@aglyn/shared-util-email 1.0.0-beta.202 → 1.0.0-beta.204

package/src/lib/held-page.d.ts

@@ -0,0 +1,117 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** The two notice kinds that are about a page (the risk notice catalog's). */
+export declare const PAGE_HOLD_NOTICE_KINDS: readonly ["page-held", "page-flagged"];
+export type PageHoldNoticeKind = (typeof PAGE_HOLD_NOTICE_KINDS)[number];
+export declare function isPageHoldNoticeKind(value: unknown): value is PageHoldNoticeKind;
+/**
+ * What kind of page was reviewed.
+ *
+ * - `screen`: a page at an address of its own.
+ * - `list-template`: a collection's listing template, served at `/{slug}`.
+ * - `entry-template`: a template that renders every entry of a collection
+ *   (or every product) at `/{slug}/:slug`, with no address of its own.
+ * - `error-screen`: a screen bound to one of the site's error slots.
+ * - `variant`: an experiment variant's version of a page.
+ */
+export type HeldPageKind = 'screen' | 'list-template' | 'entry-template' | 'error-screen' | 'variant';
+/**
+ * What visitors receive while the page is under review.
+ *
+ * - `previous-version`: the last version the page served clean.
+ * - `not-found`: nothing — the page had never served clean.
+ * - `built-in-design`: a template with no clean version: the collection's
+ *   routes fall back to the site's built-in design for them.
+ * - `published-version`: a held variant: its visitors get the published page.
+ * - `live`: a flagged page that was already live keeps serving.
+ */
+export type HeldPageVisitorView = 'previous-version' | 'not-found' | 'built-in-design' | 'published-version' | 'live';
+/** A layout or component the flagged content came from, when not the page's own. */
+export interface HeldPageSource {
+    type: 'layout' | 'component';
+    id: string;
+    name: string | null;
+    /** How many live pages render it, when that could be counted. */
+    pagesUsing: number | null;
+}
+/** One held or flagged page, described once at review time. */
+export interface HeldPageSubject {
+    kind: HeldPageKind;
+    screenId: string;
+    versionId: string;
+    /** The screen's (or template's) own name. */
+    name: string | null;
+    /** The route it serves: `/about`, `/videos`, `/videos/:slug`. */
+    route: string | null;
+    /** The page's public address, when it has one of its own. */
+    url: string | null;
+    /** An entry template: the address of the entry that was being composed. */
+    entryUrl: string | null;
+    /** A template: the collection (or `Products`) it renders. */
+    collectionName: string | null;
+    /** A variant: its name in the experiment. */
+    variantName: string | null;
+    source: HeldPageSource | null;
+    visitorView: HeldPageVisitorView;
+}
+/** A console document a hold can be shown on. */
+export interface HeldPageTarget {
+    type: 'screen' | 'layout' | 'component';
+    id: string;
+}
+/**
+ * The page in the owner's words, as the notice's `item.label` and every
+ * console surface render it: `the "About" page (/about)`,
+ * `the "Video detail" template (/videos/:slug)`,
+ * `variant "B" of the "Pricing" page (/pricing)`.
+ */
+export declare function heldPageLabel(subject: HeldPageSubject): string;
+/** The layout or component, in words: `the layout "Main", used on 12 pages`. */
+export declare function heldPageSourceLabel(source: HeldPageSource): string;
+/**
+ * The facts beside the name, one sentence each: where the entry template was
+ * seen and which layout or component the flagged content lives in. The owner
+ * surfaces and the staff row both render these.
+ */
+export declare function heldPageDetails(subject: HeldPageSubject): string[];
+/** What visitors receive meanwhile, as one sentence. */
+export declare function heldPageVisitorSentence(subject: Pick<HeldPageSubject, 'visitorView'>): string;
+/**
+ * Where the owner fixes it, in the stored-notification shape
+ * (`/{hostId}/…`): the layout or component the flagged content lives in, or
+ * the held version of the page itself.
+ */
+export declare function heldPageConsolePath(subject: HeldPageSubject, hostId: string): string;
+/** Every console document the hold is shown on: the page, and its source. */
+export declare function heldPageTargets(subject: HeldPageSubject): HeldPageTarget[];
+/**
+ * The screen and version a page notice's stored `itemPath` names, for a
+ * notice written before it carried a subject. Null for any other path.
+ */
+export declare function parseHeldPageItemPath(path: string | null | undefined): {
+    screenId: string;
+    versionId: string;
+} | null;
+/** A hold's review state, as the owner surfaces receive it. */
+export type PageHoldStatus = 'held' | 'in-review' | 'released' | 'rejected' | 'closed' | null;
+/** Whether a hold is still something the owner has to see. */
+export declare function isOpenPageHoldStatus(status: PageHoldStatus): boolean;
+/** The status chip on a held or flagged page. There is never a release control beside it. */
+export declare function pageHoldChip(kind: PageHoldNoticeKind, status: PageHoldStatus): {
+    label: string;
+    color: 'warning' | 'error' | 'info';
+};

package/src/lib/held-page.js

@@ -0,0 +1,172 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /*==========================================
+ * A HELD OR FLAGGED PAGE, NAMED (AGL-3374).
+ *
+ * The page phishing screen (`hosted-page-review.ts`) reviews a page where it
+ * is composed, and knows only a screen id. A screen id is not what anybody
+ * calls a page, and the routing map that turns one into an address does not
+ * hold every kind of page: a collection's entry template renders
+ * `/videos/{entry}` for every entry and has no address of its own, so a row
+ * built from the map alone named the site's home page for it.
+ *
+ * So the review describes the page ONCE, as a {@link HeldPageSubject} —
+ * what kind of page, its name, its route, the entry that triggered it, the
+ * layout or component the flagged content lives in, and what visitors see
+ * meanwhile — and stores that on the review row and on the owners' notice.
+ * Every reader names the page from it through the functions here: the owner
+ * notice's `item.label`, the staff row, the console's chips and banners, and
+ * Settings → Holds & reviews. One description, so the owner's email and the
+ * banner in the editor cannot name two different pages.
+ *
+ * Pure and client-safe: the console imports it.
+ *=========================================*/ /** The two notice kinds that are about a page (the risk notice catalog's). */ export const PAGE_HOLD_NOTICE_KINDS = [
+    'page-held',
+    'page-flagged'
+];
+export function isPageHoldNoticeKind(value) {
+    return PAGE_HOLD_NOTICE_KINDS.includes(value);
+}
+const NAME_MAX = 80;
+function quoted(value) {
+    const text = String(value != null ? value : '').replace(/\s+/g, ' ').trim().slice(0, NAME_MAX);
+    return text ? `"${text.replace(/"/g, '”')}"` : null;
+}
+function withRoute(text, route) {
+    return route ? `${text} (${route})` : text;
+}
+/**
+ * The page in the owner's words, as the notice's `item.label` and every
+ * console surface render it: `the "About" page (/about)`,
+ * `the "Video detail" template (/videos/:slug)`,
+ * `variant "B" of the "Pricing" page (/pricing)`.
+ */ export function heldPageLabel(subject) {
+    const name = quoted(subject.name);
+    switch(subject.kind){
+        case 'list-template':
+            return withRoute(name ? `the ${name} list template` : subject.collectionName ? `the ${quoted(subject.collectionName)} list template` : 'a collection list template', subject.route);
+        case 'entry-template':
+            return withRoute(name ? `the ${name} template` : subject.collectionName ? `the ${quoted(subject.collectionName)} entry template` : 'a collection entry template', subject.route);
+        case 'error-screen':
+            return name ? `the ${name} error page` : 'an error page';
+        case 'variant':
+            {
+                const page = withRoute(name ? `the ${name} page` : 'a page', subject.route);
+                const variant = quoted(subject.variantName);
+                return variant ? `variant ${variant} of ${page}` : `an experiment variant of ${page}`;
+            }
+        default:
+            return name ? withRoute(`the ${name} page`, subject.route) : subject.route ? `the page ${subject.route}` : 'a page on your site';
+    }
+}
+/** The layout or component, in words: `the layout "Main", used on 12 pages`. */ export function heldPageSourceLabel(source) {
+    const name = quoted(source.name);
+    const noun = source.type === 'layout' ? 'layout' : 'component';
+    const base = name ? `the ${noun} ${name}` : `a ${noun}`;
+    if (source.pagesUsing === null) return base;
+    return `${base}, used on ${source.pagesUsing} ${source.pagesUsing === 1 ? 'page' : 'pages'}`;
+}
+/**
+ * The facts beside the name, one sentence each: where the entry template was
+ * seen and which layout or component the flagged content lives in. The owner
+ * surfaces and the staff row both render these.
+ */ export function heldPageDetails(subject) {
+    const lines = [];
+    if (subject.kind === 'entry-template' && subject.entryUrl) {
+        lines.push(`Found while showing ${subject.entryUrl}.`);
+    } else if (subject.url && subject.kind !== 'entry-template') {
+        lines.push(`Address: ${subject.url}.`);
+    }
+    if (subject.source) {
+        lines.push(`The flagged content is in ${heldPageSourceLabel(subject.source)}, not on the page itself.`);
+    }
+    return lines;
+}
+/** What visitors receive meanwhile, as one sentence. */ export function heldPageVisitorSentence(subject) {
+    switch(subject.visitorView){
+        case 'live':
+            return 'Visitors still see this page while it is reviewed.';
+        case 'previous-version':
+            return 'Visitors see the previous version of this page until the review is done.';
+        case 'built-in-design':
+            return 'Visitors see the site’s built-in design for these pages until the review is done.';
+        case 'published-version':
+            return 'Visitors in this variant see the page’s published version until the review is done.';
+        default:
+            return 'Visitors see a not-found page until the review is done.';
+    }
+}
+/**
+ * Where the owner fixes it, in the stored-notification shape
+ * (`/{hostId}/…`): the layout or component the flagged content lives in, or
+ * the held version of the page itself.
