@aglyn/plugins-outreach 1.0.0-beta.196 → 1.0.0-beta.198

package/src/lib/routes/enroll-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enroll-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  CAMPAIGN_MEMBERSHIP_FIELD,\n  contactCampaignFieldPath,\n  normalizeCampaignIds,\n} from '@aglyn/aglyn/app-utils/campaign-membership'\nimport { consentGroupForHost } from '@aglyn/aglyn/app-utils/consent-groups'\nimport { scopeTokensForHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport {\n  CRM_COLLECTIONS,\n  crmLeadStatus,\n  crmViewIsListed,\n  isCrmLeadOpen,\n  normalizeCrmViewFilters,\n} from '@aglyn/aglyn/app-utils/crm'\nimport { dynamicListDimensionsForCrmView } from '@aglyn/aglyn/app-utils/dynamic-list-rule'\nimport type { PluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport type { PluginTextGenerator } from '@aglyn/aglyn/plugin-manager/plugin-text-generation'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { outreachCuratedEntry, outreachEnrolledEntry } from '../engine/enrollment-activity'\nimport { buildOutreachEnrollment, planOutreachFirstDue } from '../engine/enrollment-state'\nimport type { OutreachGateLookups } from '../engine/gates'\nimport {\n  decideOutreachEnrollment,\n  previewOutreachPerson,\n  readOutreachEnrollCandidates,\n  type OutreachEnrollCandidate,\n  type OutreachGateQuestion,\n} from '../enrollment/enroll-people'\nimport { readOutreachGateLookups } from '../enrollment/gate-lookups'\nimport {\n  outreachStepOverridesRefused,\n  readOutreachStepOverrideRequests,\n  type OutreachStepOverrideRead,\n} from '../enrollment/step-overrides'\nimport { effectiveOutreachAllowedCountries } from '../model/compliance-settings'\nimport {\n  OUTREACH_ENROLL_BATCH_MAX,\n  type OutreachEnrollOutcome,\n  type OutreachEnrollPreviewResponse,\n  type OutreachEnrollResponse,\n  type OutreachPersonRef,\n} from '../model/outreach-api'\nimport type { OutreachSequence, OutreachStepOverrides } from '../model/outreach.types'\nimport { readOutreachComplianceSettingsDoc } from '../storage/compliance-settings-store'\nimport { fileOutreachNote } from '../runtime/timeline'\nimport {\n  outreachEnrollmentId,\n  outreachEnrollmentLink,\n  outreachOrgCollection,\n  readStoredOutreachMailbox,\n  readStoredOutreachSequence,\n} from '../storage/outreach-records'\nimport { OUTREACH_SEQUENCE_ACTIVITY_TARGET, type OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate, type OutreachRouteCaller, type OutreachRouteExtraPermission } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * ENROLLING PEOPLE IN A SEQUENCE (AGL-2980): `outreach/enroll/preview` and\n * `outreach/enroll`.\n *\n * The preview reads the people a saved Contacts view or a search named —\n * at most {@link OUTREACH_ENROLL_BATCH_MAX} — and says where each stands:\n * eligible, blocked with the gate's own sentence, or waiting on the rep for\n * a personal line and the attestations only they can make. Confirm reads\n * everything again and asks the gates again with what the rep supplied,\n * because a preview is a picture of a moment: someone can unsubscribe\n * between the two, and a request can claim anything. Nothing the preview\n * answered is trusted by the enroll.\n *\n * Both read the CRM's people, so both ask for `data.manage` beside\n * `outreach.use` — the permission the contacts' own rules read with, so\n * Outreach is no side door into the address book.\n *\n * Only an ACTIVE sequence takes people: enrolling schedules the first step\n * in the mailbox's hours, and a draft's steps and a paused sequence's timing\n * are not yet what will be sent.\n */\n\n/** The permission enrolling reads the CRM with. */\nexport const OUTREACH_READS_PEOPLE: OutreachRouteExtraPermission = {\n  key: 'data.manage',\n  refusal: \"Enrolling reads your CRM's contacts, and your role does not include Manage data.\",\n}\n\n/** Everything enrolling reaches beyond the routes' own dependencies. */\nexport interface OutreachEnrollRouteDeps extends OutreachRouteDeps {\n  /**\n   * The addresses a saved Contacts view selects among one site's contacts,\n   * read the way the dynamic-list sweep reads one, and whether the read\n   * reached the whole view before its budget.\n   */\n  crmViewEmails(input: { hostId: string; viewId: string }): Promise<{ emails: string[]; complete: boolean }>\n  /**\n   * The workspace's record system on the timeline seam (AGL-3274), when a\n   * plugin keeps one: the enroll files \"Enrolled in\" on the person's record\n   * — the runtime's `timeline`, reached the same way.\n   */\n  timeline(): PluginRecordTimelineWriter | null\n  /**\n   * The workspace's text generator on the core's text-generation seam\n   * (AGL-3324), which drafts one person's copies of the steps; `null` when\n   * no plugin generates text, and the curate route says so.\n   */\n  textGenerator(): PluginTextGenerator | null\n}\n\nexport interface OutreachEnrollRoutes {\n  preview: PluginWebApiHandler\n  confirm: PluginWebApiHandler\n}\n\n/** The activity line an enroll writes. */\nexport function outreachEnrolledActivity(count: number): string {\n  return count === 1\n    ? 'Enrolled 1 person in a sequence'\n    : `Enrolled ${count} people in a sequence`\n}\n\n/** Lookups for a person the gates will never be asked about: every one unchecked. */\nconst UNCHECKED: OutreachGateLookups = {\n  platformSuppressed: null,\n  hostSuppressed: null,\n  salesTopicState: null,\n  doNotContact: null,\n  doNotContactDomain: null,\n  workspaceMembers: null,\n  openEnrollments: null,\n  hasInboundEmail: null,\n}\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/** gRPC `ALREADY_EXISTS`, which `create()` rejects with when the document is there. */\nconst ALREADY_EXISTS = 6\n\nasync function loadActiveSequence(\n  firestore: Firestore,\n  orgId: string,\n  rawSequenceId: unknown,\n): Promise<Response | OutreachSequence> {\n  const sequenceId = readOutreachDocumentId(rawSequenceId)\n  if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to enroll people in.')\n  const snapshot = await outreachOrgCollection(firestore, orgId, 'sequences').doc(sequenceId).get()\n  const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined)\n  if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n  if (sequence.status === 'archived') {\n    return outreachRefusal(409, 'sequence-archived', 'This sequence is archived and takes no one new.')\n  }\n  if (sequence.status !== 'active') {\n    return outreachRefusal(409, 'sequence-not-active', 'Activate this sequence before enrolling people.')\n  }\n  return sequence\n}\n\n/** What every person in one request is judged against. */\ninterface EnrollContext {\n  settings: OutreachGateQuestion['settings']\n  contactGroupId: string\n  /** The sequence site's consent group, whose opt-outs all apply. */\n  consentHostIds: readonly string[]\n  /** Whether that group's sites wait for each other's confirmation click. */\n  consentAwaitsConfirmation: boolean\n  siteName: string\n}\n\nasync function enrollContext(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  sequence: OutreachSequence,\n): Promise<EnrollContext> {\n  const [orgSettings, host] = await Promise.all([\n    readOutreachComplianceSettingsDoc(firestore, caller.orgId),\n    firestore.collection('hosts').doc(sequence.hostId).get(),\n  ])\n  const consentGroup = consentGroupForHost(caller.org, sequence.hostId)\n  return {\n    // The organization's countries are a ceiling over the sequence's.\n    settings: {\n      ...sequence.settings,\n      allowedCountries: effectiveOutreachAllowedCountries(\n        sequence.settings.allowedCountries,\n        orgSettings.allowedCountries,\n      ),\n    },\n    contactGroupId: consentGroup.groupId,\n    consentHostIds: consentGroup.hostIds,\n    consentAwaitsConfirmation: consentGroup.awaitsConfirmation,\n    siteName: host.exists ? String(host.get('name') ?? '') : '',\n  }\n}\n\n/**\n * The candidates, the enrollments they already have here, and the gates'\n * lookups — every map keyed by the person's own id.\n *\n * \"Already in this sequence\" is answered two ways (AGL-3234): by the id the\n * person's enrollment would have, and by any enrollment in this sequence\n * that carries the person's ADDRESS. The second is what keeps a contact\n * from being enrolled beside the lead they were converted from: the lead's\n * enrollment followed them, under the lead's key, and still names them.\n */\nasync function readPeople(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  sequence: OutreachSequence,\n  context: EnrollContext,\n  people: readonly OutreachPersonRef[],\n): Promise<{\n  candidates: OutreachEnrollCandidate[]\n  enrolledHere: Set<string>\n  lookups: Map<string, OutreachGateLookups>\n}> {\n  const candidates = await readOutreachEnrollCandidates(firestore, {\n    orgId: caller.orgId,\n    hostId: sequence.hostId,\n    contactGroupId: context.contactGroupId,\n    people,\n  })\n  const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n  const existing = candidates.length\n    ? await firestore.getAll(\n        ...candidates.map((candidate) => enrollments.doc(outreachEnrollmentId(sequence.id, candidate.personId))),\n      )\n    : []\n  const enrolledHere = new Set(\n    candidates.filter((_candidate, index) => existing[index]?.exists).map((candidate) => candidate.personId),\n  )\n  const askable = candidates.filter((candidate) => candidate.contact && candidate.visible && candidate.email)\n  const lookups = askable.length\n    ? await readOutreachGateLookups(firestore, {\n        orgId: caller.orgId,\n        hostId: sequence.hostId,\n        consentHostIds: context.consentHostIds,\n        consentAwaitsConfirmation: context.consentAwaitsConfirmation,\n        people: askable.map((candidate) => ({\n          personId: candidate.personId,\n          contactId: candidate.contactId || null,\n          leadId: candidate.leadId,\n          email: String(candidate.email),\n        })),\n      })\n    : new Map<string, OutreachGateLookups>()\n  for (const candidate of askable) {\n    const open = lookups.get(candidate.personId)?.openEnrollments ?? []\n    if (open.some((entry) => entry.sequenceId === sequence.id)) enrolledHere.add(candidate.personId)\n  }\n  return { candidates, enrolledHere, lookups }\n}\n\nconst uniqueIds = (values: unknown): string[] =>\n  Array.isArray(values)\n    ? [...new Set(values.map(readOutreachDocumentId).filter((id): id is string => id !== null))]\n    : []\n\n/** The most leads a saved Leads view reads — the Leads list's own window. */\nconst LEADS_VIEW_WINDOW = 200\n\n/**\n * The people a saved LEADS view selects (AGL-3234): the sequence's site's\n * most recently seen leads, narrowed by the view's status clause the way\n * the Leads list narrows its window — open leads when the view names no\n * status, one status when it does, everything for `all`. The person key IS\n * the id, so there is no address to resolve — and since AGL-3275 the window is\n * narrowed by `visibleTo` rather than by the collection's parent.\n */\nasync function leadsViewPeople(\n  firestore: Firestore,\n  orgId: string,\n  sequence: OutreachSequence,\n  filters: ReturnType<typeof normalizeCrmViewFilters>,\n): Promise<{ people: OutreachPersonRef[]; total: number; truncated: boolean }> {\n  const statusClause = filters.find((clause) => clause.field === 'status' && clause.op === 'equals')\n  const wanted = String(statusClause?.value ?? 'open')\n  /*\n   * SCOPED (AGL-3275). The collection is org-wide, so the window is narrowed\n   * to what the sequence's site may see before it is ordered — otherwise an\n   * agency's sequence would offer another client's people to enroll. The\n   * composite index for `visibleTo array-contains-any` + `lastSeenAtMs desc`\n   * is in `cloud/firestore.indexes.json`.\n   */\n  const window = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('leads')\n    .where('visibleTo', 'array-contains-any', scopeTokensForHost(sequence.hostId))\n    .orderBy('lastSeenAtMs', 'desc')\n    .limit(LEADS_VIEW_WINDOW + 1)\n    .get()\n  const matching = window.docs.slice(0, LEADS_VIEW_WINDOW).filter((doc) => {\n    const lead = doc.data() as Record<string, unknown>\n    if (wanted === 'all') return true\n    if (wanted === 'open') return isCrmLeadOpen(lead as never) && !lead['convertedContactId']\n    return crmLeadStatus(lead as never) === wanted\n  })\n  return {\n    people: matching.slice(0, OUTREACH_ENROLL_BATCH_MAX).map((doc) => ({ kind: 'lead', id: doc.id })),\n    total: matching.length,\n    truncated: matching.length > OUTREACH_ENROLL_BATCH_MAX || window.docs.length > LEADS_VIEW_WINDOW,\n  }\n}\n\nexport function createOutreachEnrollRoutes(deps: OutreachEnrollRouteDeps): OutreachEnrollRoutes {\n  /**\n   * The person joins the sequence's campaigns (AGL-3254), the moment they\n   * are enrolled: `arrayUnion` on the lead's own `campaignIds`, or on the\n   * contact's facet for the sequence's site — the same field, the same\n   * shape, every other campaign member carries — and `enrolled` credited\n   * to each campaign. After the enrollment is created and never before:\n   * a person the create refused joins nothing. Neither write may fail the\n   * enrollment, which already exists; a membership that could not be\n   * stamped is one the list's bulk bar can add by hand.\n   */\n  async function joinSequenceCampaigns(\n    firestore: Firestore,\n    orgId: string,\n    sequence: OutreachSequence,\n    contactGroupId: string,\n    candidate: OutreachEnrollCandidate,\n    nowMs: number,\n  ): Promise<void> {\n    const campaignIds = normalizeCampaignIds(sequence.campaignIds)\n    if (!campaignIds.length) return\n    try {\n      const ref =\n        candidate.target === 'lead' && candidate.leadId\n          ? firestore.collection('orgs').doc(orgId).collection('leads').doc(candidate.leadId)\n          : candidate.contactId\n            ? firestore.collection('orgs').doc(orgId).collection('contacts').doc(candidate.contactId)\n            : null\n      if (ref) {\n        const field =\n          candidate.target === 'lead' ? CAMPAIGN_MEMBERSHIP_FIELD : contactCampaignFieldPath(contactGroupId)\n        await ref.update({ [field]: FieldValue.arrayUnion(...campaignIds), updatedAt: FieldValue.serverTimestamp() })\n      }\n    } catch (error) {\n      console.error('[outreach] the enrolled person could not join the sequence’s campaigns', error)\n    }\n    try {\n      await deps.creditCampaign({ hostId: sequence.hostId, orgId, campaignIds, outcome: 'enrolled', atMs: nowMs })\n    } catch (error) {\n      console.error('[outreach] the enrollment could not be credited to the sequence’s campaigns', error)\n    }\n  }\n\n  /**\n   * The names of the sequence's campaigns as they stand, for the entry the\n   * enroll files on the person's record (AGL-3274) — the org's containers,\n   * `orgs/{orgId}/emailCampaigns`. Read once per request, not per person; a\n   * container that is gone answers nothing and the entry names the rest.\n   */\n  async function sequenceCampaignNames(\n    firestore: Firestore,\n    orgId: string,\n    sequence: OutreachSequence,\n  ): Promise<string[]> {\n    const campaignIds = normalizeCampaignIds(sequence.campaignIds)\n    if (!campaignIds.length || !orgId) return []\n    try {\n      const containers = firestore.collection('orgs').doc(orgId).collection('emailCampaigns')\n      const found = await firestore.getAll(...campaignIds.map((id) => containers.doc(id)))\n      return found.map((snapshot) => String(snapshot.get('name') ?? '').trim()).filter(Boolean)\n    } catch (error) {\n      console.error('[outreach] the sequence’s campaigns could not be named for the record', error)\n      return []\n    }\n  }\n\n  /**\n   * The people a source names, the batch limit applied: every contact a\n   * search picked, every lead picked from the sequence's site, or the\n   * people a saved Contacts or Leads view selects there — contacts found by\n   * address, leads by their own key.\n   */\n  async function sourcePeople(\n    firestore: Firestore,\n    caller: OutreachRouteCaller,\n    sequence: OutreachSequence,\n    source: Record<string, unknown>,\n  ): Promise<Response | { people: OutreachPersonRef[]; total: number; truncated: boolean }> {\n    if (source['kind'] === 'contacts' || source['kind'] === 'leads') {\n      const kind = source['kind'] === 'leads' ? 'lead' : 'contact'\n      const ids = uniqueIds(kind === 'lead' ? source['leadIds'] : source['contactIds'])\n      if (!ids.length) return outreachRefusal(400, 'invalid-request', 'Pick the people to enroll.')