@aglyn/plugins-marketplace 1.0.0-beta.143

package/src/lib/hooks/use-marketplace-actions.js

@@ -0,0 +1,523 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { lockdownRefusalText, parseLockdownRefusal } from "@aglyn/aglyn";
+import { readGaClientId } from "@aglyn/aglyn/app-utils/analytics-events";
+import { useLoading } from "@aglyn/shared-ui-jsx";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { useCallback, useRef } from "react";
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { listingArtifactType } from "../model/marketplace.js";
+/**
+ * Each artifact type has its own installer route (AGL-672): routing
+ * everything to the component one silently installed the wrong thing or
+ * 404'd. `listingArtifactType` tolerates the legacy `type`/`kind`
+ * discriminators (AGL-654).
+ */ function endpointForArtifact(artifactType) {
+    switch(artifactType){
+        case 'template':
+            return 'marketplace/install-template';
+        case 'layout':
+            return 'marketplace/install-layout';
+        case 'plugin':
+            return 'marketplace/install-plugin';
+        case 'datasetSchema':
+            return 'marketplace/install-dataset-schema';
+        case 'emailTemplate':
+            return 'marketplace/install-email-template';
+        case 'emailStarter':
+            return 'marketplace/install-email-starter';
+        case 'theme':
+            return 'marketplace/install-theme';
+        default:
+            return 'marketplace/install';
+    }
+}
+/**
+ * Artifact types whose install deliberately does NOT touch the running site
+ * (AGL-669/671/657) — the copy must not imply otherwise. Templates and layouts
+ * land in the Templates library; an email template lands as an inactive
+ * version the owner still has to activate.
+ */ function landingMessage(artifactType, displayName) {
+    switch(artifactType){
+        case 'template':
+        case 'layout':
+            return `Saved "${displayName}" to your Templates — nothing is live until ` + 'you use it.';
+        case 'emailTemplate':
+            return `Saved "${displayName}" as a draft version — activate it in the ` + 'email designer to start sending it.';
+        case 'emailStarter':
+            // A copy, and saying so is the point: the publisher cannot reach it
+            // again, and nothing goes out until a campaign is sent from it.
+            return `Added "${displayName}" to your Email templates as your own copy — ` + 'edit it freely, nothing is sent until you send a campaign.';
+        case 'datasetSchema':
+            return `Created "${displayName}" as a new, empty dataset.`;
+        case 'theme':
+            // The one type that DOES change the running site on install, so it gets
+            // the opposite of the reassurance the others get — plus the way back,
+            // because a repainted site is alarming if you cannot see how to undo it.
+            return `Applied "${displayName}" to this site. Setup → Theme has a way back ` + 'to your previous theme.';
+        default:
+            return null;
+    }
+}
+/**
+ * What to tell someone whose install will never be three-way mergeable
+ * (AGL-2339).
+ *
+ * Every install route returns `baseStored`, and `provenance.ts` says what a
+ * false one means: *"a snapshot that cannot be written leaves `baseStored:
+ * false` and an artifact that reports itself as not updatable"*. It reported
+ * it to NOBODY — zero `.tsx` readers across all seven routes.
+ *
+ * The consequence is silent and expensive. `hasDivergedFromBase` needs the
+ * base snapshot to tell the publisher's change from the user's; without one
+ * an update can only overwrite. So a user who customizes a large artifact —
+ * one whose content exceeded `ARTIFACT_BASE_MAX_BYTES`, or whose snapshot
+ * write failed — LOSES those changes on the next update, having been told
+ * nothing at install time. The update dialog does explain itself when the
+ * moment arrives (`preview.mergeable` renders `preview.reason`), but by then
+ * the choice is take-the-update-or-stay-behind, not "keep a copy first".
+ *
+ * Persistent rather than a timed toast: it is advice to act on before
+ * editing, and it is the only moment this is knowable in advance.
+ */ function baseMissingWarning(displayName) {
+    return `"${displayName}" is too large to keep a reference copy of, so a future ` + 'update will REPLACE it rather than merge. Export or note any changes ' + 'you make to it.';
+}
+/**
+ * Shared install/buy handlers for marketplace listings (AGL-95): used by the
+ * browse grid and the listing detail page. Install copies the pinned
+ * version snapshot server-side (/api/marketplace/install); buy opens a
+ * Stripe checkout (/api/marketplace/checkout) when configured.
+ */ export function useMarketplaceActions(hostId, orgId) {
+    const { data: user } = useUser();
+    const { enqueueSnackbar } = useSnackbar();
+    const { queueLoading } = useLoading();
+    /**
+   * One purchase attempt per listing, minted lazily (AGL-1697).
+   *
+   * Per-listing rather than per-click: minting inside `buy` would defeat the
+   * whole point, because two clicks would mint two keys and the server would
+   * see two purchases. Held in a ref rather than state so a re-render cannot
+   * rotate a key mid-flight.
+   *
+   * It retires when the page does. That is the honest boundary for a redirect
+   * flow — the buyer leaves for Stripe and comes back to a fresh mount — and it
+   * means this key covers the double-click and the retry, while the server's
+   * already-purchased check covers the buyer who returns tomorrow.
+   */ const purchaseAttempts = useRef(new Map());
+    // `scope` is only meaningful for artifact types that HAVE an org-scoped
+    // pin — see INSTALL_TARGETS. Passing it for a template would be ignored
+    // server-side, so callers ask the model rather than guessing.
+    const install = useCallback(async (listing, scope, options)=>{
+        const dequeue = queueLoading();
+        try {
+            var _payload_foreignMediaScopes, _payload_degradedFieldIds;
+            const artifactType = listingArtifactType(listing);
+            const endpoint = endpointForArtifact(artifactType);
+            const response = await authorizedFetch(user, `/api/${endpoint}`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify(_extends({
+                    listingId: listing.$id,
+                    hostId
+                }, scope ? {
+                    scope
+                } : {}))
+            });
+            const payload = await response.json();
+            if (!response.ok) {
+                var _ref;
+                // The copy has diverged: hand it to the review rather than telling
+                // someone to review something they cannot reach from here.
+                if ((payload == null ? void 0 : payload.diverged) && (options == null ? void 0 : options.onDiverged)) {
+                    return void options.onDiverged();
+                }
+                // An installs feature lockdown (AGL-1510/1532): "Install failed"
+                // reads as a broken listing — the very thing an incident response
+                // needs people NOT to conclude while a suspect listing is under
+                // investigation. The server says installs are paused; say that.
+                const locked = parseLockdownRefusal(response.status, payload);
+                if (locked) {
+                    return void enqueueSnackbar(lockdownRefusalText(locked), {
+                        variant: 'warning',
+                        persist: true
+                    });
+                }
+                return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Install failed', {
+                    variant: response.status === 402 ? 'warning' : 'error',
+                    allowDuplicate: true
+                });
+            }
+            // Types that land inert must not read as "your site changed".
+            const landed = landingMessage(artifactType, listing.displayName);
+            enqueueSnackbar(landed != null ? landed : payload.updated ? `Updated "${listing.displayName}" to v${payload.version}` : `Installed "${listing.displayName}" — find it under Your components`, {
+                variant: 'success',
+                persist: false
+            });
+            // No base snapshot: this copy can never be three-way merged, and a
+            // future update will overwrite whatever the user does to it. The
+            // route has always said so on the wire; nothing listened (AGL-2339).
+            //
+            // `=== false` rather than a falsy test: a route that omitted the
+            // field entirely has told us nothing, and warning on silence would
+            // put a scary, unactionable message on every install from any
+            // endpoint that had not been updated yet.
