@aglyn/plugins-marketplace 1.0.0-beta.143

package/src/lib/server/install-email-starter.js

@@ -0,0 +1,279 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createResourceUid, isPluginRevoked } from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
+import { emailStarterRefusal, inspectEmailStarter, isPrivateListing, listingArtifactType, resolveEmailStarterAssurance } from "../model/index.js";
+import { canActAsPublisher } from "./publisher-profile.js";
+import { requirePurchase } from "./purchase-entitlement.js";
+import { recordInstallProvenance } from "./provenance.js";
+import { recordVersionMove } from "./version-stats.js";
+/**
+ * Installs a marketplace email starter as a new email on a site.
+ *
+ * ## The install is a COPY, and that is the versioning answer
+ *
+ * The published tree is written into a screen document of the tenant's own —
+ * `hosts/{h}/screens/{newId}` with `kind: 'email'`, plus its first version —
+ * in exactly the shape `createEmailScreen` writes, so it appears in the site's
+ * Email templates list beside every email they designed themselves and opens
+ * in the same besigner. From that write on, nothing reads the listing again.
+ *
+ * That is deliberate, and it is the property a live reference could not have:
+ * a publisher pushing version 4 must not rewrite the email a tenant is
+ * mailing from this afternoon. A newer version surfaces as an offer — the
+ * shared `resolveUpdateState` comparison every other artifact type uses — and
+ * is taken through `update-artifact`, which three-way-merges against the base
+ * snapshot recorded here so the tenant's own edits survive it.
+ *
+ * The one thing a copy does NOT sever is a `media:` reference, which still
+ * resolves against the publisher's media. Reported by the inspection rather
+ * than refused: our own CDN serves it, so no third party learns who opened the
+ * mail, but the bytes behind it can still change.
+ *
+ * ## Three refusals that are not in the other install routes
+ *
+ * **The kill switch, at install.** Every other copied artifact treats
+ * `revocations` as a plugin concern. An installed email is mailed from the
+ * shared sending domain, so a stopped version must not be handed out — and,
+ * separately, must stop being sent by tenants who already have it, which is
+ * `emailStarterSendBlock` on the send path.
+ *
+ * **A rejected version, for everybody including its publisher.** Review is not
+ * a precondition for installing an email starter — they are auto-listed like
+ * every other copied artifact — so most versions are honestly `unreviewed` and
+ * install fine. A verdict of `rejected` is different: somebody looked and said
+ * no, and the publisher's own site is on the same sending domain as everyone
+ * else's.
+ *
+ * **The policy, re-run over the listing's own bytes.** The publish route
+ * already refused a violating design. Re-running it here is not belt and
+ * braces about that route — it is the gate for content that never went through
+ * it: a version published before this policy existed, a document written by a
+ * staff tool, an import. A tracking pixel is only refused if the refusal sits
+ * where the content is HANDED OVER, which is the lesson `install-email-template`
+ * records about takedown.
+ */ export const installEmailStarterHandler = async (req, res)=>{
+    var _ref, _ref1, _req_headers_authorization;
+    var _req_body, _req_body1;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const listingId = String((_ref = (_req_body = req.body) == null ? void 0 : _req_body.listingId) != null ? _ref : '');
+    const hostId = String((_ref1 = (_req_body1 = req.body) == null ? void 0 : _req_body1.hostId) != null ? _ref1 : '');
+    if (!listingId || !hostId) {
+        return res.status(400).json({
+            error: 'Missing listingId or hostId'
+        });
+    }
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    try {
+        var _hostSnapshot_get, _listing_priceUsd, _membership_orgId, _versionSnapshot_get, _versionSnapshot_get1, _versionSnapshot_get2, _listing_displayName;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        const membership = await resolveOrgPermissions(decoded.uid, {
+            hostId
+        });
+        if (!membership.permissions.installPlugins) {
+            return res.status(403).json({
+                error: 'Your organization role does not allow installing from the marketplace'
+            });
+        }
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(hostId);
+        const hostSnapshot = await hostRef.get();
+        if (!hostSnapshot.exists) {
+            return res.status(404).json({
+                error: 'Unknown site'
+            });
+        }
+        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
+        if (memberRole !== 'admin' && memberRole !== 'editor') {
+            return res.status(403).json({
+                error: 'Not a site admin or editor'
+            });
+        }
+        const listingRef = firestore.collection('marketplaceListings').doc(listingId);
+        const listingSnapshot = await listingRef.get();
+        const listing = listingSnapshot.data();
+        if (!listing || listing.deletedAt || listing.hiddenAt || listingArtifactType(listing) !== 'emailStarter') {
+            return res.status(404).json({
+                error: 'Unknown email starter'
+            });
+        }
+        const ownsListing = await canActAsPublisher(firestore, decoded.uid, listing.profileId);
+        if (isPrivateListing(listing) && !ownsListing) {
+            return res.status(404).json({
+                error: 'Unknown listing'
+            });
+        }
+        const priceUsd = Number((_listing_priceUsd = listing.priceUsd) != null ? _listing_priceUsd : 0);
+        const unpaid = await requirePurchase({
+            firestore,
+            buyerUid: decoded.uid,
+            buyerOrgId: (_membership_orgId = membership.orgId) != null ? _membership_orgId : '',
+            listingId,
+            priceUsd,
+            ownsListing
+        });
+        if (unpaid) return res.status(402).json(unpaid);
+        const version = listing.latestVersion;
+        const revocation = (await firestore.collection('revocations').doc(listingId).get()).data();
+        if (isPluginRevoked(revocation, String(version != null ? version : ''))) {
+            return res.status(409).json({
+                error: 'This email design has been stopped by Aglyn'
+            });
+        }
+        const versionSnapshot = await listingRef.collection('versions').doc(String(version)).get();
+        if (!versionSnapshot.exists) {
+            return res.status(500).json({
+                error: 'Email starter version missing'
+            });
+        }
+        /**
+     * The assurance of THIS version, from THIS version's document.
