AIHive · Agent World

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_1904":1905,"_1906":1907},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_109":91,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",1075,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","api/intelligence.ts","latestPath","fileId","d5cf99da-580e-11f1-b0e3-ee650bb23af1","name","intelligence.ts","fileType","script","content","// Cross-Metric Correlation Engine + Unified Funnel + LLM-generated commentary feed.\n// Maps all 14 integrations to TOFU/MOFU/BOFU stages, fetches live metrics,\n// computes health scores against 30d baselines, surfaces causal correlations\n// with narrative + action prompts. Cached aggressively (5min TTL) since fetches\n// hit external APIs.\nimport { sqlite, currentTenantId } from \"../db.ts\";\nimport { getCredentials, withGoogleFallback, safeJson } from \"./integrations/_shared.ts\";\nimport { getLLMConfig, callLLM } from \"./llm.ts\";\nimport {\n bestLaggedCorrelation,\n corrStrength,\n MIN_CORR_SAMPLES,\n MIN_CORR_ABS_R,\n MAX_CORR_P,\n type SeriesPoint,\n} from \"./stats.ts\";\nimport { getCompanyProfile } from \"./company.ts\";\nimport { getMethodConfig } from \"./method_config.ts\";\nimport { SIGNAL_WEIGHTS } from \"./signals.ts\";\n\n// ─── FUNNEL MAPPING ─────────────────────────────────────────────────────────\ntype Stage = \"TOFU\" | \"MOFU\" | \"BOFU\";\n\nexport type AARRR = \"acquisition\" | \"activation\" | \"retention\" | \"referral\" | \"revenue\";\n\nexport interface MetricPoint {\n integration: string;\n metric: string;\n value: number;\n unit: string;\n stage: Stage;\n aarrr?: AARRR; // Pirate Metrics category\n recorded_at?: string; // ISO timestamp from metric_history\n}\n\n// Absolute health benchmarks per metric: maps raw value → 0-100 health.\n// Replaces the warm-start \"always 50%\" bug — gives real per-metric scoring based\n// on industry SaaS benchmarks. Returns null if no benchmark defined (falls back to\n// baseline-relative scoring).\nfunction normalizeAbsolute(integration: string, metric: string, value: number): number | null {\n const k = `${integration}:${metric}`;\n const clamp = (n: number) => Math.max(0, Math.min(100, n));\n switch (k) {\n // SEO authority (Ahrefs) — DR is already 0-100; refdomains log-scaled\n case \"ahrefs:domain_rating\": return clamp(value);\n case \"ahrefs:referring_domains\": return clamp(Math.log10(value + 1) * 25);\n // Search Console — CTR 0-5% maps to 0-100, position 1 = 100 falling 5%/rank\n case \"gsc:ctr\": return clamp((value / 5) * 100);\n case \"gsc:impressions\": return clamp(Math.log10(value + 1) * 20);\n case \"gsc:clicks\": return clamp(Math.log10(value + 1) * 25);\n case \"gsc:average_position\": return clamp(100 - (value - 1) * 5);\n // GA4 — engagement_time/180s = 100, conversions sqrt curve, bounce inverted\n case \"ga4:sessions\": return clamp(Math.log10(value + 1) * 20);\n case \"ga4:engagement_time\": return clamp((value / 180) * 100);\n case \"ga4:pages_per_session\": return clamp(((value - 1) / 3) * 100);\n case \"ga4:bounce_rate\": return clamp(100 - value);\n case \"ga4:conversions\": return clamp(Math.sqrt(value) * 15);\n // YouTube\n case \"youtube:views\": return clamp(Math.log10(value + 1) * 15);\n case \"youtube:subscribers\": return clamp(Math.log10(value + 1) * 20);\n case \"youtube:subscribers_gained\": return clamp(Math.log10(value + 1) * 30);\n // WordPress content velocity — 20 posts/period = full health\n case \"wordpress:published_posts\": return clamp(value * 5);\n // Communications volume — log-scaled\n case \"gmail:messages_total\": return clamp(Math.log10(value + 1) * 15);\n case \"gmail:threads_total\": return clamp(Math.log10(value + 1) * 18);\n // PROVENANCE: deal_intent_threads = count of Gmail threads matching deal-intent\n // keywords (pricing/proposal/contract/quote). This is a SOFT MOFU intent signal —\n // a keyword match is interest, NOT a closed/real deal — so it carries a LOWER\n // weight than a true BOFU revenue event (each thread → 5 health pts, full at 20\n // threads, vs the old 10pts/full-at-10 that over-read intent as conversion).\n case \"gmail:deal_intent_threads\": return clamp(value * 5);\n case \"outlook:inbox_count\": return clamp(Math.log10(value + 1) * 15);\n case \"outlook:meetings_booked\":return clamp(value * 10);\n // LinkedIn\n case \"linkedin:post_impressions\": return clamp(Math.log10(value + 1) * 15);\n default: return null; // no absolute benchmark → fall back to baseline-relative\n }\n}\n\n// AARRR mapping — same metric can belong to multiple categories.\n// gsc.average_position, gsc.ctr, youtube.subscribers, linkedin.reply_rate all carry\n// Pirate-Metric classification so the funnel summary never leaves stages undefined.\nconst AARRR_MAP: Record = {\n // Acquisition (first touch)\n \"gsc:clicks\": \"acquisition\", \"youtube:views\": \"acquisition\", \"youtube:subscribers_gained\": \"acquisition\", \"linkedin:post_impressions\": \"acquisition\",\n \"gsc:impressions\": \"acquisition\", \"ahrefs:organic_keywords\": \"acquisition\",\n \"gsc:average_position\": \"acquisition\",\n // Activation (first meaningful engagement)\n \"ga4:sessions\": \"activation\", \"wordpress:published_posts\": \"activation\",\n \"gmail:messages_total\": \"activation\", \"gsc:ctr\": \"activation\",\n \"linkedin:reply_rate\": \"activation\",\n // deal_intent_threads is a SOFT MOFU intent signal (keyword-matched interest),\n // mapped to activation — NOT revenue, which is reserved for real BOFU conversions.\n \"gmail:deal_intent_threads\": \"activation\",\n // Retention (repeated engagement)\n \"ga4:engagement_time\": \"retention\", \"ga4:pages_per_session\": \"retention\", \"ga4:bounce_rate\": \"retention\",\n \"gmail:threads_total\": \"retention\", \"youtube:subscribers\": \"retention\",\n // Referral (audience amplification)\n \"ahrefs:referring_domains\": \"referral\", \"ahrefs:domain_rating\": \"referral\",\n // Revenue (monetization events)\n \"ga4:conversions\": \"revenue\", \"outlook:inbox_count\": \"revenue\",\n \"outlook:meetings_booked\": \"revenue\",\n};\nconst aarrrOf = (integration: string, metric: string): AARRR | undefined =>\n AARRR_MAP[`${integration}:${metric}`];\n\n// ─── BAYESIAN-INSPIRED CONFIDENCE ────────────────────────────────────────────\n// Penalize stale data, missing integrations, and rules currently inside their lag window.\nexport function computeConfidence(args: {\n source_freshness_days: number;\n target_freshness_days: number;\n source_has_data: boolean;\n target_has_data: boolean;\n lag_days: number;\n current_day_offset: number;\n}): number {\n let c = 1.0;\n if (args.source_freshness_days > 7) c *= 0.8;\n if (args.source_freshness_days > 30) c *= 0.6;\n if (args.target_freshness_days > 7) c *= 0.8;\n if (!args.source_has_data) c *= 0.3;\n if (!args.target_has_data) c *= 0.3;\n if (args.current_day_offset < args.lag_days) c *= 0.5;\n return Math.round(c * 100) / 100;\n}\n\n// ─── METRIC HISTORY (timeseries for delta_7d) ────────────────────────────────\nasync function recordMetric(integration: string, metric: string, value: number): Promise {\n try {\n await sqlite.execute(\n \"INSERT INTO metric_history (integration, metric_key, value, tenant_id) VALUES (?, ?, ?, ?)\",\n [integration, metric, value, currentTenantId()]\n );\n // Prune anything older than 60d to keep table bounded.\n await sqlite.execute(\n \"DELETE FROM metric_history WHERE recorded_at < datetime('now','-60 days') AND tenant_id = ?\",\n [currentTenantId()]\n );\n } catch { /* non-critical */ }\n}\n\nasync function getMetricValueDaysAgo(integration: string, metric: string, days: number): Promise {\n try {\n // Find closest recorded value to N days ago (within ±2 days window).\n const r = await sqlite.execute(\n `SELECT value FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at <= datetime('now', ?)\n AND tenant_id = ?\n ORDER BY recorded_at DESC LIMIT 1`,\n [integration, metric, `-${days} days`, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n return Number((r.rows[0] as any[])[0]);\n } catch { return null; }\n}\n\n// Daily timeseries for a metric over the last `days` (default 60). Collapses every\n// recorded_at to one point per calendar date (last write of the day wins — the rows\n// arrive chronologically, so the final assignment per date is the latest value).\n// Powers the real lagged-correlation engine. Returns [] when there is no history.\nasync function getMetricSeries(integration: string, metric: string, days = 60): Promise {\n try {\n const r = await sqlite.execute(\n `SELECT date(recorded_at) AS d, value\n FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at >= datetime('now', ?)\n AND tenant_id = ?\n ORDER BY recorded_at ASC`,\n [integration, metric, `-${days} days`, currentTenantId()]\n );\n if (!r.rows?.length) return [];\n const byDate = new Map();\n for (const row of r.rows as any[]) {\n const date = String(row[0]);\n const value = Number(row[1]);\n if (!date || !Number.isFinite(value)) continue;\n byDate.set(date, value); // chronological ASC → last write per date wins\n }\n return Array.from(byDate.entries())\n .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0))\n .map(([date, value]) => ({ date, value }));\n } catch { return []; }\n}\n\nexport interface CorrelationSignal {\n id: string;\n source_metric: { integration: string; metric: string; value: number; unit: string };\n target_metric: { integration: string; metric: string; value: number; unit: string };\n direction: \"positive\" | \"negative\" | \"neutral\";\n strength: \"strong\" | \"moderate\" | \"weak\";\n lag_days: number;\n narrative: string;\n funnel_stage_from: Stage;\n funnel_stage_to: Stage;\n confidence: number;\n action_prompt: string;\n}\n\nexport interface StageHealth {\n stage: Stage;\n label: string;\n description: string;\n metrics: Array;\n health_score: number; // 0-100\n diagnosis: string;\n}\n\nexport interface FunnelSummary {\n stages: StageHealth[];\n bottleneck: { stage: Stage; reason: string } | null;\n // Weighted composite — TOFU 0.25 · MOFU 0.40 · BOFU 0.35. BOFU revenue\n // matters more than top-of-funnel volume, MOFU drives qualified pipeline.\n overall_health: number;\n total_metrics_observed: number;\n total_integrations_connected: number;\n generated_at: string;\n}\n\nexport interface IntelligenceCard {\n type: \"correlation\" | \"anomaly\" | \"opportunity\" | \"risk\" | \"win\";\n priority: \"critical\" | \"high\" | \"medium\";\n title: string;\n body: string;\n metrics: string[];\n funnel_stages: Stage[];\n agent_name: string;\n timestamp: string;\n action_label: string;\n action_payload: { question: string; context?: any };\n}\n\n// ─── CACHE HELPERS ──────────────────────────────────────────────────────────\nasync function getCached(key: string): Promise {\n try {\n const r = await sqlite.execute(\n \"SELECT payload, expires_at FROM intelligence_cache WHERE cache_key = ? AND tenant_id = ?\",\n [key, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const [payload, expiresAt] = r.rows[0] as any[];\n if (new Date(String(expiresAt)).getTime() < Date.now()) return null;\n return JSON.parse(String(payload));\n } catch { return null; }\n}\n\n// Read generated_at so the feed can invalidate itself when upstream summary is fresher.\nasync function getCachedTimestamp(key: string): Promise<{ payload: any; generated_at: number; expires_at: number } | null> {\n try {\n const r = await sqlite.execute(\n \"SELECT payload, generated_at, expires_at FROM intelligence_cache WHERE cache_key = ? AND tenant_id = ?\",\n [key, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const [payload, generatedAt, expiresAt] = r.rows[0] as any[];\n const exp = new Date(String(expiresAt)).getTime();\n if (exp < Date.now()) return null;\n return {\n payload: JSON.parse(String(payload)),\n generated_at: new Date(String(generatedAt)).getTime(),\n expires_at: exp,\n };\n } catch { return null; }\n}\n\nasync function setCached(key: string, payload: any, ttlSeconds: number): Promise {\n const expiresAt = new Date(Date.now() + ttlSeconds * 1000).toISOString();\n await sqlite.execute(\n \"INSERT OR REPLACE INTO intelligence_cache (cache_key, payload, generated_at, expires_at, tenant_id) VALUES (?, ?, datetime('now'), ?, ?)\",\n [key, JSON.stringify(payload), expiresAt, currentTenantId()]\n );\n}\n\nasync function getBaseline(integration: string, metricKey: string): Promise {\n try {\n const r = await sqlite.execute(\n \"SELECT baseline_value FROM metric_baselines WHERE integration = ? AND metric_key = ? AND tenant_id = ?\",\n [integration, metricKey, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n return Number((r.rows[0] as any[])[0]);\n } catch { return null; }\n}\n\nasync function setBaseline(integration: string, metricKey: string, value: number): Promise {\n await sqlite.execute(\n \"INSERT OR REPLACE INTO metric_baselines (integration, metric_key, baseline_value, last_updated, tenant_id) VALUES (?, ?, ?, datetime('now'), ?)\",\n [integration, metricKey, value, currentTenantId()]\n );\n}\n\n// Rolling 30-day baseline. Replaces the frozen warm-start baseline once we have\n// at least 3 samples in metric_history, so health scoring drifts with reality instead\n// of forever comparing against the first observed value.\nasync function getRollingBaseline(integration: string, metricKey: string): Promise<{ avg: number; sample_count: number } | null> {\n try {\n const r = await sqlite.execute(\n `SELECT AVG(value) AS avg_v, COUNT(*) AS n\n FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at >= datetime('now','-30 days')\n AND tenant_id = ?`,\n [integration, metricKey, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const row = r.rows[0] as any;\n const avg = Array.isArray(row) ? Number(row[0]) : Number(row.avg_v);\n const n = Array.isArray(row) ? Number(row[1]) : Number(row.n);\n if (!Number.isFinite(avg) || !Number.isFinite(n) || n < 3) return null;\n return { avg, sample_count: n };\n } catch { return null; }\n}\n\n// Persist the rolling figures back to metric_baselines so external readers see them too.\nasync function persistRolling(integration: string, metricKey: string, rolling: { avg: number; sample_count: number }): Promise {\n try {\n await sqlite.execute(\n \"UPDATE metric_baselines SET rolling_avg = ?, sample_count = ?, last_updated = datetime('now') WHERE integration = ? AND metric_key = ? AND tenant_id = ?\",\n [rolling.avg, rolling.sample_count, integration, metricKey, currentTenantId()]\n );\n } catch { /* non-critical */ }\n}\n\n// ─── METRIC FETCHERS (live data from integrations) ──────────────────────────\n// Each returns MetricPoint[] or [] on error/missing creds. Never throws.\n\nasync function fetchAhrefs(): Promise {\n const creds = await getCredentials(\"ahrefs\");\n if (!creds?.api_key || !creds.extra_config?.target) return [];\n const target = creds.extra_config.target;\n const today = new Date().toISOString().slice(0, 10);\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(`https://api.ahrefs.com/v3/site-explorer/domain-rating?target=${encodeURIComponent(target)}&date=${today}`,\n { headers: { Authorization: `Bearer ${creds.api_key}` } });\n if (r.ok) {\n const d = await safeJson(r);\n const dr = d?.domain_rating?.domain_rating;\n if (typeof dr === \"number\") out.push({ integration: \"ahrefs\", metric: \"domain_rating\", value: dr, unit: \"DR\", stage: \"TOFU\" });\n }\n } catch {}\n try {\n const r = await fetch(`https://api.ahrefs.com/v3/site-explorer/backlinks-stats?target=${encodeURIComponent(target)}&date=${today}`,\n { headers: { Authorization: `Bearer ${creds.api_key}` } });\n if (r.ok) {\n const d = await safeJson(r);\n const rd = d?.metrics?.refdomains;\n if (typeof rd === \"number\") out.push({ integration: \"ahrefs\", metric: \"referring_domains\", value: rd, unit: \"domains\", stage: \"TOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchGSC(days = 30): Promise {\n let creds = await getCredentials(\"gsc\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token || !creds.extra_config?.site_url) return [];\n const siteUrl = encodeURIComponent(creds.extra_config.site_url);\n const end = new Date().toISOString().slice(0, 10);\n const start = new Date(Date.now() - days * 864e5).toISOString().slice(0, 10);\n try {\n const r = await fetch(`https://searchconsole.googleapis.com/webmasters/v3/sites/${siteUrl}/searchAnalytics/query`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ startDate: start, endDate: end, dimensions: [], rowLimit: 1 }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const row = d?.rows?.[0];\n if (!row) return [];\n return [\n { integration: \"gsc\", metric: \"impressions\", value: row.impressions || 0, unit: \"impressions\", stage: \"TOFU\" },\n { integration: \"gsc\", metric: \"clicks\", value: row.clicks || 0, unit: \"clicks\", stage: \"TOFU\" },\n { integration: \"gsc\", metric: \"ctr\", value: (row.ctr || 0) * 100, unit: \"%\", stage: \"MOFU\" },\n { integration: \"gsc\", metric: \"average_position\", value: row.position || 0, unit: \"pos\", stage: \"TOFU\" },\n ];\n } catch { return []; }\n}\n\nasync function fetchGA4(days = 30): Promise {\n let creds = await getCredentials(\"ga4\");\n creds = await withGoogleFallback(creds ?? {});\n const propertyId = creds.extra_config?.property_id;\n if (!creds.access_token || !propertyId) return [];\n try {\n const r = await fetch(`https://analyticsdata.googleapis.com/v1beta/properties/${propertyId}:runReport`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n metrics: [\n { name: \"sessions\" }, { name: \"userEngagementDuration\" }, { name: \"bounceRate\" },\n { name: \"conversions\" }, { name: \"screenPageViewsPerSession\" },\n ],\n dateRanges: [{ startDate: `${days}daysAgo`, endDate: \"today\" }],\n }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const row = d?.rows?.[0];\n if (!row) return [];\n const vals = row.metricValues || [];\n const num = (i: number) => parseFloat(vals[i]?.value || \"0\");\n const sessions = num(0);\n return [\n { integration: \"ga4\", metric: \"sessions\", value: sessions, unit: \"sessions\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"engagement_time\", value: sessions ? num(1) / sessions : 0, unit: \"sec/sess\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"bounce_rate\", value: num(2) * 100, unit: \"%\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"conversions\", value: num(3), unit: \"conv\", stage: \"BOFU\" },\n { integration: \"ga4\", metric: \"pages_per_session\", value: num(4), unit: \"pages\", stage: \"MOFU\" },\n ];\n } catch { return []; }\n}\n\n// Channel-level acquisition breakdown from GA4 (sessions + conversions per default\n// channel group). Mirrors fetchGA4's credential resolution. Used by aio.ts to attribute\n// pipeline to channels. Returns [] on any failure or missing creds — never throws.\nexport async function getChannelAcquisition(\n days = 30,\n): Promise> {\n let creds = await getCredentials(\"ga4\");\n creds = await withGoogleFallback(creds ?? {});\n const propertyId = creds.extra_config?.property_id;\n if (!creds.access_token || !propertyId) return [];\n try {\n const r = await fetch(`https://analyticsdata.googleapis.com/v1beta/properties/${propertyId}:runReport`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n dimensions: [{ name: \"sessionDefaultChannelGroup\" }],\n metrics: [{ name: \"sessions\" }, { name: \"conversions\" }],\n dateRanges: [{ startDate: `${days}daysAgo`, endDate: \"today\" }],\n }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const rows = d?.rows;\n if (!Array.isArray(rows)) return [];\n return rows.map((row: any) => {\n const channel = String(row?.dimensionValues?.[0]?.value ?? \"(unknown)\");\n const sessions = parseFloat(row?.metricValues?.[0]?.value ?? \"0\") || 0;\n const conversions = parseFloat(row?.metricValues?.[1]?.value ?? \"0\") || 0;\n return { channel, sessions, conversions };\n });\n } catch { return []; }\n}\n\nasync function fetchYouTube(): Promise {\n let creds = await getCredentials(\"youtube\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token && !creds.api_key) return [];\n const auth = creds.access_token ? { Authorization: `Bearer ${creds.access_token}` } : {};\n // Prefer REAL 30-day growth from the YouTube Analytics API (owned channel) — this is the\n // growth signal that should feed TOFU, not lifetime totals. Falls back to lifetime channel\n // statistics when analytics is unavailable (scope not granted / API disabled / api-key only).\n if (creds.access_token) {\n try {\n const endDate = new Date().toISOString().slice(0, 10);\n const startDate = new Date(Date.now() - 30 * 24 * 60 * 60 * 1000).toISOString().slice(0, 10);\n // PRIMARY channel (first in the Settings list, e.g. AI Hive) drives the funnel growth;\n // falls back to the connected channel (MINE) when no primary is set or it isn't owned.\n let primaryId = \"\";\n const firstTarget = (String(creds.extra_config?.youtube_channels || \"\").split(\",\")[0] || \"\").trim();\n if (firstTarget) {\n if (/^UC[A-Za-z0-9_-]{20,}$/.test(firstTarget)) primaryId = firstTarget;\n else {\n const rr = await fetch(`https://www.googleapis.com/youtube/v3/channels?part=id&forHandle=${encodeURIComponent(\"@\" + firstTarget.replace(/^@/, \"\"))}`, { headers: auth });\n const rj = await safeJson(rr);\n const cid = rj?.items?.[0]?.id;\n if (typeof cid === \"string\") primaryId = cid;\n }\n }\n const reportFor = (sel: string) => `https://youtubeanalytics.googleapis.com/v2/reports?ids=${sel}&metrics=views,subscribersGained&startDate=${startDate}&endDate=${endDate}`;\n let ar = await fetch(reportFor(primaryId ? `channel==${encodeURIComponent(primaryId)}` : \"channel==MINE\"), { headers: auth });\n if (!ar.ok && primaryId) ar = await fetch(reportFor(\"channel==MINE\"), { headers: auth });\n if (ar.ok) {\n const ad = await safeJson(ar);\n const row = ad?.rows?.[0];\n if (Array.isArray(row)) {\n return [\n { integration: \"youtube\", metric: \"views\", value: parseInt(row[0] || \"0\", 10) || 0, unit: \"views/30d\", stage: \"TOFU\" },\n { integration: \"youtube\", metric: \"subscribers_gained\", value: parseInt(row[1] || \"0\", 10) || 0, unit: \"subs/30d\", stage: \"TOFU\" },\n ];\n }\n }\n } catch { /* fall through to lifetime channel stats */ }\n }\n const keyParam = !creds.access_token && creds.api_key ? `&key=${encodeURIComponent(creds.api_key)}` : \"\";\n try {\n const url = creds.access_token\n ? `https://www.googleapis.com/youtube/v3/channels?part=statistics&mine=true`\n : `https://www.googleapis.com/youtube/v3/channels?part=statistics&chart=mostPopular&maxResults=1${keyParam}`;\n const r = await fetch(url, { headers: auth });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const s = d?.items?.[0]?.statistics;\n if (!s) return [];\n return [\n { integration: \"youtube\", metric: \"views\", value: parseInt(s.viewCount || \"0\", 10), unit: \"views\", stage: \"TOFU\" },\n { integration: \"youtube\", metric: \"subscribers\", value: parseInt(s.subscriberCount || \"0\", 10), unit: \"subs\", stage: \"TOFU\" },\n ];\n } catch { return []; }\n}\n\nasync function fetchLinkedIn(): Promise {\n // HONEST NULL (IQ2 / Part 3 fix 1): real post analytics require r_organization_social +\n // Marketing Developer Platform approval, which this app doesn't have. Rather than emit\n // fabricated value:0 metrics (which read as a measured \"0 impressions\"), we return NOTHING\n // when no real LinkedIn analytics are available — the funnel/correlations simply omit LinkedIn.\n const creds = await getCredentials(\"linkedin\");\n if (!creds?.access_token) return [];\n const orgId = (creds.extra_config?.org_id ?? creds.extra_config?.author_id ?? \"\").toString().trim();\n if (!orgId) return [];\n try {\n // Org share statistics (versioned /rest/). Only emits a metric when the API returns a real value.\n const r = await fetch(\n `https://api.linkedin.com/rest/organizationalEntityShareStatistics?q=organizationalEntity&organizationalEntity=${encodeURIComponent(orgId)}`,\n { headers: { Authorization: `Bearer ${creds.access_token}`, \"LinkedIn-Version\": \"202405\", \"X-Restli-Protocol-Version\": \"2.0.0\" } },\n );\n if (!r.ok) return [];\n const d = await safeJson(r);\n const stats = d?.elements?.[0]?.totalShareStatistics;\n if (!stats) return [];\n const out: MetricPoint[] = [];\n if (typeof stats.impressionCount === \"number\") out.push({ integration: \"linkedin\", metric: \"post_impressions\", value: stats.impressionCount, unit: \"impressions\", stage: \"TOFU\" });\n if (typeof stats.engagement === \"number\") out.push({ integration: \"linkedin\", metric: \"engagement_rate\", value: stats.engagement * 100, unit: \"%\", stage: \"TOFU\" });\n return out;\n } catch { return []; }\n}\n\nasync function fetchGmail(days = 30): Promise {\n let creds = await getCredentials(\"gmail\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token) return [];\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(\"https://gmail.googleapis.com/gmail/v1/users/me/profile\", {\n headers: { Authorization: `Bearer ${creds.access_token}` },\n });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"gmail\", metric: \"messages_total\", value: d?.messagesTotal || 0, unit: \"msgs\", stage: \"MOFU\" });\n out.push({ integration: \"gmail\", metric: \"threads_total\", value: d?.threadsTotal || 0, unit: \"threads\", stage: \"MOFU\" });\n }\n } catch {}\n // MOFU: deal_intent_threads — count Gmail threads with deal-intent keywords in the\n // selected window. A keyword match signals INTENT/consideration, not a closed deal, so\n // it lands in MOFU as a soft intent signal — not BOFU revenue.\n try {\n const q = encodeURIComponent(`newer_than:${days}d (pricing OR proposal OR contract OR quote OR \"sales agreement\")`);\n const r = await fetch(`https://gmail.googleapis.com/gmail/v1/users/me/messages?q=${q}&maxResults=1`,\n { headers: { Authorization: `Bearer ${creds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"gmail\", metric: \"deal_intent_threads\", value: d?.resultSizeEstimate || 0, unit: \"threads\", stage: \"MOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchOutlook(): Promise {\n const creds = await getCredentials(\"outlook\");\n if (!creds?.access_token) return [];\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(\"https://graph.microsoft.com/v1.0/me/messages?$top=1&$count=true\", {\n headers: { Authorization: `Bearer ${creds.access_token}`, ConsistencyLevel: \"eventual\" },\n });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"outlook\", metric: \"inbox_count\", value: d?.[\"@odata.count\"] || 0, unit: \"msgs\", stage: \"MOFU\" });\n }\n } catch {}\n // BOFU: meetings booked (next 14 days) — real calendar query\n try {\n const start = new Date().toISOString();\n const end = new Date(Date.now() + 14 * 86400000).toISOString();\n const r = await fetch(`https://graph.microsoft.com/v1.0/me/calendar/events?$top=1&$count=true&$filter=start/dateTime ge '${start}' and start/dateTime le '${end}'`,\n { headers: { Authorization: `Bearer ${creds.access_token}`, ConsistencyLevel: \"eventual\" } });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"outlook\", metric: \"meetings_booked\", value: d?.[\"@odata.count\"] || 0, unit: \"mtgs\", stage: \"BOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchWordPress(): Promise {\n const creds = await getCredentials(\"wordpress\");\n const siteUrl = (creds?.extra_config?.site_url ?? \"\").replace(/\\/$/, \"\");\n if (!siteUrl || !creds?.api_key) return [];\n try {\n const auth = btoa(`${creds.api_key}:${creds.api_secret ?? \"\"}`);\n const r = await fetch(`${siteUrl}/wp-json/wp/v2/posts?per_page=1`, {\n headers: { Authorization: `Basic ${auth}` },\n });\n if (!r.ok) return [];\n const total = parseInt(r.headers.get(\"x-wp-total\") || \"0\", 10);\n return [{ integration: \"wordpress\", metric: \"published_posts\", value: total, unit: \"posts\", stage: \"MOFU\" }];\n } catch { return []; }\n}\n\n// ─── FUNNEL SUMMARY ─────────────────────────────────────────────────────────\nconst STAGE_META: Record = {\n TOFU: { label: \"Awareness & Reach\", description: \"Top-of-funnel visibility — SEO, social, content distribution.\" },\n MOFU: { label: \"Engagement & Consideration\", description: \"Mid-funnel signal — site engagement, content depth, outreach reply.\" },\n BOFU: { label: \"Conversion & Revenue\", description: \"Bottom-of-funnel — goal completions, deals, meetings, revenue.\" },\n};\n\nexport async function getFunnelSummary(force = false, days = 30): Promise {\n const cacheKey = `funnel_summary_${days}d`;\n if (!force) {\n const cached = await getCached(cacheKey);\n if (cached) return cached;\n }\n\n // Optional user-defined funnel-metric weights (Settings → Growth Methodology).\n // When no overrides exist this map is empty and health computation is identical\n // to the unweighted mean. A weight of 1 also leaves a metric's contribution intact.\n const overrideWeight = new Map(); // key: `${stage}:${integration}:${metric}`\n try {\n const cfg = await getMethodConfig();\n const ov = cfg.funnel_metric_overrides;\n for (const stage of [\"TOFU\", \"MOFU\", \"BOFU\"] as Stage[]) {\n for (const o of (ov?.[stage] ?? [])) {\n if (Number.isFinite(o.weight)) {\n overrideWeight.set(`${stage}:${o.integration}:${o.metric}`, o.weight);\n }\n }\n }\n } catch { /* config unavailable → no overrides, identical behavior */ }\n\n const results = await Promise.allSettled([\n fetchAhrefs(), fetchGSC(days), fetchGA4(days), fetchYouTube(),\n fetchLinkedIn(), fetchGmail(days), fetchOutlook(), fetchWordPress(),\n ]);\n const allMetrics: MetricPoint[] = results\n .filter((r): r is PromiseFulfilledResult => r.status === \"fulfilled\")\n .flatMap((r) => r.value)\n .map((m) => ({ ...m, aarrr: aarrrOf(m.integration, m.metric), recorded_at: new Date().toISOString() }));\n\n // Update baselines on first run + write every value to metric_history for delta_7d\n for (const m of allMetrics) {\n const b = await getBaseline(m.integration, m.metric);\n if (b === null) await setBaseline(m.integration, m.metric, m.value);\n await recordMetric(m.integration, m.metric, m.value);\n }\n\n // Compute per-stage health. Each metric gets baseline delta + 7-day delta from metric_history.\n const stages: StageHealth[] = ([\"TOFU\", \"MOFU\", \"BOFU\"] as Stage[]).map((stage) => {\n const stageMetrics = allMetrics.filter((m) => m.stage === stage);\n const withDeltas = stageMetrics.map(async (m) => {\n // Prefer rolling 30d baseline once we have ≥3 samples; fall back to frozen warm-start.\n const frozen = await getBaseline(m.integration, m.metric);\n const rolling = await getRollingBaseline(m.integration, m.metric);\n const baseline = rolling ? rolling.avg : frozen;\n if (rolling) await persistRolling(m.integration, m.metric, rolling);\n const delta_pct = baseline && baseline !== 0 ? ((m.value - baseline) / Math.abs(baseline)) * 100 : null;\n // Cold-start disclosure: a metric with < 3 samples of its own history has no\n // trustworthy rolling baseline, so its health leans on the absolute industry prior.\n const signal_count = rolling ? rolling.sample_count : 0;\n const low_confidence = signal_count < 3;\n // delta_7d / delta_30d: real timeseries comparison vs same metric N days ago (A2).\n // TOFU stage UI prefers 30d (SEO/branding moves slowly); MOFU/BOFU keep 7d for tighter feedback.\n const [v7, v30] = await Promise.all([\n getMetricValueDaysAgo(m.integration, m.metric, 7),\n getMetricValueDaysAgo(m.integration, m.metric, 30),\n ]);\n const delta_7d = v7 != null && v7 !== 0 ? ((m.value - v7) / Math.abs(v7)) * 100 : null;\n const delta_30d = v30 != null && v30 !== 0 ? ((m.value - v30) / Math.abs(v30)) * 100 : null;\n return { ...m, delta_pct, baseline, delta_7d, delta_30d, signal_count, low_confidence };\n });\n return { stage, metrics: withDeltas, stageMetrics };\n }) as any;\n\n // Resolve the promises in metrics.\n const resolvedStages: StageHealth[] = await Promise.all(\n stages.map(async (s: any) => {\n const metrics = await Promise.all(s.metrics);\n if (metrics.length === 0) {\n return {\n stage: s.stage,\n label: STAGE_META[s.stage as Stage].label,\n description: STAGE_META[s.stage as Stage].description,\n metrics,\n health_score: 0,\n diagnosis: \"No data — connect integrations for this stage.\",\n };\n }\n\n // ── Health scoring: WARM-START relative · COLD-START absolute prior ──\n // PROVENANCE: the absolute industry benchmark (normalizeAbsolute) is a COLD-START\n // PRIOR only — used when a metric has < 3 samples of its own history. Once warm\n // (signal_count ≥ 3) we score the metric RELATIVE to its own rolling 30d baseline\n // (delta_pct), so health drifts with the account's own reality instead of a frozen\n // industry constant. Stage health is the WEIGHTED mean — user funnel-metric\n // overrides (weight 0..2) up/down-weight metrics; with no overrides every weight is\n // 1 and this is the plain mean.\n // \"Lower is better\" metrics: a rising value should LOWER health, not raise it.\n const BAD_WHEN_UP = new Set([\"bounce_rate\", \"average_position\"]);\n const weightedScores: Array<{ score: number; w: number }> = [];\n const deltaContributions: number[] = [];\n for (const m of metrics as any[]) {\n const abs = normalizeAbsolute(m.integration, m.metric, m.value);\n const warm = (m.signal_count ?? 0) >= 3;\n // Warm-start: relative score off the metric's own rolling baseline (50 = on\n // baseline). Direction-aware so \"lower is better\" metrics aren't penalized for\n // dropping. Cold-start (or warm but no usable baseline delta): absolute prior.\n let score: number | null = null;\n if (warm && m.delta_pct != null) {\n const direction = BAD_WHEN_UP.has(m.metric) ? -1 : 1;\n score = Math.max(0, Math.min(100, 50 + m.delta_pct * direction * 2.5));\n } else if (abs !== null) {\n score = abs;\n }\n if (score !== null) {\n const w = overrideWeight.get(`${s.stage}:${m.integration}:${m.metric}`) ?? 1;\n weightedScores.push({ score, w });\n }\n // Chronological delta_7d bonus: ±15 added to the score if trending. Preserves the\n // original bounce_rate inversion (only metric previously direction-flipped here).\n if (m.delta_7d != null && score !== null) {\n const direction = m.metric === \"bounce_rate\" ? -1 : 1;\n deltaContributions.push(Math.max(-15, Math.min(15, m.delta_7d * direction * 0.5)));\n }\n }\n const weightSum = weightedScores.reduce((a, x) => a + x.w, 0);\n const baseHealth = weightedScores.length && weightSum > 0\n ? weightedScores.reduce((a, x) => a + x.score * x.w, 0) / weightSum\n : 50;\n const deltaBonus = deltaContributions.length\n ? deltaContributions.reduce((a, b) => a + b, 0) / deltaContributions.length\n : 0;\n const health_score = Math.max(0, Math.min(100, Math.round(baseHealth + deltaBonus)));\n\n // Chronological-aware diagnosis: state of absolute health + 7d trend direction.\n const avgTrend = deltaContributions.length\n ? deltaContributions.reduce((a, b) => a + b, 0) / deltaContributions.length\n : 0;\n let diagnosis: string;\n if (health_score >= 75) diagnosis = \"Healthy — metrics meet or exceed SaaS benchmarks.\" + (avgTrend > 2 ? \" Trending up week-over-week.\" : avgTrend < -2 ? \" Mild 7d softening — watch closely.\" : \"\");\n else if (health_score >= 50) diagnosis = \"Moderate — room to improve against benchmarks.\" + (avgTrend > 2 ? \" 7d momentum is positive.\" : avgTrend < -2 ? \" 7d trend is negative.\" : \"\");\n else if (health_score >= 25) diagnosis = \"Underperforming benchmarks — focus optimization here.\" + (avgTrend < -2 ? \" Compounding 7d decline.\" : \"\");\n else diagnosis = \"Critical — metrics far below industry baselines. Prioritize this stage.\";\n\n return {\n stage: s.stage,\n label: STAGE_META[s.stage as Stage].label,\n description: STAGE_META[s.stage as Stage].description,\n metrics,\n health_score,\n diagnosis,\n };\n })\n );\n\n // Bottleneck = lowest-health stage with data.\n const candidates = resolvedStages.filter((s) => s.metrics.length > 0);\n const bottleneckStage = candidates.length\n ? candidates.reduce((lo, s) => (s.health_score < lo.health_score ? s : lo))\n : null;\n\n // Weighted overall_health — only counts stages with data so a missing integration\n // doesn't crater the composite. Weights renormalize when a stage is missing.