@drawbridge/drawbridge-utils 0.0.134 → 0.0.136

package/dist/connections/index.js

@@ -390,8 +390,14 @@ var authToken = async ({
   });
   const body = await response.json().catch(() => ({}));
   if (!response.ok) {
-    throw new Error(
-      renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+    throw Object.assign(
+      new Error(
+        renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+      ),
+      {
+        status: response.status,
+        ...renewing && { code: "grant_refused" }
+      }
     );
   }
   if (!renewing && !body.access_token) throw new Error("The vendor returned no access token");
@@ -447,7 +453,10 @@ var accessToken = async ({
   }
   if (!force && !isStale(settings, now)) return settings.accessToken;
   if (!settings.refreshToken) {
-    throw new Error("This connection has expired and cannot be renewed automatically. Reconnect it.");
+    throw Object.assign(
+      new Error("This connection has expired and cannot be renewed automatically. Reconnect it."),
+      { code: "grant_refused" }
+    );
   }
   const minted = await manifest.hooks.auth.token({
     clientId,
@@ -1042,6 +1051,74 @@ var drawbridge_default = `<svg width="500" height="500" viewBox="0 0 500 500" fi
 </defs>
 </svg>`;
 
+// lib/transactions.js
+import { currentTraceId } from "@drawbridge/drawbridge-telemetry";
+
+// lib/billing.js
+import { createLogger } from "@drawbridge/drawbridge-telemetry";
+var logger = createLogger();
+var MARKUP = 1.3;
+var cost = {
+  // gemini-3.5-flash — verified against Google's pricing page 2026-07-09:
+  // $0.15 cached / $1.50 input / $9.00 output per 1M tokens (thinking billed at
+  // output). ~3.6x the retired 2.5-flash output rate.
+  "gemini-3.5-flash": {
+    cached: 15,
+    input: 150,
+    output: 900
+  },
+  // gemini-3.5-flash-lite — verified against Google's pricing page 2026-08-20:
+  // $0.03 cached / $0.30 input / $2.50 output per 1M tokens (thinking billed at
+  // output). A fifth of flash on input, ~a quarter on output. Growth's assistant
+  // ranks the feed on this tier — one call per page — so its rows were the
+  // unpriced ones until now.
+  "gemini-3.5-flash-lite": {
+    cached: 3,
+    input: 30,
+    output: 250
+  },
+  "gemini-2.5-flash": {
+    cached: 3,
+    input: 30,
+    output: 250
+  },
+  "gemini-2.5-flash-image": {
+    cached: 3,
+    input: 30,
+    output: 3e3
+  },
+  // gemini-3-pro-image-preview — verified against Google's pricing page
+  // 2026-08-12: $2.00 input / $12.00 text output per 1M, and image output
+  // tokens at ~$120/1M (a 1K-2K image is 1120 tokens = $0.134, a 4K image
+  // 2000 tokens = $0.24). Encoded the flash-image way: one flat output rate
+  // that reproduces the per-image price from the tokens usageMetadata
+  // reports. Growth's hero generation runs this model today.
+  "gemini-3-pro-image-preview": {
+    cached: 20,
+    input: 200,
+    output: 12e3
+  }
+};
+var toolCost = {
+  search: 3.5
+};
+var toolPricing = Object.fromEntries(
+  Object.entries(toolCost).map(([tool, value]) => [
+    tool,
+    Math.ceil(value * MARKUP)
+  ])
+);
+var pricing = Object.fromEntries(
+  Object.entries(cost).map(([model, rates]) => [
+    model,
+    {
+      cached: Math.round(rates.cached * MARKUP),
+      input: Math.round(rates.input * MARKUP),
+      output: Math.round(rates.output * MARKUP)
+    }
+  ])
+);
+
 // lib/features.js
 var page = {
   qrcode: {
@@ -1504,74 +1581,6 @@ var conversionRate = (subscription) => {
   return ((_a = resolvePlan(subscription)) == null ? void 0 : _a.conversion) ?? free.conversion;
 };
 
