@aglyn/shared-util-email 1.0.0-beta.264 → 1.0.0-beta.268

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/shared-util-email",
-  "version": "1.0.0-beta.264",
+  "version": "1.0.0-beta.268",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,8 +25,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.264",
-    "@aglyn/shared-util-http": "1.0.0-beta.264",
+    "@aglyn/shared-data-enums": "1.0.0-beta.268",
+    "@aglyn/shared-util-http": "1.0.0-beta.268",
     "@msgpack/msgpack": "^3.1.3",
     "@swc/helpers": "0.5.23"
   },

package/src/index.d.ts

@@ -28,6 +28,7 @@ export * from './lib/platform-sending-domain';
 export * from './lib/email-health';
 export * from './lib/system-email-catalog';
 export * from './lib/retention-emails';
+export * from './lib/welcome-email';
 export * from './lib/tenant-email-catalog';
 export * from './lib/host-email-render';
 export * from './lib/email-render';

package/src/index.js

@@ -32,6 +32,7 @@ export * from "./lib/platform-sending-domain.js";
 export * from "./lib/email-health.js";
 export * from "./lib/system-email-catalog.js";
 export * from "./lib/retention-emails.js";
+export * from "./lib/welcome-email.js";
 export * from "./lib/tenant-email-catalog.js";
 export * from "./lib/host-email-render.js";
 export * from "./lib/email-render.js";

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/shared/util/email/src/index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/send-email'\n// Who carries the mail (AGL-3080): the provider contract, and the selection\n// of the deployment's provider from the built-ins and any a plugin\n// registered. The providers themselves are imported by their own paths —\n// `@aglyn/shared-util-email/mail-provider-resend`, `…/mail-provider-webhook`\n// — because nothing outside the seam should name one.\nexport * from './lib/mail-provider'\nexport * from './lib/mail-providers'\nexport * from './lib/send-rate'\nexport * from './lib/sender-reputation'\nexport * from './lib/send-ceilings'\nexport * from './lib/sending-domain'\nexport * from './lib/tracking-host'\nexport * from './lib/sending-mailbox'\nexport * from './lib/host-sender'\nexport * from './lib/platform-sending-domain'\nexport * from './lib/email-health'\nexport * from './lib/system-email-catalog'\nexport * from './lib/retention-emails'\nexport * from './lib/tenant-email-catalog'\nexport * from './lib/host-email-render'\nexport * from './lib/email-render'\nexport * from './lib/text-email-html'\nexport * from './lib/marketing-send'\n// The List-Unsubscribe setting sequences and campaigns share (AGL-3307).\nexport * from './lib/list-unsubscribe'\nexport * from './lib/email-delivery-events'\n// Received mail in the platform's vocabulary, which the CRM's capture route\n// files from (AGL-2657); the provider reads it.\n// Its neighbor `./lib/svix-signature` is deliberately NOT re-exported here:\n// it holds a `crypto` HMAC, and this barrel is reached from the browser\n// through `@aglyn/shared-ui-email-campaigns`, so a webhook imports it by its\n// own path — `@aglyn/shared-util-email/svix-signature`.\nexport * from './lib/received-email'\nexport * from './lib/email-revenue-window'\n// Exported so the console drift guard can pin it against @aglyn/aglyn.\nexport * from './lib/email-media-src'\n// Same arrangement, same reason (AGL-1223): a copy of `decodeStoredNodes`\n// this scope:shared lib may not import, pinned by `email-nodes-drift.spec.ts`.\nexport * from './lib/stored-email-nodes'\nexport * from './lib/email-merge'\n// The deliverability engine every send path asks (AGL-3328): the gateway an\n// MX names and its ledger, the bounce reader, and the address verdicts. Pure\n// — the DNS lookup and the store are injected by `@aglyn/tenant-data-admin`,\n// so nothing here reaches `node:dns` from the browser.\nexport * from './lib/mail-gateway'\nexport * from './lib/mail-bounce'\nexport * from './lib/email-deliverability'\n// The sender's side of the same engine (AGL-3328): SPF, DKIM and DMARC for\n// the domain mail leaves from, and whether they align. Pure as well; the\n// lookups are `@aglyn/tenant-data-admin`'s.\nexport * from './lib/sender-readiness'\n// The outbound phishing screen a young workspace's campaigns and automated\n// email pass (AGL-3356). Pure; the hold it leads to is `tenant-data-admin`'s.\nexport * from './lib/outbound-phishing-screen'\n// The send seam's gate for that screen — the store a hold writes is injected\n// by `@aglyn/tenant-data-admin`, like the governor's.\nexport * from './lib/outbound-screen-gate'\n// The same screen read over a published page (AGL-3356): lookalike links and\n// embeds, author-defined credential fields, a brand's call to action.\nexport * from './lib/hosted-page-screen'\n// The reputation lookup every foreign link a page, an email or a redirect\n// points at passes (AGL-3451). Pure; the lookup is injected by\n// `@aglyn/tenant-data-admin`, which holds the credential and the cache.\nexport * from './lib/link-reputation'\n// The site's theme palette as plain data (AGL-3370), so a palette token an\n// author picked resolves in mail. Built without MUI; `shared-ui-theme`'s\n// parity spec holds it equal to the theme.\nexport * from './lib/email-palette'\nexport * from './lib/email-design-chrome'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sBAAkB;AAChC,4EAA4E;AAC5E,mEAAmE;AACnE,yEAAyE;AACzE,6EAA6E;AAC7E,sDAAsD;AACtD,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,qBAAiB;AAC/B,cAAc,6BAAyB;AACvC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,2BAAuB;AACrC,cAAc,uBAAmB;AACjC,cAAc,mCAA+B;AAC7C,cAAc,wBAAoB;AAClC,cAAc,gCAA4B;AAC1C,cAAc,4BAAwB;AACtC,cAAc,gCAA4B;AAC1C,cAAc,6BAAyB;AACvC,cAAc,wBAAoB;AAClC,cAAc,2BAAuB;AACrC,cAAc,0BAAsB;AACpC,yEAAyE;AACzE,cAAc,4BAAwB;AACtC,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,gDAAgD;AAChD,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,wDAAwD;AACxD,cAAc,0BAAsB;AACpC,cAAc,gCAA4B;AAC1C,uEAAuE;AACvE,cAAc,2BAAuB;AACrC,0EAA0E;AAC1E,+EAA+E;AAC/E,cAAc,8BAA0B;AACxC,cAAc,uBAAmB;AACjC,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,uDAAuD;AACvD,cAAc,wBAAoB;AAClC,cAAc,uBAAmB;AACjC,cAAc,gCAA4B;AAC1C,2EAA2E;AAC3E,yEAAyE;AACzE,4CAA4C;AAC5C,cAAc,4BAAwB;AACtC,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,oCAAgC;AAC9C,6EAA6E;AAC7E,sDAAsD;AACtD,cAAc,gCAA4B;AAC1C,6EAA6E;AAC7E,sEAAsE;AACtE,cAAc,8BAA0B;AACxC,0EAA0E;AAC1E,+DAA+D;AAC/D,wEAAwE;AACxE,cAAc,2BAAuB;AACrC,2EAA2E;AAC3E,yEAAyE;AACzE,2CAA2C;AAC3C,cAAc,yBAAqB;AACnC,cAAc,+BAA2B"}
+{"version":3,"sources":["../../../../../../libs/shared/util/email/src/index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/send-email'\n// Who carries the mail (AGL-3080): the provider contract, and the selection\n// of the deployment's provider from the built-ins and any a plugin\n// registered. The providers themselves are imported by their own paths —\n// `@aglyn/shared-util-email/mail-provider-resend`, `…/mail-provider-webhook`\n// — because nothing outside the seam should name one.\nexport * from './lib/mail-provider'\nexport * from './lib/mail-providers'\nexport * from './lib/send-rate'\nexport * from './lib/sender-reputation'\nexport * from './lib/send-ceilings'\nexport * from './lib/sending-domain'\nexport * from './lib/tracking-host'\nexport * from './lib/sending-mailbox'\nexport * from './lib/host-sender'\nexport * from './lib/platform-sending-domain'\nexport * from './lib/email-health'\nexport * from './lib/system-email-catalog'\nexport * from './lib/retention-emails'\nexport * from './lib/welcome-email'\nexport * from './lib/tenant-email-catalog'\nexport * from './lib/host-email-render'\nexport * from './lib/email-render'\nexport * from './lib/text-email-html'\nexport * from './lib/marketing-send'\n// The List-Unsubscribe setting sequences and campaigns share (AGL-3307).\nexport * from './lib/list-unsubscribe'\nexport * from './lib/email-delivery-events'\n// Received mail in the platform's vocabulary, which the CRM's capture route\n// files from (AGL-2657); the provider reads it.\n// Its neighbor `./lib/svix-signature` is deliberately NOT re-exported here:\n// it holds a `crypto` HMAC, and this barrel is reached from the browser\n// through `@aglyn/shared-ui-email-campaigns`, so a webhook imports it by its\n// own path — `@aglyn/shared-util-email/svix-signature`.\nexport * from './lib/received-email'\nexport * from './lib/email-revenue-window'\n// Exported so the console drift guard can pin it against @aglyn/aglyn.\nexport * from './lib/email-media-src'\n// Same arrangement, same reason (AGL-1223): a copy of `decodeStoredNodes`\n// this scope:shared lib may not import, pinned by `email-nodes-drift.spec.ts`.\nexport * from './lib/stored-email-nodes'\nexport * from './lib/email-merge'\n// The deliverability engine every send path asks (AGL-3328): the gateway an\n// MX names and its ledger, the bounce reader, and the address verdicts. Pure\n// — the DNS lookup and the store are injected by `@aglyn/tenant-data-admin`,\n// so nothing here reaches `node:dns` from the browser.\nexport * from './lib/mail-gateway'\nexport * from './lib/mail-bounce'\nexport * from './lib/email-deliverability'\n// The sender's side of the same engine (AGL-3328): SPF, DKIM and DMARC for\n// the domain mail leaves from, and whether they align. Pure as well; the\n// lookups are `@aglyn/tenant-data-admin`'s.\nexport * from './lib/sender-readiness'\n// The outbound phishing screen a young workspace's campaigns and automated\n// email pass (AGL-3356). Pure; the hold it leads to is `tenant-data-admin`'s.\nexport * from './lib/outbound-phishing-screen'\n// The send seam's gate for that screen — the store a hold writes is injected\n// by `@aglyn/tenant-data-admin`, like the governor's.\nexport * from './lib/outbound-screen-gate'\n// The same screen read over a published page (AGL-3356): lookalike links and\n// embeds, author-defined credential fields, a brand's call to action.\nexport * from './lib/hosted-page-screen'\n// The reputation lookup every foreign link a page, an email or a redirect\n// points at passes (AGL-3451). Pure; the lookup is injected by\n// `@aglyn/tenant-data-admin`, which holds the credential and the cache.\nexport * from './lib/link-reputation'\n// The site's theme palette as plain data (AGL-3370), so a palette token an\n// author picked resolves in mail. Built without MUI; `shared-ui-theme`'s\n// parity spec holds it equal to the theme.\nexport * from './lib/email-palette'\nexport * from './lib/email-design-chrome'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sBAAkB;AAChC,4EAA4E;AAC5E,mEAAmE;AACnE,yEAAyE;AACzE,6EAA6E;AAC7E,sDAAsD;AACtD,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,qBAAiB;AAC/B,cAAc,6BAAyB;AACvC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,2BAAuB;AACrC,cAAc,uBAAmB;AACjC,cAAc,mCAA+B;AAC7C,cAAc,wBAAoB;AAClC,cAAc,gCAA4B;AAC1C,cAAc,4BAAwB;AACtC,cAAc,yBAAqB;AACnC,cAAc,gCAA4B;AAC1C,cAAc,6BAAyB;AACvC,cAAc,wBAAoB;AAClC,cAAc,2BAAuB;AACrC,cAAc,0BAAsB;AACpC,yEAAyE;AACzE,cAAc,4BAAwB;AACtC,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,gDAAgD;AAChD,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,wDAAwD;AACxD,cAAc,0BAAsB;AACpC,cAAc,gCAA4B;AAC1C,uEAAuE;AACvE,cAAc,2BAAuB;AACrC,0EAA0E;AAC1E,+EAA+E;AAC/E,cAAc,8BAA0B;AACxC,cAAc,uBAAmB;AACjC,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,uDAAuD;AACvD,cAAc,wBAAoB;AAClC,cAAc,uBAAmB;AACjC,cAAc,gCAA4B;AAC1C,2EAA2E;AAC3E,yEAAyE;AACzE,4CAA4C;AAC5C,cAAc,4BAAwB;AACtC,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,oCAAgC;AAC9C,6EAA6E;AAC7E,sDAAsD;AACtD,cAAc,gCAA4B;AAC1C,6EAA6E;AAC7E,sEAAsE;AACtE,cAAc,8BAA0B;AACxC,0EAA0E;AAC1E,+DAA+D;AAC/D,wEAAwE;AACxE,cAAc,2BAAuB;AACrC,2EAA2E;AAC3E,yEAAyE;AACzE,2CAA2C;AAC3C,cAAc,yBAAqB;AACnC,cAAc,+BAA2B"}

package/src/lib/email-render.d.ts

@@ -122,6 +122,18 @@ export interface EmailRenderOptions {
      * the Besigner canvas draws the button with. Absent is MUI's default, 4.
      */
     buttonRadius?: number;
+    /**
+     * How a button's label is set: the theme's own button type — its case,
+     * weight and letter spacing — so a button reads like the buttons on the
+     * console or the site it comes from (AGL-3897). Absent, mixed case at 600.
+     */
+    buttonText?: EmailButtonText;
+}
+/** A button label's type, from a theme's `typography.button`. */
+export interface EmailButtonText {
+    transform?: 'uppercase' | 'none' | 'capitalize' | 'lowercase';
+    weight?: number;
+    letterSpacing?: string;
 }
 /**
  * The row above the body that says who sent the mail.
@@ -179,7 +191,7 @@ export interface EmailChrome {
  * every color an author picked and colors what they did not, and its button
  * radius. Spread into {@link EmailRenderOptions}.
  */
-export type EmailTheme = Pick<EmailRenderOptions, 'palette' | 'buttonRadius'>;
+export type EmailTheme = Pick<EmailRenderOptions, 'palette' | 'buttonRadius' | 'buttonText'>;
 export interface RenderedEmail {
     html: string;
     text: string;
@@ -187,6 +199,15 @@ export interface RenderedEmail {
 export declare function escapeEmailHtml(value: string): string;
 /** Substitutes {{token}} occurrences; unknown tokens stay visible. */
 export declare function substituteMergeTokens(value: string, merge: Record<string, string> | undefined): string;
+/**
+ * One line of a details panel split into its label and its value: at the
+ * first ": " ("Device: Chrome on macOS"), else at the last " — " ("House
+ * Blend × 2 — $24.00"). A line with neither is drawn across both columns.
+ */
+export declare function splitEmailDetailLine(line: string): {
+    label: string;
+    value: string;
+} | null;
 /**
  * The id the besigner roots every stored node map at — `CANVAS_ROOT_ELEMENT_ID`
  * in `@aglyn/aglyn`. `renderEmailHtml` still defaults `rootId` to `'root'` for

package/src/lib/email-render.js

@@ -43,7 +43,7 @@
  * page is the ordinary way that happens.
  */ import { hasSafeLinkScheme, hasSafeMediaScheme } from "@aglyn/shared-util-http/safe-url-scheme";
 import { linkifyEscapedText } from "./email-linkify.js";
-import { emailAccent, resolveEmailColor } from "./email-palette.js";
+import { emailAccent, PLATFORM_EMAIL_PALETTE, resolveEmailColor } from "./email-palette.js";
 import { resolveEmailMediaSrc } from "./email-media-src.js";
 const FONT = 'Helvetica, Arial, sans-serif';
 /**
@@ -73,8 +73,45 @@ const TEXT_STYLES = {
     heading: `font-size:28px;font-weight:700;line-height:1.25`,
     subheading: `font-size:20px;font-weight:600;line-height:1.3`,
     body: `font-size:15px;font-weight:400;line-height:1.55`,
-    caption: `font-size:12px;font-weight:400;line-height:1.4`
+    caption: `font-size:12px;font-weight:400;line-height:1.5`,
+    // A small label above a heading saying what the email is about: the site,
+    // the workspace (AGL-3897).
+    eyebrow: `font-size:12px;font-weight:700;line-height:1.4;letter-spacing:0.06em;text-transform:uppercase`,
+    // The rows of a details panel; see `detailsHtml`.
+    details: `font-size:14px;font-weight:400;line-height:1.45`,
+    // A list of next steps or help, each a link; see `linksHtml`.
+    links: `font-size:15px;font-weight:600;line-height:1.4`
 };
+/** The space around each text style's row: a heading needs room below it, an eyebrow sits tight above one. */ const TEXT_PADDING = {
+    heading: 'padding:4px 0 10px;',
+    subheading: 'padding:14px 0 4px;',
+    body: 'padding:5px 0;',
+    caption: 'padding:5px 0;',
+    eyebrow: 'padding:0 0 2px;',
+    details: 'padding:10px 0;',
+    links: 'padding:8px 0;'
+};
+/** A details value longer than this reads as a paragraph under its label rather than beside it. */ const DETAIL_INLINE_MAX = 48;
+/** The styles whose words are secondary, drawn in the theme's muted text color unless a color is set. */ const MUTED_TEXT_STYLES = new Set([
+    'caption'
+]);
+/**
+ * One line of a details panel split into its label and its value: at the
+ * first ": " ("Device: Chrome on macOS"), else at the last " — " ("House
+ * Blend × 2 — $24.00"). A line with neither is drawn across both columns.
+ */ export function splitEmailDetailLine(line) {
+    const colon = line.indexOf(': ');
+    if (colon > 0 && colon <= 48) return {
+        label: line.slice(0, colon).trim(),
+        value: line.slice(colon + 2).trim()
+    };
+    const dash = line.lastIndexOf(' — ');
+    if (dash > 0) return {
+        label: line.slice(0, dash).trim(),
+        value: line.slice(dash + 3).trim()
+    };
+    return null;
+}
 /** One full-width table row wrapping arbitrary cell HTML. */ const row = (cellHtml, cellStyle = '')=>`<tr><td style="${cellStyle}">${cellHtml}</td></tr>`;
 /**
  * The id the besigner roots every stored node map at — `CANVAS_ROOT_ELEMENT_ID`
@@ -87,8 +124,10 @@ const TEXT_STYLES = {
 export function renderEmailHtml(options) {
     var _imageSrc, _ref;
     var _nodes_rootId;
-    const { nodes, rootId = 'root', subject = '', preheader = '', merge, products, sanitize, mediaOrigin, mediaHostId, brandLogoUrl, chrome, palette, buttonRadius } = options;
+    const { nodes, rootId = 'root', subject = '', preheader = '', merge, products, sanitize, mediaOrigin, mediaHostId, brandLogoUrl, chrome, palette, buttonRadius, buttonText } = options;
     const radius = Number.isFinite(buttonRadius) && Number(buttonRadius) >= 0 ? Math.min(Number(buttonRadius), 48) : 4;
+    const labelWeight = Number.isFinite(buttonText == null ? void 0 : buttonText.weight) && Number(buttonText == null ? void 0 : buttonText.weight) >= 100 ? Number(buttonText == null ? void 0 : buttonText.weight) : 600;
+    const labelCase = ((buttonText == null ? void 0 : buttonText.transform) && /^(uppercase|none|capitalize|lowercase)$/.test(buttonText.transform) ? `text-transform:${buttonText.transform};` : '') + ((buttonText == null ? void 0 : buttonText.letterSpacing) && /^-?[\d.]+(em|px|rem)$/.test(buttonText.letterSpacing) ? `letter-spacing:${buttonText.letterSpacing};` : '');
     /**
    * A stored color, resolved: a palette token against the theme, a literal
    * as written, anything else to the fallback. The only way a color prop
@@ -98,6 +137,74 @@ export function renderEmailHtml(options) {
         var _resolveEmailColor;
         return (_resolveEmailColor = resolveEmailColor(value, palette)) != null ? _resolveEmailColor : fallback;
     };
+    /** A theme token's color, from the email's palette, else the platform's, which resolves every one. */ const themeColor = (token)=>{
+        var _ref, _resolveEmailColor;
+        return (_ref = (_resolveEmailColor = resolveEmailColor(token, palette)) != null ? _resolveEmailColor : resolveEmailColor(token, PLATFORM_EMAIL_PALETTE)) != null ? _ref : 'inherit';
+    };
+    /**
+   * A list of links (AGL-3897): each "Label — https://…" line a row whose
+   * label is the link, in the theme's link color, with an arrow after it and
+   * a hairline between rows — next steps, help pages. A line with no address
+   * is drawn as plain text; an address the link check refuses drops the link
+   * and keeps the words.