+            if (payload.baseStored === false) {
+                enqueueSnackbar(baseMissingWarning(listing.displayName), {
+                    variant: 'warning',
+                    persist: true
+                });
+            }
+            /**
+         * What was, and was not, checked about an email somebody else wrote.
+         *
+         * Said HERE because this is the moment the design enters the
+         * workspace, and because the two facts are the ones a sender cannot
+         * recover afterwards by looking at the design. `unreviewed` is the
+         * ordinary case — email starters are auto-listed like every other
+         * copied artifact — so the sentence has to be a statement rather than
+         * an alarm, and it must never be silence: an install that said nothing
+         * would be read as a review that happened.
+         *
+         * The link hosts are the inspectable half of the link policy. The
+         * remote-asset rule is mechanical and the route enforces it, but where
+         * a template points a tenant's own customers is a judgment only the
+         * tenant can make, and they can only make it if they are shown the
+         * list.
+         */ if (payload.assurance) {
+                var _payload_linkHosts;
+                const hosts = (_payload_linkHosts = payload.linkHosts) != null ? _payload_linkHosts : [];
+                enqueueSnackbar((payload.assurance === 'approved' ? 'Reviewed by Aglyn. ' : 'Nobody at Aglyn has reviewed this design. ') + (hosts.length ? `It links to ${hosts.join(', ')}. ` : 'It links nowhere outside your site. ') + 'Read it before you send from it.', {
+                    variant: 'info',
+                    persist: true
+                });
+            }
+            // A media reference that still resolves against the publisher's own
+            // library — served by our CDN, so no third party learns who opened the
+            // mail, but the picture behind it is still theirs to change.
+            if ((_payload_foreignMediaScopes = payload.foreignMediaScopes) == null ? void 0 : _payload_foreignMediaScopes.length) {
+                enqueueSnackbar('Some images in this email are still served from the publisher’s ' + 'own media library, so they can change after you install. ' + 'Replace them with your own to pin them.', {
+                    variant: 'info',
+                    persist: false
+                });
+            }
+            // A schema whose reference fields couldn't be relinked installs with
+            // those fields degraded to text — silently changing a field's type
+            // would be the kind of thing you discover much later (AGL-657).
+            if ((_payload_degradedFieldIds = payload.degradedFieldIds) == null ? void 0 : _payload_degradedFieldIds.length) {
+                enqueueSnackbar(`${payload.degradedFieldIds.length} reference field(s) became ` + 'plain text — the datasets they pointed at are not in this ' + 'organization.', {
+                    variant: 'info',
+                    persist: false
+                });
+            }
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            dequeue();
+        }
+    }, [
+        user,
+        hostId,
+        queueLoading,
+        enqueueSnackbar
+    ]);
+    /**
+   * Fans an install-targeting plan out to the install routes (AGL-773). Each
+   * step is either a single org pin or a host pin on a named site; org steps
+   * resolve the org from the acting `hostId`. One summary snackbar reports the
+   * whole plan rather than N toasts. Use `resolveInstallPlan` (model) to turn
+   * an All-sites / Selected-sites choice into these steps.
+   */ const installPlan = useCallback(async (listing, steps, options)=>{
+        if (!steps.length) return;
+        const dequeue = queueLoading();
+        try {
+            const artifactType = listingArtifactType(listing);
+            const endpoint = endpointForArtifact(artifactType);
+            let installed = 0;
+            const errors = [];
+            /**
+         * Surfaced separately from success (AGL-1017/429): the pin is written
+         * either way — it is an explicit choice — but a bundle built for a
+         * different host ABI will not load, and a green "Updated" toast alone
+         * would leave the workspace believing it did.
+         */ const abiWarnings = new Set();
+            /**
+         * Sites whose copy landed with no base snapshot (AGL-2339). Counted
+         * rather than toasted per step: the fan-out installs the SAME
+         * artifact everywhere, so the answer is the same on every site and N
+         * identical warnings would read as N different problems.
+         */ let withoutBase = 0;
+            /**
+         * A feature lockdown refuses every step identically (AGL-1532), so
+         * the fan-out stops at the first one and says "installs are paused"
+         * ONCE. N identical refusals stacked into the error summary would
+         * read as N broken sites — the opposite of what the lock is saying.
+         */ let lockedNotice = null;
+            for (const step of steps){
+                // Org steps still need a host to resolve the org server-side, so
+                // fall back to the acting host; host steps target their own site.
+                const targetHostId = step.scope === 'host' ? step.hostId : hostId;
+                const response = await authorizedFetch(user, `/api/${endpoint}`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify(_extends({
+                        listingId: listing.$id,
+                        hostId: targetHostId
+                    }, step.scope === 'org' ? {
+                        scope: 'org'
+                    } : {}))
+                });
+                const payload = await response.json().catch(()=>({}));
+                if (response.ok) {
+                    installed += 1;
+                    if (payload == null ? void 0 : payload.hostAbiWarning) {
+                        abiWarnings.add(String(payload.hostAbiWarning));
+                    }
+                    if ((payload == null ? void 0 : payload.baseStored) === false) withoutBase += 1;
+                } else {
+                    var _ref;
+                    lockedNotice = parseLockdownRefusal(response.status, payload);
+                    if (lockedNotice) break;
+                    errors.push((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Install failed');
+                }
+            }
+            if (lockedNotice) {
+                enqueueSnackbar(lockdownRefusalText(lockedNotice), {
+                    variant: 'warning',
+                    persist: true
+                });
+                // Whatever landed before the lock DID land — saying so is the
+                // difference between "nothing happened" and a half-applied plan
+                // the workspace would otherwise discover much later.
+                if (installed) {
+                    enqueueSnackbar(`${installed} site(s) were already updated before the pause.`, {
+                        variant: 'info',
+                        persist: false
+                    });
+                }
+                return;
+            }
+            const orgWide = steps.some((step)=>step.scope === 'org');
+            const updating = (options == null ? void 0 : options.intent) === 'update';
+            const noun = updating ? 'Updated' : landingMessage(artifactType, '') ? 'Saved' : 'Installed';
+            const toVersion = updating && (options == null ? void 0 : options.version) != null ? ` to v${options.version}` : '';
+            if (installed && !errors.length) {
+                enqueueSnackbar(orgWide ? `${noun} "${listing.displayName}"${toVersion} for the whole organization` : `${noun} "${listing.displayName}"${toVersion} on ${installed} site` + (installed === 1 ? '' : 's'), {
+                    variant: 'success',
+                    persist: false
+                });
+            } else if (installed && errors.length) {
+                enqueueSnackbar(`${noun} on ${installed} site(s); ${errors.length} failed — ${errors[0]}`, {
+                    variant: 'warning',
+                    allowDuplicate: true
+                });
+            } else {
+                var _errors_;
+                enqueueSnackbar((_errors_ = errors[0]) != null ? _errors_ : 'Install failed', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            }
+            for (const warning of abiWarnings){
+                enqueueSnackbar(warning, {
+                    variant: 'warning',
+                    allowDuplicate: true
+                });
+            }
+            if (withoutBase) {
+                enqueueSnackbar(baseMissingWarning(listing.displayName), {
+                    variant: 'warning',
+                    persist: true
+                });
+            }
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            dequeue();
+        }
+    }, [
+        user,
+        hostId,
+        queueLoading,
+        enqueueSnackbar
+    ]);
+    const buy = useCallback(async (listing)=>{
+        const dequeue = queueLoading();
+        try {
+            var _purchaseAttempts_current_get;
+            const listingId = String(listing.$id);
+            const attemptKey = (_purchaseAttempts_current_get = purchaseAttempts.current.get(listingId)) != null ? _purchaseAttempts_current_get : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+            purchaseAttempts.current.set(listingId, attemptKey);
+            const response = await authorizedFetch(user, '/api/marketplace/checkout', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    // Stable across a retry of THIS attempt (AGL-1697), so a
+                    // double-click or a re-submit after a timeout cannot open a
+                    // second Stripe session on a live account.