-// lib/transactions.js
-import { currentTraceId } from "@drawbridge/drawbridge-telemetry";
-
-// lib/billing.js
-import { createLogger } from "@drawbridge/drawbridge-telemetry";
-var logger = createLogger();
-var MARKUP = 1.3;
-var cost = {
-  // gemini-3.5-flash — verified against Google's pricing page 2026-07-09:
-  // $0.15 cached / $1.50 input / $9.00 output per 1M tokens (thinking billed at
-  // output). ~3.6x the retired 2.5-flash output rate.
-  "gemini-3.5-flash": {
-    cached: 15,
-    input: 150,
-    output: 900
-  },
-  // gemini-3.5-flash-lite — verified against Google's pricing page 2026-08-20:
-  // $0.03 cached / $0.30 input / $2.50 output per 1M tokens (thinking billed at
-  // output). A fifth of flash on input, ~a quarter on output. Growth's assistant
-  // ranks the feed on this tier — one call per page — so its rows were the
-  // unpriced ones until now.
-  "gemini-3.5-flash-lite": {
-    cached: 3,
-    input: 30,
-    output: 250
-  },
-  "gemini-2.5-flash": {
-    cached: 3,
-    input: 30,
-    output: 250
-  },
-  "gemini-2.5-flash-image": {
-    cached: 3,
-    input: 30,
-    output: 3e3
-  },
-  // gemini-3-pro-image-preview — verified against Google's pricing page
-  // 2026-08-12: $2.00 input / $12.00 text output per 1M, and image output
-  // tokens at ~$120/1M (a 1K-2K image is 1120 tokens = $0.134, a 4K image
-  // 2000 tokens = $0.24). Encoded the flash-image way: one flat output rate
-  // that reproduces the per-image price from the tokens usageMetadata
-  // reports. Growth's hero generation runs this model today.
-  "gemini-3-pro-image-preview": {
-    cached: 20,
-    input: 200,
-    output: 12e3
-  }
-};
-var toolCost = {
-  search: 3.5
-};
-var toolPricing = Object.fromEntries(
-  Object.entries(toolCost).map(([tool, value]) => [
-    tool,
-    Math.ceil(value * MARKUP)
-  ])
-);
-var pricing = Object.fromEntries(
-  Object.entries(cost).map(([model, rates]) => [
-    model,
-    {
-      cached: Math.round(rates.cached * MARKUP),
-      input: Math.round(rates.input * MARKUP),
-      output: Math.round(rates.output * MARKUP)
-    }
-  ])
-);
-
 // lib/pricing.js
 var emailPlans = {
   essentials50k: {
@@ -1641,6 +1650,33 @@ var sending = {
     plan: emailPlan,
     plans: emailPlans,
     title: emailPlans[emailPlan].title
+  },
+  // What one outbound SMS SEGMENT costs us, against what channels.sms below
+  // sells it for. Here for the same reason the email figures are: this file is
+  // where a rate is found without knowing whose module owns it — and its
+  // absence is why "does an SMS action cover its cost" could not be answered
+  // from this repo at all.
+  //
+  // US toll-free outbound, read from Twilio's SMS pricing page 2026-09-03
+  // (https://www.twilio.com/en-us/sms/pricing/us): $0.0083 per segment, plus a
+  // carrier fee that varies by the DESTINATION carrier — $0.0035 AT&T, $0.0045
+  // T-Mobile / Verizon / US Cellular, $0.004 everywhere else. CENTS per
+  // segment, like every other rate in this file.
+  //
+  // WORST CASE, deliberately. A price floor computed from the average is a
+  // floor that half of real traffic sits underneath.
+  //
+  // A segment is 153 GSM-7 characters once a message spans more than one — or
+  // 67 if the body contains a single emoji or curly quote, which flips the
+  // whole message to UCS-2. Twilio reports the count as `num_segments` on the
+  // Message resource, which is what the send bills on.
+  sms: {
+    baseCents: 0.83,
+    // The dearest carrier fee, not the mean: see WORST CASE above.
+    carrierCents: 0.45,
+    // Stated, not summed — 0.83 + 0.45 is 1.2800000000000002 in binary
+    // floating point, and this number is compared against money.
+    segmentCostCents: 1.28
   }
 };
 var channels = {
@@ -1656,6 +1692,9 @@ var channels = {
     includedInAllowance: false
   }
 };
+var MINIMUM_ACTION_CENTS = Math.round(
+  sending.sms.segmentCostCents / channels.sms.actionsPerSegment * MARKUP * 1e3
+) / 1e3;
 
