@aglyn/plugins-workflows 1.0.0-beta.143

package/src/lib/engine/crm-action-steps.js

@@ -0,0 +1,432 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildCrmEmailActivity, CONTACT_LIFECYCLE_STAGE_LABELS, CONTACT_TAG_MAX_LENGTH, contactFacetPath, CRM_ACTIVITY_LOG_FULL_MESSAGE, CRM_COLLECTIONS, crmActivityLogHasRoom, crmEmailDeliveryTags, crmScopeTokens, crmTaskReminderAfterEdit, normalizeContactEmail, parseCrmMemberRef, readContactFacet, visibleToHost } from "@aglyn/aglyn/server";
+import { consentGroupForSite, countCrmActivitiesForRecord, firebaseAdmin, newCrmActivityRef, orgDataQueryForHost, recomputeCrmNextTaskAt, writeCrmEmailActivity } from "@aglyn/tenant-data-admin";
+// The leaf, not the barrel: this library's specs substitute the barrel
+// wholesale, and the lookup must reach the real index logic under them.
+import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
+import { FieldValue } from "firebase-admin/firestore";
+// The leaves, not the runtime barrel, for the reason `run-event-actions.ts`
+// gives: the specs substitute each one.
+import { OWNER_ASSIGNMENT_REFUSALS, reassignContactOwner } from "@aglyn/tenant-runtime/assign-contact-owner";
+const DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * The contact an event payload names, as this site may see it.
+ *
+ * Id first, because a CRM event carries the document the door just wrote
+ * and a lookup by id is a read, not a query. The address second, through
+ * the org's address index narrowed to this site (AGL-2633), for every
+ * event that predates the CRM and knows only who filled in the form — so
+ * an address a merge folded into another record still reaches the person
+ * who now holds it.
+ */ async function resolveEventContact(hostId, payload) {
+    var _payload_contactId, _hit_data;
+    const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts');
+    const contactId = String((_payload_contactId = payload['contactId']) != null ? _payload_contactId : '').trim();
+    if (contactId) {
+        const doc = await contactsRef.doc(contactId).get();
+        if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {
+            var _doc_data;
+            return {
+                id: doc.id,
+                ref: doc.ref,
+                data: (_doc_data = doc.data()) != null ? _doc_data : {}
+            };
+        }
+    }
+    const hit = await findContactByEmail(contactsRef, payload['email'], {
+        hostId
+    });
+    return hit ? {
+        id: hit.id,
+        ref: hit.ref,
+        data: (_hit_data = hit.data()) != null ? _hit_data : {}
+    } : null;
+}
+/**
+ * The uid a step names for somebody on the team — an owner, an assignee —
+ * resolved against the org's roster, whichever way the step named them.
+ *
+ * A step names a member by uid when a picker wrote it and by address when a
+ * person typed it, and the editor's one text field accepts either — so both
+ * fields are read through `parseCrmMemberRef`, and an address typed into
+ * the uid slot or a uid typed into the address slot still names the person.
+ *
+ * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by
+ * the uid, so a uid costs one document read and must exist: `ownerUid` and
+ * `assigneeUid` are fields every reader resolves as a member, and a
+ * stranger's uid in one is a task nobody on the team can find. An address
+ * is matched on the roster's own `email` field, and two production paths
+ * create a member document WITHOUT one (a host-access re-grant, and an add
+ * whose auth record carried none) — such a member is named by uid, which
+ * is the reason the editor takes one.
+ *
+ * The roster is the only directory consulted. A project-level Auth lookup
+ * by address would resolve people who are not on this organization at all
+ * (AGL-1122). A reference that resolves neither way is an error, not a
+ * stored string.
+ */ async function resolveMemberUid(orgId, named, role) {
+    var _parseCrmMemberRef;
+    const ref = (_parseCrmMemberRef = parseCrmMemberRef(named.uid)) != null ? _parseCrmMemberRef : parseCrmMemberRef(named.email);
+    if (!ref) return {
+        error: `no ${role} named on the step`
+    };
+    if (!orgId) return {
+        error: 'this site has no organization'
+    };
+    const members = firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection('members');
+    if (ref.kind === 'uid') {
+        const member = await members.doc(ref.uid).get();
+        if (member.exists) return {
+            uid: ref.uid,
+            detail: ref.uid
+        };
+        return {
+            error: `no team member with the id ${ref.uid}`
+        };
+    }
+    const byField = (await members.where('email', '==', ref.email).limit(1).get()).docs[0];
+    if (byField) return {
+        uid: byField.id,
+        detail: ref.email
+    };
+    return {
+        error: `no team member with the address ${ref.email}`
+    };
+}
+/**
+ * Runs one CRM step for the person the event names. Never throws for a
+ * missing person, an unknown owner or a site with no org — those are
+ * answered as `error` so the run records them; a Firestore failure
+ * propagates to the executor's catch like every other step's would.
+ */ export async function runCrmActionStep(env, actionId, step, payload, nowMs = Date.now()) {
+    var _contact_data_email, _env_org;
+    const { hostId } = env;
+    const contact = await resolveEventContact(hostId, payload);
+    if (!contact) {
+        var _ref, _payload_contactId;
+        const named = String((_ref = (_payload_contactId = payload['contactId']) != null ? _payload_contactId : payload['email']) != null ? _ref : '').trim();
+        return {
+            error: named ? `no contact this site can see for ${named}` : 'the event names no contact — no contactId or email in its payload'
+        };
+    }
+    /*
+   * THE HOLDER whose facet the write addresses — the site's consent group,
+   * which is the site alone unless the org declared the site one of a set
+   * that presents as one sender. Same resolution the capture doors use, so
+   * a stage set here lands in the facet the console reads.
+   */ const group = await consentGroupForSite(hostId);
+    const facet = readContactFacet(contact.data, group.groupId);
+    const email = String((_contact_data_email = contact.data['email']) != null ? _contact_data_email : '');
+    if (step.type === 'setContactStage') {
+        var _facet_lifecycleStage;
+        const previous = (_facet_lifecycleStage = facet.lifecycleStage) != null ? _facet_lifecycleStage : '';
+        const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage];
+        /*
+     * A stage set to what it already is changes nothing and ANNOUNCES
+     * nothing. The write is skipped so the row's `updatedAt` does not move
+     * for a non-event, and the absent emit is what stops an action that
+     * sets the stage it listens for from re-running on its own write —
+     * the depth guard bounds that chain, this ends it at once.
+     */ if (previous === step.lifecycleStage) {
+            return {
+                detail: `${label} (already)`
+            };
+        }
+        await contact.ref.update({
+            [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        return {
+            detail: label,
+            emit: {
+                event: 'contactStageChanged',
+                payload: {
+                    contactId: contact.id,
+                    email,
+                    lifecycleStage: step.lifecycleStage,
+                    previousStage: previous
+                }
+            }
+        };
+    }
+    if (step.type === 'addContactTag') {
+        var _step_tag;
+        const tag = String((_step_tag = step.tag) != null ? _step_tag : '').trim().slice(0, CONTACT_TAG_MAX_LENGTH);
+        if (!tag) return {
+            error: 'the step has no tag'
+        };
+        // `arrayUnion`, so the tag a merchant already applied by hand is not
+        // duplicated and the tags beside it are kept.
