@aglyn/aglyn 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/app-utils/cross-pool-desync.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Recognizes the rejection Firebase raises when another tab signs in to a
+ * DIFFERENT account pool (AGL-3280).
+ *
+ * The console recovers from it (`apps/console/utils/cross-pool-desync.ts`
+ * holds the reload and its fences) and the error beacon labels it, so the
+ * two must agree on what it is. One definition, here, because a second copy
+ * fails silently: a shape learned by the recovery would go on paging from the
+ * beacon, or the other way round.
+ *
+ * Pure and framework-free — the beacon ships in every page's client bundle.
+ */
+/** The SDK's code for "the incoming user is not in this instance's pool". */
+export declare const CROSS_POOL_DESYNC_CODE = "auth/tenant-id-mismatch";
+/**
+ * Is this the cross-pool desync? Matched on `code` first, which is the field
+ * Firebase promises; the message is the fallback for a rejection that arrived
+ * as something plainer.
+ *
+ * Nothing here may throw: it runs inside rejection handlers, where a getter
+ * that throws would lose the event it was asked about.
+ */
+export declare function isCrossPoolDesync(reason: unknown): boolean;

package/src/lib/app-utils/cross-pool-desync.js

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Recognizes the rejection Firebase raises when another tab signs in to a
+ * DIFFERENT account pool (AGL-3280).
+ *
+ * The console recovers from it (`apps/console/utils/cross-pool-desync.ts`
+ * holds the reload and its fences) and the error beacon labels it, so the
+ * two must agree on what it is. One definition, here, because a second copy
+ * fails silently: a shape learned by the recovery would go on paging from the
+ * beacon, or the other way round.
+ *
+ * Pure and framework-free — the beacon ships in every page's client bundle.
+ */ /** The SDK's code for "the incoming user is not in this instance's pool". */ export const CROSS_POOL_DESYNC_CODE = 'auth/tenant-id-mismatch';
+/**
+ * Is this the cross-pool desync? Matched on `code` first, which is the field
+ * Firebase promises; the message is the fallback for a rejection that arrived
+ * as something plainer.
+ *
+ * Nothing here may throw: it runs inside rejection handlers, where a getter
+ * that throws would lose the event it was asked about.
+ */ export function isCrossPoolDesync(reason) {
+    try {
+        var _error_code, _error_message;
+        if (!reason || typeof reason !== 'object') return false;
+        const error = reason;
+        if (String((_error_code = error.code) != null ? _error_code : '') === CROSS_POOL_DESYNC_CODE) return true;
+        return String((_error_message = error.message) != null ? _error_message : '').includes(CROSS_POOL_DESYNC_CODE);
+    } catch (unused) {
+        return false;
+    }
+}
+
+//# sourceMappingURL=cross-pool-desync.js.map

package/src/lib/app-utils/cross-pool-desync.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/cross-pool-desync.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Recognizes the rejection Firebase raises when another tab signs in to a\n * DIFFERENT account pool (AGL-3280).\n *\n * The console recovers from it (`apps/console/utils/cross-pool-desync.ts`\n * holds the reload and its fences) and the error beacon labels it, so the\n * two must agree on what it is. One definition, here, because a second copy\n * fails silently: a shape learned by the recovery would go on paging from the\n * beacon, or the other way round.\n *\n * Pure and framework-free — the beacon ships in every page's client bundle.\n */\n\n/** The SDK's code for \"the incoming user is not in this instance's pool\". */\nexport const CROSS_POOL_DESYNC_CODE = 'auth/tenant-id-mismatch'\n\n/**\n * Is this the cross-pool desync? Matched on `code` first, which is the field\n * Firebase promises; the message is the fallback for a rejection that arrived\n * as something plainer.\n *\n * Nothing here may throw: it runs inside rejection handlers, where a getter\n * that throws would lose the event it was asked about.\n */\nexport function isCrossPoolDesync(reason: unknown): boolean {\n  try {\n    if (!reason || typeof reason !== 'object') return false\n    const error = reason as { code?: unknown; message?: unknown }\n    if (String(error.code ?? '') === CROSS_POOL_DESYNC_CODE) return true\n    return String(error.message ?? '').includes(CROSS_POOL_DESYNC_CODE)\n  } catch {\n    return false\n  }\n}\n"],"names":["CROSS_POOL_DESYNC_CODE","isCrossPoolDesync","reason","error","String","code","message","includes"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC,GAED,2EAA2E,GAC3E,OAAO,MAAMA,yBAAyB,0BAAyB;AAE/D;;;;;;;CAOC,GACD,OAAO,SAASC,kBAAkBC,MAAe;IAC/C,IAAI;YAGSC,aACGA;QAHd,IAAI,CAACD,UAAU,OAAOA,WAAW,UAAU,OAAO;QAClD,MAAMC,QAAQD;QACd,IAAIE,QAAOD,cAAAA,MAAME,IAAI,YAAVF,cAAc,QAAQH,wBAAwB,OAAO;QAChE,OAAOI,QAAOD,iBAAAA,MAAMG,OAAO,YAAbH,iBAAiB,IAAII,QAAQ,CAACP;IAC9C,EAAE,eAAM;QACN,OAAO;IACT;AACF"}

