@aglyn/aglyn 1.0.0-beta.203 → 1.0.0-beta.204

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/aglyn",
-  "version": "1.0.0-beta.203",
+  "version": "1.0.0-beta.204",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -33,16 +33,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.203",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.203",
-    "@aglyn/shared-data-types": "1.0.0-beta.203",
-    "@aglyn/shared-util-email": "1.0.0-beta.203",
-    "@aglyn/shared-util-first-touch": "1.0.0-beta.203",
-    "@aglyn/shared-util-http": "1.0.0-beta.203",
-    "@aglyn/shared-util-logger": "1.0.0-beta.203",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.203",
-    "@aglyn/shared-util-tools": "1.0.0-beta.203",
-    "@aglyn/shared-util-vendor": "1.0.0-beta.203",
+    "@aglyn/shared-data-enums": "1.0.0-beta.204",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.204",
+    "@aglyn/shared-data-types": "1.0.0-beta.204",
+    "@aglyn/shared-util-email": "1.0.0-beta.204",
+    "@aglyn/shared-util-first-touch": "1.0.0-beta.204",
+    "@aglyn/shared-util-http": "1.0.0-beta.204",
+    "@aglyn/shared-util-logger": "1.0.0-beta.204",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.204",
+    "@aglyn/shared-util-tools": "1.0.0-beta.204",
+    "@aglyn/shared-util-vendor": "1.0.0-beta.204",
     "@data-driven-forms/react-form-renderer": "^4.2.0",
     "@msgpack/msgpack": "^3.1.3",
     "@types/unist": "^3.0.3",

package/src/lib/app-utils/console-routes.d.ts

@@ -63,6 +63,7 @@ export declare enum Route {
      * (AGL-2839) — outside the CRM, so it is there on every plan.
      */
     ORG_SETTINGS_PRIVACY = "/[orgSlug]/settings/privacy",
+    ORG_SETTINGS_HOLDS = "/[orgSlug]/settings/holds",
     ORG_SETTINGS_DELETE = "/[orgSlug]/settings/delete",
     /**
      * Billing, section by section (AGL-2501).
@@ -316,6 +317,9 @@ export interface RoutePayload {
     [Route.ORG_SETTINGS_PRIVACY]: {
         orgSlug: string;
     };
+    [Route.ORG_SETTINGS_HOLDS]: {
+        orgSlug: string;
+    };
     [Route.ORG_SETTINGS_DELETE]: {
         orgSlug: string;
     };

package/src/lib/app-utils/console-routes.js

@@ -201,6 +201,10 @@ export var Route = /*#__PURE__*/ function(Route) {
    * Export the people a workspace holds and file a person's erasure
    * (AGL-2839) — outside the CRM, so it is there on every plan.
    */ Route["ORG_SETTINGS_PRIVACY"] = "/[orgSlug]/settings/privacy";
+    // Holds & reviews (AGL-3368): everything on the workspace that was held,
+    // flagged, locked or paused, its status, and the way to request a review.
+    // Where every risk notice's "Request a review" lands (`?notice=<id>`).
+    Route["ORG_SETTINGS_HOLDS"] = "/[orgSlug]/settings/holds";
     Route["ORG_SETTINGS_DELETE"] = "/[orgSlug]/settings/delete";
     /**
    * Billing, section by section (AGL-2501).

