@rapidmx/crm-plugin 0.1.0

package/dist/lib/routes/BaseTemplateRoute.js

@@ -0,0 +1,207 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ACLAction, ModelUtils, RouteDecorators } from "@rapidrest/service-core";
+import { ObjectDecorators } from "@rapidrest/core";
+import { hasMailAccess } from "@rapidmx/restapi";
+import { WorkspaceAction } from "../models/types.js";
+import { designBlocks, hasUnsubscribeLink, starterDesign, validateDesign } from "../templates/Design.js";
+import { MERGE_TAGS } from "../templates/MergeContext.js";
+import { checkMergeTags, compileDesign, renderEmail } from "../templates/Render.js";
+import { sanitizeBlockHtml, sanitizeText } from "../templates/Sanitize.js";
+import { sendSystemMessage } from "../util/Mailer.js";
+import { badRequest, readEmail, readText, requireObject } from "../util/Validation.js";
+import { BaseWorkspaceRecordRoute } from "./BaseWorkspaceRecordRoute.js";
+const { Inject } = ObjectDecorators;
+const { Get, Param, Post, User: AuthUser } = RouteDecorators;
+/** How many templates one workspace may have. */
+export const MAX_TEMPLATES = 1000;
+/**
+ * A workspace's email templates (`/api/mail/crm/templates`) - see `BaseWorkspaceRecordRoute` for the endpoints - plus:
+ * - `POST /:workspaceUid/render` - `{ design, subject, preheader?, contactUid? }` to `{ subject, html, text }`: a preview of a design, saved
+ * or not, for one contact or a made-up reader.
+ * - `POST /:workspaceUid/:uid/test` - `{ to, senderUid, contactUid? }`: sends the template to one address of a mailbox the caller can
+ * read (so a test send can't mail strangers), subject prefixed "[Test]".
+ * - `POST /:workspaceUid/:uid/duplicate` - a copy named "Copy of ...".
+ * - `GET /:workspaceUid/merge-tags` - the merge tags a template can use, the workspace's custom properties included.
+ *
+ * A template's design is checked and sanitized on save (`templates/Design.ts`), compiled with MJML, and its merge tags are parsed, so a
+ * template that can't be sent is refused at once. Hand-written HTML blocks can only be added or changed by workspace admins.
+ */
+export class BaseTemplateRoute extends BaseWorkspaceRecordRoute {
+    constructor() {
+        super(...arguments);
+        this.model = "template";
+        this.pushType = "CrmEmailTemplate";
+        this.sortFields = ["name"];
+        this.maxRecords = MAX_TEMPLATES;
+    }
+    async readCreate(body, context) {
+        const fields = await this.readFields(body, context, undefined);
+        fields.design ?? (fields.design = starterDesign());
+        await this.checkCompiles(fields.design, fields.subject, fields.preheader);
+        return fields;
+    }
+    async readUpdate(body, existing, context) {
+        const fields = await this.readFields(body, context, existing);
+        await this.checkCompiles((fields.design ?? existing.design), fields.subject ?? existing.subject, "preheader" in fields ? (fields.preheader ?? undefined) : (existing.preheader ?? undefined));
+        return fields;
+    }
+    async readFields(body, context, existing) {
+        const fields = {};
+        for (const [field, required, max] of [
+            ["name", true, undefined],
+            ["subject", true, 998],
+            ["preheader", false, 500],
+            ["category", false, undefined],
+        ]) {
+            const value = readText(body, field, { required: required && !existing, max });
+            if (value === null && required) {
+                throw badRequest(`'${field}' is required.`);
+            }
+            if (value !== undefined) {
+                fields[field] = value;
+            }
+        }
+        if (body.design !== undefined) {
+            fields.design = await this.readDesign(body.design, context, existing);
+        }
+        return fields;
+    }
+    /** The design of a request, checked - hand-written HTML only from an admin, unless unchanged from `existing`. */
+    async readDesign(raw, context, existing) {
+        const previous = new Map(existing ? designBlocks(existing.design).map((block) => [block.id, block]) : []);
+        return validateDesign(raw, {
+            allowHtml: await this.canManage(context.user, context.workspaceUid),
+            previous,
+            sanitizeText,
+            sanitizeHtml: sanitizeBlockHtml,
+        });
+    }
+    /** Refuses a design MJML can't lay out, or a subject or design with a broken merge tag. */
+    async checkCompiles(design, subject, preheader) {
+        checkMergeTags(subject, await compileDesign(design, preheader));
+    }
+    async toViews(records) {
+        return records.map((record) => ({ ...JSON.parse(JSON.stringify(record)), hasUnsubscribeLink: hasUnsubscribeLink(record.design) }));
+    }
+    async mergeTags(workspaceUid, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.READ);
+        const definitions = await (await this.repo("propertyDefinition")).find({ workspaceUid: ModelUtils.literal(workspaceUid), sort: { key: "ASC" } }, { ignoreACL: true, limit: 1000, skipCache: true });
+        return [
+            ...MERGE_TAGS,
+            ...definitions.map((definition) => ({
+                tag: `${definition.objectType === "contact" ? "contact" : "company"}.properties.${definition.key}`,
+                label: `${definition.label} (${definition.objectType})`,
+            })),
+        ];
+    }
+    async render(workspaceUid, body, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.READ);
+        const request = requireObject(body);
+        // A preview is never stored or sent, so hand-written HTML (sanitized) may be previewed by anyone who can read the workspace.
