twenty-app-intake 0.3.0 → 0.4.0

package/src/logic-functions/quarantine-discard.ts

@@ -0,0 +1,65 @@
+import { defineLogicFunction, type RoutePayload } from 'twenty-sdk/define';
+import { IDS } from '../constants/universal-identifiers';
+import { coreApi } from '../lib/rest-client';
+import { loadLog } from '../lib/replay';
+
+/**
+ * Mark a held payload as junk.
+ *
+ * The log is marked DISCARDED, not deleted. Keeping it is what lets the filter
+ * be judged later — a run of discards is evidence the threshold is right, and a
+ * discard sitting next to a release is evidence it is not. Deleting the row
+ * would throw away the only record of how well the thing is working.
+ *
+ * `purgePayload` drops the stored body while keeping the row, for anyone who
+ * would rather not retain the contents of obvious spam.
+ */
+const handler = async (params: RoutePayload) => {
+  const logId = params.pathParameters?.['logId'];
+  if (!logId) return { statusCode: 400, body: { error: 'Missing logId in URL' } };
+
+  const body = (params.body ?? {}) as Record<string, unknown>;
+  const purgePayload = body['purgePayload'] === true;
+
+  const log = await loadLog(logId);
+  if (!log) return { statusCode: 404, body: { error: `IntakeLog ${logId} not found` } };
+
+  if (log.status !== 'QUARANTINED') {
+    return {
+      statusCode: 400,
+      body: { error: `Log ${logId} is ${log.status}, not QUARANTINED — nothing to discard`, status: log.status },
+    };
+  }
+
+  try {
+    await coreApi.patch(`/intakeLogs/${logId}`, {
+      status: 'DISCARDED',
+      ...(purgePayload ? { rawPayload: null } : {}),
+    });
+  } catch (e) {
+    return { statusCode: 500, body: { error: `Could not discard log: ${String(e)}` } };
+  }
+
+  return {
+    statusCode: 200,
+    body: {
+      success: true,
+      logId,
+      status: 'DISCARDED',
+      payloadPurged: purgePayload,
+    },
+  };
+};
+
+export default defineLogicFunction({
+  universalIdentifier: IDS.QUARANTINE_DISCARD_LOGIC_FUNCTION,
+  name: 'intake-quarantine-discard',
+  description: 'Mark a quarantined payload as junk, optionally purging the stored body.',
+  timeoutSeconds: 15,
+  handler,
+  httpRouteTriggerSettings: {
+    path: '/intake/quarantine/:logId/discard',
+    httpMethod: 'POST',
+    isAuthRequired: true,
+  },
+});

package/src/logic-functions/quarantine-list.mjs

@@ -0,0 +1,211 @@
+import { createRequire as __createRequire } from 'module';
+const require = __createRequire(import.meta.url);
+
+// twenty-sdk-define-stub:__twenty-sdk-define-stub__
+var __defineFactoryStub = (config) => ({
+  success: true,
+  config,
+  errors: []
+});
+var __anyHandler = {
+  get(_target, prop) {
+    if (prop === "__esModule") return true;
+    if (prop === Symbol.toPrimitive) return () => "";
+    if (typeof prop === "symbol") return void 0;
+    return new Proxy(() => void 0, __anyHandler);
+  },
+  apply() {
+    return new Proxy(() => void 0, __anyHandler);
+  }
+};
+var __anyStub = new Proxy(() => void 0, __anyHandler);
+var defineLogicFunction = __defineFactoryStub;
+
+// src/constants/universal-identifiers.ts
+var IDS = {
+  APPLICATION: "96a389dd-384a-43a1-a376-9d3cf01b6ab7",
+  DEFAULT_ROLE: "3dd2cdb0-32c7-44b4-9f7b-0a9c667ec249",
+  // Objects
+  INTAKE_SOURCE_OBJECT: "8c1c227c-db7d-4834-b328-cacbe8af0bfc",
+  INTAKE_LOG_OBJECT: "b77a2439-1503-4ef6-ab8b-8f4293bc19da",
+  INTAKE_FIELD_RULE_OBJECT: "e74df817-ff25-4bfb-bdf0-651662ca327e",
+  // IntakeSource fields
+  INTAKE_SOURCE_NAME: "0deb7e4b-bb90-4c86-b903-5208b42041e2",
+  INTAKE_SOURCE_SLUG: "18f7645b-2dce-4145-b1b6-9cc3332c0578",
+  INTAKE_SOURCE_TARGET_OBJECT: "65f3d7f7-a601-4375-9c67-684d0044620b",
+  INTAKE_SOURCE_SECRET: "4c919402-07f5-4041-ade6-a42402f1881f",
+  INTAKE_SOURCE_STATUS: "6f1fa6fe-02b4-48ab-b1ee-97c600bbf483",
+  INTAKE_SOURCE_CREATE_OPP: "67ae59aa-2275-4ef2-b594-137f6bfafd99",
+  INTAKE_SOURCE_OPP_TEMPLATE: "3907b346-77a6-4c79-a4d7-6e1cc20bb82b",
+  INTAKE_SOURCE_TOTAL_INGESTED: "69655a93-bc70-48bd-874e-aeccc63ee1a8",
+  INTAKE_SOURCE_TOTAL_FAILED: "27b3a499-183e-4cc3-8e40-938f953a986d",
+  INTAKE_SOURCE_LAST_INGESTED: "e167f628-9865-468e-894a-b4b6150cec26",
+  // IntakeLog fields
+  INTAKE_LOG_SOURCE_RELATION: "b1c623ea-7a9a-47a5-bee4-35fdd668a637",
+  INTAKE_LOG_STATUS: "8b6d26d1-f89c-486c-a617-9f9f6a9ca36d",
+  INTAKE_LOG_PAYLOAD_HASH: "c43bb1ad-e78a-4c60-bd95-02475ede7f44",
+  INTAKE_LOG_RECORD_ID: "77a55116-a64b-4954-8369-341022dd5bdd",
+  INTAKE_LOG_RECORD_TYPE: "02154e96-5808-48ed-8838-51083f174550",
