[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22},"handle","amir5","name","dogsspot_puppy_path","path","SOURCE-BUNDLE.part12.txt","project",{"_23":45,"_11":12,"_34":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":33,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_23":24,"_11":14,"_25":26,"_27":-5,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":17,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/amir5/dogsspot_puppy_path/code/SOURCE-BUNDLE.part12.txt","extension","txt","id","e4678688-e4da-4a6c-b79f-52c0c08c6c1a","fileId","9e7d8d4c-9284-11f1-8c16-1607ee4eb77e","parentId","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","branchVersion",1180,"latest",true,"createdAt",["D",1786982907865],"version",34,"fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 12 of 47)\n\nEVERY source file in this project, engine/ included. Restoring these parts and nothing else gives\nyou a tree that builds, typechecks and runs its own test suite with no network and no val.\n\nengine/ is here as of 14 Aug 2026. It used to be left out because val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff\nholds it, which was true of every engine file except engine/watch.ts: a module the val does not run,\nso it was never deployed, so it lived in one container and nothing else. A reclaim destroyed it.\nscripts/deploy.mjs --check still compares engine/ against the val file by file; that is a second\ncheck on the same files now, not the only copy of them.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/build.mjs (engine/ came out of these parts; nothing to fetch first)\n node scripts/typecheck.mjs\n node tests/run-all.mjs\n node scripts/deploy.mjs --check (pulls nothing, proves the val matches what you restored)\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (4 of 129 files)\n\n engine/reachability.ts 41814 bytes bbc8d121e2cc\n engine/registry-diff.ts 4373 bytes 887e7c833e6c\n engine/render.ts 2810 bytes f3a95d4ce610\n\n================================================================================================\n=====FILE engine/puppy_path_v1.1.ts#2 =====\n/ minutes for months of \"not due yet\". The daily safety sweep still catches exits.\n if (s.status === \"slow_track\") {\n const c = Math.max(0, Math.floor(Number(s.lastSlowStepSent)) || 0);\n if (isDue(nextSlowTouch(c).offsetHours, s.slowAnchorAt ?? s.enteredAt, Date.now())) return { due: true, why: `slow touch ${c + 1} due` };\n return { due: false, why: `slow touch ${c + 1} not due yet` };\n }\n return { due: true, why: \"status not modelled by the shortcut — full check\" };\n } catch {\n return { due: true, why: \"due-check threw — full check\" };\n }\n })();\n\n const lastChecked = s.lastCheckedAt ? new Date(s.lastCheckedAt).getTime() : 0;\n const sweepOverdue = Date.now() - lastChecked > safetySweepHours() * HOUR_MS;\n\n if (!dueCheck.due && !sweepOverdue) {\n state[contactId] = { ...s, lastCheckedAt: s.lastCheckedAt };\n out.skipped++;\n skippedNotDue++;\n continue; // zero API calls for this contact this run\n }\n\n try {\n await sleep(120); // v1.2 — pacing between contacts (GHL: 100 req/10s, breach = 401/403 not 429)\n const contact = await getContact(contactId);\n if (!contact) {\n out.log.push(`${contactId}: contact not found, skipping`);\n continue;\n }\n const opportunities = oppsCache.get(contactId) ?? (await getOpenOpportunities(contactId));\n const pupTalkAppt = apptIndex.get(contactId) ?? null;\n const declinedSignal = (contact.tags ?? []).includes(PUP_TALK_DECLINED_TAG);\n const reply = await getReplyStatus(contactId, s.enteredAt, s);\n // v1.9 — settle the PREVIOUS send first: a 2xx from GHL meant \"queued\", never \"delivered\".\n { const dl = await onDeliveryStatus(contactId, s, reply.deliveryStatus, fctx);\n if (dl) { s = dl.s; if (dl.stop) { out.failed++; continue; } } }\n\n const facts: Facts = {\n now: Date.now(),\n contact: {\n id: contactId,\n firstName: contact.firstName ?? \"\",\n companyName: contact.companyName ?? null,\n dnd: !!contact.dnd,\n noEmail: !contact.email,\n noPhone: !contact.phone, // R39 — getContact already fetched it and threw it away\n },\n opportunities,\n pupTalkAppt,\n declinedSignal,\n hasUnansweredInboundReply: reply.hasUnansweredInboundReply,\n conversationCheckFailed: reply.conversationCheckFailed,\n // v1.5 R27 — was that last outbound ours or somebody else's? Ours iff it lands within\n // OURS_TOLERANCE_MS of our own recorded send. No lastSentAt yet (nothing sent to this\n // contact) means any outbound on the thread is definitionally foreign.\n channelBlocked: readChannelConsent(contact),\n optOutRequested: reply.optOutRequested,\n optOutScope: reply.optOutScope,\n foreignOutboundAt: (() => {\n const lo = reply.lastOutboundAt;\n if (lo == null) return null;\n if (!s.lastSentAt) return lo;\n const ours = new Date(s.lastSentAt).getTime();\n if (Number.isNaN(ours)) return lo;\n return Math.abs(lo - ours) <= OURS_TOLERANCE_MS ? null : lo;\n })(),\n };\n\n const decision = decideAction(facts, s);\n const nowIso = new Date().toISOString();\n\n switch (decision.kind) {\n case \"hard_exit\": {\n // v1.4 — R24: capture what this exit was worth, at the only moment the number is knowable.\n const exitVal = pickPrimaryOpportunity(opportunities)?.monetaryValue ?? 0;\n const stepsSent = s.lastMainStepSent + s.lastBranchStepSent + (s.lastSlowStepSent ?? 0);\n state[contactId] = {\n ...applyDecision(decision, s, nowIso),\n exitValue: exitVal,\n exitStepsSent: stepsSent,\n };\n out.log.push(`${contactId}: hard exit -> ${decision.status} (${decision.reason})${exitVal ? ` | value ${exitVal}` : \"\"}`);\n jrow(contactId, \"hard_exit\", `${decision.reason}${exitVal ? ` | value ${exitVal} after ${stepsSent} message(s)` : \"\"}`);\n await honourOptOut(contactId, facts, TEST_MODE, j, GHL, fctx);\n await noteScopedOptOut(contactId, facts, TEST_MODE, fctx, createTask); // v1.13, reachability.ts\n break;\n }\n\n case \"pause_reply\":\n state[contactId] = applyDecision(decision, s, nowIso);\n if (decision.isNewPause) {\n jrow(contactId, \"pause_reply\", \"inbound reply detected — handed to a human\");\n const title = `Reply from ${facts.contact.firstName || \"contact\"} re: puppy path — read and respond personally`;\n try {\n await createTask(\n contactId,\n title,\n \"Auto-created by puppy-path-engine: an inbound reply was detected; the sequence is paused for this contact until a human responds.\",\n );\n out.log.push(`${contactId}: paused (new reply), task created`);\n } catch (e) {\n out.log.push(`${contactId}: paused (new reply), TASK CREATE FAILED: ${String(e).slice(0, 120)}`);\n }\n } else {\n out.log.push(`${contactId}: still paused (reply already flagged, no duplicate task)`);\n }\n break;\n\n case \"advance_status\":\n state[contactId] = applyDecision(decision, s, nowIso);\n out.log.push(`${contactId}: advanced -> ${decision.status}`);\n // \"awaiting_appt_outcome\" here means: they booked a Pup Talk while in the sequence —\n // the attributable event the summary counts as bookedDuringPath.\n jrow(contactId, \"advance_status\", decision.status);\n break;\n\n case \"soft_exit_21d\":\n state[contactId] = applyDecision(decision, s, nowIso);\n try {\n await createTask(\n contactId,\n `Puppy path finished for ${facts.contact.firstName || \"contact\"} — now on the slow track`,\n `Puppy path finished for ${facts.contact.firstName || \"contact\"}, no reply/booking. They are now on the slow track (occasional helpful messages: weekly for a month, then fortnightly, then monthly — no sales asks). Nothing needed unless you want them moved in the pipeline too; the stage was NOT auto-moved — that's Kim's call.`,\n );\n } catch (e) {\n out.log.push(`${contactId}: soft-exit task FAILED: ${String(e).slice(0, 120)}`);\n }\n out.log.push(`${contactId}: 21d complete — moved to slow track (stage NOT moved)`);\n jrow(contactId, \"soft_exit_21d\", \"21-day sequence complete — moved to slow track\");\n break;\n\n case \"branch_complete\":\n state[contactId] = applyDecision(decision, s, nowIso);\n out.log.push(`${contactId}: branch complete`);\n jrow(contactId, \"branch_complete\", s.status);\n break;\n\n case \"send\": {\n // v1.2 — blast ceilings (mirrors the PupsClub val's precedent). A capped send is a pure\n // deferral: state untouched, the step stays due, later runs drain the backlog gradually.