@aglyn/plugins-marketing 1.0.0-beta.143

package/src/lib/server/site-page-enricher.js

@@ -0,0 +1,210 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import getVariables from "@aglyn/tenant-runtime/get-variables";
+import * as MarketingModel from "../model/index.js";
+import { OVERLAY_COPY_FIELDS, resolveOverlayCopy } from "../model/overlay-copy.js";
+import { getClientAutomations } from "./get-client-automations.js";
+import { getScreenExperiments } from "./get-screen-experiments.js";
+import getOverlays from "./get-overlays.js";
+/**
+ * Marketing contributions to a rendered site page (AGL-418), relocated
+ * verbatim from the tenant loader: overlays (announcement bar + popup with
+ * server-resolved binding tokens, AGL-195/196/251), site-event automations
+ * (AGL-256/257), and screen/section experiments (AGL-253). Every block is
+ * entitlement-gated on the owning org's plan exactly as before; the shapes
+ * written here are the wire contract the tenant page runtime consumes.
+ */ export const marketingSitePageEnricher = async ({ hostId, host, org, path, screenId, screen, // Composed nodes (AGL-659), also read here for the interactions authored
+// on the elements themselves — see `getClientAutomations`.
+nodes, // No request path belongs to this surface (AGL-2511) — see the context
+// field. Everything below that reads `path` narrows to what is
+// path-independent instead of guessing an address.
+pathUnknown })=>{
+    // Marketing overlays (AGL-195/196/247): marketingOverlays-gated on the
+    // effective plan (plan-less = free = no overlays); binding tokens
+    // resolve server-side so the client ships plain text.
+    const overlaysEntitled = Aglyn.resolveOrgEntitlements(org).features.marketingOverlays;
+    const contentHash = (value)=>{
+        let hash = 0;
+        for(let index = 0; index < value.length; index += 1){
+            hash = hash * 31 + value.charCodeAt(index) | 0;
+        }
+        return Math.abs(hash).toString(36);
+    };
+    // Marketing hub overlays (AGL-251): scheduled/targeted overlay docs
+    // win over the legacy single announcementBar/popup host fields.
+    const overlayPath = `/${path.replace(/^\/+/, '')}`.replace(/\/{2,}/g, '/');
+    const allOverlayDocs = overlaysEntitled ? await getOverlays({
+        hostId
+    }) : [];
+    // A path-targeted overlay cannot be resolved without a path, so on such a
+    // surface only the ones that target every page remain — which is what an
+    // overlay with no patterns already means. Filtered rather than skipped
+    // wholesale: a site-wide announcement bar belongs on a designed 404 as much
+    // as on any other page the site serves.
+    const overlayDocs = pathUnknown ? allOverlayDocs.filter((overlay)=>{
+        var _overlay_pathPatterns, _overlay_excludePathPatterns;
+        return !((_overlay_pathPatterns = overlay.pathPatterns) == null ? void 0 : _overlay_pathPatterns.some((pattern)=>pattern.trim())) && !((_overlay_excludePathPatterns = overlay.excludePathPatterns) == null ? void 0 : _overlay_excludePathPatterns.some((pattern)=>pattern.trim()));
+    }) : allOverlayDocs;
+    const activeOverlays = MarketingModel.resolveActiveOverlays(overlayDocs, {
+        path: overlayPath
+    });
+    const barConfig = activeOverlays.bar ? _extends({
+        enabled: true
+    }, activeOverlays.bar.bar) : host == null ? void 0 : host.announcementBar;
+    const popupConfig = activeOverlays.popup ? _extends({
+        enabled: true
+    }, activeOverlays.popup.popup, activeOverlays.popup.startAtMs ? {
+        startAtMs: activeOverlays.popup.startAtMs
+    } : {}, activeOverlays.popup.endAtMs ? {
+        endAtMs: activeOverlays.popup.endAtMs
+    } : {}) : host == null ? void 0 : host.popup;
+    /**
+   * Overlay copy as the visitor reads it, through the one resolution every
+   * overlay path shares.
+   *
+   * The site's variables are read at most once per page, and only for copy
+   * that holds a token: most bars and popups are plain text and cost no read.
+   */ let overlayVariables;
+    const overlayCopy = async (text)=>{
+        if (!text.includes('{{')) return text;
+        overlayVariables != null ? overlayVariables : overlayVariables = getVariables({
+            hostId
+        });
+        return resolveOverlayCopy(text, await overlayVariables, host);
+    };
+    let announcementBar = null;
+    if (overlaysEntitled && (barConfig == null ? void 0 : barConfig.enabled) && barConfig.text) {
+        var _activeOverlays_bar;
+        const text = await overlayCopy(barConfig.text);
+        announcementBar = _extends({
+            text
+        }, barConfig.href ? {
+            href: barConfig.href
+        } : {}, barConfig.backgroundColor ? {
+            backgroundColor: barConfig.backgroundColor
+        } : {}, barConfig.textColor ? {
+            textColor: barConfig.textColor
+        } : {}, {
+            dismissible: barConfig.dismissible !== false,
+            contentHash: contentHash(text)
+        }, ((_activeOverlays_bar = activeOverlays.bar) == null ? void 0 : _activeOverlays_bar.$id) ? {
+            overlayId: activeOverlays.bar.$id
+        } : {});
+    }
+    let popup = null;
+    if (overlaysEntitled && (popupConfig == null ? void 0 : popupConfig.enabled) && popupConfig.body) {
+        var _popupConfig_trigger, _popupConfig_triggerValue, _popupConfig_frequencyDays;
+        var _activeOverlays_popup;
+        const body = await overlayCopy(popupConfig.body);
+        const headline = popupConfig.headline ? await overlayCopy(popupConfig.headline) : undefined;
+        popup = _extends({}, headline ? {
+            headline
+        } : {}, {
+            body
+        }, popupConfig.imageUrl ? {
+            imageUrl: popupConfig.imageUrl
+        } : {}, popupConfig.imageUrl && popupConfig.imageAlt ? {
+            imageAlt: popupConfig.imageAlt
+        } : {}, popupConfig.ctaLabel ? {
+            ctaLabel: popupConfig.ctaLabel
+        } : {}, popupConfig.ctaHref ? {
+            ctaHref: popupConfig.ctaHref
+        } : {}, {
+            trigger: (_popupConfig_trigger = popupConfig.trigger) != null ? _popupConfig_trigger : 'delay',
+            triggerValue: Number((_popupConfig_triggerValue = popupConfig.triggerValue) != null ? _popupConfig_triggerValue : 3),
+            frequencyDays: Math.max(1, Number((_popupConfig_frequencyDays = popupConfig.frequencyDays) != null ? _popupConfig_frequencyDays : 7))
+        }, popupConfig.oncePerSession ? {
+            oncePerSession: true
+        } : {}, popupConfig.collectEmail ? {
+            collectEmail: true
+        } : {}, popupConfig.startAtMs ? {
+            startAtMs: popupConfig.startAtMs
+        } : {}, popupConfig.endAtMs ? {
+            endAtMs: popupConfig.endAtMs
+        } : {}, {
+            contentHash: contentHash(`${headline != null ? headline : ''}|${body}`)
+        }, ((_activeOverlays_popup = activeOverlays.popup) == null ? void 0 : _activeOverlays_popup.$id) ? {
+            overlayId: activeOverlays.popup.$id
+        } : {});
+    }
+    // Site-event automations (AGL-256/577): the engine loads on every plan
+    // so basic presentational interactions (menu/drawer/show-hide/class/
+    // nav/alert) work everywhere. Powerful steps are gated per-step inside
+    // getClientAutomations — `actions` for server/overlay/analytics steps,
+    // `webhooks` for runJs.
