[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22},"handle","amir5","name","dogsspot_puppy_path","path","SOURCE-BUNDLE.part44.txt","project",{"_23":45,"_11":12,"_34":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":33,"_60":-5,"_61":-5,"_62":37,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_23":24,"_11":14,"_25":26,"_27":-5,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":17,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/amir5/dogsspot_puppy_path/code/SOURCE-BUNDLE.part44.txt","extension","txt","id","f9772671-d655-4cfa-8b4c-c97b1c81a6c4","fileId","fa536bfe-9a55-11f1-9598-1607ee4eb77e","parentId","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","branchVersion",1215,"latest",true,"createdAt",["D",1786982948767],"version",0,"fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 44 of 47)\n\nEVERY source file in this project, engine/ included. Restoring these parts and nothing else gives\nyou a tree that builds, typechecks and runs its own test suite with no network and no val.\n\nengine/ is here as of 14 Aug 2026. It used to be left out because val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff\nholds it, which was true of every engine file except engine/watch.ts: a module the val does not run,\nso it was never deployed, so it lived in one container and nothing else. A reclaim destroyed it.\nscripts/deploy.mjs --check still compares engine/ against the val file by file; that is a second\ncheck on the same files now, not the only copy of them.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/build.mjs (engine/ came out of these parts; nothing to fetch first)\n node scripts/typecheck.mjs\n node tests/run-all.mjs\n node scripts/deploy.mjs --check (pulls nothing, proves the val matches what you restored)\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (4 of 129 files)\n handover/bridge-main-v3.10.ts 34877 bytes 58a6e28e17bd\n handover/KRISTIAN-EMAIL-DRAFT.txt 447 bytes 9a790eb0c14e\n handover/TEAM-EMAIL-DRAFT.txt 792 bytes 57a781bd94d4\n scripts/exception-report.mjs 29815 bytes 89c482ec4752\n\n================================================================================================\n=====FILE handover/bridge-main-v3.10.ts =====\n// THE DOGS SPOT — Square to GHL Revenue Bridge (M2) + Facebook CAPI (M3) v3.10\n// v3.9 (31 Jul 2026): SQUARE_ACCESS_TOKEN now falls back to blob \"m2_sq_token\" ({t:\"...\"}) when the\n// env var is unset — env vars are UI-only on val.town and were the last blocker on POS matching.\n// Same-priority env var still wins if ever set. No other behaviour change.\n// v3.5 (25 Jul 2026 — the \"GHL createOpp 400\" retry storm + POS attribution):\n// - ROOT CAUSE of the 400: this GHL location has \"Allow duplicate opportunity\" OFF, so a contact\n// may hold exactly ONE opportunity. reconcile() only looked for opps already in the Won-Paid\n// STAGE; any paying customer who existed as a lead first (i.e. almost all of them) looked like\n// \"no opp\" -> POST /opportunities/ -> 400 OPPORTUNITY_NO_DUPLICATE -> throw -> 500 -> Square\n// retried the same event forever. Verified live 25 Jul against contact 4aPkmorlrd6OdZx8gkgu.\n// - reconcile() now reads ALL opps for the contact in the pipeline and only ever adopts/edits one\n// it owns (Won-Paid stage, or the OPP_NAME marker). If the only opp is the CLIENT'S own, it is\n// left completely untouched — its monetaryValue is Kim's sale figure, not our Square balance —\n// and the revenue is journaled as REVENUE-ON-CLIENT-OPP instead. No more hijacking, no retries.\n// - ghlCreateOpp() surfaces GHL's response body instead of a bare status code.\n// - Merges the v3.4 POS path that was written 15 Jul but never deployed (see below).\n// v3.4 (walk-in POS capture, written 15 Jul, DEPLOYED 25 Jul with v3.5): when a payment has no buyer\n// email/phone but DOES carry a Square customer_id (the register attached a customer at checkout),\n// resolve that customer via the Square Customers API, then match the GHL contact. GATED on\n// SQUARE_ACCESS_TOKEN — unset = exact v3.3 behaviour. NO-MATCH rows now record hadCustomerId +\n// sqTokenSet so the review distinguishes \"no identity at all\" from \"had one, couldn't resolve\".\n// v3.3 (revenue-capture fixes, post-live-audit 15 Jul — real payments were logging NO-MATCH):\n// - payment.created/updated now matches by email OR phone (was email-only), and falls back to the\n// invoice-linked contact (PAY_CONTACT) so invoice payments book to the right person.\n// - invoice.payment_made now actually BOOKS revenue (v3.2 linked the contact but never added the amount).\n// It links the payment->contact, then applies any pending payment/refund for that payment id.\n// - Symmetric \"pending payment\" stash: a payment that arrives before its invoice link is held and booked\n// the moment invoice.payment_made supplies the contact (mirrors the existing pending-refund logic).\n// - NO-MATCH rows now record hadEmail/hadPhone + amount so the weekly review is actionable and we can\n// quantify unmatched revenue. No contact is auto-created (avoids polluting the CRM with duplicates).\n// v3.2 hardening (kept): admin-guarded ?dump/?captest/?wipe (fail-closed, constant-time); GHL calls throw\n// on failure -> 500 so Square retries; event marked seen only after success; reconcile() touches only the\n// Won-Paid STAGE; phone normalized to E.164; action_source \"other\"; errors journaled without the fetch URL.\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst NOTIFICATION_URL =\n \"https://amir5--41ace24c7e2111f18c9d1607ee4eb77e.web.val.run\";\nconst SQUARE_SIGNATURE_KEY = Deno.env.get(\"SQUARE_SIGNATURE_KEY\") ?? \"\";\nconst SQUARE_ACCESS_TOKEN = (Deno.env.get(\"SQUARE_ACCESS_TOKEN\")\n || (await blob.getJSON(\"m2_sq_token\").catch(() => null))?.t\n || \"\") as string; // v3.9: env var OR blob m2_sq_token fallback (val.town env-var UI unreachable from sessions; blob written 31 Jul via API). v3.4: optional; enables POS customer_id -> email/phone resolution\nconst SQUARE_API = \"https://connect.squareup.com/v2\";\nconst SQUARE_VERSION = \"2025-01-23\";\nconst GHL_TOKEN = Deno.env.get(\"GHL_TOKEN\") ?? \"\";\nconst ADMIN_SECRET = Deno.env.get(\"ADMIN_SECRET\") || GHL_TOKEN; // read-only routes; falls back to GHL_TOKEN\n// v3.6 — the GHL_TOKEN fallback is acceptable for the read-only journal dump (no raw PII in it),\n// but NOT for the two routes that cause real-world side effects. Until a dedicated ADMIN_SECRET\n// exists, ?wipe (deletes every m2_ blob: journal + all ledgers + all dedup/pending state) and\n// ?captest (fires a live Purchase event into the client's Facebook dataset) are DISABLED outright.\n// Anyone holding the GHL token can no longer destroy the bridge's memory or pollute her ad data.\nconst ADMIN_SECRET_DEDICATED = Deno.env.get(\"ADMIN_SECRET\") ?? \"\";\nconst adminStrictOk = (p: string | null) =>\n !!ADMIN_SECRET_DEDICATED && !!p && ctEq(p, ADMIN_SECRET_DEDICATED);\nconst GHL_LOCATION_ID = \"BQHJ19uohldYe3eqA0bl\";\nconst GHL_PIPELINE_ID = \"FXt1UpCVBufbF0v3pfyf\";\nconst GHL_WON_PAID_STAGE_ID = \"ae173310-f8b1-4399-acb7-ef1fc03d3697\";\nconst GHL_BASE = \"https://services.leadconnectorhq.com\";\nconst GHL_HEADERS = () => ({\n Authorization: `Bearer ${GHL_TOKEN}`,\n Version: \"2021-07-28\",\n \"Content-Type\": \"application/json\",\n});\nconst OPP_NAME = \"Square Paid (auto)\"; // bridge-created opp name marker\n\n// M3 — Facebook Conversions API (dataset for The Dogs Spot)\nconst FB_CAPI_TOKEN = Deno.env.get(\"FB_CAPI_TOKEN\") ?? \"\";\nconst FB_DATASET_ID = \"3838731049764356\";\nconst FB_API_VERSION = \"v21.0\";\n\nconst JOURNAL_KEY = \"m2_bridge_journal\";\nconst INBOUND_KEY = \"m2_last_inbound\";\nconst DEDUP_EVENT = \"m2_dedup_event:\";\nconst LEDGER = \"m2_ledger:\";\nconst PAY_CONTACT = \"m2_pay_contact:\";\nconst PENDING_PAY = \"m2_pending_pay:\"; // payment arrived before we could link a contact\nconst PENDING_REFUND = \"m2_pending_refund:\";\n\n// constant-time string compare (used for all admin-guard checks)\nfunction ctEq(a: string, b: string): boolean {\n if (!a || !b || a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return diff === 0;\n}\nfunction adminOk(param: string | null): boolean {\n return !!ADMIN_SECRET && !!param && ctEq(param, ADMIN_SECRET);\n}\n\n// v3.7 — the journal is read-modify-written in full on EVERY event, so unbounded growth costs\n// both storage and per-request time. A single retry storm already put 465 junk rows in it.