+        const design = validateDesign(request.design, { allowHtml: true, sanitizeText, sanitizeHtml: sanitizeBlockHtml });
+        const subject = readText(request, "subject", { max: 998 }) ?? "";
+        const preheader = readText(request, "preheader", { max: 500 }) ?? undefined;
+        const workspace = await this.requireWorkspaceRecord(workspaceUid);
+        const compiled = await compileDesign(design, preheader);
+        checkMergeTags(subject, compiled);
+        return await renderEmail(compiled, subject, await this.mergeContextFor(workspace, request.contactUid));
+    }
+    async test(workspaceUid, uid, body, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.WRITE);
+        const request = requireObject(body);
+        const template = await this.requireRecord(workspaceUid, uid);
+        const to = readEmail(request, "to", { required: true });
+        const mailboxes = await (await this.repo("mailbox")).find({ primarySmtpAddress: ModelUtils.literal(to) }, { ignoreACL: true, limit: 1, skipCache: true });
+        if (!mailboxes[0] || !(await hasMailAccess(this.aclUtils, this.trustedRoles, user, mailboxes[0].uid, ACLAction.READ))) {
+            throw badRequest("A test can only be sent to the address of a mailbox you can read.");
+        }
+        const senderUid = await this.requireSender(workspaceUid, request.senderUid);
+        const sender = (await (await this.repo("workspaceSender")).findOne(senderUid, { ignoreACL: true }));
+        const workspace = await this.requireWorkspaceRecord(workspaceUid);
+        const context = await this.mergeContextFor(workspace, request.contactUid, sender);
+        const compiled = await compileDesign(template.design, template.preheader ?? undefined);
+        const email = await renderEmail(compiled, template.subject, context);
+        try {
+            await sendSystemMessage(this.mailTransport, { sender, to, subject: `[Test] ${email.subject}`, text: email.text, html: email.html });
+        }
+        catch (err) {
+            throw badRequest(`The test could not be sent: ${err?.message ?? err}`);
+        }
+        return { sent: to };
+    }
+    async duplicate(workspaceUid, uid, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.WRITE);
+        const template = await this.requireRecord(workspaceUid, uid);
+        return await this.create(workspaceUid, {
+            name: `Copy of ${template.name}`.slice(0, 256),
+            subject: template.subject,
+            preheader: template.preheader ?? undefined,
+            category: template.category ?? undefined,
+            design: template.design,
+        }, user);
+    }
+}
+__decorate([
+    Inject("MailTransport"),
+    __metadata("design:type", Object)
+], BaseTemplateRoute.prototype, "mailTransport", void 0);
+__decorate([
+    Get("/:workspaceUid/merge-tags"),
+    __param(0, Param("workspaceUid")),
+    __param(1, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTemplateRoute.prototype, "mergeTags", null);
+__decorate([
+    Post("/:workspaceUid/render"),
+    __param(0, Param("workspaceUid")),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTemplateRoute.prototype, "render", null);
+__decorate([
+    Post("/:workspaceUid/:uid/test"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("uid")),
+    __param(3, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTemplateRoute.prototype, "test", null);
+__decorate([
+    Post("/:workspaceUid/:uid/duplicate"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("uid")),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTemplateRoute.prototype, "duplicate", null);
+/** How long a saved block's name may be, and how many blocks it may hold. */
+export const MAX_SAVED_BLOCKS = 20;
+/** Reads the `blocks` of a saved block request, checked like a design's. */
