@vicacha-devs/strapi-plugin-broadcasts 0.0.0-stage → 0.1.0

package/dist/shared/index.js

@@ -0,0 +1,825 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const shared = require("@vicacha-devs/strapi-plugin-calendar/shared");
+function isSupportedCalendar(cal) {
+  if (typeof cal !== "string" || !cal.trim()) return false;
+  return shared.SUPPORTED_INTL_CALENDARS.some((item) => item.id === cal.trim());
+}
+function formatSecondaryDate(isoDateString, calendar = "islamic-umalqura", locale = "es") {
+  if (!isoDateString) {
+    return { calendar, formatted: "" };
+  }
+  const date = new Date(isoDateString);
+  if (Number.isNaN(date.getTime())) {
+    return { calendar, formatted: isoDateString };
+  }
+  try {
+    const formatter = new Intl.DateTimeFormat(`${locale}-u-ca-${calendar}`, {
+      year: "numeric",
+      month: "short",
+      day: "numeric"
+    });
+    const parts = formatter.formatToParts(date);
+    const year = Number(parts.find((p) => p.type === "year")?.value) || void 0;
+    const month = Number(parts.find((p) => p.type === "month")?.value) || void 0;
+    const day = Number(parts.find((p) => p.type === "day")?.value) || void 0;
+    return {
+      calendar,
+      formatted: formatter.format(date),
+      year,
+      month,
+      day
+    };
+  } catch {
+    return {
+      calendar,
+      formatted: date.toISOString().slice(0, 10)
+    };
+  }
+}
+const PLUGIN_ID = "broadcasts";
+const CAMPAIGN_UID = "plugin::broadcasts.campaign";
+const AUTOMATION_RULE_UID = "plugin::broadcasts.automation-rule";
+const DELIVERY_LOG_UID = "plugin::broadcasts.delivery-log";
+const SUPPORTED_CHANNELS = [
+  "email",
+  "telegram",
+  "whatsapp"
+];
+const SUPPORTED_WHATSAPP_DRIVERS = [
+  "meta-cloud",
+  "openwa",
+  "evolution"
+];
+const DEFAULT_BROADCAST_TOPICS = [
+  "announcements",
+  "events",
+  "courses",
+  "ramadan_eid",
+  "urgent_janazah",
+  "newsletter"
+];
+const DEFAULT_BROADCAST_SETTINGS = {
+  primaryCalendar: "gregory",
+  secondaryCalendars: ["islamic-umalqura"],
+  defaultLocale: "es",
+  supportedLocales: ["es", "en", "ar", "tr"],
+  availableTopics: [...DEFAULT_BROADCAST_TOPICS],
+  dryRun: true,
+  enableInboxSubscriberBridge: true,
+  enableEventHubAutomations: true,
+  enableEmailDesignerBridge: true,
+  defaultEmailTemplateRef: "",
+  siteBaseUrl: "https://mezquitabogota.org",
+  organizationName: "Mezquita Central Abu Bakr As-Siddiq — Bogotá",
+  emailFromAddress: "no-reply@mezquitabogota.org",
+  emailReplyToAddress: "info@mezquitabogota.org",
+  telegramEnabled: true,
+  telegramBotToken: "",
+  telegramDefaultChatId: "@MezquitaCentralBogota",
+  telegramTopicChatMap: {},
+  telegramTopicThreadMap: {},
+  whatsappEnabled: true,
+  whatsappDriver: "meta-cloud",
+  whatsappPhoneNumberId: "",
+  whatsappAccessToken: "",
+  whatsappGatewayUrl: "",
+  whatsappGatewaySession: "default",
+  whatsappGatewayApiKey: "",
+  whatsappDefaultRecipients: [],
+  whatsappTopicGroupMap: {},
+  allowLocalhostGateways: false,
+  publicChannelLinks: [
+    {
+      id: "telegram-main",
+      channel: "telegram",
+      label: "Canal Oficial de Telegram",
+      handle: "@MezquitaCentralBogota",
+      inviteUrl: "https://t.me/MezquitaCentralBogota",
+      topic: "announcements",
+      localizedLabels: {
+        es: "Canal Oficial de Telegram",
+        en: "Official Telegram Channel",
+        ar: "القناة الرسمية على تيليجرام",
+        tr: "Resmi Telegram Kanalı"
+      },
+      localizedDescriptions: {
+        es: "Horarios de Jumu’ah, avistamiento lunar de Ramadán, cursos y avisos urgentes.",
+        en: "Jumu’ah schedules, Ramadan moon sighting, courses, and urgent community notices.",
+        ar: "مواعيد صلاة الجمعة، تحري هلال رمضان، الدورات والإعلانات العاجلة.",
+        tr: "Cuma vakitleri, Ramazan hilal gözlemi, kurslar ve acil duyurular."
