@aglyn/plugins-marketing 1.0.0-beta.143

package/src/lib/server/campaign-recipients.js

@@ -0,0 +1,219 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+// Leaf imports, for the reason `email-events.ts` records: a spec that mocks
+// the `@aglyn/tenant-data-admin` barrel would otherwise replace the real
+// delivery-log reader with whatever the factory listed, and this handler's
+// whole behaviour is what that reader returns.
+import { readCampaignEngagement, EMAIL_CAMPAIGN_ENGAGEMENT_MAX_CAMPAIGNS } from "@aglyn/tenant-data-admin/server/email-delivery-log";
+import { isDocumentId } from "@aglyn/tenant-data-admin/server/document-id";
+import { FieldPath } from "firebase-admin/firestore";
+/**
+ * When a message went out, or is due to.
+ *
+ * There is no one date field: the send path writes `sentAt` from one branch
+ * and `sendAtMs` from the other, and nothing stamps a `createdAt`. Both are
+ * read so a scheduled message sorts beside a sent one instead of falling to
+ * the bottom of every list that touches it.
+ */ function messageTimeMs(snapshot) {
+    var _snapshot_get;
+    const sentAt = snapshot.get('sentAt');
+    if (typeof (sentAt == null ? void 0 : sentAt.toMillis) === 'function') return sentAt.toMillis();
+    const scheduled = Number((_snapshot_get = snapshot.get('sendAtMs')) != null ? _snapshot_get : 0);
+    return Number.isFinite(scheduled) ? scheduled : 0;
+}
+/**
+ * WHO OPENED THIS, ONE PAGE AT A TIME.
+ *
+ * ## Why a server route rather than a client listen
+ *
+ * The per-recipient delivery log lives at `emailDeliveries/{sha256(address)}`
+ * — a platform-level collection keyed by a hash of an address, holding the
+ * mail of every site on the install and every transactional message besides.
+ * No security rule can express "this site's editors may read the rows tagged
+ * with this site" over a collection-group query, because the predicate that
+ * narrows it is the query's own `where`, and a rule cannot require one. So
+ * the narrowing happens here, behind a role check, on a server that holds the
+ * admin credential.
+ *
+ * ## What the role check is
+ *
+ * Admin or editor on the site — deliberately the SAME role the send path
+ * requires, and checked the same way. Whoever may address these people may
+ * see which of them opened; a page that were readable by anyone the campaign
+ * report is readable by would hand the address list to a role that cannot
+ * mail it.
+ *
+ * ## What comes back, and what does not
+ *
+ * The rows carry the recipient address, because that is the question. They do
+ * not carry the sha256 key, the suppression state, or anything about mail
+ * this site did not send: the query is filtered on `hostId` as well as on the
+ * message ids, so a row belonging to another site cannot be returned even if
+ * a message id were wrong.
+ *
+ * ## Two scopes, one route
+ *
+ * `emailId` reads one message; `screenId` reads every message built from one
+ * template. They are one route because they are one question asked at two
+ * altitudes, and splitting them would mean two role checks, two cursors and
+ * two chances for one of them to drift out of agreement with the other.
+ */ export const campaignRecipientsHandler = async (req, res)=>{
+    var _ref, _ref1, _ref2, _ref3, _ref4, _req_headers_authorization;
+    var _req_body, _req_body1, _req_body2, _req_body3, _req_body4;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const hostId = String((_ref = (_req_body = req.body) == null ? void 0 : _req_body.hostId) != null ? _ref : '');
+    const screenId = String((_ref1 = (_req_body1 = req.body) == null ? void 0 : _req_body1.screenId) != null ? _ref1 : '');
+    const emailId = String((_ref2 = (_req_body2 = req.body) == null ? void 0 : _req_body2.emailId) != null ? _ref2 : '');
+    const rawFilter = String((_ref3 = (_req_body3 = req.body) == null ? void 0 : _req_body3.filter) != null ? _ref3 : 'all');
+    const cursor = String((_ref4 = (_req_body4 = req.body) == null ? void 0 : _req_body4.cursor) != null ? _ref4 : '');
+    if (!isDocumentId(hostId)) {
+        return res.status(400).json({
+            error: 'Missing hostId'
+        });
+    }
+    /*
+   * ONE scope, named, and validated as a document id.