+     *
+     * Read here rather than off the listing, and stamped rather than
+     * recomputed later, because the listing's own review fields answer a
+     * different question. `reviewStatus: 'verified'` is a claim about the
+     * publisher; `latestVersionReviewState` describes whatever is newest. A
+     * reader that consulted either would report version 7 as reviewed on the
+     * strength of version 3, which is how "reviewed" stops meaning anything.
+     */ const assurance = resolveEmailStarterAssurance({
+            reviewState: versionSnapshot.get('reviewState')
+        });
+        if (assurance === 'rejected') {
+            return res.status(409).json({
+                error: 'This email design was turned down in review and cannot be installed'
+            });
+        }
+        const inspection = inspectEmailStarter(versionSnapshot.get('nodes'), {
+            hostId
+        });
+        const violation = emailStarterRefusal(inspection);
+        if (violation) {
+            return res.status(422).json({
+                error: violation,
+                violations: inspection.violations
+            });
+        }
+        const nodes = inspection.nodes;
+        if (!nodes || !Object.keys(nodes).length) {
+            return res.status(500).json({
+                error: 'Email starter version missing'
+            });
+        }
+        const subject = String((_versionSnapshot_get = versionSnapshot.get('subject')) != null ? _versionSnapshot_get : '');
+        const preheader = String((_versionSnapshot_get1 = versionSnapshot.get('preheader')) != null ? _versionSnapshot_get1 : '');
+        const rootId = (_versionSnapshot_get2 = versionSnapshot.get('rootId')) != null ? _versionSnapshot_get2 : null;
+        const provenance = await recordInstallProvenance({
+            firestore,
+            listingId,
+            listing,
+            version,
+            artifactType: 'emailStarter',
+            content: {
+                rootId,
+                nodes,
+                subject,
+                preheader
+            }
+        });
+        const installedFrom = _extends({}, provenance.installedFrom, {
+            assurance
+        });
+        const screenId = createResourceUid();
+        const versionId = createResourceUid();
+        const now = firebaseAdmin.firestore.FieldValue.serverTimestamp();
+        const displayName = String((_listing_displayName = listing.displayName) != null ? _listing_displayName : 'Installed email').slice(0, 120);
+        const batch = firestore.batch();
+        const screenRef = hostRef.collection('screens').doc(screenId);
+        /**
+     * The same document shape `createEmailScreen` writes, so the Email
+     * templates list, the screen besigner and the campaign composer all find
+     * it without knowing it came from anywhere.
+     *
+     * NOT routed, and `kind: 'email'`, which is what keeps it out of
+     * `countBillableScreens` — an installed email spends the same allowance a
+     * hand-made one does, which is none.
+     *
+     * `nodes` is written as a plain map here, exactly as the first version
+     * from `/api/hosts/versions` is. The besigner's converter compresses on
+     * the first save, and `decodeStoredNodes` is what every reader on this
+     * path already goes through, so both forms are handled from the start.
+     */ batch.set(screenRef, _extends({
+            displayName,
+            kind: 'email',
+            versionId
+        }, subject && {
+            emailSubject: subject
+        }, preheader && {
+            emailPreheader: preheader
+        }, {
+            installedFrom,
+            createdAt: now,
+            updatedAt: now
+        }));
+        batch.set(screenRef.collection('versions').doc(versionId), _extends({
+            screenId
+        }, rootId ? {
+            rootId
+        } : {}, {
+            nodes,
+            // Stamped on the VERSION as well as the screen, because the version is
+            // what the send path renders and the send path is where the kill switch
+            // has to bite. A stamp only on the parent would be one document away
+            // from the bytes it describes.