+        await contact.ref.update({
+            [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        return {
+            detail: tag
+        };
+    }
+    if (step.type === 'assignContactOwner') {
+        /*
+     * Through the one server assignment (AGL-2618), in both of the step's
+     * modes, rather than a facet write of its own: the helper is what
+     * moves the round-robin pointer inside the transaction that writes the
+     * owner, mirrors the owner onto the site's lead, and tells the new
+     * owner. A member named on the step is still resolved here — by
+     * address against the roster, as before — and handed over by uid; the
+     * helper checks the roster document again, which is one read and the
+     * same answer.
+     */ let assign;
+        let named = 'round robin';
+        if (step.roundRobin === true) {
+            assign = {
+                roundRobin: true
+            };
+        } else {
+            const owner = await resolveMemberUid(env.orgId, {
+                uid: step.ownerUid,
+                email: step.ownerEmail
+            }, 'owner');
+            if ('error' in owner) return {
+                error: owner.error
+            };
+            assign = {
+                memberUid: owner.uid
+            };
+            named = owner.detail;
+        }
+        const verdict = await reassignContactOwner({
+            hostId,
+            contactId: contact.id,
+            email,
+            assign
+        });
+        if (verdict.outcome === 'none') {
+            return {
+                error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason]
+            };
+        }
+        if (verdict.outcome === 'unchanged') {
+            return {
+                detail: `${named} (already)`
+            };
+        }
+        return {
+            detail: step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named
+        };
+    }
+    // The two record creators: a task and an activity are documents of
+    // their own beside the contact, stamped with the scope a contact
+    // captured on this site would carry — `crmScopeTokens` is the create
+    // path's own expression, so a record an automation made is visible to
+    // exactly the sites a record a person made would be.
+    if (!env.orgId) return {
+        error: 'this site has no organization'
+    };
+    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(env.orgId);
+    const visibleTo = crmScopeTokens((_env_org = env.org) != null ? _env_org : null, group);
+    const links = _extends({
+        contactId: contact.id
+    }, facet.companyId ? {
+        companyId: facet.companyId
+    } : {});
+    if (step.type === 'createCrmTask') {
+        var _step_title, _facet_ownerUid;
+        var _step_assigneeUid, _step_assigneeEmail;
+        const title = String((_step_title = step.title) != null ? _step_title : '').trim().slice(0, 200);
+        if (!title) return {
+            error: 'the task has no title'
+        };
+        const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0));
+        /*
+     * The assignee the step names, else the person who OWNS the contact,
+     * else nobody. A follow-up task belongs to whoever holds the
+     * relationship, and an automation that had to name one person for
+     * every contact it touches would assign the whole list to one rep. A
+     * named assignee who cannot be resolved is an error rather than a
+     * fallback to the owner: the author named somebody on purpose.
+     */ let assignee = (_facet_ownerUid = facet.ownerUid) != null ? _facet_ownerUid : '';
+        if (((_step_assigneeUid = step.assigneeUid) == null ? void 0 : _step_assigneeUid.trim()) || ((_step_assigneeEmail = step.assigneeEmail) == null ? void 0 : _step_assigneeEmail.trim())) {
+            const named = await resolveMemberUid(env.orgId, {
+                uid: step.assigneeUid,
+                email: step.assigneeEmail
+            }, 'assignee');
+            if ('error' in named) return {
+                error: named.error
+            };
+            assignee = named.uid;
+        }
+        const dueAtMs = nowMs + dueInDays * DAY_MS;
+        const task = _extends({
+            title,
+            kind: step.kind,
+            priority: 'normal',
+            status: 'open',
+            dueAtMs,
+            // The reminder a person's task gets (AGL-2659): the due time.
+            remindAtMs: crmTaskReminderAfterEdit({
+                dueAtMs,
+                previous: null
+            })
+        }, assignee ? {
+            assigneeUid: assignee
+        } : {}, {
+            createdByUid: '',
+            sourceActionId: actionId
+        }, links, {
+            hostId,
+            visibleTo,
+            createdAt: FieldValue.serverTimestamp(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        await orgRef.collection(CRM_COLLECTIONS.tasks).add(task);
+        // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);
+        // a figure that could not move is the Fields section's recompute's.
+        await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [
+            links
+        ]).catch((error)=>{
+            console.error('[workflow] next activity could not be recomputed', env.orgId, error);
+        });
+        return {
+            detail: title.slice(0, 60)
+        };
+    }
+    if (step.type === 'logCrmActivity') {
+        var _step_body;
+        const body = String((_step_body = step.body) != null ? _step_body : '').trim().slice(0, 2000);
+        if (!body) return {
+            error: 'the activity has no body'
+        };
+        /*
+     * The per-record ceiling (AGL-2611), and this step is the writer it
+     * exists for: a flow that logs on every page view fills one person's
+     * log in an afternoon. Refused into the run history as an error, the
+     * way an unresolvable assignee is, so the merchant reads why the flow
+     * stopped writing rather than finding a log that silently stopped.
+     */ const logged = await countCrmActivitiesForRecord(orgRef, links);
+        if (!crmActivityLogHasRoom(logged)) {
+            return {
+                error: CRM_ACTIVITY_LOG_FULL_MESSAGE
+            };
+        }
+        const activity = _extends({
+            kind: step.kind,
+            body,
+            atMs: nowMs,
+            byUid: '',
+            sourceActionId: actionId
+        }, links, {
+            hostId,
+            visibleTo,
+            createdAt: FieldValue.serverTimestamp(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        await orgRef.collection(CRM_COLLECTIONS.activities).add(activity);
+        return {
+            detail: step.kind
+        };
+    }
+    return {
+        error: `unknown CRM step "${step.type}"`
+    };
+}
+/**
+ * Whether — and where — an automation's email lands on a timeline.
+ *
+ * A `sendEmail` step is not a CRM step: it mails whatever address the event
+ * carries, to a person who may be nobody the CRM knows. It earns a row on
+ * exactly one condition, that the message is ADDRESSED TO THE CONTACT the
+ * event is about — the person `resolveEventContact` finds, at the address
+ * the row holds. A welcome sequence to a new contact is that; an internal
+ * alert routed to a merchant's own address through `toField` is not, and a
+ * row for it would put the merchant's inbox on a customer's history.
+ *
+ * Prepared ahead of the send, for the reason the console route mints its
+ * id first: the webhook has nothing but the tags on the message to find
+ * the row with. Nothing is written here. A record at the activity ceiling
+ * earns no row — the message still goes, because the ceiling bounds the
+ * log and not the mail — and neither does a site with no org to hold one.
