@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.222

package/src/lib/server/automation-steps.js

@@ -0,0 +1,472 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildCrmEmailActivity, checkEntitlement, CONTACT_LIFECYCLE_STAGE_LABELS, CONTACT_TAG_MAX_LENGTH, contactFacetPath, CRM_ACTIVITY_LOG_FULL_MESSAGE, CRM_COLLECTIONS, crmActivityLogHasRoom, crmActivityDirection, crmEmailDeliveryTags, crmScopeTokens, crmTaskLabelsForNew, crmTaskListFields, crmTaskReminderAfterEdit, normalizeContactEmail, parseCrmMemberRef, planLabelGrantingFeature, readContactFacet, visibleToHost } from "@aglyn/aglyn/server";
+import { consentGroupForSite, countCrmActivitiesForRecord, firebaseAdmin, newCrmActivityRef, orgDataQueryForHost, recomputeCrmNextTaskAt, restampCrmListFieldsAt, writeCrmEmailActivity } from "@aglyn/tenant-data-admin";
+// The leaf, not the barrel: the specs substitute the barrel wholesale, and
+// the lookup must reach the real index logic under them.
+import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
+import { FieldValue } from "firebase-admin/firestore";
+// The leaf, not the runtime barrel: the specs substitute it.
+import { OWNER_ASSIGNMENT_REFUSALS, reassignContactOwner } from "./assign-contact-owner.js";
+import { readCrmTaskPicklists } from "./read-picklist.js";
+import { CRM_SUITE_FEATURE } from "./suite-gate.js";
+const DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * The contact an event names, as this site may see it.
+ *
+ * Id first, because a CRM event carries the document the door just wrote and
+ * a lookup by id is a read, not a query. The address second, through the
+ * org's address index narrowed to this site (AGL-2633), for every event that
+ * predates the CRM and knows only who filled in the form — so an address a
+ * merge folded into another record still reaches the person who now holds it.
+ */ async function resolveEventContact(hostId, named) {
+    var _named_contactId, _hit_data;
+    const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts');
+    const contactId = String((_named_contactId = named.contactId) != null ? _named_contactId : '').trim();
+    if (contactId) {
+        const doc = await contactsRef.doc(contactId).get();
+        if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {
+            var _doc_data;
+            return {
+                id: doc.id,
+                ref: doc.ref,
+                data: (_doc_data = doc.data()) != null ? _doc_data : {}
+            };
+        }
+    }
+    const hit = await findContactByEmail(contactsRef, named.email, {
+        hostId
+    });
+    return hit ? {
+        id: hit.id,
+        ref: hit.ref,
+        data: (_hit_data = hit.data()) != null ? _hit_data : {}
+    } : null;
+}
+/**
+ * The uid a step names for somebody on the team — an owner, an assignee —
+ * resolved against the org's roster, whichever way the step named them.
+ *
+ * A step names a member by uid when a picker wrote it and by address when a
+ * person typed it, and the editor's one text field accepts either — so both
+ * fields are read through `parseCrmMemberRef`, and an address typed into the
+ * uid slot or a uid typed into the address slot still names the person.
+ *
+ * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by the
+ * uid, so a uid costs one document read and must exist: `ownerUid` and
+ * `assigneeUid` are fields every reader resolves as a member, and a stranger's
+ * uid in one is a task nobody on the team can find. An address is matched on
+ * the roster's own `email` field, and two production paths create a member
+ * document WITHOUT one (a host-access re-grant, and an add whose auth record
+ * carried none) — such a member is named by uid, which is the reason the
+ * editor takes one.
+ *
+ * The roster is the only directory consulted. A project-level Auth lookup by
+ * address would resolve people who are not on this organization at all
+ * (AGL-1122). A reference that resolves neither way is an error, not a stored
+ * string.
+ */ async function resolveMemberUid(orgId, named, role) {
+    var _parseCrmMemberRef;
+    const ref = (_parseCrmMemberRef = parseCrmMemberRef(named.uid)) != null ? _parseCrmMemberRef : parseCrmMemberRef(named.email);
+    if (!ref) return {
+        error: `no ${role} named on the step`
+    };
+    if (!orgId) return {
+        error: 'this site has no organization'
+    };
+    const members = firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection('members');
+    if (ref.kind === 'uid') {
+        const member = await members.doc(ref.uid).get();
+        if (member.exists) return {
+            uid: ref.uid,
+            detail: ref.uid
+        };
+        return {
+            error: `no team member with the id ${ref.uid}`
+        };
+    }
+    const byField = (await members.where('email', '==', ref.email).limit(1).get()).docs[0];
+    if (byField) return {
+        uid: byField.id,
+        detail: ref.email
+    };
+    return {
+        error: `no team member with the address ${ref.email}`
+    };
+}
+/**
+ * Runs one CRM step for the person the event names: the executor the CRM
+ * registers on the server-step seam for every type in `CRM_STEP_TYPES`.
+ *
+ * Never throws for a plan without the CRM, a missing person, an unknown owner
+ * or a site with no org — those are answered as `error` so the run records
+ * them; a Firestore failure propagates, and the engine records it the same
+ * way.
+ */ export async function runCrmAutomationStep(request, nowMs = Date.now()) {
+    var _contact_data_email, _env_org;
+    if (!checkEntitlement(request.org, CRM_SUITE_FEATURE)) {
+        return {
+            error: `CRM steps require the ${planLabelGrantingFeature(CRM_SUITE_FEATURE)} plan`
+        };
+    }
+    const env = {
+        hostId: request.hostId,
+        org: request.org,
+        orgId: request.orgId
+    };
+    const step = request.step;
+    const actionId = request.run.id;
+    const { hostId } = env;
+    const contact = await resolveEventContact(hostId, request.payload);
+    if (!contact) {
+        var _ref, _request_payload_contactId;
+        const named = String((_ref = (_request_payload_contactId = request.payload['contactId']) != null ? _request_payload_contactId : request.payload['email']) != null ? _ref : '').trim();
+        return {
+            error: named ? `no contact this site can see for ${named}` : 'the event names no contact — no contactId or email in its payload'
+        };
+    }
+    /*
+   * THE HOLDER whose facet the write addresses — the site's consent group,
+   * which is the site alone unless the org declared the site one of a set
+   * that presents as one sender. Same resolution the capture doors use, so a
+   * stage set here lands in the facet the console reads.
+   */ const group = await consentGroupForSite(hostId);
+    const facet = readContactFacet(contact.data, group.groupId);
+    const email = String((_contact_data_email = contact.data['email']) != null ? _contact_data_email : '');
+    if (step.type === 'setContactStage') {
+        var _facet_lifecycleStage;
+        const previous = (_facet_lifecycleStage = facet.lifecycleStage) != null ? _facet_lifecycleStage : '';
+        const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage];
+        /*
+     * A stage set to what it already is changes nothing and ANNOUNCES
+     * nothing. The write is skipped so the row's `updatedAt` does not move for
+     * a non-event, and the absent emit is what stops an action that sets the
+     * stage it listens for from re-running on its own write — the engine's
+     * nesting cap bounds that chain, this ends it at once.
+     */ if (previous === step.lifecycleStage) {
+            return {
+                detail: `${label} (already)`
+            };
+        }
+        await contact.ref.update({
+            [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        // The stage is what the Contacts list filters by (AGL-3321).
+        await restampCrmListFieldsAt(contact.ref, 'contacts');
+        /*
+     * A stage set by an automation IS a stage change, and the action
+     * listening for it must run — but through the engine's nesting cap, so
+     * the event is answered back for the engine to raise, never raised here.
