@aglyn/plugins-workflows 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/engine/crm-action-steps.js

@@ -1,452 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { buildCrmEmailActivity, CONTACT_LIFECYCLE_STAGE_LABELS, CONTACT_TAG_MAX_LENGTH, contactFacetPath, CRM_ACTIVITY_LOG_FULL_MESSAGE, CRM_COLLECTIONS, crmActivityLogHasRoom, crmEmailDeliveryTags, crmScopeTokens, crmTaskListFields, crmTaskReminderAfterEdit, normalizeContactEmail, parseCrmMemberRef, readContactFacet, visibleToHost } from "@aglyn/aglyn/server";
-import { consentGroupForSite, countCrmActivitiesForRecord, firebaseAdmin, newCrmActivityRef, orgDataQueryForHost, recomputeCrmNextTaskAt, restampCrmListFieldsAt, writeCrmEmailActivity } from "@aglyn/tenant-data-admin";
-// The leaf, not the barrel: this library's specs substitute the barrel
-// wholesale, and the lookup must reach the real index logic under them.
-import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
-import { FieldValue } from "firebase-admin/firestore";
-// The leaves, not the runtime barrel, for the reason `run-event-actions.ts`
-// gives: the specs substitute each one.
-import { OWNER_ASSIGNMENT_REFUSALS, reassignContactOwner } from "@aglyn/tenant-runtime/assign-contact-owner";
-/**
- * The steps that act on the CRM (AGL-2605) — named as a set because the
- * executor dispatches all five to one module and the docs list them as one
- * group, and a step added to the union but not here would be a server step
- * the executor silently skipped.
- */ export const CRM_ACTION_STEP_TYPES = new Set([
-    'setContactStage',
-    'addContactTag',
-    'assignContactOwner',
-    'createCrmTask',
-    'logCrmActivity'
-]);
-export function isCrmActionStep(step) {
-    return CRM_ACTION_STEP_TYPES.has(step.type);
-}
-const DAY_MS = 24 * 60 * 60 * 1000;
-/**
- * The contact an event payload names, as this site may see it.
- *
- * Id first, because a CRM event carries the document the door just wrote
- * and a lookup by id is a read, not a query. The address second, through
- * the org's address index narrowed to this site (AGL-2633), for every
- * event that predates the CRM and knows only who filled in the form — so
- * an address a merge folded into another record still reaches the person
- * who now holds it.
- */ async function resolveEventContact(hostId, payload) {
-    var _payload_contactId, _hit_data;
-    const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts');
-    const contactId = String((_payload_contactId = payload['contactId']) != null ? _payload_contactId : '').trim();
-    if (contactId) {
-        const doc = await contactsRef.doc(contactId).get();
-        if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {
-            var _doc_data;
-            return {
-                id: doc.id,
-                ref: doc.ref,
-                data: (_doc_data = doc.data()) != null ? _doc_data : {}
-            };
-        }
-    }
-    const hit = await findContactByEmail(contactsRef, payload['email'], {
-        hostId
-    });
-    return hit ? {
-        id: hit.id,
-        ref: hit.ref,
-        data: (_hit_data = hit.data()) != null ? _hit_data : {}
-    } : null;
-}
-/**
- * The uid a step names for somebody on the team — an owner, an assignee —
- * resolved against the org's roster, whichever way the step named them.
- *
- * A step names a member by uid when a picker wrote it and by address when a
- * person typed it, and the editor's one text field accepts either — so both
- * fields are read through `parseCrmMemberRef`, and an address typed into
- * the uid slot or a uid typed into the address slot still names the person.
- *
- * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by
- * the uid, so a uid costs one document read and must exist: `ownerUid` and
- * `assigneeUid` are fields every reader resolves as a member, and a
- * stranger's uid in one is a task nobody on the team can find. An address
- * is matched on the roster's own `email` field, and two production paths
- * create a member document WITHOUT one (a host-access re-grant, and an add
- * whose auth record carried none) — such a member is named by uid, which
- * is the reason the editor takes one.
- *
- * The roster is the only directory consulted. A project-level Auth lookup
- * by address would resolve people who are not on this organization at all
- * (AGL-1122). A reference that resolves neither way is an error, not a
- * stored string.
- */ async function resolveMemberUid(orgId, named, role) {
-    var _parseCrmMemberRef;
-    const ref = (_parseCrmMemberRef = parseCrmMemberRef(named.uid)) != null ? _parseCrmMemberRef : parseCrmMemberRef(named.email);
-    if (!ref) return {
-        error: `no ${role} named on the step`
-    };
-    if (!orgId) return {
-        error: 'this site has no organization'
-    };
-    const members = firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection('members');
-    if (ref.kind === 'uid') {
-        const member = await members.doc(ref.uid).get();
-        if (member.exists) return {
-            uid: ref.uid,
-            detail: ref.uid
-        };
-        return {
-            error: `no team member with the id ${ref.uid}`
-        };
-    }
-    const byField = (await members.where('email', '==', ref.email).limit(1).get()).docs[0];
-    if (byField) return {
-        uid: byField.id,
-        detail: ref.email
-    };
-    return {
-        error: `no team member with the address ${ref.email}`
-    };
-}
-/**
- * Runs one CRM step for the person the event names. Never throws for a
- * missing person, an unknown owner or a site with no org — those are
- * answered as `error` so the run records them; a Firestore failure
- * propagates to the executor's catch like every other step's would.
- */ export async function runCrmActionStep(env, actionId, step, payload, nowMs = Date.now()) {
-    var _contact_data_email, _env_org;
-    const { hostId } = env;
-    const contact = await resolveEventContact(hostId, payload);
-    if (!contact) {
-        var _ref, _payload_contactId;
-        const named = String((_ref = (_payload_contactId = payload['contactId']) != null ? _payload_contactId : payload['email']) != null ? _ref : '').trim();
-        return {
-            error: named ? `no contact this site can see for ${named}` : 'the event names no contact — no contactId or email in its payload'
-        };
-    }
-    /*
-   * THE HOLDER whose facet the write addresses — the site's consent group,
-   * which is the site alone unless the org declared the site one of a set
-   * that presents as one sender. Same resolution the capture doors use, so
-   * a stage set here lands in the facet the console reads.
-   */ const group = await consentGroupForSite(hostId);
-    const facet = readContactFacet(contact.data, group.groupId);
-    const email = String((_contact_data_email = contact.data['email']) != null ? _contact_data_email : '');
-    if (step.type === 'setContactStage') {
-        var _facet_lifecycleStage;
-        const previous = (_facet_lifecycleStage = facet.lifecycleStage) != null ? _facet_lifecycleStage : '';
-        const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage];
-        /*
-     * A stage set to what it already is changes nothing and ANNOUNCES
-     * nothing. The write is skipped so the row's `updatedAt` does not move
-     * for a non-event, and the absent emit is what stops an action that
-     * sets the stage it listens for from re-running on its own write —
-     * the depth guard bounds that chain, this ends it at once.
-     */ if (previous === step.lifecycleStage) {
-            return {
-                detail: `${label} (already)`
-            };
-        }
-        await contact.ref.update({
-            [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,
-            updatedAt: FieldValue.serverTimestamp()
-        });
-        // The stage is what the Contacts list filters by (AGL-3321).