 // lib/connections/providers/drawbridge.js
 var STOP_KEYWORDS = ["STOP", "STOPALL", "UNSUBSCRIBE", "CANCEL", "END", "QUIT"];
@@ -1680,13 +1719,16 @@ var teamRecipients = async ({ memberIds = [], organization: organization2, read
     ]
   }) : [];
   const seen = /* @__PURE__ */ new Set();
-  return [owner, ...members].filter((member) => {
-    if (!(member == null ? void 0 : member.id) || !(member == null ? void 0 : member.email)) return false;
-    const address = member.email.toLowerCase();
-    if (seen.has(address)) return false;
-    seen.add(address);
-    return true;
-  });
+  return {
+    org,
+    recipients: [owner, ...members].filter((member) => {
+      if (!(member == null ? void 0 : member.id) || !(member == null ? void 0 : member.email)) return false;
+      const address = member.email.toLowerCase();
+      if (seen.has(address)) return false;
+      seen.add(address);
+      return true;
+    })
+  };
 };
 var queueNotification = (data2) => ({ collection: "notification", data: data2, operation: "create" });
 var drawbridge_default2 = {
@@ -1762,7 +1804,7 @@ var drawbridge_default2 = {
         const count = Number((counted == null ? void 0 : counted.count) || 0);
         const request2 = { campaign, count, days };
         if (!count) return { message: "No new leads in the period \u2014 digest skipped.", request: request2, response: { skipped: true }, skipped: true };
-        const recipients = await teamRecipients({
+        const { recipients } = await teamRecipients({
           memberIds: ((_d = step.settings) == null ? void 0 : _d.members) || [],
           organization: workflow.organization,
           read
@@ -1798,7 +1840,7 @@ var drawbridge_default2 = {
         var _a;
         const memberIds = ((_a = step.settings) == null ? void 0 : _a.members) || [];
         const request2 = { members: memberIds.length };
-        const recipients = await teamRecipients({ memberIds, organization: workflow.organization, read });
+        const { org, recipients } = await teamRecipients({ memberIds, organization: workflow.organization, read });
         if (!recipients.length) {
           return {
             message: "No owner or accepted member with an email address \u2014 team notification skipped.",
@@ -1808,32 +1850,37 @@ var drawbridge_default2 = {
           };
         }
         const bucket = Math.floor(Date.now() / (15 * 60 * 1e3));
+        const campaign = (context == null ? void 0 : context.campaign) ? await read.get({ collection: "campaign", query: { id: context.campaign } }) : null;
+        const link = (context == null ? void 0 : context.campaign) && (context == null ? void 0 : context.lead) ? {
+          href: "/organizations/" + workflow.organization + "/campaigns/" + context.campaign + "/leads/" + context.lead,
+          text: "View lead"
+        } : null;
+        const body = ((context == null ? void 0 : context.email) || "Someone") + " just entered" + ((campaign == null ? void 0 : campaign.title) ? " " + campaign.title : "") + ((org == null ? void 0 : org.title) ? " at " + org.title : "") + ".";
+        const subject = "New lead" + ((campaign == null ? void 0 : campaign.title) ? " \u2014 " + campaign.title : "");
         return {
           message: "Team notification queued for " + recipients.length + " recipient(s).",
           request: request2,
           response: { notified: recipients.length },
-          writes: recipients.map((member) => {
-            var _a2, _b;
-            return {
-              ...queueNotification({
-                audience: "member",
-                // Per workflow, recipient AND bucket, so one recipient's damper
-                // can never swallow another's mail and a later bucket is never
-                // mistaken for a duplicate of an earlier one.
-                key: "team.notify." + workflow.id + "." + member.id + "." + bucket,
-                message: interpolate((_a2 = step.settings) == null ? void 0 : _a2.message, context),
-                organization: workflow.organization,
-                send: { type: "email", email: member.email },
-                title: interpolate((_b = step.settings) == null ? void 0 : _b.subject, context),
-                workflow: workflow.id
-              }),
-              // E11000 IS THE DAMPER WORKING: this recipient has already been
-              // told within the bucket. Declared per write rather than assumed by
-              // the shell, because on every other write here a duplicate key is a
-              // real failure.
-              ignoreDuplicate: true
-            };
-          })
+          writes: recipients.map((member) => ({
+            ...queueNotification({
+              audience: "member",
+              // Per workflow, recipient AND bucket, so one recipient's damper
+              // can never swallow another's mail and a later bucket is never
+              // mistaken for a duplicate of an earlier one.
+              key: "team.notify." + workflow.id + "." + member.id + "." + bucket,
+              link,
+              message: body,
+              organization: workflow.organization,
+              send: { type: "email", email: member.email },
+              title: subject,
+              workflow: workflow.id
+            }),
+            // E11000 IS THE DAMPER WORKING: this recipient has already been
