@aglyn/plugins-commerce 1.0.0-beta.199 → 1.0.0-beta.201

package/src/lib/server/collection-membership.js

@@ -0,0 +1,172 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import * as CommerceModel from "../model/index.js";
+/*
+ * RE-STAMP A SMART COLLECTION'S MEMBERSHIP ON THE PRODUCTS (AGL-3321).
+ *
+ * The storefront reads a smart collection whose rules no query can express as
+ * `collectionIds array-contains <id>`, so the membership lives on each
+ * product. Product writers stamp it from the rules as they stand; when the
+ * RULES change — a smart collection is created, edited or deleted — every
+ * product of the site may move, and this is the one place that moves them.
+ * The catalog card calls it after each save and delete.
+ *
+ * It only ever adds or removes THIS collection's id, and writes only a
+ * product whose membership differs, so running it twice changes nothing the
+ * second time and a run cut short is finished by the next. A collection that
+ * is gone (or no longer smart) is taken off every product still naming it.
+ *
+ * Bounded per request: it walks the products in document-id order, at most
+ * {@link MEMBERSHIP_SCAN_MAX} of them, and answers with a cursor the caller
+ * passes back until `done`.
+ */ /** Products read (and written) per batch. */ export const MEMBERSHIP_PAGE = 300;
+/** Products one request walks before it hands back a cursor. */ export const MEMBERSHIP_SCAN_MAX = 3000;
+/**
+ * An allowlist (AGL-2372): the roles `/api/hosts/collections` lets edit a
+ * collection, since whoever may change the rules may move what they match.
+ */ const COLLECTION_EDITORS = new Set([
+    'admin',
+    'editor',
+    'author'
+]);
+/**
+ * One bounded pass: every product from `after` onward, up to the scan cap,
+ * given this collection's membership as the rules now say.
+ */ export async function restampCollectionMembership(firestore, hostId, collectionId, after) {
+    const hostRef = firestore.collection('hosts').doc(hostId);
+    const collectionSnapshot = await hostRef.collection('collections').doc(collectionId).get();
+    const data = collectionSnapshot.exists ? collectionSnapshot.data() : undefined;
+    const smart = data && Aglyn.hostCollectionKind(data) === 'catalog' && data['mode'] === 'smart' ? data : null;
+    const { FieldValue, FieldPath } = firebaseAdmin.firestore;
+    const productsRef = hostRef.collection('products');
+    let scanned = 0;
+    let updated = 0;
+    if (!smart) {
+        // Gone, or no longer smart: off every product that still names it.
+        for(;;){
+            const page = await productsRef.where(CommerceModel.PRODUCT_COLLECTION_IDS, 'array-contains', collectionId).limit(MEMBERSHIP_PAGE).get();
+            if (page.empty) break;
+            const batch = firestore.batch();
+            for (const entry of page.docs){
+                batch.update(entry.ref, {
+                    [CommerceModel.PRODUCT_COLLECTION_IDS]: FieldValue.arrayRemove(collectionId)
+                });
+            }
+            await batch.commit();
+            scanned += page.size;
+            updated += page.size;
+            if (page.size < MEMBERSHIP_PAGE || scanned >= MEMBERSHIP_SCAN_MAX) {
+                return {
+                    done: page.size < MEMBERSHIP_PAGE,
+                    scanned,
+                    updated
+                };
+            }
+        }
+        return {
+            done: true,
+            scanned,
+            updated
+        };
+    }
+    let cursor = after;
+    while(scanned < MEMBERSHIP_SCAN_MAX){
+        let pageQuery = productsRef.orderBy(FieldPath.documentId()).limit(MEMBERSHIP_PAGE);
+        if (cursor) pageQuery = pageQuery.startAfter(cursor);
+        const page = await pageQuery.get();
+        if (page.empty) return {
+            done: true,
+            scanned,
+            updated
+        };
+        const batch = firestore.batch();
+        let writes = 0;
+        for (const entry of page.docs){
+            var _stored_collectionIds;
+            const stored = entry.data();
+            const member = CommerceModel.smartCollectionMatches(CommerceModel.liftLegacyProduct(stored), smart);
+            const holds = ((_stored_collectionIds = stored.collectionIds) != null ? _stored_collectionIds : []).includes(collectionId);
+            if (member === holds) continue;
+            batch.update(entry.ref, {
+                [CommerceModel.PRODUCT_COLLECTION_IDS]: member ? FieldValue.arrayUnion(collectionId) : FieldValue.arrayRemove(collectionId)
+            });
+            writes += 1;
+        }
+        if (writes) await batch.commit();
+        scanned += page.size;
+        updated += writes;
+        cursor = page.docs[page.docs.length - 1].id;
+        if (page.size < MEMBERSHIP_PAGE) return {
+            done: true,
+            scanned,
+            updated
+        };
+    }
+    return {
+        done: false,
+        after: cursor,
+        scanned,
+        updated
+    };
+}
+/** `POST /api/commerce/collection-membership` — `{ hostId, collectionId, after? }`. */ export const collectionMembershipHandler = async (req, res)=>{
+    var _req_headers_authorization, _req_body, _body_hostId, _body_collectionId;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    const body = typeof req.body === 'string' ? JSON.parse(req.body || '{}') : (_req_body = req.body) != null ? _req_body : {};
+    const hostId = String((_body_hostId = body.hostId) != null ? _body_hostId : '');
+    const collectionId = String((_body_collectionId = body.collectionId) != null ? _body_collectionId : '');
+    const after = typeof body.after === 'string' && body.after ? body.after : undefined;
+    if (!hostId || !collectionId) {
+        return res.status(400).json({
+            error: 'Missing hostId or collectionId'
+        });
+    }
+    try {
+        var _hostSnapshot_get;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        const firestore = firebaseAdmin.app().firestore();
+        const hostSnapshot = await firestore.collection('hosts').doc(hostId).get();
+        if (!hostSnapshot.exists) return res.status(404).json({
+            error: 'Unknown site'
+        });
+        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
+        if (decoded['staff'] !== true && !COLLECTION_EDITORS.has(String(memberRole))) {
+            return res.status(403).json({
+                error: 'Not permitted'
+            });
+        }
+        const pass = await restampCollectionMembership(firestore, hostId, collectionId, after);
+        return res.status(200).json(pass);
+    } catch (error) {
+        console.error('collection-membership', error);
+        return res.status(500).json({
+            error: 'Collection membership failed'
+        });
+    }
+};
+
+//# sourceMappingURL=collection-membership.js.map

package/src/lib/server/collection-membership.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/collection-membership.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\n\n/*\n * RE-STAMP A SMART COLLECTION'S MEMBERSHIP ON THE PRODUCTS (AGL-3321).\n *\n * The storefront reads a smart collection whose rules no query can express as\n * `collectionIds array-contains <id>`, so the membership lives on each\n * product. Product writers stamp it from the rules as they stand; when the\n * RULES change — a smart collection is created, edited or deleted — every\n * product of the site may move, and this is the one place that moves them.\n * The catalog card calls it after each save and delete.\n *\n * It only ever adds or removes THIS collection's id, and writes only a\n * product whose membership differs, so running it twice changes nothing the\n * second time and a run cut short is finished by the next. A collection that\n * is gone (or no longer smart) is taken off every product still naming it.\n *\n * Bounded per request: it walks the products in document-id order, at most\n * {@link MEMBERSHIP_SCAN_MAX} of them, and answers with a cursor the caller\n * passes back until `done`.\n */\n\n/** Products read (and written) per batch. */\nexport const MEMBERSHIP_PAGE = 300\n/** Products one request walks before it hands back a cursor. */\nexport const MEMBERSHIP_SCAN_MAX = 3000\n\nexport interface MembershipPass {\n  done: boolean\n  /** Where the next request starts, when not done. */\n  after?: string\n  scanned: number\n  updated: number\n}\n\n/**\n * An allowlist (AGL-2372): the roles `/api/hosts/collections` lets edit a\n * collection, since whoever may change the rules may move what they match.\n */\nconst COLLECTION_EDITORS = new Set(['admin', 'editor', 'author'])\n\n/**\n * One bounded pass: every product from `after` onward, up to the scan cap,\n * given this collection's membership as the rules now say.\n */\nexport async function restampCollectionMembership(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n  collectionId: string,\n  after?: string,\n): Promise<MembershipPass> {\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  const collectionSnapshot = await hostRef.collection('collections').doc(collectionId).get()\n  const data = collectionSnapshot.exists ? collectionSnapshot.data() : undefined\n  const smart =\n    data && Aglyn.hostCollectionKind(data) === 'catalog' && data['mode'] === 'smart'\n      ? (data as CommerceModel.HostCollection)\n      : null\n  const { FieldValue, FieldPath } = firebaseAdmin.firestore\n  const productsRef = hostRef.collection('products')\n  let scanned = 0\n  let updated = 0\n\n  if (!smart) {\n    // Gone, or no longer smart: off every product that still names it.\n    for (;;) {\n      const page = await productsRef\n        .where(CommerceModel.PRODUCT_COLLECTION_IDS, 'array-contains', collectionId)\n        .limit(MEMBERSHIP_PAGE)\n        .get()\n      if (page.empty) break\n      const batch = firestore.batch()\n      for (const entry of page.docs) {\n        batch.update(entry.ref, {\n          [CommerceModel.PRODUCT_COLLECTION_IDS]: FieldValue.arrayRemove(collectionId),\n        })\n      }\n      await batch.commit()\n      scanned += page.size\n      updated += page.size\n      if (page.size < MEMBERSHIP_PAGE || scanned >= MEMBERSHIP_SCAN_MAX) {\n        return { done: page.size < MEMBERSHIP_PAGE, scanned, updated }\n      }\n    }\n    return { done: true, scanned, updated }\n  }\n\n  let cursor = after\n  while (scanned < MEMBERSHIP_SCAN_MAX) {\n    let pageQuery = productsRef.orderBy(FieldPath.documentId()).limit(MEMBERSHIP_PAGE)\n    if (cursor) pageQuery = pageQuery.startAfter(cursor)\n    const page = await pageQuery.get()\n    if (page.empty) return { done: true, scanned, updated }\n    const batch = firestore.batch()\n    let writes = 0\n    for (const entry of page.docs) {\n      const stored = entry.data() as Partial<CommerceModel.HostProduct>\n      const member = CommerceModel.smartCollectionMatches(\n        CommerceModel.liftLegacyProduct(stored),\n        smart,\n      )\n      const holds = (stored.collectionIds ?? []).includes(collectionId)\n      if (member === holds) continue\n      batch.update(entry.ref, {\n        [CommerceModel.PRODUCT_COLLECTION_IDS]: member\n          ? FieldValue.arrayUnion(collectionId)\n          : FieldValue.arrayRemove(collectionId),\n      })\n      writes += 1\n    }\n    if (writes) await batch.commit()\n    scanned += page.size\n    updated += writes\n    cursor = page.docs[page.docs.length - 1].id\n    if (page.size < MEMBERSHIP_PAGE) return { done: true, scanned, updated }\n  }\n  return { done: false, after: cursor, scanned, updated }\n}\n\n/** `POST /api/commerce/collection-membership` — `{ hostId, collectionId, after? }`. */\nexport const collectionMembershipHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n  const body =\n    typeof req.body === 'string' ? JSON.parse(req.body || '{}') : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n  const collectionId = String(body.collectionId ?? '')\n  const after = typeof body.after === 'string' && body.after ? body.after : undefined\n  if (!hostId || !collectionId) {\n    return res.status(400).json({ error: 'Missing hostId or collectionId' })\n  }\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostSnapshot = await firestore.collection('hosts').doc(hostId).get()\n    if (!hostSnapshot.exists) return res.status(404).json({ error: 'Unknown site' })\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (decoded['staff'] !== true && !COLLECTION_EDITORS.has(String(memberRole))) {\n      return res.status(403).json({ error: 'Not permitted' })\n    }\n    const pass = await restampCollectionMembership(firestore, hostId, collectionId, after)\n    return res.status(200).json(pass)\n  } catch (error) {\n    console.error('collection-membership', error)\n    return res.status(500).json({ error: 'Collection membership failed' })\n  }\n}\n"],"names":["Aglyn","firebaseAdmin","CommerceModel","MEMBERSHIP_PAGE","MEMBERSHIP_SCAN_MAX","COLLECTION_EDITORS","Set","restampCollectionMembership","firestore","hostId","collectionId","after","hostRef","collection","doc","collectionSnapshot","get","data","exists","undefined","smart","hostCollectionKind","FieldValue","FieldPath","productsRef","scanned","updated","page","where","PRODUCT_COLLECTION_IDS","limit","empty","batch","entry","docs","update","ref","arrayRemove","commit","size","done","cursor","pageQuery","orderBy","documentId","startAfter","writes","stored","member","smartCollectionMatches","liftLegacyProduct","holds","collectionIds","includes","arrayUnion","length","id","collectionMembershipHandler","req","res","body","method","status","json","error","authorization","String","headers","idToken","startsWith","slice","JSON","parse","hostSnapshot","decoded","app","auth","verifyIdToken","memberRole","uid","has","pass","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,SAASC,aAAa,QAAQ,2BAA0B;AAExD,YAAYC,mBAAmB,oBAAU;AAEzC;;;;;;;;;;;;;;;;;;CAkBC,GAED,2CAA2C,GAC3C,OAAO,MAAMC,kBAAkB,IAAG;AAClC,8DAA8D,GAC9D,OAAO,MAAMC,sBAAsB,KAAI;AAUvC;;;CAGC,GACD,MAAMC,qBAAqB,IAAIC,IAAI;IAAC;IAAS;IAAU;CAAS;AAEhE;;;CAGC,GACD,OAAO,eAAeC,4BACpBC,SAAsC,EACtCC,MAAc,EACdC,YAAoB,EACpBC,KAAc;IAEd,MAAMC,UAAUJ,UAAUK,UAAU,CAAC,SAASC,GAAG,CAACL;IAClD,MAAMM,qBAAqB,MAAMH,QAAQC,UAAU,CAAC,eAAeC,GAAG,CAACJ,cAAcM,GAAG;IACxF,MAAMC,OAAOF,mBAAmBG,MAAM,GAAGH,mBAAmBE,IAAI,KAAKE;IACrE,MAAMC,QACJH,QAAQjB,MAAMqB,kBAAkB,CAACJ,UAAU,aAAaA,IAAI,CAAC,OAAO,KAAK,UACpEA,OACD;IACN,MAAM,EAAEK,UAAU,EAAEC,SAAS,EAAE,GAAGtB,cAAcO,SAAS;IACzD,MAAMgB,cAAcZ,QAAQC,UAAU,CAAC;IACvC,IAAIY,UAAU;IACd,IAAIC,UAAU;IAEd,IAAI,CAACN,OAAO;QACV,mEAAmE;QACnE,OAAS;YACP,MAAMO,OAAO,MAAMH,YAChBI,KAAK,CAAC1B,cAAc2B,sBAAsB,EAAE,kBAAkBnB,cAC9DoB,KAAK,CAAC3B,iBACNa,GAAG;YACN,IAAIW,KAAKI,KAAK,EAAE;YAChB,MAAMC,QAAQxB,UAAUwB,KAAK;YAC7B,KAAK,MAAMC,SAASN,KAAKO,IAAI,CAAE;gBAC7BF,MAAMG,MAAM,CAACF,MAAMG,GAAG,EAAE;oBACtB,CAAClC,cAAc2B,sBAAsB,CAAC,EAAEP,WAAWe,WAAW,CAAC3B;gBACjE;YACF;YACA,MAAMsB,MAAMM,MAAM;YAClBb,WAAWE,KAAKY,IAAI;YACpBb,WAAWC,KAAKY,IAAI;YACpB,IAAIZ,KAAKY,IAAI,GAAGpC,mBAAmBsB,WAAWrB,qBAAqB;gBACjE,OAAO;oBAAEoC,MAAMb,KAAKY,IAAI,GAAGpC;oBAAiBsB;oBAASC;gBAAQ;YAC/D;QACF;QACA,OAAO;YAAEc,MAAM;YAAMf;YAASC;QAAQ;IACxC;IAEA,IAAIe,SAAS9B;IACb,MAAOc,UAAUrB,oBAAqB;QACpC,IAAIsC,YAAYlB,YAAYmB,OAAO,CAACpB,UAAUqB,UAAU,IAAId,KAAK,CAAC3B;QAClE,IAAIsC,QAAQC,YAAYA,UAAUG,UAAU,CAACJ;QAC7C,MAAMd,OAAO,MAAMe,UAAU1B,GAAG;QAChC,IAAIW,KAAKI,KAAK,EAAE,OAAO;YAAES,MAAM;YAAMf;YAASC;QAAQ;QACtD,MAAMM,QAAQxB,UAAUwB,KAAK;QAC7B,IAAIc,SAAS;QACb,KAAK,MAAMb,SAASN,KAAKO,IAAI,CAAE;gBAMda;YALf,MAAMA,SAASd,MAAMhB,IAAI;YACzB,MAAM+B,SAAS9C,cAAc+C,sBAAsB,CACjD/C,cAAcgD,iBAAiB,CAACH,SAChC3B;YAEF,MAAM+B,QAAQ,EAACJ,wBAAAA,OAAOK,aAAa,YAApBL,wBAAwB,EAAE,EAAEM,QAAQ,CAAC3C;YACpD,IAAIsC,WAAWG,OAAO;YACtBnB,MAAMG,MAAM,CAACF,MAAMG,GAAG,EAAE;gBACtB,CAAClC,cAAc2B,sBAAsB,CAAC,EAAEmB,SACpC1B,WAAWgC,UAAU,CAAC5C,gBACtBY,WAAWe,WAAW,CAAC3B;YAC7B;YACAoC,UAAU;QACZ;QACA,IAAIA,QAAQ,MAAMd,MAAMM,MAAM;QAC9Bb,WAAWE,KAAKY,IAAI;QACpBb,WAAWoB;QACXL,SAASd,KAAKO,IAAI,CAACP,KAAKO,IAAI,CAACqB,MAAM,GAAG,EAAE,CAACC,EAAE;QAC3C,IAAI7B,KAAKY,IAAI,GAAGpC,iBAAiB,OAAO;YAAEqC,MAAM;YAAMf;YAASC;QAAQ;IACzE;IACA,OAAO;QAAEc,MAAM;QAAO7B,OAAO8B;QAAQhB;QAASC;IAAQ;AACxD;AAEA,qFAAqF,GACrF,OAAO,MAAM+B,8BAAgD,OAAOC,KAAKC;QAI1CD,4BAMoCA,WAC3CE,cACMA;IAX5B,IAAIF,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,gBAAgBC,QAAOR,6BAAAA,IAAIS,OAAO,CAACF,aAAa,YAAzBP,6BAA6B;IAC1D,MAAMU,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUf,MAAM,IACpCpC;IACJ,IAAI,CAACiD,SAAS,OAAOT,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACrE,MAAMJ,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWW,KAAKC,KAAK,CAACd,IAAIE,IAAI,IAAI,SAASF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IAC9E,MAAMjD,SAASyD,QAAON,eAAAA,KAAKnD,MAAM,YAAXmD,eAAe;IACrC,MAAMlD,eAAewD,QAAON,qBAAAA,KAAKlD,YAAY,YAAjBkD,qBAAqB;IACjD,MAAMjD,QAAQ,OAAOiD,KAAKjD,KAAK,KAAK,YAAYiD,KAAKjD,KAAK,GAAGiD,KAAKjD,KAAK,GAAGQ;IAC1E,IAAI,CAACV,UAAU,CAACC,cAAc;QAC5B,OAAOiD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;IACA,IAAI;YAKkBS;QAJpB,MAAMC,UAAU,MAAMzE,cAAc0E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACT;QAC/D,MAAM5D,YAAYP,cAAc0E,GAAG,GAAGnE,SAAS;QAC/C,MAAMiE,eAAe,MAAMjE,UAAUK,UAAU,CAAC,SAASC,GAAG,CAACL,QAAQO,GAAG;QACxE,IAAI,CAACyD,aAAavD,MAAM,EAAE,OAAOyC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAe;QAC9E,MAAMc,aAAa,EAACL,oBAAAA,aAAazD,GAAG,CAAC,0BAAjByD,oBAAmC,CAAC,EAAE,CAACC,QAAQK,GAAG,CAAC;QACvE,IAAIL,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAACrE,mBAAmB2E,GAAG,CAACd,OAAOY,cAAc;YAC5E,OAAOnB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,MAAMiB,OAAO,MAAM1E,4BAA4BC,WAAWC,QAAQC,cAAcC;QAChF,OAAOgD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACkB;IAC9B,EAAE,OAAOjB,OAAO;QACdkB,QAAQlB,KAAK,CAAC,yBAAyBA;QACvC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;AACF,EAAC"}

package/src/lib/server/draft-order.js

@@ -18,6 +18,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
 import * as CommerceModel from "../model/index.js";
 import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
 import { connectLinkageIsReady } from "@aglyn/tenant-data-admin/server/stripe-account-mode";
+import { checkoutSessionCardAuthenticationParams } from "@aglyn/tenant-data-admin/server/stripe-card-authentication";
 import { resolveManualTaxRateId } from "./manual-tax-rate.js";
 import { holdPromotionSlot, promotionHoldKey } from "./promotion-hold.js";
 import { buildRoute, claimAttempt, Route } from "@aglyn/aglyn/server";
@@ -539,7 +540,8 @@ import { buildRoute, claimAttempt, Route } from "@aglyn/aglyn/server";
             }, {
                 merge: true
             });
-            transaction.set(orderRef, {
+            // With the fields the orders list queries by (AGL-3321).
