@classytic/crm 0.5.1 → 0.8.0

package/dist/index.js

@@ -1,10 +1,12 @@
 import { t as __exportAll } from "./chunk.js";
 import { Schema } from "mongoose";
-import { Repository, aggregateHelpersPlugin, isDuplicateKeyError, methodRegistryPlugin, multiTenantPlugin } from "@classytic/mongokit";
+import { Repository, aggregateHelpersPlugin, isDuplicateKeyError, methodRegistryPlugin, multiTenantPlugin, withTransaction } from "@classytic/mongokit";
 import { createEvent as createEvent$1, matchEventPattern } from "@classytic/primitives/events";
-import { assertAndClaim, defineStateMachine } from "@classytic/primitives/state-machine";
+import { IllegalTransitionError, assertAndClaim, defineStateMachine } from "@classytic/primitives/state-machine";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
+import { civilDateOf } from "@classytic/primitives/timezone";
+import { CURRENCY_PATTERN } from "@classytic/primitives/currency";
 import { appendStatus, lastTransitionTo, latestEntry, timeInStatus } from "@classytic/primitives/status-history";
 //#region src/core/errors.ts
 /**
@@ -58,6 +60,11 @@ var DuplicateLeadError = class extends CrmError {
 		super("DUPLICATE_LEAD", `A lead with this email / phone already exists`, details);
 	}
 };
+var UnmanagedSessionError = class extends CrmError {
+	constructor(eventType) {
+		super("UNMANAGED_SESSION", "ctx.session was provided but no event delivery path exists — inside a host-owned transaction the event would either leak to subscribers before commit or be lost on rollback. Use engine.withTransaction(ctx, fn), wire CrmConfig.outbox, or attach a ctx[PENDING_EVENTS] queue and call flushPending() after commit (PACKAGE_RULES §P8.1).", eventType !== void 0 ? { eventType } : void 0);
+	}
+};
 var CrmModelCollisionError = class extends CrmError {
 	constructor(modelName) {
 		super("CRM_MODEL_COLLISION", `Mongoose model '${modelName}' is already registered on this connection. Another engine (or a hot reload) owns it. Pass { forceRecreate: true } to createCrm() for test/hot-reload fixtures, or use a separate mongoose connection per engine in production (PACKAGE_RULES §21).`, { modelName });
@@ -98,6 +105,21 @@ var InvalidUnsubscribeTokenError = class extends CrmError {
 		super("INVALID_UNSUBSCRIBE_TOKEN", "No subscription matches the supplied unsubscribe token");
 	}
 };
+var InvalidSequenceTransitionError = class extends CrmError {
+	constructor(details) {
+		super("INVALID_SEQUENCE_TRANSITION", `Sequence ${details.sequenceId} cannot move from '${details.from}' to '${details.to}'`, details);
+	}
+};
+var InvalidEnrollmentTransitionError = class extends CrmError {
+	constructor(details) {
+		super("INVALID_ENROLLMENT_TRANSITION", `Enrollment ${details.enrollmentId} cannot move from '${details.from}' to '${details.to}'`, details);
+	}
+};
+var AlreadyEnrolledError = class extends CrmError {
+	constructor(details) {
+		super("ALREADY_ENROLLED", `Subject '${details.subjectId}' already has an active enrollment in sequence '${details.sequenceId}'`, details);
+	}
+};
 //#endregion
 //#region src/models/tenant-field.ts
 /**
@@ -257,7 +279,7 @@ function canTransitionLead(from, to) {
 /**
 * Lead — top-of-funnel inquiry, pre-qualification.
 */
-const statusEntrySchema$3 = new Schema({
+const statusEntrySchema$5 = new Schema({
 	status: {
 		type: String,
 		enum: LEAD_STATUSES,
@@ -270,6 +292,25 @@ const statusEntrySchema$3 = new Schema({
 	by: { type: String },
 	note: { type: String }
 }, { _id: false });
+const engagementSchema = new Schema({
+	opens: {
+		type: Number,
+		default: 0
+	},
+	clicks: {
+		type: Number,
+		default: 0
+	},
+	replies: {
+		type: Number,
+		default: 0
+	},
+	activities: {
+		type: Number,
+		default: 0
+	},
+	lastEngagedAt: { type: Date }
+}, { _id: false });
 function buildLeadSchema(config) {
 	const schema = new Schema({
 		organizationId: tenantFieldDef(config),
@@ -324,6 +365,10 @@ function buildLeadSchema(config) {
 			type: Number,
 			default: 0
 		},
+		engagement: {
+			type: engagementSchema,
+			default: () => ({})
+		},
 		status: {
 			type: String,
 			enum: LEAD_STATUSES,
@@ -331,7 +376,7 @@ function buildLeadSchema(config) {
 			index: true
 		},
 		statusHistory: {
-			type: [statusEntrySchema$3],
+			type: [statusEntrySchema$5],
 			default: []
 		},
 		ownerId: {
@@ -418,7 +463,7 @@ function canTransitionOpportunity(from, to) {
 * Money amount lives flat (`amount` + `currency`) so `$sum` aggregates work; the repo
 * surface returns it that way too (no Money translation layer per PACKAGE_RULES §4).
 */
-const statusEntrySchema$2 = new Schema({
+const statusEntrySchema$4 = new Schema({
 	status: {
 		type: String,
 		enum: OPPORTUNITY_STATUSES,
@@ -466,7 +511,7 @@ function buildOpportunitySchema(config) {
 			index: true
 		},
 		statusHistory: {
-			type: [statusEntrySchema$2],
+			type: [statusEntrySchema$4],
 			default: []
 		},
 		amount: { type: Number },
@@ -779,7 +824,7 @@ function canTransitionCampaign(from, to) {
 * Campaign — a marketing/sales motion targeting a contact list.
 * Money fields stored flat (amount + currency) for $sum aggregations.
 */
-const statusEntrySchema$1 = new Schema({
+const statusEntrySchema$3 = new Schema({
 	status: {
 		type: String,
 		enum: CAMPAIGN_STATUSES,
@@ -813,7 +858,7 @@ function buildCampaignSchema(config) {
 			index: true
 		},
 		statusHistory: {
-			type: [statusEntrySchema$1],
+			type: [statusEntrySchema$3],
 			default: []
 		},
 		utmSource: {
@@ -928,7 +973,7 @@ function canTransitionSubscription(from, to) {
 * same connection. TypeScript class + file names retain `Subscription` for
 * source-level continuity — only the Mongo identity changed in v0.4.0.
 */
-const statusEntrySchema = new Schema({
+const statusEntrySchema$2 = new Schema({
 	status: {
 		type: String,
 		enum: SUBSCRIPTION_STATUSES,
@@ -961,7 +1006,7 @@ function buildSubscriptionSchema(config) {
 			index: true
 		},
 		statusHistory: {
-			type: [statusEntrySchema],
+			type: [statusEntrySchema$2],
 			default: []
 		},
 		source: {
@@ -1036,6 +1081,83 @@ function createSubscriptionModel(connection, config) {
 	return connection.model("EmailSubscription", buildSubscriptionSchema(config));
 }
 //#endregion
+//#region src/enums/suppression-reason.ts
+/** Reasons derived 1:1 from an email engagement event kind. */
+const EVENT_DERIVED_SUPPRESSION_REASONS = [
+	"bounce",
+	"complaint",
+	"unsubscribe"
+];
+const SUPPRESSION_REASONS = [...EVENT_DERIVED_SUPPRESSION_REASONS, "manual"];
+//#endregion
+//#region src/models/suppression.schema.ts
+/**
+* Suppression — org-wide "never email this address again" list.
+*
+* Subscription unsubscribes are per-campaign; a Suppression row is the
+* GLOBAL gate a host consults before EVERY outbound email (campaign
+* fanout, sequence step sends, one-off notifications). One row per
+* (org, email) — `suppress()` is getOrCreate-idempotent against the
+* unique index below.
+*
+* `subjectKind`/`subjectId` are optional String external refs (rule 7 —
+* polymorphic across Contact/Lead/host-owned models, so no
+* ObjectId+refPath). `source` is a free-form origin marker, e.g.
+* `'campaign:<id>'`, `'sequence:<id>'`, `'api'`, `'import'`.
+*/
+function buildSuppressionSchema(config) {
+	const schema = new Schema({
+		organizationId: tenantFieldDef(config),
+		email: {
+			type: String,
+			required: true,
+			trim: true,
+			lowercase: true,
+			maxlength: 320
+		},
+		reason: {
+			type: String,
+			enum: SUPPRESSION_REASONS,
+			required: true
+		},
+		source: {
+			type: String,
+			trim: true,
+			maxlength: 200
+		},
+		subjectKind: {
+			type: String,
+			trim: true,
+			maxlength: 50
+		},
+		subjectId: {
+			type: String,
+			trim: true,
+			maxlength: 100
+		},
+		suppressedAt: {
+			type: Date,
+			required: true,
+			default: () => /* @__PURE__ */ new Date()
+		},
+		metadata: { type: Schema.Types.Mixed }
+	}, { timestamps: true });
+	schema.index({
+		organizationId: 1,
+		email: 1
+	}, { unique: true });
+	schema.index({
+		organizationId: 1,
+		reason: 1,
+		suppressedAt: -1
+	});
+	schema.index({
+		organizationId: 1,
+		suppressedAt: -1
+	});
+	return schema;
+}
+//#endregion
 //#region src/enums/activity.ts
 /**
 * Activity type vocabulary. The package stores `type` as free-form
@@ -1608,6 +1730,263 @@ function createMessageModel(connection, config) {
 	return connection.model("Message", buildMessageSchema(config));
 }
 //#endregion
+//#region src/enums/sequence-status.ts
+/**
+* Email sequence lifecycle.
+*
+*   draft    — being built; no enrollments can be created
+*   active   — accepting new enrollments; steps are executing
+*   paused   — no new enrollments; running enrollments pause at next step
+*   archived — soft-hidden; historical data preserved
+*/
+const SEQUENCE_STATUSES = [
+	"draft",
+	"active",
+	"paused",
+	"archived"
+];
+const SEQUENCE_TRANSITIONS = {
+	draft: ["active", "archived"],
+	active: ["paused", "archived"],
+	paused: ["active", "archived"],
+	archived: []
+};
+function canTransitionSequence(from, to) {
+	return SEQUENCE_TRANSITIONS[from].includes(to);
+}
+//#endregion
+//#region src/models/sequence.schema.ts
+/**
+* Sequence — ordered cadence of SEND_EMAIL and DELAY steps.