+  INTAKE_LOG_FIELDS_CREATED: "2295ca2b-b559-4b38-9771-12dd8d3d76d7",
+  INTAKE_LOG_FIELDS_MATCHED: "83d07a0f-5bcd-4fb1-9759-f9b04b9381d8",
+  INTAKE_LOG_OVERFLOW_COUNT: "4090acb1-f48a-4957-bb91-c642f8f434a7",
+  INTAKE_LOG_PROCESSING_MS: "a9191f27-4b40-42e9-8cce-20c75900e12c",
+  INTAKE_LOG_ERROR: "8d9979f1-9774-43a8-b958-d1b37bd4ecc7",
+  INTAKE_LOG_PROCESSED_AT: "a8d99fbd-722e-4987-8afe-b830ac026f0a",
+  // IntakeFieldRule fields
+  INTAKE_FIELD_RULE_SOURCE_RELATION: "396dd1f1-3873-4efa-a6bb-7b41eda14d83",
+  INTAKE_FIELD_RULE_INPUT_PATTERN: "757201a0-9f64-47b9-bf3a-a793074bf84e",
+  INTAKE_FIELD_RULE_CANONICAL_NAME: "fafebc55-a2cc-4c9f-975b-050c2676659d",
+  INTAKE_FIELD_RULE_FIELD_TYPE: "72d1f6d8-d63e-419e-a244-8127d7b4705f",
+  INTAKE_FIELD_RULE_PRIORITY: "911df299-940b-44f9-92f7-3fd01fde01a7",
+  INTAKE_FIELD_RULE_IS_ACTIVE: "6f9cd96d-aecd-437f-a7b5-d45548782771",
+  INTAKE_FIELD_RULE_TARGET_OBJECT: "7b8411a7-5e1d-40f2-a20c-683c07f67926",
+  // Logic Functions
+  WEBHOOK_LOGIC_FUNCTION: "8323c257-48fe-4bb6-b1dd-166844f575c0",
+  HEALTH_LOGIC_FUNCTION: "4ece4e39-286b-4820-81f4-b7beee71d092",
+  REGISTER_LOGIC_FUNCTION: "56d46e18-6cae-4d99-9893-b7d70740c9db",
+  // IntakeSource reverse relation fields
+  INTAKE_SOURCE_LOGS_REVERSE: "6ecfa369-22e0-4812-bb75-4338cea8be65",
+  INTAKE_SOURCE_RULES_REVERSE: "776fefaf-0eee-4ec0-93e0-d11bd80c1e20",
+  // v0.2.0 — rawPayload + retry + post-install + UI
+  INTAKE_LOG_RAW_PAYLOAD: "b65c9e1c-f2c1-4c52-a5b3-1e1ac3139692",
+  RETRY_LOGIC_FUNCTION: "90f20396-a69a-4ae4-af20-6be65c565bb5",
+  POST_INSTALL_LOGIC_FUNCTION: "e836fdd6-fd54-4aa4-ba6d-87d5a02148ef",
+  LOG_RETRY_FRONT_COMPONENT: "0cb97f6d-30e2-48c8-90e1-241b82870b4d",
+  FIELD_RULES_TABLE_FRONT_COMPONENT: "c35faad9-3468-4746-9c1c-b13d73e5e09b",
+  SOURCE_PAGE_LAYOUT: "8c894ba8-5c8c-45ed-b0af-1d22ede93eb9",
+  SOURCE_LAYOUT_TAB_RULES: "80f5c49a-083c-4062-8bd5-ae158abb6c33",
+  SOURCE_LAYOUT_TAB_RULES_WIDGET: "26a9ebb7-1d59-4b03-a018-56968f6df224",
+  LOG_PAGE_LAYOUT: "b0972802-ede5-463c-9f59-cb05f04957db",
+  LOG_LAYOUT_TAB_RETRY: "6b109695-ba3a-43de-a31a-23119ccf87ba",
+  LOG_LAYOUT_TAB_RETRY_WIDGET: "11727c1a-5145-46de-9742-88d07d64c72e",
+  SAMPLE_RULE_PHONE: "8440da8d-8ac4-4f4b-baa2-4d62936cde35",
+  SAMPLE_RULE_EMAIL: "d123cde4-05aa-44e1-86f6-454be1d7048b",
+  SAMPLE_RULE_FULLNAME: "00e49fe8-1b48-4f5b-aaf4-414d0923c712",
+  // Views & Navigation
+  SOURCES_VIEW: "4435cd43-5c13-472f-b4f9-b686c0f46285",
+  LOGS_VIEW: "a2cd0a93-9778-4ba5-99d9-b8b89c4fb39d",
+  INTAKE_NAV_ITEM: "e81bf288-5686-4713-86ae-e2947b124cab",
+  // ── v0.4.0 ────────────────────────────────────────────────────────────────
+  // IntakeLog fields — quarantine, idempotency, replay lineage
+  INTAKE_LOG_IDEMPOTENCY_KEY: "bf91e4c0-6477-41f2-a9bd-fb159d3091d4",
+  INTAKE_LOG_SPAM_SCORE: "4e250af2-925f-4724-85f6-f353a6bb4cfd",
+  INTAKE_LOG_QUARANTINE_REASON: "323b3c3e-a111-45d1-a211-cf70efa6cd9e",
+  INTAKE_LOG_REPLAY_OF: "b68876b1-0045-4eaa-a4e7-f0634e110ef1",
+  // IntakeSource fields — silence detection, spam, merge policy
+  INTAKE_SOURCE_EXPECTED_CADENCE: "a97c3906-5555-4e60-a6d6-84155a4e00a6",
+  INTAKE_SOURCE_HEALTH_STATUS: "2ad13b20-5bd7-450a-b52d-bcf208373cf5",
+  INTAKE_SOURCE_SILENT_SINCE: "d3395601-f29f-4e57-98eb-561ab011cc72",
+  INTAKE_SOURCE_ALERT_WEBHOOK: "5a066d62-0426-41c1-b34c-1a7e881ce854",
+  INTAKE_SOURCE_LAST_ALERT_AT: "fc64a598-ccbe-44e3-bd42-716e32d626a2",
+  INTAKE_SOURCE_HONEYPOT_FIELD: "5c145686-50de-496c-bb45-a30c8b39034c",
+  INTAKE_SOURCE_MERGE_POLICY: "5a946f85-b1c2-493e-92c6-31c50e637a7e",
+  // IntakeFieldRule fields
+  INTAKE_FIELD_RULE_MERGE_STRATEGY: "40c6fdcb-527a-4691-8518-c40a3d3e34c6",
+  // Logic Functions
+  CONTRACT_LOGIC_FUNCTION: "2eea4152-1b08-4b8c-903c-f4c7ee7275d0",
+  REPLAY_LOG_LOGIC_FUNCTION: "8ff98390-7358-4a91-84f3-435f758182a3",
+  REPLAY_BULK_LOGIC_FUNCTION: "b82ed4c4-07bc-4095-8ee5-611200626dc0",
+  QUARANTINE_LIST_LOGIC_FUNCTION: "0203643c-2a97-4e7c-b4a5-b76d721cf23a",
+  QUARANTINE_RELEASE_LOGIC_FUNCTION: "5a10d4fe-c807-45c6-9e61-c191d4e37b4e",
+  QUARANTINE_DISCARD_LOGIC_FUNCTION: "1454a56e-6197-4dfd-9b41-5cc3b1436af7",
+  CHECK_SILENCE_LOGIC_FUNCTION: "e88cd5f2-ab96-4f89-ac55-78db66b32d66",
+  // Application variables
+  VAR_MERGE_POLICY: "a84fe9fd-3d7c-41d9-b0e8-dfdc1a87f348",
+  VAR_SPAM_FILTER_ENABLED: "570d3ba8-1904-4bad-a5ce-27e208e6414a",
+  VAR_SPAM_SCORE_THRESHOLD: "4395574d-24b4-4e0e-afa3-1e90fcd4f470",
+  VAR_HONEYPOT_FIELD: "2cf56c56-f5cb-47c5-aa43-84f301060a95",
