@drawbridge/drawbridge-utils 0.0.135 → 0.0.137

package/dist/connections/index.cjs

@@ -1125,6 +1125,74 @@ var drawbridge_default = `<svg width="500" height="500" viewBox="0 0 500 500" fi
 </defs>
 </svg>`;
 
+// lib/transactions.js
+var import_drawbridge_telemetry = require("@drawbridge/drawbridge-telemetry");
+
+// lib/billing.js
+var import_drawbridge_telemetry2 = require("@drawbridge/drawbridge-telemetry");
+var logger = (0, import_drawbridge_telemetry2.createLogger)();
+var MARKUP = 1.3;
+var cost = {
+  // gemini-3.5-flash — verified against Google's pricing page 2026-07-09:
+  // $0.15 cached / $1.50 input / $9.00 output per 1M tokens (thinking billed at
+  // output). ~3.6x the retired 2.5-flash output rate.
+  "gemini-3.5-flash": {
+    cached: 15,
+    input: 150,
+    output: 900
+  },
+  // gemini-3.5-flash-lite — verified against Google's pricing page 2026-08-20:
+  // $0.03 cached / $0.30 input / $2.50 output per 1M tokens (thinking billed at
+  // output). A fifth of flash on input, ~a quarter on output. Growth's assistant
+  // ranks the feed on this tier — one call per page — so its rows were the
+  // unpriced ones until now.
+  "gemini-3.5-flash-lite": {
+    cached: 3,
+    input: 30,
+    output: 250
+  },
+  "gemini-2.5-flash": {
+    cached: 3,
+    input: 30,
+    output: 250
+  },
+  "gemini-2.5-flash-image": {
+    cached: 3,
+    input: 30,
+    output: 3e3
+  },
+  // gemini-3-pro-image-preview — verified against Google's pricing page
+  // 2026-08-12: $2.00 input / $12.00 text output per 1M, and image output
+  // tokens at ~$120/1M (a 1K-2K image is 1120 tokens = $0.134, a 4K image
+  // 2000 tokens = $0.24). Encoded the flash-image way: one flat output rate
+  // that reproduces the per-image price from the tokens usageMetadata
+  // reports. Growth's hero generation runs this model today.
+  "gemini-3-pro-image-preview": {
+    cached: 20,
+    input: 200,
+    output: 12e3
+  }
+};
+var toolCost = {
+  search: 3.5
+};
+var toolPricing = Object.fromEntries(
+  Object.entries(toolCost).map(([tool, value]) => [
+    tool,
+    Math.ceil(value * MARKUP)
+  ])
+);
+var pricing = Object.fromEntries(
+  Object.entries(cost).map(([model, rates]) => [
+    model,
+    {
+      cached: Math.round(rates.cached * MARKUP),
+      input: Math.round(rates.input * MARKUP),
+      output: Math.round(rates.output * MARKUP)
+    }
+  ])
+);
+
 // lib/features.js
 var page = {
   qrcode: {
@@ -1587,74 +1655,6 @@ var conversionRate = (subscription) => {
   return ((_a = resolvePlan(subscription)) == null ? void 0 : _a.conversion) ?? free.conversion;
 };
 