+            transaction.set(orderRef, CommerceModel.withOrderListFields(orderRef.id, {
                 number,
                 status: 'pending',
                 channel: 'draft',
@@ -566,7 +568,7 @@ import { buildRoute, claimAttempt, Route } from "@aglyn/aglyn/server";
                 ],
                 createdAtMs: Date.now(),
                 createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp()
-            });
+            }));
         });
         // The tax rate is minted here, BELOW the claim, because it creates a real
         // Stripe object (AGL-1953). Cached per host, so it is usually a read.
@@ -596,7 +598,7 @@ import { buildRoute, claimAttempt, Route } from "@aglyn/aglyn/server";
         }
         const params = new URLSearchParams(_extends({
             mode: 'payment'
-        }, useStripeTax ? {
+        }, checkoutSessionCardAuthenticationParams('payment'), useStripeTax ? {
             'automatic_tax[enabled]': 'true'
         } : {}, draftTaxRateId ? {
             'line_items[0][tax_rates][0]': draftTaxRateId

package/src/lib/server/draft-order.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/draft-order.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { connectLinkageIsReady } from '@aglyn/tenant-data-admin/server/stripe-account-mode'\nimport { resolveManualTaxRateId } from './manual-tax-rate'\nimport {\n  type PromotionSlotHold,\n  holdPromotionSlot,\n  promotionHoldKey,\n} from './promotion-hold'\nimport {\n  buildRoute,\n  claimAttempt,\n  Route,\n  type AttemptClaim,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\n\n/**\n * Draft orders (AGL-287, Shopify parity): a manager builds an order in\n * the console and sends the buyer a payment link. Creates the order doc\n * (status `pending`, channel `draft`) with a sequential number, then a\n * Stripe Checkout session on the merchant's connected account whose\n * webhook completion flips the SAME doc to `paid`\n * (metadata type `commerce-draft`).\n */\nexport const draftOrderHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  if (!process.env.STRIPE_SECRET_KEY) {\n    return res.status(501).json({ error: 'Payments are not configured.' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n  const body =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n  const productId = String(body.productId ?? '')\n  const variantId = String(body.variantId ?? '')\n  const quantity = Math.max(1, Math.min(99, Math.round(Number(body.quantity ?? 1))))\n  const email = String(body.email ?? '').trim()\n  // A code the MERCHANT types while composing the order (AGL-305). The\n  // storefront doors read this same field name, so one resolver answers it the\n  // same way whoever pressed the button.\n  const couponCode = String(body.couponCode ?? '').trim()\n  // One draft attempt, minted by the console dialog (AGL-1697). Node\n  // lowercases incoming headers, but read both spellings — the plugin API\n  // request type makes no promise about casing.\n  const idempotencyKey = String(\n    req.headers['idempotency-key'] ?? req.headers['Idempotency-Key'] ?? '',\n  ).trim().slice(0, 200)\n  if (!hostId || !productId) {\n    return res.status(400).json({ error: 'Missing hostId or productId' })\n  }\n\n  let claim: AttemptClaim | null = null\n  /**\n   * The redemption slot this attempt reserved (AGL-305), hoisted so every\n   * refusal below the claim — and the catch — can hand it back. A throw after\n   * the hold is placed is exactly the case where a slot would otherwise stand\n   * invisibly against the merchant's cap until its TTL lapsed, and this path\n   * rolls its order document back on two of those refusals already.\n   */\n  let discountSlot: PromotionSlotHold | null = null\n  let discountHoldKey = ''\n  const releaseDiscountSlot = async (): Promise<void> => {\n    const slot = discountSlot\n    discountSlot = null\n    discountHoldKey = ''\n    if (slot) await slot.release()\n  }\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // AN ALLOWLIST (AGL-2262), matching `cancel-order.ts`, `fulfill-order.ts`\n    // and the Firestore rules, whose host-write predicate is\n    // `hostMemberRole(hostId) in ['admin','editor']`. The old\n    // `!role || role === 'viewer'` denylist caught the stranger but admitted\n    // every OTHER string — a legacy value, a typo, any role added later — on\n    // the one route that mints a live Stripe payment link. `HostAccessRole`\n    // has since grown an `author` (AGL-2334), which this allowlist refuses on\n    // purpose — an author edits content and does not mint payment links — and\n    // which the old denylist would have admitted. That is the allowlist form\n    // earning its keep on a union that changed under it.\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not permitted' })\n    }\n    const productSnapshot = await hostRef\n      .collection('products')\n      .doc(productId)\n      .get()\n    const raw = productSnapshot.data() as any\n    if (!raw || raw.deletedAt) {\n      return res.status(404).json({ error: 'Unknown product' })\n    }\n    const product = CommerceModel.liftLegacyProduct(raw)\n    const variant = variantId\n      ? product.variants.find((item) => item.id === variantId)\n      : product.variants[0]\n    if (!variant) return res.status(404).json({ error: 'Unknown variant' })\n    // A variant with no price yet (AGL-2916) cannot be invoiced: the link\n    // would ask for nothing, or for no amount at all.\n    if (!CommerceModel.variantHasPrice(variant)) {\n      return res.status(400).json({ error: `Set a price for ${product.name} before selling it.` })\n    }\n\n    // Merchant account like the storefront checkout (AGL-284).\n    const ownerOrg = await getOrgForHost(hostId)\n    // Plan gate, re-asked per request exactly as the storefront checkout\n    // asks it (AGL-1873, the AGL-481 pattern): a free or lapsed org must not\n    // keep minting payment links — at the free plan's 0% transaction fee —\n    // through the one commerce door that skipped the entitlement. Sits\n    // ABOVE the attempt claim with the other deterministic refusals, so it\n    // never burns the merchant's idempotency key.\n    if (!Aglyn.checkEntitlement(ownerOrg?.org as any, 'commerce')) {\n      return res.status(403).json({ error: 'Selling is not enabled' })\n    }\n    const ownerId = ownerOrg?.org?.ownerUid\n    const ownerProfile = ownerId\n      ? await firestore.collection('profiles').doc(String(ownerId)).get()\n      : null\n    const accountId = ownerProfile?.get('stripeAccountId')\n    if (\n      !connectLinkageIsReady(\n        {\n          accountId,\n          chargesEnabled: ownerProfile?.get('stripeChargesEnabled'),\n          accountLivemode: ownerProfile?.get('stripeAccountLivemode'),\n        },\n        { subject: `draft order host ${hostId}` },\n      )\n    ) {\n      return res.status(409).json({ error: 'Payments are not set up yet' })\n    }\n\n    // Stripe returns the merchant to the console Products page. This was\n    // `/{hostDocId}/products`, the pre-AGL-621/622 shape, so paying (or\n    // cancelling) a draft order landed on a 404 (AGL-685). Console products\n    // is the plugin route keyed by org slug + host SUBDOMAIN; server code\n    // cannot call useConsoleHostRoute, so resolve them here. Without both,\n    // fall back to the origin root rather than a fabricated dead path.\n    const consoleSubdomain = (\n      await firestore.collection('hostIndex').doc(hostId).get()\n    ).get('subdomain') as string | undefined\n    const consoleOrgSlug = ownerOrg?.org?.slug as string | undefined\n    const origin = req.headers.origin ?? `https://${req.headers.host}`\n    const consoleProductsUrl =\n      consoleOrgSlug && consoleSubdomain\n        ? `${origin}${buildRoute(Route.HOST_PLUGIN, {\n            orgSlug: consoleOrgSlug,\n            host: consoleSubdomain,\n            pluginSlug: 'products',\n          })}`\n        : origin\n\n    // WHAT THE COUNT SAYS, said out loud (AGL-2452).\n    //\n    // This handler contained no `canPurchase` and no `stockShortfall` — no\n    // reference to inventory of any kind. It is the door that mints a LIVE,\n    // payable Stripe link, and it would mint one for a sold-out variant whose\n    // merchant had chosen `oversellPolicy: 'deny'`, with the `commerce-draft`\n    // webhook branch then completing it into a `paid` order. `pos-order.ts`'s\n    // own comment asserts \"every storefront door gates on it\"; that claim was\n    // false for this one.\n    //\n    // WARN, NEVER BLOCK, matching the register (AGL-2357, the decision).\n    // Both of these are MERCHANT-initiated doors rather than shopper-initiated\n    // ones — the merchant may well be taking a deliberate pre-order or\n    // backorder — so a stale count must not refuse a sale the merchant means to\n    // make. What the merchant is entitled to is to be TOLD, which is the part\n    // that was missing entirely. The refusal variant is a separate decision and\n    // is not taken here.\n    //\n    // Computed from the SERVER's product document, and reported on the same\n    // `stockWarnings` key and in the same `StockShortfall` shape the register\n    // already returns, so one console surface can read either door.\n    const shortfall = CommerceModel.stockShortfall(\n      product,\n      variantId || product.variants[0]?.id,\n      quantity,\n    )\n    const stockWarnings: CommerceModel.StockShortfall[] = shortfall\n      ? [\n          {\n            productId,\n            ...(variantId ? { variantId } : {}),\n            name: product.name,\n            requested: quantity,\n            available: shortfall.available,\n          },\n        ]\n      : []\n\n    const unitAmountCents = Math.round(Number(variant.priceUsd) * 100)\n    const lineItems: CommerceModel.OrderLineItem[] = [\n      {\n        productId,\n        ...(variantId ? { variantId } : {}),\n        name: product.name,\n        ...(variant.sku ? { sku: variant.sku } : {}),\n        productType: product.type,\n        quantity,\n        unitAmountCents,\n      },\n    ]\n    const itemsCents = unitAmountCents * quantity\n    // THE DISCOUNTS HUB, ON THIS PATH TOO (AGL-305).\n    //\n    // `hosts/{hostId}/discounts` reached the cart and buy-now and stopped\n    // there, so a store running \"Summer sale, 10% off\" sold at 10% off through\n    // both storefront doors and at FULL price the moment the merchant invoiced\n    // the same buyer for the same goods through a payment link. No code has to\n    // be typed for that gap to open: an automatic promotion applies itself on\n    // the storefront and applied itself nowhere here, so the merchant's own\n    // payment link quietly undercut — and here overcharged against — their own\n    // advertised price.\n    //\n    // Resolved through the SAME `resolveDiscount` the other doors use, so one\n    // code cannot mean two amounts.\n    //\n    // RESOLVED BEFORE THE TAX BLOCK BELOW, and that ordering is the whole\n    // point rather than a convenience: the manual rate is computed against\n    // `chargedItemsCents`, so the discount lands BEFORE tax and the taxable\n    // base is the discounted one. It has to be — the session applies that same\n    // rate as `line_items[0][tax_rates][0]`, which Stripe evaluates against the\n    // line amount it actually charges. Reducing the line while taxing the list\n    // price would make our stored `taxCents` disagree with the tax Stripe\n    // collects, on every discounted draft.\n    const draftDiscountLines = [{ productId, amountCents: itemsCents }]\n    const hubDiscounts = await hostRef.collection('discounts').limit(100).get()\n    const resolvedDiscount = CommerceModel.resolveDiscount(\n      hubDiscounts.docs.map((docSnapshot) => ({\n        ...(docSnapshot.data() as CommerceModel.HostDiscount),\n        $id: docSnapshot.id,\n      })),\n      {\n        ...(couponCode ? { code: couponCode } : {}),\n        subtotalCents: itemsCents,\n        productIds: [productId],\n        lines: draftDiscountLines,\n      },\n    )\n    // Above the claim and above the order write with every other deterministic\n    // refusal, so a merchant who fixes the code and presses Send again strands\n    // no `pending` draft and burns no key. A code that RESOLVES but confers\n    // nothing leaves through here too — `codeProblem` carries the benefit's own\n    // reason — which is what stops this door repeating the defect that charged\n    // full shipping on a free-shipping code.\n    if (resolvedDiscount?.codeProblem) {\n      return res.status(400).json({ error: resolvedDiscount.codeProblem })\n    }\n    const appliedDiscountId =\n      resolvedDiscount && resolvedDiscount.benefit.kind !== 'none'\n        ? resolvedDiscount.discountId\n        : ''\n    const discountCents = appliedDiscountId ? resolvedDiscount!.discountCents : 0\n    // Stripe's charge minimum is 50¢ — never price a payment link below it,\n    // the same floor buy-now applies.\n    const chargedItemsCents = discountCents\n      ? Math.max(50, itemsCents - discountCents)\n      : itemsCents\n    // What was ACTUALLY taken off, after that floor. The stored totals record\n    // this rather than the resolver's figure, so the parts sum to the total on\n    // a draft the floor moved.\n    const appliedDiscountCents = itemsCents - chargedItemsCents\n    // The fee and `totals` are both built BELOW the shipping plan (AGL-2152):\n    // Stripe's card cost rides the whole payment-link total, so neither can be\n    // known until the tax (AGL-1953) and the shipping options are.\n\n    // Shipping (AGL-1792), from the same settings document the two storefront\n    // paths read. This handler contained no `shipping` string at all: a\n    // merchant who configured zones and rates collected them on a cart\n    // (AGL-1707) and on buy-now (AGL-1720), and nothing when they invoiced the\n    // same buyer for the same parcel through a payment link. The session\n    // collected no address either, so the merchant was not even told where to\n    // send it — the webhook records one now that Stripe is asked for it.\n    //\n    // The premise AGL-1792 filed this under was that \"the destination IS known\n    // — the merchant typed it\". It is not: the draft dialog collects a product,\n    // a variant, a quantity and an email, and this handler reads exactly those.\n    // So the destination is as unknown here as it is in the cart, and the same\n    // asking machinery applies rather than none of it.\n    //\n    // CONDITIONAL on the product being physical, exactly as buy-now is: this\n    // dialog invoices downloads and consulting too, and charging that buyer\n    // postage would be worse than the bug. A missing `type` reads as physical,\n    // matching the fee ladder above — the two reads must not disagree about\n    // what a part-migrated doc is. The one-time condition buy-now also carries\n    // is structural here: this path only ever builds `mode: 'payment'`.\n    //\n    // RESOLVED BEFORE THE ORDER DOCUMENT, because the plan can refuse and the\n    // order is written before Stripe is called. Refusing after it would strand\n    // a `pending` draft on the merchant's orders list for every attempt —\n    // this path's version of the orphaned coupon AGL-1721 kept out of the cart.\n    const storeSettings = await hostRef\n      .collection('settings')\n      .doc('store')\n      .get()\n    const shippingSettings = storeSettings.get('shipping') as\n      CommerceModel.ShippingSettings | undefined\n\n    // Taxes (AGL-1953), from the same settings document. This handler had no\n    // tax code at all in either mode, so a merchant who invoiced a buyer for\n    // the same product they sell on the storefront charged them no tax — the\n    // cart's defect, one door over, and worse here because the merchant\n    // composed this order deliberately and would reasonably assume it matched\n    // their store.