+     */ return {
+            detail: label,
+            emit: {
+                event: 'contactStageChanged',
+                payload: {
+                    contactId: contact.id,
+                    email,
+                    lifecycleStage: step.lifecycleStage,
+                    previousStage: previous
+                }
+            }
+        };
+    }
+    if (step.type === 'addContactTag') {
+        var _step_tag;
+        const tag = String((_step_tag = step.tag) != null ? _step_tag : '').trim().slice(0, CONTACT_TAG_MAX_LENGTH);
+        if (!tag) return {
+            error: 'the step has no tag'
+        };
+        // `arrayUnion`, so the tag a merchant already applied by hand is not
+        // duplicated and the tags beside it are kept.
+        await contact.ref.update({
+            [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        // The tags are what the Contacts list filters by (AGL-3321).
+        await restampCrmListFieldsAt(contact.ref, 'contacts');
+        return {
+            detail: tag
+        };
+    }
+    if (step.type === 'assignContactOwner') {
+        /*
+     * Through the one server assignment (AGL-2618), in both of the step's
+     * modes, rather than a facet write of its own: the helper is what moves
+     * the round-robin pointer inside the transaction that writes the owner,
+     * mirrors the owner onto the site's lead, and tells the new owner. A
+     * member named on the step is still resolved here — by address against
+     * the roster, as before — and handed over by uid; the helper checks the
+     * roster document again, which is one read and the same answer.
+     */ let assign;
+        let named = 'round robin';
+        if (step.roundRobin === true) {
+            assign = {
+                roundRobin: true
+            };
+        } else {
+            const owner = await resolveMemberUid(env.orgId, {
+                uid: step.ownerUid,
+                email: step.ownerEmail
+            }, 'owner');
+            if ('error' in owner) return {
+                error: owner.error
+            };
+            assign = {
+                memberUid: owner.uid
+            };
+            named = owner.detail;
+        }
+        const verdict = await reassignContactOwner({
+            hostId,
+            contactId: contact.id,
+            email,
+            assign
+        });
+        if (verdict.outcome === 'none') {
+            return {
+                error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason]
+            };
+        }
+        if (verdict.outcome === 'unchanged') {
+            return {
+                detail: `${named} (already)`
+            };
+        }
+        return {
+            detail: step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named
+        };
+    }
+    // The two record creators: a task and an activity are documents of their
+    // own beside the contact, stamped with the scope a contact captured on this
+    // site would carry — `crmScopeTokens` is the create path's own expression,
+    // so a record an automation made is visible to exactly the sites a record a
+    // person made would be.
+    if (!env.orgId) return {
+        error: 'this site has no organization'
+    };
+    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(env.orgId);
+    const visibleTo = crmScopeTokens((_env_org = env.org) != null ? _env_org : null, group);
+    const links = _extends({
+        contactId: contact.id
+    }, facet.companyId ? {
+        companyId: facet.companyId
+    } : {});
+    if (step.type === 'createCrmTask') {
+        var _step_title, _facet_ownerUid;
+        var _step_assigneeUid, _step_assigneeEmail;
+        const title = String((_step_title = step.title) != null ? _step_title : '').trim().slice(0, 200);
+        if (!title) return {
+            error: 'the task has no title'
+        };
+        const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0));
+        /*
+     * The assignee the step names, else the person who OWNS the contact, else
+     * nobody. A follow-up task belongs to whoever holds the relationship, and
+     * an automation that had to name one person for every contact it touches
+     * would assign the whole list to one rep. A named assignee who cannot be
+     * resolved is an error rather than a fallback to the owner: the author
+     * named somebody on purpose.
+     */ let assignee = (_facet_ownerUid = facet.ownerUid) != null ? _facet_ownerUid : '';
+        if (((_step_assigneeUid = step.assigneeUid) == null ? void 0 : _step_assigneeUid.trim()) || ((_step_assigneeEmail = step.assigneeEmail) == null ? void 0 : _step_assigneeEmail.trim())) {
+            const named = await resolveMemberUid(env.orgId, {
+                uid: step.assigneeUid,
+                email: step.assigneeEmail
+            }, 'assignee');
+            if ('error' in named) return {
+                error: named.error
+            };
+            assignee = named.uid;
+        }
+        const dueAtMs = nowMs + dueInDays * DAY_MS;
+        const priority = step.priority === 'high' || step.priority === 'low' ? step.priority : 'normal';
+        // The org's labels for the meanings the step names (AGL-3517).
+        const labels = crmTaskLabelsForNew(await readCrmTaskPicklists(firebaseAdmin.app().firestore(), env.orgId), {
+            kind: step.kind,
+            priority
+        });
+        const task = _extends({
+            title,
+            kind: step.kind,
+            priority,
+            status: 'open'
+        }, labels, {
+            dueAtMs,
+            // The reminder a person's task gets (AGL-2659): the due time.
+            remindAtMs: crmTaskReminderAfterEdit({
+                dueAtMs,
+                previous: null
+            })
+        }, assignee ? {
+            assigneeUid: assignee
+        } : {}, {
+            createdByUid: '',
+            sourceActionId: actionId
+        }, links, {
+            hostId,
+            visibleTo,
+            createdAt: FieldValue.serverTimestamp(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        // What the Tasks list searches by (AGL-3321), beside the task.
+        await orgRef.collection(CRM_COLLECTIONS.tasks).add(_extends({}, task, crmTaskListFields(task)));
+        // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);
+        // a figure that could not move is the Fields section's recompute's.
+        await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [
+            links
+        ]).catch((error)=>{
+            console.error('[crm] next activity could not be recomputed', env.orgId, error);
+        });
+        return {
+            detail: title.slice(0, 60)
+        };
+    }
+    if (step.type === 'logCrmActivity') {
+        var _step_body;
+        const body = String((_step_body = step.body) != null ? _step_body : '').trim().slice(0, 2000);
+        if (!body) return {
+            error: 'the activity has no body'
+        };
+        /*
+     * The per-record ceiling (AGL-2611), and this step is the writer it exists
+     * for: a flow that logs on every page view fills one person's log in an
+     * afternoon. Refused into the run history as an error, the way an
+     * unresolvable assignee is, so the merchant reads why the flow stopped
+     * writing rather than finding a log that silently stopped.
+     */ const logged = await countCrmActivitiesForRecord(orgRef, links);
+        if (!crmActivityLogHasRoom(logged)) {
+            return {
+                error: CRM_ACTIVITY_LOG_FULL_MESSAGE
+            };
+        }
+        const direction = crmActivityDirection(step.kind, step.direction);
+        const activity = _extends({
+            kind: step.kind,
+            body
+        }, direction ? {
+            direction
+        } : {}, {
+            atMs: nowMs,
+            byUid: '',
+            sourceActionId: actionId
+        }, links, {
+            hostId,
+            visibleTo,
+            createdAt: FieldValue.serverTimestamp(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        await orgRef.collection(CRM_COLLECTIONS.activities).add(activity);
+        return {
+            detail: step.kind
+        };
+    }
+    return {
+        error: `unknown CRM step "${step.type}"`
+    };
+}
+/**
+ * Whether — and where — an email a plugin is about to send lands on a
+ * timeline: the CRM's answer to the record timeline's `prepareEmail`.
+ *
+ * An automation's `sendEmail` step is not a CRM step: it mails whatever
+ * address the event carries, to a person who may be nobody the CRM knows. It
+ * earns a row on exactly one condition, that the message is ADDRESSED TO THE
+ * CONTACT the sender means — the person the request's link finds, at the
+ * address the row holds. A welcome sequence to a new contact is that; an
+ * internal alert routed to a merchant's own address through `toField` is not,
+ * and a row for it would put the merchant's inbox on a customer's history.
+ *
+ * Prepared ahead of the send, for the reason the console route mints its id
+ * first: the delivery webhook has nothing but the tags on the message to find
+ * the row with. Nothing is written until `file` is called, once the provider
+ * accepted the message. A workspace whose plan does not carry the CRM, a
+ * record at the activity ceiling and a site with no org earn no row — the
+ * message still goes, because the ceiling bounds the log and not the mail.
+ *
+ * **Never throws**, and neither does `file`. The row is bookkeeping beside a
+ * send, and a lookup that fails must not become a message that never left —
+ * the posture every meter beside a send takes. A failure is logged and the
+ * message goes out untagged.