+      }
+    },
+    {
+      id: "whatsapp-community",
+      channel: "whatsapp",
+      label: "Comunidad Oficial de WhatsApp",
+      handle: "+57 310 000 0000",
+      inviteUrl: "https://whatsapp.com/channel/0029VaMezquitaBogota",
+      topic: "announcements",
+      localizedLabels: {
+        es: "Comunidad Oficial de WhatsApp",
+        en: "Official WhatsApp Community",
+        ar: "مجتمع واتساب الرسمي",
+        tr: "Resmi WhatsApp Topluluğu"
+      },
+      localizedDescriptions: {
+        es: "Alertas directas de oración funeraria (Janazah), eventos comunitarios y boletín semanal.",
+        en: "Direct Janazah funeral prayer alerts, community events, and weekly newsletter.",
+        ar: "تنبيهات صلاة الجنازة العاجلة، الفعاليات المجتمعية والنشرة الأسبوعية.",
+        tr: "Acil cenaze namazı duyuruları, topluluk etkinlikleri ve haftalık bülten."
+      }
+    }
+  ]
+};
+const STARTER_CAMPAIGN_TEMPLATES = [
+  {
+    id: "jumuah-weekly-reminder",
+    slug: "jumuah-weekly-reminder",
+    title: "Recordatorio Semanal de Khutbah y Oración del Viernes (Jumu’ah)",
+    topic: "announcements",
+    channels: ["email", "telegram", "whatsapp"],
+    priority: "normal",
+    subject: "🕌 Jumu’ah en {{organizationName}} ({{secondaryDate}})",
+    bodyText: "As-salamu alaykum {{recipientName}}. Te esperamos este viernes para la Khutbah y oración de Jumu’ah en {{organizationName}}. Fecha Hijri: {{secondaryDate}}.",
+    bodyHtml: "<p>As-salamu alaykum <strong>{{recipientName}}</strong>,</p><p>Te esperamos este viernes para la Khutbah y oración congregacional de <strong>Jumu’ah</strong> en {{organizationName}}.</p><p>Calendario Hijri: <em>{{secondaryDate}}</em></p>",
+    ctaLabel: "Ver Horarios de Oración",
+    ctaUrl: "https://mezquitabogota.org/es/horarios",
+    translations: {
+      es: {
+        subject: "🕌 Jumu’ah en {{organizationName}} ({{secondaryDate}})",
+        bodyText: "As-salamu alaykum {{recipientName}}. Te esperamos este viernes para la Khutbah y oración de Jumu’ah en {{organizationName}}. Fecha Hijri: {{secondaryDate}}.",
+        bodyHtml: "<p>As-salamu alaykum <strong>{{recipientName}}</strong>,</p><p>Te esperamos este viernes para la Khutbah y oración congregacional de <strong>Jumu’ah</strong> en {{organizationName}}.</p><p>Calendario Hijri: <em>{{secondaryDate}}</em></p>",
+        ctaLabel: "Ver Horarios de Oración",
+        ctaUrl: "https://mezquitabogota.org/es/horarios"
+      },
+      en: {
+        subject: "🕌 Friday Jumu’ah Reminder — {{organizationName}} ({{secondaryDate}})",
+        bodyText: "As-salamu alaykum {{recipientName}}. Join us this Friday for the Jumu’ah Khutbah and congregational prayer at {{organizationName}}. Hijri date: {{secondaryDate}}.",
+        bodyHtml: "<p>As-salamu alaykum <strong>{{recipientName}}</strong>,</p><p>Join us this Friday for the <strong>Jumu’ah Khutbah</strong> and congregational prayer at {{organizationName}}.</p><p>Hijri date: <em>{{secondaryDate}}</em></p>",
+        ctaLabel: "View Prayer Schedule",
+        ctaUrl: "https://mezquitabogota.org/en/prayer-times"
+      },
+      ar: {
+        subject: "🕌 تذكير صلاة وخطبة الجمعة — {{organizationName}} ({{secondaryDate}})",
+        bodyText: "السلام عليكم {{recipientName}}، ندعوكم لحضور خطبة وصلاة الجمعة في {{organizationName}}. التاريخ الهجري: {{secondaryDate}}.",
+        bodyHtml: "<p>السلام عليكم <strong>{{recipientName}}</strong>،</p><p>ندعوكم لحضور خطبة وصلاة <strong>الجمعة</strong> في {{organizationName}}.</p><p>التاريخ الهجري: <em>{{secondaryDate}}</em></p>",
+        ctaLabel: "عرض مواقيت الصلاة",
+        ctaUrl: "https://mezquitabogota.org/ar/prayer-times"
+      },
+      tr: {
+        subject: "🕌 Cuma Hutbesi ve Namazı Hatırlatması — {{organizationName}} ({{secondaryDate}})",
+        bodyText: "Es-selamu aleyküm {{recipientName}}. Bu Cuma {{organizationName}} bünyesinde Cuma hutbesi ve namazına davetlisiniz. Hicri Tarih: {{secondaryDate}}.",
