@aglyn/tenant-runtime 1.0.0-beta.216 → 1.0.0-beta.218

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/tenant-runtime",
-  "version": "1.0.0-beta.216",
+  "version": "1.0.0-beta.218",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,8 +25,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.216",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.216",
+    "@aglyn/aglyn": "1.0.0-beta.218",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.218",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/apply-publish-schedule.js

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
-import { checkEntitlement, composeScreenRoutePath, findScreenIdByRoutePath, SCREEN_KIND_EMAIL } from "@aglyn/aglyn/server";
+import { blockingRouteOwner, checkEntitlement, composeScreenRoutePath, SCREEN_KIND_EMAIL, SCREEN_ROOT_PATH } from "@aglyn/aglyn/server";
 // Deep import, like the Measurement Protocol sender's: `analytics-events.ts`
 // is deliberately DOM-free so both sides of the publish path can share the
 // one definition of `first_publish` (AGL-1588).
@@ -48,7 +48,7 @@ import { FieldValue, Timestamp } from "firebase-admin/firestore";
  *   take a LIVE page off the site, which is a worse bug than the one being
  *   fixed here.
  */ async function resolveScheduledRoutePath(options) {
-    const { hostRef, screenId, routing } = options;
+    const { hostRef, screenId, routing, defaultHomeScreenId } = options;
     const screens = hostRef.collection('screens');
     const screensById = {};
     let currentId = screenId;
@@ -73,7 +73,7 @@ import { FieldValue, Timestamp } from "firebase-admin/firestore";
     if (!path) return {
         refused: 'no-path'
     };
-    const owner = findScreenIdByRoutePath(routing, path);
+    const owner = blockingRouteOwner(routing, path, defaultHomeScreenId);
     if (owner && owner !== screenId) return {
         refused: 'path-taken'
     };
@@ -191,21 +191,27 @@ import { FieldValue, Timestamp } from "firebase-admin/firestore";
     // this entry (AGL-1588). Left undefined outside the screens branch, where
     // no route is going live and no `site_published` is sent at all.
     let firstPublish;
+    // The placeholder home page this publish takes `/` from, if it does
+    // (AGL-3408) — its entry leaves the map in the same commit.
+    let releasedPlaceholder;
     if (collectionName === 'screens') {
         try {
-            var _get;
-            const routing = (_get = (await hostRef.get()).get('screens')) != null ? _get : {};
+            var _host_get;
+            const host = await hostRef.get();
+            const routing = (_host_get = host.get('screens')) != null ? _host_get : {};
             // An existing entry is the republish case: the route is already live,
             // this only swaps which version it serves, and there is nothing to
             // register and no activation to report.
             if (!routing[docId]) {
                 // The same predicate the console's three publish surfaces use, so a
                 // `first_publish` breakdown means one thing across all four senders.
-                firstPublish = isFirstPublishedRoute(routing);
+                firstPublish = isFirstPublishedRoute(routing, host.get('defaultHomeScreenId'));
+                const defaultHomeScreenId = host.get('defaultHomeScreenId');
                 const resolved = await resolveScheduledRoutePath({
                     hostRef,
                     screenId: docId,
-                    routing
+                    routing,
+                    defaultHomeScreenId
                 });
                 if ('refused' in resolved) {
                     // Record the refusal rather than publishing a pointer at a page
@@ -224,6 +230,9 @@ import { FieldValue, Timestamp } from "firebase-admin/firestore";
                     return parent.versionId;
                 }
                 routePath = resolved.path;
+                if (routePath === SCREEN_ROOT_PATH && defaultHomeScreenId && defaultHomeScreenId !== docId && routing[defaultHomeScreenId] === SCREEN_ROOT_PATH) {
+                    releasedPlaceholder = defaultHomeScreenId;
+                }
             }
         } catch (error) {
             // Fail-open like every other write here: leave the schedule pending and
@@ -245,9 +254,19 @@ import { FieldValue, Timestamp } from "firebase-admin/firestore";
             // together or not at all. A failed commit leaves the schedule pending
             // and the next beat runs it again.
             const batch = firestore.batch();
-            batch.update(hostRef, {
+            batch.update(hostRef, _extends({
                 [`screens.${docId}`]: routePath
-            });
+            }, releasedPlaceholder ? {
+                [`screens.${releasedPlaceholder}`]: FieldValue.delete(),
+                defaultHomeScreenId: FieldValue.delete()
+            } : {}));
+            if (releasedPlaceholder) {
+                batch.set(hostRef.collection('screens').doc(releasedPlaceholder), {
+                    publishedAt: FieldValue.delete()
+                }, {
+                    merge: true
+                });
+            }
             batch.update(docRef, _extends({}, applied, {
                 publishedAt: Timestamp.now()
             }));

