[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_713":714,"_715":716},"routes/_app.x.$handle.$name",{"_99":98,"_32":44,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",766,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","SOURCE-BUNDLE.part8.txt","latestPath","fileId","7c8dcd00-91bc-11f1-8e89-1607ee4eb77e","name","fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 8 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (5 of 64 files)\n\n tests/payments-source.test.mjs 3882 bytes 1f89898c456a\n tests/registry.test.mjs 4947 bytes 9cfa5044cbd0\n tests/render.test.mjs 2941 bytes ea24d897a12f\n tests/report-logic.test.mjs 8329 bytes 505cbbf5e568\n\n================================================================================================\n=====FILE tests/negative-controls.mjs#2 =====\n cash or taken over the phone does not reach the card system, so it will not show here.\";',\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H60 Kim is told where else to look\",\n },\n {\n name: \"the card stops saying the deposit is per dog\",\n file: \"engine/dashboard.ts\",\n find: \"$50 per dog, so a three-dog stay is $150.\",\n replace: \"Counted as one $50 deposit per stay.\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.12 the card says the deposit is per dog\",\n },\n {\n name: \"the headline names a flat $50 above rows that owe $50 a dog\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a $50.00 card payment for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H61 the headline never names an amount\",\n },\n {\n name: \"looking at the deposit list resets the refresh clock\",\n file: \"engine/deposits.ts\",\n // If a check writes the attempt stamp, the check becomes the reason the refresh never fires.\n find: \" const attempt: any = await b.getJSON(ATTEMPT_KEY).catch(() => null);\",\n replace: \" const attempt: any = await b.getJSON(ATTEMPT_KEY).catch(() => null);\\n await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString() }).catch(() => {});\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D33 reading the list reports when\",\n },\n {\n name: \"the read route stops reporting when the refresh last tried\",\n file: \"engine/deposits.ts\",\n find: \" lastAttemptAt: attempt?.at ?? null,\",\n replace: \" lastAttemptedAt: attempt?.at ?? null,\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D33 reading the list reports when\",\n },\n {\n name: \"the allocator debits one $50 while the rule clears on a lump sum\",\n file: \"engine/holiday-deposits.ts\",\n // The money bug's fourth door: a two-dog stay settled by $100 debited nothing at all, and the\n // same $100 settled the customer's next stay. 29% of generated multi-stay customers hit it.\n find: \" for (const p of qualifyingPayments(s, available)) spent.add(p.id);\",\n replace: \" const c = collapseSameMoney(paymentsNearStay(s, available)).kept.find((p) => p.amount === DEPOSIT);\\n if (c) spent.add(c.id);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H62 one payment cannot settle two multi-dog\",\n },\n {\n name: \"what settles a stay and what gets debited go back to being two different rules\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const exact = qualifyingPayments(stay, payments);\",\n replace: \" const exact = near.filter((p) => p.amount === DEPOSIT).slice(0, dogs);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H58 the deposit is $50 PER DOG\",\n },\n {\n name: \"the dogs charged for are counted from the names again\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return Math.max(1, stay.dogCount || stay.dogs.length || 1);\",\n replace: \" return Math.max(1, stay.dogs.length || 1);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H64 the amount charged and the dogs named\",\n },\n {\n name: \"three payment dates are chained together with ands\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return `${items.slice(0, -1).join(\\\", \\\")} and ${items[items.length - 1]}`;\",\n replace: \" return items.join(\\\" and \\\");\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H65 three dates read as a list\",\n },\n {\n name: \"the headline has Kim owing money to her customers\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a card payment matching what ${n === 1 ? \\\"it is\\\" : \\\"they are\\\"} owed.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H66 the headline says what is owed\",\n },\n {\n name: \"a $250 payment is read as five holiday deposits with no mention of training\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (due === TRAINING_DEPOSIT) return ` Worth an eye: $${TRAINING_DEPOSIT} is also what a training deposit costs, so this one payment could be either.`;\",\n replace: \" if (false) return \\\"\\\";\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H67 a $250 deposit is flagged\",\n },\n {\n name: \"the card shows two dog names beside a three-dog charge\",\n file: \"engine/dashboard.ts\",\n find: \" if (names.length < n) return `${names.join(\\\", \\\")} and ${n - names.length} more (${n} in total)`;\",\n replace: \" if (false) return \\\"\\\";\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.17 the Dogs column never contradicts\",\n },\n {\n name: \"the refresh stops recording which schedule started it\",\n file: \"engine/deposits.ts\",\n find: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\",\n replace: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString() }).catch(() => {});\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D34 the refresh records WHICH schedule\",\n },\n {\n name: \"the second scheduled file collects on every tick again\",\n file: \"engine/deposits-cron.ts\",\n // [was: deleting the `if (!g.ran) return`, which stopped being the gate when the gate moved\n // INSIDE refreshIfDue. The fault that matters now is bypassing the shared step entirely.]\n find: \" const g = await refreshIfDue(() => blob.getJSON(ATTEMPT_KEY) as any, () => runCollection(false, \\\"deposits-cron\\\"), Date.now());\",\n replace: \" const g = { ran: true, why: \\\"collected\\\" }; await runCollection(false, \\\"deposits-cron\\\");\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the settle rule stops collapsing duplicates, so a backfilled twin can settle a stay\",\n file: \"engine/holiday-deposits.ts\",\n // The OTHER copy of that line, inside qualifyingPayments. Both need guarding: one decides what\n // Kim reads, the other decides what gets spent.\n find: \" const near = [...collapseSameMoney(paymentsNearStay(stay, payments)).kept]\",\n replace: \" const near = [...paymentsNearStay(stay, payments)]\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H68 one $50 written twice\",\n },\n {\n name: \"a row denies a payment that is sitting in its own window\",\n file: \"engine/holiday-deposits.ts\",\n // 7.9% of generated rows said \"no card payment is on file around it at all\" with the payment\n // right there. Kim phones; the customer says \"I paid on the 20th\"; they did.\n find: \" const near = collapseSameMoney(paymentsNearStay(stay, opts.all ?? payments)).kept;\",\n replace: \" const near = collapseSameMoney(paymentsNearStay(stay, payments)).kept;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H69 a row never denies a payment\",\n },\n {\n name: \"money already counted against an earlier stay stops being explained\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const countedNote = counted.length\",\n replace: \" const countedNote = false && counted.length\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H69 a row never denies a payment\",\n },\n {\n name: \"three dogs paid for in one visit print the same date three times\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const uniq = [...new Set(days)];\",\n replace: \" const uniq = days;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H70 three dogs paid for in one visit\",\n },\n {\n name: \"only the $250 collision is flagged, not the likelier ones\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (due > DEPOSIT) return ` Worth an eye: one payment of this size could also be the boarding total\",\n replace: \" if (false) return ` Worth an eye: one payment of this size could also be the boarding total\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H71 a lump sum for several dogs\",\n },\n {\n name: \"the amount shown against a settled multi-dog stay is one dog's worth\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return { stay, state: \\\"seen\\\", amountSeen: due,\",\n replace: \" return { stay, state: \\\"seen\\\", amountSeen: DEPOSIT,\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H72 the amount shown against a settled stay\",\n },\n {\n name: \"a row is labelled 'Not paid' on Kim's card\",\n file: \"engine/dashboard.ts\",\n // The most natural phrasing of the one thing this feature must never say, and the old ban\n // regex let it straight through.\n find: ' none_seen: { label: \"Worth a look\", color: WARN },',\n replace: ' none_seen: { label: \"Not paid\", color: CRIT },',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the sentence saying this is not a list of people who owe her money is dropped\",\n file: \"engine/holiday-deposits.ts\",\n find: \"This is a shortlist to look at rather than a list of people who owe you.`);\",\n replace: \"This is a shortlist.`);\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the card writes '1 dogs, names not recorded'\",\n file: \"engine/dashboard.ts\",\n find: ' if (!names.length) return `${n} ${n === 1 ? \"dog\" : \"dogs\"}, names not recorded`;',\n replace: ' if (!names.length) return `${n} dogs, names not recorded`;',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.18 the counts on the card\",\n },\n {\n name: \"a backfill record from months away is folded into a payment as the same money\",\n file: \"engine/holiday-deposits.ts\",\n // The money bug's fifth door: $50 is exactly the amount a repeat customer pays twice in a\n // year, so a November payment and a December till record were read as one, deleting a real\n // deposit and then telling Kim nothing was on file.\n find: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount && withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS))) {\",\n replace: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount)) {\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H74 a payment months away\",\n },\n {\n name: \"the date bound tightens past the one real pair on her account\",\n file: \"engine/holiday-deposits.ts\",\n find: \"export const COLLAPSE_WINDOW_DAYS = 21;\",\n replace: \"export const COLLAPSE_WINDOW_DAYS = 7;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H74 a payment months away\",\n },\n {\n name: \"the same payment is printed twice on one row, in contradictory terms\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const others = rest.filter((p) => !opts.alreadyCounted?.has(p.id));\",\n replace: \" const others = rest;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H75 money already counted appears once\",\n },\n {\n name: \"three taps on one day are printed as three identical lines\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const prev = byAmountAndDay.get(k);\",\n replace: \" const prev = undefined; byAmountAndDay.set(`${k}|${p.id}`, { amount: p.amount, day, n: 1 });\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H76 three taps on one day\",\n },\n {\n name: \"a row on Kim's card is relabelled 'No payment received'\",\n file: \"engine/dashboard.ts\",\n // One of four phrasings a ninth review walked straight past the word ban.\n find: ' none_seen: { label: \"Worth a look\", color: WARN },',\n replace: ' none_seen: { label: \"No payment received\", color: CRIT },',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the card prints a running total of what customers supposedly owe\",\n file: \"engine/dashboard.ts\",\n find: '

${windowLine(dep.windows)}',\n replace: '

These stays are short by $150.00 between them. ${windowLine(dep.windows)}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the engine's hourly refresh is wrapped in a condition that never fires\",\n file: \"engine/puppy_path_v1.1.ts\",\n find: \" await dep.refreshIfDue(\",\n replace: \" if (Math.random() < 0) await dep.refreshIfDue(\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the scheduled file collects a second time, outside the gate\",\n file: \"engine/deposits-cron.ts\",\n find: \" if (!g.ran) { console.log(`[deposits] ${g.why}`); return; }\",\n replace: \" await runCollection(false, \\\"deposits-cron\\\");\\n if (!g.ran) { console.log(`[deposits] ${g.why}`); return; }\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the row label is rendered from a ternary instead of the allowed set\",\n file: \"engine/dashboard.ts\",\n // The allow-list pinned the constant and not the page: the render site was free.\n find: \"${esc(shown(r).label)}\",\n replace: '${esc(r.state === \"seen\" ? \"Payment on file\" : \"Worth a look\")}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the card grows a column of money nobody vouches for\",\n file: \"engine/dashboard.ts\",\n find: \"WhoStayDogsDeposit\",\n replace: \"WhoStayDogsDepositTo chase\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the engine's refresh is wrapped in a condition placed before the import\",\n file: \"engine/puppy_path_v1.1.ts\",\n // The exact bypass a tenth review used against the previous, statement-level pin.\n find: \" try {\\n const dep = await import(\\\"./deposits.ts\\\");\",\n replace: \" try {\\n if (Date.now() < 0) {\\n const dep = await import(\\\"./deposits.ts\\\");\",\n then: {\n find: \" } catch (e) { console.log(\\\"deposits refresh skipped\\\", String(e).slice(0, 120)); }\",\n replace: \" } } catch (e) { console.log(\\\"deposits refresh skipped\\\", String(e).slice(0, 120)); }\",\n },\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the scheduled file aliases the collector and calls it outside the gate\",\n file: \"engine/deposits-cron.ts\",\n find: \" const g = await refreshIfDue(\",\n replace: \" const always = runCollection; await always(false, \\\"deposits-cron\\\");\\n const g = await refreshIfDue(\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the scheduled file's gate is handed a reader that is always empty\",\n file: \"engine/deposits-cron.ts\",\n find: \"() => blob.getJSON(ATTEMPT_KEY) as any\",\n replace: \"async () => null\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the plural headline goes back to 'what are owed on them'\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a card payment matching what are owed on ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H77 the plural headline is a sentence\",\n },\n {\n name: \"only one spelling of cancelled keeps a booking off the list\",\n file: \"engine/holiday-deposits.ts\",\n find: 'export const DEAD_STATUSES = [\"cancelled\", \"canceled\", \"noshow\", \"no-show\", \"no show\", \"invalid\"];',\n replace: 'export const DEAD_STATUSES = [\"cancelled\"];',\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H78 every way her CRM says a booking is dead\",\n },\n {\n name: \"the collapse bound is hardcoded next to the constant that documents it\",\n file: \"engine/holiday-deposits.ts\",\n find: \"withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS)\",\n replace: \"withinDays(d.at, p.at, 30)\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H79 the collapse bound is the constant\",\n },\n {\n name: \"two payments of the same size on the same day render identically\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const ofN = twinDay > 1 ? ` (one of ${twinDay} payments of that amount that day)` : \\\"\\\";\",\n replace: \" const ofN = \\\"\\\";\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H80 two payments of the same size\",\n },\n {\n name: \"a generated note tells Kim the customer still owes\",\n file: \"engine/holiday-deposits.ts\",\n // The accusation scan used to read hand-typed fixture notes, so this reached her page green.\n find: \"already been counted against ${counted.length === 1 ? \\\"an earlier stay\\\" : \\\"earlier stays\\\"} of theirs.`\",\n replace: \"already been counted against ${counted.length === 1 ? \\\"an earlier stay\\\" : \\\"earlier stays\\\"} of theirs, so they still owe this one.`\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the display list is the collapsed one, so a folded payment vanishes off the row\",\n file: \"engine/holiday-deposits.ts\",\n // A customer who paid BOTH deposits, fourteen days apart, had her Thanksgiving row read\n // \"no card payment is on file around it at all\" — because the till record had been folded\n // against the December card payment and the row was shown the collapsed list.\n find: \" const st = statusFor(s, available, { all: payments, alreadyCounted: new Set(spent) });\",\n replace: \" const st = statusFor(s, available, { all: money, alreadyCounted: new Set(spent) });\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H82 a folded payment still shows on the row\",\n },\n {\n name: \"the card writes prose of its own into a row's note\",\n file: \"engine/dashboard.ts\",\n find: '${esc(r.note)}',\n replace: '${esc(r.note)} Those customers are still to pay.',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the longest stay accepted drifts away from the constant that documents it\",\n file: \"engine/holiday-deposits.ts\",\n find: \"d <= shiftDays(s.day, MAX_STAY_DAYS)\",\n replace: \"d <= shiftDays(s.day, 60)\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H81 the longest stay accepted\",\n },\n {\n name: \"the same-day clause stops naming the day\",\n file: \"engine/holiday-deposits.ts\",\n find: \"` (one of ${twinDay} payments of that amount that day)`\",\n replace: \"` (one of ${twinDay} payments of that amount)`\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H80 two payments of the same size\",\n },\n {\n name: \"a row denies a match one clause before printing it\",\n file: \"engine/holiday-deposits.ts\",\n // The v2 bug's exact sentence, back in a different branch. 1.3% of rows.\n find: \" const why = blocked.length\",\n replace: \" const why = false && blocked.length\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H83 a row never denies a match\",\n },\n {\n name: \"the lump-sum advice names a number of payments the rule would refuse\",\n file: \"engine/holiday-deposits.ts\",\n find: \"${due / DEPOSIT} separate $${DEPOSIT} payments would be clearer.`;\",\n replace: \"Two or three separate $${DEPOSIT} payments would be clearer.`;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H84 the advice on a lump sum\",\n },\n {\n name: \"an accusation is added to the note cell, gated on a row state\",\n file: \"engine/dashboard.ts\",\n // The old allow-list only ever rendered `seen` rows, so any conditional was dead in its fixture.\n find: '${esc(r.note)}',\n replace: '${esc(r.note)}${r.state === \"none_seen\" ? \" They have skipped the deposit.\" : \"\"}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"an accusation is added to the Who column\",\n file: \"engine/dashboard.ts\",\n find: \"`${escCell(who(r))}\",\n replace: \"`${escCell(who(r))} (owes)\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"an accusation is added to the Dogs column\",\n file: \"engine/dashboard.ts\",\n find: \"${escCell(dogsCell(r))}\",\n replace: \"${escCell(dogsCell(r))} (unpaid)\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the staleness warning is turned into an accusation\",\n file: \"engine/dashboard.ts\",\n find: \"will still show here as not found, so check the date before you act on a name.\",\n replace: \"will still show here as having skipped it, so check the date before you act on a name.\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the card synthesises a debt total that coincides with a row's own figure\",\n file: \"engine/dashboard.ts\",\n // The realistic wording, computed the way the card would really compute it — which is exactly\n // the form the old substring check could not see.\n find: '

${windowLine(dep.windows)}',\n replace: '

These stays are still short by $${rows.filter((r) => r.state === \"none_seen\" || r.state === \"partial\").reduce((n, r) => n + 50 * (r.dogCount || 1), 0).toFixed(2)} between them.

${windowLine(dep.windows)}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"a dog name out of the CRM reaches Kim's page unescaped\",\n file: \"engine/dashboard.ts\",\n find: \"${escCell(dogsCell(r))}\",\n replace: \"${dogsCell(r)}\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.7 a customer's name is escaped\",\n },\n {\n name: \"the footer stops naming the payment routes the card cannot see\",\n file: \"engine/dashboard.ts\",\n find: \"${esc(OTHER_ROUTES)} Only overnight boarding stays are counted here\",\n replace: \"Only overnight boarding stays are counted here\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.12 the card says the deposit is per dog\",\n },\n // ---- ROUND 14, 7 August. Every one of these is a fault that shipped green until this round. ----\n {\n name: \"the page renders an object as [object Object] again\",\n file: \"engine/dashboard.ts\",\n find: 'const text = (s: unknown) => (typeof s === \"string\" ? s : typeof s === \"number\" && Number.isFinite(s) ? String(s) : \"\");',\n replace: 'const text = (s: unknown) => String(s ?? \"\");',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"a bidi override in a customer name reaches the page and reorders the cell\",\n file: \"engine/dashboard.ts\",\n find: '.replace(/[\\\\u202A-\\\\u202E\\\\u2066-\\\\u2069\\\\u200E\\\\u200F\\\\u061C]/g, \"\")',\n replace: \"\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.25 a name typed by a stranger\",\n },\n {\n name: \"a name out of the booking form is rendered with no length cap\",\n file: \"engine/dashboard.ts\",\n find: \" return esc(raw.length > MAX_CELL ? `${raw.slice(0, MAX_CELL)}...` : raw);\",\n replace: \" return esc(raw);\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.25 a name typed by a stranger\",\n },\n {\n name: \"the length cap is put back on esc itself, truncating the card's own sentences\",\n file: \"engine/dashboard.ts\",\n find: \"const esc = (s: unknown) => text(s).replace(\",\n replace: \"const esc = (s: unknown) => text(s).slice(0, 120).replace(\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the stored row list is spread without checking it is a list\",\n file: \"engine/dashboard.ts\",\n find: ' const rows = (Array.isArray(dep.rows) ? dep.rows : []).filter((r): r is DepositRow => !!r && typeof r === \"object\")',\n replace: \" const rows = [...(dep.rows ?? [])].filter((r): r is DepositRow => true)\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the row sort reads .day without checking it is a string\",\n file: \"engine/dashboard.ts\",\n find: \"|| day(a).localeCompare(day(b)));\",\n replace: \"|| a.day.localeCompare(b.day));\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the dogs cell filters a field that may not be an array\",\n file: \"engine/dashboard.ts\",\n find: ' const names = (Array.isArray(r.dogs) ? r.dogs : []).filter((d) => typeof d === \"string\" && d.trim());',\n replace: \" const names = ((r.dogs ?? []) as string[]).filter(Boolean);\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the windows line maps a field that may not be an array\",\n file: \"engine/dashboard.ts\",\n find: \" const ws = (Array.isArray(windows) ? windows : [])\",\n replace: \" const ws = ((windows ?? []) as any[])\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"a list of unknown age is silently treated as fresh\",\n file: \"engine/dashboard.ts\",\n find: \" const stale = !Number.isFinite(ageH)\",\n replace: \" const stale = false && !Number.isFinite(ageH)\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.23 a list whose age cannot be read\",\n },\n {\n name: \"the headline is read back out of the blob instead of generated from the rows\",\n file: \"engine/dashboard.ts\",\n find: ' const sentence = depositSentence(rows.map((r) => ({ state: shown(r) === DEP_STATE.could_not_check ? \"could_not_check\" : r.state })), !!dep.feedDead);',\n replace: \" const sentence = dep.sentence;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.22 the headline is generated\",\n },\n {\n name: \"an unreadable state gets a grey dot beside an orange label again\",\n file: \"engine/dashboard.ts\",\n find: \" const shown = (r: DepositRow) => DEP_STATE[r.state] ?? DEP_STATE.could_not_check;\",\n replace: ' const shown = (r: DepositRow) => ({ color: DEP_STATE[r.state]?.color ?? \"#6b7280\", label: DEP_STATE[r.state]?.label ?? \"Worth a look\" });',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.24 a state this code does not recognise\",\n },\n {\n name: \"a row with no name renders as a blank settled row\",\n file: \"engine/dashboard.ts\",\n find: ' const who = (r: DepositRow) => (typeof r.name === \"string\" && r.name.trim() ? r.name : \"name not readable\");',\n replace: \" const who = (r: DepositRow) => r.name;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.26 a row with no readable name\",\n },\n {\n name: \"an unreadable stored list is presented as an empty season\",\n file: \"engine/dashboard.ts\",\n find: \" if (dep.rows !== undefined && dep.rows !== null && !Array.isArray(dep.rows)) {\",\n replace: \" if (false) {\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.27 a stored list that is not a list\",\n },\n {\n name: \"the empty card goes back to saying nothing has been collected\",\n file: \"engine/dashboard.ts\",\n find: \"The deposit check has not run yet, so there is nothing to show here.\",\n replace: \"Nothing collected yet.\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.2 nothing collected yet\",\n },\n {\n name: \"a run that read fewer calendars overwrites the complete stored list\",\n file: \"engine/deposits.ts\",\n find: \" if (!force && prev && missedNow > missedBefore) {\",\n replace: \" if (false && !force && prev && missedNow > missedBefore) {\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D41 a run that saw fewer calendars\",\n },\n {\n name: \"the attempt stamp is written after the collection instead of before it\",\n file: \"engine/deposits.ts\",\n find: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\\n const tok = await token();\",\n replace: \" const tok = await token();\\n await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D43 the refresh gate is claimed\",\n },\n {\n name: \"which payment settles a stay goes back to array order\",\n file: \"engine/holiday-deposits.ts\",\n find: \" .sort((a, b) => when(a) - when(b) || String(a.id).localeCompare(String(b.id)));\",\n replace: \" .slice();\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H86 which payment settles a stay\",\n },\n {\n name: \"two stays on the same day are settled in whatever order they arrived\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const ordered = [...stays].sort((a, b) => a.day.localeCompare(b.day) || key(a).localeCompare(key(b)));\",\n replace: \" const ordered = [...stays].sort((a, b) => a.day.localeCompare(b.day));\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H86 which payment settles a stay\",\n },\n {\n name: \"the deposit note offers cash as a place to look\",\n file: \"engine/holiday-deposits.ts\",\n find: 'export const OTHER_ROUTES = \"A deposit paid by Venmo, Zelle or a cheque does not reach the card system, so it will not show here.\";',\n replace: 'export const OTHER_ROUTES = \"A deposit paid by Venmo, Zelle, cheque or cash does not reach the card system, so it will not show here.\";',\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H60 Kim is told where else to look\",\n },\n {\n name: \"a UTC drop-off time is sliced instead of converted, moving evening stays a day\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (/\\\\dZ$/.test(startTime)) {\",\n replace: \" if (false) {\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H8 the local day is read off the string\",\n },\n {\n name: \"the last sighting of a repeated payment wins instead of the first\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (!prev || (at && prev.at && at < prev.at)) out.set(id, { amount, id, at, kind });\",\n replace: \" if (!prev || (at && prev.at && at > prev.at)) out.set(id, { amount, id, at, kind });\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H85 a payment written into the notes\",\n },\n {\n name: \"the deposit schedules are deployed as plain scripts, so neither ever fires\",\n file: \"scripts/deploy.mjs\",\n find: '\"deposits-cron.ts\": \"interval\"',\n replace: '\"deposits-cron.ts\": \"script\"',\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D42 both schedules are wired\",\n },\n {\n name: \"the cron's refresh call is moved out of the file's own default export\",\n file: \"engine/deposits-cron.ts\",\n find: \"export default async function (): Promise {\",\n replace: \"export default async function (): Promise { return; }\\nasync function unused(): Promise {\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D42 both schedules are wired\",\n },\n {\n name: \"an accusation is added to the Stay column\",\n file: \"engine/dashboard.ts\",\n find: \"${esc(stayDates(r))}\",\n replace: '${esc(stayDates(r))}${r.state === \"none_seen\" ? \" (still to pay)\" : \"\"}',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the missed-calendar banner accuses the customers it could not see\",\n file: \"engine/dashboard.ts\",\n find: \"missing from the list below.

` : \\\"\\\";\",\n replace: \"missing from the list below, and those deposits are unpaid.

` : \\\"\\\";\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the pick-up banner accuses the customers it could not see\",\n file: \"engine/dashboard.ts\",\n find: \"may be missing from this list.

` : \\\"\\\";\",\n replace: \"may be missing from this list, and those deposits are outstanding.

` : \\\"\\\";\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the test-record warning accuses the record it is warning about\",\n file: \"engine/dashboard.ts\",\n find: \"so check who it is before you call.\",\n replace: \"so check who it is before you call. This one has not paid.\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the dead-feed sentence contradicts itself and accuses everybody\",\n file: \"engine/holiday-deposits.ts\",\n find: \"so the list is being held back until that is checked.`;\",\n replace: \"so the list is being held back until that is checked. Nobody below has paid a deposit.`;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the dot colour is chosen at the render site rather than from the allowed set\",\n file: \"engine/dashboard.ts\",\n find: '',\n replace: '',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.24b every REAL state\",\n },\n];\n\n// ---------------------------------------------------------------------------------------------\nconst log = (s = \"\") => console.log(s);\n\n// HOW MANY CONTROLS THERE ARE SUPPOSED TO BE. A ratchet, checked before anything runs and\n// regardless of --only.\n//\n// [was: nothing. On 6 August a bad edit truncated this file and deleted the whole runner; it then\n// printed NOTHING and exited 0, which reads exactly like \"all controls passed\". That was fixed by\n// making run-all re-prove seven controls every run. On 7 August an adversarial pass found the\n// same hole one turn down: truncate the ARRAY rather than the runner — cut it to three entries —\n// and the file prints `=== RESULT: 3 passed, 0 failed ===` and exits 0. Not silence this time; a\n// small, plausible, entirely fake green. Fourteen controls sit past the last of run-all's seven\n// critical ones, so a tail truncation there is caught by nothing at all.]\nconst EXPECTED_CONTROL_COUNT = 203;\nif (CONTROLS.length < EXPECTED_CONTROL_COUNT) {\n log(`RUNNER FAILURE: CONTROLS holds ${CONTROLS.length} entries; at least ${EXPECTED_CONTROL_COUNT} are expected.`);\n log(\"Controls have been lost. Refusing to report any result: a short run is not a clean run.\");\n process.exit(1);\n}\n\n// A CONTROL'S FINGERPRINT: the fault it actually injects, not the name somebody typed above it.\n// run-all.mjs re-proves seven money controls on every test run and matched them BY NAME, so\n// leaving the name in place and swapping the find/replace/mustFail underneath it kept the reassuring\n// line \"7 money guards each proved to still fire\" printing for a guard that no longer tested the\n// money bug it is named for. Proved on 7 August. The fingerprint is printed on every pass and\n// pinned in run-all.mjs.\nconst fingerprint = (c) => createHash(\"sha256\").update(JSON.stringify([c.file, c.find, c.replace, c.suite, c.mustFail, !!c.mustStayGreen])).digest(\"hex\").slice(0, 12);\n\n// THE CLEAN TREE MUST BE GREEN BEFORE A FAULT PROVES ANYTHING.\n//\n// A control claims: \"inject this fault, and that named test goes red.\" If the named test was\n// ALREADY red — an unrelated bug, a half-finished edit, a stale build — then the control passes\n// having proved nothing whatsoever about its own injection. Proved on 7 August by pointing a\n// control's `replace` at its own `find` (a byte-identical no-op) alongside one unrelated broken\n// constant: the control passed, on a fault it did not cause and could not have caused.\n//\n// Built once and memoized per suite, so this costs one build and one run per suite for the whole\n// session rather than one per control.\nconst baselines = new Map();\nlet cleanTree = null;\nfunction baselineIsGreen(suite) {\n if (baselines.has(suite)) return baselines.get(suite);\n if (!cleanTree) {\n cleanTree = mkdtempSync(join(tmpdir(), \"nc-clean-\"));\n for (const d of [\"engine\", \"tests\", \"handover\", \"scripts\"]) cpSync(join(ROOT, d), join(cleanTree, d), { recursive: true });\n const b = spawnSync(\"node\", [join(ROOT, \"scripts/build.mjs\"), \"--src\", join(cleanTree, \"engine\"), \"--out\", join(cleanTree, \"build\")],\n { encoding: \"utf8\", timeout: 180_000 });\n if (b.status !== 0) {\n log(\"RUNNER FAILURE: the CLEAN tree will not build. No control can prove anything against it.\");\n log((b.stdout + b.stderr).trim().slice(0, 600));\n process.exit(1);\n }\n }\n const isTs = suite.endsWith(\".ts\");\n const r = spawnSync(isTs ? \"npx\" : \"node\", isTs ? [\"--yes\", \"tsx\", join(cleanTree, \"tests\", suite)] : [join(cleanTree, \"tests\", suite)],\n { encoding: \"utf8\", cwd: cleanTree, timeout: 180_000 });\n const green = r.status === 0;\n baselines.set(suite, green);\n if (!green) {\n const red = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\")).slice(0, 3).join(\" | \");\n log(`baseline: ${suite} is ALREADY RED before any fault is injected -> ${red.slice(0, 240)}`);\n }\n return green;\n}\n\nlet pass = 0, fail = 0;\nconst failures = [];\n\nfunction runControl(c, i) {\n // Nothing this control does can mean anything if its suite is red to begin with.\n if (!baselineIsGreen(c.suite)) return bad(c, `${c.suite} is RED on the clean tree, so this control would pass for a reason that is not its own fault`);\n const tmp = mkdtempSync(join(tmpdir(), \"nc-\"));\n try {\n // handover/ comes too: the cross-artifact controls patch the documents Kim actually reads,\n // and that suite resolves them relative to its working directory.\n // scripts/ comes too. [was: engine, tests and handover only — so D42, which reads\n // scripts/deploy.mjs to check both schedules are still deployed as val.town intervals, threw\n // in every control's temp tree. Under the new baseline check that shows up honestly as\n // \"deposits-collect.test.mjs is RED on the clean tree\"; before it, four controls would have\n // passed on a suite that was red for a reason that had nothing to do with them.]\n for (const d of [\"engine\", \"tests\", \"handover\", \"scripts\"]) cpSync(join(ROOT, d), join(tmp, d), { recursive: true });\n\n const target = join(tmp, c.file);\n if (!existsSync(target)) return bad(c, `the file it patches does not exist: ${c.file}`);\n\n let src = readFileSync(target, \"utf8\");\n const applyOne = (find, replace) => {\n const at = src.indexOf(find);\n if (at === -1) return false;\n src = src.slice(0, at) + replace + src.slice(at + find.length);\n return true;\n };\n // A control whose injection does not apply is a BROKEN CONTROL, not a pass. This is the\n // failure mode that produced three fake checks: the pattern matched nothing and everyone\n // read the green.\n if (!applyOne(c.find, c.replace)) return bad(c, `injection matched NOTHING in ${c.file}: this control is blind`);\n if (c.then && !applyOne(c.then.find, c.then.replace)) return bad(c, `the follow-up injection matched nothing`);\n writeFileSync(target, src);\n\n // Rebuild the patched tree.\n const b = spawnSync(\"node\", [join(ROOT, \"scripts/build.mjs\"), \"--src\", join(tmp, \"engine\"), \"--out\", join(tmp, \"build\")],\n { encoding: \"utf8\", timeout: 180_000 });\n if (b.status !== 0) return bad(c, `the patched tree would not build, so the suite never ran:\\n${(b.stdout + b.stderr).trim().slice(0, 400)}`);\n\n // Run the one suite that owns this guarantee.\n const isTs = c.suite.endsWith(\".ts\");\n const r = spawnSync(isTs ? \"npx\" : \"node\", isTs ? [\"--yes\", \"tsx\", join(tmp, \"tests\", c.suite)] : [join(tmp, \"tests\", c.suite)],\n { encoding: \"utf8\", cwd: tmp, timeout: 180_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n\n // An INVERTED control: the injection is something the check must NOT react to. A structural\n // check that reads code has to stay green when the forbidden text appears only in a comment;\n // if it goes red, it is matching prose and every green it has ever given is worthless.\n if (c.mustStayGreen) {\n if (r.status !== 0) {\n const red = out.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\")).join(\" \").slice(0, 300);\n return bad(c, `the suite went RED on text that appears only inside a comment: it is matching prose, not code.\\n ${red}`);\n }\n pass++;\n log(`PASS control ${i + 1}: ${c.name}`);\n log(` -> ${c.suite} stayed green, so it is reading code rather than comments [fp:${fingerprint(c)}]`);\n return true;\n }\n\n if (r.status === 0) return bad(c, `THE SUITE STAYED GREEN with the fault injected. ${c.suite} cannot catch this.`);\n\n // Red is necessary but not sufficient. The NAMED test must be the one that went red.\n const redLines = out.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\"));\n if (!redLines.length) return bad(c, `the suite exited non-zero but printed no FAIL line: it crashed rather than caught anything.\\n${out.trim().slice(0, 300)}`);\n if (!redLines.some((l) => l.includes(c.mustFail))) {\n return bad(c, `red, but on the wrong test. Expected \"${c.mustFail}\", got:\\n ${redLines.join(\"\\n \").slice(0, 400)}`);\n }\n\n pass++;\n log(`PASS control ${i + 1}: ${c.name}`);\n log(` -> ${c.suite} went red on \"${c.mustFail}\" [fp:${fingerprint(c)}]`);\n return true;\n } finally {\n rmSync(tmp, { recursive: true, force: true });\n }\n}\n\nfunction bad(c, why) {\n fail++;\n failures.push(`${c.name}\\n ${why}`);\n log(`FAIL control: ${c.name}`);\n log(` ${why.split(\"\\n\").join(\"\\n \")}`);\n return false;\n}\n\n// `--only ` runs a subset while iterating on one module. It is DELIBERATELY loud:\n// a filtered green is not a green, and the banner says so on the way in and on the way out, so\n// nobody can paste a partial run into a report and call the suite clean.\nconst onlyIx = process.argv.indexOf(\"--only\");\nconst ONLY = onlyIx > -1 ? process.argv[onlyIx + 1] : null;\nconst SELECTED = ONLY ? CONTROLS.filter((c) => c.name.includes(ONLY) || c.file.includes(ONLY) || c.suite.includes(ONLY)) : CONTROLS;\nif (ONLY && !SELECTED.length) {\n log(`--only \"${ONLY}\" matched none of the ${CONTROLS.length} controls. Refusing to report a green on zero work.`);\n process.exit(1);\n}\n\nif (ONLY) log(`\\n*** FILTERED RUN: ${SELECTED.length} of ${CONTROLS.length} controls (\"${ONLY}\"). THIS IS NOT A FULL PASS. ***`);\nlog(`\\nNEGATIVE CONTROLS — injecting ${SELECTED.length} faults, one at a time.\\n`);\nSELECTED.forEach(runControl);\n\nlog(`\\n=== RESULT: ${pass} passed, ${fail} failed ===`);\nif (ONLY) log(`*** FILTERED RUN: ${CONTROLS.length - SELECTED.length} controls were not run. This does not clear the suite. ***`);\nif (fail) {\n log(`\\n${fail} guarantee(s) are not actually guarded. A green suite means nothing for these:`);\n for (const f of failures) log(` - ${f}`);\n}\nprocess.exit(fail ? 1 : 0);\n\n\n\n=====FILE tests/payments-source.test.mjs =====\n// THE INGESTION LAYER. 10 Aug 2026.\n// Until today this did not exist, so nothing in the repo could reproduce the numbers on the page\n// Kim reads. Every constant here is pinned to a live count taken on 10 August.\nimport { ACCEPTED_SOURCE_TYPES, isRealMoney, acceptPayments, toPayment, MIN_REAL_PAYMENT } from \"../build/payments-source.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"payments-source\");\n\nconst row = (o = {}) => ({ _id: \"t1\", amount: 100, status: \"succeeded\", contactId: \"c1\", contactName: \"Jane\", entitySourceType: \"invoice\", createdAt: \"2026-08-01\", ...o });\n\nheader(\"EVERY WAY MONEY ARRIVES, AND NOTHING SILENTLY DROPPED\");\n\nt(\"PS-a payment_link is accepted\", () => {\n ok(ACCEPTED_SOURCE_TYPES.includes(\"payment_link\"), \"front desk payment links would report as zero revenue on their first day\");\n return scoped(ACCEPTED_SOURCE_TYPES.length, \"source types allow listed\");\n});\n\nt(\"PS-b the allow list is exactly the five types this location produces\", () => {\n eq([...ACCEPTED_SOURCE_TYPES].sort(), [\"calendar\", \"funnel\", \"invoice\", \"manual\", \"payment_link\"]);\n return scoped(5, \"source types\");\n});\n\nt(\"PS-c an unrecognised source type is REPORTED, never silently dropped\", () => {\n const r = acceptPayments([row({ entitySourceType: \"text2pay_v2\" })]);\n eq(r.unknownTypes, [\"text2pay_v2\"]);\n eq(r.payments.length, 1, \"an unknown type was dropped, so a new way of taking money would vanish with no error\");\n return scoped(1, \"row inspected\");\n});\n\nheader(\"THE JUNK THAT WOULD OTHERWISE POLLUTE HER REVENUE\");\n\nt(\"PS-d a $0 calendar artifact is not a payment, and nor is a card test\", () => {\n eq(isRealMoney({ amount: 0 }), false); // 171 live rows\n eq(isRealMoney({ amount: 0.25 }), false); // the emily harris card tests\n eq(isRealMoney({ amount: 0.5 }), false);\n eq(isRealMoney({ amount: MIN_REAL_PAYMENT }), true);\n eq(isRealMoney({ amount: 30 }), true);\n return scoped(5, \"amount thresholds\");\n});\n\nt(\"PS-e the filter is AMOUNT based, not source type based\", () => {\n // 13 of the 171 live $0 rows are NOT sourceType calendar. Filtering on type leaves them standing,\n // and they are what invents a phantom payment collision.\n const r = acceptPayments([row({ amount: 0, entitySourceType: \"invoice\", entitySourceSubType: \"calendar\" })]);\n eq(r.payments.length, 0, \"a $0 row that is not sourceType calendar survived\");\n eq(r.dropped.zeroOrTest, 1);\n return scoped(1, \"cross type $0 row\");\n});\n\nt(\"PS-f a real payment survives and keeps its identity\", () => {\n const r = acceptPayments([row({ _id: \"x9\", amount: 2395, contactId: \"cc\", contactName: \"Real Person\" })]);\n eq(r.payments.length, 1);\n const p = r.payments[0];\n eq(p.id, \"x9\"); eq(p.amount, 2395); eq(p.contactId, \"cc\"); eq(p.contactName, \"Real Person\"); eq(p.status, \"succeeded\");\n return scoped(1, \"payment mapped\");\n});\n\nt(\"PS-g a mixed batch partitions exactly, nothing lost or double counted\", () => {\n const rows = [row({ _id: \"a\", amount: 500 }), row({ _id: \"b\", amount: 0, entitySourceType: \"calendar\" }),\n row({ _id: \"c\", amount: 0.25 }), row({ _id: \"d\", amount: 90, entitySourceType: \"payment_link\" })];\n const r = acceptPayments(rows);\n eq(r.payments.length + r.dropped.zeroOrTest, rows.length, \"rows went missing between input and output\");\n eq(r.payments.map((p) => p.id), [\"a\", \"d\"]);\n eq(r.unknownTypes, []);\n return scoped(rows.length, \"rows partitioned\");\n});\n\nt(\"PS-h this module cannot write\", () => {\n const src = require$(\"../engine/payments-source.ts\");\n for (const verb of ['\"POST\"', '\"PUT\"', '\"PATCH\"', '\"DELETE\"']) ok(!src.includes(verb), `${verb} appears in a read only module`);\n return scoped(4, \"mutating verbs searched for\");\n});\n\nimport { readFileSync } from \"node:fs\";\nfunction require$(rel) { return readFileSync(new URL(rel, import.meta.url), \"utf8\"); }\n\ndone();\n\n\n=====FILE tests/registry.test.mjs =====\n// WATCHING A LIST SOMEBODY ELSE CONTROLS.\n// The watchdog has watched Kim's 165 automations since 4 August and has never once been seen to\n// fire, because firing requires somebody to change something. That is the definition of a check\n// nobody has verified. The comparison lives on its own now so it can be exercised directly, and\n// every case below is a way the watch could quietly stop working.\nimport * as R from \"../build/registry-diff.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"registry\");\n\nconst KB_BEFORE = {\n XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T02:38\",\n ZkVFb: \"Chloe - Boarding @2026-07-31T12:47\",\n roL2d: \"Ava Knowledgebase @2026-08-03T03:34\",\n};\n\nt(\"G1 an edit in place is caught, which is the case the whole watch exists for\", () => {\n // Same id, same name, new timestamp. Nothing is added and nothing is removed, so a check that\n // only counted entries would see nothing at all — and this is exactly what happened to the\n // consolidated knowledge base at 02:38 on 5 August.\n const after = { ...KB_BEFORE, XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T09:12\" };\n const c = R.registryDiff(KB_BEFORE, after);\n ok(c.changed, \"an in-place edit was not noticed\");\n eq(c.added, []);\n eq(c.removed, []);\n eq(c.edited.length, 1);\n ok(/02:38 -> .*09:12/.test(c.edited[0]), `the change does not show what moved: ${c.edited[0]}`);\n return scoped(5, \"assertions\");\n});\n\nt(\"G2 additions and removals are told apart, and named\", () => {\n const added = R.registryDiff(KB_BEFORE, { ...KB_BEFORE, newId: \"Brand New KB @2026-08-06T00:00\" });\n eq(added.added, [\"Brand New KB @2026-08-06T00:00\"]);\n eq(added.removed, []);\n const { ZkVFb, ...minusOne } = KB_BEFORE;\n const removed = R.registryDiff(KB_BEFORE, minusOne);\n eq(removed.removed, [\"Chloe - Boarding @2026-07-31T12:47\"]);\n eq(removed.added, []);\n ok(removed.changed && added.changed);\n return scoped(5, \"assertions\");\n});\n\nt(\"G3 an unchanged registry is silent, so the alarm does not cry wolf every pass\", () => {\n const c = R.registryDiff(KB_BEFORE, { ...KB_BEFORE });\n eq(c.changed, false, \"an identical registry reported a change\");\n eq([...c.added, ...c.removed, ...c.edited], []);\n // key ORDER must not matter: the CRM does not promise one\n const shuffled = Object.fromEntries(Object.entries(KB_BEFORE).reverse());\n eq(R.registryDiff(KB_BEFORE, shuffled).changed, false, \"a reordered list reads as a change\");\n return scoped(3, \"assertions\");\n});\n\nt(\"G4 a first run has no baseline and must not report the whole world as new\", () => {\n // The very first pass writes a baseline. If it also alarmed, every deploy would page somebody.\n const c = R.registryDiff(null, KB_BEFORE);\n eq(c.added.length, 3, \"a first run should still be able to describe what it found\");\n eq(c.removed, []);\n eq(c.edited, []);\n // and the watchdog only alarms when prev exists, which is the caller's job — proven in G6\n return scoped(3, \"assertions\");\n});\n\nt(\"G5 garbage in does not throw and does not invent a change\", () => {\n for (const junk of [null, undefined, \"not an object\", 42, []]) {\n const c = R.registryDiff(junk, junk);\n eq(c.changed, false, `${JSON.stringify(junk)} produced a change out of nothing`);\n }\n eq(R.registryDiff(KB_BEFORE, null).removed.length, 3, \"a null 'now' should read as everything gone, for the caller to judge\");\n return scoped(6, \"shapes\");\n});\n\nt(\"G6 an empty list on a good response is treated as a glitch, not as a deletion\", () => {\n // The rule the workflow watch learned the hard way: overwriting a baseline with an empty list\n // fires \"everything removed\" this pass and \"everything added\" the next.\n ok(R.looksLikeAGlitch(0, 8), \"an empty response after a healthy one is being believed\");\n ok(!R.looksLikeAGlitch(0, 0), \"a genuinely empty account is being called a glitch forever\");\n ok(!R.looksLikeAGlitch(8, 8), \"a normal response is being called a glitch\");\n ok(!R.looksLikeAGlitch(3, 8), \"a partial response is being called a glitch: it is a real change\");\n ok(!R.looksLikeAGlitch(0, null), \"a missing baseline is being called a glitch\");\n return scoped(5, \"cases\");\n});\n\nt(\"G7 the sentence is generated from the change and says how much it left out\", () => {\n const many = {};\n for (let i = 0; i < 9; i++) many[`id${i}`] = `Thing ${i} @2026-08-06T00:00`;\n const c = R.registryDiff({}, many);\n const line = R.registrySentence(c, \"her knowledge bases\");\n ok(/Added: Thing 0/.test(line), \"the sentence does not name what changed\");\n ok(/6 more not listed here/.test(line), `the sentence hides how much it truncated: ${line}`);\n const quiet = R.registrySentence(R.registryDiff(KB_BEFORE, KB_BEFORE), \"her automations\");\n ok(/Nothing has moved in her automations/.test(quiet), quiet);\n ok(!/undefined|NaN|\\[object/.test(line + quiet), \"a stray value reached the sentence\");\n return scoped(4, \"assertions\");\n});\n\ndone();\n\n\n=====FILE tests/render.test.mjs =====\n// MESSAGE RENDERING — the escape and merge rules, tested directly.\n// Two of these are regressions from a security review: a name containing $-patterns corrupting the\n// body, and contact-typed text reaching the HTML unescaped. Both shipped once.\nimport * as R from \"../build/render.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"render\");\n\nheader(\"MERGE FIELDS\");\nt(\"M1.1 blank names fall back rather than rendering 'Hi ,'\", () => {\n eq(R.resolveFirstName(\"\"), \"there\"); eq(R.resolveFirstName(null), \"there\"); eq(R.resolveFirstName(\" \"), \"there\");\n eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", \"\", \"\"), \"Hi there!\");\n return scoped(4, \"cases\");\n});\nt(\"M1.2 a name full of $-patterns cannot corrupt the body\", () => {\n // String.replace treats $&, $', $` and $1 as references. With a string replacement a customer\n // named Bo$$ would have injected fragments of the template into their own message.\n const evils = [\"Bo$$\", \"Re$&\", \"$'\", \"$`\", \"$1$2\", \"A$&B\"];\n for (const e of evils) eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", e, \"\"), `Hi ${e}!`, `name ${e} mangled`);\n return scoped(evils.length, \"hostile names\");\n});\nheader(\"HTML ESCAPING\");\nt(\"M2.1 every dangerous character is escaped\", () => {\n eq(R.escHtml(``}\n\n

${(d.recent || []).length < 40 ? \"Everything it has done so far\" : \"The last 40 things it did\"}

\n${rows}

When	What	Detail

\n\n${d.lastError && d.lastError.at && Date.now() - new Date(d.lastError.at).getTime() < 24 * 3600 * 1000 ? `

Something went wrong in the last 24 hours

Technical details for whoever fixes it, if this box is showing, tell Amir and include what is below.

${esc(JSON.stringify(d.lastError).slice(0, 1200))}

` : \"\"}\n\n

System version ${esc(d.engineVersion || \"?\")} · numbers read fresh when this page opened

\n`;\n}\n\n// ---- live self-test ------------------------------------------------------------------------------\n// Resolves the CRM credential exactly the way the engine does (env var first, then the puppy_config\n// blob) and pings the four endpoints the engine depends on. Reports status codes only, the token is\n// never returned, logged, or echoed. This exists because a stale credential is the failure mode that\n// looks identical to \"quiet\": the scheduler keeps ticking, every read fails, and nothing tells anyone.\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\n\nasync function resolveEngineToken(): Promise<{ token?: string; from: string }> {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return { token: env, from: \"env GHL_TOKEN\" };\n const cfg = await get(\"puppy_config\", null);\n if (cfg?.ghlToken) return { token: cfg.ghlToken, from: \"puppy_config blob\" };\n return { from: \"NOT FOUND\" };\n}\n\nasync function selfTest() {\n const { token, from } = await resolveEngineToken();\n const checks: any[] = [];\n const probe = async (name: string, url: string, ver: string, why: string) => {\n if (!token) return checks.push({ name, status: null, ok: false, why, note: \"no credential resolved\" });\n try {\n const r = await fetch(url, { headers: { Authorization: `Bearer ${token}`, Version: ver, Accept: \"application/json\" } });\n checks.push({ name, status: r.status, ok: r.status === 200, why });\n } catch (e) {\n checks.push({ name, status: null, ok: false, why, note: String(e).slice(0, 120) });\n }\n };\n await probe(\"read calendar bookings\", `${GHL}/calendars/events?locationId=${LOC}&calendarId=qHuYJ0NEqzibnoqf5Cw3&startTime=${Date.now() - 864e5}&endTime=${Date.now()}`, \"2021-04-15\", \"how it notices someone booked a Pup Talk\");\n await probe(\"read replies\", `${GHL}/conversations/search?locationId=${LOC}&limit=1`, \"2021-04-15\", \"how it pauses when someone writes back\");\n await probe(\"read contacts\", `${GHL}/contacts/?locationId=${LOC}&limit=1`, \"2021-07-28\", \"how it reads names and dog names\");\n await probe(\"read deals\", `${GHL}/opportunities/pipelines?locationId=${LOC}`, \"2021-07-28\", \"how it notices someone became a customer\");\n return { credentialFrom: from, allOk: checks.every((c) => c.ok), checks };\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const isAdmin = await authorised(k);\n const isViewer = !isAdmin && (await viewAuthorised(k));\n if (!isAdmin && !isViewer) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n if (isViewer) {\n // view key renders the dashboard only, no stop/go, no JSON, no selftest.\n const d = await collect();\n return new Response(page(d, k, { readonly: true }), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"selftest\") === \"1\") {\n return new Response(JSON.stringify(await selfTest(), null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"stop\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: true, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n if (url.searchParams.get(\"go\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: false, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n\n const d = await collect();\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n return new Response(page(d, k), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n",[355],"51bc55ba-f13d-4265-8a6f-81e07f6b53cf","aged.ts","58225aaa-8e77-11f1-90c9-1607ee4eb77e",15,["D",1785678976395],"// AGED-LIST SEGMENTER AND RELEASE PLANNER — built 2 Aug 2026.\n//\n// WHY THIS EXISTS\n// The plan of record was \"release the 3,206 dormant New Lead contacts by email, a few hundred a\n// week.\" Before building the machine, the audience was measured. It does not exist in the shape the\n// plan assumed:\n//\n// 3,426 opportunities sit in New Lead (not 3,206 — it grows ~12/day)\n// 177 (5.2%) have an email address\n// 766 (22.4%) have a phone number\n// 2,655 (77.5%) have NEITHER — they are Messenger-only contacts and cannot be emailed or texted\n//\n// Verified twice: once from the opportunity payload's embedded contact, then again by re-fetching\n// 25 of the \"no email\" contacts individually with GET /contacts/{id} — 0 of 25 had a hidden email.\n// So the email-only launch reaches 177 people, not three thousand.\n//\n// Age was also assumed wrong. Nothing in the backlog is older than 292 days; the oldest month is\n// October 2025 and only 328 rows are from 2025 at all. Median age is 109 days.\n//\n// This endpoint keeps that truth live rather than frozen in a document: it re-measures on demand,\n// segments the backlog by what can actually be done with each person, and produces the batch plan.\n//\n// WHAT IT WILL NOT DO\n// It never sends. It plans. Releasing anyone is a separate, deliberate act by a human, and the\n// copy for this path has not been approved by the client. `?k=…&plan=1` returns the batch list;\n// there is no endpoint here that hands that list to a sender.\n//\n// QUOTA (this is the R19 fix in miniature)\n// A full walk is 35 paginated calls. That is far too much to do on every 15-minute engine tick, so\n// the result is cached in the `aged_segments` blob with a timestamp and only recomputed when asked\n// or when older than CACHE_TTL. The engine never calls this; it is an operator tool.\n//\n// ?k= segment summary (cached)\n// ?k=&fresh=1 force a re-measure from the live CRM\n// ?k=&plan=1 the batch release plan\n// ?k=&f=json raw JSON of whichever of the above applies\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC —\n// proved by fetching this very source with no token — so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst PIPE = \"FXt1UpCVBufbF0v3pfyf\";\nconst NEW_LEAD = \"ccb18375-9aa1-40aa-a071-1581ca739533\";\nconst CACHE_KEY = \"aged_segments\";\nconst CACHE_TTL_MS = 12 * 3600 * 1000;\n\n// Batch policy. Email first, small, watching between batches — a burst to a stale list is how a\n// sending reputation dies, and this list is stale by construction.\nconst BATCH_SIZE = 60;\nconst BATCHES_PER_WEEK = 1;\n\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\n\n\nasync function token(): Promise {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return env;\n const blob = await blobMod();\n const cfg = await blob.getJSON(\"puppy_config\").catch(() => null);\n return cfg?.ghlToken;\n}\n\nasync function walkNewLead() {\n const t = await token();\n if (!t) throw new Error(\"no CRM credential resolved\");\n const rows: any[] = [];\n let after: any = null, afterId: any = null, pages = 0;\n while (pages < 45) {\n let u = `${GHL}/opportunities/search?location_id=${LOC}&pipeline_id=${PIPE}&pipeline_stage_id=${NEW_LEAD}&limit=100`;\n if (after != null) u += `&startAfter=${after}&startAfterId=${afterId}`;\n const r = await fetch(u, { headers: { Authorization: `Bearer ${t}`, Version: \"2021-07-28\", Accept: \"application/json\" } });\n if (!r.ok) throw new Error(`opportunities/search ${r.status}`);\n const d = await r.json();\n const ops = d.opportunities ?? [];\n if (!ops.length) break;\n rows.push(...ops);\n pages++;\n after = d.meta?.startAfter; afterId = d.meta?.startAfterId;\n if (!after) break;\n }\n return { rows, pages };\n}\n\n// A lead nobody can reach is not a lead. A lead who only ever spoke on Messenger cannot be emailed or\n// texted at all — Meta's 24-hour messaging window closes that door, and pretending otherwise is how a\n// nurture plan produces a number that never arrives.\nfunction segment(rows: any[]) {\n const now = Date.now();\n const seg: Record = { emailable: [], phoneOnly: [], unreachable: [], excluded: [] };\n const ageBuckets: Record = { \"0-30d\": 0, \"31-90d\": 0, \"91-180d\": 0, \"181-365d\": 0, \"365d+\": 0 };\n const years: Record = {};\n const seenEmail = new Set(), seenPhone = new Set();\n let dupes = 0;\n\n for (const o of rows) {\n const c = o.contact ?? {};\n const email = String(c.email ?? \"\").trim().toLowerCase();\n const phone = String(c.phone ?? \"\").trim();\n const tags: string[] = (c.tags ?? []).map((x: string) => String(x).toLowerCase());\n const created = o.createdAt ? new Date(o.createdAt).getTime() : null;\n const ageDays = created ? Math.floor((now - created) / 86400000) : null;\n\n if (created) {\n const y = new Date(created).getUTCFullYear();\n years[y] = (years[y] ?? 0) + 1;\n const a = ageDays!;\n ageBuckets[a <= 30 ? \"0-30d\" : a <= 90 ? \"31-90d\" : a <= 180 ? \"91-180d\" : a <= 365 ? \"181-365d\" : \"365d+\"]++;\n }\n\n const rec = { contactId: o.contactId, name: c.name ?? null, email: email || null, phone: phone || null, ageDays, tags };\n\n // Exclusions come first and are absolute.\n const isSpam = tags.some((t) => t.includes(\"spam\"));\n const isCustomer = tags.includes(\"customer\") || tags.includes(\"subscription_active\");\n const alreadyOnAPath = tags.some((t) => t.startsWith(\"puppy-path\") || t.startsWith(\"path-\") || t.includes(\"nurture\"));\n if (isSpam || isCustomer || alreadyOnAPath) { seg.excluded.push({ ...rec, why: isSpam ? \"flagged spam\" : isCustomer ? \"already a customer\" : \"already on a nurture path\" }); continue; }\n\n // Same person twice is one person. Dedupe on the strongest identifier available.\n const k = email || phone;\n if (k) {\n const set = email ? seenEmail : seenPhone;\n if (set.has(k)) { dupes++; seg.excluded.push({ ...rec, why: \"duplicate of an earlier row\" }); continue; }\n set.add(k);\n }\n\n if (email) seg.emailable.push(rec);\n else if (phone) seg.phoneOnly.push(rec);\n else seg.unreachable.push(rec);\n }\n\n // Oldest first: they have waited longest and are the least likely to remember enquiring, so they\n // are also the batch most worth watching the opt-out rate on.\n seg.emailable.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n seg.phoneOnly.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n\n return { seg, ageBuckets, years, dupes };\n}\n\nfunction plan(emailable: any[]) {\n const batches: any[] = [];\n for (let i = 0; i < emailable.length; i += BATCH_SIZE) {\n batches.push({\n batch: batches.length + 1,\n weekOffset: batches.length * (1 / BATCHES_PER_WEEK),\n size: emailable.slice(i, i + BATCH_SIZE).length,\n oldestAgeDays: emailable[i]?.ageDays ?? null,\n contactIds: emailable.slice(i, i + BATCH_SIZE).map((r) => r.contactId),\n });\n }\n return batches;\n}\n\nasync function measure(fresh: boolean) {\n const blob = await blobMod();\n if (!fresh) {\n const cached = await blob.getJSON(CACHE_KEY).catch(() => null);\n if (cached?.at && Date.now() - new Date(cached.at).getTime() < CACHE_TTL_MS) return { ...cached, fromCache: true };\n }\n const { rows, pages } = await walkNewLead();\n const { seg, ageBuckets, years, dupes } = segment(rows);\n const out = {\n at: new Date().toISOString(),\n fromCache: false,\n apiCallsUsed: pages,\n total: rows.length,\n counts: {\n emailable: seg.emailable.length,\n phoneOnly: seg.phoneOnly.length,\n unreachable: seg.unreachable.length,\n excluded: seg.excluded.length,\n duplicatesRemoved: dupes,\n },\n ageBuckets, years,\n batchPolicy: { size: BATCH_SIZE, perWeek: BATCHES_PER_WEEK, channel: \"email only\" },\n weeksToClear: Math.ceil(seg.emailable.length / (BATCH_SIZE * BATCHES_PER_WEEK)),\n emailable: seg.emailable,\n phoneOnly: seg.phoneOnly.slice(0, 200),\n excludedSample: seg.excluded.slice(0, 50),\n };\n await blob.setJSON(CACHE_KEY, out).catch(() => {});\n return out;\n}\n\nfunction pct(n: number, d: number) { return d ? `${((n / d) * 100).toFixed(1)}%` : \"0%\"; }\n\nfunction html(d: any) {\n const c = d.counts;\n const rows = (d.batches ?? []).slice(0, 12).map((b: any) =>\n `${b.batch}week +${b.weekOffset}${b.size}${b.oldestAgeDays ?? \"—\"} days`).join(\"\");\n return `Aged list — what is actually there\n\n

The dormant list — what is actually in it

Measured from the live CRM ${d.fromCache ? \"(cached \" + String(d.at).slice(0, 16).replace(\"T\", \" \") + \" UTC)\" : \"just now\"} · ${d.apiCallsUsed ?? \"—\"} API calls

The plan assumed roughly 3,200 people who could be emailed. They cannot.\nOf ${d.total} contacts sitting in New Lead, ${c.emailable} have an email address —\n${pct(c.emailable, d.total)}. ${c.unreachable} (${pct(c.unreachable, d.total)}) have neither an email\nnor a phone number: they only ever spoke through Messenger, and Meta's 24-hour rule closes that door.