+            // told within the bucket. Declared per write rather than assumed by
+            // the shell, because on every other write here a duplicate key is a
+            // real failure.
+            ignoreDuplicate: true
+          }))
         };
       },
       // Drawbridge sends lead-facing email itself — no merchant provider gates
@@ -2239,14 +2286,24 @@ var drawbridge_default2 = {
       }),
       // To organization MEMBERS. Never suppressed — an entrant's opt-out must
       // not silence an alert to staff — and not billed.
+      //
+      // ITS COPY IS WRITTEN, NOT ASKED FOR. This says the same thing every
+      // time — a lead arrived, here it is — so the merchant chooses who hears
+      // it, not how it reads, and the hook composes the subject, the body and
+      // the link to the lead.
+      //
+      // `message` and `subject` stay declared, optional and IGNORED: stored
+      // workflows still carry them and the api validates settings with
+      // noUnknown().strict(), so dropping the keys would 400 the next save of
+      // a workflow built before this.
       notify: () => ({
         hook: "email.notify",
         key: "Email \u2014 Notification",
         queue: "notification",
         settings: {
           members: { of: "string", type: "array" },
-          message: { required: true, type: "string" },
-          subject: { required: true, type: "string" }
+          message: { type: "string" },
+          subject: { type: "string" }
         },
         triggers: ["lead.insert"],
         // Zero is a PRICE, and a deliberate one. Declared rather than omitted
@@ -2661,8 +2718,62 @@ var klaviyo_default2 = {
     sms: false,
     inbound: false,
     // Nothing to set up or tear down at the vendor: the grant is the whole
-    // integration, and revoking it is auth.disconnect's job.
-    lifecycle: false,
+    // integration. What CAN rot is the grant itself, so health is the one
+    // lifecycle hook Klaviyo carries.
+    lifecycle: {
+      // Nothing to set up, tear down, or re-register at the vendor — the
+      // grant is the whole integration.
+      cleanup: false,
+      register: false,
+      rehydrate: false,
+      // KEEP THE GRANT PROVEN AND WARM. The shell mints a fresh access
+      // token before every hook run — for Klaviyo that spends the refresh
+      // token, which is the only question that reaches Klaviyo (see
+      // auth.probe) — so this body running at all proves the grant still
+      // rotates, and the daily run keeps it inside Klaviyo's 90-day idle
+      // window. A dead grant never gets here: the shell's mint throws
+      // `grant_refused` and the step runner errors the connection itself.
+      //
+      // The one call below proves the minted token is HONOURED — mint and
+      // acceptance are different facts, and /accounts is already the call
+      // the connect flow makes (auth.connect), so it needs no new scope.
+      health: async ({ connection: connection2, token }, { fetcher, read } = {}) => {
+        const request2 = { connectionId: connection2.id };
+        try {
+          await api2("/accounts", { fetcher, token });
+          return {
+            message: "Health check passed \u2014 token minted and accepted.",
+            request: request2,
+            response: { pingedAt: /* @__PURE__ */ new Date() }
+          };
+        } catch (error) {
+          if ([401, 403].includes(error.status) && read) {
+            const current = await read.get({ collection: "connection", query: { id: connection2.id } });
+            if (current) {
+              const others = (current.errors || []).filter((entry) => entry.source !== "oauth");
+              error.writes = [{
+                collection: "connection",
+                data: {
+                  $set: {
+                    errors: [
+                      ...others,
+                      {
+                        message: "Klaviyo no longer accepts this connection. Reconnect Klaviyo to resume syncing.",
+                        source: "oauth"
+                      }
+                    ],
+                    status: "error"
+                  }
+                },
+                operation: "update",
+                query: { id: connection2.id }
+              }];
+            }
+          }
+          throw error;
+        }
+      }
+    },
     resources: {
       // The lists a merchant can sync into, for the picker on their
       // connection.
@@ -2738,6 +2849,19 @@ var klaviyo_default2 = {
     return ((_a = data2 == null ? void 0 : data2.settings) == null ? void 0 : _a.list) ? data2.status : "pending";
   },
   steps: {
+    connection: {
+      // The daily grant check — same step type and workflow shape as
+      // Shopify's, provisioned as a system workflow per connection.
+      health: {
+        check: () => ({
+          description: "Keeps the Klaviyo grant working \u2014 spends the refresh token daily so a revoked or idle grant is reported instead of discovered by a failing sync.",
+          hook: "lifecycle.health",
+          key: "Klaviyo Connection Health",
+          queue: "connection",
+          system: true
+        })
+      }
+    },
     contacts: {
       // A DECLARATION, not the work. It names the hook that does the work, and
       // says where that hook's values belong. Nested like the hooks, and the

