[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22},"handle","amir5","name","dogsspot_puppy_path","path","SOURCE-BUNDLE.part29.txt","project",{"_23":45,"_11":12,"_34":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":33,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_23":24,"_11":14,"_25":26,"_27":-5,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":17,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/amir5/dogsspot_puppy_path/code/SOURCE-BUNDLE.part29.txt","extension","txt","id","30c994c6-6ecd-4f2e-a6e6-af0ad08c2e63","fileId","880e0a8a-97ea-11f1-9820-1607ee4eb77e","parentId","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","branchVersion",1198,"latest",true,"createdAt",["D",1786982929678],"version",6,"fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 29 of 47)\n\nEVERY source file in this project, engine/ included. Restoring these parts and nothing else gives\nyou a tree that builds, typechecks and runs its own test suite with no network and no val.\n\nengine/ is here as of 14 Aug 2026. It used to be left out because val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff\nholds it, which was true of every engine file except engine/watch.ts: a module the val does not run,\nso it was never deployed, so it lived in one container and nothing else. A reclaim destroyed it.\nscripts/deploy.mjs --check still compares engine/ against the val file by file; that is a second\ncheck on the same files now, not the only copy of them.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/build.mjs (engine/ came out of these parts; nothing to fetch first)\n node scripts/typecheck.mjs\n node tests/run-all.mjs\n node scripts/deploy.mjs --check (pulls nothing, proves the val matches what you restored)\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (5 of 129 files)\n tests/reachability.test.mjs 33728 bytes a88b5c8b86e2\n tests/registry.test.mjs 5772 bytes eca9ea929ca2\n tests/render.test.mjs 2942 bytes 93d71731aaf9\n tests/report-logic.test.mjs 8330 bytes 7c1a852ba469\n tests/run-all.mjs 22285 bytes 57d28c6b2dfe\n\n================================================================================================\n=====FILE tests/reachability.test.mjs =====\n// REACHABILITY: can this person be messaged at all, and did they ask us to stop.\n// R39, 14 Aug 2026. Every test here exists because the live engine, run against the live account,\n// did the wrong thing. The header of engine/reachability.ts has the evidence for each.\n//\n// Discovered by run-all (*.test.mjs), so these cannot quietly stop running — LESSONS.md #10.\nimport { readFileSync } from \"node:fs\";\nimport {\n decideAction, applyDecision, freshState, renderStep, MAIN_SEQUENCE, TERMINAL_STATUSES,\n missingChannel, reachabilityExit, enrolmentBar, convoExtras, honourOptOut, isOptOutBody,\n UNREACHABLE_REASON, OPTOUT_REASON, DAY_MS,\n optOutCore, reEnrollable, refusedBefore, deadLetterBody, optOutScope, noteScopedOptOut,\n decideLifecycle,\n} from \"../build/engine.js\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\nconst { t, at, done, header } = suite(\"reachability\");\n\n// Monday 3 Aug 2026, 12:00 America/New_York — inside the 9-19 send window, and not a Sunday, so\n// neither channel is barred by the window. Every clock in this file is anchored here.\nconst T0 = Date.parse(\"2026-08-03T16:00:00Z\");\nconst HOUR = 3600000;\n\nconst facts = (o = {}) => ({\n now: T0,\n contact: { id: \"c1\", firstName: \"Lisa\", companyName: null, dnd: false, noEmail: false, noPhone: false, ...(o.contact ?? {}) },\n opportunities: [], pupTalkAppt: null, declinedSignal: false,\n hasUnansweredInboundReply: false, conversationCheckFailed: false,\n channelBlocked: { email: false, sms: false }, foreignOutboundAt: null,\n ...o,\n});\n// A state with main step N next and its offset already elapsed.\nconst dueAt = (stepIdx) => ({\n ...freshState(new Date(T0 - (MAIN_SEQUENCE[stepIdx].offsetHours + 1) * HOUR).toISOString()),\n status: \"main\", lastMainStepSent: stepIdx,\n});\n\nconst SMS_STEP = MAIN_SEQUENCE.findIndex((m) => m.channel === \"sms\");\nconst EMAIL_STEP = MAIN_SEQUENCE.findIndex((m) => m.channel === \"email\");\n\nheader(\"THE CHANNEL GUARD IS CHANNEL-SCOPED: THE HALF THAT WAS MISSING\");\n\nt(\"R-1 no phone + an SMS step due -> skip_step, naming the ABSENCE\", () => {\n const d = decideAction(facts({ contact: { noPhone: true } }), dueAt(SMS_STEP));\n eq(d.kind, \"skip_step\", `produced ${d.kind}: without this the send 4xxs and the tick repeats forever`);\n ok(/no phone number on the record/.test(d.reason), `reason was: ${d.reason}`);\n ok(!/opted out/.test(d.reason), \"absence must never be logged as an opt-out the person did not make\");\n ok(/step consumed, not sent/.test(d.reason), \"the step must be CONSUMED, or the sequence stalls on it\");\n return scoped(4, \"assertions on one decision\");\n});\n\nt(\"R-2 the same contact still gets EMAIL: the guard is per channel, not per contact\", () => {\n const d = decideAction(facts({ contact: { noPhone: true } }), dueAt(EMAIL_STEP));\n eq(d.kind, \"send\", `produced ${d.kind}: a missing phone must not silence the email half too`);\n eq(MAIN_SEQUENCE[EMAIL_STEP].channel, \"email\");\n return scoped(2, \"channels proved independent\");\n});\n\nt(\"R-3 and the mirror: no email bars email, never SMS\", () => {\n eq(decideAction(facts({ contact: { noEmail: true } }), dueAt(EMAIL_STEP)).kind, \"skip_step\");\n