+   *
+   * Both are path components on the reads below, so "non-empty" was never the
+   * whole question: a value carrying a slash names the nesting as well as the
+   * document. Refusing both-or-neither rather than preferring one keeps the
+   * answer a function of what was asked, so a caller who sends both because a
+   * component forgot to clear a prop is told rather than silently served the
+   * wrong scope.
+   */ if (Boolean(screenId) === Boolean(emailId)) {
+        return res.status(400).json({
+            error: 'Name one of screenId or emailId'
+        });
+    }
+    if (screenId && !isDocumentId(screenId)) {
+        return res.status(400).json({
+            error: 'Invalid screenId'
+        });
+    }
+    if (emailId && !isDocumentId(emailId)) {
+        return res.status(400).json({
+            error: 'Invalid emailId'
+        });
+    }
+    const filter = rawFilter === 'opened' || rawFilter === 'clicked' ? rawFilter : 'all';
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    try {
+        var _hostSnapshot_get;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(hostId);
+        const hostSnapshot = await hostRef.get();
+        if (!hostSnapshot.exists) {
+            return res.status(404).json({
+                error: 'Unknown site'
+            });
+        }
+        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
+        if (memberRole !== 'admin' && memberRole !== 'editor') {
+            return res.status(403).json({
+                error: 'Not a site admin or editor'
+            });
+        }
+        /*
+     * The messages this read covers.
+     *
+     * A single message is its own id and costs no query. A TEMPLATE resolves
+     * to its messages here rather than taking a list of ids from the request:
+     * a caller who could name message ids could name another site's, and
+     * while the `hostId` filter below would still refuse them, the narrower
+     * input is the one that cannot be got wrong later.
+     *
+     * ORDERED BY DOCUMENT ID, not by date, and that is forced rather than
+     * chosen. A sent message carries `sentAt` and a scheduled one carries
+     * `sendAtMs`; `orderBy` DROPS every document missing the ordered field,
+     * so ordering on either would silently hide half the template's messages.
+     * The document id is the one ordering every message satisfies, it needs
+     * no composite index beside the equality filter, and the messages are
+     * then sorted by send time here — over a window already read, so the
+     * "most recent" the caller is told about really is the most recent.
+     *
+     * One MORE than the reader can span, so the overflow is a fact rather
+     * than the surface silently describing thirty messages as if they were
+     * all of them.
+     */ const ceiling = EMAIL_CAMPAIGN_ENGAGEMENT_MAX_CAMPAIGNS + 1;
+        const messageDocs = emailId ? [
+            await hostRef.collection('campaigns').doc(emailId).get()
+        ].filter((snapshot)=>snapshot.exists) : (await hostRef.collection('campaigns').where('templateScreenId', '==', screenId).orderBy(FieldPath.documentId()).limit(ceiling).get()).docs;
+        if (emailId && !messageDocs.length) {
+            return res.status(404).json({
+                error: 'Unknown email'
+            });
+        }
+        const ordered = [
+            ...messageDocs
+        ].sort((a, b)=>messageTimeMs(b) - messageTimeMs(a));
+        const campaignIds = ordered.map((doc)=>doc.id);
+        const subjects = {};
+        for (const doc of ordered){
+            var _doc_get;
+            subjects[doc.id] = String((_doc_get = doc.get('subject')) != null ? _doc_get : '');
+        }
+        const page = await readCampaignEngagement({
+            hostId,
+            campaignIds,
+            filter,
+            cursor: cursor || null,
+            firestore
+        });
+        return res.status(200).json({
+            /*
+       * The rows, reduced to what the table renders. Not the stored document:
+       * `provider`, `bounceType` and `detail` are operational fields a
+       * merchant has no reading for, and shipping every field of an internal
+       * record to a browser is how one becomes an accidental contract.