-        await restampCrmListFieldsAt(contact.ref, 'contacts');
-        return {
-            detail: label,
-            emit: {
-                event: 'contactStageChanged',
-                payload: {
-                    contactId: contact.id,
-                    email,
-                    lifecycleStage: step.lifecycleStage,
-                    previousStage: previous
-                }
-            }
-        };
-    }
-    if (step.type === 'addContactTag') {
-        var _step_tag;
-        const tag = String((_step_tag = step.tag) != null ? _step_tag : '').trim().slice(0, CONTACT_TAG_MAX_LENGTH);
-        if (!tag) return {
-            error: 'the step has no tag'
-        };
-        // `arrayUnion`, so the tag a merchant already applied by hand is not
-        // duplicated and the tags beside it are kept.
-        await contact.ref.update({
-            [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),
-            updatedAt: FieldValue.serverTimestamp()
-        });
-        // The tags are what the Contacts list filters by (AGL-3321).
-        await restampCrmListFieldsAt(contact.ref, 'contacts');
-        return {
-            detail: tag
-        };
-    }
-    if (step.type === 'assignContactOwner') {
-        /*
-     * Through the one server assignment (AGL-2618), in both of the step's
-     * modes, rather than a facet write of its own: the helper is what
-     * moves the round-robin pointer inside the transaction that writes the
-     * owner, mirrors the owner onto the site's lead, and tells the new
-     * owner. A member named on the step is still resolved here — by
-     * address against the roster, as before — and handed over by uid; the
-     * helper checks the roster document again, which is one read and the
-     * same answer.
-     */ let assign;
-        let named = 'round robin';
-        if (step.roundRobin === true) {
-            assign = {
-                roundRobin: true
-            };
-        } else {
-            const owner = await resolveMemberUid(env.orgId, {
-                uid: step.ownerUid,
-                email: step.ownerEmail
-            }, 'owner');
-            if ('error' in owner) return {
-                error: owner.error
-            };
-            assign = {
-                memberUid: owner.uid
-            };
-            named = owner.detail;
-        }
-        const verdict = await reassignContactOwner({
-            hostId,
-            contactId: contact.id,
-            email,
-            assign
-        });
-        if (verdict.outcome === 'none') {
-            return {
-                error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason]
-            };
-        }
-        if (verdict.outcome === 'unchanged') {
-            return {
-                detail: `${named} (already)`
-            };
-        }
-        return {
-            detail: step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named
-        };
-    }
-    // The two record creators: a task and an activity are documents of
-    // their own beside the contact, stamped with the scope a contact
-    // captured on this site would carry — `crmScopeTokens` is the create
-    // path's own expression, so a record an automation made is visible to
-    // exactly the sites a record a person made would be.
-    if (!env.orgId) return {
-        error: 'this site has no organization'
-    };
-    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(env.orgId);
-    const visibleTo = crmScopeTokens((_env_org = env.org) != null ? _env_org : null, group);
-    const links = _extends({
-        contactId: contact.id
-    }, facet.companyId ? {
-        companyId: facet.companyId
-    } : {});
-    if (step.type === 'createCrmTask') {
-        var _step_title, _facet_ownerUid;
-        var _step_assigneeUid, _step_assigneeEmail;
-        const title = String((_step_title = step.title) != null ? _step_title : '').trim().slice(0, 200);
-        if (!title) return {
-            error: 'the task has no title'
-        };
-        const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0));
-        /*
-     * The assignee the step names, else the person who OWNS the contact,
-     * else nobody. A follow-up task belongs to whoever holds the
-     * relationship, and an automation that had to name one person for
-     * every contact it touches would assign the whole list to one rep. A
-     * named assignee who cannot be resolved is an error rather than a
-     * fallback to the owner: the author named somebody on purpose.
-     */ let assignee = (_facet_ownerUid = facet.ownerUid) != null ? _facet_ownerUid : '';
-        if (((_step_assigneeUid = step.assigneeUid) == null ? void 0 : _step_assigneeUid.trim()) || ((_step_assigneeEmail = step.assigneeEmail) == null ? void 0 : _step_assigneeEmail.trim())) {
-            const named = await resolveMemberUid(env.orgId, {
-                uid: step.assigneeUid,
-                email: step.assigneeEmail
-            }, 'assignee');
-            if ('error' in named) return {
-                error: named.error
-            };
-            assignee = named.uid;
-        }
-        const dueAtMs = nowMs + dueInDays * DAY_MS;
-        const task = _extends({
-            title,
-            kind: step.kind,
-            priority: 'normal',
-            status: 'open',
-            dueAtMs,
-            // The reminder a person's task gets (AGL-2659): the due time.
-            remindAtMs: crmTaskReminderAfterEdit({
-                dueAtMs,
-                previous: null
-            })
-        }, assignee ? {
-            assigneeUid: assignee
-        } : {}, {
-            createdByUid: '',
-            sourceActionId: actionId
-        }, links, {
-            hostId,
-            visibleTo,
-            createdAt: FieldValue.serverTimestamp(),
-            updatedAt: FieldValue.serverTimestamp()
-        });
-        // What the Tasks list searches by (AGL-3321), beside the task.
-        await orgRef.collection(CRM_COLLECTIONS.tasks).add(_extends({}, task, crmTaskListFields(task)));
-        // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);
-        // a figure that could not move is the Fields section's recompute's.
-        await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [
-            links
-        ]).catch((error)=>{
-            console.error('[workflow] next activity could not be recomputed', env.orgId, error);
-        });
-        return {
-            detail: title.slice(0, 60)
-        };
-    }
-    if (step.type === 'logCrmActivity') {
-        var _step_body;
-        const body = String((_step_body = step.body) != null ? _step_body : '').trim().slice(0, 2000);
-        if (!body) return {
-            error: 'the activity has no body'
-        };
-        /*
-     * The per-record ceiling (AGL-2611), and this step is the writer it
-     * exists for: a flow that logs on every page view fills one person's
-     * log in an afternoon. Refused into the run history as an error, the
-     * way an unresolvable assignee is, so the merchant reads why the flow
-     * stopped writing rather than finding a log that silently stopped.
-     */ const logged = await countCrmActivitiesForRecord(orgRef, links);
-        if (!crmActivityLogHasRoom(logged)) {
-            return {
-                error: CRM_ACTIVITY_LOG_FULL_MESSAGE
-            };
-        }
-        const activity = _extends({
-            kind: step.kind,
-            body,
-            atMs: nowMs,
-            byUid: '',
-            sourceActionId: actionId
-        }, links, {
-            hostId,
-            visibleTo,
-            createdAt: FieldValue.serverTimestamp(),
-            updatedAt: FieldValue.serverTimestamp()
-        });
-        await orgRef.collection(CRM_COLLECTIONS.activities).add(activity);
-        return {
-            detail: step.kind
-        };
-    }
-    return {
-        error: `unknown CRM step "${step.type}"`
-    };
-}
-/**
- * Whether — and where — an automation's email lands on a timeline.
- *
- * A `sendEmail` step is not a CRM step: it mails whatever address the event
- * carries, to a person who may be nobody the CRM knows. It earns a row on
- * exactly one condition, that the message is ADDRESSED TO THE CONTACT the
- * event is about — the person `resolveEventContact` finds, at the address
- * the row holds. A welcome sequence to a new contact is that; an internal
- * alert routed to a merchant's own address through `toField` is not, and a
- * row for it would put the merchant's inbox on a customer's history.
