Apollo tools

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_246":247,"_248":249},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_108":90,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":59,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",120,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","create-account.ts","latestPath","fileId","3fa3cf86-a614-11f1-a3fe-1607ee4eb77e","name","fileType","script","content","// Create a Salesforce Account from a chat conversation.\n//\n// WHAT MAKES THIS SAFE\n// The bot may only create ONE shape of account: card-on-file, terms of zero.\n// Of ~1,586 accounts created in the 120 days to 9/1/2026, ~1,376 were exactly\n// that, so this covers the overwhelming majority of real signups — while making\n// it structurally impossible for a chat bot to extend credit to a stranger.\n// Net-30 and Net-60 accounts stay a human decision, because those are the ones\n// where being wrong costs money rather than a refund.\n//\n// WHY THE REGION IS RESOLVED IN CODE AND NOT BY THE MODEL\n// Delivery_Region__c is a RESTRICTED picklist and it drives which truck the\n// account lands on. A wrong value is not a cosmetic error — it is a stop on the\n// wrong route. So the model never picks it: it supplies a ZIP, and this file\n// maps it. Where the mapping is genuinely ambiguous the account is NOT created\n// and a human is asked, which is the same refuse-rather-than-guess rule the\n// rest of this project runs on.\n\nimport { getAccessToken } from \"./salesforce.ts\";\nimport { ZIP_REGION } from \"./zip-regions.ts\";\n\nconst API = \"v59.0\";\n\n/** The one shape of account a bot is allowed to create. */\nconst CARD_ON_FILE = {\n Terms__c: \"0\",\n Payment_Method_Type__c: \"Debit/Credit Card\",\n Invoice_Set_Up__c: \"Credit Card Invoice\",\n};\n\n/** Frequencies the Salesforce picklist actually accepts. */\nexport const FREQUENCIES = [\n \"Weekly\", \"Bi-Weekly\", \"15 Days\", \"30 Days\", \"60 Days\", \"4 Weeks\", \"Call in\",\n];\n\n/**\n * ZIP to Delivery_Region__c.\n *\n * Florida follows the rule confirmed by the office on 9/1/2026 — \"Orlando and\n * west is Florida, the rest is New Miami\" — which matches how the route builder\n * already groups them: the `florida` region is Tampa Bay plus Orlando, and\n * `New Miami` is the southeast metro.\n *\n * Returns null when the answer is genuinely uncertain rather than guessing.\n */\nexport function regionForZip(zip: string, state: string): string | null {\n const zip5 = String(zip ?? \"\").trim().slice(0, 5);\n const z = Number(zip5);\n const st = String(state ?? \"\").trim().toUpperCase();\n\n // MEASURED DATA FIRST. zip-regions.ts records where the office actually files\n // accounts, which beats every rule below because those encode what a ZIP map\n // implies rather than what the routes really do. This is what makes Hoboken,\n // Manhattan and Long Island answerable at all.\n if (ZIP_REGION[zip5]) return ZIP_REGION[zip5];\n\n if (st === \"CT\") return \"Connecticut\";\n if (st === \"DC\") return \"New DC\";\n if (st === \"MD\") return \"New Maryland\";\n if (st === \"VA\") return \"New Virginia\";\n if (st === \"CA\") return \"Los Angeles\";\n if (st === \"PA\") return \"Greater Philadelphia Area\";\n\n if (st === \"FL\") {\n if (!z) return null;\n if (z >= 32901 && z <= 32999) return \"Greater Melbourne FL\";\n // Miami-Dade, Broward and Palm Beach. Everything else in the state — Tampa\n // Bay, Sarasota, Naples, Orlando, the north — is the \"Florida\" route.\n if (z >= 33000 && z <= 33499) return \"New Miami\";\n return \"Florida\";\n }\n\n if (st === \"NY\") {\n if (!z) return null;\n if (z >= 11200 && z <= 11299) return \"Brooklyn\";\n if (z >= 10300 && z <= 10399) return \"Richmond\"; // Staten Island\n if (z >= 10400 && z <= 10499) return \"Bronx\";\n if ((z >= 11100 && z <= 11199) || (z >= 11300 && z <= 11499)\n || (z >= 11600 && z <= 11699)) return \"Queens\";\n if (z >= 11000 && z <= 11099) return \"Nassau\";\n if (z >= 11500 && z <= 11599) return \"Nassau\";\n if (z >= 11900 && z <= 11999) return \"Suffolk\"; // East End\n if (z >= 10500 && z <= 10599) return \"West Chester\";\n if (z >= 10900 && z <= 10999) return \"Rockland\";\n // 11700-11899 is deliberately absent. Nassau and Suffolk interleave through\n // that band — Levittown 11756 is Nassau while its neighbours are Suffolk —\n // and a first draft of this function put Levittown on the wrong truck.\n //\n // Manhattan is absent for the same reason: Lower/Midtown/Upper do not split\n // on ZIP cleanly. Ask a person.\n return null;\n }\n\n // NEW JERSEY IS ABSENT ON PURPOSE, AND IT IS NOT AN OVERSIGHT.\n //\n // Its six regions are not geography. Checked against the org's own accounts\n // on 9/1/2026: of 270 NJ ZIPs holding four or more accounts, 103 have\n // accounts filed under MORE THAN ONE region. ZIP 07004 alone spans Essex,\n // North and West. Delivery_Region__c in New Jersey is a route assignment a\n // person makes from truck loading and history, so there is no ZIP rule to\n // write — any mapping would be a coin flip dressed up as logic.\n return null;\n}\n\n// PRICING IS THE ORG'S JOB. There was a hand-built rate table here, derived\n// from the live cart. It is gone, because the org already does this better:\n// on insert it assigns a pricebook by region and fills Price_Per_Bottle__c and\n// Price_Per_Delivery__c itself. Measured 9/1/2026 — Hudson came back 10.99/5.00\n// and Greater Philadelphia 13.99/8.00, on an account where nothing was written.\n//\n// WHAT THE ORG DOES ON ITS OWN when this file inserts an Account:\n// Create Custom Invoice for online orders → invoice header (fires on any\n// Account created with a\n// Description — our audit stamp\n// qualifies)\n// New Online Order → Opportunity, \"2 Bottles\",\n// StageName \"Delivery Due\"\n// pricebook automation → Price_Per_Bottle / _Delivery\n//\n// The one link still missing is a Recurring_Delivery_Product__c, which is what\n// produces Delivery_Line_Item__c records, which is what\n// \"Create RDP/DLI Invoice Lines\" turns into invoice lines.\n\n/**\n * Product2 ids for the 5-gallon PLASTIC bottles, by water type.\n *\n * Matched by ID, never by name. The catalogue's capitalisation is inconsistent\n * — \"Tribeca – SPRING – 5 Gallon Water Bottles\" on the 5-gallon but \"Spring\" on\n * the 3-gallon — and it uses an en dash, so string matching is a trap.\n *\n * GLASS IS ABSENT deliberately. It is a different SKU at a different price and\n * the chat tool does not capture bottle type, so a glass order must not be\n * silently set up as plastic.\n */\nconst PRODUCT_5GAL_PLASTIC: Record = {\n alkaline: \"01tPm00000CIwGLIA1\",\n spring: \"01tPm00000CIwBVIA1\",\n distilled: \"01tPm00000CJ493IAD\",\n};\n\n/**\n * Canonical spelling of the water type.\n *\n * The org's pricing flow decides the Spring/Distilled surcharge with a text\n * CONTAINS test, so \"spring\" from a chat transcript has to become \"Spring\"\n * before it is written or the customer is silently underbilled. Alkaline is the\n * default because it is what the store sells by default and what the bot quotes\n * when nobody says otherwise.\n */\nconst WATER_TYPES: Record = {\n alkaline: \"Alkaline\",\n spring: \"Spring\",\n distilled: \"Distilled\",\n};\n\nexport function canonicalWaterType(v: unknown): string {\n return WATER_TYPES[String(v ?? \"\").trim().toLowerCase()] ?? \"Alkaline\";\n}\n\n/**\n * Create the customer's standing order.\n *\n * THIS IS THE LAST LINK IN A CHAIN THE ORG OTHERWISE RUNS ITSELF. Inserting the\n * Account already fires the invoice header, the Delivery, and the pricebook.\n * What was missing is this: no Recurring Delivery Product means no Delivery\n * Line Items, which means \"Create RDP/DLI Invoice Lines\" has nothing to turn\n * into invoice lines and the customer's invoice stays empty.\n *\n * The price is READ BACK off the Account rather than calculated here. The org's\n * pricebook automation has already set Price_Per_Bottle__c by region, and it is\n * the authority — an earlier version of this file carried its own rate table\n * and the pricebook simply overwrote it.\n *\n * Best-effort: a failure here leaves the account standing and the office adds\n * the standing order by hand, which is a normal day. Losing a completed signup\n * because of it would not be.\n */\nasync function addStandingOrder(\n accountId: string,\n bottles: number,\n waterType: string | undefined,\n instanceUrl: string,\n token: string,\n): Promise {\n const productId = PRODUCT_5GAL_PLASTIC[canonicalWaterType(waterType).toLowerCase()];\n if (!productId) {\n console.log(`addStandingOrder: no product for waterType=${waterType}`);\n return null;\n }\n\n // Product_Name__c IS NOT OPTIONAL, and leaving it null is worse than it looks.\n //\n // \"Checkbox to Add RDP to Blank Delivery\" copies it into both Name and\n // Product_Name__c on the Delivery Line Item, where it is REQUIRED. An RDP\n // without it does not merely fail to bill — it makes the delivery permanently\n // unpullable, because the office's own Pull RDPs checkbox then throws\n // REQUIRED_FIELD_MISSING for that account. So we read the name off Product2\n // rather than hardcoding it (the catalogue's capitalisation and en dashes are\n // a trap), and if we cannot read it we create NO RDP at all. A missing\n // standing order is a phone call; a poisoned one breaks the office's button.\n const prod = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Product2/${productId}?fields=Name`,\n { headers: { Authorization: `Bearer ${token}` } },\n );\n const productName = prod.ok ? (await prod.json())?.Name ?? null : null;\n if (!productName) {\n console.error(\"addStandingOrder: cannot read Product2.Name — refusing to create a nameless RDP\");\n return null;\n }\n\n // Read the price the org just assigned. Not calculated, not guessed.\n const acc = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Account/${accountId}`\n + \"?fields=Price_Per_Bottle__c\",\n { headers: { Authorization: `Bearer ${token}` } },\n );\n const pricePerBottle = acc.ok ? (await acc.json())?.Price_Per_Bottle__c ?? null : null;\n if (pricePerBottle == null) {\n console.log(\"addStandingOrder: pricebook has not set Price_Per_Bottle__c yet\");\n }\n\n const res = await fetch(\n `${instanceUrl}/services/data/${API}/sobjects/Recurring_Delivery_Product__c`,\n {\n method: \"POST\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n Account_Relationship__c: accountId,\n Product__c: productId,\n Product_Name__c: productName,\n Quantity__c: bottles,\n Unit_Size__c: 1,\n Product_Family__c: \"Bottled Water\",\n RDP_Is_Active__c: true,\n ...(pricePerBottle != null ? { Price_Per_Item__c: pricePerBottle } : {}),\n }),\n },\n );\n\n if (!res.ok) {\n console.error(\"addStandingOrder failed:\", res.status, (await res.text()).slice(0, 250));\n return null;\n }\n const id = (await res.json())?.id ?? null;\n console.log(`addStandingOrder OK ${id} ${bottles} x ${waterType} @ ${pricePerBottle}`);\n return id;\n}\n\nexport type NewAccount = {\n name?: string;\n phone?: string;\n email?: string;\n street?: string;\n city?: string;\n state?: string;\n zip?: string;\n bottles?: number | string;\n waterType?: string;\n frequency?: string;\n cooler?: boolean;\n /**\n * The first-order total the bot quoted, INCLUDING any promotion it applied.\n *\n * This is the number the customer agreed to, so it is the number they are\n * charged: it lands on the signup invoice as Shipping and Handling, the same\n * slot a website order's checkout payment goes into. Without it there is no\n * charge and the pay link opens a $0 invoice, so the caller should always\n * send it.\n */\n orderTotal?: number | string;\n createdVia?: string;\n};\n\nexport type CreateResult =\n // standingOrder false means the account is real and billable but the recurring\n // delivery product did not get created, so the invoice will have no lines\n // until someone adds it. Surfaced rather than swallowed.\n | {\n ok: true;\n accountId: string;\n region: string;\n name: string;\n standingOrder: boolean;\n /** First invoice's pay link. Absent if the invoice was not raised. */\n payLink?: string;\n }\n | { ok: false; reason: \"missing\"; missing: string[] }\n | { ok: false; reason: \"region_unknown\"; message: string }\n | { ok: false; reason: \"duplicate\"; accountId: string; name: string }\n | { ok: false; reason: \"error\"; message: string };\n\n/** Escape a value for a SOQL string literal. */\nfunction soql(v: string): string {\n return String(v).replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\");\n}\n\n/**\n * Create the account.\n *\n * Checks for an existing account on the same phone FIRST. A duplicate is the\n * likeliest failure in practice — an existing customer asks the bot to \"set up\n * service\" for a second location — and silently creating a second account\n * splits their billing and their route history.\n */\nexport async function createAccount(input: NewAccount): Promise {\n const req: Record = {\n name: String(input.name ?? \"\").trim(),\n street: String(input.street ?? \"\").trim(),\n city: String(input.city ?? \"\").trim(),\n state: String(input.state ?? \"\").trim().toUpperCase(),\n zip: String(input.zip ?? \"\").trim(),\n };\n const missing = Object.entries(req).filter(([, v]) => !v).map(([k]) => k);\n\n const bottles = Number(input.bottles);\n if (!bottles || bottles < 1) missing.push(\"bottles\");\n\n const frequency = String(input.frequency ?? \"\").trim();\n if (!FREQUENCIES.includes(frequency)) missing.push(\"frequency\");\n\n if (missing.length) return { ok: false, reason: \"missing\", missing };\n\n const region = regionForZip(req.zip, req.state);\n if (!region) {\n return {\n ok: false,\n reason: \"region_unknown\",\n message: `No delivery region mapping for ${req.city}, ${req.state} ${req.zip}. `\n + `A team member needs to assign the route.`,\n };\n }\n\n const { access_token, instance_url } = await getAccessToken();\n\n // Duplicate check on phone, which is how this org identifies people.\n const digits = String(input.phone ?? \"\").replace(/[^0-9]/g, \"\").slice(-10);\n if (digits.length === 10) {\n const pattern = `%${digits.slice(0, 3)}%${digits.slice(3, 6)}%${digits.slice(6)}%`;\n const res = await fetch(\n `${instance_url}/services/data/${API}/query?q=`\n + encodeURIComponent(`SELECT Id, Name FROM Account WHERE Phone LIKE '${soql(pattern)}' LIMIT 1`),\n { headers: { Authorization: `Bearer ${access_token}` } },\n );\n if (res.ok) {\n const found = (await res.json())?.records?.[0];\n if (found) {\n return { ok: false, reason: \"duplicate\", accountId: found.Id, name: found.Name };\n }\n }\n }\n\n const waterType = canonicalWaterType(input.waterType);\n\n // THE QUOTED TOTAL IS ALSO THE TRIGGER, not just a number to store.\n // \"Tribeca Chat First Invoice\" keys on Chat_Order_Total__c being non-null —\n // it is the one field only this bot ever writes, which is why it is a safer\n // marker than Description (a long text area, which does not evaluate through\n // a cross-object lookup and silently matched nothing). No total means no\n // charge on the signup invoice, so it is worth saying so out loud.\n const orderTotal = Number(input.orderTotal);\n const hasTotal = Number.isFinite(orderTotal) && orderTotal > 0;\n if (!hasTotal) {\n console.warn(\"createAccount: no orderTotal supplied — signup invoice will be $0\");\n }\n\n const body: Record = {\n Name: req.name,\n Phone: input.phone ?? null,\n // Shipping is what the Shipping_Address_Required validation rule checks.\n // Billing is copied from it so invoices have somewhere to go.\n ShippingStreet: req.street,\n ShippingCity: req.city,\n ShippingState: req.state,\n ShippingPostalCode: req.zip,\n BillingStreet: req.street,\n BillingCity: req.city,\n BillingState: req.state,\n BillingPostalCode: req.zip,\n Amount_of_Bottles__c: bottles,\n Frequency__c: frequency,\n Delivery_Region__c: region,\n // BOTH OF THESE ARE READ BY BILLING, not decoration.\n //\n // Email_Address__c becomes fw1__Recipient_Email__c on the recurring\n // invoice — leave it null and the customer is billed but never receives\n // the invoice, which is the worst of both outcomes. It used to live only\n // inside the Description stamp, where nothing could read it.\n //\n // Water_Cooler__c is matched against the literal string \"Cooler Needed\" by\n // \"create line items for online orders\"; that is the only thing that adds\n // the $8 cooler line. It is a TEXT field, not a picklist, so the wording\n // has to be exact. Left null when no cooler is wanted, so a customer can\n // never be charged for one they did not ask for.\n ...(input.email ? { Email_Address__c: input.email } : {}),\n ...(input.cooler ? { Water_Cooler__c: \"Cooler Needed\" } : {}),\n // WATER TYPE SETS THE PRICE, and it does so through a text blob.\n //\n // \"Update Delivery Region for Online Orders\" adds $1/bottle for Spring and\n // Distilled, and it decides by testing whether Online_Product_Variation__c\n // CONTAINS \"Spring\" or \"Distilled\". That field is the raw WooCommerce\n // variation text. This file used to leave it null, so a Spring signup was\n // priced as Alkaline — and because the recurring invoice reads\n // Price_Per_Bottle__c straight off the Account, that underbilled the\n // customer $1/bottle every cycle, not once. Measured against a real Spring\n // account in Midtown on 9/1/2026: 13.49 with the surcharge, 12.49 without.\n //\n // ONLY the water-type line is written, deliberately. The same flow reads\n // this field for frequency (\"Frequency:

Weekly

\"), glass bottles\n // (\"Amount of Glass Bottles\") and the two Florida routes (\"Miami Metro\n // Area, Dade County\"). A fuller blob would hand it decisions this file\n // already makes and could move an account onto another truck, so the\n // string stays the one token that has to be there. Format — including the\n // HTML — matches what the website writes.\n Water_Type__c: waterType,\n Online_Product_Variation__c: `Water Type:

${waterType}

Weekly

${waterType}

`,\n ...(hasTotal ? { Chat_Order_Total__c: orderTotal } : {}),\n ...CARD_ON_FILE,\n // WE DO NOT SET PRICING. The org assigns a pricebook on insert and fills\n // Price_Per_Bottle__c / Price_Per_Delivery__c itself, per region. Proven\n // 9/1/2026: an account created with NO price written came back with 13.99\n // and 8.00 for Greater Philadelphia, and a Hudson account we DID write\n // 11.99 to came back 10.99 — the org overwrote us. Writing a rate here is\n // redundant at best and fights the pricebook at worst.\n // Stamped so every bot-created account is findable in one query. Without\n // this there is no way to audit what the bot made, or to unpick it.\n Description: `Created by ${input.createdVia ?? \"Tribeca chat\"} on `\n + new Date().toISOString().slice(0, 10)\n + (input.email ? ` · ${input.email}` : \"\")\n + (input.waterType ? ` · ${input.waterType}` : \"\")\n + (input.cooler ? \" · cooler requested\" : \"\"),\n };\n\n const res = await fetch(`${instance_url}/services/data/${API}/sobjects/Account`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(body),\n });\n\n const out = await res.json().catch(() => null);\n if (!res.ok || !out?.id) {\n const err = Array.isArray(out) ? out[0] : null;\n console.error(\"createAccount failed:\", res.status, JSON.stringify(out)?.slice(0, 600));\n\n // SALESFORCE'S DUPLICATE RULE TALKS TO ADMINS, NOT CUSTOMERS.\n //\n // Its message is the literal \"Use one of these records?\" — a prompt meant\n // for someone looking at a list of matches. Relayed by a chat bot it is\n // nonsense, and that is exactly what happened in testing on 9/1/2026.\n //\n // Note this is NOT the same as our own phone check above. The org rule is\n // a FUZZY name-and-address match, and it is configured allowSave, i.e. a\n // warning the office may click straight past. So a hit here is not proof\n // of a duplicate — two different people in one Hoboken apartment building\n // will trip it. We still refuse rather than send the insert back with the\n // bypass header, because silently merging two customers' billing is far\n // worse than handing the signup to a person. Reported as a duplicate so\n // the bot says something true, with the matched account logged for the\n // office to judge.\n const match = err?.duplicateResult?.matchResults?.[0]?.matchRecords?.[0]?.record;\n if (err?.duplicateResult || err?.errorCode === \"DUPLICATES_DETECTED\") {\n console.warn(\n `createAccount blocked by ${err?.duplicateResult?.duplicateRule ?? \"duplicate rule\"}`\n + ` — matched ${match?.Id ?? \"(unreadable)\"} ${match?.Name ?? \"\"}`,\n );\n if (match?.Id) {\n return { ok: false, reason: \"duplicate\", accountId: match.Id, name: match.Name ?? req.name };\n }\n return {\n ok: false,\n reason: \"error\",\n message: \"This looks close to an account we already have, so a team member \"\n + \"needs to check it before setting up service.\",\n };\n }\n\n // Everything else gets a customer-safe sentence. Raw Salesforce errors name\n // fields, rules and objects, and none of that belongs in front of a\n // visitor — it is logged above, which is where the office can find it.\n return {\n ok: false,\n reason: \"error\",\n message: \"The account could not be created right now. A team member can finish setting it up.\",\n };\n }\n\n console.log(`createAccount OK ${out.id} region=${region} name=${req.name}`);\n\n // INVOICING IS SALESFORCE'S JOB, NOT OURS.\n //\n // Inserting the Account fires the org's own \"Create Custom Invoice for online\n // orders\" flow, and \"Create RDP/DLI Invoice Lines\" fills the lines in once a\n // Recurring Delivery Product exists. We deliberately do not write invoice\n // records from here: the integration user cannot touch fw1__Invoice__c at all\n // (FinancialForce licence, not field security — it answers \"sObject type is\n // not supported\"), and reaching around the org's automation to bill a\n // customer from an HTTP call would be the wrong place for it even if it\n // worked. An earlier version tried and is deliberately removed.\n //\n // What we DO supply is the one input the org's automation cannot invent: the\n // standing order. Awaited rather than fired and forgotten, because Val Town\n // stops the isolate when the response is sent and a floating promise would be\n // killed mid-flight — intermittently, which is the worst way for it to fail.\n const rdpId = await addStandingOrder(\n out.id, bottles, input.waterType, instance_url, access_token,\n ).catch((e) => {\n console.error(\"addStandingOrder threw:\", e);\n return null;\n });\n\n // THE PAY LINK IS SAFE HERE, AND ONLY HERE. READ THIS BEFORE COPYING IT.\n //\n // invoice.ts refuses to hand out this same URL unless the visitor is signed\n // in to WordPress, and that rule is right: there the invoice is reached by\n // LOOKING SOMEONE UP from a phone number, a phone number is not proof of\n // identity, and the page shows the invoice's line items and updates the card\n // on file. Handing it to the wrong person is a real disclosure.\n //\n // A signup is not a lookup. This account did not exist a second ago, the\n // visitor supplied every field of it in this conversation, and the invoice\n // was raised for them from those answers. There is no other customer whose\n // data could be exposed, because there is no search. Do NOT lift this into\n // any path that finds an EXISTING account — that is exactly the case\n // invoice.ts is protecting.\n //\n // The link is written to the Account by \"Tribeca Chat First Invoice\", which\n // runs during the RDP insert above; the chat cannot read fw1__Invoice__c\n // itself to learn the id. No RDP means no invoice and no link, which is why\n // this is only attempted when one was created.\n let payLink: string | undefined;\n if (rdpId) {\n try {\n const linked = await fetch(\n `${instance_url}/services/data/${API}/sobjects/Account/${out.id}`\n + \"?fields=Most_Recent_Invoice_Link__c,Price_Per_Bottle__c,Price_Per_Delivery__c\",\n { headers: { Authorization: `Bearer ${access_token}` } },\n );\n const acc2 = linked.ok ? await linked.json() : null;\n const url = acc2?.Most_Recent_Invoice_Link__c ?? null;\n if (url) payLink = String(url);\n else console.log(\"createAccount: first invoice raised no pay link\");\n\n // AUDIT THE MODEL'S ARITHMETIC AGAINST THE ORG'S OWN PRICES.\n //\n // orderTotal is the one number in this file that a language model\n // supplies, and it is the number the customer is charged. Everything\n // else here is deterministic by design. So it is checked against what\n // the org itself assigned: bottles x Price_Per_Bottle__c, plus the\n // delivery fee, plus a cooler, plus the $5-per-bottle first-order\n // deposit. A quote BELOW that is expected and fine — the 25for2025\n // promotion is a real discount. A quote ABOVE it means the model\n // invented a number, and the customer is being overcharged.\n //\n // Logged rather than corrected: the account and invoice already exist by\n // now, and quietly rewriting what a customer was told they would pay\n // would be its own kind of wrong. This is for the office to catch.\n const ppb = Number(acc2?.Price_Per_Bottle__c);\n const ppd = Number(acc2?.Price_Per_Delivery__c);\n if (hasTotal && Number.isFinite(ppb) && Number.isFinite(ppd)) {\n const ceiling = bottles * ppb + ppd + (input.cooler ? 8 : 0) + bottles * 5;\n if (orderTotal > ceiling + 0.01) {\n console.error(\n `createAccount OVERCHARGE CHECK FAILED on ${out.id}: quoted ${orderTotal.toFixed(2)}`\n + ` exceeds ${ceiling.toFixed(2)} (${bottles} x ${ppb} + ${ppd} delivery`\n + `${input.cooler ? \" + 8 cooler\" : \"\"} + ${bottles * 5} deposit). Review this invoice.`,\n );\n }\n }\n } catch (e) {\n // A missing link must never lose the signup — the account is already real.\n console.error(\"createAccount: pay link read failed:\", e);\n }\n }\n\n return {\n ok: true,\n accountId: out.id,\n region,\n name: req.name,\n standingOrder: !!rdpId,\n ...