+            installedFrom,
+            createdAt: now,
+            updatedAt: now
+        }));
+        await batch.commit();
+        await recordVersionMove({
+            firestore,
+            listingRef,
+            artifactType: 'emailStarter',
+            to: version
+        });
+        await listingRef.update({
+            installCount: firebaseAdmin.firestore.FieldValue.increment(1)
+        }).catch(()=>undefined);
+        return res.status(200).json({
+            installed: true,
+            screenId,
+            versionId,
+            version: version != null ? version : null,
+            assurance,
+            linkHosts: inspection.linkHosts,
+            foreignMediaScopes: inspection.foreignMediaScopes,
+            baseStored: provenance.baseStored
+        });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({
+            error: 'Email starter install failed'
+        });
+    }
+};
+export default installEmailStarterHandler;
+
+//# sourceMappingURL=install-email-starter.js.map

package/src/lib/server/install-email-starter.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/install-email-starter.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createResourceUid, isPluginRevoked } from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport type { PluginRevocation } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  emailStarterRefusal,\n  inspectEmailStarter,\n  isPrivateListing,\n  listingArtifactType,\n  resolveEmailStarterAssurance,\n} from '../model'\nimport { canActAsPublisher } from './publisher-profile'\nimport { requirePurchase } from './purchase-entitlement'\nimport { recordInstallProvenance } from './provenance'\nimport { recordVersionMove } from './version-stats'\n\n/**\n * Installs a marketplace email starter as a new email on a site.\n *\n * ## The install is a COPY, and that is the versioning answer\n *\n * The published tree is written into a screen document of the tenant's own —\n * `hosts/{h}/screens/{newId}` with `kind: 'email'`, plus its first version —\n * in exactly the shape `createEmailScreen` writes, so it appears in the site's\n * Email templates list beside every email they designed themselves and opens\n * in the same besigner. From that write on, nothing reads the listing again.\n *\n * That is deliberate, and it is the property a live reference could not have:\n * a publisher pushing version 4 must not rewrite the email a tenant is\n * mailing from this afternoon. A newer version surfaces as an offer — the\n * shared `resolveUpdateState` comparison every other artifact type uses — and\n * is taken through `update-artifact`, which three-way-merges against the base\n * snapshot recorded here so the tenant's own edits survive it.\n *\n * The one thing a copy does NOT sever is a `media:` reference, which still\n * resolves against the publisher's media. Reported by the inspection rather\n * than refused: our own CDN serves it, so no third party learns who opened the\n * mail, but the bytes behind it can still change.\n *\n * ## Three refusals that are not in the other install routes\n *\n * **The kill switch, at install.** Every other copied artifact treats\n * `revocations` as a plugin concern. An installed email is mailed from the\n * shared sending domain, so a stopped version must not be handed out — and,\n * separately, must stop being sent by tenants who already have it, which is\n * `emailStarterSendBlock` on the send path.\n *\n * **A rejected version, for everybody including its publisher.** Review is not\n * a precondition for installing an email starter — they are auto-listed like\n * every other copied artifact — so most versions are honestly `unreviewed` and\n * install fine. A verdict of `rejected` is different: somebody looked and said\n * no, and the publisher's own site is on the same sending domain as everyone\n * else's.\n *\n * **The policy, re-run over the listing's own bytes.** The publish route\n * already refused a violating design. Re-running it here is not belt and\n * braces about that route — it is the gate for content that never went through\n * it: a version published before this policy existed, a document written by a\n * staff tool, an import. A tracking pixel is only refused if the refusal sits\n * where the content is HANDED OVER, which is the lesson `install-email-template`\n * records about takedown.