Who can actually be contacted

\n\n\n\n\n

Segment	Count	Share	What can be done
Has an email	${c.emailable}	${pct(c.emailable, d.total)}	The email release. This is the real audience.
Phone only	${c.phoneOnly}	${pct(c.phoneOnly, d.total)}	SMS — held until numbers are validated. Stale numbers get a business flagged by carriers.
Neither	${c.unreachable}	${pct(c.unreachable, d.total)}	Nothing by email or text. Reachable only inside Messenger, within Meta's window.
Excluded	${c.excluded}	${pct(c.excluded, d.total)}	Already customers, already on a path, flagged spam, or duplicates.

How old it really is

\n${Object.entries(d.ageBuckets || {}).map(([k, v]) => ``).join(\"\")}

Age	Count
${k}	${v}

By year created: ${Object.entries(d.years || {}).map(([k, v]) => `${k} ${v}`).join(\" · \")}. Nothing in this list is more than a year old.

\n${rows ? `

The release plan

${rows}

Batch	When	People	Oldest in batch

${d.batchPolicy.size} per batch, ${d.batchPolicy.perWeek} batch per week, email only, oldest first — ${d.weeksToClear} week(s) to work through everyone who can be reached.

` : \"\"}\n

Nothing here sends anything. This page measures and plans. Releasing a batch is a separate deliberate action, and the copy for this path has not been approved yet.

