[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","tribeca_airep","name","tribeca-salesforce-agent","path","create-account.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/tribeca_airep/tribeca-salesforce-agent/code/create-account.ts","extension","id","5bb3ac0d-1cf4-4b6f-a32f-db248011ba0c","fileId","3fa3cf86-a614-11f1-a3fe-1607ee4eb77e","parentId","branchId","ceda7ac1-4fbd-45e5-ab28-65082ea4218c","branchVersion",285,"latest",true,"createdAt",["D",1789146831304],"version",55,"fileType","script","content","// Create a Salesforce Account from a chat conversation.\n//\n// WHAT MAKES THIS SAFE\n// The bot may only create ONE shape of account: card-on-file, terms of zero.\n// Of ~1,586 accounts created in the 120 days to 9/1/2026, ~1,376 were exactly\n// that, so this covers the overwhelming majority of real signups — while making\n// it structurally impossible for a chat bot to extend credit to a stranger.\n// Net-30 and Net-60 accounts stay a human decision, because those are the ones\n// where being wrong costs money rather than a refund.\n//\n// WHY THE REGION IS RESOLVED IN CODE AND NOT BY THE MODEL\n// Delivery_Region__c is a RESTRICTED picklist and it drives which truck the\n// account lands on. A wrong value is not a cosmetic error — it is a stop on the\n// wrong route. So the model never picks it: it supplies a ZIP, and this file\n// maps it. Where the mapping is genuinely ambiguous the account is NOT created\n// and a human is asked, which is the same refuse-rather-than-guess rule the\n// rest of this project runs on.\n\nimport { getAccessToken } from \"./salesforce.ts\";\nimport { ZIP_REGION } from \"./zip-regions.ts\";\n\nconst API = \"v59.0\";\n\n/** The one shape of account a bot is allowed to create. */\nconst CARD_ON_FILE = {\n Terms__c: \"0\",\n Payment_Method_Type__c: \"Debit/Credit Card\",\n Invoice_Set_Up__c: \"Credit Card Invoice\",\n};\n\n/** Frequencies the Salesforce picklist actually accepts. */\nexport const FREQUENCIES = [\n \"Weekly\", \"Bi-Weekly\", \"15 Days\", \"30 Days\", \"60 Days\", \"4 Weeks\", \"Call in\",\n];\n\n/**\n * WHAT AN UNRESOLVED ZIP DEFAULTS TO, when regionForZip() cannot place it.\n *\n * Used to be \"Unassigned - Needs Review\", a value added to the picklist on\n * 9/4/2026 specifically to mean \"a person needs to assign this,\" on purpose\n * not a real geography. That broke a real signup on 9/10/2026: Marquisa\n * Swanson (West Orange, NJ 07052, an unmapped ZIP) got this value written to\n * Delivery_Region__c, and the org's own \"New Delivery Date V2\" flow — a\n * SEPARATE restricted-picklist check on the same field, downstream of the\n * Account insert — rejected it outright (INVALID_OR_NULL_FOR_RESTRICTED_\n * PICKLIST), failing the entire insert. No account was created at all; the\n * bot told the customer \"the system's not letting that go through.\"\n *\n * Changed 9/11/2026 per the office: default to Essex instead. It is a real,\n * active Delivery_Region__c value, so it satisfies every downstream flow's\n * validation the way \"Unassigned - Needs Review\" did not — this is the\n * office's own chosen catch-all for \"the address didn't resolve,\" not a\n * geographic claim that every unmapped customer is actually in Essex County.\n * The pricebook automation DOES recognize Essex and will price the account\n * accordingly, unlike the old placeholder; a human still needs to confirm the\n * real route, which is why regionGuessed and the Description stamp below\n * still fire exactly as before.\n */\nconst DEFAULT_REGION = \"Essex\";\n\n/**\n * Common phrasings mapped to the one canonical picklist value each should\n * become. \"Bi-Weekly\" and \"15 Days\" mean the same real-world schedule in this\n * org, and 15 Days is the one already used in practice, so every biweekly-ish\n * phrasing collapses to it — INCLUDING the literal string \"Bi-Weekly\", which\n * is why this is checked before the exact-match branch below rather than\n * after it.