package/src/lib/apply-publish-schedule.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/tenant/runtime/src/lib/apply-publish-schedule.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type * as Aglyn from '@aglyn/aglyn/server'\nimport {\n  checkEntitlement,\n  composeScreenRoutePath,\n  findScreenIdByRoutePath,\n  SCREEN_KIND_EMAIL,\n} from '@aglyn/aglyn/server'\n// Deep import, like the Measurement Protocol sender's: `analytics-events.ts`\n// is deliberately DOM-free so both sides of the publish path can share the\n// one definition of `first_publish` (AGL-1588).\nimport { isFirstPublishedRoute } from '@aglyn/aglyn/app-utils/analytics-events'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  sendGa4SitePublished,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue, Timestamp } from 'firebase-admin/firestore'\n\n/** Parent chains deeper than `composeScreenRoutePath` accepts are invalid. */\nconst MAX_ANCESTOR_READS = 32\n\n/**\n * Why a due publish declined to make the screen reachable. Recorded on the\n * schedule as `skipped-unroutable` — see {@link resolveScheduledRoutePath}.\n */\ntype RouteRefusal = 'not-a-page' | 'no-path' | 'path-taken'\n\n/**\n * The routing-map path a due publish should register for a screen that has\n * no entry yet, or the reason it must not get one (AGL-1589).\n *\n * Reads the screen and walks its ancestor chain (one doc per level, bounded)\n * because the composed path is `parent segments + own slug` and the executor\n * is handed only the version pointer and the schedule. Runs at most once per\n * schedule that actually comes due, and never for the common case — a screen\n * whose route is already live is answered from the host document alone.\n *\n * The three refusals are all \"this cannot become an address\", and all three\n * are silent no-ops if left unrecorded, which is the bug this issue is about:\n *\n * - `not-a-page` — an email document (AGL-1383). It has no URL, the serve\n *   path refuses to render it, and a routing entry would make it BILLABLE\n *   against `screensPerHost` without making it reachable. `kind: 'template'`\n *   is deliberately NOT refused: a collection entry template is routed on\n *   purpose, which is how the compose pipeline picks it up (AGL-1400).\n * - `no-path` — the screen or an ancestor has no slug, so there is no address\n *   to publish at.\n * - `path-taken` — another screen already holds the address. The interactive\n *   path refuses this with a message (\"Another screen is already published at\n *   …\"); registering it anyway would put two screens at one path and could\n *   take a LIVE page off the site, which is a worse bug than the one being\n *   fixed here.\n */\nasync function resolveScheduledRoutePath(options: {\n  hostRef: FirebaseFirestore.DocumentReference\n  screenId: string\n  routing: Record<string, string>\n}): Promise<{ path: string } | { refused: RouteRefusal }> {\n  const { hostRef, screenId, routing } = options\n  const screens = hostRef.collection('screens')\n  const screensById: Record<string, Aglyn.ScreenRouteNode | undefined> = {}\n\n  let currentId: string | undefined = screenId\n  for (let depth = 0; currentId && depth < MAX_ANCESTOR_READS; depth += 1) {\n    if (screensById[currentId]) break // cycle — composeScreenRoutePath refuses\n    const snapshot = await screens.doc(currentId).get()\n    if (!snapshot.exists) break\n    if (currentId === screenId) {\n      if (\n        snapshot.get('deletedAt') != null ||\n        snapshot.get('kind') === SCREEN_KIND_EMAIL\n      ) {\n        return { refused: 'not-a-page' }\n      }\n    }\n    screensById[currentId] = {\n      slug: snapshot.get('slug'),\n      parentId: snapshot.get('parentId'),\n    }\n    currentId = snapshot.get('parentId')\n  }\n\n  const path = composeScreenRoutePath(screenId, screensById)\n  if (!path) return { refused: 'no-path' }\n  const owner = findScreenIdByRoutePath(routing, path)\n  if (owner && owner !== screenId) return { refused: 'path-taken' }\n  return { path }\n}\n\n/**\n * Lazy scheduled-publishing executor (AGL-61): if the doc carries a pending\n * `publishSchedule` whose time has passed, flip the `versionId` pointer,\n * register the screen's routing entry when the route is not live yet\n * (AGL-1589), and mark the schedule applied. Runs during ISR revalidation,\n * so a schedule\n * takes effect on the first regeneration after its time (within the\n * revalidate window) — no dedicated cron needed. Returns the effective\n * versionId; fail-open on write errors (the pointer flips next revalidate).\n */\nexport async function applyDuePublishSchedule(options: {\n  hostId: Aglyn.HostUid\n  collectionName: 'screens' | 'layouts'\n  docId: string\n  parent: Pick<Aglyn.AglynScreen, 'versionId' | 'publishSchedule'>\n}): Promise<Aglyn.VersionUid | undefined> {\n  const { hostId, collectionName, docId, parent } = options\n  const schedule = parent.publishSchedule\n  const publishAtMs = (schedule?.publishAt?.seconds ?? 0) * 1000\n  if (schedule?.status !== 'pending' || publishAtMs > Date.now()) {\n    return parent.versionId\n  }\n\n  // Plan gate (AGL-471): the console gates *writing* a schedule on the\n  // scheduledPublishing entitlement, but this executor is the authority —\n  // a schedule written directly to Firestore must not auto-publish on an\n  // unentitled plan.\n  const org = (await getOrgForHost(hostId))?.org ?? {}\n  if (!checkEntitlement(org, 'scheduledPublishing')) {\n    // Record the refusal instead of leaving it pending (AGL-1185).\n    //\n    // The refusal itself is correct and unchanged. What was wrong is that it\n    // left no trace: the schedule stayed `pending` and permanently due, so the\n    // moment the org upgraded to Business the next beat — every minute since\n    // AGL-1159 — published it. Content scheduled on a plan that could not\n    // honour it, and forgotten, would surface during an upgrade, which is\n    // exactly when nobody is looking for it.\n    //\n    // Safe to write here because the dueness check above has already passed, so\n    // this can only ever mark a schedule that came due and was declined. A\n    // future-dated schedule is returned long before this point and is untouched.