package/src/lib/app-utils/console-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/console-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// URL scheme (AGL-621): the org is a first-class path segment `[orgSlug]`\n// so the URL — not client-side precedence — is the source of truth for the\n// active workspace. Host routes nest under `/[orgSlug]/hosts/[host]`; the\n// org area (settings, team, billing, media, data, plugins, support,\n// marketplace) lives directly under `/[orgSlug]`. User-level `manage/*`,\n// staff `admin/*`, and `auth` routes are NOT org-scoped. Hosts stay keyed\n// by doc id here; AGL-622 swaps `[hostId]` for the subdomain slug.\nexport enum Route {\n  ADMIN_ORGS = '/admin/orgs',\n  ADMIN_ORG_DETAIL = '/admin/orgs/[orgId]',\n  ADMIN_ORG_HOST_DETAIL = '/admin/orgs/[orgId]/host/[hostId]',\n  ADMIN_OVERVIEW = '/admin/overview',\n  // Staff coupon management (AGL-1105): create discount coupons + promotion\n  // codes and read the live net-margin rating before committing to one.\n  ADMIN_COUPONS = '/admin/coupons',\n  // The panic button (AGL-1501): platform/org/host/user lockdown controls.\n  ADMIN_LOCKDOWN = '/admin/lockdown',\n  // The narrow lever beside it (AGL-1687): disable or release ONE uploaded\n  // file. Its own page rather than a panel on Lockdown because the input is\n  // an asset, not a scope — the two forms share no field but the reason.\n  ADMIN_MEDIA_QUARANTINE = '/admin/media-quarantine',\n  // The INPUT to the two levers above (AGL-1964). Lockdown and quarantine are\n  // both things an operator does after learning there is a problem; until\n  // this page there was no way for anyone outside the company to say there\n  // was one. Reports arrive from the unauthenticated form the tenant runtime\n  // serves at /api/report-abuse on every origin.\n  ADMIN_ABUSE_REPORTS = '/admin/abuse-reports',\n  // The same input, one collection over (AGL-2310). The marketplace's own\n  // report button wrote `marketplaceReports` from the day it shipped and\n  // nothing read it — every report filed, acknowledged, and unreachable. This\n  // is that queue, deliberately shaped like the abuse one rather than as a\n  // second vocabulary for the same act.\n  // The probes, on a screen (AGL-1900). /api/health/{backups,rate-limits,\n  // signups} and /api/admin/email-health each answered a bad-day question to\n  // a curl and to nothing else; this is where an operator reads them.\n  ADMIN_HEALTH = '/admin/health',\n  // The maintenance jobs, on a screen (AGL-1949). audit-archive,\n  // reap-plugin-artifacts and reverify-plugin-versions accepted the shared\n  // cron secret and nothing else, so the only way to preview or run one was a\n  // shell holding the production secret. Separate from Health because Health\n  // reads and this acts.\n  ADMIN_MAINTENANCE = '/admin/maintenance',\n  // The Texas sales tax return (AGL-1900). The figures AGL-1811 computes had\n  // only a curl to reach them; filing happens on a fixed quarterly calendar\n  // from 2026-09-01, so the return needs a URL a person can bookmark.\n  ADMIN_REVENUE = '/admin/revenue',\n  // Realised band utilization and the margin that follows from it. Beside\n  // Revenue because the two are the halves of one question: that page reports\n  // what came in, this one what serving it cost.\n  ADMIN_MARGIN_UTILIZATION = '/admin/margin-utilization',\n  ADMIN_TAX_RETURN = '/admin/tax-return',\n  ADMIN_AUDIT = '/admin/audit',\n  ADMIN_USERS = '/admin/users',\n  ADMIN_USER_DETAIL = '/admin/users/[uid]',\n  ADMIN_FLAGS = '/admin/flags',\n  // Platform-wide settings that are not a release flag (AGL-2486). The\n  // free-workspace ceiling was the first of them and it opened the\n  // Organizations LIST, above the table — a global lever wedged into the\n  // screen for browsing individual orgs. Settings that describe the platform\n  // rather than one org belong on their own tab, beside the flags.\n  ADMIN_SETTINGS = '/admin/settings',\n  // One submission or listed plugin in full (AGL-959): the queue index is\n  // for scanning, this is where a reviewer reads the manifest, weighs the\n  // verifier findings and acts.\n  // A page a plugin adds to the staff area (AGL-2939), rendered by the\n  // console's generic staff route. The console's own staff routes win the\n  // segments they use.\n  ADMIN_STAFF_PAGE = '/admin/[staffPage]',\n  // Staff support-ticket queue (AGL-849): the operator side of the\n  // subscriber `MANAGE_SUPPORT_TICKETS` page — every org's tickets in one place.\n  ADMIN_SUPPORT = '/admin/support',\n  // Do-not-contact list (AGL-1592): the intake and the queue for Privacy\n  // Policy v4 §11's marketing call/text opt-out, and for \"delete the phone\n  // number you hold for me\".\n  ADMIN_CONTACT_SUPPRESSIONS = '/admin/contact-suppressions',\n  ADMIN_EMAILS = '/admin/emails',\n  // The one besigner route with no host and no org in it (AGL-749). A system\n  // email belongs to the platform, not to a workspace, so it is staff-scoped\n  // like the rest of `/admin/*` rather than nested under `[orgSlug]`.\n  ADMIN_EMAIL_BESIGNER = '/admin/emails/[templateKey]/versions/[versionId]/besigner',\n  ORG_HOME = '/[orgSlug]',\n  ORG_MEDIA = '/[orgSlug]/media',\n  ORG_DATA = '/[orgSlug]/data',\n  /*\n   * The organization's address book.\n   *\n   * Org-scoped rather than a section of a site, because it answers the one\n   * question a site page cannot: which of the organization's sites know a\n   * given person. A contact document is shared by every site in the org — one\n   * human who touched two of them is one row — and until this route there was\n   * no surface anywhere that showed the deduped person, so the dedupe the\n   * shared address book exists for was invisible and the billing unit\n   * (unique people per org) had nothing standing behind it.\n   *\n   * It shows identity, which sites hold the person, and consent per site. The\n   * per-site CRM — notes, tags, timeline, order history — stays on the site's\n   * own Contacts surface, because those are the holder's business records and\n   * this is the one route designed to cross between holders.\n   *\n   * A LEGACY ADDRESS since AGL-2630: the page behind it redirects, permanently,\n   * to the org-level CRM hub's contacts section. It stays declared so a link\n   * kept from before — a bookmark, a docs page, an email — still resolves,\n   * and so the redirect has a constant to be built from rather than a string.\n   */\n  ORG_CONTACTS = '/[orgSlug]/contacts',\n  /*\n   * The organization-level CRM hub (AGL-2630): the same sections the site hub\n   * has — `/[orgSlug]/crm/<section>[/<recordId>]` — mounted with an ORG scope,\n   * for an org-wide member who works every site's people at once. A bare\n   * `/crm` lands on the first section the reader may open, as the site hub's\n   * does. What this route adds over the site hub is the cross-site fact the\n   * old address book carried — which sites know a person — and what it takes\n   * from it is the site every create must name, since a record is always\n   * captured BY a site.\n   */\n  ORG_CRM = '/[orgSlug]/crm',\n  /*\n   * The generic ORGANIZATION-level plugin route (AGL-2974): every surface an\n   * extension declares in `orgNavItems` is served here, at\n   * `/[orgSlug]/<href>[/<section>…]`, by\n   * `app/(app)/[orgSlug]/[...pluginSlug]/page.tsx`. The org twin of\n   * `HOST_PLUGIN`, and like it the one org route whose leaf segment is data:\n   * every named org route in this enum wins over it.\n   */\n  ORG_PLUGIN = '/[orgSlug]/[pluginSlug]',\n  ORG_PLUGINS = '/[orgSlug]/plugins',\n  // One plugin, as installed in this workspace (AGL-1007): scope, settings\n  // and permissions in one place. The segment takes EITHER identifier\n  // (AGL-1010) — a listing id for a marketplace install, a registry id for a\n  // first-party plugin — hence `pluginRef` rather than `listingId`.\n  ORG_PLUGIN_INSTALLATION = '/[orgSlug]/plugins/[pluginRef]',\n  // Org-scope marketplace (AGL-772): the single place to browse, view and\n  // install marketplace items. The per-site tab it replaced, and the retired\n  // `/[orgSlug]/marketplace` seller area, were removed with the rest of the\n  // `marketplace` naming in AGL-975 — the word is being freed for a public\n  // forum, and a redirect stub sitting on `/marketplace` would have taken the\n  // one path that feature wants.\n  /*\n   * The marketplace's own SECTIONS are not here any more (AGL-3080). Eight\n   * of them — browse, licences, upload, the four seller cards and the\n   * publish form — were hand-written console routes, and became an\n   * `orgNavItems` declaration whose `sections` name those segments once, in\n   * the plugin. Restating them here was a second copy of a list the plugin\n   * owns, and every entry had zero callers the moment the routes went.\n   *\n   * What stays is what the CONSOLE still builds: the surface itself, a\n   * listing, a publisher, and the installed tab that the org plugins card\n   * links across to. A console page linking into a plugin's surface is the\n   * ordinary case; a console page enumerating that surface's sections is\n   * not.\n   */\n  ORG_MARKETPLACE = '/[orgSlug]/marketplace',\n  /*\n   * Marketplace SECTIONS are routes (AGL-2501), for the reason the settings\n   * and account sections are: a panel that is not open should cost nothing,\n   * and the seller half of this hub reads the organization's REVENUE.\n   *\n   * The four seller sections are the reason the layout gates rather than the\n   * rail. As tabs they were simply not rendered for a member without\n   * `publishToMarketplace`; as routes each one is reachable by typing its URL,\n   * so the refusal has to sit above them all rather than in the list that\n   * draws them.\n   *\n   * Every segment here is shorter than the ten characters `createResourceUid`\n   * emits, so none of them can ever shadow a real `[listingId]` sitting at the\n   * same level. `upload` rather than `publish` because `publish/plugin` is\n   * already a route beneath this one, and two directories contributing the\n   * same segment is a tree Next cannot resolve a layout for.\n   */\n  ORG_MARKETPLACE_INSTALLED = '/[orgSlug]/marketplace/installed',\n  ORG_MARKETPLACE_LISTING = '/[orgSlug]/marketplace/[listingId]',\n  ORG_MARKETPLACE_PUBLISHER = '/[orgSlug]/marketplace/publisher/[handle]',\n  // Publishing a plugin is a page, not a modal (AGL-1078): the most\n  // consequential thing a publisher does now has a URL, so it can be linked,\n  // reloaded, and reached from a listing to ship an update.\n  ORG_SETTINGS = '/[orgSlug]/settings',\n  /*\n   * Settings SECTIONS are routes (AGL-2501). `HubTabs` mounted every panel —\n   * `keepMounted`, with `lazy` off by default and passed by nobody — so\n   * opening General also mounted the API-keys, SSO and data-export cards and\n   * ran every read in them. Routes mount one page and code-split per route.\n   * `ORG_SETTINGS` itself redirects to General.\n   */\n  ORG_SETTINGS_GENERAL = '/[orgSlug]/settings/general',\n  ORG_SETTINGS_PROFILE = '/[orgSlug]/settings/profile',\n  ORG_SETTINGS_PLUGINS = '/[orgSlug]/settings/plugins',\n  ORG_SETTINGS_API_KEYS = '/[orgSlug]/settings/api-keys',\n  ORG_SETTINGS_BRANDING = '/[orgSlug]/settings/branding',\n  ORG_SETTINGS_SSO = '/[orgSlug]/settings/sso',\n  ORG_SETTINGS_OWNERSHIP = '/[orgSlug]/settings/ownership',\n  /**\n   * Export the people a workspace holds and file a person's erasure\n   * (AGL-2839) — outside the CRM, so it is there on every plan.\n   */\n  ORG_SETTINGS_PRIVACY = '/[orgSlug]/settings/privacy',\n  ORG_SETTINGS_DELETE = '/[orgSlug]/settings/delete',\n  /**\n   * Billing, section by section (AGL-2501).\n   *\n   * `MANAGE_BILLING` is unchanged and is the PLAN section — it resolves to a\n   * page inside a route group, which adds no path segment. That is what makes\n   * this split free: every link in the console, every hash anchor\n   * (`#addons`, `#collaborator-seats`) and Stripe's own dunning mail all point\n   * here already and none of them moves. No redirect, and no `?tab=` shim to\n   * carry forever.\n   */\n  MANAGE_BILLING = '/[orgSlug]/billing',\n  MANAGE_BILLING_USAGE = '/[orgSlug]/billing/usage',\n  MANAGE_BILLING_INVOICES = '/[orgSlug]/billing/invoices',\n  MANAGE_BILLING_SETTINGS = '/[orgSlug]/billing/settings',\n  // The ONE billing URL that carries no org (AGL-2430).\n  //\n  // Everything else on this table is org-scoped, which is correct for a\n  // console and wrong for the only caller that cannot template a URL:\n  // Stripe's dunning emails. \"Payment method updates\" takes a single static\n  // link for every customer in the account — there is no `{{org}}` to\n  // interpolate — so a table with no org-agnostic billing entry means those\n  // emails can only ever point at a page that is not billing. Today all four\n  // of them point at the marketing homepage, which is how a failed card\n  // becomes a cancelled subscription with no reachable way to fix it.\n  //\n  // This resolves the org from the SESSION instead of from the URL: one\n  // workspace goes straight through, several offer a choice, none says so.\n  // `billing` is a reserved subdomain (`RESERVED_SUBDOMAINS`), so no org can\n  // hold this slug and the literal segment can never shadow a real\n  // `/[orgSlug]`.\n  BILLING_ENTRY = '/billing',\n  MANAGE_USER_SETTINGS = '/manage/user',\n  /*\n   * Account SECTIONS are routes (AGL-2501). `HubTabs` mounted every panel —\n   * `keepMounted`, with `lazy` off by default and passed by nobody — so\n   * opening Account also mounted the email-addresses, passkeys, recent\n   * sign-ins, data-export and close-account cards and ran every read in them.\n   * Routes mount one page and code-split per route.\n   *\n   * The segments are the ids the panels carried, because a transactional\n   * email already in people's inboxes links `/manage/user?tab=security`:\n   * `MANAGE_USER_SETTINGS` forwards each of those ids to the section that\n   * holds it, and the segment matching the id is what keeps that map a\n   * one-liner rather than a second naming scheme.\n   */\n  MANAGE_USER_ACCOUNT = '/manage/user/account',\n  MANAGE_USER_EMAILS = '/manage/user/emails',\n  MANAGE_USER_PROFILE = '/manage/user/profile',\n  MANAGE_USER_BASIC = '/manage/user/basic',\n  MANAGE_USER_SECURITY = '/manage/user/security',\n  MANAGE_USER_CLOSE = '/manage/user/close',\n  MANAGE_NOTIFICATIONS = '/manage/notifications',\n  /*\n   * The preferences, off the feed (AGL-3226).\n   *\n   * They lived in the header of the feed itself, which was already the\n   * tallest thing on that page before per-channel and per-scope settings\n   * multiplied them — and it put an edit form above the list it edits, which\n   * the console does nowhere else.\n   *\n   * A CHILD of the feed rather than a sibling under `/manage`, because the\n   * relationship is exactly that: it configures what the page above it shows.\n   * That also keeps `/manage/notifications` the address in the transactional\n   * mail already in people's inboxes, which keeps working and now carries a\n   * button to here.\n   */\n  MANAGE_NOTIFICATION_SETTINGS = '/manage/notifications/settings',\n  /*\n   * A URL for the defect channel (AGL-2486). \"Report an issue\" was reachable\n   * only by opening the account menu, so nothing outside the console could\n   * send anyone to it — the repo's README pointed at GitHub issues, which we\n   * do not use, and every other \"tell us about it\" surface had the same\n   * problem. User-level rather than org-scoped because the dialog is: it\n   * needs no workspace, no role and no paid plan.\n   */\n  MANAGE_REPORT_ISSUE = '/manage/report-issue',\n  AUTH_SIGN_IN = '/signin',\n  AUTH_SIGN_OUT = '/signout',\n  AUTH_SIGN_UP = '/signup',\n  AUTH_VERIFY_EMAIL = '/verify-email',\n  HOST_LIST = '/[orgSlug]/hosts',\n  HOST_CONTENT = '/[orgSlug]/hosts/[host]/content',\n  // The collection is a PATH SEGMENT, not `?collection=` (AGL-2498).\n  //\n  // It was a query parameter because the manager began as one page with a\n  // Select on it, and the Select was the only thing that knew which\n  // collection you were looking at. That is the wrong owner: which collection\n  // is open is the page's IDENTITY, not a filter applied to it. As a\n  // parameter it could be dropped by any link that rebuilt the query, it\n  // sorted below `?tab=` in a URL nobody could read, and — the reason this\n  // moved — it left the entry beneath it with nowhere to hang: an entry is\n  // addressed `collection + entry`, and half of that address cannot live in\n  // the path while the other half lives in the query.\n  //\n  // The segment is the collection's SLUG, not its document id, and that is a\n  // correction rather than a preference. Collection document ids are not\n  // uniform — the seeded ones were given readable ids (`blog`, `changelog`)\n  // and everything created since gets a `createResourceUid`, so routing by id\n  // produced `/content/changelog` beside `/content/QgXv7lU_rG` on ONE site.\n  //\n  // A slug is the right key on the merits too: it is unique per host and kind\n  // (claimed in a transaction by /api/hosts/collections), it is the\n  // collection's own public address, and it is the thing an author recognises.\n  // A document id is still ACCEPTED and rewritten to the slug form, so no\n  // existing link breaks.\n  //\n  // `?collection=` still resolves the same way (AGL-845's DAM deep links are\n  // in the wild).\n  HOST_CONTENT_COLLECTION = '/[orgSlug]/hosts/[host]/content/[collectionSlug]',\n  // One entry's detail page (AGL-2498). `entries` is a LITERAL segment rather\n  // than `content/[collectionId]/[entryId]`, and it is load-bearing twice\n  // over: it mirrors the Firestore path the entry actually lives at\n  // (`collections/{c}/entries/{e}`), and it keeps the id space clear so a\n  // later sibling — a collection's own settings page, say — cannot be\n  // shadowed by an entry that happens to be called the same thing.\n  //\n  // `[entryId]` also carries the sentinel `new`, which is a draft that has no\n  // document yet. Entry ids come from `createResourceUid`, so nothing real\n  // can collide with it.\n  CONTENT_ENTRY_DETAILS = '/[orgSlug]/hosts/[host]/content/[collectionSlug]/entries/[entryId]',\n  MANAGE_TEAM = '/[orgSlug]/team',\n  /*\n   * Team SECTIONS are routes, not tabs (AGL-2501). A section's bundle then\n   * arrives when a reader opens it and never before, the section is linkable,\n   * and the active state is a fact about the URL rather than state that has to\n   * be kept in sync with it. `MANAGE_TEAM` itself redirects to members.\n   */\n  MANAGE_TEAM_MEMBERS = '/[orgSlug]/team/members',\n  MANAGE_TEAM_ROLES = '/[orgSlug]/team/roles',\n  MANAGE_TEAM_ACTIVITY = '/[orgSlug]/team/activity',\n  MANAGE_TEAM_MEMBER = '/[orgSlug]/team/[uid]',\n  // Support is an UMBRELLA, not a page (AGL-1158). The two channels beneath\n  // it are separate features that were only ever one screen: they are gated\n  // differently (tickets need a first-response commitment, from Pro; the\n  // forum is open to every tier including Free) and they fail independently.\n  // Sharing one route made them share a blast radius — AGL-1157 was one bad\n  // line in the common loader that emptied BOTH lists at once.\n  //\n  // `MANAGE_SUPPORT` itself stays, and stays the nav tab's href: it now\n  // forwards to whichever channel the org's tier makes primary, so a\n  // forum-only workspace lands on a whole forum instead of a half-empty page\n  // beside a ticket card it may not use.\n  MANAGE_SUPPORT = '/[orgSlug]/support',\n  MANAGE_SUPPORT_TICKETS = '/[orgSlug]/support/tickets',\n  MANAGE_SUPPORT_FORUM = '/[orgSlug]/support/forum',\n  /*\n   * The ONE support URL that carries no org (AGL-3265), and the second member\n   * of the apex category `BILLING_ENTRY` opened.\n   *\n   * Everything a person is handed when they need help — a receipt, a system\n   * email footer, a Stripe customer portal, a self-host runbook — stores ONE\n   * link for every customer, with no workspace to interpolate. `/[orgSlug]`\n   * cannot be templated into any of them, so the only support address those\n   * surfaces could carry was one outside the console entirely.\n   *\n   * This resolves the workspace from the SESSION instead: one workspace goes\n   * straight through, several offer a choice, none says so. It forwards to\n   * `MANAGE_SUPPORT`, which is itself an umbrella — so the tier decision about\n   * tickets versus the forum stays in the one place that already makes it.\n   *\n   * `support` is a reserved subdomain (`RESERVED_SUBDOMAINS` in\n   * `host-naming.ts`), so no org can hold this slug and the literal segment\n   * can never shadow a real `/[orgSlug]`. That is the same guarantee\n   * `BILLING_ENTRY` rests on, and it is a precondition rather than a\n   * coincidence: an apex route whose segment an org could claim would take a\n   * workspace's own address away from it.\n   */\n  SUPPORT_ENTRY = '/support',\n  HOST_DASHBOARD = '/[orgSlug]/hosts/[host]',\n  // The catch-all console page a plugin's own nav items resolve against\n  // (`app/(app)/[orgSlug]/hosts/[host]/[pluginSlug]/page.tsx`). Plugin slugs\n  // are open-ended, so this is the one route whose leaf segment is data.