\n */\nconst FREQUENCY_SYNONYMS: Record = {\n \"weekly\": \"Weekly\",\n \"bi-weekly\": \"15 Days\",\n \"biweekly\": \"15 Days\",\n \"bi weekly\": \"15 Days\",\n \"every two weeks\": \"15 Days\",\n \"every 2 weeks\": \"15 Days\",\n \"twice a month\": \"15 Days\",\n \"twice monthly\": \"15 Days\",\n \"every 15 days\": \"15 Days\",\n \"15 days\": \"15 Days\",\n \"monthly\": \"30 Days\",\n \"once a month\": \"30 Days\",\n \"every month\": \"30 Days\",\n \"30 days\": \"30 Days\",\n \"every two months\": \"60 Days\",\n \"every 2 months\": \"60 Days\",\n \"bimonthly\": \"60 Days\",\n \"bi-monthly\": \"60 Days\",\n \"60 days\": \"60 Days\",\n \"every 4 weeks\": \"4 Weeks\",\n \"4 weeks\": \"4 Weeks\",\n \"call in\": \"Call in\",\n \"tbd\": \"Call in\",\n \"unknown\": \"Call in\",\n};\n\n/**\n * Canonicalize a frequency string to a value the picklist accepts.\n *\n * Never blocks. An unrecognized value defaults to \"30 Days\" (monthly) rather\n * than refusing the signup — per the same reasoning as DEFAULT_REGION,\n * getting the account and invoice created is worth more than a perfectly\n * accurate first-guess schedule, which a human corrects afterward same as the\n * route.\n */\nexport function canonicalFrequency(v: unknown): { value: string; guessed: boolean } {\n const raw = String(v ?? \"\").trim();\n const key = raw.toLowerCase();\n if (FREQUENCY_SYNONYMS[key]) return { value: FREQUENCY_SYNONYMS[key], guessed: false };\n const exact = FREQUENCIES.find((f) => f.toLowerCase() === key);\n if (exact) return { value: exact, guessed: false };\n return { value: \"30 Days\", guessed: true };\n}\n\n/**\n * ZIP to Delivery_Region__c.\n *\n * Florida follows the rule confirmed by the office on 9/1/2026 — \"Orlando and\n * west is Florida, the rest is New Miami\" — which matches how the route builder\n * already groups them: the `florida` region is Tampa Bay plus Orlando, and\n * `New Miami` is the southeast metro.\n *\n * Returns null when the answer is genuinely uncertain rather than guessing.\n */\nexport function regionForZip(zip: string, state: string): string | null {\n const zip5 = String(zip ?? \"\").trim().slice(0, 5);\n const z = Number(zip5);\n const st = String(state ?? \"\").trim().toUpperCase();\n\n // MEASURED DATA FIRST. zip-regions.ts records where the office actually files\n // accounts, which beats every rule below because those encode what a ZIP map\n // implies rather than what the routes really do. This is what makes Hoboken,\n // Manhattan and Long Island answerable at all.\n if (ZIP_REGION[zip5]) return ZIP_REGION[zip5];\n\n if (st === \"CT\") return \"Connecticut\";\n if (st === \"DC\") return \"New DC\";\n if (st === \"MD\") return \"New Maryland\";\n if (st === \"VA\") return \"New Virginia\";\n if (st === \"CA\") return \"Los Angeles\";\n if (st === \"PA\") return \"Greater Philadelphia Area\";\n\n if (st === \"FL\") {\n if (!z) return null;\n // MELBOURNE IS NOT SERVED — confirmed by the office 9/1/2026. Returning\n // null sends it down the region_unknown path, so the bot hands the address\n // to a person instead of creating an account on a route that does not run.\n // The Delivery_Region__c picklist still HAS \"Greater Melbourne FL\", which is\n // exactly why this has to be refused here: the insert would have succeeded.\n if (z >= 32901 && z <= 32999) return null;\n // Miami-Dade, Broward and Palm Beach. Everything else in the state — Tampa\n // Bay, Sarasota, Naples, Orlando, the north — is the \"Florida\" route.\n if (z >= 33000 && z <= 33499) return \"New Miami\";\n return \"Florida\";\n }\n\n if (st === \"NY\") {\n if (!z) return null;\n if (z >= 11200 && z <= 11299) return \"Brooklyn\";\n if (z >= 10300 && z <= 10399) return \"Richmond\"; // Staten Island\n if (z >= 10400 && z <= 10499) return \"Bronx\";\n if ((z >= 11100 && z <= 11199) || (z >= 11300 && z <= 11499)\n || (z >= 11600 && z <= 11699)) return \"Queens\";\n if (z >= 11000 && z <= 11099) return \"Nassau\";\n if (z >= 11500 && z <= 11599) return \"Nassau\";\n if (z >= 11900 && z <= 11999) return \"Suffolk\"; // East End\n if (z >= 10500 && z <= 10599) return \"West Chester\";\n if (z >= 10900 && z <= 10999) return \"Rockland\";\n // 11700-11899 is deliberately absent. Nassau and Suffolk interleave through\n // that band — Levittown 11756 is Nassau while its neighbours are Suffolk —\n // and a first draft of this function put Levittown on the wrong truck.