\n    //\n    // Terminal on purpose: upgrading does not resurrect it. A schedule whose\n    // time passed while unentitled is stale by the time the plan changes, and\n    // re-running it is the surprise this removes. Rescheduling is a deliberate\n    // act, and the console can now say why the original never ran.\n    //\n    // Fail-open like every other write here — a failure leaves it pending,\n    // which is today's behaviour, and the next beat retries.\n    try {\n      await firebaseAdmin\n        .app()\n        .firestore()\n        .collection('hosts')\n        .doc(hostId)\n        .collection(collectionName)\n        .doc(docId)\n        .update({ 'publishSchedule.status': 'skipped-unentitled' })\n    } catch (error) {\n      console.error(error)\n    }\n    return parent.versionId\n  }\n\n  // Scheduled unpublish (AGL-113, screens only): drop the routing-map entry\n  // so the path 404s on the next revalidate. This render still serves the\n  // current version — the map is matched before this runs.\n  if (schedule.action === 'unpublish') {\n    if (collectionName === 'screens') {\n      try {\n        const firestore = firebaseAdmin.app().firestore()\n        const hostRef = firestore.collection('hosts').doc(hostId)\n        await Promise.all([\n          hostRef.update({\n            [`screens.${docId}`]: FieldValue.delete(),\n          }),\n          hostRef.collection(collectionName).doc(docId).update({\n            'publishSchedule.status': 'applied',\n            // Route no longer live — drop the published date to match the\n            // interactive unpublish path (constants/screen-publishing.ts).\n            publishedAt: FieldValue.delete(),\n          }),\n        ])\n      } catch (error) {\n        console.error(error)\n      }\n    }\n    return parent.versionId\n  }\n\n  if (!schedule.versionId) return parent.versionId\n\n  // Register the routing entry, not just the version pointer (AGL-1589).\n  //\n  // Until this, a due publish wrote `versionId` + `status: 'applied'` and\n  // nothing else — never `hosts/{hostId}.screens.{screenId}`, the map the\n  // tenant matches request paths against. A REPUBLISH was therefore correct\n  // (the entry already existed, and only the version needed swapping) and a\n  // FIRST publish silently was not: the schedule reported success, the\n  // activity log said published, and the URL kept 404ing. Scheduled\n  // publishing is a Business feature, so that was a paying customer's page.\n  //\n  // Mirrors `publishScreenRoute` (constants/screen-publishing.ts): the\n  // composed path into the host's map, `publishedAt` stamped on the screen.\n  // The stored `slug` is not rewritten — the path was composed FROM it, so\n  // there is nothing to change.\n  //\n  // Screens only. A layout has no address of its own, exactly as the\n  // unpublish branch above is screens-only.\n  //\n  // In practice the CRON BEAT is the only caller that reaches a first publish:\n  // the lazy ISR path resolves a request path through the routing map before\n  // it ever loads a screen, so an unrouted screen 404s without its schedule\n  // being read. That is the same map this now writes — which is why the bug\n  // could not heal itself on the next visit.\n  const firestore = firebaseAdmin.app().firestore()\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  const docRef = hostRef.collection(collectionName).doc(docId)\n\n  let routePath: string | undefined\n  // Decided from the routing map as read below — BEFORE the batch registers\n  // this entry (AGL-1588). Left undefined outside the screens branch, where\n  // no route is going live and no `site_published` is sent at all.\n  let firstPublish: boolean | undefined\n  if (collectionName === 'screens') {\n    try {\n      const routing = ((await hostRef.get()).get('screens') ?? {}) as Record<\n        string,\n        string\n      >\n      // An existing entry is the republish case: the route is already live,\n      // this only swaps which version it serves, and there is nothing to\n      // register and no activation to report.\n      if (!routing[docId]) {\n        // The same predicate the console's three publish surfaces use, so a\n        // `first_publish` breakdown means one thing across all four senders.\n        firstPublish = isFirstPublishedRoute(routing)\n        const resolved = await resolveScheduledRoutePath({\n          hostRef,\n          screenId: docId,\n          routing,\n        })\n        if ('refused' in resolved) {\n          // Record the refusal rather than publishing a pointer at a page\n          // nobody can reach — the AGL-1185 posture, for the same reason: an\n          // unrecorded decline is indistinguishable from success, and leaving\n          // it `pending` would re-attempt it on every beat forever. Terminal:\n          // fixing the address is a deliberate act in the console, and\n          // rescheduling is part of it.\n          try {\n            await docRef.update({\n              'publishSchedule.status': 'skipped-unroutable',\n            })\n          } catch (error) {\n            console.error(error)\n          }\n          return parent.versionId\n        }\n        routePath = resolved.path\n      }\n    } catch (error) {\n      // Fail-open like every other write here: leave the schedule pending and\n      // let the next beat (or revalidate) retry. Publishing the pointer while\n      // the routing question is unanswered is the failure being fixed.