@aglyn/tenant-data-admin 1.0.0-beta.220 → 1.0.0-beta.222

package/src/tenancy.js

@@ -71,7 +71,6 @@ export * from "./lib/server/email-metering.js";
 // Side-effecting on purpose (AGL-2409): evaluating this module INSTALLS the
 // platform send-rate governor on `sendEmail`. Every server surface already
 // imports this barrel, so nothing has to remember to call an installer.
-export * from "./lib/server/campaign-conversion-attribution.js";
 export * from "./lib/server/email-send-rate.js";
 // Side-effecting on purpose, for the same reason (AGL-3328): evaluating this
 // module INSTALLS the deliverability preflight on `sendEmail`, so a recipient
@@ -104,6 +103,10 @@ export * from "./lib/server/operator-alerts.js";
 export * from "./lib/server/operator-health.js";
 export * from "./lib/server/org-billing.js";
 export * from "./lib/server/organizations.js";
+// Platform staff take no customer seat, and a workspace is asked to upgrade
+// as a separate step after it is handed over (AGL-3466).
+export * from "./lib/server/staff-seat.js";
+export * from "./lib/server/upgrade-proposal.js";
 export * from "./lib/server/duplicate-activity.js";
 export * from "./lib/server/duplicate-resource.js";
 export * from "./lib/server/workspace-domains.js";
@@ -129,6 +132,7 @@ export * from "./lib/server/media-storage-path.js";
 export * from "./lib/server/safe-equal.js";
 export * from "./lib/server/media-strong-digest.js";
 export * from "./lib/server/media-tombstone.js";
+export * from "./lib/server/media-delivery-regeneration.js";
 export * from "./lib/server/media-variants.js";
 export * from "./lib/server/serve-media-cdn.js";
 export * from "./lib/server/serve-plugin-fetch.js";

package/src/tenancy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/tenant/data/admin/src/tenancy.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/server/analytics-retention'\nexport * from './lib/server/api-http'\nexport * from './lib/server/api-keys'\nexport * from './lib/server/account-emails'\nexport * from './lib/server/auth-pools'\nexport * from './lib/server/client-error-report'\n// The merchant's payment account, as a contract. Its adapter is not exported:\n// a plugin asks the contract, and the doors that only need the readiness rule\n// import `@aglyn/tenant-data-admin/server/payment-provider` directly, which\n// loads no Firebase.\nexport {\n  merchantAccountIsReady,\n  merchantAccountReadiness,\n  paymentProvider,\n} from './lib/server/payment-provider'\nexport type {\n  MerchantAccountReadiness,\n  MerchantAccountReadinessInput,\n  PaymentMode,\n  PaymentProvider,\n  PaymentProviderEvent,\n} from './lib/server/payment-provider'\nexport * from './lib/server/auth-handoff'\nexport * from './lib/server/console-domains'\nexport * from './lib/server/dns-probe'\nexport * from './lib/server/sending-domains'\nexport * from './lib/server/sender-readiness'\nexport * from './lib/server/host-sending-domain'\nexport * from './lib/server/sending-domain-debt'\nexport * from './lib/server/sending-domain-recheck'\n// The hosting seam itself, so a door can ask whether this deployment is able\n// to register a name at all before it promises the caller one.\n// `workspace-domains` re-exports the pieces its own callers share with it; the\n// provider behind it is not among them.\nexport { domainProvider } from './lib/server/domain-provider'\nexport type {\n  DomainProvider,\n  DomainProviderId,\n  DomainScope,\n} from './lib/server/domain-provider'\nexport * from './lib/server/platform-domain-names'\nexport * from './lib/server/consume-once'\nexport * from './lib/server/csp-aggregate'\nexport * from './lib/server/data-storage-gate'\nexport * from './lib/server/contact-suppression'\nexport * from './lib/server/email-suppression'\n// The double opt-in quarantine, after the module whose keying it shares and\n// whose `filterTopicSendable` is the reader that makes it a quarantine rather\n// than a stored fact.\nexport * from './lib/server/topic-subscriptions'\nexport * from './lib/server/email-unsubscribe-link'\nexport * from './lib/server/email-flow-gate'\n// Side-effecting on purpose, for the reason `email-send-rate` below is:\n// evaluating this module INSTALLS the marketing gate on `sendEmail`, so the\n// unsubscribe header, the suppression check and the frequency ceiling reach\n// every bulk sender without a call at each server entrypoint.\nexport * from './lib/server/email-marketing-gate'\n// A consent group change (AGL-3320): the carries of the three stores above,\n// and the executor that runs a change around them.\nexport * from './lib/server/consent-group-carry'\nexport * from './lib/server/consent-group-change'\n// A person's refusal kept after the record it was written on is deleted\n// (AGL-3338): the delete's write, the list gate's read, and the change's carry.\nexport * from './lib/server/retained-refusals'\nexport * from './lib/server/sms-keywords'\nexport * from './lib/server/document-id'\nexport * from './lib/server/collection-preview-token'\nexport * from './lib/server/edit-access-authz'\nexport * from './lib/server/edit-access-token'\nexport * from './lib/server/edit-hint-token'\nexport * from './lib/server/email-metering'\n// Side-effecting on purpose (AGL-2409): evaluating this module INSTALLS the\n// platform send-rate governor on `sendEmail`. Every server surface already\n// imports this barrel, so nothing has to remember to call an installer.\nexport * from './lib/server/campaign-conversion-attribution'\nexport * from './lib/server/email-send-rate'\n// Side-effecting on purpose, for the same reason (AGL-3328): evaluating this\n// module INSTALLS the deliverability preflight on `sendEmail`, so a recipient\n// whose domain takes no mail is refused, and bulk mail behind a gateway that\n// refused its sending domain twice is held, on every send path at once.