+*
+* Steps are stored as a JSON array (Mixed) so the host can add new step
+* types without a schema migration. The discriminator is `step.type`.
+*/
+const statusEntrySchema$1 = new Schema({
+	status: {
+		type: String,
+		enum: SEQUENCE_STATUSES,
+		required: true
+	},
+	occurredAt: {
+		type: Date,
+		required: true
+	},
+	by: { type: String },
+	note: { type: String }
+}, { _id: false });
+function buildSequenceSchema(config) {
+	const schema = new Schema({
+		organizationId: tenantFieldDef(config),
+		name: {
+			type: String,
+			required: true,
+			trim: true,
+			maxlength: 200
+		},
+		description: {
+			type: String,
+			trim: true,
+			maxlength: 1e3
+		},
+		status: {
+			type: String,
+			enum: SEQUENCE_STATUSES,
+			default: "draft",
+			required: true
+		},
+		fromName: {
+			type: String,
+			trim: true,
+			maxlength: 100
+		},
+		fromEmail: {
+			type: String,
+			trim: true,
+			maxlength: 200
+		},
+		steps: {
+			type: [Schema.Types.Mixed],
+			default: []
+		},
+		replyDetectionEnabled: {
+			type: Boolean,
+			default: true
+		},
+		tags: {
+			type: [String],
+			default: []
+		},
+		ownerId: { type: String },
+		metadata: { type: Schema.Types.Mixed },
+		statusHistory: {
+			type: [statusEntrySchema$1],
+			default: []
+		}
+	}, { timestamps: true });
+	schema.index({
+		organizationId: 1,
+		status: 1
+	});
+	schema.index({
+		organizationId: 1,
+		createdAt: -1
+	});
+	return schema;
+}
+//#endregion
+//#region src/enums/enrollment-status.ts
+/**
+* Enrollment lifecycle.
+*
+*   active    — steps are executing (or waiting on a delay)
+*   paused    — execution halted; can be resumed
+*   completed — all steps ran to completion
+*   exited    — removed early (reply, unsubscribe, bounce, manual)
+*/
+const ENROLLMENT_STATUSES = [
+	"active",
+	"paused",
+	"completed",
+	"exited"
+];
+const ENROLLMENT_TRANSITIONS = {
+	active: [
+		"paused",
+		"completed",
+		"exited"
+	],
+	paused: ["active", "exited"],
+	completed: [],
+	exited: []
+};
+function canTransitionEnrollment(from, to) {
+	return ENROLLMENT_TRANSITIONS[from].includes(to);
+}
+//#endregion
+//#region src/models/enrollment.schema.ts
+/**
+* Enrollment — a single subject (lead or contact) progressing through a Sequence.
+*
+* `currentStepIndex` tracks which step to execute next. The sequence workflow
+* reads this field at each iteration so crashes / pauses resume from the
+* correct position without re-running completed steps.
+*/
+const ENROLLMENT_SUBJECT_KINDS = ["lead", "contact"];
+const stepResultSchema = new Schema({
+	stepId: {
+		type: String,
+		required: true
+	},
+	stepType: {
+		type: String,
+		required: true
+	},
+	status: {
+		type: String,
+		enum: [
+			"pending",
+			"sent",
+			"failed",
+			"skipped"
+		],
+		required: true
+	},
+	sentAt: { type: Date },
+	error: { type: String }
+}, { _id: false });
+const statusEntrySchema = new Schema({
+	status: {
+		type: String,
+		enum: ENROLLMENT_STATUSES,
+		required: true
+	},
+	occurredAt: {
+		type: Date,
+		required: true
+	},
+	by: { type: String }
+}, { _id: false });
+function buildEnrollmentSchema(config) {
+	const schema = new Schema({
+		organizationId: tenantFieldDef(config),
+		sequenceId: {
+			type: config.tenantFieldType === "objectId" ? Schema.Types.ObjectId : String,
+			required: true,
+			ref: "Sequence"
+		},
+		subjectKind: {
+			type: String,
+			enum: ENROLLMENT_SUBJECT_KINDS,
+			required: true
+		},
+		subjectId: {
+			type: config.tenantFieldType === "objectId" ? Schema.Types.ObjectId : String,
+			required: true
+		},
+		status: {
+			type: String,
+			enum: ENROLLMENT_STATUSES,
+			default: "active",
+			required: true
+		},
+		currentStepIndex: {
+			type: Number,
+			default: 0,
+			min: 0
+		},
+		stepResults: {
+			type: [stepResultSchema],
+			default: []
+		},
+		resumeAt: { type: Date },
+		workflowRunId: { type: String },
+		exitReason: {
+			type: String,
+			enum: [
+				"completed",
+				"reply",
+				"unsubscribe",
+				"bounce",
+				"manual"
+			]
+		},
+		enrolledAt: {
+			type: Date,
+			required: true,
+			default: () => /* @__PURE__ */ new Date()
+		},
+		completedAt: { type: Date },
+		ownerId: { type: String },
+		metadata: { type: Schema.Types.Mixed },
+		statusHistory: {
+			type: [statusEntrySchema],
+			default: []
+		}
+	}, { timestamps: true });
+	schema.index({
+		organizationId: 1,
+		sequenceId: 1,
+		subjectId: 1,
+		status: 1
+	}, { unique: false });
+	schema.index({
+		organizationId: 1,
+		sequenceId: 1,
+		status: 1
+	});
+	schema.index({
+		organizationId: 1,
+		subjectKind: 1,
+		subjectId: 1
+	});
+	schema.index({
+		organizationId: 1,
+		createdAt: -1
+	});
+	return schema;
+}
+//#endregion
 //#region src/models/create-models.ts
 /** Mongoose model names this package registers — drives the §21 collision check. */
 const CRM_MODEL_NAMES = [
@@ -1618,12 +1997,15 @@ const CRM_MODEL_NAMES = [
 	"Account",
 	"Campaign",
 	"EmailSubscription",
+	"Suppression",
 	"Activity",
 	"Note",
 	"LossReason",
 	"EmailEvent",
 	"Conversation",
-	"Message"
+	"Message",
+	"Sequence",
+	"Enrollment"
 ];
 function createCrmModels(connection, config) {
 	const forceRecreate = config.forceRecreate ?? false;
@@ -1644,12 +2026,15 @@ function createCrmModels(connection, config) {
 		Account: register("Account", buildAccountSchema(config)),
 		Campaign: register("Campaign", buildCampaignSchema(config)),
 		Subscription: register("EmailSubscription", buildSubscriptionSchema(config)),
+		Suppression: register("Suppression", buildSuppressionSchema(config)),
 		Activity: register("Activity", buildActivitySchema(config)),
 		Note: register("Note", buildNoteSchema(config)),
 		LossReason: register("LossReason", buildLossReasonSchema(config)),
 		EmailEvent: register("EmailEvent", buildEmailEventSchema(config)),
 		Conversation: register("Conversation", buildConversationSchema(config)),
-		Message: register("Message", buildMessageSchema(config))
+		Message: register("Message", buildMessageSchema(config)),
+		Sequence: register("Sequence", buildSequenceSchema(config)),
+		Enrollment: register("Enrollment", buildEnrollmentSchema(config))
 	});
 }
 //#endregion
@@ -1688,6 +2073,16 @@ const CRM_EVENTS = {
 	SUBSCRIPTION_UNSUBSCRIBED: "crm:subscription.unsubscribed",
 	SUBSCRIPTION_BOUNCED: "crm:subscription.bounced",
 	SUBSCRIPTION_COMPLAINED: "crm:subscription.complained",
+	SEQUENCE_CREATED: "crm:sequence.created",
+	SEQUENCE_ACTIVATED: "crm:sequence.active",
+	SEQUENCE_PAUSED: "crm:sequence.paused",
+	SEQUENCE_ARCHIVED: "crm:sequence.archived",
+	ENROLLMENT_CREATED: "crm:enrollment.created",
+	ENROLLMENT_STEP_SENT: "crm:enrollment.step_sent",
+	ENROLLMENT_PAUSED: "crm:enrollment.paused",
+	ENROLLMENT_RESUMED: "crm:enrollment.resumed",
+	ENROLLMENT_COMPLETED: "crm:enrollment.completed",
+	ENROLLMENT_EXITED: "crm:enrollment.exited",
 	EMAIL_EVENT_OPENED: "crm:email_event.opened",
 	EMAIL_EVENT_CLICKED: "crm:email_event.clicked",
 	EMAIL_EVENT_BOUNCED: "crm:email_event.bounced",
@@ -1706,6 +2101,8 @@ const CRM_EVENTS = {
 	OPPORTUNITY_EXTENDED: "crm:opportunity.extended",
 	ACTIVITY_RESCHEDULED: "crm:activity.rescheduled",
 	ACTIVITY_OUTCOME_RECORDED: "crm:activity.outcome_recorded",
+	SUPPRESSION_ADDED: "crm:suppression.added",
+	SUPPRESSION_REMOVED: "crm:suppression.removed",
 	CONVERSATION_CREATED: "crm:conversation.created",
 	CONVERSATION_ASSIGNED: "crm:conversation.assigned",
 	CONVERSATION_RESOLVED: "crm:conversation.resolved",
@@ -1778,7 +2175,7 @@ var PipelineRepository = class extends Repository {
 	async archive(id, ctx) {
 		const updated = await this.update(id, { isArchived: true }, ctx);
 		if (!updated) throw new NotFoundError("Pipeline", id);
-		await this.events.publish(createEvent(CRM_EVENTS.PIPELINE_ARCHIVED, { pipelineId: id }, ctx));
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.PIPELINE_ARCHIVED, { pipelineId: id }, ctx));
 		return updated;
 	}
 };
@@ -1844,17 +2241,38 @@ const ACTIVITY_MACHINE = defineStateMachine({
 		activityId: entityId
 	})
 });
+const SEQUENCE_MACHINE = defineStateMachine({
+	name: "Sequence",
+	transitions: SEQUENCE_TRANSITIONS,
+	errorFactory: ({ entityId, from, to }) => new InvalidSequenceTransitionError({
+		from,
+		to,
+		sequenceId: entityId
+	})
+});
+const ENROLLMENT_MACHINE = defineStateMachine({
+	name: "Enrollment",
+	transitions: ENROLLMENT_TRANSITIONS,
+	errorFactory: ({ entityId, from, to }) => new InvalidEnrollmentTransitionError({
+		from,
+		to,
+		enrollmentId: entityId
+	})
+});
 //#endregion
 //#region src/shared/calculators/scoring.ts
 /**
 * Reference implementation. Intentionally simple — hosts read it and
-* replace it.