+ */ export async function prepareCrmRecordEmail(request) {
+    var _request_orgId, _request_hostId;
+    const orgId = String((_request_orgId = request.orgId) != null ? _request_orgId : '').trim();
+    const hostId = String((_request_hostId = request.hostId) != null ? _request_hostId : '').trim();
+    if (!orgId || !hostId) return null;
+    const address = normalizeContactEmail(request.to);
+    if (!address) return null;
+    try {
+        var _data;
+        const firestore = firebaseAdmin.app().firestore();
+        const orgRef = firestore.collection('orgs').doc(orgId);
+        // The org the caller already read, or the one read here once.
+        const org = request.org !== undefined ? request.org : (_data = (await orgRef.get()).data()) != null ? _data : null;
+        if (!checkEntitlement(org, CRM_SUITE_FEATURE)) {
+            return null;
+        }
+        const contact = await resolveEventContact(hostId, request.link);
+        if (!contact || normalizeContactEmail(contact.data['email']) !== address) {
+            return null;
+        }
+        const group = await consentGroupForSite(hostId);
+        const facet = readContactFacet(contact.data, group.groupId);
+        const link = _extends({
+            contactId: contact.id
+        }, facet.companyId ? {
+            companyId: facet.companyId
+        } : {});
+        if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {
+            return null;
+        }
+        const ref = newCrmActivityRef(firestore, orgId);
+        const visibleTo = crmScopeTokens(org != null ? org : null, group);
+        return {
+            tags: crmEmailDeliveryTags({
+                orgId,
+                hostId,
+                activityId: ref.id
+            }),
+            /*
+       * The same shape the console route logs — `buildCrmEmailActivity` is the
+       * one builder — with the sender's id as its source and nobody as its
+       * author. Never throws: the message has left, and a row that could not
+       * be written is a gap on the timeline rather than a failed send.
+       */ async file (sent) {
+                try {
+                    var _normalizeContactEmail, _sent_atMs;
+                    await writeCrmEmailActivity(ref, buildCrmEmailActivity({
+                        subject: sent.subject,
+                        body: sent.body,
+                        to: (_normalizeContactEmail = normalizeContactEmail(sent.to)) != null ? _normalizeContactEmail : sent.to,
+                        atMs: (_sent_atMs = sent.atMs) != null ? _sent_atMs : Date.now(),
+                        byUid: '',
+                        sourceActionId: sent.sourceRef,
+                        link,
+                        hostId,
+                        visibleTo
+                    }));
+                } catch (error) {
+                    console.error('[crm] automation email activity write failed', ref.id, error);
+                }
+            }
+        };
+    } catch (error) {
+        console.error('[crm] automation email activity could not be prepared', hostId, error);
+        return null;
+    }
+}
+
+//# sourceMappingURL=automation-steps.js.map

package/src/lib/server/automation-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/automation-steps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  buildCrmEmailActivity,\n  checkEntitlement,\n  CONTACT_LIFECYCLE_STAGE_LABELS,\n  CONTACT_TAG_MAX_LENGTH,\n  contactFacetPath,\n  CRM_ACTIVITY_LOG_FULL_MESSAGE,\n  CRM_COLLECTIONS,\n  crmActivityLogHasRoom,\n  type CrmActivity,\n  type CrmActivityDirection,\n  crmActivityDirection,\n  type CrmActivityLink,\n  type CrmTask,\n  type CrmTaskPriority,\n  crmEmailDeliveryTags,\n  crmScopeTokens,\n  crmTaskLabelsForNew,\n  crmTaskListFields,\n  crmTaskReminderAfterEdit,\n  normalizeContactEmail,\n  parseCrmMemberRef,\n  planLabelGrantingFeature,\n  readContactFacet,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport type {\n  PluginRecordEmailPrepareRequest,\n  PluginRecordPreparedEmail,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-timeline'\nimport type {\n  ServerStepAnswer,\n  ServerStepRequest,\n} from '@aglyn/aglyn/plugin-manager/plugin-server-steps'\nimport {\n  consentGroupForSite,\n  countCrmActivitiesForRecord,\n  firebaseAdmin,\n  newCrmActivityRef,\n  orgDataQueryForHost,\n  recomputeCrmNextTaskAt,\n  restampCrmListFieldsAt,\n  writeCrmEmailActivity,\n} from '@aglyn/tenant-data-admin'\n// The leaf, not the barrel: the specs substitute the barrel wholesale, and\n// the lookup must reach the real index logic under them.\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { FieldValue } from 'firebase-admin/firestore'\n// The leaf, not the runtime barrel: the specs substitute it.\nimport {\n  OWNER_ASSIGNMENT_REFUSALS,\n  reassignContactOwner,\n} from './assign-contact-owner'\nimport type { InteractionStepGuard } from '@aglyn/aglyn/app-utils/site-interactions'\nimport type { ContactLifecycleStage, CrmActivityKind, CrmTaskKind } from '@aglyn/aglyn/app-utils/crm-kinds'\nimport type { CRM_STEP_TYPES } from '../constants/bundle-common'\nimport { readCrmTaskPicklists } from './read-picklist'\nimport { CRM_SUITE_FEATURE } from './suite-gate'\n\n/**\n * THE AUTOMATION STEPS THAT WRITE THE CRM (AGL-2605), run for the automation\n * engine through the platform's server-step seam (`plugin-server-steps`,\n * AGL-3080): `setContactStage`, `addContactTag`, `assignContactOwner`,\n * `createCrmTask` and `logCrmActivity`.\n *\n * The engine keeps the step's guard, the run's order, its history and the\n * nesting cap; this answers what the step did. A refusal is ANSWERED as\n * `error`, never thrown, and its words are the line the run history carries —\n * the same words the engine wrote when these steps were its own.\n *\n * The five share one shape no other step has: each begins by finding THE\n * PERSON the event is about, and each writes either inside the site's facet on\n * that person or a record stamped with the site's scope. One resolver and one\n * scope expression, used five times, rather than five copies drifting apart.