@aglyn/plugins-commerce 1.0.0-beta.244 → 1.0.0-beta.247

package/src/lib/server/review-requests.js

@@ -0,0 +1,346 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import { resolveHostToken } from "@aglyn/aglyn/app-utils/host-tokens";
+import { firebaseAdmin, getOrgForHost, hostSendingIdentity, meterHostEmail } from "@aglyn/tenant-data-admin";
+import { loadHostEmailWithTokens, renderLoadedHostEmailWithTokens } from "@aglyn/tenant-data-admin/server/host-email-tokens";
+import { isDeferrableSendResult, sendEmail, sendFailureReason } from "@aglyn/shared-util-email";
+import * as CommerceModel from "../model/index.js";
+import { stageReviewTokens } from "./review-tokens.js";
+/**
+ * The review-request email (AGL-3736).
+ *
+ * ## When
+ *
+ * N days (3–30, default 7, per store) after an order is fulfilled. Every door
+ * that ships or delivers an order already raises `order.fulfilled` or
+ * `order.delivered` (AGL-3611), and an order with nothing to ship raises
+ * `order.paid`, so commerce subscribes to its own events and SCHEDULES the
+ * request by stamping the order: `reviewRequestDueAtMs` at the earliest
+ * possible moment (fulfilment + 3 days) and `reviewRequest.state:
+ * 'scheduled'`. The hourly sweep reads the store's CURRENT delay when the
+ * stamp comes due and pushes it out if the store asked for longer, so a
+ * setting changed after fulfilment still applies.
+ *
+ * ## Once
+ *
+ * `reviewRequestDueAtMs` exists only while a request is owed — it is the
+ * field the collection-group sweep queries, so a sent or skipped order costs
+ * the sweep nothing. Scheduling refuses an order that already has a
+ * `reviewRequest`, and the send CLAIMS the order in a transaction that deletes
+ * the due field before anything is mailed: two overlapping sweeps cannot both
+ * send, and a redelivered event cannot schedule twice.
+ *
+ * ## What it respects
+ *
+ * Sent through the marketing seam (no stream), so the suppression lists, the
+ * site's unsubscribe link and header, and the per-person frequency ceiling
+ * all apply; a frequency or hourly refusal is retried an hour later. A line
+ * refunded by name, and a refunded or cancelled order, are never asked about.
+ * Register sales and marketplace orders are never asked. The store turns it
+ * off on its review settings, and words it under Emails (`review-request`).
+ */ export const REVIEW_REQUEST_EMAIL_KEY = 'review-request';
+/** How far a deferred send is pushed. */ const RETRY_AFTER_MS = 60 * 60 * 1000;
+function ordersRef(firestore, hostId) {
+    return firestore.collection('hosts').doc(hostId).collection('orders');
+}
+/**
+ * Schedules one order's request, once. Returns whether this call scheduled it.
+ */ export async function scheduleReviewRequest(input, firestore = firebaseAdmin.app().firestore()) {
+    if (!input.hostId || !input.orderId) return false;
+    const orderRef = ordersRef(firestore, input.hostId).doc(input.orderId);
+    return firestore.runTransaction(async (transaction)=>{
+        var _snapshot_data, _order_lineItems;
+        const snapshot = await transaction.get(orderRef);
+        if (!snapshot.exists) return false;
+        const data = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
+        if (data['reviewRequest'] || data['reviewRequestDueAtMs']) return false;
+        const order = CommerceModel.liftLegacyOrder(data);
+        if (!CommerceModel.orderTakesReviewRequest(order)) return false;
+        // `order.paid` schedules only an order with nothing to ship; a shipped
+        // order waits for its shipment.
+        if (input.onlyIfNothingShips && ((_order_lineItems = order.lineItems) != null ? _order_lineItems : []).some((line)=>CommerceModel.lineRequiresShipping(line))) {
+            return false;
+        }
+        const request = {
+            state: 'scheduled',
+            fulfilledAtMs: input.fulfilledAtMs
+        };
+        transaction.update(orderRef, {
+            reviewRequest: request,
+            reviewRequestDueAtMs: CommerceModel.reviewRequestEarliestDueAtMs(input.fulfilledAtMs)
+        });
+        return true;
+    });
+}
+/** The `order.fulfilled` / `order.delivered` / `order.paid` subscriber. */ export async function scheduleReviewRequestFromEvent(envelope, firestore) {
+    var _envelope_payload, _ref;
+    const order = ((_envelope_payload = envelope.payload) != null ? _envelope_payload : {}).order;
+    const orderId = String((_ref = order == null ? void 0 : order.id) != null ? _ref : '');
+    if (!orderId) return;
+    await scheduleReviewRequest({
+        hostId: envelope.hostId,
+        orderId,
+        fulfilledAtMs: Number(envelope.occurredAtMs) || Date.now(),
+        onlyIfNothingShips: envelope.event === 'order.paid'
+    }, firestore);
+}
+/** The email's words. Pure. */ export function composeReviewRequest(input) {
+    var _ref, _ref1;
+    const store = input.businessName || 'the store';
+    const list = input.lines.map((line)=>`${line.name}: ${line.url}`).join('\n');
+    const first = input.lines[0];
+    return {
+        subject: input.lines.length === 1 && first ? `How is your ${first.name}?` : `How was your order from ${store}?`,
+        text: `Thanks again for your order ${input.orderNumber} from ${store}. ` + 'Would you tell other shoppers what you think? Each link opens the ' + `product page with a review form, and works once, for 60 days.\n\n${list}`,
+        tokens: {
+            'order.number': input.orderNumber,
+            'review.products': list,
+            'review.url': (_ref = first == null ? void 0 : first.url) != null ? _ref : '',
+            'review.productName': (_ref1 = first == null ? void 0 : first.name) != null ? _ref1 : ''
+        }
+    };
+}
+/**
+ * One pass over the requests that have come due. Bounded (100) and
+ * idempotent; registered on the hourly plugin-job beat in `server.ts`.
+ */ export async function scanReviewRequests(gate, options = {}) {
+    var _options_firestore, _options_nowMs;
+    const firestore = (_options_firestore = options.firestore) != null ? _options_firestore : firebaseAdmin.app().firestore();
+    const now = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    const due = await firestore.collectionGroup('orders').where('reviewRequestDueAtMs', '<=', now).orderBy('reviewRequestDueAtMs', 'asc').limit(100).get();
+    const result = {
+        scanned: due.size,
+        sent: 0,
+        skipped: 0,
+        deferred: 0,
+        skippedLocked: 0
+    };
+    const hosts = new Map();
+    const identityByHost = new Map();
+    for (const docSnapshot of due.docs){
+        var _hosts_get, _docSnapshot_data, _data_reviewRequest, _order_customerEmail, _ref;
+        var _docSnapshot_ref_parent_parent;
+        const hostId = (_docSnapshot_ref_parent_parent = docSnapshot.ref.parent.parent) == null ? void 0 : _docSnapshot_ref_parent_parent.id;
+        if (!hostId) continue;
+        // Lockdown first: everything below writes for this host. Skipped, not
+        // dropped — the due stamp stays, so the first beat after the lift sends.
+        if (await gate.isLocked(hostId)) {
+            result.skippedLocked += 1;
+            continue;
+        }
+        const host = (_hosts_get = hosts.get(hostId)) != null ? _hosts_get : await readHostContext(firestore, hostId);
+        hosts.set(hostId, host);
+        const data = (_docSnapshot_data = docSnapshot.data()) != null ? _docSnapshot_data : {};
+        const order = CommerceModel.liftLegacyOrder(data);
+        const request = (_data_reviewRequest = data['reviewRequest']) != null ? _data_reviewRequest : {};
+        const fulfilledAtMs = Number(request.fulfilledAtMs) || Number(data['reviewRequestDueAtMs']) || now;
+        const finish = async (state, reason)=>{
+            await docSnapshot.ref.update({
+                reviewRequestDueAtMs: firebaseAdmin.firestore.FieldValue.delete(),
+                reviewRequest: _extends({}, request, {
+                    fulfilledAtMs,
+                    state,
+                    reason,
+                    atMs: now
+                })
+            }).catch(()=>undefined);
+            result.skipped += 1;
+        };
+        if (!host.entitled) {
+            await finish('skipped', 'not_entitled');
+            continue;
+        }
+        if (!host.settings.requestEmail) {
+            await finish('skipped', 'disabled');
+            continue;
+        }
+        const dueAtMs = CommerceModel.reviewRequestDueAtMs(fulfilledAtMs, host.settings.requestDelayDays);
+        if (dueAtMs > now) {
+            // The store asks for more days than the earliest stamp: wait.
+            await docSnapshot.ref.update({
+                reviewRequestDueAtMs: dueAtMs
+            }).catch(()=>undefined);
+            continue;
+        }
+        if (!CommerceModel.orderTakesReviewRequest(order)) {
+            await finish('skipped', 'not_applicable');
+            continue;
+        }
+        const email = String((_order_customerEmail = order.customerEmail) != null ? _order_customerEmail : '').trim().toLowerCase();
+        if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+            await finish('skipped', 'no_email');
+            continue;
+        }
+        if (!host.hasProductPage || !host.origin) {
+            await finish('skipped', 'no_product_page');
+            continue;
+        }
+        const products = await reviewableProducts(firestore, hostId, order);
+        if (!products.length) {
+            await finish('skipped', 'nothing_to_review');
+            continue;
+        }
+        // CLAIM: whoever deletes the due stamp sends.