\nexport * from './lib/server/email-deliverability'\nexport * from './lib/server/email-sender-reputation'\nexport * from './lib/server/erase'\nexport * from './lib/server/erase-person'\nexport * from './lib/server/dynamic-list-materialize'\nexport * from './lib/server/firebase-admin'\nexport * from './lib/server/free-workspace-cap'\nexport * from './lib/server/ga4-measurement-protocol'\nexport * from './lib/server/host-memberships'\nexport * from './lib/server/host-visitor-records'\nexport * from './lib/server/list-members'\nexport * from './lib/server/lockdown'\nexport * from './lib/server/token-revocation'\nexport * from './lib/server/tenant-write-lockdown'\nexport * from './lib/server/outbound-send-review'\n// The same review for a published page, read where it is composed (AGL-3356).\nexport * from './lib/server/hosted-page-review'\n// Every hold, flag, lock and pause tells owners and staff through one seam (AGL-3368).\nexport * from './lib/server/risk-notice'\nexport * from './lib/server/host-email-tokens'\nexport * from './lib/server/notifications'\n// Every operator alert raises through one entry point, and every health check\n// remembers its state (AGL-3377).\nexport * from './lib/server/operator-alerts'\nexport * from './lib/server/operator-health'\nexport * from './lib/server/org-billing'\nexport * from './lib/server/organizations'\nexport * from './lib/server/duplicate-activity'\nexport * from './lib/server/duplicate-resource'\nexport * from './lib/server/workspace-domains'\nexport * from './lib/server/membership-recover-throttle'\nexport * from './lib/server/password-reset-throttle'\nexport * from './lib/server/rate-limit-store'\nexport * from './lib/server/verify-email-cooldown'\nexport * from './lib/server/vercel-drain-signature'\nexport * from './lib/server/vercel-log-drain'\nexport * from './lib/server/visitor-write-rate-limit'\nexport * from './lib/server/card-payment-velocity'\nexport * from './lib/server/console-api-rate-limit'\nexport * from './lib/server/realm-plugins'\nexport * from './lib/server/release-flags'\nexport * from './lib/server/resolve-people'\nexport * from './lib/server/member-photo'\nexport * from './lib/server/personal-data-export'\nexport * from './lib/server/media-delivery'\nexport * from './lib/server/media-download-tokens'\nexport * from './lib/server/media-quarantine'\nexport * from './lib/server/media-signing'\nexport * from './lib/server/media-storage-path'\nexport * from './lib/server/safe-equal'\nexport * from './lib/server/media-strong-digest'\nexport * from './lib/server/media-tombstone'\nexport * from './lib/server/media-variants'\nexport * from './lib/server/serve-media-cdn'\nexport * from './lib/server/serve-plugin-fetch'\nexport * from './lib/server/configured-url-fetch'\nexport * from './lib/server/sso-break-glass-owners'\nexport * from './lib/server/sso-domain-policy'\nexport * from './lib/server/sso-enforcement'\nexport * from './lib/server/sso-provisioning'\nexport * from './lib/server/update-existing'\nexport * from './lib/server/contact-company-link'\nexport * from './lib/server/contact-email-index'\nexport * from './lib/server/upsert-contact'\nexport * from './lib/server/crm-records'\n// The `nextTaskAtMs` a contact, a company and a deal carry, recomputed from\n// their open tasks by every server-side task writer (AGL-2661).\nexport * from './lib/server/crm-next-activity'\n// Where a one-to-one email's activity row lives and how the delivery\n// webhook advances it (AGL-2615).\nexport * from './lib/server/crm-email-activity'\n// A member's own addresses in a workspace, and the signed link that\n// confirms one (AGL-2975).\nexport * from './lib/server/member-email-aliases'\nexport * from './lib/server/user-profiles'\n// The one \"New account\" staff notice per account, keyed on the auth\n// record's creation (AGL-3225).\nexport * from './lib/server/new-account-announcement'\nexport * from './lib/server/legal-acceptance'\n// The person's decision about the platform's own product email, on their\n// document and on the operator's marketing contact (AGL-3185).\nexport * from './lib/server/platform-marketing-consent'\n"],"names":["merchantAccountIsReady","merchantAccountReadiness","paymentProvider","domainProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sCAAkC;AAChD,cAAc,2BAAuB;AACrC,cAAc,2BAAuB;AACrC,cAAc,iCAA6B;AAC3C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qBAAqB;AACrB,SACEA,sBAAsB,EACtBC,wBAAwB,EACxBC,eAAe,QACV,mCAA+B;AAQtC,cAAc,+BAA2B;AACzC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,sCAAkC;AAChD,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,6EAA6E;AAC7E,+DAA+D;AAC/D,+EAA+E;AAC/E,wCAAwC;AACxC,SAASC,cAAc,QAAQ,kCAA8B;AAM7D,cAAc,wCAAoC;AAClD,cAAc,+BAA2B;AACzC,cAAc,gCAA4B;AAC1C,cAAc,oCAAgC;AAC9C,cAAc,sCAAkC;AAChD,cAAc,oCAAgC;AAC9C,4EAA4E;AAC5E,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,cAAc,kCAA8B;AAC5C,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,8DAA8D;AAC9D,cAAc,uCAAmC;AACjD,4EAA4E;AAC5E,mDAAmD;AACnD,cAAc,sCAAkC;AAChD,cAAc,uCAAmC;AACjD,wEAAwE;AACxE,gFAAgF;AAChF,cAAc,oCAAgC;AAC9C,cAAc,+BAA2B;AACzC,cAAc,8BAA0B;AACxC,cAAc,2CAAuC;AACrD,cAAc,oCAAgC;AAC9C,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,cAAc,kDAA8C;AAC5D,cAAc,kCAA8B;AAC5C,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,cAAc,uCAAmC;AACjD,cAAc,0CAAsC;AACpD,cAAc,wBAAoB;AAClC,cAAc,+BAA2B;AACzC,cAAc,2CAAuC;AACrD,cAAc,iCAA6B;AAC3C,cAAc,qCAAiC;AAC/C,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,2BAAuB;AACrC,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,uCAAmC;AACjD,8EAA8E;AAC9E,cAAc,qCAAiC;AAC/C,uFAAuF;AACvF,cAAc,8BAA0B;AACxC,cAAc,oCAAgC;AAC9C,cAAc,gCAA4B;AAC1C,8EAA8E;AAC9E,kCAAkC;AAClC,cAAc,kCAA8B;AAC5C,cAAc,kCAA8B;AAC5C,cAAc,8BAA0B;AACxC,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,qCAAiC;AAC/C,cAAc,oCAAgC;AAC9C,cAAc,8CAA0C;AACxD,cAAc,0CAAsC;AACpD,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,mCAA+B;AAC7C,cAAc,2CAAuC;AACrD,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,gCAA4B;AAC1C,cAAc,gCAA4B;AAC1C,cAAc,iCAA6B;AAC3C,cAAc,+BAA2B;AACzC,cAAc,uCAAmC;AACjD,cAAc,iCAA6B;AAC3C,cAAc,wCAAoC;AAClD,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,cAAc,kCAA8B;AAC5C,cAAc,qCAAiC;AAC/C,cAAc,uCAAmC;AACjD,cAAc,yCAAqC;AACnD,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,uCAAmC;AACjD,cAAc,sCAAkC;AAChD,cAAc,iCAA6B;AAC3C,cAAc,8BAA0B;AACxC,4EAA4E;AAC5E,gEAAgE;AAChE,cAAc,oCAAgC;AAC9C,qEAAqE;AACrE,kCAAkC;AAClC,cAAc,qCAAiC;AAC/C,oEAAoE;AACpE,2BAA2B;AAC3B,cAAc,uCAAmC;AACjD,cAAc,gCAA4B;AAC1C,oEAAoE;AACpE,gCAAgC;AAChC,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,yEAAyE;AACzE,+DAA+D;AAC/D,cAAc,6CAAyC"}