+                    'Idempotency-Key': attemptKey
+                },
+                // The browser's GA client id rides along so the SERVER-side
+                // `purchase` the Stripe webhook sends can be attributed to the
+                // session — and therefore the campaign — that produced it
+                // (AGL-1638). The webhook has always read this off the session
+                // metadata; until now nothing captured it, so every marketplace
+                // sale landed on a synthetic, sessionless GA user and plugin
+                // revenue had no acquisition channel at all.
+                //
+                // Resolves to null within 500ms when gtag is absent (consent
+                // refused, ad blocker, analytics unconfigured), so it can never
+                // delay or block a purchase — same contract as the console's
+                // subscription checkout.
+                body: JSON.stringify(_extends({
+                    listingId: listing.$id,
+                    hostId
+                }, orgId ? {
+                    orgId
+                } : {}, {
+                    gaClientId: await readGaClientId(process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID)
+                }))
+            });
+            const payload = await response.json();
+            // The PAID install door refuses under a lock too (AGL-1545): both
+            // `checkout` and `marketplace-installs` gate it. A buyer must not
+            // read either lock as a payment failure — same reason the billing
+            // page carries this branch (AGL-1532).
+            const locked = parseLockdownRefusal(response.status, payload);
+            if (locked) {
+                return void enqueueSnackbar(lockdownRefusalText(locked), {
+                    variant: 'warning',
+                    persist: true
+                });
+            }
+            if (response.status === 501) {
+                return void enqueueSnackbar('Purchases are not configured on this deployment', {
+                    variant: 'info',
+                    persist: false
+                });
+            }
+            if (!response.ok || !(payload == null ? void 0 : payload.url)) {
+                var _ref;
+                return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Checkout failed', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            }
+            window.location.assign(payload.url);
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            dequeue();
+        }
+    }, [
+        user,
+        hostId,
+        orgId,
+        queueLoading,
+        enqueueSnackbar
+    ]);
+    /**
+   * Uninstall a plugin listing from the listing detail (AGL-881) — the same
+   * `action:'uninstall'` the installed add-ons card uses, so it removes the
+   * pin (and the switchboard entry when nothing else pins it) and decrements
+   * activeInstalls. Only plugins have a removable pin; other artifact types
+   * land in a library and have nothing to uninstall.
+   */ const uninstall = useCallback(async (listing, scope, // Which site's pin to drop (AGL-997). Without this the call always
+    // targeted the acting host, so at org scope "uninstall" could only
+    // mean "the whole org pin" or "whichever site happened to be acting"
+    // — removing the plugin from ONE of several sites was unreachable.
+    targetHostId)=>{
+        const dequeue = queueLoading();
+        try {
+            const response = await authorizedFetch(user, '/api/marketplace/install-plugin', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify(_extends({
+                    listingId: listing.$id,
+                    hostId: targetHostId != null ? targetHostId : hostId,
+                    action: 'uninstall'
+                }, scope ? {
+                    scope
+                } : {}))
+            });
+            const payload = await response.json().catch(()=>({}));
+            if (!response.ok) {
+                var _ref;
+                // Uninstall rides the install-plugin route, so an installs lock
+                // refuses it too (AGL-1532) — and "Uninstall failed" during an
+                // incident is exactly the wrong sentence for someone trying to
+                // remove the listing under investigation.
+                const locked = parseLockdownRefusal(response.status, payload);
+                if (locked) {
+                    return void enqueueSnackbar(lockdownRefusalText(locked), {
+                        variant: 'warning',
+                        persist: true
+                    });
+                }
+                return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Uninstall failed', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            }
+            enqueueSnackbar(`Removed "${listing.displayName}"`, {
+                variant: 'success',
+                persist: false
+            });
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            dequeue();
+        }
+    }, [
+        user,
+        hostId,
+        queueLoading,
+        enqueueSnackbar
+    ]);
+    return {
+        install,
+        installPlan,
+        buy,
+        uninstall
+    };
+}
+export default useMarketplaceActions;
+
+//# sourceMappingURL=use-marketplace-actions.js.map

package/src/lib/hooks/use-marketplace-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/hooks/use-marketplace-actions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { lockdownRefusalText, parseLockdownRefusal } from '@aglyn/aglyn'\nimport { readGaClientId } from '@aglyn/aglyn/app-utils/analytics-events'\nimport { useLoading } from '@aglyn/shared-ui-jsx'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { useCallback, useRef } from 'react'\nimport { useUser } from '@aglyn/tenant-feature-instance'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport {\n  type InstallPlanStep,\n  listingArtifactType,\n} from '../model/marketplace'\n\n/**\n * Each artifact type has its own installer route (AGL-672): routing\n * everything to the component one silently installed the wrong thing or\n * 404'd. `listingArtifactType` tolerates the legacy `type`/`kind`\n * discriminators (AGL-654).\n */\nfunction endpointForArtifact(artifactType: string): string {\n  switch (artifactType) {\n    case 'template':\n      return 'marketplace/install-template'\n    case 'layout':\n      return 'marketplace/install-layout'\n    case 'plugin':\n      return 'marketplace/install-plugin'\n    case 'datasetSchema':\n      return 'marketplace/install-dataset-schema'\n    case 'emailTemplate':\n      return 'marketplace/install-email-template'\n    case 'emailStarter':\n      return 'marketplace/install-email-starter'\n    case 'theme':\n      return 'marketplace/install-theme'\n    default:\n      return 'marketplace/install'\n  }\n}\n\n/**\n * Artifact types whose install deliberately does NOT touch the running site\n * (AGL-669/671/657) — the copy must not imply otherwise. Templates and layouts\n * land in the Templates library; an email template lands as an inactive\n * version the owner still has to activate.