[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22},"handle","amir5","name","dogsspot_puppy_path","path","SOURCE-BUNDLE.part2.txt","project",{"_23":45,"_11":12,"_34":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":33,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_23":24,"_11":14,"_25":26,"_27":-5,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":17,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/amir5/dogsspot_puppy_path/code/SOURCE-BUNDLE.part2.txt","extension","txt","id","782f756c-5442-4ac3-a629-fd73f4bf8eb5","fileId","15e8a494-9081-11f1-9b4f-1607ee4eb77e","parentId","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","branchVersion",1188,"latest",true,"createdAt",["D",1786982918052],"version",60,"fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 2 of 47)\n\nEVERY source file in this project, engine/ included. Restoring these parts and nothing else gives\nyou a tree that builds, typechecks and runs its own test suite with no network and no val.\n\nengine/ is here as of 14 Aug 2026. It used to be left out because val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff\nholds it, which was true of every engine file except engine/watch.ts: a module the val does not run,\nso it was never deployed, so it lived in one container and nothing else. A reclaim destroyed it.\nscripts/deploy.mjs --check still compares engine/ against the val file by file; that is a second\ncheck on the same files now, not the only copy of them.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/build.mjs (engine/ came out of these parts; nothing to fetch first)\n node scripts/typecheck.mjs\n node tests/run-all.mjs\n node scripts/deploy.mjs --check (pulls nothing, proves the val matches what you restored)\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (2 of 129 files)\n engine/aged.ts 17853 bytes 404c08521ac3\n engine/api.ts 55727 bytes c196c38b348e\n\n================================================================================================\n=====FILE engine/aged.ts =====\n// AGED-LIST SEGMENTER AND RELEASE PLANNER — built 2 Aug 2026.\n//\n// WHY THIS EXISTS\n// The plan of record was \"release the 3,206 dormant New Lead contacts by email, a few hundred a\n// week.\" Before building the machine, the audience was measured. It does not exist in the shape the\n// plan assumed:\n//\n// 3,426 opportunities sit in New Lead (not 3,206 — it grows ~12/day)\n// 177 (5.2%) have an email address\n// 766 (22.4%) have a phone number\n// 2,655 (77.5%) have NEITHER — they are Messenger-only contacts and cannot be emailed or texted\n//\n// Verified twice: once from the opportunity payload's embedded contact, then again by re-fetching\n// 25 of the \"no email\" contacts individually with GET /contacts/{id} — 0 of 25 had a hidden email.\n// So the email-only launch reaches 177 people, not three thousand.\n//\n// Age was also assumed wrong. Nothing in the backlog is older than 292 days; the oldest month is\n// October 2025 and only 328 rows are from 2025 at all. Median age is 109 days.\n//\n// This endpoint keeps that truth live rather than frozen in a document: it re-measures on demand,\n// segments the backlog by what can actually be done with each person, and produces the batch plan.\n//\n// WHAT IT WILL NOT DO\n// It never sends. It plans. Releasing anyone is a separate, deliberate act by a human, and the\n// copy for this path has not been approved by the client. `?k=…&plan=1` returns the batch list;\n// there is no endpoint here that hands that list to a sender.\n//\n// QUOTA (this is the R19 fix in miniature)\n// A full walk is 35 paginated calls. That is far too much to do on every 15-minute engine tick, so\n// the result is cached in the `aged_segments` blob with a timestamp and only recomputed when asked\n// or when older than CACHE_TTL. The engine never calls this; it is an operator tool.\n//\n// ?k= segment summary (cached)\n// ?k=&fresh=1 force a re-measure from the live CRM\n// ?k=&plan=1 the batch release plan\n// ?k=&f=json raw JSON of whichever of the above applies\n\nimport { hasConsentSnapshot, readChannelConsent } from \"./consent.ts\";\n\n// ---- auth ------------------------------------------------------------------------------------\n// val.town vals are public, so the admin digest must come from the environment. There is no source\n// fallback: absent or malformed configuration denies every key.\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const configured = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n if (!k || !configured || !/^[0-9a-f]{64}$/i.test(configured)) return false;\n const expected = configured.toLowerCase();\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst PIPE = \"FXt1UpCVBufbF0v3pfyf\";\nconst NEW_LEAD = \"ccb18375-9aa1-40aa-a071-1581ca739533\";\nconst CACHE_KEY = \"aged_segments\";\nconst CACHE_TTL_MS = 12 * 3600 * 1000;\n\n// Batch policy. Email first, small, watching between batches — a burst to a stale list is how a\n// sending reputation dies, and this list is stale by construction.\nconst BATCH_SIZE = 60;\nconst BATCHES_PER_WEEK = 1;\n\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\n\n\nasync function token(): Promise {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return env;\n const blob = await blobMod();\n const cfg = await blob.getJSON(\"puppy_config\").catch(() => null);\n return cfg?.ghlToken;\n}\n\nasync function walkNewLead() {\n const t = await token();\n if (!t) throw new Error(\"no CRM credential resolved\");\n const rows: any[] = [];\n let after: any = null, afterId: any = null, pages = 0;\n while (pages < 45) {\n let u = `${GHL}/opportunities/search?location_id=${LOC}&pipeline_id=${PIPE}&pipeline_stage_id=${NEW_LEAD}&limit=100`;\n if (after != null) u += `&startAfter=${after}&startAfterId=${afterId}`;\n const r = await fetch(u, { headers: { Authorization: `Bearer ${t}`, Version: \"2021-07-28\", Accept: \"application/json\" } });\n if (!r.ok) throw new Error(`opportunities/search ${r.status}`);\n const d = await r.json();\n const ops = d.opportunities ?? [];\n if (!ops.length) break;\n rows.push(...ops);\n pages++;\n after = d.meta?.startAfter; afterId = d.meta?.startAfterId;\n if (!after) break;\n }\n return { rows, pages };\n}\n\n// A lead nobody can reach is not a lead. A lead who only ever spoke on Messenger cannot be emailed or\n// texted at all — Meta's 24-hour messaging window closes that door, and pretending otherwise is how a\n// nurture plan produces a number that never arrives.\nexport function segmentAgedRows(rows: any[], now = Date.now()) {\n const seg: Record = {\n emailable: [], releaseReady: [], consentUnknown: [], emailBlocked: [],\n phoneOnly: [], unreachable: [], excluded: [],\n };\n const ageBuckets: Record = { \"0-30d\": 0, \"31-90d\": 0, \"91-180d\": 0, \"181-365d\": 0, \"365d+\": 0 };\n const years: Record = {};\n let dupes = 0;\n\n // Opportunity pagination can repeat a contact, and one copy can be a partial projection while\n // another carries DND. Hold every row whose contact id, email or phone occurs more than once;\n // choosing a \"first\" row would make consent depend on page order. The planner is deliberately\n // conservative here because this is release eligibility, not a marketing audience estimate.