eq(decideAction(facts({ contact: { noEmail: true } }), dueAt(SMS_STEP)).kind, \"send\");\n eq(missingChannel({ noPhone: true }, \"email\"), null, \"a missing phone must not bar email\");\n eq(missingChannel({ noEmail: true }, \"sms\"), null, \"a missing email must not bar SMS\");\n return scoped(4, \"channel/absence pairs\");\n});\n\nt(\"R-4 skip_step CONSUMES the step, so the sequence moves on instead of re-deciding\", () => {\n const s0 = dueAt(SMS_STEP);\n const s1 = applyDecision(decideAction(facts({ contact: { noPhone: true } }), s0), s0, new Date(T0).toISOString());\n eq(s1.lastMainStepSent, SMS_STEP + 1, \"the step was not consumed: this is the stall\");\n eq(s1.lastSentAt, s0.lastSentAt, \"nothing went out, so the pacing clock must NOT start\");\n return scoped(2, \"state fields\");\n});\n\nheader(\"NEITHER EMAIL NOR PHONE: A TERMINAL STATE, AND WHERE IT SITS IN THE ORDER\");\n\nt(\"R-5 both null -> hard_exit done_unreachable, and it is terminal\", () => {\n const d = decideAction(facts({ contact: { noEmail: true, noPhone: true } }), dueAt(0));\n eq(d.kind, \"hard_exit\");\n eq(d.status, \"done_unreachable\");\n eq(d.reason, UNREACHABLE_REASON);\n ok(TERMINAL_STATUSES.has(\"done_unreachable\"), \"not terminal, so the engine keeps re-evaluating them forever\");\n return scoped(4, \"assertions\");\n});\n\nt(\"R-6 THE ORDER IS PINNED: it outranks rule 3, and rule 1 outranks it\", () => {\n // Rule 3 — a human marked them Disqualified. Unreachable still wins: it is the more specific truth.\n const disq = decideAction(\n facts({ contact: { noEmail: true, noPhone: true }, opportunities: [{ id: \"o\", pipelineId: \"p\", pipelineStageId: \"38826f17-1d0e-4bac-b53e-349b67c2c79d\", monetaryValue: 0, status: \"open\" }] }),\n dueAt(0),\n );\n eq(disq.status, \"done_unreachable\", \"rule 3 is answering first: the new rule is in the wrong place\");\n // Rule 1 — full DND. That one must still win, and must still say \"dnd\", or an opt-out gets\n // relabelled as a data-quality problem in the journal Kim reads.\n const dnd = decideAction(facts({ contact: { dnd: true, noEmail: true, noPhone: true } }), dueAt(0));\n eq(dnd.status, \"done_hard_exit\");\n eq(dnd.reason, \"dnd\", \"the DND rule stopped being first\");\n return scoped(3, \"orderings\");\n});\n\nt(\"R-7 a both-null contact driven 22 simulated days NEVER reaches soft_exit_21d\", () => {\n // The defect: they consumed all 8 steps in silence and then fired a task telling Kim the puppy\n // path had \"finished\" for somebody who had received nothing at all.\n let s = { ...freshState(new Date(T0).toISOString()), status: \"main\" };\n const seen = new Set();\n let sends = 0;\n for (let h = 0; h <= 22 * 24; h++) {\n const now = T0 + h * HOUR;\n const d = decideAction(facts({ now, contact: { noEmail: true, noPhone: true } }), s);\n seen.add(d.kind);\n if (d.kind === \"send\") sends++;\n s = applyDecision(d, s, new Date(now).toISOString());\n if (TERMINAL_STATUSES.has(s.status)) break;\n }\n eq(sends, 0, \"a contact with no email and no phone was handed a message to send\");\n ok(!seen.has(\"soft_exit_21d\"), \"the 21-day 'finished' task fired for someone who received nothing\");\n eq(s.status, \"done_unreachable\");\n ok(s.lastMainStepSent === 0, `consumed ${s.lastMainStepSent} steps before exiting; it should consume none`);\n return scoped(529, \"simulated hours\");\n});\n\nt(\"R-8 the unreachable exit creates NO GHL TASK — 265 tasks in one run is its own incident\", () => {\n // Two ways, because either alone is weak. First: the decision is pure data with no task in it.\n const d = reachabilityExit({ contact: { noEmail: true, noPhone: true } });\n eq(Object.keys(d).sort(), [\"kind\", \"reason\", \"status\"], \"the decision grew a side effect\");\n // Second: the EXECUTOR's hard_exit arm, comments stripped, contains no task creation at all.\n // Anchored on the LAST `switch (decision.kind)` in the file — the pure applyDecision has one too,\n // and slicing that one instead would be a check that passes without inspecting the executor.\n const src = codeOnly(readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\n const exec = src.slice(src.lastIndexOf(\"switch (decision.kind)\"));\n ok(/createTask\\(/.test(exec), \"no task creation anywhere in the executor: wrong region, check nothing\");\n const arm = exec.slice(exec.indexOf('case \"hard_exit\"'), exec.indexOf('case \"pause_reply\"'));\n ok(arm.length > 100, `hard_exit arm not located (${arm.length} chars): this check inspects nothing`);\n ok(!/createTask\\(/.test(arm), \"the hard_exit arm creates a task — bulk tagging would flood Kim's CRM\");\n // And the contrast that makes it meaningful: soft_exit_21d DOES create one, so the absence above\n // is a decision about this arm, not an artefact of where the slice happened to land.\n const soft = exec.slice(exec.indexOf('case \"soft_exit_21d\"'), exec.indexOf('case \"branch_complete\"'));\n ok(/createTask\\(/.test(soft), \"the control is broken: soft_exit_21d no longer creates a task either\");\n return scoped(6, \"assertions\");\n});\n\nt(\"R-9 enrolment refuses a contact nothing could ever reach\", () => {\n eq(enrolmentBar({ email: null, phone: null }), UNREACHABLE_REASON);\n eq(enrolmentBar({ email: \"\", phone: \"\" }), UNREACHABLE_REASON);\n eq(enrolmentBar({ email: \"a@b.c\", phone: null }), null, \"an emailable contact was refused enrolment\");\n eq(enrolmentBar({ email: null, phone: \"+19125551212\" }), null, \"a textable contact was refused enrolment\");\n // AND THE REFUSAL MUST NOT REPEAT. A refused contact gets neither the enrolled tag nor (before\n // this) a state entry, so it stayed a candidate and was refused again on every single run — 266\n // live contacts x 96 runs a day, into a journal capped at 2,000 rows. A terminal state entry is\n // what stops that: the candidate filter already excludes anyone with state.