[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_349":350,"_351":352},"routes/_app.x.$handle.$name",{"_99":98,"_32":44,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",116,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","NOTES-v1.4.md","latestPath","fileId","7fc16eb4-8e83-11f1-bea8-1607ee4eb77e","name","fileType","content","# NOTES — v1.4, 2 August 2026\n\nWhy the v1.4 changes exist. Moved out of main.ts because val.town caps a single file at 80,000\ncharacters and the reasoning was worth more than the space it cost inline.\n\nEvery item below came from a 14-agent adversarial pre-mortem (7 lenses, each finding handed to an\nindependent refuter: 62 raised, 7 killed, 55 survived). These are the six that were fixed.\n\n---\n\n## R19b — due-first filtering (the real quota fix)\n\n---- v1.4 (2 Aug) — R19b: DUE-FIRST FILTERING. The real quota fix. -------------------------\nv1.3 fixed the enrolment scan. The adversarial refuter went further and was right: this loop\nstill made three API calls per contact per run (contact, opportunities, conversations) plus a\ndeliberate 120ms pace. At one test contact that is nothing. At backlog scale it is ~9,600\nrequests and ~45 minutes per run — past every val.town execution timeout and past GHL's daily\ncap, and GHL answers sustained overload with 401/403, so the engine would have looked\ncredential-broken while quietly starving.\n\nThe fix costs nothing because the answer is already in the blob: isDue() and the sequence\noffsets are pure functions of state. If a contact's next message is not due, no send can\nhappen this run, so there is no reason to ask the CRM anything about them. On a 12-touch,\n3-week path roughly 1-2% of a population is due on any given tick — so per-run cost drops\nfrom O(enrolled) to O(due).\n\nTwo deliberate safety valves, because \"cheaper\" must never mean \"blinder\":\n1. SAFETY_SWEEP_HOURS — every contact still gets a full check at least once a day even when\nnothing is due, so exits (opted out, became a customer, booked) never go stale for long.\n2. Anyone with no lastCheckedAt, or in a status this shortcut does not model, falls through\nto the full check. The skip is opt-in per known-safe case, not a default.\n\n---\n\n## R21 — reply detection was blind to any outbound after the reply\n\n---- v1.4 (2 Aug) — R21: an outbound message used to hide a reply completely ----------------\nThe adversarial pass found the hole and it is a real one on THIS account. This reads a single\ndenormalised field on the newest conversation. Chloe answers the phone, Ava answers Facebook and\nInstagram, and 165 published workflows send things — so a customer can reply, get an automated\noutbound seconds later, and the direction field flips to \"outbound\". The engine then reads \"no\nreply\" and carries on messaging somebody who is mid-conversation with the business.\n\nunreadCount is the second, independent signal: GHL increments it on inbound and only clears it\nwhen a human opens the thread. An outbound does NOT clear it. So an unread thread means somebody\nwrote in and nobody has looked — which is exactly the state that must block a send, whatever the\nlast message happened to be. Verified present on 25/25 live conversations, 2 Aug.\n\n---\n\n## R22 — paused_reply had no exit\n\n---- v1.4 (2 Aug) — R22: paused_reply had no exit --------------------------------------\nReplying is engagement — it is the outcome the whole sequence exists to produce. But a\npaused contact stayed paused forever unless a human edited the blob by hand, which nobody\nwas ever going to do. So the most engaged leads quietly became the ones nothing happened to,\nand they sat in the \"active\" count making the dashboard look busier than the business was.\n\nNow: if a pause has gone this long with nobody acting on it, the engine raises a SECOND task\nsaying so, and lets them go rather than holding them in limbo. Deliberately does not resume\nthe sequence — someone wrote to this business and got no reply, and the fix for that is a\nperson, not another automated message.\n\n---\n\n## R23 — position is an array index\n\nv1.4 — R23: position is stored as an array index (lastMainStepSent). Insert a message\nat position 3 and every in-flight contact silently re-points at the wrong step —\nsomebody mid-sequence gets the wrong email and nothing anywhere says so. Recording the\nstep ID alongside the index does not fix the model, but it makes the drift DETECTABLE:\non the next send the engine compares what it is about to send against what it last\nsent, and says so in the journal if the sequence has moved underneath somebody.\n\n---\n\n# APPENDIX — build history moved out of main.ts\n\n---- v1.1 (27 Jul 2026, late) — five upgrades from the pre-deploy live review -------------------\nLive verification against the real account (verify-live-reads.py, read-only) found that the\ndiscovery tag \"nurture - puppy\" matches ZERO contacts — no spelling variant matches anyone, and\nthe newest 15 real New Lead contacts carry only \"messenger\"/campaign tags. There is no automatic\npuppy-vs-adult signal in the account's data model (age lives only in Ava's chat transcripts). So:\n\n1. ENROLLMENT IS HUMAN-GATED, by design not accident: applying the source tag to a contact IS the\nenrollment action (\"tag them and the system takes over\"). The New-Lead-stage requirement from\nspec §5's auto-discovery framing is deliberately DROPPED — under human gating the tag is\nexplicit intent, and silently ignoring a deliberately-tagged contact because their opportunity\nsits in a different stage would read as \"the system is broken.\" The safety guards that remain\n(already-customer, live-booking-already-exists, DND via rule 1 on first pass) block enrollment\noutcomes that would be WRONG, not merely unusual. Tag is env-overridable (TAG_SOURCE_SIGNAL).\n2. ENROLLMENT SURGE HOLD: normal operation is a few tags a day. If one run finds more than\nENROLL_SURGE_THRESHOLD (default 25) un-enrolled tag matches, someone bulk-tagged — the run\nenrolls NOBODY, journals the hold loudly, and keeps holding until a human either removes the\nbulk tags or sets ACKNOWLEDGE_SURGE=true. Already-enrolled contacts keep processing normally\nduring a hold. This is what protects a live account from a day-one accidental blast.\n3. SEND WINDOW: messages only go out 09:00–19:00 America/New_York (env: SEND_WINDOW_START_HOUR /\nSEND_WINDOW_END_HOUR), and SMS additionally never on Sunday (env SMS_SUNDAY_OK=true to allow;\nThe Dogs Spot is closed Sundays — a business texting on its day off invites replies nobody\nanswers). A due-but-out-of-window message simply waits for the next in-window run; offsets\nstill anchor to enteredAt, so nothing else shifts. Spec line ~222 explicitly accepted the\nlate-night case as a known limitation; this removes it.\n4. PAUSED CONTACTS GET A LIGHTWEIGHT PASS (v1.2 revision of v1.1's full skip): spec defines no\nresume path from paused_reply (a human reply permanently hands the conversation to a human —\nwriting sheet §4's own philosophy). v1.1 skipped paused contacts entirely; the adversarial\nreview showed that also disabled the DND/disqualified/became-customer rules for them, so a\npaused contact who later bought was never counted or retired. v1.2: paused contacts get a\n2-read safety pass (contact + opportunities; reply check pinned failed-closed so a send is\nstructurally impossible) — hard exits still fire, sends never do. Un-pausing is a deliberate\nhuman act: set the contact's status back to \"main\" in the puppy_state blob. Do NOT delete the\nentry — the puppy-path-v1 tag blocks re-discovery, so deletion just orphans them.\n5. ONE CALENDAR FETCH PER RUN, not per contact: the Pup Talk calendar holds 143 events in the\n±90d window (measured live) and the old shape re-downloaded all of them for every active\ncontact every run. Now fetched once per run and indexed by contactId.\nPlus: puppy_journal (append-only, capped 2000 rows — enrollments, sends, exits, pauses, holds,\nfailures) and puppy_summary (per-status counts, sends by step, exits by reason, booked-during-\npath, customers-during-path) — the numbers Kim's 30-day report needs, accumulated from day one,\nreadable by the watchdog. State hygiene: terminal entries untouched for 60+ days are pruned from\npuppy_state (their history stays in puppy_journal; the puppy-path-v1 tag still prevents\nre-enrollment).\n---\n\n# APPENDIX — long inline notes moved out of main.ts\n\nPUPPY PATH ENGINE v1.1 — nurture automation for The Dogs Spot's puppy leads (built 27 Jul 2026;\nv1.1 same evening — see the v1.1 addendum block below for what changed and why)\n\nWHY THIS EXISTS AS A VAL, NOT A NATIVE GHL WORKFLOW:\nGHL's public API cannot create or edit workflow steps — UI-only, no way around it — and the\nworkflow-builder UI itself was tested this session via browser automation and found completely\nunresponsive (clicks/scroll/keyboard, across multiple tabs and domains — not a one-off glitch).\nSo this is a val.town script driven by the GHL REST API instead, matching this account's own\nexisting idiom. Follows PupsClub-AutoSend-val-v2.1.ts's conventions closely on purpose: same j()\nfetch helper, same Deno.env.get-driven TEST_MODE-defaults-true pattern, same blob-based state,\nsame wrapped-in-try/catch-writes-a-state-blob-every-run structure, same per-recipient try/catch\ninside the send loop.\n\nHOW IT WORKS:\nOne state blob (puppy_state), keyed by contactId, tracks each enrolled contact's position in\neither the 8-message main sequence or one of two post-Pup-Talk branches (A: no-show, B: had the\ncall, didn't buy). Each cron run walks every contact currently in that state (plus, outside\nTEST_MODE, discovers new puppy-tagged leads to enroll) and re-evaluates a FIXED priority list of\nexit/branch rules (spec §5, rules 1-10 below, plus two additions flagged where they occur) top to\nbottom — first match wins. Only if nothing else matches does it fall through to \"send whatever's\nnext due.\" Every safety exit (DND, disqualified, became a customer, human reply pending) is\nchecked BEFORE a send is ever considered, every single run, for every contact, regardless of what\nstatus they were in a moment ago — that ordering is the whole safety model.\n\nHARD SAFETY INVARIANT (non-negotiable — Amir's written promise to Kim: \"nothing gets switched on in\nthe meantime\"):\nTEST_MODE defaults true. When true, this script never looks at a real contact at all — discovery\nis skipped outright, and the only contact it ever touches is one fixed dummy resolved via\ncontacts/upsert (firstName \"ZZTEST\", lastName \"PuppyPath-Dummy\", email aizhigitovamir@gmail.com —\nAmir's own inbox, safe to actually deliver to). Going live is a deliberate later step someone takes\non purpose (flip TEST_MODE=false as an env var) — not something that happens by forgetting a flag.\n\nGUARDRAILS:\n- \"[TEST] \" prefix on every subject line / SMS body while TEST_MODE, so a real send during testing\nis unmistakable — matches the PupsClub val's own convention exactly. Deliberately kept OUT of the\nemail body itself so the client-approved copy stays byte-for-byte verbatim; the subject prefix\nalone is enough to make a test send unmistakable without touching approved wording.\n- Per-contact try/catch inside the main loop (matches the PupsClub val's per-recipient try/catch)\n— one contact's transient API failure doesn't block the rest of that run's contacts.\n- State is written AFTER a successful send, not before — deliberately the opposite of the PupsClub\nval's \"write state before sending\" choice, because the failure mode being defended against is\ndifferent here. That script defends against a duplicate blast to many recipients from an\noverlapping run (one session opening, many people to text). This one processes contacts one at a\ntime in a single sequential loop, so the real risk is a step being marked \"sent\" and then never\nactually going out because the network call failed. A duplicate nurture message on a rare retry\nis a minor annoyance; a silently-skipped one is a message someone was promised and never got.\n- Exit/branch priority order is fixed and total (rules 1-10 below) — every contact is walked\nthrough the SAME order every run, so DND / disqualified / became-a-customer / human-reply always\noutrank a scheduled send, never the other way round.\n\nTWO GENUINE GAPS FOUND WHILE BUILDING THIS, NOT WORKED AROUND, FLAGGED HERE ON PURPOSE:\n1. GET /conversations/search — the call rule 5 (inbound-reply detection) needs — returns 401 \"The\ntoken is not authorized for this scope\" on this account's current PIT token. Tested directly\nthis session: with and without contactId, on both 2021-07-28 and 2021-04-15 API versions, all\nfour combinations 401 identically. This means reply-pause (arguably the single most\nsafety-critical rule in the whole spec) cannot actually run live with today's credential.\ngetReplyStatus() below fails CLOSED on this — it does not fabricate a \"no reply\" result, it\nreports conversationCheckFailed=true, and decideAction() treats that as \"do not send anything to\nthis contact this run,\" full stop (see rule 5 below). Practical consequence: AS CURRENTLY\nCREDENTIALED, this engine cannot send anything at all outside TEST_MODE, because the reply-check\nalways fails closed for every contact — which is an extra, accidental safety margin on top of\nthe TEST_MODE flag, but it is a real gap that needs a broader-scoped PIT token before this is\nactually USEFUL live, not just safe. Side note: inspect-dummy.sh's own conversations/search call\nwould silently render this exact 401 as \"(no conversation)\" — its error handling can't tell\n\"genuinely nothing sent\" apart from \"the API call itself failed.\" Worth fixing there too;\nflagged here since it surfaced while building this.\n2. The Pup Talk \"declined / not now\" outcome signal (rule 8) doesn't exist yet as its own thing.\nPer spec, this should key off the TDS-Declined tag being built for the separate front-desk\ntask-layer project (BUILD-CHECKLIST-UI.md). That tag did not exist as of the 26 Jul build\nchecklist (\"Settings -> Tags has no existing TDS-Bought, TDS-Declined, TDS-Nurture\"). Checked\nagain this session via contacts/search filtered by tag (contains_set operator, confirmed correct\nvia the account's own validation-error message listing valid operators) — zero contacts carry\nit, but that is a weak signal: a tag can exist in Settings -> Tags with nobody on it yet, and\nthis token cannot read Settings -> Tags directly (401, same scope gap as #1) to check for real.\nTreated as NOT CONFIRMED LIVE. PUP_TALK_DECLINED_TAG below is a clearly-named constant, not\ninvented behavior — wire the real value in once confirmed rather than guessing.\n\nState blobs: puppy_state (per-contact, keyed by contactId) · puppy_run_state (per-run report,\nmirrors pups2_state in the PupsClub val) · puppy_last_error (same pattern) · puppy_journal\n(append-only event history, v1.1) · puppy_summary (aggregate stats rebuilt every run, v1.1).\n\nBuild history (v1.1 addenda, v1.2 hardening, the two gaps found while building) moved to\nNOTES-v1.4.md when this file hit val.town's 80,000-character ceiling. Nothing was deleted.\n\n---\n\n---- v1.4 (2 Aug) — OPT-OUT FURNITURE, appended at render time, never written into the copy ----\nThe adversarial pass checked the shipped templates and found the thing everyone had assumed was\nthere: not one of the five SMS says STOP, and not one of the seven emails carries an unsubscribe\nline. An earlier risk register claimed opt-out wording was present. It was not. Retracted.\n\nThis is appended by the renderer rather than edited into puppy-messages.ts on purpose, for three\nreasons. It keeps the client-approved wording byte-for-byte, so what Kim signs off is what she\nwrote. It cannot be forgotten on a new path — every message rendered by this engine carries it,\nincluding the five paths whose copy has not been written yet. And it is one line to change if the\nwording ever needs to.\n\nThe SMS line is deliberately short: at 39 characters it costs a fraction of a segment, and the\n320-char ceiling is checked against the FINAL rendered body, furniture included, so a message can\nnever be pushed over the limit by the thing that makes it compliant.\n\n---\n\nRule 4b — booked something else entirely (Free Training Day). NOT an explicit numbered rule in\nspec §5 (which only names Customer/Won-Paid/monetaryValue for rule 4), but the WRITING SHEET's §4\nexits are unambiguous: \"If they book anything else... A paid service, a Free Training Day, walking\nin and booking at the desk - any of it ends this sequence.\" Free Training Day is its own pipeline\nstage with no monetary value (it's free), so spec's literal rule 4 wording doesn't actually catch\nit — a real gap between the spec and the writing sheet's own stated intent, not a content\ndisagreement (spec says content loses to the writing sheet, mechanism wins to the spec; this is\nneither — it's a rule the spec's enumeration simply left out). Resolved here rather than left\nbroken. This also happens to be the only sensible use for the \"done_booked\" terminal status the\nstate type declares but no other rule in §5 ever assigns.\n\n---\n\nRule 6b (v1.2) — REBOOKED while in a branch. Found independently by the adversarial review and the\nfuzz round (concrete trace: contact no-shows -> branch_a -> books a new Pup Talk two weeks out ->\nv1.1 still sent branch_a-2 \"Let's find another time\" for an appointment they'd already replaced,\nthen went terminal and stopped watching the new appointment entirely). If a live booking exists\nwhose start time is NEWER than the branch anchor (i.e., it's a different, later appointment than\nthe one that put them in the branch), the branch conversation is obsolete: go back to\nawaiting_appt_outcome and track the new appointment's outcome like any other. Rules 7/8 then\nre-fire off the NEW appointment — including a second no-show correctly re-entering branch_a with\nthe new anchor.\n\n---\n\n---- v1.3 (2 Aug 2026) — R19: THE ENROLMENT-SCAN QUOTA FIX -------------------------------------\nRaised by the adversarial pre-mortem and NOT refuted. The enrolment loop called\ngetOpenOpportunities() once per candidate. With one or two human-tagged candidates that is\nnothing; the day the dormant backlog is released it is one API call per candidate per run, on top\nof the walk itself, and GHL answers sustained overload with 401/403 rather than 429 — so the\nengine would not merely slow down, it would look credential-broken while quietly starving.\n\nThe fix is the same shape as the calendar index directly below, which already solved this problem\nonce for appointments: fetch the exit-triggering stages ONCE per run and index them by contactId.\nA candidate absent from the index has no disqualifying opportunity, which is the only question\nenrolment eligibility actually asks. Cost goes from O(candidates) to O(exit-stage size) — and\nthose stages are small, because the pipeline's own census puts Customer / Won-Paid / Onboarding\nat zero and Free Training Day and Disqualified in the low hundreds.\n\nDeliberately NOT applied to already-enrolled contacts: their per-contact read also has to catch a\nmonetaryValue > 0 opportunity sitting in any stage at all, and that population is bounded by the\nsurge guard, so it was never the blowout. Precision beats a clever sweep here.\n\n---\n\nField name NOT independently proven this session (the 401 blocked confirming it) — trying the\nconventional GHL field defensively. v1.2 tightened two ways after the adversarial round:\n1. STRICT direction validation — only the literal strings \"inbound\"/\"outbound\" count as a\nreadable signal. The old `direction == null` check let a falsy-but-not-nullish value (e.g.\nan empty string on a malformed conversation record) slip through as \"confirmed no reply\" —\nthe exact unrecognized-shape case fail-closed exists to catch.\n2. TEMPORAL scoping — an inbound message that predates this contact's enrollment is a historic\nconversation someone already handled (e.g. a \"do you do daycare?\" text from months ago), not\na reply to this sequence. Without this, such contacts would pause permanently before their\nfirst message ever sent. If no usable timestamp field exists on the record, we conservatively\ntreat the inbound as blocking (pause) rather than ignoring it. Timestamp field names are\nbest-effort until the scope unblocks and the real shape can be confirmed live.\n\n---\n\nv1.2 — paused_reply contacts get a LIGHTWEIGHT safety pass instead of v1.1's full skip.\nThe adversarial round showed the full skip quietly disabled rules 1/3/4 for paused contacts:\nsomeone who replied and later BOUGHT stayed \"paused_reply\" forever, was never counted as a\ncustomer, and never aged into pruning. Now: two cheap reads (contact + opportunities), no\nreply/no-calendar calls, conversationCheckFailed pinned true so rule 5 structurally blocks\nany send — only the hard-exit rules can fire. Un-pausing for real remains a human act: set\nthe contact's status field back to \"main\" in the puppy_state blob (do NOT delete the entry —\nthe puppy-path-v1 tag blocks re-discovery, so a deleted entry just orphans them; header docs\nupdated accordingly).\n\n---\n\n---- booking-link shortener (spec §7) ---------------------------------------------------------\nPurpose: message copy references one short, stable link; if the real booking URL ever changes, one\nline changes (REAL_BOOKING_URL above) instead of eight message templates.\n\nDeployment note, honestly flagged rather than guessed at: a single val.town val has one default\nexport, which is this file's cron() entry point. Whether val.town's current UI can attach a second,\nHTTP trigger to a NAMED export (not the default) on the SAME val was not verified this session —\nVT_TOKEN was unavailable, so nothing could be deployed to check. If it can, wire this function up\ndirectly. If not, the fallback is a second, tiny val: two lines, importing REAL_BOOKING_URL from\nthis file and re-exporting a redirect as ITS default export. Either way this is a convenience, not a\ncritical system, exactly as spec §7 frames it — kept deliberately simple.","# NOTES — v1.4, 2 August 2026\n\nWhy the v1.4 changes exist. Moved out of main.ts because val.town caps a single file at 80,000\ncharacters and the reasoning was worth more than the space it cost inline.\n\nEvery item below came from a 14-agent adversarial pre-mortem (7 lenses, each finding handed to an\nindependent refuter: 62 raised, 7 killed, 55 survived). These are the six that were fixed.\n\n---\n\n## R19b — due-first filtering (the real quota fix)\n\n---- v1.4 (2 Aug) — R19b: DUE-FIRST FILTERING. The real quota fix. -------------------------\nv1.3 fixed the enrolment scan. The adversarial refuter went further and was right: this loop\nstill made three API calls per contact per run (contact, opportunities, conversations) plus a\ndeliberate 120ms pace. At one test contact that is nothing. At backlog scale it is ~9,600\nrequests and ~45 minutes per run — past every val.town execution timeout and past GHL's daily\ncap, and GHL answers sustained overload with 401/403, so the engine would have looked\ncredential-broken while quietly starving.\n\nThe fix costs nothing because the answer is already in the blob: isDue() and the sequence\noffsets are pure functions of state. If a contact's next message is not due, no send can\nhappen this run, so there is no reason to ask the CRM anything about them. On a 12-touch,\n3-week path roughly 1-2% of a population is due on any given tick — so per-run cost drops\nfrom O(enrolled) to O(due).\n\nTwo deliberate safety valves, because \"cheaper\" must never mean \"blinder\":\n1. SAFETY_SWEEP_HOURS — every contact still gets a full check at least once a day even when\nnothing is due, so exits (opted out, became a customer, booked) never go stale for long.\n2. Anyone with no lastCheckedAt, or in a status this shortcut does not model, falls through\nto the full check. The skip is opt-in per known-safe case, not a default.\n\n---\n\n## R21 — reply detection was blind to any outbound after the reply\n\n---- v1.4 (2 Aug) — R21: an outbound message used to hide a reply completely ----------------\nThe adversarial pass found the hole and it is a real one on THIS account. This reads a single\ndenormalised field on the newest conversation. Chloe answers the phone, Ava answers Facebook and\nInstagram, and 165 published workflows send things — so a customer can reply, get an automated\noutbound seconds later, and the direction field flips to \"outbound\". The engine then reads \"no\nreply\" and carries on messaging somebody who is mid-conversation with the business.\n\nunreadCount is the second, independent signal: GHL increments it on inbound and only clears it\nwhen a human opens the thread. An outbound does NOT clear it. So an unread thread means somebody\nwrote in and nobody has looked — which is exactly the state that must block a send, whatever the\nlast message happened to be. Verified present on 25/25 live conversations, 2 Aug.\n\n---\n\n## R22 — paused_reply had no exit\n\n---- v1.4 (2 Aug) — R22: paused_reply had no exit --------------------------------------\nReplying is engagement — it is the outcome the whole sequence exists to produce. But a\npaused contact stayed paused forever unless a human edited the blob by hand, which nobody\nwas ever going to do. So the most engaged leads quietly became the ones nothing happened to,\nand they sat in the \"active\" count making the dashboard look busier than the business was.\n\nNow: if a pause has gone this long with nobody acting on it, the engine raises a SECOND task\nsaying so, and lets them go rather than holding them in limbo. Deliberately does not resume\nthe sequence — someone wrote to this business and got no reply, and the fix for that is a\nperson, not another automated message.\n\n---\n\n## R23 — position is an array index\n\nv1.4 — R23: position is stored as an array index (lastMainStepSent). Insert a message\nat position 3 and every in-flight contact silently re-points at the wrong step —\nsomebody mid-sequence gets the wrong email and nothing anywhere says so. Recording the\nstep ID alongside the index does not fix the model, but it makes the drift DETECTABLE:\non the next send the engine compares what it is about to send against what it last\nsent, and says so in the journal if the sequence has moved underneath somebody.\n\n---\n\n# APPENDIX — build history moved out of main.ts\n\n---- v1.1 (27 Jul 2026, late) — five upgrades from the pre-deploy live review -------------------\nLive verification against the real account (verify-live-reads.py, read-only) found that the\ndiscovery tag \"nurture - puppy\" matches ZERO contacts — no spelling variant matches anyone, and\nthe newest 15 real New Lead contacts carry only \"messenger\"/campaign tags. There is no automatic\npuppy-vs-adult signal in the account's data model (age lives only in Ava's chat transcripts). So:\n\n1. ENROLLMENT IS HUMAN-GATED, by design not accident: applying the source tag to a contact IS the\nenrollment action (\"tag them and the system takes over\"). The New-Lead-stage requirement from\nspec §5's auto-discovery framing is deliberately DROPPED — under human gating the tag is\nexplicit intent, and silently ignoring a deliberately-tagged contact because their opportunity\nsits in a different stage would read as \"the system is broken.\" The safety guards that remain\n(already-customer, live-booking-already-exists, DND via rule 1 on first pass) block enrollment\noutcomes that would be WRONG, not merely unusual. Tag is env-overridable (TAG_SOURCE_SIGNAL).\n2. ENROLLMENT SURGE HOLD: normal operation is a few tags a day. If one run finds more than\nENROLL_SURGE_THRESHOLD (default 25) un-enrolled tag matches, someone bulk-tagged — the run\nenrolls NOBODY, journals the hold loudly, and keeps holding until a human either removes the\nbulk tags or sets ACKNOWLEDGE_SURGE=true. Already-enrolled contacts keep processing normally\nduring a hold. This is what protects a live account from a day-one accidental blast.\n3. SEND WINDOW: messages only go out 09:00–19:00 America/New_York (env: SEND_WINDOW_START_HOUR /\nSEND_WINDOW_END_HOUR), and SMS additionally never on Sunday (env SMS_SUNDAY_OK=true to allow;\nThe Dogs Spot is closed Sundays — a business texting on its day off invites replies nobody\nanswers). A due-but-out-of-window message simply waits for the next in-window run; offsets\nstill anchor to enteredAt, so nothing else shifts. Spec line ~222 explicitly accepted the\nlate-night case as a known limitation; this removes it.\n4. PAUSED CONTACTS GET A LIGHTWEIGHT PASS (v1.2 revision of v1.1's full skip): spec defines no\nresume path from paused_reply (a human reply permanently hands the conversation to a human —\nwriting sheet §4's own philosophy). v1.1 skipped paused contacts entirely; the adversarial\nreview showed that also disabled the DND/disqualified/became-customer rules for them, so a\npaused contact who later bought was never counted or retired. v1.2: paused contacts get a\n2-read safety pass (contact + opportunities; reply check pinned failed-closed so a send is\nstructurally impossible) — hard exits still fire, sends never do. Un-pausing is a deliberate\nhuman act: set the contact's status back to \"main\" in the puppy_state blob. Do NOT delete the\nentry — the puppy-path-v1 tag blocks re-discovery, so deletion just orphans them.\n5. ONE CALENDAR FETCH PER RUN, not per contact: the Pup Talk calendar holds 143 events in the\n±90d window (measured live) and the old shape re-downloaded all of them for every active\ncontact every run. Now fetched once per run and indexed by contactId.\nPlus: puppy_journal (append-only, capped 2000 rows — enrollments, sends, exits, pauses, holds,\nfailures) and puppy_summary (per-status counts, sends by step, exits by reason, booked-during-\npath, customers-during-path) — the numbers Kim's 30-day report needs, accumulated from day one,\nreadable by the watchdog. State hygiene: terminal entries untouched for 60+ days are pruned from\npuppy_state (their history stays in puppy_journal; the puppy-path-v1 tag still prevents\nre-enrollment).\n---\n\n# APPENDIX — long inline notes moved out of main.ts\n\nPUPPY PATH ENGINE v1.1 — nurture automation for The Dogs Spot's puppy leads (built 27 Jul 2026;\nv1.1 same evening — see the v1.1 addendum block below for what changed and why)\n\nWHY THIS EXISTS AS A VAL, NOT A NATIVE GHL WORKFLOW:\nGHL's public API cannot create or edit workflow steps — UI-only, no way around it — and the\nworkflow-builder UI itself was tested this session via browser automation and found completely\nunresponsive (clicks/scroll/keyboard, across multiple tabs and domains — not a one-off glitch).\nSo this is a val.town script driven by the GHL REST API instead, matching this account's own\nexisting idiom. Follows PupsClub-AutoSend-val-v2.1.ts's conventions closely on purpose: same j()\nfetch helper, same Deno.env.get-driven TEST_MODE-defaults-true pattern, same blob-based state,\nsame wrapped-in-try/catch-writes-a-state-blob-every-run structure, same per-recipient try/catch\ninside the send loop.\n\nHOW IT WORKS:\nOne state blob (puppy_state), keyed by contactId, tracks each enrolled contact's position in\neither the 8-message main sequence or one of two post-Pup-Talk branches (A: no-show, B: had the\ncall, didn't buy). Each cron run walks every contact currently in that state (plus, outside\nTEST_MODE, discovers new puppy-tagged leads to enroll) and re-evaluates a FIXED priority list of\nexit/branch rules (spec §5, rules 1-10 below, plus two additions flagged where they occur) top to\nbottom — first match wins. Only if nothing else matches does it fall through to \"send whatever's\nnext due.\" Every safety exit (DND, disqualified, became a customer, human reply pending) is\nchecked BEFORE a send is ever considered, every single run, for every contact, regardless of what\nstatus they were in a moment ago — that ordering is the whole safety model.\n\nHARD SAFETY INVARIANT (non-negotiable — Amir's written promise to Kim: \"nothing gets switched on in\nthe meantime\"):\nTEST_MODE defaults true. When true, this script never looks at a real contact at all — discovery\nis skipped outright, and the only contact it ever touches is one fixed dummy resolved via\ncontacts/upsert (firstName \"ZZTEST\", lastName \"PuppyPath-Dummy\", email aizhigitovamir@gmail.com —\nAmir's own inbox, safe to actually deliver to). Going live is a deliberate later step someone takes\non purpose (flip TEST_MODE=false as an env var) — not something that happens by forgetting a flag.\n\nGUARDRAILS:\n- \"[TEST] \" prefix on every subject line / SMS body while TEST_MODE, so a real send during testing\nis unmistakable — matches the PupsClub val's own convention exactly. Deliberately kept OUT of the\nemail body itself so the client-approved copy stays byte-for-byte verbatim; the subject prefix\nalone is enough to make a test send unmistakable without touching approved wording.\n- Per-contact try/catch inside the main loop (matches the PupsClub val's per-recipient try/catch)\n— one contact's transient API failure doesn't block the rest of that run's contacts.\n- State is written AFTER a successful send, not before — deliberately the opposite of the PupsClub\nval's \"write state before sending\" choice, because the failure mode being defended against is\ndifferent here. That script defends against a duplicate blast to many recipients from an\noverlapping run (one session opening, many people to text). This one processes contacts one at a\ntime in a single sequential loop, so the real risk is a step being marked \"sent\" and then never\nactually going out because the network call failed. A duplicate nurture message on a rare retry\nis a minor annoyance; a silently-skipped one is a message someone was promised and never got.\n- Exit/branch priority order is fixed and total (rules 1-10 below) — every contact is walked\nthrough the SAME order every run, so DND / disqualified / became-a-customer / human-reply always\noutrank a scheduled send, never the other way round.\n\nTWO GENUINE GAPS FOUND WHILE BUILDING THIS, NOT WORKED AROUND, FLAGGED HERE ON PURPOSE:\n1. GET /conversations/search — the call rule 5 (inbound-reply detection) needs — returns 401 \"The\ntoken is not authorized for this scope\" on this account's current PIT token. Tested directly\nthis session: with and without contactId, on both 2021-07-28 and 2021-04-15 API versions, all\nfour combinations 401 identically. This means reply-pause (arguably the single most\nsafety-critical rule in the whole spec) cannot actually run live with today's credential.\ngetReplyStatus() below fails CLOSED on this — it does not fabricate a \"no reply\" result, it\nreports conversationCheckFailed=true, and decideAction() treats that as \"do not send anything to\nthis contact this run,\" full stop (see rule 5 below). Practical consequence: AS CURRENTLY\nCREDENTIALED, this engine cannot send anything at all outside TEST_MODE, because the reply-check\nalways fails closed for every contact — which is an extra, accidental safety margin on top of\nthe TEST_MODE flag, but it is a real gap that needs a broader-scoped PIT token before this is\nactually USEFUL live, not just safe. Side note: inspect-dummy.sh's own conversations/search call\nwould silently render this exact 401 as \"(no conversation)\" — its error handling can't tell\n\"genuinely nothing sent\" apart from \"the API call itself failed.\" Worth fixing there too;\nflagged here since it surfaced while building this.\n2. The Pup Talk \"declined / not now\" outcome signal (rule 8) doesn't exist yet as its own thing.\nPer spec, this should key off the TDS-Declined tag being built for the separate front-desk\ntask-layer project (BUILD-CHECKLIST-UI.md). That tag did not exist as of the 26 Jul build\nchecklist (\"Settings -> Tags has no existing TDS-Bought, TDS-Declined, TDS-Nurture\"). Checked\nagain this session via contacts/search filtered by tag (contains_set operator, confirmed correct\nvia the account's own validation-error message listing valid operators) — zero contacts carry\nit, but that is a weak signal: a tag can exist in Settings -> Tags with nobody on it yet, and\nthis token cannot read Settings -> Tags directly (401, same scope gap as #1) to check for real.\nTreated as NOT CONFIRMED LIVE. PUP_TALK_DECLINED_TAG below is a clearly-named constant, not\ninvented behavior — wire the real value in once confirmed rather than guessing.\n\nState blobs: puppy_state (per-contact, keyed by contactId) · puppy_run_state (per-run report,\nmirrors pups2_state in the PupsClub val) · puppy_last_error (same pattern) · puppy_journal\n(append-only event history, v1.1) · puppy_summary (aggregate stats rebuilt every run, v1.1).\n\nBuild history (v1.1 addenda, v1.2 hardening, the two gaps found while building) moved to\nNOTES-v1.4.md when this file hit val.town's 80,000-character ceiling. Nothing was deleted.\n\n---\n\n---- v1.4 (2 Aug) — OPT-OUT FURNITURE, appended at render time, never written into the copy ----\nThe adversarial pass checked the shipped templates and found the thing everyone had assumed was\nthere: not one of the five SMS says STOP, and not one of the seven emails carries an unsubscribe\nline. An earlier risk register claimed opt-out wording was present. It was not. Retracted.\n\nThis is appended by the renderer rather than edited into puppy-messages.ts on purpose, for three\nreasons. It keeps the client-approved wording byte-for-byte, so what Kim signs off is what she\nwrote. It cannot be forgotten on a new path — every message rendered by this engine carries it,\nincluding the five paths whose copy has not been written yet. And it is one line to change if the\nwording ever needs to.\n\nThe SMS line is deliberately short: at 39 characters it costs a fraction of a segment, and the\n320-char ceiling is checked against the FINAL rendered body, furniture included, so a message can\nnever be pushed over the limit by the thing that makes it compliant.\n\n---\n\nRule 4b — booked something else entirely (Free Training Day). NOT an explicit numbered rule in\nspec §5 (which only names Customer/Won-Paid/monetaryValue for rule 4), but the WRITING SHEET's §4\nexits are unambiguous: \"If they book anything else... A paid service, a Free Training Day, walking\nin and booking at the desk - any of it ends this sequence.\" Free Training Day is its own pipeline\nstage with no monetary value (it's free), so spec's literal rule 4 wording doesn't actually catch\nit — a real gap between the spec and the writing sheet's own stated intent, not a content\ndisagreement (spec says content loses to the writing sheet, mechanism wins to the spec; this is\nneither — it's a rule the spec's enumeration simply left out). Resolved here rather than left\nbroken. This also happens to be the only sensible use for the \"done_booked\" terminal status the\nstate type declares but no other rule in §5 ever assigns.\n\n---\n\nRule 6b (v1.2) — REBOOKED while in a branch. Found independently by the adversarial review and the\nfuzz round (concrete trace: contact no-shows -> branch_a -> books a new Pup Talk two weeks out ->\nv1.1 still sent branch_a-2 \"Let's find another time\" for an appointment they'd already replaced,\nthen went terminal and stopped watching the new appointment entirely). If a live booking exists\nwhose start time is NEWER than the branch anchor (i.e., it's a different, later appointment than\nthe one that put them in the branch), the branch conversation is obsolete: go back to\nawaiting_appt_outcome and track the new appointment's outcome like any other. Rules 7/8 then\nre-fire off the NEW appointment — including a second no-show correctly re-entering branch_a with\nthe new anchor.\n\n---\n\n---- v1.3 (2 Aug 2026) — R19: THE ENROLMENT-SCAN QUOTA FIX -------------------------------------\nRaised by the adversarial pre-mortem and NOT refuted. The enrolment loop called\ngetOpenOpportunities() once per candidate. With one or two human-tagged candidates that is\nnothing; the day the dormant backlog is released it is one API call per candidate per run, on top\nof the walk itself, and GHL answers sustained overload with 401/403 rather than 429 — so the\nengine would not merely slow down, it would look credential-broken while quietly starving.\n\nThe fix is the same shape as the calendar index directly below, which already solved this problem\nonce for appointments: fetch the exit-triggering stages ONCE per run and index them by contactId.\nA candidate absent from the index has no disqualifying opportunity, which is the only question\nenrolment eligibility actually asks. Cost goes from O(candidates) to O(exit-stage size) — and\nthose stages are small, because the pipeline's own census puts Customer / Won-Paid / Onboarding\nat zero and Free Training Day and Disqualified in the low hundreds.\n\nDeliberately NOT applied to already-enrolled contacts: their per-contact read also has to catch a\nmonetaryValue > 0 opportunity sitting in any stage at all, and that population is bounded by the\nsurge guard, so it was never the blowout. Precision beats a clever sweep here.\n\n---\n\nField name NOT independently proven this session (the 401 blocked confirming it) — trying the\nconventional GHL field defensively. v1.2 tightened two ways after the adversarial round:\n1. STRICT direction validation — only the literal strings \"inbound\"/\"outbound\" count as a\nreadable signal. The old `direction == null` check let a falsy-but-not-nullish value (e.g.\nan empty string on a malformed conversation record) slip through as \"confirmed no reply\" —\nthe exact unrecognized-shape case fail-closed exists to catch.\n2. TEMPORAL scoping — an inbound message that predates this contact's enrollment is a historic\nconversation someone already handled (e.g. a \"do you do daycare?\" text from months ago), not\na reply to this sequence. Without this, such contacts would pause permanently before their\nfirst message ever sent. If no usable timestamp field exists on the record, we conservatively\ntreat the inbound as blocking (pause) rather than ignoring it. Timestamp field names are\nbest-effort until the scope unblocks and the real shape can be confirmed live.\n\n---\n\nv1.2 — paused_reply contacts get a LIGHTWEIGHT safety pass instead of v1.1's full skip.\nThe adversarial round showed the full skip quietly disabled rules 1/3/4 for paused contacts:\nsomeone who replied and later BOUGHT stayed \"paused_reply\" forever, was never counted as a\ncustomer, and never aged into pruning. Now: two cheap reads (contact + opportunities), no\nreply/no-calendar calls, conversationCheckFailed pinned true so rule 5 structurally blocks\nany send — only the hard-exit rules can fire. Un-pausing for real remains a human act: set\nthe contact's status field back to \"main\" in the puppy_state blob (do NOT delete the entry —\nthe puppy-path-v1 tag blocks re-discovery, so a deleted entry just orphans them; header docs\nupdated accordingly).\n\n---\n\n---- booking-link shortener (spec §7) ---------------------------------------------------------\nPurpose: message copy references one short, stable link; if the real booking URL ever changes, one\nline changes (REAL_BOOKING_URL above) instead of eight message templates.\n\nDeployment note, honestly flagged rather than guessed at: a single val.town val has one default\nexport, which is this file's cron() entry point. Whether val.town's current UI can attach a second,\nHTTP trigger to a NAMED export (not the default) on the SAME val was not verified this session —\nVT_TOKEN was unavailable, so nothing could be deployed to check. If it can, wire this function up\ndirectly. If not, the fallback is a second, tiny val: two lines, importing REAL_BOOKING_URL from\nthis file and re-exporting a redirect as ITS default export. Either way this is a convenience, not a\ncritical system, exactly as spec §7 frames it — kept deliberately simple.\n## v1.7 — SLOW TRACK (TAPER), deployed 4 Aug 2026\n\nKim's spec verbatim (3 Aug, 8:11 PM): \"a text or email once a week for month then every two\nweeks for 6 months then every month moving forward.\" Implemented as a fifth sequence:\n\n- New status `slow_track` (non-terminal). Entry: rule 9's 21-day completion now hands over\n instead of parking in done_soft_21d. `done_soft_21d` kept terminal for legacy blobs — no\n retroactive enrollment, deliberately.\n- Copy + cadence in taper-messages.ts: SLOW_WEEKLY x4 (rel d7/14/21/28), SLOW_FORTNIGHTLY x13\n (rel d42..210), SLOW_MONTHLY_BANK x12 keyed by CALENDAR MONTH of the send (July=heat+fireworks,\n Dec=holidays). nextSlowTouch() is the one scheduler; slowTemplateAt() shared by decideAction\n and the executor so decided and sent templates cannot drift.\n- HARD PROMISE, test-enforced: zero booking links, zero asks in all 29. The only CTA anywhere\n is \"reply and a person reads it.\"\n- All rails hold mid-taper (proven in tests/slow-track.test.mjs, 28 checks): reply -> paused,\n booking -> awaiting/branch (never back to slow), STOP/dnd -> hard exit, customer -> exit,\n R27 foreign quiet, R28 per-channel consent (skip-consume), min-gap, send window.\n- HARDENING found by the suite: min-gap now ignores a future-dated lastSentAt (mirrors R27's\n since>=0 guard). Previously a corrupted/restored blob with future lastSentAt froze the\n contact until that date.\n- Panel: slow_track in labels/stage bar/ACTIVE, plus a \"What needs doing today\" card answering\n Kim's 8:20 PM question in one computed sentence.\n- Deploy: val.town API PUT (main v22, messages v21, api v23, taper-messages created 201).\n All four hash-verified byte-exact after upload. Live run verified: report v \"1.7.0\", ok:true,\n testMode:true. main.ts is 79,537 bytes — 463 under the 80k ceiling; next addition must split.\n","createdAt",["D",1785875966538],"branchVersion","branchId","551774fb-a850-4c9d-94a1-d3509ddcf1b0","id","1bfa6e81-74e1-4c6c-ab32-118304a4ffff","dogsspot_puppy_path",["D",1785429259053],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Puppy path nurture engine v1.2 — The Dogs Spot","imageUrl","d26e64e6-cd39-4be1-b5b4-1de11cc555f8","pinnedFileId","ad633fec-8e73-11f1-b800-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f56fd-bd59-724f-8163-80ffcf8235dd","tursoName","1bfa6e8174e14c6cab32118304a4ffff","tursoHostname","1bfa6e8174e14c6cab32118304a4ffff-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519842404],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",1233,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","amir5","handle","displayName","Amir","avatar","https://lh3.googleusercontent.com/a/ACg8ocILk3bwhcvrzozUWm7gxlKoBm7ZGtsgIkesW3ysOOsJ1rSQuA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":344,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":345,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":346,"_83":347,"_85":348,"_87":25},"tree",[279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294],"files",[279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294],"counts",{"_269":62,"_270":171,"_271":62,"_272":273,"_274":275},"contents",[130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":266,"_32":28,"_30":31,"_149":-5,"_40":41,"_39":14,"_151":25,"_37":267,"_13":171,"_33":20,"_34":36,"_24":25,"_156":-5,"_27":268},{"_42":259,"_32":260,"_30":261,"_149":-5,"_40":41,"_39":262,"_151":25,"_37":263,"_13":171,"_33":172,"_34":264,"_24":25,"_156":-5,"_27":265},{"_42":253,"_32":254,"_30":56,"_149":-5,"_40":41,"_39":255,"_151":25,"_37":256,"_13":153,"_33":172,"_34":257,"_24":25,"_156":-5,"_27":258},{"_42":245,"_32":246,"_30":247,"_149":-5,"_40":41,"_39":248,"_151":25,"_37":249,"_13":250,"_33":154,"_34":251,"_24":25,"_156":-5,"_27":252},{"_42":237,"_32":238,"_30":239,"_149":-5,"_40":41,"_39":240,"_151":25,"_37":241,"_13":242,"_33":172,"_34":243,"_24":25,"_156":-5,"_27":244},{"_42":230,"_32":231,"_30":232,"_149":-5,"_40":41,"_39":233,"_151":25,"_37":234,"_13":163,"_33":154,"_34":235,"_24":25,"_156":-5,"_27":236},{"_42":223,"_32":224,"_30":225,"_149":-5,"_40":41,"_39":226,"_151":25,"_37":227,"_13":171,"_33":154,"_34":228,"_24":25,"_156":-5,"_27":229},{"_42":214,"_32":215,"_30":216,"_149":-5,"_40":41,"_39":217,"_151":25,"_37":218,"_13":219,"_33":220,"_34":221,"_24":25,"_156":-5,"_27":222},{"_42":206,"_32":207,"_30":208,"_149":-5,"_40":41,"_39":209,"_151":25,"_37":210,"_13":211,"_33":172,"_34":212,"_24":25,"_156":-5,"_27":213},{"_42":198,"_32":199,"_30":200,"_149":-5,"_40":41,"_39":201,"_151":25,"_37":202,"_13":203,"_33":154,"_34":204,"_24":25,"_156":-5,"_27":205},{"_42":191,"_32":192,"_30":193,"_149":-5,"_40":41,"_39":194,"_151":58,"_37":195,"_13":62,"_33":154,"_34":196,"_24":25,"_156":-5,"_27":197},{"_42":183,"_32":184,"_30":185,"_149":-5,"_40":41,"_39":186,"_151":25,"_37":187,"_13":188,"_33":154,"_34":189,"_24":25,"_156":-5,"_27":190},{"_42":175,"_32":176,"_30":177,"_149":-5,"_40":41,"_39":178,"_151":25,"_37":179,"_13":180,"_33":172,"_34":181,"_24":25,"_156":-5,"_27":182},{"_42":166,"_32":167,"_30":168,"_149":-5,"_40":41,"_39":169,"_151":25,"_37":170,"_13":171,"_33":172,"_34":173,"_24":25,"_156":-5,"_27":174},{"_42":158,"_32":159,"_30":160,"_149":-5,"_40":41,"_39":161,"_151":25,"_37":162,"_13":163,"_33":154,"_34":164,"_24":25,"_156":-5,"_27":165},{"_42":146,"_32":147,"_30":148,"_149":-5,"_40":41,"_39":150,"_151":25,"_37":152,"_13":153,"_33":154,"_34":155,"_24":25,"_156":-5,"_27":157},"0f52db97-0e30-4679-acdc-2bafd36dd60a","worklog.ts","facd3ee8-9028-11f1-8d98-1607ee4eb77e","parentId",114,"latest",["D",1785875965685],11,"script","// THE WORK LOG — what changed, what broke, what got fixed. v1.0, 4 Aug 2026.\n//\n// WHY: Kim's dashboard answers \"is it working\" from live data. It cannot answer \"what have you\n// actually been doing\" or \"did something break last week\" from live data, because those are\n// events, not states. This file is the event trail: append-only, plain English, dated.\n//\n// THE RULE: every entry describes something that DEMONSTRABLY happened, with the evidence\n// alongside it. No entry is written for work that was merely intended. If a claim here cannot\n// be checked, it does not go here. Kim reads this; it is the receipts column of the retainer.\n//\n// TWO SOURCES:\n// 1. SEEDED (below): work done by hand, each line traceable to a verification run.\n// 2. AUTOMATIC: the watchdog appends \"broke\"/\"recovered\" pairs to the `tds_worklog` blob, so\n// an outage at 3am and its recovery both appear without anyone remembering to write them.