\n  HOST_PLUGIN = '/[orgSlug]/hosts/[host]/[pluginSlug]',\n  HOST_INBOX = '/[orgSlug]/hosts/[host]/inbox',\n  HOST_CONTACTS = '/[orgSlug]/hosts/[host]/contacts',\n  HOST_MEDIA = '/[orgSlug]/hosts/[host]/media',\n  HOST_SETUP = '/[orgSlug]/hosts/[host]/setup',\n  /*\n   * Setup SECTIONS are routes (AGL-2501), so an unopened one costs neither a\n   * read nor a byte. `HOST_SETUP` stays the nav tab's href and redirects to\n   * Basic details, honouring the `?tab=` ids these sections were deep-linked\n   * by — unlike the settings and marketplace hubs, links holding those ids are\n   * demonstrably in the wild and two are built in this repo.\n   */\n  HOST_SETUP_DETAILS = '/[orgSlug]/hosts/[host]/setup/details',\n  HOST_SETUP_SEO = '/[orgSlug]/hosts/[host]/setup/seo',\n  HOST_SETUP_TRACKING = '/[orgSlug]/hosts/[host]/setup/tracking',\n  HOST_SETUP_THEME = '/[orgSlug]/hosts/[host]/setup/theme',\n  HOST_SETUP_EMAILS = '/[orgSlug]/hosts/[host]/setup/emails',\n  // Host Admin area (AGL-1014): owner/admin-only controls — per-site plugin\n  // enablement and the Danger zone — out of the Setup page collaborators\n  // legitimately visit.\n  HOST_ADMIN = '/[orgSlug]/hosts/[host]/admin',\n  /*\n   * Site-admin SECTIONS are routes (AGL-2501), so an unopened one costs neither\n   * a read nor a byte. `HOST_ADMIN` redirects to Plugins and still honours the\n   * `?tab=` ids these sections were deep-linked by.\n   */\n  /*\n   * The site as an OBJECT: its name in the console and the subdomain it\n   * answers to. First in the rail because an address and a name are what\n   * identify the thing every other section governs.\n   */\n  HOST_ADMIN_GENERAL = '/[orgSlug]/hosts/[host]/admin/general',\n  HOST_ADMIN_PLUGINS = '/[orgSlug]/hosts/[host]/admin/plugins',\n  /*\n   * One plugin, as installed on ONE site (AGL-428, AGL-1014) — the\n   * site-scoped twin of `ORG_PLUGIN_INSTALLATION`, reached by clicking a row\n   * on the site's plugin\n   * list exactly as the workspace list opens its own detail page. The segment\n   * is `[pluginRef]` and accepts either identifier for the same reason the\n   * workspace route does (AGL-1010): a marketplace install is keyed by listing\n   * id, a first-party plugin by its registry id, and an admin does not think\n   * of the two as different things.\n   */\n  HOST_ADMIN_PLUGIN = '/[orgSlug]/hosts/[host]/admin/plugins/[pluginRef]',\n  HOST_ADMIN_DOMAIN = '/[orgSlug]/hosts/[host]/admin/domain',\n  HOST_ADMIN_SECURITY = '/[orgSlug]/hosts/[host]/admin/security',\n  /*\n   * The designed screen behind each status code, and the switch that shows the\n   * 503 one at every address at once (AGL-3178).\n   *\n   * Beside Security because both answer what a visitor's browser is handed on\n   * a page the site did not design for them, and above Activity because it is\n   * a control rather than a record.\n   */\n  HOST_ADMIN_ERROR_PAGES = '/[orgSlug]/hosts/[host]/admin/error-pages',\n  HOST_ADMIN_ACTIVITY = '/[orgSlug]/hosts/[host]/admin/activity',\n  /*\n   * Backup, restore and publishing the site as a template — moving the whole\n   * site somewhere else, or bringing it back. Its own section rather than the\n   * Danger zone: restore overwrites, but export and publishing a template do\n   * not, and filing all three under a destructive heading mislabels two of\n   * them.\n   */\n  HOST_ADMIN_BACKUP = '/[orgSlug]/hosts/[host]/admin/backup',\n  HOST_ADMIN_DANGER = '/[orgSlug]/hosts/[host]/admin/danger',\n  HOST_THEME = '/[orgSlug]/hosts/[host]/theme',\n  /*\n   * The automation section: Workflows, Actions and Webhooks under one parent.\n   * The parent is named for what the three have in common, so no tab shares a\n   * name with the section that contains it.\n   */\n  HOST_AUTOMATION = '/[orgSlug]/hosts/[host]/automation',\n  /**\n   * The address the automation section answered to before it had a name of\n   * its own. Nothing links here — `HOST_AUTOMATION` is what the nav, the\n   * search results and the activity feed build — but the console redirects it\n   * permanently, so a held bookmark still lands on the section (and keeps its\n   * `?tab=`, which never changed).\n   *\n   * Kept on the table rather than as a bare literal in `next.config.js`\n   * because the redirect and the address it serves are one fact:\n   * `automation-section.spec.ts` reads this entry and fails if the rule for\n   * it goes missing.\n   */\n  HOST_WORKFLOWS = '/[orgSlug]/hosts/[host]/workflows',\n  HOST_DATA = '/[orgSlug]/hosts/[host]/data',\n  HOST_LOGIC = '/[orgSlug]/hosts/[host]/logic',\n  HOST_PRODUCTS = '/[orgSlug]/hosts/[host]/products',\n  HOST_COMPONENTS = '/[orgSlug]/hosts/[host]/components',\n  // Component detail (AGL-693): the listing links here, and the besigner is\n  // reached from here — matching SCREEN_DETAILS rather than jumping a row\n  // straight into the editor.\n  COMPONENT_DETAILS = '/[orgSlug]/hosts/[host]/components/[componentId]',\n  HOST_FORMS = '/[orgSlug]/hosts/[host]/forms',\n  // A form is a designable document, so its surface is the component one:\n  // a list, a detail page that owns the versions, and the besigner reached\n  // from there. Deliberately NOT a row that jumps into the editor — a form's\n  // routing and consent field are edited on the detail page, and those decide\n  // what the design is then checked against.\n  FORM_DETAILS = '/[orgSlug]/hosts/[host]/forms/[formId]',\n  HOST_TEMPLATES = '/[orgSlug]/hosts/[host]/templates',\n  // Template detail (AGL-694), the counterpart to COMPONENT_DETAILS. Note\n  // TEMPLATE_BESIGNER carries no versionId — templates version but never\n  // publish, so there is no \"current\" pointer to route through.\n  TEMPLATE_DETAILS = '/[orgSlug]/hosts/[host]/templates/[templateId]',\n  HOST_MARKETING = '/[orgSlug]/hosts/[host]/marketing',\n  HOST_BOOKINGS = '/[orgSlug]/hosts/[host]/bookings',\n  // Events now come from the events-calendar plugin, served by the generic\n  // `[orgSlug]/hosts/[host]/[pluginSlug]` route (AGL-394).\n  HOST_REDIRECTS = '/[orgSlug]/hosts/[host]/redirects',\n  HOST_USERS = '/[orgSlug]/hosts/[host]/users',\n  HOST_ANALYTICS = '/[orgSlug]/hosts/[host]/analytics',\n  COMPONENT_BESIGNER = '/[orgSlug]/hosts/[host]/components/[componentId]/versions/[versionId]/besigner',\n  FORM_BESIGNER = '/[orgSlug]/hosts/[host]/forms/[formId]/versions/[versionId]/besigner',\n  TEMPLATE_BESIGNER = '/[orgSlug]/hosts/[host]/templates/[templateId]/besigner',\n  LAYOUT_BESIGNER = '/[orgSlug]/hosts/[host]/layouts/[layoutId]/versions/[versionId]/besigner',\n  // Draft preview for every besigner document kind (AGL-1203). Screens had\n  // the only preview route; components, layouts and templates showed a\n  // Preview button that did nothing. Each renders the same localStorage\n  // snapshot through the site renderer, so they work on localhost with no\n  // deployment. TEMPLATE_PREVIEW carries no versionId, matching\n  // TEMPLATE_BESIGNER.\n  COMPONENT_PREVIEW = '/[orgSlug]/hosts/[host]/components/[componentId]/versions/[versionId]/preview',\n  FORM_PREVIEW = '/[orgSlug]/hosts/[host]/forms/[formId]/versions/[versionId]/preview',\n  TEMPLATE_PREVIEW = '/[orgSlug]/hosts/[host]/templates/[templateId]/preview',\n  LAYOUT_PREVIEW = '/[orgSlug]/hosts/[host]/layouts/[layoutId]/versions/[versionId]/preview',\n  // The list sits at the bare path, like HOST_COMPONENTS. It used to be\n  // `/layouts/list`: the pages router had a `layouts/index.tsx` that\n  // redirected to `layouts/list.tsx`, and the App Router migration carried\n  // the pair over verbatim. Components, added later, had no such legacy and\n  // put its list at the bare path — which is the shape we want everywhere.\n  // `/layouts/list` still serves the same page so old links survive — an\n  // alias, not a redirect, because the bare path used to answer a cached 308\n  // pointing at `/list` and redirecting back would loop. See the comment in\n  // `app/(app)/[orgSlug]/hosts/[host]/screens/list/page.tsx`.\n  HOST_LAYOUTS = '/[orgSlug]/hosts/[host]/layouts',\n  // Layout detail (AGL-695), completing the list → detail → besigner shape\n  // across screens, components, templates and layouts.\n  LAYOUT_DETAILS = '/[orgSlug]/hosts/[host]/layouts/[layoutId]',\n  SCREEN_BESIGNER = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/besigner',\n  // Per-site email besigner (AGL-770): a site owner designs a transactional\n  // email their site sends. The host-scoped sibling of the staff system-email\n  // editor (ADMIN_EMAIL_BESIGNER).\n  HOST_EMAIL_BESIGNER = '/[orgSlug]/hosts/[host]/emails/[templateKey]/versions/[versionId]/besigner',\n  SCREEN_DETAILS = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/view',\n  SCREEN_PREVIEW = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/preview',\n  // Bare path, matching HOST_LAYOUTS and HOST_COMPONENTS — see the note on\n  // HOST_LAYOUTS. `/screens/list` still serves the same page as an alias.\n  HOST_SCREENS = '/[orgSlug]/hosts/[host]/screens',\n}\n\n/**\n * Params required to build each {@link Route}.\n *\n * Deliberately NOT extended from an index signature (AGL-685). It used to be\n * `extends Record<keyof any, any>`, which meant any `Route` missing an entry\n * here silently typed its payload as `any` — `Route.HOST_SETUP` was one of\n * them, and `buildRoute(Route.HOST_SETUP, { hostId })` compiled cleanly while\n * emitting `/<orgSlug?>/hosts/<host?>/setup`. Without the index signature a\n * new `Route` with no entry is a compile error, which is the whole point of\n * the payload being required in the first place.\n */\nexport interface RoutePayload {\n  [Route.AUTH_SIGN_UP]: undefined\n  [Route.AUTH_SIGN_IN]: undefined\n  [Route.AUTH_SIGN_OUT]: undefined\n  [Route.AUTH_VERIFY_EMAIL]: undefined\n  [Route.SCREEN_BESIGNER]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.ORG_HOME]: { orgSlug: string }\n  [Route.HOST_DASHBOARD]: { orgSlug: string; host: string }\n  [Route.ADMIN_ORGS]: undefined\n  [Route.ADMIN_ORG_DETAIL]: { orgId: string }\n  [Route.ADMIN_ORG_HOST_DETAIL]: { orgId: string; hostId: string }\n  [Route.ADMIN_OVERVIEW]: undefined\n  [Route.ADMIN_COUPONS]: undefined\n  [Route.ADMIN_LOCKDOWN]: undefined\n  [Route.ADMIN_MEDIA_QUARANTINE]: undefined\n  [Route.ADMIN_ABUSE_REPORTS]: undefined\n  [Route.ADMIN_HEALTH]: undefined\n  [Route.ADMIN_MAINTENANCE]: undefined\n  [Route.ADMIN_REVENUE]: undefined\n  [Route.ADMIN_MARGIN_UTILIZATION]: undefined\n  [Route.ADMIN_TAX_RETURN]: undefined\n  [Route.ADMIN_AUDIT]: undefined\n  [Route.ADMIN_USERS]: undefined\n  [Route.ADMIN_USER_DETAIL]: { uid: string }\n  [Route.ADMIN_FLAGS]: undefined\n  [Route.ADMIN_SETTINGS]: undefined\n  [Route.ADMIN_STAFF_PAGE]: { staffPage: string }\n  [Route.ADMIN_SUPPORT]: undefined\n  [Route.ADMIN_CONTACT_SUPPRESSIONS]: undefined\n  [Route.ADMIN_EMAILS]: undefined\n  [Route.ADMIN_EMAIL_BESIGNER]: { templateKey: string; versionId: string }\n  [Route.HOST_EMAIL_BESIGNER]: {\n    orgSlug: string\n    host: string\n    templateKey: string\n    versionId: string\n  }\n  [Route.ORG_MEDIA]: { orgSlug: string }\n  [Route.ORG_DATA]: { orgSlug: string }\n  [Route.ORG_CONTACTS]: { orgSlug: string }\n  [Route.ORG_CRM]: { orgSlug: string }\n  [Route.ORG_PLUGIN]: { orgSlug: string; pluginSlug: string }\n  [Route.ORG_PLUGINS]: { orgSlug: string }\n  [Route.ORG_PLUGIN_INSTALLATION]: { orgSlug: string; pluginRef: string }\n  [Route.ORG_MARKETPLACE]: { orgSlug: string }\n  [Route.ORG_MARKETPLACE_INSTALLED]: { orgSlug: string }\n  [Route.ORG_MARKETPLACE_LISTING]: { orgSlug: string; listingId: string }\n  [Route.ORG_MARKETPLACE_PUBLISHER]: { orgSlug: string; handle: string }\n  [Route.MANAGE_USER_SETTINGS]: undefined\n  [Route.MANAGE_USER_ACCOUNT]: undefined\n  [Route.MANAGE_USER_EMAILS]: undefined\n  [Route.MANAGE_USER_PROFILE]: undefined\n  [Route.MANAGE_USER_BASIC]: undefined\n  [Route.MANAGE_USER_SECURITY]: undefined\n  [Route.MANAGE_USER_CLOSE]: undefined\n  [Route.MANAGE_NOTIFICATIONS]: undefined\n  [Route.MANAGE_NOTIFICATION_SETTINGS]: undefined\n  [Route.MANAGE_REPORT_ISSUE]: undefined\n  [Route.ORG_SETTINGS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_GENERAL]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PROFILE]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PLUGINS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_API_KEYS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_BRANDING]: { orgSlug: string }\n  [Route.ORG_SETTINGS_SSO]: { orgSlug: string }\n  [Route.ORG_SETTINGS_OWNERSHIP]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PRIVACY]: { orgSlug: string }\n  [Route.ORG_SETTINGS_DELETE]: { orgSlug: string }\n  [Route.HOST_LIST]: { orgSlug: string }\n  [Route.HOST_CONTENT]: { orgSlug: string; host: string }\n  [Route.HOST_CONTENT_COLLECTION]: {\n    orgSlug: string\n    host: string\n    /** The collection's slug — see the route. A document id also resolves. */\n    collectionSlug: string\n  }\n  [Route.CONTENT_ENTRY_DETAILS]: {\n    orgSlug: string\n    host: string\n    collectionSlug: string\n    /**\n     * An entry id, or the literal `new` for a draft with no document yet.\n     *\n     * An ID here while the collection above is a SLUG, deliberately. An entry\n     * slug is unique only WITHIN its collection and it is editable on the\n     * detail page — so routing by it would move the console address out from\n     * under someone in the middle of typing in the slug field, and a draft has\n     * no slug at all to route by. The entry id is also what every activity\n     * record and the DAM's \"Used on\" list already carry.\n     */\n    entryId: string\n  }\n  [Route.MANAGE_TEAM]: { orgSlug: string }\n  [Route.MANAGE_TEAM_MEMBERS]: { orgSlug: string }\n  [Route.MANAGE_TEAM_ROLES]: { orgSlug: string }\n  [Route.MANAGE_TEAM_ACTIVITY]: { orgSlug: string }\n  [Route.MANAGE_TEAM_MEMBER]: { orgSlug: string; uid: string }\n  [Route.MANAGE_SUPPORT]: { orgSlug: string }\n  [Route.MANAGE_SUPPORT_TICKETS]: { orgSlug: string }\n  [Route.MANAGE_SUPPORT_FORUM]: { orgSlug: string }\n  [Route.MANAGE_BILLING]: { orgSlug: string }\n  [Route.MANAGE_BILLING_USAGE]: { orgSlug: string }\n  [Route.MANAGE_BILLING_INVOICES]: { orgSlug: string }\n  [Route.MANAGE_BILLING_SETTINGS]: { orgSlug: string }\n  [Route.BILLING_ENTRY]: undefined\n  [Route.SUPPORT_ENTRY]: undefined\n  [Route.HOST_INBOX]: { orgSlug: string; host: string }\n  [Route.HOST_CONTACTS]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_DETAILS]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_SEO]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_TRACKING]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_THEME]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_EMAILS]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_GENERAL]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_PLUGINS]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_PLUGIN]: { orgSlug: string; host: string; pluginRef: string }\n  [Route.HOST_ADMIN_DOMAIN]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_SECURITY]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_ERROR_PAGES]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_ACTIVITY]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_BACKUP]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_DANGER]: { orgSlug: string; host: string }\n  [Route.HOST_PLUGIN]: { orgSlug: string; host: string; pluginSlug: string }\n  [Route.HOST_MEDIA]: { orgSlug: string; host: string }\n  [Route.HOST_THEME]: { orgSlug: string; host: string }\n  [Route.HOST_AUTOMATION]: { orgSlug: string; host: string }\n  [Route.HOST_WORKFLOWS]: { orgSlug: string; host: string }\n  [Route.HOST_DATA]: { orgSlug: string; host: string }\n  [Route.HOST_LOGIC]: { orgSlug: string; host: string }\n  [Route.HOST_PRODUCTS]: { orgSlug: string; host: string }\n  [Route.HOST_COMPONENTS]: { orgSlug: string; host: string }\n  [Route.COMPONENT_DETAILS]: {\n    orgSlug: string\n    host: string\n    componentId: string\n  }\n  [Route.HOST_FORMS]: { orgSlug: string; host: string }\n  [Route.FORM_DETAILS]: {\n    orgSlug: string\n    host: string\n    formId: string\n  }\n  [Route.HOST_TEMPLATES]: { orgSlug: string; host: string }\n  [Route.TEMPLATE_DETAILS]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.HOST_MARKETING]: { orgSlug: string; host: string }\n  [Route.HOST_BOOKINGS]: { orgSlug: string; host: string }\n  [Route.HOST_REDIRECTS]: { orgSlug: string; host: string }\n  [Route.HOST_USERS]: { orgSlug: string; host: string }\n  [Route.HOST_ANALYTICS]: { orgSlug: string; host: string }\n  [Route.COMPONENT_BESIGNER]: {\n    orgSlug: string\n    host: string\n    componentId: string\n    versionId: string\n  }\n  [Route.FORM_BESIGNER]: {\n    orgSlug: string\n    host: string\n    formId: string\n    versionId: string\n  }\n  [Route.TEMPLATE_BESIGNER]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.LAYOUT_BESIGNER]: {\n    orgSlug: string\n    host: string\n    layoutId: string\n    versionId: string\n  }\n  [Route.COMPONENT_PREVIEW]: {\n    orgSlug: string\n    host: string\n    componentId: string\n    versionId: string\n  }\n  [Route.FORM_PREVIEW]: {\n    orgSlug: string\n    host: string\n    formId: string\n    versionId: string\n  }\n  [Route.TEMPLATE_PREVIEW]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.LAYOUT_PREVIEW]: {\n    orgSlug: string\n    host: string\n    layoutId: string\n    versionId: string\n  }\n  [Route.HOST_LAYOUTS]: { orgSlug: string; host: string }\n  [Route.LAYOUT_DETAILS]: { orgSlug: string; host: string; layoutId: string }\n  [Route.SCREEN_DETAILS]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.SCREEN_PREVIEW]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.HOST_SCREENS]: { orgSlug: string; host: string }\n}\n\nexport const routeReplacePattern = /\\[([^\\]]+)\\]/g\n\n/**\n * Builds a concrete path from a {@link Route} template. The payload is\n * REQUIRED whenever the route declares params (e.g. `orgSlug`, `hostId`) and\n * omitted only for param-less routes — so a forgotten `orgSlug` is a compile\n * error, not a `/<orgSlug?>/…` link that breaks at runtime (AGL-621).\n */\nexport function buildRoute<Tmpl extends Route>(\n  template: Tmpl,\n  ...[payload]: RoutePayload[Tmpl] extends undefined\n    ? [payload?: undefined]\n    : [payload: RoutePayload[Tmpl]]\n) {\n  return template.replace(routeReplacePattern, (match, key) => {\n    const value = (payload as Record<string, unknown> | undefined)?.[key]\n    return value != null ? String(value) : `<${key}?>`\n  })\n}\n"],"names":["Route","routeReplacePattern","buildRoute","template","payload","replace","match","key","value","String"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,oEAAoE;AACpE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AACnE,OAAO,IAAA,AAAKA,+BAAAA;;;;;IAKV,0EAA0E;IAC1E,sEAAsE;;IAEtE,yEAAyE;;IAEzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;;IAEvE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,+CAA+C;;IAE/C,wEAAwE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,sCAAsC;IACtC,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;;IAEpE,+DAA+D;IAC/D,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,uBAAuB;;IAEvB,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;;IAEpE,wEAAwE;IACxE,4EAA4E;IAC5E,+CAA+C;;;;;;;IAO/C,qEAAqE;IACrE,iEAAiE;IACjE,uEAAuE;IACvE,2EAA2E;IAC3E,iEAAiE;;IAEjE,wEAAwE;IACxE,wEAAwE;IACxE,8BAA8B;IAC9B,qEAAqE;IACrE,wEAAwE;IACxE,qBAAqB;;IAErB,iEAAiE;IACjE,+EAA+E;;IAE/E,uEAAuE;IACvE,yEAAyE;IACzE,2BAA2B;;;IAG3B,2EAA2E;IAC3E,2EAA2E;IAC3E,oEAAoE;;;;;IAKpE;;;;;;;;;;;;;;;;;;;;GAoBC;IAED;;;;;;;;;GASC;IAED;;;;;;;GAOC;;IAGD,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,kEAAkE;;IAElE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,+BAA+B;IAC/B;;;;;;;;;;;;;GAaC;IAED;;;;;;;;;;;;;;;;GAgBC;;;IAID,kEAAkE;IAClE,2EAA2E;IAC3E,0DAA0D;;IAE1D;;;;;;GAMC;;;;;;;IAQD;;;GAGC;;IAGD;;;;;;;;;GASC;;;;IAKD,sDAAsD;IACtD,EAAE;IACF,sEAAsE;IACtE,oEAAoE;IACpE,0EAA0E;IAC1E,oEAAoE;IACpE,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,iEAAiE;IACjE,gBAAgB;;;IAGhB;;;;;;;;;;;;GAYC;;;;;;;IAQD;;;;;;;;;;;;;GAaC;IAED;;;;;;;GAOC;;;;;;;IAQD,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,kEAAkE;IAClE,4EAA4E;IAC5E,mEAAmE;IACnE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,oDAAoD;IACpD,EAAE;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,wBAAwB;IACxB,EAAE;IACF,2EAA2E;IAC3E,gBAAgB;;IAEhB,4EAA4E;IAC5E,wEAAwE;IACxE,kEAAkE;IAClE,wEAAwE;IACxE,oEAAoE;IACpE,iEAAiE;IACjE,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,uBAAuB;;;IAGvB;;;;;GAKC;;;;IAKD,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,6DAA6D;IAC7D,EAAE;IACF,sEAAsE;IACtE,mEAAmE;IACnE,2EAA2E;IAC3E,uCAAuC;;;;IAIvC;;;;;;;;;;;;;;;;;;;;;GAqBC;;IAGD,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;;;;;;IAMvE;;;;;;GAMC;;;;;IAMD,0EAA0E;IAC1E,uEAAuE;IACvE,sBAAsB;;IAEtB;;;;GAIC,GACD;;;;GAIC;;IAGD;;;;;;;;;GASC;;;IAID;;;;;;;GAOC;;IAGD;;;;;;GAMC;;;IAID;;;;GAIC;IAED;;;;;;;;;;;GAWC;;;;;IAMD,0EAA0E;IAC1E,wEAAwE;IACxE,4BAA4B;;;IAG5B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,2CAA2C;;;IAG3C,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;;;;IAI9D,yEAAyE;IACzE,yDAAyD;;;;;;;;IAQzD,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,8DAA8D;IAC9D,qBAAqB;;;;;IAKrB,sEAAsE;IACtE,mEAAmE;IACnE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;;IAE5D,yEAAyE;IACzE,qDAAqD;;;IAGrD,0EAA0E;IAC1E,4EAA4E;IAC5E,iCAAiC;;;;IAIjC,yEAAyE;IACzE,wEAAwE;;WA5f9DA;MA8fX;AA4OD,OAAO,MAAMC,sBAAsB,gBAAe;AAElD;;;;;CAKC,GACD,OAAO,SAASC,WACdC,QAAc,EACd,GAAG,CAACC,QAAQ,AAEqB;IAEjC,OAAOD,SAASE,OAAO,CAACJ,qBAAqB,CAACK,OAAOC;QACnD,MAAMC,QAASJ,2BAAD,AAACA,OAAiD,CAACG,IAAI;QACrE,OAAOC,SAAS,OAAOC,OAAOD,SAAS,CAAC,CAAC,EAAED,IAAI,EAAE,CAAC;IACpD;AACF"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/console-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// URL scheme (AGL-621): the org is a first-class path segment `[orgSlug]`\n// so the URL — not client-side precedence — is the source of truth for the\n// active workspace. Host routes nest under `/[orgSlug]/hosts/[host]`; the\n// org area (settings, team, billing, media, data, plugins, support,\n// marketplace) lives directly under `/[orgSlug]`. User-level `manage/*`,\n// staff `admin/*`, and `auth` routes are NOT org-scoped. Hosts stay keyed\n// by doc id here; AGL-622 swaps `[hostId]` for the subdomain slug.