- *
- * Prepared ahead of the send, for the reason the console route mints its
- * id first: the webhook has nothing but the tags on the message to find
- * the row with. Nothing is written here. A record at the activity ceiling
- * earns no row — the message still goes, because the ceiling bounds the
- * log and not the mail — and neither does a site with no org to hold one.
- *
- * **Never throws.** The row is bookkeeping beside a send, and a lookup that
- * fails must not become a message that never left — the posture every
- * meter beside `sendEmail` takes. A failure here is logged and the message
- * goes out untagged.
- */ export async function prepareCrmEmailActivity(env, to, payload) {
-    if (!env.orgId) return null;
-    const address = normalizeContactEmail(to);
-    if (!address) return null;
-    try {
-        var _env_org;
-        const contact = await resolveEventContact(env.hostId, payload);
-        if (!contact || normalizeContactEmail(contact.data['email']) !== address) {
-            return null;
-        }
-        const group = await consentGroupForSite(env.hostId);
-        const facet = readContactFacet(contact.data, group.groupId);
-        const link = _extends({
-            contactId: contact.id
-        }, facet.companyId ? {
-            companyId: facet.companyId
-        } : {});
-        const firestore = firebaseAdmin.app().firestore();
-        const orgRef = firestore.collection('orgs').doc(env.orgId);
-        if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {
-            return null;
-        }
-        const ref = newCrmActivityRef(firestore, env.orgId);
-        return {
-            ref,
-            tags: crmEmailDeliveryTags({
-                orgId: env.orgId,
-                hostId: env.hostId,
-                activityId: ref.id
-            }),
-            link,
-            visibleTo: crmScopeTokens((_env_org = env.org) != null ? _env_org : null, group)
-        };
-    } catch (error) {
-        console.error('[crm] automation email activity could not be prepared', env.hostId, error);
-        return null;
-    }
-}
-/**
- * Writes the prepared row, once the provider has accepted the message.
- *
- * The same shape the console route logs — `buildCrmEmailActivity` is the
- * one builder — with the automation as its source and nobody as its
- * author. **Never throws**: the message has left, and a row that could not
- * be written is a gap on the timeline rather than a failed step.
- */ export async function logCrmEmailActivity(env, prepared, message, actionId, nowMs = Date.now()) {
-    try {
-        var _normalizeContactEmail;
-        await writeCrmEmailActivity(prepared.ref, buildCrmEmailActivity({
-            subject: message.subject,
-            body: message.body,
-            to: (_normalizeContactEmail = normalizeContactEmail(message.to)) != null ? _normalizeContactEmail : message.to,
-            atMs: nowMs,
-            byUid: '',
-            sourceActionId: actionId,
-            link: prepared.link,
-            hostId: env.hostId,
-            visibleTo: prepared.visibleTo
-        }));
-    } catch (error) {
-        console.error('[crm] automation email activity write failed', prepared.ref.id, error);
-    }
-}
-
-//# sourceMappingURL=crm-action-steps.js.map

package/src/lib/engine/crm-action-steps.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/workflows/src/lib/engine/crm-action-steps.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  buildCrmEmailActivity,\n  CONTACT_LIFECYCLE_STAGE_LABELS,\n  CONTACT_TAG_MAX_LENGTH,\n  contactFacetPath,\n  CRM_ACTIVITY_LOG_FULL_MESSAGE,\n  CRM_COLLECTIONS,\n  crmActivityLogHasRoom,\n  type CrmActivity,\n  type CrmActivityLink,\n  type CrmTask,\n  crmEmailDeliveryTags,\n  crmScopeTokens,\n  crmTaskListFields,\n  crmTaskReminderAfterEdit,\n  normalizeContactEmail,\n  parseCrmMemberRef,\n  readContactFacet,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  countCrmActivitiesForRecord,\n  firebaseAdmin,\n  newCrmActivityRef,\n  orgDataQueryForHost,\n  recomputeCrmNextTaskAt,\n  restampCrmListFieldsAt,\n  writeCrmEmailActivity,\n} from '@aglyn/tenant-data-admin'\n// The leaf, not the barrel: this library's specs substitute the barrel\n// wholesale, and the lookup must reach the real index logic under them.\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { FieldValue } from 'firebase-admin/firestore'\n// The leaves, not the runtime barrel, for the reason `run-event-actions.ts`\n// gives: the specs substitute each one.\nimport {\n  OWNER_ASSIGNMENT_REFUSALS,\n  reassignContactOwner,\n} from '@aglyn/tenant-runtime/assign-contact-owner'\nimport type { HostEventPayload } from '@aglyn/tenant-runtime/host-event-listeners'\nimport type { HostActionStep, HostActionStepType } from '@aglyn/aglyn/app-utils/actions'\n\n/**\n * The steps that act on the CRM (AGL-2605) — named as a set because the\n * executor dispatches all five to one module and the docs list them as one\n * group, and a step added to the union but not here would be a server step\n * the executor silently skipped.\n */\nexport const CRM_ACTION_STEP_TYPES: ReadonlySet<HostActionStepType> = new Set([\n  'setContactStage',\n  'addContactTag',\n  'assignContactOwner',\n  'createCrmTask',\n  'logCrmActivity',\n] as const)\n\n/** The CRM steps, as the type the executor narrows to. */\nexport type CrmActionStep = Extract<\n  HostActionStep,\n  {\n    type:\n      | 'setContactStage'\n      | 'addContactTag'\n      | 'assignContactOwner'\n      | 'createCrmTask'\n      | 'logCrmActivity'\n  }\n>\n\nexport function isCrmActionStep(step: HostActionStep): step is CrmActionStep {\n  return CRM_ACTION_STEP_TYPES.has(step.type)\n}\n\n/**\n * The CRM steps of an action run (AGL-2605): what `setContactStage`,\n * `addContactTag`, `assignContactOwner`, `createCrmTask` and\n * `logCrmActivity` actually write.