package/dist/connections/oauth.cjs

@@ -94,8 +94,14 @@ var authToken = async ({
   });
   const body = await response.json().catch(() => ({}));
   if (!response.ok) {
-    throw new Error(
-      renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+    throw Object.assign(
+      new Error(
+        renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+      ),
+      {
+        status: response.status,
+        ...renewing && { code: "grant_refused" }
+      }
     );
   }
   if (!renewing && !body.access_token) throw new Error("The vendor returned no access token");

package/dist/connections/oauth.d.cts

@@ -173,9 +173,20 @@ const authToken = async ({
 		// The two paths fail differently for the merchant: a refused exchange is
 		// "try connecting again", a refused refresh is "reconnect this connection",
 		// and collapsing them sends somebody to the wrong screen.
-		throw new Error( renewing
-			? 'The vendor refused the refresh token (' + response.status + ') — reconnect the connection'
-			: 'The vendor refused the exchange (' + response.status + ')' + ( body?.error ? ': ' + body.error : '' )
+		//
+		// `code` marks the refused REFRESH machine-readably — the health-check
+		// shell errors the connection on it rather than retrying a dead grant
+		// into the log forever. Only the renewing branch: a refused exchange is
+		// a connect-flow failure with a person watching.
+		throw Object.assign(
+			new Error( renewing
+				? 'The vendor refused the refresh token (' + response.status + ') — reconnect the connection'
+				: 'The vendor refused the exchange (' + response.status + ')' + ( body?.error ? ': ' + body.error : '' )
+			),
+			{
+				status : response.status,
+				...( renewing && { code : 'grant_refused' })
+			}
 		);
 
 	}

package/dist/connections/oauth.d.ts

@@ -173,9 +173,20 @@ const authToken = async ({
 		// The two paths fail differently for the merchant: a refused exchange is
 		// "try connecting again", a refused refresh is "reconnect this connection",
 		// and collapsing them sends somebody to the wrong screen.
-		throw new Error( renewing
-			? 'The vendor refused the refresh token (' + response.status + ') — reconnect the connection'
-			: 'The vendor refused the exchange (' + response.status + ')' + ( body?.error ? ': ' + body.error : '' )
+		//
+		// `code` marks the refused REFRESH machine-readably — the health-check
+		// shell errors the connection on it rather than retrying a dead grant
+		// into the log forever. Only the renewing branch: a refused exchange is
+		// a connect-flow failure with a person watching.
+		throw Object.assign(
+			new Error( renewing
+				? 'The vendor refused the refresh token (' + response.status + ') — reconnect the connection'
+				: 'The vendor refused the exchange (' + response.status + ')' + ( body?.error ? ': ' + body.error : '' )
+			),
+			{
+				status : response.status,
+				...( renewing && { code : 'grant_refused' })
+			}
 		);
 
 	}

package/dist/connections/oauth.js

@@ -69,8 +69,14 @@ var authToken = async ({
   });
   const body = await response.json().catch(() => ({}));
   if (!response.ok) {
-    throw new Error(
-      renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+    throw Object.assign(
+      new Error(
+        renewing ? "The vendor refused the refresh token (" + response.status + ") \u2014 reconnect the connection" : "The vendor refused the exchange (" + response.status + ")" + ((body == null ? void 0 : body.error) ? ": " + body.error : "")
+      ),
+      {
+        status: response.status,
+        ...renewing && { code: "grant_refused" }
+      }
     );
   }
   if (!renewing && !body.access_token) throw new Error("The vendor returned no access token");