\n      console.error(error)\n      return parent.versionId\n    }\n  }\n\n  try {\n    const applied = {\n      versionId: schedule.versionId,\n      'publishSchedule.status': 'applied',\n    }\n    if (routePath) {\n      // ONE atomic commit, and the order matters more than the write count:\n      // a status of `applied` with no routing entry is permanent (nothing\n      // retries a terminal status), so the entry and the status must land\n      // together or not at all. A failed commit leaves the schedule pending\n      // and the next beat runs it again.\n      const batch = firestore.batch()\n      batch.update(hostRef, { [`screens.${docId}`]: routePath })\n      batch.update(docRef, { ...applied, publishedAt: Timestamp.now() })\n      await batch.commit()\n\n      // A route just went live with no browser anywhere near it, which is\n      // precisely what the client-side `site_published` in\n      // `publishScreenRoute` cannot see (AGL-1562, AGL-1589). Awaited, not\n      // floated: this render/beat is the only thing keeping the process\n      // alive. It never throws, and it returns immediately when the\n      // Measurement Protocol is not configured — the normal state on a\n      // self-hosted deployment and in development.\n      //\n      // ⚠️ NOT the state of our own tenant app any more. This comment used to\n      // say GA4_MEASUREMENT_ID / GA4_API_SECRET were unset on the\n      // aglyn-tenant Vercel project; both landed on 2026-08-17 12:15 UTC and\n      // the sender is LIVE on this path. The stale version of this note is\n      // part of what made a 2026-08-19 smoke pass conclude every server-side\n      // event was dead (AGL-2327). See docs/ANALYTICS.md.\n      await sendGa4SitePublished({ hostId, firstPublish })\n    } else {\n      await docRef.update(applied)\n    }\n  } catch (error) {\n    console.error(error)\n  }\n  // Serve the scheduled version for this render either way — the schedule\n  // is due, and the write (or its retry next revalidate) makes it durable.\n  return schedule.versionId\n}\n\nexport default applyDuePublishSchedule\n"],"names":["checkEntitlement","composeScreenRoutePath","findScreenIdByRoutePath","SCREEN_KIND_EMAIL","isFirstPublishedRoute","firebaseAdmin","getOrgForHost","sendGa4SitePublished","FieldValue","Timestamp","MAX_ANCESTOR_READS","resolveScheduledRoutePath","options","hostRef","screenId","routing","screens","collection","screensById","currentId","depth","snapshot","doc","get","exists","refused","slug","parentId","path","owner","applyDuePublishSchedule","schedule","hostId","collectionName","docId","parent","publishSchedule","publishAtMs","publishAt","seconds","status","Date","now","versionId","org","app","firestore","update","error","console","action","Promise","all","delete","publishedAt","docRef","routePath","firstPublish","resolved","applied","batch","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,gBAAgB,EAChBC,sBAAsB,EACtBC,uBAAuB,EACvBC,iBAAiB,QACZ,sBAAqB;AAC5B,6EAA6E;AAC7E,2EAA2E;AAC3E,gDAAgD;AAChD,SAASC,qBAAqB,QAAQ,0CAAyC;AAC/E,SACEC,aAAa,EACbC,aAAa,EACbC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,UAAU,EAAEC,SAAS,QAAQ,2BAA0B;AAEhE,4EAA4E,GAC5E,MAAMC,qBAAqB;AAQ3B;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,eAAeC,0BAA0BC,OAIxC;IACC,MAAM,EAAEC,OAAO,EAAEC,QAAQ,EAAEC,OAAO,EAAE,GAAGH;IACvC,MAAMI,UAAUH,QAAQI,UAAU,CAAC;IACnC,MAAMC,cAAiE,CAAC;IAExE,IAAIC,YAAgCL;IACpC,IAAK,IAAIM,QAAQ,GAAGD,aAAaC,QAAQV,oBAAoBU,SAAS,EAAG;QACvE,IAAIF,WAAW,CAACC,UAAU,EAAE,OAAM,yCAAyC;QAC3E,MAAME,WAAW,MAAML,QAAQM,GAAG,CAACH,WAAWI,GAAG;QACjD,IAAI,CAACF,SAASG,MAAM,EAAE;QACtB,IAAIL,cAAcL,UAAU;YAC1B,IACEO,SAASE,GAAG,CAAC,gBAAgB,QAC7BF,SAASE,GAAG,CAAC,YAAYpB,mBACzB;gBACA,OAAO;oBAAEsB,SAAS;gBAAa;YACjC;QACF;QACAP,WAAW,CAACC,UAAU,GAAG;YACvBO,MAAML,SAASE,GAAG,CAAC;YACnBI,UAAUN,SAASE,GAAG,CAAC;QACzB;QACAJ,YAAYE,SAASE,GAAG,CAAC;IAC3B;IAEA,MAAMK,OAAO3B,uBAAuBa,UAAUI;IAC9C,IAAI,CAACU,MAAM,OAAO;QAAEH,SAAS;IAAU;IACvC,MAAMI,QAAQ3B,wBAAwBa,SAASa;IAC/C,IAAIC,SAASA,UAAUf,UAAU,OAAO;QAAEW,SAAS;IAAa;IAChE,OAAO;QAAEG;IAAK;AAChB;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeE,wBAAwBlB,OAK7C;;QAGsBmB,qBASR;IAXb,MAAM,EAAEC,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAGvB;IAClD,MAAMmB,WAAWI,OAAOC,eAAe;IACvC,MAAMC,cAAc,SAACN,6BAAAA,sBAAAA,SAAUO,SAAS,qBAAnBP,oBAAqBQ,OAAO,mBAAI,KAAK;IAC1D,IAAIR,CAAAA,4BAAAA,SAAUS,MAAM,MAAK,aAAaH,cAAcI,KAAKC,GAAG,IAAI;QAC9D,OAAOP,OAAOQ,SAAS;IACzB;IAEA,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,mBAAmB;IACnB,MAAMC,gBAAO,QAAA,MAAMtC,cAAc0B,4BAArB,AAAC,MAA8BY,GAAG,oBAAI,CAAC;IACnD,IAAI,CAAC5C,iBAAiB4C,KAAK,wBAAwB;QACjD,+DAA+D;QAC/D,EAAE;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,yCAAyC;QACzC,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,6EAA6E;QAC7E,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,EAAE;QACF,uEAAuE;QACvE,yDAAyD;QACzD,IAAI;YACF,MAAMvC,cACHwC,GAAG,GACHC,SAAS,GACT7B,UAAU,CAAC,SACXK,GAAG,CAACU,QACJf,UAAU,CAACgB,gBACXX,GAAG,CAACY,OACJa,MAAM,CAAC;gBAAE,0BAA0B;YAAqB;QAC7D,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAACA;QAChB;QACA,OAAOb,OAAOQ,SAAS;IACzB;IAEA,0EAA0E;IAC1E,wEAAwE;IACxE,yDAAyD;IACzD,IAAIZ,SAASmB,MAAM,KAAK,aAAa;QACnC,IAAIjB,mBAAmB,WAAW;YAChC,IAAI;gBACF,MAAMa,YAAYzC,cAAcwC,GAAG,GAAGC,SAAS;gBAC/C,MAAMjC,UAAUiC,UAAU7B,UAAU,CAAC,SAASK,GAAG,CAACU;gBAClD,MAAMmB,QAAQC,GAAG,CAAC;oBAChBvC,QAAQkC,MAAM,CAAC;wBACb,CAAC,CAAC,QAAQ,EAAEb,OAAO,CAAC,EAAE1B,WAAW6C,MAAM;oBACzC;oBACAxC,QAAQI,UAAU,CAACgB,gBAAgBX,GAAG,CAACY,OAAOa,MAAM,CAAC;wBACnD,0BAA0B;wBAC1B,8DAA8D;wBAC9D,+DAA+D;wBAC/DO,aAAa9C,WAAW6C,MAAM;oBAChC;iBACD;YACH,EAAE,OAAOL,OAAO;gBACdC,QAAQD,KAAK,CAACA;YAChB;QACF;QACA,OAAOb,OAAOQ,SAAS;IACzB;IAEA,IAAI,CAACZ,SAASY,SAAS,EAAE,OAAOR,OAAOQ,SAAS;IAEhD,uEAAuE;IACvE,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,8BAA8B;IAC9B,EAAE;IACF,mEAAmE;IACnE,0CAA0C;IAC1C,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,2CAA2C;IAC3C,MAAMG,YAAYzC,cAAcwC,GAAG,GAAGC,SAAS;IAC/C,MAAMjC,UAAUiC,UAAU7B,UAAU,CAAC,SAASK,GAAG,CAACU;IAClD,MAAMuB,SAAS1C,QAAQI,UAAU,CAACgB,gBAAgBX,GAAG,CAACY;IAEtD,IAAIsB;IACJ,0EAA0E;IAC1E,0EAA0E;IAC1E,iEAAiE;IACjE,IAAIC;IACJ,IAAIxB,mBAAmB,WAAW;QAChC,IAAI;gBACe;YAAjB,MAAMlB,WAAW,OAAA,AAAC,CAAA,MAAMF,QAAQU,GAAG,EAAC,EAAGA,GAAG,CAAC,sBAA1B,OAAwC,CAAC;YAI1D,sEAAsE;YACtE,mEAAmE;YACnE,wCAAwC;YACxC,IAAI,CAACR,OAAO,CAACmB,MAAM,EAAE;gBACnB,oEAAoE;gBACpE,qEAAqE;gBACrEuB,eAAerD,sBAAsBW;gBACrC,MAAM2C,WAAW,MAAM/C,0BAA0B;oBAC/CE;oBACAC,UAAUoB;oBACVnB;gBACF;gBACA,IAAI,aAAa2C,UAAU;oBACzB,gEAAgE;oBAChE,mEAAmE;oBACnE,oEAAoE;oBACpE,oEAAoE;oBACpE,6DAA6D;oBAC7D,8BAA8B;oBAC9B,IAAI;wBACF,MAAMH,OAAOR,MAAM,CAAC;4BAClB,0BAA0B;wBAC5B;oBACF,EAAE,OAAOC,OAAO;wBACdC,QAAQD,KAAK,CAACA;oBAChB;oBACA,OAAOb,OAAOQ,SAAS;gBACzB;gBACAa,YAAYE,SAAS9B,IAAI;YAC3B;QACF,EAAE,OAAOoB,OAAO;YACd,wEAAwE;YACxE,wEAAwE;YACxE,iEAAiE;YACjEC,QAAQD,KAAK,CAACA;YACd,OAAOb,OAAOQ,SAAS;QACzB;IACF;IAEA,IAAI;QACF,MAAMgB,UAAU;YACdhB,WAAWZ,SAASY,SAAS;YAC7B,0BAA0B;QAC5B;QACA,IAAIa,WAAW;YACb,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,mCAAmC;YACnC,MAAMI,QAAQd,UAAUc,KAAK;YAC7BA,MAAMb,MAAM,CAAClC,SAAS;gBAAE,CAAC,CAAC,QAAQ,EAAEqB,OAAO,CAAC,EAAEsB;YAAU;YACxDI,MAAMb,MAAM,CAACQ,QAAQ,aAAKI;gBAASL,aAAa7C,UAAUiC,GAAG;;YAC7D,MAAMkB,MAAMC,MAAM;YAElB,oEAAoE;YACpE,qDAAqD;YACrD,qEAAqE;YACrE,kEAAkE;YAClE,8DAA8D;YAC9D,iEAAiE;YACjE,6CAA6C;YAC7C,EAAE;YACF,wEAAwE;YACxE,4DAA4D;YAC5D,uEAAuE;YACvE,qEAAqE;YACrE,uEAAuE;YACvE,oDAAoD;YACpD,MAAMtD,qBAAqB;gBAAEyB;gBAAQyB;YAAa;QACpD,OAAO;YACL,MAAMF,OAAOR,MAAM,CAACY;QACtB;IACF,EAAE,OAAOX,OAAO;QACdC,QAAQD,KAAK,CAACA;IAChB;IACA,wEAAwE;IACxE,yEAAyE;IACzE,OAAOjB,SAASY,SAAS;AAC3B;AAEA,eAAeb,wBAAuB"}
+{"version":3,"sources":["../../../../../../libs/tenant/runtime/src/lib/apply-publish-schedule.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type * as Aglyn from '@aglyn/aglyn/server'\nimport {\n  blockingRouteOwner,\n  checkEntitlement,\n  composeScreenRoutePath,\n  SCREEN_KIND_EMAIL,\n  SCREEN_ROOT_PATH,\n} from '@aglyn/aglyn/server'\n// Deep import, like the Measurement Protocol sender's: `analytics-events.ts`\n// is deliberately DOM-free so both sides of the publish path can share the\n// one definition of `first_publish` (AGL-1588).\nimport { isFirstPublishedRoute } from '@aglyn/aglyn/app-utils/analytics-events'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  sendGa4SitePublished,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue, Timestamp } from 'firebase-admin/firestore'\n\n/** Parent chains deeper than `composeScreenRoutePath` accepts are invalid. */\nconst MAX_ANCESTOR_READS = 32\n\n/**\n * Why a due publish declined to make the screen reachable. Recorded on the\n * schedule as `skipped-unroutable` — see {@link resolveScheduledRoutePath}.\n */\ntype RouteRefusal = 'not-a-page' | 'no-path' | 'path-taken'\n\n/**\n * The routing-map path a due publish should register for a screen that has\n * no entry yet, or the reason it must not get one (AGL-1589).\n *\n * Reads the screen and walks its ancestor chain (one doc per level, bounded)\n * because the composed path is `parent segments + own slug` and the executor\n * is handed only the version pointer and the schedule. Runs at most once per\n * schedule that actually comes due, and never for the common case — a screen\n * whose route is already live is answered from the host document alone.\n *\n * The three refusals are all \"this cannot become an address\", and all three\n * are silent no-ops if left unrecorded, which is the bug this issue is about:\n *\n * - `not-a-page` — an email document (AGL-1383). It has no URL, the serve\n *   path refuses to render it, and a routing entry would make it BILLABLE\n *   against `screensPerHost` without making it reachable. `kind: 'template'`\n *   is deliberately NOT refused: a collection entry template is routed on\n *   purpose, which is how the compose pipeline picks it up (AGL-1400).\n * - `no-path` — the screen or an ancestor has no slug, so there is no address\n *   to publish at.\n * - `path-taken` — another screen already holds the address. The interactive\n *   path refuses this with a message (\"Another screen is already published at\n *   …\"); registering it anyway would put two screens at one path and could\n *   take a LIVE page off the site, which is a worse bug than the one being\n *   fixed here.\n */\nasync function resolveScheduledRoutePath(options: {\n  hostRef: FirebaseFirestore.DocumentReference\n  screenId: string\n  routing: Record<string, string>\n  /** The placeholder home page, which does not block `/` (AGL-3408). */\n  defaultHomeScreenId?: string\n}): Promise<{ path: string } | { refused: RouteRefusal }> {\n  const { hostRef, screenId, routing, defaultHomeScreenId } = options\n  const screens = hostRef.collection('screens')\n  const screensById: Record<string, Aglyn.ScreenRouteNode | undefined> = {}\n\n  let currentId: string | undefined = screenId\n  for (let depth = 0; currentId && depth < MAX_ANCESTOR_READS; depth += 1) {\n    if (screensById[currentId]) break // cycle — composeScreenRoutePath refuses\n    const snapshot = await screens.doc(currentId).get()\n    if (!snapshot.exists) break\n    if (currentId === screenId) {\n      if (\n        snapshot.get('deletedAt') != null ||\n        snapshot.get('kind') === SCREEN_KIND_EMAIL\n      ) {\n        return { refused: 'not-a-page' }\n      }\n    }\n    screensById[currentId] = {\n      slug: snapshot.get('slug'),\n      parentId: snapshot.get('parentId'),\n    }\n    currentId = snapshot.get('parentId')\n  }\n\n  const path = composeScreenRoutePath(screenId, screensById)\n  if (!path) return { refused: 'no-path' }\n  const owner = blockingRouteOwner(routing, path, defaultHomeScreenId)\n  if (owner && owner !