+{"version":3,"sources":["../../../../../../libs/tenant/data/admin/src/tenancy.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/server/analytics-retention'\nexport * from './lib/server/api-http'\nexport * from './lib/server/api-keys'\nexport * from './lib/server/account-emails'\nexport * from './lib/server/auth-pools'\nexport * from './lib/server/client-error-report'\n// The merchant's payment account, as a contract. Its adapter is not exported:\n// a plugin asks the contract, and the doors that only need the readiness rule\n// import `@aglyn/tenant-data-admin/server/payment-provider` directly, which\n// loads no Firebase.\nexport {\n  merchantAccountIsReady,\n  merchantAccountReadiness,\n  paymentProvider,\n} from './lib/server/payment-provider'\nexport type {\n  MerchantAccountReadiness,\n  MerchantAccountReadinessInput,\n  PaymentMode,\n  PaymentProvider,\n  PaymentProviderEvent,\n} from './lib/server/payment-provider'\nexport * from './lib/server/auth-handoff'\nexport * from './lib/server/console-domains'\nexport * from './lib/server/dns-probe'\nexport * from './lib/server/sending-domains'\nexport * from './lib/server/sender-readiness'\nexport * from './lib/server/host-sending-domain'\nexport * from './lib/server/sending-domain-debt'\nexport * from './lib/server/sending-domain-recheck'\n// The hosting seam itself, so a door can ask whether this deployment is able\n// to register a name at all before it promises the caller one.\n// `workspace-domains` re-exports the pieces its own callers share with it; the\n// provider behind it is not among them.\nexport { domainProvider } from './lib/server/domain-provider'\nexport type {\n  DomainProvider,\n  DomainProviderId,\n  DomainScope,\n} from './lib/server/domain-provider'\nexport * from './lib/server/platform-domain-names'\nexport * from './lib/server/consume-once'\nexport * from './lib/server/csp-aggregate'\nexport * from './lib/server/data-storage-gate'\nexport * from './lib/server/contact-suppression'\nexport * from './lib/server/email-suppression'\n// The double opt-in quarantine, after the module whose keying it shares and\n// whose `filterTopicSendable` is the reader that makes it a quarantine rather\n// than a stored fact.\nexport * from './lib/server/topic-subscriptions'\nexport * from './lib/server/email-unsubscribe-link'\nexport * from './lib/server/email-flow-gate'\n// Side-effecting on purpose, for the reason `email-send-rate` below is:\n// evaluating this module INSTALLS the marketing gate on `sendEmail`, so the\n// unsubscribe header, the suppression check and the frequency ceiling reach\n// every bulk sender without a call at each server entrypoint.\nexport * from './lib/server/email-marketing-gate'\n// A consent group change (AGL-3320): the carries of the three stores above,\n// and the executor that runs a change around them.\nexport * from './lib/server/consent-group-carry'\nexport * from './lib/server/consent-group-change'\n// A person's refusal kept after the record it was written on is deleted\n// (AGL-3338): the delete's write, the list gate's read, and the change's carry.\nexport * from './lib/server/retained-refusals'\nexport * from './lib/server/sms-keywords'\nexport * from './lib/server/document-id'\nexport * from './lib/server/collection-preview-token'\nexport * from './lib/server/edit-access-authz'\nexport * from './lib/server/edit-access-token'\nexport * from './lib/server/edit-hint-token'\nexport * from './lib/server/email-metering'\n// Side-effecting on purpose (AGL-2409): evaluating this module INSTALLS the\n// platform send-rate governor on `sendEmail`. Every server surface already\n// imports this barrel, so nothing has to remember to call an installer.\nexport * from './lib/server/email-send-rate'\n// Side-effecting on purpose, for the same reason (AGL-3328): evaluating this\n// module INSTALLS the deliverability preflight on `sendEmail`, so a recipient\n// whose domain takes no mail is refused, and bulk mail behind a gateway that\n// refused its sending domain twice is held, on every send path at once.\nexport * from './lib/server/email-deliverability'\nexport * from './lib/server/email-sender-reputation'\nexport * from './lib/server/erase'\nexport * from './lib/server/erase-person'\nexport * from './lib/server/dynamic-list-materialize'\nexport * from './lib/server/firebase-admin'\nexport * from './lib/server/free-workspace-cap'\nexport * from './lib/server/ga4-measurement-protocol'\nexport * from './lib/server/host-memberships'\nexport * from './lib/server/host-visitor-records'\nexport * from './lib/server/list-members'\nexport * from './lib/server/lockdown'\nexport * from './lib/server/token-revocation'\nexport * from './lib/server/tenant-write-lockdown'\nexport * from './lib/server/outbound-send-review'\n// The same review for a published page, read where it is composed (AGL-3356).\nexport * from './lib/server/hosted-page-review'\n// Every hold, flag, lock and pause tells owners and staff through one seam (AGL-3368).\nexport * from './lib/server/risk-notice'\nexport * from './lib/server/host-email-tokens'\nexport * from './lib/server/notifications'\n// Every operator alert raises through one entry point, and every health check\n// remembers its state (AGL-3377).\nexport * from './lib/server/operator-alerts'\nexport * from './lib/server/operator-health'\nexport * from './lib/server/org-billing'\nexport * from './lib/server/organizations'\n// Platform staff take no customer seat, and a workspace is asked to upgrade\n// as a separate step after it is handed over (AGL-3466).