\nexport enum Route {\n  ADMIN_ORGS = '/admin/orgs',\n  ADMIN_ORG_DETAIL = '/admin/orgs/[orgId]',\n  ADMIN_ORG_HOST_DETAIL = '/admin/orgs/[orgId]/host/[hostId]',\n  ADMIN_OVERVIEW = '/admin/overview',\n  // Staff coupon management (AGL-1105): create discount coupons + promotion\n  // codes and read the live net-margin rating before committing to one.\n  ADMIN_COUPONS = '/admin/coupons',\n  // The panic button (AGL-1501): platform/org/host/user lockdown controls.\n  ADMIN_LOCKDOWN = '/admin/lockdown',\n  // The narrow lever beside it (AGL-1687): disable or release ONE uploaded\n  // file. Its own page rather than a panel on Lockdown because the input is\n  // an asset, not a scope — the two forms share no field but the reason.\n  ADMIN_MEDIA_QUARANTINE = '/admin/media-quarantine',\n  // The INPUT to the two levers above (AGL-1964). Lockdown and quarantine are\n  // both things an operator does after learning there is a problem; until\n  // this page there was no way for anyone outside the company to say there\n  // was one. Reports arrive from the unauthenticated form the tenant runtime\n  // serves at /api/report-abuse on every origin.\n  ADMIN_ABUSE_REPORTS = '/admin/abuse-reports',\n  // The same input, one collection over (AGL-2310). The marketplace's own\n  // report button wrote `marketplaceReports` from the day it shipped and\n  // nothing read it — every report filed, acknowledged, and unreachable. This\n  // is that queue, deliberately shaped like the abuse one rather than as a\n  // second vocabulary for the same act.\n  // The probes, on a screen (AGL-1900). /api/health/{backups,rate-limits,\n  // signups} and /api/admin/email-health each answered a bad-day question to\n  // a curl and to nothing else; this is where an operator reads them.\n  ADMIN_HEALTH = '/admin/health',\n  // The maintenance jobs, on a screen (AGL-1949). audit-archive,\n  // reap-plugin-artifacts and reverify-plugin-versions accepted the shared\n  // cron secret and nothing else, so the only way to preview or run one was a\n  // shell holding the production secret. Separate from Health because Health\n  // reads and this acts.\n  ADMIN_MAINTENANCE = '/admin/maintenance',\n  // The Texas sales tax return (AGL-1900). The figures AGL-1811 computes had\n  // only a curl to reach them; filing happens on a fixed quarterly calendar\n  // from 2026-09-01, so the return needs a URL a person can bookmark.\n  ADMIN_REVENUE = '/admin/revenue',\n  // Realised band utilization and the margin that follows from it. Beside\n  // Revenue because the two are the halves of one question: that page reports\n  // what came in, this one what serving it cost.\n  ADMIN_MARGIN_UTILIZATION = '/admin/margin-utilization',\n  ADMIN_TAX_RETURN = '/admin/tax-return',\n  ADMIN_AUDIT = '/admin/audit',\n  ADMIN_USERS = '/admin/users',\n  ADMIN_USER_DETAIL = '/admin/users/[uid]',\n  ADMIN_FLAGS = '/admin/flags',\n  // Platform-wide settings that are not a release flag (AGL-2486). The\n  // free-workspace ceiling was the first of them and it opened the\n  // Organizations LIST, above the table — a global lever wedged into the\n  // screen for browsing individual orgs. Settings that describe the platform\n  // rather than one org belong on their own tab, beside the flags.\n  ADMIN_SETTINGS = '/admin/settings',\n  // One submission or listed plugin in full (AGL-959): the queue index is\n  // for scanning, this is where a reviewer reads the manifest, weighs the\n  // verifier findings and acts.\n  // A page a plugin adds to the staff area (AGL-2939), rendered by the\n  // console's generic staff route. The console's own staff routes win the\n  // segments they use.\n  ADMIN_STAFF_PAGE = '/admin/[staffPage]',\n  // Staff support-ticket queue (AGL-849): the operator side of the\n  // subscriber `MANAGE_SUPPORT_TICKETS` page — every org's tickets in one place.\n  ADMIN_SUPPORT = '/admin/support',\n  // Do-not-contact list (AGL-1592): the intake and the queue for Privacy\n  // Policy v4 §11's marketing call/text opt-out, and for \"delete the phone\n  // number you hold for me\".\n  ADMIN_CONTACT_SUPPRESSIONS = '/admin/contact-suppressions',\n  ADMIN_EMAILS = '/admin/emails',\n  // The one besigner route with no host and no org in it (AGL-749). A system\n  // email belongs to the platform, not to a workspace, so it is staff-scoped\n  // like the rest of `/admin/*` rather than nested under `[orgSlug]`.\n  ADMIN_EMAIL_BESIGNER = '/admin/emails/[templateKey]/versions/[versionId]/besigner',\n  ORG_HOME = '/[orgSlug]',\n  ORG_MEDIA = '/[orgSlug]/media',\n  ORG_DATA = '/[orgSlug]/data',\n  /*\n   * The organization's address book.\n   *\n   * Org-scoped rather than a section of a site, because it answers the one\n   * question a site page cannot: which of the organization's sites know a\n   * given person. A contact document is shared by every site in the org — one\n   * human who touched two of them is one row — and until this route there was\n   * no surface anywhere that showed the deduped person, so the dedupe the\n   * shared address book exists for was invisible and the billing unit\n   * (unique people per org) had nothing standing behind it.\n   *\n   * It shows identity, which sites hold the person, and consent per site. The\n   * per-site CRM — notes, tags, timeline, order history — stays on the site's\n   * own Contacts surface, because those are the holder's business records and\n   * this is the one route designed to cross between holders.\n   *\n   * A LEGACY ADDRESS since AGL-2630: the page behind it redirects, permanently,\n   * to the org-level CRM hub's contacts section. It stays declared so a link\n   * kept from before — a bookmark, a docs page, an email — still resolves,\n   * and so the redirect has a constant to be built from rather than a string.\n   */\n  ORG_CONTACTS = '/[orgSlug]/contacts',\n  /*\n   * The organization-level CRM hub (AGL-2630): the same sections the site hub\n   * has — `/[orgSlug]/crm/<section>[/<recordId>]` — mounted with an ORG scope,\n   * for an org-wide member who works every site's people at once. A bare\n   * `/crm` lands on the first section the reader may open, as the site hub's\n   * does. What this route adds over the site hub is the cross-site fact the\n   * old address book carried — which sites know a person — and what it takes\n   * from it is the site every create must name, since a record is always\n   * captured BY a site.\n   */\n  ORG_CRM = '/[orgSlug]/crm',\n  /*\n   * The generic ORGANIZATION-level plugin route (AGL-2974): every surface an\n   * extension declares in `orgNavItems` is served here, at\n   * `/[orgSlug]/<href>[/<section>…]`, by\n   * `app/(app)/[orgSlug]/[...pluginSlug]/page.tsx`. The org twin of\n   * `HOST_PLUGIN`, and like it the one org route whose leaf segment is data:\n   * every named org route in this enum wins over it.\n   */\n  ORG_PLUGIN = '/[orgSlug]/[pluginSlug]',\n  ORG_PLUGINS = '/[orgSlug]/plugins',\n  // One plugin, as installed in this workspace (AGL-1007): scope, settings\n  // and permissions in one place. The segment takes EITHER identifier\n  // (AGL-1010) — a listing id for a marketplace install, a registry id for a\n  // first-party plugin — hence `pluginRef` rather than `listingId`.\n  ORG_PLUGIN_INSTALLATION = '/[orgSlug]/plugins/[pluginRef]',\n  // Org-scope marketplace (AGL-772): the single place to browse, view and\n  // install marketplace items. The per-site tab it replaced, and the retired\n  // `/[orgSlug]/marketplace` seller area, were removed with the rest of the\n  // `marketplace` naming in AGL-975 — the word is being freed for a public\n  // forum, and a redirect stub sitting on `/marketplace` would have taken the\n  // one path that feature wants.\n  /*\n   * The marketplace's own SECTIONS are not here any more (AGL-3080). Eight\n   * of them — browse, licences, upload, the four seller cards and the\n   * publish form — were hand-written console routes, and became an\n   * `orgNavItems` declaration whose `sections` name those segments once, in\n   * the plugin. Restating them here was a second copy of a list the plugin\n   * owns, and every entry had zero callers the moment the routes went.\n   *\n   * What stays is what the CONSOLE still builds: the surface itself, a\n   * listing, a publisher, and the installed tab that the org plugins card\n   * links across to. A console page linking into a plugin's surface is the\n   * ordinary case; a console page enumerating that surface's sections is\n   * not.\n   */\n  ORG_MARKETPLACE = '/[orgSlug]/marketplace',\n  /*\n   * Marketplace SECTIONS are routes (AGL-2501), for the reason the settings\n   * and account sections are: a panel that is not open should cost nothing,\n   * and the seller half of this hub reads the organization's REVENUE.\n   *\n   * The four seller sections are the reason the layout gates rather than the\n   * rail. As tabs they were simply not rendered for a member without\n   * `publishToMarketplace`; as routes each one is reachable by typing its URL,\n   * so the refusal has to sit above them all rather than in the list that\n   * draws them.\n   *\n   * Every segment here is shorter than the ten characters `createResourceUid`\n   * emits, so none of them can ever shadow a real `[listingId]` sitting at the\n   * same level. `upload` rather than `publish` because `publish/plugin` is\n   * already a route beneath this one, and two directories contributing the\n   * same segment is a tree Next cannot resolve a layout for.\n   */\n  ORG_MARKETPLACE_INSTALLED = '/[orgSlug]/marketplace/installed',\n  ORG_MARKETPLACE_LISTING = '/[orgSlug]/marketplace/[listingId]',\n  ORG_MARKETPLACE_PUBLISHER = '/[orgSlug]/marketplace/publisher/[handle]',\n  // Publishing a plugin is a page, not a modal (AGL-1078): the most\n  // consequential thing a publisher does now has a URL, so it can be linked,\n  // reloaded, and reached from a listing to ship an update.\n  ORG_SETTINGS = '/[orgSlug]/settings',\n  /*\n   * Settings SECTIONS are routes (AGL-2501). `HubTabs` mounted every panel —\n   * `keepMounted`, with `lazy` off by default and passed by nobody — so\n   * opening General also mounted the API-keys, SSO and data-export cards and\n   * ran every read in them. Routes mount one page and code-split per route.\n   * `ORG_SETTINGS` itself redirects to General.\n   */\n  ORG_SETTINGS_GENERAL = '/[orgSlug]/settings/general',\n  ORG_SETTINGS_PROFILE = '/[orgSlug]/settings/profile',\n  ORG_SETTINGS_PLUGINS = '/[orgSlug]/settings/plugins',\n  ORG_SETTINGS_API_KEYS = '/[orgSlug]/settings/api-keys',\n  ORG_SETTINGS_BRANDING = '/[orgSlug]/settings/branding',\n  ORG_SETTINGS_SSO = '/[orgSlug]/settings/sso',\n  ORG_SETTINGS_OWNERSHIP = '/[orgSlug]/settings/ownership',\n  /**\n   * Export the people a workspace holds and file a person's erasure\n   * (AGL-2839) — outside the CRM, so it is there on every plan.\n   */\n  ORG_SETTINGS_PRIVACY = '/[orgSlug]/settings/privacy',\n  // Holds & reviews (AGL-3368): everything on the workspace that was held,\n  // flagged, locked or paused, its status, and the way to request a review.\n  // Where every risk notice's \"Request a review\" lands (`?notice=<id>`).\n  ORG_SETTINGS_HOLDS = '/[orgSlug]/settings/holds',\n  ORG_SETTINGS_DELETE = '/[orgSlug]/settings/delete',\n  /**\n   * Billing, section by section (AGL-2501).\n   *\n   * `MANAGE_BILLING` is unchanged and is the PLAN section — it resolves to a\n   * page inside a route group, which adds no path segment. That is what makes\n   * this split free: every link in the console, every hash anchor\n   * (`#addons`, `#collaborator-seats`) and Stripe's own dunning mail all point\n   * here already and none of them moves. No redirect, and no `?tab=` shim to\n   * carry forever.\n   */\n  MANAGE_BILLING = '/[orgSlug]/billing',\n  MANAGE_BILLING_USAGE = '/[orgSlug]/billing/usage',\n  MANAGE_BILLING_INVOICES = '/[orgSlug]/billing/invoices',\n  MANAGE_BILLING_SETTINGS = '/[orgSlug]/billing/settings',\n  // The ONE billing URL that carries no org (AGL-2430).\n  //\n  // Everything else on this table is org-scoped, which is correct for a\n  // console and wrong for the only caller that cannot template a URL:\n  // Stripe's dunning emails. \"Payment method updates\" takes a single static\n  // link for every customer in the account — there is no `{{org}}` to\n  // interpolate — so a table with no org-agnostic billing entry means those\n  // emails can only ever point at a page that is not billing. Today all four\n  // of them point at the marketing homepage, which is how a failed card\n  // becomes a cancelled subscription with no reachable way to fix it.\n  //\n  // This resolves the org from the SESSION instead of from the URL: one\n  // workspace goes straight through, several offer a choice, none says so.\n  // `billing` is a reserved subdomain (`RESERVED_SUBDOMAINS`), so no org can\n  // hold this slug and the literal segment can never shadow a real\n  // `/[orgSlug]`.\n  BILLING_ENTRY = '/billing',\n  MANAGE_USER_SETTINGS = '/manage/user',\n  /*\n   * Account SECTIONS are routes (AGL-2501). `HubTabs` mounted every panel —\n   * `keepMounted`, with `lazy` off by default and passed by nobody — so\n   * opening Account also mounted the email-addresses, passkeys, recent\n   * sign-ins, data-export and close-account cards and ran every read in them.\n   * Routes mount one page and code-split per route.\n   *\n   * The segments are the ids the panels carried, because a transactional\n   * email already in people's inboxes links `/manage/user?tab=security`:\n   * `MANAGE_USER_SETTINGS` forwards each of those ids to the section that\n   * holds it, and the segment matching the id is what keeps that map a\n   * one-liner rather than a second naming scheme.\n   */\n  MANAGE_USER_ACCOUNT = '/manage/user/account',\n  MANAGE_USER_EMAILS = '/manage/user/emails',\n  MANAGE_USER_PROFILE = '/manage/user/profile',\n  MANAGE_USER_BASIC = '/manage/user/basic',\n  MANAGE_USER_SECURITY = '/manage/user/security',\n  MANAGE_USER_CLOSE = '/manage/user/close',\n  MANAGE_NOTIFICATIONS = '/manage/notifications',\n  /*\n   * The preferences, off the feed (AGL-3226).\n   *\n   * They lived in the header of the feed itself, which was already the\n   * tallest thing on that page before per-channel and per-scope settings\n   * multiplied them — and it put an edit form above the list it edits, which\n   * the console does nowhere else.\n   *\n   * A CHILD of the feed rather than a sibling under `/manage`, because the\n   * relationship is exactly that: it configures what the page above it shows.\n   * That also keeps `/manage/notifications` the address in the transactional\n   * mail already in people's inboxes, which keeps working and now carries a\n   * button to here.\n   */\n  MANAGE_NOTIFICATION_SETTINGS = '/manage/notifications/settings',\n  /*\n   * A URL for the defect channel (AGL-2486). \"Report an issue\" was reachable\n   * only by opening the account menu, so nothing outside the console could\n   * send anyone to it — the repo's README pointed at GitHub issues, which we\n   * do not use, and every other \"tell us about it\" surface had the same\n   * problem. User-level rather than org-scoped because the dialog is: it\n   * needs no workspace, no role and no paid plan.\n   */\n  MANAGE_REPORT_ISSUE = '/manage/report-issue',\n  AUTH_SIGN_IN = '/signin',\n  AUTH_SIGN_OUT = '/signout',\n  AUTH_SIGN_UP = '/signup',\n  AUTH_VERIFY_EMAIL = '/verify-email',\n  HOST_LIST = '/[orgSlug]/hosts',\n  HOST_CONTENT = '/[orgSlug]/hosts/[host]/content',\n  // The collection is a PATH SEGMENT, not `?collection=` (AGL-2498).\n  //\n  // It was a query parameter because the manager began as one page with a\n  // Select on it, and the Select was the only thing that knew which\n  // collection you were looking at. That is the wrong owner: which collection\n  // is open is the page's IDENTITY, not a filter applied to it. As a\n  // parameter it could be dropped by any link that rebuilt the query, it\n  // sorted below `?tab=` in a URL nobody could read, and — the reason this\n  // moved — it left the entry beneath it with nowhere to hang: an entry is\n  // addressed `collection + entry`, and half of that address cannot live in\n  // the path while the other half lives in the query.\n  //\n  // The segment is the collection's SLUG, not its document id, and that is a\n  // correction rather than a preference. Collection document ids are not\n  // uniform — the seeded ones were given readable ids (`blog`, `changelog`)\n  // and everything created since gets a `createResourceUid`, so routing by id\n  // produced `/content/changelog` beside `/content/QgXv7lU_rG` on ONE site.\n  //\n  // A slug is the right key on the merits too: it is unique per host and kind\n  // (claimed in a transaction by /api/hosts/collections), it is the\n  // collection's own public address, and it is the thing an author recognises.\n  // A document id is still ACCEPTED and rewritten to the slug form, so no\n  // existing link breaks.\n  //\n  // `?collection=` still resolves the same way (AGL-845's DAM deep links are\n  // in the wild).\n  HOST_CONTENT_COLLECTION = '/[orgSlug]/hosts/[host]/content/[collectionSlug]',\n  // One entry's detail page (AGL-2498). `entries` is a LITERAL segment rather\n  // than `content/[collectionId]/[entryId]`, and it is load-bearing twice\n  // over: it mirrors the Firestore path the entry actually lives at\n  // (`collections/{c}/entries/{e}`), and it keeps the id space clear so a\n  // later sibling — a collection's own settings page, say — cannot be\n  // shadowed by an entry that happens to be called the same thing.\n  //\n  // `[entryId]` also carries the sentinel `new`, which is a draft that has no\n  // document yet. Entry ids come from `createResourceUid`, so nothing real\n  // can collide with it.\n  CONTENT_ENTRY_DETAILS = '/[orgSlug]/hosts/[host]/content/[collectionSlug]/entries/[entryId]',\n  MANAGE_TEAM = '/[orgSlug]/team',\n  /*\n   * Team SECTIONS are routes, not tabs (AGL-2501). A section's bundle then\n   * arrives when a reader opens it and never before, the section is linkable,\n   * and the active state is a fact about the URL rather than state that has to\n   * be kept in sync with it. `MANAGE_TEAM` itself redirects to members.\n   */\n  MANAGE_TEAM_MEMBERS = '/[orgSlug]/team/members',\n  MANAGE_TEAM_ROLES = '/[orgSlug]/team/roles',\n  MANAGE_TEAM_ACTIVITY = '/[orgSlug]/team/activity',\n  MANAGE_TEAM_MEMBER = '/[orgSlug]/team/[uid]',\n  // Support is an UMBRELLA, not a page (AGL-1158). The two channels beneath\n  // it are separate features that were only ever one screen: they are gated\n  // differently (tickets need a first-response commitment, from Pro; the\n  // forum is open to every tier including Free) and they fail independently.\n  // Sharing one route made them share a blast radius — AGL-1157 was one bad\n  // line in the common loader that emptied BOTH lists at once.\n  //\n  // `MANAGE_SUPPORT` itself stays, and stays the nav tab's href: it now\n  // forwards to whichever channel the org's tier makes primary, so a\n  // forum-only workspace lands on a whole forum instead of a half-empty page\n  // beside a ticket card it may not use.\n  MANAGE_SUPPORT = '/[orgSlug]/support',\n  MANAGE_SUPPORT_TICKETS = '/[orgSlug]/support/tickets',\n  MANAGE_SUPPORT_FORUM = '/[orgSlug]/support/forum',\n  /*\n   * The ONE support URL that carries no org (AGL-3265), and the second member\n   * of the apex category `BILLING_ENTRY` opened.\n   *\n   * Everything a person is handed when they need help — a receipt, a system\n   * email footer, a Stripe customer portal, a self-host runbook — stores ONE\n   * link for every customer, with no workspace to interpolate. `/[orgSlug]`\n   * cannot be templated into any of them, so the only support address those\n   * surfaces could carry was one outside the console entirely.\n   *\n   * This resolves the workspace from the SESSION instead: one workspace goes\n   * straight through, several offer a choice, none says so. It forwards to\n   * `MANAGE_SUPPORT`, which is itself an umbrella — so the tier decision about\n   * tickets versus the forum stays in the one place that already makes it.\n   *\n   * `support` is a reserved subdomain (`RESERVED_SUBDOMAINS` in\n   * `host-naming.ts`), so no org can hold this slug and the literal segment\n   * can never shadow a real `/[orgSlug]`. That is the same guarantee\n   * `BILLING_ENTRY` rests on, and it is a precondition rather than a\n   * coincidence: an apex route whose segment an org could claim would take a\n   * workspace's own address away from it.\n   */\n  SUPPORT_ENTRY = '/support',\n  HOST_DASHBOARD = '/[orgSlug]/hosts/[host]',\n  // The catch-all console page a plugin's own nav items resolve against\n  // (`app/(app)/[orgSlug]/hosts/[host]/[pluginSlug]/page.tsx`). Plugin slugs\n  // are open-ended, so this is the one route whose leaf segment is data.