@aglyn/plugins-marketing 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/campaign-send.js

@@ -15,18 +15,19 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { checkQuota, contactMatchesSegment, isSubscriptionTopicId, DEFAULT_SUBSCRIPTION_TOPIC_ID, readMarketingBasis, resolveMarketingConsentPolicy, splitByMarketingConsent, createResourceUid, decodeStoredNodes, emailStarterSendBlock, resolveBrandingProfile, seenOnlyThroughGrant, siteLockdownFromDocs, visibleToHost } from "@aglyn/aglyn/server";
+import { readListingRevocation } from "@aglyn/aglyn/plugin-manager/plugin-revocations";
 import { renderRecipientEmail } from "@aglyn/aglyn/app-utils/recipient-email-render";
 import { composeHostComponentNodes } from "@aglyn/aglyn/app-utils/load-referenced-components";
 import { assignExperimentVariant } from "../model/index.js";
-import { campaignHeldForReviewNotice, campaignPlacedOnHost, campaignSendHeldForReview } from "@aglyn/shared-ui-email-campaigns/model";
+import { campaignHeldForReviewNotice, campaignPlacedOnHost, campaignSendHeldForReview } from "../model/campaign-container.js";
 import { readPluginRecordCard } from "@aglyn/aglyn/plugin-manager/plugin-record-cards";
 import { hostPublicOrigin } from "@aglyn/aglyn/server";
 import { consentGroupForSite, orgDataCollectionForHost, orgDataQueryForHost, filterDeliverableRecipients, filterSendableForHost, filterTopicSendable, firebaseAdmin, getOrgForHost, meterHostEmail, claimOrgEmailSendBudget, orgCampaignEmailSendsForMonth, readEmailSendRateConfig, readEmailSendRateWindow, reconcileCampaignSendReservation, reserveCampaignEmailSends, resolveHostSendingIdentity } from "@aglyn/tenant-data-admin";
 import { raiseOperatorAlert } from "@aglyn/tenant-data-admin/server/operator-alerts";
 import { MARKETING_REPUTATION_BREAKER } from "../constants/operator-alerts.js";
-// The leaf, not the barrel: this plugin's specs substitute the barrel
-// wholesale, and the lookup must reach the real index logic under them.
-import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
+// The person behind an address, through the plugin that keeps people
+// (AGL-3080): the sender never opens the record system's collections.
+import { findPluginPerson } from "@aglyn/aglyn/plugin-manager/plugin-person-records";
 import { siteEmailFrame } from "@aglyn/tenant-data-admin/server/host-email-tokens";
 import { isDocumentId } from "@aglyn/tenant-data-admin/server/document-id";
 /*
@@ -293,7 +294,13 @@ const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
    * is what keeps that read from happening.
    */ const installedFrom = (_ref = versionSnapshot == null ? void 0 : versionSnapshot.get('installedFrom')) != null ? _ref : screenSnapshot.get('installedFrom');
     if (installedFrom == null ? void 0 : installedFrom.listingId) {
-        const revocation = (await firestore.collection('revocations').doc(installedFrom.listingId).get()).data();
+        /*
+     * The revocation is kept by the plugin that runs the distribution channel
+     * the design came from, and asked through the platform's slot
+     * (`plugin-revocations`). A reader that FAILS throws through, so a send
+     * that cannot learn whether its design was pulled is refused rather than
+     * mailed — the direction the read had when this file made it itself.
+     */ const revocation = await readListingRevocation(installedFrom.listingId);
         const block = emailStarterSendBlock({
             installedFrom,
             revocation
@@ -2525,15 +2532,13 @@ export async function performCampaignSend(options) {
  * The three sources are the three an audience is built from, tried in the
  * order a small site grows them. Nothing here is taken from the request.
  *
- * The org `contacts` lookup goes through the org's address index narrowed
- * to this site (AGL-2633): the index is consulted for the address, the
- * contact it names is checked against `visibleTo` in memory, and only
- * then does the `email ==` query run. So a person whose two records were
- * merged is found under the address that became an alternate, and the
- * scope check is not skipped — it is applied to the one document an
- * address names, which is the same shape the segment branch above uses.
+ * The third is the person the workspace keeps for the address, asked of the
+ * plugin that keeps people (`plugin-person-records`, AGL-3080) and narrowed
+ * to this site: the owner's address lookup answers an alternate address a
+ * merge folded in (AGL-2633), and the scope check is applied to the one
+ * record an address names, which is the same shape the segment branch above
+ * uses.
  */ async function findAudienceDocument(hostId, email) {
-    var _contact_data;
     const hostRef = firebaseAdmin.app().firestore().collection('hosts').doc(hostId);
     for (const [collection, nameFields] of [
         [
@@ -2564,12 +2569,13 @@ export async function performCampaignSend(options) {
             };
         }
     }
-    const contacts = await orgDataCollectionForHost(hostId, 'contacts').catch(()=>null);
-    const contact = contacts ? await findContactByEmail(contacts, email, {
-        hostId
-    }).catch(()=>null) : null;
-    return contact ? {
-        data: (_contact_data = contact.data()) != null ? _contact_data : {},
+    const person = await findPluginPerson({
+        hostId,
+        email,
+        onlyVisibleToSite: true
+    }).catch(()=>null);
+    return person ? {
+        data: _extends({}, person.data),
         nameFields: [
             'name',
             'firstName'