\n */\nfunction landingMessage(\n  artifactType: string,\n  displayName: string,\n): string | null {\n  switch (artifactType) {\n    case 'template':\n    case 'layout':\n      return (\n        `Saved \"${displayName}\" to your Templates — nothing is live until ` +\n        'you use it.'\n      )\n    case 'emailTemplate':\n      return (\n        `Saved \"${displayName}\" as a draft version — activate it in the ` +\n        'email designer to start sending it.'\n      )\n    case 'emailStarter':\n      // A copy, and saying so is the point: the publisher cannot reach it\n      // again, and nothing goes out until a campaign is sent from it.\n      return (\n        `Added \"${displayName}\" to your Email templates as your own copy — ` +\n        'edit it freely, nothing is sent until you send a campaign.'\n      )\n    case 'datasetSchema':\n      return `Created \"${displayName}\" as a new, empty dataset.`\n    case 'theme':\n      // The one type that DOES change the running site on install, so it gets\n      // the opposite of the reassurance the others get — plus the way back,\n      // because a repainted site is alarming if you cannot see how to undo it.\n      return (\n        `Applied \"${displayName}\" to this site. Setup → Theme has a way back ` +\n        'to your previous theme.'\n      )\n    default:\n      return null\n  }\n}\n\n/**\n * What to tell someone whose install will never be three-way mergeable\n * (AGL-2339).\n *\n * Every install route returns `baseStored`, and `provenance.ts` says what a\n * false one means: *\"a snapshot that cannot be written leaves `baseStored:\n * false` and an artifact that reports itself as not updatable\"*. It reported\n * it to NOBODY — zero `.tsx` readers across all seven routes.\n *\n * The consequence is silent and expensive. `hasDivergedFromBase` needs the\n * base snapshot to tell the publisher's change from the user's; without one\n * an update can only overwrite. So a user who customizes a large artifact —\n * one whose content exceeded `ARTIFACT_BASE_MAX_BYTES`, or whose snapshot\n * write failed — LOSES those changes on the next update, having been told\n * nothing at install time. The update dialog does explain itself when the\n * moment arrives (`preview.mergeable` renders `preview.reason`), but by then\n * the choice is take-the-update-or-stay-behind, not \"keep a copy first\".\n *\n * Persistent rather than a timed toast: it is advice to act on before\n * editing, and it is the only moment this is knowable in advance.\n */\nfunction baseMissingWarning(displayName: string): string {\n  return (\n    `\"${displayName}\" is too large to keep a reference copy of, so a future ` +\n    'update will REPLACE it rather than merge. Export or note any changes ' +\n    'you make to it.'\n  )\n}\n\n/**\n * Shared install/buy handlers for marketplace listings (AGL-95): used by the\n * browse grid and the listing detail page. Install copies the pinned\n * version snapshot server-side (/api/marketplace/install); buy opens a\n * Stripe checkout (/api/marketplace/checkout) when configured.\n */\nexport function useMarketplaceActions(hostId: string, orgId?: string | null) {\n  const { data: user } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const { queueLoading } = useLoading()\n\n  /**\n   * One purchase attempt per listing, minted lazily (AGL-1697).\n   *\n   * Per-listing rather than per-click: minting inside `buy` would defeat the\n   * whole point, because two clicks would mint two keys and the server would\n   * see two purchases. Held in a ref rather than state so a re-render cannot\n   * rotate a key mid-flight.\n   *\n   * It retires when the page does. That is the honest boundary for a redirect\n   * flow — the buyer leaves for Stripe and comes back to a fresh mount — and it\n   * means this key covers the double-click and the retry, while the server's\n   * already-purchased check covers the buyer who returns tomorrow.\n   */\n  const purchaseAttempts = useRef(new Map<string, string>())\n\n  // `scope` is only meaningful for artifact types that HAVE an org-scoped\n  // pin — see INSTALL_TARGETS. Passing it for a template would be ignored\n  // server-side, so callers ask the model rather than guessing.\n  const install = useCallback(\n    async (\n      listing: any,\n      scope?: 'org' | 'host',\n      options?: {\n        /**\n         * Called instead of an error toast when the install route refuses\n         * because the workspace's copy has been EDITED since it was installed\n         * (AGL-1018's 409, AGL-1034).\n         *\n         * The refusal is correct — that install would have destroyed their\n         * work — but \"review the update\" is only useful advice if something\n         * offers the review. Handling it here rather than at each call site\n         * means every surface that installs a copied artifact gets the\n         * recovery, including ones written later.\n         */\n        onDiverged?: () => void\n      },\n    ) => {\n      const dequeue = queueLoading()\n      try {\n        const artifactType = listingArtifactType(listing)\n        const endpoint = endpointForArtifact(artifactType)\n        const response = await authorizedFetch(user, `/api/${endpoint}`, {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            listingId: listing.$id,\n            hostId,\n            ...(scope ? { scope } : {}),\n          }),\n        })\n        const payload = await response.json()\n        if (!response.ok) {\n          // The copy has diverged: hand it to the review rather than telling\n          // someone to review something they cannot reach from here.\n          if (payload?.diverged && options?.onDiverged) {\n            return void options.onDiverged()\n          }\n          // An installs feature lockdown (AGL-1510/1532): \"Install failed\"\n          // reads as a broken listing — the very thing an incident response\n          // needs people NOT to conclude while a suspect listing is under\n          // investigation. The server says installs are paused; say that.\n          const locked = parseLockdownRefusal(response.status, payload)\n          if (locked) {\n            return void enqueueSnackbar(lockdownRefusalText(locked), {\n              variant: 'warning',\n              persist: true,\n            })\n          }\n          return void enqueueSnackbar(payload?.error ?? 