\n      return {\n        people: ids.slice(0, OUTREACH_ENROLL_BATCH_MAX).map((id) => ({ kind, id })),\n        total: ids.length,\n        truncated: ids.length > OUTREACH_ENROLL_BATCH_MAX,\n      }\n    }\n    if (source['kind'] !== 'view') {\n      return outreachRefusal(400, 'invalid-request', 'Enroll people from a saved view or a search.')\n    }\n    const viewId = readOutreachDocumentId(source['viewId'])\n    const view = viewId\n      ? await firestore.collection('orgs').doc(caller.orgId).collection(CRM_COLLECTIONS.views).doc(viewId).get()\n      : null\n    const data = view?.exists ? (view.data() as Record<string, unknown>) : null\n    // A colleague's private view is theirs: it is not listed for this\n    // reader, so it does not exist for them here either.\n    if (\n      !viewId ||\n      !data ||\n      !crmViewIsListed({ shared: data['shared'] === true, ownerUid: String(data['ownerUid'] ?? '') }, caller.uid)\n    ) {\n      return outreachRefusal(404, 'view-not-found', 'That saved view no longer exists.')\n    }\n    if (data['section'] === 'leads') {\n      return leadsViewPeople(firestore, caller.orgId, sequence, normalizeCrmViewFilters(data['filters']))\n    }\n    if (data['section'] !== 'contacts') {\n      return outreachRefusal(400, 'view-unsupported', 'Enroll from a saved view of Contacts or Leads.')\n    }\n    const { unsupported } = dynamicListDimensionsForCrmView(normalizeCrmViewFilters(data['filters']))\n    if (unsupported.length) {\n      // Dropping the filter enrolling cannot read would enroll more people\n      // than the view shows, so the view is refused whole.\n      return outreachRefusal(\n        400,\n        'view-unsupported',\n        `This view filters on ${unsupported.map((clause) => clause.label || clause.field).join(', ')}, which enrolling can't apply. Pick another view, or search.`,\n      )\n    }\n    const { emails, complete } = await deps.crmViewEmails({ hostId: sequence.hostId, viewId })\n    const ordered = [...new Set(emails)].sort()\n    const contacts = firestore.collection('orgs').doc(caller.orgId).collection('contacts')\n    const found = await Promise.all(\n      ordered\n        .slice(0, OUTREACH_ENROLL_BATCH_MAX)\n        .map((email) => findContactByEmail(contacts, email, { hostId: sequence.hostId })),\n    )\n    return {\n      people: [...new Set(found.filter((snapshot) => snapshot).map((snapshot) => String(snapshot?.id)))].map(\n        (id) => ({ kind: 'contact', id }),\n      ),\n      total: ordered.length,\n      truncated: ordered.length > OUTREACH_ENROLL_BATCH_MAX || !complete,\n    }\n  }\n\n  const preview: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate, [OUTREACH_READS_PEOPLE])\n    if (caller instanceof Response) return caller\n    const firestore = deps.firestore()\n    const sequence = await loadActiveSequence(firestore, caller.orgId, body['sequenceId'])\n    if (sequence instanceof Response) return sequence\n    const source = body['source'] && typeof body['source'] === 'object' ? (body['source'] as Record<string, unknown>) : {}\n    const named = await sourcePeople(firestore, caller, sequence, source)\n    if (named instanceof Response) return named\n    const context = await enrollContext(firestore, caller, sequence)\n    const { candidates, enrolledHere, lookups } = await readPeople(\n      firestore,\n      caller,\n      sequence,\n      context,\n      named.people,\n    )\n    const people = candidates.map((candidate) =>\n      previewOutreachPerson(\n        {\n          candidate,\n          lookups: lookups.get(candidate.personId) ?? UNCHECKED,\n          settings: context.settings,\n          contactGroupId: context.contactGroupId,\n        },\n        { siteName: context.siteName, alreadyInSequence: enrolledHere.has(candidate.personId) },\n      ),\n    )\n    return outreachOk({\n      ok: true,\n      people,\n      total: named.total,\n      truncated: named.truncated,\n    } satisfies OutreachEnrollPreviewResponse)\n  }\n\n  const confirm: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate, [OUTREACH_READS_PEOPLE])\n    if (caller instanceof Response) return caller\n    const firestore = deps.firestore()\n    const sequence = await loadActiveSequence(firestore, caller.orgId, body['sequenceId'])\n    if (sequence instanceof Response) return sequence\n\n    const nowMs = deps.now()\n    // Each person once, by whichever record they are: a contact by id, or a\n    // lead by its key (AGL-3234). A person named both ways is a contact.\n    const requested = new Map<\n      string,\n      { ref: OutreachPersonRef; personalLine: string; attestations: unknown[]; overrides: OutreachStepOverrideRead }\n    >()\n    for (const entry of Array.isArray(body['people']) ? body['people'] : []) {\n      const person = (entry && typeof entry === 'object' ? entry : {}) as Record<string, unknown>\n      const contactId = readOutreachDocumentId(person['contactId'])\n      const leadId = readOutreachDocumentId(person['leadId'])\n      const ref: OutreachPersonRef | null = contactId\n        ? { kind: 'contact', id: contactId }\n        : leadId\n          ? { kind: 'lead', id: leadId }\n          : null\n      if (!ref || requested.has(ref.id)) continue\n      // The steps the member curated for this person (AGL-3324), validated\n      // here rather than trusted: a copy that breaks a rule refuses the\n      // whole request, so nobody is enrolled with a copy the route dropped.\n      const overrides = readOutreachStepOverrideRequests(person['stepOverrides'], sequence.steps, {\n        uid: caller.uid,\n        nowMs,\n      })\n      if (outreachStepOverridesRefused(overrides)) {\n        return outreachRefusal(\n          400,\n          'invalid-override',\n          overrides.refusal ?? 'A curated step breaks a rule every sequence email keeps.',\n          { issues: overrides.issues },\n        )\n      }\n      requested.set(ref.id, {\n        ref,\n        personalLine: typeof person['personalLine'] === 'string' ? person['personalLine'] : '',\n        attestations: Array.isArray(person['attestations']) ? person['attestations'] : [],\n        overrides,\n      })\n    }\n    if (!requested.size) return outreachRefusal(400, 'invalid-request', 'Pick the people to enroll.')\n    if (requested.size > OUTREACH_ENROLL_BATCH_MAX) {\n      return outreachRefusal(\n        400,\n        'invalid-request',\n        `Enroll at most ${OUTREACH_ENROLL_BATCH_MAX} people at a time.`,\n      )\n    }\n\n    const mailboxSnapshot = sequence.mailboxId\n      ? await outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get()\n      : null\n    const mailbox = readStoredOutreachMailbox(\n      sequence.mailboxId,\n      mailboxSnapshot?.exists ? mailboxSnapshot.data() : undefined,\n    )\n    if (!mailbox || mailbox.status === 'disconnected') {\n      return outreachRefusal(\n        409,\n        'mailbox-unavailable',\n        \"This sequence's mailbox is no longer connected. Choose another mailbox for it before enrolling people.\",\n      )\n    }\n    if (planOutreachFirstDue({ sequence, mailbox, enrolledAtMs: nowMs, random: deps.random }) === null) {\n      return outreachRefusal(\n        409,\n        'mailbox-unavailable',\n        \"This sequence's sending hours never open in its mailbox's timezone. Fix the hours before enrolling people.\",\n      )\n    }\n\n    const context = await enrollContext(firestore, caller, sequence)\n    const { candidates, enrolledHere, lookups } = await readPeople(\n      firestore,\n      caller,\n      sequence,\n      context,\n      [...requested.values()].map((entry) => entry.ref),\n    )\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const campaignNames = await sequenceCampaignNames(firestore, caller.orgId, sequence)\n    // The member's name for the curated entries (AGL-3324), read once per\n    // request and only when a person carries a curated step.\n    let memberNameRead: Promise<string | null> | null = null\n    const memberName = () => {\n      memberNameRead ??= firestore\n        .collection('orgs')\n        .doc(caller.orgId)\n        .collection('members')\n        .doc(caller.uid)\n        .get()\n        .then(\n          (member) =>\n            (member.exists\n              ? String(member.get('displayName') ?? '').trim() || String(member.get('email') ?? '').trim()\n              : '') || caller.email,\n        )\n        .catch(() => caller.email)\n      return memberNameRead\n    }\n    const results: OutreachEnrollOutcome[] = await Promise.all(\n      candidates.map(async (candidate): Promise<OutreachEnrollOutcome> => {\n        const named = {\n          personId: candidate.personId,\n          target: candidate.target,\n          contactId: candidate.contactId,\n          leadId: candidate.leadId,\n        }\n        const supplied = requested.get(candidate.personId) ?? {\n          personalLine: '',\n          attestations: [],\n          overrides: { overrides: {}, issues: [], refusal: null } satisfies OutreachStepOverrideRead,\n        }\n        const stepOverrides: OutreachStepOverrides = supplied.overrides.overrides\n        const decision = decideOutreachEnrollment(\n          {\n            candidate,\n            lookups: lookups.get(candidate.personId) ?? UNCHECKED,\n            settings: context.settings,\n            contactGroupId: context.contactGroupId,\n          },\n          { siteName: context.siteName, alreadyInSequence: enrolledHere.has(candidate.personId) },\n          { personalLine: supplied.personalLine, attestations: supplied.attestations, uid: caller.uid, nowMs },\n        )\n        if (!decision.allowed || !decision.email) {\n          return { ...named, email: candidate.email, outcome: 'blocked', blocks: decision.blocks }\n        }\n        const id = outreachEnrollmentId(sequence.id, candidate.personId)\n        const enrollment = buildOutreachEnrollment({\n          id,\n          sequence,\n          mailbox,\n          target: candidate.target,\n          contactId: candidate.contactId,\n          leadId: candidate.leadId,\n          contactName: candidate.name,\n          email: decision.email,\n          cold: decision.cold,\n          personalLine: supplied.personalLine,\n          attestations: decision.attestations,\n          enrolledByUid: caller.uid,\n          nowMs,\n          random: deps.random,\n        })\n        // The person's own copies of steps (AGL-3324) ride with the\n        // enrollment from its first write: nothing sends between.\n        if (Object.keys(stepOverrides).length) enrollment.stepOverrides = stepOverrides\n        try {\n          await enrollments.doc(id).create(enrollment)\n        } catch (error) {\n          if ((error as { code?: unknown })?.code !== ALREADY_EXISTS) throw error\n          return {\n            ...named,\n            email: candidate.email,\n            outcome: 'blocked',\n            blocks: [\n              {\n                code: 'already_in_sequence',\n                reason: \"This person has already been in this sequence, so they won't be sent its emails again.\",\n              },\n            ],\n          }\n        }\n        await joinSequenceCampaigns(firestore, caller.orgId, sequence, context.contactGroupId, candidate, nowMs)\n        // The person's record says so (AGL-3274): \"Enrolled in <sequence>\",\n        // with the campaigns it carried them into, once per enrollment.\n        const entry = outreachEnrolledEntry({ enrollmentId: id, sequenceName: sequence.name, campaignNames })\n        await fileOutreachNote(deps, {\n          orgId: caller.orgId,\n          hostId: sequence.hostId,\n          link: outreachEnrollmentLink(enrollment),\n          dedupeKey: entry.dedupeKey,\n          body: entry.body,\n          atMs: nowMs,\n        })\n        // And one line per step the member curated for them (AGL-3324),\n        // after the enrollment's own, so the record reads in order.\n        for (const [key, override] of Object.entries(stepOverrides)) {\n          const curated = outreachCuratedEntry({\n            enrollmentId: id,\n            stepIndex: Number(key),\n            source: override.source,\n            edited: override.edited === true,\n            memberName: await memberName(),\n            atMs: nowMs,\n          })\n          await fileOutreachNote(deps, {\n            orgId: caller.orgId,\n            hostId: sequence.hostId,\n            link: outreachEnrollmentLink(enrollment),\n            dedupeKey: curated.dedupeKey,\n            body: curated.body,\n            atMs: nowMs,\n          })\n        }\n        return { ...named, email: decision.email, outcome: 'enrolled', enrollmentId: id }\n      }),\n    )\n    const enrolled = results.filter((result) => result.outcome === 'enrolled').length\n    if (enrolled) {\n      await deps.logOrgActivity(\n        caller.orgId,\n        { uid: caller.uid, email: caller.email },\n        outreachEnrolledActivity(enrolled),\n        { type: OUTREACH_SEQUENCE_ACTIVITY_TARGET, id: sequence.id, name: sequence.name },\n      )\n    }\n    return outreachOk({ ok: true, results, enrolled } satisfies OutreachEnrollResponse)\n  }\n\n  return { preview, confirm }\n}\n"],"names":["CAMPAIGN_MEMBERSHIP_FIELD","contactCampaignFieldPath","normalizeCampaignIds","consentGroupForHost","scopeTokensForHost","CRM_COLLECTIONS","crmLeadStatus","crmViewIsListed","isCrmLeadOpen","normalizeCrmViewFilters","dynamicListDimensionsForCrmView","findContactByEmail","FieldValue","outreachCuratedEntry","outreachEnrolledEntry","buildOutreachEnrollment","planOutreachFirstDue","decideOutreachEnrollment","previewOutreachPerson","readOutreachEnrollCandidates","readOutreachGateLookups","outreachStepOverridesRefused","readOutreachStepOverrideRequests","effectiveOutreachAllowedCountries","OUTREACH_ENROLL_BATCH_MAX","readOutreachComplianceSettingsDoc","fileOutreachNote","outreachEnrollmentId","outreachEnrollmentLink","outreachOrgCollection","readStoredOutreachMailbox","readStoredOutreachSequence","OUTREACH_SEQUENCE_ACTIVITY_TARGET","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","OUTREACH_READS_PEOPLE","key","refusal","outreachEnrolledActivity","count","UNCHECKED","platformSuppressed","hostSuppressed","salesTopicState","doNotContact","doNotContactDomain","workspaceMembers","openEnrollments","hasInboundEmail","ALREADY_EXISTS","loadActiveSequence","firestore","orgId","rawSequenceId","sequenceId","snapshot","doc","get","sequence","exists","data","undefined","status","enrollContext","caller","host","orgSettings","Promise","all","collection","hostId","consentGroup","org","settings","allowedCountries","contactGroupId","groupId","consentHostIds","hostIds","consentAwaitsConfirmation","awaitsConfirmation","siteName","String","readPeople","context","people","candidates","enrollments","existing","length","getAll","map","candidate","id","personId","enrolledHere","Set","filter","_candidate","index","askable","contact","visible","email","lookups","contactId","leadId","Map","open","some","entry","add","uniqueIds","values","Array","isArray","LEADS_VIEW_WINDOW","leadsViewPeople","filters","statusClause","find","clause","field","op","wanted","value","window","where","orderBy","limit","matching","docs","slice","lead","kind","total","truncated","createOutreachEnrollRoutes","deps","joinSequenceCampaigns","nowMs","campaignIds","ref","target","update","arrayUnion","updatedAt","serverTimestamp","error","console","creditCampaign","outcome","atMs","sequenceCampaignNames","containers","found","trim","Boolean","sourcePeople","source","ids","viewId","view","views","shared","ownerUid","uid","unsupported","label","join","emails","complete","crmViewEmails","ordered","sort","contacts","preview","request","method","body","gate","Response","named","alreadyInSequence","has","ok","confirm","now","requested","person","overrides","steps","issues","set","personalLine","attestations","size","mailboxSnapshot","mailboxId","mailbox","enrolledAtMs","random","campaignNames","memberNameRead","memberName","then","member","catch","results","supplied","stepOverrides","decision","allowed","blocks","enrollment","contactName","name","cold","enrolledByUid","Object","keys","create","code","reason","enrollmentId","sequenceName","link","dedupeKey","override","entries","curated","stepIndex","Number","edited","enrolled","result","logOrgActivity","type"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,yBAAyB,EACzBC,wBAAwB,EACxBC,oBAAoB,QACf,6CAA4C;AACnD,SAASC,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