\n\nexport type WorkEntry = {\n at: string; // ISO date (day precision is fine; this is a human timeline)\n // v1.2. A reader noticed that \"Fixed: this page used to state a number nobody measured\" (mine)\n // and \"Fixed: your website was charging half the deposit\" (hers, worth thousands) wore the same\n // label in the same colour, so my errors were hiding among her wins. `mine` is now its own kind\n // and its own word. Her words: \"Separate the two columns and I'll trust the page more, not less.\"\n kind: \"fixed\" | \"built\" | \"found\" | \"broke\" | \"recovered\" | \"changed\" | \"mine\";\n what: string; // one plain sentence, Kim's vocabulary\n evidence?: string; // how it was checked. Optional only for \"broke\" (the alarm IS the evidence)\n};\n\n// Seeded history. Everything below was verified on the date shown; the evidence column names\n// the check. Newest first is handled by the renderer, so this list stays chronological.\nexport const SEEDED: WorkEntry[] = [\n {\n at: \"2026-07-30\",\n kind: \"built\",\n what: \"The puppy follow-up system was built and switched into practice mode, where it does everything except actually send.\",\n evidence: \"It has been running on its own since, writing down every decision it makes. Its first practice run is still on file.\",\n },\n {\n at: \"2026-08-02\",\n kind: \"built\",\n what: \"Candice's welcome email was written and sent so she could start on the phones with the full picture.\",\n evidence: \"Sent 2 August; it is in the sent folder.\",\n },\n {\n at: \"2026-08-02\",\n kind: \"found\",\n what: \"Your website was charging a $250 Bootcamp deposit instead of $500. It was hidden inside the booking form's own settings, which is why nobody could find it.\",\n evidence: \"Fixed and published; the whole live site was then searched for '$250' and it appears nowhere.\",\n },\n {\n at: \"2026-08-02\",\n kind: \"found\",\n what: \"There are 17 Bootcamp bookings on record, from 19 December to 25 July, every one of them taken while the deposit was set to $250. What is not yet known is which of them actually paid one, and that means matching each booking against the payment records.\",\n evidence: \"Counted from your own booking records. An earlier version of this note asked you for a payment permission to finish the job; that was wrong and it is corrected here, because you had already granted it and it has been working since 1 August. Matching the bookings to the payments is work rather than a blocker, and it has not been done yet.\",\n },\n {\n at: \"2026-08-03\",\n kind: \"fixed\",\n what: \"29 people who had texted STOP were never marked do-not-contact in the CRM, so they could still have been messaged.\",\n evidence: \"All 29 marked, then all 29 read back one at a time through the CRM's own records on 4 August. 29 of 29 confirmed, none missed.\",\n },\n {\n at: \"2026-08-03\",\n kind: \"mine\",\n what: \"Three of the people who had texted STOP were on a call list I had already sent to your front desk. That was my mistake. The list was pulled and rebuilt the same day, but whether anyone had already called those three is not something I can see from here, and it is worth asking the desk.\",\n evidence: \"The rebuilt list has every STOP and every gate arrival removed, with a second tab naming exactly who came off it and why. The three names are in that tab, so the desk can be asked about those three specifically.\",\n },\n {\n at: \"2026-08-03\",\n kind: \"changed\",\n what: \"The puppy follow-up messages were updated with your notes: the toy advice now explains the why, and the Pup Talk asks came down from six to four.\",\n evidence: \"The PDF you signed off was generated straight from the live system, not from a draft.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"built\",\n what: \"The slow track you asked for is built: weekly for a month, then every two weeks for six months, then monthly. No sales asks anywhere on it.\",\n evidence: \"29 messages, all written out in the PDF for your sign-off. Nothing sends until you say go.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"mine\",\n what: \"The follow-up system was running slightly older wording than the version you approved. It now runs exactly what you read.\",\n evidence: \"Compared the live wording against the wording you approved, character by character; they now match.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"fixed\",\n what: \"A security review found that text typed by a customer into their own name could end up treated as code inside an email we send, rather than as words. Nobody had done it, and it cannot happen now. Two other holes were found and closed in the same review, one of them in the key that protects the page you are reading.\",\n evidence: \"It came out of an adversarial review alongside two other security findings, and each of the three now has its own automatic check, and those checks are run before anything goes anywhere near your account. For this one that means names holding dollar signs, angle brackets, quotes and stray markup. The old page key was checked afterwards and is dead.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"built\",\n what: \"A second, separate watchdog now looks over the whole setup on a timer and raises an alarm if anything stops working, including if somebody else quietly changes one of your CRM automations.\",\n evidence: \"Run live and watched end to end. It takes a fingerprint of your CRM automations each time it looks, so a change to any one of them shows up as a change rather than as silence.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"found\",\n what: \"Your CRM still has an old puppy follow-up automation switched on. If our new one went live alongside it, new inquiries would get two sets of messages from you on the same day.\",\n evidence: \"Read all 165 automations in your account. Switching ours on and that one off has to happen together, and it needs your say-so.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"found\",\n what: \"Your CRM records where nearly every inquiry came from, but not in the column it shows you. The column you can see is blank for four out of five people; the record underneath places all of them.\",\n evidence: \"Checked across a full week of inquiries: the column you can see named about one in five of them, the record underneath named every single one. That is where the Facebook and Instagram numbers above come from, and they are recounted every time you open this page.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"mine\",\n what: \"This page used to tell you the follow-up system checks in every 15 minutes. Nobody had ever measured that, and it was not true. It now times itself and reports the rhythm it actually keeps.\",\n evidence: \"The page was saying 'last checked 26 minutes ago' and 'it runs every 15 minutes' in the same breath, which cannot both be right. It now measures the gaps between runs and reports what it sees.\",\n },\n {\n at: \"2026-08-01\",\n kind: \"mine\",\n what: \"I sent you a draft of the follow-up messages as though it were the finished thing, and you spent an evening reading the wrong version. That was mine, and the replacement was generated from the live system so it could not happen the same way twice.\",\n evidence: \"Every write-up you have had since is generated from the running system rather than typed, so what you read is what would send.\",\n },\n {\n at: \"2026-08-02\",\n kind: \"mine\",\n what: \"I gave you a missed-calls figure that was too high, because it was counting people arriving at the gate as well as people calling. You spotted it before I did.\",\n evidence: \"Recounted with gate arrivals excluded, and the same exclusion now runs on every list that comes out of here.\",\n },\n {\n at: \"2026-08-03\",\n kind: \"mine\",\n what: \"I told you a list had been deleted and then left the old one sitting in your Drive for a day. Two versions of the same list is exactly the confusion I was trying to save you from.\",\n evidence: \"The old one is in the trash and the folder was checked afterwards; only one version exists.\",\n },\n {\n at: \"2026-08-03\",\n kind: \"mine\",\n what: \"You asked me something at 8:20 and my reply at 8:27 answered everything except that. Answered since.\",\n evidence: \"Both messages re-read against each other so the gap could be found rather than assumed.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"found\",\n what: \"Once it was measured, the follow-up system turned out to be running about hourly and the watchdog slower still, rather than four times an hour as this page used to claim. Nothing is harmed by that, because the messages are scheduled by the day, but it was worth knowing rather than assuming.\",\n evidence: \"Both were watched without being touched, then run by hand to confirm the code itself was healthy. Both ran cleanly. Do not read the rhythm off this line: the health card above measures the gaps between actual runs and prints what it currently observes, which is the only figure either of us should trust.\",\n },\n {\n at: \"2026-08-04\",\n kind: \"mine\",\n what: \"The count of new customers on this page was reading low. It was looking at only the most recent slice of your records, which missed anyone who first got in touch a while ago and only became a customer this week.\",\n evidence: \"The whole Customer list is now read every time rather than the first slice of it, in about a second. For the last seven days that changed the figure from 2 to 5.\",\n },\n];\n\nexport function mergeLog(seeded: WorkEntry[], live: WorkEntry[] | null | undefined): WorkEntry[] {\n const all = [...seeded, ...(Array.isArray(live) ? live : [])];\n const seen = new Set();\n const out: WorkEntry[] = [];\n for (const e of all) {\n if (!e || typeof e.at !== \"string\" || typeof e.what !== \"string\" || !e.what.trim()) continue;\n // v1.1 (review #6): dedupe on the FULL sentence. A 60-character prefix collapsed two\n // different outages on the same day into one row, so the second incident never reached Kim.\n const key = `${e.at}|${e.kind}|${e.what}|${e.evidence ?? \"\"}`;\n if (seen.has(key)) continue;\n seen.add(key);\n out.push(e);\n }\n // newest first. Within one day the LATEST-added entry leads, so a broke/recovered pair on the\n // same date reads \"back to normal\" above \"broke\", which is the order a human wants to see.\n return out\n .map((e, i) => ({ e, i }))\n .sort((a, b) => (a.e.at === b.e.at ? b.i - a.i : (b.e.at > a.e.at ? 1 : -1)))\n .map((x) => x.e);\n}\n\nexport const KIND_LABEL: Record = {\n mine: \"My mistake\",\n fixed: \"Fixed\",\n built: \"Built\",\n found: \"Found\",\n broke: \"Broke\",\n recovered: \"Back to normal\",\n changed: \"Changed\",\n};\n","label",[147],"303752e6-4090-4e7e-9d69-b62f66431925","taper-messages.ts","65f1a7b2-900c-11f1-948d-1607ee4eb77e",106,["D",1785874265205],9,"// SLOW TRACK (TAPER) — message copy module. Companion to puppy-messages.ts.\n// Spec is Kim's own, verbatim from her Upwork message 3 Aug 2026, 8:11 PM:\n// \"I'd like something to taper off rather than just drop. Something like a text or email\n// once a week for month then every two weeks for 6 months then every month moving forward.\"\n// Committed shape (confirmed back to her, 8:27 PM): after the 21-day main sequence ends —\n// weekly x4, then fortnightly x13 (~6 months), then monthly indefinitely.\n// HARD RULE, promised to Kim in writing: NO ask attached to any taper message. No booking\n// links, no CTAs, no phone-number pushes — replying to the message itself is the only channel\n// offered. \"The job of that track is that\n// when they finally do need training or boarding, you're the name they already know.\"\n// Same engine rules underneath: reply -> paused for a human; booking -> off the track;\n// STOP -> never contacted again. All enforced engine-side, same as the main sequence.\n\nimport { PHONE_DISPLAY, type MessageTemplate } from \"./puppy-messages.ts\";\n\n// Offsets are hours RELATIVE TO SLOW-TRACK ENTRY (the moment main-8 fires, day 21 absolute).\n// Weekly: rel days 7 / 14 / 21 / 28 = absolute days 28 / 35 / 42 / 49\n// Fortnightly: rel days 42 .. 210 (13 x 14) = absolute days 63 .. 231\n// Monthly: rel day 240 onward, every 30 = absolute day 261 onward, forever\n\nexport const SLOW_WEEKLY: MessageTemplate[] = [\n {\n id: \"slow_w-1\",\n channel: \"email\",\n offsetHours: 168, // rel day 7\n subject: \"The teenage phase is coming (this is normal too)\",\n previewText: \"Somewhere between six and twelve months, trained puppies act untrained. Here's why.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nOne thing I wish more people were warned about: somewhere between six and twelve months, your dog will probably go through a teenage phase. The recall that was working stops working. The chewing comes back. A dog who knew \"sit\" looks at you like they've never heard the word.\n\nThis isn't your training failing, and it isn't the puppy teething back again - that part really does settle, like I said in the early emails. This is adolescence: hormones and a growing brain re-testing every rule, exactly like human teenagers do. Dogs who were doing great at five months often look like a mess at eight, and the owners who don't know it's a phase assume they've done something wrong.\n\nTwo things carry you through it: keep the routines boring and consistent even when they seem pointless, and keep rewarding the behavior you want as if your dog were still tiny. It passes. The dogs who come out of it best are the ones whose people didn't give up on the rules halfway through.\n\n{{STORY:teenage}}\n\nReply anytime - a real person reads these.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_w-2\",\n channel: \"sms\",\n offsetHours: 336, // rel day 14\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim at The Dogs Spot. A tip that saves furniture: rotate your dog's toys - keep most in a closet and swap a few out every couple of days. Old toys become new again, and a dog with something interesting to chew rarely invents their own project. Reply anytime.`,\n },\n {\n id: \"slow_w-3\",\n channel: \"email\",\n offsetHours: 504, // rel day 21\n subject: \"Socialization doesn't stop - it just changes shape\",\n previewText: \"The window closes, but the habit shouldn't.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nWhen your dog was tiny, the job was meeting the world before the socialization window closed. That window does close - but the habit shouldn't. A dog who met the mail carrier calmly at twelve weeks can still decide the mail carrier is suspicious at eight months if the meetings stop.\n\nThe maintenance version is lighter than the puppy version. A different walking route once a week. Ten minutes watching the world go by outside a coffee shop. A calm hello with a steady adult dog now and then. You're just keeping the file open: people, dogs, noises, places, all still no big deal.\n\nThe dogs who stay easy in public are almost never the ones with the most training. They're the ones whose world stayed wide.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_w-4\",\n channel: \"sms\",\n offsetHours: 672, // rel day 28\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. A two-minute recall game that works: someone holds your dog, you walk away looking excited, then call once and celebrate like they won the lottery when they arrive. Dogs repeat what pays.`,\n },\n];\n\nexport const SLOW_FORTNIGHTLY: MessageTemplate[] = [\n {\n id: \"slow_f-1\",\n channel: \"email\",\n offsetHours: 1008, // rel day 42\n subject: \"Teaching your dog that alone is fine\",\n previewText: \"Separation ease is trained, not hoped for.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThe single most underrated skill for a young dog: being alone and being fine about it. It doesn't happen by accident - dogs are social animals, and a dog who is never alone learns that alone is alarming.\n\nBuild it in small doses. Leave for two minutes and come back before any fuss starts, then five, then twenty. Keep departures and returns boring - no big goodbyes, no big reunions. A stuffed chew or a lick mat that only appears when you leave turns your exit into a good sign instead of a bad one.\n\nThe goal isn't a dog who tolerates your absence. It's a dog who hears the keys and thinks \"snack time\", then has a nap.\n\n{{STORY:alone_time}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-2\",\n channel: \"sms\",\n offsetHours: 1344, // rel day 56\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Loose-leash tip: the moment the leash goes tight, stop walking. Move again only when it slackens. Boring, repetitive, and it works better than any gadget - pulling stops paying, so pulling stops. Reply if it stalls.`,\n },\n {\n id: \"slow_f-3\",\n channel: \"email\",\n offsetHours: 1680, // rel day 70\n subject: \"Vet visits without the drama\",\n previewText: \"Five minutes of practice at home changes every appointment for life.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nA dog's opinion of the vet is mostly formed before anything medical ever happens. You can shape it at home, five minutes at a time.\n\nHandle your dog's paws, ears and mouth while they're relaxed - a touch, then a treat, done before they mind. Pop them on a table or a mat, brief and calm, same deal. If you're ever passing your vet's clinic, walk in, let the front desk say hello and hand over a treat, and leave. Visits where nothing happens are what make the real ones manageable.\n\nA dog who's been handled kindly a hundred times at home barely notices an examination. One who's only ever grabbed when something hurts learns the opposite lesson.\n\n{{STORY:vet_visits}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-4\",\n channel: \"sms\",\n offsetHours: 2016, // rel day 84\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim at The Dogs Spot. If your dog goes wild in the evenings - the witching hour is real. It's usually overtiredness, not excess energy. A chew and enforced quiet time settles it faster than another walk. Reply if evenings are still chaos, happy to help.`,\n },\n {\n id: \"slow_f-5\",\n channel: \"email\",\n offsetHours: 2352, // rel day 98\n subject: \"The off switch\",\n previewText: \"The most useful thing a dog can learn isn't a trick.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThe most useful thing your dog can learn isn't a trick - it's an off switch. A dog who can lie on a mat and do nothing while life happens around them gets taken everywhere. A dog who can't gets left at home, which shrinks their world and makes everything harder.\n\nTeach it like anything else. A mat or a bed, a treat for lying on it, then gradually longer stays and gradually more interesting distractions - someone walking past, the doorbell, dinner being eaten. Reward calm, quietly, before they break. Minutes a day, and within a few weeks you have a dog you can take to a restaurant patio.\n\nIt's not glamorous. It changes more about daily life than any other single thing you can train.\n\n{{STORY:settle}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-6\",\n channel: \"sms\",\n offsetHours: 2688, // rel day 112\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Jumping on guests fix: have visitors ignore your dog completely until all four paws are on the floor, then greet warmly. Attention is what they're after. Give it for standing, never for jumping. Consistency from everyone is the whole trick.`,\n },\n {\n id: \"slow_f-7\",\n channel: \"email\",\n offsetHours: 3024, // rel day 126\n subject: \"Dog parks: the honest version\",\n previewText: \"When they help, when they don't, and what to watch.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nDog parks divide opinion, so here's the honest version: they're brilliant for some dogs and genuinely bad for others, and the difference isn't friendliness - it's what happens there.\n\nWatch play, not intentions. Good play has role swaps: chaser becomes chased, wrestler ends up underneath, both dogs keep opting back in. If your dog is always the one being chased, or hiding under benches, or the one doing all the pinning, it isn't play anymore, and every bad visit teaches something you'll later have to untrain.\n\nThe useful test: call your dog out of play now and then, reward, release back. If you can't call them out, the park is training them - just not in the direction you want. A few good dogs beat a big crowd of random ones.\n\n{{STORY:dog_parks}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-8\",\n channel: \"sms\",\n offsetHours: 3360, // rel day 140\n bodyTemplate: `Hi {{FIRST_NAME}}, it's Kim. While I'm thinking about it: feed your dog a few meals in the parked car, engine off, before expecting calm car rides. Cars should predict good things, not just vet trips. Short happy drives to nowhere do the same job. Tell me how it goes, I read these.`,\n },\n {\n id: \"slow_f-9\",\n channel: \"email\",\n offsetHours: 3696, // rel day 154\n subject: \"Boredom looks a lot like bad behavior\",\n previewText: \"Ten minutes of nose work tires a dog more than an hour of fetch.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nMost \"bad behavior\" in young dogs is unemployment. A dog with nothing to do writes their own job description, and it usually involves your baseboards.\n\nThe fix isn't always more exercise - physical exercise builds fitness, and a fitter dog just has more stamina for mischief. Mental work is what actually tires them. Scatter your dog's food in the grass instead of a bowl and let them sniff it out. Hide treats around one room. A snuffle mat, a frozen Kong, a cardboard box with food inside it to be destroyed. Ten minutes of nose work drains more out of a dog than an hour of fetch, because sniffing is thinking.\n\nA tired dog is a good dog, but the right kind of tired is mental. It's also the cheapest training aid there is.\n\n{{STORY:nose_work}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-10\",\n channel: \"sms\",\n offsetHours: 4032, // rel day 168\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Brushing habit worth keeping: one minute after dinner, every day, treat at the end. Daily and brief beats weekly and a wrestle - and you'll spot lumps, ticks and sore spots before they're problems. Reply anytime.`,\n },\n {\n id: \"slow_f-11\",\n channel: \"email\",\n offsetHours: 4368, // rel day 182\n subject: \"Two dogs meeting on leash: what's actually going on\",\n previewText: \"What a tight leash does to friendly dogs, and the walk-along trick.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nA strange thing you'll notice: two perfectly friendly dogs can bristle at each other on leash when the same two would be fine loose. It isn't contrariness. The leash changes the conversation.\n\nDogs read each other sideways - they approach in curves, sniff rears, keep options open. A tight leash forces a head-on approach with no escape route, which in dog language reads as confrontation. The tension travels down the leash too: you tighten up, and your dog decides there must be something to tense about.\n\nWhat helps: keep the leash loose even when it takes nerve, approach in an arc rather than straight on, and if you want two dogs to make friends, walk them side by side in the same direction first and let the sniffing happen on the move. Side by side works. Head-on mostly doesn't.\n\n{{STORY:leash_meetings}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_f-12\",\n channel: \"sms\",\n offsetHours: 4704, // rel day 196\n bodyTemplate: `{{FIRST_NAME}}, it's Kim again. One that surprises people: use part of your dog's daily ration as training treats instead of adding extras on top. Same calories, more practice, no expanding waistline. The dog doesn't know the difference - it all counts as winning.`,\n },\n {\n id: \"slow_f-13\",\n channel: \"email\",\n offsetHours: 5040, // rel day 210\n subject: \"From here on, about once a month\",\n previewText: \"The rhythm changes, the door stays open.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nQuick housekeeping note rather than advice this time: I've been in your inbox every couple of weeks since your dog was small, and from here I'll drop to about once a month - short, seasonal, still a thirty-second read, I promise.\n\nBy now most of the foundations are in: the world stayed wide, alone is fine, the leash is mostly loose, and the teenage phase either happened or is happening and will pass either way.\n\nIf anything ever comes up in between - a behavior that's new, a question that nags - reply to any of these. A real person reads them, always has.\n\nKim\nThe Dogs Spot`,\n },\n];\n\n// Monthly bank — chosen by the CALENDAR MONTH the send lands in (0 = Jan .. 11 = Dec),\n// so the seasonal ones land in season regardless of when the contact entered the track.\n// This is what was promised to Kim: \"seasonal where it fits: settling a dog over the\n// holidays, heat and paws in July, fireworks.\" offsetHours on these entries is ignored\n// by the scheduler (cadence is every 720h from rel day 240); template chosen by month.\nexport const SLOW_MONTHLY_BANK: MessageTemplate[] = [\n {\n id: \"slow_m-jan\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"January: the quiet month is a training month\",\n previewText: \"Short days, big opportunity.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nJanuary is short walks and dark evenings, which makes it a surprisingly good training month. Five minutes of indoor work a day, a settle on the mat or some paw-and-ear handling practice, carries further than one heroic cold-weather hike a week.\n\nGeorgia winters are mild, but a cold snap still ices a morning path now and then - so a quick paw check after those walks is smart.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-feb\",\n channel: \"sms\",\n offsetHours: 0,\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim at The Dogs Spot. Wet-weather boredom builds mischief - a stuffed Kong from the freezer or dinner scattered in a snuffle mat gets you a calm evening. Mental work counts double in February. Reply anytime.`,\n },\n {\n id: \"slow_m-mar\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"Spring: the world wakes up, so does the sniffing\",\n previewText: \"Let the nose have its season.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nEverything smells new in spring, and you'll feel it down the leash. Rather than fight it, give sniffing its own time: pick a stretch of the walk where your dog sets the pace and the route, nose down, no agenda. Sniffing is a dog reading the news, and ten minutes of it settles them more than double the distance at a march.\n\nOne more spring thing: tick season opens now. A quick run of the hands after grassy walks catches them early.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-apr\",\n channel: \"sms\",\n offsetHours: 0,\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Spring reminder, same one every year: chocolate is flat-out dangerous for dogs. If there's been an egg hunt anywhere near your yard, a nose will find what the kids missed, sometimes weeks later. Keep the candy high and the vet's number where you can find it.`,\n },\n {\n id: \"slow_m-may\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"Before summer: build the water habit\",\n previewText: \"Warm-weather prep is easier before it's hot.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nA little prep now makes summer easier. Get your dog used to drinking on walks - carry water and offer it before they seem thirsty, so it's routine by the time it matters. If a kiddie pool or the sprinkler might feature, introduce them gently now while they're novelty rather than necessity.\n\nAnd as the winter coat blows out, a few minutes of brushing a day now saves your furniture a month of fur. One thing to know before summer: never shave a double-coated breed to cool them down - that coat insulates against heat as well as cold, and they're worse off without it.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-jun\",\n channel: \"sms\",\n offsetHours: 0,\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim at The Dogs Spot. Summer rule of thumb: put the back of your hand on the pavement for seven seconds. Too hot for your hand, too hot for your dog's paws - walk early or late instead. Any summer questions, just reply.`,\n },\n {\n id: \"slow_m-jul\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"July: heat, paws and fireworks\",\n previewText: \"The two summer hazards, and the one that sneaks up.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nJuly's the month I nag about heat. Dogs don't sweat like we do - they cool by panting, which stops working in a hot car in minutes, even parked in shade with windows cracked. Walks move to early morning or late evening, water goes everywhere you go, and pavement gets the seven-second hand test before your dog's paws touch it.\n\nThe one that sneaks up: fireworks around the Fourth. If your dog is nervous of bangs, plan the evening - walk before dark, close curtains, put on some background noise, and let them den up wherever they choose. Comforting a scared dog doesn't reward fear, whatever the old advice said. Sit with them.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-aug\",\n channel: \"sms\",\n offsetHours: 0,\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Late-summer water check: lakes and ponds can grow blue-green algae in August - it's toxic to dogs, sometimes fatal. If the water looks like pea soup or has a scum line, your dog stays out, no exceptions.`,\n },\n {\n id: \"slow_m-sep\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"September: the routine change nobody warns dogs about\",\n previewText: \"Back-to-school hits dogs too.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nSeptember quietly rearranges a dog's whole day: the house empties, walks move, the kids who were constant company vanish for hours. Dogs don't read calendars, so the change lands without warning, and a bit of chewing or barking that starts this month is usually the adjustment talking.\n\nEase it the same way you built alone-time in the first place: short practice absences, something good that only appears when the house empties, and low-key exits. A week of short practice runs saves a month of stress.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-oct\",\n channel: \"sms\",\n offsetHours: 0,\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Halloween heads-up: the doorbell going all evening plus strangers in masks is a lot for most dogs. A chew in a back room with the radio on beats managing the door. And candy, especially sugar-free with xylitol, is dangerous for dogs - keep the bowl high.`,\n },\n {\n id: \"slow_m-nov\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"November: guests, feasts and a dog with opinions\",\n previewText: \"Getting ahead of the holiday chaos.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThe holiday season starts here, and for your dog it mostly means two things: the house fills with people, and the house fills with food at nose height.\n\nThe settle-on-a-mat work comes into its own now - a dog with a place to be, and something to chew there, rides out a busy dinner far better than one loose in the middle of it all. Brief the guests too: no feeding from plates, however charming the eyes. Rich, fatty leftovers are one of the most common reasons dogs see an emergency vet this time of year. The big ones to keep off the floor: onions, grapes and raisins, and any cooked bone.\n\nA walk before guests arrive takes the edge off everything.\n\n{{STORY:holidays}}\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"slow_m-dec\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"Settling a dog over the holidays\",\n previewText: \"Trees, tinsel, visitors and routine.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nDecember, quickly, because you're busy: keep your dog's routine as boring as you can manage while everything else changes - same meal times, same walks, same bedtime. Dogs take their stability from routine, and a steady dog copes with a chaotic house far better than the other way around.\n\nTree-wise: chocolate decorations are a vet visit waiting to happen, tinsel and ribbon are surgery if swallowed, and a curious tail plus low ornaments ends how you'd expect. Hang anything precious or edible high.\n\nHowever the season goes, thank you for letting me stay in your inbox this year. Reply anytime - a real person reads these, holidays included.\n\nKim\nThe Dogs Spot`,\n },\n];\n\n// ---- scheduler helpers (pure, testable) ---------------------------------------------------------\n\nexport const SLOW_WEEKLY_COUNT = 4;\nexport const SLOW_FORTNIGHTLY_COUNT = 13;\nexport const SLOW_MONTHLY_START_REL_HOURS = 5760; // rel day 240 (abs day 261)\nexport const SLOW_MONTHLY_INTERVAL_HOURS = 720; // 30 days\n\n// Given how many slow-track messages have already been sent to a contact, return the next\n// one: its template (or, for monthly, the bank + a note to pick by landing month) and its\n// offsetHours relative to slow-track entry. Returns null never — the track is indefinite.\nexport function nextSlowTouch(sentCount: number): {\n phase: \"weekly\" | \"fortnightly\" | \"monthly\";\n template: MessageTemplate | null; // null for monthly — engine picks by landing month\n offsetHours: number;\n} {\n if (sentCount < SLOW_WEEKLY_COUNT) {\n return { phase: \"weekly\", template: SLOW_WEEKLY[sentCount], offsetHours: 168 * (sentCount + 1) };\n }\n const f = sentCount - SLOW_WEEKLY_COUNT;\n if (f < SLOW_FORTNIGHTLY_COUNT) {\n return { phase: \"fortnightly\", template: SLOW_FORTNIGHTLY[f], offsetHours: 672 + 336 * (f + 1) };\n }\n const m = sentCount - SLOW_WEEKLY_COUNT - SLOW_FORTNIGHTLY_COUNT;\n return {\n phase: \"monthly\",\n template: null,\n offsetHours: SLOW_MONTHLY_START_REL_HOURS + SLOW_MONTHLY_INTERVAL_HOURS * m,\n };\n}\n\n// Monthly template for a given send date (calendar-month keyed, so seasonal copy lands in season).\nexport function monthlyTemplateFor(sendDate: Date): MessageTemplate {\n return SLOW_MONTHLY_BANK[sendDate.getMonth()];\n}\n\n// v1.7.1 — same, but never the same message twice in a row. The 30-day grid drifts through the\n// calendar, so two consecutive sends can land in one calendar month (the 1st and the 31st):\n// without this the identical email goes out twice, and December's \"thank you for letting me stay\n// in your inbox this year\" twice in a month reads as a broken robot. If this month's template was\n// the last thing sent, serve next month's instead.\nexport function monthlyTemplateAvoidingRepeat(sendDate: Date, lastSentId: string | null | undefined): MessageTemplate {\n const tpl = SLOW_MONTHLY_BANK[sendDate.getMonth()];\n return lastSentId && tpl.id === lastSentId ? SLOW_MONTHLY_BANK[(sendDate.getMonth() + 1) % 12] : tpl;\n}\n",[159],"36659075-120a-4f67-995b-203ed981f4fa","run.ts","be37b584-8e76-11f1-b9e0-1607ee4eb77e",14,["D",1785678975976],1,"http","// CHECK NOW — manual trigger for the nurture engine. Built 2 Aug 2026.\n//\n// WHY\n// main.ts is a val.town `interval` file. Its schedule is set in val.town's UI and cannot be read or\n// triggered through the API, which left two real problems: (1) nothing could be verified end-to-end\n// on demand — including the kill switch, which is the one control the client must be able to trust;\n// (2) if the schedule ever stalls there is no way to make the system catch up without a human\n// opening val.town. This file closes both. It imports the same cron() the scheduler calls, so there\n// is exactly one code path — a manual run is not a different run.\n//\n// SAFETY\n// Same admin key as the control panel. Every guard inside cron() still applies in full: the kill\n// switch is checked first, TEST_MODE still defaults on, the run lock still prevents overlap with a\n// scheduled tick, and the send ceilings are unchanged. This adds a trigger, never a bypass.\n//\n// ?k= run once, return the run report as JSON\n// ?k=&dry=1 report what the engine WOULD do without invoking it — resolves nothing, just\n// confirms this endpoint is wired and the key is right\n\nimport cron from \"./main.ts\";\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC —\n// proved by fetching this very source with no token — so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\n\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n if (url.searchParams.get(\"dry\") === \"1\") {\n return new Response(JSON.stringify({ wired: true, note: \"endpoint live; pass without &dry=1 to actually run\" }, null, 2), {\n headers: { \"content-type\": \"application/json\" },\n });\n }\n const startedAt = new Date().toISOString();\n try {\n const report = await cron();\n return new Response(JSON.stringify({ triggeredAt: startedAt, report }, null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n } catch (e) {\n return new Response(JSON.stringify({ triggeredAt: startedAt, error: String(e).slice(0, 900) }, null, 2), {\n status: 500,\n headers: { \"content-type\": \"application/json\" },\n });\n }\n}\n",[167],"d4ec88bc-177d-4056-89cd-7ac98c79ed49","report.ts","7a35076a-901f-11f1-8a2e-1607ee4eb77e",70,["D",1785865311684],10,"// FRIDAY REPORT, HTTP endpoint. Renders the week's numbers live from the CRM, saves a Friday\n// snapshot so next week can reference this week honestly. v1.0, 4 Aug 2026.\n//\n// ROUTES ?k= the report page (most recent complete Fri-Fri week)\n// ?k=&save=1 snapshot this week's numbers + draft commentary\n// (auto-save: first ADMIN view on a Friday ET saves the snapshot if missing)\n//\n// DATA every number from the GHL API at render time, computed in report-logic.ts, formulas\n// printed in the appendix. Ad platform numbers appear the day META_TOKEN / GADS creds\n// exist in the val env; until then those cells say \"not tracked yet\" and nothing is\n// estimated. Reconciliation (platform-claimed leads vs contacts that actually landed)\n// switches on the same day.\ndeclare const Deno: { env: { get(k: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\nimport {\n reportWindows, inWindow, countContacts, sourceBreakdown, countEvents, wonOpps,\n weeklyBuckets, pct, deltaWord, money, draftCommentary, FORMULAS, type ContactLite, type EventLite, type OppLite,\n} from \"./report-logic.ts\";\n\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst PUP_TALK_CAL = \"qHuYJ0NEqzibnoqf5Cw3\";\nconst FTD_CALS = [\"K24xHYRExFJDEGpgSNVB\", \"bLn88LGOYYOZ3NySO1EZ\"]; // Free Dog Training Day + Free Training Day\n// v1.0.1 (review fix #3) — computed PER REQUEST, not at module load: val.town keeps modules\n// warm across the DST changeover, and a stale offset shifts every window an hour and can\n// double-save Thursday's snapshot under Friday's key.\nfunction etOffsetMin(atMs: number): number {\n const fmt = new Intl.DateTimeFormat(\"en-US\", { timeZone: \"America/New_York\", timeZoneName: \"shortOffset\" });\n const part = fmt.formatToParts(new Date(atMs)).find((p) => p.type === \"timeZoneName\")?.value ?? \"GMT-4\";\n const m = part.match(/GMT([+-]\\d+)/);\n return m ? Number(m[1]) * 60 : -240;\n}\n\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function isAdmin(k: string) {\n return (await sha256Hex(k)) === (Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\") || KEY_SHA256);\n}\nasync function isViewer(k: string) {\n // v1.0.1 (review fix #4) — derived from the GHL token (a real secret held in env/private\n // blob), NOT from the admin digest that sits in this public source. Rotating the CRM token\n // rotates the view links; documented on Amir's list.\n const tok = await token();\n if (!tok) return false;\n return k === \"tds_view_\" + (await sha256Hex(tok + \":view\")).slice(0, 32);\n}\n\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\nasync function token(): Promise {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return env;\n try { const blob = await blobMod(); return (await blob.getJSON(\"puppy_config\"))?.ghlToken; } catch { return undefined; }\n}\n\nasync function j(path: string, ver: string) {\n const tok = await token();\n const r = await fetch(`${GHL}${path}`, {\n headers: { Authorization: `Bearer ${tok}`, Version: ver, \"User-Agent\": \"curl/8.5.0\" },\n signal: AbortSignal.timeout(25_000),\n });\n if (!r.ok) throw new Error(`GHL ${path.split(\"?\")[0]} -> HTTP ${r.status}`);\n return r.json();\n}\n\n// Contacts newest-first, paginated until older than `floorMs` (bounded pages so a bad response\n// cannot loop forever). Failure THROWS, the section renders the error loudly, never a zero.\nasync function contactsSince(floorMs: number, errorsOut: string[]): Promise {\n const out: ContactLite[] = [];\n let startAfterId: string | undefined;\n let startAfter: number | undefined;\n let reachedFloor = false;\n for (let page = 0; page < 40; page++) {\n const q = new URLSearchParams({ locationId: LOC, limit: \"100\" });\n if (startAfterId && startAfter) { q.set(\"startAfterId\", startAfterId); q.set(\"startAfter\", String(startAfter)); }\n const d = await j(`/contacts/?${q}`, \"2021-07-28\");\n const cs = d?.contacts ?? [];\n if (!cs.length) break;\n for (const c of cs) out.push({ dateAdded: c.dateAdded, source: c.source ?? null, tags: c.tags ?? [] });\n const oldest = Date.parse(cs[cs.length - 1]?.dateAdded ?? \"\");\n const meta = d?.meta ?? {};\n startAfterId = meta.startAfterId; startAfter = meta.startAfter;\n if (Number.isFinite(oldest) && oldest < floorMs) { reachedFloor = true; break; }\n if (!startAfterId) { reachedFloor = true; break; }\n }\n if (!reachedFloor) errorsOut.push(\"Contact history hit the page cap before covering eight weeks; the oldest chart bars may undercount\");\n return out;\n}\n\nasync function eventsFor(calId: string, startMs: number, endMs: number): Promise {\n const d = await j(`/calendars/events?locationId=${LOC}&calendarId=${calId}&startTime=${startMs}&endTime=${endMs}`, \"2021-04-15\");\n return (d?.events ?? []).map((e: any) => ({\n startTime: typeof e.startTime === \"number\" ? e.startTime : Date.parse(e.startTime),\n appointmentStatus: e.appointmentStatus ?? e.appoinmentStatus ?? \"unknown\",\n calendarId: calId,\n }));\n}\n\n// v1.0.1 (review fix #1) — wins are counted by lastStageChangeAt but the search endpoint\n// sorts by createdAt, so a createdAt-floor walk silently drops long-cycle wins (an aged lead\n// created in June, won in August). Wins are a small population: scan them ALL via status=won,\n// no floor break. errorsOut collects a loud note if the page cap is ever hit (fix #8).\n// v1.0.2, PROVEN LIVE 4 Aug 2026: all 5,695 opportunities in this account carry status \"open\".\n// Nobody uses the won/lost flags, so a status=won scan returns zero forever and this report would\n// have printed \"0 closed deals\" every week for the rest of time. The real signal is the pipeline\n// STAGE (Customer / Won-Paid), which the engine's own exit rules already read. Also proven: every\n// such record has monetaryValue 0, so the CRM holds no deal values; the report counts PEOPLE\n// reaching Customer and says plainly that revenue is not recorded.\nconst STAGE_CUSTOMER = \"fd821b4e-bbe6-44de-b754-fa80e4823616\";\nconst STAGE_WON_PAID = \"ae173310-f8b1-4399-acb7-ef1fc03d3697\";\nasync function wonOppsAll(errorsOut: string[]): Promise {\n const out: OppLite[] = [];\n for (let page = 1; page <= 20; page++) {\n const d = await j(`/opportunities/search?location_id=${LOC}&limit=100&page=${page}`, \"2021-07-28\");\n const os = d?.opportunities ?? [];\n if (!os.length) break;\n for (const o of os) {\n if (o.pipelineStageId !== STAGE_CUSTOMER && o.pipelineStageId !== STAGE_WON_PAID) continue;\n out.push({ createdAt: o.createdAt, status: \"won\", monetaryValue: Number(o.monetaryValue) || 0, lastStageChangeAt: o.lastStageChangeAt ?? null });\n }\n if (page === 20 && os.length === 100) errorsOut.push(\"Customer list hit the page cap; totals may be partial\");\n }\n return out;\n}\n\n// Ad platforms, honest stubs. The day the tokens exist, these return numbers; until then null.\nasync function metaSpend(w: { startMs: number; endMs: number }, tzMin: number): Promise<{ spend: number; convs: number } | null> {\n const tok = Deno.env.get(\"META_TOKEN\"), act = Deno.env.get(\"META_AD_ACCOUNT\");\n if (!tok || !act) return null;\n // v1.0.1 (fixes #5, #9) — dates shifted into ET before slicing (UTC slice rolled the window\n // one day long); token in the Authorization header, never the URL; errors sanitized so a\n // network failure can never echo credentials into the page.\n const day = (ms: number) => new Date(ms + tzMin * 60_000).toISOString().slice(0, 10);\n const since = day(w.startMs), until = day(w.endMs - 86_400_000);\n let r: Response;\n try {\n r = await fetch(`https://graph.facebook.com/v21.0/${act}/insights?fields=spend,actions&time_range={\"since\":\"${since}\",\"until\":\"${until}\"}`, {\n headers: { Authorization: `Bearer ${tok}` }, signal: AbortSignal.timeout(20_000),\n });\n } catch { throw new Error(\"Meta API unreachable\"); }\n if (!r.ok) throw new Error(`Meta insights -> HTTP ${r.status}`);\n const d = await r.json();\n const row = d?.data?.[0];\n const convs = Number((row?.actions ?? []).find((a: any) => a.action_type === \"onsite_conversion.total_messaging_connection\" || a.action_type === \"lead\")?.value ?? 0);\n return { spend: Number(row?.spend ?? 0), convs };\n}\n\nconst esc = (s: unknown) => String(s ?? \"\").replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string));\nconst RAMP = [\"#86b6ef\", \"#3987e5\", \"#256abf\", \"#184f95\", \"#0f3a6e\"];\nconst GOOD = \"#0ca30c\", WARN = \"#fab219\", CRIT = \"#d03b3b\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const admin = await isAdmin(k);\n const viewer = !admin && (await isViewer(k));\n if (!admin && !viewer) return new Response(\"Not found\", { status: 401 });\n\n const nowMs = Date.now();\n const tzMin = etOffsetMin(nowMs);\n const { current, previous } = reportWindows(nowMs, tzMin);\n const errors: string[] = [];\n const chartWeeks = 8;\n const floor = current.endMs - chartWeeks * 7 * 86_400_000;\n\n let contacts: ContactLite[] = [], ptEvents: EventLite[] = [], ftdEvents: EventLite[] = [], opps: OppLite[] = [];\n try { contacts = await contactsSince(floor, errors); } catch (e) { errors.push(`New inquiries could not be read: ${String(e).slice(0, 90)}`); }\n try { ptEvents = await eventsFor(PUP_TALK_CAL, previous.startMs, current.endMs); } catch (e) { errors.push(`Pup Talk calendar could not be read: ${String(e).slice(0, 90)}`); }\n try { for (const c of FTD_CALS) ftdEvents.push(...(await eventsFor(c, previous.startMs, current.endMs))); } catch (e) { errors.push(`Free Training Day calendars could not be read: ${String(e).slice(0, 90)}`); }\n try { opps = await wonOppsAll(errors); } catch (e) { errors.push(`Deals could not be read: ${String(e).slice(0, 90)}`); }\n\n let meta: { spend: number; convs: number } | null = null;\n let metaErr: string | null = null;\n try { meta = await metaSpend(current, tzMin); } catch (e) { metaErr = String(e).slice(0, 90); }\n\n const enq = countContacts(contacts, current), enqPrev = countContacts(contacts, previous);\n const pt = countEvents(ptEvents, current), ptPrev = countEvents(ptEvents, previous);\n const ftd = countEvents(ftdEvents, current);\n const won = wonOpps(opps, current), wonPrev = wonOpps(opps, previous);\n const sourcesAll = sourceBreakdown(contacts, current);\n const sources = sourcesAll.slice(0, 6);\n const buckets = weeklyBuckets(contacts, current.endMs, chartWeeks);\n const maxB = Math.max(1, ...buckets);\n\n // The follow-up system's own status, one honest line (stranger-test finding: the report was\n // silent about the thing the retainer is partly for).\n let engineLine = \"\";\n try {\n const blob2 = await blobMod();\n const st = (await blob2.getJSON(\"puppy_state\")) ?? {};\n const run = (await blob2.getJSON(\"puppy_run_state\")) ?? {};\n const rows: any[] = Object.values(st);\n const activeN = rows.filter((s: any) => [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"].includes(s?.status)).length;\n engineLine = run?.testMode === true\n ? `The automated follow-up system is in practice mode and contacting nobody yet. ${activeN === 1 ? \"One test contact is\" : activeN + \" test contacts are\"} running through the sequence to prove it works.`\n : run?.testMode === false\n ? `The automated follow-up system is LIVE with ${activeN} ${activeN === 1 ? \"person\" : \"people\"} in a sequence.`\n : \"\";\n } catch { engineLine = \"\"; }\n\n const unmarked = Math.max(0, pt.booked - pt.showed - pt.noshow);\n const commentary = draftCommentary({\n enq, enqPrev, ptBooked: pt.booked, ptPrev: ptPrev.booked, ptShowed: pt.showed,\n wonCount: won.count, wonValue: won.value, wonPrevValue: wonPrev.value,\n topSource: sources[0]?.source ?? null, adTracked: !!meta,\n });\n\n // snapshot: label by the window end date (the Friday). Load last week's for the look-back box.\n const weekKey = new Date(current.endMs).toISOString().slice(0, 10);\n const prevKey = new Date(previous.endMs).toISOString().slice(0, 10);\n const blob = await blobMod().catch(() => null);\n let prevSnap: any = null;\n let savedNote = \"\";\n if (blob) {\n prevSnap = await blob.getJSON(`friday_report_${prevKey}`).catch(() => null);\n const existing = await blob.getJSON(`friday_report_${weekKey}`).catch(() => null);\n const isFridayEt = new Date(nowMs + tzMin * 60_000).getUTCDay() === 5;\n const explicitSave = url.searchParams.get(\"save\") === \"1\";\n // v1.0.1 (fixes #2, #7) — never snapshot a week whose reads FAILED (zeros would be quoted\n // as truth forever); explicit save=1 may overwrite a bad snapshot; success claimed only\n // after the write actually resolved.\n if (admin && errors.length === 0 && (explicitSave || (isFridayEt && !existing))) {\n try {\n await blob.setJSON(`friday_report_${weekKey}`, {\n ts: new Date().toISOString(), weekKey,\n numbers: { enq, enqPrev, pt, ftd, won: won, sources },\n commentary,\n });\n savedNote = \"This week's snapshot was saved just now, next week's report will quote it.\";\n } catch { savedNote = \"Snapshot save FAILED, will retry on next view.\"; }\n } else if (admin && errors.length > 0 && (explicitSave || isFridayEt)) {\n savedNote = \"Snapshot NOT saved: some numbers could not be read (see below).\";\n } else if (existing) savedNote = \"Snapshot for this week already saved.\";\n }\n\n const fmtD = (ms: number) => new Date(ms + tzMin * 60_000).toISOString().slice(5, 10).replace(\"-\", \"/\");\n const tile = (label: string, v: string, note: string, accent?: string) =>\n `