== screenId) return { refused: 'path-taken' }\n  return { path }\n}\n\n/**\n * Lazy scheduled-publishing executor (AGL-61): if the doc carries a pending\n * `publishSchedule` whose time has passed, flip the `versionId` pointer,\n * register the screen's routing entry when the route is not live yet\n * (AGL-1589), and mark the schedule applied. Runs during ISR revalidation,\n * so a schedule\n * takes effect on the first regeneration after its time (within the\n * revalidate window) — no dedicated cron needed. Returns the effective\n * versionId; fail-open on write errors (the pointer flips next revalidate).\n */\nexport async function applyDuePublishSchedule(options: {\n  hostId: Aglyn.HostUid\n  collectionName: 'screens' | 'layouts'\n  docId: string\n  parent: Pick<Aglyn.AglynScreen, 'versionId' | 'publishSchedule'>\n}): Promise<Aglyn.VersionUid | undefined> {\n  const { hostId, collectionName, docId, parent } = options\n  const schedule = parent.publishSchedule\n  const publishAtMs = (schedule?.publishAt?.seconds ?? 0) * 1000\n  if (schedule?.status !== 'pending' || publishAtMs > Date.now()) {\n    return parent.versionId\n  }\n\n  // Plan gate (AGL-471): the console gates *writing* a schedule on the\n  // scheduledPublishing entitlement, but this executor is the authority —\n  // a schedule written directly to Firestore must not auto-publish on an\n  // unentitled plan.\n  const org = (await getOrgForHost(hostId))?.org ?? {}\n  if (!checkEntitlement(org, 'scheduledPublishing')) {\n    // Record the refusal instead of leaving it pending (AGL-1185).\n    //\n    // The refusal itself is correct and unchanged. What was wrong is that it\n    // left no trace: the schedule stayed `pending` and permanently due, so the\n    // moment the org upgraded to Business the next beat — every minute since\n    // AGL-1159 — published it. Content scheduled on a plan that could not\n    // honour it, and forgotten, would surface during an upgrade, which is\n    // exactly when nobody is looking for it.\n    //\n    // Safe to write here because the dueness check above has already passed, so\n    // this can only ever mark a schedule that came due and was declined. A\n    // future-dated schedule is returned long before this point and is untouched.\n    //\n    // Terminal on purpose: upgrading does not resurrect it. A schedule whose\n    // time passed while unentitled is stale by the time the plan changes, and\n    // re-running it is the surprise this removes. Rescheduling is a deliberate\n    // act, and the console can now say why the original never ran.\n    //\n    // Fail-open like every other write here — a failure leaves it pending,\n    // which is today's behaviour, and the next beat retries.\n    try {\n      await firebaseAdmin\n        .app()\n        .firestore()\n        .collection('hosts')\n        .doc(hostId)\n        .collection(collectionName)\n        .doc(docId)\n        .update({ 'publishSchedule.status': 'skipped-unentitled' })\n    } catch (error) {\n      console.error(error)\n    }\n    return parent.versionId\n  }\n\n  // Scheduled unpublish (AGL-113, screens only): drop the routing-map entry\n  // so the path 404s on the next revalidate. This render still serves the\n  // current version — the map is matched before this runs.\n  if (schedule.action === 'unpublish') {\n    if (collectionName === 'screens') {\n      try {\n        const firestore = firebaseAdmin.app().firestore()\n        const hostRef = firestore.collection('hosts').doc(hostId)\n        await Promise.all([\n          hostRef.update({\n            [`screens.${docId}`]: FieldValue.delete(),\n          }),\n          hostRef.collection(collectionName).doc(docId).update({\n            'publishSchedule.status': 'applied',\n            // Route no longer live — drop the published date to match the\n            // interactive unpublish path (constants/screen-publishing.ts).\n            publishedAt: FieldValue.delete(),\n          }),\n        ])\n      } catch (error) {\n        console.error(error)\n      }\n    }\n    return parent.versionId\n  }\n\n  if (!schedule.versionId) return parent.versionId\n\n  // Register the routing entry, not just the version pointer (AGL-1589).\n  //\n  // Until this, a due publish wrote `versionId` + `status: 'applied'` and\n  // nothing else — never `hosts/{hostId}.screens.{screenId}`, the map the\n  // tenant matches request paths against. A REPUBLISH was therefore correct\n  // (the entry already existed, and only the version needed swapping) and a\n  // FIRST publish silently was not: the schedule reported success, the\n  // activity log said published, and the URL kept 404ing. Scheduled\n  // publishing is a Business feature, so that was a paying customer's page.\n  //\n  // Mirrors `publishScreenRoute` (constants/screen-publishing.ts): the\n  // composed path into the host's map, `publishedAt` stamped on the screen.\n  // The stored `slug` is not rewritten — the path was composed FROM it, so\n  // there is nothing to change.\n  //\n  // Screens only. A layout has no address of its own, exactly as the\n  // unpublish branch above is screens-only.\n  //\n  // In practice the CRON BEAT is the only caller that reaches a first publish:\n  // the lazy ISR path resolves a request path through the routing map before\n  // it ever loads a screen, so an unrouted screen 404s without its schedule\n  // being read. That is the same map this now writes — which is why the bug\n  // could not heal itself on the next visit.