\n const stageWeights: Record = { TOFU: 0.25, MOFU: 0.40, BOFU: 0.35 };\n const dataStages = resolvedStages.filter((s) => s.metrics.length > 0);\n const overallHealth = dataStages.length\n ? (() => {\n const weightSum = dataStages.reduce((acc, s) => acc + stageWeights[s.stage], 0);\n const weighted = dataStages.reduce((acc, s) => acc + s.health_score * stageWeights[s.stage], 0);\n return Math.max(0, Math.min(100, weighted / weightSum));\n })()\n : 0;\n\n const summary: FunnelSummary = {\n stages: resolvedStages,\n bottleneck: bottleneckStage\n ? { stage: bottleneckStage.stage, reason: bottleneckStage.diagnosis }\n : null,\n overall_health: Math.round(overallHealth),\n total_metrics_observed: allMetrics.length,\n total_integrations_connected: new Set(allMetrics.map((m) => m.integration)).size,\n generated_at: new Date().toISOString(),\n };\n\n await setCached(cacheKey, summary, 300);\n // Also cache under the legacy key so getCorrelations() (which calls getFunnelSummary() without\n // days) can still find a warm entry when the default 30d summary was just computed.\n if (days === 30) await setCached(\"funnel_summary\", summary, 300);\n return summary;\n}\n\n// ─── CORRELATIONS ────────────────────────────────────────────────────────────\nfunction getMetric(all: MetricPoint[], integration: string, metric: string): MetricPoint | undefined {\n return all.find((m) => m.integration === integration && m.metric === metric);\n}\n\n// Candidate cause→effect metric pairs to test for real lagged correlation over\n// metric_history. Order matters only for output ordering. Each pair carries the\n// funnel-stage endpoints and an action prompt; the narrative/strength/confidence/lag\n// are derived ENTIRELY from the measured coefficient — nothing is hand-typed.\ninterface CorrCandidate {\n id: string;\n src: { integration: string; metric: string };\n dst: { integration: string; metric: string };\n from: Stage;\n to: Stage;\n label_src: string;\n label_dst: string;\n action_prompt: string;\n}\nconst CORRELATION_CANDIDATES: CorrCandidate[] = [\n { id: \"dr-clicks\", src: { integration: \"ahrefs\", metric: \"domain_rating\" }, dst: { integration: \"gsc\", metric: \"clicks\" },\n from: \"TOFU\", to: \"TOFU\", label_src: \"domain authority\", label_dst: \"organic clicks\",\n action_prompt: \"Double down on the keyword clusters where rankings improved — let the AI prioritize.\" },\n { id: \"clicks-sessions\", src: { integration: \"gsc\", metric: \"clicks\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"search clicks\", label_dst: \"site sessions\",\n action_prompt: \"Audit the landing pages absorbing your organic clicks so the traffic converts to engaged sessions.\" },\n { id: \"ctr-sessions\", src: { integration: \"gsc\", metric: \"ctr\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"search CTR\", label_dst: \"site sessions\",\n action_prompt: \"Roll the title/meta patterns from your highest-CTR pages out to similar queries.\" },\n { id: \"imp-clicks\", src: { integration: \"gsc\", metric: \"impressions\" }, dst: { integration: \"gsc\", metric: \"clicks\" },\n from: \"TOFU\", to: \"TOFU\", label_src: \"search impressions\", label_dst: \"search clicks\",\n action_prompt: \"Track which queries gained impressions and ensure landing pages can absorb the traffic.\" },\n { id: \"eng-conv\", src: { integration: \"ga4\", metric: \"engagement_time\" }, dst: { integration: \"ga4\", metric: \"conversions\" },\n from: \"MOFU\", to: \"BOFU\", label_src: \"engagement time\", label_dst: \"conversions\",\n action_prompt: \"Pin the highest-engagement pages above the fold in nav — they're driving conversions.\" },\n { id: \"sessions-conv\", src: { integration: \"ga4\", metric: \"sessions\" }, dst: { integration: \"ga4\", metric: \"conversions\" },\n from: \"MOFU\", to: \"BOFU\", label_src: \"site sessions\", label_dst: \"conversions\",\n action_prompt: \"Protect the session→conversion path — tighten CTAs on your top entry pages.\" },\n { id: \"li-sessions\", src: { integration: \"linkedin\", metric: \"post_impressions\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"LinkedIn impressions\", label_dst: \"site sessions\",\n action_prompt: \"Schedule posts to drive referral sessions — coordinate launches with high-reach LinkedIn content.\" },\n];\n\n// Build a CorrelationSignal from a measured lagged correlation. Direction is the SIGN of r,\n// strength + confidence come straight from |r|, and the narrative cites r/n/lag honestly.\nfunction buildCorrelationSignal(\n c: CorrCandidate,\n res: { r: number; lag: number; n: number; p: number },\n srcLatest: MetricPoint | undefined,\n dstLatest: MetricPoint | undefined,\n): CorrelationSignal {\n const absR = Math.abs(res.r);\n const direction: CorrelationSignal[\"direction\"] = res.r > 0 ? \"positive\" : res.r < 0 ? \"negative\" : \"neutral\";\n const verb = direction === \"positive\" ? \"rises with\" : direction === \"negative\" ? \"moves opposite to\" : \"tracks\";\n const lagPhrase = res.lag > 0 ? ` with a ~${res.lag}-day lag` : \" same-day\";\n const narrative =\n `${c.label_src} ${verb} ${c.label_dst}${lagPhrase} ` +\n `(r=${res.r.toFixed(2)}, n=${res.n} paired days, p=${res.p.toFixed(3)}).`;\n return {\n id: c.id,\n source_metric: {\n integration: c.src.integration, metric: c.src.metric,\n value: srcLatest?.value ?? 0, unit: srcLatest?.unit ?? \"\",\n },\n target_metric: {\n integration: c.dst.integration, metric: c.dst.metric,\n value: dstLatest?.value ?? 0, unit: dstLatest?.unit ?? \"\",\n },\n direction,\n strength: corrStrength(absR),\n lag_days: res.lag,\n narrative,\n funnel_stage_from: c.from,\n funnel_stage_to: c.to,\n confidence: Math.round(absR * 100) / 100, // the REAL coefficient magnitude\n action_prompt: c.action_prompt,\n };\n}\n\nexport async function getCorrelations(force = false): Promise {\n if (!force) {\n const cached = await getCached(\"correlations\");\n if (cached) return cached;\n }\n // Latest live values (for display only) come from the funnel summary; the\n // correlation MATH runs entirely over metric_history daily series.\n const summary = await getFunnelSummary();\n const all = summary.stages.flatMap((s) => s.metrics);\n\n const signals: CorrelationSignal[] = [];\n for (const c of CORRELATION_CANDIDATES) {\n const [a, b] = await Promise.all([\n getMetricSeries(c.src.integration, c.src.metric),\n getMetricSeries(c.dst.integration, c.dst.metric),\n ]);\n if (a.length < MIN_CORR_SAMPLES || b.length < MIN_CORR_SAMPLES) continue;\n const res = bestLaggedCorrelation(a, b, 14);\n // Honest significance gate: enough paired days, real effect size, low p.\n if (res.n < MIN_CORR_SAMPLES) continue;\n if (Math.abs(res.r) < MIN_CORR_ABS_R) continue;\n if (res.p > MAX_CORR_P) continue;\n const srcLatest = getMetric(all, c.src.integration, c.src.metric);\n const dstLatest = getMetric(all, c.dst.integration, c.dst.metric);\n signals.push(buildCorrelationSignal(c, res, srcLatest, dstLatest));\n }\n\n // No qualifying correlations → honest empty result (no fabricated signals).\n await setCached(\"correlations\", signals, 300);\n return signals;\n}\n\n// ─── RECOMMENDATIONS ────────────────────────────────────────────────────────\nexport async function getRecommendations(): Promise> {\n const cached = await getCached(\"recommendations\");\n if (cached) return cached;\n\n const summary = await getFunnelSummary();\n const correlations = await getCorrelations();\n const recs: Array<{ title: string; action: string; priority: string }> = [];\n\n // Top recommendation: address bottleneck\n if (summary.bottleneck) {\n recs.push({\n title: `Fix the ${summary.bottleneck.stage} bottleneck`,\n action: `Why is ${summary.bottleneck.stage} health low?`,\n priority: \"critical\",\n });\n }\n // Highest-confidence positive signal: amplify it\n const positives = correlations.filter((c) => c.direction === \"positive\").sort((a, b) => b.confidence - a.confidence);\n if (positives[0]) {\n recs.push({\n title: positives[0].narrative.slice(0, 60) + \"…\",\n action: `How do I amplify the ${positives[0].source_metric.metric} → ${positives[0].target_metric.metric} chain?`,\n priority: \"high\",\n });\n }\n // Highest-confidence negative signal: investigate\n const negatives = correlations.filter((c) => c.direction === \"negative\").sort((a, b) => b.confidence - a.confidence);\n if (negatives[0]) {\n recs.push({\n title: `Investigate: ${negatives[0].narrative.slice(0, 50)}…`,\n action: negatives[0].action_prompt,\n priority: \"high\",\n });\n }\n\n // Fallback if no real data\n if (recs.length === 0) {\n recs.push(\n { title: \"Connect Google Workspace to unlock funnel intelligence\", action: \"How do I connect Google?\", priority: \"high\" },\n { title: \"Connect Ahrefs to track TOFU authority signals\", action: \"What does Ahrefs add to my funnel?\", priority: \"medium\" },\n { title: \"Configure GA4 property ID for MOFU/BOFU visibility\", action: \"How do I set up GA4?\", priority: \"medium\" },\n );\n }\n\n await setCached(\"recommendations\", recs.slice(0, 5), 300);\n return recs.slice(0, 5);\n}\n\n// ─── MQL / SQL LEAD SCORING ──────────────────────────────────────────────────\n// B2B SaaS qualification math:\n// MQL score = sum of behavioral signals (opens, clicks, pricing views, downloads)\n// MQL threshold: ≥ 40\n// SQL = 2+ qualified signals (reply, accepted connection, booked meeting, requested demo)\n// Since Nexus has no CRM, we derive from Gmail inbox threads + Outlook calendar overlap.\nexport interface LeadScore {\n email: string;\n name: string;\n company: string;\n mql_score: number;\n mql_qualified: boolean; // score >= 40\n sql_signals: string[]; // list of qualified signals fired\n sql_qualified: boolean; // signals.length >= 2\n stage: \"cold\" | \"MQL\" | \"SQL\";\n signal_breakdown: Record;\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n last_touch_at?: string;\n signal_count: number; // raw engagement events rolled into this account\n low_confidence: boolean; // signal_count < 3 → insufficient history, disclose in UI\n}\n\n// One raw engagement event scraped from an inbox/calendar. Each carries a typed\n// signal whose business weight comes from SIGNAL_WEIGHTS and whose recency drives\n// time-decay. Events are rolled up by ACCOUNT (email domain) below.\ninterface RawSignal {\n email: string;\n name: string;\n company: string;\n signal_type: string; // SIGNAL_WEIGHTS key\n detected_at: string; // ISO; \"\" when unknown (treated as now → no decay)\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n qualified?: boolean; // counts toward SQL qualification (reply/demo/meeting)\n}\n\n// Free / consumer mailbox domains that should NOT collapse into a shared company\n// account (mirrors signals.ts). Such senders fall back to company, then full email.\nconst GENERIC_LEAD_DOMAINS = new Set([\n \"gmail.com\", \"googlemail.com\", \"yahoo.com\", \"ymail.com\", \"hotmail.com\",\n \"outlook.com\", \"live.com\", \"msn.com\", \"aol.com\", \"icloud.com\", \"me.com\",\n \"mac.com\", \"proton.me\", \"protonmail.com\", \"gmx.com\", \"mail.com\",\n \"zoho.com\", \"yandex.com\", \"qq.com\", \"163.com\", \"126.com\",\n]);\n\n// Account key + domain + human label for a contact. Real corporate domains group\n// every contact at that domain into one account row.\nfunction leadAccountIdentity(email: string, company: string): { key: string; domain: string; label: string } {\n const at = email.lastIndexOf(\"@\");\n const rawDomain = at >= 0 ? email.slice(at + 1).trim().toLowerCase() : \"\";\n const cleanCompany = (company || \"\").trim();\n if (rawDomain && rawDomain.includes(\".\") && !GENERIC_LEAD_DOMAINS.has(rawDomain)) {\n return { key: \"domain:\" + rawDomain, domain: rawDomain, label: cleanCompany || rawDomain };\n }\n if (cleanCompany) return { key: \"company:\" + cleanCompany.toLowerCase(), domain: \"\", label: cleanCompany };\n return { key: \"email:\" + email.toLowerCase(), domain: rawDomain, label: email };\n}\n\n// FIT (0..1): how well an account's domain/company tokens overlap the ICP/product\n// language from the company profile. Default 0.5 when no profile text exists — an\n// honest \"unknown\", not a fabricated high score.\nconst FIT_TOKEN_RE = /[a-z0-9]+/g;\nfunction tokenize(s: string): Set {\n const out = new Set();\n for (const m of (s || \"\").toLowerCase().matchAll(FIT_TOKEN_RE)) {\n if (m[0].length >= 3) out.add(m[0]);\n }\n return out;\n}\nfunction computeFit(accountText: string, icpTokens: Set): number {\n if (icpTokens.size === 0) return 0.5; // no ICP defined → neutral prior\n const at = tokenize(accountText);\n if (at.size === 0) return 0.5;\n let overlap = 0;\n for (const t of at) if (icpTokens.has(t)) overlap++;\n // Fraction of the account's own tokens that appear in the ICP/product vocabulary.\n return Math.max(0, Math.min(1, overlap / at.size));\n}\n\nexport async function getLeadScores(): Promise {\n const cached = await getCached(\"lead_scores\");\n if (cached) return cached;\n\n // ── 1. Scrape raw engagement events from Outlook + Gmail (ingestion only). ──\n const raw: RawSignal[] = [];\n\n const outlookCreds = await getCredentials(\"outlook\");\n if (outlookCreds?.access_token) {\n try {\n const r = await fetch(\"https://graph.microsoft.com/v1.0/me/messages?$top=50&$orderby=receivedDateTime desc&$select=from,subject,isRead,body,receivedDateTime\",\n { headers: { Authorization: `Bearer ${outlookCreds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n for (const m of (d.value || [])) {\n const email = m.from?.emailAddress?.address;\n if (!email) continue;\n const name = m.from?.emailAddress?.name || email.split(\"@\")[0];\n const company = (email.split(\"@\")[1] || \"\").split(\".\")[0];\n const when = m.receivedDateTime || \"\";\n const subj = (m.subject || \"\").toLowerCase();\n const body = (m.body?.content || \"\").toLowerCase();\n const text = subj + \" \" + body;\n const push = (signal_type: string, qualified = false) =>\n raw.push({ email, name, company, signal_type, detected_at: when, source: \"outlook\", qualified });\n // Map inbox content → typed signals (each weighted via SIGNAL_WEIGHTS).\n push(\"email_open\");\n if (/pricing|plans|cost/.test(text)) push(\"pricing_keyword\");\n if (/download|whitepaper|ebook|guide/.test(text)) push(\"content_download\");\n if (/^re:|reply|response/i.test(subj)) push(\"email_reply\", true);\n if (/demo|trial|proposal|quote/.test(text)) push(\"demo_request\", true);\n }\n }\n } catch {}\n\n // Outlook calendar → booked discovery calls (a strong SQL signal).\n try {\n const start = new Date().toISOString();\n const end = new Date(Date.now() + 30 * 86400000).toISOString();\n const r = await fetch(`https://graph.microsoft.com/v1.0/me/calendar/events?$top=50&$filter=start/dateTime ge '${start}' and start/dateTime le '${end}'&$select=attendees,subject,start`,\n { headers: { Authorization: `Bearer ${outlookCreds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n for (const ev of (d.value || [])) {\n const when = ev.start?.dateTime || new Date().toISOString();\n for (const a of (ev.attendees || [])) {\n const email = a.emailAddress?.address;\n if (!email) continue;\n const name = a.emailAddress?.name || email.split(\"@\")[0];\n const company = (email.split(\"@\")[1] || \"\").split(\".\")[0];\n raw.push({ email, name, company, signal_type: \"calendar_event\", detected_at: when, source: \"outlook\", qualified: true });\n }\n }\n }\n } catch {}\n }\n\n // Gmail thread analysis — runs independent of Outlook so Google-only users still get leads.\n try {\n const gmailCreds = await getCredentials(\"gmail\");\n const token = gmailCreds?.access_token;\n if (token) {\n const listR = await fetch(\"https://gmail.googleapis.com/gmail/v1/users/me/messages?maxResults=30&q=in:inbox+newer_than:30d\",\n { headers: { Authorization: `Bearer ${token}` } });\n if (listR.ok) {\n const list = await safeJson(listR);\n const ids: string[] = (list.messages || []).map((m: any) => m.id).slice(0, 30);\n const fetched = await Promise.allSettled(ids.map((id) =>\n fetch(`https://gmail.googleapis.com/gmail/v1/users/me/messages/${id}?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Date`,\n { headers: { Authorization: `Bearer ${token}` } }).then((r) => r.ok ? r.json() : null)\n ));\n for (const f of fetched) {\n if (f.status !== \"fulfilled\" || !f.value) continue;\n const msg: any = f.value;\n const headers: any[] = msg.payload?.headers || [];\n const findH = (n: string) => headers.find((h) => h.name?.toLowerCase() === n.toLowerCase())?.value || \"\";\n const from = findH(\"From\");\n const subject = findH(\"Subject\");\n const date = findH(\"Date\");\n const snippet = (msg.snippet || \"\").toLowerCase();\n const emailMatch = from.match(/<([^>]+)>|([\\w.+-]+@[\\w.-]+)/);\n const email = (emailMatch?.[1] || emailMatch?.[2] || \"\").toLowerCase();\n if (!email) continue;\n const nameMatch = from.match(/^([^<]+)\n raw.push({ email, name, company, signal_type, detected_at: when, source: \"gmail\", qualified });\n push(\"email_open\");\n if (/pricing|plans|cost|how much/.test(text)) push(\"pricing_keyword\");\n if (/proposal|quote|contract|sow|statement of work/.test(text)) push(\"demo_request\", true);\n if (/demo|trial|walkthrough|kickoff/.test(text)) push(\"demo_request\", true);\n if (/^re:/i.test(subj.trim())) push(\"email_reply\", true);\n }\n }\n }\n } catch { /* gmail optional */ }\n\n // ── 2. ICP / product vocabulary from the company profile (for FIT). ──\n const profile = await getCompanyProfile();\n const icpTokens = tokenize([profile.icp, profile.product, profile.markets].filter(Boolean).join(\" \"));\n\n // ── 3. Roll signals up by ACCOUNT (email domain). ──\n const DECAY_TAU = 14; // days\n const nowMs = Date.now();\n type AccountAgg = {\n label: string; domain: string;\n rep_email: string; rep_name: string; rep_company: string; last_touch_at: string;\n intent: number; // Σ weight · exp(-ageDays/14)\n breakdown: Record; // decayed score per signal_type\n qualified_types: Set; // distinct SQL-grade signal types fired\n signal_count: number; // raw events rolled in (cold-start disclosure)\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n };\n const byAccount = new Map();\n for (const s of raw) {\n const { key, domain, label } = leadAccountIdentity(s.email, s.company);\n const weight = SIGNAL_WEIGHTS[s.signal_type]?.score ?? 5;\n // INTENT term: weight · exp(-ageDays/14). Unknown/future timestamps → factor 1.\n let decay = 1;\n const t = s.detected_at ? Date.parse(s.detected_at) : NaN;\n if (Number.isFinite(t)) {\n const ageDays = (nowMs - t) / 86_400_000;\n if (ageDays > 0) decay = Math.exp(-ageDays / DECAY_TAU);\n }\n const contribution = weight * decay;\n\n let agg = byAccount.get(key);\n if (!agg) {\n agg = {\n label, domain,\n rep_email: s.email, rep_name: s.name, rep_company: s.company || label,\n last_touch_at: s.detected_at || \"\",\n intent: 0, breakdown: {}, qualified_types: new Set(), signal_count: 0, source: s.source,\n };\n byAccount.set(key, agg);\n }\n agg.signal_count += 1; // every raw signal pushed into this account\n agg.intent += contribution;\n agg.breakdown[s.signal_type] = (agg.breakdown[s.signal_type] || 0) + Math.round(contribution * 100) / 100;\n if (s.qualified) agg.qualified_types.add(s.signal_type);\n if (s.detected_at && (!agg.last_touch_at || s.detected_at > agg.last_touch_at)) {\n agg.last_touch_at = s.detected_at;\n agg.rep_email = s.email; agg.rep_name = s.name;\n if (s.company) agg.rep_company = s.company;\n }\n }\n\n // ── 4. Score each account: FIT · INTENT. ──\n // MQL threshold ≥ 40 (same bar as before); SQL = ≥ 2 distinct qualified signal types.\n const MQL_THRESHOLD = 40;\n const result: LeadScore[] = [];\n for (const agg of byAccount.values()) {\n const accountText = [agg.label, agg.domain, agg.rep_company].filter(Boolean).join(\" \");\n const fit = computeFit(accountText, icpTokens);\n const score = Math.round(fit * agg.intent);\n const sql_signals = Array.from(agg.qualified_types);\n const sql_qualified = sql_signals.length >= 2;\n const mql_qualified = score >= MQL_THRESHOLD;\n result.push({\n email: agg.rep_email,\n name: agg.rep_name,\n company: agg.rep_company || agg.label,\n mql_score: score,\n mql_qualified,\n sql_signals,\n sql_qualified,\n stage: sql_qualified ? \"SQL\" : mql_qualified ? \"MQL\" : \"cold\",\n signal_breakdown: { ...agg.breakdown, fit: Math.round(fit * 100) / 100 },\n source: agg.source,\n last_touch_at: agg.last_touch_at || undefined,\n // Cold-start honesty: disclose thin history without fabricating or suppressing the\n // score. < 3 raw signals → the UI should flag this lead as low-confidence.\n signal_count: agg.signal_count,\n low_confidence: agg.signal_count < 3,\n });\n }\n\n // Record state transitions so engagement velocity has data to compute from.\n // recordLeadStateChange skips inserts when the state hasn't changed since last write.\n try {\n const { recordLeadStateChange } = await import(\"./aio.ts\");\n await Promise.allSettled(result.map((l) => recordLeadStateChange(l.email, l.stage)));\n } catch { /* non-critical */ }\n // Sort: SQL first, then MQL, then by score desc\n result.sort((a, b) => {\n const rank = (l: LeadScore) => l.sql_qualified ? 2 : l.mql_qualified ? 1 : 0;\n return (rank(b) - rank(a)) || (b.mql_score - a.mql_score);\n });\n\n const sliced = result.slice(0, 50);\n await setCached(\"lead_scores\", sliced, 300);\n return sliced;\n}\n\n// ─── AIO MARKETING KPIs (the \"math problem\" surface) ────────────────────────\n// CAC = est_marketing_spend / new_customers_acquired\n// LTV = avg_deal_size × retention_months (default retention_months = 12 — configurable)\n// LTV/CAC ratio: healthy SaaS benchmark is ≥ 3:1\n// Funnel conversion rates: TOFU→MOFU (sessions/clicks), MOFU→BOFU (conversions/sessions)\n// mer = Marketing Efficiency Ratio (revenue / spend). Renamed from roi_multiplier. Healthy bench ≥ 3.0.\n// pipeline_coverage = pipeline_value / sales_quota. Healthy ≥ 3.0 (3x quota in pipe).\nexport interface AIOKpis {\n cac: number | null; // Customer Acquisition Cost\n ltv: number | null; // Lifetime Value\n ltv_cac_ratio: number | null; // Higher = better unit economics\n mer: number | null; // Marketing Efficiency Ratio = revenue / marketing spend\n roi_multiplier: number | null; // DEPRECATED alias of mer — kept for backwards compat\n pipeline_coverage: number | null; // pipeline_value / sales_quota\n pipeline_value: number;\n sales_quota: number;\n funnel_conv_tofu_mofu: number | null; // sessions / clicks (%)\n funnel_conv_mofu_bofu: number | null; // conversions / sessions (%)\n conversions: number;\n sessions: number;\n clicks: number;\n marketing_spend: number;\n avg_deal_size: number;\n retention_months: number;\n benchmark_status: {\n ltv_cac: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n mer: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n pipeline_coverage: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n };\n // Honest provenance for the unit-economics figures. cac/ltv/mer all depend on\n // hand-typed dollar inputs (avg_deal_size, est_marketing_spend, retention_months),\n // so they are labeled \"estimate\" — never \"measured\" — when computed; null when the\n // value itself is null. \"measured\" is reserved for figures derived purely from live\n // integration data (none of cac/ltv/mer qualify without a live revenue feed).\n sources: {\n cac: \"estimate\" | \"measured\" | null;\n ltv: \"estimate\" | \"measured\" | null;\n mer: \"estimate\" | \"measured\" | null;\n };\n generated_at: string;\n}\n\nasync function getAppConfigNumber(key: string): Promise {\n try {\n const r = await sqlite.execute(\"SELECT value FROM app_config WHERE key = ? AND tenant_id = ?\", [key, currentTenantId()]);\n if (!r.rows?.length) return 0;\n const v = String((r.rows[0] as any[])[0]).replace(/^\"|\"$/g, \"\");\n return parseFloat(v) || 0;\n } catch { return 0; }\n}\n\nexport async function getAIOKpis(): Promise {\n const cached = await getCached(\"aio_kpis\");\n if (cached) return cached;\n\n const summary = await getFunnelSummary();\n const all = summary.stages.flatMap((s) => s.metrics);\n const sessions = getMetric(all, \"ga4\", \"sessions\")?.value || 0;\n const conversions = getMetric(all, \"ga4\", \"conversions\")?.value || 0;\n const clicks = getMetric(all, \"gsc\", \"clicks\")?.value || 0;\n\n const avg_deal_size = await getAppConfigNumber(\"avg_deal_size\");\n const marketing_spend = await getAppConfigNumber(\"est_marketing_spend\");\n const retention_months = (await getAppConfigNumber(\"retention_months\")) || 12;\n const pipeline_value = await getAppConfigNumber(\"pipeline_value\");\n const sales_quota = await getAppConfigNumber(\"sales_quota\");\n\n // Real math, with explicit null when inputs missing.\n const cac = (marketing_spend > 0 && conversions > 0) ? marketing_spend / conversions : null;\n const ltv = avg_deal_size > 0 ? avg_deal_size * retention_months : null;\n const ltv_cac_ratio = (ltv && cac && cac > 0) ? ltv / cac : null;\n // Marketing Efficiency Ratio = revenue / spend. Healthy bench ≥ 3.0 (Klaviyo/Recharge label).\n const mer = (marketing_spend > 0 && conversions > 0 && avg_deal_size > 0)\n ? (conversions * avg_deal_size) / marketing_spend : null;\n const roi_multiplier = mer; // deprecated alias\n // Pipeline Coverage Ratio — sales-team forward-looking signal.\n const pipeline_coverage = (sales_quota > 0 && pipeline_value > 0) ? pipeline_value / sales_quota : null;\n // QA fix: was producing >100% (e.g. 902%) when denominator was very small. Guard with\n // a minimum-sample floor and clamp to 0-100. Anything outside that range means our\n // metric units don't align (clicks vs sessions vs visits), not a real conversion rate.\n const MIN_SAMPLE = 50;\n const funnel_conv_tofu_mofu = (clicks >= MIN_SAMPLE)\n ? Math.max(0, Math.min(100, (sessions / clicks) * 100))\n : null;\n const funnel_conv_mofu_bofu = (sessions >= MIN_SAMPLE)\n ? Math.max(0, Math.min(100, (conversions / sessions) * 100))\n : null;\n\n const benchStatus = (v: number | null, healthy: number, borderline: number) =>\n v == null ? \"unknown\" as const :\n v >= healthy ? \"healthy\" as const :\n v >= borderline ? \"borderline\" as const :\n \"unhealthy\" as const;\n const ltv_cac_status = benchStatus(ltv_cac_ratio, 3, 1);\n const mer_status = benchStatus(mer, 3, 1);\n const pipeline_coverage_status = benchStatus(pipeline_coverage, 3, 1.5);\n\n // Provenance: these three lean on hand-typed dollar inputs → \"estimate\" when present,\n // null when the figure couldn't be computed. No live revenue feed exists, so none are \"measured\".\n const sources: AIOKpis[\"sources\"] = {\n cac: cac == null ? null : \"estimate\",\n ltv: ltv == null ? null : \"estimate\",\n mer: mer == null ? null : \"estimate\",\n };\n\n const out: AIOKpis = {\n cac, ltv, ltv_cac_ratio, mer, roi_multiplier,\n pipeline_coverage, pipeline_value, sales_quota,\n funnel_conv_tofu_mofu, funnel_conv_mofu_bofu,\n conversions, sessions, clicks, marketing_spend, avg_deal_size, retention_months,\n benchmark_status: { ltv_cac: ltv_cac_status, mer: mer_status, pipeline_coverage: pipeline_coverage_status },\n sources,\n generated_at: new Date().toISOString(),\n };\n await setCached(\"aio_kpis\", out, 300);\n return out;\n}\n\n// ─── INTELLIGENCE FEED (LLM-generated narrative cards) ──────────────────────\nexport async function getIntelligenceFeed(): Promise {\n // Cache invalidation — only serve cached feed if the funnel summary it was built\n // from is not newer than the cache. When the user hits ?force=1 on funnel-summary the\n // upstream cache regenerates, and the feed should follow on its next read instead of\n // serving up-to-5-minute-stale narrative cards.\n const cached = await getCachedTimestamp(\"feed\");\n const summaryMeta = await getCachedTimestamp(\"funnel_summary\");\n if (cached && (!summaryMeta || summaryMeta.generated_at <= cached.generated_at)) {\n return cached.payload;\n }\n\n const summary = await getFunnelSummary();\n const correlations = await getCorrelations();\n\n // Deterministic baseline cards from correlations (no LLM call required)\n const baseCards: IntelligenceCard[] = correlations.slice(0, 4).map((c) => ({\n type: c.direction === \"positive\" ? \"win\" : c.direction === \"negative\" ? \"risk\" : \"correlation\",\n priority: c.strength === \"strong\" ? \"critical\" : c.strength === \"moderate\" ? \"high\" : \"medium\",\n title: c.narrative.split(\".\")[0],\n body: `${c.narrative} Lag: ${c.lag_days}d · confidence: ${Math.round(c.confidence * 100)}%`,\n metrics: [\n `${c.source_metric.integration} ${c.source_metric.metric}: ${c.source_metric.value.toFixed(1)}${c.source_metric.unit}`,\n `${c.target_metric.integration} ${c.target_metric.metric}: ${c.target_metric.value.toFixed(1)}${c.target_metric.unit}`,\n ],\n funnel_stages: c.funnel_stage_from === c.funnel_stage_to ? [c.funnel_stage_from] : [c.funnel_stage_from, c.funnel_stage_to],\n agent_name: \"Signal Monitor\",\n timestamp: new Date().toISOString(),\n action_label: \"Investigate →\",\n action_payload: { question: c.action_prompt, context: { signal_id: c.id, narrative: c.narrative } },\n }));\n\n // Add a bottleneck card\n if (summary.bottleneck) {\n baseCards.unshift({\n type: \"anomaly\", priority: \"critical\",\n title: `${summary.bottleneck.stage} stage is the current bottleneck`,\n body: summary.bottleneck.reason,\n metrics: summary.stages\n .find((s) => s.stage === summary.bottleneck!.stage)!\n .metrics.slice(0, 3)\n .map((m) => `${m.integration} ${m.metric}: ${m.value.toFixed(1)}${m.unit}`),\n funnel_stages: [summary.bottleneck.stage],\n agent_name: \"Funnel Sentinel\",\n timestamp: new Date().toISOString(),\n action_label: \"Diagnose →\",\n action_payload: { question: `What's causing the drop in ${summary.bottleneck.stage} health?` },\n });\n }\n\n // Optionally enrich with LLM narrative when an LLM is configured.\n try {\n const cfg = await getLLMConfig();\n if (cfg.api_key && baseCards.length > 0) {\n const ctx = JSON.stringify({\n stages: summary.stages.map((s) => ({ stage: s.stage, health: s.health_score, metrics: s.metrics.length })),\n correlations: correlations.map((c) => ({ from: c.source_metric.metric, to: c.target_metric.metric, dir: c.direction, narrative: c.narrative })),\n });\n const resp = await callLLM(cfg, [{ role: \"user\", content: `Given this funnel state, write ONE concise 2-sentence \"opportunity\" card body (no preamble, no markdown):\\n${ctx}` }], { maxTokens: 200 });\n if (resp.content) {\n baseCards.splice(1, 0, {\n type: \"opportunity\", priority: \"high\",\n title: \"AI Insight: Cross-stage opportunity detected\",\n body: resp.content.trim(),\n metrics: [\"LLM-derived from funnel state\"],\n funnel_stages: [\"TOFU\", \"MOFU\", \"BOFU\"],\n agent_name: \"Nexus Analyst\",\n timestamp: new Date().toISOString(),\n action_label: \"Explore →\",\n action_payload: { question: \"Tell me more about this opportunity and how to act on it.\" },\n });\n }\n }\n } catch {}\n\n // Empty-state placeholder when nothing connected\n if (baseCards.length === 0) {\n baseCards.push({\n type: \"opportunity\", priority: \"medium\",\n title: \"Connect your first integration to unlock intelligence\",\n body: \"Once Ahrefs, GA4, or Search Console is connected, Nexus will start computing causal signals across your funnel.\",\n metrics: [], funnel_stages: [\"TOFU\"], agent_name: \"Onboarding\",\n timestamp: new Date().toISOString(),\n action_label: \"Open Settings →\",\n action_payload: { question: \"Walk me through connecting my first integration.\" },\n });\n }\n\n await setCached(\"feed\", baseCards, 300);\n return baseCards;\n}\n","// Cross-Metric Correlation Engine + Unified Funnel + LLM-generated commentary feed.\n// Maps all 14 integrations to TOFU/MOFU/BOFU stages, fetches live metrics,\n// computes health scores against 30d baselines, surfaces causal correlations\n// with narrative + action prompts. Cached aggressively (5min TTL) since fetches\n// hit external APIs.\nimport { sqlite, currentTenantId } from \"../db.ts\";\nimport { getCredentials, withGoogleFallback, safeJson } from \"./integrations/_shared.ts\";\nimport { getLLMConfig, callLLM } from \"./llm.ts\";\nimport {\n bestLaggedCorrelation,\n corrStrength,\n MIN_CORR_SAMPLES,\n MIN_CORR_ABS_R,\n MAX_CORR_P,\n type SeriesPoint,\n} from \"./stats.ts\";\nimport { getCompanyProfile } from \"./company.ts\";\nimport { getMethodConfig } from \"./method_config.ts\";\nimport { SIGNAL_WEIGHTS } from \"./signals.ts\";\n\n// ─── FUNNEL MAPPING ─────────────────────────────────────────────────────────\ntype Stage = \"TOFU\" | \"MOFU\" | \"BOFU\";\n\nexport type AARRR = \"acquisition\" | \"activation\" | \"retention\" | \"referral\" | \"revenue\";\n\nexport interface MetricPoint {\n integration: string;\n metric: string;\n value: number;\n unit: string;\n stage: Stage;\n aarrr?: AARRR; // Pirate Metrics category\n recorded_at?: string; // ISO timestamp from metric_history\n}\n\n// Absolute health benchmarks per metric: maps raw value → 0-100 health.\n// Replaces the warm-start \"always 50%\" bug — gives real per-metric scoring based\n// on industry SaaS benchmarks. Returns null if no benchmark defined (falls back to\n// baseline-relative scoring).\nfunction normalizeAbsolute(integration: string, metric: string, value: number): number | null {\n const k = `${integration}:${metric}`;\n const clamp = (n: number) => Math.max(0, Math.min(100, n));\n switch (k) {\n // SEO authority (Ahrefs) — DR is already 0-100; refdomains log-scaled\n case \"ahrefs:domain_rating\": return clamp(value);\n case \"ahrefs:referring_domains\": return clamp(Math.log10(value + 1) * 25);\n // Search Console — CTR 0-5% maps to 0-100, position 1 = 100 falling 5%/rank\n case \"gsc:ctr\": return clamp((value / 5) * 100);\n case \"gsc:impressions\": return clamp(Math.log10(value + 1) * 20);\n case \"gsc:clicks\": return clamp(Math.log10(value + 1) * 25);\n case \"gsc:average_position\": return clamp(100 - (value - 1) * 5);\n // GA4 — engagement_time/180s = 100, conversions sqrt curve, bounce inverted\n case \"ga4:sessions\": return clamp(Math.log10(value + 1) * 20);\n case \"ga4:engagement_time\": return clamp((value / 180) * 100);\n case \"ga4:pages_per_session\": return clamp(((value - 1) / 3) * 100);\n case \"ga4:bounce_rate\": return clamp(100 - value);\n case \"ga4:conversions\": return clamp(Math.sqrt(value) * 15);\n // YouTube\n case \"youtube:views\": return clamp(Math.log10(value + 1) * 15);\n case \"youtube:subscribers\": return clamp(Math.log10(value + 1) * 20);\n case \"youtube:subscribers_gained\": return clamp(Math.log10(value + 1) * 30);\n // WordPress content velocity — 20 posts/period = full health\n case \"wordpress:published_posts\": return clamp(value * 5);\n // Communications volume — log-scaled\n case \"gmail:messages_total\": return clamp(Math.log10(value + 1) * 15);\n case \"gmail:threads_total\": return clamp(Math.log10(value + 1) * 18);\n // PROVENANCE: deal_intent_threads = count of Gmail threads matching deal-intent\n // keywords (pricing/proposal/contract/quote). This is a SOFT MOFU intent signal —\n // a keyword match is interest, NOT a closed/real deal — so it carries a LOWER\n // weight than a true BOFU revenue event (each thread → 5 health pts, full at 20\n // threads, vs the old 10pts/full-at-10 that over-read intent as conversion).\n case \"gmail:deal_intent_threads\": return clamp(value * 5);\n case \"outlook:inbox_count\": return clamp(Math.log10(value + 1) * 15);\n case \"outlook:meetings_booked\":return clamp(value * 10);\n // LinkedIn\n case \"linkedin:post_impressions\": return clamp(Math.log10(value + 1) * 15);\n default: return null; // no absolute benchmark → fall back to baseline-relative\n }\n}\n\n// AARRR mapping — same metric can belong to multiple categories.\n// gsc.average_position, gsc.ctr, youtube.subscribers, linkedin.reply_rate all carry\n// Pirate-Metric classification so the funnel summary never leaves stages undefined.\nconst AARRR_MAP: Record = {\n // Acquisition (first touch)\n \"gsc:clicks\": \"acquisition\", \"youtube:views\": \"acquisition\", \"youtube:subscribers_gained\": \"acquisition\", \"linkedin:post_impressions\": \"acquisition\",\n \"gsc:impressions\": \"acquisition\", \"ahrefs:organic_keywords\": \"acquisition\",\n \"gsc:average_position\": \"acquisition\",\n // Activation (first meaningful engagement)\n \"ga4:sessions\": \"activation\", \"wordpress:published_posts\": \"activation\",\n \"gmail:messages_total\": \"activation\", \"gsc:ctr\": \"activation\",\n \"linkedin:reply_rate\": \"activation\",\n // deal_intent_threads is a SOFT MOFU intent signal (keyword-matched interest),\n // mapped to activation — NOT revenue, which is reserved for real BOFU conversions.\n \"gmail:deal_intent_threads\": \"activation\",\n // Retention (repeated engagement)\n \"ga4:engagement_time\": \"retention\", \"ga4:pages_per_session\": \"retention\", \"ga4:bounce_rate\": \"retention\",\n \"gmail:threads_total\": \"retention\", \"youtube:subscribers\": \"retention\",\n // Referral (audience amplification)\n \"ahrefs:referring_domains\": \"referral\", \"ahrefs:domain_rating\": \"referral\",\n // Revenue (monetization events)\n \"ga4:conversions\": \"revenue\", \"outlook:inbox_count\": \"revenue\",\n \"outlook:meetings_booked\": \"revenue\",\n};\nconst aarrrOf = (integration: string, metric: string): AARRR | undefined =>\n AARRR_MAP[`${integration}:${metric}`];\n\n// ─── BAYESIAN-INSPIRED CONFIDENCE ────────────────────────────────────────────\n// Penalize stale data, missing integrations, and rules currently inside their lag window.