${esc(v)}

${esc(label)}

${esc(note)}

`;\n\n const bars = buckets.map((b, i) => {\n const label = i === chartWeeks - 1 ? \"this wk\" : \"\";\n return `

${b}

${label}

`;\n }).join(\"\");\n\n const srcRows = sources.map((s) => `${esc(s.source)}${s.n}`).join(\"\") || `none this week`;\n\n const adCells = meta\n ? `${tile(\"Ad spend\", money(meta.spend), \"Meta, this week\")}${tile(\"Cost per inquiry\", enq ? money(meta.spend / enq) : \"n/a\", \"spend / inquiries\")}`\n : `${tile(\"Ad spend\", \"not tracked yet\", metaErr ? \"connection problem, see appendix\" : \"shows here once Amir links the ad account\", WARN)}`;\n\n const fbLanded = sourcesAll.filter((s) => /facebook|instagram|meta|messenger/.test(s.source)).reduce((a, s) => a + s.n, 0);\n const unsourced = sourcesAll.find((s) => s.source === \"no source recorded\")?.n ?? 0;\n const recon = meta\n ? `

Did the ad leads actually land?

Meta reports ${meta.convs} conversation${meta.convs === 1 ? \"\" : \"s\"} started this week. In the same window the CRM recorded ${fbLanded} contact${fbLanded === 1 ? \"\" : \"s\"} tagged Facebook/Instagram/Messenger and ${unsourced} with no source recorded. Messenger-created contacts usually arrive unsourced, so the honest comparison is ${meta.convs} claimed against ${fbLanded + unsourced} landed. The gap, if any, is leads that never became reachable contacts, the number worth watching.

`\n : `

Did the ad leads actually land?

Not tracked yet. The day the ad account tokens are connected, this section compares what the platforms claim they delivered against what actually arrived in the CRM.

`;\n\n const errBox = errors.length\n ? `

Some numbers could not be read

${esc(e)}

Missing numbers are shown as errors, never guessed. Refresh in a few minutes; if it persists, tell Amir.

`\n : \"\";\n\n const lastWeekBox = prevSnap\n ? `

What last week's report said

${(prevSnap.commentary ?? []).map((c: string) => esc(c)).join(\" \")}

`\n : `

What last week's report said

No saved report from last week to quote yet. The week-on-week comparisons above are computed fresh from the CRM either way; this box starts quoting the written summary next week.

`;\n\n const html = `\nThe Dogs Spot weekly report, ${esc(fmtD(current.startMs))} to ${esc(fmtD(current.endMs - 86_400_000))}\n

The Dogs Spot, the week in numbers

The week of Friday ${esc(fmtD(current.startMs))} through Thursday ${esc(fmtD(current.endMs - 86_400_000))}. Every figure is read fresh from the CRM when this page opens. ${esc(savedNote)}

\n\n

\n${tile(\"New inquiries\", String(enq), deltaWord(enq, enqPrev), enq > enqPrev ? GOOD : undefined)}\n${tile(\"Pup Talks on the calendar\", String(pt.booked), deltaWord(pt.booked, ptPrev.booked))}\n${tile(\"New customers\", String(won.count), `reached the Customer stage (last week ${wonPrev.count})`, won.count > wonPrev.count ? GOOD : undefined)}\n${adCells}\n

\n\n

What happened, in words DRAFT until Amir reviews

\n${commentary.map((c) => `

${esc(c)}

`).join(\"\")}${unmarked > 0 ? `

${esc(`${unmarked} of the week's Pup Talks ${unmarked === 1 ? \"was\" : \"were\"} never marked showed or no-show in the CRM, so the show rate is fuzzier than it should be. A ten-second tidy after each call fixes that.`)}

` : \"\"}${engineLine ? `

${esc(engineLine)}

` : \"\"}

\n\n

New inquiries, last eight weeks

${bars}

Each bar is one Friday-to-Thursday week; the rightmost is the week above. As a list: ${buckets.join(\", \")}. Across the eight weeks shown, ${buckets.reduce((a, b) => a + b, 0).toLocaleString(\"en-US\")} new people.

\n\n

Where this week's inquiries came from

\n${srcRows}

Source	People

\n\n

Why there is no revenue figure

Your deals do not carry a value in the CRM. Every opportunity sits at zero dollars and none are marked won or lost, so no honest revenue number can be produced from it. Counting people who reach the Customer stage is the closest true measure, and that is the tile above. Put a number on each deal and this report can show revenue instead.

\n\n${recon}\n${lastWeekBox}\n${errBox}\n\n

Appendix, the fine print

This week's raw counts

\n\n\n\n\n\n\n${metaErr ? `` : \"\"}\n

Of the ${pt.booked} Pup Talks: showed / no-show / never marked either way	${pt.showed} / ${pt.noshow} / ${Math.max(0, pt.booked - pt.showed - pt.noshow)}
Canceled (not counted above)	${pt.cancelled}
Show rate	${pt.showed} of ${pt.booked} booked${pt.booked >= 5 ? ` (${pct(pt.showed, pt.booked)})` : \"\"}${Math.max(0, pt.booked - pt.showed - pt.noshow) > 0 && pt.showed + pt.noshow >= 5 ? `; of the ${pt.showed + pt.noshow} actually marked, ${pct(pt.showed, pt.showed + pt.noshow)}` : \"\"}
Free Training Day booked / showed	${ftd.booked} / ${ftd.showed}${ftd.booked === 0 ? \" (none scheduled this week)\" : \"\"}
Meta connection error	${esc(metaErr)}

How every number is computed

\n${Object.entries(FORMULAS).map(([k, v]) => `

${esc(k)}: ${esc(v)}

`).join(\"\")}\n

Page built ${esc(new Date(nowMs + tzMin * 60_000).toISOString().slice(0, 16).replace(\"T\", \" at \"))} Georgia time.

`;\n\n return new Response(html, { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n}\n",[176],"88481e40-e193-4524-bae7-cf229b58f3e8","report-logic.ts","79e5d064-901f-11f1-a19e-1607ee4eb77e",75,["D",1785866731694],7,"// FRIDAY REPORT, pure computation module. No network, no Deno APIs: everything here is\n// offline-testable, and every number the report shows is produced by a function in this file\n// with its formula written next to it. v1.0, 4 Aug 2026.\n//\n// ACCURACY RULES (the non-negotiables the report was commissioned under):\n// - numbers come from platform APIs upstream of these functions, never typed in\n// - every derived figure's formula is stored beside it (FORMULAS below, rendered in appendix)\n// - anything unverifiable renders as \"not tracked yet\", never a guess\n\n// `attribution` was PROVEN present on 190/190 contacts in the live account on 4 Aug 2026, while\n// the `source` column was blank on 154 of the same 190. The CRM records where a person came from\n// in a place its own source column never reads from. Optional, because every older caller and\n// every test builds a ContactLite without it.\nexport type Attribution = { medium?: string | null; campaign?: string | null };\nexport type ContactLite = { dateAdded: string; source: string | null; tags: string[]; attribution?: Attribution | null };\nexport type EventLite = { startTime: number; appointmentStatus: string; calendarId: string };\nexport type OppLite = { createdAt: string; status: string; monetaryValue: number; lastStageChangeAt?: string | null };\n\nexport type Window = { startMs: number; endMs: number; label: string };\n\n// Reporting week: Friday 00:00 ET back seven days. The report is read Friday morning, so the\n// most recent COMPLETE window is the seven days ending Thursday midnight.\nexport function reportWindows(nowMs: number, tzOffsetMin: number): { current: Window; previous: Window } {\n // tzOffsetMin: minutes to ADD to UTC to get business-local (ET = -240 in summer).\n const local = new Date(nowMs + tzOffsetMin * 60_000);\n const day = local.getUTCDay(); // 0 Sun .. 5 Fri .. 6 Sat, in local terms\n // most recent Friday 00:00 local, strictly in the past or today\n const sinceFri = (day - 5 + 7) % 7;\n const fri = Date.UTC(local.getUTCFullYear(), local.getUTCMonth(), local.getUTCDate() - sinceFri);\n const friUtcMs = fri - tzOffsetMin * 60_000; // back to real UTC instant of local Friday 00:00\n const week = 7 * 86_400_000;\n return {\n current: { startMs: friUtcMs - week, endMs: friUtcMs, label: \"this week\" },\n previous: { startMs: friUtcMs - 2 * week, endMs: friUtcMs - week, label: \"last week\" },\n };\n}\n\nexport function inWindow(iso: string | number, w: Window): boolean {\n const t = typeof iso === \"number\" ? iso : Date.parse(iso);\n return Number.isFinite(t) && t >= w.startMs && t < w.endMs;\n}\n\n// ---- the formulas, stored as data so the appendix can print them verbatim -----------------------\nexport const FORMULAS: Record = {\n \"New inquiries\": \"how many new people landed in the CRM during the seven days, counted by the date the CRM stamped on them\",\n \"Pup Talks on the calendar\": \"how many Pup Talk appointments had a start time inside the seven days, not counting cancelled ones\",\n \"Showed\": \"how many of those the CRM marked as showed up\",\n \"Show rate\": \"showed divided by booked; the percentage is only quoted when at least five were booked, because a rate built on two appointments misleads\",\n \"Free Training Day\": \"the same counting, done against both Free Training Day calendars\",\n \"New customers\": \"people whose deal reached the Customer stage in the CRM during the week, counted in the week they got there, not the week they first got in touch\",\n \"Up or down on last week\": \"this week against the same count for the seven days before it, shown as level, or up or down by a percentage\",\n \"Cost per inquiry\": \"ad spend divided by new inquiries; appears once the ad account is linked, and is never estimated before then\",\n \"Did the ad leads land\": \"what the ad platform claims it delivered, side by side with what actually arrived in the CRM the same week\",\n};\n\nexport function countContacts(cs: ContactLite[], w: Window): number {\n return cs.filter((c) => inWindow(c.dateAdded, w)).length;\n}\n\nexport function sourceBreakdown(cs: ContactLite[], w: Window): Array<{ source: string; n: number }> {\n const m = new Map();\n for (const c of cs.filter((c) => inWindow(c.dateAdded, w))) {\n const s = (c.source || \"no source recorded\").trim().toLowerCase() || \"no source recorded\";\n m.set(s, (m.get(s) ?? 0) + 1);\n }\n return [...m.entries()].map(([source, n]) => ({ source, n })).sort((a, b) => b.n - a.n);\n}\n\nexport function countEvents(evs: EventLite[], w: Window): { booked: number; showed: number; noshow: number; cancelled: number } {\n const live = evs.filter((e) => inWindow(e.startTime, w));\n const ok = live.filter((e) => e.appointmentStatus !== \"cancelled\" && e.appointmentStatus !== \"invalid\");\n return {\n booked: ok.length,\n showed: ok.filter((e) => e.appointmentStatus === \"showed\").length,\n noshow: ok.filter((e) => e.appointmentStatus === \"noshow\" || e.appointmentStatus === \"no-show\").length,\n cancelled: live.length - ok.length,\n };\n}\n\nexport function wonOpps(os: OppLite[], w: Window): { count: number; value: number } {\n const won = os.filter((o) => o.status === \"won\" && inWindow(o.lastStageChangeAt || o.createdAt, w));\n return { count: won.length, value: won.reduce((a, o) => a + (Number(o.monetaryValue) || 0), 0) };\n}\n\n// weekly buckets for the 8-week chart, oldest first\n// The reader-facing name for each raw medium string. Anything not in this map is passed through\n// as itself rather than bucketed into \"other\", so a new channel appears by name instead of\n// silently vanishing into a catch-all nobody investigates.\nconst MEDIUM_LABEL: Record = {\n facebook: \"Facebook\", instagram: \"Instagram\", form: \"a form on your website\",\n chat_widget: \"the chat box on your website\", conversation: \"a direct message\",\n other: \"somewhere else\", email: \"email\", sms: \"text message\", phone: \"phone call\",\n};\nexport function prettyMedium(m: string | null | undefined): string {\n const k = (m || \"\").trim().toLowerCase();\n if (!k) return \"not recorded\";\n return MEDIUM_LABEL[k] ?? k.replace(/_/g, \" \");\n}\n// Where people actually came from, read from the attribution record rather than the source column.\nexport function channelBreakdown(cs: ContactLite[], w: Window): Array<{ source: string; n: number }> {\n const m = new Map();\n for (const c of cs.filter((c) => inWindow(c.dateAdded, w))) {\n const label = prettyMedium(c.attribution?.medium);\n m.set(label, (m.get(label) ?? 0) + 1);\n }\n return [...m.entries()].map(([source, n]) => ({ source, n }))\n .sort((a, b) => (b.n - a.n) || a.source.localeCompare(b.source));\n}\n// Named campaigns. A campaign name is ad-platform text, so it reaches the page as data and must\n// be escaped there like any other untrusted string.\nexport function campaignBreakdown(cs: ContactLite[], w: Window): Array<{ name: string; n: number }> {\n const m = new Map();\n for (const c of cs.filter((c) => inWindow(c.dateAdded, w))) {\n const name = (c.attribution?.campaign || \"\").trim();\n if (!name) continue;\n m.set(name, (m.get(name) ?? 0) + 1);\n }\n return [...m.entries()].map(([name, n]) => ({ name, n }))\n .sort((a, b) => (b.n - a.n) || a.name.localeCompare(b.name));\n}\n// How many of a window's contacts can be placed at all. This is the honest headline for the\n// section: \"we can account for X of Y\", never a bare count of the unexplained.\nexport function attributionCoverage(cs: ContactLite[], w: Window): { known: number; total: number } {\n const inW = cs.filter((c) => inWindow(c.dateAdded, w));\n return { known: inW.filter((c) => (c.attribution?.medium || \"\").trim()).length, total: inW.length };\n}\n\nexport function weeklyBuckets(cs: ContactLite[], endMs: number, weeks: number): number[] {\n const wMs = 7 * 86_400_000;\n const out = new Array(weeks).fill(0);\n for (const c of cs) {\n const t = Date.parse(c.dateAdded);\n if (!Number.isFinite(t) || t >= endMs || t < endMs - weeks * wMs) continue;\n const idx = weeks - 1 - Math.floor((endMs - 1 - t) / wMs);\n if (idx >= 0 && idx < weeks) out[idx]++;\n }\n return out;\n}\n\nexport function pct(n: number, d: number): string {\n if (!d) return \"n/a\";\n return Math.round((n / d) * 100) + \"%\";\n}\n\nexport function deltaWord(cur: number, prev: number): string {\n if (cur === prev) return \"level with last week\";\n if (prev === 0) return cur > 0 ? \"up from zero last week\" : \"level with last week\";\n const ch = Math.round(((cur - prev) / prev) * 100);\n return ch > 0 ? `up ${ch}% on last week` : `down ${Math.abs(ch)}% on last week`;\n}\n\nexport function money(n: number): string {\n return \"$\" + n.toLocaleString(\"en-US\", { minimumFractionDigits: 2, maximumFractionDigits: 2 });\n}\n\n// ---- draft commentary: rule-based sentences from the computed numbers. Never speculates. --------\n// Marked DRAFT in the page; the human tops and tails before it goes anywhere.\nexport function draftCommentary(f: {\n enq: number; enqPrev: number;\n ptBooked: number; ptPrev: number; ptShowed: number;\n wonCount: number; wonValue: number; wonPrevValue: number;\n topSource: string | null;\n adTracked: boolean;\n}): string[] {\n const lines: string[] = [];\n lines.push(\n `${f.enq} new ${f.enq === 1 ? \"inquiry\" : \"inquiries\"} came in this week, ${deltaWord(f.enq, f.enqPrev)}.` +\n (f.topSource === \"no source recorded\"\n ? ` Most arrived without a source recorded in the CRM, a tracking gap worth closing.`\n : f.topSource\n ? ` The biggest source was ${f.topSource}.`\n : \"\"),\n );\n lines.push(\n `${f.ptBooked} Pup Talk${f.ptBooked === 1 ? \" was\" : \"s were\"} on the calendar (${deltaWord(f.ptBooked, f.ptPrev)})` +\n (f.ptBooked >= 5 ? `, and ${f.ptShowed} of them showed (${pct(f.ptShowed, f.ptBooked)}).` : f.ptBooked > 0 ? `, ${f.ptShowed} showed.` : \".\"),\n );\n // The CRM holds no deal values (proven live: every opportunity is $0 and none are flagged\n // won), so this counts PEOPLE reaching the Customer stage and never implies a revenue figure.\n if (f.wonCount > 0) {\n lines.push(`${f.wonCount} ${f.wonCount === 1 ? \"person\" : \"people\"} reached the Customer stage this week.`);\n } else {\n lines.push(`Nobody reached the Customer stage in the CRM this week.`);\n }\n if (!f.adTracked) {\n lines.push(`Ad spend and cost per lead are not tracked yet, they appear the week the ad platform tokens are connected.`);\n }\n return lines;\n}\n",[184],"ab06b90a-4bea-4ed5-9cfe-9e9ba9cd3552","render.ts","5f8048e8-902f-11f1-8bd3-1607ee4eb77e",77,["D",1785866856515],"// MESSAGE RENDERING. Extracted from main.ts on 4 Aug 2026.\n//\n// WHY IT LIVES HERE: main.ts sits against a hard 80,000-character ceiling on the platform, and\n// these are the most self-contained functions in the file. Pulling them out also means the escape\n// and merge-field rules can be tested directly rather than only through a full engine run, which\n// matters because two of the fixes below came out of a security review, not a feature request.\n\n// Spec: dog name blank on ~70% of sampled contacts; fallback \"your puppy\" per the writing sheet's own\n// proposed default (§6 Q3). Messy-but-present values (multi-dog, junk like \"Money\") are used as-is —\n// that's an intake-form data-quality problem, not something to silently \"clean\" here.\nexport function resolveDogName(companyName: string | null | undefined): string {\n const v = (companyName ?? \"\").trim();\n return v.length > 0 ? v : \"your puppy\";\n}\n\n// Spec only discusses the blank-dog-name case explicitly. Added this small parallel safety net for a\n// blank first name (defensive, beyond spec's literal text) because \"Hi ,\" landing in a live message\n// would look obviously broken — same principle as the dog-name fallback, applied consistently.\nexport function resolveFirstName(firstName: string | null | undefined): string {\n const v = (firstName ?? \"\").trim();\n return v.length > 0 ? v : \"there\";\n}\n\nexport function applyMergeFields(template: string, firstName: string | null | undefined, companyName: string | null | undefined): string {\n // v1.8.1 — function form so $-patterns in names (\"Bo$$\") cannot corrupt the body.\n return template\n .replaceAll(\"{{FIRST_NAME}}\", () => resolveFirstName(firstName))\n .replaceAll(\"{{DOG_NAME}}\", () => resolveDogName(companyName));\n}\n\n// v1.8.1 — contact-typed fields and Kim's stories land in email HTML; escape BEFORE the\n// **bold** transform so markup we generate survives and markup anyone else typed does not.\nexport function escHtml(s: string): string {\n return s.replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string));\n}\n\nexport function mdBoldToHtml(text: string): string {\n return text.replace(/\\*\\*(.+?)\\*\\*/g, \"$1\");\n}\n\nexport function bodyToHtml(body: string, previewText?: string): string {\n const paragraphs = escHtml(body)\n .trim()\n .split(/\\n\\s*\\n/)\n .map((p) => `

