@aglyn/plugins-redirects 1.0.0-beta.221 → 1.0.0-beta.223

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-redirects",
-  "version": "1.0.0-beta.221",
+  "version": "1.0.0-beta.223",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,16 +25,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.221",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.221",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.221",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.221",
-    "@aglyn/shared-util-email": "1.0.0-beta.221",
-    "@aglyn/shared-util-http": "1.0.0-beta.221",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.221",
-    "@aglyn/shared-util-tools": "1.0.0-beta.221",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.221",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.221",
+    "@aglyn/aglyn": "1.0.0-beta.223",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.223",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.223",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.223",
+    "@aglyn/shared-util-email": "1.0.0-beta.223",
+    "@aglyn/shared-util-http": "1.0.0-beta.223",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.223",
+    "@aglyn/shared-util-tools": "1.0.0-beta.223",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.223",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.223",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/components/redirects-console-page.js

@@ -16,10 +16,12 @@
  */ 'use client';
 import { _ as _extends } from "@swc/helpers/_/_extends";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { checkQuota, pluginDocsHelp } from "@aglyn/aglyn";
+import { TransferResumeImport } from "@aglyn/aglyn/app-utils/transfer-resume-import";
+import { checkQuota, pluginDocsHelp, useTransferLauncher } from "@aglyn/aglyn";
 import { TENANT_APEX } from "@aglyn/aglyn/app-utils/tenant-apex";
-import { isExternalRedirectDestination, isSelfRedirect, matchRedirect, normalizeRedirectDestination, normalizeRedirectSource, REDIRECT_DEFAULT_PRIORITY, validateRedirectRule, REDIRECT_STATUS_CODES } from "../model/index.js";
+import { findDuplicateRedirect, isExternalRedirectDestination, isSelfRedirect, matchRedirect, normalizeRedirectDestination, normalizeRedirectSource, REDIRECT_DEFAULT_PRIORITY, redirectHitKey, redirectSourceIsLivePage, validateRedirectRule, REDIRECT_STATUS_CODES, walkRedirectChain } from "../model/index.js";
 import { CardDisplay, useConfirmationContext } from "@aglyn/shared-ui-jsx";
+import { REDIRECTS_TRANSFER_KEY } from "../transfer/redirects-transfer-fields.js";
 import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
 import QuotaReadoutComponent from "@aglyn/shared-ui-jsx/components/quota-readout.component";
 import { useSnackbar } from "@aglyn/shared-ui-snackstack";
@@ -222,7 +224,6 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
         firestore,
         hostId
     ]);
-    const idKey = (value)=>value.replace(/[.$#[\]/]/g, '_');
     const totalHits = Object.values(hits != null ? hits : {}).reduce((sum, count)=>sum + count, 0);
     const handleAdd = useCallback(()=>{
         if (!entitled) {
@@ -293,7 +294,7 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
         hostId
     ]);
     const handleSave = useCallback(async ()=>{
-        var _ref, _ref1;
+        var _ref;
         if (!draft) return;
         const kind = draft.kind || 'exact';
         // Shared v2 validation (AGL-375): regex patterns must compile; path
@@ -326,9 +327,10 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
                 persist: false
             });
         }
-        const duplicate = redirects.find((redirect)=>{
-            var _redirect_kind;
-            return redirect.source === source && ((_redirect_kind = redirect.kind) != null ? _redirect_kind : 'exact') === kind && redirect.$id !== draft.id;
+        const duplicate = findDuplicateRedirect(redirects, {
+            $id: draft.id,
+            source,
+            kind
         });
         if (duplicate) {
             return void enqueueSnackbar(`A rule for ${source} already exists`, {
@@ -338,27 +340,19 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
         }
         // Chain-loop detection (AGL-156): follow internal destinations through
         // the rule set; a walk that returns to this source can never execute.
-        if (destination.startsWith('/')) {
-            const bySource = new Map(redirects.filter((redirect)=>redirect.$id !== draft.id).map((redirect)=>[
-                    redirect.source,
-                    redirect.destination
-                ]));
-            let cursor = destination.toLowerCase();
-            for(let hop = 0; hop < 10 && cursor; hop += 1){
-                if (cursor === source) {
-                    return void enqueueSnackbar('That destination chains back to this rule — a redirect loop', {
-                        variant: 'warning',
-                        persist: false
-                    });
-                }
-                const next = bySource.get(cursor);
-                cursor = next && next.startsWith('/') ? next.toLowerCase() : undefined;
-            }
+        if (walkRedirectChain(redirects, {
+            $id: draft.id,
+            source,
+            destination
+        }).loop) {
+            return void enqueueSnackbar('That destination chains back to this rule — a redirect loop', {
+                variant: 'warning',
+                persist: false
+            });
         }
         // Screen-route collision: shadowing a live page may be intentional
         // (moved pages) — warn, don't block (decision per the issue).
-        const routedPaths = Object.values((_ref = host == null ? void 0 : host.screens) != null ? _ref : {}).map((path)=>path === '/' ? '/' : `/${path}`);
-        if (routedPaths.includes(source)) {
+        if (redirectSourceIsLivePage(host == null ? void 0 : host.screens, source)) {
             enqueueSnackbar(`${source} is a published page — the redirect takes precedence`, {
                 variant: 'info',
                 persist: false
@@ -405,7 +399,7 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
      * stamp behind that a LATER edit back to an external target would inherit
      * — approval carried across a destination nobody approved.
      */ const approval = isExternalRedirectDestination(destination) ? {
-            externalDestinationApprovedBy: (_ref1 = currentUser == null ? void 0 : currentUser.uid) != null ? _ref1 : null
+            externalDestinationApprovedBy: (_ref = currentUser == null ? void 0 : currentUser.uid) != null ? _ref : null
         } : {
             externalDestinationApprovedBy: deleteField()
         };
@@ -468,9 +462,9 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
                 persist: false
             });
         } catch (error) {
-            var _ref2;
+            var _ref1;
             console.error(error);
-            enqueueSnackbar((_ref2 = error == null ? void 0 : error.message) != null ? _ref2 : 'An error has occurred', {
+            enqueueSnackbar((_ref1 = error == null ? void 0 : error.message) != null ? _ref1 : 'An error has occurred', {
                 variant: 'error',
                 allowDuplicate: true
             });
@@ -551,11 +545,47 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
         reportWriteFailure,
         announceRuleChange
     ]);
+    /*
+   * Import and Export, through the console's transfer launcher (`null`
+   * outside the console shell, where there is no workspace to move rules in
+   * or out of). The list above is a live listener, so an import's rules show
+   * up without a refresh.
+   */ const transfer = useTransferLauncher();
+    const transferTarget = {
+        resource: REDIRECTS_TRANSFER_KEY,
+        scope: 'host',
+        hostId
+    };
+    // Import for those who may write the records, Export for those who may read them.
+    const canImport = Boolean(transfer == null ? void 0 : transfer.can('import', transferTarget));
+    const canExport = Boolean(transfer == null ? void 0 : transfer.can('export', transferTarget));
+    const transferActions = transfer && (canImport || canExport) ? /*#__PURE__*/ _jsxs(Stack, {
+        direction: "row",
+        spacing: 1,
+        children: [
+            /*#__PURE__*/ _jsx(TransferResumeImport, {
+                target: transferTarget
+            }),
+            canImport && /*#__PURE__*/ _jsx(Button, {
+                size: "small",
+                onClick: ()=>transfer.openImport(transferTarget),
+                children: 'Import'
+            }),
+            canExport && /*#__PURE__*/ _jsx(Button, {
+                size: "small",
+                onClick: ()=>transfer.openExport(transferTarget),
+                children: 'Export'
+            })
+        ]
+    }) : null;
     return /*#__PURE__*/ _jsxs(CardDisplay, {
         header: 'URL redirects',
         help: pluginDocsHelp('redirects', {
             anchor: '#manage-redirects'
         }),
+        HeaderProps: transferActions ? {
+            action: transferActions
+        } : undefined,
         contentGutterX: true,
         contentGutterY: true,
         children: [
@@ -573,7 +603,7 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
                         children: `${totalHits} redirect hit${totalHits === 1 ? '' : 's'} in ` + 'the last 30 days (sampled — one per cache window with ' + 'traffic).'
                     }) : null,
                     visibleRedirects.map((redirect)=>{
-                        var _redirect_statusCode, _redirect_kind, _hits_idKey;
+                        var _redirect_statusCode, _redirect_kind, _hits_redirectHitKey;
                         return /*#__PURE__*/ _jsxs(Stack, {
                             direction: "row",
                             spacing: 1,
@@ -617,7 +647,7 @@ import { ceilingedWindow, collectionCeiling, useFirestore, useFirestoreCollectio
                                             variant: "caption",
                                             color: "text.secondary",
                                             children: [
-                                                hits ? `${(_hits_idKey = hits[idKey(redirect.$id)]) != null ? _hits_idKey : 0} hits (30d, sampled)` : null,
+                                                hits ? `${(_hits_redirectHitKey = hits[redirectHitKey(redirect.$id)]) != null ? _hits_redirectHitKey : 0} hits (30d, sampled)` : null,
                                                 redirect.lastHitAt ? `last ${redirect.lastHitAt.toDate().toLocaleString()}` : null
                                             ].filter(Boolean).join(' · ')
                                         }) : null

package/src/lib/components/redirects-console-page.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/redirects/src/lib/components/redirects-console-page.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { checkQuota, pluginDocsHelp } from '@aglyn/aglyn'\nimport { type ConsolePluginPageProps } from '@aglyn/aglyn'\nimport { TENANT_APEX } from '@aglyn/aglyn/app-utils/tenant-apex'\nimport { isExternalRedirectDestination, isSelfRedirect, matchRedirect, normalizeRedirectDestination, normalizeRedirectSource, REDIRECT_DEFAULT_PRIORITY, validateRedirectRule, REDIRECT_STATUS_CODES } from '../model'\nimport { CardDisplay, useConfirmationContext } from '@aglyn/shared-ui-jsx'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport QuotaReadoutComponent from '@aglyn/shared-ui-jsx/components/quota-readout.component'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { Timestamp } from '@aglyn/shared-util-timestamp'\nimport {\n  Alert,\n  Button,\n  Chip,\n  Dialog,\n  DialogActions,\n  DialogContent,\n  DialogTitle,\n  MenuItem,\n  Stack,\n  Switch,\n  TextField,\n  Typography,\n} from '@mui/material'\nimport {\n  collection,\n  deleteField,\n  doc,\n  getCountFromServer,\n  getDoc,\n  setDoc,\n  updateDoc,\n} from 'firebase/firestore'\nimport { useCallback, useEffect, useMemo, useState } from 'react'\nimport { ListPagination } from '@aglyn/shared-ui-jsx/components/list-pagination.component'\nimport { TABLE_PAGE_SIZE_DEFAULT } from '@aglyn/shared-ui-jsx/const/table-pagination'\nimport {\n  ceilingedWindow,\n  collectionCeiling,\n  useFirestore,\n  useFirestoreCollection,\n  useFirestoreDoc,\n  useHostResourceApi,\n  useUser,\n  writeGuardedBySeed,\n} from '@aglyn/tenant-feature-instance'\n\n/**\n * How many redirect documents this page reads.\n *\n * A CEILING, not a page size. Everything the page decides is computed over\n * the WHOLE rule set: the duplicate-source check, the chain-loop walk that\n * follows internal destinations through the rules, and the inline tester that\n * runs the enforcement matcher. A server page would give each of them a\n * tenth of the rules to reason about, and the duplicate check would then\n * create exactly the collision it exists to prevent.\n */\nconst REDIRECT_CEILING = 200\n\ninterface RedirectDraft {\n  id: string | null\n  source: string\n  destination: string\n  statusCode: number\n  /** Match mode (AGL-375): exact | prefix | regex. */\n  kind: string\n  /** Lower fires first. */\n  priority: number\n  /**\n   * The rule's on/off state, carried through the editor rather than reset by\n   * it (AGL-1372). The save used to hardcode `true`, so changing a **disabled**\n   * rule's target turned it back on and rerouted the site without the author\n   * asking. A new rule seeds this `true`; an edit seeds it from the stored\n   * rule, which is also where the row's switch reads from.\n   */\n  enabled: boolean\n}\n\n/**\n * Redirect manager (AGL-156): CRUD over `hosts/{hostId}/redirects` with\n * the shared AGL-154 validation (normalized sources, https-or-internal\n * destinations, self-redirect refusal, duplicate-source check). Paid\n * (`redirects` flag + `redirectsPerHost` quota); rules take effect on the\n * site within ~30 seconds (AGL-155 ISR window).\n *\n * The plan gate is the SHELL's, and it runs before this component exists\n * (AGL-2484): the console resolves `redirects` from the org billing doc and\n * renders its own refusal notice in place of the surface, so this card is\n * only ever mounted for an entitled org and states no plan terms of its own.\n * Redirects registers no `upgradeNotice` override because it is a genuine\n * upgrade — free denies it, Starter and above grant it — which makes the\n * shell's plan-derived sentence the accurate one already.\n *\n * `entitled` is still read below, where it is not redundant: it holds back\n * the thirty analytics day-doc reads behind the hit counts, and refuses the\n * add path ahead of the server that enforces it.\n */\nexport function RedirectsConsolePage(props: ConsolePluginPageProps) {\n  const { hostId, entitled, org } = props\n  const firestore = useFirestore()\n  const createHostResource = useHostResourceApi()\n  const { data: currentUser } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n\n  const {\n    data: redirectDocs,\n    status: redirectsStatus,\n    /**\n     * The rows this editor is seeded from are unconfirmed by the server\n     * (AGL-1358). Editing copies every field the form owns out of the stored\n     * rule and writes all of them back, so `merge: true` protects only the\n     * fields written elsewhere (`lastHitAt`, `deletedAt`). This is the site\n     * where a rollback is hardest to undo: a reverted `destination` on a\n     * **301** is cached by every browser that has already followed it, so the\n     * stale target outlives the fix in the console. `kind` reverting from\n     * exact to prefix silently widens a rule over a whole subtree, and\n     * `priority` reorders which rule fires when several match.