-// lib/transactions.js
-var import_drawbridge_telemetry = require("@drawbridge/drawbridge-telemetry");
-
-// lib/billing.js
-var import_drawbridge_telemetry2 = require("@drawbridge/drawbridge-telemetry");
-var logger = (0, import_drawbridge_telemetry2.createLogger)();
-var MARKUP = 1.3;
-var cost = {
-  // gemini-3.5-flash — verified against Google's pricing page 2026-07-09:
-  // $0.15 cached / $1.50 input / $9.00 output per 1M tokens (thinking billed at
-  // output). ~3.6x the retired 2.5-flash output rate.
-  "gemini-3.5-flash": {
-    cached: 15,
-    input: 150,
-    output: 900
-  },
-  // gemini-3.5-flash-lite — verified against Google's pricing page 2026-08-20:
-  // $0.03 cached / $0.30 input / $2.50 output per 1M tokens (thinking billed at
-  // output). A fifth of flash on input, ~a quarter on output. Growth's assistant
-  // ranks the feed on this tier — one call per page — so its rows were the
-  // unpriced ones until now.
-  "gemini-3.5-flash-lite": {
-    cached: 3,
-    input: 30,
-    output: 250
-  },
-  "gemini-2.5-flash": {
-    cached: 3,
-    input: 30,
-    output: 250
-  },
-  "gemini-2.5-flash-image": {
-    cached: 3,
-    input: 30,
-    output: 3e3
-  },
-  // gemini-3-pro-image-preview — verified against Google's pricing page
-  // 2026-08-12: $2.00 input / $12.00 text output per 1M, and image output
-  // tokens at ~$120/1M (a 1K-2K image is 1120 tokens = $0.134, a 4K image
-  // 2000 tokens = $0.24). Encoded the flash-image way: one flat output rate
-  // that reproduces the per-image price from the tokens usageMetadata
-  // reports. Growth's hero generation runs this model today.
-  "gemini-3-pro-image-preview": {
-    cached: 20,
-    input: 200,
-    output: 12e3
-  }
-};
-var toolCost = {
-  search: 3.5
-};
-var toolPricing = Object.fromEntries(
-  Object.entries(toolCost).map(([tool, value]) => [
-    tool,
-    Math.ceil(value * MARKUP)
-  ])
-);
-var pricing = Object.fromEntries(
-  Object.entries(cost).map(([model, rates]) => [
-    model,
-    {
-      cached: Math.round(rates.cached * MARKUP),
-      input: Math.round(rates.input * MARKUP),
-      output: Math.round(rates.output * MARKUP)
-    }
-  ])
-);
-
 // lib/pricing.js
 var emailPlans = {
   essentials50k: {
@@ -1724,6 +1724,33 @@ var sending = {
     plan: emailPlan,
     plans: emailPlans,
     title: emailPlans[emailPlan].title
+  },
+  // What one outbound SMS SEGMENT costs us, against what channels.sms below
+  // sells it for. Here for the same reason the email figures are: this file is
+  // where a rate is found without knowing whose module owns it — and its
+  // absence is why "does an SMS action cover its cost" could not be answered
+  // from this repo at all.
+  //
+  // US toll-free outbound, read from Twilio's SMS pricing page 2026-09-03
+  // (https://www.twilio.com/en-us/sms/pricing/us): $0.0083 per segment, plus a
+  // carrier fee that varies by the DESTINATION carrier — $0.0035 AT&T, $0.0045
+  // T-Mobile / Verizon / US Cellular, $0.004 everywhere else. CENTS per
+  // segment, like every other rate in this file.
+  //
+  // WORST CASE, deliberately. A price floor computed from the average is a
+  // floor that half of real traffic sits underneath.
+  //
+  // A segment is 153 GSM-7 characters once a message spans more than one — or
+  // 67 if the body contains a single emoji or curly quote, which flips the
+  // whole message to UCS-2. Twilio reports the count as `num_segments` on the
+  // Message resource, which is what the send bills on.
+  sms: {
+    baseCents: 0.83,
+    // The dearest carrier fee, not the mean: see WORST CASE above.
+    carrierCents: 0.45,
+    // Stated, not summed — 0.83 + 0.45 is 1.2800000000000002 in binary
+    // floating point, and this number is compared against money.
+    segmentCostCents: 1.28
   }
 };
 var channels = {
@@ -1739,6 +1766,9 @@ var channels = {
     includedInAllowance: false
   }
 };
+var MINIMUM_ACTION_CENTS = Math.round(
+  sending.sms.segmentCostCents / channels.sms.actionsPerSegment * MARKUP * 1e3
+) / 1e3;
 