+       */ rows: page.rows.map((row)=>{
+                var _ref, _row_subject, _row_campaignId, _ref1, _ref2, _row_timestamps_clicked;
+                return {
+                    messageId: row.messageId,
+                    to: row.to,
+                    subject: (_ref = (_row_subject = row.subject) != null ? _row_subject : subjects[(_row_campaignId = row.campaignId) != null ? _row_campaignId : '']) != null ? _ref : null,
+                    campaignId: row.campaignId,
+                    status: row.status,
+                    openCount: row.openCount,
+                    clickCount: row.clickCount,
+                    clickedLinks: row.clickedLinks,
+                    firstSeenAtMs: row.firstSeenAtMs,
+                    lastEventAtMs: (_ref1 = (_ref2 = (_row_timestamps_clicked = row.timestamps.clicked) != null ? _row_timestamps_clicked : row.timestamps.opened) != null ? _ref2 : row.timestamps.delivered) != null ? _ref1 : row.firstSeenAtMs
+                };
+            }),
+            cursor: page.cursor,
+            lookupFailed: page.lookupFailed,
+            campaignsRead: campaignIds.length - page.campaignsOmitted,
+            campaignsOmitted: page.campaignsOmitted
+        });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({
+            error: 'Could not read recipients'
+        });
+    }
+};
+
+//# sourceMappingURL=campaign-recipients.js.map

package/src/lib/server/campaign-recipients.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketing/src/lib/server/campaign-recipients.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\n// Leaf imports, for the reason `email-events.ts` records: a spec that mocks\n// the `@aglyn/tenant-data-admin` barrel would otherwise replace the real\n// delivery-log reader with whatever the factory listed, and this handler's\n// whole behaviour is what that reader returns.\nimport {\n  readCampaignEngagement,\n  EMAIL_CAMPAIGN_ENGAGEMENT_MAX_CAMPAIGNS,\n  type EmailEngagementFilter,\n} from '@aglyn/tenant-data-admin/server/email-delivery-log'\nimport { isDocumentId } from '@aglyn/tenant-data-admin/server/document-id'\nimport { FieldPath } from 'firebase-admin/firestore'\n\n/**\n * When a message went out, or is due to.\n *\n * There is no one date field: the send path writes `sentAt` from one branch\n * and `sendAtMs` from the other, and nothing stamps a `createdAt`. Both are\n * read so a scheduled message sorts beside a sent one instead of falling to\n * the bottom of every list that touches it.\n */\nfunction messageTimeMs(snapshot: any): number {\n  const sentAt = snapshot.get('sentAt')\n  if (typeof sentAt?.toMillis === 'function') return sentAt.toMillis()\n  const scheduled = Number(snapshot.get('sendAtMs') ?? 0)\n  return Number.isFinite(scheduled) ? scheduled : 0\n}\n\n/**\n * WHO OPENED THIS, ONE PAGE AT A TIME.\n *\n * ## Why a server route rather than a client listen\n *\n * The per-recipient delivery log lives at `emailDeliveries/{sha256(address)}`\n * — a platform-level collection keyed by a hash of an address, holding the\n * mail of every site on the install and every transactional message besides.\n * No security rule can express \"this site's editors may read the rows tagged\n * with this site\" over a collection-group query, because the predicate that\n * narrows it is the query's own `where`, and a rule cannot require one. So\n * the narrowing happens here, behind a role check, on a server that holds the\n * admin credential.