[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_356":357,"_358":359},"routes/_app.x.$handle.$name",{"_109":108,"_37":50,"_118":95,"_32":119,"_13":14,"_120":-5,"_11":121,"_122":123,"_124":125,"_126":127,"_128":129,"_26":-5,"_130":131,"_132":133,"_134":30,"_135":136,"_137":64,"_138":-5,"_139":-5,"_140":141},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":88,"_89":90,"_91":92,"_93":30},"version",2,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","6bd5f00a-37ba-470c-9dbe-db626ebc2e5c","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","services/spam.ts","latestPath","fileId","4b87cf5a-47dc-11f1-bd26-42b51c65c3df","name","spam.ts","fileType","script","content","// ============================================================================\n// SpamFilter — cheap regex pre-filter to block obvious junk before the\n// OpenAI call. Catches the easy 80%; will not stop sophisticated spam.\n//\n// Tune SPAM_PATTERNS / BLOCKED_TLDS / DISPOSABLE_DOMAINS from real data.\n// Anything matched: status -> ERROR on the sheet, no LLM call, admin alert.\n// ============================================================================\n\nimport type { IngestRequest } from \"../types.ts\";\n\n/** Patterns checked against `${contact_raw} ${context_metadata}`. */\nconst SPAM_PATTERNS: ReadonlyArray<{ pattern: RegExp; reason: string }> = [\n { pattern: /\\b(viagra|cialis|porn|escort|casino|crypto.*airdrop|nft.*mint)\\b/i, reason: \"spam-keyword\" },\n { pattern: /\\b(seo.?(blast|backlinks?|services?|outreach|expert).{0,40}(cheap|guaranteed|rank))/i, reason: \"seo-blast\" },\n { pattern: /\\b(make.{0,10}money.{0,20}(fast|home|online)|earn.{0,10}\\$\\d{3,}|\\d+x.{0,10}returns?)\\b/i, reason: \"mlm\" },\n { pattern: /(https?:\\/\\/\\S+\\s*){4,}/i, reason: \"link-spam\" },\n { pattern: /(.)\\1{12,}/, reason: \"repeat-flood\" }, // aaaaaaaaaaaaa…\n];\n\n/** Email TLDs that almost never produce real B2B leads. */\nconst BLOCKED_TLDS: ReadonlySet = new Set([\n \".ru\", \".cn\", \".tk\", \".ml\", \".ga\", \".cf\", \".gq\",\n]);\n\n/** Common disposable-email providers. */\nconst DISPOSABLE_DOMAINS: ReadonlySet = new Set([\n \"mailinator.com\", \"10minutemail.com\", \"guerrillamail.com\", \"tempmail.com\",\n \"trashmail.com\", \"yopmail.com\", \"throwaway.email\", \"fakeinbox.com\",\n \"sharklasers.com\", \"getnada.com\", \"dispostable.com\",\n]);\n\nexport interface SpamVerdict {\n spam: boolean;\n reason?: string;\n}\n\n/** Pure function — no side effects. Apply at the very top of the hot path. */\nexport function classify(req: IngestRequest): SpamVerdict {\n const contact = (req.contact_raw ?? \"\").trim().toLowerCase();\n const context = (req.context_metadata ?? \"\").trim();\n\n // 1) Empty / structurally invalid\n if (contact.length === 0) return { spam: true, reason: \"empty-contact\" };\n if (contact.length > 320) return { spam: true, reason: \"contact-too-long\" };\n if (context.length > 4000) return { spam: true, reason: \"context-too-long\" };\n\n // 2) Email-shaped contacts: domain checks\n if (contact.includes(\"@\")) {\n const domain = contact.split(\"@\")[1] ?? \"\";\n if (DISPOSABLE_DOMAINS.has(domain)) return { spam: true, reason: \"disposable-email\" };\n for (const tld of BLOCKED_TLDS) {\n if (domain.endsWith(tld)) return { spam: true, reason: `blocked-tld:${tld}` };\n }\n }\n\n // 3) Keyword / shape patterns over the combined text\n const haystack = `${contact} ${context}`;\n for (const { pattern, reason } of SPAM_PATTERNS) {\n if (pattern.test(haystack)) return { spam: true, reason };\n }\n\n return { spam: false };\n}\n","createdAt",["D",1777914691057],"branchVersion","branchId","3ec01ac0-47dc-11f1-bb94-42b51c65c3df","id","3eb91040-47dc-11f1-bb94-42b51c65c3df","omni-revenue-orchestrator",["D",1777914669570],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Event-driven CRM triage: Sheets + GPT-4o + Telegram C&C cards","imageUrl","7c9c86e1-fe9c-473d-9022-88548bd27a5a","pinnedFileId","019df3f8-ea52-731e-a6b6-d0415055f399","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019df3df-cdd2-72eb-9f42-94180885e35d","tursoName","3eb9104047dc11f1bb9442b51c65c3df","tursoHostname","3eb9104047dc11f1bb9442b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789506649022],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_109":108,"_117":113},"org",{"_109":108,"_110":111,"_112":113,"_19":60,"_114":115,"_116":30},"branch",{"_13":94,"_37":95,"_48":47,"_96":49,"_97":98,"_99":100,"_101":55,"_102":103,"_104":105,"_106":50,"_107":108},"isOwned",6,"main","projectId","forkedBranchId","f9455366-47d6-11f1-aeba-42b51c65c3df","forkedBranchVersion",18,"forkedProjectPrivacy","forkedProjectId","f93f9bba-47d6-11f1-aeba-42b51c65c3df","forkedProjectOrgId","019df3d5-5949-77d9-81ed-9383f66ffa24","projectName","userHandle","ilancohen151","handle","displayName","אילן כהן","avatar","https://lh3.googleusercontent.com/a/ACg8ocKair0LtxORBChLm___TzaXV5NfPUB_7hjJ9Ua5Ug7QvqyCWA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_37":50,"_43":351,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":352,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":353,"_89":354,"_91":355,"_93":30},"tree",[213,215,222,230,231,232,233],"files",[213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233],"counts",{"_203":68,"_204":163,"_205":68,"_206":207,"_208":209},"contents",[152,153,154,155,156,157,158],"upstreamProject",{"_48":103,"_37":50,"_57":58,"_59":-5,"_54":55,"_87":150},"upstreamBranch",{"_48":98,"_43":142,"_143":144,"_37":95,"_96":103,"_13":100,"_97":145,"_99":146,"_147":148,"_52":-5,"_93":30,"_54":55,"_107":149,"_69":105,"_106":50},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1777912405533],"updatedAt",["D",1777912670090],"961078ea-f528-11ef-aa68-569c3dd06744",88,"lockfileKey","1785171695560-esm.town_v_harantiti_omni-revenue-orchestrator@18-main","harantiti",{"_109":149,"_117":151},"https://lh3.googleusercontent.com/a/ACg8ocKAVWQwZW0HDu2P0iG-bOFSeBKPnWn5bXjW3O7e58TlwaVw=s96-c",{"_48":198,"_37":199,"_35":200,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":201,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_32":202},{"_48":193,"_37":194,"_35":195,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":196,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_32":197},{"_48":187,"_37":188,"_35":189,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":190,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_32":192},{"_48":181,"_37":182,"_35":183,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":184,"_13":68,"_39":26,"_41":185,"_29":30,"_167":-5,"_32":186},{"_48":175,"_37":176,"_35":177,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":178,"_13":68,"_39":40,"_41":179,"_29":30,"_167":-5,"_32":180},{"_48":169,"_37":170,"_35":62,"_162":-5,"_46":47,"_45":163,"_164":30,"_43":171,"_13":68,"_39":172,"_41":173,"_29":30,"_167":-5,"_32":174},{"_48":159,"_37":160,"_35":161,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":165,"_13":68,"_39":40,"_41":166,"_29":30,"_167":-5,"_32":168},"3ecae9c8-47dc-11f1-bb94-42b51c65c3df","types.ts","019df3f8-ea52-731e-a6b6-d4dea1b86a39","parentId",1,"latest",["D",1777914669570],"// ============================================================================\n// OMNI-REVENUE ORCHESTRATOR — DOMAIN TYPES\n// Strict state machine + row layout per system spec.