+    const orgFeatures = Aglyn.resolveOrgEntitlements(org).features;
+    const clientAutomations = await getClientAutomations(_extends({
+        hostId,
+        path: overlayPath,
+        actionsEntitled: !!orgFeatures.actions,
+        allowJs: !!orgFeatures.webhooks,
+        // The COMPOSED tree, so a layout's chrome and a reusable component's
+        // internals contribute their own interactions under the graft ids the
+        // renderer actually stamps.
+        nodes: Aglyn.walkInteractionNodes(nodes)
+    }, pathUnknown ? {
+        dropPathScoped: true
+    } : {}));
+    // Screen/section experiments (AGL-253): Business-gated; composing a
+    // tree per divergent variant is bounded (≤4) and ISR-cached.
+    const experiments = Aglyn.resolveOrgEntitlements(org).features.abTesting && screenId && screen ? await getScreenExperiments({
+        hostId,
+        screenId,
+        screen,
+        host: host
+    }) : [];
+    /**
+   * A stored bar or popup with its copy resolved and every other field as
+   * stored. The site runtime renders these payloads as they arrive, so copy
+   * left unresolved here reaches the visitor as the raw token.
+   */ const withOverlayCopy = async (payload)=>{
+        const resolved = _extends({}, payload);
+        for (const field of OVERLAY_COPY_FIELDS){
+            const value = resolved[field];
+            if (typeof value === 'string') resolved[field] = await overlayCopy(value);
+        }
+        return resolved;
+    };
+    // Overlay payloads showOverlay steps reference (AGL-257).
+    const automationOverlays = {};
+    for (const automation of clientAutomations){
+        for (const step of automation.steps){
+            if (step.type === 'showOverlay' && step.overlayId && !automationOverlays[step.overlayId]) {
+                const overlay = allOverlayDocs.find((candidate)=>candidate.$id === step.overlayId);
+                if (overlay) {
+                    automationOverlays[step.overlayId] = _extends({
+                        kind: overlay.kind
+                    }, overlay.bar ? {
+                        bar: await withOverlayCopy(overlay.bar)
+                    } : {}, overlay.popup ? {
+                        popup: await withOverlayCopy(overlay.popup)
+                    } : {});
+                }
+            }
+        }
+    }
+    return {
+        announcementBar,
+        popup,
+        clientAutomations: JSON.parse(JSON.stringify(clientAutomations)),
+        experiments: JSON.parse(JSON.stringify(experiments)),
+        automationOverlays: Object.keys(automationOverlays).length ? JSON.parse(JSON.stringify(automationOverlays)) : null
+    };
+};
+
+//# sourceMappingURL=site-page-enricher.js.map

package/src/lib/server/site-page-enricher.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketing/src/lib/server/site-page-enricher.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport type { SitePageEnricher } from '@aglyn/aglyn/server'\nimport getVariables from '@aglyn/tenant-runtime/get-variables'\nimport * as MarketingModel from '../model'\nimport { OVERLAY_COPY_FIELDS, resolveOverlayCopy } from '../model/overlay-copy'\nimport { getClientAutomations, type ClientAutomation } from './get-client-automations'\nimport { getScreenExperiments, type ScreenExperiment } from './get-screen-experiments'\nimport getOverlays from './get-overlays'\n\n/**\n * Marketing contributions to a rendered site page (AGL-418), relocated\n * verbatim from the tenant loader: overlays (announcement bar + popup with\n * server-resolved binding tokens, AGL-195/196/251), site-event automations\n * (AGL-256/257), and screen/section experiments (AGL-253). Every block is\n * entitlement-gated on the owning org's plan exactly as before; the shapes\n * written here are the wire contract the tenant page runtime consumes.\n */\nexport const marketingSitePageEnricher: SitePageEnricher = async ({\n  hostId,\n  host,\n  org,\n  path,\n  screenId,\n  screen,\n  // Composed nodes (AGL-659), also read here for the interactions authored\n  // on the elements themselves — see `getClientAutomations`.\n  nodes,\n  // No request path belongs to this surface (AGL-2511) — see the context\n  // field. Everything below that reads `path` narrows to what is\n  // path-independent instead of guessing an address.\n  pathUnknown,\n}) => {\n  // Marketing overlays (AGL-195/196/247): marketingOverlays-gated on the\n  // effective plan (plan-less = free = no overlays); binding tokens\n  // resolve server-side so the client ships plain text.\n  const overlaysEntitled = Aglyn.resolveOrgEntitlements(org).features\n    .marketingOverlays\n  const contentHash = (value: string) => {\n    let hash = 0\n    for (let index = 0; index < value.length; index += 1) {\n      hash = (hash * 31 + value.charCodeAt(index)) | 0\n    }\n    return Math.abs(hash).toString(36)\n  }\n  // Marketing hub overlays (AGL-251): scheduled/targeted overlay docs\n  // win over the legacy single announcementBar/popup host fields.\n  const overlayPath = `/${path.replace(/^\\/+/, '')}`.replace(/\\/{2,}/g, '/')\n  const allOverlayDocs = overlaysEntitled ? await getOverlays({ hostId }) : []\n  // A path-targeted overlay cannot be resolved without a path, so on such a\n  // surface only the ones that target every page remain — which is what an\n  // overlay with no patterns already means. Filtered rather than skipped\n  // wholesale: a site-wide announcement bar belongs on a designed 404 as much\n  // as on any other page the site serves.