[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_202":203,"_204":205},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",511,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","c77c5a4c-86eb-11f1-bc9c-1607ee4eb77e","name","fileType","http","content","// Outbound AI Sales Call — Val Town HTTP val\n//\n// Flow: your website's \"request a callback\" form (with consent language) POSTs\n// to /lead -> we check quiet hours + do-not-call list -> place an outbound\n// call via Twilio -> Twilio hits /voice for TwiML -> turn-based conversation\n// via /turn, using Gather(speech) + Gemini + Say (no WebSocket/ConversationRelay\n// needed — Val Town can't host inbound WebSocket connections).\n//\n// Env vars to set in Val Town (left sidebar > Environment Variables):\n// GEMINI_API_KEY - required, from aistudio.google.com/apikey\n// TWILIO_ACCOUNT_SID - required, from Twilio Console > Account\n// TWILIO_AUTH_TOKEN - required, from Twilio Console > Account\n// TWILIO_CALLER_NUMBER - required, your Twilio voice number, E.164 (e.g. +19735551234)\n// LEAD_WEBHOOK_SECRET - required, a random string only your website form knows.\n// This val is public, so without this check anyone who\n// finds the URL could trigger outbound calls to arbitrary\n// numbers. Generate any random string and put the same\n// value in your website form's submission (as a hidden\n// field or header \"X-Lead-Secret\").\n//\n// Wire your tribecabeverage.com \"request a callback\" form to POST here at /lead\n// with fields: phone (E.164), consent (\"true\"), secret (matches LEAD_WEBHOOK_SECRET).\n\nimport { GoogleGenerativeAI, SchemaType } from \"npm:@google/generative-ai\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\ntype GeminiTurn = { role: \"user\" | \"model\"; parts: { text: string }[] };\n\n// ============================================================================\n// CONFIG\n// ============================================================================\n\n// Pricing and service areas come from ONE shared module, not a copy pasted\n// here. This file's copy was the ONLY one with Orlando and Lakeland/Polk\n// County; the SMS and website bots were declining leads it was selling to.\n// Confirmed 9/1/2026 that this file was the correct one, and the shared module\n// now carries its coverage — so nothing changes for this bot.\n//\n// Do not paste a price into this file. Edit tribeca-profile.\n// The ?v= is load-bearing: Val Town caches a remote module by URL, so without\n// it this bot keeps quoting the old prices to live callers after\n// tribeca-profile changes, with nothing in any log. Bump on PROFILE_VERSION.\nimport { BUSINESS_PROFILE } from \"https://esm.town/v/Tribeca_Rep/tribeca-profile/profile.ts?v=2026-09-01e\";\n\nconst SYSTEM_PROMPT = `You are TriBeCa Beverage Company's automated phone sales assistant. You are on a live phone call with someone who requested a callback via the \"request a quote\" form on tribecabeverage.com and agreed to receive an automated/AI call.\n\n${BUSINESS_PROFILE}\n\nCall rules (read carefully — this is a real phone call, not a text):\n- Your very first turn must disclose that you are an automated/AI assistant and confirm this is still a good time to talk. Something like: \"Hey, this is TriBeCa Beverage's assistant — you'd asked about a water delivery quote online. Got a couple minutes?\" If they say no or ask for a different time, apologize, say the office will follow up another time, and end the call politely.\n- Talk like a real person on the phone, not a script. Use contractions (I'm, that's, we'll, you're), casual affirmations (yeah, sure, got it, sounds good, awesome), and keep sentences short and warm — the way a friendly local rep actually talks, not a corporate recording.\n- Speak in short, natural, spoken sentences — no markdown, no bullet lists, no URLs, nothing that only makes sense written down. This will be read aloud by text-to-speech.\n- Goal: find out what they want (water type, bottle count, delivery frequency, cooler rental or not) and their delivery address, confirm they're in the service area, then tell them the office will follow up to finalize setup and first delivery.\n- Only quote the prices listed in the profile above. For anything without a listed price, say the office will confirm pricing — never invent a number.\n- Never promise a specific delivery date or discount. The office confirms scheduling.\n- If they ask for a human, or are upset, or ask something outside your scope: say you'll connect them to the office now. (The system will transfer the call — just say it plainly, e.g. \"Sure, let me connect you to our office now.\")\n- If they ask to stop being called, or are not interested: apologize once, confirm you will remove them from the calling list, and end the call. Do not push back or try to re-sell.\n- Keep the whole call efficient — aim to wrap up within a few exchanges once you have what you need.`;\n\nexport const MODEL = \"gemini-2.5-flash\";\nconst MAX_HISTORY_MESSAGES = 20;\nconst FALLBACK_REPLY = \"Sorry, I'm having a technical issue. Let me connect you to our office.\";\nconst OFFICE_NUMBER = \"+19739134568\";\n\n// Rough US area-code -> timezone map covering TriBeCa's service areas.\n// Everything not listed defaults to Eastern (covers NY/NJ/CT/DC/FL areas).\nconst PACIFIC_AREA_CODES = new Set([\n \"213\", \"310\", \"323\", \"424\", \"562\", \"626\", \"657\", \"714\", \"747\", \"818\", \"949\",\n]);\n\nfunction localHourFor(phoneE164: string): number {\n const digits = phoneE164.replace(/\\D/g, \"\");\n const areaCode = digits.length === 11 ? digits.slice(1, 4) : digits.slice(0, 3);\n const timeZone = PACIFIC_AREA_CODES.has(areaCode) ? \"America/Los_Angeles\" : \"America/New_York\";\n const hourStr = new Intl.DateTimeFormat(\"en-US\", { timeZone, hour: \"numeric\", hour12: false }).format(new Date());\n return parseInt(hourStr, 10) % 24;\n}\n\nfunction isQuietHours(phoneE164: string): boolean {\n const hour = localHourFor(phoneE164);\n return hour < 8 || hour >= 21; // outside 8am-9pm recipient local time\n}\n\n// California requires all-party consent to record calls (CIPA) — our recording\n// disclosure in the greeting is a reasonable-effort notice, but not a substitute\n// for actual consent, so outbound calls to California numbers/zip codes are\n// excluded entirely rather than relying on that.\nfunction isCaliforniaPhone(phoneE164: string): boolean {\n const digits = phoneE164.replace(/\\D/g, \"\");\n const areaCode = digits.length === 11 ? digits.slice(1, 4) : digits.slice(0, 3);\n return PACIFIC_AREA_CODES.has(areaCode);\n}\n\nfunction isCaliforniaZip(zip: string): boolean {\n const n = parseInt(zip.trim().slice(0, 5), 10);\n return !isNaN(n) && n >= 90000 && n <= 96199;\n}\n\nconst DNC_KEY = \"voice-do-not-call-list\";\n\n\n// Best-effort write-back to a Salesforce Lead via the tribeca-salesforce-agent\n// val. Never throws — a failed Salesforce update should never break call\n// handling, so callers just fire-and-forget this (with a .catch(console.error)).\nasync function updateSalesforceLead(leadId: string, fields: Record): Promise {\n const url = Deno.env.get(\"SALESFORCE_AGENT_URL\");\n const key = Deno.env.get(\"SALESFORCE_AGENT_KEY\");\n if (!url || !key) {\n console.error(\"updateSalesforceLead: missing SALESFORCE_AGENT_URL/SALESFORCE_AGENT_KEY env vars\");\n return;\n }\n const res = await fetch(`${url}?key=${encodeURIComponent(key)}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ sobject: \"Lead\", id: leadId, fields }),\n });\n const body = await res.json().catch(() => ({}));\n if (!res.ok || body?.error) {\n throw new Error(`Salesforce Lead update failed: ${res.status} ${JSON.stringify(body)}`);\n }\n}\n\n// Single reliable source of truth for the \"pause all outbound calling\" kill\n// switch. Deliberately blob-backed (not an env var): env vars have no\n// update-in-place tool (only add, which fails on an existing key), while\n// blob.setJSON can be flipped true/false every time from control.ts's\n// pause/resume buttons with zero hidden state. This replaces the old\n// OUTBOUND_CALLS_PAUSED env var check.\nconst OUTBOUND_PAUSED_KEY = \"outbound_calls_paused\";\n\nexport async function isOutboundPaused(): Promise {\n return (await blob.getJSON(OUTBOUND_PAUSED_KEY).catch(() => null)) === true;\n}\n\n// Val Town blob storage is scoped per independently-deployed file, NOT per\n// val despite std/blob's docs implying the latter — confirmed 2026-08-06:\n// control.ts calling blob.setJSON(OUTBOUND_PAUSED_KEY, ...) directly wrote\n// to control.ts's own isolated scope, invisible to this file's reads. A\n// function DEFINED here and merely CALLED from another file (via import)\n// still executes in this file's own scope, so control.ts must go through\n// this setter rather than touching blob itself.\nexport async function setOutboundPaused(v: boolean): Promise {\n await blob.setJSON(OUTBOUND_PAUSED_KEY, v);\n}\n\nasync function isDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n return list.includes(phoneE164);\n}\n\n// Returns true if the number was newly added (wasn't already on the list).\nasync function addDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n if (!list.includes(phoneE164)) {\n list.push(phoneE164);\n await blob.setJSON(DNC_KEY, list);\n return true;\n }\n return false;\n}\n\n// Returns true if the number was found and removed.\nasync function removeDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n const idx = list.indexOf(phoneE164);\n if (idx === -1) return false;\n list.splice(idx, 1);\n await blob.setJSON(DNC_KEY, list);\n return true;\n}\n\nasync function notifyDoNotCallAdded(phoneE164: string): Promise {\n try {\n await email({\n subject: `Do-not-call request — ${phoneE164}`,\n text: `${phoneE164} asked to stop being called during an automated call and has been added to the do-not-call list. They will not be called again by the automated system.`,\n });\n } catch (err) {\n console.error(\"Failed to send do-not-call notification email:\", err);\n }\n}\n\n// ============================================================================\n// Router\n// ============================================================================\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // Facebook hits this with GET (webhook verification handshake) and POST\n // (actual lead events) — handle both before the generic POST-only gate below.\n if (url.pathname === \"/fb-lead-webhook\") return handleFbLeadWebhook(req);\n if (url.pathname === \"/dashboard\") return handleDashboard(req);\n\n if (req.method !== \"POST\") {\n return new Response(\"Outbound sales call service is running.\", { status: 200 });\n }\n\n if (url.pathname === \"/lead\") return handleLead(req);\n if (url.pathname === \"/voice\") return handleVoice(req);\n if (url.pathname === \"/voice-inbound\") return handleVoiceInbound(req);\n if (url.pathname === \"/turn\") return handleTurn(req);\n if (url.pathname === \"/handoff\") return handleHandoff(req);\n if (url.pathname === \"/call-status\") return handleCallStatus(req);\n if (url.pathname === \"/dnc\") return handleDnc(req);\n if (url.pathname === \"/call-summary\") return handleCallSummary(req);\n if (url.pathname === \"/sms-inbound\") return handleSmsInbound(req);\n\n return new Response(\"Not found\", { status: 404 });\n}\n\n// ============================================================================\n// /lead — website form submits a callback request here\n// ============================================================================\n\nasync function handleLead(req: Request): Promise {\n const contentType = req.headers.get(\"content-type\") ?? \"\";\n let phone: string | null = null;\n let consent: string | null = null;\n let zip: string | null = null;\n let source: string | null = null;\n let name: string | null = null;\n let secret: string | null = req.headers.get(\"X-Lead-Secret\");\n\n if (contentType.includes(\"application/json\")) {\n const body = await req.json().catch(() => ({}));\n phone = body.phone ?? null;\n consent = body.consent ?? null;\n zip = body.zip ?? null;\n source = body.source ?? null;\n name = body.name ?? null;\n secret = secret ?? body.secret ?? null;\n } else {\n const form = await req.formData();\n phone = (form.get(\"phone\") as string) ?? null;\n consent = (form.get(\"consent\") as string) ?? null;\n zip = (form.get(\"zip\") as string) ?? null;\n source = (form.get(\"source\") as string) ?? null;\n name = (form.get(\"name\") as string) ?? null;\n secret = secret ?? (form.get(\"secret\") as string) ?? null;\n }\n\n const leadSecret = Deno.env.get(\"LEAD_WEBHOOK_SECRET\");\n const websiteSecret = Deno.env.get(\"WEBSITE_LEAD_SECRET\");\n if (!secret || (secret !== leadSecret && secret !== websiteSecret)) {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return Response.json({ error: \"phone must be E.164, e.g. +19735551234\" }, { status: 400 });\n }\n\n if (consent !== \"true\") {\n return Response.json({ error: \"consent must be 'true' — do not call without recorded consent\" }, { status: 400 });\n }\n\n // No longer calls placeOutboundCall directly: salesforce-lead-caller.ts's\n // polling loop is now the only place that places outbound calls, so every\n // lead gets the same Lead-id write-back, attempt cadence, and DNC sync\n // regardless of where it came from. This endpoint still validates and logs\n // the submission (so the website form and any other future integration\n // don't just get a broken response) but no longer auto-dials.\n console.log(`/lead: received submission for ${phone} (source=${source ?? \"unknown\"}, logged only, not auto-called)`);\n return Response.json({ status: \"logged\" });\n}\n\n// Shared by /lead and the SMS owner-agent's place_call tool. Applies the same\n// do-not-call / California-exclusion / quiet-hours safety checks regardless\n// of who's requesting the call.\ntype PlaceCallResult =\n | { ok: true; callSid: string }\n | { ok: false; status: \"skipped\" | \"deferred\" | \"error\"; reason: string };\n\nexport async function placeOutboundCall(\n phone: string,\n opts: { zip?: string; source?: string; company?: string; callerName?: string; attempt?: number; leadId?: string } = {},\n): Promise {\n if ((await isOutboundPaused()) && opts.source !== \"facebook\") {\n return {\n ok: false,\n status: \"skipped\",\n reason: \"Outbound calling is temporarily paused for non-Facebook leads\",\n };\n }\n\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return { ok: false, status: \"error\", reason: \"phone must be E.164, e.g. +19735551234\" };\n }\n\n if (await isDoNotCall(phone)) {\n return { ok: false, status: \"skipped\", reason: \"number is on the do-not-call list\" };\n }\n\n if (isCaliforniaPhone(phone) || (opts.zip && isCaliforniaZip(opts.zip))) {\n return {\n ok: false,\n status: \"skipped\",\n reason: \"California numbers/zip codes are excluded from outbound AI calls (all-party consent to record) — have the office follow up manually\",\n };\n }\n\n if (isQuietHours(phone)) {\n return {\n ok: false,\n status: \"deferred\",\n reason: \"outside 8am-9pm recipient local time — call not placed; have the office follow up during allowed hours\",\n };\n }\n\n const accountSid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const callerNumber = Deno.env.get(\"TWILIO_CALLER_NUMBER\");\n if (!accountSid || !authToken || !callerNumber) {\n return { ok: false, status: \"error\", reason: \"Server misconfigured: missing Twilio env vars\" };\n }\n\n const voiceUrl = new URL(\"https://tribeca-outbound-sales-call.val.run/voice\");\n if (opts.source) voiceUrl.searchParams.set(\"source\", opts.source);\n if (opts.company) voiceUrl.searchParams.set(\"company\", opts.company);\n if (opts.callerName) voiceUrl.searchParams.set(\"callerName\", opts.callerName);\n if (opts.attempt) voiceUrl.searchParams.set(\"attempt\", String(opts.attempt));\n if (opts.leadId) voiceUrl.searchParams.set(\"leadId\", opts.leadId);\n\n const statusCallbackUrl = new URL(\"https://tribeca-outbound-sales-call.val.run/call-status\");\n if (opts.source) statusCallbackUrl.searchParams.set(\"source\", opts.source);\n if (opts.company) statusCallbackUrl.searchParams.set(\"company\", opts.company);\n if (opts.callerName) statusCallbackUrl.searchParams.set(\"callerName\", opts.callerName);\n if (opts.attempt) statusCallbackUrl.searchParams.set(\"attempt\", String(opts.attempt));\n if (opts.leadId) statusCallbackUrl.searchParams.set(\"leadId\", opts.leadId);\n\n const twilioResp = await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${accountSid}/Calls.json`,\n {\n method: \"POST\",\n headers: {\n Authorization: \"Basic \" + btoa(`${accountSid}:${authToken}`),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n To: phone,\n From: callerNumber,\n Url: voiceUrl.toString(),\n // Detect voicemail before connecting so /voice can leave exactly one\n // short message and hang up instead of running the full AI\n // conversation into an answering machine. DetectMessageEnd waits for\n // the machine's greeting to finish (so our message starts right\n // after the beep) at the cost of a few extra seconds of latency\n // before /voice fires.\n MachineDetection: \"DetectMessageEnd\",\n // Fires once, at the call's final status (completed/no-answer/busy/\n // failed/canceled) â€” lets us log calls that never connected at all,\n // which otherwise never reach any of our other logging paths.\n StatusCallback: statusCallbackUrl.toString(),\n StatusCallbackMethod: \"POST\",\n }),\n },\n );\n\n const result = await twilioResp.json().catch(() => ({}));\n if (!twilioResp.ok) {\n console.error(\"Twilio call creation failed:\", result);\n return { ok: false, status: \"error\", reason: result?.message ?? \"Failed to place call\" };\n }\n\n return { ok: true, callSid: result.sid };\n}\n\n// ============================================================================\n// /voice — TwiML entry point when the call connects\n// ============================================================================\n\n// Left once and only once when Twilio's Answering Machine Detection says a\n// machine picked up — never connects to the AI conversation, so there's no\n// chance of a retry loop or multiple messages.\nconst VOICEMAIL_MESSAGE =\n \"Hey, this is Jack calling from TriBeCa Beverage Company about the water delivery quote you requested online. Sorry we missed you — give us a call back at 973-913-4568 and we'll get you set up. Thanks so much, have a great day!\";\n\nasync function handleVoice(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.clone().formData().catch(() => null);\n const answeredBy = (form?.get(\"AnsweredBy\") as string | null) ?? null;\n if (answeredBy && answeredBy.startsWith(\"machine\")) {\n const callSid = (form?.get(\"CallSid\") as string | null) ?? \"unknown\";\n const customerNumber = (form?.get(\"To\") as string | null) ?? \"unknown\";\n const voicemailUrl = new URL(req.url);\n const voicemailSource = voicemailUrl.searchParams.get(\"source\");\n const voicemailCallerName = voicemailUrl.searchParams.get(\"callerName\");\n const voicemailAttempt = Number(voicemailUrl.searchParams.get(\"attempt\")) || 1;\n const voicemailLeadId = voicemailUrl.searchParams.get(\"leadId\");\n const voicemailCompany = voicemailUrl.searchParams.get(\"company\");\n // Only leave the spoken voicemail message on the first attempt — repeat\n // attempts hang up silently so the lead doesn't get the same message twice.\n const isRepeatAttempt = voicemailAttempt > 1;\n const voicemailSummary = isRepeatAttempt\n ? \"Reached voicemail again on a repeat attempt — no message left, call ended silently.\"\n : \"Reached voicemail — left a callback message. No live conversation took place.\";\n recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: voicemailSummary,\n transcript: isRepeatAttempt\n ? \"(no conversation — voicemail reached on a repeat attempt, no message left)\"\n : `Jack (voicemail message): ${VOICEMAIL_MESSAGE}`,\n source: voicemailSource || undefined,\n company: voicemailCompany || undefined,\n callerName: voicemailCallerName || undefined,\n attempt: voicemailAttempt,\n }).catch((err) => console.error(\"Failed to record voicemail call summary:\", err));\n if (voicemailLeadId) {\n updateSalesforceLead(voicemailLeadId, {\n AI_Call_Status__c: \"Voicemail\",\n AI_Call_Summary__c: voicemailSummary,\n }).catch((err) => console.error(\"Failed to write voicemail status back to Salesforce Lead:\", err));\n }\n if (isRepeatAttempt) {\n return twiml(``);\n }\n return twiml(`${escapeXml(VOICEMAIL_MESSAGE)}`);\n }\n\n const relayUrl = Deno.env.get(\"CONVERSATION_RELAY_WS_URL\");\n if (!relayUrl) {\n // Fallback to the turn-based flow if the WebSocket server isn't configured yet.\n const turnUrl = new URL(req.url);\n turnUrl.pathname = \"/turn\";\n return twiml(`\n \n Hey, this is TriBeCa Beverage's assistant — quick heads up, this call may be recorded. You'd asked about a water delivery quote online. Got a couple minutes?\n \n Sorry, I didn't catch a response. Our office will follow up another time. Goodbye.\n `);\n }\n\n const handoffUrl = new URL(req.url);\n handoffUrl.pathname = \"/handoff\";\n\n const voiceReqUrl = new URL(req.url);\n const source = voiceReqUrl.searchParams.get(\"source\");\n const relayLeadId = voiceReqUrl.searchParams.get(\"leadId\");\n const relayCompany = voiceReqUrl.searchParams.get(\"company\");\n const outboundRelayUrl = new URL(relayUrl);\n if (source) outboundRelayUrl.searchParams.set(\"source\", source);\n // Best-effort: forwarded to the external ConversationRelay WS server in case\n // it echoes unknown query params back in its /call-summary POST body. Not\n // guaranteed — that server's code isn't controlled by this val.\n if (relayLeadId) outboundRelayUrl.searchParams.set(\"leadId\", relayLeadId);\n if (relayCompany) outboundRelayUrl.searchParams.set(\"company\", relayCompany);\n\n return twiml(`\n \n \n \n `);\n}\n\n// ============================================================================\n// /voice-inbound — TwiML entry point for calls INTO your business number\n// Point your Twilio number's \"A call comes in\" webhook at this URL.\n// ============================================================================\n\nasync function handleVoiceInbound(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const relayUrl = Deno.env.get(\"CONVERSATION_RELAY_WS_URL\");\n if (!relayUrl) {\n return twiml(`Sorry, our automated assistant isn't available right now. Please hold for the next available option, or call back later.`);\n }\n\n const handoffUrl = new URL(req.url);\n handoffUrl.pathname = \"/handoff\";\n\n const inboundRelayUrl = new URL(relayUrl);\n inboundRelayUrl.searchParams.set(\"mode\", \"inbound\");\n\n return twiml(`\n \n \n \n `);\n}\n\n// Called by Twilio once a call reaches a final status. Statuses meaning the\n// call never connected at all (no-answer/busy/failed/canceled) are logged\n// directly here. A \"completed\" status is usually already logged by the\n// voicemail branch in /voice or by the AI conversation's own summary at\n// hangup — but as a fallback, if neither of those wrote an entry (e.g. an\n// ambiguous AnsweredBy with too brief a pickup to produce a transcript),\n// this logs a generic placeholder so the call isn't silently missing.\nconst CALL_NEVER_CONNECTED_STATUSES: Record = {\n \"no-answer\": \"No answer — call was not picked up.\",\n busy: \"Line was busy.\",\n failed: \"Call failed to connect.\",\n canceled: \"Call was canceled before connecting.\",\n};\n\nasync function handleCallStatus(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n const form = await req.formData().catch(() => null);\n const callStatus = (form?.get(\"CallStatus\") as string | null) ?? \"\";\n const callSid = (form?.get(\"CallSid\") as string | null) ?? \"unknown\";\n const customerNumber = (form?.get(\"To\") as string | null) ?? \"unknown\";\n const callStatusUrl = new URL(req.url);\n const source = callStatusUrl.searchParams.get(\"source\");\n const callerName = callStatusUrl.searchParams.get(\"callerName\");\n const attempt = Number(callStatusUrl.searchParams.get(\"attempt\")) || 1;\n const leadId = callStatusUrl.searchParams.get(\"leadId\");\n const company = callStatusUrl.searchParams.get(\"company\");\n\n // Deterministic DNC sync — catches every detection path (regex, external\n // ConversationRelay /dnc call, or Gemini's add_do_not_call tool-call),\n // regardless of how the number ended up on the internal blob list.\n if (leadId && (await isDoNotCall(customerNumber))) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to sync DNC status back to Salesforce Lead:\", err));\n }\n\n const label = CALL_NEVER_CONNECTED_STATUSES[callStatus];\n if (label) {\n recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: label,\n transcript: \"(no conversation — call never connected)\",\n source: source || undefined,\n company: company || undefined,\n callerName: callerName || undefined,\n durationSeconds: 0,\n attempt,\n }).catch((err) => console.error(\"Failed to record call-status summary:\", err));\n if (leadId) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"No Answer\",\n AI_Call_Summary__c: label,\n }).catch((err) => console.error(\"Failed to write call-status outcome back to Salesforce Lead:\", err));\n }\n // 204 responses must have a null body, not an empty string — passing \"\"\n // throws \"Response with null body status cannot have body\" in Deno.\n return new Response(null, { status: 204 });\n }\n\n // Catch-all for calls that connected (status \"completed\") but slipped past\n // both the voicemail branch and the live conversation's own summary logging\n // — e.g. an ambiguous AnsweredBy (\"unknown\") with a pickup too brief to\n // produce a transcript. Wait for the live-conversation path to finish\n // writing its own entry (it calls out to an LLM, so it isn't instant)\n // before assuming nothing was logged, to avoid a duplicate.\n if (callStatus === \"completed\" && callSid !== \"unknown\") {\n await new Promise((r) => setTimeout(r, 8000));\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n const alreadyLogged = index.some((r) => r.callSid === callSid);\n if (!alreadyLogged) {\n const durationSeconds = Number(form?.get(\"CallDuration\") ?? \"0\") || 0;\n const fallbackSummary =\n \"Call connected but ended without a captured conversation (e.g. a brief pickup-and-hangup, or an ambiguous answering-machine detection result).\";\n await recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: fallbackSummary,\n transcript: \"(no conversation captured)\",\n source: source || undefined,\n company: company || undefined,\n callerName: callerName || undefined,\n durationSeconds,\n attempt,\n }).catch((err) => console.error(\"Failed to record fallback call-status summary:\", err));\n if (leadId) {\n // The call did connect (status \"completed\"), even though no rich\n // transcript was captured, so this is our best-effort \"Connected\".\n // If a real conversation summary arrives later via /call-summary,\n // that write will simply overwrite this one. Status also moves to\n // \"Robocalled\" here to mark that this Lead has genuinely been\n // reached — the calling queue's SOQL treats 'New' and 'Robocalled'\n // as equally eligible, so this doesn't stop further cadence\n // attempts; it's just a visible marker of \"this one actually got\n // reached at least once.\"\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"Connected\",\n AI_Call_Summary__c: fallbackSummary,\n Status: \"Robocalled\",\n }).catch((err) => console.error(\"Failed to write fallback call-status outcome back to Salesforce Lead:\", err));\n }\n }\n }\n\n return new Response(null, { status: 204 });\n}\n\n// Called by Twilio when the ConversationRelay session ends (app sent \"end\", or\n// the WebSocket dropped) — hands off to a live human at the office.\nasync function handleHandoff(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.formData().catch(() => null);\n const handoffDataRaw = (form?.get(\"HandoffData\") as string | null) ?? null;\n let reason = \"human_handoff\";\n try {\n if (handoffDataRaw) reason = JSON.parse(handoffDataRaw).reason ?? reason;\n } catch {\n // malformed handoff data — fall back to transferring to the office\n }\n console.log(`/handoff: raw HandoffData=${JSON.stringify(handoffDataRaw)} resolved reason=${reason}`);\n\n if (reason === \"call_complete\" || reason === \"do_not_call\") {\n console.log(\"/handoff: returning \");\n return twiml(``);\n }\n console.log(`/handoff: returning to office (reason was \"${reason}\", not call_complete/do_not_call)`);\n return twiml(`${OFFICE_NUMBER}`);\n}\n\n// Called by the ConversationRelay WebSocket server to record a do-not-call request.\nasync function handleDnc(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const phone = body.phone as string | undefined;\n // Only present if the external ConversationRelay WS server passes it through\n // — best-effort, not guaranteed.\n const leadId = body.leadId as string | undefined;\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return Response.json({ error: \"phone must be E.164\" }, { status: 400 });\n }\n const isNew = await addDoNotCall(phone);\n if (isNew) await notifyDoNotCallAdded(phone);\n if (leadId) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to write DNC request back to Salesforce Lead:\", err));\n }\n return Response.json({ status: \"ok\", added: isNew });\n}\n\n// Cheap keyword heuristic on the call summary text — flags the email subject\n// so the office can triage without opening every call. Order matters: DNC\n// runs first (legal/compliance), then any concrete order detail wins as a\n// Hot Lead before the no-contact/not-interested checks even run — otherwise\n// a structured field like \"Water type: not covered\" (Tribeca just doesn't\n// carry that type) or \"Cooler Rental: Not interested\" can outweigh a real,\n// fully-captured order elsewhere in the same summary.\nfunction classifyProspect(summary: string | undefined): string | null {\n if (!summary) return null;\n // Reuses the same prefix list the retry scheduler used to decide whether a\n // call produced a real conversation, so the two stay consistent.\n if (isNoConversationSummary(summary)) return \"📵 No Contact\";\n const s = summary.toLowerCase();\n if (/do not call|dnc requested|removed .*calling list|remove me/.test(s)) {\n return \"🚫 DNC\";\n }\n // Any concrete order detail — a delivery address, or a scheduled/confirmed\n // delivery — means real business happened on this call. That outweighs any\n // incidental \"not covered/discussed/interested\" phrasing elsewhere in the\n // summary, so this check runs before the no-contact and not-interested\n // checks below.\n if (/delivery address|schedule.*(first )?delivery|confirm.*(delivery|order)/.test(s)) {\n return \"🔥 Hot Lead\";\n }\n // Negative lookbehind excludes a structured field value like \"Cooler\n // Rental: Not interested\" (a single declined add-on inside an otherwise\n // successful order) while still catching \"Caller declined service\" or\n // \"not interested\" as an overall verdict on the whole call.\n if (/(? {\n const body = await req.json().catch(() => ({}));\n const {\n callSid,\n from,\n summary,\n transcript,\n direction,\n source,\n callerName,\n durationSeconds,\n inputTokens,\n outputTokens,\n anthropicCostUsd,\n leadId,\n company,\n } = body as {\n callSid?: string;\n from?: string;\n summary?: string;\n transcript?: string;\n direction?: string;\n source?: string;\n callerName?: string;\n durationSeconds?: number;\n inputTokens?: number;\n outputTokens?: number;\n anthropicCostUsd?: number;\n // Only present if the external ConversationRelay WS server echoes back the\n // \"leadId\" query param it was connected with — best-effort, not guaranteed.\n leadId?: string;\n // Only present if the external ConversationRelay WS server echoes back the\n // \"company\" query param it was connected with — best-effort, not guaranteed.\n company?: string;\n };\n\n const label = direction === \"inbound\" ? \"Inbound call\" : \"Outbound call lead\";\n const prospectTag = classifyProspect(summary);\n try {\n await email({\n subject: `${prospectTag ? `${prospectTag} — ` : \"\"}${label} — ${callerName ? `${callerName} (${from ?? \"unknown number\"})` : from ?? \"unknown number\"}`,\n text: `Direction: ${direction ?? \"unknown\"}\\nName: ${callerName || \"not provided\"}\\nCall from: ${from ?? \"unknown\"}\\nSource: ${source ?? \"unknown\"}\\nCall ID: ${callSid ?? \"unknown\"}\\n\\nSummary:\\n${summary ?? \"(none)\"}\\n\\n---\\nFull transcript:\\n${transcript ?? \"(none)\"}`,\n });\n } catch (err) {\n console.error(\"Failed to send call summary email:\", err);\n return Response.json({ error: \"Failed to send email\" }, { status: 500 });\n }\n\n try {\n await recordCallSummary({\n callSid: callSid ?? \"unknown\",\n from: from ?? \"unknown\",\n direction: direction === \"inbound\" ? \"inbound\" : \"outbound\",\n timestamp: new Date().toISOString(),\n summary: summary ?? \"(none)\",\n transcript: transcript ?? \"(none)\",\n callerName: callerName || undefined,\n source: source || undefined,\n company: company || undefined,\n durationSeconds,\n inputTokens,\n outputTokens,\n anthropicCostUsd,\n });\n } catch (err) {\n // Dashboard persistence is best-effort — the email above is the source of truth.\n console.error(\"Failed to persist call summary for dashboard:\", err);\n }\n\n if (leadId && direction !== \"inbound\") {\n // Status moves to \"Robocalled\" here too, for the same reason as the\n // handleCallStatus fallback branch above — see that comment.\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"Connected\",\n AI_Call_Summary__c: summary ?? \"(none)\",\n Status: \"Robocalled\",\n }).catch((err) => console.error(\"Failed to write call-summary outcome back to Salesforce Lead:\", err));\n }\n\n return Response.json({ status: \"sent\" });\n}\n\n// ============================================================================\n// Call activity dashboard — /dashboard?key=DASHBOARD_SECRET\n// ============================================================================\n\nconst CALL_INDEX_KEY = \"call-summary-index\";\nconst MAX_DASHBOARD_ENTRIES = 300;\n\ntype CallRecord = {\n callSid: string;\n from: string;\n direction: \"inbound\" | \"outbound\";\n timestamp: string;\n summary: string;\n transcript: string;\n callerName?: string;\n source?: string;\n // Salesforce Lead's Company field value (e.g. \"fb\", \"ig\", or a website\n // URL string) — shown in the dashboard's Source column in preference to\n // `source`, since it's more specific about where the lead actually came\n // from. Only populated for Salesforce-driven calls.\n company?: string;\n durationSeconds?: number;\n inputTokens?: number;\n outputTokens?: number;\n anthropicCostUsd?: number;\n attempt?: number;\n};\n\n// Prefix-matched against CallRecord.summary to identify outbound calls that\n// never produced a real conversation, so they're eligible for another attempt.\nconst NO_CONVERSATION_SUMMARY_PREFIXES = [\n \"No answer\",\n \"Line was busy.\",\n \"Call failed to connect.\",\n \"Call was canceled before connecting.\",\n \"Reached voicemail\",\n \"Call connected but ended without a captured conversation\",\n];\n\nfunction isNoConversationSummary(summary: string): boolean {\n return NO_CONVERSATION_SUMMARY_PREFIXES.some((p) => summary.startsWith(p));\n}\n\nasync function recordCallSummary(record: CallRecord): Promise {\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n index.unshift(record);\n if (index.length > MAX_DASHBOARD_ENTRIES) index.length = MAX_DASHBOARD_ENTRIES;\n await blob.setJSON(CALL_INDEX_KEY, index);\n}\n\nasync function fetchTwilioCallPrice(\n callSid: string,\n accountSid: string,\n authToken: string,\n): Promise {\n if (!callSid || callSid === \"unknown\") return null;\n try {\n const resp = await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${accountSid}/Calls/${callSid}.json`,\n { headers: { Authorization: \"Basic \" + btoa(`${accountSid}:${authToken}`) } },\n );\n if (!resp.ok) return null;\n const data = await resp.json();\n const price = data.price != null ? parseFloat(data.price) : null;\n return price != null && !isNaN(price) ? Math.abs(price) : null;\n } catch {\n return null;\n }\n}\n\nfunction formatDuration(seconds?: number): string {\n if (seconds == null || isNaN(seconds)) return \"—\";\n const m = Math.floor(seconds / 60);\n const s = Math.floor(seconds % 60);\n return `${m}:${s.toString().padStart(2, \"0\")}`;\n}\n\nfunction formatUsd(n: number | null | undefined): string {\n if (n == null || isNaN(n)) return \"—\";\n return \"$\" + n.toFixed(4);\n}\n\n// Groups the raw company/source values (which include ad-hoc strings like\n// \"fb\" vs \"facebook\", and a different website URL per UTM-tagged link) into\n// a small set of stable buckets for the dashboard's summary stats — the\n// per-row Source column still shows the raw value untouched.\n// A \"hot\" lead is one where the AI actually captured a real delivery\n// address during the call — the strongest available signal of a viable\n// order, since it means we have enough information to actually deliver\n// water to this person. Stronger than duration or connect status alone:\n// one real 50-bottle order was captured in a 6-second call, while many\n// much longer \"connected\" calls never got past small talk.\nfunction extractCapturedAddress(summary: string): string | null {\n const match = summary.match(/(?:Delivery [Aa]ddress|DELIVERY ADDRESS)\\s*:\\s*(.+)/);\n if (!match) return null;\n const value = match[1].trim();\n if (!value || value === \"—\" || /^(not |n\\/a)/i.test(value)) return null;\n return value;\n}\n\nfunction canonicalSource(r: CallRecord): string {\n const raw = (r.company || r.source || \"\").toLowerCase();\n if (!raw) return \"Other\";\n if (raw === \"fb\" || raw.includes(\"facebook\")) return \"Facebook\";\n if (raw === \"ig\" || raw.includes(\"instagram\")) return \"Instagram\";\n if (raw === \"salesforce\") return \"Salesforce\";\n if (raw === \"website\" || raw.includes(\"http\") || raw.includes(\"online\")) return \"Website\";\n return \"Other\";\n}\n\nasync function handleDashboard(req: Request): Promise {\n const url = new URL(req.url);\n const expectedKey = Deno.env.get(\"DASHBOARD_SECRET\");\n const providedKey = url.searchParams.get(\"key\");\n\n if (!expectedKey || providedKey !== expectedKey) {\n return new Response(\"Unauthorized — append ?key=... with the dashboard access key to this URL.\", {\n status: 401,\n headers: { \"Content-Type\": \"text/plain\" },\n });\n }\n\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n\n const accountSid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const twilioCosts = accountSid && authToken\n ? await Promise.all(index.map((r) => fetchTwilioCallPrice(r.callSid, accountSid, authToken)))\n : index.map(() => null);\n\n const totalCalls = index.length;\n const connectedCount = index.filter((r) => !isNoConversationSummary(r.summary)).length;\n const voicemailCount = index.filter((r) => r.summary.startsWith(\"Reached voicemail\")).length;\n const totalSpend = index.reduce((sum, r, i) => sum + (twilioCosts[i] ?? 0) + (r.anthropicCostUsd ?? 0), 0);\n const pct = (n: number) => totalCalls === 0 ? \"—\" : `${Math.round((n / totalCalls) * 100)}%`;\n\n const sourceCounts: Record = {};\n for (const r of index) {\n const key = canonicalSource(r);\n sourceCounts[key] = (sourceCounts[key] ?? 0) + 1;\n }\n const sourceBreakdown = Object.entries(sourceCounts)\n .sort((a, b) => b[1] - a[1])\n .map(([k, v]) => `${escapeHtml(k)}: ${v}`)\n .join(\"
\");\n\n const statTile = (label: string, value: string, sub: string) => `\n