\n    //\n    // Origin-based, exactly as buy-now and the cart resolve it. The AGL-1792\n    // note above already established the premise: this dialog collects a\n    // product, a variant, a quantity and an email, so the DESTINATION is as\n    // unknown here as it is in the cart.\n    //\n    // Computed pure and BEFORE the claim so the stored totals can carry it;\n    // the Stripe object it needs is minted below the point of no return.\n    const taxSettings = (storeSettings.get('tax') ?? {}) as CommerceModel.TaxSettings\n    // AGL-1999: an unset tax mode is NOT a decision, and it must not sell.\n    // `mode` was `undefined` for every store whose owner never opened the\n    // Taxes card — the default state of every new storefront — and each\n    // branch below tested for a specific string, so no branch was taken, no\n    // tax was computed, and the shopper was charged an untaxed total. See\n    // `commerce-tax-decision.ts` for why refusing beats defaulting to either\n    // mode. `mode: 'none'` is the explicit opt-out and passes straight\n    // through.\n    const taxDecision = CommerceModel.storefrontTaxDecision({\n      settings: taxSettings,\n      taxExempt: product.taxExempt,\n    })\n    if (taxDecision.kind === 'undecided') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.STOREFRONT_TAX_UNDECIDED_MESSAGE })\n    }\n    const taxMisconfigured =\n      CommerceModel.storefrontTaxMisconfiguration(taxSettings)\n    if (taxMisconfigured) {\n      // AGL-2145: the merchant DECIDED to collect and the sale would have\n      // charged zero anyway — an unfinished settings card, not a\n      // jurisdiction miss. Refused in the same words and the same place as\n      // the undecided case above.\n      return res.status(409).json({ error: taxMisconfigured })\n    }\n    const useStripeTax = taxDecision.kind === 'stripe-automatic'\n    const manualRate =\n      taxDecision.kind === 'manual' &&\n      !taxSettings.pricesIncludeTax\n        ? CommerceModel.resolveTaxRate(taxSettings, taxSettings.origin ?? {})\n        : null\n    // THE DISCOUNTED BASE (AGL-305). `chargedItemsCents` is what the line\n    // will actually be worth, and the session applies this same rate to that\n    // line as a Stripe Tax Rate — so taxing `itemsCents` here would record a\n    // figure Stripe never charges.\n    const taxCents = manualRate\n      ? CommerceModel.computeTaxCents(chargedItemsCents, manualRate.pct)\n      : 0\n    // Stripe Tax mode leaves this 0 at composition time and the webhook folds\n    // the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const shippingPlan =\n      (product.type ?? 'physical') === 'physical'\n        ? CommerceModel.planCheckoutShipping(\n            shippingSettings,\n            {\n              subtotalCents: itemsCents,\n              totalGrams:\n                Math.max(0, Number(variant.weightGrams ?? 0)) * quantity,\n            },\n            body.shippingCountry,\n          )\n        : { countries: CommerceModel.CHECKOUT_SHIPPING_COUNTRIES, options: [] }\n    if (shippingPlan.refusal === 'destination-required') {\n      return res.status(400).json({\n        error: 'Choose where this order ships to.',\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    if (shippingPlan.refusal === 'destination-unserved') {\n      const declared = CommerceModel.normalizeCheckoutShippingCountry(\n        body.shippingCountry,\n      )\n      return res.status(409).json({\n        error: `This store does not ship to ${\n          CommerceModel.CHECKOUT_SHIPPING_COUNTRY_NAMES[declared as string] ??\n          'that country'\n        }.`,\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    // No rate of the merchant's reaches this order (AGL-2232). Above the\n    // order write and the payment link, like every other refusal here, so a\n    // manager who fixes the tier table and presses Send again strands nothing.\n    if (shippingPlan.refusal === 'cart-unpriceable') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.CART_UNPRICEABLE_SHIPPING_MESSAGE })\n    }\n    // FREE SHIPPING IS A ZEROED RATE, NOT A REDUCTION (AGL-305), the same\n    // construction the cart uses and for the same reason: nothing has picked a\n    // rate yet, so there is no amount to take off. The buyer chooses after the\n    // link is minted, so the only exact answer is to offer every rate at zero.\n    //\n    // Every rate rather than the cheapest, because `free_shipping` carries no\n    // field naming one — and zeroing them all keeps the fee, the transfer floor\n    // and the ceiling below honest, since all three read these same options.\n    //\n    // Derived from `shippingPlan.options` and read EVERYWHERE below in its\n    // place; a reader that reached past this to `shippingPlan.options` would\n    // price carriage the buyer is not being charged for.\n    const shippingOptions =\n      resolvedDiscount?.freeShipping === true\n        ? shippingPlan.options.map((option) => ({ ...option, amountCents: 0 }))\n        : shippingPlan.options\n\n    // THE PLATFORM FEE (AGL-2152) — the advertised take PLUS Stripe's card\n    // cost, passed through at cost. A payment link is a destination charge, so\n    // Stripe debits 2.9% + 30¢ from the PLATFORM's balance; the old take-only\n    // figure meant every tier carrying a 0% rate invoiced a buyer at a loss to\n    // Aglyn, and Starter's 2% is below 2.9% so it lost money at every size too.\n    //\n    // `?? 'physical'` (AGL-2251), matching `checkout.ts` and the cart. Without\n    // it a product doc carrying no `type` fell to `resolveTransactionFeePct`'s\n    // digital branch, so a merchant's payment link took a different cut of the\n    // same product than their storefront did.\n    //\n    // The base is the whole card total: the goods, the manual tax line, and the DEAREST shipping\n    // option the link offers (the buyer picks after the link is minted and\n    // `application_fee_amount` is fixed at creation, so reaching for the\n    // cheapest would put the difference back on Aglyn). A store on Stripe Tax\n    // is the one residual — that tax is computed inside Stripe afterwards.\n    const shippingCeilingCents = shippingOptions.reduce(\n      (most, option) =>\n        Math.max(most, Math.max(0, Number(option.amountCents ?? 0))),\n      0,\n    )\n    // Both bases are the DISCOUNTED goods (AGL-305). The platform take is a\n    // cut of what the merchant actually sells for, and Stripe's card cost is\n    // passed through on what the card actually runs for — reading `itemsCents`\n    // here would invoice the merchant a fee on money nobody paid.\n    const feeCents = Aglyn.resolveTransactionFeeCents(\n      ownerOrg?.org as any,\n      product.type ?? 'physical',\n      chargedItemsCents,\n      chargedItemsCents + taxCents + shippingCeilingCents,\n    )\n    // Stripe Tax mode leaves the tax 0 at composition time and the webhook\n    // folds the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const totals = CommerceModel.computeOrderTotals(lineItems, {\n      feeCents,\n      taxCents,\n      // The line item still carries the LIST price, so the discount has to be\n      // a named part of the totals or `itemsCents - discountCents + tax` would\n      // not be the number on the payment link.\n      discountCents: appliedDiscountCents,\n    })\n\n    // THE LINK CHARGES `chargedItemsCents`, EXACTLY (the AGL-2159 construction,\n    // reused here because this path grew the same problem the moment it grew a\n    // discount).\n    //\n    // A Stripe line is `quantity` units at ONE integer `unit_amount`, so it can\n    // only express totals divisible by `quantity` — and a percentage discount\n    // does not respect that. Dividing and multiplying back misses the intended\n    // total by up to `quantity / 2` cents in either direction, which on this\n    // path is worse than on buy-now: the frozen `totals` above are written to\n    // the order document BEFORE the session is minted, so a link that charged\n    // a different number would leave the merchant's own books disagreeing with\n    // what their buyer paid, permanently and silently.\n    //\n    // So when the total does not divide evenly, the line becomes ONE unit at\n    // the exact total with the count moved into the display name. The real\n    // quantity is carried by the order document's line item, which is\n    // untouched, so nothing downstream can tell the difference.\n    //\n    // The even case — every undiscounted draft, and most discounted ones —\n    // keeps the per-unit shape byte for byte.\n    const evenUnitAmountCents = Math.floor(chargedItemsCents / quantity)\n    const remainderCents = chargedItemsCents - evenUnitAmountCents * quantity\n    const chargedQuantity = remainderCents === 0 ? quantity : 1\n    const chargedUnitAmountCents =\n      remainderCents === 0 ? evenUnitAmountCents : chargedItemsCents\n    const chargedLineName = `${product.name}${\n      remainderCents === 0 ? '' : ` × ${quantity}`\n    }`.slice(0, 120)\n\n    // Point of no return (AGL-1697): everything past here writes an order and\n    // mints a live payment link. Every deterministic refusal — unknown\n    // product, payments not set up, the shipping-destination ask — sits above\n    // this line, so none of them burns the key: the merchant fixes the input\n    // and presses the same button. Before the claim, a double-submit minted a\n    // SECOND order doc, burned a second sequential number, and returned two\n    // live payment links bound to different orders, both payable.\n    const claimed = await claimAttempt(firestore, {\n      kind: 'commerce-draft',\n      scopeId: hostId,\n      orgId: String(ownerOrg?.org?.id ?? ''),\n      key: idempotencyKey,\n      busyMessage: 'This draft order is already being created',\n    })\n    if ('replay' in claimed) {\n      return res.status(claimed.replay.status).json(claimed.replay.body)\n    }\n    claim = claimed.claim\n\n    // THE REDEMPTION SLOT IS RESERVED HERE (AGL-305), on the same terms the\n    // storefront doors reserve it.\n    //\n    // A payment link lives until the buyer pays it, so between this handler and\n    // the `commerce-draft` webhook branch that settles the slot there is a\n    // window measured in days — far wider than a Checkout Session's. Reading\n    // `redemptions` and hoping would let a merchant mint ten links against a\n    // cap of one and have all ten pay.\n    //\n    // BELOW the claim because the hold is keyed by the attempt: a retry of one\n    // attempt must be able to re-claim the slot it already holds rather than be\n    // refused by it. An uncapped promotion writes nothing and returns an empty\n    // `holdKey`, which is what tells the webhook to fall back to the plain\n    // increment.\n    if (appliedDiscountId) {\n      const slot = await holdPromotionSlot({\n        firestore,\n        ref: hostRef.collection('discounts').doc(appliedDiscountId),\n        holdKey: promotionHoldKey(claimed.claim.stripeKey),\n        label: `draft discount ${appliedDiscountId}`,\n      })\n      if (!slot.ok) {\n        // Refused rather than quietly repriced, and that is deliberate for the\n        // AUTOMATIC case too: the merchant composed this order at a price the\n        // promotion was part of, and minting the link at full price would\n        // invoice their buyer more than the store advertises without saying so.\n        // Nothing has been written yet, so the key goes back and the retry\n        // prices correctly — `resolveDiscount` counts live holds and simply\n        // stops offering an exhausted promotion.\n        await claim.release()\n        return res.status(409).json({\n          error:\n            couponCode && resolvedDiscount?.discount.code\n              ? CommerceModel.PROMOTION_EXHAUSTED_MESSAGE\n              : CommerceModel.PROMOTION_UNAVAILABLE_MESSAGE,\n        })\n      }\n      if (slot.holdKey) {\n        discountSlot = slot\n        discountHoldKey = slot.holdKey\n      }\n    }\n\n    // Order doc first (transactional number), then the payment link.\n    const orderRef = hostRef.collection('orders').doc()\n    const counterRef = hostRef.collection('counters').doc('orders')\n    await firestore.runTransaction(async (transaction) => {\n      const counter = await transaction.get(counterRef)\n      const number = Number(counter.get('next') ?? 1)\n      transaction.set(counterRef, { next: number + 1 }, { merge: true })\n      transaction.set(orderRef, {\n        number,\n        status: 'pending',\n        channel: 'draft',\n        lineItems,\n        totals,\n        // WHICH TAX REGIME THIS ORDER IS COMPOSED UNDER (AGL-2451), from the\n        // decision taken above rather than from the frozen `taxCents` — a\n        // Stripe Tax draft freezes 0 there and only the paid session knows the\n        // figure, so a mode read back off the amount would call it `none`.\n        //\n        // Stamped at composition so a draft that is never paid still says what\n        // it was priced under, and RESTATED by the `commerce-draft` webhook\n        // branch from the session that actually charged it. The webhook's is\n        // authoritative — it has Stripe's computed tax in hand — and for a\n        // manual draft the two agree by construction.\n        taxMode: CommerceModel.storefrontTaxModeForDecision(\n          taxDecision,\n          taxCents,\n        ),\n        customerEmail: email || null,\n        timeline: [\n          {\n            atMs: Date.now(),\n            event: 'draft',\n            detail: `Draft created by ${decoded.email ?? decoded.uid}`,\n          },\n        ],\n        createdAtMs: Date.now(),\n        createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n      })\n    })\n\n    // The tax rate is minted here, BELOW the claim, because it creates a real\n    // Stripe object (AGL-1953). Cached per host, so it is usually a read.\n    let draftTaxRateId = ''\n    if (taxCents > 0 && manualRate) {\n      draftTaxRateId =\n        (await resolveManualTaxRateId({\n          hostRef,\n          taxPct: manualRate.pct,\n          taxLabel: manualRate.label || `Tax (${manualRate.pct}%)`,\n          ...(claim.stripeKey\n            ? { headers: { 'Idempotency-Key': `${claim.stripeKey}-tax-rate` } }\n            : {}),\n        })) ?? ''\n      if (!draftTaxRateId) {\n        // A VISIBLE refusal rather than an untaxed payment link — the silent\n        // under-collection is the defect. The order doc is rolled back the\n        // same way the session failure below rolls it back.\n        await orderRef.delete().catch(() => undefined)\n        await releaseDiscountSlot()\n        await claim.release()\n        return res.status(502).json({ error: 'Payment link creation failed' })\n      }\n    }\n    const params = new URLSearchParams({\n      mode: 'payment',\n      ...(useStripeTax ? { 'automatic_tax[enabled]': 'true' } : {}),\n      ...(draftTaxRateId ? { 'line_items[0][tax_rates][0]': draftTaxRateId } : {}),\n      'line_items[0][quantity]': String(chargedQuantity),\n      'line_items[0][price_data][currency]': 'usd',\n      'line_items[0][price_data][unit_amount]': String(chargedUnitAmountCents),\n      'line_items[0][price_data][product_data][name]': chargedLineName,\n      // THE CONNECT SPLIT (AGL-1956). A Stripe Tax payment link computes its\n      // tax against AGLYN's registrations and Aglyn remits it (AGL-1904), so\n      // the merchant gets a FIXED `transfer_data[amount]` and no\n      // `application_fee_amount`: the fee form transfers `amount_total − fee`,\n      // and `amount_total` includes that tax. A manual-rate or untaxed link is\n      // unchanged. See `commerce-connect-transfer.ts`.