+* replace it. Deterministic + pure (no I/O, no wall-clock).
 *
-* +20 if email is present
-* +20 if phone is present
-* +20 if companyName is present
-* +10 per populated tag up to 40
-* +10 if jobTitle hints senior (director / manager / head / chief / vp / founder)
+* Firmographic fit (max 110):
+*   +20 email · +20 phone · +20 companyName
+*   +10 per populated tag, up to +40
+*   +10 if jobTitle hints senior (director/manager/head/chief/vp/founder)
+*
+* Behavioural engagement, capped at +80 so a run of opens can't dominate a
+* genuine reply: reply ×25 · click ×8 · open ×2 · activity ×5. Counters are
+* fed by the host via `LeadRepository.recordEngagement`; absent on old rows.
 */
 function defaultLeadScorer(lead) {
 	let score = 0;
@@ -1863,6 +2281,11 @@ function defaultLeadScorer(lead) {
 	if (lead.companyName) score += 20;
 	score += Math.min(40, (lead.tags?.length ?? 0) * 10);
 	if (lead.jobTitle && /(director|manager|head|chief|vp|founder)/i.test(lead.jobTitle)) score += 10;
+	const e = lead.engagement;
+	if (e) {
+		const engagementPoints = (e.replies ?? 0) * 25 + (e.clicks ?? 0) * 8 + (e.opens ?? 0) * 2 + (e.activities ?? 0) * 5;
+		score += Math.min(80, engagementPoints);
+	}
 	return score;
 }
 /** Compose multiple small rules into one scorer. */
@@ -1871,6 +2294,13 @@ function composeScorers(...rules) {
 }
 //#endregion
 //#region src/repositories/lead.repository.ts
+/** signal → engagement counter field. */
+const ENGAGEMENT_COUNTER = {
+	open: "opens",
+	click: "clicks",
+	reply: "replies",
+	activity: "activities"
+};
 var LeadRepository = class extends Repository {
 	events;
 	scorer;
@@ -1913,12 +2343,12 @@ var LeadRepository = class extends Repository {
 		let result = created;
 		if (score !== 0) {
 			result = await this.update(String(created._id), { score }, ctx) ?? created;
-			await this.events.publish(createEvent(CRM_EVENTS.LEAD_SCORED, {
+			await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_SCORED, {
 				leadId: String(created._id),
 				score
 			}, ctx));
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_CREATED, {
 			leadId: String(result._id),
 			email: result.email,
 			score: result.score
@@ -1937,7 +2367,7 @@ var LeadRepository = class extends Repository {
 			note: reason,
 			patch: { disqualifyReason: reason }
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_DISQUALIFIED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_DISQUALIFIED, {
 			leadId: id,
 			reason
 		}, ctx));
@@ -1959,7 +2389,7 @@ var LeadRepository = class extends Repository {
 		if (!await this.getById(id, ctx)) throw new NotFoundError("Lead", id);
 		if (!await this.update(id, patch, ctx)) throw new NotFoundError("Lead", id);
 		const fields = Object.keys(patch);
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_ENRICHED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_ENRICHED, {
 			leadId: id,
 			fields,
 			...extras.provider !== void 0 ? { provider: extras.provider } : {}
@@ -1983,7 +2413,7 @@ var LeadRepository = class extends Repository {
 			if (!current) throw new NotFoundError("Lead", id);
 			return current;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_ASSIGNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_ASSIGNED, {
 			leadId: id,
 			ownerId,
 			...before.ownerId !== void 0 ? { previousOwnerId: before.ownerId } : {}
@@ -1991,6 +2421,20 @@ var LeadRepository = class extends Repository {
 		return await this.getById(id, ctx) ?? before;
 	}
 	/**
+	* Record a behavioural engagement signal, then re-score. The host feeds
+	* these off CRM events (`crm:message.received` → reply, `crm:activity.*` →
+	* activity, and email open/click tracking → open/click). Atomic `$inc`
+	* on the counter (single round-trip, no lost-update window under
+	* concurrent signals), then `recomputeScore` re-reads the fresh counters.
+	*/
+	async recordEngagement(id, signal, ctx) {
+		if (!await this.findOneAndUpdate({ _id: id }, {
+			$inc: { [`engagement.${ENGAGEMENT_COUNTER[signal]}`]: 1 },
+			$set: { "engagement.lastEngagedAt": /* @__PURE__ */ new Date() }
+		}, ctx)) throw new NotFoundError("Lead", id);
+		return this.recomputeScore(id, ctx);
+	}
+	/**
 	* Recompute + persist the lead's score. Called from `createLead`
 	* automatically; hosts also call this after enrichment writes.
 	*/
@@ -2001,7 +2445,7 @@ var LeadRepository = class extends Repository {
 		if (score === lead.score) return lead;
 		const updated = await this.update(id, { score }, ctx);
 		if (!updated) throw new NotFoundError("Lead", id);
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_SCORED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_SCORED, {
 			leadId: id,
 			score
 		}, ctx));
@@ -2031,7 +2475,7 @@ var LeadRepository = class extends Repository {
 			to: target,
 			leadId: id
 		});
-		await this.events.publish(createEvent(CRM_EVENTS.LEAD_STATUS_CHANGED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_STATUS_CHANGED, {
 			leadId: id,
 			from: existing.status,
 			to: target
@@ -2097,7 +2541,7 @@ var OpportunityRepository = class extends Repository {
 			...input.metadata !== void 0 ? { metadata: input.metadata } : {}
 		};
 		const created = await this.create(draft, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_CREATED, {
 			opportunityId: String(created._id),
 			pipelineId: input.pipelineId,
 			stageId: String(stage._id)
@@ -2141,7 +2585,7 @@ var OpportunityRepository = class extends Repository {
 			stageId: String(target._id)
 		});
 		const event = target.sequence > current.sequence ? CRM_EVENTS.OPPORTUNITY_STAGE_ADVANCED : CRM_EVENTS.OPPORTUNITY_STAGE_REGRESSED;
-		await this.events.publish(createEvent(event, {
+		await this.events.dispatch(ctx, createEvent(event, {
 			opportunityId: id,
 			from: {
 				stageId: String(current._id),
@@ -2163,7 +2607,7 @@ var OpportunityRepository = class extends Repository {
 			...input.by !== void 0 ? { by: input.by } : {},
 			...input.note !== void 0 ? { note: input.note } : {}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_WON, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_WON, {
 			opportunityId: id,
 			amount: updated.amount
 		}, ctx));
@@ -2178,7 +2622,7 @@ var OpportunityRepository = class extends Repository {
 			...input.by !== void 0 ? { by: input.by } : {},
 			...input.note !== void 0 ? { note: input.note } : {}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_LOST, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_LOST, {
 			opportunityId: id,
 			lostReasonId: updated.lostReasonId
 		}, ctx));
@@ -2201,7 +2645,7 @@ var OpportunityRepository = class extends Repository {
 			if (!current) throw new NotFoundError("Opportunity", id);
 			return current;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_ASSIGNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_ASSIGNED, {
 			opportunityId: id,
 			ownerId,
 			...before.ownerId !== void 0 ? { previousOwnerId: before.ownerId } : {}
@@ -2225,7 +2669,7 @@ var OpportunityRepository = class extends Repository {
 		if (amount === existing.amount) return existing;
 		const updated = await this.update(id, { amount }, ctx);
 		if (!updated) throw new NotFoundError("Opportunity", id);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_AMOUNT_CHANGED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_AMOUNT_CHANGED, {
 			opportunityId: id,
 			amount,
 			...existing.amount !== void 0 ? { previousAmount: existing.amount } : {},
@@ -2252,7 +2696,7 @@ var OpportunityRepository = class extends Repository {
 		if (previous && newDate <= previous) return existing;
 		const updated = await this.update(id, { expectedCloseAt: newDate }, ctx);
 		if (!updated) throw new NotFoundError("Opportunity", id);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_EXTENDED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_EXTENDED, {
 			opportunityId: id,
 			expectedCloseAt: newDate.toISOString(),
 			...previous ? { previousExpectedCloseAt: previous.toISOString() } : {},
@@ -2269,7 +2713,7 @@ var OpportunityRepository = class extends Repository {
 			...by !== void 0 ? { by } : {},
 			...note !== void 0 ? { note } : {}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.OPPORTUNITY_ABANDONED, { opportunityId: id }, ctx));
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.OPPORTUNITY_ABANDONED, { opportunityId: id }, ctx));
 		return updated;
 	}
 	async _closeStatus(id, target, patch, extras, ctx) {
@@ -2366,7 +2810,7 @@ var ContactRepository = class extends Repository {
 	*/
 	async createContact(input, ctx) {
 		const created = await this.create(input, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CONTACT_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONTACT_CREATED, {
 			contactId: String(created._id),
 			email: created.contact?.email
 		}, ctx));
@@ -2381,7 +2825,7 @@ var ContactRepository = class extends Repository {
 		if (!await this.getById(id, ctx)) throw new NotFoundError("Contact", id);
 		const updated = await this.update(id, patch, ctx);
 		if (!updated) throw new NotFoundError("Contact", id);
-		await this.events.publish(createEvent(CRM_EVENTS.CONTACT_ENRICHED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONTACT_ENRICHED, {
 			contactId: id,
 			fields: Object.keys(patch),
 			...extras.provider !== void 0 ? { provider: extras.provider } : {}
@@ -2402,7 +2846,7 @@ var ContactRepository = class extends Repository {
 			if (!current) throw new NotFoundError("Contact", id);
 			return current;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.CONTACT_ASSIGNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONTACT_ASSIGNED, {