\n const identityCounts = new Map();\n const identityKeys = (o: any): string[] => {\n const c = o?.contact ?? {};\n const contactId = String(o?.contactId ?? c.id ?? \"\").trim();\n const email = String(c.email ?? \"\").trim().toLowerCase();\n const phone = String(c.phone ?? \"\").replace(/\\D/g, \"\");\n return [contactId && `id:${contactId}`, email && `email:${email}`, phone && `phone:${phone}`].filter(Boolean) as string[];\n };\n for (const o of rows) {\n for (const key of new Set(identityKeys(o))) identityCounts.set(key, (identityCounts.get(key) ?? 0) + 1);\n }\n\n for (const o of rows) {\n const c = o.contact ?? {};\n const email = String(c.email ?? \"\").trim().toLowerCase();\n const phone = String(c.phone ?? \"\").trim();\n const tags: string[] = (c.tags ?? []).map((x: string) => String(x).toLowerCase());\n const created = o.createdAt ? new Date(o.createdAt).getTime() : null;\n const ageDays = created ? Math.floor((now - created) / 86400000) : null;\n\n if (created) {\n const y = new Date(created).getUTCFullYear();\n years[y] = (years[y] ?? 0) + 1;\n const a = ageDays!;\n ageBuckets[a <= 30 ? \"0-30d\" : a <= 90 ? \"31-90d\" : a <= 180 ? \"91-180d\" : a <= 365 ? \"181-365d\" : \"365d+\"]++;\n }\n\n const contactId = String(o.contactId ?? c.id ?? \"\").trim();\n const rec = { contactId: contactId || null, name: c.name ?? null, email: email || null, phone: phone || null, ageDays, tags };\n\n // Exclusions come first and are absolute.\n const isSpam = tags.some((t) => t.includes(\"spam\"));\n const isCustomer = tags.includes(\"customer\") || tags.includes(\"subscription_active\");\n const alreadyOnAPath = tags.some((t) => t.startsWith(\"puppy-path\") || t.startsWith(\"path-\") || t.includes(\"nurture\"));\n if (isSpam || isCustomer || alreadyOnAPath) { seg.excluded.push({ ...rec, why: isSpam ? \"flagged spam\" : isCustomer ? \"already a customer\" : \"already on a nurture path\" }); continue; }\n\n const repeated = identityKeys(o).filter((key) => (identityCounts.get(key) ?? 0) > 1);\n if (repeated.length) {\n dupes++;\n seg.excluded.push({ ...rec, why: \"duplicate identity held; consent cannot depend on which API row arrived first\" });\n continue;\n }\n\n if (email) {\n // The opportunity projection can contain an email while omitting per-channel DND entirely.\n // Inventory may count that address; a release plan may not treat missing consent evidence as\n // permission. Only a hydrated snapshot that is clear on both surfaces reaches releaseReady.\n if (c.dnd === true || readChannelConsent(c).email) {\n const held = { ...rec, consentStatus: \"blocked\", why: c.dnd === true ? \"blanket Do Not Disturb is on\" : \"opted out of email\" };\n seg.emailable.push(held);\n seg.emailBlocked.push(held);\n } else if (!hasConsentSnapshot(c)) {\n const held = { ...rec, consentStatus: \"unknown\", why: \"per-channel consent was not present in this data projection\" };\n seg.emailable.push(held);\n seg.consentUnknown.push(held);\n } else {\n const clear = { ...rec, consentStatus: \"clear\" };\n seg.emailable.push(clear);\n seg.releaseReady.push(clear);\n }\n }\n else if (phone) seg.phoneOnly.push(rec);\n else seg.unreachable.push(rec);\n }\n\n // Oldest first: they have waited longest and are the least likely to remember enquiring, so they\n // are also the batch most worth watching the opt-out rate on.\n const oldestThenId = (a: any, b: any) =>\n (b.ageDays ?? 0) - (a.ageDays ?? 0) ||\n String(a.contactId ?? \"\").localeCompare(String(b.contactId ?? \"\")) ||\n String(a.email ?? \"\").localeCompare(String(b.email ?? \"\")) ||\n String(a.phone ?? \"\").localeCompare(String(b.phone ?? \"\")) ||\n String(a.why ?? \"\").localeCompare(String(b.why ?? \"\"));\n seg.emailable.sort(oldestThenId);\n seg.releaseReady.sort(oldestThenId);\n seg.consentUnknown.sort(oldestThenId);\n seg.emailBlocked.sort(oldestThenId);\n seg.phoneOnly.sort(oldestThenId);\n seg.unreachable.sort(oldestThenId);\n seg.excluded.sort(oldestThenId);\n\n return { seg, ageBuckets, years, dupes };\n}\n\nexport function planAgedBatches(emailable: any[]) {\n // Defence in depth: even a caller that hands this function the broad address inventory cannot\n // obtain a batch for an unknown/blocked row. Old cached records lack this marker and therefore hold.\n const candidates = (emailable ?? []).filter((r) => r?.consentStatus === \"clear\" && String(r?.contactId ?? \"\").trim());\n const counts = new Map();\n for (const r of candidates) {\n const id = String(r.contactId).trim();\n counts.set(id, (counts.get(id) ?? 0) + 1);\n }\n const eligible = candidates\n .filter((r) => counts.get(String(r.contactId).trim()) === 1)\n .sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0) || String(a.contactId).localeCompare(String(b.contactId)));\n const batches: any[] = [];\n for (let i = 0; i < eligible.length; i += BATCH_SIZE) {\n batches.push({\n batch: batches.length + 1,\n weekOffset: batches.length * (1 / BATCHES_PER_WEEK),\n size: eligible.slice(i, i + BATCH_SIZE).length,\n oldestAgeDays: eligible[i]?.ageDays ?? null,\n contactIds: eligible.slice(i, i + BATCH_SIZE).map((r) => r.contactId),\n idempotencyKeys: eligible.slice(i, i + BATCH_SIZE).map((r) => `aged-plan:v1:${r.contactId}`),\n dryRun: true,\n sendAllowed: false,\n });\n }\n return batches;\n}\n\nasync function measure(fresh: boolean) {\n const blob = await blobMod();\n if (!fresh) {\n const cached = await blob.getJSON(CACHE_KEY).catch(() => null);\n if (cached?.at && Date.now() - new Date(cached.at).getTime() < CACHE_TTL_MS) return { ...cached, fromCache: true };\n }\n const { rows, pages } = await walkNewLead();\n const { seg, ageBuckets, years, dupes } = segmentAgedRows(rows);\n const out = {\n at: new Date().toISOString(),\n fromCache: false,\n apiCallsUsed: pages,\n total: rows.length,\n counts: {\n emailable: seg.emailable.length,\n releaseReady: seg.releaseReady.length,\n consentUnknown: seg.consentUnknown.length,\n emailBlocked: seg.emailBlocked.length,\n phoneOnly: seg.phoneOnly.length,\n unreachable: seg.unreachable.length,\n excluded: seg.excluded.length,\n duplicatesRemoved: dupes,\n },\n ageBuckets, years,\n batchPolicy: { size: BATCH_SIZE, perWeek: BATCHES_PER_WEEK, channel: \"email only\" },\n weeksToClear: Math.ceil(seg.releaseReady.length / (BATCH_SIZE * BATCHES_PER_WEEK)),\n emailable: seg.emailable,\n releaseReady: seg.releaseReady,\n consentUnknown: seg.consentUnknown.slice(0, 200),\n emailBlocked: seg.emailBlocked.slice(0, 200),\n phoneOnly: seg.phoneOnly.slice(0, 200),\n excludedSample: seg.excluded.slice(0, 50),\n };\n await blob.setJSON(CACHE_KEY, out).catch(() => {});\n return out;\n}\n\nfunction pct(n: number, d: number) { return d ? `${((n / d) * 100).toFixed(1)}%` : \"0%\"; }\n\nfunction html(d: any) {\n const c = d.counts;\n const rows = (d.batches ?? []).slice(0, 12).map((b: any) =>\n `${b.batch}week +${b.weekOffset}${b.size}${b.oldestAgeDays ?? \"—\"} days`).join(\"\");\n return `Aged list — what is actually there\n\n

