@classytic/crm 0.8.0 → 1.0.0

package/CHANGELOG.md

@@ -2,6 +2,157 @@
 
 All notable changes to `@classytic/crm` are documented here.
 
+## 1.0.0 - 2026-07-29 (unpublished — last published is 0.9.0)
+
+### Fixed — Lead and Contact forked one mailbox into two rows (BEHAVIOURAL, 2026-08-08)
+
+Same bug class as the suppression fix below, in the two collections that hold live
+customer identity. Neither had a private normalizer — they had **no** canonicaliser
+at all, and relied on a partial-unique `(organizationId, email)` /
+`(organizationId, contact.email)` index over a field whose only folding was mongoose
+`lowercase: true`. That does not IDNA-fold, so `ada@bücher.de` and
+`ada@xn--bcher-kva.de` were two distinct strings, the index admitted both, and one
+mailbox became two leads with no error. Reproduced before the fix; the case control
+(`ADA@…` → refused) proves the index itself always worked — the KEY was wrong.
+
+**The fix is at the SCHEMA, not only at the repository verbs.** `@spinekit/crm`
+mounts both resources through arc's mongoose CRUD adapter, so `POST /crm/leads`
+calls the inherited `Repository.create()` and `createLead`'s pre-check never runs. A
+verb-only fix would have left the live HTTP route forking while the verb tests went
+green. `Lead.email`, `Contact.contact.email` and `Contact.contact.personalEmail` now
+carry a `canonicalEmailSetter` (`src/core/email-identity.ts`) that applies
+`normalizeEmail` from **`@classytic/contact/email`**, imported directly. Mongoose
+runs string setters on query filters too, so reads fold with writes.
+
+- The setter **never throws** — it degrades to the legacy `trim().toLowerCase()`
+  for anything the kernel refuses. A throw inside a setter surfaces during query
+  casting as an opaque `CastError`, i.e. a 500 on a READ, and degrading also means
+  nothing already stored is re-keyed by a rule that cannot explain its output.
+- `createLead` / `createContact` **do throw** — new `LeadEmailFormatError`
+  (`LEAD_EMAIL_INVALID`) and `ContactEmailFormatError` (`CONTACT_EMAIL_INVALID`),
+  both 400, nothing written. An uncanonicalisable address defeats the very index it
+  is meant to arm: broken spellings never collide, so the same input inserts
+  without limit while every call reports success.
+- Both verbs canonicalise **explicitly** before querying rather than relying on the
+  schema setter to fold the filter. A pre-check resting on an invisible field option
+  silently WIDENS the day someone edits the schema, and a widened filter does not
+  fail — it matches nothing and answers "no duplicate".
+
+**Behaviour change worth naming:** `LeadService.convert()` passes the lead's stored
+email into `createContact`, so converting a lead whose address cannot be
+canonicalised now fails instead of minting a Contact whose only identity field is
+unusable. Dropping the address silently would be the worse half of that trade.
+Reachability was checked, not assumed: be-prod gates CRM writes with `requireAuth()`
+and there is no public lead-capture route, so the 400 reaches an operator or an
+importer, never an anonymous form visitor.
+
+New export `crmEmailKey(email): string | null`. The setter and the two throwing
+helpers stay internal — a host must not re-apply either.
+
+**Stored rows are NOT migrated.** `scripts/lead-contact-email-key-drift.mjs`
+(shipped, read-only; `npm run drift:email-keys`) classifies both collections as
+`unchanged` / `rekey` / `collision` / `uncanonicalisable`, prints a distinct banner
+for an absent collection and for one with rows but no emails, and writes nothing.
+`collision` is the fork: two rows, one mailbox, and the unique index means a naive
+`$set` fails outright — merging them and re-pointing the loser's opportunities,
+activities and subscriptions is a human decision.
+
+Pinned by `tests/integration/lead-contact-email-idna.scenario.test.ts` (15 cases,
+covering both the verb path and the arc-CRUD path) and
+`tests/integration/email-key-drift-tool.test.ts` (7 cases that falsify the report
+itself against planted rows of every class).
+
+**Not done here (deliberate):** no schema `validate` on the email fields, so the
+arc-CRUD route still accepts an uncanonicalisable address and stores it
+legacy-folded. Adding one would turn a currently-succeeding admin write into a 400
+and would break `convert()` on rows that already exist. That is a separate decision.