\n     */\n    fromCache: redirectsFromCache,\n  } = useFirestoreCollection<any>(\n    /*\n     * ORDERED AND CEILINGED, with a probe (AGL-2501).\n     *\n     * `limit(200)` alone is answered in DOCUMENT-ID order and the ids are\n     * generated, so the window was a pseudo-random two hundred of the site's\n     * rules — sorted by `source` in the browser afterwards, which is what\n     * made it invisible: the rules on screen run alphabetically and are\n     * simply the wrong rules, and the ones missing leave no gap to notice.\n     *\n     * `orderBy('source')` is the tempting fix and the dangerous one. It\n     * matches only documents that HAVE the field, and nothing validates\n     * `source` for presence — `/api/hosts/resources` stores an allow-list of\n     * fields and checks none of them — so a rule saved without one would\n     * vanish from this page while still redirecting live traffic. The\n     * document NAME cannot be absent, so the walk is total: every rule is\n     * reachable, and the alphabetical order stays where it belongs, in the\n     * sort below over a window the page holds whole.\n     */\n    () =>\n      collectionCeiling(\n        collection(firestore, 'hosts', hostId, 'redirects'),\n        REDIRECT_CEILING,\n      ),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  const { rows: readRedirects, truncated: redirectsTruncated } =\n    ceilingedWindow<any>(redirectDocs, REDIRECT_CEILING)\n  const redirects = [...readRedirects]\n    .filter((redirect: any) => !redirect.deletedAt)\n    .sort((a: any, b: any) =>\n      String(a.source ?? '').localeCompare(String(b.source ?? '')),\n    )\n\n  /*\n   * The page is a SLICE of the ceiling, which is what the three whole-set\n   * consumers above require. The count is the rules this page HOLDS, after\n   * soft-deleted ones are dropped — not the quota, which is a server count of\n   * every document including the soft-deleted, and is read separately below.\n   */\n  const [page, setPage] = useState(0)\n  const [pageSize, setPageSize] = useState(TABLE_PAGE_SIZE_DEFAULT)\n  const visibleRedirects = useMemo(\n    () => redirects.slice(page * pageSize, page * pageSize + pageSize),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [redirectDocs, page, pageSize],\n  )\n\n  /**\n   * What the ENFORCING route counts, which is not what this page was counting.\n   *\n   * `hosts/{id}/redirects` is read here as an unordered `limit(200)` window\n   * and then filtered to drop soft-deleted rows, and that filtered length was\n   * feeding both `checkQuota('redirectsPerHost')` and the readout beside it.\n   * The route in `app/api/hosts/resources` counts the collection plainly —\n   * `collectionRef.count()`, every document, soft-deleted ones included — so\n   * the two disagreed on both counts at once: a rule deleted in this console\n   * still occupies a slot on the server, and a site past 200 rules has rows\n   * the window never saw.\n   *\n   * The visible effect is the worst kind: the page shows room, the author\n   * fills in the form, and the save is refused by a server counting something\n   * else. Same shape as AGL-1716.\n   *\n   * An aggregation query, so it costs one read unit per thousand documents\n   * rather than reading them. Re-run when the document set changes, which\n   * covers an add; a soft delete leaves the document in place and so does not\n   * move this number — correctly, because it does not move the server's\n   * either.\n   *\n   * Only the COUNT is corrected here. Whether a soft-deleted rule should go on\n   * occupying a slot is the quota RULE, and that lives with the enforcing\n   * route.\n   */\n  const [enforcedCount, setEnforcedCount] = useState<number | null>(null)\n  const redirectDocCount = redirectDocs?.length ?? 0\n\n  /**\n   * `null` when the count cannot be taken, never a number.\n   *\n   * `try`, not `.catch()`: `getCountFromServer` validates its reference and\n   * THROWS synchronously on a bad one, so a rejection handler alone leaves the\n   * error to escape the effect and take the page down with it. Unreadable is\n   * also not zero — answering zero would tell an author at their cap that the\n   * whole allowance is free.\n   */\n  const countRedirects = useCallback(async (): Promise<number | null> => {\n    try {\n      const snapshot = await getCountFromServer(\n        collection(firestore, 'hosts', hostId, 'redirects'),\n      )\n      return snapshot.data().count\n    } catch {\n      return null\n    }\n  }, [firestore, hostId])\n\n  useEffect(() => {\n    let active = true\n    void countRedirects().then((count) => {\n      if (active && count != null) setEnforcedCount(count)\n    })\n    return () => {\n      active = false\n    }\n  }, [countRedirects, redirectDocCount])\n\n  const [draft, setDraft] = useState<RedirectDraft | null>(null)\n  const [testPath, setTestPath] = useState('')\n\n  // Host routing map for the screen-collision warning (AGL-156 spec).\n  const { data: host } = useFirestoreDoc<any>(\n    () => doc(firestore, 'hosts', hostId),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n\n  // Sampled hit counts (AGL-157): summed from the last 30 analytics day\n  // docs' `redirects` maps written by enforcement. Counts are sampled —\n  // one per ISR revalidation window with traffic, not per request.\n  const [hits, setHits] = useState<Record<string, number> | null>(null)\n  useEffect(() => {\n    if (!entitled) return\n    let active = true\n    const ids = Array.from({ length: 30 }, (_, index) => {\n      const date = new Date()\n      date.setDate(date.getDate() - index)\n      return date.toISOString().slice(0, 10)\n    })\n    void Promise.all(\n      ids.map((id) =>\n        getDoc(doc(firestore, 'hosts', hostId, 'analytics', id))\n          .then((snapshot) => (snapshot.get('redirects') ?? {}) as Record<string, number>)\n          .catch(() => ({}) as Record<string, number>),\n      ),\n    ).then((days) => {\n      if (!active) return\n      const totals: Record<string, number> = {}\n      for (const dayMap of days) {\n        for (const [redirectId, count] of Object.entries(dayMap)) {\n          totals[redirectId] = (totals[redirectId] ?? 0) + Number(count)\n        }\n      }\n      setHits(totals)\n    })\n    return () => {\n      active = false\n    }\n  }, [entitled, firestore, hostId])\n  const idKey = (value: string) => value.replace(/[.$#[\\]/]/g, '_')\n  const totalHits = Object.values(hits ?? {}).reduce(\n    (sum, count) => sum + count,\n    0,\n  )\n\n  const handleAdd = useCallback(() => {\n    if (!entitled) {\n      return void enqueueSnackbar(\n        'URL redirects require a Starter plan — see Billing to upgrade',\n        { variant: 'warning', persist: false },\n      )\n    }\n    /*\n     * The SERVER's count, not the rows on screen — the whole point of this\n     * fix. Read from the polled value rather than re-counted on the click:\n     * this gate is a courtesy that spares the author a form they are about to\n     * be refused, the route is the actual enforcer, and making the button\n     * await an aggregation would delay the dialog on every press to sharpen a\n     * number the server re-checks anyway.\n     *\n     * `null` means the count could not be read, and that lets the add through:\n     * refusing on a number we do not have would block an author who may well\n     * be inside their cap.\n     */\n    const quota = checkQuota(org, 'redirectsPerHost', enforcedCount ?? 0)\n    if (!quota.allowed) {\n      return void enqueueSnackbar(\n        `Redirect limit reached (${quota.limit}) — upgrade in Billing`,\n        { variant: 'warning', persist: false },\n      )\n    }\n    setDraft({\n      id: null,\n      source: '',\n      destination: '',\n      statusCode: 302,\n      kind: 'exact',\n      priority: REDIRECT_DEFAULT_PRIORITY,\n      // A NEW rule is on: the author is adding it to make it fire, and\n      // enforcement queries `where('enabled', '==', true)`, so a rule created\n      // without the field would never resolve (AGL-1372).\n      enabled: true,\n    })\n  }, [entitled, org, enforcedCount, enqueueSnackbar])\n\n  /**\n   * Tell the tenant a rule changed (best effort, never awaited into the save\n   * outcome). Rule writes are client Firestore writes with no publish step,\n   * and the tenant's rules list sits behind the hour-long\n   * `tenant-data:{hostId}` backstop — without this call a new rule waits out\n   * that TTL while the snackbar above promises ~30 seconds. The route busts\n   * the host tag and drops the source path's cached HTML; a regex pattern has\n   * no single literal path, so it announces `/` for the tag bust alone and\n   * the matching pages catch up on their own ISR window.\n   */\n  const announceRuleChange = useCallback(\n    (source: string | undefined) => {\n      const redirectPath =\n        typeof source === 'string' && source.startsWith('/') ? source : '/'\n      void authorizedFetch(currentUser, '/api/screens/revalidate', {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ hostId, redirectPath }),\n      }).catch(() => undefined)\n    },\n    [currentUser, hostId],\n  )\n\n  const handleSave = useCallback(async () => {\n    if (!draft) return\n    const kind = draft.kind || 'exact'\n    // Shared v2 validation (AGL-375): regex patterns must compile; path\n    // kinds keep the v1 normalization. A destination that wears another\n    // brand is refused (AGL-3447); the site's own hosts never do.\n    const problem = validateRedirectRule(\n      {\n        kind,\n        source: draft.source,\n        destination: draft.destination,\n      },\n      {\n        ownDomains: [\n          typeof host?.cname === 'string' ? host.cname : null,\n          typeof host?.subdomain === 'string' && host.subdomain\n            ? `${host.subdomain}.${TENANT_APEX}`\n            : null,\n        ],\n      },\n    )\n    if (problem) {\n      return void enqueueSnackbar(problem, {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    const source =\n      kind === 'regex'\n        ? draft.source.trim()\n        : (normalizeRedirectSource(draft.source) as string)\n    const destination = normalizeRedirectDestination(\n      draft.destination,\n    ) as string\n    if (kind !== 'regex' && isSelfRedirect({ source, destination })) {\n      return void enqueueSnackbar('That would redirect the path to itself', {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    const duplicate = redirects.find(\n      (redirect: any) =>\n        redirect.source === source &&\n        (redirect.kind ?? 'exact') === kind &&\n        redirect.$id !== draft.id,\n    )\n    if (duplicate) {\n      return void enqueueSnackbar(`A rule for ${source} already exists`, {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    // Chain-loop detection (AGL-156): follow internal destinations through\n    // the rule set; a walk that returns to this source can never execute.\n    if (destination.startsWith('/')) {\n      const bySource = new Map<string, string>(\n        redirects\n          .filter((redirect: any) => redirect.$id !== draft.id)\n          .map((redirect: any) => [redirect.source, redirect.destination]),\n      )\n      let cursor: string | undefined = destination.toLowerCase()\n      for (let hop = 0; hop < 10 && cursor; hop += 1) {\n        if (cursor === source) {\n          return void enqueueSnackbar(\n            'That destination chains back to this rule — a redirect loop',\n            { variant: 'warning', persist: false },\n          )\n        }\n        const next: string | undefined = bySource.get(cursor)\n        cursor = next && next.startsWith('/') ? next.toLowerCase() : undefined\n      }\n    }\n    // Screen-route collision: shadowing a live page may be intentional\n    // (moved pages) — warn, don't block (decision per the issue).\n    const routedPaths = Object.values(\n      (host?.screens ?? {}) as Record<string, string>,\n    ).map((path) => (path === '/' ? '/' : `/${path}`))\n    if (routedPaths.includes(source)) {\n      enqueueSnackbar(\n        `${source} is a published page — the redirect takes precedence`,\n        { variant: 'info', persist: false },\n      )\n    }\n    const fields = {\n      source,\n      destination,\n      statusCode: (REDIRECT_STATUS_CODES as readonly number[]).includes(\n        draft.statusCode,\n      )\n        ? draft.statusCode\n        : 302,\n      kind,\n      priority: Number.isFinite(Number(draft.priority))\n        ? Number(draft.priority)\n        : REDIRECT_DEFAULT_PRIORITY,\n      /**\n       * Whatever the rule already was (AGL-1372). This was `true`, so editing\n       * a **disabled** rule's target silently re-enabled it — a deliberate\n       * \"off\" (a retired campaign, a rule that broke something) undone by a\n       * routine save, changing site routing without the author asking.\n       *\n       * `!== false` rather than the raw value, because the switch below reads\n       * the stored field the same way: absent means on. Enforcement's query is\n       * `where('enabled', '==', true)`, so a rule missing the field is not\n       * served, and normalising it here makes the console's claim true.\n       *\n       * The create default lives in `handleAdd` — a new rule seeds the draft\n       * `true`, so both defaults hold without either one reading the other.\n       */\n      enabled: draft.enabled !== false,\n    }\n    /**\n     * The publisher's stamp on an external destination (AGL-1881).\n     *\n     * `matchRedirect` will not send traffic off the platform without it, and\n     * `cloud/firebase-firestore.rules` admits no write to this collection from\n     * anyone but `canPublishHostContent` — so reaching this line at all is the\n     * approval, and saving is how a rule written before that fix starts firing\n     * again.\n     *\n     * Written on EDIT only. A create rides /api/hosts/resources, which stamps\n     * the same field from the id token's verified uid; sending it from here\n     * would be the client supplying its own provenance, and that route drops\n     * it for exactly that reason.\n     *\n     * Cleared with `deleteField()` when the destination is internal, rather\n     * than left standing. `merge: true` never removes a key, so an edit from\n     * `https://elsewhere.example` back to `/pricing` would otherwise leave a\n     * stamp behind that a LATER edit back to an external target would inherit\n     * — approval carried across a destination nobody approved.\n     */\n    const approval = isExternalRedirectDestination(destination)\n      ? { externalDestinationApprovedBy: currentUser?.uid ?? null }\n      : { externalDestinationApprovedBy: deleteField() }\n    try {\n      if (draft.id) {\n        /**\n         * Edit stays client-direct (no quota consumed) — and is refused when\n         * its seed was never confirmed by the server (AGL-1358); the eight\n         * validation refusals above have all already returned by here.\n         *\n         * `merge: true` is load-bearing, contrary to what this said before\n         * (AGL-1372): `fields` is every key the FORM owns, not every key the\n         * document holds. `lastHitAt` is written by enforcement\n         * (`resolve-redirect`), and `deletedAt` by the delete below — a\n         * replacing write would erase both.\n         *\n         * The guard WRAPS the write. An early return is a shape you can keep\n         * while losing the protection; here the write is only reachable\n         * through the verdict.