\n if (out.sent + out.failed >= maxSendsPerRun()) {\n out.skipped++;\n out.log.push(`${contactId}: send due but MAX_SENDS_PER_RUN (${maxSendsPerRun()}) reached — deferred`);\n break;\n }\n if (!TEST_MODE && sentToday >= maxSendsPerDay()) {\n out.skipped++;\n out.log.push(`${contactId}: send due but MAX_SENDS_PER_DAY (${maxSendsPerDay()}) reached — deferred to tomorrow`);\n break;\n }\n const step = decision.sequence === \"slow\"\n ? slowTemplateAt(decision.stepIndex, Date.now(), s.lastSentStepId).tpl\n : (decision.sequence === \"main\" ? MAIN_SEQUENCE : decision.sequence === \"branch_a\" ? BRANCH_A : BRANCH_B)[decision.stepIndex];\n // v1.7.1 — consent re-checked against the template actually being sent: a monthly\n // re-resolution at the UTC month boundary can flip template (and channel) between\n // decision and execution; an opted-out channel must win that race.\n { const rbr = decision.sequence === \"slow\" ? channelBar(facts, step.channel) : null;\n if (rbr) {\n out.skipped++;\n out.log.push(`${contactId}: slow step resolved to barred ${step.channel} at send time (${rbr}) — skipped, not consumed`);\n break;\n } }\n const rendered = renderStep(\n step,\n {\n firstName: facts.contact.firstName,\n companyName: facts.contact.companyName,\n // Both arms, because both end in the same place: no email ever arrives.\n noEmail: !!facts.contact.noEmail || !!facts.channelBlocked?.email,\n },\n { testMode: TEST_MODE },\n );\n try {\n const resp = rendered.channel === \"sms\"\n ? await sendSms(contactId, rendered.text)\n : await sendEmail(contactId, rendered.subject, rendered.html);\n // v1.2 — state persisted IMMEDIATELY after each successful send (a mid-run crash\n // must never re-send). Non-send transitions recompute idempotently. NOTES-v1.4.md.\n state[contactId] = { ...applyDecision(decision, s, nowIso), ...sendReceipt(resp, rendered.channel) };\n await saveAllState(state).catch((e) =>\n out.log.push(`${contactId}: sent OK but state persist failed (will retry at end): ${String(e).slice(0, 100)}`),\n );\n // v1.4 — R23: position is an array index, so inserting a message re-points everyone\n // mid-sequence with no signal. Recording the step ID makes that drift DETECTABLE.\n\n // v1.7 — slow records template id; R23 drift check stays main-only (slow's monthly\n // index-to-id mapping varies by design).\n const seqNow = decision.sequence === \"main\" ? MAIN_SEQUENCE : decision.sequence === \"branch_a\" ? BRANCH_A : decision.sequence === \"branch_b\" ? BRANCH_B : null;\n const sentStepId = decision.sequence === \"slow\" ? step.id : (seqNow?.[decision.stepIndex]?.id ?? null);\n if (s.lastSentStepId && sentStepId && seqNow) {\n const prevIdx = seqNow.findIndex((x) => x.id === s.lastSentStepId);\n if (prevIdx >= 0 && prevIdx !== decision.stepIndex - 1 && decision.sequence === \"main\") {\n out.log.push(`${contactId}: SEQUENCE DRIFT — last sent ${s.lastSentStepId} now sits at index ${prevIdx}, expected ${decision.stepIndex - 1}. The copy has been edited underneath in-flight contacts.`);\n jrow(contactId, \"sequence_drift\", `${s.lastSentStepId} -> index ${prevIdx}`);\n }\n }\n state[contactId] = { ...state[contactId], lastSentStepId: sentStepId };\n out.sent++;\n if (!TEST_MODE) sentToday++;\n out.log.push(`${contactId}: sent ${decision.sequence} step ${decision.stepIndex + 1} (${rendered.channel})`);\n jrow(contactId, \"sent\", `${decision.sequence}#${decision.stepIndex + 1} (${rendered.channel === \"sms\" ? \"text\" : \"email\"})`);\n } catch (e) {\n out.failed++;\n if (!TEST_MODE) sentToday++; // a failed attempt spent the same GHL call as a send\n await onSendFailure(contactId, s, e, `${decision.sequence}#${decision.stepIndex + 1}`, fctx);\n }\n break;\n }\n\n case \"skip_step\":\n // v1.6 R28 / v1.9 — this step's channel is opted out OR has no address at all. Consumed,\n // not deferred, so the sequence carries on; journalled, because a message that silently\n // never went out is what nobody notices until a customer asks why they never heard back.\n state[contactId] = applyDecision(decision, s, nowIso);\n out.skipped++;\n out.log.push(`${contactId}: ${decision.reason}`);\n // v1.13 — no address is NOT an opt-out. Kim's page showed Lisa Price as opted out.\n jrow(contactId, /opted out of/.test(decision.reason ?? \"\") ? \"skip_step_channel_optout\" : \"skip_step_no_address\", decision.reason);\n break;\n\n case \"skip\":\n // Still runs through applyDecision (a no-op on every field except lastCheckedAt) so \"last\n // time this contact was actually looked at\" stays accurate per spec §4's schema comment.\n state[contactId] = applyDecision(decision, s, nowIso);\n out.skipped++;\n // R37: deferral reasons logged; \"not due\" stays silent (skippedNotDue counts it).\n if (!/not due/.test(decision.reason)) {\n out.log.push(`${contactId}: ${decision.reason}`);\n jrow(contactId, \"deferred\", decision.reason.slice(0, 120));\n }\n break;\n }\n } catch (err) {\n out.failed++;\n out.log.push(`${contactId}: FAILED: ${String(err).slice(0, 150)}`);\n // v1.4 — this catch used to write to out.log only, and out.log is not persisted to the\n // journal. So a contact failing here was invisible to the dashboard, which reads the journal.\n // Every failure now leaves a row.\n jrow(contactId, \"contact_failed\", String(err).slice(0, 100));\n }\n }\n\n // v1.1: prune stale terminal entries (their history lives on in the journal), persist everything,\n // then rebuild the aggregate summary from full journal + surviving state.\n out.skippedNotDue = skippedNotDue;\n if (skippedNotDue) out.log.push(`${skippedNotDue} contact(s) not due — zero API calls spent on them`);\n const { kept, prunedIds } = pruneState(state, Date.now());\n for (const id of prunedIds) jrow(id, \"pruned\", \"terminal 60+ days, removed from state (journal retains history)\");\n if (prunedIds.length) out.log.push(`pruned ${prunedIds.length} stale terminal entries`);\n await saveAllState(kept);\n const fullJournal = await appendJournal(journal);\n await saveSummary(\n buildSummary(kept, fullJournal, {\n at: new Date().toISOString(),\n testMode: TEST_MODE,\n sent: out.sent,\n failed: out.failed,\n enrolled: out.enrolled,\n }),\n ).catch((e) => out.log.push(`summary save failed: ${String(e).slice(0, 100)}`));\n await saveReport(out);\n await blob.setJSON(\"puppy_run_lock\", { startedAt: null }).catch(() => {}); // release lock\n // Holiday deposits: once an hour, LAST, fully caught, read-only. Why it hangs off this\n // schedule rather than its own file is in NOTES-v1.4.md under \"deposit refresh\".\n try {\n const dep = await import(\"./deposits.ts\");\n await dep.refreshIfDue(() => blob.getJSON(dep.ATTEMPT_KEY) as any, () => dep.runCollection(false, \"engine\"), Date.now());\n } catch (e) { console.log(\"deposits refresh skipped\", String(e).slice(0, 120)); }\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n } catch (err) {\n out.ok = false;\n out.error = String(err);\n await saveLastError({ at: new Date().toISOString(), error: String(err) }).catch(() => {});\n // v1.2 — even on a crashed run, persist whatever state mutations happened before the crash\n // (sends already persisted individually; this catches transitions) and the journal rows.\n await saveReport(out).catch(() => {});\n await appendJournal(journal).catch(() => {});\n await blob.setJSON(\"puppy_run_lock\", { startedAt: null }).catch(() => {});\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n }\n}\n\n// ---- booking-link shortener (spec §7) --------------------------------------------------\n// (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\nexport async function bookingRedirect(_req: Request): Promise {\n return Response.redirect(REAL_BOOKING_URL, 302);\n}\n\n// ---- exports for the local test harness (puppy-path-engine.test.ts) -------------------------------\n\nexport {\n decideAction,\n applyDecision,\n renderStep,\n resolveDogName,\n resolveFirstName,\n applyMergeFields,\n isDue,\n freshState,\n pickPrimaryOpportunity,\n apptIsLiveBooked,\n apptIsUpcomingBooking,\n bodyToHtml,\n // v1.1 pure additions\n businessLocalParts,\n inSendWindow,\n selectEnrollable,\n buildSummary,\n pruneState,\n MAIN_SEQUENCE,\n BRANCH_A,\n BRANCH_B,\n STAGE,\n MAIN_PIPELINE_ID,\n TAG_ENROLLED,\n TAG_SOURCE_SIGNAL,\n PUP_TALK_DECLINED_TAG,\n PHONE_DISPLAY,\n REAL_BOOKING_URL,\n SHORT_BOOKING_LINK,\n TERMINAL_STATUSES,\n DAY_MS,\n HOUR_MS,\n TEST_MODE,\n // v1.7 — slow track\n slowTemplateAt,\n nextSlowTouch,\n monthlyTemplateFor,\n};\n// v1.8 — story machinery + taper banks re-exported for the offline harness\nexport { readChannelConsent } from \"./consent.ts\";\nexport * from \"./reachability.ts\";\nexport { STORY_SLOTS, resolveStories, storyFor } from \"./kim-stories.ts\";\nexport { SLOW_WEEKLY, SLOW_FORTNIGHTLY, SLOW_MONTHLY_BANK } from \"./taper-messages.ts\";\nexport type { PuppyState, PuppyStatus, Facts, Decision, ContactFact, OppFact, ApptFact, MessageTemplate, RenderedMessage };\n\n\n=====FILE engine/reachability.ts =====\n// REACHABILITY, DEAD LETTERS AND DELIVERY. Extracted from main.ts on 14 Aug 2026, for exactly the\n// reason consent.ts and render.ts were extracted before it: main.ts sits against val.town's hard\n// 80,000-character ceiling with ~850 characters spare, and the code that decides whether a real\n// person can be reached at all should be a file you can find, not twenty lines inside a 1,500-line\n// engine. Every function here is pure or takes its IO injected, so all of it is directly testable.