+export function readSavedBlocks(raw, allowHtml) {
+    if (!Array.isArray(raw) || raw.length === 0 || raw.length > MAX_SAVED_BLOCKS) {
+        throw badRequest(`'blocks' must be a list of 1 to ${MAX_SAVED_BLOCKS} blocks.`);
+    }
+    const design = validateDesign({ sections: [{ columns: [{ blocks: raw }] }] }, { allowHtml, sanitizeText, sanitizeHtml: sanitizeBlockHtml });
+    return design.sections[0].columns[0].blocks;
+}
+//# sourceMappingURL=BaseTemplateRoute.js.map

package/dist/lib/routes/BaseTemplateRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseTemplateRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseTemplateRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAgB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAoC,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAqC,eAAe,EAAmB,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAA+B,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtI,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAA+B,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACjH,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAgB,MAAM,+BAA+B,CAAC;AACvF,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AACpC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAE7D,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAOlC;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,wBAA0D;IAA1G;;QACuB,UAAK,GAAG,UAAmB,CAAC;QAC5B,aAAQ,GAAW,kBAAkB,CAAC;QAC7B,eAAU,GAAsB,CAAC,MAAM,CAAC,CAAC;QACzC,eAAU,GAAW,aAAa,CAAC;IA2InE,CAAC;IAtIa,KAAK,CAAC,UAAU,CAAC,IAA6B,EAAE,OAAqB;QAC3E,MAAM,MAAM,GAA2B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,KAAb,MAAM,CAAC,MAAM,GAAK,aAAa,EAAE,EAAC;QAClC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAwB,EAAE,MAAM,CAAC,OAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,IAA6B,EAAE,QAAuB,EAAE,OAAqB;QACpG,MAAM,MAAM,GAA2B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,aAAa,CACpB,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAmB,EACpD,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAClC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,SAAS,CAAC,CAC9F,CAAC;QACF,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAA6B,EAAE,OAAqB,EAAE,QAAmC;QAC9G,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI;YACjC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;YACzB,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC;YACtB,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC;YACzB,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC;SACxB,EAAE,CAAC;YACT,MAAM,KAAK,GAA8B,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACzG,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,UAAU,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,iHAAiH;IACzG,KAAK,CAAC,UAAU,CAAC,GAAY,EAAE,OAAqB,EAAE,QAAmC;QAC7F,MAAM,QAAQ,GAA6B,IAAI,GAAG,CAC9C,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAC7H,CAAC;QACF,OAAO,cAAc,CAAC,GAAG,EAAE;YACvB,SAAS,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC;YACnE,QAAQ;YACR,YAAY;YACZ,YAAY,EAAE,iBAAiB;SAClC,CAAC,CAAC;IACP,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,aAAa,CAAC,MAAsB,EAAE,OAAe,EAAE,SAA6B;QAC9F,cAAc,CAAC,OAAO,EAAE,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAEkB,KAAK,CAAC,OAAO,CAAC,OAAwB;QACrD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;IACzJ,CAAC;IAGY,AAAN,KAAK,CAAC,SAAS,CAAwB,YAAoB,EAAY,IAAc;QACxF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,WAAW,GAAyB,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAqB,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAC5G,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EACxE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CACpD,CAAC;QACF,OAAO;YACH,GAAG,UAAU;YACb,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAChC,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,eAAe,UAAU,CAAC,GAAG,EAAE;gBAClG,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