@aglyn/tenant-data-admin 1.0.0-beta.173 → 1.0.0-beta.175

package/src/lib/server/platform-marketing-consent.d.ts

@@ -49,6 +49,7 @@
  * is the operator's.
  */
 import { type PlatformMarketingConsentDecision, type PlatformMarketingConsentSourceKind, type PlatformMarketingConsentState } from '@aglyn/aglyn/app-utils/platform-marketing-consent';
+import { type MarketingBasis, type MarketingConsentAssertedBy, type MarketingConsentReason, type MarketingConsentVerdict } from '@aglyn/aglyn/app-utils/marketing-consent';
 import { upsertHostContact } from './upsert-contact';
 /**
  * The variable naming the host whose contacts receive product-marketing
@@ -131,3 +132,70 @@ export declare function snoozePlatformMarketingPrompt(uid: string, options?: {
 export declare function readPlatformMarketingConsentForUser(uid: string, options?: {
     firestore?: any;
 }): Promise<PlatformMarketingConsentState>;
+/** An entry on one of the two lists every campaign send passes. */
+export interface PlatformMarketingSuppression {
+    /** `site`: the marketing site's own list. `platform`: every sender's. */
+    list: 'site' | 'platform';
+    /** `unsubscribe` on the site list; `bounce`, `complaint` or `staff` platform-wide. */
+    reason: string;
+}
+/**
+ * What the operator's own product email would decide about one address
+ * (AGL-3292), read the way a campaign from the marketing site reads it.
+ *
+ * The decision the person made lives on `users/{uid}`, and nothing a send
+ * does looks there. A campaign from the configured marketing site reads the
+ * CONTACT `recordPlatformMarketingConsent` wrote into that site's
+ * organization — its basis for the site, under the organization's policy —
+ * and then drops anybody on either suppression list. Nothing syncs the two
+ * afterwards: an unsubscribe link writes a suppression and leaves both
+ * consent records as they were. So a staff reader asking "may we email
+ * them?" needs this half, and needs it from the sender's own readers — the
+ * same basis read, consent group, policy and lists — or it answers a
+ * question no send asks.
+ */
+export type PlatformMarketingReach = 
+/** No marketing site is configured — a self-hosted install. */
+{
+    status: 'unconfigured';
+}
+/** The account carries no address a contact could be keyed on. */
+ | {
+    status: 'no-email';
+}
+/** A read failed. Nothing about the person follows from it. */
+ | {
+    status: 'unreadable';
+    hostId: string;
+} | {
+    status: 'read';
+    hostId: string;
+    orgId: string;
+    orgSlug: string | null;
+    /** `null` when the operator's CRM holds no contact for the address. */
+    contactId: string | null;
+    basis: MarketingBasis;
+    basisAtMs: number | null;
+    /** Whose act the basis is — a person's own, or an operator's assertion. */
+    assertedBy: MarketingConsentAssertedBy | null;
+    /** Which door recorded the basis (`console-signup`, a form, a backfill). */
+    basisKind: string | null;
+    /** The consent rule's answer alone, before either list is consulted. */
+    verdict: MarketingConsentVerdict;
+    reason: MarketingConsentReason;
+    /** The list that stops every send to the address, when one does. */
+    suppression: PlatformMarketingSuppression | null;
+};
+/**
+ * Reads {@link PlatformMarketingReach} for an address.
+ *
+ * Never throws: a failed read is `unreadable`, which the staff page shows as
+ * unknown — never as "no consent", which would be a claim about the person.
+ */
+export declare function readPlatformMarketingReach(input: {
+    email: string | null | undefined;
+    /** Injectable for tests; defaults to {@link platformMarketingHostId}. */
+    hostId?: string | null;
+    /** Injectable for tests; defaults to the admin app's Firestore. */
+    firestore?: any;
+}): Promise<PlatformMarketingReach>;

package/src/lib/server/platform-marketing-consent.js

@@ -48,7 +48,11 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * `platform-marketing-host.ts` gives: nothing in the code knows which site
  * is the operator's.
  */ import { isPlatformMarketingConsentDecision, isPlatformMarketingConsentSourceKind, platformMarketingConsentSource, platformMarketingUserFields, readPlatformMarketingConsent, USER_MARKETING_PROMPT_DISMISSED_AT_FIELD } from "@aglyn/aglyn/app-utils/platform-marketing-consent";
+import { marketingConsentDecision, readMarketingBasis, resolveMarketingConsentPolicy } from "@aglyn/aglyn/app-utils/marketing-consent";
+import { findContactByEmail } from "./contact-email-index.js";
+import { EMAIL_SUPPRESSIONS_COLLECTION, emailSuppressionKey, HOST_SUPPRESSIONS_SUBCOLLECTION } from "./email-suppression.js";
 import firebaseAdmin from "./firebase-admin.js";
+import { consentGroupForSite, getOrgForHost, orgDataCollectionForHost } from "./organizations.js";
 import { upsertHostContact } from "./upsert-contact.js";
 const firestore = ()=>firebaseAdmin.app().firestore();
 /**
@@ -205,5 +209,90 @@ const firestore = ()=>firebaseAdmin.app().firestore();
     const snapshot = await ((_options_firestore = options.firestore) != null ? _options_firestore : firestore()).collection('users').doc(trimmed).get();
     return readPlatformMarketingConsent((_ref = snapshot == null ? void 0 : (_snapshot_data = snapshot.data) == null ? void 0 : _snapshot_data.call(snapshot)) != null ? _ref : null);
 }
+/**
+ * The entry that suppresses `email` for sends from `hostId`, if any.
+ *
+ * The site's own list first, because it is the one a person puts themselves
+ * on from this sender's footer; the platform list second. The same two reads
+ * `filterSendableForHost` makes: a site entry suppresses by existing, and a
+ * platform entry until it is released.
+ */ async function readPlatformMarketingSuppression(db, hostId, email) {
+    const key = emailSuppressionKey(email);
+    if (!key) return null;
+    const [site, platform] = await Promise.all([
+        db.collection('hosts').doc(hostId).collection(HOST_SUPPRESSIONS_SUBCOLLECTION).doc(key).get(),
+        db.collection(EMAIL_SUPPRESSIONS_COLLECTION).doc(key).get()
+    ]);
+    if (site == null ? void 0 : site.exists) {
+        var _site_get;
+        return {
+            list: 'site',
+            reason: String((_site_get = site.get('reason')) != null ? _site_get : 'unsubscribe')
+        };
+    }
+    if ((platform == null ? void 0 : platform.exists) && !platform.get('releasedAt')) {
+        var _platform_get;
+        return {
+            list: 'platform',
+            reason: String((_platform_get = platform.get('reason')) != null ? _platform_get : 'staff')
+        };
+    }
+    return null;
+}
+/**
+ * Reads {@link PlatformMarketingReach} for an address.
+ *
+ * Never throws: a failed read is `unreadable`, which the staff page shows as
+ * unknown — never as "no consent", which would be a claim about the person.