\n  HOST_PLUGIN = '/[orgSlug]/hosts/[host]/[pluginSlug]',\n  HOST_INBOX = '/[orgSlug]/hosts/[host]/inbox',\n  HOST_CONTACTS = '/[orgSlug]/hosts/[host]/contacts',\n  HOST_MEDIA = '/[orgSlug]/hosts/[host]/media',\n  HOST_SETUP = '/[orgSlug]/hosts/[host]/setup',\n  /*\n   * Setup SECTIONS are routes (AGL-2501), so an unopened one costs neither a\n   * read nor a byte. `HOST_SETUP` stays the nav tab's href and redirects to\n   * Basic details, honouring the `?tab=` ids these sections were deep-linked\n   * by — unlike the settings and marketplace hubs, links holding those ids are\n   * demonstrably in the wild and two are built in this repo.\n   */\n  HOST_SETUP_DETAILS = '/[orgSlug]/hosts/[host]/setup/details',\n  HOST_SETUP_SEO = '/[orgSlug]/hosts/[host]/setup/seo',\n  HOST_SETUP_TRACKING = '/[orgSlug]/hosts/[host]/setup/tracking',\n  HOST_SETUP_THEME = '/[orgSlug]/hosts/[host]/setup/theme',\n  HOST_SETUP_EMAILS = '/[orgSlug]/hosts/[host]/setup/emails',\n  // Host Admin area (AGL-1014): owner/admin-only controls — per-site plugin\n  // enablement and the Danger zone — out of the Setup page collaborators\n  // legitimately visit.\n  HOST_ADMIN = '/[orgSlug]/hosts/[host]/admin',\n  /*\n   * Site-admin SECTIONS are routes (AGL-2501), so an unopened one costs neither\n   * a read nor a byte. `HOST_ADMIN` redirects to Plugins and still honours the\n   * `?tab=` ids these sections were deep-linked by.\n   */\n  /*\n   * The site as an OBJECT: its name in the console and the subdomain it\n   * answers to. First in the rail because an address and a name are what\n   * identify the thing every other section governs.\n   */\n  HOST_ADMIN_GENERAL = '/[orgSlug]/hosts/[host]/admin/general',\n  HOST_ADMIN_PLUGINS = '/[orgSlug]/hosts/[host]/admin/plugins',\n  /*\n   * One plugin, as installed on ONE site (AGL-428, AGL-1014) — the\n   * site-scoped twin of `ORG_PLUGIN_INSTALLATION`, reached by clicking a row\n   * on the site's plugin\n   * list exactly as the workspace list opens its own detail page. The segment\n   * is `[pluginRef]` and accepts either identifier for the same reason the\n   * workspace route does (AGL-1010): a marketplace install is keyed by listing\n   * id, a first-party plugin by its registry id, and an admin does not think\n   * of the two as different things.\n   */\n  HOST_ADMIN_PLUGIN = '/[orgSlug]/hosts/[host]/admin/plugins/[pluginRef]',\n  HOST_ADMIN_DOMAIN = '/[orgSlug]/hosts/[host]/admin/domain',\n  HOST_ADMIN_SECURITY = '/[orgSlug]/hosts/[host]/admin/security',\n  /*\n   * The designed screen behind each status code, and the switch that shows the\n   * 503 one at every address at once (AGL-3178).\n   *\n   * Beside Security because both answer what a visitor's browser is handed on\n   * a page the site did not design for them, and above Activity because it is\n   * a control rather than a record.\n   */\n  HOST_ADMIN_ERROR_PAGES = '/[orgSlug]/hosts/[host]/admin/error-pages',\n  HOST_ADMIN_ACTIVITY = '/[orgSlug]/hosts/[host]/admin/activity',\n  /*\n   * Backup, restore and publishing the site as a template — moving the whole\n   * site somewhere else, or bringing it back. Its own section rather than the\n   * Danger zone: restore overwrites, but export and publishing a template do\n   * not, and filing all three under a destructive heading mislabels two of\n   * them.\n   */\n  HOST_ADMIN_BACKUP = '/[orgSlug]/hosts/[host]/admin/backup',\n  HOST_ADMIN_DANGER = '/[orgSlug]/hosts/[host]/admin/danger',\n  HOST_THEME = '/[orgSlug]/hosts/[host]/theme',\n  /*\n   * The automation section: Workflows, Actions and Webhooks under one parent.\n   * The parent is named for what the three have in common, so no tab shares a\n   * name with the section that contains it.\n   */\n  HOST_AUTOMATION = '/[orgSlug]/hosts/[host]/automation',\n  /**\n   * The address the automation section answered to before it had a name of\n   * its own. Nothing links here — `HOST_AUTOMATION` is what the nav, the\n   * search results and the activity feed build — but the console redirects it\n   * permanently, so a held bookmark still lands on the section (and keeps its\n   * `?tab=`, which never changed).\n   *\n   * Kept on the table rather than as a bare literal in `next.config.js`\n   * because the redirect and the address it serves are one fact:\n   * `automation-section.spec.ts` reads this entry and fails if the rule for\n   * it goes missing.\n   */\n  HOST_WORKFLOWS = '/[orgSlug]/hosts/[host]/workflows',\n  HOST_DATA = '/[orgSlug]/hosts/[host]/data',\n  HOST_LOGIC = '/[orgSlug]/hosts/[host]/logic',\n  HOST_PRODUCTS = '/[orgSlug]/hosts/[host]/products',\n  HOST_COMPONENTS = '/[orgSlug]/hosts/[host]/components',\n  // Component detail (AGL-693): the listing links here, and the besigner is\n  // reached from here — matching SCREEN_DETAILS rather than jumping a row\n  // straight into the editor.\n  COMPONENT_DETAILS = '/[orgSlug]/hosts/[host]/components/[componentId]',\n  HOST_FORMS = '/[orgSlug]/hosts/[host]/forms',\n  // A form is a designable document, so its surface is the component one:\n  // a list, a detail page that owns the versions, and the besigner reached\n  // from there. Deliberately NOT a row that jumps into the editor — a form's\n  // routing and consent field are edited on the detail page, and those decide\n  // what the design is then checked against.\n  FORM_DETAILS = '/[orgSlug]/hosts/[host]/forms/[formId]',\n  HOST_TEMPLATES = '/[orgSlug]/hosts/[host]/templates',\n  // Template detail (AGL-694), the counterpart to COMPONENT_DETAILS. Note\n  // TEMPLATE_BESIGNER carries no versionId — templates version but never\n  // publish, so there is no \"current\" pointer to route through.\n  TEMPLATE_DETAILS = '/[orgSlug]/hosts/[host]/templates/[templateId]',\n  HOST_MARKETING = '/[orgSlug]/hosts/[host]/marketing',\n  HOST_BOOKINGS = '/[orgSlug]/hosts/[host]/bookings',\n  // Events now come from the events-calendar plugin, served by the generic\n  // `[orgSlug]/hosts/[host]/[pluginSlug]` route (AGL-394).\n  HOST_REDIRECTS = '/[orgSlug]/hosts/[host]/redirects',\n  HOST_USERS = '/[orgSlug]/hosts/[host]/users',\n  HOST_ANALYTICS = '/[orgSlug]/hosts/[host]/analytics',\n  COMPONENT_BESIGNER = '/[orgSlug]/hosts/[host]/components/[componentId]/versions/[versionId]/besigner',\n  FORM_BESIGNER = '/[orgSlug]/hosts/[host]/forms/[formId]/versions/[versionId]/besigner',\n  TEMPLATE_BESIGNER = '/[orgSlug]/hosts/[host]/templates/[templateId]/besigner',\n  LAYOUT_BESIGNER = '/[orgSlug]/hosts/[host]/layouts/[layoutId]/versions/[versionId]/besigner',\n  // Draft preview for every besigner document kind (AGL-1203). Screens had\n  // the only preview route; components, layouts and templates showed a\n  // Preview button that did nothing. Each renders the same localStorage\n  // snapshot through the site renderer, so they work on localhost with no\n  // deployment. TEMPLATE_PREVIEW carries no versionId, matching\n  // TEMPLATE_BESIGNER.\n  COMPONENT_PREVIEW = '/[orgSlug]/hosts/[host]/components/[componentId]/versions/[versionId]/preview',\n  FORM_PREVIEW = '/[orgSlug]/hosts/[host]/forms/[formId]/versions/[versionId]/preview',\n  TEMPLATE_PREVIEW = '/[orgSlug]/hosts/[host]/templates/[templateId]/preview',\n  LAYOUT_PREVIEW = '/[orgSlug]/hosts/[host]/layouts/[layoutId]/versions/[versionId]/preview',\n  // The list sits at the bare path, like HOST_COMPONENTS. It used to be\n  // `/layouts/list`: the pages router had a `layouts/index.tsx` that\n  // redirected to `layouts/list.tsx`, and the App Router migration carried\n  // the pair over verbatim. Components, added later, had no such legacy and\n  // put its list at the bare path — which is the shape we want everywhere.\n  // `/layouts/list` still serves the same page so old links survive — an\n  // alias, not a redirect, because the bare path used to answer a cached 308\n  // pointing at `/list` and redirecting back would loop. See the comment in\n  // `app/(app)/[orgSlug]/hosts/[host]/screens/list/page.tsx`.\n  HOST_LAYOUTS = '/[orgSlug]/hosts/[host]/layouts',\n  // Layout detail (AGL-695), completing the list → detail → besigner shape\n  // across screens, components, templates and layouts.\n  LAYOUT_DETAILS = '/[orgSlug]/hosts/[host]/layouts/[layoutId]',\n  SCREEN_BESIGNER = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/besigner',\n  // Per-site email besigner (AGL-770): a site owner designs a transactional\n  // email their site sends. The host-scoped sibling of the staff system-email\n  // editor (ADMIN_EMAIL_BESIGNER).\n  HOST_EMAIL_BESIGNER = '/[orgSlug]/hosts/[host]/emails/[templateKey]/versions/[versionId]/besigner',\n  SCREEN_DETAILS = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/view',\n  SCREEN_PREVIEW = '/[orgSlug]/hosts/[host]/screens/[screenId]/versions/[versionId]/preview',\n  // Bare path, matching HOST_LAYOUTS and HOST_COMPONENTS — see the note on\n  // HOST_LAYOUTS. `/screens/list` still serves the same page as an alias.\n  HOST_SCREENS = '/[orgSlug]/hosts/[host]/screens',\n}\n\n/**\n * Params required to build each {@link Route}.\n *\n * Deliberately NOT extended from an index signature (AGL-685). It used to be\n * `extends Record<keyof any, any>`, which meant any `Route` missing an entry\n * here silently typed its payload as `any` — `Route.HOST_SETUP` was one of\n * them, and `buildRoute(Route.HOST_SETUP, { hostId })` compiled cleanly while\n * emitting `/<orgSlug?>/hosts/<host?>/setup`. Without the index signature a\n * new `Route` with no entry is a compile error, which is the whole point of\n * the payload being required in the first place.\n */\nexport interface RoutePayload {\n  [Route.AUTH_SIGN_UP]: undefined\n  [Route.AUTH_SIGN_IN]: undefined\n  [Route.AUTH_SIGN_OUT]: undefined\n  [Route.AUTH_VERIFY_EMAIL]: undefined\n  [Route.SCREEN_BESIGNER]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.ORG_HOME]: { orgSlug: string }\n  [Route.HOST_DASHBOARD]: { orgSlug: string; host: string }\n  [Route.ADMIN_ORGS]: undefined\n  [Route.ADMIN_ORG_DETAIL]: { orgId: string }\n  [Route.ADMIN_ORG_HOST_DETAIL]: { orgId: string; hostId: string }\n  [Route.ADMIN_OVERVIEW]: undefined\n  [Route.ADMIN_COUPONS]: undefined\n  [Route.ADMIN_LOCKDOWN]: undefined\n  [Route.ADMIN_MEDIA_QUARANTINE]: undefined\n  [Route.ADMIN_ABUSE_REPORTS]: undefined\n  [Route.ADMIN_HEALTH]: undefined\n  [Route.ADMIN_MAINTENANCE]: undefined\n  [Route.ADMIN_REVENUE]: undefined\n  [Route.ADMIN_MARGIN_UTILIZATION]: undefined\n  [Route.ADMIN_TAX_RETURN]: undefined\n  [Route.ADMIN_AUDIT]: undefined\n  [Route.ADMIN_USERS]: undefined\n  [Route.ADMIN_USER_DETAIL]: { uid: string }\n  [Route.ADMIN_FLAGS]: undefined\n  [Route.ADMIN_SETTINGS]: undefined\n  [Route.ADMIN_STAFF_PAGE]: { staffPage: string }\n  [Route.ADMIN_SUPPORT]: undefined\n  [Route.ADMIN_CONTACT_SUPPRESSIONS]: undefined\n  [Route.ADMIN_EMAILS]: undefined\n  [Route.ADMIN_EMAIL_BESIGNER]: { templateKey: string; versionId: string }\n  [Route.HOST_EMAIL_BESIGNER]: {\n    orgSlug: string\n    host: string\n    templateKey: string\n    versionId: string\n  }\n  [Route.ORG_MEDIA]: { orgSlug: string }\n  [Route.ORG_DATA]: { orgSlug: string }\n  [Route.ORG_CONTACTS]: { orgSlug: string }\n  [Route.ORG_CRM]: { orgSlug: string }\n  [Route.ORG_PLUGIN]: { orgSlug: string; pluginSlug: string }\n  [Route.ORG_PLUGINS]: { orgSlug: string }\n  [Route.ORG_PLUGIN_INSTALLATION]: { orgSlug: string; pluginRef: string }\n  [Route.ORG_MARKETPLACE]: { orgSlug: string }\n  [Route.ORG_MARKETPLACE_INSTALLED]: { orgSlug: string }\n  [Route.ORG_MARKETPLACE_LISTING]: { orgSlug: string; listingId: string }\n  [Route.ORG_MARKETPLACE_PUBLISHER]: { orgSlug: string; handle: string }\n  [Route.MANAGE_USER_SETTINGS]: undefined\n  [Route.MANAGE_USER_ACCOUNT]: undefined\n  [Route.MANAGE_USER_EMAILS]: undefined\n  [Route.MANAGE_USER_PROFILE]: undefined\n  [Route.MANAGE_USER_BASIC]: undefined\n  [Route.MANAGE_USER_SECURITY]: undefined\n  [Route.MANAGE_USER_CLOSE]: undefined\n  [Route.MANAGE_NOTIFICATIONS]: undefined\n  [Route.MANAGE_NOTIFICATION_SETTINGS]: undefined\n  [Route.MANAGE_REPORT_ISSUE]: undefined\n  [Route.ORG_SETTINGS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_GENERAL]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PROFILE]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PLUGINS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_API_KEYS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_BRANDING]: { orgSlug: string }\n  [Route.ORG_SETTINGS_SSO]: { orgSlug: string }\n  [Route.ORG_SETTINGS_OWNERSHIP]: { orgSlug: string }\n  [Route.ORG_SETTINGS_PRIVACY]: { orgSlug: string }\n  [Route.ORG_SETTINGS_HOLDS]: { orgSlug: string }\n  [Route.ORG_SETTINGS_DELETE]: { orgSlug: string }\n  [Route.HOST_LIST]: { orgSlug: string }\n  [Route.HOST_CONTENT]: { orgSlug: string; host: string }\n  [Route.HOST_CONTENT_COLLECTION]: {\n    orgSlug: string\n    host: string\n    /** The collection's slug — see the route. A document id also resolves. */\n    collectionSlug: string\n  }\n  [Route.CONTENT_ENTRY_DETAILS]: {\n    orgSlug: string\n    host: string\n    collectionSlug: string\n    /**\n     * An entry id, or the literal `new` for a draft with no document yet.\n     *\n     * An ID here while the collection above is a SLUG, deliberately. An entry\n     * slug is unique only WITHIN its collection and it is editable on the\n     * detail page — so routing by it would move the console address out from\n     * under someone in the middle of typing in the slug field, and a draft has\n     * no slug at all to route by. The entry id is also what every activity\n     * record and the DAM's \"Used on\" list already carry.\n     */\n    entryId: string\n  }\n  [Route.MANAGE_TEAM]: { orgSlug: string }\n  [Route.MANAGE_TEAM_MEMBERS]: { orgSlug: string }\n  [Route.MANAGE_TEAM_ROLES]: { orgSlug: string }\n  [Route.MANAGE_TEAM_ACTIVITY]: { orgSlug: string }\n  [Route.MANAGE_TEAM_MEMBER]: { orgSlug: string; uid: string }\n  [Route.MANAGE_SUPPORT]: { orgSlug: string }\n  [Route.MANAGE_SUPPORT_TICKETS]: { orgSlug: string }\n  [Route.MANAGE_SUPPORT_FORUM]: { orgSlug: string }\n  [Route.MANAGE_BILLING]: { orgSlug: string }\n  [Route.MANAGE_BILLING_USAGE]: { orgSlug: string }\n  [Route.MANAGE_BILLING_INVOICES]: { orgSlug: string }\n  [Route.MANAGE_BILLING_SETTINGS]: { orgSlug: string }\n  [Route.BILLING_ENTRY]: undefined\n  [Route.SUPPORT_ENTRY]: undefined\n  [Route.HOST_INBOX]: { orgSlug: string; host: string }\n  [Route.HOST_CONTACTS]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_DETAILS]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_SEO]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_TRACKING]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_THEME]: { orgSlug: string; host: string }\n  [Route.HOST_SETUP_EMAILS]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_GENERAL]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_PLUGINS]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_PLUGIN]: { orgSlug: string; host: string; pluginRef: string }\n  [Route.HOST_ADMIN_DOMAIN]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_SECURITY]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_ERROR_PAGES]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_ACTIVITY]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_BACKUP]: { orgSlug: string; host: string }\n  [Route.HOST_ADMIN_DANGER]: { orgSlug: string; host: string }\n  [Route.HOST_PLUGIN]: { orgSlug: string; host: string; pluginSlug: string }\n  [Route.HOST_MEDIA]: { orgSlug: string; host: string }\n  [Route.HOST_THEME]: { orgSlug: string; host: string }\n  [Route.HOST_AUTOMATION]: { orgSlug: string; host: string }\n  [Route.HOST_WORKFLOWS]: { orgSlug: string; host: string }\n  [Route.HOST_DATA]: { orgSlug: string; host: string }\n  [Route.HOST_LOGIC]: { orgSlug: string; host: string }\n  [Route.HOST_PRODUCTS]: { orgSlug: string; host: string }\n  [Route.HOST_COMPONENTS]: { orgSlug: string; host: string }\n  [Route.COMPONENT_DETAILS]: {\n    orgSlug: string\n    host: string\n    componentId: string\n  }\n  [Route.HOST_FORMS]: { orgSlug: string; host: string }\n  [Route.FORM_DETAILS]: {\n    orgSlug: string\n    host: string\n    formId: string\n  }\n  [Route.HOST_TEMPLATES]: { orgSlug: string; host: string }\n  [Route.TEMPLATE_DETAILS]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.HOST_MARKETING]: { orgSlug: string; host: string }\n  [Route.HOST_BOOKINGS]: { orgSlug: string; host: string }\n  [Route.HOST_REDIRECTS]: { orgSlug: string; host: string }\n  [Route.HOST_USERS]: { orgSlug: string; host: string }\n  [Route.HOST_ANALYTICS]: { orgSlug: string; host: string }\n  [Route.COMPONENT_BESIGNER]: {\n    orgSlug: string\n    host: string\n    componentId: string\n    versionId: string\n  }\n  [Route.FORM_BESIGNER]: {\n    orgSlug: string\n    host: string\n    formId: string\n    versionId: string\n  }\n  [Route.TEMPLATE_BESIGNER]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.LAYOUT_BESIGNER]: {\n    orgSlug: string\n    host: string\n    layoutId: string\n    versionId: string\n  }\n  [Route.COMPONENT_PREVIEW]: {\n    orgSlug: string\n    host: string\n    componentId: string\n    versionId: string\n  }\n  [Route.FORM_PREVIEW]: {\n    orgSlug: string\n    host: string\n    formId: string\n    versionId: string\n  }\n  [Route.TEMPLATE_PREVIEW]: {\n    orgSlug: string\n    host: string\n    templateId: string\n  }\n  [Route.LAYOUT_PREVIEW]: {\n    orgSlug: string\n    host: string\n    layoutId: string\n    versionId: string\n  }\n  [Route.HOST_LAYOUTS]: { orgSlug: string; host: string }\n  [Route.LAYOUT_DETAILS]: { orgSlug: string; host: string; layoutId: string }\n  [Route.SCREEN_DETAILS]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.SCREEN_PREVIEW]: {\n    orgSlug: string\n    host: string\n    screenId: string\n    versionId: string\n  }\n  [Route.HOST_SCREENS]: { orgSlug: string; host: string }\n}\n\nexport const routeReplacePattern = /\\[([^\\]]+)\\]/g\n\n/**\n * Builds a concrete path from a {@link Route} template. The payload is\n * REQUIRED whenever the route declares params (e.g. `orgSlug`, `hostId`) and\n * omitted only for param-less routes — so a forgotten `orgSlug` is a compile\n * error, not a `/<orgSlug?>/…` link that breaks at runtime (AGL-621).\n */\nexport function buildRoute<Tmpl extends Route>(\n  template: Tmpl,\n  ...[payload]: RoutePayload[Tmpl] extends undefined\n    ? [payload?: undefined]\n    : [payload: RoutePayload[Tmpl]]\n) {\n  return template.replace(routeReplacePattern, (match, key) => {\n    const value = (payload as Record<string, unknown> | undefined)?.[key]\n    return value != null ? String(value) : `<${key}?>`\n  })\n}\n"],"names":["Route","routeReplacePattern","buildRoute","template","payload","replace","match","key","value","String"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,oEAAoE;AACpE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AACnE,OAAO,IAAA,AAAKA,+BAAAA;;;;;IAKV,0EAA0E;IAC1E,sEAAsE;;IAEtE,yEAAyE;;IAEzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;;IAEvE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,+CAA+C;;IAE/C,wEAAwE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,sCAAsC;IACtC,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;;IAEpE,+DAA+D;IAC/D,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,uBAAuB;;IAEvB,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;;IAEpE,wEAAwE;IACxE,4EAA4E;IAC5E,+CAA+C;;;;;;;IAO/C,qEAAqE;IACrE,iEAAiE;IACjE,uEAAuE;IACvE,2EAA2E;IAC3E,iEAAiE;;IAEjE,wEAAwE;IACxE,wEAAwE;IACxE,8BAA8B;IAC9B,qEAAqE;IACrE,wEAAwE;IACxE,qBAAqB;;IAErB,iEAAiE;IACjE,+EAA+E;;IAE/E,uEAAuE;IACvE,yEAAyE;IACzE,2BAA2B;;;IAG3B,2EAA2E;IAC3E,2EAA2E;IAC3E,oEAAoE;;;;;IAKpE;;;;;;;;;;;;;;;;;;;;GAoBC;IAED;;;;;;;;;GASC;IAED;;;;;;;GAOC;;IAGD,yEAAyE;IACzE,oEAAoE;IACpE,2EAA2E;IAC3E,kEAAkE;;IAElE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,+BAA+B;IAC/B;;;;;;;;;;;;;GAaC;IAED;;;;;;;;;;;;;;;;GAgBC;;;IAID,kEAAkE;IAClE,2EAA2E;IAC3E,0DAA0D;;IAE1D;;;;;;GAMC;;;;;;;IAQD;;;GAGC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;;;IAGvE;;;;;;;;;GASC;;;;IAKD,sDAAsD;IACtD,EAAE;IACF,sEAAsE;IACtE,oEAAoE;IACpE,0EAA0E;IAC1E,oEAAoE;IACpE,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,iEAAiE;IACjE,gBAAgB;;;IAGhB;;;;;;;;;;;;GAYC;;;;;;;IAQD;;;;;;;;;;;;;GAaC;IAED;;;;;;;GAOC;;;;;;;IAQD,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,kEAAkE;IAClE,4EAA4E;IAC5E,mEAAmE;IACnE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,oDAAoD;IACpD,EAAE;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,wBAAwB;IACxB,EAAE;IACF,2EAA2E;IAC3E,gBAAgB;;IAEhB,4EAA4E;IAC5E,wEAAwE;IACxE,kEAAkE;IAClE,wEAAwE;IACxE,oEAAoE;IACpE,iEAAiE;IACjE,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,uBAAuB;;;IAGvB;;;;;GAKC;;;;IAKD,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,6DAA6D;IAC7D,EAAE;IACF,sEAAsE;IACtE,mEAAmE;IACnE,2EAA2E;IAC3E,uCAAuC;;;;IAIvC;;;;;;;;;;;;;;;;;;;;;GAqBC;;IAGD,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;;;;;;IAMvE;;;;;;GAMC;;;;;IAMD,0EAA0E;IAC1E,uEAAuE;IACvE,sBAAsB;;IAEtB;;;;GAIC,GACD;;;;GAIC;;IAGD;;;;;;;;;GASC;;;IAID;;;;;;;GAOC;;IAGD;;;;;;GAMC;;;IAID;;;;GAIC;IAED;;;;;;;;;;;GAWC;;;;;IAMD,0EAA0E;IAC1E,wEAAwE;IACxE,4BAA4B;;;IAG5B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,2CAA2C;;;IAG3C,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;;;;IAI9D,yEAAyE;IACzE,yDAAyD;;;;;;;;IAQzD,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,8DAA8D;IAC9D,qBAAqB;;;;;IAKrB,sEAAsE;IACtE,mEAAmE;IACnE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;;IAE5D,yEAAyE;IACzE,qDAAqD;;;IAGrD,0EAA0E;IAC1E,4EAA4E;IAC5E,iCAAiC;;;;IAIjC,yEAAyE;IACzE,wEAAwE;;WAhgB9DA;MAkgBX;AA6OD,OAAO,MAAMC,sBAAsB,gBAAe;AAElD;;;;;CAKC,GACD,OAAO,SAASC,WACdC,QAAc,EACd,GAAG,CAACC,QAAQ,AAEqB;IAEjC,OAAOD,SAASE,OAAO,CAACJ,qBAAqB,CAACK,OAAOC;QACnD,MAAMC,QAASJ,2BAAD,AAACA,OAAiD,CAACG,IAAI;QACrE,OAAOC,SAAS,OAAOC,OAAOD,SAAS,CAAC,CAAC,EAAED,IAAI,EAAE,CAAC;IACpD;AACF"}