,kBAAkB,QAAQ,sCAAqC;AACxE,SACEC,eAAe,EACfC,aAAa,EACbC,eAAe,EACfC,aAAa,EACbC,uBAAuB,QAClB,6BAA4B;AACnC,SAASC,+BAA+B,QAAQ,2CAA0C;AAI1F,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,oBAAoB,EAAEC,qBAAqB,QAAQ,mCAA+B;AAC3F,SAASC,uBAAuB,EAAEC,oBAAoB,QAAQ,gCAA4B;AAE1F,SACEC,wBAAwB,EACxBC,qBAAqB,EACrBC,4BAA4B,QAGvB,iCAA6B;AACpC,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SACEC,4BAA4B,EAC5BC,gCAAgC,QAE3B,kCAA8B;AACrC,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SACEC,yBAAyB,QAKpB,2BAAuB;AAE9B,SAASC,iCAAiC,QAAQ,0CAAsC;AACxF,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SACEC,oBAAoB,EACpBC,sBAAsB,EACtBC,qBAAqB,EACrBC,yBAAyB,EACzBC,0BAA0B,QACrB,iCAA6B;AACpC,SAASC,iCAAiC,QAAgC,kBAAc;AACxF,SAASC,iBAAiB,QAAqE,kBAAc;AAC7G,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,iDAAiD,GACjD,OAAO,MAAMC,wBAAsD;IACjEC,KAAK;IACLC,SAAS;AACX,EAAC;AA6BD,wCAAwC,GACxC,OAAO,SAASC,yBAAyBC,KAAa;IACpD,OAAOA,UAAU,IACb,oCACA,CAAC,SAAS,EAAEA,MAAM,qBAAqB,CAAC;AAC9C;AAEA,mFAAmF,GACnF,MAAMC,YAAiC;IACrCC,oBAAoB;IACpBC,gBAAgB;IAChBC,iBAAiB;IACjBC,cAAc;IACdC,oBAAoB;IACpBC,kBAAkB;IAClBC,iBAAiB;IACjBC,iBAAiB;AACnB;AAIA,qFAAqF,GACrF,MAAMC,iBAAiB;AAEvB,eAAeC,mBACbC,SAAoB,EACpBC,KAAa,EACbC,aAAsB;IAEtB,MAAMC,aAAarB,uBAAuBoB;IAC1C,IAAI,CAACC,YAAY,OAAOtB,gBAAgB,KAAK,mBAAmB;IAChE,MAAMuB,WAAW,MAAM9B,sBAAsB0B,WAAWC,OAAO,aAAaI,GAAG,CAACF,YAAYG,GAAG;IAC/F,MAAMC,WAAW/B,2BAA2B2B,YAAYC,SAASI,MAAM,GAAGJ,SAASK,IAAI,KAAKC;IAC5F,IAAI,CAACH,UAAU,OAAO1B,gBAAgB,KAAK,sBAAsB;IACjE,IAAI0B,SAASI,MAAM,KAAK,YAAY;QAClC,OAAO9B,gBAAgB,KAAK,qBAAqB;IACnD;IACA,IAAI0B,SAASI,MAAM,KAAK,UAAU;QAChC,OAAO9B,gBAAgB,KAAK,uBAAuB;IACrD;IACA,OAAO0B;AACT;AAaA,eAAeK,cACbZ,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B;QAmBOO;IAjBjC,MAAM,CAACC,aAAaD,KAAK,GAAG,MAAME,QAAQC,GAAG,CAAC;QAC5C/C,kCAAkC8B,WAAWa,OAAOZ,KAAK;QACzDD,UAAUkB,UAAU,CAAC,SAASb,GAAG,CAACE,SAASY,MAAM,EAAEb,GAAG;KACvD;IACD,MAAMc,eAAexE,oBAAoBiE,OAAOQ,GAAG,EAAEd,SAASY,MAAM;IACpE,OAAO;QACL,kEAAkE;QAClEG,UAAU,aACLf,SAASe,QAAQ;YACpBC,kBAAkBvD,kCAChBuC,SAASe,QAAQ,CAACC,gBAAgB,EAClCR,YAAYQ,gBAAgB;;QAGhCC,gBAAgBJ,aAAaK,OAAO;QACpCC,gBAAgBN,aAAaO,OAAO;QACpCC,2BAA2BR,aAAaS,kBAAkB;QAC1DC,UAAUhB,KAAKN,MAAM,GAAGuB,QAAOjB,YAAAA,KAAKR,GAAG,CAAC,mBAATQ,YAAoB,MAAM;IAC3D;AACF;AAEA;;;;;;;;;CASC,GACD,eAAekB,WACbhC,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B,EAC1B0B,OAAsB,EACtBC,MAAoC;IAMpC,MAAMC,aAAa,MAAMvE,6BAA6BoC,WAAW;QAC/DC,OAAOY,OAAOZ,KAAK;QACnBkB,QAAQZ,SAASY,MAAM;QACvBK,gBAAgBS,QAAQT,cAAc;QACtCU;IACF;IACA,MAAME,cAAc9D,sBAAsB0B,WAAWa,OAAOZ,KAAK,EAAE;IACnE,MAAMoC,WAAWF,WAAWG,MAAM,GAC9B,MAAMtC,UAAUuC,MAAM,IACjBJ,WAAWK,GAAG,CAAC,CAACC,YAAcL,YAAY/B,GAAG,CAACjC,qBAAqBmC,SAASmC,EAAE,EAAED,UAAUE,QAAQ,OAEvG,EAAE;IACN,MAAMC,eAAe,IAAIC,IACvBV,WAAWW,MAAM,CAAC,CAACC,YAAYC;YAAUX;gBAAAA,kBAAAA,QAAQ,CAACW,MAAM,qBAAfX,gBAAiB7B,MAAM;OAAEgC,GAAG,CAAC,CAACC,YAAcA,UAAUE,QAAQ;IAEzG,MAAMM,UAAUd,WAAWW,MAAM,CAAC,CAACL,YAAcA,UAAUS,OAAO,IAAIT,UAAUU,OAAO,IAAIV,UAAUW,KAAK;IAC1G,MAAMC,UAAUJ,QAAQX,MAAM,GAC1B,MAAMzE,wBAAwBmC,WAAW;QACvCC,OAAOY,OAAOZ,KAAK;QACnBkB,QAAQZ,SAASY,MAAM;QACvBO,gBAAgBO,QAAQP,cAAc;QACtCE,2BAA2BK,QAAQL,yBAAyB;QAC5DM,QAAQe,QAAQT,GAAG,CAAC,CAACC,YAAe,CAAA;gBAClCE,UAAUF,UAAUE,QAAQ;gBAC5BW,WAAWb,UAAUa,SAAS,IAAI;gBAClCC,QAAQd,UAAUc,MAAM;gBACxBH,OAAOrB,OAAOU,UAAUW,KAAK;YAC/B,CAAA;IACF,KACA,IAAII;IACR,KAAK,MAAMf,aAAaQ,QAAS;;YAClBI;QAAb,MAAMI,gBAAOJ,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,sBAA9BU,aAAiCzD,eAAe,mBAAI,EAAE;QACnE,IAAI6D,KAAKC,IAAI,CAAC,CAACC,QAAUA,MAAMxD,UAAU,KAAKI,SAASmC,EAAE,GAAGE,aAAagB,GAAG,CAACnB,UAAUE,QAAQ;IACjG;IACA,OAAO;QAAER;QAAYS;QAAcS;IAAQ;AAC7C;AAEA,MAAMQ,YAAY,CAACC,SACjBC,MAAMC,OAAO,CAACF,UACV;WAAI,IAAIjB,IAAIiB,OAAOtB,GAAG,CAAC1D,wBAAwBgE,MAAM,CAAC,CAACJ,KAAqBA,OAAO;KAAO,GAC1F,EAAE;AAER,2EAA2E,GAC3E,MAAMuB,oBAAoB;AAE1B;;;;;;;CAOC,GACD,eAAeC,gBACblE,SAAoB,EACpBC,KAAa,EACbM,QAA0B,EAC1B4D,OAAmD;;IAEnD,MAAMC,eAAeD,QAAQE,IAAI,CAAC,CAACC,SAAWA,OAAOC,KAAK,KAAK,YAAYD,OAAOE,EAAE,KAAK;IACzF,MAAMC,SAAS1C,eAAOqC,gCAAAA,aAAcM,KAAK,mBAAI;IAC7C;;;;;;GAMC,GACD,MAAMC,SAAS,MAAM3E,UAClBkB,UAAU,CAAC,QACXb,GAAG,CAACJ,OACJiB,UAAU,CAAC,SACX0D,KAAK,CAAC,aAAa,sBAAsB/H,mBAAmB0D,SAASY,MAAM,GAC3E0D,OAAO,CAAC,gBAAgB,QACxBC,KAAK,CAACb,oBAAoB,GAC1B3D,GAAG;IACN,MAAMyE,WAAWJ,OAAOK,IAAI,CAACC,KAAK,CAAC,GAAGhB,mBAAmBnB,MAAM,CAAC,CAACzC;QAC/D,MAAM6E,OAAO7E,IAAII,IAAI;QACrB,IAAIgE,WAAW,OAAO,OAAO;QAC7B,IAAIA,WAAW,QAAQ,OAAOxH,cAAciI,SAAkB,CAACA,IAAI,CAAC,qBAAqB;QACzF,OAAOnI,cAAcmI,UAAmBT;IAC1C;IACA,OAAO;QACLvC,QAAQ6C,SAASE,KAAK,CAAC,GAAGhH,2BAA2BuE,GAAG,CAAC,CAACnC,MAAS,CAAA;gBAAE8E,MAAM;gBAAQzC,IAAIrC,IAAIqC,EAAE;YAAC,CAAA;QAC9F0C,OAAOL,SAASzC,MAAM;QACtB+C,WAAWN,SAASzC,MAAM,GAAGrE,6BAA6B0G,OAAOK,IAAI,CAAC1C,MAAM,GAAG2B;IACjF;AACF;AAEA,OAAO,SAASqB,2BAA2BC,IAA6B;IACtE;;;;;;;;;GASC,GACD,eAAeC,sBACbxF,SAAoB,EACpBC,KAAa,EACbM,QAA0B,EAC1BiB,cAAsB,EACtBiB,SAAkC,EAClCgD,KAAa;QAEb,MAAMC,cAAc/I,qBAAqB4D,SAASmF,WAAW;QAC7D,IAAI,CAACA,YAAYpD,MAAM,EAAE;QACzB,IAAI;YACF,MAAMqD,MACJlD,UAAUmD,MAAM,KAAK,UAAUnD,UAAUc,MAAM,GAC3CvD,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC,SAASb,GAAG,CAACoC,UAAUc,MAAM,IAChFd,UAAUa,SAAS,GACjBtD,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC,YAAYb,GAAG,CAACoC,UAAUa,SAAS,IACtF;YACR,IAAIqC,KAAK;gBACP,MAAMpB,QACJ9B,UAAUmD,MAAM,KAAK,SAASnJ,4BAA4BC,yBAAyB8E;gBACrF,MAAMmE,IAAIE,MAAM,CAAC;oBAAE,CAACtB,MAAM,EAAElH,WAAWyI,UAAU,IAAIJ;oBAAcK,WAAW1I,WAAW2I,eAAe;gBAAG;YAC7G;QACF,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,0EAA0EA;QAC1F;QACA,IAAI;YACF,MAAMV,KAAKY,cAAc,CAAC;gBAAEhF,QAAQZ,SAASY,MAAM;gBAAElB;gBAAOyF;gBAAaU,SAAS;gBAAYC,MAAMZ;YAAM;QAC5G,EAAE,OAAOQ,OAAO;YACdC,QAAQD,KAAK,CAAC,+EAA+EA;QAC/F;IACF;IAEA;;;;;GAKC,GACD,eAAeK,sBACbtG,SAAoB,EACpBC,KAAa,EACbM,QAA0B;QAE1B,MAAMmF,cAAc/I,qBAAqB4D,SAASmF,WAAW;QAC7D,IAAI,CAACA,YAAYpD,MAAM,IAAI,CAACrC,OAAO,OAAO,EAAE;QAC5C,IAAI;YACF,MAAMsG,aAAavG,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC;YACtE,MAAMsF,QAAQ,MAAMxG,UAAUuC,MAAM,IAAImD,YAAYlD,GAAG,CAAC,CAACE,KAAO6D,WAAWlG,GAAG,CAACqC;YAC/E,OAAO8D,MAAMhE,GAAG,CAAC,CAACpC;oBAAoBA;uBAAP2B,QAAO3B,gBAAAA,SAASE,GAAG,CAAC,mBAAbF,gBAAwB,IAAIqG,IAAI;eAAI3D,MAAM,CAAC4D;QACnF,EAAE,OAAOT,OAAO;YACdC,QAAQD,KAAK,CAAC,yEAAyEA;YACvF,OAAO,EAAE;QACX;IACF;IAEA;;;;;GAKC,GACD,eAAeU,aACb3G,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B,EAC1BqG,MAA+B;YAyBwCnG;QAvBvE,IAAImG,MAAM,CAAC,OAAO,KAAK,cAAcA,MAAM,CAAC,OAAO,KAAK,SAAS;YAC/D,MAAMzB,OAAOyB,MAAM,CAAC,OAAO,KAAK,UAAU,SAAS;YACnD,MAAMC,MAAMhD,UAAUsB,SAAS,SAASyB,MAAM,CAAC,UAAU,GAAGA,MAAM,CAAC,aAAa;YAChF,IAAI,CAACC,IAAIvE,MAAM,EAAE,OAAOzD,gBAAgB,KAAK,mBAAmB;YAChE,OAAO;gBACLqD,QAAQ2E,IAAI5B,KAAK,CAAC,GAAGhH,2BAA2BuE,GAAG,CAAC,CAACE,KAAQ,CAAA;wBAAEyC;wBAAMzC;oBAAG,CAAA;gBACxE0C,OAAOyB,IAAIvE,MAAM;gBACjB+C,WAAWwB,IAAIvE,MAAM,GAAGrE;YAC1B;QACF;QACA,IAAI2I,MAAM,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAO/H,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMiI,SAAShI,uBAAuB8H,MAAM,CAAC,SAAS;QACtD,MAAMG,OAAOD,SACT,MAAM9G,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACQ,OAAOZ,KAAK,EAAEiB,UAAU,CAACpE,gBAAgBkK,KAAK,EAAE3G,GAAG,CAACyG,QAAQxG,GAAG,KACtG;QACJ,MAAMG,OAAOsG,CAAAA,wBAAAA,KAAMvG,MAAM,IAAIuG,KAAKtG,IAAI,KAAiC;QACvE,kEAAkE;QAClE,qDAAqD;QACrD,IACE,CAACqG,UACD,CAACrG,QACD,CAACzD,gBAAgB;YAAEiK,QAAQxG,IAAI,CAAC,SAAS,KAAK;YAAMyG,UAAUnF,QAAOtB,iBAAAA,IAAI,CAAC,WAAW,YAAhBA,iBAAoB;QAAI,GAAGI,OAAOsG,GAAG,GAC1G;YACA,OAAOtI,gBAAgB,KAAK,kBAAkB;QAChD;QACA,IAAI4B,IAAI,CAAC,UAAU,KAAK,SAAS;YAC/B,OAAOyD,gBAAgBlE,WAAWa,OAAOZ,KAAK,EAAEM,UAAUrD,wBAAwBuD,IAAI,CAAC,UAAU;QACnG;QACA,IAAIA,IAAI,CAAC,UAAU,KAAK,YAAY;YAClC,OAAO5B,gBAAgB,KAAK,oBAAoB;QAClD;QACA,MAAM,EAAEuI,WAAW,EAAE,GAAGjK,gCAAgCD,wBAAwBuD,IAAI,CAAC,UAAU;QAC/F,IAAI2G,YAAY9E,MAAM,EAAE;YACtB,qEAAqE;YACrE,qDAAqD;YACrD,OAAOzD,gBACL,KACA,oBACA,CAAC,qBAAqB,EAAEuI,YAAY5E,GAAG,CAAC,CAAC8B,SAAWA,OAAO+C,KAAK,IAAI/C,OAAOC,KAAK,EAAE+C,IAAI,CAAC,MAAM,4DAA4D,CAAC;QAE9J;QACA,MAAM,EAAEC,MAAM,EAAEC,QAAQ,EAAE,GAAG,MAAMjC,KAAKkC,aAAa,CAAC;YAAEtG,QAAQZ,SAASY,MAAM;YAAE2F;QAAO;QACxF,MAAMY,UAAU;eAAI,IAAI7E,IAAI0E;SAAQ,CAACI,IAAI;QACzC,MAAMC,WAAW5H,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACQ,OAAOZ,KAAK,EAAEiB,UAAU,CAAC;QAC3E,MAAMsF,QAAQ,MAAMxF,QAAQC,GAAG,CAC7ByG,QACGzC,KAAK,CAAC,GAAGhH,2BACTuE,GAAG,CAAC,CAACY,QAAUhG,mBAAmBwK,UAAUxE,OAAO;gBAAEjC,QAAQZ,SAASY,MAAM;YAAC;QAElF,OAAO;YACLe,QAAQ;mBAAI,IAAIW,IAAI2D,MAAM1D,MAAM,CAAC,CAAC1C,WAAaA,UAAUoC,GAAG,CAAC,CAACpC,WAAa2B,OAAO3B,4BAAAA,SAAUsC,EAAE;aAAI,CAACF,GAAG,CACpG,CAACE,KAAQ,CAAA;oBAAEyC,MAAM;oBAAWzC;gBAAG,CAAA;YAEjC0C,OAAOsC,QAAQpF,MAAM;YACrB+C,WAAWqC,QAAQpF,MAAM,GAAGrE,6BAA6B,CAACuJ;QAC5D;IACF;IAEA,MAAMK,UAA+B,OAAOC;QAC1C,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOpJ,yBAAyB;QAC/D,MAAMqJ,OAAO,MAAMjJ,qBAAqB+I;QACxC,MAAMjH,SAAS,MAAMnC,kBAAkBoJ,SAASE,IAAI,CAAC,QAAQ,EAAEzC,KAAK0C,IAAI,EAAE;YAACjJ;SAAsB;QACjG,IAAI6B,kBAAkBqH,UAAU,OAAOrH;QACvC,MAAMb,YAAYuF,KAAKvF,SAAS;QAChC,MAAMO,WAAW,MAAMR,mBAAmBC,WAAWa,OAAOZ,KAAK,EAAE+H,IAAI,CAAC,aAAa;QACrF,IAAIzH,oBAAoB2H,UAAU,OAAO3H;QACzC,MAAMqG,SAASoB,IAAI,CAAC,SAAS,IAAI,OAAOA,IAAI,CAAC,SAAS,KAAK,WAAYA,IAAI,CAAC,SAAS,GAA+B,CAAC;QACrH,MAAMG,QAAQ,MAAMxB,aAAa3G,WAAWa,QAAQN,UAAUqG;QAC9D,IAAIuB,iBAAiBD,UAAU,OAAOC;QACtC,MAAMlG,UAAU,MAAMrB,cAAcZ,WAAWa,QAAQN;QACvD,MAAM,EAAE4B,UAAU,EAAES,YAAY,EAAES,OAAO,EAAE,GAAG,MAAMrB,WAClDhC,WACAa,QACAN,UACA0B,SACAkG,MAAMjG,MAAM;QAEd,MAAMA,SAASC,WAAWK,GAAG,CAAC,CAACC;gBAIhBY;mBAHb1F,sBACE;gBACE8E;gBACAY,OAAO,GAAEA,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,aAA9BU,eAAmChE;gBAC5CiC,UAAUW,QAAQX,QAAQ;gBAC1BE,gBAAgBS,QAAQT,cAAc;YACxC,GACA;gBAAEM,UAAUG,QAAQH,QAAQ;gBAAEsG,mBAAmBxF,aAAayF,GAAG,CAAC5F,UAAUE,QAAQ;YAAE;;QAG1F,OAAO/D,WAAW;YAChB0J,IAAI;YACJpG;YACAkD,OAAO+C,MAAM/C,KAAK;YAClBC,WAAW8C,MAAM9C,SAAS;QAC5B;IACF;IAEA,MAAMkD,UAA+B,OAAOT;QAC1C,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOpJ,yBAAyB;QAC/D,MAAMqJ,OAAO,MAAMjJ,qBAAqB+I;QACxC,MAAMjH,SAAS,MAAMnC,kBAAkBoJ,SAASE,IAAI,CAAC,QAAQ,EAAEzC,KAAK0C,IAAI,EAAE;YAACjJ;SAAsB;QACjG,IAAI6B,kBAAkBqH,UAAU,OAAOrH;QACvC,MAAMb,YAAYuF,KAAKvF,SAAS;QAChC,MAAMO,WAAW,MAAMR,mBAAmBC,WAAWa,OAAOZ,KAAK,EAAE+H,IAAI,CAAC,aAAa;QACrF,IAAIzH,oBAAoB2H,UAAU,OAAO3H;QAEzC,MAAMkF,QAAQF,KAAKiD,GAAG;QACtB,wEAAwE;QACxE,qEAAqE;QACrE,MAAMC,YAAY,IAAIjF;QAItB,KAAK,MAAMG,SAASI,MAAMC,OAAO,CAACgE,IAAI,CAAC,SAAS,IAAIA,IAAI,CAAC,SAAS,GAAG,EAAE,CAAE;YACvE,MAAMU,SAAU/E,SAAS,OAAOA,UAAU,WAAWA,QAAQ,CAAC;YAC9D,MAAML,YAAYxE,uBAAuB4J,MAAM,CAAC,YAAY;YAC5D,MAAMnF,SAASzE,uBAAuB4J,MAAM,CAAC,SAAS;YACtD,MAAM/C,MAAgCrC,YAClC;gBAAE6B,MAAM;gBAAWzC,IAAIY;YAAU,IACjCC,SACE;gBAAE4B,MAAM;gBAAQzC,IAAIa;YAAO,IAC3B;YACN,IAAI,CAACoC,OAAO8C,UAAUJ,GAAG,CAAC1C,IAAIjD,EAAE,GAAG;YACnC,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE;YACtE,MAAMiG,YAAY5K,iCAAiC2K,MAAM,CAAC,gBAAgB,EAAEnI,SAASqI,KAAK,EAAE;gBAC1FzB,KAAKtG,OAAOsG,GAAG;gBACf1B;YACF;YACA,IAAI3H,6BAA6B6K,YAAY;oBAIzCA;gBAHF,OAAO9J,gBACL,KACA,qBACA8J,qBAAAA,UAAUzJ,OAAO,YAAjByJ,qBAAqB,4DACrB;oBAAEE,QAAQF,UAAUE,MAAM;gBAAC;YAE/B;YACAJ,UAAUK,GAAG,CAACnD,IAAIjD,EAAE,EAAE;gBACpBiD;gBACAoD,cAAc,OAAOL,MAAM,CAAC,eAAe,KAAK,WAAWA,MAAM,CAAC,eAAe,GAAG;gBACpFM,cAAcjF,MAAMC,OAAO,CAAC0E,MAAM,CAAC,eAAe,IAAIA,MAAM,CAAC,eAAe,GAAG,EAAE;gBACjFC;YACF;QACF;QACA,IAAI,CAACF,UAAUQ,IAAI,EAAE,OAAOpK,gBAAgB,KAAK,mBAAmB;QACpE,IAAI4J,UAAUQ,IAAI,GAAGhL,2BAA2B;YAC9C,OAAOY,gBACL,KACA,mBACA,CAAC,eAAe,EAAEZ,0BAA0B,kBAAkB,CAAC;QAEnE;QAEA,MAAMiL,kBAAkB3I,SAAS4I,SAAS,GACtC,MAAM7K,sBAAsB0B,WAAWa,OAAOZ,KAAK,EAAE,aAAaI,GAAG,CAACE,SAAS4I,SAAS,EAAE7I,GAAG,KAC7F;QACJ,MAAM8I,UAAU7K,0BACdgC,SAAS4I,SAAS,EAClBD,CAAAA,mCAAAA,gBAAiB1I,MAAM,IAAG0I,gBAAgBzI,IAAI,KAAKC;QAErD,IAAI,CAAC0I,WAAWA,QAAQzI,MAAM,KAAK,gBAAgB;YACjD,OAAO9B,gBACL,KACA,uBACA;QAEJ;QACA,IAAIpB,qBAAqB;YAAE8C;YAAU6I;YAASC,cAAc5D;YAAO6D,QAAQ/D,KAAK+D,MAAM;QAAC,OAAO,MAAM;YAClG,OAAOzK,gBACL,KACA,uBACA;QAEJ;QAEA,MAAMoD,UAAU,MAAMrB,cAAcZ,WAAWa,QAAQN;QACvD,MAAM,EAAE4B,UAAU,EAAES,YAAY,EAAES,OAAO,EAAE,GAAG,MAAMrB,WAClDhC,WACAa,QACAN,UACA0B,SACA;eAAIwG,UAAU3E,MAAM;SAAG,CAACtB,GAAG,CAAC,CAACmB,QAAUA,MAAMgC,GAAG;QAElD,MAAMvD,cAAc9D,sBAAsB0B,WAAWa,OAAOZ,KAAK,EAAE;QACnE,MAAMsJ,gBAAgB,MAAMjD,sBAAsBtG,WAAWa,OAAOZ,KAAK,EAAEM;QAC3E,sEAAsE;QACtE,yDAAyD;QACzD,IAAIiJ,iBAAgD;QACpD,MAAMC,aAAa;YACjBD,yBAAAA,iBAAAA,iBAAmBxJ,UAChBkB,UAAU,CAAC,QACXb,GAAG,CAACQ,OAAOZ,KAAK,EAChBiB,UAAU,CAAC,WACXb,GAAG,CAACQ,OAAOsG,GAAG,EACd7G,GAAG,GACHoJ,IAAI,CACH,CAACC;oBAEYA,aAAkDA;uBAD7D,AAACA,CAAAA,OAAOnJ,MAAM,GACVuB,QAAO4H,cAAAA,OAAOrJ,GAAG,CAAC,0BAAXqJ,cAA6B,IAAIlD,IAAI,MAAM1E,QAAO4H,eAAAA,OAAOrJ,GAAG,CAAC,oBAAXqJ,eAAuB,IAAIlD,IAAI,KACxF,EAAC,KAAM5F,OAAOuC,KAAK;eAE1BwG,KAAK,CAAC,IAAM/I,OAAOuC,KAAK;YAC3B,OAAOoG;QACT;QACA,MAAMK,UAAmC,MAAM7I,QAAQC,GAAG,CACxDkB,WAAWK,GAAG,CAAC,OAAOC;gBAOHgG,gBASJpF;YAfb,MAAM8E,QAAQ;gBACZxF,UAAUF,UAAUE,QAAQ;gBAC5BiD,QAAQnD,UAAUmD,MAAM;gBACxBtC,WAAWb,UAAUa,SAAS;gBAC9BC,QAAQd,UAAUc,MAAM;YAC1B;YACA,MAAMuG,YAAWrB,iBAAAA,UAAUnI,GAAG,CAACmC,UAAUE,QAAQ,aAAhC8F,iBAAqC;gBACpDM,cAAc;gBACdC,cAAc,EAAE;gBAChBL,WAAW;oBAAEA,WAAW,CAAC;oBAAGE,QAAQ,EAAE;oBAAE3J,SAAS;gBAAK;YACxD;YACA,MAAM6K,gBAAuCD,SAASnB,SAAS,CAACA,SAAS;YACzE,MAAMqB,WAAWtM,yBACf;gBACE+E;gBACAY,OAAO,GAAEA,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,aAA9BU,eAAmChE;gBAC5CiC,UAAUW,QAAQX,QAAQ;gBAC1BE,gBAAgBS,QAAQT,cAAc;YACxC,GACA;gBAAEM,UAAUG,QAAQH,QAAQ;gBAAEsG,mBAAmBxF,aAAayF,GAAG,CAAC5F,UAAUE,QAAQ;YAAE,GACtF;gBAAEoG,cAAce,SAASf,YAAY;gBAAEC,cAAcc,SAASd,YAAY;gBAAE7B,KAAKtG,OAAOsG,GAAG;gBAAE1B;YAAM;YAErG,IAAI,CAACuE,SAASC,OAAO,IAAI,CAACD,SAAS5G,KAAK,EAAE;gBACxC,OAAO,aAAK+E;oBAAO/E,OAAOX,UAAUW,KAAK;oBAAEgD,SAAS;oBAAW8D,QAAQF,SAASE,MAAM;;YACxF;YACA,MAAMxH,KAAKtE,qBAAqBmC,SAASmC,EAAE,EAAED,UAAUE,QAAQ;YAC/D,MAAMwH,aAAa3M,wBAAwB;gBACzCkF;gBACAnC;gBACA6I;gBACAxD,QAAQnD,UAAUmD,MAAM;gBACxBtC,WAAWb,UAAUa,SAAS;gBAC9BC,QAAQd,UAAUc,MAAM;gBACxB6G,aAAa3H,UAAU4H,IAAI;gBAC3BjH,OAAO4G,SAAS5G,KAAK;gBACrBkH,MAAMN,SAASM,IAAI;gBACnBvB,cAAce,SAASf,YAAY;gBACnCC,cAAcgB,SAAShB,YAAY;gBACnCuB,eAAe1J,OAAOsG,GAAG;gBACzB1B;gBACA6D,QAAQ/D,KAAK+D,MAAM;YACrB;YACA,4DAA4D;YAC5D,0DAA0D;YAC1D,IAAIkB,OAAOC,IAAI,CAACV,eAAezH,MAAM,EAAE6H,WAAWJ,aAAa,GAAGA;YAClE,IAAI;gBACF,MAAM3H,YAAY/B,GAAG,CAACqC,IAAIgI,MAAM,CAACP;YACnC,EAAE,OAAOlE,OAAO;gBACd,IAAI,CAACA,yBAAD,AAACA,MAA8B0E,IAAI,MAAK7K,gBAAgB,MAAMmG;gBAClE,OAAO,aACFkC;oBACH/E,OAAOX,UAAUW,KAAK;oBACtBgD,SAAS;oBACT8D,QAAQ;wBACN;4BACES,MAAM;4BACNC,QAAQ;wBACV;qBACD;;YAEL;YACA,MAAMpF,sBAAsBxF,WAAWa,OAAOZ,KAAK,EAAEM,UAAU0B,QAAQT,cAAc,EAAEiB,WAAWgD;YAClG,oEAAoE;YACpE,gEAAgE;YAChE,MAAM9B,QAAQpG,sBAAsB;gBAAEsN,cAAcnI;gBAAIoI,cAAcvK,SAAS8J,IAAI;gBAAEd;YAAc;YACnG,MAAMpL,iBAAiBoH,MAAM;gBAC3BtF,OAAOY,OAAOZ,KAAK;gBACnBkB,QAAQZ,SAASY,MAAM;gBACvB4J,MAAM1M,uBAAuB8L;gBAC7Ba,WAAWrH,MAAMqH,SAAS;gBAC1BhD,MAAMrE,MAAMqE,IAAI;gBAChB3B,MAAMZ;YACR;YACA,gEAAgE;YAChE,4DAA4D;YAC5D,KAAK,MAAM,CAACxG,KAAKgM,SAAS,IAAIT,OAAOU,OAAO,CAACnB,eAAgB;gBAC3D,MAAMoB,UAAU7N,qBAAqB;oBACnCuN,cAAcnI;oBACd0I,WAAWC,OAAOpM;oBAClB2H,QAAQqE,SAASrE,MAAM;oBACvB0E,QAAQL,SAASK,MAAM,KAAK;oBAC5B7B,YAAY,MAAMA;oBAClBpD,MAAMZ;gBACR;gBACA,MAAMtH,iBAAiBoH,MAAM;oBAC3BtF,OAAOY,OAAOZ,KAAK;oBACnBkB,QAAQZ,SAASY,MAAM;oBACvB4J,MAAM1M,uBAAuB8L;oBAC7Ba,WAAWG,QAAQH,SAAS;oBAC5BhD,MAAMmD,QAAQnD,IAAI;oBAClB3B,MAAMZ;gBACR;YACF;YACA,OAAO,aAAK0C;gBAAO/E,OAAO4G,SAAS5G,KAAK;gBAAEgD,SAAS;gBAAYyE,cAAcnI;;QAC/E;QAEF,MAAM6I,WAAW1B,QAAQ/G,MAAM,CAAC,CAAC0I,SAAWA,OAAOpF,OAAO,KAAK,YAAY9D,MAAM;QACjF,IAAIiJ,UAAU;YACZ,MAAMhG,KAAKkG,cAAc,CACvB5K,OAAOZ,KAAK,EACZ;gBAAEkH,KAAKtG,OAAOsG,GAAG;gBAAE/D,OAAOvC,OAAOuC,KAAK;YAAC,GACvCjE,yBAAyBoM,WACzB;gBAAEG,MAAMjN;gBAAmCiE,IAAInC,SAASmC,EAAE;gBAAE2H,MAAM9J,SAAS8J,IAAI;YAAC;QAEpF;QACA,OAAOzL,WAAW;YAAE0J,IAAI;YAAMuB;YAAS0B;QAAS;IAClD;IAEA,OAAO;QAAE1D;QAASU;IAAQ;AAC5B"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enroll-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  CAMPAIGN_MEMBERSHIP_FIELD,\n  contactCampaignFieldPath,\n  normalizeCampaignIds,\n} from '@aglyn/aglyn/app-utils/campaign-membership'\nimport { consentGroupForHost } from '@aglyn/aglyn/app-utils/consent-groups'\nimport { scopeTokensForHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport {\n  CRM_COLLECTIONS,\n  crmLeadStatus,\n  crmViewIsListed,\n  isCrmLeadOpen,\n  normalizeCrmViewFilters,\n} from '@aglyn/aglyn/app-utils/crm'\nimport { dynamicListDimensionsForCrmView } from '@aglyn/aglyn/app-utils/dynamic-list-rule'\nimport type { PluginRecordTimelineWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport type { PluginTextGenerator } from '@aglyn/aglyn/plugin-manager/plugin-text-generation'\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { outreachCuratedEntry, outreachEnrolledEntry } from '../engine/enrollment-activity'\nimport { buildOutreachEnrollment, planOutreachFirstDue } from '../engine/enrollment-state'\nimport type { OutreachGateLookups } from '../engine/gates'\nimport {\n  decideOutreachEnrollment,\n  previewOutreachPerson,\n  readOutreachEnrollCandidates,\n  type OutreachEnrollCandidate,\n  type OutreachGateQuestion,\n} from '../enrollment/enroll-people'\nimport { readOutreachGateLookups } from '../enrollment/gate-lookups'\nimport {\n  outreachStepOverridesRefused,\n  readOutreachStepOverrideRequests,\n  type OutreachStepOverrideRead,\n} from '../enrollment/step-overrides'\nimport { effectiveOutreachAllowedCountries } from '../model/compliance-settings'\nimport {\n  OUTREACH_ENROLL_BATCH_MAX,\n  type OutreachEnrollOutcome,\n  type OutreachEnrollPreviewResponse,\n  type OutreachEnrollResponse,\n  type OutreachPersonRef,\n} from '../model/outreach-api'\nimport type { OutreachSequence, OutreachStepOverrides } from '../model/outreach.types'\nimport { readOutreachComplianceSettingsDoc } from '../storage/compliance-settings-store'\nimport type { OutreachDomainIntelReadInput } from '../storage/domain-intel-store'\nimport { fileOutreachNote } from '../runtime/timeline'\nimport {\n  outreachEnrollmentId,\n  outreachEnrollmentLink,\n  outreachOrgCollection,\n  readStoredOutreachMailbox,\n  readStoredOutreachSequence,\n} from '../storage/outreach-records'\nimport { OUTREACH_SEQUENCE_ACTIVITY_TARGET, type OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate, type OutreachRouteCaller, type OutreachRouteExtraPermission } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * ENROLLING PEOPLE IN A SEQUENCE (AGL-2980): `outreach/enroll/preview` and\n * `outreach/enroll`.