+   */ const linksHtml = (text, style)=>{
+        const rule = themeColor('divider');
+        const lines = text.split('\n').map((line)=>line.trim()).filter(Boolean);
+        const rows = lines.map((line, index)=>{
+            const split = splitEmailDetailLine(line);
+            const href = split ? linkHref(split.value) : undefined;
+            const label = escapeEmailHtml(split ? split.label : line);
+            const border = index > 0 ? `border-top:1px solid ${rule};` : '';
+            const inner = href ? `<a href="${escapeEmailHtml(href)}" target="_blank" style="color:${accent.link};text-decoration:none;">${label}&nbsp;&rarr;</a>` : `<span style="color:${themeColor('text.primary')};">${label}</span>`;
+            return `<tr><td style="font-family:${FONT};${style};padding:10px 0;${border}">${inner}</td></tr>`;
+        });
+        return `<table role="presentation" width="100%" cellpadding="0" cellspacing="0">${rows.join('')}</table>`;
+    };
+    /**
+   * A details panel (AGL-3897): each line a row, its label muted on the left
+   * and its value on the right, on a tinted ground with a hairline between
+   * rows. A row whose label begins "Total" is the sum of the rows above it,
+   * so it is drawn bold with a rule over it. A line that empties out — a
+   * token the send left blank — draws no row.
+   */ const detailsHtml = (text, style, valueColor)=>{
+        var _resolveEmailColor;
+        const muted = themeColor('text.secondary');
+        const rule = themeColor('divider');
+        // A line whose value a token left blank ("Location:") is not drawn.
+        const lines = text.split('\n').map((line)=>line.trim()).filter((line)=>line && !line.endsWith(':'));
+        const cell = (value)=>linkifyEscapedText(escapeEmailHtml(value), accent.link).replace(/\n/g, '<br />');
+        // A line with no label of its own continues the value above it: a form
+        // answer that ran over two lines is one row, not two.
+        const entries = [];
+        for (const line of lines){
+            const split = splitEmailDetailLine(line);
+            const last = entries[entries.length - 1];
+            if (!split && (last == null ? void 0 : last.label)) last.value += `\n${line}`;
+            else entries.push(split ? {
+                label: split.label,
+                value: split.value
+            } : {
+                label: null,
+                value: line
+            });
+        }
+        const rows = entries.map((entry, index)=>{
+            const total = Boolean(entry.label && /^total\b/i.test(entry.label));
+            const border = index > 0 ? `border-top:1px solid ${rule};` : '';
+            const base = `font-family:${FONT};${style};padding:9px 0;vertical-align:top;${border}`;
+            if (!entry.label) {
+                return `<tr><td colspan="2" style="${base}color:${valueColor};">${cell(entry.value)}</td></tr>`;
+            }
+            // A long answer — a message, a note — reads as a paragraph under its
+            // label, not as a bold run squeezed against the right edge.
+            if (!total && (entry.value.length > DETAIL_INLINE_MAX || entry.value.includes('\n'))) {
+                return `<tr><td colspan="2" style="${base}">` + `<div style="color:${muted};padding-bottom:2px;">${cell(entry.label)}</div>` + `<div style="color:${valueColor};">${cell(entry.value)}</div>` + `</td></tr>`;
+            }
+            return `<tr>` + `<td style="${base}color:${total ? valueColor : muted};${total ? 'font-weight:700;' : ''}padding-right:16px;">${cell(entry.label)}</td>` + `<td style="${base}color:${valueColor};font-weight:${total ? 700 : 600};text-align:right;word-break:break-word;">${cell(entry.value)}</td>` + `</tr>`;
+        });
+        return `<table role="presentation" width="100%" cellpadding="0" cellspacing="0" ` + // On the theme's primary tint, the brand's own light ground.
+        `style="background-color:${(_resolveEmailColor = resolveEmailColor('tint.primary', palette)) != null ? _resolveEmailColor : themeColor('grey.50')};border-radius:8px;">` + `<tr><td style="padding:4px 16px;">` + `<table role="presentation" width="100%" cellpadding="0" cellspacing="0">${rows.join('')}</table>` + `</td></tr></table>`;
+    };
     /**
    * The theme's accent, for what the author left unset: the fill, its label,
    * and the accent AS TEXT (`primary.dark`, where the fill itself may be too
@@ -211,17 +318,30 @@ export function renderEmailHtml(options) {
                 }
             case 'emailText':
                 {
-                    var _TEXT_STYLES_props_variant;
-                    const text = sub(props.children);
+                    var _TEXT_PADDING_variant;
+                    const merged = sub(props.children);
+                    // An eyebrow is a few parts joined by " · "; one a token left empty
+                    // ("{{host.businessName}} · Order #1042" on a site with no name) loses
+                    // its separator rather than starting with one.
+                    const text = props.variant === 'eyebrow' ? merged.replace(/^(\s*·\s*)+|(\s*·\s*)+$/g, '').replace(/(\s*·\s*){2,}/g, ' · ') : merged;
                     // A block whose copy is only a token the send left empty (a
                     // notification with no detail line, AGL-3367) draws nothing, rather
                     // than an empty row and a blank paragraph in the text part.
                     if (!text.trim()) return '';
                     textParts.push(text);
-                    const style = (_TEXT_STYLES_props_variant = TEXT_STYLES[props.variant]) != null ? _TEXT_STYLES_props_variant : TEXT_STYLES['body'];
-                    const color = colorOf(props.color, '#1a1a1a');
+                    const variant = TEXT_STYLES[props.variant] ? props.variant : 'body';
+                    const style = TEXT_STYLES[variant];
+                    // Unpicked, secondary words take the theme's muted text, and an
+                    // eyebrow its brand color in the shade that reads as text.
+                    const color = props.color ? colorOf(props.color, '#1a1a1a') : variant === 'eyebrow' ? themeColor('primary.dark') : MUTED_TEXT_STYLES.has(variant) ? themeColor('text.secondary') : '#1a1a1a';
                     const align = props.align || 'left';
-                    return row(`<div style="font-family:${FONT};${style};color:${color};text-align:${align};">` + linkifyEscapedText(escapeEmailHtml(text), accent.link).replace(/\n/g, '<br />') + `</div>`, 'padding:4px 0;');
+                    if (variant === 'links') {
+                        return row(linksHtml(text, style), TEXT_PADDING['links']);
+                    }
+                    if (variant === 'details') {
+                        return row(detailsHtml(text, style, props.color ? color : themeColor('text.primary')), TEXT_PADDING['details']);
+                    }
+                    return row(`<div style="font-family:${FONT};${style};color:${color};text-align:${align};">` + linkifyEscapedText(escapeEmailHtml(text), accent.link).replace(/\n/g, '<br />') + `</div>`, (_TEXT_PADDING_variant = TEXT_PADDING[variant]) != null ? _TEXT_PADDING_variant : TEXT_PADDING['body']);
                 }
             case 'emailRichtext':
             case 'emailHtml':
@@ -248,6 +368,11 @@ export function renderEmailHtml(options) {
             case 'emailButton':
                 {
                     var _props_children, _linkHref, _props_href;
+                    // A button written as merge tokens that the send left empty is one
+                    // this email has nothing to point at (an alert about no one item),
+                    // so it is left out rather than drawn going nowhere.
+                    const tokenOnly = (value)=>/\{\{[^}]+\}\}/.test(String(value != null ? value : '')) && !sub(value).trim();
+                    if (tokenOnly(props.href) || tokenOnly(props.children)) return '';
                     const label = sub((_props_children = props.children) != null ? _props_children : 'Call to action');
                     // A refused href falls back to the placeholder the empty case already
                     // uses, so the button keeps its place in the layout and goes nowhere.
@@ -262,7 +387,7 @@ export function renderEmailHtml(options) {
                     const align = props.align || 'center';
                     textParts.push(`${label}: ${href}`);
                     // Bulletproof-ish button: padded anchor, table-aligned.
-                    return row(`<a href="${escapeEmailHtml(href)}" target="_blank" ` + `style="display:inline-block;padding:12px 28px;border-radius:${radius}px;` + `background-color:${background};color:${color};font-family:${FONT};` + `font-size:15px;font-weight:600;text-decoration:none;">` + escapeEmailHtml(label) + `</a>`, `padding:12px 0;text-align:${align};`);
+                    return row(`<a href="${escapeEmailHtml(href)}" target="_blank" ` + `style="display:inline-block;padding:12px 28px;border-radius:${radius}px;` + `background-color:${background};color:${color};font-family:${FONT};` + `font-size:15px;font-weight:${labelWeight};text-decoration:none;${labelCase}">` + escapeEmailHtml(label) + `</a>`, `padding:12px 0;text-align:${align};`);
                 }
             case 'emailDivider':
                 {
@@ -394,7 +519,10 @@ export function renderEmailHtml(options) {
         return row(htmlLines.map((line, index)=>`<div style="font-family:${FONT};font-size:12px;font-weight:400;line-height:1.4;color:${CHROME_PALETTE.caption};` + `${index ? 'margin-top:8px;' : ''}">${line.replace(/\n/g, '<br />')}</div>`).join(''), `padding:24px;text-align:center;background-color:${CHROME_PALETTE.band};`);
     };
     const footerHtml = (chrome == null ? void 0 : chrome.footer) ? renderChromeFooter(chrome.footer) : '';
-    const html = `<!DOCTYPE html><html><head><meta charset="utf-8" />` + `<meta name="viewport" content="width=device-width, initial-scale=1" />` + `<title>${escapeEmailHtml(sub(subject))}</title></head>` + `<body style="margin:0;padding:0;background-color:#f4f4f4;">` + preheaderHtml + `<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#f4f4f4;">` + row(`<table role="presentation" width="600" cellpadding="0" cellspacing="0" align="center" style="max-width:600px;width:100%;margin:0 auto;">` + headerHtml + body + footerHtml + `</table>`, 'padding:24px 8px;') + `</table></body></html>`;
+    const html = `<!DOCTYPE html><html><head><meta charset="utf-8" />` + `<meta name="viewport" content="width=device-width, initial-scale=1" />` + // Drawn for a light ground in the theme's colors: a client that offers
+    // its own dark rendering (Apple Mail) is asked to show it as designed
+    // rather than invert the brand's colors (AGL-3897).
+    `<meta name="color-scheme" content="light only" />` + `<meta name="supported-color-schemes" content="light only" />` + `<style>:root{color-scheme:light only;supported-color-schemes:light only;}</style>` + `<title>${escapeEmailHtml(sub(subject))}</title></head>` + `<body style="margin:0;padding:0;background-color:#f4f4f4;">` + preheaderHtml + `<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#f4f4f4;">` + row(`<table role="presentation" width="600" cellpadding="0" cellspacing="0" align="center" style="max-width:600px;width:100%;margin:0 auto;">` + headerHtml + body + footerHtml + `</table>`, 'padding:24px 8px;') + `</table></body></html>`;
     return {
         html,
         text: textParts.join('\n\n')

package/src/lib/email-render.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/email-render.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Email render pipeline (AGL-348): converts a designed email screen's\n * node map into email-client-compatible HTML (600px table layout,\n * inlined styles, bulletproof buttons) plus a plain-text alternative.\n * Pure — no I/O; callers resolve products/merge data first.\n *\n * Merge tokens ({{contact.firstName}}, {{unsubscribeUrl}}, …) substitute\n * from the provided map; unknown tokens are left in place so a missing\n * field is visible in test sends instead of silently blank.\n *\n * ## The safety contract, in one place\n *\n * Everything this emits is author-controlled, and it is emitted into mail\n * that has left the building. Three rules, all applied here rather than\n * left to a caller:\n *\n * 1. Block HTML goes through {@link EmailRenderOptions.sanitize}, which is\n *    REQUIRED. There is no identity default to fall back into.\n * 2. Every URL is scheme-checked against `@aglyn/shared-util-http` before it\n *    is escaped into an attribute — escaping stops an attribute breakout and\n *    says nothing at all about `javascript:`.\n * 3. Merge substitution into a URL cannot draw from the `contact.` namespace,\n *    so no template can route a recipient's own address into a query string.\n *\n * Mail clients strip most of this themselves, so none of the three is the\n * last line of defense in an inbox. They are the only line the moment one of\n * these documents renders outside one — a \"view this email in your browser\"\n * page is the ordinary way that happens.\n */\n\nimport {\n  hasSafeLinkScheme,\n  hasSafeMediaScheme,\n} from '@aglyn/shared-util-http/safe-url-scheme'\n\nimport { linkifyEscapedText } from './email-linkify'\nimport { emailAccent, resolveEmailColor, type EmailPalette } from './email-palette'\nimport { resolveEmailMediaSrc } from './email-media-src'\n\nexport interface EmailRenderProduct {\n  name: string\n  priceLabel?: string\n  imageUrl?: string\n  url?: string\n}\n\nexport interface EmailRenderNode {\n  componentId?: string\n  props?: Record<string, any>\n  nodes?: string[]\n}\n\nexport interface EmailRenderOptions {\n  /** Flat node map (screen version `nodes`). */\n  nodes: Record<string, EmailRenderNode | undefined>\n  /** Root node id (defaults to 'root'). */\n  rootId?: string\n  subject?: string\n  /** Hidden preview line shown next to the subject in inboxes. */\n  preheader?: string\n  /** Merge values keyed by token body, e.g. 'contact.firstName'. */\n  merge?: Record<string, string>\n  /** Product data by id for emailProduct blocks. */\n  products?: Record<string, EmailRenderProduct | undefined>\n  /**\n   * The HTML policy applied to every `emailRichtext` / `emailHtml` block.\n   *\n   * REQUIRED, and required is the point. A policy a caller may omit is a\n   * policy that gets omitted, and an omitted one here is not a rendering\n   * bug: the console renders these same nodes through `sanitizeCustomHtml`\n   * before an author ever sees them, so an unpoliced mail render means two\n   * renderers of one document disagreeing about safety, with the unsafe one\n   * being the one that sends.\n   *\n   * This module cannot pick the policy for itself — it is `scope:shared` and\n   * the sanitizer is aglyn-scoped, which nx forbids it to import — so the\n   * choice belongs to the caller, and the type is what makes the caller make\n   * it. Every send path passes `sanitizeAuthorHtml`, which is exactly what\n   * `sanitizeCustomHtml` delegates to, so the mailed copy and the previewed\n   * copy are the same function of the same string.\n   */\n  sanitize: (html: string) => string\n  /**\n   * Absolute origin serving this email's media, e.g. `https://acme.com`\n   * (AGL-1224).\n   *\n   * An image an author picked with \"Browse media\" is stored as a\n   * `media:{scope}/{mediaId}` reference, which resolves to the SITE-RELATIVE\n   * CDN path `/api/media/cdn/…`. A browser has a page to resolve that\n   * against; an inbox has nothing. Without this, every picked image is a\n   * broken-image box in the delivered mail.\n   *\n   * It is an input rather than a lookup because this module is pure, and\n   * because the CDN route is mounted in BOTH the console and the tenant app\n   * — which origin is correct depends on whose email this is.\n   */\n  mediaOrigin?: string\n  /**\n   * Host doc id of the site sending, so an `org:`-scoped reference is\n   * host-qualified. The CDN is unauthenticated and decides from the URL\n   * alone, so an org asset restricted to particular sites is only served\n   * through the qualified form.\n   */\n  mediaHostId?: string\n  /**\n   * Absolute URL of the sender's EMAIL logo, prepended as a centred row at\n   * the top of the 600px table (AGL-2139).\n   *\n   * `emailLogoUrl` was a first-class field of `OrgBrandingProfile`, resolved,\n   * collected in the branding editor, https-validated and persisted — and read\n   * at ZERO render sites. An agency admin on the tier that costs the most\n   * filled it in, the form saved, the value round-tripped, and it appeared in\n   * no email ever. This is the consumer that makes it a live capability\n   * rather than a stored string.