package/src/lib/app-utils/csv-import.d.ts

@@ -179,6 +179,13 @@ export interface ImportChunkResult<S extends ImportSkippedRow<string>> {
     dropped: Record<string, number>;
     /** Owner addresses that matched no member of the organization. */
     ownersUnresolved: string[];
+    /**
+     * Of the rows stored, how many carry an address whose domain has no mail
+     * server (AGL-3328) — records that now read "Would bounce". Absent for a
+     * collection whose rows carry no address, and for a request whose check
+     * did not answer in time.
+     */
+    noMailServer?: number;
 }
 /** An empty tally, for the drawer to fold chunk results into. */
 export declare function emptyImportResult<S extends ImportSkippedRow<string>>(): ImportChunkResult<S>;
@@ -190,3 +197,8 @@ export declare function emptyImportResult<S extends ImportSkippedRow<string>>():
  * is what the download of skipped rows has to look up.
  */
 export declare function mergeImportResults<S extends ImportSkippedRow<string>>(total: ImportChunkResult<S>, chunk: Partial<ImportChunkResult<S>>, offset?: number): ImportChunkResult<S>;
+/**
+ * What an import's result says about the addresses that would bounce
+ * (AGL-3328), or `null` when none does.
+ */
+export declare function importNoMailServerSentence(count: number | null | undefined): string | null;

package/src/lib/app-utils/csv-import.js

@@ -250,13 +250,13 @@ export function guessImportMapping(columns, fields, aliasKeys, customFields = []
  * comes back as its position in the FILE rather than in the request — which
  * is what the download of skipped rows has to look up.
  */ export function mergeImportResults(total, chunk, offset = 0) {
-    var _chunk_dropped, _chunk_received, _chunk_created, _chunk_merged, _chunk_skipped, _chunk_ownersUnresolved;
+    var _chunk_dropped, _chunk_received, _chunk_created, _chunk_merged, _chunk_skipped, _chunk_ownersUnresolved, _total_noMailServer, _chunk_noMailServer;
     const dropped = _extends({}, total.dropped);
     for (const [field, count] of Object.entries((_chunk_dropped = chunk.dropped) != null ? _chunk_dropped : {})){
         var _dropped_field;
         dropped[field] = ((_dropped_field = dropped[field]) != null ? _dropped_field : 0) + Number(count != null ? count : 0);
     }
-    return {
+    return _extends({
         received: total.received + Number((_chunk_received = chunk.received) != null ? _chunk_received : 0),
         created: total.created + Number((_chunk_created = chunk.created) != null ? _chunk_created : 0),
         merged: total.merged + Number((_chunk_merged = chunk.merged) != null ? _chunk_merged : 0),
@@ -273,7 +273,17 @@ export function guessImportMapping(columns, fields, aliasKeys, customFields = []
                 ...(_chunk_ownersUnresolved = chunk.ownersUnresolved) != null ? _chunk_ownersUnresolved : []
             ])
         ]
-    };
+    }, total.noMailServer !== undefined || chunk.noMailServer !== undefined ? {
+        noMailServer: Number((_total_noMailServer = total.noMailServer) != null ? _total_noMailServer : 0) + Number((_chunk_noMailServer = chunk.noMailServer) != null ? _chunk_noMailServer : 0)
+    } : {});
+}
+/**
+ * What an import's result says about the addresses that would bounce
+ * (AGL-3328), or `null` when none does.
+ */ export function importNoMailServerSentence(count) {
+    const n = Math.max(0, Math.floor(Number(count) || 0));
+    if (!n) return null;
+    return n === 1 ? '1 address has no mail server. Its record reads "Would bounce", and campaigns and sequences skip it.' : `${n.toLocaleString('en-US')} addresses have no mail server. Their records read "Would bounce", ` + 'and campaigns and sequences skip them.';
 }
 