\n */\nexport const installEmailStarterHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const listingId = String(req.body?.listingId ?? '')\n  const hostId = String(req.body?.hostId ?? '')\n  if (!listingId || !hostId) {\n    return res.status(400).json({ error: 'Missing listingId or hostId' })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.installPlugins) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow installing from the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not a site admin or editor' })\n    }\n\n    const listingRef = firestore.collection('marketplaceListings').doc(listingId)\n    const listingSnapshot = await listingRef.get()\n    const listing = listingSnapshot.data() as any\n    if (\n      !listing ||\n      listing.deletedAt ||\n      listing.hiddenAt ||\n      listingArtifactType(listing) !== 'emailStarter'\n    ) {\n      return res.status(404).json({ error: 'Unknown email starter' })\n    }\n\n    const ownsListing = await canActAsPublisher(\n      firestore,\n      decoded.uid,\n      listing.profileId,\n    )\n    if (isPrivateListing(listing) && !ownsListing) {\n      return res.status(404).json({ error: 'Unknown listing' })\n    }\n    const priceUsd = Number(listing.priceUsd ?? 0)\n    const unpaid = await requirePurchase({\n      firestore,\n      buyerUid: decoded.uid,\n      buyerOrgId: membership.orgId ?? '',\n      listingId,\n      priceUsd,\n      ownsListing,\n    })\n    if (unpaid) return res.status(402).json(unpaid)\n\n    const version = listing.latestVersion\n    const revocation = (\n      await firestore.collection('revocations').doc(listingId).get()\n    ).data() as PluginRevocation | undefined\n    if (isPluginRevoked(revocation, String(version ?? ''))) {\n      return res\n        .status(409)\n        .json({ error: 'This email design has been stopped by Aglyn' })\n    }\n\n    const versionSnapshot = await listingRef\n      .collection('versions')\n      .doc(String(version))\n      .get()\n    if (!versionSnapshot.exists) {\n      return res.status(500).json({ error: 'Email starter version missing' })\n    }\n    /**\n     * The assurance of THIS version, from THIS version's document.\n     *\n     * Read here rather than off the listing, and stamped rather than\n     * recomputed later, because the listing's own review fields answer a\n     * different question. `reviewStatus: 'verified'` is a claim about the\n     * publisher; `latestVersionReviewState` describes whatever is newest. A\n     * reader that consulted either would report version 7 as reviewed on the\n     * strength of version 3, which is how \"reviewed\" stops meaning anything.\n     */\n    const assurance = resolveEmailStarterAssurance({\n      reviewState: versionSnapshot.get('reviewState'),\n    })\n    if (assurance === 'rejected') {\n      return res.status(409).json({\n        error: 'This email design was turned down in review and cannot be installed',\n      })\n    }\n\n    const inspection = inspectEmailStarter(versionSnapshot.get('nodes'), {\n      hostId,\n    })\n    const violation = emailStarterRefusal(inspection)\n    if (violation) {\n      return res\n        .status(422)\n        .json({ error: violation, violations: inspection.violations })\n    }\n    const nodes = inspection.nodes\n    if (!nodes || !Object.keys(nodes).length) {\n      return res.status(500).json({ error: 'Email starter version missing' })\n    }\n\n    const subject = String(versionSnapshot.get('subject') ?? '')\n    const preheader = String(versionSnapshot.get('preheader') ?? '')\n    const rootId = versionSnapshot.get('rootId') ?? null\n    const provenance = await recordInstallProvenance({\n      firestore,\n      listingId,\n      listing,\n      version,\n      artifactType: 'emailStarter',\n      content: { rootId, nodes, subject, preheader },\n    })\n    const installedFrom = { ...provenance.installedFrom, assurance }\n\n    const screenId = createResourceUid()\n    const versionId = createResourceUid()\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n    const displayName = String(listing.displayName ?? 'Installed email').slice(\n      0,\n      120,\n    )\n    const batch = firestore.batch()\n    const screenRef = hostRef.collection('screens').doc(screenId)\n    /**\n     * The same document shape `createEmailScreen` writes, so the Email\n     * templates list, the screen besigner and the campaign composer all find\n     * it without knowing it came from anywhere.\n     *\n     * NOT routed, and `kind: 'email'`, which is what keeps it out of\n     * `countBillableScreens` — an installed email spends the same allowance a\n     * hand-made one does, which is none.\n     *\n     * `nodes` is written as a plain map here, exactly as the first version\n     * from `/api/hosts/versions` is. The besigner's converter compresses on\n     * the first save, and `decodeStoredNodes` is what every reader on this\n     * path already goes through, so both forms are handled from the start.\n     */\n    batch.set(screenRef, {\n      displayName,\n      kind: 'email',\n      versionId,\n      ...