\n      ...CommerceModel.destinationChargeParams({\n        accountId: String(accountId),\n        feeCents,\n        taxOwner: useStripeTax ? 'platform' : 'merchant',\n        // The DISCOUNTED goods (AGL-305): this is what the merchant is\n        // transferred, and paying out the list price on a discounted link\n        // would move money Stripe never collected.\n        merchantGoodsCents: chargedItemsCents,\n        shippingFloorCents: CommerceModel.shippingFloorCents(shippingOptions),\n      }),\n      ...(email ? { customer_email: email } : {}),\n      success_url: `${consoleProductsUrl}?draft=paid`,\n      cancel_url: `${consoleProductsUrl}?draft=canceled`,\n      'metadata[type]': 'commerce-draft',\n      'metadata[hostId]': hostId,\n      'metadata[orderId]': orderRef.id,\n      'metadata[productId]': productId,\n      ...(variantId ? { 'metadata[variantId]': variantId } : {}),\n      'metadata[feeCents]': String(feeCents),\n      // WHAT THE WEBHOOK SETTLES (AGL-305), in the field names the\n      // `checkout.session.completed` branch already reads for the cart. The\n      // hold key's ABSENCE is what tells it to fall back to the unconditional\n      // increment, which is right for an uncapped promotion.\n      ...(appliedDiscountId\n        ? { 'metadata[discountId]': appliedDiscountId }\n        : {}),\n      ...(discountHoldKey ? { 'metadata[discountHoldKey]': discountHoldKey } : {}),\n      // See the AGL-1956 note in `checkout.ts` — recorded only on the shape\n      // where the merchant's payout is no longer the whole charge.\n      ...(useStripeTax\n        ? {\n            'metadata[transferCents]': String(\n              CommerceModel.platformLiableTransferCents({\n                feeCents,\n                merchantGoodsCents: chargedItemsCents,\n                shippingFloorCents:\n                  CommerceModel.shippingFloorCents(shippingOptions),\n              }),\n            ),\n            'metadata[transferShippingCents]': String(\n              CommerceModel.shippingFloorCents(shippingOptions),\n            ),\n          }\n        : {}),\n    })\n    // Both keys or neither (AGL-1720's rule, inherited). Stripe will not apply\n    // a shipping rate without an address to ship to, and a merchant who\n    // configured nothing plans to no options and so gets neither — a payment\n    // link byte-identical to the one this handler built before shipping\n    // existed on it.\n    if (shippingOptions.length > 0) {\n      CommerceModel.appendShippingAddressCollectionParams(\n        params,\n        shippingPlan.countries,\n      )\n      CommerceModel.appendCheckoutShippingParams(params, shippingOptions)\n    }\n    const response = await fetch(\n      'https://api.stripe.com/v1/checkout/sessions',\n      {\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          // The half that is a live payment link (AGL-1697). Stripe replays\n          // the existing session for a repeated key instead of opening a\n          // second one on the merchant's account, which covers the window\n          // where our claim is written but the response never arrives.\n          ...(claim.stripeKey ? { 'Idempotency-Key': claim.stripeKey } : {}),\n        },\n        body: params.toString(),\n      },\n    )\n    const session = (await response.json()) as {\n      url?: string\n      id?: string\n      error?: any\n    }\n    if (!response.ok || !session.url) {\n      console.error('Stripe draft-order error', session.error)\n      await orderRef.delete().catch(() => undefined)\n      // The draft did not happen — hand the key back rather than locking this\n      // dialog out over one flaky moment. The retry re-derives the SAME\n      // digest, so if Stripe did create the session it replays it.\n      await releaseDiscountSlot()\n      await claim.release()\n      return res.status(502).json({ error: 'Payment link creation failed' })\n    }\n    await orderRef.set(\n      { checkoutSessionId: session.id, paymentLinkUrl: session.url },\n      { merge: true },\n    )\n    // Spread on the same terms as the register's: present only when there is\n    // something to say, so a caller can test the key rather than a length.\n    const payload = {\n      orderId: orderRef.id,\n      url: session.url,\n      ...(stockWarnings.length > 0 ? { stockWarnings } : {}),\n    }\n    await claim.record(200, payload)\n    return res.status(200).json(payload)\n  } catch (error) {\n    console.error(error)\n    // Release on the way out so a transient failure does not strand the key\n    // (AGL-1691's rule). The order write may or may not have landed; the\n    // merchant reconciles from the orders list, the same position they were\n    // in before this endpoint had a claim at all. The redemption slot goes\n    // back for the same reason — a throw is the one path that would otherwise\n    // leave it standing against the cap until its TTL lapsed.\n    await releaseDiscountSlot()\n    await claim?.release()\n    return res.status(500).json({ error: 'Draft order failed' })\n  }\n}\n"],"names":["Aglyn","CommerceModel","firebaseAdmin","getOrgForHost","connectLinkageIsReady","resolveManualTaxRateId","holdPromotionSlot","promotionHoldKey","buildRoute","claimAttempt","Route","draftOrderHandler","req","res","body","method","status","json","error","process","env","STRIPE_SECRET_KEY","authorization","String","headers","idToken","startsWith","slice","length","undefined","JSON","parse","hostId","productId","variantId","quantity","Math","max","min","round","Number","email","trim","couponCode","idempotencyKey","claim","discountSlot","discountHoldKey","releaseDiscountSlot","slot","release","hostSnapshot","storeSettings","taxSettings","product","variant","ownerOrg","decoded","app","auth","verifyIdToken","firestore","hostRef","collection","doc","get","exists","memberRole","uid","productSnapshot","raw","data","deletedAt","liftLegacyProduct","variants","find","item","id","variantHasPrice","name","checkEntitlement","org","ownerId","ownerUid","ownerProfile","accountId","chargesEnabled","accountLivemode","subject","consoleSubdomain","consoleOrgSlug","slug","origin","host","consoleProductsUrl","HOST_PLUGIN","orgSlug","pluginSlug","shortfall","stockShortfall","stockWarnings","requested","available","unitAmountCents","priceUsd","lineItems","sku","productType","type","itemsCents","draftDiscountLines","amountCents","hubDiscounts","limit","resolvedDiscount","resolveDiscount","docs","map","docSnapshot","$id","code","subtotalCents","productIds","lines","codeProblem","appliedDiscountId","benefit","kind","discountId","discountCents","chargedItemsCents","appliedDiscountCents","shippingSettings","taxDecision","storefrontTaxDecision","settings","taxExempt","STOREFRONT_TAX_UNDECIDED_MESSAGE","taxMisconfigured","storefrontTaxMisconfiguration","useStripeTax","manualRate","pricesIncludeTax","resolveTaxRate","taxCents","computeTaxCents","pct","shippingPlan","planCheckoutShipping","totalGrams","weightGrams","shippingCountry","countries","CHECKOUT_SHIPPING_COUNTRIES","options","refusal","needsShippingCountry","shippingCountries","declared","normalizeCheckoutShippingCountry","CHECKOUT_SHIPPING_COUNTRY_NAMES","CART_UNPRICEABLE_SHIPPING_MESSAGE","shippingOptions","freeShipping","option","shippingCeilingCents","reduce","most","feeCents","resolveTransactionFeeCents","totals","computeOrderTotals","evenUnitAmountCents","floor","remainderCents","chargedQuantity","chargedUnitAmountCents","chargedLineName","claimed","scopeId","orgId","key","busyMessage","replay","ref","holdKey","stripeKey","label","ok","discount","PROMOTION_EXHAUSTED_MESSAGE","PROMOTION_UNAVAILABLE_MESSAGE","orderRef","counterRef","runTransaction","transaction","counter","number","set","next","merge","channel","taxMode","storefrontTaxModeForDecision","customerEmail","timeline","atMs","Date","now","event","detail","createdAtMs","createdAt","FieldValue","serverTimestamp","draftTaxRateId","taxPct","taxLabel","delete","catch","params","URLSearchParams","mode","destinationChargeParams","taxOwner","merchantGoodsCents","shippingFloorCents","customer_email","success_url","cancel_url","platformLiableTransferCents","appendShippingAddressCollectionParams","appendCheckoutShippingParams","response","fetch","Authorization","toString","session","url","console","checkoutSessionId","paymentLinkUrl","payload","orderId","record"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,sDAAqD;AAC3F,SAASC,sBAAsB,QAAQ,uBAAmB;AAC1D,SAEEC,iBAAiB,EACjBC,gBAAgB,QACX,sBAAkB;AACzB,SACEC,UAAU,EACVC,YAAY,EACZC,KAAK,QAGA,sBAAqB;AAE5B;;;;;;;CAOC,GACD,OAAO,MAAMC,oBAAsC,OAAOC,KAAKC;QAOhCD,4BAM4BA,WACnCE,cACGA,iBACAA,iBACmCA,gBACvCA,aAIKA,kBAKxBF,MAAAA;IA1BF,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,IAAI,CAACC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QAClC,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;IACA,MAAMI,gBAAgBC,QAAOX,6BAAAA,IAAIY,OAAO,CAACF,aAAa,YAAzBV,6BAA6B;IAC1D,MAAMa,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOZ,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACrE,MAAMJ,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWgB,KAAKC,KAAK,CAACnB,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMoB,SAAST,QAAOT,eAAAA,KAAKkB,MAAM,YAAXlB,eAAe;IACrC,MAAMmB,YAAYV,QAAOT,kBAAAA,KAAKmB,SAAS,YAAdnB,kBAAkB;IAC3C,MAAMoB,YAAYX,QAAOT,kBAAAA,KAAKoB,SAAS,YAAdpB,kBAAkB;IAC3C,MAAMqB,WAAWC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,IAAIF,KAAKG,KAAK,CAACC,QAAO1B,iBAAAA,KAAKqB,QAAQ,YAAbrB,iBAAiB;IAC7E,MAAM2B,QAAQlB,QAAOT,cAAAA,KAAK2B,KAAK,YAAV3B,cAAc,IAAI4B,IAAI;IAC3C,qEAAqE;IACrE,6EAA6E;IAC7E,uCAAuC;IACvC,MAAMC,aAAapB,QAAOT,mBAAAA,KAAK6B,UAAU,YAAf7B,mBAAmB,IAAI4B,IAAI;IACrD,mEAAmE;IACnE,wEAAwE;IACxE,8CAA8C;IAC9C,MAAME,iBAAiBrB,QACrBX,QAAAA,8BAAAA,IAAIY,OAAO,CAAC,kBAAkB,YAA9BZ,8BAAkCA,IAAIY,OAAO,CAAC,kBAAkB,YAAhEZ,OAAoE,IACpE8B,IAAI,GAAGf,KAAK,CAAC,GAAG;IAClB,IAAI,CAACK,UAAU,CAACC,WAAW;QACzB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;IACrE;IAEA,IAAI2B,QAA6B;IACjC;;;;;;GAMC,GACD,IAAIC,eAAyC;IAC7C,IAAIC,kBAAkB;IACtB,MAAMC,sBAAsB;QAC1B,MAAMC,OAAOH;QACbA,eAAe;QACfC,kBAAkB;QAClB,IAAIE,MAAM,MAAMA,KAAKC,OAAO;IAC9B;IACA,IAAI;YAkBkBC,mBA8DLvC,qBA0KMwC,oBA+B2BC,qBAa7CC,eAM4BC,sBA6E7BD;YArUcE,eA2BOA,gBAkCRF,oBA+TCE;QA/ahB,MAAMC,UAAU,MAAMvD,cAAcwD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACnC;QAC/D,MAAMoC,YAAY3D,cAAcwD,GAAG,GAAGG,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAAChC;QAClD,MAAMmB,eAAe,MAAMW,QAAQG,GAAG;QACtC,IAAI,CAACd,aAAae,MAAM,EAAE;YACxB,OAAOrD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,0EAA0E;QAC1E,yDAAyD;QACzD,0DAA0D;QAC1D,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qDAAqD;QACrD,MAAMiD,aAAa,EAAChB,oBAAAA,aAAac,GAAG,CAAC,0BAAjBd,oBAAmC,CAAC,EAAE,CAACM,QAAQW,GAAG,CAAC;QACvE,IAAID,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAOtD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,MAAMmD,kBAAkB,MAAMP,QAC3BC,UAAU,CAAC,YACXC,GAAG,CAAC/B,WACJgC,GAAG;QACN,MAAMK,MAAMD,gBAAgBE,IAAI;QAChC,IAAI,CAACD,OAAOA,IAAIE,SAAS,EAAE;YACzB,OAAO3D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,MAAMoC,UAAUrD,cAAcwE,iBAAiB,CAACH;QAChD,MAAMf,UAAUrB,YACZoB,QAAQoB,QAAQ,CAACC,IAAI,CAAC,CAACC,OAASA,KAAKC,EAAE,KAAK3C,aAC5CoB,QAAQoB,QAAQ,CAAC,EAAE;QACvB,IAAI,CAACnB,SAAS,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QACrE,sEAAsE;QACtE,kDAAkD;QAClD,IAAI,CAACjB,cAAc6E,eAAe,CAACvB,UAAU;YAC3C,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO,CAAC,gBAAgB,EAAEoC,QAAQyB,IAAI,CAAC,mBAAmB,CAAC;YAAC;QAC5F;QAEA,2DAA2D;QAC3D,MAAMvB,WAAW,MAAMrD,cAAc6B;QACrC,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,8CAA8C;QAC9C,IAAI,CAAChC,MAAMgF,gBAAgB,CAACxB,4BAAAA,SAAUyB,GAAG,EAAS,aAAa;YAC7D,OAAOpE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyB;QAChE;QACA,MAAMgE,UAAU1B,6BAAAA,gBAAAA,SAAUyB,GAAG,qBAAbzB,cAAe2B,QAAQ;QACvC,MAAMC,eAAeF,UACjB,MAAMrB,UAAUE,UAAU,CAAC,YAAYC,GAAG,CAACzC,OAAO2D,UAAUjB,GAAG,KAC/D;QACJ,MAAMoB,YAAYD,gCAAAA,aAAcnB,GAAG,CAAC;QACpC,IACE,CAAC7D,sBACC;YACEiF;YACAC,cAAc,EAAEF,gCAAAA,aAAcnB,GAAG,CAAC;YAClCsB,eAAe,EAAEH,gCAAAA,aAAcnB,GAAG,CAAC;QACrC,GACA;YAAEuB,SAAS,CAAC,iBAAiB,EAAExD,QAAQ;QAAC,IAE1C;YACA,OAAOnB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACrE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,mEAAmE;QACnE,MAAMuE,mBAAmB,AACvB,CAAA,MAAM5B,UAAUE,UAAU,CAAC,aAAaC,GAAG,CAAChC,QAAQiC,GAAG,EAAC,EACxDA,GAAG,CAAC;QACN,MAAMyB,iBAAiBlC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAemC,IAAI;QAC1C,MAAMC,UAAShF,sBAAAA,IAAIY,OAAO,CAACoE,MAAM,YAAlBhF,sBAAsB,CAAC,QAAQ,EAAEA,IAAIY,OAAO,CAACqE,IAAI,EAAE;QAClE,MAAMC,qBACJJ,kBAAkBD,mBACd,GAAGG,SAASpF,WAAWE,MAAMqF,WAAW,EAAE;YACxCC,SAASN;YACTG,MAAMJ;YACNQ,YAAY;QACd,IAAI,GACJL;QAEN,iDAAiD;QACjD,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sBAAsB;QACtB,EAAE;QACF,qEAAqE;QACrE,2EAA2E;QAC3E,mEAAmE;QACnE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,qBAAqB;QACrB,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAMM,YAAYjG,cAAckG,cAAc,CAC5C7C,SACApB,eAAaoB,qBAAAA,QAAQoB,QAAQ,CAAC,EAAE,qBAAnBpB,mBAAqBuB,EAAE,GACpC1C;QAEF,MAAMiE,gBAAgDF,YAClD;YACE;gBACEjE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;gBAClBsB,WAAWlE;gBACXmE,WAAWJ,UAAUI,SAAS;;SAEjC,GACD,EAAE;QAEN,MAAMC,kBAAkBnE,KAAKG,KAAK,CAACC,OAAOe,QAAQiD,QAAQ,IAAI;QAC9D,MAAMC,YAA2C;YAC/C;gBACExE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;eACdxB,QAAQmD,GAAG,GAAG;gBAAEA,KAAKnD,QAAQmD,GAAG;YAAC,IAAI,CAAC;gBAC1CC,aAAarD,QAAQsD,IAAI;gBACzBzE;gBACAoE;;SAEH;QACD,MAAMM,aAAaN,kBAAkBpE;QACrC,iDAAiD;QACjD,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,oBAAoB;QACpB,EAAE;QACF,0EAA0E;QAC1E,gCAAgC;QAChC,EAAE;QACF,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,uCAAuC;QACvC,MAAM2E,qBAAqB;YAAC;gBAAE7E;gBAAW8E,aAAaF;YAAW;SAAE;QACnE,MAAMG,eAAe,MAAMlD,QAAQC,UAAU,CAAC,aAAakD,KAAK,CAAC,KAAKhD,GAAG;QACzE,MAAMiD,mBAAmBjH,cAAckH,eAAe,CACpDH,aAAaI,IAAI,CAACC,GAAG,CAAC,CAACC,cAAiB,aAClCA,YAAY/C,IAAI;gBACpBgD,KAAKD,YAAYzC,EAAE;iBAErB,aACMlC,aAAa;YAAE6E,MAAM7E;QAAW,IAAI,CAAC;YACzC8E,eAAeZ;YACfa,YAAY;gBAACzF;aAAU;YACvB0F,OAAOb;;QAGX,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,yCAAyC;QACzC,IAAII,oCAAAA,iBAAkBU,WAAW,EAAE;YACjC,OAAO/G,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOgG,iBAAiBU,WAAW;YAAC;QACpE;QACA,MAAMC,oBACJX,oBAAoBA,iBAAiBY,OAAO,CAACC,IAAI,KAAK,SAClDb,iBAAiBc,UAAU,GAC3B;QACN,MAAMC,gBAAgBJ,oBAAoBX,iBAAkBe,aAAa,GAAG;QAC5E,wEAAwE;QACxE,kCAAkC;QAClC,MAAMC,oBAAoBD,gBACtB7F,KAAKC,GAAG,CAAC,IAAIwE,aAAaoB,iBAC1BpB;QACJ,0EAA0E;QAC1E,2EAA2E;QAC3E,2BAA2B;QAC3B,MAAMsB,uBAAuBtB,aAAaqB;QAC1C,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAE/D,0EAA0E;QAC1E,oEAAoE;QACpE,mEAAmE;QACnE,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,qEAAqE;QACrE,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM9E,gBAAgB,MAAMU,QACzBC,UAAU,CAAC,YACXC,GAAG,CAAC,SACJC,GAAG;QACN,MAAMmE,mBAAmBhF,cAAca,GAAG,CAAC;QAG3C,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,eAAe;QACf,EAAE;QACF,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,qCAAqC;QACrC,EAAE;QACF,wEAAwE;QACxE,qEAAqE;QACrE,MAAMZ,eAAeD,qBAAAA,cAAca,GAAG,CAAC,kBAAlBb,qBAA4B,CAAC;QAClD,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,mEAAmE;QACnE,WAAW;QACX,MAAMiF,cAAcpI,cAAcqI,qBAAqB,CAAC;YACtDC,UAAUlF;YACVmF,WAAWlF,QAAQkF,SAAS;QAC9B;QACA,IAAIH,YAAYN,IAAI,KAAK,aAAa;YACpC,OAAOlH,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOjB,cAAcwI,gCAAgC;YAAC;QAClE;QACA,MAAMC,mBACJzI,cAAc0I,6BAA6B,CAACtF;QAC9C,IAAIqF,kBAAkB;YACpB,oEAAoE;YACpE,2DAA2D;YAC3D,qEAAqE;YACrE,4BAA4B;YAC5B,OAAO7H,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOwH;YAAiB;QACxD;QACA,MAAME,eAAeP,YAAYN,IAAI,KAAK;QAC1C,MAAMc,aACJR,YAAYN,IAAI,KAAK,YACrB,CAAC1E,YAAYyF,gBAAgB,GACzB7I,cAAc8I,cAAc,CAAC1F,cAAaA,sBAAAA,YAAYuC,MAAM,YAAlBvC,sBAAsB,CAAC,KACjE;QACN,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,+BAA+B;QAC/B,MAAM2F,WAAWH,aACb5I,cAAcgJ,eAAe,CAACf,mBAAmBW,WAAWK,GAAG,IAC/D;QACJ,0EAA0E;QAC1E,qEAAqE;QACrE,2DAA2D;QAC3D,MAAMC,eACJ,EAAC7F,gBAAAA,QAAQsD,IAAI,YAAZtD,gBAAgB,gBAAgB,aAC7BrD,cAAcmJ,oBAAoB,CAChChB,kBACA;YACEX,eAAeZ;YACfwC,YACEjH,KAAKC,GAAG,CAAC,GAAGG,QAAOe,uBAAAA,QAAQ+F,WAAW,YAAnB/F,uBAAuB,MAAMpB;QACpD,GACArB,KAAKyI,eAAe,IAEtB;YAAEC,WAAWvJ,cAAcwJ,2BAA2B;YAAEC,SAAS,EAAE;QAAC;QAC1E,IAAIP,aAAaQ,OAAO,KAAK,wBAAwB;YACnD,OAAO9I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;gBACP0I,sBAAsB;gBACtBC,mBAAmB;uBAAI5J,cAAcwJ,2BAA2B;iBAAC;YACnE;QACF;QACA,IAAIN,aAAaQ,OAAO,KAAK,wBAAwB;gBAM/C1J;YALJ,MAAM6J,WAAW7J,cAAc8J,gCAAgC,CAC7DjJ,KAAKyI,eAAe;YAEtB,OAAO1I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO,CAAC,4BAA4B,GAClCjB,0DAAAA,cAAc+J,+BAA+B,CAACF,SAAmB,YAAjE7J,0DACA,eACD,CAAC,CAAC;gBACH2J,sBAAsB;gBACtBC,mBAAmB;uBAAI5J,cAAcwJ,2BAA2B;iBAAC;YACnE;QACF;QACA,qEAAqE;QACrE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAIN,aAAaQ,OAAO,KAAK,oBAAoB;YAC/C,OAAO9I,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOjB,cAAcgK,iCAAiC;YAAC;QACnE;QACA,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,MAAMC,kBACJhD,CAAAA,oCAAAA,iBAAkBiD,YAAY,MAAK,OAC/BhB,aAAaO,OAAO,CAACrC,GAAG,CAAC,CAAC+C,SAAY,aAAKA;gBAAQrD,aAAa;kBAChEoC,aAAaO,OAAO;QAE1B,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,EAAE;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,EAAE;QACF,6FAA6F;QAC7F,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,uEAAuE;QACvE,MAAMW,uBAAuBH,gBAAgBI,MAAM,CACjD,CAACC,MAAMH;gBAC6BA;mBAAlChI,KAAKC,GAAG,CAACkI,MAAMnI,KAAKC,GAAG,CAAC,GAAGG,QAAO4H,sBAAAA,OAAOrD,WAAW,YAAlBqD,sBAAsB;WAC1D;QAEF,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAMI,WAAWxK,MAAMyK,0BAA0B,CAC/CjH,4BAAAA,SAAUyB,GAAG,GACb3B,iBAAAA,QAAQsD,IAAI,YAAZtD,iBAAgB,YAChB4E,mBACAA,oBAAoBc,WAAWqB;QAEjC,uEAAuE;QACvE,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAMK,SAASzK,cAAc0K,kBAAkB,CAAClE,WAAW;YACzD+D;YACAxB;YACA,wEAAwE;YACxE,yEAAyE;YACzE,yCAAyC;YACzCf,eAAeE;QACjB;QAEA,4EAA4E;QAC5E,2EAA2E;QAC3E,aAAa;QACb,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,4DAA4D;QAC5D,EAAE;QACF,uEAAuE;QACvE,0CAA0C;QAC1C,MAAMyC,sBAAsBxI,KAAKyI,KAAK,CAAC3C,oBAAoB/F;QAC3D,MAAM2I,iBAAiB5C,oBAAoB0C,sBAAsBzI;QACjE,MAAM4I,kBAAkBD,mBAAmB,IAAI3I,WAAW;QAC1D,MAAM6I,yBACJF,mBAAmB,IAAIF,sBAAsB1C;QAC/C,MAAM+C,kBAAkB,GAAG3H,QAAQyB,IAAI,GACrC+F,mBAAmB,IAAI,KAAK,CAAC,GAAG,EAAE3I,UAAU,EAC5C,CAACR,KAAK,CAAC,GAAG;QAEZ,0EAA0E;QAC1E,mEAAmE;QACnE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAMuJ,UAAU,MAAMzK,aAAaoD,WAAW;YAC5CkE,MAAM;YACNoD,SAASnJ;YACToJ,OAAO7J,gBAAOiC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAeqB,EAAE,oBAAI;YACnCwG,KAAKzI;YACL0I,aAAa;QACf;QACA,IAAI,YAAYJ,SAAS;YACvB,OAAOrK,IAAIG,MAAM,CAACkK,QAAQK,MAAM,CAACvK,MAAM,EAAEC,IAAI,CAACiK,QAAQK,MAAM,CAACzK,IAAI;QACnE;QACA+B,QAAQqI,QAAQrI,KAAK;QAErB,wEAAwE;QACxE,+BAA+B;QAC/B,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,aAAa;QACb,IAAIgF,mBAAmB;YACrB,MAAM5E,OAAO,MAAM3C,kBAAkB;gBACnCuD;gBACA2H,KAAK1H,QAAQC,UAAU,CAAC,aAAaC,GAAG,CAAC6D;gBACzC4D,SAASlL,iBAAiB2K,QAAQrI,KAAK,CAAC6I,SAAS;gBACjDC,OAAO,CAAC,eAAe,EAAE9D,mBAAmB;YAC9C;YACA,IAAI,CAAC5E,KAAK2I,EAAE,EAAE;gBACZ,uEAAuE;gBACvE,sEAAsE;gBACtE,kEAAkE;gBAClE,wEAAwE;gBACxE,mEAAmE;gBACnE,oEAAoE;gBACpE,yCAAyC;gBACzC,MAAM/I,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BC,OACEyB,eAAcuE,oCAAAA,iBAAkB2E,QAAQ,CAACrE,IAAI,IACzCvH,cAAc6L,2BAA2B,GACzC7L,cAAc8L,6BAA6B;gBACnD;YACF;YACA,IAAI9I,KAAKwI,OAAO,EAAE;gBAChB3I,eAAeG;gBACfF,kBAAkBE,KAAKwI,OAAO;YAChC;QACF;QAEA,iEAAiE;QACjE,MAAMO,WAAWlI,QAAQC,UAAU,CAAC,UAAUC,GAAG;QACjD,MAAMiI,aAAanI,QAAQC,UAAU,CAAC,YAAYC,GAAG,CAAC;QACtD,MAAMH,UAAUqI,cAAc,CAAC,OAAOC;gBAEdC,cA2BY3I;YA5BlC,MAAM2I,UAAU,MAAMD,YAAYlI,GAAG,CAACgI;YACtC,MAAMI,SAAS7J,QAAO4J,eAAAA,QAAQnI,GAAG,CAAC,mBAAZmI,eAAuB;YAC7CD,YAAYG,GAAG,CAACL,YAAY;gBAAEM,MAAMF,SAAS;YAAE,GAAG;gBAAEG,OAAO;YAAK;YAChEL,YAAYG,GAAG,CAACN,UAAU;gBACxBK;gBACArL,QAAQ;gBACRyL,SAAS;gBACThG;gBACAiE;gBACA,qEAAqE;gBACrE,kEAAkE;gBAClE,uEAAuE;gBACvE,mEAAmE;gBACnE,EAAE;gBACF,uEAAuE;gBACvE,oEAAoE;gBACpE,qEAAqE;gBACrE,mEAAmE;gBACnE,8CAA8C;gBAC9CgC,SAASzM,cAAc0M,4BAA4B,CACjDtE,aACAW;gBAEF4D,eAAenK,SAAS;gBACxBoK,UAAU;oBACR;wBACEC,MAAMC,KAAKC,GAAG;wBACdC,OAAO;wBACPC,QAAQ,CAAC,iBAAiB,GAAEzJ,iBAAAA,QAAQhB,KAAK,YAAbgB,iBAAiBA,QAAQW,GAAG,EAAE;oBAC5D;iBACD;gBACD+I,aAAaJ,KAAKC,GAAG;gBACrBI,WAAWlN,cAAc2D,SAAS,CAACwJ,UAAU,CAACC,eAAe;YAC/D;QACF;QAEA,0EAA0E;QAC1E,sEAAsE;QACtE,IAAIC,iBAAiB;QACrB,IAAIvE,WAAW,KAAKH,YAAY;gBAE3B;YADH0E,kBACG,QAAA,MAAMlN,uBAAuB;gBAC5ByD;gBACA0J,QAAQ3E,WAAWK,GAAG;gBACtBuE,UAAU5E,WAAW8C,KAAK,IAAI,CAAC,KAAK,EAAE9C,WAAWK,GAAG,CAAC,EAAE,CAAC;eACpDrG,MAAM6I,SAAS,GACf;gBAAElK,SAAS;oBAAE,mBAAmB,GAAGqB,MAAM6I,SAAS,CAAC,SAAS,CAAC;gBAAC;YAAE,IAChE,CAAC,eANN,QAOM;YACT,IAAI,CAAC6B,gBAAgB;gBACnB,qEAAqE;gBACrE,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAMvB,SAAS0B,MAAM,GAAGC,KAAK,CAAC,IAAM9L;gBACpC,MAAMmB;gBACN,MAAMH,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAA+B;YACtE;QACF;QACA,MAAM0M,SAAS,IAAIC,gBAAgB;YACjCC,MAAM;WACFlF,eAAe;YAAE,0BAA0B;QAAO,IAAI,CAAC,GACvD2E,iBAAiB;YAAE,+BAA+BA;QAAe,IAAI,CAAC;YAC1E,2BAA2BhM,OAAOwJ;YAClC,uCAAuC;YACvC,0CAA0CxJ,OAAOyJ;YACjD,iDAAiDC;WAO9ChL,cAAc8N,uBAAuB,CAAC;YACvC1I,WAAW9D,OAAO8D;YAClBmF;YACAwD,UAAUpF,eAAe,aAAa;YACtC,+DAA+D;YAC/D,kEAAkE;YAClE,2CAA2C;YAC3CqF,oBAAoB/F;YACpBgG,oBAAoBjO,cAAciO,kBAAkB,CAAChE;QACvD,IACIzH,QAAQ;YAAE0L,gBAAgB1L;QAAM,IAAI,CAAC;YACzC2L,aAAa,GAAGtI,mBAAmB,WAAW,CAAC;YAC/CuI,YAAY,GAAGvI,mBAAmB,eAAe,CAAC;YAClD,kBAAkB;YAClB,oBAAoB9D;YACpB,qBAAqBgK,SAASnH,EAAE;YAChC,uBAAuB5C;WACnBC,YAAY;YAAE,uBAAuBA;QAAU,IAAI,CAAC;YACxD,sBAAsBX,OAAOiJ;WAKzB3C,oBACA;YAAE,wBAAwBA;QAAkB,IAC5C,CAAC,GACD9E,kBAAkB;YAAE,6BAA6BA;QAAgB,IAAI,CAAC,GAGtE6F,eACA;YACE,2BAA2BrH,OACzBtB,cAAcqO,2BAA2B,CAAC;gBACxC9D;gBACAyD,oBAAoB/F;gBACpBgG,oBACEjO,cAAciO,kBAAkB,CAAChE;YACrC;YAEF,mCAAmC3I,OACjCtB,cAAciO,kBAAkB,CAAChE;QAErC,IACA,CAAC;QAEP,2EAA2E;QAC3E,oEAAoE;QACpE,yEAAyE;QACzE,oEAAoE;QACpE,iBAAiB;QACjB,IAAIA,gBAAgBtI,MAAM,GAAG,GAAG;YAC9B3B,cAAcsO,qCAAqC,CACjDX,QACAzE,aAAaK,SAAS;YAExBvJ,cAAcuO,4BAA4B,CAACZ,QAAQ1D;QACrD;QACA,MAAMuE,WAAW,MAAMC,MACrB,+CACA;YACE3N,QAAQ;YACRS,SAAS;gBACPmN,eAAe,CAAC,OAAO,EAAExN,QAAQC,GAAG,CAACC,iBAAiB,EAAE;gBACxD,gBAAgB;eAKZwB,MAAM6I,SAAS,GAAG;gBAAE,mBAAmB7I,MAAM6I,SAAS;YAAC,IAAI,CAAC;YAElE5K,MAAM8M,OAAOgB,QAAQ;QACvB;QAEF,MAAMC,UAAW,MAAMJ,SAASxN,IAAI;QAKpC,IAAI,CAACwN,SAAS7C,EAAE,IAAI,CAACiD,QAAQC,GAAG,EAAE;YAChCC,QAAQ7N,KAAK,CAAC,4BAA4B2N,QAAQ3N,KAAK;YACvD,MAAM8K,SAAS0B,MAAM,GAAGC,KAAK,CAAC,IAAM9L;YACpC,wEAAwE;YACxE,kEAAkE;YAClE,6DAA6D;YAC7D,MAAMmB;YACN,MAAMH,MAAMK,OAAO;YACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+B;QACtE;QACA,MAAM8K,SAASM,GAAG,CAChB;YAAE0C,mBAAmBH,QAAQhK,EAAE;YAAEoK,gBAAgBJ,QAAQC,GAAG;QAAC,GAC7D;YAAEtC,OAAO;QAAK;QAEhB,yEAAyE;QACzE,uEAAuE;QACvE,MAAM0C,UAAU;YACdC,SAASnD,SAASnH,EAAE;YACpBiK,KAAKD,QAAQC,GAAG;WACZ1I,cAAcxE,MAAM,GAAG,IAAI;YAAEwE;QAAc,IAAI,CAAC;QAEtD,MAAMvD,MAAMuM,MAAM,CAAC,KAAKF;QACxB,OAAOrO,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACiO;IAC9B,EAAE,OAAOhO,OAAO;QACd6N,QAAQ7N,KAAK,CAACA;QACd,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM8B;QACN,OAAMH,yBAAAA,MAAOK,OAAO;QACpB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/draft-order.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport * as CommerceModel from '../model'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { connectLinkageIsReady } from '@aglyn/tenant-data-admin/server/stripe-account-mode'\nimport { checkoutSessionCardAuthenticationParams } from '@aglyn/tenant-data-admin/server/stripe-card-authentication'\nimport { resolveManualTaxRateId } from './manual-tax-rate'\nimport {\n  type PromotionSlotHold,\n  holdPromotionSlot,\n  promotionHoldKey,\n} from './promotion-hold'\nimport {\n  buildRoute,\n  claimAttempt,\n  Route,\n  type AttemptClaim,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\n\n/**\n * Draft orders (AGL-287, Shopify parity): a manager builds an order in\n * the console and sends the buyer a payment link. Creates the order doc\n * (status `pending`, channel `draft`) with a sequential number, then a\n * Stripe Checkout session on the merchant's connected account whose\n * webhook completion flips the SAME doc to `paid`\n * (metadata type `commerce-draft`).\n */\nexport const draftOrderHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  if (!process.env.STRIPE_SECRET_KEY) {\n    return res.status(501).json({ error: 'Payments are not configured.' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n  const body =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n  const productId = String(body.productId ?? '')\n  const variantId = String(body.variantId ?? '')\n  const quantity = Math.max(1, Math.min(99, Math.round(Number(body.quantity ?? 1))))\n  const email = String(body.email ?? '').trim()\n  // A code the MERCHANT types while composing the order (AGL-305). The\n  // storefront doors read this same field name, so one resolver answers it the\n  // same way whoever pressed the button.\n  const couponCode = String(body.couponCode ?? '').trim()\n  // One draft attempt, minted by the console dialog (AGL-1697). Node\n  // lowercases incoming headers, but read both spellings — the plugin API\n  // request type makes no promise about casing.\n  const idempotencyKey = String(\n    req.headers['idempotency-key'] ?? req.headers['Idempotency-Key'] ?? '',\n  ).trim().slice(0, 200)\n  if (!hostId || !productId) {\n    return res.status(400).json({ error: 'Missing hostId or productId' })\n  }\n\n  let claim: AttemptClaim | null = null\n  /**\n   * The redemption slot this attempt reserved (AGL-305), hoisted so every\n   * refusal below the claim — and the catch — can hand it back. A throw after\n   * the hold is placed is exactly the case where a slot would otherwise stand\n   * invisibly against the merchant's cap until its TTL lapsed, and this path\n   * rolls its order document back on two of those refusals already.\n   */\n  let discountSlot: PromotionSlotHold | null = null\n  let discountHoldKey = ''\n  const releaseDiscountSlot = async (): Promise<void> => {\n    const slot = discountSlot\n    discountSlot = null\n    discountHoldKey = ''\n    if (slot) await slot.release()\n  }\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // AN ALLOWLIST (AGL-2262), matching `cancel-order.ts`, `fulfill-order.ts`\n    // and the Firestore rules, whose host-write predicate is\n    // `hostMemberRole(hostId) in ['admin','editor']`. The old\n    // `!role || role === 'viewer'` denylist caught the stranger but admitted\n    // every OTHER string — a legacy value, a typo, any role added later — on\n    // the one route that mints a live Stripe payment link. `HostAccessRole`\n    // has since grown an `author` (AGL-2334), which this allowlist refuses on\n    // purpose — an author edits content and does not mint payment links — and\n    // which the old denylist would have admitted. That is the allowlist form\n    // earning its keep on a union that changed under it.\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not permitted' })\n    }\n    const productSnapshot = await hostRef\n      .collection('products')\n      .doc(productId)\n      .get()\n    const raw = productSnapshot.data() as any\n    if (!raw || raw.deletedAt) {\n      return res.status(404).json({ error: 'Unknown product' })\n    }\n    const product = CommerceModel.liftLegacyProduct(raw)\n    const variant = variantId\n      ? product.variants.find((item) => item.id === variantId)\n      : product.variants[0]\n    if (!variant) return res.status(404).json({ error: 'Unknown variant' })\n    // A variant with no price yet (AGL-2916) cannot be invoiced: the link\n    // would ask for nothing, or for no amount at all.\n    if (!CommerceModel.variantHasPrice(variant)) {\n      return res.status(400).json({ error: `Set a price for ${product.name} before selling it.` })\n    }\n\n    // Merchant account like the storefront checkout (AGL-284).\n    const ownerOrg = await getOrgForHost(hostId)\n    // Plan gate, re-asked per request exactly as the storefront checkout\n    // asks it (AGL-1873, the AGL-481 pattern): a free or lapsed org must not\n    // keep minting payment links — at the free plan's 0% transaction fee —\n    // through the one commerce door that skipped the entitlement. Sits\n    // ABOVE the attempt claim with the other deterministic refusals, so it\n    // never burns the merchant's idempotency key.\n    if (!Aglyn.checkEntitlement(ownerOrg?.org as any, 'commerce')) {\n      return res.status(403).json({ error: 'Selling is not enabled' })\n    }\n    const ownerId = ownerOrg?.org?.ownerUid\n    const ownerProfile = ownerId\n      ? await firestore.collection('profiles').doc(String(ownerId)).get()\n      : null\n    const accountId = ownerProfile?.get('stripeAccountId')\n    if (\n      !connectLinkageIsReady(\n        {\n          accountId,\n          chargesEnabled: ownerProfile?.get('stripeChargesEnabled'),\n          accountLivemode: ownerProfile?.get('stripeAccountLivemode'),\n        },\n        { subject: `draft order host ${hostId}` },\n      )\n    ) {\n      return res.status(409).json({ error: 'Payments are not set up yet' })\n    }\n\n    // Stripe returns the merchant to the console Products page. This was\n    // `/{hostDocId}/products`, the pre-AGL-621/622 shape, so paying (or\n    // cancelling) a draft order landed on a 404 (AGL-685). Console products\n    // is the plugin route keyed by org slug + host SUBDOMAIN; server code\n    // cannot call useConsoleHostRoute, so resolve them here. Without both,\n    // fall back to the origin root rather than a fabricated dead path.\n    const consoleSubdomain = (\n      await firestore.collection('hostIndex').doc(hostId).get()\n    ).get('subdomain') as string | undefined\n    const consoleOrgSlug = ownerOrg?.org?.slug as string | undefined\n    const origin = req.headers.origin ?? `https://${req.headers.host}`\n    const consoleProductsUrl =\n      consoleOrgSlug && consoleSubdomain\n        ? `${origin}${buildRoute(Route.HOST_PLUGIN, {\n            orgSlug: consoleOrgSlug,\n            host: consoleSubdomain,\n            pluginSlug: 'products',\n          })}`\n        : origin\n\n    // WHAT THE COUNT SAYS, said out loud (AGL-2452).\n    //\n    // This handler contained no `canPurchase` and no `stockShortfall` — no\n    // reference to inventory of any kind. It is the door that mints a LIVE,\n    // payable Stripe link, and it would mint one for a sold-out variant whose\n    // merchant had chosen `oversellPolicy: 'deny'`, with the `commerce-draft`\n    // webhook branch then completing it into a `paid` order. `pos-order.ts`'s\n    // own comment asserts \"every storefront door gates on it\"; that claim was\n    // false for this one.\n    //\n    // WARN, NEVER BLOCK, matching the register (AGL-2357, the decision).\n    // Both of these are MERCHANT-initiated doors rather than shopper-initiated\n    // ones — the merchant may well be taking a deliberate pre-order or\n    // backorder — so a stale count must not refuse a sale the merchant means to\n    // make. What the merchant is entitled to is to be TOLD, which is the part\n    // that was missing entirely. The refusal variant is a separate decision and\n    // is not taken here.\n    //\n    // Computed from the SERVER's product document, and reported on the same\n    // `stockWarnings` key and in the same `StockShortfall` shape the register\n    // already returns, so one console surface can read either door.\n    const shortfall = CommerceModel.stockShortfall(\n      product,\n      variantId || product.variants[0]?.id,\n      quantity,\n    )\n    const stockWarnings: CommerceModel.StockShortfall[] = shortfall\n      ? [\n          {\n            productId,\n            ...