\n//\n// THE FOUR DEFECTS THIS FILE EXISTS TO CLOSE. All four were proven by running the compiled engine\n// against the live account, not inferred from reading it.\n//\n// 1. THE SPIN. channelBar guarded `noEmail` for email and had NO PHONE EQUIVALENT. ContactFact had\n// no phone field at all, though getContact fetches `phone` on every pass and threw it away. An\n// SMS step coming due for a phoneless contact went: due -> sendGate (no contactability check) ->\n// channelBar returns null -> send -> sendSms -> `if (!r.ok) throw` -> the catch in cron(), which\n// WROTE NOTHING TO STATE. dueAt never moved, so the next tick re-derived the identical decision.\n// Rule 9's 21-day exit needs lastMainStepSent >= MAIN_SEQUENCE.length, which only advances on the\n// success path, so it never timed out. MAX_SENDS_PER_RUN and MAX_SENDS_PER_DAY both read\n// out.sent, which only increments on success, so FAILURES WERE UNCAPPED. Observed cadence ~60min\n// = ~24 retries per contact per day, forever, plus a CRITICAL watchdog alert every hour.\n// Live census, all 5,748 contacts: 398 qualify as puppy inquiries, 266 of them have NO PHONE.\n// Bulk-tagging today would have been ~648 failed sends and ~2,600 wasted GHL calls per day.\n//\n// 2. NO ATTEMPT COUNTER, NO DEAD LETTER. PuppyState had no failure field and all five terminal\n// statuses were success shapes, so a permanently failing contact rendered as \"In the main\n// sequence\" indefinitely. Fixed by sendFailures + MAX_SEND_FAILURES + done_send_failed.\n//\n// 3. NO REACHABILITY EXIT. A contact with neither email nor phone silently consumed all 8 steps and\n// then fired the soft_exit_21d task telling Kim \"Puppy path finished... now on the slow track\" —\n// a task that is a lie about somebody who received nothing. done_unreachable ends them at the\n// first pass instead, and DELIBERATELY CREATES NO TASK: bulk-tagging 300 contacts would put 265\n// tasks in Kim's CRM in a single run, which is its own incident. It is journalled and counted.\n// Only a contact that TRIED and FAILED (the dead-letter path) earns a task.\n//\n// 4. DELIVERY WAS NEVER RECONCILED. The send response was discarded entirely, including the\n// messageId the engine's own comment documents, so any 2xx from GHL was recorded as \"sent\".\n// Live sampling found 9 `undelivered` out of 124 outbound SMS in this account (7.3%) — every one\n// of them would have counted as a success.\n//\n// SCOPE NOTE — WHAT IS AND IS NOT READABLE ABOUT DELIVERY (verified live, 14 Aug 2026):\n// * SMS status IS readable on GET /conversations/{conversationId}/messages (Version 2021-04-15):\n// each message carries `status` (delivered / undelivered / queued / ...).\n// * EMAIL status is NOT on that endpoint: 137 TYPE_EMAIL messages sampled there carried no\n// `status` key at all.\n// * EMAIL status IS readable on GET /conversations/messages/email/{emailMessageId} (verified 200,\n// returned status:\"opened\"), and sendEmail already returns emailMessageId in its response.\n// Both are handled below. Where either read fails, the status is recorded as the literal string\n// \"unknown\" — VISIBLY UNKNOWN, never filed as fine. That is this codebase's standing rule\n// (facts.ts:1-12): a fact nobody could establish is not a fact that everything is well.\n//\n// RECONCILIATION IS KEYED ON THE MESSAGE ID, never on \"the newest outbound message on the thread\".\n// Chloe, Ava and 165 GHL workflows also send into these same conversations; attributing another\n// system's `undelivered` to this engine would dead-letter a perfectly healthy contact.\n\ndeclare const Deno: { env: { get(key: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\n\n// Same idiom as the engine's other knobs: read per call, env-overridable, clamped so a typo cannot\n// disable the ceiling. 3 = two retries after the first failure, which is enough for a transient\n// GHL blip and nowhere near enough to be a spin.\nexport const maxSendFailures = () => Math.max(1, Math.floor(Number(Deno.env.get(\"MAX_SEND_FAILURES\") ?? \"3\")) || 3);\n// How long after a send before its status is worth reading back. GHL stamps status asynchronously;\n// reading seconds after the POST reports \"queued\" for everything and teaches you nothing.\nexport const RECONCILE_MIN_AGE_MS = 5 * 60 * 1000;\n\n// ---- statuses, reasons, state fields --------------------------------------------------------------\n\n// Declared here rather than inline in main.ts purely for that file's character budget; they are\n// spliced into PuppyStatus and TERMINAL_STATUSES there, so they are terminal everywhere for free.\nexport type DeadLetterStatus = \"done_unreachable\" | \"done_send_failed\";\nexport const DEAD_LETTER_STATUSES: DeadLetterStatus[] = [\"done_unreachable\", \"done_send_failed\"];\n\n// Reason strings live in exactly one place so a test, a log line and a dashboard label cannot drift.\n// NOTE the wording: absence is never described as an opt-out the person did not make (consent.ts's\n// rule, and consent-guard.test.mjs CG-4 pins it).\nexport const NO_EMAIL_REASON = \"no email address on the record\";\nexport const NO_PHONE_REASON = \"no phone number on the record\";\nexport const UNREACHABLE_REASON = \"no email address and no phone number on the record\";\nexport const OPTOUT_REASON = \"replied with an opt-out keyword\";\nexport const DND_WRITE_MESSAGE = \"Replied with an opt-out keyword to a puppy-path message\";\n\nexport type FailureFields = {\n // v1.9 — ALL OPTIONAL, on purpose: existing state blobs in production deserialize untouched and\n // every reader defaults them. Same discipline as the v1.7 slow-track fields.\n sendFailures?: number; // consecutive failed attempts; reset to 0 by a success\n lastFailureAt?: string | null; // ISO — feeds the exponential backoff\n lastFailureReason?: string | null;\n lastMessageId?: string | null; // the id GHL returned for our last send, for reconciliation\n lastMessageChannel?: \"sms\" | \"email\" | null;\n lastDeliveryStatus?: string | null; // observed status, or the literal \"unknown\"\n};\n\nexport const FRESH_FAILURE_FIELDS: FailureFields = {\n sendFailures: 0, lastFailureAt: null, lastFailureReason: null,\n lastMessageId: null, lastMessageChannel: null, lastDeliveryStatus: null,\n};\n\n/** Consecutive failures, clamped. Garbage counters (NaN, negative, a string blob) read as 0 rather\n * than falling through to \"dead-letter this contact\" — same clamping the slow track already does. */\nexport const failCount = (s: FailureFields | null | undefined): number =>\n Math.max(0, Math.floor(Number(s?.sendFailures)) || 0);\n\n// ---- channel availability -------------------------------------------------------------------------\n\n/** Is this channel physically usable for this contact? Absence of an address, not consent — the\n * consent question is readChannelConsent's, and the two are deliberately reported differently. */\nexport function missingChannel(c: { noEmail?: boolean; noPhone?: boolean }, ch: \"email\" | \"sms\"): string | null {\n if (ch === \"email\" && c.noEmail) return NO_EMAIL_REASON;\n if (ch === \"sms\" && c.noPhone) return NO_PHONE_REASON;\n return null;\n}\n\n/**\n * Rules 1b and 1c of the state machine, evaluated immediately after the DND rule and BEFORE the\n * disqualified rule.