\n *\n * ## The person is the event's, never the step's\n *\n * A step carries no contact reference. The contact is whoever the event\n * names — by `contactId` when the emitting door knew the document, and by\n * `email` otherwise, which is what every pre-CRM event carries. Both lookups\n * are scoped to what THIS site may see: a document the id names but the site\n * cannot read is treated as absent, exactly as the scoped query would have\n * treated it, so an event replayed against the wrong site reaches nobody.\n *\n * ## A missing person is a reported no-op\n *\n * Nothing is written and the step's error names the reason, which lands in\n * the run summary beside the trigger — the same place \"why didn't it fire?\"\n * is answered for every other step. Silence here would make a mis-wired\n * trigger (a form with no email field) indistinguishable from a working one.\n *\n * ## The plan gate is the CRM's\n *\n * Every step is refused on a workspace whose plan does not carry the CRM,\n * into the run history with the tier that carries it, so a Free workspace\n * whose flow names a CRM step reads why the step did nothing rather than a\n * log that says it ran. The org document is the one the run's gate already\n * read, handed over with the step, so the check costs no read.\n *\n * The same module answers the record timeline's `prepareEmail` (AGL-2615): an\n * automation's email addressed to the contact the event is about is filed on\n * that contact's timeline — see {@link prepareCrmRecordEmail}.\n */\n\n/** One of the steps this module runs. */\nexport type CrmStepType = (typeof CRM_STEP_TYPES)[number]\n\n/**\n * A CRM step, as it is stored: the CRM's own shapes of the steps it runs. The\n * automation editor writes them and checks them; `apps/console/specs/\n * crm-automation-steps.spec.ts` runs what it writes through this module.\n */\nexport type CrmAutomationStep = (\n  | { type: 'setContactStage'; lifecycleStage: ContactLifecycleStage }\n  | { type: 'addContactTag'; tag: string }\n  | { type: 'assignContactOwner'; ownerUid?: string; ownerEmail?: string; roundRobin?: boolean }\n  | {\n      type: 'createCrmTask'\n      title: string\n      kind: CrmTaskKind\n      /** `normal` when absent — the steps written before priorities were (AGL-3517). */\n      priority?: CrmTaskPriority\n      dueInDays: number\n      assigneeUid?: string\n      assigneeEmail?: string\n    }\n  | {\n      type: 'logCrmActivity'\n      kind: CrmActivityKind\n      body: string\n      /** Which way a call or an email went (AGL-3517). */\n      direction?: CrmActivityDirection\n    }\n) & { when?: InteractionStepGuard | null } & { type: CrmStepType }\n\n/** The site, the plan and the org a step or an email is answered for. */\ninterface CrmStepEnv {\n  hostId: string\n  /** The owning org's billing doc, already read by the run's gate. */\n  org: unknown\n  orgId: string | null\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000\n\ninterface ResolvedContact {\n  id: string\n  ref: FirebaseFirestore.DocumentReference\n  data: Record<string, unknown>\n}\n\n/**\n * The contact an event names, as this site may see it.\n *\n * Id first, because a CRM event carries the document the door just wrote and\n * a lookup by id is a read, not a query. The address second, through the\n * org's address index narrowed to this site (AGL-2633), for every event that\n * predates the CRM and knows only who filled in the form — so an address a\n * merge folded into another record still reaches the person who now holds it.\n */\nasync function resolveEventContact(\n  hostId: string,\n  named: { contactId?: unknown; email?: unknown },\n): Promise<ResolvedContact | null> {\n  const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts')\n  const contactId = String(named.contactId ?? '').trim()\n  if (contactId) {\n    const doc = await contactsRef.doc(contactId).get()\n    if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {\n      return { id: doc.id, ref: doc.ref, data: doc.data() ?? {} }\n    }\n  }\n  const hit = await findContactByEmail(contactsRef, named.email, { hostId })\n  return hit ? { id: hit.id, ref: hit.ref, data: hit.data() ?? {} } : null\n}\n\n/**\n * The uid a step names for somebody on the team — an owner, an assignee —\n * resolved against the org's roster, whichever way the step named them.\n *\n * A step names a member by uid when a picker wrote it and by address when a\n * person typed it, and the editor's one text field accepts either — so both\n * fields are read through `parseCrmMemberRef`, and an address typed into the\n * uid slot or a uid typed into the address slot still names the person.\n *\n * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by the\n * uid, so a uid costs one document read and must exist: `ownerUid` and\n * `assigneeUid` are fields every reader resolves as a member, and a stranger's\n * uid in one is a task nobody on the team can find. An address is matched on\n * the roster's own `email` field, and two production paths create a member\n * document WITHOUT one (a host-access re-grant, and an add whose auth record\n * carried none) — such a member is named by uid, which is the reason the\n * editor takes one.\n *\n * The roster is the only directory consulted. A project-level Auth lookup by\n * address would resolve people who are not on this organization at all\n * (AGL-1122). A reference that resolves neither way is an error, not a stored\n * string.\n */\nasync function resolveMemberUid(\n  orgId: string | null,\n  named: { uid?: string; email?: string },\n  role: 'owner' | 'assignee',\n): Promise<{ uid: string; detail: string } | { error: string }> {\n  const ref = parseCrmMemberRef(named.uid) ?? parseCrmMemberRef(named.email)\n  if (!ref) return { error: `no ${role} named on the step` }\n  if (!orgId) return { error: 'this site has no organization' }\n  const members = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection('members')\n  if (ref.kind === 'uid') {\n    const member = await members.doc(ref.uid).get()\n    if (member.exists) return { uid: ref.uid, detail: ref.uid }\n    return { error: `no team member with the id ${ref.uid}` }\n  }\n  const byField = (await members.where('email', '==', ref.email).limit(1).get()).docs[0]\n  if (byField) return { uid: byField.id, detail: ref.email }\n  return { error: `no team member with the address ${ref.email}` }\n}\n\n/**\n * Runs one CRM step for the person the event names: the executor the CRM\n * registers on the server-step seam for every type in `CRM_STEP_TYPES`.