 //# sourceMappingURL=csv-import.js.map

package/src/lib/app-utils/csv-import.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/csv-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * READING A SPREADSHEET INTO A CRM COLLECTION — the part that does not care\n * which collection (AGL-2621).\n *\n * The contact import (AGL-2602) settled how a file becomes records: a\n * header row is matched against an alias table to PROPOSE a column → field\n * mapping, the operator corrects it, one line is mapped to a raw row of\n * verbatim strings, and the server judges each row and tallies what it did.\n * A companies file goes through the same three stages with a different\n * field list, so the stages live here, parametric over the field union, and\n * the CRM plugin's contact and company importers each supply their vocabulary\n * — the fields, their aliases, their labels — and nothing else.\n *\n * ## A custom target is `custom:<key>`\n *\n * A column may also map to a custom field the merchant defined, which has\n * no standard name. The target is one string rather than a discriminated\n * object because it is the VALUE of a select control and travels through a\n * form; the prefix is what tells the two apart on the way back.\n *\n * ## The ceilings are shared numbers\n *\n * One file, one request and one preview are bounded the same way for every\n * collection, because the bounds are about the browser's memory and a\n * console request's budget, not about what the rows hold.\n */\n\n/**\n * The most rows one uploaded file may carry.\n *\n * A bound on the work one import represents and on the memory the browser\n * holds while mapping it — five thousand rows of a wide export is already\n * several megabytes of cells in a tab. A larger list is split and imported\n * in pieces; the drawer says so on the file, before a single row is sent.\n */\nexport const CSV_IMPORT_MAX_ROWS = 5_000\n\n/**\n * Rows per request.\n *\n * Each row costs the server a lookup and a write, plus whatever a name it\n * has not seen in this request costs to resolve; two hundred of those sit\n * comfortably inside a console request's budget and give the progress bar\n * twenty-five steps on the largest file the drawer accepts.\n */\nexport const CSV_IMPORT_CHUNK_SIZE = 200\n\n/**\n * The most bytes one request may carry, checked before the body is judged.\n *\n * Two hundred rows of a wide export with long values is well under a\n * megabyte; two megabytes is the line past which a request is not a chunk\n * of a file but something else being pushed through this door.\n */\nexport const CSV_IMPORT_MAX_BODY_BYTES = 2_000_000\n\n/** How many mapped rows the drawer shows before the operator commits. */\nexport const CSV_IMPORT_PREVIEW_ROWS = 10\n\n/** The prefix a custom-field target id carries. */\nconst CUSTOM_TARGET_PREFIX = 'custom:'\n\n/** The custom-field target id for a definition key. */\nexport function customImportTarget(key: string): `custom:${string}` {\n  return `${CUSTOM_TARGET_PREFIX}${key}`\n}\n\n/** The definition key a custom target names, or `null` for a standard field. */\nexport function customImportTargetKey(target: string): string | null {\n  return target.startsWith(CUSTOM_TARGET_PREFIX)\n    ? target.slice(CUSTOM_TARGET_PREFIX.length)\n    : null\n}\n\n/**\n * Normalizes a header cell for alias matching.\n *\n * Underscores, dots and hyphens all become one space, so `e-mail`,\n * `email_address` and `Email Address` compare as the words they are. The\n * alias tables are written in the human spelling and pass through the same\n * function, so a table stays readable and the comparison stays exact.\n */\nexport function importHeaderKey(value: unknown): string {\n  return String(value ?? '')\n    .trim()\n    .toLowerCase()\n    .replace(/[_.\\-/]+/g, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n}\n\n/** An alias table, normalized once through {@link importHeaderKey}. */\nexport function importAliasKeys<F extends string>(\n  fields: readonly F[],\n  aliases: Record<F, readonly string[]>,\n): Record<F, ReadonlySet<string>> {\n  const keys = {} as Record<F, ReadonlySet<string>>\n  for (const field of fields) {\n    keys[field] = new Set(aliases[field].map(importHeaderKey))\n  }\n  return keys\n}\n\n/**\n * A proposed mapping from a file's header row.\n *\n * Custom fields win over standard aliases when a header matches a\n * definition's label or key exactly — a merchant who defined a field called\n * \"Status\" meant THEIR status, not our lifecycle stage. Each target is\n * taken at most once, by the first column that claims it, so a file with two\n * columns named \"Email\" maps the first and leaves the second for the\n * operator to decide.\n */\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n): Record<number, F>\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n  customFields: readonly { key: string; label: string }[],\n): Record<number, F | `custom:${string}`>\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n  customFields: readonly { key: string; label: string }[] = [],\n): Record<number, F | `custom:${string}`> {\n  const mapping: Record<number, F | `custom:${string}`> = {}\n  const taken = new Set<string>()\n  const customByHeader = new Map<string, string>()\n  for (const field of customFields) {\n    customByHeader.set(importHeaderKey(field.label), field.key)\n    customByHeader.set(importHeaderKey(field.key), field.key)\n  }\n  columns.forEach((column, index) => {\n    const key = importHeaderKey(column)\n    if (!key) return\n    const customKey = customByHeader.get(key)\n    if (customKey) {\n      const target = customImportTarget(customKey)\n      if (!taken.has(target)) {\n        mapping[index] = target\n        taken.add(target)\n      }\n      return\n    }\n    for (const field of fields) {\n      if (taken.has(field)) continue\n      if (aliasKeys[field].has(key)) {\n        mapping[index] = field\n        taken.add(field)\n        return\n      }\n    }\n  })\n  return mapping\n}\n\n/**\n * One parsed line under a mapping: the cells the mapping selected, under the\n * field they were mapped to, verbatim, with custom values gathered under\n * `custom` by definition key. Empty cells are left absent.\n */\nexport function mapImportRow<F extends string>(\n  cells: readonly string[],\n  mapping: Record<number, F | `custom:${string}`>,\n): Partial<Record<F, string>> & { custom?: Record<string, string> } {\n  const standard: Partial<Record<F, string>> = {}\n  const custom: Record<string, string> = {}\n  for (const [indexText, target] of Object.entries(mapping)) {\n    const value = String(cells[Number(indexText)] ?? '')\n    if (!value.trim()) continue\n    const customKey = customImportTargetKey(target)\n    if (customKey) {\n      custom[customKey] = value\n    } else {\n      standard[target as F] = value\n    }\n  }\n  return Object.keys(custom).length ? { ...standard, custom } : standard\n}\n\n/**\n * A tag cell as the tags it names.\n *\n * `|` or `,` separated — the CSV export writes `|`, most other products\n * write `,` — lowercased and trimmed like a record's own tag field, so an\n * imported `VIP` and a typed `vip` are one tag and not two.\n */\nexport function parseImportTags(value: unknown, max: number): string[] {\n  const parts = Array.isArray(value)\n    ? value.map((entry) => String(entry ?? ''))\n    : String(value ?? '').split(/[|,]/)\n  return [\n    ...new Set(parts.map((tag) => tag.trim().toLowerCase()).filter(Boolean)),\n  ].slice(0, max)\n}\n\n/**\n * A yes/no cell as a boolean, or `null` when it is neither.\n *\n * The affirmatives are the ones consent and checkbox columns actually\n * carry; the negatives are listed so that an explicit `no` is a `false`\n * rather than an unreadable value that gets reported as dropped.\n */\nexport function parseImportFlag(value: unknown): boolean | null {\n  if (typeof value === 'boolean') return value\n  if (typeof value === 'number') return value === 1 ? true : value === 0 ? false : null\n  const text = String(value ?? '')\n    .trim()\n    .toLowerCase()\n  if (['yes', 'y', 'true', '1', 'on', 'subscribed', 'opted in', 'opted-in'].includes(text)) {\n    return true\n  }\n  if (['no', 'n', 'false', '0', 'off', 'unsubscribed', ''].includes(text)) {\n    return false\n  }\n  return null\n}\n\n/** A cell as trimmed text capped at `max`, or `undefined` when blank. */\nexport function importTextValue(value: unknown, max: number): string | undefined {\n  const text = String(value ?? '')\n    .trim()\n    .slice(0, max)\n  return text || undefined\n}\n\n/** A cell the file carried that could not be read as the field it was mapped to. */\nexport interface ImportDroppedValue {\n  /** The standard field name, or `custom:<key>`. */\n  field: string\n  value: string\n}\n\n/** A CSV cell, quoted only when it has to be. */\nexport function csvCell(value: unknown): string {\n  const text = String(value ?? '')\n  return /[\",\\r\\n]/.test(text) ? `\"${text.replace(/\"/g, '\"\"')}\"` : text\n}\n\n/**\n * A whole CSV — the header, then one line per row — through {@link csvCell}.\n *\n * The one serializer for every CSV the console writes: each CRM section's\n * export, the skipped-rows file an import hands back and each report\n * table's export.\n * Quoting is decided in {@link csvCell} and nowhere else — a cell holding a\n * comma, a quote or a line break is wrapped in quotes with its quotes\n * doubled, no other cell is touched, and a `null` or `undefined` cell is\n * empty rather than the word — so that a report's file and a contacts file\n * open the same way in a spreadsheet.\n */\nexport function csvDocument(\n  header: readonly unknown[],\n  rows: readonly (readonly unknown[])[],\n): string {\n  return [header, ...rows]\n    .map((line) => line.map(csvCell).join(','))\n    .join('\\n')\n}\n\n/**\n * The skipped rows as a file the operator can fix and re-import.\n *\n * The original columns verbatim plus a trailing `Skipped because` column,\n * so the file round-trips: correct the cell, delete the last column or\n * leave it unmapped, and import it again.\n */\nexport function importSkippedCsv<R extends string>(\n  columns: readonly string[],\n  entries: readonly { cells: readonly string[]; reason: R }[],\n  labels: Record<R, string>,\n): string {\n  return csvDocument(\n    [...columns, 'Skipped because'],\n    entries.map((entry) => [\n      ...columns.map((_column, index) => entry.cells[index] ?? ''),\n      labels[entry.reason] ?? entry.reason,\n    ]),\n  )\n}\n\n/**\n * One row the server did not store, by its index in the request. Each\n * collection names the row back to the operator in its own field — an\n * address, a company name — beside these two.\n */\nexport interface ImportSkippedRow<R extends string> {\n  index: number\n  reason: R\n}\n\n/**\n * What one request did, in the shape every collection's import reports.\n * The drawer sums these across a file; a collection with more to say\n * extends the shape and folds its own field beside {@link mergeImportResults}.\n */\nexport interface ImportChunkResult<S extends ImportSkippedRow<string>> {\n  received: number\n  created: number\n  merged: number\n  skipped: S[]\n  /** Unreadable cells, tallied by field. */\n  dropped: Record<string, number>\n  /** Owner addresses that matched no member of the organization. */\n  ownersUnresolved: string[]\n}\n\n/** An empty tally, for the drawer to fold chunk results into. */\nexport function emptyImportResult<\n  S extends ImportSkippedRow<string>,\n>(): ImportChunkResult<S> {\n  return {\n    received: 0,\n    created: 0,\n    merged: 0,\n    skipped: [],\n    dropped: {},\n    ownersUnresolved: [],\n  }\n}\n\n/**\n * Two results as one.\n *\n * `offset` is where the chunk started in the file, so a skipped row's index\n * comes back as its position in the FILE rather than in the request — which\n * is what the download of skipped rows has to look up.\n */\nexport function mergeImportResults<S extends ImportSkippedRow<string>>(\n  total: ImportChunkResult<S>,\n  chunk: Partial<ImportChunkResult<S>>,\n  offset = 0,\n): ImportChunkResult<S> {\n  const dropped = { ...total.dropped }\n  for (const [field, count] of Object.entries(chunk.dropped ?? {})) {\n    dropped[field] = (dropped[field] ?? 0) + Number(count ?? 0)\n  }\n  return {\n    received: total.received + Number(chunk.received ?? 0),\n    created: total.created + Number(chunk.created ?? 0),\n    merged: total.merged + Number(chunk.merged ?? 0),\n    skipped: [\n      ...total.skipped,\n      ...(chunk.skipped ?? []).map((entry) => ({\n        ...entry,\n        index: Number(entry.index) + offset,\n      })),\n    ],\n    dropped,\n    ownersUnresolved: [\n      ...new Set([...total.ownersUnresolved, ...(chunk.ownersUnresolved ?? [])]),\n    ],\n  }\n}\n"],"names":["CSV_IMPORT_MAX_ROWS","CSV_IMPORT_CHUNK_SIZE","CSV_IMPORT_MAX_BODY_BYTES","CSV_IMPORT_PREVIEW_ROWS","CUSTOM_TARGET_PREFIX","customImportTarget","key","customImportTargetKey","target","startsWith","slice","length","importHeaderKey","value","String","trim","toLowerCase","replace","importAliasKeys","fields","aliases","keys","field","Set","map","guessImportMapping","columns","aliasKeys","customFields","mapping","taken","customByHeader","Map","set","label","forEach","column","index","customKey","get","has","add","mapImportRow","cells","standard","custom","indexText","Object","entries","Number","parseImportTags","max","parts","Array","isArray","entry","split","tag","filter","Boolean","parseImportFlag","text","includes","importTextValue","undefined","csvCell","test","csvDocument","header","rows","line","join","importSkippedCsv","labels","_column","reason","emptyImportResult","received","created","merged","skipped","dropped","ownersUnresolved","mergeImportResults","total","chunk","offset","count"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GAED;;;;;;;CAOC,GACD,OAAO,MAAMA,sBAAsB,KAAK;AAExC;;;;;;;CAOC,GACD,OAAO,MAAMC,wBAAwB,IAAG;AAExC;;;;;;CAMC,GACD,OAAO,MAAMC,4BAA4B,QAAS;AAElD,uEAAuE,GACvE,OAAO,MAAMC,0BAA0B,GAAE;AAEzC,iDAAiD,GACjD,MAAMC,uBAAuB;AAE7B,qDAAqD,GACrD,OAAO,SAASC,mBAAmBC,GAAW;IAC5C,OAAO,GAAGF,uBAAuBE,KAAK;AACxC;AAEA,8EAA8E,GAC9E,OAAO,SAASC,sBAAsBC,MAAc;IAClD,OAAOA,OAAOC,UAAU,CAACL,wBACrBI,OAAOE,KAAK,CAACN,qBAAqBO,MAAM,IACxC;AACN;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,gBAAgBC,KAAc;IAC5C,OAAOC,OAAOD,gBAAAA,QAAS,IACpBE,IAAI,GACJC,WAAW,GACXC,OAAO,CAAC,aAAa,KACrBA,OAAO,CAAC,QAAQ,KAChBF,IAAI;AACT;AAEA,qEAAqE,GACrE,OAAO,SAASG,gBACdC,MAAoB,EACpBC,OAAqC;IAErC,MAAMC,OAAO,CAAC;IACd,KAAK,MAAMC,SAASH,OAAQ;QAC1BE,IAAI,CAACC,MAAM,GAAG,IAAIC,IAAIH,OAAO,CAACE,MAAM,CAACE,GAAG,CAACZ;IAC3C;IACA,OAAOS;AACT;AAuBA,OAAO,SAASI,mBACdC,OAA0B,EAC1BP,MAAoB,EACpBQ,SAAyC,EACzCC,eAA0D,EAAE;IAE5D,MAAMC,UAAkD,CAAC;IACzD,MAAMC,QAAQ,IAAIP;IAClB,MAAMQ,iBAAiB,IAAIC;IAC3B,KAAK,MAAMV,SAASM,aAAc;QAChCG,eAAeE,GAAG,CAACrB,gBAAgBU,MAAMY,KAAK,GAAGZ,MAAMhB,GAAG;QAC1DyB,eAAeE,GAAG,CAACrB,gBAAgBU,MAAMhB,GAAG,GAAGgB,MAAMhB,GAAG;IAC1D;IACAoB,QAAQS,OAAO,CAAC,CAACC,QAAQC;QACvB,MAAM/B,MAAMM,gBAAgBwB;QAC5B,IAAI,CAAC9B,KAAK;QACV,MAAMgC,YAAYP,eAAeQ,GAAG,CAACjC;QACrC,IAAIgC,WAAW;YACb,MAAM9B,SAASH,mBAAmBiC;YAClC,IAAI,CAACR,MAAMU,GAAG,CAAChC,SAAS;gBACtBqB,OAAO,CAACQ,MAAM,GAAG7B;gBACjBsB,MAAMW,GAAG,CAACjC;YACZ;YACA;QACF;QACA,KAAK,MAAMc,SAASH,OAAQ;YAC1B,IAAIW,MAAMU,GAAG,CAAClB,QAAQ;YACtB,IAAIK,SAAS,CAACL,MAAM,CAACkB,GAAG,CAAClC,MAAM;gBAC7BuB,OAAO,CAACQ,MAAM,GAAGf;gBACjBQ,MAAMW,GAAG,CAACnB;gBACV;YACF;QACF;IACF;IACA,OAAOO;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASa,aACdC,KAAwB,EACxBd,OAA+C;IAE/C,MAAMe,WAAuC,CAAC;IAC9C,MAAMC,SAAiC,CAAC;IACxC,KAAK,MAAM,CAACC,WAAWtC,OAAO,IAAIuC,OAAOC,OAAO,CAACnB,SAAU;YACpCc;QAArB,MAAM9B,QAAQC,QAAO6B,gBAAAA,KAAK,CAACM,OAAOH,WAAW,YAAxBH,gBAA4B;QACjD,IAAI,CAAC9B,MAAME,IAAI,IAAI;QACnB,MAAMuB,YAAY/B,sBAAsBC;QACxC,IAAI8B,WAAW;YACbO,MAAM,CAACP,UAAU,GAAGzB;QACtB,OAAO;YACL+B,QAAQ,CAACpC,OAAY,GAAGK;QAC1B;IACF;IACA,OAAOkC,OAAO1B,IAAI,CAACwB,QAAQlC,MAAM,GAAG,aAAKiC;QAAUC;SAAWD;AAChE;AAEA;;;;;;CAMC,GACD,OAAO,SAASM,gBAAgBrC,KAAc,EAAEsC,GAAW;IACzD,MAAMC,QAAQC,MAAMC,OAAO,CAACzC,SACxBA,MAAMW,GAAG,CAAC,CAAC+B,QAAUzC,OAAOyC,gBAAAA,QAAS,OACrCzC,OAAOD,gBAAAA,QAAS,IAAI2C,KAAK,CAAC;IAC9B,OAAO;WACF,IAAIjC,IAAI6B,MAAM5B,GAAG,CAAC,CAACiC,MAAQA,IAAI1C,IAAI,GAAGC,WAAW,IAAI0C,MAAM,CAACC;KAChE,CAACjD,KAAK,CAAC,GAAGyC;AACb;AAEA;;;;;;CAMC,GACD,OAAO,SAASS,gBAAgB/C,KAAc;IAC5C,IAAI,OAAOA,UAAU,WAAW,OAAOA;IACvC,IAAI,OAAOA,UAAU,UAAU,OAAOA,UAAU,IAAI,OAAOA,UAAU,IAAI,QAAQ;IACjF,MAAMgD,OAAO/C,OAAOD,gBAAAA,QAAS,IAC1BE,IAAI,GACJC,WAAW;IACd,IAAI;QAAC;QAAO;QAAK;QAAQ;QAAK;QAAM;QAAc;QAAY;KAAW,CAAC8C,QAAQ,CAACD,OAAO;QACxF,OAAO;IACT;IACA,IAAI;QAAC;QAAM;QAAK;QAAS;QAAK;QAAO;QAAgB;KAAG,CAACC,QAAQ,CAACD,OAAO;QACvE,OAAO;IACT;IACA,OAAO;AACT;AAEA,uEAAuE,GACvE,OAAO,SAASE,gBAAgBlD,KAAc,EAAEsC,GAAW;IACzD,MAAMU,OAAO/C,OAAOD,gBAAAA,QAAS,IAC1BE,IAAI,GACJL,KAAK,CAAC,GAAGyC;IACZ,OAAOU,QAAQG;AACjB;AASA,+CAA+C,GAC/C,OAAO,SAASC,QAAQpD,KAAc;IACpC,MAAMgD,OAAO/C,OAAOD,gBAAAA,QAAS;IAC7B,OAAO,WAAWqD,IAAI,CAACL,QAAQ,CAAC,CAAC,EAAEA,KAAK5C,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC,GAAG4C;AACnE;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASM,YACdC,MAA0B,EAC1BC,IAAqC;IAErC,OAAO;QAACD;WAAWC;KAAK,CACrB7C,GAAG,CAAC,CAAC8C,OAASA,KAAK9C,GAAG,CAACyC,SAASM,IAAI,CAAC,MACrCA,IAAI,CAAC;AACV;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,iBACd9C,OAA0B,EAC1BsB,OAA2D,EAC3DyB,MAAyB;IAEzB,OAAON,YACL;WAAIzC;QAAS;KAAkB,EAC/BsB,QAAQxB,GAAG,CAAC,CAAC+B;YAEXkB;eAFqB;eAClB/C,QAAQF,GAAG,CAAC,CAACkD,SAASrC;oBAAUkB;wBAAAA,qBAAAA,MAAMZ,KAAK,CAACN,MAAM,YAAlBkB,qBAAsB;;aACzDkB,uBAAAA,MAAM,CAAClB,MAAMoB,MAAM,CAAC,YAApBF,uBAAwBlB,MAAMoB,MAAM;SACrC;;AAEL;AA4BA,+DAA+D,GAC/D,OAAO,SAASC;IAGd,OAAO;QACLC,UAAU;QACVC,SAAS;QACTC,QAAQ;QACRC,SAAS,EAAE;QACXC,SAAS,CAAC;QACVC,kBAAkB,EAAE;IACtB;AACF;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,mBACdC,KAA2B,EAC3BC,KAAoC,EACpCC,SAAS,CAAC;QAGkCD,gBAIRA,iBACFA,gBACFA,eAGxBA,gBAOuCA;IAjB/C,MAAMJ,UAAU,aAAKG,MAAMH,OAAO;IAClC,KAAK,MAAM,CAAC3D,OAAOiE,MAAM,IAAIxC,OAAOC,OAAO,EAACqC,iBAAAA,MAAMJ,OAAO,YAAbI,iBAAiB,CAAC,GAAI;YAC9CJ;QAAlBA,OAAO,CAAC3D,MAAM,GAAG,EAAC2D,iBAAAA,OAAO,CAAC3D,MAAM,YAAd2D,iBAAkB,KAAKhC,OAAOsC,gBAAAA,QAAS;IAC3D;IACA,OAAO;QACLV,UAAUO,MAAMP,QAAQ,GAAG5B,QAAOoC,kBAAAA,MAAMR,QAAQ,YAAdQ,kBAAkB;QACpDP,SAASM,MAAMN,OAAO,GAAG7B,QAAOoC,iBAAAA,MAAMP,OAAO,YAAbO,iBAAiB;QACjDN,QAAQK,MAAML,MAAM,GAAG9B,QAAOoC,gBAAAA,MAAMN,MAAM,YAAZM,gBAAgB;QAC9CL,SAAS;eACJI,MAAMJ,OAAO;eACb,EAACK,iBAAAA,MAAML,OAAO,YAAbK,iBAAiB,EAAE,EAAE7D,GAAG,CAAC,CAAC+B,QAAW,aACpCA;oBACHlB,OAAOY,OAAOM,MAAMlB,KAAK,IAAIiD;;SAEhC;QACDL;QACAC,kBAAkB;eACb,IAAI3D,IAAI;mBAAI6D,MAAMF,gBAAgB;oBAAMG,0BAAAA,MAAMH,gBAAgB,YAAtBG,0BAA0B,EAAE;aAAE;SAC1E;IACH;AACF"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/csv-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * READING A SPREADSHEET INTO A CRM COLLECTION — the part that does not care\n * which collection (AGL-2621).\n *\n * The contact import (AGL-2602) settled how a file becomes records: a\n * header row is matched against an alias table to PROPOSE a column → field\n * mapping, the operator corrects it, one line is mapped to a raw row of\n * verbatim strings, and the server judges each row and tallies what it did.\n * A companies file goes through the same three stages with a different\n * field list, so the stages live here, parametric over the field union, and\n * the CRM plugin's contact and company importers each supply their vocabulary\n * — the fields, their aliases, their labels — and nothing else.\n *\n * ## A custom target is `custom:<key>`\n *\n * A column may also map to a custom field the merchant defined, which has\n * no standard name. The target is one string rather than a discriminated\n * object because it is the VALUE of a select control and travels through a\n * form; the prefix is what tells the two apart on the way back.\n *\n * ## The ceilings are shared numbers\n *\n * One file, one request and one preview are bounded the same way for every\n * collection, because the bounds are about the browser's memory and a\n * console request's budget, not about what the rows hold.\n */\n\n/**\n * The most rows one uploaded file may carry.\n *\n * A bound on the work one import represents and on the memory the browser\n * holds while mapping it — five thousand rows of a wide export is already\n * several megabytes of cells in a tab. A larger list is split and imported\n * in pieces; the drawer says so on the file, before a single row is sent.\n */\nexport const CSV_IMPORT_MAX_ROWS = 5_000\n\n/**\n * Rows per request.\n *\n * Each row costs the server a lookup and a write, plus whatever a name it\n * has not seen in this request costs to resolve; two hundred of those sit\n * comfortably inside a console request's budget and give the progress bar\n * twenty-five steps on the largest file the drawer accepts.\n */\nexport const CSV_IMPORT_CHUNK_SIZE = 200\n\n/**\n * The most bytes one request may carry, checked before the body is judged.\n *\n * Two hundred rows of a wide export with long values is well under a\n * megabyte; two megabytes is the line past which a request is not a chunk\n * of a file but something else being pushed through this door.\n */\nexport const CSV_IMPORT_MAX_BODY_BYTES = 2_000_000\n\n/** How many mapped rows the drawer shows before the operator commits. */\nexport const CSV_IMPORT_PREVIEW_ROWS = 10\n\n/** The prefix a custom-field target id carries. */\nconst CUSTOM_TARGET_PREFIX = 'custom:'\n\n/** The custom-field target id for a definition key. */\nexport function customImportTarget(key: string): `custom:${string}` {\n  return `${CUSTOM_TARGET_PREFIX}${key}`\n}\n\n/** The definition key a custom target names, or `null` for a standard field. */\nexport function customImportTargetKey(target: string): string | null {\n  return target.startsWith(CUSTOM_TARGET_PREFIX)\n    ? target.slice(CUSTOM_TARGET_PREFIX.length)\n    : null\n}\n\n/**\n * Normalizes a header cell for alias matching.\n *\n * Underscores, dots and hyphens all become one space, so `e-mail`,\n * `email_address` and `Email Address` compare as the words they are. The\n * alias tables are written in the human spelling and pass through the same\n * function, so a table stays readable and the comparison stays exact.\n */\nexport function importHeaderKey(value: unknown): string {\n  return String(value ?? '')\n    .trim()\n    .toLowerCase()\n    .replace(/[_.\\-/]+/g, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n}\n\n/** An alias table, normalized once through {@link importHeaderKey}. */\nexport function importAliasKeys<F extends string>(\n  fields: readonly F[],\n  aliases: Record<F, readonly string[]>,\n): Record<F, ReadonlySet<string>> {\n  const keys = {} as Record<F, ReadonlySet<string>>\n  for (const field of fields) {\n    keys[field] = new Set(aliases[field].map(importHeaderKey))\n  }\n  return keys\n}\n\n/**\n * A proposed mapping from a file's header row.\n *\n * Custom fields win over standard aliases when a header matches a\n * definition's label or key exactly — a merchant who defined a field called\n * \"Status\" meant THEIR status, not our lifecycle stage. Each target is\n * taken at most once, by the first column that claims it, so a file with two\n * columns named \"Email\" maps the first and leaves the second for the\n * operator to decide.\n */\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n): Record<number, F>\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n  customFields: readonly { key: string; label: string }[],\n): Record<number, F | `custom:${string}`>\nexport function guessImportMapping<F extends string>(\n  columns: readonly string[],\n  fields: readonly F[],\n  aliasKeys: Record<F, ReadonlySet<string>>,\n  customFields: readonly { key: string; label: string }[] = [],\n): Record<number, F | `custom:${string}`> {\n  const mapping: Record<number, F | `custom:${string}`> = {}\n  const taken = new Set<string>()\n  const customByHeader = new Map<string, string>()\n  for (const field of customFields) {\n    customByHeader.set(importHeaderKey(field.label), field.key)\n    customByHeader.set(importHeaderKey(field.key), field.key)\n  }\n  columns.forEach((column, index) => {\n    const key = importHeaderKey(column)\n    if (!key) return\n    const customKey = customByHeader.get(key)\n    if (customKey) {\n      const target = customImportTarget(customKey)\n      if (!taken.has(target)) {\n        mapping[index] = target\n        taken.add(target)\n      }\n      return\n    }\n    for (const field of fields) {\n      if (taken.has(field)) continue\n      if (aliasKeys[field].has(key)) {\n        mapping[index] = field\n        taken.add(field)\n        return\n      }\n    }\n  })\n  return mapping\n}\n\n/**\n * One parsed line under a mapping: the cells the mapping selected, under the\n * field they were mapped to, verbatim, with custom values gathered under\n * `custom` by definition key. Empty cells are left absent.\n */\nexport function mapImportRow<F extends string>(\n  cells: readonly string[],\n  mapping: Record<number, F | `custom:${string}`>,\n): Partial<Record<F, string>> & { custom?: Record<string, string> } {\n  const standard: Partial<Record<F, string>> = {}\n  const custom: Record<string, string> = {}\n  for (const [indexText, target] of Object.entries(mapping)) {\n    const value = String(cells[Number(indexText)] ?? '')\n    if (!value.trim()) continue\n    const customKey = customImportTargetKey(target)\n    if (customKey) {\n      custom[customKey] = value\n    } else {\n      standard[target as F] = value\n    }\n  }\n  return Object.keys(custom).length ? { ...standard, custom } : standard\n}\n\n/**\n * A tag cell as the tags it names.\n *\n * `|` or `,` separated — the CSV export writes `|`, most other products\n * write `,` — lowercased and trimmed like a record's own tag field, so an\n * imported `VIP` and a typed `vip` are one tag and not two.\n */\nexport function parseImportTags(value: unknown, max: number): string[] {\n  const parts = Array.isArray(value)\n    ? value.map((entry) => String(entry ?? ''))\n    : String(value ?? '').split(/[|,]/)\n  return [\n    ...new Set(parts.map((tag) => tag.trim().toLowerCase()).filter(Boolean)),\n  ].slice(0, max)\n}\n\n/**\n * A yes/no cell as a boolean, or `null` when it is neither.\n *\n * The affirmatives are the ones consent and checkbox columns actually\n * carry; the negatives are listed so that an explicit `no` is a `false`\n * rather than an unreadable value that gets reported as dropped.\n */\nexport function parseImportFlag(value: unknown): boolean | null {\n  if (typeof value === 'boolean') return value\n  if (typeof value === 'number') return value === 1 ? true : value === 0 ? false : null\n  const text = String(value ?? '')\n    .trim()\n    .toLowerCase()\n  if (['yes', 'y', 'true', '1', 'on', 'subscribed', 'opted in', 'opted-in'].includes(text)) {\n    return true\n  }\n  if (['no', 'n', 'false', '0', 'off', 'unsubscribed', ''].includes(text)) {\n    return false\n  }\n  return null\n}\n\n/** A cell as trimmed text capped at `max`, or `undefined` when blank. */\nexport function importTextValue(value: unknown, max: number): string | undefined {\n  const text = String(value ?? '')\n    .trim()\n    .slice(0, max)\n  return text || undefined\n}\n\n/** A cell the file carried that could not be read as the field it was mapped to. */\nexport interface ImportDroppedValue {\n  /** The standard field name, or `custom:<key>`. */\n  field: string\n  value: string\n}\n\n/** A CSV cell, quoted only when it has to be. */\nexport function csvCell(value: unknown): string {\n  const text = String(value ?? '')\n  return /[\",\\r\\n]/.test(text) ? `\"${text.replace(/\"/g, '\"\"')}\"` : text\n}\n\n/**\n * A whole CSV — the header, then one line per row — through {@link csvCell}.\n *\n * The one serializer for every CSV the console writes: each CRM section's\n * export, the skipped-rows file an import hands back and each report\n * table's export.\n * Quoting is decided in {@link csvCell} and nowhere else — a cell holding a\n * comma, a quote or a line break is wrapped in quotes with its quotes\n * doubled, no other cell is touched, and a `null` or `undefined` cell is\n * empty rather than the word — so that a report's file and a contacts file\n * open the same way in a spreadsheet.\n */\nexport function csvDocument(\n  header: readonly unknown[],\n  rows: readonly (readonly unknown[])[],\n): string {\n  return [header, ...rows]\n    .map((line) => line.map(csvCell).join(','))\n    .join('\\n')\n}\n\n/**\n * The skipped rows as a file the operator can fix and re-import.\n *\n * The original columns verbatim plus a trailing `Skipped because` column,\n * so the file round-trips: correct the cell, delete the last column or\n * leave it unmapped, and import it again.\n */\nexport function importSkippedCsv<R extends string>(\n  columns: readonly string[],\n  entries: readonly { cells: readonly string[]; reason: R }[],\n  labels: Record<R, string>,\n): string {\n  return csvDocument(\n    [...columns, 'Skipped because'],\n    entries.map((entry) => [\n      ...columns.map((_column, index) => entry.cells[index] ?? ''),\n      labels[entry.reason] ?? entry.reason,\n    ]),\n  )\n}\n\n/**\n * One row the server did not store, by its index in the request. Each\n * collection names the row back to the operator in its own field — an\n * address, a company name — beside these two.\n */\nexport interface ImportSkippedRow<R extends string> {\n  index: number\n  reason: R\n}\n\n/**\n * What one request did, in the shape every collection's import reports.\n * The drawer sums these across a file; a collection with more to say\n * extends the shape and folds its own field beside {@link mergeImportResults}.\n */\nexport interface ImportChunkResult<S extends ImportSkippedRow<string>> {\n  received: number\n  created: number\n  merged: number\n  skipped: S[]\n  /** Unreadable cells, tallied by field. */\n  dropped: Record<string, number>\n  /** Owner addresses that matched no member of the organization. */\n  ownersUnresolved: string[]\n  /**\n   * Of the rows stored, how many carry an address whose domain has no mail\n   * server (AGL-3328) — records that now read \"Would bounce\". Absent for a\n   * collection whose rows carry no address, and for a request whose check\n   * did not answer in time.\n   */\n  noMailServer?: number\n}\n\n/** An empty tally, for the drawer to fold chunk results into. */\nexport function emptyImportResult<\n  S extends ImportSkippedRow<string>,\n>(): ImportChunkResult<S> {\n  return {\n    received: 0,\n    created: 0,\n    merged: 0,\n    skipped: [],\n    dropped: {},\n    ownersUnresolved: [],\n  }\n}\n\n/**\n * Two results as one.\n *\n * `offset` is where the chunk started in the file, so a skipped row's index\n * comes back as its position in the FILE rather than in the request — which\n * is what the download of skipped rows has to look up.\n */\nexport function mergeImportResults<S extends ImportSkippedRow<string>>(\n  total: ImportChunkResult<S>,\n  chunk: Partial<ImportChunkResult<S>>,\n  offset = 0,\n): ImportChunkResult<S> {\n  const dropped = { ...total.dropped }\n  for (const [field, count] of Object.entries(chunk.dropped ?? {})) {\n    dropped[field] = (dropped[field] ?? 0) + Number(count ?? 0)\n  }\n  return {\n    received: total.received + Number(chunk.received ?? 0),\n    created: total.created + Number(chunk.created ?? 0),\n    merged: total.merged + Number(chunk.merged ?? 0),\n    skipped: [\n      ...total.skipped,\n      ...(chunk.skipped ?? []).map((entry) => ({\n        ...entry,\n        index: Number(entry.index) + offset,\n      })),\n    ],\n    dropped,\n    ownersUnresolved: [\n      ...new Set([...total.ownersUnresolved, ...(chunk.ownersUnresolved ?? [])]),\n    ],\n    ...(total.noMailServer !== undefined || chunk.noMailServer !== undefined\n      ? { noMailServer: Number(total.noMailServer ?? 0) + Number(chunk.noMailServer ?? 0) }\n      : {}),\n  }\n}\n\n/**\n * What an import's result says about the addresses that would bounce\n * (AGL-3328), or `null` when none does.\n */\nexport function importNoMailServerSentence(count: number | null | undefined): string | null {\n  const n = Math.max(0, Math.floor(Number(count) || 0))\n  if (!n) return null\n  return n === 1\n    ? '1 address has no mail server. Its record reads \"Would bounce\", and campaigns and sequences skip it.'\n    : `${n.toLocaleString('en-US')} addresses have no mail server. Their records read \"Would bounce\", ` +\n        'and campaigns and sequences skip them.'\n}\n"],"names":["CSV_IMPORT_MAX_ROWS","CSV_IMPORT_CHUNK_SIZE","CSV_IMPORT_MAX_BODY_BYTES","CSV_IMPORT_PREVIEW_ROWS","CUSTOM_TARGET_PREFIX","customImportTarget","key","customImportTargetKey","target","startsWith","slice","length","importHeaderKey","value","String","trim","toLowerCase","replace","importAliasKeys","fields","aliases","keys","field","Set","map","guessImportMapping","columns","aliasKeys","customFields","mapping","taken","customByHeader","Map","set","label","forEach","column","index","customKey","get","has","add","mapImportRow","cells","standard","custom","indexText","Object","entries","Number","parseImportTags","max","parts","Array","isArray","entry","split","tag","filter","Boolean","parseImportFlag","text","includes","importTextValue","undefined","csvCell","test","csvDocument","header","rows","line","join","importSkippedCsv","labels","_column","reason","emptyImportResult","received","created","merged","skipped","dropped","ownersUnresolved","mergeImportResults","total","chunk","offset","count","noMailServer","importNoMailServerSentence","n","Math","floor","toLocaleString"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GAED;;;;;;;CAOC,GACD,OAAO,MAAMA,sBAAsB,KAAK;AAExC;;;;;;;CAOC,GACD,OAAO,MAAMC,wBAAwB,IAAG;AAExC;;;;;;CAMC,GACD,OAAO,MAAMC,4BAA4B,QAAS;AAElD,uEAAuE,GACvE,OAAO,MAAMC,0BAA0B,GAAE;AAEzC,iDAAiD,GACjD,MAAMC,uBAAuB;AAE7B,qDAAqD,GACrD,OAAO,SAASC,mBAAmBC,GAAW;IAC5C,OAAO,GAAGF,uBAAuBE,KAAK;AACxC;AAEA,8EAA8E,GAC9E,OAAO,SAASC,sBAAsBC,MAAc;IAClD,OAAOA,OAAOC,UAAU,CAACL,wBACrBI,OAAOE,KAAK,CAACN,qBAAqBO,MAAM,IACxC;AACN;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,gBAAgBC,KAAc;IAC5C,OAAOC,OAAOD,gBAAAA,QAAS,IACpBE,IAAI,GACJC,WAAW,GACXC,OAAO,CAAC,aAAa,KACrBA,OAAO,CAAC,QAAQ,KAChBF,IAAI;AACT;AAEA,qEAAqE,GACrE,OAAO,SAASG,gBACdC,MAAoB,EACpBC,OAAqC;IAErC,MAAMC,OAAO,CAAC;IACd,KAAK,MAAMC,SAASH,OAAQ;QAC1BE,IAAI,CAACC,MAAM,GAAG,IAAIC,IAAIH,OAAO,CAACE,MAAM,CAACE,GAAG,CAACZ;IAC3C;IACA,OAAOS;AACT;AAuBA,OAAO,SAASI,mBACdC,OAA0B,EAC1BP,MAAoB,EACpBQ,SAAyC,EACzCC,eAA0D,EAAE;IAE5D,MAAMC,UAAkD,CAAC;IACzD,MAAMC,QAAQ,IAAIP;IAClB,MAAMQ,iBAAiB,IAAIC;IAC3B,KAAK,MAAMV,SAASM,aAAc;QAChCG,eAAeE,GAAG,CAACrB,gBAAgBU,MAAMY,KAAK,GAAGZ,MAAMhB,GAAG;QAC1DyB,eAAeE,GAAG,CAACrB,gBAAgBU,MAAMhB,GAAG,GAAGgB,MAAMhB,GAAG;IAC1D;IACAoB,QAAQS,OAAO,CAAC,CAACC,QAAQC;QACvB,MAAM/B,MAAMM,gBAAgBwB;QAC5B,IAAI,CAAC9B,KAAK;QACV,MAAMgC,YAAYP,eAAeQ,GAAG,CAACjC;QACrC,IAAIgC,WAAW;YACb,MAAM9B,SAASH,mBAAmBiC;YAClC,IAAI,CAACR,MAAMU,GAAG,CAAChC,SAAS;gBACtBqB,OAAO,CAACQ,MAAM,GAAG7B;gBACjBsB,MAAMW,GAAG,CAACjC;YACZ;YACA;QACF;QACA,KAAK,MAAMc,SAASH,OAAQ;YAC1B,IAAIW,MAAMU,GAAG,CAAClB,QAAQ;YACtB,IAAIK,SAAS,CAACL,MAAM,CAACkB,GAAG,CAAClC,MAAM;gBAC7BuB,OAAO,CAACQ,MAAM,GAAGf;gBACjBQ,MAAMW,GAAG,CAACnB;gBACV;YACF;QACF;IACF;IACA,OAAOO;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASa,aACdC,KAAwB,EACxBd,OAA+C;IAE/C,MAAMe,WAAuC,CAAC;IAC9C,MAAMC,SAAiC,CAAC;IACxC,KAAK,MAAM,CAACC,WAAWtC,OAAO,IAAIuC,OAAOC,OAAO,CAACnB,SAAU;YACpCc;QAArB,MAAM9B,QAAQC,QAAO6B,gBAAAA,KAAK,CAACM,OAAOH,WAAW,YAAxBH,gBAA4B;QACjD,IAAI,CAAC9B,MAAME,IAAI,IAAI;QACnB,MAAMuB,YAAY/B,sBAAsBC;QACxC,IAAI8B,WAAW;YACbO,MAAM,CAACP,UAAU,GAAGzB;QACtB,OAAO;YACL+B,QAAQ,CAACpC,OAAY,GAAGK;QAC1B;IACF;IACA,OAAOkC,OAAO1B,IAAI,CAACwB,QAAQlC,MAAM,GAAG,aAAKiC;QAAUC;SAAWD;AAChE;AAEA;;;;;;CAMC,GACD,OAAO,SAASM,gBAAgBrC,KAAc,EAAEsC,GAAW;IACzD,MAAMC,QAAQC,MAAMC,OAAO,CAACzC,SACxBA,MAAMW,GAAG,CAAC,CAAC+B,QAAUzC,OAAOyC,gBAAAA,QAAS,OACrCzC,OAAOD,gBAAAA,QAAS,IAAI2C,KAAK,CAAC;IAC9B,OAAO;WACF,IAAIjC,IAAI6B,MAAM5B,GAAG,CAAC,CAACiC,MAAQA,IAAI1C,IAAI,GAAGC,WAAW,IAAI0C,MAAM,CAACC;KAChE,CAACjD,KAAK,CAAC,GAAGyC;AACb;AAEA;;;;;;CAMC,GACD,OAAO,SAASS,gBAAgB/C,KAAc;IAC5C,IAAI,OAAOA,UAAU,WAAW,OAAOA;IACvC,IAAI,OAAOA,UAAU,UAAU,OAAOA,UAAU,IAAI,OAAOA,UAAU,IAAI,QAAQ;IACjF,MAAMgD,OAAO/C,OAAOD,gBAAAA,QAAS,IAC1BE,IAAI,GACJC,WAAW;IACd,IAAI;QAAC;QAAO;QAAK;QAAQ;QAAK;QAAM;QAAc;QAAY;KAAW,CAAC8C,QAAQ,CAACD,OAAO;QACxF,OAAO;IACT;IACA,IAAI;QAAC;QAAM;QAAK;QAAS;QAAK;QAAO;QAAgB;KAAG,CAACC,QAAQ,CAACD,OAAO;QACvE,OAAO;IACT;IACA,OAAO;AACT;AAEA,uEAAuE,GACvE,OAAO,SAASE,gBAAgBlD,KAAc,EAAEsC,GAAW;IACzD,MAAMU,OAAO/C,OAAOD,gBAAAA,QAAS,IAC1BE,IAAI,GACJL,KAAK,CAAC,GAAGyC;IACZ,OAAOU,QAAQG;AACjB;AASA,+CAA+C,GAC/C,OAAO,SAASC,QAAQpD,KAAc;IACpC,MAAMgD,OAAO/C,OAAOD,gBAAAA,QAAS;IAC7B,OAAO,WAAWqD,IAAI,CAACL,QAAQ,CAAC,CAAC,EAAEA,KAAK5C,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC,GAAG4C;AACnE;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASM,YACdC,MAA0B,EAC1BC,IAAqC;IAErC,OAAO;QAACD;WAAWC;KAAK,CACrB7C,GAAG,CAAC,CAAC8C,OAASA,KAAK9C,GAAG,CAACyC,SAASM,IAAI,CAAC,MACrCA,IAAI,CAAC;AACV;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,iBACd9C,OAA0B,EAC1BsB,OAA2D,EAC3DyB,MAAyB;IAEzB,OAAON,YACL;WAAIzC;QAAS;KAAkB,EAC/BsB,QAAQxB,GAAG,CAAC,CAAC+B;YAEXkB;eAFqB;eAClB/C,QAAQF,GAAG,CAAC,CAACkD,SAASrC;oBAAUkB;wBAAAA,qBAAAA,MAAMZ,KAAK,CAACN,MAAM,YAAlBkB,qBAAsB;;aACzDkB,uBAAAA,MAAM,CAAClB,MAAMoB,MAAM,CAAC,YAApBF,uBAAwBlB,MAAMoB,MAAM;SACrC;;AAEL;AAmCA,+DAA+D,GAC/D,OAAO,SAASC;IAGd,OAAO;QACLC,UAAU;QACVC,SAAS;QACTC,QAAQ;QACRC,SAAS,EAAE;QACXC,SAAS,CAAC;QACVC,kBAAkB,EAAE;IACtB;AACF;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,mBACdC,KAA2B,EAC3BC,KAAoC,EACpCC,SAAS,CAAC;QAGkCD,gBAIRA,iBACFA,gBACFA,eAGxBA,gBAOuCA,yBAGlBD,qBAAkCC;IApB/D,MAAMJ,UAAU,aAAKG,MAAMH,OAAO;IAClC,KAAK,MAAM,CAAC3D,OAAOiE,MAAM,IAAIxC,OAAOC,OAAO,EAACqC,iBAAAA,MAAMJ,OAAO,YAAbI,iBAAiB,CAAC,GAAI;YAC9CJ;QAAlBA,OAAO,CAAC3D,MAAM,GAAG,EAAC2D,iBAAAA,OAAO,CAAC3D,MAAM,YAAd2D,iBAAkB,KAAKhC,OAAOsC,gBAAAA,QAAS;IAC3D;IACA,OAAO;QACLV,UAAUO,MAAMP,QAAQ,GAAG5B,QAAOoC,kBAAAA,MAAMR,QAAQ,YAAdQ,kBAAkB;QACpDP,SAASM,MAAMN,OAAO,GAAG7B,QAAOoC,iBAAAA,MAAMP,OAAO,YAAbO,iBAAiB;QACjDN,QAAQK,MAAML,MAAM,GAAG9B,QAAOoC,gBAAAA,MAAMN,MAAM,YAAZM,gBAAgB;QAC9CL,SAAS;eACJI,MAAMJ,OAAO;eACb,EAACK,iBAAAA,MAAML,OAAO,YAAbK,iBAAiB,EAAE,EAAE7D,GAAG,CAAC,CAAC+B,QAAW,aACpCA;oBACHlB,OAAOY,OAAOM,MAAMlB,KAAK,IAAIiD;;SAEhC;QACDL;QACAC,kBAAkB;eACb,IAAI3D,IAAI;mBAAI6D,MAAMF,gBAAgB;oBAAMG,0BAAAA,MAAMH,gBAAgB,YAAtBG,0BAA0B,EAAE;aAAE;SAC1E;OACGD,MAAMI,YAAY,KAAKxB,aAAaqB,MAAMG,YAAY,KAAKxB,YAC3D;QAAEwB,cAAcvC,QAAOmC,sBAAAA,MAAMI,YAAY,YAAlBJ,sBAAsB,KAAKnC,QAAOoC,sBAAAA,MAAMG,YAAY,YAAlBH,sBAAsB;IAAG,IAClF,CAAC;AAET;AAEA;;;CAGC,GACD,OAAO,SAASI,2BAA2BF,KAAgC;IACzE,MAAMG,IAAIC,KAAKxC,GAAG,CAAC,GAAGwC,KAAKC,KAAK,CAAC3C,OAAOsC,UAAU;IAClD,IAAI,CAACG,GAAG,OAAO;IACf,OAAOA,MAAM,IACT,wGACA,GAAGA,EAAEG,cAAc,CAAC,SAAS,mEAAmE,CAAC,GAC/F;AACR"}