\nexport * from './lib/server/staff-seat'\nexport * from './lib/server/upgrade-proposal'\nexport * from './lib/server/duplicate-activity'\nexport * from './lib/server/duplicate-resource'\nexport * from './lib/server/workspace-domains'\nexport * from './lib/server/membership-recover-throttle'\nexport * from './lib/server/password-reset-throttle'\nexport * from './lib/server/rate-limit-store'\nexport * from './lib/server/verify-email-cooldown'\nexport * from './lib/server/vercel-drain-signature'\nexport * from './lib/server/vercel-log-drain'\nexport * from './lib/server/visitor-write-rate-limit'\nexport * from './lib/server/card-payment-velocity'\nexport * from './lib/server/console-api-rate-limit'\nexport * from './lib/server/realm-plugins'\nexport * from './lib/server/release-flags'\nexport * from './lib/server/resolve-people'\nexport * from './lib/server/member-photo'\nexport * from './lib/server/personal-data-export'\nexport * from './lib/server/media-delivery'\nexport * from './lib/server/media-download-tokens'\nexport * from './lib/server/media-quarantine'\nexport * from './lib/server/media-signing'\nexport * from './lib/server/media-storage-path'\nexport * from './lib/server/safe-equal'\nexport * from './lib/server/media-strong-digest'\nexport * from './lib/server/media-tombstone'\nexport * from './lib/server/media-delivery-regeneration'\nexport * from './lib/server/media-variants'\nexport * from './lib/server/serve-media-cdn'\nexport * from './lib/server/serve-plugin-fetch'\nexport * from './lib/server/configured-url-fetch'\nexport * from './lib/server/sso-break-glass-owners'\nexport * from './lib/server/sso-domain-policy'\nexport * from './lib/server/sso-enforcement'\nexport * from './lib/server/sso-provisioning'\nexport * from './lib/server/update-existing'\nexport * from './lib/server/contact-company-link'\nexport * from './lib/server/contact-email-index'\nexport * from './lib/server/upsert-contact'\nexport * from './lib/server/crm-records'\n// The `nextTaskAtMs` a contact, a company and a deal carry, recomputed from\n// their open tasks by every server-side task writer (AGL-2661).\nexport * from './lib/server/crm-next-activity'\n// Where a one-to-one email's activity row lives and how the delivery\n// webhook advances it (AGL-2615).\nexport * from './lib/server/crm-email-activity'\n// A member's own addresses in a workspace, and the signed link that\n// confirms one (AGL-2975).\nexport * from './lib/server/member-email-aliases'\nexport * from './lib/server/user-profiles'\n// The one \"New account\" staff notice per account, keyed on the auth\n// record's creation (AGL-3225).\nexport * from './lib/server/new-account-announcement'\nexport * from './lib/server/legal-acceptance'\n// The person's decision about the platform's own product email, on their\n// document and on the operator's marketing contact (AGL-3185).\nexport * from './lib/server/platform-marketing-consent'\n"],"names":["merchantAccountIsReady","merchantAccountReadiness","paymentProvider","domainProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sCAAkC;AAChD,cAAc,2BAAuB;AACrC,cAAc,2BAAuB;AACrC,cAAc,iCAA6B;AAC3C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qBAAqB;AACrB,SACEA,sBAAsB,EACtBC,wBAAwB,EACxBC,eAAe,QACV,mCAA+B;AAQtC,cAAc,+BAA2B;AACzC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,sCAAkC;AAChD,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,6EAA6E;AAC7E,+DAA+D;AAC/D,+EAA+E;AAC/E,wCAAwC;AACxC,SAASC,cAAc,QAAQ,kCAA8B;AAM7D,cAAc,wCAAoC;AAClD,cAAc,+BAA2B;AACzC,cAAc,gCAA4B;AAC1C,cAAc,oCAAgC;AAC9C,cAAc,sCAAkC;AAChD,cAAc,oCAAgC;AAC9C,4EAA4E;AAC5E,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,cAAc,kCAA8B;AAC5C,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,8DAA8D;AAC9D,cAAc,uCAAmC;AACjD,4EAA4E;AAC5E,mDAAmD;AACnD,cAAc,sCAAkC;AAChD,cAAc,uCAAmC;AACjD,wEAAwE;AACxE,gFAAgF;AAChF,cAAc,oCAAgC;AAC9C,cAAc,+BAA2B;AACzC,cAAc,8BAA0B;AACxC,cAAc,2CAAuC;AACrD,cAAc,oCAAgC;AAC9C,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,cAAc,kCAA8B;AAC5C,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,cAAc,uCAAmC;AACjD,cAAc,0CAAsC;AACpD,cAAc,wBAAoB;AAClC,cAAc,+BAA2B;AACzC,cAAc,2CAAuC;AACrD,cAAc,iCAA6B;AAC3C,cAAc,qCAAiC;AAC/C,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,2BAAuB;AACrC,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,uCAAmC;AACjD,8EAA8E;AAC9E,cAAc,qCAAiC;AAC/C,uFAAuF;AACvF,cAAc,8BAA0B;AACxC,cAAc,oCAAgC;AAC9C,cAAc,gCAA4B;AAC1C,8EAA8E;AAC9E,kCAAkC;AAClC,cAAc,kCAA8B;AAC5C,cAAc,kCAA8B;AAC5C,cAAc,8BAA0B;AACxC,cAAc,gCAA4B;AAC1C,4EAA4E;AAC5E,yDAAyD;AACzD,cAAc,6BAAyB;AACvC,cAAc,mCAA+B;AAC7C,cAAc,qCAAiC;AAC/C,cAAc,qCAAiC;AAC/C,cAAc,oCAAgC;AAC9C,cAAc,8CAA0C;AACxD,cAAc,0CAAsC;AACpD,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,mCAA+B;AAC7C,cAAc,2CAAuC;AACrD,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,gCAA4B;AAC1C,cAAc,gCAA4B;AAC1C,cAAc,iCAA6B;AAC3C,cAAc,+BAA2B;AACzC,cAAc,uCAAmC;AACjD,cAAc,iCAA6B;AAC3C,cAAc,wCAAoC;AAClD,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,cAAc,kCAA8B;AAC5C,cAAc,8CAA0C;AACxD,cAAc,iCAA6B;AAC3C,cAAc,kCAA8B;AAC5C,cAAc,qCAAiC;AAC/C,cAAc,uCAAmC;AACjD,cAAc,yCAAqC;AACnD,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,uCAAmC;AACjD,cAAc,sCAAkC;AAChD,cAAc,iCAA6B;AAC3C,cAAc,8BAA0B;AACxC,4EAA4E;AAC5E,gEAAgE;AAChE,cAAc,oCAAgC;AAC9C,qEAAqE;AACrE,kCAAkC;AAClC,cAAc,qCAAiC;AAC/C,oEAAoE;AACpE,2BAA2B;AAC3B,cAAc,uCAAmC;AACjD,cAAc,gCAA4B;AAC1C,oEAAoE;AACpE,gCAAgC;AAChC,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,yEAAyE;AACzE,+DAA+D;AAC/D,cAAc,6CAAyC"}

package/src/lib/server/campaign-attribution-store.d.ts

@@ -1,55 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/** The per-host collection of conversion attribution records. */
-export declare const CAMPAIGN_ATTRIBUTIONS_COLLECTION = "campaignAttributions";
-/**
- * Removes every conversion attributed to one person, across every site.