+
+### Fixed — the suppression list keyed one mailbox as two (BEHAVIOURAL)
+
+`SuppressionRepository` held a private `email.trim().toLowerCase()`. It does not
+IDNA-canonicalise, so `ada@bücher.de` and `ada@xn--bcher-kva.de` — one host in two
+encodings — were two keys: an address suppressed under one spelling stayed
+**sendable** under the other, and nothing errored. The send succeeded and looked
+correct. A do-not-contact list is frequently a legal obligation, so this is worse
+than an ordinary dedup miss.
+
+All four verbs (`suppress`, `isSuppressed`, `filterSuppressed`, `unsuppress`) now
+canonicalise through `normalizeEmail` from **`@classytic/contact/email`**, imported
+directly — no re-export, no local wrapper. `@classytic/contact >=0.1.0` is a new
+**peer** dependency.
+
+`normalizeEmail` refuses what it cannot canonicalise, and the two sides spend that
+refusal differently:
+
+- **Writes throw** the new `SuppressionEmailFormatError` (400,
+  `SUPPRESSION_EMAIL_INVALID`) and store nothing. A malformed row is a suppression
+  that can never match — it suppresses nothing while reporting success. `unsuppress`
+  throws too: it re-enables sending, so a `false` would read as "already removed".
+- **Reads fail CLOSED.** `isSuppressed()` returns `true` and `filterSuppressed()`
+  reports as blocked for an address with no canonical form. They do not throw —
+  `filterSuppressed` is a batch verb, and one malformed recipient must not abort a
+  fanout to thousands of valid ones.
+
+New export `suppressionEmailKey(email): string | null` — the key a caller must test
+`filterSuppressed()` membership against, and the only way to tell "unparseable"
+apart from "on the list".
+
+**Stored rows are NOT migrated.** A row written under the old rule in a
+non-canonical form is now unreachable. `scripts/suppression-key-drift.mjs` (shipped,
+read-only) classifies every row as `unchanged` / `rekey` / `collision` /
+`uncanonicalisable` and writes nothing; `collision` rows cannot be moved by an
+`updateOne` at all, because `(organizationId, email)` is unique and another row
+already holds the target key. Rewriting a suppression list has legal consequences —
+run the report, decide by hand.
+
+Pinned by `tests/integration/suppression-idna.scenario.test.ts` (12 cases).
+
+### Changed
+- **License:** relicensed from MIT to the **Classytic Source-Available License** (Community & Commercial). Evaluation/development use remains free; production use now requires a commercial license from Classytic LLC. See `LICENSE`.
+- Major bump marks the license change; versions published before 1.0.0 remain under their original MIT terms.
+
+## 0.10.1 - 2026-07-22 (unpublished)
+
+### Changed
+- Internal: `InProcess*Bus` is now a thin subclass of `@classytic/primitives/event-infra`'s shared `InProcessEventBus` (dedup / error-isolation / close semantics unchanged); `MemoryOutboxStore` re-exported from the shared runtime where applicable. No public API, event-name, or wire-envelope change. Requires `@classytic/primitives >=0.13.0`.
+
+## [0.10.0] — unpublished (2026-07-22)
+
+### Changed — `dispose()` renamed to `destroy()` (fleet lifecycle convention)
+
+- **`engine.destroy()`** is the canonical teardown verb (matches
+  manufacturing / purchase / order / catalog / cart). `dispose()` remains
+  as a deprecated one-line alias delegating to `destroy()` so hosts don't
+  break mid-migration; it will be removed in a future minor.
+- **Behavioral fix**: teardown now closes the transport ONLY when the
+  engine created it itself (`InProcessCrmBus`). Previously `dispose()`
+  closed a host-injected `eventTransport` too — the host's bus is the
+  host's to close.
+- Destroy is idempotent — a second call (or `dispose()` after `destroy()`)
+  is a no-op. Mongoose models/connection are untouched (host-owned).
+- Lifecycle coverage in `tests/integration/engine-lifecycle.test.ts`.