${escapeHtml(label)}

${value}

${sub}

`;\n\n const statsBar = `\n

\n ${statTile(\"Connect rate\", pct(connectedCount), `${connectedCount}/${totalCalls} reached a conversation`)}\n ${statTile(\"Voicemail rate\", pct(voicemailCount), `${voicemailCount}/${totalCalls} hit voicemail`)}\n ${statTile(\"Total spend\", \"$\" + totalSpend.toFixed(2), \"Twilio + Claude, this page\")}\n

Calls by source

${sourceBreakdown || \"—\"}

`;\n\n const hotLeads = index\n .map((r, i) => ({ record: r, twilioCost: twilioCosts[i], address: extractCapturedAddress(r.summary) }))\n .filter((h) => h.address !== null);\n\n const hotLeadRows = hotLeads.map(({ record: r, address }) => {\n const when = new Date(r.timestamp).toLocaleString(\"en-US\", { timeZone: \"America/New_York\" });\n return `\n \n ${escapeHtml(when)}\n ${escapeHtml(r.callerName || \"—\")}\n ${escapeHtml(r.from)}\n ${escapeHtml(r.company || r.source || \"—\")}\n ${escapeHtml(address!)}\n \n

Full summary

${escapeHtml(r.summary)}

\n \n `;\n }).join(\"\");\n\n const hotLeadsSection = `\n

🔥 Hot leads (${hotLeads.length})

Calls where a real delivery address was captured — follow up on these first.

\n \n \n \n \n \n \n \n \n \n \n \n \n ${hotLeadRows || ``}\n \n

Time (ET)	Name	Phone	Source	Delivery address
No hot leads captured yet.

`;\n\n const controlPanelUrl = `https://tribeca-control-panel.val.run/?key=${encodeURIComponent(providedKey ?? \"\")}`;\n\n const rows = index.map((r, i) => {\n const when = new Date(r.timestamp).toLocaleString(\"en-US\", { timeZone: \"America/New_York\" });\n const badgeColor = r.direction === \"inbound\" ? \"#2563eb\" : \"#059669\";\n const twilioCost = twilioCosts[i];\n const claudeCost = r.anthropicCostUsd ?? null;\n const totalCost = twilioCost != null || claudeCost != null ? (twilioCost ?? 0) + (claudeCost ?? 0) : null;\n return `\n \n ${escapeHtml(when)}\n \n ${escapeHtml(r.direction)}\n \n ${escapeHtml(r.callerName || \"—\")}\n ${escapeHtml(r.from)}\n ${escapeHtml(r.company || r.source || \"—\")}\n ${r.attempt ?? \"—\"}\n ${escapeHtml(formatDuration(r.durationSeconds))}\n ${escapeHtml(r.summary)}\n \n Twilio: ${escapeHtml(formatUsd(twilioCost))}
\n Claude: ${escapeHtml(formatUsd(claudeCost))}
\n Total: ${escapeHtml(formatUsd(totalCost))}\n \n \n

Transcript

${escapeHtml(r.transcript)}

\n \n `;\n }).join(\"\");\n\n const html = `\n\n\n \n TriBeCa Beverage — Call Activity\n \n\n\n

TriBeCa Beverage — Call Activity

${index.length} most recent call${index.length === 1 ? \"\" : \"s\"} (max ${MAX_DASHBOARD_ENTRIES} kept). Newest first.

\n Open pause/resume control panel →\n (kept on a separate always-on file, so it stays reachable even when everything else is paused)\n

\n ${hotLeadsSection}\n ${statsBar}\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ${rows || ``}\n \n

Time (ET)	Direction	Name	Phone	Source	Attempt	Duration	Summary	Cost
No calls yet.