+        const claimed = await firestore.runTransaction(async (transaction)=>{
+            const fresh = await transaction.get(docSnapshot.ref);
+            if (!fresh.exists || !fresh.get('reviewRequestDueAtMs')) return false;
+            transaction.update(docSnapshot.ref, {
+                reviewRequestDueAtMs: firebaseAdmin.firestore.FieldValue.delete(),
+                reviewRequest: _extends({}, request, {
+                    fulfilledAtMs,
+                    state: 'sending',
+                    atMs: now
+                })
+            });
+            return true;
+        }).catch(()=>false);
+        if (!claimed) continue;
+        const batch = firestore.batch();
+        const tokens = stageReviewTokens(firestore, batch, {
+            hostId,
+            orderId: docSnapshot.id,
+            email,
+            productIds: products.map((product)=>product.id),
+            nowMs: now
+        });
+        await batch.commit();
+        const lines = products.map((product)=>({
+                productId: product.id,
+                name: product.name,
+                url: `${host.origin}/products/${encodeURIComponent(product.slug)}?review=${tokens[product.id]}`
+            }));
+        const message = composeReviewRequest({
+            businessName: host.businessName,
+            orderNumber: CommerceModel.formatOrderNumber(order, docSnapshot.id),
+            lines
+        });
+        if (host.template === undefined) {
+            host.template = await loadHostEmailWithTokens(firestore, hostId, REVIEW_REQUEST_EMAIL_KEY).catch(()=>null);
+        }
+        const designed = host.template ? renderLoadedHostEmailWithTokens(host.template, message.tokens) : null;
+        const sent = await sendEmail(_extends({
+            to: email,
+            subject: (_ref = designed == null ? void 0 : designed.subject) != null ? _ref : message.subject,
+            text: (designed == null ? void 0 : designed.text) || message.text
+        }, (designed == null ? void 0 : designed.html) ? {
+            html: designed.html
+        } : {}, {
+            fromName: host.fromName,
+            sendingIdentity: await hostSendingIdentity(hostId, identityByHost),
+            audience: 'tenant',
+            context: 'review request',
+            priority: 'bulk',
+            // Through the marketing seam with NO stream: the suppression lists,
+            // the unsubscribe link and header and the frequency ceiling apply, and
+            // leaving "Promotions and offers" does not stop it.
+            marketing: {
+                hostId,
+                siteBase: host.origin,
+                consentHostIds: host.consentGroup.hostIds,
+                consentAwaitsConfirmation: host.consentGroup.awaitsConfirmation
+            }
+        })).catch((error)=>{
+            console.error('[review-requests] send failed', hostId, docSnapshot.id, error);
+            return null;
+        });
+        if (!sent || isDeferrableSendResult(sent)) {
+            // Not this hour: put the stamp back. The minted links are unspent and
+            // expire on their own.
+            await docSnapshot.ref.update({
+                reviewRequestDueAtMs: now + RETRY_AFTER_MS,
+                reviewRequest: _extends({}, request, {
+                    fulfilledAtMs,
+                    state: 'scheduled'
+                })
+            }).catch(()=>undefined);
+            result.deferred += 1;
+            continue;
+        }
+        if (sent.sent) {
+            await meterHostEmail(hostId);
+            await docSnapshot.ref.update({
+                reviewRequest: _extends({}, request, {
+                    fulfilledAtMs,
+                    state: 'sent',
+                    atMs: now,
+                    productIds: products.map((product)=>product.id)
+                }),
+                timeline: CommerceModel.appendOrderEvent(order, 'buyer-notified', 'Review request sent by email', now)
+            }).catch(()=>undefined);
+            result.sent += 1;
+        } else {
+            var _sendFailureReason;
+            await docSnapshot.ref.update({
+                reviewRequest: _extends({}, request, {
+                    fulfilledAtMs,
+                    state: 'skipped',
+                    reason: (_sendFailureReason = sendFailureReason(sent)) != null ? _sendFailureReason : 'refused',
+                    atMs: now
+                })
+            }).catch(()=>undefined);
+            result.skipped += 1;
+        }
+    }
+    return result;
+}
+async function readHostContext(firestore, hostId) {
+    var _ref, _ref1, _ref2, _Aglyn_hostPublicOrigin, _resolveHostToken;
+    var _hostSnapshot_data, _settingsSnapshot_data;
+    const hostRef = firestore.collection('hosts').doc(hostId);
+    const [org, hostSnapshot, settingsSnapshot] = await Promise.all([
+        getOrgForHost(hostId).catch(()=>null),
+        hostRef.get().catch(()=>null),
+        hostRef.collection('settings').doc('store').get().catch(()=>null)
+    ]);
+    const host = (_ref = hostSnapshot == null ? void 0 : (_hostSnapshot_data = hostSnapshot.data) == null ? void 0 : _hostSnapshot_data.call(hostSnapshot)) != null ? _ref : {};
+    const settings = (_ref1 = settingsSnapshot == null ? void 0 : (_settingsSnapshot_data = settingsSnapshot.data) == null ? void 0 : _settingsSnapshot_data.call(settingsSnapshot)) != null ? _ref1 : {};
+    const orgDoc = (_ref2 = org == null ? void 0 : org.org) != null ? _ref2 : null;
+    return {
+        entitled: Aglyn.checkEntitlement(org == null ? void 0 : org.org, 'productReviews'),
+        settings: CommerceModel.reviewSettingsFrom(settings),
+        hasProductPage: Boolean(settings['pdpScreenId']),
+        origin: (_Aglyn_hostPublicOrigin = Aglyn.hostPublicOrigin({
+            cname: typeof host['cname'] === 'string' ? host['cname'] : null,
+            subdomain: typeof host['subdomain'] === 'string' ? host['subdomain'] : null
+        })) != null ? _Aglyn_hostPublicOrigin : '',
+        businessName: String((_resolveHostToken = resolveHostToken('businessName', host)) != null ? _resolveHostToken : ''),
+        fromName: Aglyn.resolveBrandingProfile(org == null ? void 0 : org.org).fromName,
+        consentGroup: Aglyn.consentGroupForHost(orgDoc, hostId),
+        template: undefined
+    };
+}
+/** The order's reviewable products that are still on sale, with their slugs. */ async function reviewableProducts(firestore, hostId, order) {
+    const ids = CommerceModel.reviewableProductIds(order).slice(0, 10);
+    if (!ids.length) return [];
+    const productsRef = firestore.collection('hosts').doc(hostId).collection('products');
+    const snapshots = await firestore.getAll(...ids.map((id)=>productsRef.doc(id)));
+    const products = [];
+    for (const snapshot of snapshots){
+        var _data_name;
+        const data = snapshot.exists ? snapshot.data() : null;
+        if (!data || data['deletedAt'] || data['status'] !== 'active' || !data['slug']) continue;
+        products.push({