 			contactId: id,
 			ownerId,
 			...before.ownerId !== void 0 ? { previousOwnerId: before.ownerId } : {}
@@ -2452,7 +2896,7 @@ var ContactRepository = class extends Repository {
 		const updated = await this.update(primaryId, patch, ctx);
 		if (!updated) throw new NotFoundError("Contact", primaryId);
 		await this.delete(secondaryId, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CONTACT_MERGED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONTACT_MERGED, {
 			primaryId,
 			secondaryId,
 			strategy
@@ -2484,7 +2928,7 @@ var AccountRepository = class extends Repository {
 	}
 	async createAccount(input, ctx) {
 		const created = await this.create(input, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.ACCOUNT_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACCOUNT_CREATED, {
 			accountId: String(created._id),
 			name: created.name
 		}, ctx));
@@ -2494,7 +2938,7 @@ var AccountRepository = class extends Repository {
 		if (!await this.getById(id, ctx)) throw new NotFoundError("Account", id);
 		const updated = await this.update(id, patch, ctx);
 		if (!updated) throw new NotFoundError("Account", id);
-		await this.events.publish(createEvent(CRM_EVENTS.ACCOUNT_ENRICHED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACCOUNT_ENRICHED, {
 			accountId: id,
 			fields: Object.keys(patch),
 			...extras.provider !== void 0 ? { provider: extras.provider } : {}
@@ -2514,7 +2958,7 @@ var AccountRepository = class extends Repository {
 			if (!current) throw new NotFoundError("Account", id);
 			return current;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.ACCOUNT_ASSIGNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACCOUNT_ASSIGNED, {
 			accountId: id,
 			ownerId,
 			...before.ownerId !== void 0 ? { previousOwnerId: before.ownerId } : {}
@@ -2543,7 +2987,7 @@ var AccountRepository = class extends Repository {
 		const updated = await this.update(primaryId, patch, ctx);
 		if (!updated) throw new NotFoundError("Account", primaryId);
 		await this.delete(secondaryId, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.ACCOUNT_MERGED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACCOUNT_MERGED, {
 			primaryId,
 			secondaryId,
 			strategy
@@ -2587,7 +3031,7 @@ var CampaignRepository = class extends Repository {
 			if (this.rejectDuplicates && input.name && isDuplicateKeyError(err)) throw new DuplicateCampaignError(input.name);
 			throw err;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_CREATED, {
 			campaignId: String(created._id),
 			name: created.name
 		}, ctx));
@@ -2595,7 +3039,7 @@ var CampaignRepository = class extends Repository {
 	}
 	async activate(id, by, ctx) {
 		const updated = await this._transition(id, "active", { ...by !== void 0 ? { by } : {} }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_ACTIVATED, { campaignId: id }, ctx));
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_ACTIVATED, { campaignId: id }, ctx));
 		return updated;
 	}
 	async pause(id, reason, by, ctx) {
@@ -2603,7 +3047,7 @@ var CampaignRepository = class extends Repository {
 			...by !== void 0 ? { by } : {},
 			...reason !== void 0 ? { note: reason } : {}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_PAUSED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_PAUSED, {
 			campaignId: id,
 			reason
 		}, ctx));
@@ -2611,13 +3055,13 @@ var CampaignRepository = class extends Repository {
 	}
 	async resume(id, by, ctx) {
 		const updated = await this._transition(id, "active", { ...by !== void 0 ? { by } : {} }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_RESUMED, { campaignId: id }, ctx));
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_RESUMED, { campaignId: id }, ctx));
 		return updated;
 	}
 	async complete(id, extras = {}, ctx) {
 		const patch = extras.actualRevenueAmount !== void 0 ? { actualRevenueAmount: extras.actualRevenueAmount } : {};
 		const updated = await this._transition(id, "completed", extras, ctx, patch);
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_COMPLETED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_COMPLETED, {
 			campaignId: id,
 			actualRevenueAmount: updated.actualRevenueAmount
 		}, ctx));
@@ -2625,7 +3069,7 @@ var CampaignRepository = class extends Repository {
 	}
 	async archive(id, by, ctx) {
 		const updated = await this._transition(id, "archived", { ...by !== void 0 ? { by } : {} }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CAMPAIGN_ARCHIVED, { campaignId: id }, ctx));
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CAMPAIGN_ARCHIVED, { campaignId: id }, ctx));
 		return updated;
 	}
 	async _transition(id, target, extras, ctx, patch = {}) {
@@ -2716,7 +3160,7 @@ var SubscriptionRepository = class extends Repository {
 			});
 			throw err;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.SUBSCRIPTION_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUBSCRIPTION_CREATED, {
 			subscriptionId: String(sub._id),
 			contactId: sub.contactId,
 			campaignId: sub.campaignId,
@@ -2729,7 +3173,7 @@ var SubscriptionRepository = class extends Repository {
 		if (!sub || sub.status !== "pending") throw new InvalidConfirmationTokenError();
 		const confirmedAt = /* @__PURE__ */ new Date();
 		const updated = await this._transition(String(sub._id), "confirmed", { patch: { confirmedAt } }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.SUBSCRIPTION_CONFIRMED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUBSCRIPTION_CONFIRMED, {
 			subscriptionId: String(sub._id),
 			contactId: sub.contactId,
 			campaignId: sub.campaignId,
@@ -2749,7 +3193,7 @@ var SubscriptionRepository = class extends Repository {
 				...reason !== void 0 ? { unsubscribeReason: reason } : {}
 			}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.SUBSCRIPTION_UNSUBSCRIBED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUBSCRIPTION_UNSUBSCRIBED, {
 			subscriptionId: String(sub._id),
 			contactId: sub.contactId,
 			campaignId: sub.campaignId,
@@ -2769,7 +3213,7 @@ var SubscriptionRepository = class extends Repository {
 				...reason !== void 0 ? { bounceReason: reason } : {}
 			}
 		}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.SUBSCRIPTION_BOUNCED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUBSCRIPTION_BOUNCED, {
 			subscriptionId: id,
 			contactId: existing.contactId,
 			campaignId: existing.campaignId,
@@ -2783,7 +3227,7 @@ var SubscriptionRepository = class extends Repository {
 		if (existing.status === "complained") return existing;
 		const complainedAt = /* @__PURE__ */ new Date();
 		const updated = await this._transition(id, "complained", { patch: { complainedAt } }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.SUBSCRIPTION_COMPLAINED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUBSCRIPTION_COMPLAINED, {
 			subscriptionId: id,
 			contactId: existing.contactId,
 			campaignId: existing.campaignId
@@ -2818,6 +3262,78 @@ var SubscriptionRepository = class extends Repository {
 	}
 };
 //#endregion
+//#region src/repositories/suppression.repository.ts
+function normalizeEmail(email) {
+	return email.trim().toLowerCase();
+}
+var SuppressionRepository = class extends Repository {
+	events;
+	constructor(model, plugins, deps, pagination) {
+		super(model, plugins, pagination);
+		this.events = deps.events;
+	}
+	/**
+	* Idempotently add `email` to the org's suppression list. Atomic
+	* `getOrCreate` on the unique (org, email) index — of N concurrent
+	* calls exactly one inserts. Emits `crm:suppression.added` only for
+	* the inserting call; an existing row is returned unchanged, no event.
+	*/
+	async suppress(email, input, ctx) {
+		const normalized = normalizeEmail(email);
+		const draft = {
+			email: normalized,
+			reason: input.reason,
+			suppressedAt: /* @__PURE__ */ new Date(),
+			...input.source !== void 0 ? { source: input.source } : {},
+			...input.subjectKind !== void 0 ? { subjectKind: input.subjectKind } : {},
+			...input.subjectId !== void 0 ? { subjectId: input.subjectId } : {},
+			...input.metadata !== void 0 ? { metadata: input.metadata } : {}
+		};
+		const { doc, created } = await this.getOrCreate({ email: normalized }, draft, ctx);
+		if (created) await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUPPRESSION_ADDED, {
+			email: normalized,
+			reason: input.reason,
+			...input.source !== void 0 ? { source: input.source } : {}
+		}, ctx));
+		return doc;
+	}
+	/** True when `email` is on the org's suppression list. */
+	async isSuppressed(email, ctx) {
+		return await this.exists({ email: normalizeEmail(email) }, ctx) !== null;
+	}
+	/**
+	* Return the suppressed subset of `emails` (normalized) as a Set —
+	* ONE `$in` query, built for the campaign-fanout hot path:
+	*
+	* ```ts
+	* const blocked = await suppression.filterSuppressed(recipients, ctx);
+	* const sendable = recipients.filter((e) => !blocked.has(e.toLowerCase()));
+	* ```
+	*/
+	async filterSuppressed(emails, ctx) {
+		if (emails.length === 0) return /* @__PURE__ */ new Set();
+		const normalized = [...new Set(emails.map(normalizeEmail))];
+		const rows = await this.findAll({ email: { $in: normalized } }, {
+			...ctx ?? {},
+			select: "email",
+			lean: true
+		});
+		return new Set(rows.map((row) => row.email));
+	}
+	/**
+	* Remove `email` from the org's suppression list. Single atomic
+	* `deleteMany` on the (unique) email key — emits
+	* `crm:suppression.removed` only when a row was actually removed.
+	* Returns whether a row was removed.