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\n// ============================================================================\n// /fb-lead-webhook — Meta (Facebook) Lead Ads webhook. No longer triggers a\n// call directly: Facebook leads flow into Salesforce through their own\n// separate sync, and salesforce-lead-caller.ts's polling loop is now the sole\n// place that places outbound calls (Facebook-sourced or not), since it's the\n// only path with correct Lead-id write-back, attempt cadence, and DNC sync.\n// This handler still verifies and acknowledges the webhook (so Meta's\n// subscription stays healthy) and logs which leads came in from\n// TARGET_FB_FORM_ID, but no longer looks the lead up via the Graph API or\n// calls placeOutboundCall.\n//\n// Setup requires a Meta developer app with the Webhooks product subscribed to\n// the \"leadgen\" field on your Page, plus this env var:\n// FB_WEBHOOK_VERIFY_TOKEN - arbitrary string, must match what you enter in\n// the Meta webhook setup form (Callback Verify Token)\n// FB_APP_SECRET - from the Meta app's Settings > Basic, used to\n// validate the X-Hub-Signature-256 header\n// (FB_PAGE_ACCESS_TOKEN is no longer used by this file — it was only needed\n// for the Graph API lookup this handler used to do.)\n// ============================================================================\n\nconst TARGET_FB_FORM_ID = \"1551858649716828\"; // \"AM_New High Intent Long Form\" — the specific form this logs about\n\nasync function handleFbLeadWebhook(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n const verifyToken = Deno.env.get(\"FB_WEBHOOK_VERIFY_TOKEN\");\n const mode = url.searchParams.get(\"hub.mode\");\n const token = url.searchParams.get(\"hub.verify_token\");\n const challenge = url.searchParams.get(\"hub.challenge\");\n if (mode === \"subscribe\" && verifyToken && token === verifyToken && challenge) {\n return new Response(challenge, { status: 200 });\n }\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n const rawBody = await req.text();\n if (!(await verifyFacebookSignature(req, rawBody))) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody || \"{}\");\n } catch {\n return Response.json({ status: \"ignored\", reason: \"invalid JSON\" });\n }\n\n const changes = (payload.entry ?? []).flatMap((e: any) => e.changes ?? []);\n for (const change of changes) {\n if (change.field !== \"leadgen\") continue;\n const value = change.value ?? {};\n const leadgenId = value.leadgen_id;\n const formId = value.form_id ? String(value.form_id) : null;\n if (!leadgenId || formId !== TARGET_FB_FORM_ID) continue;\n\n // No longer looked up or auto-called here — salesforce-lead-caller.ts's\n // polling loop picks this lead up once it lands in Salesforce.\n console.log(`/fb-lead-webhook: received leadgen ${leadgenId} for TARGET_FB_FORM_ID (logged only, not auto-called)`);\n }\n\n // Meta expects a fast 200 regardless of downstream processing outcome.\n return Response.json({ status: \"ok\" });\n}\n\n// Meta signs webhook payloads: sha256=HMAC-SHA256(rawBody, app secret)\nasync function verifyFacebookSignature(req: Request, rawBody: string): Promise {\n const appSecret = Deno.env.get(\"FB_APP_SECRET\");\n if (!appSecret) return true; // not configured yet — allow through during initial setup\n const signature = req.headers.get(\"X-Hub-Signature-256\") ?? \"\";\n if (!signature.startsWith(\"sha256=\")) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(appSecret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(rawBody));\n const expected = Array.from(new Uint8Array(mac)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return expected === signature.slice(\"sha256=\".length);\n}\n\n// ============================================================================\n// /turn — each conversational turn\n// ============================================================================\n\nasync function handleTurn(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.formData();\n const callSid = (form.get(\"CallSid\") as string) ?? \"unknown\";\n const from = (form.get(\"From\") as string) ?? \"\";\n const speech = ((form.get(\"SpeechResult\") as string) ?? \"\").trim();\n\n const turnUrl = new URL(req.url); // action url for the next Gather (same path)\n\n if (!speech) {\n return twiml(`\n \n Sorry, I didn't catch that — could you say that again?\n \n Sorry, I'm having trouble hearing you. Our office will follow up. Goodbye.\n `);\n }\n\n // Explicit stop / do-not-call request\n if (/\\b(stop calling|don'?t call|remove me|do not call)\\b/i.test(speech)) {\n if (from) {\n const isNew = await addDoNotCall(from);\n if (isNew) await notifyDoNotCallAdded(from);\n }\n const dncLeadId = turnUrl.searchParams.get(\"leadId\");\n if (dncLeadId) {\n updateSalesforceLead(dncLeadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to write DNC request back to Salesforce Lead:\", err));\n }\n return twiml(`Understood — I've removed you from our calling list. Sorry to bother you, and have a good day.`);\n }\n\n const historyKey = `voice-history-${callSid}`;\n let history: GeminiTurn[] = (await blob.getJSON(historyKey).catch(() => null)) ?? [];\n history.push({ role: \"user\", parts: [{ text: speech }] });\n if (history.length > MAX_HISTORY_MESSAGES) history = history.slice(history.length - MAX_HISTORY_MESSAGES);\n while (history.length && history[0].role !== \"user\") history.shift();\n\n let reply = FALLBACK_REPLY;\n let wantsHuman = false;\n let text = \"\";\n const genAI = new GoogleGenerativeAI(Deno.env.get(\"GEMINI_API_KEY\")!);\n const model = genAI.getGenerativeModel({ model: MODEL, systemInstruction: SYSTEM_PROMPT });\n\n for (let attempt = 0; attempt < 2; attempt++) {\n try {\n const result = await model.generateContent({ contents: history });\n text = result.response.text().trim();\n break;\n } catch (err) {\n console.error(`Gemini call failed (attempt ${attempt + 1}):`, err);\n if (attempt === 0) await new Promise((r) => setTimeout(r, 600)); // brief retry before giving up\n }\n }\n\n if (text) {\n reply = text;\n history.push({ role: \"model\", parts: [{ text }] });\n await blob.setJSON(historyKey, history);\n wantsHuman = /connect(ing)? you to (our )?office/i.test(text);\n } else {\n wantsHuman = true; // both attempts failed\n }\n\n if (wantsHuman) {\n return twiml(`\n ${escapeXml(reply)}\n ${OFFICE_NUMBER}\n `);\n }\n\n return twiml(`\n \n ${escapeXml(reply)}\n \n Thanks so much, our office will follow up to finalize everything. Goodbye.\n `);\n}\n\n// ============================================================================\n// /sms-inbound — a personal command channel for the business owner only.\n// Point the Twilio number's \"A message comes in\" webhook here. Anyone NOT in\n// OWNER_PHONE_NUMBERS is silently ignored (no reply) so this doesn't\n// advertise itself as a command interface to customers.\n//\n// Env var to add: OWNER_PHONE_NUMBERS - comma-separated E.164 numbers allowed\n// to command the agent, e.g. \"+12016000792,+19735551234\"\n// ============================================================================\n\nexport const OWNER_SMS_SYSTEM_PROMPT =\n `You are an operations assistant for the owner of TriBeCa Beverage Company, reachable by text message. ` +\n `The owner is texting you directly to get quick information or trigger actions in their AI phone system. ` +\n `You are NOT talking to a customer — only the verified business owner can reach you here.\\n\\n` +\n `Keep replies short — this is a text message, not an email. Use tools to look up real data or take real ` +\n `actions rather than guessing. If a request is ambiguous (e.g. which number to call), ask a brief ` +\n `clarifying question instead of guessing.`;\n\nexport const SMS_TOOLS = [\n {\n functionDeclarations: [\n {\n name: \"place_call\",\n description: \"Place an outbound AI sales call to a phone number, same as the automated lead-call system.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format, e.g. +12016000792\" },\n },\n required: [\"phone\"],\n },\n },\n {\n name: \"list_recent_calls\",\n description: \"List recent call activity (inbound and outbound) with time, direction, phone, name, and summary.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n limit: { type: SchemaType.INTEGER, description: \"Max number of calls to return, default 5\" },\n },\n },\n },\n {\n name: \"add_do_not_call\",\n description: \"Add a phone number to the do-not-call list so the AI system never calls it again.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: { phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format\" } },\n required: [\"phone\"],\n },\n },\n {\n name: \"remove_do_not_call\",\n description: \"Remove a phone number from the do-not-call list.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: { phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format\" } },\n required: [\"phone\"],\n },\n },\n {\n name: \"create_customer_account\",\n description:\n \"Create a new customer account: makes a WooCommerce customer + order on tribecabeverage.com and pushes it to Salesforce via WP Fusion. Use when asked to add/create/set up a new customer or account.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n email: { type: SchemaType.STRING, description: \"Customer email address (required)\" },\n first_name: { type: SchemaType.STRING },\n last_name: { type: SchemaType.STRING },\n phone: { type: SchemaType.STRING },\n address_1: { type: SchemaType.STRING },\n address_2: { type: SchemaType.STRING },\n city: { type: SchemaType.STRING },\n state: { type: SchemaType.STRING },\n postcode: { type: SchemaType.STRING },\n country: { type: SchemaType.STRING, description: \"2-letter country code, defaults to US\" },\n company: { type: SchemaType.STRING },\n water_type: { type: SchemaType.STRING, description: \"Defaults to Alkaline if not specified\" },\n bottles: { type: SchemaType.STRING, description: \"Number of 5-gallon bottles, defaults to 2\" },\n water_cooler: { type: SchemaType.STRING, description: \"Defaults to 'No Water Cooler Needed'\" },\n },\n required: [\"email\", \"first_name\", \"last_name\", \"address_1\", \"city\", \"state\", \"postcode\"],\n },\n },\n ],\n },\n];\n\nexport async function runSmsTool(name: string, args: Record): Promise {\n try {\n if (name === \"place_call\") {\n const phone = String(args.phone ?? \"\");\n const result = await placeOutboundCall(phone, { source: \"owner-request\" });\n return result.ok ? `Call placed. Call SID: ${result.callSid}` : `Not placed (${result.status}): ${result.reason}`;\n }\n if (name === \"list_recent_calls\") {\n const limit = typeof args.limit === \"number\" ? args.limit : 5;\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n const recent = index.slice(0, limit);\n if (recent.length === 0) return \"No calls recorded yet.\";\n return recent.map((r) => {\n const when = new Date(r.timestamp).toLocaleString(\"en-US\", { timeZone: \"America/New_York\" });\n return `${when} | ${r.direction} | ${r.callerName || \"unknown name\"} (${r.from}) | ${r.summary}`;\n }).join(\"\\n---\\n\");\n }\n if (name === \"add_do_not_call\") {\n const phone = String(args.phone ?? \"\");\n const isNew = await addDoNotCall(phone);\n return isNew ? `Added ${phone} to the do-not-call list.` : `${phone} was already on the do-not-call list.`;\n }\n if (name === \"remove_do_not_call\") {\n const phone = String(args.phone ?? \"\");\n const removed = await removeDoNotCall(phone);\n return removed ? `Removed ${phone} from the do-not-call list.` : `${phone} wasn't on the do-not-call list.`;\n }\n if (name === \"create_customer_account\") {\n const email = String(args.email ?? \"\");\n // Salesforce requires Shipping Street/City/State on the push (see the sync\n // endpoint's own comment) — enforce these here rather than let a partial\n // instruction silently create a WooCommerce order with a broken/incomplete\n // Salesforce record behind it.\n const REQUIRED = [\"email\", \"first_name\", \"last_name\", \"address_1\", \"city\", \"state\", \"postcode\"];\n const missing = REQUIRED.filter((k) => !String((args as Record)[k] ?? \"\").trim());\n if (missing.length > 0) {\n return `Can't create the account yet — missing: ${missing.join(\", \")}. Please provide these and try again.`;\n }\n const res = await fetch(\"https://tribecabeverage.com/wp-json/tribeca/v1/sync-customer\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Sync-Secret\": Deno.env.get(\"MF_SYNC_SECRET\") ?? \"\",\n },\n body: JSON.stringify({\n email,\n first_name: args.first_name ?? \"\",\n last_name: args.last_name ?? \"\",\n phone: args.phone ?? \"\",\n address_1: args.address_1 ?? \"\",\n address_2: args.address_2 ?? \"\",\n city: args.city ?? \"\",\n state: args.state ?? \"\",\n postcode: args.postcode ?? \"\",\n country: args.country ?? \"US\",\n company: args.company ?? \"\",\n water_type: args.water_type ?? \"Alkaline\",\n bottles: args.bottles ?? \"2\",\n water_cooler: args.water_cooler ?? \"No Water Cooler Needed\",\n }),\n });\n const body = await res.json().catch(() => ({}));\n if (!res.ok) {\n return `Failed to create account (${res.status}): ${body.error ?? body.details ?? \"unknown error\"}`;\n }\n return `Account ${body.action === \"created\" ? \"created\" : \"updated\"} for ${email}. WooCommerce order #${body.order_id}. Synced to Salesforce.`;\n }\n return `Unknown tool: ${name}`;\n } catch (err) {\n return `Tool error: ${err instanceof Error ? err.message : String(err)}`;\n }\n}\n\nfunction smsReply(text: string): Response {\n return twiml(`${escapeXml(text)}`);\n}\n\nasync function handleSmsInbound(req: Request): Promise {\n console.log(\"/sms-inbound: request received\");\n if (!(await verifyTwilioRequest(req))) {\n console.log(\"/sms-inbound: signature verification failed\");\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n const form = await req.formData();\n const from = (form.get(\"From\") as string) ?? \"\";\n const body = ((form.get(\"Body\") as string) ?? \"\").trim();\n console.log(`/sms-inbound: from=${from} body=${JSON.stringify(body)}`);\n\n const ownerNumbers = (Deno.env.get(\"OWNER_PHONE_NUMBERS\") ?? \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n if (!ownerNumbers.includes(from)) {\n // Not an authorized number — stay silent, don't reveal this is a command channel.\n console.log(`/sms-inbound: ${from} not in OWNER_PHONE_NUMBERS — ignoring`);\n return twiml(\"\");\n }\n\n if (!body) return smsReply(\"Didn't catch a message — try again?\");\n\n const geminiKey = Deno.env.get(\"GEMINI_API_KEY\");\n if (!geminiKey) return smsReply(\"Agent isn't configured — missing GEMINI_API_KEY.\");\n\n const genAI = new GoogleGenerativeAI(geminiKey);\n const model = genAI.getGenerativeModel({\n model: MODEL,\n systemInstruction: OWNER_SMS_SYSTEM_PROMPT,\n tools: SMS_TOOLS,\n });\n\n // Twilio gives up on the webhook (and logs error 11200) around 15s, so this\n // must always produce *some* valid TwiML well before that — a slow/looping\n // Gemini tool-calling round trip must never be allowed to time out the\n // whole request. Race the actual work against a hard cutoff.\n const TIMEOUT_MS = 12_000;\n const work = (async (): Promise => {\n const chat = model.startChat();\n let response = await chat.sendMessage(body);\n for (let round = 0; round < 4; round++) {\n const calls = response.response.functionCalls();\n if (!calls || calls.length === 0) {\n return response.response.text().trim() || \"Sorry, I wasn't able to finish that — try rephrasing?\";\n }\n const functionResponses = [];\n for (const call of calls) {\n const output = await runSmsTool(call.name, (call.args as Record) ?? {});\n functionResponses.push({ functionResponse: { name: call.name, response: { result: output } } });\n }\n response = await chat.sendMessage(functionResponses);\n }\n return \"Sorry, I wasn't able to finish that — try rephrasing?\";\n })();\n const timeout = new Promise((resolve) =>\n setTimeout(() => resolve(\"Still working on that — texting me again in a few seconds may help, or try rephrasing shorter.\"), TIMEOUT_MS)\n );\n\n let replyText: string;\n try {\n replyText = await Promise.race([work, timeout]);\n } catch (err) {\n console.error(\"SMS owner-agent failed:\", err);\n replyText = \"Sorry, that failed on my end — try again?\";\n }\n\n return smsReply(replyText);\n}\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\nfunction twiml(inner: string): Response {\n return new Response(`${inner}`, {\n headers: { \"Content-Type\": \"text/xml\" },\n });\n}\n\nfunction escapeXml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\n// Twilio signs webhooks: Base64(HMAC-SHA1(url + sorted(key+value) pairs, auth token))\nasync function verifyTwilioRequest(req: Request): Promise {\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n if (!authToken) return true; // not configured yet — allow through during initial setup\n const signature = req.headers.get(\"X-Twilio-Signature\") ?? \"\";\n const form = req.clone();\n const formData = await form.formData().catch(() => null);\n const params: Record = {};\n if (formData) for (const [k, v] of formData.entries()) params[k] = String(v);\n const data = req.url + Object.keys(params).sort().map((k) => k + params[k]).join(\"\");\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(authToken),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(data));\n const expected = btoa(String.fromCharCode(...new Uint8Array(mac)));\n return expected === signature;\n}\n","// Outbound AI Sales Call — Val Town HTTP val\n//\n// Flow: your website's \"request a callback\" form (with consent language) POSTs\n// to /lead -> we check quiet hours + do-not-call list -> place an outbound\n// call via Twilio -> Twilio hits /voice for TwiML -> turn-based conversation\n// via /turn, using Gather(speech) + Gemini + Say (no WebSocket/ConversationRelay\n// needed — Val Town can't host inbound WebSocket connections).\n//\n// Env vars to set in Val Town (left sidebar > Environment Variables):\n// GEMINI_API_KEY - required, from aistudio.google.com/apikey\n// TWILIO_ACCOUNT_SID - required, from Twilio Console > Account\n// TWILIO_AUTH_TOKEN - required, from Twilio Console > Account\n// TWILIO_CALLER_NUMBER - required, your Twilio voice number, E.164 (e.g. +19735551234)\n// LEAD_WEBHOOK_SECRET - required, a random string only your website form knows.\n// This val is public, so without this check anyone who\n// finds the URL could trigger outbound calls to arbitrary\n// numbers. Generate any random string and put the same\n// value in your website form's submission (as a hidden\n// field or header \"X-Lead-Secret\").\n//\n// Wire your tribecabeverage.com \"request a callback\" form to POST here at /lead\n// with fields: phone (E.164), consent (\"true\"), secret (matches LEAD_WEBHOOK_SECRET).\n\nimport { GoogleGenerativeAI, SchemaType } from \"npm:@google/generative-ai\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\ntype GeminiTurn = { role: \"user\" | \"model\"; parts: { text: string }[] };\n\n// ============================================================================\n// CONFIG\n// ============================================================================\n\n// Pricing and service areas come from ONE shared module, not a copy pasted\n// here. This file's copy was the ONLY one with Orlando and Lakeland/Polk\n// County; the SMS and website bots were declining leads it was selling to.\n// Confirmed 9/1/2026 that this file was the correct one, and the shared module\n// now carries its coverage — so nothing changes for this bot.\n//\n// Do not paste a price into this file. Edit tribeca-profile.\n// The ?v= is load-bearing: Val Town caches a remote module by URL, so without\n// it this bot keeps quoting the old prices to live callers after\n// tribeca-profile changes, with nothing in any log. Bump on PROFILE_VERSION.\nimport { BUSINESS_PROFILE } from \"https://esm.town/v/Tribeca_Rep/tribeca-profile/profile.ts?v=2026-09-01f\";\n\nconst SYSTEM_PROMPT = `You are TriBeCa Beverage Company's automated phone sales assistant. You are on a live phone call with someone who requested a callback via the \"request a quote\" form on tribecabeverage.com and agreed to receive an automated/AI call.\n\n${BUSINESS_PROFILE}\n\nCall rules (read carefully — this is a real phone call, not a text):\n- Your very first turn must disclose that you are an automated/AI assistant and confirm this is still a good time to talk. Something like: \"Hey, this is TriBeCa Beverage's assistant — you'd asked about a water delivery quote online. Got a couple minutes?\" If they say no or ask for a different time, apologize, say the office will follow up another time, and end the call politely.\n- Talk like a real person on the phone, not a script. Use contractions (I'm, that's, we'll, you're), casual affirmations (yeah, sure, got it, sounds good, awesome), and keep sentences short and warm — the way a friendly local rep actually talks, not a corporate recording.\n- Speak in short, natural, spoken sentences — no markdown, no bullet lists, no URLs, nothing that only makes sense written down. This will be read aloud by text-to-speech.\n- Goal: find out what they want (water type, bottle count, delivery frequency, cooler rental or not) and their delivery address, confirm they're in the service area, then tell them the office will follow up to finalize setup and first delivery.\n- Only quote the prices listed in the profile above. For anything without a listed price, say the office will confirm pricing — never invent a number.\n- Never promise a specific delivery date or discount. The office confirms scheduling.\n- If they ask for a human, or are upset, or ask something outside your scope: say you'll connect them to the office now. (The system will transfer the call — just say it plainly, e.g. \"Sure, let me connect you to our office now.\")\n- If they ask to stop being called, or are not interested: apologize once, confirm you will remove them from the calling list, and end the call. Do not push back or try to re-sell.\n- Keep the whole call efficient — aim to wrap up within a few exchanges once you have what you need.`;\n\nexport const MODEL = \"gemini-2.5-flash\";\nconst MAX_HISTORY_MESSAGES = 20;\nconst FALLBACK_REPLY = \"Sorry, I'm having a technical issue. Let me connect you to our office.\";\nconst OFFICE_NUMBER = \"+19739134568\";\n\n// Rough US area-code -> timezone map covering TriBeCa's service areas.\n// Everything not listed defaults to Eastern (covers NY/NJ/CT/DC/FL areas).\nconst PACIFIC_AREA_CODES = new Set([\n \"213\", \"310\", \"323\", \"424\", \"562\", \"626\", \"657\", \"714\", \"747\", \"818\", \"949\",\n]);\n\nfunction localHourFor(phoneE164: string): number {\n const digits = phoneE164.replace(/\\D/g, \"\");\n const areaCode = digits.length === 11 ? digits.slice(1, 4) : digits.slice(0, 3);\n const timeZone = PACIFIC_AREA_CODES.has(areaCode) ? \"America/Los_Angeles\" : \"America/New_York\";\n const hourStr = new Intl.DateTimeFormat(\"en-US\", { timeZone, hour: \"numeric\", hour12: false }).format(new Date());\n return parseInt(hourStr, 10) % 24;\n}\n\nfunction isQuietHours(phoneE164: string): boolean {\n const hour = localHourFor(phoneE164);\n return hour < 8 || hour >= 21; // outside 8am-9pm recipient local time\n}\n\n// California requires all-party consent to record calls (CIPA) — our recording\n// disclosure in the greeting is a reasonable-effort notice, but not a substitute\n// for actual consent, so outbound calls to California numbers/zip codes are\n// excluded entirely rather than relying on that.\nfunction isCaliforniaPhone(phoneE164: string): boolean {\n const digits = phoneE164.replace(/\\D/g, \"\");\n const areaCode = digits.length === 11 ? digits.slice(1, 4) : digits.slice(0, 3);\n return PACIFIC_AREA_CODES.has(areaCode);\n}\n\nfunction isCaliforniaZip(zip: string): boolean {\n const n = parseInt(zip.trim().slice(0, 5), 10);\n return !isNaN(n) && n >= 90000 && n <= 96199;\n}\n\nconst DNC_KEY = \"voice-do-not-call-list\";\n\n\n// Best-effort write-back to a Salesforce Lead via the tribeca-salesforce-agent\n// val. Never throws — a failed Salesforce update should never break call\n// handling, so callers just fire-and-forget this (with a .catch(console.error)).\nasync function updateSalesforceLead(leadId: string, fields: Record): Promise {\n const url = Deno.env.get(\"SALESFORCE_AGENT_URL\");\n const key = Deno.env.get(\"SALESFORCE_AGENT_KEY\");\n if (!url || !key) {\n console.error(\"updateSalesforceLead: missing SALESFORCE_AGENT_URL/SALESFORCE_AGENT_KEY env vars\");\n return;\n }\n const res = await fetch(`${url}?key=${encodeURIComponent(key)}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ sobject: \"Lead\", id: leadId, fields }),\n });\n const body = await res.json().catch(() => ({}));\n if (!res.ok || body?.error) {\n throw new Error(`Salesforce Lead update failed: ${res.status} ${JSON.stringify(body)}`);\n }\n}\n\n// Single reliable source of truth for the \"pause all outbound calling\" kill\n// switch. Deliberately blob-backed (not an env var): env vars have no\n// update-in-place tool (only add, which fails on an existing key), while\n// blob.setJSON can be flipped true/false every time from control.ts's\n// pause/resume buttons with zero hidden state. This replaces the old\n// OUTBOUND_CALLS_PAUSED env var check.\nconst OUTBOUND_PAUSED_KEY = \"outbound_calls_paused\";\n\nexport async function isOutboundPaused(): Promise {\n return (await blob.getJSON(OUTBOUND_PAUSED_KEY).catch(() => null)) === true;\n}\n\n// Val Town blob storage is scoped per independently-deployed file, NOT per\n// val despite std/blob's docs implying the latter — confirmed 2026-08-06:\n// control.ts calling blob.setJSON(OUTBOUND_PAUSED_KEY, ...) directly wrote\n// to control.ts's own isolated scope, invisible to this file's reads. A\n// function DEFINED here and merely CALLED from another file (via import)\n// still executes in this file's own scope, so control.ts must go through\n// this setter rather than touching blob itself.\nexport async function setOutboundPaused(v: boolean): Promise {\n await blob.setJSON(OUTBOUND_PAUSED_KEY, v);\n}\n\nasync function isDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n return list.includes(phoneE164);\n}\n\n// Returns true if the number was newly added (wasn't already on the list).\nasync function addDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n if (!list.includes(phoneE164)) {\n list.push(phoneE164);\n await blob.setJSON(DNC_KEY, list);\n return true;\n }\n return false;\n}\n\n// Returns true if the number was found and removed.\nasync function removeDoNotCall(phoneE164: string): Promise {\n const list: string[] = (await blob.getJSON(DNC_KEY).catch(() => null)) ?? [];\n const idx = list.indexOf(phoneE164);\n if (idx === -1) return false;\n list.splice(idx, 1);\n await blob.setJSON(DNC_KEY, list);\n return true;\n}\n\nasync function notifyDoNotCallAdded(phoneE164: string): Promise {\n try {\n await email({\n subject: `Do-not-call request — ${phoneE164}`,\n text: `${phoneE164} asked to stop being called during an automated call and has been added to the do-not-call list. They will not be called again by the automated system.`,\n });\n } catch (err) {\n console.error(\"Failed to send do-not-call notification email:\", err);\n }\n}\n\n// ============================================================================\n// Router\n// ============================================================================\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // Facebook hits this with GET (webhook verification handshake) and POST\n // (actual lead events) — handle both before the generic POST-only gate below.\n if (url.pathname === \"/fb-lead-webhook\") return handleFbLeadWebhook(req);\n if (url.pathname === \"/dashboard\") return handleDashboard(req);\n\n if (req.method !== \"POST\") {\n return new Response(\"Outbound sales call service is running.