@aglyn/aglyn 1.0.0-beta.221 → 1.0.0-beta.222

package/src/lib/app-utils/contacts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contacts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Contacts CRM v1 (AGL-197): one contact per normalized email per host,\n * fed by the four existing capture silos (forms, members, orders,\n * bookings). Pure data module — the admin-SDK upsert lives in\n * `@aglyn/tenant-data-admin` (`upsertHostContact`) and the console reads\n * client-side under the host-admin rules.\n */\n\nimport type { AglynPostalAddress } from '../foundation'\nimport { consentGroupForHost } from './consent-groups'\nimport type { ContactCustomValue, ContactLifecycleStage } from './crm'\nimport type { EmailState } from './email-state'\nimport { heldScopeTokens } from './scope-tokens'\nimport {\n  CAPTURED_BY_HOST_FIELD,\n  MARKETING_CONSENT_BY_HOST_FIELD,\n  MARKETING_CONSENT_FIELD,\n  readMarketingBasis,\n  type MarketingBasis,\n} from './marketing-consent'\nimport { refusalsOf, type RetainedRefusals } from './retained-refusals'\n\nexport type ContactSource =\n  | 'form'\n  | 'member'\n  | 'order'\n  | 'booking'\n  | 'newsletter'\n  // AGL-2276: `POST /v1/contacts`. A first-class source rather than a blank\n  // one, because \"where did this person come from\" is the question the\n  // console's source filter exists to answer, and an integration importing a\n  // CRM is a different answer from a visitor filling in a form. Adding it to\n  // the union is what makes `SOURCE_LABELS` and the filter cover it — a raw\n  // string written past the type would render as `api` and match no filter.\n  | 'api'\n  // CRM v2 (AGL-2595): the two doors that are not a capture at all. A person\n  // typed into the console by a member of the team, and a person who arrived\n  // in a file. Both are first-class for the reason `api` is — a merchant\n  // asking \"who did we add ourselves\" and \"who came from the spreadsheet\" is\n  // asking the source filter, and a source the union does not name is one it\n  // cannot answer for.\n  | 'manual'\n  | 'import'\n  // AGL-3185: the platform's own console — an account created there, and\n  // the product-updates decision that account makes at sign-up, in its\n  // preferences or at the one-time prompt. First-class for the reason `api`\n  // is: the operator's CRM asks \"who signed up for the product\", and\n  // `member` is a SITE's member, which an account holder of the platform\n  // is not.\n  | 'account'\n\n/**\n * How a capture source reads on screen.\n *\n * Typed `Record<ContactSource, string>` so a source added to the union cannot\n * ship without a label, and kept beside the union rather than in the console\n * that first needed it: the contacts filter, the campaign audience and the\n * dynamic-list rule editor all name the same six sources, and three copies of\n * this map is three places for `order` to stop reading as \"Customer\".\n */\nexport const CONTACT_SOURCE_LABELS: Record<ContactSource, string> = {\n  form: 'Form',\n  member: 'Member',\n  order: 'Customer',\n  booking: 'Booking',\n  newsletter: 'Newsletter',\n  api: 'API',\n  manual: 'Added by hand',\n  import: 'Import',\n  account: 'Account',\n}\n\nexport interface ContactInteraction {\n  type: ContactSource\n  /** Source doc id (formSubmissions/siteMembers/orders/bookings). */\n  refId?: string\n  /** Epoch millis — Timestamps don't serialize into arrays cleanly. */\n  atMs: number\n  summary?: string\n  /**\n   * WHICH SITE this interaction happened on.\n   *\n   * A contact document is shared by every site in the org — one human who\n   * touched two sites is one person, and splitting them into two rows would\n   * bill the org twice for the same address and lose the dedupe that makes a\n   * multi-brand account worth having. But the HISTORY on that shared row is\n   * not shared: a booking made on one client's site is that client's, and a\n   * timeline that cannot be split by site shows an agency's client the other\n   * clients' activity.\n   *\n   * Optional because a row written before this field existed carries none,\n   * and an interaction whose site is unknown must read as unattributed rather\n   * than be assigned to whoever is looking. Nothing may infer it from the\n   * contact's own capture attribution: `capturedByHostIds` says which sites\n   * met this person, not which of them produced any particular visit.\n   */\n  hostId?: string\n  /**\n   * THE ENTRY POINT: the form this capture came in through.