+	*/
+	async unsuppress(email, ctx) {
+		const normalized = normalizeEmail(email);
+		const removed = (await this.deleteMany({ email: normalized }, ctx ?? {})).deletedCount > 0;
+		if (removed) await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SUPPRESSION_REMOVED, { email: normalized }, ctx));
+		return removed;
+	}
+};
+//#endregion
 //#region src/repositories/activity.repository.ts
 var ActivityRepository = class extends Repository {
 	events;
@@ -2831,7 +3347,7 @@ var ActivityRepository = class extends Repository {
 			status: "planned"
 		};
 		const created = await this.create(draft, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.ACTIVITY_PLANNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACTIVITY_PLANNED, {
 			activityId: String(created._id),
 			type: created.type,
 			subjectKind: created.subjectKind,
@@ -2845,7 +3361,7 @@ var ActivityRepository = class extends Repository {
 	async complete(id, completedAt, ctx) {
 		const ts = completedAt ?? /* @__PURE__ */ new Date();
 		const updated = await this._transition(id, "completed", { completedAt: ts }, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.ACTIVITY_COMPLETED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACTIVITY_COMPLETED, {
 			activityId: id,
 			completedAt: ts.toISOString()
 		}, ctx));
@@ -2853,7 +3369,7 @@ var ActivityRepository = class extends Repository {
 	}
 	async cancel(id, reason, ctx) {
 		const updated = await this._transition(id, "cancelled", reason ? { metadata: { cancelReason: reason } } : {}, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.ACTIVITY_CANCELLED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACTIVITY_CANCELLED, {
 			activityId: id,
 			...reason !== void 0 ? { reason } : {}
 		}, ctx));
@@ -2875,7 +3391,7 @@ var ActivityRepository = class extends Repository {
 		const previous = existing.dueDate;
 		const updated = await this.update(id, { dueDate: newDueDate }, ctx);
 		if (!updated) throw new NotFoundError("Activity", id);
-		await this.events.publish(createEvent(CRM_EVENTS.ACTIVITY_RESCHEDULED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACTIVITY_RESCHEDULED, {
 			activityId: id,
 			dueDate: newDueDate.toISOString(),
 			...previous ? { previousDueDate: previous.toISOString() } : {},
@@ -2902,7 +3418,7 @@ var ActivityRepository = class extends Repository {
 		};
 		const updated = await this.update(id, { metadata: mergedMetadata }, ctx);
 		if (!updated) throw new NotFoundError("Activity", id);
-		await this.events.publish(createEvent(CRM_EVENTS.ACTIVITY_OUTCOME_RECORDED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ACTIVITY_OUTCOME_RECORDED, {
 			activityId: id,
 			outcome
 		}, ctx));
@@ -2959,7 +3475,7 @@ var NoteRepository = class extends Repository {
 	}
 	async addNote(input, ctx) {
 		const created = await this.create(input, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.NOTE_ADDED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.NOTE_ADDED, {
 			noteId: String(created._id),
 			subjectKind: created.subjectKind,
 			subjectId: String(created.subjectId)
@@ -3025,7 +3541,7 @@ var EmailEventRepository = class extends Repository {
 			...input.metadata !== void 0 ? { metadata: input.metadata } : {}
 		};
 		const created = await this.create(draft, ctx);
-		await this.events.publish(createEvent(KIND_TO_EVENT[kind], {
+		await this.events.dispatch(ctx, createEvent(KIND_TO_EVENT[kind], {
 			eventId: String(created._id),
 			kind,
 			subjectKind: input.subjectKind,
@@ -3055,7 +3571,7 @@ var ConversationRepository = class extends Repository {
 			...input.metadata !== void 0 ? { metadata: input.metadata } : {}
 		};
 		const created = await this.create(draft, ctx);
-		await this.events.publish(createEvent(CRM_EVENTS.CONVERSATION_CREATED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONVERSATION_CREATED, {
 			conversationId: String(created._id),
 			channel: created.channel,
 			participantKind: created.participantKind,
@@ -3076,7 +3592,7 @@ var ConversationRepository = class extends Repository {
 			if (!current) throw new NotFoundError("Conversation", id);
 			return current;
 		}
-		await this.events.publish(createEvent(CRM_EVENTS.CONVERSATION_ASSIGNED, {
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.CONVERSATION_ASSIGNED, {
 			conversationId: id,
 			assigneeId,
 			...before.assigneeId !== void 0 ? { previousAssigneeId: before.assigneeId } : {}
@@ -3114,7 +3630,7 @@ var ConversationRepository = class extends Repository {
 		if (existing.status === next) return existing;
 		const updated = await this.update(id, { status: next }, ctx);
 		if (!updated) throw new NotFoundError("Conversation", id);
-		await this.events.publish(createEvent(eventType, {
+		await this.events.dispatch(ctx, createEvent(eventType, {
 			conversationId: id,
 			status: next,
 			previousStatus: existing.status
@@ -3166,7 +3682,7 @@ var MessageRepository = class extends Repository {
 			direction,
 			sentAt
 		}, ctx);
-		await this.events.publish(createEvent(eventType, {
+		await this.events.dispatch(ctx, createEvent(eventType, {
 			messageId: String(created._id),
 			conversationId: input.conversationId,
 			direction,
@@ -3191,6 +3707,230 @@ var MessageRepository = class extends Repository {
 	}
 };
 //#endregion
+//#region src/repositories/sequence.repository.ts
+var SequenceRepository = class extends Repository {
+	events;
+	constructor(model, plugins, deps, pagination) {
+		super(model, plugins, pagination);
+		this.events = deps.events;
+	}
+	async activate(id, ctx) {
+		const doc = await this._transition(id, "active", ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SEQUENCE_ACTIVATED, { sequenceId: id }, ctx));
+		return doc;
+	}
+	async activateFromPaused(id, ctx) {
+		return this.activate(id, ctx);
+	}
+	async pause(id, ctx) {
+		const doc = await this._transition(id, "paused", ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SEQUENCE_PAUSED, { sequenceId: id }, ctx));
+		return doc;
+	}
+	async archive(id, ctx) {
+		const doc = await this._transition(id, "archived", ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.SEQUENCE_ARCHIVED, { sequenceId: id }, ctx));
+		return doc;
+	}
+	async _transition(id, target, ctx) {
+		const existing = await this.getById(id, ctx);
+		if (!existing) throw new NotFoundError("Sequence", id);
+		SEQUENCE_MACHINE.assertTransition(id, existing.status, target);
+		const entry = {
+			status: target,
+			occurredAt: /* @__PURE__ */ new Date(),
+			...ctx?.actorId !== void 0 ? { by: String(ctx.actorId) } : {}
+		};
+		const updated = await assertAndClaim(SEQUENCE_MACHINE, this, id, {
+			from: existing.status,
+			to: target,
+			patch: { statusHistory: [...existing.statusHistory ?? [], entry] },
+			options: ctx
+		});
+		if (!updated) throw new InvalidSequenceTransitionError({
+			from: (await this.getById(id, ctx))?.status ?? existing.status,
+			to: target,
+			sequenceId: id
+		});
+		return updated;
+	}
+};
+//#endregion
+//#region src/repositories/enrollment.repository.ts
+var EnrollmentRepository = class extends Repository {
+	events;
+	sequences;
+	constructor(model, plugins, deps, pagination) {
+		super(model, plugins, pagination);
+		this.events = deps.events;
+		this.sequences = deps.sequences;
+	}
+	/** Create a new enrollment — throws AlreadyEnrolledError if an active one exists. */
+	async enroll(input, ctx) {
+		const { sequenceId, subjectKind, subjectId, workflowRunId, ownerId, metadata } = input;
+		if (await this.getOne({
+			sequenceId,
+			subjectId,
+			status: { $in: ["active", "paused"] }
+		}, ctx)) throw new AlreadyEnrolledError({
+			sequenceId,
+			subjectId
+		});
+		const doc = await this.create({
+			organizationId: ctx?.organizationId,
+			sequenceId,
+			subjectKind,
+			subjectId,
+			status: "active",
+			currentStepIndex: 0,
+			stepResults: [],
+			enrolledAt: /* @__PURE__ */ new Date(),
+			...workflowRunId ? { workflowRunId } : {},
+			...ownerId ? { ownerId } : {},
+			...metadata ? { metadata } : {},
+			statusHistory: [{
+				status: "active",
+				occurredAt: /* @__PURE__ */ new Date()
+			}]
+		}, ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ENROLLMENT_CREATED, {
+			enrollmentId: String(doc._id),
+			sequenceId,
+			subjectId,
+			subjectKind
+		}, ctx));
+		return doc;
+	}
+	/** Set workflowRunId after the workflow has started. */
+	async setWorkflowRunId(id, workflowRunId, ctx) {
+		await this.update(id, { workflowRunId }, ctx);
+	}
+	/** Atomically advance to the next step and record the result (CAS). */
+	async advanceStep(id, nextStepIndex, stepResult, ctx) {
+		return this.claim(id, {
+			field: "currentStepIndex",
+			from: nextStepIndex - 1,
+			to: nextStepIndex,
+			where: { status: "active" }
+		}, stepResult ? { $push: { stepResults: stepResult } } : {}, ctx);
+	}
+	async pause(id, ctx) {
+		const doc = await this._transition(id, "paused", ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ENROLLMENT_PAUSED, { enrollmentId: id }, ctx));
+		return doc;
+	}
+	async resume(id, ctx) {
+		const doc = await this._transition(id, "active", ctx);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ENROLLMENT_RESUMED, { enrollmentId: id }, ctx));
+		return doc;
+	}
+	async complete(id, ctx) {
+		const doc = await this._transition(id, "completed", ctx, { completedAt: /* @__PURE__ */ new Date() });
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ENROLLMENT_COMPLETED, { enrollmentId: id }, ctx));
+		return doc;
+	}
+	async exit(id, exitReason, ctx) {
+		const existing = await this.getById(id, ctx);
+		if (!existing) throw new NotFoundError("Enrollment", id);
+		const from = existing.status;
+		ENROLLMENT_MACHINE.assertTransition(id, from, "exited");
+		const entry = {
+			status: "exited",
+			occurredAt: /* @__PURE__ */ new Date(),
+			...ctx?.actorId ? { by: String(ctx.actorId) } : {}
+		};
+		const updated = await assertAndClaim(ENROLLMENT_MACHINE, this, id, {
+			from,
+			to: "exited",
+			patch: {
+				exitReason,
+				statusHistory: [...existing.statusHistory ?? [], entry]
+			},
+			options: ctx
+		});
+		if (!updated) throw new NotFoundError("Enrollment", id);
+		await this.events.dispatch(ctx, createEvent(CRM_EVENTS.ENROLLMENT_EXITED, {
+			enrollmentId: id,
+			exitReason
+		}, ctx));
+		return updated;
+	}
+	/**
+	* Reply detection: exit every ACTIVE enrollment of the given subjects
+	* with reason `'reply'` — the one method a host's
+	* `crm:message.received` subscriber calls:
+	*
+	* ```ts
+	* crm.events.subscribe('crm:message.received', async (e) => {
+	*   await crm.repositories.enrollment.exitActiveOnReply(
+	*     [{ subjectKind: 'contact', subjectId: e.payload.participantId }],
+	*     { organizationId: e.meta.organizationId },
+	*   );
+	* });
+	* ```
+	*
+	* Sequences are batch-loaded in ONE `$in` query; enrollments whose
+	* sequence has `replyDetectionEnabled === false` are skipped (a missing
+	* sequence — e.g. deleted — does NOT skip: the default is to exit).