,UAAU,GAAG;aAC1D,CAAC,CAAC;SACN,CAAC;IACN,CAAC;IAGY,AAAN,KAAK,CAAC,MAAM,CAAwB,YAAoB,EAAE,IAAa,EAAY,IAAc;QACpG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,GAA4B,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7D,6HAA6H;QAC7H,MAAM,MAAM,GAAmB,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClI,MAAM,OAAO,GAAW,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACzE,MAAM,SAAS,GAAuB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC;QAChG,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAW,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI,CAAwB,YAAoB,EAAgB,GAAW,EAAE,IAAa,EAAY,IAAc;QAC7H,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,OAAO,GAA4B,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAW,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAE,CAAC;QACjE,MAAM,SAAS,GAAc,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAU,SAAS,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAC9C,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CACjD,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpH,MAAM,UAAU,CAAC,mEAAmE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,SAAS,GAAW,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,MAAM,GAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAkB,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtI,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,OAAO,GAAiB,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAW,MAAM,aAAa,CAAC,QAAQ,CAAC,MAAwB,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;QACjH,MAAM,KAAK,GAAkB,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC;YACD,MAAM,iBAAiB,CAAC,IAAI,CAAC,aAAc,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzI,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,+BAA+B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACxB,CAAC;IAGY,AAAN,KAAK,CAAC,SAAS,CAAwB,YAAoB,EAAgB,GAAW,EAAY,IAAc;QACnH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5E,OAAO,MAAM,IAAI,CAAC,MAAM,CACpB,YAAY,EACZ;YACI,IAAI,EAAE,WAAW,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS;YAC1C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,SAAS;YACxC,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,EACD,IAAI,CACP,CAAC;IACN,CAAC;CACJ;AAxIa;IADT,MAAM,CAAC,eAAe,CAAC;;wDACgB;AAgE3B;IADZ,GAAG,CAAC,2BAA2B,CAAC;IACT,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,QAAQ,CAAA;;;;kDAa5E;AAGY;IADZ,IAAI,CAAC,uBAAuB,CAAC;IACT,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAuC,WAAA,QAAQ,CAAA;;;;+CAWxF;AAGY;IADZ,IAAI,CAAC,0BAA0B,CAAC;IACd,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,KAAK,CAAC,KAAK,CAAC,CAAA;IAA8B,WAAA,QAAQ,CAAA;;;;6CAwBjH;AAGY;IADZ,IAAI,CAAC,+BAA+B,CAAC;IACd,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,KAAK,CAAC,KAAK,CAAC,CAAA;IAAe,WAAA,QAAQ,CAAA;;;;kDAcvG;AAGL,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,SAAkB;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC3E,MAAM,UAAU,CAAC,mCAAmC,gBAAgB,UAAU,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,MAAM,GAAmB,cAAc,CACzC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAC9C,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAC/D,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC"}

package/dist/lib/routes/BaseTimelineRoute.js

@@ -0,0 +1,47 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { ModelUtils, RouteDecorators } from "@rapidrest/service-core";
+import { WorkspaceAction } from "../models/types.js";
+import { readPaging } from "../util/Validation.js";
+import { CrmRouteBase } from "./CrmRouteBase.js";
+const { Get, Param, Query, User: AuthUser } = RouteDecorators;
+/**
+ * A contact's or company's activity timeline (`/api/mail/crm/timeline`): `GET /:workspaceUid/:subjectType/:subjectUid`, newest first,
+ * a page at a time (`limit`, `page`). Read-only: entries are added by the changes they record.