'Install failed', {\n            variant: response.status === 402 ? 'warning' : 'error',\n            allowDuplicate: true,\n          })\n        }\n        // Types that land inert must not read as \"your site changed\".\n        const landed = landingMessage(artifactType, listing.displayName)\n        enqueueSnackbar(\n          landed ??\n            (payload.updated\n              ? `Updated \"${listing.displayName}\" to v${payload.version}`\n              : `Installed \"${listing.displayName}\" — find it under Your components`),\n          { variant: 'success', persist: false },\n        )\n        // No base snapshot: this copy can never be three-way merged, and a\n        // future update will overwrite whatever the user does to it. The\n        // route has always said so on the wire; nothing listened (AGL-2339).\n        //\n        // `=== false` rather than a falsy test: a route that omitted the\n        // field entirely has told us nothing, and warning on silence would\n        // put a scary, unactionable message on every install from any\n        // endpoint that had not been updated yet.\n        if (payload.baseStored === false) {\n          enqueueSnackbar(baseMissingWarning(listing.displayName), {\n            variant: 'warning',\n            persist: true,\n          })\n        }\n        /**\n         * What was, and was not, checked about an email somebody else wrote.\n         *\n         * Said HERE because this is the moment the design enters the\n         * workspace, and because the two facts are the ones a sender cannot\n         * recover afterwards by looking at the design. `unreviewed` is the\n         * ordinary case — email starters are auto-listed like every other\n         * copied artifact — so the sentence has to be a statement rather than\n         * an alarm, and it must never be silence: an install that said nothing\n         * would be read as a review that happened.\n         *\n         * The link hosts are the inspectable half of the link policy. The\n         * remote-asset rule is mechanical and the route enforces it, but where\n         * a template points a tenant's own customers is a judgment only the\n         * tenant can make, and they can only make it if they are shown the\n         * list.\n         */\n        if (payload.assurance) {\n          const hosts: string[] = payload.linkHosts ?? []\n          enqueueSnackbar(\n            (payload.assurance === 'approved'\n              ? 'Reviewed by Aglyn. '\n              : 'Nobody at Aglyn has reviewed this design. ') +\n              (hosts.length\n                ? `It links to ${hosts.join(', ')}. `\n                : 'It links nowhere outside your site. ') +\n              'Read it before you send from it.',\n            { variant: 'info', persist: true },\n          )\n        }\n        // A media reference that still resolves against the publisher's own\n        // library — served by our CDN, so no third party learns who opened the\n        // mail, but the picture behind it is still theirs to change.\n        if (payload.foreignMediaScopes?.length) {\n          enqueueSnackbar(\n            'Some images in this email are still served from the publisher’s ' +\n              'own media library, so they can change after you install. ' +\n              'Replace them with your own to pin them.',\n            { variant: 'info', persist: false },\n          )\n        }\n        // A schema whose reference fields couldn't be relinked installs with\n        // those fields degraded to text — silently changing a field's type\n        // would be the kind of thing you discover much later (AGL-657).\n        if (payload.degradedFieldIds?.length) {\n          enqueueSnackbar(\n            `${payload.degradedFieldIds.length} reference field(s) became ` +\n              'plain text — the datasets they pointed at are not in this ' +\n              'organization.',\n            { variant: 'info', persist: false },\n          )\n        }\n      } catch (error) {\n        console.error(error)\n        enqueueSnackbar('An error has occurred', {\n          variant: 'error',\n          allowDuplicate: true,\n        })\n      } finally {\n        dequeue()\n      }\n    },\n    [user, hostId, queueLoading, enqueueSnackbar],\n  )\n\n  /**\n   * Fans an install-targeting plan out to the install routes (AGL-773). Each\n   * step is either a single org pin or a host pin on a named site; org steps\n   * resolve the org from the acting `hostId`. One summary snackbar reports the\n   * whole plan rather than N toasts. Use `resolveInstallPlan` (model) to turn\n   * an All-sites / Selected-sites choice into these steps.\n   */\n  const installPlan = useCallback(\n    async (\n      listing: any,\n      steps: readonly InstallPlanStep[],\n      options?: {\n        /**\n         * Re-pinning something already installed (AGL-1017). Only the wording\n         * changes — the route is the same, because moving a pin forward IS\n         * installing — but \"Installed on 1 site\" is the wrong sentence to read\n         * after pressing Update.\n         */\n        intent?: 'install' | 'update'\n        /** The version being moved to, for the update summary. */\n        version?: string | number | null\n      },\n    ) => {\n      if (!steps.length) return\n      const dequeue = queueLoading()\n      try {\n        const artifactType = listingArtifactType(listing)\n        const endpoint = endpointForArtifact(artifactType)\n        let installed = 0\n        const errors: string[] = []\n        /**\n         * Surfaced separately from success (AGL-1017/429): the pin is written\n         * either way — it is an explicit choice — but a bundle built for a\n         * different host ABI will not load, and a green \"Updated\" toast alone\n         * would leave the workspace believing it did.\n         */\n        const abiWarnings = new Set<string>()\n        /**\n         * Sites whose copy landed with no base snapshot (AGL-2339). Counted\n         * rather than toasted per step: the fan-out installs the SAME\n         * artifact everywhere, so the answer is the same on every site and N\n         * identical warnings would read as N different problems.\n         */\n        let withoutBase = 0\n        /**\n         * A feature lockdown refuses every step identically (AGL-1532), so\n         * the fan-out stops at the first one and says \"installs are paused\"\n         * ONCE. N identical refusals stacked into the error summary would\n         * read as N broken sites — the opposite of what the lock is saying.