@aglyn/plugins-outreach 1.0.0-beta.195 → 1.0.0-beta.197

package/src/lib/routes/preview-routes.js

@@ -20,6 +20,7 @@ import { normalizeCrmEmailTemplate } from "@aglyn/aglyn/app-utils/crm-email-temp
 import { visibleToHost } from "@aglyn/aglyn/app-utils/scope-tokens";
 import { firstEmailStepIndex } from "../engine/sequence-validation.js";
 import { leadAsContact } from "../enrollment/enroll-people.js";
+import { outreachStepOverridesRefused, readOutreachStepOverrideRequests } from "../enrollment/step-overrides.js";
 import { OUTREACH_SAMPLE_PERSON, outreachSampleMergeContext, previewOutreachStep } from "../model/step-preview.js";
 import { readOutreachComplianceSettingsDoc } from "../storage/compliance-settings-store.js";
 import { outreachOrgCollection, readStoredOutreachMailbox, readStoredOutreachSequence } from "../storage/outreach-records.js";
@@ -27,100 +28,117 @@ import { OUTREACH_READS_PEOPLE } from "./enroll-routes.js";
 import { outreachRouteGate } from "./route-gate.js";
 import { outreachMethodNotAllowed, outreachOk, outreachRefusal, readOutreachDocumentId, readOutreachJsonBody } from "./route-http.js";
 /**
- * ONE EMAIL OF A SAVED SEQUENCE, AS A PERSON WOULD GET IT (AGL-2980):
- * `outreach/preview`.
- *
- * Written from what is stored — the sequence, the CRM template a step names,
- * the mailbox it sends as, the organization's footer — by the engine's own
- * composer (`previewOutreachStep`), for a real contact with the personal
- * line the rep is writing, or for a sample person. The enroll dialog shows
- * it beside each person before Confirm, so the rep reads the sentence they
- * wrote in the email it goes into.
- *
- * A real contact is read from the CRM, so naming one asks for `data.manage`
- * as enrolling does; the sample person asks for nothing more.
- */ export function createOutreachPreviewRoute(deps) {
-    return async (request)=>{
-        var _host_get, _normalizeContactEmail, _ref, _ref1;
-        var _result_email, _result_email1;
-        if (request.method !== 'POST') return outreachMethodNotAllowed('POST');
-        const body = await readOutreachJsonBody(request);
-        const contactId = body['contactId'] === undefined ? null : readOutreachDocumentId(body['contactId']);
-        if (body['contactId'] !== undefined && !contactId) {
-            return outreachRefusal(400, 'invalid-request', 'Name the contact to preview for.');
-        }
-        // A lead the sequence's site holds (AGL-3234), previewed as the contact it would be.
-        const leadId = body['leadId'] === undefined ? null : readOutreachDocumentId(body['leadId']);
-        if (body['leadId'] !== undefined && !leadId) {
-            return outreachRefusal(400, 'invalid-request', 'Name the lead to preview for.');
-        }
-        const caller = await outreachRouteGate(request, body['orgId'], deps.gate, contactId || leadId ? [
-            OUTREACH_READS_PEOPLE
-        ] : []);
-        if (caller instanceof Response) return caller;
-        const sequenceId = readOutreachDocumentId(body['sequenceId']);
-        if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to preview.');
-        const firestore = deps.firestore();
-        const org = firestore.collection('orgs').doc(caller.orgId);
-        const snapshot = await outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(sequenceId).get();
-        const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined);
-        if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.');
-        const requested = body['stepIndex'];
-        const stepIndex = typeof requested === 'number' ? requested : firstEmailStepIndex(sequence.steps);
-        const step = sequence.steps[stepIndex];
-        if ((step == null ? void 0 : step.kind) !== 'email') {
-            return outreachRefusal(400, 'invalid-request', 'That step does not send an email.');
-        }
-        const [orgSettings, mailboxSnapshot, host, template, contact, lead] = await Promise.all([
-            readOutreachComplianceSettingsDoc(firestore, caller.orgId),
-            sequence.mailboxId ? outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get() : null,
-            sequence.hostId ? firestore.collection('hosts').doc(sequence.hostId).get() : null,
-            step.templateId ? org.collection(CRM_COLLECTIONS.emailTemplates).doc(step.templateId).get() : null,
-            contactId ? org.collection('contacts').doc(contactId).get() : null,
-            // One org row (AGL-3275); the site is still required because a lead
-            // preview is rendered in a site's context.
-            leadId && sequence.hostId ? org.collection('leads').doc(leadId).get() : null
-        ]);
-        const leadData = (lead == null ? void 0 : lead.exists) ? lead.data() : null;
-        if (leadId && !leadData) {
-            return outreachRefusal(404, 'contact-not-found', "That lead isn't in this sequence's site's CRM.");
-        }
-        const contactGroupId = consentGroupForHost(caller.org, sequence.hostId).groupId;
-        const contactData = (contact == null ? void 0 : contact.exists) ? contact.data() : leadData ? leadAsContact(leadData, contactGroupId) : null;
-        if (contactId && (!contactData || !visibleToHost(contactData['visibleTo'], sequence.hostId))) {
-            return outreachRefusal(404, 'contact-not-found', "That contact isn't in this sequence's site's CRM.");
-        }
-        const mailbox = readStoredOutreachMailbox(sequence.mailboxId, (mailboxSnapshot == null ? void 0 : mailboxSnapshot.exists) ? mailboxSnapshot.data() : undefined);
-        const sender = mailbox ? {
-            name: mailbox.displayName,
-            email: mailbox.sendAs || mailbox.email
-        } : null;
-        const siteName = (host == null ? void 0 : host.exists) ? String((_host_get = host.get('name')) != null ? _host_get : '') : '';
-        const merge = contactData ? {
-            contact: contactData,
-            contactGroupId,
-            lead: leadData,
-            sender,
-            site: {
-                name: siteName
-            }
-        } : outreachSampleMergeContext({
-            sender,
-            siteName
+ * The gate, then the sequence, the step and everything the step is rendered
+ * from — as the request body names them — or the refusal that stops it.
+ */ export async function readOutreachStepRender(deps, request, body) {
+    var _host_get, _normalizeContactEmail;
+    const contactId = body['contactId'] === undefined ? null : readOutreachDocumentId(body['contactId']);
+    if (body['contactId'] !== undefined && !contactId) {
+        return outreachRefusal(400, 'invalid-request', 'Name the contact to preview for.');
+    }
+    // A lead the sequence's site holds (AGL-3234), previewed as the contact it would be.
+    const leadId = body['leadId'] === undefined ? null : readOutreachDocumentId(body['leadId']);
+    if (body['leadId'] !== undefined && !leadId) {
+        return outreachRefusal(400, 'invalid-request', 'Name the lead to preview for.');
+    }
+    const caller = await outreachRouteGate(request, body['orgId'], deps.gate, contactId || leadId ? [
+        OUTREACH_READS_PEOPLE
+    ] : []);
+    if (caller instanceof Response) return caller;
+    const sequenceId = readOutreachDocumentId(body['sequenceId']);
+    if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to preview.');
+    const firestore = deps.firestore();
+    const org = firestore.collection('orgs').doc(caller.orgId);
+    const snapshot = await outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(sequenceId).get();
+    const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined);
+    if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.');
+    const requested = body['stepIndex'];
+    const stepIndex = typeof requested === 'number' ? requested : firstEmailStepIndex(sequence.steps);
+    const step = sequence.steps[stepIndex];
+    if ((step == null ? void 0 : step.kind) !== 'email') {
+        return outreachRefusal(400, 'invalid-request', 'That step does not send an email.');
+    }
+    // The person's copies of steps as the dialog holds them (AGL-3324): the
+    // preview shows the curated version, held to the rules a stored one is —
+    // and a test send (AGL-3325) sends it.
+    const overrides = readOutreachStepOverrideRequests(body['stepOverrides'], sequence.steps, {
+        uid: caller.uid,
+        nowMs: deps.now()
+    });
+    if (outreachStepOverridesRefused(overrides)) {
+        var _overrides_refusal;
+        return outreachRefusal(400, 'invalid-override', (_overrides_refusal = overrides.refusal) != null ? _overrides_refusal : 'A curated step breaks a rule every sequence email keeps.', {
+            issues: overrides.issues
         });
-        const personalLine = typeof body['personalLine'] === 'string' ? body['personalLine'] : contactData ? '' : OUTREACH_SAMPLE_PERSON.personalLine;
-        const result = previewOutreachStep({
+    }
+    const [orgSettings, mailboxSnapshot, host, template, contact, lead] = await Promise.all([
+        readOutreachComplianceSettingsDoc(firestore, caller.orgId),
+        sequence.mailboxId ? outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get() : null,
+        sequence.hostId ? firestore.collection('hosts').doc(sequence.hostId).get() : null,
+        step.templateId ? org.collection(CRM_COLLECTIONS.emailTemplates).doc(step.templateId).get() : null,
+        contactId ? org.collection('contacts').doc(contactId).get() : null,
+        // One org row (AGL-3275); the site is still required because a lead
+        // preview is rendered in a site's context.