- *
- * ## Why an erasure reaches these at all
- *
- * An attribution is a claim about a person: "this human came from that
- * campaign and then did this". It is the same personal fact as the click
- * stamp it was derived from, and the erasure path already deletes those —
- * `eraseEmailDeliveriesForAddresses` drops `campaignTouches` alongside the
- * engagement stamps and says why. A summary that outlived its source would
- * leave an erasure that removed the evidence and kept the conclusion.
- *
- * ## Why a collection-group query
- *
- * The record is per HOST, because that is where a site's own reporting reads
- * it. An erasure arrives as an ADDRESS and knows nothing about which sites
- * that person ever visited. The collection group is the join between the two,
- * and `personKey` is on the record precisely so one exists — declared in
- * `cloud/firebase-firestore.indexes.json` with `COLLECTION_GROUP` scope,
- * because a collection-group query gets no automatic single-field index and
- * would otherwise fail with FAILED_PRECONDITION at the moment somebody asked
- * to be forgotten.
- *
- * ## The order's own record is NOT touched
- *
- * `emailAttributions` holds a commercial fact about a sale, keyed by the
- * order's id and carrying no address — the revenue join says so where it
- * writes it. This holds a record of a person's behavior under a key derived
- * from their address. Different facts, different answers, and the split is
- * why both are defensible.
- *
- * Never throws: an erasure that fails on one leg must still complete the
- * others, and the caller reports what it removed.
- *
- * @returns how many records were removed.
- */
-export declare function eraseCampaignAttributionsForPersonKey(key: string | null | undefined, firestore?: any): Promise<number>;

package/src/lib/server/campaign-attribution-store.js

@@ -1,95 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * Where conversion attributions are kept, and how an erasure reaches them.
- *
- * ## Why this is a leaf module and not part of the join
- *
- * The erasure runs from `email-delivery-log.ts`, in the same function that
- * drops a person's campaign touches — which is the point, because an
- * attribution is a conclusion drawn from those touches and a conclusion that
- * outlives its evidence is an erasure that did not happen. But the join
- * itself READS that module (`readEmailCampaignTouch` is one half of the
- * last-touch comparison), so putting the erasure beside the join would make
- * the two modules import each other. Under jest that cycle resolves to
- * `undefined` at import time rather than failing loudly, which is how an
- * erasure comes to silently do nothing while its test passes.
- *
- * So the collection name and the sweep live here, importing nothing but
- * Firestore, and both sides import this.
- */ import firebaseAdmin from "./firebase-admin.js";
-const defaultFirestore = ()=>firebaseAdmin.app().firestore();
-/** The per-host collection of conversion attribution records. */ export const CAMPAIGN_ATTRIBUTIONS_COLLECTION = 'campaignAttributions';
-/** How many records one erasure pass removes per batch. */ const ERASURE_BATCH = 400;
-/**
- * Removes every conversion attributed to one person, across every site.
- *
- * ## Why an erasure reaches these at all
- *
- * An attribution is a claim about a person: "this human came from that
- * campaign and then did this". It is the same personal fact as the click
- * stamp it was derived from, and the erasure path already deletes those —
- * `eraseEmailDeliveriesForAddresses` drops `campaignTouches` alongside the
- * engagement stamps and says why. A summary that outlived its source would
- * leave an erasure that removed the evidence and kept the conclusion.
- *
- * ## Why a collection-group query
- *
- * The record is per HOST, because that is where a site's own reporting reads
- * it. An erasure arrives as an ADDRESS and knows nothing about which sites
- * that person ever visited. The collection group is the join between the two,
- * and `personKey` is on the record precisely so one exists — declared in
- * `cloud/firebase-firestore.indexes.json` with `COLLECTION_GROUP` scope,
- * because a collection-group query gets no automatic single-field index and
- * would otherwise fail with FAILED_PRECONDITION at the moment somebody asked
- * to be forgotten.
- *
- * ## The order's own record is NOT touched
- *
- * `emailAttributions` holds a commercial fact about a sale, keyed by the
- * order's id and carrying no address — the revenue join says so where it
- * writes it. This holds a record of a person's behavior under a key derived
- * from their address. Different facts, different answers, and the split is
- * why both are defensible.
- *
- * Never throws: an erasure that fails on one leg must still complete the
- * others, and the caller reports what it removed.
- *
- * @returns how many records were removed.
- */ export async function eraseCampaignAttributionsForPersonKey(key, firestore) {
-    if (!key || typeof key !== 'string') return 0;
-    const db = firestore != null ? firestore : defaultFirestore();
-    let removed = 0;
-    try {
-        // Bounded rather than `while (true)`: a pathological volume must not be
-        // able to hold an erasure request open indefinitely, and the pass that
-        // runs next picks up whatever a bounded one left.