+
+## [0.9.0] — unpublished (2026-07-15)
+
+### Changed — mongokit 3.22 adopted (peer floors: mongokit >=3.22.0, repo-core >=0.13.0, primitives >=0.11.0)
+
+- **Seven transition verbs ride `applyTransition`** (activity, campaign,
+  enrollment exit + generic, lead, sequence, subscription, opportunity):
+  machine pre-flight + CAS + accurate race diagnosis via the machines'
+  existing errorFactories. All `this as any` casts at those sites are gone
+  (native method).
+- **FIXED a real concurrency defect**: five sites built `statusHistory` by
+  read-modify-write (`[...(existing.statusHistory ?? []), entry]`) inside
+  the CAS patch — concurrent writers could drop history entries. Entries
+  now ride `$push` via the `push` arg, byte-identical shapes preserved.
+- **`EmailEvent` log fence enforced** — "append-only" was a doc comment;
+  `appendOnlyPlugin` now refuses every mutation path (405
+  `APPEND_ONLY_VIOLATION`), with `deleteMany` allowed for host-gated GDPR
+  erasure of a recipient's rows.
+- DELIBERATELY unchanged: `enrollment.advanceStep` (non-status
+  `currentStepIndex` CAS with null semantics) and opportunity's stage-move
+  claim — correct raw `claim` usage, not transition boilerplate.
+
 ## [0.8.0] — 2026-07-11
 
 ### Added — engagement-based lead scoring

package/LICENSE

@@ -1,21 +1,75 @@
-MIT License
-
-Copyright (c) 2026 Classytic
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+Classytic Source-Available License (Community & Commercial), Version 1.0
+
+Copyright (c) 2026 Classytic LLC. All rights reserved.
+
+This software is source-available, not open source. Please read this License
+before using it.
+
+1. DEFINITIONS
+   "Software" means the contents of this package and any accompanying source
+   code, object code, or documentation, in any form.
+   "Licensor" means Classytic LLC, a limited liability company organized in the
+   United States.
+   "You" means the individual or legal entity exercising rights under this
+   License.
+   "Evaluation Use" means use for evaluation, development, testing,
+   experimentation, or internal non-commercial purposes only.
+   "Production Use" means any use of the Software that is live, commercial,
+   revenue-generating, or customer-facing, or any use other than Evaluation Use.
+   "Commercial License" means a separate written agreement executed with
+   Licensor that grants Production Use rights.
+
+2. OWNERSHIP
+   The Software is licensed, not sold. Licensor retains all right, title, and
+   interest in and to the Software, including all intellectual property rights.
+   All rights not expressly granted in this License are reserved by Licensor.
+
+3. EVALUATION GRANT
+   Subject to Your compliance with this License, Licensor grants You a
+   worldwide, royalty-free, non-exclusive, non-transferable, revocable license
+   to download, install, run, and modify the Software solely for Evaluation Use.
+
+4. PRODUCTION USE REQUIRES A COMMERCIAL LICENSE
+   Production Use of the Software is NOT permitted under this License and
+   requires a Commercial License from Licensor. A Commercial License may be
+   granted at Licensor's discretion, with or without a fee, and may confer
+   perpetual, irrevocable, and transferable Production Use rights as set out in
+   that agreement. Contact licensing@classytic.com to obtain one.
+
+5. RESTRICTIONS
+   You may not:
+   (a) make any Production Use of the Software without a Commercial License;
+   (b) redistribute, resell, rent, sublicense, or otherwise make the Software
+       (in whole or in part, original or modified) available to third parties as
+       a stand-alone product, framework, library, or hosted/managed service that
+       competes with the Software or with Licensor;
+   (c) remove, obscure, or alter any copyright, license, or attribution notice.
+
+6. FEEDBACK AND CONTRIBUTIONS
+   Any feedback, suggestions, or contributions You provide relating to the
+   Software may be used by Licensor for any purpose without obligation to You.
+
+7. TERMINATION
+   This License and the Evaluation Grant terminate automatically if You breach
+   any term. Upon termination You must cease all use of the Software and destroy
+   all copies in Your possession. Rights under a Commercial License are governed
+   by that agreement's own terms and survive termination of this License to the
+   extent stated there.