\n// Hard cap at JOURNAL_MAX; oldest rows fall off. Anything needing permanent retention lives in\n// the per-contact ledgers, not here.\nconst JOURNAL_MAX = 1500;\nasync function journal(row: Record) {\n const j = (await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? [];\n j.push({ ts: new Date().toISOString(), ...row });\n await blob.setJSON(JOURNAL_KEY, j.slice(-JOURNAL_MAX));\n}\nasync function seen(key: string): Promise {\n const v = await blob.getJSON(key).catch(() => null);\n return v !== null && v !== undefined;\n}\nasync function getBlob(key: string): Promise {\n return (await blob.getJSON(key).catch(() => null)) as T | null;\n}\nasync function remember(key: string, val: unknown = true) {\n await blob.setJSON(key, val);\n}\n\nasync function sha256Hex(input: string): Promise {\n const data = new TextEncoder().encode(input.trim().toLowerCase());\n const buf = await crypto.subtle.digest(\"SHA-256\", data);\n return Array.from(new Uint8Array(buf)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n// US phone -> E.164 digits (prepend country code 1 for bare 10-digit numbers)\nfunction normPhone(phone: string): string {\n let d = phone.replace(/[^0-9]/g, \"\");\n if (d.length === 10) d = \"1\" + d;\n return d;\n}\n\n// v3.4 — resolve a Square customer_id -> {email, phone} via the Customers API. No-op without a token.\n// This is the POS path: a walk-in payment carries no buyer email/phone, only the customer the\n// register attached at checkout. Without this, every such payment logs NO-MATCH and its revenue\n// never reaches GHL.\nasync function fetchSquareCustomer(\n customerId: string,\n): Promise<{ email?: string; phone?: string }> {\n if (!SQUARE_ACCESS_TOKEN || !customerId) return {};\n try {\n const r = await fetch(\n `${SQUARE_API}/customers/${encodeURIComponent(customerId)}`,\n {\n headers: {\n Authorization: `Bearer ${SQUARE_ACCESS_TOKEN}`,\n \"Square-Version\": SQUARE_VERSION,\n },\n },\n );\n if (!r.ok) {\n await journal({ kind: \"SQ-CUST-ERR\", note: `status ${r.status}` });\n return {};\n }\n const d = await r.json().catch(() => ({}));\n const c = d?.customer ?? {};\n return {\n email: c.email_address || undefined,\n phone: c.phone_number || undefined,\n };\n } catch {\n await journal({ kind: \"SQ-CUST-ERR\", note: \"fetch failed\" });\n return {};\n }\n}\n\nasync function squareSigOk(\n rawBody: string,\n headerSig: string,\n): Promise {\n if (!headerSig || !SQUARE_SIGNATURE_KEY) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(SQUARE_SIGNATURE_KEY),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(NOTIFICATION_URL + rawBody),\n );\n const computed = btoa(String.fromCharCode(...new Uint8Array(mac)));\n return ctEq(computed, headerSig);\n}\n\n// M3 — send a Purchase event to the Facebook dataset. No-op if the token isn't set.\nasync function sendCapiPurchase(\n email: string | undefined,\n phone: string | undefined,\n amount: number,\n eventId: string,\n testEventCode?: string,\n): Promise {\n if (!FB_CAPI_TOKEN) {\n await journal({ kind: \"CAPI-SKIP\", note: \"no FB_CAPI_TOKEN\", eventId });\n return null;\n }\n try {\n const user_data: Record = {};\n if (email) user_data.em = [await sha256Hex(email)];\n if (phone) user_data.ph = [await sha256Hex(normPhone(phone))];\n if (!user_data.em && !user_data.ph) {\n await journal({ kind: \"CAPI-NO-PII\", eventId });\n return { error: \"no PII\" };\n }\n const payload: any = {\n data: [{\n event_name: \"Purchase\",\n event_time: Math.floor(Date.now() / 1000),\n action_source: \"other\",\n event_id: `purchase_${eventId}`,\n user_data,\n custom_data: { currency: \"USD\", value: Number(amount.toFixed(2)) },\n }],\n };\n if (testEventCode) payload.test_event_code = testEventCode;\n const r = await fetch(\n `https://graph.facebook.com/${FB_API_VERSION}/${FB_DATASET_ID}/events?access_token=${\n encodeURIComponent(FB_CAPI_TOKEN)\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n },\n );\n const d = await r.json().catch(() => ({}));\n // journal only safe fields (never the request URL / token)\n await journal({\n kind: r.ok ? \"CAPI-PURCHASE\" : \"CAPI-ERROR\",\n eventId,\n amount,\n test: !!testEventCode,\n resp: d?.events_received ?? d?.error?.message ?? \"unknown\",\n });\n return d;\n } catch (e) {\n await journal({ kind: \"CAPI-ERROR\", eventId, error: \"fetch failed\" });\n return { error: \"fetch failed\" };\n }\n}\n\n// GHL helpers — every call checks r.ok and THROWS on failure so the webhook returns 500 (Square retries).\nasync function ghlFindContact(\n email?: string,\n phone?: string,\n): Promise {\n for (const [param, val] of [[\"email\", email], [\"number\", phone]] as const) {\n if (!val) continue;\n const r = await fetch(\n `${GHL_BASE}/contacts/search/duplicate?locationId=${GHL_LOCATION_ID}&${param}=${\n encodeURIComponent(val)\n }`,\n { headers: GHL_HEADERS() },\n );\n if (r.ok) {\n const d = await r.json().catch(() => ({}));\n const id = d?.contact?.id ?? d?.id ?? null;\n if (id) return id;\n } else if (r.status >= 500 || r.status === 429 || r.status === 401) {\n throw new Error(`GHL find ${r.status}`);\n }\n }\n return null;\n}\n// v3.5 — every opp this contact has in the bridge pipeline, ANY stage. Needed to tell a\n// bridge-created opp from one of Kim's own before deciding to create.\nasync function ghlPipelineOpps(\n contactId: string,\n): Promise<{ id: string; name: string; stage: string; value: number }[]> {\n const r = await fetch(\n `${GHL_BASE}/opportunities/search?location_id=${GHL_LOCATION_ID}&contact_id=${contactId}&pipeline_id=${GHL_PIPELINE_ID}`,\n { headers: GHL_HEADERS() },\n );\n if (!r.ok) throw new Error(`GHL oppsearch ${r.status}`);\n const d = await r.json().catch(() => ({}));\n return (d?.opportunities ?? []).map((o: any) => ({\n id: o.id,\n name: o.name ?? \"\",\n stage: o.pipelineStageId ?? \"\",\n value: Number(o.monetaryValue ?? 0),\n }));\n}\n// only Won-Paid-stage opps (never touch a human's opp in another stage)\nasync function ghlWonPaidOpps(\n contactId: string,\n): Promise<{ id: string; value: number }[]> {\n const r = await fetch(\n `${GHL_BASE}/opportunities/search?location_id=${GHL_LOCATION_ID}&contact_id=${contactId}&pipeline_id=${GHL_PIPELINE_ID}`,\n { headers: GHL_HEADERS() },\n );\n if (!r.ok) throw new Error(`GHL oppsearch ${r.status}`);\n const d = await r.json().catch(() => ({}));\n // Won-Paid STAGE is bridge-exclusive, so filtering by stage finds existing bridge opps\n // (any name) while never touching a human's opp in another stage.\n return (d?.opportunities ?? [])\n .filter((o: any) => o.pipelineStageId === GHL_WON_PAID_STAGE_ID)\n .map((o: any) => ({ id: o.id, value: Number(o.monetaryValue ?? 0) }));\n}\n// v3.5 — returns {id} on success, {duplicate} when GHL refuses because the contact already owns\n// an opportunity, {err} otherwise. v3.3 threw a bare \"GHL createOpp 400\" that hid the reason.\nasync function ghlCreateOpp(\n contactId: string,\n value: number,\n): Promise<{ id?: string; duplicate?: string; err?: string }> {\n const r = await fetch(`${GHL_BASE}/opportunities/`, {\n method: \"POST\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({\n pipelineId: GHL_PIPELINE_ID,\n locationId: GHL_LOCATION_ID,\n name: OPP_NAME,\n pipelineStageId: GHL_WON_PAID_STAGE_ID,\n status: \"won\",\n contactId,\n monetaryValue: value,\n }),\n });\n const d = await r.json().catch(() => ({}));\n if (!r.ok) {\n // \"Allow duplicate opportunity\" is OFF on this location: a contact may hold only one\n // opportunity. GHL hands back the existing id. This is the NORMAL case for any paying\n // customer who was a lead first -- it used to throw -> 500 -> Square retried forever.\n if (d?.code === \"OPPORTUNITY_NO_DUPLICATE\" && d?.meta?.existingId) {\n return { duplicate: d.meta.existingId };\n }\n return {\n err: `GHL createOpp ${r.status} ${JSON.stringify(d).slice(0, 200)}`,\n };\n }\n const id = d?.opportunity?.id ?? d?.id;\n return id ? { id } : { err: \"GHL createOpp no id\" };\n}\nasync function ghlSetOppValue(oppId: string, value: number) {\n const r = await fetch(`${GHL_BASE}/opportunities/${oppId}`, {\n method: \"PUT\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({\n pipelineStageId: GHL_WON_PAID_STAGE_ID,\n status: \"won\",\n monetaryValue: value,\n }),\n });\n if (!r.ok) throw new Error(`GHL setOpp ${r.status}`);\n}\nasync function ghlDeleteOpp(oppId: string) {\n const r = await fetch(`${GHL_BASE}/opportunities/${oppId}`, {\n method: \"DELETE\",\n headers: GHL_HEADERS(),\n });\n if (!r.ok && r.status !