\n const src = codeOnly(readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\n const from = src.indexOf(\"enrolmentBar(c)\");\n const block = src.slice(from, src.indexOf(\"state[c.id] = freshState(\", from)); // up to the ENROL path\n ok(block.length > 80 && block.length < 500, `the refusal block was not located (${block.length} chars)`);\n ok(/status: \"done_unreachable\"/.test(block), \"the refusal leaves no state, so it repeats on every run forever\");\n ok(!/addTag\$/.test(block), \"a contact who was never put on the path is being tagged as if they were\");\n // ...AND THE ENTRY MUST STILL BE ESCAPABLE. The line above is what stopped the repeat; on 14 Aug it\n // was ALSO what made a dead letter permanent — Kim fixing the number and re-tagging produced zero\n // candidates. Both halves are pinned here, because a fix for either one alone re-breaks the other.\n // [was: ok(/!state\\[c\\.id\\]/.test(src)), which still passes today for the wrong reason: the\n // substring survives inside `(!state[c.id] || reEnrollable(state[c.id], c))`. A guard that\n // cannot tell those two apart was not guarding the thing its message claims.]\n const filter = src.slice(src.indexOf(\"const rawCandidates\"), src.indexOf(\"const surgeThreshold\"));\n ok(/!\\(c\\.tags \\?\\? \\[\\]\$\\.includes\$TAG_ENROLLED\$/.test(filter), \"the enrolled tag no longer excludes a candidate\");\n ok(/reEnrollable\$state\\[c\\.id\\], c\$/.test(filter), \"a dead letter Kim has fixed and re-tagged can never come back\");\n ok(/!state\\[c\\.id\\] \\|\\|/.test(filter), \"the filter stopped excluding contacts that already have state\");\n return scoped(10, \"candidate shapes\");\n});\n\nt(\"R-9b every future path gets one deterministic exit precedence\", () => {\n eq(decideLifecycle({ optOutRequested: true, becameCustomer: true, replied: true }).status, \"done_optout\");\n eq(decideLifecycle({ blanketDnd: true, booked: true }).status, \"done_dnd\");\n eq(decideLifecycle({ noEmail: true, noPhone: true, becameCustomer: true }).status, \"done_unreachable\");\n eq(decideLifecycle({ becameCustomer: true, booked: true, replied: true }).status, \"done_customer\");\n eq(decideLifecycle({ booked: true, replied: true, sequenceComplete: true }).status, \"done_booked\");\n eq(decideLifecycle({ replied: true, sequenceComplete: true }).status, \"paused_reply\");\n eq(decideLifecycle({ sequenceComplete: true }).status, \"done_sequence\");\n eq(decideLifecycle({}), { kind: \"continue\", status: \"active\", reason: null });\n return scoped(8, \"lifecycle precedence cases\");\n});\n\nheader(\"OPT-OUT WORDS: DETECTED, NARROW, AND ACTUALLY HONOURED\");\n\nt(\"R-10 a question about unsubscribing is not an unsubscribe\", () => {\n for (const yes of [\"UNSUBSCRIBE\", \"unsubscribe me please\", \"stop\", \"STOP.\", \" remove me\", \"opt out\", \"opt-out\", \"optout please\"]) {\n ok(isOptOutBody(yes), `should opt out: ${yes}`);\n }\n for (const no of [\n \"I have a question about unsubscribing from my old vet\",\n \"please don't stop the emails, they're great\",\n \"Reply STOP to stop these texts — is that still how it works?\",\n \"we had to remove the crate, she chewed it\",\n \"\", null, undefined,\n ]) {\n ok(!isOptOutBody(no), `must NOT opt out: ${JSON.stringify(no)}`);\n }\n return scoped(14, \"bodies\");\n});\n\nt(\"R-11 a booking cancellation is NOT an opt-out\", () => {\n // \"cancel\" was on the specified keyword list and was REMOVED on 14 Aug 2026. For a business whose\n // whole funnel is booked calls, \"cancel my Pup Talk\" is the single most likely inbound sentence\n // that would have matched, and matching it does two irreversible things at once: hard-exits a hot\n // lead from the follow-up, and writes a PERMANENT email block that also silences Kim's own\n // confirmations to that person. Rescheduling is not unsubscribing. This test now pins the removal,\n // so putting the word back turns it red instead of being discovered by a customer.\n ok(!isOptOutBody(\"cancel my pup talk please\"), \"'cancel' is back in the opt-out list\");\n ok(!isOptOutBody(\"cancel\"), \"a bare 'cancel' opts someone out of everything\");\n ok(!isOptOutBody(\"can I cancel Tuesday?\"), \"at least a mid-sentence cancel is safe\");\n // the four that DO mean it still work, so this removal did not blunt the guard\n for (const b of [\"UNSUBSCRIBE\", \"stop\", \"remove me from this list\", \"opt out\", \"opt-out please\"]) {\n ok(isOptOutBody(b), `a real opt-out stopped being honoured: ${b}`);\n }\n return scoped(8, \"cancel and opt-out forms\");\n});\n\n// ---------------------------------------------------------------- WHICH CHANNEL DID THEY NAME?\n// v1.13, 16 Aug. Kim asked, verbatim: \"does a stop word mean text and email only\". Until now the\n// engine could not tell \"STOP\" from \"stop emailing me\" — identical exit, identical journal row — so\n// nobody could even measure how often the narrow version happens. optOutScope classifies it. It\n// changes no outcome yet, ON PURPOSE: narrowing an opt-out is Kim's call.