+        bodyHtml: "<p>Es-selamu aleyküm <strong>{{recipientName}}</strong>,</p><p>Bu Cuma {{organizationName}} bünyesinde <strong>Cuma Hutbesi ve Namazına</strong> davetlisiniz.</p><p>Hicri Tarih: <em>{{secondaryDate}}</em></p>",
+        ctaLabel: "Namaz Vakitlerini Gör",
+        ctaUrl: "https://mezquitabogota.org/tr/prayer-times"
+      }
+    }
+  },
+  {
+    id: "urgent-janazah-alert",
+    slug: "urgent-janazah-alert",
+    title: "Aviso Urgente de Oración Funeraria (Salat al-Janazah)",
+    topic: "urgent_janazah",
+    channels: ["telegram", "whatsapp", "email"],
+    priority: "urgent",
+    subject: "🕯️ Aviso Urgente: Salat al-Janazah en {{organizationName}}",
+    bodyText: "Inna lillahi wa inna ilayhi raji’un. Informamos a la comunidad que se realizará la oración funeraria (Salat al-Janazah) en {{organizationName}} después de la oración de Dhuhr ({{secondaryDate}}).",
+    bodyHtml: "<p><strong>Inna lillahi wa inna ilayhi raji’un</strong></p><p>Informamos a la comunidad que se realizará la oración funeraria (<strong>Salat al-Janazah</strong>) en {{organizationName}} después de la oración de Dhuhr ({{secondaryDate}}).</p>",
+    ctaLabel: "Detalles y Ubicación",
+    ctaUrl: "https://mezquitabogota.org/es/avisos",
+    translations: {
+      es: {
+        subject: "🕯️ Aviso Urgente: Salat al-Janazah en {{organizationName}}",
+        bodyText: "Inna lillahi wa inna ilayhi raji’un. Informamos a la comunidad que se realizará la oración funeraria (Salat al-Janazah) en {{organizationName}} después de la oración de Dhuhr ({{secondaryDate}}).",
+        ctaLabel: "Detalles y Ubicación",
+        ctaUrl: "https://mezquitabogota.org/es/avisos"
+      },
+      en: {
+        subject: "🕯️ Urgent Community Notice: Salat al-Janazah at {{organizationName}}",
+        bodyText: "Inna lillahi wa inna ilayhi raji’un. Funeral prayer (Salat al-Janazah) will be held at {{organizationName}} following Dhuhr prayer ({{secondaryDate}}).",
+        ctaLabel: "Details & Location",
+        ctaUrl: "https://mezquitabogota.org/en/announcements"
+      },
+      ar: {
+        subject: "🕯️ إعلان عاجل: صلاة الجنازة في {{organizationName}}",
+        bodyText: "إنا لله وإنا إليه راجعون. تُقام صلاة الجنازة في {{organizationName}} عقب صلاة الظهر ({{secondaryDate}}).",
+        ctaLabel: "التفاصيل والموقع",
+        ctaUrl: "https://mezquitabogota.org/ar/announcements"
+      },
+      tr: {
+        subject: "🕯️ Acil Duyuru: {{organizationName}} Cenaze Namazı",
+        bodyText: "İnna lillahi ve inna ileyhi raciun. Öğle namazını müteakip {{organizationName}} camiimizde cenaze namazı kılınacaktır ({{secondaryDate}}).",
+        ctaLabel: "Detaylar ve Konum",
+        ctaUrl: "https://mezquitabogota.org/tr/announcements"
+      }
+    }
+  }
+];
+const STARTER_AUTOMATION_RULES = [
+  {
+    slug: "auto-alert-banner-broadcast",
+    name: "Auto-Broadcast Urgent Site Alert Banners",
+    eventName: "inbox.alert.published",
+    topic: "announcements",
+    channels: ["telegram", "whatsapp"],
+    active: true,
+    priority: "urgent",
+    subjectTemplate: "🚨 {{title}} — {{organizationName}}",
+    bodyTextTemplate: "🚨 {{title}}: {{message}} ({{secondaryDate}})",
+    bodyHtmlTemplate: "<p><strong>🚨 {{title}}</strong></p><p>{{message}}</p><p><em>{{secondaryDate}}</em></p>",
+    ctaLabelTemplate: "Ver Aviso Oficial",
+    ctaUrlTemplate: "{{siteBaseUrl}}"
+  },
+  {
+    slug: "auto-event-published-broadcast",
+    name: "Auto-Broadcast Newly Published Community Events",
+    eventName: "event.published",
+    targetContentType: "api::event.event",
+    topic: "events",
+    channels: ["telegram", "email"],
+    active: true,
+    priority: "normal",
+    subjectTemplate: "📅 Nuevo Evento: {{title}} ({{secondaryDate}})",
+    bodyTextTemplate: "Nuevo evento comunitario en {{organizationName}}: {{title}}. {{summary}} ({{secondaryDate}}).",
+    bodyHtmlTemplate: "<p>Nuevo evento comunitario en <strong>{{organizationName}}</strong>:</p><h3>{{title}}</h3><p>{{summary}}</p><p><em>{{secondaryDate}}</em></p>",
+    ctaLabelTemplate: "Inscribirse al Evento",
+    ctaUrlTemplate: "{{siteBaseUrl}}/events"
+  }
+];