\n *\n * 1b — the contact asked to stop, in words, in a reply. Hard exit. It outranks rule 5 (pause_reply)\n * deliberately: today an \"UNSUBSCRIBE\" reply routes to pause_reply, which pauses, raises a task\n * for a human, records no opt-out at all, and RESUMES SENDING once a human answers.\n * 1c — the contact has neither an email address nor a phone number, so nothing can ever be sent to\n * them by any channel. Ending them here is what stops them consuming all 8 steps in silence and\n * then triggering a \"puppy path finished\" task about somebody who received nothing.\n *\n * Returns a Decision-shaped object; assignable to the engine's Decision union without importing it,\n * which keeps this file free of a circular dependency on main.ts.\n */\nexport function reachabilityExit(f: {\n contact: { noEmail?: boolean; noPhone?: boolean };\n optOutRequested?: boolean;\n}): { kind: \"hard_exit\"; status: \"done_hard_exit\" | \"done_unreachable\"; reason: string } | null {\n if (f.optOutRequested) return { kind: \"hard_exit\", status: \"done_hard_exit\", reason: OPTOUT_REASON };\n if (f.contact.noEmail && f.contact.noPhone) {\n return { kind: \"hard_exit\", status: \"done_unreachable\", reason: UNREACHABLE_REASON };\n }\n return null;\n}\n\nexport type LifecycleFacts = {\n optOutRequested?: boolean;\n blanketDnd?: boolean;\n becameCustomer?: boolean;\n booked?: boolean;\n replied?: boolean;\n sequenceComplete?: boolean;\n noEmail?: boolean;\n noPhone?: boolean;\n};\n\nexport type LifecycleDecision =\n | { kind: \"hard_exit\"; status: \"done_optout\" | \"done_dnd\" | \"done_customer\" | \"done_booked\" | \"done_unreachable\"; reason: string }\n | { kind: \"pause\"; status: \"paused_reply\"; reason: string }\n | { kind: \"complete\"; status: \"done_sequence\"; reason: string }\n | { kind: \"continue\"; status: \"active\"; reason: null };\n\n/** Shared exit precedence for every future isolated path. It is pure and intentionally conservative:\n * legal/safety exits outrank conversion exits, conversion outranks a reply pause, and completion is\n * last. This contract does not change the existing puppy state machine; it prevents each new path\n * from inventing a different ordering. */\nexport function decideLifecycle(f: LifecycleFacts): LifecycleDecision {\n if (f.optOutRequested) return { kind: \"hard_exit\", status: \"done_optout\", reason: OPTOUT_REASON };\n if (f.blanketDnd) return { kind: \"hard_exit\", status: \"done_dnd\", reason: \"blanket Do Not Disturb is on\" };\n if (f.noEmail && f.noPhone) return { kind: \"hard_exit\", status: \"done_unreachable\", reason: UNREACHABLE_REASON };\n if (f.becameCustomer) return { kind: \"hard_exit\", status: \"done_customer\", reason: \"became a customer\" };\n if (f.booked) return { kind: \"hard_exit\", status: \"done_booked\", reason: \"booked the path's conversion event\" };\n if (f.replied) return { kind: \"pause\", status: \"paused_reply\", reason: \"inbound reply needs a human\" };\n if (f.sequenceComplete) return { kind: \"complete\", status: \"done_sequence\", reason: \"final approved step completed\" };\n return { kind: \"continue\", status: \"active\", reason: null };\n}\n\n/** Enrolment-time refusal. A contact with no way of being contacted is not put on the path at all:\n * no puppy-path-v1 tag, one journal row, and a terminal state entry (see reEnrollable). */\nexport function enrolmentBar(c: { email?: unknown; phone?: unknown } | null | undefined): string | null {\n return !c?.email && !c?.phone ? UNREACHABLE_REASON : null;\n}\n\n/**\n * CAN A DEAD LETTER COME BACK? (14 Aug, defect 2.)\n *\n * The candidate filter was `!tags.includes(TAG_ENROLLED) && !state[c.id]`. A done_send_failed or\n * done_unreachable entry sits in state and is never touched again — the per-contact loop `continue`s\n * on any terminal status, so lastCheckedAt never moves and pruneState only drops it after 60 days.\n * Meanwhile the dead-letter task this file writes told Kim to do exactly the thing that did not work:\n * \"remove the puppy-path-v1 tag and re-tag them\". Proven against the live account: she removes the\n * tag, fixes the phone number, re-tags — candidates that survive the filter: 0.\n *\n * So a dead letter is allowed back in, under two conditions that stop it becoming a loop:\n * 1. ONLY the two dead-letter statuses. done_customer, done_hard_exit (which is where an opt-out\n * lands), done_booked, done_soft_21d, done_branch_complete and done_not_enrolled are NOT\n * resurrectable by re-tagging\n * — an opt-out must never be undone by a tag, and a customer must never be re-nurtured by one.\n * 2. THE REASON MUST NO LONGER BE VISIBLY TRUE. A contact who still has neither an email address\n * nor a phone number is not a candidate at all: nothing was fixed, so re-admitting them would\n * re-refuse them every run forever, which is defect 4 with a different name. done_send_failed\n * cannot be verified the same way (a bad number looks exactly like a good one), so it is let\n * back in with a fresh attempt budget — and re-enrolment applies TAG_ENROLLED, which is what\n * stops it repeating: they are excluded by the first clause of the filter from then on.\n */\nexport function reEnrollable(\n s: { status?: string } | null | undefined,\n c: { email?: unknown; phone?: unknown } | null | undefined,\n): boolean {\n if (!s || !DEAD_LETTER_STATUSES.includes(s.status as DeadLetterStatus)) return false;\n return !enrolmentBar(c); // still unreachable: stays dead-lettered, silently, at zero cost\n}\n\n/**\n * Has this exact refusal already been written to the journal for this contact? (14 Aug, defect 4.)\n *\n * A TRANSIENT refusal — \"tagged but already has a live Pup Talk booking\" — must keep being\n * re-evaluated every run, because the booking may be cancelled tomorrow and then they SHOULD enrol.\n * But re-evaluating it wrote an identical journal row every run: 39 of the last 40 rows on Kim's\n * live activity page are the same sentence, hourly, for two days, and at ~24-30 rows a day the\n * 2,000-row cap evicts every real thing the system did within about two months.\n *\n * A terminal refusal gets a state entry instead (that is what enrolmentBar's branch does, and it is\n * why that one never repeated). A transient one cannot have a state entry — any state entry at all\n * removes the contact from the candidate filter — so the repetition is stopped at the journal.\n */\nexport function refusedBefore(\n priorJournal: { contactId?: string | null; event?: string; detail?: string }[] | null | undefined,\n contactId: string,\n detail: string,\n): boolean {\n return (priorJournal ?? []).some(\n (r) => r?.contactId === contactId && r?.event === \"enroll_refused\" && r?.detail === detail,\n );\n}\n\n// ---- backoff --------------------------------------------------------------------------------------\n\n/**\n * Exponential backoff between failed attempts: 2^failures hours. Returned as a sendGate reason\n * string, so a contact in backoff produces `skip` — state untouched, step still due, picked up\n * later — which is exactly how every other deferral in this engine behaves.\n *\n * The `since >= 0` guard mirrors the R27 / v1.7 clock-skew guards: a future-dated stamp (restored\n * blob, clock skew) must never freeze a contact until that future date.\n */\nexport function backoffBar(s: FailureFields | null | undefined, nowMs: number): string | null {\n const n = failCount(s);\n if (!n || !s?.lastFailureAt) return null;\n const since = nowMs - Date.parse(s.lastFailureAt);\n if (!(since >= 0)) return null;\n const waitH = Math.pow(2, Math.min(n, 12));\n if (since >= waitH * 3600000) return null;\n return `send backoff after ${n} failure(s): waiting ${waitH}h, ${(since / 3600000).toFixed(1)}h elapsed`;\n}\n\n// ---- failure accounting ---------------------------------------------------------------------------\n\n/** Injected effects, so every policy decision below stays testable without a network. */\nexport type Effects = {\n state: Record;\n save: (st: Record) => Promise;\n log: (line: string) => void;\n journal: (contactId: string, event: string, detail: string) => void;\n /** null in practice mode — TEST_MODE must never write a task into the client's real CRM. */\n task: ((contactId: string, title: string, body: string) => Promise) | null;\n};\n\n/**\n * THE INVARIANT THIS FUNCTION MUST NOT BREAK. main.ts's comment on the success path reads: \"state\n * persisted IMMEDIATELY after each successful send (a mid-run crash must never re-send)\". So this\n * moves the FAILURE COUNTER AND NOTHING ELSE. lastMainStepSent, lastBranchStepSent, lastSlowStepSent\n * and lastSentAt are all left exactly as they were: nothing went out, so no step is consumed and the\n * pacing clock does not start. The only status change is the terminal one at the ceiling.