package/src/lib/app-utils/csv-upload.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The most characters one uploaded CSV may carry, whoever reads it.
+ *
+ * A file a person uploads is parsed in one pass by `parseCsv` (`csv.ts`), in the
+ * browser that picked it and again on the server that imports it. This bounds
+ * that pass: it is checked before the parse rather than after, because the
+ * parse is what the ceiling is protecting — a refusal answered on the byte
+ * count costs nothing, where discovering the file was too big by
+ * materializing all of its cells has already spent the memory the limit
+ * exists to bound. Every importer that reads a CSV in one go shares it, so a
+ * file one importer accepts is never one another refuses for its size.
+ */
+export declare const CSV_UPLOAD_MAX_CHARACTERS = 8000000;

package/src/lib/app-utils/csv-upload.js

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The most characters one uploaded CSV may carry, whoever reads it.
+ *
+ * A file a person uploads is parsed in one pass by `parseCsv` (`csv.ts`), in the
+ * browser that picked it and again on the server that imports it. This bounds
+ * that pass: it is checked before the parse rather than after, because the
+ * parse is what the ceiling is protecting — a refusal answered on the byte
+ * count costs nothing, where discovering the file was too big by
+ * materializing all of its cells has already spent the memory the limit
+ * exists to bound. Every importer that reads a CSV in one go shares it, so a
+ * file one importer accepts is never one another refuses for its size.
+ */ export const CSV_UPLOAD_MAX_CHARACTERS = 8000000;
+
+//# sourceMappingURL=csv-upload.js.map

package/src/lib/app-utils/csv-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/csv-upload.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The most characters one uploaded CSV may carry, whoever reads it.\n *\n * A file a person uploads is parsed in one pass by `parseCsv` (`csv.ts`), in the\n * browser that picked it and again on the server that imports it. This bounds\n * that pass: it is checked before the parse rather than after, because the\n * parse is what the ceiling is protecting — a refusal answered on the byte\n * count costs nothing, where discovering the file was too big by\n * materializing all of its cells has already spent the memory the limit\n * exists to bound. Every importer that reads a CSV in one go shares it, so a\n * file one importer accepts is never one another refuses for its size.\n */\nexport const CSV_UPLOAD_MAX_CHARACTERS = 8_000_000\n"],"names":["CSV_UPLOAD_MAX_CHARACTERS"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC,GACD,OAAO,MAAMA,4BAA4B,QAAS"}