${mdBoldToHtml(p.trim()).replace(/\\n/g, \"
\")}

`)\n .join(\"\\n\");\n // Hidden preheader technique so the approved \"preview text\" shows in an inbox list without being\n // visible in the opened email — standard, low-risk, one line.\n const preheader = previewText\n ? `\\n`\n : \"\";\n return preheader + paragraphs;\n}\n\n",[192],"3d5538c0-5841-4f98-af81-98e09e3b5887","puppy-messages.ts","cd4b87b0-8c34-11f1-b87e-1607ee4eb77e",99,["D",1785871894236],4,"// PUPPY PATH — message copy module (split from the engine for val.town's 80k/file limit).\n// Copy is VERBATIM from PHASE1-PUPPY-PATH-WRITING-SHEET.md §3 — do not paraphrase here, ever.\ndeclare const Deno: { env: { get(key: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\n\n// ---- v1.3 change, 2 Aug 2026 — booking URL. RETRACTION APPENDED, read the whole block ----------\n// The previous value was:\n// https://api.leadconnectorhq.com/widget/bookings/pbe-discovery-9edbddc3-4b5a-406e-9bc3-7f10cb0d3221\n//\n// WHAT I ORIGINALLY WROTE HERE (and it was wrong): that this id \"does NOT belong to this location\"\n// and was the parent agency's own discovery-call widget.\n//\n// RETRACTED, same day, on better evidence. Re-checking GET /calendars/?locationId=BQHJ19uohldYe3eqA0bl\n// field by field shows `pbe-discovery-9edbddc3-4b5a-406e-9bc3-7f10cb0d3221` is the *widget slug of\n// Kim's own \"Pup Talk Phone Call\" calendar* — the same calendar as qHuYJ0NEqzibnoqf5Cw3. Confirmed\n// independently: https://book.thedogsspotga.com/phone (the page the website's own \"Book your Free\n// Pup Talk\" button leads to) contains BOTH strings. /widget/bookings/ and\n// /widget/booking/ are two URL forms for one object; both return 200 and both land on\n// her calendar. The original link was never broken. I inferred \"not hers\" from the \"pbe\" prefix —\n// which is Pet Biz Experts, the agency that set the account up and therefore named the slug — and\n// stated the inference as a verified finding. That is the error, and it is the kind that matters\n// more than the code change.\n//\n// The current value is kept anyway, for one real reason that survives the retraction: the engine\n// watches PUP_TALK_CALENDAR_ID (qHuYJ0NEqzibnoqf5Cw3) to detect a booking, so using the calendar-id\n// form makes the link a lead clicks and the object the engine watches literally the same string,\n// with no slug indirection to go stale. Secondary: the word \"discovery\" does not appear in it, and\n// Kim asked for \"Pup Talk\" instead.\n//\n// Regression test A1 asserts `!includes(\"pbe-\")`. That assertion is now a style rule, not a\n// correctness rule. Left in place; the comment above is the correction of record.\nexport const REAL_BOOKING_URL =\n \"https://api.leadconnectorhq.com/widget/booking/qHuYJ0NEqzibnoqf5Cw3\";\nexport const SHORT_BOOKING_LINK = Deno.env.get(\"SHORT_BOOKING_LINK\") || REAL_BOOKING_URL;\n\n// Phone number: two live candidates, and the earlier note here (\"zero signals point to 912-823-4382\")\n// is CORRECTED as of 2 Aug 2026. Signals for 912-823-4382 turned out to be strong: it is the meeting\n// location on 73 of 193 Pup Talk appointments, it is the number in the default confirmation text of\n// BOTH booking widgets (\"please call our office at (912) 823-4382\"), and thedogsspotga.com/about-5\n// tells customers to ring it to schedule a training drop-off.\n// Still using 912-348-8726, on a narrower and now-honest basis: it is the number in the website\n// footer on every page and behind the home page \"Call Us\" button, so it is the number a lead who\n// found the site already has. Both are real. Kim must pick one before go-live — flagged on the todo\n// list, not decided quietly.\nexport const PHONE_DISPLAY = Deno.env.get(\"PHONE_DISPLAY\") || \"912-348-8726\";\n\nexport type Channel = \"email\" | \"sms\";\n\nexport type MessageTemplate = {\n id: string;\n channel: Channel;\n offsetHours: number;\n subject?: string; // email only\n previewText?: string; // email only\n bodyTemplate: string;\n};\n\n// ---- message copy (PHASE1-PUPPY-PATH-WRITING-SHEET.md §3, VERBATIM — do not paraphrase) ----------\n// {{FIRST_NAME}} is the ONLY per-contact merge token, resolved at render time by\n// v2.0, 4 Aug 2026. {{DOG_NAME}} was removed from every message in this file and in the taper,\n// on Kim's instruction: \"we haven't always got the name and so if we have a placeholder for the\n// puppies name, it reads weird when there's no puppy in there so I think we should go with having\n// the person's name, but not necessarily the puppies name\". Facebook leads, which are four in\n// five of all inquiries, frequently arrive with no dog name at all. Every sentence that used it\n// was REWRITTEN to read naturally without one, rather than having \"your puppy\" substituted in\n// mechanically, because the mechanical version is exactly what she was objecting to.\n// Also on her instruction, same message: toilet -> potty, garden -> yard, and DAYCARE REMOVED\n// ENTIRELY. They do not offer daycare. That is the same class of error as describing grooming as\n// a service, and it had been sitting in four messages.\n// The old comment, for the record:\n// applyMergeFields(). [phone] / [link] are fixed placeholders per the writing sheet's own §1\n// distinction (Title Case = merge field, lower case = placeholder) — resolved ONCE below via real\n// template-literal interpolation of PHONE_DISPLAY / SHORT_BOOKING_LINK, not per contact.\n// **bold** markdown in messages 3/5/6 is rendered to by bodyToHtml() — that is a formatting\n// transform, not a wording change; the words themselves are untouched.\n\nexport const MAIN_SEQUENCE: MessageTemplate[] = [\n {\n id: \"main-1\",\n channel: \"email\",\n offsetHours: 0,\n subject: \"Getting your puppy off to a good start\",\n previewText: \"A few things that matter more than people expect in these first weeks.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThanks for getting in touch.\n\nWhether you're bringing a puppy home soon, or yours is already running circles around the kitchen, the timing of what happens next matters more than people expect.\n\nA puppy's window for learning that new people, new dogs, new places and new sounds are all safe starts closing earlier than most owners realize - a lot of that learning is done by around four to five months old. Whatever they meet calmly now tends to stay easy for life. Whatever gets missed is harder to fix later. Not impossible, just harder, and it usually takes longer than it would have the first time round.\n\nOver the next few weeks I'll send you a handful of short, practical emails - biting, potty training, recall, that sort of thing. Real advice, not fluff.\n\nIf you'd rather just talk it through now, that's what a Pup Talk is for - a real conversation with our team about how things are going, not a sales pitch. Reply to this email, call or text us on ${PHONE_DISPLAY}, or grab a time here: ${SHORT_BOOKING_LINK}.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"main-2\",\n channel: \"sms\",\n offsetHours: 2,\n bodyTemplate: `Hi {{FIRST_NAME}}, it's Kim at The Dogs Spot. Got your message - welcome. I'll send a few honest, useful puppy emails over the next few weeks. Reply anytime, a real person reads these.`,\n },\n {\n id: \"main-3\",\n channel: \"email\",\n offsetHours: 72, // day 3\n subject: \"Puppy biting: normal, not naughty\",\n previewText: \"What's actually going on when a puppy won't stop mouthing, and what helps.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nIf your puppy has started biting at hands, sleeves, ankles, shoelaces - that's not a behavior problem. It's normal. Puppies explore the world with their mouths the way toddlers explore it with their hands, and it usually gets worse before it gets better, especially once teething starts.\n\nA few things that actually help:\n\n**Redirect, don't just say no.** Keep a toy or a chew within arm's reach of wherever you usually sit, so it's already in your hand before the mouthing starts rather than after. The moment teeth touch skin, swap your hand for the toy. Saying \"no\" tells them to stop; it doesn't tell them what to do instead, and a puppy who is told to stop with nothing to switch to just tries again.\n\n**Watch for the overtired witching hour.** A lot of biting spikes happen when a puppy is overstimulated or short on sleep, not when they're being difficult. A nap often does more than any correction.\n\n**Yelp, don't wrestle.** If it hurts, a short \"ow\" and a pause in play teaches bite inhibition better than pulling your hand away, which can turn into a game.\n\nIt gets better. Most of this settles down significantly by six months, and properly once the adult teeth are in. It feels endless at week two. It isn't.\n\nIf any of that doesn't match what you're seeing, reply and tell me - I read these.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"main-4\",\n channel: \"sms\",\n offsetHours: 144, // day 6\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim here. Quick one - how's the biting and potty training going? Totally normal stage either way. Reply and let me know, happy to help.`,\n },\n {\n id: \"main-5\",\n channel: \"email\",\n offsetHours: 216, // day 9\n subject: \"A realistic potty-training timeline\",\n previewText: \"What actually helps, and why one accident isn't a setback.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nPotty training questions are the ones I get asked about most, usually some version of \"is this normal?\" Almost always, yes.\n\nA young puppy's bladder is small and their control over it is genuinely limited - not a matter of trying harder. As a rough guide, a lot of trainers use \"roughly one hour of control for every month of age\" early on, which is why an eight- or ten-week-old puppy needs to go out far more often than seems reasonable.\n\nWhat tends to work:\n\n**A schedule, not a hope.** Out first thing, after every meal, after every nap, after play, and last thing at night - before you think they need it, not after.\n\n**Same spot, same word.** Consistency does more work than any product. Pick a spot, use a calm word or phrase every time, and reward the second they finish outside, not back indoors where the reward disconnects from the act.\n\n**Supervise or contain.** Accidents mostly happen when a puppy has quiet, unsupervised access to another room. A crate, a pen, or simply keeping them in sight closes that gap.\n\n**No telling off for accidents.** By the time you've found it, they have moved on. Telling them off teaches confusion, not house manners.\n\nMost puppies are largely reliable by four to six months, and fully reliable somewhat later. If yours is well past that and still having accidents daily, that's worth looking at properly rather than pushing through - reply and tell me what's happening.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"main-6\",\n channel: \"email\",\n offsetHours: 312, // day 13\n subject: \"Recall is a habit, not a hope\",\n previewText: `Why \"come\" is worth starting now, even before it matters.`,\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nRecall - getting your puppy to come back reliably - is the one piece of training that keeps a dog safe for the rest of their life. It's also the easiest one to start too late.\n\nThe mistake most people make isn't training it wrong. It's not starting until it's needed - at the park, off lead, with distractions already in the way. By then you're teaching recall and competing for attention at the same time.\n\nStarted early, it's simple:\n\n**Practice where nothing's competing for attention.** Hallway, living room, yard. Say the word once, and make coming back to you the best thing that happens all day - food, praise, a game, whatever they actually want.\n\n**Never call for something unpleasant.** If \"come\" ever means bath time, nail clipping, or the end of a walk, it stops meaning \"good things happen.\" Go get them for that instead.\n\n**Reward every single time, at first.** Not just the good ones. Recall is a habit you're building, not a trick you're testing.\n\nRecall is the one people most often ask me to look at, usually because it worked in the yard and then stopped working everywhere else. If you'd like a hand with it, a Pup Talk is a free twenty-minute call and there's no pitch in it: ${SHORT_BOOKING_LINK}, or call or text ${PHONE_DISPLAY}.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"main-7\",\n channel: \"sms\",\n offsetHours: 408, // day 17\n bodyTemplate: `Hi {{FIRST_NAME}}, no pressure at all - if you'd like to talk through training or boarding for your puppy, we're easy to reach. Call or text ${PHONE_DISPLAY}, or book a time here: ${SHORT_BOOKING_LINK}. Kim, The Dogs Spot`,\n },\n {\n id: \"main-8\",\n channel: \"email\",\n offsetHours: 504, // day 21\n subject: \"The last puppy email from me for now\",\n previewText: \"What matters most from the last three weeks, and an open door.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThis is the last of the every-few-days emails, so a quick summary of everything I've sent: get your puppy meeting the world calmly while that window's open, expect the biting and treat it as normal, keep the potty-training schedule boring and consistent, and start recall before you need it, not after.\n\nNone of that is complicated. Most of it is just easy to talk yourself out of doing consistently when you're tired and there's a puddle on the floor again.\n\nFrom here I'll slow right down - a short note each week for a few weeks, then less and less, only ever the useful kind, and never a sales pitch. If you'd like to talk any of this through properly - what's normal for your puppy specifically, what training or boarding would actually suit your week, what it costs and when it makes sense to start - that's what a Pup Talk is for. It's a conversation, not a pitch. Reply here, call or text ${PHONE_DISPLAY}, or grab a time yourself: ${SHORT_BOOKING_LINK}.\n\nAnd if now just isn't the right time, that's completely fine too. No hard feelings, and the door doesn't close.\n\nKim\nThe Dogs Spot`,\n },\n];\n\nexport const BRANCH_A: MessageTemplate[] = [\n {\n id: \"branch_a-1\",\n channel: \"sms\",\n offsetHours: 2,\n bodyTemplate: `Hi {{FIRST_NAME}}, it's Kim - looks like we missed each other for your Pup Talk. No worries at all, it happens. Want me to find another time? Just reply and I'll schedule it.`,\n },\n {\n id: \"branch_a-2\",\n channel: \"email\",\n offsetHours: 24, // day +1\n subject: \"Let's find another time\",\n previewText: \"Fifteen minutes, whenever actually suits.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nI noticed we had a Pup Talk scheduled, but we missed each other. No worries at all, I know life gets busy.\n\nIt's a quick, no-pressure call where we'll talk about what's been going on, answer any questions you have, and see whether training with us would be a good fit. And if we're not the right fit, I'll tell you that too.\n\nJust reply with a couple of times that work for you, call or text me at ${PHONE_DISPLAY}, or book a time that's convenient here: ${SHORT_BOOKING_LINK}.\n\nIf I don't hear back, I'll assume now just isn't the right time and won't keep bugging you. Whenever you're ready, just reach out, I'd be happy to help.\n\nKim\nThe Dogs Spot`,\n },\n];\n\nexport const BRANCH_B: MessageTemplate[] = [\n {\n id: \"branch_b-1\",\n channel: \"email\",\n offsetHours: 24, // day +1 after the call\n subject: \"Good talking with you\",\n previewText: \"No pitch here, just a couple of things from our conversation.\",\n bodyTemplate: `Hi {{FIRST_NAME}},\n\nThanks for the call. It's genuinely useful for me to hear how things are going, even outside of anything you decide to book.\n\nIf it's not the right time for training or boarding with us, that's completely fine. A lot of people need more than one conversation before it's the right moment, and that's how it should work - nobody should sign up on a call because it felt awkward not to.\n\nIf anything changes, or a question comes up later that we didn't cover, reply here or call or text ${PHONE_DISPLAY}. I'm not going to chase you for an answer. I'd just rather you knew the door's open than wonder.\n\nKim\nThe Dogs Spot`,\n },\n {\n id: \"branch_b-2\",\n channel: \"sms\",\n offsetHours: 192, // day +8 after the call\n bodyTemplate: `Hi {{FIRST_NAME}}, Kim again - no news needed, just checking how you're both getting on. If a question's come up since we spoke, reply here anytime. No pressure either way.`,\n },\n];\n\n",[199],"6c907114-02d6-405e-ace5-cff9a67c38c6","paths.ts","243d2a8e-8e78-11f1-bbbc-1607ee4eb77e",115,["D",1785875966105],3,"// PATH REGISTRY — the six nurture paths as data, plus the validator that guards them. 2 Aug 2026.\n//\n// WHY\n// The engine was written for one path. Generalising it by rewriting the state machine on a live\n// client system is the kind of refactor that breaks something nobody notices for a week. The\n// cheaper and safer generalisation is to move the *definition* of a path out of code: a path is a\n// tag, a sequence of steps, and a set of exit rules. The engine already treats steps as data\n// (renderStep takes a template); this file makes the whole path a record.\n//\n// RETRACTED, 2 Aug 2026. This file used to claim registering paths 2-6 was \"a copy drop, not an\n// engineering job\". That was wrong and it was repeated to the client. The engine does not read this\n// file: puppy_path_v1.1.ts imports MAIN_SEQUENCE/BRANCH_A/BRANCH_B directly from puppy-messages.ts,\n// hardcodes TAG_SOURCE_SIGNAL, and stores Record — one position per contact,\n// not one per path. Dropping steps into a row below would render a green line on this page and send\n// nothing. Path 2 needs the state model, per-path tag mapping, sequence selection and precedence\n// rules built. Days, not an afternoon. This page is a registry and a validator; it is not wiring.\n//\n// THE VALIDATOR IS THE POINT\n// Every path, before it can be registered, has to survive the same checks the test suite runs\n// against the puppy path: no banned wording, no unresolved merge token, SMS inside carrier limits,\n// at least one opt-out line, a booking link that points at a calendar this account actually owns,\n// monotonic timing, and a defined terminal step. A path that fails is refused with reasons rather\n// than half-registered.\n//\n// ?k= the registry: what is defined, what is live, what is missing\n// ?k=&validate=1 run the validator over everything registered\n// ?k=&f=json the same as JSON\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC —\n// proved by fetching this very source with no token — so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\n\n// The one calendar this account owns for training consults. Verified live 2 Aug against\n// GET /calendars/?locationId= — \"Pup Talk Phone Call\". Any booking link in any path must contain it.\nconst OWNED_BOOKING_ID = \"qHuYJ0NEqzibnoqf5Cw3\";\nconst OWNED_BOARDING_FORM = \"thedogsspotga.com/boarding-booking-form\";\n\nexport type Step = {\n id: string;\n channel: \"email\" | \"sms\";\n offsetHours: number;\n subject?: string;\n previewText?: string;\n bodyTemplate: string;\n};\n\nexport type PathDef = {\n key: string;\n label: string;\n sourceTag: string; // applying this tag in the CRM is how a human enrols someone\n enrolledTag: string; // minted by the engine on enrolment\n source: \"engine\" | \"ghl\" | \"off\"; // mutual exclusion: never let a val and a GHL workflow both own a path\n channelsAtLaunch: (\"email\" | \"sms\")[];\n steps: Step[];\n notes: string;\n // v1.5, 2 Aug 2026 — THE COLLISION MAP, and the most important field in this file.\n // `source` was always a DECLARATION of who owns a path. It was never checked against what the CRM\n // is actually running. Checked properly today via GET /workflows/?locationId= : the location has\n // 165 workflows, 95 of them PUBLISHED, and every one of the six paths below already has published\n // GoHighLevel automation whose name overlaps it. Declaring `source: \"engine\"` does not switch those\n // off. GoHighLevel exposes no endpoint for reading a contact's workflow enrolments\n // (/contacts/{id}/workflow -> 404) so overlap cannot be detected per contact — only per path, by a\n // human reading each workflow. Until a row here is cleared, treat it as live competition for the\n // same customer's inbox. The engine's R27 quiet-period guard is the runtime backstop; this list is\n // the thing that stops us needing it.\n ghlOverlap: { name: string; status: \"published\" | \"draft\"; version: number }[];\n};\n\n// ---- the registry ---------------------------------------------------------------------------------\n// PUPPY is populated from the deployed module so there is exactly one copy of that copy. The other\n// five are declared with everything except their steps: the tag names, the launch channels and the\n// constraints are all decided, so registering them is `steps: [...]` and nothing else.\n\nimport { MAIN_SEQUENCE, BRANCH_A, BRANCH_B } from \"./puppy-messages.ts\";\n\nexport const PATHS: PathDef[] = [\n {\n key: \"puppy\", label: \"Puppy owners\", sourceTag: \"nurture - puppy\", enrolledTag: \"puppy-path-v1\",\n source: \"engine\", channelsAtLaunch: [\"email\", \"sms\"],\n steps: [...MAIN_SEQUENCE, ...BRANCH_A, ...BRANCH_B] as Step[],\n notes: \"Live in the engine. 8 main + 2 no-show + 2 didn't-buy. The template for the other five.\",\n ghlOverlap: [\n { name: \"1. Wait 1 Day: Initial Nurture - Puppy\", status: \"published\", version: 2 },\n { name: \"1. Wait 1 Day: Initial Nurture\", status: \"published\", version: 2 },\n { name: \"Edited - Main New Nurture (New/Updated)\", status: \"published\", version: 4 },\n { name: \"Secondary Nurture Workflow\", status: \"published\", version: 4 },\n { name: \"A. Removed Tag : Initial Lead Nurtures\", status: \"published\", version: 2 },\n { name: \"Secondary Nurture - PUPPY Workflow\", status: \"draft\", version: 5 },\n { name: \"1. Initial Nurture - Facebook\", status: \"draft\", version: 3 },\n { name: \"1. Initial Nurture - Instagram\", status: \"draft\", version: 3 },\n ],\n },\n {\n key: \"behaviour\", label: \"Behaviour problems\", sourceTag: \"nurture - behaviour\", enrolledTag: \"behaviour-path-v1\",\n source: \"off\", channelsAtLaunch: [\"email\", \"sms\"], steps: [],\n notes: \"Largest real demand signal — 172 asks in the gap log. The day-14 aggression email is the highest-risk message in the whole set and Kim reads it personally before this path is switched on.\",\n ghlOverlap: [\n { name: \"Behavior Quiz Submitted\", status: \"published\", version: 3 },\n { name: \"Dialed In Dog ZJ : Free Training Day Quiz\", status: \"published\", version: 16 },\n { name: \"Quiz -. Pup Talk > Notes\", status: \"published\", version: 4 },\n { name: \"Quiz Score Redirect Logic\", status: \"draft\", version: 6 },\n ],\n },\n {\n key: \"boarding\", label: \"Boarding enquiries\", sourceTag: \"nurture - boarding\", enrolledTag: \"boarding-path-v1\",\n source: \"off\", channelsAtLaunch: [\"email\", \"sms\"], steps: [],\n notes: \"The only path allowed to quote prices, and only the boarding ones Kim confirmed. Every mention of hours must carry the appointment-only rule. Booking goes to her website form, never a GHL calendar.\",\n ghlOverlap: [\n { name: \"Boarding Drop-Off - Confirmation + Reminder\", status: \"published\", version: 19 },\n { name: \"Boarding Pick-Up - Confirmation + Reminder\", status: \"published\", version: 25 },\n { name: \"Abandoned Cart - Partial booking\", status: \"published\", version: 5 },\n { name: \"Cancel Boarding - Drop Off\", status: \"published\", version: 3 },\n { name: \"Online Boarding Update > Kennel\", status: \"published\", version: 4 },\n { name: \"Boarding App Webhook\", status: \"published\", version: 18 },\n ],\n },\n {\n key: \"noshow\", label: \"Pup Talk — didn't show\", sourceTag: \"nurture - noshow\", enrolledTag: \"noshow-path-v1\",\n source: \"off\", channelsAtLaunch: [\"email\", \"sms\"], steps: [],\n notes: \"Closes a measured hole: 19 no-shows and 8 cancellations across 145 Pup Talk events with nothing following up.\",\n ghlOverlap: [\n { name: \"Cxld/Canceled Pup Talk\", status: \"published\", version: 7 },\n { name: \"Cxld or No Show - Consult Nurture\", status: \"published\", version: 4 },\n { name: \"Free training day no show nurture\", status: \"published\", version: 9 },\n { name: \"Cxld/Canceled Free Training Day\", status: \"published\", version: 4 },\n { name: \"Tag Added 'No Show' > No Show\", status: \"published\", version: 2 },\n { name: \"Tag Added 'No Show DND' > No Show TO PREVENT ANOTHER BOOKING\", status: \"published\", version: 2 },\n { name: \"Free Training Day abandoned booking\", status: \"published\", version: 8 },\n ],\n },\n {\n key: \"didntbuy\", label: \"Pup Talk — didn't buy\", sourceTag: \"nurture - didntbuy\", enrolledTag: \"didntbuy-path-v1\",\n source: \"off\", channelsAtLaunch: [\"email\", \"sms\"], steps: [],\n notes: \"82 attended and few converted. Kim's $500 discount decision lives near this path — keep them separate until its wording and its own dry/live toggle exist.\",\n ghlOverlap: [\n { name: \"POST CONSULT - NO SALE NURTURE MESSAGES\", status: \"published\", version: 4 },\n { name: \"Tag added 'No Sale' > No Sale Nurture\", status: \"published\", version: 2 },\n ],\n },\n {\n key: \"aged\", label: \"Dormant enquiries\", sourceTag: \"nurture - aged\", enrolledTag: \"aged-path-v1\",\n source: \"off\", channelsAtLaunch: [\"email\"],\n steps: [],\n notes: \"EMAIL ONLY AT LAUNCH, and the audience is far smaller than the headline: of 3,426 dormant contacts only ~164 have an email address and ~2,655 have neither email nor phone. SMS stays held until numbers are validated — stale numbers get a business flagged by carriers, which would damage every other path.\",\n ghlOverlap: [\n { name: \"Tips Nurture\", status: \"published\", version: 7 },\n { name: \"TIPS FACEBOOK CAMPAIGN - SMS Nurture\", status: \"published\", version: 3 },\n { name: \"Auto Replies > tips campaign\", status: \"published\", version: 10 },\n { name: \"Copy - Tips Ad campaign > Auto Responder\", status: \"published\", version: 11 },\n { name: \"Tips ad campaign > response > phone number\", status: \"published\", version: 10 },\n { name: \"Tips Ad campaign > Auto Responder\", status: \"draft\", version: 19 },\n ],\n },\n];\n\n// ---- the validator --------------------------------------------------------------------------------\n\nconst BANNED = [\n { re: /discovery/i, why: 'Kim banned \"discovery call\" — it is \"Pup Talk\"' },\n { re: /grooming/i, why: \"grooming is not a service they offer\" },\n { re: /\\$\\s?\\d/, why: \"a price in a message; boarding prices come from the knowledge base, training prices never\" },\n // Templates legitimately contain {{FIRST_NAME}} and {{DOG_NAME}} — they are resolved per contact at\n // render time, and the engine has fallbacks for both when a contact has neither. Anything ELSE in\n // double braces is a token nobody wired up, which is what actually reaches a customer as literal\n // text. Caught by the first validator run, which flagged all 12 real templates: a check that fails\n // on correct input is worse than no check.\n { re: /\\{\\{(?!\\s*(FIRST_NAME|DOG_NAME)\\s*\\}\\})/, why: \"an unrecognised merge token — only {{FIRST_NAME}} and {{DOG_NAME}} are wired up\" },\n { re: /\\[link\\]|\\[phone\\]|INSERT|TODO|LOREM/i, why: \"a placeholder that never got resolved\" },\n];\n\nexport function validatePath(p: PathDef) {\n const errors: string[] = [], warnings: string[] = [];\n if (!p.steps.length) return { key: p.key, registered: false, ok: false, errors: [\"no steps registered yet\"], warnings: [] };\n\n let sawOptOut = false, sawBooking = false;\n const sms = p.steps.filter((s) => s.channel === \"sms\");\n\n for (const s of p.steps) {\n const text = `${s.subject ?? \"\"}\\n${s.previewText ?? \"\"}\\n${s.bodyTemplate}`;\n for (const b of BANNED) if (b.re.test(text)) errors.push(`${s.id}: ${b.why}`);\n if (/\\bstop\\b/i.test(s.bodyTemplate) || /reply\\s+stop/i.test(s.bodyTemplate)) sawOptOut = true;\n if (s.bodyTemplate.includes(OWNED_BOOKING_ID) || s.bodyTemplate.includes(OWNED_BOARDING_FORM)) sawBooking = true;\n if (/leadconnectorhq\\.com\\/widget\\/bookings?\\//.test(s.bodyTemplate) &&\n !s.bodyTemplate.includes(OWNED_BOOKING_ID)) {\n errors.push(`${s.id}: booking link does not point at a calendar this account owns — this is the exact defect found on 2 Aug`);\n }\n if (s.channel === \"sms\" && s.bodyTemplate.length > 320) errors.push(`${s.id}: SMS ${s.bodyTemplate.length} chars, over the 320 ceiling`);\n if (s.channel === \"email\" && !s.subject) errors.push(`${s.id}: email with no subject line`);\n }\n\n const offsets = p.steps.map((s) => s.offsetHours);\n const mainish = p.steps.filter((s) => s.id.startsWith(\"main\"));\n if (mainish.length > 1) {\n for (let i = 1; i < mainish.length; i++) {\n if (mainish[i].offsetHours <= mainish[i - 1].offsetHours) {\n errors.push(`${mainish[i].id}: timing does not move forward (${mainish[i - 1].offsetHours}h then ${mainish[i].offsetHours}h)`);\n }\n }\n }\n if (Math.max(...offsets) < 24 * 21) warnings.push(`longest step is ${Math.round(Math.max(...offsets) / 24)} days — the client was sold a minimum 30-day journey`);\n if (!sawOptOut && sms.length) warnings.push(\"no opt-out wording found in any SMS\");\n if (!sawBooking) warnings.push(\"no booking link anywhere in this path\");\n if (p.source === \"engine\" && p.channelsAtLaunch.includes(\"sms\") && p.key === \"aged\") {\n errors.push(\"aged path must not launch with SMS until the number list has been validated\");\n }\n\n return { key: p.key, registered: true, ok: errors.length === 0, errors, warnings, steps: p.steps.length, sms: sms.length, email: p.steps.length - sms.length };\n}\n\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n const results = PATHS.map(validatePath);\n const payload = {\n at: new Date().toISOString(),\n registered: results.filter((r) => r.registered).length,\n awaitingCopy: results.filter((r) => !r.registered).map((r) => r.key),\n live: PATHS.filter((p) => p.source === \"engine\").map((p) => p.key),\n mutualExclusion: \"each path names exactly one owner — engine, ghl, or off. No path can be run by both.\",\n paths: PATHS.map((p) => ({\n key: p.key, label: p.label, sourceTag: p.sourceTag, enrolledTag: p.enrolledTag,\n source: p.source, channelsAtLaunch: p.channelsAtLaunch, steps: p.steps.length, notes: p.notes,\n validation: results.find((r) => r.key === p.key),\n })),\n };\n if (url.searchParams.get(\"f\") === \"json\" || url.searchParams.get(\"validate\") === \"1\") {\n return new Response(JSON.stringify(payload, null, 2), { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n const rows = payload.paths.map((p: any) => {\n const v = p.validation;\n const status = !v.registered ? 'awaiting copy'\n : v.ok ? 'passes every check'\n : `${v.errors.length} problem(s)`;\n return `${p.label}
${p.sourceTag}${p.source}${p.steps || \"—\"}${status}${p.notes}`;\n }).join(\"\");\n return new Response(`Nurture paths\n\n
The six nurture paths
\n
${payload.registered} of ${payload.paths.length} have copy registered. Registering the rest is a copy drop — the tag, the channels and the constraints are already decided, and every path is checked against the same rules before it can run.
\n${rows}
Path Owner Steps Validator Constraint that governs it
\n
Owner is the mutual-exclusion switch: engine, ghl, or off. Nothing can be run by two systems at once — that is what put a Facebook script on the website in July.
`,\n { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n}\n",[207],"2f49bdc6-7904-41ea-870b-139ac6c98454","main.ts","cdd9f676-8c34-11f1-baf4-1607ee4eb77e",107,["D",1785874265763],12,"interval","// PUPPY PATH ENGINE v1.1 — nurture automation for The Dogs Spot's puppy leads (built 27 Ju\n// (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n\n// ---- Node/tsx compatibility shim, for the local test harness only --------------------------------\n// Val.town/Deno provides a global `Deno`; this file is normally only ever loaded there. No Deno\n// runtime was available in this build/test session, so the local test harness\n// (puppy-path-engine.test.ts) imports this exact file under Node + tsx instead. The lines below define\n// a minimal stand-in ONLY when `Deno` doesn't already exist. Under real val.town execution `Deno` is\n// already defined, the `if` is false, and this block never runs — zero effect on deployed behavior.\ndeclare const Deno: { env: { get(key: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\n\n// Message copy + display constants live in ./puppy-messages.ts (split for val.town's 80k/file cap).\nimport {\n MAIN_SEQUENCE,\n BRANCH_A,\n BRANCH_B,\n PHONE_DISPLAY,\n REAL_BOOKING_URL,\n SHORT_BOOKING_LINK,\n} from \"./puppy-messages.ts\";\nimport type { Channel, MessageTemplate } from \"./puppy-messages.ts\";\n// v1.7 — slow track (taper). Copy+cadence in ./taper-messages.ts; Kim's spec (3 Aug): weekly x4,\n// fortnightly x13, then monthly forever, no asks. Same rails: reply pauses, booking exits, consent.\nimport { nextSlowTouch, monthlyTemplateFor, monthlyTemplateAvoidingRepeat } from \"./taper-messages.ts\";\n// v1.8 — Kim's real stories, one data file, additive slots. Null slots render as nothing.\nimport { resolveStories } from \"./kim-stories.ts\";\nimport { appendRunStamp } from \"./cadence.ts\";\nimport { resolveDogName, resolveFirstName, applyMergeFields, escHtml, bodyToHtml } from \"./render.ts\";\n\n// ---- reference IDs (spec §2, all verified live this session unless noted) ------------------------\n\nconst GHL = \"https://services.leadconnectorhq.com\";\n// v1.2 — TOKEN RESOLUTION: GHL_TOKEN env var, else private blob `puppy_config`. Blob fallback\n// exists because val.town has no env-var API. Code is public; token never hardcoded. Full note:\n// NOTES-v1.4.md.\nlet TOKEN: string | undefined = Deno.env.get(\"GHL_TOKEN\");\nasync function resolveToken(): Promise {\n if (TOKEN) return TOKEN;\n try {\n const blob = await getBlobModule();\n const cfg = await blob.getJSON(\"puppy_config\").catch(() => null);\n if (cfg?.ghlToken) TOKEN = String(cfg.ghlToken);\n } catch { /* stays undefined; j() will throw a clear auth error */ }\n return TOKEN;\n}\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst MAIN_PIPELINE_ID = \"FXt1UpCVBufbF0v3pfyf\"; // \"1) Initial Lead Pipeline\"\n\nconst STAGE = {\n NEW_LEAD: \"ccb18375-9aa1-40aa-a071-1581ca739533\",\n LEAD_NURTURE: \"00d0f792-38e5-444e-8995-a1be96e77d3b\",\n FREE_TRAINING_DAY: \"43ea02b4-529b-4063-b638-447414d603d2\",\n PUP_TALK: \"379d1dd2-fc18-4720-a840-e8f8ed703bb9\",\n CXLD_PUPTALK_TRAINING_DAY: \"4b5599d3-a5ad-4b8c-8388-4d5507c22fd7\",\n NO_SALE_NURTURE: \"e4511876-0adb-417b-a6be-8460a194f913\",\n DISQUALIFIED: \"38826f17-1d0e-4bac-b53e-349b67c2c79d\",\n NO_SHOW: \"f3f41e5e-edaf-4ef1-8cec-c4cccd4ec5c2\",\n ONBOARDING: \"76c72f7f-56bd-4f44-964d-aa4cbbec7d25\",\n CUSTOMER: \"fd821b4e-bbe6-44de-b754-fa80e4823616\",\n WON_PAID: \"ae173310-f8b1-4399-acb7-ef1fc03d3697\",\n} as const;\n\nconst PUP_TALK_CALENDAR_ID = \"qHuYJ0NEqzibnoqf5Cw3\";\n\n\n// v1.1: env-overridable, and now understood as the HUMAN ENROLLMENT SWITCH, not auto-discovery of a\n// pre-existing population — live check 27 Jul: zero contacts carry it (or any spelling variant), so\n// applying it is how a human puts someone on the path. READ ONLY here, never written by this engine.\nconst TAG_SOURCE_SIGNAL = Deno.env.get(\"TAG_SOURCE_SIGNAL\") || \"nurture - puppy\";\nconst TAG_ENROLLED = \"puppy-path-v1\"; // minted by this engine, applied on enrollment\n\n// v1.1 send-window + surge-hold knobs (see header addendum). Read per call, not once at module load —\n// costs nothing at this call volume and lets the offline harness flip them per test section; under\n// val.town the env is static so behavior is identical either way.\nconst sendWindowStartHour = () => Number(Deno.env.get(\"SEND_WINDOW_START_HOUR\") ?? \"9\");\nconst sendWindowEndHour = () => Number(Deno.env.get(\"SEND_WINDOW_END_HOUR\") ?? \"19\");\nconst smsSundayOk = () => (Deno.env.get(\"SMS_SUNDAY_OK\") ?? \"false\") === \"true\";\nconst enrollSurgeThreshold = () => Number(Deno.env.get(\"ENROLL_SURGE_THRESHOLD\") ?? \"25\");\nconst acknowledgeSurge = () => (Deno.env.get(\"ACKNOWLEDGE_SURGE\") ?? \"false\") === \"true\";\nconst BUSINESS_TZ = \"America/New_York\";\n\n// v1.2 hardening knobs (adversarial-review round, 30 Jul). All env-overridable, read per call.\n// MIN_SEND_GAP_HOURS: floor between two sends to the SAME contact — after an outage, overdue steps\n// space out at 2h apart instead of one per 15-min cron tick (the designed main-1→main-2 gap is\n// exactly 2h, so the default never delays an on-schedule send).\n// MAX_SENDS_PER_RUN / MAX_SENDS_PER_DAY: blast ceilings, mirroring the PupsClub val's precedent.\n// Excess due-sends defer to later runs, identical in spirit to the send-window deferral.\nconst minSendGapHours = () => Number(Deno.env.get(\"MIN_SEND_GAP_HOURS\") ?? \"2\");\nconst maxSendsPerRun = () => Number(Deno.env.get(\"MAX_SENDS_PER_RUN\") ?? \"20\");\nconst maxSendsPerDay = () => Number(Deno.env.get(\"MAX_SENDS_PER_DAY\") ?? \"50\");\n// v1.4 — how often a contact gets a full CRM check even when nothing is due. The floor under\n// due-first filtering: cheap must not become blind.\n// v1.4 — how long a reply can sit unanswered before the engine escalates and releases the contact.\nconst pauseTimeoutDays = () => Number(Deno.env.get(\"PAUSE_TIMEOUT_DAYS\") ?? \"14\");\n// v1.5 R27 — how long the engine stands down after ANY other system messages the contact. 24h is one\n// full business cycle: long enough that a customer never gets our email on the same day as a workflow\n// text, short enough that a 21-day sequence still completes near schedule (a deferred step is never\n// dropped, it waits for the next run).\nconst foreignQuietHours = () => Number(Deno.env.get(\"FOREIGN_QUIET_HOURS\") ?? \"24\");\n// Tolerance when deciding \"was that outbound ours?\" — clock skew between our send and GHL stamping\n// the conversation. Anything inside this window of our own lastSentAt is treated as ours.\nconst OURS_TOLERANCE_MS = 5 * 60 * 1000;\nconst safetySweepHours = () => Number(Deno.env.get(\"SAFETY_SWEEP_HOURS\") ?? \"24\");\nconst RUN_LOCK_TTL_MS = 10 * 60 * 1000; // a run that started >10 min ago is presumed dead\n\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n// Rule 8's real signal — NOT CONFIRMED LIVE this session, see gap #2 in the header comment. Left as a\n// clearly-named constant so wiring in the real value later is a one-line change, not a re-guess.\nconst PUP_TALK_DECLINED_TAG = \"TDS-Declined\";\n\nconst HOUR_MS = 3600 * 1000;\nconst DAY_MS = 24 * HOUR_MS;\n\nconst TEST_MODE = (Deno.env.get(\"TEST_MODE\") ?? \"true\") !== \"false\";\n\n// ---- data model (spec §4, verbatim) ---------------------------------------------------------------\n\ntype PuppyStatus =\n | \"main\" | \"awaiting_appt_outcome\" | \"branch_a\" | \"branch_b\" | \"slow_track\"\n | \"paused_reply\" | \"done_booked\" | \"done_customer\" | \"done_hard_exit\"\n | \"done_soft_21d\" | \"done_branch_complete\";\n\n// v1.7 — done_soft_21d stays terminal for LEGACY pre-taper contacts only (no retroactive\n// enrollment). New 21-day completions flow into slow_track instead.\nconst TERMINAL_STATUSES = new Set([\n \"done_booked\", \"done_customer\", \"done_hard_exit\", \"done_soft_21d\", \"done_branch_complete\",\n]);\n\ntype PuppyState = {\n status: PuppyStatus;\n enteredAt: string; // ISO — main sequence start\n lastMainStepSent: number; // 0..8, count of main-sequence messages sent so far\n branchAnchorAt: string | null; // ISO — when branch A/B started\n lastBranchStepSent: number; // 0..2\n pausedForReplyAt: string | null;\n exitReason: string | null; // free text, for humans reading the blob\n lastCheckedAt: string; // ISO, updated every run this contact is touched\n lastSentAt?: string | null; // v1.2 — ISO of the last successful send to this contact (min-gap pacing)\n // v1.4 — R24: monetaryValue was read on every opportunity and thrown away, while the one question\n // the client judges a report by is \"how much revenue did that produce\". Captured at exit.\n exitValue?: number | null; // monetaryValue of the opportunity that ended the sequence\n exitStepsSent?: number | null; // how many messages they had received when they converted\n lastSentStepId?: string | null; // v1.4 — R23: the step ID, so editing copy cannot silently re-point anyone\n // v1.7 — slow track. Optional so pre-v1.7 blobs deserialize untouched; readers default them.\n slowAnchorAt?: string | null; // ISO — when the contact entered the slow track (21-day completion)\n lastSlowStepSent?: number; // count of slow-track messages sent (weekly+fortnightly+monthly)\n};\n\nfunction freshState(enteredAt: string): PuppyState {\n return {\n status: \"main\", enteredAt, lastMainStepSent: 0, branchAnchorAt: null,\n lastBranchStepSent: 0, pausedForReplyAt: null, exitReason: null, lastCheckedAt: enteredAt,\n lastSentAt: null, exitValue: null, exitStepsSent: null, lastSentStepId: null,\n slowAnchorAt: null, lastSlowStepSent: 0,\n };\n}\n\n// ---- pure helpers: timing, merge fields, rendering ------------------------------------------------\n\nfunction isDue(offsetHours: number, anchorIso: string, nowMs: number): boolean {\n return nowMs >= new Date(anchorIso).getTime() + offsetHours * HOUR_MS;\n}\n\n// v1.1 — business-local wall clock for a UTC instant. Intl with an explicit timeZone is deterministic\n// and DST-correct on both Deno and Node; no date library needed for two fields.\nfunction businessLocalParts(nowMs: number): { hour: number; weekday: string } {\n const parts = new Intl.DateTimeFormat(\"en-US\", {\n timeZone: BUSINESS_TZ,\n hour12: false,\n hour: \"2-digit\",\n weekday: \"short\",\n }).formatToParts(new Date(nowMs));\n const get = (t: string) => parts.find((p) => p.type === t)?.value ?? \"\";\n // Intl gives \"24\" for midnight under hour12:false+2-digit in some engines; normalize to 0.\n const hour = Number(get(\"hour\")) % 24;\n return { hour, weekday: get(\"weekday\") };\n}\n\n// v1.1 — send-window gate (header addendum #3). Pure given (nowMs, channel); env knobs are read once\n// at module load. Emails are allowed any day inside the hour window; SMS additionally respects the\n// closed-on-Sundays business identity unless SMS_SUNDAY_OK.