\n *\n * Never throws for a plan without the CRM, a missing person, an unknown owner\n * or a site with no org — those are answered as `error` so the run records\n * them; a Firestore failure propagates, and the engine records it the same\n * way.\n */\nexport async function runCrmAutomationStep(\n  request: ServerStepRequest,\n  nowMs = Date.now(),\n): Promise<ServerStepAnswer> {\n  if (!checkEntitlement(request.org as Parameters<typeof checkEntitlement>[0], CRM_SUITE_FEATURE)) {\n    return { error: `CRM steps require the ${planLabelGrantingFeature(CRM_SUITE_FEATURE)} plan` }\n  }\n  const env: CrmStepEnv = { hostId: request.hostId, org: request.org, orgId: request.orgId }\n  const step = request.step as unknown as CrmAutomationStep\n  const actionId = request.run.id\n  const { hostId } = env\n  const contact = await resolveEventContact(hostId, request.payload)\n  if (!contact) {\n    const named = String(request.payload['contactId'] ?? request.payload['email'] ?? '').trim()\n    return {\n      error: named\n        ? `no contact this site can see for ${named}`\n        : 'the event names no contact — no contactId or email in its payload',\n    }\n  }\n  /*\n   * THE HOLDER whose facet the write addresses — the site's consent group,\n   * which is the site alone unless the org declared the site one of a set\n   * that presents as one sender. Same resolution the capture doors use, so a\n   * stage set here lands in the facet the console reads.\n   */\n  const group = await consentGroupForSite(hostId)\n  const facet = readContactFacet(contact.data, group.groupId)\n  const email = String(contact.data['email'] ?? '')\n\n  if (step.type === 'setContactStage') {\n    const previous = facet.lifecycleStage ?? ''\n    const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage]\n    /*\n     * A stage set to what it already is changes nothing and ANNOUNCES\n     * nothing. The write is skipped so the row's `updatedAt` does not move for\n     * a non-event, and the absent emit is what stops an action that sets the\n     * stage it listens for from re-running on its own write — the engine's\n     * nesting cap bounds that chain, this ends it at once.\n     */\n    if (previous === step.lifecycleStage) {\n      return { detail: `${label} (already)` }\n    }\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The stage is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contact.ref, 'contacts')\n    /*\n     * A stage set by an automation IS a stage change, and the action\n     * listening for it must run — but through the engine's nesting cap, so\n     * the event is answered back for the engine to raise, never raised here.\n     */\n    return {\n      detail: label,\n      emit: {\n        event: 'contactStageChanged',\n        payload: {\n          contactId: contact.id,\n          email,\n          lifecycleStage: step.lifecycleStage,\n          previousStage: previous,\n        },\n      },\n    }\n  }\n\n  if (step.type === 'addContactTag') {\n    const tag = String(step.tag ?? '')\n      .trim()\n      .slice(0, CONTACT_TAG_MAX_LENGTH)\n    if (!tag) return { error: 'the step has no tag' }\n    // `arrayUnion`, so the tag a merchant already applied by hand is not\n    // duplicated and the tags beside it are kept.\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The tags are what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contact.ref, 'contacts')\n    return { detail: tag }\n  }\n\n  if (step.type === 'assignContactOwner') {\n    /*\n     * Through the one server assignment (AGL-2618), in both of the step's\n     * modes, rather than a facet write of its own: the helper is what moves\n     * the round-robin pointer inside the transaction that writes the owner,\n     * mirrors the owner onto the site's lead, and tells the new owner. A\n     * member named on the step is still resolved here — by address against\n     * the roster, as before — and handed over by uid; the helper checks the\n     * roster document again, which is one read and the same answer.\n     */\n    let assign: { memberUid: string } | { roundRobin: true }\n    let named = 'round robin'\n    if (step.roundRobin === true) {\n      assign = { roundRobin: true }\n    } else {\n      const owner = await resolveMemberUid(\n        env.orgId,\n        { uid: step.ownerUid, email: step.ownerEmail },\n        'owner',\n      )\n      if ('error' in owner) return { error: owner.error }\n      assign = { memberUid: owner.uid }\n      named = owner.detail\n    }\n    const verdict = await reassignContactOwner({\n      hostId,\n      contactId: contact.id,\n      email,\n      assign,\n    })\n    if (verdict.outcome === 'none') {\n      return { error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason] }\n    }\n    if (verdict.outcome === 'unchanged') {\n      return { detail: `${named} (already)` }\n    }\n    return {\n      detail: step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named,\n    }\n  }\n\n  // The two record creators: a task and an activity are documents of their\n  // own beside the contact, stamped with the scope a contact captured on this\n  // site would carry — `crmScopeTokens` is the create path's own expression,\n  // so a record an automation made is visible to exactly the sites a record a\n  // person made would be.\n  if (!env.orgId) return { error: 'this site has no organization' }\n  const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(env.orgId)\n  const visibleTo = crmScopeTokens((env.org ?? null) as Record<string, unknown> | null, group)\n  const links = {\n    contactId: contact.id,\n    ...(facet.companyId ? { companyId: facet.companyId } : {}),\n  }\n\n  if (step.type === 'createCrmTask') {\n    const title = String(step.title ?? '')\n      .trim()\n      .slice(0, 200)\n    if (!title) return { error: 'the task has no title' }\n    const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0))\n    /*\n     * The assignee the step names, else the person who OWNS the contact, else\n     * nobody. A follow-up task belongs to whoever holds the relationship, and\n     * an automation that had to name one person for every contact it touches\n     * would assign the whole list to one rep. A named assignee who cannot be\n     * resolved is an error rather than a fallback to the owner: the author\n     * named somebody on purpose.