+ */ export function heldPageConsolePath(subject, hostId) {
+    var _subject_source, _subject_source1;
+    if (((_subject_source = subject.source) == null ? void 0 : _subject_source.type) === 'layout') {
+        return `/${hostId}/layouts/${encodeURIComponent(subject.source.id)}`;
+    }
+    if (((_subject_source1 = subject.source) == null ? void 0 : _subject_source1.type) === 'component') {
+        return `/${hostId}/components/${encodeURIComponent(subject.source.id)}`;
+    }
+    return `/${hostId}/screens/${encodeURIComponent(subject.screenId)}` + `/versions/${encodeURIComponent(subject.versionId)}/view`;
+}
+/** Every console document the hold is shown on: the page, and its source. */ export function heldPageTargets(subject) {
+    const targets = [
+        {
+            type: 'screen',
+            id: subject.screenId
+        }
+    ];
+    if (subject.source) targets.push({
+        type: subject.source.type,
+        id: subject.source.id
+    });
+    return targets;
+}
+/**
+ * The screen and version a page notice's stored `itemPath` names, for a
+ * notice written before it carried a subject. Null for any other path.
+ */ export function parseHeldPageItemPath(path) {
+    const match = /^\/[^/]+\/screens\/([^/]+)\/versions\/([^/]+)\/view$/.exec(String(path != null ? path : ''));
+    if (!match) return null;
+    try {
+        return {
+            screenId: decodeURIComponent(match[1]),
+            versionId: decodeURIComponent(match[2])
+        };
+    } catch (unused) {
+        return null;
+    }
+}
+/** Whether a hold is still something the owner has to see. */ export function isOpenPageHoldStatus(status) {
+    return status === 'held' || status === 'in-review' || status === 'rejected';
+}
+/** The status chip on a held or flagged page. There is never a release control beside it. */ export function pageHoldChip(kind, status) {
+    if (status === 'rejected') return {
+        label: 'Not approved',
+        color: 'error'
+    };
+    if (kind === 'page-flagged') return {
+        label: 'Flagged — live, under review',
+        color: 'info'
+    };
+    return {
+        label: 'Held for review',
+        color: 'warning'
+    };
+}
+
+//# sourceMappingURL=held-page.js.map

package/src/lib/held-page.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/held-page.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * A HELD OR FLAGGED PAGE, NAMED (AGL-3374).\n *\n * The page phishing screen (`hosted-page-review.ts`) reviews a page where it\n * is composed, and knows only a screen id. A screen id is not what anybody\n * calls a page, and the routing map that turns one into an address does not\n * hold every kind of page: a collection's entry template renders\n * `/videos/{entry}` for every entry and has no address of its own, so a row\n * built from the map alone named the site's home page for it.\n *\n * So the review describes the page ONCE, as a {@link HeldPageSubject} —\n * what kind of page, its name, its route, the entry that triggered it, the\n * layout or component the flagged content lives in, and what visitors see\n * meanwhile — and stores that on the review row and on the owners' notice.\n * Every reader names the page from it through the functions here: the owner\n * notice's `item.label`, the staff row, the console's chips and banners, and\n * Settings → Holds & reviews. One description, so the owner's email and the\n * banner in the editor cannot name two different pages.\n *\n * Pure and client-safe: the console imports it.\n *=========================================*/\n\n/** The two notice kinds that are about a page (the risk notice catalog's). */\nexport const PAGE_HOLD_NOTICE_KINDS = ['page-held', 'page-flagged'] as const\nexport type PageHoldNoticeKind = (typeof PAGE_HOLD_NOTICE_KINDS)[number]\n\nexport function isPageHoldNoticeKind(value: unknown): value is PageHoldNoticeKind {\n  return (PAGE_HOLD_NOTICE_KINDS as readonly unknown[]).includes(value)\n}\n\n/**\n * What kind of page was reviewed.\n *\n * - `screen`: a page at an address of its own.\n * - `list-template`: a collection's listing template, served at `/{slug}`.\n * - `entry-template`: a template that renders every entry of a collection\n *   (or every product) at `/{slug}/:slug`, with no address of its own.\n * - `error-screen`: a screen bound to one of the site's error slots.\n * - `variant`: an experiment variant's version of a page.\n */\nexport type HeldPageKind =\n  | 'screen'\n  | 'list-template'\n  | 'entry-template'\n  | 'error-screen'\n  | 'variant'\n\n/**\n * What visitors receive while the page is under review.\n *\n * - `previous-version`: the last version the page served clean.\n * - `not-found`: nothing — the page had never served clean.\n * - `built-in-design`: a template with no clean version: the collection's\n *   routes fall back to the site's built-in design for them.\n * - `published-version`: a held variant: its visitors get the published page.\n * - `live`: a flagged page that was already live keeps serving.\n */\nexport type HeldPageVisitorView =\n  | 'previous-version'\n  | 'not-found'\n  | 'built-in-design'\n  | 'published-version'\n  | 'live'\n\n/** A layout or component the flagged content came from, when not the page's own. */\nexport interface HeldPageSource {\n  type: 'layout' | 'component'\n  id: string\n  name: string | null\n  /** How many live pages render it, when that could be counted. */\n  pagesUsing: number | null\n}\n\n/** One held or flagged page, described once at review time. */\nexport interface HeldPageSubject {\n  kind: HeldPageKind\n  screenId: string\n  versionId: string\n  /** The screen's (or template's) own name. */\n  name: string | null\n  /** The route it serves: `/about`, `/videos`, `/videos/:slug`. */\n  route: string | null\n  /** The page's public address, when it has one of its own. */\n  url: string | null\n  /** An entry template: the address of the entry that was being composed. */\n  entryUrl: string | null\n  /** A template: the collection (or `Products`) it renders. */\n  collectionName: string | null\n  /** A variant: its name in the experiment. */\n  variantName: string | null\n  source: HeldPageSource | null\n  visitorView: HeldPageVisitorView\n}\n\n/** A console document a hold can be shown on. */\nexport interface HeldPageTarget {\n  type: 'screen' | 'layout' | 'component'\n  id: string\n}\n\nconst NAME_MAX = 80\n\nfunction quoted(value: string | null | undefined): string | null {\n  const text = String(value ?? '')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, NAME_MAX)\n  return text ? `\"${text.replace(/\"/g, '”')}\"` : null\n}\n\nfunction withRoute(text: string, route: string | null): string {\n  return route ? `${text} (${route})` : text\n}\n\n/**\n * The page in the owner's words, as the notice's `item.label` and every\n * console surface render it: `the \"About\" page (/about)`,\n * `the \"Video detail\" template (/videos/:slug)`,\n * `variant \"B\" of the \"Pricing\" page (/pricing)`.\n */\nexport function heldPageLabel(subject: HeldPageSubject): string {\n  const name = quoted(subject.name)\n  switch (subject.kind) {\n    case 'list-template':\n      return withRoute(\n        name\n          ? `the ${name} list template`\n          : subject.collectionName\n            ? `the ${quoted(subject.collectionName)} list template`\n            : 'a collection list template',\n        subject.route,\n      )\n    case 'entry-template':\n      return withRoute(\n        name\n          ? `the ${name} template`\n          : subject.collectionName\n            ? `the ${quoted(subject.collectionName)} entry template`\n            : 'a collection entry template',\n        subject.route,\n      )\n    case 'error-screen':\n      return name ? `the ${name} error page` : 'an error page'\n    case 'variant': {\n      const page = withRoute(name ? `the ${name} page` : 'a page', subject.route)\n      const variant = quoted(subject.variantName)\n      return variant ? `variant ${variant} of ${page}` : `an experiment variant of ${page}`\n    }\n    default:\n      return name\n        ? withRoute(`the ${name} page`, subject.route)\n        : subject.route\n          ? `the page ${subject.route}`\n          : 'a page on your site'\n  }\n}\n\n/** The layout or component, in words: `the layout \"Main\", used on 12 pages`. */\nexport function heldPageSourceLabel(source: HeldPageSource): string {\n  const name = quoted(source.name)\n  const noun = source.type === 'layout' ? 'layout' : 'component'\n  const base = name ? `the ${noun} ${name}` : `a ${noun}`\n  if (source.pagesUsing === null) return base\n  return `${base}, used on ${source.pagesUsing} ${source.pagesUsing === 1 ? 'page' : 'pages'}`\n}\n\n/**\n * The facts beside the name, one sentence each: where the entry template was\n * seen and which layout or component the flagged content lives in. The owner\n * surfaces and the staff row both render these.