`;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n try {\n const d: any = await measure(url.searchParams.get(\"fresh\") === \"1\");\n if (url.searchParams.get(\"plan\") === \"1\") d.batches = plan(d.emailable ?? []);\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n if (!d.batches) d.batches = plan(d.emailable ?? []);\n return new Response(html(d), { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e).slice(0, 500) }, null, 2), { status: 500, headers: { \"content-type\": \"application/json\" } });\n }\n}\n",[362],"0cae7579-a2a0-4f46-8974-a17dd8e1e6df","SOURCE-BUNDLE.part9.txt","5cc7c38a-91cc-11f1-86f1-1607ee4eb77e",749,["D",1786479111791],32,"THE DOGS SPOT — SOURCE BUNDLE (part 9 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (8 of 64 files)\n tests/run-all.mjs 16104 bytes b067deb1fc22\n tests/slow-track.test.mjs 9404 bytes 0bc57258b304\n tests/sms-length.test.mjs 2793 bytes 4b42ded930a4\n tests/stories.test.mjs 3378 bytes 36c5afe09c12\n tests/taper-test.ts 6922 bytes 3ae9fc044871\n scripts/blueprint.py 19291 bytes 804ea6084df6\n scripts/build.mjs 4893 bytes f21f37e458d0\n scripts/bundle.mjs 12362 bytes 8cbd69f80200\n\n================================================================================================\n=====FILE tests/run-all.mjs =====\n// THE RUNNER. Discovers every suite in this folder, runs it, and refuses to report green on\n// anything it did not actually observe pass.\n//\n// [was: a shell glob over tests/*.mjs. taper-test.ts sat at 28/29 RED for two days while the glob\n// reported \"all green\", because a .ts file is not a .mjs file. Discovery is by folder listing now,\n// and a file it cannot run is a FAILURE rather than a skip.]\n//\n// Three rules, all learned the hard way:\n// 1. A suite that will not parse or start is a RED, not a skip.\n// 2. A suite that reports zero assertions is a RED. Blind is not clean.\n// 3. The exit code is the truth. Text saying \"passed\" is not consulted.\nimport { readdirSync, statSync } from \"node:fs\";\nimport { spawnSync } from \"node:child_process\";\nimport { join, dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\n\n// EVERY executable file in this folder is a suite unless it is named below as scaffolding.\n// Not a naming convention: a convention is a thing a future file can quietly fail to follow.\n// [was: /\\.(test\\.mjs|test\\.ts)$/ — which excluded `taper-test.ts` on the hyphen, the same class\n// of miss as the shell glob it replaced. Caught on this runner's first real run.]\nconst RUNNABLE = /\\.(mjs|ts|js|cjs)$/;\n// Scaffolding, named explicitly. Adding to this list is a deliberate act with a reason attached.\nconst NOT_A_SUITE = new Set([\n \"_harness.mjs\", // shared assertions\n \"run-all.mjs\", // this file\n \"negative-controls.mjs\", // run separately: it deliberately breaks things and expects reds\n \"harness.mjs\", // v1 harness, superseded by _harness.mjs, kept for the old .ts suite\n \"claims-registry.mjs\",// data, not assertions: cross-artifact.test.mjs is what tests it\n]);\n\nconst isSuite = (f) => !NOT_A_SUITE.has(f) && RUNNABLE.test(f);\n\nconst files = readdirSync(HERE)\n .filter((f) => statSync(join(HERE, f)).isFile())\n .sort();\n\nconst suites = files.filter(isSuite);\n// Loud about what it declined to run, so \"12 suites\" can be checked against the folder.\nconst skipped = files.filter((f) => !isSuite(f) && !NOT_A_SUITE.has(f));\n\nif (!suites.length) {\n console.log(\"RUNNER FAILURE: found zero suites to run. A runner that runs nothing is not a pass.\");\n process.exit(1);\n}\n\n// REBUILD FIRST, ALWAYS.\n//\n// Every behavioural assertion in this project imports ../build/*.js. Every structural assertion\n// reads ../engine/*.ts. Nothing checked that those two were the same code. On 6 August an\n// adversarial pass deleted the payment-allocation logic from engine/holiday-deposits.ts — the\n// exact fault a negative control exists to catch — ran this runner WITHOUT rebuilding, and got\n// \"270 assertions passed, RESULT: GREEN\". A money bug behind a green wall.\n//\n// So the build is not a thing you remember to do. It is step one of running the tests, and a\n// build that fails is a RED, not a warning.\n{\n const b = spawnSync(\"node\", [join(dirname(HERE), \"scripts\", \"build.mjs\")], { encoding: \"utf8\", timeout: 300_000 });\n if (b.status !== 0) {\n console.log(\"RUNNER FAILURE: the build failed, so the suites would have been testing stale code.\");\n console.log(`${b.stdout ?? \"\"}${b.stderr ?? \"\"}`.trim().slice(0, 1200));\n process.exit(1);\n }\n console.log(\"built engine/ -> build/ before running anything\");\n}\n\n// TYPECHECK, after the build and before the suites. esbuild strips types without checking them,\n// so a field added to a type and missed in two object literals built clean and tested green on\n// 6 August. Found by an adversarial pass, not by anything here.\n{\n const t = spawnSync(\"node\", [join(dirname(HERE), \"scripts\", \"typecheck.mjs\")], { encoding: \"utf8\", timeout: 300_000 });\n const out = `${t.stdout ?? \"\"}${t.stderr ?? \"\"}`.trim();\n console.log(out.split(\"\\n\")[0] ?? \"typecheck: no output\");\n if (t.status !== 0) {\n console.log(\"RUNNER FAILURE: the engine does not typecheck.\");\n console.log(out.slice(0, 1200));\n process.exit(1);\n }\n}\n\nconst runners = { \".ts\": [\"npx\", [\"--yes\", \"tsx\"]], \".mjs\": [\"node\", []] };\nconst runnerFor = (f) => (f.endsWith(\".ts\") ? runners[\".ts\"] : runners[\".mjs\"]);\n\nlet redSuites = 0, totalPass = 0, totalFail = 0;\nconst checksBySuite = {};\nconst assertsBySuite = {};\nconst rows = [];\n\nfor (const f of suites) {\n const [cmd, pre] = runnerFor(f);\n const r = spawnSync(cmd, [...pre, join(HERE, f)], { encoding: \"utf8\", cwd: dirname(HERE), timeout: 120_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n const m = out.match(/=== RESULT: (\\d+) passed, (\\d+) failed(?:, (\\d+) checks)?(?:, (\\d+) assertions)? ===/);\n\n let verdict, pass = 0, fail = 0;\n if (r.error || r.status === null) {\n verdict = `COULD NOT RUN (${r.error?.message ?? \"killed\"})`;\n } else if (!m) {\n // No result line at all: it crashed, or it is not a suite shaped like our suites.\n verdict = `NO RESULT LINE (exit ${r.status})`;\n } else {\n pass = Number(m[1]); fail = Number(m[2]);\n checksBySuite[f] = Number(m[3] ?? 0);\n assertsBySuite[f] = Number(m[4] ?? 0);\n totalPass += pass; totalFail += fail;\n if (pass + fail === 0) verdict = \"ZERO ASSERTIONS (blind, not clean)\";\n else if (fail > 0 || r.status !== 0) verdict = `${fail} FAILED`;\n else verdict = `${pass} passed`;\n }\n\n const green = /passed$/.test(verdict) && !/FAILED/.test(verdict);\n if (!green) {\n redSuites++;\n console.log(`\\n--- ${f} ---`);\n console.log(out.trim().split(\"\\n\").filter((l) => /^FAIL|Error|^\\s{6}/.test(l)).slice(0, 20).join(\"\\n\") || out.trim().slice(0, 1500));\n }\n rows.push([green ? \"OK \" : \"RED \", f, verdict]);\n}\n\nconsole.log(\"\\n================ ALL SUITES ================\");\nfor (const [flag, f, v] of rows) console.log(`${flag} ${f.padEnd(30)} ${v}`);\nif (skipped.length) console.log(`\\nNOT RUN (does not match ${RUNNABLE}): ${skipped.join(\", \")}`);\nconsole.log(`\\n${suites.length} suites, ${totalPass} assertions passed, ${totalFail} failed, ${redSuites} suites red`);\n\nif (redSuites) {\n console.log(\"\\nRESULT: RED\");\n process.exit(1);\n}\n// A SUITE THAT LOSES TESTS MUST GO RED. Deleting the seven assertions that guard the money bug's\n// fourth return took holiday-deposits from 69 to 62 and this runner still printed GREEN: the only\n// floor was a global one, and nothing compared a suite against itself. The floors below are the\n// counts observed passing; raising one is a deliberate act, lowering one is a conversation.\n// [The numbers are not a target. They are a ratchet: tests get added, and a drop means somebody\n// removed a guarantee, which is exactly the move nobody ever announces.]\n// CHECK FLOORS, alongside the test-count floors. A test can pass while inspecting almost nothing;\n// these are the totals each suite reports through scoped(), so hollowing a test out shows up even\n// though the test still says PASS.\nconst CHECK_FLOORS = {\n \"holiday-deposits.test.mjs\": 1544,\n \"deposits-collect.test.mjs\": 136,\n \"dashboard.test.mjs\": 2489,\n};\n// ASSERTION FLOORS. The one count in this project that a test author cannot type: it is\n// incremented inside ok() and eq() themselves. CHECK_FLOORS above is the number a test PASSES to\n// scoped(), and on 7 August that was proved worthless against the failure it was written for —\n// H1's five eq() calls were deleted, `return scoped(5, \"years\")` was left standing, and both the\n// test count and the check count came back byte-identical to the honest run. This floor moves.\nconst ASSERT_FLOORS = {\n \"cadence.test.mjs\": 54,\n \"cross-artifact.test.mjs\": 244,\n \"dashboard.test.mjs\": 891,\n \"deposits-collect.test.mjs\": 155,\n \"detect.test.mjs\": 115,\n \"facts.test.mjs\": 44,\n \"holiday-deposits.test.mjs\": 1594,\n \"kim-copy.test.mjs\": 25,\n \"registry.test.mjs\": 31,\n \"render.test.mjs\": 23,\n \"report-logic.test.mjs\": 38,\n \"slow-track.test.mjs\": 288,\n \"sms-length.test.mjs\": 81,\n \"stories.test.mjs\": 71,\n // taper-test.ts runs on the v1 harness (tests/harness.mjs) and reports no assertion count.\n // Its own hollowing guard lives there instead; see the note in that file.\n};\n// EVERY SUITE HAS A FLOOR. [was: eight of fifteen. The other seven — cadence, facts, registry,\n// render, report-logic, sms-length, stories — were protected only by the global `totalPass < 100`\n// backstop, which had 220 assertions of slack. Deleting five of stories.test.mjs's eight tests\n// dropped the project total from 320 to 315 and printed GREEN.]\nconst FLOORS = {\n \"holiday-deposits.test.mjs\": 88,\n \"deposits-collect.test.mjs\": 38,\n \"dashboard.test.mjs\": 67,\n \"cross-artifact.test.mjs\": 10,\n \"detect.test.mjs\": 19,\n \"kim-copy.test.mjs\": 10,\n \"slow-track.test.mjs\": 14,\n \"taper-test.ts\": 25,\n \"cadence.test.mjs\": 7,\n \"facts.test.mjs\": 11,\n \"registry.test.mjs\": 7,\n \"render.test.mjs\": 8,\n \"report-logic.test.mjs\": 14,\n \"sms-length.test.mjs\": 6,\n \"stories.test.mjs\": 8,\n};\n// A FLOOR ON A SUITE THAT DID NOT RUN GUARDS NOTHING.\n//\n// Every floor above is applied by looking a suite up in `rows`, and `rows` only contains suites\n// discovery actually found. So a suite that vanishes does not fail its floor — it is not there to\n// be measured, and every filter below quietly skips it. Proved three ways on 7 August, each\n// ending in `RESULT: GREEN, exit 0` with a whole suite's coverage gone:\n// delete detect.test.mjs -> 14 suites, GREEN, no mention of it\n// rename it to detect.test.mjs.bak -> GREEN, one passive \"NOT RUN\" line that changes nothing\n// add it to NOT_A_SUITE -> GREEN, and it appears NOWHERE in the output at all\n// This is the same shape as the stale-build hole and the truncated-control-file hole: the runner\n// reporting on work it never did.\n{\n const expected = new Set([...Object.keys(FLOORS), ...Object.keys(CHECK_FLOORS), ...Object.keys(ASSERT_FLOORS)]);\n const missing = [...expected].filter((f) => !rows.some(([, name]) => name === f)).sort();\n if (missing.length) {\n console.log(\"\\nRESULT: RED — a suite that has a floor did not run at all.\");\n console.log(\"It was deleted, renamed out of the runnable pattern, or added to NOT_A_SUITE. A floor\");\n console.log(\"cannot fail a suite that is not there: this is the check that notices it is not there.\");\n for (const f of missing) console.log(` ${f}: has a floor, was never run`);\n process.exit(1);\n }\n console.log(`scaffolding deliberately excluded from discovery (${NOT_A_SUITE.size}): ${[...NOT_A_SUITE].sort().join(\", \")}`);\n}\n{\n const short = rows.filter(([, f]) => FLOORS[f] !== undefined)\n .map(([, f, v]) => [f, Number((v.match(/^(\\d+) passed/) || [])[1] ?? 0)])\n .filter(([f, n]) => n < FLOORS[f]);\n const thin = Object.entries(CHECK_FLOORS)\n .filter(([f, n]) => (checksBySuite[f] ?? 0) < n)\n .map(([f, n]) => [f, checksBySuite[f] ?? 0, n]);\n const hollow = Object.entries(ASSERT_FLOORS)\n .filter(([f, n]) => (assertsBySuite[f] ?? 0) < n)\n .map(([f, n]) => [f, assertsBySuite[f] ?? 0, n]);\n if (hollow.length) {\n console.log(\"\\nRESULT: RED — a suite still passes but is RUNNING FEWER ASSERTIONS than it used to.\");\n console.log(\"This count is incremented inside ok() and eq(), so it is the one number a hollowed-out\");\n console.log(\"test cannot keep steady. If assertions were deliberately merged or removed, move the\");\n console.log(\"floor in run-all.mjs and say why.\");\n for (const [f, n, floor] of hollow) console.log(` ${f}: ${n} assertions ran, floor is ${floor}`);\n process.exit(1);\n }\n if (thin.length) {\n console.log(\"\\nRESULT: RED — a suite still passes but is inspecting LESS than it used to.\");\n console.log(\"A test can be hollowed out to a bare `return scoped(1, ...)` and still say PASS; this is\");\n console.log(\"the total work its checks report. If the drop is deliberate, change the floor and say why.\");\n for (const [f, n, floor] of thin) console.log(` ${f}: ${n} checks now, floor is ${floor}`);\n process.exit(1);\n }\n if (short.length) {\n console.log(\"\\nRESULT: RED — a suite has FEWER assertions than it used to. Guarantees do not\");\n console.log(\"get removed quietly; if this is deliberate, change the floor in run-all.mjs and say why.\");\n for (const [f, n] of short) console.log(` ${f}: ${n} now, floor is ${FLOORS[f]}`);\n process.exit(1);\n }\n}\n\nif (totalPass < 100) {\n console.log(`\\nRESULT: RED — only ${totalPass} assertions across the whole project. That is not a suite, it is a gesture.`);\n process.exit(1);\n}\n\n// THE MONEY GUARDS, RUN EVERY TIME.\n//\n// Two things this replaces. First: negative-controls.mjs is not run here (it deliberately breaks\n// things and expects reds), so nothing would notice if it stopped working — on 6 August an edit\n// truncated that file, deleting the whole runner, and it then printed NOTHING and exited 0, which\n// reads exactly like \"all controls passed\". Second, and worse: a test can be HOLLOWED OUT to a\n// bare `return scoped(3, \"allocations\")` and still print PASS, with the assertion count and the\n// self-reported check count both unchanged. Floors cannot see that. A control can: it injects the\n// fault and demands that named test go red, and a hollow test cannot go red.\n//\n// So the controls guarding the bug that has come back six times run on every single test run.\n// They cost about half a minute. The other ~155 still need `node tests/negative-controls.mjs`.\n//\n// EACH IS PINNED BY FINGERPRINT, NOT BY NAME. The fingerprint is a hash of the fault a control\n// actually injects — file, find, replace, suite and the test it demands go red. [was: the name\n// alone. So the name could be left untouched and the injection underneath it swapped for an\n// unrelated one, and this block kept printing \"7 money guards each proved to still fire\" for a\n// guard that no longer had anything to do with the money bug. Done on 7 August, in one edit, to\n// the control named \"a row is labelled 'Not paid' on Kim's card\" — after which the string\n// \"Not paid\" survived in the control file only inside that name.]\nconst CRITICAL = [\n [\"the allocator debits one $50 while the rule clears on a lump sum\", \"350476142ee4\"],\n [\"one $50 payment settles every holiday stay that customer has\", \"0162bb23668a\"],\n [\"a backfill record from months away is folded into a payment as the same money\", \"563d872d5b35\"],\n [\"a row denies a payment that is sitting in its own window\", \"20b84610424f\"],\n [\"the display list is the collapsed one, so a folded payment vanishes off the row\", \"57e730475b81\"],\n [\"an accusation is added to the note cell, gated on a row state\", \"cd8f1069c9c2\"],\n [\"a row is labelled 'Not paid' on Kim's card\", \"8c99365509f4\"],\n];\n{\n let bad = 0;\n for (const [name, fp] of CRITICAL) {\n const r = spawnSync(\"node\", [join(HERE, \"negative-controls.mjs\"), \"--only\", name],\n { encoding: \"utf8\", cwd: dirname(HERE), timeout: 240_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n const m = out.match(/=== RESULT: (\\d+) passed, (\\d+) failed ===/);\n if (!m) {\n console.log(`\\nRESULT: RED — the control suite printed no result for \"${name}\".`);\n console.log(out.trim().slice(0, 600) || \"(no output at all)\");\n process.exit(1);\n }\n if (Number(m[1]) !== 1 || Number(m[2]) !== 0) {\n console.log(`\\nRESULT: RED — the guard for \"${name}\" no longer fires: ${m[0]}`);\n console.log(out.split(\"\\n\").filter((l) => /^\\s+/.test(l)).slice(0, 6).join(\"\\n\"));\n bad++;\n continue;\n }\n if (!out.includes(`[fp:${fp}]`)) {\n console.log(`\\nRESULT: RED — the control named \"${name}\" passed, but it is not the same control.`);\n console.log(`Expected fingerprint ${fp}; got ${(out.match(/fp:[0-9a-f]+/) || [\"none\"])[0]}. The name was kept`);\n console.log(\"and the fault underneath it changed, so this line has been reporting on the wrong guarantee.\");\n bad++;\n }\n }\n if (bad) {\n console.log(\"\\nA guarantee that cannot be made to fail is not guarded. Fix the test, not the control.\");\n process.exit(1);\n }\n console.log(`\\ncontrol harness: alive, and ${CRITICAL.length} money guards each proved to still fire`);\n}\n\nconsole.log(\"\\nRESULT: GREEN\");\n\n\n=====FILE tests/slow-track.test.mjs =====\n// THE SLOW TRACK. Kim signed this off, so its shape is now a promise rather than a preference.\n// 4 weekly, 13 fortnightly, then monthly forever, keyed to the calendar so seasonal copy lands in\n// season. These tests exist because the failure mode here is silent: a bad offset does not throw,\n// it just sends August's copy in February, or sends the same email twice in one month.\nimport * as T from \"../build/taper.js\";\nimport * as S from \"../build/stories.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"slow-track\");\n\nconst HOUR = 1;\nconst WEEK = 168;\nconst FORTNIGHT = 336;\n\nt(\"T1 the track is the shape Kim signed off: 4 weekly, 13 fortnightly, then monthly\", () => {\n eq(T.SLOW_WEEKLY_COUNT, 4);\n eq(T.SLOW_FORTNIGHTLY_COUNT, 13);\n eq(T.SLOW_WEEKLY.length, 4, \"weekly bank does not match its declared count\");\n eq(T.SLOW_FORTNIGHTLY.length, 13, \"fortnightly bank does not match its declared count\");\n eq(T.SLOW_MONTHLY_BANK.length, 12, \"the monthly bank must cover every calendar month\");\n return scoped(4 + 13 + 12, \"templates\");\n});\n\nt(\"T2 every phase boundary hands over to the next without a gap or an overlap\", () => {\n const phases = [];\n for (let n = 0; n < 40; n++) phases.push(T.nextSlowTouch(n).phase);\n eq(phases.slice(0, 4), [\"weekly\", \"weekly\", \"weekly\", \"weekly\"]);\n eq(phases.slice(4, 17), Array(13).fill(\"fortnightly\"));\n ok(phases.slice(17).every((p) => p === \"monthly\"), \"the track stops being monthly at some point\");\n return scoped(40, \"touches walked\");\n});\n\nt(\"T3 offsets only ever move forward, and by the interval the phase promises\", () => {\n let prev = 0;\n const gaps = [];\n for (let n = 0; n < 40; n++) {\n const { offsetHours } = T.nextSlowTouch(n);\n ok(offsetHours > prev, `touch ${n} at ${offsetHours}h does not come after touch ${n - 1} at ${prev}h`);\n gaps.push(offsetHours - prev);\n prev = offsetHours;\n }\n eq(gaps.slice(0, 4), [WEEK, WEEK, WEEK, WEEK], \"the weekly phase is not weekly\");\n eq(gaps.slice(5, 17), Array(12).fill(FORTNIGHT), \"the fortnightly phase is not fortnightly\");\n eq(gaps.slice(18, 40), Array(22).fill(T.SLOW_MONTHLY_INTERVAL_HOURS), \"the monthly phase is not monthly\");\n return scoped(40, \"intervals\");\n});\n\nt(\"T4 the handover gaps are sane rather than merely forward\", () => {\n // The two seams. Neither is allowed to fire same-day or leave a month of silence.\n const seamA = T.nextSlowTouch(4).offsetHours - T.nextSlowTouch(3).offsetHours;\n const seamB = T.nextSlowTouch(17).offsetHours - T.nextSlowTouch(16).offsetHours;\n ok(seamA >= 24 * HOUR, `weekly-to-fortnightly seam is ${seamA}h: same-day double send`);\n ok(seamA <= 2 * FORTNIGHT, `weekly-to-fortnightly seam is ${seamA}h: a silent month`);\n ok(seamB >= 24 * HOUR, `fortnightly-to-monthly seam is ${seamB}h: same-day double send`);\n ok(seamB <= 2 * T.SLOW_MONTHLY_INTERVAL_HOURS, `fortnightly-to-monthly seam is ${seamB}h: a silent quarter`);\n return scoped(2, \"seams\");\n});\n\nt(\"T5 a weekly or fortnightly touch always hands back a real template\", () => {\n let checked = 0;\n for (let n = 0; n < T.SLOW_WEEKLY_COUNT + T.SLOW_FORTNIGHTLY_COUNT; n++) {\n const { template, phase } = T.nextSlowTouch(n);\n ok(template && typeof template === \"object\", `${phase} touch ${n} handed back no template`);\n ok(template.id, `${phase} touch ${n} has no id`);\n ok(template.subject || template.bodyTemplate, `${template.id} is empty`);\n checked++;\n }\n return scoped(checked, \"templates resolved\");\n});\n\nt(\"T6 a monthly touch defers to the calendar rather than carrying a template\", () => {\n for (let n = 17; n < 30; n++) {\n eq(T.nextSlowTouch(n).template, null, `monthly touch ${n} carries a fixed template: seasonal copy will drift`);\n }\n return scoped(13, \"monthly touches\");\n});\n\nt(\"T7 every month of the year resolves to its own template\", () => {\n const ids = new Set();\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 15, 12, 0, 0));\n const tpl = T.monthlyTemplateFor(d);\n ok(tpl && tpl.id, `month ${m + 1} has no template`);\n ids.add(tpl.id);\n }\n eq(ids.size, 12, \"two calendar months share a template: one of them is out of season\");\n return scoped(12, \"months\");\n});\n\nt(\"T8 the same monthly email never goes out twice in a row\", () => {\n let guarded = 0;\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 28, 12, 0, 0));\n const natural = T.monthlyTemplateFor(d);\n const served = T.monthlyTemplateAvoidingRepeat(d, natural.id);\n ok(served.id !== natural.id, `month ${m + 1} served ${served.id} twice running`);\n guarded++;\n }\n // and when the last send was something else, it serves the natural one\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 3, 12, 0, 0));\n eq(T.monthlyTemplateAvoidingRepeat(d, \"something-else\").id, T.monthlyTemplateFor(d).id,\n `month ${m + 1} dodged when it had no reason to`);\n }\n return scoped(guarded * 2, \"month/last-send pairs\");\n});\n\nt(\"T9 no slow-track copy carries a word Kim has struck out\", () => {\n const banned = [/\\bdaycare\\b/i, /\\bday care\\b/i, /\\bdiscovery call\\b/i, /\\btoilet\\b/i, /\\bgarden\\b/i,\n /\\bwhilst\\b/i, /\\benquir/i, /\\bcolour/i, /\\bfavourite/i, /\\brecognise/i, /\\bapologise/i, /\\bcentre\\b/i];\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const hits = [];\n for (const m of all) {\n const text = [m.subject ?? \"\", m.previewText ?? \"\", m.bodyTemplate ?? \"\"].join(\"\\n\");\n for (const b of banned) if (b.test(text)) hits.push(`${m.id}: ${b.source}`);\n }\n eq(hits, []);\n return scoped(all.length * banned.length, \"message/word pairs\");\n});\n\nt(\"T10 no slow-track message leaks an unresolved story token\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const bad = all\n .filter((m) => /\\{\\{STORY:/.test(S.resolveStories([m.subject ?? \"\", m.bodyTemplate ?? \"\"].join(\"\\n\"))))\n .map((m) => m.id);\n eq(bad, []);\n return scoped(all.length, \"slow-track messages\");\n});\n\nt(\"T11 every slow-track message has an id, and no two share one\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const ids = all.map((m) => m.id);\n ok(ids.every(Boolean), \"a message has no id: the journal cannot record what was sent\");\n const dupes = ids.filter((id, i) => ids.indexOf(id) !== i);\n eq(dupes, [], \"duplicate ids: two different messages would log as the same send\");\n return scoped(ids.length, \"ids\");\n});\n\n// [was: T12 asserted the slow track is email-only. It is not — it alternates email and SMS on\n// purpose, and the assertion was my guess rather than anything read off the track. It failed on\n// slow_w-2 the first time it ran, which is the only reason the guess got caught. The check below\n// tests what the track actually promises.]\nt(\"T12 every message declares a channel, and carries what that channel needs\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n let checked = 0;\n for (const m of all) {\n ok(m.channel === \"email\" || m.channel === \"sms\", `${m.id} has channel ${JSON.stringify(m.channel)}`);\n if (m.channel === \"email\") {\n ok((m.subject ?? \"\").trim().length > 0, `${m.id} is an email with no subject line`);\n ok((m.bodyTemplate ?? \"\").trim().length > 40, `${m.id} is an email with no body`);\n } else {\n eq((m.subject ?? \"\").trim(), \"\", `${m.id} is an SMS carrying a subject line nobody will see`);\n ok((m.bodyTemplate ?? \"\").trim().length > 0, `${m.id} is an empty SMS`);\n }\n checked++;\n }\n return scoped(checked, \"messages\");\n});\n\nt(\"T13 two text messages never land back to back\", () => {\n // Send order for the fixed phases, calendar order for the monthly bank (which wraps Dec to Jan).\n const linear = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY];\n const monthly = [...T.SLOW_MONTHLY_BANK, T.SLOW_MONTHLY_BANK[0]]; // wrap\n let pairs = 0;\n const run = (seq, label) => {\n for (let i = 1; i < seq.length; i++) {\n ok(!(seq[i - 1].channel === \"sms\" && seq[i].channel === \"sms\"),\n `${label}: ${seq[i - 1].id} then ${seq[i].id} are both texts`);\n pairs++;\n }\n };\n run(linear, \"fixed phases\");\n run(monthly, \"monthly bank\");\n // The seam into the monthly phase. The first monthly send can land in ANY calendar month, so the\n // only way to guarantee the seam is for the last fixed-phase message to be an email.\n ok(linear[linear.length - 1].channel === \"email\",\n `the last fixed-phase message (${linear[linear.length - 1].id}) is a text, so the seam into the monthly phase can double up`);\n pairs++;\n return scoped(pairs, \"consecutive pairs\");\n});\n\nt(\"T14 the dodge for a repeated month can never serve two texts in a row\", () => {\n // monthlyTemplateAvoidingRepeat serves NEXT month when this month's was the last thing sent.\n // If the bank ever stopped alternating, that dodge could hand back a second text.\n let checked = 0;\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 28, 12, 0, 0));\n const natural = T.monthlyTemplateFor(d);\n const dodged = T.monthlyTemplateAvoidingRepeat(d, natural.id);\n ok(!(natural.channel === \"sms\" && dodged.channel === \"sms\"),\n `a repeat in month ${m + 1} dodges from ${natural.id} to ${dodged.id}: two texts running`);\n checked++;\n }\n return scoped(checked, \"dodges\");\n});\n\ndone();\n\n\n=====FILE tests/sms-length.test.mjs =====\n// SMS LENGTH, EVERY TRACK. v2.0, 5 Aug 2026.\n// The 320-character rule was enforced on the 21-day sequence and its branches, and on nothing else.\n// A Halloween text sat at 354 as sent, 34 over, splitting into two billed segments every October.\n// Worse: the first version of this check read `E.TAPER_MESSAGES`, a name that does not exist, so it\n// measured zero messages and printed \"all within limit\". T0 is the guard against that.\nimport * as E from \"../build/engine.js\";\nimport { suite, ok, scoped, TRACKS, allMessages } from \"./_harness.mjs\";\nconst { t, done } = suite(\"sms\");\n\nconst LIMIT = 320, OPTOUT = \"\\n\\nReply STOP to stop these texts.\", LONG_NAME = \"Christopher\";\nconst render = (m) => (m.bodyTemplate.replaceAll(\"{{FIRST_NAME}}\", LONG_NAME)\n .replace(/\\{\\{STORY:[^}]+\\}\\}/g, \"\").replace(/\\n{3,}/g, \"\\n\\n\").trim() + OPTOUT);\nconst sms = () => allMessages(E).filter((m) => m.channel === \"sms\");\n\nt(\"T0 every named track is exported and non-empty\", () => {\n for (const k of TRACKS) { ok(Array.isArray(E[k]), `${k} not exported: a check over it would silently pass`); ok(E[k].length, `${k} empty`); }\n return scoped(TRACKS.length, \"tracks\");\n});\nt(\"T1 no SMS exceeds 320 as actually sent, worst-case name\", () => {\n const over = sms().filter((m) => render(m).length > LIMIT).map((m) => `${m.track}/${m.id}=${render(m).length}`);\n ok(over.length === 0, `over the limit:\\n ${over.join(\"\\n \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T2 the opt-out is counted, not assumed away\", () => {\n ok(OPTOUT.length > 20);\n const worst = sms().map((m) => ({ id: m.id, len: render(m).length })).sort((a, b) => b.len - a.len)[0];\n ok(worst.len <= LIMIT, `${worst.id} at ${worst.len}`);\n return `tightest: ${worst.id} at ${worst.len}/${LIMIT}`;\n});\nt(\"T3 no text is so short it reads as a fragment\", () => {\n const tiny = sms().filter((m) => render(m).length < 80).map((m) => m.id);\n ok(tiny.length === 0, `suspiciously short: ${tiny.join(\", \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T4 every SMS names the sender, so it never lands as an unknown number\", () => {\n const anon = sms().filter((m) => !/Kim/.test(m.bodyTemplate)).map((m) => m.id);\n ok(anon.length === 0, `no sender named in: ${anon.join(\", \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T5 emails carry a subject and a body, texts carry neither an empty body nor a subject\", () => {\n const emails = allMessages(E).filter((m) => m.channel === \"email\");\n for (const m of emails) { ok(m.subject && m.subject.trim(), `${m.id} has no subject`); ok(m.bodyTemplate.trim().length > 100, `${m.id} body too short`); }\n for (const m of sms()) ok(!m.subject, `${m.id} is a text with a subject`);\n return `${emails.length} emails, ${sms().length} texts`;\n});\ndone();\n\n\n=====FILE tests/stories.test.mjs =====\n// KIM'S STORIES. Eight slots, all empty on purpose.\n// The standing rule: never invent a story, customer, testimonial, name or event. A slot with an\n// honest fallback beats a plausible lie. These tests exist so that rule survives a future edit.\nimport * as S from \"../build/stories.js\";\nimport * as E from \"../build/engine.js\";\nimport { suite, ok, eq, scoped, TRACKS, allMessages, msgText } from \"./_harness.mjs\";\nconst { t, done } = suite(\"stories\");\n\nt(\"S1 there are eight slots and every one is empty\", () => {\n eq(S.STORY_SLOTS.length, 8);\n for (const s of S.STORY_SLOTS) {\n eq(s.story, null, `${s.id} has been filled: a story must come from Kim, never from us`);\n ok(s.prompt && s.prompt.length > 25, `${s.id} has no 30-second prompt for her`);\n ok(s.lands && s.lands.length > 10, `${s.id} does not say where it lands`);\n ok(/^[a-z0-9_-]+$/i.test(s.id), `${s.id} is not a usable id`);\n }\n return scoped(S.STORY_SLOTS.length, \"slots, all empty\");\n});\nt(\"S2 an empty slot renders as nothing, never as a placeholder a customer could see\", () => {\n for (const s of S.STORY_SLOTS) {\n const out = S.storyFor(s.id);\n ok(out === \"\" || out == null, `${s.id} renders \"${out}\" when empty`);\n }\n return scoped(S.STORY_SLOTS.length, \"slots\");\n});\nt(\"S3 an unknown slot id yields nothing rather than throwing or inventing\", () => {\n for (const bad of [\"nope\", \"\", null, undefined, \"{{STORY:x}}\"]) {\n const out = S.storyFor(bad);\n ok(out === \"\" || out == null, `unknown id ${JSON.stringify(bad)} produced \"${out}\"`);\n }\n return scoped(5, \"unknown ids\");\n});\nt(\"S4 resolveStories strips every token and leaves no blank-line scar\", () => {\n const body = \"Before.\\n\\n{{STORY:slot_a}}\\n\\nAfter.\";\n const out = S.resolveStories(body);\n ok(!/\\{\\{STORY:/.test(out), \"a raw token survived into the message\");\n ok(!/\\n{3,}/.test(out), \"an empty slot left a gap of blank lines\");\n ok(out.includes(\"Before.\") && out.includes(\"After.\"), \"surrounding copy was damaged\");\n return scoped(3, \"assertions\");\n});\nt(\"S5 a nested or malformed token cannot leak through\", () => {\n for (const b of [\"{{STORY:{{STORY:x}}}}\", \"{{STORY:}}\", \"{{STORY: a b }}\", \"{{STORY:a}}{{STORY:b}}\"]) {\n ok(!/\\{\\{STORY:/.test(S.resolveStories(b)), `token survived: ${b}`);\n }\n return scoped(4, \"malformed tokens\");\n});\nt(\"S6 no message contains an unresolved story token after rendering\", () => {\n const all = allMessages(E);\n const bad = all.filter((m) => /\\{\\{STORY:/.test(S.resolveStories(msgText(m)))).map((m) => m.id);\n eq(bad, []);\n return scoped(all.length, \"messages\");\n});\nt(\"S7 every slot referenced by a message actually exists\", () => {\n const ids = new Set(S.STORY_SLOTS.map((s) => s.id));\n const used = new Set();\n for (const m of allMessages(E)) for (const mm of msgText(m).matchAll(/\\{\\{STORY:([^}]+)\\}\\}/g)) used.add(mm[1].trim());\n const orphans = [...used].filter((u) => !ids.has(u));\n eq(orphans, [], \"a message references a slot that does not exist\");\n return scoped(used.size, \"slots referenced\");\n});\nt(\"S8 no slot prompt asks Kim for something she cannot answer in 30 seconds\", () => {\n for (const s of S.STORY_SLOTS) {\n ok(s.prompt.length < 400, `${s.id} prompt is an essay, not a 30-second ask`);\n ok(/\\?/.test(s.prompt), `${s.id} prompt is not phrased as a question`);\n }\n return scoped(S.STORY_SLOTS.length, \"prompts\");\n});\ndone();\n\n\n=====FILE tests/taper-test.ts =====\n// Taper track test harness — run with: tsx tests/taper-test.ts\nimport {\n SLOW_WEEKLY,\n SLOW_FORTNIGHTLY,\n SLOW_MONTHLY_BANK,\n nextSlowTouch,\n monthlyTemplateFor,\n} from \"../engine/taper-messages.ts\";\nimport { REAL_BOOKING_URL } from \"../engine/puppy-messages.ts\";\nimport { STORY_SLOTS } from \"../engine/kim-stories.ts\";\n\nlet pass = 0,\n fail = 0;\nfunction t(name: string, ok: boolean, extra = \"\") {\n if (ok) pass++;\n else fail++;\n console.log((ok ? \"PASS\" : \"FAIL\") + \" — \" + name + (extra ? \" [\" + extra + \"]\" : \"\"));\n}\n\n// 1. Counts match Kim's spec exactly\nt(\"weekly count = 4\", SLOW_WEEKLY.length === 4);\nt(\"fortnightly count = 13\", SLOW_FORTNIGHTLY.length === 13);\nt(\"monthly bank = 12 (one per calendar month)\", SLOW_MONTHLY_BANK.length === 12);\n\n// 2. Offsets: weekly at rel days 7/14/21/28, fortnightly rel days 42..210 step 14\nconst wOff = SLOW_WEEKLY.map((m) => m.offsetHours);\nt(\"weekly offsets 168/336/504/672\", JSON.stringify(wOff) === JSON.stringify([168, 336, 504, 672]));\nconst fOff = SLOW_FORTNIGHTLY.map((m) => m.offsetHours);\nconst fExpect = Array.from({ length: 13 }, (_, i) => 1008 + 336 * i);\nt(\"fortnightly offsets rel day 42..210 step 14\", JSON.stringify(fOff) === JSON.stringify(fExpect));\nt(\n \"no overlap: last weekly (672) < first fortnightly (1008)\",\n wOff[3] < fOff[0]\n);\n\n// 3. Scheduler walk: 30 sends in a row, offsets strictly increasing, phases in order\nlet prev = -1;\nlet order: string[] = [];\nlet mono = true;\nfor (let i = 0; i < 30; i++) {\n const n = nextSlowTouch(i);\n if (n.offsetHours <= prev) mono = false;\n prev = n.offsetHours;\n order.push(n.phase);\n}\nt(\"offsets strictly increasing across 30 sends\", mono);\nt(\n \"phase order weekly x4 -> fortnightly x13 -> monthly x13+\",\n JSON.stringify(order.slice(0, 4)) === JSON.stringify(Array(4).fill(\"weekly\")) &&\n JSON.stringify(order.slice(4, 17)) === JSON.stringify(Array(13).fill(\"fortnightly\")) &&\n order.slice(17).every((p) => p === \"monthly\")\n);\nt(\"first monthly at rel hour 5760 (abs day 261)\", nextSlowTouch(17).offsetHours === 5760);\nt(\"second monthly 30d later (6480)\", nextSlowTouch(18).offsetHours === 6480);\nt(\"monthly template resolved by landing month\", nextSlowTouch(17).template === null);\n\n// 4. Monthly bank keyed to calendar months, seasonal copy in season\nt(\"July message covers heat + fireworks\", /heat|hot/i.test(SLOW_MONTHLY_BANK[6].bodyTemplate) && /firework/i.test(SLOW_MONTHLY_BANK[6].bodyTemplate));\nt(\"December message covers holidays\", /holiday|routine/i.test(SLOW_MONTHLY_BANK[11].bodyTemplate));\nt(\"monthlyTemplateFor picks by month\", monthlyTemplateFor(new Date(2027, 6, 15)).id === \"slow_m-jul\" && monthlyTemplateFor(new Date(2027, 11, 3)).id === \"slow_m-dec\");\n\n// 5. THE PROMISE: no ask attached to any taper message. No booking links anywhere.\nconst all = [...SLOW_WEEKLY, ...SLOW_FORTNIGHTLY, ...SLOW_MONTHLY_BANK];\nt(\n \"zero booking links in all 29 messages\",\n all.every((m) => !m.bodyTemplate.includes(REAL_BOOKING_URL) && !m.bodyTemplate.includes(\"widget/booking\") && !/book(ing)? (a|your|here)/i.test(m.bodyTemplate))\n);\nt(\n \"no sales asks (book now / sign up / enroll / offer / discount)\",\n all.every((m) => !/book now|sign up|enrol|% off|discount|special offer|limited/i.test(m.bodyTemplate))\n);\n\n// 6. Hygiene: ids unique, placeholders well-formed, channels valid, sms length sane\nconst ids = new Set(all.map((m) => m.id));\nt(\"all 29 ids unique\", ids.size === all.length);\nt(\"channels valid\", all.every((m) => m.channel === \"sms\" || m.channel === \"email\"));\nt(\n \"emails have subject+preview, sms have neither\",\n all.every((m) => (m.channel === \"email\" ? !!m.subject && !!m.previewText : !m.subject && !m.previewText))\n);\n// [was: this allowed only {{FIRST_NAME}} and {{DOG_NAME}}, so it went red on all eight legitimate\n// {{STORY:id}} slots the moment the story system landed. The test was stale, not the copy. It now\n// allows a story token ONLY when the slot actually exists, which is the stronger check: a typo in\n// a slot id would previously have been \"malformed\" and is now caught by name.]\nconst KNOWN_SLOTS = new Set(STORY_SLOTS.map((s) => s.id));\nconst badTokens: string[] = [];\nfor (const m of all) {\n for (const p of m.bodyTemplate.match(/\\{\\{[^}]*\\}\\}/g) || []) {\n if (p === \"{{FIRST_NAME}}\" || p === \"{{DOG_NAME}}\") continue;\n const story = p.match(/^\\{\\{STORY:([a-z_]+)\\}\\}$/);\n if (story && KNOWN_SLOTS.has(story[1])) continue;\n badTokens.push(`${m.id}:${p}`);\n }\n}\nt(\"no malformed placeholders, and every story token names a real slot\", badTokens.length === 0, badTokens.join(\" \"));\nconst smsLens = all.filter((m) => m.channel === \"sms\").map((m) => m.bodyTemplate.replace(\"{{FIRST_NAME}}\", \"Jennifer\").replace(/\\{\\{DOG_NAME\\}\\}/g, \"Biscuit\").length);\nt(\"all sms under 400 chars rendered\", smsLens.every((l) => l < 400), \"max=\" + Math.max(...smsLens));\nt(\"every message signed Kim\", all.every((m) => m.bodyTemplate.includes(\"Kim\")));\nt(\"no pbe- slug anywhere\", all.every((m) => !m.bodyTemplate.includes(\"pbe-\")));\n\n// 7. Reply mechanism.\n// [was: \"sms all carry a reply line\", checked against the TEMPLATE. It read red on 7 of 13 texts.\n// Wrong artifact: the opt-out line is appended at render time, never stored in the template, so\n// every text as actually sent ends \"Reply STOP to stop these texts.\" The check below measures the\n// sent message. The separate, real gap the old check was groping at is measured underneath it.]\nconst SMS_OPTOUT_SENT = \"Reply STOP to stop these texts.\";\nt(\n \"every text as actually sent ends with the opt-out line\",\n all.filter((m) => m.channel === \"sms\").every((m) => (m.bodyTemplate + \"\\n\\n\" + SMS_OPTOUT_SENT).trimEnd().endsWith(SMS_OPTOUT_SENT))\n);\n\n// THE REAL GAP, measured rather than asserted away. A customer on the slow track can go a long\n// stretch where the only thing any message tells them to do is leave. Ten of the twenty-nine\n// messages invite a reply; the longest run without one is FIVE (Jul, Aug, Sep, Oct, Nov), which in\n// the monthly phase is about five months.\n//\n// This is NOT fixed in the copy, deliberately. Kim signed the slow track off and was told in\n// writing that nothing in it changed; quietly editing seven messages would make that sentence\n// false. It is a question for her, and it is in the ledger. The number is LOCKED here so the gap\n// cannot get worse while it waits for an answer.\nconst invitesReply = (m: { bodyTemplate: string }) =>\n /\\breply\\b|\\blet me know\\b|\\btell me\\b|\\bask me\\b|\\btext me\\b/i.test(m.bodyTemplate);\nlet run = 0, worstRun = 0;\nfor (const m of all) { if (invitesReply(m)) run = 0; else if (++run > worstRun) worstRun = run; }\nt(\n \"the run of messages with no invitation to reply has not grown past its known value of 5\",\n worstRun <= 5,\n `longest run ${worstRun}, invited ${all.filter(invitesReply).length}/${all.length}`\n);\n\nconsole.log(`\\n=== RESULT: ${pass} passed, ${fail} failed ===`);\nprocess.exit(fail ? 1 : 0);\n\n\n=====FILE scripts/blueprint.py =====\nfrom reportlab.lib.pagesizes import A4\nfrom reportlab.lib.styles import getSampleStyleSheet, ParagraphStyle\nfrom reportlab.lib.units import mm\nfrom reportlab.lib import colors\nfrom reportlab.platypus import (SimpleDocTemplate, Paragraph, Spacer, Table, TableStyle,\n PageBreak, KeepTogether, HRFlowable)\n\nOUT = \"/mnt/user-data/outputs/CALL-BLUEPRINT-9-Aug.pdf\"\nss = getSampleStyleSheet()\nINK = colors.HexColor(\"#14171a\"); MUT = colors.HexColor(\"#5b6570\")\nACC = colors.HexColor(\"#1c5d99\"); RED = colors.HexColor(\"#b3261e\")\nGRN = colors.HexColor(\"#1a6b3c\"); BG = colors.HexColor(\"#f4f6f8\")\n\nH1 = ParagraphStyle(\"H1\", parent=ss[\"Normal\"], fontName=\"Helvetica-Bold\", fontSize=16, leading=19, textColor=INK, spaceAfter=1)\nSUB = ParagraphStyle(\"SUB\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=9, leading=12, textColor=MUT, spaceAfter=9)\nS = ParagraphStyle(\"S\", parent=ss[\"Normal\"], fontName=\"Helvetica-Bold\", fontSize=11.5, leading=14, textColor=ACC, spaceBefore=11, spaceAfter=4)\nB = ParagraphStyle(\"B\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=9.2, leading=12.3, textColor=INK, spaceAfter=3)\nLI = ParagraphStyle(\"LI\", parent=B, leftIndent=11, spaceAfter=2.5)\nQ = ParagraphStyle(\"Q\", parent=B, fontName=\"Helvetica-Bold\", textColor=INK, spaceBefore=5, spaceAfter=1)\nA = ParagraphStyle(\"A\", parent=B, leftIndent=11, textColor=colors.HexColor(\"#20303f\"), spaceAfter=1)\nNOTE= ParagraphStyle(\"NOTE\", parent=B, fontName=\"Helvetica-Oblique\", textColor=MUT, leftIndent=11, spaceAfter=4)\n\nst = []\ndef sec(t): st.append(Paragraph(t, S))\ndef p(t, s=B): st.append(Paragraph(t, s))\ndef bl(items, s=LI):\n for t in items: st.append(Paragraph(\"•\" + t, s))\ndef qa(q, a, note=None):\n blk=[Paragraph(q, Q), Paragraph(a, A)]\n if note: blk.append(Paragraph(note, NOTE))\n st.append(KeepTogether(blk))\nCELL = ParagraphStyle(\"CELL\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=8.6, leading=11.4, textColor=INK)\nKEY = ParagraphStyle(\"KEY\", parent=CELL, fontName=\"Helvetica-Bold\")\ndef box(rows, widths, head=None):\n rows = [[Paragraph(c, KEY if i == 0 else CELL) for i, c in enumerate(r)] for r in rows]\n data = ([head] if head else []) + rows\n t = Table(data, colWidths=widths)\n style=[(\"FONT\",(0,0),(-1,-1),\"Helvetica\",8.6),(\"VALIGN\",(0,0),(-1,-1),\"TOP\"),\n (\"TEXTCOLOR\",(0,0),(-1,-1),INK),(\"BOTTOMPADDING\",(0,0),(-1,-1),4),(\"TOPPADDING\",(0,0),(-1,-1),4),\n (\"LINEBELOW\",(0,0),(-1,-2),0.4,colors.HexColor(\"#dfe4e9\")),\n (\"FONT\",(0,0),(0,-1),\"Helvetica-Bold\",8.6)]\n if head: style += [(\"FONT\",(0,0),(-1,0),\"Helvetica-Bold\",8),(\"TEXTCOLOR\",(0,0),(-1,0),MUT),\n (\"LINEBELOW\",(0,0),(-1,0),0.8,colors.HexColor(\"#b9c2cb\"))]\n t.setStyle(TableStyle(style)); st.append(t)\n\n# ============================ PAGE 1 ============================\np(\"The Dogs Spot: your blueprint for tonight\", H1)\np(\"Sunday 9 August, 20:00 to 21:00 Oxford time (3:00pm for Kim in Georgia). \"\n \"meet.google.com/kii-bcbi-ihm. Dial in (GB) +44 20 3873 3170 PIN 177 520 765 1562#.\", SUB)\n\nsec(\"The whole thing in five sentences\")\np(\"Kim Hicks owns a dog boarding and training business in Savannah, Georgia. She is paying two \"\n \"separate people. Kristian Moore has spent months building her a custom web application \"\n \"plus Chloe, the AI that answers her phone, and he is many months late. You were hired \"\n \"separately for the marketing side: ad tracking, reporting, and the automatic follow up messages. \"\n \"Tonight is Kristian's final exam, where Kim checks whether what he built actually works before \"\n \"she signs it off and takes ownership. You are in the room because you inherit Chloe and the \"\n \"GoHighLevel side the moment he signs off, so you need to see the condition of what is coming \"\n \"to you.\")\n\nsec(\"Why you specifically are on this call\")\np(\"Kim put it in writing to Kristian on 4 August: \\\"I've also engaged another developer, Amir, \"\n \"who is helping me with the ongoing GoHighLevel ecosystem, tracking, reporting, and future \"\n \"automation work. Since his work will need to integrate with the platform you've built, I'd like \"\n \"him to join the acceptance walkthrough.\\\"\")\np(\"And in her Chloe email on 7 August: \\\"Amir is included for visibility because he will be \"\n \"taking Chloe over once Kristian's handoff has been completed.\\\"\")\np(\"So your job tonight is to receive information, not to give it. You are the incoming owner \"\n \"doing a survey on a house before contracts exchange. Nobody expects you to perform.\")\n\nsec(\"The cast\")\nbox([\n [\"Kim Hicks\", \"The client. Pays you both. Sharp, thorough, writes long. Has spent this week \"\n \"documenting Kristian's failures in forensic detail. Not angry at you.\"],\n [\"Kristian Moore\", \"Moore Cre8ive. Built the app and Chloe. Under pressure. Wants sign off and \"\n \"the 30 day warranty clock started. Has asked, politely, that you touch nothing.\"],\n [\"Chloe\", \"Not a person. The AI voice agent that answers Kim's phones and books appointments. \"\n \"Built inside GoHighLevel. Becomes yours after handover.\"],\n [\"Candice\", \"Kim's new staff member, started around 2 August. The second Pup Talk calendar is for her.\"],\n], [26*mm, 148*mm])\n\nsec(\"What has actually happened since the start of August\")\nbox([\n [\"2 Aug\", \"You welcomed Candice. The Bootcamp deposit on the website was corrected from $250 to $500.\"],\n [\"4 Aug\", \"Kim tells Kristian she has hired you, and asks him five hard questions in advance so the \"\n \"walkthrough is not spent explaining. She refuses to accept the app until she has seen it \"\n \"running in her own accounts.\"],\n [\"6 Aug\", \"Kim sends you a very long message: six wording changes to the follow up messages, a \"\n \"request for tag cleanup, questions about deposits, and her answers to your question cards. \"\n \"She says the old puppy workflow has never been used and can be switched off any time.\"],\n [\"7 Aug\", \"The bad day. Four real customers call in and Chloe mishandles all four. Kim writes the \"\n \"whole thing up and sends it to Kristian, copying you, demanding seven fixes before tonight. \"\n \"Kristian replies with a long defence of what is built. They agree a freeze: you observe, \"\n \"you change nothing in the app, calendars, workflows or Chloe.\"],\n [\"7 Aug\", \"You send the Friday report at 11:46pm. One line in it is wrong.\"],\n [\"8 Aug\", \"You catch it yourself at 7:33am and correct it to her: you had read the wrong field, and \"\n \"her Facebook tracking was working all along.\"],\n [\"9 Aug\", \"Today. Facebook ad permission fixed and watched working. Corrected report rebuilt. Kim \"\n \"answers your question cards and says yes to the three that were holding up go live.\"],\n], [16*mm, 158*mm])\n\nst.append(PageBreak())\n\n# ============================ PAGE 2 ============================\np(\"What the hour will look like\", H1)\np(\"Kristian shares his screen. You share nothing. Roughly: Kristian speaks half, Kim forty percent, you ten.\", SUB)\n\nsec(\"The running order\")\nbox([\n [\"0 to 20 min\", \"Chloe retest. Kristian walks through the seven things Kim caught on Friday and \"\n \"shows they are fixed. Kim will be testing him hard. Say nothing here unless asked.\"],\n [\"20 to 40 min\", \"The app walkthrough. app.thedogsspotga.com, the 21 July build. He demonstrates \"\n \"features against the contract and the ChangeLog. This is the part you need to watch \"\n \"closely, because this is what you inherit.\"],\n [\"40 to 50 min\", \"The punch list. Anything still broken gets written down for correction and retest.\"],\n [\"50 to 60 min\", \"Handover talk. Documentation, operating guide, runbook, credentials, GitHub, \"\n \"Supabase, Railway. This is your slot. Ask your questions here.\"],\n], [22*mm, 152*mm])\n\nsec(\"The seven Chloe faults, so you understand what you are watching\")\np(\"All four calls were the same customer, George Fitzgerald, plus one first time boarder, Monique Burnett.\")\nbl([\n \"Chloe offered training program appointments to a man who just wanted his dog looked after for the day.\",\n \"Four separate times she told a caller \\\"we have assigned one of our team members to get back to you\\\" \"\n \"and no task, text or notification was ever created. Nobody was assigned. Nobody knew.\",\n \"Monique's boarding drop off was created correctly, then her pickup was created as a Pup Talk by \"\n \"mistake, and Chloe told her the stay was confirmed anyway.\",\n \"The staff review task that is supposed to fire for a first time boarder never fired.\",\n \"Chloe must not confirm a stay unless both the drop off and the pickup really exist.\",\n \"Chloe must not say a handoff happened unless it happened.\",\n \"The retry and rollback path described in his own document has to be shown working.\",\n])\np(\"Not his fault, and Kim has said so in writing: Chloe refusing a 9:30am change was a four hour minimum \"\n \"notice rule on the calendar. Kim changed it herself to fifteen minutes.\", NOTE)\n\nsec(\"What Kristian has already claimed in writing, so you can spot a change of story\")\nbl([\n \"The app is live, running the 21 July build, but still deployed in his accounts, not Kim's. \"\n \"Transfer happens after QA.\",\n \"GoHighLevel owns the booking link, the calendars, the appointments and the automations. His app is \"\n \"the customer facing portal on top of that.\",\n \"23 approved calendars, and he states none have been renamed, archived, duplicated or added.\",\n \"His app writes into GoHighLevel: contacts, appointments, opportunities, tags, notes, custom fields, \"\n \"appointment statuses and workflows. Underline that one. It is the same data your reporting reads.\",\n \"Chloe is configured directly in GoHighLevel and is separate from his app's code.\",\n])\n\nst.append(PageBreak())\n\n# ============================ PAGE 3 ============================\np(\"What they will ask you, and exactly what to say\", H1)\np(\"Every answer below is true today. You are not memorising a script, you are being handed the facts.\", SUB)\n\nsec(\"From Kristian\")\nqa(\"\\\"Have you made any changes to the account?\\\"\",\n \"\\\"No. Nothing in the application, the calendar mappings, the workflows or Chloe. My side has been \"\n \"reporting, ad tracking and the follow up messages, which sit separately.\\\"\",\n \"True. The freeze has been kept. Nothing you built touches his configuration.\")\nqa(\"\\\"What access do you have?\\\"\",\n \"\\\"Kim set me up with a private integration key so the reporting can read the account. It reads, it \"\n \"does not reconfigure anything.\\\"\")\nqa(\"\\\"What are you planning to change after handover?\\\"\",\n \"\\\"Nothing until your handover is documented and I have read it. After that I will come back to Kim \"\n \"with a plan rather than start changing things.\\\"\")\n\nsec(\"From Kim\")\nqa(\"\\\"Amir, does this affect your tracking?\\\"\",\n \"\\\"It might. What I need to know is what the app writes into the CRM and when, because my reporting \"\n \"reads the same records. That is one of my questions for tonight.\\\"\")\nqa(\"\\\"Amir, can you fix that?\\\"\",\n \"\\\"I can once it is mine. Tonight it is still Kristian's to correct, and I do not want to touch it \"\n \"while you are still testing his work, or neither of you will know what changed.\\\"\",\n \"This is the single most likely trap. Do not take on Chloe work tonight. It is not yours yet and \"\n \"fixing it would wreck the QA baseline she is trying to establish.\")\nqa(\"\\\"When will my things be done?\\\"\",\n \"\\\"Monday: the list that stopped loading, your domain lines, and the corrected numbers. Tuesday: the \"\n \"review workflows and the message overlap. The tag cleanup, the Free Training Day rebuild and your two \"\n \"calendars all sit inside the freeze, so they go the day after it lifts, and that is partly what tonight \"\n \"decides. The Pups Club unsubscribe I can do either way.\\\"\",\n \"Do not promise Wednesday for the tag cleanup or the Free Training Day rebuild. Both are workflow \"\n \"changes and both are frozen. Putting the delay on the freeze rather than on you is also just true.\")\nqa(\"\\\"What about the two calendars I asked for?\\\"\",\n \"\\\"That is a question for both of you. Creating calendars is exactly what the freeze covers, and \"\n \"Kristian has told you no calendars have been added since his reconciliation. Tell me the freeze does \"\n \"not apply to those two and they are built tomorrow.\\\"\",\n \"Getting this answered in front of both of them is one of your five goals. Half an hour of work is \"\n \"sitting behind a yes.\")\n\nsec(\"If you do not know, say one of these. Never bluff.\")\np(\"Not knowing is completely normal for the person who has not built it. Bluffing is the only thing that \"\n \"would actually damage you tonight.\")\nbl([\n \"\\\"I do not want to guess at that. Let me check it properly and come back to you today.\\\"\",\n \"\\\"That is Kristian's side until handover, so I would rather he answered it than me speculating.\\\"\",\n \"\\\"I have not looked at that yet, so I do not have an answer I would stand behind.\\\"\",\n \"\\\"Can you show me what you are seeing?\\\" — buys you a minute and usually answers the question for you.\",\n \"\\\"Let me write that down and come back to you on it.\\\" Then actually write it down.\",\n])\np(\"If a technical question goes over your head entirely: \\\"Say that back to me in terms of what the \"\n \"customer experiences, and I will tell you whether it touches my side.\\\" That is a senior move, not \"\n \"a dodge, and it works every time.\")\n\nst.append(PageBreak())\np(\"Her open list, and what the freeze blocks\", H1)\np(\"If she asks when things will be done, this is the page. Half of it is waiting on tonight.\", SUB)\nbox([\n [\"The list that stopped loading\", \"She screenshotted her contact list dying mid scroll on 6 Aug, and \"\n \"separately said her page shows times but no dates. Never reproduced. The oldest thing outstanding. \"\n \"Not frozen. Monday.\"],\n [\"The four domain lines\", \"Four DNS records for Wix so her follow up emails send from thedogsspotga.com \"\n \"instead of a shared address. They do not exist yet because no sending domain is set up in her CRM. \"\n \"Not frozen. Monday.\"],\n [\"Free Training Day pick up calendar\", \"Her words: 30 minute appointments, bookable from 3:30pm with the \"\n \"last start at 4:30 so everything finishes by 5pm, with the usual appointment workflows. Twenty minutes \"\n \"of work. FROZEN.\"],\n [\"Second Pup Talk calendar\", \"Her words: a copy of the existing one under a different name, so Candice can \"\n \"book a customer straight onto a trainer's Pup Talk and the team can tell at a glance whose call it is. \"\n \"Ten minutes of work. FROZEN.\"],\n [\"Tag cleanup\", \"Remove tags not in use and ones not attached to a real customer. She also asked to track \"\n \"when a tag is applied, which her CRM does not record, so that half needs building. FROZEN.\"],\n [\"Free Training Day workflow\", \"The one that chased four people who had already booked. She built it \"\n \"herself and is open to a rebuild, with her watching. FROZEN.\"],\n [\"Review workflows\", \"Open both and settle whether her customers are being asked for a review twice. \"\n \"Reading only, not frozen. Tuesday.\"],\n [\"Message overlap\", \"Five no sale and tips sequences plus two auto responders. Confirm nothing double \"\n \"fires. Reading only, not frozen. Tuesday.\"],\n [\"Pups Club unsubscribe\", \"Her words: a way for subscription members to unsubscribe themselves. \"\n \"Doable either way.\"],\n [\"The switch on\", \"Fifteen minutes with her watching. Tagging on, new messages on, old workflow off. \"\n \"Waiting only on her picking a moment.\"],\n], [40*mm, 134*mm])\n\nst.append(PageBreak())\n\n# ============================ PAGE 4 ============================\np(\"What you must come away with\", H1)\np(\"If you get these five, the call was a success regardless of how it goes for Kristian.\", SUB)\n\nsec(\"Your five\")\nbox([\n [\"1\", \"Say the boundary out loud. \\\"Reporting, ads, tracking and the follow up messages are mine \"\n \"and carry on. The app, the calendars, the workflows and Chloe I am not touching until your \"\n \"handover is documented.\\\" Say this early. It makes you the professional in the room.\"],\n [\"2\", \"What does the app write into the CRM, and when? He listed contacts, appointments, \"\n \"opportunities, tags, notes and custom fields. Get the timing, so his writes and mine do not \"\n \"overwrite each other.\"],\n [\"3\", \"Does the app set opportunity value or move pipeline stages? Kim asked you today whether \"\n \"reporting depends on things being marked Won. If his app touches values or stages, your answer \"\n \"to her changes. This one is worth more than it sounds.\"],\n [\"4\", \"What exactly do I receive at handover, and on what date? Documentation, operating guide, \"\n \"runbook, credential sheet, GitHub, Supabase, Railway. Ask for a date, not a stage.\"],\n [\"5\", \"Do the two calendars fall under the freeze? Ask both of them together, get one answer.\"],\n], [8*mm, 166*mm])\n\nsec(\"Do not do these\")\nbl([\n \"Do not offer to fix anything of Chloe's tonight. Not yours yet, and it destroys Kim's clean test.\",\n \"Do not pile on about his failures. Kim is doing that thoroughly and it is her job, not yours. \"\n \"You come out of this better by being the calm one. He may also be the person you have to work with \"\n \"for another month.\",\n \"Do not promise a date for anything you have not scoped. \\\"I will come back to you with a date \"\n \"tomorrow\\\" is a complete answer.\",\n \"Do not raise the access key issue on this call. That is between you and Kim, and not in front \"\n \"of an outgoing contractor.\",\n \"Do not discuss money, yours or his.\",\n])\n\nsec(\"Numbers in your pocket, if you are asked how your side is doing\")\nbox([\n [\"Ad spend\", \"$718.98 last week. Facebook $554.98, Google $164.00.\"],\n [\"Cost per lead\", \"$4.11 overall. Best campaign $4.63, worst $10.87.\"],\n [\"New inquiries\", \"175 last week, down 22 on the week before.\"],\n [\"Facebook tracking\", \"Fixed today. The permission was missing since the connection was first built. \"\n \"The page now reads spend live from Meta.\"],\n [\"Follow up system\", \"Built, tested, running in practice mode. Has never messaged a real customer. \"\n \"Fifteen minutes from live once Kim picks a moment.\"],\n [\"The honest gap\", \"Revenue and ROAS do not work yet, because payment amounts never land on the \"\n \"booking record. That is the next build.\"],\n], [30*mm, 144*mm])\n\nsec(\"Last thing\")\np(\"You have been doing this properly. This week you caught your own mistake before the client did and \"\n \"corrected it inside twelve hours, which is more than the other contractor on this call can say about \"\n \"a four month overrun. Turn up, listen, ask your five, and write things down. That is the entire job \"\n \"tonight.\")\n\nSimpleDocTemplate(OUT, pagesize=A4, leftMargin=18*mm, rightMargin=18*mm, topMargin=14*mm,\n bottomMargin=12*mm, title=\"The Dogs Spot, call blueprint, 9 August\").build(st)\nprint(\"wrote\", OUT)\n\n\n=====FILE scripts/build.mjs =====\n// THE BUILD. engine/*.ts -> build/*.js, so the .mjs suites can import the same code the val runs.\n//\n// This file exists because the mapping used to live in my head and in shell history. A container\n// reclaim took the shell history with it. Anything a rebuild depends on is written down here.\n//\n// WHY IT TRANSPILES RATHER THAN BUNDLES. val.town runs seventeen separate files that import each\n// other, so at runtime there is exactly ONE copy of each module. A bundle per entry point gives\n// each entry its own private copy of everything below it: fill in a story slot and the engine's\n// copy would change while the story module's copy would not, and a test comparing the two would\n// pass on a system that is actually broken. So: every engine file is transpiled one-to-one, the\n// \".ts\" in each import specifier is rewritten to \".js\", and the friendly names the tests import\n// (build/engine.js, build/taper.js, build/stories.js) are thin re-export aliases onto that graph.\n// [was: `esbuild engine/puppy_path_v1.1.ts --outfile=build/engine.js` typed by hand, per file,\n// with --bundle on some and not others. A clean rebuild from source produced a build/ that\n// could not even be imported. The committed build/ had drifted from the source it came from.]\n//\n// Usage:\n// node scripts/build.mjs # engine/ -> build/\n// node scripts/build.mjs --src A --out B # build a copy of the tree somewhere else\nimport { spawnSync } from \"node:child_process\";\nimport { mkdirSync, existsSync, readdirSync, readFileSync, writeFileSync, rmSync } from \"node:fs\";\nimport { join, dirname, resolve, basename } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\n\n// Friendly name the tests import -> the engine source file behind it.\nexport const ALIASES = {\n engine: \"puppy_path_v1.1\",\n taper: \"taper-messages\",\n stories: \"kim-stories\",\n messages: \"puppy-messages\",\n};\n// Aliases that also need the source's default export forwarded.\nconst ALIAS_HAS_DEFAULT = new Set([\"engine\"]);\n\nconst arg = (flag, fallback) => {\n const i = process.argv.indexOf(flag);\n return i > -1 && process.argv[i + 1] ? process.argv[i + 1] : fallback;\n};\n\nexport function build({ src = join(ROOT, \"engine\"), out = join(ROOT, \"build\"), quiet = false } = {}) {\n const failures = [];\n if (!existsSync(src)) return [`source folder ${src} does not exist`];\n\n const sources = readdirSync(src).filter((f) => f.endsWith(\".ts\"));\n if (!sources.length) return [`no .ts files in ${src}: a build that builds nothing is not a build`];\n\n mkdirSync(out, { recursive: true });\n // Clear stale artifacts so a deleted source cannot leave a ghost module behind that tests import.\n for (const f of readdirSync(out)) if (f.endsWith(\".js\")) rmSync(join(out, f), { force: true });\n\n // 1. Transpile one-to-one. No bundling: the module graph is the point.\n const r = spawnSync(\"npx\", [\n \"--yes\", \"esbuild\",\n ...sources.map((f) => join(src, f)),\n \"--format=esm\",\n `--outdir=${out}`,\n \"--log-level=warning\",\n ], { encoding: \"utf8\" });\n if (r.status !