\n   *\n   * `sources` answers \"what KIND of surface met this person\" and is what the\n   * console's capture filter reads; it cannot answer \"which form\", because\n   * every form on the site sets the same `form` flag. The id rather than the\n   * name, for the reason the submission carries the id: a form's caption is\n   * editable and a stored name splits the moment somebody renames it.\n   *\n   * Beside {@link refId} rather than derived from it. The submission the\n   * interaction names does carry the form, but reading it back would be a\n   * document read per row of a timeline the console renders straight out of\n   * the contact.\n   */\n  formId?: string\n  /**\n   * THE ENTRY POINT: the page the person was on when this happened.\n   *\n   * The same `path` the submission stores. It belongs on the interaction and\n   * not on the contact, because a person who came in through the pricing page\n   * and returned through a blog post has two entry points and one row —\n   * a single field at the top would keep whichever capture wrote last.\n   */\n  path?: string\n}\n\n/** `orgs/{orgId}/contacts/{contactId}` doc shape. */\nexport interface HostContact {\n  /** Normalized (trimmed, lowercased) email — the dedupe key. */\n  email: string\n  name?: string\n  sources: Partial<Record<ContactSource, true>>\n  /** Newest-first, capped — the profile timeline. */\n  interactions: ContactInteraction[]\n  tags?: string[]\n  notes?: string\n  /**\n   * Every site that has captured this person, in no order.\n   *\n   * An ARRAY and a top-level field, because this is the one attribution that\n   * has to survive being a QUERY: \"everyone captured on A, B or C\" is an\n   * audience, and `array-contains-any` is what answers it. The per-interaction\n   * host says which visit belonged to whom; this says which sites have a\n   * relationship at all, and only the second shape can be filtered on in\n   * Firestore.\n   *\n   * Grows by `arrayUnion` on every capture, including the ones that merge\n   * onto an existing row — which is exactly what the create-only `hostId`\n   * beside it could never do.\n   */\n  capturedByHostIds?: string[]\n  /**\n   * Every form this person has come in through, in no order (AGL-2612).\n   *\n   * The entry point proper is `interactions[].formId` inside the capturing\n   * holder's facet, and that stays the record: which form produced which\n   * visit is one holder's business. But Firestore cannot select documents\n   * by a field of an array ELEMENT, and a facet path is per group, so\n   * \"everyone who filled in this form\" — the question the form's own page\n   * asks of the Contacts list — has to be a top-level array an\n   * `array-contains` can hit, exactly as `capturedByHostIds` is for sites\n   * and `companyIds` is for companies. A form id is minted under one site,\n   * so a query on it is one site's captures by construction.\n   *\n   * Grows by `arrayUnion` on every form capture, create or merge, bounded at\n   * {@link CONTACT_FORM_IDS_CAP}: a person who has filled in more forms than\n   * that keeps the first twenty and the timeline keeps the rest. The facet is\n   * the truth and this is its index — a reader answering \"which form\" reads\n   * the interaction; only a QUERY reads this.\n   */\n  formIds?: string[]\n  /*\n   * SEARCH KEYS (AGL-2596), and nothing more.\n   *\n   * The console's global search reads a window of contact documents and\n   * matches over their top-level fields; it never resolves a holder's facet,\n   * because it is one search over a dozen collections and a facet read is a\n   * contacts-only idea. So the two profile values a person is looked up BY —\n   * their phone number and the company they work for — are mirrored here by\n   * every writer that sets them on a facet, as plain values a query can hit.\n   *\n   * The FACET is the record. These are a last-writer-wins echo of it: two\n   * holders who keep different numbers for one person each overwrite the\n   * echo and each keep their own facet value, and nothing renders these to a\n   * reader — the list, the record page and the export all read through the\n   * viewing group's facet. `ORG_CONTACT_FIELDS` below is an allow-list, so\n   * neither reaches the org view either.\n   */\n  /** E.164, mirrored from the last facet write that set one. */\n  phone?: string\n  /** The company name as typed, mirrored the same way. */\n  companyName?: string\n  /**\n   * The OTHER addresses this person answers to (AGL-2625).