\n //\n // Manhattan is absent for the same reason: Lower/Midtown/Upper do not split\n // on ZIP cleanly. Ask a person.\n return null;\n }\n\n // NEW JERSEY IS ABSENT ON PURPOSE, AND IT IS NOT AN OVERSIGHT.\n //\n // Its six regions are not geography. Checked against the org's own accounts\n // on 9/1/2026: of 270 NJ ZIPs holding four or more accounts, 103 have\n // accounts filed under MORE THAN ONE region. ZIP 07004 alone spans Essex,\n // North and West. Delivery_Region__c in New Jersey is a route assignment a\n // person makes from truck loading and history, so there is no ZIP rule to\n // write — any mapping would be a coin flip dressed up as logic.\n return null;\n}\n\n// PRICING IS THE ORG'S JOB. There was a hand-built rate table here, derived\n// from the live cart. It is gone, because the org already does this better:\n// on insert it assigns a pricebook by region and fills Price_Per_Bottle__c and\n// Price_Per_Delivery__c itself. Measured 9/1/2026 — Hudson came back 10.99/5.00\n// and Greater Philadelphia 13.99/8.00, on an account where nothing was written.\n//\n// WHAT THE ORG DOES ON ITS OWN when this file inserts an Account:\n// Create Custom Invoice for online orders → invoice header (fires on any\n// Account created with a\n// Description — our audit stamp\n// qualifies)\n// New Online Order → Opportunity, \"2 Bottles\",\n// StageName \"Delivery Due\"\n// pricebook automation → Price_Per_Bottle / _Delivery\n//\n// The one link still missing is a Recurring_Delivery_Product__c, which is what\n// produces Delivery_Line_Item__c records, which is what\n// \"Create RDP/DLI Invoice Lines\" turns into invoice lines.\n\n/**\n * Product2 ids for the 5-gallon PLASTIC bottles, by water type.\n *\n * Matched by ID, never by name. The catalogue's capitalisation is inconsistent\n * — \"Tribeca – SPRING – 5 Gallon Water Bottles\" on the 5-gallon but \"Spring\" on\n * the 3-gallon — and it uses an en dash, so string matching is a trap.\n *\n * GLASS IS ABSENT deliberately. It is a different SKU at a different price and\n * the chat tool does not capture bottle type, so a glass order must not be\n * silently set up as plastic.\n */\nconst PRODUCT_5GAL_PLASTIC: Record = {\n alkaline: \"01tPm00000CIwGLIA1\",\n spring: \"01tPm00000CIwBVIA1\",\n distilled: \"01tPm00000CJ493IAD\",\n};\n\n/**\n * Canonical spelling of the water type.\n *\n * The org's pricing flow decides the Spring/Distilled surcharge with a text\n * CONTAINS test, so \"spring\" from a chat transcript has to become \"Spring\"\n * before it is written or the customer is silently underbilled. Alkaline is the\n * default because it is what the store sells by default and what the bot quotes\n * when nobody says otherwise.\n */\nconst WATER_TYPES: Record = {\n alkaline: \"Alkaline\",\n spring: \"Spring\",\n distilled: \"Distilled\",\n};\n\nexport function canonicalWaterType(v: unknown): string {\n return WATER_TYPES[String(v ?? \"\").trim().toLowerCase()] ?? \"Alkaline\";\n}\n\n/**\n * Create the customer's standing order.\n *\n * THIS IS THE LAST LINK IN A CHAIN THE ORG OTHERWISE RUNS ITSELF. Inserting the\n * Account already fires the invoice header, the Delivery, and the pricebook.\n * What was missing is this: no Recurring Delivery Product means no Delivery\n * Line Items, which means \"Create RDP/DLI Invoice Lines\" has nothing to turn\n * into invoice lines and the customer's invoice stays empty.\n *\n * The price is READ BACK off the Account rather than calculated here. The org's\n * pricebook automation has already set Price_Per_Bottle__c by region, and it is\n * the authority — an earlier version of this file carried its own rate table\n * and the pricebook simply overwrote it.\n *\n * Best-effort: a failure here leaves the account standing and the office adds\n * the standing order by hand, which is a normal day. Losing a completed signup\n * because of it would not be.