\n */\nexport function nextFailureState>(\n s: S, nowIso: string, reason: string,\n): { next: S; n: number; dead: boolean } {\n const n = failCount(s) + 1;\n const dead = n >= maxSendFailures();\n const next: any = {\n ...s,\n sendFailures: n,\n lastFailureAt: nowIso,\n lastFailureReason: reason.slice(0, 200),\n lastCheckedAt: nowIso,\n lastMessageId: null, // whatever we were reconciling is moot; this attempt is the news now\n };\n if (dead) {\n next.status = \"done_send_failed\";\n next.exitReason = `${n} consecutive send failures — dead-lettered (${reason.slice(0, 120)})`;\n }\n return { next: next as S, n, dead };\n}\n\nexport const DEAD_LETTER_TITLE = \"Automated follow-up has STOPPED for this contact — messages keep failing\";\n\nexport function deadLetterBody(label: string, n: number, reason: string): string {\n return `Auto-created by puppy-path-engine: ${n} attempts to send ${label} to this contact all failed, so the engine has stopped trying.\\n\\nLast error: ${reason.slice(0, 200)}\\n\\nThis person is NOT receiving the puppy follow-up and will not receive any more of it. Usual causes: the phone number or email address on the record is wrong or missing, the number is a landline, or the carrier is rejecting us.\\n\\nTo put them back on it: fix the contact details first, then remove the puppy-path-v1 tag and add the tag you normally use to start someone on the puppy path. They begin again at message one on the next run. If the record still has no phone number and no email address, nothing happens and they stay stopped — the details have to be fixed first, and this is the only order that works.`;\n}\n\nasync function announceDeadLetter(contactId: string, n: number, label: string, reason: string, fx: Effects) {\n fx.journal(contactId, \"dead_letter\", `${label} failed ${n}x — stopped trying: ${reason.slice(0, 60)}`);\n fx.log(`${contactId}: DEAD LETTER after ${n} failures — status done_send_failed, no further attempts`);\n // A contact that TRIED AND FAILED earns a task; an unreachable contact does not (see defect 3).\n if (fx.task) await fx.task(contactId, DEAD_LETTER_TITLE, deadLetterBody(label, n, reason)).catch(() => {});\n}\n\n/**\n * The catch on the send path. Before this existed the catch wrote NOTHING to state, which is the\n * whole spin: dueAt unchanged, identical decision next tick, forever, uncapped.\n * Returns true when this failure dead-lettered the contact.\n */\nexport async function onSendFailure(\n contactId: string, s: any, err: unknown, label: string, fx: Effects,\n): Promise {\n const reason = String((err as any)?.message ?? err).slice(0, 150);\n const { next, n, dead } = nextFailureState(s, new Date().toISOString(), reason);\n fx.state[contactId] = next;\n // Persisted immediately, exactly like the success path: a mid-run crash must not lose the count\n // either, or the ceiling never arrives.\n await fx.save(fx.state).catch(() => {});\n fx.log(`${contactId}: SEND FAILED ${label} (attempt ${n} of ${maxSendFailures()}): ${reason.slice(0, 100)}`);\n fx.journal(contactId, \"send_failed\", `${label}: ${reason.slice(0, 80)}`);\n if (dead) await announceDeadLetter(contactId, n, label, reason, fx);\n return dead;\n}\n\nexport const DELIVERY_FAILED_STATUSES = new Set([\"undelivered\", \"failed\", \"rejected\", \"bounced\", \"error\"]);\nexport const isDeliveryFailure = (st: unknown): boolean =>\n DELIVERY_FAILED_STATUSES.has(String(st ?? \"\").toLowerCase());\n\n/**\n * A delivery status read back on a LATER pass. GHL returning 2xx to our POST means \"queued\", not\n * \"delivered\" — 7.3% of live outbound SMS in this account are `undelivered` and every one of them\n * was being counted as a success.\n *\n * Returns null when there was nothing to reconcile. `stop` is true only for a real delivery failure,\n * which feeds the same counter as a send failure; the caller skips the rest of the pass so the\n * backoff applies before anything else is attempted.\n *\n * IDEMPOTENT: lastMessageId is cleared either way, so a given message is reconciled at most once and\n * a repeated pass cannot count the same failure twice.\n */\nexport async function onDeliveryStatus(\n contactId: string, s: any, status: string | null | undefined, fx: Effects,\n): Promise<{ s: any; stop: boolean } | null> {\n if (!status) return null;\n const st = String(status).toLowerCase();\n if (!isDeliveryFailure(st)) {\n const next = { ...s, lastDeliveryStatus: st, lastMessageId: null };\n fx.state[contactId] = next;\n // Visibly unknown, not quietly fine. Journalled so the count is on the dashboard rather than\n // being something only a person reading the blob would ever discover.\n if (st === \"unknown\") fx.journal(contactId, \"delivery_unknown\", \"delivery status could not be read for the last message\");\n return { s: next, stop: false };\n }\n const { next, n, dead } = nextFailureState(s, new Date().toISOString(), `delivery reported ${st}`);\n next.lastDeliveryStatus = st;\n fx.state[contactId] = next;\n await fx.save(fx.state).catch(() => {});\n fx.log(`${contactId}: last message came back ${st} (attempt ${n} of ${maxSendFailures()})`);\n fx.journal(contactId, \"delivery_failed\", `${st} (attempt ${n} of ${maxSendFailures()})`);\n if (dead) await announceDeadLetter(contactId, n, `the last message (${st})`, `delivery reported ${st}`, fx);\n return { s: next, stop: true };\n}\n\n/** What a successful send leaves on state: the receipt to reconcile against, and a RESET COUNTER.\n * The reset matters because applyDecision spreads `...s` — a stale count left standing would\n * dead-letter a healthy contact on an unrelated blip weeks later. */\nexport function sendReceipt(resp: any, channel: \"sms\" | \"email\"): FailureFields {\n const id = channel === \"email\"\n ? (resp?.emailMessageId ?? resp?.messageId ?? null)\n : (resp?.messageId ?? resp?.messageIds?.[0] ?? null);\n return {\n sendFailures: 0, lastFailureAt: null, lastFailureReason: null,\n lastMessageId: id != null ? String(id) : null,\n lastMessageChannel: channel,\n lastDeliveryStatus: null,\n };\n}\n\n// ---- opt-out words --------------------------------------------------------------------------------\n\n/**\n * TWO RULES, BOTH DELIBERATELY NARROW: a WHOLE BODY that is nothing but an opt-out word, and a short\n * list of phrases that cannot mean anything else. Everything else is left to a human via pause_reply.\n *\n * [was: /^\\s*(unsubscribe|stop|remove|opt[\\s-]?out)\\b/i — anchored at the start of the RAW body. Email\n * is the channel every footer makes the promise on (\"Reply UNSUBSCRIBE\"), and it is the channel that\n * rule could not read: an email reply arrives as `
UNSUBSCRIBE
`, as `
unsubscribe\n *
`, as `> unsubscribe`, as `\"STOP\"`, or under an `On 14 Aug, Kim wrote:` line — none of which\n * START with the word. It also missed every natural phrasing (\"please unsubscribe me\", \"take me off\n * this list\", \"no more texts please\") while MATCHING five sentences that mean the opposite (\"Remove\n * the 3pm and put us at 4\", \"Stop, I already booked!\", \"Opt out of the Tuesday session only\").\n * A prefix rule is not a narrow rule; it is a rule that reads one word and guesses the rest.]\n *\n * WHY NOT \"cancel\", still. Removed 14 Aug and kept out: for a business whose funnel is booked calls,\n * \"cancel my Pup Talk\" is a booking change from a hot lead. One live inbound in the 669 real bodies\n * checked reads \"My apologies but could you cancel my subscription?\" — which in an account that sells\n * training packages could as easily be the package as the texts. It is not silently dropped: an\n * inbound reply still pauses the sequence and puts a task in front of a person. A wrong opt-out is\n * irreversible in both directions at once — the lead is hard-exited AND a permanent email block is\n * written that silences Kim's own confirmations to them.