\n//\n// EVERY TEST HERE IS ABOUT THE FAIL-SAFE DIRECTION. Being wrong towards \"all\" costs a lead. Being\n// wrong the other way keeps messaging somebody who asked us to stop, and that is the one this\n// account cannot afford — so every uncertain shape must come back \"all\", and the tests that matter\n// most are the ones below that demand it.\n\nt(\"R-19 a bare stop word is blanket, always\", () => {\n // Every whole-body form on the list, and the ones that read like a channel but are not.\n for (const b of [\"STOP\", \"stop\", \"unsubscribe\", \"unsub\", \"remove me\", \"delete me\", \"opt out\",\n \"take me off the list\", \"stop all\", \"stop it\", \"stop messages\", \"removed\"]) {\n eq(optOutScope(b), \"all\", `\"${b}\" was narrowed, and a narrowed opt-out keeps messaging someone`);\n }\n // Nothing at all, and shapes that reach this function without being opt-outs at all.\n for (const b of [\"\", null, undefined, \" \", \"hello\"]) {\n eq(optOutScope(b), \"all\", `${JSON.stringify(b)} must fail to blanket`);\n }\n return scoped(17, \"bodies\");\n});\n\nt(\"R-20 a request that names ONE channel is recognised as that channel\", () => {\n for (const b of [\"stop emails\", \"stop emailing me\", \"unsubscribe me from your emails\",\n \"no more emails\", \"take me off your mailing list\".replace(\" list\", \"\"),\n \"do not email me\", \"stop sending me emails\", \"please stop the e-mails\"]) {\n eq(optOutScope(b), \"email\", `\"${b}\" was not read as an email-only request`);\n }\n for (const b of [\"stop texts\", \"stop texting me\", \"no more texts\", \"do not text me\",\n \"stop sending me texts\", \"unsubscribe me from your texts\", \"no more sms\"]) {\n eq(optOutScope(b), \"sms\", `\"${b}\" was not read as a text-only request`);\n }\n return scoped(15, \"bodies\");\n});\n\nt(\"R-21 anything that could mean everything comes back 'all'\", () => {\n // BOTH channels named — the commonest way a narrow classifier gets it wrong.\n for (const b of [\"stop sending me emails and texts\", \"no more emails or texts\", \"stop emailing and texting me\"]) {\n eq(optOutScope(b), \"all\", `\"${b}\" names both channels and must stay blanket`);\n }\n // A blanket word sitting next to a channel word. \"messages\", \"marketing\", \"list\", \"contact\",\n // \"all\", \"everything\" — each one on its own is enough to make it blanket again.\n for (const b of [\"stop all emails\", \"no more marketing emails\", \"take me off your email list\",\n \"stop sending me any texts\", \"do not contact me by email\", \"stop everything, no more texts\",\n \"remove me from all your email communications\"]) {\n eq(optOutScope(b), \"all\", `\"${b}\" carries a blanket word and must not be narrowed`);\n }\n return scoped(10, \"bodies\");\n});\n\nt(\"R-22 the classifier never disagrees with the detector about whether it IS an opt-out\", () => {\n // A scope is only ever read for a body isOptOutBody already said yes to. This pins the pairing:\n // every phrase R-13 narrows must still BE an opt-out, or the narrow branch is unreachable and\n // the tests above are testing a function nothing calls.\n let n = 0;\n for (const b of [\"stop emails\", \"stop emailing me\", \"no more emails\", \"do not email me\",\n \"stop texts\", \"stop texting me\", \"no more texts\", \"do not text me\"]) {\n ok(isOptOutBody(b), `\"${b}\" is classified as a narrow opt-out but is not detected as one at all`);\n ok(optOutScope(b) !== \"all\", `\"${b}\" round-tripped back to blanket`);\n n += 2;\n }\n return scoped(n, \"assertions\");\n});\n\nawait at(\"R-23 a scoped opt-out is journalled and raises exactly one task; a blanket one raises none\", async () => {\n const rows = [], tasks = [];\n const fx = { log: () => {}, journal: (id, event, detail) => rows.push({ id, event, detail }), task: null };\n const mkTask = async (id, title, body) => { tasks.push({ id, title, body }); };\n\n eq(await noteScopedOptOut(\"c1\", { optOutScope: \"all\", contact: { firstName: \"Ann\" } }, false, fx, mkTask), \"all\");\n eq(rows.length, 0, \"a blanket opt-out wrote a scope row, which would make the measurement useless\");\n eq(tasks.length, 0, \"a blanket opt-out raised a task; every opt-out would become a task in Kim's CRM\");\n\n eq(await noteScopedOptOut(\"c2\", { optOutScope: \"email\", contact: { firstName: \"Ann\" } }, false, fx, mkTask), \"email\");\n eq(rows.length, 1);\n eq(rows[0].event, \"optout_scope\");\n ok(/emails/.test(rows[0].detail), rows[0].detail);\n eq(tasks.length, 1);\n ok(/Ann asked to stop emails, not everything/.test(tasks[0].title), tasks[0].title);\n\n // PRACTICE MODE WRITES NOTHING TO HER CRM. The row is still recorded, because a journal row is\n // ours and a task is hers.\n eq(await noteScopedOptOut(\"c3\", { optOutScope: \"sms\", contact: { firstName: null } }, true, fx, mkTask), \"sms\");\n eq(tasks.length, 1, \"practice mode created a task in the live CRM\");\n eq(rows.length, 2, \"practice mode stopped journalling, so a practice run proves nothing\");\n ok(/texts/.test(rows[1].detail), rows[1].detail);\n\n // A CRM that refuses the task must not undo an exit that has already been decided.\n const boom = async () => { throw new Error(\"GHL 500\"); };\n eq(await noteScopedOptOut(\"c4\", { optOutScope: \"email\", contact: {} }, false, fx, boom), \"email\",\n \"a failed task threw out of the function and would have aborted the run\");\n return scoped(15, \"assertions\");\n});\n\nt(\"R-11b EMAIL is the channel the promise is made on, and the shapes an email reply actually arrives in\", () => {\n // Every email footer this engine sends says \"Reply UNSUBSCRIBE\". The anchored prefix rule could not\n // read a single one of the forms an email reply comes back in — the word is never at the start of\n // the raw body. Nor could it read the phrasings people actually use. All of these are real shapes.\n const YES = [\n [\"