\n */\nasync function addStandingOrder(\n accountId: string,\n bottles: number,\n waterType: string | undefined,\n instanceUrl: string,\n token: string,\n): Promise {\n const productId = PRODUCT_5GAL_PLASTIC[canonicalWaterType(waterType).toLowerCase()];\n if (!productId) {\n console.log(`addStandingOrder: no product for waterType=${waterType}`);\n return null;\n }\n\n // Product_Name__c IS NOT OPTIONAL, and leaving it null is worse than it looks.\n //\n // \"Checkbox to Add RDP to Blank Delivery\" copies it into both Name and\n // Product_Name__c on the Delivery Line Item, where it is REQUIRED. An RDP\n // without it does not merely fail to bill — it makes the delivery permanently\n // unpullable, because the office's own Pull RDPs checkbox then throws\n // REQUIRED_FIELD_MISSING for that account. So we read the name off Product2\n // rather than hardcoding it (the catalogue's capitalisation and en dashes are\n // a trap), and if we cannot read it we create NO RDP at all. A missing\n // standing order is a phone call; a poisoned one breaks the office's button.\n const prod = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Product2/${productId}?fields=Name`,\n { headers: { Authorization: `Bearer ${token}` } },\n );\n const productName = prod.ok ? (await prod.json())?.Name ?? null : null;\n if (!productName) {\n console.error(\"addStandingOrder: cannot read Product2.Name — refusing to create a nameless RDP\");\n return null;\n }\n\n // Read the price the org just assigned. Not calculated, not guessed.\n const acc = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Account/${accountId}`\n + \"?fields=Price_Per_Bottle__c\",\n { headers: { Authorization: `Bearer ${token}` } },\n );\n const pricePerBottle = acc.ok ? (await acc.json())?.Price_Per_Bottle__c ?? null : null;\n if (pricePerBottle == null) {\n console.log(\"addStandingOrder: pricebook has not set Price_Per_Bottle__c yet\");\n }\n\n const res = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Recurring_Delivery_Product__c`,\n {\n method: \"POST\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n Account_Relationship__c: accountId,\n Product__c: productId,\n Product_Name__c: productName,\n Quantity__c: bottles,\n Unit_Size__c: 1,\n Product_Family__c: \"Bottled Water\",\n RDP_Is_Active__c: true,\n ...(pricePerBottle != null ? { Price_Per_Item__c: pricePerBottle } : {}),\n }),\n },\n );\n\n if (!res.ok) {\n console.error(\"addStandingOrder failed:\", res.status, (await res.text()).slice(0, 250));\n return null;\n }\n const id = (await res.json())?.id ?? null;\n console.log(`addStandingOrder OK ${id} ${bottles} x ${waterType} @ ${pricePerBottle}`);\n return id;\n}\n\nexport type NewAccount = {\n name?: string;\n phone?: string;\n email?: string;\n street?: string;\n city?: string;\n state?: string;\n zip?: string;\n bottles?: number | string;\n waterType?: string;\n frequency?: string;\n cooler?: boolean;\n /**\n * The first-order total the bot quoted, INCLUDING any promotion it applied.\n *\n * This is the number the customer agreed to, so it is the number they are\n * charged: it lands on the signup invoice as Shipping and Handling, the same\n * slot a website order's checkout payment goes into. Without it there is no\n * charge and the pay link opens a $0 invoice, so the caller should always\n * send it.\n */\n orderTotal?: number | string;\n createdVia?: string;\n};\n\nexport type CreateResult =\n // standingOrder false means the account is real and billable but the recurring\n // delivery product did not get created, so the invoice will have no lines\n // until someone adds it. Surfaced rather than swallowed.\n | {\n ok: true;\n accountId: string;\n region: string;\n name: string;\n standingOrder: boolean;\n /** First invoice's pay link. Absent if the invoice was not raised. */\n payLink?: string;\n /** True if the ZIP had no region mapping and DEFAULT_REGION (Essex) was used. */\n regionGuessed?: boolean;\n /** True if the frequency didn't match a known phrasing and defaulted to 30 Days. */\n frequencyGuessed?: boolean;\n }\n | { ok: false; reason: \"missing\"; missing: string[] }\n | { ok: false; reason: \"duplicate\"; accountId: string; name: string }\n | { ok: false; reason: \"error\"; message: string };\n\n/** Escape a value for a SOQL string literal. */\nfunction soql(v: string): string {\n return String(v).replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\");\n}\n\n/**\n * Create the account.