\nfunction inSendWindow(channel: Channel, nowMs: number): { ok: boolean; reason: string } {\n const start = sendWindowStartHour();\n const end = sendWindowEndHour();\n const { hour, weekday } = businessLocalParts(nowMs);\n if (hour < start || hour >= end) {\n return { ok: false, reason: `outside ${start}:00–${end}:00 ${BUSINESS_TZ} (local hour ${hour})` };\n }\n if (channel === \"sms\" && weekday === \"Sun\" && !smsSundayOk()) {\n return { ok: false, reason: \"no SMS on Sundays (business closed)\" };\n }\n return { ok: true, reason: \"\" };\n}\n\ntype RenderedMessage =\n | { channel: \"email\"; subject: string; html: string }\n | { channel: \"sms\"; text: string };\n\n// Appended to every rendered message. Kept as constants so the wording is in exactly one place.\nconst SMS_OPTOUT = \"\\n\\nReply STOP to stop these texts.\";\nconst EMAIL_OPTOUT =\n \"\\n\\n---\\nYou're getting this because you inquired with The Dogs Spot. \" +\n \"Reply UNSUBSCRIBE and we'll take you off these emails.\\n\" +\n \"The Dogs Spot, Ellabell, GA\";\n\nfunction renderStep(\n step: MessageTemplate,\n contact: { firstName: string | null | undefined; companyName: string | null | undefined },\n opts: { testMode: boolean },\n): RenderedMessage {\n const prefix = opts.testMode ? \"[TEST] \" : \"\";\n // v1.8 — story slots resolve before merge fields; a null slot leaves no trace.\n const resolvedBody = applyMergeFields(resolveStories(step.bodyTemplate), contact.firstName, contact.companyName);\n\n // ---- v1.4 (2 Aug) — OPT-OUT FURNITURE, appended at render time, never written into the c\n // (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n if (step.channel === \"email\") {\n const resolvedPreview = step.previewText\n ? applyMergeFields(step.previewText, contact.firstName, contact.companyName)\n : undefined;\n return {\n channel: \"email\",\n subject: prefix + applyMergeFields(step.subject ?? \"\", contact.firstName, contact.companyName),\n html: bodyToHtml(resolvedBody + EMAIL_OPTOUT, resolvedPreview),\n };\n }\n return { channel: \"sms\", text: prefix + resolvedBody + SMS_OPTOUT };\n}\n\n// ---- facts / decision types -------------------------------------------------------------------\n\ntype ApptFact = {\n id: string;\n startTime: number; // epoch ms\n endTime: number; // epoch ms\n appointmentStatus: string;\n deleted: boolean;\n};\n\ntype OppFact = {\n id: string;\n pipelineId: string;\n pipelineStageId: string;\n monetaryValue: number;\n status: string;\n};\n\ntype ContactFact = {\n id: string;\n firstName: string;\n companyName: string | null;\n dnd: boolean;\n};\n\ntype Facts = {\n now: number;\n contact: ContactFact;\n opportunities: OppFact[];\n pupTalkAppt: ApptFact | null;\n declinedSignal: boolean;\n hasUnansweredInboundReply: boolean;\n conversationCheckFailed: boolean;\n // v1.5 R27 — epoch ms of the newest outbound message on this contact's thread that this engine did\n // NOT send, or null when there is none / it cannot be told apart from ours. See sendGate.\n foreignOutboundAt: number | null;\n // v1.6 R28 — per-channel consent, read from GHL's dndSettings. true = this channel is opted out.\n channelBlocked: { email: boolean; sms: boolean };\n};\n\ntype Decision =\n | { kind: \"hard_exit\"; status: \"done_hard_exit\" | \"done_customer\" | \"done_booked\"; reason: string }\n | { kind: \"pause_reply\"; isNewPause: boolean }\n | { kind: \"advance_status\"; status: \"awaiting_appt_outcome\" | \"branch_a\" | \"branch_b\" | \"slow_track\"; branchAnchorAt?: string }\n | { kind: \"soft_exit_21d\" }\n | { kind: \"branch_complete\" }\n | { kind: \"send\"; sequence: \"main\" | \"branch_a\" | \"branch_b\" | \"slow\"; stepIndex: number }\n | { kind: \"skip_step\"; sequence: \"main\" | \"branch_a\" | \"branch_b\" | \"slow\"; stepIndex: number; reason: string }\n | { kind: \"skip\"; reason: string };\n\n// v1.7 — slow template for a progression index AT a moment. Weekly/fortnightly fixed by index;\n// monthly picked by the send's calendar month (July=heat, Dec=holidays — as promised to Kim).\n// Shared by decideAction AND the executor so decided and sent templates cannot drift.\nfunction slowTemplateAt(sentCount: number, nowMs: number, lastSentId?: string | null): { tpl: MessageTemplate; offsetHours: number; phase: string } {\n // v1.7.1 — clamp garbage counters (NaN/negative/string blobs) instead of letting an out-of-range\n // index fall through to \"send monthly now\"; monthly fallback only ever fires in the monthly phase.\n const clean = Math.max(0, Math.floor(Number(sentCount)) || 0);\n const n = nextSlowTouch(clean);\n const tpl = n.phase === \"monthly\" ? monthlyTemplateAvoidingRepeat(new Date(nowMs), lastSentId) : n.template!;\n return { tpl, offsetHours: n.offsetHours, phase: n.phase };\n}\n\nfunction pickPrimaryOpportunity(opps: OppFact[]): OppFact | null {\n return opps.find((o) => o.pipelineId === MAIN_PIPELINE_ID) ?? opps[0] ?? null;\n}\n\n// \"Live\" = not cancelled, not invalid, not soft-deleted. Anything else (new / confirmed / showed /\n// noshow) counts as \"they booked\" for rule 6's purposes — the outcome gets sorted out by rules 7/8.\nfunction apptIsLiveBooked(appt: ApptFact | null): boolean {\n if (!appt || appt.deleted) return false;\n return appt.appointmentStatus !== \"cancelled\" && appt.appointmentStatus !== \"invalid\";\n}\n\n// ---- the core state machine (spec §5) ---------------------------------------------------------\n// Pure function: no network, no side effects. Every rule below is evaluated in order for every call —\n// \"first match wins\" per spec, so a later rule never overrides an earlier one, and the SAME order runs\n// for every contact on every pass regardless of their current status. This is what the whole safety\n// story rests on, so it is tested exhaustively — see puppy-path-engine.test.ts.\nfunction decideAction(f: Facts, s: PuppyState): Decision {\n // Rule 1 + 2 — DND / unsubscribed. Top-level `dnd` = full opt-out, hard exit here. Since v1.6\n // (R28) per-channel opt-outs in `dndSettings` are ALSO read — not here, but as f.channelBlocked,\n // which skip-consumes steps on a blocked channel while the other channel carries on. Both layers\n // are live; this rule is the total-stop one.\n if (f.contact.dnd) {\n return { kind: \"hard_exit\", status: \"done_hard_exit\", reason: \"dnd\" };\n }\n\n const primaryOpp = pickPrimaryOpportunity(f.opportunities);\n\n // Rule 3 — Disqualified stage (human override, outranks everything below it).\n if (primaryOpp?.pipelineStageId === STAGE.DISQUALIFIED) {\n return { kind: \"hard_exit\", status: \"done_hard_exit\", reason: \"disqualified\" };\n }\n\n // Rule 4 — became a paying customer. v1.2: scans ALL opportunities, not just primary (fuzz\n // round finding; full note in NOTES-v1.4.md).\n const becameCustomer = f.opportunities.some(\n (o) => o.pipelineStageId === STAGE.CUSTOMER || o.pipelineStageId === STAGE.WON_PAID || o.monetaryValue > 0,\n );\n if (becameCustomer) {\n return { kind: \"hard_exit\", status: \"done_customer\", reason: \"became a customer\" };\n }\n\n // Rule 4b — booked something else entirely (Free Training Day). NOT an explicit numbered r\n // (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n if (primaryOpp?.pipelineStageId === STAGE.FREE_TRAINING_DAY) {\n return { kind: \"hard_exit\", status: \"done_booked\", reason: \"booked Free Training Day — sequence ends per writing sheet §4\" };\n }\n\n // Rule 5 — inbound reply pending, or: couldn't check at all (fail closed — see header gap #1).\n // conversationCheckFailed must be checked BEFORE hasUnansweredInboundReply: an unreadable signal is\n // never treated as \"confirmed no reply,\" because that would let sends continue for someone who may\n // well have replied — exactly the failure this rule exists to prevent.\n if (f.conversationCheckFailed) {\n return { kind: \"skip\", reason: \"conversation check failed (live API scope gap) — not sending until resolved\" };\n }\n if (f.hasUnansweredInboundReply) {\n // \"First match wins\" still applies every run, so this keeps matching (and keeps blocking rule 10)\n // for as long as the reply sits unanswered — but the SIDE EFFECT (timestamping the pause, creating\n // a task) only happens the first time, guarded by isNewPause. Otherwise every run would create a\n // fresh duplicate task for the same unanswered reply.\n return { kind: \"pause_reply\", isNewPause: s.status !== \"paused_reply\" };\n }\n\n // Rule 6 — a live Pup Talk booking -> awaiting_appt_outcome. Scoped to the Pup Talk calendar\n // (branch copy is Pup-Talk-specific; FTD handled by 4b; full note in NOTES-v1.4.md).\n // v1.7.1 — the slow arm requires the appointment to POSTDATE slow entry (mirrors 6b): a stale\n // historical appointment must not yank a taper contact into branch copy.\n if (s.status === \"main\" && apptIsLiveBooked(f.pupTalkAppt)) {\n return { kind: \"advance_status\", status: \"awaiting_appt_outcome\" };\n }\n if (\n s.status === \"slow_track\" && f.pupTalkAppt && apptIsLiveBooked(f.pupTalkAppt) &&\n f.pupTalkAppt.startTime > new Date(s.slowAnchorAt ?? s.enteredAt).getTime()\n ) {\n return { kind: \"advance_status\", status: \"awaiting_appt_outcome\" };\n }\n\n // Rule 6b (v1.2) — REBOOKED while in a branch. Found independently by the adversarial revi\n // (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n if (\n (s.status === \"branch_a\" || s.status === \"branch_b\") &&\n f.pupTalkAppt &&\n apptIsLiveBooked(f.pupTalkAppt) &&\n s.branchAnchorAt &&\n f.pupTalkAppt.startTime > new Date(s.branchAnchorAt).getTime()\n ) {\n return { kind: \"advance_status\", status: \"awaiting_appt_outcome\" };\n }\n\n // Rule 7 — awaiting -> branch_a (missed): time passed, not showed, not cancelled. Funnel-phase\n // cancellations stay parked here on purpose — the \"Cxld Pup Talk\" workflow owns that case\n // (writing sheet §4; full note in NOTES-v1.4.md). Slow-phase cancellations: rule 7s above.\n // v1.7.1 — Rule 7s: a slow-track contact who booked and then CANCELLED goes back on the taper\n // (anchor and counter intact) instead of parking in awaiting_appt_outcome forever. Scoped to\n // contacts with a slow anchor; funnel-phase cancellations still belong to the Cxld workflow.\n if (\n s.status === \"awaiting_appt_outcome\" && s.slowAnchorAt && f.pupTalkAppt &&\n f.pupTalkAppt.appointmentStatus === \"cancelled\"\n ) {\n return { kind: \"advance_status\", status: \"slow_track\" };\n }\n\n if (\n s.status === \"awaiting_appt_outcome\" &&\n f.pupTalkAppt &&\n f.now >= f.pupTalkAppt.endTime &&\n f.pupTalkAppt.appointmentStatus !== \"showed\" &&\n f.pupTalkAppt.appointmentStatus !== \"cancelled\"\n ) {\n return {\n kind: \"advance_status\",\n status: \"branch_a\",\n branchAnchorAt: new Date(f.pupTalkAppt.endTime).toISOString(),\n };\n }\n\n // Rule 8 — awaiting -> branch_b (showed, then declined). declinedSignal NOT CONFIRMED LIVE\n // (header gap #2); branchAnchorAt uses \"now\" per spec's fallback.\n if (\n s.status === \"awaiting_appt_outcome\" &&\n f.pupTalkAppt &&\n f.pupTalkAppt.appointmentStatus === \"showed\" &&\n f.declinedSignal\n ) {\n return { kind: \"advance_status\", status: \"branch_b\", branchAnchorAt: new Date(f.now).toISOString() };\n }\n\n // Rule 9 — 21-day completion. Gated on message 8 having actually SENT, not elapsed time alone\n // (else this outranks rule 10 on the very run msg 8 becomes due and it never sends —\n // NOTES-v1.4.md). Stage never auto-moved; that is Kim's call.\n if (\n s.status === \"main\" &&\n s.lastMainStepSent >= MAIN_SEQUENCE.length &&\n f.now >= new Date(s.enteredAt).getTime() + 21 * DAY_MS\n ) {\n return { kind: \"soft_exit_21d\" };\n }\n\n // Rule 9b — branch exhausted -> done_branch_complete (the type's own terminal; a contact must\n // not sit re-evaluated forever with nothing left to send). NOTES-v1.4.md.\n if (s.status === \"branch_a\" && s.lastBranchStepSent >= BRANCH_A.length) {\n return { kind: \"branch_complete\" };\n }\n if (s.status === \"branch_b\" && s.lastBranchStepSent >= BRANCH_B.length) {\n return { kind: \"branch_complete\" };\n }\n\n // Rule 10 — otherwise, send whatever's next due. v1.1: a due step additionally waits for the send\n // window (inSendWindow). v1.2: and for the per-contact min-gap floor — after an outage, several\n // overdue steps space out ~2h apart instead of one per cron tick. Every deferral leaves state\n // untouched, so a later run simply picks it up.\n const sendGate = (channel: Channel): { ok: boolean; reason: string } => {\n const w = inSendWindow(channel, f.now);\n if (!w.ok) return w;\n if (s.lastSentAt) {\n const gapMs = minSendGapHours() * HOUR_MS;\n const sinceLast = f.now - new Date(s.lastSentAt).getTime();\n // v1.7 — sinceLast >= 0 guard (mirrors R27): a future-dated lastSentAt (clock skew, restored\n // blob) must not freeze the contact until that future date; negative elapsed = ignore the gap.\n if (sinceLast >= 0 && sinceLast < gapMs) {\n return { ok: false, reason: `min send gap (${minSendGapHours()}h) not elapsed — last send ${(sinceLast / HOUR_MS).toFixed(1)}h ago` };\n }\n }\n // R27 (v1.5) — FOREIGN-SENDER QUIET PERIOD: an outbound newer than ours means another system\n // owns this contact right now; stand down. Fails OPEN. Full rationale: NOTES-v1.4.md.\n if (f.foreignOutboundAt != null) {\n const quietMs = foreignQuietHours() * HOUR_MS;\n const since = f.now - f.foreignOutboundAt;\n if (since >= 0 && since < quietMs) {\n return {\n ok: false,\n reason: `another system messaged this contact ${(since / HOUR_MS).toFixed(1)}h ago — quiet period ${foreignQuietHours()}h`,\n };\n }\n }\n return { ok: true, reason: \"\" };\n };\n if (s.status === \"main\" && s.lastMainStepSent < MAIN_SEQUENCE.length) {\n const step = MAIN_SEQUENCE[s.lastMainStepSent];\n if (isDue(step.offsetHours, s.enteredAt, f.now)) {\n const g = sendGate(step.channel);\n if (!g.ok) return { kind: \"skip\", reason: `main #${s.lastMainStepSent + 1} due but deferred: ${g.reason}` };\n if (f.channelBlocked[step.channel]) {\n return { kind: \"skip_step\", sequence: \"main\", stepIndex: s.lastMainStepSent, reason: `opted out of ${step.channel} — step consumed, not sent` };\n }\n return { kind: \"send\", sequence: \"main\", stepIndex: s.lastMainStepSent };\n }\n return { kind: \"skip\", reason: `next main step (#${s.lastMainStepSent + 1}) not due yet` };\n }\n if (s.status === \"branch_a\" && s.lastBranchStepSent < BRANCH_A.length && s.branchAnchorAt) {\n const step = BRANCH_A[s.lastBranchStepSent];\n if (isDue(step.offsetHours, s.branchAnchorAt, f.now)) {\n const g = sendGate(step.channel);\n if (!g.ok) return { kind: \"skip\", reason: `branch A step due but deferred: ${g.reason}` };\n if (f.channelBlocked[step.channel]) {\n return { kind: \"skip_step\", sequence: \"branch_a\", stepIndex: s.lastBranchStepSent, reason: `opted out of ${step.channel} — step consumed, not sent` };\n }\n return { kind: \"send\", sequence: \"branch_a\", stepIndex: s.lastBranchStepSent };\n }\n return { kind: \"skip\", reason: \"next branch A step not due yet\" };\n }\n if (s.status === \"branch_b\" && s.lastBranchStepSent < BRANCH_B.length && s.branchAnchorAt) {\n const step = BRANCH_B[s.lastBranchStepSent];\n if (isDue(step.offsetHours, s.branchAnchorAt, f.now)) {\n const g = sendGate(step.channel);\n if (!g.ok) return { kind: \"skip\", reason: `branch B step due but deferred: ${g.reason}` };\n if (f.channelBlocked[step.channel]) {\n return { kind: \"skip_step\", sequence: \"branch_b\", stepIndex: s.lastBranchStepSent, reason: `opted out of ${step.channel} — step consumed, not sent` };\n }\n return { kind: \"send\", sequence: \"branch_b\", stepIndex: s.lastBranchStepSent };\n }\n return { kind: \"skip\", reason: \"next branch B step not due yet\" };\n }\n\n // v1.7 — Rule 10s: slow track. Indefinite by design, so no exhaustion exit — the exits are the\n // rules above (reply, booking, customer, DND). Anchor falls back to enteredAt if a legacy blob\n // lands here without slowAnchorAt.\n if (s.status === \"slow_track\") {\n const sentCount = Math.max(0, Math.floor(Number(s.lastSlowStepSent)) || 0);\n const anchor = s.slowAnchorAt ?? s.enteredAt;\n const { tpl, offsetHours, phase } = slowTemplateAt(sentCount, f.now, s.lastSentStepId);\n if (isDue(offsetHours, anchor, f.now)) {\n const g = sendGate(tpl.channel);\n if (!g.ok) return { kind: \"skip\", reason: `slow #${sentCount + 1} (${phase}) due but deferred: ${g.reason}` };\n if (f.channelBlocked[tpl.channel]) {\n return { kind: \"skip_step\", sequence: \"slow\", stepIndex: sentCount, reason: `opted out of ${tpl.channel} — slow step consumed, not sent` };\n }\n return { kind: \"send\", sequence: \"slow\", stepIndex: sentCount };\n }\n return { kind: \"skip\", reason: `next slow touch (#${sentCount + 1}, ${phase}) not due yet` };\n }\n\n return { kind: \"skip\", reason: `status ${s.status} has nothing to evaluate` };\n}\n\n// Pure: given a Decision (already known to have succeeded, or to need no IO at all) and the current\n// state, returns the resulting state fields. No IO. This is the ONE place PuppyState transitions are\n// written, used by both cron() (after a successful send/task, or immediately for decisions with no\n// gating IO) and the local test harness (to simulate a full multi-day run without live network calls)\n// — kept as a single function specifically so the tested behavior and the shipped behavior cannot\n// silently drift apart from each other.\nfunction applyDecision(decision: Decision, s: PuppyState, nowIso: string): PuppyState {\n const next: PuppyState = { ...s, lastCheckedAt: nowIso };\n switch (decision.kind) {\n case \"hard_exit\":\n next.status = decision.status;\n next.exitReason = decision.reason;\n return next;\n case \"pause_reply\":\n next.status = \"paused_reply\";\n if (decision.isNewPause) {\n next.pausedForReplyAt = nowIso;\n next.exitReason = \"human reply pending\";\n }\n return next;\n case \"advance_status\":\n next.status = decision.status;\n if (decision.branchAnchorAt) next.branchAnchorAt = decision.branchAnchorAt;\n // v1.2 — entering a branch always starts that branch's 2-message pass from the top. Matters for\n // the rule-6b re-entry paths (branch -> awaiting -> branch again for a NEW appointment): the\n // shared lastBranchStepSent counter would otherwise start a second branch pass mid-sequence\n // (or, worse, route a first branch_b pass to B2 because branch_a had already sent A1). A\n // repeated branch message only ever happens when a genuinely new no-show/decline occurred, so\n // the copy stays contextually true.\n if (decision.status === \"branch_a\" || decision.status === \"branch_b\") next.lastBranchStepSent = 0;\n // v1.7.1 — returning to slow_track (cancelled booking) keeps slowAnchorAt and\n // lastSlowStepSent untouched: the taper resumes where it left off.\n return next;\n case \"soft_exit_21d\":\n // v1.7 — 21-day completion now hands the contact to the slow track (Kim's taper);\n // done_soft_21d remains in the type for legacy blobs only.\n next.status = \"slow_track\";\n next.slowAnchorAt = nowIso;\n next.lastSlowStepSent = 0;\n next.exitReason = \"21-day sequence complete — moved to slow track\";\n return next;\n case \"branch_complete\":\n next.status = \"done_branch_complete\";\n next.exitReason = \"branch sequence complete, no reply\";\n return next;\n case \"send\":\n if (decision.sequence === \"main\") next.lastMainStepSent = s.lastMainStepSent + 1;\n else if (decision.sequence === \"slow\") next.lastSlowStepSent = (s.lastSlowStepSent ?? 0) + 1;\n else next.lastBranchStepSent = s.lastBranchStepSent + 1;\n next.lastSentAt = nowIso; // v1.2 — feeds the min-gap pacing floor\n return next;\n case \"skip_step\":\n // v1.6 R28 — the step is consumed, not deferred. Deferring a step whose channel the contact\n // has opted out of would stall that contact forever on a message that can never legally send.\n // lastSentAt is deliberately NOT set: nothing went out, so nothing should start the pacing clock.\n if (decision.sequence === \"main\") next.lastMainStepSent = s.lastMainStepSent + 1;\n else if (decision.sequence === \"slow\") next.lastSlowStepSent = (s.lastSlowStepSent ?? 0) + 1;\n else next.lastBranchStepSent = s.lastBranchStepSent + 1;\n return next;\n case \"skip\":\n return next;\n }\n}\n\n// ---- IO layer: GHL fetch helper (identical shape to the PupsClub val) -----------------------------\n\nasync function j(url: string, ver: string, init?: RequestInit) {\n const tok = await resolveToken(); // v1.2 — env var, else private puppy_config blob (see header note)\n const r = await fetch(url, {\n ...init,\n headers: {\n Authorization: `Bearer ${tok}`,\n Version: ver,\n \"Content-Type\": \"application/json\",\n ...(init?.headers ?? {}),\n },\n });\n if (!r.ok) throw new Error(`${r.status} ${url.split(\"?\")[0]} ${(await r.text()).slice(0, 200)}`);\n return r.json();\n}\n\n// ---- blob state (dynamic import, see Node/tsx shim note above) ------------------------------------\n\nasync function getBlobModule() {\n // Dynamic (not static like the PupsClub val) so this file's pure logic can be imported under Node +\n // tsx for local testing without resolving esm.town or needing a Deno runtime — under real\n // val.town/Deno execution this resolves identically, just on first call instead of at module load.\n // @ts-expect-error — remote Deno URL specifier; unresolvable (by design) under tsc/Node's module\n // resolution, only ever actually imported at runtime inside a real Deno/val.town environment.\n const mod = await import(\"https://esm.town/v/std/blob\");\n return (mod as any).blob;\n}\n\nasync function loadAllState(): Promise> {\n const blob = await getBlobModule();\n return (await blob.getJSON(\"puppy_state\").catch(() => null)) ?? {};\n}\nasync function saveAllState(state: Record) {\n const blob = await getBlobModule();\n await blob.setJSON(\"puppy_state\", state);\n}\n// v1.8.2. Each run records its own timestamp so the dashboard can report the cadence it OBSERVES\n// rather than one a human typed. See cadence.ts for why, and for the shared shape.\nasync function saveReport(report: any) {\n const blob = await getBlobModule();\n let history: string[] = [];\n try {\n history = appendRunStamp(await blob.getJSON(\"puppy_run_state\").catch(() => null),\n typeof report?.ts === \"string\" ? report.ts : new Date().toISOString());\n } catch { /* bookkeeping is a nicety; never fail a run over it */ }\n await blob.setJSON(\"puppy_run_state\", { ...(report as object), history });\n}\nasync function saveLastError(err: unknown) {\n const blob = await getBlobModule();\n await blob.setJSON(\"puppy_last_error\", err);\n}\n\n// ---- v1.1: journal + summary ----------------------------------------------------------------------\n\ntype JournalRow = { ts: string; contactId: string | null; event: string; detail: string; test?: boolean };\n\n// Appends this run's rows and returns the full merged journal (capped at the newest 2000 rows) so the\n// caller can build the summary from complete history without a second blob read.\nasync function appendJournal(rows: JournalRow[]): Promise {\n const blob = await getBlobModule();\n const existing: JournalRow[] = (await blob.getJSON(\"puppy_journal\").catch(() => null)) ?? [];\n const merged = [...existing, ...rows].slice(-2000);\n if (rows.length) await blob.setJSON(\"puppy_journal\", merged);\n return merged;\n}\n\n// Pure — aggregate the numbers Kim's eventual 30-day report needs. Journal-derived counts\n// (bookedDuringPath, customersDuringPath, sendsByStep) survive state pruning; state-derived counts\n// reflect the current population.\nfunction buildSummary(\n state: Record,\n journal: JournalRow[],\n lastRun: { at: string; testMode: boolean; sent: number; failed: number; enrolled: number },\n) {\n const byStatus: Record = {};\n for (const s of Object.values(state)) byStatus[s.status] = (byStatus[s.status] ?? 0) + 1;\n const sendsByStep: Record = {};\n let bookedDuringPath = 0;\n let customersDuringPath = 0;\n let pausedForHuman = 0;\n let surgeHolds = 0;\n for (const r of journal) {\n if (r.event === \"sent\") sendsByStep[r.detail] = (sendsByStep[r.detail] ?? 0) + 1;\n else if (r.event === \"advance_status\" && r.detail === \"awaiting_appt_outcome\") bookedDuringPath++;\n else if (r.event === \"hard_exit\" && r.detail === \"became a customer\") customersDuringPath++;\n else if (r.event === \"pause_reply\") pausedForHuman++;\n else if (r.event === \"enrollment_surge_hold\") surgeHolds++;\n }\n return {\n at: lastRun.at,\n v: \"1.2\",\n lastRun,\n activeByStatus: byStatus,\n totalTracked: Object.keys(state).length,\n sendsByStep,\n bookedDuringPath,\n customersDuringPath,\n pausedForHuman,\n surgeHolds,\n };\n}\n\nasync function saveSummary(summary: unknown) {\n const blob = await getBlobModule();\n await blob.setJSON(\"puppy_summary\", summary);\n}\n\n// Pure — v1.1 state hygiene: drop terminal entries untouched for 60+ days. History stays in the\n// journal; the puppy-path-v1 tag still prevents re-enrollment of a pruned contact.\nfunction pruneState(state: Record, nowMs: number): { kept: Record; prunedIds: string[] } {\n const kept: Record = {};\n const prunedIds: string[] = [];\n for (const [id, s] of Object.entries(state)) {\n const stale = TERMINAL_STATUSES.has(s.status) && nowMs - new Date(s.lastCheckedAt).getTime() > 60 * DAY_MS;\n if (stale) prunedIds.push(id);\n else kept[id] = s;\n }\n return { kept, prunedIds };\n}\n\n// Pure — v1.1 enrollment gate (header addendum #1/#2). Given this run's un-enrolled tag matches,\n// decide who enrolls. Over-threshold = bulk-tag accident suspected: enroll nobody, hold until a human\n// clears it (ACKNOWLEDGE_SURGE=true) or the candidate count drops back under the threshold.\nfunction selectEnrollable(\n candidates: T[],\n surgeThreshold: number,\n surgeAcknowledged: boolean,\n): { enroll: T[]; surgeHeld: boolean } {\n if (candidates.length > surgeThreshold && !surgeAcknowledged) {\n return { enroll: [], surgeHeld: true };\n }\n return { enroll: candidates, surgeHeld: false };\n}\n\n// ---- IO layer: GHL reads --------------------------------------------------------------------------\n\nasync function getContact(contactId: string): Promise {\n const r = await j(`${GHL}/contacts/${contactId}`, \"2021-07-28\");\n return r.contact;\n}\n\nasync function getOpenOpportunities(contactId: string): Promise {\n const r = await j(`${GHL}/opportunities/search?location_id=${LOC}&contact_id=${contactId}&limit=10`, \"2021-07-28\");\n return (r.opportunities ?? []).map((o: any) => ({\n id: o.id,\n pipelineId: o.pipelineId,\n pipelineStageId: o.pipelineStageId,\n monetaryValue: o.monetaryValue ?? 0,\n status: o.status,\n }));\n}\n\n// ---- v1.3 (2 Aug 2026) — R19: THE ENROLMENT-SCAN QUOTA FIX -----------------------------\n// (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\nconst EXIT_STAGES = [\n \"fd821b4e-bbe6-44de-b754-fa80e4823616\", // Customer\n \"ae173310-f8b1-4399-acb7-ef1fc03d3697\", // Won - Paid\n \"38826f17-1d0e-4bac-b53e-349b67c2c79d\", // Disqualified\n \"43ea02b4-529b-4063-b638-447414d603d2\", // Free Training Day\n];\n\nasync function fetchExitOppIndex(): Promise | null> {\n const index = new Map();\n try {\n for (const stage of EXIT_STAGES) {\n let after: any = null, afterId: any = null, pages = 0;\n while (pages < 12) { // hard ceiling: a runaway page-walk must never be the thing that breaks a run\n let u = `${GHL}/opportunities/search?location_id=${LOC}&pipeline_id=${MAIN_PIPELINE_ID}` +\n `&pipeline_stage_id=${stage}&limit=100`;\n if (after != null) u += `&startAfter=${after}&startAfterId=${afterId}`;\n const r = await j(u, \"2021-07-28\");\n const ops = r.opportunities ?? [];\n if (!ops.length) break;\n for (const o of ops) {\n if (!o.contactId) continue;\n const fact: OppFact = {\n id: o.id,\n pipelineId: o.pipelineId,\n pipelineStageId: o.pipelineStageId,\n monetaryValue: o.monetaryValue ?? 0,\n status: o.status,\n };\n const prev = index.get(o.contactId);\n if (prev) prev.push(fact); else index.set(o.contactId, [fact]);\n }\n pages++;\n after = r.meta?.startAfter; afterId = r.meta?.startAfterId;\n if (!after) break;\n }\n }\n return index;\n } catch {\n // Fail to null, never to an empty map. An empty map would read as \"nobody is a customer\" and\n // could enrol someone who has already bought — the exact mistake this check exists to prevent.\n // Null makes the caller fall back to the per-contact read it used before.\n return null;\n }\n}\n\n// v1.1 (header addendum #5): the Pup Talk calendar's ±90d window holds ~143 events (measured live\n// 27 Jul); fetching it per contact re-downloaded all of them for every active contact every run.\n// Now: one fetch per run, indexed by contactId, latest non-deleted event per contact.\nasync function fetchPupTalkApptIndex(): Promise> {\n const now = Date.now();\n const windowStart = now - 90 * DAY_MS; // look back far enough to still catch a recently-missed appt\n const windowEnd = now + 90 * DAY_MS;\n const r = await j(\n `${GHL}/calendars/events?locationId=${LOC}&calendarId=${PUP_TALK_CALENDAR_ID}&startTime=${windowStart}&endTime=${windowEnd}`,\n \"2021-04-15\",\n );\n const index = new Map();\n for (const e of r.events ?? []) {\n if (!e.contactId || e.deleted) continue;\n const fact: ApptFact = {\n id: e.id,\n startTime: new Date(e.startTime).getTime(),\n endTime: new Date(e.endTime).getTime(),\n appointmentStatus: e.appointmentStatus,\n deleted: !!e.deleted,\n };\n const prev = index.get(e.contactId);\n if (!prev || fact.startTime > prev.startTime) index.set(e.contactId, fact);\n }\n return index;\n}\n\n// ---- v1.6 R28 (2 Aug 2026) — PER-CHANNEL CONSENT ----------------------------------------------\n// Reads GHL's dndSettings, which is keyed BY CHANNEL, instead of only the top-level dnd boolean.\n// Proven against live data: 0 of 100 sampled contacts had dnd===true, 4 carried dndSettings.\n// `status` is consent; `message` is a delivery diagnostic and must NOT be read as consent.\n// Blocks per channel, never a hard exit. Full rationale in NOTES-v1.4.md.\nfunction readChannelConsent(contact: any): { email: boolean; sms: boolean } {\n const ds = contact?.dndSettings;\n const blocked = (key: string): boolean => {\n const entry = ds?.[key];\n if (!entry) return false; // no per-channel record at all = no per-channel opt-out\n const status = String(entry.status ?? \"\").toLowerCase();\n return status !== \"\" && status !== \"active\";\n };\n return {\n // GHL keys these by channel name. SMS and RCS are both text to the recipient, so either one\n // being switched off means we do not text them.\n sms: blocked(\"SMS\") || blocked(\"RCS\"),\n email: blocked(\"Email\"),\n };\n}\n\n// See header gap #1. Fails closed: any error, or a response shape this code doesn't recognize, is\n// reported as conversationCheckFailed=true — never silently treated as \"no reply.\"\nasync function getReplyStatus(\n contactId: string,\n enteredAtIso: string,\n): Promise<{ hasUnansweredInboundReply: boolean; conversationCheckFailed: boolean; lastOutboundAt: number | null }> {\n // v1.5 R27: lastOutboundAt rides along on the SAME request that rule 5 already makes — the collision\n // guard costs zero extra API calls. It is the conversation's own lastMessageDate, returned only when\n // that last message was outbound; the caller decides whether it was ours.\n let lastOutboundAt: number | null = null;\n try {\n const r = await j(`${GHL}/conversations/search?locationId=${LOC}&contactId=${contactId}&limit=1`, \"2021-07-28\");\n const convo = (r.conversations ?? [])[0];\n if (!convo) return { hasUnansweredInboundReply: false, conversationCheckFailed: false, lastOutboundAt };\n {\n const d = convo.lastMessageDirection ?? convo.direction ?? null;\n const ts = convo.lastMessageDate ?? convo.lastMessageDateTime ?? null;\n if (d === \"outbound\" && ts != null) {\n const n = new Date(ts).getTime();\n if (!Number.isNaN(n)) lastOutboundAt = n;\n }\n }\n // Field name NOT independently proven this session (the 401 blocked confirming it) — tryin\n // (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n const direction = convo.lastMessageDirection ?? convo.direction ?? null;\n if (direction !== \"inbound\" && direction !== \"outbound\") {\n return { hasUnansweredInboundReply: false, conversationCheckFailed: true, lastOutboundAt };\n }\n // v1.4 — R21: Chloe, Ava and 165 workflows all send. A customer replies, an automated outbound\n // lands seconds later, the direction field flips, and the engine reads 'no reply'. unreadCount is\n // the second signal: outbound does NOT clear it, so an unread thread means somebody wrote in and\n // nobody looked — which must block a send whatever the newest message was. See NOTES-v1.4.md.\n\n const unread = Number(convo.unreadCount ?? 0);\n if (direction === \"outbound\") {\n if (unread > 0) {\n return { hasUnansweredInboundReply: true, conversationCheckFailed: false, lastOutboundAt };\n }\n return { hasUnansweredInboundReply: false, conversationCheckFailed: false, lastOutboundAt };\n }\n const lastTsRaw = convo.lastMessageDate ?? convo.lastMessageDateTime ?? convo.dateUpdated ?? null;\n const lastTs = lastTsRaw != null ? new Date(lastTsRaw).getTime() : NaN;\n if (!Number.isNaN(lastTs) && lastTs < new Date(enteredAtIso).getTime()) {\n // Pre-enrollment history — EXCEPT if it is still unread, in which case somebody wrote in and\n // nobody has answered them, which outranks how old it is.\n if (Number(convo.unreadCount ?? 0) > 0) return { hasUnansweredInboundReply: true, conversationCheckFailed: false, lastOutboundAt };\n return { hasUnansweredInboundReply: false, conversationCheckFailed: false, lastOutboundAt };\n }\n return { hasUnansweredInboundReply: true, conversationCheckFailed: false, lastOutboundAt };\n } catch {\n return { hasUnansweredInboundReply: false, conversationCheckFailed: true, lastOutboundAt };\n }\n}\n\n// ---- IO layer: GHL writes (all proven live this session, see PUPPY-PATH-TEST-REPORT.md) -----------\n\nasync function sendSms(contactId: string, text: string) {\n // Proven shape, copied verbatim from the PupsClub val, which sends real SMS in production today.\n return j(`${GHL}/conversations/messages`, \"2021-04-15\", {\n method: \"POST\",\n body: JSON.stringify({ type: \"SMS\", contactId, message: text }),\n });\n}\n\nasync function sendEmail(contactId: string, subject: string, html: string) {\n // Body shape verified live this session (27 Jul 2026, against the sanctioned TEST_MODE dummy contact\n // / aizhigitovamir@gmail.com): {\"type\":\"Email\",\"contactId\",\"subject\",\"html\"} on Version 2021-04-15\n // (same API version as the proven SMS call) returned HTTP 201, {\"msg\":\"Email queued successfully.\",\n // \"messageId\":..., \"emailMessageId\":...}. The spec's own best-guess shape worked on the first\n // attempt — nothing needed adjusting.\n return j(`${GHL}/conversations/messages`, \"2021-04-15\", {\n method: \"POST\",\n body: JSON.stringify({ type: \"Email\", contactId, subject, html }),\n });\n}\n\nasync function addTag(contactId: string, tag: string) {\n // POST /contacts/{id}/tags is additive — verified live this session against the dummy contact (an\n // existing tag survived the call, response's tagsAdded confirmed the new one). Deliberately NOT using\n // /contacts/upsert with a tags array for this — upsert's tag merge-vs-replace behavior was never\n // tested and was not worth risking on a real contact's existing tag set.\n return j(`${GHL}/contacts/${contactId}/tags`, \"2021-07-28\", {\n method: \"POST\",\n body: JSON.stringify({ tags: [tag] }),\n });\n}\n\nasync function createTask(contactId: string, title: string, body: string) {\n // Shape verified live this session against the dummy contact (HTTP 201, then confirmed via the\n // proven GET tasks read). assignedTo deliberately omitted rather than sent as JSON null — no\n // confirmed GHL user id for \"the hire\" exists yet in this engine's scope (same open gap\n // BUILD-CHECKLIST-UI.md already flags for its own tasks) — omitting the key tested clean.\n return j(`${GHL}/contacts/${contactId}/tasks`, \"2021-07-28\", {\n method: \"POST\",\n body: JSON.stringify({ title, body, dueDate: new Date().toISOString(), completed: false }),\n });\n}\n\nasync function resolveTestDummy(): Promise<{ id: string; firstName: string; companyName: string | null }> {\n // TEST_MODE's one sanctioned contact (spec §8). +10000000000 is not a working number in any real\n // numbering plan — chosen specifically so an accidental SMS send during testing cannot reach a real\n // person, while still being a syntactically valid phone value GHL will accept on a contact record.\n const up = await j(`${GHL}/contacts/upsert`, \"2021-07-28\", {\n method: \"POST\",\n body: JSON.stringify({\n locationId: LOC,\n firstName: \"ZZTEST\",\n lastName: \"PuppyPath-Dummy\",\n email: \"aizhigitovamir@gmail.com\",\n phone: \"+10000000000\",\n }),\n });\n const c = up.contact;\n return { id: c.id, firstName: c.firstName, companyName: c.companyName ?? null };\n}\n\n// ---- orchestration: cron() (default export — the val.town entry point) ----------------------------\n\nexport default async function cron() {\n const out: any = {\n ok: true,\n v: \"1.7.1\", // slow track + R27/R28, plus the adversarial-review fixes (stale-appt guard, cancel->resume, monthly dedup, dueCheck)\n\n ts: new Date().toISOString(), // v1.2 — lets the watchdog's staleness check actually work\n testMode: TEST_MODE,\n enrolled: 0,\n sent: 0,\n failed: 0,\n skipped: 0,\n log: [] as string[],\n };\n const journal: JournalRow[] = [];\n const jrow = (contactId: string | null, event: string, detail: string) =>\n journal.push({ ts: new Date().toISOString(), contactId, event, detail, ...(TEST_MODE ? { test: true } : {}) });\n\n // v1.2 — best-effort run lock. Blob storage has no compare-and-swap, so this can't be a perfect\n // mutex, but it shrinks the overlap window (manual trigger colliding with the schedule, or a slow\n // run) from \"the whole run\" to milliseconds. A lock older than RUN_LOCK_TTL_MS is a dead run's\n // leftovers and is ignored.\n const blob = await getBlobModule();\n\n // ---- v1.3 (2 Aug 2026) — KILL SWITCH -----------------------------------------------------------\n // Checked before the run lock, before state loads, before a single contact is looked at. Kim can\n // set this herself from the control panel (api.ts) with two taps and no help from anyone; it is the\n // one control she must never have to ask for. Deliberately fails OPEN — if the blob read throws,\n // the engine carries on rather than halting on a storage hiccup, because a silent permanent stop\n // would be indistinguishable from the outage this whole system is built to be visible about.\n // Nothing is deleted while stopped: every contact keeps its exact position and resumes from it.\n try {\n const kill = await blob.getJSON(\"nurture_kill\").catch(() => null);\n if (kill?.stopped) {\n out.ok = true;\n out.killed = true;\n out.log.push(`STOPPED by kill switch (set ${kill.at ?? \"unknown\"}) — no contact examined this tick`);\n await blob.setJSON(\"puppy_run_state\", out).catch(() => {});\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n }\n } catch { /* fail open — see note above */ }\n\n const lock = await blob.getJSON(\"puppy_run_lock\").catch(() => null);\n if (lock?.startedAt && Date.now() - new Date(lock.startedAt).getTime() < RUN_LOCK_TTL_MS) {\n out.log.push(`another run appears active (lock from ${lock.startedAt}) — skipping this tick`);\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n }\n await blob.setJSON(\"puppy_run_lock\", { startedAt: new Date().toISOString() }).catch(() => {});\n\n try {\n const state = await loadAllState();\n // v1.2 — existing journal loaded up front: the daily send cap counts today's already-journaled\n // live sends, so the ceiling holds across runs, not just within one.\n const priorJournal: JournalRow[] = (await blob.getJSON(\"puppy_journal\").catch(() => null)) ?? [];\n const todayPrefix = new Date().toISOString().slice(0, 10);\n let sentToday = priorJournal.filter(\n (r) => r.event === \"sent\" && r.ts.slice(0, 10) === todayPrefix && !r.test,\n ).length;\n // v1.1 (addendum #5): one calendar fetch per run, shared by enrollment guard + per-contact facts.\n const apptIndex = await fetchPupTalkApptIndex();\n let contactIds: string[];\n // v1.2 — opportunities fetched during enrollment eligibility are reused when the same contact is\n // processed later in this run, instead of a redundant second API call.\n const oppsCache = new Map();\n let skippedNotDue = 0; // v1.4 — how many contacts cost zero API calls this run\n\n if (TEST_MODE) {\n // Spec §8: skip real discovery entirely, operate ONLY on the one sanctioned dummy.\n const dummy = await resolveTestDummy();\n contactIds = [dummy.id];\n if (!state[dummy.id]) {\n state[dummy.id] = freshState(new Date().toISOString());\n await addTag(dummy.id, TAG_ENROLLED).catch((e) =>\n out.log.push(`tag failed on dummy: ${String(e).slice(0, 120)}`)\n );\n out.enrolled++;\n out.log.push(`TEST_MODE: enrolled dummy ${dummy.id}`);\n jrow(dummy.id, \"enrolled\", \"test dummy\");\n }\n } else {\n // v1.1 enrollment: the source tag is the HUMAN enrollment switch. Blocks only what makes\n // enrollment WRONG (existing customer, live booking). DND enforced by rule 1 first pass.\n // Surge hold guards bulk tagging — selectEnrollable. Full note: NOTES-v1.4.md.\n const found = await j(`${GHL}/contacts/search`, \"2021-07-28\", {\n method: \"POST\",\n body: JSON.stringify({\n locationId: LOC,\n pageLimit: 100,\n filters: [{ field: \"tags\", operator: \"contains_set\", value: [TAG_SOURCE_SIGNAL] }],\n }),\n });\n // v1.2 — surface pagination truncation instead of silently ignoring candidates beyond page 1\n // (only reachable when a human pushes a >100 bulk batch through with ACKNOWLEDGE_SURGE).\n const totalTagged = found.total ?? (found.contacts ?? []).length;\n if (totalTagged > (found.contacts ?? []).length) {\n out.log.push(\n `WARNING: ${totalTagged} contacts carry '${TAG_SOURCE_SIGNAL}' but only ${(found.contacts ?? []).length} ` +\n `fit one page — the rest enroll on later runs as earlier ones get the puppy-path-v1 tag`,\n );\n }\n const rawCandidates: any[] = (found.contacts ?? []).filter(\n (c: any) => !