+const HTML_ESCAPE_MAP = {
+  "&": "&amp;",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#39;"
+};
+const TELEGRAM_INLINE_TAGS = /* @__PURE__ */ new Set([
+  "b",
+  "strong",
+  "i",
+  "em",
+  "u",
+  "ins",
+  "s",
+  "strike",
+  "del",
+  "code",
+  "pre",
+  "tg-spoiler"
+]);
+function escapeHtml(raw) {
+  return String(raw).replace(
+    /[&<>"']/g,
+    (char) => HTML_ESCAPE_MAP[char] || char
+  );
+}
+function stripHeaderControlChars(raw) {
+  return String(raw || "").replace(/[\r\n<>]/g, "").replace(/[\u0000-\u001f\u007f]/g, "").trim();
+}
+function extractSafeAnchorHref(attrs) {
+  const match = attrs.match(
+    /\bhref\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/i
+  );
+  const rawHref = (match?.[1] ?? match?.[2] ?? match?.[3] ?? "").replace(/&amp;/gi, "&").trim();
+  if (!rawHref || /[\u0000-\u001f\u007f]/.test(rawHref)) return null;
+  try {
+    const parsed = new URL(rawHref);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+      return null;
+    }
+    return parsed.toString();
+  } catch {
+    return null;
+  }
+}
+function sanitizeTelegramHtml(rawHtml) {
+  if (!rawHtml) return "";
+  let text = String(rawHtml).replace(/[\u0001\u0002]/g, "").replace(/<script\b[^>]*>[\s\S]*?<\/script\s*>/gi, "").replace(/<style\b[^>]*>[\s\S]*?<\/style\s*>/gi, "").replace(/<br\s*\/?>/gi, "\n").replace(/<h[1-6](?:\s[^>]*)?>/gi, "<b>").replace(/<\/h[1-6]\s*>/gi, "</b>\n").replace(/<p(?:\s[^>]*)?>/gi, "").replace(/<\/p\s*>/gi, "\n\n").replace(/<div(?:\s[^>]*)?>/gi, "").replace(/<\/div\s*>/gi, "\n").replace(/<li(?:\s[^>]*)?>/gi, "• ").replace(/<\/li\s*>/gi, "\n");
+  let openAnchors = 0;
+  text = text.replace(
+    /<(\/?)([a-zA-Z][a-zA-Z0-9-]*)(\s[^<>]*)?(\/?)>/g,
+    (_full, slash, rawName, attrs = "", selfClose = "") => {
+      const tag = rawName.toLowerCase();
+      if (selfClose === "/") return "";
+      if (slash === "/") {
+        if (TELEGRAM_INLINE_TAGS.has(tag)) return `
/${tag}`;
+        if (tag === "a" && openAnchors > 0) {
+          openAnchors -= 1;
+          return "
/a";
+        }
+        return "";
+      }
+      if (TELEGRAM_INLINE_TAGS.has(tag)) return `
${tag}`;
+      if (tag === "a") {
+        const safeHref = extractSafeAnchorHref(attrs);
+        if (!safeHref) return "";
+        openAnchors += 1;
+        return `
a href="${escapeHtml(safeHref)}"`;
+      }
+      return "";
+    }
+  );
+  while (openAnchors > 0) {
+    text += "
/a";
+    openAnchors -= 1;
+  }
+  text = text.replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/&(?!(?:amp|lt|gt|quot|apos|#\d+|#x[0-9a-f]+);)/gi, "&amp;").replace(/\u0001([^\u0002]+)\u0002/g, "<$1>").replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
+  return text;
+}
+function interpolateBroadcastTemplate(template, variables, options = {}) {
+  if (!template) return "";
+  const shouldEscape = Boolean(options.escapeHtmlValues);
+  return template.replace(
+    /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g,
+    (_match, key) => {
+      const rawValue = variables[key];
+      if (rawValue === void 0 || rawValue === null) {
+        return "";
+      }
+      const strValue = String(rawValue);
+      return shouldEscape ? escapeHtml(strValue) : strValue;
+    }
+  );
+}
+function maskEmail(email) {
+  const trimmed = String(email || "").trim().toLowerCase();
+  const atIndex = trimmed.indexOf("@");
+  if (atIndex <= 0) {
+    return "***@invalid";
+  }
+  const local = trimmed.slice(0, atIndex);
+  const domain = trimmed.slice(atIndex + 1);
+  if (!domain) {
+    return "***@invalid";
+  }
+  const visiblePrefix = local.slice(0, 1);
+  return `${visiblePrefix}***@${domain}`;
+}
+function maskPhone(phone) {
+  const normalized = normalizeE164Phone(phone);
+  if (normalized.length <= 4) {
+    return "***";
+  }
+  const prefix = normalized.startsWith("+") ? normalized.slice(0, 3) : normalized.slice(0, 2);
+  const suffix = normalized.slice(-4);
+  return `${prefix}***${suffix}`;
+}
+function isWhatsAppGroupOrChannelJid(raw) {
+  const trimmed = String(raw || "").trim().toLowerCase();