UNSUBSCRIBE

\", \"HTML: the mail client wraps the word in a tag\"],\n ['

unsubscribe

', \"HTML: Gmail's own reply wrapper\"],\n [\"> unsubscribe\", \"the whole reply is quoted back\"],\n ['\"STOP\"', \"the word in quotes\"],\n [\"On Aug 14, Kim wrote:\\nunsubscribe\", \"under the quoted-reply header line\"],\n [\"unsubscribe\\n\\nOn 14 Aug 2026 at 09:02, Kim wrote:\\n> anything at all\", \"above it\"],\n [\"STOP\\nSent from my iPhone\", \"with a phone signature attached\"],\n [\"Please unsubscribe me\", \"the most natural phrasing there is\"],\n [\"Please remove me from this list\", \"the second most natural\"],\n [\"take me off this list\", \"\"],\n [\"No more texts please\", \"\"],\n [\"please stop emailing me\", \"\"],\n [\"do not contact me\", \"\"],\n [\"<p>unsubscribe</p>\", \"entity-encoded HTML\"],\n ];\n for (const [body, why] of YES) ok(isOptOutBody(body), `MISSED an opt-out (${why}): ${JSON.stringify(body)}`);\n return scoped(YES.length, \"email reply shapes\");\n});\n\nt(\"R-11c the five sentences that mean the OPPOSITE, and the footers we send ourselves\", () => {\n // The live false-positive risk, named. Every one of these matched the old prefix rule, and every\n // one of them is a customer asking for MORE of us, not less. A wrong opt-out is irreversible twice\n // over: the lead is hard-exited AND a permanent email block is written that silences Kim's own\n // confirmations to them.\n const NO = [\n \"Remove my dog from Tuesday's class\",\n \"Remove the 3pm and put us at 4\",\n \"Stop by tomorrow with the puppy?\",\n \"Stop, I already booked!\",\n \"Opt out of the Tuesday session only\",\n // and the copy this engine sends, which arrives back at us in two real ways: quoted under a\n // reply, and inside an SMS reaction, which is an INBOUND message containing our own text.\n \"\\n\\n---\\nYou're getting this because you inquired with The Dogs Spot. Reply UNSUBSCRIBE and we'll take you off these emails.\\nThe Dogs Spot, 643 Pleasant Hill Church Rd, Ellabell, GA 31308\",\n 'Loved \"Hi Abi, this is Emily from The Dogs Spot. Reply STOP to stop these texts.\"',\n \"Thanks! Reply STOP to stop these texts.\",\n // real live inbound, 14 Aug corpus: a booking change, not an unsubscribe\n \"Hey I lost your number. Can you give me a call again? I have to cancel and reschedule at a later date.\",\n \"Recall,stop pulling on leash, stay/yield,stay\",\n \"No dogs stop\",\n ];\n for (const body of NO) ok(!isOptOutBody(body), `FALSE POSITIVE, this person asked the opposite: ${JSON.stringify(body.slice(0, 70))}`);\n // and the normaliser itself, since it is the half most likely to be wrong on a shape nobody has seen\n eq(optOutCore(\"

UNSUBSCRIBE

\"), \"unsubscribe\");\n eq(optOutCore(\"> unsubscribe\"), \"unsubscribe\", \"a fully quoted body must not strip to nothing\");\n eq(optOutCore(\"STOP please\"), \"stop\");\n return scoped(NO.length + 3, \"sentences that must not opt anyone out\");\n});\n\nt(\"R-11d TESTED AGAINST REAL BODIES: the 5 genuine opt-outs in the live account, and nothing else\", () => {\n // 2,889 message bodies across 99 live conversations were run through this rule on 14 Aug (GET only).\n // It matched exactly the 5 real opt-outs the old rule found — and zero of the 2,220 outbound bodies.\n // These five are those bodies verbatim; the sixth is the one real near-miss, deliberately NOT matched.\n const REAL_OPT_OUTS = [\"Unsubscribe\", \"Stop\", \"STOP\", \"Stop\", \"Unsubscribe\"];\n for (const b of REAL_OPT_OUTS) ok(isOptOutBody(b), `a real live opt-out stopped being honoured: ${b}`);\n // THE DELIBERATE FALSE NEGATIVE, recorded so it is a decision and not an oversight. Live inbound SMS.\n // This account sells training packages, so \"my subscription\" is as likely to be the package as the\n // texts, and \"cancel\" stays out of the rule for the same reason it was removed on 14 Aug. It is not\n // dropped on the floor: an inbound reply still pauses the sequence and puts a task in front of Kim.\n ok(!isOptOutBody(\"My apologies but could you cancel my subscription?\"),\n \"'cancel' is back in the rule, and 'cancel my Pup Talk' will now hard-exit a hot lead\");\n return scoped(6, \"real live bodies\");\n});\n\nawait at(\"R-12 an inbound UNSUBSCRIBE is read off the conversation and reported\", async () => {\n const calls = [];\n const fetchJson = async (url) => {\n calls.push(url);\n return { messages: { messages: [{ id: \"m1\", direction: \"inbound\", body: \"UNSUBSCRIBE\" }] } };\n };\n const rx = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null, fetchJson, \"https://x\", T0);\n eq(rx.optOutRequested, true);\n ok(/\\/conversations\\/cv1\\/messages/.test(calls[0]), `wrong endpoint: ${calls[0]}`);\n const rx2 = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: [{ id: \"m1\", direction: \"inbound\", body: \"unsubscribe me please\" }] }), \"https://x\", T0);\n eq(rx2.optOutRequested, true, \"the flat {messages:[...]