\n */\nexport function heldPageDetails(subject: HeldPageSubject): string[] {\n  const lines: string[] = []\n  if (subject.kind === 'entry-template' && subject.entryUrl) {\n    lines.push(`Found while showing ${subject.entryUrl}.`)\n  } else if (subject.url && subject.kind !== 'entry-template') {\n    lines.push(`Address: ${subject.url}.`)\n  }\n  if (subject.source) {\n    lines.push(\n      `The flagged content is in ${heldPageSourceLabel(subject.source)}, not on the page itself.`,\n    )\n  }\n  return lines\n}\n\n/** What visitors receive meanwhile, as one sentence. */\nexport function heldPageVisitorSentence(subject: Pick<HeldPageSubject, 'visitorView'>): string {\n  switch (subject.visitorView) {\n    case 'live':\n      return 'Visitors still see this page while it is reviewed.'\n    case 'previous-version':\n      return 'Visitors see the previous version of this page until the review is done.'\n    case 'built-in-design':\n      return 'Visitors see the site’s built-in design for these pages until the review is done.'\n    case 'published-version':\n      return 'Visitors in this variant see the page’s published version until the review is done.'\n    default:\n      return 'Visitors see a not-found page until the review is done.'\n  }\n}\n\n/**\n * Where the owner fixes it, in the stored-notification shape\n * (`/{hostId}/…`): the layout or component the flagged content lives in, or\n * the held version of the page itself.\n */\nexport function heldPageConsolePath(subject: HeldPageSubject, hostId: string): string {\n  if (subject.source?.type === 'layout') {\n    return `/${hostId}/layouts/${encodeURIComponent(subject.source.id)}`\n  }\n  if (subject.source?.type === 'component') {\n    return `/${hostId}/components/${encodeURIComponent(subject.source.id)}`\n  }\n  return (\n    `/${hostId}/screens/${encodeURIComponent(subject.screenId)}` +\n    `/versions/${encodeURIComponent(subject.versionId)}/view`\n  )\n}\n\n/** Every console document the hold is shown on: the page, and its source. */\nexport function heldPageTargets(subject: HeldPageSubject): HeldPageTarget[] {\n  const targets: HeldPageTarget[] = [{ type: 'screen', id: subject.screenId }]\n  if (subject.source) targets.push({ type: subject.source.type, id: subject.source.id })\n  return targets\n}\n\n/**\n * The screen and version a page notice's stored `itemPath` names, for a\n * notice written before it carried a subject. Null for any other path.\n */\nexport function parseHeldPageItemPath(\n  path: string | null | undefined,\n): { screenId: string; versionId: string } | null {\n  const match = /^\\/[^/]+\\/screens\\/([^/]+)\\/versions\\/([^/]+)\\/view$/.exec(String(path ?? ''))\n  if (!match) return null\n  try {\n    return { screenId: decodeURIComponent(match[1]), versionId: decodeURIComponent(match[2]) }\n  } catch {\n    return null\n  }\n}\n\n/** A hold's review state, as the owner surfaces receive it. */\nexport type PageHoldStatus = 'held' | 'in-review' | 'released' | 'rejected' | 'closed' | null\n\n/** Whether a hold is still something the owner has to see. */\nexport function isOpenPageHoldStatus(status: PageHoldStatus): boolean {\n  return status === 'held' || status === 'in-review' || status === 'rejected'\n}\n\n/** The status chip on a held or flagged page. There is never a release control beside it. */\nexport function pageHoldChip(\n  kind: PageHoldNoticeKind,\n  status: PageHoldStatus,\n): { label: string; color: 'warning' | 'error' | 'info' } {\n  if (status === 'rejected') return { label: 'Not approved', color: 'error' }\n  if (kind === 'page-flagged') return { label: 'Flagged — live, under review', color: 'info' }\n  return { label: 'Held for review', color: 'warning' }\n}\n"],"names":["PAGE_HOLD_NOTICE_KINDS","isPageHoldNoticeKind","value","includes","NAME_MAX","quoted","text","String","replace","trim","slice","withRoute","route","heldPageLabel","subject","name","kind","collectionName","page","variant","variantName","heldPageSourceLabel","source","noun","type","base","pagesUsing","heldPageDetails","lines","entryUrl","push","url","heldPageVisitorSentence","visitorView","heldPageConsolePath","hostId","encodeURIComponent","id","screenId","versionId","heldPageTargets","targets","parseHeldPageItemPath","path","match","exec","decodeURIComponent","isOpenPageHoldStatus","status","pageHoldChip","label","color"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;2CAoB2C,GAE3C,4EAA4E,GAC5E,OAAO,MAAMA,yBAAyB;IAAC;IAAa;CAAe,CAAS;AAG5E,OAAO,SAASC,qBAAqBC,KAAc;IACjD,OAAO,AAACF,uBAA8CG,QAAQ,CAACD;AACjE;AAwEA,MAAME,WAAW;AAEjB,SAASC,OAAOH,KAAgC;IAC9C,MAAMI,OAAOC,OAAOL,gBAAAA,QAAS,IAC1BM,OAAO,CAAC,QAAQ,KAChBC,IAAI,GACJC,KAAK,CAAC,GAAGN;IACZ,OAAOE,OAAO,CAAC,CAAC,EAAEA,KAAKE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG;AACjD;AAEA,SAASG,UAAUL,IAAY,EAAEM,KAAoB;IACnD,OAAOA,QAAQ,GAAGN,KAAK,EAAE,EAAEM,MAAM,CAAC,CAAC,GAAGN;AACxC;AAEA;;;;;CAKC,GACD,OAAO,SAASO,cAAcC,OAAwB;IACpD,MAAMC,OAAOV,OAAOS,QAAQC,IAAI;IAChC,OAAQD,QAAQE,IAAI;QAClB,KAAK;YACH,OAAOL,UACLI,OACI,CAAC,IAAI,EAAEA,KAAK,cAAc,CAAC,GAC3BD,QAAQG,cAAc,GACpB,CAAC,IAAI,EAAEZ,OAAOS,QAAQG,cAAc,EAAE,cAAc,CAAC,GACrD,8BACNH,QAAQF,KAAK;QAEjB,KAAK;YACH,OAAOD,UACLI,OACI,CAAC,IAAI,EAAEA,KAAK,SAAS,CAAC,GACtBD,QAAQG,cAAc,GACpB,CAAC,IAAI,EAAEZ,OAAOS,QAAQG,cAAc,EAAE,eAAe,CAAC,GACtD,+BACNH,QAAQF,KAAK;QAEjB,KAAK;YACH,OAAOG,OAAO,CAAC,IAAI,EAAEA,KAAK,WAAW,CAAC,GAAG;QAC3C,KAAK;YAAW;gBACd,MAAMG,OAAOP,UAAUI,OAAO,CAAC,IAAI,EAAEA,KAAK,KAAK,CAAC,GAAG,UAAUD,QAAQF,KAAK;gBAC1E,MAAMO,UAAUd,OAAOS,QAAQM,WAAW;gBAC1C,OAAOD,UAAU,CAAC,QAAQ,EAAEA,QAAQ,IAAI,EAAED,MAAM,GAAG,CAAC,yBAAyB,EAAEA,MAAM;YACvF;QACA;YACE,OAAOH,OACHJ,UAAU,CAAC,IAAI,EAAEI,KAAK,KAAK,CAAC,EAAED,QAAQF,KAAK,IAC3CE,QAAQF,KAAK,GACX,CAAC,SAAS,EAAEE,QAAQF,KAAK,EAAE,GAC3B;IACV;AACF;AAEA,8EAA8E,GAC9E,OAAO,SAASS,oBAAoBC,MAAsB;IACxD,MAAMP,OAAOV,OAAOiB,OAAOP,IAAI;IAC/B,MAAMQ,OAAOD,OAAOE,IAAI,KAAK,WAAW,WAAW;IACnD,MAAMC,OAAOV,OAAO,CAAC,IAAI,EAAEQ,KAAK,CAAC,EAAER,MAAM,GAAG,CAAC,EAAE,EAAEQ,MAAM;IACvD,IAAID,OAAOI,UAAU,KAAK,MAAM,OAAOD;IACvC,OAAO,GAAGA,KAAK,UAAU,EAAEH,OAAOI,UAAU,CAAC,CAAC,EAAEJ,OAAOI,UAAU,KAAK,IAAI,SAAS,SAAS;AAC9F;AAEA;;;;CAIC,GACD,OAAO,SAASC,gBAAgBb,OAAwB;IACtD,MAAMc,QAAkB,EAAE;IAC1B,IAAId,QAAQE,IAAI,KAAK,oBAAoBF,QAAQe,QAAQ,EAAE;QACzDD,MAAME,IAAI,CAAC,CAAC,oBAAoB,EAAEhB,QAAQe,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO,IAAIf,QAAQiB,GAAG,IAAIjB,QAAQE,IAAI,KAAK,kBAAkB;QAC3DY,MAAME,IAAI,CAAC,CAAC,SAAS,EAAEhB,QAAQiB,GAAG,CAAC,CAAC,CAAC;IACvC;IACA,IAAIjB,QAAQQ,MAAM,EAAE;QAClBM,MAAME,IAAI,CACR,CAAC,0BAA0B,EAAET,oBAAoBP,QAAQQ,MAAM,EAAE,yBAAyB,CAAC;IAE/F;IACA,OAAOM;AACT;AAEA,sDAAsD,GACtD,OAAO,SAASI,wBAAwBlB,OAA6C;IACnF,OAAQA,QAAQmB,WAAW;QACzB,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT;YACE,OAAO;IACX;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASC,oBAAoBpB,OAAwB,EAAEqB,MAAc;QACtErB,iBAGAA;IAHJ,IAAIA,EAAAA,kBAAAA,QAAQQ,MAAM,qBAAdR,gBAAgBU,IAAI,MAAK,UAAU;QACrC,OAAO,CAAC,CAAC,EAAEW,OAAO,SAAS,EAAEC,mBAAmBtB,QAAQQ,MAAM,CAACe,EAAE,GAAG;IACtE;IACA,IAAIvB,EAAAA,mBAAAA,QAAQQ,MAAM,qBAAdR,iBAAgBU,IAAI,MAAK,aAAa;QACxC,OAAO,CAAC,CAAC,EAAEW,OAAO,YAAY,EAAEC,mBAAmBtB,QAAQQ,MAAM,CAACe,EAAE,GAAG;IACzE;IACA,OACE,CAAC,CAAC,EAAEF,OAAO,SAAS,EAAEC,mBAAmBtB,QAAQwB,QAAQ,GAAG,GAC5D,CAAC,UAAU,EAAEF,mBAAmBtB,QAAQyB,SAAS,EAAE,KAAK,CAAC;AAE7D;AAEA,2EAA2E,GAC3E,OAAO,SAASC,gBAAgB1B,OAAwB;IACtD,MAAM2B,UAA4B;QAAC;YAAEjB,MAAM;YAAUa,IAAIvB,QAAQwB,QAAQ;QAAC;KAAE;IAC5E,IAAIxB,QAAQQ,MAAM,EAAEmB,QAAQX,IAAI,CAAC;QAAEN,MAAMV,QAAQQ,MAAM,CAACE,IAAI;QAAEa,IAAIvB,QAAQQ,MAAM,CAACe,EAAE;IAAC;IACpF,OAAOI;AACT;AAEA;;;CAGC,GACD,OAAO,SAASC,sBACdC,IAA+B;IAE/B,MAAMC,QAAQ,uDAAuDC,IAAI,CAACtC,OAAOoC,eAAAA,OAAQ;IACzF,IAAI,CAACC,OAAO,OAAO;IACnB,IAAI;QACF,OAAO;YAAEN,UAAUQ,mBAAmBF,KAAK,CAAC,EAAE;YAAGL,WAAWO,mBAAmBF,KAAK,CAAC,EAAE;QAAE;IAC3F,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAKA,4DAA4D,GAC5D,OAAO,SAASG,qBAAqBC,MAAsB;IACzD,OAAOA,WAAW,UAAUA,WAAW,eAAeA,WAAW;AACnE;AAEA,2FAA2F,GAC3F,OAAO,SAASC,aACdjC,IAAwB,EACxBgC,MAAsB;IAEtB,IAAIA,WAAW,YAAY,OAAO;QAAEE,OAAO;QAAgBC,OAAO;IAAQ;IAC1E,IAAInC,SAAS,gBAAgB,OAAO;QAAEkC,OAAO;QAAgCC,OAAO;IAAO;IAC3F,OAAO;QAAED,OAAO;QAAmBC,OAAO;IAAU;AACtD"}

package/src/lib/host-email-render.d.ts

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { type EmailRenderOptions } from './email-render';
+import { type EmailChrome, type EmailRenderOptions, type EmailTheme } from './email-render';
 import { type TenantEmailEntry } from './tenant-email-catalog';
 /**
  * The slice of the Admin Firestore chain this resolver uses. Structural on
@@ -70,6 +70,20 @@ export interface LoadHostEmailOptions {
     origin?: string;
     /** See {@link HostEmailComposer} — required, deliberately. */
     compose: HostEmailComposer;
+    /**
+     * The site's header and footer (AGL-3370), drawn around the built-in copy
+     * and around a design the owner published, less any band that design draws
+     * itself (AGL-3372, {@link chromeForDesign}). Built by the caller because
+     * it is read off the site document, which this `scope:shared` module has
+     * no brand vocabulary for.