(variantId ? { variantId } : {}),\n            name: product.name,\n            requested: quantity,\n            available: shortfall.available,\n          },\n        ]\n      : []\n\n    const unitAmountCents = Math.round(Number(variant.priceUsd) * 100)\n    const lineItems: CommerceModel.OrderLineItem[] = [\n      {\n        productId,\n        ...(variantId ? { variantId } : {}),\n        name: product.name,\n        ...(variant.sku ? { sku: variant.sku } : {}),\n        productType: product.type,\n        quantity,\n        unitAmountCents,\n      },\n    ]\n    const itemsCents = unitAmountCents * quantity\n    // THE DISCOUNTS HUB, ON THIS PATH TOO (AGL-305).\n    //\n    // `hosts/{hostId}/discounts` reached the cart and buy-now and stopped\n    // there, so a store running \"Summer sale, 10% off\" sold at 10% off through\n    // both storefront doors and at FULL price the moment the merchant invoiced\n    // the same buyer for the same goods through a payment link. No code has to\n    // be typed for that gap to open: an automatic promotion applies itself on\n    // the storefront and applied itself nowhere here, so the merchant's own\n    // payment link quietly undercut — and here overcharged against — their own\n    // advertised price.\n    //\n    // Resolved through the SAME `resolveDiscount` the other doors use, so one\n    // code cannot mean two amounts.\n    //\n    // RESOLVED BEFORE THE TAX BLOCK BELOW, and that ordering is the whole\n    // point rather than a convenience: the manual rate is computed against\n    // `chargedItemsCents`, so the discount lands BEFORE tax and the taxable\n    // base is the discounted one. It has to be — the session applies that same\n    // rate as `line_items[0][tax_rates][0]`, which Stripe evaluates against the\n    // line amount it actually charges. Reducing the line while taxing the list\n    // price would make our stored `taxCents` disagree with the tax Stripe\n    // collects, on every discounted draft.\n    const draftDiscountLines = [{ productId, amountCents: itemsCents }]\n    const hubDiscounts = await hostRef.collection('discounts').limit(100).get()\n    const resolvedDiscount = CommerceModel.resolveDiscount(\n      hubDiscounts.docs.map((docSnapshot) => ({\n        ...(docSnapshot.data() as CommerceModel.HostDiscount),\n        $id: docSnapshot.id,\n      })),\n      {\n        ...(couponCode ? { code: couponCode } : {}),\n        subtotalCents: itemsCents,\n        productIds: [productId],\n        lines: draftDiscountLines,\n      },\n    )\n    // Above the claim and above the order write with every other deterministic\n    // refusal, so a merchant who fixes the code and presses Send again strands\n    // no `pending` draft and burns no key. A code that RESOLVES but confers\n    // nothing leaves through here too — `codeProblem` carries the benefit's own\n    // reason — which is what stops this door repeating the defect that charged\n    // full shipping on a free-shipping code.\n    if (resolvedDiscount?.codeProblem) {\n      return res.status(400).json({ error: resolvedDiscount.codeProblem })\n    }\n    const appliedDiscountId =\n      resolvedDiscount && resolvedDiscount.benefit.kind !== 'none'\n        ? resolvedDiscount.discountId\n        : ''\n    const discountCents = appliedDiscountId ? resolvedDiscount!.discountCents : 0\n    // Stripe's charge minimum is 50¢ — never price a payment link below it,\n    // the same floor buy-now applies.\n    const chargedItemsCents = discountCents\n      ? Math.max(50, itemsCents - discountCents)\n      : itemsCents\n    // What was ACTUALLY taken off, after that floor. The stored totals record\n    // this rather than the resolver's figure, so the parts sum to the total on\n    // a draft the floor moved.\n    const appliedDiscountCents = itemsCents - chargedItemsCents\n    // The fee and `totals` are both built BELOW the shipping plan (AGL-2152):\n    // Stripe's card cost rides the whole payment-link total, so neither can be\n    // known until the tax (AGL-1953) and the shipping options are.\n\n    // Shipping (AGL-1792), from the same settings document the two storefront\n    // paths read. This handler contained no `shipping` string at all: a\n    // merchant who configured zones and rates collected them on a cart\n    // (AGL-1707) and on buy-now (AGL-1720), and nothing when they invoiced the\n    // same buyer for the same parcel through a payment link. The session\n    // collected no address either, so the merchant was not even told where to\n    // send it — the webhook records one now that Stripe is asked for it.\n    //\n    // The premise AGL-1792 filed this under was that \"the destination IS known\n    // — the merchant typed it\". It is not: the draft dialog collects a product,\n    // a variant, a quantity and an email, and this handler reads exactly those.\n    // So the destination is as unknown here as it is in the cart, and the same\n    // asking machinery applies rather than none of it.\n    //\n    // CONDITIONAL on the product being physical, exactly as buy-now is: this\n    // dialog invoices downloads and consulting too, and charging that buyer\n    // postage would be worse than the bug. A missing `type` reads as physical,\n    // matching the fee ladder above — the two reads must not disagree about\n    // what a part-migrated doc is. The one-time condition buy-now also carries\n    // is structural here: this path only ever builds `mode: 'payment'`.\n    //\n    // RESOLVED BEFORE THE ORDER DOCUMENT, because the plan can refuse and the\n    // order is written before Stripe is called. Refusing after it would strand\n    // a `pending` draft on the merchant's orders list for every attempt —\n    // this path's version of the orphaned coupon AGL-1721 kept out of the cart.\n    const storeSettings = await hostRef\n      .collection('settings')\n      .doc('store')\n      .get()\n    const shippingSettings = storeSettings.get('shipping') as\n      CommerceModel.ShippingSettings | undefined\n\n    // Taxes (AGL-1953), from the same settings document. This handler had no\n    // tax code at all in either mode, so a merchant who invoiced a buyer for\n    // the same product they sell on the storefront charged them no tax — the\n    // cart's defect, one door over, and worse here because the merchant\n    // composed this order deliberately and would reasonably assume it matched\n    // their store.\n    //\n    // Origin-based, exactly as buy-now and the cart resolve it. The AGL-1792\n    // note above already established the premise: this dialog collects a\n    // product, a variant, a quantity and an email, so the DESTINATION is as\n    // unknown here as it is in the cart.\n    //\n    // Computed pure and BEFORE the claim so the stored totals can carry it;\n    // the Stripe object it needs is minted below the point of no return.\n    const taxSettings = (storeSettings.get('tax') ?? {}) as CommerceModel.TaxSettings\n    // AGL-1999: an unset tax mode is NOT a decision, and it must not sell.\n    // `mode` was `undefined` for every store whose owner never opened the\n    // Taxes card — the default state of every new storefront — and each\n    // branch below tested for a specific string, so no branch was taken, no\n    // tax was computed, and the shopper was charged an untaxed total. See\n    // `commerce-tax-decision.ts` for why refusing beats defaulting to either\n    // mode. `mode: 'none'` is the explicit opt-out and passes straight\n    // through.\n    const taxDecision = CommerceModel.storefrontTaxDecision({\n      settings: taxSettings,\n      taxExempt: product.taxExempt,\n    })\n    if (taxDecision.kind === 'undecided') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.STOREFRONT_TAX_UNDECIDED_MESSAGE })\n    }\n    const taxMisconfigured =\n      CommerceModel.storefrontTaxMisconfiguration(taxSettings)\n    if (taxMisconfigured) {\n      // AGL-2145: the merchant DECIDED to collect and the sale would have\n      // charged zero anyway — an unfinished settings card, not a\n      // jurisdiction miss. Refused in the same words and the same place as\n      // the undecided case above.\n      return res.status(409).json({ error: taxMisconfigured })\n    }\n    const useStripeTax = taxDecision.kind === 'stripe-automatic'\n    const manualRate =\n      taxDecision.kind === 'manual' &&\n      !taxSettings.pricesIncludeTax\n        ? CommerceModel.resolveTaxRate(taxSettings, taxSettings.origin ?? {})\n        : null\n    // THE DISCOUNTED BASE (AGL-305). `chargedItemsCents` is what the line\n    // will actually be worth, and the session applies this same rate to that\n    // line as a Stripe Tax Rate — so taxing `itemsCents` here would record a\n    // figure Stripe never charges.\n    const taxCents = manualRate\n      ? CommerceModel.computeTaxCents(chargedItemsCents, manualRate.pct)\n      : 0\n    // Stripe Tax mode leaves this 0 at composition time and the webhook folds\n    // the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const shippingPlan =\n      (product.type ?? 'physical') === 'physical'\n        ? CommerceModel.planCheckoutShipping(\n            shippingSettings,\n            {\n              subtotalCents: itemsCents,\n              totalGrams:\n                Math.max(0, Number(variant.weightGrams ?? 0)) * quantity,\n            },\n            body.shippingCountry,\n          )\n        : { countries: CommerceModel.CHECKOUT_SHIPPING_COUNTRIES, options: [] }\n    if (shippingPlan.refusal === 'destination-required') {\n      return res.status(400).json({\n        error: 'Choose where this order ships to.',\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    if (shippingPlan.refusal === 'destination-unserved') {\n      const declared = CommerceModel.normalizeCheckoutShippingCountry(\n        body.shippingCountry,\n      )\n      return res.status(409).json({\n        error: `This store does not ship to ${\n          CommerceModel.CHECKOUT_SHIPPING_COUNTRY_NAMES[declared as string] ??\n          'that country'\n        }.`,\n        needsShippingCountry: true,\n        shippingCountries: [...CommerceModel.CHECKOUT_SHIPPING_COUNTRIES],\n      })\n    }\n    // No rate of the merchant's reaches this order (AGL-2232). Above the\n    // order write and the payment link, like every other refusal here, so a\n    // manager who fixes the tier table and presses Send again strands nothing.\n    if (shippingPlan.refusal === 'cart-unpriceable') {\n      return res\n        .status(409)\n        .json({ error: CommerceModel.CART_UNPRICEABLE_SHIPPING_MESSAGE })\n    }\n    // FREE SHIPPING IS A ZEROED RATE, NOT A REDUCTION (AGL-305), the same\n    // construction the cart uses and for the same reason: nothing has picked a\n    // rate yet, so there is no amount to take off. The buyer chooses after the\n    // link is minted, so the only exact answer is to offer every rate at zero.\n    //\n    // Every rate rather than the cheapest, because `free_shipping` carries no\n    // field naming one — and zeroing them all keeps the fee, the transfer floor\n    // and the ceiling below honest, since all three read these same options.\n    //\n    // Derived from `shippingPlan.options` and read EVERYWHERE below in its\n    // place; a reader that reached past this to `shippingPlan.options` would\n    // price carriage the buyer is not being charged for.\n    const shippingOptions =\n      resolvedDiscount?.freeShipping === true\n        ? shippingPlan.options.map((option) => ({ ...option, amountCents: 0 }))\n        : shippingPlan.options\n\n    // THE PLATFORM FEE (AGL-2152) — the advertised take PLUS Stripe's card\n    // cost, passed through at cost. A payment link is a destination charge, so\n    // Stripe debits 2.9% + 30¢ from the PLATFORM's balance; the old take-only\n    // figure meant every tier carrying a 0% rate invoiced a buyer at a loss to\n    // Aglyn, and Starter's 2% is below 2.9% so it lost money at every size too.\n    //\n    // `?? 'physical'` (AGL-2251), matching `checkout.ts` and the cart. Without\n    // it a product doc carrying no `type` fell to `resolveTransactionFeePct`'s\n    // digital branch, so a merchant's payment link took a different cut of the\n    // same product than their storefront did.\n    //\n    // The base is the whole card total: the goods, the manual tax line, and the DEAREST shipping\n    // option the link offers (the buyer picks after the link is minted and\n    // `application_fee_amount` is fixed at creation, so reaching for the\n    // cheapest would put the difference back on Aglyn). A store on Stripe Tax\n    // is the one residual — that tax is computed inside Stripe afterwards.\n    const shippingCeilingCents = shippingOptions.reduce(\n      (most, option) =>\n        Math.max(most, Math.max(0, Number(option.amountCents ?? 0))),\n      0,\n    )\n    // Both bases are the DISCOUNTED goods (AGL-305). The platform take is a\n    // cut of what the merchant actually sells for, and Stripe's card cost is\n    // passed through on what the card actually runs for — reading `itemsCents`\n    // here would invoice the merchant a fee on money nobody paid.\n    const feeCents = Aglyn.resolveTransactionFeeCents(\n      ownerOrg?.org as any,\n      product.type ?? 'physical',\n      chargedItemsCents,\n      chargedItemsCents + taxCents + shippingCeilingCents,\n    )\n    // Stripe Tax mode leaves the tax 0 at composition time and the webhook\n    // folds the computed figure in — the same additive shape AGL-1792 used for\n    // shipping, and for the same reason: only Stripe knows it.\n    const totals = CommerceModel.computeOrderTotals(lineItems, {\n      feeCents,\n      taxCents,\n      // The line item still carries the LIST price, so the discount has to be\n      // a named part of the totals or `itemsCents - discountCents + tax` would\n      // not be the number on the payment link.\n      discountCents: appliedDiscountCents,\n    })\n\n    // THE LINK CHARGES `chargedItemsCents`, EXACTLY (the AGL-2159 construction,\n    // reused here because this path grew the same problem the moment it grew a\n    // discount).\n    //\n    // A Stripe line is `quantity` units at ONE integer `unit_amount`, so it can\n    // only express totals divisible by `quantity` — and a percentage discount\n    // does not respect that. Dividing and multiplying back misses the intended\n    // total by up to `quantity / 2` cents in either direction, which on this\n    // path is worse than on buy-now: the frozen `totals` above are written to\n    // the order document BEFORE the session is minted, so a link that charged\n    // a different number would leave the merchant's own books disagreeing with\n    // what their buyer paid, permanently and silently.\n    //\n    // So when the total does not divide evenly, the line becomes ONE unit at\n    // the exact total with the count moved into the display name. The real\n    // quantity is carried by the order document's line item, which is\n    // untouched, so nothing downstream can tell the difference.\n    //\n    // The even case — every undiscounted draft, and most discounted ones —\n    // keeps the per-unit shape byte for byte.\n    const evenUnitAmountCents = Math.floor(chargedItemsCents / quantity)\n    const remainderCents = chargedItemsCents - evenUnitAmountCents * quantity\n    const chargedQuantity = remainderCents === 0 ? quantity : 1\n    const chargedUnitAmountCents =\n      remainderCents === 0 ? evenUnitAmountCents : chargedItemsCents\n    const chargedLineName = `${product.name}${\n      remainderCents === 0 ? '' : ` × ${quantity}`\n    }`.slice(0, 120)\n\n    // Point of no return (AGL-1697): everything past here writes an order and\n    // mints a live payment link. Every deterministic refusal — unknown\n    // product, payments not set up, the shipping-destination ask — sits above\n    // this line, so none of them burns the key: the merchant fixes the input\n    // and presses the same button. Before the claim, a double-submit minted a\n    // SECOND order doc, burned a second sequential number, and returned two\n    // live payment links bound to different orders, both payable.