\nexport function computeConfidence(args: {\n source_freshness_days: number;\n target_freshness_days: number;\n source_has_data: boolean;\n target_has_data: boolean;\n lag_days: number;\n current_day_offset: number;\n}): number {\n let c = 1.0;\n if (args.source_freshness_days > 7) c *= 0.8;\n if (args.source_freshness_days > 30) c *= 0.6;\n if (args.target_freshness_days > 7) c *= 0.8;\n if (!args.source_has_data) c *= 0.3;\n if (!args.target_has_data) c *= 0.3;\n if (args.current_day_offset < args.lag_days) c *= 0.5;\n return Math.round(c * 100) / 100;\n}\n\n// ─── METRIC HISTORY (timeseries for delta_7d) ────────────────────────────────\nasync function recordMetric(integration: string, metric: string, value: number): Promise {\n try {\n await sqlite.execute(\n \"INSERT INTO metric_history (integration, metric_key, value, tenant_id) VALUES (?, ?, ?, ?)\",\n [integration, metric, value, currentTenantId()]\n );\n // Prune anything older than 60d to keep table bounded.\n await sqlite.execute(\n \"DELETE FROM metric_history WHERE recorded_at < datetime('now','-60 days') AND tenant_id = ?\",\n [currentTenantId()]\n );\n } catch { /* non-critical */ }\n}\n\nasync function getMetricValueDaysAgo(integration: string, metric: string, days: number): Promise {\n try {\n // Find closest recorded value to N days ago (within ±2 days window).\n const r = await sqlite.execute(\n `SELECT value FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at <= datetime('now', ?)\n AND tenant_id = ?\n ORDER BY recorded_at DESC LIMIT 1`,\n [integration, metric, `-${days} days`, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n return Number((r.rows[0] as any[])[0]);\n } catch { return null; }\n}\n\n// Daily timeseries for a metric over the last `days` (default 60). Collapses every\n// recorded_at to one point per calendar date (last write of the day wins — the rows\n// arrive chronologically, so the final assignment per date is the latest value).\n// Powers the real lagged-correlation engine. Returns [] when there is no history.\nasync function getMetricSeries(integration: string, metric: string, days = 60): Promise {\n try {\n const r = await sqlite.execute(\n `SELECT date(recorded_at) AS d, value\n FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at >= datetime('now', ?)\n AND tenant_id = ?\n ORDER BY recorded_at ASC`,\n [integration, metric, `-${days} days`, currentTenantId()]\n );\n if (!r.rows?.length) return [];\n const byDate = new Map();\n for (const row of r.rows as any[]) {\n const date = String(row[0]);\n const value = Number(row[1]);\n if (!date || !Number.isFinite(value)) continue;\n byDate.set(date, value); // chronological ASC → last write per date wins\n }\n return Array.from(byDate.entries())\n .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0))\n .map(([date, value]) => ({ date, value }));\n } catch { return []; }\n}\n\nexport interface CorrelationSignal {\n id: string;\n source_metric: { integration: string; metric: string; value: number; unit: string };\n target_metric: { integration: string; metric: string; value: number; unit: string };\n direction: \"positive\" | \"negative\" | \"neutral\";\n strength: \"strong\" | \"moderate\" | \"weak\";\n lag_days: number;\n narrative: string;\n funnel_stage_from: Stage;\n funnel_stage_to: Stage;\n confidence: number;\n action_prompt: string;\n}\n\nexport interface StageHealth {\n stage: Stage;\n label: string;\n description: string;\n metrics: Array;\n health_score: number; // 0-100\n diagnosis: string;\n}\n\nexport interface FunnelSummary {\n stages: StageHealth[];\n bottleneck: { stage: Stage; reason: string } | null;\n // Weighted composite — TOFU 0.25 · MOFU 0.40 · BOFU 0.35. BOFU revenue\n // matters more than top-of-funnel volume, MOFU drives qualified pipeline.\n overall_health: number;\n total_metrics_observed: number;\n total_integrations_connected: number;\n generated_at: string;\n}\n\nexport interface IntelligenceCard {\n type: \"correlation\" | \"anomaly\" | \"opportunity\" | \"risk\" | \"win\";\n priority: \"critical\" | \"high\" | \"medium\";\n title: string;\n body: string;\n metrics: string[];\n funnel_stages: Stage[];\n agent_name: string;\n timestamp: string;\n action_label: string;\n action_payload: { question: string; context?: any };\n}\n\n// ─── CACHE HELPERS ──────────────────────────────────────────────────────────\nasync function getCached(key: string): Promise {\n try {\n const r = await sqlite.execute(\n \"SELECT payload, expires_at FROM intelligence_cache WHERE cache_key = ? AND tenant_id = ?\",\n [key, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const [payload, expiresAt] = r.rows[0] as any[];\n if (new Date(String(expiresAt)).getTime() < Date.now()) return null;\n return JSON.parse(String(payload));\n } catch { return null; }\n}\n\n// Read generated_at so the feed can invalidate itself when upstream summary is fresher.\nasync function getCachedTimestamp(key: string): Promise<{ payload: any; generated_at: number; expires_at: number } | null> {\n try {\n const r = await sqlite.execute(\n \"SELECT payload, generated_at, expires_at FROM intelligence_cache WHERE cache_key = ? AND tenant_id = ?\",\n [key, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const [payload, generatedAt, expiresAt] = r.rows[0] as any[];\n const exp = new Date(String(expiresAt)).getTime();\n if (exp < Date.now()) return null;\n return {\n payload: JSON.parse(String(payload)),\n generated_at: new Date(String(generatedAt)).getTime(),\n expires_at: exp,\n };\n } catch { return null; }\n}\n\nasync function setCached(key: string, payload: any, ttlSeconds: number): Promise {\n const expiresAt = new Date(Date.now() + ttlSeconds * 1000).toISOString();\n await sqlite.execute(\n \"INSERT OR REPLACE INTO intelligence_cache (cache_key, payload, generated_at, expires_at, tenant_id) VALUES (?, ?, datetime('now'), ?, ?)\",\n [key, JSON.stringify(payload), expiresAt, currentTenantId()]\n );\n}\n\nasync function getBaseline(integration: string, metricKey: string): Promise {\n try {\n const r = await sqlite.execute(\n \"SELECT baseline_value FROM metric_baselines WHERE integration = ? AND metric_key = ? AND tenant_id = ?\",\n [integration, metricKey, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n return Number((r.rows[0] as any[])[0]);\n } catch { return null; }\n}\n\nasync function setBaseline(integration: string, metricKey: string, value: number): Promise {\n await sqlite.execute(\n \"INSERT OR REPLACE INTO metric_baselines (integration, metric_key, baseline_value, last_updated, tenant_id) VALUES (?, ?, ?, datetime('now'), ?)\",\n [integration, metricKey, value, currentTenantId()]\n );\n}\n\n// Rolling 30-day baseline. Replaces the frozen warm-start baseline once we have\n// at least 3 samples in metric_history, so health scoring drifts with reality instead\n// of forever comparing against the first observed value.\nasync function getRollingBaseline(integration: string, metricKey: string): Promise<{ avg: number; sample_count: number } | null> {\n try {\n const r = await sqlite.execute(\n `SELECT AVG(value) AS avg_v, COUNT(*) AS n\n FROM metric_history\n WHERE integration = ? AND metric_key = ?\n AND recorded_at >= datetime('now','-30 days')\n AND tenant_id = ?`,\n [integration, metricKey, currentTenantId()]\n );\n if (!r.rows?.length) return null;\n const row = r.rows[0] as any;\n const avg = Array.isArray(row) ? Number(row[0]) : Number(row.avg_v);\n const n = Array.isArray(row) ? Number(row[1]) : Number(row.n);\n if (!Number.isFinite(avg) || !Number.isFinite(n) || n < 3) return null;\n return { avg, sample_count: n };\n } catch { return null; }\n}\n\n// Persist the rolling figures back to metric_baselines so external readers see them too.\nasync function persistRolling(integration: string, metricKey: string, rolling: { avg: number; sample_count: number }): Promise {\n try {\n await sqlite.execute(\n \"UPDATE metric_baselines SET rolling_avg = ?, sample_count = ?, last_updated = datetime('now') WHERE integration = ? AND metric_key = ? AND tenant_id = ?\",\n [rolling.avg, rolling.sample_count, integration, metricKey, currentTenantId()]\n );\n } catch { /* non-critical */ }\n}\n\n// ─── METRIC FETCHERS (live data from integrations) ──────────────────────────\n// Each returns MetricPoint[] or [] on error/missing creds. Never throws.\n\nasync function fetchAhrefs(): Promise {\n const creds = await getCredentials(\"ahrefs\");\n if (!creds?.api_key || !creds.extra_config?.target) return [];\n const target = creds.extra_config.target;\n const today = new Date().toISOString().slice(0, 10);\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(`https://api.ahrefs.com/v3/site-explorer/domain-rating?target=${encodeURIComponent(target)}&date=${today}`,\n { headers: { Authorization: `Bearer ${creds.api_key}` } });\n if (r.ok) {\n const d = await safeJson(r);\n const dr = d?.domain_rating?.domain_rating;\n if (typeof dr === \"number\") out.push({ integration: \"ahrefs\", metric: \"domain_rating\", value: dr, unit: \"DR\", stage: \"TOFU\" });\n }\n } catch {}\n try {\n const r = await fetch(`https://api.ahrefs.com/v3/site-explorer/backlinks-stats?target=${encodeURIComponent(target)}&date=${today}`,\n { headers: { Authorization: `Bearer ${creds.api_key}` } });\n if (r.ok) {\n const d = await safeJson(r);\n const rd = d?.metrics?.refdomains;\n if (typeof rd === \"number\") out.push({ integration: \"ahrefs\", metric: \"referring_domains\", value: rd, unit: \"domains\", stage: \"TOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchGSC(days = 30): Promise {\n let creds = await getCredentials(\"gsc\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token || !creds.extra_config?.site_url) return [];\n const siteUrl = encodeURIComponent(creds.extra_config.site_url);\n const end = new Date().toISOString().slice(0, 10);\n const start = new Date(Date.now() - days * 864e5).toISOString().slice(0, 10);\n try {\n const r = await fetch(`https://searchconsole.googleapis.com/webmasters/v3/sites/${siteUrl}/searchAnalytics/query`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ startDate: start, endDate: end, dimensions: [], rowLimit: 1 }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const row = d?.rows?.[0];\n if (!row) return [];\n return [\n { integration: \"gsc\", metric: \"impressions\", value: row.impressions || 0, unit: \"impressions\", stage: \"TOFU\" },\n { integration: \"gsc\", metric: \"clicks\", value: row.clicks || 0, unit: \"clicks\", stage: \"TOFU\" },\n { integration: \"gsc\", metric: \"ctr\", value: (row.ctr || 0) * 100, unit: \"%\", stage: \"MOFU\" },\n { integration: \"gsc\", metric: \"average_position\", value: row.position || 0, unit: \"pos\", stage: \"TOFU\" },\n ];\n } catch { return []; }\n}\n\nasync function fetchGA4(days = 30): Promise {\n let creds = await getCredentials(\"ga4\");\n creds = await withGoogleFallback(creds ?? {});\n const propertyId = creds.extra_config?.property_id;\n if (!creds.access_token || !propertyId) return [];\n try {\n const r = await fetch(`https://analyticsdata.googleapis.com/v1beta/properties/${propertyId}:runReport`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n metrics: [\n { name: \"sessions\" }, { name: \"userEngagementDuration\" }, { name: \"bounceRate\" },\n { name: \"conversions\" }, { name: \"screenPageViewsPerSession\" },\n ],\n dateRanges: [{ startDate: `${days}daysAgo`, endDate: \"today\" }],\n }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const row = d?.rows?.[0];\n if (!row) return [];\n const vals = row.metricValues || [];\n const num = (i: number) => parseFloat(vals[i]?.value || \"0\");\n const sessions = num(0);\n return [\n { integration: \"ga4\", metric: \"sessions\", value: sessions, unit: \"sessions\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"engagement_time\", value: sessions ? num(1) / sessions : 0, unit: \"sec/sess\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"bounce_rate\", value: num(2) * 100, unit: \"%\", stage: \"MOFU\" },\n { integration: \"ga4\", metric: \"conversions\", value: num(3), unit: \"conv\", stage: \"BOFU\" },\n { integration: \"ga4\", metric: \"pages_per_session\", value: num(4), unit: \"pages\", stage: \"MOFU\" },\n ];\n } catch { return []; }\n}\n\n// Channel-level acquisition breakdown from GA4 (sessions + conversions per default\n// channel group). Mirrors fetchGA4's credential resolution. Used by aio.ts to attribute\n// pipeline to channels. Returns [] on any failure or missing creds — never throws.\nexport async function getChannelAcquisition(\n days = 30,\n): Promise> {\n let creds = await getCredentials(\"ga4\");\n creds = await withGoogleFallback(creds ?? {});\n const propertyId = creds.extra_config?.property_id;\n if (!creds.access_token || !propertyId) return [];\n try {\n const r = await fetch(`https://analyticsdata.googleapis.com/v1beta/properties/${propertyId}:runReport`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${creds.access_token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n dimensions: [{ name: \"sessionDefaultChannelGroup\" }],\n metrics: [{ name: \"sessions\" }, { name: \"conversions\" }],\n dateRanges: [{ startDate: `${days}daysAgo`, endDate: \"today\" }],\n }),\n });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const rows = d?.rows;\n if (!Array.isArray(rows)) return [];\n return rows.map((row: any) => {\n const channel = String(row?.dimensionValues?.[0]?.value ?? \"(unknown)\");\n const sessions = parseFloat(row?.metricValues?.[0]?.value ?? \"0\") || 0;\n const conversions = parseFloat(row?.metricValues?.[1]?.value ?? \"0\") || 0;\n return { channel, sessions, conversions };\n });\n } catch { return []; }\n}\n\nasync function fetchYouTube(): Promise {\n let creds = await getCredentials(\"youtube\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token && !creds.api_key) return [];\n const auth = creds.access_token ? { Authorization: `Bearer ${creds.access_token}` } : {};\n // Prefer REAL 30-day growth from the YouTube Analytics API (owned channel) — this is the\n // growth signal that should feed TOFU, not lifetime totals. Falls back to lifetime channel\n // statistics when analytics is unavailable (scope not granted / API disabled / api-key only).\n if (creds.access_token) {\n try {\n const endDate = new Date().toISOString().slice(0, 10);\n const startDate = new Date(Date.now() - 30 * 24 * 60 * 60 * 1000).toISOString().slice(0, 10);\n // PRIMARY channel (first in the Settings list) drives the funnel growth;\n // falls back to the connected channel (MINE) when no primary is set or it isn't owned.\n let primaryId = \"\";\n const firstTarget = (String(creds.extra_config?.youtube_channels || \"\").split(\",\")[0] || \"\").trim();\n if (firstTarget) {\n if (/^UC[A-Za-z0-9_-]{20,}$/.test(firstTarget)) primaryId = firstTarget;\n else {\n const rr = await fetch(`https://www.googleapis.com/youtube/v3/channels?part=id&forHandle=${encodeURIComponent(\"@\" + firstTarget.replace(/^@/, \"\"))}`, { headers: auth });\n const rj = await safeJson(rr);\n const cid = rj?.items?.[0]?.id;\n if (typeof cid === \"string\") primaryId = cid;\n }\n }\n const reportFor = (sel: string) => `https://youtubeanalytics.googleapis.com/v2/reports?ids=${sel}&metrics=views,subscribersGained&startDate=${startDate}&endDate=${endDate}`;\n let ar = await fetch(reportFor(primaryId ? `channel==${encodeURIComponent(primaryId)}` : \"channel==MINE\"), { headers: auth });\n if (!ar.ok && primaryId) ar = await fetch(reportFor(\"channel==MINE\"), { headers: auth });\n if (ar.ok) {\n const ad = await safeJson(ar);\n const row = ad?.rows?.[0];\n if (Array.isArray(row)) {\n return [\n { integration: \"youtube\", metric: \"views\", value: parseInt(row[0] || \"0\", 10) || 0, unit: \"views/30d\", stage: \"TOFU\" },\n { integration: \"youtube\", metric: \"subscribers_gained\", value: parseInt(row[1] || \"0\", 10) || 0, unit: \"subs/30d\", stage: \"TOFU\" },\n ];\n }\n }\n } catch { /* fall through to lifetime channel stats */ }\n }\n const keyParam = !creds.access_token && creds.api_key ? `&key=${encodeURIComponent(creds.api_key)}` : \"\";\n try {\n const url = creds.access_token\n ? `https://www.googleapis.com/youtube/v3/channels?part=statistics&mine=true`\n : `https://www.googleapis.com/youtube/v3/channels?part=statistics&chart=mostPopular&maxResults=1${keyParam}`;\n const r = await fetch(url, { headers: auth });\n if (!r.ok) return [];\n const d = await safeJson(r);\n const s = d?.items?.[0]?.statistics;\n if (!s) return [];\n return [\n { integration: \"youtube\", metric: \"views\", value: parseInt(s.viewCount || \"0\", 10), unit: \"views\", stage: \"TOFU\" },\n { integration: \"youtube\", metric: \"subscribers\", value: parseInt(s.subscriberCount || \"0\", 10), unit: \"subs\", stage: \"TOFU\" },\n ];\n } catch { return []; }\n}\n\nasync function fetchLinkedIn(): Promise {\n // HONEST NULL (IQ2 / Part 3 fix 1): real post analytics require r_organization_social +\n // Marketing Developer Platform approval, which this app doesn't have. Rather than emit\n // fabricated value:0 metrics (which read as a measured \"0 impressions\"), we return NOTHING\n // when no real LinkedIn analytics are available — the funnel/correlations simply omit LinkedIn.\n const creds = await getCredentials(\"linkedin\");\n if (!creds?.access_token) return [];\n const orgId = (creds.extra_config?.org_id ?? creds.extra_config?.author_id ?? \"\").toString().trim();\n if (!orgId) return [];\n try {\n // Org share statistics (versioned /rest/). Only emits a metric when the API returns a real value.\n const r = await fetch(\n `https://api.linkedin.com/rest/organizationalEntityShareStatistics?q=organizationalEntity&organizationalEntity=${encodeURIComponent(orgId)}`,\n { headers: { Authorization: `Bearer ${creds.access_token}`, \"LinkedIn-Version\": \"202405\", \"X-Restli-Protocol-Version\": \"2.0.0\" } },\n );\n if (!r.ok) return [];\n const d = await safeJson(r);\n const stats = d?.elements?.[0]?.totalShareStatistics;\n if (!stats) return [];\n const out: MetricPoint[] = [];\n if (typeof stats.impressionCount === \"number\") out.push({ integration: \"linkedin\", metric: \"post_impressions\", value: stats.impressionCount, unit: \"impressions\", stage: \"TOFU\" });\n if (typeof stats.engagement === \"number\") out.push({ integration: \"linkedin\", metric: \"engagement_rate\", value: stats.engagement * 100, unit: \"%\", stage: \"TOFU\" });\n return out;\n } catch { return []; }\n}\n\nasync function fetchGmail(days = 30): Promise {\n let creds = await getCredentials(\"gmail\");\n creds = await withGoogleFallback(creds ?? {});\n if (!creds.access_token) return [];\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(\"https://gmail.googleapis.com/gmail/v1/users/me/profile\", {\n headers: { Authorization: `Bearer ${creds.access_token}` },\n });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"gmail\", metric: \"messages_total\", value: d?.messagesTotal || 0, unit: \"msgs\", stage: \"MOFU\" });\n out.push({ integration: \"gmail\", metric: \"threads_total\", value: d?.threadsTotal || 0, unit: \"threads\", stage: \"MOFU\" });\n }\n } catch {}\n // MOFU: deal_intent_threads — count Gmail threads with deal-intent keywords in the\n // selected window. A keyword match signals INTENT/consideration, not a closed deal, so\n // it lands in MOFU as a soft intent signal — not BOFU revenue.\n try {\n const q = encodeURIComponent(`newer_than:${days}d (pricing OR proposal OR contract OR quote OR \"sales agreement\")`);\n const r = await fetch(`https://gmail.googleapis.com/gmail/v1/users/me/messages?q=${q}&maxResults=1`,\n { headers: { Authorization: `Bearer ${creds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"gmail\", metric: \"deal_intent_threads\", value: d?.resultSizeEstimate || 0, unit: \"threads\", stage: \"MOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchOutlook(): Promise {\n const creds = await getCredentials(\"outlook\");\n if (!creds?.access_token) return [];\n const out: MetricPoint[] = [];\n try {\n const r = await fetch(\"https://graph.microsoft.com/v1.0/me/messages?$top=1&$count=true\", {\n headers: { Authorization: `Bearer ${creds.access_token}`, ConsistencyLevel: \"eventual\" },\n });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"outlook\", metric: \"inbox_count\", value: d?.[\"@odata.count\"] || 0, unit: \"msgs\", stage: \"MOFU\" });\n }\n } catch {}\n // BOFU: meetings booked (next 14 days) — real calendar query\n try {\n const start = new Date().toISOString();\n const end = new Date(Date.now() + 14 * 86400000).toISOString();\n const r = await fetch(`https://graph.microsoft.com/v1.0/me/calendar/events?$top=1&$count=true&$filter=start/dateTime ge '${start}' and start/dateTime le '${end}'`,\n { headers: { Authorization: `Bearer ${creds.access_token}`, ConsistencyLevel: \"eventual\" } });\n if (r.ok) {\n const d = await safeJson(r);\n out.push({ integration: \"outlook\", metric: \"meetings_booked\", value: d?.[\"@odata.count\"] || 0, unit: \"mtgs\", stage: \"BOFU\" });\n }\n } catch {}\n return out;\n}\n\nasync function fetchWordPress(): Promise {\n const creds = await getCredentials(\"wordpress\");\n const siteUrl = (creds?.extra_config?.site_url ?? \"\").replace(/\\/$/, \"\");\n if (!siteUrl || !creds?.api_key) return [];\n try {\n const auth = btoa(`${creds.api_key}:${creds.api_secret ?? \"\"}`);\n const r = await fetch(`${siteUrl}/wp-json/wp/v2/posts?per_page=1`, {\n headers: { Authorization: `Basic ${auth}` },\n });\n if (!r.ok) return [];\n const total = parseInt(r.headers.get(\"x-wp-total\") || \"0\", 10);\n return [{ integration: \"wordpress\", metric: \"published_posts\", value: total, unit: \"posts\", stage: \"MOFU\" }];\n } catch { return []; }\n}\n\n// ─── FUNNEL SUMMARY ─────────────────────────────────────────────────────────\nconst STAGE_META: Record = {\n TOFU: { label: \"Awareness & Reach\", description: \"Top-of-funnel visibility — SEO, social, content distribution.\" },\n MOFU: { label: \"Engagement & Consideration\", description: \"Mid-funnel signal — site engagement, content depth, outreach reply.\" },\n BOFU: { label: \"Conversion & Revenue\", description: \"Bottom-of-funnel — goal completions, deals, meetings, revenue.\" },\n};\n\nexport async function getFunnelSummary(force = false, days = 30): Promise {\n const cacheKey = `funnel_summary_${days}d`;\n if (!force) {\n const cached = await getCached(cacheKey);\n if (cached) return cached;\n }\n\n // Optional user-defined funnel-metric weights (Settings → Growth Methodology).\n // When no overrides exist this map is empty and health computation is identical\n // to the unweighted mean. A weight of 1 also leaves a metric's contribution intact.\n const overrideWeight = new Map(); // key: `${stage}:${integration}:${metric}`\n try {\n const cfg = await getMethodConfig();\n const ov = cfg.funnel_metric_overrides;\n for (const stage of [\"TOFU\", \"MOFU\", \"BOFU\"] as Stage[]) {\n for (const o of (ov?.[stage] ?? [])) {\n if (Number.isFinite(o.weight)) {\n overrideWeight.set(`${stage}:${o.integration}:${o.metric}`, o.weight);\n }\n }\n }\n } catch { /* config unavailable → no overrides, identical behavior */ }\n\n const results = await Promise.allSettled([\n fetchAhrefs(), fetchGSC(days), fetchGA4(days), fetchYouTube(),\n fetchLinkedIn(), fetchGmail(days), fetchOutlook(), fetchWordPress(),\n ]);\n const allMetrics: MetricPoint[] = results\n .filter((r): r is PromiseFulfilledResult => r.status === \"fulfilled\")\n .flatMap((r) => r.value)\n .map((m) => ({ ...m, aarrr: aarrrOf(m.integration, m.metric), recorded_at: new Date().toISOString() }));\n\n // Update baselines on first run + write every value to metric_history for delta_7d\n for (const m of allMetrics) {\n const b = await getBaseline(m.integration, m.metric);\n if (b === null) await setBaseline(m.integration, m.metric, m.value);\n await recordMetric(m.integration, m.metric, m.value);\n }\n\n // Compute per-stage health. Each metric gets baseline delta + 7-day delta from metric_history.\n const stages: StageHealth[] = ([\"TOFU\", \"MOFU\", \"BOFU\"] as Stage[]).map((stage) => {\n const stageMetrics = allMetrics.filter((m) => m.stage === stage);\n const withDeltas = stageMetrics.map(async (m) => {\n // Prefer rolling 30d baseline once we have ≥3 samples; fall back to frozen warm-start.\n const frozen = await getBaseline(m.integration, m.metric);\n const rolling = await getRollingBaseline(m.integration, m.metric);\n const baseline = rolling ? rolling.avg : frozen;\n if (rolling) await persistRolling(m.integration, m.metric, rolling);\n const delta_pct = baseline && baseline !== 0 ? ((m.value - baseline) / Math.abs(baseline)) * 100 : null;\n // Cold-start disclosure: a metric with < 3 samples of its own history has no\n // trustworthy rolling baseline, so its health leans on the absolute industry prior.\n const signal_count = rolling ? rolling.sample_count : 0;\n const low_confidence = signal_count < 3;\n // delta_7d / delta_30d: real timeseries comparison vs same metric N days ago (A2).\n // TOFU stage UI prefers 30d (SEO/branding moves slowly); MOFU/BOFU keep 7d for tighter feedback.\n const [v7, v30] = await Promise.all([\n getMetricValueDaysAgo(m.integration, m.metric, 7),\n getMetricValueDaysAgo(m.integration, m.metric, 30),\n ]);\n const delta_7d = v7 != null && v7 !== 0 ? ((m.value - v7) / Math.abs(v7)) * 100 : null;\n const delta_30d = v30 != null && v30 !== 0 ? ((m.value - v30) / Math.abs(v30)) * 100 : null;\n return { ...m, delta_pct, baseline, delta_7d, delta_30d, signal_count, low_confidence };\n });\n return { stage, metrics: withDeltas, stageMetrics };\n }) as any;\n\n // Resolve the promises in metrics.\n const resolvedStages: StageHealth[] = await Promise.all(\n stages.map(async (s: any) => {\n const metrics = await Promise.all(s.metrics);\n if (metrics.length === 0) {\n return {\n stage: s.stage,\n label: STAGE_META[s.stage as Stage].label,\n description: STAGE_META[s.stage as Stage].description,\n metrics,\n health_score: 0,\n diagnosis: \"No data — connect integrations for this stage.\",\n };\n }\n\n // ── Health scoring: WARM-START relative · COLD-START absolute prior ──\n // PROVENANCE: the absolute industry benchmark (normalizeAbsolute) is a COLD-START\n // PRIOR only — used when a metric has < 3 samples of its own history. Once warm\n // (signal_count ≥ 3) we score the metric RELATIVE to its own rolling 30d baseline\n // (delta_pct), so health drifts with the account's own reality instead of a frozen\n // industry constant. Stage health is the WEIGHTED mean — user funnel-metric\n // overrides (weight 0..2) up/down-weight metrics; with no overrides every weight is\n // 1 and this is the plain mean.\n // \"Lower is better\" metrics: a rising value should LOWER health, not raise it.\n const BAD_WHEN_UP = new Set([\"bounce_rate\", \"average_position\"]);\n const weightedScores: Array<{ score: number; w: number }> = [];\n const deltaContributions: number[] = [];\n for (const m of metrics as any[]) {\n const abs = normalizeAbsolute(m.integration, m.metric, m.value);\n const warm = (m.signal_count ?? 0) >= 3;\n // Warm-start: relative score off the metric's own rolling baseline (50 = on\n // baseline). Direction-aware so \"lower is better\" metrics aren't penalized for\n // dropping. Cold-start (or warm but no usable baseline delta): absolute prior.\n let score: number | null = null;\n if (warm && m.delta_pct != null) {\n const direction = BAD_WHEN_UP.has(m.metric) ? -1 : 1;\n score = Math.max(0, Math.min(100, 50 + m.delta_pct * direction * 2.5));\n } else if (abs !== null) {\n score = abs;\n }\n if (score !== null) {\n const w = overrideWeight.get(`${s.stage}:${m.integration}:${m.metric}`) ?? 1;\n weightedScores.push({ score, w });\n }\n // Chronological delta_7d bonus: ±15 added to the score if trending. Preserves the\n // original bounce_rate inversion (only metric previously direction-flipped here).\n if (m.delta_7d != null && score !== null) {\n const direction = m.metric === \"bounce_rate\" ? -1 : 1;\n deltaContributions.push(Math.max(-15, Math.min(15, m.delta_7d * direction * 0.5)));\n }\n }\n const weightSum = weightedScores.reduce((a, x) => a + x.w, 0);\n const baseHealth = weightedScores.length && weightSum > 0\n ? weightedScores.reduce((a, x) => a + x.score * x.w, 0) / weightSum\n : 50;\n const deltaBonus = deltaContributions.length\n ? deltaContributions.reduce((a, b) => a + b, 0) / deltaContributions.length\n : 0;\n const health_score = Math.max(0, Math.min(100, Math.round(baseHealth + deltaBonus)));\n\n // Chronological-aware diagnosis: state of absolute health + 7d trend direction.\n const avgTrend = deltaContributions.length\n ? deltaContributions.reduce((a, b) => a + b, 0) / deltaContributions.length\n : 0;\n let diagnosis: string;\n if (health_score >= 75) diagnosis = \"Healthy — metrics meet or exceed SaaS benchmarks.\" + (avgTrend > 2 ? \" Trending up week-over-week.\" : avgTrend < -2 ? \" Mild 7d softening — watch closely.\" : \"\");\n else if (health_score >= 50) diagnosis = \"Moderate — room to improve against benchmarks.\" + (avgTrend > 2 ? \" 7d momentum is positive.\" : avgTrend < -2 ? \" 7d trend is negative.\" : \"\");\n else if (health_score >= 25) diagnosis = \"Underperforming benchmarks — focus optimization here.\" + (avgTrend < -2 ? \" Compounding 7d decline.\" : \"\");\n else diagnosis = \"Critical — metrics far below industry baselines. Prioritize this stage.\";\n\n return {\n stage: s.stage,\n label: STAGE_META[s.stage as Stage].label,\n description: STAGE_META[s.stage as Stage].description,\n metrics,\n health_score,\n diagnosis,\n };\n })\n );\n\n // Bottleneck = lowest-health stage with data.\n const candidates = resolvedStages.filter((s) => s.metrics.length > 0);\n const bottleneckStage = candidates.length\n ? candidates.reduce((lo, s) => (s.health_score < lo.health_score ? s : lo))\n : null;\n\n // Weighted overall_health — only counts stages with data so a missing integration\n // doesn't crater the composite. Weights renormalize when a stage is missing.\n const stageWeights: Record = { TOFU: 0.25, MOFU: 0.40, BOFU: 0.35 };\n const dataStages = resolvedStages.filter((s) => s.metrics.length > 0);\n const overallHealth = dataStages.length\n ? (() => {\n const weightSum = dataStages.reduce((acc, s) => acc + stageWeights[s.stage], 0);\n const weighted = dataStages.reduce((acc, s) => acc + s.health_score * stageWeights[s.stage], 0);\n return Math.max(0, Math.min(100, weighted / weightSum));\n })()\n : 0;\n\n const summary: FunnelSummary = {\n stages: resolvedStages,\n bottleneck: bottleneckStage\n ? { stage: bottleneckStage.stage, reason: bottleneckStage.diagnosis }\n : null,\n overall_health: Math.round(overallHealth),\n total_metrics_observed: allMetrics.length,\n total_integrations_connected: new Set(allMetrics.map((m) => m.integration)).size,\n generated_at: new Date().toISOString(),\n };\n\n await setCached(cacheKey, summary, 300);\n // Also cache under the legacy key so getCorrelations() (which calls getFunnelSummary() without\n // days) can still find a warm entry when the default 30d summary was just computed.\n if (days === 30) await setCached(\"funnel_summary\", summary, 300);\n return summary;\n}\n\n// ─── CORRELATIONS ────────────────────────────────────────────────────────────\nfunction getMetric(all: MetricPoint[], integration: string, metric: string): MetricPoint | undefined {\n return all.find((m) => m.integration === integration && m.metric === metric);\n}\n\n// Candidate cause→effect metric pairs to test for real lagged correlation over\n// metric_history. Order matters only for output ordering. Each pair carries the\n// funnel-stage endpoints and an action prompt; the narrative/strength/confidence/lag\n// are derived ENTIRELY from the measured coefficient — nothing is hand-typed.\ninterface CorrCandidate {\n id: string;\n src: { integration: string; metric: string };\n dst: { integration: string; metric: string };\n from: Stage;\n to: Stage;\n label_src: string;\n label_dst: string;\n action_prompt: string;\n}\nconst CORRELATION_CANDIDATES: CorrCandidate[] = [\n { id: \"dr-clicks\", src: { integration: \"ahrefs\", metric: \"domain_rating\" }, dst: { integration: \"gsc\", metric: \"clicks\" },\n from: \"TOFU\", to: \"TOFU\", label_src: \"domain authority\", label_dst: \"organic clicks\",\n action_prompt: \"Double down on the keyword clusters where rankings improved — let the AI prioritize.\" },\n { id: \"clicks-sessions\", src: { integration: \"gsc\", metric: \"clicks\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"search clicks\", label_dst: \"site sessions\",\n action_prompt: \"Audit the landing pages absorbing your organic clicks so the traffic converts to engaged sessions.\" },\n { id: \"ctr-sessions\", src: { integration: \"gsc\", metric: \"ctr\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"search CTR\", label_dst: \"site sessions\",\n action_prompt: \"Roll the title/meta patterns from your highest-CTR pages out to similar queries.\" },\n { id: \"imp-clicks\", src: { integration: \"gsc\", metric: \"impressions\" }, dst: { integration: \"gsc\", metric: \"clicks\" },\n from: \"TOFU\", to: \"TOFU\", label_src: \"search impressions\", label_dst: \"search clicks\",\n action_prompt: \"Track which queries gained impressions and ensure landing pages can absorb the traffic.\" },\n { id: \"eng-conv\", src: { integration: \"ga4\", metric: \"engagement_time\" }, dst: { integration: \"ga4\", metric: \"conversions\" },\n from: \"MOFU\", to: \"BOFU\", label_src: \"engagement time\", label_dst: \"conversions\",\n action_prompt: \"Pin the highest-engagement pages above the fold in nav — they're driving conversions.\" },\n { id: \"sessions-conv\", src: { integration: \"ga4\", metric: \"sessions\" }, dst: { integration: \"ga4\", metric: \"conversions\" },\n from: \"MOFU\", to: \"BOFU\", label_src: \"site sessions\", label_dst: \"conversions\",\n action_prompt: \"Protect the session→conversion path — tighten CTAs on your top entry pages.\" },\n { id: \"li-sessions\", src: { integration: \"linkedin\", metric: \"post_impressions\" }, dst: { integration: \"ga4\", metric: \"sessions\" },\n from: \"TOFU\", to: \"MOFU\", label_src: \"LinkedIn impressions\", label_dst: \"site sessions\",\n action_prompt: \"Schedule posts to drive referral sessions — coordinate launches with high-reach LinkedIn content.\" },\n];\n\n// Build a CorrelationSignal from a measured lagged correlation. Direction is the SIGN of r,\n// strength + confidence come straight from |r|, and the narrative cites r/n/lag honestly.\nfunction buildCorrelationSignal(\n c: CorrCandidate,\n res: { r: number; lag: number; n: number; p: number },\n srcLatest: MetricPoint | undefined,\n dstLatest: MetricPoint | undefined,\n): CorrelationSignal {\n const absR = Math.abs(res.r);\n const direction: CorrelationSignal[\"direction\"] = res.r > 0 ? \"positive\" : res.r < 0 ? \"negative\" : \"neutral\";\n const verb = direction === \"positive\" ? \"rises with\" : direction === \"negative\" ? \"moves opposite to\" : \"tracks\";\n const lagPhrase = res.lag > 0 ? ` with a ~${res.lag}-day lag` : \" same-day\";\n const narrative =\n `${c.label_src} ${verb} ${c.label_dst}${lagPhrase} ` +\n `(r=${res.r.toFixed(2)}, n=${res.n} paired days, p=${res.p.toFixed(3)}).`;\n return {\n id: c.id,\n source_metric: {\n integration: c.src.integration, metric: c.src.metric,\n value: srcLatest?.value ?? 0, unit: srcLatest?.unit ?? \"\",\n },\n target_metric: {\n integration: c.dst.integration, metric: c.dst.metric,\n value: dstLatest?.value ?? 0, unit: dstLatest?.unit ?? \"\",\n },\n direction,\n strength: corrStrength(absR),\n lag_days: res.lag,\n narrative,\n funnel_stage_from: c.from,\n funnel_stage_to: c.to,\n confidence: Math.round(absR * 100) / 100, // the REAL coefficient magnitude\n action_prompt: c.action_prompt,\n };\n}\n\nexport async function getCorrelations(force = false): Promise {\n if (!force) {\n const cached = await getCached(\"correlations\");\n if (cached) return cached;\n }\n // Latest live values (for display only) come from the funnel summary; the\n // correlation MATH runs entirely over metric_history daily series.