+        leadId && sequence.hostId ? org.collection('leads').doc(leadId).get() : null
+    ]);
+    const leadData = (lead == null ? void 0 : lead.exists) ? lead.data() : null;
+    if (leadId && !leadData) {
+        return outreachRefusal(404, 'contact-not-found', "That lead isn't in this sequence's site's CRM.");
+    }
+    const contactGroupId = consentGroupForHost(caller.org, sequence.hostId).groupId;
+    const contactData = (contact == null ? void 0 : contact.exists) ? contact.data() : leadData ? leadAsContact(leadData, contactGroupId) : null;
+    if (contactId && (!contactData || !visibleToHost(contactData['visibleTo'], sequence.hostId))) {
+        return outreachRefusal(404, 'contact-not-found', "That contact isn't in this sequence's site's CRM.");
+    }
+    const mailbox = readStoredOutreachMailbox(sequence.mailboxId, (mailboxSnapshot == null ? void 0 : mailboxSnapshot.exists) ? mailboxSnapshot.data() : undefined);
+    const sender = mailbox ? {
+        name: mailbox.displayName,
+        email: mailbox.sendAs || mailbox.email
+    } : null;
+    const siteName = (host == null ? void 0 : host.exists) ? String((_host_get = host.get('name')) != null ? _host_get : '') : '';
+    const merge = contactData ? {
+        contact: contactData,
+        contactGroupId,
+        lead: leadData,
+        sender,
+        site: {
+            name: siteName
+        }
+    } : outreachSampleMergeContext({
+        sender,
+        siteName
+    });
+    const personalLine = typeof body['personalLine'] === 'string' ? body['personalLine'] : contactData ? '' : OUTREACH_SAMPLE_PERSON.personalLine;
+    return {
+        caller,
+        sequence,
+        stepIndex,
+        step,
+        mailbox,
+        input: {
             steps: sequence.steps,
             stepIndex,
             orgSettings,
             merge,
             email: contactData ? (_normalizeContactEmail = normalizeContactEmail(contactData['email'])) != null ? _normalizeContactEmail : '' : OUTREACH_SAMPLE_PERSON.email,
             personalLine,
-            templateBody: (template == null ? void 0 : template.exists) ? normalizeCrmEmailTemplate(template.data()).body : null
-        });
+            templateBody: (template == null ? void 0 : template.exists) ? normalizeCrmEmailTemplate(template.data()).body : null,
+            stepOverrides: overrides.overrides
+        }
+    };
+}
+export function createOutreachPreviewRoute(deps) {
+    return async (request)=>{
+        var _ref, _ref1;
+        var _result_email, _result_email1;
+        if (request.method !== 'POST') return outreachMethodNotAllowed('POST');
+        const body = await readOutreachJsonBody(request);
+        const loaded = await readOutreachStepRender(deps, request, body);
+        if (loaded instanceof Response) return loaded;
+        const result = previewOutreachStep(loaded.input);
         return outreachOk({
             ok: true,
-            stepIndex,
+            stepIndex: loaded.stepIndex,
             subject: (_ref = (_result_email = result.email) == null ? void 0 : _result_email.subject) != null ? _ref : '',
             text: (_ref1 = (_result_email1 = result.email) == null ? void 0 : _result_email1.text) != null ? _ref1 : '',
             unresolvedFields: result.unresolvedFields,

package/src/lib/routes/preview-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/preview-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { consentGroupForHost } from '@aglyn/aglyn/app-utils/consent-groups'\nimport { normalizeContactEmail } from '@aglyn/aglyn/app-utils/contacts'\nimport { CRM_COLLECTIONS } from '@aglyn/aglyn/app-utils/crm'\nimport { normalizeCrmEmailTemplate } from '@aglyn/aglyn/app-utils/crm-email-templates'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { firstEmailStepIndex } from '../engine/sequence-validation'\nimport { leadAsContact } from '../enrollment/enroll-people'\nimport type { OutreachPreviewResponse } from '../model/outreach-api'\nimport {\n  OUTREACH_SAMPLE_PERSON,\n  outreachSampleMergeContext,\n  previewOutreachStep,\n} from '../model/step-preview'\nimport { readOutreachComplianceSettingsDoc } from '../storage/compliance-settings-store'\nimport {\n  outreachOrgCollection,\n  readStoredOutreachMailbox,\n  readStoredOutreachSequence,\n} from '../storage/outreach-records'\nimport { OUTREACH_READS_PEOPLE } from './enroll-routes'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * ONE EMAIL OF A SAVED SEQUENCE, AS A PERSON WOULD GET IT (AGL-2980):\n * `outreach/preview`.\n *\n * Written from what is stored — the sequence, the CRM template a step names,\n * the mailbox it sends as, the organization's footer — by the engine's own\n * composer (`previewOutreachStep`), for a real contact with the personal\n * line the rep is writing, or for a sample person. The enroll dialog shows\n * it beside each person before Confirm, so the rep reads the sentence they\n * wrote in the email it goes into.\n *\n * A real contact is read from the CRM, so naming one asks for `data.manage`\n * as enrolling does; the sample person asks for nothing more.\n */\n\nexport function createOutreachPreviewRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const contactId = body['contactId'] === undefined ? null : readOutreachDocumentId(body['contactId'])\n    if (body['contactId'] !== undefined && !contactId) {\n      return outreachRefusal(400, 'invalid-request', 'Name the contact to preview for.')\n    }\n    // A lead the sequence's site holds (AGL-3234), previewed as the contact it would be.\n    const leadId = body['leadId'] === undefined ? null : readOutreachDocumentId(body['leadId'])\n    if (body['leadId'] !== undefined && !leadId) {\n      return outreachRefusal(400, 'invalid-request', 'Name the lead to preview for.')\n    }\n    const caller = await outreachRouteGate(\n      request,\n      body['orgId'],\n      deps.gate,\n      contactId || leadId ? [OUTREACH_READS_PEOPLE] : [],\n    )\n    if (caller instanceof Response) return caller\n    const sequenceId = readOutreachDocumentId(body['sequenceId'])\n    if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to preview.')\n    const firestore = deps.firestore()\n    const org = firestore.collection('orgs').doc(caller.orgId)\n    const snapshot = await outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(sequenceId).get()\n    const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined)\n    if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n\n    const requested = body['stepIndex']\n    const stepIndex = typeof requested === 'number' ? requested : firstEmailStepIndex(sequence.steps)\n    const step = sequence.steps[stepIndex]\n    if (step?.kind !== 'email') {\n      return outreachRefusal(400, 'invalid-request', 'That step does not send an email.')\n    }\n\n    const [orgSettings, mailboxSnapshot, host, template, contact, lead] = await Promise.all([\n      readOutreachComplianceSettingsDoc(firestore, caller.orgId),\n      sequence.mailboxId ? outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get() : null,\n      sequence.hostId ? firestore.collection('hosts').doc(sequence.hostId).get() : null,\n      step.templateId ? org.collection(CRM_COLLECTIONS.emailTemplates).doc(step.templateId).get() : null,\n      contactId ? org.collection('contacts').doc(contactId).get() : null,\n      // One org row (AGL-3275); the site is still required because a lead\n      // preview is rendered in a site's context.\n      leadId && sequence.hostId ? org.collection('leads').doc(leadId).get() : null,\n    ])\n    const leadData = lead?.exists ? (lead.data() as Record<string, unknown>) : null\n    if (leadId && !leadData) {\n      return outreachRefusal(404, 'contact-not-found', \"That lead isn't in this sequence's site's CRM.\")\n    }\n    const contactGroupId = consentGroupForHost(caller.org, sequence.hostId).groupId\n    const contactData = contact?.exists\n      ? (contact.data() as Record<string, unknown>)\n      : leadData\n        ? leadAsContact(leadData, contactGroupId)\n        : null\n    if (\n      contactId &&\n      (!contactData || !visibleToHost(contactData['visibleTo'] as string[] | undefined, sequence.hostId))\n    ) {\n      return outreachRefusal(404, 'contact-not-found', \"That contact isn't in this sequence's site's CRM.