 // lib/connections/providers/drawbridge.js
 var STOP_KEYWORDS = ["STOP", "STOPALL", "UNSUBSCRIBE", "CANCEL", "END", "QUIT"];
@@ -1763,13 +1793,16 @@ var teamRecipients = async ({ memberIds = [], organization: organization2, read
     ]
   }) : [];
   const seen = /* @__PURE__ */ new Set();
-  return [owner, ...members].filter((member) => {
-    if (!(member == null ? void 0 : member.id) || !(member == null ? void 0 : member.email)) return false;
-    const address = member.email.toLowerCase();
-    if (seen.has(address)) return false;
-    seen.add(address);
-    return true;
-  });
+  return {
+    org,
+    recipients: [owner, ...members].filter((member) => {
+      if (!(member == null ? void 0 : member.id) || !(member == null ? void 0 : member.email)) return false;
+      const address = member.email.toLowerCase();
+      if (seen.has(address)) return false;
+      seen.add(address);
+      return true;
+    })
+  };
 };
 var queueNotification = (data2) => ({ collection: "notification", data: data2, operation: "create" });
 var drawbridge_default2 = {
@@ -1845,7 +1878,7 @@ var drawbridge_default2 = {
         const count = Number((counted == null ? void 0 : counted.count) || 0);
         const request2 = { campaign, count, days };
         if (!count) return { message: "No new leads in the period \u2014 digest skipped.", request: request2, response: { skipped: true }, skipped: true };
-        const recipients = await teamRecipients({
+        const { recipients } = await teamRecipients({
           memberIds: ((_d = step.settings) == null ? void 0 : _d.members) || [],
           organization: workflow.organization,
           read
@@ -1881,7 +1914,7 @@ var drawbridge_default2 = {
         var _a;
         const memberIds = ((_a = step.settings) == null ? void 0 : _a.members) || [];
         const request2 = { members: memberIds.length };
-        const recipients = await teamRecipients({ memberIds, organization: workflow.organization, read });
+        const { org, recipients } = await teamRecipients({ memberIds, organization: workflow.organization, read });
         if (!recipients.length) {
           return {
             message: "No owner or accepted member with an email address \u2014 team notification skipped.",
@@ -1891,32 +1924,37 @@ var drawbridge_default2 = {
           };
         }
         const bucket = Math.floor(Date.now() / (15 * 60 * 1e3));
+        const campaign = (context == null ? void 0 : context.campaign) ? await read.get({ collection: "campaign", query: { id: context.campaign } }) : null;
+        const link = (context == null ? void 0 : context.campaign) && (context == null ? void 0 : context.lead) ? {
+          href: "/organizations/" + workflow.organization + "/campaigns/" + context.campaign + "/leads/" + context.lead,
+          text: "View lead"
+        } : null;
+        const body = ((context == null ? void 0 : context.email) || "Someone") + " just entered" + ((campaign == null ? void 0 : campaign.title) ? " " + campaign.title : "") + ((org == null ? void 0 : org.title) ? " at " + org.title : "") + ".";
+        const subject = "New lead" + ((campaign == null ? void 0 : campaign.title) ? " \u2014 " + campaign.title : "");
         return {
           message: "Team notification queued for " + recipients.length + " recipient(s).",
           request: request2,
           response: { notified: recipients.length },
-          writes: recipients.map((member) => {
-            var _a2, _b;
-            return {
-              ...queueNotification({
-                audience: "member",
-                // Per workflow, recipient AND bucket, so one recipient's damper
-                // can never swallow another's mail and a later bucket is never
-                // mistaken for a duplicate of an earlier one.
-                key: "team.notify." + workflow.id + "." + member.id + "." + bucket,
-                message: interpolate((_a2 = step.settings) == null ? void 0 : _a2.message, context),
-                organization: workflow.organization,
-                send: { type: "email", email: member.email },
-                title: interpolate((_b = step.settings) == null ? void 0 : _b.subject, context),
-                workflow: workflow.id
-              }),
-              // E11000 IS THE DAMPER WORKING: this recipient has already been
-              // told within the bucket. Declared per write rather than assumed by
-              // the shell, because on every other write here a duplicate key is a
-              // real failure.
-              ignoreDuplicate: true
-            };
-          })
+          writes: recipients.map((member) => ({
+            ...queueNotification({
+              audience: "member",
+              // Per workflow, recipient AND bucket, so one recipient's damper
+              // can never swallow another's mail and a later bucket is never
+              // mistaken for a duplicate of an earlier one.
+              key: "team.notify." + workflow.id + "." + member.id + "." + bucket,
+              link,
+              message: body,
+              organization: workflow.organization,
+              send: { type: "email", email: member.email },
+              title: subject,
+              workflow: workflow.id
+            }),
+            // E11000 IS THE DAMPER WORKING: this recipient has already been
+            // told within the bucket. Declared per write rather than assumed by
+            // the shell, because on every other write here a duplicate key is a
+            // real failure.
+            ignoreDuplicate: true
+          }))
         };
       },
       // Drawbridge sends lead-facing email itself — no merchant provider gates
@@ -2322,14 +2360,24 @@ var drawbridge_default2 = {
       }),
       // To organization MEMBERS. Never suppressed — an entrant's opt-out must
       // not silence an alert to staff — and not billed.
+      //
+      // ITS COPY IS WRITTEN, NOT ASKED FOR. This says the same thing every
+      // time — a lead arrived, here it is — so the merchant chooses who hears
+      // it, not how it reads, and the hook composes the subject, the body and
+      // the link to the lead.
+      //
+      // `message` and `subject` stay declared, optional and IGNORED: stored
+      // workflows still carry them and the api validates settings with
+      // noUnknown().strict(), so dropping the keys would 400 the next save of
+      // a workflow built before this.
       notify: () => ({
         hook: "email.notify",
         key: "Email \u2014 Notification",
         queue: "notification",
         settings: {
           members: { of: "string", type: "array" },
-          message: { required: true, type: "string" },
-          subject: { required: true, type: "string" }
+          message: { type: "string" },
+          subject: { type: "string" }
         },
         triggers: ["lead.insert"],
         // Zero is a PRICE, and a deliberate one. Declared rather than omitted