The dormant list — what is actually in it

Measured from the live CRM ${d.fromCache ? \"(cached \" + String(d.at).slice(0, 16).replace(\"T\", \" \") + \" UTC)\" : \"just now\"} · ${d.apiCallsUsed ?? \"—\"} API calls

The plan assumed roughly 3,200 people who could be emailed. They cannot.\nOf ${d.total} contacts sitting in New Lead, ${c.emailable} have an email address —\n${pct(c.emailable, d.total)}. ${c.unreachable} (${pct(c.unreachable, d.total)}) have neither an email\nnor a phone number: they only ever spoke through Messenger, and Meta's 24-hour rule closes that door.

Who can actually be contacted

\n\n\n\n\n\n\n\n

Segment	Count	Share	What can be done
Has an email	${c.emailable}	${pct(c.emailable, d.total)}	Address inventory only; not permission to release.
Email + consent snapshot clear	${c.releaseReady ?? 0}	${pct(c.releaseReady ?? 0, d.total)}	The only rows allowed into the dry-run batch plan.
Email, consent unknown	${c.consentUnknown ?? c.emailable}	${pct(c.consentUnknown ?? c.emailable, d.total)}	Held until each full contact DND snapshot is read.
Email blocked / DND	${c.emailBlocked ?? 0}	${pct(c.emailBlocked ?? 0, d.total)}	Excluded from the release.
Phone only	${c.phoneOnly}	${pct(c.phoneOnly, d.total)}	SMS — held until numbers are validated. Stale numbers get a business flagged by carriers.
Neither	${c.unreachable}	${pct(c.unreachable, d.total)}	Nothing by email or text. Reachable only inside Messenger, within Meta's window.
Excluded	${c.excluded}	${pct(c.excluded, d.total)}	Already customers, already on a path, flagged spam, or duplicates.

How old it really is

\n${Object.entries(d.ageBuckets || {}).map(([k, v]) => ``).join(\"\")}

Age	Count
${k}	${v}

By year created: ${Object.entries(d.years || {}).map(([k, v]) => `${k} ${v}`).join(\" · \")}. Nothing in this list is more than a year old.

\n${rows ? `

The release plan

${rows}

Batch	When	People	Oldest in batch

${d.batchPolicy.size} per batch, ${d.batchPolicy.perWeek} batch per week, email only, oldest first — ${d.weeksToClear} week(s) across consent-cleared rows. Every row is dry-run only and carries sendAllowed:false.

` : \"\"}\n

Nothing here sends anything. This page measures and plans. Releasing a batch is a separate deliberate action, and the copy for this path has not been approved yet.

