAAUqC,KAAK;IAC7B,IAAIC,SAAS;IACb,KAAK,MAAMlC,OAAO+B,MAAMI,IAAI,CAAE;QAC5B,IAAInC,IAAIoC,EAAE,KAAKN,OAAOM,EAAE,EAAE;QAC1B,MAAMC,QAAQlE,6BAA6B6B,IAAIoC,EAAE,EAAEpC,IAAIU,IAAI;QAC3D,IAAI,CAAC2B,SAAS,CAACrE,kCAAkC2B,QAAQ,CAAC0C,MAAMT,MAAM,GAAG;QACzE,MAAM,EAAEhB,KAAK,EAAE,GAAG7C,6BAA6BsE,OAAO;YACpDrD,MAAM;YACNH,MAAMoB;YACNhB,QAAQ;YACRF,QAAQ;QACV;QACA,IAAI,CAAC6B,OAAO;QACZqB,MAAMd,MAAM,CAACnB,IAAID,GAAG,EAAE,aAAKa;YAAOK,cAAcnC;YAAOoC,aAAajB;;QACpEiC,UAAU;IACZ;IACA,IAAIA,QAAQ,MAAMD,MAAMK,MAAM;IAC9B,OAAOJ;AACT"}

package/src/lib/routes/platform-deps.d.ts

@@ -14,6 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { stampRecordEmailState } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state';
 import { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown';
 import { logOrgActivity } from '@aglyn/tenant-data-admin/server/organizations';
 import { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions';
@@ -30,7 +31,7 @@ import { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions';
  * module of this plugin keeps every import of the platform's libraries a
  * static one.
  */
-export { lockdownRefusal, logOrgActivity, resolveOrgPermissions };
+export { lockdownRefusal, logOrgActivity, resolveOrgPermissions, stampRecordEmailState };
 /**
  * Whether the member holds a CATALOG permission (`data.manage`) as the
  * org's roles resolve it — custom role and per-member overrides included.

package/src/lib/routes/platform-deps.js

@@ -14,6 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { collectDynamicListCandidates } from "@aglyn/tenant-data-admin/server/dynamic-list-materialize";
+import { stampRecordEmailState } from "@aglyn/aglyn/plugin-manager/plugin-record-email-state";
 import { lockdownRefusal } from "@aglyn/tenant-data-admin/server/lockdown";
 import { logOrgActivity, memberHasOrgPermission, resolveOrgMembership } from "@aglyn/tenant-data-admin/server/organizations";
 import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
@@ -29,7 +30,7 @@ import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
  * alone reaches the whole tenant data barrel. Loading them through one
  * module of this plugin keeps every import of the platform's libraries a
  * static one.
- */ export { lockdownRefusal, logOrgActivity, resolveOrgPermissions };
+ */ export { lockdownRefusal, logOrgActivity, resolveOrgPermissions, stampRecordEmailState };
 /**
  * Whether the member holds a CATALOG permission (`data.manage`) as the
  * org's roles resolve it — custom role and per-member overrides included.