+  return /^[\d-]+@g\.us$/.test(trimmed) || /^[\d-]+@newsletter$/.test(trimmed);
+}
+function normalizeWhatsAppTarget(raw, defaultCountryCode = "57") {
+  const trimmed = String(raw || "").trim();
+  if (!trimmed) {
+    return {
+      normalized: "",
+      isGroupOrChannel: false,
+      chatId: "",
+      evolutionNumber: ""
+    };
+  }
+  const lower = trimmed.toLowerCase();
+  if (isWhatsAppGroupOrChannelJid(lower)) {
+    return {
+      normalized: lower,
+      isGroupOrChannel: true,
+      chatId: lower,
+      evolutionNumber: lower
+    };
+  }
+  if (lower.endsWith("@c.us") || lower.endsWith("@s.whatsapp.net")) {
+    const userPart = lower.split("@")[0];
+    const e1642 = normalizeE164Phone(userPart, defaultCountryCode);
+    const digits2 = e1642.replace(/^\+/, "");
+    return {
+      normalized: e1642,
+      isGroupOrChannel: false,
+      chatId: digits2 ? `${digits2}@c.us` : "",
+      evolutionNumber: digits2
+    };
+  }
+  const e164 = normalizeE164Phone(trimmed, defaultCountryCode);
+  const digits = e164.replace(/^\+/, "");
+  return {
+    normalized: e164,
+    isGroupOrChannel: false,
+    chatId: digits ? `${digits}@c.us` : "",
+    evolutionNumber: digits
+  };
+}
+function maskRecipientIdentifier(identifier) {
+  const trimmed = String(identifier || "").trim();
+  if (!trimmed) return "***";
+  const lower = trimmed.toLowerCase();
+  if (isWhatsAppGroupOrChannelJid(lower)) {
+    return lower;
+  }
+  if (trimmed.includes("@") && !trimmed.startsWith("@")) {
+    return maskEmail(trimmed);
+  }
+  if (trimmed.startsWith("@") || /^-\d+$/.test(trimmed)) {
+    return trimmed;
+  }
+  return maskPhone(trimmed);
+}
+function normalizeE164Phone(phone, defaultCountryCode = "57") {
+  const raw = String(phone || "").trim();
+  if (!raw) return "";
+  if (isWhatsAppGroupOrChannelJid(raw)) {
+    return raw.toLowerCase();
+  }
+  const hasPlus = raw.startsWith("+");
+  const digitsOnly = raw.replace(/\D+/g, "");
+  if (!digitsOnly) return "";
+  if (hasPlus) {
+    return `+${digitsOnly}`;
+  }
+  if (digitsOnly.startsWith("00") && digitsOnly.length > 4) {
+    return `+${digitsOnly.slice(2)}`;
+  }
+  if (digitsOnly.length === 10 && defaultCountryCode) {
+    return `+${defaultCountryCode.replace(/\D+/g, "")}${digitsOnly}`;
+  }
+  return `+${digitsOnly}`;
+}
+function resolveLocalizedCampaignCopy(campaign, locale, defaultLocale = "es") {
+  const translations = campaign.translations || {};
+  const match = translations[locale] || translations[defaultLocale];
+  return {
+    subject: match?.subject || campaign.subject,
+    bodyText: match?.bodyText || campaign.bodyText,
+    bodyHtml: match?.bodyHtml || campaign.bodyHtml,
+    ctaLabel: match?.ctaLabel || campaign.ctaLabel,
+    ctaUrl: match?.ctaUrl || campaign.ctaUrl
+  };
+}
+const SLUG_REGEX = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set([
+  "metadata.google.internal",
+  "metadata",
+  "100.100.100.200"
+]);
+function parseIpv4Octets(host) {
+  const match = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (!match) return null;
+  const octets = [
+    Number(match[1]),
+    Number(match[2]),
+    Number(match[3]),
+    Number(match[4])
+  ];
+  if (octets.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {
+    return null;
+  }
+  return octets;
+}
+function isBlockedIpv4([a, b, c, d], allowLoopback) {
+  if (a === 127) {
+    return !(allowLoopback && b === 0 && c === 0 && d === 1);
+  }
+  if (a === 0 || a === 10 || a >= 224) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 192 && b === 0 && c === 0) return true;
+  return false;
+}
+function expandIpv6Groups(rawHost) {
+  if (!rawHost.includes(":") || rawHost.includes("%")) return null;
+  let candidate = rawHost;
+  const lastColon = candidate.lastIndexOf(":");
+  const tail = candidate.slice(lastColon + 1);
+  if (tail.includes(".")) {
+    const v4 = parseIpv4Octets(tail);
+    if (!v4) return null;
+    const hi = (v4[0] << 8 | v4[1]).toString(16);
+    const lo = (v4[2] << 8 | v4[3]).toString(16);