} shape is not handled\");\n const rx3 = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: [{ id: \"m1\", direction: \"inbound\", body: \"a question about unsubscribing from my old vet\" }] }), \"https://x\", T0);\n eq(rx3.optOutRequested, false, \"a question about unsubscribing opted a real customer out\");\n\n // v1.13 — AND THE SCOPE COMES OUT WITH IT. Classified from the same body, on the same read.\n // [This block exists because a negative control caught its absence: deleting the scope line from\n // convoExtras left the whole suite green. R-19..R-23 tested optOutScope() directly and nothing\n // tested that anything ever CALLS it — a classifier nothing invokes, tested thoroughly.]\n eq(rx.optOutScope, \"all\", \"a bare UNSUBSCRIBE came back narrowed\");\n const rx4 = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: [{ id: \"m1\", direction: \"inbound\", body: \"please stop emailing me\" }] }), \"https://x\", T0);\n eq(rx4.optOutRequested, true, \"a channel-named opt-out stopped being detected at all\");\n eq(rx4.optOutScope, \"email\", \"the scope never left convoExtras, so nothing downstream can ever see it\");\n const rx5 = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: [{ id: \"m1\", direction: \"inbound\", body: \"no more texts\" }] }), \"https://x\", T0);\n eq(rx5.optOutScope, \"sms\");\n // A body that is NOT an opt-out must not carry a scope out either: the scope is only ever read\n // for somebody who actually asked, so a stray \"email\" in a friendly reply must classify as \"all\".\n eq(rx3.optOutScope, \"all\", \"a non-opt-out body was given a narrow scope\");\n return scoped(9, \"conversations\");\n});\n\nawait at(\"R-12b an UNKNOWN direction is not the customer speaking\", async () => {\n // 46 messages in the 99 live conversations sampled carry direction:null. Every one is TYPE_EMAIL and\n // every one is plainly OURS. The default was `?? \"inbound\"`, so they were classified as the customer\n // talking and scanned for opt-out words — while our own email footer reads \"Reply UNSUBSCRIBE\".\n const real = \"🎉🐾 Congratulations on Your Dog's Bootcamp Graduation! 🐾🎉\";\n const nulls = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: { messages: [{ id: \"m1\", direction: null, body: \"unsubscribe\" }] } }), \"https://x\", T0);\n eq(nulls.optOutRequested, false, \"a message with no direction was read as the customer asking to stop\");\n const ours = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: { messages: [{ id: \"m1\", direction: null, body: real }] } }), \"https://x\", T0);\n eq(ours.optOutRequested, false);\n // an OUTBOUND message is not scanned either, however plainly it says the word\n const out = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: { messages: [{ id: \"m1\", direction: \"outbound\", body: \"Reply UNSUBSCRIBE and we'll take you off these emails.\" }] } }), \"https://x\", T0);\n eq(out.optOutRequested, false, \"our own footer was read back as the customer's opt-out\");\n // ...and a genuine inbound one still is, so this narrowing did not blunt the guard\n const yes = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => ({ messages: { messages: [{ id: \"m1\", direction: \"INBOUND\", body: \"unsubscribe\" }] } }), \"https://x\", T0);\n eq(yes.optOutRequested, true, \"a real inbound opt-out stopped being detected\");\n return scoped(4, \"direction values\");\n});\n\nawait at(\"R-13 an unreadable body FALLS BACK TO pause_reply, never to 'send anyway'\", async () => {\n const rx = await convoExtras({ id: \"cv1\", lastMessageDirection: \"inbound\" }, null,\n async () => { throw new Error(\"403\"); }, \"https://x\", T0);\n eq(rx.optOutRequested, false, \"a failed read must not claim an opt-out either\");\n // and what the engine then does with that inbound: today's behaviour, unchanged.\n const d = decideAction(facts({ hasUnansweredInboundReply: true, optOutRequested: rx.optOutRequested }), dueAt(0));\n eq(d.kind, \"pause_reply\", `produced ${d.kind}: a failed read must never fall through to a send`);\n return scoped(2, \"assertions\");\n});\n\nt(\"R-14 a detected opt-out HARD EXITS, above the pause rule that used to swallow it\", () => {\n const d = decideAction(facts({ hasUnansweredInboundReply: true, optOutRequested: true }), dueAt(0));\n eq(d.kind, \"hard_exit\", \"it is still being routed to pause_reply, which resumes sending later\");\n eq(d.status, \"done_hard_exit\");\n eq(d.reason, OPTOUT_REASON);\n ok(TERMINAL_STATUSES.has(d.status));\n return scoped(4, \"assertions\");\n});\n\nawait at(\"R-15 the DND write: the field consent.ts already reads, and only when it is needed\", async () => {\n const puts = [];\n const fetchJson = async (url, ver, init) => { puts.push({ url, ver, init }); return {}; };\n const f = { optOutRequested: true, channelBlocked: { email: false, sms: false } };\n\n const live = await honourOptOut(\"c1\", f, false, fetchJson, \"https://x\");\n eq(puts.length, 1, \"no write was made, so 'Reply UNSUBSCRIBE' stays a promise nothing keeps\");\n eq(puts[0].init.method, \"PUT\");\n ok(/\\/contacts\\/c1$/.test(puts[0].url), `wrong endpoint: ${puts[0].url}`);\n eq(JSON.parse(puts[0].init.body).dndSettings.Email.status, \"permanent\", \"not the field consent.ts reads\");\n ok(/honoured/.test(live));\n\n // TEST_MODE must never touch a real customer record.