@aglyn/plugins-marketing 1.0.0-beta.199 → 1.0.0-beta.200

package/src/lib/server/campaign-manage.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/marketing/src/lib/server/campaign-manage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * TAKING SOMETHING AWAY: a campaign container, and an abandoned draft.\n *\n * Both are removals, and neither may take a delivered message with it. That\n * is the whole reason this file is small and the comments are long.\n *\n * ## Why these two are not client writes\n *\n * The console creates and edits a campaign CONTAINER with the client SDK —\n * `orgs/{orgId}/emailCampaigns` is client-writable, because a container holds\n * no counter, no consent record and no entitlement input. It is not\n * client-DELETABLE: removing one has to detach everything that names it\n * first, across every site in the organization, which no rule can express.\n *\n * The SEND collection is the opposite: `orgs/{orgId}/campaigns` is excluded\n * from client create, update AND delete, because each document is the record\n * of what a merchant mailed and to whom they were allowed to mail it. Both\n * operations here have to touch it — one to detach sends from the container\n * being removed, the other to remove a draft outright — so both run on the\n * Admin SDK behind a role check.\n *\n * ## Two doors: a site, and the organization\n *\n * A campaign belongs to the organization and may be placed on several of its\n * sites. A request from a SITE hub names the site (`hostId`) and is\n * authorized by the caller's role there, as the send route is — and it acts\n * only on what that site holds: a send sent as another site, or a campaign\n * not placed on this one, answers as if it did not exist. A request from the\n * ORGANIZATION hub names the org (`orgId`) and no site, and is authorized by\n * the caller's org-wide membership; for an email it acts in the name of the\n * site the email is sent as.\n *\n * ## What deleting a campaign MEANS\n *\n * The container goes; every email inside it stays, and reads afterwards as a\n * single send.\n *\n * It cannot mean anything else. A send id is cited by mail already delivered\n * — every unsubscribe footer carries `cid={sendId}` inside its own HMAC, and\n * `/marketing/campaigns/{sendId}` is a URL merchants paste into their own\n * messages — so deleting a container that destroyed its sends would break\n * opt-out links that must go on resolving forever, which is a compliance\n * failure rather than a broken page.\n *\n * Nor may the sends simply be left pointing at a container that is gone.\n * `campaignListRows` groups sends by the container they name and draws one\n * row per container; a send naming a container that no longer exists is in\n * neither half of that — not a container row, and not an orphan the list\n * adopts — so it would vanish from the campaigns table while remaining\n * perfectly deliverable. Detaching is what puts it back in the list, as the\n * \"Single send\" the product already models and the table already draws.\n *\n * Deleting a campaign is therefore NOT a way to stop its mail. A scheduled\n * email inside it keeps its send time and still goes out, because a\n * container is a grouping and cancelling somebody's mail is `cancel`'s job.\n * The console says so before it asks.\n *\n * ## The same rule for everything else the campaign held\n *\n * A campaign also groups forms, screens and contacts, each of which names it\n * from its OWN document. They are detached on exactly the argument the sends\n * are: a form left naming a container nobody can read has not been freed, it\n * has been made unreadable — its page draws a dead id where a campaign name\n * belongs, and the campaigns table can no longer find it. The record itself\n * is never touched. Deleting a campaign deletes a campaign.\n */\n\n/*\n * The MODULE, not the barrel. `@aglyn/tenant-data-admin`'s index reaches\n * `render-cache`, which imports `next/cache` and therefore the whole Next\n * server pipeline — everything this file needs from the admin SDK is one\n * default export, and taking it from the leaf keeps that pipeline out of the\n * graph.\n */\nimport firebaseAdmin from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { isDocumentId } from '@aglyn/tenant-data-admin/server/document-id'\nimport { logResourceDuplicated } from '@aglyn/tenant-data-admin/server/duplicate-activity'\nimport {\n  DUPLICATE_BUSY_MESSAGE,\n  duplicateDisplayName,\n  uniqueDuplicateName,\n} from '@aglyn/aglyn/app-utils/duplicate-resource'\nimport { claimAttempt, createResourceUid } from '@aglyn/aglyn/server'\n/*\n * The MODULES again, for the same reason: the org and membership reads here\n * are what the contact pass and the organization door need, and taking them\n * from `@aglyn/tenant-data-admin`'s index would pull the whole Next server\n * pipeline back into this file's graph.\n */\nimport {\n  consentGroupForSite,\n  getOrgDoc,\n  resolveOrgIdForHost,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport {\n  CAMPAIGN_MEMBER_HOST_COLLECTIONS,\n  CAMPAIGN_MEMBERSHIP_FIELD,\n  contactCampaignFieldPath,\n  isOrgWideMember,\n  type AglynOrgMember,\n  type PluginApiHandler,\n  type PluginApiRequestSubject,\n} from '@aglyn/aglyn/server'\nimport {\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n  CAMPAIGN_SEND_HOST_FIELD,\n  campaignPlacedOnHost,\n  campaignSiteIds,\n  campaignVisibleTo,\n} from '@aglyn/shared-ui-email-campaigns/model'\nimport {\n  campaignSendSiteStamp,\n  orgCampaignSends,\n  orgEmailCampaigns,\n  sendHostId,\n  sendIsOnHost,\n} from './campaign-org-refs'\nimport { SCREEN_KIND_EMAIL } from '@aglyn/aglyn/app-utils/screen-route'\nimport {\n  registerPluginResourceDraftWriter,\n  type PluginDraftRecord,\n  type PluginDraftRefusal,\n  type PluginDraftWrite,\n  type PluginResourceDraftWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts'\nimport { runPluginMembershipDetachers } from '@aglyn/aglyn/plugin-manager/plugin-membership-detach'\nimport { isPluginEnabled } from '@aglyn/aglyn/plugin-manager/enabled-plugins'\n\n/**\n * Sends detached in one write.\n *\n * Under Firestore's 500-operation batch limit with room to spare rather than\n * at it: a batch that is refused for being one over has done nothing, and the\n * margin costs one extra round trip on a campaign of exactly this size.\n */\nconst DETACH_BATCH = 400\n\n/**\n * How many batches one request will run.\n *\n * A ceiling on the REQUEST, not on the campaign. The loop below terminates on\n * its own — each pass clears the very field it queries on, so a detached send\n * is not returned again — but a request that runs unbounded is a request that\n * eventually exceeds the platform's own timeout with no idea how far it got.\n *\n * Stopping early is safe and is why this is a ceiling rather than a refusal\n * up front: detaching is idempotent and partial progress is a consistent\n * state — the sends already detached read as single sends, the rest still\n * read under the campaign — so the answer to hitting it is to ask again.\n */\nconst DETACH_PASSES = 25\n\n/**\n * The most sites one deletion walks for members.\n *\n * A campaign is the organization's, so its forms, screens and consent-group\n * facets may be on any of its sites. An organization past this has more\n * sites than one request should sweep, and the deletion refuses rather than\n * removing a container some sites' records would still name.\n */\nconst ORG_SITES_MAX = 200\n\n/** What one `campaigns/manage` call answered with. */\ninterface ManageResult {\n  status: number\n  body: Record<string, unknown>\n}\n\n/**\n * Clears {@link CAMPAIGN_SEND_CONTAINER_FIELD} from every send in a campaign.\n *\n * Equality on one field with a `limit` — no `orderBy` — which Firestore's\n * automatic single-field index serves. Ordering would need a composite index\n * for a walk whose order does not matter: every match is being written, so\n * which order they come back in cannot change the outcome.\n *\n * @returns how many were detached, and whether any were left.\n */\nasync function detachSends(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  for (let pass = 0; pass < DETACH_PASSES; pass += 1) {\n    const page = await orgCampaignSends(firestore, orgId)\n      .where(CAMPAIGN_SEND_CONTAINER_FIELD, '==', campaignId)\n      .limit(DETACH_BATCH)\n      .get()\n    if (page.empty) return { detached, remaining: false }\n    const batch = firestore.batch()\n    for (const send of page.docs) {\n      /*\n       * The FIELD is removed, not set to an empty string. `campaignListRows`\n       * adopts a send whose container id is falsy, so an empty string would\n       * work by accident today — but the field is also what the campaign\n       * detail page's `where` clause matches, and an equality query on `''`\n       * is a different query from the absence the pre-container sends have.\n       * One shape for \"belongs to no campaign\" is what keeps those two\n       * readers agreeing.\n       */\n      batch.update(send.ref, {\n        [CAMPAIGN_SEND_CONTAINER_FIELD]:\n          firebaseAdmin.firestore.FieldValue.delete(),\n      })\n    }\n    await batch.commit()\n    detached += page.size\n    if (page.size < DETACH_BATCH) return { detached, remaining: false }\n  }\n  return { detached, remaining: true }\n}\n\n/**\n * Clears one campaign id out of a membership array, wherever it is held.\n *\n * The same walk {@link detachSends} makes, over an ARRAY field rather than a\n * scalar one: `array-contains` matches on Firestore's automatic single-field\n * index, and `arrayRemove` takes out the one id without touching the other\n * campaigns a form or a screen is in. That is the whole reason the membership\n * is an array here and a `FieldValue.delete()` on a send — a send is in one\n * campaign and a landing page is in several, so removing one must not be\n * removing all of them.\n *\n * `query` rather than a collection ref, because the contact pass hands in a\n * path this file cannot build for itself.\n *\n * @returns how many were detached, and whether any were left.\n */\nasync function detachMembership(\n  firestore: FirebaseFirestore.Firestore,\n  collectionRef: FirebaseFirestore.CollectionReference,\n  fieldPath: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  for (let pass = 0; pass < DETACH_PASSES; pass += 1) {\n    const page = await collectionRef\n      .where(fieldPath, 'array-contains', campaignId)\n      .limit(DETACH_BATCH)\n      .get()\n    if (page.empty) return { detached, remaining: false }\n    const batch = firestore.batch()\n    for (const member of page.docs) {\n      batch.update(member.ref, {\n        [fieldPath]: firebaseAdmin.firestore.FieldValue.arrayRemove(campaignId),\n      })\n    }\n    await batch.commit()\n    detached += page.size\n    if (page.size < DETACH_BATCH) return { detached, remaining: false }\n  }\n  return { detached, remaining: true }\n}\n\n/**\n * Every site of the organization, by id — the sites a campaign's members may\n * be on. One equality on the `hostIndex` mirror, the same document\n * `resolveOrgIdForHost` reads to put a site in an org.\n *\n * @returns the ids, and whether the org has more than {@link ORG_SITES_MAX}.\n */\nasync function orgSiteIds(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<{ hostIds: string[]; truncated: boolean }> {\n  const page = await firestore\n    .collection('hostIndex')\n    .where('orgId', '==', orgId)\n    .limit(ORG_SITES_MAX + 1)\n    .get()\n  const hostIds = page.docs.map((doc) => String(doc.id))\n  return {\n    hostIds: hostIds.slice(0, ORG_SITES_MAX),\n    truncated: hostIds.length > ORG_SITES_MAX,\n  }\n}\n\n/**\n * Clears the campaign off every form, screen, lead and contact holding it,\n * on every site of the organization, and then off every record a plugin\n * keeps about it (AGL-3254).\n *\n * ## Why the campaign is not simply deleted over the top of them\n *\n * A campaign that went away leaving members naming it is the same failure the\n * send detach exists to prevent, one collection over: the campaign's own page\n * finds its forms and screens with `array-contains`, and a form still naming\n * a container nobody can read is in neither half of that — not a member of\n * any campaign the console can draw, and not free of one either. Its own page\n * would render the dead id as a chip with no name.\n *\n * ## Every site, not the one that asked\n *\n * The campaign is the organization's, and a site it has since been taken off\n * may still hold forms and screens filed under it. So the walk covers every\n * site in the org regardless of which door the deletion came through.\n *\n * ## Leads and contacts are reached on the organization\n *\n * A lead lives at `orgs/{orgId}/leads` and carries the field at the top of\n * its document, like a form. The site `leads` collection is walked as well,\n * as part of each site's own collections: records captured before leads\n * moved to the org are still read there.\n *\n * A contact lives at `orgs/{orgId}/contacts` and is shared by every site, so\n * the membership sits inside a consent group's facet rather than at the top\n * of the document. The field PATH is therefore the scope, and the walk runs\n * once per distinct group of the org's sites — two sites declared as one\n * sender share a facet, and clearing it twice would find nothing the second\n * time. The unscoped collection ref is what the walk runs on precisely\n * because the path already carries the boundary — a `visibleTo` filter would\n * spend the query's one array-contains slot and leave none for the\n * membership.\n *\n * ## A plugin's members are the plugin's to clear\n *\n * A sequence and its enrollments name the campaign from documents under the\n * org, in collections this plugin does not know (AGL-3254). Every plugin\n * with a membership detacher registered on the core's seam is asked, once\n * per site, with the campaign's id and the field it is held in, and a\n * detacher that reports records remaining — or threw, which is reported as\n * `null` — holds the container exactly as this pass's own `remaining` does.\n * A plugin that failed is a plugin whose records may still name the\n * campaign, and the deletion has no way to tell that apart from one that has\n * more than a request clears.\n */\nasync function detachMembers(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  let remaining = false\n  const take = (pass: { detached: number; remaining: boolean }) => {\n    detached += pass.detached\n    remaining = remaining || pass.remaining\n  }\n  const { hostIds, truncated } = await orgSiteIds(firestore, orgId)\n  if (truncated) remaining = true\n  for (const hostId of hostIds) {\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    for (const collectionName of CAMPAIGN_MEMBER_HOST_COLLECTIONS) {\n      take(\n        await detachMembership(\n          firestore,\n          hostRef.collection(collectionName),\n          CAMPAIGN_MEMBERSHIP_FIELD,\n          campaignId,\n        ),\n      )\n    }\n  }\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  take(\n    await detachMembership(\n      firestore,\n      orgRef.collection('leads'),\n      CAMPAIGN_MEMBERSHIP_FIELD,\n      campaignId,\n    ),\n  )\n  /*\n   * An org with no sites still has plugins that may hold the campaign, so\n   * the seam is asked once with no site rather than not at all.\n   */\n  for (const hostId of hostIds.length ? hostIds : ['']) {\n    const plugins = await runPluginMembershipDetachers({\n      hostId,\n      orgId,\n      field: CAMPAIGN_MEMBERSHIP_FIELD,\n      id: campaignId,\n    })\n    for (const report of Object.values(plugins)) {\n      detached += report?.detached ?? 0\n      remaining = remaining || report === null || report.remaining\n    }\n  }\n  /*\n   * One read of the org document serves every site's group: with it in\n   * hand, `consentGroupForSite` resolves from the declaration without a\n   * lookup per site. A missing document answers every site as a group of\n   * one, which is `consentGroupForSite`'s documented failure direction and\n   * the safe one here — each site's own facet is cleared, and no other.\n   */\n  const org = ((await getOrgDoc(orgId)) ?? {}) as Record<string, unknown>\n  const groupIds = new Set<string>()\n  for (const hostId of hostIds) {\n    groupIds.add((await consentGroupForSite(hostId, org)).groupId)\n  }\n  const contacts = orgRef.collection('contacts')\n  for (const groupId of groupIds) {\n    take(\n      await detachMembership(\n        firestore,\n        contacts,\n        contactCampaignFieldPath(groupId),\n        campaignId,\n      ),\n    )\n  }\n  return { detached, remaining }\n}\n\n/** Who is deleting, and through which door. */\ninterface DeleteAccess {\n  /** The site hub the request came from, or `''` from the organization hub. */\n  hostId: string\n  /** The caller, for the site door's reach check. */\n  uid: string\n}\n\n/**\n * Removes a campaign container, leaving its emails standing.\n *\n * Detach first, delete second, and the order is the point: stopping between\n * them leaves a container whose emails are already single sends, which the\n * list draws correctly and a second run finishes. Deleting first would leave\n * sends naming a container nobody can read, which is the state that loses\n * them from the table.\n *\n * ## What a site hub may delete\n *\n * A campaign placed on this site and on no other — the one a site hub\n * creates. A campaign that is not placed here is not this site's to see, so\n * it answers 404 as a missing one would. A campaign also placed on other\n * sites is refused unless the caller is an org-wide member: deleting it\n * takes it off those sites too, which is the same reach change the rules\n * reserve for org-wide members when a campaign is edited.