package/src/lib/routes/platform-deps.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/platform-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { collectDynamicListCandidates } from '@aglyn/tenant-data-admin/server/dynamic-list-materialize'\nimport { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown'\nimport {\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\n\n/**\n * The platform's heavier server modules the Outreach routes reach\n * (AGL-2980): the permission resolver, the lockdown verdict, the activity\n * log and the saved-view sweep.\n *\n * Imported here statically, and this module is loaded by\n * `register-routes.ts` the first time a request needs one of them: the\n * manifest loads Outreach's server bundle into every console API process\n * whether or not an Outreach route is ever called, and `org-permissions`\n * alone reaches the whole tenant data barrel. Loading them through one\n * module of this plugin keeps every import of the platform's libraries a\n * static one.\n */\n\nexport { lockdownRefusal, logOrgActivity, resolveOrgPermissions }\n\n/**\n * Whether the member holds a CATALOG permission (`data.manage`) as the\n * org's roles resolve it — custom role and per-member overrides included.\n * A lookup that failed has not shown the member holds it.\n */\nexport async function holdsOrgCatalogPermission(uid: string, orgId: string, key: string): Promise<boolean> {\n  try {\n    const membership = await resolveOrgMembership(uid, orgId)\n    if (!membership?.member) return false\n    return (\n      (await memberHasOrgPermission(\n        orgId,\n        membership.member,\n        key as Parameters<typeof memberHasOrgPermission>[2],\n      )) === true\n    )\n  } catch {\n    return false\n  }\n}\n\n/**\n * The addresses a saved Contacts view selects among one site's contacts,\n * read by the dynamic-list sweep's own scan, and whether it reached the\n * whole view.\n */\nexport async function crmViewEmails(input: {\n  hostId: string\n  viewId: string\n}): Promise<{ emails: string[]; complete: boolean }> {\n  const scan = await collectDynamicListCandidates({\n    hostId: input.hostId,\n    rule: { sources: ['contacts'], viewId: input.viewId },\n  })\n  return { emails: scan.candidates.map((candidate) => candidate.email), complete: scan.complete }\n}\n"],"names":["collectDynamicListCandidates","lockdownRefusal","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","resolveOrgPermissions","holdsOrgCatalogPermission","uid","orgId","key","membership","member","crmViewEmails","input","scan","hostId","rule","sources","viewId","emails","candidates","map","candidate","email","complete"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,4BAA4B,QAAQ,2DAA0D;AACvG,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SACEC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,gDAA+C;AACtD,SAASC,qBAAqB,QAAQ,wCAAuC;AAE7E;;;;;;;;;;;;CAYC,GAED,SAASJ,eAAe,EAAEC,cAAc,EAAEG,qBAAqB,GAAE;AAEjE;;;;CAIC,GACD,OAAO,eAAeC,0BAA0BC,GAAW,EAAEC,KAAa,EAAEC,GAAW;IACrF,IAAI;QACF,MAAMC,aAAa,MAAMN,qBAAqBG,KAAKC;QACnD,IAAI,EAACE,8BAAAA,WAAYC,MAAM,GAAE,OAAO;QAChC,OACE,AAAC,MAAMR,uBACLK,OACAE,WAAWC,MAAM,EACjBF,SACK;IAEX,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeG,cAAcC,KAGnC;IACC,MAAMC,OAAO,MAAMd,6BAA6B;QAC9Ce,QAAQF,MAAME,MAAM;QACpBC,MAAM;YAAEC,SAAS;gBAAC;aAAW;YAAEC,QAAQL,MAAMK,MAAM;QAAC;IACtD;IACA,OAAO;QAAEC,QAAQL,KAAKM,UAAU,CAACC,GAAG,CAAC,CAACC,YAAcA,UAAUC,KAAK;QAAGC,UAAUV,KAAKU,QAAQ;IAAC;AAChG"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/platform-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { collectDynamicListCandidates } from '@aglyn/tenant-data-admin/server/dynamic-list-materialize'\nimport { stampRecordEmailState } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown'\nimport {\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\n\n/**\n * The platform's heavier server modules the Outreach routes reach\n * (AGL-2980): the permission resolver, the lockdown verdict, the activity\n * log and the saved-view sweep.\n *\n * Imported here statically, and this module is loaded by\n * `register-routes.ts` the first time a request needs one of them: the\n * manifest loads Outreach's server bundle into every console API process\n * whether or not an Outreach route is ever called, and `org-permissions`\n * alone reaches the whole tenant data barrel. Loading them through one\n * module of this plugin keeps every import of the platform's libraries a\n * static one.\n */\n\nexport { lockdownRefusal, logOrgActivity, resolveOrgPermissions, stampRecordEmailState }\n\n/**\n * Whether the member holds a CATALOG permission (`data.manage`) as the\n * org's roles resolve it — custom role and per-member overrides included.\n * A lookup that failed has not shown the member holds it.\n */\nexport async function holdsOrgCatalogPermission(uid: string, orgId: string, key: string): Promise<boolean> {\n  try {\n    const membership = await resolveOrgMembership(uid, orgId)\n    if (!membership?.member) return false\n    return (\n      (await memberHasOrgPermission(\n        orgId,\n        membership.member,\n        key as Parameters<typeof memberHasOrgPermission>[2],\n      )) === true\n    )\n  } catch {\n    return false\n  }\n}\n\n/**\n * The addresses a saved Contacts view selects among one site's contacts,\n * read by the dynamic-list sweep's own scan, and whether it reached the\n * whole view.\n */\nexport async function crmViewEmails(input: {\n  hostId: string\n  viewId: string\n}): Promise<{ emails: string[]; complete: boolean }> {\n  const scan = await collectDynamicListCandidates({\n    hostId: input.hostId,\n    rule: { sources: ['contacts'], viewId: input.viewId },\n  })\n  return { emails: scan.candidates.map((candidate) => candidate.email), complete: scan.complete }\n}\n"],"names":["collectDynamicListCandidates","stampRecordEmailState","lockdownRefusal","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","resolveOrgPermissions","holdsOrgCatalogPermission","uid","orgId","key","membership","member","crmViewEmails","input","scan","hostId","rule","sources","viewId","emails","candidates","map","candidate","email","complete"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,4BAA4B,QAAQ,2DAA0D;AACvG,SAASC,qBAAqB,QAAQ,wDAAuD;AAC7F,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SACEC