\n         */\n        const verdict = await writeGuardedBySeed(\n          {\n            subject: 'redirect',\n            unreadable: redirectsStatus === 'error',\n            fromCache: redirectsFromCache,\n          },\n          async () => {\n            await setDoc(\n              doc(firestore, 'hosts', hostId, 'redirects', draft.id),\n              { ...fields, ...approval, updatedAt: Timestamp.now() },\n              { merge: true },\n            )\n          },\n        )\n        // Before `setDraft(null)`, so a refusal keeps the dialog open with\n        // what was typed, in the same warning vocabulary as the validation\n        // refusals above it.\n        if (!verdict.ok) {\n          return void enqueueSnackbar(verdict.message, {\n            variant: 'warning',\n            persist: false,\n          })\n        }\n      } else {\n        // New redirect rides the quota-enforcing resources API (AGL-473) —\n        // it also re-checks the `redirects` entitlement server-side.\n        await createHostResource({ hostId, resource: 'redirect', data: fields })\n      }\n      // The changed rule, and — when an edit moved the source — the path\n      // that just STOPPED redirecting, so its page refreshes too.\n      announceRuleChange(source)\n      if (draft.id) {\n        const previous = (redirects ?? []).find(\n          (rule: any) => rule.$id === draft.id,\n        )?.source\n        if (previous && previous !== source) announceRuleChange(previous)\n      }\n      setDraft(null)\n      enqueueSnackbar('Redirect saved — live within ~30 seconds', {\n        variant: 'success',\n        persist: false,\n      })\n    } catch (error: any) {\n      console.error(error)\n      enqueueSnackbar(error?.message ?? 'An error has occurred', {\n        variant: 'error',\n        allowDuplicate: true,\n      })\n    }\n  }, [\n    draft,\n    redirects,\n    host,\n    firestore,\n    hostId,\n    createHostResource,\n    currentUser,\n    enqueueSnackbar,\n    redirectsStatus,\n    redirectsFromCache,\n    announceRuleChange,\n  ])\n\n  /**\n   * A refusal has to be visible (AGL-1881).\n   *\n   * These two writes were bare `await`s. The rules now gate this collection on\n   * a publishing role, so an `author` reaching either gets a\n   * permission-denied — and an unhandled rejection renders as a control that\n   * flips back with no error, which is the worst way to say no. `handleSave`\n   * has always ended in a snackbar; these now match it.\n   *\n   * The card is not role-gated on purpose: it is entitlement-gated, and the\n   * rules leave READ to the catch-all so an author can still see the rules\n   * that affect the pages they write.\n   */\n  const reportWriteFailure = useCallback(\n    (error: any) => {\n      enqueueSnackbar(\n        error?.code === 'permission-denied'\n          ? 'Changing a redirect needs a publishing role — ask an editor or admin'\n          : (error?.message ?? 'An error has occurred'),\n        { variant: 'warning', persist: false },\n      )\n    },\n    [enqueueSnackbar],\n  )\n\n  const handleToggle = useCallback(\n    (redirect: any) => async (event: { target: { checked: boolean } }) => {\n      try {\n        await updateDoc(\n          doc(firestore, 'hosts', hostId, 'redirects', redirect.$id),\n          { enabled: event.target.checked, updatedAt: Timestamp.now() },\n        )\n        announceRuleChange(redirect.source)\n      } catch (error: any) {\n        reportWriteFailure(error)\n      }\n    },\n    [firestore, hostId, reportWriteFailure, announceRuleChange],\n  )\n\n  const handleDelete = useCallback(\n    (redirect: any) => async () => {\n      const confirmed = await confirm({\n        title: 'Delete this redirect?',\n        description: `${redirect.source} stops redirecting.`,\n        confirmationText: 'Delete',\n        confirmationButtonProps: { color: 'error' },\n      })\n        .then(() => true)\n        .catch(() => false)\n      if (!confirmed) return\n      try {\n        await updateDoc(\n          doc(firestore, 'hosts', hostId, 'redirects', redirect.$id),\n          { deletedAt: Timestamp.now(), enabled: false },\n        )\n        announceRuleChange(redirect.source)\n      } catch (error: any) {\n        reportWriteFailure(error)\n      }\n    },\n    [confirm, firestore, hostId, reportWriteFailure, announceRuleChange],\n  )\n\n  return (\n    <CardDisplay\n      header={'URL redirects'}\n      help={pluginDocsHelp('redirects', { anchor: '#manage-redirects' })}\n      contentGutterX\n      contentGutterY\n    >\n      <Stack spacing={1}>\n        <Typography variant=\"body2\" color=\"text.secondary\">\n          {'Exact-path rules; 302 while testing, promote to 301 when ' +\n            'sure (browsers cache 301 aggressively). Changes go live ' +\n            'within ~30 seconds.'}\n        </Typography>\n        {hits && totalHits > 0 ? (\n          <Typography variant=\"caption\" color=\"text.secondary\">\n            {`${totalHits} redirect hit${totalHits === 1 ? '' : 's'} in ` +\n              'the last 30 days (sampled — one per cache window with ' +\n              'traffic).'}\n          </Typography>\n        ) : null}\n        {visibleRedirects.map((redirect: any) => (\n          <Stack\n            key={redirect.$id}\n            direction=\"row\"\n            spacing={1}\n            sx={{ alignItems: 'center' }}\n          >\n            <Switch\n              size=\"small\"\n              checked={redirect.enabled !== false}\n              onChange={handleToggle(redirect)}\n            />\n            <Chip size=\"small\" label={redirect.statusCode ?? 302} />\n            {(redirect.kind ?? 'exact') !== 'exact' ? (\n              <Chip\n                size=\"small\"\n                variant=\"outlined\"\n                label={redirect.kind}\n              />\n            ) : null}\n            {/* An external rule with no publisher stamp is not being served\n                (AGL-1881) — `matchRedirect` skips it. Say so on the row\n                rather than letting it read as live: a rule that silently\n                stops firing is the failure mode a fail-closed gate owes an\n                explanation for, and pressing Edit → Save is the whole fix.\n                Shown for external destinations only, since that is the only\n                case the gate applies to. */}\n            {isExternalRedirectDestination(redirect.destination) &&\n            !redirect.externalDestinationApprovedBy ? (\n              <Chip\n                size=\"small\"\n                color=\"warning\"\n                variant=\"outlined\"\n                label=\"not serving\"\n                title={\n                  'This rule sends visitors to another site. Open it and ' +\n                  'save to confirm the destination — until then it is ' +\n                  'skipped.'\n                }\n              />\n            ) : null}\n            <Stack sx={{ flex: 1, minWidth: 0 }}>\n              <Typography variant=\"body2\" noWrap>\n                {`${redirect.source} → ${redirect.destination}`}\n              </Typography>\n              {hits || redirect.lastHitAt ? (\n                <Typography variant=\"caption\" color=\"text.secondary\">\n                  {[\n                    hits\n                      ? `${hits[idKey(redirect.$id)] ?? 0} hits (30d, sampled)`\n                      : null,\n                    redirect.lastHitAt\n                      ? `last ${redirect.lastHitAt\n                          .toDate()\n                          .toLocaleString()}`\n                      : null,\n                  ]\n                    .filter(Boolean)\n                    .join(' · ')}\n                </Typography>\n              ) : null}\n            </Stack>\n            <Button\n              size=\"small\"\n              onClick={() =>\n                setDraft({\n                  id: redirect.$id,\n                  source: redirect.source ?? '',\n                  destination: redirect.destination ?? '',\n                  statusCode: redirect.statusCode ?? 302,\n                  kind: redirect.kind ?? 'exact',\n                  priority: redirect.priority ?? REDIRECT_DEFAULT_PRIORITY,\n                  // Read exactly as the switch beside it does (AGL-1372):\n                  // an edit must not be a way to turn a rule back on.\n                  enabled: redirect.enabled !== false,\n                })\n              }\n            >\n              {'Edit'}\n            </Button>\n            <Button\n              size=\"small\"\n              color=\"error\"\n              onClick={handleDelete(redirect)}\n            >\n              {'Delete'}\n            </Button>\n          </Stack>\n        ))}\n        {redirects.length === 0 ? null : (\n          <ListPagination\n            page={page}\n            pageSize={pageSize}\n            rowCount={visibleRedirects.length}\n            // The rules this page HOLDS, after the soft-deleted ones are\n            // dropped. Not the quota figure below it: that is a server\n            // count over every document, soft-deleted rows included,\n            // because a deleted rule still occupies a slot.\n            count={redirects.length}\n            onPageChange={setPage}\n            onPageSizeChange={setPageSize}\n          />\n        )}\n        {redirectsTruncated ? (\n          <Alert severity=\"info\">\n            {`Showing ${REDIRECT_CEILING} rules, ordered by id. This site ` +\n              'has more — the duplicate check and the tester below only ' +\n              'cover the ones listed here.'}\n          </Alert>\n        ) : null}\n        <Button\n          size=\"small\"\n          color=\"primary\"\n          sx={{ alignSelf: 'flex-start' }}\n          onClick={handleAdd}\n        >\n          {'Add redirect'}\n        </Button>\n        {/* The cap, standing rather than only on refusal (AGL-2113).\n            `enforcedCount` is what the enforcing route counts and what\n            `handleAdd` checks against, so the readout, the gate and the\n            server cannot disagree. It is deliberately NOT the number of rows\n            on screen: a soft-deleted rule still occupies a slot, so showing\n            the visible count here would promise room the server refuses. */}\n        <QuotaReadoutComponent\n          ready={org != null && enforcedCount != null}\n          used={enforcedCount ?? 0}\n          limit={\n            checkQuota(org, 'redirectsPerHost', enforcedCount ?? 0).limit\n          }\n          noun=\"redirect\"\n        />\n        {/* Inline tester (AGL-375): same matcher as enforcement. */}\n        <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }}>\n          <TextField\n            size=\"small\"\n            label=\"Test a path\"\n            placeholder=\"/old-page\"\n            value={testPath}\n            onChange={(event) => setTestPath(event.target.value)}\n            sx={{ maxWidth: 260 }}\n          />\n          {testPath.trim() ? (\n            <Typography variant=\"caption\" color=\"text.secondary\">\n              {(() => {\n                const normalized =\n                  normalizeRedirectSource(testPath) ?? testPath.trim()\n                const result = matchRedirect(redirects as any, normalized)\n                return result\n                  ? `→ ${result.destination} (${result.statusCode})`\n                  : 'No rule matches'\n              })()}\n            </Typography>\n          ) : null}\n        </Stack>\n      </Stack>\n\n      <Dialog\n        open={Boolean(draft)}\n        onClose={() => setDraft(null)}\n        maxWidth=\"xs\"\n        fullWidth\n      >\n        <DialogTitle>{draft?.id ? 'Edit redirect' : 'Add redirect'}</DialogTitle>\n        <DialogContent\n          sx={{ display: 'flex', flexDirection: 'column', gap: 1.5, pt: 1 }}\n        >\n          <TextField\n            select\n            label=\"Match mode\"\n            value={draft?.kind ?? 'exact'}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, kind: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n            sx={{ mt: 1 }}\n          >\n            <MenuItem value=\"exact\">{'Exact path'}</MenuItem>\n            <MenuItem value=\"prefix\">{'Path prefix'}</MenuItem>\n            <MenuItem value=\"regex\">{'Regular expression'}</MenuItem>\n          </TextField>\n          <TextField\n            label={draft?.kind === 'regex' ? 'Pattern' : 'From path'}\n            placeholder={\n              draft?.kind === 'regex' ? '/product/(\\\\d+)' : '/old-page'\n            }\n            helperText={\n              draft?.kind === 'regex'\n                ? 'Anchored to the whole path; use $1, $2 in the destination'\n                : draft?.kind === 'prefix'\n                  ? 'Matches the path and everything under it'\n                  : undefined\n            }\n            value={draft?.source ?? ''}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, source: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n            autoFocus\n          />\n          <TextField\n            label=\"To\"\n            placeholder=\"/new-page or https://example.com\"\n            value={draft?.destination ?? ''}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, destination: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n          />\n          <TextField\n            select\n            label=\"Status code\"\n            value={draft?.statusCode ?? 302}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev\n                  ? { ...prev, statusCode: Number(event.target.value) }\n                  : prev,\n              )\n            }\n            size=\"small\"\n          >\n            <MenuItem value={302}>{'302 — temporary (default)'}</MenuItem>\n            <MenuItem value={301}>{'301 — permanent'}</MenuItem>\n            <MenuItem value={307}>{'307 — temporary, keep method'}</MenuItem>\n            <MenuItem value={308}>{'308 — permanent, keep method'}</MenuItem>\n          </TextField>\n          <TextField\n            label=\"Priority\"\n            type=\"number\"\n            helperText=\"Lower fires first when several rules match\"\n            value={draft?.priority ?? REDIRECT_DEFAULT_PRIORITY}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev\n                  ? { ...prev, priority: Number(event.target.value) }\n                  : prev,\n              )\n            }\n            size=\"small\"\n          />\n        </DialogContent>\n        <DialogActions>\n          <Button onClick={() => setDraft(null)}>{'Cancel'}</Button>\n          <Button\n            variant=\"contained\"\n            color=\"primary\"\n            disabled={!draft?.source.trim() || !draft?.destination.trim()}\n            onClick={handleSave}\n          >\n            {'Save redirect'}\n          </Button>\n        </DialogActions>\n      </Dialog>\n    </CardDisplay>\n  )\n}\nRedirectsConsolePage.displayName = 'RedirectsConsolePage'\n\nexport default