\", { status: 200 });\n }\n\n if (url.pathname === \"/lead\") return handleLead(req);\n if (url.pathname === \"/voice\") return handleVoice(req);\n if (url.pathname === \"/voice-inbound\") return handleVoiceInbound(req);\n if (url.pathname === \"/turn\") return handleTurn(req);\n if (url.pathname === \"/handoff\") return handleHandoff(req);\n if (url.pathname === \"/call-status\") return handleCallStatus(req);\n if (url.pathname === \"/dnc\") return handleDnc(req);\n if (url.pathname === \"/call-summary\") return handleCallSummary(req);\n if (url.pathname === \"/sms-inbound\") return handleSmsInbound(req);\n\n return new Response(\"Not found\", { status: 404 });\n}\n\n// ============================================================================\n// /lead — website form submits a callback request here\n// ============================================================================\n\nasync function handleLead(req: Request): Promise {\n const contentType = req.headers.get(\"content-type\") ?? \"\";\n let phone: string | null = null;\n let consent: string | null = null;\n let zip: string | null = null;\n let source: string | null = null;\n let name: string | null = null;\n let secret: string | null = req.headers.get(\"X-Lead-Secret\");\n\n if (contentType.includes(\"application/json\")) {\n const body = await req.json().catch(() => ({}));\n phone = body.phone ?? null;\n consent = body.consent ?? null;\n zip = body.zip ?? null;\n source = body.source ?? null;\n name = body.name ?? null;\n secret = secret ?? body.secret ?? null;\n } else {\n const form = await req.formData();\n phone = (form.get(\"phone\") as string) ?? null;\n consent = (form.get(\"consent\") as string) ?? null;\n zip = (form.get(\"zip\") as string) ?? null;\n source = (form.get(\"source\") as string) ?? null;\n name = (form.get(\"name\") as string) ?? null;\n secret = secret ?? (form.get(\"secret\") as string) ?? null;\n }\n\n const leadSecret = Deno.env.get(\"LEAD_WEBHOOK_SECRET\");\n const websiteSecret = Deno.env.get(\"WEBSITE_LEAD_SECRET\");\n if (!secret || (secret !== leadSecret && secret !== websiteSecret)) {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return Response.json({ error: \"phone must be E.164, e.g. +19735551234\" }, { status: 400 });\n }\n\n if (consent !== \"true\") {\n return Response.json({ error: \"consent must be 'true' — do not call without recorded consent\" }, { status: 400 });\n }\n\n // No longer calls placeOutboundCall directly: salesforce-lead-caller.ts's\n // polling loop is now the only place that places outbound calls, so every\n // lead gets the same Lead-id write-back, attempt cadence, and DNC sync\n // regardless of where it came from. This endpoint still validates and logs\n // the submission (so the website form and any other future integration\n // don't just get a broken response) but no longer auto-dials.\n console.log(`/lead: received submission for ${phone} (source=${source ?? \"unknown\"}, logged only, not auto-called)`);\n return Response.json({ status: \"logged\" });\n}\n\n// Shared by /lead and the SMS owner-agent's place_call tool. Applies the same\n// do-not-call / California-exclusion / quiet-hours safety checks regardless\n// of who's requesting the call.\ntype PlaceCallResult =\n | { ok: true; callSid: string }\n | { ok: false; status: \"skipped\" | \"deferred\" | \"error\"; reason: string };\n\nexport async function placeOutboundCall(\n phone: string,\n opts: { zip?: string; source?: string; company?: string; callerName?: string; attempt?: number; leadId?: string } = {},\n): Promise {\n if ((await isOutboundPaused()) && opts.source !== \"facebook\") {\n return {\n ok: false,\n status: \"skipped\",\n reason: \"Outbound calling is temporarily paused for non-Facebook leads\",\n };\n }\n\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return { ok: false, status: \"error\", reason: \"phone must be E.164, e.g. +19735551234\" };\n }\n\n if (await isDoNotCall(phone)) {\n return { ok: false, status: \"skipped\", reason: \"number is on the do-not-call list\" };\n }\n\n if (isCaliforniaPhone(phone) || (opts.zip && isCaliforniaZip(opts.zip))) {\n return {\n ok: false,\n status: \"skipped\",\n reason: \"California numbers/zip codes are excluded from outbound AI calls (all-party consent to record) — have the office follow up manually\",\n };\n }\n\n if (isQuietHours(phone)) {\n return {\n ok: false,\n status: \"deferred\",\n reason: \"outside 8am-9pm recipient local time — call not placed; have the office follow up during allowed hours\",\n };\n }\n\n const accountSid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const callerNumber = Deno.env.get(\"TWILIO_CALLER_NUMBER\");\n if (!accountSid || !authToken || !callerNumber) {\n return { ok: false, status: \"error\", reason: \"Server misconfigured: missing Twilio env vars\" };\n }\n\n const voiceUrl = new URL(\"https://tribeca-outbound-sales-call.val.run/voice\");\n if (opts.source) voiceUrl.searchParams.set(\"source\", opts.source);\n if (opts.company) voiceUrl.searchParams.set(\"company\", opts.company);\n if (opts.callerName) voiceUrl.searchParams.set(\"callerName\", opts.callerName);\n if (opts.attempt) voiceUrl.searchParams.set(\"attempt\", String(opts.attempt));\n if (opts.leadId) voiceUrl.searchParams.set(\"leadId\", opts.leadId);\n\n const statusCallbackUrl = new URL(\"https://tribeca-outbound-sales-call.val.run/call-status\");\n if (opts.source) statusCallbackUrl.searchParams.set(\"source\", opts.source);\n if (opts.company) statusCallbackUrl.searchParams.set(\"company\", opts.company);\n if (opts.callerName) statusCallbackUrl.searchParams.set(\"callerName\", opts.callerName);\n if (opts.attempt) statusCallbackUrl.searchParams.set(\"attempt\", String(opts.attempt));\n if (opts.leadId) statusCallbackUrl.searchParams.set(\"leadId\", opts.leadId);\n\n const twilioResp = await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${accountSid}/Calls.json`,\n {\n method: \"POST\",\n headers: {\n Authorization: \"Basic \" + btoa(`${accountSid}:${authToken}`),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n To: phone,\n From: callerNumber,\n Url: voiceUrl.toString(),\n // Detect voicemail before connecting so /voice can leave exactly one\n // short message and hang up instead of running the full AI\n // conversation into an answering machine. DetectMessageEnd waits for\n // the machine's greeting to finish (so our message starts right\n // after the beep) at the cost of a few extra seconds of latency\n // before /voice fires.\n MachineDetection: \"DetectMessageEnd\",\n // Fires once, at the call's final status (completed/no-answer/busy/\n // failed/canceled) â€” lets us log calls that never connected at all,\n // which otherwise never reach any of our other logging paths.\n StatusCallback: statusCallbackUrl.toString(),\n StatusCallbackMethod: \"POST\",\n }),\n },\n );\n\n const result = await twilioResp.json().catch(() => ({}));\n if (!twilioResp.ok) {\n console.error(\"Twilio call creation failed:\", result);\n return { ok: false, status: \"error\", reason: result?.message ?? \"Failed to place call\" };\n }\n\n return { ok: true, callSid: result.sid };\n}\n\n// ============================================================================\n// /voice — TwiML entry point when the call connects\n// ============================================================================\n\n// Left once and only once when Twilio's Answering Machine Detection says a\n// machine picked up — never connects to the AI conversation, so there's no\n// chance of a retry loop or multiple messages.\nconst VOICEMAIL_MESSAGE =\n \"Hey, this is Jack calling from TriBeCa Beverage Company about the water delivery quote you requested online. Sorry we missed you — give us a call back at 973-913-4568 and we'll get you set up. Thanks so much, have a great day!\";\n\nasync function handleVoice(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.clone().formData().catch(() => null);\n const answeredBy = (form?.get(\"AnsweredBy\") as string | null) ?? null;\n if (answeredBy && answeredBy.startsWith(\"machine\")) {\n const callSid = (form?.get(\"CallSid\") as string | null) ?? \"unknown\";\n const customerNumber = (form?.get(\"To\") as string | null) ?? \"unknown\";\n const voicemailUrl = new URL(req.url);\n const voicemailSource = voicemailUrl.searchParams.get(\"source\");\n const voicemailCallerName = voicemailUrl.searchParams.get(\"callerName\");\n const voicemailAttempt = Number(voicemailUrl.searchParams.get(\"attempt\")) || 1;\n const voicemailLeadId = voicemailUrl.searchParams.get(\"leadId\");\n const voicemailCompany = voicemailUrl.searchParams.get(\"company\");\n // Only leave the spoken voicemail message on the first attempt — repeat\n // attempts hang up silently so the lead doesn't get the same message twice.\n const isRepeatAttempt = voicemailAttempt > 1;\n const voicemailSummary = isRepeatAttempt\n ? \"Reached voicemail again on a repeat attempt — no message left, call ended silently.\"\n : \"Reached voicemail — left a callback message. No live conversation took place.\";\n recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: voicemailSummary,\n transcript: isRepeatAttempt\n ? \"(no conversation — voicemail reached on a repeat attempt, no message left)\"\n : `Jack (voicemail message): ${VOICEMAIL_MESSAGE}`,\n source: voicemailSource || undefined,\n company: voicemailCompany || undefined,\n callerName: voicemailCallerName || undefined,\n attempt: voicemailAttempt,\n }).catch((err) => console.error(\"Failed to record voicemail call summary:\", err));\n if (voicemailLeadId) {\n updateSalesforceLead(voicemailLeadId, {\n AI_Call_Status__c: \"Voicemail\",\n AI_Call_Summary__c: voicemailSummary,\n }).catch((err) => console.error(\"Failed to write voicemail status back to Salesforce Lead:\", err));\n }\n if (isRepeatAttempt) {\n return twiml(``);\n }\n return twiml(`${escapeXml(VOICEMAIL_MESSAGE)}`);\n }\n\n const relayUrl = Deno.env.get(\"CONVERSATION_RELAY_WS_URL\");\n if (!relayUrl) {\n // Fallback to the turn-based flow if the WebSocket server isn't configured yet.\n const turnUrl = new URL(req.url);\n turnUrl.pathname = \"/turn\";\n return twiml(`\n \n Hey, this is TriBeCa Beverage's assistant — quick heads up, this call may be recorded. You'd asked about a water delivery quote online. Got a couple minutes?\n \n Sorry, I didn't catch a response. Our office will follow up another time. Goodbye.\n `);\n }\n\n const handoffUrl = new URL(req.url);\n handoffUrl.pathname = \"/handoff\";\n\n const voiceReqUrl = new URL(req.url);\n const source = voiceReqUrl.searchParams.get(\"source\");\n const relayLeadId = voiceReqUrl.searchParams.get(\"leadId\");\n const relayCompany = voiceReqUrl.searchParams.get(\"company\");\n const outboundRelayUrl = new URL(relayUrl);\n if (source) outboundRelayUrl.searchParams.set(\"source\", source);\n // Best-effort: forwarded to the external ConversationRelay WS server in case\n // it echoes unknown query params back in its /call-summary POST body. Not\n // guaranteed — that server's code isn't controlled by this val.\n if (relayLeadId) outboundRelayUrl.searchParams.set(\"leadId\", relayLeadId);\n if (relayCompany) outboundRelayUrl.searchParams.set(\"company\", relayCompany);\n\n return twiml(`\n \n \n \n `);\n}\n\n// ============================================================================\n// /voice-inbound — TwiML entry point for calls INTO your business number\n// Point your Twilio number's \"A call comes in\" webhook at this URL.\n// ============================================================================\n\nasync function handleVoiceInbound(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const relayUrl = Deno.env.get(\"CONVERSATION_RELAY_WS_URL\");\n if (!relayUrl) {\n return twiml(`Sorry, our automated assistant isn't available right now. Please hold for the next available option, or call back later.`);\n }\n\n const handoffUrl = new URL(req.url);\n handoffUrl.pathname = \"/handoff\";\n\n const inboundRelayUrl = new URL(relayUrl);\n inboundRelayUrl.searchParams.set(\"mode\", \"inbound\");\n\n return twiml(`\n \n \n \n `);\n}\n\n// Called by Twilio once a call reaches a final status. Statuses meaning the\n// call never connected at all (no-answer/busy/failed/canceled) are logged\n// directly here. A \"completed\" status is usually already logged by the\n// voicemail branch in /voice or by the AI conversation's own summary at\n// hangup — but as a fallback, if neither of those wrote an entry (e.g. an\n// ambiguous AnsweredBy with too brief a pickup to produce a transcript),\n// this logs a generic placeholder so the call isn't silently missing.\nconst CALL_NEVER_CONNECTED_STATUSES: Record = {\n \"no-answer\": \"No answer — call was not picked up.\",\n busy: \"Line was busy.\",\n failed: \"Call failed to connect.\",\n canceled: \"Call was canceled before connecting.\",\n};\n\nasync function handleCallStatus(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n const form = await req.formData().catch(() => null);\n const callStatus = (form?.get(\"CallStatus\") as string | null) ?? \"\";\n const callSid = (form?.get(\"CallSid\") as string | null) ?? \"unknown\";\n const customerNumber = (form?.get(\"To\") as string | null) ?? \"unknown\";\n const callStatusUrl = new URL(req.url);\n const source = callStatusUrl.searchParams.get(\"source\");\n const callerName = callStatusUrl.searchParams.get(\"callerName\");\n const attempt = Number(callStatusUrl.searchParams.get(\"attempt\")) || 1;\n const leadId = callStatusUrl.searchParams.get(\"leadId\");\n const company = callStatusUrl.searchParams.get(\"company\");\n\n // Deterministic DNC sync — catches every detection path (regex, external\n // ConversationRelay /dnc call, or Gemini's add_do_not_call tool-call),\n // regardless of how the number ended up on the internal blob list.\n if (leadId && (await isDoNotCall(customerNumber))) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to sync DNC status back to Salesforce Lead:\", err));\n }\n\n const label = CALL_NEVER_CONNECTED_STATUSES[callStatus];\n if (label) {\n recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: label,\n transcript: \"(no conversation — call never connected)\",\n source: source || undefined,\n company: company || undefined,\n callerName: callerName || undefined,\n durationSeconds: 0,\n attempt,\n }).catch((err) => console.error(\"Failed to record call-status summary:\", err));\n if (leadId) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"No Answer\",\n AI_Call_Summary__c: label,\n }).catch((err) => console.error(\"Failed to write call-status outcome back to Salesforce Lead:\", err));\n }\n // 204 responses must have a null body, not an empty string — passing \"\"\n // throws \"Response with null body status cannot have body\" in Deno.\n return new Response(null, { status: 204 });\n }\n\n // Catch-all for calls that connected (status \"completed\") but slipped past\n // both the voicemail branch and the live conversation's own summary logging\n // — e.g. an ambiguous AnsweredBy (\"unknown\") with a pickup too brief to\n // produce a transcript. Wait for the live-conversation path to finish\n // writing its own entry (it calls out to an LLM, so it isn't instant)\n // before assuming nothing was logged, to avoid a duplicate.\n if (callStatus === \"completed\" && callSid !== \"unknown\") {\n await new Promise((r) => setTimeout(r, 8000));\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n const alreadyLogged = index.some((r) => r.callSid === callSid);\n if (!alreadyLogged) {\n const durationSeconds = Number(form?.get(\"CallDuration\") ?? \"0\") || 0;\n const fallbackSummary =\n \"Call connected but ended without a captured conversation (e.g. a brief pickup-and-hangup, or an ambiguous answering-machine detection result).\";\n await recordCallSummary({\n callSid,\n from: customerNumber,\n direction: \"outbound\",\n timestamp: new Date().toISOString(),\n summary: fallbackSummary,\n transcript: \"(no conversation captured)\",\n source: source || undefined,\n company: company || undefined,\n callerName: callerName || undefined,\n durationSeconds,\n attempt,\n }).catch((err) => console.error(\"Failed to record fallback call-status summary:\", err));\n if (leadId) {\n // The call did connect (status \"completed\"), even though no rich\n // transcript was captured, so this is our best-effort \"Connected\".\n // If a real conversation summary arrives later via /call-summary,\n // that write will simply overwrite this one. Status also moves to\n // \"Robocalled\" here to mark that this Lead has genuinely been\n // reached — the calling queue's SOQL treats 'New' and 'Robocalled'\n // as equally eligible, so this doesn't stop further cadence\n // attempts; it's just a visible marker of \"this one actually got\n // reached at least once.\"\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"Connected\",\n AI_Call_Summary__c: fallbackSummary,\n Status: \"Robocalled\",\n }).catch((err) => console.error(\"Failed to write fallback call-status outcome back to Salesforce Lead:\", err));\n }\n }\n }\n\n return new Response(null, { status: 204 });\n}\n\n// Called by Twilio when the ConversationRelay session ends (app sent \"end\", or\n// the WebSocket dropped) — hands off to a live human at the office.\nasync function handleHandoff(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.formData().catch(() => null);\n const handoffDataRaw = (form?.get(\"HandoffData\") as string | null) ?? null;\n let reason = \"human_handoff\";\n try {\n if (handoffDataRaw) reason = JSON.parse(handoffDataRaw).reason ?? reason;\n } catch {\n // malformed handoff data — fall back to transferring to the office\n }\n console.log(`/handoff: raw HandoffData=${JSON.stringify(handoffDataRaw)} resolved reason=${reason}`);\n\n if (reason === \"call_complete\" || reason === \"do_not_call\") {\n console.log(\"/handoff: returning \");\n return twiml(``);\n }\n console.log(`/handoff: returning to office (reason was \"${reason}\", not call_complete/do_not_call)`);\n return twiml(`${OFFICE_NUMBER}`);\n}\n\n// Called by the ConversationRelay WebSocket server to record a do-not-call request.\nasync function handleDnc(req: Request): Promise {\n const body = await req.json().catch(() => ({}));\n const phone = body.phone as string | undefined;\n // Only present if the external ConversationRelay WS server passes it through\n // — best-effort, not guaranteed.\n const leadId = body.leadId as string | undefined;\n if (!phone || !/^\\+\\d{10,15}$/.test(phone)) {\n return Response.json({ error: \"phone must be E.164\" }, { status: 400 });\n }\n const isNew = await addDoNotCall(phone);\n if (isNew) await notifyDoNotCallAdded(phone);\n if (leadId) {\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to write DNC request back to Salesforce Lead:\", err));\n }\n return Response.json({ status: \"ok\", added: isNew });\n}\n\n// Cheap keyword heuristic on the call summary text — flags the email subject\n// so the office can triage without opening every call. Order matters: DNC\n// runs first (legal/compliance), then any concrete order detail wins as a\n// Hot Lead before the no-contact/not-interested checks even run — otherwise\n// a structured field like \"Water type: not covered\" (Tribeca just doesn't\n// carry that type) or \"Cooler Rental: Not interested\" can outweigh a real,\n// fully-captured order elsewhere in the same summary.\nfunction classifyProspect(summary: string | undefined): string | null {\n if (!summary) return null;\n // Reuses the same prefix list the retry scheduler used to decide whether a\n // call produced a real conversation, so the two stay consistent.\n if (isNoConversationSummary(summary)) return \"📵 No Contact\";\n const s = summary.toLowerCase();\n if (/do not call|dnc requested|removed .*calling list|remove me/.test(s)) {\n return \"🚫 DNC\";\n }\n // Any concrete order detail — a delivery address, or a scheduled/confirmed\n // delivery — means real business happened on this call. That outweighs any\n // incidental \"not covered/discussed/interested\" phrasing elsewhere in the\n // summary, so this check runs before the no-contact and not-interested\n // checks below.\n if (/delivery address|schedule.*(first )?delivery|confirm.*(delivery|order)/.test(s)) {\n return \"🔥 Hot Lead\";\n }\n // Negative lookbehind excludes a structured field value like \"Cooler\n // Rental: Not interested\" (a single declined add-on inside an otherwise\n // successful order) while still catching \"Caller declined service\" or\n // \"not interested\" as an overall verdict on the whole call.\n if (/(? {\n const body = await req.json().catch(() => ({}));\n const {\n callSid,\n from,\n summary,\n transcript,\n direction,\n source,\n callerName,\n durationSeconds,\n inputTokens,\n outputTokens,\n anthropicCostUsd,\n leadId,\n company,\n } = body as {\n callSid?: string;\n from?: string;\n summary?: string;\n transcript?: string;\n direction?: string;\n source?: string;\n callerName?: string;\n durationSeconds?: number;\n inputTokens?: number;\n outputTokens?: number;\n anthropicCostUsd?: number;\n // Only present if the external ConversationRelay WS server echoes back the\n // \"leadId\" query param it was connected with — best-effort, not guaranteed.\n leadId?: string;\n // Only present if the external ConversationRelay WS server echoes back the\n // \"company\" query param it was connected with — best-effort, not guaranteed.\n company?: string;\n };\n\n const label = direction === \"inbound\" ? \"Inbound call\" : \"Outbound call lead\";\n const prospectTag = classifyProspect(summary);\n try {\n await email({\n subject: `${prospectTag ? `${prospectTag} — ` : \"\"}${label} — ${callerName ? `${callerName} (${from ?? \"unknown number\"})` : from ?? \"unknown number\"}`,\n text: `Direction: ${direction ?? \"unknown\"}\\nName: ${callerName || \"not provided\"}\\nCall from: ${from ?? \"unknown\"}\\nSource: ${source ?? \"unknown\"}\\nCall ID: ${callSid ?? \"unknown\"}\\n\\nSummary:\\n${summary ?? \"(none)\"}\\n\\n---\\nFull transcript:\\n${transcript ?? \"(none)\"}`,\n });\n } catch (err) {\n console.error(\"Failed to send call summary email:\", err);\n return Response.json({ error: \"Failed to send email\" }, { status: 500 });\n }\n\n try {\n await recordCallSummary({\n callSid: callSid ?? \"unknown\",\n from: from ?? \"unknown\",\n direction: direction === \"inbound\" ? \"inbound\" : \"outbound\",\n timestamp: new Date().toISOString(),\n summary: summary ?? \"(none)\",\n transcript: transcript ?? \"(none)\",\n callerName: callerName || undefined,\n source: source || undefined,\n company: company || undefined,\n durationSeconds,\n inputTokens,\n outputTokens,\n anthropicCostUsd,\n });\n } catch (err) {\n // Dashboard persistence is best-effort — the email above is the source of truth.\n console.error(\"Failed to persist call summary for dashboard:\", err);\n }\n\n if (leadId && direction !== \"inbound\") {\n // Status moves to \"Robocalled\" here too, for the same reason as the\n // handleCallStatus fallback branch above — see that comment.\n updateSalesforceLead(leadId, {\n AI_Call_Status__c: \"Connected\",\n AI_Call_Summary__c: summary ?? \"(none)\",\n Status: \"Robocalled\",\n }).catch((err) => console.error(\"Failed to write call-summary outcome back to Salesforce Lead:\", err));\n }\n\n return Response.json({ status: \"sent\" });\n}\n\n// ============================================================================\n// Call activity dashboard — /dashboard?key=DASHBOARD_SECRET\n// ============================================================================\n\nconst CALL_INDEX_KEY = \"call-summary-index\";\nconst MAX_DASHBOARD_ENTRIES = 300;\n\ntype CallRecord = {\n callSid: string;\n from: string;\n direction: \"inbound\" | \"outbound\";\n timestamp: string;\n summary: string;\n transcript: string;\n callerName?: string;\n source?: string;\n // Salesforce Lead's Company field value (e.g. \"fb\", \"ig\", or a website\n // URL string) — shown in the dashboard's Source column in preference to\n // `source`, since it's more specific about where the lead actually came\n // from. Only populated for Salesforce-driven calls.\n company?: string;\n durationSeconds?: number;\n inputTokens?: number;\n outputTokens?: number;\n anthropicCostUsd?: number;\n attempt?: number;\n};\n\n// Prefix-matched against CallRecord.summary to identify outbound calls that\n// never produced a real conversation, so they're eligible for another attempt.\nconst NO_CONVERSATION_SUMMARY_PREFIXES = [\n \"No answer\",\n \"Line was busy.\",\n \"Call failed to connect.\",\n \"Call was canceled before connecting.\",\n \"Reached voicemail\",\n \"Call connected but ended without a captured conversation\",\n];\n\nfunction isNoConversationSummary(summary: string): boolean {\n return NO_CONVERSATION_SUMMARY_PREFIXES.some((p) => summary.startsWith(p));\n}\n\nasync function recordCallSummary(record: CallRecord): Promise {\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n index.unshift(record);\n if (index.length > MAX_DASHBOARD_ENTRIES) index.length = MAX_DASHBOARD_ENTRIES;\n await blob.setJSON(CALL_INDEX_KEY, index);\n}\n\nasync function fetchTwilioCallPrice(\n callSid: string,\n accountSid: string,\n authToken: string,\n): Promise {\n if (!callSid || callSid === \"unknown\") return null;\n try {\n const resp = await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${accountSid}/Calls/${callSid}.json`,\n { headers: { Authorization: \"Basic \" + btoa(`${accountSid}:${authToken}`) } },\n );\n if (!resp.ok) return null;\n const data = await resp.json();\n const price = data.price != null ? parseFloat(data.price) : null;\n return price != null && !isNaN(price) ? Math.abs(price) : null;\n } catch {\n return null;\n }\n}\n\nfunction formatDuration(seconds?: number): string {\n if (seconds == null || isNaN(seconds)) return \"—\";\n const m = Math.floor(seconds / 60);\n const s = Math.floor(seconds % 60);\n return `${m}:${s.toString().padStart(2, \"0\")}`;\n}\n\nfunction formatUsd(n: number | null | undefined): string {\n if (n == null || isNaN(n)) return \"—\";\n return \"$\" + n.toFixed(4);\n}\n\n// Groups the raw company/source values (which include ad-hoc strings like\n// \"fb\" vs \"facebook\", and a different website URL per UTM-tagged link) into\n// a small set of stable buckets for the dashboard's summary stats — the\n// per-row Source column still shows the raw value untouched.\n// A \"hot\" lead is one where the AI actually captured a real delivery\n// address during the call — the strongest available signal of a viable\n// order, since it means we have enough information to actually deliver\n// water to this person. Stronger than duration or connect status alone:\n// one real 50-bottle order was captured in a 6-second call, while many\n// much longer \"connected\" calls never got past small talk.\nfunction extractCapturedAddress(summary: string): string | null {\n const match = summary.match(/(?:Delivery [Aa]ddress|DELIVERY ADDRESS)\\s*:\\s*(.+)/);\n if (!match) return null;\n const value = match[1].trim();\n if (!value || value === \"—\" || /^(not |n\\/a)/i.test(value)) return null;\n return value;\n}\n\nfunction canonicalSource(r: CallRecord): string {\n const raw = (r.company || r.source || \"\").toLowerCase();\n if (!raw) return \"Other\";\n if (raw === \"fb\" || raw.includes(\"facebook\")) return \"Facebook\";\n if (raw === \"ig\" || raw.includes(\"instagram\")) return \"Instagram\";\n if (raw === \"salesforce\") return \"Salesforce\";\n if (raw === \"website\" || raw.includes(\"http\") || raw.includes(\"online\")) return \"Website\";\n return \"Other\";\n}\n\nasync function handleDashboard(req: Request): Promise {\n const url = new URL(req.url);\n const expectedKey = Deno.env.get(\"DASHBOARD_SECRET\");\n const providedKey = url.searchParams.get(\"key\");\n\n if (!expectedKey || providedKey !== expectedKey) {\n return new Response(\"Unauthorized — append ?key=... with the dashboard access key to this URL.\", {\n status: 401,\n headers: { \"Content-Type\": \"text/plain\" },\n });\n }\n\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n\n const accountSid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const twilioCosts = accountSid && authToken\n ? await Promise.all(index.map((r) => fetchTwilioCallPrice(r.callSid, accountSid, authToken)))\n : index.map(() => null);\n\n const totalCalls = index.length;\n const connectedCount = index.filter((r) => !isNoConversationSummary(r.summary)).length;\n const voicemailCount = index.filter((r) => r.summary.startsWith(\"Reached voicemail\")).length;\n const totalSpend = index.reduce((sum, r, i) => sum + (twilioCosts[i] ?? 0) + (r.anthropicCostUsd ?? 0), 0);\n const pct = (n: number) => totalCalls === 0 ? \"—\" : `${Math.round((n / totalCalls) * 100)}%`;\n\n const sourceCounts: Record = {};\n for (const r of index) {\n const key = canonicalSource(r);\n sourceCounts[key] = (sourceCounts[key] ?? 0) + 1;\n }\n const sourceBreakdown = Object.entries(sourceCounts)\n .sort((a, b) => b[1] - a[1])\n .map(([k, v]) => `${escapeHtml(k)}: ${v}`)\n .join(\"
\");\n\n const statTile = (label: string, value: string, sub: string) => `\n