\n// ============================================================================\n\n/**\n * Lead lifecycle state machine.\n * Transitions are strictly forward (except 5:ERROR which can be set from any).\n */\nexport const STATUS = {\n INGESTED: 0,\n ENRICHED: 1,\n DRAFTED: 2,\n REVIEWED: 3,\n DISPATCHED: 4,\n ERROR: 5,\n} as const;\n\nexport type StatusId = (typeof STATUS)[keyof typeof STATUS];\n\nexport const STATUS_LABEL: Record = {\n 0: \"INGESTED\",\n 1: \"ENRICHED\",\n 2: \"DRAFTED\",\n 3: \"REVIEWED\",\n 4: \"DISPATCHED\",\n 5: \"ERROR\",\n};\n\n/**\n * Sheet column layout (A..H), 0-indexed.\n * Mirrored as row order in IngestionEngine.appendRow.\n */\nexport const COL = {\n TIMESTAMP: 0, // A\n SOURCE: 1, // B\n STATUS_ID: 2, // C\n UID_HASH: 3, // D\n CONTACT_RAW: 4, // E\n CONTEXT_METADATA: 5, // F\n AI_PAYLOAD: 6, // G\n PRIORITY_SCORE: 7, // H\n} as const;\n\nexport interface Lead {\n rowIndex: number; // sheet row number (1-indexed; header is row 1)\n timestamp: string; // ISO\n source: string; // 'web', 'email', 'manual', etc.\n status_id: StatusId;\n uid_hash: string; // SHA-256 of `${contact_raw}|${source}`\n contact_raw: string; // email | phone | handle\n context_metadata: string; // free-text intent / niche keywords\n ai_payload: string; // generated draft (JSON or text)\n priority_score: number; // 0–100\n}\n\nexport interface IngestRequest {\n source: string;\n contact_raw: string;\n context_metadata?: string;\n priority_score?: number;\n}\n\n/** Parsed ai_payload contract. Stored serialized in column G. */\nexport interface AIPayload {\n draft: string; // outbound message body\n niche: string; // detected niche tag\n cta_link: string; // injected expert link\n rationale: string; // why this draft works\n generated_at: string; // ISO\n}\n\n/** Telegram callback action protocol: `${action}:${rowIndex}` */\nexport type CallbackAction = \"EXECUTE\" | \"REGEN\" | \"VIEW\";\n","label",[160],"3ecac0f6-47dc-11f1-bb94-42b51c65c3df","index.ts",["D",1777914669570],"http","// ============================================================================\n// OMNI-REVENUE ORCHESTRATOR — HTTP entrypoint.\n// Hono router + global error-boundary + Telegram webhook handler.\n// ============================================================================\n\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\n\nimport * as sheets from \"./services/sheets.ts\";\nimport * as pipeline from \"./services/pipeline.ts\";\nimport * as tg from \"./services/telegram.ts\";\nimport { serviceAccountEmail } from \"./services/auth.ts\";\nimport { TELEGRAM_ADMIN_CHAT_ID } from \"./config.ts\";\nimport { STATUS, STATUS_LABEL, type IngestRequest } from \"./types.ts\";\n\nconst app = new Hono();\n\n// ---------------------------------------------------------------------------\n// Static / UI\n// ---------------------------------------------------------------------------\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---------------------------------------------------------------------------\n// Dashboard data feed\n// ---------------------------------------------------------------------------\napp.get(\"/api/leads\", async (c) => {\n const leads = await sheets.getRecentLeads(50);\n return c.json({\n leads,\n statusLabels: STATUS_LABEL,\n });\n});\n\n// ---------------------------------------------------------------------------\n// IngestionEngine\n// ---------------------------------------------------------------------------\napp.post(\"/api/lead\", async (c) => {\n const body = await c.req.json().catch(() => null) as IngestRequest | null;\n if (!body || typeof body.contact_raw !== \"string\" || typeof body.source !== \"string\") {\n return c.json({ error: \"contact_raw and source are required strings\" }, 400);\n }\n\n const { lead, deduped } = await pipeline.ingest(body);\n if (!lead) {\n return c.json({ error: \"ingest succeeded but row could not be re-fetched\" }, 502);\n }\n return c.json({\n ok: true,\n deduped,\n rowIndex: lead.rowIndex,\n uid_hash: lead.uid_hash,\n status_id: lead.status_id,\n }, deduped ? 200 : 201);\n});\n\n// ---------------------------------------------------------------------------\n// Telegram webhook — callback_query dispatcher.\n// Validates X-Telegram-Bot-Api-Secret-Token header.\n// ---------------------------------------------------------------------------\napp.post(\"/api/telegram\", async (c) => {\n const sentSecret = c.req.header(\"x-telegram-bot-api-secret-token\");\n if (sentSecret !== tg.webhookSecret()) {\n return c.json({ error: \"unauthorized\" }, 401);\n }\n\n const update = await c.req.json().catch(() => null) as\n | { callback_query?: TgCallback; message?: TgMessage }\n | null;\n if (!update) return c.json({ ok: true });\n\n // Only the configured admin can issue C&C commands.\n if (update.callback_query) {\n const cb = update.callback_query;\n if (cb.from?.id !== TELEGRAM_ADMIN_CHAT_ID) {\n await tg.answerCallback(cb.id, \"unauthorized\");\n return c.json({ ok: true });\n }\n await handleCallback(cb);\n }\n\n return c.json({ ok: true });\n});\n\ninterface TgCallback {\n id: string;\n data?: string;\n from?: { id: number };\n message?: { chat: { id: number }; message_id: number };\n}\ninterface TgMessage {\n from?: { id: number };\n chat?: { id: number };\n text?: string;\n}\n\nasync function handleCallback(cb: TgCallback): Promise {\n const parsed = cb.data ? tg.parseCallback(cb.data) : null;\n if (!parsed || !cb.message) {\n await tg.answerCallback(cb.id, \"bad payload\");\n return;\n }\n\n const { action, rowIndex } = parsed;\n const chatId = cb.message.chat.id;\n const msgId = cb.message.message_id;\n\n const lead = await sheets.getLeadByRow(rowIndex);\n if (!lead) {\n await tg.answerCallback(cb.id, \"row not found\");\n return;\n }\n\n switch (action) {\n case \"VIEW\": {\n const dump = [\n `*Row #${lead.rowIndex} — RAW*`,\n \"```\",\n JSON.stringify(lead, null, 2).slice(0, 3500),\n \"```\",\n ].join(\"\\n\");\n await tg.alertAdmin(dump);\n await tg.answerCallback(cb.id, \"raw posted\");\n return;\n }\n case \"REGEN\": {\n await tg.answerCallback(cb.id, \"re-generating…\");\n // Force regen by resetting status below DRAFTED.\n await sheets.updateStatus(lead.rowIndex, STATUS.INGESTED);\n const refreshed = { ...lead, status_id: STATUS.INGESTED };\n const drafted = await pipeline.enrichAndDraft(refreshed);\n await tg.editCard(\n chatId,\n msgId,\n `🔄 *Re-generated #${lead.rowIndex}*\\nNew draft sent below.