(subject && { emailSubject: subject }),\n      ...(preheader && { emailPreheader: preheader }),\n      installedFrom,\n      createdAt: now,\n      updatedAt: now,\n    })\n    batch.set(screenRef.collection('versions').doc(versionId), {\n      screenId,\n      ...(rootId ? { rootId } : {}),\n      nodes,\n      // Stamped on the VERSION as well as the screen, because the version is\n      // what the send path renders and the send path is where the kill switch\n      // has to bite. A stamp only on the parent would be one document away\n      // from the bytes it describes.\n      installedFrom,\n      createdAt: now,\n      updatedAt: now,\n    })\n    await batch.commit()\n\n    await recordVersionMove({\n      firestore,\n      listingRef,\n      artifactType: 'emailStarter',\n      to: version,\n    })\n    await listingRef\n      .update({\n        installCount: firebaseAdmin.firestore.FieldValue.increment(1),\n      })\n      .catch(() => undefined)\n\n    return res.status(200).json({\n      installed: true,\n      screenId,\n      versionId,\n      version: version ?? null,\n      assurance,\n      linkHosts: inspection.linkHosts,\n      foreignMediaScopes: inspection.foreignMediaScopes,\n      baseStored: provenance.baseStored,\n    })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Email starter install failed' })\n  }\n}\n\nexport default installEmailStarterHandler\n"],"names":["createResourceUid","isPluginRevoked","firebaseAdmin","resolveOrgPermissions","emailStarterRefusal","inspectEmailStarter","isPrivateListing","listingArtifactType","resolveEmailStarterAssurance","canActAsPublisher","requirePurchase","recordInstallProvenance","recordVersionMove","installEmailStarterHandler","req","res","method","status","json","error","listingId","String","body","hostId","authorization","headers","idToken","startsWith","slice","length","undefined","hostSnapshot","listing","membership","versionSnapshot","decoded","app","auth","verifyIdToken","uid","permissions","installPlugins","firestore","hostRef","collection","doc","get","exists","memberRole","listingRef","listingSnapshot","data","deletedAt","hiddenAt","ownsListing","profileId","priceUsd","Number","unpaid","buyerUid","buyerOrgId","orgId","version","latestVersion","revocation","assurance","reviewState","inspection","violation","violations","nodes","Object","keys","subject","preheader","rootId","provenance","artifactType","content","installedFrom","screenId","versionId","now","FieldValue","serverTimestamp","displayName","batch","screenRef","set","kind","emailSubject","emailPreheader","createdAt","updatedAt","commit","to","update","installCount","increment","catch","installed","linkHosts","foreignMediaScopes","baseStored","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,EAAEC,eAAe,QAAQ,sBAAqB;AAGxE,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,mBAAmB,EACnBC,mBAAmB,EACnBC,gBAAgB,EAChBC,mBAAmB,EACnBC,4BAA4B,QACvB,oBAAU;AACjB,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,eAAe,QAAQ,4BAAwB;AACxD,SAASC,uBAAuB,QAAQ,kBAAc;AACtD,SAASC,iBAAiB,QAAQ,qBAAiB;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CC,GACD,OAAO,MAAMC,6BAA+C,OAAOC,KAAKC;qBASzCD;QALJA,WACHA;IAJtB,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,YAAYC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,SAAS,mBAAI;IAChD,MAAMG,SAASF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,MAAM,oBAAI;IAC1C,IAAI,CAACH,aAAa,CAACG,QAAQ;QACzB,OAAOR,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;IACrE;IACA,MAAMK,gBAAgBH,QAAOP,6BAAAA,IAAIW,OAAO,CAACD,aAAa,YAAzBV,6BAA6B;IAC1D,MAAMY,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOX,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;YAekBY,mBAyBIC,mBAIVC,mBAyDSC,sBACEA,uBACVA,uBAcYF;QApH3B,MAAMG,UAAU,MAAMjC,cAAckC,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACZ;QAC/D,MAAMO,aAAa,MAAM9B,sBAAsBgC,QAAQI,GAAG,EAAE;YAAEhB;QAAO;QACrE,IAAI,CAACU,WAAWO,WAAW,CAACC,cAAc,EAAE;YAC1C,OAAO1B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMuB,YAAYxC,cAAckC,GAAG,GAAGM,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACtB;QAClD,MAAMQ,eAAe,MAAMY,QAAQG,GAAG;QACtC,IAAI,CAACf,aAAagB,MAAM,EAAE;YACxB,OAAOhC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAM6B,aAAa,EAACjB,oBAAAA,aAAae,GAAG,CAAC,0BAAjBf,oBAAmC,CAAC,EAAE,CAACI,QAAQI,GAAG,CAAC;QACvE,IAAIS,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAOjC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QAEA,MAAM8B,aAAaP,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAACzB;QACnE,MAAM8B,kBAAkB,MAAMD,WAAWH,GAAG;QAC5C,MAAMd,UAAUkB,gBAAgBC,IAAI;QACpC,IACE,CAACnB,WACDA,QAAQoB,SAAS,IACjBpB,QAAQqB,QAAQ,IAChB9C,oBAAoByB,aAAa,gBACjC;YACA,OAAOjB