\n *\n * TESTED AGAINST REAL DATA, not invented data: all 2,889 message bodies in the 99 live conversations\n * (669 of them inbound with a body). Matches exactly the 5 genuine opt-outs the old rule found, and\n * nothing else — including zero matches on the 2,220 outbound bodies, which is the guard that matters\n * for the SMS-reaction shape (`Loved \"…Reply STOP to stop these texts.\"` is an INBOUND message that\n * quotes our own footer back at us). Every phrase below is first-person on purpose: our own footers\n * say \"take YOU off these emails\" and \"Reply STOP\", so no footer can ever match itself.\n */\nconst OPT_OUT_TARGET =\n \"(?:e ?mails?|texts?|texting|messages?|msgs?|sms|mail(?:ing|ings)?|lists?|marketing|communications?|newsletters?|notifications?|spam)\";\n\n/** Body -> comparable core: HTML stripped, quoted-reply and signature chrome dropped, punctuation and\n * emoji reduced to spaces, politeness trimmed off both ends. Exported because it is the half of this\n * rule most likely to be wrong on a shape nobody has seen yet, and a test can only pin what it can see. */\nexport function optOutCore(body: unknown): string {\n let s = String(body ?? \"\");\n if (!s.trim()) return \"\";\n // Entities are decoded BEFORE the tags are stripped as well as after: a double-encoded body\n // (`<p>unsubscribe</p>`, which is what a form-posted reply can arrive as) would\n // otherwise survive tag-stripping as the literal text \"p unsubscribe p\" and match nothing.\n const entities = (x: string) => x.replace(/ /gi, \" \").replace(/"|"/gi, '\"')\n .replace(/'|'/gi, \"'\").replace(/</gi, \"<\").replace(/>/gi, \">\").replace(/&/gi, \"&\");\n s = entities(s);\n s = s.replace(/<(script|style)[\\s\\S]*?<\\/\\1>/gi, \" \");\n s = s.replace(//gi, \"\\n\").replace(/<\\/(p|div|blockquote|tr|li|h[1-6])\\s*>/gi, \"\\n\");\n s = s.replace(/<[^>]*>/g, \" \");\n s = entities(s);\n const kept: string[] = [];\n for (const raw of s.split(/\\r?\\n/)) {\n const line = raw.trim();\n if (/^>+/.test(line)) continue; // quoted line\n if (/^on\\b.{0,120}\\bwrote:?$/i.test(line)) continue; // \"On 14 Aug, Kim wrote:\"\n if (/^(from|sent|to|subject|date|cc|reply-to):/i.test(line)) continue;\n if (/^[-_]{2,}\\s*(original|forwarded)\\b/i.test(line)) continue;\n if (/^sent from my\\b/i.test(line)) continue; // phone signature\n if (/^get outlook for\\b/i.test(line)) continue;\n kept.push(line);\n }\n // A body that is ENTIRELY quoted (\"> unsubscribe\") must not strip to nothing: de-quote instead.\n let text = kept.join(\" \").trim();\n if (!text) text = s.replace(/^[ \\t]*>+[ \\t]?/gm, \" \");\n let core = text.toLowerCase().replace(/[^a-z0-9]+/g, \" \").replace(/\\s+/g, \" \").trim();\n for (let i = 0; i < 2; i++) {\n core = core.replace(/^(?:please|pls|plz|kindly|hi|hello|hey|yes|ok|okay)\\s+/, \"\")\n .replace(/\\s+(?:please|pls|plz|thanks|thank you|thx|asap|now|immediately|ty)$/, \"\");\n }\n return core;\n}\n\n/** The whole body says this and nothing else. \"Stop, I already booked!\" is not in here, and cannot be. */\nexport const WHOLE_BODY_OPT_OUT = new Set([\n \"unsubscribe\", \"unsubscribed\", \"unsub\", \"unsubscribe me\", \"unsubscribe me from this list\",\n \"stop\", \"stop all\", \"stopall\", \"stop it\", \"stop messages\", \"stop texts\", \"stop emails\",\n \"remove\", \"remove me\", \"removed\", \"delete me\", \"take me off\", \"take me off the list\",\n \"opt out\", \"optout\", \"opt me out\", \"opted out\",\n]);\n\n/** Phrases that cannot be a booking change. Each one names the PERSON as the thing being removed and\n * the CHANNEL they are being removed from — \"remove me from this list\", never \"remove the 3pm\". */\nexport const OPT_OUT_PHRASES: RegExp[] = [\n /\\bunsubscribe me\\b/,\n new RegExp(`\\\\bunsubscribe (?:me )?from (?:this|these|your|the|all|future|any)[a-z ]{0,20}?${OPT_OUT_TARGET}\\\\b`),\n new RegExp(`\\\\b(?:remove|delete|take) me (?:from|off) (?:this|these|your|the|all|any|ur)?[a-z ]{0,14}?${OPT_OUT_TARGET}\\\\b`),\n new RegExp(`\\\\bno more ${OPT_OUT_TARGET}\\\\b`),\n /\\bstop (?:texting|emailing|e mailing|messaging|contacting|calling|mailing) me\\b/,\n new RegExp(`\\\\bstop sending me[a-z ]{0,14}?${OPT_OUT_TARGET}\\\\b`),\n /\\b(?:do not|dont|do nt|never) (?:text|email|e mail|message|contact|call) me\\b/,\n new RegExp(`\\\\bopt (?:me )?out of (?:this|these|your|the|all|future|any)[a-z ]{0,14}?${OPT_OUT_TARGET}\\\\b`),\n];\n\nexport function isOptOutBody(body: unknown): boolean {\n const core = optOutCore(body);\n if (!core) return false;\n if (WHOLE_BODY_OPT_OUT.has(core)) return true;\n return OPT_OUT_PHRASES.some((re) => re.test(core));\n}\n\n/**\n * WHICH CHANNEL DID THEY ACTUALLY ASK ABOUT? (v1.13, 16 Aug 2026.)\n *\n * Kim's question, verbatim: \"does a stop word mean text and email only, or does going quiet in a\n * Facebook Messenger conversation also shut someone out permanently\". The first half has a real\n * answer and this is it. \"stop emailing me\" and \"STOP\" are not the same request, and today the\n * engine cannot tell them apart: both hard-exit the contact from every channel and both write a\n * permanent Email block. So somebody who asked only for fewer emails is silently lost as a lead.\n *\n * THIS CLASSIFIES. IT DOES NOT YET NARROW ANYTHING. Nothing downstream acts on the answer except a\n * journal row and a task in front of a person — deliberately, because narrowing an opt-out trades a\n * compliance risk for a marketing gain in KIM'S business, and that is her call and not this file's.\n * What it buys today is the evidence to make that call: how often anyone on this account actually\n * names one channel, measured rather than guessed.\n *\n * IT FAILS TO \"all\", ALWAYS. Every uncertain case — no channel named, both named, a blanket word\n * present, an unrecognised shape — returns \"all\", which is exactly today's behaviour. The only way\n * to get a narrow answer is for the body to name one channel family and NOTHING that could mean\n * everything. Being wrong in the \"all\" direction costs a lead; being wrong the other way keeps\n * messaging somebody who asked us to stop, which is the one this account cannot afford.\n */\nconst EMAIL_WORDS = /\\b(?:e ?mails?|e ?mailing|mail|mailings?|newsletters?|inbox)\\b/;\nconst SMS_WORDS = /\\b(?:texts?|texting|sms|msgs?)\\b/;\n// Anything that could mean \"everything\". `messages` is here on purpose: it is the word a person\n// reaches for when they mean all of it, and it is the word our own SMS footer uses.\nconst BLANKET_WORDS =\n /\\b(?:all|everything|anything|any|messages?|messaging|communications?|marketing|notifications?|spam|lists?|contact|contacting|call|calls|calling)\\b/;\n\nexport type OptOutScope = \"all\" | \"email\" | \"sms\";\n\nexport function optOutScope(body: unknown): OptOutScope {\n const core = optOutCore(body);\n if (!core) return \"all\";\n if (BLANKET_WORDS.test(core)) return \"all\";\n const email = EMAIL_WORDS.test(core);\n const sms = SMS_WORDS.test(core);\n if (email && !sms) return \"email\";\n if (sms && !email) return \"sms\";\n return \"all\";\n}\n\n/** GHL has returned message pages under three shapes across versions; accept all, invent none. */\nfunction pickMessages(r: any): any[] {\n const m = r?.messages?.messages ?? r?.messages ?? r?.message ?? [];\n return Array.isArray(m) ? m : [];\n}\n\nexport type ReplyStatus = {\n hasUnansweredInboundReply: boolean;\n conversationCheckFailed: boolean;\n lastOutboundAt: number | null;\n optOutRequested?: boolean;\n optOutScope?: OptOutScope; // v1.13 — which channel they named, if any. See optOutScope().\n deliveryStatus?: string | null;\n};\n\n/**\n * The one extra read, hung off the conversation getReplyStatus already fetched — the R27 trick, so\n * the collision guard and the opt-out check and the delivery check share one search call rather than\n * three. The message-body read is a second call, but only when there is actually something to read:\n * an inbound message to inspect, or one of our own sends old enough to have a settled status.\n *\n * FAILS TO SILENCE, NEVER TO \"SEND ANYWAY\". A failed read returns optOutRequested:false, so the\n * caller keeps today's behaviour (pause_reply on an inbound), and deliveryStatus:\"unknown\", which is\n * recorded as unknown rather than as success.