`,\n false,\n );\n await pipeline.presentForReview(drafted);\n return;\n }\n case \"EXECUTE\": {\n await sheets.updateStatus(lead.rowIndex, STATUS.REVIEWED);\n await pipeline.dispatch(lead.rowIndex);\n await tg.editCard(\n chatId,\n msgId,\n `✅ *Dispatched #${lead.rowIndex}* — \\`${lead.contact_raw}\\``,\n false,\n );\n await tg.answerCallback(cb.id, \"dispatched\");\n return;\n }\n }\n}\n\n// ---------------------------------------------------------------------------\n// Admin / init\n// ---------------------------------------------------------------------------\napp.get(\"/admin/init\", async (c) => {\n const url = new URL(c.req.url);\n const webhookUrl = `${url.origin}/api/telegram`;\n\n const checks: Record = {};\n\n // Service Account handshake\n try {\n checks.service_account = serviceAccountEmail();\n const sample = await sheets.getRecentLeads(1);\n checks.sheet_access = \"ok\";\n checks.sample_row_count = sample.length;\n } catch (e) {\n checks.service_account_error = (e as Error).message;\n }\n\n // Telegram webhook\n try {\n await tg.setWebhook(webhookUrl, tg.webhookSecret());\n checks.telegram_webhook = webhookUrl;\n } catch (e) {\n checks.telegram_webhook_error = (e as Error).message;\n }\n\n return c.json({ ok: true, checks });\n});\n\n// ---------------------------------------------------------------------------\n// Global error-boundary — 429 (OpenAI) and 403 (Google) get Telegram alerts.\n// ---------------------------------------------------------------------------\napp.onError(async (err, c) => {\n const e = err as Error & { status?: number; provider?: string };\n const status = e.status ?? 500;\n const provider = e.provider ?? \"unknown\";\n\n // Fire-and-forget alert for the two spec-mandated codes.\n if (status === 429 && provider === \"openai\") {\n tg.alertAdmin(`OpenAI 429 (rate-limit) — ${e.message}`).catch(() => {});\n } else if (status === 403 && provider === \"google\") {\n tg.alertAdmin(`Google 403 (auth/quota) — ${e.message}`).catch(() => {});\n } else if (status >= 500) {\n tg.alertAdmin(`Server ${status} — ${e.message}`).catch(() => {});\n }\n\n console.error(\"[onError]\", provider, status, e.message);\n return c.json({ error: e.message, status, provider }, status >= 400 && status < 600 ? status as 500 : 500);\n});\n\nexport default app.fetch;\n",[170],"3ecab278-47dc-11f1-bb94-42b51c65c3df","config.ts","019df3f8-ea52-731e-a6b6-cf7f270d8051",["D",1777914669570],"// ============================================================================\n// OMNI-REVENUE ORCHESTRATOR — RUNTIME CONFIG\n// Centralizes spec-mandated constants. Edit here to retarget the system.\n// ============================================================================\n\nexport const SHEET_ID = \"1YRlfO_L1bsyaPZPvenQfnpkZVcjUEYdIiQXo5BjfHcw\";\n\n/** Tab name within the spreadsheet. Defaults to first/only tab \"Sheet1\". */\nexport const SHEET_TAB = \"Sheet1\";\n\n/** Header row + data range used by the sweep. Spec: A2:H35. */\nexport const SWEEP_RANGE = `${SHEET_TAB}!A2:H35`;\n\n/** Full data range for dashboard (last 50 rows). */\nexport const FULL_RANGE = `${SHEET_TAB}!A2:H1000`;\n\n/** Append target — Google's API expands automatically. */\nexport const APPEND_RANGE = `${SHEET_TAB}!A:H`;\n\n/** Telegram admin chat id authorized to receive cards & issue callbacks. */\nexport const TELEGRAM_ADMIN_CHAT_ID = 466679766;\n\n/** Niche → CTA injection map. Order matters (first match wins). */\nexport const NICHE_RULES: ReadonlyArray<{ pattern: RegExp; niche: string; cta: string }> = [\n {\n pattern: /seo/i,\n niche: \"seo\",\n cta: \"https://your-expert-link.com/seo-audit\",\n },\n {\n pattern: /growth|scaling/i,\n niche: \"growth\",\n cta: \"https://your-expert-link.com/vsl\",\n },\n];\n\n/** Default fallback CTA when no niche regex matches. */\nexport const DEFAULT_CTA = \"https://your-expert-link.com/discovery\";\n\n/** OpenAI model id. */\nexport const LLM_MODEL = \"gpt-4o\";\n",[176],"3eca711e-47dc-11f1-bb94-42b51c65c3df","README.md","019df3f8-ea52-731e-a6b6-c9e207803ad8",["D",1777914669570],"# Omni-Revenue Orchestrator (v3.0-CORE)\n\nEvent-driven CRM triage system. Hono middleware + React admin view + sequential pipeline (Ingest → Enrich → Draft → Review → Dispatch). Persistence in Google Sheets. Command & control via Telegram inline cards.\n\n> **Status:** code is deployed; you must provision env vars below before any\n> pipeline call will succeed. The `/` dashboard renders without secrets but\n> shows an error banner until `GOOGLE_JSON` is set.\n\n## Architecture\n\n```mermaid\nflowchart LR\n subgraph Client\n Browser\n Webhook[\"Lead source
(form, scraper, etc.)\"]\n Admin[\"Telegram
admin chat\"]\n end\n\n subgraph \"HTTP (index.ts)\"\n H[\"Hono
+ error-boundary\"]\n UI[\"GET /
React dashboard\"]\n Ing[\"POST /api/lead\"]\n Tg[\"POST /api/telegram\"]\n Init[\"GET /admin/init\"]\n Feed[\"GET /api/leads\"]\n end\n\n subgraph Services\n Auth[\"auth.ts
JWT → Google\"]\n Sheets[\"sheets.ts\"]\n LLM[\"llm.ts
GPT-4o + niche map\"]\n TgSvc[\"telegram.ts\"]\n Pipe[\"pipeline.ts\"]\n Idem[\"idempotency.ts
SHA-256\"]\n end\n\n subgraph Cron\n Sweep[\"cron/sweep.ts
15m · A2:H35\"]\n end\n\n subgraph External\n GS[(\"Google Sheets
1YRlfO_…\")]\n OAI[(\"OpenAI\")]\n TGAPI[(\"Telegram Bot API\")]\n end\n\n Browser --> UI\n UI --> Feed --> Sheets\n Webhook --> Ing --> Pipe\n Pipe --> Idem\n Pipe --> Sheets --> Auth\n Pipe --> LLM --> OAI\n Pipe --> TgSvc --> TGAPI --> Admin\n Admin -->|callback| Tg --> Pipe\n Sweep --> Sheets\n Sweep --> LLM\n Sweep --> TgSvc\n Init --> Auth\n Init --> TgSvc\n Auth --> GS\n Sheets --> GS\n```\n\n## Lifecycle / state machine\n\n| status_id | label | written by |\n| --------- | ----------- | ---------------------------- |\n| `0` | INGESTED | `POST /api/lead` |\n| `1` | ENRICHED | (collapsed into DRAFTED) |\n| `2` | DRAFTED | `pipeline.enrichAndDraft` |\n| `3` | REVIEWED | Telegram `✅ EXECUTE` button |\n| `4` | DISPATCHED | `pipeline.dispatch` |\n| `5` | ERROR | any failure path |\n\n## Sheet layout (cols A..H)\n\n`timestamp | source | status_id | uid_hash | contact_raw | context_metadata | ai_payload | priority_score`\n\n`uid_hash` = `SHA-256(\"${contact_raw}|${source}\")` — used as the idempotency key.\n\n## File map\n\n```\nindex.ts ← HTTP routes + global error-boundary\nconfig.ts ← SHEET_ID, niche rules, admin chat id, model\ntypes.ts ← STATUS enum, COL enum, Lead/AIPayload/Callback types\nservices/\n auth.ts ← Google service-account JWT (RS256, in-mem cache)\n sheets.ts ← typed Sheets v4 wrapper (append/read/update)\n idempotency.ts ← SHA-256 uid_hash\n llm.ts ← GPT-4o \"Elite Conversion\" + niche map\n telegram.ts ← bot client, C&C cards, callback parser\n pipeline.ts ← lifecycle orchestrator (ingest/draft/dispatch)\ncron/\n sweep.ts ← 15-min reclamation task on A2:H35\nfrontend/\n index.html ← shell (Twind)\n index.tsx ← React entrypoint\n components/\n App.tsx ← layout + status strip + auto-refresh\n LeadsTable.tsx ← last 50 rows table w/ expandable drafts\n```\n\n## Required environment variables\n\n| Key | What |\n| ----------------- | ----------------------------------------------------------------------------------------- |\n| `GOOGLE_JSON` | Full service-account JSON (paste the entire file content). Must have edit on the sheet. |\n| `OPENAI_API_KEY` | OpenAI key with access to `gpt-4o`. |\n| `TELEGRAM_TOKEN` | Bot token from @BotFather. Used for both webhook auth (secret = part after `:`) and API. |\n\n### Google Sheets prerequisite\n\n1. Share sheet `1YRlfO_L1bsyaPZPvenQfnpkZVcjUEYdIiQXo5BjfHcw` with the\n service-account email (Editor).