+            id: snapshot.id,
+            name: String((_data_name = data['name']) != null ? _data_name : 'Your item'),
+            slug: String(data['slug'])
+        });
+    }
+    return products;
+}
+
+//# sourceMappingURL=review-requests.js.map

package/src/lib/server/review-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/review-requests.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport type { PluginJobHostGate } from '@aglyn/aglyn/server'\nimport type { PluginDomainEventEnvelope } from '@aglyn/aglyn/plugin-manager/plugin-domain-events'\nimport {\n  resolveHostToken,\n  type HostTokenSource,\n} from '@aglyn/aglyn/app-utils/host-tokens'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  hostSendingIdentity,\n  meterHostEmail,\n} from '@aglyn/tenant-data-admin'\nimport {\n  loadHostEmailWithTokens,\n  renderLoadedHostEmailWithTokens,\n  type LoadedHostEmailWithTokens,\n} from '@aglyn/tenant-data-admin/server/host-email-tokens'\nimport {\n  isDeferrableSendResult,\n  sendEmail,\n  sendFailureReason,\n} from '@aglyn/shared-util-email'\nimport * as CommerceModel from '../model'\nimport { stageReviewTokens } from './review-tokens'\n\n/**\n * The review-request email (AGL-3736).\n *\n * ## When\n *\n * N days (3–30, default 7, per store) after an order is fulfilled. Every door\n * that ships or delivers an order already raises `order.fulfilled` or\n * `order.delivered` (AGL-3611), and an order with nothing to ship raises\n * `order.paid`, so commerce subscribes to its own events and SCHEDULES the\n * request by stamping the order: `reviewRequestDueAtMs` at the earliest\n * possible moment (fulfilment + 3 days) and `reviewRequest.state:\n * 'scheduled'`. The hourly sweep reads the store's CURRENT delay when the\n * stamp comes due and pushes it out if the store asked for longer, so a\n * setting changed after fulfilment still applies.\n *\n * ## Once\n *\n * `reviewRequestDueAtMs` exists only while a request is owed — it is the\n * field the collection-group sweep queries, so a sent or skipped order costs\n * the sweep nothing. Scheduling refuses an order that already has a\n * `reviewRequest`, and the send CLAIMS the order in a transaction that deletes\n * the due field before anything is mailed: two overlapping sweeps cannot both\n * send, and a redelivered event cannot schedule twice.\n *\n * ## What it respects\n *\n * Sent through the marketing seam (no stream), so the suppression lists, the\n * site's unsubscribe link and header, and the per-person frequency ceiling\n * all apply; a frequency or hourly refusal is retried an hour later. A line\n * refunded by name, and a refunded or cancelled order, are never asked about.\n * Register sales and marketplace orders are never asked. The store turns it\n * off on its review settings, and words it under Emails (`review-request`).\n */\n\nexport const REVIEW_REQUEST_EMAIL_KEY = 'review-request'\n\n/** How far a deferred send is pushed. */\nconst RETRY_AFTER_MS = 60 * 60 * 1000\n\n/** What a stamped order carries. */\nexport interface OrderReviewRequest {\n  state: 'scheduled' | 'sending' | 'sent' | 'skipped'\n  fulfilledAtMs: number\n  atMs?: number\n  reason?: string\n  productIds?: string[]\n}\n\nfunction ordersRef(firestore: FirebaseFirestore.Firestore, hostId: string) {\n  return firestore.collection('hosts').doc(hostId).collection('orders')\n}\n\n/**\n * Schedules one order's request, once. Returns whether this call scheduled it.\n */\nexport async function scheduleReviewRequest(\n  input: { hostId: string; orderId: string; fulfilledAtMs: number; onlyIfNothingShips?: boolean },\n  firestore: FirebaseFirestore.Firestore = firebaseAdmin.app().firestore(),\n): Promise<boolean> {\n  if (!input.hostId || !input.orderId) return false\n  const orderRef = ordersRef(firestore, input.hostId).doc(input.orderId)\n  return firestore.runTransaction(async (transaction) => {\n    const snapshot = await transaction.get(orderRef)\n    if (!snapshot.exists) return false\n    const data = snapshot.data() ?? {}\n    if (data['reviewRequest'] || data['reviewRequestDueAtMs']) return false\n    const order = CommerceModel.liftLegacyOrder(data as never)\n    if (!CommerceModel.orderTakesReviewRequest(order)) return false\n    // `order.paid` schedules only an order with nothing to ship; a shipped\n    // order waits for its shipment.\n    if (\n      input.onlyIfNothingShips &&\n      (order.lineItems ?? []).some((line) => CommerceModel.lineRequiresShipping(line))\n    ) {\n      return false\n    }\n    const request: OrderReviewRequest = {\n      state: 'scheduled',\n      fulfilledAtMs: input.fulfilledAtMs,\n    }\n    transaction.update(orderRef, {\n      reviewRequest: request,\n      reviewRequestDueAtMs: CommerceModel.reviewRequestEarliestDueAtMs(input.fulfilledAtMs),\n    })\n    return true\n  })\n}\n\n/** The `order.fulfilled` / `order.delivered` / `order.paid` subscriber. */\nexport async function scheduleReviewRequestFromEvent(\n  envelope: Pick<PluginDomainEventEnvelope, 'event' | 'hostId' | 'occurredAtMs' | 'payload'>,\n  firestore?: FirebaseFirestore.Firestore,\n): Promise<void> {\n  const order = ((envelope.payload ?? {}) as { order?: { id?: string } }).order\n  const orderId = String(order?.id ?? '')\n  if (!orderId) return\n  await scheduleReviewRequest(\n    {\n      hostId: envelope.hostId,\n      orderId,\n      fulfilledAtMs: Number(envelope.occurredAtMs) || Date.now(),\n      onlyIfNothingShips: envelope.event === 'order.paid',\n    },\n    firestore,\n  )\n}\n\n/** One reviewable product as the email lists it. */\nexport interface ReviewRequestLine {\n  productId: string\n  name: string\n  url: string\n}\n\n/** The email's words. Pure. */\nexport function composeReviewRequest(input: {\n  businessName: string\n  orderNumber: string\n  lines: ReviewRequestLine[]\n}): { subject: string; text: string; tokens: Record<string, string> } {\n  const store = input.businessName || 'the store'\n  const list = input.lines.map((line) => `${line.name}: ${line.url}`).join('\\n')\n  const first = input.lines[0]\n  return {\n    subject:\n      input.lines.length === 1 && first\n        ? `How is your ${first.name}?`\n        : `How was your order from ${store}?`,\n    text:\n      `Thanks again for your order ${input.orderNumber} from ${store}. ` +\n      'Would you tell other shoppers what you think? Each link opens the ' +\n      `product page with a review form, and works once, for 60 days.\\n\\n${list}`,\n    tokens: {\n      'order.number': input.orderNumber,\n      'review.products': list,\n      'review.url': first?.url ?? '',\n      'review.productName': first?.name ?? '',\n    },\n  }\n}\n\nexport interface ReviewRequestScanResult {\n  scanned: number\n  sent: number\n  skipped: number\n  deferred: number\n  skippedLocked: number\n}\n\ninterface HostContext {\n  entitled: boolean\n  settings: CommerceModel.ReviewSettings\n  hasProductPage: boolean\n  origin: string\n  businessName: string\n  fromName?: string\n  consentGroup: Aglyn.ConsentGroup\n  template: LoadedHostEmailWithTokens | null | undefined\n}\n\n/**\n * One pass over the requests that have come due. Bounded (100) and\n * idempotent; registered on the hourly plugin-job beat in `server.ts`.