+     */
+    chrome?: EmailChrome;
+    /**
+     * The site's theme (AGL-3370), on EVERY copy, the owner's design included:
+     * a color they picked is a palette token only the theme can resolve, and a
+     * button they left alone wears the site's accent.
+     */
+    theme?: EmailTheme;
 }
 /**
  * A site-owner-designed template loaded once, ready to render for any number
@@ -89,12 +103,24 @@ export interface LoadedHostEmail {
      * in which case those images are dropped rather than sent broken.
      */
     origin?: string;
+    /**
+     * `designed` when the site owner published one; `default` for the
+     * catalog's built-in copy, which a site with nothing published sends
+     * (AGL-3370).
+     */
+    source: 'designed' | 'default';
+    /** The site's header and footer, less the bands a design draws itself. */
+    chrome?: EmailChrome;
+    /** The site's theme, on every copy. */
+    theme?: EmailTheme;
 }
 /**
- * Loads a site's published email template, or `null` when there is nothing
- * usable (no document, no published version, an empty node map, an unknown or
- * non-designable key). The host-scoped mirror of the platform
- * `loadSystemEmail`: `hosts/{hostId}/emailTemplates/{key}`.
+ * Loads what a site sends for a key: its published template, or the
+ * catalog's built-in copy when there is none to use (no document, no
+ * published version, an empty node map, a failed read) (AGL-3370). `null`
+ * only for an unknown or non-designable key, or one with no built-in copy.
+ * The host-scoped mirror of the platform `loadSystemEmail`:
+ * `hosts/{hostId}/emailTemplates/{key}`.
  *
  * The caller passes its own Admin Firestore, so this reads through the Admin
  * SDK — the send path runs as the server, not a signed-in user.
@@ -119,8 +145,9 @@ export declare function loadHostEmail(firestore: AdminFirestoreLike, hostId: str
  */
 export declare function renderLoadedHostEmail(loaded: LoadedHostEmail, merge: Record<string, string>, sanitize: EmailRenderOptions['sanitize']): RenderedHostEmail | null;
 /**
- * Renders a site's designed email, or `null` when nothing usable is published
- * so the send site keeps its built-in copy (AGL-770). Single-recipient
+ * Renders what a site sends for a key: its designed email, or the catalog's
+ * built-in copy in the site's header and footer (AGL-770, AGL-3370). `null`
+ * when the key has neither, so the send site keeps its own copy. Single-recipient
  * convenience over {@link loadHostEmail} + {@link renderLoadedHostEmail}; a
  * batch should call those two so it reads the template once.
  */

package/src/lib/host-email-render.js

@@ -1,3 +1,4 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
 /**
  * @license
  * Copyright 2026 Aglyn LLC
@@ -16,16 +17,23 @@
  */ import { hostEmailOrigin } from "./email-media-src.js";
 import { decodeEmailNodes } from "./stored-email-nodes.js";
 import { EMAIL_NODE_ROOT_ID, renderEmailHtml, substituteMergeTokens } from "./email-render.js";
+import { chromeForDesign } from "./email-design-chrome.js";
+import { buildDefaultEmailNodeMap } from "./system-email-catalog.js";
+/** A chrome as an optional field, absent when there is none. */ const withChrome = (chrome)=>chrome ? {
+        chrome
+    } : {};
 import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "./tenant-email-catalog.js";
 /** Blanks any `{{token}}` the caller did not supply, so a customer never
  * sees a raw tag. Mirrors the platform system-email resolver. */ function blankUnresolvedTokens(value) {
     return value.replace(/\{\{[^}]*\}\}/g, '');
 }
 /**
- * Loads a site's published email template, or `null` when there is nothing
- * usable (no document, no published version, an empty node map, an unknown or
- * non-designable key). The host-scoped mirror of the platform
- * `loadSystemEmail`: `hosts/{hostId}/emailTemplates/{key}`.
+ * Loads what a site sends for a key: its published template, or the
+ * catalog's built-in copy when there is none to use (no document, no
+ * published version, an empty node map, a failed read) (AGL-3370). `null`
+ * only for an unknown or non-designable key, or one with no built-in copy.
+ * The host-scoped mirror of the platform `loadSystemEmail`:
+ * `hosts/{hostId}/emailTemplates/{key}`.
  *
  * The caller passes its own Admin Firestore, so this reads through the Admin
  * SDK — the send path runs as the server, not a signed-in user.
@@ -45,14 +53,46 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
     const entry = getTenantEmail(templateKey);
     if (!entry || !isTenantEmailEditable(entry)) return null;
     if (!hostId) return null;
+    const hostRef = firestore.collection('hosts').doc(hostId);
+    /** The site's origin: the caller's, else one read of the host document. */ const siteOrigin = async ()=>{
+        if (options.origin) return options.origin;
+        const hostSnapshot = await hostRef.get();
+        return hostEmailOrigin({
+            cname: hostSnapshot.get('cname'),
+            subdomain: hostSnapshot.get('subdomain')
+        });
+    };
+    /**
+   * The built-in copy (AGL-3370), in the site's header and footer: what a
+   * site with nothing published sends, and what a template that cannot be
+   * read falls back to, so a customer never gets the bare text card.
+   * `null` only for an entry with no built-in copy to render.
+   */ const builtIn = async ()=>{
+        var _entry_defaultSubject;
+        var _entry_defaultBody;
+        if (!((_entry_defaultBody = entry.defaultBody) == null ? void 0 : _entry_defaultBody.length)) return null;
+        const origin = await siteOrigin().catch(()=>options.origin);
+        return _extends({
+            entry,
+            nodes: buildDefaultEmailNodeMap(entry),
+            hostId,
+            origin,
+            subjectTemplate: (_entry_defaultSubject = entry.defaultSubject) != null ? _entry_defaultSubject : '',
+            preheaderTemplate: '',
+            source: 'default'
+        }, options.chrome ? {
+            chrome: options.chrome
+        } : {}, options.theme ? {
+            theme: options.theme
+        } : {});
+    };
     try {
         var _templateSnapshot_get, _templateSnapshot_get1;
-        const hostRef = firestore.collection('hosts').doc(hostId);
         const templateRef = hostRef.collection(TENANT_EMAIL_COLLECTION).doc(templateKey);
         const templateSnapshot = await templateRef.get();
-        if (!templateSnapshot.exists) return null;
+        if (!templateSnapshot.exists) return builtIn();
         const versionId = templateSnapshot.get('versionId');
-        if (!versionId) return null;
+        if (!versionId) return builtIn();
         const versionSnapshot = await templateRef.collection('versions').doc(String(versionId)).get();
         // BOTH stored forms. The email besigner compresses like every other
         // besigner document (AGL-1151), and every version written before it did
@@ -64,7 +104,7 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
         // passes and the caller renders an empty email instead of falling back to
         // its built-in copy (AGL-1223).
         const stored = decodeEmailNodes(versionSnapshot.get('nodes'));
-        if (!stored || !Object.keys(stored).length) return null;
+        if (!stored || !Object.keys(stored).length) return builtIn();
         // Reusable blocks (AGL-3287), BEFORE anything reads the tree: a header or
         // footer the site owner placed is a component reference until this runs.