\n *\n * Split out of `run-event-actions.ts` because the five share one shape the\n * other server steps do not: each begins by finding THE PERSON the event is\n * about, and each writes either inside the site's facet on that person or a\n * record stamped with the site's scope. One resolver and one scope\n * expression, used five times, rather than five copies drifting apart.\n *\n * ## The person is the event's, never the step's\n *\n * A step carries no contact reference. The contact is whoever the event\n * names — by `contactId` when the emitting door knew the document, and by\n * `email` otherwise, which is what every pre-CRM event carries. Both\n * lookups are scoped to what THIS site may see: a document the id names\n * but the site cannot read is treated as absent, exactly as the scoped\n * query would have treated it, so an event replayed against the wrong site\n * reaches nobody.\n *\n * ## A missing person is a reported no-op\n *\n * Nothing is written and the step's error names the reason, which lands in\n * the run summary beside the trigger — the same place \"why didn't it\n * fire?\" is answered for every other step. Silence here would make a\n * mis-wired trigger (a form with no email field) indistinguishable from a\n * working one.\n */\n\nexport interface CrmStepEnv {\n  hostId: string\n  /** The owning org's billing doc, already read by the run's gate. */\n  org: unknown\n  orgId: string | null\n}\n\nexport interface CrmStepOutcome {\n  /** The reason nothing was written, when nothing was. */\n  error?: string\n  /** The one fact worth carrying into the run summary. */\n  detail?: string\n  /**\n   * An event this step's write earned, for the CALLER to fan out under its\n   * own depth guard. Not emitted from here: a stage set by an automation is\n   * itself a stage change, and the action listening for it must run — but\n   * through the same nesting cap a `customEvent` chain has, or an action\n   * that sets the stage it listens for would run until the meter ran dry.\n   */\n  emit?: { event: 'contactStageChanged'; payload: HostEventPayload }\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000\n\ninterface ResolvedContact {\n  id: string\n  ref: FirebaseFirestore.DocumentReference\n  data: Record<string, unknown>\n}\n\n/**\n * The contact an event payload names, as this site may see it.\n *\n * Id first, because a CRM event carries the document the door just wrote\n * and a lookup by id is a read, not a query. The address second, through\n * the org's address index narrowed to this site (AGL-2633), for every\n * event that predates the CRM and knows only who filled in the form — so\n * an address a merge folded into another record still reaches the person\n * who now holds it.\n */\nasync function resolveEventContact(\n  hostId: string,\n  payload: HostEventPayload,\n): Promise<ResolvedContact | null> {\n  const { ref: contactsRef } = await orgDataQueryForHost(hostId, 'contacts')\n  const contactId = String(payload['contactId'] ?? '').trim()\n  if (contactId) {\n    const doc = await contactsRef.doc(contactId).get()\n    if (doc.exists && visibleToHost(doc.get('visibleTo'), hostId)) {\n      return { id: doc.id, ref: doc.ref, data: doc.data() ?? {} }\n    }\n  }\n  const hit = await findContactByEmail(contactsRef, payload['email'], { hostId })\n  return hit ? { id: hit.id, ref: hit.ref, data: hit.data() ?? {} } : null\n}\n\n/**\n * The uid a step names for somebody on the team — an owner, an assignee —\n * resolved against the org's roster, whichever way the step named them.\n *\n * A step names a member by uid when a picker wrote it and by address when a\n * person typed it, and the editor's one text field accepts either — so both\n * fields are read through `parseCrmMemberRef`, and an address typed into\n * the uid slot or a uid typed into the address slot still names the person.\n *\n * Both are RESOLVED, not trusted. `orgs/{orgId}/members/{uid}` is keyed by\n * the uid, so a uid costs one document read and must exist: `ownerUid` and\n * `assigneeUid` are fields every reader resolves as a member, and a\n * stranger's uid in one is a task nobody on the team can find. An address\n * is matched on the roster's own `email` field, and two production paths\n * create a member document WITHOUT one (a host-access re-grant, and an add\n * whose auth record carried none) — such a member is named by uid, which\n * is the reason the editor takes one.\n *\n * The roster is the only directory consulted. A project-level Auth lookup\n * by address would resolve people who are not on this organization at all\n * (AGL-1122). A reference that resolves neither way is an error, not a\n * stored string.\n */\nasync function resolveMemberUid(\n  orgId: string | null,\n  named: { uid?: string; email?: string },\n  role: 'owner' | 'assignee',\n): Promise<{ uid: string; detail: string } | { error: string }> {\n  const ref =\n    parseCrmMemberRef(named.uid) ?? parseCrmMemberRef(named.email)\n  if (!ref) return { error: `no ${role} named on the step` }\n  if (!orgId) return { error: 'this site has no organization' }\n  const members = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection('members')\n  if (ref.kind === 'uid') {\n    const member = await members.doc(ref.uid).get()\n    if (member.exists) return { uid: ref.uid, detail: ref.uid }\n    return { error: `no team member with the id ${ref.uid}` }\n  }\n  const byField = (await members.where('email', '==', ref.email).limit(1).get())\n    .docs[0]\n  if (byField) return { uid: byField.id, detail: ref.email }\n  return { error: `no team member with the address ${ref.email}` }\n}\n\n/**\n * Runs one CRM step for the person the event names. Never throws for a\n * missing person, an unknown owner or a site with no org — those are\n * answered as `error` so the run records them; a Firestore failure\n * propagates to the executor's catch like every other step's would.