+ */ export async function readPlatformMarketingReach(input) {
+    var _input_email, _input_firestore;
+    const hostId = input.hostId === undefined ? platformMarketingHostId() : input.hostId;
+    if (!hostId) return {
+        status: 'unconfigured'
+    };
+    const email = String((_input_email = input.email) != null ? _input_email : '').trim().toLowerCase();
+    if (!email) return {
+        status: 'no-email'
+    };
+    const db = (_input_firestore = input.firestore) != null ? _input_firestore : firestore();
+    try {
+        var _ref, _ref1, _ref2;
+        var _contact_data, _record_source;
+        const owner = await getOrgForHost(hostId);
+        if (!owner) return {
+            status: 'unreadable',
+            hostId
+        };
+        const org = owner.org;
+        const [contact, group, suppression] = await Promise.all([
+            // Through the org-data seam, as the capture door finds the same row.
+            orgDataCollectionForHost(hostId, 'contacts').then((contacts)=>findContactByEmail(contacts, email)),
+            consentGroupForSite(hostId, org),
+            readPlatformMarketingSuppression(db, hostId, email)
+        ]);
+        const record = readMarketingBasis((_ref = contact == null ? void 0 : (_contact_data = contact.data) == null ? void 0 : _contact_data.call(contact)) != null ? _ref : null, group);
+        const decision = marketingConsentDecision(record, resolveMarketingConsentPolicy(org['marketingConsentPolicy']));
+        return {
+            status: 'read',
+            hostId,
+            orgId: owner.orgId,
+            orgSlug: typeof org['slug'] === 'string' ? org['slug'] : null,
+            contactId: (_ref1 = contact == null ? void 0 : contact.id) != null ? _ref1 : null,
+            basis: record.basis,
+            basisAtMs: record.basisAtMs,
+            assertedBy: record.assertedBy,
+            basisKind: (_ref2 = (_record_source = record.source) == null ? void 0 : _record_source.kind) != null ? _ref2 : null,
+            verdict: decision.verdict,
+            reason: decision.reason,
+            suppression
+        };
+    } catch (error) {
+        console.error('[platform-marketing-consent] reach read failed', error);
+        return {
+            status: 'unreadable',
+            hostId
+        };
+    }
+}
 
 //# sourceMappingURL=platform-marketing-consent.js.map

package/src/lib/server/platform-marketing-consent.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/platform-marketing-consent.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The record a console door writes when a person decides about the\n * platform's own product email (AGL-3185).\n *\n * ## Two documents, one decision\n *\n * The decision goes onto the person's own `users/{uid}` first — the console\n * shows the preference from there, and it must not depend on the operator's\n * CRM accepting a row — and then onto the operator's marketing contact for\n * the same address through `upsertHostContact`, which is every other capture\n * door's path and the only one the send-time consent join reads. The contact\n * half carries the decision AND its provenance, so a campaign's audience\n * count reports this basis as the person's own click and never as something\n * asserted on their behalf.\n *\n * ## Server-side, because the client cannot and should not\n *\n * The sign-up page is a client of the person's own project; the operator's\n * marketing org is somebody else's data. Only the Admin SDK writes there, and\n * only after the person's ID token has been verified by the route in front\n * of this module. The user-document half could be a client write — the rules\n * make it owner-writable — but a mirror the client writes and the server\n * reads back is two writers of one fact, so both halves are written here.\n *\n * ## Which host, and why it is a setting\n *\n * The marketing host is the deployment's, not the code's: this repository is\n * what a self-hosted install runs, and an install with no product audience of\n * its own has nowhere for a contact to go. `PLATFORM_MARKETING_HOST_ID` names\n * it, and when it is unset the decision is recorded on the person's document\n * alone. No hostname or document id is hardcoded here for the same reason\n * `platform-marketing-host.ts` gives: nothing in the code knows which site\n * is the operator's.\n */\n\nimport {\n  isPlatformMarketingConsentDecision,\n  isPlatformMarketingConsentSourceKind,\n  type PlatformMarketingConsentDecision,\n  type PlatformMarketingConsentSourceKind,\n  type PlatformMarketingConsentState,\n  platformMarketingConsentSource,\n  platformMarketingUserFields,\n  readPlatformMarketingConsent,\n  USER_MARKETING_PROMPT_DISMISSED_AT_FIELD,\n} from '@aglyn/aglyn/app-utils/platform-marketing-consent'\nimport firebaseAdmin from './firebase-admin'\nimport { upsertHostContact } from './upsert-contact'\n\nconst firestore = () => firebaseAdmin.app().firestore()\n\n/**\n * The variable naming the host whose contacts receive product-marketing\n * consent — the operator's own marketing site. Unset on a self-hosted\n * install, and honored as \"record the preference, capture no contact\".\n */\nexport const PLATFORM_MARKETING_HOST_ID_ENV = 'PLATFORM_MARKETING_HOST_ID'\n\n/**\n * The configured marketing host, or `null` when the deployment names none.\n *\n * Read at call time rather than at module load, so a test can set it and a\n * process that started without it picks up a later value the same way every\n * other runtime setting here does.