${escapeHtml(label)}

${value}

${sub}

`;\n\n const statsBar = `\n

Calls by source

${sourceBreakdown || \"—\"}

Full summary

${escapeHtml(r.summary)}

\n \n `;\n }).join(\"\");\n\n const hotLeadsSection = `\n

🔥 Hot leads (${hotLeads.length})

Calls where a real delivery address was captured — follow up on these first.

\n \n \n \n \n \n \n \n \n \n \n \n \n ${hotLeadRows || ``}\n \n

Time (ET)	Name	Phone	Source	Delivery address
No hot leads captured yet.

Transcript

${escapeHtml(r.transcript)}

\n \n `;\n }).join(\"\");\n\n const html = `\n\n\n \n TriBeCa Beverage — Call Activity\n \n\n\n

TriBeCa Beverage — Call Activity

${index.length} most recent call${index.length === 1 ? \"\" : \"s\"} (max ${MAX_DASHBOARD_ENTRIES} kept). Newest first.

\n Open pause/resume control panel →\n (kept on a separate always-on file, so it stays reachable even when everything else is paused)\n

\n ${hotLeadsSection}\n ${statsBar}\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ${rows || ``}\n \n

Time (ET)	Direction	Name	Phone	Source	Attempt	Duration	Summary	Cost
No calls yet.