RedirectsConsolePage\n"],"names":["checkQuota","pluginDocsHelp","TENANT_APEX","isExternalRedirectDestination","isSelfRedirect","matchRedirect","normalizeRedirectDestination","normalizeRedirectSource","REDIRECT_DEFAULT_PRIORITY","validateRedirectRule","REDIRECT_STATUS_CODES","CardDisplay","useConfirmationContext","authorizedFetch","QuotaReadoutComponent","useSnackbar","Timestamp","Alert","Button","Chip","Dialog","DialogActions","DialogContent","DialogTitle","MenuItem","Stack","Switch","TextField","Typography","collection","deleteField","doc","getCountFromServer","getDoc","setDoc","updateDoc","useCallback","useEffect","useMemo","useState","ListPagination","TABLE_PAGE_SIZE_DEFAULT","ceilingedWindow","collectionCeiling","useFirestore","useFirestoreCollection","useFirestoreDoc","useHostResourceApi","useUser","writeGuardedBySeed","REDIRECT_CEILING","RedirectsConsolePage","props","hostId","entitled","org","firestore","createHostResource","data","currentUser","enqueueSnackbar","confirm","redirectDocs","status","redirectsStatus","fromCache","redirectsFromCache","idField","rows","readRedirects","truncated","redirectsTruncated","redirects","filter","redirect","deletedAt","sort","a","b","String","source","localeCompare","page","setPage","pageSize","setPageSize","visibleRedirects","slice","enforcedCount","setEnforcedCount","redirectDocCount","length","countRedirects","snapshot","count","active","then","draft","setDraft","testPath","setTestPath","host","hits","setHits","ids","Array","from","_","index","date","Date","setDate","getDate","toISOString","Promise","all","map","id","get","catch","days","totals","dayMap","redirectId","Object","entries","Number","idKey","value","replace","totalHits","values","reduce","sum","handleAdd","variant","persist","quota","allowed","limit","destination","statusCode","kind","priority","enabled","announceRuleChange","redirectPath","startsWith","method","headers","body","JSON","stringify","undefined","handleSave","problem","ownDomains","cname","subdomain","trim","duplicate","find","$id","bySource","Map","cursor","toLowerCase","hop","next","routedPaths","screens","path","includes","fields","isFinite","approval","externalDestinationApprovedBy","uid","verdict","subject","unreadable","updatedAt","now","merge","ok","message","resource","previous","rule","error","console","allowDuplicate","reportWriteFailure","code","handleToggle","event","target","checked","handleDelete","confirmed","title","description","confirmationText","confirmationButtonProps","color","header","help","anchor","contentGutterX","contentGutterY","spacing","direction","sx","alignItems","size","onChange","label","flex","minWidth","noWrap","lastHitAt","toDate","toLocaleString","Boolean","join","onClick","rowCount","onPageChange","onPageSizeChange","severity","alignSelf","ready","used","noun","placeholder","maxWidth","normalized","result","open","onClose","fullWidth","display","flexDirection","gap","pt","select","prev","mt","helperText","autoFocus","type","disabled","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SAASA,UAAU,EAAEC,cAAc,QAAQ,eAAc;AAEzD,SAASC,WAAW,QAAQ,qCAAoC;AAChE,SAASC,6BAA6B,EAAEC,cAAc,EAAEC,aAAa,EAAEC,4BAA4B,EAAEC,uBAAuB,EAAEC,yBAAyB,EAAEC,oBAAoB,EAAEC,qBAAqB,QAAQ,oBAAU;AACtN,SAASC,WAAW,EAAEC,sBAAsB,QAAQ,uBAAsB;AAC1E,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,OAAOC,2BAA2B,0DAAyD;AAC3F,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,SAAS,QAAQ,+BAA8B;AACxD,SACEC,KAAK,EACLC,MAAM,EACNC,IAAI,EACJC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,WAAW,EACXC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,SAAS,EACTC,UAAU,QACL,gBAAe;AACtB,SACEC,UAAU,EACVC,WAAW,EACXC,GAAG,EACHC,kBAAkB,EAClBC,MAAM,EACNC,MAAM,EACNC,SAAS,QACJ,qBAAoB;AAC3B,SAASC,WAAW,EAAEC,SAAS,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,QAAO;AACjE,SAASC,cAAc,QAAQ,4DAA2D;AAC1F,SAASC,uBAAuB,QAAQ,8CAA6C;AACrF,SACEC,eAAe,EACfC,iBAAiB,EACjBC,YAAY,EACZC,sBAAsB,EACtBC,eAAe,EACfC,kBAAkB,EAClBC,OAAO,EACPC,kBAAkB,QACb,iCAAgC;AAEvC;;;;;;;;;CASC,GACD,MAAMC,mBAAmB;AAqBzB;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,SAASC,qBAAqBC,KAA6B;;IAChE,MAAM,EAAEC,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGH;IAClC,MAAMI,YAAYZ;IAClB,MAAMa,qBAAqBV;IAC3B,MAAM,EAAEW,MAAMC,WAAW,EAAE,GAAGX;IAC9B,MAAM,EAAEY,eAAe,EAAE,GAAG7C;IAC5B,MAAM,EAAE8C,OAAO,EAAE,GAAGjD;IAEpB,MAAM,EACJ8C,MAAMI,YAAY,EAClBC,QAAQC,eAAe,EACvB;;;;;;;;;;KAUC,GACDC,WAAWC,kBAAkB,EAC9B,GAAGrB,uBACF;;;;;;;;;;;;;;;;;KAiBC,GACD,IACEF,kBACEd,WAAW2B,WAAW,SAASH,QAAQ,cACvCH,mBAEJ;QAACM;QAAWH;KAAO,EACnB;QAAEc,SAAS;IAAM;IAEnB,MAAM,EAAEC,MAAMC,aAAa,EAAEC,WAAWC,kBAAkB,EAAE,GAC1D7B,gBAAqBoB,cAAcZ;IACrC,MAAMsB,YAAY;WAAIH;KAAc,CACjCI,MAAM,CAAC,CAACC,WAAkB,CAACA,SAASC,SAAS,EAC7CC,IAAI,CAAC,CAACC,GAAQC;YACND,WAAqCC;eAA5CC,QAAOF,YAAAA,EAAEG,MAAM,YAARH,YAAY,IAAII,aAAa,CAACF,QAAOD,YAAAA,EAAEE,MAAM,YAARF,YAAY;;IAG5D;;;;;GAKC,GACD,MAAM,CAACI,MAAMC,QAAQ,GAAG5C,SAAS;IACjC,MAAM,CAAC6C,UAAUC,YAAY,GAAG9C,SAASE;IACzC,MAAM6C,mBAAmBhD,QACvB,IAAMkC,UAAUe,KAAK,CAACL,OAAOE,UAAUF,OAAOE,WAAWA,WACzD,uDAAuD;IACvD;QAACtB;QAAcoB;QAAME;KAAS;IAGhC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBC,GACD,MAAM,CAACI,eAAeC,iBAAiB,GAAGlD,SAAwB;IAClE,MAAMmD,2BAAmB5B,gCAAAA,aAAc6B,MAAM,mBAAI;IAEjD;;;;;;;;GAQC,GACD,MAAMC,iBAAiBxD,YAAY;QACjC,IAAI;YACF,MAAMyD,WAAW,MAAM7D,mBACrBH,WAAW2B,WAAW,SAASH,QAAQ;YAEzC,OAAOwC,SAASnC,IAAI,GAAGoC,KAAK;QAC9B,EAAE,eAAM;YACN,OAAO;QACT;IACF,GAAG;QAACtC;QAAWH;KAAO;IAEtBhB,UAAU;QACR,IAAI0D,SAAS;QACb,KAAKH,iBAAiBI,IAAI,CAAC,CAACF;YAC1B,IAAIC,UAAUD,SAAS,MAAML,iBAAiBK;QAChD;QACA,OAAO;YACLC,SAAS;QACX;IACF,GAAG;QAACH;QAAgBF;KAAiB;IAErC,MAAM,CAACO,OAAOC,SAAS,GAAG3D,SAA+B;IACzD,MAAM,CAAC4D,UAAUC,YAAY,GAAG7D,SAAS;IAEzC,oEAAoE;IACpE,MAAM,EAAEmB,MAAM2C,IAAI,EAAE,GAAGvD,gBACrB,IAAMf,IAAIyB,WAAW,SAASH,SAC9B;QAACG;QAAWH;KAAO,EACnB;QAAEc,SAAS;IAAM;IAGnB,sEAAsE;IACtE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,CAACmC,MAAMC,QAAQ,GAAGhE,SAAwC;IAChEF,UAAU;QACR,IAAI,CAACiB,UAAU;QACf,IAAIyC,SAAS;QACb,MAAMS,MAAMC,MAAMC,IAAI,CAAC;YAAEf,QAAQ;QAAG,GAAG,CAACgB,GAAGC;YACzC,MAAMC,OAAO,IAAIC;YACjBD,KAAKE,OAAO,CAACF,KAAKG,OAAO,KAAKJ;YAC9B,OAAOC,KAAKI,WAAW,GAAG1B,KAAK,CAAC,GAAG;QACrC;QACA,KAAK2B,QAAQC,GAAG,CACdX,IAAIY,GAAG,CAAC,CAACC,KACPpF,OAAOF,IAAIyB,WAAW,SAASH,QAAQ,aAAagE,KACjDrB,IAAI,CAAC,CAACH;oBAAcA;wBAAAA,gBAAAA,SAASyB,GAAG,CAAC,wBAAbzB,gBAA6B,CAAC;eAClD0B,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA,KAEnBvB,IAAI,CAAC,CAACwB;YACN,IAAI,CAACzB,QAAQ;YACb,MAAM0B,SAAiC,CAAC;YACxC,KAAK,MAAMC,UAAUF,KAAM;gBACzB,KAAK,MAAM,CAACG,YAAY7B,MAAM,IAAI8B,OAAOC,OAAO,CAACH,QAAS;wBAClCD;oBAAtBA,MAAM,CAACE,WAAW,GAAG,EAACF,qBAAAA,MAAM,CAACE,WAAW,YAAlBF,qBAAsB,KAAKK,OAAOhC;gBAC1D;YACF;YACAS,QAAQkB;QACV;QACA,OAAO;YACL1B,SAAS;QACX;IACF,GAAG;QAACzC;QAAUE;QAAWH;KAAO;IAChC,MAAM0E,QAAQ,CAACC,QAAkBA,MAAMC,OAAO,CAAC,cAAc;IAC7D,MAAMC,YAAYN,OAAOO,MAAM,CAAC7B,eAAAA,OAAQ,CAAC,GAAG8B,MAAM,CAChD,CAACC,KAAKvC,QAAUuC,MAAMvC,OACtB;IAGF,MAAMwC,YAAYlG,YAAY;QAC5B,IAAI,CAACkB,UAAU;YACb,OAAO,KAAKM,gBACV,iEACA;gBAAE2E,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACA;;;;;;;;;;;KAWC,GACD,MAAMC,QAAQzI,WAAWuD,KAAK,oBAAoBiC,wBAAAA,gBAAiB;QACnE,IAAI,CAACiD,MAAMC,OAAO,EAAE;YAClB,OAAO,KAAK9E,gBACV,CAAC,wBAAwB,EAAE6E,MAAME,KAAK,CAAC,sBAAsB,CAAC,EAC9D;gBAAEJ,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACAtC,SAAS;YACPmB,IAAI;YACJrC,QAAQ;YACR4D,aAAa;YACbC,YAAY;YACZC,MAAM;YACNC,UAAUvI;YACV,iEAAiE;YACjE,wEAAwE;YACxE,oDAAoD;YACpDwI,SAAS;QACX;IACF,GAAG;QAAC1F;QAAUC;QAAKiC;QAAe5B;KAAgB;IAElD;;;;;;;;;GASC,GACD,MAAMqF,qBAAqB7G,YACzB,CAAC4C;QACC,MAAMkE,eACJ,OAAOlE,WAAW,YAAYA,OAAOmE,UAAU,CAAC,OAAOnE,SAAS;QAClE,KAAKnE,gBAAgB8C,aAAa,2BAA2B;YAC3DyF,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBAAEnG;gBAAQ6F;YAAa;QAC9C,GAAG3B,KAAK,CAAC,IAAMkC;IACjB,GACA;QAAC9F;QAAaN;KAAO;IAGvB,MAAMqG,aAAatH,YAAY;;QAC7B,IAAI,CAAC6D,OAAO;QACZ,MAAM6C,OAAO7C,MAAM6C,IAAI,IAAI;QAC3B,oEAAoE;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAMa,UAAUlJ,qBACd;YACEqI;YACA9D,QAAQiB,MAAMjB,MAAM;YACpB4D,aAAa3C,MAAM2C,WAAW;QAChC,GACA;YACEgB,YAAY;gBACV,QAAOvD,wBAAAA,KAAMwD,KAAK,MAAK,WAAWxD,KAAKwD,KAAK,GAAG;gBAC/C,QAAOxD,wBAAAA,KAAMyD,SAAS,MAAK,YAAYzD,KAAKyD,SAAS,GACjD,GAAGzD,KAAKyD,SAAS,CAAC,CAAC,EAAE5J,aAAa,GAClC;aACL;QACH;QAEF,IAAIyJ,SAAS;YACX,OAAO,KAAK/F,gBAAgB+F,SAAS;gBACnCpB,SAAS;gBACTC,SAAS;YACX;QACF;QACA,MAAMxD,SACJ8D,SAAS,UACL7C,MAAMjB,MAAM,CAAC+E,IAAI,KAChBxJ,wBAAwB0F,MAAMjB,MAAM;QAC3C,MAAM4D,cAActI,6BAClB2F,MAAM2C,WAAW;QAEnB,IAAIE,SAAS,WAAW1I,eAAe;YAAE4E;YAAQ4D;QAAY,IAAI;YAC/D,OAAO,KAAKhF,gBAAgB,0CAA0C;gBACpE2E,SAAS;gBACTC,SAAS;YACX;QACF;QACA,MAAMwB,YAAYxF,UAAUyF,IAAI,CAC9B,CAACvF;gBAEEA;mBADDA,SAASM,MAAM,KAAKA,UACpB,EAACN,iBAAAA,SAASoE,IAAI,YAAbpE,iBAAiB,aAAaoE,QAC/BpE,SAASwF,GAAG,KAAKjE,MAAMoB,EAAE;;QAE7B,IAAI2C,WAAW;YACb,OAAO,KAAKpG,gBAAgB,CAAC,WAAW,EAAEoB,OAAO,eAAe,CAAC,EAAE;gBACjEuD,SAAS;gBACTC,SAAS;YACX;QACF;QACA,uEAAuE;QACvE,sEAAsE;QACtE,IAAII,YAAYO,UAAU,CAAC,MAAM;YAC/B,MAAMgB,WAAW,IAAIC,IACnB5F,UACGC,MAAM,CAAC,CAACC,WAAkBA,SAASwF,GAAG,KAAKjE,MAAMoB,EAAE,EACnDD,GAAG,CAAC,CAAC1C,WAAkB;oBAACA,SAASM,MAAM;oBAAEN,SAASkE,WAAW;iBAAC;YAEnE,IAAIyB,SAA6BzB,YAAY0B,WAAW;YACxD,IAAK,IAAIC,MAAM,GAAGA,MAAM,MAAMF,QAAQE,OAAO,EAAG;gBAC9C,IAAIF,WAAWrF,QAAQ;oBACrB,OAAO,KAAKpB,gBACV,+DACA;wBAAE2E,SAAS;wBAAWC,SAAS;oBAAM;gBAEzC;gBACA,MAAMgC,OAA2BL,SAAS7C,GAAG,CAAC+C;gBAC9CA,SAASG,QAAQA,KAAKrB,UAAU,CAAC,OAAOqB,KAAKF,WAAW,KAAKb;YAC/D;QACF;QACA,mEAAmE;QACnE,8DAA8D;QAC9D,MAAMgB,cAAc7C,OAAOO,MAAM,SAC9B9B,wBAAAA,KAAMqE,OAAO,mBAAI,CAAC,GACnBtD,GAAG,CAAC,CAACuD,OAAUA,SAAS,MAAM,MAAM,CAAC,CAAC,EAAEA,MAAM;QAChD,IAAIF,YAAYG,QAAQ,CAAC5F,SAAS;YAChCpB,gBACE,GAAGoB,OAAO,oDAAoD,CAAC,EAC/D;gBAAEuD,SAAS;gBAAQC,SAAS;YAAM;QAEtC;QACA,MAAMqC,SAAS;YACb7F;YACA4D;YACAC,YAAY,AAACnI,sBAA4CkK,QAAQ,CAC/D3E,MAAM4C,UAAU,IAEd5C,MAAM4C,UAAU,GAChB;YACJC;YACAC,UAAUjB,OAAOgD,QAAQ,CAAChD,OAAO7B,MAAM8C,QAAQ,KAC3CjB,OAAO7B,MAAM8C,QAAQ,IACrBvI;YACJ;;;;;;;;;;;;;OAaC,GACDwI,SAAS/C,MAAM+C,OAAO,KAAK;QAC7B;QACA;;;;;;;;;;;;;;;;;;;KAmBC,GACD,MAAM+B,WAAW5K,8BAA8ByI,eAC3C;YAAEoC,6BAA6B,WAAErH,+BAAAA,YAAasH,GAAG,oBAAI;QAAK,IAC1D;YAAED,+BAA+BlJ;QAAc;QACnD,IAAI;YACF,IAAImE,MAAMoB,EAAE,EAAE;gBACZ;;;;;;;;;;;;;;SAcC,GACD,MAAM6D,UAAU,MAAMjI,mBACpB;oBACEkI,SAAS;oBACTC,YAAYpH,oBAAoB;oBAChCC,WAAWC;gBACb,GACA;oBACE,MAAMhC,OACJH,IAAIyB,WAAW,SAASH,QAAQ,aAAa4C,MAAMoB,EAAE,GACrD,aAAKwD,QAAWE;wBAAUM,WAAWrK,UAAUsK,GAAG;wBAClD;wBAAEC,OAAO;oBAAK;gBAElB;gBAEF,mEAAmE;gBACnE,mEAAmE;gBACnE,qBAAqB;gBACrB,IAAI,CAACL,QAAQM,EAAE,EAAE;oBACf,OAAO,KAAK5H,gBAAgBsH,QAAQO,OAAO,EAAE;wBAC3ClD,SAAS;wBACTC,SAAS;oBACX;gBACF;YACF,OAAO;gBACL,mEAAmE;gBACnE,6DAA6D;gBAC7D,MAAM/E,mBAAmB;oBAAEJ;oBAAQqI,UAAU;oBAAYhI,MAAMmH;gBAAO;YACxE;YACA,mEAAmE;YACnE,4DAA4D;YAC5D5B,mBAAmBjE;YACnB,IAAIiB,MAAMoB,EAAE,EAAE;oBACK;gBAAjB,MAAMsE,YAAW,QAAA,CAACnH,oBAAAA,YAAa,EAAE,EAAEyF,IAAI,CACrC,CAAC2B,OAAcA,KAAK1B,GAAG,KAAKjE,MAAMoB,EAAE,sBADrB,MAEdrC,MAAM;gBACT,IAAI2G,YAAYA,aAAa3G,QAAQiE,mBAAmB0C;YAC1D;YACAzF,SAAS;YACTtC,gBAAgB,4CAA4C;gBAC1D2E,SAAS;gBACTC,SAAS;YACX;QACF,EAAE,OAAOqD,OAAY;;YACnBC,QAAQD,KAAK,CAACA;YACdjI,yBAAgBiI,yBAAAA,MAAOJ,OAAO,oBAAI,yBAAyB;gBACzDlD,SAAS;gBACTwD,gBAAgB;YAClB;QACF;IACF,GAAG;QACD9F;QACAzB;QACA6B;QACA7C;QACAH;QACAI;QACAE;QACAC;QACAI;QACAE;QACA+E;KACD;IAED;;;;;;;;;;;;GAYC,GACD,MAAM+C,qBAAqB5J,YACzB,CAACyJ;;QACCjI,gBACEiI,CAAAA,yBAAAA,MAAOI,IAAI,MAAK,sBACZ,iFACCJ,yBAAAA,MAAOJ,OAAO,mBAAI,yBACvB;YAAElD,SAAS;YAAWC,SAAS;QAAM;IAEzC,GACA;QAAC5E;KAAgB;IAGnB,MAAMsI,eAAe9J,YACnB,CAACsC,WAAkB,OAAOyH;YACxB,IAAI;gBACF,MAAMhK,UACJJ,IAAIyB,WAAW,SAASH,QAAQ,aAAaqB,SAASwF,GAAG,GACzD;oBAAElB,SAASmD,MAAMC,MAAM,CAACC,OAAO;oBAAEhB,WAAWrK,UAAUsK,GAAG;gBAAG;gBAE9DrC,mBAAmBvE,SAASM,MAAM;YACpC,EAAE,OAAO6G,OAAY;gBACnBG,mBAAmBH;YACrB;QACF,GACA;QAACrI;QAAWH;QAAQ2I;QAAoB/C;KAAmB;IAG7D,MAAMqD,eAAelK,YACnB,CAACsC,WAAkB;YACjB,MAAM6H,YAAY,MAAM1I,QAAQ;gBAC9B2I,OAAO;gBACPC,aAAa,GAAG/H,SAASM,MAAM,CAAC,mBAAmB,CAAC;gBACpD0H,kBAAkB;gBAClBC,yBAAyB;oBAAEC,OAAO;gBAAQ;YAC5C,GACG5G,IAAI,CAAC,IAAM,MACXuB,KAAK,CAAC,IAAM;YACf,IAAI,CAACgF,WAAW;YAChB,IAAI;gBACF,MAAMpK,UACJJ,IAAIyB,WAAW,SAASH,QAAQ,aAAaqB,SAASwF,GAAG,GACzD;oBAAEvF,WAAW3D,UAAUsK,GAAG;oBAAItC,SAAS;gBAAM;gBAE/CC,mBAAmBvE,SAASM,MAAM;YACpC,EAAE,OAAO6G,OAAY;gBACnBG,mBAAmBH;YACrB;QACF,GACA;QAAChI;QAASL;QAAWH;QAAQ2I;QAAoB/C;KAAmB;IAGtE,qBACE,MAACtI;QACCkM,QAAQ;QACRC,MAAM7M,eAAe,aAAa;YAAE8M,QAAQ;QAAoB;QAChEC,cAAc;QACdC,cAAc;;0BAEd,MAACxL;gBAAMyL,SAAS;;kCACd,KAACtL;wBAAW2G,SAAQ;wBAAQqE,OAAM;kCAC/B,8DACC,6DACA;;oBAEHtG,QAAQ4B,YAAY,kBACnB,KAACtG;wBAAW2G,SAAQ;wBAAUqE,OAAM;kCACjC,GAAG1E,UAAU,aAAa,EAAEA,cAAc,IAAI,KAAK,IAAI,IAAI,CAAC,GAC3D,2DACA;yBAEF;oBACH5C,iBAAiB8B,GAAG,CAAC,CAAC1C;4BAYOA,sBACxBA,gBAoCa4B;6CAhDjB,MAAC7E;4BAEC0L,WAAU;4BACVD,SAAS;4BACTE,IAAI;gCAAEC,YAAY;4BAAS;;8CAE3B,KAAC3L;oCACC4L,MAAK;oCACLjB,SAAS3H,SAASsE,OAAO,KAAK;oCAC9BuE,UAAUrB,aAAaxH;;8CAEzB,KAACvD;oCAAKmM,MAAK;oCAAQE,KAAK,GAAE9I,uBAAAA,SAASmE,UAAU,YAAnBnE,uBAAuB;;gCAChD,EAACA,iBAAAA,SAASoE,IAAI,YAAbpE,iBAAiB,aAAa,wBAC9B,KAACvD;oCACCmM,MAAK;oCACL/E,SAAQ;oCACRiF,OAAO9I,SAASoE,IAAI;qCAEpB;gCAQH3I,8BAA8BuE,SAASkE,WAAW,KACnD,CAAClE,SAASsG,6BAA6B,iBACrC,KAAC7J;oCACCmM,MAAK;oCACLV,OAAM;oCACNrE,SAAQ;oCACRiF,OAAM;oCACNhB,OACE,2DACA,wDACA;qCAGF;8CACJ,MAAC/K;oCAAM2L,IAAI;wCAAEK,MAAM;wCAAGC,UAAU;oCAAE;;sDAChC,KAAC9L;4CAAW2G,SAAQ;4CAAQoF,MAAM;sDAC/B,GAAGjJ,SAASM,MAAM,CAAC,GAAG,EAAEN,SAASkE,WAAW,EAAE;;wCAEhDtC,QAAQ5B,SAASkJ,SAAS,iBACzB,KAAChM;4CAAW2G,SAAQ;4CAAUqE,OAAM;sDACjC;gDACCtG,OACI,IAAGA,cAAAA,IAAI,CAACyB,MAAMrD,SAASwF,GAAG,EAAE,YAAzB5D,cAA6B,EAAE,oBAAoB,CAAC,GACvD;gDACJ5B,SAASkJ,SAAS,GACd,CAAC,KAAK,EAAElJ,SAASkJ,SAAS,CACvBC,MAAM,GACNC,cAAc,IAAI,GACrB;6CACL,CACErJ,MAAM,CAACsJ,SACPC,IAAI,CAAC;6CAER;;;8CAEN,KAAC9M;oCACCoM,MAAK;oCACLW,SAAS;4CAGGvJ,kBACKA,uBACDA,sBACNA,gBACIA;+CANZwB,SAAS;4CACPmB,IAAI3C,SAASwF,GAAG;4CAChBlF,MAAM,GAAEN,mBAAAA,SAASM,MAAM,YAAfN,mBAAmB;4CAC3BkE,WAAW,GAAElE,wBAAAA,SAASkE,WAAW,YAApBlE,wBAAwB;4CACrCmE,UAAU,GAAEnE,uBAAAA,SAASmE,UAAU,YAAnBnE,uBAAuB;4CACnCoE,IAAI,GAAEpE,iBAAAA,SAASoE,IAAI,YAAbpE,iBAAiB;4CACvBqE,QAAQ,GAAErE,qBAAAA,SAASqE,QAAQ,YAAjBrE,qBAAqBlE;4CAC/B,wDAAwD;4CACxD,oDAAoD;4CACpDwI,SAAStE,SAASsE,OAAO,KAAK;wCAChC;;8CAGD;;8CAEH,KAAC9H;oCACCoM,MAAK;oCACLV,OAAM;oCACNqB,SAAS3B,aAAa5H;8CAErB;;;2BAnFEA,SAASwF,GAAG;;oBAuFpB1F,UAAUmB,MAAM,KAAK,IAAI,qBACxB,KAACnD;wBACC0C,MAAMA;wBACNE,UAAUA;wBACV8I,UAAU5I,iBAAiBK,MAAM;wBACjC,6DAA6D;wBAC7D,2DAA2D;wBAC3D,yDAAyD;wBACzD,gDAAgD;wBAChDG,OAAOtB,UAAUmB,MAAM;wBACvBwI,cAAchJ;wBACdiJ,kBAAkB/I;;oBAGrBd,mCACC,KAACtD;wBAAMoN,UAAS;kCACb,CAAC,QAAQ,EAAEnL,iBAAiB,iCAAiC,CAAC,GAC7D,8DACA;yBAEF;kCACJ,KAAChC;wBACCoM,MAAK;wBACLV,OAAM;wBACNQ,IAAI;4BAAEkB,WAAW;wBAAa;wBAC9BL,SAAS3F;kCAER;;kCAQH,KAACxH;wBACCyN,OAAOhL,OAAO,QAAQiC,iBAAiB;wBACvCgJ,IAAI,EAAEhJ,wBAAAA,gBAAiB;wBACvBmD,OACE3I,WAAWuD,KAAK,oBAAoBiC,wBAAAA,gBAAiB,GAAGmD,KAAK;wBAE/D8F,MAAK;;kCAGP,MAAChN;wBAAM0L,WAAU;wBAAMD,SAAS;wBAAGE,IAAI;4BAAEC,YAAY;wBAAS;;0CAC5D,KAAC1L;gCACC2L,MAAK;gCACLE,OAAM;gCACNkB,aAAY;gCACZ1G,OAAO7B;gCACPoH,UAAU,CAACpB,QAAU/F,YAAY+F,MAAMC,MAAM,CAACpE,KAAK;gCACnDoF,IAAI;oCAAEuB,UAAU;gCAAI;;4BAErBxI,SAAS4D,IAAI,mBACZ,KAACnI;gCAAW2G,SAAQ;gCAAUqE,OAAM;0CACjC,AAAC,CAAA;wCAEErM;oCADF,MAAMqO,cACJrO,2BAAAA,wBAAwB4F,qBAAxB5F,2BAAqC4F,SAAS4D,IAAI;oCACpD,MAAM8E,SAASxO,cAAcmE,WAAkBoK;oCAC/C,OAAOC,SACH,CAAC,EAAE,EAAEA,OAAOjG,WAAW,CAAC,EAAE,EAAEiG,OAAOhG,UAAU,CAAC,CAAC,CAAC,GAChD;gCACN,CAAA;iCAEA;;;;;0BAIR,MAACzH;gBACC0N,MAAMf,QAAQ9H;gBACd8I,SAAS,IAAM7I,SAAS;gBACxByI,UAAS;gBACTK,SAAS;;kCAET,KAACzN;kCAAa0E,CAAAA,yBAAAA,MAAOoB,EAAE,IAAG,kBAAkB;;kCAC5C,MAAC/F;wBACC8L,IAAI;4BAAE6B,SAAS;4BAAQC,eAAe;4BAAUC,KAAK;4BAAKC,IAAI;wBAAE;;0CAEhE,MAACzN;gCACC0N,MAAM;gCACN7B,OAAM;gCACNxF,KAAK,WAAE/B,yBAAAA,MAAO6C,IAAI,oBAAI;gCACtByE,UAAU,CAACpB,QACTjG,SAAS,CAACoJ,OACRA,OAAO,aAAKA;4CAAMxG,MAAMqD,MAAMC,MAAM,CAACpE,KAAK;6CAAKsH;gCAGnDhC,MAAK;gCACLF,IAAI;oCAAEmC,IAAI;gCAAE;;kDAEZ,KAAC/N;wCAASwG,OAAM;kDAAS;;kDACzB,KAACxG;wCAASwG,OAAM;kDAAU;;kDAC1B,KAACxG;wCAASwG,OAAM;kDAAS;;;;0CAE3B,KAACrG;gCACC6L,OAAOvH,CAAAA,yBAAAA,MAAO6C,IAAI,MAAK,UAAU,YAAY;gCAC7C4F,aACEzI,CAAAA,yBAAAA,MAAO6C,IAAI,MAAK,UAAU,oBAAoB;gCAEhD0G,YACEvJ,CAAAA,yBAAAA,MAAO6C,IAAI,MAAK,UACZ,8DACA7C,CAAAA,yBAAAA,MAAO6C,IAAI,MAAK,WACd,6CACAW;gCAERzB,KAAK,WAAE/B,yBAAAA,MAAOjB,MAAM,oBAAI;gCACxBuI,UAAU,CAACpB,QACTjG,SAAS,CAACoJ,OACRA,OAAO,aAAKA;4CAAMtK,QAAQmH,MAAMC,MAAM,CAACpE,KAAK;6CAAKsH;gCAGrDhC,MAAK;gCACLmC,SAAS;;0CAEX,KAAC9N;gCACC6L,OAAM;gCACNkB,aAAY;gCACZ1G,KAAK,WAAE/B,yBAAAA,MAAO2C,WAAW,oBAAI;gCAC7B2E,UAAU,CAACpB,QACTjG,SAAS,CAACoJ,OACRA,OAAO,aAAKA;4CAAM1G,aAAauD,MAAMC,MAAM,CAACpE,KAAK;6CAAKsH;gCAG1DhC,MAAK;;0CAEP,MAAC3L;gCACC0N,MAAM;gCACN7B,OAAM;gCACNxF,KAAK,WAAE/B,yBAAAA,MAAO4C,UAAU,oBAAI;gCAC5B0E,UAAU,CAACpB,QACTjG,SAAS,CAACoJ,OACRA,OACI,aAAKA;4CAAMzG,YAAYf,OAAOqE,MAAMC,MAAM,CAACpE,KAAK;6CAChDsH;gCAGRhC,MAAK;;kDAEL,KAAC9L;wCAASwG,OAAO;kDAAM;;kDACvB,KAACxG;wCAASwG,OAAO;kDAAM;;kDACvB,KAACxG;wCAASwG,OAAO;kDAAM;;kDACvB,KAACxG;wCAASwG,OAAO;kDAAM;;;;0CAEzB,KAACrG;gCACC6L,OAAM;gCACNkC,MAAK;gCACLF,YAAW;gCACXxH,KAAK,WAAE/B,yBAAAA,MAAO8C,QAAQ,oBAAIvI;gCAC1B+M,UAAU,CAACpB,QACTjG,SAAS,CAACoJ,OACRA,OACI,aAAKA;4CAAMvG,UAAUjB,OAAOqE,MAAMC,MAAM,CAACpE,KAAK;6CAC9CsH;gCAGRhC,MAAK;;;;kCAGT,MAACjM;;0CACC,KAACH;gCAAO+M,SAAS,IAAM/H,SAAS;0CAAQ;;0CACxC,KAAChF;gCACCqH,SAAQ;gCACRqE,OAAM;gCACN+C,UAAU,EAAC1J,yBAAAA,MAAOjB,MAAM,CAAC+E,IAAI,OAAM,EAAC9D,yBAAAA,MAAO2C,WAAW,CAACmB,IAAI;gCAC3DkE,SAASvE;0CAER;;;;;;;;AAMb;AACAvG,qBAAqByM,WAAW,GAAG;AAEnC,eAAezM,qBAAoB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/redirects/src/lib/components/redirects-console-page.