\n */\nasync function deleteCampaign(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n  access: DeleteAccess,\n): Promise<ManageResult> {\n  const ref = orgEmailCampaigns(firestore, orgId).doc(campaignId)\n  const snapshot = await ref.get()\n  /*\n   * A 404 rather than a silent success. The id in a campaign URL may name a\n   * container OR a single send — that ambiguity is what keeps every link\n   * minted before containers existed resolving — so \"no container here\" is\n   * very often \"this is a send\", and answering it as a completed deletion\n   * would tell the console it had removed something it never touched.\n   */\n  const placement = {\n    visibleTo: snapshot.exists\n      ? (snapshot.get('visibleTo') as string[] | undefined)\n      : undefined,\n  }\n  if (\n    !snapshot.exists ||\n    (access.hostId && !campaignPlacedOnHost(placement, access.hostId))\n  ) {\n    return { status: 404, body: { error: 'Unknown campaign' } }\n  }\n  if (access.hostId) {\n    const sites = campaignSiteIds(placement)\n    const onlyHere = sites !== null && sites.every((id) => id === access.hostId)\n    if (!onlyHere) {\n      const membership = await resolveOrgMembership(access.uid, orgId)\n      if (!isOrgWideMember(membership?.member)) {\n        return {\n          status: 403,\n          body: {\n            error:\n              'This campaign is on other sites too, so deleting it would take ' +\n              'it off them as well. An organization admin can delete it from ' +\n              'the organization’s campaigns.',\n          },\n        }\n      }\n    }\n  }\n  const { detached, remaining } = await detachSends(firestore, orgId, campaignId)\n  if (remaining) {\n    return {\n      status: 409,\n      body: {\n        detached,\n        error:\n          `This campaign holds more emails than one request can detach. ` +\n          `${detached.toLocaleString()} of them now read as single sends and ` +\n          'the campaign is still here — run the delete again to finish it.',\n      },\n    }\n  }\n  /*\n   * The MEMBERS come off before the container does, for the reason the sends\n   * do: a partial run leaves records that are already out of the campaign,\n   * which every surface draws correctly, while deleting first would leave\n   * forms, screens and contacts naming an id nothing can resolve.\n   *\n   * Their own 409 rather than a shared one. \"More emails than one request can\n   * detach\" is a sentence about the campaign's mail, and a merchant reading\n   * it about a campaign of two emails and four thousand contacts would go\n   * looking for emails that are not the problem.\n   */\n  const members = await detachMembers(firestore, orgId, campaignId)\n  if (members.remaining) {\n    return {\n      status: 409,\n      body: {\n        detached,\n        detachedMembers: members.detached,\n        error:\n          'This campaign is on more records than one request can clear. ' +\n          `${members.detached.toLocaleString()} of them are already out of ` +\n          'it and the campaign is still here — run the delete again to ' +\n          'finish it.',\n      },\n    }\n  }\n  await ref.delete()\n  return {\n    status: 200,\n    body: {\n      campaignId,\n      detached,\n      detachedMembers: members.detached,\n      deleted: true,\n    },\n  }\n}\n\n/**\n * Discards a DRAFT email, and refuses anything else.\n *\n * The state check is inside the transaction as well as being the reason for\n * it. `sendNow` claims a draft by moving it to `sending` in a transaction of\n * its own, so a check made against an earlier read could delete a record\n * while the send path was mailing from it — the merchant would receive a\n * report for an email that no longer exists, and its `cid` would stop\n * resolving with the message already in inboxes.\n *\n * Only `draft`. A scheduled email is withdrawn with `cancel`, which leaves\n * the record and its report standing; a sent one has reached people, and\n * nothing on this surface may remove the evidence of that.\n *\n * `hostId` is the site hub the request came from, and a draft sent as a\n * different site is refused as unknown; from the organization hub it is\n * `''` and any site's draft may be discarded.\n */\nasync function discardDraft(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  emailId: string,\n  hostId: string,\n): Promise<ManageResult> {\n  const ref = orgCampaignSends(firestore, orgId).doc(emailId)\n  const refusal = (state: string): string => {\n    if (state === 'sent') {\n      return 'This email has already been sent, so it cannot be discarded. ' +\n        'Its report and its unsubscribe links have to go on resolving.'\n    }\n    if (state === 'scheduled') {\n      return 'This email is scheduled. Cancel the send first — cancelling ' +\n        'keeps the email and takes it off the clock.'\n    }\n    if (state === 'sending') {\n      return 'This email is being sent right now.'\n    }\n    return 'Only a draft can be discarded.'\n  }\n  const outcome = await firestore.runTransaction(\n    async (transaction): Promise<ManageResult> => {\n      const fresh = await transaction.get(ref)\n      if (!fresh.exists || (hostId && !sendIsOnHost(fresh, hostId))) {\n        return { status: 404, body: { error: 'Unknown email' } }\n      }\n      const state = String(fresh.get('status') ?? '')\n      if (state !== 'draft') {\n        return { status: 409, body: { error: refusal(state) } }\n      }\n      /*\n       * A plain delete, with nothing recursive under it. The one\n       * subcollection a message grows is `reports/links`, written by the\n       * delivery webhook — an email that has never been sent has no\n       * deliveries, so there is nothing beneath a draft to leave behind.\n       */\n      transaction.delete(ref)\n      return { status: 200, body: { emailId, discarded: true } }\n    },\n  )\n  return outcome\n}\n\n/**\n * The fields a copy of a message carries (AGL-2936): what was written and\n * how it is sent — never who it goes to or when. The audience, list,\n * segment, addresses, schedule and experiment are the decisions a person\n * makes about THIS send, and a copy that inherited them would be one click\n * from mailing the same people twice.\n */\nconst DUPLICATED_MESSAGE_FIELDS = [\n  'subject',\n  'body',\n  'fromName',\n  'replyTo',\n  'senderId',\n  'templateScreenId',\n  'plainText',\n  'plainTextVersionId',\n  'topicId',\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n] as const\n\n/**\n * Copies a message as a new draft (AGL-2936). Any status can be copied —\n * a sent email is the usual source — and the copy is always `draft`, with\n * the name the person gave it made unique among its site's messages.\n *\n * The copy is sent as the same site as its source: the sender, the design\n * and the consent it would mail under are all that site's. From a site hub\n * that is the requesting site, and a source sent as another site is refused\n * as unknown; from the organization hub (`hostId` `''`) it is whichever site\n * the source records, and a source that records none cannot be copied,\n * because the copy would be an email that can never be sent.\n */\nasync function duplicateMessage(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostId: string,\n  emailId: string,\n  requestedName: string,\n  actor: { uid: string; email: string | null },\n): Promise<ManageResult> {\n  const messages = orgCampaignSends(firestore, orgId)\n  const id = createResourceUid()\n  /*\n   * The source is read once outside the transaction to learn its site, which\n   * decides which siblings the name must be unique among; the transaction\n   * reads it again, so a source changed in between is copied as it stands.\n   */\n  const peek = await messages.doc(emailId).get()\n  if (!peek.exists || (hostId && !sendIsOnHost(peek, hostId))) {\n    return { status: 404, body: { error: 'Unknown email' } }\n  }\n  const siteId = hostId || sendHostId(peek)\n  if (!siteId) {\n    return {\n      status: 409,\n      body: {\n        error:\n          'This email does not record which site it is sent from, so it ' +\n          'cannot be copied from here. Open it from its site instead.',\n      },\n    }\n  }\n  const outcome = await firestore.runTransaction(\n    async (transaction): Promise<ManageResult & { name?: string; sourceName?: string }> => {\n      const [source, siblings] = await Promise.all([\n        transaction.get(messages.doc(emailId)),\n        transaction.get(\n          messages\n            .select('displayName', 'subject')\n            .where(CAMPAIGN_SEND_HOST_FIELD, '==', siteId),\n        ),\n      ])\n      if (!source.exists) {\n        return { status: 404, body: { error: 'Unknown email' } }\n      }\n      const data = (source.data() ?? {}) as Record<string, unknown>\n      const sourceName = String(data['displayName'] ?? data['subject'] ?? '').trim()\n      const name = uniqueDuplicateName(\n        requestedName.trim() || duplicateDisplayName(sourceName),\n        siblings.docs.map((row) => String(row.get('displayName') ?? row.get('subject') ?? '')),\n      )\n      const copy: Record<string, unknown> = {}\n      for (const field of DUPLICATED_MESSAGE_FIELDS) {\n        if (data[field] !== undefined && data[field] !== null) copy[field] = data[field]\n      }\n      const nowMs = Date.now()\n      transaction.create(messages.doc(id), {\n        ...copy,\n        ...campaignSendSiteStamp(siteId),\n        displayName: name,\n        status: 'draft',\n        createdAtMs: nowMs,\n        draftedAt: new Date(nowMs),\n        draftedBy: actor.uid,\n      })\n      return { status: 200, body: { emailId: id, name }, name, sourceName }\n    },\n  )\n  if (outcome.status === 200) {\n    await logResourceDuplicated(\n      'campaign',\n      { uid: actor.uid, email: actor.email },\n      {\n        orgId,\n        hostId: siteId,\n        source: { id: emailId, name: outcome.sourceName ?? '' },\n        target: { id, name: outcome.name ?? '' },\n      },\n    )\n  }\n  return { status: outcome.status, body: outcome.body }\n}\n\n/*==========================================\n * A CAMPAIGN THAT EXISTS BEFORE ANYBODY CHOSE WHO GETS IT (AGL-2912).\n *\n * The draft writer this plugin registers for the `campaign` resource on the\n * core's resource-drafts seam. Another plugin that produces a campaign — a\n * generator working from a brief, an importer bringing campaigns over from\n * another tool — asks for it by name, and gets exactly two documents:\n *\n *  - the CONTAINER at `orgs/{orgId}/emailCampaigns/{id}`, written as a site\n *    hub's create drawer writes one: aimed at no list, placed on the site\n *    the draft was asked for;\n *  - ONE EMAIL inside it at `orgs/{orgId}/campaigns/{id}-email`,\n *    `status: 'draft'`, sent as that site, naming the email design it sends\n *    and holding its subject, preheader and the alternatives to them.\n *\n * ## What a drafted email never holds\n *\n * An audience, a list, a segment, addresses, a topic, a sender, a send time or\n * an experiment. Those are the decisions a person makes about a send — the\n * duplicate above strips the same ones for the same reason — and a draft that\n * arrived holding any of them would be one click from mailing people nobody\n * chose. So the writer has no field for them to arrive in.\n *\n * ## Why a draft cannot escape\n *\n * Nothing here reserves an allowance, claims a budget or calls the send path,\n * and the scheduled processor queries `status == 'scheduled'`, which a draft\n * never is. `performCampaignSend` is the only thing that mails a draft, behind\n * the send route's own authorization, when a member asks.\n *\n * The id of the email is derived from the campaign's rather than minted, so a\n * write asked again finds the email it made — and differs from it, because a\n * campaign URL names a container OR a send, and one id naming both would read\n * as either.\n *=========================================*/\n\n/** The resource name the campaign draft writer is registered under. */\nexport const CAMPAIGN_DRAFT_RESOURCE = 'campaign'\n\n/** The id `plugins.config.json` registers this plugin under. */\nconst MARKETING_PLUGIN_ID = 'marketing'\n\n/** A drafted campaign's name when the caller asks for none. */\nexport const CAMPAIGN_DRAFT_DEFAULT_NAME = 'Untitled campaign'\n\n/** The longest subject or preheader a drafted email stores: the send route's header cap. */\nexport const CAMPAIGN_DRAFT_HEADER_MAX_CHARS = 200\n\n/** The most alternative subject lines or preheaders a drafted email keeps. */\nexport const CAMPAIGN_DRAFT_MAX_VARIANTS = 10\n\n/** The site roles that may compose this site's mail. */\nexport const CAMPAIGN_DRAFT_ROLES = ['admin', 'editor'] as const\n/** The send route's refusal for a member who may not compose this site's mail. */\nexport const CAMPAIGN_DRAFT_ROLE_REFUSAL = 'Not a site admin or editor'\n\n/** The id of the one email inside a drafted campaign. */\nexport function campaignDraftEmailId(campaignId: string): string {\n  return `${campaignId}-email`\n}\n\n/** Every field a drafted email is written with, and so every field it can hold. */\nexport const CAMPAIGN_DRAFT_EMAIL_FIELDS = [\n  'subject',\n  'preheader',\n  'templateScreenId',\n  'subjectVariants',\n  'preheaderVariants',\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n  CAMPAIGN_SEND_HOST_FIELD,\n  'visibleTo',\n  'status',\n  'createdAtMs',\n  'draftedAt',\n  'draftedBy',\n] as const\n\n/** What a caller sends as `content`. */\nexport interface CampaignDraftContent {\n  /** The email design the email sends: a `kind: 'email'` screen on the site. */\n  templateScreenId: string\n  subject: string\n  preheader: string\n  subjectVariants: string[]\n  preheaderVariants: string[]\n}\n\n/** A header value on one line: controls and runs of space folded to one space. */\nfunction draftHeaderLine(value: unknown): string {\n  return String(value ?? '').replace(/[\\p{Cc}\\s]+/gu, ' ').trim()\n}\n\nfunction draftVariants(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  const seen = new Set<string>()\n  const lines: string[] = []\n  for (const raw of value) {\n    const line = draftHeaderLine(raw)\n    if (!line || seen.has(line.toLowerCase())) continue\n    seen.add(line.toLowerCase())\n    lines.push(line)\n  }\n  return lines.slice(0, CAMPAIGN_DRAFT_MAX_VARIANTS)\n}\n\nexport function readCampaignDraftContent(\n  content: Readonly<Record<string, unknown>>,\n): { ok: true; value: CampaignDraftContent } | { ok: false; problems: string[] } {\n  const value: CampaignDraftContent = {\n    templateScreenId: String(content['templateScreenId'] ?? ''),\n    subject: draftHeaderLine(content['subject']),\n    preheader: draftHeaderLine(content['preheader']),\n    subjectVariants: draftVariants(content['subjectVariants']),\n    preheaderVariants: draftVariants(content['preheaderVariants']),\n  }\n  const problems: string[] = []\n  if (!isDocumentId(value.templateScreenId)) {\n    problems.push('A drafted campaign needs the email design it sends')\n  }\n  if (!value.subject) problems.push('A drafted campaign needs a subject line')\n  const long = (lines: string[]) =>\n    lines.some((line) => line.length > CAMPAIGN_DRAFT_HEADER_MAX_CHARS)\n  if (long([value.subject, ...value.subjectVariants])) {\n    problems.push(`A subject line is longer than ${CAMPAIGN_DRAFT_HEADER_MAX_CHARS} characters`)\n  }\n  if (long([value.preheader, ...value.preheaderVariants])) {\n    problems.push(`A preheader is longer than ${CAMPAIGN_DRAFT_HEADER_MAX_CHARS} characters`)\n  }\n  return problems.length ? { ok: false, problems } : { ok: true, value }\n}\n\nfunction campaignDraftRoleRefusal(\n  host: FirebaseFirestore.DocumentSnapshot,\n  uid: string,\n): PluginDraftRefusal | null {\n  const role = (host.get('memberRoles') ?? {})[uid]\n  return CAMPAIGN_DRAFT_ROLES.includes(role)\n    ? null\n    : { status: 403, error: CAMPAIGN_DRAFT_ROLE_REFUSAL }\n}\n\nfunction campaignDraftRecord(campaign: FirebaseFirestore.DocumentSnapshot): PluginDraftRecord {\n  return {\n    id: campaign.id,\n    name: String(campaign.get('name') ?? ''),\n    versionId: null,\n    facts: { emailId: campaignDraftEmailId(campaign.id) },\n  }\n}\n\nexport interface CampaignDraftWriterDeps {\n  /** The Admin SDK handle; specs hand in a double. */\n  firestore?: () => FirebaseFirestore.Firestore\n  /** The site's organization, or null; specs hand in a double. */\n  resolveOrgId?: (hostId: string) => Promise<string | null>\n}\n\nexport function createCampaignDraftWriter(\n  deps: CampaignDraftWriterDeps = {},\n): PluginResourceDraftWriter {\n  const firestore =\n    deps.firestore ??\n    (() => firebaseAdmin.app().firestore() as unknown as FirebaseFirestore.Firestore)\n  /*\n   * The org is resolved from the SITE rather than taken from the request's\n   * context: the site is what the role check reads, so the campaign lands in\n   * the organization that site belongs to and no other.