\n *\n * Checks for an existing account on the same phone FIRST. A duplicate is the\n * likeliest failure in practice — an existing customer asks the bot to \"set up\n * service\" for a second location — and silently creating a second account\n * splits their billing and their route history.\n */\nexport async function createAccount(input: NewAccount): Promise {\n const req: Record = {\n name: String(input.name ?? \"\").trim(),\n street: String(input.street ?? \"\").trim(),\n city: String(input.city ?? \"\").trim(),\n state: String(input.state ?? \"\").trim().toUpperCase(),\n zip: String(input.zip ?? \"\").trim(),\n };\n const missing = Object.entries(req).filter(([, v]) => !v).map(([k]) => k);\n\n const bottles = Number(input.bottles);\n if (!bottles || bottles < 1) missing.push(\"bottles\");\n\n if (missing.length) return { ok: false, reason: \"missing\", missing };\n\n // NEITHER FREQUENCY NOR REGION BLOCK ANYMORE. Both are required, restricted\n // picklists in Salesforce, so an unresolved value still has to become SOME\n // valid picklist entry — it just no longer has to be the right one on the\n // first try. Getting the account created and the first invoice raised beats\n // stalling the whole signup on a route assignment or a schedule guess, and\n // both are flagged (DEFAULT_REGION, the Description stamp below) for a\n // human to correct afterward.\n const { value: frequency, guessed: frequencyGuessed } = canonicalFrequency(input.frequency);\n\n let region = regionForZip(req.zip, req.state);\n const regionGuessed = !region;\n if (regionGuessed) {\n region = DEFAULT_REGION;\n console.warn(\n `createAccount: no delivery region mapping for ${req.city}, ${req.state} ${req.zip}`\n + ` — inserting as \"${DEFAULT_REGION}\" for a team member to fix.`,\n );\n }\n\n const { access_token, instance_url } = await getAccessToken();\n\n // Duplicate check on phone, which is how this org identifies people.\n const digits = String(input.phone ?? \"\").replace(/[^0-9]/g, \"\").slice(-10);\n if (digits.length === 10) {\n const pattern = `%${digits.slice(0, 3)}%${digits.slice(3, 6)}%${digits.slice(6)}%`;\n const res = await fetch(\n `${instance_url}/services/data/${API}/query?q=`\n + encodeURIComponent(`SELECT Id, Name FROM Account WHERE Phone LIKE '${soql(pattern)}' LIMIT 1`),\n { headers: { Authorization: `Bearer ${access_token}` } },\n );\n if (res.ok) {\n const found = (await res.json())?.records?.[0];\n if (found) {\n return { ok: false, reason: \"duplicate\", accountId: found.Id, name: found.Name };\n }\n }\n }\n\n const waterType = canonicalWaterType(input.waterType);\n\n // THE QUOTED TOTAL IS ALSO THE TRIGGER, not just a number to store.\n // \"Tribeca Chat First Invoice\" keys on Chat_Order_Total__c being non-null —\n // it is the one field only this bot ever writes, which is why it is a safer\n // marker than Description (a long text area, which does not evaluate through\n // a cross-object lookup and silently matched nothing). No total means no\n // charge on the signup invoice, so it is worth saying so out loud.\n // The 2000 ceiling is a garbage filter, not a pricing rule. The largest\n // plausible first order here is a handful of glass bottles with deposits,\n // well under it; a number above that is a decimal-point slip or a model\n // inventing something, and it must not reach an invoice. The real\n // per-account check happens after insert, against the org's own prices.\n const orderTotal = Number(input.orderTotal);\n const hasTotal = Number.isFinite(orderTotal) && orderTotal > 0 && orderTotal <= 2000;\n if (!hasTotal) {\n console.warn(\n `createAccount: unusable orderTotal (${JSON.stringify(input.orderTotal)})`\n + \" — signup invoice will be $0 and no pay link is worth sending\",\n );\n }\n\n const body: Record = {\n Name: req.name,\n Phone: input.phone ?? null,\n // Shipping is what the Shipping_Address_Required validation rule checks.