`;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n try {\n const d: any = await measure(url.searchParams.get(\"fresh\") === \"1\");\n if (url.searchParams.get(\"plan\") === \"1\") d.batches = planAgedBatches(d.releaseReady ?? []);\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n if (!d.batches) d.batches = planAgedBatches(d.releaseReady ?? []);\n return new Response(html(d), { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e).slice(0, 500) }, null, 2), { status: 500, headers: { \"content-type\": \"application/json\" } });\n }\n}\n\n\n=====FILE engine/api.ts =====\n// NURTURE CONTROL PANEL, HTTP face of the puppy-path engine. Built 2 Aug 2026.\n//\n// WHY THIS FILE EXISTS\n// The engine (main.ts) keeps everything it knows in val.town blobs. Blobs are reachable only with a\n// blob-scoped API token, which means the only people who could see whether the nurture system was\n// working were people holding a production credential. That is the wrong shape for this client: Kim\n// cancelled her previous supplier for going quiet, and a system whose status is invisible to her is\n// the same failure wearing different clothes.\n//\n// So the engine gets a front door. One URL, one key, no login, no install. It answers three\n// questions in plain language, who is in the system, what happened today, is anything broken, and\n// carries the one control she must always have: STOP.\n//\n// WHAT IT IS NOT\n// Read-mostly by design. The only state it writes is the kill switch. It cannot enrol anyone, send\n// anything, or edit copy. A leaked link is an information disclosure, not a way to message her\n// customers.\n//\n// AUTH\n// ?k=. Constant-time-ish compare, no key echoed back, no data before the check,\n// and the 401 body is byte-identical whether the key is absent or wrong.\n//\n// ROUTES (all GET, all query-param, so a phone bookmark works)\n// ?k=… the dashboard\n// ?k=…&f=json the same numbers as JSON\n// ?k=…&stop=1 kill switch ON , engine halts before it looks at a single contact\n// ?k=…&go=1 kill switch OFF\n//\n// COLOUR\n// Stage colours are a validated 4-step single-hue ordinal ramp (#86b6ef → #3987e5 → #256abf →\n// #184f95); status colours are the reserved good/warning/critical steps and always ship with a word\n// beside them, never colour alone. Both ramps were run through the palette validator in light and\n// dark before this file was written: ordinal ramp ALL CHECKS PASS in both modes.\n\n// The same shim engine/dashboard.ts carries, and for the same reason: this file has to be\n// importable outside val.town so a test can render the page and read it. Without it, the first\n// `Deno.env.get` at module scope throws on import and the page's words stay untested — which is\n// how four false sentences reached a live client and sat there.\ndeclare const Deno: { env: { get(k: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC -\n// proved by fetching this very source with no token, so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// The digest also lives in the environment. Keeping even a reusable verifier in public source makes\n// rotation harder and permits offline guessing when a human chose a weak key.\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const expected = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\") || \"\";\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (expected.length !== 64 || got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\n\n// v1.7.1, VIEW-ONLY access. The admin link is also the stop-button link, so anyone Kim forwards\n// it to could halt her follow-up. The view key is DERIVED from the admin digest (deterministic, no\n// second secret to store): it renders the same page minus the stop controls and the JSON/selftest\n// modes. Give Kim and staff the view link; the admin link stays with whoever may press stop.\nasync function viewKey(): Promise {\n // v1.7.2 (review fix), derived from the GHL token (a real secret in env/private blob), not\n // from the admin DIGEST that anyone can read in this public source. Rotating the CRM token\n // rotates the view links, which is the right coupling anyway.\n const tok = Deno.env.get(\"GHL_TOKEN\") || ((await get(\"puppy_config\", null))?.ghlToken ?? \"\");\n if (!tok) return \"tds_view_disabled_no_token_available_x\";\n return \"tds_view_\" + (await sha256Hex(tok + \":view\")).slice(0, 32);\n}\nasync function viewAuthorised(k: string): Promise {\n const expected = await viewKey();\n if (k.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < k.length; i++) d |= k.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst KILL_BLOB = \"nurture_kill\";\nconst BUSINESS_TZ = \"America/New_York\";\n// THE TWO TAGS THIS PAGE NAMES TO KIM, read the way the engine reads them. The page tells her to\n// take one tag off a record and check the other is on it, so if either name drifts the page is\n// sending her to do something to a tag that no longer decides anything.\n// TAG_SOURCE_SIGNAL is env-overridable in the engine and is read from the same env var here.\n// TAG_ENROLLED is minted by the engine and has no env override, so this is a SECOND COPY of\n// engine/puppy_path_v1.1.ts's constant. It cannot be imported: that module is the whole engine\n// and importing it here would pull the sender into the page. If it is ever renamed there, rename\n// it here in the same change. (tests/dashboard.test.mjs pins the two together.)\nconst TAG_SOURCE_SIGNAL = Deno.env.get(\"TAG_SOURCE_SIGNAL\") || \"nurture - puppy\";\nconst TAG_ENROLLED = \"puppy-path-v1\";\n/** How many journal entries the page reads. It SHOWS at most RECENT_ROWS rows: see `collapse`. */\nconst RECENT_RAW = 400;\n/** How many rows the table draws. Runs of identical entries take one row each, not one per entry. */\nconst RECENT_ROWS = 40;\n\nasync function blobMod() {\n return (await import(\"https://esm.town/v/std/blob\")).blob;\n}\nasync function get(key: string, fallback: any = null) {\n try {\n const blob = await blobMod();\n const v = await blob.getJSON(key);\n return v ?? fallback;\n } catch {\n return fallback;\n }\n}\n\n// A FAILED READ AND AN EMPTY VALUE ARE NOT THE SAME FACT, and `get()` above cannot tell them\n// apart: it catches the failure and hands back the fallback, so a record that could not be read\n// comes back looking exactly like a record that has never been written.\n//\n// On most blobs that costs nothing. On the run record it costs a sentence: one failed read and\n// this page told Kim \"This has never recorded a run. Tell Amir.\" about a system that has been\n// running hourly all week, and put \"no run has reported yet\" under a banner she checks daily.\n// Both are claims about her system made out of a failure to read one small record.\n// So the run record is read through this instead, and the page has a third thing it can say.\ntype Read = { ok: boolean; v: T | null };\nasync function read(key: string): Promise> {\n try {\n const blob = await blobMod();\n return { ok: true, v: ((await blob.getJSON(key)) ?? null) as T | null };\n } catch {\n return { ok: false, v: null };\n }\n}\n\n\n// Plain-English names for the engine's internal statuses. Kim never sees a snake_case token.\nconst STATUS_LABEL: Record = {\n main: \"In the main sequence\",\n awaiting_appt_outcome: \"Booked, waiting on the Pup Talk\",\n branch_a: \"Missed the Pup Talk, being rebooked\",\n branch_b: \"Had the Pup Talk, hasn't bought yet\",\n slow_track: \"On the slow track, an occasional helpful message\",\n paused_reply: \"Paused, they replied, a human has it\",\n done_booked: \"Booked a Pup Talk\",\n done_customer: \"Became a customer\",\n done_hard_exit: \"Stopped, opted out or disqualified\",\n done_soft_21d: \"Finished the sequence\",\n done_branch_complete: \"Finished the follow-up\",\n // v1.7.2, 14 Aug 2026. Two end states added to the engine by reachability.ts. Without a name\n // here the lookup below used to fall through to the raw value, so the words \"done_send_failed\"\n // would have appeared on a page written for somebody who does not want to know what a status is.\n done_unreachable: \"No way to contact them\",\n done_send_failed: \"Messages keep failing — needs a look\",\n // v1.10, 14 Aug 2026. Written when somebody carrying the joining tag turns out to have been a\n // customer already, so the follow-up never starts for them. Deliberately NOT done_customer, and\n // that distinction is the whole reason it exists: WON below sums done_booked and done_customer\n // off the saved state and puts the total on the \"Booked or became a customer\" tile, which is the\n // one number Kim judges this system by. These people bought before it ever touched them and\n // received nothing from it, so counting them there would credit it with her own sales. It is in\n // neither ACTIVE nor WON, it needs nothing from her, and it never reaches the tile that asks her\n // to fix something.\n done_not_enrolled: \"Already a customer, so never put on the follow-up\",\n};\nconst ACTIVE = [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"];\nconst WON = [\"done_booked\", \"done_customer\"];\n// `done_unreachable` and `done_send_failed` are the two end states where the system has stopped\n// trying. They are neither ACTIVE nor WON, and they are counted STANDING (from the saved state,\n// which persists) rather than per day: see `unreachable` / `deadLettered` in collect().\n\n/** Kim never reads an enum. An unnamed status is our bug and is reported to us, in `collect()`,\n * as `unlabelledStatuses`; what she gets is a true sentence that does not pretend to know more\n * than we do. [was: `STATUS_LABEL[r.status] || r.status`, which put the raw token on her page.] */\nfunction statusLabel(s: unknown): string {\n const k = String(s ?? \"\");\n return STATUS_LABEL[k] || \"In the system, at a stage this page has not been taught to name yet\";\n}\n\n// The same discipline for journal events. Kept beside STATUS_LABEL rather than inside the\n// renderer so `collect()` can report the gaps to us in the admin JSON.