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { TransferResumeImport } from '@aglyn/aglyn/app-utils/transfer-resume-import'\nimport { checkQuota, pluginDocsHelp, useTransferLauncher } from '@aglyn/aglyn'\nimport { type ConsolePluginPageProps } from '@aglyn/aglyn'\nimport { TENANT_APEX } from '@aglyn/aglyn/app-utils/tenant-apex'\nimport { findDuplicateRedirect, isExternalRedirectDestination, isSelfRedirect, matchRedirect, normalizeRedirectDestination, normalizeRedirectSource, REDIRECT_DEFAULT_PRIORITY, redirectHitKey, redirectSourceIsLivePage, validateRedirectRule, REDIRECT_STATUS_CODES, walkRedirectChain } from '../model'\nimport { CardDisplay, useConfirmationContext } from '@aglyn/shared-ui-jsx'\nimport { REDIRECTS_TRANSFER_KEY } from '../transfer/redirects-transfer-fields'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport QuotaReadoutComponent from '@aglyn/shared-ui-jsx/components/quota-readout.component'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { Timestamp } from '@aglyn/shared-util-timestamp'\nimport {\n  Alert,\n  Button,\n  Chip,\n  Dialog,\n  DialogActions,\n  DialogContent,\n  DialogTitle,\n  MenuItem,\n  Stack,\n  Switch,\n  TextField,\n  Typography,\n} from '@mui/material'\nimport {\n  collection,\n  deleteField,\n  doc,\n  getCountFromServer,\n  getDoc,\n  setDoc,\n  updateDoc,\n} from 'firebase/firestore'\nimport { useCallback, useEffect, useMemo, useState } from 'react'\nimport { ListPagination } from '@aglyn/shared-ui-jsx/components/list-pagination.component'\nimport { TABLE_PAGE_SIZE_DEFAULT } from '@aglyn/shared-ui-jsx/const/table-pagination'\nimport {\n  ceilingedWindow,\n  collectionCeiling,\n  useFirestore,\n  useFirestoreCollection,\n  useFirestoreDoc,\n  useHostResourceApi,\n  useUser,\n  writeGuardedBySeed,\n} from '@aglyn/tenant-feature-instance'\n\n/**\n * How many redirect documents this page reads.\n *\n * A CEILING, not a page size. Everything the page decides is computed over\n * the WHOLE rule set: the duplicate-source check, the chain-loop walk that\n * follows internal destinations through the rules, and the inline tester that\n * runs the enforcement matcher. A server page would give each of them a\n * tenth of the rules to reason about, and the duplicate check would then\n * create exactly the collision it exists to prevent.\n */\nconst REDIRECT_CEILING = 200\n\ninterface RedirectDraft {\n  id: string | null\n  source: string\n  destination: string\n  statusCode: number\n  /** Match mode (AGL-375): exact | prefix | regex. */\n  kind: string\n  /** Lower fires first. */\n  priority: number\n  /**\n   * The rule's on/off state, carried through the editor rather than reset by\n   * it (AGL-1372). The save used to hardcode `true`, so changing a **disabled**\n   * rule's target turned it back on and rerouted the site without the author\n   * asking. A new rule seeds this `true`; an edit seeds it from the stored\n   * rule, which is also where the row's switch reads from.\n   */\n  enabled: boolean\n}\n\n/**\n * Redirect manager (AGL-156): CRUD over `hosts/{hostId}/redirects` with\n * the shared AGL-154 validation (normalized sources, https-or-internal\n * destinations, self-redirect refusal, duplicate-source check). Paid\n * (`redirects` flag + `redirectsPerHost` quota); rules take effect on the\n * site within ~30 seconds (AGL-155 ISR window).\n *\n * The plan gate is the SHELL's, and it runs before this component exists\n * (AGL-2484): the console resolves `redirects` from the org billing doc and\n * renders its own refusal notice in place of the surface, so this card is\n * only ever mounted for an entitled org and states no plan terms of its own.\n * Redirects registers no `upgradeNotice` override because it is a genuine\n * upgrade — free denies it, Starter and above grant it — which makes the\n * shell's plan-derived sentence the accurate one already.\n *\n * `entitled` is still read below, where it is not redundant: it holds back\n * the thirty analytics day-doc reads behind the hit counts, and refuses the\n * add path ahead of the server that enforces it.\n */\nexport function RedirectsConsolePage(props: ConsolePluginPageProps) {\n  const { hostId, entitled, org } = props\n  const firestore = useFirestore()\n  const createHostResource = useHostResourceApi()\n  const { data: currentUser } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n\n  const {\n    data: redirectDocs,\n    status: redirectsStatus,\n    /**\n     * The rows this editor is seeded from are unconfirmed by the server\n     * (AGL-1358). Editing copies every field the form owns out of the stored\n     * rule and writes all of them back, so `merge: true` protects only the\n     * fields written elsewhere (`lastHitAt`, `deletedAt`). This is the site\n     * where a rollback is hardest to undo: a reverted `destination` on a\n     * **301** is cached by every browser that has already followed it, so the\n     * stale target outlives the fix in the console. `kind` reverting from\n     * exact to prefix silently widens a rule over a whole subtree, and\n     * `priority` reorders which rule fires when several match.\n     */\n    fromCache: redirectsFromCache,\n  } = useFirestoreCollection<any>(\n    /*\n     * ORDERED AND CEILINGED, with a probe (AGL-2501).\n     *\n     * `limit(200)` alone is answered in DOCUMENT-ID order and the ids are\n     * generated, so the window was a pseudo-random two hundred of the site's\n     * rules — sorted by `source` in the browser afterwards, which is what\n     * made it invisible: the rules on screen run alphabetically and are\n     * simply the wrong rules, and the ones missing leave no gap to notice.\n     *\n     * `orderBy('source')` is the tempting fix and the dangerous one. It\n     * matches only documents that HAVE the field, and nothing validates\n     * `source` for presence — `/api/hosts/resources` stores an allow-list of\n     * fields and checks none of them — so a rule saved without one would\n     * vanish from this page while still redirecting live traffic. The\n     * document NAME cannot be absent, so the walk is total: every rule is\n     * reachable, and the alphabetical order stays where it belongs, in the\n     * sort below over a window the page holds whole.\n     */\n    () =>\n      collectionCeiling(\n        collection(firestore, 'hosts', hostId, 'redirects'),\n        REDIRECT_CEILING,\n      ),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  const { rows: readRedirects, truncated: redirectsTruncated } =\n    ceilingedWindow<any>(redirectDocs, REDIRECT_CEILING)\n  const redirects = [...readRedirects]\n    .filter((redirect: any) => !redirect.deletedAt)\n    .sort((a: any, b: any) =>\n      String(a.source ?? '').localeCompare(String(b.source ?? '')),\n    )\n\n  /*\n   * The page is a SLICE of the ceiling, which is what the three whole-set\n   * consumers above require. The count is the rules this page HOLDS, after\n   * soft-deleted ones are dropped — not the quota, which is a server count of\n   * every document including the soft-deleted, and is read separately below.\n   */\n  const [page, setPage] = useState(0)\n  const [pageSize, setPageSize] = useState(TABLE_PAGE_SIZE_DEFAULT)\n  const visibleRedirects = useMemo(\n    () => redirects.slice(page * pageSize, page * pageSize + pageSize),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [redirectDocs, page, pageSize],\n  )\n\n  /**\n   * What the ENFORCING route counts, which is not what this page was counting.\n   *\n   * `hosts/{id}/redirects` is read here as an unordered `limit(200)` window\n   * and then filtered to drop soft-deleted rows, and that filtered length was\n   * feeding both `checkQuota('redirectsPerHost')` and the readout beside it.\n   * The route in `app/api/hosts/resources` counts the collection plainly —\n   * `collectionRef.count()`, every document, soft-deleted ones included — so\n   * the two disagreed on both counts at once: a rule deleted in this console\n   * still occupies a slot on the server, and a site past 200 rules has rows\n   * the window never saw.\n   *\n   * The visible effect is the worst kind: the page shows room, the author\n   * fills in the form, and the save is refused by a server counting something\n   * else. Same shape as AGL-1716.\n   *\n   * An aggregation query, so it costs one read unit per thousand documents\n   * rather than reading them. Re-run when the document set changes, which\n   * covers an add; a soft delete leaves the document in place and so does not\n   * move this number — correctly, because it does not move the server's\n   * either.\n   *\n   * Only the COUNT is corrected here. Whether a soft-deleted rule should go on\n   * occupying a slot is the quota RULE, and that lives with the enforcing\n   * route.\n   */\n  const [enforcedCount, setEnforcedCount] = useState<number | null>(null)\n  const redirectDocCount = redirectDocs?.length ?? 0\n\n  /**\n   * `null` when the count cannot be taken, never a number.\n   *\n   * `try`, not `.catch()`: `getCountFromServer` validates its reference and\n   * THROWS synchronously on a bad one, so a rejection handler alone leaves the\n   * error to escape the effect and take the page down with it. Unreadable is\n   * also not zero — answering zero would tell an author at their cap that the\n   * whole allowance is free.\n   */\n  const countRedirects = useCallback(async (): Promise<number | null> => {\n    try {\n      const snapshot = await getCountFromServer(\n        collection(firestore, 'hosts', hostId, 'redirects'),\n      )\n      return snapshot.data().count\n    } catch {\n      return null\n    }\n  }, [firestore, hostId])\n\n  useEffect(() => {\n    let active = true\n    void countRedirects().then((count) => {\n      if (active && count != null) setEnforcedCount(count)\n    })\n    return () => {\n      active = false\n    }\n  }, [countRedirects, redirectDocCount])\n\n  const [draft, setDraft] = useState<RedirectDraft | null>(null)\n  const [testPath, setTestPath] = useState('')\n\n  // Host routing map for the screen-collision warning (AGL-156 spec).\n  const { data: host } = useFirestoreDoc<any>(\n    () => doc(firestore, 'hosts', hostId),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n\n  // Sampled hit counts (AGL-157): summed from the last 30 analytics day\n  // docs' `redirects` maps written by enforcement. Counts are sampled —\n  // one per ISR revalidation window with traffic, not per request.\n  const [hits, setHits] = useState<Record<string, number> | null>(null)\n  useEffect(() => {\n    if (!entitled) return\n    let active = true\n    const ids = Array.from({ length: 30 }, (_, index) => {\n      const date = new Date()\n      date.setDate(date.getDate() - index)\n      return date.toISOString().slice(0, 10)\n    })\n    void Promise.all(\n      ids.map((id) =>\n        getDoc(doc(firestore, 'hosts', hostId, 'analytics', id))\n          .then((snapshot) => (snapshot.get('redirects') ?? {}) as Record<string, number>)\n          .catch(() => ({}) as Record<string, number>),\n      ),\n    ).then((days) => {\n      if (!active) return\n      const totals: Record<string, number> = {}\n      for (const dayMap of days) {\n        for (const [redirectId, count] of Object.entries(dayMap)) {\n          totals[redirectId] = (totals[redirectId] ?? 0) + Number(count)\n        }\n      }\n      setHits(totals)\n    })\n    return () => {\n      active = false\n    }\n  }, [entitled, firestore, hostId])\n  const totalHits = Object.values(hits ?? {}).reduce(\n    (sum, count) => sum + count,\n    0,\n  )\n\n  const handleAdd = useCallback(() => {\n    if (!entitled) {\n      return void enqueueSnackbar(\n        'URL redirects require a Starter plan — see Billing to upgrade',\n        { variant: 'warning', persist: false },\n      )\n    }\n    /*\n     * The SERVER's count, not the rows on screen — the whole point of this\n     * fix. Read from the polled value rather than re-counted on the click:\n     * this gate is a courtesy that spares the author a form they are about to\n     * be refused, the route is the actual enforcer, and making the button\n     * await an aggregation would delay the dialog on every press to sharpen a\n     * number the server re-checks anyway.\n     *\n     * `null` means the count could not be read, and that lets the add through:\n     * refusing on a number we do not have would block an author who may well\n     * be inside their cap.\n     */\n    const quota = checkQuota(org, 'redirectsPerHost', enforcedCount ?? 0)\n    if (!quota.allowed) {\n      return void enqueueSnackbar(\n        `Redirect limit reached (${quota.limit}) — upgrade in Billing`,\n        { variant: 'warning', persist: false },\n      )\n    }\n    setDraft({\n      id: null,\n      source: '',\n      destination: '',\n      statusCode: 302,\n      kind: 'exact',\n      priority: REDIRECT_DEFAULT_PRIORITY,\n      // A NEW rule is on: the author is adding it to make it fire, and\n      // enforcement queries `where('enabled', '==', true)`, so a rule created\n      // without the field would never resolve (AGL-1372).\n      enabled: true,\n    })\n  }, [entitled, org, enforcedCount, enqueueSnackbar])\n\n  /**\n   * Tell the tenant a rule changed (best effort, never awaited into the save\n   * outcome). Rule writes are client Firestore writes with no publish step,\n   * and the tenant's rules list sits behind the hour-long\n   * `tenant-data:{hostId}` backstop — without this call a new rule waits out\n   * that TTL while the snackbar above promises ~30 seconds. The route busts\n   * the host tag and drops the source path's cached HTML; a regex pattern has\n   * no single literal path, so it announces `/` for the tag bust alone and\n   * the matching pages catch up on their own ISR window.\n   */\n  const announceRuleChange = useCallback(\n    (source: string | undefined) => {\n      const redirectPath =\n        typeof source === 'string' && source.startsWith('/') ? source : '/'\n      void authorizedFetch(currentUser, '/api/screens/revalidate', {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ hostId, redirectPath }),\n      }).catch(() => undefined)\n    },\n    [currentUser, hostId],\n  )\n\n  const handleSave = useCallback(async () => {\n    if (!draft) return\n    const kind = draft.kind || 'exact'\n    // Shared v2 validation (AGL-375): regex patterns must compile; path\n    // kinds keep the v1 normalization. A destination that wears another\n    // brand is refused (AGL-3447); the site's own hosts never do.\n    const problem = validateRedirectRule(\n      {\n        kind,\n        source: draft.source,\n        destination: draft.destination,\n      },\n      {\n        ownDomains: [\n          typeof host?.cname === 'string' ? host.cname : null,\n          typeof host?.subdomain === 'string' && host.subdomain\n            ? `${host.subdomain}.${TENANT_APEX}`\n            : null,\n        ],\n      },\n    )\n    if (problem) {\n      return void enqueueSnackbar(problem, {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    const source =\n      kind === 'regex'\n        ? draft.source.trim()\n        : (normalizeRedirectSource(draft.source) as string)\n    const destination = normalizeRedirectDestination(\n      draft.destination,\n    ) as string\n    if (kind !