+ *
+ * **Never throws.** The row is bookkeeping beside a send, and a lookup that
+ * fails must not become a message that never left — the posture every
+ * meter beside `sendEmail` takes. A failure here is logged and the message
+ * goes out untagged.
+ */ export async function prepareCrmEmailActivity(env, to, payload) {
+    if (!env.orgId) return null;
+    const address = normalizeContactEmail(to);
+    if (!address) return null;
+    try {
+        var _env_org;
+        const contact = await resolveEventContact(env.hostId, payload);
+        if (!contact || normalizeContactEmail(contact.data['email']) !== address) {
+            return null;
+        }
+        const group = await consentGroupForSite(env.hostId);
+        const facet = readContactFacet(contact.data, group.groupId);
+        const link = _extends({
+            contactId: contact.id
+        }, facet.companyId ? {
+            companyId: facet.companyId
+        } : {});
+        const firestore = firebaseAdmin.app().firestore();
+        const orgRef = firestore.collection('orgs').doc(env.orgId);
+        if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {
+            return null;
+        }
+        const ref = newCrmActivityRef(firestore, env.orgId);
+        return {
+            ref,
+            tags: crmEmailDeliveryTags({
+                orgId: env.orgId,
+                hostId: env.hostId,
+                activityId: ref.id
+            }),
+            link,
+            visibleTo: crmScopeTokens((_env_org = env.org) != null ? _env_org : null, group)
+        };
+    } catch (error) {
+        console.error('[crm] automation email activity could not be prepared', env.hostId, error);
+        return null;
+    }
+}
+/**
+ * Writes the prepared row, once the provider has accepted the message.
+ *
+ * The same shape the console route logs — `buildCrmEmailActivity` is the
+ * one builder — with the automation as its source and nobody as its
+ * author. **Never throws**: the message has left, and a row that could not
+ * be written is a gap on the timeline rather than a failed step.
+ */ export async function logCrmEmailActivity(env, prepared, message, actionId, nowMs = Date.now()) {
+    try {
+        var _normalizeContactEmail;
+        await writeCrmEmailActivity(prepared.ref, buildCrmEmailActivity({
+            subject: message.subject,
+            body: message.body,
+            to: (_normalizeContactEmail = normalizeContactEmail(message.to)) != null ? _normalizeContactEmail : message.to,
+            atMs: nowMs,
+            byUid: '',
+            sourceActionId: actionId,
+            link: prepared.link,
+            hostId: env.hostId,
+            visibleTo: prepared.visibleTo
+        }));
+    } catch (error) {
+        console.error('[crm] automation email activity write failed', prepared.ref.id, error);
+    }
+}
+
+//# sourceMappingURL=crm-action-steps.js.map

package/src/lib/engine/crm-action-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/workflows/src/lib/engine/crm-action-steps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  buildCrmEmailActivity,\n  CONTACT_LIFECYCLE_STAGE_LABELS,\n  CONTACT_TAG_MAX_LENGTH,\n  contactFacetPath,\n  CRM_ACTIVITY_LOG_FULL_MESSAGE,\n  CRM_COLLECTIONS,\n  crmActivityLogHasRoom,\n  type CrmActionStep,\n  type CrmActivity,\n  type CrmActivityLink,\n  type CrmTask,\n  crmEmailDeliveryTags,\n  crmScopeTokens,\n  crmTaskReminderAfterEdit,\n  normalizeContactEmail,\n  parseCrmMemberRef,\n  readContactFacet,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  countCrmActivitiesForRecord,\n  firebaseAdmin,\n  newCrmActivityRef,\n  orgDataQueryForHost,\n  recomputeCrmNextTaskAt,\n  writeCrmEmailActivity,\n} from '@aglyn/tenant-data-admin'\n// The leaf, not the barrel: this library's specs substitute the barrel\n// wholesale, and the lookup must reach the real index logic under them.\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { FieldValue } from 'firebase-admin/firestore'\n// The leaves, not the runtime barrel, for the reason `run-event-actions.ts`\n// gives: the specs substitute each one.\nimport {\n  OWNER_ASSIGNMENT_REFUSALS,\n  reassignContactOwner,\n} from '@aglyn/tenant-runtime/assign-contact-owner'\nimport type { HostEventPayload } from '@aglyn/tenant-runtime/host-event-listeners'\n\n/**\n * The CRM steps of an action run (AGL-2605): what `setContactStage`,\n * `addContactTag`, `assignContactOwner`, `createCrmTask` and\n * `logCrmActivity` actually write.\n *\n * Split out of `run-event-actions.ts` because the five share one shape the\n * other server steps do not: each begins by finding THE PERSON the event is\n * about, and each writes either inside the site's facet on that person or a\n * record stamped with the site's scope. One resolver and one scope\n * expression, used five times, rather than five copies drifting apart.\n *\n * ## The person is the event's, never the step's\n *\n * A step carries no contact reference. The contact is whoever the event\n * names — by `contactId` when the emitting door knew the document, and by\n * `email` otherwise, which is what every pre-CRM event carries. Both\n * lookups are scoped to what THIS site may see: a document the id names\n * but the site cannot read is treated as absent, exactly as the scoped\n * query would have treated it, so an event replayed against the wrong site\n * reaches nobody.