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,gDAA+C;AACtD,SAASC,qBAAqB,QAAQ,wCAAuC;AAE7E;;;;;;;;;;;;CAYC,GAED,SAASJ,eAAe,EAAEC,cAAc,EAAEG,qBAAqB,EAAEL,qBAAqB,GAAE;AAExF;;;;CAIC,GACD,OAAO,eAAeM,0BAA0BC,GAAW,EAAEC,KAAa,EAAEC,GAAW;IACrF,IAAI;QACF,MAAMC,aAAa,MAAMN,qBAAqBG,KAAKC;QACnD,IAAI,EAACE,8BAAAA,WAAYC,MAAM,GAAE,OAAO;QAChC,OACE,AAAC,MAAMR,uBACLK,OACAE,WAAWC,MAAM,EACjBF,SACK;IAEX,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeG,cAAcC,KAGnC;IACC,MAAMC,OAAO,MAAMf,6BAA6B;QAC9CgB,QAAQF,MAAME,MAAM;QACpBC,MAAM;YAAEC,SAAS;gBAAC;aAAW;YAAEC,QAAQL,MAAMK,MAAM;QAAC;IACtD;IACA,OAAO;QAAEC,QAAQL,KAAKM,UAAU,CAACC,GAAG,CAAC,CAACC,YAAcA,UAAUC,KAAK;QAAGC,UAAUV,KAAKU,QAAQ;IAAC;AAChG"}

package/src/lib/routes/register-routes.js

@@ -55,7 +55,10 @@ export function defaultOutreachRouteDeps() {
         now: Date.now,
         random: Math.random,
         logOrgActivity: async (orgId, actor, action, target)=>(await platform()).logOrgActivity(orgId, actor, action, target),
-        crmViewEmails: async (input)=>(await platform()).crmViewEmails(input)
+        crmViewEmails: async (input)=>(await platform()).crmViewEmails(input),
+        stampRecordEmailState: async (stamp)=>{
+            await (await platform()).stampRecordEmailState(stamp);
+        }
     };
 }
 export function registerOutreachRoutes(deps = defaultOutreachRouteDeps()) {

package/src/lib/routes/register-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/register-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { OUTREACH_API_ROUTES } from '../constants/api-routes'\nimport { outreachOrgSubject } from '../mailboxes/register-mailbox-routes'\nimport { createOutreachDoNotContactDomainsRoute } from './do-not-contact-routes'\nimport { createOutreachEnrollRoutes, type OutreachEnrollRouteDeps } from './enroll-routes'\nimport { createOutreachEnrollmentActionRoute } from './enrollment-routes'\nimport { createOutreachPreviewRoute } from './preview-routes'\nimport type { OutreachRouteGateDeps } from './route-gate'\nimport { createOutreachSequenceRoutes } from './sequence-routes'\nimport { createOutreachSettingsRoute } from './settings-routes'\n\n/**\n * Wires the settings, sequence and enrollment routes into the console\n * dispatcher (AGL-2980) with the platform's own dependencies. Specs build\n * their own.\n *\n * Every one names its organization (`orgId`, in the query or the JSON body)\n * and none names a site, so each declares the mailbox routes' subject reader:\n * the dispatcher's release gate then asks about that organization, and a\n * `release_outreach` override for one organization reaches these routes as it\n * reaches Mailboxes. Without it the gate reads the request as anonymous, which\n * only a fully enabled flag or a staff session passes.