\n2. Sheet must have a header row 1 with the eight columns above (anything works\n as labels — the code only reads `A2:H…`).\n\n## Bring-up sequence\n\n1. Set the three env vars above.\n2. Hit `GET /admin/init` once — performs:\n - Service-account handshake (verifies sheet access, returns sample row count)\n - `setWebhook` against `/api/telegram` with the derived secret token\n3. POST a test lead:\n\n ```bash\n curl -X POST https:///api/lead \\\n -H 'Content-Type: application/json' \\\n -d '{\n \"source\": \"manual\",\n \"contact_raw\": \"ada@example.com\",\n \"context_metadata\": \"Wants help with SEO for SaaS landing pages\",\n \"priority_score\": 80\n }'\n ```\n\n You should see:\n - row 2 (or next) appended to the sheet with `status_id=0`\n - Telegram alert `📥 INGESTED …` to admin\n4. Wait ≤15 min for the sweep — or manually run `cron/sweep.ts` from the\n editor's \"Run\" button. The row will advance to `status_id=2` (DRAFTED) and\n the admin gets a card with `[✅ EXECUTE] [🔄 RE-GENERATE] [📊 VIEW RAW]`.\n\n## Niche-mapping logic\n\nDefined in `config.ts → NICHE_RULES`. First-match-wins regex over\n`context_metadata`:\n\n| pattern | niche | injected CTA |\n| -------------------- | -------- | --------------------------------------------- |\n| `/seo/i` | seo | `https://your-expert-link.com/seo-audit` |\n| `/growth\\|scaling/i` | growth | `https://your-expert-link.com/vsl` |\n| (fallback) | general | `https://your-expert-link.com/discovery` |\n\nThe LLM is instructed to use `{{CTA_LINK}}` as a placeholder; we substitute\npost-generation so the niche map is authoritative.\n\n## Error boundary\n\nEvery Hono route is wrapped by `app.onError`. Errors thrown from\n`services/sheets.ts` carry `provider=\"google\"` + `status`; `services/llm.ts`\ncarry `provider=\"openai\"`. The boundary fires `tg.alertAdmin(...)` for the\ntwo spec-mandated codes:\n\n- `429 + openai` → \"OpenAI 429 (rate-limit) — …\"\n- `403 + google` → \"Google 403 (auth/quota) — …\"\n\n…plus a generic alert for any 5xx.\n\n## Telegram C&C protocol\n\nCallback data format: `${ACTION}:${rowIndex}` where ACTION ∈\n`{EXECUTE, REGEN, VIEW}`. Only `chat_id === 466679766` is honored; any other\nsender gets an \"unauthorized\" toast.\n\n## Local dev / customization\n\n- Retarget the sheet → edit `SHEET_ID` in `config.ts`.\n- Add a niche → push to `NICHE_RULES`.\n- Wire a real outbound channel → fill in `pipeline.dispatch()`.\n- Sweep window → edit `SWEEP_RANGE` in `config.ts` and the interval delay on\n `cron/sweep.ts` (free tier minimum 15 min).\n\n## View source\n\n[View source on Val Town](/source)\n",[182],"3eca6ed0-47dc-11f1-bb94-42b51c65c3df","services","019df3f8-ea52-731e-a6b6-c76b071477f8",["D",1777914669570],"directory",[188],"3ec9ced0-47dc-11f1-bb94-42b51c65c3df","frontend","019df3f8-ea52-731e-a6b6-aa6cb38f9514",["D",1777914669570],[194],"3ec97d4a-47dc-11f1-bb94-42b51c65c3df","cron","019df3f8-ea52-731e-a6b6-8d8b6ba82ffe",["D",1777914669570],[199],"pulls","branches","forks","envVars",{"_210":68,"_212":68},"connections",{"_210":68,"_211":68},"count","unfilledCount","emptyCount",{"_48":198,"_37":199,"_35":200,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":348,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_235":349,"_32":350},{"_48":340,"_37":341,"_35":342,"_162":200,"_46":47,"_45":163,"_164":64,"_43":343,"_13":68,"_39":344,"_41":345,"_29":30,"_167":-5,"_235":346,"_32":347},{"_48":193,"_37":194,"_35":195,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":337,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_235":338,"_32":339},{"_48":333,"_37":325,"_35":320,"_162":195,"_46":47,"_45":163,"_164":64,"_43":334,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_235":335,"_32":336},{"_48":326,"_37":327,"_35":328,"_162":320,"_46":47,"_45":163,"_164":30,"_43":329,"_13":68,"_39":40,"_41":330,"_29":30,"_167":-5,"_235":331,"_32":332},{"_48":317,"_37":318,"_35":319,"_162":320,"_46":47,"_45":163,"_164":64,"_43":321,"_13":68,"_39":40,"_41":322,"_29":30,"_167":-5,"_235":323,"_32":324},{"_48":310,"_37":311,"_35":312,"_162":195,"_46":47,"_45":163,"_164":64,"_43":313,"_13":68,"_39":26,"_41":314,"_29":30,"_167":-5,"_235":315,"_32":316},{"_48":303,"_37":304,"_35":305,"_162":195,"_46":47,"_45":163,"_164":64,"_43":306,"_13":68,"_39":26,"_41":307,"_29":30,"_167":-5,"_235":308,"_32":309},{"_48":296,"_37":297,"_35":298,"_162":195,"_46":47,"_45":163,"_164":64,"_43":299,"_13":68,"_39":40,"_41":300,"_29":30,"_167":-5,"_235":301,"_32":302},{"_48":187,"_37":188,"_35":189,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":293,"_13":68,"_39":191,"_41":-5,"_29":30,"_167":-5,"_235":294,"_32":295},{"_48":286,"_37":287,"_35":288,"_162":189,"_46":47,"_45":163,"_164":64,"_43":289,"_13":68,"_39":40,"_41":290,"_29":30,"_167":-5,"_235":291,"_32":292},{"_48":279,"_37":280,"_35":281,"_162":189,"_46":47,"_45":163,"_164":64,"_43":282,"_13":68,"_39":40,"_41":283,"_29":30,"_167":-5,"_235":284,"_32":285},{"_48":272,"_37":273,"_35":274,"_162":189,"_46":47,"_45":163,"_164":64,"_43":275,"_13":68,"_39":40,"_41":276,"_29":30,"_167":-5,"_235":277,"_32":278},{"_48":265,"_37":266,"_35":267,"_162":189,"_46":47,"_45":163,"_164":30,"_43":268,"_13":68,"_39":40,"_41":269,"_29":30,"_167":-5,"_235":270,"_32":271},{"_48":258,"_37":259,"_35":260,"_162":189,"_46":47,"_45":163,"_164":64,"_43":261,"_13":68,"_39":40,"_41":262,"_29":30,"_167":-5,"_235":263,"_32":264},{"_48":254,"_37":38,"_35":36,"_162":189,"_46":47,"_45":14,"_164":64,"_43":255,"_13":68,"_39":40,"_41":42,"_29":30,"_167":-5,"_235":256,"_32":257},{"_48":247,"_37":248,"_35":249,"_162":189,"_46":47,"_45":163,"_164":30,"_43":250,"_13":68,"_39":40,"_41":251,"_29":30,"_167":-5,"_235":252,"_32":253},{"_48":181,"_37":182,"_35":183,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":244,"_13":68,"_39":26,"_41":185,"_29":30,"_167":-5,"_235":245,"_32":246},{"_48":175,"_37":176,"_35":177,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":241,"_13":68,"_39":40,"_41":179,"_29":30,"_167":-5,"_235":242,"_32":243},{"_48":169,"_37":170,"_35":62,"_162":-5,"_46":47,"_45":163,"_164":30,"_43":238,"_13":68,"_39":172,"_41":173,"_29":30,"_167":-5,"_235":239,"_32":240},{"_48":159,"_37":160,"_35":161,"_162":-5,"_46":47,"_45":163,"_164":64,"_43":234,"_13":68,"_39":40,"_41":166,"_29":30,"_167":-5,"_235":236,"_32":237},["D",1777914669570],"children",[],[160],["D",1777914669570],[],[170],["D",1777914669570],[],[176],["D",1777914669570],[],[182],"3eca4e0a-47dc-11f1-bb94-42b51c65c3df","telegram.ts","019df3f8-ea52-731e-a6b6-c1f8a4eefd43",["D",1777914669570],"// ============================================================================\n// TelegramService — thin client over the Bot API.