\n     */\n    let assignee = facet.ownerUid ?? ''\n    if (step.assigneeUid?.trim() || step.assigneeEmail?.trim()) {\n      const named = await resolveMemberUid(\n        env.orgId,\n        { uid: step.assigneeUid, email: step.assigneeEmail },\n        'assignee',\n      )\n      if ('error' in named) return { error: named.error }\n      assignee = named.uid\n    }\n    const dueAtMs = nowMs + dueInDays * DAY_MS\n    const priority: CrmTaskPriority =\n      step.priority === 'high' || step.priority === 'low' ? step.priority : 'normal'\n    // The org's labels for the meanings the step names (AGL-3517).\n    const labels = crmTaskLabelsForNew(\n      await readCrmTaskPicklists(firebaseAdmin.app().firestore(), env.orgId),\n      { kind: step.kind, priority },\n    )\n    const task: CrmTask = {\n      title,\n      kind: step.kind,\n      priority,\n      status: 'open',\n      ...labels,\n      dueAtMs,\n      // The reminder a person's task gets (AGL-2659): the due time.\n      remindAtMs: crmTaskReminderAfterEdit({ dueAtMs, previous: null }),\n      ...(assignee ? { assigneeUid: assignee } : {}),\n      createdByUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    // What the Tasks list searches by (AGL-3321), beside the task.\n    await orgRef.collection(CRM_COLLECTIONS.tasks).add({ ...task, ...crmTaskListFields(task) })\n    // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);\n    // a figure that could not move is the Fields section's recompute's.\n    await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [links]).catch(\n      (error: unknown) => {\n        console.error('[crm] next activity could not be recomputed', env.orgId, error)\n      },\n    )\n    return { detail: title.slice(0, 60) }\n  }\n\n  if (step.type === 'logCrmActivity') {\n    const body = String(step.body ?? '')\n      .trim()\n      .slice(0, 2000)\n    if (!body) return { error: 'the activity has no body' }\n    /*\n     * The per-record ceiling (AGL-2611), and this step is the writer it exists\n     * for: a flow that logs on every page view fills one person's log in an\n     * afternoon. Refused into the run history as an error, the way an\n     * unresolvable assignee is, so the merchant reads why the flow stopped\n     * writing rather than finding a log that silently stopped.\n     */\n    const logged = await countCrmActivitiesForRecord(orgRef, links)\n    if (!crmActivityLogHasRoom(logged)) {\n      return { error: CRM_ACTIVITY_LOG_FULL_MESSAGE }\n    }\n    const direction = crmActivityDirection(step.kind, step.direction)\n    const activity: CrmActivity = {\n      kind: step.kind,\n      body,\n      ...(direction ? { direction } : {}),\n      atMs: nowMs,\n      byUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    await orgRef.collection(CRM_COLLECTIONS.activities).add(activity)\n    return { detail: step.kind }\n  }\n\n  return { error: `unknown CRM step \"${(step as { type: string }).type}\"` }\n}\n\n/**\n * Whether — and where — an email a plugin is about to send lands on a\n * timeline: the CRM's answer to the record timeline's `prepareEmail`.\n *\n * An automation's `sendEmail` step is not a CRM step: it mails whatever\n * address the event carries, to a person who may be nobody the CRM knows. It\n * earns a row on exactly one condition, that the message is ADDRESSED TO THE\n * CONTACT the sender means — the person the request's link finds, at the\n * address the row holds. A welcome sequence to a new contact is that; an\n * internal alert routed to a merchant's own address through `toField` is not,\n * and a row for it would put the merchant's inbox on a customer's history.\n *\n * Prepared ahead of the send, for the reason the console route mints its id\n * first: the delivery webhook has nothing but the tags on the message to find\n * the row with. Nothing is written until `file` is called, once the provider\n * accepted the message. A workspace whose plan does not carry the CRM, a\n * record at the activity ceiling and a site with no org earn no row — the\n * message still goes, because the ceiling bounds the log and not the mail.\n *\n * **Never throws**, and neither does `file`. The row is bookkeeping beside a\n * send, and a lookup that fails must not become a message that never left —\n * the posture every meter beside a send takes. A failure is logged and the\n * message goes out untagged.\n */\nexport async function prepareCrmRecordEmail(\n  request: PluginRecordEmailPrepareRequest,\n): Promise<PluginRecordPreparedEmail | null> {\n  const orgId = String(request.orgId ?? '').trim()\n  const hostId = String(request.hostId ?? '').trim()\n  if (!orgId || !hostId) return null\n  const address = normalizeContactEmail(request.to)\n  if (!address) return null\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(orgId)\n    // The org the caller already read, or the one read here once.\n    const org =\n      request.org !== undefined ? request.org : ((await orgRef.get()).data() ?? null)\n    if (!checkEntitlement(org as Parameters<typeof checkEntitlement>[0], CRM_SUITE_FEATURE)) {\n      return null\n    }\n    const contact = await resolveEventContact(hostId, request.link)\n    if (!contact || normalizeContactEmail(contact.data['email']) !== address) {\n      return null\n    }\n    const group = await consentGroupForSite(hostId)\n    const facet = readContactFacet(contact.data, group.groupId)\n    const link: CrmActivityLink = {\n      contactId: contact.id,\n      ...(facet.companyId ? { companyId: facet.companyId } : {}),\n    }\n    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {\n      return null\n    }\n    const ref = newCrmActivityRef(firestore, orgId)\n    const visibleTo = crmScopeTokens((org ?? null) as Record<string, unknown> | null, group)\n    return {\n      tags: crmEmailDeliveryTags({ orgId, hostId, activityId: ref.id }),\n      /*\n       * The same shape the console route logs — `buildCrmEmailActivity` is the\n       * one builder — with the sender's id as its source and nobody as its\n       * author. Never throws: the message has left, and a row that could not\n       * be written is a gap on the timeline rather than a failed send.