\n */\n\n/** The platform's heavier modules, loaded the first time a request needs one. */\nconst platform = () => import('./platform-deps')\n\n/** The gate's reach into the platform. */\nexport function defaultOutreachRouteGateDeps(): OutreachRouteGateDeps {\n  return {\n    verifyIdToken: (idToken) => firebaseAdmin.app().auth().verifyIdToken(idToken),\n    resolveOrgPermissions: async (uid, context) => (await platform()).resolveOrgPermissions(uid, context),\n    holdsOrgCatalogPermission: async (uid, orgId, key) =>\n      (await platform()).holdsOrgCatalogPermission(uid, orgId, key),\n    readOrg: async (orgId) => {\n      const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).get()\n      return snapshot.exists ? (snapshot.data() ?? {}) : null\n    },\n    lockdownRefusal: async (options) => (await platform()).lockdownRefusal(options),\n  }\n}\n\nexport function defaultOutreachRouteDeps(): OutreachEnrollRouteDeps {\n  return {\n    firestore: () => firebaseAdmin.app().firestore(),\n    gate: defaultOutreachRouteGateDeps(),\n    now: Date.now,\n    random: Math.random,\n    logOrgActivity: async (orgId, actor, action, target) =>\n      (await platform()).logOrgActivity(orgId, actor, action, target),\n    crmViewEmails: async (input) => (await platform()).crmViewEmails(input),\n  }\n}\n\nexport function registerOutreachRoutes(\n  deps: OutreachEnrollRouteDeps = defaultOutreachRouteDeps(),\n): void {\n  const sequences = createOutreachSequenceRoutes(deps)\n  const enroll = createOutreachEnrollRoutes(deps)\n  const orgSubject = { subject: outreachOrgSubject }\n  registerPluginApiRoute(OUTREACH_API_ROUTES.settings, { web: createOutreachSettingsRoute(deps) }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesSave, { web: sequences.save }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesStatus, { web: sequences.status }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesDelete, { web: sequences.remove }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enrollPreview, { web: enroll.preview }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enroll, { web: enroll.confirm }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.enrollmentsAction,\n    { web: createOutreachEnrollmentActionRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(OUTREACH_API_ROUTES.preview, { web: createOutreachPreviewRoute(deps) }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.doNotContactDomains,\n    { web: createOutreachDoNotContactDomainsRoute(deps) },\n    orgSubject,\n  )\n}\n"],"names":["registerPluginApiRoute","firebaseAdmin","OUTREACH_API_ROUTES","outreachOrgSubject","createOutreachDoNotContactDomainsRoute","createOutreachEnrollRoutes","createOutreachEnrollmentActionRoute","createOutreachPreviewRoute","createOutreachSequenceRoutes","createOutreachSettingsRoute","platform","defaultOutreachRouteGateDeps","verifyIdToken","idToken","app","auth","resolveOrgPermissions","uid","context","holdsOrgCatalogPermission","orgId","key","readOrg","snapshot","firestore","collection","doc","get","exists","data","lockdownRefusal","options","defaultOutreachRouteDeps","gate","now","Date","random","Math","logOrgActivity","actor","action","target","crmViewEmails","input","registerOutreachRoutes","deps","sequences","enroll","orgSubject","subject","settings","web","sequencesSave","save","sequencesStatus","status","sequencesDelete","remove","enrollPreview","preview","confirm","enrollmentsAction","doNotContactDomains"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,0CAAsC;AACzE,SAASC,sCAAsC,QAAQ,6BAAyB;AAChF,SAASC,0BAA0B,QAAsC,qBAAiB