== 0) return [`esbuild: ${(r.stderr || r.stdout || \"\").trim().slice(0, 800)}`];\n\n // 2. Rewrite import specifiers: \"./foo.ts\" -> \"./foo.js\". esbuild leaves them alone when it is\n // not bundling, and node will not resolve a .ts specifier.\n let rewritten = 0;\n for (const f of readdirSync(out).filter((x) => x.endsWith(\".js\"))) {\n const p = join(out, f);\n const before = readFileSync(p, \"utf8\");\n const after = before.replace(/(from\\s*[\"'])(\\.\\.?\\/[^\"']+?)\\.ts([\"'])/g, \"$1$2.js$3\");\n if (after !== before) { writeFileSync(p, after); rewritten++; }\n }\n\n // 3. Friendly-name aliases. Re-exports, not copies, so there is still one module underneath.\n for (const [alias, source] of Object.entries(ALIASES)) {\n if (!existsSync(join(out, `${source}.js`))) { failures.push(`alias ${alias}: ${source}.js was not built`); continue; }\n const lines = [\n `// Generated by scripts/build.mjs. Re-export, not a copy: one module underneath.`,\n `export * from \"./${source}.js\";`,\n ];\n if (ALIAS_HAS_DEFAULT.has(alias)) lines.push(`export { default } from \"./${source}.js\";`);\n writeFileSync(join(out, `${alias}.js`), lines.join(\"\\n\") + \"\\n\");\n }\n\n if (!quiet) {\n console.log(`transpiled ${sources.length} engine files -> ${out}`);\n console.log(`rewrote .ts import specifiers in ${rewritten} files`);\n console.log(`aliases: ${Object.entries(ALIASES).map(([a, s]) => `${a}.js -> ${s}.js`).join(\", \")}`);\n }\n return failures;\n}\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n const failures = build({ src: arg(\"--src\", join(ROOT, \"engine\")), out: arg(\"--out\", join(ROOT, \"build\")) });\n if (failures.length) { console.log(\"\\nBUILD FAILED:\\n\" + failures.join(\"\\n\")); process.exit(1); }\n console.log(\"\\nbuild ok\");\n}\n\n\n=====FILE scripts/bundle.mjs =====\n// THE BUNDLE. Everything that is not already on the val, in one restorable text file.\n//\n// WHY. The working container was reclaimed mid-session on 4 August and took the test suite, the\n// build script and the PDF generator with it. The engine survived only because val.town happened\n// to hold a complete copy. Nothing else had a second home. This gives the rest of the project one.\n//\n// The bundle is plain text with file markers, not an archive, for three reasons: it can be read by\n// a human who has lost everything else, it survives being pasted through a chat window, and it can\n// live on the val as an inert `file` next to the code it tests.\n//\n// Restore, from nothing, needing only node:\n// node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(\"BUNDLE.txt\",\"utf8\");\n// for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n// const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n// fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}'\n//\n// Usage: node scripts/bundle.mjs [--out handover/SOURCE-BUNDLE.txt]\nimport { readFileSync, writeFileSync, readdirSync, statSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { join, dirname, resolve, relative } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\n\n// engine/ is deliberately absent: the val holds it, verified file by file by scripts/deploy.mjs.\n// Everything here is the part that has no other home.\nconst INCLUDE = [\n { dir: \"tests\", match: /\\.(mjs|ts|json)$/ }, // .json since 9 Aug: tests/fixtures/ is source, not pulled data\n { dir: \"scripts\", match: /\\.(mjs|py)$/ },\n // The watchdog is a SEPARATE val, so scripts/deploy.mjs --check does not cover it and a reclaim\n // leaves no local copy. Its own val is a real second home, but the bundle should hold everything\n // that is not in the main val, and until now it quietly did not.\n { dir: \"watchdog\", match: /\\.ts$/ },\n];\nconst EXTRA = [\n // THE RESUME FILE FIRST. It is the only thing that stops the next session starting from scratch,\n // and on 7 August it would have been the single most valuable file to have had in the bundle.\n // AWAITING-AMIR is the ONLY channel for anything needing his approval, and it used to live only\n // in /mnt/user-data/outputs, which does not survive a container reclaim. A pending draft to the\n // client is not a derived artifact; losing it loses the work. Bundled since 9 Aug.\n \"handover/AWAITING-AMIR.md\",\n // HANDOFF.md IS AT THE REPO ROOT AND NOWHERE ELSE. On 9 Aug it briefly existed twice, at the root\n // and in handover/, and the bundle carried the handover/ one. A cold read caught it: the backup\n // held a THREE COMMIT OLD handoff whose §13 told the next session to fetch 13 of the 14 parts.\n // A backup of a stale copy of the recovery instructions is the worst possible failure here.\n // The guard below refuses to write a bundle while a second copy exists.\n \"HANDOFF.md\",\n // QUEUE.md is what §1 tells a new session to open after HANDOFF. It was not in the bundle, so a\n // reclaim destroyed the one file the handoff points at. MINED-*.md are the only receipts behind\n // the commercials in §3, including the Upwork contract number. money-page.html is the SOURCE of\n // Monday's client deliverable, and \"put the generator in the repo\" is useless when the repo is\n // not the durable thing. All four bundled since 9 Aug.\n \"QUEUE.md\",\n \"MINED-OLD-TREES.md\",\n \"MINED-HANDOVER.md\",\n \"reports/money-page.html\",\n \"reports/square-revenue-explainer.html\",\n \"reports/money-and-marketing.html\",\n \"BOARD-10-AUG.md\",\n \"AMIR-DO-THIS.md\",\n \"handover/KIM-MESSAGE-10-AUG-FINAL.txt\",\n \"BUILD-PLAN-10-AGENTS.md\",\n \"handover/bridge-main-v3.10.ts\",\n \"handover/RESUME.md\",\n \"handover/REGISTER-AUG7.md\",\n \"handover/SWEEP-7-AUG.md\",\n \"handover/AUTOPILOT.md\",\n \"handover/DRAFTS-WHILE-AWAY.md\",\n \"handover/MESSAGE-TO-KIM-7-AUG.txt\",\n \"reports/Friday-Report-7-Aug-2026.html\",\n \"handover/PLAN-TO-FINISH.md\",\n \"handover/SEND-TO-KIM.txt\",\n \"handover/REPLY-AUG5.txt\",\n \"handover/REGISTER-AUG5.md\",\n \"handover/AMIR_TODO.md\",\n \"handover/NURTURE-REVIEW-FOR-KIM.md\",\n \"handover/DEPOSIT-SPEC.md\",\n];\n// NOT INCLUDED, on purpose: the PDFs and the spreadsheet. They are DERIVED, and backing up a\n// derived artifact backs up the wrong thing. What has to survive is the recipe, and after the\n// 5 August reclaim it turned out the recipe did not — scripts/make_pdf.py reads an input shape it\n// never documented. scripts/make-pdfs.mjs is that missing step, and it is in the bundle.\n\nconst arg = (f, d) => { const i = process.argv.indexOf(f); return i > -1 && process.argv[i + 1] ? process.argv[i + 1] : d; };\nconst sha = (s) => createHash(\"sha256\").update(s).digest(\"hex\");\n\n// RECURSIVE since 9 Aug 2026. This used to read one level only, so tests/fixtures/ was skipped in\n// silence: the fixture the money suite reads was never in the bundle, and a tree restored after the\n// container loss that evening came back RED for a file the bundle had quietly declined to carry.\n// A backup that drops a directory without saying so is worse than one that fails loudly.\nconst files = [];\nconst walk = (abs, match, out) => {\n for (const f of readdirSync(abs).sort()) {\n const p = join(abs, f);\n if (statSync(p).isDirectory()) walk(p, match, out);\n else if (match.test(f)) out.push(relative(ROOT, p));\n }\n};\nfor (const { dir, match } of INCLUDE) walk(join(ROOT, dir), match, files);\nfor (const f of EXTRA) { try { statSync(join(ROOT, f)); files.push(f); } catch { /* not fatal */ } }\n\nif (!files.length) { console.log(\"BUNDLE FAILED: nothing to bundle. A bundle of nothing is worse than none.\"); process.exit(1); }\n\n// ONE HANDOFF, AT THE ROOT. See the note in EXTRA. Two copies means the bundle silently backs up\n// whichever one this list happens to name, and the other is the one being read and edited.\ntry {\n statSync(join(ROOT, \"handover/HANDOFF.md\"));\n console.log(\"BUNDLE FAILED: handover/HANDOFF.md exists. There must be exactly ONE handoff, at the repo root.\");\n console.log(\"On 9 Aug the duplicate meant the backup held a stale handoff that told the next session to fetch 13 of 14 parts.\");\n process.exit(1);\n} catch (e) { if (e?.code !== \"ENOENT\") throw e; }\n// And the thing that must never silently drop out again.\nif (!files.includes(\"HANDOFF.md\")) { console.log(\"BUNDLE FAILED: HANDOFF.md is not in the bundle.\"); process.exit(1); }\n\nconst MAX_PART = 78_000;\n// A SINGLE FILE CAN NOW EXCEED A WHOLE PART. negative-controls.mjs passed 80,000 characters on\n// 6 August — the val's own per-file ceiling — and the packer, which only ever splits BETWEEN\n// files, produced a part the val refused. A backup that cannot be written is not a backup, and\n// this is the file the whole disaster-recovery story rests on. Oversized files are cut into\n// numbered CHUNK records and rejoined on restore, in order.\nconst CHUNK = 60_000;\n\n// A file bigger than CHUNK becomes several records named \"#1\", \"#2\", ... which the\n// restore rejoins in order. Everything else is unchanged, so old parts and new parts read the same.\nconst records = [];\nconst manifest = [];\nfor (const f of files) {\n const content = readFileSync(join(ROOT, f), \"utf8\");\n manifest.push(` ${f.padEnd(38)} ${String(content.length).padStart(7)} bytes ${sha(content).slice(0, 12)}`);\n if (content.length <= CHUNK) { records.push({ name: f, body: content }); continue; }\n const n = Math.ceil(content.length / CHUNK);\n for (let i = 0; i < n; i++) records.push({ name: `${f}#${i + 1}`, body: content.slice(i * CHUNK, (i + 1) * CHUNK) });\n console.log(` (${f} is ${content.length.toLocaleString()} chars, split across ${n} records)`);\n}\nconst parts = records.map((r) => `\\n=====FILE ${r.name} =====\\n${r.body}`);\nconst recNames = records.map((r) => r.name);\n\n// val.town caps EVERY file at 80,000 characters, not just main.ts. So the bundle ships in parts,\n// split at FILE boundaries: each part is a complete, independently restorable bundle of whole\n// files. Nothing has to be concatenated in the right order, and losing one part costs you the\n// files in that part rather than the whole archive.\n\n\nconst header = (partNo, partCount, partFiles) => [\n \"THE DOGS SPOT — SOURCE BUNDLE\" + (partCount > 1 ? ` (part ${partNo} of ${partCount})` : \"\"),\n \"\",\n \"Everything in this project that does not already live on val.town. The engine is NOT here:\",\n \"the engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\",\n \"do not assume) are verified file by file by\",\n \"scripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\",\n \"\",\n \"RESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\",\n \"\",\n ` node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");`,\n ` for(const s of b.split(\"\\\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\\\n\");`,\n ` const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});`,\n ` fs.writeFileSync(f,c.replace(/\\\\n$/,\"\"))}' PART.txt`,\n \"\",\n \"A record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\",\n \"strip one trailing newline from the last. scripts/restore.mjs does this for you.\",\n \"\",\n \"Each part is complete in itself: whole files only, no reassembly, any order.\",\n \"\",\n \"Then: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\",\n \" node scripts/build.mjs (needs engine/ back from the val first)\",\n \" node tests/run-all.mjs\",\n \" node tests/negative-controls.mjs (proves the suite above can actually fail)\",\n \"\",\n `IN THIS PART (${partFiles.length} of ${files.length} files)`,\n ...partFiles.map((f) => manifest[files.indexOf(f)]),\n \"\",\n \"=\".repeat(96),\n].join(\"\\n\");\n\n// Pack files into parts, largest-first, each part under the cap.\nconst sizeOf = (i) => parts[i].length;\nconst packs = [];\nlet cur = [];\nlet curLen = 2000; // rough header allowance\nrecNames.forEach((f, i) => {\n if (cur.length && curLen + sizeOf(i) > MAX_PART) { packs.push(cur); cur = []; curLen = 2000; }\n cur.push(i); curLen += sizeOf(i);\n});\nif (cur.length) packs.push(cur);\n\nconst outBase = arg(\"--out\", join(ROOT, \"handover/SOURCE-BUNDLE\")).replace(/\\.txt$/, \"\");\nconst written = [];\npacks.forEach((idxs, n) => {\n const partFiles = idxs.map((i) => recNames[i]);\n const body = header(n + 1, packs.length, partFiles) + idxs.map((i) => parts[i]).join(\"\\n\") + \"\\n\";\n const out = packs.length === 1 ? `${outBase}.txt` : `${outBase}.part${n + 1}.txt`;\n writeFileSync(out, body);\n written.push({ out, body, partFiles });\n console.log(`${out} ${body.length.toLocaleString()} chars ${partFiles.length} files`);\n});\n\n// Prove the bundle round-trips before claiming it is a backup. A backup that has never been\n// restored is a hope, not a backup.\nconst roundTrip = new Map();\nfor (const { body } of written) {\n for (const s of body.split(\"\\n=====FILE \").slice(1)) {\n const i = s.indexOf(\" =====\\n\");\n const name = s.slice(0, i);\n const chunk = s.slice(i + 7);\n const m = /^(.*)#(\\d+)$/.exec(name);\n // ONE trailing newline comes from the join between records, whatever the chunk itself ends\n // with, so stripping exactly one recovers the chunk byte-for-byte.\n if (m) roundTrip.set(m[1], (roundTrip.get(m[1]) ?? \"\") + chunk.replace(/\\n$/, \"\"));\n else roundTrip.set(name, chunk.replace(/\\n$/, \"\"));\n }\n}\nconst broken = [];\nfor (const f of files) {\n const original = readFileSync(join(ROOT, f), \"utf8\");\n const restored = roundTrip.get(f);\n if (restored == null) broken.push(`${f}: missing from every part`);\n else if (sha(restored) !== sha(original)) broken.push(`${f}: does not round-trip (${sha(original).slice(0, 8)} -> ${sha(restored).slice(0, 8)})`);\n}\nconst over = written.filter((w) => w.body.length > 80_000).map((w) => w.out);\nif (over.length) { console.log(`\\nOVER THE 80,000 CHARACTER VAL LIMIT: ${over.join(\", \")}`); process.exit(1); }\nif (broken.length) { console.log(\"\\nROUND-TRIP FAILED, this is not a backup:\\n\" + broken.join(\"\\n\")); process.exit(1); }\nconsole.log(`round-trip verified: all ${files.length} files restore byte-for-byte across ${packs.length} part(s)`);\n\n",[369],"6a13172e-be22-4953-a12c-57e2e05c107d",["D",1786482180637],[28],"fc94bc53-7ba9-4a58-8f03-3bc1f7b25d9e","SOURCE-BUNDLE.part7.txt","771fe81c-91b7-11f1-b53b-1607ee4eb77e",765,["D",1786482180035],30,"THE DOGS SPOT — SOURCE BUNDLE (part 7 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (1 of 65 files)\n\n\n================================================================================================\n=====FILE tests/negative-controls.mjs#1 =====\n// NEGATIVE CONTROLS. The suite that tests the suite.\n//\n// THE RULE: a check that cannot fail is not a check. This project has already shipped three of\n// them — an audit that matched zero candidates, a spelling check that scanned zero of the strings\n// it claimed to cover, and a cross-artifact check whose whitelist was three words long. All three\n// reported \"all clear\" for days. None of them could ever have gone red.\n//\n// So every control below does the same four things:\n// 1. copies the whole tree somewhere disposable (the real tree is never touched),\n// 2. injects ONE specific fault into the SOURCE,\n// 3. rebuilds and runs the ONE suite that claims to catch it,\n// 4. demands that suite go red ON THE NAMED TEST.\n//\n// Step 4 is the part that matters. \"The suite went red\" is not good enough: a typo in the\n// injection would also make it go red, and then the control would be passing for the wrong reason.\n// A control only passes when the specific test that owns that guarantee is the one that fails.\n//\n// Run: node tests/negative-controls.mjs\nimport { cpSync, rmSync, readFileSync, writeFileSync, mkdtempSync, existsSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { spawnSync } from \"node:child_process\";\nimport { join, dirname, resolve } from \"node:path\";\nimport { tmpdir } from \"node:os\";\nimport { fileURLToPath } from \"node:url\";\n\nconst ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\n\n// ---------------------------------------------------------------------------------------------\n// THE CONTROLS. Each says: break THIS, and THAT test must be the one that notices.\n// ---------------------------------------------------------------------------------------------\nconst CONTROLS = [\n {\n name: \"a service she does not offer creeps back into a message\",\n file: \"engine/puppy-messages.ts\",\n // A real message body, not a comment. [was: `find: \"Kim\"`, which landed on line 17 of the\n // file header. The test correctly ignored it and the control read as \"the check is blind\".\n // A control that injects a fault the system was never claiming to catch proves nothing.]\n find: \"that's not a behavior problem\",\n replace: \"that's not a behavior problem, and our daycare helps\",\n once: true,\n suite: \"kim-copy.test.mjs\",\n mustFail: \"K-b daycare\",\n },\n {\n name: \"British spelling creeps back into customer copy\",\n file: \"engine/taper-messages.ts\",\n find: \"your dog\",\n replace: \"your favourite dog\",\n once: true,\n suite: \"kim-copy.test.mjs\",\n mustFail: \"K-d no British spelling\",\n },\n {\n name: \"the dog-name placeholder comes back after Kim had it removed\",\n file: \"engine/taper-messages.ts\",\n find: \"your dog\",\n replace: \"{{DOG_NAME}}\",\n once: true,\n suite: \"kim-copy.test.mjs\",\n mustFail: \"K-a no dog-name placeholder\",\n },\n {\n name: \"an em-dash reaches a customer\",\n file: \"engine/taper-messages.ts\",\n find: \"your dog\",\n replace: \"your dog — yes\",\n once: true,\n suite: \"kim-copy.test.mjs\",\n mustFail: \"K-g no em-dashes\",\n },\n {\n name: \"a text message grows past the segment limit\",\n file: \"engine/taper-messages.ts\",\n find: \"Dogs repeat what pays.\",\n replace: \"Dogs repeat what pays. \" + \"Padding that pushes this text well past three hundred and twenty characters so the limit check has something real to catch, because a limit that is never approached is never tested and the first time it matters is the day it silently costs money.\",\n once: true,\n suite: \"sms-length.test.mjs\",\n mustFail: \"T1 no SMS exceeds 320\",\n },\n {\n name: \"somebody writes a story into a slot instead of waiting for Kim\",\n file: \"engine/kim-stories.ts\",\n find: ` lands: \"Slow track week 1 — the adolescence email\",\\n story: null,`,\n replace: ` lands: \"Slow track week 1 — the adolescence email\",\\n story: \"A lab called Buster went through it and came out fine.\",`,\n once: true,\n suite: \"stories.test.mjs\",\n mustFail: \"S1 there are eight slots\",\n },\n {\n name: \"story resolution goes back to a single pass\",\n file: \"engine/kim-stories.ts\",\n // Restores the EXACT implementation that shipped the leak: one pass over well-formed ids and\n // nothing else. [was: only the loop bound was lowered to 1, which changed nothing — the guard\n // is the TOKEN_SHAPE sweep, not the loop. The control passed a fault the code still caught,\n // and would have reported \"the test is blind\" about a test that works.]\n find: ` let out = String(text ?? \"\");`,\n replace: ` return text\\n .replace(/\\\\{\\\\{STORY:([a-z_]+)\\\\}\\\\}/g, (_, id) => storyFor(id) ?? \"\")\\n .replace(/\\\\n{3,}/g, \"\\\\n\\\\n\")\\n .trim();\\n let out = String(text ?? \"\");`,\n suite: \"stories.test.mjs\",\n mustFail: \"S5 a nested or malformed token\",\n },\n {\n name: \"the slow track quietly loses a message\",\n file: \"engine/taper-messages.ts\",\n find: \"export const SLOW_FORTNIGHTLY_COUNT = 13;\",\n replace: \"export const SLOW_FORTNIGHTLY_COUNT = 12;\",\n once: true,\n suite: \"slow-track.test.mjs\",\n mustFail: \"T1 the track is the shape Kim signed off\",\n },\n {\n name: \"two text messages end up back to back\",\n file: \"engine/taper-messages.ts\",\n // [was: `id: \"slow_f-7\", channel: \"sms\"` inserted BEFORE the object's own channel property.\n // A later duplicate key wins in a JS object literal, so the injection was silently undone\n // and the control reported the test as blind. It was the control that was blind.]\n find: `id: \"slow_f-7\",\\n channel: \"email\",`,\n replace: `id: \"slow_f-7\",\\n channel: \"sms\",`,\n once: true,\n suite: \"slow-track.test.mjs\",\n mustFail: \"T13 two text messages never land back to back\",\n },\n {\n name: \"two messages end up sharing an id, so the journal cannot tell them apart\",\n file: \"engine/taper-messages.ts\",\n find: `id: \"slow_f-9\"`,\n replace: `id: \"slow_f-7\"`,\n once: true,\n suite: \"slow-track.test.mjs\",\n mustFail: \"T11 every slow-track message has an id\",\n },\n {\n name: \"a sales ask appears on the track Kim signed off as no-ask\",\n file: \"engine/taper-messages.ts\",\n find: \"Dogs repeat what pays.\",\n replace: \"Dogs repeat what pays. Book now.\",\n once: true,\n suite: \"taper-test.ts\",\n mustFail: \"no sales asks\",\n },\n {\n name: \"a story token names a slot that does not exist\",\n file: \"engine/taper-messages.ts\",\n find: \"{{STORY:vet_visits}}\",\n replace: \"{{STORY:vet_visit}}\",\n once: true,\n suite: \"taper-test.ts\",\n mustFail: \"every story token names a real slot\",\n },\n {\n name: \"a retried payment gets counted once per retry, inflating the backlog\",\n file: \"engine/facts.ts\",\n find: \"const byPayment = new Map\",\n replace: \"const byPayment = new Map0\",\n once: true,\n expectBuildFailure: false,\n suite: \"facts.test.mjs\",\n mustFail: \"F1 a payment logged many times\",\n },\n {\n name: \"a name with no value renders as 'Hi ,'\",\n file: \"engine/render.ts\",\n find: \"export function resolveFirstName\",\n replace: \"export function resolveFirstName_UNUSED\",\n once: true,\n suite: \"render.test.mjs\",\n mustFail: \"M1.1 blank names fall back\",\n },\n // ---------------------------------------------------------- cross-artifact: the check that has\n // been fake three times. Six controls, one per way it could go quietly blind again.\n {\n name: \"a sentence stating a number about her system is added and nothing vouches for it\",\n file: \"handover/SEND-TO-KIM.txt\",\n find: \"Nothing has sent to anybody.\",\n replace: \"Seventeen contacts are in the sequence now. Nothing has sent to anybody.\",\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X2 every sentence stating a number\",\n },\n {\n name: \"the prose is edited and the registry is left behind (the Square failure, exactly)\",\n file: \"handover/SEND-TO-KIM.txt\",\n find: \"The first three weeks are attached, six pages\",\n replace: \"The first three weeks are attached, seven pages\",\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X3 every registry entry still points\",\n },\n {\n name: \"a live fact in the prose stops matching what the code computes\",\n file: \"tests/claims-registry.mjs\",\n find: \" stated: 41,\",\n replace: \" stated: 40,\",\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X5 every LIVE fact\",\n },\n {\n name: \"a pinned fact is dated in the future, so nobody can have read it\",\n file: \"tests/claims-registry.mjs\",\n find: 'source: \"GHL GET /products, location BQHJ19uohldYe3eqA0bl\",\\n readAt: \"2026-08-04\",',\n replace: 'source: \"GHL GET /products, location BQHJ19uohldYe3eqA0bl\",\\n readAt: \"2027-08-04\",',\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X6 every PINNED fact\",\n },\n {\n name: \"an exemption is downgraded to a shrug\",\n file: \"tests/claims-registry.mjs\",\n find: 'reason: \"\\'One thing\\' introduces a single observation. It counts nothing about her system.\",',\n replace: 'reason: \"n/a\",',\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X7 every PROSE exemption\",\n },\n {\n name: \"the coverage rule is weakened until it matches nothing\",\n file: \"tests/claims-registry.mjs\",\n find: \"export const HAS_SYSTEM_NOUN = /\",\n replace: \"export const HAS_SYSTEM_NOUN = /__never_matches_anything__/i; const _dead = /\",\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X9 the coverage rule can still see\",\n },\n {\n name: \"a number that drifts on its own is put into a message that cannot be re-read\",\n file: \"handover/SEND-TO-KIM.txt\",\n find: \"Nothing has sent to anybody.\",\n replace: \"You have 34 opportunities open right now. Nothing has sent to anybody.\",\n suite: \"cross-artifact.test.mjs\",\n mustFail: \"X10 the message that went to Kim\",\n },\n // ------------------------------------------------------- the comment-blindness controls. These\n // exist because a check passed on a `[was: ...]` note explaining the very call it forbade.\n {\n name: \"a forbidden call is put back, and a comment is NOT enough to satisfy the check\",\n file: \"engine/dashboard.ts\",\n find: \"const wdCadence = wdTracksTrigger ? observedCadenceMin(wdAuto) : null;\",\n replace: \"const wdCadence = observedCadenceMin(wd?.history);\",\n suite: \"dashboard.test.mjs\",\n mustFail: \"D2b.1a a rhythm is only ever measured\",\n },\n {\n name: \"the forbidden call appears ONLY inside a comment, and the check must stay green\",\n file: \"engine/dashboard.ts\",\n find: \" const wdAuto: string[] | null =\",\n replace: \" // note: observedCadenceMin(wd?.history) is what this used to be\\n const wdAuto: string[] | null =\",\n suite: \"dashboard.test.mjs\",\n mustFail: null, // INVERTED: this one must NOT go red. See runControl.\n mustStayGreen: true,\n },\n {\n name: \"the comment stripper is neutered, so structural checks read prose again\",\n file: \"tests/_harness.mjs\",\n // Neutered for LINE comments only, so codeOnly's own zero-stripped guard still sees the block\n // comments go and does not throw. [was: `if (false)`, which stripped nothing at all and made\n // codeOnly throw — the control then reported \"it crashed rather than caught anything\", which\n // was true and useless. A control has to break the thing under test, not its smoke alarm.]\n find: 'if (t.startsWith(\"//\") || t.startsWith(\"*\")) { removed++; out.push(\"\"); continue; }',\n replace: 'if (t.startsWith(\"*\")) { removed++; out.push(\"\"); continue; }',\n suite: \"dashboard.test.mjs\",\n mustFail: \"D2b.1a a rhythm is only ever measured\",\n },\n {\n name: \"the watchdog goes back to being graded on when it was last poked\",\n file: \"engine/dashboard.ts\",\n find: \" const wdNeverRanItself = wdTracksTrigger && wdAuto.length === 0;\",\n replace: \" const wdNeverRanItself = false;\",\n suite: \"dashboard.test.mjs\",\n mustFail: \"D2b.1a a rhythm is only ever measured\",\n },\n {\n name: \"the practice-mode send guard is deleted from the email sender\",\n file: \"engine/puppy_path_v1.1.ts\",\n find: ' assertSendAllowed(contactId, \\\"email\\\");\\n',\n replace: \"\",\n suite: \"detect.test.mjs\",\n mustFail: \"G1 both senders open by asserting the send is allowed\",\n // The FIRST message anyone enrolled receives is an email, so the email guard is the one that\n // matters most and it had no control of its own. The sms control below proved only the sms half.\n },\n {\n name: \"the practice-mode send guard is deleted from the sms sender\",\n file: \"engine/puppy_path_v1.1.ts\",\n find: ' assertSendAllowed(contactId, \\\"sms\\\");\\n',\n replace: \"\",\n suite: \"detect.test.mjs\",\n mustFail: \"G1 both senders open by asserting the send is allowed\",\n },\n {\n name: \"a system that has never run on its own gets described as merely late\",\n file: \"engine/cadence.ts\",\n find: \"Nothing on a schedule has been recorded in that time.\",\n replace: \"It runs about every 95 minutes and it is on time.\",\n // [was: it injected over the pre-5-Aug sentence \"Nothing has started it on its own, which\n // means its timer is not firing.\" That text survives only inside a comment now, so the\n // injection edited a comment and the suite rightly stayed green. Retargeted at the sentence\n // the code actually returns today.]\n suite: \"cadence.test.mjs\",\n mustFail: \"C5 a system that has never started itself\",\n },\n {\n name: \"a fresh, unmeasured schedule claim is written into the log Kim reads\",\n file: \"engine/worklog.ts\",\n find: ' {\\n at: \"2026-08-05\",',\n replace: ' {\\n at: \"2026-08-05\",\\n kind: \"built\",\\n what: \"The reminder system now checks your calendar every 15 minutes and sends what is due.\",\\n evidence: \"Built and deployed.\",\\n },\\n {\\n at: \"2026-08-05\",',\n suite: \"dashboard.test.mjs\",\n mustFail: \"D1.6 nothing in the log claims a schedule\",\n },\n {\n name: \"the go-live blocker goes back to quoting a scan size instead of a live count\",\n file: \"engine/decisions.ts\",\n find: \" (c.puppyTagSentence ?? \",\n replace: \" (\\\"Separately, 1,200 of your most recent contacts were checked and not one carries the tag.\\\" ?? \",\n suite: \"dashboard.test.mjs\",\n mustFail: \"D2b.4 no decision hardcodes a live number\",\n },\n {\n name: \"a failed tag read renders as though the tagging had been confirmed\",\n file: \"engine/decisions.ts\",\n find: '\"The mark our system watches for could not be counted just now, so treat the tagging step as unconfirmed rather than done.\"',\n replace: '\"Nothing carries the tag.\"',\n suite: \"dashboard.test.mjs\",\n mustFail: \"D2b.4 no decision hardcodes a live number\",\n },\n {\n name: \"a tag count that could not be read is rendered as a confident zero\",\n file: \"engine/facts.ts\",\n find: 'return \"We could not read your contact records just now, so this says nothing rather than a zero worth trusting.\";',\n replace: 'return \"0 of your contacts are marked as a puppy inquiry.\";',\n suite: \"facts.test.mjs\",\n mustFail: \"F11 the tag sentence counts the WHOLE base\",\n },\n {\n name: \"a 'how we know' line claims a bigger scope than was actually measured\",\n file: \"engine/decisions.ts\",\n find: '\"Sixty-two of your calls were checked from your most recently active conversations: 54',\n replace: '\"Every call in your account was checked on 5 August. Of them, 54',\n // [was: it looked for the K16 evidence text as written on the morning of 5 Aug. K16 was\n // rewritten that evening after the transcript correction, so the injection matched nothing\n // and the control was blind. Retargeted, and the injected sentence is kept number-free so\n // it exercises the date-is-not-a-denominator rule, not the easy case.]\n suite: \"dashboard.test.mjs\",\n mustFail: \"D1.7 no 'how we know' claims a bigger scope\",\n },\n // ------------------------------------------------------------ who gets nineteen months of mail\n {\n name: \"a dog described in years is read as a puppy again (the '3 years and 4 months' trap)\",\n file: \"engine/puppy-detect.ts\",\n find: \"(?:year|yr)s?\\\\b/);\",\n replace: \"(?:year|yr)s?[\\\\s-]*old/);\",\n suite: \"detect.test.mjs\",\n mustFail: \"N1 a dog described in years\",\n },\n {\n name: \"somebody asking to BUY a puppy is treated as a training inquiry\",\n file: \"engine/puppy-detect.ts\",\n find: \"[/\\\\b(purchase|buy|buying|sell|selling|for sale|breeder|adopt(?:ing)? a)\\\\b[^.]{0,40}\\\\bpupp/i,\",\n replace: \"[/\\\\bzzz_never_matches_anything\\\\b/i,\",\n suite: \"detect.test.mjs\",\n mustFail: \"N5 the three real false positives\",\n },\n {\n name: \"a contact with nothing written down is answered 'no' instead of 'unclear'\",\n file: \"engine/puppy-detect.ts\",\n find: 'return { contactId, name, confidence: \"unclear\", ageMonths: null, matched: [],',\n replace: 'return { contactId, name, confidence: \"no\", ageMonths: null, matched: [],',\n suite: \"detect.test.mjs\",\n mustFail: \"N8 an empty record is 'unclear'\",\n },\n {\n name: \"the half of the contact base with nothing written down stops being reported\",\n file: \"engine/puppy-detect.ts\",\n find: \" if (s.noText) {\",\n replace: \" if (false) {\",\n suite: \"detect.test.mjs\",\n mustFail: \"N12 the blind spot is in the output\",\n },\n {\n name: \"the classifier grows the ability to tag somebody\",\n file: \"engine/puppy-detect.ts\",\n find: \"export function inquiryText(contact: unknown): string {\",\n replace: 'async function applyTag(id: string) { await fetch(`https://services.leadconnectorhq.com/contacts/${id}/tags`, { method: \"POST\" }); }\\nexport function inquiryText(contact: unknown): string {',\n suite: \"detect.test.mjs\",\n mustFail: \"N13 the classifier has no way to reach the CRM\",\n },\n {\n name: \"the hourly scan starts storing what people wrote about their dogs\",\n file: \"engine/puppy-detect.ts\",\n find: \" clearIds: vs.filter((v) => v.confidence === \\\"clear\\\").map((v) => v.contactId),\",\n replace: \" clearIds: vs.filter((v) => v.confidence === \\\"clear\\\").map((v) => `${v.contactId} ${v.name} ${v.reason}`),\",\n suite: \"detect.test.mjs\",\n mustFail: \"N15 it carries ids only\",\n },\n {\n name: \"a dry pass that has not run for days keeps showing its old numbers as current\",\n file: \"engine/puppy-detect.ts\",\n find: \" if (hours < 6) return null;\",\n replace: \" return null;\",\n suite: \"detect.test.mjs\",\n mustFail: \"N17 a dry pass that stopped running\",\n },\n {\n name: \"an edit-in-place in her CRM stops being noticed (only adds and removes are)\",\n file: \"engine/registry-diff.ts\",\n find: \" const edited = nowIds.filter((i) => i in a && a[i] !== b[i]).map((i) => `${a[i]} -> ${b[i]}`);\",\n replace: \" const edited: string[] = [];\",\n suite: \"registry.test.mjs\",\n mustFail: \"G1 an edit in place is caught\",\n },\n {\n name: \"an empty API response overwrites a good baseline and fires a false 'everything removed'\",\n file: \"engine/registry-diff.ts\",\n find: \" return nowCount === 0 && (prevCount ?? 0) > 0;\",\n replace: \" return false;\",\n suite: \"registry.test.mjs\",\n mustFail: \"G6 an empty list on a good response\",\n },\n {\n name: \"the change alarm quietly truncates its list without saying how much it dropped\",\n file: \"engine/registry-diff.ts\",\n find: \" if (more > 0) bits.push(`${more} more not listed here.`);\",\n replace: \" if (false) bits.push(``);\",\n suite: \"registry.test.mjs\",\n mustFail: \"G7 the sentence is generated from the change\",\n },\n\n // -------------------------------------------------------------------------------------------\n // THE HOLIDAY DEPOSIT TRACKER. Every one of these faults ends with Kim asking a customer for\n // $50 they already paid, in her name, about money. That is why this module gets eight controls\n // rather than the usual two: the blast radius of a wrong answer here is a lost customer.\n // -------------------------------------------------------------------------------------------\n {\n name: \"a standing weekly booking starts counting as a holiday stay\",\n file: \"engine/holiday-deposits.ts\",\n // Real: \"Daycare Enzo\" is a recurring slot that lands inside EVERY holiday window. Drop this\n // filter and Kim is told a regular customer owes her a holiday deposit, eight times over.\n // [was: `if (e.isRecurring === true)`. Retargeted when the flag check was widened to cope\n // with her CRM sending \"true\" as a string.]\n find: \" if (truthy(e.isRecurring)) return false;\",\n replace: \" if (false) return false;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H4 a recurring weekly slot\",\n },\n {\n name: \"a customer's three dogs become three separate deposit questions\",\n file: \"engine/holiday-deposits.ts\",\n // Real: Achilles, Ghost and Chewy all drop off on 25 Nov for one person. Keying the group by\n // the booking title instead of the customer+day turns one $50 question into three.\n find: \" const key = `${e.contactId}|${day}`;\",\n replace: \" const key = `${e.contactId}|${day}|${e.title}`;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H6 three dogs on one day\",\n },\n {\n name: \"appointment times get parsed into Date objects and shift across midnight\",\n file: \"engine/holiday-deposits.ts\",\n // The plausible-looking \"tidy-up\" that moves a 25 Nov drop-off to the 24th or the 26th, which\n // silently drags bookings in and out of the window Kim is chasing.\n find: \" const d = startTime.slice(0, 10);\",\n replace: \" const d = new Date(startTime).toISOString().slice(0, 10);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H8 the local day is read off the string\",\n },\n {\n name: \"Thanksgiving stops being computed and gets typed in\",\n file: \"engine/holiday-deposits.ts\",\n // Kim was told it is worked out fresh each year so it cannot drift. This is that promise\n // being broken in the most ordinary way: someone hardcodes this year's date.\n find: \" const day = firstThu + 21;\",\n replace: \" const day = 26;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H1 Thanksgiving is the fourth Thursday\",\n },\n {\n name: \"one payment written five times gets counted five times\",\n file: \"engine/holiday-deposits.ts\",\n // Her real notes hold the SAME Square payment five times. Making the key unique per note —\n // which looks like a fix — reports $1,775 against a $355 payment.\n // [was: `find: \" const id = m[2];\"`, which was the single-format parser's line. When the\n // parser was rewritten to handle both live note formats the injection stopped matching, and\n // this control reported itself blind rather than passing on a fault it never applied. That\n // is the harness working: a control that silently stops injecting is the whole failure mode.]\n find: \" for (const m of body.matchAll(DIRECT)) add(Number(m[1].replace(/,/g, \\\"\\\")), m[2], n?.dateAdded ?? null, \\\"direct\\\");\",\n replace: \" for (const m of body.matchAll(DIRECT)) add(Number(m[1].replace(/,/g, \\\"\\\")), m[2] + (n?.dateAdded ?? \\\"\\\"), n?.dateAdded ?? null, \\\"direct\\\");\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H9 one payment written five times\",\n },\n {\n name: \"the balance figure gets read, and the duplicates disagree with each other\",\n file: \"engine/holiday-deposits.ts\",\n // The five duplicates say $355.00 then $0.00 four times. Read the balance and the answer\n // depends on which duplicate happened to be read last.\n // [was: aimed at the single-format parser's `const amount = ...` line, which no longer exists.\n // Retargeted onto the direct-format branch of the two-format parser.]\n find: \" const add = (amount: number, id: string, at: string | null, kind: \\\"direct\\\" | \\\"matched\\\") => {\",\n replace: \" const add = (amount: number, id: string, at: string | null, kind: \\\"direct\\\" | \\\"matched\\\") => {\\n const bal = /balance \\\\$([\\\\d,.]+)/.exec(String(notes?.[0]?.body ?? \\\"\\\"));\\n if (bal) amount = Number(bal[1].replace(/,/g, \\\"\\\"));\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H10 the contradictory balance figure\",\n },\n {\n name: \"an API hiccup becomes 'this person has not paid'\",\n file: \"engine/holiday-deposits.ts\",\n // The single worst thing this module could do. A failed read must stay unknown; collapsing it\n // into none_seen puts a paying customer on the chase list because the network blinked.\n find: ` return { stay, state: \"could_not_check\", amountSeen: 0,`,\n replace: ` return { stay, state: \"none_seen\", amountSeen: 0,`,\n once: true,\n then: {\n find: ` note: \"We could not read this person's payments just now, so this one is unknown. It is not a finding either way.\" };`,\n replace: ` note: \"No Square payment is on file, so this deposit is outstanding.\" };`,\n },\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H13 a failed read is never reported\",\n },\n {\n name: \"the read-only report grows a way to write to her CRM\",\n file: \"engine/holiday-deposits.ts\",\n // addTag() in this engine is not TEST_MODE guarded, and this account holds a workflow that\n // turns one tag into do-not-disturb on six channels. Read-only is structural here, not a\n // promise in a comment.\n find: \"export const DEPOSIT = 50;\",\n replace: \"export const DEPOSIT = 50;\\n\\nexport async function markDepositPaid(contactId: string) {\\n return fetch(`https://services.leadconnectorhq.com/contacts/${contactId}/tags`, { method: \\\"POST\\\" });\\n}\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H22 the module cannot write\",\n },\n {\n name: \"the parser goes back to knowing only one of the two Square note formats\",\n file: \"engine/holiday-deposits.ts\",\n // The version that shipped first. A customer whose only Square evidence is a backfill note\n // reads as \"no payment found\" and goes on the shortlist. Found live on 6 Aug.\n find: \" for (const m of body.matchAll(MATCHED))\",\n replace: \" if (false) for (const m of body.matchAll(MATCHED))\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H23 the backfill note format is money\",\n },\n {\n name: \"the same $35 under two payment ids gets added up to $70\",\n file: \"engine/holiday-deposits.ts\",\n // Over-counting is the quiet failure: it takes a real customer OFF the shortlist, so nobody\n // ever looks at them again.\n // [was: aimed at the one-for-one matcher, which was replaced by an idempotent amount check.]\n // [was: aimed at the amount-only fold, replaced when the collapse gained a date bound.]\n find: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount && withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS))) {\\n collapsed++;\\n continue;\\n }\",\n replace: \" if (false) {\\n collapsed++;\\n continue;\\n }\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H25 the same $35 under two ids\",\n },\n {\n name: \"only one of her CRM's two spellings of the status field is read\",\n file: \"engine/holiday-deposits.ts\",\n // Her account returns `appoinmentStatus` on 4 of 13 events alongside the correct key. They\n // agree today. The day they do not, a cancelled customer gets chased for a deposit.\n find: \" const states = [e.appointmentStatus, e.appoinmentStatus].map((s) => String(s ?? \\\"\\\").trim().toLowerCase());\",\n replace: \" const states = [e.appointmentStatus].map((s) => String(s ?? \\\"\\\").trim().toLowerCase());\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H28 her CRM's two spellings\",\n },\n\n // ---- the collector: the only part of the deposit feature that touches her CRM ---------------\n {\n name: \"the deposit job reads one boarding calendar instead of both\",\n file: \"engine/deposits.ts\",\n // A real customer has bookings on BOTH. Reading one silently halves the list, and a short\n // list looks exactly like a quiet holiday season.\n find: `export const BOARDING_CALENDARS = [\"wS5N8WN4BbzznaLjEg1N\", \"ZmmjQJszkRMUltfEbumB\"];`,\n replace: `export const BOARDING_CALENDARS = [\"wS5N8WN4BbzznaLjEg1N\"];`,\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D1 both drop-off calendars are asked\",\n },\n {\n name: \"a notes read that fails is recorded as 'no payments found'\",\n file: \"engine/deposits.ts\",\n // One character. It turns every network hiccup into a customer on Kim's chase list.\n find: \" } catch { pays = null; }\",\n replace: \" } catch { pays = []; }\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D6 a notes read that fails\",\n },\n {\n name: \"a CRM outage overwrites last night's real list with an empty one\",\n file: \"engine/deposits.ts\",\n // [was: aimed at the guard while it lived inside the HTTP handler. Extracting runCollection()\n // so the scheduled run and the manual run share one code path moved the line, and this\n // control reported itself blind on the next full pass rather than passing on nothing.]\n find: ` if (out.calendarsRead === 0) return { store: false, error: \"no calendar answered, so the stored list was left alone\" };`,\n replace: ` if (false) return { store: false };`,\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D31 every one of the four storage refusals\",\n },\n\n // ---- the card Kim actually reads -----------------------------------------------------------\n {\n name: \"a customer's name goes onto Kim's page without being escaped\",\n file: \"engine/dashboard.ts\",\n find: \"`${escCell(who(r))}\",\n replace: \"`${who(r)}\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.7 a customer's name is escaped\",\n },\n {\n name: \"a failed read of the deposit list renders as 'nothing collected yet'\",\n file: \"engine/dashboard.ts\",\n // The two states look almost the same on screen and mean opposite things: one is \"we have not\n // looked\", the other is \"we looked and could not see\". Collapsing them is how a page lies.\n find: \" if (!readOk) {\",\n replace: \" if (false) {\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.1 a failed read of the list\",\n },\n {\n name: \"the deposit list stops putting the jobs to do at the top\",\n file: \"engine/dashboard.ts\",\n find: \" .sort((a, b) => ((order[a.state] ?? 9) - (order[b.state] ?? 9)) || day(a).localeCompare(day(b)));\",\n replace: \" .slice();\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.3 the jobs to do come first\",\n },\n {\n name: \"the list is 'held back' in words while the names stay on the page\",\n file: \"engine/dashboard.ts\",\n find: \"${dep.feedDead ? \\\"\\\" : rows.length ?\",\n replace: \"${true ? \\\"\\\" : \\\"\\\"}${rows.length ?\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.9 when the payment feed is called dead\",\n },\n {\n name: \"two quiet customers are enough to declare Square broken\",\n file: \"engine/holiday-deposits.ts\",\n // Found by watching the first live run rather than by reading the code: the switch fired on a\n // sample of two and would have told Kim her payment feed had stopped.\n // [was: aimed at the parameter name `allPayments`, which changed when the switch started\n // being handed a per-customer Map instead of an array of arrays.]\n find: \" return lists.length >= minSample && lists.every((p) => p.length === 0);\",\n replace: \" return lists.length > 0 && lists.every((p) => p.length === 0);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H19b two quiet customers\",\n },\n\n // ---- everything the adversarial pass of 6 Aug turned up ------------------------------------\n {\n name: \"the Thanksgiving window goes back to arithmetic on the day number\",\n file: \"engine/holiday-deposits.ts\",\n // Produces \"2030-11-31\", a date that does not exist, and prints it to Kim as \"Nov 31\".\n find: \" { name: \\\"Thanksgiving\\\", from: shiftDays(t, -3), to: shiftDays(t, 3) },\",\n replace: \" { name: \\\"Thanksgiving\\\", from: `${year}-11-${String(Number(t.slice(8)) - 3).padStart(2, \\\"0\\\")}`, to: `${year}-11-${String(Number(t.slice(8)) + 3).padStart(2, \\\"0\\\")}` },\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H30 every Thanksgiving window\",\n },\n {\n name: \"an appointment time sent as a number silently drops every stay\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (typeof startTime === \\\"number\\\" && Number.isFinite(startTime)) {\",\n replace: \" if (false) {\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H31 an appointment time sent as a number\",\n },\n {\n name: \"one trailing space on a status makes a cancelled booking chaseable\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const states = [e.appointmentStatus, e.appoinmentStatus].map((s) => String(s ?? \\\"\\\").trim().toLowerCase());\",\n replace: \" const states = [e.appointmentStatus, e.appoinmentStatus].map((s) => String(s ?? \\\"\\\").toLowerCase());\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H32 her CRM's sloppier shapes\",\n },\n {\n name: \"the payment parser goes back to one payment per note\",\n file: \"engine/holiday-deposits.ts\",\n find: \" for (const m of body.matchAll(DIRECT)) add(Number(m[1].replace(/,/g, \\\"\\\")), m[2], n?.dateAdded ?? null, \\\"direct\\\");\",\n replace: \" const one = DIRECT.exec(body); DIRECT.lastIndex = 0;\\n if (one) add(Number(one[1].replace(/,/g, \\\"\\\")), one[2], n?.dateAdded ?? null, \\\"direct\\\");\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H33 four ways of writing a payment\",\n },\n {\n name: \"the payments Kim needs in order to judge a row are left off it\",\n file: \"engine/holiday-deposits.ts\",\n // [was: aimed at the deposit-window bounds, which were removed when the module stopped\n // guessing what a payment was for. The half of that guarantee that still lives here is that\n // every payment near the stay is SHOWN, with its date, so Kim can settle a row in a glance.]\n find: \"const listPayments = (ps: Payment[]) =>\",\n replace: \"const listPayments = (ps: Payment[]) => \\\"\\\"; const listPaymentsUnused = (ps: Payment[]) =>\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H34 an unrelated payment months before\",\n },\n {\n name: \"a booking with no date is settled by a payment from years ago\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (!stay.bookedAt) {\\n return { stay, state: \\\"could_not_check\\\", amountSeen: 0,\",\n replace: \" if (false) {\\n return { stay, state: \\\"could_not_check\\\", amountSeen: 0,\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H35 a booking with no record\",\n },\n {\n name: \"a dog boarded across Christmas is invisible because it arrived on the 19th\",\n file: \"engine/holiday-deposits.ts\",\n // [was: aimed at a line inside the grouping loop. The window decision moved after the loop\n // when pick-ups started being attached before it, and this control reported itself blind.]\n find: \" const win = windowForRange(s.day, s.until, windows);\",\n replace: \" const win = windowFor(s.day, windows);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H36 a stay that starts before the window\",\n },\n {\n name: \"a 200 with no notes list reads as 'no payment found'\",\n file: \"engine/deposits.ts\",\n find: \" pays = notes === null ? null : parseSquarePayments(notes);\",\n replace: \" pays = parseSquarePayments(notes ?? []);\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D13 a 200 with no notes list\",\n },\n {\n name: \"a 200 with no events list counts as a calendar successfully read\",\n file: \"engine/deposits.ts\",\n find: \" if (!Array.isArray(d?.events)) throw new Error(\\\"no events array in the response\\\");\\n for (const e of d.events) events.push(e as CalEvent);\",\n replace: \" for (const e of d?.events ?? []) events.push(e as CalEvent);\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D14 a 200 with no events list\",\n },\n {\n name: \"a query string is sent to the notes endpoint, which rejects every one of them\",\n file: \"engine/deposits.ts\",\n // [was: aimed at a paging loop that never worked. Her CRM 422s on any parameter here, so the\n // loop turned every customer into a failed read. It shipped and was caught live in 90\n // seconds; the control now guards the URL rather than the loop that should never have existed.]\n find: \" const d = await io.get(`/contacts/${contactId}/notes`, \\\"2021-07-28\\\");\",\n replace: \" const d = await io.get(`/contacts/${contactId}/notes?limit=100`, \\\"2021-07-28\\\");\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D15 the notes endpoint is asked exactly\",\n },\n {\n name: \"a notes list at the cap is treated as complete\",\n file: \"engine/deposits.ts\",\n find: \" if (d.notes.length >= NOTES_UNPAGEABLE_CAP) return null;\",\n replace: \" if (false) return null;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D16 a notes list at the cap\",\n },\n {\n name: \"the dead-feed switch goes back to comparing whole payment histories\",\n file: \"engine/deposits.ts\",\n // Restores the version where any customer with an old Square note kept the switch quiet, so\n // it could only ever fire for people who had never paid by card at all. Inert, and green.\n // [was: `perContact.push(paymentsForStay(...))`, retargeted when the switch moved to a\n // per-customer Map and the window function was renamed.]\n find: \" const near = own.filter((s) => s.bookedAt).flatMap((s) => paymentsNearStay(s, pays!));\",\n replace: \" const near = pays;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D18 five quiet customers with old payments\",\n },\n {\n name: \"an old deposit list is presented as if it were checked today\",\n file: \"engine/dashboard.ts\",\n // Every row is written in the present tense. A four-day-old list still says \"no Square\n // payment is on file\" about somebody who paid yesterday.\n find: \" : ageH > 36\",\n replace: \" : false && ageH > 36\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.11 a list old enough to be wrong\",\n },\n {\n name: \"the length of a stay is read off the ten-minute handover slot instead of the pick-up\",\n file: \"engine/holiday-deposits.ts\",\n // A drop-off appointment runs 12:50 to 13:00. Its endTime is the end of the handover, not the\n // end of the boarding, so judging a stay by it makes everyone who leaves before the holiday\n // starts invisible.\n find: \" const withEnds = attachPickups([...by.values()], pickups);\",\n replace: \" const withEnds = [...by.values()];\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D19 a stay that boards over Christmas\",\n },\n {\n name: \"the pick-up calendars stop being read at all\",\n file: \"engine/deposits.ts\",\n find: `export const PICKUP_CALENDARS = [\"1FnbK7pQp1ViZWIzX9SR\", \"bN6wWGJa0qKq0QGRg4CC\"];`,\n replace: `export const PICKUP_CALENDARS: string[] = [];`,\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D1 both drop-off calendars are asked\",\n },\n {\n name: \"a contact that looks like a test record is presented as a customer to chase\",\n file: \"engine/dashboard.ts\",\n find: \"${looksLikeTestRecord(who(r)) ?\",\n replace: \"${false ?\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.13 a booking that looks like somebody testing\",\n },\n {\n name: \"a multi-night stay is shown as a single day\",\n file: \"engine/dashboard.ts\",\n find: \" const stayDates = (r: DepositRow) => r.until && day(r) && r.until > r.day\",\n replace: \" const stayDates = (r: DepositRow) => false && r.until && day(r) && r.until > r.day\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.10 a multi-night stay shows both ends\",\n },\n {\n name: \"any payment big enough clears the deposit, whatever it was actually for\",\n file: \"engine/holiday-deposits.ts\",\n // Restores the guess that cost her money twice: a $355 training package or a $240 invoice\n // marks the stay settled and the customer is never looked at again.\n // [was: aimed at a flat exact-$50 filter, which became a per-dog amount check.]\n // [was: aimed at statusFor's own filter, which moved into qualifyingPayments when the\n // settle rule and the debit rule were merged into one function.]\n find: \" const whole = near.find((p) => p.amount === due);\",\n replace: \" const whole = near.find((p) => p.amount >= due);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H14 a card payment for exactly the deposit\",\n },\n {\n name: \"the earliest pick-up ends a stay, so one dog going home early deletes it\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const cand = cands.length ? cands[cands.length - 1] : null;\",\n replace: \" const cand = cands.length ? cands[0] : null;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H41 the LATEST pick-up ends a stay\",\n },\n {\n name: \"a stay reaches forward and takes the next booking's pick-up\",\n file: \"engine/holiday-deposits.ts\",\n // [was: aimed at the pre-bound filter line. Retargeted onto the next-booking bound itself.]\n find: \" && (!nextDrop || d <= nextDrop));\",\n replace: \");\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H42 a stay never reaches forward\",\n },\n {\n name: \"a cancelled pick-up is allowed to stretch a stay into a holiday window\",\n file: \"engine/holiday-deposits.ts\",\n find: \" for (const p of pickups) {\\n if (!eligible(p)) continue;\",\n replace: \" for (const p of pickups) {\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H43 a cancelled or recurring pick-up\",\n },\n {\n name: \"a real boarding booking is thrown away for having the word daycare in its title\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (/\\\\bday\\\\s?care\\\\b/i.test(title) && !/\\\\bboarding\\\\b/i.test(title)) return false;\",\n replace: \" if (/\\\\bday\\\\s?care\\\\b/i.test(title)) return false;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H44 a real boarding booking\",\n },\n {\n name: \"a customer whose surname is Tester is labelled a test record on Kim's screen\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return /\\\\b(test|testing|dummy|zztest|do not use|ignore)\\\\b/i.test(String(name ?? \\\"\\\"));\",\n replace: \" return /\\\\b(test|testing|tester|dummy|zztest|do not use|ignore)\\\\b/i.test(String(name ?? \\\"\\\"));\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H45 the test-record label\",\n },\n {\n name: \"the dead-feed sentence goes back to claiming it checked nobody\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (checked <= 0) {\",\n replace: \" if (false) {\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H46 the dead-feed sentence\",\n },\n {\n name: \"the kill switch counts bookings again, so one regular can suppress the whole card\",\n file: \"engine/deposits.ts\",\n // [was: aimed at the per-stay loop, which became a per-customer loop. The fault it injects\n // now is the same one in the new shape: one sample entry per BOOKING.]\n find: \" perCustomer.set(contactId, near);\",\n replace: \" for (const s of own) perCustomer.set(`${contactId}|${s.day}`, s.bookedAt ? paymentsNearStay(s, pays!) : []);\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D20 one regular with five holiday bookings\",\n },\n {\n name: \"the unknown count on the card counts customers while the table counts rows\",\n file: \"engine/dashboard.ts\",\n find: \" const unknownRows = rows.filter((r) => r.state === \\\"could_not_check\\\").length;\",\n replace: \" const unknownRows = dep.readFailures;\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.14 the unknown count on the card\",\n },\n {\n name: \"a pick-up calendar that did not answer is not mentioned to Kim at all\",\n file: \"engine/dashboard.ts\",\n find: \" const noPickups = (dep.pickupsAsked ?? 0) && (dep.pickupsRead ?? 0) < (dep.pickupsAsked ?? 0)\",\n replace: \" const noPickups = false && (dep.pickupsAsked ?? 0) && (dep.pickupsRead ?? 0) < (dep.pickupsAsked ?? 0)\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.15 a pick-up calendar that did not answer\",\n },\n {\n name: \"one $50 payment settles every holiday stay that customer has\",\n file: \"engine/holiday-deposits.ts\",\n // The most expensive bug of the day: a regular books Thanksgiving and Christmas in one call,\n // pays one deposit, and both rows go green. Kim is owed $100 and sees nothing to chase.\n find: \" for (const p of qualifyingPayments(s, available)) spent.add(p.id);\",\n replace: \" qualifyingPayments(s, available);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H48 one $50 deposit settles ONE stay\",\n },\n {\n name: \"the search window stretches past the stay, so any later payment settles it\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const hi = shiftDays(stay.until || stay.day, 1);\",\n replace: \" const hi = shiftDays(stay.until || stay.day, 365);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H49 a payment after the dogs go home\",\n },\n {\n name: \"a stay of any length is accepted, so an orphan pick-up drags a boarding into a holiday\",\n file: \"engine/holiday-deposits.ts\",\n find: \" d >= s.day && d <= shiftDays(s.day, MAX_STAY_DAYS) && (!nextDrop || d <= nextDrop));\",\n replace: \" d >= s.day && (!nextDrop || d <= nextDrop));\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H42 a stay never reaches forward\",\n },\n {\n name: \"a pick-up on the same day as the next booking deletes the stay it ends\",\n file: \"engine/holiday-deposits.ts\",\n find: \"(!nextDrop || d <= nextDrop));\",\n replace: \"(!nextDrop || d < nextDrop));\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D23 collecting one dog and boarding another\",\n },\n {\n name: \"the note about a single payment goes back to plural grammar\",\n file: \"engine/holiday-deposits.ts\",\n // [was: aimed at a ternary that moved inside the per-dog sentence.]\n // [was: aimed at a ternary the round-eight rewrite replaced.]\n find: \" ? `${others.length === 1 ? \\\"1 card payment is\\\" : `${others.length} card payments are`} on file around it: ${listPayments(others)}. Worth a look to see whether the deposit is ${others.length === 1 ? \\\"that one\\\" : \\\"among them\\\"}.`\",\n replace: \" ? `${others.length} card payments are on file around it: ${listPayments(others)}. Worth a look to see whether the deposit is among them.`\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H50 a lone payment that is not the deposit\",\n },\n {\n name: \"the headline stops counting the rows that have some card activity\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const n = none + partial;\",\n replace: \" const n = none;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H51 the headline counts every row\",\n },\n {\n name: \"a row with card activity but no $50 is coloured green and called settled\",\n file: \"engine/dashboard.ts\",\n find: ' partial: { label: \"Worth a look\", color: WARN },',\n replace: ' partial: { label: \"Payment on file\", color: GOOD },',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.16 a row with card activity\",\n },\n {\n name: \"a run where nobody could be read overwrites yesterday's real shortlist\",\n file: \"engine/deposits.ts\",\n find: ' if (out.rows.length > 0 && out.rows.every((r) => r.state === \"could_not_check\")) {',\n replace: \" if (false) {\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D21 a run where nobody's payments\",\n },\n {\n name: \"a booking with no date counts as a customer we checked and saw no money for\",\n file: \"engine/deposits.ts\",\n find: \" if (pays !== null && own.some((s) => s.bookedAt)) {\",\n replace: \" if (pays !== null) {\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D22 a booking with no date\",\n },\n {\n name: \"a deposit Square wrote twice settles two different stays\",\n file: \"engine/holiday-deposits.ts\",\n // The money bug re-entering through the collapse/allocate seam. Restores the version where\n // statusFor collapsed internally and the allocator only ever spent the surviving id.\n find: \" const money = collapseSameMoney(payments).kept;\",\n replace: \" const money = payments;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H52 a deposit Square wrote twice\",\n },\n {\n name: \"the money goes to whichever stay happens to be first in the array\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const ordered = [...stays].sort((a, b) => a.day.localeCompare(b.day) || key(a).localeCompare(key(b)));\",\n replace: \" const ordered = [...stays];\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H53 the money goes to the stay that came first\",\n },\n {\n name: \"the same $35 in both of Square's note formats is read as $70\",\n file: \"engine/holiday-deposits.ts\",\n // [was: not covered at all. H27 used a $50 pair, where amountSeen is the constant DEPOSIT and\n // the other-payments list is defined as everything that is NOT $50, so it could not fail.]