== 'regex' && isSelfRedirect({ source, destination })) {\n      return void enqueueSnackbar('That would redirect the path to itself', {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    const duplicate = findDuplicateRedirect(redirects, {\n      $id: draft.id,\n      source,\n      kind,\n    })\n    if (duplicate) {\n      return void enqueueSnackbar(`A rule for ${source} already exists`, {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    // Chain-loop detection (AGL-156): follow internal destinations through\n    // the rule set; a walk that returns to this source can never execute.\n    if (walkRedirectChain(redirects, { $id: draft.id, source, destination }).loop) {\n      return void enqueueSnackbar(\n        'That destination chains back to this rule — a redirect loop',\n        { variant: 'warning', persist: false },\n      )\n    }\n    // Screen-route collision: shadowing a live page may be intentional\n    // (moved pages) — warn, don't block (decision per the issue).\n    if (redirectSourceIsLivePage(host?.screens, source)) {\n      enqueueSnackbar(\n        `${source} is a published page — the redirect takes precedence`,\n        { variant: 'info', persist: false },\n      )\n    }\n    const fields = {\n      source,\n      destination,\n      statusCode: (REDIRECT_STATUS_CODES as readonly number[]).includes(\n        draft.statusCode,\n      )\n        ? draft.statusCode\n        : 302,\n      kind,\n      priority: Number.isFinite(Number(draft.priority))\n        ? Number(draft.priority)\n        : REDIRECT_DEFAULT_PRIORITY,\n      /**\n       * Whatever the rule already was (AGL-1372). This was `true`, so editing\n       * a **disabled** rule's target silently re-enabled it — a deliberate\n       * \"off\" (a retired campaign, a rule that broke something) undone by a\n       * routine save, changing site routing without the author asking.\n       *\n       * `!== false` rather than the raw value, because the switch below reads\n       * the stored field the same way: absent means on. Enforcement's query is\n       * `where('enabled', '==', true)`, so a rule missing the field is not\n       * served, and normalising it here makes the console's claim true.\n       *\n       * The create default lives in `handleAdd` — a new rule seeds the draft\n       * `true`, so both defaults hold without either one reading the other.\n       */\n      enabled: draft.enabled !== false,\n    }\n    /**\n     * The publisher's stamp on an external destination (AGL-1881).\n     *\n     * `matchRedirect` will not send traffic off the platform without it, and\n     * `cloud/firebase-firestore.rules` admits no write to this collection from\n     * anyone but `canPublishHostContent` — so reaching this line at all is the\n     * approval, and saving is how a rule written before that fix starts firing\n     * again.\n     *\n     * Written on EDIT only. A create rides /api/hosts/resources, which stamps\n     * the same field from the id token's verified uid; sending it from here\n     * would be the client supplying its own provenance, and that route drops\n     * it for exactly that reason.\n     *\n     * Cleared with `deleteField()` when the destination is internal, rather\n     * than left standing. `merge: true` never removes a key, so an edit from\n     * `https://elsewhere.example` back to `/pricing` would otherwise leave a\n     * stamp behind that a LATER edit back to an external target would inherit\n     * — approval carried across a destination nobody approved.\n     */\n    const approval = isExternalRedirectDestination(destination)\n      ? { externalDestinationApprovedBy: currentUser?.uid ?? null }\n      : { externalDestinationApprovedBy: deleteField() }\n    try {\n      if (draft.id) {\n        /**\n         * Edit stays client-direct (no quota consumed) — and is refused when\n         * its seed was never confirmed by the server (AGL-1358); the eight\n         * validation refusals above have all already returned by here.\n         *\n         * `merge: true` is load-bearing, contrary to what this said before\n         * (AGL-1372): `fields` is every key the FORM owns, not every key the\n         * document holds. `lastHitAt` is written by enforcement\n         * (`resolve-redirect`), and `deletedAt` by the delete below — a\n         * replacing write would erase both.\n         *\n         * The guard WRAPS the write. An early return is a shape you can keep\n         * while losing the protection; here the write is only reachable\n         * through the verdict.\n         */\n        const verdict = await writeGuardedBySeed(\n          {\n            subject: 'redirect',\n            unreadable: redirectsStatus === 'error',\n            fromCache: redirectsFromCache,\n          },\n          async () => {\n            await setDoc(\n              doc(firestore, 'hosts', hostId, 'redirects', draft.id),\n              { ...fields, ...approval, updatedAt: Timestamp.now() },\n              { merge: true },\n            )\n          },\n        )\n        // Before `setDraft(null)`, so a refusal keeps the dialog open with\n        // what was typed, in the same warning vocabulary as the validation\n        // refusals above it.\n        if (!verdict.ok) {\n          return void enqueueSnackbar(verdict.message, {\n            variant: 'warning',\n            persist: false,\n          })\n        }\n      } else {\n        // New redirect rides the quota-enforcing resources API (AGL-473) —\n        // it also re-checks the `redirects` entitlement server-side.\n        await createHostResource({ hostId, resource: 'redirect', data: fields })\n      }\n      // The changed rule, and — when an edit moved the source — the path\n      // that just STOPPED redirecting, so its page refreshes too.\n      announceRuleChange(source)\n      if (draft.id) {\n        const previous = (redirects ?? []).find(\n          (rule: any) => rule.$id === draft.id,\n        )?.source\n        if (previous && previous !== source) announceRuleChange(previous)\n      }\n      setDraft(null)\n      enqueueSnackbar('Redirect saved — live within ~30 seconds', {\n        variant: 'success',\n        persist: false,\n      })\n    } catch (error: any) {\n      console.error(error)\n      enqueueSnackbar(error?.message ?? 'An error has occurred', {\n        variant: 'error',\n        allowDuplicate: true,\n      })\n    }\n  }, [\n    draft,\n    redirects,\n    host,\n    firestore,\n    hostId,\n    createHostResource,\n    currentUser,\n    enqueueSnackbar,\n    redirectsStatus,\n    redirectsFromCache,\n    announceRuleChange,\n  ])\n\n  /**\n   * A refusal has to be visible (AGL-1881).\n   *\n   * These two writes were bare `await`s. The rules now gate this collection on\n   * a publishing role, so an `author` reaching either gets a\n   * permission-denied — and an unhandled rejection renders as a control that\n   * flips back with no error, which is the worst way to say no. `handleSave`\n   * has always ended in a snackbar; these now match it.\n   *\n   * The card is not role-gated on purpose: it is entitlement-gated, and the\n   * rules leave READ to the catch-all so an author can still see the rules\n   * that affect the pages they write.\n   */\n  const reportWriteFailure = useCallback(\n    (error: any) => {\n      enqueueSnackbar(\n        error?.code === 'permission-denied'\n          ? 'Changing a redirect needs a publishing role — ask an editor or admin'\n          : (error?.message ?? 'An error has occurred'),\n        { variant: 'warning', persist: false },\n      )\n    },\n    [enqueueSnackbar],\n  )\n\n  const handleToggle = useCallback(\n    (redirect: any) => async (event: { target: { checked: boolean } }) => {\n      try {\n        await updateDoc(\n          doc(firestore, 'hosts', hostId, 'redirects', redirect.$id),\n          { enabled: event.target.checked, updatedAt: Timestamp.now() },\n        )\n        announceRuleChange(redirect.source)\n      } catch (error: any) {\n        reportWriteFailure(error)\n      }\n    },\n    [firestore, hostId, reportWriteFailure, announceRuleChange],\n  )\n\n  const handleDelete = useCallback(\n    (redirect: any) => async () => {\n      const confirmed = await confirm({\n        title: 'Delete this redirect?',\n        description: `${redirect.source} stops redirecting.`,\n        confirmationText: 'Delete',\n        confirmationButtonProps: { color: 'error' },\n      })\n        .then(() => true)\n        .catch(() => false)\n      if (!confirmed) return\n      try {\n        await updateDoc(\n          doc(firestore, 'hosts', hostId, 'redirects', redirect.$id),\n          { deletedAt: Timestamp.now(), enabled: false },\n        )\n        announceRuleChange(redirect.source)\n      } catch (error: any) {\n        reportWriteFailure(error)\n      }\n    },\n    [confirm, firestore, hostId, reportWriteFailure, announceRuleChange],\n  )\n\n  /*\n   * Import and Export, through the console's transfer launcher (`null`\n   * outside the console shell, where there is no workspace to move rules in\n   * or out of). The list above is a live listener, so an import's rules show\n   * up without a refresh.\n   */\n  const transfer = useTransferLauncher()\n  const transferTarget = { resource: REDIRECTS_TRANSFER_KEY, scope: 'host' as const, hostId }\n  // Import for those who may write the records, Export for those who may read them.\n  const canImport = Boolean(transfer?.can('import', transferTarget))\n  const canExport = Boolean(transfer?.can('export', transferTarget))\n  const transferActions =\n    transfer && (canImport || canExport) ? (\n      <Stack direction=\"row\" spacing={1}>\n        {/* An import left unfinished, reopened where it stopped (AGL-3549). */}\n        <TransferResumeImport target={transferTarget} />\n        {canImport && (\n          <Button size=\"small\" onClick={() => transfer.openImport(transferTarget)}>\n            {'Import'}\n          </Button>\n        )}\n        {canExport && (\n          <Button\n            size=\"small\"\n            onClick={() =>\n              transfer.openExport(transferTarget)\n            }\n          >\n            {'Export'}\n          </Button>\n        )}\n      </Stack>\n    ) : null\n\n  return (\n    <CardDisplay\n      header={'URL redirects'}\n      help={pluginDocsHelp('redirects', { anchor: '#manage-redirects' })}\n      HeaderProps={transferActions ? { action: transferActions } : undefined}\n      contentGutterX\n      contentGutterY\n    >\n      <Stack spacing={1}>\n        <Typography variant=\"body2\" color=\"text.secondary\">\n          {'Exact-path rules; 302 while testing, promote to 301 when ' +\n            'sure (browsers cache 301 aggressively). Changes go live ' +\n            'within ~30 seconds.'}\n        </Typography>\n        {hits && totalHits > 0 ? (\n          <Typography variant=\"caption\" color=\"text.secondary\">\n            {`${totalHits} redirect hit${totalHits === 1 ? '' : 's'} in ` +\n              'the last 30 days (sampled — one per cache window with ' +\n              'traffic).'}\n          </Typography>\n        ) : null}\n        {visibleRedirects.map((redirect: any) => (\n          <Stack\n            key={redirect.$id}\n            direction=\"row\"\n            spacing={1}\n            sx={{ alignItems: 'center' }}\n          >\n            <Switch\n              size=\"small\"\n              checked={redirect.enabled !== false}\n              onChange={handleToggle(redirect)}\n            />\n            <Chip size=\"small\" label={redirect.statusCode ?? 302} />\n            {(redirect.kind ?? 'exact') !== 'exact' ? (\n              <Chip\n                size=\"small\"\n                variant=\"outlined\"\n                label={redirect.kind}\n              />\n            ) : null}\n            {/* An external rule with no publisher stamp is not being served\n                (AGL-1881) — `matchRedirect` skips it. Say so on the row\n                rather than letting it read as live: a rule that silently\n                stops firing is the failure mode a fail-closed gate owes an\n                explanation for, and pressing Edit → Save is the whole fix.\n                Shown for external destinations only, since that is the only\n                case the gate applies to. */}\n            {isExternalRedirectDestination(redirect.destination) &&\n            !redirect.externalDestinationApprovedBy ? (\n              <Chip\n                size=\"small\"\n                color=\"warning\"\n                variant=\"outlined\"\n                label=\"not serving\"\n                title={\n                  'This rule sends visitors to another site. Open it and ' +\n                  'save to confirm the destination — until then it is ' +\n                  'skipped.'\n                }\n              />\n            ) : null}\n            <Stack sx={{ flex: 1, minWidth: 0 }}>\n              <Typography variant=\"body2\" noWrap>\n                {`${redirect.source} → ${redirect.destination}`}\n              </Typography>\n              {hits || redirect.lastHitAt ? (\n                <Typography variant=\"caption\" color=\"text.secondary\">\n                  {[\n                    hits\n                      ? `${hits[redirectHitKey(redirect.$id)] ?? 0} hits (30d, sampled)`\n                      : null,\n                    redirect.lastHitAt\n                      ? `last ${redirect.lastHitAt\n                          .toDate()\n                          .toLocaleString()}`\n                      : null,\n                  ]\n                    .filter(Boolean)\n                    .join(' · ')}\n                </Typography>\n              ) : null}\n            </Stack>\n            <Button\n              size=\"small\"\n              onClick={() =>\n                setDraft({\n                  id: redirect.$id,\n                  source: redirect.source ?? '',\n                  destination: redirect.destination ?? '',\n                  statusCode: redirect.statusCode ?? 302,\n                  kind: redirect.kind ?? 'exact',\n                  priority: redirect.priority ?? REDIRECT_DEFAULT_PRIORITY,\n                  // Read exactly as the switch beside it does (AGL-1372):\n                  // an edit must not be a way to turn a rule back on.\n                  enabled: redirect.enabled !== false,\n                })\n              }\n            >\n              {'Edit'}\n            </Button>\n            <Button\n              size=\"small\"\n              color=\"error\"\n              onClick={handleDelete(redirect)}\n            >\n              {'Delete'}\n            </Button>\n          </Stack>\n        ))}\n        {redirects.length === 0 ? null : (\n          <ListPagination\n            page={page}\n            pageSize={pageSize}\n            rowCount={visibleRedirects.length}\n            // The rules this page HOLDS, after the soft-deleted ones are\n            // dropped. Not the quota figure below it: that is a server\n            // count over every document, soft-deleted rows included,\n            // because a deleted rule still occupies a slot.\n            count={redirects.length}\n            onPageChange={setPage}\n            onPageSizeChange={setPageSize}\n          />\n        )}\n        {redirectsTruncated ? (\n          <Alert severity=\"info\">\n            {`Showing ${REDIRECT_CEILING} rules, ordered by id. This site ` +\n              'has more — the duplicate check and the tester below only ' +\n              'cover the ones listed here.'}\n          </Alert>\n        ) : null}\n        <Button\n          size=\"small\"\n          color=\"primary\"\n          sx={{ alignSelf: 'flex-start' }}\n          onClick={handleAdd}\n        >\n          {'Add redirect'}\n        </Button>\n        {/* The cap, standing rather than only on refusal (AGL-2113).