\n    const claimed = await claimAttempt(firestore, {\n      kind: 'commerce-draft',\n      scopeId: hostId,\n      orgId: String(ownerOrg?.org?.id ?? ''),\n      key: idempotencyKey,\n      busyMessage: 'This draft order is already being created',\n    })\n    if ('replay' in claimed) {\n      return res.status(claimed.replay.status).json(claimed.replay.body)\n    }\n    claim = claimed.claim\n\n    // THE REDEMPTION SLOT IS RESERVED HERE (AGL-305), on the same terms the\n    // storefront doors reserve it.\n    //\n    // A payment link lives until the buyer pays it, so between this handler and\n    // the `commerce-draft` webhook branch that settles the slot there is a\n    // window measured in days — far wider than a Checkout Session's. Reading\n    // `redemptions` and hoping would let a merchant mint ten links against a\n    // cap of one and have all ten pay.\n    //\n    // BELOW the claim because the hold is keyed by the attempt: a retry of one\n    // attempt must be able to re-claim the slot it already holds rather than be\n    // refused by it. An uncapped promotion writes nothing and returns an empty\n    // `holdKey`, which is what tells the webhook to fall back to the plain\n    // increment.\n    if (appliedDiscountId) {\n      const slot = await holdPromotionSlot({\n        firestore,\n        ref: hostRef.collection('discounts').doc(appliedDiscountId),\n        holdKey: promotionHoldKey(claimed.claim.stripeKey),\n        label: `draft discount ${appliedDiscountId}`,\n      })\n      if (!slot.ok) {\n        // Refused rather than quietly repriced, and that is deliberate for the\n        // AUTOMATIC case too: the merchant composed this order at a price the\n        // promotion was part of, and minting the link at full price would\n        // invoice their buyer more than the store advertises without saying so.\n        // Nothing has been written yet, so the key goes back and the retry\n        // prices correctly — `resolveDiscount` counts live holds and simply\n        // stops offering an exhausted promotion.\n        await claim.release()\n        return res.status(409).json({\n          error:\n            couponCode && resolvedDiscount?.discount.code\n              ? CommerceModel.PROMOTION_EXHAUSTED_MESSAGE\n              : CommerceModel.PROMOTION_UNAVAILABLE_MESSAGE,\n        })\n      }\n      if (slot.holdKey) {\n        discountSlot = slot\n        discountHoldKey = slot.holdKey\n      }\n    }\n\n    // Order doc first (transactional number), then the payment link.\n    const orderRef = hostRef.collection('orders').doc()\n    const counterRef = hostRef.collection('counters').doc('orders')\n    await firestore.runTransaction(async (transaction) => {\n      const counter = await transaction.get(counterRef)\n      const number = Number(counter.get('next') ?? 1)\n      transaction.set(counterRef, { next: number + 1 }, { merge: true })\n      // With the fields the orders list queries by (AGL-3321).\n      transaction.set(orderRef, CommerceModel.withOrderListFields(orderRef.id, {\n        number,\n        status: 'pending',\n        channel: 'draft',\n        lineItems,\n        totals,\n        // WHICH TAX REGIME THIS ORDER IS COMPOSED UNDER (AGL-2451), from the\n        // decision taken above rather than from the frozen `taxCents` — a\n        // Stripe Tax draft freezes 0 there and only the paid session knows the\n        // figure, so a mode read back off the amount would call it `none`.\n        //\n        // Stamped at composition so a draft that is never paid still says what\n        // it was priced under, and RESTATED by the `commerce-draft` webhook\n        // branch from the session that actually charged it. The webhook's is\n        // authoritative — it has Stripe's computed tax in hand — and for a\n        // manual draft the two agree by construction.\n        taxMode: CommerceModel.storefrontTaxModeForDecision(\n          taxDecision,\n          taxCents,\n        ),\n        customerEmail: email || null,\n        timeline: [\n          {\n            atMs: Date.now(),\n            event: 'draft',\n            detail: `Draft created by ${decoded.email ?? decoded.uid}`,\n          },\n        ],\n        createdAtMs: Date.now(),\n        createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n      }))\n    })\n\n    // The tax rate is minted here, BELOW the claim, because it creates a real\n    // Stripe object (AGL-1953). Cached per host, so it is usually a read.\n    let draftTaxRateId = ''\n    if (taxCents > 0 && manualRate) {\n      draftTaxRateId =\n        (await resolveManualTaxRateId({\n          hostRef,\n          taxPct: manualRate.pct,\n          taxLabel: manualRate.label || `Tax (${manualRate.pct}%)`,\n          ...(claim.stripeKey\n            ? { headers: { 'Idempotency-Key': `${claim.stripeKey}-tax-rate` } }\n            : {}),\n        })) ?? ''\n      if (!draftTaxRateId) {\n        // A VISIBLE refusal rather than an untaxed payment link — the silent\n        // under-collection is the defect. The order doc is rolled back the\n        // same way the session failure below rolls it back.\n        await orderRef.delete().catch(() => undefined)\n        await releaseDiscountSlot()\n        await claim.release()\n        return res.status(502).json({ error: 'Payment link creation failed' })\n      }\n    }\n    const params = new URLSearchParams({\n      mode: 'payment',\n      // 3-D Secure, from the one seam every card payment shares (AGL-3360).\n      ...checkoutSessionCardAuthenticationParams('payment'),\n      ...(useStripeTax ? { 'automatic_tax[enabled]': 'true' } : {}),\n      ...(draftTaxRateId ? { 'line_items[0][tax_rates][0]': draftTaxRateId } : {}),\n      'line_items[0][quantity]': String(chargedQuantity),\n      'line_items[0][price_data][currency]': 'usd',\n      'line_items[0][price_data][unit_amount]': String(chargedUnitAmountCents),\n      'line_items[0][price_data][product_data][name]': chargedLineName,\n      // THE CONNECT SPLIT (AGL-1956). A Stripe Tax payment link computes its\n      // tax against AGLYN's registrations and Aglyn remits it (AGL-1904), so\n      // the merchant gets a FIXED `transfer_data[amount]` and no\n      // `application_fee_amount`: the fee form transfers `amount_total − fee`,\n      // and `amount_total` includes that tax. A manual-rate or untaxed link is\n      // unchanged. See `commerce-connect-transfer.ts`.\n      ...CommerceModel.destinationChargeParams({\n        accountId: String(accountId),\n        feeCents,\n        taxOwner: useStripeTax ? 'platform' : 'merchant',\n        // The DISCOUNTED goods (AGL-305): this is what the merchant is\n        // transferred, and paying out the list price on a discounted link\n        // would move money Stripe never collected.\n        merchantGoodsCents: chargedItemsCents,\n        shippingFloorCents: CommerceModel.shippingFloorCents(shippingOptions),\n      }),\n      ...(email ? { customer_email: email } : {}),\n      success_url: `${consoleProductsUrl}?draft=paid`,\n      cancel_url: `${consoleProductsUrl}?draft=canceled`,\n      'metadata[type]': 'commerce-draft',\n      'metadata[hostId]': hostId,\n      'metadata[orderId]': orderRef.id,\n      'metadata[productId]': productId,\n      ...(variantId ? { 'metadata[variantId]': variantId } : {}),\n      'metadata[feeCents]': String(feeCents),\n      // WHAT THE WEBHOOK SETTLES (AGL-305), in the field names the\n      // `checkout.session.completed` branch already reads for the cart. The\n      // hold key's ABSENCE is what tells it to fall back to the unconditional\n      // increment, which is right for an uncapped promotion.\n      ...(appliedDiscountId\n        ? { 'metadata[discountId]': appliedDiscountId }\n        : {}),\n      ...(discountHoldKey ? { 'metadata[discountHoldKey]': discountHoldKey } : {}),\n      // See the AGL-1956 note in `checkout.ts` — recorded only on the shape\n      // where the merchant's payout is no longer the whole charge.\n      ...(useStripeTax\n        ? {\n            'metadata[transferCents]': String(\n              CommerceModel.platformLiableTransferCents({\n                feeCents,\n                merchantGoodsCents: chargedItemsCents,\n                shippingFloorCents:\n                  CommerceModel.shippingFloorCents(shippingOptions),\n              }),\n            ),\n            'metadata[transferShippingCents]': String(\n              CommerceModel.shippingFloorCents(shippingOptions),\n            ),\n          }\n        : {}),\n    })\n    // Both keys or neither (AGL-1720's rule, inherited). Stripe will not apply\n    // a shipping rate without an address to ship to, and a merchant who\n    // configured nothing plans to no options and so gets neither — a payment\n    // link byte-identical to the one this handler built before shipping\n    // existed on it.\n    if (shippingOptions.length > 0) {\n      CommerceModel.appendShippingAddressCollectionParams(\n        params,\n        shippingPlan.countries,\n      )\n      CommerceModel.appendCheckoutShippingParams(params, shippingOptions)\n    }\n    const response = await fetch(\n      'https://api.stripe.com/v1/checkout/sessions',\n      {\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n          'Content-Type': 'application/x-www-form-urlencoded',\n          // The half that is a live payment link (AGL-1697). Stripe replays\n          // the existing session for a repeated key instead of opening a\n          // second one on the merchant's account, which covers the window\n          // where our claim is written but the response never arrives.\n          ...(claim.stripeKey ? { 'Idempotency-Key': claim.stripeKey } : {}),\n        },\n        body: params.toString(),\n      },\n    )\n    const session = (await response.json()) as {\n      url?: string\n      id?: string\n      error?: any\n    }\n    if (!response.ok || !session.url) {\n      console.error('Stripe draft-order error', session.error)\n      await orderRef.delete().catch(() => undefined)\n      // The draft did not happen — hand the key back rather than locking this\n      // dialog out over one flaky moment. The retry re-derives the SAME\n      // digest, so if Stripe did create the session it replays it.\n      await releaseDiscountSlot()\n      await claim.release()\n      return res.status(502).json({ error: 'Payment link creation failed' })\n    }\n    await orderRef.set(\n      { checkoutSessionId: session.id, paymentLinkUrl: session.url },\n      { merge: true },\n    )\n    // Spread on the same terms as the register's: present only when there is\n    // something to say, so a caller can test the key rather than a length.\n    const payload = {\n      orderId: orderRef.id,\n      url: session.url,\n      ...(stockWarnings.length > 0 ? { stockWarnings } : {}),\n    }\n    await claim.record(200, payload)\n    return res.status(200).json(payload)\n  } catch (error) {\n    console.error(error)\n    // Release on the way out so a transient failure does not strand the key\n    // (AGL-1691's rule). The order write may or may not have landed; the\n    // merchant reconciles from the orders list, the same position they were\n    // in before this endpoint had a claim at all. The redemption slot goes\n    // back for the same reason — a throw is the one path that would otherwise\n    // leave it standing against the cap until its TTL lapsed.\n    await releaseDiscountSlot()\n    await claim?.release()\n    return res.status(500).json({ error: 'Draft order failed' })\n  }\n}\n"],"names":["Aglyn","CommerceModel","firebaseAdmin","getOrgForHost","connectLinkageIsReady","checkoutSessionCardAuthenticationParams","resolveManualTaxRateId","holdPromotionSlot","promotionHoldKey","buildRoute","claimAttempt","Route","draftOrderHandler","req","res","body","method","status","json","error","process","env","STRIPE_SECRET_KEY","authorization","String","headers","idToken","startsWith","slice","length","undefined","JSON","parse","hostId","productId","variantId","quantity","Math","max","min","round","Number","email","trim","couponCode","idempotencyKey","claim","discountSlot","discountHoldKey","releaseDiscountSlot","slot","release","hostSnapshot","storeSettings","taxSettings","product","variant","ownerOrg","decoded","app","auth","verifyIdToken","firestore","hostRef","collection","doc","get","exists","memberRole","uid","productSnapshot","raw","data","deletedAt","liftLegacyProduct","variants","find","item","id","variantHasPrice","name","checkEntitlement","org","ownerId","ownerUid","ownerProfile","accountId","chargesEnabled","accountLivemode","subject","consoleSubdomain","consoleOrgSlug","slug","origin","host","consoleProductsUrl","HOST_PLUGIN","orgSlug","pluginSlug","shortfall","stockShortfall","stockWarnings","requested","available","unitAmountCents","priceUsd","lineItems","sku","productType","type","itemsCents","draftDiscountLines","amountCents","hubDiscounts","limit","resolvedDiscount","resolveDiscount","docs","map","docSnapshot","$id","code","subtotalCents","productIds","lines","codeProblem","appliedDiscountId","benefit","kind","discountId","discountCents","chargedItemsCents","appliedDiscountCents","shippingSettings","taxDecision","storefrontTaxDecision","settings","taxExempt","STOREFRONT_TAX_UNDECIDED_MESSAGE","taxMisconfigured","storefrontTaxMisconfiguration","useStripeTax","manualRate","pricesIncludeTax","resolveTaxRate","taxCents","computeTaxCents","pct","shippingPlan","planCheckoutShipping","totalGrams","weightGrams","shippingCountry","countries","CHECKOUT_SHIPPING_COUNTRIES","options","refusal","needsShippingCountry","shippingCountries","declared","normalizeCheckoutShippingCountry","CHECKOUT_SHIPPING_COUNTRY_NAMES","CART_UNPRICEABLE_SHIPPING_MESSAGE","shippingOptions","freeShipping","option","shippingCeilingCents","reduce","most","feeCents","resolveTransactionFeeCents","totals","computeOrderTotals","evenUnitAmountCents","floor","remainderCents","chargedQuantity","chargedUnitAmountCents","chargedLineName","claimed","scopeId","orgId","key","busyMessage","replay","ref","holdKey","stripeKey","label","ok","discount","PROMOTION_EXHAUSTED_MESSAGE","PROMOTION_UNAVAILABLE_MESSAGE","orderRef","counterRef","runTransaction","transaction","counter","number","set","next","merge","withOrderListFields","channel","taxMode","storefrontTaxModeForDecision","customerEmail","timeline","atMs","Date","now","event","detail","createdAtMs","createdAt","FieldValue","serverTimestamp","draftTaxRateId","taxPct","taxLabel","delete","catch","params","URLSearchParams","mode","destinationChargeParams","taxOwner","merchantGoodsCents","shippingFloorCents","customer_email","success_url","cancel_url","platformLiableTransferCents","appendShippingAddressCollectionParams","appendCheckoutShippingParams","response","fetch","Authorization","toString","session","url","console","checkoutSessionId","paymentLinkUrl","payload","orderId","record"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAC5C,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,sDAAqD;AAC3F,SAASC,uCAAuC,QAAQ,6DAA4D;AACpH,SAASC,sBAAsB,QAAQ,uBAAmB;AAC1D,SAEEC,iBAAiB,EACjBC,gBAAgB,QACX,sBAAkB;AACzB,SACEC,UAAU,EACVC,YAAY,EACZC,KAAK,QAGA,sBAAqB;AAE5B;;;;;;;CAOC,GACD,OAAO,MAAMC,oBAAsC,OAAOC,KAAKC;QAOhCD,4BAM4BA,WACnCE,cACGA,iBACAA,iBACmCA,gBACvCA,aAIKA,kBAKxBF,MAAAA;IA1BF,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,IAAI,CAACC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