+ */
+export class BaseTimelineRoute extends CrmRouteBase {
+    async list(workspaceUid, subjectType, subjectUid, query, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.READ);
+        await this.requireSubject(workspaceUid, subjectType, subjectUid);
+        const paging = readPaging(query?.limit, query?.page);
+        const events = await (await this.repo("timelineEvent")).find({
+            workspaceUid: ModelUtils.literal(workspaceUid),
+            subjectType: ModelUtils.literal(subjectType),
+            subjectUid: ModelUtils.literal(subjectUid),
+            sort: { occurredAt: "DESC" },
+        }, { ignoreACL: true, limit: paging.limit, page: paging.page, skipCache: true });
+        return JSON.parse(JSON.stringify(events));
+    }
+}
+__decorate([
+    Get("/:workspaceUid/:subjectType/:subjectUid"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("subjectType")),
+    __param(2, Param("subjectUid")),
+    __param(3, Query()),
+    __param(4, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTimelineRoute.prototype, "list", null);
+//# sourceMappingURL=BaseTimelineRoute.js.map

package/dist/lib/routes/BaseTimelineRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseTimelineRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseTimelineRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAgC,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAE9D;;;GAGG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,YAAY;IAE3C,AAAN,KAAK,CAAC,IAAI,CACU,YAAoB,EACrB,WAAmB,EACpB,UAAkB,EAC9B,KAA0C,EACzC,IAAc;QAExB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAoB,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAgB,eAAe,CAAC,CAAC,CAAC,IAAI,CACxF;YACI,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;YAC9C,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC;YAC5C,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1C,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;SAC/B,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAC/E,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;CACJ;AArBgB;IADZ,GAAG,CAAC,yCAAyC,CAAC;IAE1C,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IACrB,WAAA,KAAK,CAAC,aAAa,CAAC,CAAA;IACpB,WAAA,KAAK,CAAC,YAAY,CAAC,CAAA;IACnB,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,CAAA;;;;6CAeZ"}

package/dist/lib/routes/BaseTrackingRoute.js

@@ -0,0 +1,106 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ModelUtils, RouteDecorators } from "@rapidrest/service-core";
+import { EngagementType } from "../models/types.js";
+import { EngagementRecorder } from "../sending/Engagement.js";
+import { SEND_TOKEN, TRACKING_PIXEL, isMachine, verifyClick } from "../sending/Tracking.js";
+import { notFound } from "../util/WorkspaceAccess.js";
+import { CrmRouteBase } from "./CrmRouteBase.js";
+const { Get, Param, Query, Request, Response } = RouteDecorators;
+/** How many opens, and clicks, of one message are recorded; beyond that they are served but not counted. */
+export const MAX_TRACKED_OPENS = 100;
+export const MAX_TRACKED_CLICKS = 500;
+/**
+ * The anonymous endpoints CRM email calls home through (`/api/mail/crm/t`):
+ * - `GET /o/:token` - the invisible image that records an open. Always answers with the image, whatever the token.
+ * - `GET /c/:token/:index?u=<url>&s=<signature>` - a tracked link: records the click and redirects to `u`. The signature
+ * (`clickPath()`) must match, so the redirect only ever goes where the email's link did - a forged or changed link is a 404.
+ *
+ * Opens and clicks from scanners and previewers are recorded as `machine` (`isMachine()`), which statistics leave out of opens.
+ */
+export class BaseTrackingRoute extends CrmRouteBase {
+    async open(token, req, res) {
+        const send = await this.findSend(token);
+        if (send && send.openCount < MAX_TRACKED_OPENS) {
+            await this.record(send, EngagementType.OPENED, { machine: isMachine(this.userAgent(req), send.sentAt) });
+        }
+        res.setHeader("content-type", "image/gif");
+        res.setHeader("content-length", TRACKING_PIXEL.length);
+        res.setHeader("cache-control", "no-store, no-cache, must-revalidate, private");
+        res.status(200).send(TRACKING_PIXEL);
+    }
+    async click(token, index, query, req, res) {
+        const position = Number(index);
+        const url = query?.u;
+        if (!SEND_TOKEN.test(token) ||
+            !Number.isInteger(position) ||
+            position < 0 ||
+            typeof url !== "string" ||
+            !/^https?:\/\//i.test(url) ||
+            !verifyClick(await this.tokenSecret(), token, position, url, query?.s)) {
+            throw notFound();
+        }
+        const send = await this.findSend(token);
+        if (send && send.clickCount < MAX_TRACKED_CLICKS) {
+            await this.record(send, EngagementType.CLICKED, { url, index: position, machine: isMachine(this.userAgent(req), send.sentAt) });
+        }
+        res.setHeader("cache-control", "no-store, private");