\n   *\n   * Absent or blank emits NOTHING — not an empty row, not a spacer. An email\n   * with a gap where a logo should be reads as broken; one without a logo\n   * reads as plain, which is the correct appearance for an org that has not\n   * set one.\n   *\n   * Ignored when {@link EmailRenderOptions.chrome} carries a header: that\n   * header is the logo row, and a caller that has one passes the org's logo\n   * through it, so a message never opens with two.\n   */\n  brandLogoUrl?: string\n  /**\n   * The sender's header and footer, drawn around the body (AGL-3322). See\n   * {@link EmailChrome}. Absent draws neither.\n   */\n  chrome?: EmailChrome\n  /**\n   * The theme the email is sent under (AGL-3370): the console brand for the\n   * platform's own mail, a white-label org's color over it, or the site's\n   * theme for a site's mail. See {@link buildEmailPalette}.\n   *\n   * It does two things. A color an author picked in the Besigner is stored as\n   * a palette token (`primary.main`), which a mail client cannot resolve, so\n   * every color prop is resolved against this before it is written. And\n   * what nobody picked (a button's fill and label, a link) takes the theme's\n   * accent rather than a color of the renderer's own. Absent keeps the\n   * renderer's neutral defaults and drops an unresolvable token.\n   */\n  palette?: EmailPalette\n  /**\n   * A button's corner radius in px: the theme's `shape.borderRadius`, which\n   * the Besigner canvas draws the button with. Absent is MUI's default, 4.\n   */\n  buttonRadius?: number\n}\n\n/**\n * The row above the body that says who sent the mail.\n *\n * `logoAlt` is required because it does two jobs. It is the logo's `alt`,\n * which is what most inboxes show, since they block images by default. And\n * it is the header itself when there is no logo to draw — none was given, or\n * the one given cannot be fetched from an inbox — so the sender is named in\n * bold text rather than by a broken-image box.\n */\nexport interface EmailChromeHeader {\n  /** The logo. Resolved and scheme-checked like every other image here. */\n  logoUrl?: string\n  /** The sender's name: the logo's alt text, or the header when no logo draws. */\n  logoAlt: string\n  /** Where the logo or name links. A refused scheme drops the link, not the header. */\n  href?: string\n}\n\n/**\n * The rows under the body, in the order they draw. Each is optional, and a\n * footer with none of them draws nothing.\n */\nexport interface EmailChromeFooter {\n  /** Why the recipient is getting this mail. */\n  reason?: string\n  /** Where to get help. Drawn as a link; dropped whole when the href is refused. */\n  support?: { label: string; href: string }\n  /** Who sent it, and from where: a copyright and postal line. */\n  legal?: string\n}\n\n/**\n * A sender's header and footer, drawn by the renderer rather than placed by a\n * designer (AGL-3322).\n *\n * For mail whose body carries no header or footer of its own: a system\n * email's built-in copy, or a design sent under a brand whose own blocks it\n * may not carry. The caller decides WHICH brand; this only draws.\n *\n * Every string goes through the same merge substitution as the body, so\n * `{{org.name}}` in a footer line reads as the organization it names, and is\n * escaped like body text. Every URL goes through the same scheme checks as a\n * body link or image. The footer lines are appended to the plain-text part\n * too, the support link as its bare address, because a reader of that part is\n * owed the same reason and the same way to get help.\n */\nexport interface EmailChrome {\n  header?: EmailChromeHeader\n  footer?: EmailChromeFooter\n}\n\n/**\n * The theme an email is drawn in (AGL-3370): its palette, which resolves\n * every color an author picked and colors what they did not, and its button\n * radius. Spread into {@link EmailRenderOptions}.\n */\nexport type EmailTheme = Pick<EmailRenderOptions, 'palette' | 'buttonRadius'>\n\nexport interface RenderedEmail {\n  html: string\n  text: string\n}\n\nconst FONT = 'Helvetica, Arial, sans-serif'\n\n/**\n * The colours the chrome is drawn in (AGL-3322), named once.\n *\n * Literal because this is email HTML: mail clients strip `<style>` and read no\n * CSS variables, so no theme token reaches the wire. They are the values\n * already in the mail, not new ones — the ink and card of a default body\n * block, and the band and caption grey of the email footer block the\n * platform's own mail wears — so the chrome and the body it frames agree.\n */\nconst CHROME_PALETTE = {\n  /** The sender's name in the header: body text's ink. */\n  ink: '#1a1a1a',\n  /** The header band: a default section's card. */\n  card: '#ffffff',\n  /** The footer band. */\n  band: '#F8F9FA',\n  /** Footer lines and the support link. */\n  caption: '#757575',\n} as const\n\nexport function escapeEmailHtml(value: string): string {\n  return value\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n}\n\n/** Substitutes {{token}} occurrences; unknown tokens stay visible. */\nexport function substituteMergeTokens(\n  value: string,\n  merge: Record<string, string> | undefined,\n): string {\n  return value.replace(/\\{\\{\\s*([\\w.]+)\\s*\\}\\}/g, (match, token: string) => {\n    const replacement = merge?.[token]\n    return replacement !== undefined ? replacement : match\n  })\n}\n\nconst TEXT_STYLES: Record<string, string> = {\n  heading: `font-size:28px;font-weight:700;line-height:1.25`,\n  subheading: `font-size:20px;font-weight:600;line-height:1.3`,\n  body: `font-size:15px;font-weight:400;line-height:1.55`,\n  caption: `font-size:12px;font-weight:400;line-height:1.4`,\n}\n\n/** One full-width table row wrapping arbitrary cell HTML. */\nconst row = (cellHtml: string, cellStyle = ''): string =>\n  `<tr><td style=\"${cellStyle}\">${cellHtml}</td></tr>`\n\n/**\n * The id the besigner roots every stored node map at — `CANVAS_ROOT_ELEMENT_ID`\n * in `@aglyn/aglyn`. `renderEmailHtml` still defaults `rootId` to `'root'` for\n * ad-hoc callers, but anything rendering a real besigner document MUST pass\n * this: rendering a besigner map as `'root'` finds no root and emits nothing\n * (AGL-765). Kept here so server code need not import the heavy `@aglyn/aglyn`\n * barrel; a drift guard in the console specs asserts the two stay equal.\n */\nexport const EMAIL_NODE_ROOT_ID = '_@_'\n\nexport function renderEmailHtml(options: EmailRenderOptions): RenderedEmail {\n  const {\n    nodes,\n    rootId = 'root',\n    subject = '',\n    preheader = '',\n    merge,\n    products,\n    sanitize,\n    mediaOrigin,\n    mediaHostId,\n    brandLogoUrl,\n    chrome,\n    palette,\n    buttonRadius,\n  } = options\n  const radius =\n    Number.isFinite(buttonRadius) && Number(buttonRadius) >= 0\n      ? Math.min(Number(buttonRadius), 48)\n      : 4\n\n  /**\n   * A stored color, resolved: a palette token against the theme, a literal\n   * as written, anything else to the fallback. The only way a color prop\n   * reaches the markup, so nothing unresolvable or unsafe is ever written\n   * into a style attribute.\n   */\n  const colorOf = (value: unknown, fallback: string): string =>\n    resolveEmailColor(value, palette) ?? fallback\n  /**\n   * The theme's accent, for what the author left unset: the fill, its label,\n   * and the accent AS TEXT (`primary.dark`, where the fill itself may be too\n   * pale to read as a link). The platform's stands in for a missing palette.\n   */\n  const accent = emailAccent(palette)\n\n  const textParts: string[] = []\n  const sub = (value: unknown): string =>\n    substituteMergeTokens(String(value ?? ''), merge)\n\n  /**\n   * The merge map as it applies inside a URL: everything except the\n   * `contact.` namespace.\n   *\n   * That namespace is the recipient — `contact.email`, `contact.name`,\n   * `contact.firstName` are what campaign-send puts in the map. Substituting\n   * them into an `href` or a `src` is how a template like\n   * `https://example.test/?e={{contact.email}}` turns every send into the\n   * recipient's own address on somebody's query string, and putting personal\n   * data in a URL is a line this codebase does not cross. The refusal has to\n   * live here because it is the SUBSTITUTION that creates the value: no\n   * scheme check and no sanitizer can see the address, since the template\n   * the author wrote and the editor reviewed contains only the token.\n   *\n   * Nothing else narrows: `{{unsubscribeUrl}}` and `{{site.url}}` ARE URLs\n   * and are the reason a token appears in this position at all.\n   *\n   * A refused token is left standing rather than blanked, which is this\n   * module's existing convention for a token it will not fill — a test send\n   * shows `?e={{contact.email}}` in the link, which names the problem to the\n   * author instead of silently shipping a subtly different URL.\n   */\n  const urlMerge = merge\n    ? Object.fromEntries(\n        Object.entries(merge).filter(\n          ([token]) => !token.startsWith('contact.'),\n        ),\n      )\n    : undefined\n\n  /** {@link sub} for a value that lands in a URL — see {@link urlMerge}. */\n  const subUrl = (value: unknown): string =>\n    substituteMergeTokens(String(value ?? ''), urlMerge)\n\n  /**\n   * A link target safe to emit, or undefined.\n   *\n   * Escaping the value into the attribute stops a breakout and says nothing\n   * about the scheme, so `escapeEmailHtml` on its own passes a stored\n   * `javascript:` or `data:` href through verbatim. The check runs on the\n   * SUBSTITUTED string, because a merge value is part of the final URL and a\n   * template that reads clean can resolve to one that does not.\n   */\n  const linkHref = (value: unknown): string | undefined => {\n    const href = subUrl(value)\n    if (!href) return undefined\n    return hasSafeLinkScheme(href) ? href : undefined\n  }\n\n  const origin = mediaOrigin?.replace(/\\/+$/, '')\n\n  /**\n   * A stored image value turned into something an inbox can actually fetch,\n   * or undefined (AGL-1224).\n   *\n   * `resolveEmailMediaSrc` handles the three stored generations — a `media:`\n   * reference, the AGL-175 relative CDN path, and a plain absolute URL an\n   * author typed — but the first two come back site-relative, which is the\n   * whole bug: only a browser has a page to resolve them against.\n   *\n   * With no origin to absolutize against, the image is DROPPED rather than\n   * emitted relative. Both are a missing picture; a dropped one leaves a gap,\n   * while `src=\"/api/media/cdn/…\"` renders as a broken-image box, which reads\n   * to a recipient as a broken email rather than a plain one.\n   *\n   * ⚠️ This comment used to claim \"neither send path relies on this — both\n   * supply an origin\", and treated reaching the drop as hypothetical. It was\n   * wrong, and it was wrong in the direction that hides the bug: campaign-send\n   * passed no `mediaOrigin`/`mediaHostId` at all, so every author-picked image\n   * was silently dropped from every marketing campaign until AGL-1394. The\n   * quiet failure IS still the right one for a caller that genuinely has no\n   * origin — but \"no caller reaches this\" is a claim about the whole repo, and\n   * it decays the moment someone adds a third send path. Verify it before\n   * relying on it; do not restore a count here.\n   *\n   * A protocol-relative `//host/x.png` is passed through untouched: it is\n   * already absolute enough to name a host, and prefixing an origin would\n   * corrupt it.\n   *\n   * The scheme is checked on the way out. `resolveEmailMediaSrc` recognizes\n   * the two stored reference forms and passes anything else through as an\n   * author-typed URL, so it is this check and nothing else that stands\n   * between what an author types and the `src` attribute. A refusal drops\n   * the image on the same reasoning as everything else here that cannot be\n   * made fetchable: a gap reads as a plain email, and a `src` we would not\n   * stand behind is not made safer by shipping it.\n   */\n  const imageSrc = (value: unknown): string | undefined => {\n    const resolved = resolveEmailMediaSrc(subUrl(value), mediaHostId)\n    if (!resolved || !hasSafeMediaScheme(resolved)) return undefined\n    if (!resolved.startsWith('/') || resolved.startsWith('//')) return resolved\n    if (origin) return `${origin}${resolved}`\n    // A Storage download URL resolves to the CDN path (AGL-3506). With no\n    // origin to send it from, the absolute URL it already was still fetches,\n    // which beats dropping the picture.\n    const stored = subUrl(value)\n    return stored && /^https:\\/\\//i.test(stored) ? stored : undefined\n  }\n\n  const renderChildren = (ids: string[] | undefined): string =>\n    (ids ?? [])\n      .map((id) => renderNode(id))\n      .filter(Boolean)\n      .join('')\n\n  const renderNode = (id: string): string => {\n    const node = nodes[id]\n    if (!node) return ''\n    const props = node.props ?? {}\n    switch (node.componentId) {\n      case 'emailSection': {\n        const background = colorOf(props.backgroundColor, '#ffffff')\n        const padding = Number.isFinite(Number(props.padding))\n          ? Number(props.padding)\n          : 24\n        const align = props.align || 'left'\n        // A ROW, like every other block, with the band's table inside its\n        // cell. Whatever encloses a section is a table — the 600px column, or\n        // another section's inner table — and a `<table>` placed straight into\n        // a table's rows is not a child an HTML parser keeps there: it closes\n        // the enclosing table and lands after it. Emitted bare, a section would\n        // draw outside the column, as wide as the viewport rather than the\n        // 600px the editor shows, and take every row after it out too.\n        return row(\n          `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" ` +\n            `style=\"background-color:${background};\">` +\n            row(\n              `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\">` +\n                renderChildren(node.nodes) +\n                `</table>`,\n              `padding:${padding}px;text-align:${align};`,\n            ) +\n            `</table>`,\n        )\n      }\n      case 'emailText': {\n        const text = sub(props.children)\n        // A block whose copy is only a token the send left empty (a\n        // notification with no detail line, AGL-3367) draws nothing, rather\n        // than an empty row and a blank paragraph in the text part.\n        if (!text.trim()) return ''\n        textParts.push(text)\n        const style = TEXT_STYLES[props.variant as string] ?? TEXT_STYLES['body']\n        const color = colorOf(props.color, '#1a1a1a')\n        const align = props.align || 'left'\n        return row(\n          `<div style=\"font-family:${FONT};${style};color:${color};text-align:${align};\">` +\n            linkifyEscapedText(escapeEmailHtml(text), accent.link).replace(/\\n/g, '<br />') +\n            `</div>`,\n          'padding:4px 0;',\n        )\n      }\n      case 'emailRichtext':\n      case 'emailHtml': {\n        const html = sanitize(sub(props.html))\n        if (!html.trim()) return ''\n        textParts.push(html.replace(/<[^>]+>/g, ' ').trim())\n        return row(\n          `<div style=\"font-family:${FONT};font-size:15px;line-height:1.55;\">${html}</div>`,\n          'padding:4px 0;',\n        )\n      }\n      case 'emailImage': {\n        const src = imageSrc(props.src)\n        if (!src) return ''\n        const width = Number(props.width) > 0 ? Number(props.width) : 600\n        const alt = escapeEmailHtml(String(props.alt ?? ''))\n        const align = props.align || 'center'\n        const img =\n          `<img src=\"${escapeEmailHtml(src)}\" alt=\"${alt}\" width=\"${Math.min(width, 600)}\" ` +\n          `style=\"display:inline-block;max-width:100%;height:auto;border:0;\" />`\n        // A refused href drops the WRAPPER, not the picture: the image is the\n        // content and the link is decoration on it.\n        const href = linkHref(props.href)\n        return row(\n          href\n            ? `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\">${img}</a>`\n            : img,\n          `padding:8px 0;text-align:${align};`,\n        )\n      }\n      case 'emailButton': {\n        const label = sub(props.children ?? 