+    candidate = `${candidate.slice(0, lastColon)}:${hi}:${lo}`;
+  }
+  const dblParts = candidate.split("::");
+  if (dblParts.length > 2) return null;
+  const parsePart = (part) => {
+    if (!part) return [];
+    const tokens = part.split(":");
+    const nums = [];
+    for (const tok of tokens) {
+      if (!/^[0-9a-f]{1,4}$/i.test(tok)) return null;
+      nums.push(Number.parseInt(tok, 16));
+    }
+    return nums;
+  };
+  const left = parsePart(dblParts[0]);
+  if (!left) return null;
+  if (dblParts.length === 1) {
+    return left.length === 8 ? left : null;
+  }
+  const right = parsePart(dblParts[1]);
+  if (!right) return null;
+  const missing = 8 - (left.length + right.length);
+  if (missing < 1) return null;
+  return [...left, ...Array.from({ length: missing }, () => 0), ...right];
+}
+function isBlockedIpv6(groups, allowLoopback) {
+  const allZeroPrefix = groups.slice(0, 7).every((g) => g === 0);
+  if (allZeroPrefix && groups[7] === 0) return true;
+  if (allZeroPrefix && groups[7] === 1) return !allowLoopback;
+  const first = groups[0];
+  if ((first & 65024) === 64512) return true;
+  if ((first & 65472) === 65152) return true;
+  if ((first & 65280) === 65280) return true;
+  if (first === 8194) {
+    const embedded6to4 = [
+      groups[1] >> 8 & 255,
+      groups[1] & 255,
+      groups[2] >> 8 & 255,
+      groups[2] & 255
+    ];
+    return isBlockedIpv4(embedded6to4, false);
+  }
+  const isMappedV4 = groups.slice(0, 5).every((g) => g === 0) && (groups[5] === 65535 || groups[5] === 0);
+  const isNat64 = groups[0] === 100 && groups[1] === 65435 && groups.slice(2, 6).every((g) => g === 0);
+  if (isMappedV4 || isNat64) {
+    const mappedQuad = [
+      groups[6] >> 8 & 255,
+      groups[6] & 255,
+      groups[7] >> 8 & 255,
+      groups[7] & 255
+    ];
+    return isBlockedIpv4(mappedQuad, false);
+  }
+  return false;
+}
+function normalizeUrlHostname(rawHostname) {
+  const lower = rawHostname.toLowerCase();
+  let unbracketed = lower.startsWith("[") && lower.endsWith("]") ? lower.slice(1, -1) : lower;
+  while (unbracketed.endsWith(".")) {
+    unbracketed = unbracketed.slice(0, -1);
+  }
+  return unbracketed;
+}
+function evaluateGatewayHost(host, allowLocalhost) {
+  if (!host) {
+    return { isExactLoopback: false, blockedError: "Invalid gateway hostname" };
+  }
+  const isExactLoopback = host === "localhost" || host === "127.0.0.1" || host === "::1";
+  if (BLOCKED_HOSTNAMES.has(host) || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) {
+    return {
+      isExactLoopback: false,
+      blockedError: "Private, loopback, and metadata hosts are forbidden (SSRF protection)"
+    };
+  }
+  if (host === "localhost") {
+    return {
+      isExactLoopback: true,
+      blockedError: allowLocalhost ? null : "Localhost gateway URLs are forbidden unless explicitly allowed"
+    };
+  }
+  const v4 = parseIpv4Octets(host);
+  if (v4) {
+    return {
+      isExactLoopback,
+      blockedError: isBlockedIpv4(v4, allowLocalhost) ? "Private, loopback, CGNAT, and link-local IPv4 hosts are forbidden" : null
+    };
+  }
+  if (host.includes(":")) {
+    const v6 = expandIpv6Groups(host);
+    if (!v6 || isBlockedIpv6(v6, allowLocalhost)) {
+      return {
+        isExactLoopback,
+        blockedError: "Private, loopback, link-local, and mapped IPv6 hosts are forbidden"
+      };
+    }
+  }
+  return { isExactLoopback, blockedError: null };
+}
+function validateGatewayUrl(rawUrl, options = {}) {
+  const errors = [];
+  const trimmed = String(rawUrl || "").trim();
+  if (!trimmed) {
+    return { valid: false, errors: ["Gateway URL is required"] };
+  }
+  if (trimmed.includes("\\") || /[\u0000-\u001f\u007f]/.test(trimmed)) {
+    return {
+      valid: false,
+      errors: ["Gateway URL must not contain backslashes or control chars"]
+    };
+  }
+  let parsed;
+  try {
+    parsed = new URL(trimmed);
+  } catch {
+    return { valid: false, errors: ["Invalid URL format"] };
+  }
+  if (parsed.username || parsed.password) {
+    errors.push("Gateway URL must not contain embedded credentials");