\n   */\n  const resolveOrgId = deps.resolveOrgId ?? resolveOrgIdForHost\n  return {\n    refusal: async ({ hostId, uid }) => {\n      const host = await firestore().collection('hosts').doc(hostId).get()\n      if (!host.exists) return { status: 404, error: 'Unknown site' }\n      return campaignDraftRoleRefusal(host, uid)\n    },\n\n    check: (content) => {\n      const read = readCampaignDraftContent(content)\n      return read.ok === false\n        ? read\n        : { ok: true, facts: { fields: [...CAMPAIGN_DRAFT_EMAIL_FIELDS] } }\n    },\n\n    read: async ({ hostId, id }) => {\n      if (!isDocumentId(id)) return null\n      const orgId = await resolveOrgId(hostId)\n      if (!orgId) return null\n      const campaign = await orgEmailCampaigns(firestore(), orgId).doc(id).get()\n      return campaign.exists &&\n        campaignPlacedOnHost(\n          { visibleTo: campaign.get('visibleTo') as string[] | undefined },\n          hostId,\n        )\n        ? campaignDraftRecord(campaign)\n        : null\n    },\n\n    write: async (request): Promise<PluginDraftWrite> => {\n      const read = readCampaignDraftContent(request.content)\n      if (read.ok === false) return { ok: false, status: 400, error: read.problems[0] }\n      if (!isDocumentId(request.id)) return { ok: false, status: 400, error: 'Invalid campaignId' }\n      const db = firestore()\n      const orgId = await resolveOrgId(request.hostId)\n      if (!orgId) {\n        return { ok: false, status: 409, error: 'This site is not part of an organization' }\n      }\n      const hostRef = db.collection('hosts').doc(request.hostId)\n      const campaignRef = orgEmailCampaigns(db, orgId).doc(request.id)\n      const emailId = campaignDraftEmailId(request.id)\n      const emailRef = orgCampaignSends(db, orgId).doc(emailId)\n      const designRef = hostRef.collection('screens').doc(read.value.templateScreenId)\n      return db.runTransaction(async (transaction): Promise<PluginDraftWrite> => {\n        const [host, campaign, email, design] = await Promise.all([\n          transaction.get(hostRef),\n          transaction.get(campaignRef),\n          transaction.get(emailRef),\n          transaction.get(designRef),\n        ])\n        if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n        if (campaign.exists) {\n          /*\n           * A replay answers only for a campaign this site can see: the id\n           * space is the organization's, and one placed on a sibling site is\n           * not this request's to report or to write over.\n           */\n          if (\n            !campaignPlacedOnHost(\n              { visibleTo: campaign.get('visibleTo') as string[] | undefined },\n              request.hostId,\n            )\n          ) {\n            return { ok: false, status: 409, error: 'That campaign already exists' }\n          }\n          return { ok: true, replayed: true, ...campaignDraftRecord(campaign) }\n        }\n        const refusal = campaignDraftRoleRefusal(host, request.uid)\n        if (refusal) return { ok: false, ...refusal }\n        if (\n          !design.exists ||\n          design.get('deletedAt') != null ||\n          design.get('kind') !== SCREEN_KIND_EMAIL\n        ) {\n          return { ok: false, status: 400, error: 'Unknown email design' }\n        }\n        if (email.exists) return { ok: false, status: 409, error: 'That email already exists' }\n        const name = draftHeaderLine(request.name) || CAMPAIGN_DRAFT_DEFAULT_NAME\n        const nowMs = request.now.getTime()\n        // A site hub's create drawer's own document: a name, no dates, no\n        // lists, placed on the site it was drafted for.\n        transaction.create(campaignRef, {\n          name,\n          listIds: [],\n          visibleTo: campaignVisibleTo([request.hostId]),\n          createdAtMs: nowMs,\n          createdBy: request.uid,\n        })\n        const { value } = read\n        transaction.create(emailRef, {\n          subject: value.subject,\n          ...(value.preheader ? { preheader: value.preheader } : {}),\n          templateScreenId: value.templateScreenId,\n          ...(value.subjectVariants.length ? { subjectVariants: value.subjectVariants } : {}),\n          ...(value.preheaderVariants.length ? { preheaderVariants: value.preheaderVariants } : {}),\n          [CAMPAIGN_SEND_CONTAINER_FIELD]: request.id,\n          ...campaignSendSiteStamp(request.hostId),\n          status: 'draft',\n          createdAtMs: nowMs,\n          draftedAt: request.now,\n          draftedBy: request.uid,\n        })\n        return {\n          ok: true,\n          replayed: false,\n          id: request.id,\n          name,\n          versionId: null,\n          facts: { emailId },\n        }\n      })\n    },\n  }\n}\n\nexport const campaignDraftWriter = createCampaignDraftWriter()\n\n/**\n * Registers the writer; the console surface calls it, since only the console\n * runs AI jobs (AGL-3026). Idempotent: a second call replaces the first.\n */\nexport function registerCampaignDraftWriter(): void {\n  registerPluginResourceDraftWriter(CAMPAIGN_DRAFT_RESOURCE, campaignDraftWriter, {\n    pluginId: MARKETING_PLUGIN_ID,\n  })\n}\n\n/** The org roles that may manage campaigns from the organization hub. */\nconst ORG_MANAGE_ROLES = ['owner', 'admin', 'editor'] as const\n\n/**\n * The organization a `campaigns/manage` request from the organization hub is\n * for, read off its JSON body, so the dispatcher's release gate asks about the\n * right organization. Only consulted for a request that names no site.\n * Unverified, exactly as a `hostId` is: the handler refuses anyone who is not\n * an org-wide member of it.\n */\nexport async function campaignManageSubject(\n  request: Request,\n): Promise<PluginApiRequestSubject | null> {\n  if (request.method !== 'POST') return null\n  const body = (await request.json().catch(() => null)) as { orgId?: unknown } | null\n  const orgId = typeof body?.orgId === 'string' ? body.orgId : ''\n  return isDocumentId(orgId) ? { orgId } : null\n}\n\n/**\n * Campaign management API: removing a campaign, discarding a draft, and\n * copying an email.\n *\n * Separate from `campaigns/send` because nothing here sends, reserves\n * allowance or moves a meter, and because the removals are about a record\n * ceasing to exist — which is the one class of change that has to be read\n * against what a merchant has already mailed.\n *\n * Reached through two doors — see the header. A site request carries\n * `hostId` and is authorized by the caller's admin or editor role on that\n * site; an organization request carries `orgId` and no `hostId`, and is\n * authorized by an org-wide membership as owner, admin or editor.\n *\n * Editing a campaign is deliberately NOT here. The container is client-\n * writable, its create already runs on the client SDK, and a second door to\n * the same document would be a second place for the two to disagree about\n * what a campaign may hold.\n */\nexport const campaignManageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const requestedOrgId = String(req.body?.orgId ?? '')\n  const action = String(req.body?.action ?? '')\n  const targetId = String(req.body?.campaignId ?? '')\n  if (!hostId && !requestedOrgId) {\n    return res.status(400).json({ error: 'Missing hostId' })\n  }\n  if (hostId && !isDocumentId(hostId)) {\n    return res.status(400).json({ error: 'Invalid hostId' })\n  }\n  if (requestedOrgId && !isDocumentId(requestedOrgId)) {\n    return res.status(400).json({ error: 'Invalid orgId' })\n  }\n  if (!isDocumentId(targetId)) {\n    return res.status(400).json({ error: 'Invalid campaignId' })\n  }\n  if (\n    action !== 'deleteCampaign' &&\n    action !== 'discardEmail' &&\n    action !== 'duplicate'\n  ) {\n    return res.status(400).json({ error: 'Unknown action' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    let orgId: string\n    if (hostId) {\n      const hostRef = firestore.collection('hosts').doc(hostId)\n      const hostSnapshot = await hostRef.get()\n      if (!hostSnapshot.exists) {\n        return res.status(404).json({ error: 'Unknown site' })\n      }\n      const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n      if (memberRole !== 'admin' && memberRole !== 'editor') {\n        return res.status(403).json({ error: 'Not a site admin or editor' })\n      }\n      orgId = (await resolveOrgIdForHost(hostId)) ?? ''\n      if (!orgId) {\n        return res.status(409).json({\n          error: 'This site is not part of an organization, so it holds no campaigns.',\n        })\n      }\n      /*\n       * A request naming both is answered for the site, and only when the\n       * two agree: an org id the site does not belong to is a confused\n       * caller, and acting on the site's own org instead would be a guess.\n       */\n      if (requestedOrgId && requestedOrgId !== orgId) {\n        return res.status(400).json({ error: 'That site is not in this organization' })\n      }\n    } else {\n      const membership = await resolveOrgMembership(decoded.uid, requestedOrgId)\n      const member = membership?.member as Partial<AglynOrgMember> | undefined\n      if (\n        !member ||\n        !isOrgWideMember(member) ||\n        !(ORG_MANAGE_ROLES as readonly string[]).includes(String(member.role ?? ''))\n      ) {\n        return res\n          .status(403)\n          .json({ error: 'Not an organization owner, admin or editor' })\n      }\n      /*\n       * The site door is refused by the dispatcher when Marketing is off for\n       * the site; a request naming no site reaches here past only the release\n       * gate, so the organization's own switch is asked here.\n       */\n      if (!isPluginEnabled(await getOrgDoc(requestedOrgId), MARKETING_PLUGIN_ID)) {\n        return res.status(404).json({ error: 'Not found' })\n      }\n      orgId = requestedOrgId\n    }\n\n    if (action === 'duplicate') {\n      // One attempt key, one copy (AGL-2936): a double click on Duplicate\n      // replays the first answer rather than drafting the message twice.\n      const attemptKey = String(req.body?.attemptKey ?? '').trim().slice(0, 200)\n      const claimed = attemptKey\n        ? await claimAttempt(firestore as never, {\n            kind: 'duplicate-campaign',\n            scopeId: `${hostId || `org:${orgId}`}:${targetId}`,\n            orgId,\n            key: attemptKey,\n            busyMessage: DUPLICATE_BUSY_MESSAGE,\n          })\n        : null\n      if (claimed && 'replay' in claimed) {\n        return res.status(claimed.replay.status).json(claimed.replay.body)\n      }\n      const claim = claimed && 'claim' in claimed ? claimed.claim : null\n      const copied = await duplicateMessage(\n        firestore,\n        orgId,\n        hostId,\n        targetId,\n        String(req.body?.name ?? ''),\n        { uid: decoded.uid, email: decoded.email ?? null },\n      )\n      if (copied.status === 200) await claim?.record(copied.status, copied.body)\n      else await claim?.release()\n      return res.status(copied.status).json(copied.body)\n    }\n    const result =\n      action === 'deleteCampaign'\n        ? await deleteCampaign(firestore, orgId, targetId, {\n            hostId,\n            uid: decoded.uid,\n          })\n        : await discardDraft(firestore, orgId, targetId, hostId)\n    return res.status(result.status).json(result.body)\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'The request could not be completed' })\n  }\n}\n"],"names":["firebaseAdmin","isDocumentId","logResourceDuplicated","DUPLICATE_BUSY_MESSAGE","duplicateDisplayName","uniqueDuplicateName","claimAttempt","createResourceUid","consentGroupForSite","getOrgDoc","resolveOrgIdForHost","resolveOrgMembership","CAMPAIGN_MEMBER_HOST_COLLECTIONS","CAMPAIGN_MEMBERSHIP_FIELD","contactCampaignFieldPath","isOrgWideMember","CAMPAIGN_SEND_CONTAINER_FIELD","CAMPAIGN_SEND_HOST_FIELD","campaignPlacedOnHost","campaignSiteIds","campaignVisibleTo","campaignSendSiteStamp","orgCampaignSends","orgEmailCampaigns","sendHostId","sendIsOnHost","SCREEN_KIND_EMAIL","registerPluginResourceDraftWriter","runPluginMembershipDetachers","isPluginEnabled","DETACH_BATCH","DETACH_PASSES","ORG_SITES_MAX","detachSends","firestore","orgId","campaignId","detached","pass","page","where","limit","get","empty","remaining","batch","send","docs","update","ref","FieldValue","delete","commit","size","detachMembership","collectionRef","fieldPath","member","arrayRemove","orgSiteIds","collection","hostIds","map","doc","String","id","slice","truncated","length","detachMembers","take","hostId","hostRef","collectionName","orgRef","plugins","field","report","Object","values","org","groupIds","Set","add","groupId","contacts","deleteCampaign","access","snapshot","placement","visibleTo","exists","undefined","status","body","error","sites","onlyHere","every","membership","uid","toLocaleString","members","detachedMembers","deleted","discardDraft","emailId","refusal","state","outcome","runTransaction","transaction","fresh","discarded","DUPLICATED_MESSAGE_FIELDS","duplicateMessage","requestedName","actor","messages","peek","siteId","source","data","siblings","Promise","all","select","sourceName","trim","name","row","copy","nowMs","Date","now","create","displayName","createdAtMs","draftedAt","draftedBy","email","target","CAMPAIGN_DRAFT_RESOURCE","MARKETING_PLUGIN_ID","CAMPAIGN_DRAFT_DEFAULT_NAME","CAMPAIGN_DRAFT_HEADER_MAX_CHARS","CAMPAIGN_DRAFT_MAX_VARIANTS","CAMPAIGN_DRAFT_ROLES","CAMPAIGN_DRAFT_ROLE_REFUSAL","campaignDraftEmailId","CAMPAIGN_DRAFT_EMAIL_FIELDS","draftHeaderLine","value","replace","draftVariants","Array","isArray","seen","lines","raw","line","has","toLowerCase","push","readCampaignDraftContent","content","templateScreenId","subject","preheader","subjectVariants","preheaderVariants","problems","long","some","ok","campaignDraftRoleRefusal","host","role","includes","campaignDraftRecord","campaign","versionId","facts","createCampaignDraftWriter","deps","app","resolveOrgId","check","read","fields","write","request","db","campaignRef","emailRef","designRef","design","replayed","getTime","listIds","createdBy","campaignDraftWriter","registerCampaignDraftWriter","pluginId","ORG_MANAGE_ROLES","campaignManageSubject","method","json","catch","campaignManageHandler","req","res","requestedOrgId","action","targetId","authorization","headers","idToken","startsWith","decoded","auth","verifyIdToken","hostSnapshot","memberRole","attemptKey","claimed","kind","scopeId","key","busyMessage","replay","claim","copied","record","release","result","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiEC,GAED;;;;;;CAMC,GACD,OAAOA,mBAAmB,iDAAgD;AAC1E,SAASC,YAAY,QAAQ,8CAA6C;AAC1E,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SACEC,sBAAsB,EACtBC,oBAAoB,EACpBC,mBAAmB,QACd,4CAA2C;AAClD,SAASC,YAAY,EAAEC,iBAAiB,QAAQ,sBAAqB;AACrE;;;;;CAKC,GACD,SACEC,mBAAmB,EACnBC,SAAS,EACTC,mBAAmB,EACnBC,oBAAoB,QACf,gDAA+C;AACtD,SACEC,gCAAgC,EAChCC,yBAAyB,EACzBC,wBAAwB,EACxBC,eAAe,QAIV,sBAAqB;AAC5B,SACEC,6BAA6B,EAC7BC,wBAAwB,EACxBC,oBAAoB,EACpBC,eAAe,EACfC,iBAAiB,QACZ,yCAAwC;AAC/C,SACEC,qBAAqB,EACrBC,gBAAgB,EAChBC,iBAAiB,EACjBC,UAAU,EACVC,YAAY,QACP,yBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SACEC,iCAAiC,QAK5B,qDAAoD;AAC3D,SAASC,4BAA4B,QAAQ,uDAAsD;AACnG,SAASC,eAAe,QAAQ,8CAA6C;AAE7E;;;;;;CAMC,GACD,MAAMC,eAAe;AAErB;;;;;;;;;;;;CAYC,GACD,MAAMC,gBAAgB;AAEtB;;;;;;;CAOC,GACD,MAAMC,gBAAgB;AAQtB;;;;;;;;;CASC,GACD,eAAeC,YACbC,SAAsC,EACtCC,KAAa,EACbC,UAAkB;IAElB,IAAIC,WAAW;IACf,IAAK,IAAIC,OAAO,GAAGA,OAAOP,eAAeO,QAAQ,EAAG;QAClD,MAAMC,OAAO,MAAMjB,iBAAiBY,WAAWC,OAC5CK,KAAK,CAACxB,+BAA+B,MAAMoB,YAC3CK,KAAK,CAACX,cACNY,GAAG;QACN,IAAIH,KAAKI,KAAK,EAAE,OAAO;YAAEN;YAAUO,WAAW;QAAM;QACpD,MAAMC,QAAQX,UAAUW,KAAK;QAC7B,KAAK,MAAMC,QAAQP,KAAKQ,IAAI,CAAE;YAC5B;;;;;;;;OAQC,GACDF,MAAMG,MAAM,CAACF,KAAKG,GAAG,EAAE;gBACrB,CAACjC,8BAA8B,EAC7BhB,cAAckC,SAAS,CAACgB,UAAU,CAACC,MAAM;YAC7C;QACF;QACA,MAAMN,MAAMO,MAAM;QAClBf,YAAYE,KAAKc,IAAI;QACrB,IAAId,KAAKc,IAAI,GAAGvB,cAAc,OAAO;YAAEO;YAAUO,WAAW;QAAM;IACpE;IACA,OAAO;QAAEP;QAAUO,WAAW;IAAK;AACrC;AAEA;;;;;;;;;;;;;;;CAeC,GACD,eAAeU,iBACbpB,SAAsC,EACtCqB,aAAoD,EACpDC,SAAiB,EACjBpB,UAAkB;IAElB,IAAIC,WAAW;IACf,IAAK,IAAIC,OAAO,GAAGA,OAAOP,eAAeO,QAAQ,EAAG;QAClD,MAAMC,OAAO,MAAMgB,cAChBf,KAAK,CAACgB,WAAW,kBAAkBpB,YACnCK,KAAK,CAACX,cACNY,GAAG;QACN,IAAIH,KAAKI,KAAK,EAAE,OAAO;YAAEN;YAAUO,WAAW;QAAM;QACpD,MAAMC,QAAQX,UAAUW,KAAK;QAC7B,KAAK,MAAMY,UAAUlB,KAAKQ,IAAI,CAAE;YAC9BF,MAAMG,MAAM,CAACS,OAAOR,GAAG,EAAE;gBACvB,CAACO,UAAU,EAAExD,cAAckC,SAAS,CAACgB,UAAU,CAACQ,WAAW,CAACtB;YAC9D;QACF;QACA,MAAMS,MAAMO,MAAM;QAClBf,YAAYE,KAAKc,IAAI;QACrB,IAAId,KAAKc,IAAI,GAAGvB,cAAc,OAAO;YAAEO;YAAUO,WAAW;QAAM;IACpE;IACA,OAAO;QAAEP;QAAUO,WAAW;IAAK;AACrC;AAEA;;;;;;CAMC,GACD,eAAee,WACbzB,SAAsC,EACtCC,KAAa;IAEb,MAAMI,OAAO,MAAML,UAChB0B,UAAU,CAAC,aACXpB,KAAK,CAAC,SAAS,MAAML,OACrBM,KAAK,CAACT,gBAAgB,GACtBU,GAAG;IACN,MAAMmB,UAAUtB,KAAKQ,IAAI,CAACe,GAAG,CAAC,CAACC,MAAQC,OAAOD,IAAIE,EAAE;IACpD,OAAO;QACLJ,SAASA,QAAQK,KAAK,CAAC,GAAGlC;QAC1BmC,WAAWN,QAAQO,MAAM,GAAGpC;IAC9B;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDC,GACD,eAAeqC,cACbnC,SAAsC,EACtCC,KAAa,EACbC,UAAkB;QAuDJ;IArDd,IAAIC,WAAW;IACf,IAAIO,YAAY;IAChB,MAAM0B,OAAO,CAAChC;QACZD,YAAYC,KAAKD,QAAQ;QACzBO,YAAYA,aAAaN,KAAKM,SAAS;IACzC;IACA,MAAM,EAAEiB,OAAO,EAAEM,SAAS,EAAE,GAAG,MAAMR,WAAWzB,WAAWC;IAC3D,IAAIgC,WAAWvB,YAAY;IAC3B,KAAK,MAAM2B,UAAUV,QAAS;QAC5B,MAAMW,UAAUtC,UAAU0B,UAAU,CAAC,SAASG,GAAG,CAACQ;QAClD,KAAK,MAAME,kBAAkB7D,iCAAkC;YAC7D0D,KACE,MAAMhB,iBACJpB,WACAsC,QAAQZ,UAAU,CAACa,iBACnB5D,2BACAuB;QAGN;IACF;IACA,MAAMsC,SAASxC,UAAU0B,UAAU,CAAC,QAAQG,GAAG,CAAC5B;IAChDmC,KACE,MAAMhB,iBACJpB,WACAwC,OAAOd,UAAU,CAAC,UAClB/C,2BACAuB;IAGJ;;;GAGC,GACD,KAAK,MAAMmC,UAAUV,QAAQO,MAAM,GAAGP,UAAU;QAAC;KAAG,CAAE;QACpD,MAAMc,UAAU,MAAM/C,6BAA6B;YACjD2C;YACApC;YACAyC,OAAO/D;YACPoD,IAAI7B;QACN;QACA,KAAK,MAAMyC,UAAUC,OAAOC,MAAM,CAACJ,SAAU;;YAC3CtC,qBAAYwC,0BAAAA,OAAQxC,QAAQ,oBAAI;YAChCO,YAAYA,aAAaiC,WAAW,QAAQA,OAAOjC,SAAS;QAC9D;IACF;IACA;;;;;;GAMC,GACD,MAAMoC,OAAQ,OAAA,MAAMvE,UAAU0B,kBAAhB,OAA2B,CAAC;IAC1C,MAAM8C,WAAW,IAAIC;IACrB,KAAK,MAAMX,UAAUV,QAAS;QAC5BoB,SAASE,GAAG,CAAC,AAAC,CAAA,MAAM3E,oBAAoB+D,QAAQS,IAAG,EAAGI,OAAO;IAC/D;IACA,MAAMC,WAAWX,OAAOd,UAAU,CAAC;IACnC,KAAK,MAAMwB,WAAWH,SAAU;QAC9BX,KACE,MAAMhB,iBACJpB,WACAmD,UACAvE,yBAAyBsE,UACzBhD;IAGN;IACA,OAAO;QAAEC;QAAUO;IAAU;AAC/B;AAUA;;;;;;;;;;;;;;;;;CAiBC,GACD,eAAe0C,eACbpD,SAAsC,EACtCC,KAAa,EACbC,UAAkB,EAClBmD,MAAoB;IAEpB,MAAMtC,MAAM1B,kBAAkBW,WAAWC,OAAO4B,GAAG,CAAC3B;IACpD,MAAMoD,WAAW,MAAMvC,IAAIP,GAAG;IAC9B;;;;;;GAMC,GACD,MAAM+C,YAAY;QAChBC,WAAWF,SAASG,MAAM,GACrBH,SAAS9C,GAAG,CAAC,eACdkD;IACN;IACA,IACE,CAACJ,SAASG,MAAM,IACfJ,OAAOhB,MAAM,IAAI,CAACrD,qBAAqBuE,WAAWF,OAAOhB,MAAM,GAChE;QACA,OAAO;YAAEsB,QAAQ;YAAKC,MAAM;gBAAEC,OAAO;YAAmB;QAAE;IAC5D;IACA,IAAIR,OAAOhB,MAAM,EAAE;QACjB,MAAMyB,QAAQ7E,gBAAgBsE;QAC9B,MAAMQ,WAAWD,UAAU,QAAQA,MAAME,KAAK,CAAC,CAACjC,KAAOA,OAAOsB,OAAOhB,MAAM;QAC3E,IAAI,CAAC0B,UAAU;YACb,MAAME,aAAa,MAAMxF,qBAAqB4E,OAAOa,GAAG,EAAEjE;YAC1D,IAAI,CAACpB,gBAAgBoF,8BAAAA,WAAY1C,MAAM,GAAG;gBACxC,OAAO;oBACLoC,QAAQ;oBACRC,MAAM;wBACJC,OACE,oEACA,mEACA;oBACJ;gBACF;YACF;QACF;IACF;IACA,MAAM,EAAE1D,QAAQ,EAAEO,SAAS,EAAE,GAAG,MAAMX,YAAYC,WAAWC,OAAOC;IACpE,IAAIQ,WAAW;QACb,OAAO;YACLiD,QAAQ;YACRC,MAAM;gBACJzD;gBACA0D,OACE,CAAC,6DAA6D,CAAC,GAC/D,GAAG1D,SAASgE,cAAc,GAAG,sCAAsC,CAAC,GACpE;YACJ;QACF;IACF;IACA;;;;;;;;;;GAUC,GACD,MAAMC,UAAU,MAAMjC,cAAcnC,WAAWC,OAAOC;IACtD,IAAIkE,QAAQ1D,SAAS,EAAE;QACrB,OAAO;YACLiD,QAAQ;YACRC,MAAM;gBACJzD;gBACAkE,iBAAiBD,QAAQjE,QAAQ;gBACjC0D,OACE,kEACA,GAAGO,QAAQjE,QAAQ,CAACgE,cAAc,GAAG,4BAA4B,CAAC,GAClE,iEACA;YACJ;QACF;IACF;IACA,MAAMpD,IAAIE,MAAM;IAChB,OAAO;QACL0C,QAAQ;QACRC,MAAM;YACJ1D;YACAC;YACAkE,iBAAiBD,QAAQjE,QAAQ;YACjCmE,SAAS;QACX;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,eAAeC,aACbvE,SAAsC,EACtCC,KAAa,EACbuE,OAAe,EACfnC,MAAc;IAEd,MAAMtB,MAAM3B,iBAAiBY,WAAWC,OAAO4B,GAAG,CAAC2C;IACnD,MAAMC,UAAU,CAACC;QACf,IAAIA,UAAU,QAAQ;YACpB,OAAO,kEACL;QACJ;QACA,IAAIA,UAAU,aAAa;YACzB,OAAO,iEACL;QACJ;QACA,IAAIA,UAAU,WAAW;YACvB,OAAO;QACT;QACA,OAAO;IACT;IACA,MAAMC,UAAU,MAAM3E,UAAU4E,cAAc,CAC5C,OAAOC;YAKgBC;QAJrB,MAAMA,QAAQ,MAAMD,YAAYrE,GAAG,CAACO;QACpC,IAAI,CAAC+D,MAAMrB,MAAM,IAAKpB,UAAU,CAAC9C,aAAauF,OAAOzC,SAAU;YAC7D,OAAO;gBAAEsB,QAAQ;gBAAKC,MAAM;oBAAEC,OAAO;gBAAgB;YAAE;QACzD;QACA,MAAMa,QAAQ5C,QAAOgD,aAAAA,MAAMtE,GAAG,CAAC,qBAAVsE,aAAuB;QAC5C,IAAIJ,UAAU,SAAS;YACrB,OAAO;gBAAEf,QAAQ;gBAAKC,MAAM;oBAAEC,OAAOY,QAAQC;gBAAO;YAAE;QACxD;QACA;;;;;OAKC,GACDG,YAAY5D,MAAM,CAACF;QACnB,OAAO;YAAE4C,QAAQ;YAAKC,MAAM;gBAAEY;gBAASO,WAAW;YAAK;QAAE;IAC3D;IAEF,OAAOJ;AACT;AAEA;;;;;;CAMC,GACD,MAAMK,4BAA4B;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACAlG;CACD;AAED;;;;;;;;;;;CAWC,GACD,eAAemG,iBACbjF,SAAsC,EACtCC,KAAa,EACboC,MAAc,EACdmC,OAAe,EACfU,aAAqB,EACrBC,KAA4C;IAE5C,MAAMC,WAAWhG,iBAAiBY,WAAWC;IAC7C,MAAM8B,KAAK1D;IACX;;;;GAIC,GACD,MAAMgH,OAAO,MAAMD,SAASvD,GAAG,CAAC2C,SAAShE,GAAG;IAC5C,IAAI,CAAC6E,KAAK5B,MAAM,IAAKpB,UAAU,CAAC9C,aAAa8F,MAAMhD,SAAU;QAC3D,OAAO;YAAEsB,QAAQ;YAAKC,MAAM;gBAAEC,OAAO;YAAgB;QAAE;IACzD;IACA,MAAMyB,SAASjD,UAAU/C,WAAW+F;IACpC,IAAI,CAACC,QAAQ;QACX,OAAO;YACL3B,QAAQ;YACRC,MAAM;gBACJC,OACE,kEACA;YACJ;QACF;IACF;IACA,MAAMc,UAAU,MAAM3E,UAAU4E,cAAc,CAC5C,OAAOC;YAYSU,cACYC,MAAAA;QAZ1B,MAAM,CAACD,QAAQE,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAC3Cd,YAAYrE,GAAG,CAAC4E,SAASvD,GAAG,CAAC2C;YAC7BK,YAAYrE,GAAG,CACb4E,SACGQ,MAAM,CAAC,eAAe,WACtBtF,KAAK,CAACvB,0BAA0B,MAAMuG;SAE5C;QACD,IAAI,CAACC,OAAO9B,MAAM,EAAE;YAClB,OAAO;gBAAEE,QAAQ;gBAAKC,MAAM;oBAAEC,OAAO;gBAAgB;YAAE;QACzD;QACA,MAAM2B,QAAQD,eAAAA,OAAOC,IAAI,cAAXD,eAAiB,CAAC;QAChC,MAAMM,aAAa/D,QAAO0D,QAAAA,oBAAAA,IAAI,CAAC,cAAc,YAAnBA,oBAAuBA,IAAI,CAAC,UAAU,YAAtCA,OAA0C,IAAIM,IAAI;QAC5E,MAAMC,OAAO5H,oBACX+G,cAAcY,IAAI,MAAM5H,qBAAqB2H,aAC7CJ,SAAS5E,IAAI,CAACe,GAAG,CAAC,CAACoE;gBAAeA,MAAAA;mBAAPlE,QAAOkE,QAAAA,WAAAA,IAAIxF,GAAG,CAAC,0BAARwF,WAA0BA,IAAIxF,GAAG,CAAC,sBAAlCwF,OAAgD;;QAEpF,MAAMC,OAAgC,CAAC;QACvC,KAAK,MAAMvD,SAASsC,0BAA2B;YAC7C,IAAIQ,IAAI,CAAC9C,MAAM,KAAKgB,aAAa8B,IAAI,CAAC9C,MAAM,KAAK,MAAMuD,IAAI,CAACvD,MAAM,GAAG8C,IAAI,CAAC9C,MAAM;QAClF;QACA,MAAMwD,QAAQC,KAAKC,GAAG;QACtBvB,YAAYwB,MAAM,CAACjB,SAASvD,GAAG,CAACE,KAAK,aAChCkE,MACA9G,sBAAsBmG;YACzBgB,aAAaP;YACbpC,QAAQ;YACR4C,aAAaL;YACbM,WAAW,IAAIL,KAAKD;YACpBO,WAAWtB,MAAMjB,GAAG;;QAEtB,OAAO;YAAEP,QAAQ;YAAKC,MAAM;gBAAEY,SAASzC;gBAAIgE;YAAK;YAAGA;YAAMF;QAAW;IACtE;IAEF,IAAIlB,QAAQhB,MAAM,KAAK,KAAK;YAOOgB,qBACTA;QAPxB,MAAM3G,sBACJ,YACA;YAAEkG,KAAKiB,MAAMjB,GAAG;YAAEwC,OAAOvB,MAAMuB,KAAK;QAAC,GACrC;YACEzG;YACAoC,QAAQiD;YACRC,QAAQ;gBAAExD,IAAIyC;gBAASuB,IAAI,GAAEpB,sBAAAA,QAAQkB,UAAU,YAAlBlB,sBAAsB;YAAG;YACtDgC,QAAQ;gBAAE5E;gBAAIgE,IAAI,GAAEpB,gBAAAA,QAAQoB,IAAI,YAAZpB,gBAAgB;YAAG;QACzC;IAEJ;IACA,OAAO;QAAEhB,QAAQgB,QAAQhB,MAAM;QAAEC,MAAMe,QAAQf,IAAI;IAAC;AACtD;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAkC2C,GAE3C,qEAAqE,GACrE,OAAO,MAAMgD,0BAA0B,WAAU;AAEjD,8DAA8D,GAC9D,MAAMC,sBAAsB;AAE5B,6DAA6D,GAC7D,OAAO,MAAMC,8BAA8B,oBAAmB;AAE9D,0FAA0F,GAC1F,OAAO,MAAMC,kCAAkC,IAAG;AAElD,4EAA4E,GAC5E,OAAO,MAAMC,8BAA8B,GAAE;AAE7C,sDAAsD,GACtD,OAAO,MAAMC,uBAAuB;IAAC;IAAS;CAAS,CAAS;AAChE,gFAAgF,GAChF,OAAO,MAAMC,8BAA8B,6BAA4B;AAEvE,uDAAuD,GACvD,OAAO,SAASC,qBAAqBjH,UAAkB;IACrD,OAAO,GAAGA,WAAW,MAAM,CAAC;AAC9B;AAEA,iFAAiF,GACjF,OAAO,MAAMkH,8BAA8B;IACzC;IACA;IACA;IACA;IACA;IACAtI;IACAC;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV,gFAAgF,GAChF,SAASsI,gBAAgBC,KAAc;IACrC,OAAOxF,OAAOwF,gBAAAA,QAAS,IAAIC,OAAO,CAAC,sDAAiB,KAAKzB,IAAI;AAC/D;AAEA,SAAS0B,cAAcF,KAAc;IACnC,IAAI,CAACG,MAAMC,OAAO,CAACJ,QAAQ,OAAO,EAAE;IACpC,MAAMK,OAAO,IAAI3E;IACjB,MAAM4E,QAAkB,EAAE;IAC1B,KAAK,MAAMC,OAAOP,MAAO;QACvB,MAAMQ,OAAOT,gBAAgBQ;QAC7B,IAAI,CAACC,QAAQH,KAAKI,GAAG,CAACD,KAAKE,WAAW,KAAK;QAC3CL,KAAK1E,GAAG,CAAC6E,KAAKE,WAAW;QACzBJ,MAAMK,IAAI,CAACH;IACb;IACA,OAAOF,MAAM5F,KAAK,CAAC,GAAGgF;AACxB;AAEA,OAAO,SAASkB,yBACdC,OAA0C;QAGfA;IAD3B,MAAMb,QAA8B;QAClCc,kBAAkBtG,QAAOqG,4BAAAA,OAAO,CAAC,mBAAmB,YAA3BA,4BAA+B;QACxDE,SAAShB,gBAAgBc,OAAO,CAAC,UAAU;QAC3CG,WAAWjB,gBAAgBc,OAAO,CAAC,YAAY;QAC/CI,iBAAiBf,cAAcW,OAAO,CAAC,kBAAkB;QACzDK,mBAAmBhB,cAAcW,OAAO,CAAC,oBAAoB;IAC/D;IACA,MAAMM,WAAqB,EAAE;IAC7B,IAAI,CAAC1K,aAAauJ,MAAMc,gBAAgB,GAAG;QACzCK,SAASR,IAAI,CAAC;IAChB;IACA,IAAI,CAACX,MAAMe,OAAO,EAAEI,SAASR,IAAI,CAAC;IAClC,MAAMS,OAAO,CAACd,QACZA,MAAMe,IAAI,CAAC,CAACb,OAASA,KAAK5F,MAAM,GAAG6E;IACrC,IAAI2B,KAAK;QAACpB,MAAMe,OAAO;WAAKf,MAAMiB,eAAe;KAAC,GAAG;QACnDE,SAASR,IAAI,CAAC,CAAC,8BAA8B,EAAElB,gCAAgC,WAAW,CAAC;IAC7F;IACA,IAAI2B,KAAK;QAACpB,MAAMgB,SAAS;WAAKhB,MAAMkB,iBAAiB;KAAC,GAAG;QACvDC,SAASR,IAAI,CAAC,CAAC,2BAA2B,EAAElB,gCAAgC,WAAW,CAAC;IAC1F;IACA,OAAO0B,SAASvG,MAAM,GAAG;QAAE0G,IAAI;QAAOH;IAAS,IAAI;QAAEG,IAAI;QAAMtB;IAAM;AACvE;AAEA,SAASuB,yBACPC,IAAwC,EACxC5E,GAAW;QAEG4E;IAAd,MAAMC,OAAO,EAACD,YAAAA,KAAKtI,GAAG,CAAC,0BAATsI,YAA2B,CAAC,EAAE,CAAC5E,IAAI;IACjD,OAAO+C,qBAAqB+B,QAAQ,CAACD,QACjC,OACA;QAAEpF,QAAQ;QAAKE,OAAOqD;IAA4B;AACxD;AAEA,SAAS+B,oBAAoBC,QAA4C;QAGxDA;IAFf,OAAO;QACLnH,IAAImH,SAASnH,EAAE;QACfgE,MAAMjE,QAAOoH,gBAAAA,SAAS1I,GAAG,CAAC,mBAAb0I,gBAAwB;QACrCC,WAAW;QACXC,OAAO;YAAE5E,SAAS2C,qBAAqB+B,SAASnH,EAAE;QAAE;IACtD;AACF;AASA,OAAO,SAASsH,0BACdC,OAAgC,CAAC,CAAC;QAGhCA,iBAOmBA;IARrB,MAAMtJ,aACJsJ,kBAAAA,KAAKtJ,SAAS,YAAdsJ,kBACC,IAAMxL,cAAcyL,GAAG,GAAGvJ,SAAS;IACtC;;;;GAIC,GACD,MAAMwJ,gBAAeF,qBAAAA,KAAKE,YAAY,YAAjBF,qBAAqB9K;IAC1C,OAAO;QACLiG,SAAS,OAAO,EAAEpC,MAAM,EAAE6B,GAAG,EAAE;YAC7B,MAAM4E,OAAO,MAAM9I,YAAY0B,UAAU,CAAC,SAASG,GAAG,CAACQ,QAAQ7B,GAAG;YAClE,IAAI,CAACsI,KAAKrF,MAAM,EAAE,OAAO;gBAAEE,QAAQ;gBAAKE,OAAO;YAAe;YAC9D,OAAOgF,yBAAyBC,MAAM5E;QACxC;QAEAuF,OAAO,CAACtB;YACN,MAAMuB,OAAOxB,yBAAyBC;YACtC,OAAOuB,KAAKd,EAAE,KAAK,QACfc,OACA;gBAAEd,IAAI;gBAAMQ,OAAO;oBAAEO,QAAQ;2BAAIvC;qBAA4B;gBAAC;YAAE;QACtE;QAEAsC,MAAM,OAAO,EAAErH,MAAM,EAAEN,EAAE,EAAE;YACzB,IAAI,CAAChE,aAAagE,KAAK,OAAO;YAC9B,MAAM9B,QAAQ,MAAMuJ,aAAanH;YACjC,IAAI,CAACpC,OAAO,OAAO;YACnB,MAAMiJ,WAAW,MAAM7J,kBAAkBW,aAAaC,OAAO4B,GAAG,CAACE,IAAIvB,GAAG;YACxE,OAAO0I,SAASzF,MAAM,IACpBzE,qBACE;gBAAEwE,WAAW0F,SAAS1I,GAAG,CAAC;YAAqC,GAC/D6B,UAEA4G,oBAAoBC,YACpB;QACN;QAEAU,OAAO,OAAOC;YACZ,MAAMH,OAAOxB,yBAAyB2B,QAAQ1B,OAAO;YACrD,IAAIuB,KAAKd,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOjF,QAAQ;gBAAKE,OAAO6F,KAAKjB,QAAQ,CAAC,EAAE;YAAC;YAChF,IAAI,CAAC1K,aAAa8L,QAAQ9H,EAAE,GAAG,OAAO;gBAAE6G,IAAI;gBAAOjF,QAAQ;gBAAKE,OAAO;YAAqB;YAC5F,MAAMiG,KAAK9J;YACX,MAAMC,QAAQ,MAAMuJ,aAAaK,QAAQxH,MAAM;YAC/C,IAAI,CAACpC,OAAO;gBACV,OAAO;oBAAE2I,IAAI;oBAAOjF,QAAQ;oBAAKE,OAAO;gBAA2C;YACrF;YACA,MAAMvB,UAAUwH,GAAGpI,UAAU,CAAC,SAASG,GAAG,CAACgI,QAAQxH,MAAM;YACzD,MAAM0H,cAAc1K,kBAAkByK,IAAI7J,OAAO4B,GAAG,CAACgI,QAAQ9H,EAAE;YAC/D,MAAMyC,UAAU2C,qBAAqB0C,QAAQ9H,EAAE;YAC/C,MAAMiI,WAAW5K,iBAAiB0K,IAAI7J,OAAO4B,GAAG,CAAC2C;YACjD,MAAMyF,YAAY3H,QAAQZ,UAAU,CAAC,WAAWG,GAAG,CAAC6H,KAAKpC,KAAK,CAACc,gBAAgB;YAC/E,OAAO0B,GAAGlF,cAAc,CAAC,OAAOC;gBAC9B,MAAM,CAACiE,MAAMI,UAAUxC,OAAOwD,OAAO,GAAG,MAAMxE,QAAQC,GAAG,CAAC;oBACxDd,YAAYrE,GAAG,CAAC8B;oBAChBuC,YAAYrE,GAAG,CAACuJ;oBAChBlF,YAAYrE,GAAG,CAACwJ;oBAChBnF,YAAYrE,GAAG,CAACyJ;iBACjB;gBACD,IAAI,CAACnB,KAAKrF,MAAM,EAAE,OAAO;oBAAEmF,IAAI;oBAAOjF,QAAQ;oBAAKE,OAAO;gBAAe;gBACzE,IAAIqF,SAASzF,MAAM,EAAE;oBACnB;;;;WAIC,GACD,IACE,CAACzE,qBACC;wBAAEwE,WAAW0F,SAAS1I,GAAG,CAAC;oBAAqC,GAC/DqJ,QAAQxH,MAAM,GAEhB;wBACA,OAAO;4BAAEuG,IAAI;4BAAOjF,QAAQ;4BAAKE,OAAO;wBAA+B;oBACzE;oBACA,OAAO;wBAAE+E,IAAI;wBAAMuB,UAAU;uBAASlB,oBAAoBC;gBAC5D;gBACA,MAAMzE,UAAUoE,yBAAyBC,MAAMe,QAAQ3F,GAAG;gBAC1D,IAAIO,SAAS,OAAO;oBAAEmE,IAAI;mBAAUnE;gBACpC,IACE,CAACyF,OAAOzG,MAAM,IACdyG,OAAO1J,GAAG,CAAC,gBAAgB,QAC3B0J,OAAO1J,GAAG,CAAC,YAAYhB,mBACvB;oBACA,OAAO;wBAAEoJ,IAAI;wBAAOjF,QAAQ;wBAAKE,OAAO;oBAAuB;gBACjE;gBACA,IAAI6C,MAAMjD,MAAM,EAAE,OAAO;oBAAEmF,IAAI;oBAAOjF,QAAQ;oBAAKE,OAAO;gBAA4B;gBACtF,MAAMkC,OAAOsB,gBAAgBwC,QAAQ9D,IAAI,KAAKe;gBAC9C,MAAMZ,QAAQ2D,QAAQzD,GAAG,CAACgE,OAAO;gBACjC,kEAAkE;gBAClE,gDAAgD;gBAChDvF,YAAYwB,MAAM,CAAC0D,aAAa;oBAC9BhE;oBACAsE,SAAS,EAAE;oBACX7G,WAAWtE,kBAAkB;wBAAC2K,QAAQxH,MAAM;qBAAC;oBAC7CkE,aAAaL;oBACboE,WAAWT,QAAQ3F,GAAG;gBACxB;gBACA,MAAM,EAAEoD,KAAK,EAAE,GAAGoC;gBAClB7E,YAAYwB,MAAM,CAAC2D,UAAU;oBAC3B3B,SAASf,MAAMe,OAAO;mBAClBf,MAAMgB,SAAS,GAAG;oBAAEA,WAAWhB,MAAMgB,SAAS;gBAAC,IAAI,CAAC;oBACxDF,kBAAkBd,MAAMc,gBAAgB;mBACpCd,MAAMiB,eAAe,CAACrG,MAAM,GAAG;oBAAEqG,iBAAiBjB,MAAMiB,eAAe;gBAAC,IAAI,CAAC,GAC7EjB,MAAMkB,iBAAiB,CAACtG,MAAM,GAAG;oBAAEsG,mBAAmBlB,MAAMkB,iBAAiB;gBAAC,IAAI,CAAC;oBACvF,CAAC1J,8BAA8B,EAAE+K,QAAQ9H,EAAE;mBACxC5C,sBAAsB0K,QAAQxH,MAAM;oBACvCsB,QAAQ;oBACR4C,aAAaL;oBACbM,WAAWqD,QAAQzD,GAAG;oBACtBK,WAAWoD,QAAQ3F,GAAG;;gBAExB,OAAO;oBACL0E,IAAI;oBACJuB,UAAU;oBACVpI,IAAI8H,QAAQ9H,EAAE;oBACdgE;oBACAoD,WAAW;oBACXC,OAAO;wBAAE5E;oBAAQ;gBACnB;YACF;QACF;IACF;AACF;AAEA,OAAO,MAAM+F,sBAAsBlB,4BAA2B;AAE9D;;;CAGC,GACD,OAAO,SAASmB;IACd/K,kCAAkCmH,yBAAyB2D,qBAAqB;QAC9EE,UAAU5D;IACZ;AACF;AAEA,uEAAuE,GACvE,MAAM6D,mBAAmB;IAAC;IAAS;IAAS;CAAS;AAErD;;;;;;CAMC,GACD,OAAO,eAAeC,sBACpBd,OAAgB;IAEhB,IAAIA,QAAQe,MAAM,KAAK,QAAQ,OAAO;IACtC,MAAMhH,OAAQ,MAAMiG,QAAQgB,IAAI,GAAGC,KAAK,CAAC,IAAM;IAC/C,MAAM7K,QAAQ,QAAO2D,wBAAAA,KAAM3D,KAAK,MAAK,WAAW2D,KAAK3D,KAAK,GAAG;IAC7D,OAAOlC,aAAakC,SAAS;QAAEA;IAAM,IAAI;AAC3C;AAEA;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,MAAM8K,wBAA0C,OAAOC,KAAKC;mCA4BpCD;QAxBPA,WACQA,YACRA,YACEA;IANxB,IAAIA,IAAIJ,MAAM,KAAK,QAAQ;QACzB,OAAOK,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAqB;IAC5D;IACA,MAAMxB,SAASP,gBAAOkJ,YAAAA,IAAIpH,IAAI,qBAARoH,UAAU3I,MAAM,mBAAI;IAC1C,MAAM6I,iBAAiBpJ,iBAAOkJ,aAAAA,IAAIpH,IAAI,qBAARoH,WAAU/K,KAAK,oBAAI;IACjD,MAAMkL,SAASrJ,iBAAOkJ,aAAAA,IAAIpH,IAAI,qBAARoH,WAAUG,MAAM,oBAAI;IAC1C,MAAMC,WAAWtJ,iBAAOkJ,aAAAA,IAAIpH,IAAI,qBAARoH,WAAU9K,UAAU,oBAAI;IAChD,IAAI,CAACmC,UAAU,CAAC6I,gBAAgB;QAC9B,OAAOD,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAiB;IACxD;IACA,IAAIxB,UAAU,CAACtE,aAAasE,SAAS;QACnC,OAAO4I,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAiB;IACxD;IACA,IAAIqH,kBAAkB,CAACnN,aAAamN,iBAAiB;QACnD,OAAOD,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAgB;IACvD;IACA,IAAI,CAAC9F,aAAaqN,WAAW;QAC3B,OAAOH,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAqB;IAC5D;IACA,IACEsH,WAAW,oBACXA,WAAW,kBACXA,WAAW,aACX;QACA,OAAOF,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAiB;IACxD;IAEA,MAAMwH,gBAAgBvJ,QAAOkJ,6BAAAA,IAAIM,OAAO,CAACD,aAAa,YAAzBL,6BAA6B;IAC1D,MAAMO,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcrJ,KAAK,CAAC,UAAUE,MAAM,IACpCwB;IACJ,IAAI,CAAC6H,SAAS,OAAON,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;QAAEhH,OAAO;IAAkB;IAErE,IAAI;QACF,MAAM4H,UAAU,MAAM3N,cAAcyL,GAAG,GAAGmC,IAAI,GAAGC,aAAa,CAACJ;QAC/D,MAAMvL,YAAYlC,cAAcyL,GAAG,GAAGvJ,SAAS;QAC/C,IAAIC;QACJ,IAAIoC,QAAQ;gBAMUuJ,mBAIX;YATT,MAAMtJ,UAAUtC,UAAU0B,UAAU,CAAC,SAASG,GAAG,CAACQ;YAClD,MAAMuJ,eAAe,MAAMtJ,QAAQ9B,GAAG;YACtC,IAAI,CAACoL,aAAanI,MAAM,EAAE;gBACxB,OAAOwH,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;oBAAEhH,OAAO;gBAAe;YACtD;YACA,MAAMgI,aAAa,EAACD,oBAAAA,aAAapL,GAAG,CAAC,0BAAjBoL,oBAAmC,CAAC,EAAE,CAACH,QAAQvH,GAAG,CAAC;YACvE,IAAI2H,eAAe,WAAWA,eAAe,UAAU;gBACrD,OAAOZ,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;oBAAEhH,OAAO;gBAA6B;YACpE;YACA5D,SAAS,QAAA,MAAMzB,oBAAoB6D,mBAA1B,QAAsC;YAC/C,IAAI,CAACpC,OAAO;gBACV,OAAOgL,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;oBAC1BhH,OAAO;gBACT;YACF;YACA;;;;OAIC,GACD,IAAIqH,kBAAkBA,mBAAmBjL,OAAO;gBAC9C,OAAOgL,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;oBAAEhH,OAAO;gBAAwC;YAC/E;QACF,OAAO;gBAMsDtC;YAL3D,MAAM0C,aAAa,MAAMxF,qBAAqBgN,QAAQvH,GAAG,EAAEgH;YAC3D,MAAM3J,SAAS0C,8BAAAA,WAAY1C,MAAM;YACjC,IACE,CAACA,UACD,CAAC1C,gBAAgB0C,WACjB,CAAC,AAACmJ,iBAAuC1B,QAAQ,CAAClH,QAAOP,eAAAA,OAAOwH,IAAI,YAAXxH,eAAe,MACxE;gBACA,OAAO0J,IACJtH,MAAM,CAAC,KACPkH,IAAI,CAAC;oBAAEhH,OAAO;gBAA6C;YAChE;YACA;;;;OAIC,GACD,IAAI,CAAClE,gBAAgB,MAAMpB,UAAU2M,iBAAiBrE,sBAAsB;gBAC1E,OAAOoE,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;oBAAEhH,OAAO;gBAAY;YACnD;YACA5D,QAAQiL;QACV;QAEA,IAAIC,WAAW,aAAa;8BAuBGM;gBApBHT,YAmBjBA;YArBT,oEAAoE;YACpE,mEAAmE;YACnE,MAAMc,aAAahK,iBAAOkJ,aAAAA,IAAIpH,IAAI,qBAARoH,WAAUc,UAAU,oBAAI,IAAIhG,IAAI,GAAG9D,KAAK,CAAC,GAAG;YACtE,MAAM+J,UAAUD,aACZ,MAAM1N,aAAa4B,WAAoB;gBACrCgM,MAAM;gBACNC,SAAS,GAAG5J,UAAU,CAAC,IAAI,EAAEpC,OAAO,CAAC,CAAC,EAAEmL,UAAU;gBAClDnL;gBACAiM,KAAKJ;gBACLK,aAAalO;YACf,KACA;YACJ,IAAI8N,WAAW,YAAYA,SAAS;gBAClC,OAAOd,IAAItH,MAAM,CAACoI,QAAQK,MAAM,CAACzI,MAAM,EAAEkH,IAAI,CAACkB,QAAQK,MAAM,CAACxI,IAAI;YACnE;YACA,MAAMyI,QAAQN,WAAW,WAAWA,UAAUA,QAAQM,KAAK,GAAG;YAC9D,MAAMC,SAAS,MAAMrH,iBACnBjF,WACAC,OACAoC,QACA+I,UACAtJ,iBAAOkJ,aAAAA,IAAIpH,IAAI,qBAARoH,WAAUjF,IAAI,oBAAI,KACzB;gBAAE7B,KAAKuH,QAAQvH,GAAG;gBAAEwC,KAAK,GAAE+E,iBAAAA,QAAQ/E,KAAK,YAAb+E,iBAAiB;YAAK;YAEnD,IAAIa,OAAO3I,MAAM,KAAK,KAAK,OAAM0I,yBAAAA,MAAOE,MAAM,CAACD,OAAO3I,MAAM,EAAE2I,OAAO1I,IAAI;iBACpE,OAAMyI,yBAAAA,MAAOG,OAAO;YACzB,OAAOvB,IAAItH,MAAM,CAAC2I,OAAO3I,MAAM,EAAEkH,IAAI,CAACyB,OAAO1I,IAAI;QACnD;QACA,MAAM6I,SACJtB,WAAW,mBACP,MAAM/H,eAAepD,WAAWC,OAAOmL,UAAU;YAC/C/I;YACA6B,KAAKuH,QAAQvH,GAAG;QAClB,KACA,MAAMK,aAAavE,WAAWC,OAAOmL,UAAU/I;QACrD,OAAO4I,IAAItH,MAAM,CAAC8I,OAAO9I,MAAM,EAAEkH,IAAI,CAAC4B,OAAO7I,IAAI;IACnD,EAAE,OAAOC,OAAO;QACd6I,QAAQ7I,KAAK,CAACA;QACd,OAAOoH,IAAItH,MAAM,CAAC,KAAKkH,IAAI,CAAC;YAAEhH,OAAO;QAAqC;IAC5E;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/marketing/src/lib/server/campaign-manage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * TAKING SOMETHING AWAY: a campaign container, and an abandoned draft.\n *\n * Both are removals, and neither may take a delivered message with it. That\n * is the whole reason this file is small and the comments are long.\n *\n * ## Why these two are not client writes\n *\n * The console creates and edits a campaign CONTAINER with the client SDK —\n * `orgs/{orgId}/emailCampaigns` is client-writable, because a container holds\n * no counter, no consent record and no entitlement input. It is not\n * client-DELETABLE: removing one has to detach everything that names it\n * first, across every site in the organization, which no rule can express.\n *\n * The SEND collection is the opposite: `orgs/{orgId}/campaigns` is excluded\n * from client create, update AND delete, because each document is the record\n * of what a merchant mailed and to whom they were allowed to mail it. Both\n * operations here have to touch it — one to detach sends from the container\n * being removed, the other to remove a draft outright — so both run on the\n * Admin SDK behind a role check.\n *\n * ## Two doors: a site, and the organization\n *\n * A campaign belongs to the organization and may be placed on several of its\n * sites. A request from a SITE hub names the site (`hostId`) and is\n * authorized by the caller's role there, as the send route is — and it acts\n * only on what that site holds: a send sent as another site, or a campaign\n * not placed on this one, answers as if it did not exist. A request from the\n * ORGANIZATION hub names the org (`orgId`) and no site, and is authorized by\n * the caller's org-wide membership; for an email it acts in the name of the\n * site the email is sent as.\n *\n * ## What deleting a campaign MEANS\n *\n * The container goes; every email inside it stays, and reads afterwards as a\n * single send.\n *\n * It cannot mean anything else. A send id is cited by mail already delivered\n * — every unsubscribe footer carries `cid={sendId}` inside its own HMAC, and\n * `/marketing/campaigns/{sendId}` is a URL merchants paste into their own\n * messages — so deleting a container that destroyed its sends would break\n * opt-out links that must go on resolving forever, which is a compliance\n * failure rather than a broken page.\n *\n * Nor may the sends simply be left pointing at a container that is gone.\n * `campaignListRows` groups sends by the container they name and draws one\n * row per container; a send naming a container that no longer exists is in\n * neither half of that — not a container row, and not an orphan the list\n * adopts — so it would vanish from the campaigns table while remaining\n * perfectly deliverable. Detaching is what puts it back in the list, as the\n * \"Single send\" the product already models and the table already draws.\n *\n * Deleting a campaign is therefore NOT a way to stop its mail. A scheduled\n * email inside it keeps its send time and still goes out, because a\n * container is a grouping and cancelling somebody's mail is `cancel`'s job.\n * The console says so before it asks.