\n // ANCHORED ON THE LINE BELOW IT, because there are now two identical lines — one in\n // qualifyingPayments and one in statusFor — and the harness injects at the first match, which\n // was the wrong one. The control reported the test blind; it was the control that was aiming\n // at the wrong function.\n find: \" const near = collapseSameMoney(paymentsNearStay(stay, opts.all ?? payments)).kept;\",\n replace: \" const near = paymentsNearStay(stay, opts.all ?? payments);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H27 the same $50 under two ids\",\n },\n {\n name: \"the season rolls over on Greenwich time, five hours early on 2 January\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const p = new Intl.DateTimeFormat(\\\"en-CA\\\", { timeZone: BUSINESS_TZ, year: \\\"numeric\\\", month: \\\"2-digit\\\", day: \\\"2-digit\\\" }).format(d);\\n return /^\\\\d{4}-\\\\d{2}-\\\\d{2}$/.test(p) ? p : String(nowIso).slice(0, 10);\",\n replace: \" return String(nowIso).slice(0, 10);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H54 the season turns over on her clock\",\n },\n {\n name: \"other money on a settled row stops being shown\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const restNote = (others.length\",\n replace: \" const restNote = (false && others.length\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H55 money on a settled row\",\n },\n {\n name: \"the drop-off query stops at the window edge, blinding the next-booking bound\",\n file: \"engine/deposits.ts\",\n find: \"&endTime=${dayMs(shiftDays(to, LOOKAHEAD_DAYS))}`;\\n const d = await io.get(`/calendars/events?${q}`, \\\"2021-04-15\\\");\\n // A 200 that does not carry an events ARRAY\",\n replace: \"&endTime=${dayMs(to) + 86_399_000}`;\\n const d = await io.get(`/calendars/events?${q}`, \\\"2021-04-15\\\");\\n // A 200 that does not carry an events ARRAY\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D24 the collector asks for the period\",\n },\n {\n name: \"the collector stops looking before the window for stays that run into it\",\n file: \"engine/deposits.ts\",\n find: \"export const LOOKBACK_DAYS = 21;\",\n replace: \"export const LOOKBACK_DAYS = 0;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D24 the collector asks for the period\",\n },\n {\n name: \"a renamed calendar's empty answer overwrites the real shortlist\",\n file: \"engine/deposits.ts\",\n find: \" if (!force && out.rows.length === 0 && (prev?.rows?.length ?? 0) > 0) {\",\n replace: \" if (false) {\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D26 a season that empties to nothing\",\n },\n {\n name: \"the collector stops allocating per customer and goes back to stay by stay\",\n file: \"engine/deposits.ts\",\n // The whole money bug, back end to end, in one line — and until D27 existed the entire suite\n // stayed green through it because H48 only ever tested the pure function.\n find: \" for (const st of statusesForCustomer(own, pays)) {\",\n replace: \" for (const st of own.map((s0) => statusFor(s0, pays))) {\",\n then: {\n find: \" depositSentence, paymentsNearStay, statusesForCustomer, shiftDays, businessDay,\",\n replace: \" depositSentence, paymentsNearStay, statusesForCustomer, statusFor, shiftDays, businessDay,\",\n },\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D27 the collector really does allocate\",\n },\n {\n name: \"force=1 is quietly disconnected, so an empty season can never be accepted\",\n file: \"engine/deposits.ts\",\n find: ' const r = await runCollection(url.searchParams.get(\"force\") === \"1\", \"endpoint\");',\n replace: ' const r = await runCollection(false, \"endpoint\");',\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D28 a genuinely empty season\",\n },\n {\n name: \"the storage guards are deleted but a comment is left quoting them\",\n file: \"engine/deposits.ts\",\n // THE PROSE-MATCHING TRAP, which this project has now shipped four times. A structural check\n // that reads the raw file passes on the author's own explanation of the bug they removed.\n find: ' if (!force && out.rows.length === 0 && (prev?.rows?.length ?? 0) > 0) {',\n replace: ' // [was: if (!force && out.rows.length === 0 && (prev?.rows?.length ?? 0) > 0) { ... }]\\n if (false) {',\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D26 a season that empties to nothing\",\n },\n {\n name: \"the deposit refresh is dropped from the engine's schedule\",\n file: \"engine/puppy_path_v1.1.ts\",\n // The list then only ever refreshes when somebody hits the endpoint by hand, and the page goes\n // quietly stale while still reading in the present tense.\n find: \" await dep.refreshIfDue(() => blob.getJSON(dep.ATTEMPT_KEY) as any, () => dep.runCollection(false, \\\"engine\\\"), Date.now());\",\n replace: \" // refresh removed\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the gate reads the stored list instead of the attempt stamp, so a sick CRM is retried every tick\",\n file: \"engine/puppy_path_v1.1.ts\",\n find: \" await dep.refreshIfDue(() => blob.getJSON(dep.ATTEMPT_KEY) as any, () => dep.runCollection(false, \\\"engine\\\"), Date.now());\",\n replace: \" await dep.refreshIfDue(() => blob.getJSON(\\\"holiday_deposits\\\") as any, () => dep.runCollection(false, \\\"engine\\\"), Date.now());\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the refresh gate flips, so the list stops refreshing after the first hour\",\n file: \"engine/deposits.ts\",\n find: \" return nowMs - t > everyMs;\",\n replace: \" return nowMs - t < everyMs;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D29 the refresh gate is a rule\",\n },\n {\n name: \"an unreadable refresh stamp closes the gate forever\",\n file: \"engine/deposits.ts\",\n find: \" if (!Number.isFinite(t)) return true;\",\n replace: \" if (!Number.isFinite(t)) return false;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D29 the refresh gate is a rule\",\n },\n {\n name: \"the refresh interval is multiplied by a thousand, so it effectively never runs\",\n file: \"engine/deposits.ts\",\n find: \"export const REFRESH_EVERY_MS = 3_600_000;\",\n replace: \"export const REFRESH_EVERY_MS = 3_600_000_000;\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D29 the refresh gate is a rule\",\n },\n {\n name: \"a genuinely empty season can never be accepted, even on purpose\",\n file: \"engine/deposits.ts\",\n find: \" if (!force && out.rows.length === 0 && (prev?.rows?.length ?? 0) > 0) {\",\n replace: \" if (out.rows.length === 0 && (prev?.rows?.length ?? 0) > 0) {\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D31 every one of the four storage refusals\",\n },\n {\n name: \"the very first collection of an empty season is refused, so the card never fills in\",\n file: \"engine/deposits.ts\",\n find: \"(prev?.rows?.length ?? 0) > 0) {\",\n replace: \"(prev?.rows?.length ?? 0) >= 0) {\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D31 every one of the four storage refusals\",\n },\n {\n name: \"the collector reads the season on Greenwich time again\",\n file: \"engine/deposits.ts\",\n find: \" const season = seasonYear(businessDay(todayIso));\",\n replace: \" const season = seasonYear(todayIso.slice(0, 10));\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D32 the collector reads the season\",\n },\n {\n name: \"one matched record of two is left behind, and settles a second stay\",\n file: \"engine/holiday-deposits.ts\",\n // The one-for-one collapse: with two backfill records and one direct payment the survivor\n // still shares an amount with the direct, gets folded AGAIN by the per-stay check, and the\n // allocator never spends it.\n // [was: aimed at the one-for-one Set, which became a date-bounded scan.]\n find: \" const kept: Payment[] = [];\\n let collapsed = 0;\",\n replace: \" const kept: Payment[] = [];\\n const _used = new Set();\\n let collapsed = 0;\",\n then: {\n find: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount && withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS))) {\",\n replace: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount && withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS) && !_used.has(d.id) && _used.add(d.id))) {\",\n },\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H57 two backfill records and one payment\",\n },\n {\n name: \"the deposit goes back to a flat $50 a stay, under-charging every multi-dog booking\",\n file: \"engine/holiday-deposits.ts\",\n // Her own money page: \"$50 per dog\". A three-dog stay owes $150 and one $50 payment was\n // clearing it — the silent direction, where somebody who owes $100 more leaves the list.\n find: \" return DEPOSIT * dogsOn(stay);\",\n replace: \" return DEPOSIT;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H58 the deposit is $50 PER DOG\",\n },\n {\n name: \"dogs are counted from the names that parsed, not from the bookings\",\n file: \"engine/holiday-deposits.ts\",\n // Her titles include \" Boarding Dropoff with Help Test\", which yields no name at all.\n find: \" existing.dogCount++;\",\n replace: \" if (dog) existing.dogCount++;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H59 a dog whose name did not parse\",\n },\n {\n name: \"Kim is told to check cash and the phone instead of Venmo, Zelle and cheques\",\n file: \"engine/holiday-deposits.ts\",\n find: 'export const OTHER_ROUTES = \"A deposit paid by Venmo, Zelle or a cheque does not reach the card system, so it will not show here.\";',\n replace: 'export const OTHER_ROUTES = \"A deposit handed over in\n",[380],"690876e0-6d6d-4b10-961f-611fff03c3b8","SOURCE-BUNDLE.part6.txt","f58f8f72-91ad-11f1-82b0-1607ee4eb77e",764,["D",1786482179408],37,"THE DOGS SPOT — SOURCE BUNDLE (part 6 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (4 of 65 files)\n\n tests/kim-copy.test.mjs 10507 bytes 1aad4c3f2095\n tests/money-match.test.mjs 10487 bytes 664d11d38a42\n tests/money-truth.test.mjs 6426 bytes 8a3f32dcaacd\n\n================================================================================================\n=====FILE tests/holiday-deposits.test.mjs#2 =====\n: [\"A\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const s = H.depositSentence([H.statusFor(st, []), H.statusFor(st, [])], false);\n ok(!/they are owed|it is owed/.test(s), `the sentence has Kim owing the customer: ${s}`);\n // [was: /what (is|are) owed/. The clause is now \"matching the deposit for them\" — \"owed\" is the\n // vocabulary of a debt list, and the card's own closing sentence exists to say this is not one.]\n ok(/matching the deposit for (it|them)/.test(s), `the sentence does not say what it means: ${s}`);\n // Scrubbing the one sentence allowed to use the word — the one that DENIES the accusation —\n // exactly as D5.4 does on the rendered card, so the two cannot disagree about what is permitted.\n const denied = s.split(\"This is a shortlist to look at rather than a list of people who owe you.\").join(\" \");\n ok(!/\\bow(e|es|ed|ing)\\b/.test(denied), `the headline is back to talking about what is owed: ${s}`);\n return scoped(4, \"rows\");\n});\n\nt(\"H67 a $250 deposit is flagged, because that is also what training costs\", () => {\n // Her money page publishes a $250 non-refundable TRAINING deposit, which is exactly five dogs\n // at $50. Nothing in the data says which a $250 payment was for.\n const five = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\",\"B\",\"C\",\"D\",\"E\"], dogCount: 5, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(five, [{ amount: 250, id: \"x\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }]).note;\n ok(/could be either/.test(n), `a $250 payment was silently read as five holiday deposits: ${n}`);\n const one = { ...five, dogs: [\"A\"], dogCount: 1 };\n ok(!/could be either/.test(H.statusFor(one, [{ amount: 50, id: \"y\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }]).note),\n \"the warning fires on an ordinary $50 deposit\");\n return scoped(2, \"amounts\");\n});\n\nt(\"H68 one $50 written twice does not pay for two dogs\", () => {\n // WHERE THE SECOND COLLAPSE EARNS ITS KEEP. A two-dog stay owes $100 and settles on two $50\n // payments. Her Square writes some payments twice — once directly and once as a backfill — so\n // without collapsing inside the settle rule, ONE $50 seen twice looks like two dogs paid for.\n // statusFor is exported and called directly, so it cannot lean on the caller having collapsed.\n const twoDogs = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\", \"B\"], dogCount: 2, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const twinned = [\n { amount: 50, id: \"z3rQ\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"3zu7\", at: \"2026-10-05T00:00:00Z\", kind: \"matched\" },\n ];\n ok(H.statusFor(twoDogs, twinned).state !== \"seen\",\n \"one $50, written by Square in both of its formats, paid for two dogs\");\n eq(H.qualifyingPayments(twoDogs, twinned), [], \"the settle rule accepted a duplicate as a second dog's deposit\");\n // Two genuinely separate $50 payments do settle it.\n const real = [\n { amount: 50, id: \"one\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"two\", at: \"2026-10-06T00:00:00Z\", kind: \"direct\" },\n ];\n eq(H.statusFor(twoDogs, real).state, \"seen\", \"two real $50 payments did not settle a two-dog stay\");\n return scoped(3, \"cases\");\n});\n\nt(\"H69 a row never denies a payment Kim can see in Square\", () => {\n // THE WORST WORDING BUG OF THE EVENING, on 7.9% of generated rows. `near` was computed from the\n // money still UNSPENT, so a stay whose payment had already been counted against an earlier stay\n // was told \"no card payment is on file around it AT ALL\" — with the payment sitting right there\n // in its window. One step from an accusation, and false: Kim phones, the customer says \"I paid\n // on the 20th\", and they did.\n const st = (d, w) => ({ contactId: \"c\", day: d, until: d, dogs: [\"R\"], dogCount: 1, bookedAt: \"2026-11-01 09:00:00\", window: w });\n const out = H.statusesForCustomer([st(\"2026-11-25\", \"Thanksgiving\"), st(\"2026-12-22\", \"Christmas and New Year\")],\n [{ amount: 50, id: \"a\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]);\n eq(out[0].state, \"seen\");\n ok(out[1].state !== \"seen\", \"one $50 settled two stays\");\n ok(!/no card payment is on file around it at all/.test(out[1].note),\n `a row denied a payment that is in its own window: ${out[1].note}`);\n ok(/already been counted against an earlier stay/.test(out[1].note),\n `the row does not explain where that money went: ${out[1].note}`);\n // And a stay with genuinely nothing near it still says so plainly.\n ok(/no card payment is on file around it at all/.test(H.statusFor(st(\"2026-11-25\", \"Thanksgiving\"), []).note),\n \"a stay with nothing near it stopped saying so\");\n return scoped(2, \"stays\");\n});\n\nt(\"H70 three dogs paid for in one visit reads as one date\", () => {\n // How a family of three actually pays: three $50 swipes at the counter, same day.\n const three = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\", \"B\", \"C\"], dogCount: 3, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(three, [\"a\", \"b\", \"c\"].map((id) => ({ amount: 50, id, at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }))).note;\n ok(!/Nov 20, Nov 20|Nov 20 and Nov 20/.test(n), `the same date is repeated once per dog: ${n}`);\n ok(/on Nov 20\\./.test(n), `the date is missing entirely: ${n}`);\n eq(H.sameDayList([\"Nov 20\", \"Nov 20\", \"Nov 20\"]), \"on Nov 20\");\n eq(H.sameDayList([\"Nov 20\", \"Nov 21\"]), \"on Nov 20 and Nov 21\");\n return scoped(4, \"date lists\");\n});\n\nt(\"H71 a lump sum for several dogs says what else it could be\", () => {\n // Her published boarding rates are $30 to $65 a day, so five nights at $30 is $150 — exactly a\n // three-dog deposit — and the total is settled at drop-off, inside the search window. Flagging\n // only $250 patched the rarest collision and left the likelier ones silent.\n const mk = (n) => ({ contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: Array.from({ length: n }, (_, i) => `D${i}`), dogCount: n, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" });\n const lump = (n, a) => H.statusFor(mk(n), [{ amount: a, id: \"x\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]).note;\n ok(/could also be the boarding total/.test(lump(3, 150)), \"a $150 lump sum was read as three deposits with no caveat\");\n ok(/could also be the boarding total/.test(lump(4, 200)));\n ok(/training deposit/.test(lump(5, 250)), \"the $250 training collision stopped being named\");\n ok(!/could also be/.test(lump(1, 50)), \"an ordinary one-dog $50 deposit is being second-guessed\");\n // Three separate $50s are stronger evidence and carry no caveat.\n const perDog = H.statusFor(mk(3), [\"a\", \"b\", \"c\"].map((id, i) => ({ amount: 50, id, at: `2026-11-2${i}T00:00:00Z`, kind: \"direct\" }))).note;\n ok(!/could also be/.test(perDog), \"one $50 per dog is being treated as ambiguous\");\n return scoped(5, \"amounts\");\n});\n\nt(\"H72 the amount shown against a settled stay is what that stay owed\", () => {\n const three = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\", \"B\", \"C\"], dogCount: 3, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n eq(H.statusFor(three, [{ amount: 150, id: \"x\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]).amountSeen, 150,\n \"a three-dog stay settled for $150 reports $50, which is what the JSON feed hands anyone reading it\");\n const one = { ...three, dogs: [\"A\"], dogCount: 1 };\n eq(H.statusFor(one, [{ amount: 50, id: \"y\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]).amountSeen, 50);\n return scoped(2, \"rows\");\n});\n\nt(\"H73 the counts read as English at one, none and many\", () => {\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const one = H.depositSentence([H.statusFor(st, [])], false);\n ok(/1 holiday stay is booked/.test(one) && /1 is worth checking/.test(one), `singular reads wrong: ${one}`);\n ok(!/1 are|1 stays|them\\b/.test(one), `plural words about a single stay: ${one}`);\n const many = H.depositSentence([H.statusFor(st, []), H.statusFor(st, [])], false);\n ok(/2 holiday stays are booked/.test(many) && /2 are worth checking/.test(many), `plural reads wrong: ${many}`);\n ok(/nothing to check/i.test(H.depositSentence([], false)));\n return scoped(3, \"counts\");\n});\n\nt(\"H74 a payment months away from a backfill record is not the same money\", () => {\n // THE FIFTH DOOR the money bug came through. A \"Matched from Square payment\" note reconciles a\n // payment near it in TIME — the one real pair on her account is four days apart — and the fold\n // was on amount alone, across a customer's whole history. $50 is exactly the amount a repeat\n // customer pays more than once in a year, so a November payment and a December till record were\n // read as one $50: a real deposit deleted, a settled stay demoted, and the row then printed\n // \"nothing unspent on file matches that amount\" about somebody who had paid twice.\n const d = (at) => ({ amount: 50, id: `d${at}`, at, kind: \"direct\" });\n const m = (at) => ({ amount: 50, id: `m${at}`, at, kind: \"matched\" });\n // THE REAL PAIR: noted 31 July, reconciling a till payment the backfill states was taken on the\n // 17th. 14.6 days, because the parser uses the backfill's own stated date. A fortnight bound was\n // written first and was too tight for the only case anybody has ever seen.\n eq(H.collapseSameMoney([d(\"2026-07-31T13:22:29Z\"), m(\"2026-07-17\")]).collapsed, 1,\n \"the one real pair on her account stopped folding\");\n eq(H.collapseSameMoney([d(\"2026-11-20T00:00:00Z\"), m(\"2026-12-21\")]).collapsed, 0,\n \"a payment and a till record a month apart were read as the same $50\");\n eq(H.collapseSameMoney([d(\"2026-11-20T00:00:00Z\"), m(\"2026-12-03\")]).collapsed, 1, \"the bound is tighter than three weeks\");\n // Undated records still fold: a missing date is not evidence they are far apart.\n eq(H.collapseSameMoney([d(\"2026-11-20T00:00:00Z\"), m(null)]).collapsed, 1);\n eq(H.COLLAPSE_WINDOW_DAYS, 21);\n // End to end, the exact repro: two stays, a November payment and a December till record.\n const st = (day, booked) => ({ contactId: \"c\", day, until: day, dogs: [\"R\"], dogCount: 1, bookedAt: booked, window: \"W\" });\n const out = H.statusesForCustomer([st(\"2026-11-25\", \"2026-11-01 09:00:00\"), st(\"2026-12-22\", \"2026-12-05 09:00:00\")],\n [d(\"2026-11-20T00:00:00Z\"), m(\"2026-12-21\")]);\n eq(out.map((x) => x.state), [\"seen\", \"seen\"], \"a customer who paid two deposits was told one was missing\");\n return scoped(6, \"pairs\");\n});\n\nt(\"H75 money already counted appears once on a row, not twice in contradictory terms\", () => {\n // The row splits payments into \"still unaccounted for\" and \"already counted against an earlier\n // stay\". Dropping the split printed the SAME payment in both halves: \"1 card payment is on file\n // around it: $50.00 on Nov 20. Worth a look to see whether the deposit is that one.\" followed by\n // \"A card payment of $50.00 on Nov 20 is around this stay too, but it has already been counted.\"\n const st = (day) => ({ contactId: \"c\", day, until: day, dogs: [\"R\"], dogCount: 1, bookedAt: \"2026-11-01 09:00:00\", window: \"W\" });\n const out = H.statusesForCustomer([st(\"2026-11-25\"), st(\"2026-12-22\")],\n [{ amount: 50, id: \"a\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]);\n const n = out[1].note;\n eq((n.match(/Nov 20/g) || []).length, 1, `the same payment is printed twice on one row: ${n}`);\n ok(/already been counted/.test(n), \"the row does not say where that money went\");\n ok(!/Worth a look to see whether the deposit is that one/.test(n),\n \"the row invites Kim to match a payment it has already spent\");\n eq(out[1].amountSeen, 0, \"money spent on an earlier stay is being counted as seen on this one\");\n return scoped(2, \"stays\");\n});\n\nt(\"H76 three taps on one day are listed once, with their count\", () => {\n const four = { contactId: \"c\", day: \"2026-12-20\", until: \"2026-12-20\", dogs: [\"A\", \"B\", \"C\", \"D\"], dogCount: 4, bookedAt: \"2026-12-01 09:00:00\", window: \"W\" };\n const n = H.statusFor(four, [\"a\", \"b\", \"c\"].map((id) => ({ amount: 50, id, at: \"2026-12-20T00:00:00Z\", kind: \"direct\" }))).note;\n ok(/3 payments of \\$50\\.00 on Dec 20/.test(n), `same-day payments are listed one per line: ${n}`);\n ok(!/\\$50\\.00 on Dec 20, \\$50\\.00 on Dec 20/.test(n));\n // Different days and different amounts stay separate.\n const two = H.statusFor(four, [{ amount: 50, id: \"a\", at: \"2026-12-20T00:00:00Z\", kind: \"direct\" }, { amount: 30, id: \"b\", at: \"2026-12-21T00:00:00Z\", kind: \"direct\" }]).note;\n ok(/\\$50\\.00 on Dec 20/.test(two) && /\\$30\\.00 on Dec 21/.test(two), \"distinct payments were merged\");\n return scoped(3, \"listings\");\n});\n\nt(\"H77 the plural headline is a sentence\", () => {\n // SHIPPED, and it is the first line Kim reads: \"2 are worth checking: we cannot find a card\n // payment matching what ARE owed on them.\" H73 checked \"/2 are worth checking/\" and stopped\n // before the clause it introduces.\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"T\" };\n const many = H.depositSentence([H.statusFor(st, []), H.statusFor(st, [])], false);\n ok(!/what are owed|the deposit for they/.test(many), `the plural branch is ungrammatical: ${many}`);\n ok(/matching the deposit for them\\./.test(many), `the plural branch lost its clause: ${many}`);\n ok(/matching the deposit for it\\./.test(H.depositSentence([H.statusFor(st, [])], false)));\n return scoped(2, \"sentences\");\n});\n\nt(\"H78 every way her CRM says a booking is dead keeps it off the list\", () => {\n // Five of these six were pinned by nothing: every test asserted \"cancelled\" only. GHL really\n // does emit `noshow` and `invalid`, and the American spelling is one keystroke away. Any of\n // them reaching the list puts a customer who cancelled on Kim's chase list.\n eq(H.DEAD_STATUSES.sort(), [\"canceled\", \"cancelled\", \"invalid\", \"no show\", \"no-show\", \"noshow\"]);\n for (const st of H.DEAD_STATUSES) {\n ok(!H.eligible({ contactId: \"c\", appointmentStatus: st }), `a booking marked \"${st}\" reached the shortlist`);\n ok(!H.eligible({ contactId: \"c\", appointmentStatus: ` ${st.toUpperCase()} ` }), `\"${st}\" got through in caps with spaces`);\n ok(!H.eligible({ contactId: \"c\", appoinmentStatus: st }), `\"${st}\" got through under the misspelled key`);\n }\n ok(H.eligible({ contactId: \"c\", appointmentStatus: \"confirmed\" }), \"a live booking is being dropped\");\n ok(H.eligible({ contactId: \"c\", appointmentStatus: \"showed\" }));\n return scoped(H.DEAD_STATUSES.length * 3 + 2, \"status shapes\");\n});\n\nt(\"H79 the collapse bound is the constant, not a number somebody typed next to it\", () => {\n // H74 pinned the constant at 21 and three gaps around it — all of which a hardcoded 30 also\n // satisfies. The documented bound and the effective bound have to be the same thing.\n eq(H.COLLAPSE_WINDOW_DAYS, 21);\n const d = (at) => ({ amount: 50, id: `d${at}`, at, kind: \"direct\" });\n const m = (at) => ({ amount: 50, id: `m${at}`, at, kind: \"matched\" });\n // Exactly at the bound, and one day past it.\n eq(H.collapseSameMoney([d(\"2026-11-01T00:00:00Z\"), m(\"2026-11-22\")]).collapsed, 1, \"21 days apart should still fold\");\n eq(H.collapseSameMoney([d(\"2026-11-01T00:00:00Z\"), m(\"2026-11-23\")]).collapsed, 0, \"22 days apart folded, so the effective bound is not 21\");\n eq(H.collapseSameMoney([d(\"2026-11-01T00:00:00Z\"), m(\"2026-12-01\")]).collapsed, 0, \"a month apart folded\");\n ok(H.withinDays(\"2026-11-01T00:00:00Z\", null, 21), \"a missing date should fold, not split\");\n ok(H.withinDays(null, null, 21));\n ok(!H.withinDays(\"2026-11-01T00:00:00Z\", \"2026-12-15T00:00:00Z\", 21));\n return scoped(6, \"gaps\");\n});\n\nt(\"H80 two payments of the same size on the same day do not read as one\", () => {\n // The allocation is right, but a settled payment and a left-over one render identically — which\n // makes a correct allocation look exactly like the money bug this module has fought five times.\n const two = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\", \"B\"], dogCount: 2, bookedAt: \"2026-11-01 09:00:00\", window: \"T\" };\n const n = H.statusFor(two, [\n { amount: 100, id: \"A\", at: \"2026-11-23T00:00:00Z\", kind: \"direct\" },\n { amount: 100, id: \"B\", at: \"2026-11-23T00:00:00Z\", kind: \"direct\" },\n ]).note;\n ok(/one of 2 payments of that amount that day/.test(n), `two identical-looking payments are not disambiguated: ${n}`);\n // The clause must name the DAY, not just the count: \"one of 2 payments of that amount\" alone\n // would be true of two payments a month apart and tells Kim nothing about which is which.\n ok(/that day/.test(n), \"the clause does not say the two landed on the same day\");\n // And two payments of the same amount on DIFFERENT days carry no such clause.\n const spread = H.statusFor(two, [\n { amount: 100, id: \"A\", at: \"2026-11-23T00:00:00Z\", kind: \"direct\" },\n { amount: 100, id: \"B\", at: \"2026-11-24T00:00:00Z\", kind: \"direct\" },\n ]).note;\n ok(!/one of/.test(spread), `two payments on different days were described as same-day: ${spread}`);\n // And a single payment carries no such clause.\n ok(!/one of/.test(H.statusFor(two, [{ amount: 100, id: \"A\", at: \"2026-11-23T00:00:00Z\", kind: \"direct\" }]).note));\n return scoped(2, \"payments\");\n});\n\nt(\"H81 the longest stay accepted is the one the constant says\", () => {\n // MAX_STAY_DAYS could be set to anything from 22 to 86 without a test moving, so the documented\n // bound and the effective one could differ by two months — and an orphan pick-up that far out\n // drags an out-of-season boarding onto Kim's holiday shortlist.\n eq(H.MAX_STAY_DAYS, 21);\n const drop = (d) => [{ contactId: \"c\", title: \"A — Boarding Drop Off\", startTime: `${d}T09:00:00-05:00`, dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const pick = (d) => [{ contactId: \"c\", title: \"A — Boarding Pick Up\", startTime: `${d}T09:00:00-05:00`, appointmentStatus: \"confirmed\", isRecurring: false }];\n const until = (dropDay, pickDay) => (H.groupIntoStays(drop(dropDay), H.holidayWindows(2026), pick(pickDay))[0] ?? {}).until;\n eq(until(\"2026-12-20\", \"2027-01-10\"), \"2027-01-10\", \"a 21-night stay was refused\");\n eq(until(\"2026-12-20\", \"2027-01-11\"), \"2026-12-20\", \"a 22-night gap was accepted, so the effective bound is not 21\");\n eq(until(\"2026-12-20\", \"2027-03-15\"), \"2026-12-20\", \"an orphan pick-up months later stretched the stay\");\n return scoped(4, \"stay lengths\");\n});\n\nt(\"H82 a folded payment still shows on the row it belongs to\", () => {\n // THE FEATURE DEFECT ROUND ELEVEN FOUND, and the third time this exact sentence has been wrong.\n // A regular books Thanksgiving and Christmas and pays BOTH deposits — $50 at the till on 24 Nov,\n // $50 by card on 8 Dec. Fourteen days apart, inside the collapse bound, so the till record folds\n // away. Its survivor is outside the Thanksgiving window, so that row read \"no card payment is on\n // file around it AT ALL\". Adding a later payment turned a settled stay into \"nothing at all\".\n const st = (day, booked) => ({ contactId: \"c\", day, until: day, dogs: [\"R\"], dogCount: 1, bookedAt: booked, window: \"W\" });\n const out = H.statusesForCustomer(\n [st(\"2026-11-25\", \"2026-11-01 09:00:00\"), st(\"2026-12-22\", \"2026-12-05 09:00:00\")],\n [{ amount: 50, id: \"till\", at: \"2026-11-24\", kind: \"matched\" },\n { amount: 50, id: \"card\", at: \"2026-12-08T00:00:00Z\", kind: \"direct\" }]);\n ok(!/no card payment is on file around it at all/.test(out[0].note),\n `a row denied the till payment sitting in its own window: ${out[0].note}`);\n ok(/Nov 24/.test(out[0].note), `the payment Kim can see is not named: ${out[0].note}`);\n eq(out[1].state, \"seen\");\n return scoped(2, \"stays\");\n});\n\nt(\"H83 a row never denies a match one clause before printing it\", () => {\n // THE v2 BUG'S SENTENCE, BACK IN A DIFFERENT BRANCH. A record whose fold-twin survives OUTSIDE\n // this stay's window is shown but cannot settle, and the row read \"nothing unspent on file\n // matches that amount\" and then printed \"$50.00 on Oct 15\". 1.3% of rows. The module's own\n // header names this exact shape as the thing v2 was fixed for.\n const stay = { contactId: \"C1\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-11-05T10:00:00-05:00\", window: \"Thanksgiving\" };\n const n = H.statusesForCustomer([stay], [\n { amount: 50, id: \"direct_out\", at: \"2026-10-01T12:00:00-05:00\", kind: \"direct\" },\n { amount: 50, id: \"matched_in\", at: \"2026-10-15T12:00:00-05:00\", kind: \"matched\" },\n ])[0].note;\n ok(/\\$50\\.00 on Oct 15/.test(n), `the payment Kim can see is not shown at all: ${n}`);\n ok(!/nothing unspent on file matches that amount/.test(n),\n `the row denies a $50 match and then prints one: ${n}`);\n ok(/same money again outside this stay/.test(n), `the row does not explain why it was not counted: ${n}`);\n // The per-dog variant, where the payments shown sum to exactly the amount denied.\n const two = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\", \"Ghost\"], dogCount: 2, bookedAt: \"2026-11-05T10:00:00-05:00\", window: \"Thanksgiving\" };\n const n2 = H.statusesForCustomer([two], [\n { amount: 50, id: \"till1\", at: \"2026-10-15T12:00:00-05:00\", kind: \"matched\" },\n { amount: 50, id: \"card1\", at: \"2026-10-01T12:00:00-05:00\", kind: \"direct\" },\n { amount: 50, id: \"till2\", at: \"2026-10-20T12:00:00-05:00\", kind: \"matched\" },\n { amount: 50, id: \"card2\", at: \"2026-10-03T12:00:00-05:00\", kind: \"direct\" },\n ])[0].note;\n ok(!/nothing unspent on file matches that amount/.test(n2), `two $50s shown against a $100 stay that says nothing matches: ${n2}`);\n // And a stay with genuinely non-matching money still says so plainly.\n const other = H.statusFor(stay, [{ amount: 355, id: \"x\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]).note;\n ok(/nothing unspent on file matches that amount/.test(other), `the plain wording was lost for the ordinary case: ${other}`);\n return scoped(3, \"rows\");\n});\n\nt(\"H84 the advice on a lump sum names as many payments as the stay has dogs\", () => {\n // A $200 row said \"Two or three separate $50 payments would be clearer\" — $100 to $150 of advice\n // on a $200 stay, contradicting the rule the same row is applying.\n const mk = (n) => ({ contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: Array.from({ length: n }, (_, i) => `D${i}`), dogCount: n, bookedAt: \"2026-11-01 09:00:00\", window: \"T\" });\n const note = (n, a) => H.statusFor(mk(n), [{ amount: a, id: \"x\", at: \"2026-11-20\", kind: \"direct\" }]).note;\n ok(/4 separate \\$50 payments/.test(note(4, 200)), `a four-dog stay is advised the wrong number: ${note(4, 200)}`);\n ok(/3 separate \\$50 payments/.test(note(3, 150)));\n ok(/2 separate \\$50 payments/.test(note(2, 100)));\n ok(!/Two or three/.test(note(4, 200)));\n return scoped(3, \"stays\");\n});\n\nheader(\"WHAT IT MUST NEVER DO\");\n\nt(\"H22 the module cannot write to the CRM\", () => {\n // Structural, not a promise in a comment. addTag() in this engine is not TEST_MODE guarded and\n // this account has a workflow that turns a tag into do-not-disturb on six channels.\n ok(!/\"POST\"|'POST'|`POST`/.test(src), \"the module contains a POST\");\n ok(!/\"PUT\"|'PUT'|\"PATCH\"|'PATCH'|\"DELETE\"|'DELETE'/.test(src), \"the module contains a write verb\");\n ok(!/addTag|createTask|sendSms|sendEmail|upsert/.test(src), \"the module reaches a function that changes her account\");\n ok(!/fetch\\s*\\(/.test(src), \"the module fetches directly instead of being handed data it can be tested against\");\n return scoped(4, \"structural guarantees\");\n});\n\nt(\"H85 a payment written into the notes more than once is read at its earliest sighting\", () => {\n // The same Square payment id appears up to five times on one contact, and the copies do not\n // agree. Reading the LAST one changes the date the row quotes and can move it in or out of a\n // stay's window. [was: unguarded — last-wins and first-wins produced the same answer on every\n // fixture in this file, so the rule was asserted nowhere.]\n const notes = [\n { body: \"[Square] +$50.00 payment DUP1 (balance $0.00)\", dateAdded: \"2026-11-02T10:00:00Z\" },\n { body: \"[Square] +$50.00 payment DUP1 (balance $355.00)\", dateAdded: \"2026-11-20T10:00:00Z\" },\n { body: \"[Square] +$50.00 payment DUP1 (balance $0.00)\", dateAdded: \"2026-12-01T10:00:00Z\" },\n ];\n const p = H.parseSquarePayments(notes);\n eq(p.length, 1, \"the same payment id was read as more than one payment\");\n eq(p[0].at.slice(0, 10), \"2026-11-02\", \"a later copy of the same record won, which moves the date the row quotes\");\n // And the order the notes arrive in must not decide it either.\n const rev = H.parseSquarePayments([...notes].reverse());\n eq(rev[0].at.slice(0, 10), \"2026-11-02\", \"reversing the notes changed which sighting won\");\n return scoped(3, \"duplicate sightings\");\n});\n\nt(\"H86 which payment settles a stay does not depend on the order the array arrived in\", () => {\n // Found by shuffling the inputs 841,000 times. There is no meaningful order on either array —\n // `payments` is whatever the notes endpoint returned — so an order-dependent answer means a row\n // can move between \"Payment on file\" and \"Worth a look\" between two hourly runs with nothing\n // whatever having changed on her account.\n const st = (day, extra = {}) => ({ contactId: \"c1\", day, until: day, dogs: [\"A\"], dogCount: 1, bookedAt: \"2026-07-20\", window: \"T\", ...extra });\n // 1. TWO STAYS ON THE SAME DAY. Array.prototype.sort is stable and the key was `day` alone, so\n // the tie was broken by whichever the caller happened to list first.\n const same = [st(\"2026-11-25\", { dogs: [\"A\"] }), st(\"2026-11-25\", { dogs: [\"B\"] })];\n const pay1 = [{ amount: 50, id: \"p1\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }];\n const fwd = H.statusesForCustomer(same, pay1).map((s) => `${s.stay.dogs[0]}=${s.state}`).join(\",\");\n const rev = H.statusesForCustomer([...same].reverse(), pay1).map((s) => `${s.stay.dogs[0]}=${s.state}`).join(\",\");\n eq(rev, fwd, \"two stays on the same day settle differently depending on the order they were passed in\");\n // 2. AND THE PAYMENTS ARRAY STARVING A LATER STAY. Two real $50s, both inside the first stay's\n // window, only the later one inside the second's: taking the later one for the first stay\n // leaves the second nothing it can reach, and it reads as though no deposit was ever paid.\n const stays = [{ ...st(\"2026-01-10\"), bookedAt: \"2026-01-01\" }, { ...st(\"2026-01-15\"), dogs: [\"B\"], bookedAt: \"2026-01-12\" }];\n const pays = [{ amount: 50, id: \"P\", at: \"2025-12-10T00:00:00Z\", kind: \"direct\" }, { amount: 50, id: \"Q\", at: \"2026-01-05T00:00:00Z\", kind: \"direct\" }];\n const a = H.statusesForCustomer(stays, pays).map((s) => s.state).join(\",\");\n const b = H.statusesForCustomer(stays, [...pays].reverse()).map((s) => s.state).join(\",\");\n eq(b, a, \"the answer changed when the payments arrived in the other order\");\n eq(a, \"seen,seen\", \"the earlier stay took the payment the later one needed, and starved it\");\n // 3. And the rule that makes both of those hold: the OLDEST qualifying payment is the one spent.\n const stay = st(\"2026-01-10\");\n const dated = { ...stay, bookedAt: \"2025-12-20\" };\n const picked = H.qualifyingPayments(dated, [\n { amount: 50, id: \"late\", at: \"2026-01-05T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"early\", at: \"2025-12-28T00:00:00Z\", kind: \"direct\" },\n ]);\n eq(picked.map((p) => p.id), [\"early\"], \"the newest matching payment was spent, not the oldest\");\n // AN UNDATED RECORD NEVER QUALIFIES AT ALL, which is a stronger statement than where it sorts:\n // paymentsNearStay compares `(p.at || \"\").slice(0, 10)` against the window, and \"\" is below every\n // real date, so a payment with no date is not near ANY stay and is gone before the sort sees it.\n // The sort still puts an undated record last rather than first — \"oldest\" is a claim, and no date\n // is not evidence of being the oldest — but that branch is defensive, unreachable from here, and\n // deliberately has NO negative control: a control that cannot be made to fail is worse than none.\n const undated = H.qualifyingPayments(dated, [\n { amount: 50, id: \"nodate\", at: null, kind: \"direct\" },\n { amount: 50, id: \"dated\", at: \"2026-01-05T00:00:00Z\", kind: \"direct\" },\n ]);\n eq(undated.map((p) => p.id), [\"dated\"], \"a payment with no date was spent on a stay\");\n eq(H.qualifyingPayments(dated, [{ amount: 50, id: \"nodate\", at: null, kind: \"direct\" }]).length, 0,\n \"a payment with no date settled a stay: there is no evidence it is anywhere near it\");\n return scoped(6, \"orderings\");\n});\n\nt(\"H87 shuffling both inputs never changes the set of states that comes out\", () => {\n // The property version of H86, run on random data rather than the two cases that were found.\n const rnd = (n) => Math.floor(Math.random() * n);\n const shuf = (a) => { a = [...a]; for (let i = a.length - 1; i > 0; i--) { const j = rnd(i + 1); [a[i], a[j]] = [a[j], a[i]]; } return a; };\n let cases = 0;\n for (let k = 0; k < 400; k++) {\n const stays = Array.from({ length: 1 + rnd(4) }, (_, i) => ({\n contactId: \"c\", day: `2026-11-${String(20 + rnd(6)).padStart(2, \"0\")}`, until: \"2026-11-28\",\n dogs: [`D${i}`], dogCount: 1 + rnd(3), bookedAt: `2026-10-0${1 + rnd(9)}`, window: \"T\",\n }));\n const pays = Array.from({ length: rnd(5) }, (_, i) => ({\n amount: [50, 100, 150, 55][rnd(4)], id: `p${i}`,\n at: `2026-1${rnd(2)}-${String(1 + rnd(28)).padStart(2, \"0\")}T00:00:00Z`, kind: rnd(2) ? \"direct\" : \"matched\",\n }));\n const base = H.statusesForCustomer(stays, pays).map((s) => s.state).sort().join(\",\");\n for (let s = 0; s < 3; s++) {\n cases++;\n eq(H.statusesForCustomer(shuf(stays), shuf(pays)).map((x) => x.state).sort().join(\",\"), base,\n `order-dependent: ${JSON.stringify({ stays, pays })}`);\n }\n }\n ok(cases >= 1000, `only ${cases} shuffles ran, which is not a property test`);\n return scoped(cases, \"shuffles\");\n});\n\ndone();\n\n\n=====FILE tests/kim-copy.test.mjs =====\n// KIM'S OWN CORRECTIONS, PINNED. v2.0, 5 Aug 2026.\n// Every rule here is something she asked for in writing on 4 August. They are tests because a copy\n// instruction that lives only in a chat message gets quietly undone by the next edit, and she\n// should never have to ask twice.\nimport * as E from \"../build/engine.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, TRACKS, allMessages, msgText } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"kim-copy\");\n\nconst all = allMessages(E);\nconst hits = (re) => all.filter((m) => re.test(msgText(m))).map((m) => `${m.track}/${m.id}`);\n\nheader(\"WHAT KIM ASKED FOR\");\n\nt(\"K-a no dog-name placeholder survives anywhere\", () => {\n // \"we haven't always got the name and so if we have a placeholder for the puppies name, it\n // reads weird when there's no puppy in there\" - Kim, 6:32 PM 4 Aug\n eq(hits(/\\{\\{\\s*DOG_NAME\\s*\\}\\}/), []);\n return scoped(all.length, \"messages checked\");\n});\nt(\"K-a2 the person's name is still used, so removing the dog name did not go impersonal\", () => {\n const n = all.filter((m) => /\\{\\{FIRST_NAME\\}\\}/.test(msgText(m))).length;\n ok(n >= all.length * 0.8, `only ${n}/${all.length} greet the person by name`);\n return `${n}/${all.length} greet by name`;\n});\nt(\"K-b daycare appears nowhere: they do not offer it\", () => {\n eq(hits(/day\\s*care/i), []);\n return scoped(all.length, \"messages checked\");\n});\nt(\"K-c American English: potty not toilet, yard not garden\", () => {\n eq(hits(/\\btoilet/i), []); eq(hits(/\\bgarden/i), []);\n ok(hits(/potty/i).length > 0, \"potty training vanished rather than being renamed\");\n return scoped(all.length, \"messages checked\");\n});\nt(\"K-d no British spelling, INCLUDING in render-time constants\", () => {\n const re = /\\b(behaviour|realise|realising|colour|whilst|enquir|apologise|organis|neighbour|favourite|practise\\b|licence\\b|cosy|kerb|aluminium|dialled|theoris)/i;\n eq(hits(re), []);\n // the failure this catches: EMAIL_OPTOUT read \"you enquired with The Dogs Spot\" and was appended\n // to every email at render time, where a scan of the template arrays could never see it\n const src = readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\");\n const consts = src.match(/const (SMS_OPTOUT|EMAIL_OPTOUT)[\\s\\S]{0,400}?;/g) || [];\n ok(consts.length >= 2, `expected both opt-out constants, found ${consts.length}`);\n for (const c of consts) ok(!re.test(c), `British spelling in a render-time constant: ${c.slice(0, 90)}`);\n return `${all.length} templates + ${consts.length} appended constants`;\n});\nt(\"K-e the no-show text uses her word, schedule, not sort\", () => {\n const m = all.find((x) => x.id === \"branch_a-1\");\n ok(m, \"branch_a-1 missing\");\n ok(/schedule it/.test(m.bodyTemplate), \"her wording was reverted\");\n ok(!/sort it/.test(m.bodyTemplate), \"'sort it' is back\");\n return \"1 message\";\n});\nt(\"K-f the no-show email is her rewrite, near enough word for word\", () => {\n const m = all.find((x) => x.id === \"branch_a-2\");\n ok(m, \"branch_a-2 missing\");\n // \"won't keep bugging you\" was in this list from her 4 Aug rewrite. Superseded 6/7 Aug: \"I'd\n // rather remove language about what I won't do and leave the more positive language in there\n // that says they can call, they can reach out anytime\" (REGISTER-AUG7.md §4) — the exact\n // \"what I won't do\" shape her own later words describe. Pulled from the required list here so\n // this test does not force the newer instruction back out; K-l below asserts its removal and\n // that the positive line right next to it (\"just reach out, I'd be happy to help\") survived.\n const phrases = [\"I noticed we had a Pup Talk scheduled, but we missed each other\", \"I know life gets busy\",\n \"quick, no-pressure call\", \"see whether training with us would be a good fit\",\n \"if we're not the right fit, I'll tell you that too\"];\n for (const p of phrases) ok(m.bodyTemplate.includes(p), `her phrase missing: \"${p}\"`);\n ok(!/daycare/i.test(m.bodyTemplate), \"daycare survived in the very message she rewrote to remove it\");\n return scoped(phrases.length, \"of her phrases verified\");\n});\nt(\"K-g no em-dashes reach a customer\", () => { eq(hits(/—/), []); return scoped(all.length, \"messages checked\"); });\nt(\"K-h no price quoted, grooming never offered\", () => {\n eq(hits(/groom/i), []); eq(hits(/\\$\\d/), []);\n return scoped(all.length, \"messages checked\");\n});\nt(\"K-i 'Pup Talk' everywhere, 'discovery call' nowhere\", () => {\n eq(hits(/discovery call/i), []);\n return scoped(all.length, \"messages checked\");\n});\n\nheader(\"THE 6 AUG FOLLOW-UP — MORE OF HER OWN WORDS\");\n// Six more corrections, written by Kim on 4/5 Aug (handover/REGISTER-AUG7.md §4) and confirmed\n// back to her 7 Aug (\"All noted and all going in. Touch 2 loses 'I got your message' and opens on\n// the welcome. The pup talk copy says what it is and stops saying what it is not. The no show and\n// no sale messages lose 'I won't chase you' and keep the line about calling any time. 'Getting on'\n// becomes 'going'. Water intoxication and back to school go into the July and August notes.\" —\n// handover/MESSAGE-TO-KIM-7-AUG.txt, lines 80-83), and repeated in her own message at 9:07 PM 6 Aug\n// (\"water intoxication note + kids back to school in August -> July/Aug puppy nurture\" —\n// handover/UPWORK-THREAD-FULL-9AUG.md line 39).\n\nt(\"K-j Touch 2 (main-2) does not open with 'got your message' - it opens on the welcome\", () => {\n const m = all.find((x) => x.id === \"main-2\");\n ok(m, \"main-2 missing\");\n eq(m.channel, \"sms\", \"main-2 is no longer the SMS touch - has the track been reordered?\");\n eq(hits(/got your message/i), [], \"'got your message' survives somewhere\");\n // Not just \"the word welcome appears\" - it has to be the OPENING, which is what she asked for.\n const afterIntro = m.bodyTemplate.replace(/^Hi \\{\\{FIRST_NAME\\}\\},\\s*it'?s Kim at The Dogs Spot\\.\\s*/i, \"\");\n ok(afterIntro !== m.bodyTemplate, \"the fixed sender intro was not found at the start of main-2 - has it changed shape?\");\n ok(/^welcome\\b/i.test(afterIntro), `does not open on the welcome, opens on: \"${afterIntro.slice(0, 40)}\"`);\n return \"1 message, checked for both the removal and what replaced it\";\n});\n\nt(\"K-k Pup Talk copy says what it IS; 'pitch' appears nowhere\", () => {\n // \"I don't like that it keeps saying that it's not a pitch. Can we just leave off the part about\n // the pitch and just tell them what it is rather than what it isn't.\" - Kim, REGISTER-AUG7.md §4\n eq(hits(/\\bpitch(es|ing)?\\b/i), []);\n return scoped(all.length, \"messages checked\");\n});\n\nt(\"K-l no 'I won't chase you' or any what-I-won't-do framing; the positive stays\", () => {\n // \"I'd rather remove language about what I won't do and leave the more positive language in\n // there that says they can call, they can reach out anytime.\" - Kim, REGISTER-AUG7.md §4\n // Deliberately narrow to WON'T/NOT-GOING-TO framing so it does not trip on the unrelated dog-park\n // \"chaser becomes chased\" in the fortnightly bank, which is about play, not about follow-up.\n const badFraming = /\\bwon'?t\\s+(keep\\s+)?(chas(e|ing)|bugg?ing|pester(ing)?|hound(ing)?)\\b|\\bnot going to chase\\b|\\bwill not chase\\b/i;\n eq(hits(badFraming), []);\n // The positive she explicitly asked to KEEP, pinned in the two messages the negative came out of -\n // this is the check that would catch cutting the whole sentence instead of just the promise.\n const a2 = all.find((x) => x.id === \"branch_a-2\");\n const b1 = all.find((x) => x.id === \"branch_b-1\");\n ok(a2 && b1, \"branch_a-2 or branch_b-1 missing\");\n ok(/reach out/i.test(a2.bodyTemplate), \"branch_a-2 lost its positive 'reach out' line along with the negative one\");\n ok(/call or text/i.test(b1.bodyTemplate) && /door'?s open/i.test(b1.bodyTemplate),\n \"branch_b-1 lost its positive call-or-text / door's-open line along with the negative one\");\n return \"2 messages checked for the positive surviving, all messages checked for the negative\";\n});\n\nt(\"K-m no 'getting on' anywhere; US English 'going'\", () => {\n // \"'how you're getting on' -> 'how it's going'. British.\" - Kim, REGISTER-AUG7.md §4\n eq(hits(/getting on/i), []);\n const b2 = all.find((x) => x.id === \"branch_b-2\");\n ok(b2, \"branch_b-2 missing\");\n ok(/\\bgoing\\b/i.test(b2.bodyTemplate), \"the US replacement word 'going' did not land in branch_b-2\");\n return scoped(all.length, \"messages checked\");\n});\n\nt(\"K-n the July or August seasonal note covers water intoxication\", () => {\n // \"water intoxication note ... -> July/Aug puppy nurture\" - Kim, 9:07 PM 6 Aug\n const jul = all.find((x) => x.id === \"slow_m-jul\");\n const aug = all.find((x) => x.id === \"slow_m-aug\");\n ok(jul && aug, \"slow_m-jul or slow_m-aug missing\");\n ok(/water intoxication/i.test(jul.bodyTemplate) || /water intoxication/i.test(aug.bodyTemplate),\n \"neither the July nor the August seasonal note mentions water intoxication\");\n return \"2 messages checked (July, August)\";\n});\n\nt(\"K-o the August seasonal note covers kids going back to school\", () => {\n // \"kids back to school in August -> July/Aug puppy nurture\" - Kim, 9:07 PM 6 Aug\n const aug = all.find((x) => x.id === \"slow_m-aug\");\n ok(aug, \"slow_m-aug missing\");\n ok(/school/i.test(aug.bodyTemplate), \"August's note does not mention school\");\n return \"1 message\";\n});\n\nt(\"KC-dates no copy module says a thing that expires\", () => {\n // Kim's oldest open item: her page told her \"this evening\" every day forever, because eight\n // entries in worklog.ts and one in decisions.ts carried a relative time with no date in the\n // sentence. dashboard.ts renders a real date beside each entry, which is why it read as sloppy\n // rather than wrong, but the sentence has to stand on its own. Reproduced and fixed 10 Aug 2026.\n const BANNED = [\"this evening\", \"this morning\", \"this afternoon\", \"last night\", \"earlier today\", \"tonight\"];\n let checked = 0;\n for (const f of [\"worklog.ts\", \"decisions.ts\", \"kim-stories.ts\", \"taper-messages.ts\"]) {\n let src;\n try { src = readFileSync(new URL(`../engine/${f}`, import.meta.url), \"utf8\"); } catch { continue; }\n checked++;\n for (const phrase of BANNED) {\n ok(!src.toLowerCase().includes(phrase),\n `\"${phrase}\" is in engine/${f}. Copy outlives the day it was written; say the date or say \"that morning\".`);\n }\n }\n ok(checked >= 2, \"this test inspected fewer than two copy modules, so it proved nothing\");\n return scoped(checked * BANNED.length, \"phrase checks across copy modules\");\n});\n\ndone();\n\n\n=====FILE tests/money-match.test.mjs =====\n// KIM'S RULE, PINNED. 9 Aug 2026.\n//\n// She wrote it in two lines at 10:26 PM and there is no ambiguity in it:\n// \"One open opportunity -> automatically assign the payment.\n// Multiple open opportunities -> staff chooses the correct one.\"\n//\n// Every test here exists because getting this wrong invents revenue out of nothing, and a revenue\n// figure she cannot trust is worse to her than no revenue figure at all. The dangerous failure is\n// not crashing, it is quietly picking a booking and being confident about it.\nimport { readFileSync } from \"node:fs\";\nimport { classify, summarise, plainEnglish, isNameless, planWrites, VALUABLE_STAGES } from \"../build/money-match.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"money-match\");\n\nconst pay = (o = {}) => ({ id: \"p1\", amount: 2395, status: \"succeeded\", contactId: \"c1\", contactName: \"Jane Doe\", at: \"2026-08-01\", ...o });\nconst opp = (o = {}) => ({ id: \"o1\", contactId: \"c1\", name: \"Jane\", monetaryValue: 0, stage: \"fd821b4e-bbe6-44de-b754-fa80e4823616\", createdAt: \"2026-07-01\", lastStageChangeAt: \"2026-07-02\", ...o });\n\nheader(\"HER RULE, EXACTLY AS SHE WROTE IT\");\n\nt(\"MM-a one open booking, the money places itself\", () => {\n const m = classify(pay(), [opp()]);\n eq(m.verdict, \"AUTO\");\n eq(m.wouldWrite.oppId, \"o1\");\n eq(m.wouldWrite.value, 2395);\n return scoped(1, \"payments classified\");\n});\n\nt(\"MM-b more than one open booking, nothing is guessed\", () => {\n const m = classify(pay(), [opp({ id: \"o1\" }), opp({ id: \"o2\" })]);\n eq(m.verdict, \"CHOOSE\");\n eq(m.wouldWrite, null); // the whole point: it must refuse to pick\n eq(m.candidates.length, 2);\n return scoped(2, \"candidate bookings offered to a person\");\n});\n\nt(\"MM-c three open bookings still refuses, it does not degrade to a guess at scale\", () => {\n const m = classify(pay(), [opp({ id: \"a\" }), opp({ id: \"b\" }), opp({ id: \"c\" })]);\n eq(m.verdict, \"CHOOSE\"); eq(m.wouldWrite, null);\n return scoped(3, \"candidates\");\n});\n\nheader(\"THE MONEY THAT CAN NEVER BE PLACED, SAID PLAINLY\");\n\nt(\"MM-d a counter sale with no name is an orphan, not a match\", () => {\n for (const name of [null, \"\", \"Unknown\", \"unknown\", \" UNKNOWN \"]) {\n const m = classify(pay({ contactName: name }), [opp()]);\n eq(m.verdict, \"ORPHAN\");\n eq(m.wouldWrite, null);\n }\n return scoped(5, \"nameless spellings checked\");\n});\n\nt(\"MM-e a named customer with no booking is an orphan, and says why\", () => {\n const m = classify(pay(), []);\n eq(m.verdict, \"ORPHAN\"); eq(m.wouldWrite, null);\n ok(/no booking on the Customer or Won and Paid board/.test(m.why), \"the reason does not name WHICH board it looked at, which is the whole ambiguity\");\n return scoped(1, \"payments\");\n});\n\nheader(\"NEVER OVERWRITE WHAT SOMEBODY ELSE OWNS\");\n\nt(\"MM-f a booking that already carries a value is left alone\", () => {\n // Kristian's application writes opportunities into this same CRM. If a value is already there,\n // ours must not touch it, whoever put it there.\n const m = classify(pay(), [opp({ monetaryValue: 3295 })]);\n eq(m.verdict, \"ALREADY_VALUED\");\n eq(m.wouldWrite, null);\n return scoped(1, \"valued bookings protected\");\n});\n\nt(\"MM-g with one valued and one empty booking, only the empty one is a candidate\", () => {\n const m = classify(pay(), [opp({ id: \"old\", monetaryValue: 3295 }), opp({ id: \"new\", monetaryValue: 0 })]);\n eq(m.verdict, \"AUTO\");\n eq(m.wouldWrite.oppId, \"new\");\n return scoped(2, \"bookings weighed\");\n});\n\nt(\"MM-h THE MODULE CANNOT WRITE. No mutating verb exists in it.\", () => {\n const src = readFileSync(new URL(\"../engine/money-match.ts\", import.meta.url), \"utf8\");\n const code = src.split(\"\\n\").filter((l) => !l.trim().startsWith(\"//\")).join(\"\\n\");\n for (const verb of ['\"POST\"', '\"PUT\"', '\"PATCH\"', '\"DELETE\"', \"fetch(\", \"XMLHttpRequest\"]) {\n ok(!code.includes(verb), `${verb} appears in a module that is supposed to be incapable of writing`);\n }\n ok(code.length > 500, \"the module looks empty, so this check inspected nothing\");\n return scoped(6, \"mutating constructs searched for\");\n});\n\nheader(\"THE ARITHMETIC SHE WILL BE READING\");\n\nconst payments = [\n pay({ id: \"s1\", amount: 1000, status: \"succeeded\", contactId: \"c1\", contactName: \"One Card\" }),\n pay({ id: \"s2\", amount: 500, status: \"succeeded\", contactId: \"c2\", contactName: \"Two Cards\" }),\n pay({ id: \"s3\", amount: 250, status: \"succeeded\", contactId: null, contactName: \"Unknown\" }),\n pay({ id: \"s4\", amount: 99.99, status: \"pending\", contactId: \"c1\", contactName: \"One Card\" }),\n pay({ id: \"s5\", amount: 40, status: \"failed\", contactId: \"c1\", contactName: \"One Card\" }),\n];\nconst matches = [\n classify(payments[0], [opp({ id: \"o1\", contactId: \"c1\" })]),\n classify(payments[1], [opp({ id: \"o2\", contactId: \"c2\" }), opp({ id: \"o3\", contactId: \"c2\" })]),\n classify(payments[2], []),\n];\nconst valuedToday = [opp({ id: \"v1\", monetaryValue: 3295 }), opp({ id: \"v2\", monetaryValue: 2395 })];\nconst s = summarise(matches, payments, valuedToday);\n\nt(\"MM-i completed, pending and failed are counted apart and never added together\", () => {\n eq(s.completed.count, 3); eq(s.completed.total, 1750);\n eq(s.pending.count, 1); eq(s.pending.total, 99.99);\n eq(s.failed.count, 1); eq(s.failed.total, 40);\n return scoped(payments.length, \"payments summarised\");\n});\n\nt(\"MM-j coverage is honest: placed money over completed money, not over everything\", () => {\n // 1000 placeable of 1750 completed = 57.1%. If this ever divided by the gross including failed\n // payments it would flatter itself, which is the exact failure mode that loses her trust.\n eq(s.auto.total, 1000);\n eq(s.coveragePct, 57.1);\n ok(s.coveragePct < 100, \"coverage of 100% on this fixture would mean orphans were being counted\");\n return scoped(3, \"verdict buckets\");\n});\n\nt(\"MM-k the before and after totals add up exactly\", () => {\n eq(s.valuedNow.total, 5690);\n eq(s.valuedAfter.total, 6690); // 5690 + the one AUTO payment of 1000\n eq(s.valuedAfter.count, valuedToday.length + s.auto.count);\n return scoped(2, \"totals reconciled\");\n});\n\nt(\"MM-l every payment lands in exactly one bucket, none lost, none double counted\", () => {\n const n = s.auto.count + s.choose.count + s.orphan.count + s.alreadyValued.count;\n eq(n, matches.length);\n return scoped(matches.length, \"matches partitioned\");\n});\n\nt(\"MM-m the sentence Kim reads is generated and states the money that can never be placed\", () => {\n const line = plainEnglish(s);\n ok(/3 Square payments completed/.test(line), \"it does not open on the completed count\");\n ok(/\\$1,750\\.00/.test(line), \"the completed total is not in her sentence\");\n ok(/can never be placed/.test(line), \"it hides the orphaned money instead of naming it\");\n ok(!/[‐-―−]/.test(line), \"a dash reached a sentence she reads\");\n return scoped(line.length, \"characters of generated copy checked\");\n});\n\nt(\"MM-n with nothing completed it says so rather than dividing by zero\", () => {\n const empty = summarise([], [], []);\n eq(empty.coveragePct, 0);\n ok(/nothing to place/.test(plainEnglish(empty)), \"it does not degrade gracefully to plain words\");\n return scoped(1, \"empty case\");\n});\n\nheader(\"PAY TWICE FOR ONE BOOKING AND THE MONEY IS ADDED, NEVER WRITTEN OVER\");\n\nt(\"MM-o two payments toward ONE booking become ONE write of their total\", () => {\n // Live 10 Aug: Laurie Rubnitz, $120.00 and $90.00, both resolving to 7yES6q2kajVTQIK6tEx3.\n // The old code wrote value: payment.amount twice, so one of them silently won and the other\n // vanished. And it self seals: the next run sees a non zero field and says ALREADY_VALUED.\n const ms = [classify(pay({ id: \"pa\", amount: 120 }), [opp()]), classify(pay({ id: \"pb\", amount: 90 }), [opp()])];\n const w = planWrites(ms);\n eq(w.length, 1, \"two writes were planned for one booking, so one payment would be lost\");\n eq(w[0].oppId, \"o1\");\n eq(w[0].value, 210);\n eq(w[0].paymentIds, [\"pa\", \"pb\"], \"the write does not carry the payments it was built from, so it cannot be audited\");\n return scoped(2, \"payments grouped onto one booking\");\n});\n\nt(\"MM-p valuedAfter counts BOOKINGS that gain a value, not payments\", () => {\n const ms = [classify(pay({ id: \"pa\", amount: 120 }), [opp()]), classify(pay({ id: \"pb\", amount: 90 }), [opp()])];\n const s2 = summarise(ms, [], [opp({ id: \"v1\", monetaryValue: 1000 })]);\n eq(s2.auto.count, 2);\n eq(s2.writes.count, 1);\n eq(s2.valuedAfter.count, 2, \"it counted 3: one existing booking plus two payments onto one booking\");\n eq(s2.valuedAfter.total, 1210);\n return scoped(2, \"payments summarised\");\n});\n\nt(\"MM-q grouping moves money and never loses it\", () => {\n const ms = [classify(pay({ id: \"a\", amount: 120 }), [opp()]), classify(pay({ id: \"b\", amount: 90 }), [opp()]),\n classify(pay({ id: \"c\", amount: 50 }), [opp({ id: \"o2\", contactId: \"c1\" })])];\n const s2 = summarise(ms, [], []);\n eq(s2.writes.total, s2.auto.total, \"money went missing between classification and the write plan\");\n eq(s2.writes.count, 2);\n return scoped(3, \"payments reconciled\");\n});\n\nheader(\"MONEY NEVER LANDS ON A CARD THAT IS NOT A BOOKING\");\n\nt(\"MM-r a review pipeline card is never a candidate, however empty it is\", () => {\n // brooks berry live: one Survey Requested card and one Customer card, both at zero.\n const m = classify(pay({ amount: 50 }), [\n opp({ id: \"review\", stage: \"093da2de-633b-45f6-a837-9a1a513c3234\" }),\n opp({ id: \"booking\", stage: \"fd821b4e-bbe6-44de-b754-fa80e4823616\" }),\n ]);\n eq(m.verdict, \"AUTO\", \"two open cards on two different boards read as CHOOSE, or worse an AUTO onto the survey\");\n eq(m.candidates.length, 1);\n eq(m.wouldWrite.oppId, \"booking\");\n return scoped(2, \"cards weighed across two pipelines\");\n});\n\nt(\"MM-s an out of scope card alone is an orphan, not a booking\", () => {\n const m = classify(pay(), [opp({ id: \"rev\", stage: \"fbf08419-045b-48d5-8c30-7d150f777c40\" })]);\n eq(m.verdict, \"ORPHAN\");\n eq(m.wouldWrite, null);\n return scoped(1, \"out of scope card\");\n});\n\nt(\"MM-t the allow list is exactly the two booking stages, by ID not by name\", () => {\n eq([...VALUABLE_STAGES].sort(), [\"ae173310-f8b1-4399-acb7-ef1fc03d3697\", \"fd821b4e-bbe6-44de-b754-fa80e4823616\"]);\n for (const s of VALUABLE_STAGES) ok(/^[0-9a-f-]{36}$/.test(s), `${s} is not a stage id. Live data carries IDs; matching on a NAME makes this filter a no op against production.`);\n return scoped(VALUABLE_STAGES.length, \"stages allow listed\");\n});\n\ndone();\n\n\n=====FILE tests/money-truth.test.mjs =====\n// TWO NUMBERS KIM WAS SHOWN THAT WERE WRONG. 9 Aug 2026.\n//\n// Both bugs shipped to her. Both were the same shape: a filter applied too early, so the code saw\n// a slice of the data and reported it as the whole. Neither was caught by a test because no test\n// ever asked \"and how much did you look at?\".\n//\n// 1. facts.ts squareBacklog only ever examined rows of kind NO-MATCH, while its own comment\n// claimed it considered \"ANY row for this payment\". A payment that failed to match once and\n// succeeded later stayed in the backlog forever. She was told 42 payments, $33,535.99. The\n// truth is 33 and $22,651.99, so the number in her hands is $10,884.00 too high.