\n *\n * ## A missing person is a reported no-op\n *\n * Nothing is written and the step's error names the reason, which lands in\n * the run summary beside the trigger — the same place \"why didn't it\n * fire?\" is answered for every other step. Silence here would make a\n * mis-wired trigger (a form with no email field) indistinguishable from a\n * working one.\n */\n\nexport interface CrmStepEnv {\n  hostId: string\n  /** The owning org's billing doc, already read by the run's gate. */\n  org: unknown\n  orgId: string | null\n}\n\nexport interface CrmStepOutcome {\n  /** The reason nothing was written, when nothing was. */\n  error?: string\n  /** The one fact worth carrying into the run summary. */\n  detail?: string\n  /**\n   * An event this step's write earned, for the CALLER to fan out under its\n   * own depth guard. Not emitted from here: a stage set by an automation is\n   * itself a stage change, and the action listening for it must run — but\n   * through the same nesting cap a `customEvent` chain has, or an action\n   * that sets the stage it listens for would run until the meter ran dry.\n   */\n  emit?: { event: 'contactStageChanged'; payload: HostEventPayload }\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000\n\ninterface ResolvedContact {\n  id: string\n  ref: FirebaseFirestore.DocumentReference\n  data: Record<string, unknown>\n}\n\n/**\n * The contact an event payload names, as this site may see it.\n *\n * Id first, because a CRM event carries the document the door just wrote\n * and a lookup by id is a read, not a query. The address second, through\n * the org's address index narrowed to this site (AGL-2633), for every\n * event that predates the CRM and knows only who filled in the form — so\n * an address a merge folded into another record still reaches the person\n * who now holds it.\n */\nasync function resolveEventContact(\n  hostId: string,\n  payload: HostEventPayload,\n): Promise<ResolvedContact | null> {\n  const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts')\n  const contactId = String(payload['contactId'] ?? '').trim()\n  if (contactId) {\n    const doc = await contactsRef.doc(contactId).get()\n    if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {\n      return { id: doc.id, ref: doc.ref, data: doc.data() ?? {} }\n    }\n  }\n  const hit = await findContactByEmail(contactsRef, payload['email'], { hostId })\n  return hit ? { id: hit.id, ref: hit.ref, data: hit.data() ?? {} } : null\n}\n\n/**\n * The uid a step names for somebody on the team — an owner, an assignee —\n * resolved against the org's roster, whichever way the step named them.\n *\n * A step names a member by uid when a picker wrote it and by address when a\n * person typed it, and the editor's one text field accepts either — so both\n * fields are read through `parseCrmMemberRef`, and an address typed into\n * the uid slot or a uid typed into the address slot still names the person.\n *\n * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by\n * the uid, so a uid costs one document read and must exist: `ownerUid` and\n * `assigneeUid` are fields every reader resolves as a member, and a\n * stranger's uid in one is a task nobody on the team can find. An address\n * is matched on the roster's own `email` field, and two production paths\n * create a member document WITHOUT one (a host-access re-grant, and an add\n * whose auth record carried none) — such a member is named by uid, which\n * is the reason the editor takes one.\n *\n * The roster is the only directory consulted. A project-level Auth lookup\n * by address would resolve people who are not on this organization at all\n * (AGL-1122). A reference that resolves neither way is an error, not a\n * stored string.\n */\nasync function resolveMemberUid(\n  orgId: string | null,\n  named: { uid?: string; email?: string },\n  role: 'owner' | 'assignee',\n): Promise<{ uid: string; detail: string } | { error: string }> {\n  const ref =\n    parseCrmMemberRef(named.uid) ?? parseCrmMemberRef(named.email)\n  if (!ref) return { error: `no ${role} named on the step` }\n  if (!orgId) return { error: 'this site has no organization' }\n  const members = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection('members')\n  if (ref.kind === 'uid') {\n    const member = await members.doc(ref.uid).get()\n    if (member.exists) return { uid: ref.uid, detail: ref.uid }\n    return { error: `no team member with the id ${ref.uid}` }\n  }\n  const byField = (await members.where('email', '==', ref.email).limit(1).get())\n    .docs[0]\n  if (byField) return { uid: byField.id, detail: ref.email }\n  return { error: `no team member with the address ${ref.email}` }\n}\n\n/**\n * Runs one CRM step for the person the event names. Never throws for a\n * missing person, an unknown owner or a site with no org — those are\n * answered as `error` so the run records them; a Firestore failure\n * propagates to the executor's catch like every other step's would.\n */\nexport async function runCrmActionStep(\n  env: CrmStepEnv,\n  actionId: string,\n  step: CrmActionStep,\n  payload: HostEventPayload,\n  nowMs = Date.now(),\n): Promise<CrmStepOutcome> {\n  const { hostId } = env\n  const contact = await resolveEventContact(hostId, payload)\n  if (!contact) {\n    const named = String(payload['contactId'] ?? payload['email'] ?? '').trim()\n    return {\n      error: named\n        ? `no contact this site can see for ${named}`\n        : 'the event names no contact — no contactId or email in its payload',\n    }\n  }\n  /*\n   * THE HOLDER whose facet the write addresses — the site's consent group,\n   * which is the site alone unless the org declared the site one of a set\n   * that presents as one sender. Same resolution the capture doors use, so\n   * a stage set here lands in the facet the console reads.