         // A failed component read throws into the catch below and falls back to
@@ -73,27 +113,28 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
             firestore,
             hostId
         });
-        let origin = options.origin;
-        if (!origin) {
-            const hostSnapshot = await hostRef.get();
-            origin = hostEmailOrigin({
-                cname: hostSnapshot.get('cname'),
-                subdomain: hostSnapshot.get('subdomain')
-            });
-        }
-        return {
+        const origin = await siteOrigin();
+        return _extends({
             entry,
             nodes,
             hostId,
             origin,
+            source: 'designed'
+        }, options.theme ? {
+            theme: options.theme
+        } : {}, withChrome(chromeForDesign({
+            stored,
+            composed: nodes,
+            chrome: options.chrome
+        })), {
             subjectTemplate: String((_templateSnapshot_get = templateSnapshot.get('subject')) != null ? _templateSnapshot_get : '') || entry.defaultSubject || '',
             preheaderTemplate: String((_templateSnapshot_get1 = templateSnapshot.get('preheader')) != null ? _templateSnapshot_get1 : '')
-        };
+        });
     } catch (error) {
-        // Never let a template problem block the send — the caller falls back to
-        // its built-in copy and the customer still gets their email.
+        // Never let a template problem block the send, or strip it bare: the
+        // customer gets the built-in copy, in the site's header and footer.
         console.error(`host email template ${templateKey} failed to load`, error);
-        return null;
+        return builtIn().catch(()=>null);
     }
 }
 /**
@@ -102,7 +143,7 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
  * caller still falls back to its built-in copy.
  */ export function renderLoadedHostEmail(loaded, merge = {}, sanitize) {
     var _rendered_text;
-    const rendered = renderEmailHtml({
+    const rendered = renderEmailHtml(_extends({
         nodes: loaded.nodes,
         // A site owner designs these in the besigner, so a template's richtext is
         // author markup exactly as a campaign's is. The policy has to arrive from
@@ -118,7 +159,9 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
         // makes it fetchable from a recipient's inbox (AGL-1224).
         mediaOrigin: loaded.origin,
         mediaHostId: loaded.hostId
-    });
+    }, loaded.chrome ? {
+        chrome: loaded.chrome
+    } : {}, loaded.theme));
     if (!(rendered == null ? void 0 : rendered.html)) return null;
     return {
         subject: blankUnresolvedTokens(substituteMergeTokens(loaded.subjectTemplate, merge)),
@@ -127,8 +170,9 @@ import { getTenantEmail, isTenantEmailEditable, TENANT_EMAIL_COLLECTION } from "
     };
 }
 /**
- * Renders a site's designed email, or `null` when nothing usable is published
- * so the send site keeps its built-in copy (AGL-770). Single-recipient
+ * Renders what a site sends for a key: its designed email, or the catalog's
+ * built-in copy in the site's header and footer (AGL-770, AGL-3370). `null`
+ * when the key has neither, so the send site keeps its own copy. Single-recipient
  * convenience over {@link loadHostEmail} + {@link renderLoadedHostEmail}; a
  * batch should call those two so it reads the template once.
  */ export async function renderHostEmail(firestore, hostId, templateKey, merge = {}, options) {

package/src/lib/host-email-render.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/host-email-render.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { hostEmailOrigin } from './email-media-src'\nimport { decodeEmailNodes } from './stored-email-nodes'\nimport {\n  EMAIL_NODE_ROOT_ID,\n  renderEmailHtml,\n  substituteMergeTokens,\n  type EmailRenderOptions,\n} from './email-render'\nimport {\n  getTenantEmail,\n  isTenantEmailEditable,\n  TENANT_EMAIL_COLLECTION,\n  type TenantEmailEntry,\n} from './tenant-email-catalog'\n\n/**\n * The slice of the Admin Firestore chain this resolver uses. Structural on\n * purpose (AGL-770): the plugins that call this already hold an Admin\n * Firestore instance, so passing it in keeps `@aglyn/shared-util-email` free\n * of a firebase-admin dependency and importable from every send site.\n */\ninterface AdminDocSnapshotLike {\n  exists: boolean\n  get(field: string): unknown\n}\ninterface AdminDocRefLike {\n  get(): Promise<AdminDocSnapshotLike>\n  collection(path: string): AdminCollectionRefLike\n}\ninterface AdminCollectionRefLike {\n  doc(id: string): AdminDocRefLike\n}\nexport interface AdminFirestoreLike {\n  collection(path: string): AdminCollectionRefLike\n}\n\nexport interface RenderedHostEmail {\n  subject: string\n  html: string\n  text: string\n}\n\n/**\n * Expands the reusable blocks a site's email places into the blocks they stand\n * for (AGL-3287): a shared header or footer is a `reusableInstance` node naming\n * one of the site's components, and `renderEmailHtml` draws an unknown node as\n * nothing at all. Given the decoded node map and the handle and site it was\n * read with; resolves to the map to render.\n *\n * REQUIRED, for the reason `sanitize` is (see\n * {@link EmailRenderOptions.sanitize}): this module is `scope:shared` and the\n * composition — the component graft, the document reads — is the core's, which\n * nx forbids it to import. A composer a caller may omit is one a new send path\n * omits, and its customers then receive every designed email with the header\n * and footer missing while the canvas shows them in place. So the type makes\n * each caller hand one in; every sender passes the core's\n * `composeHostComponentNodes`.\n *\n * Only style overrides are lost on the way through, and not by the composer:\n * a placement's `styleOverrides` land in `sx`, which the mail renderer never\n * reads. Property values and attribute overrides reach the blocks.\n */\nexport type HostEmailComposer = (\n  nodes: Record<string, unknown>,\n  context: { firestore: AdminFirestoreLike; hostId: string },\n) => Promise<Record<string, unknown>>\n\nexport interface LoadHostEmailOptions {\n  /** The site's origin when the caller already knows it; saves the host read. */\n  origin?: string\n  /** See {@link HostEmailComposer} — required, deliberately. */\n  compose: HostEmailComposer\n}\n\n/**\n * A site-owner-designed template loaded once, ready to render for any number\n * of recipients without another Firestore read (AGL-770) — the booking\n * reminder job renders one per booking.\n */\nexport interface LoadedHostEmail {\n  entry: TenantEmailEntry\n  nodes: Record<string, unknown>\n  subjectTemplate: string\n  preheaderTemplate: string\n  /** Host doc id, so an org-scoped media reference can be host-qualified. */\n  hostId: string\n  /**\n   * The site's absolute origin, for absolutizing picked images (AGL-1224).\n   * Undefined only for a host with neither a custom domain nor a subdomain,\n   * in which case those images are dropped rather than sent broken.\n   */\n  origin?: string\n}\n\n/** Blanks any `{{token}}` the caller did not supply, so a customer never\n * sees a raw tag. Mirrors the platform system-email resolver. */\nfunction blankUnresolvedTokens(value: string): string {\n  return value.replace(/\\{\\{[^}]*\\}\\}/g, '')\n}\n\n/**\n * Loads a site's published email template, or `null` when there is nothing\n * usable (no document, no published version, an empty node map, an unknown or\n * non-designable key). The host-scoped mirror of the platform\n * `loadSystemEmail`: `hosts/{hostId}/emailTemplates/{key}`.\n *\n * The caller passes its own Admin Firestore, so this reads through the Admin\n * SDK — the send path runs as the server, not a signed-in user.\n *\n * TWO reads, not one (AGL-1224): the host document is read for the site's\n * origin, which picked images need to be fetchable from an inbox. It is read\n * LAST, only once there is something to render, so a site with nothing\n * published still costs a single read — and it is skipped entirely when the\n * caller already knows the origin and passes it. Still once per batch, not\n * once per recipient, which is the property AGL-770 cared about.\n *\n * The components the template places are read and grafted HERE, through\n * `options.compose`, for the same reason: once per load, so a batch renders\n * every recipient's copy from one composed map. A template that places none\n * costs no extra read.