-        for(let pass = 0; pass < 20; pass += 1){
-            const snapshot = await db.collectionGroup(CAMPAIGN_ATTRIBUTIONS_COLLECTION).where('personKey', '==', key).limit(ERASURE_BATCH).get();
-            if (snapshot.empty) break;
-            const batch = db.batch();
-            snapshot.docs.forEach((doc)=>batch.delete(doc.ref));
-            await batch.commit();
-            removed += snapshot.size;
-            if (snapshot.size < ERASURE_BATCH) break;
-        }
-    } catch (error) {
-        console.error('eraseCampaignAttributionsForPersonKey failed', error);
-    }
-    return removed;
-}
-
-//# sourceMappingURL=campaign-attribution-store.js.map

package/src/lib/server/campaign-attribution-store.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/campaign-attribution-store.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Where conversion attributions are kept, and how an erasure reaches them.\n *\n * ## Why this is a leaf module and not part of the join\n *\n * The erasure runs from `email-delivery-log.ts`, in the same function that\n * drops a person's campaign touches — which is the point, because an\n * attribution is a conclusion drawn from those touches and a conclusion that\n * outlives its evidence is an erasure that did not happen. But the join\n * itself READS that module (`readEmailCampaignTouch` is one half of the\n * last-touch comparison), so putting the erasure beside the join would make\n * the two modules import each other. Under jest that cycle resolves to\n * `undefined` at import time rather than failing loudly, which is how an\n * erasure comes to silently do nothing while its test passes.\n *\n * So the collection name and the sweep live here, importing nothing but\n * Firestore, and both sides import this.\n */\n\nimport firebaseAdmin from './firebase-admin'\n\nconst defaultFirestore = () => firebaseAdmin.app().firestore()\n\n/** The per-host collection of conversion attribution records. */\nexport const CAMPAIGN_ATTRIBUTIONS_COLLECTION = 'campaignAttributions'\n\n/** How many records one erasure pass removes per batch. */\nconst ERASURE_BATCH = 400\n\n/**\n * Removes every conversion attributed to one person, across every site.\n *\n * ## Why an erasure reaches these at all\n *\n * An attribution is a claim about a person: \"this human came from that\n * campaign and then did this\". It is the same personal fact as the click\n * stamp it was derived from, and the erasure path already deletes those —\n * `eraseEmailDeliveriesForAddresses` drops `campaignTouches` alongside the\n * engagement stamps and says why. A summary that outlived its source would\n * leave an erasure that removed the evidence and kept the conclusion.\n *\n * ## Why a collection-group query\n *\n * The record is per HOST, because that is where a site's own reporting reads\n * it. An erasure arrives as an ADDRESS and knows nothing about which sites\n * that person ever visited. The collection group is the join between the two,\n * and `personKey` is on the record precisely so one exists — declared in\n * `cloud/firebase-firestore.indexes.json` with `COLLECTION_GROUP` scope,\n * because a collection-group query gets no automatic single-field index and\n * would otherwise fail with FAILED_PRECONDITION at the moment somebody asked\n * to be forgotten.\n *\n * ## The order's own record is NOT touched\n *\n * `emailAttributions` holds a commercial fact about a sale, keyed by the\n * order's id and carrying no address — the revenue join says so where it\n * writes it. This holds a record of a person's behavior under a key derived\n * from their address. Different facts, different answers, and the split is\n * why both are defensible.\n *\n * Never throws: an erasure that fails on one leg must still complete the\n * others, and the caller reports what it removed.\n *\n * @returns how many records were removed.\n */\nexport async function eraseCampaignAttributionsForPersonKey(\n  key: string | null | undefined,\n  firestore?: any,\n): Promise<number> {\n  if (!key || typeof key !== 'string') return 0\n  const db = firestore ?? defaultFirestore()\n  let removed = 0\n  try {\n    // Bounded rather than `while (true)`: a pathological volume must not be\n    // able to hold an erasure request open indefinitely, and the pass that\n    // runs next picks up whatever a bounded one left.\n    for (let pass = 0; pass < 20; pass += 1) {\n      const snapshot = await db\n        .collectionGroup(CAMPAIGN_ATTRIBUTIONS_COLLECTION)\n        .where('personKey', '==', key)\n        .limit(ERASURE_BATCH)\n        .get()\n      if (snapshot.empty) break\n      const batch = db.batch()\n      snapshot.docs.forEach((doc: any) => batch.delete(doc.ref))\n      await batch.commit()\n      removed += snapshot.size\n      if (snapshot.size < ERASURE_BATCH) break\n    }\n  } catch (error) {\n    console.error('eraseCampaignAttributionsForPersonKey failed', error)\n  }\n  return removed\n}\n"],"names":["firebaseAdmin","defaultFirestore","app","firestore","CAMPAIGN_ATTRIBUTIONS_COLLECTION","ERASURE_BATCH","eraseCampaignAttributionsForPersonKey","key","db","removed","pass","snapshot","collectionGroup","where","limit","get","empty","batch","docs","forEach","doc","delete","ref","commit","size","error","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;CAiBC,GAED,OAAOA,mBAAmB,sBAAkB;AAE5C,MAAMC,mBAAmB,IAAMD,cAAcE,GAAG,GAAGC,SAAS;AAE5D,+DAA+D,GAC/D,OAAO,MAAMC,mCAAmC,uBAAsB;AAEtE,yDAAyD,GACzD,MAAMC,gBAAgB;AAEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCC,GACD,OAAO,eAAeC,sCACpBC,GAA8B,EAC9BJ,SAAe;IAEf,IAAI,CAACI,OAAO,OAAOA,QAAQ,UAAU,OAAO;IAC5C,MAAMC,KAAKL,oBAAAA,YAAaF;IACxB,IAAIQ,UAAU;IACd,IAAI;QACF,wEAAwE;QACxE,uEAAuE;QACvE,kDAAkD;QAClD,IAAK,IAAIC,OAAO,GAAGA,OAAO,IAAIA,QAAQ,EAAG;YACvC,MAAMC,WAAW,MAAMH,GACpBI,eAAe,CAACR,kCAChBS,KAAK,CAAC,aAAa,MAAMN,KACzBO,KAAK,CAACT,eACNU,GAAG;YACN,IAAIJ,SAASK,KAAK,EAAE;YACpB,MAAMC,QAAQT,GAAGS,KAAK;YACtBN,SAASO,IAAI,CAACC,OAAO,CAAC,CAACC,MAAaH,MAAMI,MAAM,CAACD,IAAIE,GAAG;YACxD,MAAML,MAAMM,MAAM;YAClBd,WAAWE,SAASa,IAAI;YACxB,IAAIb,SAASa,IAAI,GAAGnB,eAAe;QACrC;IACF,EAAE,OAAOoB,OAAO;QACdC,QAAQD,KAAK,CAAC,gDAAgDA;IAChE;IACA,OAAOhB;AACT"}

package/src/lib/server/campaign-conversion-attribution.d.ts

@@ -1,283 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { type DocumentReference, type Firestore } from 'firebase-admin/firestore';
-import { CAMPAIGN_ATTRIBUTIONS_COLLECTION, eraseCampaignAttributionsForPersonKey } from './campaign-attribution-store';
-/**
- * THE IDENTIFY-MOMENT JOIN — a form, a lead, a contact or a booking, credited
- * to the campaign that led to it.