\n//\n// 2. report.ts wonOppsAll paged the whole location page=1..20 at limit=100 and filtered to the\n// two customer stages afterwards. That reads 2,000 of ~5,800 records, so it missed 42 of the\n// 53 opportunities carrying a value and printed \"2 new customers\" for a week that had 3.\n//\n// These tests are written to fail against the old code. Both are pinned to real data, not fixtures\n// alone, because a fixture cannot tell you the live figure moved.\n// 9 Aug, after a container loss: these two used to read DATA-PULL-evidence/, which the source\n// bundle does not carry because it is pulled data rather than source. A restored tree was therefore\n// RED by construction, which is the worst possible time for a red suite. The fixture below is\n// committed, so it survives, and it reproduces the six figures live on Kim's card page exactly:\n// 33 counter sales, $22,651.99, of which 4 worth $2,829.99 are traceable and 29 worth $19,822.00\n// are not. Verified against production the same evening.\nimport { readFileSync } from \"node:fs\";\nimport { squareBacklog } from \"../build/facts.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"money-truth\");\n\nheader(\"THE COUNTER SALES BACKLOG\");\n\nt(\"M-a a payment that matched on a later attempt is not still in the backlog\", () => {\n // The exact shape the old code got wrong: one payment, two rows, failure then success.\n const journal = [\n { kind: \"NO-MATCH\", note: \"payment AAA no contact found\", amount: 500 },\n { kind: \"REVENUE-ON-CLIENT-OPP\", note: \"payment AAA matched\", amount: 500, contactId: \"contact_1234567\" },\n { kind: \"NO-MATCH\", note: \"payment BBB no contact found\", amount: 250 },\n ];\n const r = squareBacklog(journal);\n eq(r.payments, 1); // BBB only\n eq(r.total, 250);\n return scoped(journal.length, \"journal rows inspected\");\n});\n\nt(\"M-b a payment that never matched is still counted\", () => {\n const journal = [{ kind: \"NO-MATCH\", note: \"payment CCC no contact found\", amount: 42.5 }];\n const r = squareBacklog(journal);\n eq(r.payments, 1); eq(r.total, 42.5);\n return scoped(journal.length, \"journal rows inspected\");\n});\n\nt(\"M-c a payment that never failed is not invented into the backlog\", () => {\n const journal = [{ kind: \"PAYMENT\", note: \"payment DDD taken\", amount: 900, contactId: \"contact_7654321\" }];\n const r = squareBacklog(journal);\n eq(r.payments, 0); eq(r.total, 0);\n return scoped(journal.length, \"journal rows inspected\");\n});\n\nt(\"M-d it reproduces the figure now live on Kim's page, not the one she was sent\", () => {\n // Two independent derivations agreed on 33 / $22,651.99: this function, and a standalone script\n // written without reference to it. The old figure is banned by name so it cannot come back.\n const journal = JSON.parse(readFileSync(new URL(\"./fixtures/square-journal.json\", import.meta.url), \"utf8\"));\n const r = squareBacklog(journal);\n ok(journal.length > 30, `fixture looks truncated at ${journal.length} rows`);\n eq(r.payments, 33);\n eq(Math.round(r.total * 100), 2265199);\n ok(r.payments !== 42, \"the old overcounted figure is back\");\n ok(Math.round(r.total * 100) !== 3353599, \"the old overcounted total is back\");\n return scoped(journal.length, \"fixture rows inspected\");\n});\n\nt(\"M-e trail and no-trail still partition the backlog exactly\", () => {\n const journal = JSON.parse(readFileSync(new URL(\"./fixtures/square-journal.json\", import.meta.url), \"utf8\"));\n const r = squareBacklog(journal);\n eq(r.withTrail + r.noTrail, r.payments);\n eq(Math.round((r.withTrailTotal + r.noTrailTotal) * 100), Math.round(r.total * 100));\n return `${r.withTrail} traceable + ${r.noTrail} not = ${r.payments}`;\n});\n\nheader(\"THE REPORT MUST NOT READ A SLICE AND CALL IT THE WHOLE\");\n\nconst reportSrc = readFileSync(new URL(\"../engine/report.ts\", import.meta.url), \"utf8\");\n\nt(\"R-a every opportunity read in the report is filtered server side by stage\", () => {\n // The bug was reading the whole location and filtering in JS afterwards, which the page cap then\n // silently truncated. Any /opportunities/search without a pipeline_stage_id is that bug returning.\n const calls = [...reportSrc.matchAll(/\\/opportunities\\/search\\?[^`\"']*/g)].map((m) => m[0]);\n ok(calls.length > 0, \"found no opportunity reads at all, so this test is inspecting nothing\");\n const unfiltered = calls.filter((c) => !c.includes(\"pipeline_stage_id\"));\n eq(unfiltered, []);\n return scoped(calls.length, \"opportunity queries inspected\");\n});\n\nt(\"R-b the page budget is derived from the record count, not a hardcoded 20\", () => {\n const fn = reportSrc.slice(reportSrc.indexOf(\"async function wonOppsAll\"), reportSrc.indexOf(\"export async function\") > 0 ? undefined : undefined).slice(0, 2000);\n ok(/meta\\?\\.total|meta\\.total/.test(fn), \"the page count is not derived from the API's own total\");\n ok(!/page <= 20/.test(fn), \"the old fixed 20 page loop is still there\");\n return scoped(1, \"function inspected\");\n});\n\nt(\"R-c the revenue sentence is generated from the data, never typed\", () => {\n // It used to read \"every opportunity sits at zero dollars and none are marked won or lost\".\n // That was true when written and false by the time she read it.\n ok(!/Every opportunity sits at zero dollars/i.test(reportSrc), \"the hand written false sentence is back\");\n const card = reportSrc.slice(reportSrc.indexOf(\"Why there is no revenue figure\"), reportSrc.indexOf(\"Why there is no revenue figure\") + 1400);\n ok(/valued\\.length/.test(card) && /opps\\.length/.test(card), \"the sentence no longer counts the real records\");\n ok(/monetaryValue > 0/.test(card), \"the sentence is not derived from the value field\");\n return scoped(1, \"card inspected\");\n});\n\ndone();\n\n",[388],"067f42ca-01df-4fdf-b941-f594053d2428","SOURCE-BUNDLE.part5.txt","11feec3e-919f-11f1-8a41-1607ee4eb77e",763,["D",1786482178737],34,"THE DOGS SPOT — SOURCE BUNDLE (part 5 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (1 of 65 files)\n\n\n================================================================================================\n=====FILE tests/holiday-deposits.test.mjs#1 =====\n// THE HOLIDAY DEPOSIT TRACKER.\n// Every case below is either a real row out of Kim's account on Aug 6 2026 or a near miss of one.\n// The failure this suite exists to prevent is telling Kim that a customer owes her $50 when they\n// do not: that is a message to a real person about money, in her name, and it is unrecoverable.\nimport * as H from \"../build/holiday-deposits.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\n\nconst { t, done, header } = suite(\"holiday-deposits\");\n\nconst src = codeOnly(readFileSync(new URL(\"../engine/holiday-deposits.ts\", import.meta.url), \"utf8\"));\n\nheader(\"THE DATES, COMPUTED NOT TYPED\");\n\nt(\"H1 Thanksgiving is the fourth Thursday, worked out for any year\", () => {\n // Kim said \"third Thursday\" in her message and was wrong; we corrected her, so this had\n // better be right. Checked against the real US calendar.\n eq(H.thanksgiving(2026), \"2026-11-26\");\n eq(H.thanksgiving(2027), \"2027-11-25\");\n eq(H.thanksgiving(2028), \"2028-11-23\");\n eq(H.thanksgiving(2025), \"2025-11-27\");\n eq(H.thanksgiving(2030), \"2030-11-28\");\n return scoped(5, \"years\");\n});\n\nt(\"H2 no date is hardcoded anywhere in the module\", () => {\n // The promise made to Kim was that it is computed fresh each year so it cannot drift.\n const hardcoded = src.match(/[\"'`]20\\d\\d-\\d\\d-\\d\\d[\"'`]/g) || [];\n eq(hardcoded, [], \"a literal date is baked into the code, so it will be wrong next year\");\n return scoped(1, \"scan of the module source\");\n});\n\nt(\"H3 the windows bracket the holiday rather than landing on the day\", () => {\n const w = H.holidayWindows(2026);\n eq(w.length, 2);\n ok(w[0].from < \"2026-11-26\" && w[0].to > \"2026-11-26\", \"Thanksgiving is not inside its own window\");\n ok(w[1].from === \"2026-12-20\" && w[1].to === \"2027-01-02\", \"the new year window does not cross into January\");\n return scoped(2, \"windows\");\n});\n\nt(\"H29 on New Year's Day the season is still the one that is happening\", () => {\n // THE ERROR THIS CATCHES: rolling to the next season at midnight on 1 January drops the\n // stays that are physically in her kennels that morning, on the day she most wants the list.\n eq(H.seasonYear(\"2026-08-06\"), 2026);\n eq(H.seasonYear(\"2026-11-25\"), 2026);\n eq(H.seasonYear(\"2026-12-31\"), 2026);\n eq(H.seasonYear(\"2027-01-01\"), 2026, \"New Year's Day jumped forward a season while stays were still running\");\n eq(H.seasonYear(\"2027-01-02\"), 2026);\n eq(H.seasonYear(\"2027-01-03\"), 2027);\n return scoped(6, \"dates across the boundary\");\n});\n\nheader(\"WHO COUNTS AS A HOLIDAY STAY\");\n\n// These are real rows pulled from the Boarding Drop Off calendars on Aug 6 2026.\nconst REAL = [\n // INSIDE the Thanksgiving window on purpose. [was: 2026-11-02, which is outside every window,\n // so H5 passed whether or not the cancellation filter existed. Proved by deleting the filter\n // and watching H5 stay green.]\n { contactId: \"c-test\", title: \" Boarding Dropoff with Help Test\", startTime: \"2026-11-24T09:00:00-05:00\", dateAdded: \"2026-10-01 10:00:00\", appointmentStatus: \"cancelled\", isRecurring: false },\n { contactId: \"c-enzo\", title: \"Daycare Enzo \", startTime: \"2026-11-27T09:00:00-05:00\", dateAdded: \"2026-06-01 10:00:00\", appointmentStatus: \"confirmed\", isRecurring: true },\n { contactId: \"c-muss\", title: \"Achilles — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-07-20 14:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"c-muss\", title: \"Ghost — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-07-20 14:01:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"c-muss\", title: \"Chewy — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-07-20 14:02:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"c-flu\", title: \"Fluffy — Boarding Drop Off\", startTime: \"2027-01-01T09:00:00-05:00\", dateAdded: \"2026-08-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"c-nov\", title: \"Fluffy — Boarding Drop Off\", startTime: \"2026-11-10T09:00:00-05:00\", dateAdded: \"2026-08-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n];\n\nt(\"H4 a recurring weekly slot is never treated as a holiday stay\", () => {\n // THE ERROR THIS CATCHES: \"Daycare Enzo\" is a standing weekly booking that falls inside every\n // holiday window. Without this, Kim is told a regular owes her a deposit, repeatedly.\n const stays = H.groupIntoStays(REAL, H.holidayWindows(2026));\n ok(!stays.some((s) => s.contactId === \"c-enzo\"), \"a recurring booking was counted as a holiday stay\");\n // The Enzo row alone stopped proving this the moment daycare titles were also excluded: it is\n // kept out by EITHER rule, so it could not tell which one was working. Caught by a negative\n // control going red on the wrong test. This row is recurring AND boarding, so only the\n // recurrence filter can keep it out.\n const recurringBoarding = [{ contactId: \"c-weekly\", title: \"Bandit — Boarding Drop Off\",\n startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-01-01 10:00:00\", appointmentStatus: \"confirmed\", isRecurring: true }];\n eq(H.groupIntoStays(recurringBoarding, H.holidayWindows(2026)).length, 0,\n \"a standing weekly BOARDING slot was billed a holiday deposit\");\n return scoped(stays.length + 1, \"stays after filtering\");\n});\n\nt(\"H5 cancelled and test bookings are excluded\", () => {\n const stays = H.groupIntoStays(REAL, H.holidayWindows(2026));\n ok(!stays.some((s) => s.contactId === \"c-test\"), \"a cancelled booking was counted\");\n return scoped(1, \"cancelled booking\");\n});\n\nt(\"H6 three dogs on one day for one customer is ONE stay\", () => {\n // Real: Achilles, Ghost and Chewy all drop off on 25 November for the same person.\n const stays = H.groupIntoStays(REAL, H.holidayWindows(2026));\n const muss = stays.filter((s) => s.contactId === \"c-muss\");\n eq(muss.length, 1, \"one customer's three dogs became three separate deposit questions\");\n eq(muss[0].dogs.sort(), [\"Achilles\", \"Chewy\", \"Ghost\"]);\n eq(muss[0].bookedAt, \"2026-07-20 14:00:00\", \"the earliest booking time should survive, that is when the deposit fell due\");\n return scoped(3, \"dogs in one stay\");\n});\n\nt(\"H7 a booking outside the holiday windows is left alone\", () => {\n const stays = H.groupIntoStays(REAL, H.holidayWindows(2026));\n ok(!stays.some((s) => s.contactId === \"c-nov\"), \"a 10 November stay was pulled into the Thanksgiving window\");\n return scoped(1, \"out-of-window booking\");\n});\n\nt(\"H8 the local day is read off the string, never re-parsed\", () => {\n // A 9am drop-off on 25 Nov in New York must not become 24 Nov or 26 Nov via a timezone shift,\n // because either error moves a booking in or out of the window Kim is chasing.\n eq(H.localDay(\"2026-11-25T09:00:00-05:00\"), \"2026-11-25\");\n eq(H.localDay(\"2026-11-25T23:30:00-05:00\"), \"2026-11-25\");\n eq(H.localDay(\"2026-11-25T00:30:00-05:00\"), \"2026-11-25\");\n eq(H.localDay(null), null);\n eq(H.localDay(\"nonsense\"), null);\n // AND A UTC STRING IS CONVERTED, NOT SLICED. 9pm on the 25th in New York is 02:00 on the 26th in\n // UTC; slicing that gives the 26th and moves the booking a day. On the last day of a window that\n // drops the customer off Kim's list entirely, with no error and no unknown row.\n eq(H.localDay(\"2026-11-26T02:00:00Z\"), \"2026-11-25\");\n eq(H.localDay(\"2027-01-03T02:00:00Z\"), \"2027-01-02\");\n eq(H.localDay(\"2026-11-25T14:00:00Z\"), \"2026-11-25\");\n eq(H.localDay(\"2026-11-25T09:00:00Z\"), \"2026-11-25\");\n eq(H.localDay(\"notadateZ\"), null);\n // [was: /Date\\.parse|new Date\$\\s*(e|ev|event)/, which went dead the day localDay grew a branch\n // that legitimately builds a Date from a numeric epoch. It passed only because the parameter\n // happened to be named startTime. The guarantee is about the STRING path, so that is what is\n // asserted: the string branch slices, it never re-parses.]\n const fn = src.slice(src.indexOf(\"export function localDay\"), src.indexOf(\"export function seasonYear\"));\n ok(fn.length > 100, \"localDay was not found in the source, so this check is blind\");\n ok(/startTime\\.slice\\(0, 10\$/.test(fn), \"the string path no longer reads the day off the string\");\n // [was: ok(!/Date\\.parse/.test(fn)). That forbade the fix as well as the bug it was aimed at: it\n // conflated \"re-parsing\" with \"re-parsing in the wrong timezone\", when the epoch branch four\n // lines up proves that parsing THROUGH Intl.DateTimeFormat in BUSINESS_TZ is exactly the safe\n // thing to do. What must not happen is a bare local-timezone Date on the offset path.]\n ok(/BUSINESS_TZ/.test(fn), \"the conversion no longer pins the business timezone, so it runs in the server's\");\n ok(!/new Date\$startTime\$|Date\\.parse\$startTime\$\\s*\\)/.test(fn.slice(fn.indexOf(\"slice(0, 10)\"))),\n \"the offset-carrying path was changed to re-parse the timestamp, which shifts days across midnight\");\n return scoped(10, \"time strings\");\n});\n\nheader(\"THE MONEY\");\n\nconst NOTES_REAL = [\n { body: \"[Square] +$355.00 payment tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY (balance $355.00)\", dateAdded: \"2026-08-06T00:47:00.000Z\" },\n { body: \"[Square] +$355.00 payment tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY (balance $0.00)\", dateAdded: \"2026-08-06T00:47:01.000Z\" },\n { body: \"[Square] +$355.00 payment tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY (balance $0.00)\", dateAdded: \"2026-08-06T00:47:02.000Z\" },\n { body: \"[Square] +$355.00 payment tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY (balance $0.00)\", dateAdded: \"2026-08-06T00:47:03.000Z\" },\n { body: \"[Square] +$355.00 payment tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY (balance $0.00)\", dateAdded: \"2026-08-06T00:47:04.000Z\" },\n { body: \"--------- AI Call with: Chloe V2 --------- Call Start Time: Mar 14\", dateAdded: \"2026-03-14T13:25:00.000Z\" },\n];\n\nt(\"H9 one payment written five times is counted once\", () => {\n // THE ERROR THIS CATCHES: her real notes hold this payment five times. Summing the bodies\n // would report $1,775 against a $355 payment and mark a deposit as covered many times over.\n const p = H.parseSquarePayments(NOTES_REAL);\n eq(p.length, 1, \"the same payment id was counted more than once\");\n eq(p[0].amount, 355);\n eq(p[0].id, \"tWYOxuFcG9ZqzF7GTnUPfElf2ZEZY\");\n return scoped(NOTES_REAL.length, \"notes read\");\n});\n\nt(\"H10 the contradictory balance figure is never used\", () => {\n // The duplicates disagree with each other: $355.00 then $0.00 four times. Reading the balance\n // would make the answer depend on which duplicate happened to be read last.\n ok(!/balance/i.test(src.replace(/^\\s*\\/\\/.*$/gm, \"\")), \"the module reads the balance figure, which contradicts itself in the real data\");\n return scoped(1, \"scan for balance use\");\n});\n\nt(\"H11 notes that are not payments are ignored\", () => {\n const p = H.parseSquarePayments([{ body: \"Called and left a voicemail\", dateAdded: \"2026-08-01T00:00:00Z\" }]);\n eq(p.length, 0);\n eq(H.parseSquarePayments(null).length, 0);\n eq(H.parseSquarePayments([]).length, 0);\n return scoped(3, \"non-payment inputs\");\n});\n\nt(\"H12 a comma in the amount does not truncate it\", () => {\n const p = H.parseSquarePayments([{ body: \"[Square] +$1,250.00 payment abc123 (balance $0.00)\", dateAdded: \"2026-08-01T00:00:00Z\" }]);\n eq(p[0].amount, 1250, \"$1,250.00 was misread, which would understate what a customer paid\");\n return scoped(1, \"amount\");\n});\n\nheader(\"WHAT KIM IS TOLD\");\n\nconst stay = { contactId: \"c1\", day: \"2026-11-25\", dogs: [\"Achilles\"], dogCount: 1, bookedAt: \"2026-07-20 14:00:00\", window: \"Thanksgiving\" };\n\nt(\"H13 a failed read is never reported as an outstanding deposit\", () => {\n // THE ERROR THIS CATCHES, and it is the one that would cost Kim a customer: an API hiccup\n // becoming \"this person has not paid\".\n const s = H.statusFor(stay, null);\n eq(s.state, \"could_not_check\");\n ok(!/not paid|owes|outstanding|unpaid/i.test(s.note), \"a failed read was described as non-payment\");\n return scoped(1, \"failed read\");\n});\n\nt(\"H14 a card payment for exactly the deposit is what clears a stay\", () => {\n // THE ONLY EVIDENCE THAT CLEARS ONE. Nothing in her CRM says what a payment was for, and two\n // earlier attempts at inferring it both cost her money, so an exact match on the deposit amount\n // is the only thing treated as an answer. Everything else is shown to her and left to her.\n const s = H.statusFor(stay, [{ amount: 50, id: \"p1\", at: \"2026-07-21T10:00:00Z\", kind: \"direct\" }]);\n eq(s.state, \"seen\");\n ok(/exactly \\$50\\.00/.test(s.note), \"the reason it was cleared is not stated\");\n ok(/Jul 21/.test(s.note), \"the date Kim would recognise is missing\");\n // And a payment of some other size does NOT clear it, however large.\n eq(H.statusFor(stay, [{ amount: 355, id: \"p2\", at: \"2026-07-21T10:00:00Z\", kind: \"direct\" }]).state, \"partial\");\n return scoped(2, \"payments\");\n});\n\nt(\"H15 a payment smaller than the deposit is called partial, not missing\", () => {\n const s = H.statusFor(stay, [{ amount: 20, id: \"p1\", at: \"2026-07-20T10:00:00Z\" }]);\n eq(s.state, \"partial\");\n ok(/\\$20\\.00/.test(s.note), \"the amount actually seen is not shown, so Kim cannot judge it\");\n return scoped(1, \"partial payment\");\n});\n\nt(\"H16 a payment from an unrelated month does not count towards this stay\", () => {\n const s = H.statusFor(stay, [{ amount: 355, id: \"p1\", at: \"2026-01-05T10:00:00Z\" }]);\n eq(s.state, \"none_seen\", \"a payment from ten months earlier was credited against this booking\");\n return scoped(1, \"out-of-window payment\");\n});\n\nt(\"H17 nothing found still says it might have been paid another way\", () => {\n const s = H.statusFor(stay, []);\n eq(s.state, \"none_seen\");\n // NAMED BY THE ROUTES SHE ACTUALLY TAKES. [was: /cash|over the phone/, the pre-H60 wording. H60\n // replaced that sentence because it \"named neither of the two routes she actually offers\" — but\n // this assertion was left pointing at the old words, and stayed green off the one word of the old\n // copy that survived into the new: \"cash\". Her money page lists Card, Venmo, Zelle and Cheque,\n // and cash appears nowhere on her site or in the handover pack.]\n ok(/Venmo, Zelle or a cheque/i.test(s.note), \"the honest limit is missing, so this reads as proof of non-payment\");\n ok(!/\\bcash\\b/i.test(s.note), \"the note offers cash as a place to look, and she does not take cash\");\n return scoped(2, \"empty result\");\n});\n\nt(\"H18 the word unpaid never reaches Kim\", () => {\n const statuses = [H.statusFor(stay, []), H.statusFor(stay, null), H.statusFor(stay, [{ amount: 20, id: \"p\", at: \"2026-07-20T10:00:00Z\" }])];\n const all = statuses.map((s) => s.note).join(\" \") + \" \" + H.depositSentence(statuses, false);\n ok(!/unpaid/i.test(all), \"the module told Kim someone is unpaid, which it cannot know\");\n ok(!/\\bowes?\\b/i.test(all.replace(/who owe you/i, \"\")), \"the module asserted somebody owes money\");\n return scoped(statuses.length + 1, \"rendered strings\");\n});\n\nt(\"H19 a dead payment feed suppresses the list instead of blaming everyone\", () => {\n // THE ERROR THIS CATCHES: the Square bridge stops, no payments are found for anybody, and the\n // page cheerfully reports that every single holiday customer has not paid.\n ok(H.feedLooksDead([[], [], [], [], [], []]), \"an entirely empty feed was not detected\");\n ok(!H.feedLooksDead([[], [], [], [], [{ amount: 50, id: \"p\", at: null }]]), \"a working feed was called dead\");\n const s = H.depositSentence([H.statusFor(stay, [])], true);\n ok(/payment feed has stopped/i.test(s), \"a dead feed is not explained to Kim\");\n ok(/held back/i.test(s), \"the list is not held back when the feed is dead\");\n return scoped(4, \"feed states\");\n});\n\nt(\"H19b two quiet customers are not evidence that Square has stopped\", () => {\n // FOUND BY WATCHING IT RUN, 6 Aug 15:41Z. Two holiday stays were booked, neither customer had a\n // Square note, and the kill switch fired: Kim would have been shown \"the payment feed has\n // stopped\" on the strength of two people. Two customers with no card payment is a normal week.\n ok(!H.feedLooksDead([[], []]), \"a two-customer sample was treated as proof of an outage\");\n ok(!H.feedLooksDead([[], [], [], []]), \"a four-customer sample was treated as proof of an outage\");\n ok(H.feedLooksDead([[], [], [], [], []]), \"a full sample of silence should still trip the switch\");\n ok(!H.feedLooksDead([]), \"nothing read at all is not evidence of anything\");\n eq(H.MIN_SAMPLE_FOR_DEAD_FEED, 5, \"the floor is not stated as a named number anyone can find\");\n return scoped(5, \"sample sizes\");\n});\n\nt(\"H20 the sentence is generated from the counts, so words and numbers cannot disagree\", () => {\n const many = [H.statusFor(stay, []), H.statusFor(stay, []), H.statusFor(stay, [{ amount: 50, id: \"p\", at: \"2026-07-21T10:00:00Z\", kind: \"direct\" }])];\n const s = H.depositSentence(many, false);\n ok(/3 holiday stays are booked/.test(s), `the count is not stated: ${s}`);\n ok(/1 has a card payment/.test(s), \"the paid count is not stated\");\n ok(/2 are worth checking/.test(s), \"the check count is not stated\");\n ok(!/\\$50 payment/.test(s), `the headline names a fixed $50 while each row owes $50 per dog: ${s}`);\n ok(/shortlist/.test(s), \"the honest framing is missing\");\n return scoped(many.length, \"statuses\");\n});\n\nt(\"H21 no holiday bookings at all reads as nothing to do, not as a problem\", () => {\n const s = H.depositSentence([], false);\n ok(/nothing to check/i.test(s), \"an empty list was not explained\");\n ok(!/\\d+ holiday stays are booked/.test(s), \"it announced a count of zero\");\n return scoped(1, \"empty case\");\n});\n\nheader(\"THE SECOND PAYMENT FORMAT, FOUND LIVE ON 6 AUG\");\n\n// Both of these are verbatim rows off David Newman's contact, read live on Aug 6 2026. They are\n// the same amount under two different payment ids, four days apart in note-write time.\nconst NOTES_TWO_FORMATS = [\n { body: \"[Square] +$35.00 payment z3rQRe4iTWZE4AfSdt7fvG0mNd8YY (balance $35.00)\", dateAdded: \"2026-07-31T13:22:29.159Z\" },\n { body: \"[Square] Till payment $35.00 on 2026-07-17. Matched from Square payment 3zu7hAMbwBfEKDsUXyRuw58pztWZY via customer QJXE7X8ZM31TVEQMQS7TTF7974. Backfilled after the Customers-read token was supplied.\", dateAdded: \"2026-07-27T18:02:01.492Z\" },\n];\n\nt(\"H23 the backfill note format is money, not noise\", () => {\n // THE ERROR THIS CATCHES: the first version of the parser only knew the \"+$\" format. A customer\n // whose only Square evidence is a backfill note would have read as no payment found, and gone\n // on the shortlist. Silent, and exactly the wrong direction.\n const p = H.parseSquarePayments([NOTES_TWO_FORMATS[1]]);\n eq(p.length, 1, \"the Till/Matched-from note was not recognised as a payment at all\");\n eq(p[0].amount, 35);\n eq(p[0].id, \"3zu7hAMbwBfEKDsUXyRuw58pztWZY\");\n eq(p[0].kind, \"matched\");\n return scoped(1, \"backfill note\");\n});\n\nt(\"H24 the backfill carries the real payment date, not the day it was written down\", () => {\n // The note was written on 27 July about money taken on Jul 17y. Using the write date would\n // slide a payment out of the window it belongs to.\n const p = H.parseSquarePayments([NOTES_TWO_FORMATS[1]]);\n eq(p[0].at, \"2026-07-17\", \"the note's own write time was used instead of the payment date it states\");\n return scoped(1, \"date\");\n});\n\nt(\"H25 the same $35 under two ids is not counted as $70\", () => {\n // Nothing in the data settles whether this is one payment or two. The two readings disagree\n // about whether a $50 deposit is covered, so the reading that keeps the person ON the list to\n // be checked wins. Counting $70 would quietly drop a real customer off Kim's shortlist.\n const p = H.parseSquarePayments(NOTES_TWO_FORMATS);\n eq(p.length, 2, \"both records should survive parsing; the judgement happens later\");\n const { kept, collapsed } = H.collapseSameMoney(p);\n eq(collapsed, 1);\n eq(kept.reduce((n, x) => n + x.amount, 0), 35, \"$35 seen twice was added up to $70\");\n return scoped(2, \"records\");\n});\n\nt(\"H26 two genuinely separate payments of the same size are still two payments\", () => {\n // The mirror of H25, and the reason the rule is narrow: only a \"Matched from\" reconciliation\n // record collapses. Two direct payments of $35 are $70 and must stay $70.\n const two = [\n { amount: 35, id: \"a\", at: \"2026-07-01\", kind: \"direct\" },\n { amount: 35, id: \"b\", at: \"2026-07-02\", kind: \"direct\" },\n ];\n const { kept, collapsed } = H.collapseSameMoney(two);\n eq(collapsed, 0);\n eq(kept.length, 2, \"two real payments were merged into one\");\n return scoped(2, \"payments\");\n});\n\nt(\"H27 the same $50 under two ids is one deposit, not two payments in Kim's face\", () => {\n // Her live data holds the same money as a direct payment AND as a \"Matched from\" reconciliation\n // record, under two different ids. Listing both would have Kim reading $100 where there is $50.\n const s = H.statusFor(stay, [\n { amount: 50, id: \"a\", at: \"2026-07-21T10:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"b\", at: \"2026-07-21T10:00:00Z\", kind: \"matched\" },\n ]);\n eq(s.state, \"seen\");\n eq(s.amountSeen, 50, \"the same $50 was counted twice\");\n ok(!/other card payment/i.test(s.note), \"the duplicate record was shown to Kim as a second payment\");\n ok(!/unpaid|owes|not paid/i.test(s.note), \"the softer wording rule still applies to this sentence\");\n // A NON-DEPOSIT PAIR, because the pair above could not fail. [was: only the $50 case, where\n // amountSeen is the constant DEPOSIT and the \"other payments\" list is defined as everything\n // that is NOT $50 — so both assertions held whether or not the collapse ran at all. Deleting\n // the collapse call left all 270 assertions green. Caught by a fourth adversarial read.]\n const live = H.statusFor(stay, [\n { amount: 35, id: \"z3rQ\", at: \"2026-07-31T13:22:29Z\", kind: \"direct\" },\n { amount: 35, id: \"3zu7\", at: \"2026-07-17T00:00:00Z\", kind: \"matched\" },\n ]);\n eq(live.amountSeen, 35, \"the same $35, written by Square in both of its note formats, was counted as $70\");\n ok(/1 card payment is/.test(live.note), `the duplicate was shown to Kim as a second payment: ${live.note}`);\n return scoped(4, \"records\");\n});\n\nt(\"H28 her CRM's two spellings of the status field are both read\", () => {\n // Live on Aug 6: 4 of the 13 events on the Boarding Drop Off calendar carry `appoinmentStatus`\n // alongside the correctly spelled key. They agree today. Reading one is passing by luck.\n ok(H.eligible({ contactId: \"c1\", appointmentStatus: \"confirmed\", appoinmentStatus: \"confirmed\" }));\n ok(!H.eligible({ contactId: \"c1\", appointmentStatus: \"confirmed\", appoinmentStatus: \"cancelled\" }),\n \"a booking cancelled under the misspelled key was still counted, so a cancelled customer gets chased\");\n ok(!H.eligible({ contactId: \"c1\", appointmentStatus: \"cancelled\" }));\n ok(H.eligible({ contactId: \"c1\" }), \"a booking with no status at all should not vanish\");\n return scoped(4, \"status shapes\");\n});\n\nheader(\"WHAT THE ADVERSARIAL PASS FOUND, 6 AUG\");\n\nt(\"H30 every Thanksgiving window is made of dates that exist\", () => {\n // FOUND BY AN ADVERSARIAL READ, not by a failing test. The window edges were decimal arithmetic\n // on the day number, so any year where Thanksgiving is the 28th produced \"Nov 31\": a stay\n // dropping off on 1 December sorted ABOVE it and vanished, and the card printed \"Nov 31\" to Kim.\n let checked = 0;\n for (let y = 2026; y <= 2040; y++) {\n for (const w of H.holidayWindows(y)) {\n for (const d of [w.from, w.to]) {\n const iso = new Date(`${d}T00:00:00Z`).toISOString().slice(0, 10);\n eq(iso, d, `${y}: ${d} is not a real date`);\n checked++;\n }\n }\n const t0 = H.thanksgiving(y);\n const w0 = H.holidayWindows(y)[0];\n ok(w0.from < t0 && w0.to > t0, `${y}: Thanksgiving is not inside its own window`);\n }\n return scoped(checked, \"window edges across 15 years\");\n});\n\nt(\"H31 an appointment time sent as a number is still a day\", () => {\n // Two sibling modules that read this same endpoint already defend against an epoch startTime.\n // Returning null for it dropped EVERY stay and stored \"no holiday stays are booked\" as a fact.\n const d = H.localDay(Date.parse(\"2026-11-25T14:00:00Z\"));\n eq(d, \"2026-11-25\", \"an epoch timestamp was thrown away instead of read\");\n eq(H.localDay(Date.parse(\"2026-11-26T02:00:00Z\")), \"2026-11-25\",\n \"an epoch just after midnight UTC was not read in the business's own timezone\");\n eq(H.localDay(NaN), null);\n return scoped(3, \"numeric times\");\n});\n\nt(\"H32 her CRM's sloppier shapes still exclude the bookings they should\", () => {\n ok(!H.eligible({ contactId: \"c\", appointmentStatus: \"cancelled \" }), \"one trailing space made a cancelled booking chaseable\");\n ok(!H.eligible({ contactId: \"c\", appointmentStatus: \" Cancelled\" }));\n ok(!H.eligible({ contactId: \"c\", isRecurring: \"true\" }), \"a recurring flag sent as a string put a weekly regular on the list\");\n ok(!H.eligible({ contactId: \"c\", deleted: \"true\" }));\n // The ONLY thing keeping the weekly daycare slot off the list used to be its recurrence flag.\n ok(!H.eligible({ contactId: \"c\", title: \"Daycare Enzo \", isRecurring: false }), \"a one-off daycare booking was billed a boarding deposit\");\n ok(H.eligible({ contactId: \"c\", title: \"Achilles — Boarding Drop Off\" }));\n return scoped(6, \"shapes\");\n});\n\nt(\"H33 four ways of writing a payment that all used to read as no payment\", () => {\n const p = (b) => H.parseSquarePayments([{ body: b, dateAdded: \"2026-07-31T00:00:00Z\" }]);\n eq(p(\"[Square] +$25.00 payment aaa (balance $0.00) then [Square] +$35.00 payment bbb (balance $0.00)\").length, 2,\n \"a note holding two payments only counted one of them\");\n eq(p(\"[Square] Till payment $50.00 on 2026-07-17. Matched from Square payment 3zu7hAM\")[0]?.amount, 50,\n \"a backfill note that ends at the payment id lost the whole payment\");\n eq(p(\"[Square] +$50 payment abc\")[0]?.amount, 50, \"a whole-dollar amount was not read as money\");\n eq(p(\"[Square] Till payment $40.00 on 2026-07-01. Matched from Square payment 3zu7abc, via customer X.\")[0]?.id, \"3zu7abc\",\n \"a trailing comma became part of the payment id, so the same payment could be counted twice\");\n return scoped(4, \"note shapes\");\n});\n\nconst stayNov = { contactId: \"c1\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Achilles\"], dogCount: 1, bookedAt: \"2026-07-20 14:00:00\", window: \"Thanksgiving\" };\n\nt(\"H34 an unrelated payment months before the stay does not clear the deposit\", () => {\n // THE BIGGEST SILENT MISS. The old window ran from the booking to the drop-off, four months\n // wide, and summed everything in it. A customer's $355 training package cleared their deposit,\n // and being cleared means nobody ever looks at them again.\n const s = H.statusFor(stayNov, [{ amount: 355, id: \"pkg\", at: \"2026-08-06T00:47:00Z\", kind: \"direct\" }]);\n ok(s.state !== \"seen\", \"a training package was counted as the deposit and the customer was cleared\");\n ok(/\\$355\\.00 on Aug 6/.test(s.note), `the payment that does exist is hidden from Kim rather than named: ${s.note}`);\n ok(/nothing unspent on file matches that amount/.test(s.note), `the note does not say why it was not treated as the deposit: ${s.note}`);\n const s2 = H.statusFor(stayNov, [\n { amount: 30, id: \"a\", at: \"2026-08-01T00:00:00Z\", kind: \"direct\" },\n { amount: 25, id: \"b\", at: \"2026-09-14T00:00:00Z\", kind: \"direct\" },\n ]);\n ok(s2.state !== \"seen\", \"two unrelated payments were added up into a deposit\");\n eq(s2.amountSeen, 55, \"the amounts Kim can see are not reported\");\n // And the real deposit is still recognised.\n eq(H.statusFor(stayNov, [{ amount: 50, id: \"dep\", at: \"2026-07-21T00:00:00Z\", kind: \"direct\" }]).state, \"seen\");\n return scoped(4, \"payment patterns\");\n});\n\nt(\"H35 a booking with no record of when it was made is unknown, not settled\", () => {\n // [was: the search window fell back to the beginning of time, so a payment from 2019 cleared it.]\n const s = H.statusFor({ ...stayNov, bookedAt: null }, [{ amount: 60, id: \"old\", at: \"2019-02-01T00:00:00Z\", kind: \"direct\" }]);\n eq(s.state, \"could_not_check\", \"a payment from years earlier settled a booking whose date we do not know\");\n ok(!/unpaid|owes|has not paid/i.test(s.note));\n return scoped(1, \"booking\");\n});\n\nt(\"H36 a stay that starts before the window but runs through it is a holiday stay\", () => {\n // A holiday boarding business is mostly people who drop off the day BEFORE they travel.\n const w = H.holidayWindows(2026);\n const before = [{ contactId: \"c-x\", title: \"Rex — Boarding Drop Off\", startTime: \"2026-12-19T09:00:00-05:00\",\n endTime: \"2026-12-27T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const stays = H.groupIntoStays(before, w);\n eq(stays.length, 1, \"a dog boarded across Christmas was invisible because it arrived on the 19th\");\n eq(stays[0].window, \"Christmas and New Year\");\n eq(stays[0].until, \"2026-12-27\");\n // And a stay that ends before the window still does not count.\n const away = [{ ...before[0], startTime: \"2026-12-01T09:00:00-05:00\", endTime: \"2026-12-05T09:00:00-05:00\" }];\n eq(H.groupIntoStays(away, w).length, 0, \"a stay nowhere near a holiday was pulled in\");\n return scoped(4, \"stays\");\n});\n\nt(\"H37 a hyphenated dog name survives\", () => {\n // Kim reads this name before she phones somebody.\n eq(H.dogFromTitle(\"Jean-Luc — Boarding Drop Off\"), \"Jean-Luc\", \"the name was cut at the hyphen inside it\");\n eq(H.dogFromTitle(\"Achilles — Boarding Drop Off\"), \"Achilles\");\n eq(H.dogFromTitle(\"Rex - Boarding Drop Off\"), \"Rex\");\n return scoped(3, \"titles\");\n});\n\nt(\"H38 two payments are never described as one, and never added up into a deposit\", () => {\n const s = H.statusFor(stayNov, [\n { amount: 30, id: \"a\", at: \"2026-07-21T00:00:00Z\", kind: \"direct\" },\n { amount: 40, id: \"b\", at: \"2026-07-22T00:00:00Z\", kind: \"direct\" },\n ]);\n ok(s.state !== \"seen\", \"$30 and $40 were added together into a $50 deposit\");\n ok(/2 card payments are/.test(s.note), `two payments described in the singular: ${s.note}`);\n ok(/\\$30\\.00 on Jul 21/.test(s.note) && /\\$40\\.00 on Jul 22/.test(s.note), \"the two payments are not both shown\");\n return scoped(2, \"payments\");\n});\n\nt(\"H39 the dead-feed sentence does not speak for customers it never read\", () => {\n // [was: \"no Square payment has been recorded against anybody in this period\" while two of the\n // seven had failed to read. The suppressed table meant Kim could not even see which.]\n const st = [\n ...Array.from({ length: 5 }, () => H.statusFor(stayNov, [])),\n H.statusFor(stayNov, null), H.statusFor(stayNov, null),\n ];\n const s = H.depositSentence(st, true);\n ok(/any of the 5 we could check/.test(s), `the sentence claims to cover people it could not read: ${s}`);\n ok(!/against anybody/.test(s));\n return scoped(7, \"stays\");\n});\n\nt(\"H40 a deposit paid days before the booking was entered is put in front of Kim\", () => {\n // A customer phones on Jul 14y and pays $50; Kim enters the booking on the 20th. An exact-amount\n // match inside the search window is the one thing that clears a stay, so this one clears.\n const s = H.statusFor(stayNov, [{ amount: 50, id: \"early\", at: \"2026-07-14T00:00:00Z\", kind: \"direct\" }]);\n eq(s.state, \"seen\", \"a $50 card payment six days before the booking was typed in was not recognised\");\n ok(/Jul 14/.test(s.note), \"the date Kim would recognise is not in the sentence\");\n ok(!/unpaid|owes|has not paid/i.test(s.note));\n // But not one from before the search window: that is a different stay's money.\n ok(H.statusFor(stayNov, [{ amount: 50, id: \"ancient\", at: \"2026-01-14T00:00:00Z\", kind: \"direct\" }]).state !== \"seen\",\n \"a $50 payment six months earlier cleared this stay\");\n return scoped(2, \"payments\");\n});\n\nt(\"H41 the LATEST pick-up ends a stay, so one dog going home early does not delete it\", () => {\n // Her pick-up calendar carries one row per dog: \"Winnie — Boarding Pick Up\", \"Wylie — Boarding\n // Pick Up\", same contact, same day. Taking the earliest meant a family boarding straight through\n // Christmas was computed as a two-day stay in mid-December and dropped out of the window.\n const drops = [{ contactId: \"fam\", title: \"Rex — Boarding Drop Off\", startTime: \"2026-12-15T09:00:00-05:00\",\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const picks = [\n { contactId: \"fam\", title: \"Bella — Boarding Pick Up\", startTime: \"2026-12-17T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"fam\", title: \"Rex — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const stays = H.groupIntoStays(drops, H.holidayWindows(2026), picks);\n eq(stays.length, 1, \"a family boarding through Christmas was deleted because one dog went home early\");\n eq(stays[0].until, \"2026-12-27\");\n return scoped(2, \"pick-ups\");\n});\n\nt(\"H42 a stay never reaches forward and takes the next booking's pick-up\", () => {\n // [was: unbounded. A 3-night Thanksgiving stay was rendered \"Nov 25 to Dec 27\", and an ordinary\n // 6 November boarding with a stray later pick-up was dragged into a holiday window and billed\n // a deposit. Her real data has 3 contacts with drop-offs and no pick-ups and 20 the other way.]\n const drops = [\n { contactId: \"two\", title: \"A — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"two\", title: \"A — Boarding Drop Off\", startTime: \"2026-12-20T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const picks = [{ contactId: \"two\", title: \"A — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const stays = H.groupIntoStays(drops, H.holidayWindows(2026), picks);\n const nov = stays.find((x) => x.day === \"2026-11-25\");\n eq(nov.until, \"2026-11-25\", \"the November stay swallowed a pick-up belonging to the December booking\");\n eq(stays.find((x) => x.day === \"2026-12-20\").until, \"2026-12-27\");\n // A case where the length bound alone would NOT save us: two bookings 7 days apart and a\n // pick-up 10 days after the first, well inside MAX_STAY_DAYS. Only the next-booking bound stops\n // the first stay swallowing the second's pick-up.\n const close = H.groupIntoStays(\n [\"20\", \"27\"].map((d) => ({ contactId: \"cl\", title: \"A — Boarding Drop Off\", startTime: `2026-12-${d}T09:00:00-05:00`,\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false })),\n H.holidayWindows(2026),\n [{ contactId: \"cl\", title: \"A — Boarding Pick Up\", startTime: \"2026-12-30T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }]);\n eq(close.find((x) => x.day === \"2026-12-20\").until, \"2026-12-20\",\n \"the 20 December stay swallowed a pick-up that belongs to the 27 December booking\");\n eq(close.find((x) => x.day === \"2026-12-27\").until, \"2026-12-30\");\n // A STRAY PICK-UP MUST NOT DRAG AN OUT-OF-SEASON BOARDING INTO A WINDOW. Her account has about\n // twenty contacts with pick-ups and no matching drop-off, so orphan pick-up records are the\n // common case. [was: this asserted the drag HAPPENED — eq(stray.length, 1) — with a follow-up\n // whose first disjunct was false and whose second was true whenever the drag occurred. It was\n // a test pinning the bug its own comment said had been fixed. Caught by a third adversarial\n // read, which applied the correct bound and watched this test go red for it.]\n const stray = H.groupIntoStays(\n [{ contactId: \"s\", title: \"B — Boarding Drop Off\", startTime: \"2026-11-06T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }],\n H.holidayWindows(2026),\n [{ contactId: \"s\", title: \"B — Boarding Pick Up\", startTime: \"2027-02-01T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }]);\n eq(stray.length, 0, \"a 6 November boarding was stretched to February by an orphan pick-up and put on the holiday shortlist\");\n // And a stay of a believable length still pairs.\n const real = H.groupIntoStays(\n [{ contactId: \"r\", title: \"C — Boarding Drop Off\", startTime: \"2026-12-18T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }],\n H.holidayWindows(2026),\n [{ contactId: \"r\", title: \"C — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }]);\n eq(real.length, 1, \"a nine-night Christmas stay was thrown out by the length bound\");\n return scoped(4, \"stays\");\n});\n\nt(\"H43 a cancelled or recurring pick-up is not allowed to end a stay\", () => {\n const drops = [{ contactId: \"c\", title: \"A — Boarding Drop Off\", startTime: \"2026-12-18T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const bad = [\n { contactId: \"c\", title: \"A — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"cancelled\", isRecurring: false },\n { contactId: \"c\", title: \" Boarding Pickup with David Newman\", startTime: \"2026-12-25T16:30:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: true },\n ];\n eq(H.groupIntoStays(drops, H.holidayWindows(2026), bad).length, 0,\n \"a cancelled or recurring pick-up was used to stretch a stay into a holiday window\");\n const good = [{ contactId: \"c\", title: \"A — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n eq(H.groupIntoStays(drops, H.holidayWindows(2026), good).length, 1);\n return scoped(3, \"pick-ups\");\n});\n\nt(\"H44 a real boarding booking with the word daycare in its title is not thrown away\", () => {\n // Her titles carry free text: \"drop off: Mia and Gemma \", \"Boarding drop off Harry\". A title\n // that says BOTH is a boarding booking with a note on it.\n ok(H.eligible({ contactId: \"c\", title: \"Boarding + daycare drop off with Dan Bonner\" }),\n \"a real boarding stay was excluded because somebody typed daycare in the title\");\n ok(H.eligible({ contactId: \"c\", title: \"Boarding Dropoff (daycare rate) with Gina Wright\" }));\n ok(!H.eligible({ contactId: \"c\", title: \"Daycare Enzo \" }), \"the daycare-only slot should still be excluded\");\n return scoped(3, \"titles\");\n});\n\nt(\"H45 the test-record label does not fire on a real surname\", () => {\n ok(!H.looksLikeTestRecord(\"Sarah Tester\"), \"a customer called Tester was labelled a test record on Kim's screen\");\n ok(!H.looksLikeTestRecord(\"Bob Testa\"));\n ok(!H.looksLikeTestRecord(\"Ann Testerman\"));\n ok(H.looksLikeTestRecord(\"help test\"), \"the record that really is a test was not flagged\");\n ok(H.looksLikeTestRecord(\"ZZTEST PuppyPath-Dummy\"));\n return scoped(5, \"names\");\n});\n\nt(\"H46 the dead-feed sentence never says it checked nobody\", () => {\n const allUnknown = [H.statusFor(stayNov, null), H.statusFor(stayNov, null)];\n const s = H.depositSentence(allUnknown, true);\n ok(!/any of the 0/.test(s), `the sentence reads as broken: ${s}`);\n ok(/none of them could be checked/i.test(s), \"the honest version of this case is missing\");\n return scoped(2, \"stays\");\n});\n\nt(\"H47 the dead-feed switch counts customers, not bookings\", () => {\n // [was: one entry per stay, so a single regular with five holiday drop-offs and a habit of\n // paying cash suppressed the whole card on their own. Her data has one contact with 24.]\n const one = new Map([[\"only-customer\", []]]);\n ok(!H.feedLooksDead(one), \"one customer with no card payment was treated as an outage\");\n const five = new Map([[\"a\", []], [\"b\", []], [\"c\", []], [\"d\", []], [\"e\", []]]);\n ok(H.feedLooksDead(five), \"five customers with no card payment anywhere did not trip the switch\");\n const mixed = new Map([[\"a\", []], [\"b\", []], [\"c\", []], [\"d\", []], [\"e\", [{ amount: 50, id: \"p\", at: null, kind: \"direct\" }]]]);\n ok(!H.feedLooksDead(mixed), \"a working feed was called dead\");\n return scoped(3, \"samples\");\n});\n\nt(\"H48 one $50 deposit settles ONE stay, not every booking that customer has\", () => {\n // THE MOST EXPENSIVE BUG FOUND ALL DAY, and the ordinary case rather than an edge: a regular\n // books Thanksgiving and Christmas in the same phone call and pays one $50 deposit. Both search\n // windows are anchored on the same booking date, so both stays saw the same payment and both\n // went green. Kim was owed $100, $50 arrived, and neither row reached the shortlist.\n const two = [\n { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" },\n { contactId: \"c\", day: \"2026-12-22\", until: \"2026-12-27\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Christmas and New Year\" },\n ];\n const one = [{ amount: 50, id: \"onlyfifty\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }];\n const out = H.statusesForCustomer(two, one);\n eq(out.filter((s) => s.state === \"seen\").length, 1, \"one $50 payment settled both of this customer's holiday stays\");\n eq(out[0].state, \"seen\", \"the payment should settle the earlier stay\");\n ok(out[1].state !== \"seen\", \"the second stay was settled by money that had already been spent\");\n // Two deposits settle two stays.\n const both = H.statusesForCustomer(two, [...one, { amount: 50, id: \"second\", at: \"2026-10-06T00:00:00Z\", kind: \"direct\" }]);\n eq(both.filter((s) => s.state === \"seen\").length, 2, \"two real $50 deposits did not settle two stays\");\n return scoped(2, \"stays\");\n});\n\nt(\"H49 a payment after the dogs go home does not settle the stay\", () => {\n // The upper edge of the search window. [was: unguarded — it could be stretched to a year\n // without a single test moving, which is how \"any payment ever\" comes back.]\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n eq(H.statusFor(st, [{ amount: 50, id: \"a\", at: \"2026-11-29T00:00:00Z\", kind: \"direct\" }]).state, \"seen\",\n \"a deposit settled the day after pick-up should still count\");\n ok(H.statusFor(st, [{ amount: 50, id: \"b\", at: \"2026-12-15T00:00:00Z\", kind: \"direct\" }]).state !== \"seen\",\n \"a payment weeks after the dogs went home was counted as this stay's deposit\");\n ok(H.statusFor(st, [{ amount: 50, id: \"c\", at: \"2027-06-01T00:00:00Z\", kind: \"direct\" }]).state !== \"seen\",\n \"a payment the following summer was counted as this stay's deposit\");\n return scoped(3, \"payment dates\");\n});\n\nt(\"H50 a lone payment that is not the deposit reads as English\", () => {\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(st, [{ amount: 100, id: \"a\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }]).note;\n ok(!/none of them/.test(n), `\"none of them\" about a single payment: ${n}`);\n ok(!/among them/.test(n), `\"among them\" about a single payment: ${n}`);\n ok(/\\$100\\.00 on Oct 5/.test(n), \"the payment is not shown\");\n return scoped(1, \"note\");\n});\n\nt(\"H51 the headline counts every row the table shows as worth a look\", () => {\n // [was: unguarded. Dropping the partial rows from the count gave \"1 is worth checking\" above a\n // table showing two rows both labelled Worth a look.]\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const mixed = [\n H.statusFor(st, []), // none_seen\n H.statusFor(st, [{ amount: 100, id: \"a\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }]), // partial\n ];\n const s = H.depositSentence(mixed, false);\n ok(/2 are worth checking/.test(s), `the headline does not count both rows the table shows: ${s}`);\n return scoped(2, \"rows\");\n});\n\nt(\"H52 a deposit Square wrote twice does not settle two different stays\", () => {\n // THE SAME MONEY BUG, RE-ENTERING THROUGH A CRACK. Round three stopped one $50 settling two\n // stays. It came straight back when the payment was a direct+matched pair: the collapse ran\n // inside the per-stay check while the allocator marked only the surviving id as spent, so the\n // folded twin was still on the table for the next stay. Both rows went green quoting two\n // different dates, so it read as two deposits. Kim owed $100, $50 arrived, nothing to chase.\n const two = [\n { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Thanksgiving\" },\n { contactId: \"c\", day: \"2026-12-22\", until: \"2026-12-27\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Christmas and New Year\" },\n ];\n const twinned = [\n { amount: 50, id: \"z3rQRe4iTWZE4AfSdt7fvG0mNd8YY\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"3zu7hAMbwBfEKDsUXyRuw58pztWZY\", at: \"2026-10-01T00:00:00Z\", kind: \"matched\" },\n ];\n const out = H.statusesForCustomer(two, twinned);\n eq(out.filter((s) => s.state === \"seen\").length, 1,\n \"one $50 deposit, written by Square in both of its formats, settled two separate holiday stays\");\n return scoped(2, \"stays\");\n});\n\nt(\"H53 the money goes to the stay that came first, not to whichever way the array arrived\", () => {\n // [was: unpinned. Reversing the allocation order left every assertion green, so the documented\n // rule was a comment rather than a guarantee.]\n const two = [\n { contactId: \"c\", day: \"2026-12-22\", until: \"2026-12-27\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Christmas and New Year\" },\n { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Thanksgiving\" },\n ];\n const out = H.statusesForCustomer(two, [{ amount: 50, id: \"one\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" }]);\n eq(out[0].stay.day, \"2026-11-25\", \"the stays are not being put in date order before the money is handed out\");\n eq(out[0].state, \"seen\", \"the payment did not go to the earlier stay\");\n ok(out[1].state !== \"seen\");\n return scoped(2, \"stays\");\n});\n\nt(\"H54 the season turns over on her clock, not on Greenwich\", () => {\n // Her business is in New York. Rolling on the UTC date empties the card at 8pm on 2 January,\n // five hours early, with dogs still in the kennels — and the empty result is then stored.\n eq(H.businessDay(\"2027-01-03T01:00:00.000Z\"), \"2027-01-02\", \"8pm on 2 January in New York was read as 3 January\");\n eq(H.seasonYear(H.businessDay(\"2027-01-03T01:00:00.000Z\")), 2026, \"the season rolled over while the New Year stays were still running\");\n eq(H.seasonYear(H.businessDay(\"2027-01-03T13:00:00.000Z\")), 2027, \"the season should have moved on by the afternoon of the 3rd\");\n eq(H.businessDay(\"nonsense\").length, 8);\n return scoped(4, \"moments\");\n});\n\nt(\"H55 money on a settled row is still shown, so Kim can see what else was paid\", () => {\n // [was: unpinned. Deleting the whole sentence left the suite green, and it is Kim's only view\n // of other money on a row that has already been cleared.]\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(st, [\n { amount: 50, id: \"dep\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" },\n { amount: 240, id: \"inv\", at: \"2026-10-07T00:00:00Z\", kind: \"direct\" },\n ]).note;\n ok(/other card payment/i.test(n), `other money on a cleared row is hidden: ${n}`);\n ok(/\\$240\\.00 on Oct 7/.test(n), \"the amount and date of the other payment are not shown\");\n return scoped(2, \"payments\");\n});\n\nt(\"H56 two settled stays never quote the same payment back to Kim\", () => {\n // The allocator debits one record while the note quotes another, so both rows can cite the same\n // date — which is exactly what \"one payment settled two stays\" looks like on the page, whether\n // or not the underlying count is right. Two backfill records and one direct payment produce it.\n const two = [\n { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Thanksgiving\" },\n { contactId: \"c\", day: \"2026-12-22\", until: \"2026-12-27\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Christmas and New Year\" },\n ];\n const messy = [\n { amount: 50, id: \"matchedA\", at: \"2026-10-01T00:00:00Z\", kind: \"matched\" },\n { amount: 50, id: \"matchedB\", at: \"2026-10-02T00:00:00Z\", kind: \"matched\" },\n { amount: 50, id: \"directC\", at: \"2026-10-05T00:00:00Z\", kind: \"direct\" },\n ];\n const out = H.statusesForCustomer(two, messy);\n const quoted = out.filter((x) => x.state === \"seen\").map((x) => (/on ([A-Z][a-z]{2} \\d+)/.exec(x.note) || [])[1]);\n eq(quoted.length, new Set(quoted).size,\n `two settled stays quote the same payment: ${JSON.stringify(quoted)}`);\n return scoped(out.length, \"stays\");\n});\n\nt(\"H57 two backfill records and one payment are still one deposit\", () => {\n // THE SAME MONEY BUG, ONE LEVEL DOWN AGAIN. The collapse used to be one-for-one: each backfill\n // record consumed one direct payment of the same amount, so with TWO backfills and ONE payment\n // the second backfill survived still sharing an amount with the direct. The per-stay check then\n // folded it a second time — declaring them one payment — while the allocator had only ever\n // spent one id, leaving the other free to settle the next stay. Making the collapse idempotent\n // is what closes it: after one pass, no surviving backfill shares an amount with a payment.\n const messy = [\n { amount: 50, id: \"z3rQ\", at: \"2026-10-07T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"3zu7\", at: \"2026-10-07T00:00:00Z\", kind: \"matched\" },\n { amount: 50, id: \"9kQp\", at: \"2026-10-01T00:00:00Z\", kind: \"matched\" },\n ];\n const once = H.collapseSameMoney(messy);\n const twice = H.collapseSameMoney(once.kept);\n eq(twice.collapsed, 0, \"a second pass still finds something to collapse, so the layers above disagree about how much money there is\");\n eq(once.kept.length, 1);\n const two = [\n { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Thanksgiving\" },\n { contactId: \"c\", day: \"2026-12-22\", until: \"2026-12-27\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-09-28 09:00:00\", window: \"Christmas and New Year\" },\n ];\n eq(H.statusesForCustomer(two, messy).filter((x) => x.state === \"seen\").length, 1,\n \"one $50, written once as a payment and twice as a backfill, settled two separate holiday stays\");\n return scoped(3, \"records\");\n});\n\nt(\"H58 the deposit is $50 PER DOG, which is what her own money page says\", () => {\n // \"Holiday boarding — $50 per dog, non-refundable. Deducted from the total boarding cost at\n // drop-off.\" — Kim's money page, taken from her live website. [was: a flat $50 per stay, with a\n // line on the card asking Kim to tell us if it was per dog. It says so in her own handover pack.\n // Jeffrey Musselwhite's three dogs on 25 November owe $150, and one $50 payment was clearing the\n // whole stay: the silent direction, where somebody who owes $100 more drops off the list.]\n const mk = (n) => ({ contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\",\n dogs: Array.from({ length: n }, (_, i) => `Dog${i}`), dogCount: n, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" });\n const pay = (a, at, id) => ({ amount: a, id, at, kind: \"direct\" });\n eq(H.depositDue(mk(3)), 150);\n eq(H.depositDue(mk(1)), 50);\n ok(H.statusFor(mk(3), [pay(50, \"2026-10-05T00:00:00Z\", \"a\")]).state !== \"seen\",\n \"one $50 payment settled a three-dog stay that owes $150\");\n eq(H.statusFor(mk(3), [pay(150, \"2026-10-05T00:00:00Z\", \"a\")]).state, \"seen\", \"the full $150 did not settle a three-dog stay\");\n eq(H.statusFor(mk(3), [pay(50, \"2026-10-05T00:00:00Z\", \"a\"), pay(50, \"2026-10-06T00:00:00Z\", \"b\"), pay(50, \"2026-10-07T00:00:00Z\", \"c\")]).state, \"seen\",\n \"three $50 payments, one per dog, did not settle a three-dog stay\");\n ok(H.statusFor(mk(3), [pay(50, \"2026-10-05T00:00:00Z\", \"a\"), pay(50, \"2026-10-06T00:00:00Z\", \"b\")]).state !== \"seen\",\n \"two $50 payments settled a stay that owes three\");\n ok(/\\$150\\.00/.test(H.statusFor(mk(3), []).note), \"the note does not tell Kim what this stay owes\");\n return scoped(7, \"shapes\");\n});\n\nt(\"H59 a dog whose name did not parse is still a dog Kim is owed for\", () => {\n // The count comes from the drop-off ROWS, not from the parsed names. Her titles include\n // \" Boarding Dropoff with Help Test\", which yields no dog name at all.\n const evs = [\"Achilles — Boarding Drop Off\", \" Boarding Dropoff with Someone\", \"Ghost — Boarding Drop Off\"].map((title) => ({\n contactId: \"c\", title, startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }));\n const st = H.groupIntoStays(evs, H.holidayWindows(2026))[0];\n eq(st.dogCount, 3, \"a booking whose title did not parse was not counted as a dog, so Kim is under-charged\");\n eq(H.depositDue(st), 150);\n ok(st.dogs.length < 3, \"this case is not exercising an unparsed title at all\");\n return scoped(3, \"bookings\");\n});\n\nt(\"H60 Kim is told where else to look, using the routes she actually takes\", () => {\n // Her money page lists Card, Venmo, Zelle and cheque, and says card is \"the only one that\n // matches itself to a customer record automatically\". [was: \"cash or over the phone\", which\n // named neither of the two routes she actually offers.]\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Rex\"], dogCount: 1, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(st, []).note;\n for (const route of [\"Venmo\", \"Zelle\", \"cheque\"]) ok(new RegExp(route).test(n), `${route} is not named, so Kim does not know to look there`);\n ok(/does not reach the card system/.test(n), \"the reason it is invisible is not explained\");\n ok(!/unpaid|owes|has not paid/i.test(n));\n const s = H.depositSentence([H.statusFor(st, [])], false);\n ok(/Venmo/.test(s) && /Zelle/.test(s), \"the headline still describes the wrong payment routes\");\n // AND NAMES NOTHING SHE DOES NOT TAKE. Telling Kim to go and look somewhere she has no account\n // is the same class of harm as not telling her where to look: it sends her on a search that\n // cannot find anything. Her money page is the whole list, and it is four items long.\n const NOT_HERS = /\\bcash\\b|\\bPayPal\\b|\\bCash ?App\\b|\\bbank transfer\\b|\\bwire\\b|\\bApple Pay\\b|\\bover the phone\\b/i;\n for (const text of [n, s, H.OTHER_ROUTES]) ok(!NOT_HERS.test(text), `a payment route Kim does not offer is named: ${text.slice(0, 90)}`);\n return scoped(8, \"routes\");\n});\n\nt(\"H61 the headline never names an amount, because every row owes a different one\", () => {\n // A three-dog stay owes $150. The headline used to say \"we cannot find a $50 payment against\n // it\" directly above it — a number in prose disagreeing with the number in the row beneath.\n const three = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"A\", \"B\", \"C\"], dogCount: 3, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const st = H.statusFor(three, []);\n const s = H.depositSentence([st], false);\n ok(/\\$150\\.00/.test(st.note), \"the row does not state what it owes\");\n ok(!/\\$50/.test(s), `the headline names $50 above a row that owes $150: ${s}`);\n ok(/worth checking/.test(s), \"the headline stopped saying there is anything to do\");\n return scoped(1, \"row\");\n});\n\nt(\"H62 one payment cannot settle two multi-dog stays\", () => {\n // THE MONEY BUG, BACK A FOURTH TIME, and the same crack every time: the rule for \"is this stay\n // settled\" and the rule for \"what did that cost\" lived in two places and drifted. A stay cleared\n // on one payment for the full amount, or on one $50 per dog — and the allocator debited a single\n // $50. So a two-dog stay settled by $100 debited NOTHING, and the same $100 settled the next\n // stay too. 29% of generated multi-stay customers hit it. There is one function now.\n const st = (d, n) => ({ contactId: \"c\", day: d, until: d, dogs: Array.from({ length: n }, (_, i) => `D${i}`),\n dogCount: n, bookedAt: \"2026-12-01 09:00:00\", window: \"Christmas and New Year\" });\n const pay = (a, at, id) => ({ amount: a, id, at, kind: \"direct\" });\n const lump = H.statusesForCustomer([st(\"2026-12-22\", 2), st(\"2026-12-28\", 2)], [pay(100, \"2026-12-05T00:00:00Z\", \"a\")]);\n eq(lump.filter((x) => x.state === \"seen\").length, 1, \"one $100 payment settled two two-dog stays, so Kim is owed $100 and sees nothing to chase\");\n const three = H.statusesForCustomer([st(\"2026-12-22\", 2), st(\"2026-12-28\", 2)],\n [pay(50, \"2026-12-05T00:00:00Z\", \"a\"), pay(50, \"2026-12-06T00:00:00Z\", \"b\"), pay(50, \"2026-12-07T00:00:00Z\", \"c\")]);\n eq(three.filter((x) => x.state === \"seen\").length, 1, \"$150 settled $200 of deposits across two stays\");\n // And four $50s really do settle both.