\n */\nexport function platformMarketingHostId(): string | null {\n  const value = String(process.env.PLATFORM_MARKETING_HOST_ID ?? '').trim()\n  return value || null\n}\n\n/** What became of the contact half of the record. */\nexport type PlatformMarketingContactOutcome =\n  | { status: 'recorded'; contactId: string; created: boolean }\n  /** No marketing host is configured — a self-hosted install. */\n  | { status: 'unconfigured' }\n  /** The account carries no address a contact could be keyed on. */\n  | { status: 'no-email' }\n  /** The capture door refused the row — its band, an erasure, or an error. */\n  | { status: 'refused'; reason: string }\n\nexport interface RecordPlatformMarketingConsentInput {\n  uid: string\n  /** The account's address, from the verified token. */\n  email: string | null | undefined\n  /** The name the token carries, for an account whose document holds none. */\n  name?: string | null\n  decision: PlatformMarketingConsentDecision\n  source: PlatformMarketingConsentSourceKind\n  /** The wording version the door showed, stamped by the route. */\n  textVersion: string\n  /** Injectable for tests; defaults to the clock. */\n  now?: number\n  /** Injectable for tests; defaults to the admin app's Firestore. */\n  firestore?: any\n  /** Injectable for tests; defaults to {@link platformMarketingHostId}. */\n  hostId?: string | null\n  /** Injectable for tests; defaults to the real capture door. */\n  upsert?: typeof upsertHostContact\n}\n\nexport interface RecordPlatformMarketingConsentResult {\n  /** The timestamp both documents carry. */\n  atMs: number\n  contact: PlatformMarketingContactOutcome\n}\n\n/**\n * The name the person's own document holds, else the one the caller has.\n *\n * The sign-up form writes `firstName`/`lastName` onto the document; a Google\n * account carries its name on the token instead. Either is the name the\n * contact row should show, and a blank is left blank rather than invented.\n */\nfunction accountName(\n  snapshot: { get?: (field: string) => unknown } | null | undefined,\n  fallback: string | null | undefined,\n): string | undefined {\n  const first = String(snapshot?.get?.('firstName') ?? '').trim()\n  const last = String(snapshot?.get?.('lastName') ?? '').trim()\n  const stored = [first, last].filter(Boolean).join(' ')\n  return stored || String(fallback ?? '').trim() || undefined\n}\n\n/**\n * Records a decision on both documents.\n *\n * Loud on bad input, like `recordLegalAcceptance`: a decision that cannot be\n * attributed to an account, a door and a wording is not a record of anything.\n * Quiet on the contact half — a refused row is returned, not thrown — because\n * the person's own preference has already been recorded by then, and the\n * operator's CRM band is not a reason to tell them their choice failed.\n */\nexport async function recordPlatformMarketingConsent(\n  input: RecordPlatformMarketingConsentInput,\n): Promise<RecordPlatformMarketingConsentResult> {\n  const uid = String(input.uid ?? '').trim()\n  if (!uid) throw new Error('recordPlatformMarketingConsent: uid is required')\n  if (!isPlatformMarketingConsentDecision(input.decision)) {\n    throw new Error('recordPlatformMarketingConsent: decision is required')\n  }\n  if (!isPlatformMarketingConsentSourceKind(input.source)) {\n    throw new Error('recordPlatformMarketingConsent: source is required')\n  }\n  const textVersion = String(input.textVersion ?? '').trim()\n  if (!textVersion) {\n    throw new Error('recordPlatformMarketingConsent: textVersion is required')\n  }\n\n  const atMs = input.now ?? Date.now()\n  const source = platformMarketingConsentSource({\n    kind: input.source,\n    decision: input.decision,\n    uid,\n    atMs,\n    textVersion,\n  })\n\n  const userRef = (input.firestore ?? firestore()).collection('users').doc(uid)\n  const snapshot = await userRef.get()\n  await userRef.set(\n    platformMarketingUserFields({ decision: input.decision, atMs, source }),\n    { merge: true },\n  )\n\n  const hostId =\n    input.hostId === undefined ? platformMarketingHostId() : input.hostId\n  if (!hostId) return { atMs, contact: { status: 'unconfigured' } }\n  const email = String(input.email ?? '').trim()\n  if (!email) return { atMs, contact: { status: 'no-email' } }\n\n  const name = accountName(snapshot, input.name)\n  const verdict = await (input.upsert ?? upsertHostContact)({\n    hostId,\n    email,\n    ...(name ? { name } : {}),\n    source: 'account',\n    // The sentence the provenance carries is also the timeline row's: what\n    // the person did, in the words an auditor reads.\n    interaction: { atMs, summary: source.reason },\n    ...(input.decision === 'granted'\n      ? { marketingConsent: true }\n      : { declineMarketingConsent: true }),\n    marketingConsentSource: source,\n    // An account on the platform is at least a lead for the platform's own\n    // CRM, whichever way the marketing decision went; the floor never moves\n    // a customer back.\n    initialLifecycleStage: 'lead',\n  })\n  if ('refused' in verdict) {\n    return { atMs, contact: { status: 'refused', reason: verdict.refused } }\n  }\n  return {\n    atMs,\n    contact: {\n      status: 'recorded',\n      contactId: verdict.contactId,\n      created: verdict.created,\n    },\n  }\n}\n\n/**\n * Stamps a prompt dismissal — no decision — so the console stays quiet for\n * the snooze window and asks once more after it.