+
+8. DISCLAIMER OF WARRANTY
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+   IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+   FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
+
+9. LIMITATION OF LIABILITY
+   TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL LICENSOR BE LIABLE
+   FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+   TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE
+   OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+10. GOVERNING LAW
+   This License is governed by the laws of the State of Delaware, United States,
+   without regard to its conflict-of-laws principles. (Adjust to Your LLC's state
+   of formation.)
+
+For commercial licensing, contact: licensing@classytic.com

package/README.md

@@ -39,8 +39,57 @@ and conversation/message threads. Built on **Mongoose + @classytic/mongokit
 npm install @classytic/crm
 ```
 
-Peers: `@classytic/mongokit >=3.16.0`, `@classytic/repo-core >=0.6.0`,
-`@classytic/primitives >=0.7.1`, `mongoose >=9.4.1`, `zod >=4.0.0`.
+Peers: `@classytic/contact >=0.1.0`, `@classytic/mongokit >=3.30.0`,
+`@classytic/repo-core >=0.13.0`, `@classytic/primitives >=0.14.0`,
+`mongoose >=9.4.1`, `zod >=4.0.0`.
+
+`@classytic/contact` is the email/phone identity kernel. It is a **peer**, not a
+dependency, so npm cannot nest a second copy and break `instanceof` across the
+boundary — the same reason `@classytic/party` declares it that way. This package
+imports `@classytic/contact/email` directly at one place, the suppression list.
+
+## The suppression list is keyed CANONICALLY
+
+`SuppressionRepository` is the org-wide do-not-contact list a host consults before
+every outbound email. Its key is whatever `normalizeEmail` from
+`@classytic/contact/email` returns: trimmed, both sides lowercased, **and the
+domain IDNA-folded to punycode**. `ada@bücher.de` is stored, matched and returned
+as `ada@xn--bcher-kva.de`.
+
+Two consequences for a host:
+
+```ts
+import { suppressionEmailKey } from '@classytic/crm';
+
+// filterSuppressed() returns CANONICAL keys — canonicalise your own recipient
+// before testing membership. Matching on the raw spelling is the original bug.
+const blocked = await crm.repositories.suppression.filterSuppressed(recipients, ctx);
+const sendable = recipients.filter((e) => !blocked.has(suppressionEmailKey(e) ?? e));
+```
+
+- **Writes refuse what they cannot canonicalise.** `suppress()` and `unsuppress()`
+  throw `SuppressionEmailFormatError` (400). A malformed address stored verbatim is
+  a do-not-contact record that can never match a send — it suppresses nothing while
+  reporting success.
+- **Reads fail closed.** `isSuppressed()` answers `true`, and `filterSuppressed()`
+  reports as blocked, for an address with no canonical form. The permissive answer
+  would send mail to an address we could not parse; the conservative answer costs
+  one undeliverable message. They do not throw, because one malformed recipient must
+  not abort a fanout to thousands of valid ones. `suppressionEmailKey()` returns
+  `null` for such an address if you need to tell it apart from a real suppression.
+
+**Upgrading from a version before this rule:** rows written under the old
+`trim().toLowerCase()` key may no longer be reachable. Report — do not migrate —
+with the read-only script:
+
+```bash
+node node_modules/@classytic/crm/scripts/suppression-key-drift.mjs "$MONGO_URI"
+```
+
+It classifies every row as `unchanged` / `rekey` / `collision` / `uncanonicalisable`
+and writes nothing. `collision` rows cannot be moved by an `updateOne` at all — the
+`(organizationId, email)` index is unique and another row already holds the target
+key, so which `reason` and `suppressedAt` survive is a human decision.