+	* Each exit goes through `exit()` (state-machine CAS + statusHistory +
+	* ENROLLMENT_EXITED event). An enrollment that a concurrent transition
+	* already moved out of `active` loses the CAS and is skipped — the
+	* desired end state ("not active") already holds.
+	*
+	* Returns the enrollments this call actually exited.
+	*/
+	async exitActiveOnReply(subjects, ctx) {
+		if (subjects.length === 0) return [];
+		const active = await this.findAll({
+			status: "active",
+			$or: subjects.map((s) => ({
+				subjectKind: s.subjectKind,
+				subjectId: s.subjectId
+			}))
+		}, ctx);
+		if (active.length === 0) return [];
+		const sequenceIds = [...new Set(active.map((e) => String(e.sequenceId)))];
+		const sequences = await this.sequences.findAll({ _id: { $in: sequenceIds } }, ctx);
+		const sequencesById = new Map(sequences.map((s) => [String(s._id), s]));
+		const exited = [];
+		for (const enrollment of active) {
+			if (sequencesById.get(String(enrollment.sequenceId))?.replyDetectionEnabled === false) continue;
+			try {
+				exited.push(await this.exit(String(enrollment._id), "reply", ctx));
+			} catch (err) {
+				if (err instanceof IllegalTransitionError || err instanceof InvalidEnrollmentTransitionError || err instanceof NotFoundError) continue;
+				throw err;
+			}
+		}
+		return exited;
+	}
+	async _transition(id, target, ctx, patch = {}) {
+		const existing = await this.getById(id, ctx);
+		if (!existing) throw new NotFoundError("Enrollment", id);
+		ENROLLMENT_MACHINE.assertTransition(id, existing.status, target);
+		const entry = {
+			status: target,
+			occurredAt: /* @__PURE__ */ new Date(),
+			...ctx?.actorId ? { by: String(ctx.actorId) } : {}
+		};
+		const updated = await assertAndClaim(ENROLLMENT_MACHINE, this, id, {
+			from: existing.status,
+			to: target,
+			patch: {
+				...patch,
+				statusHistory: [...existing.statusHistory ?? [], entry]
+			},
+			options: ctx
+		});
+		if (!updated) throw new InvalidEnrollmentTransitionError({
+			from: (await this.getById(id, ctx))?.status ?? existing.status,
+			to: target,
+			enrollmentId: id
+		});
+		return updated;
+	}
+};
+//#endregion
 //#region src/repositories/create-repositories.ts
 /**
 * Repository factory — composes the shared mongokit plugin stack and
@@ -3224,6 +3964,7 @@ function createCrmRepositories(models, deps) {
 	const account = new AccountRepository(models.Account, plugins, { events }, pagination);
 	const campaign = new CampaignRepository(models.Campaign, plugins, { events }, pagination);
 	const subscription = new SubscriptionRepository(models.Subscription, plugins, { events }, pagination);
+	const suppression = new SuppressionRepository(models.Suppression, plugins, { events }, pagination);
 	const activity = new ActivityRepository(models.Activity, plugins, { events }, pagination);
 	const note = new NoteRepository(models.Note, plugins, { events }, pagination);
 	const lossReason = new LossReasonRepository(models.LossReason, plugins, { events }, pagination);
@@ -3233,6 +3974,11 @@ function createCrmRepositories(models, deps) {
 		events,
 		conversations: conversation
 	}, pagination);
+	const sequence = new SequenceRepository(models.Sequence, plugins, { events }, pagination);
+	const enrollment = new EnrollmentRepository(models.Enrollment, plugins, {
+		events,
+		sequences: sequence
+	}, pagination);
 	return Object.freeze({
 		pipeline,
 		lead,
@@ -3241,15 +3987,90 @@ function createCrmRepositories(models, deps) {
 		account,
 		campaign,
 		subscription,
+		suppression,
 		activity,
 		note,
 		lossReason,
 		emailEvent,
 		conversation,
-		message
+		message,
+		sequence,
+		enrollment
 	});
 }
 //#endregion
+//#region src/events/dispatch.ts
+/**
+* Context key for the post-commit event queue. `Symbol.for` so the host
+* and the package agree on the key even across duplicated installs.
+*/
+const PENDING_EVENTS = Symbol.for("@classytic/crm:pendingEvents");
+/**
+* EventTransport-compatible wrapper the engine hands to repositories.
+* `publish`/`subscribe` delegate straight to the underlying transport
+* (host-facing surface unchanged); domain verbs call `dispatch(ctx, event)`
+* so session/outbox/queue routing happens in ONE place.
+*/
+var CrmEventDispatcher = class {
+	transport;
+	outbox;
+	logger;
+	constructor(options) {
+		this.transport = options.transport;
+		this.outbox = options.outbox;
+		this.logger = options.logger;
+	}
+	get name() {
+		return this.transport.name;
+	}
+	/** Raw immediate publish — post-commit flushes and host-side use only. */
+	publish(event) {
+		return this.transport.publish(event);
+	}
+	subscribe(pattern, handler) {
+		return this.transport.subscribe(pattern, handler);
+	}
+	async close() {
+		await this.transport.close?.();
+	}
+	/**
+	* Session-bound dispatch (see module doc for the full contract).
+	* `ctx` comes first so call sites read `dispatch(ctx, createEvent(...))`.
+	*/
+	async dispatch(ctx, event) {
+		const pending = ctx?.[PENDING_EVENTS];
+		const session = ctx?.session;
+		if (this.outbox) {
+			const saveOptions = {};
+			if (session !== void 0) saveOptions.session = session;
+			await this.outbox.save(event, saveOptions);
+		} else if (session && !pending) throw new UnmanagedSessionError(event.type);
+		if (pending) {
+			pending.push(event);
+			return;
+		}
+		if (!session) try {
+			await this.transport.publish(event);
+		} catch (err) {
+			this.logger?.error?.(`[crm] publish failed for ${event.type}`, { err });
+		}
+	}
+};
+/**
+* Drain a `[PENDING_EVENTS]` queue through a transport after commit,
+* swallowing per-event errors (durable delivery is the outbox's job).
+* Hosts composing their own outer transaction call this after commit;
+* most should use `engine.withTransaction(ctx, fn)` instead.
+*/
+async function flushPending(transport, events, logger) {
+	if (!transport || events.length === 0) return;
+	for (const event of events) try {
+		await transport.publish(event);
+	} catch (err) {
+		(logger?.error ?? console.error)(`[crm] publish failed for ${event.type}`, { err });
+	}
+}
+//#endregion
 //#region src/events/in-process-bus.ts
 /**
 * In-process event bus — default fallback when no `eventTransport` is
@@ -3305,6 +4126,42 @@ function assertCrmCapabilities(probe, options = {}) {
 	}
 }
 //#endregion
+//#region src/engine/run-unit.ts
+/**
+* runUnit — transaction + post-commit-publish discipline for CRM verbs
+* composed into one atomic unit (the canonical case: `LeadService.convert`
+* = Account + Contact + Opportunity + lead transition). Same contract as
+* `@classytic/refit` / `@classytic/review` / `@classytic/cart` /
+* `@classytic/invoice` (PACKAGE_RULES §P8.1):
+*
+*   1. Events dispatched inside the unit are QUEUED (`ctx[PENDING_EVENTS]`)
+*      and flushed only after the transaction commits (queue resets on
+*      retry attempts) — a rollback can't leak ghost events to in-process
+*      subscribers. Outbox rows stay inside the transaction — the relay
+*      reads only committed rows.
+*   2. A caller-owned `ctx.session` must arrive WITH a queue or an outbox —
+*      `dispatch()` throws `UnmanagedSessionError` otherwise.