\n const before = puts.length;\n await honourOptOut(\"c1\", f, true, fetchJson, \"https://x\");\n eq(puts.length, before, \"practice mode wrote to the client's live CRM\");\n\n // IDEMPOTENT: already blocking -> nothing to write; and the PUT is a set, not a toggle.\n await honourOptOut(\"c1\", { ...f, channelBlocked: { email: true, sms: false } }, false, fetchJson, \"https://x\");\n eq(puts.length, before, \"a second pass re-wrote a block that was already there\");\n await honourOptOut(\"c1\", f, false, fetchJson, \"https://x\");\n eq(puts[1].init.body, puts[0].init.body, \"the same opt-out produced two different writes\");\n\n // Not an opt-out at all -> nothing happens.\n eq(await honourOptOut(\"c1\", { optOutRequested: false, channelBlocked: { email: false, sms: false } }, false, fetchJson, \"https://x\"), null);\n eq(puts.length, 2, \"a contact who never opted out was written to\");\n return scoped(11, \"write paths\");\n});\n\nawait at(\"R-16 a failed DND write is LOUD, and the hard exit still stands\", async () => {\n const said = [];\n const fx = { state: {}, save: async () => {}, log: (l) => said.push(l), journal: (c, e) => said.push(`J:${e}`), task: null };\n const msg = await honourOptOut(\"c1\", { optOutRequested: true, channelBlocked: { email: false, sms: false } }, false,\n async () => { throw new Error(\"500 boom\"); }, \"https://x\", fx);\n ok(/FAILED/.test(msg), `a failed CRM write was reported as: ${msg}`);\n ok(said.some((l) => /J:optout_write_failed/.test(l)), \"the failure never reached the journal, so nobody sees it\");\n // The decision itself is unaffected: this engine stops messaging them either way.\n eq(decideAction(facts({ optOutRequested: true }), dueAt(0)).kind, \"hard_exit\");\n return scoped(3, \"assertions\");\n});\n\nheader(\"CAN-SPAM: A CITY AND A STATE ARE NOT A POSTAL ADDRESS\");\n\nt(\"R-17 the rendered email footer carries the STREET and the ZIP, not just the town\", () => {\n const email = MAIN_SEQUENCE.find((m) => m.channel === \"email\");\n const r = renderStep(email, { firstName: \"Lisa\", companyName: \"Bo\" }, { testMode: false });\n eq(r.channel, \"email\");\n // §7704(a)(5)(A)(iii) wants a valid physical postal address. \"Ellabell, GA\" passed the old\n // assertion (/Ellabell/i) and is not one, which is exactly why the deficient string shipped.\n ok(/643/.test(r.html), \"no street number in the footer\");\n ok(/Pleasant Hill Church Rd/i.test(r.html), \"no street name in the footer\");\n ok(/\\b31308\\b/.test(r.html), \"no 5-digit ZIP in the footer\");\n ok(/Ellabell/i.test(r.html) && /GA/.test(r.html), \"town/state lost while adding the rest\");\n ok(/UNSUBSCRIBE/i.test(r.html), \"the opt-out instruction went missing\");\n return scoped(6, \"footer requirements\");\n});\n\nt(\"R-18 every email step gets it, not just the first — it is appended at render time\", () => {\n const emails = MAIN_SEQUENCE.filter((m) => m.channel === \"email\");\n ok(emails.length >= 4, `only ${emails.length} email steps found`);\n let n = 0;\n for (const m of emails) {\n const h = renderStep(m, { firstName: \"Lisa\", companyName: null }, { testMode: false }).html;\n ok(/643 Pleasant Hill Church Rd/.test(h) && /31308/.test(h), `${m.id} footer is deficient`);\n n++;\n }\n // and SMS does NOT get a postal address bolted onto it — that is not what the rule asks for.\n const sms = renderStep(MAIN_SEQUENCE[SMS_STEP], { firstName: \"Lisa\", companyName: null }, { testMode: false });\n ok(!/31308/.test(sms.text), \"a postal address was appended to a text message\");\n ok(/STOP/.test(sms.text), \"the SMS opt-out line went missing\");\n return scoped(n + 3, \"rendered messages\");\n});\n\nawait done();\n\n\n=====FILE tests/registry.test.mjs =====\n// WATCHING A LIST SOMEBODY ELSE CONTROLS.\n// The watchdog has watched Kim's 165 automations since 4 August and has never once been seen to\n// fire, because firing requires somebody to change something. That is the definition of a check\n// nobody has verified. The comparison lives on its own now so it can be exercised directly, and\n// every case below is a way the watch could quietly stop working.\nimport * as R from \"../build/registry-diff.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"registry\");\n\nconst KB_BEFORE = {\n XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T02:38\",\n ZkVFb: \"Chloe - Boarding @2026-07-31T12:47\",\n roL2d: \"Ava Knowledgebase @2026-08-03T03:34\",\n};\n\nt(\"G1 an edit in place is caught, which is the case the whole watch exists for\", () => {\n // Same id, same name, new timestamp. Nothing is added and nothing is removed, so a check that\n // only counted entries would see nothing at all — and this is exactly what happened to the\n // consolidated knowledge base at 02:38 on 5 August.\n const after = { ...KB_BEFORE, XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T09:12\" };\n const c = R.registryDiff(KB_BEFORE, after);\n ok(c.changed, \"an in-place edit was not noticed\");\n eq(c.added, []);\n eq(c.removed, []);\n eq(c.edited.length, 1);\n ok(/02:38 -> .