\")\n    }\n    const mailbox = readStoredOutreachMailbox(\n      sequence.mailboxId,\n      mailboxSnapshot?.exists ? mailboxSnapshot.data() : undefined,\n    )\n    const sender = mailbox ? { name: mailbox.displayName, email: mailbox.sendAs || mailbox.email } : null\n    const siteName = host?.exists ? String(host.get('name') ?? '') : ''\n    const merge = contactData\n      ? {\n          contact: contactData,\n          contactGroupId,\n          lead: leadData,\n          sender,\n          site: { name: siteName },\n        }\n      : outreachSampleMergeContext({ sender, siteName })\n    const personalLine =\n      typeof body['personalLine'] === 'string'\n        ? body['personalLine']\n        : contactData\n          ? ''\n          : OUTREACH_SAMPLE_PERSON.personalLine\n    const result = previewOutreachStep({\n      steps: sequence.steps,\n      stepIndex,\n      orgSettings,\n      merge,\n      email: contactData ? (normalizeContactEmail(contactData['email']) ?? '') : OUTREACH_SAMPLE_PERSON.email,\n      personalLine,\n      templateBody: template?.exists\n        ? normalizeCrmEmailTemplate(template.data() as Record<string, unknown>).body\n        : null,\n    })\n    return outreachOk({\n      ok: true,\n      stepIndex,\n      subject: result.email?.subject ?? '',\n      text: result.email?.text ?? '',\n      unresolvedFields: result.unresolvedFields,\n      error: result.error,\n    } satisfies OutreachPreviewResponse)\n  }\n}\n"],"names":["consentGroupForHost","normalizeContactEmail","CRM_COLLECTIONS","normalizeCrmEmailTemplate","visibleToHost","firstEmailStepIndex","leadAsContact","OUTREACH_SAMPLE_PERSON","outreachSampleMergeContext","previewOutreachStep","readOutreachComplianceSettingsDoc","outreachOrgCollection","readStoredOutreachMailbox","readStoredOutreachSequence","OUTREACH_READS_PEOPLE","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","createOutreachPreviewRoute","deps","request","host","result","method","body","contactId","undefined","leadId","caller","gate","Response","sequenceId","firestore","org","collection","doc","orgId","snapshot","get","sequence","exists","data","requested","stepIndex","steps","step","kind","orgSettings","mailboxSnapshot","template","contact","lead","Promise","all","mailboxId","hostId","templateId","emailTemplates","leadData","contactGroupId","groupId","contactData","mailbox","sender","name","displayName","email","sendAs","siteName","String","merge","site","personalLine","templateBody","ok","subject","text","unresolvedFields","error"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,qBAAqB,QAAQ,kCAAiC;AACvE,SAASC,eAAe,QAAQ,6BAA4B;AAC5D,SAASC,yBAAyB,QAAQ,6CAA4C;AACtF,SAASC,aAAa,QAAQ,sCAAqC;AAEnE,SAASC,mBAAmB,QAAQ,mCAA+B;AACnE,SAASC,aAAa,QAAQ,iCAA6B;AAE3D,SACEC,sBAAsB,EACtBC,0BAA0B,EAC1BC,mBAAmB,QACd,2BAAuB;AAC9B,SAASC,iCAAiC,QAAQ,0CAAsC;AACxF,SACEC,qBAAqB,EACrBC,yBAAyB,EACzBC,0BAA0B,QACrB,iCAA6B;AACpC,SAASC,qBAAqB,QAAQ,qBAAiB;AAEvD,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;CAaC,GAED,OAAO,SAASC,2BAA2BC,IAAuB;IAChE,OAAO,OAAOC;YAiE2BC,WAqBfvB;YASbwB,eACHA;QA/FR,IAAIF,QAAQG,MAAM,KAAK,QAAQ,OAAOV,yBAAyB;QAC/D,MAAMW,OAAO,MAAMP,qBAAqBG;QACxC,MAAMK,YAAYD,IAAI,CAAC,YAAY,KAAKE,YAAY,OAAOV,uBAAuBQ,IAAI,CAAC,YAAY;QACnG,IAAIA,IAAI,CAAC,YAAY,KAAKE,aAAa,CAACD,WAAW;YACjD,OAAOV,gBAAgB,KAAK,mBAAmB;QACjD;QACA,qFAAqF;QACrF,MAAMY,SAASH,IAAI,CAAC,SAAS,KAAKE,YAAY,OAAOV,uBAAuBQ,IAAI,CAAC,SAAS;QAC1F,IAAIA,IAAI,CAAC,SAAS,KAAKE,aAAa,CAACC,QAAQ;YAC3C,OAAOZ,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMa,SAAS,MAAMhB,kBACnBQ,SACAI,IAAI,CAAC,QAAQ,EACbL,KAAKU,IAAI,EACTJ,aAAaE,SAAS;YAAChB;SAAsB,GAAG,EAAE;QAEpD,IAAIiB,kBAAkBE,UAAU,OAAOF;QACvC,MAAMG,aAAaf,uBAAuBQ,IAAI,CAAC,aAAa;QAC5D,IAAI,CAACO,YAAY,OAAOhB,gBAAgB,KAAK,mBAAmB;QAChE,MAAMiB,YAAYb,KAAKa,SAAS;QAChC,MAAMC,MAAMD,UAAUE,UAAU,CAAC,QAAQC,GAAG,CAACP,OAAOQ,KAAK;QACzD,MAAMC,WAAW,MAAM7B,sBAAsBwB,WAAWJ,OAAOQ,KAAK,EAAE,aAAaD,GAAG,CAACJ,YAAYO,GAAG;QACtG,MAAMC,WAAW7B,2BAA2BqB,YAAYM,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKf;QAC5F,IAAI,CAACa,UAAU,OAAOxB,gBAAgB,KAAK,sBAAsB;QAEjE,MAAM2B,YAAYlB,IAAI,CAAC,YAAY;QACnC,MAAMmB,YAAY,OAAOD,cAAc,WAAWA,YAAYxC,oBAAoBqC,SAASK,KAAK;QAChG,MAAMC,OAAON,SAASK,KAAK,CAACD,UAAU;QACtC,IAAIE,CAAAA,wBAAAA,KAAMC,IAAI,MAAK,SAAS;YAC1B,OAAO/B,gBAAgB,KAAK,mBAAmB;QACjD;QAEA,MAAM,CAACgC,aAAaC,iBAAiB3B,MAAM4B,UAAUC,SAASC,KAAK,GAAG,MAAMC,QAAQC,GAAG,CAAC;YACtF9C,kCAAkCyB,WAAWJ,OAAOQ,KAAK;YACzDG,SAASe,SAAS,GAAG9C,sBAAsBwB,WAAWJ,OAAOQ,KAAK,EAAE,aAAaD,GAAG,CAACI,SAASe,SAAS,EAAEhB,GAAG,KAAK;YACjHC,SAASgB,MAAM,GAAGvB,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACI,SAASgB,MAAM,EAAEjB,GAAG,KAAK;YAC7EO,KAAKW,UAAU,GAAGvB,IAAIC,UAAU,CAACnC,gBAAgB0D,cAAc,EAAEtB,GAAG,CAACU,KAAKW,UAAU,EAAElB,GAAG,KAAK;YAC9Fb,YAAYQ,IAAIC,UAAU,CAAC,YAAYC,GAAG,CAACV,WAAWa,GAAG,KAAK;YAC9D,oEAAoE;YACpE,2CAA2C;YAC3CX,UAAUY,SAASgB,MAAM,GAAGtB,IAAIC,UAAU,CAAC,SAASC,GAAG,CAACR,QAAQW,GAAG,KAAK;SACzE;QACD,MAAMoB,WAAWP,CAAAA,wBAAAA,KAAMX,MAAM,IAAIW,KAAKV,IAAI,KAAiC;QAC3E,IAAId,UAAU,CAAC+B,UAAU;YACvB,OAAO3C,gBAAgB,KAAK,qBAAqB;QACnD;QACA,MAAM4C,iBAAiB9D,oBAAoB+B,OAAOK,GAAG,EAAEM,SAASgB,MAAM,EAAEK,OAAO;QAC/E,MAAMC,cAAcX,CAAAA,2BAAAA,QAASV,MAAM,IAC9BU,QAAQT,IAAI,KACbiB,WACEvD,cAAcuD,UAAUC,kBACxB;QACN,IACElC,aACC,CAAA,CAACoC,eAAe,CAAC5D,cAAc4D,WAAW,CAAC,YAAY,EAA0BtB,SAASgB,MAAM,CAAA,GACjG;YACA,OAAOxC,gBAAgB,KAAK,qBAAqB;QACnD;QACA,MAAM+C,UAAUrD,0BACd8B,SAASe,SAAS,EAClBN,CAAAA,mCAAAA,gBAAiBR,MAAM,IAAGQ,gBAAgBP,IAAI,KAAKf;QAErD,MAAMqC,SAASD,UAAU;YAAEE,MAAMF,QAAQG,WAAW;YAAEC,OAAOJ,QAAQK,MAAM,IAAIL,QAAQI,KAAK;QAAC,IAAI;QACjG,MAAME,WAAW/C,CAAAA,wBAAAA,KAAMmB,MAAM,IAAG6B,QAAOhD,YAAAA,KAAKiB,GAAG,CAAC,mBAATjB,YAAoB,MAAM;QACjE,MAAMiD,QAAQT,cACV;YACEX,SAASW;YACTF;YACAR,MAAMO;YACNK;YACAQ,MAAM;gBAAEP,MAAMI;YAAS;QACzB,IACA/D,2BAA2B;YAAE0D;YAAQK;QAAS;QAClD,MAAMI,eACJ,OAAOhD,IAAI,CAAC,eAAe,KAAK,WAC5BA,IAAI,CAAC,eAAe,GACpBqC,cACE,KACAzD,uBAAuBoE,YAAY;QAC3C,MAAMlD,SAAShB,oBAAoB;YACjCsC,OAAOL,SAASK,KAAK;YACrBD;YACAI;YACAuB;YACAJ,OAAOL,eAAe/D,yBAAAA,sBAAsB+D,WAAW,CAAC,QAAQ,aAA1C/D,yBAA+C,KAAMM,uBAAuB8D,KAAK;YACvGM;YACAC,cAAcxB,CAAAA,4BAAAA,SAAUT,MAAM,IAC1BxC,0BAA0BiD,SAASR,IAAI,IAA+BjB,IAAI,GAC1E;QACN;QACA,OAAOV,WAAW;YAChB4D,IAAI;YACJ/B;YACAgC,OAAO,WAAErD,gBAAAA,OAAO4C,KAAK,qBAAZ5C,cAAcqD,OAAO,mBAAI;YAClCC,IAAI,YAAEtD,iBAAAA,OAAO4C,KAAK,qBAAZ5C,eAAcsD,IAAI,oBAAI;YAC5BC,kBAAkBvD,OAAOuD,gBAAgB;YACzCC,OAAOxD,OAAOwD,KAAK;QACrB;IACF;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/preview-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { consentGroupForHost } from '@aglyn/aglyn/app-utils/consent-groups'\nimport { normalizeContactEmail } from '@aglyn/aglyn/app-utils/contacts'\nimport { CRM_COLLECTIONS } from '@aglyn/aglyn/app-utils/crm'\nimport { normalizeCrmEmailTemplate } from '@aglyn/aglyn/app-utils/crm-email-templates'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { firstEmailStepIndex } from '../engine/sequence-validation'\nimport { leadAsContact } from '../enrollment/enroll-people'\nimport { outreachStepOverridesRefused, readOutreachStepOverrideRequests } from '../enrollment/step-overrides'\nimport type { OutreachPreviewResponse } from '../model/outreach-api'\nimport type { OutreachEmailStep, OutreachMailbox, OutreachSequence } from '../model/outreach.types'\nimport {\n  OUTREACH_SAMPLE_PERSON,\n  outreachSampleMergeContext,\n  previewOutreachStep,\n  type OutreachStepPreviewInput,\n} from '../model/step-preview'\nimport { readOutreachComplianceSettingsDoc } from '../storage/compliance-settings-store'\nimport {\n  outreachOrgCollection,\n  readStoredOutreachMailbox,\n  readStoredOutreachSequence,\n} from '../storage/outreach-records'\nimport { OUTREACH_READS_PEOPLE } from './enroll-routes'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate, type OutreachRouteCaller } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * ONE EMAIL OF A SAVED SEQUENCE, AS A PERSON WOULD GET IT (AGL-2980):\n * `outreach/preview`.\n *\n * Written from what is stored — the sequence, the CRM template a step names,\n * the mailbox it sends as, the organization's footer — by the engine's own\n * composer (`previewOutreachStep`), for a real contact with the personal\n * line the rep is writing, or for a sample person. The enroll dialog shows\n * it beside each person before Confirm, so the rep reads the sentence they\n * wrote in the email it goes into.\n *\n * A real contact is read from the CRM, so naming one asks for `data.manage`\n * as enrolling does; the sample person asks for nothing more.\n *\n * The reading is {@link readOutreachStepRender}, shared with the test send\n * (`step-test-routes.ts`, AGL-3325): a test is the preview's own email,\n * sent — so both routes read the same records through the same gate, and\n * what a member reads on screen is what arrives in their inbox.\n */\n\n/** What a preview and a test both read before the composer runs. */\nexport interface OutreachStepRender {\n  caller: OutreachRouteCaller\n  sequence: OutreachSequence\n  stepIndex: number\n  step: OutreachEmailStep\n  /** The sequence's mailbox as stored, or `null` when it names none or the mailbox is gone. */\n  mailbox: OutreachMailbox | null\n  /** The composer's input: the person, the line, the footer, the template. */\n  input: OutreachStepPreviewInput\n}\n\n/**\n * The gate, then the sequence, the step and everything the step is rendered\n * from — as the request body names them — or the refusal that stops it.