\n */\nexport async function loadHostEmail(\n  firestore: AdminFirestoreLike,\n  hostId: string,\n  templateKey: string,\n  options: LoadHostEmailOptions,\n): Promise<LoadedHostEmail | null> {\n  const entry = getTenantEmail(templateKey)\n  if (!entry || !isTenantEmailEditable(entry)) return null\n  if (!hostId) return null\n\n  try {\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const templateRef = hostRef\n      .collection(TENANT_EMAIL_COLLECTION)\n      .doc(templateKey)\n    const templateSnapshot = await templateRef.get()\n    if (!templateSnapshot.exists) return null\n\n    const versionId = templateSnapshot.get('versionId')\n    if (!versionId) return null\n\n    const versionSnapshot = await templateRef\n      .collection('versions')\n      .doc(String(versionId))\n      .get()\n    // BOTH stored forms. The email besigner compresses like every other\n    // besigner document (AGL-1151), and every version written before it did\n    // is still a plain map — a plain map comes back unchanged, so a single\n    // call serves both and keeps serving both.\n    //\n    // Reading the field raw is the failure the guard below cannot catch: over\n    // a `Buffer`, `Object.keys` counts BYTE INDICES, so the emptiness test\n    // passes and the caller renders an empty email instead of falling back to\n    // its built-in copy (AGL-1223).\n    const stored = decodeEmailNodes<Record<string, unknown>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!stored || !Object.keys(stored).length) return null\n    // Reusable blocks (AGL-3287), BEFORE anything reads the tree: a header or\n    // footer the site owner placed is a component reference until this runs.\n    // A failed component read throws into the catch below and falls back to\n    // the built-in copy — never a send with half its design missing.\n    const nodes = await options.compose(stored, { firestore, hostId })\n\n    let origin = options.origin\n    if (!origin) {\n      const hostSnapshot = await hostRef.get()\n      origin = hostEmailOrigin({\n        cname: hostSnapshot.get('cname') as string | undefined,\n        subdomain: hostSnapshot.get('subdomain') as string | undefined,\n      })\n    }\n\n    return {\n      entry,\n      nodes,\n      hostId,\n      origin,\n      subjectTemplate:\n        String(templateSnapshot.get('subject') ?? '') ||\n        entry.defaultSubject ||\n        '',\n      preheaderTemplate: String(templateSnapshot.get('preheader') ?? ''),\n    }\n  } catch (error) {\n    // Never let a template problem block the send — the caller falls back to\n    // its built-in copy and the customer still gets their email.\n    console.error(`host email template ${templateKey} failed to load`, error)\n    return null\n  }\n}\n\n/**\n * Renders a pre-loaded template for one recipient's merge values (AGL-770).\n * No Firestore access; returns `null` if the node map renders empty so the\n * caller still falls back to its built-in copy.\n */\nexport function renderLoadedHostEmail(\n  loaded: LoadedHostEmail,\n  merge: Record<string, string> = {},\n  sanitize: EmailRenderOptions['sanitize'],\n): RenderedHostEmail | null {\n  const rendered = renderEmailHtml({\n    nodes: loaded.nodes as never,\n    // A site owner designs these in the besigner, so a template's richtext is\n    // author markup exactly as a campaign's is. The policy has to arrive from\n    // above for the reason this lib documents everywhere: `scope:shared`\n    // cannot import the aglyn-scoped sanitizer.\n    sanitize,\n    // Besigner maps are rooted at '_@_' (AGL-765).\n    rootId: EMAIL_NODE_ROOT_ID,\n    subject: substituteMergeTokens(loaded.subjectTemplate, merge),\n    preheader: substituteMergeTokens(loaded.preheaderTemplate, merge),\n    merge,\n    // A picked image is stored as a reference; the site's own origin is what\n    // makes it fetchable from a recipient's inbox (AGL-1224).\n    mediaOrigin: loaded.origin,\n    mediaHostId: loaded.hostId,\n  })\n  if (!rendered?.html) return null\n  return {\n    subject: blankUnresolvedTokens(\n      substituteMergeTokens(loaded.subjectTemplate, merge),\n    ),\n    html: blankUnresolvedTokens(rendered.html),\n    text: blankUnresolvedTokens(rendered.text ?? ''),\n  }\n}\n\n/**\n * Renders a site's designed email, or `null` when nothing usable is published\n * so the send site keeps its built-in copy (AGL-770). Single-recipient\n * convenience over {@link loadHostEmail} + {@link renderLoadedHostEmail}; a\n * batch should call those two so it reads the template once.\n */\nexport async function renderHostEmail(\n  firestore: AdminFirestoreLike,\n  hostId: string,\n  templateKey: string,\n  merge: Record<string, string> = {},\n  options: LoadHostEmailOptions & {\n    /** See {@link EmailRenderOptions.sanitize} — required, deliberately. */\n    sanitize: EmailRenderOptions['sanitize']\n  },\n): Promise<RenderedHostEmail | null> {\n  const loaded = await loadHostEmail(firestore, hostId, templateKey, options)\n  return loaded ? renderLoadedHostEmail(loaded, merge, options.sanitize) : null\n}\n"],"names":["hostEmailOrigin","decodeEmailNodes","EMAIL_NODE_ROOT_ID","renderEmailHtml","substituteMergeTokens","getTenantEmail","isTenantEmailEditable","TENANT_EMAIL_COLLECTION","blankUnresolvedTokens","value","replace","loadHostEmail","firestore","hostId","templateKey","options","entry","templateSnapshot","hostRef","collection","doc","templateRef","get","exists","versionId","versionSnapshot","String","stored","Object","keys","length","nodes","compose","origin","hostSnapshot","cname","subdomain","subjectTemplate","defaultSubject","preheaderTemplate","error","console","renderLoadedHostEmail","loaded","merge","sanitize","rendered","rootId","subject","preheader","mediaOrigin","mediaHostId","html","text","renderHostEmail"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,eAAe,QAAQ,uBAAmB;AACnD,SAASC,gBAAgB,QAAQ,0BAAsB;AACvD,SACEC,kBAAkB,EAClBC,eAAe,EACfC,qBAAqB,QAEhB,oBAAgB;AACvB,SACEC,cAAc,EACdC,qBAAqB,EACrBC,uBAAuB,QAElB,4BAAwB;AAiF/B;+DAC+D,GAC/D,SAASC,sBAAsBC,KAAa;IAC1C,OAAOA,MAAMC,OAAO,CAAC,kBAAkB;AACzC;AAEA;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,eAAeC,cACpBC,SAA6B,EAC7BC,MAAc,EACdC,WAAmB,EACnBC,OAA6B;IAE7B,MAAMC,QAAQX,eAAeS;IAC7B,IAAI,CAACE,SAAS,CAACV,sBAAsBU,QAAQ,OAAO;IACpD,IAAI,CAACH,QAAQ,OAAO;IAEpB,IAAI;YAiDSI,uBAGiBA;QAnD5B,MAAMC,UAAUN,UAAUO,UAAU,CAAC,SAASC,GAAG,CAACP;QAClD,MAAMQ,cAAcH,QACjBC,UAAU,CAACZ,yBACXa,GAAG,CAACN;QACP,MAAMG,mBAAmB,MAAMI,YAAYC,GAAG;QAC9C,IAAI,CAACL,iBAAiBM,MAAM,EAAE,OAAO;QAErC,MAAMC,YAAYP,iBAAiBK,GAAG,CAAC;QACvC,IAAI,CAACE,WAAW,OAAO;QAEvB,MAAMC,kBAAkB,MAAMJ,YAC3BF,UAAU,CAAC,YACXC,GAAG,CAACM,OAAOF,YACXF,GAAG;QACN,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,2CAA2C;QAC3C,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,gCAAgC;QAChC,MAAMK,SAAS1B,iBACbwB,gBAAgBH,GAAG,CAAC;QAEtB,IAAI,CAACK,UAAU,CAACC,OAAOC,IAAI,CAACF,QAAQG,MAAM,EAAE,OAAO;QACnD,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,iEAAiE;QACjE,MAAMC,QAAQ,MAAMhB,QAAQiB,OAAO,CAACL,QAAQ;YAAEf;YAAWC;QAAO;QAEhE,IAAIoB,SAASlB,QAAQkB,MAAM;QAC3B,IAAI,CAACA,QAAQ;YACX,MAAMC,eAAe,MAAMhB,QAAQI,GAAG;YACtCW,SAASjC,gBAAgB;gBACvBmC,OAAOD,aAAaZ,GAAG,CAAC;gBACxBc,WAAWF,aAAaZ,GAAG,CAAC;YAC9B;QACF;QAEA,OAAO;YACLN;YACAe;YACAlB;YACAoB;YACAI,iBACEX,QAAOT,wBAAAA,iBAAiBK,GAAG,CAAC,sBAArBL,wBAAmC,OAC1CD,MAAMsB,cAAc,IACpB;YACFC,mBAAmBb,QAAOT,yBAAAA,iBAAiBK,GAAG,CAAC,wBAArBL,yBAAqC;QACjE;IACF,EAAE,OAAOuB,OAAO;QACd,yEAAyE;QACzE,6DAA6D;QAC7DC,QAAQD,KAAK,CAAC,CAAC,oBAAoB,EAAE1B,YAAY,eAAe,CAAC,EAAE0B;QACnE,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASE,sBACdC,MAAuB,EACvBC,QAAgC,CAAC,CAAC,EAClCC,QAAwC;QAyBVC;IAvB9B,MAAMA,WAAW3C,gBAAgB;QAC/B4B,OAAOY,OAAOZ,KAAK;QACnB,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,4CAA4C;QAC5Cc;QACA,+CAA+C;QAC/CE,QAAQ7C;QACR8C,SAAS5C,sBAAsBuC,OAAON,eAAe,EAAEO;QACvDK,WAAW7C,sBAAsBuC,OAAOJ,iBAAiB,EAAEK;QAC3DA;QACA,yEAAyE;QACzE,0DAA0D;QAC1DM,aAAaP,OAAOV,MAAM;QAC1BkB,aAAaR,OAAO9B,MAAM;IAC5B;IACA,IAAI,EAACiC,4BAAAA,SAAUM,IAAI,GAAE,OAAO;IAC5B,OAAO;QACLJ,SAASxC,sBACPJ,sBAAsBuC,OAAON,eAAe,EAAEO;QAEhDQ,MAAM5C,sBAAsBsC,SAASM,IAAI;QACzCC,MAAM7C,uBAAsBsC,iBAAAA,SAASO,IAAI,YAAbP,iBAAiB;IAC/C;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeQ,gBACpB1C,SAA6B,EAC7BC,MAAc,EACdC,WAAmB,EACnB8B,QAAgC,CAAC,CAAC,EAClC7B,OAGC;IAED,MAAM4B,SAAS,MAAMhC,cAAcC,WAAWC,QAAQC,aAAaC;IACnE,OAAO4B,SAASD,sBAAsBC,QAAQC,OAAO7B,QAAQ8B,QAAQ,IAAI;AAC3E"}