\n */\nexport async function convoExtras(\n convo: any,\n st: (FailureFields & { lastSentAt?: string | null }) | undefined | null,\n fetchJson: (url: string, ver: string, init?: any) => Promise,\n base: string,\n nowMs: number,\n): Promise<{ optOutRequested: boolean; optOutScope: OptOutScope; deliveryStatus: string | null }> {\n const res = { optOutRequested: false, optOutScope: \"all\" as OptOutScope, deliveryStatus: null as string | null };\n const convoId = convo?.id ?? convo?.conversationId ?? null;\n const dir = convo?.lastMessageDirection ?? convo?.direction ?? null;\n const wantOptOut = dir === \"inbound\" && !!convoId;\n const msgId = st?.lastMessageId ?? null;\n const sentAt = st?.lastSentAt ? Date.parse(st.lastSentAt) : NaN;\n const wantDelivery = !!msgId && (!Number.isFinite(sentAt) || nowMs - sentAt >= RECONCILE_MIN_AGE_MS);\n if (!wantOptOut && !wantDelivery) return res;\n\n // One page, shared. An SMS reconciliation and an opt-out check on the same thread are one call.\n let page: any[] | null = null;\n let pageTried = false;\n const loadPage = async (): Promise => {\n if (pageTried) return page ?? [];\n pageTried = true;\n if (!convoId) return [];\n try { page = pickMessages(await fetchJson(`${base}/conversations/${convoId}/messages?limit=20`, \"2021-04-15\")); }\n catch { page = null; }\n return page ?? [];\n };\n\n if (wantDelivery) {\n if (st?.lastMessageChannel === \"email\") {\n // Email status is not on the conversation endpoint at all; it has its own.\n try {\n const r = await fetchJson(`${base}/conversations/messages/email/${msgId}`, \"2021-04-15\");\n const v = r?.emailMessage?.status ?? r?.status ?? null;\n res.deliveryStatus = v ? String(v).toLowerCase() : \"unknown\";\n } catch { res.deliveryStatus = \"unknown\"; }\n } else {\n const mine = (await loadPage()).find((m) => m?.id === msgId);\n const v = mine?.status ?? null;\n res.deliveryStatus = v ? String(v).toLowerCase() : \"unknown\";\n }\n }\n\n if (wantOptOut) {\n const msgs = await loadPage();\n if (!pageTried || page === null) {\n res.optOutRequested = false; // unreadable — the caller falls back to pause_reply\n } else {\n // AN UNKNOWN DIRECTION IS NOT THE CUSTOMER SPEAKING.\n // [was: String(m?.direction ?? \"inbound\") — an absent direction defaulted to inbound, i.e. to\n // \"the customer said this\", which is the one direction this file's own discipline forbids\n // defaulting to (see the header on convoExtras: FAILS TO SILENCE, NEVER TO \"SEND ANYWAY\").\n // 46 messages in the 99 live conversations sampled on 14 Aug carry direction:null; every one\n // is TYPE_EMAIL and every one is plainly ours (\"Congratulations on Your Dog's Bootcamp\n // Graduation\", \"We look forward to speaking with you tomorrow\"). Our own email footer reads\n // \"Reply UNSUBSCRIBE and we'll take you off these emails\" — so the default was pointing the\n // opt-out scanner at our own copy. Unreadable direction now means the message is not scanned,\n // the caller still sees the inbound reply, and the contact is paused for a human instead.]\n const inbound = msgs.find((m) => String(m?.direction ?? \"\").toLowerCase() === \"inbound\") ?? null;\n const inboundBody = inbound ? (inbound.body ?? inbound.message ?? \"\") : \"\";\n res.optOutRequested = !!inbound && isOptOutBody(inboundBody);\n // Classified from the SAME body that triggered the opt-out, never from a later one.\n if (res.optOutRequested) res.optOutScope = optOutScope(inboundBody);\n }\n }\n return res;\n}\n\n/**\n * Honour an opt-out in the client's live CRM by setting dndSettings.Email.status = \"permanent\" —\n * the exact field consent.ts:29 already reads, so the block is enforced everywhere for free with no\n * change to consent.ts. Nothing in this codebase has ever WRITTEN that field (zero `Email:\n * permanent` across 1,200 live contacts), which is why \"Reply UNSUBSCRIBE\" in every email footer\n * has been a promise the system could not keep.\n *\n * This is a write to a real customer record, so: TEST_MODE never writes, and it is idempotent twice\n * over — it is skipped entirely when Email is already blocking, and the PUT sets a fixed value\n * rather than toggling one. SMS is deliberately not written: GHL/Twilio already honour STOP natively\n * on the SMS channel and set permanent themselves.\n */\nexport async function honourOptOut(\n contactId: string,\n f: { optOutRequested?: boolean; channelBlocked?: { email: boolean; sms: boolean } },\n testMode: boolean,\n fetchJson: (url: string, ver: string, init?: any) => Promise,\n base: string,\n fx?: Effects,\n): Promise {\n const say = (m: string, failed = false) => {\n fx?.log(`${contactId}: ${m}`);\n if (failed) fx?.journal(contactId, \"optout_write_failed\", m);\n return m;\n };\n if (!f.optOutRequested) return null;\n if (testMode) return say(\"opt-out detected — practice mode, no DND written to GHL\");\n if (f.channelBlocked?.email) return say(\"opt-out detected — Email DND already set, nothing written\");\n try {\n await fetchJson(`${base}/contacts/${contactId}`, \"2021-07-28\", {\n method: \"PUT\",\n body: JSON.stringify({ dndSettings: { Email: { status: \"permanent\", message: DND_WRITE_MESSAGE } } }),\n });\n return say(\"opt-out honoured — Email DND set to permanent in GHL\");\n } catch (e) {\n // The hard exit stands either way: this engine stops messaging them regardless of whether GHL\n // took the write. Loud, because everything ELSE that reads that field is now out of step.\n return say(`OPT-OUT DND WRITE FAILED (${String(e).slice(0, 80)}) — hard exit stands, GHL NOT updated`, true);\n }\n}\n\n/**\n * THEY NAMED ONE CHANNEL — record it, and put a person on it. (v1.13, 16 Aug 2026.)\n *\n * The hard exit above is deliberately unchanged and still blanket: somebody who typed anything from\n * the opt-out list comes out of everything. Narrowing that trades a compliance risk for a marketing\n * gain in Kim's business, and that is her decision to make, not this engine's.\n *\n * What this closes is that today the difference is INVISIBLE. \"STOP\" and \"stop emailing me\" produce\n * byte-identical outcomes and byte-identical journal rows, so nobody can even ask how often it\n * happens. After this there is a row per occurrence — which is the evidence that decision needs —\n * and a task, so a lead who only wanted fewer emails is looked at by a human rather than quietly\n * written off. The task is best-effort: a failed task never holds up an exit that has already been\n * decided, and in practice mode no task is created at all.\n *\n * It lives here rather than inline in cron() for main.ts's character budget, which is the same\n * reason the rest of this file exists.\n */\nexport async function noteScopedOptOut(\n contactId: string,\n f: { optOutScope?: OptOutScope; contact?: { firstName?: string | null } },\n testMode: boolean,\n fx: Effects | undefined,\n createTask: ((contactId: string, title: string, body: string) => Promise) | null,\n): Promise<\"all\" | OptOutScope> {\n const scope = f.optOutScope ?? \"all\";\n if (scope === \"all\") return \"all\";\n const named = scope === \"email\" ? \"emails\" : \"texts\";\n fx?.journal(contactId, \"optout_scope\", `asked us to stop ${named} — exited from everything, task raised`);\n if (testMode || !createTask) return scope;\n try {\n await createTask(\n contactId,\n `${f.contact?.firstName || \"A contact\"} asked to stop ${named}, not everything`,\n `They replied asking us to stop ${named}. The follow-up has taken them out of everything, which is ` +\n `the safe reading but may be more than they asked for. Worth a look before this lead is written off.`,\n );\n } catch { /* the exit stands either way; a task is not a gate */ }\n return scope;\n}\n\n// ---- summary counts -------------------------------------------------------------------------------\n\n/** The counts buildSummary never had: send_failed was journalled and then counted by nothing, so a\n * permanently failing contact showed up nowhere at all. */\nexport function failureCounts(\n journal: { event: string; detail: string }[],\n byStatus: Record,\n): { sendFailures: number; deadLettered: number; unreachable: number; deliveryFailed: number; deliveryUnknown: number } {\n let sendFailures = 0, deadLettered = 0, deliveryFailed = 0, deliveryUnknown = 0;\n // STANDING COUNT, from state, not a running total from the journal: a contact refused at\n // enrolment now gets a done_unreachable state entry (that is what stops the refusal repeating),\n // so counting the enroll_refused rows here as well would count every one of them twice.