\n  const overlayDocs = pathUnknown\n    ? allOverlayDocs.filter(\n        (overlay) =>\n          !overlay.pathPatterns?.some((pattern) => pattern.trim()) &&\n          !overlay.excludePathPatterns?.some((pattern) => pattern.trim()),\n      )\n    : allOverlayDocs\n  const activeOverlays = MarketingModel.resolveActiveOverlays(overlayDocs, {\n    path: overlayPath,\n  })\n  const barConfig: Aglyn.HostAnnouncementBar | undefined = activeOverlays.bar\n    ? { enabled: true, ...activeOverlays.bar.bar }\n    : ((host as any)?.announcementBar as\n        | Aglyn.HostAnnouncementBar\n        | undefined)\n  const popupConfig: Aglyn.HostPopup | undefined = activeOverlays.popup\n    ? {\n        enabled: true,\n        ...activeOverlays.popup.popup,\n        ...(activeOverlays.popup.startAtMs\n          ? { startAtMs: activeOverlays.popup.startAtMs }\n          : {}),\n        ...(activeOverlays.popup.endAtMs\n          ? { endAtMs: activeOverlays.popup.endAtMs }\n          : {}),\n      }\n    : ((host as any)?.popup as Aglyn.HostPopup | undefined)\n  /**\n   * Overlay copy as the visitor reads it, through the one resolution every\n   * overlay path shares.\n   *\n   * The site's variables are read at most once per page, and only for copy\n   * that holds a token: most bars and popups are plain text and cost no read.\n   */\n  let overlayVariables:\n    | Promise<Record<string, Aglyn.HostVariable>>\n    | undefined\n  const overlayCopy = async (text: string): Promise<string> => {\n    if (!text.includes('{{')) return text\n    overlayVariables ??= getVariables({ hostId })\n    return resolveOverlayCopy(text, await overlayVariables, host)\n  }\n  let announcementBar: Record<string, unknown> | null = null\n  if (overlaysEntitled && barConfig?.enabled && barConfig.text) {\n    const text = await overlayCopy(barConfig.text)\n    announcementBar = {\n      text,\n      ...(barConfig.href ? { href: barConfig.href } : {}),\n      ...(barConfig.backgroundColor\n        ? { backgroundColor: barConfig.backgroundColor }\n        : {}),\n      ...(barConfig.textColor ? { textColor: barConfig.textColor } : {}),\n      dismissible: barConfig.dismissible !== false,\n      contentHash: contentHash(text),\n      ...(activeOverlays.bar?.$id\n        ? { overlayId: activeOverlays.bar.$id }\n        : {}),\n    }\n  }\n  let popup: Record<string, unknown> | null = null\n  if (overlaysEntitled && popupConfig?.enabled && popupConfig.body) {\n    const body = await overlayCopy(popupConfig.body)\n    const headline = popupConfig.headline\n      ? await overlayCopy(popupConfig.headline)\n      : undefined\n    popup = {\n      ...(headline ? { headline } : {}),\n      body,\n      ...(popupConfig.imageUrl ? { imageUrl: popupConfig.imageUrl } : {}),\n      // Only alongside an image, and only when non-empty (AGL-1896) — same\n      // bytes-on-every-request rule as `oncePerSession` below. An absent\n      // `imageAlt` renders `alt=\"\"`, which is what the popup always did.\n      ...(popupConfig.imageUrl && popupConfig.imageAlt\n        ? { imageAlt: popupConfig.imageAlt }\n        : {}),\n      ...(popupConfig.ctaLabel ? { ctaLabel: popupConfig.ctaLabel } : {}),\n      ...(popupConfig.ctaHref ? { ctaHref: popupConfig.ctaHref } : {}),\n      trigger: popupConfig.trigger ?? 'delay',\n      triggerValue: Number(popupConfig.triggerValue ?? 3),\n      frequencyDays: Math.max(1, Number(popupConfig.frequencyDays ?? 7)),\n      // AGL-2174. Passed through only when set: the site contract is\n      // serialised into every page, and an explicit `false` on every\n      // popup that never asked for it is bytes on every request.\n      ...(popupConfig.oncePerSession ? { oncePerSession: true } : {}),\n      ...(popupConfig.collectEmail ? { collectEmail: true } : {}),\n      ...(popupConfig.startAtMs ? { startAtMs: popupConfig.startAtMs } : {}),\n      ...(popupConfig.endAtMs ? { endAtMs: popupConfig.endAtMs } : {}),\n      contentHash: contentHash(`${headline ?? ''}|${body}`),\n      ...(activeOverlays.popup?.$id\n        ? { overlayId: activeOverlays.popup.$id }\n        : {}),\n    }\n  }\n\n  // Site-event automations (AGL-256/577): the engine loads on every plan\n  // so basic presentational interactions (menu/drawer/show-hide/class/\n  // nav/alert) work everywhere. Powerful steps are gated per-step inside\n  // getClientAutomations — `actions` for server/overlay/analytics steps,\n  // `webhooks` for runJs.\n  const orgFeatures = Aglyn.resolveOrgEntitlements(org).features\n  const clientAutomations: ClientAutomation[] = await getClientAutomations({\n    hostId,\n    path: overlayPath,\n    actionsEntitled: !!orgFeatures.actions,\n    allowJs: !!orgFeatures.webhooks,\n    // The COMPOSED tree, so a layout's chrome and a reusable component's\n    // internals contribute their own interactions under the graft ids the\n    // renderer actually stamps.\n    nodes: Aglyn.walkInteractionNodes(nodes),\n    ...(pathUnknown ? { dropPathScoped: true } : {}),\n  })\n  // Screen/section experiments (AGL-253): Business-gated; composing a\n  // tree per divergent variant is bounded (≤4) and ISR-cached.\n  const experiments: ScreenExperiment[] =\n    Aglyn.resolveOrgEntitlements(org).features.abTesting &&\n    screenId &&\n    screen\n      ? await getScreenExperiments({\n          hostId,\n          screenId,\n          screen,\n          host: host as Aglyn.HostTokenSource,\n        })\n      : []\n\n  /**\n   * A stored bar or popup with its copy resolved and every other field as\n   * stored. The site runtime renders these payloads as they arrive, so copy\n   * left unresolved here reaches the visitor as the raw token.