package/src/lib/app-utils/{dataset-csv.d.ts → csv.d.ts}

@@ -15,49 +15,18 @@
  * limitations under the License.
  */
 /**
- * Dataset CSV/JSON serialization (AGL-182). The predictable inverse of
- * `coerceDocumentValues`: ISO dates, `lat, lon` coordinates, comma-joined
- * lists, JSON maps, reference ids — so an export re-imports losslessly
- * through the same coercion.
+ * CSV, read and written the one way the platform does it (AGL-2335).
  *
- * **Why this lives in core rather than in `@aglyn/plugins-data`** (AGL-2335).
- * AGL-413 moved dataset io out to the plugin, and the dataset-shaped half of
- * the import machinery — column mapping against a `DatasetModel` — is still
- * there, correctly: nothing outside that plugin maps a file onto a dataset.
- *
- * Writing one is different now. `/api/orgs/datasets/export` streams a
- * dataset from the server, and `scope:app` may not import a lib tagged
- * `aglyn:addons` — apps reach plugins only through the generated loader
- * manifests (AGL-417/419). The choice was a second copy of the escaper in
- * the console or one copy somewhere both may reach. There are already five
- * divergent hand-rolled CSV escapers in this repo; this is not becoming the
- * sixth. `dataset-io.ts` re-exports every name below, so the plugin's own
- * imports are unchanged.
- *
- * READING one is shared for the same reason. The email list importer parses
- * a merchant's contact file, and it lives in `@aglyn/plugins-email`, which
- * may not import `@aglyn/plugins-data` either. So {@link parseCsv} sits here
- * beside the escaper that is its inverse, and `dataset-io.ts` re-exports it
- * exactly as it re-exports the writing half.
- */
-import type { DatasetFieldDefinition, DatasetModel } from './dataset-models';
-/** Storage value → portable string (CSV cell / JSON value). */
-export declare function serializeDatasetValue(field: DatasetFieldDefinition, value: unknown): string;
-/**
- * The header line — field ids, in model order (AGL-2335).
- *
- * Split out of {@link datasetRecordsToCsv} so a server export can emit the
- * file a page at a time. The whole point of that export is that it is not
- * bounded by what one process can hold in memory, and a helper that only
- * takes a complete `rows` array cannot serve it. Everything below shares
- * one escaper: there are already five divergent hand-rolled CSV escapers in
- * this repo and this is not becoming the sixth.
+ * There were five divergent hand-rolled CSV escapers in this repo; this is
+ * the one escaper and the one parser every plugin and app reaches — the data
+ * plugin's dataset export and import, the email list import, the commerce
+ * catalog import, the CRM's contact import — and the check a download runs
+ * against the row count its server promised. Nothing here knows what the rows
+ * are; a plugin that writes its own records into a file formats each value
+ * itself and escapes it here.
  */
-export declare function datasetCsvHeader(model: DatasetModel): string;
-/** One record's values (storage form) → one CSV line, no terminator. */
-export declare function datasetCsvRow(model: DatasetModel, row: Record<string, unknown>): string;
-/** One record's values → the portable JSON object the JSON export emits. */
-export declare function datasetRecordToJson(model: DatasetModel, row: Record<string, unknown>): Record<string, string>;
+/** One cell, quoted when it has to be: a comma, a quote or a line break. */
+export declare const escapeCsvCell: (cell: string) => string;
 /**
  * Data rows in a CSV document — the header excluded, quoted newlines not
  * counted as row breaks (AGL-2335).
@@ -93,8 +62,6 @@ export declare function exportShortfall(promisedHeader: string | null | undefine
     received: number;
     short: boolean;
 };
-/** Rows (storage-form value maps) → CSV with a fieldId header row. */
-export declare function datasetRecordsToCsv(model: DatasetModel, rows: Array<Record<string, unknown>>): string;
 /**
  * Minimal RFC-4180 CSV parser (quoted fields, escaped quotes, CRLF).
  *