\n   */\n  const group = await consentGroupForSite(hostId)\n  const facet = readContactFacet(contact.data, group.groupId)\n  const email = String(contact.data['email'] ?? '')\n\n  if (step.type === 'setContactStage') {\n    const previous = facet.lifecycleStage ?? ''\n    const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage]\n    /*\n     * A stage set to what it already is changes nothing and ANNOUNCES\n     * nothing. The write is skipped so the row's `updatedAt` does not move\n     * for a non-event, and the absent emit is what stops an action that\n     * sets the stage it listens for from re-running on its own write —\n     * the depth guard bounds that chain, this ends it at once.\n     */\n    if (previous === step.lifecycleStage) {\n      return { detail: `${label} (already)` }\n    }\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    return {\n      detail: label,\n      emit: {\n        event: 'contactStageChanged',\n        payload: {\n          contactId: contact.id,\n          email,\n          lifecycleStage: step.lifecycleStage,\n          previousStage: previous,\n        },\n      },\n    }\n  }\n\n  if (step.type === 'addContactTag') {\n    const tag = String(step.tag ?? '')\n      .trim()\n      .slice(0, CONTACT_TAG_MAX_LENGTH)\n    if (!tag) return { error: 'the step has no tag' }\n    // `arrayUnion`, so the tag a merchant already applied by hand is not\n    // duplicated and the tags beside it are kept.\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    return { detail: tag }\n  }\n\n  if (step.type === 'assignContactOwner') {\n    /*\n     * Through the one server assignment (AGL-2618), in both of the step's\n     * modes, rather than a facet write of its own: the helper is what\n     * moves the round-robin pointer inside the transaction that writes the\n     * owner, mirrors the owner onto the site's lead, and tells the new\n     * owner. A member named on the step is still resolved here — by\n     * address against the roster, as before — and handed over by uid; the\n     * helper checks the roster document again, which is one read and the\n     * same answer.\n     */\n    let assign: { memberUid: string } | { roundRobin: true }\n    let named = 'round robin'\n    if (step.roundRobin === true) {\n      assign = { roundRobin: true }\n    } else {\n      const owner = await resolveMemberUid(\n        env.orgId,\n        { uid: step.ownerUid, email: step.ownerEmail },\n        'owner',\n      )\n      if ('error' in owner) return { error: owner.error }\n      assign = { memberUid: owner.uid }\n      named = owner.detail\n    }\n    const verdict = await reassignContactOwner({\n      hostId,\n      contactId: contact.id,\n      email,\n      assign,\n    })\n    if (verdict.outcome === 'none') {\n      return { error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason] }\n    }\n    if (verdict.outcome === 'unchanged') {\n      return { detail: `${named} (already)` }\n    }\n    return {\n      detail:\n        step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named,\n    }\n  }\n\n  // The two record creators: a task and an activity are documents of\n  // their own beside the contact, stamped with the scope a contact\n  // captured on this site would carry — `crmScopeTokens` is the create\n  // path's own expression, so a record an automation made is visible to\n  // exactly the sites a record a person made would be.\n  if (!env.orgId) return { error: 'this site has no organization' }\n  const orgRef = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(env.orgId)\n  const visibleTo = crmScopeTokens(\n    (env.org ?? null) as Record<string, unknown> | null,\n    group,\n  )\n  const links = {\n    contactId: contact.id,\n    ...(facet.companyId ? { companyId: facet.companyId } : {}),\n  }\n\n  if (step.type === 'createCrmTask') {\n    const title = String(step.title ?? '')\n      .trim()\n      .slice(0, 200)\n    if (!title) return { error: 'the task has no title' }\n    const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0))\n    /*\n     * The assignee the step names, else the person who OWNS the contact,\n     * else nobody. A follow-up task belongs to whoever holds the\n     * relationship, and an automation that had to name one person for\n     * every contact it touches would assign the whole list to one rep. A\n     * named assignee who cannot be resolved is an error rather than a\n     * fallback to the owner: the author named somebody on purpose.\n     */\n    let assignee = facet.ownerUid ?? ''\n    if (step.assigneeUid?.trim() || step.assigneeEmail?.trim()) {\n      const named = await resolveMemberUid(\n        env.orgId,\n        { uid: step.assigneeUid, email: step.assigneeEmail },\n        'assignee',\n      )\n      if ('error' in named) return { error: named.error }\n      assignee = named.uid\n    }\n    const dueAtMs = nowMs + dueInDays * DAY_MS\n    const task: CrmTask = {\n      title,\n      kind: step.kind,\n      priority: 'normal',\n      status: 'open',\n      dueAtMs,\n      // The reminder a person's task gets (AGL-2659): the due time.