\n */\nexport async function scanReviewRequests(\n  gate: PluginJobHostGate,\n  options: { firestore?: FirebaseFirestore.Firestore; nowMs?: number } = {},\n): Promise<ReviewRequestScanResult> {\n  const firestore = options.firestore ?? firebaseAdmin.app().firestore()\n  const now = options.nowMs ?? Date.now()\n  const due = await firestore\n    .collectionGroup('orders')\n    .where('reviewRequestDueAtMs', '<=', now)\n    .orderBy('reviewRequestDueAtMs', 'asc')\n    .limit(100)\n    .get()\n  const result: ReviewRequestScanResult = {\n    scanned: due.size,\n    sent: 0,\n    skipped: 0,\n    deferred: 0,\n    skippedLocked: 0,\n  }\n  const hosts = new Map<string, HostContext>()\n  const identityByHost = new Map<string, Awaited<ReturnType<typeof hostSendingIdentity>>>()\n\n  for (const docSnapshot of due.docs) {\n    const hostId = docSnapshot.ref.parent.parent?.id\n    if (!hostId) continue\n    // Lockdown first: everything below writes for this host. Skipped, not\n    // dropped — the due stamp stays, so the first beat after the lift sends.\n    if (await gate.isLocked(hostId)) {\n      result.skippedLocked += 1\n      continue\n    }\n    const host = hosts.get(hostId) ?? (await readHostContext(firestore, hostId))\n    hosts.set(hostId, host)\n    const data = docSnapshot.data() ?? {}\n    const order = CommerceModel.liftLegacyOrder(data as never)\n    const request = (data['reviewRequest'] ?? {}) as Partial<OrderReviewRequest>\n    const fulfilledAtMs = Number(request.fulfilledAtMs) || Number(data['reviewRequestDueAtMs']) || now\n\n    const finish = async (state: 'skipped', reason: string) => {\n      await docSnapshot.ref\n        .update({\n          reviewRequestDueAtMs: firebaseAdmin.firestore.FieldValue.delete(),\n          reviewRequest: { ...request, fulfilledAtMs, state, reason, atMs: now },\n        })\n        .catch(() => undefined)\n      result.skipped += 1\n    }\n\n    if (!host.entitled) {\n      await finish('skipped', 'not_entitled')\n      continue\n    }\n    if (!host.settings.requestEmail) {\n      await finish('skipped', 'disabled')\n      continue\n    }\n    const dueAtMs = CommerceModel.reviewRequestDueAtMs(fulfilledAtMs, host.settings.requestDelayDays)\n    if (dueAtMs > now) {\n      // The store asks for more days than the earliest stamp: wait.\n      await docSnapshot.ref.update({ reviewRequestDueAtMs: dueAtMs }).catch(() => undefined)\n      continue\n    }\n    if (!CommerceModel.orderTakesReviewRequest(order)) {\n      await finish('skipped', 'not_applicable')\n      continue\n    }\n    const email = String(order.customerEmail ?? '').trim().toLowerCase()\n    if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) {\n      await finish('skipped', 'no_email')\n      continue\n    }\n    if (!host.hasProductPage || !host.origin) {\n      await finish('skipped', 'no_product_page')\n      continue\n    }\n    const products = await reviewableProducts(firestore, hostId, order)\n    if (!products.length) {\n      await finish('skipped', 'nothing_to_review')\n      continue\n    }\n\n    // CLAIM: whoever deletes the due stamp sends.\n    const claimed = await firestore\n      .runTransaction(async (transaction) => {\n        const fresh = await transaction.get(docSnapshot.ref)\n        if (!fresh.exists || !fresh.get('reviewRequestDueAtMs')) return false\n        transaction.update(docSnapshot.ref, {\n          reviewRequestDueAtMs: firebaseAdmin.firestore.FieldValue.delete(),\n          reviewRequest: { ...request, fulfilledAtMs, state: 'sending', atMs: now },\n        })\n        return true\n      })\n      .catch(() => false)\n    if (!claimed) continue\n\n    const batch = firestore.batch()\n    const tokens = stageReviewTokens(firestore, batch, {\n      hostId,\n      orderId: docSnapshot.id,\n      email,\n      productIds: products.map((product) => product.id),\n      nowMs: now,\n    })\n    await batch.commit()\n    const lines: ReviewRequestLine[] = products.map((product) => ({\n      productId: product.id,\n      name: product.name,\n      url: `${host.origin}/products/${encodeURIComponent(product.slug)}?review=${tokens[product.id]}`,\n    }))\n    const message = composeReviewRequest({\n      businessName: host.businessName,\n      orderNumber: CommerceModel.formatOrderNumber(order, docSnapshot.id),\n      lines,\n    })\n    if (host.template === undefined) {\n      host.template = await loadHostEmailWithTokens(firestore, hostId, REVIEW_REQUEST_EMAIL_KEY).catch(\n        () => null,\n      )\n    }\n    const designed = host.template\n      ? renderLoadedHostEmailWithTokens(host.template, message.tokens)\n      : null\n    const sent = await sendEmail({\n      to: email,\n      subject: designed?.subject ?? message.subject,\n      text: designed?.text || message.text,\n      ...(designed?.html ? { html: designed.html } : {}),\n      fromName: host.fromName,\n      sendingIdentity: await hostSendingIdentity(hostId, identityByHost),\n      audience: 'tenant',\n      context: 'review request',\n      priority: 'bulk',\n      // Through the marketing seam with NO stream: the suppression lists,\n      // the unsubscribe link and header and the frequency ceiling apply, and\n      // leaving \"Promotions and offers\" does not stop it.\n      marketing: {\n        hostId,\n        siteBase: host.origin,\n        consentHostIds: host.consentGroup.hostIds,\n        consentAwaitsConfirmation: host.consentGroup.awaitsConfirmation,\n      },\n    }).catch((error) => {\n      console.error('[review-requests] send failed', hostId, docSnapshot.id, error)\n      return null\n    })\n\n    if (!sent || isDeferrableSendResult(sent)) {\n      // Not this hour: put the stamp back. The minted links are unspent and\n      // expire on their own.\n      await docSnapshot.ref\n        .update({\n          reviewRequestDueAtMs: now + RETRY_AFTER_MS,\n          reviewRequest: { ...request, fulfilledAtMs, state: 'scheduled' },\n        })\n        .catch(() => undefined)\n      result.deferred += 1\n      continue\n    }\n    if (sent.sent) {\n      await meterHostEmail(hostId)\n      await docSnapshot.ref\n        .update({\n          reviewRequest: {\n            ...request,\n            fulfilledAtMs,\n            state: 'sent',\n            atMs: now,\n            productIds: products.map((product) => product.id),\n          },\n          timeline: CommerceModel.appendOrderEvent(order, 'buyer-notified', 'Review request sent by email', now),\n        })\n        .catch(() => undefined)\n      result.sent += 1\n    } else {\n      await docSnapshot.ref\n        .update({\n          reviewRequest: {\n            ...request,\n            fulfilledAtMs,\n            state: 'skipped',\n            reason: sendFailureReason(sent) ?? 