+  }
+  if (parsed.search || parsed.hash) {
+    errors.push("Gateway URL must not contain query parameters or fragments");
+  }
+  const allowLocalhost = Boolean(options.allowLocalhost);
+  const host = normalizeUrlHostname(parsed.hostname);
+  const { isExactLoopback, blockedError } = evaluateGatewayHost(
+    host,
+    allowLocalhost
+  );
+  if (blockedError) errors.push(blockedError);
+  if (parsed.protocol === "http:") {
+    if (!allowLocalhost || !isExactLoopback) {
+      errors.push("HTTPS protocol is required for external gateway URLs");
+    }
+  } else if (parsed.protocol !== "https:") {
+    errors.push(
+      "Only HTTPS (or explicitly allowed localhost HTTP) protocol is permitted"
+    );
+  }
+  return { valid: errors.length === 0, errors };
+}
+function isSafeHttpUrl(rawUrl) {
+  if (typeof rawUrl !== "string") return false;
+  const trimmed = rawUrl.trim();
+  if (!trimmed || /[\u0000-\u001f\u007f<>\\]/.test(trimmed)) return false;
+  try {
+    const parsed = new URL(trimmed);
+    if (parsed.username || parsed.password) return false;
+    return parsed.protocol === "https:" || parsed.protocol === "http:";
+  } catch {
+    return false;
+  }
+}
+function validatePublicChannelLinks(links) {
+  const errors = [];
+  if (!Array.isArray(links)) {
+    return { valid: false, errors: ["publicChannelLinks must be an array"] };
+  }
+  for (let i = 0; i < links.length; i += 1) {
+    const item = links[i];
+    if (!item || typeof item !== "object") {
+      errors.push(`publicChannelLinks[${i}] must be an object`);
+      continue;
+    }
+    if (!isSafeHttpUrl(item.inviteUrl)) {
+      errors.push(
+        `publicChannelLinks[${i}].inviteUrl must be a valid http(s) URL`
+      );
+    }
+  }
+  return { valid: errors.length === 0, errors };
+}
+function normalizeChannels(rawChannels, fallback = ["email"]) {
+  if (!Array.isArray(rawChannels)) {
+    return [...fallback];
+  }
+  const filtered = rawChannels.map((c) => String(c).trim().toLowerCase()).filter(
+    (c) => SUPPORTED_CHANNELS.includes(c)
+  );
+  return filtered.length > 0 ? Array.from(new Set(filtered)) : [...fallback];
+}
+function isSupportedWhatsAppDriver(driver) {
+  return SUPPORTED_WHATSAPP_DRIVERS.includes(
+    String(driver || "").trim()
+  );
+}
+const GATEWAY_SESSION_RE = /^[A-Za-z0-9_-]{1,64}$/;
+function isValidGatewaySession(session) {
+  return typeof session === "string" && GATEWAY_SESSION_RE.test(session.trim());
+}
+function validateCampaignChannelsList(rawChannels, errors) {
+  const channels = Array.isArray(rawChannels) ? rawChannels : [];
+  if (channels.length === 0) {
+    errors.push("At least one broadcast channel is required");
+    return;
+  }
+  for (const ch of channels) {
+    const normalized = String(ch).trim().toLowerCase();
+    if (!SUPPORTED_CHANNELS.includes(normalized)) {
+      errors.push(`Unsupported broadcast channel: ${String(ch)}`);
+    }
+  }
+}
+function validateOptionalHttpUrl(urlValue, fieldName, errors) {
+  if (!urlValue) return;
+  if (!isSafeHttpUrl(urlValue)) {
+    errors.push(`${fieldName} must use http or https protocol`);
+  }
+}
+function validateCampaignInput(input) {
+  const errors = [];
+  const slug = String(input.slug || "").trim();
+  const title = String(input.title || "").trim();
+  const subject = String(input.subject || "").trim();
+  const bodyText = String(input.bodyText || "").trim();
+  if (!slug || !SLUG_REGEX.test(slug)) {
+    errors.push("Campaign slug must be lowercase kebab-case");
+  }
+  if (title.length < 3) {
+    errors.push("Campaign title must be at least 3 characters");
+  }
+  if (subject.length < 3) {
+    errors.push("Campaign subject must be at least 3 characters");
+  }
+  if (bodyText.length < 5) {
+    errors.push("Campaign bodyText must be at least 5 characters");
+  }
+  validateCampaignChannelsList(input.channels, errors);
+  validateOptionalHttpUrl(input.ctaUrl, "ctaUrl", errors);
+  validateOptionalHttpUrl(input.mediaUrl, "mediaUrl", errors);
+  if (input.translations && typeof input.translations === "object") {