== 404) throw new Error(`GHL delOpp ${r.status}`);\n}\nasync function ghlNote(contactId: string, body: string) {\n await fetch(`${GHL_BASE}/contacts/${contactId}/notes`, {\n method: \"POST\",\n headers: GHL_HEADERS(),\n body: JSON.stringify({ body }),\n });\n}\n\ntype Ledger = {\n payments: Record;\n refunds: Record;\n oppId: string | null;\n name?: string;\n};\nconst sum = (o: Record) =>\n Object.values(o).reduce((a, b) => a + b, 0);\n\nasync function reconcile(\n contactId: string,\n): Promise<{ oppId: string | null; value: number }> {\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null };\n const value = Math.round((sum(ledger.payments) - sum(ledger.refunds)) * 100) /\n 100;\n const v = Math.max(0, value);\n const all = await ghlPipelineOpps(contactId);\n // ours = Won-Paid stage (bridge-exclusive by agreement) or carrying the bridge name marker\n const mine = all.filter((o) =>\n o.stage === GHL_WON_PAID_STAGE_ID || o.name === OPP_NAME\n );\n let keep = (ledger.oppId &&\n mine.find((o) => o.id === ledger.oppId)?.id) || mine[0]?.id || null;\n for (const o of mine) if (o.id !== keep) await ghlDeleteOpp(o.id);\n if (keep) {\n await ghlSetOppValue(keep, v);\n ledger.oppId = keep;\n await remember(LEDGER + contactId, ledger);\n return { oppId: keep, value: v };\n }\n\n const created = await ghlCreateOpp(contactId, v);\n if (created.id) {\n ledger.oppId = created.id;\n await remember(LEDGER + contactId, ledger);\n return { oppId: created.id, value: v };\n }\n if (created.err) throw new Error(created.err);\n\n // v3.5 — the contact already owns an opportunity the bridge did NOT create: a real lead or\n // customer record of Kim's. Do NOT hijack it and do NOT overwrite its monetaryValue -- that\n // number is her sale, not our Square balance. Book the revenue in the ledger + contact note +\n // journal and return cleanly so Square stops retrying the event.\n ledger.oppId = null;\n await remember(LEDGER + contactId, ledger);\n await journal({\n kind: \"REVENUE-ON-CLIENT-OPP\",\n contactId,\n amount: v,\n note: `existing opp ${created.duplicate} left untouched`,\n });\n return { oppId: null, value: v };\n}\nasync function addPayment(\n contactId: string,\n paymentId: string,\n amount: number,\n email?: string,\n phone?: string,\n) {\n if (!paymentId) {\n await journal({ kind: \"BAD-PAYMENT\", note: \"missing payment id\" });\n return;\n }\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null };\n if (paymentId in ledger.payments && ledger.payments[paymentId] === amount) {\n await journal({ kind: \"PAY-DUP\", contactId, id: paymentId });\n await reconcile(contactId);\n return;\n }\n ledger.payments[paymentId] = amount; // also handles amount-changed updates\n await remember(LEDGER + contactId, ledger);\n await remember(PAY_CONTACT + paymentId, contactId);\n const { value } = await reconcile(contactId);\n await ghlNote(\n contactId,\n `[Square] +$${amount.toFixed(2)} payment ${paymentId} (balance $${\n value.toFixed(2)\n })`,\n );\n await journal({\n kind: \"PAYMENT\",\n contactId,\n amount,\n note: `payment ${paymentId}`,\n });\n await sendCapiPurchase(email, phone, amount, paymentId); // M3\n await applyPendingRefund(contactId, paymentId);\n}\nasync function addRefund(contactId: string, refundId: string, amount: number) {\n if (!refundId) {\n await journal({ kind: \"BAD-REFUND\" });\n return;\n }\n const ledger = (await getBlob(LEDGER + contactId)) ??\n { payments: {}, refunds: {}, oppId: null };\n if (refundId in ledger.refunds) {\n await journal({ kind: \"REFUND-DUP\", contactId, id: refundId });\n return;\n }\n ledger.refunds[refundId] = amount;\n await remember(LEDGER + contactId, ledger);\n const { value } = await reconcile(contactId);\n await ghlNote(\n contactId,\n `[Square] Refund -$${amount.toFixed(2)} ${refundId} (balance $${\n value.toFixed(2)\n })`,\n );\n await journal({\n kind: \"REFUND\",\n contactId,\n amount,\n note: `refund ${refundId}`,\n });\n}\n// apply a refund that arrived BEFORE its payment (stashed as pending), once the payment links a contact\nasync function applyPendingRefund(contactId: string, paymentId: string) {\n const pend = await getBlob<{ rid: string; amt: number }>(\n PENDING_REFUND + paymentId,\n );\n if (pend) {\n await blob.delete(PENDING_REFUND + paymentId);\n await journal({ kind: \"REFUND-PENDING-APPLIED\", contactId, id: pend.rid });\n await addRefund(contactId, pend.rid, pend.amt);\n }\n}\n// apply a payment that arrived BEFORE we could link a contact (e.g. POS/checkout payment with no email,\n// later linked by its invoice.payment_made). Books the real amount from the original payment event.\nasync function applyPendingPayment(\n contactId: string,\n paymentId: string,\n email?: string,\n phone?: string,\n) {\n const pend = await getBlob<{ amt: number; email?: string; phone?: string }>(\n PENDING_PAY + paymentId,\n );\n if (pend) {\n await blob.delete(PENDING_PAY + paymentId);\n await journal({\n kind: \"PENDING-PAY-APPLIED\",\n contactId,\n id: paymentId,\n amount: pend.amt,\n });\n // prefer the payment's own PII; fall back to the invoice recipient's so CAPI still gets identity\n await addPayment(\n contactId,\n paymentId,\n pend.amt,\n pend.email || email,\n pend.phone || phone,\n );\n }\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // v3.8 — inbound heartbeat. Recorded BEFORE signature verification or parsing, so that\n // \"Square stopped delivering\" becomes distinguishable from \"Square delivered and we\n // discarded it\". Until now the journal only recorded events the code chose to act on,\n // which meant a disabled or expired webhook subscription was indistinguishable from a\n // genuinely quiet trading day — the failure mode was total silence with no alarm.\n if (req.method === \"POST\") {\n try {\n const prev = await blob.getJSON<{ n?: number }>(INBOUND_KEY).catch(() => null);\n await blob.setJSON(INBOUND_KEY, {\n ts: new Date().toISOString(),\n n: (prev?.n ?? 0) + 1,\n });\n } catch { /* never let bookkeeping break delivery */ }\n }\n\n // Health check (no data) — safe to be public\n if (req.method === \"GET\" && !url.search) {\n return new Response(\"M2/M3 bridge up (v3.8).\");\n }\n\n // Journal — now REQUIRES admin secret (was a public PII leak in earlier versions)\n if (req.method === \"GET\" && url.searchParams.get(\"dump\") === \"1\") {\n if (!adminOk(url.searchParams.get(\"admin\"))) {\n return new Response(\"forbidden\", { status: 403 });\n }\n return Response.json(\n (await blob.getJSON(JOURNAL_KEY).catch(() => null)) ?? [],\n );\n }\n // v3.10 (11 Aug 2026) — READ ONLY PAYMENT LOOKUP. Added so Kim's team can identify the 29\n // unmatched July payments. The journal only ever recorded amount and time; Square holds the\n // receipt, the card's last four and the line items. The token to ask Square is already in this\n // runtime and reachable from nowhere else, which is the only reason this route exists here.\n //\n // GET ?lookup=&admin=\n // It performs GET on Square's Payments and Orders APIs and nothing else. There is no write verb\n // in this branch, it touches no blob, and it journals nothing, so it cannot alter the bridge's\n // memory or Kim's data. Ninety ids per call is the cap, to keep one request bounded.