\n         */\n        let lockedNotice: ReturnType<typeof parseLockdownRefusal> = null\n        for (const step of steps) {\n          // Org steps still need a host to resolve the org server-side, so\n          // fall back to the acting host; host steps target their own site.\n          const targetHostId = step.scope === 'host' ? step.hostId : hostId\n          const response = await authorizedFetch(user, `/api/${endpoint}`, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify({\n              listingId: listing.$id,\n              hostId: targetHostId,\n              ...(step.scope === 'org' ? { scope: 'org' } : {}),\n            }),\n          })\n          const payload = await response.json().catch(() => ({}))\n          if (response.ok) {\n            installed += 1\n            if (payload?.hostAbiWarning) {\n              abiWarnings.add(String(payload.hostAbiWarning))\n            }\n            if (payload?.baseStored === false) withoutBase += 1\n          } else {\n            lockedNotice = parseLockdownRefusal(response.status, payload)\n            if (lockedNotice) break\n            errors.push(payload?.error ?? 'Install failed')\n          }\n        }\n        if (lockedNotice) {\n          enqueueSnackbar(lockdownRefusalText(lockedNotice), {\n            variant: 'warning',\n            persist: true,\n          })\n          // Whatever landed before the lock DID land — saying so is the\n          // difference between \"nothing happened\" and a half-applied plan\n          // the workspace would otherwise discover much later.\n          if (installed) {\n            enqueueSnackbar(\n              `${installed} site(s) were already updated before the pause.`,\n              { variant: 'info', persist: false },\n            )\n          }\n          return\n        }\n        const orgWide = steps.some((step) => step.scope === 'org')\n        const updating = options?.intent === 'update'\n        const noun = updating\n          ? 'Updated'\n          : landingMessage(artifactType, '')\n            ? 'Saved'\n            : 'Installed'\n        const toVersion =\n          updating && options?.version != null ? ` to v${options.version}` : ''\n        if (installed && !errors.length) {\n          enqueueSnackbar(\n            orgWide\n              ? `${noun} \"${listing.displayName}\"${toVersion} for the whole organization`\n              : `${noun} \"${listing.displayName}\"${toVersion} on ${installed} site` +\n                (installed === 1 ? '' : 's'),\n            { variant: 'success', persist: false },\n          )\n        } else if (installed && errors.length) {\n          enqueueSnackbar(\n            `${noun} on ${installed} site(s); ${errors.length} failed — ${errors[0]}`,\n            { variant: 'warning', allowDuplicate: true },\n          )\n        } else {\n          enqueueSnackbar(errors[0] ?? 'Install failed', {\n            variant: 'error',\n            allowDuplicate: true,\n          })\n        }\n        for (const warning of abiWarnings) {\n          enqueueSnackbar(warning, { variant: 'warning', allowDuplicate: true })\n        }\n        if (withoutBase) {\n          enqueueSnackbar(baseMissingWarning(listing.displayName), {\n            variant: 'warning',\n            persist: true,\n          })\n        }\n      } catch (error) {\n        console.error(error)\n        enqueueSnackbar('An error has occurred', {\n          variant: 'error',\n          allowDuplicate: true,\n        })\n      } finally {\n        dequeue()\n      }\n    },\n    [user, hostId, queueLoading, enqueueSnackbar],\n  )\n\n  const buy = useCallback(\n    async (listing: any) => {\n      const dequeue = queueLoading()\n      try {\n        const listingId = String(listing.$id)\n        const attemptKey =\n          purchaseAttempts.current.get(listingId) ??\n          `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`\n        purchaseAttempts.current.set(listingId, attemptKey)\n        const response = await authorizedFetch(\n          user,\n          '/api/marketplace/checkout',\n          {\n            method: 'POST',\n            headers: {\n              'Content-Type': 'application/json',\n              // Stable across a retry of THIS attempt (AGL-1697), so a\n              // double-click or a re-submit after a timeout cannot open a\n              // second Stripe session on a live account.\n              'Idempotency-Key': attemptKey,\n            },\n            // The browser's GA client id rides along so the SERVER-side\n            // `purchase` the Stripe webhook sends can be attributed to the\n            // session — and therefore the campaign — that produced it\n            // (AGL-1638). The webhook has always read this off the session\n            // metadata; until now nothing captured it, so every marketplace\n            // sale landed on a synthetic, sessionless GA user and plugin\n            // revenue had no acquisition channel at all.\n            //\n            // Resolves to null within 500ms when gtag is absent (consent\n            // refused, ad blocker, analytics unconfigured), so it can never\n            // delay or block a purchase — same contract as the console's\n            // subscription checkout.\n            body: JSON.stringify({\n              listingId: listing.$id,\n              hostId,\n              // WHICH WORKSPACE IS BUYING (AGL-2331). A purchase licenses an\n              // organization, so the acting org is named rather than inferred:\n              // at org scope the surface acts through an arbitrary FIRST site,\n              // and letting the server derive the licence holder from that site\n              // would make which client workspace got the licence depend on the\n              // order sites happen to come back in.\n              //\n              // Advisory, not authority — the server resolves it through the\n              // caller's own membership and refuses an org they are not in. An\n              // older cached bundle that sends none still works: the server\n              // falls back to resolving the org from `hostId` the same way.\n              ...(orgId ? { orgId } : {}),\n              gaClientId: await readGaClientId(\n                process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID,\n              ),\n            }),\n          },\n        )\n        const payload = await response.json()\n        // The PAID install door refuses under a lock too (AGL-1545): both\n        // `checkout` and `marketplace-installs` gate it. A buyer must not\n        // read either lock as a payment failure — same reason the billing\n        // page carries this branch (AGL-1532).