(payLink ? { payLink } : {}),\n };\n}\n","createdAt",["D",1788294662160],"branchVersion","branchId","ceda7ac1-4fbd-45e5-ab28-65082ea4218c","id","0979b5fe-99f9-4673-be24-063bb9928dc3","tribeca-salesforce-agent",["D",1785197056244],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Read-only Salesforce Account/Opportunity API access","imageUrl","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","6093920c-8a18-11f1-a4ec-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe3-60c5-70ee-a317-3aded0417f73","tursoName","0979b5fe99f94673be24063bb9928dc3","tursoHostname","0979b5fe99f94673be24063bb9928dc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789491713377],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":-5},"org",{"_100":99,"_101":102,"_103":-5,"_18":-5,"_104":105,"_106":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",290,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","tribeca_airep","handle","displayName","Tribeca_AIrep","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":241,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":242,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":243,"_84":244,"_86":245,"_88":25},"tree",[208,209,210,211,212,213,214,215],"files",[208,209,210,211,212,213,214,215],"counts",{"_198":63,"_199":194,"_200":63,"_201":202,"_203":204},"contents",[130,131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":191,"_32":192,"_30":193,"_141":-5,"_41":42,"_40":194,"_143":59,"_38":195,"_13":63,"_33":20,"_35":196,"_24":25,"_146":-5,"_27":197},{"_43":182,"_32":183,"_30":184,"_141":-5,"_41":42,"_40":185,"_143":25,"_38":186,"_13":187,"_33":153,"_35":188,"_24":25,"_146":189,"_27":190},{"_43":178,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":25,"_38":179,"_13":180,"_33":34,"_35":37,"_24":25,"_146":-5,"_27":181},{"_43":171,"_32":172,"_30":173,"_141":-5,"_41":42,"_40":174,"_143":59,"_38":175,"_13":151,"_33":34,"_35":176,"_24":25,"_146":-5,"_27":177},{"_43":164,"_32":165,"_30":57,"_141":-5,"_41":42,"_40":166,"_143":25,"_38":167,"_13":168,"_33":153,"_35":169,"_24":25,"_146":-5,"_27":170},{"_43":156,"_32":157,"_30":158,"_141":-5,"_41":42,"_40":159,"_143":59,"_38":160,"_13":161,"_33":34,"_35":162,"_24":25,"_146":-5,"_27":163},{"_43":148,"_32":149,"_30":150,"_141":-5,"_41":42,"_40":151,"_143":59,"_38":152,"_13":63,"_33":153,"_35":154,"_24":25,"_146":-5,"_27":155},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":25,"_38":144,"_13":63,"_33":34,"_35":145,"_24":25,"_146":-5,"_27":147},"dde2dd34-1e94-4501-9d63-5eeeac4cd35a","zip-regions.ts","d4036134-a621-11f1-94d5-1607ee4eb77e","parentId",54,"latest",["D",1788279964609],"// ZIP to Delivery_Region__c, MEASURED FROM THE ORG'S OWN ACCOUNTS on 9/1/2026.\n//\n// WHY THIS IS A TABLE AND NOT A RULE\n// New Jersey's regions are route names, not geography — Essex, Hudson, North,\n// West, South, Jersey Shore — and no formula reproduces them. Manhattan splits\n// three ways along lines ZIPs do not follow. Nassau and Suffolk interleave\n// through the 117xx band. Every attempt to write this as logic put someone on\n// the wrong truck: a first draft sent Levittown 11756 to Suffolk when it is\n// Nassau, and refusing all of New Jersey turned away a Hoboken signup that the\n// office files under Hudson 118 times out of 131.\n//\n// So it is measured instead. Each ZIP below is where the office ACTUALLY files\n// accounts, from a GROUP BY over live Account records. A ZIP earns a place here\n// only with at least 4 accounts AND at least 70% of them in one region.\n//\n// 161 further ZIPs were genuinely split — 07004 runs Essex 23 / North 14 /\n// West 7 / South 1 — and are deliberately ABSENT, so they still go to a human.\n// If the office itself does not treat a ZIP consistently, no lookup should\n// pretend otherwise.\n//\n// REFRESH (aggregate queries cannot page, so one state at a time):\n// sf data query --target-org info@tribecabeverage.com --json --query // \"SELECT ShippingPostalCode, Delivery_Region__c, COUNT(Id) FROM Account\n// WHERE ShippingState = 'NJ' AND Delivery_Region__c != null\n// AND ShippingPostalCode != null\n// GROUP BY ShippingPostalCode, Delivery_Region__c LIMIT 2000\"\n\nexport const ZIP_REGION: Record = {\n // Bronx (25 ZIPs)\n \"10451\": \"Bronx\", \"10452\": \"Bronx\", \"10453\": \"Bronx\", \"10454\": \"Bronx\", \"10455\": \"Bronx\",\n \"10456\": \"Bronx\", \"10457\": \"Bronx\", \"10458\": \"Bronx\", \"10459\": \"Bronx\", \"10460\": \"Bronx\",\n \"10461\": \"Bronx\", \"10462\": \"Bronx\", \"10463\": \"Bronx\", \"10464\": \"Bronx\", \"10465\": \"Bronx\",\n \"10466\": \"Bronx\", \"10467\": \"Bronx\", \"10468\": \"Bronx\", \"10469\": \"Bronx\", \"10470\": \"Bronx\",\n \"10471\": \"Bronx\", \"10472\": \"Bronx\", \"10473\": \"Bronx\", \"10474\": \"Bronx\", \"10475\": \"Bronx\",\n // Brooklyn (39 ZIPs)\n \"11201\": \"Brooklyn\", \"11203\": \"Brooklyn\", \"11204\": \"Brooklyn\", \"11205\": \"Brooklyn\", \"11206\": \"Brooklyn\",\n \"11207\": \"Brooklyn\", \"11208\": \"Brooklyn\", \"11209\": \"Brooklyn\", \"11210\": \"Brooklyn\", \"11211\": \"Brooklyn\",\n \"11212\": \"Brooklyn\", \"11213\": \"Brooklyn\", \"11214\": \"Brooklyn\", \"11215\": \"Brooklyn\", \"11216\": \"Brooklyn\",\n \"11217\": \"Brooklyn\", \"11218\": \"Brooklyn\", \"11219\": \"Brooklyn\", \"11220\": \"Brooklyn\", \"11221\": \"Brooklyn\",\n \"11222\": \"Brooklyn\", \"11223\": \"Brooklyn\", \"11224\": \"Brooklyn\", \"11225\": \"Brooklyn\", \"11226\": \"Brooklyn\",\n \"11228\": \"Brooklyn\", \"11229\": \"Brooklyn\", \"11230\": \"Brooklyn\", \"11231\": \"Brooklyn\", \"11232\": \"Brooklyn\",\n \"11233\": \"Brooklyn\", \"11234\": \"Brooklyn\", \"11235\": \"Brooklyn\", \"11236\": \"Brooklyn\", \"11237\": \"Brooklyn\",\n \"11238\": \"Brooklyn\", \"11239\": \"Brooklyn\", \"11242\": \"Brooklyn\", \"11249\": \"Brooklyn\",\n // Dutchess (5 ZIPs)\n \"12508\": \"Dutchess\", \"12524\": \"Dutchess\", \"12572\": \"Dutchess\", \"12590\": \"Dutchess\", \"12603\": \"Dutchess\",\n // Essex (20 ZIPs)\n \"07003\": \"Essex\", \"07009\": \"Essex\", \"07017\": \"Essex\", \"07018\": \"Essex\", \"07028\": \"Essex\",\n \"07040\": \"Essex\", \"07050\": \"Essex\", \"07068\": \"Essex\", \"07078\": \"Essex\", \"07102\": \"Essex\",\n \"07103\": \"Essex\", \"07104\": \"Essex\", \"07105\": \"Essex\", \"07106\": \"Essex\", \"07107\": \"Essex\",\n \"07108\": \"Essex\", \"07109\": \"Essex\", \"07111\": \"Essex\", \"07112\": \"Essex\", \"07114\": \"Essex\",\n // Hudson (12 ZIPs)\n \"07002\": \"Hudson\", \"07030\": \"Hudson\", \"07086\": \"Hudson\", \"07087\": \"Hudson\", \"07093\": \"Hudson\",\n \"07302\": \"Hudson\", \"07304\": \"Hudson\", \"07305\": \"Hudson\", \"07306\": \"Hudson\", \"07307\": \"Hudson\",\n \"07310\": \"Hudson\", \"07311\": \"Hudson\",\n // Jersey Shore (3 ZIPs)\n \"07716\": \"Jersey Shore\", \"07758\": \"Jersey Shore\", \"08721\": \"Jersey Shore\",\n // Lower Manhattan (12 ZIPs)\n \"10002\": \"Lower Manhattan\", \"10004\": \"Lower Manhattan\", \"10005\": \"Lower Manhattan\", \"10006\": \"Lower Manhattan\", \"10007\": \"Lower Manhattan\",\n \"10009\": \"Lower Manhattan\", \"10012\": \"Lower Manhattan\", \"10013\": \"Lower Manhattan\", \"10014\": \"Lower Manhattan\", \"10038\": \"Lower Manhattan\",\n \"10280\": \"Lower Manhattan\", \"10282\": \"Lower Manhattan\",\n // Midtown Manhattan (13 ZIPs)\n \"10017\": \"Midtown Manhattan\", \"10018\": \"Midtown Manhattan\", \"10019\": \"Midtown Manhattan\", \"10020\": \"Midtown Manhattan\", \"10022\": \"Midtown Manhattan\",\n \"10036\": \"Midtown Manhattan\", \"10110\": \"Midtown Manhattan\", \"10111\": \"Midtown Manhattan\", \"10123\": \"Midtown Manhattan\", \"10155\": \"Midtown Manhattan\",\n \"10165\": \"Midtown Manhattan\", \"10170\": \"Midtown Manhattan\", \"10174\": \"Midtown Manhattan\",\n // Nassau (58 ZIPs)\n \"11003\": \"Nassau\", \"11005\": \"Nassau\", \"11010\": \"Nassau\", \"11021\": \"Nassau\", \"11023\": \"Nassau\",\n \"11024\": \"Nassau\", \"11030\": \"Nassau\", \"11040\": \"Nassau\", \"11042\": \"Nassau\", \"11050\": \"Nassau\",\n \"11096\": \"Nassau\", \"11501\": \"Nassau\", \"11507\": \"Nassau\", \"11510\": \"Nassau\", \"11514\": \"Nassau\",\n \"11516\": \"Nassau\", \"11518\": \"Nassau\", \"11520\": \"Nassau\", \"11530\": \"Nassau\", \"11542\": \"Nassau\",\n \"11545\": \"Nassau\", \"11550\": \"Nassau\", \"11552\": \"Nassau\", \"11553\": \"Nassau\", \"11554\": \"Nassau\",\n \"11557\": \"Nassau\", \"11558\": \"Nassau\", \"11559\": \"Nassau\", \"11560\": \"Nassau\", \"11561\": \"Nassau\",\n \"11563\": \"Nassau\", \"11565\": \"Nassau\", \"11566\": \"Nassau\", \"11568\": \"Nassau\", \"11570\": \"Nassau\",\n \"11572\": \"Nassau\", \"11576\": \"Nassau\", \"11577\": \"Nassau\", \"11579\": \"Nassau\", \"11580\": \"Nassau\",\n \"11581\": \"Nassau\", \"11590\": \"Nassau\", \"11596\": \"Nassau\", \"11598\": \"Nassau\", \"11710\": \"Nassau\",\n \"11714\": \"Nassau\", \"11735\": \"Nassau\", \"11753\": \"Nassau\", \"11756\": \"Nassau\", \"11758\": \"Nassau\",\n \"11762\": \"Nassau\", \"11771\": \"Nassau\", \"11783\": \"Nassau\", \"11791\": \"Nassau\", \"11793\": \"Nassau\",\n \"11797\": \"Nassau\", \"11801\": \"Nassau\", \"11803\": \"Nassau\",\n // North (79 ZIPs)\n \"07010\": \"North\", \"07011\": \"North\", \"07012\": \"North\", \"07013\": \"North\", \"07014\": \"North\",\n \"07024\": \"North\", \"07026\": \"North\", \"07031\": \"North\", \"07055\": \"North\", \"07057\": \"North\",\n \"07070\": \"North\", \"07071\": \"North\", \"07072\": \"North\", \"07073\": \"North\", \"07074\": \"North\",\n \"07075\": \"North\", \"07401\": \"North\", \"07407\": \"North\", \"07410\": \"North\", \"07417\": \"North\",\n \"07420\": \"North\", \"07421\": \"North\", \"07422\": \"North\", \"07423\": \"North\", \"07424\": \"North\",\n \"07430\": \"North\", \"07432\": \"North\", \"07436\": \"North\", \"07446\": \"North\", \"07450\": \"North\",\n \"07452\": \"North\", \"07456\": \"North\", \"07457\": \"North\", \"07458\": \"North\", \"07463\": \"North\",\n \"07470\": \"North\", \"07481\": \"North\", \"07501\": \"North\", \"07502\": \"North\", \"07503\": \"North\",\n \"07504\": \"North\", \"07505\": \"North\", \"07506\": \"North\", \"07508\": \"North\", \"07512\": \"North\",\n \"07513\": \"North\", \"07514\": \"North\", \"07522\": \"North\", \"07524\": \"North\", \"07601\": \"North\",\n \"07604\": \"North\", \"07605\": \"North\", \"07607\": \"North\", \"07621\": \"North\", \"07624\": \"North\",\n \"07626\": \"North\", \"07628\": \"North\", \"07630\": \"North\", \"07631\": \"North\", \"07632\": \"North\",\n \"07640\": \"North\", \"07642\": \"North\", \"07643\": \"North\", \"07644\": \"North\", \"07645\": \"North\",\n \"07646\": \"North\", \"07649\": \"North\", \"07652\": \"North\", \"07656\": \"North\", \"07657\": \"North\",\n \"07660\": \"North\", \"07661\": \"North\", \"07663\": \"North\", \"07666\": \"North\", \"07670\": \"North\",\n \"07675\": \"North\", \"07677\": \"North\", \"07874\": \"North\", \"07931\": \"North\",\n // Orange (11 ZIPs)\n \"10918\": \"Orange\", \"10924\": \"Orange\", \"10925\": \"Orange\", \"10940\": \"Orange\", \"10941\": \"Orange\",\n \"10950\": \"Orange\", \"10990\": \"Orange\", \"10992\": \"Orange\", \"12518\": \"Orange\", \"12550\": \"Orange\",\n \"12553\": \"Orange\",\n // Queens (56 ZIPs)\n \"11004\": \"Queens\", \"11101\": \"Queens\", \"11102\": \"Queens\", \"11103\": \"Queens\", \"11104\": \"Queens\",\n \"11105\": \"Queens\", \"11106\": \"Queens\", \"11109\": \"Queens\", \"11354\": \"Queens\", \"11355\": \"Queens\",\n \"11356\": \"Queens\", \"11357\": \"Queens\", \"11358\": \"Queens\", \"11360\": \"Queens\", \"11361\": \"Queens\",\n \"11363\": \"Queens\", \"11364\": \"Queens\", \"11365\": \"Queens\", \"11366\": \"Queens\", \"11367\": \"Queens\",\n \"11368\": \"Queens\", \"11369\": \"Queens\", \"11370\": \"Queens\", \"11372\": \"Queens\", \"11373\": \"Queens\",\n \"11374\": \"Queens\", \"11375\": \"Queens\", \"11377\": \"Queens\", \"11378\": \"Queens\", \"11379\": \"Queens\",\n \"11385\": \"Queens\", \"11411\": \"Queens\", \"11412\": \"Queens\", \"11413\": \"Queens\", \"11414\": \"Queens\",\n \"11415\": \"Queens\", \"11416\": \"Queens\", \"11417\": \"Queens\", \"11418\": \"Queens\", \"11419\": \"Queens\",\n \"11420\": \"Queens\", \"11421\": \"Queens\", \"11422\": \"Queens\", \"11423\": \"Queens\", \"11427\": \"Queens\",\n \"11428\": \"Queens\", \"11429\": \"Queens\", \"11430\": \"Queens\", \"11432\": \"Queens\", \"11433\": \"Queens\",\n \"11434\": \"Queens\", \"11435\": \"Queens\", \"11436\": \"Queens\", \"11691\": \"Queens\", \"11692\": \"Queens\",\n \"11693\": \"Queens\",\n // Richmond (12 ZIPs)\n \"10301\": \"Richmond\", \"10302\": \"Richmond\", \"10303\": \"Richmond\", \"10304\": \"Richmond\", \"10305\": \"Richmond\",\n \"10306\": \"Richmond\", \"10307\": \"Richmond\", \"10308\": \"Richmond\", \"10309\": \"Richmond\", \"10310\": \"Richmond\",\n \"10312\": \"Richmond\", \"10314\": \"Richmond\",\n // Rockland (16 ZIPs)\n \"10923\": \"Rockland\", \"10927\": \"Rockland\", \"10952\": \"Rockland\", \"10954\": \"Rockland\", \"10956\": \"Rockland\",\n \"10960\": \"Rockland\", \"10962\": \"Rockland\", \"10964\": \"Rockland\", \"10965\": \"Rockland\", \"10970\": \"Rockland\",\n \"10977\": \"Rockland\", \"10980\": \"Rockland\", \"10983\": \"Rockland\", \"10989\": \"Rockland\", \"10994\": \"Rockland\",\n \"12779\": \"Rockland\",\n // South (49 ZIPs)\n \"07008\": \"South\", \"07023\": \"South\", \"07036\": \"South\", \"07060\": \"South\", \"07063\": \"South\",\n \"07065\": \"South\", \"07067\": \"South\", \"07095\": \"South\", \"07730\": \"South\", \"07732\": \"South\",\n \"07748\": \"South\", \"07751\": \"South\", \"07760\": \"South\", \"08005\": \"South\", \"08012\": \"South\",\n \"08016\": \"South\", \"08021\": \"South\", \"08043\": \"South\", \"08046\": \"South\", \"08050\": \"South\",\n \"08060\": \"South\", \"08068\": \"South\", \"08075\": \"South\", \"08081\": \"South\", \"08094\": \"South\",\n \"08103\": \"South\", \"08109\": \"South\", \"08234\": \"South\", \"08518\": \"South\", \"08534\": \"South\",\n \"08536\": \"South\", \"08540\": \"South\", \"08609\": \"South\", \"08610\": \"South\", \"08611\": \"South\",\n \"08618\": \"South\", \"08648\": \"South\", \"08736\": \"South\", \"08759\": \"South\", \"08837\": \"South\",\n \"08846\": \"South\", \"08852\": \"South\", \"08854\": \"South\", \"08859\": \"South\", \"08861\": \"South\",\n \"08863\": \"South\", \"08879\": \"South\", \"08886\": \"South\", \"08904\": \"South\",\n // Suffolk (45 ZIPs)\n \"11702\": \"Suffolk\", \"11703\": \"Suffolk\", \"11704\": \"Suffolk\", \"11706\": \"Suffolk\", \"11716\": \"Suffolk\",\n \"11720\": \"Suffolk\", \"11721\": \"Suffolk\", \"11725\": \"Suffolk\", \"11727\": \"Suffolk\", \"11729\": \"Suffolk\",\n \"11741\": \"Suffolk\", \"11742\": \"Suffolk\", \"11743\": \"Suffolk\", \"11746\": \"Suffolk\", \"11751\": \"Suffolk\",\n \"11763\": \"Suffolk\", \"11764\": \"Suffolk\", \"11766\": \"Suffolk\", \"11767\": \"Suffolk\", \"11768\": \"Suffolk\",\n \"11772\": \"Suffolk\", \"11777\": \"Suffolk\", \"11779\": \"Suffolk\", \"11782\": \"Suffolk\", \"11787\": \"Suffolk\",\n \"11788\": \"Suffolk\", \"11795\": \"Suffolk\", \"11798\": \"Suffolk\", \"11901\": \"Suffolk\", \"11930\": \"Suffolk\",\n \"11932\": \"Suffolk\", \"11933\": \"Suffolk\", \"11937\": \"Suffolk\", \"11940\": \"Suffolk\", \"11946\": \"Suffolk\",\n \"11952\": \"Suffolk\", \"11953\": \"Suffolk\", \"11954\": \"Suffolk\", \"11962\": \"Suffolk\", \"11963\": \"Suffolk\",\n \"11967\": \"Suffolk\", \"11968\": \"Suffolk\", \"11971\": \"Suffolk\", \"11975\": \"Suffolk\", \"11976\": \"Suffolk\",\n // Upper Manhattan (20 ZIPs)\n \"10021\": \"Upper Manhattan\", \"10023\": \"Upper Manhattan\", \"10024\": \"Upper Manhattan\", \"10025\": \"Upper Manhattan\", \"10026\": \"Upper Manhattan\",\n \"10027\": \"Upper Manhattan\", \"10028\": \"Upper Manhattan\", \"10029\": \"Upper Manhattan\", \"10030\": \"Upper Manhattan\", \"10031\": \"Upper Manhattan\",\n \"10032\": \"Upper Manhattan\", \"10033\": \"Upper Manhattan\", \"10034\": \"Upper Manhattan\", \"10035\": \"Upper Manhattan\", \"10037\": \"Upper Manhattan\",\n \"10039\": \"Upper Manhattan\", \"10040\": \"Upper Manhattan\", \"10069\": \"Upper Manhattan\", \"10075\": \"Upper Manhattan\", \"10128\": \"Upper Manhattan\",\n // West (23 ZIPs)\n \"07035\": \"West\", \"07045\": \"West\", \"07046\": \"West\", \"07054\": \"West\", \"07082\": \"West\",\n \"07801\": \"West\", \"07821\": \"West\", \"07828\": \"West\", \"07830\": \"West\", \"07836\": \"West\",\n \"07840\": \"West\", \"07849\": \"West\", \"07850\": \"West\", \"07852\": \"West\", \"07860\": \"West\",\n \"07869\": \"West\", \"07930\": \"West\", \"07940\": \"West\", \"07950\": \"West\", \"07960\": \"West\",\n \"07981\": \"West\", \"08530\": \"West\", \"08809\": \"West\",\n // West Chester (45 ZIPs)\n \"10504\": \"West Chester\", \"10506\": \"West Chester\", \"10514\": \"West Chester\", \"10520\": \"West Chester\", \"10526\": \"West Chester\",\n \"10528\": \"West Chester\", \"10530\": \"West Chester\", \"10533\": \"West Chester\", \"10536\": \"West Chester\", \"10538\": \"West Chester\",\n \"10541\": \"West Chester\", \"10543\": \"West Chester\", \"10549\": \"West Chester\", \"10550\": \"West Chester\", \"10552\": \"West Chester\",\n \"10553\": \"West Chester\", \"10560\": \"West Chester\", \"10562\": \"West Chester\", \"10570\": \"West Chester\", \"10573\": \"West Chester\",\n \"10577\": \"West Chester\", \"10580\": \"West Chester\", \"10583\": \"West Chester\", \"10589\": \"West Chester\", \"10590\": \"West Chester\",\n \"10591\": \"West Chester\", \"10595\": \"West Chester\", \"10597\": \"West Chester\", \"10598\": \"West Chester\", \"10601\": \"West Chester\",\n \"10603\": \"West Chester\", \"10604\": \"West Chester\", \"10605\": \"West Chester\", \"10606\": \"West Chester\", \"10701\": \"West Chester\",\n \"10703\": \"West Chester\", \"10706\": \"West Chester\", \"10707\": \"West Chester\", \"10708\": \"West Chester\", \"10709\": \"West Chester\",\n \"10710\": \"West Chester\", \"10801\": \"West Chester\", \"10803\": \"West Chester\", \"10804\": \"West Chester\", \"10805\": \"West Chester\",\n};\n","label",[139],"dd222e53-0f2b-4397-a2e2-a850cba4c1bc","summarize.ts","f2354b70-8a80-11f1-b11c-1607ee4eb77e",4,["D",1785242184864],"http","function buildPrompt(emailText: string, account: unknown, opportunity: unknown): string {\n return `You help staff at a bottled water delivery company (Tribeca Beverage) quickly triage customer emails.\n\nCustomer email:\n\"\"\"\n${emailText}\n\"\"\"\n\nKnown Salesforce Account data (read-only):\n${JSON.stringify(account)}\n\nKnown Salesforce latest delivery record (Opportunity, read-only):\n${JSON.stringify(opportunity)}\n\nRespond with ONLY valid JSON, no markdown fences, in this exact shape:\n{\"summary\": \"one or two sentence plain-English summary of what the customer wants\", \"recommendation\": \"a specific, actionable recommendation for what staff should check or update in Salesforce, referencing exact field names when relevant; say 'No action needed' if nothing needs changing\"}`;\n}\n\nasync function callGemini(prompt: string): Promise<{ summary: string; recommendation: string }> {\n const apiKey = Deno.env.get(\"GEMINI_API_KEY\")!;\n const res = await fetch(\n `https://generativelanguage.googleapis.com/v1beta/models/gemini-flash-latest:generateContent?key=${apiKey}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{ parts: [{ text: prompt }] }],\n }),\n },\n );\n\n if (!res.ok) {\n throw new Error(`Gemini request failed: ${res.status} ${await res.text()}`);\n }\n\n const data = await res.json();\n const text = data?.candidates?.