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAwB;QAC/D;QAEA,MAAMmC,cAAc,MAAM7C,kBACxBiC,WACAP,QAAQI,GAAG,EACXP,QAAQuB,SAAS;QAEnB,IAAIjD,iBAAiB0B,YAAY,CAACsB,aAAa;YAC7C,OAAOvC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,MAAMqC,WAAWC,QAAOzB,oBAAAA,QAAQwB,QAAQ,YAAhBxB,oBAAoB;QAC5C,MAAM0B,SAAS,MAAMhD,gBAAgB;YACnCgC;YACAiB,UAAUxB,QAAQI,GAAG;YACrBqB,UAAU,GAAE3B,oBAAAA,WAAW4B,KAAK,YAAhB5B,oBAAoB;YAChCb;YACAoC;YACAF;QACF;QACA,IAAII,QAAQ,OAAO3C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAACwC;QAExC,MAAMI,UAAU9B,QAAQ+B,aAAa;QACrC,MAAMC,aAAa,AACjB,CAAA,MAAMtB,UAAUE,UAAU,CAAC,eAAeC,GAAG,CAACzB,WAAW0B,GAAG,EAAC,EAC7DK,IAAI;QACN,IAAIlD,gBAAgB+D,YAAY3C,OAAOyC,kBAAAA,UAAW,MAAM;YACtD,OAAO/C,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAA8C;QACjE;QAEA,MAAMe,kBAAkB,MAAMe,WAC3BL,UAAU,CAAC,YACXC,GAAG,CAACxB,OAAOyC,UACXhB,GAAG;QACN,IAAI,CAACZ,gBAAgBa,MAAM,EAAE;YAC3B,OAAOhC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgC;QACvE;QACA;;;;;;;;;KASC,GACD,MAAM8C,YAAYzD,6BAA6B;YAC7C0D,aAAahC,gBAAgBY,GAAG,CAAC;QACnC;QACA,IAAImB,cAAc,YAAY;YAC5B,OAAOlD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QAEA,MAAMgD,aAAa9D,oBAAoB6B,gBAAgBY,GAAG,CAAC,UAAU;YACnEvB;QACF;QACA,MAAM6C,YAAYhE,oBAAoB+D;QACtC,IAAIC,WAAW;YACb,OAAOrD,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAOiD;gBAAWC,YAAYF,WAAWE,UAAU;YAAC;QAChE;QACA,MAAMC,QAAQH,WAAWG,KAAK;QAC9B,IAAI,CAACA,SAAS,CAACC,OAAOC,IAAI,CAACF,OAAOzC,MAAM,EAAE;YACxC,OAAOd,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgC;QACvE;QAEA,MAAMsD,UAAUpD,QAAOa,uBAAAA,gBAAgBY,GAAG,CAAC,sBAApBZ,uBAAkC;QACzD,MAAMwC,YAAYrD,QAAOa,wBAAAA,gBAAgBY,GAAG,CAAC,wBAApBZ,wBAAoC;QAC7D,MAAMyC,UAASzC,wBAAAA,gBAAgBY,GAAG,CAAC,qBAApBZ,wBAAiC;QAChD,MAAM0C,aAAa,MAAMjE,wBAAwB;YAC/C+B;YACAtB;YACAY;YACA8B;YACAe,cAAc;YACdC,SAAS;gBAAEH;gBAAQL;gBAAOG;gBAASC;YAAU;QAC/C;QACA,MAAMK,gBAAgB,aAAKH,WAAWG,aAAa;YAAEd;;QAErD,MAAMe,WAAWhF;QACjB,MAAMiF,YAAYjF;QAClB,MAAMkF,MAAMhF,cAAcwC,SAAS,CAACyC,UAAU,CAACC,eAAe;QAC9D,MAAMC,cAAchE,QAAOW,uBAAAA,QAAQqD,WAAW,YAAnBrD,uBAAuB,mBAAmBJ,KAAK,CACxE,GACA;QAEF,MAAM0D,QAAQ5C,UAAU4C,KAAK;QAC7B,MAAMC,YAAY5C,QAAQC,UAAU,CAAC,WAAWC,GAAG,CAACmC;QACpD;;;;;;;;;;;;;KAaC,GACDM,MAAME,GAAG,CAACD,WAAW;YACnBF;YACAI,MAAM;YACNR;WACIR,WAAW;YAAEiB,cAAcjB;QAAQ,GACnCC,aAAa;YAAEiB,gBAAgBjB;QAAU;YAC7CK;YACAa,WAAWV;YACXW,WAAWX;;QAEbI,MAAME,GAAG,CAACD,UAAU3C,UAAU,CAAC,YAAYC,GAAG,CAACoC,YAAY;YACzDD;WACIL,SAAS;YAAEA;QAAO,IAAI,CAAC;YAC3BL;YACA,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,+BAA+B;YAC/BS;YACAa,WAAWV;YACXW,WAAWX;;QAEb,MAAMI,MAAMQ,MAAM;QAElB,MAAMlF,kBAAkB;YACtB8B;YACAO;YACA4B,cAAc;YACdkB,IAAIjC;QACN;QACA,MAAMb,WACH+C,MAAM,CAAC;YACNC,cAAc/F,cAAcwC,SAAS,CAACyC,UAAU,CAACe,SAAS,CAAC;QAC7D,GACCC,KAAK,CAAC,IAAMrE;QAEf,OAAOf,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BkF,WAAW;YACXpB;YACAC;YACAnB,OAAO,EAAEA,kBAAAA,UAAW;YACpBG;YACAoC,WAAWlC,WAAWkC,SAAS;YAC/BC,oBAAoBnC,WAAWmC,kBAAkB;YACjDC,YAAY3B,WAAW2B,UAAU;QACnC;IACF,EAAE,OAAOpF,OAAO;QACdqF,QAAQrF,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;AACF,EAAC;AAED,eAAeN,2BAA0B"}

package/src/lib/server/install-email-template.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * Installs a marketplace email template into a site (AGL-657).
+ *
+ * Lands as an INACTIVE version: the design is written to
+ * `hosts/{h}/emailTemplates/{key}/versions/{newId}` and the template doc's
+ * `versionId` — the pointer `loadHostEmail` reads at send time — is left
+ * alone. That keeps the AGL-669/671 rule intact for the one artifact type
+ * where breaking it would be worst: an email template installs onto a FIXED
+ * catalog key, so writing it live would silently replace the design of an
+ * email the site is already sending its customers. The owner activates it in
+ * the email besigner, exactly as with any other draft version.
+ *
+ * `subject`/`preheader` ride the version doc rather than the template doc for
+ * the same reason — they are live send-time copy.
+ */
+export declare const installEmailTemplateHandler: PluginApiHandler;
+export default installEmailTemplateHandler;

package/src/lib/server/install-email-template.js

@@ -0,0 +1,252 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createResourceUid, decodeStoredNodes, encodeStoredNodes } from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
+import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "@aglyn/shared-util-email";
+import { isPrivateListing, listingArtifactType } from "../model/marketplace.js";
+import { canActAsPublisher } from "./publisher-profile.js";
+import { requirePurchase } from "./purchase-entitlement.js";
+import { recordInstallProvenance } from "./provenance.js";
+import { recordVersionMove } from "./version-stats.js";
+/**
+ * Installs a marketplace email template into a site (AGL-657).