+  VAR_RAW_PAYLOAD_RETENTION: "f3314ad6-05b9-4127-bb88-cea5f2018dc9",
+  VAR_RAW_PAYLOAD_MAX_BYTES: "b002ca76-df3d-47b4-8ac5-d3f562239c48",
+  VAR_REPLAY_MAX_BATCH: "cf55956f-177e-4afd-8d9f-7f42c614209c"
+};
+
+// src/lib/rest-client.ts
+var apiUrl = () => process.env["TWENTY_API_URL"] ?? "";
+var token = () => process.env["TWENTY_APP_ACCESS_TOKEN"] ?? "";
+async function request(base, method, path, body) {
+  const res = await fetch(`${base}${path}`, {
+    method,
+    headers: {
+      Authorization: `Bearer ${token()}`,
+      "Content-Type": "application/json"
+    },
+    body: body !== void 0 ? JSON.stringify(body) : void 0
+  });
+  const text = await res.text();
+  if (!res.ok) {
+    throw new Error(`${method} ${path} \u2192 ${res.status}: ${text}`);
+  }
+  return JSON.parse(text);
+}
+var coreApi = {
+  get: (path) => request(`${apiUrl()}/rest`, "GET", path),
+  post: (path, body) => request(`${apiUrl()}/rest`, "POST", path, body),
+  patch: (path, body) => request(`${apiUrl()}/rest`, "PATCH", path, body)
+};
+
+// src/logic-functions/quarantine-list.ts
+var handler = async (params) => {
+  const query = params.queryParameters ?? {};
+  const limit = clamp(parseInt(query["limit"] ?? "50", 10), 1, 200);
+  const status = query["status"] === "DISCARDED" ? "DISCARDED" : "QUARANTINED";
+  try {
+    const res = await coreApi.get(
+      `/intakeLogs?filter=status[eq]:${status}&orderBy=processedAt[DescNullsLast]&limit=${limit}`
+    );
+    const logs = (res.data?.intakeLogs?.edges ?? []).map((e) => e.node);
+    return {
+      statusCode: 200,
+      body: {
+        status,
+        count: logs.length,
+        logs: logs.map((log) => ({
+          id: log.id,
+          spamScore: log.spamScore,
+          reason: log.quarantineReason,
+          processedAt: log.processedAt,
+          intakeSourceId: log.intakeSourceId,
+          payloadPreview: preview(log.rawPayload),
+          canRelease: Boolean(log.rawPayload)
+        }))
+      }
+    };
+  } catch (e) {
+    return { statusCode: 500, body: { error: `Could not read quarantine: ${String(e)}` } };
+  }
+};
+function preview(raw) {
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    const keys = Object.keys(parsed).slice(0, 12);
+    const out = {};
+    for (const key of keys) {
+      const value = parsed[key];
+      out[key] = typeof value === "string" && value.length > 200 ? `${value.slice(0, 200)}\u2026` : value;
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+function clamp(n, min, max) {
+  if (!Number.isFinite(n)) return min;
+  return Math.min(Math.max(n, min), max);
+}
+var quarantine_list_default = defineLogicFunction({
+  universalIdentifier: IDS.QUARANTINE_LIST_LOGIC_FUNCTION,
+  name: "intake-quarantine-list",
+  description: "List payloads the spam filter is holding, with the reason each was held.",
+  timeoutSeconds: 15,
+  handler,
+  httpRouteTriggerSettings: {
+    path: "/intake/quarantine",
+    httpMethod: "GET",
+    isAuthRequired: true
+  }
+});
+export {
+  quarantine_list_default as default
+};
+//# sourceMappingURL=quarantine-list.mjs.map

package/src/logic-functions/quarantine-list.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["twenty-sdk-define-stub:__twenty-sdk-define-stub__", "../../../../src/constants/universal-identifiers.ts", "../../../../src/lib/rest-client.ts", "../../../../src/logic-functions/quarantine-list.ts"],
+  "sourcesContent": ["\n// Auto-generated stub for twenty-sdk/define injected by the SDK CLI build.\n// Real implementations would pull in zod, twenty-shared and ~1MB of code; at\n// runtime only `default.config.handler` is consumed, so tiny no-ops suffice.\nconst __defineFactoryStub = (config) => ({\n  success: true,\n  config,\n  errors: [],\n});\n\nconst __anyHandler = {\n  get(_target, prop) {\n    if (prop === '__esModule') return true;\n    if (prop === Symbol.toPrimitive) return () => '';\n    if (typeof prop === 'symbol') return undefined;\n    return new Proxy(() => undefined, __anyHandler);\n  },\n  apply() {\n    return new Proxy(() => undefined, __anyHandler);\n  },\n};\nconst __anyStub = new Proxy(() => undefined, __anyHandler);\n\nexport const createValidationResult = __defineFactoryStub;\nexport const defineAgent = __defineFactoryStub;\nexport const defineApplication = __defineFactoryStub;\nexport const defineApplicationRole = __defineFactoryStub;\nexport const defineCommandMenuItem = __defineFactoryStub;\nexport const