\n // Billing is copied from it so invoices have somewhere to go.\n ShippingStreet: req.street,\n ShippingCity: req.city,\n ShippingState: req.state,\n ShippingPostalCode: req.zip,\n BillingStreet: req.street,\n BillingCity: req.city,\n BillingState: req.state,\n BillingPostalCode: req.zip,\n Amount_of_Bottles__c: bottles,\n Frequency__c: frequency,\n Delivery_Region__c: region,\n // BOTH OF THESE ARE READ BY BILLING, not decoration.\n //\n // Email_Address__c becomes fw1__Recipient_Email__c on the recurring\n // invoice — leave it null and the customer is billed but never receives\n // the invoice, which is the worst of both outcomes. It used to live only\n // inside the Description stamp, where nothing could read it.\n //\n // Water_Cooler__c is matched against the literal string \"Cooler Needed\" by\n // \"create line items for online orders\"; that is the only thing that adds\n // the $8 cooler line. It is a TEXT field, not a picklist, so the wording\n // has to be exact. Left null when no cooler is wanted, so a customer can\n // never be charged for one they did not ask for.\n ...(input.email ? { Email_Address__c: input.email } : {}),\n ...(input.cooler ? { Water_Cooler__c: \"Cooler Needed\" } : {}),\n // WATER TYPE SETS THE PRICE, and it does so through a text blob.\n //\n // \"Update Delivery Region for Online Orders\" adds $1/bottle for Spring and\n // Distilled, and it decides by testing whether Online_Product_Variation__c\n // CONTAINS \"Spring\" or \"Distilled\". That field is the raw WooCommerce\n // variation text. This file used to leave it null, so a Spring signup was\n // priced as Alkaline — and because the recurring invoice reads\n // Price_Per_Bottle__c straight off the Account, that underbilled the\n // customer $1/bottle every cycle, not once. Measured against a real Spring\n // account in Midtown on 9/1/2026: 13.49 with the surcharge, 12.49 without.\n //\n // ONLY the water-type line is written, deliberately. The same flow reads\n // this field for frequency (\"Frequency:

Weekly

\"), glass bottles\n // (\"Amount of Glass Bottles\") and the two Florida routes (\"Miami Metro\n // Area, Dade County\"). A fuller blob would hand it decisions this file\n // already makes and could move an account onto another truck, so the\n // string stays the one token that has to be there. Format — including the\n // HTML — matches what the website writes.\n Water_Type__c: waterType,\n Online_Product_Variation__c: `Water Type:

${waterType}

`,\n // COMMISSION TRACKING NEEDS THIS, AND NOTHING ELSE SETS IT.\n //\n // The Sales Commission Visualforce page halves a rep's per-customer\n // credit for a self-service signup, keyed on Account.Online_Order__c.\n // Every account this file creates came out of a chat/SMS conversation\n // with no rep on the phone, so it is always \"Online Order\" here — never\n // conditional, because this bot has no path where a human walked the\n // customer through it.\n Online_Order__c: \"Online Order\",\n ...(hasTotal ? { Chat_Order_Total__c: orderTotal } : {}),\n ...CARD_ON_FILE,\n // WE DO NOT SET PRICING. The org assigns a pricebook on insert and fills\n // Price_Per_Bottle__c / Price_Per_Delivery__c itself, per region. Proven\n // 9/1/2026: an account created with NO price written came back with 13.99\n // and 8.00 for Greater Philadelphia, and a Hudson account we DID write\n // 11.99 to came back 10.99 — the org overwrote us. Writing a rate here is\n // redundant at best and fights the pricebook at worst.\n // Stamped so every bot-created account is findable in one query. Without\n // this there is no way to audit what the bot made, or to unpick it.\n Description: `Created by ${input.createdVia ?? \"Tribeca chat\"} on `\n + new Date().toISOString().slice(0, 10)\n + (input.email ? ` · ${input.email}` : \"\")\n + (input.waterType ? ` · ${input.waterType}` : \"\")\n + (input.cooler ? \" · cooler requested\" : \"\")\n + (regionGuessed ? ` · REGION DEFAULTED TO ${DEFAULT_REGION.toUpperCase()} — NEEDS REVIEW` : \"\")\n + (frequencyGuessed\n ? ` · frequency defaulted to 30 Days (raw: \"${input.frequency ?? \"\"}\")`\n : \"\"),\n };\n\n const res = await fetch(`${instance_url}/services/data/${API}/sobjects/Account`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n\n const out = await res.json().catch(() => null);\n if (!res.ok || !out?.id) {\n const err = Array.isArray(out) ? out[0] : null;\n console.error(\"createAccount failed:\", res.status, JSON.stringify(out)?.slice(0, 600));\n\n // SALESFORCE'S DUPLICATE RULE TALKS TO ADMINS, NOT CUSTOMERS.