'refused',\n            atMs: now,\n          },\n        })\n        .catch(() => undefined)\n      result.skipped += 1\n    }\n  }\n  return result\n}\n\nasync function readHostContext(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n): Promise<HostContext> {\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  const [org, hostSnapshot, settingsSnapshot] = await Promise.all([\n    getOrgForHost(hostId).catch(() => null),\n    hostRef.get().catch(() => null),\n    hostRef.collection('settings').doc('store').get().catch(() => null),\n  ])\n  const host = (hostSnapshot?.data?.() ?? {}) as Record<string, unknown>\n  const settings = (settingsSnapshot?.data?.() ?? {}) as Record<string, unknown>\n  const orgDoc = (org?.org as Record<string, unknown> | undefined) ?? null\n  return {\n    entitled: Aglyn.checkEntitlement(org?.org as never, 'productReviews'),\n    settings: CommerceModel.reviewSettingsFrom(settings),\n    hasProductPage: Boolean(settings['pdpScreenId']),\n    origin:\n      Aglyn.hostPublicOrigin({\n        cname: typeof host['cname'] === 'string' ? host['cname'] : null,\n        subdomain: typeof host['subdomain'] === 'string' ? host['subdomain'] : null,\n      }) ?? '',\n    businessName: String(resolveHostToken('businessName', host as HostTokenSource) ?? ''),\n    fromName: Aglyn.resolveBrandingProfile(org?.org as never).fromName,\n    consentGroup: Aglyn.consentGroupForHost(orgDoc, hostId),\n    template: undefined,\n  }\n}\n\n/** The order's reviewable products that are still on sale, with their slugs. */\nasync function reviewableProducts(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n  order: CommerceModel.HostOrder,\n): Promise<Array<{ id: string; name: string; slug: string }>> {\n  const ids = CommerceModel.reviewableProductIds(order).slice(0, 10)\n  if (!ids.length) return []\n  const productsRef = firestore.collection('hosts').doc(hostId).collection('products')\n  const snapshots = await firestore.getAll(...ids.map((id) => productsRef.doc(id)))\n  const products: Array<{ id: string; name: string; slug: string }> = []\n  for (const snapshot of snapshots) {\n    const data = snapshot.exists ? (snapshot.data() as Record<string, unknown>) : null\n    if (!data || data['deletedAt'] || data['status'] !== 'active' || !data['slug']) continue\n    products.push({ id: snapshot.id, name: String(data['name'] ?? 'Your item'), slug: String(data['slug']) })\n  }\n  return products\n}\n"],"names":["Aglyn","resolveHostToken","firebaseAdmin","getOrgForHost","hostSendingIdentity","meterHostEmail","loadHostEmailWithTokens","renderLoadedHostEmailWithTokens","isDeferrableSendResult","sendEmail","sendFailureReason","CommerceModel","stageReviewTokens","REVIEW_REQUEST_EMAIL_KEY","RETRY_AFTER_MS","ordersRef","firestore","hostId","collection","doc","scheduleReviewRequest","input","app","orderId","orderRef","runTransaction","transaction","snapshot","order","get","exists","data","liftLegacyOrder","orderTakesReviewRequest","onlyIfNothingShips","lineItems","some","line","lineRequiresShipping","request","state","fulfilledAtMs","update","reviewRequest","reviewRequestDueAtMs","reviewRequestEarliestDueAtMs","scheduleReviewRequestFromEvent","envelope","payload","String","id","Number","occurredAtMs","Date","now","event","composeReviewRequest","store","businessName","list","lines","map","name","url","join","first","subject","length","text","orderNumber","tokens","scanReviewRequests","gate","options","nowMs","due","collectionGroup","where","orderBy","limit","result","scanned","size","sent","skipped","deferred","skippedLocked","hosts","Map","identityByHost","docSnapshot","docs","ref","parent","isLocked","host","readHostContext","set","finish","reason","FieldValue","delete","atMs","catch","undefined","entitled","settings","requestEmail","dueAtMs","requestDelayDays","email","customerEmail","trim","toLowerCase","test","hasProductPage","origin","products","reviewableProducts","claimed","fresh","batch","productIds","product","commit","productId","encodeURIComponent","slug","message","formatOrderNumber","template","designed","to","html","fromName","sendingIdentity","audience","context","priority","marketing","siteBase","consentHostIds","consentGroup","hostIds","consentAwaitsConfirmation","awaitsConfirmation","error","console","timeline","appendOrderEvent","hostSnapshot","settingsSnapshot","hostRef","org","Promise","all","orgDoc","checkEntitlement","reviewSettingsFrom","Boolean","hostPublicOrigin","cname","subdomain","resolveBrandingProfile","consentGroupForHost","ids","reviewableProductIds","slice","productsRef","snapshots","getAll","push"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAG5C,SACEC,gBAAgB,QAEX,qCAAoC;AAC3C,SACEC,aAAa,EACbC,aAAa,EACbC,mBAAmB,EACnBC,cAAc,QACT,2BAA0B;AACjC,SACEC,uBAAuB,EACvBC,+BAA+B,QAE1B,oDAAmD;AAC1D,SACEC,sBAAsB,EACtBC,SAAS,EACTC,iBAAiB,QACZ,2BAA0B;AACjC,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,iBAAiB,QAAQ,qBAAiB;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCC,GAED,OAAO,MAAMC,2BAA2B,iBAAgB;AAExD,uCAAuC,GACvC,MAAMC,iBAAiB,KAAK,KAAK;AAWjC,SAASC,UAAUC,SAAsC,EAAEC,MAAc;IACvE,OAAOD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAAC;AAC9D;AAEA;;CAEC,GACD,OAAO,eAAeE,sBACpBC,KAA+F,EAC/FL,YAAyCd,cAAcoB,GAAG,GAAGN,SAAS,EAAE;IAExE,IAAI,CAACK,MAAMJ,MAAM,IAAI,CAACI,MAAME,OAAO,EAAE,OAAO;IAC5C,MAAMC,WAAWT,UAAUC,WAAWK,MAAMJ,MAAM,EAAEE,GAAG,CAACE,MAAME,OAAO;IACrE,OAAOP,UAAUS,cAAc,CAAC,OAAOC;YAGxBC,gBAQVC;QAVH,MAAMD,WAAW,MAAMD,YAAYG,GAAG,CAACL;QACvC,IAAI,CAACG,SAASG,MAAM,EAAE,OAAO;QAC7B,MAAMC,QAAOJ,iBAAAA,SAASI,IAAI,cAAbJ,iBAAmB,CAAC;QACjC,IAAII,IAAI,CAAC,gBAAgB,IAAIA,IAAI,CAAC,uBAAuB,EAAE,OAAO;QAClE,MAAMH,QAAQjB,cAAcqB,eAAe,CAACD;QAC5C,IAAI,CAACpB,cAAcsB,uBAAuB,CAACL,QAAQ,OAAO;QAC1D,uEAAuE;QACvE,gCAAgC;QAChC,IACEP,MAAMa,kBAAkB,IACxB,EAACN,mBAAAA,MAAMO,SAAS,YAAfP,mBAAmB,EAAE,EAAEQ,IAAI,CAAC,CAACC,OAAS1B,cAAc2B,oBAAoB,CAACD,QAC1E;YACA,OAAO;QACT;QACA,MAAME,UAA8B;YAClCC,OAAO;YACPC,eAAepB,MAAMoB,aAAa;QACpC;QACAf,YAAYgB,MAAM,CAAClB,UAAU;YAC3BmB,eAAeJ;YACfK,sBAAsBjC,cAAckC,4BAA4B,CAACxB,MAAMoB,aAAa;QACtF;QACA,OAAO;IACT;AACF;AAEA,yEAAyE,GACzE,OAAO,eAAeK,+BACpBC,QAA0F,EAC1F/B,SAAuC;QAEvB+B;IAAhB,MAAMnB,QAAQ,EAAEmB,oBAAAA,SAASC,OAAO,YAAhBD,oBAAoB,CAAC,GAAmCnB,KAAK;IAC7E,MAAML,UAAU0B,eAAOrB,yBAAAA,MAAOsB,EAAE,mBAAI;IACpC,IAAI,CAAC3B,SAAS;IACd,MAAMH,sBACJ;QACEH,QAAQ8B,SAAS9B,MAAM;QACvBM;QACAkB,eAAeU,OAAOJ,SAASK,YAAY,KAAKC,KAAKC,GAAG;QACxDpB,oBAAoBa,SAASQ,KAAK,KAAK;IACzC,GACAvC;AAEJ;AASA,6BAA6B,GAC7B,OAAO,SAASwC,qBAAqBnC,KAIpC;;IACC,MAAMoC,QAAQpC,MAAMqC,YAAY,IAAI;IACpC,MAAMC,OAAOtC,MAAMuC,KAAK,CAACC,GAAG,CAAC,CAACxB,OAAS,GAAGA,KAAKyB,IAAI,CAAC,EAAE,EAAEzB,KAAK0B,GAAG,EAAE,EAAEC,IAAI,CAAC;IACzE,MAAMC,QAAQ5C,MAAMuC,KAAK,CAAC,EAAE;IAC5B,OAAO;QACLM,SACE7C,MAAMuC,KAAK,CAACO,MAAM,KAAK,KAAKF,QACxB,CAAC,YAAY,EAAEA,MAAMH,IAAI,CAAC,CAAC,CAAC,GAC5B,CAAC,wBAAwB,EAAEL,MAAM,CAAC,CAAC;QACzCW,MACE,CAAC,4BAA4B,EAAE/C,MAAMgD,WAAW,CAAC,MAAM,EAAEZ,MAAM,EAAE,CAAC,GAClE,uEACA,CAAC,iEAAiE,EAAEE,MAAM;QAC5EW,QAAQ;YACN,gBAAgBjD,MAAMgD,WAAW;YACjC,mBAAmBV;YACnB,YAAY,UAAEM,yBAAAA,MAAOF,GAAG,mBAAI;YAC5B,oBAAoB,WAAEE,yBAAAA,MAAOH,IAAI,oBAAI;QACvC;IACF;AACF;AAqBA;;;CAGC,GACD,OAAO,eAAeS,mBACpBC,IAAuB,EACvBC,UAAuE,CAAC,CAAC;QAEvDA,oBACNA;IADZ,MAAMzD,aAAYyD,qBAAAA,QAAQzD,SAAS,YAAjByD,qBAAqBvE,cAAcoB,GAAG,GAAGN,SAAS;IACpE,MAAMsC,OAAMmB,iBAAAA,QAAQC,KAAK,YAAbD,iBAAiBpB,KAAKC,GAAG;IACrC,MAAMqB,MAAM,MAAM3D,UACf4D,eAAe,CAAC,UAChBC,KAAK,CAAC,wBAAwB,MAAMvB,KACpCwB,OAAO,CAAC,wBAAwB,OAChCC,KAAK,CAAC,KACNlD,GAAG;IACN,MAAMmD,SAAkC;QACtCC,SAASN,IAAIO,IAAI;QACjBC,MAAM;QACNC,SAAS;QACTC,UAAU;QACVC,eAAe;IACjB;IACA,MAAMC,QAAQ,IAAIC;IAClB,MAAMC,iBAAiB,IAAID;IAE3B,KAAK,MAAME,eAAef,IAAIgB,IAAI,CAAE;YASrBJ,YAEAG,mBAEI3D,qBA+BIH;YA3CN8D;QAAf,MAAMzE,UAASyE,iCAAAA,YAAYE,GAAG,CAACC,MAAM,CAACA,MAAM,qBAA7BH,+BAA+BxC,EAAE;QAChD,IAAI,CAACjC,QAAQ;QACb,sEAAsE;QACtE,yEAAyE;QACzE,IAAI,MAAMuD,KAAKsB,QAAQ,CAAC7E,SAAS;YAC/B+D,OAAOM,aAAa,IAAI;YACxB;QACF;QACA,MAAMS,QAAOR,aAAAA,MAAM1D,GAAG,CAACZ,mBAAVsE,aAAsB,MAAMS,gBAAgBhF,WAAWC;QACpEsE,MAAMU,GAAG,CAAChF,QAAQ8E;QAClB,MAAMhE,QAAO2D,oBAAAA,YAAY3D,IAAI,cAAhB2D,oBAAsB,CAAC;QACpC,MAAM9D,QAAQjB,cAAcqB,eAAe,CAACD;QAC5C,MAAMQ,WAAWR,sBAAAA,IAAI,CAAC,gBAAgB,YAArBA,sBAAyB,CAAC;QAC3C,MAAMU,gBAAgBU,OAAOZ,QAAQE,aAAa,KAAKU,OAAOpB,IAAI,CAAC,uBAAuB,KAAKuB;QAE/F,MAAM4C,SAAS,OAAO1D,OAAkB2D;YACtC,MAAMT,YAAYE,GAAG,CAClBlD,MAAM,CAAC;gBACNE,sBAAsB1C,cAAcc,SAAS,CAACoF,UAAU,CAACC,MAAM;gBAC/D1D,eAAe,aAAKJ;oBAASE;oBAAeD;oBAAO2D;oBAAQG,MAAMhD;;YACnE,GACCiD,KAAK,CAAC,IAAMC;YACfxB,OAAOI,OAAO,IAAI;QACpB;QAEA,IAAI,CAACW,KAAKU,QAAQ,EAAE;YAClB,MAAMP,OAAO,WAAW;YACxB;QACF;QACA,IAAI,CAACH,KAAKW,QAAQ,CAACC,YAAY,EAAE;YAC/B,MAAMT,OAAO,WAAW;YACxB;QACF;QACA,MAAMU,UAAUjG,cAAciC,oBAAoB,CAACH,eAAesD,KAAKW,QAAQ,CAACG,gBAAgB;QAChG,IAAID,UAAUtD,KAAK;YACjB,8DAA8D;YAC9D,MAAMoC,YAAYE,GAAG,CAAClD,MAAM,CAAC;gBAAEE,sBAAsBgE;YAAQ,GAAGL,KAAK,CAAC,IAAMC;YAC5E;QACF;QACA,IAAI,CAAC7F,cAAcsB,uBAAuB,CAACL,QAAQ;YACjD,MAAMsE,OAAO,WAAW;YACxB;QACF;QACA,MAAMY,QAAQ7D,QAAOrB,uBAAAA,MAAMmF,aAAa,YAAnBnF,uBAAuB,IAAIoF,IAAI,GAAGC,WAAW;QAClE,IAAI,CAAC,6BAA6BC,IAAI,CAACJ,QAAQ;YAC7C,MAAMZ,OAAO,WAAW;YACxB;QACF;QACA,IAAI,CAACH,KAAKoB,cAAc,IAAI,CAACpB,KAAKqB,MAAM,EAAE;YACxC,MAAMlB,OAAO,WAAW;YACxB;QACF;QACA,MAAMmB,WAAW,MAAMC,mBAAmBtG,WAAWC,QAAQW;QAC7D,IAAI,CAACyF,SAASlD,MAAM,EAAE;YACpB,MAAM+B,OAAO,WAAW;YACxB;QACF;QAEA,8CAA8C;QAC9C,MAAMqB,UAAU,MAAMvG,UACnBS,cAAc,CAAC,OAAOC;YACrB,MAAM8F,QAAQ,MAAM9F,YAAYG,GAAG,CAAC6D,YAAYE,GAAG;YACnD,IAAI,CAAC4B,MAAM1F,MAAM,IAAI,CAAC0F,MAAM3F,GAAG,CAAC,yBAAyB,OAAO;YAChEH,YAAYgB,MAAM,CAACgD,YAAYE,GAAG,EAAE;gBAClChD,sBAAsB1C,cAAcc,SAAS,CAACoF,UAAU,CAACC,MAAM;gBAC/D1D,eAAe,aAAKJ;oBAASE;oBAAeD,OAAO;oBAAW8D,MAAMhD;;YACtE;YACA,OAAO;QACT,GACCiD,KAAK,CAAC,IAAM;QACf,IAAI,CAACgB,SAAS;QAEd,MAAME,QAAQzG,UAAUyG,KAAK;QAC7B,MAAMnD,SAAS1D,kBAAkBI,WAAWyG,OAAO;YACjDxG;YACAM,SAASmE,YAAYxC,EAAE;YACvB4D;YACAY,YAAYL,SAASxD,GAAG,CAAC,CAAC8D,UAAYA,QAAQzE,EAAE;YAChDwB,OAAOpB;QACT;QACA,MAAMmE,MAAMG,MAAM;QAClB,MAAMhE,QAA6ByD,SAASxD,GAAG,CAAC,CAAC8D,UAAa,CAAA;gBAC5DE,WAAWF,QAAQzE,EAAE;gBACrBY,MAAM6D,QAAQ7D,IAAI;gBAClBC,KAAK,GAAGgC,KAAKqB,MAAM,CAAC,UAAU,EAAEU,mBAAmBH,QAAQI,IAAI,EAAE,QAAQ,EAAEzD,MAAM,CAACqD,QAAQzE,EAAE,CAAC,EAAE;YACjG,CAAA;QACA,MAAM8E,UAAUxE,qBAAqB;YACnCE,cAAcqC,KAAKrC,YAAY;YAC/BW,aAAa1D,cAAcsH,iBAAiB,CAACrG,OAAO8D,YAAYxC,EAAE;YAClEU;QACF;QACA,IAAImC,KAAKmC,QAAQ,KAAK1B,WAAW;YAC/BT,KAAKmC,QAAQ,GAAG,MAAM5H,wBAAwBU,WAAWC,QAAQJ,0BAA0B0F,KAAK,CAC9F,IAAM;QAEV;QACA,MAAM4B,WAAWpC,KAAKmC,QAAQ,GAC1B3H,gCAAgCwF,KAAKmC,QAAQ,EAAEF,QAAQ1D,MAAM,IAC7D;QACJ,MAAMa,OAAO,MAAM1E,UAAU;YAC3B2H,IAAItB;YACJ5C,OAAO,UAAEiE,4BAAAA,SAAUjE,OAAO,mBAAI8D,QAAQ9D,OAAO;YAC7CE,MAAM+D,CAAAA,4BAAAA,SAAU/D,IAAI,KAAI4D,QAAQ5D,IAAI;WAChC+D,CAAAA,4BAAAA,SAAUE,IAAI,IAAG;YAAEA,MAAMF,SAASE,IAAI;QAAC,IAAI,CAAC;YAChDC,UAAUvC,KAAKuC,QAAQ;YACvBC,iBAAiB,MAAMnI,oBAAoBa,QAAQwE;YACnD+C,UAAU;YACVC,SAAS;YACTC,UAAU;YACV,oEAAoE;YACpE,uEAAuE;YACvE,oDAAoD;YACpDC,WAAW;gBACT1H;gBACA2H,UAAU7C,KAAKqB,MAAM;gBACrByB,gBAAgB9C,KAAK+C,YAAY,CAACC,OAAO;gBACzCC,2BAA2BjD,KAAK+C,YAAY,CAACG,kBAAkB;YACjE;YACC1C,KAAK,CAAC,CAAC2C;YACRC,QAAQD,KAAK,CAAC,iCAAiCjI,QAAQyE,YAAYxC,EAAE,EAAEgG;YACvE,OAAO;QACT;QAEA,IAAI,CAAC/D,QAAQ3E,uBAAuB2E,OAAO;YACzC,sEAAsE;YACtE,uBAAuB;YACvB,MAAMO,YAAYE,GAAG,CAClBlD,MAAM,CAAC;gBACNE,sBAAsBU,MAAMxC;gBAC5B6B,eAAe,aAAKJ;oBAASE;oBAAeD,OAAO;;YACrD,GACC+D,KAAK,CAAC,IAAMC;YACfxB,OAAOK,QAAQ,IAAI;YACnB;QACF;QACA,IAAIF,KAAKA,IAAI,EAAE;YACb,MAAM9E,eAAeY;YACrB,MAAMyE,YAAYE,GAAG,CAClBlD,MAAM,CAAC;gBACNC,eAAe,aACVJ;oBACHE;oBACAD,OAAO;oBACP8D,MAAMhD;oBACNoE,YAAYL,SAASxD,GAAG,CAAC,CAAC8D,UAAYA,QAAQzE,EAAE;;gBAElDkG,UAAUzI,cAAc0I,gBAAgB,CAACzH,OAAO,kBAAkB,gCAAgC0B;YACpG,GACCiD,KAAK,CAAC,IAAMC;YACfxB,OAAOG,IAAI,IAAI;QACjB,OAAO;gBAOSzE;YANd,MAAMgF,YAAYE,GAAG,CAClBlD,MAAM,CAAC;gBACNC,eAAe,aACVJ;oBACHE;oBACAD,OAAO;oBACP2D,MAAM,GAAEzF,qBAAAA,kBAAkByE,iBAAlBzE,qBAA2B;oBACnC4F,MAAMhD;;YAEV,GACCiD,KAAK,CAAC,IAAMC;YACfxB,OAAOI,OAAO,IAAI;QACpB;IACF;IACA,OAAOJ;AACT;AAEA,eAAegB,gBACbhF,SAAsC,EACtCC,MAAc;4BAgBVjB,yBAImBC;QAZTqJ,oBACIC;IAPlB,MAAMC,UAAUxI,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF;IAClD,MAAM,CAACwI,KAAKH,cAAcC,iBAAiB,GAAG,MAAMG,QAAQC,GAAG,CAAC;QAC9DxJ,cAAcc,QAAQsF,KAAK,CAAC,IAAM;QAClCiD,QAAQ3H,GAAG,GAAG0E,KAAK,CAAC,IAAM;QAC1BiD,QAAQtI,UAAU,CAAC,YAAYC,GAAG,CAAC,SAASU,GAAG,GAAG0E,KAAK,CAAC,IAAM;KAC/D;IACD,MAAMR,eAAQuD,iCAAAA,qBAAAA,aAAcvH,IAAI,qBAAlBuH,wBAAAA,gCAA0B,CAAC;IACzC,MAAM5C,oBAAY6C,qCAAAA,yBAAAA,iBAAkBxH,IAAI,qBAAtBwH,4BAAAA,qCAA8B,CAAC;IACjD,MAAMK,kBAAUH,uBAAAA,IAAKA,GAAG,oBAA4C;IACpE,OAAO;QACLhD,UAAUzG,MAAM6J,gBAAgB,CAACJ,uBAAAA,IAAKA,GAAG,EAAW;QACpD/C,UAAU/F,cAAcmJ,kBAAkB,CAACpD;QAC3CS,gBAAgB4C,QAAQrD,QAAQ,CAAC,cAAc;QAC/CU,MAAM,GACJpH,0BAAAA,MAAMgK,gBAAgB,CAAC;YACrBC,OAAO,OAAOlE,IAAI,CAAC,QAAQ,KAAK,WAAWA,IAAI,CAAC,QAAQ,GAAG;YAC3DmE,WAAW,OAAOnE,IAAI,CAAC,YAAY,KAAK,WAAWA,IAAI,CAAC,YAAY,GAAG;QACzE,cAHA/F,0BAGM;QACR0D,cAAcT,QAAOhD,oBAAAA,iBAAiB,gBAAgB8F,iBAAjC9F,oBAA6D;QAClFqI,UAAUtI,MAAMmK,sBAAsB,CAACV,uBAAAA,IAAKA,GAAG,EAAWnB,QAAQ;QAClEQ,cAAc9I,MAAMoK,mBAAmB,CAACR,QAAQ3I;QAChDiH,UAAU1B;IACZ;AACF;AAEA,8EAA8E,GAC9E,eAAec,mBACbtG,SAAsC,EACtCC,MAAc,EACdW,KAA8B;IAE9B,MAAMyI,MAAM1J,cAAc2J,oBAAoB,CAAC1I,OAAO2I,KAAK,CAAC,GAAG;IAC/D,IAAI,CAACF,IAAIlG,MAAM,EAAE,OAAO,EAAE;IAC1B,MAAMqG,cAAcxJ,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAAC;IACzE,MAAMuJ,YAAY,MAAMzJ,UAAU0J,MAAM,IAAIL,IAAIxG,GAAG,CAAC,CAACX,KAAOsH,YAAYrJ,GAAG,CAAC+B;IAC5E,MAAMmE,WAA8D,EAAE;IACtE,KAAK,MAAM1F,YAAY8I,UAAW;YAGc1I;QAF9C,MAAMA,OAAOJ,SAASG,MAAM,GAAIH,SAASI,IAAI,KAAiC;QAC9E,IAAI,CAACA,QAAQA,IAAI,CAAC,YAAY,IAAIA,IAAI,CAAC,SAAS,KAAK,YAAY,CAACA,IAAI,CAAC,OAAO,EAAE;QAChFsF,SAASsD,IAAI,CAAC;YAAEzH,IAAIvB,SAASuB,EAAE;YAAEY,MAAMb,QAAOlB,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB;YAAcgG,MAAM9E,OAAOlB,IAAI,CAAC,OAAO;QAAE;IACzG;IACA,OAAOsF;AACT"}

package/src/lib/server/review-tokens.d.ts

@@ -0,0 +1,82 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as CommerceModel from '../model';
+/**
+ * One-time review links (AGL-3736).
+ *
+ * The review-request email carries, per product, a link to the product page
+ * with `?review=<token>`. The token is 24 random bytes; only its SHA-256 is
+ * stored, as the document id of `hosts/{hostId}/reviewTokens/{hash}`, so a
+ * leaked database row cannot be replayed as a link. The row binds the token
+ * to one order, one product and the buyer's email, works once, and expires
+ * 60 days after it was minted (a TTL policy on `expiresAt` clears old rows).