+        res.setHeader("referrer-policy", "no-referrer");
+        res.setHeader("location", url);
+        res.status(302).end();
+    }
+    async findSend(token) {
+        if (!SEND_TOKEN.test(token)) {
+            return undefined;
+        }
+        return (await (await this.repo("outboundSend")).find({ token: ModelUtils.literal(token) }, { ignoreACL: true, limit: 1, skipCache: true }))[0];
+    }
+    /** Records an open or click. A failure is logged: the reader still gets the image or their link. */
+    async record(send, type, data) {
+        try {
+            await new EngagementRecorder(this.repos(), this.classes, this.logger).record(send, type, data);
+        }
+        catch (err) {
+            this.logger?.warn(`TrackingRoute: could not record a ${type} of send ${send.uid}: ${err?.message ?? err}`);
+        }
+    }
+    userAgent(req) {
+        const value = req.headers?.["user-agent"];
+        return typeof value === "string" ? value : undefined;
+    }
+}
+__decorate([
+    Get("/o/:token"),
+    __param(0, Param("token")),
+    __param(1, Request),
+    __param(2, Response),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTrackingRoute.prototype, "open", null);
+__decorate([
+    Get("/c/:token/:index"),
+    __param(0, Param("token")),
+    __param(1, Param("index")),
+    __param(2, Query()),
+    __param(3, Request),
+    __param(4, Response),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], BaseTrackingRoute.prototype, "click", null);
+//# sourceMappingURL=BaseTrackingRoute.js.map

package/dist/lib/routes/BaseTrackingRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseTrackingRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseTrackingRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAA6B,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAgB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAEjE,4GAA4G;AAC5G,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,YAAY;IAE3C,AAAN,KAAK,CAAC,IAAI,CAAiB,KAAa,EAAW,GAAgB,EAAY,GAAiB;QACnG,MAAM,IAAI,GAA6B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QACvD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAGY,AAAN,KAAK,CAAC,KAAK,CACE,KAAa,EACb,KAAa,EACpB,KAA0C,EAC1C,GAAgB,EACf,GAAiB;QAE3B,MAAM,QAAQ,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAY,KAAK,EAAE,CAAC,CAAC;QAC9B,IACI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACvB,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3B,QAAQ,GAAG,CAAC;YACZ,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1B,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,EACxE,CAAC;YACC,MAAM,QAAQ,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAA6B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpI,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAa;QAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAe,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjK,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,MAAM,CAAC,IAAkB,EAAE,IAAoB,EAAE,IAA6B;QACxF,IAAI,CAAC;YACD,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,qCAAqC,IAAI,YAAY,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/G,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,GAAgB;QAC9B,MAAM,KAAK,GAAa,GAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;CACJ;AA7DgB;IADZ,GAAG,CAAC,WAAW,CAAC;IACE,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IAAiB,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;;;;6CASpF;AAGY;IADZ,GAAG,CAAC,kBAAkB,CAAC;IAEnB,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,OAAO,CAAA;IACP,WAAA,QAAQ,CAAA;;;;8CAsBZ"}

package/dist/lib/routes/BaseWebhookRoute.js

@@ -0,0 +1,173 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { ModelUtils, RouteDecorators } from "@rapidrest/service-core";
+import { CrmEventType } from "../automation/Events.js";
+import { WorkspaceAction } from "../models/types.js";
+import { payloadId } from "../webhooks/Deliveries.js";
+import { checkWebhookUrl, newWebhookSecret, postWebhook } from "../webhooks/Webhooks.js";
+import { badRequest, readBoolean, readText } from "../util/Validation.js";
+import { BaseWorkspaceRecordRoute } from "./BaseWorkspaceRecordRoute.js";
+const { Get, Param, Post, User: AuthUser } = RouteDecorators;
+/** How many webhook endpoints one workspace may have. */
+export const MAX_WEBHOOKS = 20;
+/** The event types an endpoint may take, besides `*` (all). */
+export const WEBHOOK_EVENTS = [...Object.values(CrmEventType).filter((type) => type !== CrmEventType.MANUAL && type !== CrmEventType.DATE_REACHED), "automation.webhook"];
+/**
+ * A workspace's webhook endpoints (`/api/mail/crm/webhooks`) - see `BaseWorkspaceRecordRoute` for the endpoints; changing them takes
+ * `MANAGE` - plus:
+ * - `POST /:workspaceUid/:uid/secret` - makes a new signing secret and answers it (`{ secret }`), the only time it is shown in full
+ * besides creation (`POST` answers `secret` once).
+ * - `POST /:workspaceUid/:uid/test` - posts a `ping` now and answers `{ status }` or `{ error }`.
+ * - `GET /:workspaceUid/:uid/deliveries` - the 50 latest deliveries.