\n            `enforcedCount` is what the enforcing route counts and what\n            `handleAdd` checks against, so the readout, the gate and the\n            server cannot disagree. It is deliberately NOT the number of rows\n            on screen: a soft-deleted rule still occupies a slot, so showing\n            the visible count here would promise room the server refuses. */}\n        <QuotaReadoutComponent\n          ready={org != null && enforcedCount != null}\n          used={enforcedCount ?? 0}\n          limit={\n            checkQuota(org, 'redirectsPerHost', enforcedCount ?? 0).limit\n          }\n          noun=\"redirect\"\n        />\n        {/* Inline tester (AGL-375): same matcher as enforcement. */}\n        <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }}>\n          <TextField\n            size=\"small\"\n            label=\"Test a path\"\n            placeholder=\"/old-page\"\n            value={testPath}\n            onChange={(event) => setTestPath(event.target.value)}\n            sx={{ maxWidth: 260 }}\n          />\n          {testPath.trim() ? (\n            <Typography variant=\"caption\" color=\"text.secondary\">\n              {(() => {\n                const normalized =\n                  normalizeRedirectSource(testPath) ?? testPath.trim()\n                const result = matchRedirect(redirects as any, normalized)\n                return result\n                  ? `→ ${result.destination} (${result.statusCode})`\n                  : 'No rule matches'\n              })()}\n            </Typography>\n          ) : null}\n        </Stack>\n      </Stack>\n\n      <Dialog\n        open={Boolean(draft)}\n        onClose={() => setDraft(null)}\n        maxWidth=\"xs\"\n        fullWidth\n      >\n        <DialogTitle>{draft?.id ? 'Edit redirect' : 'Add redirect'}</DialogTitle>\n        <DialogContent\n          sx={{ display: 'flex', flexDirection: 'column', gap: 1.5, pt: 1 }}\n        >\n          <TextField\n            select\n            label=\"Match mode\"\n            value={draft?.kind ?? 'exact'}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, kind: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n            sx={{ mt: 1 }}\n          >\n            <MenuItem value=\"exact\">{'Exact path'}</MenuItem>\n            <MenuItem value=\"prefix\">{'Path prefix'}</MenuItem>\n            <MenuItem value=\"regex\">{'Regular expression'}</MenuItem>\n          </TextField>\n          <TextField\n            label={draft?.kind === 'regex' ? 'Pattern' : 'From path'}\n            placeholder={\n              draft?.kind === 'regex' ? '/product/(\\\\d+)' : '/old-page'\n            }\n            helperText={\n              draft?.kind === 'regex'\n                ? 'Anchored to the whole path; use $1, $2 in the destination'\n                : draft?.kind === 'prefix'\n                  ? 'Matches the path and everything under it'\n                  : undefined\n            }\n            value={draft?.source ?? ''}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, source: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n            autoFocus\n          />\n          <TextField\n            label=\"To\"\n            placeholder=\"/new-page or https://example.com\"\n            value={draft?.destination ?? ''}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, destination: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n          />\n          <TextField\n            select\n            label=\"Status code\"\n            value={draft?.statusCode ?? 302}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev\n                  ? { ...prev, statusCode: Number(event.target.value) }\n                  : prev,\n              )\n            }\n            size=\"small\"\n          >\n            <MenuItem value={302}>{'302 — temporary (default)'}</MenuItem>\n            <MenuItem value={301}>{'301 — permanent'}</MenuItem>\n            <MenuItem value={307}>{'307 — temporary, keep method'}</MenuItem>\n            <MenuItem value={308}>{'308 — permanent, keep method'}</MenuItem>\n          </TextField>\n          <TextField\n            label=\"Priority\"\n            type=\"number\"\n            helperText=\"Lower fires first when several rules match\"\n            value={draft?.priority ?? REDIRECT_DEFAULT_PRIORITY}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev\n                  ? { ...prev, priority: Number(event.target.value) }\n                  : prev,\n              )\n            }\n            size=\"small\"\n          />\n        </DialogContent>\n        <DialogActions>\n          <Button onClick={() => setDraft(null)}>{'Cancel'}</Button>\n          <Button\n            variant=\"contained\"\n            color=\"primary\"\n            disabled={!draft?.source.trim() || !draft?.destination.trim()}\n            onClick={handleSave}\n          >\n            {'Save redirect'}\n          </Button>\n        </DialogActions>\n      </Dialog>\n    </CardDisplay>\n  )\n}\nRedirectsConsolePage.displayName = 'RedirectsConsolePage'\n\nexport default RedirectsConsolePage\n"],"names":["TransferResumeImport","checkQuota","pluginDocsHelp","useTransferLauncher","TENANT_APEX","findDuplicateRedirect","isExternalRedirectDestination","isSelfRedirect","matchRedirect","normalizeRedirectDestination","normalizeRedirectSource","REDIRECT_DEFAULT_PRIORITY","redirectHitKey","redirectSourceIsLivePage","validateRedirectRule","REDIRECT_STATUS_CODES","walkRedirectChain","CardDisplay","useConfirmationContext","REDIRECTS_TRANSFER_KEY","authorizedFetch","QuotaReadoutComponent","useSnackbar","Timestamp","Alert","Button","Chip","Dialog","DialogActions","DialogContent","DialogTitle","MenuItem","Stack","Switch","TextField","Typography","collection","deleteField","doc","getCountFromServer","getDoc","setDoc","updateDoc","useCallback","useEffect","useMemo","useState","ListPagination","TABLE_PAGE_SIZE_DEFAULT","ceilingedWindow","collectionCeiling","useFirestore","useFirestoreCollection","useFirestoreDoc","useHostResourceApi","useUser","writeGuardedBySeed","REDIRECT_CEILING","RedirectsConsolePage","props","hostId","entitled","org","firestore","createHostResource","data","currentUser","enqueueSnackbar","confirm","redirectDocs","status","redirectsStatus","fromCache","redirectsFromCache","idField","rows","readRedirects","truncated","redirectsTruncated","redirects","filter","redirect","deletedAt","sort","a","b","String","source","localeCompare","page","setPage","pageSize","setPageSize","visibleRedirects","slice","enforcedCount","setEnforcedCount","redirectDocCount","length","countRedirects","snapshot","count","active","then","draft","setDraft","testPath","setTestPath","host","hits","setHits","ids","Array","from","_","index","date","Date","setDate","getDate","toISOString","Promise","all","map","id","get","catch","days","totals","dayMap","redirectId","Object","entries","Number","totalHits","values","reduce","sum","handleAdd","variant","persist","quota","allowed","limit","destination","statusCode","kind","priority","enabled","announceRuleChange","redirectPath","startsWith","method","headers","body","JSON","stringify","undefined","handleSave","problem","ownDomains","cname","subdomain","trim","duplicate","$id","loop","screens","fields","includes","isFinite","approval","externalDestinationApprovedBy","uid","verdict","subject","unreadable","updatedAt","now","merge","ok","message","resource","previous","find","rule","error","console","allowDuplicate","reportWriteFailure","code","handleToggle","event","target","checked","handleDelete","confirmed","title","description","confirmationText","confirmationButtonProps","color","transfer","transferTarget","scope","canImport","Boolean","can","canExport","transferActions","direction","spacing","size","onClick","openImport","openExport","header","help","anchor","HeaderProps","action","contentGutterX","contentGutterY","sx","alignItems","onChange","label","flex","minWidth","noWrap","lastHitAt","toDate","toLocaleString","join","rowCount","onPageChange","onPageSizeChange","severity","alignSelf","ready","used","noun","placeholder","value","maxWidth","normalized","result","open","onClose","fullWidth","display","flexDirection","gap","pt","select","prev","mt","helperText","autoFocus","type","disabled","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SAASA,oBAAoB,QAAQ,gDAA+C;AACpF,SAASC,UAAU,EAAEC,cAAc,EAAEC,mBAAmB,QAAQ,eAAc;AAE9E,SAASC,WAAW,QAAQ,qCAAoC;AAChE,SAASC,qBAAqB,EAAEC,6BAA6B,EAAEC,cAAc,EAAEC,aAAa,EAAEC,4BAA4B,EAAEC,uBAAuB,EAAEC,yBAAyB,EAAEC,cAAc,EAAEC,wBAAwB,EAAEC,oBAAoB,EAAEC,qBAAqB,EAAEC,iBAAiB,QAAQ,oBAAU;AAC1S,SAASC,WAAW,EAAEC,sBAAsB,QAAQ,uBAAsB;AAC1E,SAASC,sBAAsB,QAAQ,2CAAuC;AAC9E,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,OAAOC,2BAA2B,0DAAyD;AAC3F,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,SAAS,QAAQ,+BAA8B;AACxD,SACEC,KAAK,EACLC,MAAM,EACNC,IAAI,EACJC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,WAAW,EACXC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,SAAS,EACTC,UAAU,QACL,gBAAe;AACtB,SACEC,UAAU,EACVC,WAAW,EACXC,GAAG,EACHC,kBAAkB,EAClBC,MAAM,EACNC,MAAM,EACNC,SAAS,QACJ,qBAAoB;AAC3B,SAASC,WAAW,EAAEC,SAAS,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,QAAO;AACjE,SAASC,cAAc,QAAQ,4DAA2D;AAC1F,SAASC,uBAAuB,QAAQ,8CAA6C;AACrF,SACEC,eAAe,EACfC,iBAAiB,EACjBC,YAAY,EACZC,sBAAsB,EACtBC,eAAe,EACfC,kBAAkB,EAClBC,OAAO,EACPC,kBAAkB,QACb,iCAAgC;AAEvC;;;;;;;;;CASC,GACD,MAAMC,mBAAmB;AAqBzB;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,SAASC,qBAAqBC,KAA6B;;IAChE,MAAM,EAAEC,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGH;IAClC,MAAMI,YAAYZ;IAClB,MAAMa,qBAAqBV;IAC3B,MAAM,EAAEW,MAAMC,WAAW,EAAE,GAAGX;IAC9B,MAAM,EAAEY,eAAe,EAAE,GAAG7C;IAC5B,MAAM,EAAE8C,OAAO,EAAE,GAAGlD;IAEpB,MAAM,EACJ+C,MAAMI,YAAY,EAClBC,QAAQC,eAAe,EACvB;;;;;;;;;;KAUC,GACDC,WAAWC,kBAAkB,EAC9B,GAAGrB,uBACF;;;;;;;;;;;;;;;;;KAiBC,GACD,IACEF,kBACEd,WAAW2B,WAAW,SAASH,QAAQ,cACvCH,mBAEJ;QAACM;QAAWH;KAAO,EACnB;QAAEc,SAAS;IAAM;IAEnB,MAAM,EAAEC,MAAMC,aAAa,EAAEC,WAAWC,kBAAkB,EAAE,GAC1D7B,gBAAqBoB,cAAcZ;IACrC,MAAMsB,YAAY;WAAIH;KAAc,CACjCI,MAAM,CAAC,CAACC,WAAkB,CAACA,SAASC,SAAS,EAC7CC,IAAI,CAAC,CAACC,GAAQC;YACND,WAAqCC;eAA5CC,QAAOF,YAAAA,EAAEG,MAAM,YAARH,YAAY,IAAII,aAAa,CAACF,QAAOD,YAAAA,EAAEE,MAAM,YAARF,YAAY;;IAG5D;;;;;GAKC,GACD,MAAM,CAACI,MAAMC,QAAQ,GAAG5C,SAAS;IACjC,MAAM,CAAC6C,UAAUC,YAAY,GAAG9C,SAASE;IACzC,MAAM6C,mBAAmBhD,QACvB,IAAMkC,UAAUe,KAAK,CAACL,OAAOE,UAAUF,OAAOE,WAAWA,WACzD,uDAAuD;IACvD;QAACtB;QAAcoB;QAAME;KAAS;IAGhC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBC,GACD,MAAM,CAACI,eAAeC,iBAAiB,GAAGlD,SAAwB;IAClE,MAAMmD,2BAAmB5B,gCAAAA,aAAc6B,MAAM,mBAAI;IAEjD;;;;;;;;GAQC,GACD,MAAMC,iBAAiBxD,YAAY;QACjC,IAAI;YACF,MAAMyD,WAAW,MAAM7D,mBACrBH,WAAW2B,WAAW,SAASH,QAAQ;YAEzC,OAAOwC,SAASnC,IAAI,GAAGoC,KAAK;QAC9B,EAAE,eAAM;YACN,OAAO;QACT;IACF,GAAG;QAACtC;QAAWH;KAAO;IAEtBhB,UAAU;QACR,IAAI0D,SAAS;QACb,KAAKH,iBAAiBI,IAAI,CAAC,CAACF;YAC1B,IAAIC,UAAUD,SAAS,MAAML,iBAAiBK;QAChD;QACA,OAAO;YACLC,SAAS;QACX;IACF,GAAG;QAACH;QAAgBF;KAAiB;IAErC,MAAM,CAACO,OAAOC,SAAS,GAAG3D,SAA+B;IACzD,MAAM,CAAC4D,UAAUC,YAAY,GAAG7D,SAAS;IAEzC,oEAAoE;IACpE,MAAM,EAAEmB,MAAM2C,IAAI,EAAE,GAAGvD,gBACrB,IAAMf,IAAIyB,WAAW,SAASH,SAC9B;QAACG;QAAWH;KAAO,EACnB;QAAEc,SAAS;IAAM;IAGnB,sEAAsE;IACtE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,CAACmC,MAAMC,QAAQ,GAAGhE,SAAwC;IAChEF,UAAU;QACR,IAAI,CAACiB,UAAU;QACf,IAAIyC,SAAS;QACb,MAAMS,MAAMC,MAAMC,IAAI,CAAC;YAAEf,QAAQ;QAAG,GAAG,CAACgB,GAAGC;YACzC,MAAMC,OAAO,IAAIC;YACjBD,KAAKE,OAAO,CAACF,KAAKG,OAAO,KAAKJ;YAC9B,OAAOC,KAAKI,WAAW,GAAG1B,KAAK,CAAC,GAAG;QACrC;QACA,KAAK2B,QAAQC,GAAG,CACdX,IAAIY,GAAG,CAAC,CAACC,KACPpF,OAAOF,IAAIyB,WAAW,SAASH,QAAQ,aAAagE,KACjDrB,IAAI,CAAC,CAACH;oBAAcA;wBAAAA,gBAAAA,SAASyB,GAAG,CAAC,wBAAbzB,gBAA6B,CAAC;eAClD0B,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA,KAEnBvB,IAAI,CAAC,CAACwB;YACN,IAAI,CAACzB,QAAQ;YACb,MAAM0B,SAAiC,CAAC;YACxC,KAAK,MAAMC,UAAUF,KAAM;gBACzB,KAAK,MAAM,CAACG,YAAY7B,MAAM,IAAI8B,OAAOC,OAAO,CAACH,QAAS;wBAClCD;oBAAtBA,MAAM,CAACE,WAAW,GAAG,EAACF,qBAAAA,MAAM,CAACE,WAAW,YAAlBF,qBAAsB,KAAKK,OAAOhC;gBAC1D;YACF;YACAS,QAAQkB;QACV;QACA,OAAO;YACL1B,SAAS;QACX;IACF,GAAG;QAACzC;QAAUE;QAAWH;KAAO;IAChC,MAAM0E,YAAYH,OAAOI,MAAM,CAAC1B,eAAAA,OAAQ,CAAC,GAAG2B,MAAM,CAChD,CAACC,KAAKpC,QAAUoC,MAAMpC,OACtB;IAGF,MAAMqC,YAAY/F,YAAY;QAC5B,IAAI,CAACkB,UAAU;YACb,OAAO,KAAKM,gBACV,iEACA;gBAAEwE,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACA;;;;;;;;;;;KAWC,GACD,MAAMC,QAAQ5I,WAAW6D,KAAK,oBAAoBiC,wBAAAA,gBAAiB;QACnE,IAAI,CAAC8C,MAAMC,OAAO,EAAE;YAClB,OAAO,KAAK3E,gBACV,CAAC,wBAAwB,EAAE0E,MAAME,KAAK,CAAC,sBAAsB,CAAC,EAC9D;gBAAEJ,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACAnC,SAAS;YACPmB,IAAI;YACJrC,QAAQ;YACRyD,aAAa;YACbC,YAAY;YACZC,MAAM;YACNC,UAAUxI;YACV,iEAAiE;YACjE,wEAAwE;YACxE,oDAAoD;YACpDyI,SAAS;QACX;IACF,GAAG;QAACvF;QAAUC;QAAKiC;QAAe5B;KAAgB;IAElD;;;;;;;;;GASC,GACD,MAAMkF,qBAAqB1G,YACzB,CAAC4C;QACC,MAAM+D,eACJ,OAAO/D,WAAW,YAAYA,OAAOgE,UAAU,CAAC,OAAOhE,SAAS;QAClE,KAAKnE,gBAAgB8C,aAAa,2BAA2B;YAC3DsF,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBAAEhG;gBAAQ0F;YAAa;QAC9C,GAAGxB,KAAK,CAAC,IAAM+B;IACjB,GACA;QAAC3F;QAAaN;KAAO;IAGvB,MAAMkG,aAAanH,YAAY;;QAC7B,IAAI,CAAC6D,OAAO;QACZ,MAAM0C,OAAO1C,MAAM0C,IAAI,IAAI;QAC3B,oEAAoE;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAMa,UAAUjJ,qBACd;YACEoI;YACA3D,QAAQiB,MAAMjB,MAAM;YACpByD,aAAaxC,MAAMwC,WAAW;QAChC,GACA;YACEgB,YAAY;gBACV,QAAOpD,wBAAAA,KAAMqD,KAAK,MAAK,WAAWrD,KAAKqD,KAAK,GAAG;gBAC/C,QAAOrD,wBAAAA,KAAMsD,SAAS,MAAK,YAAYtD,KAAKsD,SAAS,GACjD,GAAGtD,KAAKsD,SAAS,CAAC,CAAC,EAAE9J,aAAa,GAClC;aACL;QACH;QAEF,IAAI2J,SAAS;YACX,OAAO,KAAK5F,gBAAgB4F,SAAS;gBACnCpB,SAAS;gBACTC,SAAS;YACX;QACF;QACA,MAAMrD,SACJ2D,SAAS,UACL1C,MAAMjB,MAAM,CAAC4E,IAAI,KAChBzJ,wBAAwB8F,MAAMjB,MAAM;QAC3C,MAAMyD,cAAcvI,6BAClB+F,MAAMwC,WAAW;QAEnB,IAAIE,SAAS,WAAW3I,eAAe;YAAEgF;YAAQyD;QAAY,IAAI;YAC/D,OAAO,KAAK7E,gBAAgB,0CAA0C;gBACpEwE,SAAS;gBACTC,SAAS;YACX;QACF;QACA,MAAMwB,YAAY/J,sBAAsB0E,WAAW;YACjDsF,KAAK7D,MAAMoB,EAAE;YACbrC;YACA2D;QACF;QACA,IAAIkB,WAAW;YACb,OAAO,KAAKjG,gBAAgB,CAAC,WAAW,EAAEoB,OAAO,eAAe,CAAC,EAAE;gBACjEoD,SAAS;gBACTC,SAAS;YACX;QACF;QACA,uEAAuE;QACvE,sEAAsE;QACtE,IAAI5H,kBAAkB+D,WAAW;YAAEsF,KAAK7D,MAAMoB,EAAE;YAAErC;YAAQyD;QAAY,GAAGsB,IAAI,EAAE;YAC7E,OAAO,KAAKnG,gBACV,+DACA;gBAAEwE,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACA,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI/H,yBAAyB+F,wBAAAA,KAAM2D,OAAO,EAAEhF,SAAS;YACnDpB,gBACE,GAAGoB,OAAO,oDAAoD,CAAC,EAC/D;gBAAEoD,SAAS;gBAAQC,SAAS;YAAM;QAEtC;QACA,MAAM4B,SAAS;YACbjF;YACAyD;YACAC,YAAY,AAAClI,sBAA4C0J,QAAQ,CAC/DjE,MAAMyC,UAAU,IAEdzC,MAAMyC,UAAU,GAChB;YACJC;YACAC,UAAUd,OAAOqC,QAAQ,CAACrC,OAAO7B,MAAM2C,QAAQ,KAC3Cd,OAAO7B,MAAM2C,QAAQ,IACrBxI;YACJ;;;;;;;;;;;;;OAaC,GACDyI,SAAS5C,MAAM4C,OAAO,KAAK;QAC7B;QACA;;;;;;;;;;;;;;;;;;;KAmBC,GACD,MAAMuB,WAAWrK,8BAA8B0I,eAC3C;YAAE4B,6BAA6B,UAAE1G,+BAAAA,YAAa2G,GAAG,mBAAI;QAAK,IAC1D;YAAED,+BAA+BvI;QAAc;QACnD,IAAI;YACF,IAAImE,MAAMoB,EAAE,EAAE;gBACZ;;;;;;;;;;;;;;SAcC,GACD,MAAMkD,UAAU,MAAMtH,mBACpB;oBACEuH,SAAS;oBACTC,YAAYzG,oBAAoB;oBAChCC,WAAWC;gBACb,GACA;oBACE,MAAMhC,OACJH,IAAIyB,WAAW,SAASH,QAAQ,aAAa4C,MAAMoB,EAAE,GACrD,aAAK4C,QAAWG;wBAAUM,WAAW1J,UAAU2J,GAAG;wBAClD;wBAAEC,OAAO;oBAAK;gBAElB;gBAEF,mEAAmE;gBACnE,mEAAmE;gBACnE,qBAAqB;gBACrB,IAAI,CAACL,QAAQM,EAAE,EAAE;oBACf,OAAO,KAAKjH,gBAAgB2G,QAAQO,OAAO,EAAE;wBAC3C1C,SAAS;wBACTC,SAAS;oBACX;gBACF;YACF,OAAO;gBACL,mEAAmE;gBACnE,6DAA6D;gBAC7D,MAAM5E,mBAAmB;oBAAEJ;oBAAQ0H,UAAU;oBAAYrH,MAAMuG;gBAAO;YACxE;YACA,mEAAmE;YACnE,4DAA4D;YAC5DnB,mBAAmB9D;YACnB,IAAIiB,MAAMoB,EAAE,EAAE;oBACK;gBAAjB,MAAM2D,YAAW,QAAA,CAACxG,oBAAAA,YAAa,EAAE,EAAEyG,IAAI,CACrC,CAACC,OAAcA,KAAKpB,GAAG,KAAK7D,MAAMoB,EAAE,sBADrB,MAEdrC,MAAM;gBACT,IAAIgG,YAAYA,aAAahG,QAAQ8D,mBAAmBkC;YAC1D;YACA9E,SAAS;YACTtC,gBAAgB,4CAA4C;gBAC1DwE,SAAS;gBACTC,SAAS;YACX;QACF,EAAE,OAAO8C,OAAY;;YACnBC,QAAQD,KAAK,CAACA;YACdvH,yBAAgBuH,yBAAAA,MAAOL,OAAO,oBAAI,yBAAyB;gBACzD1C,SAAS;gBACTiD,gBAAgB;YAClB;QACF;IACF,GAAG;QACDpF;QACAzB;QACA6B;QACA7C;QACAH;QACAI;QACAE;QACAC;QACAI;QACAE;QACA4E;KACD;IAED;;;;;;;;;;;;GAYC,GACD,MAAMwC,qBAAqBlJ,YACzB,CAAC+I;;QACCvH,gBACEuH,CAAAA,yBAAAA,MAAOI,IAAI,MAAK,sBACZ,iFACCJ,yBAAAA,MAAOL,OAAO,mBAAI,yBACvB;YAAE1C,SAAS;YAAWC,SAAS;QAAM;IAEzC,GACA;QAACzE;KAAgB;IAGnB,MAAM4H,eAAepJ,YACnB,CAACsC,WAAkB,OAAO+G;YACxB,IAAI;gBACF,MAAMtJ,UACJJ,IAAIyB,WAAW,SAASH,QAAQ,aAAaqB,SAASoF,GAAG,GACzD;oBAAEjB,SAAS4C,MAAMC,MAAM,CAACC,OAAO;oBAAEjB,WAAW1J,UAAU2J,GAAG;gBAAG;gBAE9D7B,mBAAmBpE,SAASM,MAAM;YACpC,EAAE,OAAOmG,OAAY;gBACnBG,mBAAmBH;YACrB;QACF,GACA;QAAC3H;QAAWH;QAAQiI;QAAoBxC;KAAmB;IAG7D,MAAM8C,eAAexJ,YACnB,CAACsC,WAAkB;YACjB,MAAMmH,YAAY,MAAMhI,QAAQ;gBAC9BiI,OAAO;gBACPC,aAAa,GAAGrH,SAASM,MAAM,CAAC,mBAAmB,CAAC;gBACpDgH,kBAAkB;gBAClBC,yBAAyB;oBAAEC,OAAO;gBAAQ;YAC5C,GACGlG,IAAI,CAAC,IAAM,MACXuB,KAAK,CAAC,IAAM;YACf,IAAI,CAACsE,WAAW;YAChB,IAAI;gBACF,MAAM1J,UACJJ,IAAIyB,WAAW,SAASH,QAAQ,aAAaqB,SAASoF,GAAG,GACzD;oBAAEnF,WAAW3D,UAAU2J,GAAG;oBAAI9B,SAAS;gBAAM;gBAE/CC,mBAAmBpE,SAASM,MAAM;YACpC,EAAE,OAAOmG,OAAY;gBACnBG,mBAAmBH;YACrB;QACF,GACA;QAACtH;QAASL;QAAWH;QAAQiI;QAAoBxC;KAAmB;IAGtE;;;;;GAKC,GACD,MAAMqD,WAAWvM;IACjB,MAAMwM,iBAAiB;QAAErB,UAAUnK;QAAwByL,OAAO;QAAiBhJ;IAAO;IAC1F,kFAAkF;IAClF,MAAMiJ,YAAYC,QAAQJ,4BAAAA,SAAUK,GAAG,CAAC,UAAUJ;IAClD,MAAMK,YAAYF,QAAQJ,4BAAAA,SAAUK,GAAG,CAAC,UAAUJ;IAClD,MAAMM,kBACJP,YAAaG,CAAAA,aAAaG,SAAQ,kBAChC,MAAChL;QAAMkL,WAAU;QAAMC,SAAS;;0BAE9B,KAACnN;gBAAqBiM,QAAQU;;YAC7BE,2BACC,KAACpL;gBAAO2L,MAAK;gBAAQC,SAAS,IAAMX,SAASY,UAAU,CAACX;0BACrD;;YAGJK,2BACC,KAACvL;gBACC2L,MAAK;gBACLC,SAAS,IACPX,SAASa,UAAU,CAACZ;0BAGrB;;;SAIL;IAEN,qBACE,MAAC1L;QACCuM,QAAQ;QACRC,MAAMvN,eAAe,aAAa;YAAEwN,QAAQ;QAAoB;QAChEC,aAAaV,kBAAkB;YAAEW,QAAQX;QAAgB,IAAIpD;QAC7DgE,cAAc;QACdC,cAAc;;0BAEd,MAAC9L;gBAAMmL,SAAS;;kCACd,KAAChL;wBAAWwG,SAAQ;wBAAQ8D,OAAM;kCAC/B,8DACC,6DACA;;oBAEH5F,QAAQyB,YAAY,kBACnB,KAACnG;wBAAWwG,SAAQ;wBAAU8D,OAAM;kCACjC,GAAGnE,UAAU,aAAa,EAAEA,cAAc,IAAI,KAAK,IAAI,IAAI,CAAC,GAC3D,2DACA;yBAEF;oBACHzC,iBAAiB8B,GAAG,CAAC,CAAC1C;4BAYOA,sBACxBA,gBAoCa4B;6CAhDjB,MAAC7E;4BAECkL,WAAU;4BACVC,SAAS;4BACTY,IAAI;gCAAEC,YAAY;4BAAS;;8CAE3B,KAAC/L;oCACCmL,MAAK;oCACLlB,SAASjH,SAASmE,OAAO,KAAK;oCAC9B6E,UAAUlC,aAAa9G;;8CAEzB,KAACvD;oCAAK0L,MAAK;oCAAQc,KAAK,GAAEjJ,uBAAAA,SAASgE,UAAU,YAAnBhE,uBAAuB;;gCAChD,EAACA,iBAAAA,SAASiE,IAAI,YAAbjE,iBAAiB,aAAa,wBAC9B,KAACvD;oCACC0L,MAAK;oCACLzE,SAAQ;oCACRuF,OAAOjJ,SAASiE,IAAI;qCAEpB;gCAQH5I,8BAA8B2E,SAAS+D,WAAW,KACnD,CAAC/D,SAAS2F,6BAA6B,iBACrC,KAAClJ;oCACC0L,MAAK;oCACLX,OAAM;oCACN9D,SAAQ;oCACRuF,OAAM;oCACN7B,OACE,2DACA,wDACA;qCAGF;8CACJ,MAACrK;oCAAM+L,IAAI;wCAAEI,MAAM;wCAAGC,UAAU;oCAAE;;sDAChC,KAACjM;4CAAWwG,SAAQ;4CAAQ0F,MAAM;sDAC/B,GAAGpJ,SAASM,MAAM,CAAC,GAAG,EAAEN,SAAS+D,WAAW,EAAE;;wCAEhDnC,QAAQ5B,SAASqJ,SAAS,iBACzB,KAACnM;4CAAWwG,SAAQ;4CAAU8D,OAAM;sDACjC;gDACC5F,OACI,IAAGA,uBAAAA,IAAI,CAACjG,eAAeqE,SAASoF,GAAG,EAAE,YAAlCxD,uBAAsC,EAAE,oBAAoB,CAAC,GAChE;gDACJ5B,SAASqJ,SAAS,GACd,CAAC,KAAK,EAAErJ,SAASqJ,SAAS,CACvBC,MAAM,GACNC,cAAc,IAAI,GACrB;6CACL,CACExJ,MAAM,CAAC8H,SACP2B,IAAI,CAAC;6CAER;;;8CAEN,KAAChN;oCACC2L,MAAK;oCACLC,SAAS;4CAGGpI,kBACKA,uBACDA,sBACNA,gBACIA;+CANZwB,SAAS;4CACPmB,IAAI3C,SAASoF,GAAG;4CAChB9E,MAAM,GAAEN,mBAAAA,SAASM,MAAM,YAAfN,mBAAmB;4CAC3B+D,WAAW,GAAE/D,wBAAAA,SAAS+D,WAAW,YAApB/D,wBAAwB;4CACrCgE,UAAU,GAAEhE,uBAAAA,SAASgE,UAAU,YAAnBhE,uBAAuB;4CACnCiE,IAAI,GAAEjE,iBAAAA,SAASiE,IAAI,YAAbjE,iBAAiB;4CACvBkE,QAAQ,GAAElE,qBAAAA,SAASkE,QAAQ,YAAjBlE,qBAAqBtE;4CAC/B,wDAAwD;4CACxD,oDAAoD;4CACpDyI,SAASnE,SAASmE,OAAO,KAAK;wCAChC;;8CAGD;;8CAEH,KAAC3H;oCACC2L,MAAK;oCACLX,OAAM;oCACNY,SAASlB,aAAalH;8CAErB;;;2BAnFEA,SAASoF,GAAG;;oBAuFpBtF,UAAUmB,MAAM,KAAK,IAAI,qBACxB,KAACnD;wBACC0C,MAAMA;wBACNE,UAAUA;wBACV+I,UAAU7I,iBAAiBK,MAAM;wBACjC,6DAA6D;wBAC7D,2DAA2D;wBAC3D,yDAAyD;wBACzD,gDAAgD;wBAChDG,OAAOtB,UAAUmB,MAAM;wBACvByI,cAAcjJ;wBACdkJ,kBAAkBhJ;;oBAGrBd,mCACC,KAACtD;wBAAMqN,UAAS;kCACb,CAAC,QAAQ,EAAEpL,iBAAiB,iCAAiC,CAAC,GAC7D,8DACA;yBAEF;kCACJ,KAAChC;wBACC2L,MAAK;wBACLX,OAAM;wBACNsB,IAAI;4BAAEe,WAAW;wBAAa;wBAC9BzB,SAAS3E;kCAER;;kCAQH,KAACrH;wBACC0N,OAAOjL,OAAO,QAAQiC,iBAAiB;wBACvCiJ,IAAI,EAAEjJ,wBAAAA,gBAAiB;wBACvBgD,OACE9I,WAAW6D,KAAK,oBAAoBiC,wBAAAA,gBAAiB,GAAGgD,KAAK;wBAE/DkG,MAAK;;kCAGP,MAACjN;wBAAMkL,WAAU;wBAAMC,SAAS;wBAAGY,IAAI;4BAAEC,YAAY;wBAAS;;0CAC5D,KAAC9L;gCACCkL,MAAK;gCACLc,OAAM;gCACNgB,aAAY;gCACZC,OAAOzI;gCACPuH,UAAU,CAACjC,QAAUrF,YAAYqF,MAAMC,MAAM,CAACkD,KAAK;gCACnDpB,IAAI;oCAAEqB,UAAU;gCAAI;;4BAErB1I,SAASyD,IAAI,mBACZ,KAAChI;gCAAWwG,SAAQ;gCAAU8D,OAAM;0CACjC,AAAC,CAAA;wCAEE/L;oCADF,MAAM2O,cACJ3O,2BAAAA,wBAAwBgG,qBAAxBhG,2BAAqCgG,SAASyD,IAAI;oCACpD,MAAMmF,SAAS9O,cAAcuE,WAAkBsK;oCAC/C,OAAOC,SACH,CAAC,EAAE,EAAEA,OAAOtG,WAAW,CAAC,EAAE,EAAEsG,OAAOrG,UAAU,CAAC,CAAC,CAAC,GAChD;gCACN,CAAA;iCAEA;;;;;0BAIR,MAACtH;gBACC4N,MAAMzC,QAAQtG;gBACdgJ,SAAS,IAAM/I,SAAS;gBACxB2I,UAAS;gBACTK,SAAS;;kCAET,KAAC3N;kCAAa0E,CAAAA,yBAAAA,MAAOoB,EAAE,IAAG,kBAAkB;;kCAC5C,MAAC/F;wBACCkM,IAAI;4BAAE2B,SAAS;4BAAQC,eAAe;4BAAUC,KAAK;4BAAKC,IAAI;wBAAE;;0CAEhE,MAAC3N;gCACC4N,MAAM;gCACN5B,OAAM;gCACNiB,KAAK,WAAE3I,yBAAAA,MAAO0C,IAAI,oBAAI;gCACtB+E,UAAU,CAACjC,QACTvF,SAAS,CAACsJ,OACRA,OAAO,aAAKA;4CAAM7G,MAAM8C,MAAMC,MAAM,CAACkD,KAAK;6CAAKY;gCAGnD3C,MAAK;gCACLW,IAAI;oCAAEiC,IAAI;gCAAE;;kDAEZ,KAACjO;wCAASoN,OAAM;kDAAS;;kDACzB,KAACpN;wCAASoN,OAAM;kDAAU;;kDAC1B,KAACpN;wCAASoN,OAAM;kDAAS;;;;0CAE3B,KAACjN;gCACCgM,OAAO1H,CAAAA,yBAAAA,MAAO0C,IAAI,MAAK,UAAU,YAAY;gCAC7CgG,aACE1I,CAAAA,yBAAAA,MAAO0C,IAAI,MAAK,UAAU,oBAAoB;gCAEhD+G,YACEzJ,CAAAA,yBAAAA,MAAO0C,IAAI,MAAK,UACZ,8DACA1C,CAAAA,yBAAAA,MAAO0C,IAAI,MAAK,WACd,6CACAW;gCAERsF,KAAK,WAAE3I,yBAAAA,MAAOjB,MAAM,oBAAI;gCACxB0I,UAAU,CAACjC,QACTvF,SAAS,CAACsJ,OACRA,OAAO,aAAKA;4CAAMxK,QAAQyG,MAAMC,MAAM,CAACkD,KAAK;6CAAKY;gCAGrD3C,MAAK;gCACL8C,SAAS;;0CAEX,KAAChO;gCACCgM,OAAM;gCACNgB,aAAY;gCACZC,KAAK,WAAE3I,yBAAAA,MAAOwC,WAAW,oBAAI;gCAC7BiF,UAAU,CAACjC,QACTvF,SAAS,CAACsJ,OACRA,OAAO,aAAKA;4CAAM/G,aAAagD,MAAMC,MAAM,CAACkD,KAAK;6CAAKY;gCAG1D3C,MAAK;;0CAEP,MAAClL;gCACC4N,MAAM;gCACN5B,OAAM;gCACNiB,KAAK,WAAE3I,yBAAAA,MAAOyC,UAAU,oBAAI;gCAC5BgF,UAAU,CAACjC,QACTvF,SAAS,CAACsJ,OACRA,OACI,aAAKA;4CAAM9G,YAAYZ,OAAO2D,MAAMC,MAAM,CAACkD,KAAK;6CAChDY;gCAGR3C,MAAK;;kDAEL,KAACrL;wCAASoN,OAAO;kDAAM;;kDACvB,KAACpN;wCAASoN,OAAO;kDAAM;;kDACvB,KAACpN;wCAASoN,OAAO;kDAAM;;kDACvB,KAACpN;wCAASoN,OAAO;kDAAM;;;;0CAEzB,KAACjN;gCACCgM,OAAM;gCACNiC,MAAK;gCACLF,YAAW;gCACXd,KAAK,WAAE3I,yBAAAA,MAAO2C,QAAQ,oBAAIxI;gCAC1BsN,UAAU,CAACjC,QACTvF,SAAS,CAACsJ,OACRA,OACI,aAAKA;4CAAM5G,UAAUd,OAAO2D,MAAMC,MAAM,CAACkD,KAAK;6CAC9CY;gCAGR3C,MAAK;;;;kCAGT,MAACxL;;0CACC,KAACH;gCAAO4L,SAAS,IAAM5G,SAAS;0CAAQ;;0CACxC,KAAChF;gCACCkH,SAAQ;gCACR8D,OAAM;gCACN2D,UAAU,EAAC5J,yBAAAA,MAAOjB,MAAM,CAAC4E,IAAI,OAAM,EAAC3D,yBAAAA,MAAOwC,WAAW,CAACmB,IAAI;gCAC3DkD,SAASvD;0CAER;;;;;;;;AAMb;AACApG,qBAAqB2M,WAAW,GAAG;AAEnC,eAAe3M,qBAAoB"}

package/src/lib/declarations.console-server.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The redirects plugin's CONSOLE-ONLY server declarations, named under
+ * `consoleServerDeclarations` in `plugins.config.json` and run at the
+ * console's boot. The tenant runtime registers none of it.
+ *
+ * The `redirects` transfer resource: a site's redirect rules, imported and
+ * exported through the data-transfer jobs, written through the same checks
+ * as the redirects page and the create route (`transfer/redirects-transfer.ts`).
+ * The catalog, the match keys, the alias dictionaries, the starting policy
+ * and the value comparator are answered from here; every hook that reads or writes loads the Admin SDK with its first
+ * call, so boot pays for none of it.
+ */
+export declare function registerRedirectsConsoleServerDeclarations(): void;

package/src/lib/declarations.console-server.js

@@ -0,0 +1,69 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // The registry's own module, not the `@aglyn/aglyn/server` barrel: boot needs
+// one registry, not the whole server surface.
+import { registerPluginTransferResource } from "@aglyn/aglyn/plugin-manager/plugin-transfer-resources";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+import { REDIRECTS_ALIAS_DICTIONARIES, REDIRECTS_DEFAULT_POLICY, REDIRECTS_MATCH_KEYS, REDIRECTS_TRANSFER_KEY, redirectValuesEqual, redirectsTransferCatalog } from "./transfer/redirects-transfer-fields.js";
+/** The resource that reads and writes, loaded with the first import or export. */ async function load() {
+    return (await import("./transfer/redirects-transfer-console.js")).redirectsTransferResource();
+}
+/**
+ * The redirects plugin's CONSOLE-ONLY server declarations, named under
+ * `consoleServerDeclarations` in `plugins.config.json` and run at the
+ * console's boot. The tenant runtime registers none of it.
+ *
+ * The `redirects` transfer resource: a site's redirect rules, imported and
+ * exported through the data-transfer jobs, written through the same checks
+ * as the redirects page and the create route (`transfer/redirects-transfer.ts`).
+ * The catalog, the match keys, the alias dictionaries, the starting policy
+ * and the value comparator are answered from here; every hook that reads or writes loads the Admin SDK with its first
+ * call, so boot pays for none of it.
+ */ export function registerRedirectsConsoleServerDeclarations() {
+    const resource = {
+        fields: ()=>redirectsTransferCatalog(),
+        matchKeys: REDIRECTS_MATCH_KEYS,
+        aliases: REDIRECTS_ALIAS_DICTIONARIES,
+        // A rule already on the site takes the file's values unless the person
+        // chooses otherwise; the review compares values as the page stores them.
+        defaultPolicy: REDIRECTS_DEFAULT_POLICY,
+        valuesEqual: redirectValuesEqual,
+        match: async (ctx, input)=>{
+            const hooks = await load();
+            if (!hooks.match) throw new Error('The redirects resource has no matching.');
+            return hooks.match(ctx, input);
+        },
+        count: async (ctx, options)=>{
+            var _ref;
+            var _count, _this;
+            return (_ref = (_count = (_this = await load()).count) == null ? void 0 : _count.call(_this, ctx, options)) != null ? _ref : 0;
+        },
+        readPage: async (ctx, cursor, fieldIds, options)=>(await load()).readPage(ctx, cursor, fieldIds, options),
+        lookup: async (ctx, requests)=>(await load()).lookup(ctx, requests),
+        plan: async (ctx, input)=>{
+            const hooks = await load();
+            if (!hooks.plan) throw new Error('The redirects resource has no plan.');
+            return hooks.plan(ctx, input);
+        },
+        apply: async (ctx, chunk, writer)=>(await load()).apply(ctx, chunk, writer),
+        revert: async (ctx, snapshot, decisions)=>(await load()).revert(ctx, snapshot, decisions)
+    };
+    registerPluginTransferResource(REDIRECTS_TRANSFER_KEY, resource, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=declarations.console-server.js.map

package/src/lib/declarations.console-server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/redirects/src/lib/declarations.console-server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry's own module, not the `@aglyn/aglyn/server` barrel: boot needs\n// one registry, not the whole server surface.\nimport {\n  registerPluginTransferResource,\n  type PluginTransferResource,\n  type TransferRecordsHooks,\n} from '@aglyn/aglyn/plugin-manager/plugin-transfer-resources'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport {\n  REDIRECTS_ALIAS_DICTIONARIES,\n  REDIRECTS_DEFAULT_POLICY,\n  REDIRECTS_MATCH_KEYS,\n  REDIRECTS_TRANSFER_KEY,\n  redirectValuesEqual,\n  redirectsTransferCatalog,\n} from './transfer/redirects-transfer-fields'\n\n/** The resource that reads and writes, loaded with the first import or export. */\nasync function load(): Promise<TransferRecordsHooks> {\n  return (await import('./transfer/redirects-transfer-console')).redirectsTransferResource() as TransferRecordsHooks\n}\n\n/**\n * The redirects plugin's CONSOLE-ONLY server declarations, named under\n * `consoleServerDeclarations` in `plugins.config.json` and run at the\n * console's boot. The tenant runtime registers none of it.\n *\n * The `redirects` transfer resource: a site's redirect rules, imported and\n * exported through the data-transfer jobs, written through the same checks\n * as the redirects page and the create route (`transfer/redirects-transfer.ts`).\n * The catalog, the match keys, the alias dictionaries, the starting policy\n * and the value comparator are answered from here; every hook that reads or writes loads the Admin SDK with its first\n * call, so boot pays for none of it.\n */\nexport function registerRedirectsConsoleServerDeclarations(): void {\n  const resource: PluginTransferResource = {\n    fields: () => redirectsTransferCatalog(),\n    matchKeys: REDIRECTS_MATCH_KEYS,\n    aliases: REDIRECTS_ALIAS_DICTIONARIES,\n    // A rule already on the site takes the file's values unless the person\n    // chooses otherwise; the review compares values as the page stores them.\n    defaultPolicy: REDIRECTS_DEFAULT_POLICY,\n    valuesEqual: redirectValuesEqual,\n    match: async (ctx, input) => {\n      const hooks = await load()\n      if (!hooks.match) throw new Error('The redirects resource has no matching.')\n      return hooks.match(ctx, input)\n    },\n    count: async (ctx, options) => (await load()).count?.(ctx, options) ?? 0,\n    readPage: async (ctx, cursor, fieldIds, options) => (await load()).readPage(ctx, cursor, fieldIds, options),\n    lookup: async (ctx, requests) => (await load()).lookup(ctx, requests),\n    plan: async (ctx, input) => {\n      const hooks = await load()\n      if (!hooks.plan) throw new Error('The redirects resource has no plan.')\n      return hooks.plan(ctx, input)\n    },\n    apply: async (ctx, chunk, writer) => (await load()).apply(ctx, chunk, writer),\n    revert: async (ctx, snapshot, decisions) => (await load()).revert(ctx, snapshot, decisions),\n  }\n  registerPluginTransferResource(REDIRECTS_TRANSFER_KEY, resource, { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginTransferResource","BUNDLE_ID","REDIRECTS_ALIAS_DICTIONARIES","REDIRECTS_DEFAULT_POLICY","REDIRECTS_MATCH_KEYS","REDIRECTS_TRANSFER_KEY","redirectValuesEqual","redirectsTransferCatalog","load","redirectsTransferResource","registerRedirectsConsoleServerDeclarations","resource","fields","matchKeys","aliases","defaultPolicy","valuesEqual","match","ctx","input","hooks","Error","count","options","readPage","cursor","fieldIds","lookup","requests","plan","apply","chunk","writer","revert","snapshot","decisions","pluginId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,8CAA8C;AAC9C,SACEA,8BAA8B,QAGzB,wDAAuD;AAC9D,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SACEC,4BAA4B,EAC5BC,wBAAwB,EACxBC,oBAAoB,EACpBC,sBAAsB,EACtBC,mBAAmB,EACnBC,wBAAwB,QACnB,0CAAsC;AAE7C,gFAAgF,GAChF,eAAeC;IACb,OAAO,AAAC,CAAA,MAAM,MAAM,CAAC,2CAAuC,EAAGC,yBAAyB;AAC1F;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASC;IACd,MAAMC,WAAmC;QACvCC,QAAQ,IAAML;QACdM,WAAWT;QACXU,SAASZ;QACT,uEAAuE;QACvE,yEAAyE;QACzEa,eAAeZ;QACfa,aAAaV;QACbW,OAAO,OAAOC,KAAKC;YACjB,MAAMC,QAAQ,MAAMZ;YACpB,IAAI,CAACY,MAAMH,KAAK,EAAE,MAAM,IAAII,MAAM;YAClC,OAAOD,MAAMH,KAAK,CAACC,KAAKC;QAC1B;QACAG,OAAO,OAAOJ,KAAKK;;gBAAY,QAAC;4BAAD,SAAA,CAAC,QAAA,MAAMf,QAAQc,KAAK,qBAApB,YAAC,OAAsBJ,KAAKK,2BAAY;;QACvEC,UAAU,OAAON,KAAKO,QAAQC,UAAUH,UAAY,AAAC,CAAA,MAAMf,MAAK,EAAGgB,QAAQ,CAACN,KAAKO,QAAQC,UAAUH;QACnGI,QAAQ,OAAOT,KAAKU,WAAa,AAAC,CAAA,MAAMpB,MAAK,EAAGmB,MAAM,CAACT,KAAKU;QAC5DC,MAAM,OAAOX,KAAKC;YAChB,MAAMC,QAAQ,MAAMZ;YACpB,IAAI,CAACY,MAAMS,IAAI,EAAE,MAAM,IAAIR,MAAM;YACjC,OAAOD,MAAMS,IAAI,CAACX,KAAKC;QACzB;QACAW,OAAO,OAAOZ,KAAKa,OAAOC,SAAW,AAAC,CAAA,MAAMxB,MAAK,EAAGsB,KAAK,CAACZ,KAAKa,OAAOC;QACtEC,QAAQ,OAAOf,KAAKgB,UAAUC,YAAc,AAAC,CAAA,MAAM3B,MAAK,EAAGyB,MAAM,CAACf,KAAKgB,UAAUC;IACnF;IACAnC,+BAA+BK,wBAAwBM,UAAU;QAAEyB,UAAUnC;IAAU;AACzF"}