\n *\n * The preview reads the people a saved Contacts view or a search named —\n * at most {@link OUTREACH_ENROLL_BATCH_MAX} — and says where each stands:\n * eligible, blocked with the gate's own sentence, or waiting on the rep for\n * a personal line and the attestations only they can make. Confirm reads\n * everything again and asks the gates again with what the rep supplied,\n * because a preview is a picture of a moment: someone can unsubscribe\n * between the two, and a request can claim anything. Nothing the preview\n * answered is trusted by the enroll.\n *\n * Both read the CRM's people, so both ask for `data.manage` beside\n * `outreach.use` — the permission the contacts' own rules read with, so\n * Outreach is no side door into the address book.\n *\n * Only an ACTIVE sequence takes people: enrolling schedules the first step\n * in the mailbox's hours, and a draft's steps and a paused sequence's timing\n * are not yet what will be sent.\n */\n\n/** The permission enrolling reads the CRM with. */\nexport const OUTREACH_READS_PEOPLE: OutreachRouteExtraPermission = {\n  key: 'data.manage',\n  refusal: \"Enrolling reads your CRM's contacts, and your role does not include Manage data.\",\n}\n\n/** Everything enrolling reaches beyond the routes' own dependencies. */\nexport interface OutreachEnrollRouteDeps extends OutreachRouteDeps {\n  /**\n   * The addresses a saved Contacts view selects among one site's contacts,\n   * read the way the dynamic-list sweep reads one, and whether the read\n   * reached the whole view before its budget.\n   */\n  crmViewEmails(input: { hostId: string; viewId: string }): Promise<{ emails: string[]; complete: boolean }>\n  /**\n   * The workspace's record system on the timeline seam (AGL-3274), when a\n   * plugin keeps one: the enroll files \"Enrolled in\" on the person's record\n   * — the runtime's `timeline`, reached the same way.\n   */\n  timeline(): PluginRecordTimelineWriter | null\n  /**\n   * The workspace's text generator on the core's text-generation seam\n   * (AGL-3324), which drafts one person's copies of the steps; `null` when\n   * no plugin generates text, and the curate route says so.\n   */\n  textGenerator(): PluginTextGenerator | null\n}\n\nexport interface OutreachEnrollRoutes {\n  preview: PluginWebApiHandler\n  confirm: PluginWebApiHandler\n}\n\n/** The activity line an enroll writes. */\nexport function outreachEnrolledActivity(count: number): string {\n  return count === 1\n    ? 'Enrolled 1 person in a sequence'\n    : `Enrolled ${count} people in a sequence`\n}\n\n/** Lookups for a person the gates will never be asked about: every one unchecked. */\nconst UNCHECKED: OutreachGateLookups = {\n  platformSuppressed: null,\n  hostSuppressed: null,\n  salesTopicState: null,\n  doNotContact: null,\n  doNotContactDomain: null,\n  workspaceMembers: null,\n  openEnrollments: null,\n  hasInboundEmail: null,\n  gateway: null,\n}\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/** gRPC `ALREADY_EXISTS`, which `create()` rejects with when the document is there. */\nconst ALREADY_EXISTS = 6\n\nasync function loadActiveSequence(\n  firestore: Firestore,\n  orgId: string,\n  rawSequenceId: unknown,\n): Promise<Response | OutreachSequence> {\n  const sequenceId = readOutreachDocumentId(rawSequenceId)\n  if (!sequenceId) return outreachRefusal(400, 'invalid-request', 'Name the sequence to enroll people in.')\n  const snapshot = await outreachOrgCollection(firestore, orgId, 'sequences').doc(sequenceId).get()\n  const sequence = readStoredOutreachSequence(sequenceId, snapshot.exists ? snapshot.data() : undefined)\n  if (!sequence) return outreachRefusal(404, 'sequence-not-found', 'That sequence no longer exists.')\n  if (sequence.status === 'archived') {\n    return outreachRefusal(409, 'sequence-archived', 'This sequence is archived and takes no one new.')\n  }\n  if (sequence.status !== 'active') {\n    return outreachRefusal(409, 'sequence-not-active', 'Activate this sequence before enrolling people.')\n  }\n  return sequence\n}\n\n/** What every person in one request is judged against. */\ninterface EnrollContext {\n  settings: OutreachGateQuestion['settings']\n  contactGroupId: string\n  /** The sequence site's consent group, whose opt-outs all apply. */\n  consentHostIds: readonly string[]\n  /** Whether that group's sites wait for each other's confirmation click. */\n  consentAwaitsConfirmation: boolean\n  siteName: string\n}\n\nasync function enrollContext(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  sequence: OutreachSequence,\n): Promise<EnrollContext> {\n  const [orgSettings, host] = await Promise.all([\n    readOutreachComplianceSettingsDoc(firestore, caller.orgId),\n    firestore.collection('hosts').doc(sequence.hostId).get(),\n  ])\n  const consentGroup = consentGroupForHost(caller.org, sequence.hostId)\n  return {\n    // The organization's countries are a ceiling over the sequence's.\n    settings: {\n      ...sequence.settings,\n      allowedCountries: effectiveOutreachAllowedCountries(\n        sequence.settings.allowedCountries,\n        orgSettings.allowedCountries,\n      ),\n    },\n    contactGroupId: consentGroup.groupId,\n    consentHostIds: consentGroup.hostIds,\n    consentAwaitsConfirmation: consentGroup.awaitsConfirmation,\n    siteName: host.exists ? String(host.get('name') ?? '') : '',\n  }\n}\n\n/**\n * The candidates, the enrollments they already have here, and the gates'\n * lookups — every map keyed by the person's own id.\n *\n * \"Already in this sequence\" is answered two ways (AGL-3234): by the id the\n * person's enrollment would have, and by any enrollment in this sequence\n * that carries the person's ADDRESS. The second is what keeps a contact\n * from being enrolled beside the lead they were converted from: the lead's\n * enrollment followed them, under the lead's key, and still names them.\n */\nasync function readPeople(\n  firestore: Firestore,\n  caller: OutreachRouteCaller,\n  sequence: OutreachSequence,\n  context: EnrollContext,\n  people: readonly OutreachPersonRef[],\n  gateway: OutreachDomainIntelReadInput,\n): Promise<{\n  candidates: OutreachEnrollCandidate[]\n  enrolledHere: Set<string>\n  lookups: Map<string, OutreachGateLookups>\n}> {\n  const candidates = await readOutreachEnrollCandidates(firestore, {\n    orgId: caller.orgId,\n    hostId: sequence.hostId,\n    contactGroupId: context.contactGroupId,\n    people,\n  })\n  const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n  const existing = candidates.length\n    ? await firestore.getAll(\n        ...candidates.map((candidate) => enrollments.doc(outreachEnrollmentId(sequence.id, candidate.personId))),\n      )\n    : []\n  const enrolledHere = new Set(\n    candidates.filter((_candidate, index) => existing[index]?.exists).map((candidate) => candidate.personId),\n  )\n  const askable = candidates.filter((candidate) => candidate.contact && candidate.visible && candidate.email)\n  const lookups = askable.length\n    ? await readOutreachGateLookups(firestore, {\n        orgId: caller.orgId,\n        hostId: sequence.hostId,\n        consentHostIds: context.consentHostIds,\n        consentAwaitsConfirmation: context.consentAwaitsConfirmation,\n        gateway,\n        people: askable.map((candidate) => ({\n          personId: candidate.personId,\n          contactId: candidate.contactId || null,\n          leadId: candidate.leadId,\n          email: String(candidate.email),\n        })),\n      })\n    : new Map<string, OutreachGateLookups>()\n  for (const candidate of askable) {\n    const open = lookups.get(candidate.personId)?.openEnrollments ?? []\n    if (open.some((entry) => entry.sequenceId === sequence.id)) enrolledHere.add(candidate.personId)\n  }\n  return { candidates, enrolledHere, lookups }\n}\n\nconst uniqueIds = (values: unknown): string[] =>\n  Array.isArray(values)\n    ? [...new Set(values.map(readOutreachDocumentId).filter((id): id is string => id !== null))]\n    : []\n\n/** The most leads a saved Leads view reads — the Leads list's own window. */\nconst LEADS_VIEW_WINDOW = 200\n\n/**\n * The people a saved LEADS view selects (AGL-3234): the sequence's site's\n * most recently seen leads, narrowed by the view's status clause the way\n * the Leads list narrows its window — open leads when the view names no\n * status, one status when it does, everything for `all`. The person key IS\n * the id, so there is no address to resolve — and since AGL-3275 the window is\n * narrowed by `visibleTo` rather than by the collection's parent.\n */\nasync function leadsViewPeople(\n  firestore: Firestore,\n  orgId: string,\n  sequence: OutreachSequence,\n  filters: ReturnType<typeof normalizeCrmViewFilters>,\n): Promise<{ people: OutreachPersonRef[]; total: number; truncated: boolean }> {\n  const statusClause = filters.find((clause) => clause.field === 'status' && clause.op === 'equals')\n  const wanted = String(statusClause?.value ?? 'open')\n  /*\n   * SCOPED (AGL-3275). The collection is org-wide, so the window is narrowed\n   * to what the sequence's site may see before it is ordered — otherwise an\n   * agency's sequence would offer another client's people to enroll. The\n   * composite index for `visibleTo array-contains-any` + `lastSeenAtMs desc`\n   * is in `cloud/firestore.indexes.json`.\n   */\n  const window = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('leads')\n    .where('visibleTo', 'array-contains-any', scopeTokensForHost(sequence.hostId))\n    .orderBy('lastSeenAtMs', 'desc')\n    .limit(LEADS_VIEW_WINDOW + 1)\n    .get()\n  const matching = window.docs.slice(0, LEADS_VIEW_WINDOW).filter((doc) => {\n    const lead = doc.data() as Record<string, unknown>\n    if (wanted === 'all') return true\n    if (wanted === 'open') return isCrmLeadOpen(lead as never) && !lead['convertedContactId']\n    return crmLeadStatus(lead as never) === wanted\n  })\n  return {\n    people: matching.slice(0, OUTREACH_ENROLL_BATCH_MAX).map((doc) => ({ kind: 'lead', id: doc.id })),\n    total: matching.length,\n    truncated: matching.length > OUTREACH_ENROLL_BATCH_MAX || window.docs.length > LEADS_VIEW_WINDOW,\n  }\n}\n\nexport function createOutreachEnrollRoutes(deps: OutreachEnrollRouteDeps): OutreachEnrollRoutes {\n  /**\n   * The person joins the sequence's campaigns (AGL-3254), the moment they\n   * are enrolled: `arrayUnion` on the lead's own `campaignIds`, or on the\n   * contact's facet for the sequence's site — the same field, the same\n   * shape, every other campaign member carries — and `enrolled` credited\n   * to each campaign. After the enrollment is created and never before:\n   * a person the create refused joins nothing. Neither write may fail the\n   * enrollment, which already exists; a membership that could not be\n   * stamped is one the list's bulk bar can add by hand.\n   */\n  async function joinSequenceCampaigns(\n    firestore: Firestore,\n    orgId: string,\n    sequence: OutreachSequence,\n    contactGroupId: string,\n    candidate: OutreachEnrollCandidate,\n    nowMs: number,\n  ): Promise<void> {\n    const campaignIds = normalizeCampaignIds(sequence.campaignIds)\n    if (!campaignIds.length) return\n    try {\n      const ref =\n        candidate.target === 'lead' && candidate.leadId\n          ? firestore.collection('orgs').doc(orgId).collection('leads').doc(candidate.leadId)\n          : candidate.contactId\n            ? firestore.collection('orgs').doc(orgId).collection('contacts').doc(candidate.contactId)\n            : null\n      if (ref) {\n        const field =\n          candidate.target === 'lead' ? CAMPAIGN_MEMBERSHIP_FIELD : contactCampaignFieldPath(contactGroupId)\n        await ref.update({ [field]: FieldValue.arrayUnion(...campaignIds), updatedAt: FieldValue.serverTimestamp() })\n      }\n    } catch (error) {\n      console.error('[outreach] the enrolled person could not join the sequence’s campaigns', error)\n    }\n    try {\n      await deps.creditCampaign({ hostId: sequence.hostId, orgId, campaignIds, outcome: 'enrolled', atMs: nowMs })\n    } catch (error) {\n      console.error('[outreach] the enrollment could not be credited to the sequence’s campaigns', error)\n    }\n  }\n\n  /**\n   * The names of the sequence's campaigns as they stand, for the entry the\n   * enroll files on the person's record (AGL-3274) — the org's containers,\n   * `orgs/{orgId}/emailCampaigns`. Read once per request, not per person; a\n   * container that is gone answers nothing and the entry names the rest.\n   */\n  async function sequenceCampaignNames(\n    firestore: Firestore,\n    orgId: string,\n    sequence: OutreachSequence,\n  ): Promise<string[]> {\n    const campaignIds = normalizeCampaignIds(sequence.campaignIds)\n    if (!campaignIds.length || !orgId) return []\n    try {\n      const containers = firestore.collection('orgs').doc(orgId).collection('emailCampaigns')\n      const found = await firestore.getAll(...campaignIds.map((id) => containers.doc(id)))\n      return found.map((snapshot) => String(snapshot.get('name') ?? '').trim()).filter(Boolean)\n    } catch (error) {\n      console.error('[outreach] the sequence’s campaigns could not be named for the record', error)\n      return []\n    }\n  }\n\n  /**\n   * The people a source names, the batch limit applied: every contact a\n   * search picked, every lead picked from the sequence's site, or the\n   * people a saved Contacts or Leads view selects there — contacts found by\n   * address, leads by their own key.\n   */\n  async function sourcePeople(\n    firestore: Firestore,\n    caller: OutreachRouteCaller,\n    sequence: OutreachSequence,\n    source: Record<string, unknown>,\n  ): Promise<Response | { people: OutreachPersonRef[]; total: number; truncated: boolean }> {\n    if (source['kind'] === 'contacts' || source['kind'] === 'leads') {\n      const kind = source['kind'] === 'leads' ? 'lead' : 'contact'\n      const ids = uniqueIds(kind === 'lead' ? source['leadIds'] : source['contactIds'])\n      if (!ids.length) return outreachRefusal(400, 'invalid-request', 'Pick the people to enroll.')\n      return {\n        people: ids.slice(0, OUTREACH_ENROLL_BATCH_MAX).map((id) => ({ kind, id })),\n        total: ids.length,\n        truncated: ids.length > OUTREACH_ENROLL_BATCH_MAX,\n      }\n    }\n    if (source['kind'] !== 'view') {\n      return outreachRefusal(400, 'invalid-request', 'Enroll people from a saved view or a search.')\n    }\n    const viewId = readOutreachDocumentId(source['viewId'])\n    const view = viewId\n      ? await firestore.collection('orgs').doc(caller.orgId).collection(CRM_COLLECTIONS.views).doc(viewId).get()\n      : null\n    const data = view?.exists ? (view.data() as Record<string, unknown>) : null\n    // A colleague's private view is theirs: it is not listed for this\n    // reader, so it does not exist for them here either.\n    if (\n      !viewId ||\n      !data ||\n      !crmViewIsListed({ shared: data['shared'] === true, ownerUid: String(data['ownerUid'] ?? '') }, caller.uid)\n    ) {\n      return outreachRefusal(404, 'view-not-found', 'That saved view no longer exists.')