(c.tags ?? []).includes(TAG_ENROLLED) && !state[c.id],\n );\n const surgeThreshold = enrollSurgeThreshold();\n const { enroll, surgeHeld } = selectEnrollable(rawCandidates, surgeThreshold, acknowledgeSurge());\n if (surgeHeld) {\n out.log.push(\n `ENROLLMENT SURGE HELD: ${rawCandidates.length} un-enrolled '${TAG_SOURCE_SIGNAL}' contacts found in one run ` +\n `(threshold ${surgeThreshold}) — bulk tagging suspected, enrolling NOBODY until a human clears it ` +\n `(remove the bulk tags, or set ACKNOWLEDGE_SURGE=true). Already-enrolled contacts continue normally.`,\n );\n jrow(null, \"enrollment_surge_hold\", `${rawCandidates.length} candidates vs threshold ${surgeThreshold}`);\n }\n // v1.3 / R19 — one indexed read for the whole candidate set instead of one call each.\n const exitOppIndex = enroll.length ? await fetchExitOppIndex() : null;\n if (enroll.length) {\n out.log.push(\n exitOppIndex\n ? `exit-opp index built (${exitOppIndex.size} contacts across ${EXIT_STAGES.length} stages) — ${enroll.length} candidate(s) screened without per-contact calls`\n : `exit-opp index unavailable — falling back to per-contact reads for ${enroll.length} candidate(s)`,\n );\n }\n for (const c of enroll) {\n let opps: OppFact[];\n if (exitOppIndex) {\n opps = exitOppIndex.get(c.id) ?? [];\n } else {\n await sleep(120); // v1.2 — pacing: GHL fails 401/403 (not 429) over 100 req/10s\n opps = await getOpenOpportunities(c.id);\n }\n oppsCache.set(c.id, opps);\n // Across ALL opportunities, not just primary — spec's \"no opportunity showing Customer/Won-Paid\"\n // reading, and the account's own one-opportunity-per-contact rule makes this a cheap superset.\n const alreadyCustomer = opps.some(\n (o) => o.pipelineStageId === STAGE.CUSTOMER || o.pipelineStageId === STAGE.WON_PAID || o.monetaryValue > 0,\n );\n if (alreadyCustomer) {\n out.log.push(`${c.id}: tagged but already a customer — not enrolled`);\n jrow(c.id, \"enroll_refused\", \"already a customer\");\n continue;\n }\n const appt = apptIndex.get(c.id) ?? null;\n if (appt && apptIsLiveBooked(appt)) {\n out.log.push(`${c.id}: tagged but already has a live Pup Talk booking — not enrolled`);\n jrow(c.id, \"enroll_refused\", \"live booking already exists\");\n continue;\n }\n state[c.id] = freshState(new Date().toISOString());\n await addTag(c.id, TAG_ENROLLED).catch((e) => out.log.push(`tag failed on ${c.id}: ${String(e).slice(0, 120)}`));\n out.enrolled++;\n out.log.push(`enrolled ${c.id}`);\n jrow(c.id, \"enrolled\", `via tag '${TAG_SOURCE_SIGNAL}'`);\n }\n contactIds = Object.keys(state);\n }\n\n for (const contactId of contactIds) {\n const s = state[contactId];\n if (!s || TERMINAL_STATUSES.has(s.status)) continue;\n\n // v1.2 — paused_reply contacts get a LIGHTWEIGHT safety pass instead of v1.1's full skip.\n // (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\n if (s.status === \"paused_reply\") {\n // v1.4 — R22: paused_reply was absorbing, so the most engaged leads became the ones nothing\n // happened to. After PAUSE_TIMEOUT_DAYS: raise a SECOND task saying so, then release them.\n // Deliberately does not resume — a person got no answer; the fix is a person. NOTES-v1.4.md.\n\n const pausedSince = s.pausedForReplyAt ? new Date(s.pausedForReplyAt).getTime() : null;\n if (pausedSince && Date.now() - pausedSince > pauseTimeoutDays() * DAY_MS) {\n const days = Math.floor((Date.now() - pausedSince) / DAY_MS);\n try {\n if (!TEST_MODE) {\n await createTask(\n contactId,\n `Still waiting on us — replied ${days} days ago, nobody has answered`,\n `This person replied to a follow-up message ${days} days ago. The sequence stopped for them at the time and raised a task, and that task has not been actioned.\\n\\nOpen Conversations, read what they said, and answer it. They are being taken off the automated follow-up either way — they asked a person a question and they deserve a person's answer.`,\n );\n }\n } catch (e) {\n out.log.push(`${contactId}: pause-timeout task failed: ${String(e).slice(0, 100)}`);\n }\n state[contactId] = {\n ...s,\n status: \"done_hard_exit\",\n exitReason: `paused for ${days} days with no human response — escalated and released`,\n lastCheckedAt: new Date().toISOString(),\n };\n out.log.push(`${contactId}: paused ${days}d with no action — escalated, exited`);\n jrow(contactId, \"pause_timeout\", `${days} days unanswered`);\n continue;\n }\n try {\n await sleep(120);\n const contact = await getContact(contactId);\n if (!contact) continue;\n const opportunities = oppsCache.get(contactId) ?? (await getOpenOpportunities(contactId));\n const facts: Facts = {\n now: Date.now(),\n contact: { id: contactId, firstName: contact.firstName ?? \"\", companyName: contact.companyName ?? null, dnd: !!contact.dnd },\n opportunities,\n pupTalkAppt: apptIndex.get(contactId) ?? null,\n declinedSignal: (contact.tags ?? []).includes(PUP_TALK_DECLINED_TAG),\n hasUnansweredInboundReply: false,\n conversationCheckFailed: true, // pinned: no send can ever pass rule 5 on this pass\n channelBlocked: readChannelConsent(contact),\n foreignOutboundAt: null, // no conversation was fetched on this path; rule 5 blocks sends anyway\n };\n const d = decideAction(facts, s);\n const nowIso = new Date().toISOString();\n if (d.kind === \"hard_exit\") {\n const v = pickPrimaryOpportunity(opportunities)?.monetaryValue ?? 0;\n state[contactId] = { ...applyDecision(d, s, nowIso), exitValue: v, exitStepsSent: s.lastMainStepSent + s.lastBranchStepSent + (s.lastSlowStepSent ?? 0) };\n out.log.push(`${contactId}: paused contact hard-exited -> ${d.status} (${d.reason})`);\n jrow(contactId, \"hard_exit\", `${d.reason}${v ? ` | value ${v}` : \"\"}`);\n } else {\n state[contactId] = { ...s, lastCheckedAt: nowIso };\n }\n } catch (err) {\n out.log.push(`${contactId}: paused-pass FAILED: ${String(err).slice(0, 120)}`);\n }\n continue;\n }\n\n // v1.4 — R19b DUE-FIRST FILTERING: if nothing is due, no send can happen, so ask the CRM\n // nothing about this contact. O(due), not O(enrolled). Full reasoning in NOTES-v1.4.md.\n // Two safety valves: SAFETY_SWEEP_HOURS forces a full check daily regardless; any status this\n // shortcut does not model falls through to the full check. Cheap must not mean blind.\n\n const dueCheck = (() => {\n try {\n if (s.status === \"main\") {\n if (s.lastMainStepSent >= MAIN_SEQUENCE.length) return { due: true, why: \"sequence complete, needs exit evaluation\" };\n const next = MAIN_SEQUENCE[s.lastMainStepSent];\n if (isDue(next.offsetHours, s.enteredAt, Date.now())) return { due: true, why: `main step ${s.lastMainStepSent + 1} due` };\n return { due: false, why: `main step ${s.lastMainStepSent + 1} not due yet` };\n }\n if ((s.status === \"branch_a\" || s.status === \"branch_b\") && s.branchAnchorAt) {\n const seq = s.status === \"branch_a\" ? BRANCH_A : BRANCH_B;\n if (s.lastBranchStepSent >= seq.length) return { due: true, why: \"branch complete, needs exit evaluation\" };\n const next = seq[s.lastBranchStepSent];\n if (isDue(next.offsetHours, s.branchAnchorAt, Date.now())) return { due: true, why: \"branch step due\" };\n return { due: false, why: \"branch step not due yet\" };\n }\n // v1.7.1 — slow_track modelled too: the taper population only grows (non-terminal by\n // design), and without this every taper contact cost a full 3-call CRM check every 15\n // minutes for months of \"not due yet\". The daily safety sweep still catches exits.\n if (s.status === \"slow_track\") {\n const c = Math.max(0, Math.floor(Number(s.lastSlowStepSent)) || 0);\n if (isDue(nextSlowTouch(c).offsetHours, s.slowAnchorAt ?? s.enteredAt, Date.now())) return { due: true, why: `slow touch ${c + 1} due` };\n return { due: false, why: `slow touch ${c + 1} not due yet` };\n }\n return { due: true, why: \"status not modelled by the shortcut — full check\" };\n } catch {\n return { due: true, why: \"due-check threw — full check\" };\n }\n })();\n\n const lastChecked = s.lastCheckedAt ? new Date(s.lastCheckedAt).getTime() : 0;\n const sweepOverdue = Date.now() - lastChecked > safetySweepHours() * HOUR_MS;\n\n if (!dueCheck.due && !sweepOverdue) {\n state[contactId] = { ...s, lastCheckedAt: s.lastCheckedAt };\n out.skipped++;\n skippedNotDue++;\n continue; // zero API calls for this contact this run\n }\n\n try {\n await sleep(120); // v1.2 — pacing between contacts (GHL: 100 req/10s, breach = 401/403 not 429)\n const contact = await getContact(contactId);\n if (!contact) {\n out.log.push(`${contactId}: contact not found, skipping`);\n continue;\n }\n const opportunities = oppsCache.get(contactId) ?? (await getOpenOpportunities(contactId));\n const pupTalkAppt = apptIndex.get(contactId) ?? null;\n const declinedSignal = (contact.tags ?? []).includes(PUP_TALK_DECLINED_TAG);\n const reply = await getReplyStatus(contactId, s.enteredAt);\n\n const facts: Facts = {\n now: Date.now(),\n contact: {\n id: contactId,\n firstName: contact.firstName ?? \"\",\n companyName: contact.companyName ?? null,\n dnd: !!contact.dnd,\n },\n opportunities,\n pupTalkAppt,\n declinedSignal,\n hasUnansweredInboundReply: reply.hasUnansweredInboundReply,\n conversationCheckFailed: reply.conversationCheckFailed,\n // v1.5 R27 — was that last outbound ours or somebody else's? Ours iff it lands within\n // OURS_TOLERANCE_MS of our own recorded send. No lastSentAt yet (nothing sent to this\n // contact) means any outbound on the thread is definitionally foreign.\n channelBlocked: readChannelConsent(contact),\n foreignOutboundAt: (() => {\n const lo = reply.lastOutboundAt;\n if (lo == null) return null;\n if (!s.lastSentAt) return lo;\n const ours = new Date(s.lastSentAt).getTime();\n if (Number.isNaN(ours)) return lo;\n return Math.abs(lo - ours) <= OURS_TOLERANCE_MS ? null : lo;\n })(),\n };\n\n const decision = decideAction(facts, s);\n const nowIso = new Date().toISOString();\n\n switch (decision.kind) {\n case \"hard_exit\": {\n // v1.4 — R24: capture what this exit was worth, at the only moment the number is knowable.\n const exitVal = pickPrimaryOpportunity(opportunities)?.monetaryValue ?? 0;\n const stepsSent = s.lastMainStepSent + s.lastBranchStepSent + (s.lastSlowStepSent ?? 0);\n state[contactId] = {\n ...applyDecision(decision, s, nowIso),\n exitValue: exitVal,\n exitStepsSent: stepsSent,\n };\n out.log.push(`${contactId}: hard exit -> ${decision.status} (${decision.reason})${exitVal ? ` | value ${exitVal}` : \"\"}`);\n jrow(contactId, \"hard_exit\", `${decision.reason}${exitVal ? ` | value ${exitVal} after ${stepsSent} message(s)` : \"\"}`);\n break;\n }\n\n case \"pause_reply\":\n state[contactId] = applyDecision(decision, s, nowIso);\n if (decision.isNewPause) {\n jrow(contactId, \"pause_reply\", \"inbound reply detected — handed to a human\");\n const title = `Reply from ${facts.contact.firstName || \"contact\"} re: puppy path — read and respond personally`;\n try {\n await createTask(\n contactId,\n title,\n \"Auto-created by puppy-path-engine: an inbound reply was detected; the sequence is paused for this contact until a human responds.\",\n );\n out.log.push(`${contactId}: paused (new reply), task created`);\n } catch (e) {\n out.log.push(`${contactId}: paused (new reply), TASK CREATE FAILED: ${String(e).slice(0, 120)}`);\n }\n } else {\n out.log.push(`${contactId}: still paused (reply already flagged, no duplicate task)`);\n }\n break;\n\n case \"advance_status\":\n state[contactId] = applyDecision(decision, s, nowIso);\n out.log.push(`${contactId}: advanced -> ${decision.status}`);\n // \"awaiting_appt_outcome\" here means: they booked a Pup Talk while in the sequence —\n // the attributable event the summary counts as bookedDuringPath.\n jrow(contactId, \"advance_status\", decision.status);\n break;\n\n case \"soft_exit_21d\":\n state[contactId] = applyDecision(decision, s, nowIso);\n try {\n await createTask(\n contactId,\n `Puppy path finished for ${facts.contact.firstName || \"contact\"} — now on the slow track`,\n `Puppy path finished for ${facts.contact.firstName || \"contact\"}, no reply/booking. They are now on the slow track (occasional helpful messages: weekly for a month, then fortnightly, then monthly — no sales asks). Nothing needed unless you want them moved in the pipeline too; the stage was NOT auto-moved — that's Kim's call.`,\n );\n } catch (e) {\n out.log.push(`${contactId}: soft-exit task FAILED: ${String(e).slice(0, 120)}`);\n }\n out.log.push(`${contactId}: 21d complete — moved to slow track (stage NOT moved)`);\n jrow(contactId, \"soft_exit_21d\", \"21-day sequence complete — moved to slow track\");\n break;\n\n case \"branch_complete\":\n state[contactId] = applyDecision(decision, s, nowIso);\n out.log.push(`${contactId}: branch complete`);\n jrow(contactId, \"branch_complete\", s.status);\n break;\n\n case \"send\": {\n // v1.2 — blast ceilings (mirrors the PupsClub val's precedent). A capped send is a pure\n // deferral: state untouched, the step stays due, later runs drain the backlog gradually.\n if (out.sent >= maxSendsPerRun()) {\n out.skipped++;\n out.log.push(`${contactId}: send due but MAX_SENDS_PER_RUN (${maxSendsPerRun()}) reached — deferred`);\n break;\n }\n if (!TEST_MODE && sentToday >= maxSendsPerDay()) {\n out.skipped++;\n out.log.push(`${contactId}: send due but MAX_SENDS_PER_DAY (${maxSendsPerDay()}) reached — deferred to tomorrow`);\n break;\n }\n const step = decision.sequence === \"slow\"\n ? slowTemplateAt(decision.stepIndex, Date.now(), s.lastSentStepId).tpl\n : (decision.sequence === \"main\" ? MAIN_SEQUENCE : decision.sequence === \"branch_a\" ? BRANCH_A : BRANCH_B)[decision.stepIndex];\n // v1.7.1 — consent re-checked against the template actually being sent: a monthly\n // re-resolution at the UTC month boundary can flip template (and channel) between\n // decision and execution; an opted-out channel must win that race.\n if (decision.sequence === \"slow\" && facts.channelBlocked[step.channel]) {\n out.skipped++;\n out.log.push(`${contactId}: slow step resolved to opted-out ${step.channel} at send time — skipped, not consumed`);\n break;\n }\n const rendered = renderStep(\n step,\n { firstName: facts.contact.firstName, companyName: facts.contact.companyName },\n { testMode: TEST_MODE },\n );\n try {\n if (rendered.channel === \"sms\") {\n await sendSms(contactId, rendered.text);\n } else {\n await sendEmail(contactId, rendered.subject, rendered.html);\n }\n // v1.2 — state persisted IMMEDIATELY after each successful send (a mid-run crash\n // must never re-send). Non-send transitions recompute idempotently. NOTES-v1.4.md.\n state[contactId] = applyDecision(decision, s, nowIso);\n await saveAllState(state).catch((e) =>\n out.log.push(`${contactId}: sent OK but state persist failed (will retry at end): ${String(e).slice(0, 100)}`),\n );\n // v1.4 — R23: position is an array index, so inserting a message re-points everyone\n // mid-sequence with no signal. Recording the step ID makes that drift DETECTABLE.\n\n // v1.7 — slow records template id; R23 drift check stays main-only (slow's monthly\n // index-to-id mapping varies by design).\n const seqNow = decision.sequence === \"main\" ? MAIN_SEQUENCE : decision.sequence === \"branch_a\" ? BRANCH_A : decision.sequence === \"branch_b\" ? BRANCH_B : null;\n const sentStepId = decision.sequence === \"slow\" ? step.id : (seqNow?.[decision.stepIndex]?.id ?? null);\n if (s.lastSentStepId && sentStepId && seqNow) {\n const prevIdx = seqNow.findIndex((x) => x.id === s.lastSentStepId);\n if (prevIdx >= 0 && prevIdx !== decision.stepIndex - 1 && decision.sequence === \"main\") {\n out.log.push(`${contactId}: SEQUENCE DRIFT — last sent ${s.lastSentStepId} now sits at index ${prevIdx}, expected ${decision.stepIndex - 1}. The copy has been edited underneath in-flight contacts.`);\n jrow(contactId, \"sequence_drift\", `${s.lastSentStepId} -> index ${prevIdx}`);\n }\n }\n state[contactId] = { ...state[contactId], lastSentStepId: sentStepId };\n out.sent++;\n if (!TEST_MODE) sentToday++;\n out.log.push(`${contactId}: sent ${decision.sequence} step ${decision.stepIndex + 1} (${rendered.channel})`);\n jrow(contactId, \"sent\", `${decision.sequence}#${decision.stepIndex + 1} (${rendered.channel === \"sms\" ? \"text\" : \"email\"})`);\n } catch (e) {\n out.failed++;\n out.log.push(`${contactId}: SEND FAILED ${decision.sequence} step ${decision.stepIndex + 1}: ${String(e).slice(0, 120)}`);\n jrow(contactId, \"send_failed\", `${decision.sequence}#${decision.stepIndex + 1}: ${String(e).slice(0, 80)}`);\n }\n break;\n }\n\n case \"skip_step\":\n // v1.6 R28 — the contact has opted out of this step's channel. The step is consumed so\n // the sequence carries on to the next one it IS allowed to send, rather than stalling.\n // Journalled explicitly: a message that silently never went out is exactly the kind of\n // thing nobody notices until a customer asks why they never heard back.\n state[contactId] = applyDecision(decision, s, nowIso);\n out.skipped++;\n out.log.push(`${contactId}: ${decision.reason}`);\n jrow(contactId, \"skip_step_channel_optout\", decision.reason);\n break;\n\n case \"skip\":\n // Still runs through applyDecision (a no-op on every field except lastCheckedAt) so \"last\n // time this contact was actually looked at\" stays accurate per spec §4's schema comment,\n // even on a run where nothing else changed for them.\n state[contactId] = applyDecision(decision, s, nowIso);\n out.skipped++;\n break;\n }\n } catch (err) {\n out.failed++;\n out.log.push(`${contactId}: FAILED: ${String(err).slice(0, 150)}`);\n // v1.4 — this catch used to write to out.log only, and out.log is not persisted to the\n // journal. So a contact failing here was invisible to the dashboard, which reads the journal.\n // Every failure now leaves a row.\n jrow(contactId, \"contact_failed\", String(err).slice(0, 100));\n }\n }\n\n // v1.1: prune stale terminal entries (their history lives on in the journal), persist everything,\n // then rebuild the aggregate summary from full journal + surviving state.\n out.skippedNotDue = skippedNotDue;\n if (skippedNotDue) out.log.push(`${skippedNotDue} contact(s) not due — zero API calls spent on them`);\n const { kept, prunedIds } = pruneState(state, Date.now());\n for (const id of prunedIds) jrow(id, \"pruned\", \"terminal 60+ days, removed from state (journal retains history)\");\n if (prunedIds.length) out.log.push(`pruned ${prunedIds.length} stale terminal entries`);\n await saveAllState(kept);\n const fullJournal = await appendJournal(journal);\n await saveSummary(\n buildSummary(kept, fullJournal, {\n at: new Date().toISOString(),\n testMode: TEST_MODE,\n sent: out.sent,\n failed: out.failed,\n enrolled: out.enrolled,\n }),\n ).catch((e) => out.log.push(`summary save failed: ${String(e).slice(0, 100)}`));\n await saveReport(out);\n await blob.setJSON(\"puppy_run_lock\", { startedAt: null }).catch(() => {}); // release lock\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n } catch (err) {\n out.ok = false;\n out.error = String(err);\n await saveLastError({ at: new Date().toISOString(), error: String(err) }).catch(() => {});\n // v1.2 — even on a crashed run, persist whatever state mutations happened before the crash\n // (sends already persisted individually; this catches transitions) and the journal rows.\n await saveReport(out).catch(() => {});\n await appendJournal(journal).catch(() => {});\n await blob.setJSON(\"puppy_run_lock\", { startedAt: null }).catch(() => {});\n console.log(\"PUPPYPATH\", JSON.stringify(out));\n return out;\n }\n}\n\n// ---- booking-link shortener (spec §7) --------------------------------------------------\n// (full note moved to NOTES-v1.4.md when this file hit val.town's 80,000-char ceiling)\nexport async function bookingRedirect(_req: Request): Promise {\n return Response.redirect(REAL_BOOKING_URL, 302);\n}\n\n// ---- exports for the local test harness (puppy-path-engine.test.ts) -------------------------------\n\nexport {\n decideAction,\n applyDecision,\n renderStep,\n resolveDogName,\n resolveFirstName,\n applyMergeFields,\n isDue,\n freshState,\n pickPrimaryOpportunity,\n apptIsLiveBooked,\n bodyToHtml,\n // v1.1 pure additions\n businessLocalParts,\n inSendWindow,\n selectEnrollable,\n buildSummary,\n pruneState,\n MAIN_SEQUENCE,\n BRANCH_A,\n BRANCH_B,\n STAGE,\n MAIN_PIPELINE_ID,\n TAG_ENROLLED,\n TAG_SOURCE_SIGNAL,\n PUP_TALK_DECLINED_TAG,\n PHONE_DISPLAY,\n REAL_BOOKING_URL,\n SHORT_BOOKING_LINK,\n TERMINAL_STATUSES,\n DAY_MS,\n HOUR_MS,\n TEST_MODE,\n // v1.7 — slow track\n slowTemplateAt,\n nextSlowTouch,\n monthlyTemplateFor,\n};\n// v1.8 — story machinery + taper banks re-exported for the offline harness\nexport { STORY_SLOTS, resolveStories, storyFor } from \"./kim-stories.ts\";\nexport { SLOW_WEEKLY, SLOW_FORTNIGHTLY, SLOW_MONTHLY_BANK } from \"./taper-messages.ts\";\nexport type { PuppyState, PuppyStatus, Facts, Decision, ContactFact, OppFact, ApptFact, MessageTemplate, RenderedMessage };\n",[215],"73ed3ffd-7f90-4b7d-b713-937938f781ba","kim-stories.ts","789b1fbc-901e-11f1-980a-1607ee4eb77e",50,["D",1785861568226],"// KIM'S STORIES — the one file that makes the taper personal. v1.8, 4 Aug 2026.\n//\n// THE RULE THIS FILE EXISTS TO ENFORCE: no invented stories, ever. No fictional dogs, no\n// composite customers, no \"a client once told me\". Every `story` below starts as null and stays\n// null until KIM'S OWN WORDS go in. The copy is written to read complete without them — an\n// empty slot renders as nothing, not as a hole.\n//\n// HOW TO FILL ONE IN (the whole procedure, ~5 minutes):\n// 1. Kim answers a question from the Story Capture Sheet (handover/Story-Capture-Sheet.pdf).\n// 2. Paste her answer, lightly tidied but in her words, as the `story` string below.\n// Keep it to 2-4 sentences. First person. No customer surnames without her okay.\n// 3. PUT this one file to the val (same deploy command as always). Nothing else changes.\n// 4. The next send that hits that slot carries her story. Practice mode renders it too,\n// so it can be checked on the panel/journal before anyone real sees it.\n//\n// Slots are ADDITIVE paragraphs: the template holds {{STORY:id}} on its own line; the renderer\n// swaps in the story, or removes the line entirely when null. Both paths are tested.\n\nexport type StorySlot = {\n id: string;\n // The question that gets a usable answer from Kim in 30 seconds — printed on the capture sheet.\n prompt: string;\n // Where it lands, so a human editing this file knows the context without opening the copy file.\n lands: string;\n // Kim's words, or null. Null = the message sends without it and reads complete.\n story: string | null;\n};\n\nexport const STORY_SLOTS: StorySlot[] = [\n {\n id: \"teenage\",\n prompt: \"Name one dog who turned into a teenage terror around 8 months and came good. What did the owner stick with?\",\n lands: \"Slow track week 1 — the adolescence email\",\n story: null,\n },\n {\n id: \"alone_time\",\n prompt: \"Tell me about one dog who couldn't be left alone at first. What actually fixed it?\",\n lands: \"Slow track day 63 — the alone-time email\",\n story: null,\n },\n {\n id: \"vet_visits\",\n prompt: \"Which dog do you know who walks into the vet happy? What did their owner do differently?\",\n lands: \"Slow track day 70 — the vet visits email\",\n story: null,\n },\n {\n id: \"settle\",\n prompt: \"One dog you can picture lying calmly somewhere busy (a patio, a game, a store). How did they get there?\",\n lands: \"Slow track day 119 — the off-switch email\",\n story: null,\n },\n {\n id: \"dog_parks\",\n prompt: \"One thing you've seen go wrong at a dog park that the owner never noticed. What should they have seen?\",\n lands: \"Slow track day 147 — the dog parks email\",\n story: null,\n },\n {\n id: \"nose_work\",\n prompt: \"Name a dog who was 'bad' until they got a job to do. What was the job?\",\n lands: \"Slow track day 175 — the boredom email\",\n story: null,\n },\n {\n id: \"leash_meetings\",\n prompt: \"Which pair of dogs hated each other on leash but got along fine off it, or walking side by side?\",\n lands: \"Slow track day 203 — the leash meetings email\",\n story: null,\n },\n {\n id: \"holidays\",\n prompt: \"What's one thing that happens at the kennel every Thanksgiving or Christmas that owners would never guess?\",\n lands: \"Monthly November — the holiday guests email\",\n story: null,\n },\n];\n\nconst byId = new Map(STORY_SLOTS.map((s) => [s.id, s]));\n\n// story text, or null. Trims whitespace so a pasted answer can't break the layout.\nexport function storyFor(id: string): string | null {\n const s = byId.get(id)?.story;\n if (!s) return null;\n // A pasted answer can't smuggle a slot token back in (single-pass resolve would ship it raw).\n const t = s.replace(/\\{\\{STORY:[a-z_]+\\}\\}/g, \"\").trim();\n return t.length ? t : null;\n}\n\n// Resolve every {{STORY:id}} token in a rendered body. Unknown ids resolve to nothing rather\n// than leaking a token to a customer — and the tests assert every id used in copy exists here.\nexport function resolveStories(text: string): string {\n return text\n .replace(/\\{\\{STORY:([a-z_]+)\\}\\}/g, (_, id) => storyFor(id) ?? \"\")\n .replace(/\\n{3,}/g, \"\\n\\n\")\n .trim();\n}\n",[224],"239807d6-0ec5-4304-a2a1-35f81dcf3456","decisions.ts","13df017c-902f-11f1-8dc5-1607ee4eb77e",113,["D",1785875965188],"// WHAT IS WAITING ON KIM. v1.2, 4 Aug 2026.\n//\n// WHY THIS FILE EXISTS: two independent readers were handed the dashboard cold. Both said the\n// same thing without prompting. Kim: \"there is no list of what I'm being asked, no button, no\n// 'Kim: 3 things waiting on you'.\" Candice: \"exactly one requires anything from us, buried\n// fifth-from-top, styled identically to eight items needing nothing, with no owner.\" A page that\n// reports state but never asks for a decision quietly turns the reader into a spectator.\n//\n// THE RULE: an item goes here only when it is genuinely blocked on Kim, it is written in her\n// words, and it says what happens if she says yes AND what happens if she says nothing. No item\n// nags. No item implies she is late. \"Nothing\" is always an acceptable answer, and where that is\n// true the item says so.\n//\n// EVERY ITEM MIRRORS A NUMBERED ROW IN THE COMMITMENTS LEDGER, so the page and the ledger cannot\n// drift apart. The `ref` is that row. If you add one here, add it there in the same commit.\n//\n// v1.2, after the second stranger test. Three findings, all fair:\n// 1. Every item carries `evidence` now. The work log below it sets a standard of proof (\"How we\n// know\" on every line) and this card was exempting itself from that standard while sitting\n// ABOVE it. The reader noticed within one read.\n// 2. No item may hardcode a live number. The old K11 text said \"two of this week's went\n// unmarked\" while the tiles, reading the same account, showed none unmarked in their window.\n// A number typed into prose goes stale the day after it is typed. Live figures arrive through\n// `Ctx` and are rendered by a function, or they are not stated.\n// 3. The $250 Bootcamp cohort is a decision about her customers' money and was sitting twelve\n// rows down in the work log rather than here. \"Wrong things promoted\", exactly.\n\nexport type Ctx = {\n unmarkedPupTalks?: number | null; // appointments with no showed/no-show mark yet, this window\n inquiriesPerWeek?: number | null; // live count, so the volume a YES commits her to is never typed\n};\n\nexport type Decision = {\n ref: string; // ledger row, e.g. \"K8\"\n ask: string; // the question, in Kim's vocabulary, ending in a question mark\n why: string | ((c: Ctx) => string); // what it unblocks or prevents\n evidence: string; // how we know this is real. Same standard as the work log below it.\n ifYes?: string | ((c: Ctx) => string); // what saying yes costs. May depend on live figures.\n ifNothing: string; // what happens if she never answers. Honest, including \"nothing bad\".\n weight: \"blocking\" | \"worth doing\" | \"whenever\";\n liveNow?: boolean; // already affecting real customers today, as opposed to pending\n};\n\n// v1.3, after the third stranger test, which read this file as well as the page. Four findings:\n// 1. The type stated the rule as \"what happens if she says yes AND if she says nothing\" and then\n// implemented only half of it. `ifYes` now exists and is filled wherever a yes has a cost.\n// 2. `weight: \"blocking\"` was applied to two items that do not block. An item carrying a stated\n// default is an answered question; a December deposit does not gate a puppy sequence. The\n// headline counts blockers, so mislabelling one puts a wrong number at the top of the page.\n// 3. The genuine email go-live blocker was in the ledger and NOT here, so a reader answering\n// every card would believe the runway was clear when the email half cannot deliver.\n// 4. The page detected \"already reaching customers\" by regex-matching this file's prose, so a\n// reword would have silently disabled the warning. It is a field now.\n\nexport const DECISIONS: Decision[] = [\n {\n ref: \"K8\",\n ask: \"Can we switch the new follow-up messages on, and switch the old ones off at the same moment?\",\n why: \"Two things have to happen in the same few minutes, not one. Your CRM still has its own puppy follow-up running, so ours going on and that one going off is a single move or new inquiries get two sets of messages from you on the same day. And ours only picks people up when they are tagged as a puppy inquiry, which nothing currently does, so that tagging has to be switched on in the same breath or the new messages go live and quietly reach nobody.\",\n evidence: \"All 165 automations were read one by one on 4 August; the one still switched on is named \\\"1. Wait 1 Day: Initial Nurture - Puppy\\\". Separately, 1,200 of your most recent contacts were checked and not one of them carries the tag our system watches for, which is how we know the tagging is the missing third step rather than an assumption.\",\n ifYes: (c) =>\n `All three get done together, with you watching: tagging on, ours on, the old one off. From that moment it starts working on ${c.inquiriesPerWeek != null ? `roughly the ${c.inquiriesPerWeek} new inquiries a week you are getting now` : \"your new inquiries as they arrive\"}, and nothing changes for anyone already partway through the old sequence.`,\n ifNothing: \"Nothing breaks. The new messages stay in practice mode and nobody is messaged by them.\",\n weight: \"blocking\",\n },\n {\n ref: \"K1\",\n ask: \"Do the follow-up messages sound like you?\",\n why: \"You have both write-ups in hand. So you know exactly what you are agreeing to: 21 days of messages up front, then 29 more spread over about 19 months, and after that one email a month indefinitely, cycling the same twelve seasonal ones year after year. Everyone can stop the lot at any point with one word, and every message tells them so.\",\n evidence: \"Both write-ups were generated from the live system rather than from a draft, so what you read is exactly what would send.\",\n // v1.4. This read \"roughly 190 new people a week\" while the page counted 186 four inches\n // above it. The volume a YES commits her to is the whole weight of the question, so it is\n // counted at render time or it is not stated as a number at all.\n ifYes: \"The wording is settled and nothing else about it comes back to you. It still does not send until the go-live question above is answered too.\",\n ifNothing: \"Nothing sends. The wording sits exactly as you last read it.\",\n weight: \"blocking\",\n },\n {\n ref: \"K2\",\n ask: \"Which number should customers see, 912-348-8726 or 912-823-4382?\",\n why: \"It goes at the bottom of every message that leaves the system, so it needs to be the one you actually want ringing.\",\n evidence: \"Both numbers are live on your account and both are cleared for texting. On 4 August, only one of them was on your website footer: 912-348-8726.\",\n ifNothing: \"We use 912-348-8726, the one already on your website. This one has a default, so it does not hold anything up; it is here because it is your name on the message.\",\n weight: \"worth doing\",\n },\n {\n ref: \"KB1\",\n ask: \"What do you want done about the Bootcamp deposits taken at $250 instead of $500?\",\n why: \"Your booking form was set to a $250 deposit rather than $500, and it was live until 2 August. There are 17 Bootcamp bookings on record from 19 December onward, every one taken while it was wrong. So the most this can be worth is 17 times $250, which is $4,250, and the least is nothing if none of them paid a deposit at all. The true figure is somewhere between, and finding it means matching those bookings against the payment records.\",\n evidence: \"The wrong figure was found inside the booking form's own settings, corrected and published, and the live site was then searched end to end for '$250' with no hits left. The 17 bookings were counted from your own records. Which of them actually paid a deposit means matching bookings to payments by hand, which is work rather than a blocker: the payment link into your CRM is already live and has been since 1 August. Separately, $23,463.99 of counter sales are recorded but not linked to a name. 14 of those carry enough of a trail to be matched with effort; 21 arrived with no name, email or phone attached at all and nothing will ever resolve those. It is old filing, not missing money.\",\n ifYes: \"We pull the payment list, put a real number on it, and bring it back to you before anybody is contacted. Deciding to look is not deciding to chase.\",\n ifNothing: \"Nothing further goes wrong, because the form is already fixed. Up to $4,250 that was underpaid stays underpaid.\",\n weight: \"worth doing\",\n },\n {\n ref: \"K6\",\n ask: \"Should people who have already booked keep getting the safety tips?\",\n why: \"Right now the follow-ups stop the moment somebody books. Some owners like the tips continuing; some find it odd to still be sold at after they said yes.\",\n evidence: \"Read from the sequence itself: booking is a stop condition on every path, including the slow track.\",\n ifNothing: \"They stop at booking, which is the safer of the two.\",\n weight: \"worth doing\",\n },\n {\n ref: \"K11\",\n ask: \"Is it worth a word with the front desk about marking Pup Talks showed or no-show?\",\n why: (c) =>\n c.unmarkedPupTalks\n ? `${c.unmarkedPupTalks} of the Pup Talks in the last 7 days ${c.unmarkedPupTalks === 1 ? \"has\" : \"have\"} no mark against ${c.unmarkedPupTalks === 1 ? \"it\" : \"them\"} yet, so the show-up figure on this page is better than the truth by up to that many. It is a ten second job at the desk.`\n : \"When one goes unmarked the show-up figure on this page comes out better than the truth, because an unmarked appointment is not counted as a miss. None are unmarked right now, and keeping it that way is a ten second job at the desk.\",\n evidence: \"Counted live from your calendar each time this page loads, not typed in here.\",\n ifYes: \"Nothing to build. It is a habit at the desk, and the number on this page stops flattering itself.\",\n ifNothing: \"The show-up figure drifts optimistic whenever one is missed, and this page keeps saying so. Nothing else is affected.\",\n weight: \"worth doing\",\n },\n {\n ref: \"K7\",\n ask: \"You have two review-request automations both switched on. Which one do you want to keep?\",\n why: \"You have two review-request workflows switched on at once, with near-identical names. We cannot read a workflow's steps through the interface we have, so we cannot promise you both actually fire, but two published copies is the usual shape of a customer being asked twice, and it is worth ten seconds of your eyes.\",\n evidence: \"Read from all 165 automations on 4 August: \\\"New Review Request WF\\\" and \\\"Update- New Review Request WF\\\" are both published. What we could NOT do is open either one and read its steps, because that call is not available to us. So this is two live copies, not a confirmed double send.\",\n ifNothing: \"Both stay switched on. If they do both fire, the double ask continues; it is not damaging, it just looks careless.\",\n weight: \"worth doing\",\n liveNow: true,\n },\n {\n ref: \"K12\",\n ask: \"Can we get four small settings added wherever thedogsspotga.com is managed?\",\n why: \"This is the real blocker on the email half. Checked on 4 August, your domain tells the internet that Google and Wix are allowed to send email in your name, and nobody else. If the follow-ups went live today, every email would come from a server your domain does not stand behind, and a lot of them would land in spam or bounce outright. Texting is unaffected: that is verified separately and already works.\",\n evidence: \"Read from your domain's own public records. They list Google and Wix and nothing else. The settings needed are generated by your CRM and are four short lines of text.\",\n ifYes: \"Amir sends the exact four lines and, if you are not sure who looks after your domain, works that out from the records rather than asking you to. Whoever it is pastes them in, it takes about ten minutes, and email can go live alongside texting.\",\n ifNothing: \"Texting can still go live on its own. Email cannot, and this stays the one thing standing in its way.\",\n weight: \"blocking\",\n },\n {\n ref: \"K10\",\n ask: \"Do you want to sit down over what all this costs against what it brings in?\",\n why: \"Your advertising is running at roughly $675 a week, your CRM is about $200 a month, and there is the retainer on top. This page can show what comes IN, but it cannot yet show what goes OUT, because the ad account is not linked to it. That is Amir's job and it is on his list, not yours.\",\n evidence: \"The ad figure is one week, 24 to 30 July, where the per-campaign spends summed to $674.71 and matched the account total exactly. That is one week checked, not a standing rate. The CRM figure is its published price. Neither is on this page yet, and that is a gap rather than a mystery.\",\n ifYes: \"Half an hour, once the ad account is linked, with real numbers rather than impressions.\",\n ifNothing: \"The conversation waits. Nothing degrades.\",\n weight: \"whenever\",\n },\n {\n ref: \"K13\",\n ask: \"Can we retire the access key you pasted into the Upwork thread on 31 July?\",\n why: \"It is a working key to your CRM sitting in a chat log. Nothing has gone wrong that we know of, and we have no way to tell whether anybody else has used it, which is exactly why it should not be sitting there. It is simply not where a key should live.\",\n evidence: \"The message was still in the thread on 4 August. Retiring it takes about two minutes on your side and everything carries on working, because a fresh one replaces it.\",\n ifYes: \"Two minutes, and one loose end closed.\",\n ifNothing: \"A working key to your customer list stays in a chat log that other people can be added to. Nothing has gone wrong so far, and nobody can promise it will not.\",\n weight: \"worth doing\",\n liveNow: true,\n },\n {\n ref: \"K14\",\n ask: \"Can we take the holiday boarding deposit automatically instead of by hand?\",\n why: \"You already have a product in your CRM called \\\"Holiday boarding deposit\\\" set at $50, fully configured, and it does not appear on a single order in the payment history we can see. Your boarding bookings go through the form on your website instead, so the CRM never gets the chance to take the money or record that it arrived. That is why somebody is checking by hand.\",\n evidence: \"Read from your own product list: \\\"Holiday boarding deposit\\\" and \\\"New Client Boarding Deposit\\\" both exist at $50, and not one order in your recent payment history references either.\",\n ifYes: \"Two sizes of job, and Amir will lay out both before anything is built: record the deposit against the customer automatically so you get a list rather than a memory, or take it as part of the booking so nobody can complete one without paying.\",\n ifNothing: \"It stays a manual check every holiday season.\",\n weight: \"worth doing\",\n },\n {\n ref: \"K15\",\n ask: \"You have seven no-sale and tips automations running. Do you want me to go through them?\",\n why: \"They are all published and live. One of them, \\\"Copy - Tips Ad campaign > Auto Responder\\\", is a duplicate that is switched on while the original it was copied from sits in draft, which usually means somebody duplicated it to make an edit and published the wrong one. Building an eighth sequence next to seven live ones is how people end up getting two sets of messages from you on the same afternoon.\",\n evidence: \"Read from all 165 automations on 4 August: seven published and one draft, with the copy-versus-original mismatch named above. Five are follow-up sequences; two are auto-responders and call routing, so the real number to review is nearer five.\",\n ifYes: \"Amir reads all seven and tells you which are earning their place, before anything new is built.\",\n ifNothing: \"They keep running as they are. Nothing breaks; the duplicate keeps sending the older wording.\",\n weight: \"worth doing\",\n liveNow: true,\n },\n {\n ref: \"K9\",\n ask: \"Would you tell us a story or two from the kennel?\",\n why: \"There are eight places in the follow-up messages where a real thing that happened to a real dog would land far better than general advice. They are written to read perfectly well empty, and they are empty today, because made up stories are not something we will put in your name.\",\n evidence: \"The eight places are marked in the sequence you have already read. Each one has a fallback line that reads normally with no story in it, which is what is running now.\",\n ifNothing: \"The messages read exactly as you have already seen them, which costs you nothing.\",\n weight: \"whenever\",\n },\n];\n\nexport const WEIGHT_ORDER: Record = { blocking: 0, \"worth doing\": 1, whenever: 2 };\nexport const WEIGHT_LABEL: Record = {\n blocking: \"Holds up go-live\",\n \"worth doing\": \"Worth doing\",\n whenever: \"Whenever you like\",\n};\nexport function sortedDecisions(ds: Decision[] = DECISIONS): Decision[] {\n return [...ds].sort((a, b) => WEIGHT_ORDER[a.weight] - WEIGHT_ORDER[b.weight]);\n}\nexport const blockingCount = (ds: Decision[] = DECISIONS) => ds.filter((d) => d.weight === \"blocking\").length;\n/** Resolve a `why` that may depend on live figures. */\nexport const whyText = (d: Decision, c: Ctx): string => (typeof d.why === \"function\" ? d.why(c) : d.why);\n/** Same treatment for ifYes: a volume figure must be counted, never typed. */\nexport const ifYesText = (d: Decision, c: Ctx): string | undefined =>\n d.ifYes == null ? undefined : (typeof d.ifYes === \"function\" ? d.ifYes(c) : d.ifYes);\n",[231],"a41accd7-2d6b-4580-b373-d65fedcadd1c","dashboard.ts","fb119304-9028-11f1-8278-1607ee4eb77e",112,["D",1785875964709],18,"// THE DOGS SPOT, LIVE DASHBOARD. One page Kim can open any time, from anything. v1.0, 4 Aug 2026.