\n */\nexport async function readOutreachStepRender(\n  deps: OutreachRouteDeps,\n  request: Request,\n  body: Record<string, unknown>,\n): Promise<Response | OutreachStepRender> {\n  const contactId = body['contactId'] === undefined ? null : readOutreachDocumentId(body['contactId'])\n  if (body['contactId'] !== undefined && !contactId) {\n    return outreachRefusal(400, 'invalid-request', 'Name the contact to preview for.')\n  }\n  // A lead the sequence's site holds (AGL-3234), previewed as the contact it would be.\n  const leadId = body['leadId'] === undefined ? null : readOutreachDocumentId(body['leadId'])\n  if (body['leadId'] !== undefined && !leadId) {\n    return outreachRefusal(400, 'invalid-request', 'Name the lead to preview for.')\n  }\n  const caller = await outreachRouteGate(\n    request,\n    body['orgId'],\n    deps.gate,\n    contactId || leadId ? [OUTREACH_READS_PEOPLE] : [],\n  )\n  if (caller instanceof Response) return caller\n  const sequenceId = readOutreachDocumentId(body['sequenceId'])\n  if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to preview.')\n  const firestore = deps.firestore()\n  const org = firestore.collection('orgs').doc(caller.orgId)\n  const snapshot = await outreachOrgCollection(firestore, caller.orgId, 'sequences').doc(sequenceId).get()\n  const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined)\n  if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n\n  const requested = body['stepIndex']\n  const stepIndex = typeof requested === 'number' ? requested : firstEmailStepIndex(sequence.steps)\n  const step = sequence.steps[stepIndex]\n  if (step?.kind !== 'email') {\n    return outreachRefusal(400, 'invalid-request', 'That step does not send an email.')\n  }\n  // The person's copies of steps as the dialog holds them (AGL-3324): the\n  // preview shows the curated version, held to the rules a stored one is —\n  // and a test send (AGL-3325) sends it.\n  const overrides = readOutreachStepOverrideRequests(body['stepOverrides'], sequence.steps, {\n    uid: caller.uid,\n    nowMs: deps.now(),\n  })\n  if (outreachStepOverridesRefused(overrides)) {\n    return outreachRefusal(\n      400,\n      'invalid-override',\n      overrides.refusal ?? 'A curated step breaks a rule every sequence email keeps.',\n      { issues: overrides.issues },\n    )\n  }\n\n  const [orgSettings, mailboxSnapshot, host, template, contact, lead] = await Promise.all([\n    readOutreachComplianceSettingsDoc(firestore, caller.orgId),\n    sequence.mailboxId ? outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get() : null,\n    sequence.hostId ? firestore.collection('hosts').doc(sequence.hostId).get() : null,\n    step.templateId ? org.collection(CRM_COLLECTIONS.emailTemplates).doc(step.templateId).get() : null,\n    contactId ? org.collection('contacts').doc(contactId).get() : null,\n    // One org row (AGL-3275); the site is still required because a lead\n    // preview is rendered in a site's context.\n    leadId && sequence.hostId ? org.collection('leads').doc(leadId).get() : null,\n  ])\n  const leadData = lead?.exists ? (lead.data() as Record<string, unknown>) : null\n  if (leadId && !leadData) {\n    return outreachRefusal(404, 'contact-not-found', \"That lead isn't in this sequence's site's CRM.\")\n  }\n  const contactGroupId = consentGroupForHost(caller.org, sequence.hostId).groupId\n  const contactData = contact?.exists\n    ? (contact.data() as Record<string, unknown>)\n    : leadData\n      ? leadAsContact(leadData, contactGroupId)\n      : null\n  if (\n    contactId &&\n    (!contactData || !visibleToHost(contactData['visibleTo'] as string[] | undefined, sequence.hostId))\n  ) {\n    return outreachRefusal(404, 'contact-not-found', \"That contact isn't in this sequence's site's CRM.\")\n  }\n  const mailbox = readStoredOutreachMailbox(\n    sequence.mailboxId,\n    mailboxSnapshot?.exists ? mailboxSnapshot.data() : undefined,\n  )\n  const sender = mailbox ? { name: mailbox.displayName, email: mailbox.sendAs || mailbox.email } : null\n  const siteName = host?.exists ? String(host.get('name') ?? '') : ''\n  const merge = contactData\n    ? {\n        contact: contactData,\n        contactGroupId,\n        lead: leadData,\n        sender,\n        site: { name: siteName },\n      }\n    : outreachSampleMergeContext({ sender, siteName })\n  const personalLine =\n    typeof body['personalLine'] === 'string'\n      ? body['personalLine']\n      : contactData\n        ? ''\n        : OUTREACH_SAMPLE_PERSON.personalLine\n  return {\n    caller,\n    sequence,\n    stepIndex,\n    step,\n    mailbox,\n    input: {\n      steps: sequence.steps,\n      stepIndex,\n      orgSettings,\n      merge,\n      email: contactData ? (normalizeContactEmail(contactData['email']) ?? '') : OUTREACH_SAMPLE_PERSON.email,\n      personalLine,\n      templateBody: template?.exists\n        ? normalizeCrmEmailTemplate(template.data() as Record<string, unknown>).body\n        : null,\n      stepOverrides: overrides.overrides,\n    },\n  }\n}\n\nexport function createOutreachPreviewRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const loaded = await readOutreachStepRender(deps, request, body)\n    if (loaded instanceof Response) return loaded\n    const result = previewOutreachStep(loaded.input)\n    return outreachOk({\n      ok: true,\n      stepIndex: loaded.stepIndex,\n      subject: result.email?.subject ?? '',\n      text: result.email?.text ?? '',\n      unresolvedFields: result.unresolvedFields,\n      error: result.error,\n    } satisfies OutreachPreviewResponse)\n  }\n}\n"],"names":["consentGroupForHost","normalizeContactEmail","CRM_COLLECTIONS","normalizeCrmEmailTemplate","visibleToHost","firstEmailStepIndex","leadAsContact","outreachStepOverridesRefused","readOutreachStepOverrideRequests","OUTREACH_SAMPLE_PERSON","outreachSampleMergeContext","previewOutreachStep","readOutreachComplianceSettingsDoc","outreachOrgCollection","readStoredOutreachMailbox","readStoredOutreachSequence","OUTREACH_READS_PEOPLE","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","readOutreachStepRender","deps","request","body","host","contactId","undefined","leadId","caller","gate","Response","sequenceId","firestore","org","collection","doc","orgId","snapshot","get","sequence","exists","data","requested","stepIndex","steps","step","kind","overrides","uid","nowMs","now","refusal","issues","orgSettings","mailboxSnapshot","template","contact","lead","Promise","all","mailboxId","hostId","templateId","emailTemplates","leadData","contactGroupId","groupId","contactData","mailbox","sender","name","displayName","email","sendAs","siteName","String","merge","site","personalLine","input","templateBody","stepOverrides","createOutreachPreviewRoute","result","method","loaded","ok","subject","text","unresolvedFields","error"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,qBAAqB,QAAQ,kCAAiC;AACvE,SAASC,eAAe,QAAQ,6BAA4B;AAC5D,SAASC,yBAAyB,QAAQ,6CAA4C;AACtF,SAASC,aAAa,QAAQ,sCAAqC;AAEnE,SAASC,mBAAmB,QAAQ,mCAA+B;AACnE,SAASC,aAAa,QAAQ,iCAA6B;AAC3D,SAASC,4BAA4B,EAAEC,gCAAgC,QAAQ,kCAA8B;AAG7G,SACEC,sBAAsB,EACtBC,0BAA0B,EAC1BC,mBAAmB,QAEd,2BAAuB;AAC9B,SAASC,iCAAiC,QAAQ,0CAAsC;AACxF,SACEC,qBAAqB,EACrBC,yBAAyB,EACzBC,0BAA0B,QACrB,iCAA6B;AACpC,SAASC,qBAAqB,QAAQ,qBAAiB;AAEvD,SAASC,iBAAiB,QAAkC,kBAAc;AAC1E,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAkCrB;;;CAGC,GACD,OAAO,eAAeC,uBACpBC,IAAuB,EACvBC,OAAgB,EAChBC,IAA6B;QA+EUC,WA2Bb1B;IAxG1B,MAAM2B,YAAYF,IAAI,CAAC,YAAY,KAAKG,YAAY,OAAOR,uBAAuBK,IAAI,CAAC,YAAY;IACnG,IAAIA,IAAI,CAAC,YAAY,KAAKG,aAAa,CAACD,WAAW;QACjD,OAAOR,gBAAgB,KAAK,mBAAmB;IACjD;IACA,qFAAqF;IACrF,MAAMU,SAASJ,IAAI,CAAC,SAAS,KAAKG,YAAY,OAAOR,uBAAuBK,IAAI,CAAC,SAAS;IAC1F,IAAIA,IAAI,CAAC,SAAS,KAAKG,aAAa,CAACC,QAAQ;QAC3C,OAAOV,gBAAgB,KAAK,mBAAmB;IACjD;IACA,MAAMW,SAAS,MAAMd,kBACnBQ,SACAC,IAAI,CAAC,QAAQ,EACbF,KAAKQ,IAAI,EACTJ,aAAaE,SAAS;QAACd;KAAsB,GAAG,EAAE;IAEpD,IAAIe,kBAAkBE,UAAU,OAAOF;IACvC,MAAMG,aAAab,uBAAuBK,IAAI,CAAC,aAAa;IAC5D,IAAI,CAACQ,YAAY,OAAOd,gBAAgB,KAAK,mBAAmB;IAChE,MAAMe,YAAYX,KAAKW,SAAS;IAChC,MAAMC,MAAMD,UAAUE,UAAU,CAAC,QAAQC,GAAG,CAACP,OAAOQ,KAAK;IACzD,MAAMC,WAAW,MAAM3B,sBAAsBsB,WAAWJ,OAAOQ,KAAK,EAAE,aAAaD,GAAG,CAACJ,YAAYO,GAAG;IACtG,MAAMC,WAAW3B,2BAA2BmB,YAAYM,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKf;IAC5F,IAAI,CAACa,UAAU,OAAOtB,gBAAgB,KAAK,sBAAsB;IAEjE,MAAMyB,YAAYnB,IAAI,CAAC,YAAY;IACnC,MAAMoB,YAAY,OAAOD,cAAc,WAAWA,YAAYxC,oBAAoBqC,SAASK,