[0]?.content?.parts?.[0]?.text ?? \"\";\n const cleaned = text.replace(/```json|```/g, \"\").trim();\n\n try {\n return JSON.parse(cleaned);\n } catch {\n return { summary: text, recommendation: \"\" };\n }\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const providedKey = url.searchParams.get(\"key\") ?? req.headers.get(\"x-api-key\");\n if (providedKey !== Deno.env.get(\"API_SHARED_SECRET\")) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"POST required\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n let body: { emailText?: string; account?: unknown; opportunity?: unknown };\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Invalid JSON body\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const emailText = String(body.emailText || \"\").slice(0, 4000);\n const prompt = buildPrompt(emailText, body.account ?? null, body.opportunity ?? null);\n\n try {\n const result = await callGemini(prompt);\n return new Response(JSON.stringify(result), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n}\n",[149],"ca789961-767d-4d74-8105-664976ca8673","salesforce.ts","31a68f76-8a18-11f1-8b25-1607ee4eb77e",15,["D",1786983868322],3,"let cachedToken: { access_token: string; instance_url: string; expiresAt: number } | null = null;\nconst TOKEN_TTL_MS = 15 * 60 * 1000;\n\nasync function fetchNewToken(): Promise<{ access_token: string; instance_url: string }> {\n const instanceUrl = Deno.env.get(\"SF_INSTANCE_URL\")!;\n const res = await fetch(`${instanceUrl}/services/oauth2/token`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n grant_type: \"client_credentials\",\n client_id: Deno.env.get(\"SF_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"SF_CLIENT_SECRET\")!,\n }),\n });\n if (!res.ok) {\n throw new Error(`Salesforce auth failed: ${res.status} ${await res.text()}`);\n }\n const token = await res.json();\n cachedToken = { ...token, expiresAt: Date.now() + TOKEN_TTL_MS };\n return token;\n}\n\nexport async function getAccessToken(): Promise<{ access_token: string; instance_url: string }> {\n if (cachedToken && cachedToken.expiresAt > Date.now()) {\n return cachedToken;\n }\n return fetchNewToken();\n}\n\nexport async function sfQuery(soql: string): Promise {\n const { access_token, instance_url } = await getAccessToken();\n const res = await fetch(\n `${instance_url}/services/data/v59.0/query?q=${encodeURIComponent(soql)}`,\n { headers: { Authorization: `Bearer ${access_token}` } },\n );\n\n if (res.status === 401) {\n cachedToken = null;\n const retryAuth = await fetchNewToken();\n const retryRes = await fetch(\n `${retryAuth.instance_url}/services/data/v59.0/query?q=${encodeURIComponent(soql)}`,\n { headers: { Authorization: `Bearer ${retryAuth.access_token}` } },\n );\n if (!retryRes.ok) {\n throw new Error(`Salesforce query failed: ${retryRes.status} ${await retryRes.text()}`);\n }\n return retryRes.json();\n }\n\n if (!res.ok) {\n throw new Error(`Salesforce query failed: ${res.status} ${await res.text()}`);\n }\n return res.json();\n}\n\n// Update many records in one call.\n//\n// sfUpdate is one HTTP round-trip per record, which is fine for the one-at-a-time\n// callers but not for a route plan: a Miami week is 215 opportunities, and 215\n// sequential PATCHes do not finish inside a Val Town run. The composite endpoint\n// takes 200 records at a time.\n//\n// allOrNone is false deliberately. A route plan is not a transaction - if three\n// records fail their validation rules, the other 197 should still be scheduled,\n// and the caller is told exactly which three so it can say so rather than\n// rolling back work that was fine.\nexport async function sfUpdateMany(\n sobject: string,\n records: { id: string; fields: Record }[],\n): Promise<{ id: string; success: boolean; errors: unknown[] }[]> {\n if (records.length === 0) return [];\n if (records.length > 200) throw new Error(\"composite update takes at most 200 records\");\n\n const body = JSON.stringify({\n allOrNone: false,\n records: records.map((r) => ({\n attributes: { type: sobject },\n Id: r.id,\n ...r.fields,\n })),\n });\n\n const doPatch = (token: string, instance: string) =>\n fetch(`${instance}/services/data/v59.0/composite/sobjects`, {\n method: \"PATCH\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body,\n });\n\n const { access_token, instance_url } = await getAccessToken();\n let res = await doPatch(access_token, instance_url);\n if (res.status === 401) {\n cachedToken = null;\n const retryAuth = await fetchNewToken();\n res = await doPatch(retryAuth.access_token, retryAuth.instance_url);\n }\n if (!res.ok) {\n throw new Error(`Salesforce bulk update failed: ${res.status} ${await res.text()}`);\n }\n return await res.json();\n}\n\nexport async function sfUpdate(sobject: string, id: string, fields: Record): Promise {\n const { access_token, instance_url } = await getAccessToken();\n const doPatch = (token: string, url: string) =>\n fetch(url, {\n method: \"PATCH\",\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify(fields),\n });\n\n let res = await doPatch(access_token, `${instance_url}/services/data/v59.0/sobjects/${sobject}/${id}`);\n\n if (res.status === 401) {\n cachedToken = null;\n const retryAuth = await fetchNewToken();\n res = await doPatch(retryAuth.access_token, `${retryAuth.instance_url}/services/data/v59.0/sobjects/${sobject}/${id}`);\n }\n\n if (!res.ok && res.status !== 204) {\n throw new Error(`Salesforce update failed: ${res.status} ${await res.text()}`);\n }\n}\n",[157],"254e182e-da97-4b35-8cb0-3fe91235fc92","main.ts",17,["D",1786983889470],10,"import { sfQuery, sfUpdate, sfUpdateMany } from \"./salesforce.ts\";\n\nconst ALLOWED_UPDATES: Record = {\n // Route_Date__c and Route_Name__c are what the route builder commits when a\n // plan is sent out: which day the stop is going and whose truck has it.\n Opportunity: [\"CloseDate\", \"Route_Date__c\", \"Route_Name__c\"],\n Lead: [\"AI_Call_Status__c\", \"AI_Call_Last_Attempt__c\", \"AI_Call_Attempts__c\", \"AI_Call_Summary__c\", \"DoNotCall\", \"Status\"],\n};\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const providedKey = url.searchParams.get(\"key\") ?? req.headers.get(\"x-api-key\");\n if (providedKey !== Deno.env.get(\"API_SHARED_SECRET\")) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n if (req.method === \"POST\") {\n let body: any;\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Invalid JSON body\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // Bulk form: { sobject, records: [{ id, fields }, ...] }. Same allow-list as\n // the single-record form below - the only thing that changes is how many go\n // per round-trip. Returns Salesforce's own per-record verdicts rather than\n // one overall success, because with allOrNone off some can fail alone.\n const { sobject, id, fields, records } = body ?? {};\n if (Array.isArray(records)) {\n const allowed = ALLOWED_UPDATES[sobject];\n if (!allowed) {\n return Response.json({ error: `Updates to '${sobject}' are not allowed` }, { status: 400 });\n }\n if (records.length > 200) {\n return Response.json({ error: \"at most 200 records per call\" }, { status: 400 });\n }\n const bad = [\n ...new Set(records.flatMap((r: any) => Object.keys(r?.fields ?? {}))),\n ].filter((f) => !allowed.includes(f));\n if (bad.length > 0) {\n return Response.json({ error: `Fields not allowed: ${bad.join(\", \")}` }, { status: 400 });\n }\n if (records.some((r: any) => !r?.id || !r?.fields)) {\n return Response.json({ error: \"each record needs id and fields\" }, { status: 400 });\n }\n try {\n return Response.json({ success: true, results: await sfUpdateMany(sobject, records) });\n } catch (err) {\n return Response.json({ error: String(err) }, { status: 400 });\n }\n }\n\n if (!sobject || !id || !fields || typeof fields !== \"object\") {\n return new Response(\n JSON.stringify({ error: \"Body must include sobject, id, and fields\" }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n const allowedFields = ALLOWED_UPDATES[sobject];\n if (!allowedFields) {\n return new Response(JSON.stringify({ error: `Updates to '${sobject}' are not allowed` }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const invalidFields = Object.keys(fields).filter((f) => !allowedFields.includes(f));\n if (invalidFields.length > 0) {\n return new Response(\n JSON.stringify({ error: `Fields not allowed: ${invalidFields.join(\", \")}` }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n try {\n await sfUpdate(sobject, id, fields);\n return new Response(JSON.stringify({ success: true }), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n const soql = url.searchParams.get(\"q\");\n if (!soql) {\n return new Response(\n JSON.stringify({ error: \"Missing required 'q' query parameter (a SOQL query string)\" }),\n { status: 400, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n try {\n const result = await sfQuery(soql);\n return new Response(JSON.stringify(result), {\n headers: { \"Content-Type\": \"application/json\" },\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: String(err) }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n}\n",[165],"7e281786-bb51-4679-87c4-8ac62fb36172","invoice.ts","0c66727e-a61c-11f1-a740-1607ee4eb77e",64,["D",1788284535958],"// What a customer owes, and the link that lets them pay it.