\n if (req.method === \"GET\" && url.searchParams.get(\"lookup\")) {\n if (!adminOk(url.searchParams.get(\"admin\"))) {\n return new Response(\"forbidden\", { status: 403 });\n }\n if (!SQUARE_ACCESS_TOKEN) {\n return Response.json({ error: \"SQUARE_ACCESS_TOKEN not set in this runtime\" }, { status: 503 });\n }\n const ids = String(url.searchParams.get(\"lookup\")).split(\",\").map((x) => x.trim()).filter(Boolean).slice(0, 90);\n const sqGet = async (path: string) => {\n const r = await fetch(`${SQUARE_API}${path}`, {\n headers: { Authorization: `Bearer ${SQUARE_ACCESS_TOKEN}`, \"Square-Version\": SQUARE_VERSION },\n });\n if (!r.ok) return { _error: r.status } as any;\n return await r.json();\n };\n const out: any[] = [];\n for (const id of ids) {\n const pay = await sqGet(`/payments/${encodeURIComponent(id)}`);\n const p = pay?.payment ?? null;\n let order: any = null;\n if (p?.order_id) order = (await sqGet(`/orders/${encodeURIComponent(p.order_id)}`))?.order ?? null;\n out.push({\n id,\n error: pay?._error ?? null,\n created_at: p?.created_at ?? null,\n amount: p?.amount_money?.amount != null ? p.amount_money.amount / 100 : null,\n status: p?.status ?? null,\n source_type: p?.source_type ?? null,\n card_brand: p?.card_details?.card?.card_brand ?? null,\n last_4: p?.card_details?.card?.last_4 ?? null,\n cardholder_name: p?.card_details?.card?.cardholder_name ?? null,\n entry_method: p?.card_details?.entry_method ?? null,\n receipt_number: p?.receipt_number ?? null,\n receipt_url: p?.receipt_url ?? null,\n note: p?.note ?? null,\n customer_id: p?.customer_id ?? null,\n location_id: p?.location_id ?? null,\n device_name: p?.device_details?.device_name ?? null,\n team_member_id: p?.team_member_id ?? null,\n order_id: p?.order_id ?? null,\n line_items: (order?.line_items ?? []).map((li: any) => ({\n name: li?.name ?? null,\n quantity: li?.quantity ?? null,\n total: li?.total_money?.amount != null ? li.total_money.amount / 100 : null,\n variation: li?.variation_name ?? null,\n catalog_object_id: li?.catalog_object_id ?? null,\n })),\n order_customer_id: order?.customer_id ?? null,\n // v3.10a: resolve the Square customer too. Every one of the 29 unmatched July payments\n // carries a customer_id, so these buyers are NOT anonymous. Square knows who they are and\n // the bridge simply failed to carry it across. Read only, one GET per customer.\n square_customer: await (async () => {\n const cid = p?.customer_id ?? order?.customer_id ?? null;\n if (!cid) return null;\n const c = (await sqGet(`/customers/${encodeURIComponent(String(cid))}`))?.customer ?? null;\n if (!c) return null;\n return {\n given_name: c.given_name ?? null, family_name: c.family_name ?? null,\n email_address: c.email_address ?? null, phone_number: c.phone_number ?? null,\n company_name: c.company_name ?? null, nickname: c.nickname ?? null,\n reference_id: c.reference_id ?? null, note: c.note ?? null,\n created_at: c.created_at ?? null,\n };\n })(),\n fulfillments: (order?.fulfillments ?? []).map((f: any) => f?.pickup_details?.recipient ?? null).filter(Boolean),\n });\n }\n return Response.json({ asked: ids.length, results: out });\n }\n\n // v3.10b — READ ONLY CATALOG. Kim asked that payment links be built from the \"New Training\n // Prices\" category in Square and its Upgrades subcategory, because the product prices in her CRM\n // are stale. This lists the catalog so those prices can be read rather than retyped. GETs only.\n if (req.method === \"GET\" && url.searchParams.get(\"catalog\") === \"1\") {\n if (!adminOk(url.searchParams.get(\"admin\"))) return new Response(\"forbidden\", { status: 403 });\n if (!SQUARE_ACCESS_TOKEN) return Response.json({ error: \"no square token\" }, { status: 503 });\n const sqGet2 = async (path: string) => {\n const r = await fetch(`${SQUARE_API}${path}`, {\n headers: { Authorization: `Bearer ${SQUARE_ACCESS_TOKEN}`, \"Square-Version\": SQUARE_VERSION },\n });\n return r.ok ? await r.json() : { _error: r.status };\n };\n const cats = await sqGet2(\"/catalog/list?types=CATEGORY\");\n const items = await sqGet2(\"/catalog/list?types=ITEM\");\n const catName = new Map();\n for (const c of cats?.objects ?? []) catName.set(c.id, c?.category_data?.name ?? \"\");\n const out = (items?.objects ?? []).map((it: any) => ({\n item: it?.item_data?.name ?? null,\n category: catName.get(it?.item_data?.category_id ?? it?.item_data?.categories?.[0]?.id ?? \"\") ?? null,\n variations: (it?.item_data?.variations ?? []).map((v: any) => ({\n name: v?.item_variation_data?.name ?? null,\n price: v?.item_variation_data?.price_money?.amount != null ? v.item_variation_data.price_money.amount / 100 : null,\n })),\n }));\n return Response.json({ categories: [...catName.values()].filter(Boolean).sort(), items: out });\n }\n\n // v3.5 — env presence check (admin, booleans only, never values). Answers \"is the POS path armed?\"\n if (req.method === \"GET\" && url.searchParams.get(\"envcheck\") === \"1\") {\n if (!adminOk(url.searchParams.get(\"admin\"))) {\n return new Response(\"forbidden\", { status: 403 });\n }\n return Response.json({\n version: \"3.9\",\n SQUARE_SIGNATURE_KEY: !!SQUARE_SIGNATURE_KEY,\n SQUARE_ACCESS_TOKEN: !!SQUARE_ACCESS_TOKEN,\n GHL_TOKEN: !!GHL_TOKEN,\n lastInbound: (await blob.getJSON(INBOUND_KEY).catch(() => null)) ?? \"never\",\n ADMIN_SECRET_dedicated: !!ADMIN_SECRET_DEDICATED,\n destructive_routes_enabled: !!ADMIN_SECRET_DEDICATED,\n FB_CAPI_TOKEN: !!FB_CAPI_TOKEN,\n });\n }\n // CAPI self-test (admin) — fires one Purchase; use &code= to keep it in Test Events\n if (req.method === \"GET\" && url.searchParams.has(\"captest\")) {\n if (!adminStrictOk(url.searchParams.get(\"captest\"))) {\n return new Response(\"forbidden: ?captest requires a dedicated ADMIN_SECRET\", { status: 403 });\n }\n const code = url.searchParams.get(\"code\") || undefined;\n const resp = await sendCapiPurchase(\n \"captest@thedogsspotga.com\",\n \"+19125550123\",\n 1.00,\n \"captest_\" + Date.now(),\n code,\n );\n return Response.json({\n sent: true,\n hasToken: !!FB_CAPI_TOKEN,\n dataset: FB_DATASET_ID,\n testEventCode: code ?? null,\n meta: resp,\n });\n }\n // Wipe (admin) — POST only, fail-closed\n if (req.method === \"POST\" && url.searchParams.get(\"wipe\") === \"1\") {\n if (!adminStrictOk(url.searchParams.get(\"admin\"))) {\n return new Response(\"forbidden: ?wipe requires a dedicated ADMIN_SECRET\", { status: 403 });\n }\n const keys = await blob.list(\"m2_\");\n let n = 0;\n for (const k of keys) {\n await blob.delete((k as any).key);\n n++;\n }\n return new Response(\"wiped \" + n);\n }\n if (req.method !== \"POST\") return new Response(\"M2/M3 bridge up (v3.7).\");\n\n const raw = await req.text();\n const sig = req.headers.get(\"x-square-hmacsha256-signature\") ?? \"\";\n if (!(await squareSigOk(raw, sig))) {\n await journal({ kind: \"BAD-SIG\" });\n return new Response(\"bad sig\", { status: 401 });\n }\n\n let evt: any;\n try {\n evt = JSON.parse(raw);\n } catch {\n return new Response(\"bad json\", { status: 400 });\n }\n const eventId = evt?.event_id;\n if (eventId && await seen(DEDUP_EVENT + eventId)) {\n await journal({ kind: \"DUPLICATE-SKIP\" });\n return new Response(\"dup\");\n }\n\n const type = evt?.type as string;\n const obj = evt?.data?.object ?? {};\n try {\n if (type === \"payment.updated\" || type === \"payment.created\") {\n const p = obj.payment ?? {};\n if (p.status === \"COMPLETED\") {\n const amt = (p.amount_money?.amount ?? 0) / 100;\n let email = p.buyer_email_address || undefined;\n let phone = p.buyer_phone_number || undefined; // usually absent on POS, defensive\n // 1) match by email OR phone; 2) else use the contact an invoice already linked to this payment id\n let cid = await ghlFindContact(email, phone);\n if (!cid) cid = await getBlob(PAY_CONTACT + p.id);\n // 3) v3.4/v3.5 — POS: the register attached a customer at checkout but the payment object\n // carries no email/phone. Resolve the Square customer, then match the GHL contact.\n if (!cid && p.customer_id && SQUARE_ACCESS_TOKEN) {\n const sc = await fetchSquareCustomer(p.customer_id);\n email = email || sc.email;\n phone = phone || sc.phone;\n if (sc.email || sc.phone) cid = await ghlFindContact(sc.email, sc.phone);\n }\n if (cid) await addPayment(cid, p.id, amt, email, phone);\n else {\n // hold the amount so invoice.payment_made can book it the moment it supplies a contact\n await remember(PENDING_PAY + p.id, { amt, email, phone });\n await journal({\n kind: \"NO-MATCH\",\n note: `payment ${p.id}`,\n amount: amt,\n hadEmail: !!email,\n hadPhone: !!phone,\n hadCustomerId: !!p.customer_id,\n sqTokenSet: !!SQUARE_ACCESS_TOKEN,\n });\n }\n }\n } else if (type === \"invoice.payment_made\") {\n const inv = obj.invoice ?? {};\n const r = inv.primary_recipient ?? {};\n const email = r.email_address || undefined;\n const phone = r.phone_number || undefined;\n const payId = obj?.payment?.id;\n const cid = await ghlFindContact(email, phone);\n if (cid) {\n if (payId) {\n await remember(PAY_CONTACT + payId, cid);\n await applyPendingRefund(cid, payId);\n await applyPendingPayment(cid, payId, email, phone); // books the payment amount if it already arrived\n }\n await reconcile(cid);\n await journal({\n kind: \"INVOICE-LINKED\",\n note: `invoice ${inv.id}`,\n contactId: cid,\n });\n } else {\n // no contact to book to — the payment stays on the review list (rich NO-MATCH)\n await journal({\n kind: \"NO-MATCH\",\n note: `invoice ${inv.id}`,\n hadEmail: !!email,\n hadPhone: !!phone,\n });\n }\n } else if (type === \"invoice.refunded\") {\n const inv = obj.invoice ?? {};\n const r = inv.primary_recipient ?? {};\n const cid = await ghlFindContact(r.email_address, r.phone_number);\n const amt = (obj?.refund?.amount_money?.amount ?? 