+{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/host-email-render.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { hostEmailOrigin } from './email-media-src'\nimport { decodeEmailNodes } from './stored-email-nodes'\nimport {\n  EMAIL_NODE_ROOT_ID,\n  renderEmailHtml,\n  substituteMergeTokens,\n  type EmailChrome,\n  type EmailRenderOptions,\n  type EmailTheme,\n} from './email-render'\nimport { chromeForDesign } from './email-design-chrome'\nimport { buildDefaultEmailNodeMap } from './system-email-catalog'\n\n/** A chrome as an optional field, absent when there is none. */\nconst withChrome = (chrome: EmailChrome | undefined) => (chrome ? { chrome } : {})\nimport {\n  getTenantEmail,\n  isTenantEmailEditable,\n  TENANT_EMAIL_COLLECTION,\n  type TenantEmailEntry,\n} from './tenant-email-catalog'\n\n/**\n * The slice of the Admin Firestore chain this resolver uses. Structural on\n * purpose (AGL-770): the plugins that call this already hold an Admin\n * Firestore instance, so passing it in keeps `@aglyn/shared-util-email` free\n * of a firebase-admin dependency and importable from every send site.\n */\ninterface AdminDocSnapshotLike {\n  exists: boolean\n  get(field: string): unknown\n}\ninterface AdminDocRefLike {\n  get(): Promise<AdminDocSnapshotLike>\n  collection(path: string): AdminCollectionRefLike\n}\ninterface AdminCollectionRefLike {\n  doc(id: string): AdminDocRefLike\n}\nexport interface AdminFirestoreLike {\n  collection(path: string): AdminCollectionRefLike\n}\n\nexport interface RenderedHostEmail {\n  subject: string\n  html: string\n  text: string\n}\n\n/**\n * Expands the reusable blocks a site's email places into the blocks they stand\n * for (AGL-3287): a shared header or footer is a `reusableInstance` node naming\n * one of the site's components, and `renderEmailHtml` draws an unknown node as\n * nothing at all. Given the decoded node map and the handle and site it was\n * read with; resolves to the map to render.\n *\n * REQUIRED, for the reason `sanitize` is (see\n * {@link EmailRenderOptions.sanitize}): this module is `scope:shared` and the\n * composition — the component graft, the document reads — is the core's, which\n * nx forbids it to import. A composer a caller may omit is one a new send path\n * omits, and its customers then receive every designed email with the header\n * and footer missing while the canvas shows them in place. So the type makes\n * each caller hand one in; every sender passes the core's\n * `composeHostComponentNodes`.\n *\n * Only style overrides are lost on the way through, and not by the composer:\n * a placement's `styleOverrides` land in `sx`, which the mail renderer never\n * reads. Property values and attribute overrides reach the blocks.\n */\nexport type HostEmailComposer = (\n  nodes: Record<string, unknown>,\n  context: { firestore: AdminFirestoreLike; hostId: string },\n) => Promise<Record<string, unknown>>\n\nexport interface LoadHostEmailOptions {\n  /** The site's origin when the caller already knows it; saves the host read. */\n  origin?: string\n  /** See {@link HostEmailComposer} — required, deliberately. */\n  compose: HostEmailComposer\n  /**\n   * The site's header and footer (AGL-3370), drawn around the built-in copy\n   * and around a design the owner published, less any band that design draws\n   * itself (AGL-3372, {@link chromeForDesign}). Built by the caller because\n   * it is read off the site document, which this `scope:shared` module has\n   * no brand vocabulary for.\n   */\n  chrome?: EmailChrome\n  /**\n   * The site's theme (AGL-3370), on EVERY copy, the owner's design included:\n   * a color they picked is a palette token only the theme can resolve, and a\n   * button they left alone wears the site's accent.\n   */\n  theme?: EmailTheme\n}\n\n/**\n * A site-owner-designed template loaded once, ready to render for any number\n * of recipients without another Firestore read (AGL-770) — the booking\n * reminder job renders one per booking.\n */\nexport interface LoadedHostEmail {\n  entry: TenantEmailEntry\n  nodes: Record<string, unknown>\n  subjectTemplate: string\n  preheaderTemplate: string\n  /** Host doc id, so an org-scoped media reference can be host-qualified. */\n  hostId: string\n  /**\n   * The site's absolute origin, for absolutizing picked images (AGL-1224).\n   * Undefined only for a host with neither a custom domain nor a subdomain,\n   * in which case those images are dropped rather than sent broken.\n   */\n  origin?: string\n  /**\n   * `designed` when the site owner published one; `default` for the\n   * catalog's built-in copy, which a site with nothing published sends\n   * (AGL-3370).\n   */\n  source: 'designed' | 'default'\n  /** The site's header and footer, less the bands a design draws itself. */\n  chrome?: EmailChrome\n  /** The site's theme, on every copy. */\n  theme?: EmailTheme\n}\n\n/** Blanks any `{{token}}` the caller did not supply, so a customer never\n * sees a raw tag. Mirrors the platform system-email resolver. */\nfunction blankUnresolvedTokens(value: string): string {\n  return value.replace(/\\{\\{[^}]*\\}\\}/g, '')\n}\n\n/**\n * Loads what a site sends for a key: its published template, or the\n * catalog's built-in copy when there is none to use (no document, no\n * published version, an empty node map, a failed read) (AGL-3370). `null`\n * only for an unknown or non-designable key, or one with no built-in copy.\n * The host-scoped mirror of the platform `loadSystemEmail`:\n * `hosts/{hostId}/emailTemplates/{key}`.\n *\n * The caller passes its own Admin Firestore, so this reads through the Admin\n * SDK — the send path runs as the server, not a signed-in user.\n *\n * TWO reads, not one (AGL-1224): the host document is read for the site's\n * origin, which picked images need to be fetchable from an inbox. It is read\n * LAST, only once there is something to render, so a site with nothing\n * published still costs a single read — and it is skipped entirely when the\n * caller already knows the origin and passes it. Still once per batch, not\n * once per recipient, which is the property AGL-770 cared about.\n *\n * The components the template places are read and grafted HERE, through\n * `options.compose`, for the same reason: once per load, so a batch renders\n * every recipient's copy from one composed map. A template that places none\n * costs no extra read.\n */\nexport async function loadHostEmail(\n  firestore: AdminFirestoreLike,\n  hostId: string,\n  templateKey: string,\n  options: LoadHostEmailOptions,\n): Promise<LoadedHostEmail | null> {\n  const entry = getTenantEmail(templateKey)\n  if (!entry || !isTenantEmailEditable(entry)) return null\n  if (!hostId) return null\n\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  /** The site's origin: the caller's, else one read of the host document. */\n  const siteOrigin = async (): Promise<string | undefined> => {\n    if (options.origin) return options.origin\n    const hostSnapshot = await hostRef.get()\n    return hostEmailOrigin({\n      cname: hostSnapshot.get('cname') as string | undefined,\n      subdomain: hostSnapshot.get('subdomain') as string | undefined,\n    })\n  }\n  /**\n   * The built-in copy (AGL-3370), in the site's header and footer: what a\n   * site with nothing published sends, and what a template that cannot be\n   * read falls back to, so a customer never gets the bare text card.\n   * `null` only for an entry with no built-in copy to render.\n   */\n  const builtIn = async (): Promise<LoadedHostEmail | null> => {\n    if (!entry.defaultBody?.length) return null\n    const origin = await siteOrigin().catch(() => options.origin)\n    return {\n      entry,\n      nodes: buildDefaultEmailNodeMap(entry),\n      hostId,\n      origin,\n      subjectTemplate: entry.defaultSubject ?? '',\n      preheaderTemplate: '',\n      source: 'default',\n      ...(options.chrome ? { chrome: options.chrome } : {}),\n      ...(options.theme ? { theme: options.theme } : {}),\n    }\n  }\n\n  try {\n    const templateRef = hostRef\n      .collection(TENANT_EMAIL_COLLECTION)\n      .doc(templateKey)\n    const templateSnapshot = await templateRef.get()\n    if (!templateSnapshot.exists) return builtIn()\n\n    const versionId = templateSnapshot.get('versionId')\n    if (!versionId) return builtIn()\n\n    const versionSnapshot = await templateRef\n      .collection('versions')\n      .doc(String(versionId))\n      .get()\n    // BOTH stored forms. The email besigner compresses like every other\n    // besigner document (AGL-1151), and every version written before it did\n    // is still a plain map — a plain map comes back unchanged, so a single\n    // call serves both and keeps serving both.