\n    }\n    if (data['section'] === 'leads') {\n      return leadsViewPeople(firestore, caller.orgId, sequence, normalizeCrmViewFilters(data['filters']))\n    }\n    if (data['section'] !== 'contacts') {\n      return outreachRefusal(400, 'view-unsupported', 'Enroll from a saved view of Contacts or Leads.')\n    }\n    const { unsupported } = dynamicListDimensionsForCrmView(normalizeCrmViewFilters(data['filters']))\n    if (unsupported.length) {\n      // Dropping the filter enrolling cannot read would enroll more people\n      // than the view shows, so the view is refused whole.\n      return outreachRefusal(\n        400,\n        'view-unsupported',\n        `This view filters on ${unsupported.map((clause) => clause.label || clause.field).join(', ')}, which enrolling can't apply. Pick another view, or search.`,\n      )\n    }\n    const { emails, complete } = await deps.crmViewEmails({ hostId: sequence.hostId, viewId })\n    const ordered = [...new Set(emails)].sort()\n    const contacts = firestore.collection('orgs').doc(caller.orgId).collection('contacts')\n    const found = await Promise.all(\n      ordered\n        .slice(0, OUTREACH_ENROLL_BATCH_MAX)\n        .map((email) => findContactByEmail(contacts, email, { hostId: sequence.hostId })),\n    )\n    return {\n      people: [...new Set(found.filter((snapshot) => snapshot).map((snapshot) => String(snapshot?.id)))].map(\n        (id) => ({ kind: 'contact', id }),\n      ),\n      total: ordered.length,\n      truncated: ordered.length > OUTREACH_ENROLL_BATCH_MAX || !complete,\n    }\n  }\n\n  const preview: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate, [OUTREACH_READS_PEOPLE])\n    if (caller instanceof Response) return caller\n    const firestore = deps.firestore()\n    const sequence = await loadActiveSequence(firestore, caller.orgId, body['sequenceId'])\n    if (sequence instanceof Response) return sequence\n    const source = body['source'] && typeof body['source'] === 'object' ? (body['source'] as Record<string, unknown>) : {}\n    const named = await sourcePeople(firestore, caller, sequence, source)\n    if (named instanceof Response) return named\n    const context = await enrollContext(firestore, caller, sequence)\n    const { candidates, enrolledHere, lookups } = await readPeople(\n      firestore,\n      caller,\n      sequence,\n      context,\n      named.people,\n      { resolveMx: deps.resolveMx, nowMs: deps.now() },\n    )\n    const people = candidates.map((candidate) =>\n      previewOutreachPerson(\n        {\n          candidate,\n          lookups: lookups.get(candidate.personId) ?? UNCHECKED,\n          settings: context.settings,\n          contactGroupId: context.contactGroupId,\n        },\n        { siteName: context.siteName, alreadyInSequence: enrolledHere.has(candidate.personId) },\n      ),\n    )\n    return outreachOk({\n      ok: true,\n      people,\n      total: named.total,\n      truncated: named.truncated,\n    } satisfies OutreachEnrollPreviewResponse)\n  }\n\n  const confirm: PluginWebApiHandler = async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate, [OUTREACH_READS_PEOPLE])\n    if (caller instanceof Response) return caller\n    const firestore = deps.firestore()\n    const sequence = await loadActiveSequence(firestore, caller.orgId, body['sequenceId'])\n    if (sequence instanceof Response) return sequence\n\n    const nowMs = deps.now()\n    // Each person once, by whichever record they are: a contact by id, or a\n    // lead by its key (AGL-3234). A person named both ways is a contact.\n    const requested = new Map<\n      string,\n      { ref: OutreachPersonRef; personalLine: string; attestations: unknown[]; overrides: OutreachStepOverrideRead }\n    >()\n    for (const entry of Array.isArray(body['people']) ? body['people'] : []) {\n      const person = (entry && typeof entry === 'object' ? entry : {}) as Record<string, unknown>\n      const contactId = readOutreachDocumentId(person['contactId'])\n      const leadId = readOutreachDocumentId(person['leadId'])\n      const ref: OutreachPersonRef | null = contactId\n        ? { kind: 'contact', id: contactId }\n        : leadId\n          ? { kind: 'lead', id: leadId }\n          : null\n      if (!ref || requested.has(ref.id)) continue\n      // The steps the member curated for this person (AGL-3324), validated\n      // here rather than trusted: a copy that breaks a rule refuses the\n      // whole request, so nobody is enrolled with a copy the route dropped.\n      const overrides = readOutreachStepOverrideRequests(person['stepOverrides'], sequence.steps, {\n        uid: caller.uid,\n        nowMs,\n      })\n      if (outreachStepOverridesRefused(overrides)) {\n        return outreachRefusal(\n          400,\n          'invalid-override',\n          overrides.refusal ?? 'A curated step breaks a rule every sequence email keeps.',\n          { issues: overrides.issues },\n        )\n      }\n      requested.set(ref.id, {\n        ref,\n        personalLine: typeof person['personalLine'] === 'string' ? person['personalLine'] : '',\n        attestations: Array.isArray(person['attestations']) ? person['attestations'] : [],\n        overrides,\n      })\n    }\n    if (!requested.size) return outreachRefusal(400, 'invalid-request', 'Pick the people to enroll.')\n    if (requested.size > OUTREACH_ENROLL_BATCH_MAX) {\n      return outreachRefusal(\n        400,\n        'invalid-request',\n        `Enroll at most ${OUTREACH_ENROLL_BATCH_MAX} people at a time.`,\n      )\n    }\n\n    const mailboxSnapshot = sequence.mailboxId\n      ? await outreachOrgCollection(firestore, caller.orgId, 'mailboxes').doc(sequence.mailboxId).get()\n      : null\n    const mailbox = readStoredOutreachMailbox(\n      sequence.mailboxId,\n      mailboxSnapshot?.exists ? mailboxSnapshot.data() : undefined,\n    )\n    if (!mailbox || mailbox.status === 'disconnected') {\n      return outreachRefusal(\n        409,\n        'mailbox-unavailable',\n        \"This sequence's mailbox is no longer connected. Choose another mailbox for it before enrolling people.\",\n      )\n    }\n    if (planOutreachFirstDue({ sequence, mailbox, enrolledAtMs: nowMs, random: deps.random }) === null) {\n      return outreachRefusal(\n        409,\n        'mailbox-unavailable',\n        \"This sequence's sending hours never open in its mailbox's timezone. Fix the hours before enrolling people.\",\n      )\n    }\n\n    const context = await enrollContext(firestore, caller, sequence)\n    const { candidates, enrolledHere, lookups } = await readPeople(\n      firestore,\n      caller,\n      sequence,\n      context,\n      [...requested.values()].map((entry) => entry.ref),\n      { resolveMx: deps.resolveMx, nowMs },\n    )\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const campaignNames = await sequenceCampaignNames(firestore, caller.orgId, sequence)\n    // The member's name for the curated entries (AGL-3324), read once per\n    // request and only when a person carries a curated step.\n    let memberNameRead: Promise<string | null> | null = null\n    const memberName = () => {\n      memberNameRead ??= firestore\n        .collection('orgs')\n        .doc(caller.orgId)\n        .collection('members')\n        .doc(caller.uid)\n        .get()\n        .then(\n          (member) =>\n            (member.exists\n              ? String(member.get('displayName') ?? '').trim() || String(member.get('email') ?? '').trim()\n              : '') || caller.email,\n        )\n        .catch(() => caller.email)\n      return memberNameRead\n    }\n    const results: OutreachEnrollOutcome[] = await Promise.all(\n      candidates.map(async (candidate): Promise<OutreachEnrollOutcome> => {\n        const named = {\n          personId: candidate.personId,\n          target: candidate.target,\n          contactId: candidate.contactId,\n          leadId: candidate.leadId,\n        }\n        const supplied = requested.get(candidate.personId) ?? {\n          personalLine: '',\n          attestations: [],\n          overrides: { overrides: {}, issues: [], refusal: null } satisfies OutreachStepOverrideRead,\n        }\n        const stepOverrides: OutreachStepOverrides = supplied.overrides.overrides\n        const decision = decideOutreachEnrollment(\n          {\n            candidate,\n            lookups: lookups.get(candidate.personId) ?? UNCHECKED,\n            settings: context.settings,\n            contactGroupId: context.contactGroupId,\n          },\n          { siteName: context.siteName, alreadyInSequence: enrolledHere.has(candidate.personId) },\n          { personalLine: supplied.personalLine, attestations: supplied.attestations, uid: caller.uid, nowMs },\n        )\n        if (!decision.allowed || !decision.email) {\n          return { ...named, email: candidate.email, outcome: 'blocked', blocks: decision.blocks }\n        }\n        const id = outreachEnrollmentId(sequence.id, candidate.personId)\n        const enrollment = buildOutreachEnrollment({\n          id,\n          sequence,\n          mailbox,\n          target: candidate.target,\n          contactId: candidate.contactId,\n          leadId: candidate.leadId,\n          contactName: candidate.name,\n          email: decision.email,\n          cold: decision.cold,\n          personalLine: supplied.personalLine,\n          attestations: decision.attestations,\n          enrolledByUid: caller.uid,\n          nowMs,\n          random: deps.random,\n        })\n        // The member ticked this person past the red gateway chip\n        // (AGL-3326): that is their say-so, stamped as the hold's release,\n        // so the engine does not hold the send they were just shown.\n        if (decision.hold) {\n          enrollment.gatewayHold = {\n            gateway: decision.hold.gateway,\n            heldAtMs: null,\n            releasedByUid: caller.uid,\n            releasedAtMs: nowMs,\n          }\n        }\n        // The person's own copies of steps (AGL-3324) ride with the\n        // enrollment from its first write: nothing sends between.\n        if (Object.keys(stepOverrides).length) enrollment.stepOverrides = stepOverrides\n        try {\n          await enrollments.doc(id).create(enrollment)\n        } catch (error) {\n          if ((error as { code?: unknown })?.code !== ALREADY_EXISTS) throw error\n          return {\n            ...named,\n            email: candidate.email,\n            outcome: 'blocked',\n            blocks: [\n              {\n                code: 'already_in_sequence',\n                reason: \"This person has already been in this sequence, so they won't be sent its emails again.\",\n              },\n            ],\n          }\n        }\n        await joinSequenceCampaigns(firestore, caller.orgId, sequence, context.contactGroupId, candidate, nowMs)\n        // The person's record says so (AGL-3274): \"Enrolled in <sequence>\",\n        // with the campaigns it carried them into, once per enrollment.\n        const entry = outreachEnrolledEntry({ enrollmentId: id, sequenceName: sequence.name, campaignNames })\n        await fileOutreachNote(deps, {\n          orgId: caller.orgId,\n          hostId: sequence.hostId,\n          link: outreachEnrollmentLink(enrollment),\n          dedupeKey: entry.dedupeKey,\n          body: entry.body,\n          atMs: nowMs,\n        })\n        // And one line per step the member curated for them (AGL-3324),\n        // after the enrollment's own, so the record reads in order.\n        for (const [key, override] of Object.entries(stepOverrides)) {\n          const curated = outreachCuratedEntry({\n            enrollmentId: id,\n            stepIndex: Number(key),\n            source: override.source,\n            edited: override.edited === true,\n            memberName: await memberName(),\n            atMs: nowMs,\n          })\n          await fileOutreachNote(deps, {\n            orgId: caller.orgId,\n            hostId: sequence.hostId,\n            link: outreachEnrollmentLink(enrollment),\n            dedupeKey: curated.dedupeKey,\n            body: curated.body,\n            atMs: nowMs,\n          })\n        }\n        return { ...named, email: decision.email, outcome: 'enrolled', enrollmentId: id }\n      }),\n    )\n    const enrolled = results.filter((result) => result.outcome === 'enrolled').length\n    if (enrolled) {\n      await deps.logOrgActivity(\n        caller.orgId,\n        { uid: caller.uid, email: caller.email },\n        outreachEnrolledActivity(enrolled),\n        { type: OUTREACH_SEQUENCE_ACTIVITY_TARGET, id: sequence.id, name: sequence.name },\n      )\n    }\n    return outreachOk({ ok: true, results, enrolled } satisfies OutreachEnrollResponse)\n  }\n\n  return { preview, confirm }\n}\n"],"names":["CAMPAIGN_MEMBERSHIP_FIELD","contactCampaignFieldPath","normalizeCampaignIds","consentGroupForHost","scopeTokensForHost","CRM_COLLECTIONS","crmLeadStatus","crmViewIsListed","isCrmLeadOpen","normalizeCrmViewFilters","dynamicListDimensionsForCrmView","findContactByEmail","FieldValue","outreachCuratedEntry","outreachEnrolledEntry","buildOutreachEnrollment","planOutreachFirstDue","decideOutreachEnrollment","previewOutreachPerson","readOutreachEnrollCandidates","readOutreachGateLookups","outreachStepOverridesRefused","readOutreachStepOverrideRequests","effectiveOutreachAllowedCountries","OUTREACH_ENROLL_BATCH_MAX","readOutreachComplianceSettingsDoc","fileOutreachNote","outreachEnrollmentId","outreachEnrollmentLink","outreachOrgCollection","readStoredOutreachMailbox","readStoredOutreachSequence","OUTREACH_SEQUENCE_ACTIVITY_TARGET","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","OUTREACH_READS_PEOPLE","key","refusal","outreachEnrolledActivity","count","UNCHECKED","platformSuppressed","hostSuppressed","salesTopicState","doNotContact","doNotContactDomain","workspaceMembers","openEnrollments","hasInboundEmail","gateway","ALREADY_EXISTS","loadActiveSequence","firestore","orgId","rawSequenceId","sequenceId","snapshot","doc","get","sequence","exists","data","undefined","status","enrollContext","caller","host","orgSettings","Promise","all","collection","hostId","consentGroup","org","settings","allowedCountries","contactGroupId","groupId","consentHostIds","hostIds","consentAwaitsConfirmation","awaitsConfirmation","siteName","String","readPeople","context","people","candidates","enrollments","existing","length","getAll","map","candidate","id","personId","enrolledHere","Set","filter","_candidate","index","askable","contact","visible","email","lookups","contactId","leadId","Map","open","some","entry","add","uniqueIds","values","Array","isArray","LEADS_VIEW_WINDOW","leadsViewPeople","filters","statusClause","find","clause","field","op","wanted","value","window","where","orderBy","limit","matching","docs","slice","lead","kind","total","truncated","createOutreachEnrollRoutes","deps","joinSequenceCampaigns","nowMs","campaignIds","ref","target","update","arrayUnion","updatedAt","serverTimestamp","error","console","creditCampaign","outcome","atMs","sequenceCampaignNames","containers","found","trim","Boolean","sourcePeople","source","ids","viewId","view","views","shared","ownerUid","uid","unsupported","label","join","emails","complete","crmViewEmails","ordered","sort","contacts","preview","request","method","body","gate","Response","named","resolveMx","now","alreadyInSequence","has","ok","confirm","requested","person","overrides","steps","issues","set","personalLine","attestations","size","mailboxSnapshot","mailboxId","mailbox","enrolledAtMs","random","campaignNames","memberNameRead","memberName","then","member","catch","results","supplied","stepOverrides","decision","allowed","blocks","enrollment","contactName","name","cold","enrolledByUid","hold","gatewayHold","heldAtMs","releasedByUid","releasedAtMs","Object","keys","create","code","reason","enrollmentId","sequenceName","link","dedupeKey","override","entries","curated","stepIndex","Number","edited","enrolled","result","logOrgActivity","type"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,yBAAyB,EACzBC,wBAAwB,EACxBC,oBAAoB,QACf,6CAA4C;AACnD,SAASC,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,kBAAkB,QAAQ,sCAAqC;AACxE,SACEC,eAAe,EACfC,aAAa,EACbC,eAAe,EACfC,aAAa,EACbC,uBAAuB,QAClB,6BAA4B;AACnC,SAASC,+BAA+B,QAAQ,2CAA0C;AAI1F,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,oBAAoB,EAAEC,qBAAqB,QAAQ,mCAA+B;AAC3F,SAASC,uBAAuB,EAAEC,oBAAoB,QAAQ,gCAA4B;AAE1F,SACEC,wBAAwB,EACxBC,qBAAqB,EACrBC,4BAA4B,QAGvB,iCAA6B;AACpC,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SACEC,4BAA4B,EAC5BC,gCAAgC,QAE3B,kCAA8B;AACrC,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SACEC,yBAAyB,QAKpB,2BAAuB;AAE9B,SAASC,iCAAiC,QAAQ,0CAAsC;AAExF,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SACEC,oBAAoB,EACpBC,sBAAsB,EACtBC,qBAAqB,EACrBC,yBAAyB,EACzBC,0BAA0B,QACrB,iCAA6B;AACpC,SAASC,iCAAiC,QAAgC,kBAAc;AACxF,SAASC,iBAAiB,QAAqE,kBAAc;AAC7G,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,iDAAiD,GACjD,OAAO,MAAMC,wBAAsD;IACjEC,KAAK;IACLC,SAAS;AACX,EAAC;AA6BD,wCAAwC,GACxC,OAAO,SAASC,yBAAyBC,KAAa;IACpD,OAAOA,UAAU,IACb,oCACA,CAAC,SAAS,EAAEA,MAAM,qBAAqB,CAAC;AAC9C;AAEA,mFAAmF,GACnF,MAAMC,YAAiC;IACrCC,oBAAoB;IACpBC,gBAAgB;IAChBC,iBAAiB;IACjBC,cAAc;IACdC,oBAAoB;IACpBC,kBAAkB;IAClBC,iBAAiB;IACjBC,iBAAiB;IACjBC,SAAS;AACX;AAIA,qFAAqF,GACrF,MAAMC,iBAAiB;AAEvB,eAAeC,mBACbC,SAAoB,EACpBC,KAAa,EACbC,aAAsB;IAEtB,MAAMC,aAAatB,uBAAuBqB;IAC1C,IAAI,CAACC,YAAY,OAAOvB,gBAAgB,KAAK,mBAAmB;IAChE,MAAMwB,WAAW,MAAM/B,sBAAsB2B,WAAWC,OAAO,aAAaI,GAAG,CAACF,YAAYG,GAAG;IAC/F,MAAMC,WAAWhC,2BAA2B4B,YAAYC,SAASI,MAAM,GAAGJ,SAASK,IAAI,KAAKC;IAC5F,IAAI,CAACH,UAAU,OAAO3B,gBAAgB,KAAK,sBAAsB;IACjE,IAAI2B,SAASI,MAAM,KAAK,YAAY;QAClC,OAAO/B,gBAAgB,KAAK,qBAAqB;IACnD;IACA,IAAI2B,SAASI,MAAM,KAAK,UAAU;QAChC,OAAO/B,gBAAgB,KAAK,uBAAuB;IACrD;IACA,OAAO2B;AACT;AAaA,eAAeK,cACbZ,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B;QAmBOO;IAjBjC,MAAM,CAACC,aAAaD,KAAK,GAAG,MAAME,QAAQC,GAAG,CAAC;QAC5ChD,kCAAkC+B,WAAWa,OAAOZ,KAAK;QACzDD,UAAUkB,UAAU,CAAC,SAASb,GAAG,CAACE,SAASY,MAAM,EAAEb,GAAG;KACvD;IACD,MAAMc,eAAezE,oBAAoBkE,OAAOQ,GAAG,EAAEd,SAASY,MAAM;IACpE,OAAO;QACL,kEAAkE;QAClEG,UAAU,aACLf,SAASe,QAAQ;YACpBC,kBAAkBxD,kCAChBwC,SAASe,QAAQ,CAACC,gBAAgB,EAClCR,YAAYQ,gBAAgB;;QAGhCC,gBAAgBJ,aAAaK,OAAO;QACpCC,gBAAgBN,aAAaO,OAAO;QACpCC,2BAA2BR,aAAaS,kBAAkB;QAC1DC,UAAUhB,KAAKN,MAAM,GAAGuB,QAAOjB,YAAAA,KAAKR,GAAG,CAAC,mBAATQ,YAAoB,MAAM;IAC3D;AACF;AAEA;;;;;;;;;CASC,GACD,eAAekB,WACbhC,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B,EAC1B0B,OAAsB,EACtBC,MAAoC,EACpCrC,OAAqC;IAMrC,MAAMsC,aAAa,MAAMxE,6BAA6BqC,WAAW;QAC/DC,OAAOY,OAAOZ,KAAK;QACnBkB,QAAQZ,SAASY,MAAM;QACvBK,gBAAgBS,QAAQT,cAAc;QACtCU;IACF;IACA,MAAME,cAAc/D,sBAAsB2B,WAAWa,OAAOZ,KAAK,EAAE;IACnE,MAAMoC,WAAWF,WAAWG,MAAM,GAC9B,MAAMtC,UAAUuC,MAAM,IACjBJ,WAAWK,GAAG,CAAC,CAACC,YAAcL,YAAY/B,GAAG,CAAClC,qBAAqBoC,SAASmC,EAAE,EAAED,UAAUE,QAAQ,OAEvG,EAAE;IACN,MAAMC,eAAe,IAAIC,IACvBV,WAAWW,MAAM,CAAC,CAACC,YAAYC;YAAUX;gBAAAA,kBAAAA,QAAQ,CAACW,MAAM,qBAAfX,gBAAiB7B,MAAM;OAAEgC,GAAG,CAAC,CAACC,YAAcA,UAAUE,QAAQ;IAEzG,MAAMM,UAAUd,WAAWW,MAAM,CAAC,CAACL,YAAcA,UAAUS,OAAO,IAAIT,UAAUU,OAAO,IAAIV,UAAUW,KAAK;IAC1G,MAAMC,UAAUJ,QAAQX,MAAM,GAC1B,MAAM1E,wBAAwBoC,WAAW;QACvCC,OAAOY,OAAOZ,KAAK;QACnBkB,QAAQZ,SAASY,MAAM;QACvBO,gBAAgBO,QAAQP,cAAc;QACtCE,2BAA2BK,QAAQL,yBAAyB;QAC5D/B;QACAqC,QAAQe,QAAQT,GAAG,CAAC,CAACC,YAAe,CAAA;gBAClCE,UAAUF,UAAUE,QAAQ;gBAC5BW,WAAWb,UAAUa,SAAS,IAAI;gBAClCC,QAAQd,UAAUc,MAAM;gBACxBH,OAAOrB,OAAOU,UAAUW,KAAK;YAC/B,CAAA;IACF,KACA,IAAII;IACR,KAAK,MAAMf,aAAaQ,QAAS;;YAClBI;QAAb,MAAMI,gBAAOJ,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,sBAA9BU,aAAiC1D,eAAe,mBAAI,EAAE;QACnE,IAAI8D,KAAKC,IAAI,CAAC,CAACC,QAAUA,MAAMxD,UAAU,KAAKI,SAASmC,EAAE,GAAGE,aAAagB,GAAG,CAACnB,UAAUE,QAAQ;IACjG;IACA,OAAO;QAAER;QAAYS;QAAcS;IAAQ;AAC7C;AAEA,MAAMQ,YAAY,CAACC,SACjBC,MAAMC,OAAO,CAACF,UACV;WAAI,IAAIjB,IAAIiB,OAAOtB,GAAG,CAAC3D,wBAAwBiE,MAAM,CAAC,CAACJ,KAAqBA,OAAO;KAAO,GAC1F,EAAE;AAER,2EAA2E,GAC3E,MAAMuB,oBAAoB;AAE1B;;;;;;;CAOC,GACD,eAAeC,gBACblE,SAAoB,EACpBC,KAAa,EACbM,QAA0B,EAC1B4D,OAAmD;;IAEnD,MAAMC,eAAeD,QAAQE,IAAI,CAAC,CAACC,SAAWA,OAAOC,KAAK,KAAK,YAAYD,OAAOE,EAAE,KAAK;IACzF,MAAMC,SAAS1C,eAAOqC,gCAAAA,aAAcM,KAAK,mBAAI;IAC7C;;;;;;GAMC,GACD,MAAMC,SAAS,MAAM3E,UAClBkB,UAAU,CAAC,QACXb,GAAG,CAACJ,OACJiB,UAAU,CAAC,SACX0D,KAAK,CAAC,aAAa,sBAAsBhI,mBAAmB2D,SAASY,MAAM,GAC3E0D,OAAO,CAAC,gBAAgB,QACxBC,KAAK,CAACb,oBAAoB,GAC1B3D,GAAG;IACN,MAAMyE,WAAWJ,OAAOK,IAAI,CAACC,KAAK,CAAC,GAAGhB,mBAAmBnB,MAAM,CAAC,CAACzC;QAC/D,MAAM6E,OAAO7E,IAAII,IAAI;QACrB,IAAIgE,WAAW,OAAO,OAAO;QAC7B,IAAIA,WAAW,QAAQ,OAAOzH,cAAckI,SAAkB,CAACA,IAAI,CAAC,qBAAqB;QACzF,OAAOpI,cAAcoI,UAAmBT;IAC1C;IACA,OAAO;QACLvC,QAAQ6C,SAASE,KAAK,CAAC,GAAGjH,2BAA2BwE,GAAG,CAAC,CAACnC,MAAS,CAAA;gBAAE8E,MAAM;gBAAQzC,IAAIrC,IAAIqC,EAAE;YAAC,CAAA;QAC9F0C,OAAOL,SAASzC,MAAM;QACtB+C,WAAWN,SAASzC,MAAM,GAAGtE,6BAA6B2G,OAAOK,IAAI,CAAC1C,MAAM,GAAG2B;IACjF;AACF;AAEA,OAAO,SAASqB,2BAA2BC,IAA6B;IACtE;;;;;;;;;GASC,GACD,eAAeC,sBACbxF,SAAoB,EACpBC,KAAa,EACbM,QAA0B,EAC1BiB,cAAsB,EACtBiB,SAAkC,EAClCgD,KAAa;QAEb,MAAMC,cAAchJ,qBAAqB6D,SAASmF,WAAW;QAC7D,IAAI,CAACA,YAAYpD,MAAM,EAAE;QACzB,IAAI;YACF,MAAMqD,MACJlD,UAAUmD,MAAM,KAAK,UAAUnD,UAAUc,MAAM,GAC3CvD,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC,SAASb,GAAG,CAACoC,UAAUc,MAAM,IAChFd,UAAUa,SAAS,GACjBtD,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC,YAAYb,GAAG,CAACoC,UAAUa,SAAS,IACtF;YACR,IAAIqC,KAAK;gBACP,MAAMpB,QACJ9B,UAAUmD,MAAM,KAAK,SAASpJ,4BAA4BC,yBAAyB+E;gBACrF,MAAMmE,IAAIE,MAAM,CAAC;oBAAE,CAACtB,MAAM,EAAEnH,WAAW0I,UAAU,IAAIJ;oBAAcK,WAAW3I,WAAW4I,eAAe;gBAAG;YAC7G;QACF,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,0EAA0EA;QAC1F;QACA,IAAI;YACF,MAAMV,KAAKY,cAAc,CAAC;gBAAEhF,QAAQZ,SAASY,MAAM;gBAAElB;gBAAOyF;gBAAaU,SAAS;gBAAYC,MAAMZ;YAAM;QAC5G,EAAE,OAAOQ,OAAO;YACdC,QAAQD,KAAK,CAAC,+EAA+EA;QAC/F;IACF;IAEA;;;;;GAKC,GACD,eAAeK,sBACbtG,SAAoB,EACpBC,KAAa,EACbM,QAA0B;QAE1B,MAAMmF,cAAchJ,qBAAqB6D,SAASmF,WAAW;QAC7D,IAAI,CAACA,YAAYpD,MAAM,IAAI,CAACrC,OAAO,OAAO,EAAE;QAC5C,IAAI;YACF,MAAMsG,aAAavG,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACJ,OAAOiB,UAAU,CAAC;YACtE,MAAMsF,QAAQ,MAAMxG,UAAUuC,MAAM,IAAImD,YAAYlD,GAAG,CAAC,CAACE,KAAO6D,WAAWlG,GAAG,CAACqC;YAC/E,OAAO8D,MAAMhE,GAAG,CAAC,CAACpC;oBAAoBA;uBAAP2B,QAAO3B,gBAAAA,SAASE,GAAG,CAAC,mBAAbF,gBAAwB,IAAIqG,IAAI;eAAI3D,MAAM,CAAC4D;QACnF,EAAE,OAAOT,OAAO;YACdC,QAAQD,KAAK,CAAC,yEAAyEA;YACvF,OAAO,EAAE;QACX;IACF;IAEA;;;;;GAKC,GACD,eAAeU,aACb3G,SAAoB,EACpBa,MAA2B,EAC3BN,QAA0B,EAC1BqG,MAA+B;YAyBwCnG;QAvBvE,IAAImG,MAAM,CAAC,OAAO,KAAK,cAAcA,MAAM,CAAC,OAAO,KAAK,SAAS;YAC/D,MAAMzB,OAAOyB,MAAM,CAAC,OAAO,KAAK,UAAU,SAAS;YACnD,MAAMC,MAAMhD,UAAUsB,SAAS,SAASyB,MAAM,CAAC,UAAU,GAAGA,MAAM,CAAC,aAAa;YAChF,IAAI,CAACC,IAAIvE,MAAM,EAAE,OAAO1D,gBAAgB,KAAK,mBAAmB;YAChE,OAAO;gBACLsD,QAAQ2E,IAAI5B,KAAK,CAAC,GAAGjH,2BAA2BwE,GAAG,CAAC,CAACE,KAAQ,CAAA;wBAAEyC;wBAAMzC;oBAAG,CAAA;gBACxE0C,OAAOyB,IAAIvE,MAAM;gBACjB+C,WAAWwB,IAAIvE,MAAM,GAAGtE;YAC1B;QACF;QACA,IAAI4I,MAAM,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAOhI,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMkI,SAASjI,uBAAuB+H,MAAM,CAAC,SAAS;QACtD,MAAMG,OAAOD,SACT,MAAM9G,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACQ,OAAOZ,KAAK,EAAEiB,UAAU,CAACrE,gBAAgBmK,KAAK,EAAE3G,GAAG,CAACyG,QAAQxG,GAAG,KACtG;QACJ,MAAMG,OAAOsG,CAAAA,wBAAAA,KAAMvG,MAAM,IAAIuG,KAAKtG,IAAI,KAAiC;QACvE,kEAAkE;QAClE,qDAAqD;QACrD,IACE,CAACqG,UACD,CAACrG,QACD,CAAC1D,gBAAgB;YAAEkK,QAAQxG,IAAI,CAAC,SAAS,KAAK;YAAMyG,UAAUnF,QAAOtB,iBAAAA,IAAI,CAAC,WAAW,YAAhBA,iBAAoB;QAAI,GAAGI,OAAOsG,GAAG,GAC1G;YACA,OAAOvI,gBAAgB,KAAK,kBAAkB;QAChD;QACA,IAAI6B,IAAI,CAAC,UAAU,KAAK,SAAS;YAC/B,OAAOyD,gBAAgBlE,WAAWa,OAAOZ,KAAK,EAAEM,UAAUtD,wBAAwBwD,IAAI,CAAC,UAAU;QACnG;QACA,IAAIA,IAAI,CAAC,UAAU,KAAK,YAAY;YAClC,OAAO7B,gBAAgB,KAAK,oBAAoB;QAClD;QACA,MAAM,EAAEwI,WAAW,EAAE,GAAGlK,gCAAgCD,wBAAwBwD,IAAI,CAAC,UAAU;QAC/F,IAAI2G,YAAY9E,MAAM,EAAE;YACtB,qEAAqE;YACrE,qDAAqD;YACrD,OAAO1D,gBACL,KACA,oBACA,CAAC,qBAAqB,EAAEwI,YAAY5E,GAAG,CAAC,CAAC8B,SAAWA,OAAO+C,KAAK,IAAI/C,OAAOC,KAAK,EAAE+C,IAAI,CAAC,MAAM,4DAA4D,CAAC;QAE9J;QACA,MAAM,EAAEC,MAAM,EAAEC,QAAQ,EAAE,GAAG,MAAMjC,KAAKkC,aAAa,CAAC;YAAEtG,QAAQZ,SAASY,MAAM;YAAE2F;QAAO;QACxF,MAAMY,UAAU;eAAI,IAAI7E,IAAI0E;SAAQ,CAACI,IAAI;QACzC,MAAMC,WAAW5H,UAAUkB,UAAU,CAAC,QAAQb,GAAG,CAACQ,OAAOZ,KAAK,EAAEiB,UAAU,CAAC;QAC3E,MAAMsF,QAAQ,MAAMxF,QAAQC,GAAG,CAC7ByG,QACGzC,KAAK,CAAC,GAAGjH,2BACTwE,GAAG,CAAC,CAACY,QAAUjG,mBAAmByK,UAAUxE,OAAO;gBAAEjC,QAAQZ,SAASY,MAAM;YAAC;QAElF,OAAO;YACLe,QAAQ;mBAAI,IAAIW,IAAI2D,MAAM1D,MAAM,CAAC,CAAC1C,WAAaA,UAAUoC,GAAG,CAAC,CAACpC,WAAa2B,OAAO3B,4BAAAA,SAAUsC,EAAE;aAAI,CAACF,GAAG,CACpG,CAACE,KAAQ,CAAA;oBAAEyC,MAAM;oBAAWzC;gBAAG,CAAA;YAEjC0C,OAAOsC,QAAQpF,MAAM;YACrB+C,WAAWqC,QAAQpF,MAAM,GAAGtE,6BAA6B,CAACwJ;QAC5D;IACF;IAEA,MAAMK,UAA+B,OAAOC;QAC1C,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOrJ,yBAAyB;QAC/D,MAAMsJ,OAAO,MAAMlJ,qBAAqBgJ;QACxC,MAAMjH,SAAS,MAAMpC,kBAAkBqJ,SAASE,IAAI,CAAC,QAAQ,EAAEzC,KAAK0C,IAAI,EAAE;YAAClJ;SAAsB;QACjG,IAAI8B,kBAAkBqH,UAAU,OAAOrH;QACvC,MAAMb,YAAYuF,KAAKvF,SAAS;QAChC,MAAMO,WAAW,MAAMR,mBAAmBC,WAAWa,OAAOZ,KAAK,EAAE+H,IAAI,CAAC,aAAa;QACrF,IAAIzH,oBAAoB2H,UAAU,OAAO3H;QACzC,MAAMqG,SAASoB,IAAI,CAAC,SAAS,IAAI,OAAOA,IAAI,CAAC,SAAS,KAAK,WAAYA,IAAI,CAAC,SAAS,GAA+B,CAAC;QACrH,MAAMG,QAAQ,MAAMxB,aAAa3G,WAAWa,QAAQN,UAAUqG;QAC9D,IAAIuB,iBAAiBD,UAAU,OAAOC;QACtC,MAAMlG,UAAU,MAAMrB,cAAcZ,WAAWa,QAAQN;QACvD,MAAM,EAAE4B,UAAU,EAAES,YAAY,EAAES,OAAO,EAAE,GAAG,MAAMrB,WAClDhC,WACAa,QACAN,UACA0B,SACAkG,MAAMjG,MAAM,EACZ;YAAEkG,WAAW7C,KAAK6C,SAAS;YAAE3C,OAAOF,KAAK8C,GAAG;QAAG;QAEjD,MAAMnG,SAASC,WAAWK,GAAG,CAAC,CAACC;gBAIhBY;mBAHb3F,sBACE;gBACE+E;gBACAY,OAAO,GAAEA,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,aAA9BU,eAAmCjE;gBAC5CkC,UAAUW,QAAQX,QAAQ;gBAC1BE,gBAAgBS,QAAQT,cAAc;YACxC,GACA;gBAAEM,UAAUG,QAAQH,QAAQ;gBAAEwG,mBAAmB1F,aAAa2F,GAAG,CAAC9F,UAAUE,QAAQ;YAAE;;QAG1F,OAAOhE,WAAW;YAChB6J,IAAI;YACJtG;YACAkD,OAAO+C,MAAM/C,KAAK;YAClBC,WAAW8C,MAAM9C,SAAS;QAC5B;IACF;IAEA,MAAMoD,UAA+B,OAAOX;QAC1C,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOrJ,yBAAyB;QAC/D,MAAMsJ,OAAO,MAAMlJ,qBAAqBgJ;QACxC,MAAMjH,SAAS,MAAMpC,kBAAkBqJ,SAASE,IAAI,CAAC,QAAQ,EAAEzC,KAAK0C,IAAI,EAAE;YAAClJ;SAAsB;QACjG,IAAI8B,kBAAkBqH,UAAU,OAAOrH;QACvC,MAAMb,YAAYuF,KAAKvF,SAAS;QAChC,MAAMO,WAAW,MAAMR,mBAAmBC,WAAWa,OAAOZ,KAAK,EAAE+H,IAAI,CAAC,aAAa;QACrF,IAAIzH,oBAAoB2H,UAAU,OAAO3H;QAEzC,MAAMkF,QAAQF,KAAK8C,GAAG;QACtB,wEAAwE;QACxE,qEAAqE;QACrE,MAAMK,YAAY,IAAIlF;QAItB,KAAK,MAAMG,SAASI,MAAMC,OAAO,CAACgE,IAAI,CAAC,SAAS,IAAIA,IAAI,CAAC,SAAS,GAAG,EAAE,CAAE;YACvE,MAAMW,SAAUhF,SAAS,OAAOA,UAAU,WAAWA,QAAQ,CAAC;YAC9D,MAAML,YAAYzE,uBAAuB8J,MAAM,CAAC,YAAY;YAC5D,MAAMpF,SAAS1E,uBAAuB8J,MAAM,CAAC,SAAS;YACtD,MAAMhD,MAAgCrC,YAClC;gBAAE6B,MAAM;gBAAWzC,IAAIY;YAAU,IACjCC,SACE;gBAAE4B,MAAM;gBAAQzC,IAAIa;YAAO,IAC3B;YACN,IAAI,CAACoC,OAAO+C,UAAUH,GAAG,CAAC5C,IAAIjD,EAAE,GAAG;YACnC,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE;YACtE,MAAMkG,YAAY9K,iCAAiC6K,MAAM,CAAC,gBAAgB,EAAEpI,SAASsI,KAAK,EAAE;gBAC1F1B,KAAKtG,OAAOsG,GAAG;gBACf1B;YACF;YACA,IAAI5H,6BAA6B+K,YAAY;oBAIzCA;gBAHF,OAAOhK,gBACL,KACA,qBACAgK,qBAAAA,UAAU3J,OAAO,YAAjB2J,qBAAqB,4DACrB;oBAAEE,QAAQF,UAAUE,MAAM;gBAAC;YAE/B;YACAJ,UAAUK,GAAG,CAACpD,IAAIjD,EAAE,EAAE;gBACpBiD;gBACAqD,cAAc,OAAOL,MAAM,CAAC,eAAe,KAAK,WAAWA,MAAM,CAAC,eAAe,GAAG;gBACpFM,cAAclF,MAAMC,OAAO,CAAC2E,MAAM,CAAC,eAAe,IAAIA,MAAM,CAAC,eAAe,GAAG,EAAE;gBACjFC;YACF;QACF;QACA,IAAI,CAACF,UAAUQ,IAAI,EAAE,OAAOtK,gBAAgB,KAAK,mBAAmB;QACpE,IAAI8J,UAAUQ,IAAI,GAAGlL,2BAA2B;YAC9C,OAAOY,gBACL,KACA,mBACA,CAAC,eAAe,EAAEZ,0BAA0B,kBAAkB,CAAC;QAEnE;QAEA,MAAMmL,kBAAkB5I,SAAS6I,SAAS,GACtC,MAAM/K,sBAAsB2B,WAAWa,OAAOZ,KAAK,EAAE,aAAaI,GAAG,CAACE,SAAS6I,SAAS,EAAE9I,GAAG,KAC7F;QACJ,MAAM+I,UAAU/K,0BACdiC,SAAS6I,SAAS,EAClBD,CAAAA,mCAAAA,gBAAiB3I,MAAM,IAAG2I,gBAAgB1I,IAAI,KAAKC;QAErD,IAAI,CAAC2I,WAAWA,QAAQ1I,MAAM,KAAK,gBAAgB;YACjD,OAAO/B,gBACL,KACA,uBACA;QAEJ;QACA,IAAIpB,qBAAqB;YAAE+C;YAAU8I;YAASC,cAAc7D;YAAO8D,QAAQhE,KAAKgE,MAAM;QAAC,OAAO,MAAM;YAClG,OAAO3K,gBACL,KACA,uBACA;QAEJ;QAEA,MAAMqD,UAAU,MAAMrB,cAAcZ,WAAWa,QAAQN;QACvD,MAAM,EAAE4B,UAAU,EAAES,YAAY,EAAES,OAAO,EAAE,GAAG,MAAMrB,WAClDhC,WACAa,QACAN,UACA0B,SACA;eAAIyG,UAAU5E,MAAM;SAAG,CAACtB,GAAG,CAAC,CAACmB,QAAUA,MAAMgC,GAAG,GAChD;YAAEyC,WAAW7C,KAAK6C,SAAS;YAAE3C;QAAM;QAErC,MAAMrD,cAAc/D,sBAAsB2B,WAAWa,OAAOZ,KAAK,EAAE;QACnE,MAAMuJ,gBAAgB,MAAMlD,sBAAsBtG,WAAWa,OAAOZ,KAAK,EAAEM;QAC3E,sEAAsE;QACtE,yDAAyD;QACzD,IAAIkJ,iBAAgD;QACpD,MAAMC,aAAa;YACjBD,yBAAAA,iBAAAA,iBAAmBzJ,UAChBkB,UAAU,CAAC,QACXb,GAAG,CAACQ,OAAOZ,KAAK,EAChBiB,UAAU,CAAC,WACXb,GAAG,CAACQ,OAAOsG,GAAG,EACd7G,GAAG,GACHqJ,IAAI,CACH,CAACC;oBAEYA,aAAkDA;uBAD7D,AAACA,CAAAA,OAAOpJ,MAAM,GACVuB,QAAO6H,cAAAA,OAAOtJ,GAAG,CAAC,0BAAXsJ,cAA6B,IAAInD,IAAI,MAAM1E,QAAO6H,eAAAA,OAAOtJ,GAAG,CAAC,oBAAXsJ,eAAuB,IAAInD,IAAI,KACxF,EAAC,KAAM5F,OAAOuC,KAAK;eAE1ByG,KAAK,CAAC,IAAMhJ,OAAOuC,KAAK;YAC3B,OAAOqG;QACT;QACA,MAAMK,UAAmC,MAAM9I,QAAQC,GAAG,CACxDkB,WAAWK,GAAG,CAAC,OAAOC;gBAOHiG,gBASJrF;YAfb,MAAM8E,QAAQ;gBACZxF,UAAUF,UAAUE,QAAQ;gBAC5BiD,QAAQnD,UAAUmD,MAAM;gBACxBtC,WAAWb,UAAUa,SAAS;gBAC9BC,QAAQd,UAAUc,MAAM;YAC1B;YACA,MAAMwG,YAAWrB,iBAAAA,UAAUpI,GAAG,CAACmC,UAAUE,QAAQ,aAAhC+F,iBAAqC;gBACpDM,cAAc;gBACdC,cAAc,EAAE;gBAChBL,WAAW;oBAAEA,WAAW,CAAC;oBAAGE,QAAQ,EAAE;oBAAE7J,SAAS;gBAAK;YACxD;YACA,MAAM+K,gBAAuCD,SAASnB,SAAS,CAACA,SAAS;YACzE,MAAMqB,WAAWxM,yBACf;gBACEgF;gBACAY,OAAO,GAAEA,eAAAA,QAAQ/C,GAAG,CAACmC,UAAUE,QAAQ,aAA9BU,eAAmCjE;gBAC5CkC,UAAUW,QAAQX,QAAQ;gBAC1BE,gBAAgBS,QAAQT,cAAc;YACxC,GACA;gBAAEM,UAAUG,QAAQH,QAAQ;gBAAEwG,mBAAmB1F,aAAa2F,GAAG,CAAC9F,UAAUE,QAAQ;YAAE,GACtF;gBAAEqG,cAAce,SAASf,YAAY;gBAAEC,cAAcc,SAASd,YAAY;gBAAE9B,KAAKtG,OAAOsG,GAAG;gBAAE1B;YAAM;YAErG,IAAI,CAACwE,SAASC,OAAO,IAAI,CAACD,SAAS7G,KAAK,EAAE;gBACxC,OAAO,aAAK+E;oBAAO/E,OAAOX,UAAUW,KAAK;oBAAEgD,SAAS;oBAAW+D,QAAQF,SAASE,MAAM;;YACxF;YACA,MAAMzH,KAAKvE,qBAAqBoC,SAASmC,EAAE,EAAED,UAAUE,QAAQ;YAC/D,MAAMyH,aAAa7M,wBAAwB;gBACzCmF;gBACAnC;gBACA8I;gBACAzD,QAAQnD,UAAUmD,MAAM;gBACxBtC,WAAWb,UAAUa,SAAS;gBAC9BC,QAAQd,UAAUc,MAAM;gBACxB8G,aAAa5H,UAAU6H,IAAI;gBAC3BlH,OAAO6G,SAAS7G,KAAK;gBACrBmH,MAAMN,SAASM,IAAI;gBACnBvB,cAAce,SAASf,YAAY;gBACnCC,cAAcgB,SAAShB,YAAY;gBACnCuB,eAAe3J,OAAOsG,GAAG;gBACzB1B;gBACA8D,QAAQhE,KAAKgE,MAAM;YACrB;YACA,0DAA0D;YAC1D,mEAAmE;YACnE,6DAA6D;YAC7D,IAAIU,SAASQ,IAAI,EAAE;gBACjBL,WAAWM,WAAW,GAAG;oBACvB7K,SAASoK,SAASQ,IAAI,CAAC5K,OAAO;oBAC9B8K,UAAU;oBACVC,eAAe/J,OAAOsG,GAAG;oBACzB0D,cAAcpF;gBAChB;YACF;YACA,4DAA4D;YAC5D,0DAA0D;YAC1D,IAAIqF,OAAOC,IAAI,CAACf,eAAe1H,MAAM,EAAE8H,WAAWJ,aAAa,GAAGA;YAClE,IAAI;gBACF,MAAM5H,YAAY/B,GAAG,CAACqC,IAAIsI,MAAM,CAACZ;YACnC,EAAE,OAAOnE,OAAO;gBACd,IAAI,CAACA,yBAAD,AAACA,MAA8BgF,IAAI,MAAKnL,gBAAgB,MAAMmG;gBAClE,OAAO,aACFkC;oBACH/E,OAAOX,UAAUW,KAAK;oBACtBgD,SAAS;oBACT+D,QAAQ;wBACN;4BACEc,MAAM;4BACNC,QAAQ;wBACV;qBACD;;YAEL;YACA,MAAM1F,sBAAsBxF,WAAWa,OAAOZ,KAAK,EAAEM,UAAU0B,QAAQT,cAAc,EAAEiB,WAAWgD;YAClG,oEAAoE;YACpE,gEAAgE;YAChE,MAAM9B,QAAQrG,sBAAsB;gBAAE6N,cAAczI;gBAAI0I,cAAc7K,SAAS+J,IAAI;gBAAEd;YAAc;YACnG,MAAMtL,iBAAiBqH,MAAM;gBAC3BtF,OAAOY,OAAOZ,KAAK;gBACnBkB,QAAQZ,SAASY,MAAM;gBACvBkK,MAAMjN,uBAAuBgM;gBAC7BkB,WAAW3H,MAAM2H,SAAS;gBAC1BtD,MAAMrE,MAAMqE,IAAI;gBAChB3B,MAAMZ;YACR;YACA,gEAAgE;YAChE,4DAA4D;YAC5D,KAAK,MAAM,CAACzG,KAAKuM,SAAS,IAAIT,OAAOU,OAAO,CAACxB,eAAgB;gBAC3D,MAAMyB,UAAUpO,qBAAqB;oBACnC8N,cAAczI;oBACdgJ,WAAWC,OAAO3M;oBAClB4H,QAAQ2E,SAAS3E,MAAM;oBACvBgF,QAAQL,SAASK,MAAM,KAAK;oBAC5BlC,YAAY,MAAMA;oBAClBrD,MAAMZ;gBACR;gBACA,MAAMvH,iBAAiBqH,MAAM;oBAC3BtF,OAAOY,OAAOZ,KAAK;oBACnBkB,QAAQZ,SAASY,MAAM;oBACvBkK,MAAMjN,uBAAuBgM;oBAC7BkB,WAAWG,QAAQH,SAAS;oBAC5BtD,MAAMyD,QAAQzD,IAAI;oBAClB3B,MAAMZ;gBACR;YACF;YACA,OAAO,aAAK0C;gBAAO/E,OAAO6G,SAAS7G,KAAK;gBAAEgD,SAAS;gBAAY+E,cAAczI;;QAC/E;QAEF,MAAMmJ,WAAW/B,QAAQhH,MAAM,CAAC,CAACgJ,SAAWA,OAAO1F,OAAO,KAAK,YAAY9D,MAAM;QACjF,IAAIuJ,UAAU;YACZ,MAAMtG,KAAKwG,cAAc,CACvBlL,OAAOZ,KAAK,EACZ;gBAAEkH,KAAKtG,OAAOsG,GAAG;gBAAE/D,OAAOvC,OAAOuC,KAAK;YAAC,GACvClE,yBAAyB2M,WACzB;gBAAEG,MAAMxN;gBAAmCkE,IAAInC,SAASmC,EAAE;gBAAE4H,MAAM/J,SAAS+J,IAAI;YAAC;QAEpF;QACA,OAAO3L,WAAW;YAAE6J,IAAI;YAAMsB;YAAS+B;QAAS;IAClD;IAEA,OAAO;QAAEhE;QAASY;IAAQ;AAC5B"}

package/src/lib/routes/enrollment-routes.js

@@ -36,6 +36,10 @@ import { outreachMethodNotAllowed, outreachOk, outreachRefusal, readOutreachDocu
  * has in the organization — this one wherever it stood, and any other that
  * is still active or paused — so no sequence emails it again, whichever one
  * would have been next.
+ *
+ * RESUME on an enrollment the engine held for its gateway (AGL-3326) is the
+ * member saying "send it anyway": the hold is stamped released with who and
+ * when, and the gates do not hold that enrollment on the gateway again.
  */ const ACTIONS = [
     'pause',
     'resume',
@@ -91,6 +95,8 @@ export function createOutreachEnrollmentActionRoute(deps) {
         const ref = enrollments.doc(enrollmentId);
         const nowMs = deps.now();
         const applied = await firestore.runTransaction(async (transaction)=>{
+            var _ref, _ref1;
+            var _enrollment_gatewayHold, _enrollment_gatewayHold1;
             const snapshot = await transaction.get(ref);
             const enrollment = readStoredOutreachEnrollment(enrollmentId, snapshot.exists ? snapshot.data() : undefined);
             if (!enrollment) return null;
@@ -102,7 +108,15 @@ export function createOutreachEnrollmentActionRoute(deps) {
             };
             // The opt-out event names no member; the person who marked it is
             // recorded here, beside the reason, and on the list entry.