'Call to action')\n        // A refused href falls back to the placeholder the empty case already\n        // uses, so the button keeps its place in the layout and goes nowhere.\n        // Dropping the row instead would take the author's copy with it, and\n        // an inert button reads as an unfinished email rather than a broken\n        // one. The plain-text alternative gets the same value the anchor\n        // does — a text/plain body is inert, but it is still delivered mail\n        // and a refused URL does not belong in it either.\n        const href = linkHref(props.href ?? '#') ?? '#'\n        const background = colorOf(props.backgroundColor, accent.fill)\n        const color = colorOf(props.color, accent.label)\n        const align = props.align || 'center'\n        textParts.push(`${label}: ${href}`)\n        // Bulletproof-ish button: padded anchor, table-aligned.\n        return row(\n          `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\" ` +\n            `style=\"display:inline-block;padding:12px 28px;border-radius:${radius}px;` +\n            `background-color:${background};color:${color};font-family:${FONT};` +\n            `font-size:15px;font-weight:600;text-decoration:none;\">` +\n            escapeEmailHtml(label) +\n            `</a>`,\n          `padding:12px 0;text-align:${align};`,\n        )\n      }\n      case 'emailDivider': {\n        const color = colorOf(props.color, '#e0e0e0')\n        return row(\n          `<div style=\"border-top:1px solid ${color};font-size:0;line-height:0;\">&nbsp;</div>`,\n          'padding:12px 0;',\n        )\n      }\n      case 'emailSpacer': {\n        const height = Number(props.height) > 0 ? Number(props.height) : 24\n        return row(\n          `<div style=\"height:${height}px;font-size:0;line-height:0;\">&nbsp;</div>`,\n        )\n      }\n      case 'emailProduct': {\n        const product = props.productId\n          ? products?.[String(props.productId)]\n          : undefined\n        if (!product) return ''\n        const label = sub(props.buttonLabel ?? 'Shop now')\n        // Catalog data rather than author markup, and the caller absolutizes\n        // it before it arrives — but \"it came from a trusted table\" is a\n        // claim about every writer of that table, so the same rule applies\n        // here as to an author-typed href. Refused means no button and no\n        // line in the text part; the product card itself still renders.\n        const productUrl =\n          product.url && hasSafeLinkScheme(product.url)\n            ? product.url\n            : undefined\n        textParts.push(\n          `${product.name}${product.priceLabel ? ` — ${product.priceLabel}` : ''}` +\n            (productUrl ? `: ${productUrl}` : ''),\n        )\n        // Same treatment as emailImage: a catalog image can be a picked\n        // asset, so it carries the same reference/relative forms (AGL-1224).\n        const productImage = imageSrc(product.imageUrl)\n        const image = productImage\n          ? `<img src=\"${escapeEmailHtml(productImage)}\" alt=\"${escapeEmailHtml(product.name)}\" width=\"280\" style=\"max-width:100%;height:auto;border:0;border-radius:6px;\" /><br />`\n          : ''\n        const button = productUrl\n          ? `<a href=\"${escapeEmailHtml(productUrl)}\" target=\"_blank\" style=\"display:inline-block;margin-top:8px;padding:10px 24px;border-radius:${radius}px;background-color:${accent.fill};color:${accent.label};font-family:${FONT};font-size:14px;font-weight:600;text-decoration:none;\">${escapeEmailHtml(label)}</a>`\n          : ''\n        return row(\n          `<div style=\"border:1px solid #e0e0e0;border-radius:8px;padding:16px;text-align:center;font-family:${FONT};\">` +\n            image +\n            `<div style=\"font-size:16px;font-weight:600;margin-top:8px;\">${escapeEmailHtml(product.name)}</div>` +\n            (product.priceLabel\n              ? `<div style=\"font-size:14px;color:#555555;margin-top:2px;\">${escapeEmailHtml(product.priceLabel)}</div>`\n              : '') +\n            button +\n            `</div>`,\n          'padding:8px 0;',\n        )\n      }\n      default: {\n        // Unknown/web components: render their children so mixed documents\n        // degrade gracefully instead of dropping content.\n        return renderChildren(node.nodes)\n      }\n    }\n  }\n\n  const body = renderNode(rootId) || renderChildren(nodes[rootId]?.nodes)\n  const preheaderHtml = preheader\n    ? `<div style=\"display:none;max-height:0;overflow:hidden;mso-hide:all;\">` +\n      escapeEmailHtml(sub(preheader)) +\n      `</div>`\n    : ''\n\n  // INSIDE the 600px table, above the designed body, so it inherits the\n  // column's width on a phone instead of being centred against the viewport.\n  // `alt` is the product name where one is known, because a logo blocked by\n  // the client (which is the default in most inboxes) must still say who sent\n  // the mail. Height is capped rather than set, so a wordmark and a square\n  // mark both land at a sane size without the sender supplying dimensions.\n  //\n  // The src goes through `imageSrc` like every other image in the message\n  // (AGL-2230), and NOT into the tag raw. `emailLogoUrl` is collected by\n  // `MediaUrlField`, whose \"Browse\" button writes the picked asset's\n  // site-relative `cdnPath` — and the org DAM's other generation stores a\n  // `media:{scope}/{mediaId}` reference. Neither is a URL an inbox can\n  // resolve: there is no page to resolve it against, so a raw pass-through\n  // put `src=\"media:h1/med9\"` at the top of every transactional email a\n  // white-label org sent. `imageSrc` absolutizes both forms against\n  // `mediaOrigin`, passes a real https URL through untouched, and returns\n  // undefined when it cannot produce something fetchable — in which case the\n  // row is dropped, on the same reasoning as AGL-1224: a gap reads as a plain\n  // email, a broken-image box reads as a broken one.\n  const brandLogo = imageSrc(String(brandLogoUrl ?? '').trim()) ?? ''\n  // The product name from the merge map, because most inboxes block images by\n  // default — a logo with no `alt` is a blank box where the sender's identity\n  // should be. Falls back to nothing rather than to a literal, which would\n  // reintroduce the hard-coded brand this whole change removes.\n  const brandLogoAlt = merge?.['brand.productName'] ?? ''\n  const brandLogoHtml = brandLogo\n    ? row(\n        `<img src=\"${escapeEmailHtml(brandLogo)}\" alt=\"${escapeEmailHtml(brandLogoAlt)}\" ` +\n          `style=\"max-height:48px;max-width:200px;display:block;margin:0 auto;border:0;\" />`,\n        'padding:24px 24px 0;text-align:center;',\n      )\n    : ''\n\n  /**\n   * The chrome header row, or '' when it has nothing to draw.\n   *\n   * Same placement and the same `imageSrc` as the logo row above, which it\n   * replaces. Height is capped at 40px rather than set, so a wordmark and a\n   * square mark both land at a sane size; the `height` attribute is for the\n   * desktop clients that ignore CSS `max-height` and would otherwise draw the\n   * file at its own size. A logo that cannot be fetched from an inbox falls\n   * back to the name in bold, never to an `<img>` that draws a broken box.\n   * White, so the header and a default body read as one card.\n   */\n  const renderChromeHeader = (header: EmailChromeHeader): string => {\n    const logo = imageSrc(String(header.logoUrl ?? '').trim())\n    const name = sub(header.logoAlt).trim()\n    const href = linkHref(header.href)\n    const link = (inner: string, style: string): string =>\n      href\n        ? `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\" style=\"${style}\">${inner}</a>`\n        : inner\n    let mark: string\n    if (logo) {\n      mark = link(\n        `<img src=\"${escapeEmailHtml(logo)}\" alt=\"${escapeEmailHtml(name)}\" height=\"40\" ` +\n          `style=\"display:block;margin:0 auto;border:0;height:auto;width:auto;max-height:40px;max-width:200px;\" />`,\n        'text-decoration:none;',\n      )\n    } else if (name) {\n      mark =\n        `<div style=\"font-family:${FONT};font-size:20px;font-weight:700;line-height:1.3;color:${CHROME_PALETTE.ink};text-align:center;\">` +\n        link(escapeEmailHtml(name), `color:${CHROME_PALETTE.ink};text-decoration:none;`) +\n        `</div>`\n    } else {\n      return ''\n    }\n    return row(\n      mark,\n      `padding:24px 24px 0;text-align:center;background-color:${CHROME_PALETTE.card};`,\n    )\n  }\n\n  const headerHtml = chrome?.header\n    ? renderChromeHeader(chrome.header)\n    : brandLogoHtml\n\n  /**\n   * The chrome footer: rows under the body in the look of the email footer\n   * block the platform's own mail wears (a `#F8F9FA` section, padded 24,\n   * centered captions), and the same lines appended to the plain-text part.\n   *\n   * Rendered AFTER the body on purpose: the body's blocks push their text as\n   * they draw, and the footer's lines belong after all of it. A line that\n   * resolves to nothing is left out rather than drawn as an empty row.\n   */\n  const renderChromeFooter = (footer: EmailChromeFooter): string => {\n    const htmlLines: string[] = []\n    const textLines: string[] = []\n    const reason = sub(footer.reason).trim()\n    if (reason) {\n      htmlLines.push(escapeEmailHtml(reason))\n      textLines.push(reason)\n    }\n    const supportLabel = sub(footer.support?.label).trim()\n    const supportHref = linkHref(footer.support?.href)\n    if (supportLabel && supportHref) {\n      htmlLines.push(\n        `<a href=\"${escapeEmailHtml(supportHref)}\" target=\"_blank\" ` +\n          `style=\"color:${CHROME_PALETTE.caption};text-decoration:underline;\">${escapeEmailHtml(supportLabel)}</a>`,\n      )\n      // A plain-text reader gets the address itself, bare: a mailto's\n      // mailbox, or the URL. \"Get help: https://…\" names where it goes; a\n      // label that already IS the mailbox is not repeated.\n      const bare = /^mailto:/i.test(supportHref)\n        ? supportHref.slice('mailto:'.length).split('?')[0]\n        : supportHref\n      textLines.push(supportLabel === bare ? bare : `${supportLabel}: ${bare}`)\n    }\n    const legal = sub(footer.legal).trim()\n    if (legal) {\n      htmlLines.push(escapeEmailHtml(legal))\n      textLines.push(legal)\n    }\n    if (!htmlLines.length) return ''\n    textParts.push(textLines.join('\\n'))\n    return row(\n      htmlLines\n        .map(\n          (line, index) =>\n            `<div style=\"font-family:${FONT};font-size:12px;font-weight:400;line-height:1.4;color:${CHROME_PALETTE.caption};` +\n            `${index ? 'margin-top:8px;' : ''}\">${line.replace(/\\n/g, '<br />')}</div>`,\n        )\n        .join(''),\n      `padding:24px;text-align:center;background-color:${CHROME_PALETTE.band};`,\n    )\n  }\n\n  const footerHtml = chrome?.footer ? renderChromeFooter(chrome.footer) : ''\n\n  const html =\n    `<!DOCTYPE html><html><head><meta charset=\"utf-8\" />` +\n    `<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />` +\n    `<title>${escapeEmailHtml(sub(subject))}</title></head>` +\n    `<body style=\"margin:0;padding:0;background-color:#f4f4f4;\">` +\n    preheaderHtml +\n    `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" style=\"background-color:#f4f4f4;\">` +\n    row(\n      `<table role=\"presentation\" width=\"600\" cellpadding=\"0\" cellspacing=\"0\" align=\"center\" style=\"max-width:600px;width:100%;margin:0 auto;\">` +\n        headerHtml +\n        body +\n        footerHtml +\n        `</table>`,\n      'padding:24px 8px;',\n    ) +\n    `</table></body></html>`\n\n  return { html, text: textParts.join('\\n\\n') }\n}\n"],"names":["hasSafeLinkScheme","hasSafeMediaScheme","linkifyEscapedText","emailAccent","resolveEmailColor","resolveEmailMediaSrc","FONT","CHROME_PALETTE","ink","card","band","caption","escapeEmailHtml","value","replace","substituteMergeTokens","merge","match","token","replacement","undefined","TEXT_STYLES","heading","subheading","body","row","cellHtml","cellStyle","EMAIL_NODE_ROOT_ID","renderEmailHtml","options","imageSrc","nodes","rootId","subject","preheader","products","sanitize","mediaOrigin","mediaHostId","brandLogoUrl","chrome","palette","buttonRadius","radius","Number","isFinite","Math","min","colorOf","fallback","accent","textParts","sub","String","urlMerge","Object","fromEntries","entries","filter","startsWith","subUrl","linkHref","href","origin","resolved","stored","test","renderChildren","ids","map","id","renderNode","Boolean","join","node","props","componentId","background","backgroundColor","padding","align","text","children","trim","push","style","variant","color","link","html","src","width","alt","img","label","fill","height","product","productId","buttonLabel","productUrl","url","name","priceLabel","productImage","imageUrl","image","button","preheaderHtml","brandLogo","brandLogoAlt","brandLogoHtml","renderChromeHeader","header","logo","logoUrl","logoAlt","inner","mark","headerHtml","renderChromeFooter","footer","htmlLines","textLines","reason","supportLabel","support","supportHref","bare","slice","length","split","legal","line","index","footerHtml"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BC,GAED,SACEA,iBAAiB,EACjBC,kBAAkB,QACb,0CAAyC;AAEhD,SAASC,kBAAkB,QAAQ,qBAAiB;AACpD,SAASC,WAAW,EAAEC,iBAAiB,QAA2B,qBAAiB;AACnF,SAASC,oBAAoB,QAAQ,uBAAmB;AAgLxD,MAAMC,OAAO;AAEb;;;;;;;;CAQC,GACD,MAAMC,iBAAiB;IACrB,sDAAsD,GACtDC,KAAK;IACL,+CAA+C,GAC/CC,MAAM;IACN,qBAAqB,GACrBC,MAAM;IACN,uCAAuC,GACvCC,SAAS;AACX;AAEA,OAAO,SAASC,gBAAgBC,KAAa;IAC3C,OAAOA,MACJC,OAAO,CAAC,MAAM,SACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM;AACnB;AAEA,oEAAoE,GACpE,OAAO,SAASC,sBACdF,KAAa,EACbG,KAAyC;IAEzC,OAAOH,MAAMC,OAAO,CAAC,2BAA2B,CAACG,OAAOC;QACtD,MAAMC,cAAcH,yBAAAA,KAAO,CAACE,MAAM;QAClC,OAAOC,gBAAgBC,YAAYD,cAAcF;IACnD;AACF;AAEA,MAAMI,cAAsC;IAC1CC,SAAS,CAAC,+CAA+C,CAAC;IAC1DC,YAAY,CAAC,8CAA8C,CAAC;IAC5DC,MAAM,CAAC,+CAA+C,CAAC;IACvDb,SAAS,CAAC,8CAA8C,CAAC;AAC3D;AAEA,2DAA2D,GAC3D,MAAMc,MAAM,CAACC,UAAkBC,YAAY,EAAE,GAC3C,CAAC,eAAe,EAAEA,UAAU,EAAE,EAAED,SAAS,UAAU,CAAC;AAEtD;;;;;;;CAOC,GACD,OAAO,MAAME,qBAAqB,MAAK;AAEvC,OAAO,SAASC,gBAAgBC,OAA2B;QA6UvCC;QA1BgCC;IAlTlD,MAAM,EACJA,KAAK,EACLC,SAAS,MAAM,EACfC,UAAU,EAAE,EACZC,YAAY,EAAE,EACdnB,KAAK,EACLoB,QAAQ,EACRC,QAAQ,EACRC,WAAW,EACXC,WAAW,EACXC,YAAY,EACZC,MAAM,EACNC,OAAO,EACPC,YAAY,EACb,GAAGb;IACJ,MAAMc,SACJC,OAAOC,QAAQ,CAACH,iBAAiBE,OAAOF,iBAAiB,IACrDI,KAAKC,GAAG,CAACH,OAAOF,eAAe,MAC/B;IAEN;;;;;GAKC,GACD,MAAMM,UAAU,CAACpC,OAAgBqC;YAC/B9C;gBAAAA,qBAAAA,kBAAkBS,OAAO6B,oBAAzBtC,qBAAqC8C;;IACvC;;;;GAIC,GACD,MAAMC,SAAShD,YAAYuC;IAE3B,MAAMU,YAAsB,EAAE;IAC9B,MAAMC,MAAM,CAACxC,QACXE,sBAAsBuC,OAAOzC,gBAAAA,QAAS,KAAKG;IAE7C;;;;;;;;;;;;;;;;;;;;;GAqBC,GACD,MAAMuC,WAAWvC,QACbwC,OAAOC,WAAW,CAChBD,OAAOE,OAAO,CAAC1C,OAAO2C,MAAM,CAC1B,CAAC,CAACzC,MAAM,GAAK,CAACA,MAAM0C,UAAU,CAAC,gBAGnCxC;IAEJ,wEAAwE,GACxE,MAAMyC,SAAS,CAAChD,QACdE,sBAAsBuC,OAAOzC,gBAAAA,QAAS,KAAK0C;IAE7C;;;;;;;;GAQC,GACD,MAAMO,WAAW,CAACjD;QAChB,MAAMkD,OAAOF,OAAOhD;QACpB,IAAI,CAACkD,MAAM,OAAO3C;QAClB,OAAOpB,kBAAkB+D,QAAQA,OAAO3C;IAC1C;IAEA,MAAM4C,SAAS1B,+BAAAA,YAAaxB,OAAO,CAAC,QAAQ;IAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCC,GACD,MAAMiB,WAAW,CAAClB;QAChB,MAAMoD,WAAW5D,qBAAqBwD,OAAOhD,QAAQ0B;QACrD,IAAI,CAAC0B,YAAY,CAAChE,mBAAmBgE,WAAW,OAAO7C;QACvD,IAAI,CAAC6C,SAASL,UAAU,CAAC,QAAQK,SAASL,UAAU,CAAC,OAAO,OAAOK;QACnE,IAAID,QAAQ,OAAO,GAAGA,SAASC,UAAU;QACzC,sEAAsE;QACtE,yEAAyE;QACzE,oCAAoC;QACpC,MAAMC,SAASL,OAAOhD;QACtB,OAAOqD,UAAU,eAAeC,IAAI,CAACD,UAAUA,SAAS9C;IAC1D;IAEA,MAAMgD,iBAAiB,CAACC,MACtB,CAACA,cAAAA,MAAO,EAAE,EACPC,GAAG,CAAC,CAACC,KAAOC,WAAWD,KACvBZ,MAAM,CAACc,SACPC,IAAI,CAAC;IAEV,MAAMF,aAAa,CAACD;YAGJI;QAFd,MAAMA,OAAO3C,KAAK,CAACuC,GAAG;QACtB,IAAI,CAACI,MAAM,OAAO;QAClB,MAAMC,SAAQD,cAAAA,KAAKC,KAAK,YAAVD,cAAc,CAAC;QAC7B,OAAQA,KAAKE,WAAW;YACtB,KAAK;gBAAgB;oBACnB,MAAMC,aAAa7B,QAAQ2B,MAAMG,eAAe,EAAE;oBAClD,MAAMC,UAAUnC,OAAOC,QAAQ,CAACD,OAAO+B,MAAMI,OAAO,KAChDnC,OAAO+B,MAAMI,OAAO,IACpB;oBACJ,MAAMC,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,kEAAkE;oBAClE,sEAAsE;oBACtE,uEAAuE;oBACvE,sEAAsE;oBACtE,wEAAwE;oBACxE,mEAAmE;oBACnE,+DAA+D;oBAC/D,OAAOxD,IACL,CAAC,wEAAwE,CAAC,GACxE,CAAC,wBAAwB,EAAEqD,WAAW,GAAG,CAAC,GAC1CrD,IACE,CAAC,wEAAwE,CAAC,GACxE2C,eAAeO,KAAK3C,KAAK,IACzB,CAAC,QAAQ,CAAC,EACZ,CAAC,QAAQ,EAAEgD,QAAQ,cAAc,EAAEC,MAAM,CAAC,CAAC,IAE7C,CAAC,QAAQ,CAAC;gBAEhB;YACA,KAAK;gBAAa;wBAOF5D;oBANd,MAAM6D,OAAO7B,IAAIuB,MAAMO,QAAQ;oBAC/B,4DAA4D;oBAC5D,oEAAoE;oBACpE,4DAA4D;oBAC5D,IAAI,CAACD,KAAKE,IAAI,IAAI,OAAO;oBACzBhC,UAAUiC,IAAI,CAACH;oBACf,MAAMI,SAAQjE,6BAAAA,WAAW,CAACuD,MAAMW,OAAO,CAAW,YAApClE,6BAAwCA,WAAW,CAAC,OAAO;oBACzE,MAAMmE,QAAQvC,QAAQ2B,MAAMY,KAAK,EAAE;oBACnC,MAAMP,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,OAAOxD,IACL,CAAC,wBAAwB,EAAEnB,KAAK,CAAC,EAAEgF,MAAM,OAAO,EAAEE,MAAM,YAAY,EAAEP,MAAM,GAAG,CAAC,GAC9E/E,mBAAmBU,gBAAgBsE,OAAO/B,OAAOsC,IAAI,EAAE3E,OAAO,CAAC,OAAO,YACtE,CAAC,MAAM,CAAC,EACV;gBAEJ;YACA,KAAK;YACL,KAAK;gBAAa;oBAChB,MAAM4E,OAAOrD,SAASgB,IAAIuB,MAAMc,IAAI;oBACpC,IAAI,CAACA,KAAKN,IAAI,IAAI,OAAO;oBACzBhC,UAAUiC,IAAI,CAACK,KAAK5E,OAAO,CAAC,YAAY,KAAKsE,IAAI;oBACjD,OAAO3D,IACL,CAAC,wBAAwB,EAAEnB,KAAK,mCAAmC,EAAEoF,KAAK,MAAM,CAAC,EACjF;gBAEJ;YACA,KAAK;gBAAc;wBAIkBd;oBAHnC,MAAMe,MAAM5D,SAAS6C,MAAMe,GAAG;oBAC9B,IAAI,CAACA,KAAK,OAAO;oBACjB,MAAMC,QAAQ/C,OAAO+B,MAAMgB,KAAK,IAAI,IAAI/C,OAAO+B,MAAMgB,KAAK,IAAI;oBAC9D,MAAMC,MAAMjF,gBAAgB0C,QAAOsB,aAAAA,MAAMiB,GAAG,YAATjB,aAAa;oBAChD,MAAMK,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,MAAMa,MACJ,CAAC,UAAU,EAAElF,gBAAgB+E,KAAK,OAAO,EAAEE,IAAI,SAAS,EAAE9C,KAAKC,GAAG,CAAC4C,OAAO,KAAK,EAAE,CAAC,GAClF,CAAC,oEAAoE,CAAC;oBACxE,sEAAsE;oBACtE,4CAA4C;oBAC5C,MAAM7B,OAAOD,SAASc,MAAMb,IAAI;oBAChC,OAAOtC,IACLsC,OACI,CAAC,SAAS,EAAEnD,gBAAgBmD,MAAM,kBAAkB,EAAE+B,IAAI,IAAI,CAAC,GAC/DA,KACJ,CAAC,yBAAyB,EAAEb,MAAM,CAAC,CAAC;gBAExC;YACA,KAAK;gBAAe;wBACAL,iBAQLd,WAASc;oBARtB,MAAMmB,QAAQ1C,KAAIuB,kBAAAA,MAAMO,QAAQ,YAAdP,kBAAkB;oBACpC,sEAAsE;oBACtE,sEAAsE;oBACtE,qEAAqE;oBACrE,oEAAoE;oBACpE,iEAAiE;oBACjE,oEAAoE;oBACpE,kDAAkD;oBAClD,MAAMb,QAAOD,YAAAA,UAASc,cAAAA,MAAMb,IAAI,YAAVa,cAAc,gBAAvBd,YAA+B;oBAC5C,MAAMgB,aAAa7B,QAAQ2B,MAAMG,eAAe,EAAE5B,OAAO6C,IAAI;oBAC7D,MAAMR,QAAQvC,QAAQ2B,MAAMY,KAAK,EAAErC,OAAO4C,KAAK;oBAC/C,MAAMd,QAAQL,MAAMK,KAAK,IAAI;oBAC7B7B,UAAUiC,IAAI,CAAC,GAAGU,MAAM,EAAE,EAAEhC,MAAM;oBAClC,wDAAwD;oBACxD,OAAOtC,IACL,CAAC,SAAS,EAAEb,gBAAgBmD,MAAM,kBAAkB,CAAC,GACnD,CAAC,4DAA4D,EAAEnB,OAAO,GAAG,CAAC,GAC1E,CAAC,iBAAiB,EAAEkC,WAAW,OAAO,EAAEU,MAAM,aAAa,EAAElF,KAAK,CAAC,CAAC,GACpE,CAAC,sDAAsD,CAAC,GACxDM,gBAAgBmF,SAChB,CAAC,IAAI,CAAC,EACR,CAAC,0BAA0B,EAAEd,MAAM,CAAC,CAAC;gBAEzC;YACA,KAAK;gBAAgB;oBACnB,MAAMO,QAAQvC,QAAQ2B,MAAMY,KAAK,EAAE;oBACnC,OAAO/D,IACL,CAAC,iCAAiC,EAAE+D,MAAM,yCAAyC,CAAC,EACpF;gBAEJ;YACA,KAAK;gBAAe;oBAClB,MAAMS,SAASpD,OAAO+B,MAAMqB,MAAM,IAAI,IAAIpD,OAAO+B,MAAMqB,MAAM,IAAI;oBACjE,OAAOxE,IACL,CAAC,mBAAmB,EAAEwE,OAAO,2CAA2C,CAAC;gBAE7E;YACA,KAAK;gBAAgB;wBAKDrB;oBAJlB,MAAMsB,UAAUtB,MAAMuB,SAAS,GAC3B/D,4BAAAA,QAAU,CAACkB,OAAOsB,MAAMuB,SAAS,EAAE,GACnC/E;oBACJ,IAAI,CAAC8E,SAAS,OAAO;oBACrB,MAAMH,QAAQ1C,KAAIuB,qBAAAA,MAAMwB,WAAW,YAAjBxB,qBAAqB;oBACvC,qEAAqE;oBACrE,iEAAiE;oBACjE,mEAAmE;oBACnE,kEAAkE;oBAClE,gEAAgE;oBAChE,MAAMyB,aACJH,QAAQI,GAAG,IAAItG,kBAAkBkG,QAAQI,GAAG,IACxCJ,QAAQI,GAAG,GACXlF;oBACNgC,UAAUiC,IAAI,CACZ,GAAGa,QAAQK,IAAI,GAAGL,QAAQM,UAAU,GAAG,CAAC,GAAG,EAAEN,QAAQM,UAAU,EAAE,GAAG,IAAI,GACrEH,CAAAA,aAAa,CAAC,EAAE,EAAEA,YAAY,GAAG,EAAC;oBAEvC,gEAAgE;oBAChE,qEAAqE;oBACrE,MAAMI,eAAe1E,SAASmE,QAAQQ,QAAQ;oBAC9C,MAAMC,QAAQF,eACV,CAAC,UAAU,EAAE7F,gBAAgB6F,cAAc,OAAO,EAAE7F,gBAAgBsF,QAAQK,IAAI,EAAE,qFAAqF,CAAC,GACxK;oBACJ,MAAMK,SAASP,aACX,CAAC,SAAS,EAAEzF,gBAAgByF,YAAY,6FAA6F,EAAEzD,OAAO,oBAAoB,EAAEO,OAAO6C,IAAI,CAAC,OAAO,EAAE7C,OAAO4C,KAAK,CAAC,aAAa,EAAEzF,KAAK,uDAAuD,EAAEM,gBAAgBmF,OAAO,IAAI,CAAC,GAC/S;oBACJ,OAAOtE,IACL,CAAC,kGAAkG,EAAEnB,KAAK,GAAG,CAAC,GAC5GqG,QACA,CAAC,4DAA4D,EAAE/F,gBAAgBsF,QAAQK,IAAI,EAAE,MAAM,CAAC,GACnGL,CAAAA,QAAQM,UAAU,GACf,CAAC,0DAA0D,EAAE5F,gBAAgBsF,QAAQM,UAAU,EAAE,MAAM,CAAC,GACxG,EAAC,IACLI,SACA,CAAC,MAAM,CAAC,EACV;gBAEJ;YACA;gBAAS;oBACP,mEAAmE;oBACnE,kDAAkD;oBAClD,OAAOxC,eAAeO,KAAK3C,KAAK;gBAClC;QACF;IACF;IAEA,MAAMR,OAAOgD,WAAWvC,WAAWmC,gBAAepC,gBAAAA,KAAK,CAACC,OAAO,qBAAbD,cAAeA,KAAK;IACtE,MAAM6E,gBAAgB1E,YAClB,CAAC,qEAAqE,CAAC,GACvEvB,gBAAgByC,IAAIlB,cACpB,CAAC,MAAM,CAAC,GACR;IAEJ,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,kEAAkE;IAClE,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM2E,aAAY/E,YAAAA,SAASuB,OAAOd,uBAAAA,eAAgB,IAAI4C,IAAI,eAAxCrD,YAA+C;IACjE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,8DAA8D;IAC9D,MAAMgF,uBAAe/F,yBAAAA,KAAO,CAAC,oBAAoB,mBAAI;IACrD,MAAMgG,gBAAgBF,YAClBrF,IACE,CAAC,UAAU,EAAEb,gBAAgBkG,WAAW,OAAO,EAAElG,gBAAgBmG,cAAc,EAAE,CAAC,GAChF,CAAC,gFAAgF,CAAC,EACpF,4CAEF;IAEJ;;;;;;;;;;GAUC,GACD,MAAME,qBAAqB,CAACC;YACGA;QAA7B,MAAMC,OAAOpF,SAASuB,QAAO4D,kBAAAA,OAAOE,OAAO,YAAdF,kBAAkB,IAAI9B,IAAI;QACvD,MAAMmB,OAAOlD,IAAI6D,OAAOG,OAAO,EAAEjC,IAAI;QACrC,MAAMrB,OAAOD,SAASoD,OAAOnD,IAAI;QACjC,MAAM0B,OAAO,CAAC6B,OAAehC,QAC3BvB,OACI,CAAC,SAAS,EAAEnD,gBAAgBmD,MAAM,yBAAyB,EAAEuB,MAAM,EAAE,EAAEgC,MAAM,IAAI,CAAC,GAClFA;QACN,IAAIC;QACJ,IAAIJ,MAAM;YACRI,OAAO9B,KACL,CAAC,UAAU,EAAE7E,gBAAgBuG,MAAM,OAAO,EAAEvG,gBAAgB2F,MAAM,cAAc,CAAC,GAC/E,CAAC,uGAAuG,CAAC,EAC3G;QAEJ,OAAO,IAAIA,MAAM;YACfgB,OACE,CAAC,wBAAwB,EAAEjH,KAAK,sDAAsD,EAAEC,eAAeC,GAAG,CAAC,qBAAqB,CAAC,GACjIiF,KAAK7E,gBAAgB2F,OAAO,CAAC,MAAM,EAAEhG,eAAeC,GAAG,CAAC,sBAAsB,CAAC,IAC/E,CAAC,MAAM,CAAC;QACZ,OAAO;YACL,OAAO;QACT;QACA,OAAOiB,IACL8F,MACA,CAAC,uDAAuD,EAAEhH,eAAeE,IAAI,CAAC,CAAC,CAAC;IAEpF;IAEA,MAAM+G,aAAa/E,CAAAA,0BAAAA,OAAQyE,MAAM,IAC7BD,mBAAmBxE,OAAOyE,MAAM,IAChCF;IAEJ;;;;;;;;GAQC,GACD,MAAMS,qBAAqB,CAACC;YAQDA,iBACIA;QAR7B,MAAMC,YAAsB,EAAE;QAC9B,MAAMC,YAAsB,EAAE;QAC9B,MAAMC,SAASxE,IAAIqE,OAAOG,MAAM,EAAEzC,IAAI;QACtC,IAAIyC,QAAQ;YACVF,UAAUtC,IAAI,CAACzE,gBAAgBiH;YAC/BD,UAAUvC,IAAI,CAACwC;QACjB;QACA,MAAMC,eAAezE,KAAIqE,kBAAAA,OAAOK,OAAO,qBAAdL,gBAAgB3B,KAAK,EAAEX,IAAI;QACpD,MAAM4C,cAAclE,UAAS4D,mBAAAA,OAAOK,OAAO,qBAAdL,iBAAgB3D,IAAI;QACjD,IAAI+D,gBAAgBE,aAAa;YAC/BL,UAAUtC,IAAI,CACZ,CAAC,SAAS,EAAEzE,gBAAgBoH,aAAa,kBAAkB,CAAC,GAC1D,CAAC,aAAa,EAAEzH,eAAeI,OAAO,CAAC,6BAA6B,EAAEC,gBAAgBkH,cAAc,IAAI,CAAC;YAE7G,gEAAgE;YAChE,oEAAoE;YACpE,qDAAqD;YACrD,MAAMG,OAAO,YAAY9D,IAAI,CAAC6D,eAC1BA,YAAYE,KAAK,CAAC,UAAUC,MAAM,EAAEC,KAAK,CAAC,IAAI,CAAC,EAAE,GACjDJ;YACJJ,UAAUvC,IAAI,CAACyC,iBAAiBG,OAAOA,OAAO,GAAGH,aAAa,EAAE,EAAEG,MAAM;QAC1E;QACA,MAAMI,QAAQhF,IAAIqE,OAAOW,KAAK,EAAEjD,IAAI;QACpC,IAAIiD,OAAO;YACTV,UAAUtC,IAAI,CAACzE,gBAAgByH;YAC/BT,UAAUvC,IAAI,CAACgD;QACjB;QACA,IAAI,CAACV,UAAUQ,MAAM,EAAE,OAAO;QAC9B/E,UAAUiC,IAAI,CAACuC,UAAUlD,IAAI,CAAC;QAC9B,OAAOjD,IACLkG,UACGrD,GAAG,CACF,CAACgE,MAAMC,QACL,CAAC,wBAAwB,EAAEjI,KAAK,sDAAsD,EAAEC,eAAeI,OAAO,CAAC,CAAC,CAAC,GACjH,GAAG4H,QAAQ,oBAAoB,GAAG,EAAE,EAAED,KAAKxH,OAAO,CAAC,OAAO,UAAU,MAAM,CAAC,EAE9E4D,IAAI,CAAC,KACR,CAAC,gDAAgD,EAAEnE,eAAeG,IAAI,CAAC,CAAC,CAAC;IAE7E;IAEA,MAAM8H,aAAa/F,CAAAA,0BAAAA,OAAQiF,MAAM,IAAGD,mBAAmBhF,OAAOiF,MAAM,IAAI;IAExE,MAAMhC,OACJ,CAAC,mDAAmD,CAAC,GACrD,CAAC,sEAAsE,CAAC,GACxE,CAAC,OAAO,EAAE9E,gBAAgByC,IAAInB,UAAU,eAAe,CAAC,GACxD,CAAC,2DAA2D,CAAC,GAC7D2E,gBACA,CAAC,0GAA0G,CAAC,GAC5GpF,IACE,CAAC,wIAAwI,CAAC,GACxI+F,aACAhG,OACAgH,aACA,CAAC,QAAQ,CAAC,EACZ,uBAEF,CAAC,sBAAsB,CAAC;IAE1B,OAAO;QAAE9C;QAAMR,MAAM9B,UAAUsB,IAAI,CAAC;IAAQ;AAC9C"}
+{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/email-render.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Email render pipeline (AGL-348): converts a designed email screen's\n * node map into email-client-compatible HTML (600px table layout,\n * inlined styles, bulletproof buttons) plus a plain-text alternative.\n * Pure — no I/O; callers resolve products/merge data first.\n *\n * Merge tokens ({{contact.firstName}}, {{unsubscribeUrl}}, …) substitute\n * from the provided map; unknown tokens are left in place so a missing\n * field is visible in test sends instead of silently blank.\n *\n * ## The safety contract, in one place\n *\n * Everything this emits is author-controlled, and it is emitted into mail\n * that has left the building. Three rules, all applied here rather than\n * left to a caller:\n *\n * 1. Block HTML goes through {@link EmailRenderOptions.sanitize}, which is\n *    REQUIRED. There is no identity default to fall back into.\n * 2. Every URL is scheme-checked against `@aglyn/shared-util-http` before it\n *    is escaped into an attribute — escaping stops an attribute breakout and\n *    says nothing at all about `javascript:`.\n * 3. Merge substitution into a URL cannot draw from the `contact.` namespace,\n *    so no template can route a recipient's own address into a query string.\n *\n * Mail clients strip most of this themselves, so none of the three is the\n * last line of defense in an inbox. They are the only line the moment one of\n * these documents renders outside one — a \"view this email in your browser\"\n * page is the ordinary way that happens.\n */\n\nimport {\n  hasSafeLinkScheme,\n  hasSafeMediaScheme,\n} from '@aglyn/shared-util-http/safe-url-scheme'\n\nimport { linkifyEscapedText } from './email-linkify'\nimport {\n  emailAccent,\n  PLATFORM_EMAIL_PALETTE,\n  resolveEmailColor,\n  type EmailPalette,\n} from './email-palette'\nimport { resolveEmailMediaSrc } from './email-media-src'\n\nexport interface EmailRenderProduct {\n  name: string\n  priceLabel?: string\n  imageUrl?: string\n  url?: string\n}\n\nexport interface EmailRenderNode {\n  componentId?: string\n  props?: Record<string, any>\n  nodes?: string[]\n}\n\nexport interface EmailRenderOptions {\n  /** Flat node map (screen version `nodes`). */\n  nodes: Record<string, EmailRenderNode | undefined>\n  /** Root node id (defaults to 'root'). */\n  rootId?: string\n  subject?: string\n  /** Hidden preview line shown next to the subject in inboxes. */\n  preheader?: string\n  /** Merge values keyed by token body, e.g. 'contact.firstName'. */\n  merge?: Record<string, string>\n  /** Product data by id for emailProduct blocks. */\n  products?: Record<string, EmailRenderProduct | undefined>\n  /**\n   * The HTML policy applied to every `emailRichtext` / `emailHtml` block.\n   *\n   * REQUIRED, and required is the point. A policy a caller may omit is a\n   * policy that gets omitted, and an omitted one here is not a rendering\n   * bug: the console renders these same nodes through `sanitizeCustomHtml`\n   * before an author ever sees them, so an unpoliced mail render means two\n   * renderers of one document disagreeing about safety, with the unsafe one\n   * being the one that sends.\n   *\n   * This module cannot pick the policy for itself — it is `scope:shared` and\n   * the sanitizer is aglyn-scoped, which nx forbids it to import — so the\n   * choice belongs to the caller, and the type is what makes the caller make\n   * it. Every send path passes `sanitizeAuthorHtml`, which is exactly what\n   * `sanitizeCustomHtml` delegates to, so the mailed copy and the previewed\n   * copy are the same function of the same string.\n   */\n  sanitize: (html: string) => string\n  /**\n   * Absolute origin serving this email's media, e.g. `https://acme.com`\n   * (AGL-1224).\n   *\n   * An image an author picked with \"Browse media\" is stored as a\n   * `media:{scope}/{mediaId}` reference, which resolves to the SITE-RELATIVE\n   * CDN path `/api/media/cdn/…`. A browser has a page to resolve that\n   * against; an inbox has nothing. Without this, every picked image is a\n   * broken-image box in the delivered mail.\n   *\n   * It is an input rather than a lookup because this module is pure, and\n   * because the CDN route is mounted in BOTH the console and the tenant app\n   * — which origin is correct depends on whose email this is.\n   */\n  mediaOrigin?: string\n  /**\n   * Host doc id of the site sending, so an `org:`-scoped reference is\n   * host-qualified. The CDN is unauthenticated and decides from the URL\n   * alone, so an org asset restricted to particular sites is only served\n   * through the qualified form.\n   */\n  mediaHostId?: string\n  /**\n   * Absolute URL of the sender's EMAIL logo, prepended as a centred row at\n   * the top of the 600px table (AGL-2139).\n   *\n   * `emailLogoUrl` was a first-class field of `OrgBrandingProfile`, resolved,\n   * collected in the branding editor, https-validated and persisted — and read\n   * at ZERO render sites. An agency admin on the tier that costs the most\n   * filled it in, the form saved, the value round-tripped, and it appeared in\n   * no email ever. This is the consumer that makes it a live capability\n   * rather than a stored string.\n   *\n   * Absent or blank emits NOTHING — not an empty row, not a spacer. An email\n   * with a gap where a logo should be reads as broken; one without a logo\n   * reads as plain, which is the correct appearance for an org that has not\n   * set one.\n   *\n   * Ignored when {@link EmailRenderOptions.chrome} carries a header: that\n   * header is the logo row, and a caller that has one passes the org's logo\n   * through it, so a message never opens with two.\n   */\n  brandLogoUrl?: string\n  /**\n   * The sender's header and footer, drawn around the body (AGL-3322). See\n   * {@link EmailChrome}. Absent draws neither.\n   */\n  chrome?: EmailChrome\n  /**\n   * The theme the email is sent under (AGL-3370): the console brand for the\n   * platform's own mail, a white-label org's color over it, or the site's\n   * theme for a site's mail. See {@link buildEmailPalette}.\n   *\n   * It does two things. A color an author picked in the Besigner is stored as\n   * a palette token (`primary.main`), which a mail client cannot resolve, so\n   * every color prop is resolved against this before it is written. And\n   * what nobody picked (a button's fill and label, a link) takes the theme's\n   * accent rather than a color of the renderer's own. Absent keeps the\n   * renderer's neutral defaults and drops an unresolvable token.\n   */\n  palette?: EmailPalette\n  /**\n   * A button's corner radius in px: the theme's `shape.borderRadius`, which\n   * the Besigner canvas draws the button with. Absent is MUI's default, 4.\n   */\n  buttonRadius?: number\n  /**\n   * How a button's label is set: the theme's own button type — its case,\n   * weight and letter spacing — so a button reads like the buttons on the\n   * console or the site it comes from (AGL-3897). Absent, mixed case at 600.\n   */\n  buttonText?: EmailButtonText\n}\n\n/** A button label's type, from a theme's `typography.button`. */\nexport interface EmailButtonText {\n  transform?: 'uppercase' | 'none' | 'capitalize' | 'lowercase'\n  weight?: number\n  letterSpacing?: string\n}\n\n/**\n * The row above the body that says who sent the mail.\n *\n * `logoAlt` is required because it does two jobs. It is the logo's `alt`,\n * which is what most inboxes show, since they block images by default. And\n * it is the header itself when there is no logo to draw — none was given, or\n * the one given cannot be fetched from an inbox — so the sender is named in\n * bold text rather than by a broken-image box.\n */\nexport interface EmailChromeHeader {\n  /** The logo. Resolved and scheme-checked like every other image here. */\n  logoUrl?: string\n  /** The sender's name: the logo's alt text, or the header when no logo draws. */\n  logoAlt: string\n  /** Where the logo or name links. A refused scheme drops the link, not the header. */\n  href?: string\n}\n\n/**\n * The rows under the body, in the order they draw. Each is optional, and a\n * footer with none of them draws nothing.\n */\nexport interface EmailChromeFooter {\n  /** Why the recipient is getting this mail. */\n  reason?: string\n  /** Where to get help. Drawn as a link; dropped whole when the href is refused. */\n  support?: { label: string; href: string }\n  /** Who sent it, and from where: a copyright and postal line. */\n  legal?: string\n}\n\n/**\n * A sender's header and footer, drawn by the renderer rather than placed by a\n * designer (AGL-3322).\n *\n * For mail whose body carries no header or footer of its own: a system\n * email's built-in copy, or a design sent under a brand whose own blocks it\n * may not carry. The caller decides WHICH brand; this only draws.\n *\n * Every string goes through the same merge substitution as the body, so\n * `{{org.name}}` in a footer line reads as the organization it names, and is\n * escaped like body text. Every URL goes through the same scheme checks as a\n * body link or image. The footer lines are appended to the plain-text part\n * too, the support link as its bare address, because a reader of that part is\n * owed the same reason and the same way to get help.\n */\nexport interface EmailChrome {\n  header?: EmailChromeHeader\n  footer?: EmailChromeFooter\n}\n\n/**\n * The theme an email is drawn in (AGL-3370): its palette, which resolves\n * every color an author picked and colors what they did not, and its button\n * radius. Spread into {@link EmailRenderOptions}.\n */\nexport type EmailTheme = Pick<EmailRenderOptions, 'palette' | 'buttonRadius' | 'buttonText'>\n\nexport interface RenderedEmail {\n  html: string\n  text: string\n}\n\nconst FONT = 'Helvetica, Arial, sans-serif'\n\n/**\n * The colours the chrome is drawn in (AGL-3322), named once.