+ *
+ * The collection is closed to every client in the Firestore rules: a site
+ * editor who could write a row could mint a "verified" review for any
+ * product.
+ */
+export declare const REVIEW_TOKENS_COLLECTION = "reviewTokens";
+export interface ReviewTokenRecord {
+    orderId: string;
+    productId: string;
+    email: string;
+    createdAtMs: number;
+    expiresAtMs: number;
+    usedAtMs: number | null;
+    reviewId?: string;
+}
+/** The stored id for a presented token. */
+export declare function hashReviewToken(token: string): string;
+/** A fresh token: URL-safe, 32 characters. */
+export declare function newReviewToken(): string;
+/** A presented token's shape, before any read. */
+export declare function plausibleReviewToken(token: unknown): token is string;
+/**
+ * Stages one token per product in the caller's batch and returns the raw
+ * tokens (to put in the email), by product id.
+ */
+export declare function stageReviewTokens(firestore: FirebaseFirestore.Firestore, batch: FirebaseFirestore.WriteBatch, input: {
+    hostId: string;
+    orderId: string;
+    email: string;
+    productIds: string[];
+    nowMs: number;
+}): Record<string, string>;
+export type ReviewTokenCheck = {
+    ok: true;
+    record: ReviewTokenRecord;
+    ref: FirebaseFirestore.DocumentReference;
+    code?: undefined;
+} | {
+    ok: false;
+    code: CommerceModel.ReviewErrorCode;
+    record?: undefined;
+    ref?: undefined;
+};
+/** The verdict on one stored row, for a product. Pure. */
+export declare function reviewTokenVerdict(record: Partial<ReviewTokenRecord> | null | undefined, productId: string, nowMs: number): CommerceModel.ReviewErrorCode | null;
+/**
+ * Reads and judges a presented token without spending it (the form's
+ * eligibility check). The POST spends it with {@link redeemReviewTokenIn}.
+ */
+export declare function inspectReviewToken(firestore: FirebaseFirestore.Firestore, hostId: string, token: unknown, productId: string, nowMs?: number): Promise<ReviewTokenCheck>;
+/**
+ * Spends a token inside the caller's transaction: re-reads it, re-judges it,
+ * and marks it used with the review it produced. Two submissions of one link
+ * race on the same document, so exactly one wins.
+ */
+export declare function redeemReviewTokenIn(transaction: FirebaseFirestore.Transaction, ref: FirebaseFirestore.DocumentReference, productId: string, reviewId: string, nowMs?: number): Promise<CommerceModel.ReviewErrorCode | null>;

package/src/lib/server/review-tokens.js

@@ -0,0 +1,119 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash, randomBytes } from "crypto";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import * as CommerceModel from "../model/index.js";
+/**
+ * One-time review links (AGL-3736).
+ *
+ * The review-request email carries, per product, a link to the product page
+ * with `?review=<token>`. The token is 24 random bytes; only its SHA-256 is
+ * stored, as the document id of `hosts/{hostId}/reviewTokens/{hash}`, so a
+ * leaked database row cannot be replayed as a link. The row binds the token
+ * to one order, one product and the buyer's email, works once, and expires
+ * 60 days after it was minted (a TTL policy on `expiresAt` clears old rows).
+ *
+ * The collection is closed to every client in the Firestore rules: a site
+ * editor who could write a row could mint a "verified" review for any
+ * product.
+ */ export const REVIEW_TOKENS_COLLECTION = 'reviewTokens';
+/** The stored id for a presented token. */ export function hashReviewToken(token) {
+    return createHash('sha256').update(`review-token:${token}`).digest('hex');
+}
+/** A fresh token: URL-safe, 32 characters. */ export function newReviewToken() {
+    return randomBytes(24).toString('base64url');
+}
+/** A presented token's shape, before any read. */ export function plausibleReviewToken(token) {
+    return typeof token === 'string' && /^[A-Za-z0-9_-]{32}$/.test(token);
+}
+function tokensRef(firestore, hostId) {
+    return firestore.collection('hosts').doc(hostId).collection(REVIEW_TOKENS_COLLECTION);
+}
+/**
+ * Stages one token per product in the caller's batch and returns the raw
+ * tokens (to put in the email), by product id.
+ */ export function stageReviewTokens(firestore, batch, input) {
+    const tokens = {};
+    const expiresAtMs = input.nowMs + CommerceModel.REVIEW_TOKEN_TTL_MS;
+    for (const productId of input.productIds){
+        const token = newReviewToken();
+        tokens[productId] = token;
+        batch.set(tokensRef(firestore, input.hostId).doc(hashReviewToken(token)), {
+            orderId: input.orderId,
+            productId,
+            email: input.email.toLowerCase(),
+            createdAtMs: input.nowMs,
+            expiresAtMs,
+            // The TTL field (cloud/firebase-firestore.indexes.json).
+            expiresAt: firebaseAdmin.firestore.Timestamp.fromMillis(expiresAtMs),
+            usedAtMs: null
+        });
+    }
+    return tokens;
+}
+/** The verdict on one stored row, for a product. Pure. */ export function reviewTokenVerdict(record, productId, nowMs) {
+    var _record_productId;
+    const codes = CommerceModel.REVIEW_ERROR_CODES;
+    if (!record) return codes.tokenInvalid;
+    // A link for another product is not a link for this one.
+    if (String((_record_productId = record.productId) != null ? _record_productId : '') !== productId) return codes.tokenInvalid;
+    if (record.usedAtMs) return codes.tokenUsed;
+    if (!(Number(record.expiresAtMs) > nowMs)) return codes.tokenExpired;
+    return null;
+}
+/**
+ * Reads and judges a presented token without spending it (the form's
+ * eligibility check). The POST spends it with {@link redeemReviewTokenIn}.
+ */ export async function inspectReviewToken(firestore, hostId, token, productId, nowMs = Date.now()) {
+    if (!plausibleReviewToken(token)) {
+        return {
+            ok: false,
+            code: CommerceModel.REVIEW_ERROR_CODES.tokenInvalid
+        };
+    }
+    const ref = tokensRef(firestore, hostId).doc(hashReviewToken(token));
+    const snapshot = await ref.get();
+    const record = snapshot.exists ? snapshot.data() : null;
+    const problem = reviewTokenVerdict(record, productId, nowMs);
+    if (problem || !record) {
+        return {
+            ok: false,
+            code: problem != null ? problem : CommerceModel.REVIEW_ERROR_CODES.tokenInvalid
+        };
+    }
+    return {
+        ok: true,
+        record,
+        ref
+    };
+}
+/**
+ * Spends a token inside the caller's transaction: re-reads it, re-judges it,
+ * and marks it used with the review it produced. Two submissions of one link
+ * race on the same document, so exactly one wins.