\n const summary = await getFunnelSummary();\n const all = summary.stages.flatMap((s) => s.metrics);\n\n const signals: CorrelationSignal[] = [];\n for (const c of CORRELATION_CANDIDATES) {\n const [a, b] = await Promise.all([\n getMetricSeries(c.src.integration, c.src.metric),\n getMetricSeries(c.dst.integration, c.dst.metric),\n ]);\n if (a.length < MIN_CORR_SAMPLES || b.length < MIN_CORR_SAMPLES) continue;\n const res = bestLaggedCorrelation(a, b, 14);\n // Honest significance gate: enough paired days, real effect size, low p.\n if (res.n < MIN_CORR_SAMPLES) continue;\n if (Math.abs(res.r) < MIN_CORR_ABS_R) continue;\n if (res.p > MAX_CORR_P) continue;\n const srcLatest = getMetric(all, c.src.integration, c.src.metric);\n const dstLatest = getMetric(all, c.dst.integration, c.dst.metric);\n signals.push(buildCorrelationSignal(c, res, srcLatest, dstLatest));\n }\n\n // No qualifying correlations → honest empty result (no fabricated signals).\n await setCached(\"correlations\", signals, 300);\n return signals;\n}\n\n// ─── RECOMMENDATIONS ────────────────────────────────────────────────────────\nexport async function getRecommendations(): Promise> {\n const cached = await getCached(\"recommendations\");\n if (cached) return cached;\n\n const summary = await getFunnelSummary();\n const correlations = await getCorrelations();\n const recs: Array<{ title: string; action: string; priority: string }> = [];\n\n // Top recommendation: address bottleneck\n if (summary.bottleneck) {\n recs.push({\n title: `Fix the ${summary.bottleneck.stage} bottleneck`,\n action: `Why is ${summary.bottleneck.stage} health low?`,\n priority: \"critical\",\n });\n }\n // Highest-confidence positive signal: amplify it\n const positives = correlations.filter((c) => c.direction === \"positive\").sort((a, b) => b.confidence - a.confidence);\n if (positives[0]) {\n recs.push({\n title: positives[0].narrative.slice(0, 60) + \"…\",\n action: `How do I amplify the ${positives[0].source_metric.metric} → ${positives[0].target_metric.metric} chain?`,\n priority: \"high\",\n });\n }\n // Highest-confidence negative signal: investigate\n const negatives = correlations.filter((c) => c.direction === \"negative\").sort((a, b) => b.confidence - a.confidence);\n if (negatives[0]) {\n recs.push({\n title: `Investigate: ${negatives[0].narrative.slice(0, 50)}…`,\n action: negatives[0].action_prompt,\n priority: \"high\",\n });\n }\n\n // Fallback if no real data\n if (recs.length === 0) {\n recs.push(\n { title: \"Connect Google Workspace to unlock funnel intelligence\", action: \"How do I connect Google?\", priority: \"high\" },\n { title: \"Connect Ahrefs to track TOFU authority signals\", action: \"What does Ahrefs add to my funnel?\", priority: \"medium\" },\n { title: \"Configure GA4 property ID for MOFU/BOFU visibility\", action: \"How do I set up GA4?\", priority: \"medium\" },\n );\n }\n\n await setCached(\"recommendations\", recs.slice(0, 5), 300);\n return recs.slice(0, 5);\n}\n\n// ─── MQL / SQL LEAD SCORING ──────────────────────────────────────────────────\n// B2B SaaS qualification math:\n// MQL score = sum of behavioral signals (opens, clicks, pricing views, downloads)\n// MQL threshold: ≥ 40\n// SQL = 2+ qualified signals (reply, accepted connection, booked meeting, requested demo)\n// Since Nexus has no CRM, we derive from Gmail inbox threads + Outlook calendar overlap.\nexport interface LeadScore {\n email: string;\n name: string;\n company: string;\n mql_score: number;\n mql_qualified: boolean; // score >= 40\n sql_signals: string[]; // list of qualified signals fired\n sql_qualified: boolean; // signals.length >= 2\n stage: \"cold\" | \"MQL\" | \"SQL\";\n signal_breakdown: Record;\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n last_touch_at?: string;\n signal_count: number; // raw engagement events rolled into this account\n low_confidence: boolean; // signal_count < 3 → insufficient history, disclose in UI\n}\n\n// One raw engagement event scraped from an inbox/calendar. Each carries a typed\n// signal whose business weight comes from SIGNAL_WEIGHTS and whose recency drives\n// time-decay. Events are rolled up by ACCOUNT (email domain) below.\ninterface RawSignal {\n email: string;\n name: string;\n company: string;\n signal_type: string; // SIGNAL_WEIGHTS key\n detected_at: string; // ISO; \"\" when unknown (treated as now → no decay)\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n qualified?: boolean; // counts toward SQL qualification (reply/demo/meeting)\n}\n\n// Free / consumer mailbox domains that should NOT collapse into a shared company\n// account (mirrors signals.ts). Such senders fall back to company, then full email.\nconst GENERIC_LEAD_DOMAINS = new Set([\n \"gmail.com\", \"googlemail.com\", \"yahoo.com\", \"ymail.com\", \"hotmail.com\",\n \"outlook.com\", \"live.com\", \"msn.com\", \"aol.com\", \"icloud.com\", \"me.com\",\n \"mac.com\", \"proton.me\", \"protonmail.com\", \"gmx.com\", \"mail.com\",\n \"zoho.com\", \"yandex.com\", \"qq.com\", \"163.com\", \"126.com\",\n]);\n\n// Account key + domain + human label for a contact. Real corporate domains group\n// every contact at that domain into one account row.\nfunction leadAccountIdentity(email: string, company: string): { key: string; domain: string; label: string } {\n const at = email.lastIndexOf(\"@\");\n const rawDomain = at >= 0 ? email.slice(at + 1).trim().toLowerCase() : \"\";\n const cleanCompany = (company || \"\").trim();\n if (rawDomain && rawDomain.includes(\".\") && !GENERIC_LEAD_DOMAINS.has(rawDomain)) {\n return { key: \"domain:\" + rawDomain, domain: rawDomain, label: cleanCompany || rawDomain };\n }\n if (cleanCompany) return { key: \"company:\" + cleanCompany.toLowerCase(), domain: \"\", label: cleanCompany };\n return { key: \"email:\" + email.toLowerCase(), domain: rawDomain, label: email };\n}\n\n// FIT (0..1): how well an account's domain/company tokens overlap the ICP/product\n// language from the company profile. Default 0.5 when no profile text exists — an\n// honest \"unknown\", not a fabricated high score.\nconst FIT_TOKEN_RE = /[a-z0-9]+/g;\nfunction tokenize(s: string): Set {\n const out = new Set();\n for (const m of (s || \"\").toLowerCase().matchAll(FIT_TOKEN_RE)) {\n if (m[0].length >= 3) out.add(m[0]);\n }\n return out;\n}\nfunction computeFit(accountText: string, icpTokens: Set): number {\n if (icpTokens.size === 0) return 0.5; // no ICP defined → neutral prior\n const at = tokenize(accountText);\n if (at.size === 0) return 0.5;\n let overlap = 0;\n for (const t of at) if (icpTokens.has(t)) overlap++;\n // Fraction of the account's own tokens that appear in the ICP/product vocabulary.\n return Math.max(0, Math.min(1, overlap / at.size));\n}\n\nexport async function getLeadScores(): Promise {\n const cached = await getCached(\"lead_scores\");\n if (cached) return cached;\n\n // ── 1. Scrape raw engagement events from Outlook + Gmail (ingestion only). ──\n const raw: RawSignal[] = [];\n\n const outlookCreds = await getCredentials(\"outlook\");\n if (outlookCreds?.access_token) {\n try {\n const r = await fetch(\"https://graph.microsoft.com/v1.0/me/messages?$top=50&$orderby=receivedDateTime desc&$select=from,subject,isRead,body,receivedDateTime\",\n { headers: { Authorization: `Bearer ${outlookCreds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n for (const m of (d.value || [])) {\n const email = m.from?.emailAddress?.address;\n if (!email) continue;\n const name = m.from?.emailAddress?.name || email.split(\"@\")[0];\n const company = (email.split(\"@\")[1] || \"\").split(\".\")[0];\n const when = m.receivedDateTime || \"\";\n const subj = (m.subject || \"\").toLowerCase();\n const body = (m.body?.content || \"\").toLowerCase();\n const text = subj + \" \" + body;\n const push = (signal_type: string, qualified = false) =>\n raw.push({ email, name, company, signal_type, detected_at: when, source: \"outlook\", qualified });\n // Map inbox content → typed signals (each weighted via SIGNAL_WEIGHTS).\n push(\"email_open\");\n if (/pricing|plans|cost/.test(text)) push(\"pricing_keyword\");\n if (/download|whitepaper|ebook|guide/.test(text)) push(\"content_download\");\n if (/^re:|reply|response/i.test(subj)) push(\"email_reply\", true);\n if (/demo|trial|proposal|quote/.test(text)) push(\"demo_request\", true);\n }\n }\n } catch {}\n\n // Outlook calendar → booked discovery calls (a strong SQL signal).\n try {\n const start = new Date().toISOString();\n const end = new Date(Date.now() + 30 * 86400000).toISOString();\n const r = await fetch(`https://graph.microsoft.com/v1.0/me/calendar/events?$top=50&$filter=start/dateTime ge '${start}' and start/dateTime le '${end}'&$select=attendees,subject,start`,\n { headers: { Authorization: `Bearer ${outlookCreds.access_token}` } });\n if (r.ok) {\n const d = await safeJson(r);\n for (const ev of (d.value || [])) {\n const when = ev.start?.dateTime || new Date().toISOString();\n for (const a of (ev.attendees || [])) {\n const email = a.emailAddress?.address;\n if (!email) continue;\n const name = a.emailAddress?.name || email.split(\"@\")[0];\n const company = (email.split(\"@\")[1] || \"\").split(\".\")[0];\n raw.push({ email, name, company, signal_type: \"calendar_event\", detected_at: when, source: \"outlook\", qualified: true });\n }\n }\n }\n } catch {}\n }\n\n // Gmail thread analysis — runs independent of Outlook so Google-only users still get leads.\n try {\n const gmailCreds = await getCredentials(\"gmail\");\n const token = gmailCreds?.access_token;\n if (token) {\n const listR = await fetch(\"https://gmail.googleapis.com/gmail/v1/users/me/messages?maxResults=30&q=in:inbox+newer_than:30d\",\n { headers: { Authorization: `Bearer ${token}` } });\n if (listR.ok) {\n const list = await safeJson(listR);\n const ids: string[] = (list.messages || []).map((m: any) => m.id).slice(0, 30);\n const fetched = await Promise.allSettled(ids.map((id) =>\n fetch(`https://gmail.googleapis.com/gmail/v1/users/me/messages/${id}?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Date`,\n { headers: { Authorization: `Bearer ${token}` } }).then((r) => r.ok ? r.json() : null)\n ));\n for (const f of fetched) {\n if (f.status !== \"fulfilled\" || !f.value) continue;\n const msg: any = f.value;\n const headers: any[] = msg.payload?.headers || [];\n const findH = (n: string) => headers.find((h) => h.name?.toLowerCase() === n.toLowerCase())?.value || \"\";\n const from = findH(\"From\");\n const subject = findH(\"Subject\");\n const date = findH(\"Date\");\n const snippet = (msg.snippet || \"\").toLowerCase();\n const emailMatch = from.match(/<([^>]+)>|([\\w.+-]+@[\\w.-]+)/);\n const email = (emailMatch?.[1] || emailMatch?.[2] || \"\").toLowerCase();\n if (!email) continue;\n const nameMatch = from.match(/^([^<]+)\n raw.push({ email, name, company, signal_type, detected_at: when, source: \"gmail\", qualified });\n push(\"email_open\");\n if (/pricing|plans|cost|how much/.test(text)) push(\"pricing_keyword\");\n if (/proposal|quote|contract|sow|statement of work/.test(text)) push(\"demo_request\", true);\n if (/demo|trial|walkthrough|kickoff/.test(text)) push(\"demo_request\", true);\n if (/^re:/i.test(subj.trim())) push(\"email_reply\", true);\n }\n }\n }\n } catch { /* gmail optional */ }\n\n // ── 2. ICP / product vocabulary from the company profile (for FIT). ──\n const profile = await getCompanyProfile();\n const icpTokens = tokenize([profile.icp, profile.product, profile.markets].filter(Boolean).join(\" \"));\n\n // ── 3. Roll signals up by ACCOUNT (email domain). ──\n const DECAY_TAU = 14; // days\n const nowMs = Date.now();\n type AccountAgg = {\n label: string; domain: string;\n rep_email: string; rep_name: string; rep_company: string; last_touch_at: string;\n intent: number; // Σ weight · exp(-ageDays/14)\n breakdown: Record; // decayed score per signal_type\n qualified_types: Set; // distinct SQL-grade signal types fired\n signal_count: number; // raw events rolled in (cold-start disclosure)\n source: \"gmail\" | \"outlook\" | \"linkedin\";\n };\n const byAccount = new Map();\n for (const s of raw) {\n const { key, domain, label } = leadAccountIdentity(s.email, s.company);\n const weight = SIGNAL_WEIGHTS[s.signal_type]?.score ?? 5;\n // INTENT term: weight · exp(-ageDays/14). Unknown/future timestamps → factor 1.\n let decay = 1;\n const t = s.detected_at ? Date.parse(s.detected_at) : NaN;\n if (Number.isFinite(t)) {\n const ageDays = (nowMs - t) / 86_400_000;\n if (ageDays > 0) decay = Math.exp(-ageDays / DECAY_TAU);\n }\n const contribution = weight * decay;\n\n let agg = byAccount.get(key);\n if (!agg) {\n agg = {\n label, domain,\n rep_email: s.email, rep_name: s.name, rep_company: s.company || label,\n last_touch_at: s.detected_at || \"\",\n intent: 0, breakdown: {}, qualified_types: new Set(), signal_count: 0, source: s.source,\n };\n byAccount.set(key, agg);\n }\n agg.signal_count += 1; // every raw signal pushed into this account\n agg.intent += contribution;\n agg.breakdown[s.signal_type] = (agg.breakdown[s.signal_type] || 0) + Math.round(contribution * 100) / 100;\n if (s.qualified) agg.qualified_types.add(s.signal_type);\n if (s.detected_at && (!agg.last_touch_at || s.detected_at > agg.last_touch_at)) {\n agg.last_touch_at = s.detected_at;\n agg.rep_email = s.email; agg.rep_name = s.name;\n if (s.company) agg.rep_company = s.company;\n }\n }\n\n // ── 4. Score each account: FIT · INTENT. ──\n // MQL threshold ≥ 40 (same bar as before); SQL = ≥ 2 distinct qualified signal types.\n const MQL_THRESHOLD = 40;\n const result: LeadScore[] = [];\n for (const agg of byAccount.values()) {\n const accountText = [agg.label, agg.domain, agg.rep_company].filter(Boolean).join(\" \");\n const fit = computeFit(accountText, icpTokens);\n const score = Math.round(fit * agg.intent);\n const sql_signals = Array.from(agg.qualified_types);\n const sql_qualified = sql_signals.length >= 2;\n const mql_qualified = score >= MQL_THRESHOLD;\n result.push({\n email: agg.rep_email,\n name: agg.rep_name,\n company: agg.rep_company || agg.label,\n mql_score: score,\n mql_qualified,\n sql_signals,\n sql_qualified,\n stage: sql_qualified ? \"SQL\" : mql_qualified ? \"MQL\" : \"cold\",\n signal_breakdown: { ...agg.breakdown, fit: Math.round(fit * 100) / 100 },\n source: agg.source,\n last_touch_at: agg.last_touch_at || undefined,\n // Cold-start honesty: disclose thin history without fabricating or suppressing the\n // score. < 3 raw signals → the UI should flag this lead as low-confidence.\n signal_count: agg.signal_count,\n low_confidence: agg.signal_count < 3,\n });\n }\n\n // Record state transitions so engagement velocity has data to compute from.\n // recordLeadStateChange skips inserts when the state hasn't changed since last write.\n try {\n const { recordLeadStateChange } = await import(\"./aio.ts\");\n await Promise.allSettled(result.map((l) => recordLeadStateChange(l.email, l.stage)));\n } catch { /* non-critical */ }\n // Sort: SQL first, then MQL, then by score desc\n result.sort((a, b) => {\n const rank = (l: LeadScore) => l.sql_qualified ? 2 : l.mql_qualified ? 1 : 0;\n return (rank(b) - rank(a)) || (b.mql_score - a.mql_score);\n });\n\n const sliced = result.slice(0, 50);\n await setCached(\"lead_scores\", sliced, 300);\n return sliced;\n}\n\n// ─── AIO MARKETING KPIs (the \"math problem\" surface) ────────────────────────\n// CAC = est_marketing_spend / new_customers_acquired\n// LTV = avg_deal_size × retention_months (default retention_months = 12 — configurable)\n// LTV/CAC ratio: healthy SaaS benchmark is ≥ 3:1\n// Funnel conversion rates: TOFU→MOFU (sessions/clicks), MOFU→BOFU (conversions/sessions)\n// mer = Marketing Efficiency Ratio (revenue / spend). Renamed from roi_multiplier. Healthy bench ≥ 3.0.\n// pipeline_coverage = pipeline_value / sales_quota. Healthy ≥ 3.0 (3x quota in pipe).\nexport interface AIOKpis {\n cac: number | null; // Customer Acquisition Cost\n ltv: number | null; // Lifetime Value\n ltv_cac_ratio: number | null; // Higher = better unit economics\n mer: number | null; // Marketing Efficiency Ratio = revenue / marketing spend\n roi_multiplier: number | null; // DEPRECATED alias of mer — kept for backwards compat\n pipeline_coverage: number | null; // pipeline_value / sales_quota\n pipeline_value: number;\n sales_quota: number;\n funnel_conv_tofu_mofu: number | null; // sessions / clicks (%)\n funnel_conv_mofu_bofu: number | null; // conversions / sessions (%)\n conversions: number;\n sessions: number;\n clicks: number;\n marketing_spend: number;\n avg_deal_size: number;\n retention_months: number;\n benchmark_status: {\n ltv_cac: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n mer: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n pipeline_coverage: \"healthy\" | \"borderline\" | \"unhealthy\" | \"unknown\";\n };\n // Honest provenance for the unit-economics figures. cac/ltv/mer all depend on\n // hand-typed dollar inputs (avg_deal_size, est_marketing_spend, retention_months),\n // so they are labeled \"estimate\" — never \"measured\" — when computed; null when the\n // value itself is null. \"measured\" is reserved for figures derived purely from live\n // integration data (none of cac/ltv/mer qualify without a live revenue feed).\n sources: {\n cac: \"estimate\" | \"measured\" | null;\n ltv: \"estimate\" | \"measured\" | null;\n mer: \"estimate\" | \"measured\" | null;\n };\n generated_at: string;\n}\n\nasync function getAppConfigNumber(key: string): Promise {\n try {\n const r = await sqlite.execute(\"SELECT value FROM app_config WHERE key = ? AND tenant_id = ?\", [key, currentTenantId()]);\n if (!r.rows?.length) return 0;\n const v = String((r.rows[0] as any[])[0]).replace(/^\"|\"$/g, \"\");\n return parseFloat(v) || 0;\n } catch { return 0; }\n}\n\nexport async function getAIOKpis(): Promise {\n const cached = await getCached(\"aio_kpis\");\n if (cached) return cached;\n\n const summary = await getFunnelSummary();\n const all = summary.stages.flatMap((s) => s.metrics);\n const sessions = getMetric(all, \"ga4\", \"sessions\")?.value || 0;\n const conversions = getMetric(all, \"ga4\", \"conversions\")?.value || 0;\n const clicks = getMetric(all, \"gsc\", \"clicks\")?.value || 0;\n\n const avg_deal_size = await getAppConfigNumber(\"avg_deal_size\");\n const marketing_spend = await getAppConfigNumber(\"est_marketing_spend\");\n const retention_months = (await getAppConfigNumber(\"retention_months\")) || 12;\n const pipeline_value = await getAppConfigNumber(\"pipeline_value\");\n const sales_quota = await getAppConfigNumber(\"sales_quota\");\n\n // Real math, with explicit null when inputs missing.\n const cac = (marketing_spend > 0 && conversions > 0) ? marketing_spend / conversions : null;\n const ltv = avg_deal_size > 0 ? avg_deal_size * retention_months : null;\n const ltv_cac_ratio = (ltv && cac && cac > 0) ? ltv / cac : null;\n // Marketing Efficiency Ratio = revenue / spend. Healthy bench ≥ 3.0 (Klaviyo/Recharge label).\n const mer = (marketing_spend > 0 && conversions > 0 && avg_deal_size > 0)\n ? (conversions * avg_deal_size) / marketing_spend : null;\n const roi_multiplier = mer; // deprecated alias\n // Pipeline Coverage Ratio — sales-team forward-looking signal.\n const pipeline_coverage = (sales_quota > 0 && pipeline_value > 0) ? pipeline_value / sales_quota : null;\n // QA fix: was producing >100% (e.g. 902%) when denominator was very small. Guard with\n // a minimum-sample floor and clamp to 0-100. Anything outside that range means our\n // metric units don't align (clicks vs sessions vs visits), not a real conversion rate.\n const MIN_SAMPLE = 50;\n const funnel_conv_tofu_mofu = (clicks >= MIN_SAMPLE)\n ? Math.max(0, Math.min(100, (sessions / clicks) * 100))\n : null;\n const funnel_conv_mofu_bofu = (sessions >= MIN_SAMPLE)\n ? Math.max(0, Math.min(100, (conversions / sessions) * 100))\n : null;\n\n const benchStatus = (v: number | null, healthy: number, borderline: number) =>\n v == null ? \"unknown\" as const :\n v >= healthy ? \"healthy\" as const :\n v >= borderline ? \"borderline\" as const :\n \"unhealthy\" as const;\n const ltv_cac_status = benchStatus(ltv_cac_ratio, 3, 1);\n const mer_status = benchStatus(mer, 3, 1);\n const pipeline_coverage_status = benchStatus(pipeline_coverage, 3, 1.5);\n\n // Provenance: these three lean on hand-typed dollar inputs → \"estimate\" when present,\n // null when the figure couldn't be computed. No live revenue feed exists, so none are \"measured\".\n const sources: AIOKpis[\"sources\"] = {\n cac: cac == null ? null : \"estimate\",\n ltv: ltv == null ? null : \"estimate\",\n mer: mer == null ? null : \"estimate\",\n };\n\n const out: AIOKpis = {\n cac, ltv, ltv_cac_ratio, mer, roi_multiplier,\n pipeline_coverage, pipeline_value, sales_quota,\n funnel_conv_tofu_mofu, funnel_conv_mofu_bofu,\n conversions, sessions, clicks, marketing_spend, avg_deal_size, retention_months,\n benchmark_status: { ltv_cac: ltv_cac_status, mer: mer_status, pipeline_coverage: pipeline_coverage_status },\n sources,\n generated_at: new Date().toISOString(),\n };\n await setCached(\"aio_kpis\", out, 300);\n return out;\n}\n\n// ─── INTELLIGENCE FEED (LLM-generated narrative cards) ──────────────────────\nexport async function getIntelligenceFeed(): Promise {\n // Cache invalidation — only serve cached feed if the funnel summary it was built\n // from is not newer than the cache. When the user hits ?force=1 on funnel-summary the\n // upstream cache regenerates, and the feed should follow on its next read instead of\n // serving up-to-5-minute-stale narrative cards.\n const cached = await getCachedTimestamp(\"feed\");\n const summaryMeta = await getCachedTimestamp(\"funnel_summary\");\n if (cached && (!summaryMeta || summaryMeta.generated_at <= cached.generated_at)) {\n return cached.payload;\n }\n\n const summary = await getFunnelSummary();\n const correlations = await getCorrelations();\n\n // Deterministic baseline cards from correlations (no LLM call required)\n const baseCards: IntelligenceCard[] = correlations.slice(0, 4).map((c) => ({\n type: c.direction === \"positive\" ? \"win\" : c.direction === \"negative\" ? \"risk\" : \"correlation\",\n priority: c.strength === \"strong\" ? \"critical\" : c.strength === \"moderate\" ? \"high\" : \"medium\",\n title: c.narrative.split(\".\")[0],\n body: `${c.narrative} Lag: ${c.lag_days}d · confidence: ${Math.round(c.confidence * 100)}%`,\n metrics: [\n `${c.source_metric.integration} ${c.source_metric.metric}: ${c.source_metric.value.toFixed(1)}${c.source_metric.unit}`,\n `${c.target_metric.integration} ${c.target_metric.metric}: ${c.target_metric.value.toFixed(1)}${c.target_metric.unit}`,\n ],\n funnel_stages: c.funnel_stage_from === c.funnel_stage_to ? [c.funnel_stage_from] : [c.funnel_stage_from, c.funnel_stage_to],\n agent_name: \"Signal Monitor\",\n timestamp: new Date().toISOString(),\n action_label: \"Investigate →\",\n action_payload: { question: c.action_prompt, context: { signal_id: c.id, narrative: c.narrative } },\n }));\n\n // Add a bottleneck card\n if (summary.bottleneck) {\n baseCards.unshift({\n type: \"anomaly\", priority: \"critical\",\n title: `${summary.bottleneck.stage} stage is the current bottleneck`,\n body: summary.bottleneck.reason,\n metrics: summary.stages\n .find((s) => s.stage === summary.bottleneck!.stage)!\n .metrics.slice(0, 3)\n .map((m) => `${m.integration} ${m.metric}: ${m.value.toFixed(1)}${m.unit}`),\n funnel_stages: [summary.bottleneck.stage],\n agent_name: \"Funnel Sentinel\",\n timestamp: new Date().toISOString(),\n action_label: \"Diagnose →\",\n action_payload: { question: `What's causing the drop in ${summary.bottleneck.stage} health?` },\n });\n }\n\n // Optionally enrich with LLM narrative when an LLM is configured.\n try {\n const cfg = await getLLMConfig();\n if (cfg.api_key && baseCards.length > 0) {\n const ctx = JSON.stringify({\n stages: summary.stages.map((s) => ({ stage: s.stage, health: s.health_score, metrics: s.metrics.length })),\n correlations: correlations.map((c) => ({ from: c.source_metric.metric, to: c.target_metric.metric, dir: c.direction, narrative: c.narrative })),\n });\n const resp = await callLLM(cfg, [{ role: \"user\", content: `Given this funnel state, write ONE concise 2-sentence \"opportunity\" card body (no preamble, no markdown):\\n${ctx}` }], { maxTokens: 200 });\n if (resp.content) {\n baseCards.splice(1, 0, {\n type: \"opportunity\", priority: \"high\",\n title: \"AI Insight: Cross-stage opportunity detected\",\n body: resp.content.trim(),\n metrics: [\"LLM-derived from funnel state\"],\n funnel_stages: [\"TOFU\", \"MOFU\", \"BOFU\"],\n agent_name: \"Nexus Analyst\",\n timestamp: new Date().toISOString(),\n action_label: \"Explore →\",\n action_payload: { question: \"Tell me more about this opportunity and how to act on it.\" },\n });\n }\n }\n } catch {}\n\n // Empty-state placeholder when nothing connected\n if (baseCards.length === 0) {\n baseCards.push({\n type: \"opportunity\", priority: \"medium\",\n title: \"Connect your first integration to unlock intelligence\",\n body: \"Once Ahrefs, GA4, or Search Console is connected, Nexus will start computing causal signals across your funnel.\",\n metrics: [], funnel_stages: [\"TOFU\"], agent_name: \"Onboarding\",\n timestamp: new Date().toISOString(),\n action_label: \"Open Settings →\",\n action_payload: { question: \"Walk me through connecting my first integration.\" },\n });\n }\n\n await setCached(\"feed\", baseCards, 300);\n return baseCards;\n}\n","createdAt",["D",1780483962033],"branchVersion","branchId","ecb58646-56c9-11f1-abd8-ee650bb23af1","id","ecb4ccf6-56c9-11f1-abd8-ee650bb23af1","aihivecommand",["D",1779556068488],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","AIHive Command Center","imageUrl","e8c17657-6210-4c45-bd2b-dbcf2e020293","pinnedFileId","32167c2c-56ca-11f1-955a-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e4de5-f6b1-7488-a017-a3a028bc2ba8","tursoName","ecb4ccf656c911f1abd8ee650bb23af1","tursoHostname","ecb4ccf656c911f1abd8ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789503703835],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_108":104},"org",{"_101":100,"_102":100,"_103":104,"_18":56,"_105":106,"_107":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",1111,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vlduy123","handle","displayName","avatar","https://avatars.githubusercontent.com/u/208025931?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":1899,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":1900,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":1901,"_85":1902,"_87":1903,"_89":25},"tree",[555,641,659,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733],"files",[555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733],"counts",{"_545":64,"_546":303,"_547":64,"_548":549,"_550":551},"contents",[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":540,"_32":541,"_30":542,"_183":-5,"_42":43,"_41":196,"_185":60,"_39":543,"_13":64,"_34":532,"_36":-5,"_24":25,"_189":-5,"_27":544},{"_44":534,"_32":535,"_30":536,"_183":-5,"_42":43,"_41":537,"_185":60,"_39":538,"_13":64,"_34":532,"_36":-5,"_24":25,"_189":-5,"_27":539},{"_44":527,"_32":528,"_30":529,"_183":-5,"_42":43,"_41":530,"_185":60,"_39":531,"_13":64,"_34":532,"_36":-5,"_24":25,"_189":-5,"_27":533},{"_44":520,"_32":521,"_30":522,"_183":-5,"_42":43,"_41":523,"_185":60,"_39":524,"_13":236,"_34":35,"_36":525,"_24":25,"_189":-5,"_27":526},{"_44":513,"_32":514,"_30":515,"_183":-5,"_42":43,"_41":516,"_185":25,"_39":517,"_13":220,"_34":35,"_36":518,"_24":25,"_189":-5,"_27":519},{"_44":506,"_32":507,"_30":508,"_183":-5,"_42":43,"_41":509,"_185":60,"_39":510,"_13":196,"_34":35,"_36":511,"_24":25,"_189":-5,"_27":512},{"_44":498,"_32":499,"_30":500,"_183":-5,"_42":43,"_41":501,"_185":25,"_39":502,"_13":503,"_34":35,"_36":504,"_24":25,"_189":-5,"_27":505},{"_44":490,"_32":491,"_30":492,"_183":-5,"_42":43,"_41":493,"_185":25,"_39":494,"_13":495,"_34":35,"_36":496,"_24":25,"_189":-5,"_27":497},{"_44":483,"_32":484,"_30":485,"_183":-5,"_42":43,"_41":486,"_185":60,"_39":487,"_13":303,"_34":35,"_36":488,"_24":25,"_189":-5,"_27":489},{"_44":475,"_32":476,"_30":477,"_183":-5,"_42":43,"_41":478,"_185":60,"_39":479,"_13":480,"_34":35,"_36":481,"_24":25,"_189":-5,"_27":482},{"_44":467,"_32":468,"_30":469,"_183":-5,"_42":43,"_41":470,"_185":60,"_39":471,"_13":472,"_34":35,"_36":473,"_24":25,"_189":-5,"_27":474},{"_44":460,"_32":461,"_30":462,"_183":-5,"_42":43,"_41":463,"_185":60,"_39":464,"_13":258,"_34":35,"_36":465,"_24":25,"_189":-5,"_27":466},{"_44":452,"_32":453,"_30":454,"_183":-5,"_42":43,"_41":455,"_185":60,"_39":456,"_13":457,"_34":35,"_36":458,"_24":25,"_189":-5,"_27":459},{"_44":445,"_32":446,"_30":447,"_183":-5,"_42":43,"_41":448,"_185":60,"_39":449,"_13":220,"_34":35,"_36":450,"_24":25,"_189":-5,"_27":451},{"_44":438,"_32":439,"_30":440,"_183":-5,"_42":43,"_41":441,"_185":60,"_39":442,"_13":64,"_34":35,"_36":443,"_24":25,"_189":-5,"_27":444},{"_44":431,"_32":432,"_30":433,"_183":-5,"_42":43,"_41":434,"_185":60,"_39":435,"_13":326,"_34":35,"_36":436,"_24":25,"_189":-5,"_27":437},{"_44":424,"_32":425,"_30":426,"_183":-5,"_42":43,"_41":427,"_185":60,"_39":428,"_13":220,"_34":35,"_36":429,"_24":25,"_189":-5,"_27":430},{"_44":416,"_32":417,"_30":418,"_183":-5,"_42":43,"_41":419,"_185":25,"_39":420,"_13":421,"_34":35,"_36":422,"_24":25,"_189":-5,"_27":423},{"_44":408,"_32":409,"_30":410,"_183":-5,"_42":43,"_41":411,"_185":25,"_39":412,"_13":413,"_34":35,"_36":414,"_24":25,"_189":-5,"_27":415},{"_44":401,"_32":402,"_30":403,"_183":-5,"_42":43,"_41":404,"_185":60,"_39":405,"_13":334,"_34":35,"_36":406,"_24":25,"_189":-5,"_27":407},{"_44":394,"_32":395,"_30":396,"_183":-5,"_42":43,"_41":397,"_185":25,"_39":398,"_13":326,"_34":35,"_36":399,"_24":25,"_189":-5,"_27":400},{"_44":387,"_32":388,"_30":389,"_183":-5,"_42":43,"_41":390,"_185":60,"_39":391,"_13":236,"_34":35,"_36":392,"_24":25,"_189":-5,"_27":393},{"_44":380,"_32":381,"_30":382,"_183":-5,"_42":43,"_41":383,"_185":60,"_39":384,"_13":64,"_34":35,"_36":385,"_24":25,"_189":-5,"_27":386},{"_44":373,"_32":374,"_30":375,"_183":-5,"_42":43,"_41":376,"_185":60,"_39":377,"_13":64,"_34":35,"_36":378,"_24":25,"_189":-5,"_27":379},{"_44":366,"_32":367,"_30":368,"_183":-5,"_42":43,"_41":369,"_185":60,"_39":370,"_13":64,"_34":35,"_36":371,"_24":25,"_189":-5,"_27":372},{"_44":359,"_32":360,"_30":361,"_183":-5,"_42":43,"_41":362,"_185":25,"_39":363,"_13":64,"_34":35,"_36":364,"_24":25,"_189":-5,"_27":365},{"_44":352,"_32":353,"_30":354,"_183":-5,"_42":43,"_41":355,"_185":60,"_39":356,"_13":326,"_34":35,"_36":357,"_24":25,"_189":-5,"_27":358},{"_44":344,"_32":345,"_30":346,"_183":-5,"_42":43,"_41":347,"_185":60,"_39":348,"_13":349,"_34":35,"_36":350,"_24":25,"_189":-5,"_27":351},{"_44":337,"_32":338,"_30":339,"_183":-5,"_42":43,"_41":340,"_185":60,"_39":341,"_13":196,"_34":35,"_36":342,"_24":25,"_189":-5,"_27":343},{"_44":329,"_32":330,"_30":331,"_183":-5,"_42":43,"_41":332,"_185":60,"_39":333,"_13":334,"_34":35,"_36":335,"_24":25,"_189":-5,"_27":336},{"_44":321,"_32":322,"_30":323,"_183":-5,"_42":43,"_41":324,"_185":60,"_39":325,"_13":326,"_34":35,"_36":327,"_24":25,"_189":-5,"_27":328},{"_44":313,"_32":314,"_30":315,"_183":-5,"_42":43,"_41":316,"_185":25,"_39":317,"_13":318,"_34":35,"_36":319,"_24":25,"_189":-5,"_27":320},{"_44":306,"_32":307,"_30":308,"_183":-5,"_42":43,"_41":309,"_185":60,"_39":310,"_13":196,"_34":35,"_36":311,"_24":25,"_189":-5,"_27":312},{"_44":298,"_32":299,"_30":300,"_183":-5,"_42":43,"_41":301,"_185":25,"_39":302,"_13":303,"_34":35,"_36":304,"_24":25,"_189":-5,"_27":305},{"_44":291,"_32":292,"_30":293,"_183":-5,"_42":43,"_41":294,"_185":60,"_39":295,"_13":236,"_34":35,"_36":296,"_24":25,"_189":-5,"_27":297},{"_44":284,"_32":285,"_30":286,"_183":-5,"_42":43,"_41":287,"_185":60,"_39":288,"_13":220,"_34":35,"_36":289,"_24":25,"_189":-5,"_27":290},{"_44":277,"_32":278,"_30":279,"_183":-5,"_42":43,"_41":280,"_185":60,"_39":281,"_13":196,"_34":35,"_36":282,"_24":25,"_189":-5,"_27":283},{"_44":269,"_32":270,"_30":271,"_183":-5,"_42":43,"_41":272,"_185":60,"_39":273,"_13":274,"_34":35,"_36":275,"_24":25,"_189":-5,"_27":276},{"_44":261,"_32":262,"_30":263,"_183":-5,"_42":43,"_41":264,"_185":60,"_39":265,"_13":266,"_34":35,"_36":267,"_24":25,"_189":-5,"_27":268},{"_44":253,"_32":254,"_30":255,"_183":-5,"_42":43,"_41":256,"_185":60,"_39":257,"_13":258,"_34":35,"_36":259,"_24":25,"_189":-5,"_27":260},{"_44":246,"_32":247,"_30":248,"_183":-5,"_42":43,"_41":249,"_185":60,"_39":250,"_13":64,"_34":35,"_36":251,"_24":25,"_189":-5,"_27":252},{"_44":239,"_32":240,"_30":241,"_183":-5,"_42":43,"_41":242,"_185":60,"_39":243,"_13":64,"_34":35,"_36":244,"_24":25,"_189":-5,"_27":245},{"_44":231,"_32":232,"_30":233,"_183":-5,"_42":43,"_41":234,"_185":60,"_39":235,"_13":236,"_34":35,"_36":237,"_24":25,"_189":-5,"_27":238},{"_44":223,"_32":224,"_30":225,"_183":-5,"_42":43,"_41":226,"_185":60,"_39":227,"_13":228,"_34":35,"_36":229,"_24":25,"_189":-5,"_27":230},{"_44":215,"_32":216,"_30":217,"_183":-5,"_42":43,"_41":218,"_185":60,"_39":219,"_13":220,"_34":35,"_36":221,"_24":25,"_189":-5,"_27":222},{"_44":207,"_32":208,"_30":58,"_183":-5,"_42":43,"_41":209,"_185":25,"_39":210,"_13":211,"_34":212,"_36":213,"_24":25,"_189":-5,"_27":214},{"_44":199,"_32":200,"_30":201,"_183":-5,"_42":43,"_41":202,"_185":25,"_39":203,"_13":204,"_34":35,"_36":205,"_24":25,"_189":-5,"_27":206},{"_44":191,"_32":192,"_30":193,"_183":-5,"_42":43,"_41":194,"_185":25,"_39":195,"_13":196,"_34":35,"_36":197,"_24":25,"_189":-5,"_27":198},{"_44":180,"_32":181,"_30":182,"_183":-5,"_42":43,"_41":184,"_185":60,"_39":186,"_13":187,"_34":35,"_36":188,"_24":25,"_189":-5,"_27":190},"026e63e8-5d7a-11f1-a7f5-1607ee4eb77e","types.ts","151549be-56ca-11f1-bc41-ee650bb23af1","parentId",699,"latest",["D",1780291403301],16,"export interface Integration {\n id: string;\n name: string; // 'ahrefs'|'ga4'|'gsc'|'linkedin'|'outlook'|'wordpress'|'youtube'|'producthunt'\n api_key?: string;\n api_secret?: string;\n access_token?: string;\n refresh_token?: string;\n extra_config?: string; // JSON string\n connected_at?: string;\n updated_at?: string;\n}\n\nexport interface LLMConfig {\n id: string;\n // QA fix: gemini was already routed in callLLM but missing from the union, causing TS noise.\n provider: 'anthropic' | 'openai' | 'gemini' | 'custom';\n api_key: string;\n endpoint?: string;\n model: string;\n updated_at?: string;\n // Per-provider key presence flags (computed from the 4 api_key_ columns) —\n // used by Settings UI to render \"(saved)\" pills without leaking the actual key.\n has_key?: { anthropic: boolean; openai: boolean; gemini: boolean; custom: boolean };\n}\n\nexport interface Agent {\n id: string;\n name: string;\n workspace: 'marketing' | 'sales';\n description: string;\n system_prompt: string;\n tools: string; // JSON array string\n model?: string;\n enabled: number; // 0 or 1\n created_at: string;\n updated_at: string;\n created_by: 'user' | 'ai';\n // B2: budget cap (USD/month) + running spend, joined from agent_budgets\n monthly_cap?: number;\n current_spend?: number;\n}\n\nexport interface Conversation {\n id: string;\n agent_id?: string;\n workspace: string;\n messages: string; // JSON array string\n created_at: string;\n updated_at: string;\n}\n\nexport interface Task {\n id: string;\n agent_id?: string;\n workspace: string;\n title: string;\n status: 'pending' | 'running' | 'done' | 'failed';\n input?: string;\n output?: string;\n created_at: string;\n completed_at?: string;\n}\n\nexport interface ChatMessage {\n role: 'user' | 'assistant' | 'system' | 'tool';\n content: string;\n timestamp?: string;\n // Tool-use fields (OpenAI-style) carried at runtime by chat.ts / llm.ts.\n tool_calls?: any[];\n tool_call_id?: string;\n reasoning_content?: string;\n // Part 14.2: structured execution trace (round/tool/action/message steps) shown in the UI.\n trace?: Array<{ t: string; role?: string; name?: string; preview?: string; args_preview?: string; result_preview?: string; ok?: boolean; ms?: number; n?: number; ts?: string }>;\n}\n","label",[181],"55fca990-5f3a-11f1-b12a-1607ee4eb77e","schema.ts","4ad25812-5f2b-11f1-9413-1607ee4eb77e",1070,["D",1780483958033],2,"import { sqlite, DEFAULT_AGENT_SEEDS } from \"./db.ts\";\n\n// The schema setup body lives here (moved verbatim out of db.ts) to keep db.ts under\n// val.town's 80KB/file cap. db.ts lazily `import(\"./schema.ts\")`s this and calls runSchema().