\n *\n * ## What the role check is\n *\n * Admin or editor on the site — deliberately the SAME role the send path\n * requires, and checked the same way. Whoever may address these people may\n * see which of them opened; a page that were readable by anyone the campaign\n * report is readable by would hand the address list to a role that cannot\n * mail it.\n *\n * ## What comes back, and what does not\n *\n * The rows carry the recipient address, because that is the question. They do\n * not carry the sha256 key, the suppression state, or anything about mail\n * this site did not send: the query is filtered on `hostId` as well as on the\n * message ids, so a row belonging to another site cannot be returned even if\n * a message id were wrong.\n *\n * ## Two scopes, one route\n *\n * `emailId` reads one message; `screenId` reads every message built from one\n * template. They are one route because they are one question asked at two\n * altitudes, and splitting them would mean two role checks, two cursors and\n * two chances for one of them to drift out of agreement with the other.\n */\nexport const campaignRecipientsHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n\n  const hostId = String(req.body?.hostId ?? '')\n  const screenId = String(req.body?.screenId ?? '')\n  const emailId = String(req.body?.emailId ?? '')\n  const rawFilter = String(req.body?.filter ?? 'all')\n  const cursor = String(req.body?.cursor ?? '')\n  if (!isDocumentId(hostId)) {\n    return res.status(400).json({ error: 'Missing hostId' })\n  }\n  /*\n   * ONE scope, named, and validated as a document id.\n   *\n   * Both are path components on the reads below, so \"non-empty\" was never the\n   * whole question: a value carrying a slash names the nesting as well as the\n   * document. Refusing both-or-neither rather than preferring one keeps the\n   * answer a function of what was asked, so a caller who sends both because a\n   * component forgot to clear a prop is told rather than silently served the\n   * wrong scope.\n   */\n  if (Boolean(screenId) === Boolean(emailId)) {\n    return res.status(400).json({ error: 'Name one of screenId or emailId' })\n  }\n  if (screenId && !isDocumentId(screenId)) {\n    return res.status(400).json({ error: 'Invalid screenId' })\n  }\n  if (emailId && !isDocumentId(emailId)) {\n    return res.status(400).json({ error: 'Invalid emailId' })\n  }\n  const filter: EmailEngagementFilter =\n    rawFilter === 'opened' || rawFilter === 'clicked' ? rawFilter : 'all'\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not a site admin or editor' })\n    }\n\n    /*\n     * The messages this read covers.\n     *\n     * A single message is its own id and costs no query. A TEMPLATE resolves\n     * to its messages here rather than taking a list of ids from the request:\n     * a caller who could name message ids could name another site's, and\n     * while the `hostId` filter below would still refuse them, the narrower\n     * input is the one that cannot be got wrong later.\n     *\n     * ORDERED BY DOCUMENT ID, not by date, and that is forced rather than\n     * chosen. A sent message carries `sentAt` and a scheduled one carries\n     * `sendAtMs`; `orderBy` DROPS every document missing the ordered field,\n     * so ordering on either would silently hide half the template's messages.\n     * The document id is the one ordering every message satisfies, it needs\n     * no composite index beside the equality filter, and the messages are\n     * then sorted by send time here — over a window already read, so the\n     * \"most recent\" the caller is told about really is the most recent.