0) / 100;\n const rid = obj?.refund?.id ?? `inv-${inv.id}`;\n if (cid) await addRefund(cid, rid, amt);\n else {await journal({\n kind: \"REFUND-NO-MATCH\",\n note: `invoice-refund ${inv.id}`,\n });}\n } else if (type === \"refund.updated\" || type === \"refund.created\") {\n const rf = obj.refund ?? {};\n if (rf.status === \"COMPLETED\") {\n const cid = rf.payment_id\n ? await getBlob(PAY_CONTACT + rf.payment_id)\n : null;\n const amt = (rf.amount_money?.amount ?? 0) / 100;\n if (cid) await addRefund(cid, rf.id, amt);\n else {\n await remember(PENDING_REFUND + (rf.payment_id ?? rf.id), {\n rid: rf.id,\n amt,\n });\n await journal({\n kind: \"REFUND-PENDING\",\n amount: amt,\n note: `refund ${rf.id}`,\n });\n }\n }\n } else {\n await journal({ kind: \"IGNORED\", type });\n }\n } catch (e) {\n await journal({ kind: \"ERROR\", type, error: String(e).slice(0, 120) });\n return new Response(\"retry\", { status: 500 }); // Square will retry; event NOT marked seen\n }\n\n if (eventId) await remember(DEDUP_EVENT + eventId); // mark seen only after success\n return new Response(\"EVENT_RECEIVED\");\n}\n\n\n=====FILE handover/KRISTIAN-EMAIL-DRAFT.txt =====\nTo: solutions@moorecre8ive.com\nSubject: One quick question on the app and the CRM\n\nHi Kristian,\n\nQuick technical one so I do not step on your application. When your app updates opportunities in the\nCRM, does it write the monetary value on them, and does it move cards between pipeline stages? I am\nbuilding the Square payment reconciliation and I need to know which fields you own so mine only ever\ntouch the ones nobody else does.\n\nThanks,\nAmir\n\n\n\n=====FILE handover/TEAM-EMAIL-DRAFT.txt =====\nTo: info@thedogsspotga.com\nSubject: New puppy follow up is now on\n\nHi team,\n\nA quick heads up on something that started today. New puppy inquiries now get a short series of\nhelpful follow up messages automatically, by text and email, over their first few weeks. It runs on\nits own and sends only during business hours.\n\nThere is nothing you need to do. Two things worth knowing:\n\nIf a customer replies to one of these, a real person still needs to answer them, same as always. The\nmessages are friendly and low key, they are not doing any selling.\n\nIf someone books a Pup Talk, they stop getting the series automatically, so you will not be talking to\nsomeone who is still being messaged about booking one.\n\nThat is it. If anything looks off, tell Amir and he will take a look.\n\nThanks,\nKim\n\n\n\n=====FILE scripts/exception-report.mjs =====\n#!/usr/bin/env node\n// THE WEEKLY SQUARE EXCEPTION REPORT. Generator, 11 Aug 2026.\n//\n// WHAT THIS IS. Promised to Kim in writing (handover/REPLY-TO-KIM-11-AUG.txt, \"I want to add a\n// short weekly list of any Square sale that did not reach a customer record\"). Every run reads the\n// Square-to-GoHighLevel bridge's own journal, asks the bridge which payments never reached a\n// contact using the SAME rule the client was already told about, and writes a CSV plus a short\n// summary. Nothing here is scheduled and nothing here writes to a live system: two GETs to the\n// bridge (the journal dump and the Square detail lookup), both read only, and two local files out.\n//\n// WHY IT DOES NOT HAND-COPY THE MATCHING RULE. The rule that decides \"unmatched\" is\n// engine/facts.ts squareBacklog(). Copying its logic into a second file is exactly how Kim ended up\n// with a wrong number in writing once already: on 9 Aug she was told 42 payments / $33,535.99, a\n// figure that only ever read the FIRST attempt at each payment, when the true count, reading every\n// attempt, is 33 / $22,651.99 (engine/facts.ts:64-69). $10,884.00 of backlog that had already\n// cleared was still being reported as owed. So this script imports the real, current\n// squareBacklog() (via build/facts.js, transpiled fresh from engine/facts.ts on every run, never a\n// stale copy) for the numbers Kim sees, and only re-derives the per-payment LIST locally, because\n// squareBacklog() itself returns totals, not rows. That second derivation is then reconciled\n// against the imported function's totals below and the run refuses to ship if they disagree by so\n// much as a cent or a row (see reconcileOrDie). LESSONS.md #8 asks for exactly this standing check\n// once this report exists: \"reconcile any subset against its parent total before it leaves the\n// building.\" This is that check.\n//\n// WHAT COUNTS AS THE WEEKLY LIST. \"Weekly\" describes the CADENCE this is meant to run on, not a\n// seven day filter on the journal. The list is the entire current backlog, same as the number Kim\n// was quoted, because a payment that missed its match three weeks ago and still has not been fixed\n// is exactly the kind of thing that must not \"age out\" of a list whose whole purpose is that\n// nothing sits unnoticed. LESSONS.md #8 is the same lesson from the other direction: a filter\n// boundary that quietly became \"the\" result understated the backlog to 29 / $19,822 once already.\n// No date filtering happens anywhere in this file.\n//\n// USAGE\n// node scripts/exception-report.mjs\n// ENV OVERRIDES\n// BRIDGE_URL default: read from engine/dashboard.ts\n// BRIDGE_ADMIN required for live mode; never stored in source\n// EXCEPTION_REPORT_OUT_DIR default: /mnt/user-data/outputs\n// EXCEPTION_REPORT_DATE default: today, formatted D-Mon e.g. \"11-Aug\"\n// EXCEPTION_REPORT_JOURNAL_FILE offline mode: read journal JSON from this local file, skip the\n// network fetch entirely (used by tests/manual debugging only)\n\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, writeFileSync, mkdirSync, existsSync } from \"node:fs\";\nimport { join, dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\nconst ROOT = resolve(HERE, \"..\"); // /home/claude/restore\n\nfunction shout(msg) {\n console.error(`\\n!!!! ${msg} !!!!\\n`);\n}\nfunction die(msg) {\n shout(msg);\n process.exit(1);\n}\n\n// -------------------------------------------------------------------------------------------\n// STEP 0. Rebuild engine/ -> build/, always, before importing anything from it. Copied straight\n// from tests/run-all.mjs's own \"REBUILD FIRST, ALWAYS\" — the incident that rule guards against\n// (6 Aug: real logic deleted from an engine file, suite run without rebuilding, 270 assertions\n// \"passed\" against stale code) is exactly the failure mode a report script must not repeat, because\n// nobody reviews this output as carefully as a red test suite.\n// -------------------------------------------------------------------------------------------\n{\n const b = spawnSync(\"node\", [join(ROOT, \"scripts\", \"build.mjs\")], { encoding: \"utf8\", timeout: 300_000 });\n if (b.status !== 0) {\n die(`BUILD FAILED. Refusing to generate a report against logic that will not even compile.\\n${(b.stdout ?? \"\") + (b.stderr ?? \"\")}`.trim());\n }\n}\n\nconst { squareBacklog, squareSentence } = await import(join(ROOT, \"build\", \"facts.js\"));\nconst { unmatchedPaymentRows, reconcile, cents, paymentUniverse, journalAmount } = await import(join(ROOT, \"scripts\", \"exception-report-lib.mjs\"));\n\n// -------------------------------------------------------------------------------------------\n// STEP 1. Credentials. Secrets are environment-only because the deployed source is public.\n// -------------------------------------------------------------------------------------------\nconst DASHBOARD_TS = process.env.DASHBOARD_TS_PATH || join(ROOT, \"engine\", \"dashboard.ts\");\nif (!existsSync(DASHBOARD_TS)) die(`cannot find ${DASHBOARD_TS}. Restore it before running this report.`);\nconst dashboardSrc = readFileSync(DASHBOARD_TS, \"utf8\");\n\nfunction readConstFrom(text, name) {\n const m = new RegExp(`const\\\\s+${name}\\\\s*=\\\\s*\"([^\"]+)\"`).exec(text);\n return m ? m[1] : null;\n}\n\nconst admin = process.env.BRIDGE_ADMIN || \"\";\nif (admin.length < 24) {\n die(\"BRIDGE_ADMIN is missing or too short. Set the rotated credential in the environment; source fallbacks are forbidden.