+ *
+ * Lands as an INACTIVE version: the design is written to
+ * `hosts/{h}/emailTemplates/{key}/versions/{newId}` and the template doc's
+ * `versionId` — the pointer `loadHostEmail` reads at send time — is left
+ * alone. That keeps the AGL-669/671 rule intact for the one artifact type
+ * where breaking it would be worst: an email template installs onto a FIXED
+ * catalog key, so writing it live would silently replace the design of an
+ * email the site is already sending its customers. The owner activates it in
+ * the email besigner, exactly as with any other draft version.
+ *
+ * `subject`/`preheader` ride the version doc rather than the template doc for
+ * the same reason — they are live send-time copy.
+ */ export const installEmailTemplateHandler = async (req, res)=>{
+    var _ref, _ref1, _req_headers_authorization;
+    var _req_body, _req_body1;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const listingId = String((_ref = (_req_body = req.body) == null ? void 0 : _req_body.listingId) != null ? _ref : '');
+    const hostId = String((_ref1 = (_req_body1 = req.body) == null ? void 0 : _req_body1.hostId) != null ? _ref1 : '');
+    if (!listingId || !hostId) {
+        return res.status(400).json({
+            error: 'Missing listingId or hostId'
+        });
+    }
+    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    try {
+        var _hostSnapshot_get, _listing_priceUsd, _membership_orgId, _ref2, _versionSnapshot_get, _versionSnapshot_get1, _versionSnapshot_get2, _versionSnapshot_get3, _versionSnapshot_get4, _versionSnapshot_get5, _versionSnapshot_get6, _listing_latestVersion, _listing_latestVersion1;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        const membership = await resolveOrgPermissions(decoded.uid, {
+            hostId
+        });
+        if (!membership.permissions.installPlugins) {
+            return res.status(403).json({
+                error: 'Your organization role does not allow installing from the marketplace'
+            });
+        }
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(hostId);
+        const hostSnapshot = await hostRef.get();
+        if (!hostSnapshot.exists) {
+            return res.status(404).json({
+                error: 'Unknown site'
+            });
+        }
+        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
+        if (memberRole !== 'admin' && memberRole !== 'editor') {
+            return res.status(403).json({
+                error: 'Not a site admin or editor'
+            });
+        }
+        const listingRef = firestore.collection('marketplaceListings').doc(listingId);
+        const listingSnapshot = await listingRef.get();
+        const listing = listingSnapshot.data();
+        if (!listing || listing.deletedAt || // Staff takedown blocks new installs on EVERY artifact type
+        // (AGL-2290). AGL-948 extended takedown past plugins in the browse
+        // predicate and in `resolveMarketplacePluginVersion`, but the gate that
+        // decides whether content is HANDED OVER was only ever added to
+        // `install-plugin.ts`. So a component, theme, template, layout, email
+        // template or dataset schema that staff had taken down stayed
+        // installable by anyone holding its listing id — which makes takedown a
+        // suggestion for six of the seven artifact types.
+        //
+        // No owner exemption, matching `install-plugin.ts`: a takedown is a
+        // moderation decision about the artifact, not about who is asking.
+        listing.hiddenAt || listingArtifactType(listing) !== 'emailTemplate') {
+            return res.status(404).json({
+                error: 'Unknown email template'
+            });
+        }
+        const priceUsd = Number((_listing_priceUsd = listing.priceUsd) != null ? _listing_priceUsd : 0);
+        const ownsListing = await canActAsPublisher(firestore, decoded.uid, listing.profileId);
+        // Private listings install ONLY for the owning org (AGL-2290).
+        //
+        // `install-plugin.ts` has carried this since AGL-968; the other six never
+        // did, so a private component, theme, template, layout, email template or
+        // dataset schema was installable by anyone who knew its listing id. Browse
+        // hides them and the detail page 404s, but neither is a control — the
+        // route is.
+        if (isPrivateListing(listing) && !ownsListing) {
+            return res.status(404).json({
+                error: 'Unknown listing'
+            });
+        }
+        // A FULLY refunded purchase stops entitling (AGL-1546), and until
+        // AGL-1699 only the component route knew that: this one asked whether a
+        // purchase doc EXISTED, so buy/install/refund kept the artifact. The
+        // predicate lives in one place now so the next route cannot miss it.
+        const unpaid = await requirePurchase({
+            firestore,
+            buyerUid: decoded.uid,
+            // THE ORG THE LICENCE HAS TO COVER (AGL-2331). `membership.orgId` is
+            // resolved server-side from the caller's own membership by the
+            // permission gate above — never a request-body field — so this is the
+            // workspace the install actually lands in, and the only one a purchase
+            // can entitle here.
+            buyerOrgId: (_membership_orgId = membership.orgId) != null ? _membership_orgId : '',
+            listingId,
+            priceUsd,
+            ownsListing
+        });
+        if (unpaid) return res.status(402).json(unpaid);
+        const versionSnapshot = await listingRef.collection('versions').doc(String(listing.latestVersion)).get();
+        // A listing version holds the sanitized tree as a plain map, and this
+        // decodes anyway: `decodeStoredNodes` returns one unchanged, and the
+        // alternative — reading raw — is a guard that passes on a `Buffer`
+        // because `Object.keys` counts byte indices (AGL-1223).