\n        const locked = parseLockdownRefusal(response.status, payload)\n        if (locked) {\n          return void enqueueSnackbar(lockdownRefusalText(locked), {\n            variant: 'warning',\n            persist: true,\n          })\n        }\n        if (response.status === 501) {\n          return void enqueueSnackbar(\n            'Purchases are not configured on this deployment',\n            { variant: 'info', persist: false },\n          )\n        }\n        if (!response.ok || !payload?.url) {\n          return void enqueueSnackbar(payload?.error ?? 'Checkout failed', {\n            variant: 'error',\n            allowDuplicate: true,\n          })\n        }\n        window.location.assign(payload.url)\n      } catch (error) {\n        console.error(error)\n        enqueueSnackbar('An error has occurred', {\n          variant: 'error',\n          allowDuplicate: true,\n        })\n      } finally {\n        dequeue()\n      }\n    },\n    [user, hostId, orgId, queueLoading, enqueueSnackbar],\n  )\n\n  /**\n   * Uninstall a plugin listing from the listing detail (AGL-881) — the same\n   * `action:'uninstall'` the installed add-ons card uses, so it removes the\n   * pin (and the switchboard entry when nothing else pins it) and decrements\n   * activeInstalls. Only plugins have a removable pin; other artifact types\n   * land in a library and have nothing to uninstall.\n   */\n  const uninstall = useCallback(\n    async (\n      listing: any,\n      scope?: 'org' | 'host',\n      // Which site's pin to drop (AGL-997). Without this the call always\n      // targeted the acting host, so at org scope \"uninstall\" could only\n      // mean \"the whole org pin\" or \"whichever site happened to be acting\"\n      // — removing the plugin from ONE of several sites was unreachable.\n      targetHostId?: string,\n    ) => {\n      const dequeue = queueLoading()\n      try {\n        const response = await authorizedFetch(\n          user,\n          '/api/marketplace/install-plugin',\n          {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify({\n              listingId: listing.$id,\n              hostId: targetHostId ?? hostId,\n              action: 'uninstall',\n              ...(scope ? { scope } : {}),\n            }),\n          },\n        )\n        const payload = await response.json().catch(() => ({}))\n        if (!response.ok) {\n          // Uninstall rides the install-plugin route, so an installs lock\n          // refuses it too (AGL-1532) — and \"Uninstall failed\" during an\n          // incident is exactly the wrong sentence for someone trying to\n          // remove the listing under investigation.\n          const locked = parseLockdownRefusal(response.status, payload)\n          if (locked) {\n            return void enqueueSnackbar(lockdownRefusalText(locked), {\n              variant: 'warning',\n              persist: true,\n            })\n          }\n          return void enqueueSnackbar(payload?.error ?? 'Uninstall failed', {\n            variant: 'error',\n            allowDuplicate: true,\n          })\n        }\n        enqueueSnackbar(`Removed \"${listing.displayName}\"`, {\n          variant: 'success',\n          persist: false,\n        })\n      } catch (error) {\n        console.error(error)\n        enqueueSnackbar('An error has occurred', {\n          variant: 'error',\n          allowDuplicate: true,\n        })\n      } finally {\n        dequeue()\n      }\n    },\n    [user, hostId, queueLoading, enqueueSnackbar],\n  )\n\n  return { install, installPlan, buy, uninstall }\n}\n\nexport default useMarketplaceActions\n"],"names":["lockdownRefusalText","parseLockdownRefusal","readGaClientId","useLoading","useSnackbar","useCallback","useRef","useUser","authorizedFetch","listingArtifactType","endpointForArtifact","artifactType","landingMessage","displayName","baseMissingWarning","useMarketplaceActions","hostId","orgId","data","user","enqueueSnackbar","queueLoading","purchaseAttempts","Map","install","listing","scope","options","dequeue","payload","endpoint","response","method","headers","body","JSON","stringify","listingId","$id","json","ok","diverged","onDiverged","locked","status","variant","persist","error","allowDuplicate","landed","updated","version","baseStored","assurance","hosts","linkHosts","length","join","foreignMediaScopes","degradedFieldIds","console","installPlan","steps","installed","errors","abiWarnings","Set","withoutBase","lockedNotice","step","targetHostId","catch","hostAbiWarning","add","String","push","orgWide","some","updating","intent","noun","toVersion","warning","buy","attemptKey","current","get","Date","now","toString","Math","random","slice","set","gaClientId","process","env","NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID","url","window","location","assign","uninstall","action"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,mBAAmB,EAAEC,oBAAoB,QAAQ,eAAc;AACxE,SAASC,cAAc,QAAQ,0CAAyC;AACxE,SAASC,UAAU,QAAQ,uBAAsB;AACjD,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,WAAW,EAAEC,MAAM,QAAQ,QAAO;AAC3C,SAASC,OAAO,QAAQ,iCAAgC;AACxD,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SAEEC,mBAAmB,QACd,0BAAsB;AAE7B;;;;;CAKC,GACD,SAASC,oBAAoBC,YAAoB;IAC/C,OAAQA;QACN,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT;YACE,OAAO;IACX;AACF;AAEA;;;;;CAKC,GACD,SAASC,eACPD,YAAoB,EACpBE,WAAmB;IAEnB,OAAQF;QACN,KAAK;QACL,KAAK;YACH,OACE,CAAC,OAAO,EAAEE,YAAY,4CAA4C,CAAC,GACnE;QAEJ,KAAK;YACH,OACE,CAAC,OAAO,EAAEA,YAAY,0CAA0C,CAAC,GACjE;QAEJ,KAAK;YACH,oEAAoE;YACpE,gEAAgE;YAChE,OACE,CAAC,OAAO,EAAEA,YAAY,6CAA6C,CAAC,GACpE;QAEJ,KAAK;YACH,OAAO,CAAC,SAAS,EAAEA,YAAY,0BAA0B,CAAC;QAC5D,KAAK;YACH,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,OACE,CAAC,SAAS,EAAEA,YAAY,6CAA6C,CAAC,GACtE;QAEJ;YACE,OAAO;IACX;AACF;AAEA;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,SAASC,mBAAmBD,WAAmB;IAC7C,OACE,CAAC,CAAC,EAAEA,YAAY,wDAAwD,CAAC,GACzE,0EACA;AAEJ;AAEA;;;;;CAKC,GACD,OAAO,SAASE,sBAAsBC,MAAc,EAAEC,KAAqB;IACzE,MAAM,EAAEC,MAAMC,IAAI,EAAE,GAAGZ;IACvB,MAAM,EAAEa,eAAe,EAAE,GAAGhB;IAC5B,MAAM,EAAEiB,YAAY,EAAE,GAAGlB;IAEzB;;;;;;;;;;;;GAYC,GACD,MAAMmB,mBAAmBhB,OAAO,IAAIiB;IAEpC,wEAAwE;IACxE,wEAAwE;IACxE,8DAA8D;IAC9D,MAAMC,UAAUnB,YACd,OACEoB,SACAC,OACAC;QAeA,MAAMC,UAAUP;QAChB,IAAI;gBA2FEQ,6BAWAA;YArGJ,MAAMlB,eAAeF,oBAAoBgB;YACzC,MAAMK,WAAWpB,oBAAoBC;YACrC,MAAMoB,WAAW,MAAMvB,gBAAgBW,MAAM,CAAC,KAAK,EAAEW,UAAU,EAAE;gBAC/DE,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBACnBC,WAAWZ,QAAQa,GAAG;oBACtBtB;mBACIU,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;YAE7B;YACA,MAAMG,UAAU,MAAME,SAASQ,IAAI;YACnC,IAAI,CAACR,SAASS,EAAE,EAAE;;gBAChB,mEAAmE;gBACnE,2DAA2D;gBAC3D,IAAIX,CAAAA,2BAAAA,QAASY,QAAQ,MAAId,2BAAAA,QAASe,UAAU,GAAE;oBAC5C,OAAO,KAAKf,QAAQe,UAAU;gBAChC;gBACA,iEAAiE;gBACjE,kEAAkE;gBAClE,gEAAgE;gBAChE,gEAAgE;gBAChE,MAAMC,SAAS1C,qBAAqB8B,SAASa,MAAM,EAAEf;gBACrD,IAAIc,QAAQ;oBACV,OAAO,