\n  const firestore = firebaseAdmin.app().firestore()\n  const hostRef = firestore.collection('hosts').doc(hostId)\n  const docRef = hostRef.collection(collectionName).doc(docId)\n\n  let routePath: string | undefined\n  // Decided from the routing map as read below — BEFORE the batch registers\n  // this entry (AGL-1588). Left undefined outside the screens branch, where\n  // no route is going live and no `site_published` is sent at all.\n  let firstPublish: boolean | undefined\n  // The placeholder home page this publish takes `/` from, if it does\n  // (AGL-3408) — its entry leaves the map in the same commit.\n  let releasedPlaceholder: string | undefined\n  if (collectionName === 'screens') {\n    try {\n      const host = await hostRef.get()\n      const routing = (host.get('screens') ?? {}) as Record<string, string>\n      // An existing entry is the republish case: the route is already live,\n      // this only swaps which version it serves, and there is nothing to\n      // register and no activation to report.\n      if (!routing[docId]) {\n        // The same predicate the console's three publish surfaces use, so a\n        // `first_publish` breakdown means one thing across all four senders.\n        firstPublish = isFirstPublishedRoute(\n          routing,\n          host.get('defaultHomeScreenId'),\n        )\n        const defaultHomeScreenId = host.get('defaultHomeScreenId')\n        const resolved = await resolveScheduledRoutePath({\n          hostRef,\n          screenId: docId,\n          routing,\n          defaultHomeScreenId,\n        })\n        if ('refused' in resolved) {\n          // Record the refusal rather than publishing a pointer at a page\n          // nobody can reach — the AGL-1185 posture, for the same reason: an\n          // unrecorded decline is indistinguishable from success, and leaving\n          // it `pending` would re-attempt it on every beat forever. Terminal:\n          // fixing the address is a deliberate act in the console, and\n          // rescheduling is part of it.\n          try {\n            await docRef.update({\n              'publishSchedule.status': 'skipped-unroutable',\n            })\n          } catch (error) {\n            console.error(error)\n          }\n          return parent.versionId\n        }\n        routePath = resolved.path\n        if (\n          routePath === SCREEN_ROOT_PATH &&\n          defaultHomeScreenId &&\n          defaultHomeScreenId !== docId &&\n          routing[defaultHomeScreenId] === SCREEN_ROOT_PATH\n        ) {\n          releasedPlaceholder = defaultHomeScreenId\n        }\n      }\n    } catch (error) {\n      // Fail-open like every other write here: leave the schedule pending and\n      // let the next beat (or revalidate) retry. Publishing the pointer while\n      // the routing question is unanswered is the failure being fixed.\n      console.error(error)\n      return parent.versionId\n    }\n  }\n\n  try {\n    const applied = {\n      versionId: schedule.versionId,\n      'publishSchedule.status': 'applied',\n    }\n    if (routePath) {\n      // ONE atomic commit, and the order matters more than the write count:\n      // a status of `applied` with no routing entry is permanent (nothing\n      // retries a terminal status), so the entry and the status must land\n      // together or not at all. A failed commit leaves the schedule pending\n      // and the next beat runs it again.\n      const batch = firestore.batch()\n      batch.update(hostRef, {\n        [`screens.${docId}`]: routePath,\n        // The first real home page replaces the placeholder (AGL-3408), in\n        // the same commit, so `/` is never answered by two screens.\n        ...(releasedPlaceholder\n          ? {\n              [`screens.${releasedPlaceholder}`]: FieldValue.delete(),\n              defaultHomeScreenId: FieldValue.delete(),\n            }\n          : {}),\n      })\n      if (releasedPlaceholder) {\n        batch.set(\n          hostRef.collection('screens').doc(releasedPlaceholder),\n          { publishedAt: FieldValue.delete() },\n          { merge: true },\n        )\n      }\n      batch.update(docRef, { ...applied, publishedAt: Timestamp.now() })\n      await batch.commit()\n\n      // A route just went live with no browser anywhere near it, which is\n      // precisely what the client-side `site_published` in\n      // `publishScreenRoute` cannot see (AGL-1562, AGL-1589). Awaited, not\n      // floated: this render/beat is the only thing keeping the process\n      // alive. It never throws, and it returns immediately when the\n      // Measurement Protocol is not configured — the normal state on a\n      // self-hosted deployment and in development.\n      //\n      // ⚠️ NOT the state of our own tenant app any more. This comment used to\n      // say GA4_MEASUREMENT_ID / GA4_API_SECRET were unset on the\n      // aglyn-tenant Vercel project; both landed on 2026-08-17 12:15 UTC and\n      // the sender is LIVE on this path. The stale version of this note is\n      // part of what made a 2026-08-19 smoke pass conclude every server-side\n      // event was dead (AGL-2327). See docs/ANALYTICS.md.\n      await sendGa4SitePublished({ hostId, firstPublish })\n    } else {\n      await docRef.update(applied)\n    }\n  } catch (error) {\n    console.error(error)\n  }\n  // Serve the scheduled version for this render either way — the schedule\n  // is due, and the write (or its retry next revalidate) makes it durable.