\nexport async function runSchema(): Promise {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS integrations (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n api_key TEXT,\n api_secret TEXT,\n access_token TEXT,\n refresh_token TEXT,\n extra_config TEXT,\n connected_at TEXT,\n updated_at TEXT,\n tenant_id TEXT,\n UNIQUE(tenant_id, name)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS llm_config (\n id TEXT PRIMARY KEY DEFAULT 'default',\n provider TEXT NOT NULL DEFAULT 'anthropic',\n api_key TEXT NOT NULL DEFAULT '',\n endpoint TEXT,\n model TEXT NOT NULL DEFAULT 'claude-sonnet-4-6',\n updated_at TEXT\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS agents (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n workspace TEXT NOT NULL,\n description TEXT,\n system_prompt TEXT,\n tools TEXT DEFAULT '[]',\n model TEXT,\n enabled INTEGER DEFAULT 1,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n created_by TEXT DEFAULT 'user'\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n agent_id TEXT,\n workspace TEXT NOT NULL,\n messages TEXT DEFAULT '[]',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )\n `);\n\n // F4 migration: the original tasks table (TEXT id, agent_id, input/output) is replaced by\n // the framework-layer tasks schema (INTEGER id, ICE fields, OKR/experiment links). If a\n // legacy table exists, rename it so the new CREATE further down can build the right shape.\n try {\n const cols = await sqlite.execute(\"PRAGMA table_info(tasks)\");\n const have = new Set((cols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n // Old schema is identifiable by `agent_id` + `input` + no `priority`. New schema has `priority` + `ice_score`.\n const isLegacy = have.has(\"agent_id\") && have.has(\"input\") && !have.has(\"ice_score\");\n if (isLegacy) {\n await sqlite.execute(\"ALTER TABLE tasks RENAME TO tasks_legacy\");\n }\n } catch { /* table doesn't exist yet — fine, new CREATE will run */ }\n\n // Co-working: shared notes for team collaboration on strategies.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS notes (\n id TEXT PRIMARY KEY,\n author TEXT,\n content TEXT NOT NULL,\n workspace TEXT,\n pinned INTEGER DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT\n )\n `);\n\n // Intelligence layer: per-metric 30d baselines used for health scoring.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS metric_baselines (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n integration TEXT NOT NULL,\n metric_key TEXT NOT NULL,\n baseline_value REAL,\n baseline_period TEXT DEFAULT '30d',\n last_updated TEXT DEFAULT (datetime('now')),\n UNIQUE(integration, metric_key)\n )\n `);\n\n // Intelligence cache — funnel summary, correlations, recommendations, LLM-generated feed.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS intelligence_cache (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n cache_key TEXT UNIQUE NOT NULL,\n payload TEXT NOT NULL,\n generated_at TEXT DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )\n `);\n\n // App-wide key/value config: ROI inputs (avg_deal_size, est_marketing_spend),\n // workspace preferences (ultra_density, translucency, hardware_accel, etc.).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS app_config (\n key TEXT PRIMARY KEY,\n value TEXT,\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // Metric history — rolling timeseries for delta_7d / delta_30d computations.\n // Pruned to last 60 days on insert to keep size bounded.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS metric_history (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n integration TEXT NOT NULL,\n metric_key TEXT NOT NULL,\n value REAL NOT NULL,\n recorded_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_metric_history_key ON metric_history(integration, metric_key, recorded_at DESC)`);\n\n // A5: rolling baseline columns — added on existing metric_baselines tables via\n // PRAGMA-guarded ALTER so we never fail on re-run.\n try {\n const cols = await sqlite.execute(\"PRAGMA table_info(metric_baselines)\");\n const have = new Set((cols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!have.has(\"rolling_avg\")) {\n await sqlite.execute(\"ALTER TABLE metric_baselines ADD COLUMN rolling_avg REAL\");\n }\n if (!have.has(\"sample_count\")) {\n await sqlite.execute(\"ALTER TABLE metric_baselines ADD COLUMN sample_count INTEGER DEFAULT 0\");\n }\n } catch { /* non-critical: warm-start baselines still work */ }\n\n // QA fix: per-provider key columns on llm_config so switching providers doesn't\n // overwrite the previous provider's key. PRAGMA-guarded ALTER (re-run safe).\n try {\n const cols = await sqlite.execute(\"PRAGMA table_info(llm_config)\");\n const have = new Set((cols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n for (const col of [\"api_key_anthropic\", \"api_key_openai\", \"api_key_gemini\", \"api_key_custom\"]) {\n if (!have.has(col)) await sqlite.execute(`ALTER TABLE llm_config ADD COLUMN ${col} TEXT DEFAULT ''`);\n }\n if (!have.has(\"endpoint_custom\")) {\n await sqlite.execute(\"ALTER TABLE llm_config ADD COLUMN endpoint_custom TEXT DEFAULT ''\");\n }\n } catch { /* non-critical: legacy single-key still works */ }\n\n // Agent budget tracking — real monthly LLM-cost cap per agent.\n // current_spend incremented on each LLM call, reset at period_start rollover.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS agent_budgets (\n agent_id TEXT PRIMARY KEY,\n monthly_cap REAL DEFAULT 250,\n current_spend REAL DEFAULT 0,\n period_start TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // C3: agent execution log. One row per run (manual or scheduled). Latest 50 power the\n // AgentCard timeline. status: queued → running → completed | failed | cancelled.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS agent_runs (\n id TEXT PRIMARY KEY,\n agent_id TEXT NOT NULL,\n status TEXT NOT NULL,\n trigger TEXT DEFAULT 'manual',\n started_at TEXT DEFAULT (datetime('now')),\n finished_at TEXT,\n duration_ms INTEGER,\n input TEXT,\n output TEXT,\n error TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_agent_runs_agent ON agent_runs(agent_id, started_at DESC)`);\n\n // D1: customer cohorts. One row per cohort (e.g. signup month). Powers cohort-survival LTV\n // beyond the simple avg_deal × retention_months heuristic. retention_curve is a JSON array\n // [m1, m2, m3 ...] of retained customer counts. arpu = average revenue per user (monthly).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS customer_cohorts (\n id TEXT PRIMARY KEY,\n cohort_label TEXT NOT NULL,\n cohort_size INTEGER NOT NULL,\n arpu REAL NOT NULL,\n retention_curve TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // D3: lead state changes — every MQL→SQL transition gets a row so we can compute\n // engagement velocity (avg days lead spent in each stage).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS lead_state_changes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n lead_email TEXT NOT NULL,\n from_state TEXT,\n to_state TEXT NOT NULL,\n changed_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_lead_state_email ON lead_state_changes(lead_email, changed_at)`);\n\n // D5: utm_conversions — channel attribution log. Populated when a conversion fires\n // (manually pushed via POST /api/attribution or scraped from GA4 in a later phase).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS utm_conversions (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n utm_source TEXT,\n utm_medium TEXT,\n utm_campaign TEXT,\n conversion_value REAL DEFAULT 0,\n converted_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_utm_source ON utm_conversions(utm_source, converted_at DESC)`);\n\n // ─── FRAMEWORK LAYER (F1-F4): NSM, OKRs, Experiments, Tasks ─────────────────\n\n // F1: North Star Metric (singleton — only one active row; previous deleted on set)\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS north_star (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n metric_name TEXT NOT NULL,\n metric_source TEXT NOT NULL,\n metric_key TEXT,\n current_value REAL,\n target_value REAL NOT NULL,\n target_date TEXT NOT NULL,\n unit TEXT DEFAULT 'count',\n description TEXT,\n set_at TEXT DEFAULT (datetime('now')),\n set_by TEXT DEFAULT 'admin'\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS nsm_history (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n nsm_id INTEGER REFERENCES north_star(id) ON DELETE CASCADE,\n value REAL NOT NULL,\n recorded_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_nsm_history_id ON nsm_history(nsm_id, recorded_at DESC)`);\n\n // F2: OKRs (Objectives + Key Results)\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS objectives (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n description TEXT,\n quarter TEXT NOT NULL,\n workspace TEXT DEFAULT 'marketing',\n owner TEXT,\n status TEXT DEFAULT 'active',\n progress REAL DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS key_results (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n objective_id INTEGER NOT NULL REFERENCES objectives(id) ON DELETE CASCADE,\n title TEXT NOT NULL,\n metric_source TEXT,\n metric_key TEXT,\n start_value REAL DEFAULT 0,\n current_value REAL DEFAULT 0,\n target_value REAL NOT NULL,\n unit TEXT DEFAULT 'count',\n confidence REAL DEFAULT 0.5,\n progress REAL DEFAULT 0,\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_kr_objective ON key_results(objective_id)`);\n\n // F3: ICE Experiments (ice_score + uplift_pct computed in app code — sqlite GENERATED\n // column support is uneven; safer to project them client-side from impact/confidence/ease).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS experiments (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n hypothesis TEXT,\n objective_id INTEGER REFERENCES objectives(id) ON DELETE SET NULL,\n funnel_stage TEXT,\n aarrr_lever TEXT,\n status TEXT DEFAULT 'idea',\n impact REAL DEFAULT 5,\n confidence REAL DEFAULT 5,\n ease REAL DEFAULT 5,\n owner TEXT,\n start_date TEXT,\n end_date TEXT,\n channel TEXT,\n success_metric TEXT,\n baseline_value REAL,\n result_value REAL,\n outcome TEXT,\n learnings TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_exp_status ON experiments(status, updated_at DESC)`);\n\n // F4: Tasks (linked to OKRs / KRs / experiments — at least one for governance).\n // NOTE: the gap-closure prompt also referred to a \"tasks\" table — the older one (string id,\n // status enum 'pending|running|done|failed') is replaced by this richer schema. The two\n // were never wired to a shared UI so the swap is safe.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS tasks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n description TEXT,\n status TEXT DEFAULT 'todo',\n priority TEXT DEFAULT 'medium',\n workspace TEXT DEFAULT 'marketing',\n assignee TEXT,\n due_date TEXT,\n objective_id INTEGER REFERENCES objectives(id) ON DELETE SET NULL,\n key_result_id INTEGER REFERENCES key_results(id) ON DELETE SET NULL,\n experiment_id INTEGER REFERENCES experiments(id) ON DELETE SET NULL,\n ice_score REAL,\n impact REAL,\n confidence REAL,\n ease REAL,\n tags TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n completed_at TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status, due_date)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_tasks_links ON tasks(experiment_id, key_result_id, objective_id)`);\n\n // OKR→Campaign→Task link: a task can belong to a campaign (the higher-level container).\n // Completing the task rolls progress up through the campaign to its objective. PRAGMA-guarded\n // ALTER so existing tasks tables gain the column without failing on re-run.\n try {\n const tc = await sqlite.execute(\"PRAGMA table_info(tasks)\");\n const tHave = new Set((tc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!tHave.has(\"campaign_id\")) await sqlite.execute(\"ALTER TABLE tasks ADD COLUMN campaign_id TEXT\");\n } catch { /* non-critical: tasks without a campaign link still work */ }\n\n // ─── INTELLIGENCE LAYER EXTENSIONS (I1, I4): Signals + Digests ──────────────\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS intent_signals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n lead_email TEXT NOT NULL,\n lead_name TEXT,\n company TEXT,\n signal_type TEXT NOT NULL,\n signal_source TEXT NOT NULL,\n signal_strength INTEGER DEFAULT 1,\n raw_data TEXT,\n detected_at TEXT DEFAULT (datetime('now')),\n actioned INTEGER DEFAULT 0,\n actioned_at TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_signals_email ON intent_signals(lead_email, detected_at DESC)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_signals_actioned ON intent_signals(actioned, detected_at DESC)`);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS growth_digests (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n week_of TEXT NOT NULL,\n payload TEXT NOT NULL,\n nsm_value_at_generation REAL,\n generated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_digest_week ON growth_digests(week_of DESC)`);\n\n // ─── UNIFIED CALENDAR (CAL1): standalone custom calendar entries ────────────\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS calendar_entries (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n description TEXT,\n event_date TEXT NOT NULL,\n event_time TEXT,\n end_date TEXT,\n end_time TEXT,\n event_type TEXT DEFAULT 'custom',\n workspace TEXT DEFAULT 'marketing',\n color TEXT DEFAULT 'blue',\n all_day INTEGER DEFAULT 0,\n recurrence TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_calendar_date ON calendar_entries(event_date)`);\n\n // Knowledge files — growth playbooks/frameworks/formulas injected into AI features (see api/knowledge.ts).\n // This table was missing from initDB, so the knowledge UI + /api/knowledge endpoints failed (\"no such table\").\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS knowledge_files (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n kind TEXT DEFAULT 'playbook',\n content TEXT NOT NULL,\n summary TEXT,\n targets TEXT DEFAULT '[]',\n source TEXT DEFAULT 'user',\n tokens_estimate INTEGER DEFAULT 0,\n enabled INTEGER DEFAULT 1,\n uploaded_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_knowledge_enabled ON knowledge_files(enabled, uploaded_at DESC)`);\n\n // Action queue — human-in-the-loop execution. The AI/agents PREPARE external actions\n // (send email, publish post, post to LinkedIn, create calendar event) here; nothing is\n // sent until a human approves, at which point the integration call runs and the result\n // is recorded. status: prepared → approved → executing → done | failed | rejected.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS action_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n source_type TEXT DEFAULT 'chat',\n source_id TEXT,\n integration TEXT NOT NULL,\n endpoint TEXT NOT NULL,\n payload TEXT NOT NULL,\n preview TEXT,\n title TEXT,\n workspace TEXT DEFAULT 'marketing',\n status TEXT DEFAULT 'prepared',\n result TEXT,\n task_id TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n approved_at TEXT,\n executed_at TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_action_queue_status ON action_queue(status, created_at DESC)`);\n\n // CRM: sales pipeline deals. Hybrid model — rows are auto-seeded from qualified leads\n // (getLeadScores) via POST /api/deals/sync AND can be created/edited/dragged by the user.\n // stage ∈ lead | qualified | proposal | negotiation | won | lost. lead_email links a deal back\n // to its source lead so the detail view can show that contact's intent_signals as activity.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS deals (\n id TEXT PRIMARY KEY,\n title TEXT,\n company TEXT,\n contact_name TEXT,\n contact_email TEXT,\n stage TEXT NOT NULL DEFAULT 'lead',\n amount REAL DEFAULT 0,\n currency TEXT DEFAULT 'USD',\n probability INTEGER DEFAULT 0,\n owner TEXT,\n close_date TEXT,\n source TEXT DEFAULT 'manual',\n lead_email TEXT,\n notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n last_activity_at TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deals_stage ON deals(stage, updated_at DESC)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deals_lead ON deals(lead_email)`);\n\n // ─── RELATIONAL CRM FOUNDATION (WAVE 1): Accounts + Contacts ────────────────\n // First-class company (accounts) and person (contacts) records. Deals link to them via\n // account_id + primary_contact_id, plus a many-to-many deal_contacts join (role per contact).\n // Backfilled NON-DESTRUCTIVELY from the legacy deals.company/contact_name/contact_email text\n // columns by the mig_crm_relational_v1 migration below. All tenant-scoped (tenant_id on every\n // row; every query filters/sets it). The legacy deal text columns are KEPT for back-compat.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS accounts (\n id TEXT PRIMARY KEY,\n name TEXT,\n domain TEXT,\n industry TEXT,\n size TEXT,\n website TEXT,\n owner TEXT,\n tags TEXT DEFAULT '[]',\n custom_fields TEXT DEFAULT '{}',\n notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_accounts_name ON accounts(tenant_id, name)`);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS contacts (\n id TEXT PRIMARY KEY,\n account_id TEXT,\n first_name TEXT,\n last_name TEXT,\n email TEXT,\n phone TEXT,\n title TEXT,\n owner TEXT,\n tags TEXT DEFAULT '[]',\n custom_fields TEXT DEFAULT '{}',\n notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_contacts_email ON contacts(tenant_id, email)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_contacts_account ON contacts(tenant_id, account_id)`);\n\n // Many-to-many: a deal can involve several contacts, each with a buying-committee role\n // (decision_maker | champion | influencer | user | contact; the migration uses \"primary\"\n // for the deal's primary_contact_id). Composite PK prevents duplicate links.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS deal_contacts (\n deal_id TEXT NOT NULL,\n contact_id TEXT NOT NULL,\n role TEXT DEFAULT 'contact',\n tenant_id TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n PRIMARY KEY (deal_id, contact_id)\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deal_contacts_contact ON deal_contacts(tenant_id, contact_id)`);\n\n // deals gains account_id + primary_contact_id (guarded ALTER, re-run safe). The legacy\n // company/contact_name/contact_email columns are intentionally KEPT for back-compat.\n try {\n const dc = await sqlite.execute(\"PRAGMA table_info(deals)\");\n const dHave = new Set((dc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!dHave.has(\"account_id\")) await sqlite.execute(\"ALTER TABLE deals ADD COLUMN account_id TEXT\");\n if (!dHave.has(\"primary_contact_id\")) await sqlite.execute(\"ALTER TABLE deals ADD COLUMN primary_contact_id TEXT\");\n } catch { /* non-critical: relational links added next warm start */ }\n\n // ─── ENGAGEMENT + PIPELINE DEPTH (WAVE 2): Activities + Line Items + Stages ──\n // Unified activity timeline (logged calls/meetings/notes/emails/tasks) attachable to a\n // contact, account, and/or deal. The getTimeline() feed MERGES these rows with intent_signals\n // (by contact email) and linked tasks. All tenant-scoped (tenant_id on every row).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS activities (\n id TEXT PRIMARY KEY,\n type TEXT,\n subject TEXT,\n body TEXT,\n contact_id TEXT,\n account_id TEXT,\n deal_id TEXT,\n owner TEXT,\n due_date TEXT,\n completed INTEGER DEFAULT 0,\n occurred_at TEXT,\n created_at TEXT,\n updated_at TEXT,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_activities_deal ON activities(tenant_id, deal_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_activities_contact ON activities(tenant_id, contact_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_activities_account ON activities(tenant_id, account_id)`);\n\n // Deal LINE ITEMS — products/services on a deal. The deal amount rolls up as SUM(amount) when\n // line items exist (else the manual deals.amount is kept). amount is persisted = quantity * unit_price.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS deal_products (\n id TEXT PRIMARY KEY,\n deal_id TEXT,\n name TEXT,\n quantity REAL DEFAULT 1,\n unit_price REAL DEFAULT 0,\n amount REAL DEFAULT 0,\n tenant_id TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deal_products_deal ON deal_products(tenant_id, deal_id)`);\n\n // Configurable PIPELINE STAGES (label + win-probability per stage). Seeded once below with the\n // 6 existing stages so deal stage probabilities/labels become editable per tenant.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS pipeline_stages (\n id TEXT PRIMARY KEY,\n stage_key TEXT,\n label TEXT,\n probability INTEGER,\n sort_order INTEGER,\n is_won INTEGER DEFAULT 0,\n is_lost INTEGER DEFAULT 0,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_pipeline_stages_tenant ON pipeline_stages(tenant_id, sort_order)`);\n\n // deals gains next_step + win/loss REASONS + recurring/MRR (guarded ALTER, re-run safe).\n try {\n const d2 = await sqlite.execute(\"PRAGMA table_info(deals)\");\n const d2Have = new Set((d2.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n for (const [col, def] of [\n [\"next_step\", \"TEXT\"], [\"win_reason\", \"TEXT\"], [\"lost_reason\", \"TEXT\"],\n [\"recurring_type\", \"TEXT\"], [\"mrr\", \"REAL DEFAULT 0\"],\n ] as Array<[string, string]>) {\n if (!d2Have.has(col)) await sqlite.execute(`ALTER TABLE deals ADD COLUMN ${col} ${def}`);\n }\n } catch { /* non-critical: deal next-step/reasons/MRR added next warm start */ }\n\n // tasks gains CRM links (deal_id / contact_id / account_id) so an existing Task can be a CRM\n // follow-up attached to a deal/contact/account — preserves ALL current task behavior.\n try {\n const t2 = await sqlite.execute(\"PRAGMA table_info(tasks)\");\n const t2Have = new Set((t2.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n for (const col of [\"deal_id\", \"contact_id\", \"account_id\"]) {\n if (!t2Have.has(col)) await sqlite.execute(`ALTER TABLE tasks ADD COLUMN ${col} TEXT`);\n }\n } catch { /* non-critical: CRM task links added next warm start */ }\n\n // ONE-TIME seed of the 6 default pipeline stages, gated by app_config \"mig_pipeline_stages_v1\".\n // Seeds for every tenant that already has pipeline_stages-eligible data (any present tenant_id\n // across tenants) OR at least the default tenant. Idempotent: INSERT OR IGNORE on a deterministic\n // id (tenant + stage_key) + an existence check, so a re-run never duplicates rows.\n try {\n const flag = await sqlite.execute(\"SELECT value FROM app_config WHERE key = 'mig_pipeline_stages_v1'\");\n if (flag.rows.length === 0) {\n const STAGE_SEEDS: Array<[string, string, number, number, number, number]> = [\n // stage_key, label, probability, sort_order, is_won, is_lost\n [\"lead\", \"Lead\", 10, 0, 0, 0],\n [\"qualified\", \"Qualified\", 30, 1, 0, 0],\n [\"proposal\", \"Proposal\", 50, 2, 0, 0],\n [\"negotiation\", \"Negotiation\", 70, 3, 0, 0],\n [\"won\", \"Won\", 100, 4, 1, 0],\n [\"lost\", \"Lost\", 0, 5, 0, 1],\n ];\n // Collect the set of tenants to seed: every distinct tenant on the tenants table, always\n // including t_default. Falls back to just t_default if the tenants table is empty/missing.\n const tenantIds = new Set([\"t_default\"]);\n try {\n const tns = await sqlite.execute(\"SELECT id FROM tenants\");\n for (const r of (tns.rows || [])) {\n const tid = String(Array.isArray(r) ? r[0] : (r as any).id ?? \"\").trim();\n if (tid) tenantIds.add(tid);\n }\n } catch { /* tenants table may not exist on a very fresh DB — default tenant still seeded */ }\n for (const tid of tenantIds) {\n for (const [key, label, prob, sort, isWon, isLost] of STAGE_SEEDS) {\n await sqlite.execute(\n `INSERT OR IGNORE INTO pipeline_stages (id, stage_key, label, probability, sort_order, is_won, is_lost, tenant_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n [\"ps_\" + tid + \"_\" + key, key, label, prob, sort, isWon, isLost, tid]\n );\n }\n }\n await sqlite.execute(\n \"INSERT OR REPLACE INTO app_config (key, value, tenant_id, updated_at) VALUES ('mig_pipeline_stages_v1', 'done', 't_default', datetime('now'))\"\n );\n }\n } catch { /* non-critical: stage seed retried next warm start (flag only set on success) */ }\n\n // ─── SALES ANALYTICS + LEAD OPS + PRODUCTIVITY (WAVE 3) ─────────────────────\n // Eight new tenant-scoped tables overlaid on the existing deals/contacts/intent_signals/users\n // foundation. All carry tenant_id on every row (every query filters/sets it) and are also added\n // to TENANT_SCOPED_TABLES below so the mig_tenant_v1 backfill covers them on legacy DBs.\n\n // A) SALES ANALYTICS ────────────────────────────────────────────────────────\n // deal_stage_history: one row per deal stage change (deals.ts logs it). Powers stage-conversion,\n // deal-velocity (time in stage), and the funnel/leaderboard analytics.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS deal_stage_history (\n id TEXT PRIMARY KEY,\n deal_id TEXT,\n from_stage TEXT,\n to_stage TEXT,\n owner TEXT,\n changed_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deal_stage_history_deal ON deal_stage_history(tenant_id, deal_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_deal_stage_history_to ON deal_stage_history(tenant_id, to_stage)`);\n\n // sales_quotas: per-owner revenue target for a period. period_type ∈ month|quarter|year; period is\n // the label (e.g. 2026-Q2 or 2026-06). Powers quota-attainment (won vs target).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sales_quotas (\n id TEXT PRIMARY KEY,\n owner TEXT,\n period TEXT,\n period_type TEXT,\n target_amount REAL DEFAULT 0,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_sales_quotas_owner ON sales_quotas(tenant_id, owner, period)`);\n\n // pipeline_snapshots: one row PER STAGE per snapshot_date (point-in-time pipeline state). Powers\n // pipeline trend over time. weighted_amount = total_amount × stage probability at capture time.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS pipeline_snapshots (\n id TEXT PRIMARY KEY,\n snapshot_date TEXT,\n stage TEXT,\n deal_count INTEGER DEFAULT 0,\n total_amount REAL DEFAULT 0,\n weighted_amount REAL DEFAULT 0,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_pipeline_snapshots_date ON pipeline_snapshots(tenant_id, snapshot_date)`);\n\n // B) LEAD OPS ─────────────────────────────────────────────────────────────────\n // lead_status: grade/owner/SLA overlay keyed by lead_email (one row per lead per tenant). grade ∈\n // A|B|C|D; status ∈ new|working|qualified|disqualified. sla_due_at = first-response deadline,\n // first_response_at = when the SLA clock was stopped. Indexed (tenant_id, lead_email) for upsert.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS lead_status (\n id TEXT PRIMARY KEY,\n lead_email TEXT,\n grade TEXT,\n owner TEXT,\n status TEXT DEFAULT 'new',\n first_response_at TEXT,\n sla_due_at TEXT,\n assigned_at TEXT,\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n // UNIQUE so the one-row-per-(tenant,lead) overlay can't be duplicated by a concurrent grade/assign race.\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_lead_status_email ON lead_status(tenant_id, lead_email)`);\n\n // C) PRODUCTIVITY ─────────────────────────────────────────────────────────────\n // email_templates: reusable subject/body with {{merge_field}} placeholders; rendered then handed\n // to the existing Gmail/Outlook draft path.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS email_templates (\n id TEXT PRIMARY KEY,\n name TEXT,\n subject TEXT,\n body TEXT,\n category TEXT,\n owner TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_email_templates_tenant ON email_templates(tenant_id, category)`);\n\n // sequences: a named multi-step cadence (active=1 by default).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sequences (\n id TEXT PRIMARY KEY,\n name TEXT,\n description TEXT,\n active INTEGER DEFAULT 1,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_sequences_tenant ON sequences(tenant_id, active)`);\n\n // sequence_steps: ordered steps of a sequence. channel ∈ email|task|call. delay_days = wait after\n // the prior step. template_id optionally references an email_templates row; else inline subject/body.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sequence_steps (\n id TEXT PRIMARY KEY,\n sequence_id TEXT,\n step_order INTEGER DEFAULT 0,\n channel TEXT DEFAULT 'email',\n delay_days INTEGER DEFAULT 0,\n template_id TEXT,\n subject TEXT,\n body TEXT,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_sequence_steps_seq ON sequence_steps(tenant_id, sequence_id, step_order)`);\n\n // sequence_enrollments: a contact (and optionally deal) enrolled in a sequence. current_step is the\n // 0-based pointer; status ∈ active|paused|completed; next_action_at drives the cadence runner.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sequence_enrollments (\n id TEXT PRIMARY KEY,\n sequence_id TEXT,\n contact_id TEXT,\n deal_id TEXT,\n current_step INTEGER DEFAULT 0,\n status TEXT DEFAULT 'active',\n enrolled_at TEXT DEFAULT (datetime('now')),\n next_action_at TEXT,\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_seq_enroll_seq ON sequence_enrollments(tenant_id, sequence_id, status)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_seq_enroll_contact ON sequence_enrollments(tenant_id, contact_id)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_seq_enroll_next ON sequence_enrollments(tenant_id, next_action_at)`);\n\n // ─── MARKETING WORKSPACE (WAVE 1) ─────────────────────────────────────────\n // Persona/ICP/segment library for the Marketing Audiences view. kind ∈ icp|persona|segment;\n // attributes is a JSON blob; source ∈ enrichment|manual (importPersonasFromEnrichment writes\n // 'enrichment' rows non-destructively). All tenant-scoped (tenant_id on every row).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS marketing_personas (\n id TEXT PRIMARY KEY,\n name TEXT,\n kind TEXT,\n description TEXT,\n attributes TEXT,\n source TEXT DEFAULT 'manual',\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_marketing_personas_kind ON marketing_personas(tenant_id, kind)`);\n\n // utm_links: saved campaign-tagged URLs for the UTM builder. full_url is the composed\n // base_url + utm params. All tenant-scoped (tenant_id on every row).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS utm_links (\n id TEXT PRIMARY KEY,\n name TEXT,\n base_url TEXT,\n utm_source TEXT,\n utm_medium TEXT,\n utm_campaign TEXT,\n utm_term TEXT,\n utm_content TEXT,\n full_url TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_utm_links_tenant ON utm_links(tenant_id)`);\n\n // brand_kit: one row per tenant (upsert) — voice/tone/values/dos/donts/boilerplate plus a JSON\n // palette and logo_url for the Brand Kit editor. tenant_id on every row.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS brand_kit (\n id TEXT PRIMARY KEY,\n voice TEXT,\n tone TEXT,\n brand_values TEXT,\n dos TEXT,\n donts TEXT,\n boilerplate TEXT,\n palette TEXT,\n logo_url TEXT,\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_brand_kit_tenant ON brand_kit(tenant_id)`);\n\n // ─── MARKETING CAPTURE + AUDIENCES (WAVE 2) ─────────────────────────────────\n // Six new tenant-scoped tables giving Marketing a place to CONVERT traffic (forms +\n // landing pages) and people to TARGET (segments + lists). All carry tenant_id on every\n // row (every query filters/sets it) EXCEPT the two PUBLIC read paths, which resolve the\n // owning tenant explicitly by id/slug. Added to TENANT_SCOPED_TABLES below so the\n // mig_tenant_v1 backfill covers them on legacy DBs. NEVER name a column with a SQL\n // reserved word (e.g. values/order/group) — a prior bug came from exactly that.\n\n // marketing_forms: a lead-capture form definition. fields is JSON [{name,label,type,required}].\n // asset_url = gated lead-magnet download; redirect_url = post-submit redirect. submit_count is\n // bumped on each public submission (by the form-owning tenant).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS marketing_forms (\n id TEXT PRIMARY KEY,\n name TEXT,\n fields TEXT,\n success_message TEXT,\n asset_url TEXT,\n redirect_url TEXT,\n submit_count INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_marketing_forms_tenant ON marketing_forms(tenant_id)`);\n\n // form_submissions: one row per public submit. data is JSON of the raw posted fields.\n // tenant_id is the OWNING tenant of form_id (resolved by id at submit time — never the\n // anonymous caller's session). Indexed (tenant_id, form_id) for the submissions table.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS form_submissions (\n id TEXT PRIMARY KEY,\n form_id TEXT,\n data TEXT,\n lead_email TEXT,\n lead_name TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_form_submissions_form ON form_submissions(tenant_id, form_id)`);\n\n // landing_pages: a public landing page. slug is GLOBALLY unique (used for the public\n // /api/marketing/p/:slug render across tenants). blocks is JSON [{type,...}]. form_id\n // optionally embeds a marketing_forms form. published=1 gates the public render; view_count\n // is bumped on each public view (by the page-owning tenant).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS landing_pages (\n id TEXT PRIMARY KEY,\n slug TEXT,\n title TEXT,\n subtitle TEXT,\n blocks TEXT,\n form_id TEXT,\n theme TEXT,\n published INTEGER DEFAULT 0,\n view_count INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_landing_pages_tenant ON landing_pages(tenant_id)`);\n // slug is GLOBALLY unique (public render resolves a page by slug across all tenants).\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_landing_pages_slug ON landing_pages(slug)`);\n\n // segments: a saved audience definition. kind ∈ dynamic|static. rules is JSON\n // [{field,op,value}] evaluated over contacts + lead_status + intent_signals within the tenant.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS segments (\n id TEXT PRIMARY KEY,\n name TEXT,\n description TEXT,\n kind TEXT,\n rules TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_segments_tenant ON segments(tenant_id)`);\n\n // marketing_lists: a named contact list. kind ∈ static|dynamic. For dynamic lists, segment_id\n // references the segment whose rules materialize the membership.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS marketing_lists (\n id TEXT PRIMARY KEY,\n name TEXT,\n kind TEXT,\n segment_id TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_marketing_lists_tenant ON marketing_lists(tenant_id)`);\n\n // list_members: membership join (a contact in a list). lead_email is the stable key when a\n // contact_id is unavailable. Indexed (tenant_id, list_id) for the members view.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS list_members (\n id TEXT PRIMARY KEY,\n list_id TEXT,\n contact_id TEXT,\n lead_email TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_list_members_list ON list_members(tenant_id, list_id)`);\n\n // ─── CONTENT + CAMPAIGN PRODUCTION ENGINE (WAVE 3) ──────────────────────────\n // Four new tenant-scoped tables powering the editorial calendar, SEO briefs, asset\n // library, and campaign budgeting/performance. All carry tenant_id on every row (every\n // query filters/sets it) and are added to TENANT_SCOPED_TABLES below so the mig_tenant_v1\n // backfill covers them on legacy DBs. NEVER name a column with a SQL reserved word.\n\n // content_items: a piece of marketing content moving through the pipeline. type ∈\n // blog|social|video|email|landing|ad; status ∈ idea|brief|draft|review|scheduled|published.\n // campaign_id links to campaigns; brief_id links to content_briefs; asset_ids is JSON of\n // marketing_assets ids. scheduled_at drives the editorial calendar; body holds the draft.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS content_items (\n id TEXT PRIMARY KEY,\n title TEXT,\n type TEXT,\n status TEXT DEFAULT 'idea',\n channel TEXT,\n campaign_id TEXT,\n brief_id TEXT,\n body TEXT,\n asset_ids TEXT DEFAULT '[]',\n owner TEXT,\n scheduled_at TEXT,\n published_at TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_content_items_status ON content_items(tenant_id, status)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_content_items_scheduled ON content_items(tenant_id, scheduled_at)`);\n\n // content_briefs: an SEO brief backing a content_item. outline/competitors/internal_links are\n // JSON or free text; word_count_target is the writer's target. content_id links back to the item.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS content_briefs (\n id TEXT PRIMARY KEY,\n content_id TEXT,\n target_keyword TEXT,\n search_intent TEXT,\n outline TEXT,\n competitors TEXT,\n internal_links TEXT,\n word_count_target INTEGER,\n notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_content_briefs_tenant ON content_briefs(tenant_id)`);\n\n // marketing_assets: the media/asset registry. asset_type ∈ image|video|doc|pdf|other;\n // source ∈ upload|wordpress|drive|link; tags is JSON or CSV; bytes is the file size.