package/dist/connections/index.d.cts

@@ -1663,19 +1663,25 @@ const teamRecipients = async ({ memberIds = [], organization, read }) => {
 	// different teammates collapse into one and the second is never told.
 	const seen = new Set();
 
-	return [ owner, ...members ].filter( ( member ) => {
+	// THE ORG DOCUMENT COMES BACK TOO. It was read here anyway, and notify names
+	// the organization in its copy — a teammate can belong to more than one, so
+	// re-reading it there would be a second query for a document this already has.
+	return {
+		org,
+		recipients : [ owner, ...members ].filter( ( member ) => {
 
-		if( ! member?.id || ! member?.email ) return false;
+			if( ! member?.id || ! member?.email ) return false;
 
-		const address = member.email.toLowerCase();
+			const address = member.email.toLowerCase();
 
-		if( seen.has( address ) ) return false;
+			if( seen.has( address ) ) return false;
 
-		seen.add( address );
+			seen.add( address );
 
-		return true;
+			return true;
 
-	});
+		})
+	};
 
 };
 
@@ -1768,7 +1774,7 @@ var drawbridge = {
 				// mail the merchant did not ask for and would learn to ignore.
 				if( ! count ) return { message : 'No new leads in the period — digest skipped.', request, response : { skipped : true }, skipped : true };
 
-				const recipients = await teamRecipients({
+				const { recipients } = await teamRecipients({
 					memberIds : step.settings?.members || [],
 					organization : workflow.organization,
 					read
@@ -1809,7 +1815,7 @@ var drawbridge = {
 
 				const request = { members : memberIds.length };
 
-				const recipients = await teamRecipients({ memberIds, organization : workflow.organization, read });
+				const { org, recipients } = await teamRecipients({ memberIds, organization : workflow.organization, read });
 
 				if( ! recipients.length ){
 
@@ -1842,6 +1848,43 @@ var drawbridge = {
 				// to redefine from here.
 				const bucket = Math.floor( Date.now() / ( 15 * 60 * 1000 ) );
 