\n */\nexport async function snoozePlatformMarketingPrompt(\n  uid: string,\n  options: { now?: number; firestore?: any } = {},\n): Promise<{ atMs: number }> {\n  const trimmed = String(uid ?? '').trim()\n  if (!trimmed) throw new Error('snoozePlatformMarketingPrompt: uid is required')\n  const atMs = options.now ?? Date.now()\n  await (options.firestore ?? firestore())\n    .collection('users')\n    .doc(trimmed)\n    .set({ [USER_MARKETING_PROMPT_DISMISSED_AT_FIELD]: atMs }, { merge: true })\n  return { atMs }\n}\n\n/** The decision the person's own document holds, for the console to show. */\nexport async function readPlatformMarketingConsentForUser(\n  uid: string,\n  options: { firestore?: any } = {},\n): Promise<PlatformMarketingConsentState> {\n  const trimmed = String(uid ?? '').trim()\n  if (!trimmed) throw new Error('readPlatformMarketingConsentForUser: uid is required')\n  const snapshot = await (options.firestore ?? firestore())\n    .collection('users')\n    .doc(trimmed)\n    .get()\n  return readPlatformMarketingConsent(\n    (snapshot?.data?.() as Record<string, unknown> | undefined) ?? null,\n  )\n}\n"],"names":["isPlatformMarketingConsentDecision","isPlatformMarketingConsentSourceKind","platformMarketingConsentSource","platformMarketingUserFields","readPlatformMarketingConsent","USER_MARKETING_PROMPT_DISMISSED_AT_FIELD","firebaseAdmin","upsertHostContact","firestore","app","PLATFORM_MARKETING_HOST_ID_ENV","platformMarketingHostId","process","value","String","env","PLATFORM_MARKETING_HOST_ID","trim","accountName","snapshot","fallback","first","get","last","stored","filter","Boolean","join","undefined","recordPlatformMarketingConsent","input","uid","Error","decision","source","textVersion","atMs","now","Date","kind","userRef","collection","doc","set","merge","hostId","contact","status","email","name","verdict","upsert","interaction","summary","reason","marketingConsent","declineMarketingConsent","marketingConsentSource","initialLifecycleStage","refused","contactId","created","snoozePlatformMarketingPrompt","options","trimmed","readPlatformMarketingConsentForUser","data"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCC,GAED,SACEA,kCAAkC,EAClCC,oCAAoC,EAIpCC,8BAA8B,EAC9BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,wCAAwC,QACnC,oDAAmD;AAC1D,OAAOC,mBAAmB,sBAAkB;AAC5C,SAASC,iBAAiB,QAAQ,sBAAkB;AAEpD,MAAMC,YAAY,IAAMF,cAAcG,GAAG,GAAGD,SAAS;AAErD;;;;CAIC,GACD,OAAO,MAAME,iCAAiC,6BAA4B;AAE1E;;;;;;CAMC,GACD,OAAO,SAASC;QACOC;IAArB,MAAMC,QAAQC,QAAOF,0CAAAA,QAAQG,GAAG,CAACC,0BAA0B,YAAtCJ,0CAA0C,IAAIK,IAAI;IACvE,OAAOJ,SAAS;AAClB;AAsCA;;;;;;CAMC,GACD,SAASK,YACPC,QAAiE,EACjEC,QAAmC;;QAEdD,eACDA;IADpB,MAAME,QAAQP,eAAOK,6BAAAA,gBAAAA,SAAUG,GAAG,qBAAbH,mBAAAA,UAAgB,+BAAgB,IAAIF,IAAI;IAC7D,MAAMM,OAAOT,gBAAOK,6BAAAA,iBAAAA,SAAUG,GAAG,qBAAbH,oBAAAA,UAAgB,+BAAe,IAAIF,IAAI;IAC3D,MAAMO,SAAS;QAACH;QAAOE;KAAK,CAACE,MAAM,CAACC,SAASC,IAAI,CAAC;IAClD,OAAOH,UAAUV,OAAOM,mBAAAA,WAAY,IAAIH,IAAI,MAAMW;AACpD;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeC,+BACpBC,KAA0C;QAEvBA,YAQQA,oBAKdA,YASIA,kBAUIA,cAIEA;IApCvB,MAAMC,MAAMjB,QAAOgB,aAAAA,MAAMC,GAAG,YAATD,aAAa,IAAIb,IAAI;IACxC,IAAI,CAACc,KAAK,MAAM,IAAIC,MAAM;IAC1B,IAAI,CAAChC,mCAAmC8B,MAAMG,QAAQ,GAAG;QACvD,MAAM,IAAID,MAAM;IAClB;IACA,IAAI,CAAC/B,qCAAqC6B,MAAMI,MAAM,GAAG;QACvD,MAAM,IAAIF,MAAM;IAClB;IACA,MAAMG,cAAcrB,QAAOgB,qBAAAA,MAAMK,WAAW,YAAjBL,qBAAqB,IAAIb,IAAI;IACxD,IAAI,CAACkB,aAAa;QAChB,MAAM,IAAIH,MAAM;IAClB;IAEA,MAAMI,QAAON,aAAAA,MAAMO,GAAG,YAATP,aAAaQ,KAAKD,GAAG;IAClC,MAAMH,SAAShC,+BAA+B;QAC5CqC,MAAMT,MAAMI,MAAM;QAClBD,UAAUH,MAAMG,QAAQ;QACxBF;QACAK;QACAD;IACF;IAEA,MAAMK,UAAU,EAACV,mBAAAA,MAAMtB,SAAS,YAAfsB,mBAAmBtB,aAAaiC,UAAU,CAAC,SAASC,GAAG,CAACX;IACzE,MAAMZ,WAAW,MAAMqB,QAAQlB,GAAG;IAClC,MAAMkB,QAAQG,GAAG,CACfxC,4BAA4B;QAAE8B,UAAUH,MAAMG,QAAQ;QAAEG;QAAMF;IAAO,IACrE;QAAEU,OAAO;IAAK;IAGhB,MAAMC,SACJf,MAAMe,MAAM,KAAKjB,YAAYjB,4BAA4BmB,MAAMe,MAAM;IACvE,IAAI,CAACA,QAAQ,OAAO;QAAET;QAAMU,SAAS;YAAEC,QAAQ;QAAe;IAAE;IAChE,MAAMC,QAAQlC,QAAOgB,eAAAA,MAAMkB,KAAK,YAAXlB,eAAe,IAAIb,IAAI;IAC5C,IAAI,CAAC+B,OAAO,OAAO;QAAEZ;QAAMU,SAAS;YAAEC,QAAQ;QAAW;IAAE;IAE3D,MAAME,OAAO/B,YAAYC,UAAUW,MAAMmB,IAAI;IAC7C,MAAMC,UAAU,MAAM,EAACpB,gBAAAA,MAAMqB,MAAM,YAAZrB,gBAAgBvB,mBAAmB;QACxDsC;QACAG;OACIC,OAAO;QAAEA;IAAK,IAAI,CAAC;QACvBf,QAAQ;QACR,uEAAuE;QACvE,iDAAiD;QACjDkB,aAAa;YAAEhB;YAAMiB,SAASnB,OAAOoB,MAAM;QAAC;OACxCxB,MAAMG,QAAQ,KAAK,YACnB;QAAEsB,kBAAkB;IAAK,IACzB;QAAEC,yBAAyB;IAAK;QACpCC,wBAAwBvB;QACxB,uEAAuE;QACvE,wEAAwE;QACxE,mBAAmB;QACnBwB,uBAAuB;;IAEzB,IAAI,aAAaR,SAAS;QACxB,OAAO;YAAEd;YAAMU,SAAS;gBAAEC,QAAQ;gBAAWO,QAAQJ,QAAQS,OAAO;YAAC;QAAE;IACzE;IACA,OAAO;QACLvB;QACAU,SAAS;YACPC,QAAQ;YACRa,WAAWV,QAAQU,SAAS;YAC5BC,SAASX,QAAQW,OAAO;QAC1B;IACF;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeC,8BACpB/B,GAAW,EACXgC,UAA6C,CAAC,CAAC;QAIlCA,cACNA;IAHP,MAAMC,UAAUlD,OAAOiB,cAAAA,MAAO,IAAId,IAAI;IACtC,IAAI,CAAC+C,SAAS,MAAM,IAAIhC,MAAM;IAC9B,MAAMI,QAAO2B,eAAAA,QAAQ1B,GAAG,YAAX0B,eAAezB,KAAKD,GAAG;IACpC,MAAM,EAAC0B,qBAAAA,QAAQvD,SAAS,YAAjBuD,qBAAqBvD,aACzBiC,UAAU,CAAC,SACXC,GAAG,CAACsB,SACJrB,GAAG,CAAC;QAAE,CAACtC,yCAAyC,EAAE+B;IAAK,GAAG;QAAEQ,OAAO;IAAK;IAC3E,OAAO;QAAER;IAAK;AAChB;AAEA,2EAA2E,GAC3E,OAAO,eAAe6B,oCACpBlC,GAAW,EACXgC,UAA+B,CAAC,CAAC;QAITA;QAKrB5C;IAPH,MAAM6C,UAAUlD,OAAOiB,cAAAA,MAAO,IAAId,IAAI;IACtC,IAAI,CAAC+C,SAAS,MAAM,IAAIhC,MAAM;IAC9B,MAAMb,WAAW,MAAM,EAAC4C,qBAAAA,QAAQvD,SAAS,YAAjBuD,qBAAqBvD,aAC1CiC,UAAU,CAAC,SACXC,GAAG,CAACsB,SACJ1C,GAAG;IACN,OAAOlB,qCACJe,6BAAAA,iBAAAA,SAAU+C,IAAI,qBAAd/C,oBAAAA,4BAA8D;AAEnE"}