\n   */\n  const withOverlayCopy = async <T extends object>(payload: T): Promise<T> => {\n    const resolved = { ...payload } as Record<string, unknown>\n    for (const field of OVERLAY_COPY_FIELDS) {\n      const value = resolved[field]\n      if (typeof value === 'string') resolved[field] = await overlayCopy(value)\n    }\n    return resolved as T\n  }\n\n  // Overlay payloads showOverlay steps reference (AGL-257).\n  const automationOverlays: Record<string, any> = {}\n  for (const automation of clientAutomations) {\n    for (const step of automation.steps) {\n      if (\n        step.type === 'showOverlay' &&\n        step.overlayId &&\n        !automationOverlays[step.overlayId]\n      ) {\n        const overlay = allOverlayDocs.find(\n          (candidate) => candidate.$id === step.overlayId,\n        )\n        if (overlay) {\n          automationOverlays[step.overlayId] = {\n            kind: overlay.kind,\n            ...(overlay.bar ? { bar: await withOverlayCopy(overlay.bar) } : {}),\n            ...(overlay.popup\n              ? { popup: await withOverlayCopy(overlay.popup) }\n              : {}),\n          }\n        }\n      }\n    }\n  }\n\n  return {\n    announcementBar,\n    popup,\n    clientAutomations: JSON.parse(JSON.stringify(clientAutomations)),\n    experiments: JSON.parse(JSON.stringify(experiments)),\n    automationOverlays: Object.keys(automationOverlays).length\n      ? JSON.parse(JSON.stringify(automationOverlays))\n      : null,\n  }\n}\n"],"names":["Aglyn","getVariables","MarketingModel","OVERLAY_COPY_FIELDS","resolveOverlayCopy","getClientAutomations","getScreenExperiments","getOverlays","marketingSitePageEnricher","hostId","host","org","path","screenId","screen","nodes","pathUnknown","overlaysEntitled","resolveOrgEntitlements","features","marketingOverlays","contentHash","value","hash","index","length","charCodeAt","Math","abs","toString","overlayPath","replace","allOverlayDocs","overlayDocs","filter","overlay","pathPatterns","some","pattern","trim","excludePathPatterns","activeOverlays","resolveActiveOverlays","barConfig","bar","enabled","announcementBar","popupConfig","popup","startAtMs","endAtMs","overlayVariables","overlayCopy","text","includes","href","backgroundColor","textColor","dismissible","$id","overlayId","body","headline","undefined","imageUrl","imageAlt","ctaLabel","ctaHref","trigger","triggerValue","Number","frequencyDays","max","oncePerSession","collectEmail","orgFeatures","clientAutomations","actionsEntitled","actions","allowJs","webhooks","walkInteractionNodes","dropPathScoped","experiments","abTesting","withOverlayCopy","payload","resolved","field","automationOverlays","automation","step","steps","type","find","candidate","kind","JSON","parse","stringify","Object","keys"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,sBAAqB;AAE5C,OAAOC,kBAAkB,sCAAqC;AAC9D,YAAYC,oBAAoB,oBAAU;AAC1C,SAASC,mBAAmB,EAAEC,kBAAkB,QAAQ,2BAAuB;AAC/E,SAASC,oBAAoB,QAA+B,8BAA0B;AACtF,SAASC,oBAAoB,QAA+B,8BAA0B;AACtF,OAAOC,iBAAiB,oBAAgB;AAExC;;;;;;;CAOC,GACD,OAAO,MAAMC,4BAA8C,OAAO,EAChEC,MAAM,EACNC,IAAI,EACJC,GAAG,EACHC,IAAI,EACJC,QAAQ,EACRC,MAAM,EACN,yEAAyE;AACzE,2DAA2D;AAC3DC,KAAK,EACL,uEAAuE;AACvE,+DAA+D;AAC/D,mDAAmD;AACnDC,WAAW,EACZ;IACC,uEAAuE;IACvE,kEAAkE;IAClE,sDAAsD;IACtD,MAAMC,mBAAmBjB,MAAMkB,sBAAsB,CAACP,KAAKQ,QAAQ,CAChEC,iBAAiB;IACpB,MAAMC,cAAc,CAACC;QACnB,IAAIC,OAAO;QACX,IAAK,IAAIC,QAAQ,GAAGA,QAAQF,MAAMG,MAAM,EAAED,SAAS,EAAG;YACpDD,OAAO,AAACA,OAAO,KAAKD,MAAMI,UAAU,CAACF,SAAU;QACjD;QACA,OAAOG,KAAKC,GAAG,CAACL,MAAMM,QAAQ,CAAC;IACjC;IACA,oEAAoE;IACpE,gEAAgE;IAChE,MAAMC,cAAc,CAAC,CAAC,EAAElB,KAAKmB,OAAO,CAAC,QAAQ,KAAK,CAACA,OAAO,CAAC,WAAW;IACtE,MAAMC,iBAAiBf,mBAAmB,MAAMV,YAAY;QAAEE;IAAO,KAAK,EAAE;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,wCAAwC;IACxC,MAAMwB,cAAcjB,cAChBgB,eAAeE,MAAM,CACnB,CAACC;YACEA,uBACAA;eADD,GAACA,wBAAAA,QAAQC,YAAY,qBAApBD,sBAAsBE,IAAI,CAAC,CAACC,UAAYA,QAAQC,IAAI,QACrD,GAACJ,+BAAAA,QAAQK,mBAAmB,qBAA3BL,6BAA6BE,IAAI,CAAC,CAACC,UAAYA,QAAQC,IAAI;SAEhEP;IACJ,MAAMS,iBAAiBvC,eAAewC,qBAAqB,CAACT,aAAa;QACvErB,MAAMkB;IACR;IACA,MAAMa,YAAmDF,eAAeG,GAAG,GACvE;QAAEC,SAAS;OAASJ,eAAeG,GAAG,CAACA,GAAG,IACxClC,wBAAD,AAACA,KAAcoC,eAAe;IAGnC,MAAMC,cAA2CN,eAAeO,KAAK,GACjE;QACEH,SAAS;OACNJ,eAAeO,KAAK,CAACA,KAAK,EACzBP,eAAeO,KAAK,CAACC,SAAS,GAC9B;QAAEA,WAAWR,eAAeO,KAAK,CAACC,SAAS;IAAC,IAC5C,CAAC,GACDR,eAAeO,KAAK,CAACE,OAAO,GAC5B;QAAEA,SAAST,eAAeO,KAAK,CAACE,OAAO;IAAC,IACxC,CAAC,KAELxC,wBAAD,AAACA,KAAcsC,KAAK;IACzB;;;;;;GAMC,GACD,IAAIG;IAGJ,MAAMC,cAAc,OAAOC;QACzB,IAAI,CAACA,KAAKC,QAAQ,CAAC,OAAO,OAAOD;QACjCF,2BAAAA,mBAAAA,mBAAqBlD,aAAa;YAAEQ;QAAO;QAC3C,OAAOL,mBAAmBiD,MAAM,MAAMF,kBAAkBzC;IAC1D;IACA,IAAIoC,kBAAkD;IACtD,IAAI7B,qBAAoB0B,6BAAAA,UAAWE,OAAO,KAAIF,UAAUU,IAAI,EAAE;YAWtDZ;QAVN,MAAMY,OAAO,MAAMD,YAAYT,UAAUU,IAAI;QAC7CP,kBAAkB;YAChBO;WACIV,UAAUY,IAAI,GAAG;YAAEA,MAAMZ,UAAUY,IAAI;QAAC,IAAI,CAAC,GAC7CZ,UAAUa,eAAe,GACzB;YAAEA,iBAAiBb,UAAUa,eAAe;QAAC,IAC7C,CAAC,GACDb,UAAUc,SAAS,GAAG;YAAEA,WAAWd,UAAUc,SAAS;QAAC,IAAI,CAAC;YAChEC,aAAaf,UAAUe,WAAW,KAAK;YACvCrC,aAAaA,YAAYgC;WACrBZ,EAAAA,sBAAAA,eAAeG,GAAG,qBAAlBH,oBAAoBkB,GAAG,IACvB;YAAEC,WAAWnB,eAAeG,GAAG,CAACe,GAAG;QAAC,IACpC,CAAC;IAET;IACA,IAAIX,QAAwC;IAC5C,IAAI/B,qBAAoB8B,+BAAAA,YAAaF,OAAO,KAAIE,YAAYc,IAAI,EAAE;YAiBrDd,sBACYA,2BACaA;YAS9BN;QA3BN,MAAMoB,OAAO,MAAMT,YAAYL,YAAYc,IAAI;QAC/C,MAAMC,WAAWf,YAAYe,QAAQ,GACjC,MAAMV,YAAYL,YAAYe,QAAQ,IACtCC;QACJf,QAAQ,aACFc,WAAW;YAAEA;QAAS,IAAI,CAAC;YAC/BD;WACId,YAAYiB,QAAQ,GAAG;YAAEA,UAAUjB,YAAYiB,QAAQ;QAAC,IAAI,CAAC,GAI7DjB,YAAYiB,QAAQ,IAAIjB,YAAYkB,QAAQ,GAC5C;YAAEA,UAAUlB,YAAYkB,QAAQ;QAAC,IACjC,CAAC,GACDlB,YAAYmB,QAAQ,