\n       */\n      async file(sent) {\n        try {\n          await writeCrmEmailActivity(\n            ref,\n            buildCrmEmailActivity({\n              subject: sent.subject,\n              body: sent.body,\n              to: normalizeContactEmail(sent.to) ?? sent.to,\n              atMs: sent.atMs ?? Date.now(),\n              byUid: '',\n              sourceActionId: sent.sourceRef,\n              link,\n              hostId,\n              visibleTo,\n            }),\n          )\n        } catch (error) {\n          console.error('[crm] automation email activity write failed', ref.id, error)\n        }\n      },\n    }\n  } catch (error) {\n    console.error('[crm] automation email activity could not be prepared', hostId, error)\n    return null\n  }\n}\n"],"names":["buildCrmEmailActivity","checkEntitlement","CONTACT_LIFECYCLE_STAGE_LABELS","CONTACT_TAG_MAX_LENGTH","contactFacetPath","CRM_ACTIVITY_LOG_FULL_MESSAGE","CRM_COLLECTIONS","crmActivityLogHasRoom","crmActivityDirection","crmEmailDeliveryTags","crmScopeTokens","crmTaskLabelsForNew","crmTaskListFields","crmTaskReminderAfterEdit","normalizeContactEmail","parseCrmMemberRef","planLabelGrantingFeature","readContactFacet","visibleToHost","consentGroupForSite","countCrmActivitiesForRecord","firebaseAdmin","newCrmActivityRef","orgDataQueryForHost","recomputeCrmNextTaskAt","restampCrmListFieldsAt","writeCrmEmailActivity","findContactByEmail","FieldValue","OWNER_ASSIGNMENT_REFUSALS","reassignContactOwner","readCrmTaskPicklists","CRM_SUITE_FEATURE","DAY_MS","resolveEventContact","hostId","named","hit","ref","contactsRef","contactId","String","trim","doc","get","exists","id","data","email","resolveMemberUid","orgId","role","uid","error","members","app","firestore","collection","kind","member","detail","byField","where","limit","docs","runCrmAutomationStep","request","nowMs","Date","now","contact","env","org","step","actionId","run","payload","group","facet","groupId","type","previous","lifecycleStage","label","update","updatedAt","serverTimestamp","emit","event","previousStage","tag","slice","arrayUnion","assign","roundRobin","owner","ownerUid","ownerEmail","memberUid","verdict","outcome","reason","orgRef","visibleTo","links","companyId","title","dueInDays","Math","max","round","Number","assignee","assigneeUid","assigneeEmail","dueAtMs","priority","labels","task","status","remindAtMs","createdByUid","sourceActionId","createdAt","tasks","add","catch","console","body","logged","direction","activity","atMs","byUid","activities","prepareCrmRecordEmail","address","to","undefined","link","tags","activityId","file","sent","subject","sourceRef"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,gBAAgB,EAChBC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,6BAA6B,EAC7BC,eAAe,EACfC,qBAAqB,EAGrBC,oBAAoB,EAIpBC,oBAAoB,EACpBC,cAAc,EACdC,mBAAmB,EACnBC,iBAAiB,EACjBC,wBAAwB,EACxBC,qBAAqB,EACrBC,iBAAiB,EACjBC,wBAAwB,EACxBC,gBAAgB,EAChBC,aAAa,QACR,sBAAqB;AAS5B,SACEC,mBAAmB,EACnBC,2BAA2B,EAC3BC,aAAa,EACbC,iBAAiB,EACjBC,mBAAmB,EACnBC,sBAAsB,EACtBC,sBAAsB,EACtBC,qBAAqB,QAChB,2BAA0B;AACjC,2EAA2E;AAC3E,yDAAyD;AACzD,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,6DAA6D;AAC7D,SACEC,yBAAyB,EACzBC,oBAAoB,QACf,4BAAwB;AAI/B,SAASC,oBAAoB,QAAQ,qBAAiB;AACtD,SAASC,iBAAiB,QAAQ,kBAAc;AAsFhD,MAAMC,SAAS,KAAK,KAAK,KAAK;AAQ9B;;;;;;;;CAQC,GACD,eAAeC,oBACbC,MAAc,EACdC,KAA+C;QAGtBA,kBAQsBC;IAT/C,MAAM,EAAEC,KAAKC,WAAW,EAAE,GAAG,MAAMhB,oBAAoBY,QAAQ;IAC/D,MAAMK,YAAYC,QAAOL,mBAAAA,MAAMI,SAAS,YAAfJ,mBAAmB,IAAIM,IAAI;IACpD,IAAIF,WAAW;QACb,MAAMG,MAAM,MAAMJ,YAAYI,GAAG,CAACH,WAAWI,GAAG;QAChD,IAAID,IAAIE,MAAM,IAAI3B,cAAcyB,IAAIC,GAAG,CAAC,cAAcT,SAAS;gBACpBQ;YAAzC,OAAO;gBAAEG,IAAIH,IAAIG,EAAE;gBAAER,KAAKK,IAAIL,GAAG;gBAAES,IAAI,GAAEJ,YAAAA,IAAII,IAAI,cAARJ,YAAc,CAAC;YAAE;QAC5D;IACF;IACA,MAAMN,MAAM,MAAMV,mBAAmBY,aAAaH,MAAMY,KAAK,EAAE;QAAEb;IAAO;IACxE,OAAOE,MAAM;QAAES,IAAIT,IAAIS,EAAE;QAAER,KAAKD,IAAIC,GAAG;QAAES,IAAI,GAAEV,YAAAA,IAAIU,IAAI,cAARV,YAAc,CAAC;IAAE,IAAI;AACtE;AAEA;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,eAAeY,iBACbC,KAAoB,EACpBd,KAAuC,EACvCe,IAA0B;QAEdpC;IAAZ,MAAMuB,OAAMvB,qBAAAA,kBAAkBqB,MAAMgB,GAAG,aAA3BrC,qBAAgCA,kBAAkBqB,MAAMY,KAAK;IACzE,IAAI,CAACV,KAAK,OAAO;QAAEe,OAAO,CAAC,GAAG,EAAEF,KAAK,kBAAkB,CAAC;IAAC;IACzD,IAAI,CAACD,OAAO,OAAO;QAAEG,OAAO;IAAgC;IAC5D,MAAMC,UAAUjC,cACbkC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXd,GAAG,CAACO,OACJO,UAAU,CAAC;IACd,IAAInB,IAAIoB,IAAI,KAAK,OAAO;QACtB,MAAMC,SAAS,MAAML,QAAQX,GAAG,CAACL,IAAIc,GAAG,EAAER,GAAG;QAC7C,IAAIe,OAAOd,MAAM,EAAE,OAAO;YAAEO,KAAKd,IAAIc,GAAG;YAAEQ,QAAQtB,IAAIc,GAAG;QAAC;QAC1D,OAAO;YAAEC,OAAO,CAAC,2BAA2B,EAAEf,IAAIc,GAAG,EAAE;QAAC;IAC1D;IACA,MAAMS,UAAU,AAAC,CAAA,MAAMP,QAAQQ,KAAK,CAAC,SAAS,MAAMxB,IAAIU,KAAK,EAAEe,KAAK,CAAC,GAAGnB,GAAG,EAAC,EAAGoB,IAAI,CAAC,EAAE;IACtF,IAAIH,SAAS,OAAO;QAAET,KAAKS,QAAQf,EAAE;QAAEc,QAAQtB,IAAIU,KAAK;IAAC;IACzD,OAAO;QAAEK,OAAO,CAAC,gCAAgC,EAAEf,IAAIU,KAAK,EAAE;IAAC;AACjE;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeiB,qBACpBC,OAA0B,EAC1BC,QAAQC,KAAKC,GAAG,EAAE;QA0BGC,qBAwGaC;IAhIlC,IAAI,CAACtE,iBAAiBiE,QAAQM,GAAG,EAA4CxC,oBAAoB;QAC/F,OAAO;YAAEqB,OAAO,CAAC,sBAAsB,EAAErC,yBAAyBgB,mBAAmB,KAAK,CAAC;QAAC;IAC9F;IACA,MAAMuC,MAAkB;QAAEpC,QAAQ+B,QAAQ/B,MAAM;QAAEqC,KAAKN,QAAQM,GAAG;QAAEtB,OAAOgB,QAAQhB,KAAK;IAAC;IACzF,MAAMuB,OAAOP,QAAQO,IAAI;IACzB,MAAMC,WAAWR,QAAQS,GAAG,CAAC7B,EAAE;IAC/B,MAAM,EAAEX,MAAM,EAAE,GAAGoC;IACnB,MAAMD,UAAU,MAAMpC,oBAAoBC,QAAQ+B,QAAQU,OAAO;IACjE,IAAI,CAACN,SAAS;YACSJ,MAAAA;QAArB,MAAM9B,QAAQK,QAAOyB,QAAAA,6BAAAA,QAAQU,OAAO,CAAC,YAAY,YAA5BV,6BAAgCA,QAAQU,OAAO,CAAC,QAAQ,YAAxDV,OAA4D,IAAIxB,IAAI;QACzF,OAAO;YACLW,OAAOjB,QACH,CAAC,iCAAiC,EAAEA,OAAO,GAC3C;QACN;IACF;IACA;;;;;GAKC,GACD,MAAMyC,QAAQ,MAAM1D,oBAAoBgB;IACxC,MAAM2C,QAAQ7D,iBAAiBqD,QAAQvB,IAAI,EAAE8B,MAAME,OAAO;IAC1D,MAAM/B,QAAQP,QAAO6B,sBAAAA,QAAQvB,IAAI,CAAC,QAAQ,YAArBuB,sBAAyB;IAE9C,IAAIG,KAAKO,IAAI,KAAK,mBAAmB;YAClBF;QAAjB,MAAMG,YAAWH,wBAAAA,MAAMI,cAAc,YAApBJ,wBAAwB;QACzC,MAAMK,QAAQjF,8BAA8B,CAACuE,KAAKS,cAAc,CAAC;QACjE;;;;;