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/platform-marketing-consent.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The record a console door writes when a person decides about the\n * platform's own product email (AGL-3185).\n *\n * ## Two documents, one decision\n *\n * The decision goes onto the person's own `users/{uid}` first — the console\n * shows the preference from there, and it must not depend on the operator's\n * CRM accepting a row — and then onto the operator's marketing contact for\n * the same address through `upsertHostContact`, which is every other capture\n * door's path and the only one the send-time consent join reads. The contact\n * half carries the decision AND its provenance, so a campaign's audience\n * count reports this basis as the person's own click and never as something\n * asserted on their behalf.\n *\n * ## Server-side, because the client cannot and should not\n *\n * The sign-up page is a client of the person's own project; the operator's\n * marketing org is somebody else's data. Only the Admin SDK writes there, and\n * only after the person's ID token has been verified by the route in front\n * of this module. The user-document half could be a client write — the rules\n * make it owner-writable — but a mirror the client writes and the server\n * reads back is two writers of one fact, so both halves are written here.\n *\n * ## Which host, and why it is a setting\n *\n * The marketing host is the deployment's, not the code's: this repository is\n * what a self-hosted install runs, and an install with no product audience of\n * its own has nowhere for a contact to go. `PLATFORM_MARKETING_HOST_ID` names\n * it, and when it is unset the decision is recorded on the person's document\n * alone. No hostname or document id is hardcoded here for the same reason\n * `platform-marketing-host.ts` gives: nothing in the code knows which site\n * is the operator's.\n */\n\nimport {\n  isPlatformMarketingConsentDecision,\n  isPlatformMarketingConsentSourceKind,\n  type PlatformMarketingConsentDecision,\n  type PlatformMarketingConsentSourceKind,\n  type PlatformMarketingConsentState,\n  platformMarketingConsentSource,\n  platformMarketingUserFields,\n  readPlatformMarketingConsent,\n  USER_MARKETING_PROMPT_DISMISSED_AT_FIELD,\n} from '@aglyn/aglyn/app-utils/platform-marketing-consent'\nimport {\n  marketingConsentDecision,\n  type MarketingBasis,\n  type MarketingConsentAssertedBy,\n  type MarketingConsentReason,\n  type MarketingConsentVerdict,\n  readMarketingBasis,\n  resolveMarketingConsentPolicy,\n} from '@aglyn/aglyn/app-utils/marketing-consent'\nimport { findContactByEmail } from './contact-email-index'\nimport {\n  EMAIL_SUPPRESSIONS_COLLECTION,\n  emailSuppressionKey,\n  HOST_SUPPRESSIONS_SUBCOLLECTION,\n} from './email-suppression'\nimport firebaseAdmin from './firebase-admin'\nimport {\n  consentGroupForSite,\n  getOrgForHost,\n  orgDataCollectionForHost,\n} from './organizations'\nimport { upsertHostContact } from './upsert-contact'\n\nconst firestore = () => firebaseAdmin.app().firestore()\n\n/**\n * The variable naming the host whose contacts receive product-marketing\n * consent — the operator's own marketing site. Unset on a self-hosted\n * install, and honored as \"record the preference, capture no contact\".\n */\nexport const PLATFORM_MARKETING_HOST_ID_ENV = 'PLATFORM_MARKETING_HOST_ID'\n\n/**\n * The configured marketing host, or `null` when the deployment names none.\n *\n * Read at call time rather than at module load, so a test can set it and a\n * process that started without it picks up a later value the same way every\n * other runtime setting here does.\n */\nexport function platformMarketingHostId(): string | null {\n  const value = String(process.env.PLATFORM_MARKETING_HOST_ID ?? '').trim()\n  return value || null\n}\n\n/** What became of the contact half of the record. */\nexport type PlatformMarketingContactOutcome =\n  | { status: 'recorded'; contactId: string; created: boolean }\n  /** No marketing host is configured — a self-hosted install. */\n  | { status: 'unconfigured' }\n  /** The account carries no address a contact could be keyed on. */\n  | { status: 'no-email' }\n  /** The capture door refused the row — its band, an erasure, or an error. */\n  | { status: 'refused'; reason: string }\n\nexport interface RecordPlatformMarketingConsentInput {\n  uid: string\n  /** The account's address, from the verified token. */\n  email: string | null | undefined\n  /** The name the token carries, for an account whose document holds none. */\n  name?: string | null\n  decision: PlatformMarketingConsentDecision\n  source: PlatformMarketingConsentSourceKind\n  /** The wording version the door showed, stamped by the route. */\n  textVersion: string\n  /** Injectable for tests; defaults to the clock. */\n  now?: number\n  /** Injectable for tests; defaults to the admin app's Firestore. */\n  firestore?: any\n  /** Injectable for tests; defaults to {@link platformMarketingHostId}. */\n  hostId?: string | null\n  /** Injectable for tests; defaults to the real capture door. */\n  upsert?: typeof upsertHostContact\n}\n\nexport interface RecordPlatformMarketingConsentResult {\n  /** The timestamp both documents carry. */\n  atMs: number\n  contact: PlatformMarketingContactOutcome\n}\n\n/**\n * The name the person's own document holds, else the one the caller has.\n *\n * The sign-up form writes `firstName`/`lastName` onto the document; a Google\n * account carries its name on the token instead. Either is the name the\n * contact row should show, and a blank is left blank rather than invented.\n */\nfunction accountName(\n  snapshot: { get?: (field: string) => unknown } | null | undefined,\n  fallback: string | null | undefined,\n): string | undefined {\n  const first = String(snapshot?.get?.('firstName') ?? '').trim()\n  const last = String(snapshot?.get?.('lastName') ?? '').trim()\n  const stored = [first, last].filter(Boolean).join(' ')\n  return stored || String(fallback ?? '').trim() || undefined\n}\n\n/**\n * Records a decision on both documents.