\n    //\n    // Reading the field raw is the failure the guard below cannot catch: over\n    // a `Buffer`, `Object.keys` counts BYTE INDICES, so the emptiness test\n    // passes and the caller renders an empty email instead of falling back to\n    // its built-in copy (AGL-1223).\n    const stored = decodeEmailNodes<Record<string, unknown>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!stored || !Object.keys(stored).length) return builtIn()\n    // Reusable blocks (AGL-3287), BEFORE anything reads the tree: a header or\n    // footer the site owner placed is a component reference until this runs.\n    // A failed component read throws into the catch below and falls back to\n    // the built-in copy — never a send with half its design missing.\n    const nodes = await options.compose(stored, { firestore, hostId })\n\n    const origin = await siteOrigin()\n\n    return {\n      entry,\n      nodes,\n      hostId,\n      origin,\n      source: 'designed',\n      ...(options.theme ? { theme: options.theme } : {}),\n      // The site's chrome too (AGL-3372), less whatever band the owner's\n      // design draws itself.\n      ...withChrome(\n        chromeForDesign({ stored, composed: nodes, chrome: options.chrome }),\n      ),\n      subjectTemplate:\n        String(templateSnapshot.get('subject') ?? '') ||\n        entry.defaultSubject ||\n        '',\n      preheaderTemplate: String(templateSnapshot.get('preheader') ?? ''),\n    }\n  } catch (error) {\n    // Never let a template problem block the send, or strip it bare: the\n    // customer gets the built-in copy, in the site's header and footer.\n    console.error(`host email template ${templateKey} failed to load`, error)\n    return builtIn().catch(() => null)\n  }\n}\n\n/**\n * Renders a pre-loaded template for one recipient's merge values (AGL-770).\n * No Firestore access; returns `null` if the node map renders empty so the\n * caller still falls back to its built-in copy.\n */\nexport function renderLoadedHostEmail(\n  loaded: LoadedHostEmail,\n  merge: Record<string, string> = {},\n  sanitize: EmailRenderOptions['sanitize'],\n): RenderedHostEmail | null {\n  const rendered = renderEmailHtml({\n    nodes: loaded.nodes as never,\n    // A site owner designs these in the besigner, so a template's richtext is\n    // author markup exactly as a campaign's is. The policy has to arrive from\n    // above for the reason this lib documents everywhere: `scope:shared`\n    // cannot import the aglyn-scoped sanitizer.\n    sanitize,\n    // Besigner maps are rooted at '_@_' (AGL-765).\n    rootId: EMAIL_NODE_ROOT_ID,\n    subject: substituteMergeTokens(loaded.subjectTemplate, merge),\n    preheader: substituteMergeTokens(loaded.preheaderTemplate, merge),\n    merge,\n    // A picked image is stored as a reference; the site's own origin is what\n    // makes it fetchable from a recipient's inbox (AGL-1224).\n    mediaOrigin: loaded.origin,\n    mediaHostId: loaded.hostId,\n    ...(loaded.chrome ? { chrome: loaded.chrome } : {}),\n    ...loaded.theme,\n  })\n  if (!rendered?.html) return null\n  return {\n    subject: blankUnresolvedTokens(\n      substituteMergeTokens(loaded.subjectTemplate, merge),\n    ),\n    html: blankUnresolvedTokens(rendered.html),\n    text: blankUnresolvedTokens(rendered.text ?? ''),\n  }\n}\n\n/**\n * Renders what a site sends for a key: its designed email, or the catalog's\n * built-in copy in the site's header and footer (AGL-770, AGL-3370). `null`\n * when the key has neither, so the send site keeps its own copy. Single-recipient\n * convenience over {@link loadHostEmail} + {@link renderLoadedHostEmail}; a\n * batch should call those two so it reads the template once.\n */\nexport async function renderHostEmail(\n  firestore: AdminFirestoreLike,\n  hostId: string,\n  templateKey: string,\n  merge: Record<string, string> = {},\n  options: LoadHostEmailOptions & {\n    /** See {@link EmailRenderOptions.sanitize} — required, deliberately. */\n    sanitize: EmailRenderOptions['sanitize']\n  },\n): Promise<RenderedHostEmail | null> {\n  const loaded = await loadHostEmail(firestore, hostId, templateKey, options)\n  return loaded ? renderLoadedHostEmail(loaded, merge, options.sanitize) : null\n}\n"],"names":["hostEmailOrigin","decodeEmailNodes","EMAIL_NODE_ROOT_ID","renderEmailHtml","substituteMergeTokens","chromeForDesign","buildDefaultEmailNodeMap","withChrome","chrome","getTenantEmail","isTenantEmailEditable","TENANT_EMAIL_COLLECTION","blankUnresolvedTokens","value","replace","loadHostEmail","firestore","hostId","templateKey","options","entry","hostRef","collection","doc","siteOrigin","origin","hostSnapshot","get","cname","subdomain","builtIn","defaultBody","length","catch","nodes","subjectTemplate","defaultSubject","preheaderTemplate","source","theme","templateSnapshot","templateRef","exists","versionId","versionSnapshot","String","stored","Object","keys","compose","composed","error","console","renderLoadedHostEmail","loaded","merge","sanitize","rendered","rootId","subject","preheader","mediaOrigin","mediaHostId","html","text","renderHostEmail"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,eAAe,QAAQ,uBAAmB;AACnD,SAASC,gBAAgB,QAAQ,0BAAsB;AACvD,SACEC,kBAAkB,EAClBC,eAAe,EACfC,qBAAqB,QAIhB,oBAAgB;AACvB,SAASC,eAAe,QAAQ,2BAAuB;AACvD,SAASC,wBAAwB,QAAQ,4BAAwB;AAEjE,8DAA8D,GAC9D,MAAMC,aAAa,CAACC,SAAqCA,SAAS;QAAEA;IAAO,IAAI,CAAC;AAChF,SACEC,cAAc,EACdC,qBAAqB,EACrBC,uBAAuB,QAElB,4BAAwB;AAyG/B;+DAC+D,GAC/D,SAASC,sBAAsBC,KAAa;IAC1C,OAAOA,MAAMC,OAAO,CAAC,kBAAkB;AACzC;AAEA;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,OAAO,eAAeC,cACpBC,SAA6B,EAC7BC,MAAc,EACdC,WAAmB,EACnBC,OAA6B;IAE7B,MAAMC,QAAQX,eAAeS;IAC7B,IAAI,CAACE,SAAS,CAACV,sBAAsBU,QAAQ,OAAO;IACpD,IAAI,CAACH,QAAQ,OAAO;IAEpB,MAAMI,UAAUL,UAAUM,UAAU,CAAC,SAASC,GAAG,CAACN;IAClD,yEAAyE,GACzE,MAAMO,aAAa;QACjB,IAAIL,QAAQM,MAAM,EAAE,OAAON,QAAQM,MAAM;QACzC,MAAMC,eAAe,MAAML,QAAQM,GAAG;QACtC,OAAO3B,gBAAgB;YACrB4B,OAAOF,aAAaC,GAAG,CAAC;YACxBE,WAAWH,aAAaC,GAAG,CAAC;QAC9B;IACF;IACA;;;;;GAKC,GACD,MAAMG,UAAU;YAQKV;YAPdA;QAAL,IAAI,GAACA,qBAAAA,MAAMW,WAAW,qBAAjBX,mBAAmBY,MAAM,GAAE,OAAO;QACvC,MAAMP,SAAS,MAAMD,aAAaS,KAAK,CAAC,IAAMd,QAAQM,MAAM;QAC5D,OAAO;YACLL;YACAc,OAAO5B,yBAAyBc;YAChCH;YACAQ;YACAU,eAAe,GAAEf,wBAAAA,MAAMgB,cAAc,YAApBhB,wBAAwB;YACzCiB,mBAAmB;YACnBC,QAAQ;WACJnB,QAAQX,MAAM,GAAG;YAAEA,QAAQW,QAAQX,MAAM;QAAC,IAAI,CAAC,GAC/CW,QAAQoB,KAAK,GAAG;YAAEA,OAAOpB,QAAQoB,KAAK;QAAC,IAAI,CAAC;IAEpD;IAEA,IAAI;YAgDSC,uBAGiBA;QAlD5B,MAAMC,cAAcpB,QACjBC,UAAU,CAACX,yBACXY,GAAG,CAACL;QACP,MAAMsB,mBAAmB,MAAMC,YAAYd,GAAG;QAC9C,IAAI,CAACa,iBAAiBE,MAAM,EAAE,OAAOZ;QAErC,MAAMa,YAAYH,iBAAiBb,GAAG,CAAC;QACvC,IAAI,CAACgB,WAAW,OAAOb;QAEvB,MAAMc,kBAAkB,MAAMH,YAC3BnB,UAAU,CAAC,YACXC,GAAG,CAACsB,OAAOF,YACXhB,GAAG;QACN,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,2CAA2C;QAC3C,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,gCAAgC;QAChC,MAAMmB,SAAS7C,iBACb2C,gBAAgBjB,GAAG,CAAC;QAEtB,IAAI,CAACmB,UAAU,CAACC,OAAOC,IAAI,CAACF,QAAQd,MAAM,EAAE,OAAOF;QACnD,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,iEAAiE;QACjE,MAAMI,QAAQ,MAAMf,QAAQ8B,OAAO,CAACH,QAAQ;YAAE9B;YAAWC;QAAO;QAEhE,MAAMQ,SAAS,MAAMD;QAErB,OAAO;YACLJ;YACAc;YACAjB;YACAQ;YACAa,QAAQ;WACJnB,QAAQoB,KAAK,GAAG;YAAEA,OAAOpB,QAAQoB,KAAK;QAAC,IAAI,CAAC,GAG7ChC,WACDF,gBAAgB;YAAEyC;YAAQI,UAAUhB;YAAO1B,QAAQW,QAAQX,MAAM;QAAC;YAEpE2B,iBACEU,QAAOL,wBAAAA,iBAAiBb,GAAG,CAAC,sBAArBa,wBAAmC,OAC1CpB,MAAMgB,cAAc,IACpB;YACFC,mBAAmBQ,QAAOL,yBAAAA,iBAAiBb,GAAG,CAAC,wBAArBa,yBAAqC;;IAEnE,EAAE,OAAOW,OAAO;QACd,qEAAqE;QACrE,oEAAoE;QACpEC,QAAQD,KAAK,CAAC,CAAC,oBAAoB,EAAEjC,YAAY,eAAe,CAAC,EAAEiC;QACnE,OAAOrB,UAAUG,KAAK,CAAC,IAAM;IAC/B;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASoB,sBACdC,MAAuB,EACvBC,QAAgC,CAAC,CAAC,EAClCC,QAAwC;QA2BVC;IAzB9B,MAAMA,WAAWtD,gBAAgB;QAC/B+B,OAAOoB,OAAOpB,KAAK;QACnB,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,4CAA4C;QAC5CsB;QACA,+CAA+C;QAC/CE,QAAQxD;QACRyD,SAASvD,sBAAsBkD,OAAOnB,eAAe,EAAEoB;QACvDK,WAAWxD,sBAAsBkD,OAAOjB,iBAAiB,EAAEkB;QAC3DA;QACA,yEAAyE;QACzE,0DAA0D;QAC1DM,aAAaP,OAAO7B,MAAM;QAC1BqC,aAAaR,OAAOrC,MAAM;OACtBqC,OAAO9C,MAAM,GAAG;QAAEA,QAAQ8C,OAAO9C,MAAM;IAAC,IAAI,CAAC,GAC9C8C,OAAOf,KAAK;IAEjB,IAAI,EAACkB,4BAAAA,SAAUM,IAAI,GAAE,OAAO;IAC5B,OAAO;QACLJ,SAAS/C,sBACPR,sBAAsBkD,OAAOnB,eAAe,EAAEoB;QAEhDQ,MAAMnD,sBAAsB6C,SAASM,IAAI;QACzCC,MAAMpD,uBAAsB6C,iBAAAA,SAASO,IAAI,YAAbP,iBAAiB;IAC/C;AACF;AAEA;;;;;;CAMC,GACD,OAAO,eAAeQ,gBACpBjD,SAA6B,EAC7BC,MAAc,EACdC,WAAmB,EACnBqC,QAAgC,CAAC,CAAC,EAClCpC,OAGC;IAED,MAAMmC,SAAS,MAAMvC,cAAcC,WAAWC,QAAQC,aAAaC;IACnE,OAAOmC,SAASD,sBAAsBC,QAAQC,OAAOpC,QAAQqC,QAAQ,IAAI;AAC3E"}