defineConnectionProvider = __defineFactoryStub;\nexport const defineField = __defineFactoryStub;\nexport const defineFrontComponent = __defineFactoryStub;\nexport const defineIndex = __defineFactoryStub;\nexport const defineLogicFunction = __defineFactoryStub;\nexport const defineNavigationMenuItem = __defineFactoryStub;\nexport const defineObject = __defineFactoryStub;\nexport const definePageLayout = __defineFactoryStub;\nexport const definePageLayoutTab = __defineFactoryStub;\nexport const definePermissionFlag = __defineFactoryStub;\nexport const definePostInstallLogicFunction = __defineFactoryStub;\nexport const definePreInstallLogicFunction = __defineFactoryStub;\nexport const defineRole = __defineFactoryStub;\nexport const defineSettingsFrontComponent = __defineFactoryStub;\nexport const defineSkill = __defineFactoryStub;\nexport const defineUninstallLogicFunction = __defineFactoryStub;\nexport const defineView = __defineFactoryStub;\nexport const defineViewField = __defineFactoryStub;\nexport const AggregateOperations = __anyStub;\nexport const DateDisplayFormat = __anyStub;\nexport const FieldMetadataSettingsOnClickAction = __anyStub;\nexport const FieldType = __anyStub;\nexport const HTTPMethod = __anyStub;\nexport const NavigationMenuItemType = __anyStub;\nexport const NumberDataType = __anyStub;\nexport const ObjectOpenRecordIn = __anyStub;\nexport const ObjectRecordGroupByDateGranularity = __anyStub;\nexport const OnDeleteAction = __anyStub;\nexport const PageLayoutTabLayoutMode = __anyStub;\nexport const PageLayoutType = __anyStub;\nexport const RelationType = __anyStub;\nexport const RowLevelPermissionPredicateGroupLogicalOperator = __anyStub;\nexport const RowLevelPermissionPredicateOperand = __anyStub;\nexport const STANDARD_OBJECT = __anyStub;\nexport const STANDARD_OBJECT_UNIVERSAL_IDENTIFIERS = __anyStub;\nexport const STANDARD_PAGE_LAYOUT = __anyStub;\nexport const STANDARD_PAGE_LAYOUT_UNIVERSAL_IDENTIFIERS = __anyStub;\nexport const SystemPermissionFlag = __anyStub;\nexport const ViewCalendarLayout = __anyStub;\nexport const ViewFilterGroupLogicalOperator = __anyStub;\nexport const ViewFilterOperand = __anyStub;\nexport const ViewKey = __anyStub;\nexport const ViewOpenRecordIn = __anyStub;\nexport const ViewSortDirection = __anyStub;\nexport const ViewType = __anyStub;\nexport const ViewVisibility = __anyStub;\nexport const canAccessFullAdminPanel = __anyStub;\nexport const canImpersonate = __anyStub;\nexport const every = __anyStub;\nexport const everyDefined = __anyStub;\nexport const everyEquals = __anyStub;\nexport const favoriteRecordIds = __anyStub;\nexport const featureFlags = __anyStub;\nexport const getFieldUniversalIdentifier = __anyStub;\nexport const getSystemRelationFieldUniversalIdentifier = __anyStub;\nexport const getSystemViewFieldUniversalIdentifier = __anyStub;\nexport const getSystemViewUniversalIdentifier = __anyStub;\nexport const hasAnySoftDeleteFilterOnView = __anyStub;\nexport const includes = __anyStub;\nexport const includesEvery = __anyStub;\nexport const isDashboardPageLayoutInEditMode = __anyStub;\nexport const isDefined = __anyStub;\nexport const isInSidePanel = __anyStub;\nexport const isLayoutCustomizationModeEnabled = __anyStub;\nexport const isNonEmptyString = __anyStub;\nexport const isSelectAll = __anyStub;\nexport const none = __anyStub;\nexport const noneDefined = __anyStub;\nexport const noneEquals = __anyStub;\nexport const numberOfSelectedRecords = __anyStub;\nexport const objectMetadataItem = __anyStub;\nexport const objectMetadataLabel = __anyStub;\nexport const objectPermissions = __anyStub;\nexport const pageType = __anyStub;\nexport const selectedRecords = __anyStub;\nexport const some = __anyStub;\nexport const someDefined = __anyStub;\nexport const someEquals = __anyStub;\nexport const someNonEmptyString = __anyStub;\nexport const targetObjectReadPermissions = __anyStub;\nexport const targetObjectWritePermissions = __anyStub;\nexport const validateFields = __anyStub;\n", "export const IDS = {\n  APPLICATION: '96a389dd-384a-43a1-a376-9d3cf01b6ab7',\n  DEFAULT_ROLE: '3dd2cdb0-32c7-44b4-9f7b-0a9c667ec249',\n\n  // Objects\n  INTAKE_SOURCE_OBJECT: '8c1c227c-db7d-4834-b328-cacbe8af0bfc',\n  INTAKE_LOG_OBJECT: 'b77a2439-1503-4ef6-ab8b-8f4293bc19da',\n  INTAKE_FIELD_RULE_OBJECT: 'e74df817-ff25-4bfb-bdf0-651662ca327e',\n\n  // IntakeSource fields\n  INTAKE_SOURCE_NAME: '0deb7e4b-bb90-4c86-b903-5208b42041e2',\n  INTAKE_SOURCE_SLUG: '18f7645b-2dce-4145-b1b6-9cc3332c0578',\n  INTAKE_SOURCE_TARGET_OBJECT: '65f3d7f7-a601-4375-9c67-684d0044620b',\n  INTAKE_SOURCE_SECRET: '4c919402-07f5-4041-ade6-a42402f1881f',\n  INTAKE_SOURCE_STATUS: '6f1fa6fe-02b4-48ab-b1ee-97c600bbf483',\n  INTAKE_SOURCE_CREATE_OPP: '67ae59aa-2275-4ef2-b594-137f6bfafd99',\n  INTAKE_SOURCE_OPP_TEMPLATE: '3907b346-77a6-4c79-a4d7-6e1cc20bb82b',\n  INTAKE_SOURCE_TOTAL_INGESTED: '69655a93-bc70-48bd-874e-aeccc63ee1a8',\n  INTAKE_SOURCE_TOTAL_FAILED: '27b3a499-183e-4cc3-8e40-938f953a986d',\n  INTAKE_SOURCE_LAST_INGESTED: 'e167f628-9865-468e-894a-b4b6150cec26',\n\n  // IntakeLog fields\n  INTAKE_LOG_SOURCE_RELATION: 'b1c623ea-7a9a-47a5-bee4-35fdd668a637',\n  INTAKE_LOG_STATUS: '8b6d26d1-f89c-486c-a617-9f9f6a9ca36d',\n  INTAKE_LOG_PAYLOAD_HASH: 'c43bb1ad-e78a-4c60-bd95-02475ede7f44',\n  INTAKE_LOG_RECORD_ID: '77a55116-a64b-4954-8369-341022dd5bdd',\n  INTAKE_LOG_RECORD_TYPE: '02154e96-5808-48ed-8838-51083f174550',\n  INTAKE_LOG_FIELDS_CREATED: '2295ca2b-b559-4b38-9771-12dd8d3d76d7',\n  INTAKE_LOG_FIELDS_MATCHED: '83d07a0f-5bcd-4fb1-9759-f9b04b9381d8',\n  INTAKE_LOG_OVERFLOW_COUNT: '4090acb1-f48a-4957-bb91-c642f8f434a7',\n  INTAKE_LOG_PROCESSING_MS: 'a9191f27-4b40-42e9-8cce-20c75900e12c',\n  INTAKE_LOG_ERROR: '8d9979f1-9774-43a8-b958-d1b37bd4ecc7',\n  INTAKE_LOG_PROCESSED_AT: 'a8d99fbd-722e-4987-8afe-b830ac026f0a',\n\n  // IntakeFieldRule fields\n  INTAKE_FIELD_RULE_SOURCE_RELATION: '396dd1f1-3873-4efa-a6bb-7b41eda14d83',\n  INTAKE_FIELD_RULE_INPUT_PATTERN: '757201a0-9f64-47b9-bf3a-a793074bf84e',\n  INTAKE_FIELD_RULE_CANONICAL_NAME: 'fafebc55-a2cc-4c9f-975b-050c2676659d',\n  INTAKE_FIELD_RULE_FIELD_TYPE: '72d1f6d8-d63e-419e-a244-8127d7b4705f',\n  INTAKE_FIELD_RULE_PRIORITY: '911df299-940b-44f9-92f7-3fd01fde01a7',\n  INTAKE_FIELD_RULE_IS_ACTIVE: '6f9cd96d-aecd-437f-a7b5-d45548782771',\n  INTAKE_FIELD_RULE_TARGET_OBJECT: '7b8411a7-5e1d-40f2-a20c-683c07f67926',\n\n  // Logic Functions\n  WEBHOOK_LOGIC_FUNCTION: '8323c257-48fe-4bb6-b1dd-166844f575c0',\n  HEALTH_LOGIC_FUNCTION: '4ece4e39-286b-4820-81f4-b7beee71d092',\n  REGISTER_LOGIC_FUNCTION: '56d46e18-6cae-4d99-9893-b7d70740c9db',\n\n  // IntakeSource reverse relation fields\n  INTAKE_SOURCE_LOGS_REVERSE: '6ecfa369-22e0-4812-bb75-4338cea8be65',\n  INTAKE_SOURCE_RULES_REVERSE: '776fefaf-0eee-4ec0-93e0-d11bd80c1e20',\n\n  // v0.2.0 \u2014 rawPayload + retry + post-install + UI\n  INTAKE_LOG_RAW_PAYLOAD: 'b65c9e1c-f2c1-4c52-a5b3-1e1ac3139692',\n  RETRY_LOGIC_FUNCTION: '90f20396-a69a-4ae4-af20-6be65c565bb5',\n  POST_INSTALL_LOGIC_FUNCTION: 'e836fdd6-fd54-4aa4-ba6d-87d5a02148ef',\n  LOG_RETRY_FRONT_COMPONENT: '0cb97f6d-30e2-48c8-90e1-241b82870b4d',\n  FIELD_RULES_TABLE_FRONT_COMPONENT: 'c35faad9-3468-4746-9c1c-b13d73e5e09b',\n  SOURCE_PAGE_LAYOUT: '8c894ba8-5c8c-45ed-b0af-1d22ede93eb9',\n  SOURCE_LAYOUT_TAB_RULES: '80f5c49a-083c-4062-8bd5-ae158abb6c33',\n  SOURCE_LAYOUT_TAB_RULES_WIDGET: '26a9ebb7-1d59-4b03-a018-56968f6df224',\n  LOG_PAGE_LAYOUT: 'b0972802-ede5-463c-9f59-cb05f04957db',\n  LOG_LAYOUT_TAB_RETRY: '6b109695-ba3a-43de-a31a-23119ccf87ba',\n  LOG_LAYOUT_TAB_RETRY_WIDGET: '11727c1a-5145-46de-9742-88d07d64c72e',\n  SAMPLE_RULE_PHONE: '8440da8d-8ac4-4f4b-baa2-4d62936cde35',\n  SAMPLE_RULE_EMAIL: 'd123cde4-05aa-44e1-86f6-454be1d7048b',\n  SAMPLE_RULE_FULLNAME: '00e49fe8-1b48-4f5b-aaf4-414d0923c712',\n\n  // Views & Navigation\n  SOURCES_VIEW: '4435cd43-5c13-472f-b4f9-b686c0f46285',\n  LOGS_VIEW: 'a2cd0a93-9778-4ba5-99d9-b8b89c4fb39d',\n  INTAKE_NAV_ITEM: 'e81bf288-5686-4713-86ae-e2947b124cab',\n\n  // \u2500\u2500 v0.4.0 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  // IntakeLog fields \u2014 quarantine, idempotency, replay lineage\n  INTAKE_LOG_IDEMPOTENCY_KEY: 'bf91e4c0-6477-41f2-a9bd-fb159d3091d4',\n  INTAKE_LOG_SPAM_SCORE: '4e250af2-925f-4724-85f6-f353a6bb4cfd',\n  INTAKE_LOG_QUARANTINE_REASON: '323b3c3e-a111-45d1-a211-cf70efa6cd9e',\n  INTAKE_LOG_REPLAY_OF: 'b68876b1-0045-4eaa-a4e7-f0634e110ef1',\n\n  // IntakeSource fields \u2014 silence detection, spam, merge policy\n  INTAKE_SOURCE_EXPECTED_CADENCE: 'a97c3906-5555-4e60-a6d6-84155a4e00a6',\n  INTAKE_SOURCE_HEALTH_STATUS: '2ad13b20-5bd7-450a-b52d-bcf208373cf5',\n  INTAKE_SOURCE_SILENT_SINCE: 'd3395601-f29f-4e57-98eb-561ab011cc72',\n  INTAKE_SOURCE_ALERT_WEBHOOK: '5a066d62-0426-41c1-b34c-1a7e881ce854',\n  INTAKE_SOURCE_LAST_ALERT_AT: 'fc64a598-ccbe-44e3-bd42-716e32d626a2',\n  INTAKE_SOURCE_HONEYPOT_FIELD: '5c145686-50de-496c-bb45-a30c8b39034c',\n  INTAKE_SOURCE_MERGE_POLICY: '5a946f85-b1c2-493e-92c6-31c50e637a7e',\n\n  // IntakeFieldRule fields\n  INTAKE_FIELD_RULE_MERGE_STRATEGY: '40c6fdcb-527a-4691-8518-c40a3d3e34c6',\n\n  // Logic Functions\n  CONTRACT_LOGIC_FUNCTION: '2eea4152-1b08-4b8c-903c-f4c7ee7275d0',\n  REPLAY_LOG_LOGIC_FUNCTION: '8ff98390-7358-4a91-84f3-435f758182a3',\n  REPLAY_BULK_LOGIC_FUNCTION: 'b82ed4c4-07bc-4095-8ee5-611200626dc0',\n  QUARANTINE_LIST_LOGIC_FUNCTION: '0203643c-2a97-4e7c-b4a5-b76d721cf23a',\n  QUARANTINE_RELEASE_LOGIC_FUNCTION: '5a10d4fe-c807-45c6-9e61-c191d4e37b4e',\n  QUARANTINE_DISCARD_LOGIC_FUNCTION: '1454a56e-6197-4dfd-9b41-5cc3b1436af7',\n  CHECK_SILENCE_LOGIC_FUNCTION: 'e88cd5f2-ab96-4f89-ac55-78db66b32d66',\n\n  // Application variables\n  VAR_MERGE_POLICY: 'a84fe9fd-3d7c-41d9-b0e8-dfdc1a87f348',\n  VAR_SPAM_FILTER_ENABLED: '570d3ba8-1904-4bad-a5ce-27e208e6414a',\n  VAR_SPAM_SCORE_THRESHOLD: '4395574d-24b4-4e0e-afa3-1e90fcd4f470',\n  VAR_HONEYPOT_FIELD: '2cf56c56-f5cb-47c5-aa43-84f301060a95',\n  VAR_RAW_PAYLOAD_RETENTION: 'f3314ad6-05b9-4127-bb88-cea5f2018dc9',\n  VAR_RAW_PAYLOAD_MAX_BYTES: 'b002ca76-df3d-47b4-8ac5-d3f562239c48',\n  VAR_REPLAY_MAX_BATCH: 'cf55956f-177e-4afd-8d9f-7f42c614209c',\n} as const;\n", "/**\n * Minimal REST client for Twenty's Core and Metadata APIs.\n * Uses raw fetch so it works with dynamically created custom fields\n * that the typed SDK client doesn't know about at build time.\n */\n\nconst apiUrl = () => process.env['TWENTY_API_URL'] ?? '';\nconst token = () => process.env['TWENTY_APP_ACCESS_TOKEN'] ?? '';\n\nasync function request<T>(\n  base: string,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const res = await fetch(`${base}${path}`, {\n    method,\n    headers: {\n      Authorization: `Bearer ${token()}`,\n      'Content-Type': 'application/json',\n    },\n    body: body !== undefined ? JSON.stringify(body) : undefined,\n  });\n\n  const text = await res.text();\n  if (!res.ok) {\n    throw new Error(`${method} ${path} \u2192 ${res.status}: ${text}`);\n  }\n  return JSON.parse(text) as T;\n}\n\nexport const coreApi = {\n  get: <T>(path: string) => request<T>(`${apiUrl()}/rest`, 'GET', path),\n  post: <T>(path: string, body: unknown) => request<T>(`${apiUrl()}/rest`, 'POST', path, body),\n  patch: <T>(path: string, body: unknown) => request<T>(`${apiUrl()}/rest`, 'PATCH', path, body),\n};\n\nexport const metaApi = {\n  get: <T>(path: string) => request<T>(`${apiUrl()}/rest/metadata`, 'GET', path),\n  post: <T>(path: string, body: unknown) => request<T>(`${apiUrl()}/rest/metadata`, 'POST', path, body),\n};\n\n/** Run a raw GraphQL query against the /graphql endpoint. */\nexport async function gql<T = unknown>(\n  query: string,\n  variables?: Record<string, unknown>,\n): Promise<T> {\n  return request<T>(`${apiUrl()}`, 'POST', '/graphql', { query, variables });\n}\n", "import { defineLogicFunction, type RoutePayload } from 'twenty-sdk/define';\nimport { IDS } from '../constants/universal-identifiers';\nimport { coreApi } from '../lib/rest-client';\n\ntype QuarantinedLog = {\n  id: string;\n  status: string;\n  spamScore: number | null;\n  quarantineReason: string | null;\n  rawPayload: string | null;\n  processedAt: string | null;\n  intakeSourceId: string | null;\n};\n\n/**\n * What is being held, and why.\n *\n * A quarantine nobody can see is just a slower way of losing leads, so the\n * reason and the score come back alongside a preview of the payload \u2014 enough to\n * recognise a real customer without opening the log record by hand.\n */\nconst handler = async (params: RoutePayload) => {\n  const query = (params.queryParameters ?? {}) as Record<string, string | undefined>;\n  const limit = clamp(parseInt(query['limit'] ?? '50', 10), 1, 200);\n  const status = query['status'] === 'DISCARDED' ? 'DISCARDED' : 'QUARANTINED';\n\n  try {\n    const res = await coreApi.get<{ data: { intakeLogs: { edges: Array<{ node: QuarantinedLog }> } } }>(\n      `/intakeLogs?filter=status[eq]:${status}&orderBy=processedAt[DescNullsLast]&limit=${limit}`,\n    );\n\n    const logs = (res.data?.intakeLogs?.edges ?? []).map((e) => e.node);\n\n    return {\n      statusCode: 200,\n      body: {\n        status,\n        count: logs.length,\n        logs: logs.map((log) => ({\n          id: log.id,\n          spamScore: log.spamScore,\n          reason: log.quarantineReason,\n          processedAt: log.processedAt,\n          intakeSourceId: log.intakeSourceId,\n          payloadPreview: preview(log.rawPayload),\n          canRelease: Boolean(log.rawPayload),\n        })),\n      },\n    };\n  } catch (e) {\n    return { statusCode: 500, body: { error: `Could not read quarantine: ${String(e)}` } };\n  }\n};\n\n/**\n * A few identifying fields rather than the whole body \u2014 enough to judge, without\n * putting every stored payload into one response.