KAAKvB,gBAAgBpB,oBAAoB2C,SAAS;wBACvDE,SAAS;wBACTC,SAAS;oBACX;gBACF;gBACA,OAAO,KAAK1B,wBAAgBS,2BAAAA,QAASkB,KAAK,mBAAI,kBAAkB;oBAC9DF,SAASd,SAASa,MAAM,KAAK,MAAM,YAAY;oBAC/CI,gBAAgB;gBAClB;YACF;YACA,8DAA8D;YAC9D,MAAMC,SAASrC,eAAeD,cAAcc,QAAQZ,WAAW;YAC/DO,gBACE6B,iBAAAA,SACGpB,QAAQqB,OAAO,GACZ,CAAC,SAAS,EAAEzB,QAAQZ,WAAW,CAAC,MAAM,EAAEgB,QAAQsB,OAAO,EAAE,GACzD,CAAC,WAAW,EAAE1B,QAAQZ,WAAW,CAAC,iCAAiC,CAAC,EAC1E;gBAAEgC,SAAS;gBAAWC,SAAS;YAAM;YAEvC,mEAAmE;YACnE,iEAAiE;YACjE,qEAAqE;YACrE,EAAE;YACF,iEAAiE;YACjE,mEAAmE;YACnE,8DAA8D;YAC9D,0CAA0C;YAC1C,IAAIjB,QAAQuB,UAAU,KAAK,OAAO;gBAChChC,gBAAgBN,mBAAmBW,QAAQZ,WAAW,GAAG;oBACvDgC,SAAS;oBACTC,SAAS;gBACX;YACF;YACA;;;;;;;;;;;;;;;;SAgBC,GACD,IAAIjB,QAAQwB,SAAS,EAAE;oBACGxB;gBAAxB,MAAMyB,SAAkBzB,qBAAAA,QAAQ0B,SAAS,YAAjB1B,qBAAqB,EAAE;gBAC/CT,gBACE,AAACS,CAAAA,QAAQwB,SAAS,KAAK,aACnB,wBACA,4CAA2C,IAC5CC,CAAAA,MAAME,MAAM,GACT,CAAC,YAAY,EAAEF,MAAMG,IAAI,CAAC,MAAM,EAAE,CAAC,GACnC,sCAAqC,IACzC,oCACF;oBAAEZ,SAAS;oBAAQC,SAAS;gBAAK;YAErC;YACA,oEAAoE;YACpE,uEAAuE;YACvE,6DAA6D;YAC7D,KAAIjB,8BAAAA,QAAQ6B,kBAAkB,qBAA1B7B,4BAA4B2B,MAAM,EAAE;gBACtCpC,gBACE,qEACE,8DACA,2CACF;oBAAEyB,SAAS;oBAAQC,SAAS;gBAAM;YAEtC;YACA,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,KAAIjB,4BAAAA,QAAQ8B,gBAAgB,qBAAxB9B,0BAA0B2B,MAAM,EAAE;gBACpCpC,gBACE,GAAGS,QAAQ8B,gBAAgB,CAACH,MAAM,CAAC,2BAA2B,CAAC,GAC7D,+DACA,iBACF;oBAAEX,SAAS;oBAAQC,SAAS;gBAAM;YAEtC;QACF,EAAE,OAAOC,OAAO;YACda,QAAQb,KAAK,CAACA;YACd3B,gBAAgB,yBAAyB;gBACvCyB,SAAS;gBACTG,gBAAgB;YAClB;QACF,SAAU;YACRpB;QACF;IACF,GACA;QAACT;QAAMH;QAAQK;QAAcD;KAAgB;IAG/C;;;;;;GAMC,GACD,MAAMyC,cAAcxD,YAClB,OACEoB,SACAqC,OACAnC;QAYA,IAAI,CAACmC,MAAMN,MAAM,EAAE;QACnB,MAAM5B,UAAUP;QAChB,IAAI;YACF,MAAMV,eAAeF,oBAAoBgB;YACzC,MAAMK,WAAWpB,oBAAoBC;YACrC,IAAIoD,YAAY;YAChB,MAAMC,SAAmB,EAAE;YAC3B;;;;;SAKC,GACD,MAAMC,cAAc,IAAIC;YACxB;;;;;SAKC,GACD,IAAIC,cAAc;YAClB;;;;;SAKC,GACD,IAAIC,eAAwD;YAC5D,KAAK,MAAMC,QAAQP,MAAO;gBACxB,iEAAiE;gBACjE,kEAAkE;gBAClE,MAAMQ,eAAeD,KAAK3C,KAAK,KAAK,SAAS2C,KAAKrD,MAAM,GAAGA;gBAC3D,MAAMe,WAAW,MAAMvB,gBAAgBW,MAAM,CAAC,KAAK,EAAEW,UAAU,EAAE;oBAC/DE,QAAQ;oBACRC,SAAS;wBAAE,gBAAgB;oBAAmB;oBAC9CC,MAAMC,KAAKC,SAAS,CAAC;wBACnBC,WAAWZ,QAAQa,GAAG;wBACtBtB,QAAQsD;uBACJD,KAAK3C,KAAK,KAAK,QAAQ;wBAAEA,OAAO;oBAAM,IAAI,CAAC;gBAEnD;gBACA,MAAMG,UAAU,MAAME,SAASQ,IAAI,GAAGgC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;gBACpD,IAAIxC,SAASS,EAAE,EAAE;oBACfuB,aAAa;oBACb,IAAIlC,2BAAAA,QAAS2C,cAAc,EAAE;wBAC3BP,YAAYQ,GAAG,CAACC,OAAO7C,QAAQ2C,cAAc;oBAC/C;oBACA,IAAI3C,CAAAA,2BAAAA,QAASuB,UAAU,MAAK,OAAOe,eAAe;gBACpD,OAAO;;oBACLC,eAAenE,qBAAqB8B,SAASa,MAAM,EAAEf;oBACrD,IAAIuC,cAAc;oBAClBJ,OAAOW,IAAI,SAAC9C,2BAAAA,QAASkB,KAAK,mBAAI;gBAChC;YACF;YACA,IAAIqB,cAAc;gBAChBhD,gBAAgBpB,oBAAoBoE,eAAe;oBACjDvB,SAAS;oBACTC,SAAS;gBACX;gBACA,8DAA8D;gBAC9D,gEAAgE;gBAChE,qDAAqD;gBACrD,IAAIiB,WAAW;oBACb3C,gBACE,GAAG2C,UAAU,+CAA+C,CAAC,EAC7D;wBAAElB,SAAS;wBAAQC,SAAS;oBAAM;gBAEtC;gBACA;YACF;YACA,MAAM8B,UAAUd,MAAMe,IAAI,CAAC,CAACR,OAASA,KAAK3C,KAAK,KAAK;YACpD,MAAMoD,WAAWnD,CAAAA,2BAAAA,QAASoD,MAAM,MAAK;YACrC,MAAMC,OAAOF,WACT,YACAlE,eAAeD,cAAc,MAC3B,UACA;YACN,MAAMsE,YACJH,YAAYnD,CAAAA,2BAAAA,QAASwB,OAAO,KAAI,OAAO,CAAC,KAAK,EAAExB,QAAQwB,OAAO,EAAE,GAAG;YACrE,IAAIY,aAAa,CAACC,OAAOR,MAAM,EAAE;gBAC/BpC,gBACEwD,UACI,GAAGI,KAAK,EAAE,EAAEvD,QAAQZ,WAAW,CAAC,CAAC,EAAEoE,UAAU,2BAA2B,CAAC,GACzE,GAAGD,KAAK,EAAE,EAAEvD,QAAQZ,WAAW,CAAC,CAAC,EAAEoE,UAAU,IAAI,EAAElB,UAAU,KAAK,CAAC,GAClEA,CAAAA,cAAc,IAAI,KAAK,GAAE,GAC9B;oBAAElB,SAAS;oBAAWC,SAAS;gBAAM;YAEzC,OAAO,IAAIiB,aAAaC,OAAOR,MAAM,EAAE;gBACrCpC,gBACE,GAAG4D,KAAK,IAAI,EAAEjB,UAAU,UAAU,EAAEC,OAAOR,MAAM,CAAC,UAAU,EAAEQ,MAAM,CAAC,EAAE,EAAE,EACzE;oBAAEnB,SAAS;oBAAWG,gBAAgB;gBAAK;YAE/C,OAAO;oBACWgB;gBAAhB5C,iBAAgB4C,WAAAA,MAAM,CAAC,EAAE,YAATA,WAAa,kBAAkB;oBAC7CnB,SAAS;oBACTG,gBAAgB;gBAClB;YACF;YACA,KAAK,MAAMkC,WAAWjB,YAAa;gBACjC7C,gBAAgB8D,SAAS;oBAAErC,SAAS;oBAAWG,gBAAgB;gBAAK;YACtE;YACA,IAAImB,aAAa;gBACf/C,gBAAgBN,mBAAmBW,QAAQZ,WAAW,GAAG;oBACvDgC,SAAS;oBACTC,SAAS;gBACX;YACF;QACF,EAAE,OAAOC,OAAO;YACda,QAAQb,KAAK,CAACA;YACd3B,gBAAgB,yBAAyB;gBACvCyB,SAAS;gBACTG,gBAAgB;YAClB;QACF,SAAU;YACRpB;QACF;IACF,GACA;QAACT;QAAMH;QAAQK;QAAcD;KAAgB;IAG/C,MAAM+D,MAAM9E,YACV,OAAOoB;QACL,MAAMG,UAAUP;QAChB,IAAI;gBAGAC;YAFF,MAAMe,YAAYqC,OAAOjD,QAAQa,GAAG;YACpC,MAAM8C,cACJ9D,gCAAAA,iBAAiB+D,OAAO,CAACC,GAAG,CAACjD,sBAA7Bf,gCACA,GAAGiE,KAAKC,GAAG,GAAGC,QAAQ,CAAC,IAAI,CAAC,EAAEC,KAAKC,MAAM,GAAGF,QAAQ,CAAC,IAAIG,KAAK,CAAC,GAAG,KAAK;YACzEtE,iBAAiB+D,OAAO,CAACQ,GAAG,CAACxD,WAAW+C;YACxC,MAAMrD,WAAW,MAAMvB,gBACrBW,MACA,6BACA;gBACEa,QAAQ;gBACRC,SAAS;oBACP,gBAAgB;oBAChB,yDAAyD;oBACzD,4DAA4D;oBAC5D,2CAA2C;oBAC3C,mBAAmBmD;gBACrB;gBACA,4DAA4D;gBAC5D,+DAA+D;gBAC/D,0DAA0D;gBAC1D,+DAA+D;gBAC/D,gEAAgE;gBAChE,6DAA6D;gBAC7D,6CAA6C;gBAC7C,EAAE;gBACF,6DAA6D;gBAC7D,gEAAgE;gBAChE,6DAA6D;gBAC7D,yBAAyB;gBACzBlD,MAAMC,KAAKC,SAAS,CAAC;oBACnBC,WAAWZ,QAAQa,GAAG;oBACtBtB;mBAYIC,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;oBACzB6E,YAAY,MAAM5F,eAChB6F,QAAQC,GAAG,CAACC,mCAAmC;;YAGrD;YAEF,MAAMpE,UAAU,MAAME,SAASQ,IAAI;YACnC,kEAAkE;YAClE,kEAAkE;YAClE,kEAAkE;YAClE,uCAAuC;YACvC,MAAMI,SAAS1C,qBAAqB8B,SAASa,MAAM,EAAEf;YACrD,IAAIc,QAAQ;gBACV,OAAO,KAAKvB,gBAAgBpB,oBAAoB2C,SAAS;oBACvDE,SAAS;oBACTC,SAAS;gBACX;YACF;YACA,IAAIf,SAASa,MAAM,KAAK,KAAK;gBAC3B,OAAO,KAAKxB,gBACV,mDACA;oBAAEyB,SAAS;oBAAQC,SAAS;gBAAM;YAEtC;YACA,IAAI,CAACf,SAASS,EAAE,IAAI,EAACX,2BAAAA,QAASqE,GAAG,GAAE;;gBACjC,OAAO,KAAK9E,wBAAgBS,2BAAAA,QAASkB,KAAK,mBAAI,mBAAmB;oBAC/DF,SAAS;oBACTG,gBAAgB;gBAClB;YACF;YACAmD,OAAOC,QAAQ,CAACC,MAAM,CAACxE,QAAQqE,GAAG;QACpC,EAAE,OAAOnD,OAAO;YACda,QAAQb,KAAK,CAACA;YACd3B,gBAAgB,yBAAyB;gBACvCyB,SAAS;gBACTG,gBAAgB;YAClB;QACF,SAAU;YACRpB;QACF;IACF,GACA;QAACT;QAAMH;QAAQC;QAAOI;QAAcD;KAAgB;IAGtD;;;;;;GAMC,GACD,MAAMkF,YAAYjG,YAChB,OACEoB,SACAC,OACA,mEAAmE;IACnE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE4C;QAEA,MAAM1C,UAAUP;QAChB,IAAI;YACF,MAAMU,WAAW,MAAMvB,gBACrBW,MACA,mCACA;gBACEa,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBACnBC,WAAWZ,QAAQa,GAAG;oBACtBtB,MAAM,EAAEsD,uBAAAA,eAAgBtD;oBACxBuF,QAAQ;mBACJ7E,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;YAE7B;YAEF,MAAMG,UAAU,MAAME,SAASQ,IAAI,GAAGgC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;YACpD,IAAI,CAACxC,SAASS,EAAE,EAAE;;gBAChB,gEAAgE;gBAChE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,0CAA0C;gBAC1C,MAAMG,SAAS1C,qBAAqB8B,SAASa,MAAM,EAAEf;gBACrD,IAAIc,QAAQ;oBACV,OAAO,KAAKvB,gBAAgBpB,oBAAoB2C,SAAS;wBACvDE,SAAS;wBACTC,SAAS;oBACX;gBACF;gBACA,OAAO,KAAK1B,wBAAgBS,2BAAAA,QAASkB,KAAK,mBAAI,oBAAoB;oBAChEF,SAAS;oBACTG,gBAAgB;gBAClB;YACF;YACA5B,gBAAgB,CAAC,SAAS,EAAEK,QAAQZ,WAAW,CAAC,CAAC,CAAC,EAAE;gBAClDgC,SAAS;gBACTC,SAAS;YACX;QACF,EAAE,OAAOC,OAAO;YACda,QAAQb,KAAK,CAACA;YACd3B,gBAAgB,yBAAyB;gBACvCyB,SAAS;gBACTG,gBAAgB;YAClB;QACF,SAAU;YACRpB;QACF;IACF,GACA;QAACT;QAAMH;QAAQK;QAAcD;KAAgB;IAG/C,OAAO;QAAEI;QAASqC;QAAasB;QAAKmB;IAAU;AAChD;AAEA,eAAevF,sBAAqB"}