\");\n}\n\nconst BRIDGE = process.env.BRIDGE_URL || readConstFrom(dashboardSrc, \"BRIDGE\");\nif (!BRIDGE) die(`could not find a BRIDGE literal in ${DASHBOARD_TS}`);\n\n// -------------------------------------------------------------------------------------------\n// STEP 2. Fetch the journal. READ ONLY: a GET on ?dump=1. Zero rows inspected is a hard failure,\n// never an empty success (LESSONS.md #2) — it almost certainly means the fetch broke, not that\n// nothing happened.\n// -------------------------------------------------------------------------------------------\nlet journal;\nconst journalFileOverride = process.env.EXCEPTION_REPORT_JOURNAL_FILE;\nif (journalFileOverride) {\n console.log(`offline mode: reading journal from ${journalFileOverride} instead of the network`);\n journal = JSON.parse(readFileSync(journalFileOverride, \"utf8\"));\n} else {\n const dumpUrl = `${BRIDGE}?dump=1&admin=${encodeURIComponent(admin)}`;\n let res;\n try {\n res = await fetch(dumpUrl);\n } catch (e) {\n die(`journal fetch threw: ${e.message}`);\n }\n if (!res.ok) die(`journal fetch failed: HTTP ${res.status} from ${BRIDGE}?dump=1`);\n journal = await res.json();\n}\n\nif (!Array.isArray(journal)) die(`journal did not come back as an array (got ${typeof journal}). Cannot inspect anything.`);\nif (journal.length === 0) die(`journal came back with ZERO rows. A report that inspects zero rows is a FAILURE, not an empty success. Not writing anything.`);\n\nconst journalTimestamps = journal.map((r) => r?.ts).filter(Boolean).sort();\nconst spanStart = journalTimestamps[0] ?? \"unknown\";\nconst spanEnd = journalTimestamps[journalTimestamps.length - 1] ?? \"unknown\";\nconsole.log(`Inspected ${journal.length} journal rows, spanning ${spanStart} to ${spanEnd}.`);\nif (journal.length < 100) {\n shout(`only ${journal.length} journal rows read; the brief describes roughly 780. This is not a hard failure (the journal legitimately grows or could be pruned) but it is worth a human's eyes before this ships.`);\n}\n\n// -------------------------------------------------------------------------------------------\n// STEP 3. THE NUMBERS KIM SEES: the real, current squareBacklog(), imported, not retyped.\n// -------------------------------------------------------------------------------------------\nconst backlog = squareBacklog(journal);\nif (!backlog) die(\"squareBacklog(journal) returned null even though the journal is a non-empty array. The reconciliation logic itself has changed shape; stop and look before shipping anything.\");\n\n// -------------------------------------------------------------------------------------------\n// STEP 4. THE LIST: a second, independent derivation of the same rule, so this report can name\n// individual payments (squareBacklog() only returns aggregates). unmatchedPaymentRows(), imported\n// from exception-report-lib.mjs above, mirrors engine/facts.ts squareBacklog() lines 72-98 and\n// carries the same MATCHED-LATER GUARD that closes the $10,884 / 9 payment hole documented there\n// and in tests/exception-report.test.mjs.\n// -------------------------------------------------------------------------------------------\nconst rows = unmatchedPaymentRows(journal);\n\n// -------------------------------------------------------------------------------------------\n// STEP 5. RECONCILE OR DIE. The list built above must add up to exactly what the real\n// squareBacklog() says, in count and in every dollar (reconcile(), same lib import). If it does\n// not, something has drifted between the two derivations and this script refuses to ship a number\n// Kim cannot trust. LESSONS.md #8's standing check — a subset plus its remainder equals the\n// parent total — is inside reconcile() too.\n// -------------------------------------------------------------------------------------------\nfunction reconcileOrDie(rows, backlog) {\n const r = reconcile(rows, backlog);\n if (!r.ok) {\n shout(\"RECONCILIATION FAILED. This report does NOT match engine/facts.ts squareBacklog(). Nothing was written.\");\n for (const p of r.problems) console.error(` - ${p}`);\n process.exit(1);\n }\n console.log(`Reconciled: ${rows.length} payments / $${r.listTotal.toFixed(2)} matches squareBacklog() exactly ` +\n `(${backlog.withTrail} with a trail worth $${backlog.withTrailTotal.toFixed(2)}, ${backlog.noTrail} with none worth $${backlog.noTrailTotal.toFixed(2)}).`);\n return r;\n}\n\nreconcileOrDie(rows, backlog);\n\n// -------------------------------------------------------------------------------------------\n// STEP 6. ENRICH each unmatched payment with Square's own detail via the bridge's read only\n// lookup route (?lookup=, capped at 90 ids per call by the bridge itself; chunked here so this\n// still works the week the backlog exceeds that). A lookup failure downgrades that row rather\n// than aborting the run: the count and total already reconciled above and are the part Kim\n// actually needs not to miss.\n// -------------------------------------------------------------------------------------------\nasync function lookupSquareDetails(ids) {\n const out = new Map();\n const failures = [];\n const CHUNK = 90;\n for (let i = 0; i < ids.length; i += CHUNK) {\n const chunk = ids.slice(i, i + CHUNK);\n const url = `${BRIDGE}?lookup=${chunk.map(encodeURIComponent).join(\",\")}&admin=${encodeURIComponent(admin)}`;\n let res;\n try {\n res = await fetch(url);\n } catch (e) {\n shout(`Square lookup request threw for ${chunk.length} payment(s): ${e.message}`);\n failures.push(...chunk);\n continue;\n }\n if (!res.ok) {\n shout(`Square lookup HTTP ${res.status} for ${chunk.length} payment(s). Those rows will ship without Square detail.`);\n failures.push(...chunk);\n continue;\n }\n const body = await res.json();\n for (const r of body.results ?? []) out.set(r.id, r);\n for (const id of chunk) if (!out.has(id)) failures.push(id);\n }\n return { out, failures };\n}\n\n// THE PARENT TOTAL. [Added 12 Aug 2026.] LESSONS.md #8 says a subset may not leave the building\n// without the population it came out of, and until now this report had none: \"33 unlinked\" was\n// quoted against nothing, which is how three wrong versions of it in a row all looked plausible.\n// paymentUniverse() is the same id parser this file already trusts for the subset, applied to\n// every payment the bridge has ever logged, so the two cannot drift.\n//\n// Every payment is looked up in Square, not just the unmatched ones, because the journal does not\n// always carry an amount: PAY-DUP rows have no amount field at all, and five payments worth\n// $1,410.00 live are reachable only through those rows. A parent total summed from the journal\n// alone would understate the population by that much and the subset would look larger than it is.\nconst universe = paymentUniverse(journal);\nconst { out: lookups, failures: lookupFailures } = await lookupSquareDetails([...universe.payments.keys()].sort());\nconsole.log(`Square lookup: ${universe.payments.size - lookupFailures.length} of ${universe.payments.size} payments enriched` +\n (lookupFailures.length ? `, ${lookupFailures.length} FAILED (${lookupFailures.join(\", \")}).` : \".\"));\n\nconst amountOf = (id) => {\n const s = Number(lookups.get(id)?.amount);\n return Number.isFinite(s) ? s : journalAmount(universe.payments.get(id));\n};\nconst universeTotal = [...universe.payments.keys()].reduce((a, id) => a + amountOf(id), 0);\nconst linkedTotal = universe.linked.reduce((a, id) => a + amountOf(id), 0);\nconst unlinkedTotal = universe.unlinked.reduce((a, id) => a + amountOf(id), 0);\n{\n const p = [];\n if (universe.linked.length + universe.unlinked.length !== universe.payments.size) p.push(`linked ${universe.linked.length} + unlinked ${universe.unlinked.length} does not equal the ${universe.payments.size} payments seen`);\n if (cents(linkedTotal + unlinkedTotal) !== cents(universeTotal)) p.push(`linked $${linkedTotal.toFixed(2)} + unlinked $${unlinkedTotal.toFixed(2)} does not equal $${universeTotal.toFixed(2)}`);\n if (universe.unlinked.length !== backlog.payments) p.push(`paymentUniverse() says ${universe.unlinked.length} unlinked, squareBacklog() says ${backlog.payments}`);\n if (cents(unlinkedTotal) !== cents(backlog.total)) p.push(`the unlinked total from Square is $${unlinkedTotal.toFixed(2)} and squareBacklog() says $${backlog.total.toFixed(2)}`);\n if (p.length) {\n shout(\"THE SUBSET DOES NOT RECONCILE AGAINST ITS POPULATION. Nothing was written.