+				// THE COPY IS OURS, not the merchant's — `step.settings.message` and
+				// `.subject` are ignored here on purpose. The whole message is "a lead
+				// arrived, go and look", so the useful part is the link, not the
+				// wording.
+				//
+				// It NAMES THE CAMPAIGN AND THE ORGANIZATION, because a recipient can
+				// be watching several of both and a subject line reading only "New
+				// lead" makes them open the mail to find out which. The campaign title
+				// is the one extra read this step makes; the org came back with the
+				// recipients.
+				const campaign = context?.campaign
+					? await read.get({ collection : 'campaign', query : { id : context.campaign } })
+					: null;
+
+				// The href is DASHBOARD-RELATIVE: a manifest must not read
+				// process.env (see lib/connections/index.js), so the deployment's base
+				// url is applied by the sender — drawbridge-sync's queue/notification.js
+				// — before it renders. Absent a campaign or lead on the context there
+				// is nothing to point at, and no button is drawn.
+				const link = ( context?.campaign && context?.lead )
+					? {
+						href : '/organizations/' + workflow.organization + '/campaigns/' + context.campaign + '/leads/' + context.lead,
+						text : 'View lead'
+					}
+					: null;
+
+				// Every part is optional and every part is dropped when it is missing,
+				// so the worst case reads 'Someone just entered.' rather than a
+				// sentence with holes in it.
+				const body = ( context?.email || 'Someone' )
+					+ ' just entered'
+					+ ( campaign?.title ? ' ' + campaign.title : '' )
+					+ ( org?.title ? ' at ' + org.title : '' )
+					+ '.';
+
+				const subject = 'New lead' + ( campaign?.title ? ' — ' + campaign.title : '' );
+
 				return {
 					message : 'Team notification queued for ' + recipients.length + ' recipient(s).',
 					request,
@@ -1853,10 +1896,11 @@ var drawbridge = {
 							// can never swallow another's mail and a later bucket is never
 							// mistaken for a duplicate of an earlier one.
 							key : 'team.notify.' + workflow.id + '.' + member.id + '.' + bucket,
-							message : interpolate( step.settings?.message, context ),
+							link,
+							message : body,
 							organization : workflow.organization,
 							send : { type : 'email', email : member.email },
-							title : interpolate( step.settings?.subject, context ),
+							title : subject,
 							workflow : workflow.id
 						}),
 						// E11000 IS THE DAMPER WORKING: this recipient has already been
@@ -2416,14 +2460,24 @@ var drawbridge = {
 
 			// To organization MEMBERS. Never suppressed — an entrant's opt-out must
 			// not silence an alert to staff — and not billed.
+			//
+			// ITS COPY IS WRITTEN, NOT ASKED FOR. This says the same thing every
+			// time — a lead arrived, here it is — so the merchant chooses who hears
+			// it, not how it reads, and the hook composes the subject, the body and
+			// the link to the lead.
+			//
+			// `message` and `subject` stay declared, optional and IGNORED: stored
+			// workflows still carry them and the api validates settings with
+			// noUnknown().strict(), so dropping the keys would 400 the next save of
+			// a workflow built before this.
 			notify : () => ({
 				hook : 'email.notify',
 				key : 'Email — Notification',
 				queue : 'notification',
 				settings : {
 					members : { of : 'string', type : 'array' },
-					message : { required : true, type : 'string' },
-					subject : { required : true, type : 'string' }
+					message : { type : 'string' },
+					subject : { type : 'string' }
 				},
 				triggers : [ 'lead.insert' ],
 				// Zero is a PRICE, and a deliberate one. Declared rather than omitted

package/dist/connections/index.d.ts

@@ -1663,19 +1663,25 @@ const teamRecipients = async ({ memberIds = [], organization, read }) => {
 	// different teammates collapse into one and the second is never told.
 	const seen = new Set();
 
-	return [ owner, ...members ].filter( ( member ) => {
+	// THE ORG DOCUMENT COMES BACK TOO. It was read here anyway, and notify names
+	// the organization in its copy — a teammate can belong to more than one, so
+	// re-reading it there would be a second query for a document this already has.
+	return {
+		org,
+		recipients : [ owner, ...members ].filter( ( member ) => {
 
-		if( ! member?.id || ! member?.email ) return false;
+			if( ! member?.id || ! member?.email ) return false;
 
-		const address = member.email.toLowerCase();
+			const address = member.email.toLowerCase();
 
-		if( seen.has( address ) ) return false;
+			if( seen.has( address ) ) return false;
 
-		seen.add( address );
+			seen.add( address );
 
-		return true;
+			return true;
 
-	});
+		})
+	};
 
 };
 
@@ -1768,7 +1774,7 @@ var drawbridge = {
 				// mail the merchant did not ask for and would learn to ignore.
 				if( ! count ) return { message : 'No new leads in the period — digest skipped.', request, response : { skipped : true }, skipped : true };
 