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS marketing_assets (\n id TEXT PRIMARY KEY,\n name TEXT,\n url TEXT,\n asset_type TEXT,\n tags TEXT,\n source TEXT DEFAULT 'upload',\n bytes INTEGER,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_marketing_assets_tenant ON marketing_assets(tenant_id)`);\n\n // campaign_budgets: planned vs actual spend per channel per period for a campaign. period is a\n // label (e.g. 2026-Q2 or 2026-06). actual_amount accrues as spend is recorded; powers pacing.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS campaign_budgets (\n id TEXT PRIMARY KEY,\n campaign_id TEXT,\n channel TEXT,\n period TEXT,\n planned_amount REAL DEFAULT 0,\n actual_amount REAL DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_campaign_budgets_campaign ON campaign_budgets(tenant_id, campaign_id)`);\n\n // ─── ACQUISITION CHANNELS + AUTOMATION DEPTH (WAVE 4) ───────────────────────\n // Six new tenant-scoped tables: paid media (ad_campaigns), triggered automation\n // (journeys + journey_runs), account-based marketing (abm_targets), email broadcasts\n // (broadcasts), and partner/referral channels (partners). All carry tenant_id on every\n // row (every query filters/sets it) and are added to TENANT_SCOPED_TABLES below so the\n // mig_tenant_v1 backfill covers them on legacy DBs. NEVER name a column with a SQL\n // reserved word — all column names here are non-reserved (e.g. no values/order/group).\n\n // ad_campaigns: paid-media spend rows. platform ∈ google_ads|meta|linkedin|other. external_id is\n // the platform's own campaign id; campaign_id links to an internal campaigns row. period is a label\n // (e.g. 2026-Q2 or 2026-06). Real data only — manual entry or (future) connected creds. Indexed\n // (tenant_id, platform) for the per-platform table.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ad_campaigns (\n id TEXT PRIMARY KEY,\n platform TEXT,\n external_id TEXT,\n name TEXT,\n status TEXT,\n spend REAL DEFAULT 0,\n impressions INTEGER DEFAULT 0,\n clicks INTEGER DEFAULT 0,\n conversions INTEGER DEFAULT 0,\n campaign_id TEXT,\n period TEXT,\n synced_at TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_ad_campaigns_platform ON ad_campaigns(tenant_id, platform)`);\n\n // journeys: triggered-automation rules. trigger_type ∈ form_submit|intent_signal|deal_stage|\n // list_added|manual; trigger_config is JSON matched against the runtime ctx. action_type ∈\n // enroll_sequence|add_to_list|create_task|notify|grade_lead; action_config is JSON for the action.\n // active=1 gates execution; run_count bumps on each match. Indexed (tenant_id, trigger_type, active)\n // for the runtime lookup in runJourneyTriggers.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS journeys (\n id TEXT PRIMARY KEY,\n name TEXT,\n description TEXT,\n trigger_type TEXT,\n trigger_config TEXT,\n action_type TEXT,\n action_config TEXT,\n active INTEGER DEFAULT 1,\n run_count INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_journeys_trigger ON journeys(tenant_id, trigger_type, active)`);\n\n // journey_runs: execution log. One row per journey evaluation. trigger_type mirrors the journey's;\n // entity_ref is the triggering entity (e.g. lead_email or deal_id). status ∈ matched|acted|skipped|\n // error; detail holds a short outcome message. Indexed (tenant_id, journey_id) for the run log.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS journey_runs (\n id TEXT PRIMARY KEY,\n journey_id TEXT,\n trigger_type TEXT,\n entity_ref TEXT,\n status TEXT,\n detail TEXT,\n ran_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_journey_runs_journey ON journey_runs(tenant_id, journey_id)`);\n\n // abm_targets: account-based marketing target accounts. account_id links to a CRM accounts row.\n // tier ∈ 1|2|3 (stored as text); engagement_score computed from real signals/activities/deals.\n // status ∈ target|engaged|opportunity|won|dropped. Indexed (tenant_id, account_id) for upsert/board.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS abm_targets (\n id TEXT PRIMARY KEY,\n account_id TEXT,\n tier TEXT,\n engagement_score REAL DEFAULT 0,\n status TEXT DEFAULT 'target',\n owner TEXT,\n notes TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_abm_targets_account ON abm_targets(tenant_id, account_id)`);\n\n // broadcasts: one-off/scheduled email sends. audience_type ∈ list|segment|all_contacts; audience_id\n // references the chosen list/segment (NULL for all_contacts). channel ∈ gmail|outlook. status ∈\n // draft|scheduled|sending|sent. sent_count accrues as the send resolves. Indexed (tenant_id, status).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS broadcasts (\n id TEXT PRIMARY KEY,\n name TEXT,\n subject TEXT,\n body TEXT,\n audience_type TEXT,\n audience_id TEXT,\n channel TEXT,\n status TEXT DEFAULT 'draft',\n scheduled_at TEXT,\n sent_count INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_broadcasts_status ON broadcasts(tenant_id, status)`);\n\n // partners: referral/affiliate/reseller/agency channel partners. type ∈ referral|affiliate|reseller|\n // agency. referral_code is the code carried on a referred deal/contact source. status ∈ active|paused.\n // deals_referred + revenue accrue from referral attribution. Indexed (tenant_id).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS partners (\n id TEXT PRIMARY KEY,\n name TEXT,\n type TEXT,\n contact_email TEXT,\n referral_code TEXT,\n status TEXT DEFAULT 'active',\n deals_referred INTEGER DEFAULT 0,\n revenue REAL DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_partners_tenant ON partners(tenant_id)`);\n\n // ── Wave 5: analytics / optimization / market-intel layer ──\n // competitors — tracked rival domains. metrics is a JSON snapshot (domain_rating/backlinks/\n // ref_domains/organic_keywords) refreshed from the Ahrefs integration. tracked_keywords is a\n // JSON array. Tenant-scoped, indexed (tenant_id).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS competitors (\n id TEXT PRIMARY KEY,\n name TEXT,\n domain TEXT,\n notes TEXT,\n tracked_keywords TEXT,\n metrics TEXT,\n last_checked TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_competitors_tenant ON competitors(tenant_id)`);\n\n // cro_tests — conversion-rate-optimization tests linking an experiment + a landing_page.\n // status ∈ draft|running|complete. winner names the winning arm once resolved. Results read\n // from the linked experiment (stat-significance reused from api/experiments.ts). Indexed\n // (tenant_id, status).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS cro_tests (\n id TEXT PRIMARY KEY,\n name TEXT,\n hypothesis TEXT,\n experiment_id INTEGER,\n landing_page_id TEXT,\n status TEXT DEFAULT 'draft',\n winner TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_cro_tests_tenant ON cro_tests(tenant_id, status)`);\n\n // market_digests — caches the AI market-intel digest. summary is the synthesized text; signals\n // is a JSON list of the real sources used (ProductHunt/YouTube/intent_signals/competitor metrics).\n // Indexed (tenant_id).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS market_digests (\n id TEXT PRIMARY KEY,\n period TEXT,\n summary TEXT,\n signals TEXT,\n generated_at TEXT DEFAULT (datetime('now')),\n tenant_id TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_market_digests_tenant ON market_digests(tenant_id)`);\n\n // I3: agents.role column for Listener/Topic/Creator/Analyst/General roles (ALTER guarded)\n try {\n const ac = await sqlite.execute(\"PRAGMA table_info(agents)\");\n const aHave = new Set((ac.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!aHave.has(\"role\")) await sqlite.execute(\"ALTER TABLE agents ADD COLUMN role TEXT DEFAULT 'general'\");\n } catch { /* non-critical */ }\n\n // Part 15.3: persistent business memory (evolving learned facts). Additive on v551.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS memory (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n type TEXT DEFAULT 'fact',\n content TEXT NOT NULL,\n source TEXT DEFAULT 'manual',\n confidence REAL DEFAULT 0.7,\n pinned INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // Part 1: skills (marketing playbooks) STATE table — enabled/pinned + custom skills.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS skills (\n name TEXT PRIMARY KEY,\n enabled INTEGER DEFAULT 1,\n pinned INTEGER DEFAULT 0,\n source TEXT DEFAULT 'builtin',\n category TEXT,\n description TEXT,\n body TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // Part 3 fix 7: experiment significance + sample_size (PRAGMA-guarded ALTER).\n try {\n const ec = await sqlite.execute(\"PRAGMA table_info(experiments)\");\n const eHave = new Set((ec.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!eHave.has(\"sample_size\")) await sqlite.execute(\"ALTER TABLE experiments ADD COLUMN sample_size INTEGER\");\n if (!eHave.has(\"significance\")) await sqlite.execute(\"ALTER TABLE experiments ADD COLUMN significance REAL\");\n } catch { /* non-critical */ }\n\n // Part 14.2: agent_runs.trace JSON column (structured TraceStep[]).\n try {\n const rc = await sqlite.execute(\"PRAGMA table_info(agent_runs)\");\n const rHave = new Set((rc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!rHave.has(\"trace\")) await sqlite.execute(\"ALTER TABLE agent_runs ADD COLUMN trace TEXT\");\n } catch { /* non-critical */ }\n\n // Multi-agent CAMPAIGNS — the higher-level container the user wants: a campaign has many\n // inputs + MANY member agents that cooperate. A campaign RUN is the Director orchestrating\n // its member agents (sequential handoff or parallel) and synthesizing a final output.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS campaigns (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n workspace TEXT NOT NULL DEFAULT 'marketing',\n description TEXT,\n goal TEXT,\n channel TEXT,\n audience TEXT,\n mode TEXT DEFAULT 'sequential',\n status TEXT DEFAULT 'active',\n objective_id INTEGER,\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now')),\n created_by TEXT DEFAULT 'user'\n )\n `);\n // Ordered membership: which agents are in the campaign + their pipeline order + role.\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS campaign_agents (\n campaign_id TEXT NOT NULL,\n agent_id TEXT NOT NULL,\n sequence INTEGER DEFAULT 0,\n role TEXT,\n PRIMARY KEY (campaign_id, agent_id)\n )\n `);\n // One coordinated pipeline execution (the Director run).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS campaign_runs (\n id TEXT PRIMARY KEY,\n campaign_id TEXT NOT NULL,\n status TEXT NOT NULL DEFAULT 'running',\n input TEXT,\n final_output TEXT,\n trace TEXT,\n started_at TEXT DEFAULT (datetime('now')),\n finished_at TEXT\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_campaign_runs ON campaign_runs(campaign_id, started_at DESC)`);\n // Campaign TRIGGERS + LOOP (run continuously, not just on/off). trigger_type: manual | interval\n // | schedule | event. trigger_config: JSON (e.g. {minutes:60} or {event:\"new_lead\"}). loop=1 ⇒\n // reschedule after each run. next_run_at drives the cron-based runner. (Guarded ALTER, re-run safe.)\n try {\n const cc = await sqlite.execute(\"PRAGMA table_info(campaigns)\");\n const cHave = new Set((cc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n for (const [col, def] of [[\"trigger_type\", \"TEXT DEFAULT 'manual'\"], [\"trigger_config\", \"TEXT\"], [\"next_run_at\", \"TEXT\"], [\"last_run_at\", \"TEXT\"], [\"loop\", \"INTEGER DEFAULT 0\"]] as Array<[string, string]>) {\n if (!cHave.has(col)) await sqlite.execute(`ALTER TABLE campaigns ADD COLUMN ${col} ${def}`);\n }\n } catch { /* non-critical */ }\n // agent_runs gains campaign context: which campaign run + the handed-off context from prior agents.\n try {\n const arc = await sqlite.execute(\"PRAGMA table_info(agent_runs)\");\n const arHave = new Set((arc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!arHave.has(\"campaign_run_id\")) await sqlite.execute(\"ALTER TABLE agent_runs ADD COLUMN campaign_run_id TEXT\");\n if (!arHave.has(\"received_input\")) await sqlite.execute(\"ALTER TABLE agent_runs ADD COLUMN received_input TEXT\");\n // task_id links an agent_run back to the task it executed (POST /api/tasks/:id/run).\n if (!arHave.has(\"task_id\")) await sqlite.execute(\"ALTER TABLE agent_runs ADD COLUMN task_id TEXT\");\n } catch { /* non-critical */ }\n\n // ─── AUTH / MULTI-TENANCY FOUNDATION ───────────────────────────────────────\n // New auth tables. These have NO tenant_id (they ARE the tenant/identity layer).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS tenants (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n slug TEXT UNIQUE,\n plan TEXT DEFAULT 'trial',\n status TEXT DEFAULT 'active',\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n name TEXT,\n password_hash TEXT,\n avatar_url TEXT,\n created_at TEXT DEFAULT (datetime('now')),\n last_login_at TEXT\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS memberships (\n tenant_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n role TEXT DEFAULT 'owner',\n created_at TEXT DEFAULT (datetime('now')),\n PRIMARY KEY (tenant_id, user_id)\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n tenant_id TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n expires_at TEXT,\n user_agent TEXT,\n revoked INTEGER DEFAULT 0\n )\n `);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id)`);\n\n // Phase D: read-only impersonation (\"view as tenant\"). A platform admin toggles this flag on\n // THEIR OWN session row; resolveSessionToken then redirects currentTenantId() to this target\n // tenant for reads only (all writes blocked by the main.ts guard). NULL = not impersonating.\n // PRAGMA-guarded ALTER (idempotent, re-run safe — same pattern as the other ALTERs above).\n try {\n const sc = await sqlite.execute(\"PRAGMA table_info(sessions)\");\n const sHave = new Set((sc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!sHave.has(\"impersonate_tenant_id\")) await sqlite.execute(\"ALTER TABLE sessions ADD COLUMN impersonate_tenant_id TEXT\");\n } catch { /* non-critical: impersonation disabled until column exists; added next warm start */ }\n\n // ─── PLATFORM SUPERADMIN LAYER (above tenants) ─────────────────────────────\n // The single, audited exception to per-tenant isolation: a platform owner who can read\n // ACROSS all tenants. users gains is_platform_admin (the master flag) + status (active/…).\n // PRAGMA-guarded ALTERs (idempotent, re-run safe — same pattern as the other ALTERs above).\n try {\n const uc = await sqlite.execute(\"PRAGMA table_info(users)\");\n const uHave = new Set((uc.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (!uHave.has(\"is_platform_admin\")) await sqlite.execute(\"ALTER TABLE users ADD COLUMN is_platform_admin INTEGER DEFAULT 0\");\n if (!uHave.has(\"status\")) await sqlite.execute(\"ALTER TABLE users ADD COLUMN status TEXT DEFAULT 'active'\");\n } catch { /* non-critical: master flag set by migration below on next warm start */ }\n\n // platform_audit — append-only log of every master-only action (suspend/delete/impersonate in\n // LATER phases). Created now so the audit surface exists from the start. No tenant_id: it spans\n // all tenants by design (this is the cross-tenant exception).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS platform_audit (\n id TEXT PRIMARY KEY,\n actor_user_id TEXT,\n actor_email TEXT,\n action TEXT,\n target_type TEXT,\n target_id TEXT,\n detail TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // tenant_id column on EVERY existing business table. PRAGMA-guarded ALTER (idempotent, same\n // pattern used for other ALTERs above). Do NOT add to tenants/users/memberships/sessions.\n const TENANT_SCOPED_TABLES = [\n \"integrations\", \"llm_config\", \"agents\", \"conversations\", \"tasks\", \"tasks_legacy\",\n \"notes\", \"metric_baselines\", \"intelligence_cache\", \"app_config\", \"metric_history\",\n \"agent_budgets\", \"agent_runs\", \"customer_cohorts\", \"lead_state_changes\", \"utm_conversions\",\n \"north_star\", \"nsm_history\", \"objectives\", \"key_results\", \"experiments\", \"intent_signals\",\n \"growth_digests\", \"calendar_entries\", \"knowledge_files\", \"action_queue\", \"deals\", \"memory\",\n \"skills\", \"campaigns\", \"campaign_agents\", \"campaign_runs\",\n \"accounts\", \"contacts\", \"deal_contacts\",\n \"activities\", \"deal_products\", \"pipeline_stages\",\n \"deal_stage_history\", \"sales_quotas\", \"pipeline_snapshots\", \"lead_status\",\n \"email_templates\", \"sequences\", \"sequence_steps\", \"sequence_enrollments\",\n \"marketing_personas\", \"utm_links\", \"brand_kit\",\n \"marketing_forms\", \"form_submissions\", \"landing_pages\",\n \"segments\", \"marketing_lists\", \"list_members\",\n \"content_items\", \"content_briefs\", \"marketing_assets\", \"campaign_budgets\",\n \"ad_campaigns\", \"journeys\", \"journey_runs\", \"abm_targets\", \"broadcasts\", \"partners\",\n ];\n for (const tbl of TENANT_SCOPED_TABLES) {\n try {\n const cols = await sqlite.execute(`PRAGMA table_info(${tbl})`);\n const have = new Set((cols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n // Only ALTER if the table actually exists (PRAGMA returns 0 cols for missing tables) and lacks tenant_id.\n if (have.size > 0 && !have.has(\"tenant_id\")) {\n await sqlite.execute(`ALTER TABLE ${tbl} ADD COLUMN tenant_id TEXT`);\n }\n } catch { /* non-critical: table may not exist yet (e.g. tasks_legacy) */ }\n }\n\n // ONE-TIME backfill + seed, gated by app_config \"mig_tenant_v1\" so it runs once. Backfill\n // every business table's tenant_id to \"t_default\" and insert the default tenant row. Owner\n // user creation is left to api/auth.ts bootstrapOwner (no password seeded here).\n try {\n const flag = await sqlite.execute(\"SELECT value FROM app_config WHERE key = 'mig_tenant_v1'\");\n if (flag.rows.length === 0) {\n for (const tbl of TENANT_SCOPED_TABLES) {\n try {\n const cols = await sqlite.execute(`PRAGMA table_info(${tbl})`);\n const have = new Set((cols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n if (have.has(\"tenant_id\")) {\n await sqlite.execute(`UPDATE ${tbl} SET tenant_id = 't_default' WHERE tenant_id IS NULL`);\n }\n } catch { /* non-critical: skip missing tables */ }\n }\n await sqlite.execute(\n \"INSERT OR IGNORE INTO tenants (id, name, slug) VALUES ('t_default', 'Default Workspace', 'default')\"\n );\n // NOTE: app_config now has tenant_id; write the migration flag scoped to t_default so the\n // gate read above (no tenant filter) still finds it on subsequent boots.\n await sqlite.execute(\n \"INSERT OR REPLACE INTO app_config (key, value, tenant_id, updated_at) VALUES ('mig_tenant_v1', 'done', 't_default', datetime('now'))\"\n );\n }\n } catch { /* non-critical: migration retried next warm start */ }\n\n // ─── PLATFORM MASTER PROMOTION (mig_platform_admin_v1) ──────────────────────\n // ONE-TIME: promote the platform owner (PLATFORM_OWNER_EMAIL env, default the bootstrapped\n // master) to is_platform_admin=1. Gated by app_config \"mig_platform_admin_v1\" so it runs once.\n // api/auth.ts bootstrapOwner ALSO sets the flag at signup time; this covers the already-existing\n // master row. Idempotent: re-running the UPDATE is harmless even if the flag write ever fails.\n try {\n const flag = await sqlite.execute(\"SELECT value FROM app_config WHERE key = 'mig_platform_admin_v1'\");\n if (flag.rows.length === 0) {\n const masterEmail = (Deno.env.get(\"PLATFORM_OWNER_EMAIL\") || \"\").trim().toLowerCase();\n await sqlite.execute(\n \"UPDATE users SET is_platform_admin = 1 WHERE lower(email) = ?\",\n [masterEmail]\n );\n await sqlite.execute(\n \"INSERT OR REPLACE INTO app_config (key, value, tenant_id, updated_at) VALUES ('mig_platform_admin_v1', 'done', 't_default', datetime('now'))\"\n );\n }\n } catch { /* non-critical: promotion retried next warm start (flag only set on success) */ }\n\n // ─── INTEGRATIONS UNIQUENESS → PER-TENANT (mig_integrations_v2) ──────────────\n // The original integrations table has `name TEXT NOT NULL UNIQUE` (a GLOBAL unique\n // constraint). Multi-tenant needs each tenant to own its OWN 'google'/'outlook'/etc.\n // row, so uniqueness must be PER TENANT: UNIQUE(tenant_id, name). SQLite cannot ALTER a\n // UNIQUE constraint in place, so we do a ONE-TIME guarded table rebuild gated by an\n // app_config flag (\"mig_integrations_v2\"). Idempotent + safe on the live DB: we only\n // rebuild when the flag is absent AND the live table still carries the global UNIQUE(name)\n // index. By this point Stage 1's ALTER + backfill guarantee every existing integrations\n // row already has tenant_id='t_default', so the copy preserves correct ownership.\n try {\n const flag = await sqlite.execute(\"SELECT value FROM app_config WHERE key = 'mig_integrations_v2'\");\n if (flag.rows.length === 0) {\n // Confirm the table exists before rebuilding. A FRESH DB already gets the per-tenant\n // shape from the top-level CREATE (tenant_id present), so detect the OLD shape — the\n // global UNIQUE(name) index lacks the tenant_id column — and only rebuild then.\n const icols = await sqlite.execute(\"PRAGMA table_info(integrations)\");\n const iHave = new Set((icols.rows || []).map((r: any) => String(Array.isArray(r) ? r[1] : r.name)));\n let needsRebuild = false;\n if (iHave.size > 0) {\n // index_list → for each unique index, index_info tells us its columns. The legacy global\n // constraint indexes only (name); the new one indexes (tenant_id, name).\n try {\n const idxList = await sqlite.execute(\"PRAGMA index_list(integrations)\");\n for (const row of (idxList.rows || [])) {\n const idxName = String(Array.isArray(row) ? row[1] : row.name);\n const idxUnique = Number(Array.isArray(row) ? row[2] : row.unique);\n if (!idxUnique) continue;\n const info = await sqlite.execute(`PRAGMA index_info(${idxName})`);\n const idxCols = (info.rows || []).map((r: any) => String(Array.isArray(r) ? r[2] : r.name));\n // Old-shape: a unique index over exactly [name] with no tenant_id ⇒ rebuild required.\n if (idxCols.includes(\"name\") && !idxCols.includes(\"tenant_id\")) needsRebuild = true;\n }\n } catch { needsRebuild = true; /* if we can't introspect, rebuild to be safe */ }\n }\n if (needsRebuild) {\n // Build v2 with the SAME columns (now including tenant_id) but UNIQUE(tenant_id, name).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS integrations_v2 (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n api_key TEXT,\n api_secret TEXT,\n access_token TEXT,\n refresh_token TEXT,\n extra_config TEXT,\n connected_at TEXT,\n updated_at TEXT,\n tenant_id TEXT,\n UNIQUE(tenant_id, name)\n )\n `);\n // Copy every row (existing rows already carry tenant_id='t_default' from Stage 1).\n await sqlite.execute(`\n INSERT OR IGNORE INTO integrations_v2\n (id, name, api_key, api_secret, access_token, refresh_token, extra_config, connected_at, updated_at, tenant_id)\n SELECT id, name, api_key, api_secret, access_token, refresh_token, extra_config, connected_at, updated_at,\n COALESCE(tenant_id, 't_default')\n FROM integrations\n `);\n await sqlite.execute(\"DROP TABLE integrations\");\n await sqlite.execute(\"ALTER TABLE integrations_v2 RENAME TO integrations\");\n }\n await sqlite.execute(\n \"INSERT OR REPLACE INTO app_config (key, value, tenant_id, updated_at) VALUES ('mig_integrations_v2', 'done', 't_default', datetime('now'))\"\n );\n }\n } catch { /* non-critical: rebuild retried next warm start (flag only set on success) */ }\n\n // ─── RELATIONAL CRM BACKFILL (mig_crm_relational_v1) ────────────────────────\n // ONE-TIME, gated by app_config \"mig_crm_relational_v1\". For EVERY existing deal, derive the\n // relational records NON-DESTRUCTIVELY from its legacy text fields:\n // • upsert an account by (tenant_id, lower(company)) [skip if company empty]\n // • upsert a contact by (tenant_id, lower(contact_email)) [skip if email empty], name from\n // contact_name, linked to that account\n // • set deal.account_id + deal.primary_contact_id, and insert a deal_contacts(role='primary') row\n // Runs at boot under the default ctx, so it is a GLOBAL pass: it reads each deal's OWN tenant_id\n // and writes the new rows carrying THAT tenant_id (never the boot ctx's). Fully idempotent —\n // existence checks + INSERT OR IGNORE — and never deletes/edits existing deal data.\n try {\n const flag = await sqlite.execute(\"SELECT value FROM app_config WHERE key = 'mig_crm_relational_v1'\");\n if (flag.rows.length === 0) {\n // Pull every deal with its own tenant_id + legacy text fields. SELECT * keeps this robust\n // regardless of column order; we read fields by name from the row object.\n const dealsRes = await sqlite.execute(\n \"SELECT id, tenant_id, company, contact_name, contact_email FROM deals\"\n );\n const dealRows = (dealsRes.rows || []) as any[];\n for (const row of dealRows) {\n // libSQL returns array OR object rows depending on driver — read defensively by index/name.\n const dealId = String(Array.isArray(row) ? row[0] : row.id ?? \"\");\n const tenantId = String((Array.isArray(row) ? row[1] : row.tenant_id) ?? \"t_default\") || \"t_default\";\n const company = String((Array.isArray(row) ? row[2] : row.company) ?? \"\").trim();\n const contactName = String((Array.isArray(row) ? row[3] : row.contact_name) ?? \"\").trim();\n const contactEmail = String((Array.isArray(row) ? row[4] : row.contact_email) ?? \"\").trim();\n if (!dealId) continue;\n\n let accountId: string | null = null;\n let contactId: string | null = null;\n\n // ── ACCOUNT upsert by (tenant_id, lower(company)) ──\n if (company) {\n const existAcct = await sqlite.execute(\n \"SELECT id FROM accounts WHERE tenant_id = ? AND lower(name) = lower(?) LIMIT 1\",\n [tenantId, company]\n );\n if (existAcct.rows.length > 0) {\n const ar = existAcct.rows[0] as any;\n accountId = String(Array.isArray(ar) ? ar[0] : ar.id);\n } else {\n accountId = crypto.randomUUID();\n await sqlite.execute(\n `INSERT INTO accounts (id, name, tags, custom_fields, created_at, updated_at, tenant_id)\n VALUES (?, ?, '[]', '{}', datetime('now'), datetime('now'), ?)`,\n [accountId, company, tenantId]\n );\n }\n }\n\n // ── CONTACT upsert by (tenant_id, lower(contact_email)) ──\n if (contactEmail) {\n const existContact = await sqlite.execute(\n \"SELECT id, account_id FROM contacts WHERE tenant_id = ? AND lower(email) = lower(?) LIMIT 1\",\n [tenantId, contactEmail]\n );\n if (existContact.rows.length > 0) {\n const cr = existContact.rows[0] as any;\n contactId = String(Array.isArray(cr) ? cr[0] : cr.id);\n const existingAcctId = Array.isArray(cr) ? cr[1] : cr.account_id;\n // Backfill the contact's account link if it has none yet and we found one here.\n if (accountId && (existingAcctId === null || existingAcctId === undefined || existingAcctId === \"\")) {\n await sqlite.execute(\n \"UPDATE contacts SET account_id = ?, updated_at = datetime('now') WHERE id = ? AND tenant_id = ?\",\n [accountId, contactId, tenantId]\n );\n }\n } else {\n // Split contact_name into first / last (first token = first name, remainder = last).\n let firstName = \"\", lastName = \"\";\n if (contactName) {\n const parts = contactName.split(/\\s+/);\n firstName = parts.shift() || \"\";\n lastName = parts.join(\" \");\n }\n contactId = crypto.randomUUID();\n await sqlite.execute(\n `INSERT INTO contacts (id, account_id, first_name, last_name, email, tags, custom_fields, created_at, updated_at, tenant_id)\n VALUES (?, ?, ?, ?, ?, '[]', '{}', datetime('now'), datetime('now'), ?)`,\n [contactId, accountId, firstName, lastName, contactEmail, tenantId]\n );\n }\n }\n\n // ── Link the deal: set account_id / primary_contact_id only if still empty (idempotent) ──\n if (accountId || contactId) {\n await sqlite.execute(\n `UPDATE deals\n SET account_id = COALESCE(NULLIF(account_id, ''), ?),\n primary_contact_id = COALESCE(NULLIF(primary_contact_id, ''), ?)\n WHERE id = ? AND tenant_id = ?`,\n [accountId, contactId, dealId, tenantId]\n );\n }\n\n // ── deal_contacts(role='primary') join row (INSERT OR IGNORE on composite PK) ──\n if (contactId) {\n await sqlite.execute(\n `INSERT OR IGNORE INTO deal_contacts (deal_id, contact_id, role, tenant_id, created_at)\n VALUES (?, ?, 'primary', ?, datetime('now'))`,\n [dealId, contactId, tenantId]\n );\n }\n }\n await sqlite.execute(\n \"INSERT OR REPLACE INTO app_config (key, value, tenant_id, updated_at) VALUES ('mig_crm_relational_v1', 'done', 't_default', datetime('now'))\"\n );\n }\n } catch { /* non-critical: relational backfill retried next warm start (flag only set on success) */ }\n\n // Seed default LLM config if not exists\n const existing = await sqlite.execute(\"SELECT id FROM llm_config WHERE id = 'default'\");\n if (existing.rows.length === 0) {\n await sqlite.execute(\n \"INSERT INTO llm_config (id, provider, api_key, model, updated_at) VALUES ('default', 'anthropic', '', 'claude-sonnet-4-6', ?)\",\n [new Date().toISOString()]\n );\n }\n\n // Demo-agent seeding disabled — starting from a clean agents table.\n // Re-enable by uncommenting the call below.\n // await seedDefaultAgents();\n}\n\nasync function seedDefaultAgents() {\n const existing = await sqlite.execute(\"SELECT id FROM agents LIMIT 1\");\n if (existing.rows.length > 0) return;\n\n const now = new Date().toISOString();\n for (const agent of DEFAULT_AGENT_SEEDS) {\n await sqlite.execute(\n `INSERT INTO agents (id, name, workspace, description, system_prompt, tools, model, enabled, created_at, updated_at, created_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?)`,\n [crypto.randomUUID(), agent.name, agent.workspace, agent.description, agent.system_prompt, agent.tools, agent.model, now, now, \"user\"]\n );\n }\n}\n",[192],"0cd8e370-5f15-11f1-bf54-1607ee4eb77e","router.ts","30479b74-56ca-11f1-a296-ee650bb23af1",1010,["D",1780467943919],126,"import { sqlite, initDB, DEFAULT_AGENT_SEEDS, currentRole, currentTenantId, currentCtx } from \"./db.ts\";\nimport { registerUser, loginUser, getMe, upsertOAuthUser, bootstrapOwner } from \"./api/auth.ts\";\nimport { resolveSession, sessionSetCookie, sessionClearCookie } from \"./api/session.ts\";\nimport { newOAuthState, CLEAR_OAUTH_STATE, redirectWithCookie, oauthStateValid, identityLoginStart, identityLoginCallback } from \"./api/oauth_login.ts\";\nimport { listAgents, createAgent, updateAgent, deleteAgent } from \"./api/agents.ts\";\nimport { getLLMConfig, saveLLMConfig } from \"./api/llm.ts\";\nimport { handleChat, handleChatStream, listConversations, getConversationById, deleteConversation } from \"./api/chat.ts\";\nimport { handleIntegrationProxy, getCredentials, GOOGLE_SERVICES, MICROSOFT_SCOPES, getIntegrationSchema, listDescriptorNames } from \"./api/integrations.ts\";\nimport { serveAppModule } from \"./app_modules.ts\";\nimport { getFunnelSummary, getCorrelations, getRecommendations, getLeadScores, getAIOKpis, getIntelligenceFeed } from \"./api/intelligence.ts\";\nimport { listSignals, recordSignal, actionSignal, getHotLeads, getHotLeadsCount } from \"./api/signals.ts\";\nimport { listObjectives, createObjective, updateObjective, deleteObjective, createKeyResult, updateKeyResult, getOKRDashboard, syncObjectivesFromFunnel } from \"./api/okrs.ts\";\nimport { getNSM, setNSM, recordNSMValue, getNSMProgress } from \"./api/nsm.ts\";\nimport { listCohorts, createCohort, deleteCohort, getCohortSummary, getEngagementVelocity, getAttributionSummary, recordConversion, getRetention, getRevenueModel } from \"./api/aio.ts\";\nimport { getLatestDigest, generateDigest, getDigestHistory } from \"./api/digest.ts\";\nimport { listExperiments, createExperiment, updateExperiment, deleteExperiment, runExperiment, completeExperiment, getExperimentStats, suggestICE } from \"./api/experiments.ts\";\nimport { getUnifiedCalendar, getCalendarSummary, createCalendarEntry, updateCalendarEntry, deleteCalendarEntry } from \"./api/calendar_unified.ts\";\nimport { getGraphify } from \"./api/graphify.ts\";\nimport { listTasks, createTask, updateTask, deleteTask, listIceRankedTasks, generateTasksFromSource, runTask } from \"./api/tasks.ts\";\nimport { listDeals, getDeal, createDeal, updateDeal, deleteDeal, syncDealsFromLeads, listCandidates, importDeals } from \"./api/deals.ts\";\nimport { listKnowledgeFiles, getKnowledgeFile, createKnowledgeFile, updateKnowledgeFile, deleteKnowledgeFile, summarizeKnowledgeFile, buildKnowledgeGraph, AI_FEATURES } from \"./api/knowledge.ts\";\nimport { getCompanyProfile, setCompanyProfile, getBrandContext, setBrandContext } from \"./api/company.ts\";\nimport { enrichCompanyProfile } from \"./api/company-enrichment.ts\";\nimport { listMemory, addMemory, updateMemory, deleteMemory } from \"./api/memory.ts\";\nimport { listSkills, getSkill, setSkillState, createCustomSkill } from \"./api/skills.ts\";\nimport { getMethodConfig, saveMethodConfig, getMethodsMetadata } from \"./api/method_config.ts\";\nimport { listActions, enqueueAction, getAction, approveAction, rejectAction } from \"./api/actions.ts\";\nimport { processPendingRuns } from \"./cron.ts\";\nimport { getExecutedWorkCounts } from \"./api/propagate.ts\";\nimport { listCampaigns, getCampaign, getCampaignAgents, createCampaign, deleteCampaign, listCampaignRuns, orchestrateCampaignRun, updateCampaign, setCampaignTrigger } from \"./api/campaigns.ts\";\nimport { getWorldActivity, getWorldBoard, getWorldProject } from \"./api/world.ts\";\nimport { handlePlatformRoutes } from \"./api/platform.ts\";\nimport { isCrmPath, handleCrmRoutes } from \"./api/crm_routes.ts\";\nimport { isMarketingPath, handleMarketingRoutes } from \"./api/marketing_routes.ts\";\n\nconst corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n};\n\n// App version for the data-free health probe. Prefer the val.town deploy id (DENO_DEPLOYMENT_ID\n// is set by the runtime per deploy); fall back to a hardcoded release tag when running locally.\nconst APP_VERSION = (() => {\n try { return Deno.env.get(\"DENO_DEPLOYMENT_ID\") || \"p3-s3\"; } catch { return \"p3-s3\"; }\n})();\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...corsHeaders,\n },\n });\n}\n// JSON response that also carries a Set-Cookie header (session set/clear on auth endpoints).\nfunction jsonWithCookie(data: unknown, setCookie: string, status = 200): Response {\n const res = json(data, status);\n res.headers.append(\"Set-Cookie\", setCookie);\n return res;\n}\n// Best-effort client IP for per-IP rate limiting (val.town/Cloudflare forwarded headers).\nfunction clientIp(req: Request): string {\n return req.headers.get(\"x-forwarded-for\")?.split(\",\")[0].trim() || req.headers.get(\"cf-connecting-ip\") || \"\";\n}\n\n// Mask an integration row before returning it: NO endpoint may return secrets in cleartext\n// — only presence flags + a short masked hint.\nfunction maskIntegration(obj: any, googleConnected = false) {\n return {\n ...obj,\n connected: !!(obj.api_key || obj.access_token) ||\n (GOOGLE_SERVICES.includes(String(obj.name)) && googleConnected),\n has_api_key: !!obj.api_key,\n has_api_secret: !!obj.api_secret,\n has_access_token: !!obj.access_token,\n api_key: obj.api_key ? String(obj.api_key).slice(0, 4) + \"***\" : undefined,\n api_secret: obj.api_secret ? \"***\" : undefined,\n access_token: obj.access_token ? \"***\" : undefined,\n refresh_token: obj.refresh_token ? \"***\" : undefined,\n };\n}\n\n\nexport async function handleRequest(req: Request, url: URL): Promise {\n const { pathname } = url;\n const method = req.method;\n const tid = currentTenantId(); // tenant scope for every business query (stable within request)\n\n // CORS preflight\n if (method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n\n try {\n // GET /api/health — data-free liveness probe: { ok, version } (+ legacy status/timestamp).\n if (pathname === \"/api/health\" && method === \"GET\") {\n return json({ ok: true, version: APP_VERSION, status: \"ok\", timestamp: new Date().toISOString() });\n }\n\n // GET /api/health/auth - gated token verifier. Reaching this (past the main.ts gate) means the\n // APP_TOKEN is valid; the login screen uses it to confirm the password.\n if (pathname === \"/api/health/auth\" && method === \"GET\") {\n return json({ ok: true });\n }\n\n // --- Auth: email/password + session ----\n // Thin handlers — logic lives in api/auth.ts; the \"nexus_session\" cookie via api/session.ts.