QAClC,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;IACA,MAAMI,gBAAgBC,QAAOX,6BAAAA,IAAIY,OAAO,CAACF,aAAa,YAAzBV,6BAA6B;IAC1D,MAAMa,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOZ,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IACrE,MAAMJ,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWgB,KAAKC,KAAK,CAACnB,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMoB,SAAST,QAAOT,eAAAA,KAAKkB,MAAM,YAAXlB,eAAe;IACrC,MAAMmB,YAAYV,QAAOT,kBAAAA,KAAKmB,SAAS,YAAdnB,kBAAkB;IAC3C,MAAMoB,YAAYX,QAAOT,kBAAAA,KAAKoB,SAAS,YAAdpB,kBAAkB;IAC3C,MAAMqB,WAAWC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,IAAIF,KAAKG,KAAK,CAACC,QAAO1B,iBAAAA,KAAKqB,QAAQ,YAAbrB,iBAAiB;IAC7E,MAAM2B,QAAQlB,QAAOT,cAAAA,KAAK2B,KAAK,YAAV3B,cAAc,IAAI4B,IAAI;IAC3C,qEAAqE;IACrE,6EAA6E;IAC7E,uCAAuC;IACvC,MAAMC,aAAapB,QAAOT,mBAAAA,KAAK6B,UAAU,YAAf7B,mBAAmB,IAAI4B,IAAI;IACrD,mEAAmE;IACnE,wEAAwE;IACxE,8CAA8C;IAC9C,MAAME,iBAAiBrB,QACrBX,QAAAA,8BAAAA,IAAIY,OAAO,CAAC,kBAAkB,YAA9BZ,8BAAkCA,IAAIY,OAAO,CAAC,kBAAkB,YAAhEZ,OAAoE,IACpE8B,IAAI,GAAGf,KAAK,CAAC,GAAG;IAClB,IAAI,CAACK,UAAU,CAACC,WAAW;QACzB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;IACrE;IAEA,IAAI2B,QAA6B;IACjC;;;;;;GAMC,GACD,IAAIC,eAAyC;IAC7C,IAAIC,kBAAkB;IACtB,MAAMC,sBAAsB;QAC1B,MAAMC,OAAOH;QACbA,eAAe;QACfC,kBAAkB;QAClB,IAAIE,MAAM,MAAMA,KAAKC,OAAO;IAC9B;IACA,IAAI;YAkBkBC,mBA8DLvC,qBA0KMwC,oBA+B2BC,qBAa7CC,eAM4BC,sBA6E7BD;YArUcE,eA2BOA,gBAkCRF,oBA+TCE;QA/ahB,MAAMC,UAAU,MAAMxD,cAAcyD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACnC;QAC/D,MAAMoC,YAAY5D,cAAcyD,GAAG,GAAGG,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAAChC;QAClD,MAAMmB,eAAe,MAAMW,QAAQG,GAAG;QACtC,IAAI,CAACd,aAAae,MAAM,EAAE;YACxB,OAAOrD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,0EAA0E;QAC1E,yDAAyD;QACzD,0DAA0D;QAC1D,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qDAAqD;QACrD,MAAMiD,aAAa,EAAChB,oBAAAA,aAAac,GAAG,CAAC,0BAAjBd,oBAAmC,CAAC,EAAE,CAACM,QAAQW,GAAG,CAAC;QACvE,IAAID,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAOtD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,MAAMmD,kBAAkB,MAAMP,QAC3BC,UAAU,CAAC,YACXC,GAAG,CAAC/B,WACJgC,GAAG;QACN,MAAMK,MAAMD,gBAAgBE,IAAI;QAChC,IAAI,CAACD,OAAOA,IAAIE,SAAS,EAAE;YACzB,OAAO3D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,MAAMoC,UAAUtD,cAAcyE,iBAAiB,CAACH;QAChD,MAAMf,UAAUrB,YACZoB,QAAQoB,QAAQ,CAACC,IAAI,CAAC,CAACC,OAASA,KAAKC,EAAE,KAAK3C,aAC5CoB,QAAQoB,QAAQ,CAAC,EAAE;QACvB,IAAI,CAACnB,SAAS,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QACrE,sEAAsE;QACtE,kDAAkD;QAClD,IAAI,CAAClB,cAAc8E,eAAe,CAACvB,UAAU;YAC3C,OAAO1C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO,CAAC,gBAAgB,EAAEoC,QAAQyB,IAAI,CAAC,mBAAmB,CAAC;YAAC;QAC5F;QAEA,2DAA2D;QAC3D,MAAMvB,WAAW,MAAMtD,cAAc8B;QACrC,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,8CAA8C;QAC9C,IAAI,CAACjC,MAAMiF,gBAAgB,CAACxB,4BAAAA,SAAUyB,GAAG,EAAS,aAAa;YAC7D,OAAOpE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyB;QAChE;QACA,MAAMgE,UAAU1B,6BAAAA,gBAAAA,SAAUyB,GAAG,qBAAbzB,cAAe2B,QAAQ;QACvC,MAAMC,eAAeF,UACjB,MAAMrB,UAAUE,UAAU,CAAC,YAAYC,GAAG,CAACzC,OAAO2D,UAAUjB,GAAG,KAC/D;QACJ,MAAMoB,YAAYD,gCAAAA,aAAcnB,GAAG,CAAC;QACpC,IACE,CAAC9D,sBACC;YACEkF;YACAC,cAAc,EAAEF,gCAAAA,aAAcnB,GAAG,CAAC;YAClCsB,eAAe,EAAEH,gCAAAA,aAAcnB,GAAG,CAAC;QACrC,GACA;YAAEuB,SAAS,CAAC,iBAAiB,EAAExD,QAAQ;QAAC,IAE1C;YACA,OAAOnB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACrE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,mEAAmE;QACnE,MAAMuE,mBAAmB,AACvB,CAAA,MAAM5B,UAAUE,UAAU,CAAC,aAAaC,GAAG,CAAChC,QAAQiC,GAAG,EAAC,EACxDA,GAAG,CAAC;QACN,MAAMyB,iBAAiBlC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAemC,IAAI;QAC1C,MAAMC,UAAShF,sBAAAA,IAAIY,OAAO,CAACoE,MAAM,YAAlBhF,sBAAsB,CAAC,QAAQ,EAAEA,IAAIY,OAAO,CAACqE,IAAI,EAAE;QAClE,MAAMC,qBACJJ,kBAAkBD,mBACd,GAAGG,SAASpF,WAAWE,MAAMqF,WAAW,EAAE;YACxCC,SAASN;YACTG,MAAMJ;YACNQ,YAAY;QACd,IAAI,GACJL;QAEN,iDAAiD;QACjD,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sBAAsB;QACtB,EAAE;QACF,qEAAqE;QACrE,2EAA2E;QAC3E,mEAAmE;QACnE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,qBAAqB;QACrB,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAMM,YAAYlG,cAAcmG,cAAc,CAC5C7C,SACApB,eAAaoB,qBAAAA,QAAQoB,QAAQ,CAAC,EAAE,qBAAnBpB,mBAAqBuB,EAAE,GACpC1C;QAEF,MAAMiE,gBAAgDF,YAClD;YACE;gBACEjE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;gBAClBsB,WAAWlE;gBACXmE,WAAWJ,UAAUI,SAAS;;SAEjC,GACD,EAAE;QAEN,MAAMC,kBAAkBnE,KAAKG,KAAK,CAACC,OAAOe,QAAQiD,QAAQ,IAAI;QAC9D,MAAMC,YAA2C;YAC/C;gBACExE;eACIC,YAAY;gBAAEA;YAAU,IAAI,CAAC;gBACjC6C,MAAMzB,QAAQyB,IAAI;eACdxB,QAAQmD,GAAG,GAAG;gBAAEA,KAAKnD,QAAQmD,GAAG;YAAC,IAAI,CAAC;gBAC1CC,aAAarD,QAAQsD,IAAI;gBACzBzE;gBACAoE;;SAEH;QACD,MAAMM,aAAaN,kBAAkBpE;QACrC,iDAAiD;QACjD,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,oBAAoB;QACpB,EAAE;QACF,0EAA0E;QAC1E,gCAAgC;QAChC,EAAE;QACF,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,uCAAuC;QACvC,MAAM2E,qBAAqB;YAAC;gBAAE7E;gBAAW8E,aAAaF;YAAW;SAAE;QACnE,MAAMG,eAAe,MAAMlD,QAAQC,UAAU,CAAC,aAAakD,KAAK,CAAC,KAAKhD,GAAG;QACzE,MAAMiD,mBAAmBlH,cAAcmH,eAAe,CACpDH,aAAaI,IAAI,CAACC,GAAG,CAAC,CAACC,cAAiB,aAClCA,YAAY/C,IAAI;gBACpBgD,KAAKD,YAAYzC,EAAE;iBAErB,aACMlC,aAAa;YAAE6E,MAAM7E;QAAW,IAAI,CAAC;YACzC8E,eAAeZ;YACfa,YAAY;gBAACzF;aAAU;YACvB0F,OAAOb;;QAGX,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,yCAAyC;QACzC,IAAII,oCAAAA,iBAAkBU,WAAW,EAAE;YACjC,OAAO/G,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOgG,iBAAiBU,WAAW;YAAC;QACpE;QACA,MAAMC,oBACJX,oBAAoBA,iBAAiBY,OAAO,CAACC,IAAI,KAAK,SAClDb,iBAAiBc,UAAU,GAC3B;QACN,MAAMC,gBAAgBJ,oBAAoBX,iBAAkBe,aAAa,GAAG;QAC5E,wEAAwE;QACxE,kCAAkC;QAClC,MAAMC,oBAAoBD,gBACtB7F,KAAKC,GAAG,CAAC,IAAIwE,aAAaoB,iBAC1BpB;QACJ,0EAA0E;QAC1E,2EAA2E;QAC3E,2BAA2B;QAC3B,MAAMsB,uBAAuBtB,aAAaqB;QAC1C,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAE/D,0EAA0E;QAC1E,oEAAoE;QACpE,mEAAmE;QACnE,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,qEAAqE;QACrE,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM9E,gBAAgB,MAAMU,QACzBC,UAAU,CAAC,YACXC,GAAG,CAAC,SACJC,GAAG;QACN,MAAMmE,mBAAmBhF,cAAca,GAAG,CAAC;QAG3C,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,eAAe;QACf,EAAE;QACF,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,qCAAqC;QACrC,EAAE;QACF,wEAAwE;QACxE,qEAAqE;QACrE,MAAMZ,eAAeD,qBAAAA,cAAca,GAAG,CAAC,kBAAlBb,qBAA4B,CAAC;QAClD,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,mEAAmE;QACnE,WAAW;QACX,MAAMiF,cAAcrI,cAAcsI,qBAAqB,CAAC;YACtDC,UAAUlF;YACVmF,WAAWlF,QAAQkF,SAAS;QAC9B;QACA,IAAIH,YAAYN,IAAI,KAAK,aAAa;YACpC,OAAOlH,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOlB,cAAcyI,gCAAgC;YAAC;QAClE;QACA,MAAMC,mBACJ1I,cAAc2I,6BAA6B,CAACtF;QAC9C,IAAIqF,kBAAkB;YACpB,oEAAoE;YACpE,2DAA2D;YAC3D,qEAAqE;YACrE,4BAA4B;YAC5B,OAAO7H,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOwH;YAAiB;QACxD;QACA,MAAME,eAAeP,YAAYN,IAAI,KAAK;QAC1C,MAAMc,aACJR,YAAYN,IAAI,KAAK,YACrB,CAAC1E,YAAYyF,gBAAgB,GACzB9I,cAAc+I,cAAc,CAAC1F,cAAaA,sBAAAA,YAAYuC,MAAM,YAAlBvC,sBAAsB,CAAC,KACjE;QACN,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,+BAA+B;QAC/B,MAAM2F,WAAWH,aACb7I,cAAciJ,eAAe,CAACf,mBAAmBW,WAAWK,GAAG,IAC/D;QACJ,0EAA0E;QAC1E,qEAAqE;QACrE,2DAA2D;QAC3D,MAAMC,eACJ,EAAC7F,gBAAAA,QAAQsD,IAAI,YAAZtD,gBAAgB,gBAAgB,aAC7BtD,cAAcoJ,oBAAoB,CAChChB,kBACA;YACEX,eAAeZ;YACfwC,YACEjH,KAAKC,GAAG,CAAC,GAAGG,QAAOe,uBAAAA,QAAQ+F,WAAW,YAAnB/F,uBAAuB,MAAMpB;QACpD,GACArB,KAAKyI,eAAe,IAEtB;YAAEC,WAAWxJ,cAAcyJ,2BAA2B;YAAEC,SAAS,EAAE;QAAC;QAC1E,IAAIP,aAAaQ,OAAO,KAAK,wBAAwB;YACnD,OAAO9I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;gBACP0I,sBAAsB;gBACtBC,mBAAmB;uBAAI7J,cAAcyJ,2BAA2B;iBAAC;YACnE;QACF;QACA,IAAIN,aAAaQ,OAAO,KAAK,wBAAwB;gBAM/C3J;YALJ,MAAM8J,WAAW9J,cAAc+J,gCAAgC,CAC7DjJ,KAAKyI,eAAe;YAEtB,OAAO1I,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO,CAAC,4BAA4B,GAClClB,0DAAAA,cAAcgK,+BAA+B,CAACF,SAAmB,YAAjE9J,0DACA,eACD,CAAC,CAAC;gBACH4J,sBAAsB;gBACtBC,mBAAmB;uBAAI7J,cAAcyJ,2BAA2B;iBAAC;YACnE;QACF;QACA,qEAAqE;QACrE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAIN,aAAaQ,OAAO,KAAK,oBAAoB;YAC/C,OAAO9I,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOlB,cAAciK,iCAAiC;YAAC;QACnE;QACA,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,qDAAqD;QACrD,MAAMC,kBACJhD,CAAAA,oCAAAA,iBAAkBiD,YAAY,MAAK,OAC/BhB,aAAaO,OAAO,CAACrC,GAAG,CAAC,CAAC+C,SAAY,aAAKA;gBAAQrD,aAAa;kBAChEoC,aAAaO,OAAO;QAE1B,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,EAAE;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,EAAE;QACF,6FAA6F;QAC7F,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,uEAAuE;QACvE,MAAMW,uBAAuBH,gBAAgBI,MAAM,CACjD,CAACC,MAAMH;gBAC6BA;mBAAlChI,KAAKC,GAAG,CAACkI,MAAMnI,KAAKC,GAAG,CAAC,GAAGG,QAAO4H,sBAAAA,OAAOrD,WAAW,YAAlBqD,sBAAsB;WAC1D;QAEF,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAMI,WAAWzK,MAAM0K,0BAA0B,CAC/CjH,4BAAAA,SAAUyB,GAAG,GACb3B,iBAAAA,QAAQsD,IAAI,YAAZtD,iBAAgB,YAChB4E,mBACAA,oBAAoBc,WAAWqB;QAEjC,uEAAuE;QACvE,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAMK,SAAS1K,cAAc2K,kBAAkB,CAAClE,WAAW;YACzD+D;YACAxB;YACA,wEAAwE;YACxE,yEAAyE;YACzE,yCAAyC;YACzCf,eAAeE;QACjB;QAEA,4EAA4E;QAC5E,2EAA2E;QAC3E,aAAa;QACb,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,4DAA4D;QAC5D,EAAE;QACF,uEAAuE;QACvE,0CAA0C;QAC1C,MAAMyC,sBAAsBxI,KAAKyI,KAAK,CAAC3C,oBAAoB/F;QAC3D,MAAM2I,iBAAiB5C,oBAAoB0C,sBAAsBzI;QACjE,MAAM4I,kBAAkBD,mBAAmB,IAAI3I,WAAW;QAC1D,MAAM6I,yBACJF,mBAAmB,IAAIF,sBAAsB1C;QAC/C,MAAM+C,kBAAkB,GAAG3H,QAAQyB,IAAI,GACrC+F,mBAAmB,IAAI,KAAK,CAAC,GAAG,EAAE3I,UAAU,EAC5C,CAACR,KAAK,CAAC,GAAG;QAEZ,0EAA0E;QAC1E,mEAAmE;QACnE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAMuJ,UAAU,MAAMzK,aAAaoD,WAAW;YAC5CkE,MAAM;YACNoD,SAASnJ;YACToJ,OAAO7J,gBAAOiC,6BAAAA,iBAAAA,SAAUyB,GAAG,qBAAbzB,eAAeqB,EAAE,oBAAI;YACnCwG,KAAKzI;YACL0I,aAAa;QACf;QACA,IAAI,YAAYJ,SAAS;YACvB,OAAOrK,IAAIG,MAAM,CAACkK,QAAQK,MAAM,CAACvK,MAAM,EAAEC,IAAI,CAACiK,QAAQK,MAAM,CAACzK,IAAI;QACnE;QACA+B,QAAQqI,QAAQrI,KAAK;QAErB,wEAAwE;QACxE,+BAA+B;QAC/B,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,aAAa;QACb,IAAIgF,mBAAmB;YACrB,MAAM5E,OAAO,MAAM3C,kBAAkB;gBACnCuD;gBACA2H,KAAK1H,QAAQC,UAAU,CAAC,aAAaC,GAAG,CAAC6D;gBACzC4D,SAASlL,iBAAiB2K,QAAQrI,KAAK,CAAC6I,SAAS;gBACjDC,OAAO,CAAC,eAAe,EAAE9D,mBAAmB;YAC9C;YACA,IAAI,CAAC5E,KAAK2I,EAAE,EAAE;gBACZ,uEAAuE;gBACvE,sEAAsE;gBACtE,kEAAkE;gBAClE,wEAAwE;gBACxE,mEAAmE;gBACnE,oEAAoE;gBACpE,yCAAyC;gBACzC,MAAM/I,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BC,OACEyB,eAAcuE,oCAAAA,iBAAkB2E,QAAQ,CAACrE,IAAI,IACzCxH,cAAc8L,2BAA2B,GACzC9L,cAAc+L,6BAA6B;gBACnD;YACF;YACA,IAAI9I,KAAKwI,OAAO,EAAE;gBAChB3I,eAAeG;gBACfF,kBAAkBE,KAAKwI,OAAO;YAChC;QACF;QAEA,iEAAiE;QACjE,MAAMO,WAAWlI,QAAQC,UAAU,CAAC,UAAUC,GAAG;QACjD,MAAMiI,aAAanI,QAAQC,UAAU,CAAC,YAAYC,GAAG,CAAC;QACtD,MAAMH,UAAUqI,cAAc,CAAC,OAAOC;gBAEdC,cA4BY3I;YA7BlC,MAAM2I,UAAU,MAAMD,YAAYlI,GAAG,CAACgI;YACtC,MAAMI,SAAS7J,QAAO4J,eAAAA,QAAQnI,GAAG,CAAC,mBAAZmI,eAAuB;YAC7CD,YAAYG,GAAG,CAACL,YAAY;gBAAEM,MAAMF,SAAS;YAAE,GAAG;gBAAEG,OAAO;YAAK;YAChE,yDAAyD;YACzDL,YAAYG,GAAG,CAACN,UAAUhM,cAAcyM,mBAAmB,CAACT,SAASnH,EAAE,EAAE;gBACvEwH;gBACArL,QAAQ;gBACR0L,SAAS;gBACTjG;gBACAiE;gBACA,qEAAqE;gBACrE,kEAAkE;gBAClE,uEAAuE;gBACvE,mEAAmE;gBACnE,EAAE;gBACF,uEAAuE;gBACvE,oEAAoE;gBACpE,qEAAqE;gBACrE,mEAAmE;gBACnE,8CAA8C;gBAC9CiC,SAAS3M,cAAc4M,4BAA4B,CACjDvE,aACAW;gBAEF6D,eAAepK,SAAS;gBACxBqK,UAAU;oBACR;wBACEC,MAAMC,KAAKC,GAAG;wBACdC,OAAO;wBACPC,QAAQ,CAAC,iBAAiB,GAAE1J,iBAAAA,QAAQhB,KAAK,YAAbgB,iBAAiBA,QAAQW,GAAG,EAAE;oBAC5D;iBACD;gBACDgJ,aAAaJ,KAAKC,GAAG;gBACrBI,WAAWpN,cAAc4D,SAAS,CAACyJ,UAAU,CAACC,eAAe;YAC/D;QACF;QAEA,0EAA0E;QAC1E,sEAAsE;QACtE,IAAIC,iBAAiB;QACrB,IAAIxE,WAAW,KAAKH,YAAY;gBAE3B;YADH2E,kBACG,QAAA,MAAMnN,uBAAuB;gBAC5ByD;gBACA2J,QAAQ5E,WAAWK,GAAG;gBACtBwE,UAAU7E,WAAW8C,KAAK,IAAI,CAAC,KAAK,EAAE9C,WAAWK,GAAG,CAAC,EAAE,CAAC;eACpDrG,MAAM6I,SAAS,GACf;gBAAElK,SAAS;oBAAE,mBAAmB,GAAGqB,MAAM6I,SAAS,CAAC,SAAS,CAAC;gBAAC;YAAE,IAChE,CAAC,eANN,QAOM;YACT,IAAI,CAAC8B,gBAAgB;gBACnB,qEAAqE;gBACrE,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAMxB,SAAS2B,MAAM,GAAGC,KAAK,CAAC,IAAM/L;gBACpC,MAAMmB;gBACN,MAAMH,MAAMK,OAAO;gBACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAA+B;YACtE;QACF;QACA,MAAM2M,SAAS,IAAIC,gBAAgB;YACjCC,MAAM;WAEH3N,wCAAwC,YACvCwI,eAAe;YAAE,0BAA0B;QAAO,IAAI,CAAC,GACvD4E,iBAAiB;YAAE,+BAA+BA;QAAe,IAAI,CAAC;YAC1E,2BAA2BjM,OAAOwJ;YAClC,uCAAuC;YACvC,0CAA0CxJ,OAAOyJ;YACjD,iDAAiDC;WAO9CjL,cAAcgO,uBAAuB,CAAC;YACvC3I,WAAW9D,OAAO8D;YAClBmF;YACAyD,UAAUrF,eAAe,aAAa;YACtC,+DAA+D;YAC/D,kEAAkE;YAClE,2CAA2C;YAC3CsF,oBAAoBhG;YACpBiG,oBAAoBnO,cAAcmO,kBAAkB,CAACjE;QACvD,IACIzH,QAAQ;YAAE2L,gBAAgB3L;QAAM,IAAI,CAAC;YACzC4L,aAAa,GAAGvI,mBAAmB,WAAW,CAAC;YAC/CwI,YAAY,GAAGxI,mBAAmB,eAAe,CAAC;YAClD,kBAAkB;YAClB,oBAAoB9D;YACpB,qBAAqBgK,SAASnH,EAAE;YAChC,uBAAuB5C;WACnBC,YAAY;YAAE,uBAAuBA;QAAU,IAAI,CAAC;YACxD,sBAAsBX,OAAOiJ;WAKzB3C,oBACA;YAAE,wBAAwBA;QAAkB,IAC5C,CAAC,GACD9E,kBAAkB;YAAE,6BAA6BA;QAAgB,IAAI,CAAC,GAGtE6F,eACA;YACE,2BAA2BrH,OACzBvB,cAAcuO,2BAA2B,CAAC;gBACxC/D;gBACA0D,oBAAoBhG;gBACpBiG,oBACEnO,cAAcmO,kBAAkB,CAACjE;YACrC;YAEF,mCAAmC3I,OACjCvB,cAAcmO,kBAAkB,CAACjE;QAErC,IACA,CAAC;QAEP,2EAA2E;QAC3E,oEAAoE;QACpE,yEAAyE;QACzE,oEAAoE;QACpE,iBAAiB;QACjB,IAAIA,gBAAgBtI,MAAM,GAAG,GAAG;YAC9B5B,cAAcwO,qCAAqC,CACjDX,QACA1E,aAAaK,SAAS;YAExBxJ,cAAcyO,4BAA4B,CAACZ,QAAQ3D;QACrD;QACA,MAAMwE,WAAW,MAAMC,MACrB,+CACA;YACE5N,QAAQ;YACRS,SAAS;gBACPoN,eAAe,CAAC,OAAO,EAAEzN,QAAQC,GAAG,CAACC,iBAAiB,EAAE;gBACxD,gBAAgB;eAKZwB,MAAM6I,SAAS,GAAG;gBAAE,mBAAmB7I,MAAM6I,SAAS;YAAC,IAAI,CAAC;YAElE5K,MAAM+M,OAAOgB,QAAQ;QACvB;QAEF,MAAMC,UAAW,MAAMJ,SAASzN,IAAI;QAKpC,IAAI,CAACyN,SAAS9C,EAAE,IAAI,CAACkD,QAAQC,GAAG,EAAE;YAChCC,QAAQ9N,KAAK,CAAC,4BAA4B4N,QAAQ5N,KAAK;YACvD,MAAM8K,SAAS2B,MAAM,GAAGC,KAAK,CAAC,IAAM/L;YACpC,wEAAwE;YACxE,kEAAkE;YAClE,6DAA6D;YAC7D,MAAMmB;YACN,MAAMH,MAAMK,OAAO;YACnB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+B;QACtE;QACA,MAAM8K,SAASM,GAAG,CAChB;YAAE2C,mBAAmBH,QAAQjK,EAAE;YAAEqK,gBAAgBJ,QAAQC,GAAG;QAAC,GAC7D;YAAEvC,OAAO;QAAK;QAEhB,yEAAyE;QACzE,uEAAuE;QACvE,MAAM2C,UAAU;YACdC,SAASpD,SAASnH,EAAE;YACpBkK,KAAKD,QAAQC,GAAG;WACZ3I,cAAcxE,MAAM,GAAG,IAAI;YAAEwE;QAAc,IAAI,CAAC;QAEtD,MAAMvD,MAAMwM,MAAM,CAAC,KAAKF;QACxB,OAAOtO,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACkO;IAC9B,EAAE,OAAOjO,OAAO;QACd8N,QAAQ9N,KAAK,CAACA;QACd,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM8B;QACN,OAAMH,yBAAAA,MAAOK,OAAO;QACpB,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;AACF,EAAC"}

package/src/lib/server/gift-cards.js

@@ -16,6 +16,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * limitations under the License.
  */ import * as Aglyn from "@aglyn/aglyn/server";
 import { randomBytes } from "crypto";
+import { giftCardSearchTokens } from "../model/gift-card-search.js";
 import { firebaseAdmin, getOrgForHost, hostSendingIdentity, meterHostEmail, renderHostEmailWithTokens } from "@aglyn/tenant-data-admin";
 import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
 /** A merchant may not mint more than this in one card. */ const MAX_ISSUE_CENTS = 100000;
@@ -164,6 +165,8 @@ import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
         }, note ? {
             note
         } : {}, {
+            // What the console's Gift cards search asks (AGL-3321).
+            searchTokens: giftCardSearchTokens(code, recipientEmail || null),
             createdAtMs: Date.now()
         }));
         let emailed = false;
@@ -186,7 +189,10 @@ import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
                 fromName: Aglyn.resolveBrandingProfile(owner == null ? void 0 : owner.org).fromName,
                 sendingIdentity: await hostSendingIdentity(hostId),
                 audience: 'tenant',
-                context: 'gift card'
+                context: 'gift card',
+                // Owed to the recipient by their own order: the phishing
+                // screen's soft rules never hold it (AGL-3356).
+                owedFor: 'order'
             })).then(()=>true).catch(()=>false);
             if (sent) {
                 // Cost meter (AGL-1438). Transactional: the card has already been