+    for (const [locale, tr] of Object.entries(input.translations)) {
+      if (tr && typeof tr === "object" && tr.ctaUrl) {
+        validateOptionalHttpUrl(
+          tr.ctaUrl,
+          `translations.${locale}.ctaUrl`,
+          errors
+        );
+      }
+    }
+  }
+  return { valid: errors.length === 0, errors };
+}
+function requireNonEmptyFields(fields, errors) {
+  for (const [val, errMessage] of fields) {
+    if (!String(val || "").trim()) {
+      errors.push(errMessage);
+    }
+  }
+}
+function validateCtaUrlTemplate(rawTemplate, errors) {
+  if (!rawTemplate) return;
+  const trimmed = String(rawTemplate).trim();
+  if (!trimmed) return;
+  const resolvedProbe = trimmed.replace(/^\{\{\s*siteBaseUrl\s*\}\}/, "https://example.org").replace(/\{\{\s*[a-zA-Z0-9_.-]+\s*\}\}/g, "segment");
+  if (!isSafeHttpUrl(resolvedProbe)) {
+    errors.push("ctaUrlTemplate must resolve to an http or https URL");
+  }
+}
+function validateAutomationRuleInput(input) {
+  const errors = [];
+  const slug = String(input.slug || "").trim();
+  const name = String(input.name || "").trim();
+  const eventName = String(input.eventName || "").trim();
+  const targetUid = String(input.targetContentType || "").trim();
+  if (!slug || !SLUG_REGEX.test(slug)) {
+    errors.push("Automation rule slug must be lowercase kebab-case");
+  }
+  if (name.length < 3) {
+    errors.push("Automation rule name must be at least 3 characters");
+  }
+  requireNonEmptyFields(
+    [
+      [input.eventName, "eventName is required"],
+      [input.subjectTemplate, "subjectTemplate is required"],
+      [input.bodyTextTemplate, "bodyTextTemplate is required"]
+    ],
+    errors
+  );
+  if (eventName.toLowerCase().startsWith("broadcasts.")) {
+    errors.push('eventName cannot start with "broadcasts." (loop protection)');
+  }
+  if (targetUid.toLowerCase().startsWith("plugin::broadcasts.")) {
+    errors.push(
+      'targetContentType cannot target "plugin::broadcasts.*" (loop protection)'
+    );
+  }
+  if (input.channels !== void 0) {
+    validateCampaignChannelsList(input.channels, errors);
+  }
+  validateCtaUrlTemplate(input.ctaUrlTemplate, errors);
+  return { valid: errors.length === 0, errors };
+}
+Object.defineProperty(exports, "SUPPORTED_INTL_CALENDARS", {
+  enumerable: true,
+  get: () => shared.SUPPORTED_INTL_CALENDARS
+});
+exports.AUTOMATION_RULE_UID = AUTOMATION_RULE_UID;
+exports.CAMPAIGN_UID = CAMPAIGN_UID;
+exports.DEFAULT_BROADCAST_SETTINGS = DEFAULT_BROADCAST_SETTINGS;
+exports.DEFAULT_BROADCAST_TOPICS = DEFAULT_BROADCAST_TOPICS;
+exports.DELIVERY_LOG_UID = DELIVERY_LOG_UID;
+exports.PLUGIN_ID = PLUGIN_ID;
+exports.STARTER_AUTOMATION_RULES = STARTER_AUTOMATION_RULES;
+exports.STARTER_CAMPAIGN_TEMPLATES = STARTER_CAMPAIGN_TEMPLATES;
+exports.SUPPORTED_CHANNELS = SUPPORTED_CHANNELS;
+exports.SUPPORTED_WHATSAPP_DRIVERS = SUPPORTED_WHATSAPP_DRIVERS;
+exports.escapeHtml = escapeHtml;
+exports.formatSecondaryDate = formatSecondaryDate;
+exports.interpolateBroadcastTemplate = interpolateBroadcastTemplate;
+exports.isSafeHttpUrl = isSafeHttpUrl;
+exports.isSupportedCalendar = isSupportedCalendar;
+exports.isSupportedWhatsAppDriver = isSupportedWhatsAppDriver;
+exports.isValidGatewaySession = isValidGatewaySession;
+exports.isWhatsAppGroupOrChannelJid = isWhatsAppGroupOrChannelJid;
+exports.maskEmail = maskEmail;
+exports.maskPhone = maskPhone;
+exports.maskRecipientIdentifier = maskRecipientIdentifier;
+exports.normalizeChannels = normalizeChannels;
+exports.normalizeE164Phone = normalizeE164Phone;
+exports.normalizeWhatsAppTarget = normalizeWhatsAppTarget;
+exports.resolveLocalizedCampaignCopy = resolveLocalizedCampaignCopy;
+exports.sanitizeTelegramHtml = sanitizeTelegramHtml;
+exports.stripHeaderControlChars = stripHeaderControlChars;
+exports.validateAutomationRuleInput = validateAutomationRuleInput;
+exports.validateCampaignInput = validateCampaignInput;
+exports.validateGatewayUrl = validateGatewayUrl;
+exports.validatePublicChannelLinks = validatePublicChannelLinks;