\n *\n * Literal because this is email HTML: mail clients strip `<style>` and read no\n * CSS variables, so no theme token reaches the wire. They are the values\n * already in the mail, not new ones — the ink and card of a default body\n * block, and the band and caption grey of the email footer block the\n * platform's own mail wears — so the chrome and the body it frames agree.\n */\nconst CHROME_PALETTE = {\n  /** The sender's name in the header: body text's ink. */\n  ink: '#1a1a1a',\n  /** The header band: a default section's card. */\n  card: '#ffffff',\n  /** The footer band. */\n  band: '#F8F9FA',\n  /** Footer lines and the support link. */\n  caption: '#757575',\n} as const\n\nexport function escapeEmailHtml(value: string): string {\n  return value\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n}\n\n/** Substitutes {{token}} occurrences; unknown tokens stay visible. */\nexport function substituteMergeTokens(\n  value: string,\n  merge: Record<string, string> | undefined,\n): string {\n  return value.replace(/\\{\\{\\s*([\\w.]+)\\s*\\}\\}/g, (match, token: string) => {\n    const replacement = merge?.[token]\n    return replacement !== undefined ? replacement : match\n  })\n}\n\nconst TEXT_STYLES: Record<string, string> = {\n  heading: `font-size:28px;font-weight:700;line-height:1.25`,\n  subheading: `font-size:20px;font-weight:600;line-height:1.3`,\n  body: `font-size:15px;font-weight:400;line-height:1.55`,\n  caption: `font-size:12px;font-weight:400;line-height:1.5`,\n  // A small label above a heading saying what the email is about: the site,\n  // the workspace (AGL-3897).\n  eyebrow: `font-size:12px;font-weight:700;line-height:1.4;letter-spacing:0.06em;text-transform:uppercase`,\n  // The rows of a details panel; see `detailsHtml`.\n  details: `font-size:14px;font-weight:400;line-height:1.45`,\n  // A list of next steps or help, each a link; see `linksHtml`.\n  links: `font-size:15px;font-weight:600;line-height:1.4`,\n}\n\n/** The space around each text style's row: a heading needs room below it, an eyebrow sits tight above one. */\nconst TEXT_PADDING: Record<string, string> = {\n  heading: 'padding:4px 0 10px;',\n  subheading: 'padding:14px 0 4px;',\n  body: 'padding:5px 0;',\n  caption: 'padding:5px 0;',\n  eyebrow: 'padding:0 0 2px;',\n  details: 'padding:10px 0;',\n  links: 'padding:8px 0;',\n}\n\n/** A details value longer than this reads as a paragraph under its label rather than beside it. */\nconst DETAIL_INLINE_MAX = 48\n\n/** The styles whose words are secondary, drawn in the theme's muted text color unless a color is set. */\nconst MUTED_TEXT_STYLES: ReadonlySet<string> = new Set(['caption'])\n\n/**\n * One line of a details panel split into its label and its value: at the\n * first \": \" (\"Device: Chrome on macOS\"), else at the last \" — \" (\"House\n * Blend × 2 — $24.00\"). A line with neither is drawn across both columns.\n */\nexport function splitEmailDetailLine(line: string): { label: string; value: string } | null {\n  const colon = line.indexOf(': ')\n  if (colon > 0 && colon <= 48) return { label: line.slice(0, colon).trim(), value: line.slice(colon + 2).trim() }\n  const dash = line.lastIndexOf(' — ')\n  if (dash > 0) return { label: line.slice(0, dash).trim(), value: line.slice(dash + 3).trim() }\n  return null\n}\n\n/** One full-width table row wrapping arbitrary cell HTML. */\nconst row = (cellHtml: string, cellStyle = ''): string =>\n  `<tr><td style=\"${cellStyle}\">${cellHtml}</td></tr>`\n\n/**\n * The id the besigner roots every stored node map at — `CANVAS_ROOT_ELEMENT_ID`\n * in `@aglyn/aglyn`. `renderEmailHtml` still defaults `rootId` to `'root'` for\n * ad-hoc callers, but anything rendering a real besigner document MUST pass\n * this: rendering a besigner map as `'root'` finds no root and emits nothing\n * (AGL-765). Kept here so server code need not import the heavy `@aglyn/aglyn`\n * barrel; a drift guard in the console specs asserts the two stay equal.\n */\nexport const EMAIL_NODE_ROOT_ID = '_@_'\n\nexport function renderEmailHtml(options: EmailRenderOptions): RenderedEmail {\n  const {\n    nodes,\n    rootId = 'root',\n    subject = '',\n    preheader = '',\n    merge,\n    products,\n    sanitize,\n    mediaOrigin,\n    mediaHostId,\n    brandLogoUrl,\n    chrome,\n    palette,\n    buttonRadius,\n    buttonText,\n  } = options\n  const radius =\n    Number.isFinite(buttonRadius) && Number(buttonRadius) >= 0\n      ? Math.min(Number(buttonRadius), 48)\n      : 4\n  const labelWeight =\n    Number.isFinite(buttonText?.weight) && Number(buttonText?.weight) >= 100 ? Number(buttonText?.weight) : 600\n  const labelCase =\n    (buttonText?.transform && /^(uppercase|none|capitalize|lowercase)$/.test(buttonText.transform)\n      ? `text-transform:${buttonText.transform};`\n      : '') +\n    (buttonText?.letterSpacing && /^-?[\\d.]+(em|px|rem)$/.test(buttonText.letterSpacing)\n      ? `letter-spacing:${buttonText.letterSpacing};`\n      : '')\n\n  /**\n   * A stored color, resolved: a palette token against the theme, a literal\n   * as written, anything else to the fallback. The only way a color prop\n   * reaches the markup, so nothing unresolvable or unsafe is ever written\n   * into a style attribute.\n   */\n  const colorOf = (value: unknown, fallback: string): string =>\n    resolveEmailColor(value, palette) ?? fallback\n\n  /** A theme token's color, from the email's palette, else the platform's, which resolves every one. */\n  const themeColor = (token: string): string =>\n    resolveEmailColor(token, palette) ?? resolveEmailColor(token, PLATFORM_EMAIL_PALETTE) ?? 'inherit'\n\n  /**\n   * A list of links (AGL-3897): each \"Label — https://…\" line a row whose\n   * label is the link, in the theme's link color, with an arrow after it and\n   * a hairline between rows — next steps, help pages. A line with no address\n   * is drawn as plain text; an address the link check refuses drops the link\n   * and keeps the words.\n   */\n  const linksHtml = (text: string, style: string): string => {\n    const rule = themeColor('divider')\n    const lines = text.split('\\n').map((line) => line.trim()).filter(Boolean)\n    const rows = lines.map((line, index) => {\n      const split = splitEmailDetailLine(line)\n      const href = split ? linkHref(split.value) : undefined\n      const label = escapeEmailHtml(split ? split.label : line)\n      const border = index > 0 ? `border-top:1px solid ${rule};` : ''\n      const inner = href\n        ? `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\" style=\"color:${accent.link};text-decoration:none;\">${label}&nbsp;&rarr;</a>`\n        : `<span style=\"color:${themeColor('text.primary')};\">${label}</span>`\n      return `<tr><td style=\"font-family:${FONT};${style};padding:10px 0;${border}\">${inner}</td></tr>`\n    })\n    return `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\">${rows.join('')}</table>`\n  }\n\n  /**\n   * A details panel (AGL-3897): each line a row, its label muted on the left\n   * and its value on the right, on a tinted ground with a hairline between\n   * rows. A row whose label begins \"Total\" is the sum of the rows above it,\n   * so it is drawn bold with a rule over it. A line that empties out — a\n   * token the send left blank — draws no row.\n   */\n  const detailsHtml = (text: string, style: string, valueColor: string): string => {\n    const muted = themeColor('text.secondary')\n    const rule = themeColor('divider')\n    // A line whose value a token left blank (\"Location:\") is not drawn.\n    const lines = text\n      .split('\\n')\n      .map((line) => line.trim())\n      .filter((line) => line && !line.endsWith(':'))\n    const cell = (value: string) => linkifyEscapedText(escapeEmailHtml(value), accent.link).replace(/\\n/g, '<br />')\n    // A line with no label of its own continues the value above it: a form\n    // answer that ran over two lines is one row, not two.\n    const entries: Array<{ label: string | null; value: string }> = []\n    for (const line of lines) {\n      const split = splitEmailDetailLine(line)\n      const last = entries[entries.length - 1]\n      if (!split && last?.label) last.value += `\\n${line}`\n      else entries.push(split ? { label: split.label, value: split.value } : { label: null, value: line })\n    }\n    const rows = entries.map((entry, index) => {\n      const total = Boolean(entry.label && /^total\\b/i.test(entry.label))\n      const border = index > 0 ? `border-top:1px solid ${rule};` : ''\n      const base = `font-family:${FONT};${style};padding:9px 0;vertical-align:top;${border}`\n      if (!entry.label) {\n        return `<tr><td colspan=\"2\" style=\"${base}color:${valueColor};\">${cell(entry.value)}</td></tr>`\n      }\n      // A long answer — a message, a note — reads as a paragraph under its\n      // label, not as a bold run squeezed against the right edge.\n      if (!total && (entry.value.length > DETAIL_INLINE_MAX || entry.value.includes('\\n'))) {\n        return (\n          `<tr><td colspan=\"2\" style=\"${base}\">` +\n          `<div style=\"color:${muted};padding-bottom:2px;\">${cell(entry.label)}</div>` +\n          `<div style=\"color:${valueColor};\">${cell(entry.value)}</div>` +\n          `</td></tr>`\n        )\n      }\n      return (\n        `<tr>` +\n        `<td style=\"${base}color:${total ? valueColor : muted};${total ? 'font-weight:700;' : ''}padding-right:16px;\">${cell(entry.label)}</td>` +\n        `<td style=\"${base}color:${valueColor};font-weight:${total ? 700 : 600};text-align:right;word-break:break-word;\">${cell(entry.value)}</td>` +\n        `</tr>`\n      )\n    })\n    return (\n      `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" ` +\n      // On the theme's primary tint, the brand's own light ground.\n      `style=\"background-color:${resolveEmailColor('tint.primary', palette) ?? themeColor('grey.50')};border-radius:8px;\">` +\n      `<tr><td style=\"padding:4px 16px;\">` +\n      `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\">${rows.join('')}</table>` +\n      `</td></tr></table>`\n    )\n  }\n  /**\n   * The theme's accent, for what the author left unset: the fill, its label,\n   * and the accent AS TEXT (`primary.dark`, where the fill itself may be too\n   * pale to read as a link). The platform's stands in for a missing palette.\n   */\n  const accent = emailAccent(palette)\n\n  const textParts: string[] = []\n  const sub = (value: unknown): string =>\n    substituteMergeTokens(String(value ?? ''), merge)\n\n  /**\n   * The merge map as it applies inside a URL: everything except the\n   * `contact.` namespace.\n   *\n   * That namespace is the recipient — `contact.email`, `contact.name`,\n   * `contact.firstName` are what campaign-send puts in the map. Substituting\n   * them into an `href` or a `src` is how a template like\n   * `https://example.test/?e={{contact.email}}` turns every send into the\n   * recipient's own address on somebody's query string, and putting personal\n   * data in a URL is a line this codebase does not cross. The refusal has to\n   * live here because it is the SUBSTITUTION that creates the value: no\n   * scheme check and no sanitizer can see the address, since the template\n   * the author wrote and the editor reviewed contains only the token.\n   *\n   * Nothing else narrows: `{{unsubscribeUrl}}` and `{{site.url}}` ARE URLs\n   * and are the reason a token appears in this position at all.\n   *\n   * A refused token is left standing rather than blanked, which is this\n   * module's existing convention for a token it will not fill — a test send\n   * shows `?e={{contact.email}}` in the link, which names the problem to the\n   * author instead of silently shipping a subtly different URL.\n   */\n  const urlMerge = merge\n    ? Object.fromEntries(\n        Object.entries(merge).filter(\n          ([token]) => !token.startsWith('contact.'),\n        ),\n      )\n    : undefined\n\n  /** {@link sub} for a value that lands in a URL — see {@link urlMerge}. */\n  const subUrl = (value: unknown): string =>\n    substituteMergeTokens(String(value ?? ''), urlMerge)\n\n  /**\n   * A link target safe to emit, or undefined.\n   *\n   * Escaping the value into the attribute stops a breakout and says nothing\n   * about the scheme, so `escapeEmailHtml` on its own passes a stored\n   * `javascript:` or `data:` href through verbatim. The check runs on the\n   * SUBSTITUTED string, because a merge value is part of the final URL and a\n   * template that reads clean can resolve to one that does not.\n   */\n  const linkHref = (value: unknown): string | undefined => {\n    const href = subUrl(value)\n    if (!href) return undefined\n    return hasSafeLinkScheme(href) ? href : undefined\n  }\n\n  const origin = mediaOrigin?.replace(/\\/+$/, '')\n\n  /**\n   * A stored image value turned into something an inbox can actually fetch,\n   * or undefined (AGL-1224).\n   *\n   * `resolveEmailMediaSrc` handles the three stored generations — a `media:`\n   * reference, the AGL-175 relative CDN path, and a plain absolute URL an\n   * author typed — but the first two come back site-relative, which is the\n   * whole bug: only a browser has a page to resolve them against.\n   *\n   * With no origin to absolutize against, the image is DROPPED rather than\n   * emitted relative. Both are a missing picture; a dropped one leaves a gap,\n   * while `src=\"/api/media/cdn/…\"` renders as a broken-image box, which reads\n   * to a recipient as a broken email rather than a plain one.\n   *\n   * ⚠️ This comment used to claim \"neither send path relies on this — both\n   * supply an origin\", and treated reaching the drop as hypothetical. It was\n   * wrong, and it was wrong in the direction that hides the bug: campaign-send\n   * passed no `mediaOrigin`/`mediaHostId` at all, so every author-picked image\n   * was silently dropped from every marketing campaign until AGL-1394. The\n   * quiet failure IS still the right one for a caller that genuinely has no\n   * origin — but \"no caller reaches this\" is a claim about the whole repo, and\n   * it decays the moment someone adds a third send path. Verify it before\n   * relying on it; do not restore a count here.\n   *\n   * A protocol-relative `//host/x.png` is passed through untouched: it is\n   * already absolute enough to name a host, and prefixing an origin would\n   * corrupt it.\n   *\n   * The scheme is checked on the way out. `resolveEmailMediaSrc` recognizes\n   * the two stored reference forms and passes anything else through as an\n   * author-typed URL, so it is this check and nothing else that stands\n   * between what an author types and the `src` attribute. A refusal drops\n   * the image on the same reasoning as everything else here that cannot be\n   * made fetchable: a gap reads as a plain email, and a `src` we would not\n   * stand behind is not made safer by shipping it.\n   */\n  const imageSrc = (value: unknown): string | undefined => {\n    const resolved = resolveEmailMediaSrc(subUrl(value), mediaHostId)\n    if (!resolved || !hasSafeMediaScheme(resolved)) return undefined\n    if (!resolved.startsWith('/') || resolved.startsWith('//')) return resolved\n    if (origin) return `${origin}${resolved}`\n    // A Storage download URL resolves to the CDN path (AGL-3506). With no\n    // origin to send it from, the absolute URL it already was still fetches,\n    // which beats dropping the picture.\n    const stored = subUrl(value)\n    return stored && /^https:\\/\\//i.test(stored) ? stored : undefined\n  }\n\n  const renderChildren = (ids: string[] | undefined): string =>\n    (ids ?? [])\n      .map((id) => renderNode(id))\n      .filter(Boolean)\n      .join('')\n\n  const renderNode = (id: string): string => {\n    const node = nodes[id]\n    if (!node) return ''\n    const props = node.props ?? {}\n    switch (node.componentId) {\n      case 'emailSection': {\n        const background = colorOf(props.backgroundColor, '#ffffff')\n        const padding = Number.isFinite(Number(props.padding))\n          ? Number(props.padding)\n          : 24\n        const align = props.align || 'left'\n        // A ROW, like every other block, with the band's table inside its\n        // cell. Whatever encloses a section is a table — the 600px column, or\n        // another section's inner table — and a `<table>` placed straight into\n        // a table's rows is not a child an HTML parser keeps there: it closes\n        // the enclosing table and lands after it. Emitted bare, a section would\n        // draw outside the column, as wide as the viewport rather than the\n        // 600px the editor shows, and take every row after it out too.