package/src/lib/app-utils/{dataset-csv.js → csv.js}

@@ -14,81 +14,16 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ /**
- * Dataset CSV/JSON serialization (AGL-182). The predictable inverse of
- * `coerceDocumentValues`: ISO dates, `lat, lon` coordinates, comma-joined
- * lists, JSON maps, reference ids — so an export re-imports losslessly
- * through the same coercion.
+ * CSV, read and written the one way the platform does it (AGL-2335).
  *
- * **Why this lives in core rather than in `@aglyn/plugins-data`** (AGL-2335).
- * AGL-413 moved dataset io out to the plugin, and the dataset-shaped half of
- * the import machinery — column mapping against a `DatasetModel` — is still
- * there, correctly: nothing outside that plugin maps a file onto a dataset.
- *
- * Writing one is different now. `/api/orgs/datasets/export` streams a
- * dataset from the server, and `scope:app` may not import a lib tagged
- * `aglyn:addons` — apps reach plugins only through the generated loader
- * manifests (AGL-417/419). The choice was a second copy of the escaper in
- * the console or one copy somewhere both may reach. There are already five
- * divergent hand-rolled CSV escapers in this repo; this is not becoming the
- * sixth. `dataset-io.ts` re-exports every name below, so the plugin's own
- * imports are unchanged.
- *
- * READING one is shared for the same reason. The email list importer parses
- * a merchant's contact file, and it lives in `@aglyn/plugins-email`, which
- * may not import `@aglyn/plugins-data` either. So {@link parseCsv} sits here
- * beside the escaper that is its inverse, and `dataset-io.ts` re-exports it
- * exactly as it re-exports the writing half.
- */ /** Storage value → portable string (CSV cell / JSON value). */ export function serializeDatasetValue(field, value) {
-    if (value == null) return '';
-    switch(field.type){
-        case 'timestamp':
-            return typeof value === 'number' && Number.isFinite(value) ? new Date(value).toISOString() : String(value);
-        case 'coordinates':
-            {
-                const coordinates = value;
-                return coordinates && typeof coordinates.latitude === 'number' && typeof coordinates.longitude === 'number' ? `${coordinates.latitude}, ${coordinates.longitude}` : String(value);
-            }
-        case 'sorted':
-        case 'reference':
-            return Array.isArray(value) ? value.join(', ') : String(value);
-        case 'map':
-            try {
-                return JSON.stringify(value);
-            } catch (unused) {
-                return String(value);
-            }
-        default:
-            return String(value);
-    }
-}
-const csvEscape = (cell)=>/[",\r\n]/.test(cell) ? `"${cell.replace(/"/g, '""')}"` : cell;
-/**
- * The header line — field ids, in model order (AGL-2335).
- *
- * Split out of {@link datasetRecordsToCsv} so a server export can emit the
- * file a page at a time. The whole point of that export is that it is not
- * bounded by what one process can hold in memory, and a helper that only
- * takes a complete `rows` array cannot serve it. Everything below shares
- * one escaper: there are already five divergent hand-rolled CSV escapers in
- * this repo and this is not becoming the sixth.
- */ export function datasetCsvHeader(model) {
-    return model.order.map(csvEscape).join(',');
-}
-/** One record's values (storage form) → one CSV line, no terminator. */ export function datasetCsvRow(model, row) {
-    return model.order.map((fieldId)=>{
-        const field = model.fields[fieldId];
-        return csvEscape(field ? serializeDatasetValue(field, row[fieldId]) : '');
-    }).join(',');
-}
-/** One record's values → the portable JSON object the JSON export emits. */ export function datasetRecordToJson(model, row) {
-    return Object.fromEntries(model.order.map((fieldId)=>{
-        const field = model.fields[fieldId];
-        return [
-            fieldId,
-            field ? serializeDatasetValue(field, row[fieldId]) : ''
-        ];
-    }));
-}
+ * There were five divergent hand-rolled CSV escapers in this repo; this is
+ * the one escaper and the one parser every plugin and app reaches — the data
+ * plugin's dataset export and import, the email list import, the commerce
+ * catalog import, the CRM's contact import — and the check a download runs
+ * against the row count its server promised. Nothing here knows what the rows
+ * are; a plugin that writes its own records into a file formats each value
+ * itself and escapes it here.
+ */ /** One cell, quoted when it has to be: a comma, a quote or a line break. */ export const escapeCsvCell = (cell)=>/[",\r\n]/.test(cell) ? `"${cell.replace(/"/g, '""')}"` : cell;
 /**
  * Data rows in a CSV document — the header excluded, quoted newlines not
  * counted as row breaks (AGL-2335).
@@ -173,12 +108,6 @@ const csvEscape = (cell)=>/[",\r\n]/.test(cell) ? `"${cell.replace(/"/g, '""')}"
         short: Number.isFinite(promised) && promisedHeader != null && received < promised
     };
 }
-/** Rows (storage-form value maps) → CSV with a fieldId header row. */ export function datasetRecordsToCsv(model, rows) {
-    return [
-        datasetCsvHeader(model),
-        ...rows.map((row)=>datasetCsvRow(model, row))
-    ].join('\n');
-}
 /**
  * Minimal RFC-4180 CSV parser (quoted fields, escaped quotes, CRLF).
  *
@@ -232,4 +161,4 @@ const csvEscape = (cell)=>/[",\r\n]/.test(cell) ? `"${cell.replace(/"/g, '""')}"
     return rows.filter((cells)=>cells.some((value)=>value.trim() !== ''));
 }
 