\n //\n // Its message is the literal \"Use one of these records?\" — a prompt meant\n // for someone looking at a list of matches. Relayed by a chat bot it is\n // nonsense, and that is exactly what happened in testing on 9/1/2026.\n //\n // Note this is NOT the same as our own phone check above. The org rule is\n // a FUZZY name-and-address match, and it is configured allowSave, i.e. a\n // warning the office may click straight past. So a hit here is not proof\n // of a duplicate — two different people in one Hoboken apartment building\n // will trip it. We still refuse rather than send the insert back with the\n // bypass header, because silently merging two customers' billing is far\n // worse than handing the signup to a person. Reported as a duplicate so\n // the bot says something true, with the matched account logged for the\n // office to judge.\n const match = err?.duplicateResult?.matchResults?.[0]?.matchRecords?.[0]?.record;\n if (err?.duplicateResult || err?.errorCode === \"DUPLICATES_DETECTED\") {\n console.warn(\n `createAccount blocked by ${err?.duplicateResult?.duplicateRule ?? \"duplicate rule\"}`\n + ` — matched ${match?.Id ?? \"(unreadable)\"} ${match?.Name ?? \"\"}`,\n );\n if (match?.Id) {\n return { ok: false, reason: \"duplicate\", accountId: match.Id, name: match.Name ?? req.name };\n }\n return {\n ok: false,\n reason: \"error\",\n message: \"This looks close to an account we already have, so a team member \"\n + \"needs to check it before setting up service.\",\n };\n }\n\n // Everything else gets a customer-safe sentence. Raw Salesforce errors name\n // fields, rules and objects, and none of that belongs in front of a\n // visitor — it is logged above, which is where the office can find it.\n return {\n ok: false,\n reason: \"error\",\n message: \"The account could not be created right now. A team member can finish setting it up.\",\n };\n }\n\n console.log(`createAccount OK ${out.id} region=${region}`);\n // No customer name in the log: Val Town's logs are not purgeable, so a name\n // written here outlives every retention rule. The id finds the account.\n\n // INVOICING IS SALESFORCE'S JOB, NOT OURS.\n //\n // Inserting the Account fires the org's own \"Create Custom Invoice for online\n // orders\" flow, and \"Create RDP/DLI Invoice Lines\" fills the lines in once a\n // Recurring Delivery Product exists. We deliberately do not write invoice\n // records from here: the integration user cannot touch fw1__Invoice__c at all\n // (FinancialForce licence, not field security — it answers \"sObject type is\n // not supported\"), and reaching around the org's automation to bill a\n // customer from an HTTP call would be the wrong place for it even if it\n // worked. An earlier version tried and is deliberately removed.\n //\n // What we DO supply is the one input the org's automation cannot invent: the\n // standing order. Awaited rather than fired and forgotten, because Val Town\n // stops the isolate when the response is sent and a floating promise would be\n // killed mid-flight — intermittently, which is the worst way for it to fail.\n const rdpId = await addStandingOrder(\n out.id, bottles, input.waterType, instance_url, access_token,\n ).catch((e) => {\n console.error(\"addStandingOrder threw:\", e);\n return null;\n });\n\n // THE PAY LINK IS SAFE HERE, AND ONLY HERE. READ THIS BEFORE COPYING IT.\n //\n // invoice.ts refuses to hand out this same URL unless the visitor is signed\n // in to WordPress, and that rule is right: there the invoice is reached by\n // LOOKING SOMEONE UP from a phone number, a phone number is not proof of\n // identity, and the page shows the invoice's line items and updates the card\n // on file. Handing it to the wrong person is a real disclosure.