+ *
+ * Addresses must be `https://` on the public internet (checked again, by resolving the host, whenever something is sent). Switching
+ * an endpoint back on clears its failure count.
+ */
+export class BaseWebhookRoute extends BaseWorkspaceRecordRoute {
+    constructor() {
+        super(...arguments);
+        this.model = "webhookEndpoint";
+        this.pushType = "CrmWebhook";
+        this.writeAction = WorkspaceAction.MANAGE;
+        this.maxRecords = MAX_WEBHOOKS;
+        /** How a webhook is posted - a seam for tests. */
+        this.post = postWebhook;
+    }
+    async readCreate(body, context) {
+        return {
+            url: this.readUrl(body, true),
+            events: this.readEvents(body) ?? ["*"],
+            secret: newWebhookSecret(),
+            enabled: readBoolean(body, "enabled") ?? true,
+            description: readText(body, "description", { max: 500 }) ?? undefined,
+            failureCount: 0,
+            createdByUserUid: context.user.uid,
+        };
+    }
+    async readUpdate(body, existing) {
+        const fields = {};
+        const url = this.readUrl(body, false);
+        if (url) {
+            fields.url = url;
+        }
+        const events = this.readEvents(body);
+        if (events) {
+            fields.events = events;
+        }
+        const enabled = readBoolean(body, "enabled");
+        if (enabled !== undefined) {
+            fields.enabled = enabled;
+            if (enabled && !existing.enabled) {
+                fields.failureCount = 0;
+            }
+        }
+        if (body.description !== undefined) {
+            fields.description = readText(body, "description", { max: 500 });
+        }
+        return fields;
+    }
+    readUrl(body, required) {
+        const url = readText(body, "url", { required, max: 2000 });
+        if (url === null) {
+            throw badRequest("'url' is required.");
+        }
+        if (url !== undefined) {
+            try {
+                checkWebhookUrl(url);
+            }
+            catch (err) {
+                throw badRequest(`'url': ${err.message}`);
+            }
+        }
+        return url;
+    }
+    readEvents(body) {
+        if (body.events === undefined) {
+            return undefined;
+        }
+        if (!Array.isArray(body.events) ||
+            body.events.length === 0 ||
+            body.events.some((type) => typeof type !== "string" || (type !== "*" && !WEBHOOK_EVENTS.includes(type)))) {
+            throw badRequest(`'events' must list event types (${WEBHOOK_EVENTS.join(", ")}), or be ["*"].`);
+        }
+        return [...new Set(body.events)];
+    }
+    async toViews(records) {
+        return records.map(({ secret, ...record }) => ({ ...JSON.parse(JSON.stringify(record)), secretHint: `…${secret.slice(-4)}` }));
+    }
+    /** A new endpoint's secret is answered once, with it. */
+    async create(workspaceUid, body, user) {
+        const view = await super.create(workspaceUid, body, user);
+        const record = await this.requireRecord(workspaceUid, view.uid);
+        return { ...view, secret: record.secret };
+    }
+    async rotateSecret(workspaceUid, uid, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.MANAGE);
+        const endpoint = await this.requireRecord(workspaceUid, uid);
+        const secret = newWebhookSecret();
+        await (await this.records()).update({ uid: endpoint.uid, version: endpoint.version, secret }, endpoint, { ignoreACL: true, skipPush: true });
+        return { secret };
+    }
+    async test(workspaceUid, uid, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.MANAGE);
+        const endpoint = await this.requireRecord(workspaceUid, uid);
+        const body = JSON.stringify({ id: payloadId(), type: "ping", occurredAt: new Date().toISOString(), workspaceUid, data: {} });
+        try {
+            return { status: (await this.post(endpoint.url, body, endpoint.secret)).status };
+        }
+        catch (err) {
+            return { error: String(err?.message ?? err) };
+        }
+    }
+    async deliveries(workspaceUid, uid, user) {
+        await this.requireAccess(user, workspaceUid, WorkspaceAction.READ);
+        const endpoint = await this.requireRecord(workspaceUid, uid);
+        const deliveries = await (await this.repo("webhookDelivery")).find({ endpointUid: ModelUtils.literal(endpoint.uid), sort: { dateCreated: "DESC" } }, { ignoreACL: true, limit: 50, skipCache: true });
+        return JSON.parse(JSON.stringify(deliveries));