package/src/lib/app-utils/docs-help.generated.d.ts

@@ -276,7 +276,7 @@ export declare const PLUGIN_DOCS: {
 };
 export type PluginDocsKey = keyof typeof PLUGIN_DOCS;
 export declare const PLUGIN_DOCS_ANCHORS: {
-    readonly abuseReports: readonly ["#where-reports-come-from", "#held-outbound-email", "#what-is-screened", "#tiers", "#deciding-a-held-row", "#names-and-domains", "#stripe-fraud-signals", "#seller-fraud-pattern", "#card-testing-velocity", "#marketplace", "#triage-by-severity", "#csam", "#which-lever", "#statuses", "#disclosure", "#dmca", "#counter-notices", "#counter-notice-clock", "#counter-notice-steps", "#repeat-infringers", "#repeat-infringer-threshold", "#known-gaps", "#related"];
+    readonly abuseReports: readonly ["#where-reports-come-from", "#held-outbound-email", "#what-is-screened", "#tiers", "#deciding-a-held-row", "#names-and-domains", "#stripe-fraud-signals", "#seller-fraud-pattern", "#card-testing-velocity", "#marketplace", "#risk-notices", "#triage-by-severity", "#csam", "#which-lever", "#statuses", "#disclosure", "#dmca", "#counter-notices", "#counter-notice-clock", "#counter-notice-steps", "#repeat-infringers", "#repeat-infringer-threshold", "#known-gaps", "#related"];
     readonly actionsBuilder: readonly ["#create-an-action", "#recipes", "#describe-it", "#triggers", "#crm-events", "#only-run-when-a-field-matches", "#chain-multiple-conditions-andor", "#steps", "#crm-steps", "#step-conditions", "#sequences", "#run-history", "#what-is-and-isnt-recorded", "#interactions-from-the-besigner", "#when-to-use-which", "#related"];
     readonly aglynAssist: readonly ["#what-it-can-do", "#aglyn-ai", "#answers-for-beginners-and-developers", "#offers-to-open-a-page", "#edits-in-the-besigner", "#where-an-answer-came-from", "#answers-straight-from-the-documentation", "#message-limits", "#feedback", "#privacy"];
     readonly aiAutomations: readonly ["#draft", "#explain", "#why-a-run-failed", "#what-is-sent", "#who-can-use-it", "#related"];

package/src/lib/app-utils/docs-help.generated.js

@@ -283,6 +283,7 @@ export const PLUGIN_DOCS_ANCHORS = {
         '#seller-fraud-pattern',
         '#card-testing-velocity',
         '#marketplace',
+        '#risk-notices',
         '#triage-by-severity',
         '#csam',
         '#which-lever',