\n */\nexport async function runCrmActionStep(\n  env: CrmStepEnv,\n  actionId: string,\n  step: CrmActionStep,\n  payload: HostEventPayload,\n  nowMs = Date.now(),\n): Promise<CrmStepOutcome> {\n  const { hostId } = env\n  const contact = await resolveEventContact(hostId, payload)\n  if (!contact) {\n    const named = String(payload['contactId'] ?? payload['email'] ?? '').trim()\n    return {\n      error: named\n        ? `no contact this site can see for ${named}`\n        : 'the event names no contact — no contactId or email in its payload',\n    }\n  }\n  /*\n   * THE HOLDER whose facet the write addresses — the site's consent group,\n   * which is the site alone unless the org declared the site one of a set\n   * that presents as one sender. Same resolution the capture doors use, so\n   * a stage set here lands in the facet the console reads.\n   */\n  const group = await consentGroupForSite(hostId)\n  const facet = readContactFacet(contact.data, group.groupId)\n  const email = String(contact.data['email'] ?? '')\n\n  if (step.type === 'setContactStage') {\n    const previous = facet.lifecycleStage ?? ''\n    const label = CONTACT_LIFECYCLE_STAGE_LABELS[step.lifecycleStage]\n    /*\n     * A stage set to what it already is changes nothing and ANNOUNCES\n     * nothing. The write is skipped so the row's `updatedAt` does not move\n     * for a non-event, and the absent emit is what stops an action that\n     * sets the stage it listens for from re-running on its own write —\n     * the depth guard bounds that chain, this ends it at once.\n     */\n    if (previous === step.lifecycleStage) {\n      return { detail: `${label} (already)` }\n    }\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'lifecycleStage')]: step.lifecycleStage,\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The stage is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contact.ref, 'contacts')\n    return {\n      detail: label,\n      emit: {\n        event: 'contactStageChanged',\n        payload: {\n          contactId: contact.id,\n          email,\n          lifecycleStage: step.lifecycleStage,\n          previousStage: previous,\n        },\n      },\n    }\n  }\n\n  if (step.type === 'addContactTag') {\n    const tag = String(step.tag ?? '')\n      .trim()\n      .slice(0, CONTACT_TAG_MAX_LENGTH)\n    if (!tag) return { error: 'the step has no tag' }\n    // `arrayUnion`, so the tag a merchant already applied by hand is not\n    // duplicated and the tags beside it are kept.\n    await contact.ref.update({\n      [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(tag),\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The tags are what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contact.ref, 'contacts')\n    return { detail: tag }\n  }\n\n  if (step.type === 'assignContactOwner') {\n    /*\n     * Through the one server assignment (AGL-2618), in both of the step's\n     * modes, rather than a facet write of its own: the helper is what\n     * moves the round-robin pointer inside the transaction that writes the\n     * owner, mirrors the owner onto the site's lead, and tells the new\n     * owner. A member named on the step is still resolved here — by\n     * address against the roster, as before — and handed over by uid; the\n     * helper checks the roster document again, which is one read and the\n     * same answer.\n     */\n    let assign: { memberUid: string } | { roundRobin: true }\n    let named = 'round robin'\n    if (step.roundRobin === true) {\n      assign = { roundRobin: true }\n    } else {\n      const owner = await resolveMemberUid(\n        env.orgId,\n        { uid: step.ownerUid, email: step.ownerEmail },\n        'owner',\n      )\n      if ('error' in owner) return { error: owner.error }\n      assign = { memberUid: owner.uid }\n      named = owner.detail\n    }\n    const verdict = await reassignContactOwner({\n      hostId,\n      contactId: contact.id,\n      email,\n      assign,\n    })\n    if (verdict.outcome === 'none') {\n      return { error: OWNER_ASSIGNMENT_REFUSALS[verdict.reason] }\n    }\n    if (verdict.outcome === 'unchanged') {\n      return { detail: `${named} (already)` }\n    }\n    return {\n      detail:\n        step.roundRobin === true ? `round robin → ${verdict.ownerUid}` : named,\n    }\n  }\n\n  // The two record creators: a task and an activity are documents of\n  // their own beside the contact, stamped with the scope a contact\n  // captured on this site would carry — `crmScopeTokens` is the create\n  // path's own expression, so a record an automation made is visible to\n  // exactly the sites a record a person made would be.\n  if (!env.orgId) return { error: 'this site has no organization' }\n  const orgRef = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(env.orgId)\n  const visibleTo = crmScopeTokens(\n    (env.org ?? null) as Record<string, unknown> | null,\n    group,\n  )\n  const links = {\n    contactId: contact.id,\n    ...(facet.companyId ? { companyId: facet.companyId } : {}),\n  }\n\n  if (step.type === 'createCrmTask') {\n    const title = String(step.title ?? '')\n      .trim()\n      .slice(0, 200)\n    if (!title) return { error: 'the task has no title' }\n    const dueInDays = Math.max(0, Math.round(Number(step.dueInDays) || 0))\n    /*\n     * The assignee the step names, else the person who OWNS the contact,\n     * else nobody. A follow-up task belongs to whoever holds the\n     * relationship, and an automation that had to name one person for\n     * every contact it touches would assign the whole list to one rep. A\n     * named assignee who cannot be resolved is an error rather than a\n     * fallback to the owner: the author named somebody on purpose.