-            const written = _extends({}, patch, {
+            const released = action === 'resume' && enrollment.stopReason === 'gateway_blocked_here' ? {
+                gatewayHold: {
+                    gateway: (_ref = (_enrollment_gatewayHold = enrollment.gatewayHold) == null ? void 0 : _enrollment_gatewayHold.gateway) != null ? _ref : 'other',
+                    heldAtMs: (_ref1 = (_enrollment_gatewayHold1 = enrollment.gatewayHold) == null ? void 0 : _enrollment_gatewayHold1.heldAtMs) != null ? _ref1 : enrollment.stoppedAtMs,
+                    releasedByUid: caller.uid,
+                    releasedAtMs: nowMs
+                }
+            } : {};
+            const written = _extends({}, patch, released, {
                 stoppedByUid: action === 'do_not_contact' ? caller.uid : patch.stoppedByUid,
                 updatedAtMs: nowMs
             });

package/src/lib/routes/enrollment-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enrollment-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport {\n  applyOutreachEnrollmentEvent,\n  type OutreachEnrollmentEvent,\n} from '../engine/enrollment-state'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type {\n  OutreachEnrollmentAction,\n  OutreachEnrollmentActionResponse,\n} from '../model/outreach-api'\nimport type { OutreachEnrollment } from '../model/outreach.types'\nimport { addOutreachDoNotContact } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection, readStoredOutreachEnrollment } from '../storage/outreach-records'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * WHAT A MEMBER DOES TO ONE ENROLLMENT (AGL-2980):\n * `outreach/enrollments/action` — pause, resume, stop, or mark the person\n * do-not-contact.\n *\n * Every transition is the engine's (`applyOutreachEnrollmentEvent`): the\n * route decides nothing about which status may follow which. Each write is\n * a transaction over the one document, so a member's pause and the sending\n * runtime's step completion cannot interleave and leave a paused enrollment\n * with a step it should not have run.\n *\n * MARK DO-NOT-CONTACT puts the address on the organization's list, with\n * the member as its author, and then opts out every enrollment that address\n * has in the organization — this one wherever it stood, and any other that\n * is still active or paused — so no sequence emails it again, whichever one\n * would have been next.\n */\n\nconst ACTIONS: readonly OutreachEnrollmentAction[] = ['pause', 'resume', 'stop', 'do_not_contact']\n\nfunction eventFor(\n  action: OutreachEnrollmentAction,\n  atMs: number,\n  byUid: string,\n  detail: string | null,\n): OutreachEnrollmentEvent {\n  switch (action) {\n    case 'pause':\n      return { type: 'pause', atMs, byUid, detail }\n    case 'resume':\n      return { type: 'resume', atMs, byUid }\n    case 'stop':\n      return { type: 'stop', atMs, byUid, reason: 'manual', detail }\n    case 'do_not_contact':\n      return { type: 'opt_out', atMs, reason: 'do_not_contact', detail }\n  }\n}\n\nexport function createOutreachEnrollmentActionRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const enrollmentId = readOutreachDocumentId(body['enrollmentId'])\n    const action = body['action'] as OutreachEnrollmentAction\n    if (!enrollmentId || !ACTIONS.includes(action)) {\n      return outreachRefusal(400, 'invalid-request', 'Name the enrollment, and pause, resume, stop or mark it do-not-contact.')\n    }\n    const detail = typeof body['detail'] === 'string' ? body['detail'] : null\n    const firestore = deps.firestore()\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const ref = enrollments.doc(enrollmentId)\n    const nowMs = deps.now()\n\n    const applied = await firestore.runTransaction(async (transaction) => {\n      const snapshot = await transaction.get(ref)\n      const enrollment = readStoredOutreachEnrollment(enrollmentId, snapshot.exists ? snapshot.data() : undefined)\n      if (!enrollment) return null\n      const { patch, error } = applyOutreachEnrollmentEvent(\n        enrollment,\n        eventFor(action, nowMs, caller.uid, detail),\n      )\n      if (!patch) return { enrollment, error, changed: false }\n      // The opt-out event names no member; the person who marked it is\n      // recorded here, beside the reason, and on the list entry.\n      const written = {\n        ...patch,\n        stoppedByUid: action === 'do_not_contact' ? caller.uid : patch.stoppedByUid,\n        updatedAtMs: nowMs,\n      }\n      transaction.update(ref, written)\n      return { enrollment: { ...enrollment, ...written } as OutreachEnrollment, error: null, changed: true }\n    })\n    if (!applied) return outreachRefusal(404, 'enrollment-not-found', 'That enrollment no longer exists.')\n    // An address that bounced still goes on the list when a member asks:\n    // the enrollment's own status stays final, the list entry is what they\n    // asked for.\n    if (applied.error && action !== 'do_not_contact') {\n      return outreachRefusal(409, 'transition-refused', applied.error)\n    }\n\n    let stoppedOthers = 0\n    if (action === 'do_not_contact') {\n      await addOutreachDoNotContact(firestore, {\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        reason: 'manual',\n        source: 'member',\n        addedByUid: caller.uid,\n        nowMs,\n        enrollmentId,\n        sequenceId: applied.enrollment.sequenceId,\n        detail,\n      })\n      stoppedOthers = await optOutOtherEnrollments(firestore, enrollments, applied.enrollment, caller.uid, nowMs)\n      // The mark on the record the person is (AGL-3245): the member's verdict\n      // stands over every automatic one.\n      await deps.stampRecordEmailState({\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        state: { status: 'do_not_contact', atMs: nowMs, source: 'member', detail, enrollmentId },\n      })\n    }\n    return outreachOk({\n      ok: true,\n      changed: applied.changed,\n      enrollment: applied.enrollment,\n      stoppedOthers,\n    } satisfies OutreachEnrollmentActionResponse)\n  }\n}\n\n/** Opts out every OTHER open enrollment of the same address; returns how many. */\nasync function optOutOtherEnrollments(\n  firestore: FirebaseFirestore.Firestore,\n  enrollments: FirebaseFirestore.CollectionReference,\n  marked: OutreachEnrollment,\n  byUid: string,\n  nowMs: number,\n): Promise<number> {\n  const found = await enrollments.where('email', '==', marked.email).get()\n  const batch = firestore.batch()\n  let writes = 0\n  for (const doc of found.docs) {\n    if (doc.id === marked.id) continue\n    const other = readStoredOutreachEnrollment(doc.id, doc.data())\n    if (!other || !OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(other.status)) continue\n    const { patch } = applyOutreachEnrollmentEvent(other, {\n      type: 'opt_out',\n      atMs: nowMs,\n      reason: 'do_not_contact',\n      detail: 'Marked do-not-contact from another sequence.',\n    })\n    if (!patch) continue\n    batch.update(doc.ref, { ...patch, stoppedByUid: byUid, updatedAtMs: nowMs })\n    writes += 1\n  }\n  if (writes) await batch.commit()\n  return writes\n}\n"],"names":["applyOutreachEnrollmentEvent","OUTREACH_OPEN_ENROLLMENT_STATUSES","addOutreachDoNotContact","outreachOrgCollection","readStoredOutreachEnrollment","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","ACTIONS","eventFor","action","atMs","byUid","detail","type","reason","createOutreachEnrollmentActionRoute","deps","request","method","body","caller","gate","Response","enrollmentId","includes","firestore","enrollments","orgId","ref","doc","nowMs","now","applied","runTransaction","transaction","snapshot","get","enrollment","exists","data","undefined","patch","error","uid","changed","written","stoppedByUid","updatedAtMs","update","stoppedOthers","email","source","addedByUid","sequenceId","optOutOtherEnrollments","stampRecordEmailState","state","status","ok","marked","found","where","batch","writes","docs","id","other","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,4BAA4B,QAEvB,gCAA4B;AACnC,SAASC,iCAAiC,QAAQ,qBAAiB;AAMnE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,qBAAqB,EAAEC,4BAA4B,QAAQ,iCAA6B;AAEjG,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;CAgBC,GAED,MAAMC,UAA+C;IAAC;IAAS;IAAU;IAAQ;CAAiB;AAElG,SAASC,SACPC,MAAgC,EAChCC,IAAY,EACZC,KAAa,EACbC,MAAqB;IAErB,OAAQH;QACN,KAAK;YACH,OAAO;gBAAEI,MAAM;gBAASH;gBAAMC;gBAAOC;YAAO;QAC9C,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAUH;gBAAMC;YAAM;QACvC,KAAK;YACH,OAAO;gBAAEE,MAAM;gBAAQH;gBAAMC;gBAAOG,QAAQ;gBAAUF;YAAO;QAC/D,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAWH;gBAAMI,QAAQ;gBAAkBF;YAAO;IACrE;AACF;AAEA,OAAO,SAASG,oCAAoCC,IAAuB;IACzE,OAAO,OAAOC;QACZ,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOhB,yBAAyB;QAC/D,MAAMiB,OAAO,MAAMb,qBAAqBW;QACxC,MAAMG,SAAS,MAAMnB,kBAAkBgB,SAASE,IAAI,CAAC,QAAQ,EAAEH,KAAKK,IAAI;QACxE,IAAID,kBAAkBE,UAAU,OAAOF;QACvC,MAAMG,eAAelB,uBAAuBc,IAAI,CAAC,eAAe;QAChE,MAAMV,SAASU,IAAI,CAAC,SAAS;QAC7B,IAAI,CAACI,gBAAgB,CAAChB,QAAQiB,QAAQ,CAACf,SAAS;YAC9C,OAAOL,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMQ,SAAS,OAAOO,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QACrE,MAAMM,YAAYT,KAAKS,SAAS;QAChC,MAAMC,cAAc3B,sBAAsB0B,WAAWL,OAAOO,KAAK,EAAE;QACnE,MAAMC,MAAMF,YAAYG,GAAG,CAACN;QAC5B,MAAMO,QAAQd,KAAKe,GAAG;QAEtB,MAAMC,UAAU,MAAMP,UAAUQ,cAAc,CAAC,OAAOC;YACpD,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACR;YACvC,MAAMS,aAAarC,6BAA6BuB,cAAcY,SAASG,MAAM,GAAGH,SAASI,IAAI,KAAKC;YAClG,IAAI,CAACH,YAAY,OAAO;YACxB,MAAM,EAAEI,KAAK,EAAEC,KAAK,EAAE,GAAG9C,6BACvByC,YACA7B,SAASC,QAAQqB,OAAOV,OAAOuB,GAAG,EAAE/B;YAEtC,IAAI,CAAC6B,OAAO,OAAO;gBAAEJ;gBAAYK;gBAAOE,SAAS;YAAM;YACvD,iEAAiE;YACjE,2DAA2D;YAC3D,MAAMC,UAAU,aACXJ;gBACHK,cAAcrC,WAAW,mBAAmBW,OAAOuB,GAAG,GAAGF,MAAMK,YAAY;gBAC3EC,aAAajB;;YAEfI,YAAYc,MAAM,CAACpB,KAAKiB;YACxB,OAAO;gBAAER,YAAY,aAAKA,YAAeQ;gBAAiCH,OAAO;gBAAME,SAAS;YAAK;QACvG;QACA,IAAI,CAACZ,SAAS,OAAO5B,gBAAgB,KAAK,wBAAwB;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,aAAa;QACb,IAAI4B,QAAQU,KAAK,IAAIjC,WAAW,kBAAkB;YAChD,OAAOL,gBAAgB,KAAK,sBAAsB4B,QAAQU,KAAK;QACjE;QAEA,IAAIO,gBAAgB;QACpB,IAAIxC,WAAW,kBAAkB;YAC/B,MAAMX,wBAAwB2B,WAAW;gBACvCE,OAAOP,OAAOO,KAAK;gBACnBuB,OAAOlB,QAAQK,UAAU,CAACa,KAAK;gBAC/BpC,QAAQ;gBACRqC,QAAQ;gBACRC,YAAYhC,OAAOuB,GAAG;gBACtBb;gBACAP;gBACA8B,YAAYrB,QAAQK,UAAU,CAACgB,UAAU;gBACzCzC;YACF;YACAqC,gBAAgB,MAAMK,uBAAuB7B,WAAWC,aAAaM,QAAQK,UAAU,EAAEjB,OAAOuB,GAAG,EAAEb;YACrG,wEAAwE;YACxE,mCAAmC;YACnC,MAAMd,KAAKuC,qBAAqB,CAAC;gBAC/B5B,OAAOP,OAAOO,KAAK;gBACnBuB,OAAOlB,QAAQK,UAAU,CAACa,KAAK;gBAC/BM,OAAO;oBAAEC,QAAQ;oBAAkB/C,MAAMoB;oBAAOqB,QAAQ;oBAAUvC;oBAAQW;gBAAa;YACzF;QACF;QACA,OAAOpB,WAAW;YAChBuD,IAAI;YACJd,SAASZ,QAAQY,OAAO;YACxBP,YAAYL,QAAQK,UAAU;YAC9BY;QACF;IACF;AACF;AAEA,gFAAgF,GAChF,eAAeK,uBACb7B,SAAsC,EACtCC,WAAkD,EAClDiC,MAA0B,EAC1BhD,KAAa,EACbmB,KAAa;IAEb,MAAM8B,QAAQ,MAAMlC,YAAYmC,KAAK,CAAC,SAAS,MAAMF,OAAOT,KAAK,EAAEd,GAAG;IACtE,MAAM0B,QAAQrC,UAAUqC,KAAK;IAC7B,IAAIC,SAAS;IACb,KAAK,MAAMlC,OAAO+B,MAAMI,IAAI,CAAE;QAC5B,IAAInC,IAAIoC,EAAE,KAAKN,OAAOM,EAAE,EAAE;QAC1B,MAAMC,QAAQlE,6BAA6B6B,IAAIoC,EAAE,EAAEpC,IAAIU,IAAI;QAC3D,IAAI,CAAC2B,SAAS,CAACrE,kCAAkC2B,QAAQ,CAAC0C,MAAMT,MAAM,GAAG;QACzE,MAAM,EAAEhB,KAAK,EAAE,GAAG7C,6BAA6BsE,OAAO;YACpDrD,MAAM;YACNH,MAAMoB;YACNhB,QAAQ;YACRF,QAAQ;QACV;QACA,IAAI,CAAC6B,OAAO;QACZqB,MAAMd,MAAM,CAACnB,IAAID,GAAG,EAAE,aAAKa;YAAOK,cAAcnC;YAAOoC,aAAajB;;QACpEiC,UAAU;IACZ;IACA,IAAIA,QAAQ,MAAMD,MAAMK,MAAM;IAC9B,OAAOJ;AACT"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/enrollment-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginWebApiHandler } from '@aglyn/aglyn/server'\nimport {\n  applyOutreachEnrollmentEvent,\n  type OutreachEnrollmentEvent,\n} from '../engine/enrollment-state'\nimport { OUTREACH_OPEN_ENROLLMENT_STATUSES } from '../engine/gates'\nimport type {\n  OutreachEnrollmentAction,\n  OutreachEnrollmentActionResponse,\n} from '../model/outreach-api'\nimport type { OutreachEnrollment } from '../model/outreach.types'\nimport { addOutreachDoNotContact } from '../storage/do-not-contact-store'\nimport { outreachOrgCollection, readStoredOutreachEnrollment } from '../storage/outreach-records'\nimport type { OutreachRouteDeps } from './route-deps'\nimport { outreachRouteGate } from './route-gate'\nimport {\n  outreachMethodNotAllowed,\n  outreachOk,\n  outreachRefusal,\n  readOutreachDocumentId,\n  readOutreachJsonBody,\n} from './route-http'\n\n/**\n * WHAT A MEMBER DOES TO ONE ENROLLMENT (AGL-2980):\n * `outreach/enrollments/action` — pause, resume, stop, or mark the person\n * do-not-contact.\n *\n * Every transition is the engine's (`applyOutreachEnrollmentEvent`): the\n * route decides nothing about which status may follow which. Each write is\n * a transaction over the one document, so a member's pause and the sending\n * runtime's step completion cannot interleave and leave a paused enrollment\n * with a step it should not have run.\n *\n * MARK DO-NOT-CONTACT puts the address on the organization's list, with\n * the member as its author, and then opts out every enrollment that address\n * has in the organization — this one wherever it stood, and any other that\n * is still active or paused — so no sequence emails it again, whichever one\n * would have been next.\n *\n * RESUME on an enrollment the engine held for its gateway (AGL-3326) is the\n * member saying \"send it anyway\": the hold is stamped released with who and\n * when, and the gates do not hold that enrollment on the gateway again.\n */\n\nconst ACTIONS: readonly OutreachEnrollmentAction[] = ['pause', 'resume', 'stop', 'do_not_contact']\n\nfunction eventFor(\n  action: OutreachEnrollmentAction,\n  atMs: number,\n  byUid: string,\n  detail: string | null,\n): OutreachEnrollmentEvent {\n  switch (action) {\n    case 'pause':\n      return { type: 'pause', atMs, byUid, detail }\n    case 'resume':\n      return { type: 'resume', atMs, byUid }\n    case 'stop':\n      return { type: 'stop', atMs, byUid, reason: 'manual', detail }\n    case 'do_not_contact':\n      return { type: 'opt_out', atMs, reason: 'do_not_contact', detail }\n  }\n}\n\nexport function createOutreachEnrollmentActionRoute(deps: OutreachRouteDeps): PluginWebApiHandler {\n  return async (request) => {\n    if (request.method !== 'POST') return outreachMethodNotAllowed('POST')\n    const body = await readOutreachJsonBody(request)\n    const caller = await outreachRouteGate(request, body['orgId'], deps.gate)\n    if (caller instanceof Response) return caller\n    const enrollmentId = readOutreachDocumentId(body['enrollmentId'])\n    const action = body['action'] as OutreachEnrollmentAction\n    if (!enrollmentId || !ACTIONS.includes(action)) {\n      return outreachRefusal(400, 'invalid-request', 'Name the enrollment, and pause, resume, stop or mark it do-not-contact.')\n    }\n    const detail = typeof body['detail'] === 'string' ? body['detail'] : null\n    const firestore = deps.firestore()\n    const enrollments = outreachOrgCollection(firestore, caller.orgId, 'enrollments')\n    const ref = enrollments.doc(enrollmentId)\n    const nowMs = deps.now()\n\n    const applied = await firestore.runTransaction(async (transaction) => {\n      const snapshot = await transaction.get(ref)\n      const enrollment = readStoredOutreachEnrollment(enrollmentId, snapshot.exists ? snapshot.data() : undefined)\n      if (!enrollment) return null\n      const { patch, error } = applyOutreachEnrollmentEvent(\n        enrollment,\n        eventFor(action, nowMs, caller.uid, detail),\n      )\n      if (!patch) return { enrollment, error, changed: false }\n      // The opt-out event names no member; the person who marked it is\n      // recorded here, beside the reason, and on the list entry.\n      const released =\n        action === 'resume' && enrollment.stopReason === 'gateway_blocked_here'\n          ? {\n              gatewayHold: {\n                gateway: enrollment.gatewayHold?.gateway ?? 'other',\n                heldAtMs: enrollment.gatewayHold?.heldAtMs ?? enrollment.stoppedAtMs,\n                releasedByUid: caller.uid,\n                releasedAtMs: nowMs,\n              },\n            }\n          : {}\n      const written = {\n        ...patch,\n        ...released,\n        stoppedByUid: action === 'do_not_contact' ? caller.uid : patch.stoppedByUid,\n        updatedAtMs: nowMs,\n      }\n      transaction.update(ref, written)\n      return { enrollment: { ...enrollment, ...written } as OutreachEnrollment, error: null, changed: true }\n    })\n    if (!applied) return outreachRefusal(404, 'enrollment-not-found', 'That enrollment no longer exists.')\n    // An address that bounced still goes on the list when a member asks:\n    // the enrollment's own status stays final, the list entry is what they\n    // asked for.\n    if (applied.error && action !== 'do_not_contact') {\n      return outreachRefusal(409, 'transition-refused', applied.error)\n    }\n\n    let stoppedOthers = 0\n    if (action === 'do_not_contact') {\n      await addOutreachDoNotContact(firestore, {\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        reason: 'manual',\n        source: 'member',\n        addedByUid: caller.uid,\n        nowMs,\n        enrollmentId,\n        sequenceId: applied.enrollment.sequenceId,\n        detail,\n      })\n      stoppedOthers = await optOutOtherEnrollments(firestore, enrollments, applied.enrollment, caller.uid, nowMs)\n      // The mark on the record the person is (AGL-3245): the member's verdict\n      // stands over every automatic one.