\n//\n// READ THIS BEFORE CHANGING HOW THE LINK IS HANDED OUT.\n//\n// The pay link is a public Salesforce Sites page whose only parameter is the\n// invoice RECORD ID:\n//\n// https://tribecabeverage.my.salesforce-sites.com/payments/fw1__Payment\n// ?invoiceId=a13Pm00001bhO2xIAE&showInvoiceLines=true\n//\n// A Salesforce id is an identifier, not a secret — it is structured and\n// sequential rather than random. So this URL is not a capability token in the\n// way a Stripe payment link is. Anyone holding one can see the invoice AND its\n// line items, and the page also updates the card on file. Treat it as\n// sensitive customer data, not as a harmless convenience link.\n//\n// THE RULE THIS FILE ENFORCES: the link is returned ONLY when the caller says\n// the visitor is authenticated — signed in to their WordPress/WooCommerce\n// account, which is a real credential check. A phone number typed into a chat\n// box is NOT authentication: phone numbers are widely known, and someone who\n// guessed one would otherwise be handed a stranger's invoice.\n//\n// Unauthenticated callers still get something useful — whether a balance\n// exists, and a masked hint of the email it can be sent to — just never the\n// link or the line items.\n\nimport { sfQuery } from \"./salesforce.ts\";\n\nfunction esc(v: string): string {\n return String(v).replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\").slice(0, 120);\n}\n\nfunction tenDigits(raw: string): string | null {\n const d = String(raw ?? \"\").replace(/\\D/g, \"\");\n const ten = d.length === 11 && d.startsWith(\"1\") ? d.slice(1) : d;\n return ten.length === 10 ? ten : null;\n}\n\n/** \"b••••••@yahoo.com\" — enough for the customer to recognise, useless to anyone else. */\nfunction maskEmail(email: string | null): string | null {\n if (!email || !email.includes(\"@\")) return null;\n const [user, domain] = email.split(\"@\");\n const head = user.slice(0, 1);\n return `${head}${\"•\".repeat(Math.max(3, Math.min(user.length - 1, 8)))}@${domain}`;\n}\n\nfunction money(n: unknown): string {\n const v = Number(n ?? 0);\n return \"$\" + v.toFixed(2);\n}\n\nexport type InvoiceResult = {\n found: boolean;\n ambiguous?: boolean;\n balanceDue?: number;\n invoiceNumber?: string | null;\n status?: string | null;\n dueDate?: string | null;\n /** Present ONLY for an authenticated visitor. */\n payLink?: string;\n /** Masked hint so an agent can offer to send it somewhere the customer owns. */\n emailOnFile?: string | null;\n message: string;\n};\n\nexport async function invoiceStatus(\n phoneRaw: string | null,\n opts: { authenticated?: boolean } = {},\n): Promise {\n const phone = phoneRaw ? tenDigits(phoneRaw) : null;\n if (!phone) {\n return { found: false, message: \"Need the phone number on the account to look up a balance.\" };\n }\n\n const [a, b, c] = [phone.slice(0, 3), phone.slice(3, 6), phone.slice(6)];\n const pattern = `%${esc(a)}%${esc(b)}%${esc(c)}%`;\n\n const rows = (await sfQuery(\n `SELECT Id, Name, Email_Address__c,\n Most_Recent_Invoice_Link__c, Most_Recent_Invoice_Amount_Due__c,\n Most_Recent_Invoice_Number__c, Most_Recent_Invoice_Status__c,\n Most_Recent_Invoice_Due_Date__c, Most_Recent_Invoice_Paid__c,\n Amount_of_Unpaid_Invoices__c, Balance_for_Valtown__c\n FROM Account WHERE Phone LIKE '${pattern}' LIMIT 2`,\n )).records ?? [];\n\n if (!rows.length) {\n return { found: false, message: \"No account found with that phone number. The office can check other records.\" };\n }\n if (rows.length > 1) {\n // Never guess whose invoice this is. Handing the wrong person a pay link is\n // worse than making a real customer wait for a human.\n return {\n found: false,\n ambiguous: true,\n message: \"That number is on more than one account, so I can't safely pull up a balance. A team member will confirm which account it is.\",\n };\n }\n\n const r = rows[0];\n\n // Balance_for_Valtown__c FIRST. It is a formula field whose entire definition\n // is `fw1__Total_Balance_Amount__c` — someone built it precisely because the\n // FinancialForce rollup is NOT readable by an integration user. Granting FLS\n // on the fw1 field does not work; it still reports \"No such column\".\n //\n // This matters because Most_Recent_Invoice_Amount_Due__c is populated later\n // by other automation and is simply BLANK on a freshly invoiced account.\n // Reading that first made the bot tell a customer with $28.98 outstanding\n // that they owed nothing — caught 9/1/2026 by invoicing a test account and\n // watching the lookup disagree with the org.\n const rollup = Number(r.Balance_for_Valtown__c ?? 0);\n const recent = Number(r.Most_Recent_Invoice_Amount_Due__c ?? 0);\n const due = rollup > 0 ? rollup : recent;\n\n // \"Paid\" only counts when the rollup agrees. A stale flag must never be able\n // to suppress a real balance.\n const paid = r.Most_Recent_Invoice_Paid__c === true && rollup <= 0;\n const emailOnFile = maskEmail(r.Email_Address__c ?? null);\n\n if (paid || due <= 0) {\n return {\n found: true,\n balanceDue: 0,\n status: r.Most_Recent_Invoice_Status__c ?? null,\n emailOnFile,\n message: \"The most recent invoice on this account is paid — nothing is currently due.\",\n };\n }\n\n const base: InvoiceResult = {\n found: true,\n balanceDue: due,\n invoiceNumber: r.Most_Recent_Invoice_Number__c ?? null,\n status: r.Most_Recent_Invoice_Status__c ?? null,\n dueDate: r.Most_Recent_Invoice_Due_Date__c ?? null,\n emailOnFile,\n message: \"\",\n };\n\n if (opts.authenticated && r.Most_Recent_Invoice_Link__c) {\n base.payLink = String(r.Most_Recent_Invoice_Link__c);\n base.message =\n `${money(due)} is currently due` +\n (base.dueDate ? ` (due ${base.dueDate})` : \"\") +\n \". They can pay it with the link, which also updates the card on file for future deliveries.\";\n return base;\n }\n\n // Not authenticated: say the amount, withhold the link.\n base.message =\n `${money(due)} is currently due` +\n (base.dueDate ? ` (due ${base.dueDate})` : \"\") +\n \". Do NOT share a payment link in this chat — the visitor is not signed in. \" +\n (emailOnFile\n ? `Offer to have it emailed to the address on file (${emailOnFile}), or bring in a team member.`\n : \"There is no email on file, so a team member has to handle this.\");\n return base;\n}\n",[172],"f883774a-ff46-4915-9ea9-21dfedf25758",["D",1788294662160],38,[28],"b6811e10-85e4-4ea9-8f3c-89151da96032","apollo-tools.ts","9cef414e-a0be-11f1-957d-1607ee4eb77e",48,["D",1788277497923],13,"// Read-only tools for tawk.to's Apollo AI agent.\n//\n// Lives inside this val on purpose: sfQuery is right here, so there's no proxy\n// hop and no Salesforce credentials copied into a second val.\n//\n// GET /openapi.json the schema tawk fetches (public, no auth)\n// GET /account-lookup the tool Apollo calls (x-api-key required)\n// GET / config status\n//\n// Auth uses its OWN key, APOLLO_TOOL_KEY — deliberately NOT API_SHARED_SECRET.\n// That secret unlocks arbitrary SOQL on main.ts; if the tawk integration ever\n// leaked it, the blast radius would be the entire org. This key only reaches\n// the one narrow lookup below.\nimport { sfQuery } from \"./salesforce.ts\";\n\nfunction esc(v: string): string {\n return v.replace(/\\\\/g, \"\\\\\\\\\").replace(/'/g, \"\\\\'\").slice(0, 120);\n}\n\nfunction normalizePhone(raw: string): string | null {\n const d = raw.replace(/\\D/g, \"\");\n const ten = d.length === 11 && d.startsWith(\"1\") ? d.slice(1) : d;\n return ten.length === 10 ? ten : null;\n}\n\nasync function lookupAccount(phoneRaw?: string | null, email?: string | null) {\n const phone = phoneRaw ? normalizePhone(phoneRaw) : null;\n\n // Email lookup is NOT possible with this integration user's permissions:\n // Contact is not accessible at all, Account has no email column, and\n // Lead.Email is hidden by field-level security. Verified by schema probe\n // 2026-08-25. Phone against Account.Phone is the only route.\n if (!phone) {\n return {\n found: false,\n needs_phone: true,\n message: email\n ? \"Accounts can only be looked up by phone number. Ask the visitor for the phone number on their account.\"\n : \"Need a phone number to look up an account.\",\n };\n }\n\n // Account.Phone is stored formatted — \"(DDD) DDD-DDDD\" in this org — so a\n // bare digit string never matches as a substring. Put wildcards between the\n // area code, exchange and line number so any separator style matches, and a\n // trailing wildcard so extensions (\"x12\") don't break it. Wildcards also\n // match empty, so unformatted values still match.