\n     */\n    let assignee = facet.ownerUid ?? ''\n    if (step.assigneeUid?.trim() || step.assigneeEmail?.trim()) {\n      const named = await resolveMemberUid(\n        env.orgId,\n        { uid: step.assigneeUid, email: step.assigneeEmail },\n        'assignee',\n      )\n      if ('error' in named) return { error: named.error }\n      assignee = named.uid\n    }\n    const dueAtMs = nowMs + dueInDays * DAY_MS\n    const task: CrmTask = {\n      title,\n      kind: step.kind,\n      priority: 'normal',\n      status: 'open',\n      dueAtMs,\n      // The reminder a person's task gets (AGL-2659): the due time.\n      remindAtMs: crmTaskReminderAfterEdit({ dueAtMs, previous: null }),\n      ...(assignee ? { assigneeUid: assignee } : {}),\n      createdByUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    // What the Tasks list searches by (AGL-3321), beside the task.\n    await orgRef.collection(CRM_COLLECTIONS.tasks).add({ ...task, ...crmTaskListFields(task) })\n    // The contact and company the task names carry `nextTaskAtMs` (AGL-2661);\n    // a figure that could not move is the Fields section's recompute's.\n    await recomputeCrmNextTaskAt(firebaseAdmin.app().firestore(), env.orgId, [links]).catch((error: unknown) => {\n      console.error('[workflow] next activity could not be recomputed', env.orgId, error)\n    })\n    return { detail: title.slice(0, 60) }\n  }\n\n  if (step.type === 'logCrmActivity') {\n    const body = String(step.body ?? '')\n      .trim()\n      .slice(0, 2000)\n    if (!body) return { error: 'the activity has no body' }\n    /*\n     * The per-record ceiling (AGL-2611), and this step is the writer it\n     * exists for: a flow that logs on every page view fills one person's\n     * log in an afternoon. Refused into the run history as an error, the\n     * way an unresolvable assignee is, so the merchant reads why the flow\n     * stopped writing rather than finding a log that silently stopped.\n     */\n    const logged = await countCrmActivitiesForRecord(orgRef, links)\n    if (!crmActivityLogHasRoom(logged)) {\n      return { error: CRM_ACTIVITY_LOG_FULL_MESSAGE }\n    }\n    const activity: CrmActivity = {\n      kind: step.kind,\n      body,\n      atMs: nowMs,\n      byUid: '',\n      sourceActionId: actionId,\n      ...links,\n      hostId,\n      visibleTo,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    await orgRef.collection(CRM_COLLECTIONS.activities).add(activity)\n    return { detail: step.kind }\n  }\n\n  return { error: `unknown CRM step \"${(step as { type: string }).type}\"` }\n}\n\n/**\n * The activity row a `sendEmail` step's message will be logged as, prepared\n * BEFORE the send (AGL-2615): the minted reference whose id rides the\n * message as a tag, the links it files under, and the scope it is stamped\n * with. `null` when the message earns no row.\n */\nexport interface PreparedCrmEmailActivity {\n  ref: FirebaseFirestore.DocumentReference\n  /** The provider tags the delivery webhook finds the row by. */\n  tags: { name: string; value: string }[]\n  link: CrmActivityLink\n  visibleTo: string[]\n}\n\n/**\n * Whether — and where — an automation's email lands on a timeline.\n *\n * A `sendEmail` step is not a CRM step: it mails whatever address the event\n * carries, to a person who may be nobody the CRM knows. It earns a row on\n * exactly one condition, that the message is ADDRESSED TO THE CONTACT the\n * event is about — the person `resolveEventContact` finds, at the address\n * the row holds. A welcome sequence to a new contact is that; an internal\n * alert routed to a merchant's own address through `toField` is not, and a\n * row for it would put the merchant's inbox on a customer's history.\n *\n * Prepared ahead of the send, for the reason the console route mints its\n * id first: the webhook has nothing but the tags on the message to find\n * the row with. Nothing is written here. A record at the activity ceiling\n * earns no row — the message still goes, because the ceiling bounds the\n * log and not the mail — and neither does a site with no org to hold one.\n *\n * **Never throws.** The row is bookkeeping beside a send, and a lookup that\n * fails must not become a message that never left — the posture every\n * meter beside `sendEmail` takes. A failure here is logged and the message\n * goes out untagged.\n */\nexport async function prepareCrmEmailActivity(\n  env: CrmStepEnv,\n  to: string,\n  payload: HostEventPayload,\n): Promise<PreparedCrmEmailActivity | null> {\n  if (!env.orgId) return null\n  const address = normalizeContactEmail(to)\n  if (!address) return null\n  try {\n    const contact = await resolveEventContact(env.hostId, payload)\n    if (!contact || normalizeContactEmail(contact.data['email']) !== address) {\n      return null\n    }\n    const group = await consentGroupForSite(env.hostId)\n    const facet = readContactFacet(contact.data, group.groupId)\n    const link: CrmActivityLink = {\n      contactId: contact.id,\n      ...(facet.companyId ? { companyId: facet.companyId } : {}),\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(env.orgId)\n    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) {\n      return null\n    }\n    const ref = newCrmActivityRef(firestore, env.orgId)\n    return {\n      ref,\n      tags: crmEmailDeliveryTags({\n        orgId: env.orgId,\n        hostId: env.hostId,\n        activityId: ref.id,\n      }),\n      link,\n      visibleTo: crmScopeTokens(\n        (env.org ?? null) as Record<string, unknown> | null,\n        group,\n      ),\n    }\n  } catch (error) {\n    console.error('[crm] automation email activity could not be prepared', env.hostId, error)\n    return null\n  }\n}\n\n/**\n * Writes the prepared row, once the provider has accepted the message.