+        const nodes = decodeStoredNodes(versionSnapshot.get('nodes'));
+        if (!nodes || !Object.keys(nodes).length) {
+            return res.status(500).json({
+                error: 'Email template version missing'
+            });
+        }
+        // The catalog key is part of the artifact: this design is FOR a specific
+        // transactional email, so it can only install onto that same key.
+        const templateKey = String((_ref2 = (_versionSnapshot_get = versionSnapshot.get('emailTemplateKey')) != null ? _versionSnapshot_get : listing.emailTemplateKey) != null ? _ref2 : '');
+        const entry = templateKey ? getTenantEmail(templateKey) : undefined;
+        if (!entry || !isTenantEmailEditable(entry)) {
+            return res.status(422).json({
+                error: 'This listing targets an email this site cannot send'
+            });
+        }
+        // The email's plugin has to be present, or the design targets an email
+        // that is never sent from here — better to say so than to install a
+        // version nobody can reach.
+        const enabledPlugins = hostSnapshot.get('enabledPlugins');
+        if (entry.pluginId && Array.isArray(enabledPlugins) && !enabledPlugins.includes(entry.pluginId)) {
+            return res.status(409).json({
+                error: `This email is sent by the ${entry.plugin} plugin — enable it on this site first`
+            });
+        }
+        const templateRef = hostRef.collection(TENANT_EMAIL_COLLECTION).doc(templateKey);
+        const now = firebaseAdmin.firestore.FieldValue.serverTimestamp();
+        const versionId = createResourceUid();
+        // Provenance + base snapshot (AGL-1015). The subject and preheader are
+        // part of the design and travel with it, so they belong in the base — a
+        // reworded subject is a user edit like any other.
+        const provenance = await recordInstallProvenance({
+            firestore,
+            listingId,
+            listing,
+            version: listing.latestVersion,
+            artifactType: 'emailTemplate',
+            content: {
+                rootId: (_versionSnapshot_get1 = versionSnapshot.get('rootId')) != null ? _versionSnapshot_get1 : null,
+                nodes,
+                subject: String((_versionSnapshot_get2 = versionSnapshot.get('subject')) != null ? _versionSnapshot_get2 : ''),
+                preheader: String((_versionSnapshot_get3 = versionSnapshot.get('preheader')) != null ? _versionSnapshot_get3 : '')
+            }
+        });
+        const batch = firestore.batch();
+        batch.set(templateRef.collection('versions').doc(versionId), {
+            rootId: (_versionSnapshot_get4 = versionSnapshot.get('rootId')) != null ? _versionSnapshot_get4 : null,
+            // Compressed at rest, matching what the email besigner writes on the
+            // first save after this install (AGL-1151). The provenance base above
+            // keeps the decoded map: it is compared by value, never stored as a
+            // document the editor opens.
+            nodes: Buffer.from(encodeStoredNodes(nodes)),
+            // Copy travels with the design but stays inert until activation.
+            subject: String((_versionSnapshot_get5 = versionSnapshot.get('subject')) != null ? _versionSnapshot_get5 : ''),
+            preheader: String((_versionSnapshot_get6 = versionSnapshot.get('preheader')) != null ? _versionSnapshot_get6 : ''),
+            source: {
+                type: 'marketplace',
+                listingId,
+                version: (_listing_latestVersion = listing.latestVersion) != null ? _listing_latestVersion : null
+            },
+            installedFrom: provenance.installedFrom,
+            createdAt: now,
+            updatedAt: now
+        });
+        // Create the template doc if this site has never designed this email, but
+        // WITHOUT `versionId` — an absent pointer keeps the built-in copy sending.
+        //
+        // `installedFrom` is a read marker, not behavior (AGL-789): the installed
+        // design lives in a versions SUBcollection, which browse can only reach
+        // with a collectionGroup query that would collide with every other
+        // `versions` subcollection in the schema. Recording it on the flat
+        // template doc keeps "is this listing installed here?" a single read.
+        batch.set(templateRef, {
+            updatedAt: now,
+            // The full AGL-1015 stamp, plus the `versionId` pointer this marker
+            // has carried since AGL-789 so "is this listing installed here?" stays
+            // a single flat read.
+            installedFrom: _extends({}, provenance.installedFrom, {
+                versionId
+            })
+        }, {
+            merge: true
+        });
+        await batch.commit();
+        // Per-version tally (AGL-1036). Each install adds another draft version
+        // rather than replacing the last, so nothing leaves a version here either.
+        await recordVersionMove({
+            firestore,
+            listingRef,
+            artifactType: 'emailTemplate',
+            to: listing.latestVersion
+        });
+        await listingRef.update({
+            installCount: firebaseAdmin.firestore.FieldValue.increment(1)
+        }).catch(()=>undefined);
+        return res.status(200).json({
+            installed: true,
+            templateKey,
+            versionId,
+            activated: false,
+            version: (_listing_latestVersion1 = listing.latestVersion) != null ? _listing_latestVersion1 : null,
+            baseStored: provenance.baseStored
+        });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({
+            error: 'Email template install failed'
+        });
+    }
+};
+export default installEmailTemplateHandler;
+
+//# sourceMappingURL=install-email-template.js.map