\n      await deps.stampRecordEmailState({\n        orgId: caller.orgId,\n        email: applied.enrollment.email,\n        state: { status: 'do_not_contact', atMs: nowMs, source: 'member', detail, enrollmentId },\n      })\n    }\n    return outreachOk({\n      ok: true,\n      changed: applied.changed,\n      enrollment: applied.enrollment,\n      stoppedOthers,\n    } satisfies OutreachEnrollmentActionResponse)\n  }\n}\n\n/** Opts out every OTHER open enrollment of the same address; returns how many. */\nasync function optOutOtherEnrollments(\n  firestore: FirebaseFirestore.Firestore,\n  enrollments: FirebaseFirestore.CollectionReference,\n  marked: OutreachEnrollment,\n  byUid: string,\n  nowMs: number,\n): Promise<number> {\n  const found = await enrollments.where('email', '==', marked.email).get()\n  const batch = firestore.batch()\n  let writes = 0\n  for (const doc of found.docs) {\n    if (doc.id === marked.id) continue\n    const other = readStoredOutreachEnrollment(doc.id, doc.data())\n    if (!other || !OUTREACH_OPEN_ENROLLMENT_STATUSES.includes(other.status)) continue\n    const { patch } = applyOutreachEnrollmentEvent(other, {\n      type: 'opt_out',\n      atMs: nowMs,\n      reason: 'do_not_contact',\n      detail: 'Marked do-not-contact from another sequence.',\n    })\n    if (!patch) continue\n    batch.update(doc.ref, { ...patch, stoppedByUid: byUid, updatedAtMs: nowMs })\n    writes += 1\n  }\n  if (writes) await batch.commit()\n  return writes\n}\n"],"names":["applyOutreachEnrollmentEvent","OUTREACH_OPEN_ENROLLMENT_STATUSES","addOutreachDoNotContact","outreachOrgCollection","readStoredOutreachEnrollment","outreachRouteGate","outreachMethodNotAllowed","outreachOk","outreachRefusal","readOutreachDocumentId","readOutreachJsonBody","ACTIONS","eventFor","action","atMs","byUid","detail","type","reason","createOutreachEnrollmentActionRoute","deps","request","method","body","caller","gate","Response","enrollmentId","includes","firestore","enrollments","orgId","ref","doc","nowMs","now","applied","runTransaction","transaction","enrollment","snapshot","get","exists","data","undefined","patch","error","uid","changed","released","stopReason","gatewayHold","gateway","heldAtMs","stoppedAtMs","releasedByUid","releasedAtMs","written","stoppedByUid","updatedAtMs","update","stoppedOthers","email","source","addedByUid","sequenceId","optOutOtherEnrollments","stampRecordEmailState","state","status","ok","marked","found","where","batch","writes","docs","id","other","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,4BAA4B,QAEvB,gCAA4B;AACnC,SAASC,iCAAiC,QAAQ,qBAAiB;AAMnE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,qBAAqB,EAAEC,4BAA4B,QAAQ,iCAA6B;AAEjG,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SACEC,wBAAwB,EACxBC,UAAU,EACVC,eAAe,EACfC,sBAAsB,EACtBC,oBAAoB,QACf,kBAAc;AAErB;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,MAAMC,UAA+C;IAAC;IAAS;IAAU;IAAQ;CAAiB;AAElG,SAASC,SACPC,MAAgC,EAChCC,IAAY,EACZC,KAAa,EACbC,MAAqB;IAErB,OAAQH;QACN,KAAK;YACH,OAAO;gBAAEI,MAAM;gBAASH;gBAAMC;gBAAOC;YAAO;QAC9C,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAUH;gBAAMC;YAAM;QACvC,KAAK;YACH,OAAO;gBAAEE,MAAM;gBAAQH;gBAAMC;gBAAOG,QAAQ;gBAAUF;YAAO;QAC/D,KAAK;YACH,OAAO;gBAAEC,MAAM;gBAAWH;gBAAMI,QAAQ;gBAAkBF;YAAO;IACrE;AACF;AAEA,OAAO,SAASG,oCAAoCC,IAAuB;IACzE,OAAO,OAAOC;QACZ,IAAIA,QAAQC,MAAM,KAAK,QAAQ,OAAOhB,yBAAyB;QAC/D,MAAMiB,OAAO,MAAMb,qBAAqBW;QACxC,MAAMG,SAAS,MAAMnB,kBAAkBgB,SAASE,IAAI,CAAC,QAAQ,EAAEH,KAAKK,IAAI;QACxE,IAAID,kBAAkBE,UAAU,OAAOF;QACvC,MAAMG,eAAelB,uBAAuBc,IAAI,CAAC,eAAe;QAChE,MAAMV,SAASU,IAAI,CAAC,SAAS;QAC7B,IAAI,CAACI,gBAAgB,CAAChB,QAAQiB,QAAQ,CAACf,SAAS;YAC9C,OAAOL,gBAAgB,KAAK,mBAAmB;QACjD;QACA,MAAMQ,SAAS,OAAOO,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QACrE,MAAMM,YAAYT,KAAKS,SAAS;QAChC,MAAMC,cAAc3B,sBAAsB0B,WAAWL,OAAOO,KAAK,EAAE;QACnE,MAAMC,MAAMF,YAAYG,GAAG,CAACN;QAC5B,MAAMO,QAAQd,KAAKe,GAAG;QAEtB,MAAMC,UAAU,MAAMP,UAAUQ,cAAc,CAAC,OAAOC;;gBAejCC,yBACCA;YAfpB,MAAMC,WAAW,MAAMF,YAAYG,GAAG,CAACT;YACvC,MAAMO,aAAanC,6BAA6BuB,cAAca,SAASE,MAAM,GAAGF,SAASG,IAAI,KAAKC;YAClG,IAAI,CAACL,YAAY,OAAO;YACxB,MAAM,EAAEM,KAAK,EAAEC,KAAK,EAAE,GAAG9C,6BACvBuC,YACA3B,SAASC,QAAQqB,OAAOV,OAAOuB,GAAG,EAAE/B;YAEtC,IAAI,CAAC6B,OAAO,OAAO;gBAAEN;gBAAYO;gBAAOE,SAAS;YAAM;YACvD,iEAAiE;YACjE,2DAA2D;YAC3D,MAAMC,WACJpC,WAAW,YAAY0B,WAAWW,UAAU,KAAK,yBAC7C;gBACEC,aAAa;oBACXC,OAAO,WAAEb,0BAAAA,WAAWY,WAAW,qBAAtBZ,wBAAwBa,OAAO,mBAAI;oBAC5CC,QAAQ,YAAEd,2BAAAA,WAAWY,WAAW,qBAAtBZ,yBAAwBc,QAAQ,oBAAId,WAAWe,WAAW;oBACpEC,eAAe/B,OAAOuB,GAAG;oBACzBS,cAActB;gBAChB;YACF,IACA,CAAC;YACP,MAAMuB,UAAU,aACXZ,OACAI;gBACHS,cAAc7C,WAAW,mBAAmBW,OAAOuB,GAAG,GAAGF,MAAMa,YAAY;gBAC3EC,aAAazB;;YAEfI,YAAYsB,MAAM,CAAC5B,KAAKyB;YACxB,OAAO;gBAAElB,YAAY,aAAKA,YAAekB;gBAAiCX,OAAO;gBAAME,SAAS;YAAK;QACvG;QACA,IAAI,CAACZ,SAAS,OAAO5B,gBAAgB,KAAK,wBAAwB;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,aAAa;QACb,IAAI4B,QAAQU,KAAK,IAAIjC,WAAW,kBAAkB;YAChD,OAAOL,gBAAgB,KAAK,sBAAsB4B,QAAQU,KAAK;QACjE;QAEA,IAAIe,gBAAgB;QACpB,IAAIhD,WAAW,kBAAkB;YAC/B,MAAMX,wBAAwB2B,WAAW;gBACvCE,OAAOP,OAAOO,KAAK;gBACnB+B,OAAO1B,QAAQG,UAAU,CAACuB,KAAK;gBAC/B5C,QAAQ;gBACR6C,QAAQ;gBACRC,YAAYxC,OAAOuB,GAAG;gBACtBb;gBACAP;gBACAsC,YAAY7B,QAAQG,UAAU,CAAC0B,UAAU;gBACzCjD;YACF;YACA6C,gBAAgB,MAAMK,uBAAuBrC,WAAWC,aAAaM,QAAQG,UAAU,EAAEf,OAAOuB,GAAG,EAAEb;YACrG,wEAAwE;YACxE,mCAAmC;YACnC,MAAMd,KAAK+C,qBAAqB,CAAC;gBAC/BpC,OAAOP,OAAOO,KAAK;gBACnB+B,OAAO1B,QAAQG,UAAU,CAACuB,KAAK;gBAC/BM,OAAO;oBAAEC,QAAQ;oBAAkBvD,MAAMoB;oBAAO6B,QAAQ;oBAAU/C;oBAAQW;gBAAa;YACzF;QACF;QACA,OAAOpB,WAAW;YAChB+D,IAAI;YACJtB,SAASZ,QAAQY,OAAO;YACxBT,YAAYH,QAAQG,UAAU;YAC9BsB;QACF;IACF;AACF;AAEA,gFAAgF,GAChF,eAAeK,uBACbrC,SAAsC,EACtCC,WAAkD,EAClDyC,MAA0B,EAC1BxD,KAAa,EACbmB,KAAa;IAEb,MAAMsC,QAAQ,MAAM1C,YAAY2C,KAAK,CAAC,SAAS,MAAMF,OAAOT,KAAK,EAAErB,GAAG;IACtE,MAAMiC,QAAQ7C,UAAU6C,KAAK;IAC7B,IAAIC,SAAS;IACb,KAAK,MAAM1C,OAAOuC,MAAMI,IAAI,CAAE;QAC5B,IAAI3C,IAAI4C,EAAE,KAAKN,OAAOM,EAAE,EAAE;QAC1B,MAAMC,QAAQ1E,6BAA6B6B,IAAI4C,EAAE,EAAE5C,IAAIU,IAAI;QAC3D,IAAI,CAACmC,SAAS,CAAC7E,kCAAkC2B,QAAQ,CAACkD,MAAMT,MAAM,GAAG;QACzE,MAAM,EAAExB,KAAK,EAAE,GAAG7C,6BAA6B8E,OAAO;YACpD7D,MAAM;YACNH,MAAMoB;YACNhB,QAAQ;YACRF,QAAQ;QACV;QACA,IAAI,CAAC6B,OAAO;QACZ6B,MAAMd,MAAM,CAAC3B,IAAID,GAAG,EAAE,aAAKa;YAAOa,cAAc3C;YAAO4C,aAAazB;;QACpEyC,UAAU;IACZ;IACA,IAAIA,QAAQ,MAAMD,MAAMK,MAAM;IAC9B,OAAOJ;AACT"}

package/src/lib/routes/platform-deps.d.ts

@@ -19,7 +19,7 @@ import { stampRecordEmailState } from '@aglyn/aglyn/plugin-manager/plugin-record
 import { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown';
 import { logOrgActivity } from '@aglyn/tenant-data-admin/server/organizations';
 import { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions';
-import { listTrackingHosts, removeTrackingHost, setUpTrackingHost, verifyTrackingHost } from '@aglyn/tenant-data-admin/server/tracking-hosts';
+import { listTrackingHosts, removeTrackingHost, resolveTrackingLinkOrigin, setUpTrackingHost, verifyTrackingHost } from '@aglyn/tenant-data-admin/server/tracking-hosts';
 /**
  * The platform's heavier server modules the Outreach routes reach
  * (AGL-2980): the permission resolver, the lockdown verdict, the activity
@@ -33,7 +33,7 @@ import { listTrackingHosts, removeTrackingHost, setUpTrackingHost, verifyTrackin
  * module of this plugin keeps every import of the platform's libraries a
  * static one.
  */
-export { creditCampaignSequenceOutcome, listTrackingHosts, lockdownRefusal, logOrgActivity, removeTrackingHost, resolveOrgPermissions, setUpTrackingHost, stampRecordEmailState, verifyTrackingHost, };
+export { creditCampaignSequenceOutcome, listTrackingHosts, lockdownRefusal, logOrgActivity, removeTrackingHost, resolveOrgPermissions, resolveTrackingLinkOrigin, setUpTrackingHost, stampRecordEmailState, verifyTrackingHost, };
 /**
  * Whether the member holds a CATALOG permission (`data.manage`) as the
  * org's roles resolve it — custom role and per-member overrides included.

package/src/lib/routes/platform-deps.js

@@ -19,7 +19,7 @@ import { stampRecordEmailState } from "@aglyn/aglyn/plugin-manager/plugin-record
 import { lockdownRefusal } from "@aglyn/tenant-data-admin/server/lockdown";
 import { logOrgActivity, memberHasOrgPermission, resolveOrgMembership } from "@aglyn/tenant-data-admin/server/organizations";
 import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
-import { listTrackingHosts, removeTrackingHost, setUpTrackingHost, verifyTrackingHost } from "@aglyn/tenant-data-admin/server/tracking-hosts";
+import { listTrackingHosts, removeTrackingHost, resolveTrackingLinkOrigin, setUpTrackingHost, verifyTrackingHost } from "@aglyn/tenant-data-admin/server/tracking-hosts";
 /**
  * The platform's heavier server modules the Outreach routes reach
  * (AGL-2980): the permission resolver, the lockdown verdict, the activity
@@ -32,7 +32,7 @@ import { listTrackingHosts, removeTrackingHost, setUpTrackingHost, verifyTrackin
  * alone reaches the whole tenant data barrel. Loading them through one
  * module of this plugin keeps every import of the platform's libraries a
  * static one.
- */ export { creditCampaignSequenceOutcome, listTrackingHosts, lockdownRefusal, logOrgActivity, removeTrackingHost, resolveOrgPermissions, setUpTrackingHost, stampRecordEmailState, verifyTrackingHost,  };
+ */ export { creditCampaignSequenceOutcome, listTrackingHosts, lockdownRefusal, logOrgActivity, removeTrackingHost, resolveOrgPermissions, resolveTrackingLinkOrigin, setUpTrackingHost, stampRecordEmailState, verifyTrackingHost,  };
 /**
  * Whether the member holds a CATALOG permission (`data.manage`) as the
  * org's roles resolve it — custom role and per-member overrides included.

package/src/lib/routes/platform-deps.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/platform-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { creditCampaignSequenceOutcome } from '@aglyn/tenant-data-admin/server/campaign-conversion-attribution'\nimport { collectDynamicListCandidates } from '@aglyn/tenant-data-admin/server/dynamic-list-materialize'\nimport { stampRecordEmailState } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown'\nimport {\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  listTrackingHosts,\n  removeTrackingHost,\n  setUpTrackingHost,\n  verifyTrackingHost,\n} from '@aglyn/tenant-data-admin/server/tracking-hosts'\n\n/**\n * The platform's heavier server modules the Outreach routes reach\n * (AGL-2980): the permission resolver, the lockdown verdict, the activity\n * log and the saved-view sweep.\n *\n * Imported here statically, and this module is loaded by\n * `register-routes.ts` the first time a request needs one of them: the\n * manifest loads Outreach's server bundle into every console API process\n * whether or not an Outreach route is ever called, and `org-permissions`\n * alone reaches the whole tenant data barrel. Loading them through one\n * module of this plugin keeps every import of the platform's libraries a\n * static one.\n */\n\nexport {\n  creditCampaignSequenceOutcome,\n  listTrackingHosts,\n  lockdownRefusal,\n  logOrgActivity,\n  removeTrackingHost,\n  resolveOrgPermissions,\n  setUpTrackingHost,\n  stampRecordEmailState,\n  verifyTrackingHost,\n}\n\n/**\n * Whether the member holds a CATALOG permission (`data.manage`) as the\n * org's roles resolve it — custom role and per-member overrides included.\n * A lookup that failed has not shown the member holds it.\n */\nexport async function holdsOrgCatalogPermission(uid: string, orgId: string, key: string): Promise<boolean> {\n  try {\n    const membership = await resolveOrgMembership(uid, orgId)\n    if (!membership?.member) return false\n    return (\n      (await memberHasOrgPermission(\n        orgId,\n        membership.member,\n        key as Parameters<typeof memberHasOrgPermission>[2],\n      )) === true\n    )\n  } catch {\n    return false\n  }\n}\n\n/**\n * The addresses a saved Contacts view selects among one site's contacts,\n * read by the dynamic-list sweep's own scan, and whether it reached the\n * whole view.\n */\nexport async function crmViewEmails(input: {\n  hostId: string\n  viewId: string\n}): Promise<{ emails: string[]; complete: boolean }> {\n  const scan = await collectDynamicListCandidates({\n    hostId: input.hostId,\n    rule: { sources: ['contacts'], viewId: input.viewId },\n  })\n  return { emails: scan.candidates.map((candidate) => candidate.email), complete: scan.complete }\n}\n"],"names":["creditCampaignSequenceOutcome","collectDynamicListCandidates","stampRecordEmailState","lockdownRefusal","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","resolveOrgPermissions","listTrackingHosts","removeTrackingHost","setUpTrackingHost","verifyTrackingHost","holdsOrgCatalogPermission","uid","orgId","key","membership","member","crmViewEmails","input","scan","hostId","rule","sources","viewId","emails","candidates","map","candidate","email","complete"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,6BAA6B,QAAQ,kEAAiE;AAC/G,SAASC,4BAA4B,QAAQ,2DAA0D;AACvG,SAASC,qBAAqB,QAAQ,wDAAuD;AAC7F,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SACEC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,gDAA+C;AACtD,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,iBAAiB,EACjBC,kBAAkB,QACb,iDAAgD;AAEvD;;;;;;;;;;;;CAYC,GAED,SACEX,6BAA6B,EAC7BQ,iBAAiB,EACjBL,eAAe,EACfC,cAAc,EACdK,kBAAkB,EAClBF,qBAAqB,EACrBG,iBAAiB,EACjBR,qBAAqB,EACrBS,kBAAkB,KACnB;AAED;;;;CAIC,GACD,OAAO,eAAeC,0BAA0BC,GAAW,EAAEC,KAAa,EAAEC,GAAW;IACrF,IAAI;QACF,MAAMC,aAAa,MAAMV,qBAAqBO,KAAKC;QACnD,IAAI,EAACE,8BAAAA,WAAYC,MAAM,GAAE,OAAO;QAChC,OACE,AAAC,MAAMZ,uBACLS,OACAE,WAAWC,MAAM,EACjBF,SACK;IAEX,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeG,cAAcC,KAGnC;IACC,MAAMC,OAAO,MAAMnB,6BAA6B;QAC9CoB,QAAQF,MAAME,MAAM;QACpBC,MAAM;YAAEC,SAAS;gBAAC;aAAW;YAAEC,QAAQL,MAAMK,MAAM;QAAC;IACtD;IACA,OAAO;QAAEC,QAAQL,KAAKM,UAAU,CAACC,GAAG,CAAC,CAACC,YAAcA,UAAUC,KAAK;QAAGC,UAAUV,KAAKU,QAAQ;IAAC;AAChG"}
+{"version":3,"sources":["../../../../../../../libs/plugins/outreach/src/lib/routes/platform-deps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { creditCampaignSequenceOutcome } from '@aglyn/tenant-data-admin/server/campaign-conversion-attribution'\nimport { collectDynamicListCandidates } from '@aglyn/tenant-data-admin/server/dynamic-list-materialize'\nimport { stampRecordEmailState } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport { lockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown'\nimport {\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  listTrackingHosts,\n  removeTrackingHost,\n  resolveTrackingLinkOrigin,\n  setUpTrackingHost,\n  verifyTrackingHost,\n} from '@aglyn/tenant-data-admin/server/tracking-hosts'\n\n/**\n * The platform's heavier server modules the Outreach routes reach\n * (AGL-2980): the permission resolver, the lockdown verdict, the activity\n * log and the saved-view sweep.\n *\n * Imported here statically, and this module is loaded by\n * `register-routes.ts` the first time a request needs one of them: the\n * manifest loads Outreach's server bundle into every console API process\n * whether or not an Outreach route is ever called, and `org-permissions`\n * alone reaches the whole tenant data barrel. Loading them through one\n * module of this plugin keeps every import of the platform's libraries a\n * static one.\n */\n\nexport {\n  creditCampaignSequenceOutcome,\n  listTrackingHosts,\n  lockdownRefusal,\n  logOrgActivity,\n  removeTrackingHost,\n  resolveOrgPermissions,\n  resolveTrackingLinkOrigin,\n  setUpTrackingHost,\n  stampRecordEmailState,\n  verifyTrackingHost,\n}\n\n/**\n * Whether the member holds a CATALOG permission (`data.manage`) as the\n * org's roles resolve it — custom role and per-member overrides included.\n * A lookup that failed has not shown the member holds it.\n */\nexport async function holdsOrgCatalogPermission(uid: string, orgId: string, key: string): Promise<boolean> {\n  try {\n    const membership = await resolveOrgMembership(uid, orgId)\n    if (!membership?.member) return false\n    return (\n      (await memberHasOrgPermission(\n        orgId,\n        membership.member,\n        key as Parameters<typeof memberHasOrgPermission>[2],\n      )) === true\n    )\n  } catch {\n    return false\n  }\n}\n\n/**\n * The addresses a saved Contacts view selects among one site's contacts,\n * read by the dynamic-list sweep's own scan, and whether it reached the\n * whole view.\n */\nexport async function crmViewEmails(input: {\n  hostId: string\n  viewId: string\n}): Promise<{ emails: string[]; complete: boolean }> {\n  const scan = await collectDynamicListCandidates({\n    hostId: input.hostId,\n    rule: { sources: ['contacts'], viewId: input.viewId },\n  })\n  return { emails: scan.candidates.map((candidate) => candidate.email), complete: scan.complete }\n}\n"],"names":["creditCampaignSequenceOutcome","collectDynamicListCandidates","stampRecordEmailState","lockdownRefusal","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","resolveOrgPermissions","listTrackingHosts","removeTrackingHost","resolveTrackingLinkOrigin","setUpTrackingHost","verifyTrackingHost","holdsOrgCatalogPermission","uid","orgId","key","membership","member","crmViewEmails","input","scan","hostId","rule","sources","viewId","emails","candidates","map","candidate","email","complete"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,6BAA6B,QAAQ,kEAAiE;AAC/G,SAASC,4BAA4B,QAAQ,2DAA0D;AACvG,SAASC,qBAAqB,QAAQ,wDAAuD;AAC7F,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SACEC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,gDAA+C;AACtD,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,iBAAiB,EACjBC,kBAAkB,EAClBC,yBAAyB,EACzBC,iBAAiB,EACjBC,kBAAkB,QACb,iDAAgD;AAEvD;;;;;;;;;;;;CAYC,GAED,SACEZ,6BAA6B,EAC7BQ,iBAAiB,EACjBL,eAAe,EACfC,cAAc,EACdK,kBAAkB,EAClBF,qBAAqB,EACrBG,yBAAyB,EACzBC,iBAAiB,EACjBT,qBAAqB,EACrBU,kBAAkB,KACnB;AAED;;;;CAIC,GACD,OAAO,eAAeC,0BAA0BC,GAAW,EAAEC,KAAa,EAAEC,GAAW;IACrF,IAAI;QACF,MAAMC,aAAa,MAAMX,qBAAqBQ,KAAKC;QACnD,IAAI,EAACE,8BAAAA,WAAYC,MAAM,GAAE,OAAO;QAChC,OACE,AAAC,MAAMb,uBACLU,OACAE,WAAWC,MAAM,EACjBF,SACK;IAEX,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeG,cAAcC,KAGnC;IACC,MAAMC,OAAO,MAAMpB,6BAA6B;QAC9CqB,QAAQF,MAAME,MAAM;QACpBC,MAAM;YAAEC,SAAS;gBAAC;aAAW;YAAEC,QAAQL,MAAMK,MAAM;QAAC;IACtD;IACA,OAAO;QAAEC,QAAQL,KAAKM,UAAU,CAACC,GAAG,CAAC,CAACC,YAAcA,UAAUC,KAAK;QAAGC,UAAUV,KAAKU,QAAQ;IAAC;AAChG"}

package/src/lib/routes/preview-routes.d.ts

@@ -15,7 +15,10 @@
  * limitations under the License.
  */
 import type { PluginWebApiHandler } from '@aglyn/aglyn/server';
+import type { OutreachEmailStep, OutreachMailbox, OutreachSequence } from '../model/outreach.types';
+import { type OutreachStepPreviewInput } from '../model/step-preview';
 import type { OutreachRouteDeps } from './route-deps';
+import { type OutreachRouteCaller } from './route-gate';
 /**
  * ONE EMAIL OF A SAVED SEQUENCE, AS A PERSON WOULD GET IT (AGL-2980):
  * `outreach/preview`.
@@ -29,5 +32,26 @@ import type { OutreachRouteDeps } from './route-deps';
  *
  * A real contact is read from the CRM, so naming one asks for `data.manage`
  * as enrolling does; the sample person asks for nothing more.
+ *
+ * The reading is {@link readOutreachStepRender}, shared with the test send
+ * (`step-test-routes.ts`, AGL-3325): a test is the preview's own email,
+ * sent — so both routes read the same records through the same gate, and
+ * what a member reads on screen is what arrives in their inbox.
+ */
+/** What a preview and a test both read before the composer runs. */
+export interface OutreachStepRender {
+    caller: OutreachRouteCaller;
+    sequence: OutreachSequence;
+    stepIndex: number;
+    step: OutreachEmailStep;
+    /** The sequence's mailbox as stored, or `null` when it names none or the mailbox is gone. */
+    mailbox: OutreachMailbox | null;
+    /** The composer's input: the person, the line, the footer, the template. */
+    input: OutreachStepPreviewInput;
+}
+/**
+ * The gate, then the sequence, the step and everything the step is rendered
+ * from — as the request body names them — or the refusal that stops it.
  */
+export declare function readOutreachStepRender(deps: OutreachRouteDeps, request: Request, body: Record<string, unknown>): Promise<Response | OutreachStepRender>;
 export declare function createOutreachPreviewRoute(deps: OutreachRouteDeps): PluginWebApiHandler;