\n *\n * The same shape the console route logs — `buildCrmEmailActivity` is the\n * one builder — with the automation as its source and nobody as its\n * author. **Never throws**: the message has left, and a row that could not\n * be written is a gap on the timeline rather than a failed step.\n */\nexport async function logCrmEmailActivity(\n  env: CrmStepEnv,\n  prepared: PreparedCrmEmailActivity,\n  message: { subject: string; body: string; to: string },\n  actionId: string,\n  nowMs = Date.now(),\n): Promise<void> {\n  try {\n    await writeCrmEmailActivity(\n      prepared.ref,\n      buildCrmEmailActivity({\n        subject: message.subject,\n        body: message.body,\n        to: normalizeContactEmail(message.to) ?? message.to,\n        atMs: nowMs,\n        byUid: '',\n        sourceActionId: actionId,\n        link: prepared.link,\n        hostId: env.hostId,\n        visibleTo: prepared.visibleTo,\n      }),\n    )\n  } catch (error) {\n    console.error('[crm] automation email activity write failed', prepared.ref.id, error)\n  }\n}\n"],"names":["buildCrmEmailActivity","CONTACT_LIFECYCLE_STAGE_LABELS","CONTACT_TAG_MAX_LENGTH","contactFacetPath","CRM_ACTIVITY_LOG_FULL_MESSAGE","CRM_COLLECTIONS","crmActivityLogHasRoom","crmEmailDeliveryTags","crmScopeTokens","crmTaskListFields","crmTaskReminderAfterEdit","normalizeContactEmail","parseCrmMemberRef","readContactFacet","visibleToHost","consentGroupForSite","countCrmActivitiesForRecord","firebaseAdmin","newCrmActivityRef","orgDataQueryForHost","recomputeCrmNextTaskAt","restampCrmListFieldsAt","writeCrmEmailActivity","findContactByEmail","FieldValue","OWNER_ASSIGNMENT_REFUSALS","reassignContactOwner","CRM_ACTION_STEP_TYPES","Set","isCrmActionStep","step","has","type","DAY_MS","resolveEventContact","hostId","payload","hit","ref","contactsRef","contactId","String","trim","doc","get","exists","id","data","resolveMemberUid","orgId","named","role","uid","email","error","members","app","firestore","collection","kind","member","detail","byField","where","limit","docs","runCrmActionStep","env","actionId","nowMs","Date","now","contact","group","facet","groupId","previous","lifecycleStage","label","update","updatedAt","serverTimestamp","emit","event","previousStage","tag","slice","arrayUnion","assign","roundRobin","owner","ownerUid","ownerEmail","memberUid","verdict","outcome","reason","orgRef","visibleTo","org","links","companyId","title","dueInDays","Math","max","round","Number","assignee","assigneeUid","assigneeEmail","dueAtMs","task","priority","status","remindAtMs","createdByUid","sourceActionId","createdAt","tasks","add","catch","console","body","logged","activity","atMs","byUid","activities","prepareCrmEmailActivity","to","address","link","tags","activityId","logCrmEmailActivity","prepared","message","subject"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,6BAA6B,EAC7BC,eAAe,EACfC,qBAAqB,EAIrBC,oBAAoB,EACpBC,cAAc,EACdC,iBAAiB,EACjBC,wBAAwB,EACxBC,qBAAqB,EACrBC,iBAAiB,EACjBC,gBAAgB,EAChBC,aAAa,QACR,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,2BAA2B,EAC3BC,aAAa,EACbC,iBAAiB,EACjBC,mBAAmB,EACnBC,sBAAsB,EACtBC,sBAAsB,EACtBC,qBAAqB,QAChB,2BAA0B;AACjC,uEAAuE;AACvE,wEAAwE;AACxE,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,4EAA4E;AAC5E,wCAAwC;AACxC,SACEC,yBAAyB,EACzBC,oBAAoB,QACf,6CAA4C;AAInD;;;;;CAKC,GACD,OAAO,MAAMC,wBAAyD,IAAIC,IAAI;IAC5E;IACA;IACA;IACA;IACA;CACD,EAAU;AAeX,OAAO,SAASC,gBAAgBC,IAAoB;IAClD,OAAOH,sBAAsBI,GAAG,CAACD,KAAKE,IAAI;AAC5C;AAsDA,MAAMC,SAAS,KAAK,KAAK,KAAK;AAQ9B;;;;;;;;;CASC,GACD,eAAeC,oBACbC,MAAc,EACdC,OAAyB;QAGAA,oBAQsBC;IAT/C,MAAM,EAAEC,KAAKC,WAAW,EAAE,GAAG,MAAMpB,oBAAoBgB,QAAQ;IAC/D,MAAMK,YAAYC,QAAOL,qBAAAA,OAAO,CAAC,YAAY,YAApBA,qBAAwB,IAAIM,IAAI;IACzD,IAAIF,WAAW;QACb,MAAMG,MAAM,MAAMJ,YAAYI,GAAG,CAACH,WAAWI,GAAG;QAChD,IAAID,IAAIE,MAAM,IAAI/B,cAAc6B,IAAIC,GAAG,CAAC,cAAcT,SAAS;gBACpBQ;YAAzC,OAAO;gBAAEG,IAAIH,IAAIG,EAAE;gBAAER,KAAKK,IAAIL,GAAG;gBAAES,IAAI,GAAEJ,YAAAA,IAAII,IAAI,cAARJ,YAAc,CAAC;YAAE;QAC5D;IACF;IACA,MAAMN,MAAM,MAAMd,mBAAmBgB,aAAaH,OAAO,CAAC,QAAQ,EAAE;QAAED;IAAO;IAC7E,OAAOE,MAAM;QAAES,IAAIT,IAAIS,EAAE;QAAER,KAAKD,IAAIC,GAAG;QAAES,IAAI,GAAEV,YAAAA,IAAIU,IAAI,cAARV,YAAc,CAAC;IAAE,IAAI;AACtE;AAEA;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,eAAeW,iBACbC,KAAoB,EACpBC,KAAuC,EACvCC,IAA0B;QAGxBvC;IADF,MAAM0B,OACJ1B,qBAAAA,kBAAkBsC,MAAME,GAAG,aAA3BxC,qBAAgCA,kBAAkBsC,MAAMG,KAAK;IAC/D,IAAI,CAACf,KAAK,OAAO;QAAEgB,OAAO,CAAC,GAAG,EAAEH,KAAK,kBAAkB,CAAC;IAAC;IACzD,IAAI,CAACF,OAAO,OAAO;QAAEK,OAAO;IAAgC;IAC5D,MAAMC,UAAUtC,cACbuC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXf,GAAG,CAACM,OACJS,UAAU,CAAC;IACd,IAAIpB,IAAIqB,IAAI,KAAK,OAAO;QACtB,MAAMC,SAAS,MAAML,QAAQZ,GAAG,CAACL,IAAIc,GAAG,EAAER,GAAG;QAC7C,IAAIgB,OAAOf,MAAM,EAAE,OAAO;YAAEO,KAAKd,IAAIc,GAAG;YAAES,QAAQvB,IAAIc,GAAG;QAAC;QAC1D,OAAO;YAAEE,OAAO,CAAC,2BAA2B,EAAEhB,IAAIc,GAAG,EAAE;QAAC;IAC1D;IACA,MAAMU,UAAU,AAAC,CAAA,MAAMP,QAAQQ,KAAK,CAAC,SAAS,MAAMzB,IAAIe,KAAK,EAAEW,KAAK,CAAC,GAAGpB,GAAG,EAAC,EACzEqB,IAAI,CAAC,EAAE;IACV,IAAIH,SAAS,OAAO;QAAEV,KAAKU,QAAQhB,EAAE;QAAEe,QAAQvB,IAAIe,KAAK;IAAC;IACzD,OAAO;QAAEC,OAAO,CAAC,gCAAgC,EAAEhB,IAAIe,KAAK,EAAE;IAAC;AACjE;AAEA;;;;;CAKC,GACD,OAAO,eAAea,iBACpBC,GAAe,EACfC,QAAgB,EAChBtC,IAAmB,EACnBM,OAAyB,EACzBiC,QAAQC,KAAKC,GAAG,EAAE;QAoBGC,qBA0GlBL;IA5HH,MAAM,EAAEhC,MAAM,EAAE,GAAGgC;IACnB,MAAMK,UAAU,MAAMtC,oBAAoBC,QAAQC;IAClD,IAAI,CAACoC,SAAS;YACSpC,MAAAA;QAArB,MAAMc,QAAQT,QAAOL,QAAAA,qBAAAA,OAAO,CAAC,YAAY,YAApBA,qBAAwBA,OAAO,CAAC,QAAQ,YAAxCA,OAA4C,IAAIM,IAAI;QACzE,OAAO;YACLY,OAAOJ,QACH,CAAC,iCAAiC,EAAEA,OAAO,GAC3C;QACN;IACF;IACA;;;;;GAKC,GACD,MAAMuB,QAAQ,MAAM1D,oBAAoBoB;IACxC,MAAMuC,QAAQ7D,iBAAiB2D,QAAQzB,IAAI,EAAE0B,MAAME,OAAO;IAC1D,MAAMtB,QAAQZ,QAAO+B,sBAAAA,QAAQzB,IAAI,CAAC,QAAQ,YAArByB,sBAAyB;IAE9C,IAAI1C,KAAKE,IAAI,KAAK,mBAAmB;YAClB0C;QAAjB,MAAME,YAAWF,wBAAAA,MAAMG,cAAc,YAApBH,wBAAwB;QACzC,MAAMI