\n if (pathname === \"/api/auth/register\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const r = await registerUser({ email: body.email, password: body.password, name: body.name, honeypot: body.honeypot ?? body.company_url, turnstileToken: body.turnstileToken, ip: clientIp(req) });\n if (!r.ok) return json({ ok: false, error: r.error }, 400);\n return jsonWithCookie({ ok: true }, sessionSetCookie(r.ctxToken!));\n }\n if (pathname === \"/api/auth/login\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const r = await loginUser({ email: body.email, password: body.password, ip: clientIp(req) });\n if (!r.ok) return json({ ok: false, error: r.error }, 401);\n return jsonWithCookie({ ok: true }, sessionSetCookie(r.ctxToken!));\n }\n if (pathname === \"/api/auth/logout\" && method === \"POST\") {\n return jsonWithCookie({ ok: true }, sessionClearCookie());\n }\n if (pathname === \"/api/auth/me\" && method === \"GET\") {\n const ctx = await resolveSession(req);\n if (!ctx) return json({ ok: false, user: null }, 200);\n return json({ ok: true, ...(await getMe(ctx)) });\n }\n\n // GET /api/config - LLM runtime config + all app_config key/values\n if (pathname === \"/api/config\" && method === \"GET\") {\n const llmConfig = await getLLMConfig();\n const merged: Record = {\n provider: llmConfig.provider,\n model: llmConfig.model,\n has_key: (llmConfig as any).has_key,\n };\n try {\n const r = await sqlite.execute(\"SELECT key, value FROM app_config WHERE tenant_id = ?\", [tid]);\n for (const row of (r.rows || []) as any[]) {\n const k = String(row[0]);\n let v: any = row[1];\n if (typeof v === \"string\") { try { v = JSON.parse(v); } catch { /* keep raw string */ } }\n merged[k] = v;\n }\n } catch { /* app_config missing → just return LLM fields */ }\n return json(merged);\n }\n // POST /api/config - upsert arbitrary key/value into app_config (Settings toggles, ROI inputs…).\n if (pathname === \"/api/config\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const updated: Record = {};\n try {\n for (const [k, v] of Object.entries(body)) {\n if (k === \"provider\" || k === \"model\" || k === \"has_key\") continue;\n const value = typeof v === \"string\" ? v : JSON.stringify(v);\n await sqlite.execute(\n \"INSERT INTO app_config (key, value, tenant_id) VALUES (?, ?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value, tenant_id = excluded.tenant_id, updated_at = datetime('now')\",\n [k, value, tid],\n );\n updated[k] = v;\n }\n return json({ success: true, updated });\n } catch (e: any) {\n return json({ error: String(e?.message || e) }, 500);\n }\n }\n\n // --- Frontend JS module routes (table lives in app_modules.ts to keep router under 80KB) ----\n if (method === \"GET\") {\n const _moduleSrc = serveAppModule(pathname);\n if (_moduleSrc !== null) {\n return new Response(_moduleSrc, {\n headers: {\n \"Content-Type\": \"application/javascript\",\n \"Cache-Control\": \"no-cache, no-store, must-revalidate\",\n ...corsHeaders,\n },\n });\n }\n }\n\n // --- Intelligence routes ----\n if (pathname === \"/api/intelligence/funnel-summary\" && method === \"GET\") {\n const force = url.searchParams.get(\"force\") === \"1\";\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\", 10);\n return json(await getFunnelSummary(force, days));\n }\n if (pathname === \"/api/intelligence/correlations\" && method === \"GET\") {\n const force = url.searchParams.get(\"force\") === \"1\";\n return json(await getCorrelations(force));\n }\n if (pathname === \"/api/intelligence/recommendations\" && method === \"GET\") {\n return json(await getRecommendations());\n }\n if (pathname === \"/api/intelligence/leads\" && method === \"GET\") {\n return json(await getLeadScores());\n }\n if (pathname === \"/api/intelligence/kpis\" && method === \"GET\") {\n return json(await getAIOKpis());\n }\n if (pathname === \"/api/intelligence/feed\" && method === \"GET\") {\n return json(await getIntelligenceFeed());\n }\n // Execution-aware metric: how much real work was completed (tasks/experiments).\n if (pathname === \"/api/intelligence/executed-work\" && method === \"GET\") {\n const days = parseInt(url.searchParams.get(\"days\") ?? \"30\", 10);\n return json(await getExecutedWorkCounts(days));\n }\n\n // --- Signals routes ----\n if (pathname === \"/api/signals\" && method === \"GET\") {\n const actioned = url.searchParams.get(\"actioned\");\n const lead_email = url.searchParams.get(\"lead_email\") ?? undefined;\n return json(await listSignals({ lead_email, actioned: actioned === \"true\" ? true : actioned === \"false\" ? false : undefined }));\n }\n if (pathname === \"/api/signals\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (!body.lead_email || !body.signal_type) {\n return json({ error: \"lead_email and signal_type are required\" }, 400);\n }\n return json(await recordSignal(body), 201);\n }\n const signalActionMatch = pathname.match(/^\\/api\\/signals\\/([^/]+)\\/action$/);\n if (signalActionMatch && method === \"PUT\") {\n const result = await actionSignal(signalActionMatch[1]);\n return result ? json(result) : json({ error: \"Signal not found\" }, 404);\n }\n if (pathname === \"/api/signals/hot-leads\" && method === \"GET\") {\n return json(await getHotLeads());\n }\n if (pathname === \"/api/signals/hot-leads/count\" && method === \"GET\") {\n return json({ count: await getHotLeadsCount() });\n }\n\n // --- OKR / Objectives routes ----\n if (pathname === \"/api/okrs\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n return json(await listObjectives({ workspace }));\n }\n if (pathname === \"/api/okrs\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createObjective(body), 201);\n }\n if (pathname === \"/api/okrs/dashboard\" && method === \"GET\") {\n return json(await getOKRDashboard());\n }\n // Explicit funnel→OKR sync — refreshes stored KR/objective progress on demand.\n if (pathname === \"/api/okrs/sync\" && method === \"POST\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n return json(await syncObjectivesFromFunnel({ workspace }));\n }\n const okrIdMatch = pathname.match(/^\\/api\\/okrs\\/([^/]+)$/);\n if (okrIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n return json(await updateObjective(okrIdMatch[1], body));\n }\n if (okrIdMatch && method === \"DELETE\") {\n const ok = await deleteObjective(okrIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n const okrKrMatch = pathname.match(/^\\/api\\/okrs\\/([^/]+)\\/key-results$/);\n if (okrKrMatch && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createKeyResult(okrKrMatch[1], body), 201);\n }\n const krIdMatch = pathname.match(/^\\/api\\/okrs\\/key-results\\/([^/]+)$/);\n if (krIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n return json(await updateKeyResult(krIdMatch[1], body));\n }\n\n // --- NSM routes ----\n if (pathname === \"/api/nsm\" && method === \"GET\") {\n return json(await getNSM());\n }\n if (pathname === \"/api/nsm\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await setNSM(body));\n }\n if (pathname === \"/api/nsm/record\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n await recordNSMValue(body.value);\n return json({ success: true });\n }\n if (pathname === \"/api/nsm/progress\" && method === \"GET\") {\n return json(await getNSMProgress());\n }\n\n // --- AIO / Cohort routes ----\n if (pathname === \"/api/aio/cohorts\" && method === \"GET\") {\n return json(await listCohorts());\n }\n if (pathname === \"/api/aio/cohorts\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createCohort(body), 201);\n }\n const cohortIdMatch = pathname.match(/^\\/api\\/aio\\/cohorts\\/([^/]+)$/);\n if (cohortIdMatch && method === \"DELETE\") {\n return json({ success: await deleteCohort(cohortIdMatch[1]) });\n }\n if (pathname === \"/api/aio/cohort-summary\" && method === \"GET\") {\n return json(await getCohortSummary());\n }\n if (pathname === \"/api/aio/engagement-velocity\" && method === \"GET\") {\n return json(await getEngagementVelocity());\n }\n\n // --- Frontend-expected aliases (cohorts/attribution/key-results) ----\n if (pathname === \"/api/cohorts\" && method === \"GET\") {\n return json(await getCohortSummary());\n }\n if (pathname === \"/api/cohorts\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createCohort(body), 201);\n }\n const cohortAliasMatch = pathname.match(/^\\/api\\/cohorts\\/([^/]+)$/);\n if (cohortAliasMatch && method === \"DELETE\") {\n return json({ success: await deleteCohort(cohortAliasMatch[1]) });\n }\n if (pathname === \"/api/attribution\" && method === \"GET\") {\n return json(await getAttributionSummary());\n }\n // retention (GRR/NRR + curve) + revenue model endpoints.\n if (pathname === \"/api/intelligence/retention\" && method === \"GET\") {\n return json(await getRetention());\n }\n if (pathname === \"/api/intelligence/revenue-model\" && method === \"GET\") {\n return json(await getRevenueModel());\n }\n if (pathname === \"/api/attribution\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n await recordConversion(body);\n return json({ success: true }, 201);\n }\n const krAliasMatch = pathname.match(/^\\/api\\/key-results\\/([^/]+)$/);\n if (krAliasMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n return json(await updateKeyResult(krAliasMatch[1], body));\n }\n\n // --- Digest routes ----\n if (pathname === \"/api/digest\" && method === \"GET\") {\n return json(await getLatestDigest());\n }\n if (pathname === \"/api/digest/generate\" && method === \"POST\") {\n return json(await generateDigest());\n }\n if (pathname === \"/api/digest/history\" && method === \"GET\") {\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"10\", 10);\n return json(await getDigestHistory(limit));\n }\n\n // --- Experiments routes ----\n if (pathname === \"/api/experiments\" && method === \"GET\") {\n const status = url.searchParams.get(\"status\") ?? undefined;\n const funnel_stage = url.searchParams.get(\"stage\") ?? url.searchParams.get(\"funnel_stage\") ?? undefined;\n const aarrr_lever = url.searchParams.get(\"aarrr_lever\") ?? undefined;\n return json(await listExperiments({ status, funnel_stage, aarrr_lever }));\n }\n if (pathname === \"/api/experiments\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createExperiment(body), 201);\n }\n if (pathname === \"/api/experiments/stats\" && method === \"GET\") {\n return json(await getExperimentStats());\n }\n // suggest-ice: alias of ice-suggest (same handler).\n if ((pathname === \"/api/experiments/ice-suggest\" || pathname === \"/api/experiments/suggest-ice\") && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await suggestICE(body));\n }\n // GET /api/experiments/:id/stats — sub-resource form; getExperimentStats() is tenant-aggregate (portfolio-wide).\n // Declared before the run|complete and bare :id matchers so \"stats\" isn't read as an id.\n const expStatsMatch = pathname.match(/^\\/api\\/experiments\\/([^/]+)\\/stats$/);\n if (expStatsMatch && method === \"GET\") {\n return json(await getExperimentStats());\n }\n const expActionMatch = pathname.match(/^\\/api\\/experiments\\/([^/]+)\\/(run|complete)$/);\n if (expActionMatch && method === \"POST\") {\n const id = expActionMatch[1];\n const body = await req.json().catch(() => ({}));\n const result = expActionMatch[2] === \"run\"\n ? await runExperiment(id, Number(body.baseline_value) || 0)\n : await completeExperiment(id, {\n result_value: Number(body.result_value) || 0,\n outcome: body.outcome ?? \"inconclusive\",\n learnings: body.learnings,\n control: body.control,\n variant: body.variant,\n sample_size: body.sample_size,\n });\n return result ? json(result) : json({ error: \"Experiment not found\" }, 404);\n }\n const expIdMatch = pathname.match(/^\\/api\\/experiments\\/([^/]+)$/);\n if (expIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const updated = await updateExperiment(expIdMatch[1], body);\n return updated ? json(updated) : json({ error: \"Experiment not found\" }, 404);\n }\n if (expIdMatch && method === \"DELETE\") {\n const ok = await deleteExperiment(expIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Calendar unified route ----\n if (pathname === \"/api/calendar/unified\" && method === \"GET\") {\n const today = new Date().toISOString().slice(0, 10);\n const from = url.searchParams.get(\"from\") ?? url.searchParams.get(\"start\") ?? today;\n const to = url.searchParams.get(\"to\") ?? url.searchParams.get(\"end\") ?? from;\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const sourcesParam = url.searchParams.getAll(\"source\");\n return json(await getUnifiedCalendar({ from, to, workspace, sources: sourcesParam.length ? sourcesParam as any : undefined }));\n }\n if (pathname === \"/api/calendar/summary\" && method === \"GET\") {\n const date = url.searchParams.get(\"date\") ?? new Date().toISOString().slice(0, 10);\n return json(await getCalendarSummary(date));\n }\n if (pathname === \"/api/calendar/entries\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createCalendarEntry(body), 201);\n }\n const calEntryMatch = pathname.match(/^\\/api\\/calendar\\/entries\\/([^/]+)$/);\n if (calEntryMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const updated = await updateCalendarEntry(calEntryMatch[1], body);\n return updated ? json(updated) : json({ error: \"Not found\" }, 404);\n }\n if (calEntryMatch && method === \"DELETE\") {\n const ok = await deleteCalendarEntry(calEntryMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Knowledge files (AI knowledge injection + graph view) ----\n if (pathname === \"/api/knowledge\" && method === \"GET\") {\n return json(await listKnowledgeFiles());\n }\n if (pathname === \"/api/knowledge\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const created = await createKnowledgeFile(body);\n return created ? json(created, 201) : json({ error: \"content required\" }, 400);\n }\n if (pathname === \"/api/knowledge/graph\" && method === \"GET\") {\n return json(await buildKnowledgeGraph());\n }\n if (pathname === \"/api/knowledge/features\" && method === \"GET\") {\n return json(AI_FEATURES);\n }\n const knSummarizeMatch = pathname.match(/^\\/api\\/knowledge\\/([^/]+)\\/summarize$/);\n if (knSummarizeMatch && method === \"POST\") {\n const summary = await summarizeKnowledgeFile(knSummarizeMatch[1]);\n const file = await getKnowledgeFile(knSummarizeMatch[1]);\n return json({ summary, tokens_estimate: file?.tokens_estimate ?? 0 });\n }\n const knIdMatch = pathname.match(/^\\/api\\/knowledge\\/([^/]+)$/);\n if (knIdMatch && method === \"GET\") {\n const f = await getKnowledgeFile(knIdMatch[1]);\n return f ? json(f) : json({ error: \"Not found\" }, 404);\n }\n if (knIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const updated = await updateKnowledgeFile(knIdMatch[1], body);\n return updated ? json(updated) : json({ error: \"Not found\" }, 404);\n }\n if (knIdMatch && method === \"DELETE\") {\n const ok = await deleteKnowledgeFile(knIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Company Profile + Brand Context (Part 15.2) — the business identity ---\n if (pathname === \"/api/company-profile\" && method === \"GET\") {\n return json(await getCompanyProfile());\n }\n if (pathname === \"/api/company-profile\" && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n return json(await setCompanyProfile(body));\n }\n if (pathname === \"/api/company-profile/enrich\" && method === \"POST\") {\n try {\n const enriched = await enrichCompanyProfile();\n return json({ enriched, message: \"AI enrichment complete — review and save.\" });\n } catch (e) {\n return json({ error: String(e?.message ?? e) }, 500);\n }\n }\n if (pathname === \"/api/brand-context\" && method === \"GET\") {\n return json({ text: await getBrandContext() });\n }\n if (pathname === \"/api/brand-context\" && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n await setBrandContext(String(body.text ?? \"\"));\n return json({ ok: true });\n }\n\n // --- Memory (Part 15.3) — persistent evolving business facts ----\n if (pathname === \"/api/memory\" && method === \"GET\") {\n return json(await listMemory());\n }\n if (pathname === \"/api/memory\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const m = await addMemory(body);\n return m ? json(m, 201) : json({ error: \"content required\" }, 400);\n }\n const memIdMatch = pathname.match(/^\\/api\\/memory\\/([0-9]+)$/);\n if (memIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const m = await updateMemory(Number(memIdMatch[1]), body);\n return m ? json(m) : json({ error: \"Not found\" }, 404);\n }\n if (memIdMatch && method === \"DELETE\") {\n const ok = await deleteMemory(Number(memIdMatch[1]));\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Skills (Playbooks) — marketing skill catalog + per-skill state ----\n if (pathname === \"/api/skills\" && method === \"GET\") {\n return json(await listSkills());\n }\n if (pathname === \"/api/skills\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const created = await createCustomSkill(body);\n return created.ok ? json(created, 201) : json({ error: created.error || \"invalid skill\" }, 400);\n }\n const skillNameMatch = pathname.match(/^\\/api\\/skills\\/([^/]+)$/);\n if (skillNameMatch && method === \"GET\") {\n const s = await getSkill(decodeURIComponent(skillNameMatch[1]));\n return s ? json(s) : json({ error: \"Not found\" }, 404);\n }\n if (skillNameMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const ok = await setSkillState(decodeURIComponent(skillNameMatch[1]), body);\n return ok ? json({ ok: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Method config (prioritization methodology: ICE/RICE/WSJF) ----\n if (pathname === \"/api/method-config/methods\" && method === \"GET\") {\n return json(getMethodsMetadata());\n }\n if (pathname === \"/api/method-config\" && method === \"GET\") {\n return json(await getMethodConfig());\n }\n if (pathname === \"/api/method-config\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await saveMethodConfig(body));\n }\n\n // --- Action queue (human-in-the-loop execution) ----\n if (pathname === \"/api/actions\" && method === \"GET\") {\n const status = url.searchParams.get(\"status\") ?? undefined;\n return json(await listActions(status));\n }\n if (pathname === \"/api/actions\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const created = await enqueueAction(body);\n return created ? json(created, 201) : json({ error: \"integration + endpoint required\" }, 400);\n }\n const actionApproveMatch = pathname.match(/^\\/api\\/actions\\/([^/]+)\\/approve$/);\n if (actionApproveMatch && method === \"POST\") {\n const a = await approveAction(actionApproveMatch[1]);\n return a ? json(a) : json({ error: \"Not found\" }, 404);\n }\n const actionRejectMatch = pathname.match(/^\\/api\\/actions\\/([^/]+)\\/reject$/);\n if (actionRejectMatch && method === \"POST\") {\n const a = await rejectAction(actionRejectMatch[1]);\n return a ? json(a) : json({ error: \"Not found\" }, 404);\n }\n const actionIdMatch = pathname.match(/^\\/api\\/actions\\/([^/]+)$/);\n if (actionIdMatch && method === \"GET\") {\n const a = await getAction(actionIdMatch[1]);\n return a ? json(a) : json({ error: \"Not found\" }, 404);\n }\n\n // Manual trigger for the execution engine (the interval val also calls processPendingRuns).\n if (pathname === \"/api/agents/run-pending\" && method === \"POST\") {\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"3\", 10);\n return json(await processPendingRuns(limit));\n }\n\n // GET /api/agents/activity?limit=N — cross-agent run feed; before the /api/agents/:id matchers.\n if (pathname === \"/api/agents/activity\" && method === \"GET\") {\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"20\", 10);\n const r = await sqlite.execute(\n `SELECT r.id, r.agent_id, a.name, a.workspace, r.status, r.started_at, r.finished_at, r.output\n FROM agent_runs r LEFT JOIN agents a ON a.id = r.agent_id AND a.tenant_id = ?\n WHERE r.tenant_id = ?\n ORDER BY r.started_at DESC LIMIT ?`,\n [tid, tid, limit]\n );\n return json({ activity: r.rows.map((row) => rowToObject(r.columns, row)) });\n }\n\n // --- Agent runs ----\n const agentRunsMatch = pathname.match(/^\\/api\\/agents\\/([^/]+)\\/runs$/);\n if (agentRunsMatch && method === \"GET\") {\n const agent_id = agentRunsMatch[1];\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"20\", 10);\n const result = await sqlite.execute(\n \"SELECT * FROM agent_runs WHERE agent_id = ? AND tenant_id = ? ORDER BY started_at DESC LIMIT ?\",\n [agent_id, tid, limit]\n );\n return json(result.rows.map((row) => rowToObject(result.columns, row)));\n }\n if (agentRunsMatch && method === \"POST\") {\n const agent_id = agentRunsMatch[1];\n const body = await req.json().catch(() => ({}));\n const id = crypto.randomUUID();\n const now = new Date().toISOString();\n await sqlite.execute(\n \"INSERT INTO agent_runs (id, agent_id, trigger, status, started_at, tenant_id) VALUES (?, ?, ?, ?, ?, ?)\",\n [id, agent_id, body.trigger ?? \"manual\", \"pending\", now, tid]\n );\n // App-level automation (no cron): run the queued job in-request. Fire-and-forget; status='running' claim guards dupes.\n processPendingRuns(1).catch(() => {});\n return json({ id, agent_id, trigger: body.trigger ?? \"manual\", status: \"pending\", started_at: now }, 201);\n }\n\n // Integrations routes\n // GET /api/integrations - list all integrations\n if (pathname === \"/api/integrations\" && method === \"GET\") {\n const result = await sqlite.execute(\"SELECT * FROM integrations WHERE tenant_id = ? ORDER BY name ASC\", [tid]);\n const rows = result.rows.map((row) => rowToObject(result.columns, row));\n // Google-family services inherit the central 'google' OAuth token, so they are \"connected\"\n // whenever google is — even without their own api_key/access_token row.\n const googleConnected = rows.some((o) => o.name === \"google\" && o.access_token);\n const integrations = rows.map((obj) => maskIntegration(obj, googleConnected));\n return json(integrations);\n }\n\n // POST /api/integrations/:name - upsert integration credentials\n const integrationUpsertMatch = pathname.match(/^\\/api\\/integrations\\/([^/]+)$/);\n if (integrationUpsertMatch && method === \"POST\") {\n const name = integrationUpsertMatch[1];\n const body = await req.json().catch(() => ({}));\n const now = new Date().toISOString();\n\n const existing = await sqlite.execute(\n \"SELECT id, api_key, api_secret, access_token, refresh_token, extra_config FROM integrations WHERE name = ? AND tenant_id = ?\",\n [name, tid]\n );\n\n // Keep the existing secret when the incoming value is blank/missing/masked (\"***\"),\n // so saving the masked Settings form does not wipe stored credentials.\n const keepSecret = (incoming: any, current: any) => {\n if (incoming == null) return current ?? null;\n const s = String(incoming);\n if (s === \"\" || s.includes(\"***\")) return current ?? null;\n return incoming;\n };\n\n if (existing.rows.length > 0) {\n const cur = existing.rows[0] as any[]; // [id, api_key, api_secret, access_token, refresh_token, extra_config]\n await sqlite.execute(\n `UPDATE integrations SET\n api_key = ?,\n api_secret = ?,\n access_token = ?,\n refresh_token = ?,\n extra_config = ?,\n updated_at = ?\n WHERE name = ? AND tenant_id = ?`,\n [\n keepSecret(body.api_key, cur[1]),\n keepSecret(body.api_secret, cur[2]),\n keepSecret(body.access_token, cur[3]),\n keepSecret(body.refresh_token, cur[4]),\n body.extra_config != null ? JSON.stringify(body.extra_config) : (cur[5] ?? null),\n now,\n name,\n tid,\n ]\n );\n } else {\n // Insert\n const id = crypto.randomUUID();\n await sqlite.execute(\n `INSERT INTO integrations (id, name, api_key, api_secret, access_token, refresh_token, extra_config, connected_at, updated_at, tenant_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n id,\n name,\n body.api_key ?? null,\n body.api_secret ?? null,\n body.access_token ?? null,\n body.refresh_token ?? null,\n body.extra_config != null ? JSON.stringify(body.extra_config) : null,\n now,\n now,\n tid,\n ]\n );\n }\n\n const updated = await sqlite.execute(\n \"SELECT * FROM integrations WHERE name = ? AND tenant_id = ?\",\n [name, tid]\n );\n const raw = rowToObject(updated.columns, updated.rows[0]);\n // NEVER return the just-saved secrets in cleartext — mask like the list endpoint.\n const googleConnected = raw.name === \"google\"\n ? !!raw.access_token\n : !!(await getCredentials(\"google\"))?.access_token;\n return json({ success: true, integration: maskIntegration(raw, googleConnected) });\n }\n\n // DELETE /api/integrations/:name\n const integrationDeleteMatch = pathname.match(/^\\/api\\/integrations\\/([^/]+)$/);\n if (integrationDeleteMatch && method === \"DELETE\") {\n const name = integrationDeleteMatch[1];\n await sqlite.execute(\"DELETE FROM integrations WHERE name = ? AND tenant_id = ?\", [name, tid]);\n return json({ success: true, message: `Integration '${name}' deleted` });\n }\n\n // Part 13: GET /api/integrations/:name/schema — descriptor-generated action/trigger schema\n // (UI form fields + AI tool hints). null when the integration is still hand-written.\n const integrationSchemaMatch = pathname.match(/^\\/api\\/integrations\\/([^/]+)\\/schema$/);\n if (integrationSchemaMatch && method === \"GET\") {\n const schema = getIntegrationSchema(integrationSchemaMatch[1]);\n return schema ? json(schema) : json({ error: \"no descriptor for this integration yet\", descriptor_integrations: listDescriptorNames() }, 404);\n }\n\n // GET|POST /api/integrations/:name/data - proxy to integration API\n const integrationDataMatch = pathname.match(/^\\/api\\/integrations\\/([^/]+)\\/data$/);\n if (integrationDataMatch && (method === \"GET\" || method === \"POST\")) {\n const name = integrationDataMatch[1];\n const credentials = await getCredentials(name);\n if (!credentials) {\n return json({ error: `Integration '${name}' not found or not configured` }, 404);\n }\n return handleIntegrationProxy(req, name, url.searchParams, credentials);\n }\n\n // Agents routes\n // GET /api/agents - list agents (optional ?workspace= query param)\n if (pathname === \"/api/agents\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const agents = await listAgents(workspace);\n return json(agents);\n }\n\n // POST /api/agents - create agent\n if (pathname === \"/api/agents\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const agent = await createAgent(body);\n return json(agent, 201);\n }\n\n // PUT /api/agents/:id - update agent\n const agentUpdateMatch = pathname.match(/^\\/api\\/agents\\/([^/]+)$/);\n if (agentUpdateMatch && method === \"PUT\") {\n const id = agentUpdateMatch[1];\n const body = await req.json().catch(() => ({}));\n const agent = await updateAgent(id, body);\n if (!agent) {\n return json({ error: `Agent '${id}' not found` }, 404);\n }\n return json(agent);\n }\n\n // DELETE /api/agents/:id - delete agent\n const agentDeleteMatch = pathname.match(/^\\/api\\/agents\\/([^/]+)$/);\n if (agentDeleteMatch && method === \"DELETE\") {\n const id = agentDeleteMatch[1];\n const deleted = await deleteAgent(id);\n if (!deleted) {\n return json({ error: `Agent '${id}' not found` }, 404);\n }\n return json({ success: true, message: `Agent '${id}' deleted` });\n }\n\n // LLM config routes\n // GET /api/llm/config - get LLM config (mask api_key)\n if (pathname === \"/api/llm/config\" && method === \"GET\") {\n const config = await getLLMConfig();\n if (!config) {\n return json({ error: \"LLM config not found\" }, 404);\n }\n // Mask api_key: show first 8 chars + ***\n const masked = {\n ...config,\n api_key: config.api_key\n ? config.api_key.slice(0, 8) + \"***\"\n : \"\",\n };\n return json(masked);\n }\n\n // POST /api/llm/config - save LLM config\n if (pathname === \"/api/llm/config\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const config = await saveLLMConfig(body);\n // Mask api_key in response\n const masked = {\n ...config,\n api_key: config.api_key\n ? config.api_key.slice(0, 8) + \"***\"\n : \"\",\n };\n return json(masked);\n }\n\n // Chat route\n // POST /api/chat - AI chat handler\n if (pathname === \"/api/chat\" && method === \"POST\") {\n return handleChat(req);\n }\n\n // POST /api/chat/stream - SSE streaming chat\n if (pathname === \"/api/chat/stream\" && method === \"POST\") {\n return handleChatStream(req);\n }\n\n // --- Conversation history routes ----\n if (pathname === \"/api/conversations\" && method === \"GET\") {\n return json(await listConversations());\n }\n const convIdMatch = pathname.match(/^\\/api\\/conversations\\/([^/]+)$/);\n if (convIdMatch && method === \"GET\") {\n const conv = await getConversationById(convIdMatch[1]);\n return conv ? json(conv) : json({ error: \"Not found\" }, 404);\n }\n if (convIdMatch && method === \"DELETE\") {\n const ok = await deleteConversation(convIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // Tasks routes\n // GET /api/tasks - list tasks (optional ?workspace= query param)\n if (pathname === \"/api/tasks\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const status = url.searchParams.get(\"status\") ?? undefined;\n return json(await listTasks({ workspace, status }));\n }\n\n // POST /api/tasks - create task\n if (pathname === \"/api/tasks\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createTask(body), 201);\n }\n\n // GET /api/tasks/ice - ICE-ranked backlog (sorted by ICE score desc).\n // Declared before the /api/tasks/:id matchers so \"ice\" isn't read as an id.\n if (pathname === \"/api/tasks/ice\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"50\", 10);\n return json(await listIceRankedTasks({ workspace, limit }));\n }\n\n // POST /api/tasks/generate - LLM-plan tasks from an experiment/KR/objective/campaign.\n if (pathname === \"/api/tasks/generate\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (!body.source_type || !body.source_id) {\n return json({ error: \"source_type and source_id are required\" }, 400);\n }\n return json(await generateTasksFromSource(body), 201);\n }\n\n // POST /api/tasks/:id/run - execute the task with an agent (sub-resource; before the bare :id matchers).\n const taskRunMatch = pathname.match(/^\\/api\\/tasks\\/([^/]+)\\/run$/);\n if (taskRunMatch && method === \"POST\") {\n const result = await runTask(taskRunMatch[1]);\n if (!result.task) return json({ error: result.error || \"Not found\" }, 404);\n return json(result);\n }\n\n // PUT /api/tasks/:id - update task (e.g. toggle status)\n const taskUpdateMatch = pathname.match(/^\\/api\\/tasks\\/([^/]+)$/);\n if (taskUpdateMatch && method === \"PUT\") {\n const id = taskUpdateMatch[1];\n const body = await req.json().catch(() => ({}));\n const updated = await updateTask(id, body);\n if (!updated) return json({ error: \"Not found\" }, 404);\n return json(updated);\n }\n\n // DELETE /api/tasks/:id - delete task\n const taskDeleteMatch = pathname.match(/^\\/api\\/tasks\\/([^/]+)$/);\n if (taskDeleteMatch && method === \"DELETE\") {\n const ok = await deleteTask(taskDeleteMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Relational CRM (accounts + contacts + deal↔contact links) ----\n // Delegate to api/crm_routes.ts; tenant context is already set by main.ts. Kept thin to stay under the 80KB file limit.\n if (isCrmPath(pathname)) return handleCrmRoutes(req, url, method);\n if (isMarketingPath(pathname)) return handleMarketingRoutes(req, url, method);\n\n // --- CRM Deals (sales pipeline) ----\n if (pathname === \"/api/deals\" && method === \"GET\") {\n return json(await listDeals(url.searchParams.get(\"stage\") ?? undefined));\n }\n if (pathname === \"/api/deals\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createDeal(body), 201);\n }\n // Seed deals from qualified leads (explicit; checked before the :id matcher).\n if (pathname === \"/api/deals/sync\" && method === \"POST\") {\n return json(await syncDealsFromLeads());\n }\n // Interactive import: candidate leads to review, then import the selected emails.\n if (pathname === \"/api/deals/candidates\" && method === \"GET\") {\n return json(await listCandidates());\n }\n if (pathname === \"/api/deals/import\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await importDeals(Array.isArray(body.emails) ? body.emails : []));\n }\n const dealIdMatch = pathname.match(/^\\/api\\/deals\\/([^/]+)$/);\n if (dealIdMatch && dealIdMatch[1] !== \"sync\" && method === \"GET\") {\n const d = await getDeal(dealIdMatch[1]);\n return d ? json(d) : json({ error: \"Not found\" }, 404);\n }\n if (dealIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n const updated = await updateDeal(dealIdMatch[1], body);\n return updated ? json(updated) : json({ error: \"Not found\" }, 404);\n }\n if (dealIdMatch && method === \"DELETE\") {\n const ok = await deleteDeal(dealIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // --- Data export (CSV) ----\n if (pathname === \"/api/export/signals\" && method === \"GET\") {\n const r = await sqlite.execute(\"SELECT id, lead_email, lead_name, signal_type, signal_source, signal_strength, actioned, detected_at FROM intent_signals WHERE tenant_id = ? ORDER BY detected_at DESC\", [tid]);\n const cols = r.columns;\n let csv = cols.join(\",\") + \"\\n\";\n for (const row of r.rows) {\n csv += (row as any[]).map((v) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`).join(\",\") + \"\\n\";\n }\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": 'attachment; filename=\"signals.csv\"', ...corsHeaders } });\n }\n if (pathname === \"/api/export/okrs\" && method === \"GET\") {\n const objR = await sqlite.execute(\"SELECT id, title, description, workspace, status, progress, quarter, created_at FROM objectives WHERE tenant_id = ? ORDER BY created_at DESC\", [tid]);\n const krR = await sqlite.execute(\"SELECT id, objective_id, title, target_value, current_value, unit, progress, updated_at FROM key_results WHERE tenant_id = ? ORDER BY updated_at DESC\", [tid]);\n let csv = \"type,\" + objR.columns.join(\",\") + \"\\n\";\n for (const row of objR.rows) {\n csv += \"objective,\" + (row as any[]).map((v) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`).join(\",\") + \"\\n\";\n }\n if (krR.rows.length > 0) {\n csv += \"\\ntype,\" + krR.columns.join(\",\") + \"\\n\";\n for (const row of krR.rows) {\n csv += \"key_result,\" + (row as any[]).map((v) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`).join(\",\") + \"\\n\";\n }\n }\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": 'attachment; filename=\"okrs.csv\"', ...corsHeaders } });\n }\n if (pathname === \"/api/export/tasks\" && method === \"GET\") {\n const r = await sqlite.execute(\"SELECT id, title, description, status, priority, workspace, due_date, created_at, updated_at FROM tasks WHERE tenant_id = ? ORDER BY created_at DESC\", [tid]);\n const cols = r.columns;\n let csv = cols.join(\",\") + \"\\n\";\n for (const row of r.rows) {\n csv += (row as any[]).map((v) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`).join(\",\") + \"\\n\";\n }\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": 'attachment; filename=\"tasks.csv\"', ...corsHeaders } });\n }\n\n // --- LinkedIn OAuth flow (legacy aliases) ----\n if (pathname === \"/api/oauth/linkedin/start\" && method === \"GET\") {\n return Response.redirect(`${url.origin}/api/auth/linkedin`);\n }\n if (pathname === \"/api/oauth/linkedin/callback\" && method === \"GET\") {\n return Response.redirect(`${url.origin}/api/auth/linkedin/callback?${url.search.slice(1)}`);\n }\n\n // --- Graphify - app map for MCP / AI-native navigation ----\n if (pathname === \"/api/graphify\" && method === \"GET\") {\n return json(await getGraphify());\n }\n\n // --- Calendar today shortcut (TodayPanel widget) ----\n if (pathname === \"/api/calendar/today\" && method === \"GET\") {\n const today = new Date().toISOString().slice(0, 10);\n return json(await getUnifiedCalendar({ from: today, to: today }));\n }\n\n // --- Digest latest alias ----\n if (pathname === \"/api/digest/latest\" && method === \"GET\") {\n return json(await getLatestDigest());\n }\n\n // --- PLATFORM SUPERADMIN (master-only; the single audited exception to tenant isolation) ----\n // GATE first, then delegate all /api/platform/* routes to handlePlatformRoutes (api/platform.ts).\n if (pathname.startsWith(\"/api/platform/\")) {\n if (!currentCtx().isPlatformAdmin) return json({ error: \"Forbidden: platform admin only\" }, 403);\n return handlePlatformRoutes(req, url, method);\n }\n\n // --- ADMIN LOCKDOWN: every destructive /api/admin/* route is owner-only (plus per-route confirm\n // tokens below). No-op under default SYSTEM_CTX (role \"owner\"); locks out trial members. ----\n if (pathname.startsWith(\"/api/admin/\") && currentRole() !== \"owner\") {\n return json({ error: \"Forbidden: owner role required\" }, 403);\n }\n\n // Owner bootstrap (owner-only): create/attach the platform owner to t_default for email+password login. Idempotent.