GAAG;YAAEA,UAAUnB,YAAYmB,QAAQ;QAAC,IAAI,CAAC,GAC7DnB,YAAYoB,OAAO,GAAG;YAAEA,SAASpB,YAAYoB,OAAO;QAAC,IAAI,CAAC;YAC9DC,OAAO,GAAErB,uBAAAA,YAAYqB,OAAO,YAAnBrB,uBAAuB;YAChCsB,cAAcC,QAAOvB,4BAAAA,YAAYsB,YAAY,YAAxBtB,4BAA4B;YACjDwB,eAAe5C,KAAK6C,GAAG,CAAC,GAAGF,QAAOvB,6BAAAA,YAAYwB,aAAa,YAAzBxB,6BAA6B;WAI3DA,YAAY0B,cAAc,GAAG;YAAEA,gBAAgB;QAAK,IAAI,CAAC,GACzD1B,YAAY2B,YAAY,GAAG;YAAEA,cAAc;QAAK,IAAI,CAAC,GACrD3B,YAAYE,SAAS,GAAG;YAAEA,WAAWF,YAAYE,SAAS;QAAC,IAAI,CAAC,GAChEF,YAAYG,OAAO,GAAG;YAAEA,SAASH,YAAYG,OAAO;QAAC,IAAI,CAAC;YAC9D7B,aAAaA,YAAY,GAAGyC,mBAAAA,WAAY,GAAG,CAAC,EAAED,MAAM;WAChDpB,EAAAA,wBAAAA,eAAeO,KAAK,qBAApBP,sBAAsBkB,GAAG,IACzB;YAAEC,WAAWnB,eAAeO,KAAK,CAACW,GAAG;QAAC,IACtC,CAAC;IAET;IAEA,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,wBAAwB;IACxB,MAAMgB,cAAc3E,MAAMkB,sBAAsB,CAACP,KAAKQ,QAAQ;IAC9D,MAAMyD,oBAAwC,MAAMvE,qBAAqB;QACvEI;QACAG,MAAMkB;QACN+C,iBAAiB,CAAC,CAACF,YAAYG,OAAO;QACtCC,SAAS,CAAC,CAACJ,YAAYK,QAAQ;QAC/B,qEAAqE;QACrE,sEAAsE;QACtE,4BAA4B;QAC5BjE,OAAOf,MAAMiF,oBAAoB,CAAClE;OAC9BC,cAAc;QAAEkE,gBAAgB;IAAK,IAAI,CAAC;IAEhD,oEAAoE;IACpE,6DAA6D;IAC7D,MAAMC,cACJnF,MAAMkB,sBAAsB,CAACP,KAAKQ,QAAQ,CAACiE,SAAS,IACpDvE,YACAC,SACI,MAAMR,qBAAqB;QACzBG;QACAI;QACAC;QACAJ,MAAMA;IACR,KACA,EAAE;IAER;;;;GAIC,GACD,MAAM2E,kBAAkB,OAAyBC;QAC/C,MAAMC,WAAW,aAAKD;QACtB,KAAK,MAAME,SAASrF,oBAAqB;YACvC,MAAMmB,QAAQiE,QAAQ,CAACC,MAAM;YAC7B,IAAI,OAAOlE,UAAU,UAAUiE,QAAQ,CAACC,MAAM,GAAG,MAAMpC,YAAY9B;QACrE;QACA,OAAOiE;IACT;IAEA,0DAA0D;IAC1D,MAAME,qBAA0C,CAAC;IACjD,KAAK,MAAMC,cAAcd,kBAAmB;QAC1C,KAAK,MAAMe,QAAQD,WAAWE,KAAK,CAAE;YACnC,IACED,KAAKE,IAAI,KAAK,iBACdF,KAAK/B,SAAS,IACd,CAAC6B,kBAAkB,CAACE,KAAK/B,SAAS,CAAC,EACnC;gBACA,MAAMzB,UAAUH,eAAe8D,IAAI,CACjC,CAACC,YAAcA,UAAUpC,GAAG,KAAKgC,KAAK/B,SAAS;gBAEjD,IAAIzB,SAAS;oBACXsD,kBAAkB,CAACE,KAAK/B,SAAS,CAAC,GAAG;wBACnCoC,MAAM7D,QAAQ6D,IAAI;uBACd7D,QAAQS,GAAG,GAAG;wBAAEA,KAAK,MAAMyC,gBAAgBlD,QAAQS,GAAG;oBAAE,IAAI,CAAC,GAC7DT,QAAQa,KAAK,GACb;wBAAEA,OAAO,MAAMqC,gBAAgBlD,QAAQa,KAAK;oBAAE,IAC9C,CAAC;gBAET;YACF;QACF;IACF;IAEA,OAAO;QACLF;QACAE;QACA4B,mBAAmBqB,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAACvB;QAC7CO,aAAac,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAAChB;QACvCM,oBAAoBW,OAAOC,IAAI,CAACZ,oBAAoBhE,MAAM,GACtDwE,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAACV,uBAC1B;IACN;AACF,EAAC"}

package/src/lib/server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Registers the marketing plugin's public (site-facing) API routes (AGL-396). */
+export declare function registerMarketingApi(): void;
+/** Registers the marketing plugin's console-side API routes (AGL-396). */
+export declare function registerMarketingConsoleApi(): void;

package/src/lib/server.js

@@ -0,0 +1,152 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { checkEntitlement } from "@aglyn/aglyn/server";
+import { evaluateAutoWinner } from "./model/index.js";
+import { registerPluginApiRoute, registerSitePageEnricher } from "@aglyn/aglyn/server";
+import { emailEventsHandler } from "./server/email-events.js";
+import { registerMarketingFigureReaders } from "./server/marketing-figures.js";
+import { marketingSitePageEnricher } from "./server/site-page-enricher.js";
+import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { campaignProcessScheduledHandler } from "./server/campaign-process-scheduled.js";
+import { listsMaterializeHandler } from "./server/lists-materialize.js";
+import { campaignManageHandler, registerCampaignDraftWriter } from "./server/campaign-manage.js";
+import { campaignSendHandler } from "./server/campaign-send.js";
+import { campaignRecipientsHandler } from "./server/campaign-recipients.js";
+/**
+ * Experiment beacon (AGL-252): counts an exposure or conversion on
+ * `hosts/{hostId}/experiments/{id}/stats/{variantId}`. Sampled counters —
+ * fire-and-forget from the page, abTesting-gated, no visitor identity
+ * stored server-side (assignment is deterministic client-side).
+ */ const trackHandler = async (req, res)=>{
+    var _ref, _ref1, _ref2, _ref3;
+    var _req_body, _req_body1, _req_body2, _req_body3;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const hostId = String((_ref = (_req_body = req.body) == null ? void 0 : _req_body.hostId) != null ? _ref : '');
+    const experimentId = String((_ref1 = (_req_body1 = req.body) == null ? void 0 : _req_body1.experimentId) != null ? _ref1 : '');
+    const variantId = String((_ref2 = (_req_body2 = req.body) == null ? void 0 : _req_body2.variantId) != null ? _ref2 : '');
+    const kind = String((_ref3 = (_req_body3 = req.body) == null ? void 0 : _req_body3.kind) != null ? _ref3 : '');
+    if (!hostId || !experimentId || !variantId || ![
+        'exposure',
+        'conversion'
+    ].includes(kind)) {
+        return res.status(400).json({
+            error: 'Bad beacon'
+        });
+    }
+    try {
+        var _experiment_get;
+        var _this;
+        const org = (_this = await getOrgForHost(hostId)) == null ? void 0 : _this.org;
+        if (!checkEntitlement(org, 'abTesting')) {
+            return res.status(200).json({
+                ok: true
+            });
+        }
+        const experimentRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('experiments').doc(experimentId);
+        const experiment = await experimentRef.get();
+        if (!experiment.exists || experiment.get('status') !== 'running') {
+            return res.status(200).json({
+                ok: true
+            });
+        }
+        // Ended experiments (AGL-273) stop counting: stale cached pages may
+        // still beacon briefly, and post-end stats would skew the decision.