\n *\n * ## The same rule for everything else the campaign held\n *\n * A campaign also groups forms, screens and contacts, each of which names it\n * from its OWN document. They are detached on exactly the argument the sends\n * are: a form left naming a container nobody can read has not been freed, it\n * has been made unreadable — its page draws a dead id where a campaign name\n * belongs, and the campaigns table can no longer find it. The record itself\n * is never touched. Deleting a campaign deletes a campaign.\n */\n\n/*\n * The MODULE, not the barrel. `@aglyn/tenant-data-admin`'s index reaches\n * `render-cache`, which imports `next/cache` and therefore the whole Next\n * server pipeline — everything this file needs from the admin SDK is one\n * default export, and taking it from the leaf keeps that pipeline out of the\n * graph.\n */\nimport firebaseAdmin from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { isDocumentId } from '@aglyn/tenant-data-admin/server/document-id'\nimport { logResourceDuplicated } from '@aglyn/tenant-data-admin/server/duplicate-activity'\nimport { restampCrmListFieldsOf } from '@aglyn/tenant-data-admin/server/crm-records'\nimport {\n  DUPLICATE_BUSY_MESSAGE,\n  duplicateDisplayName,\n  uniqueDuplicateName,\n} from '@aglyn/aglyn/app-utils/duplicate-resource'\nimport { claimAttempt, createResourceUid } from '@aglyn/aglyn/server'\n/*\n * The MODULES again, for the same reason: the org and membership reads here\n * are what the contact pass and the organization door need, and taking them\n * from `@aglyn/tenant-data-admin`'s index would pull the whole Next server\n * pipeline back into this file's graph.\n */\nimport {\n  consentGroupForSite,\n  getOrgDoc,\n  resolveOrgIdForHost,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport {\n  CAMPAIGN_MEMBER_HOST_COLLECTIONS,\n  CAMPAIGN_MEMBERSHIP_FIELD,\n  contactCampaignFieldPath,\n  isOrgWideMember,\n  type AglynOrgMember,\n  type PluginApiHandler,\n  type PluginApiRequestSubject,\n} from '@aglyn/aglyn/server'\nimport {\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n  CAMPAIGN_SEND_HOST_FIELD,\n  campaignPlacedOnHost,\n  campaignSiteIds,\n  campaignVisibleTo,\n} from '@aglyn/shared-ui-email-campaigns/model'\nimport {\n  campaignSendSiteStamp,\n  orgCampaignSends,\n  orgEmailCampaigns,\n  sendHostId,\n  sendIsOnHost,\n} from './campaign-org-refs'\nimport { SCREEN_KIND_EMAIL } from '@aglyn/aglyn/app-utils/screen-route'\nimport {\n  campaignContainerSearchFields,\n  campaignSendSearchFields,\n} from '../model/campaign-list-query'\nimport {\n  registerPluginResourceDraftWriter,\n  type PluginDraftRecord,\n  type PluginDraftRefusal,\n  type PluginDraftWrite,\n  type PluginResourceDraftWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts'\nimport { runPluginMembershipDetachers } from '@aglyn/aglyn/plugin-manager/plugin-membership-detach'\nimport { isPluginEnabled } from '@aglyn/aglyn/plugin-manager/enabled-plugins'\n\n/**\n * Sends detached in one write.\n *\n * Under Firestore's 500-operation batch limit with room to spare rather than\n * at it: a batch that is refused for being one over has done nothing, and the\n * margin costs one extra round trip on a campaign of exactly this size.\n */\nconst DETACH_BATCH = 400\n\n/**\n * How many batches one request will run.\n *\n * A ceiling on the REQUEST, not on the campaign. The loop below terminates on\n * its own — each pass clears the very field it queries on, so a detached send\n * is not returned again — but a request that runs unbounded is a request that\n * eventually exceeds the platform's own timeout with no idea how far it got.\n *\n * Stopping early is safe and is why this is a ceiling rather than a refusal\n * up front: detaching is idempotent and partial progress is a consistent\n * state — the sends already detached read as single sends, the rest still\n * read under the campaign — so the answer to hitting it is to ask again.\n */\nconst DETACH_PASSES = 25\n\n/**\n * The most sites one deletion walks for members.\n *\n * A campaign is the organization's, so its forms, screens and consent-group\n * facets may be on any of its sites. An organization past this has more\n * sites than one request should sweep, and the deletion refuses rather than\n * removing a container some sites' records would still name.\n */\nconst ORG_SITES_MAX = 200\n\n/** What one `campaigns/manage` call answered with. */\ninterface ManageResult {\n  status: number\n  body: Record<string, unknown>\n}\n\n/**\n * Files every send in a campaign under NO campaign: {@link\n * CAMPAIGN_SEND_CONTAINER_FIELD} set to `null`.\n *\n * Equality on one field with a `limit` — no `orderBy` — which Firestore's\n * automatic single-field index serves. Ordering would need a composite index\n * for a walk whose order does not matter: every match is being written, so\n * which order they come back in cannot change the outcome.\n *\n * @returns how many were detached, and whether any were left.\n */\nasync function detachSends(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  for (let pass = 0; pass < DETACH_PASSES; pass += 1) {\n    const page = await orgCampaignSends(firestore, orgId)\n      .where(CAMPAIGN_SEND_CONTAINER_FIELD, '==', campaignId)\n      .limit(DETACH_BATCH)\n      .get()\n    if (page.empty) return { detached, remaining: false }\n    const batch = firestore.batch()\n    for (const send of page.docs) {\n      /*\n       * `null`, not an empty string and not a removed field. \"Belongs to no\n       * campaign\" has ONE stored shape, because it is a query: the lists ask\n       * `emailCampaignId == null` for single sends (AGL-3321), which an\n       * empty string would not answer and a missing field cannot — a query\n       * never finds a field that is not there. `campaignListRows` adopts any\n       * falsy container id, so every reader agrees.\n       */\n      batch.update(send.ref, {\n        [CAMPAIGN_SEND_CONTAINER_FIELD]: null,\n      })\n    }\n    await batch.commit()\n    detached += page.size\n    if (page.size < DETACH_BATCH) return { detached, remaining: false }\n  }\n  return { detached, remaining: true }\n}\n\n/**\n * Clears one campaign id out of a membership array, wherever it is held.\n *\n * The same walk {@link detachSends} makes, over an ARRAY field rather than a\n * scalar one: `array-contains` matches on Firestore's automatic single-field\n * index, and `arrayRemove` takes out the one id without touching the other\n * campaigns a form or a screen is in. That is the whole reason the membership\n * is an array here and a `FieldValue.delete()` on a send — a send is in one\n * campaign and a landing page is in several, so removing one must not be\n * removing all of them.\n *\n * `query` rather than a collection ref, because the contact pass hands in a\n * path this file cannot build for itself.\n *\n * @returns how many were detached, and whether any were left.\n */\nasync function detachMembership(\n  firestore: FirebaseFirestore.Firestore,\n  collectionRef: FirebaseFirestore.CollectionReference,\n  fieldPath: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  for (let pass = 0; pass < DETACH_PASSES; pass += 1) {\n    const page = await collectionRef\n      .where(fieldPath, 'array-contains', campaignId)\n      .limit(DETACH_BATCH)\n      .get()\n    if (page.empty) return { detached, remaining: false }\n    const batch = firestore.batch()\n    for (const member of page.docs) {\n      batch.update(member.ref, {\n        [fieldPath]: firebaseAdmin.firestore.FieldValue.arrayRemove(campaignId),\n      })\n    }\n    await batch.commit()\n    // A lead's campaigns are what the Leads list's Campaign filter reads\n    // under a site (AGL-3321): restamped from each lead as it now stands.\n    if (collectionRef.id === 'leads') {\n      await restampCrmListFieldsOf(page.docs.map((member) => member.ref), 'leads')\n    }\n    detached += page.size\n    if (page.size < DETACH_BATCH) return { detached, remaining: false }\n  }\n  return { detached, remaining: true }\n}\n\n/**\n * Every site of the organization, by id — the sites a campaign's members may\n * be on. One equality on the `hostIndex` mirror, the same document\n * `resolveOrgIdForHost` reads to put a site in an org.\n *\n * @returns the ids, and whether the org has more than {@link ORG_SITES_MAX}.\n */\nasync function orgSiteIds(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<{ hostIds: string[]; truncated: boolean }> {\n  const page = await firestore\n    .collection('hostIndex')\n    .where('orgId', '==', orgId)\n    .limit(ORG_SITES_MAX + 1)\n    .get()\n  const hostIds = page.docs.map((doc) => String(doc.id))\n  return {\n    hostIds: hostIds.slice(0, ORG_SITES_MAX),\n    truncated: hostIds.length > ORG_SITES_MAX,\n  }\n}\n\n/**\n * Clears the campaign off every form, screen, lead and contact holding it,\n * on every site of the organization, and then off every record a plugin\n * keeps about it (AGL-3254).\n *\n * ## Why the campaign is not simply deleted over the top of them\n *\n * A campaign that went away leaving members naming it is the same failure the\n * send detach exists to prevent, one collection over: the campaign's own page\n * finds its forms and screens with `array-contains`, and a form still naming\n * a container nobody can read is in neither half of that — not a member of\n * any campaign the console can draw, and not free of one either. Its own page\n * would render the dead id as a chip with no name.\n *\n * ## Every site, not the one that asked\n *\n * The campaign is the organization's, and a site it has since been taken off\n * may still hold forms and screens filed under it. So the walk covers every\n * site in the org regardless of which door the deletion came through.\n *\n * ## Leads and contacts are reached on the organization\n *\n * A lead lives at `orgs/{orgId}/leads` and carries the field at the top of\n * its document, like a form. The site `leads` collection is walked as well,\n * as part of each site's own collections: records captured before leads\n * moved to the org are still read there.\n *\n * A contact lives at `orgs/{orgId}/contacts` and is shared by every site, so\n * the membership sits inside a consent group's facet rather than at the top\n * of the document. The field PATH is therefore the scope, and the walk runs\n * once per distinct group of the org's sites — two sites declared as one\n * sender share a facet, and clearing it twice would find nothing the second\n * time. The unscoped collection ref is what the walk runs on precisely\n * because the path already carries the boundary — a `visibleTo` filter would\n * spend the query's one array-contains slot and leave none for the\n * membership.\n *\n * ## A plugin's members are the plugin's to clear\n *\n * A sequence and its enrollments name the campaign from documents under the\n * org, in collections this plugin does not know (AGL-3254). Every plugin\n * with a membership detacher registered on the core's seam is asked, once\n * per site, with the campaign's id and the field it is held in, and a\n * detacher that reports records remaining — or threw, which is reported as\n * `null` — holds the container exactly as this pass's own `remaining` does.\n * A plugin that failed is a plugin whose records may still name the\n * campaign, and the deletion has no way to tell that apart from one that has\n * more than a request clears.\n */\nasync function detachMembers(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n): Promise<{ detached: number; remaining: boolean }> {\n  let detached = 0\n  let remaining = false\n  const take = (pass: { detached: number; remaining: boolean }) => {\n    detached += pass.detached\n    remaining = remaining || pass.remaining\n  }\n  const { hostIds, truncated } = await orgSiteIds(firestore, orgId)\n  if (truncated) remaining = true\n  for (const hostId of hostIds) {\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    for (const collectionName of CAMPAIGN_MEMBER_HOST_COLLECTIONS) {\n      take(\n        await detachMembership(\n          firestore,\n          hostRef.collection(collectionName),\n          CAMPAIGN_MEMBERSHIP_FIELD,\n          campaignId,\n        ),\n      )\n    }\n  }\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  take(\n    await detachMembership(\n      firestore,\n      orgRef.collection('leads'),\n      CAMPAIGN_MEMBERSHIP_FIELD,\n      campaignId,\n    ),\n  )\n  /*\n   * An org with no sites still has plugins that may hold the campaign, so\n   * the seam is asked once with no site rather than not at all.\n   */\n  for (const hostId of hostIds.length ? hostIds : ['']) {\n    const plugins = await runPluginMembershipDetachers({\n      hostId,\n      orgId,\n      field: CAMPAIGN_MEMBERSHIP_FIELD,\n      id: campaignId,\n    })\n    for (const report of Object.values(plugins)) {\n      detached += report?.detached ?? 0\n      remaining = remaining || report === null || report.remaining\n    }\n  }\n  /*\n   * One read of the org document serves every site's group: with it in\n   * hand, `consentGroupForSite` resolves from the declaration without a\n   * lookup per site. A missing document answers every site as a group of\n   * one, which is `consentGroupForSite`'s documented failure direction and\n   * the safe one here — each site's own facet is cleared, and no other.\n   */\n  const org = ((await getOrgDoc(orgId)) ?? {}) as Record<string, unknown>\n  const groupIds = new Set<string>()\n  for (const hostId of hostIds) {\n    groupIds.add((await consentGroupForSite(hostId, org)).groupId)\n  }\n  const contacts = orgRef.collection('contacts')\n  for (const groupId of groupIds) {\n    take(\n      await detachMembership(\n        firestore,\n        contacts,\n        contactCampaignFieldPath(groupId),\n        campaignId,\n      ),\n    )\n  }\n  return { detached, remaining }\n}\n\n/** Who is deleting, and through which door. */\ninterface DeleteAccess {\n  /** The site hub the request came from, or `''` from the organization hub. */\n  hostId: string\n  /** The caller, for the site door's reach check. */\n  uid: string\n}\n\n/**\n * Removes a campaign container, leaving its emails standing.\n *\n * Detach first, delete second, and the order is the point: stopping between\n * them leaves a container whose emails are already single sends, which the\n * list draws correctly and a second run finishes. Deleting first would leave\n * sends naming a container nobody can read, which is the state that loses\n * them from the table.\n *\n * ## What a site hub may delete\n *\n * A campaign placed on this site and on no other — the one a site hub\n * creates. A campaign that is not placed here is not this site's to see, so\n * it answers 404 as a missing one would. A campaign also placed on other\n * sites is refused unless the caller is an org-wide member: deleting it\n * takes it off those sites too, which is the same reach change the rules\n * reserve for org-wide members when a campaign is edited.\n */\nasync function deleteCampaign(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  campaignId: string,\n  access: DeleteAccess,\n): Promise<ManageResult> {\n  const ref = orgEmailCampaigns(firestore, orgId).doc(campaignId)\n  const snapshot = await ref.get()\n  /*\n   * A 404 rather than a silent success. The id in a campaign URL may name a\n   * container OR a single send — that ambiguity is what keeps every link\n   * minted before containers existed resolving — so \"no container here\" is\n   * very often \"this is a send\", and answering it as a completed deletion\n   * would tell the console it had removed something it never touched.\n   */\n  const placement = {\n    visibleTo: snapshot.exists\n      ? (snapshot.get('visibleTo') as string[] | undefined)\n      : undefined,\n  }\n  if (\n    !snapshot.exists ||\n    (access.hostId && !campaignPlacedOnHost(placement, access.hostId))\n  ) {\n    return { status: 404, body: { error: 'Unknown campaign' } }\n  }\n  if (access.hostId) {\n    const sites = campaignSiteIds(placement)\n    const onlyHere = sites !== null && sites.every((id) => id === access.hostId)\n    if (!onlyHere) {\n      const membership = await resolveOrgMembership(access.uid, orgId)\n      if (!isOrgWideMember(membership?.member)) {\n        return {\n          status: 403,\n          body: {\n            error:\n              'This campaign is on other sites too, so deleting it would take ' +\n              'it off them as well. An organization admin can delete it from ' +\n              'the organization’s campaigns.',\n          },\n        }\n      }\n    }\n  }\n  const { detached, remaining } = await detachSends(firestore, orgId, campaignId)\n  if (remaining) {\n    return {\n      status: 409,\n      body: {\n        detached,\n        error:\n          `This campaign holds more emails than one request can detach. ` +\n          `${detached.toLocaleString()} of them now read as single sends and ` +\n          'the campaign is still here — run the delete again to finish it.',\n      },\n    }\n  }\n  /*\n   * The MEMBERS come off before the container does, for the reason the sends\n   * do: a partial run leaves records that are already out of the campaign,\n   * which every surface draws correctly, while deleting first would leave\n   * forms, screens and contacts naming an id nothing can resolve.\n   *\n   * Their own 409 rather than a shared one. \"More emails than one request can\n   * detach\" is a sentence about the campaign's mail, and a merchant reading\n   * it about a campaign of two emails and four thousand contacts would go\n   * looking for emails that are not the problem.