+ */ export async function redeemReviewTokenIn(transaction, ref, productId, reviewId, nowMs = Date.now()) {
+    const snapshot = await transaction.get(ref);
+    const record = snapshot.exists ? snapshot.data() : null;
+    const problem = reviewTokenVerdict(record, productId, nowMs);
+    if (problem) return problem;
+    transaction.update(ref, {
+        usedAtMs: nowMs,
+        reviewId
+    });
+    return null;
+}
+
+//# sourceMappingURL=review-tokens.js.map

package/src/lib/server/review-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/review-tokens.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash, randomBytes } from 'crypto'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport * as CommerceModel from '../model'\n\n/**\n * One-time review links (AGL-3736).\n *\n * The review-request email carries, per product, a link to the product page\n * with `?review=<token>`. The token is 24 random bytes; only its SHA-256 is\n * stored, as the document id of `hosts/{hostId}/reviewTokens/{hash}`, so a\n * leaked database row cannot be replayed as a link. The row binds the token\n * to one order, one product and the buyer's email, works once, and expires\n * 60 days after it was minted (a TTL policy on `expiresAt` clears old rows).\n *\n * The collection is closed to every client in the Firestore rules: a site\n * editor who could write a row could mint a \"verified\" review for any\n * product.\n */\n\nexport const REVIEW_TOKENS_COLLECTION = 'reviewTokens'\n\nexport interface ReviewTokenRecord {\n  orderId: string\n  productId: string\n  email: string\n  createdAtMs: number\n  expiresAtMs: number\n  usedAtMs: number | null\n  reviewId?: string\n}\n\n/** The stored id for a presented token. */\nexport function hashReviewToken(token: string): string {\n  return createHash('sha256').update(`review-token:${token}`).digest('hex')\n}\n\n/** A fresh token: URL-safe, 32 characters. */\nexport function newReviewToken(): string {\n  return randomBytes(24).toString('base64url')\n}\n\n/** A presented token's shape, before any read. */\nexport function plausibleReviewToken(token: unknown): token is string {\n  return typeof token === 'string' && /^[A-Za-z0-9_-]{32}$/.test(token)\n}\n\nfunction tokensRef(firestore: FirebaseFirestore.Firestore, hostId: string) {\n  return firestore.collection('hosts').doc(hostId).collection(REVIEW_TOKENS_COLLECTION)\n}\n\n/**\n * Stages one token per product in the caller's batch and returns the raw\n * tokens (to put in the email), by product id.\n */\nexport function stageReviewTokens(\n  firestore: FirebaseFirestore.Firestore,\n  batch: FirebaseFirestore.WriteBatch,\n  input: { hostId: string; orderId: string; email: string; productIds: string[]; nowMs: number },\n): Record<string, string> {\n  const tokens: Record<string, string> = {}\n  const expiresAtMs = input.nowMs + CommerceModel.REVIEW_TOKEN_TTL_MS\n  for (const productId of input.productIds) {\n    const token = newReviewToken()\n    tokens[productId] = token\n    batch.set(tokensRef(firestore, input.hostId).doc(hashReviewToken(token)), {\n      orderId: input.orderId,\n      productId,\n      email: input.email.toLowerCase(),\n      createdAtMs: input.nowMs,\n      expiresAtMs,\n      // The TTL field (cloud/firebase-firestore.indexes.json).\n      expiresAt: firebaseAdmin.firestore.Timestamp.fromMillis(expiresAtMs),\n      usedAtMs: null,\n    })\n  }\n  return tokens\n}\n\nexport type ReviewTokenCheck =\n  | {\n      ok: true\n      record: ReviewTokenRecord\n      ref: FirebaseFirestore.DocumentReference\n      code?: undefined\n    }\n  | { ok: false; code: CommerceModel.ReviewErrorCode; record?: undefined; ref?: undefined }\n\n/** The verdict on one stored row, for a product. Pure. */\nexport function reviewTokenVerdict(\n  record: Partial<ReviewTokenRecord> | null | undefined,\n  productId: string,\n  nowMs: number,\n): CommerceModel.ReviewErrorCode | null {\n  const codes = CommerceModel.REVIEW_ERROR_CODES\n  if (!record) return codes.tokenInvalid\n  // A link for another product is not a link for this one.\n  if (String(record.productId ?? '') !== productId) return codes.tokenInvalid\n  if (record.usedAtMs) return codes.tokenUsed\n  if (!(Number(record.expiresAtMs) > nowMs)) return codes.tokenExpired\n  return null\n}\n\n/**\n * Reads and judges a presented token without spending it (the form's\n * eligibility check). The POST spends it with {@link redeemReviewTokenIn}.\n */\nexport async function inspectReviewToken(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n  token: unknown,\n  productId: string,\n  nowMs = Date.now(),\n): Promise<ReviewTokenCheck> {\n  if (!plausibleReviewToken(token)) {\n    return { ok: false, code: CommerceModel.REVIEW_ERROR_CODES.tokenInvalid }\n  }\n  const ref = tokensRef(firestore, hostId).doc(hashReviewToken(token))\n  const snapshot = await ref.get()\n  const record = snapshot.exists ? (snapshot.data() as ReviewTokenRecord) : null\n  const problem = reviewTokenVerdict(record, productId, nowMs)\n  if (problem || !record) {\n    return { ok: false, code: problem ?? CommerceModel.REVIEW_ERROR_CODES.tokenInvalid }\n  }\n  return { ok: true, record, ref }\n}\n\n/**\n * Spends a token inside the caller's transaction: re-reads it, re-judges it,\n * and marks it used with the review it produced. Two submissions of one link\n * race on the same document, so exactly one wins.\n */\nexport async function redeemReviewTokenIn(\n  transaction: FirebaseFirestore.Transaction,\n  ref: FirebaseFirestore.DocumentReference,\n  productId: string,\n  reviewId: string,\n  nowMs = Date.now(),\n): Promise<CommerceModel.ReviewErrorCode | null> {\n  const snapshot = await transaction.get(ref)\n  const record = snapshot.exists ? (snapshot.data() as ReviewTokenRecord) : null\n  const problem = reviewTokenVerdict(record, productId, nowMs)\n  if (problem) return problem\n  transaction.update(ref, { usedAtMs: nowMs, reviewId })\n  return null\n}\n"],"names":["createHash","randomBytes","firebaseAdmin","CommerceModel","REVIEW_TOKENS_COLLECTION","hashReviewToken","token","update","digest","newReviewToken","toString","plausibleReviewToken","test","tokensRef","firestore","hostId","collection","doc","stageReviewTokens","batch","input","tokens","expiresAtMs","nowMs","REVIEW_TOKEN_TTL_MS","productId","productIds","set","orderId","email","toLowerCase","createdAtMs","expiresAt","Timestamp","fromMillis","usedAtMs","reviewTokenVerdict","record","codes","REVIEW_ERROR_CODES","tokenInvalid","String","tokenUsed","Number","tokenExpired","inspectReviewToken","Date","now","ok","code","ref","snapshot","get","exists","data","problem","redeemReviewTokenIn","transaction","reviewId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,WAAW,QAAQ,SAAQ;AAChD,SAASC,aAAa,QAAQ,2BAA0B;AACxD,YAAYC,mBAAmB,oBAAU;AAEzC;;;;;;;;;;;;;CAaC,GAED,OAAO,MAAMC,2BAA2B,eAAc;AAYtD,yCAAyC,GACzC,OAAO,SAASC,gBAAgBC,KAAa;IAC3C,OAAON,WAAW,UAAUO,MAAM,CAAC,CAAC,aAAa,EAAED,OAAO,EAAEE,MAAM,CAAC;AACrE;AAEA,4CAA4C,GAC5C,OAAO,SAASC;IACd,OAAOR,YAAY,IAAIS,QAAQ,CAAC;AAClC;AAEA,gDAAgD,GAChD,OAAO,SAASC,qBAAqBL,KAAc;IACjD,OAAO,OAAOA,UAAU,YAAY,sBAAsBM,IAAI,CAACN;AACjE;AAEA,SAASO,UAAUC,SAAsC,EAAEC,MAAc;IACvE,OAAOD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAACZ;AAC9D;AAEA;;;CAGC,GACD,OAAO,SAASc,kBACdJ,SAAsC,EACtCK,KAAmC,EACnCC,KAA8F;IAE9F,MAAMC,SAAiC,CAAC;IACxC,MAAMC,cAAcF,MAAMG,KAAK,GAAGpB,cAAcqB,mBAAmB;IACnE,KAAK,MAAMC,aAAaL,MAAMM,UAAU,CAAE;QACxC,MAAMpB,QAAQG;QACdY,MAAM,CAACI,UAAU,GAAGnB;QACpBa,MAAMQ,GAAG,CAACd,UAAUC,WAAWM,MAAML,MAAM,EAAEE,GAAG,CAACZ,gBAAgBC,SAAS;YACxEsB,SAASR,MAAMQ,OAAO;YACtBH;YACAI,OAAOT,MAAMS,KAAK,CAACC,WAAW;YAC9BC,aAAaX,MAAMG,KAAK;YACxBD;YACA,yDAAyD;YACzDU,WAAW9B,cAAcY,SAAS,CAACmB,SAAS,CAACC,UAAU,CAACZ;YACxDa,UAAU;QACZ;IACF;IACA,OAAOd;AACT;AAWA,wDAAwD,GACxD,OAAO,SAASe,mBACdC,MAAqD,EACrDZ,SAAiB,EACjBF,KAAa;QAKFc;IAHX,MAAMC,QAAQnC,cAAcoC,kBAAkB;IAC9C,IAAI,CAACF,QAAQ,OAAOC,MAAME,YAAY;IACtC,yDAAyD;IACzD,IAAIC,QAAOJ,oBAAAA,OAAOZ,SAAS,YAAhBY,oBAAoB,QAAQZ,WAAW,OAAOa,MAAME,YAAY;IAC3E,IAAIH,OAAOF,QAAQ,EAAE,OAAOG,MAAMI,SAAS;IAC3C,IAAI,CAAEC,CAAAA,OAAON,OAAOf,WAAW,IAAIC,KAAI,GAAI,OAAOe,MAAMM,YAAY;IACpE,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,eAAeC,mBACpB/B,SAAsC,EACtCC,MAAc,EACdT,KAAc,EACdmB,SAAiB,EACjBF,QAAQuB,KAAKC,GAAG,EAAE;IAElB,IAAI,CAACpC,qBAAqBL,QAAQ;QAChC,OAAO;YAAE0C,IAAI;YAAOC,MAAM9C,cAAcoC,kBAAkB,CAACC,YAAY;QAAC;IAC1E;IACA,MAAMU,MAAMrC,UAAUC,WAAWC,QAAQE,GAAG,CAACZ,gBAAgBC;IAC7D,MAAM6C,WAAW,MAAMD,IAAIE,GAAG;IAC9B,MAAMf,SAASc,SAASE,MAAM,GAAIF,SAASG,IAAI,KAA2B;IAC1E,MAAMC,UAAUnB,mBAAmBC,QAAQZ,WAAWF;IACtD,IAAIgC,WAAW,CAAClB,QAAQ;QACtB,OAAO;YAAEW,IAAI;YAAOC,IAAI,EAAEM,kBAAAA,UAAWpD,cAAcoC,kBAAkB,CAACC,YAAY;QAAC;IACrF;IACA,OAAO;QAAEQ,IAAI;QAAMX;QAAQa;IAAI;AACjC;AAEA;;;;CAIC,GACD,OAAO,eAAeM,oBACpBC,WAA0C,EAC1CP,GAAwC,EACxCzB,SAAiB,EACjBiC,QAAgB,EAChBnC,QAAQuB,KAAKC,GAAG,EAAE;IAElB,MAAMI,WAAW,MAAMM,YAAYL,GAAG,CAACF;IACvC,MAAMb,SAASc,SAASE,MAAM,GAAIF,SAASG,IAAI,KAA2B;IAC1E,MAAMC,UAAUnB,mBAAmBC,QAAQZ,WAAWF;IACtD,IAAIgC,SAAS,OAAOA;IACpBE,YAAYlD,MAAM,CAAC2C,KAAK;QAAEf,UAAUZ;QAAOmC;IAAS;IACpD,OAAO;AACT"}