\n\n`;\n\n return new Response(html, { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } });\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\n// ============================================================================\n// /fb-lead-webhook — Meta (Facebook) Lead Ads webhook. No longer triggers a\n// call directly: Facebook leads flow into Salesforce through their own\n// separate sync, and salesforce-lead-caller.ts's polling loop is now the sole\n// place that places outbound calls (Facebook-sourced or not), since it's the\n// only path with correct Lead-id write-back, attempt cadence, and DNC sync.\n// This handler still verifies and acknowledges the webhook (so Meta's\n// subscription stays healthy) and logs which leads came in from\n// TARGET_FB_FORM_ID, but no longer looks the lead up via the Graph API or\n// calls placeOutboundCall.\n//\n// Setup requires a Meta developer app with the Webhooks product subscribed to\n// the \"leadgen\" field on your Page, plus this env var:\n// FB_WEBHOOK_VERIFY_TOKEN - arbitrary string, must match what you enter in\n// the Meta webhook setup form (Callback Verify Token)\n// FB_APP_SECRET - from the Meta app's Settings > Basic, used to\n// validate the X-Hub-Signature-256 header\n// (FB_PAGE_ACCESS_TOKEN is no longer used by this file — it was only needed\n// for the Graph API lookup this handler used to do.)\n// ============================================================================\n\nconst TARGET_FB_FORM_ID = \"1551858649716828\"; // \"AM_New High Intent Long Form\" — the specific form this logs about\n\nasync function handleFbLeadWebhook(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n const verifyToken = Deno.env.get(\"FB_WEBHOOK_VERIFY_TOKEN\");\n const mode = url.searchParams.get(\"hub.mode\");\n const token = url.searchParams.get(\"hub.verify_token\");\n const challenge = url.searchParams.get(\"hub.challenge\");\n if (mode === \"subscribe\" && verifyToken && token === verifyToken && challenge) {\n return new Response(challenge, { status: 200 });\n }\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n const rawBody = await req.text();\n if (!(await verifyFacebookSignature(req, rawBody))) {\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n let payload: any = {};\n try {\n payload = JSON.parse(rawBody || \"{}\");\n } catch {\n return Response.json({ status: \"ignored\", reason: \"invalid JSON\" });\n }\n\n const changes = (payload.entry ?? []).flatMap((e: any) => e.changes ?? []);\n for (const change of changes) {\n if (change.field !== \"leadgen\") continue;\n const value = change.value ?? {};\n const leadgenId = value.leadgen_id;\n const formId = value.form_id ? String(value.form_id) : null;\n if (!leadgenId || formId !== TARGET_FB_FORM_ID) continue;\n\n // No longer looked up or auto-called here — salesforce-lead-caller.ts's\n // polling loop picks this lead up once it lands in Salesforce.\n console.log(`/fb-lead-webhook: received leadgen ${leadgenId} for TARGET_FB_FORM_ID (logged only, not auto-called)`);\n }\n\n // Meta expects a fast 200 regardless of downstream processing outcome.\n return Response.json({ status: \"ok\" });\n}\n\n// Meta signs webhook payloads: sha256=HMAC-SHA256(rawBody, app secret)\nasync function verifyFacebookSignature(req: Request, rawBody: string): Promise {\n const appSecret = Deno.env.get(\"FB_APP_SECRET\");\n if (!appSecret) return true; // not configured yet — allow through during initial setup\n const signature = req.headers.get(\"X-Hub-Signature-256\") ?? \"\";\n if (!signature.startsWith(\"sha256=\")) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(appSecret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(rawBody));\n const expected = Array.from(new Uint8Array(mac)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return expected === signature.slice(\"sha256=\".length);\n}\n\n// ============================================================================\n// /turn — each conversational turn\n// ============================================================================\n\nasync function handleTurn(req: Request): Promise {\n if (!(await verifyTwilioRequest(req))) return new Response(\"Forbidden\", { status: 403 });\n\n const form = await req.formData();\n const callSid = (form.get(\"CallSid\") as string) ?? \"unknown\";\n const from = (form.get(\"From\") as string) ?? \"\";\n const speech = ((form.get(\"SpeechResult\") as string) ?? \"\").trim();\n\n const turnUrl = new URL(req.url); // action url for the next Gather (same path)\n\n if (!speech) {\n return twiml(`\n \n Sorry, I didn't catch that — could you say that again?\n \n Sorry, I'm having trouble hearing you. Our office will follow up. Goodbye.\n `);\n }\n\n // Explicit stop / do-not-call request\n if (/\\b(stop calling|don'?t call|remove me|do not call)\\b/i.test(speech)) {\n if (from) {\n const isNew = await addDoNotCall(from);\n if (isNew) await notifyDoNotCallAdded(from);\n }\n const dncLeadId = turnUrl.searchParams.get(\"leadId\");\n if (dncLeadId) {\n updateSalesforceLead(dncLeadId, {\n AI_Call_Status__c: \"DNC Requested\",\n DoNotCall: true,\n }).catch((err) => console.error(\"Failed to write DNC request back to Salesforce Lead:\", err));\n }\n return twiml(`Understood — I've removed you from our calling list. Sorry to bother you, and have a good day.`);\n }\n\n const historyKey = `voice-history-${callSid}`;\n let history: GeminiTurn[] = (await blob.getJSON(historyKey).catch(() => null)) ?? [];\n history.push({ role: \"user\", parts: [{ text: speech }] });\n if (history.length > MAX_HISTORY_MESSAGES) history = history.slice(history.length - MAX_HISTORY_MESSAGES);\n while (history.length && history[0].role !== \"user\") history.shift();\n\n let reply = FALLBACK_REPLY;\n let wantsHuman = false;\n let text = \"\";\n const genAI = new GoogleGenerativeAI(Deno.env.get(\"GEMINI_API_KEY\")!);\n const model = genAI.getGenerativeModel({ model: MODEL, systemInstruction: SYSTEM_PROMPT });\n\n for (let attempt = 0; attempt < 2; attempt++) {\n try {\n const result = await model.generateContent({ contents: history });\n text = result.response.text().trim();\n break;\n } catch (err) {\n console.error(`Gemini call failed (attempt ${attempt + 1}):`, err);\n if (attempt === 0) await new Promise((r) => setTimeout(r, 600)); // brief retry before giving up\n }\n }\n\n if (text) {\n reply = text;\n history.push({ role: \"model\", parts: [{ text }] });\n await blob.setJSON(historyKey, history);\n wantsHuman = /connect(ing)? you to (our )?office/i.test(text);\n } else {\n wantsHuman = true; // both attempts failed\n }\n\n if (wantsHuman) {\n return twiml(`\n ${escapeXml(reply)}\n ${OFFICE_NUMBER}\n `);\n }\n\n return twiml(`\n \n ${escapeXml(reply)}\n \n Thanks so much, our office will follow up to finalize everything. Goodbye.\n `);\n}\n\n// ============================================================================\n// /sms-inbound — a personal command channel for the business owner only.\n// Point the Twilio number's \"A message comes in\" webhook here. Anyone NOT in\n// OWNER_PHONE_NUMBERS is silently ignored (no reply) so this doesn't\n// advertise itself as a command interface to customers.\n//\n// Env var to add: OWNER_PHONE_NUMBERS - comma-separated E.164 numbers allowed\n// to command the agent, e.g. \"+12016000792,+19735551234\"\n// ============================================================================\n\nexport const OWNER_SMS_SYSTEM_PROMPT =\n `You are an operations assistant for the owner of TriBeCa Beverage Company, reachable by text message. ` +\n `The owner is texting you directly to get quick information or trigger actions in their AI phone system. ` +\n `You are NOT talking to a customer — only the verified business owner can reach you here.\\n\\n` +\n `Keep replies short — this is a text message, not an email. Use tools to look up real data or take real ` +\n `actions rather than guessing. If a request is ambiguous (e.g. which number to call), ask a brief ` +\n `clarifying question instead of guessing.`;\n\nexport const SMS_TOOLS = [\n {\n functionDeclarations: [\n {\n name: \"place_call\",\n description: \"Place an outbound AI sales call to a phone number, same as the automated lead-call system.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format, e.g. +12016000792\" },\n },\n required: [\"phone\"],\n },\n },\n {\n name: \"list_recent_calls\",\n description: \"List recent call activity (inbound and outbound) with time, direction, phone, name, and summary.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n limit: { type: SchemaType.INTEGER, description: \"Max number of calls to return, default 5\" },\n },\n },\n },\n {\n name: \"add_do_not_call\",\n description: \"Add a phone number to the do-not-call list so the AI system never calls it again.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: { phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format\" } },\n required: [\"phone\"],\n },\n },\n {\n name: \"remove_do_not_call\",\n description: \"Remove a phone number from the do-not-call list.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: { phone: { type: SchemaType.STRING, description: \"Phone number in E.164 format\" } },\n required: [\"phone\"],\n },\n },\n {\n name: \"create_customer_account\",\n description:\n \"Create a new customer account: makes a WooCommerce customer + order on tribecabeverage.com and pushes it to Salesforce via WP Fusion. Use when asked to add/create/set up a new customer or account.\",\n parameters: {\n type: SchemaType.OBJECT,\n properties: {\n email: { type: SchemaType.STRING, description: \"Customer email address (required)\" },\n first_name: { type: SchemaType.STRING },\n last_name: { type: SchemaType.STRING },\n phone: { type: SchemaType.STRING },\n address_1: { type: SchemaType.STRING },\n address_2: { type: SchemaType.STRING },\n city: { type: SchemaType.STRING },\n state: { type: SchemaType.STRING },\n postcode: { type: SchemaType.STRING },\n country: { type: SchemaType.STRING, description: \"2-letter country code, defaults to US\" },\n company: { type: SchemaType.STRING },\n water_type: { type: SchemaType.STRING, description: \"Defaults to Alkaline if not specified\" },\n bottles: { type: SchemaType.STRING, description: \"Number of 5-gallon bottles, defaults to 2\" },\n water_cooler: { type: SchemaType.STRING, description: \"Defaults to 'No Water Cooler Needed'\" },\n },\n required: [\"email\", \"first_name\", \"last_name\", \"address_1\", \"city\", \"state\", \"postcode\"],\n },\n },\n ],\n },\n];\n\nexport async function runSmsTool(name: string, args: Record): Promise {\n try {\n if (name === \"place_call\") {\n const phone = String(args.phone ?? \"\");\n const result = await placeOutboundCall(phone, { source: \"owner-request\" });\n return result.ok ? `Call placed. Call SID: ${result.callSid}` : `Not placed (${result.status}): ${result.reason}`;\n }\n if (name === \"list_recent_calls\") {\n const limit = typeof args.limit === \"number\" ? args.limit : 5;\n const index: CallRecord[] = (await blob.getJSON(CALL_INDEX_KEY).catch(() => null)) ?? [];\n const recent = index.slice(0, limit);\n if (recent.length === 0) return \"No calls recorded yet.\";\n return recent.map((r) => {\n const when = new Date(r.timestamp).toLocaleString(\"en-US\", { timeZone: \"America/New_York\" });\n return `${when} | ${r.direction} | ${r.callerName || \"unknown name\"} (${r.from}) | ${r.summary}`;\n }).join(\"\\n---\\n\");\n }\n if (name === \"add_do_not_call\") {\n const phone = String(args.phone ?? \"\");\n const isNew = await addDoNotCall(phone);\n return isNew ? `Added ${phone} to the do-not-call list.` : `${phone} was already on the do-not-call list.`;\n }\n if (name === \"remove_do_not_call\") {\n const phone = String(args.phone ?? \"\");\n const removed = await removeDoNotCall(phone);\n return removed ? `Removed ${phone} from the do-not-call list.` : `${phone} wasn't on the do-not-call list.`;\n }\n if (name === \"create_customer_account\") {\n const email = String(args.email ?? \"\");\n // Salesforce requires Shipping Street/City/State on the push (see the sync\n // endpoint's own comment) — enforce these here rather than let a partial\n // instruction silently create a WooCommerce order with a broken/incomplete\n // Salesforce record behind it.\n const REQUIRED = [\"email\", \"first_name\", \"last_name\", \"address_1\", \"city\", \"state\", \"postcode\"];\n const missing = REQUIRED.filter((k) => !String((args as Record)[k] ?? \"\").trim());\n if (missing.length > 0) {\n return `Can't create the account yet — missing: ${missing.join(\", \")}. Please provide these and try again.`;\n }\n const res = await fetch(\"https://tribecabeverage.com/wp-json/tribeca/v1/sync-customer\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Sync-Secret\": Deno.env.get(\"MF_SYNC_SECRET\") ?? \"\",\n },\n body: JSON.stringify({\n email,\n first_name: args.first_name ?? \"\",\n last_name: args.last_name ?? \"\",\n phone: args.phone ?? \"\",\n address_1: args.address_1 ?? \"\",\n address_2: args.address_2 ?? \"\",\n city: args.city ?? \"\",\n state: args.state ?? \"\",\n postcode: args.postcode ?? \"\",\n country: args.country ?? \"US\",\n company: args.company ?? \"\",\n water_type: args.water_type ?? \"Alkaline\",\n bottles: args.bottles ?? \"2\",\n water_cooler: args.water_cooler ?? \"No Water Cooler Needed\",\n }),\n });\n const body = await res.json().catch(() => ({}));\n if (!res.ok) {\n return `Failed to create account (${res.status}): ${body.error ?? body.details ?? \"unknown error\"}`;\n }\n return `Account ${body.action === \"created\" ? \"created\" : \"updated\"} for ${email}. WooCommerce order #${body.order_id}. Synced to Salesforce.`;\n }\n return `Unknown tool: ${name}`;\n } catch (err) {\n return `Tool error: ${err instanceof Error ? err.message : String(err)}`;\n }\n}\n\nfunction smsReply(text: string): Response {\n return twiml(`${escapeXml(text)}`);\n}\n\nasync function handleSmsInbound(req: Request): Promise {\n console.log(\"/sms-inbound: request received\");\n if (!(await verifyTwilioRequest(req))) {\n console.log(\"/sms-inbound: signature verification failed\");\n return new Response(\"Forbidden\", { status: 403 });\n }\n\n const form = await req.formData();\n const from = (form.get(\"From\") as string) ?? \"\";\n const body = ((form.get(\"Body\") as string) ?? \"\").trim();\n console.log(`/sms-inbound: from=${from} body=${JSON.stringify(body)}`);\n\n const ownerNumbers = (Deno.env.get(\"OWNER_PHONE_NUMBERS\") ?? \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n if (!ownerNumbers.includes(from)) {\n // Not an authorized number — stay silent, don't reveal this is a command channel.\n console.log(`/sms-inbound: ${from} not in OWNER_PHONE_NUMBERS — ignoring`);\n return twiml(\"\");\n }\n\n if (!body) return smsReply(\"Didn't catch a message — try again?\");\n\n const geminiKey = Deno.env.get(\"GEMINI_API_KEY\");\n if (!geminiKey) return smsReply(\"Agent isn't configured — missing GEMINI_API_KEY.\");\n\n const genAI = new GoogleGenerativeAI(geminiKey);\n const model = genAI.getGenerativeModel({\n model: MODEL,\n systemInstruction: OWNER_SMS_SYSTEM_PROMPT,\n tools: SMS_TOOLS,\n });\n\n // Twilio gives up on the webhook (and logs error 11200) around 15s, so this\n // must always produce *some* valid TwiML well before that — a slow/looping\n // Gemini tool-calling round trip must never be allowed to time out the\n // whole request. Race the actual work against a hard cutoff.\n const TIMEOUT_MS = 12_000;\n const work = (async (): Promise => {\n const chat = model.startChat();\n let response = await chat.sendMessage(body);\n for (let round = 0; round < 4; round++) {\n const calls = response.response.functionCalls();\n if (!calls || calls.length === 0) {\n return response.response.text().trim() || \"Sorry, I wasn't able to finish that — try rephrasing?\";\n }\n const functionResponses = [];\n for (const call of calls) {\n const output = await runSmsTool(call.name, (call.args as Record) ?? {});\n functionResponses.push({ functionResponse: { name: call.name, response: { result: output } } });\n }\n response = await chat.sendMessage(functionResponses);\n }\n return \"Sorry, I wasn't able to finish that — try rephrasing?\";\n })();\n const timeout = new Promise((resolve) =>\n setTimeout(() => resolve(\"Still working on that — texting me again in a few seconds may help, or try rephrasing shorter.\"), TIMEOUT_MS)\n );\n\n let replyText: string;\n try {\n replyText = await Promise.race([work, timeout]);\n } catch (err) {\n console.error(\"SMS owner-agent failed:\", err);\n replyText = \"Sorry, that failed on my end — try again?\";\n }\n\n return smsReply(replyText);\n}\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\nfunction twiml(inner: string): Response {\n return new Response(`${inner}`, {\n headers: { \"Content-Type\": \"text/xml\" },\n });\n}\n\nfunction escapeXml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\n// Twilio signs webhooks: Base64(HMAC-SHA1(url + sorted(key+value) pairs, auth token))\nasync function verifyTwilioRequest(req: Request): Promise {\n const authToken = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n if (!authToken) return true; // not configured yet — allow through during initial setup\n const signature = req.headers.get(\"X-Twilio-Signature\") ?? \"\";\n const form = req.clone();\n const formData = await form.formData().catch(() => null);\n const params: Record = {};\n if (formData) for (const [k, v] of formData.entries()) params[k] = String(v);\n const data = req.url + Object.keys(params).sort().map((k) => k + params[k]).join(\"\");\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(authToken),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const mac = await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(data));\n const expected = btoa(String.fromCharCode(...new Uint8Array(mac)));\n return expected === signature;\n}\n","createdAt",["D",1788275772409],"branchVersion","branchId","5fc8e935-2312-41b9-9e30-55c506b07116","id","87b7f315-3ae0-4b4d-a5c9-ea08f8fffa3b","tribeca-outbound-sales-call",["D",1784848264718],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Tribeca Beverage outbound AI sales call (Twilio Voice + Gemini)","imageUrl","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe2-cdfc-775d-a845-a69af13d39cb","tursoName","87b7f3153ae04b4da5c9ea08f8fffa3b","tursoHostname","87b7f3153ae04b4da5c9ea08f8fffa3b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473745358],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",537,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Tribeca_Rep","handle","displayName","M A","avatar","https://lh3.googleusercontent.com/a/ACg8ocI9znhXn2hWp1wjjyWzeuOyoO_JrDgJo8aD0umFraR7bAG3UAmc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":197,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":198,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":199,"_83":200,"_85":201,"_87":25},"tree",[180,181,182,183],"files",[180,181,182,183],"counts",{"_168":62,"_169":170,"_171":62,"_172":173,"_174":175},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":159,"_32":160,"_30":161,"_137":-5,"_41":42,"_40":162,"_139":58,"_38":163,"_13":164,"_33":34,"_35":165,"_24":25,"_144":166,"_27":167},{"_43":150,"_32":151,"_30":152,"_137":-5,"_41":42,"_40":153,"_139":58,"_38":154,"_13":155,"_33":156,"_35":157,"_24":25,"_144":-5,"_27":158},{"_43":146,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":147,"_13":148,"_33":34,"_35":37,"_24":25,"_144":45,"_27":149},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":58,"_38":140,"_13":141,"_33":142,"_35":143,"_24":25,"_144":-5,"_27":145},"b0535994-a909-4e4e-ac59-941601b45c40","salesforce-lead-caller.ts","4c37a33e-8b53-11f1-9a24-1607ee4eb77e","parentId",483,"latest",["D",1786026710807],59,"interval","// Polls Salesforce every 15 minutes for Leads eligible for an outbound AI call:\n// - Status = 'New' or 'Robocalled' (this file marks a Lead 'Robocalled' as\n// soon as a call is actually placed to it, regardless of outcome — it\n// does NOT remove the Lead from eligibility, so a Lead that's been\n// called once can still get its remaining 2nd/3rd/4th cadence attempts)\n// - Consented: Title = 'True' or '1' (the FB Lead Ads -> Salesforce mapping\n// writes the consent checkbox answer into the standard Title field) —\n// same consent bar regardless of source.\n// - Company = 'fb' or 'ig' leads are eligible any time. Any other Company\n// (e.g. website/\"Online\" leads):\n// - Weekdays: ONLY eligible 5pm-8pm US Eastern (narrow after-work\n// window)\n// - Weekends (Sat/Sun): eligible across the full approved\n// telemarketing hours (8am-9pm) instead of that narrow window —\n// main.ts's isQuietHours() already enforces 8am-9pm in the\n// RECIPIENT's own local time zone on every call regardless of\n// source, so weekends just stop layering the narrower business-\n// hours restriction on top of that.\n// Outside the applicable window, non-fb/ig leads simply don't match,\n// regardless of anything else about them.\n// - Not on Salesforce's own DoNotCall list\n// - Has a usable phone number\n// - Capped at MAX_CALLS_PER_RUN leads actually called per run, even if\n// more are eligible\n// - Due per the attempt cadence: 1st attempt immediately eligible, 2nd\n// after 1 day, 3rd after 2 days, 4th after 2 more days, capped at 4\n// attempts total (AI_Call_Attempts__c / AI_Call_Last_Attempt__c track\n// this on the Lead itself).\n// - The 1st-attempt branch only fires for Leads created after 2026-07-29\n// 18:24 UTC (2:24pm ET) — this is the cutover moment this polling loop\n// became the sole caller (replacing the old Facebook-webhook direct-call\n// path), so older backlog Leads that were never truly a \"first attempt\"\n// under this system don't all get swept up and called at once. Leads\n// already past attempt 0 are unaffected by this cutoff.