\n// - Sends C&C cards with inline callback buttons.\n// - Receives webhook updates and dispatches callback_query events.\n// - Surfaces error-boundary alerts.\n// ============================================================================\n\nimport { TELEGRAM_ADMIN_CHAT_ID } from \"../config.ts\";\nimport type { CallbackAction, Lead } from \"../types.ts\";\nimport { STATUS_LABEL } from \"../types.ts\";\n\nconst TG_API = \"https://api.telegram.org\";\n\nfunction token(): string {\n const t = Deno.env.get(\"TELEGRAM_TOKEN\");\n if (!t) throw new Error(\"TELEGRAM_TOKEN env var is not set\");\n return t;\n}\n\nasync function tgcall(method: string, body: unknown): Promise {\n const resp = await fetch(`${TG_API}/bot${token()}/${method}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!resp.ok) {\n const text = await resp.text();\n throw new Error(`Telegram ${method} ${resp.status}: ${text}`);\n }\n return await resp.json() as T;\n}\n\n/** Plain-text alert to admin. Used by error-boundary. */\nexport async function alertAdmin(message: string): Promise {\n try {\n await tgcall(\"sendMessage\", {\n chat_id: TELEGRAM_ADMIN_CHAT_ID,\n text: `🚨 ${message}`,\n parse_mode: \"Markdown\",\n });\n } catch (e) {\n // Last-resort logging — do not throw out of the alerter.\n console.error(\"alertAdmin failed:\", e);\n }\n}\n\n/** Build inline keyboard for a draft. */\nfunction buildCard(lead: Lead) {\n const lines = [\n `🎯 *Lead #${lead.rowIndex}* — _${STATUS_LABEL[lead.status_id]}_`,\n `📡 source: \\`${lead.source}\\``,\n `📞 contact: \\`${escapeMd(lead.contact_raw)}\\``,\n `🧠 context: ${escapeMd(lead.context_metadata).slice(0, 200)}`,\n `⭐ priority: *${lead.priority_score}*`,\n \"\",\n \"*Draft:*\",\n \"```\",\n truncate(lead.ai_payload, 1000),\n \"```\",\n ];\n return {\n text: lines.join(\"\\n\"),\n reply_markup: {\n inline_keyboard: [[\n { text: \"✅ EXECUTE\", callback_data: `EXECUTE:${lead.rowIndex}` },\n { text: \"🔄 RE-GENERATE\", callback_data: `REGEN:${lead.rowIndex}` },\n { text: \"📊 VIEW RAW\", callback_data: `VIEW:${lead.rowIndex}` },\n ]],\n },\n };\n}\n\n/** Lightweight Markdown escaper for Telegram's MarkdownV1 mode. */\nfunction escapeMd(s: string): string {\n return (s ?? \"\").replace(/[`*_]/g, (c) => `\\\\${c}`);\n}\n\nfunction truncate(s: string, n: number): string {\n if (!s) return \"(empty)\";\n return s.length > n ? s.slice(0, n) + \"…\" : s;\n}\n\n/** Send a fresh card for a lead to the admin. */\nexport async function sendCard(lead: Lead): Promise {\n const card = buildCard(lead);\n await tgcall(\"sendMessage\", {\n chat_id: TELEGRAM_ADMIN_CHAT_ID,\n text: card.text,\n parse_mode: \"Markdown\",\n reply_markup: card.reply_markup,\n });\n}\n\n/** Edit an existing card after a status transition (e.g. EXECUTE -> dispatched). */\nexport async function editCard(\n chatId: number,\n messageId: number,\n text: string,\n showButtons = false,\n lead?: Lead,\n): Promise {\n await tgcall(\"editMessageText\", {\n chat_id: chatId,\n message_id: messageId,\n text,\n parse_mode: \"Markdown\",\n reply_markup: showButtons && lead ? buildCard(lead).reply_markup : { inline_keyboard: [] },\n });\n}\n\n/** Acknowledge a callback_query so Telegram clears the loading spinner. */\nexport async function answerCallback(callbackId: string, text?: string): Promise {\n await tgcall(\"answerCallbackQuery\", {\n callback_query_id: callbackId,\n text: text ?? \"\",\n });\n}\n\n/** Set webhook to a given URL with a shared secret. */\nexport async function setWebhook(url: string, secretToken: string): Promise {\n await tgcall(\"setWebhook\", {\n url,\n secret_token: secretToken,\n allowed_updates: [\"message\", \"callback_query\"],\n });\n}\n\n/** Decode our `${ACTION}:${rowIndex}` callback protocol. */\nexport function parseCallback(data: string): { action: CallbackAction; rowIndex: number } | null {\n const [action, raw] = data.split(\":\");\n const row = Number(raw);\n if (!Number.isFinite(row)) return null;\n if (action !== \"EXECUTE\" && action !== \"REGEN\" && action !== \"VIEW\") return null;\n return { action, rowIndex: row };\n}\n\n/** Stable secret derived from TELEGRAM_TOKEN — see std/telegramBotStarter pattern. */\nexport function webhookSecret(): string {\n return token().split(\":\")[1];\n}\n",[],[188,248],"4b87ce4c-47dc-11f1-bd26-42b51c65c3df",["D",1777914691057],[],[188,38],"3eca2858-47dc-11f1-bb94-42b51c65c3df","sheets.ts","019df3f8-ea52-731e-a6b6-be8c28949ad9",["D",1777914669570],"// ============================================================================\n// SheetsService — typed wrapper around Google Sheets v4 REST.\n// All requests go through getAccessToken(); on 403 we surface to error boundary.\n// ============================================================================\n\nimport { getAccessToken } from \"./auth.ts\";\nimport {\n APPEND_RANGE,\n FULL_RANGE,\n SHEET_ID,\n SHEET_TAB,\n SWEEP_RANGE,\n} from \"../config.ts\";\nimport { COL, type Lead, STATUS, type StatusId } from \"../types.ts\";\n\nconst BASE = `https://sheets.googleapis.com/v4/spreadsheets/${SHEET_ID}`;\n\nasync function gfetch(url: string, init: RequestInit = {}): Promise {\n const token = await getAccessToken();\n const headers = new Headers(init.headers);\n headers.set(\"Authorization\", `Bearer ${token}`);\n headers.set(\"Content-Type\", \"application/json\");\n const resp = await fetch(url, { ...init, headers });\n if (!resp.ok) {\n const body = await resp.text();\n // Re-throw with status code preserved so the error-boundary middleware\n // can detect 403 and route an alert through Telegram.\n const err = new Error(`Sheets API ${resp.status}: ${body}`) as Error & {\n status?: number;\n provider?: string;\n };\n err.status = resp.status;\n err.provider = \"google\";\n throw err;\n }\n return resp;\n}\n\n/** Coerce a sheet row (string[]) into a strongly-typed Lead. */\nfunction rowToLead(row: string[], rowIndex: number): Lead {\n const safe = (i: number) => row[i] ?? \"\";\n const status = Number(safe(COL.STATUS_ID));\n return {\n rowIndex,\n timestamp: safe(COL.TIMESTAMP),\n source: safe(COL.SOURCE),\n status_id: (Number.isFinite(status) ? status : STATUS.ERROR) as StatusId,\n uid_hash: safe(COL.UID_HASH),\n contact_raw: safe(COL.CONTACT_RAW),\n context_metadata: safe(COL.CONTEXT_METADATA),\n ai_payload: safe(COL.AI_PAYLOAD),\n priority_score: Number(safe(COL.PRIORITY_SCORE)) || 0,\n };\n}\n\n/** Append a new lead row in the canonical column order. */\nexport async function appendRow(lead: Omit): Promise {\n const values = [\n lead.timestamp,\n lead.source,\n String(lead.status_id),\n lead.uid_hash,\n lead.contact_raw,\n lead.context_metadata,\n lead.ai_payload,\n String(lead.priority_score),\n ];\n await gfetch(\n `${BASE}/values/${encodeURIComponent(APPEND_RANGE)}:append?valueInputOption=RAW&insertDataOption=INSERT_ROWS`,\n {\n method: \"POST\",\n body: JSON.stringify({ values: [values] }),\n },\n );\n}\n\n/** Pull the sweep range (A2:H35) and return parsed leads. */\nexport async function getSweepRows(): Promise {\n const resp = await gfetch(\n `${BASE}/values/${encodeURIComponent(SWEEP_RANGE)}?majorDimension=ROWS`,\n );\n const json = await resp.json() as { values?: string[][] };\n return (json.values ?? []).map((row, i) => rowToLead(row, i + 2));\n}\n\n/** Pull the full range for the dashboard (last 50 entries returned). */\nexport async function getRecentLeads(limit = 50): Promise {\n const resp = await gfetch(\n `${BASE}/values/${encodeURIComponent(FULL_RANGE)}?majorDimension=ROWS`,\n );\n const json = await resp.json() as { values?: string[][] };\n const all = (json.values ?? []).map((row, i) => rowToLead(row, i + 2));\n return all.slice(-limit).reverse();\n}\n\n/** Find a lead by its uid_hash (idempotency key). */\nexport async function findByUidHash(uid: string): Promise {\n // Cheap implementation: scan recent. For production scale swap to a\n // dedicated index sheet or sqlite mirror.\n const resp = await gfetch(\n `${BASE}/values/${encodeURIComponent(`${SHEET_TAB}!A2:H10000`)}?majorDimension=ROWS`,\n );\n const json = await resp.json() as { values?: string[][] };\n const rows = json.values ?? [];\n for (let i = 0; i < rows.length; i++) {\n if (rows[i][COL.UID_HASH] === uid) return rowToLead(rows[i], i + 2);\n }\n return null;\n}\n\n/** Get a single lead by row number. */\nexport async function getLeadByRow(rowIndex: number): Promise {\n const range = `${SHEET_TAB}!A${rowIndex}:H${rowIndex}`;\n const resp = await gfetch(\n `${BASE}/values/${encodeURIComponent(range)}?majorDimension=ROWS`,\n );\n const json = await resp.json() as { values?: string[][] };\n const row = json.values?.[0];\n if (!row) return null;\n return rowToLead(row, rowIndex);\n}\n\n/** Patch a single cell in a row. Used to mutate status_id and ai_payload. */\nexport async function updateCell(\n rowIndex: number,\n col: number,\n value: string,\n): Promise {\n const colLetter = String.fromCharCode(65 + col); // A, B, ..., H\n const range = `${SHEET_TAB}!${colLetter}${rowIndex}:${colLetter}${rowIndex}`;\n await gfetch(\n `${BASE}/values/${encodeURIComponent(range)}?valueInputOption=RAW`,\n {\n method: \"PUT\",\n body: JSON.stringify({ values: [[value]] }),\n },\n );\n}\n\nexport async function updateStatus(rowIndex: number, status: StatusId): Promise {\n await updateCell(rowIndex, COL.STATUS_ID, String(status));\n}\n\nexport async function updateAIPayload(rowIndex: number, payload: string): Promise {\n await updateCell(rowIndex, COL.AI_PAYLOAD, payload);\n}\n",[],[188,259],"3eca0c9c-47dc-11f1-bb94-42b51c65c3df","pipeline.ts","019df3f8-ea52-731e-a6b6-bbdbf5070845",["D",1777914669570],"// ============================================================================\n// Pipeline — orchestrates the lead lifecycle stage transitions.\n// INGESTED -> ENRICHED -> DRAFTED -> REVIEWED -> DISPATCHED\n// Each transition is idempotent (re-running on a row in a higher state is a noop).\n// ============================================================================\n\nimport * as sheets from \"./sheets.ts\";\nimport * as tg from \"./telegram.ts\";\nimport { draftFor } from \"./llm.ts\";\nimport { uidHash } from \"./idempotency.ts\";\nimport { COL, type IngestRequest, type Lead, STATUS } from \"../types.ts\";\n\n/**\n * Step 1 — Ingestion.\n * SHA-256 idempotency check; concurrent sheet append + admin notification.\n * Returns the resulting Lead (existing on duplicate, new otherwise).\n */\nexport async function ingest(req: IngestRequest): Promise<{ lead: Lead | null; deduped: boolean }> {\n const uid = await uidHash(req.contact_raw, req.source);\n const existing = await sheets.findByUidHash(uid);\n if (existing) return { lead: existing, deduped: true };\n\n const skeleton: Omit = {\n timestamp: new Date().toISOString(),\n source: req.source,\n status_id: STATUS.INGESTED,\n uid_hash: uid,\n contact_raw: req.contact_raw,\n context_metadata: req.context_metadata ?? \"\",\n ai_payload: \"\",\n priority_score: req.priority_score ?? 0,\n };\n\n // Concurrent fan-out per spec: Promise.allSettled of sheet log + tg notify.\n const results = await Promise.allSettled([\n sheets.appendRow(skeleton),\n tg.alertAdmin(\n `📥 *INGESTED*\\nsource: \\`${req.source}\\`\\ncontact: \\`${req.contact_raw}\\`\\npriority: *${skeleton.priority_score}*`,\n ),\n ]);\n\n // If the sheet write itself failed, the row doesn't exist — bubble up.\n const sheetResult = results[0];\n if (sheetResult.status === \"rejected\") throw sheetResult.reason;\n\n // Re-fetch to obtain the assigned rowIndex.\n const created = await sheets.findByUidHash(uid);\n return { lead: created, deduped: false };\n}\n\n/**\n * Step 2/3 — Enrich + Draft.\n * Generates an AIPayload, writes it back, advances status to DRAFTED.\n * (We collapse ENRICHED -> DRAFTED: the LLM call is the enrichment.)\n */\nexport async function enrichAndDraft(lead: Lead): Promise {\n if (lead.status_id >= STATUS.DRAFTED) return lead;\n const payload = await draftFor(lead);\n const serialized = JSON.stringify(payload);\n await sheets.updateAIPayload(lead.rowIndex, serialized);\n await sheets.updateStatus(lead.rowIndex, STATUS.DRAFTED);\n return { ...lead, ai_payload: serialized, status_id: STATUS.DRAFTED };\n}\n\n/**\n * Step 4 — Send a C&C card to the admin so they can REVIEW/EXECUTE.\n * Marks the lead as DRAFTED; transitions to REVIEWED happen on button press.\n */\nexport async function presentForReview(lead: Lead): Promise {\n await tg.sendCard(lead);\n}\n\n/**\n * Step 5 — Mark as DISPATCHED. The actual send-out (email/sms/etc) is\n * stubbed here — wire to your outbound transport of choice.\n */\nexport async function dispatch(rowIndex: number): Promise {\n // TODO: Hook real outbound channel. For now, advance status only.\n await sheets.updateStatus(rowIndex, STATUS.DISPATCHED);\n}\n\n/** Mark error state on a row. Safe to call from anywhere. */\nexport async function markError(rowIndex: number, _reason: string): Promise {\n try {\n await sheets.updateStatus(rowIndex, STATUS.ERROR);\n } catch { /* swallow — error path */ }\n}\n\nexport { COL };\n",[],[188,266],"3ec9f23e-47dc-11f1-bb94-42b51c65c3df","llm.ts","019df3f8-ea52-731e-a6b6-b71ae9a4e33a",["D",1777914669570],"// ============================================================================\n// IntelligenceHub — GPT-4o \"Elite Conversion\" persona + niche-mapping.\n// Returns a strict AIPayload. Throws on 429 with provider tag for the boundary.\n// ============================================================================\n\nimport OpenAI from \"npm:openai\";\nimport { DEFAULT_CTA, LLM_MODEL, NICHE_RULES } from \"../config.ts\";\nimport type { AIPayload, Lead } from \"../types.ts\";\n\nconst SYSTEM_PROMPT = `You are \"Elite Conversion\" — a senior B2B copywriter who writes\nhigh-conversion outbound responses for inbound leads. Constraints:\n- 90–140 words, plain text, no markdown, no greetings like \"Hi \" unless you have a name.