+*/
+async function runUnit(config, ctx, body) {
+	const internalCtx = ctx;
+	const externalQueue = internalCtx[PENDING_EVENTS];
+	if (ctx.session) return body(externalQueue ? {
+		...internalCtx,
+		[PENDING_EVENTS]: externalQueue
+	} : internalCtx);
+	const pending = [];
+	const result = await withTransaction(config.connection, async (session) => {
+		pending.length = 0;
+		return body({
+			...internalCtx,
+			session,
+			[PENDING_EVENTS]: pending
+		});
+	}, config.allowNonTransactional ? { allowFallback: true } : {});
+	await flushPending(config.events, pending, config.logger);
+	return result;
+}
+//#endregion
 //#region src/engine/create-crm.ts
 async function createCrm(config) {
 	if (!config.connection) throw new Error("[crm] CrmConfig.connection is required");
@@ -3318,7 +4175,11 @@ async function createCrm(config) {
 		...config.pagination !== void 0 ? { pagination: config.pagination } : {},
 		plugins: config.plugins ?? []
 	};
-	const events = config.eventTransport ?? new InProcessCrmBus(config.logger ? { logger: config.logger } : void 0);
+	const events = new CrmEventDispatcher({
+		transport: config.eventTransport ?? new InProcessCrmBus(config.logger ? { logger: config.logger } : void 0),
+		outbox: config.outbox,
+		logger: config.logger
+	});
 	const models = createCrmModels(config.connection, resolved);
 	const repositories = createCrmRepositories(models, {
 		events,
@@ -3333,11 +4194,19 @@ async function createCrm(config) {
 		repositories,
 		events,
 		config: Object.freeze(resolved),
+		withTransaction(ctx, body) {
+			return runUnit({
+				connection: config.connection,
+				events,
+				logger: config.logger,
+				allowNonTransactional: config.allowNonTransactional ?? false
+			}, ctx, body);
+		},
 		async syncIndexes() {
 			await Promise.all(Object.values(models).map((m) => m.syncIndexes()));
 		},
 		async dispose() {
-			await events.close?.();
+			await events.close();
 		}
 	});
 }
@@ -3429,7 +4298,7 @@ var LeadService = class LeadService {
 				opportunityId: String(opportunity._id),
 				...input.by !== void 0 ? { by: input.by } : {}
 			}, ctx);
-			await this.events.publish(createEvent(CRM_EVENTS.LEAD_CONVERTED, {
+			await this.events.dispatch(ctx, createEvent(CRM_EVENTS.LEAD_CONVERTED, {
 				leadId,
 				contactId: String(contact._id),
 				accountId: account ? String(account._id) : void 0,
@@ -3954,6 +4823,22 @@ const SubscriptionComplained = defineCrmEvent({
 		campaignId: z.string()
 	})
 });
+const SuppressionAdded = defineCrmEvent({
+	name: CRM_EVENTS.SUPPRESSION_ADDED,
+	resource: "suppression",
+	description: "suppress() inserted a NEW row on the org-wide suppression list (idempotent re-suppress of an existing email emits nothing). organizationId rides event meta.",
+	zodSchema: z.object({
+		email: z.string(),
+		reason: z.enum(SUPPRESSION_REASONS),
+		source: z.string().optional()
+	})
+});
+const SuppressionRemoved = defineCrmEvent({
+	name: CRM_EVENTS.SUPPRESSION_REMOVED,
+	resource: "suppression",
+	description: "unsuppress() removed an email from the org-wide suppression list.",
+	zodSchema: z.object({ email: z.string() })
+});
 const emailEventSchema = z.object({
 	eventId: z.string(),
 	kind: z.string(),
@@ -4054,6 +4939,82 @@ const MessageSent = defineCrmEvent({
 		externalMessageId: z.string().optional()
 	})
 });
+const SequenceCreated = defineCrmEvent({
+	name: CRM_EVENTS.SEQUENCE_CREATED,
+	resource: "sequence",
+	description: "A sequence draft was created. Emitted by the HOST after repo.create() (the package ships no createSequence verb) — defined here so registries validate the payload.",
+	zodSchema: z.object({
+		sequenceId: z.string(),
+		name: z.string().optional()
+	})
+});
+const SequenceActivated = defineCrmEvent({
+	name: CRM_EVENTS.SEQUENCE_ACTIVATED,
+	resource: "sequence",
+	description: "activate() moved a sequence draft/paused → active.",
+	zodSchema: z.object({ sequenceId: z.string() })
+});
+const SequencePaused = defineCrmEvent({
+	name: CRM_EVENTS.SEQUENCE_PAUSED,
+	resource: "sequence",
+	description: "pause() suspended an active sequence (existing enrollments hold).",
+	zodSchema: z.object({ sequenceId: z.string() })
+});
+const SequenceArchived = defineCrmEvent({
+	name: CRM_EVENTS.SEQUENCE_ARCHIVED,
+	resource: "sequence",
+	description: "archive() retired a sequence — no new enrollments.",
+	zodSchema: z.object({ sequenceId: z.string() })
+});
+const EnrollmentCreated = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_CREATED,
+	resource: "enrollment",
+	description: "enroll() attached a subject to a sequence.",
+	zodSchema: z.object({
+		enrollmentId: z.string(),
+		sequenceId: z.string(),
+		subjectId: z.string(),
+		subjectKind: z.string()
+	})
+});
+const EnrollmentStepSent = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_STEP_SENT,
+	resource: "enrollment",
+	description: "A sequence step was delivered. Emitted by the HOST outreach layer after its send adapter succeeds + advanceStep() commits (Buffer-style pattern in CLAUDE.md) — defined here so registries validate the payload.",
+	zodSchema: z.object({
+		enrollmentId: z.string(),
+		sequenceId: z.string().optional(),
+		stepIndex: z.number(),
+		channel: z.string().optional()
+	})
+});
+const EnrollmentPaused = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_PAUSED,
+	resource: "enrollment",
+	description: "pause() held an active enrollment.",
+	zodSchema: z.object({ enrollmentId: z.string() })
+});
+const EnrollmentResumed = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_RESUMED,
+	resource: "enrollment",
+	description: "resume() reactivated a paused enrollment.",
+	zodSchema: z.object({ enrollmentId: z.string() })
+});
+const EnrollmentCompleted = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_COMPLETED,
+	resource: "enrollment",
+	description: "complete() finished the final step of an enrollment.",
+	zodSchema: z.object({ enrollmentId: z.string() })
+});
+const EnrollmentExited = defineCrmEvent({
+	name: CRM_EVENTS.ENROLLMENT_EXITED,
+	resource: "enrollment",
+	description: "exit() removed a subject before completion (reply/unsubscribe/manual/goal).",
+	zodSchema: z.object({
+		enrollmentId: z.string(),
+		exitReason: z.string().optional()
+	})
+});
 const crmEventDefinitions = [
 	LeadCreated,
 	LeadStatusChanged,
@@ -4100,6 +5061,8 @@ const crmEventDefinitions = [
 	SubscriptionUnsubscribed,
 	SubscriptionBounced,
 	SubscriptionComplained,
+	SuppressionAdded,
+	SuppressionRemoved,
 	EmailEventOpened,
 	EmailEventClicked,
 	EmailEventBounced,
@@ -4110,17 +5073,34 @@ const crmEventDefinitions = [
 	ConversationResolved,
 	ConversationReopened,
 	MessageReceived,
-	MessageSent
+	MessageSent,
+	SequenceCreated,
+	SequenceActivated,
+	SequencePaused,
+	SequenceArchived,
+	EnrollmentCreated,
+	EnrollmentStepSent,
+	EnrollmentPaused,
+	EnrollmentResumed,
+	EnrollmentCompleted,
+	EnrollmentExited
 ];
 //#endregion
 //#region src/shared/calculators/forecast.ts
 /**
+* Pure forecast calculators — no I/O, no Mongo. Hosts call these after
+* loading opportunities via `repositories.opportunity.list(...)`.
+*
+* Amount is flat (`amount` Number + `currency` String per PACKAGE_RULES
+* §4) — same shape the opportunity schema stores.
+*/
+/**
 * Aggregate opportunities into a forecast table — one row per bucket.
 * Currency mismatch within a bucket throws — partition by currency
 * upstream when multi-currency.
 */
 function forecast(opportunities, options = {}) {
-	const bucketFn = options.bucket ?? defaultBucket;
+	const bucketFn = options.bucket ?? (options.timeZone !== void 0 ? zoneBucket(options.timeZone) : defaultBucket);
 	const include = options.include ?? defaultInclude;
 	const rows = /* @__PURE__ */ new Map();
 	for (const o of opportunities) {
@@ -4153,6 +5133,10 @@ function defaultBucket(o) {
 	const d = o.expectedCloseAt;
 	return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, "0")}`;
 }
+/** Month bucket cut at the business's local midnight, not UTC. */
+function zoneBucket(timeZone) {
+	return (o) => civilDateOf(o.expectedCloseAt, timeZone).slice(0, 7);
+}
 /**
 * "Where do deals die?" summary — opportunities partitioned across
 * stages with current count + won/lost-from-here.