KAAK;IAChG,MAAMC,OAAON,SAASK,KAAK,CAACD,UAAU;IACtC,IAAIE,CAAAA,wBAAAA,KAAMC,IAAI,MAAK,SAAS;QAC1B,OAAO7B,gBAAgB,KAAK,mBAAmB;IACjD;IACA,wEAAwE;IACxE,yEAAyE;IACzE,uCAAuC;IACvC,MAAM8B,YAAY1C,iCAAiCkB,IAAI,CAAC,gBAAgB,EAAEgB,SAASK,KAAK,EAAE;QACxFI,KAAKpB,OAAOoB,GAAG;QACfC,OAAO5B,KAAK6B,GAAG;IACjB;IACA,IAAI9C,6BAA6B2C,YAAY;YAIzCA;QAHF,OAAO9B,gBACL,KACA,qBACA8B,qBAAAA,UAAUI,OAAO,YAAjBJ,qBAAqB,4DACrB;YAAEK,QAAQL,UAAUK,MAAM;QAAC;IAE/B;IAEA,MAAM,CAACC,aAAaC,iBAAiB9B,MAAM+B,UAAUC,SAASC,KAAK,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACtFlD,kCAAkCuB,WAAWJ,OAAOQ,KAAK;QACzDG,SAASqB,SAAS,GAAGlD,sBAAsBsB,WAAWJ,OAAOQ,KAAK,EAAE,aAAaD,GAAG,CAACI,SAASqB,SAAS,EAAEtB,GAAG,KAAK;QACjHC,SAASsB,MAAM,GAAG7B,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACI,SAASsB,MAAM,EAAEvB,GAAG,KAAK;QAC7EO,KAAKiB,UAAU,GAAG7B,IAAIC,UAAU,CAACnC,gBAAgBgE,cAAc,EAAE5B,GAAG,CAACU,KAAKiB,UAAU,EAAExB,GAAG,KAAK;QAC9Fb,YAAYQ,IAAIC,UAAU,CAAC,YAAYC,GAAG,CAACV,WAAWa,GAAG,KAAK;QAC9D,oEAAoE;QACpE,2CAA2C;QAC3CX,UAAUY,SAASsB,MAAM,GAAG5B,IAAIC,UAAU,CAAC,SAASC,GAAG,CAACR,QAAQW,GAAG,KAAK;KACzE;IACD,MAAM0B,WAAWP,CAAAA,wBAAAA,KAAMjB,MAAM,IAAIiB,KAAKhB,IAAI,KAAiC;IAC3E,IAAId,UAAU,CAACqC,UAAU;QACvB,OAAO/C,gBAAgB,KAAK,qBAAqB;IACnD;IACA,MAAMgD,iBAAiBpE,oBAAoB+B,OAAOK,GAAG,EAAEM,SAASsB,MAAM,EAAEK,OAAO;IAC/E,MAAMC,cAAcX,CAAAA,2BAAAA,QAAShB,MAAM,IAC9BgB,QAAQf,IAAI,KACbuB,WACE7D,cAAc6D,UAAUC,kBACxB;IACN,IACExC,aACC,CAAA,CAAC0C,eAAe,CAAClE,cAAckE,WAAW,CAAC,YAAY,EAA0B5B,SAASsB,MAAM,CAAA,GACjG;QACA,OAAO5C,gBAAgB,KAAK,qBAAqB;IACnD;IACA,MAAMmD,UAAUzD,0BACd4B,SAASqB,SAAS,EAClBN,CAAAA,mCAAAA,gBAAiBd,MAAM,IAAGc,gBAAgBb,IAAI,KAAKf;IAErD,MAAM2C,SAASD,UAAU;QAAEE,MAAMF,QAAQG,WAAW;QAAEC,OAAOJ,QAAQK,MAAM,IAAIL,QAAQI,KAAK;IAAC,IAAI;IACjG,MAAME,WAAWlD,CAAAA,wBAAAA,KAAMgB,MAAM,IAAGmC,QAAOnD,YAAAA,KAAKc,GAAG,CAAC,mBAATd,YAAoB,MAAM;IACjE,MAAMoD,QAAQT,cACV;QACEX,SAASW;QACTF;QACAR,MAAMO;QACNK;QACAQ,MAAM;YAAEP,MAAMI;QAAS;IACzB,IACAnE,2BAA2B;QAAE8D;QAAQK;IAAS;IAClD,MAAMI,eACJ,OAAOvD,IAAI,CAAC,eAAe,KAAK,WAC5BA,IAAI,CAAC,eAAe,GACpB4C,cACE,KACA7D,uBAAuBwE,YAAY;IAC3C,OAAO;QACLlD;QACAW;QACAI;QACAE;QACAuB;QACAW,OAAO;YACLnC,OAAOL,SAASK,KAAK;YACrBD;YACAU;YACAuB;YACAJ,OAAOL,eAAerE,yBAAAA,sBAAsBqE,WAAW,CAAC,QAAQ,aAA1CrE,yBAA+C,KAAMQ,uBAAuBkE,KAAK;YACvGM;YACAE,cAAczB,CAAAA,4BAAAA,SAAUf,MAAM,IAC1BxC,0BAA0BuD,SAASd,IAAI,IAA+BlB,IAAI,GAC1E;YACJ0D,eAAelC,UAAUA,SAAS;QACpC;IACF;AACF;AAEA,OAAO,SAASmC,2BAA2B7D,IAAuB;IAChE,OAAO,OAAOC;;YASD6D,eACHA;QATR,IAAI7D,QAAQ8D,MAAM,KAAK,QAAQ,OAAOrE,yBAAyB;QAC/D,MAAMQ,OAAO,MAAMJ,qBAAqBG;QACxC,MAAM+D,SAAS,MAAMjE,uBAAuBC,MAAMC,SAASC;QAC3D,IAAI8D,kBAAkBvD,UAAU,OAAOuD;QACvC,MAAMF,SAAS3E,oBAAoB6E,OAAON,KAAK;QAC/C,OAAO/D,WAAW;YAChBsE,IAAI;YACJ3C,WAAW0C,OAAO1C,SAAS;YAC3B4C,OAAO,WAAEJ,gBAAAA,OAAOX,KAAK,qBAAZW,cAAcI,OAAO,mBAAI;YAClCC,IAAI,YAAEL,iBAAAA,OAAOX,KAAK,qBAAZW,eAAcK,IAAI,oBAAI;YAC5BC,kBAAkBN,OAAOM,gBAAgB;YACzCC,OAAOP,OAAOO,KAAK;QACrB;IACF;AACF"}

package/src/lib/routes/register-routes.d.ts

@@ -17,9 +17,16 @@
 import { type OutreachEnrollRouteDeps } from './enroll-routes';
 import { type OutreachLinkDomainRouteDeps } from './link-domain-routes';
 import type { OutreachRouteGateDeps } from './route-gate';
+import { type OutreachStepTestDeps } from './step-test-routes';
 /** The gate's reach into the platform. */
 export declare function defaultOutreachRouteGateDeps(): OutreachRouteGateDeps;
 export declare function defaultOutreachRouteDeps(): OutreachEnrollRouteDeps;
 /** The link domains route's reach (AGL-3306): the tracking-host store, loaded on first use. */
 export declare function defaultOutreachLinkDomainDeps(): OutreachLinkDomainRouteDeps;
+/**
+ * The test send's reach (AGL-3325): the mailbox's Gmail through the same
+ * door the runtime and the Mailboxes test use, the platform's rate limit,
+ * and the short links a real send would mint.
+ */
+export declare function defaultOutreachStepTestDeps(): OutreachStepTestDeps;
 export declare function registerOutreachRoutes(deps?: OutreachEnrollRouteDeps): void;

package/src/lib/routes/register-routes.js

@@ -14,10 +14,14 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { pluginRecordTimelineWriter } from "@aglyn/aglyn/plugin-manager/plugin-record-timeline";
+import { pluginTextGenerator } from "@aglyn/aglyn/plugin-manager/plugin-text-generation";
 import { registerPluginApiRoute } from "@aglyn/aglyn/server";
 import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
 import { OUTREACH_API_ROUTES } from "../constants/api-routes.js";
+import { openOutreachMailboxClient } from "../mailboxes/mailbox-transport.js";
 import { outreachOrgSubject } from "../mailboxes/register-mailbox-routes.js";
+import { outreachShortLinkUrl } from "../runtime/click-link.js";
+import { createOutreachCurateRoutes } from "./curate-routes.js";
 import { createOutreachDoNotContactDomainsRoute } from "./do-not-contact-routes.js";
 import { createOutreachEnrollRoutes } from "./enroll-routes.js";
 import { createOutreachEnrollmentActionRoute } from "./enrollment-routes.js";
@@ -26,6 +30,7 @@ import { createOutreachLinkDomainsRoute } from "./link-domain-routes.js";
 import { createOutreachPreviewRoute } from "./preview-routes.js";
 import { createOutreachSequenceRoutes } from "./sequence-routes.js";
 import { createOutreachSettingsRoute } from "./settings-routes.js";
+import { createOutreachStepTestRoute } from "./step-test-routes.js";
 /**
  * Wires the settings, sequence and enrollment routes into the console
  * dispatcher (AGL-2980) with the platform's own dependencies. Specs build
@@ -78,6 +83,14 @@ export function defaultOutreachRouteDeps() {
             var _ref;
             var _pluginRecordTimelineWriter;
             return (_ref = (_pluginRecordTimelineWriter = pluginRecordTimelineWriter()) == null ? void 0 : _pluginRecordTimelineWriter.writer) != null ? _ref : null;
+        },
+        // The workspace's text generator (AGL-3324), resolved per call the same
+        // way: the AI plugin registers at boot, and a request before it did is
+        // told drafting is unavailable rather than caching a `null`.
+        textGenerator: ()=>{
+            var _ref;
+            var _pluginTextGenerator;
+            return (_ref = (_pluginTextGenerator = pluginTextGenerator()) == null ? void 0 : _pluginTextGenerator.generator) != null ? _ref : null;
         }
     };
 }
@@ -95,9 +108,28 @@ export function defaultOutreachRouteDeps() {
         consoleOrigin: canonicalConsoleOrigin
     };
 }
+/**
+ * The test send's reach (AGL-3325): the mailbox's Gmail through the same
+ * door the runtime and the Mailboxes test use, the platform's rate limit,
+ * and the short links a real send would mint.
+ */ export function defaultOutreachStepTestDeps() {
+    return {
+        openMailbox: (mailboxId)=>openOutreachMailboxClient(firebaseAdmin.app().firestore(), {
+                mailboxId
+            }),
+        consumeRateLimit: async (key, options)=>(await import("@aglyn/tenant-data-admin/server/rate-limit-store")).consumeRateLimit(key, options),
+        clickLinkUrl: (linkId, trackingOrigin)=>outreachShortLinkUrl({
+                origin: canonicalConsoleOrigin(),
+                linkId,
+                trackingOrigin
+            }),
+        clickLinkOrigin: async ({ orgId, senderAddress })=>(await platform()).resolveTrackingLinkOrigin(firebaseAdmin.app().firestore(), orgId, senderAddress)
+    };
+}
 export function registerOutreachRoutes(deps = defaultOutreachRouteDeps()) {
     const sequences = createOutreachSequenceRoutes(deps);
     const enroll = createOutreachEnrollRoutes(deps);
+    const curate = createOutreachCurateRoutes(deps);
     const orgSubject = {
         subject: outreachOrgSubject
     };
@@ -125,6 +157,15 @@ export function registerOutreachRoutes(deps = defaultOutreachRouteDeps()) {
     registerPluginApiRoute(OUTREACH_API_ROUTES.preview, {
         web: createOutreachPreviewRoute(deps)
     }, orgSubject);
+    registerPluginApiRoute(OUTREACH_API_ROUTES.curateDraft, {
+        web: curate.draft
+    }, orgSubject);
+    registerPluginApiRoute(OUTREACH_API_ROUTES.curateSave, {
+        web: curate.save
+    }, orgSubject);
+    registerPluginApiRoute(OUTREACH_API_ROUTES.stepTest, {
+        web: createOutreachStepTestRoute(deps, defaultOutreachStepTestDeps())
+    }, orgSubject);
     registerPluginApiRoute(OUTREACH_API_ROUTES.doNotContactDomains, {
         web: createOutreachDoNotContactDomainsRoute(deps)
     }, orgSubject);