\n const [area, exch, line] = [phone.slice(0, 3), phone.slice(3, 6), phone.slice(6)];\n const pattern = `%${esc(area)}%${esc(exch)}%${esc(line)}%`;\n const accounts = (await sfQuery(\n `SELECT Id, Name, Phone FROM Account WHERE Phone LIKE '${pattern}' LIMIT 2`,\n )).records ?? [];\n\n if (!accounts.length) {\n return { found: false, message: \"No account found with that phone number. The office can check other records.\" };\n }\n if (accounts.length > 1) {\n // Ambiguous: never guess whose account this is. Flagged separately from a\n // genuine no-match so the caller can say \"more than one\" rather than the\n // false \"we have no record of you\".\n return {\n found: false,\n ambiguous: true,\n message: \"That number is on more than one account. The office will need to confirm which one.\",\n };\n }\n\n const c = { AccountId: accounts[0].Id, Account: { Name: accounts[0].Name } };\n const accountName = c.Account?.Name ?? \"your account\";\n let nextDelivery: string | null = null;\n\n if (c.AccountId) {\n const today = new Date().toISOString().slice(0, 10);\n // Deliveries are Opportunities; Route_Date__c is the committed route day,\n // CloseDate the fallback before a route is planned.\n const opps = (await sfQuery(\n `SELECT Id, Route_Date__c, CloseDate FROM Opportunity\n WHERE AccountId = '${esc(String(c.AccountId))}'\n AND StageName = 'Delivery Due'\n AND (Route_Date__c >= ${today} OR (Route_Date__c = null AND CloseDate >= ${today}))\n ORDER BY CloseDate ASC LIMIT 1`,\n )).records ?? [];\n if (opps.length) nextDelivery = opps[0].Route_Date__c ?? opps[0].CloseDate ?? null;\n }\n\n return {\n found: true,\n account_name: accountName,\n next_delivery_date: nextDelivery,\n message: nextDelivery\n ? `Account found. Next scheduled delivery is ${nextDelivery}.`\n : \"Account found, but no delivery is currently scheduled. The office can arrange one.\",\n };\n}\n\n// Descriptions are read by the AI as instructions, per tawk's docs — so they\n// say when to call and what not to say, not what a developer would want.\nconst openapi = (origin: string) => ({\n openapi: \"3.0.3\",\n info: { title: \"TriBeCa Beverage account tools\", version: \"1.0.0\" },\n servers: [{ url: origin }],\n paths: {\n \"/account-lookup\": {\n get: {\n operationId: \"lookupAccount\",\n summary: \"Look up the customer's own account and next delivery date\",\n description:\n \"Call this when a visitor asks about THEIR OWN account: whether they are already a customer, when their next delivery is, or whether one is scheduled. \" +\n \"You must have a phone number or email address the visitor themselves gave you in this conversation — ask for one if you do not have it. \" +\n \"Never call this with a name only, and never with details the visitor did not provide. \" +\n \"Report only what the response contains. If found is false, say you could not find the account and offer to have the office check. Never confirm or deny whether some other person or business is a customer. \" +\n \"Never promise to change, cancel, or reschedule a delivery — you can only report what is already scheduled.\",\n parameters: [\n {\n name: \"phone\",\n in: \"query\",\n required: false,\n schema: { type: \"string\" },\n description: \"Phone number as the visitor gave it; any common format is fine.\",\n },\n {\n name: \"email\",\n in: \"query\",\n required: false,\n schema: { type: \"string\" },\n description: \"Email address the visitor gave.\",\n },\n ],\n responses: {\n \"200\": {\n description: \"Lookup result, always present even when nothing matched.\",\n content: {\n \"application/json\": {\n schema: {\n type: \"object\",\n properties: {\n found: { type: \"boolean\", description: \"Whether exactly one account matched.\" },\n account_name: { type: \"string\", description: \"Account name on file.\" },\n next_delivery_date: {\n type: \"string\",\n nullable: true,\n description: \"Next scheduled delivery (YYYY-MM-DD), or null if none.\",\n },\n message: {\n type: \"string\",\n description: \"Plain-language summary. Prefer relaying this over inventing wording.\",\n },\n },\n required: [\"found\", \"message\"],\n },\n },\n },\n },\n },\n },\n },\n },\n});\n\n/** The same gate /account-lookup uses. Returns null when the key checks out. */\nfunction rejectUnlessKeyed(req: Request, label: string): Response | null {\n const expected = Deno.env.get(\"APOLLO_TOOL_KEY\");\n if (!expected) return Response.json({ error: \"APOLLO_TOOL_KEY not set on this val\" }, { status: 500 });\n const supplied = req.headers.get(\"x-api-key\");\n if (supplied !== expected) {\n console.warn(\n supplied === null\n ? `${label} REJECTED: no x-api-key header`\n : `${label} REJECTED: x-api-key present but wrong (length ${supplied.length})`,\n );\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n return null;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const origin = url.origin;\n\n if (url.pathname === \"/openapi.json\") return Response.json(openapi(origin));\n\n // Account creation. THE ONLY WRITE IN THIS VAL.\n //\n // POST only, deliberately: a write behind a GET is one link preview or\n // crawler away from creating accounts nobody asked for.\n //\n // This endpoint is NOT in openapi.json. That schema is fetched publicly by\n // tawk, and publishing a create-account tool there would hand it to whichever\n // agent happens to read it. Only our own chat calls this, with the key.\n if (url.pathname === \"/create-account\") {\n if (req.method !== \"POST\") return Response.json({ error: \"POST required\" }, { status: 405 });\n\n const rejected = rejectUnlessKeyed(req, \"create-account\");\n if (rejected) return rejected;\n\n try {\n const { createAccount } = await import(\"./create-account.ts\");\n const result = await createAccount(await req.json().catch(() => ({})));\n // A refusal comes back as HTTP 200 with ok:false. The caller is a chat bot\n // that has to say something to a customer, and \"you already have an\n // account\" or \"a person needs to assign your route\" are answers, not\n // failures — an HTTP error would just become a generic apology.\n return Response.json(result);\n } catch (err) {\n console.error(\"create-account failed:\", err);\n return Response.json({\n ok: false,\n reason: \"error\",\n message: \"The account could not be created right now. The office can set it up.\",\n });\n }\n }\n\n // Balance and pay link. POST only and NOT in openapi.json, for the same\n // reason as /create-account: that schema is public, and this returns money\n // and a link that can update a card on file.\n if (url.pathname === \"/invoice-status\") {\n if (req.method !== \"POST\") return Response.json({ error: \"POST required\" }, { status: 405 });\n\n const rejected = rejectUnlessKeyed(req, \"invoice-status\");\n if (rejected) return rejected;\n\n try {\n const { invoiceStatus } = await import(\"./invoice.ts\");\n const body = await req.json().catch(() => ({}));\n // `authenticated` must mean a real credential check — a signed-in\n // WordPress session. The caller asserts it; this endpoint trusts the\n // caller because the caller holds the key. A phone number is not it.\n const out = await invoiceStatus(body.phone ?? null, { authenticated: body.authenticated === true });\n console.log(`invoice-status found=${out.found} due=${out.balanceDue ?? \"-\"} link=${out.payLink ? \"yes\" : \"no\"}`);\n return Response.json(out);\n } catch (err) {\n console.error(\"invoice-status failed:\", err);\n // A failed query must never read as \"you owe nothing\".\n return Response.json({\n found: false,\n errored: true,\n message: \"I can't check the balance right now. A team member can look it up directly.\",\n });\n }\n }\n\n if (url.pathname === \"/account-lookup\") {\n const expected = Deno.env.get(\"APOLLO_TOOL_KEY\");\n if (!expected) return Response.json({ error: \"APOLLO_TOOL_KEY not set on this val\" }, { status: 500 });\n const supplied = req.headers.get(\"x-api-key\");\n if (supplied !== expected) {\n // Log rejections too, otherwise \"never called\" and \"called with the wrong\n // key\" are indistinguishable when debugging the tawk integration.\n // Never log the value itself — just enough to tell the cases apart.\n console.warn(\n supplied === null\n ? `account-lookup REJECTED: no x-api-key header (headers seen: ${\n [...req.headers.keys()].join(\", \")\n })`\n : `account-lookup REJECTED: x-api-key present but wrong (length ${supplied.length})`,\n );\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n try {\n const result = await lookupAccount(url.searchParams.get(\"phone\"), url.searchParams.get(\"email\"));\n console.log(`account-lookup found=${result.found}`);\n return Response.json(result);\n } catch (err) {\n console.error(\"account-lookup failed:\", err);\n // errored is distinct from found:false on purpose. A failed query must\n // never be reported to a visitor as \"no account found\" — that is a\n // different, and wrong, statement about their account.\n // Never leak internals to a customer-facing agent.\n return Response.json({\n found: false,\n errored: true,\n message: \"The lookup service is unavailable right now. The office can check directly.\",\n });\n }\n }\n\n const ok = (v: string) => (Deno.env.get(v) ? \"set\" : \"MISSING\");\n return new Response(\n `Apollo tools\n\n