\n *\n * Loud on bad input, like `recordLegalAcceptance`: a decision that cannot be\n * attributed to an account, a door and a wording is not a record of anything.\n * Quiet on the contact half — a refused row is returned, not thrown — because\n * the person's own preference has already been recorded by then, and the\n * operator's CRM band is not a reason to tell them their choice failed.\n */\nexport async function recordPlatformMarketingConsent(\n  input: RecordPlatformMarketingConsentInput,\n): Promise<RecordPlatformMarketingConsentResult> {\n  const uid = String(input.uid ?? '').trim()\n  if (!uid) throw new Error('recordPlatformMarketingConsent: uid is required')\n  if (!isPlatformMarketingConsentDecision(input.decision)) {\n    throw new Error('recordPlatformMarketingConsent: decision is required')\n  }\n  if (!isPlatformMarketingConsentSourceKind(input.source)) {\n    throw new Error('recordPlatformMarketingConsent: source is required')\n  }\n  const textVersion = String(input.textVersion ?? '').trim()\n  if (!textVersion) {\n    throw new Error('recordPlatformMarketingConsent: textVersion is required')\n  }\n\n  const atMs = input.now ?? Date.now()\n  const source = platformMarketingConsentSource({\n    kind: input.source,\n    decision: input.decision,\n    uid,\n    atMs,\n    textVersion,\n  })\n\n  const userRef = (input.firestore ?? firestore()).collection('users').doc(uid)\n  const snapshot = await userRef.get()\n  await userRef.set(\n    platformMarketingUserFields({ decision: input.decision, atMs, source }),\n    { merge: true },\n  )\n\n  const hostId =\n    input.hostId === undefined ? platformMarketingHostId() : input.hostId\n  if (!hostId) return { atMs, contact: { status: 'unconfigured' } }\n  const email = String(input.email ?? '').trim()\n  if (!email) return { atMs, contact: { status: 'no-email' } }\n\n  const name = accountName(snapshot, input.name)\n  const verdict = await (input.upsert ?? upsertHostContact)({\n    hostId,\n    email,\n    ...(name ? { name } : {}),\n    source: 'account',\n    // The sentence the provenance carries is also the timeline row's: what\n    // the person did, in the words an auditor reads.\n    interaction: { atMs, summary: source.reason },\n    ...(input.decision === 'granted'\n      ? { marketingConsent: true }\n      : { declineMarketingConsent: true }),\n    marketingConsentSource: source,\n    // An account on the platform is at least a lead for the platform's own\n    // CRM, whichever way the marketing decision went; the floor never moves\n    // a customer back.\n    initialLifecycleStage: 'lead',\n  })\n  if ('refused' in verdict) {\n    return { atMs, contact: { status: 'refused', reason: verdict.refused } }\n  }\n  return {\n    atMs,\n    contact: {\n      status: 'recorded',\n      contactId: verdict.contactId,\n      created: verdict.created,\n    },\n  }\n}\n\n/**\n * Stamps a prompt dismissal — no decision — so the console stays quiet for\n * the snooze window and asks once more after it.\n */\nexport async function snoozePlatformMarketingPrompt(\n  uid: string,\n  options: { now?: number; firestore?: any } = {},\n): Promise<{ atMs: number }> {\n  const trimmed = String(uid ?? '').trim()\n  if (!trimmed) throw new Error('snoozePlatformMarketingPrompt: uid is required')\n  const atMs = options.now ?? Date.now()\n  await (options.firestore ?? firestore())\n    .collection('users')\n    .doc(trimmed)\n    .set({ [USER_MARKETING_PROMPT_DISMISSED_AT_FIELD]: atMs }, { merge: true })\n  return { atMs }\n}\n\n/** The decision the person's own document holds, for the console to show. */\nexport async function readPlatformMarketingConsentForUser(\n  uid: string,\n  options: { firestore?: any } = {},\n): Promise<PlatformMarketingConsentState> {\n  const trimmed = String(uid ?? '').trim()\n  if (!trimmed) throw new Error('readPlatformMarketingConsentForUser: uid is required')\n  const snapshot = await (options.firestore ?? firestore())\n    .collection('users')\n    .doc(trimmed)\n    .get()\n  return readPlatformMarketingConsent(\n    (snapshot?.data?.() as Record<string, unknown> | undefined) ?? null,\n  )\n}\n\n/** An entry on one of the two lists every campaign send passes. */\nexport interface PlatformMarketingSuppression {\n  /** `site`: the marketing site's own list. `platform`: every sender's. */\n  list: 'site' | 'platform'\n  /** `unsubscribe` on the site list; `bounce`, `complaint` or `staff` platform-wide. */\n  reason: string\n}\n\n/**\n * What the operator's own product email would decide about one address\n * (AGL-3292), read the way a campaign from the marketing site reads it.\n *\n * The decision the person made lives on `users/{uid}`, and nothing a send\n * does looks there. A campaign from the configured marketing site reads the\n * CONTACT `recordPlatformMarketingConsent` wrote into that site's\n * organization — its basis for the site, under the organization's policy —\n * and then drops anybody on either suppression list. Nothing syncs the two\n * afterwards: an unsubscribe link writes a suppression and leaves both\n * consent records as they were. So a staff reader asking \"may we email\n * them?\" needs this half, and needs it from the sender's own readers — the\n * same basis read, consent group, policy and lists — or it answers a\n * question no send asks.