\n      remindAtMs: crmTaskReminderAfterEdit({ dueAtMs, previous: null }),\n      ...(assignee ? { assigneeUid: assignee } : {}),\n      createdByUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    await orgRef.collection(CRM_COLLECTIONS.tasks).add(task)\n    // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);\n    // a figure that could not move is the Fields section's recompute's.\n    await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [links]).catch((error: unknown) => {\n      console.error('[workflow] next activity could not be recomputed', env.orgId, error)\n    })\n    return { detail: title.slice(0, 60) }\n  }\n\n  if (step.type === 'logCrmActivity') {\n    const body = String(step.body ?? '')\n      .trim()\n      .slice(0, 2000)\n    if (!body) return { error: 'the activity has no body' }\n    /*\n     * The per-record ceiling (AGL-2611), and this step is the writer it\n     * exists for: a flow that logs on every page view fills one person's\n     * log in an afternoon. Refused into the run history as an error, the\n     * way an unresolvable assignee is, so the merchant reads why the flow\n     * stopped writing rather than finding a log that silently stopped.\n     */\n    const logged = await countCrmActivitiesForRecord(orgRef, links)\n    if (!crmActivityLogHasRoom(logged)) {\n      return { error: CRM_ACTIVITY_LOG_FULL_MESSAGE }\n    }\n    const activity: CrmActivity = {\n      kind: step.kind,\n      body,\n      atMs: nowMs,\n      byUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    await orgRef.collection(CRM_COLLECTIONS.activities).add(activity)\n    return { detail: step.kind }\n  }\n\n  return { error: `unknown CRM step \"${(step as { type: string }).type}\"` }\n}\n\n/**\n * The activity row a `sendEmail` step's message will be logged as, prepared\n * BEFORE the send (AGL-2615): the minted reference whose id rides the\n * message as a tag, the links it files under, and the scope it is stamped\n * with. `null` when the message earns no row.\n */\nexport interface PreparedCrmEmailActivity {\n  ref: FirebaseFirestore.DocumentReference\n  /** The provider tags the delivery webhook finds the row by. */\n  tags: { name: string; value: string }[]\n  link: CrmActivityLink\n  visibleTo: string[]\n}\n\n/**\n * Whether — and where — an automation's email lands on a timeline.\n *\n * A `sendEmail` step is not a CRM step: it mails whatever address the event\n * carries, to a person who may be nobody the CRM knows. It earns a row on\n * exactly one condition, that the message is ADDRESSED TO THE CONTACT the\n * event is about — the person `resolveEventContact` finds, at the address\n * the row holds. A welcome sequence to a new contact is that; an internal\n * alert routed to a merchant's own address through `toField` is not, and a\n * row for it would put the merchant's inbox on a customer's history.\n *\n * Prepared ahead of the send, for the reason the console route mints its\n * id first: the webhook has nothing but the tags on the message to find\n * the row with. Nothing is written here. A record at the activity ceiling\n * earns no row — the message still goes, because the ceiling bounds the\n * log and not the mail — and neither does a site with no org to hold one.\n *\n * **Never throws.** The row is bookkeeping beside a send, and a lookup that\n * fails must not become a message that never left — the posture every\n * meter beside `sendEmail` takes. A failure here is logged and the message\n * goes out untagged.\n */\nexport async function prepareCrmEmailActivity(\n  env: CrmStepEnv,\n  to: string,\n  payload: HostEventPayload,\n): Promise<PreparedCrmEmailActivity | null> {\n  if (!env.orgId) return null\n  const address = normalizeContactEmail(to)\n  if (!address) return null\n  try {\n    const contact = await resolveEventContact(env.hostId, payload)\n    if (!contact || normalizeContactEmail(contact.data['email']) !== address) {\n      return null\n    }\n    const group = await consentGroupForSite(env.hostId)\n    const facet = readContactFacet(contact.data, group.groupId)\n    const link: CrmActivityLink = {\n      contactId: contact.id,\n      ...(facet.companyId ? { companyId: facet.companyId } : {}),\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(env.orgId)\n    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {\n      return null\n    }\n    const ref = newCrmActivityRef(firestore, env.orgId)\n    return {\n      ref,\n      tags: crmEmailDeliveryTags({\n        orgId: env.orgId,\n        hostId: env.hostId,\n        activityId: ref.id,\n      }),\n      link,\n      visibleTo: crmScopeTokens(\n        (env.org ?? null) as Record<string, unknown> | null,\n        group,\n      ),\n    }\n  } catch (error) {\n    console.error('[crm] automation email activity could not be prepared', env.hostId, error)\n    return null\n  }\n}\n\n/**\n * Writes the prepared row, once the provider has accepted the message.\n *\n * The same shape the console route logs — `buildCrmEmailActivity` is the\n * one builder — with the automation as its source and nobody as its\n * author. **Never throws**: the message has left, and a row that could not\n * be written is a gap on the timeline rather than a failed step.