 
 ## Quick start
 

package/dist/events.d.ts

@@ -1,7 +1,10 @@
 import { z } from "zod";
-import { DomainEvent, EventHandler, EventMeta, EventTransport } from "@classytic/primitives/events";
-import * as _$mongoose from "mongoose";
+import { DomainEvent, EventMeta } from "@classytic/primitives/events";
+import { InProcessEventBus } from "@classytic/primitives/event-infra";
+import "mongoose";
+import "@classytic/mongokit";
 import { OperationContext } from "@classytic/primitives/context";
+import "@classytic/primitives/outbox";
 //#region src/events/event-constants.d.ts
 /** PACKAGE_RULES rule 12: `package:resource.verb`. */
 declare const CRM_EVENTS: {
@@ -54,9 +57,11 @@ declare const CRM_EVENTS: {
   readonly EMAIL_EVENT_UNSUBSCRIBED: "crm:email_event.unsubscribed";
   readonly LEAD_ENRICHED: "crm:lead.enriched";
   readonly LEAD_ASSIGNED: "crm:lead.assigned";
+  readonly LEAD_ANONYMIZED: "crm:lead.anonymized";
   readonly CONTACT_ENRICHED: "crm:contact.enriched";
   readonly CONTACT_ASSIGNED: "crm:contact.assigned";
   readonly CONTACT_MERGED: "crm:contact.merged";
+  readonly CONTACT_ANONYMIZED: "crm:contact.anonymized";
   readonly ACCOUNT_ENRICHED: "crm:account.enriched";
   readonly ACCOUNT_ASSIGNED: "crm:account.assigned";
   readonly ACCOUNT_MERGED: "crm:account.merged";
@@ -122,6 +127,10 @@ declare const LeadAssigned: CrmEventDefinition<z.ZodObject<{
   ownerId: z.ZodString;
   previousOwnerId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;
+declare const LeadAnonymized: CrmEventDefinition<z.ZodObject<{
+  leadId: z.ZodString;
+  fields: z.ZodArray<z.ZodString>;
+}, z.core.$strip>>;
 declare const AccountCreated: CrmEventDefinition<z.ZodObject<{
   accountId: z.ZodString;
   name: z.ZodString;
@@ -172,6 +181,10 @@ declare const ContactMerged: CrmEventDefinition<z.ZodObject<{
     preferSecondary: "preferSecondary";
   }>;
 }, z.core.$strip>>;
+declare const ContactAnonymized: CrmEventDefinition<z.ZodObject<{
+  contactId: z.ZodString;
+  fields: z.ZodArray<z.ZodString>;
+}, z.core.$strip>>;
 declare const OpportunityCreated: CrmEventDefinition<z.ZodObject<{
   opportunityId: z.ZodString;
   pipelineId: z.ZodString;
@@ -450,8 +463,8 @@ interface CrmLogger {
  * `metadata?` field — keep the typed surface tight.
  */
 interface CrmContext extends OperationContext {
-  organizationId?: string | _$mongoose.Types.ObjectId;
-  actorId?: string | _$mongoose.Types.ObjectId;
+  organizationId?: string | import('mongoose').Types.ObjectId;
+  actorId?: string | import('mongoose').Types.ObjectId;
   /** Mongo transaction session (passed through to mongokit). */
   session?: unknown;
 }
@@ -460,16 +473,10 @@ interface CrmContext extends OperationContext {
 declare function createEvent<T>(type: string, payload: T, ctx?: CrmContext, meta?: Partial<EventMeta>): DomainEvent<T>;
 //#endregion
 //#region src/events/in-process-bus.d.ts
-declare class InProcessCrmBus implements EventTransport {
-  readonly name = "in-process-crm";
-  private subs;
-  private logger?;
+declare class InProcessCrmBus extends InProcessEventBus {
   constructor(options?: {
     logger?: CrmLogger;
   });
-  publish(event: DomainEvent): Promise<void>;
-  subscribe(pattern: string, handler: EventHandler): Promise<() => void>;
-  close(): Promise<void>;
 }
 //#endregion
-export { AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRescheduled, CRM_EVENTS, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignResumed, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationResolved, CrmEventDefinition, CrmEventName, CrmEventSchema, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventUnsubscribed, EnrollmentCompleted, EnrollmentCreated, EnrollmentExited, EnrollmentPaused, EnrollmentResumed, EnrollmentStepSent, InProcessCrmBus, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadScored, LeadStatusChanged, MessageReceived, MessageSent, NoteAdded, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PipelineArchived, PipelineCreated, SequenceActivated, SequenceArchived, SequenceCreated, SequencePaused, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionUnsubscribed, SuppressionAdded, SuppressionRemoved, createEvent, crmEventDefinitions };