\n- Open with a sharp observation about the lead's stated context.\n- Provide exactly one concrete next step that uses the {{CTA_LINK}} placeholder verbatim.\n- Tone: direct, expert, calmly confident. Zero fluff. No emojis.\n- Never invent facts. If the context is thin, ask one targeted qualifying question.\n- End with a single CTA sentence containing {{CTA_LINK}}.`;\n\nfunction detectNiche(context: string): { niche: string; cta: string } {\n for (const rule of NICHE_RULES) {\n if (rule.pattern.test(context)) return { niche: rule.niche, cta: rule.cta };\n }\n return { niche: \"general\", cta: DEFAULT_CTA };\n}\n\nfunction client(): OpenAI {\n const key = Deno.env.get(\"OPENAI_API_KEY\");\n if (!key) throw new Error(\"OPENAI_API_KEY env var is not set\");\n return new OpenAI({ apiKey: key });\n}\n\n/**\n * Generate an AIPayload for a lead. The CTA is *injected post-generation* by\n * replacing the {{CTA_LINK}} placeholder, guaranteeing the niche map wins\n * even if the model gets creative.\n */\nexport async function draftFor(lead: Pick): Promise {\n const { niche, cta } = detectNiche(lead.context_metadata ?? \"\");\n const openai = client();\n\n const userPrompt = [\n `Source: ${lead.source}`,\n `Contact: ${lead.contact_raw}`,\n `Niche tag: ${niche}`,\n `Context / metadata:`,\n lead.context_metadata || \"(none provided)\",\n \"\",\n `Write the outbound message now. Use {{CTA_LINK}} as the literal CTA URL placeholder.`,\n ].join(\"\\n\");\n\n let completion;\n try {\n completion = await openai.chat.completions.create({\n model: LLM_MODEL,\n temperature: 0.6,\n max_tokens: 350,\n messages: [\n { role: \"system\", content: SYSTEM_PROMPT },\n { role: \"user\", content: userPrompt },\n ],\n });\n } catch (e) {\n // OpenAI SDK throws APIError with `.status` — propagate so error-boundary\n // can detect 429 specifically.\n const err = e as { status?: number; message?: string };\n const wrapped = new Error(`OpenAI: ${err.message ?? \"unknown\"}`) as Error & {\n status?: number;\n provider?: string;\n };\n wrapped.status = err.status;\n wrapped.provider = \"openai\";\n throw wrapped;\n }\n\n const raw = completion.choices[0]?.message?.content?.trim() ?? \"\";\n const draft = raw.replaceAll(\"{{CTA_LINK}}\", cta);\n\n return {\n draft,\n niche,\n cta_link: cta,\n rationale: `Niche=${niche} via NICHE_RULES. Persona=Elite Conversion. Model=${LLM_MODEL}.`,\n generated_at: new Date().toISOString(),\n };\n}\n",[],[188,273],"3ec9eb9a-47dc-11f1-bb94-42b51c65c3df","idempotency.ts","019df3f8-ea52-731e-a6b6-b370687eec03",["D",1777914669570],"// ============================================================================\n// Idempotency — SHA-256(`${contact_raw}|${source}`) → hex.\n// Used as the uid_hash column. Repeats are short-circuited at ingest.\n// ============================================================================\n\nexport async function uidHash(contact_raw: string, source: string): Promise {\n const data = new TextEncoder().encode(`${contact_raw}|${source}`);\n const buf = await crypto.subtle.digest(\"SHA-256\", data);\n return [...new Uint8Array(buf)]\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n",[],[188,280],"3ec9d0b0-47dc-11f1-bb94-42b51c65c3df","auth.ts","019df3f8-ea52-731e-a6b6-af15a022f673",["D",1777914669570],"// ============================================================================\n// AuthService — Google Service Account → Bearer access token.\n// Implements RFC7523 JWT bearer flow against Google's OAuth2 token endpoint.\n// Cached in-process for ~50 minutes to avoid re-signing on every request.\n// ============================================================================\n\nimport { create, getNumericDate } from \"https://deno.land/x/djwt@v3.0.2/mod.ts\";\n\ninterface ServiceAccountKey {\n client_email: string;\n private_key: string;\n token_uri?: string;\n}\n\ninterface CachedToken {\n token: string;\n expiresAt: number; // epoch ms\n}\n\nlet cache: CachedToken | null = null;\n\n/** Load + parse the GOOGLE_JSON env var. Throws if missing/invalid. */\nfunction loadKey(): ServiceAccountKey {\n const raw = Deno.env.get(\"GOOGLE_JSON\");\n if (!raw) throw new Error(\"GOOGLE_JSON env var is not set\");\n let parsed: ServiceAccountKey;\n try {\n parsed = JSON.parse(raw);\n } catch {\n throw new Error(\"GOOGLE_JSON is not valid JSON\");\n }\n if (!parsed.client_email || !parsed.private_key) {\n throw new Error(\"GOOGLE_JSON missing client_email or private_key\");\n }\n return parsed;\n}\n\n/** Convert a PEM-encoded PKCS#8 private key into a CryptoKey for RS256. */\nasync function importPrivateKey(pem: string): Promise {\n const cleaned = pem\n .replace(/-----BEGIN PRIVATE KEY-----/g, \"\")\n .replace(/-----END PRIVATE KEY-----/g, \"\")\n .replace(/\\\\n/g, \"\\n\")\n .replace(/\\s+/g, \"\");\n const der = Uint8Array.from(atob(cleaned), (c) => c.charCodeAt(0));\n return await crypto.subtle.importKey(\n \"pkcs8\",\n der,\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n}\n\n/**\n * Returns a fresh Google access token with sheets scope.\n * Cached for ~50 minutes (token TTL is 60m).\n */\nexport async function getAccessToken(): Promise {\n if (cache && Date.now() < cache.expiresAt) return cache.token;\n\n const key = loadKey();\n const cryptoKey = await importPrivateKey(key.private_key);\n\n const now = getNumericDate(0);\n const exp = getNumericDate(60 * 60); // 1h\n const jwt = await create(\n { alg: \"RS256\", typ: \"JWT\" },\n {\n iss: key.client_email,\n scope: \"https://www.googleapis.com/auth/spreadsheets\",\n aud: key.token_uri ?? \"https://oauth2.googleapis.com/token\",\n iat: now,\n exp,\n },\n cryptoKey,\n );\n\n const tokenUrl = key.token_uri ?? \"https://oauth2.googleapis.com/token\";\n const resp = await fetch(tokenUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n assertion: jwt,\n }),\n });\n if (!resp.ok) {\n const body = await resp.text();\n throw new Error(`Google token exchange failed (${resp.status}): ${body}`);\n }\n const json = await resp.json() as { access_token: string; expires_in: number };\n cache = {\n token: json.access_token,\n expiresAt: Date.now() + (json.expires_in - 600) * 1000, // refresh 10m early\n };\n return cache.token;\n}\n\n/** Force-clear the cache (e.g. on 401/403 retry). */\nexport function invalidateAuthCache() {\n cache = null;\n}\n\n/** Dev helper: return the service account email without exposing the key. */\nexport function serviceAccountEmail(): string {\n return loadKey().client_email;\n}\n",[],[188,287],["D",1777914669570],[223,224,225,226,227,228,229],[188],"3ec9ca48-47dc-11f1-bb94-42b51c65c3df","index.tsx","019df3f8-ea52-731e-a6b6-a65db92b734d",["D",1777914669570],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[194,297],"3ec9c336-47dc-11f1-bb94-42b51c65c3df","index.html","019df3f8-ea52-731e-a6b6-a335333bfca6",["D",1777914669570],"\n\n \n \n \n Omni-Revenue Orchestrator\n \n \n \n \n