\n */\nexport async function logCrmEmailActivity(\n  env: CrmStepEnv,\n  prepared: PreparedCrmEmailActivity,\n  message: { subject: string; body: string; to: string },\n  actionId: string,\n  nowMs = Date.now(),\n): Promise<void> {\n  try {\n    await writeCrmEmailActivity(\n      prepared.ref,\n      buildCrmEmailActivity({\n        subject: message.subject,\n        body: message.body,\n        to: normalizeContactEmail(message.to) ?? message.to,\n        atMs: nowMs,\n        byUid: '',\n        sourceActionId: actionId,\n        link: prepared.link,\n        hostId: env.hostId,\n        visibleTo: prepared.visibleTo,\n      }),\n    )\n  } catch (error) {\n    console.error('[crm] automation email activity write failed', prepared.ref.id, error)\n  }\n}\n"],"names":["buildCrmEmailActivity","CONTACT_LIFECYCLE_STAGE_LABELS","CONTACT_TAG_MAX_LENGTH","contactFacetPath","CRM_ACTIVITY_LOG_FULL_MESSAGE","CRM_COLLECTIONS","crmActivityLogHasRoom","crmEmailDeliveryTags","crmScopeTokens","crmTaskReminderAfterEdit","normalizeContactEmail","parseCrmMemberRef","readContactFacet","visibleToHost","consentGroupForSite","countCrmActivitiesForRecord","firebaseAdmin","newCrmActivityRef","orgDataQueryForHost","recomputeCrmNextTaskAt","writeCrmEmailActivity","findContactByEmail","FieldValue","OWNER_ASSIGNMENT_REFUSALS","reassignContactOwner","DAY_MS","resolveEventContact","hostId","payload","hit","ref","contactsRef","contactId","String","trim","doc","get","exists","id","data","resolveMemberUid","orgId","named","role","uid","email","error","members","app","firestore","collection","kind","member","detail","byField","where","limit","docs","runCrmActionStep","env","actionId","step","nowMs","Date","now","contact","group","facet","groupId","type","previous","lifecycleStage","label","update","updatedAt","serverTimestamp","emit","event","previousStage","tag","slice","arrayUnion","assign","roundRobin","owner","ownerUid","ownerEmail","memberUid","verdict","outcome","reason","orgRef","visibleTo","org","links","companyId","title","dueInDays","Math","max","round","Number","assignee","assigneeUid","assigneeEmail","dueAtMs","task","priority","status","remindAtMs","createdByUid","sourceActionId","createdAt","tasks","add","catch","console","body","logged","activity","atMs","byUid","activities","prepareCrmEmailActivity","to","address","link","tags","activityId","logCrmEmailActivity","prepared","message","subject"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,6BAA6B,EAC7BC,eAAe,EACfC,qBAAqB,EAKrBC,oBAAoB,EACpBC,cAAc,EACdC,wBAAwB,EACxBC,qBAAqB,EACrBC,iBAAiB,EACjBC,gBAAgB,EAChBC,aAAa,QACR,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,2BAA2B,EAC3BC,aAAa,EACbC,iBAAiB,EACjBC,mBAAmB,EACnBC,sBAAsB,EACtBC,qBAAqB,QAChB,2BAA0B;AACjC,uEAAuE;AACvE,wEAAwE;AACxE,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,4EAA4E;AAC5E,wCAAwC;AACxC,SACEC,yBAAyB,EACzBC,oBAAoB,QACf,6CAA4C;AAuDnD,MAAMC,SAAS,KAAK,KAAK,KAAK;AAQ9B;;;;;;;;;CASC,GACD,eAAeC,oBACbC,MAAc,EACdC,OAAyB;QAGAA,oBAQsBC;IAT/C,MAAM,EAAEC,KAAKC,WAAW,EAAE,GAAG,MAAMb,oBAAoBS,QAAQ;IAC/D,MAAMK,YAAYC,QAAOL,qBAAAA,OAAO,CAAC,YAAY,YAApBA,qBAAwB,IAAIM,IAAI;IACzD,IAAIF,WAAW;QACb,MAAMG,MAAM,MAAMJ,YAAYI,GAAG,CAACH,WAAWI,GAAG;QAChD,IAAID,IAAIE,MAAM,IAAIxB,cAAcsB,IAAIC,GAAG,CAAC,cAAcT,SAAS;gBACpBQ;YAAzC,OAAO;gBAAEG,IAAIH,IAAIG,EAAE;gBAAER,KAAKK,IAAIL,GAAG;gBAAES,IAAI,GAAEJ,YAAAA,IAAII,IAAI,cAARJ,YAAc,CAAC;YAAE;QAC5D;IACF;IACA,MAAMN,MAAM,MAAMR,mBAAmBU,aAAaH,OAAO,CAAC,QAAQ,EAAE;QAAED;IAAO;IAC7E,OAAOE,MAAM;QAAES,IAAIT,IAAIS,EAAE;QAAER,KAAKD,IAAIC,GAAG;QAAES,IAAI,GAAEV,YAAAA,IAAIU,IAAI,cAARV,YAAc,CAAC;IAAE,IAAI;AACtE;AAEA;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,eAAeW,iBACbC,KAAoB,EACpBC,KAAuC,EACvCC,IAA0B;QAGxBhC;IADF,MAAMmB,OACJnB,qBAAAA,kBAAkB+B,MAAME,GAAG,aAA3BjC,qBAAgCA,kBAAkB+B,MAAMG,KAAK;IAC/D,IAAI,CAACf,KAAK,OAAO;QAAEgB,OAAO,CAAC,GAAG,EAAEH,KAAK,kBAAkB,CAAC;IAAC;IACzD,IAAI,CAACF,OAAO,OAAO;QAAEK,OAAO;IAAgC;IAC5D,MAAMC,UAAU/B,cACbgC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXf,GAAG,CAACM,OACJS,UAAU,CAAC;IACd,IAAIpB,IAAIqB,IAAI,KAAK,OAAO;QACtB,MAAMC,SAAS,MAAML,QAAQZ,GAAG,CAACL,IAAIc,GAAG,EAAER,GAAG;QAC7C,IAAIgB,OAAOf,MAAM,EAAE,OAAO;YAAEO,KAAKd,IAAIc,GAAG;YAAES,QAAQvB,IAAIc,GAAG;QAAC;QAC1D,OAAO;YAAEE,OAAO,CAAC,2BAA2B,EAAEhB,IAAIc,GAAG,EAAE;QAAC;IAC1D;IACA,MAAMU,UAAU,AAAC,CAAA,MAAMP,QAAQQ,KAAK,CAAC,SAAS,MAAMzB,IAAIe,KAAK,EAAEW,KAAK,CAAC,GAAGpB,GAAG,EAAC,EACzEqB,IAAI,CAAC,EAAE;IACV,IAAIH,SAAS,OAAO;QAAEV,KAAKU,QAAQhB,EAAE;QAAEe,QAAQvB,IAAIe,KAAK;IAAC;IACzD,OAAO;QAAEC,OAAO,CAAC,gCAAgC,EAAEhB,IAAIe,KAAK,EAAE;IAAC;AACjE;AAEA;;;;;CAKC,GACD,OAAO,eAAea,iBACpBC,GAAe,EACfC,QAAgB,EAChBC,IAAmB,EACnBjC,OAAyB,EACzBkC,QAAQC,KAAKC,GAAG,EAAE;QAoBGC,qBAsGlBN;IAxHH,MAAM,EAAEhC,MAAM,EAAE,GAAGgC;IACnB,MAAMM,UAAU,MAAMvC,oBAAoBC,QAAQC;IAClD,IAAI,CAACqC,SAAS;YACSrC,MAAAA;QAArB,MAAMc,QAAQT,QAAOL,QAAAA,qBAAAA,OAAO,CAAC,YAAY,YAApBA,qBAAwBA,OAAO,CAAC,QAAQ,YAAxCA,OAA4C,IAAIM,IAAI;QACzE,OAAO;YACLY,OAAOJ,QACH,CAAC,iCAAiC,EAAEA,OAAO,GAC3C;QACN;IACF;IACA;;;;;GAKC,GACD,MAAMwB,QAAQ,MAAMpD,oBAAoBa;IACxC,MAAMwC,QAAQvD,iBAAiBqD,QAAQ1B,IAAI,EAAE2B,MAAME,OAAO;IAC1D,MAAMvB,QAAQZ,QAAOgC,sBAAAA,QAAQ1B,IAAI,CAAC,QAAQ,YAArB0B,sBAAyB;IAE9C,IAAIJ,KAAKQ,IAAI,KAAK,mBAAmB;YAClBF;QAAjB,MAAMG,YAAWH,wBAAAA,MAAMI,cAAc,YAApBJ,wBAAwB;QACzC,MAAMK,QAAQvE,8BAA8B,CAAC4D,KAAKU,cAAc,CAAC;QACjE;;;;;;KAMC,GACD,IAAID,aAAaT,KAAKU,cAAc,EAAE;YACpC,OAAO;gBAAElB,QAAQ,GAAGmB,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,MAAMP,QAAQnC,GAAG,CAAC2C,MAAM,CAAC;YACvB,CAACtE,iBAAiB+D,