+    }
+    async afterDelete(record) {
+        await (await this.repo("webhookDelivery")).truncate({ endpointUid: ModelUtils.literal(record.uid) }, { ignoreACL: true, skipPush: true });
+    }
+}
+__decorate([
+    Post("/:workspaceUid/:uid/secret"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("uid")),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BaseWebhookRoute.prototype, "rotateSecret", null);
+__decorate([
+    Post("/:workspaceUid/:uid/test"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("uid")),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BaseWebhookRoute.prototype, "test", null);
+__decorate([
+    Get("/:workspaceUid/:uid/deliveries"),
+    __param(0, Param("workspaceUid")),
+    __param(1, Param("uid")),
+    __param(2, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], BaseWebhookRoute.prototype, "deliveries", null);
+//# sourceMappingURL=BaseWebhookRoute.js.map

package/dist/lib/routes/BaseWebhookRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseWebhookRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseWebhookRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAoC,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAiB,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACxG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAgB,MAAM,+BAA+B,CAAC;AACvF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAE7D,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAO7L;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,gBAAiB,SAAQ,wBAA8D;IAA7G;;QACuB,UAAK,GAAG,iBAA0B,CAAC;QACnC,aAAQ,GAAW,YAAY,CAAC;QACvB,gBAAW,GAAoB,eAAe,CAAC,MAAM,CAAC;QACtD,eAAU,GAAW,YAAY,CAAC;QAE9D,kDAAkD;QACxC,SAAI,GAAkB,WAAW,CAAC;IAgHhD,CAAC;IA9Ga,KAAK,CAAC,UAAU,CAAC,IAA6B,EAAE,OAAqB;QAC3E,OAAO;YACH,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAE;YAC9B,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACtC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI;YAC7C,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,SAAS;YACrE,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;SACrC,CAAC;IACN,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,IAA6B,EAAE,QAAyB;QAC/E,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAuB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAyB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,CAAC;QACD,MAAM,OAAO,GAAwB,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YACzB,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC/B,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,IAA6B,EAAE,QAAiB;QAC5D,MAAM,GAAG,GAA8B,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,MAAM,UAAU,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,IAA6B;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAC1G,CAAC;YACC,MAAM,UAAU,CAAC,mCAAmC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAkB,CAAC,CAAC,CAAC;IACjD,CAAC;IAEkB,KAAK,CAAC,OAAO,CAAC,OAA0B;QACvD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnI,CAAC;IAED,yDAAyD;IACzC,KAAK,CAAC,MAAM,CAAC,YAAoB,EAAE,IAAa,EAAE,IAAc;QAC5E,MAAM,IAAI,GAAwB,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAwB,YAAoB,EAAgB,GAAW,EAAY,IAAc;QACtH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAW,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7I,OAAO,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI,CAAwB,YAAoB,EAAgB,GAAW,EAAY,IAAc;QAC9G,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAW,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrI,IAAI,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACrF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;QAClD,CAAC;IACL,CAAC;IAGY,AAAN,KAAK,CAAC,UAAU,CAAwB,YAAoB,EAAgB,GAAW,EAAY,IAAc;QACpH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAsB,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAkB,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAClG,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAChF,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAClD,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,CAAC;IAEkB,KAAK,CAAC,WAAW,CAAC,MAAuB;QACxD,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9I,CAAC;CACJ;AAlCgB;IADZ,IAAI,CAAC,4BAA4B,CAAC;IACR,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,KAAK,CAAC,KAAK,CAAC,CAAA;IAAe,WAAA,QAAQ,CAAA;;;;oDAM1G;AAGY;IADZ,IAAI,CAAC,0BAA0B,CAAC;IACd,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,KAAK,CAAC,KAAK,CAAC,CAAA;IAAe,WAAA,QAAQ,CAAA;;;;4CASlG;AAGY;IADZ,GAAG,CAAC,gCAAgC,CAAC;IACb,WAAA,KAAK,CAAC,cAAc,CAAC,CAAA;IAAwB,WAAA,KAAK,CAAC,KAAK,CAAC,CAAA;IAAe,WAAA,QAAQ,CAAA;;;;kDAQxG"}