;AAC1F,SAASC,mCAAmC,QAAQ,yBAAqB;AACzE,SAASC,0BAA0B,QAAQ,sBAAkB;AAE7D,SAASC,4BAA4B,QAAQ,uBAAmB;AAChE,SAASC,2BAA2B,QAAQ,uBAAmB;AAE/D;;;;;;;;;;;CAWC,GAED,+EAA+E,GAC/E,MAAMC,WAAW,IAAM,MAAM,CAAC;AAE9B,wCAAwC,GACxC,OAAO,SAASC;IACd,OAAO;QACLC,eAAe,CAACC,UAAYZ,cAAca,GAAG,GAAGC,IAAI,GAAGH,aAAa,CAACC;QACrEG,uBAAuB,OAAOC,KAAKC,UAAY,AAAC,CAAA,MAAMR,UAAS,EAAGM,qBAAqB,CAACC,KAAKC;QAC7FC,2BAA2B,OAAOF,KAAKG,OAAOC,MAC5C,AAAC,CAAA,MAAMX,UAAS,EAAGS,yBAAyB,CAACF,KAAKG,OAAOC;QAC3DC,SAAS,OAAOF;gBAEYG;YAD1B,MAAMA,WAAW,MAAMtB,cAAca,GAAG,GAAGU,SAAS,GAAGC,UAAU,CAAC,QAAQC,GAAG,CAACN,OAAOO,GAAG;YACxF,OAAOJ,SAASK,MAAM,IAAIL,iBAAAA,SAASM,IAAI,cAAbN,iBAAmB,CAAC,IAAK;QACrD;QACAO,iBAAiB,OAAOC,UAAY,AAAC,CAAA,MAAMrB,UAAS,EAAGoB,eAAe,CAACC;IACzE;AACF;AAEA,OAAO,SAASC;IACd,OAAO;QACLR,WAAW,IAAMvB,cAAca,GAAG,GAAGU,SAAS;QAC9CS,MAAMtB;QACNuB,KAAKC,KAAKD,GAAG;QACbE,QAAQC,KAAKD,MAAM;QACnBE,gBAAgB,OAAOlB,OAAOmB,OAAOC,QAAQC,SAC3C,AAAC,CAAA,MAAM/B,UAAS,EAAG4B,cAAc,CAAClB,OAAOmB,OAAOC,QAAQC;QAC1DC,eAAe,OAAOC,QAAU,AAAC,CAAA,MAAMjC,UAAS,EAAGgC,aAAa,CAACC;IACnE;AACF;AAEA,OAAO,SAASC,uBACdC,OAAgCb,0BAA0B;IAE1D,MAAMc,YAAYtC,6BAA6BqC;IAC/C,MAAME,SAAS1C,2BAA2BwC;IAC1C,MAAMG,aAAa;QAAEC,SAAS9C;IAAmB;IACjDH,uBAAuBE,oBAAoBgD,QAAQ,EAAE;QAAEC,KAAK1C,4BAA4BoC;IAAM,GAAGG;IACjGhD,uBAAuBE,oBAAoBkD,aAAa,EAAE;QAAED,KAAKL,UAAUO,IAAI;IAAC,GAAGL;IACnFhD,uBAAuBE,oBAAoBoD,eAAe,EAAE;QAAEH,KAAKL,UAAUS,MAAM;IAAC,GAAGP;IACvFhD,uBAAuBE,oBAAoBsD,eAAe,EAAE;QAAEL,KAAKL,UAAUW,MAAM;IAAC,GAAGT;IACvFhD,uBAAuBE,oBAAoBwD,aAAa,EAAE;QAAEP,KAAKJ,OAAOY,OAAO;IAAC,GAAGX;IACnFhD,uBAAuBE,oBAAoB6C,MAAM,EAAE;QAAEI,KAAKJ,OAAOa,OAAO;IAAC,GAAGZ;IAC5EhD,uBACEE,oBAAoB2D,iBAAiB,EACrC;QAAEV,KAAK7C,oCAAoCuC;IAAM,GACjDG;IAEFhD,uBAAuBE,oBAAoByD,OAAO,EAAE;QAAER,KAAK5C,2BAA2BsC;IAAM,GAAGG;IAC/FhD,uBACEE,oBAAoB4D,mBAAmB,EACvC;QAAEX,KAAK/C,uCAAuCyC;IAAM,GACpDG;AAEJ"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/register-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { OUTREACH_API_ROUTES } from '../constants/api-routes'\nimport { outreachOrgSubject } from '../mailboxes/register-mailbox-routes'\nimport { createOutreachDoNotContactDomainsRoute } from './do-not-contact-routes'\nimport { createOutreachEnrollRoutes, type OutreachEnrollRouteDeps } from './enroll-routes'\nimport { createOutreachEnrollmentActionRoute } from './enrollment-routes'\nimport { createOutreachPreviewRoute } from './preview-routes'\nimport type { OutreachRouteGateDeps } from './route-gate'\nimport { createOutreachSequenceRoutes } from './sequence-routes'\nimport { createOutreachSettingsRoute } from './settings-routes'\n\n/**\n * Wires the settings, sequence and enrollment routes into the console\n * dispatcher (AGL-2980) with the platform's own dependencies. Specs build\n * their own.\n *\n * Every one names its organization (`orgId`, in the query or the JSON body)\n * and none names a site, so each declares the mailbox routes' subject reader:\n * the dispatcher's release gate then asks about that organization, and a\n * `release_outreach` override for one organization reaches these routes as it\n * reaches Mailboxes. Without it the gate reads the request as anonymous, which\n * only a fully enabled flag or a staff session passes.\n */\n\n/** The platform's heavier modules, loaded the first time a request needs one. */\nconst platform = () => import('./platform-deps')\n\n/** The gate's reach into the platform. */\nexport function defaultOutreachRouteGateDeps(): OutreachRouteGateDeps {\n  return {\n    verifyIdToken: (idToken) => firebaseAdmin.app().auth().verifyIdToken(idToken),\n    resolveOrgPermissions: async (uid, context) => (await platform()).resolveOrgPermissions(uid, context),\n    holdsOrgCatalogPermission: async (uid, orgId, key) =>\n      (await platform()).holdsOrgCatalogPermission(uid, orgId, key),\n    readOrg: async (orgId) => {\n      const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).get()\n      return snapshot.exists ? (snapshot.data() ?? {}) : null\n    },\n    lockdownRefusal: async (options) => (await platform()).lockdownRefusal(options),\n  }\n}\n\nexport function defaultOutreachRouteDeps(): OutreachEnrollRouteDeps {\n  return {\n    firestore: () => firebaseAdmin.app().firestore(),\n    gate: defaultOutreachRouteGateDeps(),\n    now: Date.now,\n    random: Math.random,\n    logOrgActivity: async (orgId, actor, action, target) =>\n      (await platform()).logOrgActivity(orgId, actor, action, target),\n    crmViewEmails: async (input) => (await platform()).crmViewEmails(input),\n    stampRecordEmailState: async (stamp) => {\n      await (await platform()).stampRecordEmailState(stamp)\n    },\n  }\n}\n\nexport function registerOutreachRoutes(\n  deps: OutreachEnrollRouteDeps = defaultOutreachRouteDeps(),\n): void {\n  const sequences = createOutreachSequenceRoutes(deps)\n  const enroll = createOutreachEnrollRoutes(deps)\n  const orgSubject = { subject: outreachOrgSubject }\n  registerPluginApiRoute(OUTREACH_API_ROUTES.settings, { web: createOutreachSettingsRoute(deps) }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesSave, { web: sequences.save }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesStatus, { web: sequences.status }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesDelete, { web: sequences.remove }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enrollPreview, { web: enroll.preview }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enroll, { web: enroll.confirm }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.enrollmentsAction,\n    { web: createOutreachEnrollmentActionRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(OUTREACH_API_ROUTES.preview, { web: createOutreachPreviewRoute(deps) }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.doNotContactDomains,\n    { web: createOutreachDoNotContactDomainsRoute(deps) },\n    orgSubject,\n  )\n}\n"],"names":["registerPluginApiRoute","firebaseAdmin","OUTREACH_API_ROUTES","outreachOrgSubject","createOutreachDoNotContactDomainsRoute","createOutreachEnrollRoutes","createOutreachEnrollmentActionRoute","createOutreachPreviewRoute","createOutreachSequenceRoutes","createOutreachSettingsRoute","platform","defaultOutreachRouteGateDeps","verifyIdToken","idToken","app","auth","resolveOrgPermissions","uid","context","holdsOrgCatalogPermission","orgId","key","readOrg","snapshot","firestore","collection","doc","get","exists","data","lockdownRefusal","options","defaultOutreachRouteDeps","gate","now","Date","random","Math","logOrgActivity","actor","action","target","crmViewEmails","input","stampRecordEmailState","stamp","registerOutreachRoutes","deps","sequences","enroll","orgSubject","subject","settings","web","sequencesSave","save","sequencesStatus","status","sequencesDelete","remove","enrollPreview","preview","confirm","enrollmentsAction","doNotContactDomains"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,0CAAsC;AACzE,SAASC,sCAAsC,QAAQ,6BAAyB;AAChF,SAASC,0BAA0B,QAAsC,qBAAiB;AAC1F,SAASC,mCAAmC,QAAQ,yBAAqB;AACzE,SAASC,0BAA0B,QAAQ,sBAAkB;AAE7D,SAASC,4BAA4B,QAAQ,uBAAmB;AAChE,SAASC,2BAA2B,QAAQ,uBAAmB;AAE/D;;;;;;;;;;;CAWC,GAED,+EAA+E,GAC/E,MAAMC,WAAW,IAAM,MAAM,CAAC;AAE9B,wCAAwC,GACxC,OAAO,SAASC;IACd,OAAO;QACLC,eAAe,CAACC,UAAYZ,cAAca,GAAG,GAAGC,IAAI,GAAGH,aAAa,CAACC;QACrEG,uBAAuB,OAAOC,KAAKC,UAAY,AAAC,CAAA,MAAMR,UAAS,EAAGM,qBAAqB,CAACC,KAAKC;QAC7FC,2BAA2B,OAAOF,KAAKG,OAAOC,MAC5C,AAAC,CAAA,MAAMX,UAAS,EAAGS,yBAAyB,CAACF,KAAKG,OAAOC;QAC3DC,SAAS,OAAOF;gBAEYG;YAD1B,MAAMA,WAAW,MAAMtB,cAAca,GAAG,GAAGU,SAAS,GAAGC,UAAU,CAAC,QAAQC,GAAG,CAACN,OAAOO,GAAG;YACxF,OAAOJ,SAASK,MAAM,IAAIL,iBAAAA,SAASM,IAAI,cAAbN,iBAAmB,CAAC,IAAK;QACrD;QACAO,iBAAiB,OAAOC,UAAY,AAAC,CAAA,MAAMrB,UAAS,EAAGoB,eAAe,CAACC;IACzE;AACF;AAEA,OAAO,SAASC;IACd,OAAO;QACLR,WAAW,IAAMvB,cAAca,GAAG,GAAGU,SAAS;QAC9CS,MAAMtB;QACNuB,KAAKC,KAAKD,GAAG;QACbE,QAAQC,KAAKD,MAAM;QACnBE,gBAAgB,OAAOlB,OAAOmB,OAAOC,QAAQC,SAC3C,AAAC,CAAA,MAAM/B,UAAS,EAAG4B,cAAc,CAAClB,OAAOmB,OAAOC,QAAQC;QAC1DC,eAAe,OAAOC,QAAU,AAAC,CAAA,MAAMjC,UAAS,EAAGgC,aAAa,CAACC;QACjEC,uBAAuB,OAAOC;YAC5B,MAAM,AAAC,CAAA,MAAMnC,UAAS,EAAGkC,qBAAqB,CAACC;QACjD;IACF;AACF;AAEA,OAAO,SAASC,uBACdC,OAAgCf,0BAA0B;IAE1D,MAAMgB,YAAYxC,6BAA6BuC;IAC/C,MAAME,SAAS5C,2BAA2B0C;IAC1C,MAAMG,aAAa;QAAEC,SAAShD;IAAmB;IACjDH,uBAAuBE,oBAAoBkD,QAAQ,EAAE;QAAEC,KAAK5C,4BAA4BsC;IAAM,GAAGG;IACjGlD,uBAAuBE,oBAAoBoD,aAAa,EAAE;QAAED,KAAKL,UAAUO,IAAI;IAAC,GAAGL;IACnFlD,uBAAuBE,oBAAoBsD,eAAe,EAAE;QAAEH,KAAKL,UAAUS,MAAM;IAAC,GAAGP;IACvFlD,uBAAuBE,oBAAoBwD,eAAe,EAAE;QAAEL,KAAKL,UAAUW,MAAM;IAAC,GAAGT;IACvFlD,uBAAuBE,oBAAoB0D,aAAa,EAAE;QAAEP,KAAKJ,OAAOY,OAAO;IAAC,GAAGX;IACnFlD,uBAAuBE,oBAAoB+C,MAAM,EAAE;QAAEI,KAAKJ,OAAOa,OAAO;IAAC,GAAGZ;IAC5ElD,uBACEE,oBAAoB6D,iBAAiB,EACrC;QAAEV,KAAK/C,oCAAoCyC;IAAM,GACjDG;IAEFlD,uBAAuBE,oBAAoB2D,OAAO,EAAE;QAAER,KAAK9C,2BAA2BwC;IAAM,GAAGG;IAC/FlD,uBACEE,oBAAoB8D,mBAAmB,EACvC;QAAEX,KAAKjD,uCAAuC2C;IAAM,GACpDG;AAEJ"}

package/src/lib/routes/route-deps.d.ts

@@ -14,6 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import type { OutreachRecordEmailStamp } from '../runtime/runtime-deps';
 import type { OutreachRouteGateDeps } from './route-gate';
 /**
  * What the settings, sequence and enrollment routes reach outside this
@@ -46,4 +47,9 @@ export interface OutreachRouteDeps {
         uid: string;
         email?: string | null;
     }, action: string, target: OutreachActivityTarget): Promise<void>;
+    /**
+     * Stamps a member's do-not-contact mark on the lead and the contact that
+     * carry the address (AGL-3245); the runtime's twin is on its own deps.
+     */
+    stampRecordEmailState(stamp: OutreachRecordEmailStamp): Promise<void>;
 }