\n //\n // A signup is not a lookup. This account did not exist a second ago, the\n // visitor supplied every field of it in this conversation, and the invoice\n // was raised for them from those answers. There is no other customer whose\n // data could be exposed, because there is no search. Do NOT lift this into\n // any path that finds an EXISTING account — that is exactly the case\n // invoice.ts is protecting.\n //\n // The link is written to the Account by \"Tribeca Chat First Invoice\", which\n // runs during the RDP insert above; the chat cannot read fw1__Invoice__c\n // itself to learn the id. No RDP means no invoice and no link, which is why\n // this is only attempted when one was created.\n let payLink: string | undefined;\n if (rdpId) {\n try {\n const linked = await fetch(\n `${instance_url}/services/data/${API}/sobjects/Account/${out.id}`\n + \"?fields=Most_Recent_Invoice_Link__c,Price_Per_Bottle__c,Price_Per_Delivery__c\",\n { headers: { Authorization: `Bearer ${access_token}` } },\n );\n const acc2 = linked.ok ? await linked.json() : null;\n const url = acc2?.Most_Recent_Invoice_Link__c ?? null;\n if (url) payLink = String(url);\n else console.log(\"createAccount: first invoice raised no pay link\");\n\n // AUDIT THE MODEL'S ARITHMETIC AGAINST THE ORG'S OWN PRICES.\n //\n // orderTotal is the one number in this file that a language model\n // supplies, and it is the number the customer is charged. Everything\n // else here is deterministic by design. So it is checked against what\n // the org itself assigned: bottles x Price_Per_Bottle__c, plus the\n // delivery fee, plus a cooler, plus the $5-per-bottle first-order\n // deposit. A quote BELOW that is expected and fine — the 25for2025\n // promotion is a real discount. A quote ABOVE it means the model\n // invented a number, and the customer is being overcharged.\n //\n // Logged rather than corrected: the account and invoice already exist by\n // now, and quietly rewriting what a customer was told they would pay\n // would be its own kind of wrong. This is for the office to catch.\n const ppb = Number(acc2?.Price_Per_Bottle__c);\n const ppd = Number(acc2?.Price_Per_Delivery__c);\n if (hasTotal && Number.isFinite(ppb) && Number.isFinite(ppd)) {\n const ceiling = bottles * ppb + ppd + (input.cooler ? 8 : 0) + bottles * 5;\n if (orderTotal > ceiling + 0.01) {\n console.error(\n `createAccount OVERCHARGE CHECK FAILED on ${out.id}: quoted ${orderTotal.toFixed(2)}`\n + ` exceeds ${ceiling.toFixed(2)} (${bottles} x ${ppb} + ${ppd} delivery`\n + `${input.cooler ? \" + 8 cooler\" : \"\"} + ${bottles * 5} deposit). Review this invoice.`,\n );\n }\n }\n } catch (e) {\n // A missing link must never lose the signup — the account is already real.\n console.error(\"createAccount: pay link read failed:\", e);\n }\n }\n\n return {\n ok: true,\n accountId: out.id,\n region,\n name: req.name,\n standingOrder: !!rdpId,\n ...(payLink ? { payLink } : {}),\n ...(regionGuessed ? { regionGuessed: true } : {}),\n ...(frequencyGuessed ? { frequencyGuessed: true } : {}),\n };\n}\n","deleted",false,"label",[14],"0979b5fe-99f9-4673-be24-063bb9928dc3",["D",1785197056244],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Read-only Salesforce Account/Opportunity API access","imageUrl","userId","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","6093920c-8a18-11f1-a4ec-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe3-60c5-70ee-a317-3aded0417f73","tursoName","0979b5fe99f94673be24063bb9928dc3","tursoHostname","0979b5fe99f94673be24063bb9928dc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789491713377],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":-5},"org",{"_9":10,"_99":100,"_101":-5,"_55":-5,"_102":103,"_104":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",290,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Tribeca_AIrep","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":63,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":90,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]