@@ -4189,7 +5173,7 @@ const objectIdLike = z.union([z.string().min(1), z.string()]);
 const metadataSchema = z.record(z.string(), z.unknown()).optional();
 const tagsSchema = z.array(z.string().min(1).max(64)).max(50).optional();
 const moneyAmountSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
-const currencyCodeSchema = z.string().regex(/^[A-Z]{3}$/, "Currency must be a 3-letter ISO code");
+const currencyCodeSchema = z.string().regex(CURRENCY_PATTERN, "currency must be an ISO 4217 code (3 uppercase letters)");
 //#endregion
 //#region src/validators/pipeline.schema.ts
 const stageInputSchema = z.object({
@@ -4243,7 +5227,7 @@ const convertLeadSchema = z.object({
 	pipelineId: objectIdLike,
 	opportunityName: z.string().min(1).max(200).optional(),
 	amount: z.number().nonnegative().optional(),
-	currency: z.string().regex(/^[A-Z]{3}$/).optional(),
+	currency: currencyCodeSchema.optional(),
 	expectedCloseAt: z.coerce.date().optional(),
 	by: z.string().optional()
 });
@@ -4399,6 +5383,21 @@ const subscriptionFilterSchema = z.object({
 	campaignId: objectIdLike.optional()
 });
 //#endregion
+//#region src/validators/suppression.schema.ts
+const suppressSchema = z.object({
+	email: z.string().email().max(320),
+	reason: z.enum(SUPPRESSION_REASONS),
+	source: z.string().max(200).optional(),
+	subjectKind: z.string().max(50).optional(),
+	subjectId: z.string().max(100).optional(),
+	metadata: metadataSchema
+});
+const unsuppressSchema = z.object({ email: z.string().email().max(320) });
+const suppressionFilterSchema = z.object({
+	email: z.string().max(320).optional(),
+	reason: z.enum(SUPPRESSION_REASONS).optional()
+});
+//#endregion
 //#region src/validators/activity.schema.ts
 const planActivitySchema = z.object({
 	type: z.enum(ACTIVITY_TYPES),
@@ -4475,6 +5474,54 @@ const emailEventFilterSchema = z.object({
 	messageId: z.string().optional()
 });
 //#endregion
+//#region src/validators/sequence.schema.ts
+const sendEmailStepSchema = z.object({
+	id: z.string().min(1),
+	type: z.literal("SEND_EMAIL"),
+	name: z.string().max(100).optional(),
+	subject: z.string().min(1).max(300),
+	htmlBody: z.string().min(1),
+	fromName: z.string().max(100).optional(),
+	fromEmail: z.string().email().optional()
+});
+const delayStepSchema = z.object({
+	id: z.string().min(1),
+	type: z.literal("DELAY"),
+	name: z.string().max(100).optional(),
+	settings: z.object({
+		days: z.number().int().min(0).optional(),
+		hours: z.number().int().min(0).optional(),
+		minutes: z.number().int().min(0).optional()
+	})
+});
+const sequenceStepSchema = z.discriminatedUnion("type", [sendEmailStepSchema, delayStepSchema]);
+const createSequenceSchema = z.object({
+	name: z.string().min(1).max(200),
+	description: z.string().max(1e3).optional(),
+	fromName: z.string().max(100).optional(),
+	fromEmail: z.string().email().optional(),
+	steps: z.array(sequenceStepSchema).default([]),
+	replyDetectionEnabled: z.boolean().default(true),
+	tags: tagsSchema,
+	ownerId: z.string().optional(),
+	metadata: metadataSchema
+});
+const updateSequenceSchema = createSequenceSchema.partial();
+const sequenceFilterSchema = z.object({
+	status: z.enum([
+		"draft",
+		"active",
+		"paused",
+		"archived"
+	]).optional(),
+	ownerId: z.string().optional(),
+	tags: z.string().optional(),
+	search: z.string().optional(),
+	page: z.coerce.number().int().min(1).optional(),
+	limit: z.coerce.number().int().min(1).max(200).optional(),
+	sort: z.string().optional()
+});
+//#endregion
 //#region src/validators/index.ts
 var validators_exports = /* @__PURE__ */ __exportAll({
 	accountFilterSchema: () => accountFilterSchema,
@@ -4494,6 +5541,7 @@ var validators_exports = /* @__PURE__ */ __exportAll({
 	createLeadSchema: () => createLeadSchema,
 	createLossReasonSchema: () => createLossReasonSchema,
 	createPipelineSchema: () => createPipelineSchema,
+	createSequenceSchema: () => createSequenceSchema,
 	currencyCodeSchema: () => currencyCodeSchema,
 	emailEventFilterSchema: () => emailEventFilterSchema,
 	leadFilterSchema: () => leadFilterSchema,
@@ -4508,11 +5556,16 @@ var validators_exports = /* @__PURE__ */ __exportAll({
 	pipelineFilterSchema: () => pipelineFilterSchema,
 	planActivitySchema: () => planActivitySchema,
 	recordEmailEventSchema: () => recordEmailEventSchema,
+	sequenceFilterSchema: () => sequenceFilterSchema,
+	sequenceStepSchema: () => sequenceStepSchema,
 	stageInputSchemaExport: () => stageInputSchemaExport,
 	subscribeSchema: () => subscribeSchema,
 	subscriptionFilterSchema: () => subscriptionFilterSchema,
+	suppressSchema: () => suppressSchema,
+	suppressionFilterSchema: () => suppressionFilterSchema,
 	tagsSchema: () => tagsSchema,
 	unsubscribeSchema: () => unsubscribeSchema,
+	unsuppressSchema: () => unsuppressSchema,
 	updateAccountSchema: () => updateAccountSchema,
 	updateActivitySchema: () => updateActivitySchema,
 	updateCampaignSchema: () => updateCampaignSchema,
@@ -4520,7 +5573,8 @@ var validators_exports = /* @__PURE__ */ __exportAll({
 	updateLeadSchema: () => updateLeadSchema,
 	updateLossReasonSchema: () => updateLossReasonSchema,
 	updateNoteSchema: () => updateNoteSchema,
-	updatePipelineSchema: () => updatePipelineSchema
+	updatePipelineSchema: () => updatePipelineSchema,
+	updateSequenceSchema: () => updateSequenceSchema
 });
 //#endregion
-export { ACTIVITY_MACHINE, ACTIVITY_STATUSES, ACTIVITY_TRANSITIONS, ACTIVITY_TYPES, AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountRepository, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRepository, ActivityRescheduled, CAMPAIGN_MACHINE, CAMPAIGN_STATUSES, CAMPAIGN_TRANSITIONS, CONVERSATION_CHANNELS, CONVERSATION_PARTICIPANT_KINDS, CONVERSATION_STATUSES, CRM_EVENTS, CRM_MODEL_NAMES, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignRepository, CampaignResumed, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactRepository, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationRepository, ConversationResolved, CrmError, DuplicateCampaignError, DuplicateLeadError, DuplicateSubscriptionError, EMAIL_EVENT_KINDS, EMAIL_EVENT_SUBJECT_KINDS, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventRepository, EmailEventUnsubscribed, EmptyPipelineError, InProcessCrmBus, InvalidActivityTransitionError, InvalidCampaignTransitionError, InvalidConfirmationTokenError, InvalidLeadTransitionError, InvalidOpportunityTransitionError, InvalidSubscriptionTransitionError, InvalidUnsubscribeTokenError, LEAD_MACHINE, LEAD_STATUSES, LEAD_TRANSITIONS, LeadAlreadyConvertedError, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadRepository, LeadScored, LeadService, LeadStatusChanged, LossReasonRepository, MESSAGE_DELIVERY_STATUSES, MESSAGE_DIRECTIONS, MessageReceived, MessageRepository, MessageSent, NotFoundError, NoteAdded, NoteRepository, OPPORTUNITY_MACHINE, OPPORTUNITY_STATUSES, OPPORTUNITY_TRANSITIONS, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityRepository, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PipelineArchived, PipelineCreated, PipelineRepository, SUBJECT_KINDS, SUBSCRIPTION_MACHINE, SUBSCRIPTION_STATUSES, SUBSCRIPTION_TRANSITIONS, StageNotInPipelineError, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionRepository, SubscriptionUnsubscribed, appendStatus, buildAccountSchema, buildActivitySchema, buildCampaignSchema, buildContactSchema, buildConversationSchema, buildEmailEventSchema, buildLeadSchema, buildLossReasonSchema, buildMessageSchema, buildNoteSchema, buildOpportunitySchema, buildPipelineSchema, buildSubscriptionSchema, canTransitionActivity, canTransitionCampaign, canTransitionLead, canTransitionOpportunity, canTransitionSubscription, composeScorers, createAccountModel, createActivityModel, createCampaignModel, createContactModel, createConversationModel, createCrm, createCrmModels, createCrmRepositories, createEmailEventModel, createEvent, createLeadModel, createLossReasonModel, createMessageModel, createNoteModel, createOpportunityModel, createPipelineModel, createSubscriptionModel, crmEventDefinitions, defaultLeadScorer, forecast, lastTransitionTo, latestEntry, pipelineConversion, tenantFieldDef, timeInStatus, validators_exports as validators };
+export { ACTIVITY_MACHINE, ACTIVITY_STATUSES, ACTIVITY_TRANSITIONS, ACTIVITY_TYPES, AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountRepository, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRepository, ActivityRescheduled, AlreadyEnrolledError, CAMPAIGN_MACHINE, CAMPAIGN_STATUSES, CAMPAIGN_TRANSITIONS, CONVERSATION_CHANNELS, CONVERSATION_PARTICIPANT_KINDS, CONVERSATION_STATUSES, CRM_EVENTS, CRM_MODEL_NAMES, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignRepository, CampaignResumed, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactRepository, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationRepository, ConversationResolved, CrmError, CrmEventDispatcher, DuplicateCampaignError, DuplicateLeadError, DuplicateSubscriptionError, EMAIL_EVENT_KINDS, EMAIL_EVENT_SUBJECT_KINDS, ENROLLMENT_MACHINE, ENROLLMENT_STATUSES, ENROLLMENT_SUBJECT_KINDS, ENROLLMENT_TRANSITIONS, EVENT_DERIVED_SUPPRESSION_REASONS, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventRepository, EmailEventUnsubscribed, EmptyPipelineError, EnrollmentCompleted, EnrollmentCreated, EnrollmentExited, EnrollmentPaused, EnrollmentRepository, EnrollmentResumed, EnrollmentStepSent, InProcessCrmBus, InvalidActivityTransitionError, InvalidCampaignTransitionError, InvalidConfirmationTokenError, InvalidEnrollmentTransitionError, InvalidLeadTransitionError, InvalidOpportunityTransitionError, InvalidSequenceTransitionError, InvalidSubscriptionTransitionError, InvalidUnsubscribeTokenError, LEAD_MACHINE, LEAD_STATUSES, LEAD_TRANSITIONS, LeadAlreadyConvertedError, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadRepository, LeadScored, LeadService, LeadStatusChanged, LossReasonRepository, MESSAGE_DELIVERY_STATUSES, MESSAGE_DIRECTIONS, MessageReceived, MessageRepository, MessageSent, NotFoundError, NoteAdded, NoteRepository, OPPORTUNITY_MACHINE, OPPORTUNITY_STATUSES, OPPORTUNITY_TRANSITIONS, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityRepository, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PENDING_EVENTS, PipelineArchived, PipelineCreated, PipelineRepository, SEQUENCE_MACHINE, SEQUENCE_STATUSES, SEQUENCE_TRANSITIONS, SUBJECT_KINDS, SUBSCRIPTION_MACHINE, SUBSCRIPTION_STATUSES, SUBSCRIPTION_TRANSITIONS, SUPPRESSION_REASONS, SequenceActivated, SequenceArchived, SequenceCreated, SequencePaused, SequenceRepository, StageNotInPipelineError, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionRepository, SubscriptionUnsubscribed, SuppressionAdded, SuppressionRemoved, SuppressionRepository, UnmanagedSessionError, appendStatus, buildAccountSchema, buildActivitySchema, buildCampaignSchema, buildContactSchema, buildConversationSchema, buildEmailEventSchema, buildEnrollmentSchema, buildLeadSchema, buildLossReasonSchema, buildMessageSchema, buildNoteSchema, buildOpportunitySchema, buildPipelineSchema, buildSequenceSchema, buildSubscriptionSchema, buildSuppressionSchema, canTransitionActivity, canTransitionCampaign, canTransitionEnrollment, canTransitionLead, canTransitionOpportunity, canTransitionSequence, canTransitionSubscription, composeScorers, createAccountModel, createActivityModel, createCampaignModel, createContactModel, createConversationModel, createCrm, createCrmModels, createCrmRepositories, createEmailEventModel, createEvent, createLeadModel, createLossReasonModel, createMessageModel, createNoteModel, createOpportunityModel, createPipelineModel, createSubscriptionModel, crmEventDefinitions, defaultLeadScorer, flushPending, forecast, lastTransitionTo, latestEntry, pipelineConversion, runUnit, tenantFieldDef, timeInStatus, validators_exports as validators };