+export { AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRescheduled, CRM_EVENTS, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignResumed, ContactAnonymized, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationResolved, CrmEventDefinition, CrmEventName, CrmEventSchema, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventUnsubscribed, EnrollmentCompleted, EnrollmentCreated, EnrollmentExited, EnrollmentPaused, EnrollmentResumed, EnrollmentStepSent, InProcessCrmBus, LeadAnonymized, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadScored, LeadStatusChanged, MessageReceived, MessageSent, NoteAdded, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PipelineArchived, PipelineCreated, SequenceActivated, SequenceArchived, SequenceCreated, SequencePaused, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionUnsubscribed, SuppressionAdded, SuppressionRemoved, createEvent, crmEventDefinitions };

package/dist/events.js

@@ -1,5 +1,6 @@
 import { z } from "zod";
-import { createEvent as createEvent$1, matchEventPattern } from "@classytic/primitives/events";
+import { createEvent as createEvent$1 } from "@classytic/primitives/events";
+import { InProcessEventBus } from "@classytic/primitives/event-infra";
 //#region src/events/event-constants.ts
 /** PACKAGE_RULES rule 12: `package:resource.verb`. */
 const CRM_EVENTS = {
@@ -52,9 +53,11 @@ const CRM_EVENTS = {
 	EMAIL_EVENT_UNSUBSCRIBED: "crm:email_event.unsubscribed",
 	LEAD_ENRICHED: "crm:lead.enriched",
 	LEAD_ASSIGNED: "crm:lead.assigned",
+	LEAD_ANONYMIZED: "crm:lead.anonymized",
 	CONTACT_ENRICHED: "crm:contact.enriched",
 	CONTACT_ASSIGNED: "crm:contact.assigned",
 	CONTACT_MERGED: "crm:contact.merged",
+	CONTACT_ANONYMIZED: "crm:contact.anonymized",
 	ACCOUNT_ENRICHED: "crm:account.enriched",
 	ACCOUNT_ASSIGNED: "crm:account.assigned",
 	ACCOUNT_MERGED: "crm:account.merged",
@@ -194,6 +197,15 @@ const LeadAssigned = defineCrmEvent({
 	description: "assign() (re)assigned the lead owner.",
 	zodSchema: z.object({ leadId: z.string() }).extend(ownerChangeSchema.shape)
 });
+const LeadAnonymized = defineCrmEvent({
+	name: CRM_EVENTS.LEAD_ANONYMIZED,
+	resource: "lead",
+	description: "anonymize() scrubbed a lead's PII (name/email/phone) in place — GDPR right-to-erasure. Non-PII aggregates (score/status/engagement) and the id are preserved; `anonymizedAt` tombstones the row.",
+	zodSchema: z.object({
+		leadId: z.string(),
+		fields: z.array(z.string())
+	})
+});
 const AccountCreated = defineCrmEvent({
 	name: CRM_EVENTS.ACCOUNT_CREATED,
 	resource: "account",
@@ -260,6 +272,15 @@ const ContactMerged = defineCrmEvent({
 	description: "merge() folded a secondary contact into the primary; secondary deleted.",
 	zodSchema: mergeSchema
 });
+const ContactAnonymized = defineCrmEvent({
+	name: CRM_EVENTS.CONTACT_ANONYMIZED,
+	resource: "contact",
+	description: "anonymize() scrubbed a contact's PII (name + every contact channel) in place — GDPR right-to-erasure. Non-PII aggregates (accountId, ownerId, tags) and the id are preserved; `anonymizedAt` tombstones the row.",
+	zodSchema: z.object({
+		contactId: z.string(),
+		fields: z.array(z.string())
+	})
+});
 const OpportunityCreated = defineCrmEvent({
 	name: CRM_EVENTS.OPPORTUNITY_CREATED,
 	resource: "opportunity",
@@ -715,6 +736,7 @@ const crmEventDefinitions = [
 	LeadDisqualified,
 	LeadEnriched,
 	LeadAssigned,
+	LeadAnonymized,
 	AccountCreated,
 	AccountUpdated,
 	AccountEnriched,
@@ -725,6 +747,7 @@ const crmEventDefinitions = [
 	ContactEnriched,
 	ContactAssigned,
 	ContactMerged,
+	ContactAnonymized,
 	OpportunityCreated,
 	OpportunityStageAdvanced,
 	OpportunityStageRegressed,
@@ -800,38 +823,25 @@ function createEvent(type, payload, ctx, meta) {
 //#region src/events/in-process-bus.ts
 /**
 * In-process event bus — default fallback when no `eventTransport` is
-* provided to `createCrm`. Structurally identical to arc's
-* `MemoryEventTransport`; pattern matching is delegated to primitives.