\n//\n// Marks each eligible Lead as attempted in Salesforce BEFORE calling, so an\n// overlapping run (or a slow-to-complete call) can't double-dial the same\n// Lead. If the call didn't actually get placed for a transient reason (quiet\n// hours for that lead's area code, or the global OUTBOUND_CALLS_PAUSED kill\n// switch), the optimistic attempt/timestamp mark is reverted so the Lead\n// isn't penalized and gets picked up again on a later run without burning\n// one of its 4 attempts.\n//\n// All calls route through placeOutboundCall() (imported from main.ts), so\n// they automatically inherit every existing safety check: the internal\n// do-not-call blob list, quiet hours, California exclusion, and the pause\n// switch.\n\nimport { isOutboundPaused, placeOutboundCall } from \"./main.ts\";\n\n// 2026-07-29T18:24:00Z = 2:24pm ET (EDT, UTC-4) on the day this polling loop\n// became the sole caller — see the file-header comment above.\nconst FIRST_ATTEMPT_CUTOFF = \"2026-07-29T18:24:00Z\";\n\n// Non-fb/ig (e.g. website/\"Online\") leads: weekdays get only the narrow\n// 5pm-8pm US Eastern after-work window; weekends get the full approved\n// telemarketing hours (8am-9pm) since main.ts's isQuietHours() already\n// enforces that range in the recipient's own local time zone on every\n// call regardless of source. Uses the IANA timezone database (via Intl)\n// so this stays correct across DST changes rather than a hardcoded UTC\n// offset. fb/ig leads are unaffected by any of this.\nfunction isWithinWebsiteCallWindow(): boolean {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: \"America/New_York\",\n hour: \"2-digit\",\n hour12: false,\n weekday: \"short\",\n }).formatToParts(new Date());\n const etHour = Number(parts.find((p) => p.type === \"hour\")!.value);\n const etWeekday = parts.find((p) => p.type === \"weekday\")!.value;\n const isWeekend = etWeekday === \"Sat\" || etWeekday === \"Sun\";\n\n if (isWeekend) return etHour >= 8 && etHour < 21;\n return etHour >= 17 && etHour < 20;\n}\n\n// Some website-form leads get their phone number mis-mapped into a\n// zip/postal field instead of Phone/MobilePhone by tribecabeverage.com's\n// submission handler — confirmed 2026-07-30 across TWO different fields\n// depending on the submission: this org's custom Zip_Code__c (\"Zip Code\"),\n// and separately the standard compound Address field's postalCode\n// (e.g. Julieth Rodríguez, Lead 00QPm00001NPax2MAD: Phone/MobilePhone\n// blank, Zip_Code__c blank, but Address.postalCode = \"8458666792\" - her\n// actual number, just misfiled). FLS access to both was only just granted\n// to this integration user, so includeZipFields lets buildSoql/the\n// caller degrade gracefully: try with them, and if Salesforce ever\n// rejects a field again (access revoked, org changes), retry without\n// rather than breaking calling entirely.\n// Never-yet-called leads (Status = 'New') are always prioritized ahead of\n// follow-up attempts (Status = 'Robocalled') within a run, since a fast\n// first response matters more than a prompt Nth follow-up. SOQL has no\n// CASE-expression ORDER BY, so this relies on 'New' sorting alphabetically\n// before 'Robocalled' - if a third eligible Status value is ever added to\n// the WHERE clause above, this ordering will need an explicit rework\n// rather than assuming alphabetical order still matches priority.\nfunction buildSoql(includeZipFields: boolean): string {\n const companyClause = isWithinWebsiteCallWindow()\n ? \"\" // within the applicable window (see isWithinWebsiteCallWindow) - any Company is eligible\n : \"AND (Company = 'fb' OR Company = 'ig') \";\n const zipSelect = includeZipFields ? \", Zip_Code__c, Address\" : \"\";\n return `\n SELECT Id, Name, Phone, MobilePhone, Status, LeadSource, Title, Company,\n AI_Call_Attempts__c, AI_Call_Last_Attempt__c${zipSelect}\n FROM Lead\n WHERE DoNotCall = false\n AND (Status = 'New' OR Status = 'Robocalled')\n AND (Title = 'True' OR Title = '1')\n ${companyClause}AND (\n ((AI_Call_Attempts__c = null OR AI_Call_Attempts__c = 0) AND CreatedDate > ${FIRST_ATTEMPT_CUTOFF})\n OR (AI_Call_Attempts__c = 1 AND AI_Call_Last_Attempt__c < LAST_N_DAYS:1)\n OR (AI_Call_Attempts__c = 2 AND AI_Call_Last_Attempt__c < LAST_N_DAYS:2)\n OR (AI_Call_Attempts__c = 3 AND AI_Call_Last_Attempt__c < LAST_N_DAYS:2)\n )\n ORDER BY Status ASC, CreatedDate ASC\n `.replace(/\\s+/g, \" \").trim();\n // Note: the old \"(Phone != null OR MobilePhone != null OR ...)\" SQL-level\n // filter was dropped in favor of checking phone/zip-fallback validity in\n // the per-lead loop below (normalizeToE164) - the compound Address\n // field's postalCode can't be reliably filtered in a WHERE clause via\n // this proxy, so leads are pulled in more broadly and rejected in code\n // instead. MAX_CALLS_PER_RUN still caps actual calls placed either way.\n}\n\ntype Lead = {\n Id: string;\n Name?: string;\n Phone?: string | null;\n MobilePhone?: string | null;\n Zip_Code__c?: string | null;\n Address?: { postalCode?: string | null } | null;\n Status?: string;\n LeadSource?: string;\n Title?: string;\n Company?: string;\n AI_Call_Attempts__c?: number | null;\n AI_Call_Last_Attempt__c?: string | null;\n};\n\nfunction sfCreds(): { url: string; key: string } {\n const url = Deno.env.get(\"SALESFORCE_AGENT_URL\");\n const key = Deno.env.get(\"SALESFORCE_AGENT_KEY\");\n if (!url || !key) throw new Error(\"Missing SALESFORCE_AGENT_URL/SALESFORCE_AGENT_KEY env vars\");\n return { url, key };\n}\n\nasync function sfQuery(soql: string): Promise {\n const { url, key } = sfCreds();\n const res = await fetch(`${url}?key=${encodeURIComponent(key)}&q=${encodeURIComponent(soql)}`);\n const data = await res.json().catch(() => ({}));\n if (!res.ok || data?.error) throw new Error(`SOQL query failed: ${res.status} ${JSON.stringify(data)}`);\n return data.records ?? [];\n}\n\nasync function sfUpdateLead(id: string, fields: Record): Promise {\n const { url, key } = sfCreds();\n const res = await fetch(`${url}?key=${encodeURIComponent(key)}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ sobject: \"Lead\", id, fields }),\n });\n const body = await res.json().catch(() => ({}));\n if (!res.ok || body?.error) throw new Error(`Lead update failed: ${res.status} ${JSON.stringify(body)}`);\n}\n\n// Leads come in with phone numbers in inconsistent formats (bare 10-digit,\n// 11-digit with leading 1, or already E.164) — placeOutboundCall requires\n// strict E.164.\nfunction normalizeToE164(raw: string | null | undefined): string | null {\n if (!raw) return null;\n const trimmed = raw.trim();\n if (/^\\+\\d{10,15}$/.test(trimmed)) return trimmed;\n const digits = trimmed.replace(/\\D/g, \"\");\n if (digits.length === 10) return `+1${digits}`;\n if (digits.length === 11 && digits.startsWith(\"1\")) return `+${digits}`;\n return null;\n}\n\n// Hard cap on how many leads get called in a single run, independent of how\n// many are actually eligible — keeps call volume predictable per poll.\nconst MAX_CALLS_PER_RUN = 4;\n\nexport default async function (_interval: Interval) {\n // This file's own fileType/schedule is never touched by the control\n // panel anymore — Val Town's interval active/paused toggle has no public\n // API (only file type does), so flipping type on/off left this polling\n // loop stuck paused after \"Resume\" more than once. Instead this stays a\n // permanently-live interval, and pausing/resuming works by flipping the\n // same outbound_calls_paused blob flag placeOutboundCall() already checks\n // — reliably settable via the API every time, with no hidden state.\n if (await isOutboundPaused()) {\n console.log(\"salesforce-lead-caller: outbound calling paused — skipping this run.\");\n return;\n }\n\n let leads: Lead[];\n try {\n leads = await sfQuery(buildSoql(true));\n } catch (err) {\n const msg = String(err);\n if (msg.includes(\"Zip_Code__c\") && msg.includes(\"INVALID_FIELD\")) {\n console.warn(\n \"salesforce-lead-caller: Zip_Code__c not visible to this integration user (FLS) — falling back to Phone/MobilePhone only this run.\",\n );\n try {\n leads = await sfQuery(buildSoql(false));\n } catch (err2) {\n console.error(\"salesforce-lead-caller: query failed:\", err2);\n return;\n }\n } else {\n console.error(\"salesforce-lead-caller: query failed:\", err);\n return;\n }\n }\n\n const toCall = leads.slice(0, MAX_CALLS_PER_RUN);\n if (leads.length > MAX_CALLS_PER_RUN) {\n console.log(\n `salesforce-lead-caller: ${leads.length} eligible lead(s) this run, capped to ${MAX_CALLS_PER_RUN} — deferring ${\n leads.length - MAX_CALLS_PER_RUN\n } to a later run.`,\n );\n } else {\n console.log(`salesforce-lead-caller: ${leads.length} eligible lead(s) this run.`);\n }\n\n for (const lead of toCall) {\n // normalizeToE164 only accepts values that reduce to exactly 10 or 11\n // digits (11 must start with \"1\"), so a genuine 5-digit or ZIP+4 zip\n // code is safely rejected here — the fallback only ever fires for a\n // Zip_Code__c/Address.postalCode value that's actually phone-shaped.\n //\n // Tries each candidate field in order and uses the first one that\n // actually normalizes, rather than just the first one that's non-empty\n // (fixed 2026-08-01 - Laura Rivera, Lead 00QPm00001NX6LsMAL: Phone was\n // \"86266824\", a truncated 8-digit garbage value - not blank, so the old\n // `lead.Phone || lead.MobilePhone || zipFallbackValue` short-circuited\n // on it and never tried Address.postalCode \"8626686924\", her real\n // number. A malformed-but-non-empty Phone was silently never falling\n // back at all.)\n const candidates: (string | null | undefined)[] = [\n lead.Phone,\n lead.MobilePhone,\n lead.Zip_Code__c,\n lead.Address?.postalCode,\n ];\n let phone: string | null = null;\n let usedFallbackValue: string | null = null;\n for (const candidate of candidates) {\n const normalized = normalizeToE164(candidate);\n if (normalized) {\n phone = normalized;\n if (candidate !== lead.Phone && candidate !== lead.MobilePhone) usedFallbackValue = candidate!;\n break;\n }\n }\n if (!phone) {\n console.error(\n `salesforce-lead-caller: skipping ${lead.Id} — no usable phone (Phone=${lead.Phone ?? \"null\"}, MobilePhone=${lead.MobilePhone ?? \"null\"}, Zip_Code__c=${lead.Zip_Code__c ?? \"null\"}, Address.postalCode=${lead.Address?.postalCode ?? \"null\"})`,\n );\n continue;\n }\n if (usedFallbackValue) {\n console.log(`salesforce-lead-caller: ${lead.Id} — Phone/MobilePhone unusable, using \"${usedFallbackValue}\" (Zip_Code__c/Address) as phone`);\n }\n\n const prevAttempts = lead.AI_Call_Attempts__c ?? 0;\n const prevLastAttempt = lead.AI_Call_Last_Attempt__c ?? null;\n const nextAttempt = prevAttempts + 1;\n const nowIso = new Date().toISOString();\n\n try {\n // Mark attempted BEFORE calling — prevents double-dialing if this\n // interval overlaps a slow-to-complete batch.\n await sfUpdateLead(lead.Id, {\n AI_Call_Attempts__c: nextAttempt,\n AI_Call_Last_Attempt__c: nowIso,\n });\n } catch (err) {\n console.error(`salesforce-lead-caller: failed to mark ${lead.Id} attempted, skipping this run:`, err);\n continue;\n }\n\n const result = await placeOutboundCall(phone, {\n source: \"salesforce\",\n company: lead.Company,\n callerName: lead.Name,\n leadId: lead.Id,\n attempt: nextAttempt,\n });\n\n if (result.ok) {\n console.log(`salesforce-lead-caller: placed attempt ${nextAttempt} to Lead ${lead.Id} (${result.callSid})`);\n // Mark Robocalled as soon as a call is actually placed, regardless of\n // outcome (voicemail, no-answer, or a real conversation) — main.ts's\n // later outcome-specific writes (AI_Call_Status__c, etc.) still apply\n // on top of this once the call resolves.\n await sfUpdateLead(lead.Id, { Status: \"Robocalled\" }).catch((err) =>\n console.error(`salesforce-lead-caller: failed to mark ${lead.Id} Robocalled:`, err)\n );\n continue;\n }\n\n const isPermanentSkip = result.status === \"skipped\" &&\n (result.reason.includes(\"do-not-call\") || result.reason.includes(\"California\"));\n\n if (isPermanentSkip) {\n console.log(`salesforce-lead-caller: ${lead.Id} permanently skipped - ${result.reason}`);\n if (result.reason.includes(\"do-not-call\")) {\n await sfUpdateLead(lead.Id, { AI_Call_Status__c: \"DNC Requested\", DoNotCall: true }).catch((err) =>\n console.error(`salesforce-lead-caller: failed to sync DNC for ${lead.Id}:`, err)\n );\n }\n continue;\n }\n\n // Transient (quiet hours for this lead's area code / global pause /\n // Twilio error) — revert the optimistic mark so this lead isn't\n // penalized and gets picked up again on a later run without losing one\n // of its 4 attempts.\n console.log(\n `salesforce-lead-caller: deferring ${lead.Id} (${result.status}: ${result.reason}) — reverting attempt mark`,\n );\n await sfUpdateLead(lead.Id, {\n AI_Call_Attempts__c: prevAttempts,\n AI_Call_Last_Attempt__c: prevLastAttempt,\n }).catch((err) => console.error(`salesforce-lead-caller: failed to revert attempt mark for ${lead.Id}:`, err));\n }\n}\n","label",[135],"bd828281-59ff-41aa-9187-2296c1135248",["D",1788275772409],318,[28],"1b431eda-8e4d-4ddc-a5cc-dba3c34b7c91","inbox.ts","e1444430-8925-11f1-ab69-1607ee4eb77e",505,["D",1786625138528],31,"email","import { email } from \"https://esm.town/v/std/email\";\nimport { GoogleGenerativeAI } from \"npm:@google/generative-ai\";\nimport { MODEL, OWNER_SMS_SYSTEM_PROMPT, SMS_TOOLS, runSmsTool } from \"./main.ts\";\n\nfunction extractAddress(from: string): string {\n const match = from.match(/<([^>]+)>/);\n return (match ? match[1] : from).trim().toLowerCase();\n}\n\nconst EMAIL_SYSTEM_PROMPT = OWNER_SMS_SYSTEM_PROMPT.replace(\n \"reachable by text message\",\n \"reachable by email\",\n).replace(\n \"The owner is texting you directly\",\n \"The owner is emailing you directly\",\n);\n\nexport default async function (e: Email) {\n const allowed = (Deno.env.get(\"OWNER_EMAILS\") ?? \"\")\n .split(\",\")\n .map((s) => s.trim().toLowerCase())\n .filter(Boolean);\n\n const sender = extractAddress(e.from);\n if (!allowed.includes(sender)) {\n console.log(`/inbox: ${e.from} not in OWNER_EMAILS — ignoring`);\n return;\n }\n\n const instruction = (e.text ?? e.subject ?? \"\").trim();\n if (!instruction) {\n console.log(\"/inbox: authorized sender, but no readable body/subject.\");\n return;\n }\n console.log(`/inbox: authorized instruction from ${e.from}: ${instruction}`);\n\n const geminiKey = Deno.env.get(\"GEMINI_API_KEY\");\n if (!geminiKey) {\n await email({ to: sender, subject: `Re: ${e.subject ?? \"\"}`, text: \"Agent isn't configured — missing GEMINI_API_KEY.\" });\n return;\n }\n\n const genAI = new GoogleGenerativeAI(geminiKey);\n const model = genAI.getGenerativeModel({\n model: MODEL,\n systemInstruction: EMAIL_SYSTEM_PROMPT,\n tools: SMS_TOOLS,\n });\n\n // Only ONE Gemini call is made (to decide which tool(s) to run). We then email\n // the tool's raw output directly rather than making a second Gemini call to\n // \"polish\" it into prose — that second round trip is what was silently hanging\n // past Val Town's 60s free-tier execution ceiling. Raw tool output here is\n // already human-readable, so this trades a little polish for reliability.\n const TIMEOUT_MS = 20_000;\n const work = (async (): Promise => {\n const chat = model.startChat();\n const response = await chat.sendMessage(instruction);\n const calls = response.response.functionCalls();\n if (!calls || calls.length === 0) {\n return response.response.text().trim() || \"No response generated.\";\n }\n const outputs: string[] = [];\n for (const call of calls) {\n console.log(`/inbox: tool call ${call.name}`, JSON.stringify(call.args));\n const output = await runSmsTool(call.name, (call.args as Record) ?? {});\n console.log(`/inbox: tool result: ${output.slice(0, 300)}`);\n outputs.push(output);\n }\n return outputs.join(\"\\n\\n\");\n })();\n const timeout = new Promise((resolve) =>\n setTimeout(\n () =>\n resolve(\n \"That action may have gone through, but the response timed out on my end (e.g. a call may have been placed). Try 'list recent calls' to check.\",\n ),\n TIMEOUT_MS,\n )\n );\n\n let replyText: string;\n try {\n replyText = await Promise.race([work, timeout]);\n } catch (err) {\n console.error(\"/inbox: agent failed:\", err);\n replyText = `Sorry, that failed on my end: ${err}`;\n }\n\n // Free-tier Val Town accounts can only send email to the account owner's own\n // address — any explicit `to` (even the same address that wrote in) is\n // rejected. Omitting `to` lets std/email default to the owner's address.\n // replyTo points back at this val's own inbox address so hitting \"Reply\" in\n // an email client addresses the next message here instead of Val Town's\n // generic notifications@valtown.email sender.\n try {\n await email({\n subject: `Re: ${e.subject ?? \"Sales call agent\"}`,\n text: replyText,\n replyTo: \"Tribeca_Rep-e1444430892511f1ab691607ee4eb77e@valtown.email\",\n });\n console.log(\"/inbox: reply sent to val owner's default address\");\n } catch (err) {\n console.error(\"/inbox: sending reply email failed:\", err);\n }\n}\n",[151],"9145e0c0-111e-48d2-b955-c52edd7f2d81","control.ts","85f1f910-8dd0-11f1-8d42-1607ee4eb77e",470,["D",1786023488511],18,"// Pause/Resume control panel — deliberately its OWN file, separate from\n// main.ts. main.ts is one of the three files \"Pause everything\" turns off\n// (salesforce-lead-caller.ts, main.ts, inbox.ts), so if these buttons lived\n// on main.ts's /dashboard page, pausing would also take down the very page\n// the Resume button lives on. This file is never touched by pause/resume,\n// so it stays reachable no matter what state the other three are in.\n//\n// Uses Val Town's own REST API to change file types, authenticated via a\n// Personal Access Token the account owner created at val.town/settings/api\n// and stored as VALTOWN_API_TOKEN. (The automatic Deno.env.get(\"valtown\")\n// binding every val gets was tried first but turned out to be\n// insufficiently scoped — it authenticates fine but 403s on writes.)\n//\n// Known gap: the public API can change a file's TYPE but has no endpoint\n// for an interval's paused/active schedule state (confirmed against\n// https://api.val.town/openapi.json — no interval/cron schema exists at\n// all). Flipping salesforce-lead-caller.ts's type off and back to\n// \"interval\" left its underlying schedule stuck showing Paused in Val\n// Town's UI more than once, requiring a manual \"Resume\" click there every\n// time — the type flip alone doesn't reliably restore it.\n//\n// Fix: salesforce-lead-caller.ts's fileType/schedule is no longer touched\n// here at all. It stays a permanently-live interval (fixed once manually\n// in Val Town's UI), and pause/resume for it works instead through the\n// outbound_calls_paused blob flag below, which placeOutboundCall() (and\n// salesforce-lead-caller.ts itself) check on every run — a flag is always\n// reliably settable via the API, unlike the interval's hidden active state.\n\n// Val Town blob storage turned out to be scoped per independently-deployed\n// file, not per val (confirmed 2026-08-06 — see main.ts's setOutboundPaused\n// comment). Calling blob.setJSON directly from THIS file would write to a\n// scope only this file can ever read back — so pause/resume go through\n// main.ts's exported setter/getter instead, which always run in main.ts's\n// own scope regardless of which file calls them.\nimport { setOutboundPaused } from \"./main.ts\";\n\nconst THIS_VAL_ID = \"87b7f315-3ae0-4b4d-a5c9-ea08f8fffa3b\"; // Tribeca_Rep/tribeca-outbound-sales-call\n\nconst PAUSE_RESUME_FILES: { path: string; liveType: \"email\" | \"http\" }[] = [\n { path: \"inbox.ts\", liveType: \"email\" },\n { path: \"main.ts\", liveType: \"http\" },\n];\n\nasync function setFileType(path: string, type: string): Promise<{ ok: boolean; error?: string }> {\n // VALTOWN_API_TOKEN (the first token created) 403s on writes — insufficient\n // scope. VALTOWN_API_TOKEN_2 has explicit full read/write permissions.\n const token = Deno.env.get(\"VALTOWN_API_TOKEN_2\");\n if (!token) return { ok: false, error: \"Missing VALTOWN_API_TOKEN_2 env var\" };\n const res = await fetch(\n `https://api.val.town/v2/vals/${THIS_VAL_ID}/files?path=${encodeURIComponent(path)}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ type }),\n },\n );\n if (!res.ok) {\n const body = await res.text().catch(() => \"\");\n return { ok: false, error: `${res.status} ${body}` };\n }\n return { ok: true };\n}\n\nfunction checkKey(req: Request): boolean {\n const expectedKey = Deno.env.get(\"DASHBOARD_SECRET\");\n const providedKey = new URL(req.url).searchParams.get(\"key\");\n return !!expectedKey && providedKey === expectedKey;\n}\n\nasync function pauseAll(): Promise> {\n const results: Record = {};\n for (const f of PAUSE_RESUME_FILES) {\n const r = await setFileType(f.path, \"script\");\n results[f.path] = r.ok ? \"paused\" : `FAILED: ${r.error}`;\n }\n await setOutboundPaused(true);\n results[\"salesforce-lead-caller.ts\"] = \"paused (outbound_calls_paused flag set — stays a live interval, just no-ops every run)\";\n return results;\n}\n\nasync function resumeAll(): Promise> {\n const results: Record = {};\n for (const f of PAUSE_RESUME_FILES) {\n const r = await setFileType(f.path, f.liveType);\n results[f.path] = r.ok ? `restored to ${f.liveType}` : `FAILED: ${r.error}`;\n }\n await setOutboundPaused(false);\n results[\"salesforce-lead-caller.ts\"] = \"resumed (outbound_calls_paused flag cleared)\";\n return results;\n}\n\nfunction escapeHtml(s: string): string {\n return s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (!checkKey(req)) {\n return new Response(\"Unauthorized — append ?key=... with the dashboard access key to this URL.\", {\n status: 401,\n headers: { \"Content-Type\": \"text/plain\" },\n });\n }\n\n if (req.method === \"POST\") {\n const action = url.searchParams.get(\"action\");\n if (action === \"pause\") {\n return Response.json({ status: \"done\", results: await pauseAll() });\n }\n if (action === \"resume\") {\n return Response.json({ status: \"done\", results: await resumeAll() });\n }\n return Response.json({ error: \"Unknown action\" }, { status: 400 });\n }\n\n const key = url.searchParams.get(\"key\")!;\n const html = `\n\n\n \n TriBeCa Beverage — Control Panel\n \n\n\n