\nconst EVENT_LABEL: Record = {\n sent: \"message sent\", enrolled: \"joined the sequence\", pause_reply: \"paused, they replied\",\n soft_exit_21d: \"finished the 21 days, moved to slow track\", advance_status: \"moved forward\",\n // [was: \"message FAILED\" and \"check FAILED\", in capitals mid-sentence. Same 14 August note from\n // Kim as the headings: capitals are shouting, not emphasis. These two rows are already coloured\n // and already sit under a heading that says something went wrong.]\n send_failed: \"message failed\", skip_step_channel_optout: \"step skipped, opted out of that channel\",\n branch_complete: \"follow-up finished\", pruned: \"archived\", pause_timeout: \"waited too long, needs a person\",\n enroll_refused: \"not enrolled\", sequence_drift: \"copy changed underneath, check\", contact_failed: \"check failed\",\n // v1.7.2, 14 Aug 2026. Everything below was already being written into the journal by the engine\n // and had no name here, so it reached Kim as the raw word. `hard_exit` was the live one: her\n // panel has been printing \"hard_exit\" beside a real person who became a customer. The first two\n // are the new ones from reachability.ts.\n deferred: \"held back this run\",\n dead_letter: \"stopped trying — needs a look\", delivery_failed: \"message did not arrive\",\n delivery_unknown: \"could not tell whether it arrived\",\n optout_write_failed: \"opt-out not written to the CRM, needs a look\",\n hard_exit: \"left the sequence for good\", skip_step: \"step skipped\",\n enrollment_surge_hold: \"enrollment paused, too many at once\",\n};\n/** Same rule as statusLabel: an unnamed event is our bug, reported to us as `unlabelledEvents`. */\nconst eventLabel = (e: unknown) =>\n EVENT_LABEL[String(e ?? \"\")] || \"something this page has not been taught to name yet\";\n\nfunction esc(s: unknown) {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string)\n );\n}\n\nfunction todayInBusinessTz(): string {\n // en-CA gives YYYY-MM-DD, which is what the journal timestamps slice to.\n return new Intl.DateTimeFormat(\"en-CA\", { timeZone: BUSINESS_TZ }).format(new Date());\n}\n\n/** A stamp Kim can hold against her own clock. Every timestamp in the blobs is UTC, and Georgia is\n * four hours behind it in August, so printing one raw put a time on her page that had not happened\n * yet. [was: `String(d.killedAt).slice(0,16).replace(\"T\",\" at \")` — 20:59 UTC rendered as \"20:59\"\n * beside a sentence she read at 4:59 in the afternoon.] */\nfunction inBusinessTz(iso: unknown): string | null {\n const t = Date.parse(String(iso ?? \"\"));\n if (!Number.isFinite(t)) return null;\n try {\n return new Intl.DateTimeFormat(\"en-US\", {\n timeZone: BUSINESS_TZ, month: \"short\", day: \"numeric\", hour: \"numeric\", minute: \"2-digit\",\n }).format(new Date(t));\n } catch { return null; }\n}\n\nasync function collect() {\n const [state, summary, runR, journal, lastError, kill] = await Promise.all([\n get(\"puppy_state\", {}),\n get(\"puppy_summary\", null),\n read(\"puppy_run_state\"),\n get(\"puppy_journal\", []),\n get(\"puppy_last_error\", null),\n get(KILL_BLOB, null),\n ]);\n const run = runR.v;\n const wd = await get(\"wd_public\", null); // v1.5, independent watchdog headline\n\n const rows: any[] = Object.entries(state || {}).map(([id, s]: any) => ({ id, ...(s || {}) }));\n const byStatus: Record = {};\n for (const r of rows) byStatus[r.status || \"unknown\"] = (byStatus[r.status || \"unknown\"] || 0) + 1;\n\n const j: any[] = Array.isArray(journal) ? journal : [];\n const today = todayInBusinessTz();\n const todays = j.filter((r) => String(r.ts || \"\").slice(0, 10) === today);\n\n const sentToday = todays.filter((r) => r.event === \"sent\" && !r.test).length;\n const testSentToday = todays.filter((r) => r.event === \"sent\" && r.test).length;\n // v2 fix (adversarial pass): this matched \"failed\"/\"error\" exactly, but the engine journals\n // \"send_failed\", so the error tile could never leave zero and \"RUNNING, with errors today\" was\n // an unreachable state. A dashboard whose alarm cannot fire is worse than no dashboard, because it\n // is actively reassuring. Match any failure-shaped event instead.\n const failedToday = todays.filter((r) => /fail|error/i.test(String(r.event ?? \"\"))).length;\n\n const active = ACTIVE.reduce((n, k) => n + (byStatus[k] || 0), 0);\n const won = WON.reduce((n, k) => n + (byStatus[k] || 0), 0);\n const paused = byStatus[\"paused_reply\"] || 0;\n // STANDING, from the saved state, not from today's journal rows. `failedToday` below resets at\n // midnight Georgia time, so a contact the engine gave up on last Tuesday is invisible in it by\n // Wednesday morning; these two do not move until somebody fixes the contact's details.\n // (engine/reachability.ts also has a `failureCounts()`, which counts failure EVENTS inside the\n // journal window. Different unit, different question, deliberately not reused here: this is a\n // count of people currently stopped, that is a count of things that happened.)\n const unreachable = byStatus[\"done_unreachable\"] || 0;\n const deadLettered = byStatus[\"done_send_failed\"] || 0;\n // Our bug list, not hers. Any status the engine writes that this file has no plain-English name\n // for shows up here, in the admin JSON, where we will see it.\n const unlabelledStatuses = Object.keys(byStatus).filter((s) => !STATUS_LABEL[s]).sort();\n const unlabelledEvents = [...new Set(j.map((r) => String(r?.event ?? \"\")))].filter((e) => e && !EVENT_LABEL[e]).sort();\n\n // Staleness is the alarm that matters most: a scheduler that stops firing is exactly the silent\n // failure this client cancels contracts over. But an alarm that cries wolf gets ignored, which\n // costs the same thing more slowly.\n // [was: `ageMin > 60`, with the comment \"60 min = four missed 15-minute ticks\". The engine has\n // not run every 15 minutes for a long time; it runs about once an hour. Measured 14 Aug over\n // the 39 most recent gaps in `run.history`: shortest 11 min, longest 64.2, and 36 of the 39\n // sat between 60.0 and 61.0. Four of them ran past 61 minutes, which is where `> 60` starts\n // firing, so this page has been showing Kim a red NOT RUNNING and telling her to call Amir\n // for a minute or two at a time, roughly five minutes across those 39 hours, with the engine\n // working perfectly. The threshold has to be a multiple of the cadence it is watching, not a\n // number left over from an older one: 130 min is two missed hourly checks plus the observed\n // jitter, and still less than a lost morning.]\n const STALE_MIN = 130;\n const lastRunTs = run?.ts || null;\n const ageMin = lastRunTs ? Math.floor((Date.now() - new Date(lastRunTs).getTime()) / 60000) : null;\n const stale = ageMin === null || ageMin > STALE_MIN;\n\n return {\n generatedAt: new Date().toISOString(),\n run: run ?? null,\n contacts: rows.map((r) => ({\n id: r.id,\n status: r.status,\n label: statusLabel(r.status),\n enteredAt: r.enteredAt ?? null,\n lastMainStepSent: r.lastMainStepSent ?? null,\n lastSentAt: r.lastSentAt ?? null,\n })),\n killed: !!kill?.stopped,\n killedAt: kill?.at ?? null,\n testMode: run?.testMode ?? null,\n // Did the run record answer at all? Every sentence on the page that names practice-or-live, the\n // version, or whether the system is running is gated on this, so a failed read renders as a\n // failed read rather than as a confident claim in whichever direction the default happened to\n // point. `testMode` above stays as it is: null there means \"no readable value\", and the page\n // now has the second fact it needs to say WHY.\n runReadOk: runR.ok,\n // MODE IS THREE-VALUED. A page that can only say practice or live has to pick one when it does\n // not know, and picking one is how this project put \"in practice mode ... nobody real is being\n // messaged\" in front of Kim for three days while two real people were being messaged.\n modeKnown: runR.ok && typeof run?.testMode === \"boolean\",\n engineVersion: run?.v ?? null,\n lastRunTs,\n lastRunAgeMin: ageMin,\n stale,\n counts: { total: rows.length, active, won, paused, sentToday, testSentToday, failedToday, unreachable, deadLettered },\n byStatus,\n unlabelledStatuses,\n unlabelledEvents,\n lastError: lastError ?? null,\n // A WIDER WINDOW THAN THE PAGE SHOWS, ON PURPOSE.\n //\n // [was: `j.slice(-40)`, rendered one row per entry. On 14 August 2026 Kim's page said \"The last\n // 40 things it did\" above 39 copies of one sentence: `not enrolled / live booking already\n // exists`, once an hour for two days, because one contact who already has a booking is\n // re-refused on every single run and every refusal is journalled. Everything else the system\n // had ever done had been pushed off the end of her page by one repeating condition. The\n // renderer now folds runs of identical entries into one row with a count, and the window is\n // widened to match: forty ROWS of history rather than forty entries, so a repeat costs one row\n // instead of forty. The engine writing the repeat in the first place is a separate fix.]\n recent: j.slice(-RECENT_RAW).reverse(),\n recentRaw: Math.min(j.length, RECENT_RAW),\n journalTotal: j.length,\n summary: summary ?? null,\n watchdog: wd ?? null,\n };\n}\n\n// ---- rendering ------------------------------------------------------------------------------------\n\nconst RAMP = [\"#86b6ef\", \"#3987e5\", \"#256abf\", \"#184f95\", \"#0f3a6e\"]; // validated ordinal, light+dark\nconst GOOD = \"#0ca30c\", WARN = \"#fab219\", CRIT = \"#d03b3b\";\n\nfunction tile(label: string, value: string | number, note: string, accent?: string) {\n return `