*09:12/.test(c.edited[0]), `the change does not show what moved: ${c.edited[0]}`);\n return scoped(5, \"assertions\");\n});\n\nt(\"G2 additions and removals are told apart, and named\", () => {\n const added = R.registryDiff(KB_BEFORE, { ...KB_BEFORE, newId: \"Brand New KB @2026-08-06T00:00\" });\n eq(added.added, [\"Brand New KB @2026-08-06T00:00\"]);\n eq(added.removed, []);\n const { ZkVFb, ...minusOne } = KB_BEFORE;\n const removed = R.registryDiff(KB_BEFORE, minusOne);\n eq(removed.removed, [\"Chloe - Boarding @2026-07-31T12:47\"]);\n eq(removed.added, []);\n ok(removed.changed && added.changed);\n return scoped(5, \"assertions\");\n});\n\nt(\"G3 an unchanged registry is silent, so the alarm does not cry wolf every pass\", () => {\n const c = R.registryDiff(KB_BEFORE, { ...KB_BEFORE });\n eq(c.changed, false, \"an identical registry reported a change\");\n eq([...c.added, ...c.removed, ...c.edited], []);\n // key ORDER must not matter: the CRM does not promise one\n const shuffled = Object.fromEntries(Object.entries(KB_BEFORE).reverse());\n eq(R.registryDiff(KB_BEFORE, shuffled).changed, false, \"a reordered list reads as a change\");\n return scoped(3, \"assertions\");\n});\n\nt(\"G4 a first run has no baseline and must not report the whole world as new\", () => {\n // The very first pass writes a baseline. If it also alarmed, every deploy would page somebody.\n const c = R.registryDiff(null, KB_BEFORE);\n eq(c.added.length, 3, \"a first run should still be able to describe what it found\");\n eq(c.removed, []);\n eq(c.edited, []);\n // and the watchdog only alarms when prev exists, which is the caller's job — proven in G6\n return scoped(3, \"assertions\");\n});\n\nt(\"G5 garbage in does not throw and does not invent a change\", () => {\n for (const junk of [null, undefined, \"not an object\", 42, []]) {\n const c = R.registryDiff(junk, junk);\n eq(c.changed, false, `${JSON.stringify(junk)} produced a change out of nothing`);\n }\n eq(R.registryDiff(KB_BEFORE, null).removed.length, 3, \"a null 'now' should read as everything gone, for the caller to judge\");\n return scoped(6, \"shapes\");\n});\n\nt(\"G6 an empty list on a good response is treated as a glitch, not as a deletion\", () => {\n // The rule the workflow watch learned the hard way: overwriting a baseline with an empty list\n // fires \"everything removed\" this pass and \"everything added\" the next.\n ok(R.looksLikeAGlitch(0, 8), \"an empty response after a healthy one is being believed\");\n ok(!R.looksLikeAGlitch(0, 0), \"a genuinely empty account is being called a glitch forever\");\n ok(!R.looksLikeAGlitch(8, 8), \"a normal response is being called a glitch\");\n ok(!R.looksLikeAGlitch(3, 8), \"a partial response is being called a glitch: it is a real change\");\n ok(!R.looksLikeAGlitch(0, null), \"a missing baseline is being called a glitch\");\n return scoped(5, \"cases\");\n});\n\nt(\"G7 the sentence is generated from the change and says how much it left out\", () => {\n const many = {};\n for (let i = 0; i < 9; i++) many[`id${i}`] = `Thing ${i} @2026-08-06T00:00`;\n const c = R.registryDiff({}, many);\n const line = R.registrySentence(c, \"her knowledge bases\");\n ok(/Added: Thing 0/.test(line), \"the sentence does not name what changed\");\n ok(/6 more not listed here/.test(line), `the sentence hides how much it truncated: ${line}`);\n const quiet = R.registrySentence(R.registryDiff(KB_BEFORE, KB_BEFORE), \"her automations\");\n ok(/Nothing has moved in her automations/.test(quiet), quiet);\n ok(!/undefined|NaN|\\[object/.test(line + quiet), \"a stray value reached the sentence\");\n return scoped(4, \"assertions\");\n});\n\nt(\"G8 approved path keys detect substitutions, duplicates and harmless reordering\", () => {\n const promised = [\"ftd\", \"boarding\", \"puppy\", \"existing\", \"quiet\", \"post\"];\n const old = R.registryKeyDiff(promised, [\"puppy\", \"behavior\", \"boarding\", \"noshow\", \"didntbuy\", \"aged\"]);\n eq(old.missing, [\"existing\", \"ftd\", \"post\", \"quiet\"]);\n eq(old.unexpected, [\"aged\", \"behavior\", \"didntbuy\", \"noshow\"]);\n ok(old.changed && !old.exact);\n const reordered = R.registryKeyDiff(promised, [...promised].reverse());\n ok(reordered.exact && !reordered.changed, JSON.stringify(reordered));\n const duplicate = R.registryKeyDiff(promised, [...promised, \"puppy\"]);\n eq(duplicate.duplicates, [\"puppy\"]);\n ok(!duplicate.exact, \"a duplicate path definition was accepted as the exact registry\");\n return scoped(6, \"path-set cases\");\n});\n\ndone();\n\n\n=====FILE tests/render.test.mjs =====\n// MESSAGE RENDERING — the escape and merge rules, tested directly.\n// Two of these are regressions from a security review: a name containing $-patterns corrupting the\n// body, and contact-typed text reaching the HTML unescaped. Both shipped once.\nimport * as R from \"../build/render.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"render\");\n\nheader(\"MERGE FIELDS\");\nt(\"M1.1 blank names fall back rather than rendering 'Hi ,'\", () => {\n eq(R.resolveFirstName(\"\"), \"there\"); eq(R.resolveFirstName(null), \"there\"); eq(R.resolveFirstName(\" \"), \"there\");\n eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", \"\", \"\"), \"Hi there!\");\n return scoped(4, \"cases\");\n});\nt(\"M1.2 a name full of $-patterns cannot corrupt the body\", () => {\n // String.replace treats $&, $', $` and $1 as references. With a string replacement a customer\n // named Bo$$ would have injected fragments of the template into their own message.\n const evils = [\"Bo$$\", \"Re$&\", \"$'\", \"$`\", \"$1$2\", \"A$&B\"];\n for (const e of evils) eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", e, \"\"), `Hi ${e}!`, `name ${e} mangled`);\n return scoped(evils.length, \"hostile names\");\n});\nheader(\"HTML ESCAPING\");\nt(\"M2.1 every dangerous character is escaped\", () => {\n eq(R.escHtml(`