+        const endAtMs = Number((_experiment_get = experiment.get('endAtMs')) != null ? _experiment_get : 0);
+        if (endAtMs && Date.now() > endAtMs) {
+            return res.status(200).json({
+                ok: true
+            });
+        }
+        await experimentRef.collection('stats').doc(variantId).set({
+            [kind === 'exposure' ? 'exposures' : 'conversions']: FieldValue.increment(1),
+            updatedAt: FieldValue.serverTimestamp()
+        }, {
+            merge: true
+        });
+        // Auto-winner (AGL-273): conversions re-evaluate the opt-in decision
+        // rule; a decided experiment finishes itself and serves the winner.
+        const data = experiment.data();
+        if (kind === 'conversion' && data.autoWinner) {
+            const statsSnapshot = await experimentRef.collection('stats').get();
+            const statsByVariant = {};
+            for (const doc of statsSnapshot.docs){
+                var _doc_get, _doc_get1;
+                statsByVariant[doc.id] = {
+                    exposures: Number((_doc_get = doc.get('exposures')) != null ? _doc_get : 0),
+                    conversions: Number((_doc_get1 = doc.get('conversions')) != null ? _doc_get1 : 0)
+                };
+            }
+            const decision = evaluateAutoWinner(data, statsByVariant);
+            if (decision) {
+                await experimentRef.update({
+                    status: 'done',
+                    winnerVariantId: decision.variantId,
+                    autoCompleted: true,
+                    completedAt: FieldValue.serverTimestamp()
+                });
+            }
+        }
+        return res.status(200).json({
+            ok: true
+        });
+    } catch (error) {
+        console.error(error);
+        return res.status(200).json({
+            ok: true
+        }) // beacons never error the page
+        ;
+    }
+};
+/** Registers the marketing plugin's public (site-facing) API routes (AGL-396). */ export function registerMarketingApi() {
+    registerPluginApiRoute('experiments/track', trackHandler);
+    // Site-page contributions (AGL-418): overlays, automations, experiments.
+    registerSitePageEnricher(marketingSitePageEnricher);
+}
+/** Registers the marketing plugin's console-side API routes (AGL-396). */ export function registerMarketingConsoleApi() {
+    // The campaign draft writer another plugin reaches through the core's
+    // resource-drafts seam (AGL-2912). Registered here alone: the AI jobs that
+    // write through it run only on the console, inline and on the beat
+    // (AGL-3026).
+    registerCampaignDraftWriter();
+    // Campaign and A/B testing results as figure tables (AGL-2915), for the AI
+    // plugin's insights to read by id; the console runs insight jobs.
+    registerMarketingFigureReaders(()=>firebaseAdmin.app().firestore());
+    registerPluginApiRoute('campaigns/send', campaignSendHandler);
+    // Taking a campaign or an abandoned draft away, which is the one class of
+    // change the send route may not carry: both write to the SEND collection,
+    // which no client may touch, and neither of them mails anything.
+    registerPluginApiRoute('campaigns/manage', campaignManageHandler);
+    // The other direction through the per-recipient delivery log: not "what did
+    // we send this person" but "who did this design reach, and which of them
+    // opened it". Server-side because the log is a platform-level collection no
+    // security rule can scope to one site's campaigns.
+    registerPluginApiRoute('campaigns/recipients', campaignRecipientsHandler);
+    // Relocated console route (AGL-418): the Resend/Svix webhook keeps its
+    // /api/email/events URL via the dispatcher; ownership is recorded at
+    // registration so the org gate attributes it to marketing, not email.
+    registerPluginApiRoute('email/events', emailEventsHandler);
+    registerPluginApiRoute('campaigns/process-scheduled', campaignProcessScheduledHandler);
+    // The dynamic-list sweep rides the same `*/15` fast-cron as the campaign
+    // processor rather than provisioning a scheduler job of its own.
+    registerPluginApiRoute('lists/materialize', listsMaterializeHandler);
+}
+
+//# sourceMappingURL=server.js.map

package/src/lib/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/marketing/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { checkEntitlement } from '@aglyn/aglyn/server'\nimport { evaluateAutoWinner, type HostExperiment } from './model'\nimport {\n  registerPluginApiRoute,\n  registerSitePageEnricher,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport { emailEventsHandler } from './server/email-events'\nimport { registerMarketingFigureReaders } from './server/marketing-figures'\nimport { marketingSitePageEnricher } from './server/site-page-enricher'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { campaignProcessScheduledHandler } from './server/campaign-process-scheduled'\nimport { listsMaterializeHandler } from './server/lists-materialize'\nimport {\n  campaignManageHandler,\n  registerCampaignDraftWriter,\n} from './server/campaign-manage'\nimport { campaignSendHandler } from './server/campaign-send'\nimport { campaignRecipientsHandler } from './server/campaign-recipients'\n\n/**\n * Experiment beacon (AGL-252): counts an exposure or conversion on\n * `hosts/{hostId}/experiments/{id}/stats/{variantId}`. Sampled counters —\n * fire-and-forget from the page, abTesting-gated, no visitor identity\n * stored server-side (assignment is deterministic client-side).\n */\nconst trackHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const experimentId = String(req.body?.experimentId ?? '')\n  const variantId = String(req.body?.variantId ?? '')\n  const kind = String(req.body?.kind ?? '')\n  if (\n    !hostId ||\n    !experimentId ||\n    !variantId ||\n    !['exposure', 'conversion'].includes(kind)\n  ) {\n    return res.status(400).json({ error: 'Bad beacon' })\n  }\n  try {\n    const org = (await getOrgForHost(hostId))?.org\n    if (!checkEntitlement(org as any, 'abTesting')) {\n      return res.status(200).json({ ok: true })\n    }\n    const experimentRef = firebaseAdmin\n      .app()\n      .firestore()\n      .collection('hosts')\n      .doc(hostId)\n      .collection('experiments')\n      .doc(experimentId)\n    const experiment = await experimentRef.get()\n    if (!experiment.exists || experiment.get('status') !