${esc(value)}

${esc(label)}

${esc(note)}

`;\n}\n\nfunction stageBar(byStatus: Record, total: number) {\n const order = [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"];\n const segs = order\n .map((k, i) => ({ k, n: byStatus[k] || 0, c: RAMP[i] }))\n .filter((s) => s.n > 0);\n const sum = segs.reduce((a, s) => a + s.n, 0);\n if (!sum) {\n return `

Nobody is in a sequence right now. That is expected until the first contact is tagged.

`;\n }\n const bar = segs\n .map((s) => ``)\n .join(\"\");\n const legend = segs\n .map((s) => `

${esc(STATUS_LABEL[s.k])}${s.n}

`)\n .join(\"\");\n return `

${bar}

${legend}\n \n \n ${segs.map((s) => ``).join(\"\")}\n

The same numbers as a table
Stage	People
${esc(STATUS_LABEL[s.k])}	${s.n}
Total in a sequence	${sum}

`;\n}\n\n/** EXPORTED so it can be rendered and read in a test. Nothing tested this page's words until\n * 14 Aug 2026: every check on this file was about auth and credentials, and meanwhile the page\n * itself carried four false sentences to a live client for days. val.town runs the default export\n * and ignores named ones, so this costs the deployed val nothing. */\nexport function page(d: any, k: string, opts: { readonly?: boolean } = {}) {\n const c = d.counts;\n // HEADINGS AND LABELS ARE IN SENTENCE CASE. Kim asked for this on 14 August 2026, about this\n // page: the banner shouted RUNNING NORMALLY, every card heading was forced to capitals by one\n // line of stylesheet, and two journal words were spelled FAILED mid-sentence. Capitals are not\n // emphasis to her, they are shouting, and a page that shouts is a page she reads less carefully.\n const health = !d.runReadOk\n // A FAILED READ IS NOT A VERDICT. [was: nothing — this state did not exist, so a blob read that\n // threw fell straight through to `d.stale` (age null counts as stale) and printed \"Not\n // running ... This has never recorded a run. Tell Amir.\" about a system running perfectly.]\n ? { c: WARN, icon: \"⚠\", t: \"Could not check\", m: \"This page could not read the follow-up system's own record just now, so it will not tell you whether it is running. That is one small record failing to load, not a fault in the follow-up itself. Refresh in a minute; if this is still showing in an hour, tell Amir.\" }\n : d.killed\n ? { c: CRIT, icon: \"■\", t: \"Stopped\", m: `You stopped the system${inBusinessTz(d.killedAt) ? \" on \" + esc(inBusinessTz(d.killedAt)) + \" Georgia time\" : \"\"}. Nothing is being sent.` }\n : d.stale\n // [was: \"It should run every 15.\" The line four rows below this one, the one Kim actually sees\n // most days, says it checks about once an hour, and about once an hour is what it does. Two\n // sentences on one page disagreeing about the same clock is how a page stops being believed.\n // Corrected 14 Aug 2026 to match both the other sentence and the measured cadence.]\n ? { c: CRIT, icon: \"⚠\", t: \"Not running\", m: d.lastRunTs ? `The last check was ${d.lastRunAgeMin} minutes ago. It should check about once an hour, so it has now missed at least two. Tell Amir.` : \"This has never recorded a run. Tell Amir.\" }\n : c.failedToday > 0\n ? { c: WARN, icon: \"⚠\", t: \"Running, with problems today\", m: `${c.failedToday === 1 ? \"One message\" : c.failedToday + \" messages\"} failed today. Details are at the bottom of this page.` }\n : { c: GOOD, icon: \"✓\", t: \"Running normally\", m: `Last check: ${d.lastRunAgeMin === 1 ? \"1 minute\" : d.lastRunAgeMin + \" minutes\"} ago. It checks about once an hour around the clock, and messages only ever go out between 9am and 7pm Georgia time.` };\n\n // THREE STATES, NOT TWO. The unknown one used to say \"no run has reported yet\", which is one\n // possible reason out of two and was printed for both: a run record that could not be read looked\n // identical to a system that had never started. It now says which of the two it is, and in\n // neither case does it name a mode it could not read.\n const mode = d.testMode === true\n ? `

Practice mode: the system is doing everything except actually sending to your customers. Practice messages go to a dead-end test contact that cannot receive anything, so if you test it yourself you'll get silence, that's the point of practice mode. Keep handling new calls and messages the way you do today; it takes over only when you say the word and this banner says Live.

`\n : d.testMode === false\n // THE STOP SWITCH OUTRANKS THE MODE. [was: \"Live: real messages are going to real people.\"\n // unconditionally. Press Stop and the banner four inches above turns red and says \"Nothing is\n // being sent\", and this line went on saying real messages are going to real people. Both\n // sentences on one screen, one of them false, and the false one is the reassuring one.]\n ? d.killed\n ? `

Live, but stopped: this system is set up to send real messages to real people, and you have it stopped, so nothing is going out to anybody until you press Start.

`\n : d.stale\n ? `

Live, but not checking in: this system is set up to send real messages to real people, and it has missed its last checks, so nothing is going out while that lasts. The red banner above says the same thing.

`\n : `

Live: real messages are going to real people.

`\n : !d.runReadOk\n ? `

Practice or live: could not check. The system's own record did not answer when this page opened, so this page will not guess which one it is. Refresh in a minute.

`\n : `

Practice or live: not recorded. The system has not written down which one it is set to, so this page will not guess. If the banner above says it has never recorded a run, that is the reason.

`;\n\n // v1.7, Kim's own question (\"how does she know what needs doing today?\") answered on the page\n // itself, permanently. One plain sentence, computed from the same numbers as the tiles.\n //\n // AND IT HAS TO SURVIVE THE LINE PRINTED DIRECTLY UNDER IT. [was: the \"Nothing\" branch ended\n // \"If the banner above is green and Paused says 0, you can close this page.\" — a rule that tells\n // her to close the page while the very next line on it read \"The watchdog flagged 1 thing(s) for\n // Amir to look at.\" Two sentences an inch apart, one saying nothing is outstanding and one\n // naming something outstanding, and the reader is left to work out which to believe. The\n // watchdog's findings are Amir's work, not hers, so the answer is to say that out loud rather\n // than to hide either line.]\n const wdWorst = String(d.watchdog?.worst ?? \"\");\n const today = `

What needs doing today

${\n d.killed\n ? \"The system is stopped. Nothing will happen until someone presses Start below.\"\n : c.failedToday > 0\n ? `Look at the problems listed at the bottom of this page, ${c.failedToday === 1 ? \"one message\" : c.failedToday + \" messages\"} failed today.`\n : c.paused > 0\n ? `${c.paused === 1 ? \"One person\" : c.paused + \" people\"} replied and ${c.paused === 1 ? \"is\" : \"are\"} waiting on a human. Open Conversations and answer ${c.paused === 1 ? \"them\" : \"each one\"}, that is today's work.`\n : !d.runReadOk\n ? \"This page could not read the follow-up system's own record just now, so it cannot tell you whether anything needs doing. Refresh in a minute.\"\n // THE SAME CONTRADICTION AS THE WATCHDOG LINE, ONE CARD HIGHER AND OLDER. The banner directly\n // above this box turns red and says \"Not running ... Tell Amir\" when the system has missed two\n // checks, and this box went on saying \"Nothing. ... you can close this page.\" There was no\n // stale branch here at all, so the one state where she must act was the one state where the\n // page told her she could leave.\n : d.stale\n ? `Tell Amir that the follow-up system ${d.lastRunTs ? \"has stopped checking in\" : \"has never checked in at all\"}. That is the red banner at the top of this page, and it is the one thing on here worth interrupting him for.`\n : wdWorst === \"CRITICAL\"\n ? \"Nothing for you to do yourself. The watchdog has found a problem and has already told Amir; the red line just below says so. If it is still red in an hour, call him.\"\n : wdWorst === \"WARNING\"\n ? \"Nothing for you. The line directly below this box is the watchdog's, and what it has flagged is on Amir's list rather than yours.\"\n // The closing rule names only things that are actually on the page. [was: \"...and Paused\n // says 0, you can close this page.\" — a rule that told her to close a page whose very next\n // line said something had been flagged. It now names the watchdog line as one of the things\n // to look at, and when there is no watchdog line to look at it does not send her to it.]\n : d.watchdog\n ? \"Nothing. If the banner above is green, Paused says 0, and the watchdog line below says nothing is wrong, you can close this page.\"\n : \"Nothing. If the banner above is green and Paused says 0, you can close this page.\"\n }

`;\n\n // Journal rows carry engine-internal names (sent main#3); translate to the words the PDFs use.\n const pretty = (s: string) =>\n s.replace(/\\bmain#(\\d+)/g, \"Touch $1 of the first 21 days\")\n .replace(/\\bslow#(\\d+)/g, \"Slow track message $1\")\n .replace(/\\bbranch_a#(\\d+)/g, \"rebooking note $1\")\n .replace(/\\bbranch_b#(\\d+)/g, \"after-the-call note $1\");\n // FOLD RUNS OF IDENTICAL ENTRIES, AND SAY ON THE PAGE THAT THAT IS WHAT HAPPENED.\n //\n // Only CONSECUTIVE identical entries fold. Two of the same thing with something else in between\n // stay two rows, because the gap between them is part of the story. \"Identical\" means the same\n // event about the same person with the same detail and the same practice flag; the only thing\n // that differs inside a fold is the time, and both ends of that are printed.\n //\n // Folding is not hiding. Every folded entry is counted on the row that replaced it, the count and\n // the two times are shown, and the note under the table states the arithmetic so it adds up.\n const sameAs = (a: any, b: any) =>\n String(a?.event ?? \"\") === String(b?.event ?? \"\") &&\n String(a?.contactId ?? \"\") === String(b?.contactId ?? \"\") &&\n String(a?.detail ?? \"\") === String(b?.detail ?? \"\") &&\n !!a?.test === !!b?.test;\n const groups: { r: any; n: number; oldest: string; newest: string }[] = [];\n for (const r of (d.recent || [])) {\n const g = groups[groups.length - 1];\n // d.recent is newest first, so each further entry in a run is OLDER than the one before it.\n if (g && sameAs(g.r, r)) { g.n++; g.oldest = String(r?.ts ?? \"\"); }\n else groups.push({ r, n: 1, oldest: String(r?.ts ?? \"\"), newest: String(r?.ts ?? \"\") });\n }\n const shown = groups.slice(0, RECENT_ROWS);\n const entriesShown = shown.reduce((a, g) => a + g.n, 0);\n const folded = entriesShown - shown.length;\n // Georgia time, said once in the note under the table rather than on all forty rows. [was: the\n // raw stamp sliced to 16 characters, which is UTC — every time in this table read four hours\n // later than the clock on her wall, so a message sent at 4:59 in the afternoon showed as 20:59.]\n const when = (ts: unknown) => esc(inBusinessTz(ts) ?? \"time not recorded\");\n const rows = shown\n .map((g) => `${when(g.newest)}${esc(eventLabel(g.r.event))}${g.r.test ? ' practice' : \"\"}${esc(pretty(String(g.r.detail || \"\")))}${\n g.n > 1\n ? `