\n const four = H.statusesForCustomer([st(\"2026-12-22\", 2), st(\"2026-12-28\", 2)],\n [\"a\", \"b\", \"c\", \"d\"].map((id, i) => pay(50, `2026-12-0${5 + i}T00:00:00Z`, id)));\n eq(four.filter((x) => x.state === \"seen\").length, 2, \"four $50 payments did not settle two two-dog stays\");\n return scoped(3, \"allocations\");\n});\n\nt(\"H63 a stay settled by a lump sum does not eat somebody else's matching payment\", () => {\n // The same line, the other way round: settling a two-dog stay on $100 used to debit an unrelated\n // $50, so the next stay — which that $50 exactly matched — was told nothing on file matched it.\n // A payment Kim can see, on a page saying it is not there.\n const st = (d, n) => ({ contactId: \"c\", day: d, until: d, dogs: Array.from({ length: n }, (_, i) => `D${i}`),\n dogCount: n, bookedAt: \"2026-11-01 09:00:00\", window: \"Thanksgiving\" });\n const out = H.statusesForCustomer([st(\"2026-11-25\", 2), st(\"2026-12-22\", 1)],\n [{ amount: 100, id: \"hundred\", at: \"2026-11-05T00:00:00Z\", kind: \"direct\" },\n { amount: 50, id: \"fifty\", at: \"2026-11-06T00:00:00Z\", kind: \"direct\" }]);\n eq(out.map((x) => x.state), [\"seen\", \"seen\"], \"a customer who paid $150 against $150 due was still put on the shortlist\");\n ok(!/nothing on file matches that amount/.test(out[1].note), `the page denies a payment that is right there: ${out[1].note}`);\n return scoped(2, \"stays\");\n});\n\nt(\"H64 the amount charged and the dogs named cannot contradict each other\", () => {\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"Achilles\", \"Ghost\"], dogCount: 3, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n eq(H.dogsOn(st), 3, \"the count comes from the names, so a booking whose title did not parse is free\");\n eq(H.depositDue(st), 150);\n ok(/3 dogs/.test(H.statusFor(st, []).note), \"the note does not say how many dogs it charged for\");\n return scoped(3, \"guarantees\");\n});\n\nt(\"H65 three dates read as a list, not as a chain of ands\", () => {\n eq(H.humanList([\"Oct 5\"]), \"Oct 5\");\n eq(H.humanList([\"Oct 5\", \"Oct 6\"]), \"Oct 5 and Oct 6\");\n eq(H.humanList([\"Oct 5\", \"Oct 6\", \"Oct 7\"]), \"Oct 5, Oct 6 and Oct 7\");\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs: [\"A\", \"B\", \"C\"], dogCount: 3, bookedAt: \"2026-10-01 09:00:00\", window: \"Thanksgiving\" };\n const n = H.statusFor(st, [\"a\", \"b\", \"c\"].map((id, i) => ({ amount: 50, id, at: `2026-10-0${5 + i}T00:00:00Z`, kind: \"direct\" }))).note;\n ok(!/and Oct 6 and/.test(n), `the dates are chained with ands: ${n}`);\n return scoped(4, \"lists\");\n});\n\nt(\"H66 the headline says what is owed on the stays, not what the stays are owed\", () => {\n const st = { contactId: \"c\", day: \"2026-11-25\", until: \"2026-11-25\", dogs\n",[396],"9a2e0aee-497d-4b4e-8817-b9bc7842bee1","SOURCE-BUNDLE.part4.txt","987dc3f2-90c3-11f1-8748-1607ee4eb77e",762,["D",1786482178235],"THE DOGS SPOT — SOURCE BUNDLE (part 4 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (2 of 65 files)\n tests/fixtures/square-journal.json 3603 bytes 506fb15cf192\n tests/harness.mjs 29547 bytes e882713bb472\n\n================================================================================================\n=====FILE tests/fixtures/square-journal.json =====\n[\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment TRAIL0 no contact found\",\n \"amount\": 34.99,\n \"hadEmail\": true\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment TRAIL1 no contact found\",\n \"amount\": 1000,\n \"hadEmail\": true\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment TRAIL2 no contact found\",\n \"amount\": 1000,\n \"hadEmail\": true\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment TRAIL3 no contact found\",\n \"amount\": 795,\n \"hadEmail\": true\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE4 no contact found\",\n \"amount\": 2795\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE5 no contact found\",\n \"amount\": 2295\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE6 no contact found\",\n \"amount\": 2295\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE7 no contact found\",\n \"amount\": 2295\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE8 no contact found\",\n \"amount\": 1895\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE9 no contact found\",\n \"amount\": 1000\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE10 no contact found\",\n \"amount\": 900\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE11 no contact found\",\n \"amount\": 715\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE12 no contact found\",\n \"amount\": 640\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE13 no contact found\",\n \"amount\": 630\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE14 no contact found\",\n \"amount\": 500\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE15 no contact found\",\n \"amount\": 495\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE16 no contact found\",\n \"amount\": 480\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE17 no contact found\",\n \"amount\": 405\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE18 no contact found\",\n \"amount\": 400\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE19 no contact found\",\n \"amount\": 325\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE20 no contact found\",\n \"amount\": 250\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE21 no contact found\",\n \"amount\": 245\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE22 no contact found\",\n \"amount\": 180\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE23 no contact found\",\n \"amount\": 175\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE24 no contact found\",\n \"amount\": 160\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE25 no contact found\",\n \"amount\": 140\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE26 no contact found\",\n \"amount\": 135\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE27 no contact found\",\n \"amount\": 120\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE28 no contact found\",\n \"amount\": 90\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE29 no contact found\",\n \"amount\": 90\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE30 no contact found\",\n \"amount\": 70\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE31 no contact found\",\n \"amount\": 67\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment BARE32 no contact found\",\n \"amount\": 35\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment LATER1 no contact found\",\n \"amount\": 2500\n },\n {\n \"kind\": \"REVENUE-ON-CLIENT-OPP\",\n \"note\": \"payment LATER1 matched\",\n \"amount\": 2500,\n \"contactId\": \"contact_abcdef123\"\n },\n {\n \"kind\": \"NO-MATCH\",\n \"note\": \"payment LATER2 no contact found\",\n \"amount\": 1234.56\n },\n {\n \"kind\": \"PAYMENT\",\n \"note\": \"payment LATER2 recorded\",\n \"amount\": 1234.56,\n \"contactId\": \"contact_zyxwvu987\"\n },\n {\n \"kind\": \"PAYMENT\",\n \"note\": \"payment CLEAN1 taken\",\n \"amount\": 3295,\n \"contactId\": \"contact_qqqqqq111\"\n }\n]\n\n=====FILE tests/harness.mjs =====\n// NURTURE ENGINE TEST HARNESS — runs the real engine functions, offline, no network, no sends.\n// Every test states: what it proves, the input, the expectation. Failures are loud and non-zero-exit.\n// Run: node tests/harness.mjs\nimport * as E from \"../build/engine.js\";\n\nlet pass = 0, fail = 0;\nconst results = [];\n// LIVE ASSERTIONS, counted inside ok() and eq() themselves. This suite reports no scope and no\n// check count, so before this a test could be emptied of every assertion and still print PASS.\n// The v2 harness (_harness.mjs) grew the same guard on 7 August after H1 was hollowed out and the\n// whole runner stayed green; this file runs 25 tests on the same terms and needed it too.\nlet live = 0;\nfunction t(name, proves, fn) {\n let ok = false, detail = \"\";\n const before = live;\n try {\n detail = fn() ?? \"\";\n if (live === before) throw new Error(\"this test executed ZERO assertions: it cannot fail, so it is not a test\");\n ok = true;\n }\n catch (e) { detail = String(e && e.message || e).slice(0, 300); }\n ok ? pass++ : fail++;\n results.push({ name, proves, ok, detail });\n console.log(`${ok ? \"PASS\" : \"FAIL\"} ${name}${detail ? `\\n ${detail}` : \"\"}`);\n}\nfunction eq(a, b, m) { live++; if (JSON.stringify(a) !== JSON.stringify(b)) throw new Error(`${m || \"\"} expected ${JSON.stringify(b)}, got ${JSON.stringify(a)}`); }\nfunction ok(c, m) { live++; if (!c) throw new Error(m || \"expected truthy\"); }\n\nconst KIM_CAL = \"qHuYJ0NEqzibnoqf5Cw3\";\nconst ALL = [...E.MAIN_SEQUENCE, ...E.BRANCH_A, ...E.BRANCH_B];\n\nconsole.log(\"\\n=== A. THE COPY ITSELF ===\\n\");\n\nt(\"A1 booking link points at Kim's own Pup Talk calendar\",\n \"a lead who clicks the link lands on the same calendar the engine watches for conversions\",\n () => {\n ok(E.REAL_BOOKING_URL.includes(KIM_CAL), `REAL_BOOKING_URL=${E.REAL_BOOKING_URL}`);\n ok(!E.REAL_BOOKING_URL.includes(\"pbe-\"), \"still points at the agency widget\");\n return E.REAL_BOOKING_URL;\n });\n\nt(\"A2 no customer-visible message contains a banned term\",\n \"Kim banned 'discovery call'; grooming is not a service; training prices are never quoted\",\n () => {\n const banned = [/discovery/i, /grooming/i, /\\$\\s?\\d/];\n const hits = [];\n for (const s of ALL) {\n const text = `${s.subject || \"\"}\\n${s.previewText || \"\"}\\n${s.bodyTemplate}`;\n for (const b of banned) if (b.test(text)) hits.push(`${s.id} ~ ${b}`);\n }\n eq(hits, [], \"banned terms found:\");\n return `${ALL.length} templates clean`;\n });\n\nt(\"A3 every SMS is inside carrier-safe length after merge fields resolve\",\n \"an over-length SMS silently splits into two billed segments and reads broken\",\n () => {\n const over = [];\n for (const s of ALL.filter((x) => x.channel === \"sms\")) {\n const r = E.renderStep(s, { firstName: \"Bartholomew\", companyName: \"Wolfgang-Maximilian\" }, { testMode: false });\n const txt = r.text ?? \"\"; if (txt.length > 320) over.push(`${s.id}=${txt.length}`);\n }\n eq(over, [], \"SMS over 320 chars:\");\n return `${ALL.filter((x) => x.channel === \"sms\").length} SMS templates, worst case under 320`;\n });\n\nt(\"A4 no unresolved merge token survives rendering\",\n \"a customer receiving 'Hi {{FIRST_NAME}}' is worse than no message at all\",\n () => {\n const bad = [];\n for (const s of ALL) {\n const r = E.renderStep(s, { firstName: null, companyName: null }, { testMode: false });\n const blob = `${r.subject || \"\"} ${r.html ?? \"\"} ${r.text ?? \"\"}`;\n if (/\\{\\{|\\}\\}|\\[link\\]|\\[phone\\]|INSERT|TODO|LOREM/i.test(blob)) bad.push(s.id);\n }\n eq(bad, [], \"templates with unresolved tokens on NULL contact data:\");\n return `${ALL.length} templates render clean with every field null`;\n });\n\nt(\"A5 a nameless contact still gets a sentence that reads like English\",\n \"GHL contacts created from Messenger frequently have no first name and no dog name\",\n () => {\n const r = E.renderStep(E.MAIN_SEQUENCE[0], { firstName: null, companyName: null }, { testMode: false });\n const out = r.html ?? r.text ?? \"\"; ok(!/Hi ,/.test(out), \"produced 'Hi ,'\");\n ok(!/[A-Za-z] [A-Za-z]/.test(out.replace(/\\n/g, \" \")), \"double spaces from an empty substitution\");\n return `fallbacks: firstName -> ${JSON.stringify(E.resolveFirstName(null))}, dogName -> ${JSON.stringify(E.resolveDogName(null))}`;\n });\n\nconsole.log(\"\\n=== B. TIMING AND QUIET HOURS ===\\n\");\n\nconst at = (iso) => new Date(iso).getTime();\n\nt(\"B1 no SMS lands before 9am or after 7pm Eastern\",\n \"a 03:00 text to a dog owner is the message that gets a business reported, not replied to\",\n () => {\n const cases = [\n [\"2026-08-03T06:00:00Z\", false, \"02:00 ET\"],\n [\"2026-08-03T12:00:00Z\", false, \"08:00 ET\"],\n [\"2026-08-03T14:00:00Z\", true, \"10:00 ET\"],\n [\"2026-08-03T22:00:00Z\", true, \"18:00 ET\"],\n [\"2026-08-04T00:00:00Z\", false, \"20:00 ET\"],\n ];\n const bad = [];\n for (const [iso, want, label] of cases) {\n const got = E.inSendWindow(\"sms\", at(iso)).ok;\n if (got !== want) bad.push(`${label}: expected ${want}, got ${got}`);\n }\n eq(bad, [], \"send-window failures:\");\n return \"boundaries hold at 09:00 and 19:00 America/New_York\";\n });\n\nt(\"B2 the window is computed in Eastern time, not the server's UTC\",\n \"the scheduler runs in UTC; if the window were computed there, every send would be 4-5h off\",\n () => {\n const p = E.businessLocalParts(at(\"2026-08-03T14:00:00Z\"));\n eq(p.hour, 10, \"14:00 UTC in August should be 10:00 EDT;\");\n const w = E.businessLocalParts(at(\"2026-01-05T14:00:00Z\"));\n eq(w.hour, 9, \"14:00 UTC in January should be 09:00 EST (DST handled);\");\n return \"EDT and EST both correct — daylight saving is handled by the timezone database, not arithmetic\";\n });\n\nt(\"B3 due-ness is anchored to the contact's own entry time\",\n \"two contacts who entered a week apart must not receive step 3 on the same day\",\n () => {\n const anchor = \"2026-08-01T12:00:00Z\";\n ok(E.isDue(0, anchor, at(\"2026-08-01T12:00:00Z\")), \"step at +0h should be due immediately\");\n ok(!E.isDue(72, anchor, at(\"2026-08-03T11:00:00Z\")), \"day-3 step due early\");\n ok(E.isDue(72, anchor, at(\"2026-08-04T13:00:00Z\")), \"day-3 step not due after 3 days\");\n return \"offsets are relative, never absolute calendar dates\";\n });\n\nconsole.log(\"\\n=== C. THE SAFETY LADDER (decideAction) ===\\n\");\n\nconst baseFacts = (over = {}) => ({\n now: at(\"2026-08-03T15:00:00Z\"),\n contact: { id: \"c1\", firstName: \"Ann\", companyName: \"Rex\", dnd: false },\n opportunities: [],\n pupTalkAppt: null,\n declinedSignal: false,\n hasUnansweredInboundReply: false,\n conversationCheckFailed: false,\n foreignOutboundAt: null, // v1.5 R27 — no other system has messaged this contact\n channelBlocked: { email: false, sms: false }, // v1.6 R28 — no per-channel opt-out\n ...over,\n});\nconst stateMain = () => ({ ...E.freshState(\"2026-08-01T12:00:00Z\"), status: \"main\", lastMainStepSent: 0 });\n\nt(\"C1 do-not-contact outranks a scheduled send\",\n \"a contact who opted out must never receive the next step, whatever the calendar says\",\n () => {\n const d = E.decideAction(baseFacts({ contact: { id: \"c1\", firstName: \"Ann\", companyName: null, dnd: true } }), stateMain());\n ok(d.kind !== \"send\", `engine chose to ${d.kind}`);\n return `DND -> ${d.kind}${d.nextStatus ? ` (${d.nextStatus})` : \"\"}`;\n });\n\nt(\"C2 a failed reply-check blocks the send instead of assuming silence\",\n \"if the engine cannot tell whether someone wrote back, sending is the unrecoverable choice\",\n () => {\n const d = E.decideAction(\n baseFacts({ conversationCheckFailed: true }),\n stateMain(),\n );\n ok(d.kind !== \"send\", `engine chose to ${d.kind} despite not knowing if they replied`);\n return `check-failed -> ${d.kind} (fails closed)`;\n });\n\nt(\"C3 an inbound reply pauses the sequence and hands it to a human\",\n \"nobody should get a marketing text while mid-conversation with the front desk\",\n () => {\n const d = E.decideAction(\n baseFacts({ hasUnansweredInboundReply: true }),\n stateMain(),\n );\n ok(d.kind !== \"send\", `engine chose to ${d.kind}`);\n return `inbound reply -> ${d.kind}${d.nextStatus ? ` (${d.nextStatus})` : \"\"}`;\n });\n\nt(\"C4 someone who booked a Pup Talk stops receiving 'book a Pup Talk' messages\",\n \"this is the exact defect the wrong booking link would have caused invisibly\",\n () => {\n const appt = { id: \"a1\", startTime: at(\"2026-08-10T15:00:00Z\"), endTime: at(\"2026-08-10T15:30:00Z\"), appointmentStatus: \"confirmed\", deleted: false };\n ok(E.apptIsLiveBooked(appt), \"a confirmed future appointment should read as live-booked\");\n const d = E.decideAction(baseFacts({ pupTalkAppt: appt }), stateMain());\n ok(d.kind !== \"send\", `engine chose to ${d.kind} to someone already booked`);\n return `live booking -> ${d.kind}${d.nextStatus ? ` (${d.nextStatus})` : \"\"}`;\n });\n\nt(\"C5 a terminal contact is never re-sent to, on any later run\",\n \"the loop runs every 15 minutes forever; an un-terminal terminal state is an infinite message source\",\n () => {\n const bad = [];\n for (const st of E.TERMINAL_STATUSES) {\n const d = E.decideAction(baseFacts(), { ...E.freshState(\"2026-08-01T12:00:00Z\"), status: st });\n if (d.kind === \"send\") bad.push(st);\n }\n eq(bad, [], \"terminal statuses that still sent:\");\n return `${E.TERMINAL_STATUSES.size} terminal statuses, none sends`;\n });\n\nt(\"C6 a cancelled appointment does not read as a booking\",\n \"cancelling and then being treated as converted means the lead is dropped in silence\",\n () => {\n ok(!E.apptIsLiveBooked({ id:\"a2\", startTime: at(\"2026-08-10T15:00:00Z\"), endTime: at(\"2026-08-10T15:30:00Z\"), appointmentStatus: \"cancelled\", deleted:false }), \"cancelled read as booked\");\n ok(!E.apptIsLiveBooked(null), \"null appointment read as booked\");\n return \"cancelled and missing appointments both read as not-booked\";\n });\n\nconsole.log(\"\\n=== D. BULK AND SURGE BEHAVIOUR ===\\n\");\n\nt(\"D1 a bulk tagging of hundreds does not become hundreds of sends\",\n \"someone selecting 800 old contacts and applying the tag must not blast 800 people\",\n () => {\n const many = Array.from({ length: 800 }, (_, i) => ({ id: `c${i}` }));\n const sel = E.selectEnrollable(many, 25, false);\n ok(sel.surgeHeld === true && sel.enroll.length === 0, `surge guard let ${sel.enroll.length} through`);\n const ack = E.selectEnrollable(many, 25, true);\n ok(ack.enroll.length === 800, \"acknowledged surge should pass through deliberately\");\n return `800 candidates -> surgeHeld=${sel.surgeHeld}, enrolled=${sel.enroll.length}; with explicit acknowledgement ${ack.enroll.length}`;\n });\n\nt(\"D2 state pruning keeps finished contacts from growing the store forever\",\n \"an unbounded blob eventually fails to write and takes the whole engine down with it\",\n () => {\n const old = { a: { status: \"done_booked\", enteredAt: \"2025-01-01T00:00:00Z\", lastSentAt: \"2025-01-02T00:00:00Z\" },\n b: { status: \"main\", enteredAt: \"2026-08-01T00:00:00Z\", lastSentAt: \"2026-08-01T00:00:00Z\" } };\n const r = E.pruneState(old, at(\"2026-08-03T00:00:00Z\"));\n ok(Object.keys(r.kept).includes(\"b\"), \"pruned an active contact\");\n return `pruned ${r.prunedIds.length}, kept ${Object.keys(r.kept).length}`;\n });\n\nconsole.log(\"\\n=== E. SOURCE-LEVEL GUARANTEES ===\\n\");\nimport { readFileSync } from \"node:fs\";\nconst mainSrc = readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\");\nconst apiSrc = readFileSync(new URL(\"../engine/api.ts\", import.meta.url), \"utf8\");\n\nt(\"E1 the kill switch is checked before any contact is examined\",\n \"a stop control that only takes effect after the batch has sent is not a stop control\",\n () => {\n const kill = mainSrc.indexOf('getJSON(\"nurture_kill\")');\n const load = mainSrc.indexOf(\"await loadAllState()\");\n ok(kill > 0, \"kill switch not present\");\n ok(kill < load, `kill check at ${kill} comes after state load at ${load}`);\n return `kill check at char ${kill}, first contact read at ${load}`;\n });\n\nt(\"E2 practice mode is the default and must be switched off deliberately\",\n \"the failure that cannot be undone is a live send nobody meant to make\",\n () => {\n ok(/TEST_MODE\\s*=\\s*\$Deno\\.env\\.get\\(\"TEST_MODE\"\$\\s*\\?\\?\\s*\"true\"\\)\\s*!==\\s*\"false\"/.test(mainSrc), \"TEST_MODE default is not true\");\n return \"TEST_MODE defaults true; only the literal string 'false' turns it off\";\n });\n\nt(\"E3 the control panel never returns the credential it tests with\",\n \"a dashboard link is going to end up in a text message to Kim; it must not carry a CRM token\",\n () => {\n const ret = apiSrc.slice(apiSrc.indexOf(\"return { credentialFrom\"), apiSrc.indexOf(\"return { credentialFrom\") + 120);\n ok(ret.includes(\"credentialFrom: from\"), \"self-test return shape changed\");\n ok(!/\\btoken\\b/.test(ret), `self-test return exposes a token: ${ret}`);\n ok(apiSrc.includes(\"status: r.status\"), \"self-test does not report status codes only\");\n return \"self-test returns credentialFrom + endpoint + HTTP status only; the token itself never leaves the function\";\n });\n\nt(\"E4 an unauthenticated request leaks nothing at all\",\n \"the panel URL is guessable-adjacent; a 401 must not differ between wrong-key and no-key\",\n () => {\n // v1.5, 2 Aug: this assertion used to search for \"safeEq(k, KEY)\", a string deleted when auth\n // moved to SHA-256. indexOf returned -1, so -1 < anything passed vacuously and E4 proved nothing\n // for several runs. Now it locates the real guard and fails loudly if either marker disappears.\n const guard = apiSrc.indexOf(\"if (!(await authorised(k)))\");\n const firstRead = apiSrc.indexOf(\"await collect()\");\n ok(guard > -1, \"auth guard `if (!(await authorised(k)))` not found — did the guard get renamed?\");\n ok(firstRead > -1, \"`await collect()` not found — did the data gather get renamed?\");\n ok(guard < firstRead, \"data gathered before auth check\");\n ok((apiSrc.match(/Not found/g) || []).length >= 1, \"no uniform 401 body\");\n return `auth guard at char ${guard} precedes first blob read at ${firstRead}; identical body for absent and wrong keys`;\n });\n\n\nconsole.log(\"\\n=== F. OPT-OUT FURNITURE (added after the adversarial pass) ===\\n\");\n\nt(\"F1 every rendered SMS carries a STOP instruction\",\n \"the adversarial pass found not one of the five shipped SMS said STOP — an earlier risk register wrongly claimed it did\",\n () => {\n const missing = [];\n for (const s of ALL.filter((x) => x.channel === \"sms\")) {\n const r = E.renderStep(s, { firstName: \"Ann\", companyName: \"Rex\" }, { testMode: false });\n if (!/\\bSTOP\\b/.test(r.text ?? \"\")) missing.push(s.id);\n }\n eq(missing, [], \"SMS with no STOP instruction:\");\n return `${ALL.filter((x) => x.channel === \"sms\").length} SMS, all carry it`;\n });\n\nt(\"F2 every rendered email carries an unsubscribe line and a physical location\",\n \"a bulk email with neither is the one that gets a sending domain blacklisted\",\n () => {\n const missing = [];\n for (const s of ALL.filter((x) => x.channel === \"email\")) {\n const r = E.renderStep(s, { firstName: \"Ann\", companyName: \"Rex\" }, { testMode: false });\n const h = r.html ?? \"\";\n if (!/UNSUBSCRIBE/i.test(h) || !/Ellabell/i.test(h)) missing.push(s.id);\n }\n eq(missing, [], \"emails missing unsubscribe or postal identity:\");\n return `${ALL.filter((x) => x.channel === \"email\").length} emails, all carry both`;\n });\n\nt(\"F3 the opt-out line cannot push an SMS over the carrier limit\",\n \"compliance furniture that breaks the message into two segments defeats itself\",\n () => {\n const over = [];\n for (const s of ALL.filter((x) => x.channel === \"sms\")) {\n const r = E.renderStep(s, { firstName: \"Bartholomew\", companyName: \"Wolfgang-Maximilian\" }, { testMode: false });\n if ((r.text ?? \"\").length > 320) over.push(`${s.id}=${(r.text ?? \"\").length}`);\n }\n eq(over, [], \"SMS over 320 WITH furniture appended:\");\n const worst = Math.max(...ALL.filter((x) => x.channel === \"sms\").map((s) =>\n (E.renderStep(s, { firstName: \"Bartholomew\", companyName: \"Wolfgang-Maximilian\" }, { testMode: false }).text ?? \"\").length));\n return `worst case ${worst}/320 including the STOP line`;\n });\n\nt(\"F4 the copy module itself is untouched\",\n \"the furniture is appended by the renderer so the client-approved wording stays byte-for-byte hers\",\n () => {\n const inTemplates = ALL.filter((s) => /reply stop|unsubscribe/i.test(s.bodyTemplate));\n eq(inTemplates.map((s) => s.id), [], \"templates that had furniture written into them:\");\n return \"0 templates edited; furniture lives only in renderStep\";\n });\n\n\nconsole.log(\"\\n=== G. THE ADVERSARIAL FIXES (v1.4) ===\\n\");\nconst src14 = readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\");\n\nt(\"G1 a contact whose next message is not due costs zero API calls\",\n \"R19b — three calls per contact per run is ~9,600 requests and ~45 min at backlog scale\",\n () => {\n const i = src14.indexOf(\"const dueCheck\");\n const io = src14.indexOf(\"const contact = await getContact(contactId);\", i);\n ok(i > 0, \"due-first filter missing\");\n ok(src14.indexOf(\"continue; // zero API calls\", i) < io, \"the skip does not come before the first API call\");\n return \"due-check precedes every per-contact read; O(due) not O(enrolled)\";\n });\n\nt(\"G2 the cheap path still gets a full check at least daily\",\n \"cheaper must never mean blinder — exits would go stale otherwise\",\n () => {\n ok(/safetySweepHours/.test(src14), \"no safety sweep\");\n ok(/sweepOverdue/.test(src14), \"sweep not applied\");\n return \"SAFETY_SWEEP_HOURS default 24 — every contact fully checked at least once a day\";\n });\n\nt(\"G3 an outbound message can no longer hide a customer's reply\",\n \"R21 — Chloe, Ava and 165 workflows all send; any one of them flipped the field and unblocked a send\",\n () => {\n ok(/unreadCount/.test(src14), \"unreadCount not consulted\");\n const ob = src14.indexOf('if (direction === \"outbound\")');\n const un = src14.indexOf(\"unread > 0\", ob);\n ok(un > ob && un - ob < 400, \"unread is not checked on the outbound branch\");\n return \"unread thread blocks a send even when the newest message is outbound\";\n });\n\nt(\"G4 a reply nobody answers is escalated, not held forever\",\n \"R22 — paused_reply was absorbing, so the most engaged leads became the ones nothing happened to\",\n () => {\n ok(/pauseTimeoutDays/.test(src14), \"no pause timeout\");\n ok(/pause_timeout/.test(src14), \"no journal row for the timeout\");\n ok(/done_hard_exit/.test(src14.slice(src14.indexOf(\"pauseTimeoutDays()\"), src14.indexOf(\"pauseTimeoutDays()\") + 1800)), \"does not release the contact\");\n return \"PAUSE_TIMEOUT_DAYS default 14 — raises a second task, then releases\";\n });\n\nt(\"G5 the money is captured at the moment of exit\",\n \"R24 — the engine read monetaryValue on every opportunity and threw it away, while the client judges reports on revenue\",\n () => {\n ok(/exitValue/.test(src14), \"exitValue not stored\");\n ok(/exitStepsSent/.test(src14), \"steps-to-conversion not stored\");\n const he = src14.lastIndexOf('case \"hard_exit\": {');\n ok(src14.indexOf(\"pickPrimaryOpportunity(opportunities)?.monetaryValue\", he) > he, \"value not read at exit\");\n return \"exitValue + exitStepsSent recorded on every exit and journalled\";\n });\n\nt(\"G6 editing the copy cannot silently re-point in-flight contacts\",\n \"R23 — position is an array index; inserting a message shifts everyone mid-sequence with no signal\",\n () => {\n ok(/lastSentStepId/.test(src14), \"step id not recorded\");\n ok(/SEQUENCE DRIFT/.test(src14), \"no drift detection\");\n return \"step id stored per send; drift logged and journalled on the next send\";\n });\n\nconsole.log(\"\\n=== H. COLLISION WITH THE REST OF THE ACCOUNT (v1.5, R27) ===\\n\");\n\n// Why this section exists: the location runs 95 PUBLISHED GoHighLevel workflows, several of which are\n// nurtures, plus Chloe on voice and Ava on social. GoHighLevel exposes no way to read which workflows\n// a contact is enrolled in, so the only detectable signal is an outbound message on the thread that\n// this engine did not send. These tests pin the behaviour that follows from that signal.\n\nt(\"H1 a message from another system defers our send\",\n \"a GHL workflow, Chloe or Ava texting someone must not be followed by our email an hour later\",\n () => {\n const now = at(\"2026-08-03T15:00:00Z\");\n const d = E.decideAction(\n baseFacts({ now, foreignOutboundAt: now - 1 * 60 * 60 * 1000 }),\n { ...stateMain(), enteredAt: \"2026-08-01T12:00:00Z\" },\n );\n ok(d.kind !== \"send\", `engine chose to ${d.kind} one hour after another system messaged them`);\n ok(/quiet period/i.test(d.reason || \"\"), `deferred for the wrong reason: ${d.reason}`);\n return `foreign send 1h ago -> ${d.kind}: ${d.reason}`;\n });\n\nt(\"H2 the quiet period expires — it defers, it does not cancel\",\n \"a deferred step must still go out; a collision guard that silently drops messages is worse than none\",\n () => {\n const now = at(\"2026-08-03T15:00:00Z\");\n const d = E.decideAction(\n baseFacts({ now, foreignOutboundAt: now - 25 * 60 * 60 * 1000 }),\n { ...stateMain(), enteredAt: \"2026-08-01T12:00:00Z\" },\n );\n eq(d.kind, \"send\", \"step did not resume after the quiet period elapsed\");\n return `foreign send 25h ago -> ${d.kind} (resumes)`;\n });\n\nt(\"H3 our own send is not mistaken for somebody else's\",\n \"the guard must not deadlock the engine against its own last message\",\n () => {\n const now = at(\"2026-08-03T15:00:00Z\");\n // foreignOutboundAt is null here by construction — the run loop resolves ours-vs-theirs before\n // decideAction sees it. This pins that a null means \"carry on\" rather than \"block\".\n const d = E.decideAction(\n baseFacts({ now, foreignOutboundAt: null }),\n { ...stateMain(), enteredAt: \"2026-08-01T12:00:00Z\" },\n );\n eq(d.kind, \"send\", \"a null foreign-outbound blocked the send\");\n return \"null foreign-outbound -> send\";\n });\n\nt(\"H4 an unanswered human still outranks the quiet period\",\n \"collision politeness must never demote the rule that protects a real conversation\",\n () => {\n const now = at(\"2026-08-03T15:00:00Z\");\n const d = E.decideAction(\n baseFacts({ now, foreignOutboundAt: now - 1 * 60 * 60 * 1000, hasUnansweredInboundReply: true }),\n { ...stateMain(), enteredAt: \"2026-08-01T12:00:00Z\" },\n );\n eq(d.kind, \"pause_reply\", \"reply handling was displaced by the collision guard\");\n return \"reply + foreign send -> pause_reply (rule 5 still wins)\";\n });\n\nt(\"H5 the guard is wired into the send gate, not bolted on after it\",\n \"a check that runs after the send decision is decoration\",\n () => {\n const src = readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\");\n const gate = src.indexOf(\"const sendGate =\");\n const guard = src.indexOf(\"f.foreignOutboundAt != null\");\n const ret = src.indexOf(\"return { ok: true, reason: \\\"\\\" };\", gate);\n ok(gate > -1 && guard > -1 && ret > -1, \"sendGate, guard or its terminator not found\");\n ok(guard > gate && guard < ret, `guard sits outside the send gate (gate ${gate}, guard ${guard}, end ${ret})`);\n return `guard at char ${guard}, inside sendGate (${gate}..${ret})`;\n });\n\nt(\"H6 the collision check costs no extra API call\",\n \"an outbound timestamp must ride on the reply-check request the engine already makes\",\n () => {\n const src = readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\");\n const fn = src.slice(src.indexOf(\"async function getReplyStatus\"), src.indexOf(\"// ---- IO layer: GHL writes\"));\n eq((fn.match(/await j\\(/g) || []).length, 1, \"getReplyStatus makes more than one request\");\n ok(fn.includes(\"lastOutboundAt\"), \"getReplyStatus does not return the outbound timestamp\");\n return \"one request, returns both the reply status and the outbound timestamp\";\n });\n\nconsole.log(\"\\n=== I. PER-CHANNEL CONSENT (v1.6, R28) ===\\n\");\n\n// Live data on this location proves dndSettings is per-channel and that a contact can be opted out\n// of texts while the top-level dnd flag stays false. These pin that the engine now reads it.\n\nt(\"I1 an SMS opt-out stops the text but not the email\",\n \"someone who said stop to texts has not asked us to stop emailing, and vice versa\",\n () => {\n const st = { ...E.freshState(\"2026-08-01T12:00:00Z\"), status: \"main\", lastMainStepSent: 1 }; // next is main-2, an SMS\n eq(E.MAIN_SEQUENCE[1].channel, \"sms\", \"test assumes main-2 is the SMS\");\n const blocked = E.decideAction(baseFacts({ channelBlocked: { email: false, sms: true } }), st);\n eq(blocked.kind, \"skip_step\", `SMS opt-out produced ${blocked.kind}`);\n const allowed = E.decideAction(baseFacts({ channelBlocked: { email: true, sms: false } }), st);\n eq(allowed.kind, \"send\", \"an EMAIL opt-out wrongly blocked an SMS step\");\n return \"sms blocked -> skip_step; email blocked -> sms still sends\";\n });\n\nt(\"I2 a blocked step is consumed, not deferred forever\",\n \"deferring a message that can never legally send would stall that contact on it for good\",\n () => {\n const st = { ...E.freshState(\"2026-08-01T12:00:00Z\"), status: \"main\", lastMainStepSent: 1 };\n const d = E.decideAction(baseFacts({ channelBlocked: { email: false, sms: true } }), st);\n const next = E.applyDecision(d, st, \"2026-08-03T15:00:00Z\");\n eq(next.lastMainStepSent, 2, \"the blocked step was not consumed — the contact would stall\");\n eq(next.lastSentAt, null, \"a step that never sent started the send-pacing clock\");\n return \"counter advanced 1 -> 2, lastSentAt untouched\";\n });\n\nt(\"I3 ACTIVE means do-not-disturb is ON, so it blocks\",\n \"GHL names these after the DND switch, not the person. Live 10 Aug: 55 contacts carry SMS status active with TWILIO_ERROR_CODE 30006, and every channel on a workflow-DND'd contact reads active. The old code read active as PERMISSION and would have messaged all of them.\",\n () => {\n const c = { dndSettings: { SMS: { status: \"active\", message: \"TWILIO_ERROR_CODE: 30006\" }, Email: { status: \"active\", message: \"Updated from workflow_c6fc2df4\" } } };\n const r = E.readChannelConsent(c);\n eq(r.sms, true, \"an active SMS DND was read as permission to text\");\n eq(r.email, true, \"an active Email DND was read as permission to email\");\n return \"active -> blocked on both channels\";\n });\n\nt(\"I3b INACTIVE means do-not-disturb is OFF, so it sends\",\n \"Kristina Gant, the ONLY contact tagged for this sequence, is dnd:false with Email/SMS/Call all inactive. The old code read inactive as BLOCKED, so go-live would have consumed all eight steps as skips and reported enrolled:1 sent:0 failed:0, which reads exactly like success.\",\n () => {\n const c = { dnd: false, dndSettings: { Email: { status: \"inactive\", code: \"103\", message: \"Updated by contact merge\" }, SMS: { status: \"inactive\", code: \"103\", message: \"Updated by contact merge\" }, Call: { status: \"inactive\", code: \"103\", message: \"Updated by contact merge\" } } };\n const r = E.readChannelConsent(c);\n eq(r.sms, false, \"a contactable person was refused: this is the silent-launch failure\");\n eq(r.email, false, \"a contactable person was refused on email\");\n return \"inactive -> free to contact\";\n });\n\nt(\"I3c PERMANENT is a real human opt-out and an unknown status fails CLOSED\",\n \"25 live contacts carry SMS or RCS permanent with STOP_KEYWORD. And a status this code has never seen must block, never send.\",\n () => {\n eq(E.readChannelConsent({ dndSettings: { SMS: { status: \"permanent\", message: \"STOP_KEYWORD\" } } }).sms, true, \"a STOP reply was not honoured\");\n eq(E.readChannelConsent({ dndSettings: { SMS: { status: \"some_new_state_ghl_invented\" } } }).sms, true, \"an unrecognised status was treated as permission to send\");\n eq(E.readChannelConsent({ dndSettings: { RCS: { status: \"permanent\", message: \"STOP_KEYWORD\" } } }).sms, true, \"RCS is text to the recipient and must block SMS too\");\n eq(E.readChannelConsent({}).sms, false, \"a contact with no dndSettings was blocked\");\n eq(E.readChannelConsent({ dndSettings: { SMS: { status: \"\" } } }).sms, false, \"an empty status is not a per-channel opt-out\");\n return \"permanent and unknown block; absent and empty do not\";\n });\n\nt(\"I4 a contact with no dndSettings at all is not blocked\",\n \"most contacts carry no per-channel record; absence must mean 'no opt-out', never 'blocked'\",\n () => {\n const st = { ...E.freshState(\"2026-08-01T12:00:00Z\"), status: \"main\", lastMainStepSent: 0 };\n const d = E.decideAction(baseFacts({ channelBlocked: { email: false, sms: false } }), st);\n eq(d.kind, \"send\", `an unblocked contact produced ${d.kind}`);\n return \"no dndSettings -> send\";\n });\n\nt(\"I5 the top-level dnd flag still stops everything\",\n \"per-channel handling must not weaken the blanket opt-out\",\n () => {\n const d = E.decideAction(\n baseFacts({ contact: { id: \"c1\", firstName: \"Ann\", companyName: null, dnd: true },\n channelBlocked: { email: false, sms: false } }),\n stateMain(),\n );\n eq(d.kind, \"hard_exit\", `blanket dnd produced ${d.kind}`);\n return \"dnd=true -> hard_exit (unchanged)\";\n });\n\nconsole.log(`\\n=== RESULT: ${pass} passed, ${fail} failed ===\\n`);\nimport { writeFileSync } from \"node:fs\";\nwriteFileSync(new URL(\"../logs/harness-result.json\", import.meta.url), JSON.stringify({ ts: new Date().toISOString(), pass, fail, results }, null, 2));\nprocess.exit(fail ? 1 : 0);\n\n",[404],"fe567497-560d-497b-b446-2949d8793c2f","SOURCE-BUNDLE.part3.txt","1786f918-9081-11f1-93f3-1607ee4eb77e",761,["D",1786482177793],48,"THE DOGS SPOT — SOURCE BUNDLE (part 3 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (3 of 65 files)\n tests/deposits-collect.test.mjs 52787 bytes b4dcd833ed97\n tests/detect.test.mjs 13639 bytes b7a7884bce70\n tests/facts.test.mjs 6983 bytes 0ed7efffc99a\n\n================================================================================================\n=====FILE tests/deposits-collect.test.mjs =====\n// THE COLLECTOR. The only part of the deposit feature that touches Kim's CRM.\n//\n// Everything here is run against fixtures with a fake `get`, which is the point: the collector\n// takes its network as an argument, so the failure modes that matter — a calendar that does not\n// answer, a notes read that fails, a customer who appears on both calendars — can be produced on\n// demand instead of waited for.\nimport * as D from \"../build/deposits.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\n\nconst { t, at, done, header } = suite(\"deposits-collect\");\n\nconst src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\nconst TODAY = \"2026-08-06T12:00:00.000Z\";\n\n// Real rows, trimmed: the recurring Daycare Enzo series, the cancelled test booking, and one\n// customer with three dogs on 25 November.\nconst EV = {\n wS5N8WN4BbzznaLjEg1N: [\n { contactId: \"c-enzo\", title: \"Daycare Enzo \", startTime: \"2026-11-27T09:00:00-05:00\", dateAdded: \"2026-06-01 10:00:00\", appointmentStatus: \"confirmed\", isRecurring: true },\n { contactId: \"c-muss\", title: \"Achilles — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-07-20 14:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"c-muss\", title: \"Ghost — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-07-20 14:01:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ],\n ZmmjQJszkRMUltfEbumB: [\n { contactId: \"c-test\", title: \" Boarding Dropoff with Help Test\", startTime: \"2026-12-24T09:00:00-05:00\", dateAdded: \"2026-10-01 10:00:00\", appointmentStatus: \"cancelled\", isRecurring: false },\n { contactId: \"c-flu\", title: \"Fluffy — Boarding Drop Off\", startTime: \"2027-01-01T09:00:00-05:00\", dateAdded: \"2026-08-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ],\n};\nconst NOTES = {\n \"c-muss\": [{ body: \"[Square] +$100.00 payment pay_muss (balance $0.00)\", dateAdded: \"2026-07-20T10:00:00.000Z\" }],\n \"c-flu\": [],\n};\nconst NAMES = { \"c-muss\": { firstName: \"Jeffrey\", lastName: \"Musselwhite\" }, \"c-flu\": { firstName: \"Ann\", lastName: \"Flu\" } };\n\n// A fake CRM. `fail` names the paths that should blow up, so each failure mode is one line.\nfunction io(opts = {}) {\n const calls = [];\n const get = async (path) => {\n calls.push(path);\n // A trailing \"$\" means \"this exact path ending\", so a test can break the name lookup for a\n // contact without also breaking that contact's notes read. Without it D9 would be failing two\n // things and proving neither.\n for (const f of opts.fail ?? []) {\n const hit = f.endsWith(\"$\") ? path.endsWith(f.slice(0, -1)) : path.includes(f);\n if (hit) throw new Error(\"HTTP 500\");\n }\n const cal = /calendarId=([^&]+)/.exec(path);\n if (cal) return { events: EV[cal[1]] ?? [] };\n const notes = /\\/contacts\\/([^/]+)\\/notes/.exec(path);\n if (notes) return { notes: NOTES[notes[1]] ?? [] };\n const c = /\\/contacts\\/([^/?]+)$/.exec(path);\n if (c) return { contact: NAMES[c[1]] ?? {} };\n throw new Error(`unexpected path ${path}`);\n };\n return { get, calls };\n}\n\nheader(\"THE HAPPY PATH\");\n\nawait at(\"D1 both drop-off calendars are asked, not just the one somebody remembers\", async () => {\n // One real customer has bookings on BOTH calendars. Reading one calendar loses half the list.\n const f = io();\n const out = await D.collect(f, TODAY);\n for (const id of [\"wS5N8WN4BbzznaLjEg1N\", \"ZmmjQJszkRMUltfEbumB\"]) {\n ok(f.calls.some((p) => p.includes(`calendarId=${id}`)), `drop-off calendar ${id} was never asked`);\n }\n eq(out.calendarsRead, 2);\n // And the pick-up calendars, which are where the LENGTH of a stay is written down.\n for (const id of [\"1FnbK7pQp1ViZWIzX9SR\", \"bN6wWGJa0qKq0QGRg4CC\"]) {\n ok(f.calls.some((p) => p.includes(`calendarId=${id}`)), `pick-up calendar ${id} was never asked`);\n }\n eq(out.pickupsRead, 2);\n return scoped(4, \"calendars\");\n});\n\nawait at(\"D2 the recurring slot and the cancelled booking never reach Kim's list\", async () => {\n const out = await D.collect(io(), TODAY);\n ok(!out.rows.some((r) => r.contactId === \"c-enzo\"), \"the recurring Daycare slot was listed as a holiday stay\");\n ok(!out.rows.some((r) => r.contactId === \"c-test\"), \"a cancelled booking was listed\");\n eq(out.rows.length, 2, \"the list is not the two real stays\");\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D3 one customer's two dogs are one row, with the customer's name on it\", async () => {\n const out = await D.collect(io(), TODAY);\n const m = out.rows.filter((r) => r.contactId === \"c-muss\");\n eq(m.length, 1);\n eq(m[0].dogs.sort(), [\"Achilles\", \"Ghost\"]);\n eq(m[0].name, \"Jeffrey Musselwhite\");\n // Two dogs at $50 each is $100, and $100 is exactly what is on file, so this stay IS settled.\n // Kim's own money page: \"Holiday boarding — $50 per dog, non-refundable.\"\n eq(m[0].state, \"seen\", \"a payment for exactly the amount due for two dogs did not settle the stay\");\n ok(/2 dogs/.test(m[0].note), `the note does not say how the amount was worked out: ${m[0].note}`);\n return scoped(1, \"row\");\n});\n\nawait at(\"D4 a customer with no payment is worth checking, not accused\", async () => {\n const out = await D.collect(io(), TODAY);\n const f = out.rows.find((r) => r.contactId === \"c-flu\");\n eq(f.state, \"none_seen\");\n ok(/Venmo, Zelle or a cheque/i.test(f.note), \"the other ways of paying are not mentioned\");\n ok(!/\\bcash\\b/i.test(f.note), \"cash is offered as a place to look, and it is not one of her routes\");\n ok(!/unpaid|owes|has not paid/i.test(out.sentence + f.note), \"Kim is being handed an accusation\");\n return scoped(1, \"row\");\n});\n\nawait at(\"D5 each customer is looked up once however many dogs they bring\", async () => {\n // Three dogs is three calendar rows and must not be three CRM lookups: her account is rate\n // limited and this job runs unattended.\n const f = io();\n await D.collect(f, TODAY);\n eq(f.calls.filter((p) => p.includes(\"/notes\")).length, 2, \"notes were fetched more than once per customer\");\n return scoped(2, \"note reads\");\n});\n\nheader(\"WHEN HER CRM MISBEHAVES\");\n\nawait at(\"D6 a notes read that fails stays unknown all the way to the screen\", async () => {\n // THE ONE THAT MATTERS. A 500 on a notes read must not become \"this person has not paid\".\n const out = await D.collect(io({ fail: [\"/notes\"] }), TODAY);\n eq(out.readFailures, 2);\n ok(out.rows.every((r) => r.state === \"could_not_check\"), \"a failed read was reported as a finding\");\n ok(!/unpaid|owes|has not paid/i.test(out.rows.map((r) => r.note).join(\" \")), \"a failed read was worded as non-payment\");\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D7 failed reads do not masquerade as a dead payment feed\", async () => {\n // feedLooksDead() means \"we read everybody and saw no money anywhere\". Counting failures as\n // empty payment lists would trip the kill switch for the wrong reason and hide a real list.\n const out = await D.collect(io({ fail: [\"/notes\"] }), TODAY);\n eq(out.feedDead, false, \"failed reads tripped the dead-feed switch\");\n return scoped(1, \"run\");\n});\n\nawait at(\"D8 a calendar that does not answer is reported, not counted as no bookings\", async () => {\n const out = await D.collect(io({ fail: [\"ZmmjQJszkRMUltfEbumB\"] }), TODAY);\n eq(out.calendarsRead, 1);\n eq(out.calendarsAsked, 2);\n ok(!out.rows.some((r) => r.contactId === \"c-flu\"), \"an unread calendar produced rows anyway\");\n return scoped(1, \"failed calendar\");\n});\n\nawait at(\"D9 a name that cannot be read says so rather than showing an empty row\", async () => {\n const out = await D.collect(io({ fail: [\"/contacts/c-flu$\"] }), TODAY);\n const f = out.rows.find((r) => r.contactId === \"c-flu\");\n ok(f, \"the row vanished because the name lookup failed\");\n ok(f.name.length > 0, \"the row has a blank name, which reads as a bug rather than as a fact\");\n return scoped(1, \"row\");\n});\n\nawait at(\"D10 nothing booked reads as nothing to do\", async () => {\n const empty = { get: async (p) => (p.includes(\"calendarId=\") ? { events: [] } : { notes: [] }) };\n const out = await D.collect(empty, TODAY);\n eq(out.rows.length, 0);\n ok(/nothing to check/i.test(out.sentence), \"an empty holiday season is not described plainly\");\n return scoped(1, \"empty season\");\n});\n\nawait at(\"D19 a stay that boards over Christmas is found from its pick-up, not its drop-off\", async () => {\n // REAL SHAPE: a drop-off appointment is a ten minute handover slot, so its own endTime says\n // nothing about how long the dog stays. Ghost and Chewy really do drop off on 25 November and\n // get collected on the 28th, and only the pick-up calendar knows that. A customer who leaves\n // the day before Christmas week starts was invisible until this.\n const drop = [{ contactId: \"c-xmas\", title: \"Rex — Boarding Drop Off\", startTime: \"2026-12-18T09:00:00-05:00\",\n endTime: \"2026-12-18T09:10:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const pick = [{ contactId: \"c-xmas\", title: \"Rex — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\",\n endTime: \"2026-12-27T09:10:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false }];\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: drop };\n if (p.includes(\"calendarId=1Fnb\")) return { events: pick };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: [] };\n return { contact: { firstName: \"X\", lastName: \"Mas\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 1, \"a dog boarding across Christmas was invisible because it arrived on the 18th\");\n eq(out.rows[0].day, \"2026-12-18\");\n eq(out.rows[0].until, \"2026-12-27\", \"the stay was recorded as one day long\");\n eq(out.rows[0].window, \"Christmas and New Year\");\n // And without the pick-up calendar it correctly falls back to being invisible rather than wrong.\n const noPick = { get: async (p) => (p.includes(\"calendarId=wS5N\") ? { events: drop } : p.includes(\"calendarId=\") ? { events: [] } : p.includes(\"/notes\") ? { notes: [] } : { contact: {} }) };\n eq((await D.collect(noPick, TODAY)).rows.length, 0);\n return scoped(2, \"stays\");\n});\n\nheader(\"SHAPES THAT USED TO READ AS FINDINGS\");\n\nawait at(\"D13 a 200 with no notes list is unknown, not 'no payment found'\", async () => {\n // A rate-limit soft-fail, a partial payload or a changed response shape all arrive as a 200.\n // Only a THROWN error used to reach could_not_check; anything else rendered as a confident\n // \"No Square payment is on file\" about a customer whose notes were never actually read.\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=\")) return { events: EV[/calendarId=([^&]+)/.exec(p)[1]] ?? [] };\n if (p.includes(\"/notes\")) return {}; // 200, no notes key\n return { contact: { firstName: \"A\", lastName: \"B\" } };\n } };\n const out = await D.collect(io2, TODAY);\n ok(out.rows.length > 0, \"no rows, so this check inspected nothing\");\n ok(out.rows.every((r) => r.state === \"could_not_check\"), \"a 200 without a notes list rendered as a finding about a customer\");\n eq(out.readFailures, 2);\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D14 a 200 with no events list is a calendar that did not answer\", async () => {\n // [was: `d?.events ?? []`. A renamed key or a stale calendarId counted as \"read, and she has no\n // bookings\" — and runCollection would then STORE that empty list over a good one.]\n const io2 = { get: async (p) => (p.includes(\"calendarId=\") ? { ok: true } : { notes: [] }) };\n const out = await D.collect(io2, TODAY);\n eq(out.calendarsRead, 0, \"a response with no events list counted as a calendar successfully read\");\n eq(out.rows.length, 0);\n return scoped(2, \"calendars\");\n});\n\nawait at(\"D15 the notes endpoint is asked exactly the way it will answer\", async () => {\n // HER CRM 422s ON ANY QUERY PARAMETER HERE. A version of this that asked for ?limit=100 shipped\n // and turned every single customer into a failed read; it was caught by running it against her\n // account, not by this suite, because the fixture answered a URL the real CRM refuses.\n const seen = [];\n const io2 = { get: async (p) => {\n seen.push(p);\n if (p.includes(\"calendarId=\")) return { events: EV[/calendarId=([^&]+)/.exec(p)[1]] ?? [] };\n if (p.includes(\"/notes\")) {\n if (p.includes(\"?\")) throw new Error(\"HTTP 422 property limit should not exist\");\n return { notes: NOTES[/\\/contacts\\/([^/]+)\\/notes/.exec(p)[1]] ?? [] };\n }\n return { contact: NAMES[/\\/contacts\\/([^/?]+)$/.exec(p)[1]] ?? {} };\n } };\n const out = await D.collect(io2, TODAY);\n const noteCalls = seen.filter((p) => p.includes(\"/notes\"));\n ok(noteCalls.length > 0, \"no notes call was made, so this check inspected nothing\");\n ok(noteCalls.every((p) => !p.includes(\"?\")), `a query string was sent to an endpoint that rejects them: ${noteCalls[0]}`);\n eq(out.readFailures, 0, \"the notes reads failed\");\n return scoped(noteCalls.length, \"notes calls\");\n});\n\nawait at(\"D16 a notes list at the cap is unknown, not a short list\", async () => {\n // The endpoint takes no paging parameters, so a response at the cap could be complete or could\n // be the first hundred of three hundred. There is no way to tell, and a customer we cannot read\n // must not be reported as a customer with no payment.\n const full = Array.from({ length: 100 }, (_, i) => ({ body: `note ${i}`, dateAdded: \"2026-05-01T00:00:00Z\" }));\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=\")) return { events: EV[/calendarId=([^&]+)/.exec(p)[1]] ?? [] };\n if (p.includes(\"/notes\")) return { notes: full };\n return { contact: { firstName: \"A\", lastName: \"B\" } };\n } };\n const out = await D.collect(io2, TODAY);\n ok(out.rows.every((r) => r.state === \"could_not_check\"), \"a list we cannot prove is complete was reported as a finding\");\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D17 the dead-feed switch looks at this period, not at everything the customer ever paid\", async () => {\n // THE DEFENCE THAT WAS INERT. It compared each customer's WHOLE payment history, so any\n // customer with an old Square note kept it quiet — including the one customer in her account\n // who has Square notes. It could only ever have fired for people who had never paid by card.\n const old = [{ body: \"[Square] +$355.00 payment older (balance $0.00)\", dateAdded: \"2026-01-15T00:00:00.000Z\" }];\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=\")) return { events: EV[/calendarId=([^&]+)/.exec(p)[1]] ?? [] };\n if (p.includes(\"/notes\")) return { notes: old };\n return { contact: { firstName: \"A\", lastName: \"B\" } };\n } };\n const out = await D.collect(io2, TODAY);\n // 2 customers is below the sample floor, so the switch correctly stays quiet here; what this\n // proves is that the OLD payment is not being counted as money seen in this period.\n ok(out.rows.every((r) => r.state === \"none_seen\"), \"a January payment settled a November deposit\");\n ok(out.rows.every((r) => !/other card payment/i.test(r.note)),\n \"a payment six months before the booking was offered to Kim as relevant to this deposit\");\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D18 five quiet customers with old payments still trip the dead-feed switch\", async () => {\n // THE SCOPING THAT MAKES THE SWITCH REAL. Every one of these customers has paid Kim by card\n // before, and none of them has paid anything around the time they booked. That is what a\n // stopped payment feed looks like. Comparing whole payment histories instead would find money\n // on every customer and stay silent through the entire outage.\n const evs = Array.from({ length: 6 }, (_, i) => ({\n contactId: `q${i}`, title: `Dog${i} — Boarding Drop Off`, startTime: \"2026-11-25T09:00:00-05:00\",\n endTime: \"2026-11-27T09:00:00-05:00\", dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false,\n }));\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=\")) return { events: p.includes(\"wS5N\") ? evs : [] };\n if (p.includes(\"/notes\")) return { notes: [{ body: \"[Square] +$200.00 payment old\" + p.slice(-3) + \" (balance $0.00)\", dateAdded: \"2026-02-01T00:00:00.000Z\" }] };\n return { contact: { firstName: \"Q\", lastName: \"Customer\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 6);\n ok(out.feedDead, \"six customers with no payment around their bookings did not trip the dead-feed switch\");\n ok(/payment feed has stopped/.test(out.sentence));\n return scoped(out.rows.length, \"customers\");\n});\n\nawait at(\"D20 one regular with five holiday bookings does not look like a payment outage\", async () => {\n // Her account has a contact with 24 drop-offs. If the kill switch counted BOOKINGS, that one\n // customer paying cash would clear the five-customer floor on their own and suppress the whole\n // card for everybody.\n const evs = [\"23\", \"25\", \"27\"].map((d) => ({\n contactId: \"regular\", title: `Dog${d} — Boarding Drop Off`, startTime: `2026-11-${d}T09:00:00-05:00`,\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false,\n })).concat([\"21\", \"28\"].map((d) => ({\n contactId: \"regular\", title: `Dog${d} — Boarding Drop Off`, startTime: `2026-12-${d}T09:00:00-05:00`,\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false,\n })));\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: evs };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: [] };\n return { contact: { firstName: \"One\", lastName: \"Regular\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 5, \"the five bookings were not all found, so this check proves nothing\");\n ok(!out.feedDead, \"one customer's five cash-paid bookings were read as her payment system being down\");\n return scoped(out.rows.length, \"bookings for one customer\");\n});\n\nawait at(\"D21 a run where nobody's payments could be read is not stored over a good list\", async () => {\n // The calendars answered, so the empty-collection guard lets it through, and the blob would be\n // replaced by a page of \"could not check\" WITH A FRESH TIMESTAMP: the content gets worse while\n // the page claims to have just been updated. Yesterday's real shortlist is more use than that.\n // codeOnly, not the raw file: a control deleted this guard and left a [was: ...] note\n // quoting it, and the check stayed green on my own explanation of the bug.\n const src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n const guard = src.indexOf('every((r) => r.state === \"could_not_check\")');\n ok(guard > -1, \"there is no guard against storing a collection in which nothing could be checked\");\n ok(guard < src.indexOf(\"setJSON\"), \"the guard does not actually stop the write\");\n // And the collection itself really does produce that shape, so the guard has something to catch.\n const out = await D.collect(io({ fail: [\"/notes\"] }), TODAY);\n ok(out.rows.length > 0 && out.rows.every((r) => r.state === \"could_not_check\"),\n \"the all-unknown case cannot be produced, so the guard is guarding nothing\");\n return scoped(out.rows.length, \"rows\");\n});\n\nawait at(\"D22 a booking with no date does not black out the whole card\", async () => {\n // paymentsNearStay returns a STRUCTURAL empty for a stay with no booking date. Counting that as\n // \"we looked and saw no money\" let one missing field push the sample over the dead-feed floor\n // and suppress the entire list, including a customer whose $50 had been read successfully.\n const evs = [0, 1, 2, 3].map((i) => ({\n contactId: `c${i}`, title: `Dog${i} — Boarding Drop Off`, startTime: \"2026-11-25T09:00:00-05:00\",\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false,\n }));\n // The fifth has NO dateAdded, and does have a readable payment.\n evs.push({ contactId: \"c4\", title: \"Dog4 — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\",\n appointmentStatus: \"confirmed\", isRecurring: false });\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: evs };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: p.includes(\"c4\") ? [{ body: \"[Square] +$50.00 payment f (balance $0.00)\", dateAdded: \"2026-10-05T00:00:00Z\" }] : [] };\n return { contact: { firstName: \"A\", lastName: \"B\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 5);\n ok(!out.feedDead, \"one booking with a missing date took the whole deposit list off Kim's page\");\n return scoped(out.rows.length, \"stays\");\n});\n\nawait at(\"D23 collecting one dog and boarding another on the same day keeps both stays\", async () => {\n // Real shape: a customer collects on 27 December and re-boards the same day. With a strict\n // \"before the next drop-off\" bound the first stay lost its pick-up, shrank to a single day,\n // stopped overlapping Christmas and vanished — the busiest stay of the season, silently.\n const drops = [\"18\", \"27\"].map((d) => ({\n contactId: \"mia\", title: `Dog — Boarding Drop Off`, startTime: `2026-12-${d}T09:00:00-05:00`,\n dateAdded: \"2026-10-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false }));\n const picks = [\n { contactId: \"mia\", title: \"Dog — Boarding Pick Up\", startTime: \"2026-12-27T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"mia\", title: \"Dog — Boarding Pick Up\", startTime: \"2027-01-03T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: drops };\n if (p.includes(\"calendarId=1Fnb\")) return { events: picks };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: [] };\n return { contact: { firstName: \"Mia\", lastName: \"Reyes\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 2, \"the stay running through Christmas disappeared because its pick-up day was also the next drop-off day\");\n eq(out.rows[0].day, \"2026-12-18\");\n eq(out.rows[0].until, \"2026-12-27\", \"the first stay did not get the pick-up that ends it\");\n return scoped(2, \"stays\");\n});\n\nawait at(\"D24 the collector asks for the period it actually needs, at both ends\", async () => {\n // NOTHING IN 270 ASSERTIONS COULD SEE WHAT PERIOD WAS BEING ASKED FOR. LOOKBACK_DAYS and\n // LOOKAHEAD_DAYS could both be set to zero with no test moving, which is exactly how the\n // drop-off range came to stop short of the pick-up range and blind the next-booking bound for\n // every stay at the end of the season.\n const asked = [];\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=\")) { asked.push(p); return { events: [] }; }\n if (p.includes(\"/notes\")) return { notes: [] };\n return { contact: {} };\n } };\n await D.collect(io2, TODAY);\n const range = (p) => {\n const st = Number(/startTime=(\\d+)/.exec(p)[1]), en = Number(/endTime=(\\d+)/.exec(p)[1]);\n return [new Date(st).toISOString().slice(0, 10), new Date(en).toISOString().slice(0, 10)];\n };\n const drops = asked.filter((p) => /calendarId=(wS5N|Zmmj)/.test(p)).map(range);\n const picks = asked.filter((p) => /calendarId=(1Fnb|bN6w)/.test(p)).map(range);\n ok(drops.length === 2 && picks.length === 2, \"not every calendar was asked, so this check proves nothing\");\n // Reaches BACK before the first window: a stay can start before a holiday and run into it.\n ok(drops.every(([f]) => f < \"2026-11-23\"), `the drop-off query starts inside the window: ${drops[0]}`);\n // Reaches FORWARD past the last window, on BOTH kinds of calendar: the pick-up that ends a New\n // Year stay is in January, and so is the next booking that bounds it.\n ok(picks.every(([, t]) => t > \"2027-01-02\"), `the pick-up query stops at the window edge: ${picks[0]}`);\n ok(drops.every(([, t]) => t > \"2027-01-02\"),\n `the drop-off query stops at the window edge, so a New Year stay has no next booking to bound it: ${drops[0]}`);\n return scoped(4, \"calendar queries\");\n});\n\nawait at(\"D25 a New Year stay does not swallow the next booking's pick-up\", async () => {\n // The consequence of D24's range mismatch, end to end: the dog went home on 2 January and the\n // card said \"Dec 30 to Jan 15\", which also stretched the payment window far enough that a\n // January payment settled the holiday deposit.\n const drops = [\n { contactId: \"ny\", title: \"A — Boarding Drop Off\", startTime: \"2026-12-30T09:00:00-05:00\", dateAdded: \"2026-11-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"ny\", title: \"A — Boarding Drop Off\", startTime: \"2027-01-10T09:00:00-05:00\", dateAdded: \"2026-11-01 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const picks = [\n { contactId: \"ny\", title: \"A — Boarding Pick Up\", startTime: \"2027-01-02T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"ny\", title: \"A — Boarding Pick Up\", startTime: \"2027-01-15T09:00:00-05:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const inRange = (evs, p) => {\n const st = Number(/startTime=(\\d+)/.exec(p)[1]), en = Number(/endTime=(\\d+)/.exec(p)[1]);\n return evs.filter((e) => { const t = Date.parse(e.startTime); return t >= st && t <= en; });\n };\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: inRange(drops, p) };\n if (p.includes(\"calendarId=1Fnb\")) return { events: inRange(picks, p) };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: [{ body: \"[Square] +$50.00 payment jan (balance $0.00)\", dateAdded: \"2027-01-12T00:00:00.000Z\" }] };\n return { contact: { firstName: \"New\", lastName: \"Year\" } };\n } };\n const out = await D.collect(io2, TODAY);\n const ny = out.rows.find((r) => r.day === \"2026-12-30\");\n ok(ny, \"the New Year stay was lost entirely\");\n eq(ny.until, \"2027-01-02\", \"the stay swallowed the pick-up belonging to the 10 January booking\");\n ok(ny.state !