\n//\n// THE PROMISE THIS FILE MAKES: it always renders something true. Every data source is fetched\n// independently, every failure is caught, and the last good answer for each section is cached in\n// a blob. If the CRM is down, the page says \"the CRM did not answer just now, here is what it\n// said 20 minutes ago\" instead of showing a zero or a blank. A dashboard that shows a wrong zero\n// is worse than no dashboard, because it is quietly reassuring.\n//\n// ROUTES ?k= the dashboard\n// ?k=&f=json the same numbers as data\n//\n// AUDIENCE: Kim. Non-technical, on a phone, thirty seconds. No jargon, no acronyms unexplained,\n// no metric that does not connect to her money. Detail lives below the fold for whoever wants it.\ndeclare const Deno: { env: { get(k: string): string | undefined } };\nif (typeof (globalThis as any).Deno === \"undefined\") {\n (globalThis as any).Deno = { env: { get: (k: string) => (globalThis as any).process?.env?.[k] } };\n}\nimport {\n countContacts, sourceBreakdown, channelBreakdown, campaignBreakdown, attributionCoverage,\n countEvents, wonOpps, weeklyBuckets,\n deltaWord, money, type ContactLite, type EventLite, type OppLite,\n} from \"./report-logic.ts\";\nimport { sortedDecisions, blockingCount, whyText, ifYesText, WEIGHT_LABEL, type Decision, type Ctx } from \"./decisions.ts\";\nimport { SEEDED, mergeLog, KIND_LABEL, type WorkEntry } from \"./worklog.ts\";\nimport { observedCadenceMin, lateness, lateSentence, isHealthy } from \"./cadence.ts\";\n\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst PUP_TALK_CAL = \"qHuYJ0NEqzibnoqf5Cw3\";\nconst CACHE_KEY = \"dash_cache\";\n\n// ---- palette: validated with the dataviz validator, both modes, on these exact surfaces ------\n// Categorical slots 1-3 (blue/orange/aqua): ALL CHECKS PASS light and dark. Status steps are the\n// reserved four and always ship with a word beside them, never color alone.\nconst CAT = [\"#2a78d6\", \"#eb6834\", \"#1baf7a\"];\nconst CAT_DARK = [\"#3987e5\", \"#d95926\", \"#199e70\"];\nconst GOOD = \"#0ca30c\", WARN = \"#fab219\", CRIT = \"#d03b3b\";\n\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\n// v1.1 (review #2): a failed READ and a genuinely EMPTY value are different facts. Collapsing\n// them made the page say \"0 people waiting on you\" when the truth was \"we could not check\".\ntype Read = { ok: true; v: T | null } | { ok: false; v: null };\nasync function readBlob(k: string): Promise> {\n try { return { ok: true, v: ((await (await blobMod()).getJSON(k)) ?? null) as T | null }; }\n catch { return { ok: false, v: null }; }\n}\nasync function getBlob(k: string): Promise { return (await readBlob(k)).v; }\nasync function token(): Promise {\n return Deno.env.get(\"GHL_TOKEN\") || ((await getBlob<{ ghlToken?: string }>(\"puppy_config\"))?.ghlToken ?? undefined);\n}\nasync function isAdmin(k: string) {\n return (await sha256Hex(k)) === (Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\") || KEY_SHA256);\n}\nasync function isViewer(k: string) {\n const tok = await token();\n return !!tok && k === \"tds_view_\" + (await sha256Hex(tok + \":view\")).slice(0, 32);\n}\n\nasync function j(path: string, ver: string) {\n const tok = await token();\n const r = await fetch(`${GHL}${path}`, {\n headers: { Authorization: `Bearer ${tok}`, Version: ver, \"User-Agent\": \"curl/8.5.0\" },\n signal: AbortSignal.timeout(20_000),\n });\n if (!r.ok) throw new Error(`HTTP ${r.status}`);\n return r.json();\n}\n\nconst ET = () => {\n const p = new Intl.DateTimeFormat(\"en-US\", { timeZone: \"America/New_York\", timeZoneName: \"shortOffset\" })\n .formatToParts(new Date()).find((x) => x.type === \"timeZoneName\")?.value ?? \"GMT-4\";\n const m = p.match(/GMT([+-]\\d+)/);\n return m ? Number(m[1]) * 60 : -240;\n};\n\nasync function contactsSince(floorMs: number, truncated: string[]): Promise {\n const out: ContactLite[] = [];\n let sa: string | undefined, sav: number | undefined;\n let reachedFloor = false;\n for (let page = 0; page < 30; page++) {\n const q = new URLSearchParams({ locationId: LOC, limit: \"100\" });\n if (sa && sav) { q.set(\"startAfterId\", sa); q.set(\"startAfter\", String(sav)); }\n const d = await j(`/contacts/?${q}`, \"2021-07-28\");\n const cs = d?.contacts ?? [];\n if (!cs.length) break;\n for (const c of cs) {\n // The FIRST attribution entry is the one flagged isFirst by the CRM, i.e. how this person\n // arrived, not how they last touched us. Later entries describe return visits.\n const a = (Array.isArray(c.attributions) ? c.attributions : []).find((x: any) => x?.isFirst) ?? c.attributions?.[0] ?? null;\n out.push({\n dateAdded: c.dateAdded, source: c.source ?? null, tags: c.tags ?? [],\n attribution: a ? { medium: a.medium ?? a.utmSessionSource ?? null, campaign: a.utmCampaign ?? null } : null,\n });\n }\n const oldest = Date.parse(cs[cs.length - 1]?.dateAdded ?? \"\");\n sa = d?.meta?.startAfterId; sav = d?.meta?.startAfter;\n if (Number.isFinite(oldest) && oldest < floorMs) { reachedFloor = true; break; }\n if (!sa) { reachedFloor = true; break; }\n }\n if (!reachedFloor) truncated.push(\"the older weeks of the chart\");\n return out;\n}\n\n// Ad platforms. Both are env-gated and honest: no token means \"not connected yet\", never a guess.\nasync function metaWeek(startMs: number, endMs: number, tz: number) {\n const tok = Deno.env.get(\"META_TOKEN\"), act = Deno.env.get(\"META_AD_ACCOUNT\");\n if (!tok || !act) return null;\n const day = (ms: number) => new Date(ms + tz * 60_000).toISOString().slice(0, 10);\n const r = await fetch(\n `https://graph.facebook.com/v21.0/${act}/insights?fields=spend,actions&time_range={\"since\":\"${day(startMs)}\",\"until\":\"${day(endMs - 86_400_000)}\"}`,\n { headers: { Authorization: `Bearer ${tok}` }, signal: AbortSignal.timeout(20_000) },\n ).catch(() => { throw new Error(\"Facebook did not answer\"); });\n if (!r.ok) {\n // A token that exists but has not been granted ad-reading rights is a SETUP state, not a\n // fault, and it must not reach Kim as \"Facebook returned 400\". Meta answers this exact case\n // with code 200 and a message naming ads_management/ads_read. Verified live on 4 Aug against\n // the real token: the system user was created without an app role, so it came out holding\n // only page permissions. Anything else genuinely is an error and says so.\n const body = await r.json().catch(() => null);\n const msg = String(body?.error?.message ?? \"\");\n if (body?.error?.code === 200 || /ads_read|ads_management/.test(msg)) throw new Error(\"PERMISSION\");\n throw new Error(`Facebook returned ${r.status}`);\n }\n const row = (await r.json())?.data?.[0];\n const acts = row?.actions ?? [];\n const conv = Number(acts.find((a: any) => a.action_type === \"onsite_conversion.total_messaging_connection\")?.value\n ?? acts.find((a: any) => a.action_type === \"lead\")?.value ?? 0);\n return { spend: Number(row?.spend ?? 0), conv };\n}\n// PROVEN LIVE 4 Aug 2026: this account has 5,695 opportunities and every single one carries\n// status \"open\", and nobody uses the won/lost flags. Counting `status=won` returns zero forever,\n// which would have rendered \"0 closed deals\" every week regardless of reality. The real signal\n// is the pipeline STAGE (Customer / Won-Paid), which the engine already uses for its exit rules.\n// Separately proven: every one of those records has monetaryValue 0, so the CRM holds no deal\n// values at all. The page therefore reports customer COUNT and says plainly that revenue is not\n// recorded, rather than printing a $0.00 that reads as \"we earned nothing\".\nconst STAGE_CUSTOMER = \"fd821b4e-bbe6-44de-b754-fa80e4823616\";\nconst STAGE_WON_PAID = \"ae173310-f8b1-4399-acb7-ef1fc03d3697\";\n\nasync function googleWeek() {\n const tok = Deno.env.get(\"GADS_TOKEN\");\n if (!tok) return null;\n throw new Error(\"Google Ads connector is coded but has never been run against a live account\");\n}\n\nconst esc = (s: unknown) => String(s ?? \"\").replace(/[&<>\"']/g, (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string));\n// The Friday report compares complete Friday-to-Thursday weeks; this page rolls the last 7 days.\n// Saying \"on last week\" here would mean something different from the same phrase there.\nconst vs = (a: number, b: number) => {\n if (a === b) return \"level with the 7 days before\";\n if (b === 0) return \"up from none the 7 days before\";\n const ch = Math.round(((a - b) / b) * 100);\n return `${ch > 0 ? \"up\" : \"down\"} ${Math.abs(ch)}% on the 7 days before`;\n};\nconst MONTHS = [\"Jan\", \"Feb\", \"Mar\", \"Apr\", \"May\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Oct\", \"Nov\", \"Dec\"];\nconst prettyDate = (iso: string) => {\n const m = /^(\\d{4})-(\\d{2})-(\\d{2})/.exec(iso || \"\");\n return m ? `${MONTHS[Number(m[2]) - 1] ?? m[2]} ${Number(m[3])}` : iso;\n};\nconst ago = (iso?: string | null) => {\n if (!iso) return \"never\";\n const m = Math.floor((Date.now() - Date.parse(iso)) / 60000);\n if (!Number.isFinite(m)) return \"unknown\";\n if (m < 1) return \"just now\";\n if (m < 60) return `${m} minute${m === 1 ? \"\" : \"s\"} ago`;\n const h = Math.floor(m / 60);\n if (h < 24) return `${h} hour${h === 1 ? \"\" : \"s\"} ago`;\n const d = Math.floor(h / 24);\n return `${d} day${d === 1 ? \"\" : \"s\"} ago`;\n};\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const admin = await isAdmin(k);\n if (!admin && !(await isViewer(k))) return new Response(\"Not found\", { status: 401 });\n\n const now = Date.now(), tz = ET();\n const wk = 7 * 86_400_000;\n const cur = { startMs: now - wk, endMs: now, label: \"last 7 days\" };\n const prev = { startMs: now - 2 * wk, endMs: now - wk, label: \"the 7 before\" };\n\n const cacheRead = await readBlob(CACHE_KEY);\n const cache = cacheRead.v ?? {};\n const stale: string[] = []; // sections served from cache, named for the reader\n const truncated: string[] = [];\n\n // v1.1 (review #1): every source runs CONCURRENTLY with its own budget. Sequentially, a merely\n // slow CRM could exceed the platform's request limit and the page would die entirely, which is\n // the one outcome this dashboard exists to prevent. Now the whole fetch phase costs one budget,\n // not the sum of them, and any single source can fail without touching the others.\n const BUDGET = 9_000;\n const budgeted = (p: Promise): Promise =>\n Promise.race([p, new Promise((_, rej) => setTimeout(() => rej(new Error(\"too slow\")), BUDGET))]);\n\n const [cRes, ptRes, oppRes, metaRes] = await Promise.allSettled([\n budgeted(contactsSince(now - 9 * wk, truncated)),\n budgeted((async () => {\n const d = await j(`/calendars/events?locationId=${LOC}&calendarId=${PUP_TALK_CAL}&startTime=${prev.startMs}&endTime=${now}`, \"2021-04-15\");\n return ((d?.events ?? []) as any[]).map((e: any) => ({\n startTime: typeof e.startTime === \"number\" ? e.startTime : Date.parse(e.startTime),\n appointmentStatus: e.appointmentStatus ?? \"unknown\", calendarId: PUP_TALK_CAL,\n })) as EventLite[];\n })()),\n budgeted((async () => {\n // PROVEN LIVE 4 Aug 2026, and this replaces a capped scan that was quietly wrong.\n //\n // The old version walked six pages of ALL 5,695 opportunities and filtered client side. Two\n // things were wrong with that. It flagged itself truncated, which suppressed the funnel and\n // put an \"at least this many\" caveat on the tile. And it undercounted: it found 2 new\n // customers in the last 7 days when the true figure is 5, because the ones it missed were\n // created long ago and only reached the Customer stage this week, so they sat deep in a list\n // ordered by creation date.\n //\n // Three facts make a complete scan affordable, each verified against the live account:\n // 1. `pipeline_stage_id` IS honoured server side. Customer holds 1,513 records, not 5,695.\n // 2. Pagination is strictly newest-first by createdAt, so page count is knowable up front.\n // 3. meta.total is returned on page 1, so the rest can be fetched at once rather than in\n // series. Sequentially those 16 pages cost 9.4s; in parallel they cost about one.\n // No sort parameter exists (six spellings probed, all 422), which is why the whole stage has\n // to be read: someone can reach Customer this week having been created a year ago.\n const STAGES = [STAGE_CUSTOMER, STAGE_WON_PAID];\n const page = (stage: string, p: number) =>\n j(`/opportunities/search?location_id=${LOC}&limit=100&page=${p}&pipeline_stage_id=${stage}`, \"2021-07-28\");\n const acc: OppLite[] = [];\n let complete = true;\n for (const stage of STAGES) {\n const first = await page(stage, 1);\n const total = Number(first?.meta?.total ?? 0);\n const pages = Math.min(Math.ceil(total / 100) || 1, 40); // 40 pages = 4,000 records, a sane backstop\n if (Math.ceil(total / 100) > 40) complete = false;\n const rest = await Promise.all(\n Array.from({ length: Math.max(0, pages - 1) }, (_, i) => page(stage, i + 2).catch(() => null)),\n );\n for (const d of [first, ...rest]) {\n if (!d) { complete = false; continue; }\n for (const o of d?.opportunities ?? []) {\n // `status` is carried through as the CRM reports it. It used to be overwritten with \"won\" on\n // the way in, which meant the page could not see the field it went on to make claims about.\n acc.push({ createdAt: o.createdAt, status: String(o.status ?? \"open\"), monetaryValue: Number(o.monetaryValue) || 0, lastStageChangeAt: o.lastStageChangeAt ?? null });\n }\n }\n }\n if (!complete) truncated.push(\"customers\");\n return acc;\n })()),\n budgeted(metaWeek(cur.startMs, cur.endMs, tz)),\n ]);\n\n const contacts: ContactLite[] | null = cRes.status === \"fulfilled\" ? cRes.value : null;\n const ptEvents: EventLite[] | null = ptRes.status === \"fulfilled\" ? ptRes.value : null;\n const opps: OppLite[] | null = oppRes.status === \"fulfilled\" ? oppRes.value : null;\n const meta = metaRes.status === \"fulfilled\" ? metaRes.value : null;\n const metaRaw = metaRes.status === \"rejected\" ? String(metaRes.reason).replace(/^Error:\\s*/, \"\") : null;\n const metaPending = metaRaw === \"PERMISSION\"; // linked, but Facebook has not granted reading yet\n const metaErr = metaPending ? null : (metaRaw ? metaRaw.slice(0, 80) : null);\n\n // computed, or pulled from cache with an honest label\n const C = cache.numbers ?? {};\n const A = cache.ages ?? {}; // per-section ISO stamps: a three-day-old number must not read \"a few minutes ago\"\n const inq = contacts ? countContacts(contacts, cur) : (C.inq ?? null);\n const inqPrev = contacts ? countContacts(contacts, prev) : (C.inqPrev ?? null);\n const srcAll = contacts ? sourceBreakdown(contacts, cur) : (C.srcAll ?? null);\n // PROVEN LIVE 4 Aug 2026: the source column was blank for 154 of 190, while the attribution\n // record placed 190 of 190. The page used to print \"no source recorded: 154\" and then guess in\n // prose that most were Messenger. It now reads the field that actually holds the answer.\n const chan = contacts ? channelBreakdown(contacts, cur) : (C.chan ?? null);\n const camps = contacts ? campaignBreakdown(contacts, cur) : (C.camps ?? null);\n const cover = contacts ? attributionCoverage(contacts, cur) : (C.cover ?? null);\n const buckets = contacts ? weeklyBuckets(contacts, now, 8) : (C.buckets ?? null);\n const pt = ptEvents ? countEvents(ptEvents, cur) : (C.pt ?? null);\n const ptPrev = ptEvents ? countEvents(ptEvents, prev) : (C.ptPrev ?? null);\n // Everything in `opps` is already stage-filtered to Customer/Won-Paid, so the STAGE is the\n // signal; the CRM's own status field is left untouched so the page can report on it honestly.\n const stageWon = (list: OppLite[] | null, w: { startMs: number; endMs: number }) => list\n ? { count: list.filter((o) => { const t = Date.parse(o.lastStageChangeAt || o.createdAt); return Number.isFinite(t) && t >= w.startMs && t < w.endMs; }).length, value: 0 }\n : null;\n const won = opps ? stageWon(opps, cur) : (C.won ?? null);\n // How often a price actually gets written on a deal. The page used to state flatly that every\n // opportunity sat at zero, which a reader disproved from the page's own Bootcamp figures. It is\n // 53 of 1,513, none of them in the last month. Counted here rather than claimed.\n const won2Total = opps ? opps.length : (C.won2Total ?? null);\n const valued = opps ? opps.filter((o) => Number(o.monetaryValue) > 0).length : (C.valued ?? null);\n const valuedTotal = opps ? opps.reduce((a, o) => a + (Number(o.monetaryValue) || 0), 0) : (C.valuedTotal ?? null);\n // \"none at all in the last month\" was typed into the template and would have read true forever,\n // including on the day somebody wrote one. Measured now, from the same records.\n const valuedRecentMs = opps\n ? (opps.filter((o) => Number(o.monetaryValue) > 0)\n .map((o) => Date.parse(o.lastStageChangeAt || o.createdAt)).filter((t) => Number.isFinite(t))\n .reduce((a, b) => Math.max(a, b), 0) || null)\n : (C.valuedRecentMs ?? null);\n const lostCount = opps ? opps.filter((o) => String(o.status).toLowerCase() === \"lost\").length : (C.lostCount ?? null);\n const wonPrev = opps ? stageWon(opps, prev) : (C.wonPrev ?? null);\n const missing: string[] = []; // failed AND no cached value to fall back on\n if (!contacts) (C.inq != null ? stale : missing).push(\"new inquiries\");\n if (!ptEvents) (C.pt ? stale : missing).push(\"Pup Talks\");\n if (!opps) (C.won ? stale : missing).push(\"new customers\");\n\n let googleErr: string | null = null;\n try { await googleWeek(); } catch (e) { googleErr = String(e).replace(/^Error:\\s*/, \"\").slice(0, 90); }\n\n const runR = await readBlob(\"puppy_run_state\"); const run = runR.v;\n const wd = await getBlob(\"wd_public\");\n const killR = await readBlob(\"nurture_kill\"); const kill = killR.v;\n const stateR = await readBlob(\"puppy_state\"); const state = stateR.v ?? {};\n const stateKnown = stateR.ok, runKnown = runR.ok && killR.ok;\n const liveLog = await getBlob(\"tds_worklog\");\n const log = mergeLog(SEEDED, liveLog);\n\n const crmSources = [[\"contacts\", !!contacts], [\"appointments\", !!ptEvents], [\"deals\", !!opps]] as const;\n const crmDown = crmSources.filter(([, ok]) => !ok).map(([n]) => n);\n const crmOk = crmDown.length === 0;\n const crmPartial = crmDown.length > 0 && crmDown.length < 3;\n const engineAgeMin = run?.ts ? Math.floor((now - Date.parse(run.ts)) / 60000) : null;\n const engineCadence = observedCadenceMin(run?.history);\n const engineLate = lateness(engineAgeMin, engineCadence);\n const engineOk = isHealthy(engineLate.state) && !kill?.stopped;\n const practice = run?.testMode !== false;\n const wdAgeMin = wd?.ts ? Math.floor((now - Date.parse(wd.ts)) / 60000) : null;\n const wdCadence = observedCadenceMin(wd?.history);\n const wdLate = lateness(wdAgeMin, wdCadence);\n // A watchdog that has not looked recently is not a passing watchdog, whatever its last report\n // said. Grading it purely on the contents of a stale report is how a page ends up putting a\n // green tick beside a system that stopped running an hour ago.\n const wdOk = !!wd && (wd.worst === \"OK\" || wd.worst === \"INFO\") && isHealthy(wdLate.state);\n\n // v1.1 (reviews #3, #8): each section carries its OWN timestamp so staleness is reported per\n // number, and the whole write is skipped when the cache could not be read, so a transient blob\n // hiccup can never erase good history for a section that happens to be failing today.\n if (cacheRead.ok && (contacts || ptEvents || opps)) {\n const nowIso = new Date().toISOString();\n try {\n await (await blobMod()).setJSON(CACHE_KEY, {\n at: nowIso,\n numbers: {\n inq: contacts ? inq : C.inq, inqPrev: contacts ? inqPrev : C.inqPrev,\n srcAll: contacts ? srcAll : C.srcAll, buckets: contacts ? buckets : C.buckets,\n chan: contacts ? chan : C.chan, camps: contacts ? camps : C.camps,\n cover: contacts ? cover : C.cover,\n pt: ptEvents ? pt : C.pt, ptPrev: ptEvents ? ptPrev : C.ptPrev,\n won: opps ? won : C.won, wonPrev: opps ? wonPrev : C.wonPrev,\n won2Total: opps ? won2Total : C.won2Total, valued: opps ? valued : C.valued,\n valuedTotal: opps ? valuedTotal : C.valuedTotal,\n valuedRecentMs: opps ? valuedRecentMs : C.valuedRecentMs, lostCount: opps ? lostCount : C.lostCount,\n },\n ages: {\n inq: contacts ? nowIso : A.inq, pt: ptEvents ? nowIso : A.pt, won: opps ? nowIso : A.won,\n },\n });\n } catch { /* the cache is a nicety; never fail the page over it */ }\n }\n\n if (admin && url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify({ inq, inqPrev, pt, won, meta, stale, crmOk, engineOk, practice, wd }, null, 2),\n { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n\n // each stale section reports ITS OWN age, not the cache blob's last-write time\n const sectionAge = (label: string) =>\n label === \"new inquiries\" ? (A.inq ?? cache.at) : label === \"Pup Talks\" ? (A.pt ?? cache.at) : (A.won ?? cache.at);\n\n // An appointment nobody has marked is silently counted as \"not a no-show\", which flatters the\n // show-up figure. The page says so, using a number it counts live rather than one typed here.\n const unmarked = pt ? Math.max(0, pt.booked - pt.showed - pt.noshow) : null;\n const ctx: Ctx = { unmarkedPupTalks: unmarked, inquiriesPerWeek: inq ?? null };\n // Both of these used to be typed into the sentence: \"four in five\" (it was 84%) and a claim that\n // the rest \"picked up the phone\" (the arrival record has no phone category at all, so the chart\n // could never show one). Derived now, or not stated.\n const socialShare = chan && inq\n ? Math.round(100 * (chan as any[]).filter((c) => /Facebook|Instagram/i.test(c.source)).reduce((a, c) => a + c.n, 0) / inq)\n : null;\n // No null-coalescing to zero anywhere in this region, deliberately: an unread source list must\n // stay null rather than become a confident zero. A missing phone row and a list we could not read\n // are different facts, and only one of them is safe to print. (The literal pattern is kept out of\n // this comment too, because the test that enforces the rule scans the region as text.)\n const phoneRow = srcAll ? (srcAll as any[]).find((s0) => /phone/i.test(s0.source)) : null;\n const phoneLogged: number | null = srcAll ? (phoneRow ? phoneRow.n : 0) : null;\n const decisions = sortedDecisions();\n const blocking = blockingCount();\n\n // ---- headline verdict ------------------------------------------------------------------\n const problems: string[] = [];\n if (!crmOk) problems.push(\"the CRM is not answering\");\n if (!runKnown) problems.push(\"we could not check whether the follow-up system is running\");\n else if (kill?.stopped) problems.push(\"the follow-up system is stopped\");\n else if (!engineOk) problems.push(\"the follow-up system is running late\");\n if (wd && wd.worst === \"CRITICAL\") problems.push(\"the watchdog found a problem\");\n else if (wd && wdLate.state === \"late\") problems.push(\"the watchdog has not looked recently\");\n const allWell = problems.length === 0;\n // problems[] is built from fixed strings above, but it is still assembled text that reaches the\n // page: escaped at the point of use (the hero line calls esc(verdict)), and kept a plain join\n // here so the escape has exactly one place to live.\n // A row below can wear a warning triangle for being merely overdue, which is not a problem worth\n // alarming Kim about. But the headline may not then say \"everything is running\" as though nothing\n // on the page were marked: the reader can see the triangle, and a headline that ignores it is the\n // same contradiction the stranger test rejected, moved up one level. So the headline names it.\n const liveIssues = decisions.filter((d) => d.liveNow).length;\n const running = [engineLate.state, wd ? wdLate.state : \"ok\"].filter((x) => x === \"due\").length;\n const liveNote = liveIssues ? ` ${liveIssues === 1 ? \"One thing below is\" : `${liveIssues} things below are`} already affecting customers and ${liveIssues === 1 ? \"needs\" : \"need\"} a word from you.` : \"\";\n const behindNote = running ? ` ${running === 1 ? \"One part of it is\" : `${running} parts of it are`} running a little behind schedule, which happens and sorts itself out.` : \"\";\n const verdict = allWell\n ? (runKnown && practice\n ? `Everything we run is healthy. The follow-up system is in practice mode, so it is not messaging anyone yet, and ${blocking === 0 ? \"nothing is holding that up\" : `${blocking} ${blocking === 1 ? \"thing is\" : \"things are\"} holding up switching it on`}.${liveNote}${behindNote}`\n : `Everything is running normally.${liveNote}${behindNote}`)\n : \"Needs a look: \" + problems.join(\", \") + \".\";\n\n const tile = (label: string, v: string, note: string, accent?: string) =>\n `
${esc(v)}
${esc(label)}
${esc(note)}
`;\n const na = (v: number | null | undefined) => (v == null ? \"n/a\" : String(v));\n\n const checkRow = (ok: boolean, name: string, detail: string) =>\n `
${ok ? \"✓\" : \"⚠\"}
${esc(name)}
${esc(detail)}
`;\n\n // channel chart: top 3 named sources + Other, labeled directly (secondary encoding, per the\n // dataviz rule that a sub-3:1 slot needs visible labels)\n // v1.2 (stranger test): the old build assigned color index 2 to BOTH the third named source\n // and the catch-all roll-up beside it, so two adjacent segments and their two legend swatches\n // were pixel-identical and could not be told apart by looking. A roll-up bucket is not a peer\n // of the named categories anyway; it now takes the recessive gray the dataviz rules reserve for\n // it, which frees all three categorical slots for real, distinguishable channels.\n const chanRows = (chan ?? []).slice(0, 3);\n const chanOther = (chan ?? []).slice(3).reduce((a: number, s: any) => a + s.n, 0);\n const chanTotal = (chan ?? []).reduce((a: number, s: any) => a + s.n, 0) || 1;\n const segs = [\n ...chanRows.map((s: any, i: number) => ({ ...s, fill: `var(--c${i})` })),\n ...(chanOther ? [{ source: \"smaller channels added up\", n: chanOther, fill: \"var(--barq)\" }] : []),\n ];\n const share = (n: number) => `${Math.round((n / chanTotal) * 100)}%`;\n const chanBar = segs.map((s: any) =>\n ``).join(\"\");\n // Every row carries its share as well as its count. A bare 154 is a number; 81% is a decision.\n const chanLegend = segs.map((s: any) =>\n `
${esc(s.source)}${s.n} (${share(s.n)})
`).join(\"\");\n const campTop = (camps ?? []).slice(0, 5);\n const campShown = campTop.reduce((a: number, c: any) => a + c.n, 0);\n const campTotal = (camps ?? []).reduce((a: number, c: any) => a + c.n, 0);\n const campRows = campTop.map((c: any) =>\n `
${esc(c.name)}${c.n}
`).join(\"\");\n\n const maxB = Math.max(1, ...((buckets ?? [1]) as number[]));\n const bars = ((buckets ?? []) as number[]).map((b, i, arr) =>\n `
${b}
`).join(\"\");\n\n const adCard = (name: string, connected: boolean, spend: string, result: string, note: string) =>\n `
${esc(name)}
${connected\n ? `
${esc(spend)}
spent, last 7 days
${esc(result)}
conversations started
`\n : `
${esc(note)}
`}
`;\n\n // Kim's reading order, from her own test: banner, first blocker, the four numbers, gone. The\n // history is the part she cannot act on, so it is the part that folds; the asks stay open.\n const LOG_SHOWN = 6;\n const logRow = (e: WorkEntry) => {\n const col = e.kind === \"broke\" ? CRIT : e.kind === \"mine\" ? WARN : e.kind === \"found\" ? WARN : GOOD;\n return `
${esc(KIND_LABEL[e.kind] ?? e.kind)}
${esc(e.what)}
${e.evidence ? `
How we know: ${esc(e.evidence)}
` : \"\"}
${esc(prettyDate(e.at))}
`;\n };\n const logRows = log.slice(0, LOG_SHOWN).map(logRow).join(\"\");\n const logRest = Math.max(0, log.length - LOG_SHOWN);\n const logRestRows = log.slice(LOG_SHOWN).map(logRow).join(\"\");\n\n // Eight-week direction. The tiles compare one week to the week before, which is noise at this\n // volume: the account's own week-on-week swings run to plus and minus thirty. The trend across\n // the whole chart is the sentence the reader actually wants, and it was the one thing on the\n // page nobody was saying out loud.\n const trendLine = (() => {\n const b = (buckets ?? []) as number[];\n if (b.length < 4) return \"\";\n const firstHalf = b.slice(0, Math.floor(b.length / 2)), lastHalf = b.slice(-Math.floor(b.length / 2));\n const a = firstHalf.reduce((x, y) => x + y, 0) / firstHalf.length;\n const z = lastHalf.reduce((x, y) => x + y, 0) / lastHalf.length;\n if (!a) return \"\";\n const ch = Math.round(((z - a) / a) * 100);\n if (Math.abs(ch) < 10) return `Averaged out, inquiries are running about level across these eight weeks, near ${Math.round(z)} a week.`;\n return `Averaged out, inquiries are ${ch > 0 ? \"up\" : \"down\"} ${Math.abs(ch)}% across these eight weeks: about ${Math.round(a)} a week over the first month, about ${Math.round(z)} a week over the last month.`;\n })();\n\n // The first reader's whole test was ninety seconds in a car park. Answering the second and third\n // readers added items until this card had twelve, which would have pushed every number below the\n // fold and failed her test to satisfy theirs. So the ones that actually hold up go-live are set\n // out in full, and the rest are listed as plain questions behind a fold she opens if she wants.\n // Nothing is hidden: the full text of every one is in the page, one tap away, and the count is\n // stated. It is an ordering decision, not an omission.\n const full = (d: Decision) =>\n `
${esc(WEIGHT_LABEL[d.weight])}
` +\n `
${esc(d.ask)}
${esc(whyText(d, ctx))}
` +\n `
How we know: ${esc(d.evidence)}
` +\n (ifYesText(d, ctx) ? `
If you say yes: ${esc(ifYesText(d, ctx))}
` : \"\") +\n `
If you say nothing: ${esc(d.ifNothing)}
`;\n // Shown in full: anything that blocks go-live, AND anything already affecting real customers.\n // The first draft of this fold put a live double-messaging issue behind a summary reading \"none\n // of which hold anything up\", one line under a banner announcing it. Blocking and live-now are\n // different reasons to be at the top, and both earn it.\n const blockers = decisions.filter((d) => d.weight === \"blocking\" || d.liveNow);\n const rest = decisions.filter((d) => !(d.weight === \"blocking\" || d.liveNow));\n const decRows = blockers.map(full).join(\"\")\n + (rest.length\n ? `
${rest.length} more, none of which hold anything up${rest.some((d) => d.liveNow) ? `, though ${rest.filter((d) => d.liveNow).length === 1 ? \"one is\" : `${rest.filter((d) => d.liveNow).length} are`} already running against customers` : \" or affect anybody today\"}
${rest.map(full).join(\"\")}
`\n : \"\");\n\n // THE FUNNEL. Every piece of this was already on the page and the page never put it together.\n // A reader called it \"the whole ballgame\": assembled, it says what share of inquiries becomes a\n // customer. Rendered only when every step read successfully, because a funnel with a hole in it\n // invites exactly the wrong conclusion.\n const funnelReady = inq != null && pt != null && won != null && !truncated.includes(\"customers\");\n const rate = (a: number, b: number) => (b > 0 ? `${(100 * a / b).toFixed(a / b < 0.1 ? 1 : 0)}%` : \"n/a\");\n const funnelRows = funnelReady\n ? [\n { label: \"New inquiries\", n: inq as number, of: null as string | null },\n { label: \"Pup Talks on the calendar\", n: pt!.booked, of: `${rate(pt!.booked, inq as number)} of inquiries` },\n { label: \"Showed up\", n: pt!.showed, of: `${rate(pt!.showed, pt!.booked)} of the ${pt!.booked} that were held${pt!.cancelled ? `, ${rate(pt!.showed, pt!.booked + pt!.cancelled)} of all ${pt!.booked + pt!.cancelled} booked` : \"\"}` },\n { label: \"Became customers\", n: won!.count, of: \"in the same 7 days, but mostly from earlier inquiries\" },\n ]\n : [];\n const funnelMax = Math.max(1, ...funnelRows.map((r) => r.n));\n const funnelHtml = funnelRows.map((r, i) =>\n `
${esc(r.label)}
` +\n `
${i === 3\n ? \"\"\n : ``}
` +\n `
${r.n}${r.of ? ` ${esc(r.of)}` : \"\"}
`).join(\"\");\n\n // The page said \"1 in a sequence: people currently walking through the follow-up messages\".\n // That one record is the sanctioned test dummy (contact mxf92ajJDtsZMHqJxAKv, every one of its\n // sends flagged test:true). Calling a synthetic record a person is the single most misleading\n // thing this page has ever said, so the count of REAL people is derived separately and the copy\n // branches on it rather than on the raw total.\n const isTestRecord = (k: string, v: any) =>\n v?.test === true || v?.isTest === true || /dummy|zztest/i.test(String(v?.name ?? v?.contactName ?? \"\")) || k === TEST_DUMMY_ID;\n const SOURCE_TAG = \"nurture - puppy\";\n const TEST_DUMMY_ID = \"mxf92ajJDtsZMHqJxAKv\";\n const ENROLLED = [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"];\n const realPeople = Object.entries(state).filter(([k, v]: any) =>\n ENROLLED.includes(v?.status) && !isTestRecord(k, v)).length;\n const activeN = Object.values(state).filter((s: any) =>\n [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"].includes(s?.status)).length;\n const pausedN = Object.values(state).filter((s: any) => s?.status === \"paused_reply\").length;\n\n const html = `\n\nThe Dogs Spot dashboard\n
\n\n
The Dogs Spot
\n
This page reads your systems the moment you open it. Refresh any time.
\n\n
${allWell ? \"✓\" : \"⚠\"} ${esc(verdict)}
\n${decisions.length ? `
${decisions.length} question${decisions.length === 1 ? \"\" : \"s\"} on this page ${decisions.length === 1 ? \"is\" : \"are\"} waiting on a word from you, ${blocking} of ${blocking === 1 ? \"which holds\" : \"which hold\"} up go-live. They are the first card below, most pressing first.
` : \"\"}
\n\n
Waiting on you
\n
The first few hold up go-live. The rest can wait as long as you like. Each one says how we know it is real and what happens if you never answer, because for most of them the answer is nothing bad. Reply to Amir on Upwork, or say it on the next call.
\n${decRows}\n
\n\n${stale.length || missing.length || truncated.length ? `
Heads up: ${\n stale.length ? `${esc(stale.map((s) => `${s} (last read ${ago(sectionAge(s))})`).join(\", \"))} could not be read at this moment, so ${stale.length === 1 ? \"that number is the last one\" : \"those numbers are the last ones\"} we read successfully. ` : \"\"\n}${missing.length ? `${esc(missing.join(\" and \"))} could not be read and there is no earlier reading to show, so ${missing.length === 1 ? \"it shows\" : \"they show\"} as n/a. ` : \"\"\n}${truncated.length ? `you have enough records that we stopped reading partway through rather than keep you waiting, so ${truncated.length === 1 ? \"the count of\" : \"the counts of\"} ${esc(truncated.join(\" and \"))} ${truncated.length === 1 ? \"is a floor\" : \"are floors\"}, not ${truncated.length === 1 ? \"a total\" : \"totals\"}. The real number is that one or higher, never lower. ` : \"\"\n}Every other number on this page was read fresh just now. Refreshing in a few minutes normally gets the rest.
` : \"\"}\n\n
\n${tile(\"New inquiries\", na(inq), inq != null && inqPrev != null ? `last 7 days, ${vs(inq, inqPrev)}` : \"last 7 days\", undefined)}\n${tile(\"Pup Talks on the calendar\", pt ? String(pt.booked) : \"n/a\", pt && ptPrev ? `held in the last 7 days, ${vs(pt.booked, ptPrev.booked)}` : \"held in the last 7 days\")}\n${tile(\"Showed up\", pt ? String(pt.showed) : \"n/a\", pt ? (() => {\n const un = Math.max(0, pt.booked - pt.showed - pt.noshow);\n const bits = [`of the ${pt.booked} held`];\n if (pt.noshow) bits.push(`${pt.noshow} did not show`);\n // every appointment in the denominator has to be accounted for, or the reader is left doing\n // subtraction on the front tile and finding a number missing\n if (un) bits.push(`${un} ${un === 1 ? \"has\" : \"have\"} not been marked yet, so this figure is flattering by up to ${un}`);\n const tail = pt.cancelled ? ` A further ${pt.cancelled} cancelled ahead of time and ${pt.cancelled === 1 ? \"is\" : \"are\"} not counted in the ${pt.booked}.` : \"\";\n return bits.join(\", \") + \".\" + tail;\n })() : \"last 7 days\")}\n${tile(\"New customers\", won ? String(won.count) : \"n/a\", truncated.includes(\"customers\") ? \"reached the Customer stage. At least this many: see the note above\" : won && wonPrev ? `reached the Customer stage, ${vs(won.count, wonPrev.count)}` : \"reached the Customer stage, last 7 days\", undefined)}\n
\n\n${funnelReady ? `
From first contact to paying customer
\n
Four counts over the same 7 days. An inquiry is any new person who reached you and landed in your CRM: a Facebook or Instagram message, a form, the chat box, or a phone call somebody logged.
\n${funnelHtml}\n
Before reading that first gap as bad news: ${socialShare != null ? `${socialShare}% of these inquiries` : \"most of these inquiries\"} arrived as a message on Facebook or Instagram, and a message costs the sender nothing, so plenty were never close to booking. Worth knowing what this cannot tell you: your CRM's arrival record has no category for a phone call at all, so callers are not separated out here. The old source column logged ${esc(String(phoneLogged ?? \"some\"))} phone calls this week, but that column is blank for most people, so neither of us can put a firm number on how many of these actually rang you. The first three rows follow the same people through. The last one does not, and it would be dishonest to draw an arrow to it: somebody who became a customer this week usually first got in touch weeks or months ago, so they are not part of the ${esc(String(inq))} above. Read it as four true counts over the same seven days rather than one conversion rate. The gap between inquiries and Pup Talks is the widest of them, and it is the one worth a conversation.
\n
` : \"\"}\n\n
Is everything working?
\n${checkRow(crmOk, \"Your CRM\", crmOk ? \"Answering normally. This page just read it.\" : crmPartial ? `Answered for some things but not for ${esc(crmDown.join(\" and \"))} just now. If this is still showing in an hour, tell Amir.` : \"Did not answer just now. If this is still showing in an hour, tell Amir.\")}\n${checkRow(engineOk, \"The follow-up system\", kill?.stopped\n ? \"Stopped by the big red button. Nothing is being sent.\"\n : engineAgeMin == null ? \"No check-in recorded yet.\"\n : `Last checked itself ${ago(run?.ts)}. ${lateSentence(engineLate, engineCadence)}`)}\n${checkRow(wdOk, \"The watchdog\", wd\n ? `${wd.headline} Last look ${ago(wd.ts)}. ${lateSentence(wdLate, wdCadence)}${wdLate.state === \"late\" ? \" Treat that last report as out of date until it looks again.\" : \"\"}`\n : \"No report from the watchdog yet.\")}\n${meta ? checkRow(true, \"Facebook ad spend\", \"Connected and reporting. Your spend is in the advertising section below.\")\n : metaPending ? `
•
Facebook ad spend
Half connected. The link to your ad account is in place, and Facebook has not yet been told to let it read your spending. That is one setting on Amir's side, not a fault. It is the only reason this page can show you what came in but not what it cost.
`\n : metaErr ? checkRow(false, \"Facebook ad spend\", `Not reading right now: ${metaErr}`)\n : `
•
Facebook ad spend
Not linked yet, so this page cannot show what you spent. Where your inquiries came from is shown below regardless, because that comes from your own records rather than from Facebook.
`}\n
\n\n
Where the last 7 days of inquiries came from
\n${chan ? `
${chanBar}
${chanLegend}
` : `
Could not read this just now.
`}\n${cover ? `
${cover.known === cover.total ? `Every one of these ${cover.total}` : `${cover.known} of these ${cover.total}`} carries a record of how they arrived, though for some that record just says \"other\", so treat the named channels as the solid part. Worth knowing: the CRM's own \"source\" column is blank for ${esc(String(((srcAll ?? []) as any[]).find((s: any) => s.source === \"no source recorded\")?.n ?? 0))} of these, so any list built off that column will look like you have no idea where your customers come from. You do. It is recorded one field over.
` : \"\"}\n${campRows ? `
Which ads they answered
${campRows}
${\n campShown < campTotal\n ? `The ${Math.min(5, (camps ?? []).length)} biggest, covering ${campShown} of the ${campTotal} people who answered a named ad. The remaining ${campTotal - campShown} are spread across ${Math.max(0, (camps ?? []).length - 5)} smaller ones. `\n : `All ${campTotal} people who answered a named ad. `\n}${inq != null && campTotal < inq ? `The other ${inq - campTotal} of your ${inq} inquiries came in without a campaign attached, which is normal for people who message you directly rather than clicking an ad. ` : \"\"}These are the campaign names exactly as they appear in your ad account. Counted from your own records rather than from Facebook, so it stays true whether or not the ad account is linked.
` : \"\"}\n
\n\n
New inquiries, week by week
\n${buckets ? `
${bars}
Eight weeks, oldest on the left. The last bar is the last 7 days.${trendLine ? ` ${esc(trendLine)}` : \"\"}
` : `
Could not read this just now.
`}\n
\n\n${meta || metaErr ? `
What the advertising cost
\n${adCard(\"Facebook and Instagram\", !!meta, meta ? money(meta.spend) : \"\", meta ? String(meta.conv) : \"\", metaErr ? `Not reading right now: ${metaErr}` : \"\")}\n${meta ? `
Spend covers the seven full days up to yesterday, which is the last day the ad platform reports as final. Set against the ${esc(String(inq ?? \"n/a\"))} inquiries above, that is ${meta && inq ? esc(money(meta.spend / inq)) : \"n/a\"} each.
` : \"\"}\n${googleErr ? `
Google: ${esc(googleErr)}
` : \"\"}\n
` : \"\"}\n\n
What we have been doing
\n
Newest first. Each line names how it was checked, so you can pick any one and hold it up against the thing itself. Anything marked \"my mistake\" is one of mine, kept here on purpose rather than quietly fixed.
\n${logRows || `
Nothing recorded yet.
`}\n${logRest ? `
${logRest} older ${logRest === 1 ? \"entry\" : \"entries\"}
${logRestRows}
` : \"\"}\n
\n\n
One thing worth fixing in the CRM
\n