\n const unreachable = byStatus?.done_unreachable ?? 0;\n for (const r of journal ?? []) {\n if (r.event === \"send_failed\") sendFailures++;\n else if (r.event === \"dead_letter\") deadLettered++;\n else if (r.event === \"delivery_failed\") deliveryFailed++;\n else if (r.event === \"delivery_unknown\") deliveryUnknown++;\n }\n return { sendFailures, deadLettered, unreachable, deliveryFailed, deliveryUnknown };\n}\n\n\n=====FILE engine/registry-diff.ts =====\n// WHAT CHANGED IN A LIST SOMEBODY ELSE CONTROLS. v1.0, 5 August 2026.\n//\n// The watchdog watches two registries in Kim's CRM that nobody on this project owns: her 165\n// automations, and the eight knowledge bases Chloe answers customers from. Both can be edited by\n// Kim, by Kristian, or by an integration nobody remembers installing, and until v1.6 the knowledge\n// bases were not watched at all. The consolidated one was edited at 02:38 on 5 August and nothing\n// noticed.\n//\n// This is the comparison, on its own, so it can be tested. It lived inline in the watchdog before,\n// where it could only ever be checked by waiting for somebody to change something — which means a\n// check nobody has ever seen go off. Same rule as everywhere else in this project: a check that\n// cannot be shown to fail is not a check.\n//\n// It deliberately knows nothing about workflows or knowledge bases. It takes two maps of\n// id -> description and says what moved.\n\nexport type Registry = Record;\n\nexport type RegistryKeyDiff = {\n missing: string[];\n unexpected: string[];\n duplicates: string[];\n exact: boolean;\n changed: boolean;\n};\n\n/** Compare an approved key set with the keys a registry actually exposes. This is deliberately\n * separate from `registryDiff`: the watchdog compares id->description snapshots over time, while\n * nurture safety asks a stricter question — is this exactly the promised set, with no substitution\n * and no duplicate definition? Order never matters; duplicates always do. */\nexport function registryKeyDiff(expected: readonly string[], actual: readonly string[]): RegistryKeyDiff {\n const clean = (xs: readonly string[]) => xs.map((x) => String(x).trim()).filter(Boolean);\n const a = clean(expected);\n const b = clean(actual);\n const aSet = new Set(a);\n const bSet = new Set(b);\n const duplicates = [...new Set(b.filter((key, i) => b.indexOf(key) !== i))].sort();\n const missing = [...aSet].filter((key) => !bSet.has(key)).sort();\n const unexpected = [...bSet].filter((key) => !aSet.has(key)).sort();\n const exact = missing.length === 0 && unexpected.length === 0 && duplicates.length === 0 &&\n aSet.size === bSet.size;\n return { missing, unexpected, duplicates, exact, changed: !exact };\n}\n\nexport type RegistryChange = {\n added: string[];\n removed: string[];\n edited: string[]; // \"old -> new\", so a reader can see what moved without opening anything\n changed: boolean;\n};\n\nexport function registryDiff(prev: Registry | null | undefined, now: Registry | null | undefined): RegistryChange {\n const a = prev && typeof prev === \"object\" ? prev : {};\n const b = now && typeof now === \"object\" ? now : {};\n const prevIds = Object.keys(a);\n const nowIds = Object.keys(b);\n const added = nowIds.filter((i) => !(i in a)).map((i) => b[i]);\n const removed = prevIds.filter((i) => !(i in b)).map((i) => a[i]);\n const edited = nowIds.filter((i) => i in a && a[i] !== b[i]).map((i) => `${a[i]} -> ${b[i]}`);\n return { added, removed, edited, changed: added.length + removed.length + edited.length > 0 };\n}\n\n/**\n * Is this an empty response we should DISTRUST rather than act on?\n *\n * A malformed-but-200 reply that returns an empty list must never overwrite a good baseline, or\n * the next pass fires \"everything was removed\" and the one after that fires \"everything was\n * added\". The watchdog learned this on the workflow registry; the knowledge-base watch inherits it\n * rather than rediscovering it.\n */\nexport function looksLikeAGlitch(nowCount: number, prevCount: number | null | undefined): boolean {\n return nowCount === 0 && (prevCount ?? 0) > 0;\n}\n\n/** The sentence, generated from the change, never written alongside it. */\nexport function registrySentence(c: RegistryChange, what: string): string {\n if (!c.changed) return `Nothing has moved in ${what} since the last look.`;\n const bits: string[] = [];\n if (c.edited.length) bits.push(`Edited: ${c.edited.slice(0, 3).join(\"; \")}.`);\n if (c.added.length) bits.push(`Added: ${c.added.slice(0, 3).join(\"; \")}.`);\n if (c.removed.length) bits.push(`Removed: ${c.removed.slice(0, 3).join(\"; \")}.`);\n const more = c.added.length + c.removed.length + c.edited.length - Math.min(3, c.edited.length) - Math.min(3, c.added.length) - Math.min(3, c.removed.length);\n if (more > 0) bits.push(`${more} more not listed here.`);\n return bits.join(\" \");\n}\n\n\n=====FILE engine/render.ts =====\n// MESSAGE RENDERING. Extracted from main.ts on 4 Aug 2026.\n//\n// WHY IT LIVES HERE: main.ts sits against a hard 80,000-character ceiling on the platform, and\n// these are the most self-contained functions in the file. Pulling them out also means the escape\n// and merge-field rules can be tested directly rather than only through a full engine run, which\n// matters because two of the fixes below came out of a security review, not a feature request.\n\n// Spec: dog name blank on ~70% of sampled contacts; fallback \"your puppy\" per the writing sheet's own\n// proposed default (§6 Q3). Messy-but-present values (multi-dog, junk like \"Money\") are used as-is —\n// that's an intake-form data-quality problem, not something to silently \"clean\" here.\nexport function resolveDogName(companyName: string | null | undefined): string {\n const v = (companyName ?? \"\").trim();\n return v.length > 0 ? v : \"your puppy\";\n}\n\n// Spec only discusses the blank-dog-name case explicitly. Added this small parallel safety net for a\n// blank first name (defensive, beyond spec's literal text) because \"Hi ,\" landing in a live message\n// would look obviously broken — same principle as the dog-name fallback, applied consistently.\nexport function resolveFirstName(firstName: string | null | undefined): string {\n const v = (firstName ?? \"\").trim();\n return v.length > 0 ? v : \"there\";\n}\n\nexport function applyMergeFields(template: string, firstName: string | null | undefined, companyName: string | null | undefined): string {\n // v1.8.1 — function form so $-patterns in names (\"Bo$$\") cannot corrupt the body.\n return template\n .replaceAll(\"{{FIRST_NAME}}\", () => resolveFirstName(firstName))\n .replaceAll(\"{{DOG_NAME}}\", () => resolveDogName(companyName));\n}\n\n// v1.8.1 — contact-typed fields and Kim's stories land in email HTML; escape BEFORE the\n// **bold** transform so markup we generate survives and markup anyone else typed does not.\nexport function escHtml(s: string): string {\n return s.replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string));\n}\n\nexport function mdBoldToHtml(text: string): string {\n return text.replace(/\\*\\*(.+?)\\*\\*/g, \"$1\");\n}\n\nexport function bodyToHtml(body: string, previewText?: string): string {\n const paragraphs = escHtml(body)\n .trim()\n .split(/\\n\\s*\\n/)\n .map((p) => `
${mdBoldToHtml(p.trim()).replace(/\\n/g, \"
\")}
`)\n .join(\"\\n\");\n // Hidden preheader technique so the approved \"preview text\" shows in an inbox list without being\n // visible in the opened email — standard, low-risk, one line.\n const preheader = previewText\n ? `
${escHtml(previewText)}
\\n`\n : \"\";\n return preheader + paragraphs;\n}\n\n\n","deleted",false,"label",[14],"1bfa6e81-74e1-4c6c-ab32-118304a4ffff",["D",1785429259053],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Puppy path nurture engine v1.2 — The Dogs Spot","imageUrl","userId","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","ad633fec-8e73-11f1-b800-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","1bfa6e8174e14c6cab32118304a4ffff","tursoHostname","1bfa6e8174e14c6cab32118304a4ffff-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519842404],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_36":89,"_11":90,"_23":29,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",1233,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":33,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]