\");\n for (const x of p) console.error(` - ${x}`);\n process.exit(1);\n }\n console.log(`Population: ${universe.payments.size} payments $${universeTotal.toFixed(2)} = ${universe.linked.length} linked $${linkedTotal.toFixed(2)} + ${universe.unlinked.length} unlinked $${unlinkedTotal.toFixed(2)}.`);\n}\n\n// Per-payment lookup errors (Square answered the batch but not this one id, e.g. a 404 on that\n// payment) versus payments never asked about are both surfaced the same way in the CSV.\nlet amountMismatches = 0;\nconst enriched = rows.map((row) => {\n const sq = lookups.get(row.paymentId) ?? null;\n const lookupStatus = !sq ? \"not looked up\" : sq.error ? `Square error ${sq.error}` : \"ok\";\n const cust = sq?.square_customer ?? null;\n // Square's own customer records carry stray whitespace on some names (e.g. \"Jonathan \" /\n // \"Jameson \" with trailing spaces baked in) — collapse runs of whitespace rather than pass a\n // double-spaced name through to a client-facing document.\n const name = [cust?.given_name, cust?.family_name].map((s) => (s ?? \"\").trim()).filter(Boolean).join(\" \").replace(/\\s+/g, \" \").trim()\n || (sq?.cardholder_name ?? \"\").trim()\n || null;\n if (sq?.amount != null && cents(sq.amount) !== cents(row.amount)) {\n amountMismatches++;\n shout(`payment ${row.paymentId}: journal amount $${row.amount.toFixed(2)} does not match Square's own amount $${Number(sq.amount).toFixed(2)}. Row is included with the journal figure (the reconciled one); check this one by hand.`);\n }\n const lineItems = (sq?.line_items ?? [])\n .map((li) => `${li?.name ?? \"item not named\"} x${li?.quantity ?? \"?\"}`)\n .join(\"; \");\n // WHAT SQUARE ACTUALLY HOLDS, which is a different question from row.hasTrail.\n // hasTrail is built from hadEmail/hadPhone/hadCustomerId, and those describe the WEBHOOK PAYLOAD\n // the bridge received, not Square's customer record. Live on 12 Aug 2026 they are backwards for\n // two of the four: the payment the flags call unrecoverable is Caroline Riner and Square holds\n // her name and her phone number, while the payment the flags call recoverable carries a Square\n // customer id whose record is empty. This report is what Kim uses to decide which sales are\n // worth chasing, so the column she reads is derived from Square. row.hasTrail is left untouched\n // because reconcile() checks it against squareBacklog()'s own withTrail/noTrail split.\n const holds = [];\n if (name) holds.push(\"a name\");\n if (cust?.phone_number) holds.push(\"a phone number\");\n if (cust?.email_address) holds.push(\"an email address\");\n const whatSquareHolds = holds.length ? holds.join(\", \").replace(/, ([^,]*)$/, \" and $1\") : \"nothing at all\";\n const flagDisagrees = row.hasTrail !== (holds.length > 0);\n return {\n ...row,\n lookupStatus,\n whatSquareHolds,\n squareCanIdentifyThem: holds.length > 0,\n flagDisagrees,\n squareCreatedAt: sq?.created_at ?? null,\n customerName: name,\n customerEmail: cust?.email_address ?? null,\n customerPhone: cust?.phone_number ?? null,\n cardBrand: sq?.card_brand ?? null,\n cardLast4: sq?.last_4 ?? null,\n paymentStatus: sq?.status ?? null,\n lineItems,\n receiptUrl: sq?.receipt_url ?? null,\n receiptNumber: sq?.receipt_number ?? null,\n orderId: sq?.order_id ?? null,\n squareCustomerId: sq?.customer_id ?? cust?.reference_id ?? null,\n };\n});\nif (amountMismatches) shout(`${amountMismatches} payment(s) have a journal amount that disagrees with Square's own amount. See warnings above.`);\n\n// -------------------------------------------------------------------------------------------\n// THE ORDER A FILE CLAIMS IS THE SOURCE'S ORDER, NEVER OURS.\n//\n// unmatchedPaymentRows() returns its rows sorted by the FIRST TIME OUR OWN JOURNAL SAW each\n// payment, which is the right order for a log and the wrong order for a sentence that says \"in\n// the order the payments arrived\". Live proof, 27 July 2026: Square took $1,000.00 at 17:07:42\n// and $795.00 at 17:07:57, and our journal noticed the $795.00 first. This report printed\n// $795.00 above $1,000.00 and told the reader that was the order they arrived in. Fifteen seconds\n// is harmless; the habit is not, because the same claim is made about lists where the order is\n// the whole point. So the list is re-sorted here by Square's own timestamp, falling back to ours\n// only when Square has nothing to say, and the fallback is counted so the sentence below can say\n// which order it is actually in.\nlet orderedBySquare = true;\nfor (const r of enriched) if (!r.squareCreatedAt) orderedBySquare = false;\nenriched.sort((a, b) =>\n String(a.squareCreatedAt ?? a.firstSeen ?? \"\").localeCompare(String(b.squareCreatedAt ?? b.firstSeen ?? \"\")));\n{\n const p = [];\n for (let i = 1; i < enriched.length; i++) {\n const x = String(enriched[i - 1].squareCreatedAt ?? enriched[i - 1].firstSeen ?? \"\");\n const y = String(enriched[i].squareCreatedAt ?? enriched[i].firstSeen ?? \"\");\n if (x > y) p.push(`rows ${i} and ${i + 1} are out of order`);\n }\n if (p.length) { shout(\"THE LIST IS NOT IN THE ORDER IT CLAIMS. Nothing written.\"); p.forEach((x) => console.error(\" - \" + x)); process.exit(1); }\n console.log(`Order check passed: ${enriched.length} rows, oldest first, by ${orderedBySquare ? \"Square's own timestamp\" : \"Square's own timestamp where it has one and ours where it does not\"}.`);\n}\n\nconst namedCount = enriched.filter((r) => r.customerName).length;\nconsole.log(`Of the ${enriched.length}, ${namedCount} came back from Square with a customer name on file.`);\n\n// -------------------------------------------------------------------------------------------\n// STEP 7. WRITE THE CSV. Plain numbers, no currency symbols or thousands separators, so it opens\n// cleanly as data rather than as text. One row per distinct unmatched payment, oldest first.\n// -------------------------------------------------------------------------------------------\nfunction csvField(v) {\n const s = v === null || v === undefined ? \"\" : String(v);\n return /[\",\\n]/.test(s) ? `\"${s.replace(/\"/g, '\"\"')}\"` : s;\n}\nfunction toCsv(headers, records) {\n const lines = [headers.map(csvField).join(\",\")];\n for (const rec of records) lines.push(headers.map((h) => csvField(rec[h])).join(\",\"));\n return lines.join(\"\\n\") + \"\\n\";\n}\n\nconst CSV_HEADERS = [\n \"payment_id\", \"journal_first_seen\", \"journal_last_seen\", \"journal_row_count\",\n \"amount_usd\", \"what_square_holds\", \"square_can_identify_them\",\n // These three describe the webhook payload the bridge received, NOT Square's records, and they\n // are named so nobody reads them as an answer to \"can this sale be placed\". See the comment on\n // whatSquareHolds above: live, they get it backwards for half this list.\n \"journal_flag_called_it_recoverable\", \"had_email_at_ingest\", \"had_phone_at_ingest\", \"had_square_customer_id_at_ingest\",\n \"square_created_at\", \"customer_name\", \"customer_email\", \"customer_phone\",\n \"card_brand\", \"card_last4\", \"payment_status\", \"line_items\",\n \"receipt_url\", \"receipt_number\", \"order_id\", \"square_customer_id\", \"square_lookup_status\",\n];\nconst csvRecords = enriched.map((r) => ({\n payment_id: r.paymentId,\n journal_first_seen: r.firstSeen,\n journal_last_seen: r.lastSeen,\n journal_row_count: r.journalRowCount,\n amount_usd: r.amount.toFixed(2),\n what_square_holds: r.whatSquareHolds,\n square_can_identify_them: r.squareCanIdentifyThem ? \"yes\" : \"no\",\n journal_flag_called_it_recoverable: r.hasTrail ? \"yes\" : \"no\",\n had_email_at_ingest: r.hadEmailAtIngest ? \"yes\" : \"no\",\n had_phone_at_ingest: r.hadPhoneAtIngest ? \"yes\" : \"no\",\n had_square_customer_id_at_ingest: r.hadCustomerIdAtIngest ? \"yes\" : \"no\",\n square_created_at: r.squareCreatedAt,\n customer_name: r.customerName ?? \"(no name on file)\",\n customer_email: r.customerEmail ?? \"\",\n customer_phone: r.customerPhone ?? \"\",\n card_brand: r.cardBrand ?? \"\",\n card_last4: r.cardLast4 ?? \"\",\n payment_status: r.paymentStatus ?? \"\",\n line_items: r.lineItems || \"\",\n receipt_url: r.receiptUrl ?? \"\",\n receipt_number: r.receiptNumber ?? \"\",\n order_id: r.orderId ?? \"\",\n square_customer_id: r.squareCustomerId ?? \"\",\n square_lookup_status: r.lookupStatus,\n}));\nconst csv = toCsv(CSV_HEADERS, csvRecords);\n\n// -------------------------------------------------------------------------------------------\n// STEP 8. WRITE THE SUMMARY. Client safe: US spelling, no dashes as punctuation (hyphens inside a\n// literal product name or a phone number are the only exception, per HANDOFF.md section 10's\n// voice rule), and the word \"daycare\" never appears (she does not offer it; HANDOFF.md section 6\n// and 10 both call this a factual error, not a preference). Both rules are self checked below and\n// the run fails loudly rather than ship copy that breaks either one.