${valued != null && valuedTotal != null && won2Total\n ? `A price gets written on about one deal in ${Math.max(2, Math.round(won2Total / Math.max(1, valued)))}: ${valued} of your ${won2Total} customer records carry one, ${money(valuedTotal)} between them. The most recent was ${valuedRecentMs ? esc(prettyDate(new Date(valuedRecentMs).toISOString()) + \" \" + new Date(valuedRecentMs).getUTCFullYear()) : \"further back than these records reach\"}. So the habit exists and it lapsed.`\n : \"Most of your deals do not carry a value.\"}${lostCount != null ? ` Across all ${won2Total} of those records, ${lostCount === 0 ? \"not one is marked won or lost\" : `${lostCount} ${lostCount === 1 ? \"is\" : \"are\"} marked lost and none at all are marked won`}.` : \"\"} That is why this page counts people reaching the Customer stage rather than showing you revenue: a figure built on that few would be worse than no figure at all. Writing the price on each deal as it closes is the single change that would let this page show you what a week was worth.
\n\n
The follow-up system, in detail
\n${runKnown\n ? `
${practice ? \"⚠\" : \"✓\"}
${practice ? \"Practice mode\" : \"Live\"}
${practice ? \"It is doing everything except actually sending. Nobody real is being messaged. It goes live only when you say the word.\" : \"Real messages are going to real people.\"}
`\n : `
⚠
Practice or live: could not check
The system's own record did not answer just now, so this page will not guess. Refresh in a minute.
`}\n${stateKnown\n ? `
0 ? WARN : GOOD}\">${pausedN > 0 ? \"⚠\" : \"✓\"}
${pausedN > 0 ? `${pausedN} person${pausedN === 1 ? \"\" : \"s\"} replied and ${pausedN === 1 ? \"is\" : \"are\"} waiting on you` : \"Nobody is waiting on a reply from you\"}
${pausedN > 0 ? \"The system stepped back the moment they wrote to you. Answer them in your inbox; that is the only job this system ever hands you.\" : \"When somebody replies, the system stops messaging them and they appear here. That is the only job it ever hands you.\"}
\n
${realPeople ? \"✓\" : \"⚠\"}
${realPeople === 0 ? \"Nobody real is in the sequence yet\" : `${realPeople} in a sequence`}
${realPeople === 0\n ? `In practice mode the system runs against ${activeN === 0 ? \"no records at all\" : `${activeN} test record${activeN === 1 ? \"\" : \"s\"} of ours`} and has never looked at one of your actual inquiries. That is deliberate: it is how we prove the machinery works without touching anybody. When you say go, people join by being tagged \"${esc(SOURCE_TAG)}\", and nothing applies that tag today, so the tagging has to be set up in the same move.`\n : \"People currently walking through the follow-up messages.\"}
`\n : `
⚠
Who is in the system: could not check
This page will not show you a zero it cannot stand behind. Refresh in a minute.
`}\n
\n\n
Read live ${esc(prettyDate(new Date(now + tz * 60_000).toISOString()) + \" at \" + new Date(now + tz * 60_000).toISOString().slice(11, 16))} Georgia time. The four counts at the top, the funnel, both breakdowns and the week-by-week chart ${stale.length || missing.length || truncated.length ? \"were read from your own systems just now, apart from the ones named at the top\" : \"were read from your own systems just now\"}. The questions and the list of work are written by hand, and each one carries the check that backs it.
\n
`;\n\n return new Response(html, { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n}\n",[238],"6def0282-5c9b-4f00-9b7f-ee0211ceede5","cadence.ts","14aa659c-902f-11f1-8dc5-1607ee4eb77e",83,["D",1785867532817],2,"// HOW OFTEN DOES IT ACTUALLY RUN. v1.0, 4 Aug 2026.\n//\n// WHY THIS FILE EXISTS: the dashboard told Kim \"the follow-up system runs every 15 minutes\"\n// because a human typed that sentence, not because anything had measured it. A stranger reading\n// the page cold caught it in one pass: the same health row said \"last checked itself 26 minutes\n// ago\" and \"it runs every 15 minutes\", with a green tick beside both. The claim and the evidence\n// were contradicting each other on screen and the claim was winning.\n//\n// The scheduler's interval is not readable through any API (four candidate routes probed on\n// 4 Aug, all 404), so the only honest source of truth is the footprints each system leaves. The\n// engine now records the timestamp of every run; these functions read the gaps between them.\n// Nobody gets to type the cadence any more, which means nobody can get it wrong.\n\n/** Median minutes between consecutive runs, or null when the evidence is too thin to claim one. */\nexport function observedCadenceMin(history: unknown): number | null {\n const ts = (Array.isArray(history) ? history : [])\n .map((x) => Date.parse(String(x))).filter((n) => Number.isFinite(n)).sort((a, b) => a - b);\n if (ts.length < 3) return null;\n const gaps: number[] = [];\n for (let i = 1; i < ts.length; i++) {\n const g = (ts[i] - ts[i - 1]) / 60000;\n // A same-minute duplicate is a double write, not an interval. A multi-day hole is a deploy or\n // an outage, not an interval. Reading either as \"the rhythm\" would let one bad night convince\n // the page that a 15-minute system normally runs daily, and then nothing would ever look late.\n if (g >= 1 && g <= 24 * 60) gaps.push(g);\n }\n if (gaps.length < 2) return null;\n gaps.sort((a, b) => a - b);\n const mid = Math.floor(gaps.length / 2);\n return Math.round(gaps.length % 2 ? gaps[mid] : (gaps[mid - 1] + gaps[mid]) / 2);\n}\n\n/**\n * Late relative to the rhythm the system actually keeps, not to a number somebody hoped for.\n *\n * THREE states, not two, and the middle one is the point. A single missed turn on a system that\n * batches daily messages is not a business problem, so raising an alarm for it would train the\n * reader to ignore alarms, and the day one matters nobody looks. But printing a plain green tick\n * beside a visibly overdue timestamp is what the stranger test caught and refused to accept: the\n * reader could see the gap, and the page was pretending not to. So an overdue-but-not-alarming\n * system gets its own word. The reader is told it is behind, and told that being behind here is\n * ordinary. Nothing is hidden and nothing is dramatised.\n *\n * ok within half a cycle of schedule\n * due past due, one missed turn or so. Says so out loud. Not a fault, not a green tick either.\n * late two and a half cycles behind, floor 30 minutes. This one reaches the headline verdict.\n *\n * With no measured rhythm the thresholds are a flat 60 and 90 minutes, so \"we have not measured\n * it yet\" cannot quietly become infinite patience for a system that has genuinely stopped.\n */\nexport function lateness(ageMin: number | null, cadenceMin: number | null): {\n state: \"ok\" | \"due\" | \"late\" | \"unknown\"; dueAt: number | null; lateAt: number | null;\n} {\n if (ageMin == null) return { state: \"unknown\", dueAt: null, lateAt: null };\n const dueAt = cadenceMin ? cadenceMin * 1.5 : 60;\n const lateAt = cadenceMin ? Math.max(cadenceMin * 2.5, 30) : 90;\n const state = ageMin > lateAt ? \"late\" : ageMin > dueAt ? \"due\" : \"ok\";\n return { state, dueAt, lateAt };\n}\n/** Does this state deserve a tick? Only a system on schedule does. */\nexport const isHealthy = (s: ReturnType[\"state\"]) => s === \"ok\";\n\n/**\n * Append this run's stamp to the trail a system leaves behind, given whatever the previous blob\n * held. Lives here rather than in the engine because main.ts sits against a hard 80,000-character\n * ceiling on the platform, and because the writer and the reader of this trail should agree on its\n * shape by sharing one definition instead of two that drift.\n *\n * Seeds from a pre-history state's own `ts` so the very next run already yields one real gap\n * rather than starting the evidence from nothing. Never appends a duplicate of the last stamp.\n */\nexport const RUN_HISTORY_MAX = 40;\nexport function appendRunStamp(prev: any, ts: string): string[] {\n let h: string[] = Array.isArray(prev?.history) ? prev.history.filter((x: unknown) => typeof x === \"string\") : [];\n if (!h.length && typeof prev?.ts === \"string\") h = [prev.ts];\n if (h[h.length - 1] !== ts) h.push(ts);\n return h.slice(-RUN_HISTORY_MAX);\n}\n\n/**\n * One sentence for the reader, combining the verdict and the yardstick it was measured against.\n *\n * The previous version printed those two separately and produced a flat contradiction that a\n * reader caught at once: \"Its next look is a little overdue\" immediately followed by \"There is not\n * enough history yet to say how often it normally runs.\" You cannot call a thing late and in the\n * same breath say you do not know when it was due. Both sentences were individually true, because\n * an unmeasured system still falls back to a flat one-hour expectation, but nothing on the page\n * said so. Now the yardstick is never separated from the judgement that used it.\n */\nexport function lateSentence(l: ReturnType, cadenceMin: number | null): string {\n const rhythm = cadenceMin == null\n ? \"We have not watched it long enough to know its usual rhythm, so for now we expect it at least once an hour\"\n : `Left to itself it runs about every ${cadenceMin} minute${cadenceMin === 1 ? \"\" : \"s\"}`;\n if (l.state === \"unknown\") return `${rhythm}, and there is no check-in on record to compare against.`;\n if (l.state === \"late\") return `${rhythm}, and it is well past that. If it is still behind in an hour, tell Amir.`;\n if (l.state === \"due\") return `${rhythm}, and it is a little past that now. One late turn is ordinary; several in a row is not.`;\n return `${rhythm}, and it is on time.`;\n}\n/** Kept for callers that only want the yardstick. */\nexport function cadenceSentence(cadenceMin: number | null): string {\n return cadenceMin == null\n ? \"There is not enough history yet to say how often it normally runs.\"\n : `Left to itself it runs about every ${cadenceMin} minute${cadenceMin === 1 ? \"\" : \"s\"}.`;\n}\n",[246],"bf9883fe-ce8a-4b1a-a33f-f883c67a772d","api.ts",51,["D",1785861568654],"// NURTURE CONTROL PANEL, HTTP face of the puppy-path engine. Built 2 Aug 2026.\n//\n// WHY THIS FILE EXISTS\n// The engine (main.ts) keeps everything it knows in val.town blobs. Blobs are reachable only with a\n// blob-scoped API token, which means the only people who could see whether the nurture system was\n// working were people holding a production credential. That is the wrong shape for this client: Kim\n// cancelled her previous supplier for going quiet, and a system whose status is invisible to her is\n// the same failure wearing different clothes.\n//\n// So the engine gets a front door. One URL, one key, no login, no install. It answers three\n// questions in plain language, who is in the system, what happened today, is anything broken, and\n// carries the one control she must always have: STOP.\n//\n// WHAT IT IS NOT\n// Read-mostly by design. The only state it writes is the kill switch. It cannot enrol anyone, send\n// anything, or edit copy. A leaked link is an information disclosure, not a way to message her\n// customers.\n//\n// AUTH\n// ?k=. Constant-time-ish compare, no key echoed back, no data before the check,\n// and the 401 body is byte-identical whether the key is absent or wrong.\n//\n// ROUTES (all GET, all query-param, so a phone bookmark works)\n// ?k=… the dashboard\n// ?k=…&f=json the same numbers as JSON\n// ?k=…&stop=1 kill switch ON , engine halts before it looks at a single contact\n// ?k=…&go=1 kill switch OFF\n//\n// COLOUR\n// Stage colours are a validated 4-step single-hue ordinal ramp (#86b6ef → #3987e5 → #256abf →\n// #184f95); status colours are the reserved good/warning/critical steps and always ship with a word\n// beside them, never colour alone. Both ramps were run through the palette validator in light and\n// dark before this file was written: ordinal ramp ALL CHECKS PASS in both modes.\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC -\n// proved by fetching this very source with no token, so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\n\n// v1.7.1, VIEW-ONLY access. The admin link is also the stop-button link, so anyone Kim forwards\n// it to could halt her follow-up. The view key is DERIVED from the admin digest (deterministic, no\n// second secret to store): it renders the same page minus the stop controls and the JSON/selftest\n// modes. Give Kim and staff the view link; the admin link stays with whoever may press stop.\nasync function viewKey(): Promise {\n // v1.7.2 (review fix), derived from the GHL token (a real secret in env/private blob), not\n // from the admin DIGEST that anyone can read in this public source. Rotating the CRM token\n // rotates the view links, which is the right coupling anyway.\n const tok = Deno.env.get(\"GHL_TOKEN\") || ((await get(\"puppy_config\", null))?.ghlToken ?? \"\");\n if (!tok) return \"tds_view_disabled_no_token_available_x\";\n return \"tds_view_\" + (await sha256Hex(tok + \":view\")).slice(0, 32);\n}\nasync function viewAuthorised(k: string): Promise {\n const expected = await viewKey();\n if (k.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < k.length; i++) d |= k.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst KILL_BLOB = \"nurture_kill\";\nconst BUSINESS_TZ = \"America/New_York\";\n\nasync function blobMod() {\n return (await import(\"https://esm.town/v/std/blob\")).blob;\n}\nasync function get(key: string, fallback: any = null) {\n try {\n const blob = await blobMod();\n const v = await blob.getJSON(key);\n return v ?? fallback;\n } catch {\n return fallback;\n }\n}\n\n\n// Plain-English names for the engine's internal statuses. Kim never sees a snake_case token.\nconst STATUS_LABEL: Record = {\n main: \"In the main sequence\",\n awaiting_appt_outcome: \"Booked, waiting on the Pup Talk\",\n branch_a: \"Missed the Pup Talk, being rebooked\",\n branch_b: \"Had the Pup Talk, hasn't bought yet\",\n slow_track: \"On the slow track, an occasional helpful message\",\n paused_reply: \"Paused, they replied, a human has it\",\n done_booked: \"Booked a Pup Talk\",\n done_customer: \"Became a customer\",\n done_hard_exit: \"Stopped, opted out or disqualified\",\n done_soft_21d: \"Finished the sequence\",\n done_branch_complete: \"Finished the follow-up\",\n};\nconst ACTIVE = [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"];\nconst WON = [\"done_booked\", \"done_customer\"];\n\nfunction esc(s: unknown) {\n return String(s ?? \"\").replace(/[&<>\"']/g, (c) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c] as string)\n );\n}\n\nfunction todayInBusinessTz(): string {\n // en-CA gives YYYY-MM-DD, which is what the journal timestamps slice to.\n return new Intl.DateTimeFormat(\"en-CA\", { timeZone: BUSINESS_TZ }).format(new Date());\n}\n\nasync function collect() {\n const [state, summary, run, journal, lastError, kill] = await Promise.all([\n get(\"puppy_state\", {}),\n get(\"puppy_summary\", null),\n get(\"puppy_run_state\", null),\n get(\"puppy_journal\", []),\n get(\"puppy_last_error\", null),\n get(KILL_BLOB, null),\n ]);\n const wd = await get(\"wd_public\", null); // v1.5, independent watchdog headline\n\n const rows: any[] = Object.entries(state || {}).map(([id, s]: any) => ({ id, ...(s || {}) }));\n const byStatus: Record = {};\n for (const r of rows) byStatus[r.status || \"unknown\"] = (byStatus[r.status || \"unknown\"] || 0) + 1;\n\n const j: any[] = Array.isArray(journal) ? journal : [];\n const today = todayInBusinessTz();\n const todays = j.filter((r) => String(r.ts || \"\").slice(0, 10) === today);\n\n const sentToday = todays.filter((r) => r.event === \"sent\" && !r.test).length;\n const testSentToday = todays.filter((r) => r.event === \"sent\" && r.test).length;\n // v2 fix (adversarial pass): this matched \"failed\"/\"error\" exactly, but the engine journals\n // \"send_failed\", so the error tile could never leave zero and \"RUNNING, with errors today\" was\n // an unreachable state. A dashboard whose alarm cannot fire is worse than no dashboard, because it\n // is actively reassuring. Match any failure-shaped event instead.\n const failedToday = todays.filter((r) => /fail|error/i.test(String(r.event ?? \"\"))).length;\n\n const active = ACTIVE.reduce((n, k) => n + (byStatus[k] || 0), 0);\n const won = WON.reduce((n, k) => n + (byStatus[k] || 0), 0);\n const paused = byStatus[\"paused_reply\"] || 0;\n\n // Staleness is the alarm that matters most: a scheduler that stops firing is exactly the silent\n // failure this client cancels contracts over. 60 min = four missed 15-minute ticks.\n const lastRunTs = run?.ts || null;\n const ageMin = lastRunTs ? Math.floor((Date.now() - new Date(lastRunTs).getTime()) / 60000) : null;\n const stale = ageMin === null || ageMin > 60;\n\n return {\n generatedAt: new Date().toISOString(),\n run: run ?? null,\n contacts: rows.map((r) => ({\n id: r.id,\n status: r.status,\n label: STATUS_LABEL[r.status] || r.status,\n enteredAt: r.enteredAt ?? null,\n lastMainStepSent: r.lastMainStepSent ?? null,\n lastSentAt: r.lastSentAt ?? null,\n })),\n killed: !!kill?.stopped,\n killedAt: kill?.at ?? null,\n testMode: run?.testMode ?? null,\n engineVersion: run?.v ?? null,\n lastRunTs,\n lastRunAgeMin: ageMin,\n stale,\n counts: { total: rows.length, active, won, paused, sentToday, testSentToday, failedToday },\n byStatus,\n lastError: lastError ?? null,\n recent: j.slice(-40).reverse(),\n summary: summary ?? null,\n watchdog: wd ?? null,\n };\n}\n\n// ---- rendering ------------------------------------------------------------------------------------\n\nconst RAMP = [\"#86b6ef\", \"#3987e5\", \"#256abf\", \"#184f95\", \"#0f3a6e\"]; // validated ordinal, light+dark\nconst GOOD = \"#0ca30c\", WARN = \"#fab219\", CRIT = \"#d03b3b\";\n\nfunction tile(label: string, value: string | number, note: string, accent?: string) {\n return `
\n
${esc(value)}
\n
${esc(label)}
\n
${esc(note)}
\n
`;\n}\n\nfunction stageBar(byStatus: Record, total: number) {\n const order = [\"main\", \"awaiting_appt_outcome\", \"branch_a\", \"branch_b\", \"slow_track\"];\n const segs = order\n .map((k, i) => ({ k, n: byStatus[k] || 0, c: RAMP[i] }))\n .filter((s) => s.n > 0);\n const sum = segs.reduce((a, s) => a + s.n, 0);\n if (!sum) {\n return `
Nobody is in a sequence right now. That is expected until the first contact is tagged.
`;\n }\n const bar = segs\n .map((s) => ``)\n .join(\"\");\n const legend = segs\n .map((s) => `
${esc(STATUS_LABEL[s.k])}${s.n}
`)\n .join(\"\");\n return `
${bar}
${legend}
\n \n \n ${segs.map((s) => ``).join(\"\")}\n
The same numbers as a table
Stage People
${esc(STATUS_LABEL[s.k])} ${s.n}
Total in a sequence ${sum}
`;\n}\n\nfunction page(d: any, k: string, opts: { readonly?: boolean } = {}) {\n const c = d.counts;\n const health = d.killed\n ? { c: CRIT, icon: \"■\", t: \"STOPPED\", m: `You stopped the system${d.killedAt ? \" on \" + esc(String(d.killedAt).slice(0, 16).replace(\"T\", \" at \")) : \"\"}. Nothing is being sent.` }\n : d.stale\n ? { c: CRIT, icon: \"⚠\", t: \"NOT RUNNING\", m: d.lastRunTs ? `The last check was ${d.lastRunAgeMin} minutes ago. It should run every 15. Tell Amir.` : \"This has never recorded a run. Tell Amir.\" }\n : c.failedToday > 0\n ? { c: WARN, icon: \"⚠\", t: \"RUNNING, with errors today\", m: `${c.failedToday} message(s) failed today. Details are at the bottom of this page.` }\n : { c: GOOD, icon: \"✓\", t: \"RUNNING NORMALLY\", m: `Last check: ${d.lastRunAgeMin === 1 ? \"1 minute\" : d.lastRunAgeMin + \" minutes\"} ago. It checks roughly every 15 minutes around the clock, and messages only ever go out between 9am and 7pm Georgia time.` };\n\n const mode = d.testMode === true\n ? `
PRACTICE MODE: the system is doing everything except actually sending to your customers. Practice messages go to a dead-end test contact that cannot receive anything, so if you test it yourself you'll get silence, that's the point of practice mode. Keep handling new calls and messages the way you do today; it takes over only when you say the word and this banner turns LIVE.
`\n : d.testMode === false\n ? `
LIVE: real messages are going to real people.
`\n : `
MODE UNKNOWN: no run has reported yet.
`;\n\n // v1.7, Kim's own question (\"how does she know what needs doing today?\") answered on the page\n // itself, permanently. One plain sentence, computed from the same numbers as the tiles.\n const todayMsg = d.killed\n ? \"The system is stopped. Nothing will happen until someone presses Start below.\"\n : c.failedToday > 0\n ? `Look at the problems listed at the bottom of this page, ${c.failedToday} message(s) failed today.`\n : c.paused > 0\n ? `${c.paused === 1 ? \"One person\" : c.paused + \" people\"} replied and ${c.paused === 1 ? \"is\" : \"are\"} waiting on a human. Open Conversations and answer ${c.paused === 1 ? \"them\" : \"each one\"}, that is today's work.`\n : \"Nothing. If the banner above is green and Paused says 0, you can close this page.\";\n const today = `
What needs doing today
${todayMsg}
`;\n\n // Journal rows carry engine-internal names (sent main#3); translate to the words the PDFs use.\n const pretty = (s: string) =>\n s.replace(/\\bmain#(\\d+)/g, \"Touch $1 of the first 21 days\")\n .replace(/\\bslow#(\\d+)/g, \"Slow track message $1\")\n .replace(/\\bbranch_a#(\\d+)/g, \"rebooking note $1\")\n .replace(/\\bbranch_b#(\\d+)/g, \"after-the-call note $1\");\n const EVENT_LABEL: Record = {\n sent: \"message sent\", enrolled: \"joined the sequence\", pause_reply: \"paused, they replied\",\n soft_exit_21d: \"finished the 21 days, moved to slow track\", advance_status: \"moved forward\",\n send_failed: \"message FAILED\", skip_step_channel_optout: \"step skipped, opted out of that channel\",\n branch_complete: \"follow-up finished\", pruned: \"archived\", pause_timeout: \"waited too long, needs a person\",\n enroll_refused: \"not enrolled\", sequence_drift: \"copy changed underneath, check\", contact_failed: \"check FAILED\",\n };\n const rows = (d.recent || [])\n .map((r: any) => `${esc(String(r.ts || \"\").slice(0, 16).replace(\"T\", \" \"))}${esc(EVENT_LABEL[r.event] || r.event)}${r.test ? ' practice' : \"\"}${esc(pretty(String(r.detail || \"\")))}`)\n .join(\"\") || `Nothing recorded yet.`;\n\n return `\n\nThe Dogs Spot, Nurture Control Panel\n
\n
The Dogs Spot, Nurture Control Panel
\n
Everything the follow-up system is doing, on one page. The numbers are read fresh every time this page opens, refresh for the latest.
\n\n
\n
${health.icon}
\n
${health.t}
${health.m}
\n
${mode}
\n\n${today}\n\n${d.watchdog ? `
${esc(d.watchdog.headline)} ●
` : \"\"}\n\n
Right now
\n
\n${tile(\"People being followed up\", c.active, d.testMode === true ? \"right now that is the test dummy, not a real customer\" : \"in a sequence right now\")}\n${tile(\"Booked or became a customer\", c.won, \"the whole point of the system\", c.won > 0 ? GOOD : undefined)}\n${tile(\"Paused: someone replied\", c.paused, \"answer them in the Conversations inbox; the system stays out of it\", c.paused > 0 ? WARN : undefined)}\n${tile(\"Messages sent today\", c.sentToday, c.testSentToday ? `plus ${c.testSentToday} practice` : \"to real people\")}\n${tile(\"Problems today\", c.failedToday, c.failedToday ? \"see the bottom of this page\" : \"none\", c.failedToday ? CRIT : GOOD)}\n
\n\n
Where those people are
${stageBar(d.byStatus || {}, c.total)}${!(d.byStatus || {})[\"slow_track\"] ? `
The slow track (the occasional messages that follow the first 21 days) will appear here once the first person finishes their three weeks. Their first slow-track message goes out a week after that, on day 28.
` : \"\"}
\n\n${opts.readonly ? `
This page is view-only. The stop switch is on the owner's link.
` : `
Stop everything
\n
This halts the follow-up system before it looks at a single person. It takes effect within 15 minutes and needs no one's help. Nothing is deleted, everyone keeps their place and picks up where they left off when you start it again. (When it is stopped, a green Start button appears right here.) To take one single person off every track instead: open their contact in GoHighLevel and switch on Do Not Disturb, the system honors that within 15 minutes, permanently.
\n${d.killed\n ? ``\n : ``}\n
`}\n\n
${(d.recent || []).length < 40 ? \"Everything it has done so far\" : \"The last 40 things it did\"}
\n${rows}
When What Detail
\n\n${d.lastError && d.lastError.at && Date.now() - new Date(d.lastError.at).getTime() < 24 * 3600 * 1000 ? `
Something went wrong in the last 24 hours
Technical details for whoever fixes it, if this box is showing, tell Amir and include what is below.
${esc(JSON.stringify(d.lastError).slice(0, 1200))}
` : \"\"}\n\n
System version ${esc(d.engineVersion || \"?\")} · numbers read fresh when this page opened
\n
`;\n}\n\n// ---- live self-test ------------------------------------------------------------------------------\n// Resolves the CRM credential exactly the way the engine does (env var first, then the puppy_config\n// blob) and pings the four endpoints the engine depends on. Reports status codes only, the token is\n// never returned, logged, or echoed. This exists because a stale credential is the failure mode that\n// looks identical to \"quiet\": the scheduler keeps ticking, every read fails, and nothing tells anyone.\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\n\nasync function resolveEngineToken(): Promise<{ token?: string; from: string }> {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return { token: env, from: \"env GHL_TOKEN\" };\n const cfg = await get(\"puppy_config\", null);\n if (cfg?.ghlToken) return { token: cfg.ghlToken, from: \"puppy_config blob\" };\n return { from: \"NOT FOUND\" };\n}\n\nasync function selfTest() {\n const { token, from } = await resolveEngineToken();\n const checks: any[] = [];\n const probe = async (name: string, url: string, ver: string, why: string) => {\n if (!token) return checks.push({ name, status: null, ok: false, why, note: \"no credential resolved\" });\n try {\n const r = await fetch(url, { headers: { Authorization: `Bearer ${token}`, Version: ver, Accept: \"application/json\" } });\n checks.push({ name, status: r.status, ok: r.status === 200, why });\n } catch (e) {\n checks.push({ name, status: null, ok: false, why, note: String(e).slice(0, 120) });\n }\n };\n await probe(\"read calendar bookings\", `${GHL}/calendars/events?locationId=${LOC}&calendarId=qHuYJ0NEqzibnoqf5Cw3&startTime=${Date.now() - 864e5}&endTime=${Date.now()}`, \"2021-04-15\", \"how it notices someone booked a Pup Talk\");\n await probe(\"read replies\", `${GHL}/conversations/search?locationId=${LOC}&limit=1`, \"2021-04-15\", \"how it pauses when someone writes back\");\n await probe(\"read contacts\", `${GHL}/contacts/?locationId=${LOC}&limit=1`, \"2021-07-28\", \"how it reads names and dog names\");\n await probe(\"read deals\", `${GHL}/opportunities/pipelines?locationId=${LOC}`, \"2021-07-28\", \"how it notices someone became a customer\");\n return { credentialFrom: from, allOk: checks.every((c) => c.ok), checks };\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const isAdmin = await authorised(k);\n const isViewer = !isAdmin && (await viewAuthorised(k));\n if (!isAdmin && !isViewer) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n if (isViewer) {\n // view key renders the dashboard only, no stop/go, no JSON, no selftest.\n const d = await collect();\n return new Response(page(d, k, { readonly: true }), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"selftest\") === \"1\") {\n return new Response(JSON.stringify(await selfTest(), null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"stop\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: true, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n if (url.searchParams.get(\"go\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: false, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n\n const d = await collect();\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n return new Response(page(d, k), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n",[254],"51bc55ba-f13d-4265-8a6f-81e07f6b53cf","aged.ts","58225aaa-8e77-11f1-90c9-1607ee4eb77e",15,["D",1785678976395],"// AGED-LIST SEGMENTER AND RELEASE PLANNER — built 2 Aug 2026.\n//\n// WHY THIS EXISTS\n// The plan of record was \"release the 3,206 dormant New Lead contacts by email, a few hundred a\n// week.\" Before building the machine, the audience was measured. It does not exist in the shape the\n// plan assumed:\n//\n// 3,426 opportunities sit in New Lead (not 3,206 — it grows ~12/day)\n// 177 (5.2%) have an email address\n// 766 (22.4%) have a phone number\n// 2,655 (77.5%) have NEITHER — they are Messenger-only contacts and cannot be emailed or texted\n//\n// Verified twice: once from the opportunity payload's embedded contact, then again by re-fetching\n// 25 of the \"no email\" contacts individually with GET /contacts/{id} — 0 of 25 had a hidden email.\n// So the email-only launch reaches 177 people, not three thousand.\n//\n// Age was also assumed wrong. Nothing in the backlog is older than 292 days; the oldest month is\n// October 2025 and only 328 rows are from 2025 at all. Median age is 109 days.\n//\n// This endpoint keeps that truth live rather than frozen in a document: it re-measures on demand,\n// segments the backlog by what can actually be done with each person, and produces the batch plan.\n//\n// WHAT IT WILL NOT DO\n// It never sends. It plans. Releasing anyone is a separate, deliberate act by a human, and the\n// copy for this path has not been approved by the client. `?k=…&plan=1` returns the batch list;\n// there is no endpoint here that hands that list to a sender.\n//\n// QUOTA (this is the R19 fix in miniature)\n// A full walk is 35 paginated calls. That is far too much to do on every 15-minute engine tick, so\n// the result is cached in the `aged_segments` blob with a timestamp and only recomputed when asked\n// or when older than CACHE_TTL. The engine never calls this; it is an operator tool.\n//\n// ?k= segment summary (cached)\n// ?k=&fresh=1 force a re-measure from the live CRM\n// ?k=&plan=1 the batch release plan\n// ?k=&f=json raw JSON of whichever of the above applies\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC —\n// proved by fetching this very source with no token — so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst PIPE = \"FXt1UpCVBufbF0v3pfyf\";\nconst NEW_LEAD = \"ccb18375-9aa1-40aa-a071-1581ca739533\";\nconst CACHE_KEY = \"aged_segments\";\nconst CACHE_TTL_MS = 12 * 3600 * 1000;\n\n// Batch policy. Email first, small, watching between batches — a burst to a stale list is how a\n// sending reputation dies, and this list is stale by construction.\nconst BATCH_SIZE = 60;\nconst BATCHES_PER_WEEK = 1;\n\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\n\n\nasync function token(): Promise {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return env;\n const blob = await blobMod();\n const cfg = await blob.getJSON(\"puppy_config\").catch(() => null);\n return cfg?.ghlToken;\n}\n\nasync function walkNewLead() {\n const t = await token();\n if (!t) throw new Error(\"no CRM credential resolved\");\n const rows: any[] = [];\n let after: any = null, afterId: any = null, pages = 0;\n while (pages < 45) {\n let u = `${GHL}/opportunities/search?location_id=${LOC}&pipeline_id=${PIPE}&pipeline_stage_id=${NEW_LEAD}&limit=100`;\n if (after != null) u += `&startAfter=${after}&startAfterId=${afterId}`;\n const r = await fetch(u, { headers: { Authorization: `Bearer ${t}`, Version: \"2021-07-28\", Accept: \"application/json\" } });\n if (!r.ok) throw new Error(`opportunities/search ${r.status}`);\n const d = await r.json();\n const ops = d.opportunities ?? [];\n if (!ops.length) break;\n rows.push(...ops);\n pages++;\n after = d.meta?.startAfter; afterId = d.meta?.startAfterId;\n if (!after) break;\n }\n return { rows, pages };\n}\n\n// A lead nobody can reach is not a lead. A lead who only ever spoke on Messenger cannot be emailed or\n// texted at all — Meta's 24-hour messaging window closes that door, and pretending otherwise is how a\n// nurture plan produces a number that never arrives.\nfunction segment(rows: any[]) {\n const now = Date.now();\n const seg: Record = { emailable: [], phoneOnly: [], unreachable: [], excluded: [] };\n const ageBuckets: Record = { \"0-30d\": 0, \"31-90d\": 0, \"91-180d\": 0, \"181-365d\": 0, \"365d+\": 0 };\n const years: Record = {};\n const seenEmail = new Set(), seenPhone = new Set();\n let dupes = 0;\n\n for (const o of rows) {\n const c = o.contact ?? {};\n const email = String(c.email ?? \"\").trim().toLowerCase();\n const phone = String(c.phone ?? \"\").trim();\n const tags: string[] = (c.tags ?? []).map((x: string) => String(x).toLowerCase());\n const created = o.createdAt ? new Date(o.createdAt).getTime() : null;\n const ageDays = created ? Math.floor((now - created) / 86400000) : null;\n\n if (created) {\n const y = new Date(created).getUTCFullYear();\n years[y] = (years[y] ?? 0) + 1;\n const a = ageDays!;\n ageBuckets[a <= 30 ? \"0-30d\" : a <= 90 ? \"31-90d\" : a <= 180 ? \"91-180d\" : a <= 365 ? \"181-365d\" : \"365d+\"]++;\n }\n\n const rec = { contactId: o.contactId, name: c.name ?? null, email: email || null, phone: phone || null, ageDays, tags };\n\n // Exclusions come first and are absolute.\n const isSpam = tags.some((t) => t.includes(\"spam\"));\n const isCustomer = tags.includes(\"customer\") || tags.includes(\"subscription_active\");\n const alreadyOnAPath = tags.some((t) => t.startsWith(\"puppy-path\") || t.startsWith(\"path-\") || t.includes(\"nurture\"));\n if (isSpam || isCustomer || alreadyOnAPath) { seg.excluded.push({ ...rec, why: isSpam ? \"flagged spam\" : isCustomer ? \"already a customer\" : \"already on a nurture path\" }); continue; }\n\n // Same person twice is one person. Dedupe on the strongest identifier available.\n const k = email || phone;\n if (k) {\n const set = email ? seenEmail : seenPhone;\n if (set.has(k)) { dupes++; seg.excluded.push({ ...rec, why: \"duplicate of an earlier row\" }); continue; }\n set.add(k);\n }\n\n if (email) seg.emailable.push(rec);\n else if (phone) seg.phoneOnly.push(rec);\n else seg.unreachable.push(rec);\n }\n\n // Oldest first: they have waited longest and are the least likely to remember enquiring, so they\n // are also the batch most worth watching the opt-out rate on.\n seg.emailable.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n seg.phoneOnly.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n\n return { seg, ageBuckets, years, dupes };\n}\n\nfunction plan(emailable: any[]) {\n const batches: any[] = [];\n for (let i = 0; i < emailable.length; i += BATCH_SIZE) {\n batches.push({\n batch: batches.length + 1,\n weekOffset: batches.length * (1 / BATCHES_PER_WEEK),\n size: emailable.slice(i, i + BATCH_SIZE).length,\n oldestAgeDays: emailable[i]?.ageDays ?? null,\n contactIds: emailable.slice(i, i + BATCH_SIZE).map((r) => r.contactId),\n });\n }\n return batches;\n}\n\nasync function measure(fresh: boolean) {\n const blob = await blobMod();\n if (!fresh) {\n const cached = await blob.getJSON(CACHE_KEY).catch(() => null);\n if (cached?.at && Date.now() - new Date(cached.at).getTime() < CACHE_TTL_MS) return { ...cached, fromCache: true };\n }\n const { rows, pages } = await walkNewLead();\n const { seg, ageBuckets, years, dupes } = segment(rows);\n const out = {\n at: new Date().toISOString(),\n fromCache: false,\n apiCallsUsed: pages,\n total: rows.length,\n counts: {\n emailable: seg.emailable.length,\n phoneOnly: seg.phoneOnly.length,\n unreachable: seg.unreachable.length,\n excluded: seg.excluded.length,\n duplicatesRemoved: dupes,\n },\n ageBuckets, years,\n batchPolicy: { size: BATCH_SIZE, perWeek: BATCHES_PER_WEEK, channel: \"email only\" },\n weeksToClear: Math.ceil(seg.emailable.length / (BATCH_SIZE * BATCHES_PER_WEEK)),\n emailable: seg.emailable,\n phoneOnly: seg.phoneOnly.slice(0, 200),\n excludedSample: seg.excluded.slice(0, 50),\n };\n await blob.setJSON(CACHE_KEY, out).catch(() => {});\n return out;\n}\n\nfunction pct(n: number, d: number) { return d ? `${((n / d) * 100).toFixed(1)}%` : \"0%\"; }\n\nfunction html(d: any) {\n const c = d.counts;\n const rows = (d.batches ?? []).slice(0, 12).map((b: any) =>\n `${b.batch}week +${b.weekOffset}${b.size}${b.oldestAgeDays ?? \"—\"} days`).join(\"\");\n return `Aged list — what is actually there\n\n
The dormant list — what is actually in it
\n
Measured from the live CRM ${d.fromCache ? \"(cached \" + String(d.at).slice(0, 16).replace(\"T\", \" \") + \" UTC)\" : \"just now\"} · ${d.apiCallsUsed ?? \"—\"} API calls
\n
The plan assumed roughly 3,200 people who could be emailed. They cannot.\nOf ${d.total} contacts sitting in New Lead, ${c.emailable} have an email address —\n${pct(c.emailable, d.total)}. ${c.unreachable} (${pct(c.unreachable, d.total)}) have neither an email\nnor a phone number: they only ever spoke through Messenger, and Meta's 24-hour rule closes that door.
\n
Who can actually be contacted
\n\n\n\n\n
Segment Count Share What can be done
Has an email ${c.emailable} ${pct(c.emailable, d.total)} The email release. This is the real audience.
Phone only ${c.phoneOnly} ${pct(c.phoneOnly, d.total)} SMS — held until numbers are validated. Stale numbers get a business flagged by carriers.
Neither ${c.unreachable} ${pct(c.unreachable, d.total)} Nothing by email or text. Reachable only inside Messenger, within Meta's window.
Excluded ${c.excluded} ${pct(c.excluded, d.total)} Already customers, already on a path, flagged spam, or duplicates.
\n
How old it really is
\n${Object.entries(d.ageBuckets || {}).map(([k, v]) => ``).join(\"\")}
Age Count
${k} ${v}
\n
By year created: ${Object.entries(d.years || {}).map(([k, v]) => `${k} ${v}`).join(\" · \")}. Nothing in this list is more than a year old.
\n${rows ? `
The release plan
${rows}
Batch When People Oldest in batch
\n
${d.batchPolicy.size} per batch, ${d.batchPolicy.perWeek} batch per week, email only, oldest first — ${d.weeksToClear} week(s) to work through everyone who can be reached.
` : \"\"}\n
Nothing here sends anything. This page measures and plans. Releasing a batch is a separate deliberate action, and the copy for this path has not been approved yet.
`;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n try {\n const d: any = await measure(url.searchParams.get(\"fresh\") === \"1\");\n if (url.searchParams.get(\"plan\") === \"1\") d.batches = plan(d.emailable ?? []);\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n if (!d.batches) d.batches = plan(d.emailable ?? []);\n return new Response(html(d), { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e).slice(0, 500) }, null, 2), { status: 500, headers: { \"content-type\": \"application/json\" } });\n }\n}\n",[260],"13779ecc-95ab-4c79-8832-8b23800e8a88",["D",1785875966538],[28],"pulls","branches","forks","envVars",{"_276":188,"_278":62},"connections",{"_276":62,"_277":62},"count","unfilledCount","emptyCount",{"_42":266,"_32":28,"_30":31,"_149":-5,"_40":41,"_39":14,"_151":25,"_37":341,"_13":171,"_33":20,"_34":36,"_24":25,"_156":-5,"_296":342,"_27":343},{"_42":259,"_32":260,"_30":261,"_149":-5,"_40":41,"_39":262,"_151":25,"_37":338,"_13":171,"_33":172,"_34":264,"_24":25,"_156":-5,"_296":339,"_27":340},{"_42":253,"_32":254,"_30":56,"_149":-5,"_40":41,"_39":255,"_151":25,"_37":335,"_13":153,"_33":172,"_34":257,"_24":25,"_156":-5,"_296":336,"_27":337},{"_42":245,"_32":246,"_30":247,"_149":-5,"_40":41,"_39":248,"_151":25,"_37":332,"_13":250,"_33":154,"_34":251,"_24":25,"_156":-5,"_296":333,"_27":334},{"_42":237,"_32":238,"_30":239,"_149":-5,"_40":41,"_39":240,"_151":25,"_37":329,"_13":242,"_33":172,"_34":243,"_24":25,"_156":-5,"_296":330,"_27":331},{"_42":230,"_32":231,"_30":232,"_149":-5,"_40":41,"_39":233,"_151":25,"_37":326,"_13":163,"_33":154,"_34":235,"_24":25,"_156":-5,"_296":327,"_27":328},{"_42":223,"_32":224,"_30":225,"_149":-5,"_40":41,"_39":226,"_151":25,"_37":323,"_13":171,"_33":154,"_34":228,"_24":25,"_156":-5,"_296":324,"_27":325},{"_42":214,"_32":215,"_30":216,"_149":-5,"_40":41,"_39":217,"_151":25,"_37":320,"_13":219,"_33":220,"_34":221,"_24":25,"_156":-5,"_296":321,"_27":322},{"_42":206,"_32":207,"_30":208,"_149":-5,"_40":41,"_39":209,"_151":25,"_37":317,"_13":211,"_33":172,"_34":212,"_24":25,"_156":-5,"_296":318,"_27":319},{"_42":198,"_32":199,"_30":200,"_149":-5,"_40":41,"_39":201,"_151":25,"_37":314,"_13":203,"_33":154,"_34":204,"_24":25,"_156":-5,"_296":315,"_27":316},{"_42":191,"_32":192,"_30":193,"_149":-5,"_40":41,"_39":194,"_151":58,"_37":311,"_13":62,"_33":154,"_34":196,"_24":25,"_156":-5,"_296":312,"_27":313},{"_42":183,"_32":184,"_30":185,"_149":-5,"_40":41,"_39":186,"_151":25,"_37":308,"_13":188,"_33":154,"_34":189,"_24":25,"_156":-5,"_296":309,"_27":310},{"_42":175,"_32":176,"_30":177,"_149":-5,"_40":41,"_39":178,"_151":25,"_37":305,"_13":180,"_33":172,"_34":181,"_24":25,"_156":-5,"_296":306,"_27":307},{"_42":166,"_32":167,"_30":168,"_149":-5,"_40":41,"_39":169,"_151":25,"_37":302,"_13":171,"_33":172,"_34":173,"_24":25,"_156":-5,"_296":303,"_27":304},{"_42":158,"_32":159,"_30":160,"_149":-5,"_40":41,"_39":161,"_151":25,"_37":299,"_13":163,"_33":154,"_34":164,"_24":25,"_156":-5,"_296":300,"_27":301},{"_42":146,"_32":147,"_30":148,"_149":-5,"_40":41,"_39":150,"_151":25,"_37":295,"_13":153,"_33":154,"_34":155,"_24":25,"_156":-5,"_296":297,"_27":298},["D",1785875965685],"children",[],[147],["D",1785874265205],[],[159],["D",1785678975976],[],[167],["D",1785865311684],[],[176],["D",1785866731694],[],[184],["D",1785866856515],[],[192],["D",1785871894236],[],[199],["D",1785875966105],[],[207],["D",1785874265763],[],[215],["D",1785861568226],[],[224],["D",1785875965188],[],[231],["D",1785875964709],[],[238],["D",1785867532817],[],[246],["D",1785861568654],[],[254],["D",1785678976395],[],[260],["D",1785875966538],[],[28],["D",1785429259053],["D",1789519842404],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_127":382,"_383":384,"_385":386,"_387":25,"_388":25,"_389":25,"_390":58,"_391":-5,"_392":-7,"_393":-7,"_394":62,"_395":25,"_396":25,"_397":-5,"_398":25,"_399":25,"_400":25,"_401":-5},"ENV",{"_353":354,"_355":356,"_357":89,"_358":359,"_360":361,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Segment	Count	Share	What can be done
Has an email	${c.emailable}	${pct(c.emailable, d.total)}	The email release. This is the real audience.
Phone only	${c.phoneOnly}	${pct(c.phoneOnly, d.total)}	SMS — held until numbers are validated. Stale numbers get a business flagged by carriers.
Neither	${c.unreachable}	${pct(c.unreachable, d.total)}	Nothing by email or text. Reachable only inside Messenger, within Meta's window.
Excluded	${c.excluded}	${pct(c.excluded, d.total)}	Already customers, already on a path, flagged spam, or duplicates.

Diff · v116