\n */\nfunction preview(raw: string | null): Record<string, unknown> | null {\n  if (!raw) return null;\n  try {\n    const parsed = JSON.parse(raw) as Record<string, unknown>;\n    const keys = Object.keys(parsed).slice(0, 12);\n    const out: Record<string, unknown> = {};\n    for (const key of keys) {\n      const value = parsed[key];\n      out[key] = typeof value === 'string' && value.length > 200\n        ? `${value.slice(0, 200)}\u2026`\n        : value;\n    }\n    return out;\n  } catch {\n    return null;\n  }\n}\n\nfunction clamp(n: number, min: number, max: number): number {\n  if (!Number.isFinite(n)) return min;\n  return Math.min(Math.max(n, min), max);\n}\n\nexport default defineLogicFunction({\n  universalIdentifier: IDS.QUARANTINE_LIST_LOGIC_FUNCTION,\n  name: 'intake-quarantine-list',\n  description: 'List payloads the spam filter is holding, with the reason each was held.',\n  timeoutSeconds: 15,\n  handler,\n  httpRouteTriggerSettings: {\n    path: '/intake/quarantine',\n    httpMethod: 'GET',\n    isAuthRequired: true,\n  },\n});\n"],
+  "mappings": ";;;;AAIA,IAAM,sBAAsB,CAAC,YAAY;AAAA,EACvC,SAAS;AAAA,EACT;AAAA,EACA,QAAQ,CAAC;AACX;AAEA,IAAM,eAAe;AAAA,EACnB,IAAI,SAAS,MAAM;AACjB,QAAI,SAAS,aAAc,QAAO;AAClC,QAAI,SAAS,OAAO,YAAa,QAAO,MAAM;AAC9C,QAAI,OAAO,SAAS,SAAU,QAAO;AACrC,WAAO,IAAI,MAAM,MAAM,QAAW,YAAY;AAAA,EAChD;AAAA,EACA,QAAQ;AACN,WAAO,IAAI,MAAM,MAAM,QAAW,YAAY;AAAA,EAChD;AACF;AACA,IAAM,YAAY,IAAI,MAAM,MAAM,QAAW,YAAY;AAWlD,IAAM,sBAAsB;;;AChC5B,IAAM,MAAM;AAAA,EACjB,aAAa;AAAA,EACb,cAAc;AAAA;AAAA,EAGd,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,0BAA0B;AAAA;AAAA,EAG1B,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,6BAA6B;AAAA,EAC7B,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,0BAA0B;AAAA,EAC1B,4BAA4B;AAAA,EAC5B,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA,EAC5B,6BAA6B;AAAA;AAAA,EAG7B,4BAA4B;AAAA,EAC5B,mBAAmB;AAAA,EACnB,yBAAyB;AAAA,EACzB,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,2BAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,0BAA0B;AAAA,EAC1B,kBAAkB;AAAA,EAClB,yBAAyB;AAAA;AAAA,EAGzB,mCAAmC;AAAA,EACnC,iCAAiC;AAAA,EACjC,kCAAkC;AAAA,EAClC,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA,EAC5B,6BAA6B;AAAA,EAC7B,iCAAiC;AAAA;AAAA,EAGjC,wBAAwB;AAAA,EACxB,uBAAuB;AAAA,EACvB,yBAAyB;AAAA;AAAA,EAGzB,4BAA4B;AAAA,EAC5B,6BAA6B;AAAA;AAAA,EAG7B,wBAAwB;AAAA,EACxB,sBAAsB;AAAA,EACtB,6BAA6B;AAAA,EAC7B,2BAA2B;AAAA,EAC3B,mCAAmC;AAAA,EACnC,oBAAoB;AAAA,EACpB,yBAAyB;AAAA,EACzB,gCAAgC;AAAA,EAChC,iBAAiB;AAAA,EACjB,sBAAsB;AAAA,EACtB,6BAA6B;AAAA,EAC7B,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA;AAAA,EAGtB,cAAc;AAAA,EACd,WAAW;AAAA,EACX,iBAAiB;AAAA;AAAA;AAAA,EAIjB,4BAA4B;AAAA,EAC5B,uBAAuB;AAAA,EACvB,8BAA8B;AAAA,EAC9B,sBAAsB;AAAA;AAAA,EAGtB,gCAAgC;AAAA,EAChC,6BAA6B;AAAA,EAC7B,4BAA4B;AAAA,EAC5B,6BAA6B;AAAA,EAC7B,6BAA6B;AAAA,EAC7B,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA;AAAA,EAG5B,kCAAkC;AAAA;AAAA,EAGlC,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,4BAA4B;AAAA,EAC5B,gCAAgC;AAAA,EAChC,mCAAmC;AAAA,EACnC,mCAAmC;AAAA,EACnC,8BAA8B;AAAA;AAAA,EAG9B,kBAAkB;AAAA,EAClB,yBAAyB;AAAA,EACzB,0BAA0B;AAAA,EAC1B,oBAAoB;AAAA,EACpB,2BAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,sBAAsB;AACxB;;;ACvGA,IAAM,SAAS,MAAM,QAAQ,IAAI,gBAAgB,KAAK;AACtD,IAAM,QAAQ,MAAM,QAAQ,IAAI,yBAAyB,KAAK;AAE9D,eAAe,QACb,MACA,QACA,MACA,MACY;AACZ,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,IAAI;AAAA,IACxC;AAAA,IACA,SAAS;AAAA,MACP,eAAe,UAAU,MAAM,CAAC;AAAA,MAChC,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,EACpD,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,GAAG,MAAM,IAAI,IAAI,WAAM,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EAC9D;AACA,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,UAAU;AAAA,EACrB,KAAK,CAAI,SAAiB,QAAW,GAAG,OAAO,CAAC,SAAS,OAAO,IAAI;AAAA,EACpE,MAAM,CAAI,MAAc,SAAkB,QAAW,GAAG,OAAO,CAAC,SAAS,QAAQ,MAAM,IAAI;AAAA,EAC3F,OAAO,CAAI,MAAc,SAAkB,QAAW,GAAG,OAAO,CAAC,SAAS,SAAS,MAAM,IAAI;AAC/F;;;ACdA,IAAM,UAAU,OAAO,WAAyB;AAC9C,QAAM,QAAS,OAAO,mBAAmB,CAAC;AAC1C,QAAM,QAAQ,MAAM,SAAS,MAAM,OAAO,KAAK,MAAM,EAAE,GAAG,GAAG,GAAG;AAChE,QAAM,SAAS,MAAM,QAAQ,MAAM,cAAc,cAAc;AAE/D,MAAI;AACF,UAAM,MAAM,MAAM,QAAQ;AAAA,MACxB,iCAAiC,MAAM,6CAA6C,KAAK;AAAA,IAC3F;AAEA,UAAM,QAAQ,IAAI,MAAM,YAAY,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;AAElE,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,MAAM;AAAA,QACJ;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,MAAM,KAAK,IAAI,CAAC,SAAS;AAAA,UACvB,IAAI,IAAI;AAAA,UACR,WAAW,IAAI;AAAA,UACf,QAAQ,IAAI;AAAA,UACZ,aAAa,IAAI;AAAA,UACjB,gBAAgB,IAAI;AAAA,UACpB,gBAAgB,QAAQ,IAAI,UAAU;AAAA,UACtC,YAAY,QAAQ,IAAI,UAAU;AAAA,QACpC,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,WAAO,EAAE,YAAY,KAAK,MAAM,EAAE,OAAO,8BAA8B,OAAO,CAAC,CAAC,GAAG,EAAE;AAAA,EACvF;AACF;AAMA,SAAS,QAAQ,KAAoD;AACnE,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,UAAM,OAAO,OAAO,KAAK,MAAM,EAAE,MAAM,GAAG,EAAE;AAC5C,UAAM,MAA+B,CAAC;AACtC,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,OAAO,GAAG;AACxB,UAAI,GAAG,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,MACnD,GAAG,MAAM,MAAM,GAAG,GAAG,CAAC,WACtB;AAAA,IACN;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,MAAM,GAAW,KAAa,KAAqB;AAC1D,MAAI,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO;AAChC,SAAO,KAAK,IAAI,KAAK,IAAI,GAAG,GAAG,GAAG,GAAG;AACvC;AAEA,IAAO,0BAAQ,oBAAoB;AAAA,EACjC,qBAAqB,IAAI;AAAA,EACzB,MAAM;AAAA,EACN,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB;AAAA,EACA,0BAA0B;AAAA,IACxB,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,gBAAgB;AAAA,EAClB;AACF,CAAC;",
+  "names": []
+}

package/src/logic-functions/quarantine-list.ts

@@ -0,0 +1,93 @@
+import { defineLogicFunction, type RoutePayload } from 'twenty-sdk/define';
+import { IDS } from '../constants/universal-identifiers';
+import { coreApi } from '../lib/rest-client';
+
+type QuarantinedLog = {
+  id: string;
+  status: string;
+  spamScore: number | null;
+  quarantineReason: string | null;
+  rawPayload: string | null;
+  processedAt: string | null;
+  intakeSourceId: string | null;
+};
+
+/**
+ * What is being held, and why.
+ *
+ * A quarantine nobody can see is just a slower way of losing leads, so the
+ * reason and the score come back alongside a preview of the payload — enough to
+ * recognise a real customer without opening the log record by hand.
+ */
+const handler = async (params: RoutePayload) => {
+  const query = (params.queryParameters ?? {}) as Record<string, string | undefined>;
+  const limit = clamp(parseInt(query['limit'] ?? '50', 10), 1, 200);
+  const status = query['status'] === 'DISCARDED' ? 'DISCARDED' : 'QUARANTINED';
+
+  try {
+    const res = await coreApi.get<{ data: { intakeLogs: { edges: Array<{ node: QuarantinedLog }> } } }>(
+      `/intakeLogs?filter=status[eq]:${status}&orderBy=processedAt[DescNullsLast]&limit=${limit}`,
+    );
+
+    const logs = (res.data?.intakeLogs?.edges ?? []).map((e) => e.node);
+
+    return {
+      statusCode: 200,
+      body: {
+        status,
+        count: logs.length,
+        logs: logs.map((log) => ({
+          id: log.id,
+          spamScore: log.spamScore,
+          reason: log.quarantineReason,
+          processedAt: log.processedAt,
+          intakeSourceId: log.intakeSourceId,
+          payloadPreview: preview(log.rawPayload),
+          canRelease: Boolean(log.rawPayload),
+        })),
+      },
+    };
+  } catch (e) {
+    return { statusCode: 500, body: { error: `Could not read quarantine: ${String(e)}` } };
+  }
+};
+
+/**
+ * A few identifying fields rather than the whole body — enough to judge, without
+ * putting every stored payload into one response.
+ */
+function preview(raw: string | null): Record<string, unknown> | null {
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw) as Record<string, unknown>;
+    const keys = Object.keys(parsed).slice(0, 12);
+    const out: Record<string, unknown> = {};
+    for (const key of keys) {
+      const value = parsed[key];
+      out[key] = typeof value === 'string' && value.length > 200
+        ? `${value.slice(0, 200)}…`
+        : value;
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+
+function clamp(n: number, min: number, max: number): number {
+  if (!Number.isFinite(n)) return min;
+  return Math.min(Math.max(n, min), max);
+}
+
+export default defineLogicFunction({
+  universalIdentifier: IDS.QUARANTINE_LIST_LOGIC_FUNCTION,
+  name: 'intake-quarantine-list',
+  description: 'List payloads the spam filter is holding, with the reason each was held.',
+  timeoutSeconds: 15,
+  handler,
+  httpRouteTriggerSettings: {
+    path: '/intake/quarantine',
+    httpMethod: 'GET',
+    isAuthRequired: true,
+  },
+});