Apollo tools

tawk → Automation → Integrations → OpenAPI Server:

Schema File URL

${origin}/openapi.json

\nAPI base URL

${origin}

\nAuth: API key · Key x-api-key · Value = APOLLO_TOOL_KEY

APOLLO_TOOL_KEY: ${ok(\"APOLLO_TOOL_KEY\")}

view schema

`,\n { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } },\n );\n}\n","tribeca-apollo",[183],"0b87765f-4eb2-47ba-841b-52d908840c4c","README.md","df7174d2-8a17-11f1-ad76-1607ee4eb77e",1,["D",1785197056265],"# Tribeca Salesforce Agent\n\nRead-only access to Salesforce Account and Opportunity data via OAuth Client Credentials Flow, scoped by the \"Salesforce Agent\" permission set.\n",[192],"pulls","branches","forks","envVars",{"_205":187,"_207":63},"connections",{"_205":63,"_206":63},"count","unfilledCount","emptyCount",{"_43":191,"_32":192,"_30":193,"_141":-5,"_41":42,"_40":194,"_143":59,"_38":238,"_13":63,"_33":20,"_35":196,"_24":25,"_146":-5,"_217":239,"_27":240},{"_43":182,"_32":183,"_30":184,"_141":-5,"_41":42,"_40":185,"_143":25,"_38":235,"_13":187,"_33":153,"_35":188,"_24":25,"_146":189,"_217":236,"_27":237},{"_43":178,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":25,"_38":232,"_13":180,"_33":34,"_35":37,"_24":25,"_146":-5,"_217":233,"_27":234},{"_43":171,"_32":172,"_30":173,"_141":-5,"_41":42,"_40":174,"_143":59,"_38":229,"_13":151,"_33":34,"_35":176,"_24":25,"_146":-5,"_217":230,"_27":231},{"_43":164,"_32":165,"_30":57,"_141":-5,"_41":42,"_40":166,"_143":25,"_38":226,"_13":168,"_33":153,"_35":169,"_24":25,"_146":-5,"_217":227,"_27":228},{"_43":156,"_32":157,"_30":158,"_141":-5,"_41":42,"_40":159,"_143":59,"_38":223,"_13":161,"_33":34,"_35":162,"_24":25,"_146":-5,"_217":224,"_27":225},{"_43":148,"_32":149,"_30":150,"_141":-5,"_41":42,"_40":151,"_143":59,"_38":220,"_13":63,"_33":153,"_35":154,"_24":25,"_146":-5,"_217":221,"_27":222},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":25,"_38":216,"_13":63,"_33":34,"_35":145,"_24":25,"_146":-5,"_217":218,"_27":219},["D",1788279964609],"children",[],[139],["D",1785242184864],[],[149],["D",1786983868322],[],[157],["D",1786983889470],[],[165],["D",1788284535958],[],[172],["D",1788294662160],[],[28],["D",1788277497923],[],[183],["D",1785197056265],[],[192],["D",1785197056244],["D",1789491713377],{"_100":99,"_107":-5},{"_100":99,"_101":102,"_103":-5,"_18":-5,"_104":105,"_106":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_127":279,"_280":281,"_282":283,"_284":25,"_285":25,"_286":25,"_287":59,"_288":-5,"_289":-7,"_290":-7,"_291":63,"_292":25,"_293":25,"_294":-5,"_295":25,"_296":25,"_297":25,"_298":-5},"ENV",{"_250":251,"_252":253,"_254":90,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v120