\n     *\n     * One MORE than the reader can span, so the overflow is a fact rather\n     * than the surface silently describing thirty messages as if they were\n     * all of them.\n     */\n    const ceiling = EMAIL_CAMPAIGN_ENGAGEMENT_MAX_CAMPAIGNS + 1\n    const messageDocs = emailId\n      ? [await hostRef.collection('campaigns').doc(emailId).get()].filter(\n          (snapshot: any) => snapshot.exists,\n        )\n      : (\n          await hostRef\n            .collection('campaigns')\n            .where('templateScreenId', '==', screenId)\n            .orderBy(FieldPath.documentId())\n            .limit(ceiling)\n            .get()\n        ).docs\n    if (emailId && !messageDocs.length) {\n      return res.status(404).json({ error: 'Unknown email' })\n    }\n    const ordered = [...messageDocs].sort(\n      (a: any, b: any) => messageTimeMs(b) - messageTimeMs(a),\n    )\n    const campaignIds = ordered.map((doc: any) => doc.id)\n    const subjects: Record<string, string> = {}\n    for (const doc of ordered) {\n      subjects[doc.id] = String(doc.get('subject') ?? '')\n    }\n\n    const page = await readCampaignEngagement({\n      hostId,\n      campaignIds,\n      filter,\n      cursor: cursor || null,\n      firestore,\n    })\n\n    return res.status(200).json({\n      /*\n       * The rows, reduced to what the table renders. Not the stored document:\n       * `provider`, `bounceType` and `detail` are operational fields a\n       * merchant has no reading for, and shipping every field of an internal\n       * record to a browser is how one becomes an accidental contract.\n       */\n      rows: page.rows.map((row) => ({\n        messageId: row.messageId,\n        to: row.to,\n        subject: row.subject ?? subjects[row.campaignId ?? ''] ?? null,\n        campaignId: row.campaignId,\n        status: row.status,\n        openCount: row.openCount,\n        clickCount: row.clickCount,\n        clickedLinks: row.clickedLinks,\n        firstSeenAtMs: row.firstSeenAtMs,\n        lastEventAtMs:\n          row.timestamps.clicked ??\n          row.timestamps.opened ??\n          row.timestamps.delivered ??\n          row.firstSeenAtMs,\n      })),\n      cursor: page.cursor,\n      lookupFailed: page.lookupFailed,\n      campaignsRead: campaignIds.length - page.campaignsOmitted,\n      campaignsOmitted: page.campaignsOmitted,\n    })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Could not read recipients' })\n  }\n}\n"],"names":["firebaseAdmin","readCampaignEngagement","EMAIL_CAMPAIGN_ENGAGEMENT_MAX_CAMPAIGNS","isDocumentId","FieldPath","messageTimeMs","snapshot","sentAt","get","toMillis","scheduled","Number","isFinite","campaignRecipientsHandler","req","res","method","status","json","error","hostId","String","body","screenId","emailId","rawFilter","filter","cursor","Boolean","authorization","headers","idToken","startsWith","slice","length","undefined","hostSnapshot","decoded","app","auth","verifyIdToken","firestore","hostRef","collection","doc","exists","memberRole","uid","ceiling","messageDocs","where","orderBy","documentId","limit","docs","ordered","sort","a","b","campaignIds","map","id","subjects","page","rows","row","messageId","to","subject","campaignId","openCount","clickCount","clickedLinks","firstSeenAtMs","lastEventAtMs","timestamps","clicked","opened","delivered","lookupFailed","campaignsRead","campaignsOmitted","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,+CAA+C;AAC/C,SACEC,sBAAsB,EACtBC,uCAAuC,QAElC,qDAAoD;AAC3D,SAASC,YAAY,QAAQ,8CAA6C;AAC1E,SAASC,SAAS,QAAQ,2BAA0B;AAEpD;;;;;;;CAOC,GACD,SAASC,cAAcC,QAAa;QAGTA;IAFzB,MAAMC,SAASD,SAASE,GAAG,CAAC;IAC5B,IAAI,QAAOD,0BAAAA,OAAQE,QAAQ,MAAK,YAAY,OAAOF,OAAOE,QAAQ;IAClE,MAAMC,YAAYC,QAAOL,gBAAAA,SAASE,GAAG,CAAC,uBAAbF,gBAA4B;IACrD,OAAOK,OAAOC,QAAQ,CAACF,aAAaA,YAAY;AAClD;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GACD,OAAO,MAAMG,4BAA8C,OAAOC,KAAKC;0CAmCxCD;QA9BPA,WACEA,YACDA,YACEA,YACHA;IARtB,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IAEA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,WAAWF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,QAAQ,oBAAI;IAC9C,MAAMC,UAAUH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,OAAO,oBAAI;IAC5C,MAAMC,YAAYJ,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,MAAM,oBAAI;IAC7C,MAAMC,SAASN,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,MAAM,oBAAI;IAC1C,IAAI,CAACxB,aAAaiB,SAAS;QACzB,OAAOL,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;IACxD;IACA;;;;;;;;;GASC,GACD,IAAIS,QAAQL,cAAcK,QAAQJ,UAAU;QAC1C,OAAOT,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkC;IACzE;IACA,IAAII,YAAY,CAACpB,aAAaoB,WAAW;QACvC,OAAOR,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,IAAIK,WAAW,CAACrB,aAAaqB,UAAU;QACrC,OAAOT,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;IACzD;IACA,MAAMO,SACJD,cAAc,YAAYA,cAAc,YAAYA,YAAY;IAElE,MAAMI,gBAAgBR,QAAOP,6BAAAA,IAAIgB,OAAO,CAACD,aAAa,YAAzBf,6BAA6B;IAC1D,MAAMiB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOhB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;YAQkBiB;QAPpB,MAAMC,UAAU,MAAMrC,cAAcsC,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACT;QAC/D,MAAMU,YAAYzC,cAAcsC,GAAG,GAAGG,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACxB;QAClD,MAAMgB,eAAe,MAAMM,QAAQlC,GAAG;QACtC,IAAI,CAAC4B,aAAaS,MAAM,EAAE;YACxB,OAAO9B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAM2B,aAAa,EAACV,oBAAAA,aAAa5B,GAAG,CAAC,0BAAjB4B,oBAAmC,CAAC,EAAE,CAACC,QAAQU,GAAG,CAAC;QACvE,IAAID,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAO/B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QAEA;;;;;;;;;;;;;;;;;;;;;KAqBC,GACD,MAAM6B,UAAU9C,0CAA0C;QAC1D,MAAM+C,cAAczB,UAChB;YAAC,MAAMkB,QAAQC,UAAU,CAAC,aAAaC,GAAG,CAACpB,SAAShB,GAAG;SAAG,CAACkB,MAAM,CAC/D,CAACpB,WAAkBA,SAASuC,MAAM,IAEpC,AACE,CAAA,MAAMH,QACHC,UAAU,CAAC,aACXO,KAAK,CAAC,oBAAoB,MAAM3B,UAChC4B,OAAO,CAAC/C,UAAUgD,UAAU,IAC5BC,KAAK,CAACL,SACNxC,GAAG,EAAC,EACP8C,IAAI;QACV,IAAI9B,WAAW,CAACyB,YAAYf,MAAM,EAAE;YAClC,OAAOnB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,MAAMoC,UAAU;eAAIN;SAAY,CAACO,IAAI,CACnC,CAACC,GAAQC,IAAWrD,cAAcqD,KAAKrD,cAAcoD;QAEvD,MAAME,cAAcJ,QAAQK,GAAG,CAAC,CAAChB,MAAaA,IAAIiB,EAAE;QACpD,MAAMC,WAAmC,CAAC;QAC1C,KAAK,MAAMlB,OAAOW,QAAS;gBACCX;YAA1BkB,QAAQ,CAAClB,IAAIiB,EAAE,CAAC,GAAGxC,QAAOuB,WAAAA,IAAIpC,GAAG,CAAC,sBAARoC,WAAsB;QAClD;QAEA,MAAMmB,OAAO,MAAM9D,uBAAuB;YACxCmB;YACAuC;YACAjC;YACAC,QAAQA,UAAU;YAClBc;QACF;QAEA,OAAO1B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1B;;;;;OAKC,GACD8C,MAAMD,KAAKC,IAAI,CAACJ,GAAG,CAAC,CAACK;oBAGVA,MAAAA,cAAwBA,iBAQ/BA,OAAAA,OAAAA;uBAX0B;oBAC5BC,WAAWD,IAAIC,SAAS;oBACxBC,IAAIF,IAAIE,EAAE;oBACVC,OAAO,GAAEH,QAAAA,eAAAA,IAAIG,OAAO,YAAXH,eAAeH,QAAQ,EAACG,kBAAAA,IAAII,UAAU,YAAdJ,kBAAkB,GAAG,YAA7CA,OAAiD;oBAC1DI,YAAYJ,IAAII,UAAU;oBAC1BpD,QAAQgD,IAAIhD,MAAM;oBAClBqD,WAAWL,IAAIK,SAAS;oBACxBC,YAAYN,IAAIM,UAAU;oBAC1BC,cAAcP,IAAIO,YAAY;oBAC9BC,eAAeR,IAAIQ,aAAa;oBAChCC,aAAa,GACXT,SAAAA,SAAAA,0BAAAA,IAAIU,UAAU,CAACC,OAAO,YAAtBX,0BACAA,IAAIU,UAAU,CAACE,MAAM,YADrBZ,QAEAA,IAAIU,UAAU,CAACG,SAAS,YAFxBb,QAGAA,IAAIQ,aAAa;gBACrB;;YACA9C,QAAQoC,KAAKpC,MAAM;YACnBoD,cAAchB,KAAKgB,YAAY;YAC/BC,eAAerB,YAAYzB,MAAM,GAAG6B,KAAKkB,gBAAgB;YACzDA,kBAAkBlB,KAAKkB,gBAAgB;QACzC;IACF,EAAE,OAAO9D,OAAO;QACd+D,QAAQ/D,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4B;IACnE;AACF,EAAC"}