== 'running') {\n      return res.status(200).json({ ok: true })\n    }\n    // Ended experiments (AGL-273) stop counting: stale cached pages may\n    // still beacon briefly, and post-end stats would skew the decision.\n    const endAtMs = Number(experiment.get('endAtMs') ?? 0)\n    if (endAtMs && Date.now() > endAtMs) {\n      return res.status(200).json({ ok: true })\n    }\n    await experimentRef\n      .collection('stats')\n      .doc(variantId)\n      .set(\n        {\n          [kind === 'exposure' ? 'exposures' : 'conversions']:\n            FieldValue.increment(1),\n          updatedAt: FieldValue.serverTimestamp(),\n        },\n        { merge: true },\n      )\n    // Auto-winner (AGL-273): conversions re-evaluate the opt-in decision\n    // rule; a decided experiment finishes itself and serves the winner.\n    const data = experiment.data() as HostExperiment\n    if (kind === 'conversion' && data.autoWinner) {\n      const statsSnapshot = await experimentRef.collection('stats').get()\n      const statsByVariant: Record<\n        string,\n        { exposures?: number; conversions?: number }\n      > = {}\n      for (const doc of statsSnapshot.docs) {\n        statsByVariant[doc.id] = {\n          exposures: Number(doc.get('exposures') ?? 0),\n          conversions: Number(doc.get('conversions') ?? 0),\n        }\n      }\n      const decision = evaluateAutoWinner(data, statsByVariant)\n      if (decision) {\n        await experimentRef.update({\n          status: 'done',\n          winnerVariantId: decision.variantId,\n          autoCompleted: true,\n          completedAt: FieldValue.serverTimestamp(),\n        })\n      }\n    }\n    return res.status(200).json({ ok: true })\n  } catch (error) {\n    console.error(error)\n    return res.status(200).json({ ok: true }) // beacons never error the page\n  }\n}\n\n/** Registers the marketing plugin's public (site-facing) API routes (AGL-396). */\nexport function registerMarketingApi(): void {\n  registerPluginApiRoute('experiments/track', trackHandler)\n  // Site-page contributions (AGL-418): overlays, automations, experiments.\n  registerSitePageEnricher(marketingSitePageEnricher)\n}\n\n/** Registers the marketing plugin's console-side API routes (AGL-396). */\nexport function registerMarketingConsoleApi(): void {\n  // The campaign draft writer another plugin reaches through the core's\n  // resource-drafts seam (AGL-2912). Registered here alone: the AI jobs that\n  // write through it run only on the console, inline and on the beat\n  // (AGL-3026).\n  registerCampaignDraftWriter()\n  // Campaign and A/B testing results as figure tables (AGL-2915), for the AI\n  // plugin's insights to read by id; the console runs insight jobs.\n  registerMarketingFigureReaders(() => firebaseAdmin.app().firestore())\n  registerPluginApiRoute('campaigns/send', campaignSendHandler)\n  // Taking a campaign or an abandoned draft away, which is the one class of\n  // change the send route may not carry: both write to the SEND collection,\n  // which no client may touch, and neither of them mails anything.\n  registerPluginApiRoute('campaigns/manage', campaignManageHandler)\n  // The other direction through the per-recipient delivery log: not \"what did\n  // we send this person\" but \"who did this design reach, and which of them\n  // opened it\". Server-side because the log is a platform-level collection no\n  // security rule can scope to one site's campaigns.\n  registerPluginApiRoute('campaigns/recipients', campaignRecipientsHandler)\n  // Relocated console route (AGL-418): the Resend/Svix webhook keeps its\n  // /api/email/events URL via the dispatcher; ownership is recorded at\n  // registration so the org gate attributes it to marketing, not email.\n  registerPluginApiRoute('email/events', emailEventsHandler)\n  registerPluginApiRoute(\n    'campaigns/process-scheduled',\n    campaignProcessScheduledHandler,\n  )\n  // The dynamic-list sweep rides the same `*/15` fast-cron as the campaign\n  // processor rather than provisioning a scheduler job of its own.\n  registerPluginApiRoute('lists/materialize', listsMaterializeHandler)\n}\n"],"names":["checkEntitlement","evaluateAutoWinner","registerPluginApiRoute","registerSitePageEnricher","emailEventsHandler","registerMarketingFigureReaders","marketingSitePageEnricher","firebaseAdmin","getOrgForHost","FieldValue","campaignProcessScheduledHandler","listsMaterializeHandler","campaignManageHandler","registerCampaignDraftWriter","campaignSendHandler","campaignRecipientsHandler","trackHandler","req","res","method","status","json","error","hostId","String","body","experimentId","variantId","kind","includes","experiment","org","ok","experimentRef","app","firestore","collection","doc","get","exists","endAtMs","Number","Date","now","set","increment","updatedAt","serverTimestamp","merge","data","autoWinner","statsSnapshot","statsByVariant","docs","id","exposures","conversions","decision","update","winnerVariantId","autoCompleted","completedAt","console","registerMarketingApi","registerMarketingConsoleApi"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,gBAAgB,QAAQ,sBAAqB;AACtD,SAASC,kBAAkB,QAA6B,mBAAS;AACjE,SACEC,sBAAsB,EACtBC,wBAAwB,QAEnB,sBAAqB;AAC5B,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,8BAA8B,QAAQ,gCAA4B;AAC3E,SAASC,yBAAyB,QAAQ,iCAA6B;AACvE,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SACEC,qBAAqB,EACrBC,2BAA2B,QACtB,8BAA0B;AACjC,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,yBAAyB,QAAQ,kCAA8B;AAExE;;;;;CAKC,GACD,MAAMC,eAAiC,OAAOC,KAAKC;;QAI3BD,WACMA,YACHA,YACLA;IANpB,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,eAAeF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,YAAY,oBAAI;IACtD,MAAMC,YAAYH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,SAAS,oBAAI;IAChD,MAAMC,OAAOJ,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUW,IAAI,oBAAI;IACtC,IACE,CAACL,UACD,CAACG,gBACD,CAACC,aACD,CAAC;QAAC;QAAY;KAAa,CAACE,QAAQ,CAACD,OACrC;QACA,OAAOV,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAa;IACpD;IACA,IAAI;YAkBqBQ;YAjBV;QAAb,MAAMC,OAAO,QAAA,MAAMvB,cAAce,4BAArB,AAAC,MAA8BQ,GAAG;QAC9C,IAAI,CAAC/B,iBAAiB+B,KAAY,cAAc;YAC9C,OAAOb,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEW,IAAI;YAAK;QACzC;QACA,MAAMC,gBAAgB1B,cACnB2B,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACd,QACJa,UAAU,CAAC,eACXC,GAAG,CAACX;QACP,MAAMI,aAAa,MAAMG,cAAcK,GAAG;QAC1C,IAAI,CAACR,WAAWS,MAAM,IAAIT,WAAWQ,GAAG,CAAC,cAAc,WAAW;YAChE,OAAOpB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEW,IAAI;YAAK;QACzC;QACA,oEAAoE;QACpE,oEAAoE;QACpE,MAAMQ,UAAUC,QAAOX,kBAAAA,WAAWQ,GAAG,CAAC,sBAAfR,kBAA6B;QACpD,IAAIU,WAAWE,KAAKC,GAAG,KAAKH,SAAS;YACnC,OAAOtB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEW,IAAI;YAAK;QACzC;QACA,MAAMC,cACHG,UAAU,CAAC,SACXC,GAAG,CAACV,WACJiB,GAAG,CACF;YACE,CAAChB,SAAS,aAAa,cAAc,cAAc,EACjDnB,WAAWoC,SAAS,CAAC;YACvBC,WAAWrC,WAAWsC,eAAe;QACvC,GACA;YAAEC,OAAO;QAAK;QAElB,qEAAqE;QACrE,oEAAoE;QACpE,MAAMC,OAAOnB,WAAWmB,IAAI;QAC5B,IAAIrB,SAAS,gBAAgBqB,KAAKC,UAAU,EAAE;YAC5C,MAAMC,gBAAgB,MAAMlB,cAAcG,UAAU,CAAC,SAASE,GAAG;YACjE,MAAMc,iBAGF,CAAC;YACL,KAAK,MAAMf,OAAOc,cAAcE,IAAI,CAAE;oBAEhBhB,UACEA;gBAFtBe,cAAc,CAACf,IAAIiB,EAAE,CAAC,GAAG;oBACvBC,WAAWd,QAAOJ,WAAAA,IAAIC,GAAG,CAAC,wBAARD,WAAwB;oBAC1CmB,aAAaf,QAAOJ,YAAAA,IAAIC,GAAG,CAAC,0BAARD,YAA0B;gBAChD;YACF;YACA,MAAMoB,WAAWxD,mBAAmBgD,MAAMG;YAC1C,IAAIK,UAAU;gBACZ,MAAMxB,cAAcyB,MAAM,CAAC;oBACzBtC,QAAQ;oBACRuC,iBAAiBF,SAAS9B,SAAS;oBACnCiC,eAAe;oBACfC,aAAapD,WAAWsC,eAAe;gBACzC;YACF;QACF;QACA,OAAO7B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEW,IAAI;QAAK;IACzC,EAAE,OAAOV,OAAO;QACdwC,QAAQxC,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEW,IAAI;QAAK,GAAG,+BAA+B;;IAC3E;AACF;AAEA,gFAAgF,GAChF,OAAO,SAAS+B;IACd7D,uBAAuB,qBAAqBc;IAC5C,yEAAyE;IACzEb,yBAAyBG;AAC3B;AAEA,wEAAwE,GACxE,OAAO,SAAS0D;IACd,sEAAsE;IACtE,2EAA2E;IAC3E,mEAAmE;IACnE,cAAc;IACdnD;IACA,2EAA2E;IAC3E,kEAAkE;IAClER,+BAA+B,IAAME,cAAc2B,GAAG,GAAGC,SAAS;IAClEjC,uBAAuB,kBAAkBY;IACzC,0EAA0E;IAC1E,0EAA0E;IAC1E,iEAAiE;IACjEZ,uBAAuB,oBAAoBU;IAC3C,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,mDAAmD;IACnDV,uBAAuB,wBAAwBa;IAC/C,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtEb,uBAAuB,gBAAgBE;IACvCF,uBACE,+BACAQ;IAEF,yEAAyE;IACzE,iEAAiE;IACjER,uBAAuB,qBAAqBS;AAC9C"}

package/src/lib/site.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Site half (AGL-419): the overlays/experiments/automations runtime the
+ * tenant page renders generically — reads back the slices the plugin's
+ * server enricher wrote. Registered via the loader's 'site' surface.
+ */
+export declare function registerMarketingPlugin(): void;

package/src/lib/site.js

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerSiteRuntime } from "@aglyn/aglyn";
+import { MarketingSiteRuntime } from "./components/site-runtime.js";
+/**
+ * The preview slice is fetched only when a preview asks for it (AGL-1151).
+ *
+ * `loadMarketingPreviewProps` reads Firestore directly, so naming it statically
+ * put the whole Firestore client in this plugin's chunk — which a PUBLISHED
+ * site downloads and evaluates the moment marketing is enabled on it. Nothing
+ * on a published page ever calls this: the server enricher writes the slice
+ * there, and this path exists for the editor Preview alone, where no enricher
+ * runs.
+ *
+ * A RELATIVE deferred import, deliberately. The specifier crosses no project
+ * boundary, so nx records no lazy edge on the pair and
+ * `@nx/enforce-module-boundaries` has nothing to forbid — the distinction
+ * `aglyn/no-dynamic-first-party-import` exists to keep.
+ */ const loadMarketingPreviewProps = async (ctx)=>(await import("./preview-props.js")).loadMarketingPreviewProps(ctx);
+/**
+ * Site half (AGL-419): the overlays/experiments/automations runtime the
+ * tenant page renders generically — reads back the slices the plugin's
+ * server enricher wrote. Registered via the loader's 'site' surface.
+ */ export function registerMarketingPlugin() {
+    registerSiteRuntime({
+        pluginId: 'marketing',
+        runtimeId: 'marketing-site-runtime',
+        Component: MarketingSiteRuntime,
+        // Editor Preview (AGL-830): rebuild the automations slice client-side so
+        // the same runtime drives hover menus/drawers in preview as on the site.
+        loadPreviewProps: loadMarketingPreviewProps
+    });
+}
+
+//# sourceMappingURL=site.js.map

package/src/lib/site.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/marketing/src/lib/site.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerSiteRuntime } from '@aglyn/aglyn'\nimport { MarketingSiteRuntime } from './components/site-runtime'\n\n/**\n * The preview slice is fetched only when a preview asks for it (AGL-1151).\n *\n * `loadMarketingPreviewProps` reads Firestore directly, so naming it statically\n * put the whole Firestore client in this plugin's chunk — which a PUBLISHED\n * site downloads and evaluates the moment marketing is enabled on it. Nothing\n * on a published page ever calls this: the server enricher writes the slice\n * there, and this path exists for the editor Preview alone, where no enricher\n * runs.\n *\n * A RELATIVE deferred import, deliberately. The specifier crosses no project\n * boundary, so nx records no lazy edge on the pair and\n * `@nx/enforce-module-boundaries` has nothing to forbid — the distinction\n * `aglyn/no-dynamic-first-party-import` exists to keep.\n */\nconst loadMarketingPreviewProps: NonNullable<\n  Parameters<typeof registerSiteRuntime>[0]['loadPreviewProps']\n> = async (ctx) =>\n  (await import('./preview-props')).loadMarketingPreviewProps(ctx)\n\n/**\n * Site half (AGL-419): the overlays/experiments/automations runtime the\n * tenant page renders generically — reads back the slices the plugin's\n * server enricher wrote. Registered via the loader's 'site' surface.\n */\nexport function registerMarketingPlugin(): void {\n  registerSiteRuntime({\n    pluginId: 'marketing',\n    runtimeId: 'marketing-site-runtime',\n    Component: MarketingSiteRuntime,\n    // Editor Preview (AGL-830): rebuild the automations slice client-side so\n    // the same runtime drives hover menus/drawers in preview as on the site.\n    loadPreviewProps: loadMarketingPreviewProps,\n  })\n}\n"],"names":["registerSiteRuntime","MarketingSiteRuntime","loadMarketingPreviewProps","ctx","registerMarketingPlugin","pluginId","runtimeId","Component","loadPreviewProps"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,eAAc;AAClD,SAASC,oBAAoB,QAAQ,+BAA2B;AAEhE;;;;;;;;;;;;;;CAcC,GACD,MAAMC,4BAEF,OAAOC,MACT,AAAC,CAAA,MAAM,MAAM,CAAC,qBAAiB,EAAGD,yBAAyB,CAACC;AAE9D;;;;CAIC,GACD,OAAO,SAASC;IACdJ,oBAAoB;QAClBK,UAAU;QACVC,WAAW;QACXC,WAAWN;QACX,yEAAyE;QACzE,yEAAyE;QACzEO,kBAAkBN;IACpB;AACF"}