\n   */\n  const members = await detachMembers(firestore, orgId, campaignId)\n  if (members.remaining) {\n    return {\n      status: 409,\n      body: {\n        detached,\n        detachedMembers: members.detached,\n        error:\n          'This campaign is on more records than one request can clear. ' +\n          `${members.detached.toLocaleString()} of them are already out of ` +\n          'it and the campaign is still here — run the delete again to ' +\n          'finish it.',\n      },\n    }\n  }\n  await ref.delete()\n  return {\n    status: 200,\n    body: {\n      campaignId,\n      detached,\n      detachedMembers: members.detached,\n      deleted: true,\n    },\n  }\n}\n\n/**\n * Discards a DRAFT email, and refuses anything else.\n *\n * The state check is inside the transaction as well as being the reason for\n * it. `sendNow` claims a draft by moving it to `sending` in a transaction of\n * its own, so a check made against an earlier read could delete a record\n * while the send path was mailing from it — the merchant would receive a\n * report for an email that no longer exists, and its `cid` would stop\n * resolving with the message already in inboxes.\n *\n * Only `draft`. A scheduled email is withdrawn with `cancel`, which leaves\n * the record and its report standing; a sent one has reached people, and\n * nothing on this surface may remove the evidence of that.\n *\n * `hostId` is the site hub the request came from, and a draft sent as a\n * different site is refused as unknown; from the organization hub it is\n * `''` and any site's draft may be discarded.\n */\nasync function discardDraft(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  emailId: string,\n  hostId: string,\n): Promise<ManageResult> {\n  const ref = orgCampaignSends(firestore, orgId).doc(emailId)\n  const refusal = (state: string): string => {\n    if (state === 'sent') {\n      return 'This email has already been sent, so it cannot be discarded. ' +\n        'Its report and its unsubscribe links have to go on resolving.'\n    }\n    if (state === 'scheduled') {\n      return 'This email is scheduled. Cancel the send first — cancelling ' +\n        'keeps the email and takes it off the clock.'\n    }\n    if (state === 'sending') {\n      return 'This email is being sent right now.'\n    }\n    return 'Only a draft can be discarded.'\n  }\n  const outcome = await firestore.runTransaction(\n    async (transaction): Promise<ManageResult> => {\n      const fresh = await transaction.get(ref)\n      if (!fresh.exists || (hostId && !sendIsOnHost(fresh, hostId))) {\n        return { status: 404, body: { error: 'Unknown email' } }\n      }\n      const state = String(fresh.get('status') ?? '')\n      if (state !== 'draft') {\n        return { status: 409, body: { error: refusal(state) } }\n      }\n      /*\n       * A plain delete, with nothing recursive under it. The one\n       * subcollection a message grows is `reports/links`, written by the\n       * delivery webhook — an email that has never been sent has no\n       * deliveries, so there is nothing beneath a draft to leave behind.\n       */\n      transaction.delete(ref)\n      return { status: 200, body: { emailId, discarded: true } }\n    },\n  )\n  return outcome\n}\n\n/**\n * The fields a copy of a message carries (AGL-2936): what was written and\n * how it is sent — never who it goes to or when. The audience, list,\n * segment, addresses, schedule and experiment are the decisions a person\n * makes about THIS send, and a copy that inherited them would be one click\n * from mailing the same people twice.\n */\nconst DUPLICATED_MESSAGE_FIELDS = [\n  'subject',\n  'body',\n  'fromName',\n  'replyTo',\n  'senderId',\n  'templateScreenId',\n  'plainText',\n  'plainTextVersionId',\n  'topicId',\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n] as const\n\n/**\n * Copies a message as a new draft (AGL-2936). Any status can be copied —\n * a sent email is the usual source — and the copy is always `draft`, with\n * the name the person gave it made unique among its site's messages.\n *\n * The copy is sent as the same site as its source: the sender, the design\n * and the consent it would mail under are all that site's. From a site hub\n * that is the requesting site, and a source sent as another site is refused\n * as unknown; from the organization hub (`hostId` `''`) it is whichever site\n * the source records, and a source that records none cannot be copied,\n * because the copy would be an email that can never be sent.\n */\nasync function duplicateMessage(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostId: string,\n  emailId: string,\n  requestedName: string,\n  actor: { uid: string; email: string | null },\n): Promise<ManageResult> {\n  const messages = orgCampaignSends(firestore, orgId)\n  const id = createResourceUid()\n  /*\n   * The source is read once outside the transaction to learn its site, which\n   * decides which siblings the name must be unique among; the transaction\n   * reads it again, so a source changed in between is copied as it stands.\n   */\n  const peek = await messages.doc(emailId).get()\n  if (!peek.exists || (hostId && !sendIsOnHost(peek, hostId))) {\n    return { status: 404, body: { error: 'Unknown email' } }\n  }\n  const siteId = hostId || sendHostId(peek)\n  if (!siteId) {\n    return {\n      status: 409,\n      body: {\n        error:\n          'This email does not record which site it is sent from, so it ' +\n          'cannot be copied from here. Open it from its site instead.',\n      },\n    }\n  }\n  const outcome = await firestore.runTransaction(\n    async (transaction): Promise<ManageResult & { name?: string; sourceName?: string }> => {\n      const [source, siblings] = await Promise.all([\n        transaction.get(messages.doc(emailId)),\n        transaction.get(\n          messages\n            .select('displayName', 'subject')\n            .where(CAMPAIGN_SEND_HOST_FIELD, '==', siteId),\n        ),\n      ])\n      if (!source.exists) {\n        return { status: 404, body: { error: 'Unknown email' } }\n      }\n      const data = (source.data() ?? {}) as Record<string, unknown>\n      const sourceName = String(data['displayName'] ?? data['subject'] ?? '').trim()\n      const name = uniqueDuplicateName(\n        requestedName.trim() || duplicateDisplayName(sourceName),\n        siblings.docs.map((row) => String(row.get('displayName') ?? row.get('subject') ?? '')),\n      )\n      const copy: Record<string, unknown> = {}\n      for (const field of DUPLICATED_MESSAGE_FIELDS) {\n        if (data[field] !== undefined && data[field] !== null) copy[field] = data[field]\n      }\n      const nowMs = Date.now()\n      transaction.create(messages.doc(id), {\n        ...copy,\n        // The list fields a new record carries (AGL-3321): its subject's\n        // search tokens, and `null` for a source filed under no campaign.\n        ...campaignSendSearchFields(copy['subject']),\n        [CAMPAIGN_SEND_CONTAINER_FIELD]: copy[CAMPAIGN_SEND_CONTAINER_FIELD] ?? null,\n        ...campaignSendSiteStamp(siteId),\n        displayName: name,\n        status: 'draft',\n        createdAtMs: nowMs,\n        draftedAt: new Date(nowMs),\n        draftedBy: actor.uid,\n      })\n      return { status: 200, body: { emailId: id, name }, name, sourceName }\n    },\n  )\n  if (outcome.status === 200) {\n    await logResourceDuplicated(\n      'campaign',\n      { uid: actor.uid, email: actor.email },\n      {\n        orgId,\n        hostId: siteId,\n        source: { id: emailId, name: outcome.sourceName ?? '' },\n        target: { id, name: outcome.name ?? '' },\n      },\n    )\n  }\n  return { status: outcome.status, body: outcome.body }\n}\n\n/*==========================================\n * A CAMPAIGN THAT EXISTS BEFORE ANYBODY CHOSE WHO GETS IT (AGL-2912).\n *\n * The draft writer this plugin registers for the `campaign` resource on the\n * core's resource-drafts seam. Another plugin that produces a campaign — a\n * generator working from a brief, an importer bringing campaigns over from\n * another tool — asks for it by name, and gets exactly two documents:\n *\n *  - the CONTAINER at `orgs/{orgId}/emailCampaigns/{id}`, written as a site\n *    hub's create drawer writes one: aimed at no list, placed on the site\n *    the draft was asked for;\n *  - ONE EMAIL inside it at `orgs/{orgId}/campaigns/{id}-email`,\n *    `status: 'draft'`, sent as that site, naming the email design it sends\n *    and holding its subject, preheader and the alternatives to them.\n *\n * ## What a drafted email never holds\n *\n * An audience, a list, a segment, addresses, a topic, a sender, a send time or\n * an experiment. Those are the decisions a person makes about a send — the\n * duplicate above strips the same ones for the same reason — and a draft that\n * arrived holding any of them would be one click from mailing people nobody\n * chose. So the writer has no field for them to arrive in.\n *\n * ## Why a draft cannot escape\n *\n * Nothing here reserves an allowance, claims a budget or calls the send path,\n * and the scheduled processor queries `status == 'scheduled'`, which a draft\n * never is. `performCampaignSend` is the only thing that mails a draft, behind\n * the send route's own authorization, when a member asks.\n *\n * The id of the email is derived from the campaign's rather than minted, so a\n * write asked again finds the email it made — and differs from it, because a\n * campaign URL names a container OR a send, and one id naming both would read\n * as either.\n *=========================================*/\n\n/** The resource name the campaign draft writer is registered under. */\nexport const CAMPAIGN_DRAFT_RESOURCE = 'campaign'\n\n/** The id `plugins.config.json` registers this plugin under. */\nconst MARKETING_PLUGIN_ID = 'marketing'\n\n/** A drafted campaign's name when the caller asks for none. */\nexport const CAMPAIGN_DRAFT_DEFAULT_NAME = 'Untitled campaign'\n\n/** The longest subject or preheader a drafted email stores: the send route's header cap. */\nexport const CAMPAIGN_DRAFT_HEADER_MAX_CHARS = 200\n\n/** The most alternative subject lines or preheaders a drafted email keeps. */\nexport const CAMPAIGN_DRAFT_MAX_VARIANTS = 10\n\n/** The site roles that may compose this site's mail. */\nexport const CAMPAIGN_DRAFT_ROLES = ['admin', 'editor'] as const\n/** The send route's refusal for a member who may not compose this site's mail. */\nexport const CAMPAIGN_DRAFT_ROLE_REFUSAL = 'Not a site admin or editor'\n\n/** The id of the one email inside a drafted campaign. */\nexport function campaignDraftEmailId(campaignId: string): string {\n  return `${campaignId}-email`\n}\n\n/** Every field a drafted email is written with, and so every field it can hold. */\nexport const CAMPAIGN_DRAFT_EMAIL_FIELDS = [\n  'subject',\n  'subjectTokens',\n  'preheader',\n  'templateScreenId',\n  'subjectVariants',\n  'preheaderVariants',\n  CAMPAIGN_SEND_CONTAINER_FIELD,\n  CAMPAIGN_SEND_HOST_FIELD,\n  'visibleTo',\n  'status',\n  'createdAtMs',\n  'draftedAt',\n  'draftedBy',\n] as const\n\n/** What a caller sends as `content`. */\nexport interface CampaignDraftContent {\n  /** The email design the email sends: a `kind: 'email'` screen on the site. */\n  templateScreenId: string\n  subject: string\n  preheader: string\n  subjectVariants: string[]\n  preheaderVariants: string[]\n}\n\n/** A header value on one line: controls and runs of space folded to one space. */\nfunction draftHeaderLine(value: unknown): string {\n  return String(value ?? '').replace(/[\\p{Cc}\\s]+/gu, ' ').trim()\n}\n\nfunction draftVariants(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  const seen = new Set<string>()\n  const lines: string[] = []\n  for (const raw of value) {\n    const line = draftHeaderLine(raw)\n    if (!line || seen.has(line.toLowerCase())) continue\n    seen.add(line.toLowerCase())\n    lines.push(line)\n  }\n  return lines.slice(0, CAMPAIGN_DRAFT_MAX_VARIANTS)\n}\n\nexport function readCampaignDraftContent(\n  content: Readonly<Record<string, unknown>>,\n): { ok: true; value: CampaignDraftContent } | { ok: false; problems: string[] } {\n  const value: CampaignDraftContent = {\n    templateScreenId: String(content['templateScreenId'] ?? ''),\n    subject: draftHeaderLine(content['subject']),\n    preheader: draftHeaderLine(content['preheader']),\n    subjectVariants: draftVariants(content['subjectVariants']),\n    preheaderVariants: draftVariants(content['preheaderVariants']),\n  }\n  const problems: string[] = []\n  if (!isDocumentId(value.templateScreenId)) {\n    problems.push('A drafted campaign needs the email design it sends')\n  }\n  if (!value.subject) problems.push('A drafted campaign needs a subject line')\n  const long = (lines: string[]) =>\n    lines.some((line) => line.length > CAMPAIGN_DRAFT_HEADER_MAX_CHARS)\n  if (long([value.subject, ...value.subjectVariants])) {\n    problems.push(`A subject line is longer than ${CAMPAIGN_DRAFT_HEADER_MAX_CHARS} characters`)\n  }\n  if (long([value.preheader, ...value.preheaderVariants])) {\n    problems.push(`A preheader is longer than ${CAMPAIGN_DRAFT_HEADER_MAX_CHARS} characters`)\n  }\n  return problems.length ? { ok: false, problems } : { ok: true, value }\n}\n\nfunction campaignDraftRoleRefusal(\n  host: FirebaseFirestore.DocumentSnapshot,\n  uid: string,\n): PluginDraftRefusal | null {\n  const role = (host.get('memberRoles') ?? {})[uid]\n  return CAMPAIGN_DRAFT_ROLES.includes(role)\n    ? null\n    : { status: 403, error: CAMPAIGN_DRAFT_ROLE_REFUSAL }\n}\n\nfunction campaignDraftRecord(campaign: FirebaseFirestore.DocumentSnapshot): PluginDraftRecord {\n  return {\n    id: campaign.id,\n    name: String(campaign.get('name') ?? ''),\n    versionId: null,\n    facts: { emailId: campaignDraftEmailId(campaign.id) },\n  }\n}\n\nexport interface CampaignDraftWriterDeps {\n  /** The Admin SDK handle; specs hand in a double. */\n  firestore?: () => FirebaseFirestore.Firestore\n  /** The site's organization, or null; specs hand in a double. */\n  resolveOrgId?: (hostId: string) => Promise<string | null>\n}\n\nexport function createCampaignDraftWriter(\n  deps: CampaignDraftWriterDeps = {},\n): PluginResourceDraftWriter {\n  const firestore =\n    deps.firestore ??\n    (() => firebaseAdmin.app().firestore() as unknown as FirebaseFirestore.Firestore)\n  /*\n   * The org is resolved from the SITE rather than taken from the request's\n   * context: the site is what the role check reads, so the campaign lands in\n   * the organization that site belongs to and no other.\n   */\n  const resolveOrgId = deps.resolveOrgId ?? resolveOrgIdForHost\n  return {\n    refusal: async ({ hostId, uid }) => {\n      const host = await firestore().collection('hosts').doc(hostId).get()\n      if (!host.exists) return { status: 404, error: 'Unknown site' }\n      return campaignDraftRoleRefusal(host, uid)\n    },\n\n    check: (content) => {\n      const read = readCampaignDraftContent(content)\n      return read.ok === false\n        ? read\n        : { ok: true, facts: { fields: [...CAMPAIGN_DRAFT_EMAIL_FIELDS] } }\n    },\n\n    read: async ({ hostId, id }) => {\n      if (!isDocumentId(id)) return null\n      const orgId = await resolveOrgId(hostId)\n      if (!orgId) return null\n      const campaign = await orgEmailCampaigns(firestore(), orgId).doc(id).get()\n      return campaign.exists &&\n        campaignPlacedOnHost(\n          { visibleTo: campaign.get('visibleTo') as string[] | undefined },\n          hostId,\n        )\n        ? campaignDraftRecord(campaign)\n        : null\n    },\n\n    write: async (request): Promise<PluginDraftWrite> => {\n      const read = readCampaignDraftContent(request.content)\n      if (read.ok === false) return { ok: false, status: 400, error: read.problems[0] }\n      if (!isDocumentId(request.id)) return { ok: false, status: 400, error: 'Invalid campaignId' }\n      const db = firestore()\n      const orgId = await resolveOrgId(request.hostId)\n      if (!orgId) {\n        return { ok: false, status: 409, error: 'This site is not part of an organization' }\n      }\n      const hostRef = db.collection('hosts').doc(request.hostId)\n      const campaignRef = orgEmailCampaigns(db, orgId).doc(request.id)\n      const emailId = campaignDraftEmailId(request.id)\n      const emailRef = orgCampaignSends(db, orgId).doc(emailId)\n      const designRef = hostRef.collection('screens').doc(read.value.templateScreenId)\n      return db.runTransaction(async (transaction): Promise<PluginDraftWrite> => {\n        const [host, campaign, email, design] = await Promise.all([\n          transaction.get(hostRef),\n          transaction.get(campaignRef),\n          transaction.get(emailRef),\n          transaction.get(designRef),\n        ])\n        if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n        if (campaign.exists) {\n          /*\n           * A replay answers only for a campaign this site can see: the id\n           * space is the organization's, and one placed on a sibling site is\n           * not this request's to report or to write over.\n           */\n          if (\n            !campaignPlacedOnHost(\n              { visibleTo: campaign.get('visibleTo') as string[] | undefined },\n              request.hostId,\n            )\n          ) {\n            return { ok: false, status: 409, error: 'That campaign already exists' }\n          }\n          return { ok: true, replayed: true, ...campaignDraftRecord(campaign) }\n        }\n        const refusal = campaignDraftRoleRefusal(host, request.uid)\n        if (refusal) return { ok: false, ...refusal }\n        if (\n          !design.exists ||\n          design.get('deletedAt') != null ||\n          design.get('kind') !