The same thing ${g.n} times over, one after another with nothing in between: ${when(g.oldest)} to ${when(g.newest)}. Shown once here, with the count, so one thing repeating cannot push the rest off this table.

`\n : \"\"\n }`)\n .join(\"\") || `Nothing recorded yet.`;\n // The arithmetic, spelled out, because she checks it.\n const rowsNote = groups.length === 0\n ? \"The system has not written anything down yet.\"\n : `Times are Georgia time, newest first. ${folded === 0\n ? `Nothing repeated back to back, so every entry has its own row: ${shown.length} ${shown.length === 1 ? \"row\" : \"rows\"} for ${entriesShown} ${entriesShown === 1 ? \"entry\" : \"entries\"}.`\n : `Where the same thing happened over and over with nothing in between, it is shown once with a count instead of once per time. So this table is ${shown.length} ${shown.length === 1 ? \"row\" : \"rows\"} plus ${folded} folded into ${folded === 1 ? \"one of them\" : \"them\"}, which is ${shown.length} + ${folded} = ${entriesShown} ${entriesShown === 1 ? \"entry\" : \"entries\"}. Nothing is dropped: every repeat is counted on the row that stands for it.`\n }${d.journalTotal > entriesShown ? ` The system has ${d.journalTotal} written down in total, so there is more history further back than this table reaches.` : \"\"}`;\n\n return `\n\nThe Dogs Spot, Nurture Control Panel\n

The Dogs Spot, Nurture Control Panel

Everything the follow-up system is doing, on one page. The numbers are read fresh every time this page opens, refresh for the latest.

\n\n

${health.icon}

${health.t}

${health.m}

${mode}

\n\n${today}\n\n${d.watchdog ? `

${esc(d.watchdog.headline)} ●

` : \"\"}\n\n

Right now

\n${tile(\"People being followed up\", c.active, d.testMode === true ? \"right now that is the test dummy, not a real customer\" : \"in a sequence right now\")}\n${tile(\"Booked or became a customer\", c.won, \"the whole point of the system\", c.won > 0 ? GOOD : undefined)}\n${tile(\"Paused: someone replied\", c.paused, \"answer them in the Conversations inbox; the system stays out of it\", c.paused > 0 ? WARN : undefined)}\n${tile(\"Messages sent today\", c.sentToday, c.testSentToday ? `plus ${c.testSentToday} practice` : \"to real people\")}\n${tile(\"Problems today\", c.failedToday, c.failedToday ? \"see the bottom of this page\" : \"none\", c.failedToday ? CRIT : GOOD)}\n${(() => {\n // THE TILE THAT DOES NOT RESET AT MIDNIGHT. \"Problems today\" above is a count of things that\n // happened since midnight, so somebody the system gave up on last week shows as zero in it\n // every morning and is never mentioned again. This one counts PEOPLE currently stopped. The two\n // numbers are stated separately as well as added up, because she checks the arithmetic and a\n // bare total hides which of the two problems she actually has.\n //\n // TWO SENTENCES HERE WERE UNTRUE UNTIL 14 AUGUST 2026 AND ARE CORRECTED:\n // 1. [was: \"unlike the tile beside it this one does not reset overnight\". It does reset — not\n // overnight, at 60 days, when pruneState drops a terminal entry whose last check is more\n // than 60 days old. \"Does not reset\" was the shape of the truth with the actual rule filed\n // off. It now says which clock it runs on.]\n // 2. [was: \"They stay on this number until somebody fixes the contact details in your CRM.\"\n // Fixing the details changed nothing: any state entry at all removed the contact from the\n // enrolment filter, so the instruction named an action with no effect. The engine now lets\n // a dead letter back in (reEnrollable, engine/reachability.ts), and the two halves of this\n // tile take DIFFERENT actions, so they are told apart rather than lumped together:\n // - unreachable never got the puppy-path-v1 tag (they never started the path), so adding\n // a phone number or an email address is the whole job;\n // - dead-lettered did get it, and the tag is the first clause of the filter, so it has to\n // come off as well. The CRM task the engine writes says the same thing.]\n const un = c.unreachable || 0, dl = c.deadLettered || 0;\n const stuck = un + dl;\n // ONE INSTRUCTION FOR BOTH HALVES, AND THE ORDER IS THE LOAD-BEARING PART.\n //\n // [An earlier draft of this on 14 Aug 2026 split the instruction by status: \"no way to contact\n // them\" was told to just fix the details, because that group is refused at enrolment and never\n // gets the puppy-path-v1 tag. That is only one of the two roads into that status. The other is\n // rule 1c (reachabilityExit, engine/reachability.ts): somebody who WAS enrolled — so does carry\n // the tag — and later had their number and address taken off the record. For those, \"just fix\n // the details\" is an instruction that does nothing, because the tag keeps them out of the\n // enrolment search whatever else is true. Caught by the engine's author before it shipped. The\n // steps below are true for every person this tile can be counting.]\n //\n // Why the order matters rather than being tidiness: re-admission requires the record to have an\n // address or a number at the moment the system looks. Take the tag off first, with the record\n // still empty, and nothing happens at all — by design, so the contact is not re-refused on every\n // run forever — and it looks exactly like the fix not working.\n const fix = `To put somebody back on the follow-up, do it in this order. First put a phone number or an email address on their record: without one the system will not take them back at all, and every later step will look like it did nothing. Then, if the record still carries the tag \"${esc(TAG_ENROLLED)}\", take that tag off. Then check they still carry \"${esc(TAG_SOURCE_SIGNAL)}\", the tag that starts somebody on the puppy path, and put it back if it has gone. They begin again at the first message on the next check.${\n dl ? ` For anyone whose messages kept failing, a wrong number and a right one look identical to the system, so if the number is still wrong it will send a few and stop again.` : \"\"\n } There is a task waiting in your CRM for each of these people that says the same thing.`;\n // The split is only worth printing when there IS a split. [was: the sum unconditionally, so one\n // person with no phone number read \"1 with no phone number and no email address on the record,\n // plus 0 whose messages kept failing ...: 1 + 0 = 1\" — arithmetic offered as proof, about a\n // number she can see is one.]\n const split = un && dl\n ? `${un} with no phone number and no email address on the record, plus ${dl} whose messages kept failing until the system stopped trying: ${un} + ${dl} = ${stuck}.`\n : un\n ? `${un === 1 ? \"One person has\" : `${un} people have`} no phone number and no email address on the record.`\n : `${dl === 1 ? \"One person's messages\" : `${dl} people's messages`} kept failing until the system stopped trying.`;\n const note = stuck === 0\n ? \"none. Unlike Problems today beside it, this one does not go back to zero at midnight: somebody stays counted here until the system clears their record out, which it does 60 days after it stopped trying.\"\n : `${split} ${fix} Left alone they stay on this number until the system clears their record out, 60 days after it stopped trying.`;\n return tile(\"People it could not reach\", stuck, note, stuck ? WARN : GOOD);\n})()}\n

\n\n

Where those people are

${stageBar(d.byStatus || {}, c.total)}${!(d.byStatus || {})[\"slow_track\"] ? `

The slow track (the occasional messages that follow the first 21 days) will appear here once the first person finishes their three weeks. Their first slow-track message goes out a week after that, on day 28.