,QAAQ7E,8BAA8B,CAAC6B,KAAK+C,cAAc,CAAC;QACjE;;;;;;KAMC,GACD,IAAID,aAAa9C,KAAK+C,cAAc,EAAE;YACpC,OAAO;gBAAEhB,QAAQ,GAAGiB,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,MAAMN,QAAQlC,GAAG,CAACyC,MAAM,CAAC;YACvB,CAAC5E,iBAAiBsE,MAAME,OAAO,EAAE,kBAAkB,EAAE7C,KAAK+C,cAAc;YACxEG,WAAWxD,WAAWyD,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM5D,uBAAuBmD,QAAQlC,GAAG,EAAE;QAC1C,OAAO;YACLuB,QAAQiB;YACRI,MAAM;gBACJC,OAAO;gBACP/C,SAAS;oBACPI,WAAWgC,QAAQ1B,EAAE;oBACrBO;oBACAwB,gBAAgB/C,KAAK+C,cAAc;oBACnCO,eAAeR;gBACjB;YACF;QACF;IACF;IAEA,IAAI9C,KAAKE,IAAI,KAAK,iBAAiB;YACdF;QAAnB,MAAMuD,MAAM5C,QAAOX,YAAAA,KAAKuD,GAAG,YAARvD,YAAY,IAC5BY,IAAI,GACJ4C,KAAK,CAAC,GAAGpF;QACZ,IAAI,CAACmF,KAAK,OAAO;YAAE/B,OAAO;QAAsB;QAChD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAMkB,QAAQlC,GAAG,CAACyC,MAAM,CAAC;YACvB,CAAC5E,iBAAiBsE,MAAME,OAAO,EAAE,QAAQ,EAAEnD,WAAW+D,UAAU,CAACF;YACjEL,WAAWxD,WAAWyD,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM5D,uBAAuBmD,QAAQlC,GAAG,EAAE;QAC1C,OAAO;YAAEuB,QAAQwB;QAAI;IACvB;IAEA,IAAIvD,KAAKE,IAAI,KAAK,sBAAsB;QACtC;;;;;;;;;KASC,GACD,IAAIwD;QACJ,IAAItC,QAAQ;QACZ,IAAIpB,KAAK2D,UAAU,KAAK,MAAM;YAC5BD,SAAS;gBAAEC,YAAY;YAAK;QAC9B,OAAO;YACL,MAAMC,QAAQ,MAAM1C,iBAClBmB,IAAIlB,KAAK,EACT;gBAAEG,KAAKtB,KAAK6D,QAAQ;gBAAEtC,OAAOvB,KAAK8D,UAAU;YAAC,GAC7C;YAEF,IAAI,WAAWF,OAAO,OAAO;gBAAEpC,OAAOoC,MAAMpC,KAAK;YAAC;YAClDkC,SAAS;gBAAEK,WAAWH,MAAMtC,GAAG;YAAC;YAChCF,QAAQwC,MAAM7B,MAAM;QACtB;QACA,MAAMiC,UAAU,MAAMpE,qBAAqB;YACzCS;YACAK,WAAWgC,QAAQ1B,EAAE;YACrBO;YACAmC;QACF;QACA,IAAIM,QAAQC,OAAO,KAAK,QAAQ;YAC9B,OAAO;gBAAEzC,OAAO7B,yBAAyB,CAACqE,QAAQE,MAAM,CAAC;YAAC;QAC5D;QACA,IAAIF,QAAQC,OAAO,KAAK,aAAa;YACnC,OAAO;gBAAElC,QAAQ,GAAGX,MAAM,UAAU,CAAC;YAAC;QACxC;QACA,OAAO;YACLW,QACE/B,KAAK2D,UAAU,KAAK,OAAO,CAAC,cAAc,EAAEK,QAAQH,QAAQ,EAAE,GAAGzC;QACrE;IACF;IAEA,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,sEAAsE;IACtE,qDAAqD;IACrD,IAAI,CAACiB,IAAIlB,KAAK,EAAE,OAAO;QAAEK,OAAO;IAAgC;IAChE,MAAM2C,SAAShF,cACZuC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXf,GAAG,CAACwB,IAAIlB,KAAK;IAChB,MAAMiD,YAAY1F,gBACf2D,WAAAA,IAAIgC,GAAG,YAAPhC,WAAW,MACZM;IAEF,MAAM2B,QAAQ;QACZ5D,WAAWgC,QAAQ1B,EAAE;OACjB4B,MAAM2B,SAAS,GAAG;QAAEA,WAAW3B,MAAM2B,SAAS;IAAC,IAAI,CAAC;IAG1D,IAAIvE,KAAKE,IAAI,KAAK,iBAAiB;YACZF,aAaN4C;YACX5C,mBAA4BA;QAdhC,MAAMwE,QAAQ7D,QAAOX,cAAAA,KAAKwE,KAAK,YAAVxE,cAAc,IAChCY,IAAI,GACJ4C,KAAK,CAAC,GAAG;QACZ,IAAI,CAACgB,OAAO,OAAO;YAAEhD,OAAO;QAAwB;QACpD,MAAMiD,YAAYC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,OAAO7E,KAAKyE,SAAS,KAAK;QACnE;;;;;;;KAOC,GACD,IAAIK,YAAWlC,kBAAAA,MAAMiB,QAAQ,YAAdjB,kBAAkB;QACjC,IAAI5C,EAAAA,oBAAAA,KAAK+E,WAAW,qBAAhB/E,kBAAkBY,IAAI,SAAMZ,sBAAAA,KAAKgF,aAAa,qBAAlBhF,oBAAoBY,IAAI,KAAI;YAC1D,MAAMQ,QAAQ,MAAMF,iBAClBmB,IAAIlB,KAAK,EACT;gBAAEG,KAAKtB,KAAK+E,WAAW;gBAAExD,OAAOvB,KAAKgF,aAAa;YAAC,GACnD;YAEF,IAAI,WAAW5D,OAAO,OAAO;gBAAEI,OAAOJ,MAAMI,KAAK;YAAC;YAClDsD,WAAW1D,MAAME,GAAG;QACtB;QACA,MAAM2D,UAAU1C,QAAQkC,YAAYtE;QACpC,MAAM+E,OAAgB;YACpBV;YACA3C,MAAM7B,KAAK6B,IAAI;YACfsD,UAAU;YACVC,QAAQ;YACRH;YACA,8DAA8D;YAC9DI,YAAYzG,yBAAyB;gBAAEqG;gBAASnC,UAAU;YAAK;WAC3DgC,WAAW;YAAEC,aAAaD;QAAS,IAAI,CAAC;YAC5CQ,cAAc;YACdC,gBAAgBjD;WACbgC;YACHjE;YACA+D;YACAoB,WAAW9F,WAAWyD,eAAe;YACrCD,WAAWxD,WAAWyD,eAAe;;QAEvC,+DAA+D;QAC/D,MAAMgB,OAAOvC,UAAU,CAACrD,gBAAgBkH,KAAK,EAAEC,GAAG,CAAC,aAAKR,MAASvG,kBAAkBuG;QACnF,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM5F,uBAAuBH,cAAcuC,GAAG,GAAGC,SAAS,IAAIU,IAAIlB,KAAK,EAAE;YAACmD;SAAM,EAAEqB,KAAK,CAAC,CAACnE;YACvFoE,QAAQpE,KAAK,CAAC,oDAAoDa,IAAIlB,KAAK,EAAEK;QAC/E;QACA,OAAO;YAAEO,QAAQyC,MAAMhB,KAAK,CAAC,GAAG;QAAI;IACtC;IAEA,IAAIxD,KAAKE,IAAI,KAAK,kBAAkB;YACdF;QAApB,MAAM6F,OAAOlF,QAAOX,aAAAA,KAAK6F,IAAI,YAAT7F,aAAa,IAC9BY,IAAI,GACJ4C,KAAK,CAAC,GAAG;QACZ,IAAI,CAACqC,MAAM,OAAO;YAAErE,OAAO;QAA2B;QACtD;;;;;;KAMC,GACD,MAAMsE,SAAS,MAAM5G,4BAA4BiF,QAAQG;QACzD,IAAI,CAAC9F,sBAAsBsH,SAAS;YAClC,OAAO;gBAAEtE,OAAOlD;YAA8B;QAChD;QACA,MAAMyH,WAAwB;YAC5BlE,MAAM7B,KAAK6B,IAAI;YACfgE;YACAG,MAAMzD;YACN0D,OAAO;YACPV,gBAAgBjD;WACbgC;YACHjE;YACA+D;YACAoB,WAAW9F,WAAWyD,eAAe;YACrCD,WAAWxD,WAAWyD,eAAe;;QAEvC,MAAMgB,OAAOvC,UAAU,CAACrD,gBAAgB2H,UAAU,EAAER,GAAG,CAACK;QACxD,OAAO;YAAEhE,QAAQ/B,KAAK6B,IAAI;QAAC;IAC7B;IAEA,OAAO;QAAEL,OAAO,CAAC,kBAAkB,EAAE,AAACxB,KAA0BE,IAAI,CAAC,CAAC,CAAC;IAAC;AAC1E;AAgBA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,eAAeiG,wBACpB9D,GAAe,EACf+D,EAAU,EACV9F,OAAyB;IAEzB,IAAI,CAAC+B,IAAIlB,KAAK,EAAE,OAAO;IACvB,MAAMkF,UAAUxH,sBAAsBuH;IACtC,IAAI,CAACC,SAAS,OAAO;IACrB,IAAI;YA0BGhE;QAzBL,MAAMK,UAAU,MAAMtC,oBAAoBiC,IAAIhC,MAAM,EAAEC;QACtD,IAAI,CAACoC,WAAW7D,sBAAsB6D,QAAQzB,IAAI,CAAC,QAAQ,MAAMoF,SAAS;YACxE,OAAO;QACT;QACA,MAAM1D,QAAQ,MAAM1D,oBAAoBoD,IAAIhC,MAAM;QAClD,MAAMuC,QAAQ7D,iBAAiB2D,QAAQzB,IAAI,EAAE0B,MAAME,OAAO;QAC1D,MAAMyD,OAAwB;YAC5B5F,WAAWgC,QAAQ1B,EAAE;WACjB4B,MAAM2B,SAAS,GAAG;YAAEA,WAAW3B,MAAM2B,SAAS;QAAC,IAAI,CAAC;QAE1D,MAAM5C,YAAYxC,cAAcuC,GAAG,GAAGC,SAAS;QAC/C,MAAMwC,SAASxC,UAAUC,UAAU,CAAC,QAAQf,GAAG,CAACwB,IAAIlB,KAAK;QACzD,IAAI,CAAC3C,sBAAsB,MAAMU,4BAA4BiF,QAAQmC,QAAQ;YAC3E,OAAO;QACT;QACA,MAAM9F,MAAMpB,kBAAkBuC,WAAWU,IAAIlB,KAAK;QAClD,OAAO;YACLX;YACA+F,MAAM9H,qBAAqB;gBACzB0C,OAAOkB,IAAIlB,KAAK;gBAChBd,QAAQgC,IAAIhC,MAAM;gBAClBmG,YAAYhG,IAAIQ,EAAE;YACpB;YACAsF;YACAlC,WAAW1F,gBACR2D,WAAAA,IAAIgC,GAAG,YAAPhC,WAAW,MACZM;QAEJ;IACF,EAAE,OAAOnB,OAAO;QACdoE,QAAQpE,KAAK,CAAC,yDAAyDa,IAAIhC,MAAM,EAAEmB;QACnF,OAAO;IACT;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeiF,oBACpBpE,GAAe,EACfqE,QAAkC,EAClCC,OAAsD,EACtDrE,QAAgB,EAChBC,QAAQC,KAAKC,GAAG,EAAE;IAElB,IAAI;YAMM5D;QALR,MAAMW,sBACJkH,SAASlG,GAAG,EACZtC,sBAAsB;YACpB0I,SAASD,QAAQC,OAAO;YACxBf,MAAMc,QAAQd,IAAI;YAClBO,EAAE,GAAEvH,yBAAAA,sBAAsB8H,QAAQP,EAAE,aAAhCvH,yBAAqC8H,QAAQP,EAAE;YACnDJ,MAAMzD;YACN0D,OAAO;YACPV,gBAAgBjD;YAChBgE,MAAMI,SAASJ,IAAI;YACnBjG,QAAQgC,IAAIhC,MAAM;YAClB+D,WAAWsC,SAAStC,SAAS;QAC/B;IAEJ,EAAE,OAAO5C,OAAO;QACdoE,QAAQpE,KAAK,CAAC,gDAAgDkF,SAASlG,GAAG,CAACQ,EAAE,EAAEQ;IACjF;AACF"}