== SCREEN_KIND_EMAIL\n        ) {\n          return { ok: false, status: 400, error: 'Unknown email design' }\n        }\n        if (email.exists) return { ok: false, status: 409, error: 'That email already exists' }\n        const name = draftHeaderLine(request.name) || CAMPAIGN_DRAFT_DEFAULT_NAME\n        const nowMs = request.now.getTime()\n        // A site hub's create drawer's own document: a name, no dates, no\n        // lists, placed on the site it was drafted for.\n        const visibleTo = campaignVisibleTo([request.hostId])\n        transaction.create(campaignRef, {\n          name,\n          ...campaignContainerSearchFields(name),\n          listIds: [],\n          visibleTo,\n          createdAtMs: nowMs,\n          createdBy: request.uid,\n        })\n        const { value } = read\n        transaction.create(emailRef, {\n          subject: value.subject,\n          ...campaignSendSearchFields(value.subject),\n          ...(value.preheader ? { preheader: value.preheader } : {}),\n          templateScreenId: value.templateScreenId,\n          ...(value.subjectVariants.length ? { subjectVariants: value.subjectVariants } : {}),\n          ...(value.preheaderVariants.length ? { preheaderVariants: value.preheaderVariants } : {}),\n          [CAMPAIGN_SEND_CONTAINER_FIELD]: request.id,\n          ...campaignSendSiteStamp(request.hostId),\n          status: 'draft',\n          createdAtMs: nowMs,\n          draftedAt: request.now,\n          draftedBy: request.uid,\n        })\n        return {\n          ok: true,\n          replayed: false,\n          id: request.id,\n          name,\n          versionId: null,\n          facts: { emailId },\n        }\n      })\n    },\n  }\n}\n\nexport const campaignDraftWriter = createCampaignDraftWriter()\n\n/**\n * Registers the writer; the console surface calls it, since only the console\n * runs AI jobs (AGL-3026). Idempotent: a second call replaces the first.\n */\nexport function registerCampaignDraftWriter(): void {\n  registerPluginResourceDraftWriter(CAMPAIGN_DRAFT_RESOURCE, campaignDraftWriter, {\n    pluginId: MARKETING_PLUGIN_ID,\n  })\n}\n\n/** The org roles that may manage campaigns from the organization hub. */\nconst ORG_MANAGE_ROLES = ['owner', 'admin', 'editor'] as const\n\n/**\n * The organization a `campaigns/manage` request from the organization hub is\n * for, read off its JSON body, so the dispatcher's release gate asks about the\n * right organization. Only consulted for a request that names no site.\n * Unverified, exactly as a `hostId` is: the handler refuses anyone who is not\n * an org-wide member of it.\n */\nexport async function campaignManageSubject(\n  request: Request,\n): Promise<PluginApiRequestSubject | null> {\n  if (request.method !== 'POST') return null\n  const body = (await request.json().catch(() => null)) as { orgId?: unknown } | null\n  const orgId = typeof body?.orgId === 'string' ? body.orgId : ''\n  return isDocumentId(orgId) ? { orgId } : null\n}\n\n/**\n * Campaign management API: removing a campaign, discarding a draft, and\n * copying an email.\n *\n * Separate from `campaigns/send` because nothing here sends, reserves\n * allowance or moves a meter, and because the removals are about a record\n * ceasing to exist — which is the one class of change that has to be read\n * against what a merchant has already mailed.\n *\n * Reached through two doors — see the header. A site request carries\n * `hostId` and is authorized by the caller's admin or editor role on that\n * site; an organization request carries `orgId` and no `hostId`, and is\n * authorized by an org-wide membership as owner, admin or editor.\n *\n * Editing a campaign is deliberately NOT here. The container is client-\n * writable, its create already runs on the client SDK, and a second door to\n * the same document would be a second place for the two to disagree about\n * what a campaign may hold.\n */\nexport const campaignManageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const requestedOrgId = String(req.body?.orgId ?? '')\n  const action = String(req.body?.action ?? '')\n  const targetId = String(req.body?.campaignId ?? '')\n  if (!hostId && !requestedOrgId) {\n    return res.status(400).json({ error: 'Missing hostId' })\n  }\n  if (hostId && !isDocumentId(hostId)) {\n    return res.status(400).json({ error: 'Invalid hostId' })\n  }\n  if (requestedOrgId && !isDocumentId(requestedOrgId)) {\n    return res.status(400).json({ error: 'Invalid orgId' })\n  }\n  if (!isDocumentId(targetId)) {\n    return res.status(400).json({ error: 'Invalid campaignId' })\n  }\n  if (\n    action !== 'deleteCampaign' &&\n    action !== 'discardEmail' &&\n    action !== 'duplicate'\n  ) {\n    return res.status(400).json({ error: 'Unknown action' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const firestore = firebaseAdmin.app().firestore()\n    let orgId: string\n    if (hostId) {\n      const hostRef = firestore.collection('hosts').doc(hostId)\n      const hostSnapshot = await hostRef.get()\n      if (!hostSnapshot.exists) {\n        return res.status(404).json({ error: 'Unknown site' })\n      }\n      const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n      if (memberRole !== 'admin' && memberRole !== 'editor') {\n        return res.status(403).json({ error: 'Not a site admin or editor' })\n      }\n      orgId = (await resolveOrgIdForHost(hostId)) ?? ''\n      if (!orgId) {\n        return res.status(409).json({\n          error: 'This site is not part of an organization, so it holds no campaigns.',\n        })\n      }\n      /*\n       * A request naming both is answered for the site, and only when the\n       * two agree: an org id the site does not belong to is a confused\n       * caller, and acting on the site's own org instead would be a guess.\n       */\n      if (requestedOrgId && requestedOrgId !== orgId) {\n        return res.status(400).json({ error: 'That site is not in this organization' })\n      }\n    } else {\n      const membership = await resolveOrgMembership(decoded.uid, requestedOrgId)\n      const member = membership?.member as Partial<AglynOrgMember> | undefined\n      if (\n        !member ||\n        !isOrgWideMember(member) ||\n        !(ORG_MANAGE_ROLES as readonly string[]).includes(String(member.role ?? ''))\n      ) {\n        return res\n          .status(403)\n          .json({ error: 'Not an organization owner, admin or editor' })\n      }\n      /*\n       * The site door is refused by the dispatcher when Marketing is off for\n       * the site; a request naming no site reaches here past only the release\n       * gate, so the organization's own switch is asked here.\n       */\n      if (!isPluginEnabled(await getOrgDoc(requestedOrgId), MARKETING_PLUGIN_ID)) {\n        return res.status(404).json({ error: 'Not found' })\n      }\n      orgId = requestedOrgId\n    }\n\n    if (action === 'duplicate') {\n      // One attempt key, one copy (AGL-2936): a double click on Duplicate\n      // replays the first answer rather than drafting the message twice.\n      const attemptKey = String(req.body?.attemptKey ?? '').trim().slice(0, 200)\n      const claimed = attemptKey\n        ? await claimAttempt(firestore as never, {\n            kind: 'duplicate-campaign',\n            scopeId: `${hostId || `org:${orgId}`}:${targetId}`,\n            orgId,\n            key: attemptKey,\n            busyMessage: DUPLICATE_BUSY_MESSAGE,\n          })\n        : null\n      if (claimed && 'replay' in claimed) {\n        return res.status(claimed.replay.status).json(claimed.replay.body)\n      }\n      const claim = claimed && 'claim' in claimed ? claimed.claim : null\n      const copied = await duplicateMessage(\n        firestore,\n        orgId,\n        hostId,\n        targetId,\n        String(req.body?.name ?? ''),\n        { uid: decoded.uid, email: decoded.email ?? null },\n      )\n      if (copied.status === 200) await claim?.record(copied.status, copied.body)\n      else await claim?.release()\n      return res.status(copied.status).json(copied.body)\n    }\n    const result =\n      action === 'deleteCampaign'\n        ? await deleteCampaign(firestore, orgId, targetId, {\n            hostId,\n            uid: decoded.uid,\n          })\n        : await discardDraft(firestore, orgId, targetId, hostId)\n    return res.status(result.status).json(result.body)\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'The request could not be completed' })\n  }\n}\n"],"names":["firebaseAdmin","isDocumentId","logResourceDuplicated","restampCrmListFieldsOf","DUPLICATE_BUSY_MESSAGE","duplicateDisplayName","uniqueDuplicateName","claimAttempt","createResourceUid","consentGroupForSite","getOrgDoc","resolveOrgIdForHost","resolveOrgMembership","CAMPAIGN_MEMBER_HOST_COLLECTIONS","CAMPAIGN_MEMBERSHIP_FIELD","contactCampaignFieldPath","isOrgWideMember","CAMPAIGN_SEND_CONTAINER_FIELD","CAMPAIGN_SEND_HOST_FIELD","campaignPlacedOnHost","campaignSiteIds","campaignVisibleTo","campaignSendSiteStamp","orgCampaignSends","orgEmailCampaigns","sendHostId","sendIsOnHost","SCREEN_KIND_EMAIL","campaignContainerSearchFields","campaignSendSearchFields","registerPluginResourceDraftWriter","runPluginMembershipDetachers","isPluginEnabled","DETACH_BATCH","DETACH_PASSES","ORG_SITES_MAX","detachSends","firestore","orgId","campaignId","detached","pass","page","where","limit","get","empty","remaining","batch","send","docs","update","ref","commit","size","detachMembership","collectionRef","fieldPath","member","FieldValue","arrayRemove","id","map","orgSiteIds","collection","hostIds","doc","String","slice","truncated","length","detachMembers","take","hostId","hostRef","collectionName","orgRef","plugins","field","report","Object","values","org","groupIds","Set","add","groupId","contacts","deleteCampaign","access","snapshot","placement","visibleTo","exists","undefined","status","body","error","sites","onlyHere","every","membership","uid","toLocaleString","members","detachedMembers","delete","deleted","discardDraft","emailId","refusal","state","outcome","runTransaction","transaction","fresh","discarded","DUPLICATED_MESSAGE_FIELDS","duplicateMessage","requestedName","actor","messages","peek","siteId","source","data","copy","siblings","Promise","all","select","sourceName","trim","name","row","nowMs","Date","now","create","displayName","createdAtMs","draftedAt","draftedBy","email","target","CAMPAIGN_DRAFT_RESOURCE","MARKETING_PLUGIN_ID","CAMPAIGN_DRAFT_DEFAULT_NAME","CAMPAIGN_DRAFT_HEADER_MAX_CHARS","CAMPAIGN_DRAFT_MAX_VARIANTS","CAMPAIGN_DRAFT_ROLES","CAMPAIGN_DRAFT_ROLE_REFUSAL","campaignDraftEmailId","CAMPAIGN_DRAFT_EMAIL_FIELDS","draftHeaderLine","value","replace","draftVariants","Array","isArray","seen","lines","raw","line","has","toLowerCase","push","readCampaignDraftContent","content","templateScreenId","subject","preheader","subjectVariants","preheaderVariants","problems","long","some","ok","campaignDraftRoleRefusal","host","role","includes","campaignDraftRecord","campaign","versionId","facts","createCampaignDraftWriter","deps","app","resolveOrgId","check","read","fields","write","request","db","campaignRef","emailRef","designRef","design","replayed","getTime","listIds","createdBy","campaignDraftWriter","registerCampaignDraftWriter","pluginId","ORG_MANAGE_ROLES","campaignManageSubject","method","json","catch","campaignManageHandler","req","res","requestedOrgId","action","targetId","authorization","headers","idToken","startsWith","decoded","auth","verifyIdToken","hostSnapshot","memberRole","attemptKey","claimed","kind","scopeId","key","busyMessage","replay","claim","copied","record","release","result","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiEC,GAED;;;;;;CAMC,GACD,OAAOA,mBAAmB,iDAAgD;AAC1E,SAASC,YAAY,QAAQ,8CAA6C;AAC1E,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,sBAAsB,QAAQ,8CAA6C;AACpF,SACEC,sBAAsB,EACtBC,oBAAoB,EACpBC,mBAAmB,QACd,4CAA2C;AAClD,SAASC,YAAY,EAAEC,iBAAiB,QAAQ,sBAAqB;AACrE;;;;;CAKC,GACD,SACEC,mBAAmB,EACnBC,SAAS,EACTC,mBAAmB,EACnBC,oBAAoB,QACf,gDAA+C;AACtD,SACEC,gCAAgC,EAChCC,yBAAyB,EACzBC,wBAAwB,EACxBC,eAAe,QAIV,sBAAqB;AAC5B,SACEC,6BAA6B,EAC7BC,wBAAwB,EACxBC,oBAAoB,EACpBC,eAAe,EACfC,iBAAiB,QACZ,yCAAwC;AAC/C,SACEC,qBAAqB,EACrBC,gBAAgB,EAChBC,iBAAiB,EACjBC,UAAU,EACVC,YAAY,QACP,yBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SACEC,6BAA6B,EAC7BC,wBAAwB,QACnB,kCAA8B;AACrC,SACEC,iCAAiC,QAK5B,qDAAoD;AAC3D,SAASC,4BAA4B,QAAQ,uDAAsD;AACnG,SAASC,eAAe,QAAQ,8CAA6C;AAE7E;;;;;;CAMC,GACD,MAAMC,eAAe;AAErB;;;;;;;;;;;;CAYC,GACD,MAAMC,gBAAgB;AAEtB;;;;;;;CAOC,GACD,MAAMC,gBAAgB;AAQtB;;;;;;;;;;CAUC,GACD,eAAeC,YACbC,SAAsC,EACtCC,KAAa,EACbC,UAAkB;IAElB,IAAIC,WAAW;IACf,IAAK,IAAIC,OAAO,GAAGA,OAAOP,eAAeO,QAAQ,EAAG;QAClD,MAAMC,OAAO,MAAMnB,iBAAiBc,WAAWC,OAC5CK,KAAK,CAAC1B,+BAA+B,MAAMsB,YAC3CK,KAAK,CAACX,cACNY,GAAG;QACN,IAAIH,KAAKI,KAAK,EAAE,OAAO;YAAEN;YAAUO,WAAW;QAAM;QACpD,MAAMC,QAAQX,UAAUW,KAAK;QAC7B,KAAK,MAAMC,QAAQP,KAAKQ,IAAI,CAAE;YAC5B;;;;;;;OAOC,GACDF,MAAMG,MAAM,CAACF,KAAKG,GAAG,EAAE;gBACrB,CAACnC,8BAA8B,EAAE;YACnC;QACF;QACA,MAAM+B,MAAMK,MAAM;QAClBb,YAAYE,KAAKY,IAAI;QACrB,IAAIZ,KAAKY,IAAI,GAAGrB,cAAc,OAAO;YAAEO;YAAUO,WAAW;QAAM;IACpE;IACA,OAAO;QAAEP;QAAUO,WAAW;IAAK;AACrC;AAEA;;;;;;;;;;;;;;;CAeC,GACD,eAAeQ,iBACblB,SAAsC,EACtCmB,aAAoD,EACpDC,SAAiB,EACjBlB,UAAkB;IAElB,IAAIC,WAAW;IACf,IAAK,IAAIC,OAAO,GAAGA,OAAOP,eAAeO,QAAQ,EAAG;QAClD,MAAMC,OAAO,MAAMc,cAChBb,KAAK,CAACc,WAAW,kBAAkBlB,YACnCK,KAAK,CAACX,cACNY,GAAG;QACN,IAAIH,KAAKI,KAAK,EAAE,OAAO;YAAEN;YAAUO,WAAW;QAAM;QACpD,MAAMC,QAAQX,UAAUW,KAAK;QAC7B,KAAK,MAAMU,UAAUhB,KAAKQ,IAAI,CAAE;YAC9BF,MAAMG,MAAM,CAACO,OAAON,GAAG,EAAE;gBACvB,CAACK,UAAU,EAAEzD,cAAcqC,SAAS,CAACsB,UAAU,CAACC,WAAW,CAACrB;YAC9D;QACF;QACA,MAAMS,MAAMK,MAAM;QAClB,qEAAqE;QACrE,sEAAsE;QACtE,IAAIG,cAAcK,EAAE,KAAK,SAAS;YAChC,MAAM1D,uBAAuBuC,KAAKQ,IAAI,CAACY,GAAG,CAAC,CAACJ,SAAWA,OAAON,GAAG,GAAG;QACtE;QACAZ,YAAYE,KAAKY,IAAI;QACrB,IAAIZ,KAAKY,IAAI,GAAGrB,cAAc,OAAO;YAAEO;YAAUO,WAAW;QAAM;IACpE;IACA,OAAO;QAAEP;QAAUO,WAAW;IAAK;AACrC;AAEA;;;;;;CAMC,GACD,eAAegB,WACb1B,SAAsC,EACtCC,KAAa;IAEb,MAAMI,OAAO,MAAML,UAChB2B,UAAU,CAAC,aACXrB,KAAK,CAAC,SAAS,MAAML,OACrBM,KAAK,CAACT,gBAAgB,GACtBU,GAAG;IACN,MAAMoB,UAAUvB,KAAKQ,IAAI,CAACY,GAAG,CAAC,CAACI,MAAQC,OAAOD,IAAIL,EAAE;IACpD,OAAO;QACLI,SAASA,QAAQG,KAAK,CAAC,GAAGjC;QAC1BkC,WAAWJ,QAAQK,MAAM,GAAGnC;IAC9B;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDC,GACD,eAAeoC,cACblC,SAAsC,EACtCC,KAAa,EACbC,UAAkB;QAuDJ;IArDd,IAAIC,WAAW;IACf,IAAIO,YAAY;IAChB,MAAMyB,OAAO,CAAC/B;QACZD,YAAYC,KAAKD,QAAQ;QACzBO,YAAYA,aAAaN,KAAKM,SAAS;IACzC;IACA,MAAM,EAAEkB,OAAO,EAAEI,SAAS,EAAE,GAAG,MAAMN,WAAW1B,WAAWC;IAC3D,IAAI+B,WAAWtB,YAAY;IAC3B,KAAK,MAAM0B,UAAUR,QAAS;QAC5B,MAAMS,UAAUrC,UAAU2B,UAAU,CAAC,SAASE,GAAG,CAACO;QAClD,KAAK,MAAME,kBAAkB9D,iCAAkC;YAC7D2D,KACE,MAAMjB,iBACJlB,WACAqC,QAAQV,UAAU,CAACW,iBACnB7D,2BACAyB;QAGN;IACF;IACA,MAAMqC,SAASvC,UAAU2B,UAAU,CAAC,QAAQE,GAAG,CAAC5B;IAChDkC,KACE,MAAMjB,iBACJlB,WACAuC,OAAOZ,UAAU,CAAC,UAClBlD,2BACAyB;IAGJ;;;GAGC,GACD,KAAK,MAAMkC,UAAUR,QAAQK,MAAM,GAAGL,UAAU;QAAC;KAAG,CAAE;QACpD,MAAMY,UAAU,MAAM9C,6BAA6B;YACjD0C;YACAnC;YACAwC,OAAOhE;YACP+C,IAAItB;QACN;QACA,KAAK,MAAMwC,UAAUC,OAAOC,MAAM,CAACJ,SAAU;;YAC3CrC,qBAAYuC,0BAAAA,OAAQvC,QAAQ,oBAAI;YAChCO,YAAYA,aAAagC,WAAW,QAAQA,OAAOhC,SAAS;QAC9D;IACF;IACA;;;;;;GAMC,GACD,MAAMmC,OAAQ,OAAA,MAAMxE,UAAU4B,kBAAhB,OAA2B,CAAC;IAC1C,MAAM6C,WAAW,IAAIC;IACrB,KAAK,MAAMX,UAAUR,QAAS;QAC5BkB,SAASE,GAAG,CAAC,AAAC,CAAA,MAAM5E,oBAAoBgE,QAAQS,IAAG,EAAGI,OAAO;IAC/D;IACA,MAAMC,WAAWX,OAAOZ,UAAU,CAAC;IACnC,KAAK,MAAMsB,WAAWH,SAAU;QAC9BX,KACE,MAAMjB,iBACJlB,WACAkD,UACAxE,yBAAyBuE,UACzB/C;IAGN;IACA,OAAO;QAAEC;QAAUO;IAAU;AAC/B;AAUA;;;;;;;;;;;;;;;;;CAiBC,GACD,eAAeyC,eACbnD,SAAsC,EACtCC,KAAa,EACbC,UAAkB,EAClBkD,MAAoB;IAEpB,MAAMrC,MAAM5B,kBAAkBa,WAAWC,OAAO4B,GAAG,CAAC3B;IACpD,MAAMmD,WAAW,MAAMtC,IAAIP,GAAG;IAC9B;;;;;;GAMC,GACD,MAAM8C,YAAY;QAChBC,WAAWF,SAASG,MAAM,GACrBH,SAAS7C,GAAG,CAAC,eACdiD;IACN;IACA,IACE,CAACJ,SAASG,MAAM,IACfJ,OAAOhB,MAAM,IAAI,CAACtD,qBAAqBwE,WAAWF,OAAOhB,MAAM,GAChE;QACA,OAAO;YAAEsB,QAAQ;YAAKC,MAAM;gBAAEC,OAAO;YAAmB;QAAE;IAC5D;IACA,IAAIR,OAAOhB,MAAM,EAAE;QACjB,MAAMyB,QAAQ9E,gBAAgBuE;QAC9B,MAAMQ,WAAWD,UAAU,QAAQA,MAAME,KAAK,CAAC,CAACvC,KAAOA,OAAO4B,OAAOhB,MAAM;QAC3E,IAAI,CAAC0B,UAAU;YACb,MAAME,aAAa,MAAMzF,qBAAqB6E,OAAOa,GAAG,EAAEhE;YAC1D,IAAI,CAACtB,gBAAgBqF,8BAAAA,WAAY3C,MAAM,GAAG;gBACxC,OAAO;oBACLqC,QAAQ;oBACRC,MAAM;wBACJC,OACE,oEACA,mEACA;oBACJ;gBACF;YACF;QACF;IACF;IACA,MAAM,EAAEzD,QAAQ,EAAEO,SAAS,EAAE,GAAG,MAAMX,YAAYC,WAAWC,OAAOC;IACpE,IAAIQ,WAAW;QACb,OAAO;YACLgD,QAAQ;YACRC,MAAM;gBACJxD;gBACAyD,OACE,CAAC,6DAA6D,CAAC,GAC/D,GAAGzD,SAAS+D,cAAc,GAAG,sCAAsC,CAAC,GACpE;YACJ;QACF;IACF;IACA;;;;;;;;;;GAUC,GACD,MAAMC,UAAU,MAAMjC,cAAclC,WAAWC,OAAOC;IACtD,IAAIiE,QAAQzD,SAAS,EAAE;QACrB,OAAO;YACLgD,QAAQ;YACRC,MAAM;gBACJxD;gBACAiE,iBAAiBD,QAAQhE,QAAQ;gBACjCyD,OACE,kEACA,GAAGO,QAAQhE,QAAQ,CAAC+D,cAAc,GAAG,4BAA4B,CAAC,GAClE,iEACA;YACJ;QACF;IACF;IACA,MAAMnD,IAAIsD,MAAM;IAChB,OAAO;QACLX,QAAQ;QACRC,MAAM;YACJzD;YACAC;YACAiE,iBAAiBD,QAAQhE,QAAQ;YACjCmE,SAAS;QACX;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,eAAeC,aACbvE,SAAsC,EACtCC,KAAa,EACbuE,OAAe,EACfpC,MAAc;IAEd,MAAMrB,MAAM7B,iBAAiBc,WAAWC,OAAO4B,GAAG,CAAC2C;IACnD,MAAMC,UAAU,CAACC;QACf,IAAIA,UAAU,QAAQ;YACpB,OAAO,kEACL;QACJ;QACA,IAAIA,UAAU,aAAa;YACzB,OAAO,iEACL;QACJ;QACA,IAAIA,UAAU,WAAW;YACvB,OAAO;QACT;QACA,OAAO;IACT;IACA,MAAMC,UAAU,MAAM3E,UAAU4E,cAAc,CAC5C,OAAOC;YAKgBC;QAJrB,MAAMA,QAAQ,MAAMD,YAAYrE,GAAG,CAACO;QACpC,IAAI,CAAC+D,MAAMtB,MAAM,IAAKpB,UAAU,CAAC/C,aAAayF,OAAO1C,SAAU;YAC7D,OAAO;gBAAEsB,QAAQ;gBAAKC,MAAM;oBAAEC,OAAO;gBAAgB;YAAE;QACzD;QACA,MAAMc,QAAQ5C,QAAOgD,aAAAA,MAAMtE,GAAG,CAAC,qBAAVsE,aAAuB;QAC5C,IAAIJ,UAAU,SAAS;YACrB,OAAO;gBAAEhB,QAAQ;gBAAKC,MAAM;oBAAEC,OAAOa,QAAQC;gBAAO;YAAE;QACxD;QACA;;;;;OAKC,GACDG,YAAYR,MAAM,CAACtD;QACnB,OAAO;YAAE2C,QAAQ;YAAKC,MAAM;gBAAEa;gBAASO,WAAW;YAAK;QAAE;IAC3D;IAEF,OAAOJ;AACT;AAEA;;;;;;CAMC,GACD,MAAMK,4BAA4B;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACApG;CACD;AAED;;;;;;;;;;;CAWC,GACD,eAAeqG,iBACbjF,SAAsC,EACtCC,KAAa,EACbmC,MAAc,EACdoC,OAAe,EACfU,aAAqB,EACrBC,KAA4C;IAE5C,MAAMC,WAAWlG,iBAAiBc,WAAWC;IAC7C,MAAMuB,KAAKrD;IACX;;;;GAIC,GACD,MAAMkH,OAAO,MAAMD,SAASvD,GAAG,CAAC2C,SAAShE,GAAG;IAC5C,IAAI,CAAC6E,KAAK7B,MAAM,IAAKpB,UAAU,CAAC/C,aAAagG,MAAMjD,SAAU;QAC3D,OAAO;YAAEsB,QAAQ;YAAKC,MAAM;gBAAEC,OAAO;YAAgB;QAAE;IACzD;IACA,MAAM0B,SAASlD,UAAUhD,WAAWiG;IACpC,IAAI,CAACC,QAAQ;QACX,OAAO;YACL5B,QAAQ;YACRC,MAAM;gBACJC,OACE,kEACA;YACJ;QACF;IACF;IACA,MAAMe,UAAU,MAAM3E,UAAU4E,cAAc,CAC5C,OAAOC;YAYSU,cACYC,MAAAA,mBAeSC;QA3BnC,MAAM,CAACF,QAAQG,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAC3Cf,YAAYrE,GAAG,CAAC4E,SAASvD,GAAG,CAAC2C;YAC7BK,YAAYrE,GAAG,CACb4E,SACGS,MAAM,CAAC,eAAe,WACtBvF,KAAK,CAACzB,0BAA0B,MAAMyG;SAE5C;QACD,IAAI,CAACC,OAAO/B,MAAM,EAAE;YAClB,OAAO;gBAAEE,QAAQ;gBAAKC,MAAM;oBAAEC,OAAO;gBAAgB;YAAE;QACzD;QACA,MAAM4B,QAAQD,eAAAA,OAAOC,IAAI,cAAXD,eAAiB,CAAC;QAChC,MAAMO,aAAahE,QAAO0D,QAAAA,oBAAAA,IAAI,CAAC,cAAc,YAAnBA,oBAAuBA,IAAI,CAAC,UAAU,YAAtCA,OAA0C,IAAIO,IAAI;QAC5E,MAAMC,OAAO/H,oBACXiH,cAAca,IAAI,MAAM/H,qBAAqB8H,aAC7CJ,SAAS7E,IAAI,CAACY,GAAG,CAAC,CAACwE;gBAAeA,MAAAA;mBAAPnE,QAAOmE,QAAAA,WAAAA,IAAIzF,GAAG,CAAC,0BAARyF,WAA0BA,IAAIzF,GAAG,CAAC,sBAAlCyF,OAAgD;;QAEpF,MAAMR,OAAgC,CAAC;QACvC,KAAK,MAAMhD,SAASuC,0BAA2B;YAC7C,IAAIQ,IAAI,CAAC/C,MAAM,KAAKgB,aAAa+B,IAAI,CAAC/C,MAAM,KAAK,MAAMgD,IAAI,CAAChD,MAAM,GAAG+C,IAAI,CAAC/C,MAAM;QAClF;QACA,MAAMyD,QAAQC,KAAKC,GAAG;QACtBvB,YAAYwB,MAAM,CAACjB,SAASvD,GAAG,CAACL,KAAK,aAChCiE,MAGAjG,yBAAyBiG,IAAI,CAAC,UAAU;YAC3C,CAAC7G,8BAA8B,GAAE6G,sCAAAA,IAAI,CAAC7G,8BAA8B,YAAnC6G,sCAAuC;WACrExG,sBAAsBqG;YACzBgB,aAAaN;YACbtC,QAAQ;YACR6C,aAAaL;YACbM,WAAW,IAAIL,KAAKD;YACpBO,WAAWtB,MAAMlB,GAAG;;QAEtB,OAAO;YAAEP,QAAQ;YAAKC,MAAM;gBAAEa,SAAShD;gBAAIwE;YAAK;YAAGA;YAAMF;QAAW;IACtE;IAEF,IAAInB,QAAQjB,MAAM,KAAK,KAAK;YAOOiB,qBACTA;QAPxB,MAAM9G,sBACJ,YACA;YAAEoG,KAAKkB,MAAMlB,GAAG;YAAEyC,OAAOvB,MAAMuB,KAAK;QAAC,GACrC;YACEzG;YACAmC,QAAQkD;YACRC,QAAQ;gBAAE/D,IAAIgD;gBAASwB,IAAI,GAAErB,sBAAAA,QAAQmB,UAAU,YAAlBnB,sBAAsB;YAAG;YACtDgC,QAAQ;gBAAEnF;gBAAIwE,IAAI,GAAErB,gBAAAA,QAAQqB,IAAI,YAAZrB,gBAAgB;YAAG;QACzC;IAEJ;IACA,OAAO;QAAEjB,QAAQiB,QAAQjB,MAAM;QAAEC,MAAMgB,QAAQhB,IAAI;IAAC;AACtD;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAkC2C,GAE3C,qEAAqE,GACrE,OAAO,MAAMiD,0BAA0B,WAAU;AAEjD,8DAA8D,GAC9D,MAAMC,sBAAsB;AAE5B,6DAA6D,GAC7D,OAAO,MAAMC,8BAA8B,oBAAmB;AAE9D,0FAA0F,GAC1F,OAAO,MAAMC,kCAAkC,IAAG;AAElD,4EAA4E,GAC5E,OAAO,MAAMC,8BAA8B,GAAE;AAE7C,sDAAsD,GACtD,OAAO,MAAMC,uBAAuB;IAAC;IAAS;CAAS,CAAS;AAChE,gFAAgF,GAChF,OAAO,MAAMC,8BAA8B,6BAA4B;AAEvE,uDAAuD,GACvD,OAAO,SAASC,qBAAqBjH,UAAkB;IACrD,OAAO,GAAGA,WAAW,MAAM,CAAC;AAC9B;AAEA,iFAAiF,GACjF,OAAO,MAAMkH,8BAA8B;IACzC;IACA;IACA;IACA;IACA;IACA;IACAxI;IACAC;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV,gFAAgF,GAChF,SAASwI,gBAAgBC,KAAc;IACrC,OAAOxF,OAAOwF,gBAAAA,QAAS,IAAIC,OAAO,CAAC,sDAAiB,KAAKxB,IAAI;AAC/D;AAEA,SAASyB,cAAcF,KAAc;IACnC,IAAI,CAACG,MAAMC,OAAO,CAACJ,QAAQ,OAAO,EAAE;IACpC,MAAMK,OAAO,IAAI5E;IACjB,MAAM6E,QAAkB,EAAE;IAC1B,KAAK,MAAMC,OAAOP,MAAO;QACvB,MAAMQ,OAAOT,gBAAgBQ;QAC7B,IAAI,CAACC,QAAQH,KAAKI,GAAG,CAACD,KAAKE,WAAW,KAAK;QAC3CL,KAAK3E,GAAG,CAAC8E,KAAKE,WAAW;QACzBJ,MAAMK,IAAI,CAACH;IACb;IACA,OAAOF,MAAM7F,KAAK,CAAC,GAAGiF;AACxB;AAEA,OAAO,SAASkB,yBACdC,OAA0C;QAGfA;IAD3B,MAAMb,QAA8B;QAClCc,kBAAkBtG,QAAOqG,4BAAAA,OAAO,CAAC,mBAAmB,YAA3BA,4BAA+B;QACxDE,SAAShB,gBAAgBc,OAAO,CAAC,UAAU;QAC3CG,WAAWjB,gBAAgBc,OAAO,CAAC,YAAY;QAC/CI,iBAAiBf,cAAcW,OAAO,CAAC,kBAAkB;QACzDK,mBAAmBhB,cAAcW,OAAO,CAAC,oBAAoB;IAC/D;IACA,MAAMM,WAAqB,EAAE;IAC7B,IAAI,CAAC7K,aAAa0J,MAAMc,gBAAgB,GAAG;QACzCK,SAASR,IAAI,CAAC;IAChB;IACA,IAAI,CAACX,MAAMe,OAAO,EAAEI,SAASR,IAAI,CAAC;IAClC,MAAMS,OAAO,CAACd,QACZA,MAAMe,IAAI,CAAC,CAACb,OAASA,KAAK7F,MAAM,GAAG8E;IACrC,IAAI2B,KAAK;QAACpB,MAAMe,OAAO;WAAKf,MAAMiB,eAAe;KAAC,GAAG;QACnDE,SAASR,IAAI,CAAC,CAAC,8BAA8B,EAAElB,gCAAgC,WAAW,CAAC;IAC7F;IACA,IAAI2B,KAAK;QAACpB,MAAMgB,SAAS;WAAKhB,MAAMkB,iBAAiB;KAAC,GAAG;QACvDC,SAASR,IAAI,CAAC,CAAC,2BAA2B,EAAElB,gCAAgC,WAAW,CAAC;IAC1F;IACA,OAAO0B,SAASxG,MAAM,GAAG;QAAE2G,IAAI;QAAOH;IAAS,IAAI;QAAEG,IAAI;QAAMtB;IAAM;AACvE;AAEA,SAASuB,yBACPC,IAAwC,EACxC7E,GAAW;QAEG6E;IAAd,MAAMC,OAAO,EAACD,YAAAA,KAAKtI,GAAG,CAAC,0BAATsI,YAA2B,CAAC,EAAE,CAAC7E,IAAI;IACjD,OAAOgD,qBAAqB+B,QAAQ,CAACD,QACjC,OACA;QAAErF,QAAQ;QAAKE,OAAOsD;IAA4B;AACxD;AAEA,SAAS+B,oBAAoBC,QAA4C;QAGxDA;IAFf,OAAO;QACL1H,IAAI0H,SAAS1H,EAAE;QACfwE,MAAMlE,QAAOoH,gBAAAA,SAAS1I,GAAG,CAAC,mBAAb0I,gBAAwB;QACrCC,WAAW;QACXC,OAAO;YAAE5E,SAAS2C,qBAAqB+B,SAAS1H,EAAE;QAAE;IACtD;AACF;AASA,OAAO,SAAS6H,0BACdC,OAAgC,CAAC,CAAC;QAGhCA,iBAOmBA;IARrB,MAAMtJ,aACJsJ,kBAAAA,KAAKtJ,SAAS,YAAdsJ,kBACC,IAAM3L,cAAc4L,GAAG,GAAGvJ,SAAS;IACtC;;;;GAIC,GACD,MAAMwJ,gBAAeF,qBAAAA,KAAKE,YAAY,YAAjBF,qBAAqBhL;IAC1C,OAAO;QACLmG,SAAS,OAAO,EAAErC,MAAM,EAAE6B,GAAG,EAAE;YAC7B,MAAM6E,OAAO,MAAM9I,YAAY2B,UAAU,CAAC,SAASE,GAAG,CAACO,QAAQ5B,GAAG;YAClE,IAAI,CAACsI,KAAKtF,MAAM,EAAE,OAAO;gBAAEE,QAAQ;gBAAKE,OAAO;YAAe;YAC9D,OAAOiF,yBAAyBC,MAAM7E;QACxC;QAEAwF,OAAO,CAACtB;YACN,MAAMuB,OAAOxB,yBAAyBC;YACtC,OAAOuB,KAAKd,EAAE,KAAK,QACfc,OACA;gBAAEd,IAAI;gBAAMQ,OAAO;oBAAEO,QAAQ;2BAAIvC;qBAA4B;gBAAC;YAAE;QACtE;QAEAsC,MAAM,OAAO,EAAEtH,MAAM,EAAEZ,EAAE,EAAE;YACzB,IAAI,CAAC5D,aAAa4D,KAAK,OAAO;YAC9B,MAAMvB,QAAQ,MAAMuJ,aAAapH;YACjC,IAAI,CAACnC,OAAO,OAAO;YACnB,MAAMiJ,WAAW,MAAM/J,kBAAkBa,aAAaC,OAAO4B,GAAG,CAACL,IAAIhB,GAAG;YACxE,OAAO0I,SAAS1F,MAAM,IACpB1E,qBACE;gBAAEyE,WAAW2F,SAAS1I,GAAG,CAAC;YAAqC,GAC/D4B,UAEA6G,oBAAoBC,YACpB;QACN;QAEAU,OAAO,OAAOC;YACZ,MAAMH,OAAOxB,yBAAyB2B,QAAQ1B,OAAO;YACrD,IAAIuB,KAAKd,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOlF,QAAQ;gBAAKE,OAAO8F,KAAKjB,QAAQ,CAAC,EAAE;YAAC;YAChF,IAAI,CAAC7K,aAAaiM,QAAQrI,EAAE,GAAG,OAAO;gBAAEoH,IAAI;gBAAOlF,QAAQ;gBAAKE,OAAO;YAAqB;YAC5F,MAAMkG,KAAK9J;YACX,MAAMC,QAAQ,MAAMuJ,aAAaK,QAAQzH,MAAM;YAC/C,IAAI,CAACnC,OAAO;gBACV,OAAO;oBAAE2I,IAAI;oBAAOlF,QAAQ;oBAAKE,OAAO;gBAA2C;YACrF;YACA,MAAMvB,UAAUyH,GAAGnI,UAAU,CAAC,SAASE,GAAG,CAACgI,QAAQzH,MAAM;YACzD,MAAM2H,cAAc5K,kBAAkB2K,IAAI7J,OAAO4B,GAAG,CAACgI,QAAQrI,EAAE;YAC/D,MAAMgD,UAAU2C,qBAAqB0C,QAAQrI,EAAE;YAC/C,MAAMwI,WAAW9K,iBAAiB4K,IAAI7J,OAAO4B,GAAG,CAAC2C;YACjD,MAAMyF,YAAY5H,QAAQV,UAAU,CAAC,WAAWE,GAAG,CAAC6H,KAAKpC,KAAK,CAACc,gBAAgB;YAC/E,OAAO0B,GAAGlF,cAAc,CAAC,OAAOC;gBAC9B,MAAM,CAACiE,MAAMI,UAAUxC,OAAOwD,OAAO,GAAG,MAAMvE,QAAQC,GAAG,CAAC;oBACxDf,YAAYrE,GAAG,CAAC6B;oBAChBwC,YAAYrE,GAAG,CAACuJ;oBAChBlF,YAAYrE,GAAG,CAACwJ;oBAChBnF,YAAYrE,GAAG,CAACyJ;iBACjB;gBACD,IAAI,CAACnB,KAAKtF,MAAM,EAAE,OAAO;oBAAEoF,IAAI;oBAAOlF,QAAQ;oBAAKE,OAAO;gBAAe;gBACzE,IAAIsF,SAAS1F,MAAM,EAAE;oBACnB;;;;WAIC,GACD,IACE,CAAC1E,qBACC;wBAAEyE,WAAW2F,SAAS1I,GAAG,CAAC;oBAAqC,GAC/DqJ,QAAQzH,MAAM,GAEhB;wBACA,OAAO;4BAAEwG,IAAI;4BAAOlF,QAAQ;4BAAKE,OAAO;wBAA+B;oBACzE;oBACA,OAAO;wBAAEgF,IAAI;wBAAMuB,UAAU;uBAASlB,oBAAoBC;gBAC5D;gBACA,MAAMzE,UAAUoE,yBAAyBC,MAAMe,QAAQ5F,GAAG;gBAC1D,IAAIQ,SAAS,OAAO;oBAAEmE,IAAI;mBAAUnE;gBACpC,IACE,CAACyF,OAAO1G,MAAM,IACd0G,OAAO1J,GAAG,CAAC,gBAAgB,QAC3B0J,OAAO1J,GAAG,CAAC,YAAYlB,mBACvB;oBACA,OAAO;wBAAEsJ,IAAI;wBAAOlF,QAAQ;wBAAKE,OAAO;oBAAuB;gBACjE;gBACA,IAAI8C,MAAMlD,MAAM,EAAE,OAAO;oBAAEoF,IAAI;oBAAOlF,QAAQ;oBAAKE,OAAO;gBAA4B;gBACtF,MAAMoC,OAAOqB,gBAAgBwC,QAAQ7D,IAAI,KAAKc;gBAC9C,MAAMZ,QAAQ2D,QAAQzD,GAAG,CAACgE,OAAO;gBACjC,kEAAkE;gBAClE,gDAAgD;gBAChD,MAAM7G,YAAYvE,kBAAkB;oBAAC6K,QAAQzH,MAAM;iBAAC;gBACpDyC,YAAYwB,MAAM,CAAC0D,aAAa;oBAC9B/D;mBACGzG,8BAA8ByG;oBACjCqE,SAAS,EAAE;oBACX9G;oBACAgD,aAAaL;oBACboE,WAAWT,QAAQ5F,GAAG;;gBAExB,MAAM,EAAEqD,KAAK,EAAE,GAAGoC;gBAClB7E,YAAYwB,MAAM,CAAC2D,UAAU;oBAC3B3B,SAASf,MAAMe,OAAO;mBACnB7I,yBAAyB8H,MAAMe,OAAO,GACrCf,MAAMgB,SAAS,GAAG;oBAAEA,WAAWhB,MAAMgB,SAAS;gBAAC,IAAI,CAAC;oBACxDF,kBAAkBd,MAAMc,gBAAgB;mBACpCd,MAAMiB,eAAe,CAACtG,MAAM,GAAG;oBAAEsG,iBAAiBjB,MAAMiB,eAAe;gBAAC,IAAI,CAAC,GAC7EjB,MAAMkB,iBAAiB,CAACvG,MAAM,GAAG;oBAAEuG,mBAAmBlB,MAAMkB,iBAAiB;gBAAC,IAAI,CAAC;oBACvF,CAAC5J,8BAA8B,EAAEiL,QAAQrI,EAAE;mBACxCvC,sBAAsB4K,QAAQzH,MAAM;oBACvCsB,QAAQ;oBACR6C,aAAaL;oBACbM,WAAWqD,QAAQzD,GAAG;oBACtBK,WAAWoD,QAAQ5F,GAAG;;gBAExB,OAAO;oBACL2E,IAAI;oBACJuB,UAAU;oBACV3I,IAAIqI,QAAQrI,EAAE;oBACdwE;oBACAmD,WAAW;oBACXC,OAAO;wBAAE5E;oBAAQ;gBACnB;YACF;QACF;IACF;AACF;AAEA,OAAO,MAAM+F,sBAAsBlB,4BAA2B;AAE9D;;;CAGC,GACD,OAAO,SAASmB;IACd/K,kCAAkCmH,yBAAyB2D,qBAAqB;QAC9EE,UAAU5D;IACZ;AACF;AAEA,uEAAuE,GACvE,MAAM6D,mBAAmB;IAAC;IAAS;IAAS;CAAS;AAErD;;;;;;CAMC,GACD,OAAO,eAAeC,sBACpBd,OAAgB;IAEhB,IAAIA,QAAQe,MAAM,KAAK,QAAQ,OAAO;IACtC,MAAMjH,OAAQ,MAAMkG,QAAQgB,IAAI,GAAGC,KAAK,CAAC,IAAM;IAC/C,MAAM7K,QAAQ,QAAO0D,wBAAAA,KAAM1D,KAAK,MAAK,WAAW0D,KAAK1D,KAAK,GAAG;IAC7D,OAAOrC,aAAaqC,SAAS;QAAEA;IAAM,IAAI;AAC3C;AAEA;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,MAAM8K,wBAA0C,OAAOC,KAAKC;mCA4BpCD;QAxBPA,WACQA,YACRA,YACEA;IANxB,IAAIA,IAAIJ,MAAM,KAAK,QAAQ;QACzB,OAAOK,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAqB;IAC5D;IACA,MAAMxB,SAASN,gBAAOkJ,YAAAA,IAAIrH,IAAI,qBAARqH,UAAU5I,MAAM,mBAAI;IAC1C,MAAM8I,iBAAiBpJ,iBAAOkJ,aAAAA,IAAIrH,IAAI,qBAARqH,WAAU/K,KAAK,oBAAI;IACjD,MAAMkL,SAASrJ,iBAAOkJ,aAAAA,IAAIrH,IAAI,qBAARqH,WAAUG,MAAM,oBAAI;IAC1C,MAAMC,WAAWtJ,iBAAOkJ,aAAAA,IAAIrH,IAAI,qBAARqH,WAAU9K,UAAU,oBAAI;IAChD,IAAI,CAACkC,UAAU,CAAC8I,gBAAgB;QAC9B,OAAOD,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAiB;IACxD;IACA,IAAIxB,UAAU,CAACxE,aAAawE,SAAS;QACnC,OAAO6I,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAiB;IACxD;IACA,IAAIsH,kBAAkB,CAACtN,aAAasN,iBAAiB;QACnD,OAAOD,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAgB;IACvD;IACA,IAAI,CAAChG,aAAawN,WAAW;QAC3B,OAAOH,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAqB;IAC5D;IACA,IACEuH,WAAW,oBACXA,WAAW,kBACXA,WAAW,aACX;QACA,OAAOF,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAiB;IACxD;IAEA,MAAMyH,gBAAgBvJ,QAAOkJ,6BAAAA,IAAIM,OAAO,CAACD,aAAa,YAAzBL,6BAA6B;IAC1D,MAAMO,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAActJ,KAAK,CAAC,UAAUE,MAAM,IACpCwB;IACJ,IAAI,CAAC8H,SAAS,OAAON,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;QAAEjH,OAAO;IAAkB;IAErE,IAAI;QACF,MAAM6H,UAAU,MAAM9N,cAAc4L,GAAG,GAAGmC,IAAI,GAAGC,aAAa,CAACJ;QAC/D,MAAMvL,YAAYrC,cAAc4L,GAAG,GAAGvJ,SAAS;QAC/C,IAAIC;QACJ,IAAImC,QAAQ;gBAMUwJ,mBAIX;YATT,MAAMvJ,UAAUrC,UAAU2B,UAAU,CAAC,SAASE,GAAG,CAACO;YAClD,MAAMwJ,eAAe,MAAMvJ,QAAQ7B,GAAG;YACtC,IAAI,CAACoL,aAAapI,MAAM,EAAE;gBACxB,OAAOyH,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;oBAAEjH,OAAO;gBAAe;YACtD;YACA,MAAMiI,aAAa,EAACD,oBAAAA,aAAapL,GAAG,CAAC,0BAAjBoL,oBAAmC,CAAC,EAAE,CAACH,QAAQxH,GAAG,CAAC;YACvE,IAAI4H,eAAe,WAAWA,eAAe,UAAU;gBACrD,OAAOZ,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;oBAAEjH,OAAO;gBAA6B;YACpE;YACA3D,SAAS,QAAA,MAAM3B,oBAAoB8D,mBAA1B,QAAsC;YAC/C,IAAI,CAACnC,OAAO;gBACV,OAAOgL,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;oBAC1BjH,OAAO;gBACT;YACF;YACA;;;;OAIC,GACD,IAAIsH,kBAAkBA,mBAAmBjL,OAAO;gBAC9C,OAAOgL,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;oBAAEjH,OAAO;gBAAwC;YAC/E;QACF,OAAO;gBAMsDvC;YAL3D,MAAM2C,aAAa,MAAMzF,qBAAqBkN,QAAQxH,GAAG,EAAEiH;YAC3D,MAAM7J,SAAS2C,8BAAAA,WAAY3C,MAAM;YACjC,IACE,CAACA,UACD,CAAC1C,gBAAgB0C,WACjB,CAAC,AAACqJ,iBAAuC1B,QAAQ,CAAClH,QAAOT,eAAAA,OAAO0H,IAAI,YAAX1H,eAAe,MACxE;gBACA,OAAO4J,IACJvH,MAAM,CAAC,KACPmH,IAAI,CAAC;oBAAEjH,OAAO;gBAA6C;YAChE;YACA;;;;OAIC,GACD,IAAI,CAACjE,gBAAgB,MAAMtB,UAAU6M,iBAAiBrE,sBAAsB;gBAC1E,OAAOoE,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;oBAAEjH,OAAO;gBAAY;YACnD;YACA3D,QAAQiL;QACV;QAEA,IAAIC,WAAW,aAAa;8BAuBGM;gBApBHT,YAmBjBA;YArBT,oEAAoE;YACpE,mEAAmE;YACnE,MAAMc,aAAahK,iBAAOkJ,aAAAA,IAAIrH,IAAI,qBAARqH,WAAUc,UAAU,oBAAI,IAAI/F,IAAI,GAAGhE,KAAK,CAAC,GAAG;YACtE,MAAMgK,UAAUD,aACZ,MAAM5N,aAAa8B,WAAoB;gBACrCgM,MAAM;gBACNC,SAAS,GAAG7J,UAAU,CAAC,IAAI,EAAEnC,OAAO,CAAC,CAAC,EAAEmL,UAAU;gBAClDnL;gBACAiM,KAAKJ;gBACLK,aAAapO;YACf,KACA;YACJ,IAAIgO,WAAW,YAAYA,SAAS;gBAClC,OAAOd,IAAIvH,MAAM,CAACqI,QAAQK,MAAM,CAAC1I,MAAM,EAAEmH,IAAI,CAACkB,QAAQK,MAAM,CAACzI,IAAI;YACnE;YACA,MAAM0I,QAAQN,WAAW,WAAWA,UAAUA,QAAQM,KAAK,GAAG;YAC9D,MAAMC,SAAS,MAAMrH,iBACnBjF,WACAC,OACAmC,QACAgJ,UACAtJ,iBAAOkJ,aAAAA,IAAIrH,IAAI,qBAARqH,WAAUhF,IAAI,oBAAI,KACzB;gBAAE/B,KAAKwH,QAAQxH,GAAG;gBAAEyC,KAAK,GAAE+E,iBAAAA,QAAQ/E,KAAK,YAAb+E,iBAAiB;YAAK;YAEnD,IAAIa,OAAO5I,MAAM,KAAK,KAAK,OAAM2I,yBAAAA,MAAOE,MAAM,CAACD,OAAO5I,MAAM,EAAE4I,OAAO3I,IAAI;iBACpE,OAAM0I,yBAAAA,MAAOG,OAAO;YACzB,OAAOvB,IAAIvH,MAAM,CAAC4I,OAAO5I,MAAM,EAAEmH,IAAI,CAACyB,OAAO3I,IAAI;QACnD;QACA,MAAM8I,SACJtB,WAAW,mBACP,MAAMhI,eAAenD,WAAWC,OAAOmL,UAAU;YAC/ChJ;YACA6B,KAAKwH,QAAQxH,GAAG;QAClB,KACA,MAAMM,aAAavE,WAAWC,OAAOmL,UAAUhJ;QACrD,OAAO6I,IAAIvH,MAAM,CAAC+I,OAAO/I,MAAM,EAAEmH,IAAI,CAAC4B,OAAO9I,IAAI;IACnD,EAAE,OAAOC,OAAO;QACd8I,QAAQ9I,KAAK,CAACA;QACd,OAAOqH,IAAIvH,MAAM,CAAC,KAAKmH,IAAI,CAAC;YAAEjH,OAAO;QAAqC;IAC5E;AACF,EAAC"}

package/src/lib/server/campaign-send.d.ts

@@ -169,6 +169,13 @@ export interface CampaignSendOptions {
     displayName?: string;
     /** Test sends (AGL-349) skip the campaign record and stats. */
     recordCampaign?: boolean;
+    /**
+     * The `campaignId` names a record that does not exist yet, so this send
+     * MINTS it and stamps what a new record carries — its creation date, and
+     * `emailCampaignId: null` when it is filed under no campaign. Without it a
+     * caller naming an id is taken to address an existing record.
+     */
+    mintsRecord?: boolean;
     /**
      * SEND THIS EMAIL AGAIN, TO PEOPLE IT HAS NOT REACHED.
      *

package/src/lib/server/campaign-send.js

@@ -51,6 +51,7 @@ import { filterCadenceSendable, recordMarketingSends } from "@aglyn/tenant-data-
  * from the real module.
  */ import { CAMPAIGN_REACH_CEILING, campaignReachCovers, campaignSettledSize, partitionByCampaignReach, readCampaignReach, readCampaignSettled, recordCampaignReach, recordCampaignSkipped } from "./email-campaign-reach.js";
 import { campaignSendSiteStamp, orgCampaignSends, orgEmailCampaigns, sendIsOnHost } from "./campaign-org-refs.js";
+import { campaignSendSearchFields } from "../model/campaign-list-query.js";
 /*
  * The LEAF module for the reputation controls too, and for the same reason
  * as the three above it: every spec that reaches this file mocks the
@@ -1298,7 +1299,7 @@ export async function performCampaignSend(options) {
    * that record already carries its own creation stamp. Re-stamping it would
    * move an email's creation date forward every time it was sent again, and
    * the emails list orders drafts on exactly that field.
-   */ const mintsRecord = !options.campaignId;
+   */ const mintsRecord = !options.campaignId || options.mintsRecord === true;
     // Designed email template (AGL-349): loaded once; rendered per
     // recipient with their merge values.
     const template = options.templateScreenId ? await loadEmailTemplate(hostId, options.templateScreenId) : null;
@@ -1956,7 +1957,8 @@ export async function performCampaignSend(options) {
    * below are stored under: they are true of the send that happened.
    */ const measuresTheAudience = !options.continuation;
     await sends.doc(campaignId).set(_extends({}, campaignSendSiteStamp(hostId), {
-        subject,
+        subject
+    }, campaignSendSearchFields(subject), {
         body,
         audience
     }, mintsRecord ? {
@@ -1993,6 +1995,8 @@ export async function performCampaignSend(options) {
         displayName: options.displayName
     } : {}, options.emailCampaignId ? {
         emailCampaignId: options.emailCampaignId
+    } : mintsRecord ? {
+        emailCampaignId: null
     } : {}, {
         /*
        * WHAT THIS EMAIL DID WITH THE UNSUBSCRIBE HEADER, and why (AGL-3307).
@@ -3064,7 +3068,8 @@ function storedSendOptionsFrom(snapshot, hostId, senderUid, followUp) {
                 });
             }
             await targetRef.set(_extends({}, campaignSendSiteStamp(hostId), {
-                subject,
+                subject
+            }, campaignSendSearchFields(subject), {
                 body,
                 audience
             }, targetSnapshot.exists ? {} : {
@@ -3113,7 +3118,9 @@ function storedSendOptionsFrom(snapshot, hostId, senderUid, followUp) {
                 displayName
             } : {}, emailCampaignId ? {
                 emailCampaignId
-            } : {}, scheduling ? {
+            } : targetSnapshot.exists ? {} : {
+                emailCampaignId: null
+            }, scheduling ? {
                 status: 'scheduled',
                 sendAtMs,
                 scheduledAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),
@@ -3305,6 +3312,7 @@ function storedSendOptionsFrom(snapshot, hostId, senderUid, followUp) {
      * which takes no copy from the request at all and subtracts everyone the
      * earlier sends recorded.
      *=========================================*/ const sendId = String((_ref12 = (_req_body15 = req.body) == null ? void 0 : _req_body15.campaignId) != null ? _ref12 : '');
+        /** The id names no record yet, so this send mints it (AGL-3321). */ let mintsNamedRecord = false;
         if (sendId) {
             var _existing_get;
             if (!isDocumentId(sendId)) {
@@ -3313,6 +3321,7 @@ function storedSendOptionsFrom(snapshot, hostId, senderUid, followUp) {
                 });
             }
             const existing = await orgSends.doc(sendId).get();
+            mintsNamedRecord = !existing.exists;
             if (existing.exists && !sendIsOnHost(existing, hostId)) {
                 return res.status(404).json({
                     error: 'Unknown email'
@@ -3334,7 +3343,10 @@ function storedSendOptionsFrom(snapshot, hostId, senderUid, followUp) {
             listId: String((_ref14 = (_req_body17 = req.body) == null ? void 0 : _req_body17.listId) != null ? _ref14 : ''),
             topicId: topicId || undefined,
             emails: Array.isArray((_req_body18 = req.body) == null ? void 0 : _req_body18.emails) ? req.body.emails : undefined,
-            campaignId: sendId,
+            campaignId: sendId
+        }, mintsNamedRecord ? {
+            mintsRecord: true
+        } : {}, {
             experimentId: String((_ref15 = (_req_body19 = req.body) == null ? void 0 : _req_body19.experimentId) != null ? _ref15 : ''),
             templateScreenId: templateScreenId || undefined
         }, plainText ? {