-//# sourceMappingURL=dataset-csv.js.map
+//# sourceMappingURL=csv.js.map

package/src/lib/app-utils/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/csv.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * CSV, read and written the one way the platform does it (AGL-2335).\n *\n * There were five divergent hand-rolled CSV escapers in this repo; this is\n * the one escaper and the one parser every plugin and app reaches — the data\n * plugin's dataset export and import, the email list import, the commerce\n * catalog import, the CRM's contact import — and the check a download runs\n * against the row count its server promised. Nothing here knows what the rows\n * are; a plugin that writes its own records into a file formats each value\n * itself and escapes it here.\n */\n\n/** One cell, quoted when it has to be: a comma, a quote or a line break. */\nexport const escapeCsvCell = (cell: string): string =>\n  /[\",\\r\\n]/.test(cell) ? `\"${cell.replace(/\"/g, '\"\"')}\"` : cell\n\n/**\n * Data rows in a CSV document — the header excluded, quoted newlines not\n * counted as row breaks (AGL-2335).\n *\n * This exists so a download can be CHECKED against the row count the server\n * promised, rather than trusted. A truncated export is the defect this whole\n * area is about, and a stream that dies halfway produces a perfectly\n * well-formed shorter file: nothing about the bytes says they are short.\n *\n * Single pass, no array building — {@link parseCsv} answers the same\n * question but materializes every cell, which is the wrong trade when the\n * file may be hundreds of thousands of rows and the only thing wanted is\n * how many there are.\n */\nexport function countCsvDataRows(text: string): number {\n  const source = String(text ?? '')\n  if (!source) return 0\n  let rows = 0\n  let quoted = false\n  let cellsSeen = false\n  for (let index = 0; index < source.length; index += 1) {\n    const char = source[index]\n    if (quoted) {\n      if (char === '\"') {\n        if (source[index + 1] === '\"') index += 1\n        else quoted = false\n      }\n      cellsSeen = true\n      continue\n    }\n    if (char === '\"') {\n      quoted = true\n      cellsSeen = true\n      continue\n    }\n    if (char === '\\n') {\n      rows += 1\n      cellsSeen = false\n      continue\n    }\n    if (char !== '\\r') cellsSeen = true\n  }\n  // A file that does not end in a newline still has a final row.\n  if (cellsSeen) rows += 1\n  // The header is not data.\n  return Math.max(0, rows - 1)\n}\n\n/**\n * Did a downloaded export arrive whole? (AGL-2335)\n *\n * The server streams and reports its `count()` aggregate in a header, so the\n * client can CHECK rather than trust. This is the check, kept here as a pure\n * function because a guard living inline in a component is a guard nobody\n * can force red — and this one exists precisely to catch a silent shortfall.\n *\n * `short` is only true when the count is both KNOWN and lower. A missing or\n * unparseable header is not evidence of truncation, and refusing a download\n * on the strength of a header that never arrived would fail the user for the\n * server's bookkeeping. More rows than promised is not short either — the\n * count is a snapshot taken before the first page, so a concurrent insert\n * can legitimately overtake it.\n */\nexport function exportShortfall(\n  promisedHeader: string | null | undefined,\n  body: string,\n  format: 'csv' | 'json',\n): { promised: number; received: number; short: boolean } {\n  const promised = Number(promisedHeader)\n  let received: number\n  if (format === 'csv') {\n    received = countCsvDataRows(body)\n  } else {\n    try {\n      const parsed = JSON.parse(body) as unknown\n      received = Array.isArray(parsed) ? parsed.length : 0\n    } catch {\n      // A body that is not JSON at all did not arrive whole.\n      return { promised, received: 0, short: true }\n    }\n  }\n  return {\n    promised,\n    received,\n    short: Number.isFinite(promised) && promisedHeader != null && received < promised,\n  }\n}\n\n/**\n * Minimal RFC-4180 CSV parser (quoted fields, escaped quotes, CRLF).