\n        return row(\n          `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" ` +\n            `style=\"background-color:${background};\">` +\n            row(\n              `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\">` +\n                renderChildren(node.nodes) +\n                `</table>`,\n              `padding:${padding}px;text-align:${align};`,\n            ) +\n            `</table>`,\n        )\n      }\n      case 'emailText': {\n        const merged = sub(props.children)\n        // An eyebrow is a few parts joined by \" · \"; one a token left empty\n        // (\"{{host.businessName}} · Order #1042\" on a site with no name) loses\n        // its separator rather than starting with one.\n        const text =\n          props.variant === 'eyebrow'\n            ? merged.replace(/^(\\s*·\\s*)+|(\\s*·\\s*)+$/g, '').replace(/(\\s*·\\s*){2,}/g, ' · ')\n            : merged\n        // A block whose copy is only a token the send left empty (a\n        // notification with no detail line, AGL-3367) draws nothing, rather\n        // than an empty row and a blank paragraph in the text part.\n        if (!text.trim()) return ''\n        textParts.push(text)\n        const variant = TEXT_STYLES[props.variant as string] ? (props.variant as string) : 'body'\n        const style = TEXT_STYLES[variant]\n        // Unpicked, secondary words take the theme's muted text, and an\n        // eyebrow its brand color in the shade that reads as text.\n        const color = props.color\n          ? colorOf(props.color, '#1a1a1a')\n          : variant === 'eyebrow'\n            ? themeColor('primary.dark')\n            : MUTED_TEXT_STYLES.has(variant)\n              ? themeColor('text.secondary')\n              : '#1a1a1a'\n        const align = props.align || 'left'\n        if (variant === 'links') {\n          return row(linksHtml(text, style), TEXT_PADDING['links'])\n        }\n        if (variant === 'details') {\n          return row(detailsHtml(text, style, props.color ? color : themeColor('text.primary')), TEXT_PADDING['details'])\n        }\n        return row(\n          `<div style=\"font-family:${FONT};${style};color:${color};text-align:${align};\">` +\n            linkifyEscapedText(escapeEmailHtml(text), accent.link).replace(/\\n/g, '<br />') +\n            `</div>`,\n          TEXT_PADDING[variant] ?? TEXT_PADDING['body'],\n        )\n      }\n      case 'emailRichtext':\n      case 'emailHtml': {\n        const html = sanitize(sub(props.html))\n        if (!html.trim()) return ''\n        textParts.push(html.replace(/<[^>]+>/g, ' ').trim())\n        return row(\n          `<div style=\"font-family:${FONT};font-size:15px;line-height:1.55;\">${html}</div>`,\n          'padding:4px 0;',\n        )\n      }\n      case 'emailImage': {\n        const src = imageSrc(props.src)\n        if (!src) return ''\n        const width = Number(props.width) > 0 ? Number(props.width) : 600\n        const alt = escapeEmailHtml(String(props.alt ?? ''))\n        const align = props.align || 'center'\n        const img =\n          `<img src=\"${escapeEmailHtml(src)}\" alt=\"${alt}\" width=\"${Math.min(width, 600)}\" ` +\n          `style=\"display:inline-block;max-width:100%;height:auto;border:0;\" />`\n        // A refused href drops the WRAPPER, not the picture: the image is the\n        // content and the link is decoration on it.\n        const href = linkHref(props.href)\n        return row(\n          href\n            ? `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\">${img}</a>`\n            : img,\n          `padding:8px 0;text-align:${align};`,\n        )\n      }\n      case 'emailButton': {\n        // A button written as merge tokens that the send left empty is one\n        // this email has nothing to point at (an alert about no one item),\n        // so it is left out rather than drawn going nowhere.\n        const tokenOnly = (value: unknown): boolean =>\n          /\\{\\{[^}]+\\}\\}/.test(String(value ?? '')) && !sub(value).trim()\n        if (tokenOnly(props.href) || tokenOnly(props.children)) return ''\n        const label = sub(props.children ?? 'Call to action')\n        // A refused href falls back to the placeholder the empty case already\n        // uses, so the button keeps its place in the layout and goes nowhere.\n        // Dropping the row instead would take the author's copy with it, and\n        // an inert button reads as an unfinished email rather than a broken\n        // one. The plain-text alternative gets the same value the anchor\n        // does — a text/plain body is inert, but it is still delivered mail\n        // and a refused URL does not belong in it either.\n        const href = linkHref(props.href ?? '#') ?? '#'\n        const background = colorOf(props.backgroundColor, accent.fill)\n        const color = colorOf(props.color, accent.label)\n        const align = props.align || 'center'\n        textParts.push(`${label}: ${href}`)\n        // Bulletproof-ish button: padded anchor, table-aligned.\n        return row(\n          `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\" ` +\n            `style=\"display:inline-block;padding:12px 28px;border-radius:${radius}px;` +\n            `background-color:${background};color:${color};font-family:${FONT};` +\n            `font-size:15px;font-weight:${labelWeight};text-decoration:none;${labelCase}\">` +\n            escapeEmailHtml(label) +\n            `</a>`,\n          `padding:12px 0;text-align:${align};`,\n        )\n      }\n      case 'emailDivider': {\n        const color = colorOf(props.color, '#e0e0e0')\n        return row(\n          `<div style=\"border-top:1px solid ${color};font-size:0;line-height:0;\">&nbsp;</div>`,\n          'padding:12px 0;',\n        )\n      }\n      case 'emailSpacer': {\n        const height = Number(props.height) > 0 ? Number(props.height) : 24\n        return row(\n          `<div style=\"height:${height}px;font-size:0;line-height:0;\">&nbsp;</div>`,\n        )\n      }\n      case 'emailProduct': {\n        const product = props.productId\n          ? products?.[String(props.productId)]\n          : undefined\n        if (!product) return ''\n        const label = sub(props.buttonLabel ?? 'Shop now')\n        // Catalog data rather than author markup, and the caller absolutizes\n        // it before it arrives — but \"it came from a trusted table\" is a\n        // claim about every writer of that table, so the same rule applies\n        // here as to an author-typed href. Refused means no button and no\n        // line in the text part; the product card itself still renders.\n        const productUrl =\n          product.url && hasSafeLinkScheme(product.url)\n            ? product.url\n            : undefined\n        textParts.push(\n          `${product.name}${product.priceLabel ? ` — ${product.priceLabel}` : ''}` +\n            (productUrl ? `: ${productUrl}` : ''),\n        )\n        // Same treatment as emailImage: a catalog image can be a picked\n        // asset, so it carries the same reference/relative forms (AGL-1224).\n        const productImage = imageSrc(product.imageUrl)\n        const image = productImage\n          ? `<img src=\"${escapeEmailHtml(productImage)}\" alt=\"${escapeEmailHtml(product.name)}\" width=\"280\" style=\"max-width:100%;height:auto;border:0;border-radius:6px;\" /><br />`\n          : ''\n        const button = productUrl\n          ? `<a href=\"${escapeEmailHtml(productUrl)}\" target=\"_blank\" style=\"display:inline-block;margin-top:8px;padding:10px 24px;border-radius:${radius}px;background-color:${accent.fill};color:${accent.label};font-family:${FONT};font-size:14px;font-weight:600;text-decoration:none;\">${escapeEmailHtml(label)}</a>`\n          : ''\n        return row(\n          `<div style=\"border:1px solid #e0e0e0;border-radius:8px;padding:16px;text-align:center;font-family:${FONT};\">` +\n            image +\n            `<div style=\"font-size:16px;font-weight:600;margin-top:8px;\">${escapeEmailHtml(product.name)}</div>` +\n            (product.priceLabel\n              ? `<div style=\"font-size:14px;color:#555555;margin-top:2px;\">${escapeEmailHtml(product.priceLabel)}</div>`\n              : '') +\n            button +\n            `</div>`,\n          'padding:8px 0;',\n        )\n      }\n      default: {\n        // Unknown/web components: render their children so mixed documents\n        // degrade gracefully instead of dropping content.\n        return renderChildren(node.nodes)\n      }\n    }\n  }\n\n  const body = renderNode(rootId) || renderChildren(nodes[rootId]?.nodes)\n  const preheaderHtml = preheader\n    ? `<div style=\"display:none;max-height:0;overflow:hidden;mso-hide:all;\">` +\n      escapeEmailHtml(sub(preheader)) +\n      `</div>`\n    : ''\n\n  // INSIDE the 600px table, above the designed body, so it inherits the\n  // column's width on a phone instead of being centred against the viewport.\n  // `alt` is the product name where one is known, because a logo blocked by\n  // the client (which is the default in most inboxes) must still say who sent\n  // the mail. Height is capped rather than set, so a wordmark and a square\n  // mark both land at a sane size without the sender supplying dimensions.\n  //\n  // The src goes through `imageSrc` like every other image in the message\n  // (AGL-2230), and NOT into the tag raw. `emailLogoUrl` is collected by\n  // `MediaUrlField`, whose \"Browse\" button writes the picked asset's\n  // site-relative `cdnPath` — and the org DAM's other generation stores a\n  // `media:{scope}/{mediaId}` reference. Neither is a URL an inbox can\n  // resolve: there is no page to resolve it against, so a raw pass-through\n  // put `src=\"media:h1/med9\"` at the top of every transactional email a\n  // white-label org sent. `imageSrc` absolutizes both forms against\n  // `mediaOrigin`, passes a real https URL through untouched, and returns\n  // undefined when it cannot produce something fetchable — in which case the\n  // row is dropped, on the same reasoning as AGL-1224: a gap reads as a plain\n  // email, a broken-image box reads as a broken one.\n  const brandLogo = imageSrc(String(brandLogoUrl ?? '').trim()) ?? ''\n  // The product name from the merge map, because most inboxes block images by\n  // default — a logo with no `alt` is a blank box where the sender's identity\n  // should be. Falls back to nothing rather than to a literal, which would\n  // reintroduce the hard-coded brand this whole change removes.\n  const brandLogoAlt = merge?.['brand.productName'] ?? ''\n  const brandLogoHtml = brandLogo\n    ? row(\n        `<img src=\"${escapeEmailHtml(brandLogo)}\" alt=\"${escapeEmailHtml(brandLogoAlt)}\" ` +\n          `style=\"max-height:48px;max-width:200px;display:block;margin:0 auto;border:0;\" />`,\n        'padding:24px 24px 0;text-align:center;',\n      )\n    : ''\n\n  /**\n   * The chrome header row, or '' when it has nothing to draw.\n   *\n   * Same placement and the same `imageSrc` as the logo row above, which it\n   * replaces. Height is capped at 40px rather than set, so a wordmark and a\n   * square mark both land at a sane size; the `height` attribute is for the\n   * desktop clients that ignore CSS `max-height` and would otherwise draw the\n   * file at its own size. A logo that cannot be fetched from an inbox falls\n   * back to the name in bold, never to an `<img>` that draws a broken box.\n   * White, so the header and a default body read as one card.\n   */\n  const renderChromeHeader = (header: EmailChromeHeader): string => {\n    const logo = imageSrc(String(header.logoUrl ?? '').trim())\n    const name = sub(header.logoAlt).trim()\n    const href = linkHref(header.href)\n    const link = (inner: string, style: string): string =>\n      href\n        ? `<a href=\"${escapeEmailHtml(href)}\" target=\"_blank\" style=\"${style}\">${inner}</a>`\n        : inner\n    let mark: string\n    if (logo) {\n      mark = link(\n        `<img src=\"${escapeEmailHtml(logo)}\" alt=\"${escapeEmailHtml(name)}\" height=\"40\" ` +\n          `style=\"display:block;margin:0 auto;border:0;height:auto;width:auto;max-height:40px;max-width:200px;\" />`,\n        'text-decoration:none;',\n      )\n    } else if (name) {\n      mark =\n        `<div style=\"font-family:${FONT};font-size:20px;font-weight:700;line-height:1.3;color:${CHROME_PALETTE.ink};text-align:center;\">` +\n        link(escapeEmailHtml(name), `color:${CHROME_PALETTE.ink};text-decoration:none;`) +\n        `</div>`\n    } else {\n      return ''\n    }\n    return row(\n      mark,\n      `padding:24px 24px 0;text-align:center;background-color:${CHROME_PALETTE.card};`,\n    )\n  }\n\n  const headerHtml = chrome?.header\n    ? renderChromeHeader(chrome.header)\n    : brandLogoHtml\n\n  /**\n   * The chrome footer: rows under the body in the look of the email footer\n   * block the platform's own mail wears (a `#F8F9FA` section, padded 24,\n   * centered captions), and the same lines appended to the plain-text part.\n   *\n   * Rendered AFTER the body on purpose: the body's blocks push their text as\n   * they draw, and the footer's lines belong after all of it. A line that\n   * resolves to nothing is left out rather than drawn as an empty row.\n   */\n  const renderChromeFooter = (footer: EmailChromeFooter): string => {\n    const htmlLines: string[] = []\n    const textLines: string[] = []\n    const reason = sub(footer.reason).trim()\n    if (reason) {\n      htmlLines.push(escapeEmailHtml(reason))\n      textLines.push(reason)\n    }\n    const supportLabel = sub(footer.support?.label).trim()\n    const supportHref = linkHref(footer.support?.href)\n    if (supportLabel && supportHref) {\n      htmlLines.push(\n        `<a href=\"${escapeEmailHtml(supportHref)}\" target=\"_blank\" ` +\n          `style=\"color:${CHROME_PALETTE.caption};text-decoration:underline;\">${escapeEmailHtml(supportLabel)}</a>`,\n      )\n      // A plain-text reader gets the address itself, bare: a mailto's\n      // mailbox, or the URL. \"Get help: https://…\" names where it goes; a\n      // label that already IS the mailbox is not repeated.\n      const bare = /^mailto:/i.test(supportHref)\n        ? supportHref.slice('mailto:'.length).split('?')[0]\n        : supportHref\n      textLines.push(supportLabel === bare ? bare : `${supportLabel}: ${bare}`)\n    }\n    const legal = sub(footer.legal).trim()\n    if (legal) {\n      htmlLines.push(escapeEmailHtml(legal))\n      textLines.push(legal)\n    }\n    if (!htmlLines.length) return ''\n    textParts.push(textLines.join('\\n'))\n    return row(\n      htmlLines\n        .map(\n          (line, index) =>\n            `<div style=\"font-family:${FONT};font-size:12px;font-weight:400;line-height:1.4;color:${CHROME_PALETTE.caption};` +\n            `${index ? 'margin-top:8px;' : ''}\">${line.replace(/\\n/g, '<br />')}</div>`,\n        )\n        .join(''),\n      `padding:24px;text-align:center;background-color:${CHROME_PALETTE.band};`,\n    )\n  }\n\n  const footerHtml = chrome?.footer ? renderChromeFooter(chrome.footer) : ''\n\n  const html =\n    `<!DOCTYPE html><html><head><meta charset=\"utf-8\" />` +\n    `<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />` +\n    // Drawn for a light ground in the theme's colors: a client that offers\n    // its own dark rendering (Apple Mail) is asked to show it as designed\n    // rather than invert the brand's colors (AGL-3897).