MAAME,OAAO,EAAE,kBAAkB,EAAEP,KAAKU,cAAc;YACxEG,WAAWpD,WAAWqD,eAAe;QACvC;QACA,OAAO;YACLtB,QAAQmB;YACRI,MAAM;gBACJC,OAAO;gBACPjD,SAAS;oBACPI,WAAWiC,QAAQ3B,EAAE;oBACrBO;oBACA0B,gBAAgBV,KAAKU,cAAc;oBACnCO,eAAeR;gBACjB;YACF;QACF;IACF;IAEA,IAAIT,KAAKQ,IAAI,KAAK,iBAAiB;YACdR;QAAnB,MAAMkB,MAAM9C,QAAO4B,YAAAA,KAAKkB,GAAG,YAARlB,YAAY,IAC5B3B,IAAI,GACJ8C,KAAK,CAAC,GAAG9E;QACZ,IAAI,CAAC6E,KAAK,OAAO;YAAEjC,OAAO;QAAsB;QAChD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAMmB,QAAQnC,GAAG,CAAC2C,MAAM,CAAC;YACvB,CAACtE,iBAAiB+D,MAAME,OAAO,EAAE,QAAQ,EAAE9C,WAAW2D,UAAU,CAACF;YACjEL,WAAWpD,WAAWqD,eAAe;QACvC;QACA,OAAO;YAAEtB,QAAQ0B;QAAI;IACvB;IAEA,IAAIlB,KAAKQ,IAAI,KAAK,sBAAsB;QACtC;;;;;;;;;KASC,GACD,IAAIa;QACJ,IAAIxC,QAAQ;QACZ,IAAImB,KAAKsB,UAAU,KAAK,MAAM;YAC5BD,SAAS;gBAAEC,YAAY;YAAK;QAC9B,OAAO;YACL,MAAMC,QAAQ,MAAM5C,iBAClBmB,IAAIlB,KAAK,EACT;gBAAEG,KAAKiB,KAAKwB,QAAQ;gBAAExC,OAAOgB,KAAKyB,UAAU;YAAC,GAC7C;YAEF,IAAI,WAAWF,OAAO,OAAO;gBAAEtC,OAAOsC,MAAMtC,KAAK;YAAC;YAClDoC,SAAS;gBAAEK,WAAWH,MAAMxC,GAAG;YAAC;YAChCF,QAAQ0C,MAAM/B,MAAM;QACtB;QACA,MAAMmC,UAAU,MAAMhE,qBAAqB;YACzCG;YACAK,WAAWiC,QAAQ3B,EAAE;YACrBO;YACAqC;QACF;QACA,IAAIM,QAAQC,OAAO,KAAK,QAAQ;YAC9B,OAAO;gBAAE3C,OAAOvB,yBAAyB,CAACiE,QAAQE,MAAM,CAAC;YAAC;QAC5D;QACA,IAAIF,QAAQC,OAAO,KAAK,aAAa;YACnC,OAAO;gBAAEpC,QAAQ,GAAGX,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,OAAO;YACLW,QACEQ,KAAKsB,UAAU,KAAK,OAAO,CAAC,cAAc,EAAEK,QAAQH,QAAQ,EAAE,GAAG3C;QACrE;IACF;IAEA,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,sEAAsE;IACtE,qDAAqD;IACrD,IAAI,CAACiB,IAAIlB,KAAK,EAAE,OAAO;QAAEK,OAAO;IAAgC;IAChE,MAAM6C,SAAS3E,cACZgC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXf,GAAG,CAACwB,IAAIlB,KAAK;IAChB,MAAMmD,YAAYpF,gBACfmD,WAAAA,IAAIkC,GAAG,YAAPlC,WAAW,MACZO;IAEF,MAAM4B,QAAQ;QACZ9D,WAAWiC,QAAQ3B,EAAE;OACjB6B,MAAM4B,SAAS,GAAG;QAAEA,WAAW5B,MAAM4B,SAAS;IAAC,IAAI,CAAC;IAG1D,IAAIlC,KAAKQ,IAAI,KAAK,iBAAiB;YACZR,aAaNM;YACXN,mBAA4BA;QAdhC,MAAMmC,QAAQ/D,QAAO4B,cAAAA,KAAKmC,KAAK,YAAVnC,cAAc,IAChC3B,IAAI,GACJ8C,KAAK,CAAC,GAAG;QACZ,IAAI,CAACgB,OAAO,OAAO;YAAElD,OAAO;QAAwB;QACpD,MAAMmD,YAAYC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,OAAOxC,KAAKoC,SAAS,KAAK;QACnE;;;;;;;KAOC,GACD,IAAIK,YAAWnC,kBAAAA,MAAMkB,QAAQ,YAAdlB,kBAAkB;QACjC,IAAIN,EAAAA,oBAAAA,KAAK0C,WAAW,qBAAhB1C,kBAAkB3B,IAAI,SAAM2B,sBAAAA,KAAK2C,aAAa,qBAAlB3C,oBAAoB3B,IAAI,KAAI;YAC1D,MAAMQ,QAAQ,MAAMF,iBAClBmB,IAAIlB,KAAK,EACT;gBAAEG,KAAKiB,KAAK0C,WAAW;gBAAE1D,OAAOgB,KAAK2C,aAAa;YAAC,GACnD;YAEF,IAAI,WAAW9D,OAAO,OAAO;gBAAEI,OAAOJ,MAAMI,KAAK;YAAC;YAClDwD,WAAW5D,MAAME,GAAG;QACtB;QACA,MAAM6D,UAAU3C,QAAQmC,YAAYxE;QACpC,MAAMiF,OAAgB;YACpBV;YACA7C,MAAMU,KAAKV,IAAI;YACfwD,UAAU;YACVC,QAAQ;YACRH;YACA,8DAA8D;YAC9DI,YAAYpG,yBAAyB;gBAAEgG;gBAASnC,UAAU;YAAK;WAC3DgC,WAAW;YAAEC,aAAaD;QAAS,IAAI,CAAC;YAC5CQ,cAAc;YACdC,gBAAgBnD;WACbkC;YACHnE;YACAiE;YACAoB,WAAW1F,WAAWqD,eAAe;YACrCD,WAAWpD,WAAWqD,eAAe;;QAEvC,MAAMgB,OAAOzC,UAAU,CAAC7C,gBAAgB4G,KAAK,EAAEC,GAAG,CAACR;QACnD,0EAA0E;QAC1E,oEAAoE;QACpE,MAAMvF,uBAAuBH,cAAcgC,GAAG,GAAGC,SAAS,IAAIU,IAAIlB,KAAK,EAAE;YAACqD;SAAM,EAAEqB,KAAK,CAAC,CAACrE;YACvFsE,QAAQtE,KAAK,CAAC,oDAAoDa,IAAIlB,KAAK,EAAEK;QAC/E;QACA,OAAO;YAAEO,QAAQ2C,MAAMhB,KAAK,CAAC,GAAG;QAAI;IACtC;IAEA,IAAInB,KAAKQ,IAAI,KAAK,kBAAkB;YACdR;QAApB,MAAMwD,OAAOpF,QAAO4B,aAAAA,KAAKwD,IAAI,YAATxD,aAAa,IAC9B3B,IAAI,GACJ8C,KAAK,CAAC,GAAG;QACZ,IAAI,CAACqC,MAAM,OAAO;YAAEvE,OAAO;QAA2B;QACtD;;;;;;KAMC,GACD,MAAMwE,SAAS,MAAMvG,4BAA4B4E,QAAQG;QACzD,IAAI,CAACxF,sBAAsBgH,SAAS;YAClC,OAAO;gBAAExE,OAAO1C;YAA8B;QAChD;QACA,MAAMmH,WAAwB;YAC5BpE,MAAMU,KAAKV,IAAI;YACfkE;YACAG,MAAM1D;YACN2D,OAAO;YACPV,gBAAgBnD;WACbkC;YACHnE;YACAiE;YACAoB,WAAW1F,WAAWqD,eAAe;YACrCD,WAAWpD,WAAWqD,eAAe;;QAEvC,MAAMgB,OAAOzC,UAAU,CAAC7C,gBAAgBqH,UAAU,EAAER,GAAG,CAACK;QACxD,OAAO;YAAElE,QAAQQ,KAAKV,IAAI;QAAC;IAC7B;IAEA,OAAO;QAAEL,OAAO,CAAC,kBAAkB,EAAE,AAACe,KAA0BQ,IAAI,CAAC,CAAC,CAAC;IAAC;AAC1E;AAgBA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,eAAesD,wBACpBhE,GAAe,EACfiE,EAAU,EACVhG,OAAyB;IAEzB,IAAI,CAAC+B,IAAIlB,KAAK,EAAE,OAAO;IACvB,MAAMoF,UAAUnH,sBAAsBkH;IACtC,IAAI,CAACC,SAAS,OAAO;IACrB,IAAI;YA0BGlE;QAzBL,MAAMM,UAAU,MAAMvC,oBAAoBiC,IAAIhC,MAAM,EAAEC;QACtD,IAAI,CAACqC,WAAWvD,sBAAsBuD,QAAQ1B,IAAI,CAAC,QAAQ,MAAMsF,SAAS;YACxE,OAAO;QACT;QACA,MAAM3D,QAAQ,MAAMpD,oBAAoB6C,IAAIhC,MAAM;QAClD,MAAMwC,QAAQvD,iBAAiBqD,QAAQ1B,IAAI,EAAE2B,MAAME,OAAO;QAC1D,MAAM0D,OAAwB;YAC5B9F,WAAWiC,QAAQ3B,EAAE;WACjB6B,MAAM4B,SAAS,GAAG;YAAEA,WAAW5B,MAAM4B,SAAS;QAAC,IAAI,CAAC;QAE1D,MAAM9C,YAAYjC,cAAcgC,GAAG,GAAGC,SAAS;QAC/C,MAAM0C,SAAS1C,UAAUC,UAAU,CAAC,QAAQf,GAAG,CAACwB,IAAIlB,KAAK;QACzD,IAAI,CAACnC,sBAAsB,MAAMS,4BAA4B4E,QAAQmC,QAAQ;YAC3E,OAAO;QACT;QACA,MAAMhG,MAAMb,kBAAkBgC,WAAWU,IAAIlB,KAAK;QAClD,OAAO;YACLX;YACAiG,MAAMxH,qBAAqB;gBACzBkC,OAAOkB,IAAIlB,KAAK;gBAChBd,QAAQgC,IAAIhC,MAAM;gBAClBqG,YAAYlG,IAAIQ,EAAE;YACpB;YACAwF;YACAlC,WAAWpF,gBACRmD,WAAAA,IAAIkC,GAAG,YAAPlC,WAAW,MACZO;QAEJ;IACF,EAAE,OAAOpB,OAAO;QACdsE,QAAQtE,KAAK,CAAC,yDAAyDa,IAAIhC,MAAM,EAAEmB;QACnF,OAAO;IACT;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAemF,oBACpBtE,GAAe,EACfuE,QAAkC,EAClCC,OAAsD,EACtDvE,QAAgB,EAChBE,QAAQC,KAAKC,GAAG,EAAE;IAElB,IAAI;YAMMtD;QALR,MAAMU,sBACJ8G,SAASpG,GAAG,EACZ9B,sBAAsB;YACpBoI,SAASD,QAAQC,OAAO;YACxBf,MAAMc,QAAQd,IAAI;YAClBO,EAAE,GAAElH,yBAAAA,sBAAsByH,QAAQP,EAAE,aAAhClH,yBAAqCyH,QAAQP,EAAE;YACnDJ,MAAM1D;YACN2D,OAAO;YACPV,gBAAgBnD;YAChBkE,MAAMI,SAASJ,IAAI;YACnBnG,QAAQgC,IAAIhC,MAAM;YAClBiE,WAAWsC,SAAStC,SAAS;QAC/B;IAEJ,EAAE,OAAO9C,OAAO;QACdsE,QAAQtE,KAAK,CAAC,gDAAgDoF,SAASpG,GAAG,CAACQ,EAAE,EAAEQ;IACjF;AACF"}