;KAMC,GACD,IAAID,aAAaR,KAAKS,cAAc,EAAE;YACpC,OAAO;gBAAEtB,QAAQ,GAAGuB,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,MAAMb,QAAQhC,GAAG,CAAC8C,MAAM,CAAC;YACvB,CAAChF,iBAAiByE,MAAME,OAAO,EAAE,kBAAkB,EAAEN,KAAKS,cAAc;YACxEG,WAAWzD,WAAW0D,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM7D,uBAAuB6C,QAAQhC,GAAG,EAAE;QAC1C;;;;KAIC,GACD,OAAO;YACLsB,QAAQuB;YACRI,MAAM;gBACJC,OAAO;gBACPZ,SAAS;oBACPpC,WAAW8B,QAAQxB,EAAE;oBACrBE;oBACAkC,gBAAgBT,KAAKS,cAAc;oBACnCO,eAAeR;gBACjB;YACF;QACF;IACF;IAEA,IAAIR,KAAKO,IAAI,KAAK,iBAAiB;YACdP;QAAnB,MAAMiB,MAAMjD,QAAOgC,YAAAA,KAAKiB,GAAG,YAARjB,YAAY,IAC5B/B,IAAI,GACJiD,KAAK,CAAC,GAAGxF;QACZ,IAAI,CAACuF,KAAK,OAAO;YAAErC,OAAO;QAAsB;QAChD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAMiB,QAAQhC,GAAG,CAAC8C,MAAM,CAAC;YACvB,CAAChF,iBAAiByE,MAAME,OAAO,EAAE,QAAQ,EAAEnD,WAAWgE,UAAU,CAACF;YACjEL,WAAWzD,WAAW0D,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM7D,uBAAuB6C,QAAQhC,GAAG,EAAE;QAC1C,OAAO;YAAEsB,QAAQ8B;QAAI;IACvB;IAEA,IAAIjB,KAAKO,IAAI,KAAK,sBAAsB;QACtC;;;;;;;;KAQC,GACD,IAAIa;QACJ,IAAIzD,QAAQ;QACZ,IAAIqC,KAAKqB,UAAU,KAAK,MAAM;YAC5BD,SAAS;gBAAEC,YAAY;YAAK;QAC9B,OAAO;YACL,MAAMC,QAAQ,MAAM9C,iBAClBsB,IAAIrB,KAAK,EACT;gBAAEE,KAAKqB,KAAKuB,QAAQ;gBAAEhD,OAAOyB,KAAKwB,UAAU;YAAC,GAC7C;YAEF,IAAI,WAAWF,OAAO,OAAO;gBAAE1C,OAAO0C,MAAM1C,KAAK;YAAC;YAClDwC,SAAS;gBAAEK,WAAWH,MAAM3C,GAAG;YAAC;YAChChB,QAAQ2D,MAAMnC,MAAM;QACtB;QACA,MAAMuC,UAAU,MAAMrE,qBAAqB;YACzCK;YACAK,WAAW8B,QAAQxB,EAAE;YACrBE;YACA6C;QACF;QACA,IAAIM,QAAQC,OAAO,KAAK,QAAQ;YAC9B,OAAO;gBAAE/C,OAAOxB,yBAAyB,CAACsE,QAAQE,MAAM,CAAC;YAAC;QAC5D;QACA,IAAIF,QAAQC,OAAO,KAAK,aAAa;YACnC,OAAO;gBAAExC,QAAQ,GAAGxB,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,OAAO;YACLwB,QAAQa,KAAKqB,UAAU,KAAK,OAAO,CAAC,cAAc,EAAEK,QAAQH,QAAQ,EAAE,GAAG5D;QAC3E;IACF;IAEA,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,wBAAwB;IACxB,IAAI,CAACmC,IAAIrB,KAAK,EAAE,OAAO;QAAEG,OAAO;IAAgC;IAChE,MAAMiD,SAASjF,cAAckC,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,QAAQd,GAAG,CAAC4B,IAAIrB,KAAK;IAC/E,MAAMqD,YAAY7F,gBAAgB6D,WAAAA,IAAIC,GAAG,YAAPD,WAAW,MAAyCM;IACtF,MAAM2B,QAAQ;QACZhE,WAAW8B,QAAQxB,EAAE;OACjBgC,MAAM2B,SAAS,GAAG;QAAEA,WAAW3B,MAAM2B,SAAS;IAAC,IAAI,CAAC;IAG1D,IAAIhC,KAAKO,IAAI,KAAK,iBAAiB;YACZP,aAaNK;YACXL,mBAA4BA;QAdhC,MAAMiC,QAAQjE,QAAOgC,cAAAA,KAAKiC,KAAK,YAAVjC,cAAc,IAChC/B,IAAI,GACJiD,KAAK,CAAC,GAAG;QACZ,IAAI,CAACe,OAAO,OAAO;YAAErD,OAAO;QAAwB;QACpD,MAAMsD,YAAYC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,OAAOtC,KAAKkC,SAAS,KAAK;QACnE;;;;;;;KAOC,GACD,IAAIK,YAAWlC,kBAAAA,MAAMkB,QAAQ,YAAdlB,kBAAkB;QACjC,IAAIL,EAAAA,oBAAAA,KAAKwC,WAAW,qBAAhBxC,kBAAkB/B,IAAI,SAAM+B,sBAAAA,KAAKyC,aAAa,qBAAlBzC,oBAAoB/B,IAAI,KAAI;YAC1D,MAAMN,QAAQ,MAAMa,iBAClBsB,IAAIrB,KAAK,EACT;gBAAEE,KAAKqB,KAAKwC,WAAW;gBAAEjE,OAAOyB,KAAKyC,aAAa;YAAC,GACnD;YAEF,IAAI,WAAW9E,OAAO,OAAO;gBAAEiB,OAAOjB,MAAMiB,KAAK;YAAC;YAClD2D,WAAW5E,MAAMgB,GAAG;QACtB;QACA,MAAM+D,UAAUhD,QAAQwC,YAAY1E;QACpC,MAAMmF,WACJ3C,KAAK2C,QAAQ,KAAK,UAAU3C,KAAK2C,QAAQ,KAAK,QAAQ3C,KAAK2C,QAAQ,GAAG;QACxE,+DAA+D;QAC/D,MAAMC,SAAS1G,oBACb,MAAMoB,qBAAqBV,cAAckC,GAAG,GAAGC,SAAS,IAAIe,IAAIrB,KAAK,GACrE;YAAEQ,MAAMe,KAAKf,IAAI;YAAE0D;QAAS;QAE9B,MAAME,OAAgB;YACpBZ;YACAhD,MAAMe,KAAKf,IAAI;YACf0D;YACAG,QAAQ;WACLF;YACHF;YACA,8DAA8D;YAC9DK,YAAY3G,yBAAyB;gBAAEsG;gBAASlC,UAAU;YAAK;WAC3D+B,WAAW;YAAEC,aAAaD;QAAS,IAAI,CAAC;YAC5CS,cAAc;YACdC,gBAAgBhD;WACb8B;YACHrE;YACAoE;YACAoB,WAAW/F,WAAW0D,eAAe;YACrCD,WAAWzD,WAAW0D,eAAe;;QAEvC,+DAA+D;QAC/D,MAAMgB,OAAO7C,UAAU,CAACnD,gBAAgBsH,KAAK,EAAEC,GAAG,CAAC,aAAKP,MAAS1G,kBAAkB0G;QACnF,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM9F,uBAAuBH,cAAckC,GAAG,GAAGC,SAAS,IAAIe,IAAIrB,KAAK,EAAE;YAACsD;SAAM,EAAEsB,KAAK,CACrF,CAACzE;YACC0E,QAAQ1E,KAAK,CAAC,+CAA+CkB,IAAIrB,KAAK,EAAEG;QAC1E;QAEF,OAAO;YAAEO,QAAQ8C,MAAMf,KAAK,CAAC,GAAG;QAAI;IACtC;IAEA,IAAIlB,KAAKO,IAAI,KAAK,kBAAkB;YACdP;QAApB,MAAMuD,OAAOvF,QAAOgC,aAAAA,KAAKuD,IAAI,YAATvD,aAAa,IAC9B/B,IAAI,GACJiD,KAAK,CAAC,GAAG;QACZ,IAAI,CAACqC,MAAM,OAAO;YAAE3E,OAAO;QAA2B;QACtD;;;;;;KAMC,GACD,MAAM4E,SAAS,MAAM7G,4BAA4BkF,QAAQE;QACzD,IAAI,CAACjG,sBAAsB0H,SAAS;YAClC,OAAO;gBAAE5E,OAAOhD;YAA8B;QAChD;QACA,MAAM6H,YAAY1H,qBAAqBiE,KAAKf,IAAI,EAAEe,KAAKyD,SAAS;QAChE,MAAMC,WAAwB;YAC5BzE,MAAMe,KAAKf,IAAI;YACfsE;WACIE,YAAY;YAAEA;QAAU,IAAI,CAAC;YACjCE,MAAMjE;YACNkE,OAAO;YACPX,gBAAgBhD;WACb8B;YACHrE;YACAoE;YACAoB,WAAW/F,WAAW0D,eAAe;YACrCD,WAAWzD,WAAW0D,eAAe;;QAEvC,MAAMgB,OAAO7C,UAAU,CAACnD,gBAAgBgI,UAAU,EAAET,GAAG,CAACM;QACxD,OAAO;YAAEvE,QAAQa,KAAKf,IAAI;QAAC;IAC7B;IAEA,OAAO;QAAEL,OAAO,CAAC,kBAAkB,EAAE,AAACoB,KAA0BO,IAAI,CAAC,CAAC,CAAC;IAAC;AAC1E;AAEA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,OAAO,eAAeuD,sBACpBrE,OAAwC;QAEnBA,gBACCA;IADtB,MAAMhB,QAAQT,QAAOyB,iBAAAA,QAAQhB,KAAK,YAAbgB,iBAAiB,IAAIxB,IAAI;IAC9C,MAAMP,SAASM,QAAOyB,kBAAAA,QAAQ/B,MAAM,YAAd+B,kBAAkB,IAAIxB,IAAI;IAChD,IAAI,CAACQ,SAAS,CAACf,QAAQ,OAAO;IAC9B,MAAMqG,UAAU1H,sBAAsBoD,QAAQuE,EAAE;IAChD,IAAI,CAACD,SAAS,OAAO;IACrB,IAAI;YAK2C;QAJ7C,MAAMhF,YAAYnC,cAAckC,GAAG,GAAGC,SAAS;QAC/C,MAAM8C,SAAS9C,UAAUC,UAAU,CAAC,QAAQd,GAAG,CAACO;QAChD,8DAA8D;QAC9D,MAAMsB,MACJN,QAAQM,GAAG,KAAKkE,YAAYxE,QAAQM,GAAG,IAAI,QAAA,AAAC,CAAA,MAAM8B,OAAO1D,GAAG,EAAC,EAAGG,IAAI,cAAzB,QAA+B;QAC5E,IAAI,CAAC9C,iBAAiBuE,KAA+CxC,oBAAoB;YACvF,OAAO;QACT;QACA,MAAMsC,UAAU,MAAMpC,oBAAoBC,QAAQ+B,QAAQyE,IAAI;QAC9D,IAAI,CAACrE,WAAWxD,sBAAsBwD,QAAQvB,IAAI,CAAC,QAAQ,MAAMyF,SAAS;YACxE,OAAO;QACT;QACA,MAAM3D,QAAQ,MAAM1D,oBAAoBgB;QACxC,MAAM2C,QAAQ7D,iBAAiBqD,QAAQvB,IAAI,EAAE8B,MAAME,OAAO;QAC1D,MAAM4D,OAAwB;YAC5BnG,WAAW8B,QAAQxB,EAAE;WACjBgC,MAAM2B,SAAS,GAAG;YAAEA,WAAW3B,MAAM2B,SAAS;QAAC,IAAI,CAAC;QAE1D,IAAI,CAAClG,sBAAsB,MAAMa,4BAA4BkF,QAAQqC,QAAQ;YAC3E,OAAO;QACT;QACA,MAAMrG,MAAMhB,kBAAkBkC,WAAWN;QACzC,MAAMqD,YAAY7F,eAAgB8D,cAAAA,MAAO,MAAyCK;QAClF,OAAO;YACL+D,MAAMnI,qBAAqB;gBAAEyC;gBAAOf;gBAAQ0G,YAAYvG,IAAIQ,EAAE;YAAC;YAC/D;;;;;OAKC,GACD,MAAMgG,MAAKC,IAAI;gBACb,IAAI;wBAMMjI,wBACEiI;oBANV,MAAMrH,sBACJY,KACAtC,sBAAsB;wBACpBgJ,SAASD,KAAKC,OAAO;wBACrBhB,MAAMe,KAAKf,IAAI;wBACfS,EAAE,GAAE3H,yBAAAA,sBAAsBiI,KAAKN,EAAE,aAA7B3H,yBAAkCiI,KAAKN,EAAE;wBAC7CL,IAAI,GAAEW,aAAAA,KAAKX,IAAI,YAATW,aAAa3E,KAAKC,GAAG;wBAC3BgE,OAAO;wBACPX,gBAAgBqB,KAAKE,SAAS;wBAC9BN;wBACAxG;wBACAoE;oBACF;gBAEJ,EAAE,OAAOlD,OAAO;oBACd0E,QAAQ1E,KAAK,CAAC,gDAAgDf,IAAIQ,EAAE,EAAEO;gBACxE;YACF;QACF;IACF,EAAE,OAAOA,OAAO;QACd0E,QAAQ1E,KAAK,CAAC,yDAAyDlB,QAAQkB;QAC/E,OAAO;IACT;AACF"}