- *
- * ## Why there is a second join at all, and why it is not a second SCHEME
- *
- * `email-revenue-attribution.ts` credits an ORDER by looking the buyer's
- * address up in the touch map a click wrote. That works because an order
- * names its buyer. Every other outcome a campaign causes is produced by
- * somebody who was anonymous until the instant they produced it: they arrive
- * from a campaign link, browse, and only become identifiable when they submit
- * a form, sign up, book or check out. There is no address to look up until
- * the very moment being attributed.
- *
- * So the touch is carried on the VISITOR (`utm-touch.ts`) and attached
- * here, at each moment they become somebody. What is NOT rebuilt is the
- * model: the same seven-day window, the same last-click rule, the same
- * `model`/`windowDays` stamped onto every record so a report can say what it
- * counted. The email channel is not re-derived either — it is READ from the
- * touch the delivery webhook already wrote, so a campaign email and a
- * campaign ad are two inputs to one comparison rather than two schemes with
- * two answers.
- *
- * ## Last touch, across both channels
- *
- * At the identify moment there can be two candidate touches:
- *
- *  - the WEB touch the visitor's device carried, from an ad, a partner link
- *    or a social post; and
- *  - the EMAIL touch on `emailDeliveries/{personKey}.campaignTouches[hostId]`,
- *    written server-side when they clicked a campaign's mail.
- *
- * Both are window-checked and the LATER one wins. Splitting the outcome
- * between them is the multi-touch model the revenue work rejected for the
- * reason that applies here unchanged: a rule the merchant did not choose
- * produces a figure nobody can check. One outcome, one campaign, and a rule
- * stated on the record.
- *
- * ## No campaign touch means NO RECORD
- *
- * Direct traffic writes nothing at all, and there is deliberately no fallback
- * — no "most recent campaign on this site", no referrer inference, no
- * `utm_source=direct`. A conversion nobody can be credited with is a
- * conversion nobody is credited with, and the absence of a record is how the
- * report says so. The cost of a miss is one uncounted outcome; the cost of a
- * guess is a campaign that reads as effective because it was the last one to
- * run.
- *
- * ## Three reads at most, and usually one
- *
- * Resolving a touch costs ONE keyed document read, and only when the visitor
- * gave an address — no query, no index, nothing that can be truncated. A door
- * resolves once per request and hands the result to every writer beneath it,
- * so a form submission that creates a submission, a contact and a lead pays
- * for the lookup once rather than three times.
- *
- * ## Never throws
- *
- * The same contract as the revenue join and for the same reason: the visitor
- * has already done the thing being attributed and the record of it is already
- * written. A lost attribution understates a campaign; a thrown one loses a
- * lead.
- */
-/**
- * The collection and the erasure sweep, re-exported so a caller needs one
- * import for the whole join. They are DEFINED in a leaf module because the
- * sweep runs from `email-delivery-log.ts`, which this file reads — see
- * `campaign-attribution-store.ts` for why that cycle is not merely untidy.
- */
-export { CAMPAIGN_ATTRIBUTIONS_COLLECTION, eraseCampaignAttributionsForPersonKey, };
-/** The single conversion rollup document under an email campaign. */
-export declare const CAMPAIGN_CONVERSIONS_REPORT_DOC = "conversions";
-/**
- * Which identify moment a record credits.
- *
- * Kept apart rather than summed, which is the whole reason the kind is on the
- * record. One form submission by a new person creates a submission, a contact
- * and possibly a lead — three true statements about one visitor action — and
- * a report that added them would treble every campaign's conversions. A
- * reader asks for one kind at a time, exactly as the revenue rollup buckets
- * by currency and never totals across them.
- */
-export type CampaignConversionKind = 'form' | 'lead' | 'contact' | 'booking';
-/**
- * Which channel the credited touch arrived through.
- *
- * `sequence` (AGL-3254) is a click on, or the sending of, a one-to-one
- * email a rep's sequence sent. It is read off the same touch map as the
- * email channel — the Outreach click route stamps it there with the
- * sequence and the enrollment beside the campaign the sequence is in — so
- * a booking made from a sequence link is credited by the door that credits
- * every other booking, and nothing in this join has to know what a
- * sequence is.
- */
-export type CampaignTouchChannel = 'email' | 'web' | 'sequence';
-/** The touch a conversion is credited to, once both channels have been asked. */
-export interface ResolvedCampaignTouch {
-    channel: CampaignTouchChannel;
-    /**
-     * The campaign document, when the touch was a click on our own mail — or
-     * the campaign CONTAINER (`emailCampaigns/{id}`) a sequence is in, for a
-     * sequence touch.
-     */
-    campaignId?: string;
-    /** The sequence the touch came through, for a `sequence` touch. */
-    sequenceId?: string;
-    /** The enrollment the touch came through, for a `sequence` touch. */
-    enrollmentId?: string;
-    /** `utm_source`, when the touch was a link on the web. */
-    source?: string;
-    /** `utm_medium`, when the touch was a link on the web. */
-    medium?: string;
-    /** `utm_campaign`, when the touch was a link on the web. */
-    campaign?: string;
-    /** When the visitor followed the campaign link, epoch ms. */
-    touchedAtMs: number;
-    /**
-     * `sha256` of the normalized address the touch was resolved against, when
-     * the visitor gave one. The handle an erasure erases by — see
-     * {@link eraseCampaignAttributionsForPersonKey}.