\n *\n * The inverse of the escaper above, and the one parser in the repo — see the\n * module note for why the email list importer reaches this rather than\n * writing its own.\n *\n * A wholly blank row is dropped. Every spreadsheet writes a trailing newline\n * and a row of empty cells is not a record; carrying it through would give\n * every caller the same off-by-one to remember.\n */\nexport function parseCsv(text: string): string[][] {\n  const rows: string[][] = []\n  let row: string[] = []\n  let cell = ''\n  let quoted = false\n  const source = String(text ?? '')\n  for (let index = 0; index < source.length; index += 1) {\n    const char = source[index]\n    if (quoted) {\n      if (char === '\"') {\n        if (source[index + 1] === '\"') {\n          cell += '\"'\n          index += 1\n        } else {\n          quoted = false\n        }\n      } else {\n        cell += char\n      }\n      continue\n    }\n    if (char === '\"') {\n      quoted = true\n    } else if (char === ',') {\n      row.push(cell)\n      cell = ''\n    } else if (char === '\\n' || char === '\\r') {\n      if (char === '\\r' && source[index + 1] === '\\n') index += 1\n      row.push(cell)\n      cell = ''\n      rows.push(row)\n      row = []\n    } else {\n      cell += char\n    }\n  }\n  if (cell !== '' || row.length) {\n    row.push(cell)\n    rows.push(row)\n  }\n  return rows.filter((cells) => cells.some((value) => value.trim() !== ''))\n}\n"],"names":["escapeCsvCell","cell","test","replace","countCsvDataRows","text","source","String","rows","quoted","cellsSeen","index","length","char","Math","max","exportShortfall","promisedHeader","body","format","promised","Number","received","parsed","JSON","parse","Array","isArray","short","isFinite","parseCsv","row","push","filter","cells","some","value","trim"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;CAUC,GAED,0EAA0E,GAC1E,OAAO,MAAMA,gBAAgB,CAACC,OAC5B,WAAWC,IAAI,CAACD,QAAQ,CAAC,CAAC,EAAEA,KAAKE,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC,GAAGF,KAAI;AAEhE;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASG,iBAAiBC,IAAY;IAC3C,MAAMC,SAASC,OAAOF,eAAAA,OAAQ;IAC9B,IAAI,CAACC,QAAQ,OAAO;IACpB,IAAIE,OAAO;IACX,IAAIC,SAAS;IACb,IAAIC,YAAY;IAChB,IAAK,IAAIC,QAAQ,GAAGA,QAAQL,OAAOM,MAAM,EAAED,SAAS,EAAG;QACrD,MAAME,OAAOP,MAAM,CAACK,MAAM;QAC1B,IAAIF,QAAQ;YACV,IAAII,SAAS,KAAK;gBAChB,IAAIP,MAAM,CAACK,QAAQ,EAAE,KAAK,KAAKA,SAAS;qBACnCF,SAAS;YAChB;YACAC,YAAY;YACZ;QACF;QACA,IAAIG,SAAS,KAAK;YAChBJ,SAAS;YACTC,YAAY;YACZ;QACF;QACA,IAAIG,SAAS,MAAM;YACjBL,QAAQ;YACRE,YAAY;YACZ;QACF;QACA,IAAIG,SAAS,MAAMH,YAAY;IACjC;IACA,+DAA+D;IAC/D,IAAIA,WAAWF,QAAQ;IACvB,0BAA0B;IAC1B,OAAOM,KAAKC,GAAG,CAAC,GAAGP,OAAO;AAC5B;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASQ,gBACdC,cAAyC,EACzCC,IAAY,EACZC,MAAsB;IAEtB,MAAMC,WAAWC,OAAOJ;IACxB,IAAIK;IACJ,IAAIH,WAAW,OAAO;QACpBG,WAAWlB,iBAAiBc;IAC9B,OAAO;QACL,IAAI;YACF,MAAMK,SAASC,KAAKC,KAAK,CAACP;YAC1BI,WAAWI,MAAMC,OAAO,CAACJ,UAAUA,OAAOX,MAAM,GAAG;QACrD,EAAE,eAAM;YACN,uDAAuD;YACvD,OAAO;gBAAEQ;gBAAUE,UAAU;gBAAGM,OAAO;YAAK;QAC9C;IACF;IACA,OAAO;QACLR;QACAE;QACAM,OAAOP,OAAOQ,QAAQ,CAACT,aAAaH,kBAAkB,QAAQK,WAAWF;IAC3E;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASU,SAASzB,IAAY;IACnC,MAAMG,OAAmB,EAAE;IAC3B,IAAIuB,MAAgB,EAAE;IACtB,IAAI9B,OAAO;IACX,IAAIQ,SAAS;IACb,MAAMH,SAASC,OAAOF,eAAAA,OAAQ;IAC9B,IAAK,IAAIM,QAAQ,GAAGA,QAAQL,OAAOM,MAAM,EAAED,SAAS,EAAG;QACrD,MAAME,OAAOP,MAAM,CAACK,MAAM;QAC1B,IAAIF,QAAQ;YACV,IAAII,SAAS,KAAK;gBAChB,IAAIP,MAAM,CAACK,QAAQ,EAAE,KAAK,KAAK;oBAC7BV,QAAQ;oBACRU,SAAS;gBACX,OAAO;oBACLF,SAAS;gBACX;YACF,OAAO;gBACLR,QAAQY;YACV;YACA;QACF;QACA,IAAIA,SAAS,KAAK;YAChBJ,SAAS;QACX,OAAO,IAAII,SAAS,KAAK;YACvBkB,IAAIC,IAAI,CAAC/B;YACTA,OAAO;QACT,OAAO,IAAIY,SAAS,QAAQA,SAAS,MAAM;YACzC,IAAIA,SAAS,QAAQP,MAAM,CAACK,QAAQ,EAAE,KAAK,MAAMA,SAAS;YAC1DoB,IAAIC,IAAI,CAAC/B;YACTA,OAAO;YACPO,KAAKwB,IAAI,CAACD;YACVA,MAAM,EAAE;QACV,OAAO;YACL9B,QAAQY;QACV;IACF;IACA,IAAIZ,SAAS,MAAM8B,IAAInB,MAAM,EAAE;QAC7BmB,IAAIC,IAAI,CAAC/B;QACTO,KAAKwB,IAAI,CAACD;IACZ;IACA,OAAOvB,KAAKyB,MAAM,CAAC,CAACC,QAAUA,MAAMC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,OAAO;AACvE"}