\n    `<meta name=\"color-scheme\" content=\"light only\" />` +\n    `<meta name=\"supported-color-schemes\" content=\"light only\" />` +\n    `<style>:root{color-scheme:light only;supported-color-schemes:light only;}</style>` +\n    `<title>${escapeEmailHtml(sub(subject))}</title></head>` +\n    `<body style=\"margin:0;padding:0;background-color:#f4f4f4;\">` +\n    preheaderHtml +\n    `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" style=\"background-color:#f4f4f4;\">` +\n    row(\n      `<table role=\"presentation\" width=\"600\" cellpadding=\"0\" cellspacing=\"0\" align=\"center\" style=\"max-width:600px;width:100%;margin:0 auto;\">` +\n        headerHtml +\n        body +\n        footerHtml +\n        `</table>`,\n      'padding:24px 8px;',\n    ) +\n    `</table></body></html>`\n\n  return { html, text: textParts.join('\\n\\n') }\n}\n"],"names":["hasSafeLinkScheme","hasSafeMediaScheme","linkifyEscapedText","emailAccent","PLATFORM_EMAIL_PALETTE","resolveEmailColor","resolveEmailMediaSrc","FONT","CHROME_PALETTE","ink","card","band","caption","escapeEmailHtml","value","replace","substituteMergeTokens","merge","match","token","replacement","undefined","TEXT_STYLES","heading","subheading","body","eyebrow","details","links","TEXT_PADDING","DETAIL_INLINE_MAX","MUTED_TEXT_STYLES","Set","splitEmailDetailLine","line","colon","indexOf","label","slice","trim","dash","lastIndexOf","row","cellHtml","cellStyle","EMAIL_NODE_ROOT_ID","renderEmailHtml","options","imageSrc","nodes","rootId","subject","preheader","products","sanitize","mediaOrigin","mediaHostId","brandLogoUrl","chrome","palette","buttonRadius","buttonText","radius","Number","isFinite","Math","min","labelWeight","weight","labelCase","transform","test","letterSpacing","colorOf","fallback","themeColor","linksHtml","text","style","rule","lines","split","map","filter","Boolean","rows","index","href","linkHref","border","inner","accent","link","join","detailsHtml","valueColor","muted","endsWith","cell","entries","last","length","push","entry","total","base","includes","textParts","sub","String","urlMerge","Object","fromEntries","startsWith","subUrl","origin","resolved","stored","renderChildren","ids","id","renderNode","node","props","componentId","background","backgroundColor","padding","align","merged","children","variant","color","has","html","src","width","alt","img","tokenOnly","fill","height","product","productId","buttonLabel","productUrl","url","name","priceLabel","productImage","imageUrl","image","button","preheaderHtml","brandLogo","brandLogoAlt","brandLogoHtml","renderChromeHeader","header","logo","logoUrl","logoAlt","mark","headerHtml","renderChromeFooter","footer","htmlLines","textLines","reason","supportLabel","support","supportHref","bare","legal","footerHtml"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BC,GAED,SACEA,iBAAiB,EACjBC,kBAAkB,QACb,0CAAyC;AAEhD,SAASC,kBAAkB,QAAQ,qBAAiB;AACpD,SACEC,WAAW,EACXC,sBAAsB,EACtBC,iBAAiB,QAEZ,qBAAiB;AACxB,SAASC,oBAAoB,QAAQ,uBAAmB;AA6LxD,MAAMC,OAAO;AAEb;;;;;;;;CAQC,GACD,MAAMC,iBAAiB;IACrB,sDAAsD,GACtDC,KAAK;IACL,+CAA+C,GAC/CC,MAAM;IACN,qBAAqB,GACrBC,MAAM;IACN,uCAAuC,GACvCC,SAAS;AACX;AAEA,OAAO,SAASC,gBAAgBC,KAAa;IAC3C,OAAOA,MACJC,OAAO,CAAC,MAAM,SACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM;AACnB;AAEA,oEAAoE,GACpE,OAAO,SAASC,sBACdF,KAAa,EACbG,KAAyC;IAEzC,OAAOH,MAAMC,OAAO,CAAC,2BAA2B,CAACG,OAAOC;QACtD,MAAMC,cAAcH,yBAAAA,KAAO,CAACE,MAAM;QAClC,OAAOC,gBAAgBC,YAAYD,cAAcF;IACnD;AACF;AAEA,MAAMI,cAAsC;IAC1CC,SAAS,CAAC,+CAA+C,CAAC;IAC1DC,YAAY,CAAC,8CAA8C,CAAC;IAC5DC,MAAM,CAAC,+CAA+C,CAAC;IACvDb,SAAS,CAAC,8CAA8C,CAAC;IACzD,0EAA0E;IAC1E,4BAA4B;IAC5Bc,SAAS,CAAC,6FAA6F,CAAC;IACxG,kDAAkD;IAClDC,SAAS,CAAC,+CAA+C,CAAC;IAC1D,8DAA8D;IAC9DC,OAAO,CAAC,8CAA8C,CAAC;AACzD;AAEA,4GAA4G,GAC5G,MAAMC,eAAuC;IAC3CN,SAAS;IACTC,YAAY;IACZC,MAAM;IACNb,SAAS;IACTc,SAAS;IACTC,SAAS;IACTC,OAAO;AACT;AAEA,iGAAiG,GACjG,MAAME,oBAAoB;AAE1B,uGAAuG,GACvG,MAAMC,oBAAyC,IAAIC,IAAI;IAAC;CAAU;AAElE;;;;CAIC,GACD,OAAO,SAASC,qBAAqBC,IAAY;IAC/C,MAAMC,QAAQD,KAAKE,OAAO,CAAC;IAC3B,IAAID,QAAQ,KAAKA,SAAS,IAAI,OAAO;QAAEE,OAAOH,KAAKI,KAAK,CAAC,GAAGH,OAAOI,IAAI;QAAIzB,OAAOoB,KAAKI,KAAK,CAACH,QAAQ,GAAGI,IAAI;IAAG;IAC/G,MAAMC,OAAON,KAAKO,WAAW,CAAC;IAC9B,IAAID,OAAO,GAAG,OAAO;QAAEH,OAAOH,KAAKI,KAAK,CAAC,GAAGE,MAAMD,IAAI;QAAIzB,OAAOoB,KAAKI,KAAK,CAACE,OAAO,GAAGD,IAAI;IAAG;IAC7F,OAAO;AACT;AAEA,2DAA2D,GAC3D,MAAMG,MAAM,CAACC,UAAkBC,YAAY,EAAE,GAC3C,CAAC,eAAe,EAAEA,UAAU,EAAE,EAAED,SAAS,UAAU,CAAC;AAEtD;;;;;;;CAOC,GACD,OAAO,MAAME,qBAAqB,MAAK;AAEvC,OAAO,SAASC,gBAAgBC,OAA2B;QAycvCC;QA1BgCC;IA9alD,MAAM,EACJA,KAAK,EACLC,SAAS,MAAM,EACfC,UAAU,EAAE,EACZC,YAAY,EAAE,EACdnC,KAAK,EACLoC,QAAQ,EACRC,QAAQ,EACRC,WAAW,EACXC,WAAW,EACXC,YAAY,EACZC,MAAM,EACNC,OAAO,EACPC,YAAY,EACZC,UAAU,EACX,GAAGd;IACJ,MAAMe,SACJC,OAAOC,QAAQ,CAACJ,iBAAiBG,OAAOH,iBAAiB,IACrDK,KAAKC,GAAG,CAACH,OAAOH,eAAe,MAC/B;IACN,MAAMO,cACJJ,OAAOC,QAAQ,CAACH,8BAAAA,WAAYO,MAAM,KAAKL,OAAOF,8BAAAA,WAAYO,MAAM,KAAK,MAAML,OAAOF,8BAAAA,WAAYO,MAAM,IAAI;IAC1G,MAAMC,YACJ,AAACR,CAAAA,CAAAA,8BAAAA,WAAYS,SAAS,KAAI,0CAA0CC,IAAI,CAACV,WAAWS,SAAS,IACzF,CAAC,eAAe,EAAET,WAAWS,SAAS,CAAC,CAAC,CAAC,GACzC,EAAC,IACJT,CAAAA,CAAAA,8BAAAA,WAAYW,aAAa,KAAI,wBAAwBD,IAAI,CAACV,WAAWW,aAAa,IAC/E,CAAC,eAAe,EAAEX,WAAWW,aAAa,CAAC,CAAC,CAAC,GAC7C,EAAC;IAEP;;;;;GAKC,GACD,MAAMC,UAAU,CAAC3D,OAAgB4D;YAC/BrE;gBAAAA,qBAAAA,kBAAkBS,OAAO6C,oBAAzBtD,qBAAqCqE;;IAEvC,oGAAoG,GACpG,MAAMC,aAAa,CAACxD;YAClBd,MAAAA;gBAAAA,QAAAA,qBAAAA,kBAAkBc,OAAOwC,oBAAzBtD,qBAAqCA,kBAAkBc,OAAOf,mCAA9DC,OAAyF;;IAE3F;;;;;;GAMC,GACD,MAAMuE,YAAY,CAACC,MAAcC;QAC/B,MAAMC,OAAOJ,WAAW;QACxB,MAAMK,QAAQH,KAAKI,KAAK,CAAC,MAAMC,GAAG,CAAC,CAAChD,OAASA,KAAKK,IAAI,IAAI4C,MAAM,CAACC;QACjE,MAAMC,OAAOL,MAAME,GAAG,CAAC,CAAChD,MAAMoD;YAC5B,MAAML,QAAQhD,qBAAqBC;YACnC,MAAMqD,OAAON,QAAQO,SAASP,MAAMnE,KAAK,IAAIO;YAC7C,MAAMgB,QAAQxB,gBAAgBoE,QAAQA,MAAM5C,KAAK,GAAGH;YACpD,MAAMuD,SAASH,QAAQ,IAAI,CAAC,qBAAqB,EAAEP,KAAK,CAAC,CAAC,GAAG;YAC7D,MAAMW,QAAQH,OACV,CAAC,SAAS,EAAE1E,gBAAgB0E,MAAM,+BAA+B,EAAEI,OAAOC,IAAI,CAAC,wBAAwB,EAAEvD,MAAM,gBAAgB,CAAC,GAChI,CAAC,mBAAmB,EAAEsC,WAAW,gBAAgB,GAAG,EAAEtC,MAAM,OAAO,CAAC;YACxE,OAAO,CAAC,2BAA2B,EAAE9B,KAAK,CAAC,EAAEuE,MAAM,gBAAgB,EAAEW,OAAO,EAAE,EAAEC,MAAM,UAAU,CAAC;QACnG;QACA,OAAO,CAAC,wEAAwE,EAAEL,KAAKQ,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC3G;IAEA;;;;;;GAMC,GACD,MAAMC,cAAc,CAACjB,MAAcC,OAAeiB;YA6CnB1F;QA5C7B,MAAM2F,QAAQrB,WAAW;QACzB,MAAMI,OAAOJ,WAAW;QACxB,oEAAoE;QACpE,MAAMK,QAAQH,KACXI,KAAK,CAAC,MACNC,GAAG,CAAC,CAAChD,OAASA,KAAKK,IAAI,IACvB4C,MAAM,CAAC,CAACjD,OAASA,QAAQ,CAACA,KAAK+D,QAAQ,CAAC;QAC3C,MAAMC,OAAO,CAACpF,QAAkBZ,mBAAmBW,gBAAgBC,QAAQ6E,OAAOC,IAAI,EAAE7E,OAAO,CAAC,OAAO;QACvG,uEAAuE;QACvE,sDAAsD;QACtD,MAAMoF,UAA0D,EAAE;QAClE,KAAK,MAAMjE,QAAQ8C,MAAO;YACxB,MAAMC,QAAQhD,qBAAqBC;YACnC,MAAMkE,OAAOD,OAAO,CAACA,QAAQE,MAAM,GAAG,EAAE;YACxC,IAAI,CAACpB,UAASmB,wBAAAA,KAAM/D,KAAK,GAAE+D,KAAKtF,KAAK,IAAI,CAAC,EAAE,EAAEoB,MAAM;iBAC/CiE,QAAQG,IAAI,CAACrB,QAAQ;gBAAE5C,OAAO4C,MAAM5C,KAAK;gBAAEvB,OAAOmE,MAAMnE,KAAK;YAAC,IAAI;gBAAEuB,OAAO;gBAAMvB,OAAOoB;YAAK;QACpG;QACA,MAAMmD,OAAOc,QAAQjB,GAAG,CAAC,CAACqB,OAAOjB;YAC/B,MAAMkB,QAAQpB,QAAQmB,MAAMlE,KAAK,IAAI,YAAYkC,IAAI,CAACgC,MAAMlE,KAAK;YACjE,MAAMoD,SAASH,QAAQ,IAAI,CAAC,qBAAqB,EAAEP,KAAK,CAAC,CAAC,GAAG;YAC7D,MAAM0B,OAAO,CAAC,YAAY,EAAElG,KAAK,CAAC,EAAEuE,MAAM,kCAAkC,EAAEW,QAAQ;YACtF,IAAI,CAACc,MAAMlE,KAAK,EAAE;gBAChB,OAAO,CAAC,2BAA2B,EAAEoE,KAAK,MAAM,EAAEV,WAAW,GAAG,EAAEG,KAAKK,MAAMzF,KAAK,EAAE,UAAU,CAAC;YACjG;YACA,qEAAqE;YACrE,4DAA4D;YAC5D,IAAI,CAAC0F,SAAUD,CAAAA,MAAMzF,KAAK,CAACuF,MAAM,GAAGvE,qBAAqByE,MAAMzF,KAAK,CAAC4F,QAAQ,CAAC,KAAI,GAAI;gBACpF,OACE,CAAC,2BAA2B,EAAED,KAAK,EAAE,CAAC,GACtC,CAAC,kBAAkB,EAAET,MAAM,sBAAsB,EAAEE,KAAKK,MAAMlE,KAAK,EAAE,MAAM,CAAC,GAC5E,CAAC,kBAAkB,EAAE0D,WAAW,GAAG,EAAEG,KAAKK,MAAMzF,KAAK,EAAE,MAAM,CAAC,GAC9D,CAAC,UAAU,CAAC;YAEhB;YACA,OACE,CAAC,IAAI,CAAC,GACN,CAAC,WAAW,EAAE2F,KAAK,MAAM,EAAED,QAAQT,aAAaC,MAAM,CAAC,EAAEQ,QAAQ,qBAAqB,GAAG,qBAAqB,EAAEN,KAAKK,MAAMlE,KAAK,EAAE,KAAK,CAAC,GACxI,CAAC,WAAW,EAAEoE,KAAK,MAAM,EAAEV,WAAW,aAAa,EAAES,QAAQ,MAAM,IAAI,0CAA0C,EAAEN,KAAKK,MAAMzF,KAAK,EAAE,KAAK,CAAC,GAC3I,CAAC,KAAK,CAAC;QAEX;QACA,OACE,CAAC,wEAAwE,CAAC,GAC1E,6DAA6D;QAC7D,CAAC,wBAAwB,GAAET,qBAAAA,kBAAkB,gBAAgBsD,oBAAlCtD,qBAA8CsE,WAAW,WAAW,qBAAqB,CAAC,GACrH,CAAC,kCAAkC,CAAC,GACpC,CAAC,wEAAwE,EAAEU,KAAKQ,IAAI,CAAC,IAAI,QAAQ,CAAC,GAClG,CAAC,kBAAkB,CAAC;IAExB;IACA;;;;GAIC,GACD,MAAMF,SAASxF,YAAYwD;IAE3B,MAAMgD,YAAsB,EAAE;IAC9B,MAAMC,MAAM,CAAC9F,QACXE,sBAAsB6F,OAAO/F,gBAAAA,QAAS,KAAKG;IAE7C;;;;;;;;;;;;;;;;;;;;;GAqBC,GACD,MAAM6F,WAAW7F,QACb8F,OAAOC,WAAW,CAChBD,OAAOZ,OAAO,CAAClF,OAAOkE,MAAM,CAC1B,CAAC,CAAChE,MAAM,GAAK,CAACA,MAAM8F,UAAU,CAAC,gBAGnC5F;IAEJ,wEAAwE,GACxE,MAAM6F,SAAS,CAACpG,QACdE,sBAAsB6F,OAAO/F,gBAAAA,QAAS,KAAKgG;IAE7C;;;;;;;;GAQC,GACD,MAAMtB,WAAW,CAAC1E;QAChB,MAAMyE,OAAO2B,OAAOpG;QACpB,IAAI,CAACyE,MAAM,OAAOlE;QAClB,OAAOrB,kBAAkBuF,QAAQA,OAAOlE;IAC1C;IAEA,MAAM8F,SAAS5D,+BAAAA,YAAaxC,OAAO,CAAC,QAAQ;IAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCC,GACD,MAAMiC,WAAW,CAAClC;QAChB,MAAMsG,WAAW9G,qBAAqB4G,OAAOpG,QAAQ0C;QACrD,IAAI,CAAC4D,YAAY,CAACnH,mBAAmBmH,WAAW,OAAO/F;QACvD,IAAI,CAAC+F,SAASH,UAAU,CAAC,QAAQG,SAASH,UAAU,CAAC,OAAO,OAAOG;QACnE,IAAID,QAAQ,OAAO,GAAGA,SAASC,UAAU;QACzC,sEAAsE;QACtE,yEAAyE;QACzE,oCAAoC;QACpC,MAAMC,SAASH,OAAOpG;QACtB,OAAOuG,UAAU,eAAe9C,IAAI,CAAC8C,UAAUA,SAAShG;IAC1D;IAEA,MAAMiG,iBAAiB,CAACC,MACtB,CAACA,cAAAA,MAAO,EAAE,EACPrC,GAAG,CAAC,CAACsC,KAAOC,WAAWD,KACvBrC,MAAM,CAACC,SACPS,IAAI,CAAC;IAEV,MAAM4B,aAAa,CAACD;YAGJE;QAFd,MAAMA,OAAOzE,KAAK,CAACuE,GAAG;QACtB,IAAI,CAACE,MAAM,OAAO;QAClB,MAAMC,SAAQD,cAAAA,KAAKC,KAAK,YAAVD,cAAc,CAAC;QAC7B,OAAQA,KAAKE,WAAW;YACtB,KAAK;gBAAgB;oBACnB,MAAMC,aAAapD,QAAQkD,MAAMG,eAAe,EAAE;oBAClD,MAAMC,UAAUhE,OAAOC,QAAQ,CAACD,OAAO4D,MAAMI,OAAO,KAChDhE,OAAO4D,MAAMI,OAAO,IACpB;oBACJ,MAAMC,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,kEAAkE;oBAClE,sEAAsE;oBACtE,uEAAuE;oBACvE,sEAAsE;oBACtE,wEAAwE;oBACxE,mEAAmE;oBACnE,+DAA+D;oBAC/D,OAAOtF,IACL,CAAC,wEAAwE,CAAC,GACxE,CAAC,wBAAwB,EAAEmF,WAAW,GAAG,CAAC,GAC1CnF,IACE,CAAC,wEAAwE,CAAC,GACxE4E,eAAeI,KAAKzE,KAAK,IACzB,CAAC,QAAQ,CAAC,EACZ,CAAC,QAAQ,EAAE8E,QAAQ,cAAc,EAAEC,MAAM,CAAC,CAAC,IAE7C,CAAC,QAAQ,CAAC;gBAEhB;YACA,KAAK;gBAAa;wBAoCdnG;oBAnCF,MAAMoG,SAASrB,IAAIe,MAAMO,QAAQ;oBACjC,oEAAoE;oBACpE,uEAAuE;oBACvE,+CAA+C;oBAC/C,MAAMrD,OACJ8C,MAAMQ,OAAO,KAAK,YACdF,OAAOlH,OAAO,CAAC,4BAA4B,IAAIA,OAAO,CAAC,kBAAkB,SACzEkH;oBACN,4DAA4D;oBAC5D,oEAAoE;oBACpE,4DAA4D;oBAC5D,IAAI,CAACpD,KAAKtC,IAAI,IAAI,OAAO;oBACzBoE,UAAUL,IAAI,CAACzB;oBACf,MAAMsD,UAAU7G,WAAW,CAACqG,MAAMQ,OAAO,CAAW,GAAIR,MAAMQ,OAAO,GAAc;oBACnF,MAAMrD,QAAQxD,WAAW,CAAC6G,QAAQ;oBAClC,gEAAgE;oBAChE,2DAA2D;oBAC3D,MAAMC,QAAQT,MAAMS,KAAK,GACrB3D,QAAQkD,MAAMS,KAAK,EAAE,aACrBD,YAAY,YACVxD,WAAW,kBACX5C,kBAAkBsG,GAAG,CAACF,WACpBxD,WAAW,oBACX;oBACR,MAAMqD,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,IAAIG,YAAY,SAAS;wBACvB,OAAOzF,IAAIkC,UAAUC,MAAMC,QAAQjD,YAAY,CAAC,QAAQ;oBAC1D;oBACA,IAAIsG,YAAY,WAAW;wBACzB,OAAOzF,IAAIoD,YAAYjB,MAAMC,OAAO6C,MAAMS,KAAK,GAAGA,QAAQzD,WAAW,kBAAkB9C,YAAY,CAAC,UAAU;oBAChH;oBACA,OAAOa,IACL,CAAC,wBAAwB,EAAEnC,KAAK,CAAC,EAAEuE,MAAM,OAAO,EAAEsD,MAAM,YAAY,EAAEJ,MAAM,GAAG,CAAC,GAC9E9H,mBAAmBW,gBAAgBgE,OAAOc,OAAOC,IAAI,EAAE7E,OAAO,CAAC,OAAO,YACtE,CAAC,MAAM,CAAC,GACVc,wBAAAA,YAAY,CAACsG,QAAQ,YAArBtG,wBAAyBA,YAAY,CAAC,OAAO;gBAEjD;YACA,KAAK;YACL,KAAK;gBAAa;oBAChB,MAAMyG,OAAOhF,SAASsD,IAAIe,MAAMW,IAAI;oBACpC,IAAI,CAACA,KAAK/F,IAAI,IAAI,OAAO;oBACzBoE,UAAUL,IAAI,CAACgC,KAAKvH,OAAO,CAAC,YAAY,KAAKwB,IAAI;oBACjD,OAAOG,IACL,CAAC,wBAAwB,EAAEnC,KAAK,mCAAmC,EAAE+H,KAAK,MAAM,CAAC,EACjF;gBAEJ;YACA,KAAK;gBAAc;wBAIkBX;oBAHnC,MAAMY,MAAMvF,SAAS2E,MAAMY,GAAG;oBAC9B,IAAI,CAACA,KAAK,OAAO;oBACjB,MAAMC,QAAQzE,OAAO4D,MAAMa,KAAK,IAAI,IAAIzE,OAAO4D,MAAMa,KAAK,IAAI;oBAC9D,MAAMC,MAAM5H,gBAAgBgG,QAAOc,aAAAA,MAAMc,GAAG,YAATd,aAAa;oBAChD,MAAMK,QAAQL,MAAMK,KAAK,IAAI;oBAC7B,MAAMU,MACJ,CAAC,UAAU,EAAE7H,gBAAgB0H,KAAK,OAAO,EAAEE,IAAI,SAAS,EAAExE,KAAKC,GAAG,CAACsE,OAAO,KAAK,EAAE,CAAC,GAClF,CAAC,oEAAoE,CAAC;oBACxE,sEAAsE;oBACtE,4CAA4C;oBAC5C,MAAMjD,OAAOC,SAASmC,MAAMpC,IAAI;oBAChC,OAAO7C,IACL6C,OACI,CAAC,SAAS,EAAE1E,gBAAgB0E,MAAM,kBAAkB,EAAEmD,IAAI,IAAI,CAAC,GAC/DA,KACJ,CAAC,yBAAyB,EAAEV,MAAM,CAAC,CAAC;gBAExC;YACA,KAAK;gBAAe;wBAOAL,iBAQLnC,WAASmC;oBAdtB,mEAAmE;oBACnE,mEAAmE;oBACnE,qDAAqD;oBACrD,MAAMgB,YAAY,CAAC7H,QACjB,gBAAgByD,IAAI,CAACsC,OAAO/F,gBAAAA,QAAS,QAAQ,CAAC8F,IAAI9F,OAAOyB,IAAI;oBAC/D,IAAIoG,UAAUhB,MAAMpC,IAAI,KAAKoD,UAAUhB,MAAMO,QAAQ,GAAG,OAAO;oBAC/D,MAAM7F,QAAQuE,KAAIe,kBAAAA,MAAMO,QAAQ,YAAdP,kBAAkB;oBACpC,sEAAsE;oBACtE,sEAAsE;oBACtE,qEAAqE;oBACrE,oEAAoE;oBACpE,iEAAiE;oBACjE,oEAAoE;oBACpE,kDAAkD;oBAClD,MAAMpC,QAAOC,YAAAA,UAASmC,cAAAA,MAAMpC,IAAI,YAAVoC,cAAc,gBAAvBnC,YAA+B;oBAC5C,MAAMqC,aAAapD,QAAQkD,MAAMG,eAAe,EAAEnC,OAAOiD,IAAI;oBAC7D,MAAMR,QAAQ3D,QAAQkD,MAAMS,KAAK,EAAEzC,OAAOtD,KAAK;oBAC/C,MAAM2F,QAAQL,MAAMK,KAAK,IAAI;oBAC7BrB,UAAUL,IAAI,CAAC,GAAGjE,MAAM,EAAE,EAAEkD,MAAM;oBAClC,wDAAwD;oBACxD,OAAO7C,IACL,CAAC,SAAS,EAAE7B,gBAAgB0E,MAAM,kBAAkB,CAAC,GACnD,CAAC,4DAA4D,EAAEzB,OAAO,GAAG,CAAC,GAC1E,CAAC,iBAAiB,EAAE+D,WAAW,OAAO,EAAEO,MAAM,aAAa,EAAE7H,KAAK,CAAC,CAAC,GACpE,CAAC,2BAA2B,EAAE4D,YAAY,sBAAsB,EAAEE,UAAU,EAAE,CAAC,GAC/ExD,gBAAgBwB,SAChB,CAAC,IAAI,CAAC,EACR,CAAC,0BAA0B,EAAE2F,MAAM,CAAC,CAAC;gBAEzC;YACA,KAAK;gBAAgB;oBACnB,MAAMI,QAAQ3D,QAAQkD,MAAMS,KAAK,EAAE;oBACnC,OAAO1F,IACL,CAAC,iCAAiC,EAAE0F,MAAM,yCAAyC,CAAC,EACpF;gBAEJ;YACA,KAAK;gBAAe;oBAClB,MAAMS,SAAS9E,OAAO4D,MAAMkB,MAAM,IAAI,IAAI9E,OAAO4D,MAAMkB,MAAM,IAAI;oBACjE,OAAOnG,IACL,CAAC,mBAAmB,EAAEmG,OAAO,2CAA2C,CAAC;gBAE7E;YACA,KAAK;gBAAgB;wBAKDlB;oBAJlB,MAAMmB,UAAUnB,MAAMoB,SAAS,GAC3B1F,4BAAAA,QAAU,CAACwD,OAAOc,MAAMoB,SAAS,EAAE,GACnC1H;oBACJ,IAAI,CAACyH,SAAS,OAAO;oBACrB,MAAMzG,QAAQuE,KAAIe,qBAAAA,MAAMqB,WAAW,YAAjBrB,qBAAqB;oBACvC,qEAAqE;oBACrE,iEAAiE;oBACjE,mEAAmE;oBACnE,kEAAkE;oBAClE,gEAAgE;oBAChE,MAAMsB,aACJH,QAAQI,GAAG,IAAIlJ,kBAAkB8I,QAAQI,GAAG,IACxCJ,QAAQI,GAAG,GACX7H;oBACNsF,UAAUL,IAAI,CACZ,GAAGwC,QAAQK,IAAI,GAAGL,QAAQM,UAAU,GAAG,CAAC,GAAG,EAAEN,QAAQM,UAAU,EAAE,GAAG,IAAI,GACrEH,CAAAA,aAAa,CAAC,EAAE,EAAEA,YAAY,GAAG,EAAC;oBAEvC,gEAAgE;oBAChE,qEAAqE;oBACrE,MAAMI,eAAerG,SAAS8F,QAAQQ,QAAQ;oBAC9C,MAAMC,QAAQF,eACV,CAAC,UAAU,EAAExI,gBAAgBwI,cAAc,OAAO,EAAExI,gBAAgBiI,QAAQK,IAAI,EAAE,qFAAqF,CAAC,GACxK;oBACJ,MAAMK,SAASP,aACX,CAAC,SAAS,EAAEpI,gBAAgBoI,YAAY,6FAA6F,EAAEnF,OAAO,oBAAoB,EAAE6B,OAAOiD,IAAI,CAAC,OAAO,EAAEjD,OAAOtD,KAAK,CAAC,aAAa,EAAE9B,KAAK,uDAAuD,EAAEM,gBAAgBwB,OAAO,IAAI,CAAC,GAC/S;oBACJ,OAAOK,IACL,CAAC,kGAAkG,EAAEnC,KAAK,GAAG,CAAC,GAC5GgJ,QACA,CAAC,4DAA4D,EAAE1I,gBAAgBiI,QAAQK,IAAI,EAAE,MAAM,CAAC,GACnGL,CAAAA,QAAQM,UAAU,GACf,CAAC,0DAA0D,EAAEvI,gBAAgBiI,QAAQM,UAAU,EAAE,MAAM,CAAC,GACxG,EAAC,IACLI,SACA,CAAC,MAAM,CAAC,EACV;gBAEJ;YACA;gBAAS;oBACP,mEAAmE;oBACnE,kDAAkD;oBAClD,OAAOlC,eAAeI,KAAKzE,KAAK;gBAClC;QACF;IACF;IAEA,MAAMxB,OAAOgG,WAAWvE,WAAWoE,gBAAerE,gBAAAA,KAAK,CAACC,OAAO,qBAAbD,cAAeA,KAAK;IACtE,MAAMwG,gBAAgBrG,YAClB,CAAC,qEAAqE,CAAC,GACvEvC,gBAAgB+F,IAAIxD,cACpB,CAAC,MAAM,CAAC,GACR;IAEJ,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,kEAAkE;IAClE,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAMsG,aAAY1G,YAAAA,SAAS6D,OAAOpD,uBAAAA,eAAgB,IAAIlB,IAAI,eAAxCS,YAA+C;IACjE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM2G,uBAAe1I,yBAAAA,KAAO,CAAC,oBAAoB,mBAAI;IACrD,MAAM2I,gBAAgBF,YAClBhH,IACE,CAAC,UAAU,EAAE7B,gBAAgB6I,WAAW,OAAO,EAAE7I,gBAAgB8I,cAAc,EAAE,CAAC,GAChF,CAAC,gFAAgF,CAAC,EACpF,4CAEF;IAEJ;;;;;;;;;;GAUC,GACD,MAAME,qBAAqB,CAACC;YACGA;QAA7B,MAAMC,OAAO/G,SAAS6D,QAAOiD,kBAAAA,OAAOE,OAAO,YAAdF,kBAAkB,IAAIvH,IAAI;QACvD,MAAM4G,OAAOvC,IAAIkD,OAAOG,OAAO,EAAE1H,IAAI;QACrC,MAAMgD,OAAOC,SAASsE,OAAOvE,IAAI;QACjC,MAAMK,OAAO,CAACF,OAAeZ,QAC3BS,OACI,CAAC,SAAS,EAAE1E,gBAAgB0E,MAAM,yBAAyB,EAAET,MAAM,EAAE,EAAEY,MAAM,IAAI,CAAC,GAClFA;QACN,IAAIwE;QACJ,IAAIH,MAAM;YACRG,OAAOtE,KACL,CAAC,UAAU,EAAE/E,gBAAgBkJ,MAAM,OAAO,EAAElJ,gBAAgBsI,MAAM,cAAc,CAAC,GAC/E,CAAC,uGAAuG,CAAC,EAC3G;QAEJ,OAAO,IAAIA,MAAM;YACfe,OACE,CAAC,wBAAwB,EAAE3J,KAAK,sDAAsD,EAAEC,eAAeC,GAAG,CAAC,qBAAqB,CAAC,GACjImF,KAAK/E,gBAAgBsI,OAAO,CAAC,MAAM,EAAE3I,eAAeC,GAAG,CAAC,sBAAsB,CAAC,IAC/E,CAAC,MAAM,CAAC;QACZ,OAAO;YACL,OAAO;QACT;QACA,OAAOiC,IACLwH,MACA,CAAC,uDAAuD,EAAE1J,eAAeE,IAAI,CAAC,CAAC,CAAC;IAEpF;IAEA,MAAMyJ,aAAazG,CAAAA,0BAAAA,OAAQoG,MAAM,IAC7BD,mBAAmBnG,OAAOoG,MAAM,IAChCF;IAEJ;;;;;;;;GAQC,GACD,MAAMQ,qBAAqB,CAACC;YAQDA,iBACIA;QAR7B,MAAMC,YAAsB,EAAE;QAC9B,MAAMC,YAAsB,EAAE;QAC9B,MAAMC,SAAS5D,IAAIyD,OAAOG,MAAM,EAAEjI,IAAI;QACtC,IAAIiI,QAAQ;YACVF,UAAUhE,IAAI,CAACzF,gBAAgB2J;YAC/BD,UAAUjE,IAAI,CAACkE;QACjB;QACA,MAAMC,eAAe7D,KAAIyD,kBAAAA,OAAOK,OAAO,qBAAdL,gBAAgBhI,KAAK,EAAEE,IAAI;QACpD,MAAMoI,cAAcnF,UAAS6E,mBAAAA,OAAOK,OAAO,qBAAdL,iBAAgB9E,IAAI;QACjD,IAAIkF,gBAAgBE,aAAa;YAC/BL,UAAUhE,IAAI,CACZ,CAAC,SAAS,EAAEzF,gBAAgB8J,aAAa,kBAAkB,CAAC,GAC1D,CAAC,aAAa,EAAEnK,eAAeI,OAAO,CAAC,6BAA6B,EAAEC,gBAAgB4J,cAAc,IAAI,CAAC;YAE7G,gEAAgE;YAChE,oEAAoE;YACpE,qDAAqD;YACrD,MAAMG,OAAO,YAAYrG,IAAI,CAACoG,eAC1BA,YAAYrI,KAAK,CAAC,UAAU+D,MAAM,EAAEpB,KAAK,CAAC,IAAI,CAAC,EAAE,GACjD0F;YACJJ,UAAUjE,IAAI,CAACmE,iBAAiBG,OAAOA,OAAO,GAAGH,aAAa,EAAE,EAAEG,MAAM;QAC1E;QACA,MAAMC,QAAQjE,IAAIyD,OAAOQ,KAAK,EAAEtI,IAAI;QACpC,IAAIsI,OAAO;YACTP,UAAUhE,IAAI,CAACzF,gBAAgBgK;YAC/BN,UAAUjE,IAAI,CAACuE;QACjB;QACA,IAAI,CAACP,UAAUjE,MAAM,EAAE,OAAO;QAC9BM,UAAUL,IAAI,CAACiE,UAAU1E,IAAI,CAAC;QAC9B,OAAOnD,IACL4H,UACGpF,GAAG,CACF,CAAChD,MAAMoD,QACL,CAAC,wBAAwB,EAAE/E,KAAK,sDAAsD,EAAEC,eAAeI,OAAO,CAAC,CAAC,CAAC,GACjH,GAAG0E,QAAQ,oBAAoB,GAAG,EAAE,EAAEpD,KAAKnB,OAAO,CAAC,OAAO,UAAU,MAAM,CAAC,EAE9E8E,IAAI,CAAC,KACR,CAAC,gDAAgD,EAAErF,eAAeG,IAAI,CAAC,CAAC,CAAC;IAE7E;IAEA,MAAMmK,aAAapH,CAAAA,0BAAAA,OAAQ2G,MAAM,IAAGD,mBAAmB1G,OAAO2G,MAAM,IAAI;IAExE,MAAM/B,OACJ,CAAC,mDAAmD,CAAC,GACrD,CAAC,sEAAsE,CAAC,GACxE,uEAAuE;IACvE,sEAAsE;IACtE,oDAAoD;IACpD,CAAC,iDAAiD,CAAC,GACnD,CAAC,4DAA4D,CAAC,GAC9D,CAAC,iFAAiF,CAAC,GACnF,CAAC,OAAO,EAAEzH,gBAAgB+F,IAAIzD,UAAU,eAAe,CAAC,GACxD,CAAC,2DAA2D,CAAC,GAC7DsG,gBACA,CAAC,0GAA0G,CAAC,GAC5G/G,IACE,CAAC,wIAAwI,CAAC,GACxIyH,aACA1I,OACAqJ,aACA,CAAC,QAAQ,CAAC,EACZ,uBAEF,CAAC,sBAAsB,CAAC;IAE1B,OAAO;QAAExC;QAAMzD,MAAM8B,UAAUd,IAAI,CAAC;IAAQ;AAC9C"}