-     */
-    personKey?: string;
-}
-/** What one conversion attribution record holds. */
-export interface CampaignConversionRecord extends ResolvedCampaignTouch {
-    kind: CampaignConversionKind;
-    /** The submission, lead, contact or booking this credits. */
-    refId: string;
-    /** When the visitor became identifiable. */
-    convertedAtMs: number;
-    /** The model this credit was decided under. */
-    model: string;
-    /** The window, in days, it was decided inside. */
-    windowDays: number;
-}
-/**
- * The document id for one conversion.
- *
- * `{kind}:{refId}`, so the same submission credited twice is the same
- * document — which is what makes {@link attributeCampaignConversion}'s
- * `create()` idempotent. Scoped by kind because the ids come from different
- * collections and a booking id has no reason to be distinct from a form
- * submission's.
- */
-export declare function campaignConversionId(kind: CampaignConversionKind, refId: string): string;
-/**
- * The campaign touch to credit a conversion happening now, or `null`.
- *
- * Called ONCE per conversion request, at the door, and the result handed to
- * every writer beneath it. See the module docblock for the cost argument.
- *
- * @returns the winning touch, or `null` when neither channel has one inside
- *          the window — which is the ordinary case and writes nothing.
- */
-export declare function resolveCampaignTouch(options: {
-    hostId: string;
-    /**
-     * The wire form the conversion request carried, when the door reports
-     * one. Re-parsed through the allowlist that wrote it rather than trusted:
-     * it arrives from the visitor's browser, so it may claim no more than an
-     * inbound URL could.
-     */
-    wire?: unknown;
-    /** The address the visitor identified with, raw. */
-    email?: unknown;
-    /** When they identified themselves. Defaults to now. */
-    atMs?: number;
-}, firestore?: any): Promise<ResolvedCampaignTouch | null>;
-/**
- * Credits one conversion to the campaign the visitor last came from.
- *
- * ## Why the record is a document and not a field
- *
- * The revenue join's three reasons, and the first is decisive here too.
- * `create()` fails when the document already exists, which is exact
- * idempotency for free: a retried form POST, a redelivered booking webhook
- * and a re-run capture all land here a second time and must all leave the
- * rollup where they found it. Second, the four kinds live in four different
- * collections — a contact is org-scoped and shared across every site in the
- * org — so there is no one document a field could go on. Third, the
- * submission, the lead and the booking are read by the inbox, the export and
- * the fulfilment path, and none of them wants a field about marketing.
- *
- * ## The rollup exists for the EMAIL channel only
- *
- * A campaign document is a real entity with a real id, so its conversions
- * roll up under it beside the revenue the same join already credits it with.
- * A web campaign is a LABEL the marketer typed into a URL, with no document,
- * no id and no bound on how many distinct values exist — the same unbounded
- * key space the analytics collector caps its per-day label map against. A
- * rollup keyed on it would be a map anybody who can vary a query string can
- * grow. So the web channel's records stand on their own and a report reads
- * them; see the module's report seam note.
- *
- * @returns the record written, or `null` when nothing was credited.
- */
-export declare function attributeCampaignConversion(options: {
-    hostId: string;
-    kind: CampaignConversionKind;
-    /** The submission, lead, contact or booking being credited. */
-    refId: string;
-    /** The touch {@link resolveCampaignTouch} picked, or `null` for direct. */
-    touch: ResolvedCampaignTouch | null | undefined;
-    /** When the visitor became identifiable. Defaults to now. */
-    convertedAtMs?: number;
-}, firestore?: any): Promise<CampaignConversionRecord | null>;
-/**
- * The per-org collection of sequence rollups. Restated from the reader
- * (`campaign-report.ts` in the campaigns UI library, which this package may
- * not import) and asserted equal by the reader's spec.
- */
-export declare const CAMPAIGN_SEQUENCE_REPORTS_COLLECTION = "campaignSequenceReports";
-/** The outcomes the runtime credits, in funnel order. */
-export declare const CAMPAIGN_SEQUENCE_OUTCOMES: readonly ["enrolled", "sent", "replied", "meetings", "converted"];
-export type CampaignSequenceOutcome = (typeof CAMPAIGN_SEQUENCE_OUTCOMES)[number];
-/**
- * Credits one outcome, for one enrollment, to every campaign named.
- *
- * Never throws, and never refuses the batch for one bad id: the outcome
- * has already happened, and a campaign that is gone gains an orphaned
- * report rather than blocking the credit to one that is not — the
- * conversions rollup's own argument for a merge-set that creates.
- *
- * @returns how many campaigns were credited.
- */
-export declare function creditCampaignSequenceOutcome(options: {
-    /** The site the enrollment emails for; resolves the org when none is given. */
-    hostId: string;
-    /**
-     * The org whose containers the campaigns are, when the caller holds it —
-     * an enrollment is an org document, so its routes do. Saves the
-     * `hostIndex` read.
-     */
-    orgId?: string | null;
-    /** The campaigns the enrollment carries; unusable ids are skipped. */
-    campaignIds: readonly string[];
-    outcome: CampaignSequenceOutcome;
-    /** When the outcome happened. Defaults to now. */
-    atMs?: number;
-}, firestore?: any): Promise<number>;
-/** `orgs/{orgId}/campaigns/{sendId}`. */
-export declare function orgCampaignSendRef(orgId: string, sendId: string, firestore?: Firestore): DocumentReference;
-/** `orgs/{orgId}/campaignSequenceReports/{campaignId}`. */
-export declare function orgCampaignSequenceReportRef(orgId: string, campaignId: string, firestore?: Firestore): DocumentReference;
-export interface ResolveCampaignSendRefInput {
-    /** The site the link or the message tag names. */
-    hostId: string;
-    /** The send id (`cid` on a link, `campaignId` on a message tag). */
-    sendId: string;
-    /**
-     * The org, when the caller already has it — a message tag minted since
-     * AGL-3273 carries it. Saves the `hostIndex` read.
-     */
-    orgId?: string | null;
-    firestore?: Firestore;
-}
-/**
- * The send's document, wherever it currently is. Null when neither location
- * holds it — a send id from a link whose send was discarded, or a forged one.
- *
- * Costs one read after the migration (the org document), plus the
- * `hostIndex` lookup when the caller has no org id; that lookup is
- * request-cached.
- */
-export declare function resolveCampaignSendRef(input: ResolveCampaignSendRefInput): Promise<DocumentReference | null>;