\n if (pathname === \"/api/admin/bootstrap-owner\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (!body.email || !body.password) return json({ ok: false, error: \"email + password required\" }, 400);\n const r = await bootstrapOwner(String(body.email), String(body.password));\n return json({ ok: r.ok, created: r.created });\n }\n\n // Admin backup/export (owner-only): read-only, tenant-scoped (WHERE tenant_id=?) JSON snapshot of this tenant's rows.\n // Confirm is optional: pass { confirm: \"EXPORT\" } to be explicit, otherwise it just runs.\n if (pathname === \"/api/admin/export\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm != null && body.confirm !== \"EXPORT\") {\n return json({ ok: false, error: \"Send confirm: EXPORT (or omit confirm)\" }, 400);\n }\n const EXPORT_TABLES = [\n \"tasks\", \"deals\", \"campaigns\", \"objectives\", \"key_results\", \"experiments\",\n \"agents\", \"action_queue\", \"calendar_entries\", \"knowledge_files\", \"notes\",\n ];\n const data: Record = {};\n const counts: Record = {};\n for (const table of EXPORT_TABLES) {\n try {\n const r = await sqlite.execute(`SELECT * FROM ${table} WHERE tenant_id = ?`, [tid]);\n const rows = (r.rows || []).map((row) => rowToObject(r.columns, row));\n data[table] = rows;\n counts[table] = rows.length;\n } catch {\n // Missing table (e.g. not yet created): record empty rather than failing the whole export.\n data[table] = [];\n counts[table] = 0;\n }\n }\n const snapshot = {\n ok: true,\n tenant_id: tid,\n version: APP_VERSION,\n exported_at: new Date().toISOString(),\n tables: EXPORT_TABLES,\n counts,\n data,\n };\n const filename = `aihive-backup-${tid}-${new Date().toISOString().slice(0, 10)}.json`;\n return new Response(JSON.stringify(snapshot, null, 2), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Content-Disposition\": `attachment; filename=\"${filename}\"`,\n \"Cache-Control\": \"no-store\",\n ...corsHeaders,\n },\n });\n }\n\n // --- Admin purge (clear intelligence cache) ----\n if (pathname === \"/api/admin/purge\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"PURGE\") return json({ error: \"Send confirm: PURGE\" }, 400);\n await sqlite.execute(\"DELETE FROM intelligence_cache WHERE tenant_id = ?\", [tid]).catch(() => {});\n await sqlite.execute(\"UPDATE app_config SET value=NULL WHERE key='funnel_cache' AND tenant_id = ?\", [tid]).catch(() => {});\n return json({ success: true, message: \"Cache purged\" });\n }\n\n // Remove demo/seed data: starter agents matched exactly on (name, description, system_prompt) so edits are never touched.\n if (pathname === \"/api/admin/seed-status\" && method === \"GET\") {\n let agents = 0;\n for (const seed of DEFAULT_AGENT_SEEDS) {\n const r = await sqlite.execute(\n \"SELECT COUNT(*) FROM agents WHERE name = ? AND description = ? AND system_prompt = ? AND tenant_id = ?\",\n [seed.name, seed.description, seed.system_prompt, tid],\n ).catch(() => null);\n if (r?.rows?.length) agents += Number((r.rows[0] as any[])[0]) || 0;\n }\n return json({ ok: true, total: agents, counts: { agents } });\n }\n if (pathname === \"/api/admin/cleanup-mock\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"CLEANUP\") return json({ ok: false, error: \"Send confirm: CLEANUP\" }, 400);\n let removed = 0;\n for (const seed of DEFAULT_AGENT_SEEDS) {\n const r = await sqlite.execute(\n \"DELETE FROM agents WHERE name = ? AND description = ? AND system_prompt = ? AND tenant_id = ?\",\n [seed.name, seed.description, seed.system_prompt, tid],\n ).catch(() => null);\n removed += Number((r as any)?.rowsAffected ?? 0) || 0;\n }\n return json({ ok: true, total: removed });\n }\n\n // Bulk reset: wipe ALL agents (= agents + campaigns, same table) plus related\n // run/budget/conversation rows that deleteAgent() does not cascade. Confirm-guarded.\n if (pathname === \"/api/admin/reset-agents\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"CLEANUP\") return json({ ok: false, error: \"Send confirm: CLEANUP\" }, 400);\n const counts: Record = {};\n for (const table of [\"agents\", \"agent_runs\", \"agent_budgets\", \"conversations\"]) {\n const r = await sqlite.execute(`DELETE FROM ${table} WHERE tenant_id = ?`, [tid]).catch(() => null);\n counts[table] = Number((r as any)?.rowsAffected ?? 0) || 0;\n }\n return json({ ok: true, counts });\n }\n\n // Factory reset (this app + tenant only): wipe the data tables below, keeping integrations/llm_config/knowledge_files. Confirm-guarded.\n if (pathname === \"/api/admin/reset-data\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"CLEANUP\") return json({ ok: false, error: \"Send confirm: CLEANUP\" }, 400);\n const WIPE_TABLES = [\n \"agents\", \"conversations\", \"agent_budgets\", \"agent_runs\",\n \"objectives\", \"key_results\", \"north_star\", \"nsm_history\",\n \"experiments\", \"tasks\", \"tasks_legacy\", \"notes\",\n \"intent_signals\", \"growth_digests\", \"calendar_entries\", \"action_queue\",\n \"customer_cohorts\", \"lead_state_changes\", \"utm_conversions\",\n \"metric_baselines\", \"metric_history\", \"intelligence_cache\", \"app_config\",\n ];\n const counts: Record = {};\n for (const table of WIPE_TABLES) {\n const r = await sqlite.execute(`DELETE FROM ${table} WHERE tenant_id = ?`, [tid]).catch(() => null);\n counts[table] = Number((r as any)?.rowsAffected ?? 0) || 0;\n }\n return json({ ok: true, kept: [\"integrations\", \"llm_config\", \"knowledge_files\"], counts });\n }\n\n // Precise working-data wipe (KEEPS knowledge_files/skills/memory/app_config/integrations/llm_config). Confirm-guarded.\n if (pathname === \"/api/admin/wipe-working-data\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"WIPE\") return json({ ok: false, error: \"Send confirm: WIPE\" }, 400);\n const WIPE = [\n \"agents\", \"agent_runs\", \"agent_budgets\", \"conversations\", \"deals\",\n \"experiments\", \"tasks\", \"tasks_legacy\", \"objectives\", \"key_results\",\n \"north_star\", \"nsm_history\", \"intent_signals\", \"growth_digests\",\n \"calendar_entries\", \"action_queue\", \"customer_cohorts\", \"lead_state_changes\",\n \"utm_conversions\", \"metric_baselines\", \"metric_history\", \"intelligence_cache\", \"notes\",\n ];\n const counts: Record = {};\n for (const table of WIPE) {\n const r = await sqlite.execute(`DELETE FROM ${table} WHERE tenant_id = ?`, [tid]).catch(() => null);\n counts[table] = Number((r as any)?.rowsAffected ?? 0) || 0;\n }\n return json({\n ok: true,\n kept: [\"knowledge_files\", \"skills\", \"memory\", \"app_config\", \"integrations\", \"llm_config\"],\n counts,\n });\n }\n\n // --- Targeted wipe: tasks + run history + agents/budgets + campaign↔agent links ONLY ----\n // Keeps campaigns/objectives/everything else. Confirm-guarded.\n if (pathname === \"/api/admin/wipe-tasks-agents\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"WIPE\") return json({ ok: false, error: \"Send confirm: WIPE\" }, 400);\n const WIPE = [\"tasks\", \"tasks_legacy\", \"agent_runs\", \"agent_budgets\", \"campaign_agents\", \"agents\", \"campaign_runs\"];\n const counts: Record = {};\n for (const table of WIPE) {\n const r = await sqlite.execute(`DELETE FROM ${table} WHERE tenant_id = ?`, [tid]).catch(() => null);\n counts[table] = Number((r as any)?.rowsAffected ?? 0) || 0;\n }\n // Also clear internal completion events (metric_history integration='internal') and task-done\n // calendar markers (event_type='completion'); keep real integration metric history intact.\n const mh = await sqlite.execute(\"DELETE FROM metric_history WHERE integration = 'internal' AND tenant_id = ?\", [tid]).catch(() => null);\n counts[\"metric_history(internal)\"] = Number((mh as any)?.rowsAffected ?? 0) || 0;\n const cm = await sqlite.execute(\"DELETE FROM calendar_entries WHERE event_type = 'completion' AND tenant_id = ?\", [tid]).catch(() => null);\n counts[\"calendar_entries(completion)\"] = Number((cm as any)?.rowsAffected ?? 0) || 0;\n return json({ ok: true, wiped: [...WIPE, \"metric_history(internal)\", \"calendar_entries(completion)\"], counts });\n }\n\n // --- Targeted wipe: action_queue (approvals / prepared+sent action history) ONLY ----\n if (pathname === \"/api/admin/wipe-actions\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n if (body.confirm !== \"WIPE\") return json({ ok: false, error: \"Send confirm: WIPE\" }, 400);\n const r = await sqlite.execute(\"DELETE FROM action_queue WHERE tenant_id = ?\", [tid]).catch(() => null);\n return json({ ok: true, wiped: [\"action_queue\"], counts: { action_queue: Number((r as any)?.rowsAffected ?? 0) || 0 } });\n }\n\n // --- Google OAuth redirect flow ----\n if (pathname === \"/api/auth/google\" && method === \"GET\") {\n const creds = await getCredentials(\"google\");\n // OAuth client is env-driven by design (GOOGLE_CLIENT_ID/SECRET); fall back to the DB row.\n const clientId = Deno.env.get(\"GOOGLE_CLIENT_ID\") || creds?.extra_config?.client_id || creds?.extra_config?.clientId;\n const redirectUri = creds?.extra_config?.redirect_uri || creds?.extra_config?.redirectUri || `${url.origin}/api/auth/google/callback`;\n if (!clientId) {\n return new Response(\"Google OAuth not configured. Add Client ID in Settings - Google.\", { status: 400 });\n }\n const scopes = [\n \"https://www.googleapis.com/auth/userinfo.email\",\n \"https://www.googleapis.com/auth/analytics.readonly\",\n \"https://www.googleapis.com/auth/webmasters.readonly\",\n \"https://www.googleapis.com/auth/gmail.modify\",\n \"https://www.googleapis.com/auth/drive.readonly\",\n \"https://www.googleapis.com/auth/spreadsheets.readonly\",\n \"https://www.googleapis.com/auth/documents.readonly\",\n \"https://www.googleapis.com/auth/calendar\",\n \"https://www.googleapis.com/auth/youtube.readonly\",\n \"https://www.googleapis.com/auth/yt-analytics.readonly\",\n ].join(\" \");\n const { state, setCookie } = newOAuthState();\n const params = new URLSearchParams({\n client_id: clientId,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: scopes,\n access_type: \"offline\",\n prompt: \"consent\",\n state,\n });\n return redirectWithCookie(`https://accounts.google.com/o/oauth2/v2/auth?${params}`, setCookie);\n }\n\n if (pathname === \"/api/auth/google/callback\" && method === \"GET\") {\n const code = url.searchParams.get(\"code\");\n const error = url.searchParams.get(\"error\");\n if (error || !code) {\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(error || \"no_code\")}`);\n }\n if (!oauthStateValid(req, url)) {\n return Response.redirect(`${url.origin}/?auth_error=state_mismatch`);\n }\n const creds = await getCredentials(\"google\");\n // Trim env/DB values to avoid whitespace producing a malformed (invalid_request) token request.\n const clientId = (Deno.env.get(\"GOOGLE_CLIENT_ID\") || creds?.extra_config?.client_id || creds?.extra_config?.clientId || \"\").trim();\n const clientSecret = (Deno.env.get(\"GOOGLE_CLIENT_SECRET\") || creds?.api_secret || \"\").trim();\n const redirectUri = (creds?.extra_config?.redirect_uri || creds?.extra_config?.redirectUri || `${url.origin}/api/auth/google/callback`).trim();\n\n // Fail fast with a clear cause if a required param is empty (Google would return invalid_request).\n if (!clientId || !clientSecret) {\n const missing = !clientId && !clientSecret ? \"client_id_and_secret\"\n : !clientId ? \"client_id\" : \"client_secret\";\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(\"missing_\" + missing)}`);\n }\n\n const tokenRes = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ code, client_id: clientId, client_secret: clientSecret, redirect_uri: redirectUri, grant_type: \"authorization_code\" }),\n });\n const tokens = await tokenRes.json() as any;\n if (!tokenRes.ok || !tokens.access_token) {\n const detail = [tokens.error, tokens.error_description].filter(Boolean).join(\": \") || \"token_exchange_failed\";\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(detail)}`);\n }\n\n const now = new Date().toISOString();\n const newExtraConfig = { ...(creds?.extra_config || {}), token_expiry: Date.now() + (tokens.expires_in || 3600) * 1000 };\n const existing = await sqlite.execute(\"SELECT id FROM integrations WHERE name = ? AND tenant_id = ?\", [\"google\", tid]);\n if (existing.rows.length > 0) {\n await sqlite.execute(\n \"UPDATE integrations SET access_token=?, refresh_token=?, extra_config=?, updated_at=? WHERE name='google' AND tenant_id = ?\",\n [tokens.access_token, tokens.refresh_token || creds?.refresh_token || null, JSON.stringify(newExtraConfig), now, tid]\n );\n } else {\n await sqlite.execute(\n \"INSERT INTO integrations (id, name, access_token, refresh_token, extra_config, connected_at, updated_at, tenant_id) VALUES (?,?,?,?,?,?,?,?)\",\n [crypto.randomUUID(), \"google\", tokens.access_token, tokens.refresh_token || null, JSON.stringify(newExtraConfig), now, now, tid]\n );\n }\n return redirectWithCookie(`${url.origin}/?auth=google_ok`, CLEAR_OAUTH_STATE);\n }\n\n // --- LinkedIn OAuth flow ----\n if (pathname === \"/api/auth/linkedin\" && method === \"GET\") {\n const creds = await getCredentials(\"linkedin\");\n const clientId = creds?.extra_config?.clientId || creds?.extra_config?.client_id;\n const redirectUri = `${url.origin}/api/auth/linkedin/callback`;\n if (!clientId) {\n return new Response(\"LinkedIn OAuth not configured. Add Client ID in Settings - LinkedIn.\", { status: 400 });\n }\n const { state, setCookie } = newOAuthState();\n const params = new URLSearchParams({\n response_type: \"code\",\n client_id: clientId,\n redirect_uri: redirectUri,\n scope: \"openid profile email w_member_social r_basicprofile\",\n state,\n });\n return redirectWithCookie(`https://www.linkedin.com/oauth/v2/authorization?${params}`, setCookie);\n }\n\n if (pathname === \"/api/auth/linkedin/callback\" && method === \"GET\") {\n const code = url.searchParams.get(\"code\");\n const error = url.searchParams.get(\"error\");\n if (error || !code) {\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(error || \"no_code\")}`);\n }\n if (!oauthStateValid(req, url)) {\n return Response.redirect(`${url.origin}/?auth_error=state_mismatch`);\n }\n const creds = await getCredentials(\"linkedin\");\n const clientId = creds?.extra_config?.clientId || creds?.extra_config?.client_id || \"\";\n const clientSecret = creds?.api_secret || \"\";\n const redirectUri = `${url.origin}/api/auth/linkedin/callback`;\n\n const tokenRes = await fetch(\"https://www.linkedin.com/oauth/v2/accessToken\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ grant_type: \"authorization_code\", code, redirect_uri: redirectUri, client_id: clientId, client_secret: clientSecret }),\n });\n const tokens = await tokenRes.json() as any;\n if (!tokenRes.ok || !tokens.access_token) {\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(tokens.error || \"linkedin_token_failed\")}`);\n }\n\n // Fetch LinkedIn profile to get the author URN needed for posts endpoint.\n let authorId = creds?.extra_config?.author_id || \"\";\n try {\n const profileRes = await fetch(\"https://api.linkedin.com/v2/me\", {\n headers: { Authorization: `Bearer ${tokens.access_token}` },\n });\n if (profileRes.ok) {\n const profile = await profileRes.json() as any;\n if (profile.id) authorId = `urn:li:person:${profile.id}`;\n }\n } catch { /* non-fatal - author_id can be set manually later */ }\n\n const now = new Date().toISOString();\n const newExtraConfig = { ...(creds?.extra_config || {}), token_expiry: Date.now() + (tokens.expires_in || 5184000) * 1000, author_id: authorId };\n const existing = await sqlite.execute(\"SELECT id FROM integrations WHERE name = ? AND tenant_id = ?\", [\"linkedin\", tid]);\n if (existing.rows.length > 0) {\n await sqlite.execute(\n \"UPDATE integrations SET access_token=?, extra_config=?, updated_at=? WHERE name='linkedin' AND tenant_id = ?\",\n [tokens.access_token, JSON.stringify(newExtraConfig), now, tid]\n );\n } else {\n await sqlite.execute(\n \"INSERT INTO integrations (id, name, access_token, extra_config, connected_at, updated_at, tenant_id) VALUES (?,?,?,?,?,?,?)\",\n [crypto.randomUUID(), \"linkedin\", tokens.access_token, JSON.stringify(newExtraConfig), now, now, tid]\n );\n }\n return redirectWithCookie(`${url.origin}/?auth=linkedin_ok`, CLEAR_OAUTH_STATE);\n }\n\n // Microsoft (Outlook) OAuth: env-first client (MICROSOFT_CLIENT_ID/SECRET), `common` tenant, DB fallback. Mirrors Google.\n if (pathname === \"/api/auth/microsoft\" && method === \"GET\") {\n const mcreds = await getCredentials(\"outlook\");\n const clientId = (Deno.env.get(\"MICROSOFT_CLIENT_ID\") || mcreds?.extra_config?.client_id || mcreds?.extra_config?.clientId || \"\").trim();\n if (!clientId) {\n return new Response(\"Microsoft OAuth not configured. Set MICROSOFT_CLIENT_ID (env) or add the Client ID in Settings → Outlook.\", { status: 400 });\n }\n const redirectUri = `${url.origin}/api/auth/microsoft/callback`;\n const scopes = MICROSOFT_SCOPES;\n const { state, setCookie } = newOAuthState();\n const params = new URLSearchParams({\n client_id: clientId,\n response_type: \"code\",\n redirect_uri: redirectUri,\n response_mode: \"query\",\n scope: scopes,\n state,\n });\n return redirectWithCookie(`https://login.microsoftonline.com/common/oauth2/v2.0/authorize?${params}`, setCookie);\n }\n\n if (pathname === \"/api/auth/microsoft/callback\" && method === \"GET\") {\n const code = url.searchParams.get(\"code\");\n const error = url.searchParams.get(\"error\");\n if (error || !code) {\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(error || \"no_code\")}`);\n }\n if (!oauthStateValid(req, url)) {\n return Response.redirect(`${url.origin}/?auth_error=state_mismatch`);\n }\n const creds = await getCredentials(\"outlook\");\n const clientId = (Deno.env.get(\"MICROSOFT_CLIENT_ID\") || creds?.extra_config?.client_id || creds?.extra_config?.clientId || \"\").trim();\n const clientSecret = (Deno.env.get(\"MICROSOFT_CLIENT_SECRET\") || creds?.api_secret || \"\").trim();\n const redirectUri = `${url.origin}/api/auth/microsoft/callback`;\n if (!clientId || !clientSecret) {\n const missing = !clientId && !clientSecret ? \"client_id_and_secret\" : !clientId ? \"client_id\" : \"client_secret\";\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(\"missing_microsoft_\" + missing)}`);\n }\n const scopes = MICROSOFT_SCOPES;\n const tokenRes = await fetch(\"https://login.microsoftonline.com/common/oauth2/v2.0/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, code, redirect_uri: redirectUri, grant_type: \"authorization_code\", scope: scopes }),\n });\n const tokens = await tokenRes.json() as any;\n if (!tokenRes.ok || !tokens.access_token) {\n const detail = [tokens.error, tokens.error_description].filter(Boolean).join(\": \") || \"token_exchange_failed\";\n return Response.redirect(`${url.origin}/?auth_error=${encodeURIComponent(detail)}`);\n }\n\n const now = new Date().toISOString();\n const newExtraConfig = { ...(creds?.extra_config || {}), token_expiry: Date.now() + (tokens.expires_in || 3600) * 1000 };\n const existing = await sqlite.execute(\"SELECT id FROM integrations WHERE name = ? AND tenant_id = ?\", [\"outlook\", tid]);\n if (existing.rows.length > 0) {\n await sqlite.execute(\n \"UPDATE integrations SET access_token=?, refresh_token=?, extra_config=?, updated_at=? WHERE name='outlook' AND tenant_id = ?\",\n [tokens.access_token, tokens.refresh_token || creds?.refresh_token || null, JSON.stringify(newExtraConfig), now, tid]\n );\n } else {\n await sqlite.execute(\n \"INSERT INTO integrations (id, name, access_token, refresh_token, extra_config, connected_at, updated_at, tenant_id) VALUES (?,?,?,?,?,?,?,?)\",\n [crypto.randomUUID(), \"outlook\", tokens.access_token, tokens.refresh_token || null, JSON.stringify(newExtraConfig), now, now, tid]\n );\n }\n return redirectWithCookie(`${url.origin}/?auth=outlook_ok`, CLEAR_OAUTH_STATE);\n }\n\n // Identity login OAuth (sign-in, NOT data scopes): scope \"openid email profile\"; callback mints an app session.\n const loginMatch = pathname.match(/^\\/api\\/login\\/(google|microsoft)(\\/callback)?$/);\n if (loginMatch && method === \"GET\") {\n const provider = loginMatch[1] as \"google\" | \"microsoft\";\n return loginMatch[2]\n ? await identityLoginCallback(provider, req, url)\n : identityLoginStart(provider, url);\n }\n\n // --- Notes routes (TeamHub collaborative notes) ----\n if (pathname === \"/api/notes\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? \"marketing\";\n const result = await sqlite.execute(\n \"SELECT * FROM notes WHERE workspace=? AND tenant_id = ? ORDER BY pinned DESC, created_at DESC\",\n [workspace, tid]\n );\n return json(result.rows.map((r) => rowToObject(result.columns, r)));\n }\n if (pathname === \"/api/notes\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const id = crypto.randomUUID();\n const now = new Date().toISOString();\n await sqlite.execute(\n \"INSERT INTO notes (id, content, pinned, workspace, created_at, updated_at, tenant_id) VALUES (?,?,?,?,?,?,?)\",\n [id, body.content ?? \"\", body.pinned ? 1 : 0, body.workspace ?? \"marketing\", now, now, tid]\n );\n return json({ id, content: body.content ?? \"\", pinned: !!body.pinned, workspace: body.workspace ?? \"marketing\", created_at: now, updated_at: now }, 201);\n }\n const noteMatch = pathname.match(/^\\/api\\/notes\\/([^/]+)$/);\n if (noteMatch && method === \"PUT\") {\n const id = noteMatch[1];\n const body = await req.json().catch(() => ({}));\n const now = new Date().toISOString();\n const setParts: string[] = [\"updated_at=?\"];\n const setArgs: any[] = [now];\n if (body.pinned !== undefined) { setParts.push(\"pinned=?\"); setArgs.push(body.pinned ? 1 : 0); }\n if (body.content !== undefined) { setParts.push(\"content=?\"); setArgs.push(body.content); }\n await sqlite.execute(\n `UPDATE notes SET ${setParts.join(\", \")} WHERE id=? AND tenant_id = ?`,\n [...setArgs, id, tid]\n );\n const r = await sqlite.execute(\"SELECT * FROM notes WHERE id=? AND tenant_id = ?\", [id, tid]);\n if (!r.rows.length) return json({ error: \"Not found\" }, 404);\n return json(rowToObject(r.columns, r.rows[0]));\n }\n if (noteMatch && method === \"DELETE\") {\n await sqlite.execute(\"DELETE FROM notes WHERE id=? AND tenant_id = ?\", [noteMatch[1], tid]);\n return json({ success: true });\n }\n\n // --- World dashboard rollups (logs / kanban / project panels) ----\n // /api/world/activity — cross-agent runs; ?campaign[_id]=ID scopes to that campaign, bare ?campaign = legacy filter.\n if (pathname === \"/api/world/activity\" && method === \"GET\") {\n const limit = parseInt(url.searchParams.get(\"limit\") ?? \"40\", 10);\n const status = url.searchParams.get(\"status\") ?? undefined;\n const agent_id = url.searchParams.get(\"agent_id\") ?? undefined;\n const campaignParam = url.searchParams.get(\"campaign_id\") ?? url.searchParams.get(\"campaign\");\n const campaign_id = campaignParam ? campaignParam : undefined;\n const campaign = url.searchParams.get(\"campaign\") != null && !campaign_id;\n return json(await getWorldActivity({ limit, status, agent_id, campaign, campaign_id }));\n }\n // /api/world/board — tasks grouped into the 4 kanban columns; ?campaign[_id]=ID scopes them.\n if (pathname === \"/api/world/board\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const campaign_id = url.searchParams.get(\"campaign_id\") ?? url.searchParams.get(\"campaign\") ?? undefined;\n return json(await getWorldBoard({ workspace, campaign_id: campaign_id || undefined }));\n }\n // /api/world/project — active campaign brief + real run-usage rollup; ?campaign[_id]=ID focuses it.\n if (pathname === \"/api/world/project\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n const campaign_id = url.searchParams.get(\"campaign_id\") ?? url.searchParams.get(\"campaign\") ?? undefined;\n return json(await getWorldProject({ workspace, campaign_id: campaign_id || undefined }));\n }\n\n // --- Campaigns (Director: multi-agent orchestrated pipelines) ----\n if (pathname === \"/api/campaigns\" && method === \"GET\") {\n const workspace = url.searchParams.get(\"workspace\") ?? undefined;\n return json(await listCampaigns(workspace));\n }\n if (pathname === \"/api/campaigns\" && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await createCampaign(body), 201);\n }\n // Sub-resources (:id/runs, :id/agents, :id/trigger) before the bare :id matcher.\n const campaignRunsMatch = pathname.match(/^\\/api\\/campaigns\\/([^/]+)\\/runs$/);\n if (campaignRunsMatch && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n // Runs the Director pipeline synchronously and returns the run result.\n return json(await orchestrateCampaignRun(campaignRunsMatch[1], body.input));\n }\n if (campaignRunsMatch && method === \"GET\") {\n return json(await listCampaignRuns(campaignRunsMatch[1]));\n }\n const campaignAgentsMatch = pathname.match(/^\\/api\\/campaigns\\/([^/]+)\\/agents$/);\n if (campaignAgentsMatch && method === \"GET\") {\n return json(await getCampaignAgents(campaignAgentsMatch[1]));\n }\n // Clicking a campaign returns its tasks (OKR→Campaign→Task link).\n const campaignTasksMatch = pathname.match(/^\\/api\\/campaigns\\/([^/]+)\\/tasks$/);\n if (campaignTasksMatch && method === \"GET\") {\n return json(await listTasks({ campaign_id: campaignTasksMatch[1] }));\n }\n const campaignTriggerMatch = pathname.match(/^\\/api\\/campaigns\\/([^/]+)\\/trigger$/);\n if (campaignTriggerMatch && method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n return json(await setCampaignTrigger(campaignTriggerMatch[1], body));\n }\n const campaignIdMatch = pathname.match(/^\\/api\\/campaigns\\/([^/]+)$/);\n if (campaignIdMatch && method === \"GET\") {\n const c = await getCampaign(campaignIdMatch[1]);\n return c ? json(c) : json({ error: \"Not found\" }, 404);\n }\n if (campaignIdMatch && method === \"PUT\") {\n const body = await req.json().catch(() => ({}));\n return json(await updateCampaign(campaignIdMatch[1], body));\n }\n if (campaignIdMatch && method === \"DELETE\") {\n const ok = await deleteCampaign(campaignIdMatch[1]);\n return ok ? json({ success: true }) : json({ error: \"Not found\" }, 404);\n }\n\n // No route matched\n return json({ error: \"Not found\", path: pathname }, 404);\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n console.error(`[router] Error handling ${method} ${pathname}:`, message);\n return json({ error: \"Internal server error\", detail: message }, 500);\n }\n}\n\n/**\n * Converts a sqlite result row (array of values) to a plain object\n * using the columns array from the result set.\n */\nfunction rowToObject(columns: string[], row: unknown[]): Record {\n const obj: Record = {};\n for (let i = 0; i < columns.length; i++) {\n obj[columns[i]] = row[i];\n }\n return obj;\n}\n",[200],"731c8246-5f37-11f1-acf9-1607ee4eb77e","main.ts",1066,["D",1780482718390],23,"http","import { initDB, tenantStore, SYSTEM_CTX } from \"./db.ts\";\nimport { handleRequest } from \"./router.ts\";\nimport { getFrontendHTML, getWorldHTML } from \"./frontend.ts\";\nimport { seedKnowledge } from \"./api/knowledge_seed.ts\";\nimport { resolveSession } from \"./api/session.ts\";\n\n// Foundation tenant context: a session resolves to a TenantCtx; absent one we fall back to the\n// system/default SYSTEM_CTX (imported from db.ts, typed as TenantCtx) so all existing\n// (t_default-backfilled) data keeps working exactly as today.\n\nlet initialized = false;\n\n// Shared-secret gate. Set APP_TOKEN in the val's environment. Every /api/* route\n// requires `Authorization: Bearer ` (or `?token=` for download links),\n// EXCEPT the public paths below. Fail-closed: if APP_TOKEN is unset, data routes 503.\nconst APP_TOKEN = (Deno.env.get(\"APP_TOKEN\") || \"\").trim();\n\n// Auth ENABLED (Phase 3): /api/* requires a valid nexus_session cookie OR the APP_TOKEN bearer\n// (recovery hatch). Public paths (app modules, /api/auth/*, /api/login/*, /api/health) stay open so\n// the login screen always loads. Verified: owner session authorizes, anonymous → 401 → login screen.\nconst AUTH_DISABLED = false;\n\n// Public /api paths that must stay reachable without the app token:\n// - /api/app-* : the frontend's own JS modules (static code, no secrets; loaded by \n \n \n \n \n \n \n \n \n\n\n

\n \n\n`;\n}\n\n// Part 10: the Agent World shell — a \"the-delegation\" simulation DASHBOARD at /world. Same origin\n// (shares nexus_token + every /api/* route), so the agents + panels run over the REAL backend.\n// This shell is the SOLE creator of every fixed DOM id the world modules target. It is a CSS-grid\n// dashboard (light theme): a top bar, a LEFT logs panel, a CENTER stage (scene header + a BOUNDED\n// canvas + a kanban under it) and a RIGHT project panel. The canvas is NOT fullscreen — it lives\n// inside #world-canvas-wrap and the scene sizes to that wrapper. three.js (+ addons) load from a\n// CDN via the importmap; the 3D + panel logic is in /api/app-world (the entry) and its sub-modules.\nexport function getWorldHTML(): string {\n return `\n\n\n \n \n AIHive · Agent World\n \n \n \n \n\n\n

\n \n

\n \n\n`;\n}\n",[491],"731798f6-5f2f-11f1-ae87-1607ee4eb77e","db.ts","2f68e1b8-56ca-11f1-b821-ee650bb23af1",1048,["D",1780479282410],55,"import { sqlite as _sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ── DB BACKEND (portable across hosts) ───────────────────────────────────────\n// AIHive runs on val.town today (std/sqlite) but is migrating to Firebase Hosting + Cloud Run, where\n// the database is a real Turso libSQL (no shared rate limit, runs on any host). This selects the\n// backend from ENV without changing a single caller: when TURSO_DATABASE_URL is set we use the Turso\n// libSQL client; otherwise we fall back to val.town's std/sqlite. Both expose the SAME\n// execute(string | {sql, args}) → {rows, columns, rowsAffected} shape, so the rest of the app and the\n// rate-limit retry wrapper below are unchanged. On val.town (no TURSO_* env) this is a no-op: the\n// libSQL client is never even imported.\nfunction _env(k: string): string | undefined {\n try {\n const g = globalThis as any;\n return g.Deno?.env?.get?.(k) ?? g.process?.env?.[k];\n } catch {\n return undefined;\n }\n}\nconst _tursoUrl = _env(\"TURSO_DATABASE_URL\");\nlet _exec: (stmt: any) => Promise;\nif (_tursoUrl) {\n // Lazy import so std-only (val.town) deploys never load the libSQL client.\n const { createClient } = await import(\"https://esm.sh/@libsql/client@0.14.0/web\");\n const _client = createClient({ url: _tursoUrl, authToken: _env(\"TURSO_AUTH_TOKEN\") });\n _exec = (stmt: any) => _client.execute(stmt);\n} else {\n // Compatibility shim: std/sqlite accepts execute(string) or execute({sql, args}).\n const _bound = _sqlite.execute.bind(_sqlite);\n _exec = (stmt: any) => _bound(stmt);\n}\n\n// RATE-LIMIT RESILIENCE: std/sqlite enforces a shared rate limit. A cold-boot initDB fires ~170\n// CREATE/ALTER/INDEX calls in a burst and can exceed the window MID-init — which used to wedge the\n// whole app in a permanent 500 loop (init fails part-way → memo resets → next request re-bursts →\n// fails again, never converging). We retry rate-limited calls with backoff so init (and any runtime\n// query) PACES THROUGH the limit and completes. Non-rate-limit errors are rethrown immediately.\nconst _isRateLimit = (e: any): boolean => /rate limit|too many request|429/i.test(String((e && e.message) || e));\nconst _backoffMs = (e: any, attempt: number): number => {\n const m = String((e && e.message) || e).match(/retry in (\\d+)\\s*second/i);\n if (m) return Math.min(8000, (Number(m[1]) + 1) * 1000); // honor the server's hint when given\n return Math.min(4000, 500 * Math.pow(2, attempt));\n};\nconst _execRetry = async (stmt: any): Promise => {\n for (let attempt = 0; ; attempt++) {\n try {\n return await _exec(stmt);\n } catch (e) {\n if (attempt < 10 && _isRateLimit(e)) {\n await new Promise((r) => setTimeout(r, _backoffMs(e, attempt)));\n continue;\n }\n throw e;\n }\n }\n};\nexport const sqlite = {\n ..._sqlite,\n execute: async (stmt: string | { sql: string; args?: any[] }, args?: any[]): Promise => {\n if (typeof stmt === \"string\" && args !== undefined) {\n return _execRetry({ sql: stmt, args });\n }\n return _execRetry(stmt as any);\n },\n};\n\n// ─── TENANT CONTEXT (AUTH/TENANT FOUNDATION) ────────────────────────────────\n// Per-request tenant/user/role context carried via AsyncLocalStorage. main.ts wraps each\n// handleRequest in tenantStore.run(ctx, ...). When there is no active store (cron, system\n// boot, recovery APP_TOKEN path) we DEFAULT to t_default/system/owner so all existing data\n// (backfilled to tenant_id=\"t_default\") keeps working exactly as today.\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\n// impersonating / realTenantId are set ONLY for read-only \"view as tenant\" (Phase D): when a\n// platform admin toggles sessions.impersonate_tenant_id, resolveSessionToken redirects tenantId to\n// the target tenant while keeping userId/email/role/isPlatformAdmin = the master. realTenantId holds\n// the master's OWN membership tenant. Optional so every existing ctx literal stays valid.\nexport type TenantCtx = { tenantId: string; userId: string; email: string; role: \"owner\" | \"admin\" | \"member\"; isPlatformAdmin: boolean; impersonating?: boolean; realTenantId?: string };\n// SYSTEM_CTX is the platform-trusted recovery context (APP_TOKEN / cron / boot). It IS platform admin.\nexport const SYSTEM_CTX: TenantCtx = { tenantId: \"t_default\", userId: \"system\", email: \"system\", role: \"owner\", isPlatformAdmin: true };\n\nexport const tenantStore = new AsyncLocalStorage();\nexport function currentCtx(): TenantCtx {\n // The bare no-store default is intentionally NOT platform admin (safe-by-default). Only the\n // explicit SYSTEM_CTX (used by main.ts for cron/recovery) carries isPlatformAdmin:true.\n return tenantStore.getStore() || { tenantId: \"t_default\", userId: \"system\", email: \"system\", role: \"owner\", isPlatformAdmin: false };\n}\nexport function currentTenantId(): string { return currentCtx().tenantId; }\nexport function currentUserId(): string { return currentCtx().userId; }\nexport function currentRole(): \"owner\" | \"admin\" | \"member\" { return currentCtx().role; }\n\n// MEMOIZED: run the full schema setup ONCE per warm instance, not on every request. initDB was\n// awaited per-request, firing dozens of CREATE/ALTER sqlite calls each time → std/sqlite 429\n// \"Too Many Requests\" → intermittent 500s across the app (the \"too many requests\" symptom). The\n// cached promise makes every subsequent call free; on failure we reset so the next request retries.\nlet _initPromise: Promise | null = null;\nexport function initDB(): Promise {\n if (!_initPromise) {\n _initPromise = _initDBImpl().catch((e) => { _initPromise = null; throw e; });\n }\n return _initPromise;\n}\nasync function _initDBImpl(): Promise {\n // Schema lives in ./schema.ts to keep db.ts under val.town's 80KB/file cap. Lazy import\n // avoids a static cycle (schema.ts imports sqlite from db.ts).\n const { runSchema } = await import(\"./schema.ts\");\n await runSchema();\n}\n\n// The starter \"demo\" agents seeded on first boot. Exported so the admin \"Remove demo data\"\n// route can identify + remove untouched seed rows (matched by name+description+system_prompt,\n// so a user-renamed/edited agent is never deleted).\nexport const DEFAULT_AGENT_SEEDS = [\n {\n name: \"SEO Analyst\",\n workspace: \"marketing\",\n description: \"Analyzes SEO performance using Ahrefs and Google Search Console data\",\n system_prompt: \"You are an expert SEO analyst. Analyze search performance data, identify opportunities, and provide actionable recommendations to improve organic search rankings.\",\n tools: JSON.stringify([\"ahrefs\", \"gsc\", \"ga4\"]),\n model: \"claude-sonnet-4-6\",\n },\n {\n name: \"Content Creator\",\n workspace: \"marketing\",\n description: \"Creates and manages content for WordPress, YouTube, and social media\",\n system_prompt: \"You are a creative content strategist. Help plan, write, and optimize content for blogs, videos, and social media platforms to drive engagement and conversions.\",\n tools: JSON.stringify([\"wordpress\", \"youtube\", \"ga4\"]),\n model: \"claude-sonnet-4-6\",\n },\n {\n name: \"Analytics Reporter\",\n workspace: \"marketing\",\n description: \"Generates reports from GA4 and Search Console data\",\n system_prompt: \"You are a data analyst specializing in digital marketing analytics. Create insightful reports from GA4 and Search Console data to track KPIs and identify growth opportunities.\",\n tools: JSON.stringify([\"ga4\", \"gsc\", \"ahrefs\"]),\n model: \"claude-sonnet-4-6\",\n },\n {\n name: \"LinkedIn Outreach\",\n workspace: \"sales\",\n des

Diff · v1075