-* Handler errors are swallowed — event emission never blocks writes.
+* provided to `blueprint.bind(connection, runtime)`.
+*
+* A thin subclass of `@classytic/primitives/event-infra`'s shared
+* `InProcessEventBus`. Prior semantics preserved: glob matching via
+* `matchEventPattern`, per-handler error isolation, idempotent `close()`.
+* CRM historically SWALLOWED handler errors when no logger was supplied —
+* that default is preserved by passing `logger: null` unless the host
+* injects a `CrmLogger`, whose structured `error(msg, meta)` slot is
+* bridged onto the shared error-logger contract.
 */
-var InProcessCrmBus = class {
-	name = "in-process-crm";
-	subs = [];
-	logger;
+var InProcessCrmBus = class extends InProcessEventBus {
 	constructor(options) {
-		if (options?.logger) this.logger = options.logger;
-	}
-	async publish(event) {
-		const matching = this.subs.filter((s) => matchEventPattern(s.pattern, event.type));
-		for (const sub of matching) try {
-			await sub.handler(event);
-		} catch (err) {
-			this.logger?.error?.(`[crm] event handler error [${event.type}]`, { error: err instanceof Error ? err.message : String(err) });
-		}
-	}
-	async subscribe(pattern, handler) {
-		const sub = {
-			pattern,
-			handler
-		};
-		this.subs.push(sub);
-		return () => {
-			this.subs = this.subs.filter((s) => s !== sub);
-		};
-	}
-	async close() {
-		this.subs = [];
+		const crmLogger = options?.logger;
+		super({
+			name: "in-process-crm",
+			logLabel: "crm",
+			logger: crmLogger?.error ? { error: (message, ...args) => crmLogger.error?.(message, { args }) } : null
+		});
 	}
 };
 //#endregion
-export { AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRescheduled, CRM_EVENTS, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignResumed, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationResolved, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventUnsubscribed, EnrollmentCompleted, EnrollmentCreated, EnrollmentExited, EnrollmentPaused, EnrollmentResumed, EnrollmentStepSent, InProcessCrmBus, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadScored, LeadStatusChanged, MessageReceived, MessageSent, NoteAdded, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PipelineArchived, PipelineCreated, SequenceActivated, SequenceArchived, SequenceCreated, SequencePaused, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionUnsubscribed, SuppressionAdded, SuppressionRemoved, createEvent, crmEventDefinitions };
+export { AccountAssigned, AccountCreated, AccountEnriched, AccountMerged, AccountUpdated, ActivityCancelled, ActivityCompleted, ActivityOutcomeRecorded, ActivityPlanned, ActivityRescheduled, CRM_EVENTS, CampaignActivated, CampaignArchived, CampaignCompleted, CampaignCreated, CampaignPaused, CampaignResumed, ContactAnonymized, ContactAssigned, ContactCreated, ContactEnriched, ContactMerged, ContactUpdated, ConversationAssigned, ConversationCreated, ConversationReopened, ConversationResolved, EmailEventBounced, EmailEventClicked, EmailEventComplained, EmailEventOpened, EmailEventUnsubscribed, EnrollmentCompleted, EnrollmentCreated, EnrollmentExited, EnrollmentPaused, EnrollmentResumed, EnrollmentStepSent, InProcessCrmBus, LeadAnonymized, LeadAssigned, LeadConverted, LeadCreated, LeadDisqualified, LeadEnriched, LeadScored, LeadStatusChanged, MessageReceived, MessageSent, NoteAdded, OpportunityAbandoned, OpportunityAmountChanged, OpportunityAssigned, OpportunityCreated, OpportunityExtended, OpportunityLost, OpportunityStageAdvanced, OpportunityStageRegressed, OpportunityWon, PipelineArchived, PipelineCreated, SequenceActivated, SequenceArchived, SequenceCreated, SequencePaused, SubscriptionBounced, SubscriptionComplained, SubscriptionConfirmed, SubscriptionCreated, SubscriptionUnsubscribed, SuppressionAdded, SuppressionRemoved, createEvent, crmEventDefinitions };