\n \n \n \n",[],[194,304],"3ec9b404-47dc-11f1-bb94-42b51c65c3df","favicon.svg","019df3f8-ea52-731e-a6b6-9da29593072d",["D",1777914669570],"\n",[],[194,311],"3ec99ee2-47dc-11f1-bb94-42b51c65c3df","LeadsTable.tsx","019df3f8-ea52-731e-a6b6-9664910aefaf","019df3f8-ea52-731e-a6b6-9bfa0b8238ab",["D",1777914669570],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport type { Lead } from \"../../types.ts\";\n\nconst STATUS_COLOR: Record = {\n 0: \"bg-gray-100 text-gray-700\",\n 1: \"bg-amber-100 text-amber-800\",\n 2: \"bg-blue-100 text-blue-800\",\n 3: \"bg-violet-100 text-violet-800\",\n 4: \"bg-emerald-100 text-emerald-800\",\n 5: \"bg-red-100 text-red-800\",\n};\n\nexport function LeadsTable(\n { leads, statusLabels }: { leads: Lead[]; statusLabels: Record },\n) {\n if (leads.length === 0) {\n return (\n

\n No leads yet. POST one to /api/lead to begin.\n

\n );\n }\n return (\n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n {leads.map((l) => )}\n \n

#	Status	When	Source	Contact	Context	Priority	Draft

\n );\n}\n\nfunction Row({ lead, statusLabels }: { lead: Lead; statusLabels: Record }) {\n const [open, setOpen] = useState(false);\n const cls = STATUS_COLOR[lead.status_id] ?? STATUS_COLOR[0];\n const draftPreview = previewDraft(lead.ai_payload);\n return (\n <>\n \n {lead.rowIndex}\n \n \n {lead.status_id} · {statusLabels[String(lead.status_id)] ?? \"?\"}\n \n \n {formatTime(lead.timestamp)}\n {lead.source}\n \n {lead.contact_raw}\n \n \n {lead.context_metadata || \"—\"}\n \n {lead.priority_score}\n \n {lead.ai_payload\n ? (\n setOpen((o) => !o)}\n class=\"text-blue-600 hover:underline text-xs\"\n >\n {open ? \"hide\" : \"show\"}\n \n )\n : —}\n \n \n {open && lead.ai_payload && (\n \n \n

\n              {draftPreview}\n

\n \n \n )}\n \n );\n}\n\nfunction previewDraft(raw: string): string {\n if (!raw) return \"\";\n try {\n const parsed = JSON.parse(raw);\n if (parsed && typeof parsed === \"object\" && \"draft\" in parsed) {\n return [\n `niche: ${parsed.niche}`,\n `cta: ${parsed.cta_link}`,\n \"\",\n parsed.draft,\n ].join(\"\\n\");\n }\n } catch { /* fallthrough */ }\n return raw;\n}\n\nfunction formatTime(iso: string): string {\n if (!iso) return \"—\";\n const d = new Date(iso);\n if (Number.isNaN(d.getTime())) return iso;\n return d.toISOString().replace(\"T\", \" \").slice(0, 16) + \"Z\";\n}\n",[],[194,325,318],"components","3ec97fca-47dc-11f1-bb94-42b51c65c3df","App.tsx","019df3f8-ea52-731e-a6b6-9103d7d4dfe9",["D",1777914669570],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { LeadsTable } from \"./LeadsTable.tsx\";\nimport type { Lead, StatusId } from \"../../types.ts\";\n\ninterface ApiResponse {\n leads: Lead[];\n statusLabels: Record;\n}\n\nexport function App() {\n const [data, setData] = useState(null);\n const [error, setError] = useState(null);\n const [loading, setLoading] = useState(true);\n const [autoRefresh, setAutoRefresh] = useState(true);\n\n async function load() {\n try {\n const r = await fetch(\"/api/leads\");\n if (!r.ok) throw new Error(`HTTP ${r.status}`);\n const json = (await r.json()) as ApiResponse;\n setData(json);\n setError(null);\n } catch (e) {\n setError((e as Error).message);\n } finally {\n setLoading(false);\n }\n }\n\n useEffect(() => {\n load();\n }, []);\n\n useEffect(() => {\n if (!autoRefresh) return;\n const id = setInterval(load, 15000);\n return () => clearInterval(id);\n }, [autoRefresh]);\n\n const counts = (data?.leads ?? []).reduce>(\n (acc, l) => {\n acc[l.status_id] = (acc[l.status_id] ?? 0) + 1;\n return acc;\n },\n {} as Record,\n );\n\n return (\n

Omni-Revenue Orchestrator

\n Event-driven CRM triage · Hono + React + Sequential Pipeline\n

\n \n setAutoRefresh((e.target as HTMLInputElement).checked)}\n />\n auto-refresh\n \n \n Reload\n \n \n View source\n \n

\n\n \n\n

\n {loading &&

Loading…

}\n {error && (\n

\n Failed to load: {error}\n

\n Hit /admin/init to verify Service Account + Telegram\n webhook.\n

\n )}\n {data && }\n

\n\n \n

\n );\n}\n\nfunction StatusStrip(\n { counts, labels }: { counts: Record; labels: Record },\n) {\n const entries: Array<[number, string]> = [\n [0, \"INGESTED\"],\n [1, \"ENRICHED\"],\n [2, \"DRAFTED\"],\n [3, \"REVIEWED\"],\n [4, \"DISPATCHED\"],\n [5, \"ERROR\"],\n ];\n return (\n

\n {entries.map(([id, label]) => (\n \n

\n {labels[String(id)] ?? label}\n

{counts[id] ?? 0}

\n ))}\n \n );\n}\n",[],[194,325,327],"3ec9b2a6-47dc-11f1-bb94-42b51c65c3df",["D",1777914669570],[217,218],[194,325],["D",1777914669570],[216,219,220,221],[194],"3ec94e42-47dc-11f1-bb94-42b51c65c3df","sweep.ts","019df3f8-ea52-731e-a6b6-89fc1d718505",["D",1777914669570],"interval","// ============================================================================\n// ReclamationTask — every 15m, scan A2:H35 and rescue any rows whose\n// status_id < ENRICHED (i.e. INGESTED). Each is enriched, drafted, and a\n// C&C card is dispatched to the admin.\n// ============================================================================\n\nimport * as sheets from \"../services/sheets.ts\";\nimport * as pipeline from \"../services/pipeline.ts\";\nimport * as tg from \"../services/telegram.ts\";\nimport { STATUS } from \"../types.ts\";\n\nexport default async function (_interval: { lastRunAt?: Date }): Promise {\n const rows = await sheets.getSweepRows();\n const stale = rows.filter((r) => r.contact_raw && r.status_id < STATUS.ENRICHED);\n\n if (stale.length === 0) {\n console.log(`[sweep] clean — ${rows.length} rows scanned, none stale`);\n return;\n }\n\n console.log(`[sweep] ${stale.length} stale rows → enriching`);\n\n // Sequential by design: avoid hammering OpenAI with parallel calls from a cron.\n for (const lead of stale) {\n try {\n const drafted = await pipeline.enrichAndDraft(lead);\n await pipeline.presentForReview(drafted);\n } catch (e) {\n const err = e as Error & { status?: number; provider?: string };\n console.error(`[sweep] row ${lead.rowIndex} failed:`, err.message);\n await pipeline.markError(lead.rowIndex, err.message);\n await tg.alertAdmin(\n `Sweep failed on row ${lead.rowIndex}: ${err.provider ?? \"\"} ${err.status ?? \"\"} ${err.message}`,\n );\n }\n }\n}\n",[],[199,341],["D",1777914669570],[214],[199],["D",1777914669570],["D",1789506649022],{"_109":108,"_117":113},{"_109":108,"_110":111,"_112":113,"_19":60,"_114":115,"_116":30},{"_13":94,"_37":95,"_48":47,"_96":49,"_97":98,"_99":100,"_101":55,"_102":103,"_104":105,"_106":50,"_107":108},"ctx",{"_87":-5,"_139":389,"_390":391,"_392":393,"_394":30,"_395":30,"_396":30,"_397":64,"_398":-5,"_399":-7,"_400":-7,"_401":68,"_402":30,"_403":30,"_404":-5,"_405":30,"_406":30,"_407":30,"_408":-5},"ENV",{"_360":361,"_362":363,"_364":95,"_365":366,"_367":368,"_369":370,"_371":372,"_373":374,"_375":376,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2