` : \"\"}

\n\n${opts.readonly ? `

This page is view-only. The stop switch is on the owner's link.

` : `

Stop everything

This halts the follow-up system before it looks at a single person. It takes effect on the next check, which is about an hour away at most, and needs no one's help. Nothing is deleted, everyone keeps their place and picks up where they left off when you start it again. (When it is stopped, a green Start button appears right here.)

\n\n

To take one single person off every track instead: open their contact in GoHighLevel and switch on the main Do Not Disturb for the whole contact. The system reads that the next time it looks at that person, which is whenever their next message falls due, or within a day at the latest. You are not waiting unprotected in between: the only moment it would message them is the same moment it reads the switch. Once it reads it, they are off every track for good. One thing to watch, because it is easy to hit by accident: GoHighLevel also has separate Do Not Disturb switches for texts on their own and for emails on their own, lower down the same screen. Those stop the one they name and nothing else, so turning off texts leaves the emails running. The main one at the top is the only one that stops everything.

\n${d.killed\n ? ``\n : ``}\n

`}\n\n

${d.journalTotal <= entriesShown && groups.length <= RECENT_ROWS ? \"Everything it has done so far\" : \"What it has been doing\"}

\n${rows}

When	What	Detail

${rowsNote}

\n\n${d.lastError && d.lastError.at && Date.now() - new Date(d.lastError.at).getTime() < 24 * 3600 * 1000 ? `

Something went wrong in the last 24 hours

Technical details for whoever fixes it, if this box is showing, tell Amir and include what is below.

${esc(JSON.stringify(d.lastError).slice(0, 1200))}

` : \"\"}\n\n\n

${d.engineVersion\n ? `The follow-up system reported itself as version ${esc(d.engineVersion)} on its last check${d.lastRunAgeMin == null ? \"\" : d.lastRunAgeMin === 1 ? \", 1 minute ago\" : `, ${d.lastRunAgeMin} minutes ago`}. That is read from its own record, not typed on this page, so it is the version that actually ran.`\n : d.runReadOk\n ? \"The follow-up system has not recorded a version yet, so this page cannot tell you which one is running.\"\n : \"This page could not read the follow-up system's record just now, so it cannot tell you which version is running.\"} The numbers above were read fresh when this page opened.

`;\n}\n\n// ---- live self-test ------------------------------------------------------------------------------\n// Resolves the CRM credential exactly the way the engine does (env var first, then the puppy_config\n// blob) and pings the four endpoints the engine depends on. Reports status codes only, the token is\n// never returned, logged, or echoed. This exists because a stale credential is the failure mode that\n// looks identical to \"quiet\": the scheduler keeps ticking, every read fails, and nothing tells anyone.\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\n\nasync function resolveEngineToken(): Promise<{ token?: string; from: string }> {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return { token: env, from: \"env GHL_TOKEN\" };\n const cfg = await get(\"puppy_config\", null);\n if (cfg?.ghlToken) return { token: cfg.ghlToken, from: \"puppy_config blob\" };\n return { from: \"NOT FOUND\" };\n}\n\nasync function selfTest() {\n const { token, from } = await resolveEngineToken();\n const checks: any[] = [];\n const probe = async (name: string, url: string, ver: string, why: string) => {\n if (!token) return checks.push({ name, status: null, ok: false, why, note: \"no credential resolved\" });\n try {\n const r = await fetch(url, { headers: { Authorization: `Bearer ${token}`, Version: ver, Accept: \"application/json\" } });\n checks.push({ name, status: r.status, ok: r.status === 200, why });\n } catch (e) {\n checks.push({ name, status: null, ok: false, why, note: String(e).slice(0, 120) });\n }\n };\n await probe(\"read calendar bookings\", `${GHL}/calendars/events?locationId=${LOC}&calendarId=qHuYJ0NEqzibnoqf5Cw3&startTime=${Date.now() - 864e5}&endTime=${Date.now()}`, \"2021-04-15\", \"how it notices someone booked a Pup Talk\");\n await probe(\"read replies\", `${GHL}/conversations/search?locationId=${LOC}&limit=1`, \"2021-04-15\", \"how it pauses when someone writes back\");\n await probe(\"read contacts\", `${GHL}/contacts/?locationId=${LOC}&limit=1`, \"2021-07-28\", \"how it reads names and dog names\");\n await probe(\"read deals\", `${GHL}/opportunities/pipelines?locationId=${LOC}`, \"2021-07-28\", \"how it notices someone became a customer\");\n return { credentialFrom: from, allOk: checks.every((c) => c.ok), checks };\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const isAdmin = await authorised(k);\n const isViewer = !isAdmin && (await viewAuthorised(k));\n if (!isAdmin && !isViewer) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n if (isViewer) {\n // view key renders the dashboard only, no stop/go, no JSON, no selftest.\n const d = await collect();\n return new Response(page(d, k, { readonly: true }), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"selftest\") === \"1\") {\n return new Response(JSON.stringify(await selfTest(), null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n // R37 (11 Aug 2026, go-live prep): remove one contact from engine state. Exists for exactly one\n // job: taking the ZZTEST dummy out before TEST_MODE flips, so live mode never sends its queued\n // steps (an unprefixed email to Amir, then an SMS to +10000000000 that fails on Kim's dashboard).\n // Admin-gated like stop/go. Returns counts so the caller has a receipt, not a hope.\n if (url.searchParams.get(\"prune\")) {\n const id = String(url.searchParams.get(\"prune\"));\n const blob = await blobMod();\n const st = ((await blob.getJSON(\"puppy_state\").catch(() => null)) ?? {}) as Record;\n const existed = Object.prototype.hasOwnProperty.call(st, id);\n delete st[id];\n await blob.setJSON(\"puppy_state\", st);\n return new Response(JSON.stringify({ pruned: id, existed, remaining: Object.keys(st).length }), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n // R38: arm live / arm practice. Writes blob puppy_mode, which cron() reads at the top of every\n // pass. Exists because env vars are settable only in val.town's UI and that session is not always\n // available. Admin-gated. Practice is the fail-safe: only {live:true} arms.\n if (url.searchParams.get(\"arm\")) {\n const want = String(url.searchParams.get(\"arm\"));\n if (want !== \"live\" && want !== \"practice\") {\n return new Response(JSON.stringify({ error: \"arm must be live or practice\" }), { status: 400 });\n }\n const blob = await blobMod();\n await blob.setJSON(\"puppy_mode\", { live: want === \"live\", at: new Date().toISOString(), by: \"api-arm\" });\n const back = await blob.getJSON(\"puppy_mode\").catch(() => null);\n return new Response(JSON.stringify({ armed: want, blob: back }), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"stop\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: true, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n if (url.searchParams.get(\"go\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: false, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n\n const d = await collect();\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n return new Response(page(d, k), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n\n","deleted",false,"label",[14],"1bfa6e81-74e1-4c6c-ab32-118304a4ffff",["D",1785429259053],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Puppy path nurture engine v1.2 — The Dogs Spot","imageUrl","userId","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","ad633fec-8e73-11f1-b800-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","1bfa6e8174e14c6cab32118304a4ffff","tursoHostname","1bfa6e8174e14c6cab32118304a4ffff-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519842404],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_36":89,"_11":90,"_23":29,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",1233,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":33,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]