\n */\nexport type PlatformMarketingReach =\n  /** No marketing site is configured — a self-hosted install. */\n  | { status: 'unconfigured' }\n  /** The account carries no address a contact could be keyed on. */\n  | { status: 'no-email' }\n  /** A read failed. Nothing about the person follows from it. */\n  | { status: 'unreadable'; hostId: string }\n  | {\n      status: 'read'\n      hostId: string\n      orgId: string\n      orgSlug: string | null\n      /** `null` when the operator's CRM holds no contact for the address. */\n      contactId: string | null\n      basis: MarketingBasis\n      basisAtMs: number | null\n      /** Whose act the basis is — a person's own, or an operator's assertion. */\n      assertedBy: MarketingConsentAssertedBy | null\n      /** Which door recorded the basis (`console-signup`, a form, a backfill). */\n      basisKind: string | null\n      /** The consent rule's answer alone, before either list is consulted. */\n      verdict: MarketingConsentVerdict\n      reason: MarketingConsentReason\n      /** The list that stops every send to the address, when one does. */\n      suppression: PlatformMarketingSuppression | null\n    }\n\n/**\n * The entry that suppresses `email` for sends from `hostId`, if any.\n *\n * The site's own list first, because it is the one a person puts themselves\n * on from this sender's footer; the platform list second. The same two reads\n * `filterSendableForHost` makes: a site entry suppresses by existing, and a\n * platform entry until it is released.\n */\nasync function readPlatformMarketingSuppression(\n  db: any,\n  hostId: string,\n  email: string,\n): Promise<PlatformMarketingSuppression | null> {\n  const key = emailSuppressionKey(email)\n  if (!key) return null\n  const [site, platform] = await Promise.all([\n    db\n      .collection('hosts')\n      .doc(hostId)\n      .collection(HOST_SUPPRESSIONS_SUBCOLLECTION)\n      .doc(key)\n      .get(),\n    db.collection(EMAIL_SUPPRESSIONS_COLLECTION).doc(key).get(),\n  ])\n  if (site?.exists) {\n    return { list: 'site', reason: String(site.get('reason') ?? 'unsubscribe') }\n  }\n  if (platform?.exists && !platform.get('releasedAt')) {\n    return { list: 'platform', reason: String(platform.get('reason') ?? 'staff') }\n  }\n  return null\n}\n\n/**\n * Reads {@link PlatformMarketingReach} for an address.\n *\n * Never throws: a failed read is `unreadable`, which the staff page shows as\n * unknown — never as \"no consent\", which would be a claim about the person.\n */\nexport async function readPlatformMarketingReach(input: {\n  email: string | null | undefined\n  /** Injectable for tests; defaults to {@link platformMarketingHostId}. */\n  hostId?: string | null\n  /** Injectable for tests; defaults to the admin app's Firestore. */\n  firestore?: any\n}): Promise<PlatformMarketingReach> {\n  const hostId =\n    input.hostId === undefined ? platformMarketingHostId() : input.hostId\n  if (!hostId) return { status: 'unconfigured' }\n  const email = String(input.email ?? '').trim().toLowerCase()\n  if (!email) return { status: 'no-email' }\n  const db = input.firestore ?? firestore()\n  try {\n    const owner = await getOrgForHost(hostId)\n    if (!owner) return { status: 'unreadable', hostId }\n    const org = owner.org as Record<string, unknown>\n    const [contact, group, suppression] = await Promise.all([\n      // Through the org-data seam, as the capture door finds the same row.\n      orgDataCollectionForHost(hostId, 'contacts').then((contacts) =>\n        findContactByEmail(contacts, email),\n      ),\n      consentGroupForSite(hostId, org),\n      readPlatformMarketingSuppression(db, hostId, email),\n    ])\n    const record = readMarketingBasis(\n      (contact?.data?.() as Record<string, unknown> | undefined) ?? null,\n      group,\n    )\n    const decision = marketingConsentDecision(\n      record,\n      resolveMarketingConsentPolicy(org['marketingConsentPolicy']),\n    )\n    return {\n      status: 'read',\n      hostId,\n      orgId: owner.orgId,\n      orgSlug: typeof org['slug'] === 'string' ? org['slug'] : null,\n      contactId: contact?.id ?? null,\n      basis: record.basis,\n      basisAtMs: record.basisAtMs,\n      assertedBy: record.assertedBy,\n      basisKind: record.source?.kind ?? null,\n      verdict: decision.verdict,\n      reason: decision.reason,\n      suppression,\n    }\n  } catch (error) {\n    console.error('[platform-marketing-consent] reach read failed', error)\n    return { status: 'unreadable', hostId }\n  }\n}\n"],"names":["isPlatformMarketingConsentDecision","isPlatformMarketingConsentSourceKind","platformMarketingConsentSource","platformMarketingUserFields","readPlatformMarketingConsent","USER_MARKETING_PROMPT_DISMISSED_AT_FIELD","marketingConsentDecision","readMarketingBasis","resolveMarketingConsentPolicy","findContactByEmail","EMAIL_SUPPRESSIONS_COLLECTION","emailSuppressionKey","HOST_SUPPRESSIONS_SUBCOLLECTION","firebaseAdmin","consentGroupForSite","getOrgForHost","orgDataCollectionForHost","upsertHostContact","firestore","app","PLATFORM_MARKETING_HOST_ID_ENV","platformMarketingHostId","process","value","String","env","PLATFORM_MARKETING_HOST_ID","trim","accountName","snapshot","fallback","first","get","last","stored","filter","Boolean","join","undefined","recordPlatformMarketingConsent","input","uid","Error","decision","source","textVersion","atMs","now","Date","kind","userRef","collection","doc","set","merge","hostId","contact","status","email","name","verdict","upsert","interaction","summary","reason","marketingConsent","declineMarketingConsent","marketingConsentSource","initialLifecycleStage","refused","contactId","created","snoozePlatformMarketingPrompt","options","trimmed","readPlatformMarketingConsentForUser","data","readPlatformMarketingSuppression","db","key","site","platform","Promise","all","exists","list","readPlatformMarketingReach","toLowerCase","record","owner","org","group","suppression","then","contacts","orgId","orgSlug","id","basis","basisAtMs","assertedBy","basisKind","error","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCC,GAED,SACEA,kCAAkC,EAClCC,oCAAoC,EAIpCC,8BAA8B,EAC9BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,wCAAwC,QACnC,oDAAmD;AAC1D,SACEC,wBAAwB,EAKxBC,kBAAkB,EAClBC,6BAA6B,QACxB,2CAA0C;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SACEC,6BAA6B,EAC7BC,mBAAmB,EACnBC,+BAA+B,QAC1B,yBAAqB;AAC5B,OAAOC,mBAAmB,sBAAkB;AAC5C,SACEC,mBAAmB,EACnBC,aAAa,EACbC,wBAAwB,QACnB,qBAAiB;AACxB,SAASC,iBAAiB,QAAQ,sBAAkB;AAEpD,MAAMC,YAAY,IAAML,cAAcM,GAAG,GAAGD,SAAS;AAErD;;;;CAIC,GACD,OAAO,MAAME,iCAAiC,6BAA4B;AAE1E;;;;;;CAMC,GACD,OAAO,SAASC;QACOC;IAArB,MAAMC,QAAQC,QAAOF,0CAAAA,QAAQG,GAAG,CAACC,0BAA0B,YAAtCJ,0CAA0C,IAAIK,IAAI;IACvE,OAAOJ,SAAS;AAClB;AAsCA;;;;;;CAMC,GACD,SAASK,YACPC,QAAiE,EACjEC,QAAmC;;QAEdD,eACDA;IADpB,MAAME,QAAQP,eAAOK,6BAAAA,gBAAAA,SAAUG,GAAG,qBAAbH,mBAAAA,UAAgB,+BAAgB,IAAIF,IAAI;IAC7D,MAAMM,OAAOT,gBAAOK,6BAAAA,iBAAAA,SAAUG,GAAG,qBAAbH,oBAAAA,UAAgB,+BAAe,IAAIF,IAAI;IAC3D,MAAMO,SAAS;QAACH;QAAOE;KAAK,CAACE,MAAM,CAACC,SAASC,IAAI,CAAC;IAClD,OAAOH,UAAUV,OAAOM,mBAAAA,WAAY,IAAIH,IAAI,MAAMW;AACpD;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeC,+BACpBC,KAA0C;QAEvBA,YAQQA,oBAKdA,YASIA,kBAUIA,cAIEA;IApCvB,MAAMC,MAAMjB,QAAOgB,aAAAA,MAAMC,GAAG,YAATD,aAAa,IAAIb,IAAI;IACxC,IAAI,CAACc,KAAK,MAAM,IAAIC,MAAM;IAC1B,IAAI,CAAC1C,mCAAmCwC,MAAMG,QAAQ,GAAG;QACvD,MAAM,IAAID,MAAM;IAClB;IACA,IAAI,CAACzC,qCAAqCuC,MAAMI,MAAM,GAAG;QACvD,MAAM,IAAIF,MAAM;IAClB;IACA,MAAMG,cAAcrB,QAAOgB,qBAAAA,MAAMK,WAAW,YAAjBL,qBAAqB,IAAIb,IAAI;IACxD,IAAI,CAACkB,aAAa;QAChB,MAAM,IAAIH,MAAM;IAClB;IAEA,MAAMI,QAAON,aAAAA,MAAMO,GAAG,YAATP,aAAaQ,KAAKD,GAAG;IAClC,MAAMH,SAAS1C,+BAA+B;QAC5C+C,MAAMT,MAAMI,MAAM;QAClBD,UAAUH,MAAMG,QAAQ;QACxBF;QACAK;QACAD;IACF;IAEA,MAAMK,UAAU,EAACV,mBAAAA,MAAMtB,SAAS,YAAfsB,mBAAmBtB,aAAaiC,UAAU,CAAC,SAASC,GAAG,CAACX;IACzE,MAAMZ,WAAW,MAAMqB,QAAQlB,GAAG;IAClC,MAAMkB,QAAQG,GAAG,CACflD,4BAA4B;QAAEwC,UAAUH,MAAMG,QAAQ;QAAEG;QAAMF;IAAO,IACrE;QAAEU,OAAO;IAAK;IAGhB,MAAMC,SACJf,MAAMe,MAAM,KAAKjB,YAAYjB,4BAA4BmB,MAAMe,MAAM;IACvE,IAAI,CAACA,QAAQ,OAAO;QAAET;QAAMU,SAAS;YAAEC,QAAQ;QAAe;IAAE;IAChE,MAAMC,QAAQlC,QAAOgB,eAAAA,MAAMkB,KAAK,YAAXlB,eAAe,IAAIb,IAAI;IAC5C,IAAI,CAAC+B,OAAO,OAAO;QAAEZ;QAAMU,SAAS;YAAEC,QAAQ;QAAW;IAAE;IAE3D,MAAME,OAAO/B,YAAYC,UAAUW,MAAMmB,IAAI;IAC7C,MAAMC,UAAU,MAAM,EAACpB,gBAAAA,MAAMqB,MAAM,YAAZrB,gBAAgBvB,mBAAmB;QACxDsC;QACAG;OACIC,OAAO;QAAEA;IAAK,IAAI,CAAC;QACvBf,QAAQ;QACR,uEAAuE;QACvE,iDAAiD;QACjDkB,aAAa;YAAEhB;YAAMiB,SAASnB,OAAOoB,MAAM;QAAC;OACxCxB,MAAMG,QAAQ,KAAK,YACnB;QAAEsB,kBAAkB;IAAK,IACzB;QAAEC,yBAAyB;IAAK;QACpCC,wBAAwBvB;QACxB,uEAAuE;QACvE,wEAAwE;QACxE,mBAAmB;QACnBwB,uBAAuB;;IAEzB,IAAI,aAAaR,SAAS;QACxB,OAAO;YAAEd;YAAMU,SAAS;gBAAEC,QAAQ;gBAAWO,QAAQJ,QAAQS,OAAO;YAAC;QAAE;IACzE;IACA,OAAO;QACLvB;QACAU,SAAS;YACPC,QAAQ;YACRa,WAAWV,QAAQU,SAAS;YAC5BC,SAASX,QAAQW,OAAO;QAC1B;IACF;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeC,8BACpB/B,GAAW,EACXgC,UAA6C,CAAC,CAAC;QAIlCA,cACNA;IAHP,MAAMC,UAAUlD,OAAOiB,cAAAA,MAAO,IAAId,IAAI;IACtC,IAAI,CAAC+C,SAAS,MAAM,IAAIhC,MAAM;IAC9B,MAAMI,QAAO2B,eAAAA,QAAQ1B,GAAG,YAAX0B,eAAezB,KAAKD,GAAG;IACpC,MAAM,EAAC0B,qBAAAA,QAAQvD,SAAS,YAAjBuD,qBAAqBvD,aACzBiC,UAAU,CAAC,SACXC,GAAG,CAACsB,SACJrB,GAAG,CAAC;QAAE,CAAChD,yCAAyC,EAAEyC;IAAK,GAAG;QAAEQ,OAAO;IAAK;IAC3E,OAAO;QAAER;IAAK;AAChB;AAEA,2EAA2E,GAC3E,OAAO,eAAe6B,oCACpBlC,GAAW,EACXgC,UAA+B,CAAC,CAAC;QAITA;QAKrB5C;IAPH,MAAM6C,UAAUlD,OAAOiB,cAAAA,MAAO,IAAId,IAAI;IACtC,IAAI,CAAC+C,SAAS,MAAM,IAAIhC,MAAM;IAC9B,MAAMb,WAAW,MAAM,EAAC4C,qBAAAA,QAAQvD,SAAS,YAAjBuD,qBAAqBvD,aAC1CiC,UAAU,CAAC,SACXC,GAAG,CAACsB,SACJ1C,GAAG;IACN,OAAO5B,qCACJyB,6BAAAA,iBAAAA,SAAU+C,IAAI,qBAAd/C,oBAAAA,4BAA8D;AAEnE;AAoDA;;;;;;;CAOC,GACD,eAAegD,iCACbC,EAAO,EACPvB,MAAc,EACdG,KAAa;IAEb,MAAMqB,MAAMpE,oBAAoB+C;IAChC,IAAI,CAACqB,KAAK,OAAO;IACjB,MAAM,CAACC,MAAMC,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACzCL,GACG3B,UAAU,CAAC,SACXC,GAAG,CAACG,QACJJ,UAAU,CAACvC,iCACXwC,GAAG,CAAC2B,KACJ/C,GAAG;QACN8C,GAAG3B,UAAU,CAACzC,+BAA+B0C,GAAG,CAAC2B,KAAK/C,GAAG;KAC1D;IACD,IAAIgD,wBAAAA,KAAMI,MAAM,EAAE;YACsBJ;QAAtC,OAAO;YAAEK,MAAM;YAAQrB,QAAQxC,QAAOwD,YAAAA,KAAKhD,GAAG,CAAC,qBAATgD,YAAsB;QAAe;IAC7E;IACA,IAAIC,CAAAA,4BAAAA,SAAUG,MAAM,KAAI,CAACH,SAASjD,GAAG,CAAC,eAAe;YACTiD;QAA1C,OAAO;YAAEI,MAAM;YAAYrB,QAAQxC,QAAOyD,gBAAAA,SAASjD,GAAG,CAAC,qBAAbiD,gBAA0B;QAAS;IAC/E;IACA,OAAO;AACT;AAEA;;;;;CAKC,GACD,OAAO,eAAeK,2BAA2B9C,KAMhD;QAIsBA,cAEVA;IALX,MAAMe,SACJf,MAAMe,MAAM,KAAKjB,YAAYjB,4BAA4BmB,MAAMe,MAAM;IACvE,IAAI,CAACA,QAAQ,OAAO;QAAEE,QAAQ;IAAe;IAC7C,MAAMC,QAAQlC,QAAOgB,eAAAA,MAAMkB,KAAK,YAAXlB,eAAe,IAAIb,IAAI,GAAG4D,WAAW;IAC1D,IAAI,CAAC7B,OAAO,OAAO;QAAED,QAAQ;IAAW;IACxC,MAAMqB,MAAKtC,mBAAAA,MAAMtB,SAAS,YAAfsB,mBAAmBtB;IAC9B,IAAI;;YAaCsC,eAgBUgC;QA5Bb,MAAMC,QAAQ,MAAM1E,cAAcwC;QAClC,IAAI,CAACkC,OAAO,OAAO;YAAEhC,QAAQ;YAAcF;QAAO;QAClD,MAAMmC,MAAMD,MAAMC,GAAG;QACrB,MAAM,CAAClC,SAASmC,OAAOC,YAAY,GAAG,MAAMV,QAAQC,GAAG,CAAC;YACtD,qEAAqE;YACrEnE,yBAAyBuC,QAAQ,YAAYsC,IAAI,CAAC,CAACC,WACjDrF,mBAAmBqF,UAAUpC;YAE/B5C,oBAAoByC,QAAQmC;YAC5Bb,iCAAiCC,IAAIvB,QAAQG;SAC9C;QACD,MAAM8B,SAASjF,2BACZiD,4BAAAA,gBAAAA,QAASoB,IAAI,qBAAbpB,mBAAAA,2BAA6D,MAC9DmC;QAEF,MAAMhD,WAAWrC,yBACfkF,QACAhF,8BAA8BkF,GAAG,CAAC,yBAAyB;QAE7D,OAAO;YACLjC,QAAQ;YACRF;YACAwC,OAAON,MAAMM,KAAK;YAClBC,SAAS,OAAON,GAAG,CAAC,OAAO,KAAK,WAAWA,GAAG,CAAC,OAAO,GAAG;YACzDpB,SAAS,WAAEd,2BAAAA,QAASyC,EAAE,oBAAI;YAC1BC,OAAOV,OAAOU,KAAK;YACnBC,WAAWX,OAAOW,SAAS;YAC3BC,YAAYZ,OAAOY,UAAU;YAC7BC,SAAS,YAAEb,iBAAAA,OAAO5C,MAAM,qBAAb4C,eAAevC,IAAI,oBAAI;YAClCW,SAASjB,SAASiB,OAAO;YACzBI,QAAQrB,SAASqB,MAAM;YACvB4B;QACF;IACF,EAAE,OAAOU,OAAO;QACdC,QAAQD,KAAK,CAAC,kDAAkDA;QAChE,OAAO;YAAE7C,QAAQ;YAAcF;QAAO;IACxC;AACF"}