== \"seen\", \"a payment made after the dogs went home settled the holiday deposit\");\n return scoped(1, \"stay\");\n});\n\nawait at(\"D26 a season that empties to nothing is held, not written over the real list\", async () => {\n // A renamed calendar answers 200 with an EMPTY events array. That is well formed, so it passes\n // every other guard, and in December it silently replaces her shortlist with \"nothing to check\".\n const src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n ok(/out\\.rows\\.length === 0 && \$prev\\?\\.rows\\?\\.length \\?\\? 0\$ > 0/.test(src),\n \"nothing compares this run against the list already stored\");\n const guard = src.indexOf(\"prev?.rows?.length\");\n ok(guard > -1 && guard < src.indexOf(\"setJSON\"), \"the comparison does not actually stop the write\");\n ok(/force/.test(src), \"there is no way to accept a genuinely empty season\");\n // And the empty-but-well-formed collection really is produced, so the guard has something to catch.\n const io2 = { get: async (p) => (p.includes(\"calendarId=\") ? { events: [] } : p.includes(\"/notes\") ? { notes: [] } : { contact: {} }) };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 0);\n eq(out.calendarsRead, 2, \"an empty-array response should still count as a calendar that answered\");\n return scoped(3, \"guards\");\n});\n\nawait at(\"D27 the collector really does allocate per customer, not stay by stay\", async () => {\n // H48 pins the pure function. NOTHING pinned that the COLLECTOR calls it: reverting one line to\n // `own.map(s => statusFor(s, pays))` put the whole money bug back end to end with 277 assertions\n // still green. This is the end-to-end version, run through collect().\n const drops = [\n { contactId: \"reg\", title: \"Rex — Boarding Drop Off\", startTime: \"2026-11-25T09:00:00-05:00\", dateAdded: \"2026-09-28 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n { contactId: \"reg\", title: \"Rex — Boarding Drop Off\", startTime: \"2026-12-22T09:00:00-05:00\", dateAdded: \"2026-09-28 09:00:00\", appointmentStatus: \"confirmed\", isRecurring: false },\n ];\n const io2 = { get: async (p) => {\n if (p.includes(\"calendarId=wS5N\")) return { events: drops };\n if (p.includes(\"calendarId=\")) return { events: [] };\n if (p.includes(\"/notes\")) return { notes: [{ body: \"[Square] +$50.00 payment onlyfifty (balance $0.00)\", dateAdded: \"2026-10-05T00:00:00Z\" }] };\n return { contact: { firstName: \"One\", lastName: \"Regular\" } };\n } };\n const out = await D.collect(io2, TODAY);\n eq(out.rows.length, 2, \"both bookings should be on the list\");\n eq(out.rows.filter((r) => r.state === \"seen\").length, 1,\n \"one $50 deposit settled both of this customer's holiday stays, so Kim is owed $100 and sees nothing to chase\");\n eq(out.rows[0].state, \"seen\", \"the money should settle the earlier stay\");\n return scoped(2, \"stays\");\n});\n\nawait at(\"D28 a genuinely empty season can be accepted on purpose\", async () => {\n // The renamed-calendar guard holds an empty result back. A season really can empty out, so\n // there has to be a way to say so — and `!force &&` being deleted would make that impossible\n // with nothing noticing.\n const src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n ok(/!force && out\\.rows\\.length === 0/.test(src), \"the empty-season refusal cannot be overridden at all\");\n ok(/runCollection\$force = false, source = \"unknown\"\$/.test(src), \"runCollection takes no force argument\");\n ok(/runCollection\$url\\.searchParams\\.get\\(\"force\"\$ === \"1\", \"endpoint\"\\)/.test(src), \"nothing can actually pass force in\");\n return scoped(3, \"guarantees\");\n});\n\nawait at(\"D29 the refresh gate is a rule that can be tested, not a regex over the engine\", async () => {\n // D29 USED TO BE FOUR VACUOUS ASSERTIONS. It scanned main.ts for the strings \"3600_000\",\n // \"holiday_deposits\", \"runCollection()\" and \"catch\". A sixth adversarial read broke the actual\n // behaviour four different ways and every one stayed green: the comparison flipped so the\n // refresh dies after an hour; the interval multiplied by a thousand so it never runs; the gate\n // pointed at a blob key that does not exist so it runs on EVERY tick; the import pointed at the\n // wrong module so it silently never runs; and the try/catch deleted, satisfied by an unrelated\n // `.catch` 120 characters away. So the rule moved into a pure function and is tested as one.\n eq(D.needsRefresh(null, Date.parse(\"2026-08-06T18:00:00Z\")), true, \"never having collected should refresh\");\n eq(D.needsRefresh(undefined, Date.parse(\"2026-08-06T18:00:00Z\")), true);\n eq(D.needsRefresh(\"not a date\", Date.parse(\"2026-08-06T18:00:00Z\")), true,\n \"an unreadable stamp closed the gate forever instead of opening it\");\n eq(D.needsRefresh(\"2026-08-06T17:59:00Z\", Date.parse(\"2026-08-06T18:00:00Z\")), false, \"it refreshed a minute later\");\n eq(D.needsRefresh(\"2026-08-06T16:59:00Z\", Date.parse(\"2026-08-06T18:00:00Z\")), true, \"an hour-old list was not refreshed\");\n eq(D.needsRefresh(\"2026-08-06T17:00:00Z\", Date.parse(\"2026-08-06T18:00:00Z\")), false, \"exactly an hour is not yet over an hour\");\n eq(D.REFRESH_EVERY_MS, 3_600_000);\n return scoped(7, \"gate decisions\");\n});\n\nawait at(\"D30 the engine calls that rule, and calls it last\", async () => {\n const eng = codeOnly(readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\n ok(/import\$\"\\.\\/deposits\\.ts\"\$/.test(eng), \"the engine does not import the deposit collector at all\");\n ok(/refreshIfDue\$/.test(eng), \"the engine does not use the shared refresh step\");\n ok(/runCollection\\(false, \"engine\"\$/.test(eng), \"the engine never actually collects, or does not label its runs\");\n ok(/ATTEMPT_KEY/.test(eng), \"the gate reads something other than the attempt stamp, so a failing run retries every tick\");\n const at2 = eng.indexOf(\"runCollection(false, \\\"engine\\\")\");\n const before = eng.slice(Math.max(0, at2 - 700), at2);\n ok(/puppy_run_lock/.test(before) && /saveReport\$out\$/.test(before),\n \"the deposit refresh runs before the follow-up work has finished, saved its report and released its lock\");\n // THE WHOLE BLOCK, EXACTLY. [was: the statement pinned plus \"nothing conditional between the\n // import and it\" — which a tenth review defeated by putting the condition BEFORE the import,\n // and again by wrapping both lines in a function nothing calls. The refresh never fired and\n // 310 assertions stayed green. Pinning one statement can always be routed around; pinning the\n // block cannot. This is deliberately brittle: the block should almost never change, and when\n // it does, changing it here is the point.]\n const BLOCK = [\n \" try {\",\n ' const dep = await import(\"./deposits.ts\");',\n ' await dep.refreshIfDue(() => blob.getJSON(dep.ATTEMPT_KEY) as any, () => dep.runCollection(false, \"engine\"), Date.now());',\n \" } catch (e) { console.log(\\\"deposits refresh skipped\\\", String(e).slice(0, 120)); }\",\n ].join(\"\\n\");\n ok(eng.includes(BLOCK), \"the engine's deposit refresh is not the exact unconditional block it should be\");\n // And it appears ONCE, so a dead copy cannot satisfy the pin while a live conditional one runs.\n eq(eng.split(\"refreshIfDue(\").length - 1, 1, \"the engine has more than one refresh call site\");\n return scoped(8, \"guarantees\")\n});\n\nawait at(\"D31 every one of the four storage refusals is a decision that can be checked\", async () => {\n // [was: three regexes over runCollection's source. runCollection needs val.town's blob module so\n // no test could execute it, and a control that wrapped a guard in `if (false && ...)` left the\n // regex matching and the suite green. The rules live in a pure function now.]\n const good = { at: \"x\", season: 2026, windows: [], sentence: \"\", feedDead: false, readFailures: 0,\n calendarsRead: 2, calendarsAsked: 2, pickupsRead: 2, pickupsAsked: 2,\n rows: [{ contactId: \"a\", name: \"A\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [], window: \"T\", state: \"none_seen\", amountSeen: 0, note: \"\" }] };\n eq(D.decideStore(good, null).store, true, \"a good collection was refused\");\n eq(D.decideStore({ ...good, calendarsRead: 0 }, null).store, false, \"a run where no calendar answered was stored\");\n const allUnknown = { ...good, rows: good.rows.map((r) => ({ ...r, state: \"could_not_check\" })) };\n eq(D.decideStore(allUnknown, null).store, false, \"a run where nobody could be read was stored over the real list\");\n eq(D.decideStore({ ...good, rows: [] }, good).store, false, \"a run that found nothing overwrote a list that had rows\");\n eq(D.decideStore({ ...good, rows: [] }, good, true).store, true, \"an empty season could not be accepted even on purpose\");\n eq(D.decideStore({ ...good, rows: [] }, null).store, true, \"the very first run on an empty season was refused, so the card never fills in\");\n for (const bad of [{ ...good, calendarsRead: 0 }, allUnknown, { ...good, rows: [] }]) {\n const d = D.decideStore(bad, good);\n ok(d.error && d.error.length > 20, \"a refusal with no reason attached\");\n ok(!/unpaid|owes|has not paid/i.test(d.error), \"a refusal reason that accuses somebody\");\n }\n return scoped(6, \"decisions\");\n});\n\nawait at(\"D32 the collector reads the season on her clock, not on Greenwich\", async () => {\n // H54 pins businessDay in isolation. Nothing pinned that collect() uses it: reverting one call\n // restored the bug with the whole suite green. 8pm ET on 2 January is 3 January in UTC.\n const asked = [];\n const io2 = { get: async (p) => { if (p.includes(\"calendarId=\")) asked.push(p); return p.includes(\"calendarId=\") ? { events: [] } : p.includes(\"/notes\") ? { notes: [] } : { contact: {} }; } };\n const out = await D.collect(io2, \"2027-01-03T01:00:00.000Z\");\n eq(out.season, 2026, \"the season rolled over at 8pm on 2 January, with dogs still in the kennels\");\n ok(out.windows.some((w) => w.name === \"Christmas and New Year\" && w.to === \"2027-01-02\"),\n \"the windows are next year's while this year's stays are still running\");\n return scoped(2, \"windows\");\n});\n\nawait at(\"D33 reading the list reports when it was last ATTEMPTED, and reading does not write\", async () => {\n // \"The list has not moved\" is ambiguous between \"the schedule never tried\" and \"it tried and\n // declined to store\", and those need different fixes. Every observation of the refresh so far\n // has been unable to tell them apart, which is why the wiring has taken all evening to confirm.\n const src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n const read = src.slice(src.indexOf('url.searchParams.get(\"run\") !== \"1\"'), src.indexOf('const r = await runCollection'));\n ok(/lastAttemptAt/.test(read), \"the read route does not report when the refresh last tried\");\n ok(/refreshDueAt/.test(read), \"the read route does not say when the next refresh is due\");\n ok(/getJSON\$ATTEMPT_KEY\$/.test(read), \"the attempt stamp is not read on this route\");\n // AND READING MUST NOT WRITE IT. If a check reset the clock, the check would be the reason the\n // refresh never fired — which is exactly the mistake that made this evening's observations\n // useless: every manual run pushed the gate an hour further out.\n ok(!/setJSON/.test(read), \"the read route writes something, so looking at the list resets the gate\");\n ok(/setJSON\$ATTEMPT_KEY/.test(src.slice(src.indexOf(\"export async function runCollection\"))),\n \"the attempt stamp is never written where the work actually happens\");\n return scoped(5, \"guarantees\");\n});\n\nawait at(\"D34 the refresh records WHICH schedule started it\", async () => {\n // Two schedules can reach runCollection — the engine's interval and deposits-cron.ts — plus a\n // person hitting the endpoint. On 6 August the list refreshed at 20:49:03Z with nobody\n // triggering it: the first autonomous refresh ever observed here, and nothing recorded which of\n // the two did it. \"It works\" and \"which one works\" are different facts, and only one of them\n // tells you what to fix when it stops.\n const src = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n ok(/runCollection\\(force = false, source = \"unknown\"\$/.test(src), \"the refresh does not record who started it\");\n ok(/setJSON\$ATTEMPT_KEY, \\{ at: new Date\\(\$\\.toISOString\$\$, source \\}\\)/.test(src), \"the source is taken and then dropped\");\n ok(/lastAttemptBy/.test(src), \"the source is stored but never reported back\");\n ok(/runCollection\$url\\.searchParams\\.get\\(\"force\"\$ === \"1\", \"endpoint\"\\)/.test(src), \"a manual run is not labelled\");\n const cron = codeOnly(readFileSync(new URL(\"../engine/deposits-cron.ts\", import.meta.url), \"utf8\"));\n ok(/runCollection\$false, \"deposits-cron\"\$/.test(cron), \"the scheduled file does not label its runs\");\n const eng = codeOnly(readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\n ok(/runCollection\$false, \"engine\"\$/.test(eng), \"the engine does not label its runs\");\n return scoped(6, \"call sites\");\n});\n\nawait at(\"D35 the second scheduled file uses the same gate as the engine\", async () => {\n // It has never been seen firing, but something refreshed the list at 20:49 on 6 August and it is\n // one of the two candidates. Ungated, it would collect on every tick — the exact thing the\n // attempt stamp exists to prevent.\n // BEHAVIOURAL, not a grep. [was: three text checks — that \"needsRefresh(\" appeared, that\n // \"ATTEMPT_KEY\" appeared, and that one came before the other. A mutation that CALLED\n // needsRefresh and threw the answer away, collecting from her CRM on every tick, passed all\n // three. The decision is one shared function now, and this watches it decide.]\n let ran = 0;\n const run = async () => { ran++; return { ok: true }; };\n const fresh = await D.refreshIfDue(async () => ({ at: new Date(Date.now() - 60_000).toISOString() }), run, Date.now());\n eq(fresh.ran, false, \"a list refreshed a minute ago was collected again\");\n const stale = await D.refreshIfDue(async () => ({ at: new Date(Date.now() - 7_200_000).toISOString() }), run, Date.now());\n eq(stale.ran, true, \"a two-hour-old list was not refreshed\");\n const never = await D.refreshIfDue(async () => null, async () => ({ ok: false, error: \"no calendar answered\" }), Date.now());\n eq(never.ran, true, \"a list that has never been collected was not collected\");\n ok(/no calendar answered/.test(never.why), \"a refusal to store is not reported back to whoever asked\");\n eq(ran, 1, \"the gate ran the collection the wrong number of times\");\n // And BOTH schedules go through it, so they cannot drift apart.\n const cron = codeOnly(readFileSync(new URL(\"../engine/deposits-cron.ts\", import.meta.url), \"utf8\"));\n // THE WHOLE STATEMENT, EXACTLY, AND ONLY ONE MENTION OF THE COLLECTOR. [was: a count of\n // \"runCollection(\" plus an ordering regex, which a tenth review defeated three ways: aliasing\n // it (`const always = runCollection`), passing a reader that always returns null so the gate is\n // permanently open, and passing 0 instead of Date.now() so the gate never opens again. All\n // three collected on every tick, or never, with the suite green.]\n const CRON = ' const g = await refreshIfDue(() => blob.getJSON(ATTEMPT_KEY) as any, () => runCollection(false, \"deposits-cron\"), Date.now());';\n ok(cron.includes(CRON), \"the scheduled file's gate is not the exact statement it should be\");\n eq(cron.split(\"runCollection\").length - 1, 2, \"the collector is named somewhere other than the import and the gate\");\n eq(cron.split(\"refreshIfDue\").length - 1, 2, \"the gate is named somewhere other than the import and the call\");\n return scoped(9, \"decisions\");\n});\n\nheader(\"WHAT IT MUST NEVER DO\");\n\nawait at(\"D11 the collector is structurally incapable of changing her account\", async () => {\n // Not a promise in a comment: this is the file that holds the network calls, so it is the file\n // where a write would actually be written.\n ok(!/method:\\s*[\"'`](POST|PUT|PATCH|DELETE)/i.test(src), \"the collector contains a write verb\");\n ok(!/addTag|\\/tags|sendSms|sendEmail|createTask|upsert/.test(src.replace(/BOARDING_CALENDARS/g, \"\")),\n \"the collector reaches something that changes her account\");\n const fetches = src.match(/fetch\$/g) || [];\n eq(fetches.length, 1, \"there is more than one place in this file that can talk to her CRM\");\n ok(/method: \"GET\"/.test(src), \"the single request does not say GET out loud\");\n return scoped(4, \"structural guarantees\");\n});\n\nawait at(\"D12 the refusal to store is wired into the one function that stores\", async () => {\n // [was: two regexes over runCollection's source, which is the weak kind of check this project\n // keeps getting caught by. What the rules DO is tested behaviourally in D31; what is left to\n // check here is that runCollection actually consults them before it writes.]\n const code = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n const decide = code.indexOf(\"decideStore(out, prev, force)\");\n ok(decide > -1, \"runCollection does not consult the storage rules at all\");\n ok(decide < code.lastIndexOf(\"setJSON(BLOB_KEY\"), \"the rules are consulted after the write, which is no guard at all\");\n ok(/if \\(!d\\.store\$ return/.test(code), \"the decision is read and then ignored\");\n return scoped(3, \"guarantees\");\n});\n\nawait at(\"D41 a run that saw fewer calendars than the stored one does not replace it\", async () => {\n // THE SILENT ONE. There are two boarding calendars because a customer can appear on either, and\n // the row list is their union. When one fails — a transient 5xx, a revoked scope, a rename, and\n // there is no retry anywhere in deposits.ts — the partial union passed every other guard and was\n // written straight over the complete one. The customers who only appear on the failed calendar do\n // not become \"could not check\" rows: their bookings were never fetched, so they get no row at\n // all, and vanish off Kim's shortlist under a banner that cannot say who is missing.\n const blob = (o) => ({ at: \"2026-11-01T00:00:00Z\", season: 2026, windows: [], rows: o.rows ?? [{ contactId: \"a\", state: \"none_seen\" }],\n sentence: \"\", feedDead: false, readFailures: 0,\n calendarsRead: o.cr ?? 2, calendarsAsked: o.ca ?? 2, pickupsRead: o.pr ?? 2, pickupsAsked: o.pa ?? 2 });\n const good = blob({});\n eq(D.decideStore(blob({ cr: 1 }), good).store, false, \"a run that read one of two boarding calendars overwrote a complete list\");\n eq(D.decideStore(blob({ pr: 1 }), good).store, false, \"a run that read one of two pick-up calendars overwrote a complete list\");\n eq(D.decideStore(blob({ cr: 1, pr: 1 }), good).store, false, \"a run missing both kinds of calendar overwrote a complete list\");\n ok(/fewer bookings|could not read/.test(D.decideStore(blob({ cr: 1 }), good).error ?? \"\"), \"the refusal does not say why\");\n // NOT a blanket ban on ever storing less. A calendar Kim actually deletes drops `asked` as well\n // as `read`, and that run is complete: 1 of 1 is the whole picture.\n eq(D.decideStore(blob({ cr: 1, ca: 1 }), good).store, true, \"deleting a calendar froze the list permanently\");\n eq(D.decideStore(blob({ cr: 1, ca: 1, pr: 1, pa: 1 }), good).store, true, \"deleting both kinds froze the list permanently\");\n // A run no worse than the stored one still stores, or a degraded list would never recover.\n eq(D.decideStore(blob({ cr: 1 }), blob({ cr: 1 })).store, true, \"a second run with the same calendar still down was refused, so the list can never catch up\");\n eq(D.decideStore(blob({}), blob({ cr: 1 })).store, true, \"a recovered run was refused\");\n // With nothing stored at all, a partial list beats no list: the banner declares it.\n eq(D.decideStore(blob({ cr: 1 }), null).store, true, \"the very first run was refused because one calendar was down, leaving Kim with nothing\");\n // force=1 is Amir's override and must still work.\n eq(D.decideStore(blob({ cr: 1 }), good, true).store, true, \"force=1 no longer overrides\");\n return scoped(10, \"storage decisions\");\n});\n\nawait at(\"D42 both schedules are wired so that the pinned code is actually reachable\", async () => {\n // Ten sabotage routes were walked on 7 August. The existing structural checks caught five. These\n // are the ones they did not: every one leaves every pinned string in place and still switches the\n // refresh off.\n const eng = codeOnly(readFileSync(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\n const cron = codeOnly(readFileSync(new URL(\"../engine/deposits-cron.ts\", import.meta.url), \"utf8\"));\n // 1. The pinned block moved out of the exported function into a dead private one, with a no-op\n // `export default` put back in its place. Substring checks over the whole file stay green.\n // A regex cannot catch this: `export default ... { ... refreshIfDue(` matched straight through\n // a one-line no-op default export into the dead function underneath it. So the body is found\n // by counting braces, which is exact.\n const bodyOf = (src, from) => {\n const open = src.indexOf(\"{\", from);\n if (open < 0) return \"\";\n let depth = 0;\n for (let i = open; i < src.length; i++) {\n if (src[i] === \"{\") depth++;\n else if (src[i] === \"}\" && --depth === 0) return src.slice(open, i + 1);\n }\n return \"\";\n };\n const exported = bodyOf(cron, cron.indexOf(\"export default\"));\n ok(exported.length > 100, \"the scheduled file's default export has no body worth speaking of, so this check is blind\");\n ok(exported.includes(\"refreshIfDue(\"),\n \"the refresh call is not inside the scheduled file's own default export, so val.town's tick never reaches it\");\n // 2. An unconditional early `return` inserted BEFORE the block, leaving the block untouched.\n // TypeScript does not error on unreachable code by default, so typecheck.mjs misses it too.\n // Anchored at the LAST saveReport, not at the top of the run: the run lock legitimately\n // returns early on a tick where another run is already active, and that tick is meant to skip.\n const engBetween = eng.slice(eng.lastIndexOf(\"saveReport(out)\"), eng.indexOf('runCollection(false, \"engine\")'));\n ok(eng.includes(\"saveReport(out)\") && engBetween.length < 600, \"the refresh has drifted away from the end of the run, so this check no longer knows what it is measuring\");\n ok(!/\\breturn\\b/.test(engBetween), \"a return sits between the end of the run and the deposit refresh, which skips it forever with its code left intact\");\n const cronBetween = cron.slice(cron.indexOf(\"export default async function\"), cron.indexOf(\"refreshIfDue(\"));\n ok(cronBetween.length > 20, \"the cron's refresh call was not found, so this check is blind\");\n ok(!/^\\s*return[\\s;]/m.test(cronBetween), \"an early return silently disables the scheduled file while every pinned string stays intact\");\n // 3. The val TYPE. A file deployed as \"script\" instead of \"interval\" never fires at all, and\n // nothing in tests/ read scripts/deploy.mjs before this.\n const deploy = readFileSync(new URL(\"../scripts/deploy.mjs\", import.meta.url), \"utf8\");\n ok(/\"deposits-cron\\.ts\":\\s*\"interval\"/.test(deploy), \"deposits-cron.ts is no longer deployed as a val.town interval, so it never runs\");\n ok(/\"main\\.ts\":\\s*\"interval\"/.test(deploy), \"main.ts is no longer deployed as a val.town interval\");\n return scoped(9, \"sabotage routes\");\n});\n\nawait at(\"D43 the refresh gate is claimed before the work, not after it\", async () => {\n // Two schedules can reach runCollection: the engine's own interval and deposits-cron. refreshIfDue\n // is read-then-act, and val.town's blob store has no compare-and-set, so this CANNOT be made\n // atomic. What it can be, and is, is claimed early: runCollection writes the attempt stamp as its\n // first await, BEFORE the credential, the calendars and the notes. So a tick arriving at any\n // point after that write is gated, and the window in which two ticks can both collect is one\n // blob write wide rather than one whole collection wide.\n //\n // Stated exactly that way because it is what was actually observed. Two callers that read the\n // stamp in the same millisecond DO both collect; that costs a duplicate read-only pass over her\n // CRM and nothing else, since this path cannot write to a customer record. The schedules are\n // hourly and fire on different offsets. This test pins the guarantee that holds, and does not\n // pretend to the one that does not.\n let stamp = { at: new Date(Date.now() - 7_200_000).toISOString() };\n let collections = 0, claimed = 0;\n const readStamp = async () => stamp;\n const run = async () => {\n stamp = { at: new Date().toISOString() }; // runCollection's real first await\n claimed++;\n await new Promise((r) => setTimeout(r, 10)); // the network round trip it stands in for\n collections++;\n return { ok: true };\n };\n const first = D.refreshIfDue(readStamp, run, Date.now());\n await new Promise((r) => setTimeout(r, 1)); // a tick arriving after the claim, mid-collection\n const second = await D.refreshIfDue(readStamp, run, Date.now());\n await first;\n eq(claimed, 1, \"a second schedule ticking DURING a collection started a second one\");\n eq(second.ran, false, \"the second tick was not gated by the stamp the first one had already claimed\");\n eq(collections, 1, \"her CRM was read twice for one refresh\");\n // And the ordering that makes that true, pinned in the source: the stamp is written before the\n // credential is even resolved. If it moved after the collection, everything above still passes\n // on these fakes while the real gate opened for the whole duration of a run.\n const code = codeOnly(readFileSync(new URL(\"../engine/deposits.ts\", import.meta.url), \"utf8\"));\n const body = code.slice(code.indexOf(\"export async function runCollection\"), code.indexOf(\"export default async function\"));\n ok(body.indexOf(\"setJSON(ATTEMPT_KEY\") > -1, \"runCollection no longer stamps the attempt at all\");\n ok(body.indexOf(\"setJSON(ATTEMPT_KEY\") < body.indexOf(\"await token()\"), \"the attempt is stamped after the work starts, so the gate is open for the whole run\");\n ok(body.indexOf(\"setJSON(ATTEMPT_KEY\") < body.indexOf(\"collect(\"), \"the attempt is stamped after her calendars are read\");\n return scoped(6, \"gate checks\");\n});\n\nawait done();\n\n\n=====FILE tests/detect.test.mjs =====\n// WHO GETS NINETEEN MONTHS OF MESSAGES.\n// Every case below is a real sentence out of Kim's contact records, or a near miss of one. A false\n// positive here is a person receiving forty-one messages about a puppy they do not have, in her\n// name, so the bar is that the classifier has to be defensible line by line rather than accurate\n// on average.\nimport * as D from \"../build/puppy-detect.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"detect\");\n\nheader(\"READING AN AGE\");\n\nt(\"N1 a dog described in years is never read as a puppy, however many months follow\", () => {\n // The bug this file was written to prevent, which the first version still had.\n const cases = [\n [\"Charlie, who is 3 years and 4 months old\", 40],\n [\"3 years and 4 months old\", 40],\n [\"a 3-year-old German Shepherd, Haku\", 36],\n [\"her 2 year old lab\", 24],\n [\"he is 1 year and 6 months\", 18],\n [\"five years old\", 60],\n ];\n for (const [text, months] of cases) eq(D.ageInMonths(text), months, `\"${text}\"`);\n return scoped(cases.length, \"ages in years\");\n});\n\nt(\"N2 weeks and months read correctly and in the right unit\", () => {\n const cases = [\n [\"her 6-week-old Yorkie Poo\", 1.4],\n [\"his 7-8 month old German shepherd mix\", 7],\n [\"about 7 months old\", 7],\n [\"a 10 week old puppy\", 2.3],\n [\"12 weeks old\", 2.8],\n ];\n for (const [text, months] of cases) eq(D.ageInMonths(text), months, `\"${text}\"`);\n return scoped(cases.length, \"ages\");\n});\n\nt(\"N3 no age means null, never a guess and never zero\", () => {\n for (const text of [\"no age here at all\", \"\", \"she has a lovely spaniel\", \"call me back\"]) {\n eq(D.ageInMonths(text), null, `\"${text}\" produced an age from nothing`);\n }\n return scoped(4, \"texts with no age\");\n});\n\nt(\"N4 an age is spoken the way a person would say it\", () => {\n eq(D.sayAge(1.4), \"6 weeks old\");\n eq(D.sayAge(0.23), \"1 week old\");\n eq(D.sayAge(7), \"7 months old\");\n eq(D.sayAge(36), \"3 years old\");\n ok(!/\\d+\\.\\d/.test(D.sayAge(1.4)), \"a decimal month reached the words\");\n return scoped(5, \"renderings\");\n});\n\nheader(\"DECIDING\");\n\nt(\"N5 the three real false positives are all rejected, each for its own reason\", () => {\n const ken = D.classify(\"a\", \"Ken\", \"Ken Anderson was looking to purchase a puppy. He inquired whether The Dogs Spot GA offered puppies for sale. The agent clarified that they do not sell.\");\n eq(ken.confidence, \"no\", `Ken: ${ken.reason}`);\n ok(/buy a puppy/.test(ken.reason), `Ken rejected for the wrong reason: ${ken.reason}`);\n\n const jasmine = D.classify(\"b\", \"Jasmine\", \"Jasmine Campbell reached out to discuss her mixed-breed dog, Charlie, who is 3 years and 4 months old.\");\n eq(jasmine.confidence, \"no\", `Jasmine: ${jasmine.reason}`);\n ok(/3 years old/.test(jasmine.reason), `Jasmine rejected for the wrong reason: ${jasmine.reason}`);\n\n const evelyn = D.classify(\"c\", \"Evelyn\", \"Evelyn Carter was seeking assistance in finding good homes for her older dogs, as she needs to downsize her pack to just Coco and her new puppy.\");\n eq(evelyn.confidence, \"no\", `Evelyn: ${evelyn.reason}`);\n ok(/rehoming/.test(evelyn.reason), `Evelyn rejected for the wrong reason: ${evelyn.reason}`);\n\n // EACH RULE ON ITS OWN. Ken's sentence trips two of the buy-related rules at once, so deleting\n // either one leaves him correctly rejected by the other and a test built only on him stays\n // green while a real guarantee is gone. Found by a negative control, which removed one rule and\n // could not make anything go red. This case trips exactly one.\n const soleBuyer = D.classify(\"d\", \"Someone\", \"She was hoping to buy a puppy from a breeder nearby and asked if we knew of any.\");\n eq(soleBuyer.confidence, \"no\", `a plain buyer: ${soleBuyer.reason}`);\n ok(/buy a puppy/.test(soleBuyer.reason), `wrong reason: ${soleBuyer.reason}`);\n return scoped(4, \"real false positives, each rejected on its own grounds\");\n});\n\nt(\"N6 the obvious yeses are clear, not merely probable\", () => {\n const cases = [\n \"Mrsqueen Chinatoyou was seeking assistance related to her 6-week-old Yorkie Poo.\",\n \"She has a new puppy, 10 weeks old, and wants help with biting.\",\n \"Wants training for her 4 month old puppy.\",\n ];\n for (const c of cases) {\n const v = D.classify(\"x\", \"x\", c);\n eq(v.confidence, \"clear\", `\"${c.slice(0, 50)}\" came back ${v.confidence}: ${v.reason}`);\n }\n return scoped(cases.length, \"clear cases\");\n});\n\nt(\"N7 a guess is labelled a guess and says what is missing\", () => {\n const noAge = D.classify(\"x\", \"x\", \"Dakota Brown was seeking in-person training for her two puppies, Lucky and Smokey.\");\n eq(noAge.confidence, \"probable\");\n ok(/no age is written down/.test(noAge.reason), `does not say what is missing: ${noAge.reason}`);\n const noWord = D.classify(\"x\", \"x\", \"his 7-8 month old German shepherd mix\");\n eq(noWord.confidence, \"probable\");\n ok(/the word puppy is not used/.test(noWord.reason), `does not say what is missing: ${noWord.reason}`);\n return scoped(2, \"hedged cases\");\n});\n\nt(\"N8 an empty record is 'unclear', never 'no'\", () => {\n // \"No\" means we looked and it is not a puppy. \"Unclear\" means there was nothing to look at.\n // Collapsing the two would quietly hide half the contact base behind a confident answer.\n for (const empty of [\"\", \" \", null, undefined]) {\n const v = D.classify(\"x\", \"x\", empty);\n eq(v.confidence, \"unclear\", `${JSON.stringify(empty)} came back ${v.confidence}`);\n ok(/nothing written down/.test(v.reason), v.reason);\n }\n return scoped(4, \"empty records\");\n});\n\nt(\"N9 every verdict explains itself in a sentence a person could act on\", () => {\n const texts = [\n \"purchase a puppy\", \"3 years and 4 months old\", \"6-week-old Yorkie\", \"two puppies\",\n \"7 month old shepherd\", \"\", \"wants boarding for next weekend\", \"rehoming her older dogs\",\n ];\n for (const text of texts) {\n const v = D.classify(\"x\", \"Someone\", text);\n ok(v.reason && v.reason.length > 25, `bare reason for \"${text}\": ${v.reason}`);\n ok(/[.!]$/.test(v.reason), `reason is not a sentence: ${v.reason}`);\n ok(!/\\bnull\\b|\\bundefined\\b|NaN/.test(v.reason), `a stray value reached the reason: ${v.reason}`);\n ok(!/regex|classifier|confidence|boolean|field/i.test(v.reason), `jargon in the reason: ${v.reason}`);\n }\n return scoped(texts.length * 4, \"assertions\");\n});\n\nheader(\"REPORTING ON ITSELF\");\n\nt(\"N10 the summary counts add up and the sentence is generated from them\", () => {\n const vs = [\n D.classify(\"1\", \"a\", \"6 week old puppy\"),\n D.classify(\"2\", \"b\", \"two puppies\"),\n D.classify(\"3\", \"c\", \"\"),\n D.classify(\"4\", \"d\", \"3 year old lab\"),\n ];\n const s = D.summarise(vs, 4);\n eq(s.clear + s.probable + s.unclear + s.no, 4, \"the buckets do not add up to what was scanned\");\n eq(s.scanned, 4);\n const line = D.detectSentence(s);\n ok(line.includes(`${s.clear} are clearly`), \"the sentence does not carry the count it describes\");\n ok(/Nothing has been tagged/.test(line), \"the sentence does not say that nothing was done\");\n return scoped(vs.length, \"verdicts\");\n});\n\nt(\"N11 it admits when it read nothing rather than reporting all clear\", () => {\n const none = D.detectSentence(D.summarise([], 0));\n ok(/nothing to report/.test(none), `an empty scan reads as a result: ${none}`);\n ok(!/0 are clearly/.test(none), \"an empty scan renders as a confident zero\");\n return scoped(2, \"assertions\");\n});\n\nt(\"N12 the blind spot is in the output, not in a footnote\", () => {\n const vs = [D.classify(\"1\", \"a\", \"6 week old puppy\"), D.classify(\"2\", \"b\", \"\"), D.classify(\"3\", \"c\", \"\")];\n const line = D.detectSentence(D.summarise(vs, 3));\n ok(/2 of them have nothing written down/.test(line), `does not surface the unjudgeable: ${line}`);\n return scoped(3, \"verdicts\");\n});\n\nheader(\"IT CANNOT TAG ANYBODY, AND THAT IS STRUCTURAL\");\n\nt(\"N13 the classifier has no way to reach the CRM at all\", () => {\n // Not a promise in a comment: the file has no fetch, no client and no write in it, so there is\n // no path from \"we think this person is a puppy inquiry\" to \"this person has been tagged\"\n // without somebody adding one. That edit would show up here.\n const src = codeOnly(readFileSync(new URL(\"../engine/puppy-detect.ts\", import.meta.url), \"utf8\"));\n const forbidden = [\n [/\\bfetch\\s*\\(/, \"a fetch call\"],\n [/\\bXMLHttpRequest\\b/, \"an XHR\"],\n [/\\baddTag\\b/, \"a call to addTag\"],\n [/method:\\s*[\"'`]POST[\"'`]/i, \"a POST\"],\n [/method:\\s*[\"'`]PUT[\"'`]/i, \"a PUT\"],\n [/method:\\s*[\"'`]DELETE[\"'`]/i, \"a DELETE\"],\n [/leadconnectorhq|services\\.lead/i, \"the CRM's address\"],\n [/\\bsetJSON\\b|\\bblob\\b/, \"a write to storage\"],\n ];\n const found = forbidden.filter(([re]) => re.test(src)).map(([, what]) => what);\n eq(found, [], \"the classifier has grown the ability to change something\");\n ok(src.length > 2000, \"the source read as nearly empty, so this check inspected nothing\");\n return scoped(forbidden.length, \"ways to reach the CRM, none present\");\n});\n\nt(\"N14 the dry scan says outright that it applied nothing\", () => {\n const s = D.dryScan([{ id: \"1\", contactName: \"a\", customFields: [{ id: D.FIELD_INQUIRY_SUMMARY, value: \"6 week old puppy\" }] }], \"2026-08-05T05:00:00.000Z\");\n eq(s.applied, false, \"a scan came back claiming it applied something\");\n eq(s.clearIds, [\"1\"]);\n eq(s.summary.scanned, 1);\n ok(s.at === \"2026-08-05T05:00:00.000Z\", \"the scan does not carry when it ran\");\n return scoped(4, \"assertions\");\n});\n\nt(\"N15 it carries ids only, never a name or anything the person wrote\", () => {\n // What gets written down every hour should be the minimum that makes the count checkable.\n const s = D.dryScan([{ id: \"abc\", contactName: \"Jane Doe\", customFields: [{ id: D.FIELD_INQUIRY_SUMMARY, value: \"her 8 week old puppy Rex\" }] }], \"t\");\n const blob = JSON.stringify(s);\n ok(!/Jane Doe/.test(blob), \"a name is being stored\");\n ok(!/Rex/.test(blob), \"a dog's name is being stored\");\n ok(!/8 week old/.test(blob), \"what somebody wrote is being stored\");\n ok(/abc/.test(blob), \"the id is missing, so the count cannot be checked against anything\");\n return scoped(4, \"assertions\");\n});\n\nt(\"N16 it reads the real shape the CRM hands back, and shrugs at anything else\", () => {\n eq(D.inquiryText({ customFields: [{ id: D.FIELD_INQUIRY_SUMMARY, value: \"hello\" }] }), \"hello\");\n eq(D.inquiryText({ customFields: [{ id: D.FIELD_TRAINING_GOAL, value: \"stop biting\" }] }), \"stop biting\");\n for (const junk of [null, undefined, {}, { customFields: null }, { customFields: \"nope\" }, 42]) {\n eq(D.inquiryText(junk), \"\", `${JSON.stringify(junk)} produced text from nothing`);\n }\n eq(D.classifyContacts(\"not an array\"), []);\n eq(D.classifyContacts([null, {}, { id: 5 }]), [], \"a contact with no usable id was classified anyway\");\n return scoped(10, \"shapes\");\n});\n\nt(\"N17 a dry pass that stopped running says so instead of showing old numbers as current\", () => {\n const now = Date.parse(\"2026-08-05T05:00:00Z\");\n const at = (h) => new Date(now - h * 3_600_000).toISOString();\n eq(D.scanAgeNote(at(0), now), null, \"a fresh reading is being apologised for\");\n eq(D.scanAgeNote(at(5), now), null, \"within one missed turn is not worth a note\");\n ok(/7 hours ago/.test(D.scanAgeNote(at(7), now) ?? \"\"), \"a stale reading passes as current\");\n ok(/3 days ago/.test(D.scanAgeNote(at(80), now) ?? \"\"), \"a dead scan passes as merely late\");\n ok(/stopped being kept up/.test(D.scanAgeNote(at(80), now) ?? \"\"), \"a dead scan does not say it is dead\");\n eq(D.scanAgeNote(null, now), null, \"a missing timestamp invents an age\");\n eq(D.scanAgeNote(\"not a date\", now), null, \"an unreadable timestamp invents an age\");\n eq(D.scanAgeNote(\"2027-01-01T00:00:00Z\", now), null, \"a future timestamp produced a negative age\");\n return scoped(8, \"assertions\");\n});\n// ---------------------------------------------------------------- the send guard (v1.7, 6 Aug)\n// WHY HERE: this file already owns the \"structurally cannot\" genre (D-N13 above proves the\n// detector cannot reach the CRM). The same discipline now covers the SENDERS: in practice mode\n// they refuse everyone except the sanctioned dummy, inside the function itself, so a future\n// enrollment bug upstream cannot text a real person.\nimport { readFileSync as _rf } from \"node:fs\";\nimport { codeOnly as _co } from \"./_harness.mjs\";\nconst _engineSrc = _co(_rf(new URL(\"../engine/puppy_path_v1.1.ts\", import.meta.url), \"utf8\"));\nt(\"G1 both senders open by asserting the send is allowed\", () => {\n const smsBody = _engineSrc.slice(_engineSrc.indexOf(\"async function sendSms\"), _engineSrc.indexOf(\"async function sendSms\") + 300);\n const emailBody = _engineSrc.slice(_engineSrc.indexOf(\"async function sendEmail\"), _engineSrc.indexOf(\"async function sendEmail\") + 300);\n ok(/assertSendAllowed\$contactId, \"sms\"\$/.test(smsBody), \"sendSms does not call the guard first\");\n ok(/assertSendAllowed\$contactId, \"email\"\$/.test(emailBody), \"sendEmail does not call the guard first\");\n return scoped(2, \"senders\");\n});\nt(\"G2 the guard fails closed and names practice mode\", () => {\n const g = _engineSrc.slice(_engineSrc.indexOf(\"function assertSendAllowed\"), _engineSrc.indexOf(\"function assertSendAllowed\") + 400);\n ok(/TEST_MODE && contactId !== SANCTIONED_TEST_CONTACT/.test(g), \"guard does not compare against the sanctioned contact\");\n ok(/throw new Error/.test(g), \"guard does not throw\");\n ok(/SANCTIONED_TEST_CONTACT: string \\| null = null/.test(_engineSrc), \"tracker does not start null, so it cannot fail closed\");\n return scoped(3, \"guard properties\");\n});\n\ndone();\n\n\n=====FILE tests/facts.test.mjs =====\n// ONE SOURCE OF TRUTH — the layer that killed prose/data drift.\n// Every case is a real defect that shipped: four Square numbers all wrong, a bucket that was 100%\n// phone calls and printed as a shrug, and a window-less count that said \"all 192\" under a bar of 20.\nimport * as F from \"../build/facts.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"facts\");\n\nt(\"F1 a payment logged many times counts once, not once per retry\", () => {\n // the bridge re-logs on retry: 87 rows collapse to 40 payments. Summing rows gives $56,369.97\n // for a backlog whose true value is $28,035.99. That is double counting, not a bigger truth.\n const b = F.squareBacklog([\n { kind: \"NO-MATCH\", note: \"payment AAA\", amount: 1000, hadCustomerId: false },\n { kind: \"NO-MATCH\", note: \"payment AAA\", amount: 1000, hadCustomerId: false },\n { kind: \"NO-MATCH\", note: \"payment AAA\", amount: 1000, hadCustomerId: false },\n { kind: \"NO-MATCH\", note: \"payment BBB\", amount: 250, hadCustomerId: true },\n ]);\n eq(b.payments, 2); eq(b.total, 1250, \"row-sum double counting is back\");\n eq(b.withTrail, 1); eq(b.noTrail, 1); eq(b.withTrailTotal, 250); eq(b.noTrailTotal, 1000);\n return \"4 rows -> 2 payments\";\n});\nt(\"F2 a trail on ANY row for a payment makes that payment traceable\", () => {\n const b = F.squareBacklog([\n { kind: \"NO-MATCH\", note: \"payment X\", amount: 40, hadCustomerId: false, hadEmail: false },\n { kind: \"NO-MATCH\", note: \"payment X\", amount: 40, hadCustomerId: true },\n ]);\n eq(b.withTrail, 1, \"a later row carrying an id did not upgrade the payment\"); eq(b.noTrail, 0);\n return \"2 rows\";\n});\nt(\"F3 non-NO-MATCH rows and unparseable notes are excluded\", () => {\n const b = F.squareBacklog([\n { kind: \"PAYMENT\", note: \"payment OK\", amount: 999 },\n { kind: \"NO-MATCH\", note: \"no id here\", amount: 500 },\n { kind: \"NO-MATCH\", note: \"payment Z\", amount: 10 },\n ]);\n eq(b.payments, 1); eq(b.total, 10);\n return \"3 rows filtered to 1\";\n});\nt(\"F4 an unreadable journal yields null, never a confident zero\", () => {\n for (const junk of [null, undefined, \"nope\", 42, {}]) eq(F.squareBacklog(junk), null, `garbage ${JSON.stringify(junk)}`);\n ok(/could not read the payment records/.test(F.squareSentence(null)));\n ok(!/\\$0/.test(F.squareSentence(null)), \"a null backlog rendered a dollar zero\");\n return scoped(5, \"garbage inputs\");\n});\nt(\"F5 the sentence is GENERATED from the values, so it cannot describe different ones\", () => {\n const b = F.squareBacklog([\n { kind: \"NO-MATCH\", note: \"payment A\", amount: 1500.5, hadCustomerId: true },\n { kind: \"NO-MATCH\", note: \"payment B\", amount: 2.5, hadCustomerId: false },\n ]);\n const s = F.squareSentence(b);\n ok(s.includes(\"2 counter sales\"), \"count not from the value\");\n ok(s.includes(\"$1,503.00\"), `total not from the value: ${s}`);\n ok(s.includes(\"$1,500.50\") && s.includes(\"$2.50\"), \"the split is not stated\");\n ok(!/35 counter sales|\\$23,463\\.99/.test(s), \"the old typed figures are back\");\n return scoped(4, \"assertions\");\n});\nt(\"F6 the money reconciles: split adds to total, counts add to payments\", () => {\n const b = F.squareBacklog([\n { kind: \"NO-MATCH\", note: \"payment A\", amount: 100, hadEmail: true },\n { kind: \"NO-MATCH\", note: \"payment B\", amount: 900, hadEmail: false },\n ]);\n eq(b.withTrailTotal + b.noTrailTotal, b.total); eq(b.withTrail + b.noTrail, b.payments);\n return scoped(2, \"invariants\");\n});\nconst W = { startMs: Date.parse(\"2026-08-01T00:00:00Z\"), endMs: Date.parse(\"2026-08-08T00:00:00Z\") };\nconst inW = (o) => ({ dateAdded: \"2026-08-04T00:00:00Z\", ...o });\nconst outW = (o) => ({ dateAdded: \"2026-06-01T00:00:00Z\", ...o });\nt(\"F7 the 'somewhere else' bucket is explained, not shrugged at\", () => {\n const x = F.otherBucketExplanation([\n inW({ source: \"phone call\", attribution: { medium: \"other\" } }),\n inW({ source: \"phone call\", attribution: { medium: \"other\" } }),\n inW({ source: null, attribution: { medium: \"facebook\" } }),\n ], W);\n eq(x, { other: 2, phoneInOther: 2 });\n const s = F.otherBucketSentence(x);\n ok(/all 2 of them are logged in your CRM as phone calls/.test(s), `not explained: ${s}`);\n ok(/They are not unknown, they are your callers/.test(s), \"the conclusion is not drawn\");\n return scoped(3, \"contacts\");\n});\nt(\"F8 the explanation counts the SAME window as the chart above it\", () => {\n // shipped once: no window, so it counted nine weeks and rendered \"all 192\" under a bar of 20\n const cs = [inW({ source: \"phone call\", attribution: { medium: \"other\" } }),\n outW({ source: \"phone call\", attribution: { medium: \"other\" } }),\n outW({ source: \"phone call\", attribution: { medium: \"other\" } })];\n eq(F.otherBucketExplanation(cs, W), { other: 1, phoneInOther: 1 }, \"out-of-window contacts counted\");\n eq(F.otherBucketExplanation(cs, null), null, \"a missing window produced a number anyway\");\n eq(F.otherBucketExplanation([outW({ attribution: { medium: \"other\" } })], W), null, \"empty window produced a number\");\n return scoped(3, \"window cases\");\n});\nt(\"F9 a partial explanation says so; an absent one admits it\", () => {\n ok(/4 of the 10/.test(F.otherBucketSentence({ other: 10, phoneInOther: 4 })));\n ok(!/\\ball 10\\b/.test(F.otherBucketSentence({ other: 10, phoneInOther: 4 })), \"partial claimed as complete\");\n ok(/genuinely cannot place them/.test(F.otherBucketSentence({ other: 5, phoneInOther: 0 })), \"invented a cause\");\n eq(F.otherBucketSentence(null), \"\"); eq(F.otherBucketSentence({ other: 0, phoneInOther: 0 }), \"\");\n return scoped(5, \"cases\");\n});\nt(\"F10 every fact carries where it came from and when it was read\", () => {\n const f = F.fact(7, \"GET /contacts\");\n ok(f.source === \"GET /contacts\", \"no provenance\");\n ok(/^\\d{4}-\\d{2}-\\d{2}T/.test(f.readAt), \"no read timestamp\");\n eq(F.unknownFact(\"GET /x\").value, null, \"an unknown fact is not null\");\n return scoped(3, \"assertions\");\n});\nt(\"F11 the tag sentence counts the WHOLE base, and says so, or says nothing\", () => {\n const zero = F.tagCoverageSentence({ tag: \"nurture - puppy\", tagged: 0, total: 5544 });\n ok(/5,544/.test(zero), \"the denominator is missing, so a reader cannot size the claim\");\n ok(/not a single one/.test(zero), \"a zero is not stated plainly\");\n ok(!/most recent|sample|checked 1,?200/i.test(zero), \"it describes a scan size rather than an answer\");\n const some = F.tagCoverageSentence({ tag: \"nurture - puppy\", tagged: 12, total: 5544 });\n ok(/12 of your 5,544/.test(some), \"a non-zero count is not rendered from the values\");\n ok(/under 1%/.test(some), \"a tiny share rounds to 0% and reads as none\");\n const none = F.tagCoverageSentence(null);\n ok(/could not read/.test(none) && !/\\b0\\b/.test(none), \"a failed read renders as a confident zero\");\n ok(/nothing rather than a zero/.test(F.tagCoverageSentence({ tag: \"x\", tagged: 0, total: 0 })),\n \"an empty account is treated as a real answer\");\n return scoped(7, \"assertions\");\n});\ndone();\n\n",[411],"2f5d7ea4-da72-4b06-9a7a-7efffe380ad9","SOURCE-BUNDLE.part2.txt","15e8a494-9081-11f1-9b4f-1607ee4eb77e",760,["D",1786482176878],50,"THE DOGS SPOT — SOURCE BUNDLE (part 2 of 18)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (2 of 65 files)\n\n\n\n================================================================================================\n=====FILE tests/dashboard.test.mjs#1 =====\n// THE DASHBOARD'S PROMISES. v2.0, 5 Aug 2026.\n// Most of this is deliberately hostile, because the page's whole claim is \"always renders something\n// true\". Every D2b case is a real defect a stranger caught, pinned so it cannot return.\nimport * as W from \"../build/worklog.js\";\nimport * as DASH from \"../build/dashboard.js\";\nimport * as H from \"../build/holiday-deposits.js\";\nimport * as DEC from \"../build/decisions.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"dashboard\");\nconst MONTHS_D = [\"Jan\", \"Feb\", \"Mar\", \"Apr\", \"May\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Oct\", \"Nov\", \"Dec\"];\nconst prettyDate = (iso) => {\n const m = /^(\\d{4})-(\\d{2})-(\\d{2})/.exec(iso || \"\");\n return m ? `${MONTHS_D[Number(m[2]) - 1] ?? m[2]} ${Number(m[3])}` : iso;\n};\n// EVERY structural assertion below reads `src`, and `src` is the file with its comments removed.\n// A `[was: ...]` note that names the old call is not evidence that the old call is gone.\n// [was: the raw file. On 5 Aug the check `observedCadenceMin(wd?.history)` passed on a comment\n// explaining why that call had been removed. The green was real; the guarantee was not.]\nconst rawSrc = readFileSync(new URL(\"../engine/dashboard.ts\", import.meta.url), \"utf8\");\nconst src = codeOnly(rawSrc);\n\nheader(\"THE HOLIDAY DEPOSIT CARD\");\n\n// A real-shaped blob. Every string in it is what the collector actually produces.\nconst DEPBLOB = {\n // RELATIVE TO NOW, deliberately. [was: a hardcoded timestamp, which the stale-list banner\n // (fires past 36 hours of real elapsed time) would have turned red on 8 August with no code\n // change at all — the entire regression net going permanently RED on the wall clock.]\n at: new Date(Date.now() - 60_000).toISOString(), season: 2026,\n windows: [{ name: \"Thanksgiving\", from: \"2026-11-23\", to: \"2026-11-29\" },\n { name: \"Christmas and New Year\", from: \"2026-12-20\", to: \"2027-01-02\" }],\n rows: [\n { contactId: \"a\", name: \"Jeffrey Musselwhite\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Achilles\", \"Ghost\"], dogCount: 2, window: \"Thanksgiving\",\n state: \"seen\", amountSeen: 100, note: \"A card payment for exactly $100.00 is on file on Oct 5, which is the deposit for 2 dogs.\" },\n { contactId: \"b\", name: \"Ann Flu\", day: \"2027-01-01\", until: \"2027-01-01\", dogs: [\"Fluffy\"], dogCount: 1, window: \"Christmas and New Year\",\n state: \"none_seen\", amountSeen: 0, note: \"The deposit on this stay is $50.00 (1 dog at $50) and no card payment is on file around it at all. A deposit paid by Venmo, Zelle, cheque or cash does not reach the card system, so it will not show here.\" },\n { contactId: \"c\", name: \"Reid Fail\", day: \"2026-11-24\", until: \"2026-11-24\", dogs: [], dogCount: 1, window: \"Thanksgiving\",\n state: \"could_not_check\", amountSeen: 0, note: \"We could not read this person's payments just now, so this one is unknown. It is not a finding either way.\" },\n ],\n // GENERATED, not typed. [was: a hardcoded sentence carrying pre-round-6 copy, so D5.4's\n // Venmo/Zelle assertion was satisfied by the fixture rather than by anything the code produces.]\n sentence: H.depositSentence([{ state: \"seen\" }, { state: \"none_seen\" }, { state: \"could_not_check\" }], false),\n feedDead: false, readFailures: 1, calendarsRead: 2, calendarsAsked: 2, pickupsRead: 2, pickupsAsked: 2,\n};\nconst noAgo = () => \"just now\";\n\nt(\"D5.1 a failed read of the list is a reading problem, never a finding about a customer\", () => {\n const h = DASH.depositCard(null, false, noAgo);\n ok(/could not read/i.test(h), \"a failed read does not say so\");\n ok(!/holiday stays are booked|worth checking/i.test(h), \"a failed read produced a list anyway\");\n ok(!/\\bunpaid\\b|owes|has not paid/i.test(h));\n return scoped(3, \"guarantees\");\n});\n\nt(\"D5.2 nothing collected yet says exactly that, and does not read as nobody has paid\", () => {\n const h = DASH.depositCard(null, true, noAgo);\n // [was: /Nothing collected yet/. Under a heading that reads \"Holiday deposits\", the words\n // \"Nothing collected yet\" are a sentence about MONEY — you have taken no deposits — when the\n // fact being reported is about the report: it has not run. Same three words, opposite meaning,\n // and the wrong one is the reassuring-looking zero this whole card exists not to print.]\n ok(/has not run yet/i.test(h), \"the empty state does not say plainly that the check has not run\");\n ok(!/collected/i.test(h), \"the empty state still reads as a statement about money taken\");\n ok(!/\\bunpaid\\b|owes|has not paid|0 holiday/i.test(h));\n return scoped(3, \"guarantees\");\n});\n\nt(\"D5.3 the jobs to do come first and the settled ones last\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n const i = (s) => h.indexOf(s);\n ok(i(\"Ann Flu\") < i(\"Reid Fail\"), \"an unknown row outranks a stay actually worth checking\");\n ok(i(\"Reid Fail\") < i(\"Jeffrey Musselwhite\"), \"a settled row is above one that could not be checked\");\n return scoped(3, \"rows\");\n});\n\nt(\"D5.4 the word unpaid, and every accusation like it, never reaches this card\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n // WIDER THAN IT WAS. [was: /unpaid|owes|has not paid|did not pay|non-payment/, which let the\n // most natural phrasing of the forbidden thing straight through: relabelling a row \"Not paid\"\n // shipped with every suite green.]\n // AND WIDER AGAIN, for the COLLECTIVE form. [was: every alternative named a single person. The\n // natural way to write the forbidden claim about a group names nobody at all: \"Nobody below has\n // paid a deposit.\" That went through untouched, and the dead-feed branch is exactly where\n // somebody would add it, because that branch already talks about everyone at once.]\n // AND WIDER A THIRD TIME, after an adversarial pass wrote 45 accusations that walked straight\n // through version two. The pattern in the misses: this regex had a vocabulary of REFUSAL\n // (\"failed to pay\", \"never paid\") and none of ABSENCE (\"no payment has been received\") or of\n // INVOICING (\"overdue\", \"past due\", \"balance due\", \"delinquent\") — and invoicing is the register\n // somebody reaches for first when they think they are being helpful. Two misses were pure\n // inflection: `owes?` matched \"owe\"/\"owes\" but not \"owed\"/\"owing\"; `hasn.t paid` matched only\n // the third person singular, so \"they haven't paid\" and \"he hadn't paid\" both passed.\n const ACCUSATION = new RegExp([\n /\\bunpaid\\b|\\bow(?:e|es|ed|ing)\\b|\\bnot paid\\b|\\bnever paid\\b|\\b(?:has|have|had)n.t paid\\b/,\n /\\bdid ?n.t pay\\b|\\bfailed to pay\\b|\\brefus\\w* to pay\\b|\\bwon.t pay\\b|\\bdeclined to pay\\b/,\n /non-?payment|\\boutstanding\\b|\\bin arrears\\b|\\bdebt\\b|\\bdelinquent\\b|\\bover-?due\\b|\\bpast due\\b/,\n /\\bbalance due\\b|\\bamount due\\b|\\bin default\\b|\\bbehind on\\b|\\bchas(?:e|ing)\\b|\\$[\\d,.]+\\s+due\\b/,\n // The collective forms: an accusation that names nobody at all.\n /\\b(?:nobody|no-? ?one|none|not one|not a single \\w+)\\b[^.]{0,40}?\\b(?:pa(?:id|ys?)|sent|settled)\\b/,\n // The same claim as a score. \"0 of 3 have paid\" names nobody and accuses everybody.\n /\\b\\d+ of (?:the |your )?\\d+\\b[^.]{0,40}?\\b(?:pa(?:id|ys?)|sent|settled)\\b/,\n // And absence-of-money phrased as a finding rather than as a limit of what we can see.\n /\\bno (?:payment|money|deposit|funds?)\\b[^.]{0,30}?\\b(?:received|come in|arrived)\\b/,\n ].map((r) => r.source).join(\"|\"), \"i\");\n // The only sentences allowed to use this language are the ones that DENY the accusation. They\n // are removed by exact text before scanning, and each is asserted PRESENT, so neither can be\n // quietly deleted to make room for a real one — a scrub whose target has vanished is a scrub\n // that protects nothing while still reading as a safeguard.\n const DISCLAIMER = \"This is a shortlist to look at rather than a list of people who owe you.\";\n const FEED_DENIAL = \"rather than that nobody has paid\";\n const DENIALS = [DISCLAIMER, FEED_DENIAL];\n // NORMALISED BEFORE ANY OF IT IS APPLIED. Round 15 got \"Jeffrey has not\\u00A0paid his deposit.\"\n // past the whole regex with ONE non-breaking space: a JS regex literal space matches U+0020 and\n // nothing else, so a single invisible character defeated every two-word and three-word\n // alternative at once — not paid, past due, balance due, amount due, in default, behind on, the\n // contraction forms. Ten of roughly twenty-five alternatives, invisibly, and it renders\n // identically to a space on Kim's phone. Non-breaking and zero-width characters are folded to\n // ordinary spaces and runs of whitespace collapsed, so the regex sees the sentence a reader sees.\n const flatten = (x) => String(x).replace(/[\\u00A0\\u2007\\u202F\\u2000-\\u200B\\uFEFF]/g, \" \").replace(/\\s+/g, \" \");\n const scrub = (x) => DENIALS.reduce((s, d) => s.split(d).join(\" \"), flatten(x));\n ok(h.includes(DISCLAIMER), \"the card dropped the sentence that says this is not a list of people who owe her money\");\n const deadSentence = H.depositSentence([{ state: \"none_seen\" }, { state: \"none_seen\" }], true);\n ok(deadSentence.includes(FEED_DENIAL), `the dead-feed sentence no longer denies the accusation, so scrubbing it guards nothing: ${deadSentence}`);\n ok(!ACCUSATION.test(scrub(h)), \"the card accuses somebody of not paying\");\n // AND ON GENERATED NOTES, not the hand-typed fixture ones. [was: DEPBLOB's notes are typed\n // strings, so this scanned my own prose rather than anything the code produces. Appending\n // \", so they still owe this one.\" to the already-counted branch reached Kim with the suite\n // green, despite \"owes?\" being in the ban.]\n const st = (day) => ({ contactId: \"c\", day, until: day, dogs: [\"R\"], dogCount: 1, bookedAt: \"2026-11-01 09:00:00\", window: \"W\" });\n const generated = [\n ...H.statusesForCustomer([st(\"2026-11-25\"), st(\"2026-12-22\")], [{ amount: 50, id: \"a\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]),\n H.statusFor(st(\"2026-11-25\"), null),\n H.statusFor(st(\"2026-11-25\"), []),\n H.statusFor(st(\"2026-11-25\"), [{ amount: 355, id: \"b\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]),\n H.statusFor({ ...st(\"2026-11-25\"), bookedAt: null }, []),\n ];\n ok(generated.length >= 5, \"no notes were generated, so this check inspected nothing\");\n for (const g of generated) {\n ok(!ACCUSATION.test(scrub(g.note)), `a generated note accuses somebody: ${g.note}`);\n const card = DASH.depositCard({ ...DEPBLOB, rows: [{ ...DEPBLOB.rows[0], state: g.state, note: g.note }] }, true, noAgo);\n ok(!ACCUSATION.test(scrub(card)), `a generated note accuses somebody once rendered: ${g.note}`);\n }\n\n // AND ACROSS THE CARD'S CONDITIONAL STRINGS, which a single healthy fixture never renders.\n // [was: every card scanned here was a spread of DEPBLOB, which hardcodes 2/2 calendars, 2/2\n // pick-ups, feedDead:false and a name that is not a test record. So FOUR strings were never\n // examined at all — the missed-calendar banner, the pick-up banner, the test-record warning and\n // the dead-feed sentence — and the banned words themselves went through them: \"those deposits\n // are unpaid\", \"those deposits are outstanding\", \"This one has not paid\", \"Nobody below has\n // paid a deposit\". Every combination is rendered now.]\n const testRow = { ...DEPBLOB.rows[0], name: \"help test\", state: \"none_seen\", note: H.statusFor(st(\"2026-11-25\"), []).note };\n const shapes = [];\n for (const calendars of [[2, 2], [1, 2], [0, 2]]) {\n for (const pickups of [[2, 2], [1, 2]]) {\n for (const feedDead of [false, true]) {\n for (const readFailures of [0, 2]) {\n for (const rows of [[testRow], [{ ...testRow, state: \"could_not_check\" }], DEPBLOB.rows, []]) {\n for (const ageMs of [60_000, 5 * 86_400_000]) {\n shapes.push({\n ...DEPBLOB, rows, feedDead, readFailures,\n calendarsRead: calendars[0], calendarsAsked: calendars[1],\n pickupsRead: pickups[0], pickupsAsked: pickups[1],\n at: new Date(Date.now() - ageMs).toISOString(),\n sentence: H.depositSentence(rows.map((r) => ({ state: r.state })), feedDead),\n });\n }\n }\n }\n }\n }\n }\n ok(shapes.length >= 100, `only ${shapes.length} card shapes were built, so this is not a sweep`);\n let renderedDeadFeed = 0;\n for (const shape of shapes) {\n const card = DASH.depositCard(shape, true, (x) => (Date.now() - Date.parse(x) > 86_400_000 ? \"5 days ago\" : \"just now\"));\n if (card.includes(FEED_DENIAL)) renderedDeadFeed++;\n ok(!ACCUSATION.test(scrub(card)),\n `a card accuses somebody: calendars ${shape.calendarsRead}/${shape.calendarsAsked}, pick-ups ${shape.pickupsRead}/${shape.pickupsAsked}, feedDead ${shape.feedDead}, ${shape.rows.length} rows`);\n }\n // The sweep must actually REACH the dead-feed sentence. Building 192 shapes proves nothing about\n // a branch none of them render, and this is the branch the whole widening above is aimed at.\n ok(renderedDeadFeed > 0, \"no card in the sweep rendered the dead-feed sentence, so that branch went unscanned\");\n // And the two states the card can be in besides \"here is a list\".\n for (const card of [DASH.depositCard(null, false, noAgo), DASH.depositCard(null, true, noAgo)]) {\n ok(!ACCUSATION.test(scrub(card)), \"the empty or unreadable card accuses somebody\");\n }\n ok(/Venmo, Zelle or a cheque/i.test(h), \"the card does not say a deposit may have been paid another way\");\n return scoped(shapes.length + generated.length * 2 + 7, \"rendered cards\");\n});\nt(\"D5.5 a customer whose payments could not be read is shown as unknown, not as nothing found\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n ok(/Could not check/.test(h), \"an unreadable customer is not labelled as such\");\n ok(/could not be checked when this ran/i.test(h), \"the count of unknown rows is not stated\");\n return scoped(2, \"guarantees\");\n});\n\nt(\"D5.6 a calendar that did not answer is declared, so the list is not read as complete\", () => {\n const partial = { ...DEPBLOB, calendarsRead: 1, calendarsAsked: 2 };\n ok(/Not the whole picture/.test(DASH.depositCard(partial, true, noAgo)));\n ok(!/Not the whole picture/.test(DASH.depositCard(DEPBLOB, true, noAgo)), \"the warning shows when nothing is missing\");\n return scoped(2, \"cases\");\n});\n\nt(\"D5.7 a customer's name is escaped before it reaches the page\", () => {\n const nasty = { ...DEPBLOB, rows: [{ ...DEPBLOB.rows[0], name: '', note: \"hi\" }] };\n const h = DASH.depositCard(nasty, true, noAgo);\n ok(!/

Diff · v766