\n  return schedule.versionId\n}\n\nexport default applyDuePublishSchedule\n"],"names":["blockingRouteOwner","checkEntitlement","composeScreenRoutePath","SCREEN_KIND_EMAIL","SCREEN_ROOT_PATH","isFirstPublishedRoute","firebaseAdmin","getOrgForHost","sendGa4SitePublished","FieldValue","Timestamp","MAX_ANCESTOR_READS","resolveScheduledRoutePath","options","hostRef","screenId","routing","defaultHomeScreenId","screens","collection","screensById","currentId","depth","snapshot","doc","get","exists","refused","slug","parentId","path","owner","applyDuePublishSchedule","schedule","hostId","collectionName","docId","parent","publishSchedule","publishAtMs","publishAt","seconds","status","Date","now","versionId","org","app","firestore","update","error","console","action","Promise","all","delete","publishedAt","docRef","routePath","firstPublish","releasedPlaceholder","host","resolved","applied","batch","set","merge","commit"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,kBAAkB,EAClBC,gBAAgB,EAChBC,sBAAsB,EACtBC,iBAAiB,EACjBC,gBAAgB,QACX,sBAAqB;AAC5B,6EAA6E;AAC7E,2EAA2E;AAC3E,gDAAgD;AAChD,SAASC,qBAAqB,QAAQ,0CAAyC;AAC/E,SACEC,aAAa,EACbC,aAAa,EACbC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,UAAU,EAAEC,SAAS,QAAQ,2BAA0B;AAEhE,4EAA4E,GAC5E,MAAMC,qBAAqB;AAQ3B;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,eAAeC,0BAA0BC,OAMxC;IACC,MAAM,EAAEC,OAAO,EAAEC,QAAQ,EAAEC,OAAO,EAAEC,mBAAmB,EAAE,GAAGJ;IAC5D,MAAMK,UAAUJ,QAAQK,UAAU,CAAC;IACnC,MAAMC,cAAiE,CAAC;IAExE,IAAIC,YAAgCN;IACpC,IAAK,IAAIO,QAAQ,GAAGD,aAAaC,QAAQX,oBAAoBW,SAAS,EAAG;QACvE,IAAIF,WAAW,CAACC,UAAU,EAAE,OAAM,yCAAyC;QAC3E,MAAME,WAAW,MAAML,QAAQM,GAAG,CAACH,WAAWI,GAAG;QACjD,IAAI,CAACF,SAASG,MAAM,EAAE;QACtB,IAAIL,cAAcN,UAAU;YAC1B,IACEQ,SAASE,GAAG,CAAC,gBAAgB,QAC7BF,SAASE,GAAG,CAAC,YAAYtB,mBACzB;gBACA,OAAO;oBAAEwB,SAAS;gBAAa;YACjC;QACF;QACAP,WAAW,CAACC,UAAU,GAAG;YACvBO,MAAML,SAASE,GAAG,CAAC;YACnBI,UAAUN,SAASE,GAAG,CAAC;QACzB;QACAJ,YAAYE,SAASE,GAAG,CAAC;IAC3B;IAEA,MAAMK,OAAO5B,uBAAuBa,UAAUK;IAC9C,IAAI,CAACU,MAAM,OAAO;QAAEH,SAAS;IAAU;IACvC,MAAMI,QAAQ/B,mBAAmBgB,SAASc,MAAMb;IAChD,IAAIc,SAASA,UAAUhB,UAAU,OAAO;QAAEY,SAAS;IAAa;IAChE,OAAO;QAAEG;IAAK;AAChB;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeE,wBAAwBnB,OAK7C;;QAGsBoB,qBASR;IAXb,MAAM,EAAEC,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAGxB;IAClD,MAAMoB,WAAWI,OAAOC,eAAe;IACvC,MAAMC,cAAc,SAACN,6BAAAA,sBAAAA,SAAUO,SAAS,qBAAnBP,oBAAqBQ,OAAO,mBAAI,KAAK;IAC1D,IAAIR,CAAAA,4BAAAA,SAAUS,MAAM,MAAK,aAAaH,cAAcI,KAAKC,GAAG,IAAI;QAC9D,OAAOP,OAAOQ,SAAS;IACzB;IAEA,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,mBAAmB;IACnB,MAAMC,gBAAO,QAAA,MAAMvC,cAAc2B,4BAArB,AAAC,MAA8BY,GAAG,oBAAI,CAAC;IACnD,IAAI,CAAC7C,iBAAiB6C,KAAK,wBAAwB;QACjD,+DAA+D;QAC/D,EAAE;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,yCAAyC;QACzC,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,6EAA6E;QAC7E,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,EAAE;QACF,uEAAuE;QACvE,yDAAyD;QACzD,IAAI;YACF,MAAMxC,cACHyC,GAAG,GACHC,SAAS,GACT7B,UAAU,CAAC,SACXK,GAAG,CAACU,QACJf,UAAU,CAACgB,gBACXX,GAAG,CAACY,OACJa,MAAM,CAAC;gBAAE,0BAA0B;YAAqB;QAC7D,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAACA;QAChB;QACA,OAAOb,OAAOQ,SAAS;IACzB;IAEA,0EAA0E;IAC1E,wEAAwE;IACxE,yDAAyD;IACzD,IAAIZ,SAASmB,MAAM,KAAK,aAAa;QACnC,IAAIjB,mBAAmB,WAAW;YAChC,IAAI;gBACF,MAAMa,YAAY1C,cAAcyC,GAAG,GAAGC,SAAS;gBAC/C,MAAMlC,UAAUkC,UAAU7B,UAAU,CAAC,SAASK,GAAG,CAACU;gBAClD,MAAMmB,QAAQC,GAAG,CAAC;oBAChBxC,QAAQmC,MAAM,CAAC;wBACb,CAAC,CAAC,QAAQ,EAAEb,OAAO,CAAC,EAAE3B,WAAW8C,MAAM;oBACzC;oBACAzC,QAAQK,UAAU,CAACgB,gBAAgBX,GAAG,CAACY,OAAOa,MAAM,CAAC;wBACnD,0BAA0B;wBAC1B,8DAA8D;wBAC9D,+DAA+D;wBAC/DO,aAAa/C,WAAW8C,MAAM;oBAChC;iBACD;YACH,EAAE,OAAOL,OAAO;gBACdC,QAAQD,KAAK,CAACA;YAChB;QACF;QACA,OAAOb,OAAOQ,SAAS;IACzB;IAEA,IAAI,CAACZ,SAASY,SAAS,EAAE,OAAOR,OAAOQ,SAAS;IAEhD,uEAAuE;IACvE,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,8BAA8B;IAC9B,EAAE;IACF,mEAAmE;IACnE,0CAA0C;IAC1C,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,2CAA2C;IAC3C,MAAMG,YAAY1C,cAAcyC,GAAG,GAAGC,SAAS;IAC/C,MAAMlC,UAAUkC,UAAU7B,UAAU,CAAC,SAASK,GAAG,CAACU;IAClD,MAAMuB,SAAS3C,QAAQK,UAAU,CAACgB,gBAAgBX,GAAG,CAACY;IAEtD,IAAIsB;IACJ,0EAA0E;IAC1E,0EAA0E;IAC1E,iEAAiE;IACjE,IAAIC;IACJ,oEAAoE;IACpE,4DAA4D;IAC5D,IAAIC;IACJ,IAAIzB,mBAAmB,WAAW;QAChC,IAAI;gBAEe0B;YADjB,MAAMA,OAAO,MAAM/C,QAAQW,GAAG;YAC9B,MAAMT,WAAW6C,YAAAA,KAAKpC,GAAG,CAAC,sBAAToC,YAAuB,CAAC;YACzC,sEAAsE;YACtE,mEAAmE;YACnE,wCAAwC;YACxC,IAAI,CAAC7C,OAAO,CAACoB,MAAM,EAAE;gBACnB,oEAAoE;gBACpE,qEAAqE;gBACrEuB,eAAetD,sBACbW,SACA6C,KAAKpC,GAAG,CAAC;gBAEX,MAAMR,sBAAsB4C,KAAKpC,GAAG,CAAC;gBACrC,MAAMqC,WAAW,MAAMlD,0BAA0B;oBAC/CE;oBACAC,UAAUqB;oBACVpB;oBACAC;gBACF;gBACA,IAAI,aAAa6C,UAAU;oBACzB,gEAAgE;oBAChE,mEAAmE;oBACnE,oEAAoE;oBACpE,oEAAoE;oBACpE,6DAA6D;oBAC7D,8BAA8B;oBAC9B,IAAI;wBACF,MAAML,OAAOR,MAAM,CAAC;4BAClB,0BAA0B;wBAC5B;oBACF,EAAE,OAAOC,OAAO;wBACdC,QAAQD,KAAK,CAACA;oBAChB;oBACA,OAAOb,OAAOQ,SAAS;gBACzB;gBACAa,YAAYI,SAAShC,IAAI;gBACzB,IACE4B,cAActD,oBACda,uBACAA,wBAAwBmB,SACxBpB,OAAO,CAACC,oBAAoB,KAAKb,kBACjC;oBACAwD,sBAAsB3C;gBACxB;YACF;QACF,EAAE,OAAOiC,OAAO;YACd,wEAAwE;YACxE,wEAAwE;YACxE,iEAAiE;YACjEC,QAAQD,KAAK,CAACA;YACd,OAAOb,OAAOQ,SAAS;QACzB;IACF;IAEA,IAAI;QACF,MAAMkB,UAAU;YACdlB,WAAWZ,SAASY,SAAS;YAC7B,0BAA0B;QAC5B;QACA,IAAIa,WAAW;YACb,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,mCAAmC;YACnC,MAAMM,QAAQhB,UAAUgB,KAAK;YAC7BA,MAAMf,MAAM,CAACnC,SAAS;gBACpB,CAAC,CAAC,QAAQ,EAAEsB,OAAO,CAAC,EAAEsB;eAGlBE,sBACA;gBACE,CAAC,CAAC,QAAQ,EAAEA,qBAAqB,CAAC,EAAEnD,WAAW8C,MAAM;gBACrDtC,qBAAqBR,WAAW8C,MAAM;YACxC,IACA,CAAC;YAEP,IAAIK,qBAAqB;gBACvBI,MAAMC,GAAG,CACPnD,QAAQK,UAAU,CAAC,WAAWK,GAAG,CAACoC,sBAClC;oBAAEJ,aAAa/C,WAAW8C,MAAM;gBAAG,GACnC;oBAAEW,OAAO;gBAAK;YAElB;YACAF,MAAMf,MAAM,CAACQ,QAAQ,aAAKM;gBAASP,aAAa9C,UAAUkC,GAAG;;YAC7D,MAAMoB,MAAMG,MAAM;YAElB,oEAAoE;YACpE,qDAAqD;YACrD,qEAAqE;YACrE,kEAAkE;YAClE,8DAA8D;YAC9D,iEAAiE;YACjE,6CAA6C;YAC7C,EAAE;YACF,wEAAwE;YACxE,4DAA4D;YAC5D,uEAAuE;YACvE,qEAAqE;YACrE,uEAAuE;YACvE,oDAAoD;YACpD,MAAM3D,qBAAqB;gBAAE0B;gBAAQyB;YAAa;QACpD,OAAO;YACL,MAAMF,OAAOR,MAAM,CAACc;QACtB;IACF,EAAE,OAAOb,OAAO;QACdC,QAAQD,KAAK,CAACA;IAChB;IACA,wEAAwE;IACxE,yEAAyE;IACzE,OAAOjB,SAASY,SAAS;AAC3B;AAEA,eAAeb,wBAAuB"}