package/src/lib/app-utils/dataset-models.d.ts

@@ -21,11 +21,11 @@ import { type DatasetFieldEntry } from './datasets';
  * referenced design doc — this module is the single runtime source of
  * truth). A model lives on the dataset doc
  * (`orgs/{orgId}/datasets/{id}.model`) and drives the typed editor, import
- * and site-restore validation, and the console and `/v1` record writes
- * through the shared `validateDocument`/`coerceDocumentValues` pair so they
- * can't disagree. Form submissions and automation steps write through
- * `buildDatasetRecordValues` instead, which stores each value as text and
- * validates nothing.
+ * and site-restore validation, and every record write — the console, `/v1`,
+ * a bound form's submission and an automation step — through the shared
+ * `validateDocument`/`coerceDocumentValues` pair so they can't disagree. The
+ * form and the automation step reach the pair through
+ * `prepareDatasetRecordWrite` (AGL-2773).
  *
  * Storage conventions (Firestore-safe): timestamps as epoch millis
  * numbers, coordinates as `{ latitude, longitude }`, `sorted` as arrays,

package/src/lib/app-utils/dataset-models.js

@@ -251,6 +251,18 @@ const isFiniteNumber = (value)=>typeof value === 'number' && Number.isFinite(val
     if (field.type === 'map') return formatDatasetValue(field, value);
     return String(value);
 }
+const BOOL_TRUE_WORDS = new Set([
+    'true',
+    'yes',
+    'on',
+    '1'
+]);
+const BOOL_FALSE_WORDS = new Set([
+    'false',
+    'no',
+    'off',
+    '0'
+]);
 /**
  * Coerces user-input strings (form fields, CSV cells) into storage form
  * per the field type. Unparseable input is passed through untouched so
@@ -267,8 +279,13 @@ const isFiniteNumber = (value)=>typeof value === 'number' && Number.isFinite(val
         }
         switch(field.type){
             case 'bool':
-                values[fieldId] = raw === 'true' ? true : raw === 'false' ? false : raw;
-                break;
+                {
+                    // The words a form control or a CSV cell says yes and no with: a
+                    // lone checkbox posts `on`, a spreadsheet exports `TRUE` or `1`.
+                    const word = raw.trim().toLowerCase();
+                    values[fieldId] = BOOL_TRUE_WORDS.has(word) ? true : BOOL_FALSE_WORDS.has(word) ? false : raw;
+                    break;
+                }
             case 'int32':
             case 'int64':
                 {