-				const recipients = await teamRecipients({
+				const { recipients } = await teamRecipients({
 					memberIds : step.settings?.members || [],
 					organization : workflow.organization,
 					read
@@ -1809,7 +1815,7 @@ var drawbridge = {
 
 				const request = { members : memberIds.length };
 
-				const recipients = await teamRecipients({ memberIds, organization : workflow.organization, read });
+				const { org, recipients } = await teamRecipients({ memberIds, organization : workflow.organization, read });
 
 				if( ! recipients.length ){
 
@@ -1842,6 +1848,43 @@ var drawbridge = {
 				// to redefine from here.
 				const bucket = Math.floor( Date.now() / ( 15 * 60 * 1000 ) );
 
+				// THE COPY IS OURS, not the merchant's — `step.settings.message` and
+				// `.subject` are ignored here on purpose. The whole message is "a lead
+				// arrived, go and look", so the useful part is the link, not the
+				// wording.
+				//
+				// It NAMES THE CAMPAIGN AND THE ORGANIZATION, because a recipient can
+				// be watching several of both and a subject line reading only "New
+				// lead" makes them open the mail to find out which. The campaign title
+				// is the one extra read this step makes; the org came back with the
+				// recipients.
+				const campaign = context?.campaign
+					? await read.get({ collection : 'campaign', query : { id : context.campaign } })
+					: null;
+
+				// The href is DASHBOARD-RELATIVE: a manifest must not read
+				// process.env (see lib/connections/index.js), so the deployment's base
+				// url is applied by the sender — drawbridge-sync's queue/notification.js
+				// — before it renders. Absent a campaign or lead on the context there
+				// is nothing to point at, and no button is drawn.
+				const link = ( context?.campaign && context?.lead )
+					? {
+						href : '/organizations/' + workflow.organization + '/campaigns/' + context.campaign + '/leads/' + context.lead,
+						text : 'View lead'
+					}
+					: null;
+
+				// Every part is optional and every part is dropped when it is missing,
+				// so the worst case reads 'Someone just entered.' rather than a
+				// sentence with holes in it.
+				const body = ( context?.email || 'Someone' )
+					+ ' just entered'
+					+ ( campaign?.title ? ' ' + campaign.title : '' )
+					+ ( org?.title ? ' at ' + org.title : '' )
+					+ '.';
+
+				const subject = 'New lead' + ( campaign?.title ? ' — ' + campaign.title : '' );
+
 				return {
 					message : 'Team notification queued for ' + recipients.length + ' recipient(s).',
 					request,
@@ -1853,10 +1896,11 @@ var drawbridge = {
 							// can never swallow another's mail and a later bucket is never
 							// mistaken for a duplicate of an earlier one.
 							key : 'team.notify.' + workflow.id + '.' + member.id + '.' + bucket,
-							message : interpolate( step.settings?.message, context ),
+							link,
+							message : body,
 							organization : workflow.organization,
 							send : { type : 'email', email : member.email },
-							title : interpolate( step.settings?.subject, context ),
+							title : subject,
 							workflow : workflow.id
 						}),
 						// E11000 IS THE DAMPER WORKING: this recipient has already been
@@ -2416,14 +2460,24 @@ var drawbridge = {
 
 			// To organization MEMBERS. Never suppressed — an entrant's opt-out must
 			// not silence an alert to staff — and not billed.
+			//
+			// ITS COPY IS WRITTEN, NOT ASKED FOR. This says the same thing every
+			// time — a lead arrived, here it is — so the merchant chooses who hears
+			// it, not how it reads, and the hook composes the subject, the body and
+			// the link to the lead.
+			//
+			// `message` and `subject` stay declared, optional and IGNORED: stored
+			// workflows still carry them and the api validates settings with
+			// noUnknown().strict(), so dropping the keys would 400 the next save of
+			// a workflow built before this.
 			notify : () => ({
 				hook : 'email.notify',
 				key : 'Email — Notification',
 				queue : 'notification',
 				settings : {
 					members : { of : 'string', type : 'array' },
-					message : { required : true, type : 'string' },
-					subject : { required : true, type : 'string' }
+					message : { type : 'string' },
+					subject : { type : 'string' }
 				},
 				triggers : [ 'lead.insert' ],
 				// Zero is a PRICE, and a deliberate one. Declared rather than omitted