\n// -------------------------------------------------------------------------------------------\nconst money = (n) => `$${n.toLocaleString(\"en-US\", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;\n\nfunction fmtDate(iso) {\n if (!iso) return \"date unknown\";\n const d = new Date(iso);\n if (Number.isNaN(d.getTime())) return \"date unknown\";\n const months = [\"Jan\", \"Feb\", \"Mar\", \"Apr\", \"May\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Oct\", \"Nov\", \"Dec\"];\n return `${d.getUTCDate()} ${months[d.getUTCMonth()]}`;\n}\n\nconst now = new Date();\nconst dateSuffix = process.env.EXCEPTION_REPORT_DATE ||\n `${now.getUTCDate()}-${[\"Jan\", \"Feb\", \"Mar\", \"Apr\", \"May\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Oct\", \"Nov\", \"Dec\"][now.getUTCMonth()]}`;\n\n// The last column USED to be \"Recoverable\", read straight off r.hasTrail. That column told Kim\n// that Caroline Riner, whose name and phone number are sitting in Square, could not be placed,\n// and that a sale with no name, no email and no phone anywhere could be. It is derived from\n// Square now. See the whatSquareHolds comment in STEP 6.\nconst mdRows = enriched.map((r) => {\n const contact = r.customerEmail || r.customerPhone || \"none on file\";\n return `| ${fmtDate(r.squareCreatedAt || r.firstSeen)} | ${money(r.amount)} | ${r.customerName ?? \"(no name on file)\"} | ${contact} | ${r.whatSquareHolds} |`;\n});\nconst flagsWrong = enriched.filter((r) => r.flagDisagrees);\n\nconst explainer = squareSentence(backlog); // generated straight from the reconciled numbers above\n\nconst mdParts = [];\nmdParts.push(`# Weekly Square exception report, ${dateSuffix}`);\nmdParts.push(\"\");\nmdParts.push(\"Hi Kim,\");\nmdParts.push(\"\");\nmdParts.push(`This is the short weekly list I promised: every Square sale that has not reached a customer record in your CRM. This run read all ${journal.length} rows in the bridge's payment journal, covering ${fmtDate(spanStart)} to ${fmtDate(spanEnd)}, and asked Square directly for the receipt behind each of the ${backlog.payments} unmatched payments it found.`);\nmdParts.push(\"\");\nmdParts.push(explainer);\nmdParts.push(\"\");\nif (backlog.payments > 0) {\n mdParts.push(`Square could put a name to ${namedCount} of the ${backlog.payments}. The full list, oldest first, in the order Square itself took the money${orderedBySquare ? \"\" : \", except where Square has no time recorded and our own is used instead\"}:`);\n mdParts.push(\"\");\n mdParts.push(\"| Date | Amount | Customer | Contact | What Square holds for them |\");\n mdParts.push(\"|---|---|---|---|---|\");\n mdParts.push(...mdRows);\n mdParts.push(\"\");\n mdParts.push(`That last column comes from Square's own customer records, asked just now, one call per payment. An earlier version of this list built it from a flag the card reader sets at the moment of sale, and that flag turns out to describe the message the till sent rather than what Square keeps, so it was wrong about ${flagsWrong.length} of these ${backlog.payments}.`);\n mdParts.push(\"\");\n mdParts.push(`Card details, the Square receipt link and what was rung up for every row are in the attached CSV, ${`exception-report-${dateSuffix}.csv`}.`);\n} else {\n mdParts.push(\"Nothing to list this week. Every Square payment reached a customer record.\");\n}\nmdParts.push(\"\");\nmdParts.push(`Here is the whole population those ${backlog.payments} came out of, so the figure can be checked against something rather than quoted on its own. The bridge has handled ${universe.payments.size} card sales worth ${money(universeTotal)} since it was switched on. ${universe.linked.length} of them worth ${money(linkedTotal)} reached a customer record, and ${universe.unlinked.length} worth ${money(unlinkedTotal)} did not. Those two add back to ${money(universeTotal)} exactly, and the ${money(unlinkedTotal)} is the same figure your CRM engine's own reconciliation logic produces, computed separately and checked against this list row by row.`);\nmdParts.push(\"\");\nmdParts.push(\"Amir\");\nconst md = mdParts.join(\"\\n\") + \"\\n\";\n\n// SELF CHECK: the two client facing rules, enforced mechanically rather than trusted by eye.\n{\n const problems = [];\n if (/daycare/i.test(md)) problems.push('the word \"daycare\" appears in the summary');\n // Dash as punctuation: an em dash, an en dash, or a hyphen with a space on both sides. Table\n // pipes and the markdown header rule \"|---|\" are excluded; phone numbers (E.164, no spaces\n // around the hyphen) and the file's own hyphenated name are the documented exceptions and do\n // not match this pattern because they carry no surrounding space.\n const proseOnly = md.split(\"\\n\").filter((l) => !l.startsWith(\"|\")).join(\"\\n\");\n if (/—|–/.test(proseOnly)) problems.push(\"an em dash or en dash appears in the summary\");\n if (/\\s-\\s/.test(proseOnly)) problems.push('a hyphen is used as punctuation (surrounded by spaces) in the summary');\n if (problems.length) {\n shout(\"CLIENT-SAFE COPY CHECK FAILED. Not writing the summary.\");\n for (const p of problems) console.error(` - ${p}`);\n process.exit(1);\n }\n console.log(\"Client-safe copy check passed: no dashes as punctuation, no \\\"daycare\\\".\");\n}\n\n// -------------------------------------------------------------------------------------------\n// STEP 9. WRITE THE FILES.\n// -------------------------------------------------------------------------------------------\n// NOT A CLIENT FILE ANY MORE, 12 Aug 2026. This report and the counter sales pack were two\n// documents about the same four payments, sent together, and the second one pointed at a\n// companion CSV that was not even in the send. Duplicate documents about one thing are the exact\n// confusion the client was apologised to for. The internal weekly report stays, because the\n// reconciliation it runs against engine/facts.ts squareBacklog() is worth having; it writes to the\n// repo, and the file the client reads is Counter-sales-with-no-customer.csv, built by\n// scripts/counter-sales-correction.mjs in the same run as everything else she is sent.\nconst OUT_DIR = process.env.EXCEPTION_REPORT_OUT_DIR || join(ROOT, \"reports\");\nif (OUT_DIR === \"/mnt/user-data/outputs\") {\n shout(\"this report is internal and must not be written into the client's folder. Unset EXCEPTION_REPORT_OUT_DIR.\");\n process.exit(1);\n}\nmkdirSync(OUT_DIR, { recursive: true });\nconst csvPath = join(OUT_DIR, `exception-report-${dateSuffix}.csv`);\nconst mdPath = join(OUT_DIR, `exception-report-${dateSuffix}.md`);\nwriteFileSync(csvPath, csv);\nwriteFileSync(mdPath, md);\n\nconsole.log(\"\");\nconsole.log(`Wrote ${csvPath} (${csvRecords.length} data rows)`);\nconsole.log(`Wrote ${mdPath}`);\nconsole.log(\"\");\nconsole.log(`SUMMARY: ${backlog.payments} unmatched payments totaling ${money(backlog.total)} as of ${new Date().toISOString()}.`);\nconsole.log(` ${backlog.withTrail} with a trail worth ${money(backlog.withTrailTotal)}; ${backlog.noTrail} with none worth ${money(backlog.noTrailTotal)}.`);\nconsole.log(` Reconciled against engine/facts.ts squareBacklog() exactly. ${journal.length} journal rows inspected.`);\n\n","deleted",false,"label",[14],"1bfa6e81-74e1-4c6c-ab32-118304a4ffff",["D",1785429259053],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Puppy path nurture engine v1.2 — The Dogs Spot","imageUrl","userId","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","ad633fec-8e73-11f1-b800-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","1bfa6e8174e14c6cab32118304a4ffff","tursoHostname","1bfa6e8174e14c6cab32118304a4ffff-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519842404],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_36":88,"_11":89,"_23":29,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",1233,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":33,"_149":-5,"_150":-7,"_151":-7,"_152":37,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]