package/src/lib/routes/register-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/register-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { OUTREACH_API_ROUTES } from '../constants/api-routes'\nimport { outreachOrgSubject } from '../mailboxes/register-mailbox-routes'\nimport { createOutreachDoNotContactDomainsRoute } from './do-not-contact-routes'\nimport { createOutreachEnrollRoutes, type OutreachEnrollRouteDeps } from './enroll-routes'\nimport { createOutreachEnrollmentActionRoute } from './enrollment-routes'\nimport { canonicalConsoleOrigin } from '../mailboxes/oauth-redirect'\nimport { createOutreachLinkDomainsRoute, type OutreachLinkDomainRouteDeps } from './link-domain-routes'\nimport { createOutreachPreviewRoute } from './preview-routes'\nimport type { OutreachRouteGateDeps } from './route-gate'\nimport { createOutreachSequenceRoutes } from './sequence-routes'\nimport { createOutreachSettingsRoute } from './settings-routes'\n\n/**\n * Wires the settings, sequence and enrollment routes into the console\n * dispatcher (AGL-2980) with the platform's own dependencies. Specs build\n * their own.\n *\n * Every one names its organization (`orgId`, in the query or the JSON body)\n * and none names a site, so each declares the mailbox routes' subject reader:\n * the dispatcher's release gate then asks about that organization, and a\n * `release_outreach` override for one organization reaches these routes as it\n * reaches Mailboxes. Without it the gate reads the request as anonymous, which\n * only a fully enabled flag or a staff session passes.\n */\n\n/** The platform's heavier modules, loaded the first time a request needs one. */\nconst platform = () => import('./platform-deps')\n\n/** The gate's reach into the platform. */\nexport function defaultOutreachRouteGateDeps(): OutreachRouteGateDeps {\n  return {\n    verifyIdToken: (idToken) => firebaseAdmin.app().auth().verifyIdToken(idToken),\n    resolveOrgPermissions: async (uid, context) => (await platform()).resolveOrgPermissions(uid, context),\n    holdsOrgCatalogPermission: async (uid, orgId, key) =>\n      (await platform()).holdsOrgCatalogPermission(uid, orgId, key),\n    readOrg: async (orgId) => {\n      const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).get()\n      return snapshot.exists ? (snapshot.data() ?? {}) : null\n    },\n    lockdownRefusal: async (options) => (await platform()).lockdownRefusal(options),\n  }\n}\n\nexport function defaultOutreachRouteDeps(): OutreachEnrollRouteDeps {\n  return {\n    firestore: () => firebaseAdmin.app().firestore(),\n    gate: defaultOutreachRouteGateDeps(),\n    now: Date.now,\n    random: Math.random,\n    logOrgActivity: async (orgId, actor, action, target) =>\n      (await platform()).logOrgActivity(orgId, actor, action, target),\n    crmViewEmails: async (input) => (await platform()).crmViewEmails(input),\n    stampRecordEmailState: async (stamp) => {\n      await (await platform()).stampRecordEmailState(stamp)\n    },\n    creditCampaign: async ({ hostId, orgId, campaignIds, outcome, atMs }) => {\n      await (await platform()).creditCampaignSequenceOutcome(\n        { hostId, orgId, campaignIds, outcome, atMs },\n        firebaseAdmin.app().firestore(),\n      )\n    },\n    // The record system's writer (AGL-3274), resolved per call the way the\n    // runtime resolves it: the CRM registers at boot, and a request that\n    // arrives before it did files nothing rather than caching a `null`.\n    timeline: () => pluginRecordTimelineWriter()?.writer ?? null,\n  }\n}\n\n/** The link domains route's reach (AGL-3306): the tracking-host store, loaded on first use. */\nexport function defaultOutreachLinkDomainDeps(): OutreachLinkDomainRouteDeps {\n  return {\n    hosts: async () => {\n      const loaded = await platform()\n      return {\n        list: loaded.listTrackingHosts,\n        setUp: loaded.setUpTrackingHost,\n        verify: loaded.verifyTrackingHost,\n        remove: loaded.removeTrackingHost,\n      }\n    },\n    consoleOrigin: canonicalConsoleOrigin,\n  }\n}\n\nexport function registerOutreachRoutes(\n  deps: OutreachEnrollRouteDeps = defaultOutreachRouteDeps(),\n): void {\n  const sequences = createOutreachSequenceRoutes(deps)\n  const enroll = createOutreachEnrollRoutes(deps)\n  const orgSubject = { subject: outreachOrgSubject }\n  registerPluginApiRoute(OUTREACH_API_ROUTES.settings, { web: createOutreachSettingsRoute(deps) }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesSave, { web: sequences.save }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesStatus, { web: sequences.status }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesDelete, { web: sequences.remove }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enrollPreview, { web: enroll.preview }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enroll, { web: enroll.confirm }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.enrollmentsAction,\n    { web: createOutreachEnrollmentActionRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(OUTREACH_API_ROUTES.preview, { web: createOutreachPreviewRoute(deps) }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.doNotContactDomains,\n    { web: createOutreachDoNotContactDomainsRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.linkDomains,\n    { web: createOutreachLinkDomainsRoute(deps, defaultOutreachLinkDomainDeps()) },\n    orgSubject,\n  )\n}\n"],"names":["pluginRecordTimelineWriter","registerPluginApiRoute","firebaseAdmin","OUTREACH_API_ROUTES","outreachOrgSubject","createOutreachDoNotContactDomainsRoute","createOutreachEnrollRoutes","createOutreachEnrollmentActionRoute","canonicalConsoleOrigin","createOutreachLinkDomainsRoute","createOutreachPreviewRoute","createOutreachSequenceRoutes","createOutreachSettingsRoute","platform","defaultOutreachRouteGateDeps","verifyIdToken","idToken","app","auth","resolveOrgPermissions","uid","context","holdsOrgCatalogPermission","orgId","key","readOrg","snapshot","firestore","collection","doc","get","exists","data","lockdownRefusal","options","defaultOutreachRouteDeps","gate","now","Date","random","Math","logOrgActivity","actor","action","target","crmViewEmails","input","stampRecordEmailState","stamp","creditCampaign","hostId","campaignIds","outcome","atMs","creditCampaignSequenceOutcome","timeline","writer","defaultOutreachLinkDomainDeps","hosts","loaded","list","listTrackingHosts","setUp","setUpTrackingHost","verify","verifyTrackingHost","remove","removeTrackingHost","consoleOrigin","registerOutreachRoutes","deps","sequences","enroll","orgSubject","subject","settings","web","sequencesSave","save","sequencesStatus","status","sequencesDelete","enrollPreview","preview","confirm","enrollmentsAction","doNotContactDomains","linkDomains"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,qDAAoD;AAC/F,SAASC,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,0CAAsC;AACzE,SAASC,sCAAsC,QAAQ,6BAAyB;AAChF,SAASC,0BAA0B,QAAsC,qBAAiB;AAC1F,SAASC,mCAAmC,QAAQ,yBAAqB;AACzE,SAASC,sBAAsB,QAAQ,iCAA6B;AACpE,SAASC,8BAA8B,QAA0C,0BAAsB;AACvG,SAASC,0BAA0B,QAAQ,sBAAkB;AAE7D,SAASC,4BAA4B,QAAQ,uBAAmB;AAChE,SAASC,2BAA2B,QAAQ,uBAAmB;AAE/D;;;;;;;;;;;CAWC,GAED,+EAA+E,GAC/E,MAAMC,WAAW,IAAM,MAAM,CAAC;AAE9B,wCAAwC,GACxC,OAAO,SAASC;IACd,OAAO;QACLC,eAAe,CAACC,UAAYd,cAAce,GAAG,GAAGC,IAAI,GAAGH,aAAa,CAACC;QACrEG,uBAAuB,OAAOC,KAAKC,UAAY,AAAC,CAAA,MAAMR,UAAS,EAAGM,qBAAqB,CAACC,KAAKC;QAC7FC,2BAA2B,OAAOF,KAAKG,OAAOC,MAC5C,AAAC,CAAA,MAAMX,UAAS,EAAGS,yBAAyB,CAACF,KAAKG,OAAOC;QAC3DC,SAAS,OAAOF;gBAEYG;YAD1B,MAAMA,WAAW,MAAMxB,cAAce,GAAG,GAAGU,SAAS,GAAGC,UAAU,CAAC,QAAQC,GAAG,CAACN,OAAOO,GAAG;YACxF,OAAOJ,SAASK,MAAM,IAAIL,iBAAAA,SAASM,IAAI,cAAbN,iBAAmB,CAAC,IAAK;QACrD;QACAO,iBAAiB,OAAOC,UAAY,AAAC,CAAA,MAAMrB,UAAS,EAAGoB,eAAe,CAACC;IACzE;AACF;AAEA,OAAO,SAASC;IACd,OAAO;QACLR,WAAW,IAAMzB,cAAce,GAAG,GAAGU,SAAS;QAC9CS,MAAMtB;QACNuB,KAAKC,KAAKD,GAAG;QACbE,QAAQC,KAAKD,MAAM;QACnBE,gBAAgB,OAAOlB,OAAOmB,OAAOC,QAAQC,SAC3C,AAAC,CAAA,MAAM/B,UAAS,EAAG4B,cAAc,CAAClB,OAAOmB,OAAOC,QAAQC;QAC1DC,eAAe,OAAOC,QAAU,AAAC,CAAA,MAAMjC,UAAS,EAAGgC,aAAa,CAACC;QACjEC,uBAAuB,OAAOC;YAC5B,MAAM,AAAC,CAAA,MAAMnC,UAAS,EAAGkC,qBAAqB,CAACC;QACjD;QACAC,gBAAgB,OAAO,EAAEC,MAAM,EAAE3B,KAAK,EAAE4B,WAAW,EAAEC,OAAO,EAAEC,IAAI,EAAE;YAClE,MAAM,AAAC,CAAA,MAAMxC,UAAS,EAAGyC,6BAA6B,CACpD;gBAAEJ;gBAAQ3B;gBAAO4B;gBAAaC;gBAASC;YAAK,GAC5CnD,cAAce,GAAG,GAAGU,SAAS;QAEjC;QACA,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE4B,UAAU;;gBAAMvD;4BAAAA,8BAAAA,iDAAAA,4BAA8BwD,MAAM,mBAAI;;IAC1D;AACF;AAEA,6FAA6F,GAC7F,OAAO,SAASC;IACd,OAAO;QACLC,OAAO;YACL,MAAMC,SAAS,MAAM9C;YACrB,OAAO;gBACL+C,MAAMD,OAAOE,iBAAiB;gBAC9BC,OAAOH,OAAOI,iBAAiB;gBAC/BC,QAAQL,OAAOM,kBAAkB;gBACjCC,QAAQP,OAAOQ,kBAAkB;YACnC;QACF;QACAC,eAAe5D;IACjB;AACF;AAEA,OAAO,SAAS6D,uBACdC,OAAgCnC,0BAA0B;IAE1D,MAAMoC,YAAY5D,6BAA6B2D;IAC/C,MAAME,SAASlE,2BAA2BgE;IAC1C,MAAMG,aAAa;QAAEC,SAAStE;IAAmB;IACjDH,uBAAuBE,oBAAoBwE,QAAQ,EAAE;QAAEC,KAAKhE,4BAA4B0D;IAAM,GAAGG;IACjGxE,uBAAuBE,oBAAoB0E,aAAa,EAAE;QAAED,KAAKL,UAAUO,IAAI;IAAC,GAAGL;IACnFxE,uBAAuBE,oBAAoB4E,eAAe,EAAE;QAAEH,KAAKL,UAAUS,MAAM;IAAC,GAAGP;IACvFxE,uBAAuBE,oBAAoB8E,eAAe,EAAE;QAAEL,KAAKL,UAAUL,MAAM;IAAC,GAAGO;IACvFxE,uBAAuBE,oBAAoB+E,aAAa,EAAE;QAAEN,KAAKJ,OAAOW,OAAO;IAAC,GAAGV;IACnFxE,uBAAuBE,oBAAoBqE,MAAM,EAAE;QAAEI,KAAKJ,OAAOY,OAAO;IAAC,GAAGX;IAC5ExE,uBACEE,oBAAoBkF,iBAAiB,EACrC;QAAET,KAAKrE,oCAAoC+D;IAAM,GACjDG;IAEFxE,uBAAuBE,oBAAoBgF,OAAO,EAAE;QAAEP,KAAKlE,2BAA2B4D;IAAM,GAAGG;IAC/FxE,uBACEE,oBAAoBmF,mBAAmB,EACvC;QAAEV,KAAKvE,uCAAuCiE;IAAM,GACpDG;IAEFxE,uBACEE,oBAAoBoF,WAAW,EAC/B;QAAEX,KAAKnE,+BAA+B6D,MAAMb;IAAiC,GAC7EgB;AAEJ"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/register-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport { pluginTextGenerator } from '@aglyn/aglyn/plugin-manager/plugin-text-generation'\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { OUTREACH_API_ROUTES } from '../constants/api-routes'\nimport { openOutreachMailboxClient } from '../mailboxes/mailbox-transport'\nimport { outreachOrgSubject } from '../mailboxes/register-mailbox-routes'\nimport { outreachShortLinkUrl } from '../runtime/click-link'\nimport { createOutreachCurateRoutes } from './curate-routes'\nimport { createOutreachDoNotContactDomainsRoute } from './do-not-contact-routes'\nimport { createOutreachEnrollRoutes, type OutreachEnrollRouteDeps } from './enroll-routes'\nimport { createOutreachEnrollmentActionRoute } from './enrollment-routes'\nimport { canonicalConsoleOrigin } from '../mailboxes/oauth-redirect'\nimport { createOutreachLinkDomainsRoute, type OutreachLinkDomainRouteDeps } from './link-domain-routes'\nimport { createOutreachPreviewRoute } from './preview-routes'\nimport type { OutreachRouteGateDeps } from './route-gate'\nimport { createOutreachSequenceRoutes } from './sequence-routes'\nimport { createOutreachSettingsRoute } from './settings-routes'\nimport { createOutreachStepTestRoute, type OutreachStepTestDeps } from './step-test-routes'\n\n/**\n * Wires the settings, sequence and enrollment routes into the console\n * dispatcher (AGL-2980) with the platform's own dependencies. Specs build\n * their own.\n *\n * Every one names its organization (`orgId`, in the query or the JSON body)\n * and none names a site, so each declares the mailbox routes' subject reader:\n * the dispatcher's release gate then asks about that organization, and a\n * `release_outreach` override for one organization reaches these routes as it\n * reaches Mailboxes. Without it the gate reads the request as anonymous, which\n * only a fully enabled flag or a staff session passes.\n */\n\n/** The platform's heavier modules, loaded the first time a request needs one. */\nconst platform = () => import('./platform-deps')\n\n/** The gate's reach into the platform. */\nexport function defaultOutreachRouteGateDeps(): OutreachRouteGateDeps {\n  return {\n    verifyIdToken: (idToken) => firebaseAdmin.app().auth().verifyIdToken(idToken),\n    resolveOrgPermissions: async (uid, context) => (await platform()).resolveOrgPermissions(uid, context),\n    holdsOrgCatalogPermission: async (uid, orgId, key) =>\n      (await platform()).holdsOrgCatalogPermission(uid, orgId, key),\n    readOrg: async (orgId) => {\n      const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).get()\n      return snapshot.exists ? (snapshot.data() ?? {}) : null\n    },\n    lockdownRefusal: async (options) => (await platform()).lockdownRefusal(options),\n  }\n}\n\nexport function defaultOutreachRouteDeps(): OutreachEnrollRouteDeps {\n  return {\n    firestore: () => firebaseAdmin.app().firestore(),\n    gate: defaultOutreachRouteGateDeps(),\n    now: Date.now,\n    random: Math.random,\n    logOrgActivity: async (orgId, actor, action, target) =>\n      (await platform()).logOrgActivity(orgId, actor, action, target),\n    crmViewEmails: async (input) => (await platform()).crmViewEmails(input),\n    stampRecordEmailState: async (stamp) => {\n      await (await platform()).stampRecordEmailState(stamp)\n    },\n    creditCampaign: async ({ hostId, orgId, campaignIds, outcome, atMs }) => {\n      await (await platform()).creditCampaignSequenceOutcome(\n        { hostId, orgId, campaignIds, outcome, atMs },\n        firebaseAdmin.app().firestore(),\n      )\n    },\n    // The record system's writer (AGL-3274), resolved per call the way the\n    // runtime resolves it: the CRM registers at boot, and a request that\n    // arrives before it did files nothing rather than caching a `null`.\n    timeline: () => pluginRecordTimelineWriter()?.writer ?? null,\n    // The workspace's text generator (AGL-3324), resolved per call the same\n    // way: the AI plugin registers at boot, and a request before it did is\n    // told drafting is unavailable rather than caching a `null`.\n    textGenerator: () => pluginTextGenerator()?.generator ?? null,\n  }\n}\n\n/** The link domains route's reach (AGL-3306): the tracking-host store, loaded on first use. */\nexport function defaultOutreachLinkDomainDeps(): OutreachLinkDomainRouteDeps {\n  return {\n    hosts: async () => {\n      const loaded = await platform()\n      return {\n        list: loaded.listTrackingHosts,\n        setUp: loaded.setUpTrackingHost,\n        verify: loaded.verifyTrackingHost,\n        remove: loaded.removeTrackingHost,\n      }\n    },\n    consoleOrigin: canonicalConsoleOrigin,\n  }\n}\n\n/**\n * The test send's reach (AGL-3325): the mailbox's Gmail through the same\n * door the runtime and the Mailboxes test use, the platform's rate limit,\n * and the short links a real send would mint.\n */\nexport function defaultOutreachStepTestDeps(): OutreachStepTestDeps {\n  return {\n    openMailbox: (mailboxId) => openOutreachMailboxClient(firebaseAdmin.app().firestore(), { mailboxId }),\n    consumeRateLimit: async (key, options) =>\n      (await import('@aglyn/tenant-data-admin/server/rate-limit-store')).consumeRateLimit(key, options),\n    clickLinkUrl: (linkId, trackingOrigin) =>\n      outreachShortLinkUrl({ origin: canonicalConsoleOrigin(), linkId, trackingOrigin }),\n    clickLinkOrigin: async ({ orgId, senderAddress }) =>\n      (await platform()).resolveTrackingLinkOrigin(firebaseAdmin.app().firestore(), orgId, senderAddress),\n  }\n}\n\nexport function registerOutreachRoutes(\n  deps: OutreachEnrollRouteDeps = defaultOutreachRouteDeps(),\n): void {\n  const sequences = createOutreachSequenceRoutes(deps)\n  const enroll = createOutreachEnrollRoutes(deps)\n  const curate = createOutreachCurateRoutes(deps)\n  const orgSubject = { subject: outreachOrgSubject }\n  registerPluginApiRoute(OUTREACH_API_ROUTES.settings, { web: createOutreachSettingsRoute(deps) }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesSave, { web: sequences.save }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesStatus, { web: sequences.status }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.sequencesDelete, { web: sequences.remove }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enrollPreview, { web: enroll.preview }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.enroll, { web: enroll.confirm }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.enrollmentsAction,\n    { web: createOutreachEnrollmentActionRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(OUTREACH_API_ROUTES.preview, { web: createOutreachPreviewRoute(deps) }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.curateDraft, { web: curate.draft }, orgSubject)\n  registerPluginApiRoute(OUTREACH_API_ROUTES.curateSave, { web: curate.save }, orgSubject)\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.stepTest,\n    { web: createOutreachStepTestRoute(deps, defaultOutreachStepTestDeps()) },\n    orgSubject,\n  )\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.doNotContactDomains,\n    { web: createOutreachDoNotContactDomainsRoute(deps) },\n    orgSubject,\n  )\n  registerPluginApiRoute(\n    OUTREACH_API_ROUTES.linkDomains,\n    { web: createOutreachLinkDomainsRoute(deps, defaultOutreachLinkDomainDeps()) },\n    orgSubject,\n  )\n}\n"],"names":["pluginRecordTimelineWriter","pluginTextGenerator","registerPluginApiRoute","firebaseAdmin","OUTREACH_API_ROUTES","openOutreachMailboxClient","outreachOrgSubject","outreachShortLinkUrl","createOutreachCurateRoutes","createOutreachDoNotContactDomainsRoute","createOutreachEnrollRoutes","createOutreachEnrollmentActionRoute","canonicalConsoleOrigin","createOutreachLinkDomainsRoute","createOutreachPreviewRoute","createOutreachSequenceRoutes","createOutreachSettingsRoute","createOutreachStepTestRoute","platform","defaultOutreachRouteGateDeps","verifyIdToken","idToken","app","auth","resolveOrgPermissions","uid","context","holdsOrgCatalogPermission","orgId","key","readOrg","snapshot","firestore","collection","doc","get","exists","data","lockdownRefusal","options","defaultOutreachRouteDeps","gate","now","Date","random","Math","logOrgActivity","actor","action","target","crmViewEmails","input","stampRecordEmailState","stamp","creditCampaign","hostId","campaignIds","outcome","atMs","creditCampaignSequenceOutcome","timeline","writer","textGenerator","generator","defaultOutreachLinkDomainDeps","hosts","loaded","list","listTrackingHosts","setUp","setUpTrackingHost","verify","verifyTrackingHost","remove","removeTrackingHost","consoleOrigin","defaultOutreachStepTestDeps","openMailbox","mailboxId","consumeRateLimit","clickLinkUrl","linkId","trackingOrigin","origin","clickLinkOrigin","senderAddress","resolveTrackingLinkOrigin","registerOutreachRoutes","deps","sequences","enroll","curate","orgSubject","subject","settings","web","sequencesSave","save","sequencesStatus","status","sequencesDelete","enrollPreview","preview","confirm","enrollmentsAction","curateDraft","draft","curateSave","stepTest","doNotContactDomains","linkDomains"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,qDAAoD;AAC/F,SAASC,mBAAmB,QAAQ,qDAAoD;AACxF,SAASC,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,yBAAyB,QAAQ,oCAAgC;AAC1E,SAASC,kBAAkB,QAAQ,0CAAsC;AACzE,SAASC,oBAAoB,QAAQ,2BAAuB;AAC5D,SAASC,0BAA0B,QAAQ,qBAAiB;AAC5D,SAASC,sCAAsC,QAAQ,6BAAyB;AAChF,SAASC,0BAA0B,QAAsC,qBAAiB;AAC1F,SAASC,mCAAmC,QAAQ,yBAAqB;AACzE,SAASC,sBAAsB,QAAQ,iCAA6B;AACpE,SAASC,8BAA8B,QAA0C,0BAAsB;AACvG,SAASC,0BAA0B,QAAQ,sBAAkB;AAE7D,SAASC,4BAA4B,QAAQ,uBAAmB;AAChE,SAASC,2BAA2B,QAAQ,uBAAmB;AAC/D,SAASC,2BAA2B,QAAmC,wBAAoB;AAE3F;;;;;;;;;;;CAWC,GAED,+EAA+E,GAC/E,MAAMC,WAAW,IAAM,MAAM,CAAC;AAE9B,wCAAwC,GACxC,OAAO,SAASC;IACd,OAAO;QACLC,eAAe,CAACC,UAAYlB,cAAcmB,GAAG,GAAGC,IAAI,GAAGH,aAAa,CAACC;QACrEG,uBAAuB,OAAOC,KAAKC,UAAY,AAAC,CAAA,MAAMR,UAAS,EAAGM,qBAAqB,CAACC,KAAKC;QAC7FC,2BAA2B,OAAOF,KAAKG,OAAOC,MAC5C,AAAC,CAAA,MAAMX,UAAS,EAAGS,yBAAyB,CAACF,KAAKG,OAAOC;QAC3DC,SAAS,OAAOF;gBAEYG;YAD1B,MAAMA,WAAW,MAAM5B,cAAcmB,GAAG,GAAGU,SAAS,GAAGC,UAAU,CAAC,QAAQC,GAAG,CAACN,OAAOO,GAAG;YACxF,OAAOJ,SAASK,MAAM,IAAIL,iBAAAA,SAASM,IAAI,cAAbN,iBAAmB,CAAC,IAAK;QACrD;QACAO,iBAAiB,OAAOC,UAAY,AAAC,CAAA,MAAMrB,UAAS,EAAGoB,eAAe,CAACC;IACzE;AACF;AAEA,OAAO,SAASC;IACd,OAAO;QACLR,WAAW,IAAM7B,cAAcmB,GAAG,GAAGU,SAAS;QAC9CS,MAAMtB;QACNuB,KAAKC,KAAKD,GAAG;QACbE,QAAQC,KAAKD,MAAM;QACnBE,gBAAgB,OAAOlB,OAAOmB,OAAOC,QAAQC,SAC3C,AAAC,CAAA,MAAM/B,UAAS,EAAG4B,cAAc,CAAClB,OAAOmB,OAAOC,QAAQC;QAC1DC,eAAe,OAAOC,QAAU,AAAC,CAAA,MAAMjC,UAAS,EAAGgC,aAAa,CAACC;QACjEC,uBAAuB,OAAOC;YAC5B,MAAM,AAAC,CAAA,MAAMnC,UAAS,EAAGkC,qBAAqB,CAACC;QACjD;QACAC,gBAAgB,OAAO,EAAEC,MAAM,EAAE3B,KAAK,EAAE4B,WAAW,EAAEC,OAAO,EAAEC,IAAI,EAAE;YAClE,MAAM,AAAC,CAAA,MAAMxC,UAAS,EAAGyC,6BAA6B,CACpD;gBAAEJ;gBAAQ3B;gBAAO4B;gBAAaC;gBAASC;YAAK,GAC5CvD,cAAcmB,GAAG,GAAGU,SAAS;QAEjC;QACA,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE4B,UAAU;;gBAAM5D;4BAAAA,8BAAAA,iDAAAA,4BAA8B6D,MAAM,mBAAI;;QACxD,wEAAwE;QACxE,uEAAuE;QACvE,6DAA6D;QAC7DC,eAAe;;gBAAM7D;4BAAAA,uBAAAA,0CAAAA,qBAAuB8D,SAAS,mBAAI;;IAC3D;AACF;AAEA,6FAA6F,GAC7F,OAAO,SAASC;IACd,OAAO;QACLC,OAAO;YACL,MAAMC,SAAS,MAAMhD;YACrB,OAAO;gBACLiD,MAAMD,OAAOE,iBAAiB;gBAC9BC,OAAOH,OAAOI,iBAAiB;gBAC/BC,QAAQL,OAAOM,kBAAkB;gBACjCC,QAAQP,OAAOQ,kBAAkB;YACnC;QACF;QACAC,eAAe/D;IACjB;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASgE;IACd,OAAO;QACLC,aAAa,CAACC,YAAczE,0BAA0BF,cAAcmB,GAAG,GAAGU,SAAS,IAAI;gBAAE8C;YAAU;QACnGC,kBAAkB,OAAOlD,KAAKU,UAC5B,AAAC,CAAA,MAAM,MAAM,CAAC,mDAAkD,EAAGwC,gBAAgB,CAAClD,KAAKU;QAC3FyC,cAAc,CAACC,QAAQC,iBACrB3E,qBAAqB;gBAAE4E,QAAQvE;gBAA0BqE;gBAAQC;YAAe;QAClFE,iBAAiB,OAAO,EAAExD,KAAK,EAAEyD,aAAa,EAAE,GAC9C,AAAC,CAAA,MAAMnE,UAAS,EAAGoE,yBAAyB,CAACnF,cAAcmB,GAAG,GAAGU,SAAS,IAAIJ,OAAOyD;IACzF;AACF;AAEA,OAAO,SAASE,uBACdC,OAAgChD,0BAA0B;IAE1D,MAAMiD,YAAY1E,6BAA6ByE;IAC/C,MAAME,SAAShF,2BAA2B8E;IAC1C,MAAMG,SAASnF,2BAA2BgF;IAC1C,MAAMI,aAAa;QAAEC,SAASvF;IAAmB;IACjDJ,uBAAuBE,oBAAoB0F,QAAQ,EAAE;QAAEC,KAAK/E,4BAA4BwE;IAAM,GAAGI;IACjG1F,uBAAuBE,oBAAoB4F,aAAa,EAAE;QAAED,KAAKN,UAAUQ,IAAI;IAAC,GAAGL;IACnF1F,uBAAuBE,oBAAoB8F,eAAe,EAAE;QAAEH,KAAKN,UAAUU,MAAM;IAAC,GAAGP;IACvF1F,uBAAuBE,oBAAoBgG,eAAe,EAAE;QAAEL,KAAKN,UAAUhB,MAAM;IAAC,GAAGmB;IACvF1F,uBAAuBE,oBAAoBiG,aAAa,EAAE;QAAEN,KAAKL,OAAOY,OAAO;IAAC,GAAGV;IACnF1F,uBAAuBE,oBAAoBsF,MAAM,EAAE;QAAEK,KAAKL,OAAOa,OAAO;IAAC,GAAGX;IAC5E1F,uBACEE,oBAAoBoG,iBAAiB,EACrC;QAAET,KAAKpF,oCAAoC6E;IAAM,GACjDI;IAEF1F,uBAAuBE,oBAAoBkG,OAAO,EAAE;QAAEP,KAAKjF,2BAA2B0E;IAAM,GAAGI;IAC/F1F,uBAAuBE,oBAAoBqG,WAAW,EAAE;QAAEV,KAAKJ,OAAOe,KAAK;IAAC,GAAGd;IAC/E1F,uBAAuBE,oBAAoBuG,UAAU,EAAE;QAAEZ,KAAKJ,OAAOM,IAAI;IAAC,GAAGL;IAC7E1F,uBACEE,oBAAoBwG,QAAQ,EAC5B;QAAEb,KAAK9E,4BAA4BuE,MAAMZ;IAA+B,GACxEgB;IAEF1F,uBACEE,oBAAoByG,mBAAmB,EACvC;QAAEd,KAAKtF,uCAAuC+E;IAAM,GACpDI;IAEF1F,uBACEE,oBAAoB0G,WAAW,EAC/B;QAAEf,KAAKlF,+BAA+B2E,MAAMxB;IAAiC,GAC7E4B;AAEJ"}

package/src/lib/routes/step-test-routes.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginWebApiHandler } from '@aglyn/aglyn/server';
+import { type OpenedOutreachMailbox } from '../mailboxes/mailbox-transport';
+import type { OutreachStepTestResponse } from '../model/outreach-api';
+import type { OutreachRouteDeps } from './route-deps';
+/**
+ * A TEST OF ONE STEP, IN A REAL INBOX (AGL-3325): `outreach/steps/test`.
+ *
+ * The Mailboxes page's test proves a mailbox can send; this proves what a
+ * step LOOKS like once it has been through Gmail. It is the preview's email
+ * — the same reader, the same person or sample person, the same personal
+ * line, the same footer — sent through the sequence's mailbox to the member
+ * who asked, or to an address they typed, with `[Test] ` in front of the
+ * subject so it never reads as real mail.
+ *
+ * ## Rendered as a send, sent as a test
+ *
+ * A later step in a thread is written as `Re:` the thread's subject, as the
+ * preview writes it, but sent as a new message: there is no thread to
+ * answer, and the preview's placeholder message id must not leave the
+ * server. When the sequence counts clicks, every link is rewritten to a
+ * short link as a real send's would be, so the member sees the link their
+ * recipients will see — but each is stored as a TEST link, which the click
+ * route follows and never records (`click-link.ts`). A member clicking their
+ * own test must not move the sequence's `clicks` or `machineClicks`.
+ *
+ * Merge fields the person has nothing for are sent empty and named in the
+ * answer, where a real send would pause: the point of a test is to see the
+ * gap, not to be refused it.
+ *
+ * ## Counted on nothing but the mailbox's tests
+ *
+ * A test is a real Gmail send and spends the account's own limits. It is
+ * not a person emailed: it moves neither the sequence's `stats` nor the
+ * mailbox's `health.daily.<day>.sent`, it reserves nothing of the daily cap,
+ * it files nothing on anyone's record, and it enrolls nobody. It is tallied
+ * on `health.daily.<day>.tests`, which the Mailboxes card shows as "Tests
+ * today", and held to {@link OUTREACH_STEP_TESTS_PER_HOUR} a mailbox.
+ *
+ * ## Who, and from what
+ *
+ * The mailbox's own member, or an organization owner or admin — the people
+ * who may edit and activate the sequence. A paused mailbox, or one waiting
+ * to be reconnected, refuses and says which; a member who cannot send is
+ * told where to fix it rather than shown a Google error.
+ */
+/** Tests one mailbox may send in an hour: a few steps for a few people. */
+export declare const OUTREACH_STEP_TESTS_PER_HOUR = 20;
+/** What every test's subject starts with. */
+export declare const OUTREACH_TEST_SUBJECT_PREFIX = "[Test] ";
+/** The route's reach beyond the shared route deps: the mailbox's Gmail, the limit, the links. */
+export interface OutreachStepTestDeps {
+    /** Opens a mailbox's Gmail client from its sealed grant. */
+    openMailbox(mailboxId: string): Promise<OpenedOutreachMailbox>;
+    consumeRateLimit(key: string, options: {
+        limit: number;
+        windowMs: number;
+    }): Promise<{
+        allowed: boolean;
+    }>;
+    /** The short tracking link for a stored link's id, or `null` when none can be made. */
+    clickLinkUrl(linkId: string, trackingOrigin?: string | null): string | null;
+    /** The click-tracking origin for mail sent as `senderAddress` (AGL-3306), or `null` for the console's. */
+    clickLinkOrigin?(input: {
+        orgId: string;
+        senderAddress: string;
+    }): Promise<string | null>;
+}
+/** What the route answers: the response the console reads, and the fields the test sent empty. */
+export interface OutreachStepTestAnswer extends OutreachStepTestResponse {
+    unresolvedFields: string[];
+}
+export declare function createOutreachStepTestRoute(deps: OutreachRouteDeps, testDeps: OutreachStepTestDeps): PluginWebApiHandler;