TriBeCa Beverage — Control Panel

\n Pauses/resumes the outbound calling system (salesforce-lead-caller.ts, main.ts, inbox.ts).\n This page lives in its own file specifically so it stays reachable even when everything else is paused.\n

\n ← Back to call activity dashboard\n (won't load while main.ts is paused)\n

\n \n \n

\n \n\n`;\n return new Response(html, { headers: { \"Content-Type\": \"text/html\" } });\n}\n","tribeca-control-panel",[160],"pulls","branches",1,"forks","envVars",{"_176":178,"_179":62},"connections",{"_176":62,"_177":62},"count","unfilledCount",19,"emptyCount",{"_43":159,"_32":160,"_30":161,"_137":-5,"_41":42,"_40":162,"_139":58,"_38":194,"_13":164,"_33":34,"_35":165,"_24":25,"_144":166,"_185":195,"_27":196},{"_43":150,"_32":151,"_30":152,"_137":-5,"_41":42,"_40":153,"_139":58,"_38":191,"_13":155,"_33":156,"_35":157,"_24":25,"_144":-5,"_185":192,"_27":193},{"_43":146,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":188,"_13":148,"_33":34,"_35":37,"_24":25,"_144":45,"_185":189,"_27":190},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":58,"_38":184,"_13":141,"_33":142,"_35":143,"_24":25,"_144":-5,"_185":186,"_27":187},["D",1786026710807],"children",[],[135],["D",1788275772409],[],[28],["D",1786625138528],[],[151],["D",1786023488511],[],[160],["D",1784848264718],["D",1789473745358],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_127":235,"_236":237,"_238":239,"_240":25,"_241":25,"_242":25,"_243":58,"_244":-5,"_245":-7,"_246":-7,"_247":62,"_248":25,"_249":25,"_250":-5,"_251":25,"_252":25,"_253":25,"_254":-5},"ENV",{"_206":207,"_208":209,"_210":89,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v511