\n   *\n   * A contact is keyed on one email, so one human with a work address and a\n   * personal one is two documents until somebody merges them. The merge keeps\n   * the survivor's `email` as the identity and records the merged record's\n   * address here, so a later capture on it — a form filled in from the\n   * personal account — resolves to this row rather than minting the second\n   * document again. `emailIndex` (see {@link CONTACT_EMAIL_INDEX_COLLECTION})\n   * is the lookup; this array is the record of why an entry there points\n   * where it does, and what the record page shows as \"also\".\n   *\n   * Shared identity like `email`, not a facet field: which addresses are one\n   * person is a fact about the person, and a holder that did not perform the\n   * merge still needs its capture on the alternate address to land on the\n   * shared row. Bounded at {@link CONTACT_ALTERNATE_EMAILS_CAP}.\n   */\n  alternateEmails?: string[]\n  /**\n   * When the earliest OPEN task filed against this person is due, epoch\n   * ms, or `null` when none is (AGL-2661) — see `CrmDeal.nextTaskAtMs` in\n   * `crm.ts` for the rule. On the SHARED row rather than a facet, because a\n   * task lives at the organization level and names the contact, not a\n   * holder's view of them.\n   */\n  nextTaskAtMs?: number | null\n  /**\n   * The last verdict on the address (AGL-3245) — bounced, blocked,\n   * unsubscribed, do-not-contact — written by the platform's senders only,\n   * on the SHARED row because the address is shared. Absent means nothing\n   * is known. See `email-state.ts`.\n   */\n  emailState?: EmailState\n}\n\n/** Timeline cap: keeps the doc small; older interactions age out. */\nexport const CONTACT_INTERACTIONS_CAP = 50\n\n/** The field holding {@link HostContact.alternateEmails}. */\nexport const CONTACT_ALTERNATE_EMAILS_FIELD = 'alternateEmails'\n\n/**\n * The most alternate addresses one contact carries. Ten is past any real\n * person's mailbox count, and it bounds the index writes one merge fans out.\n */\nexport const CONTACT_ALTERNATE_EMAILS_CAP = 10\n\n/**\n * `orgs/{orgId}/emailIndex/{personKey}` → `{ email, contactId }` (AGL-2625).\n *\n * The address-to-contact lookup the capture door consults BEFORE the\n * per-document `email ==` query, so an address recorded as an alternate on a\n * merged row resolves to the survivor. Keyed by `personKey` — the sha256 of\n * the normalized address — so a document id never carries the address\n * itself, the same derivation a lead and a list membership use.\n *\n * WRITTEN LAZILY, never backfilled: the query on `email` stays as the\n * fallback, and a contact that has no entry gets one on the next write that\n * finds it. A row the index has never seen therefore costs one extra read\n * once, and nothing needs to run over the existing collection.\n *\n * Server-written only; the rules close it to every client.\n */\nexport const CONTACT_EMAIL_INDEX_COLLECTION = 'emailIndex'\n\n/**\n * Every address a contact answers to — the primary first, then the\n * alternates — normalized and deduplicated, so an index writer and a lead\n * lookup walk one list.\n */\nexport function contactEmails(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  const out: string[] = []\n  const seen = new Set<string>()\n  const push = (value: unknown) => {\n    const email = normalizeContactEmail(value)\n    if (email && !seen.has(email)) {\n      seen.add(email)\n      out.push(email)\n    }\n  }\n  push((contact ?? {})['email'])\n  const alternates = (contact ?? {})[CONTACT_ALTERNATE_EMAILS_FIELD]\n  if (Array.isArray(alternates)) alternates.forEach(push)\n  return out\n}\n\n/** The top-level field naming every form a contact came in through — see `HostContact.formIds`. */\nexport const CONTACT_FORM_IDS_FIELD = 'formIds'\n\n/**\n * How many forms the {@link CONTACT_FORM_IDS_FIELD} mirror holds.\n *\n * The same figure as the tag cap: enough that no real person reaches it,\n * small enough that the array never becomes the document. Past it the\n * capture stops adding rather than dropping the oldest, because the mirror\n * is an index of the facet's timeline and an index that silently forgets an\n * entry the timeline still holds would answer a form's contact list wrongly\n * in the one direction nobody would notice.\n */\nexport const CONTACT_FORM_IDS_CAP = 20\n\nconst EMAIL_PATTERN = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n\n/** Normalized dedupe key, or null when the input isn't a usable email. */\nexport function normalizeContactEmail(input: unknown): string | null {\n  const email = String(input ?? '')\n    .trim()\n    .toLowerCase()\n  return EMAIL_PATTERN.test(email) && email.length <= 320 ? email : null\n}\n\n/**\n * First usable email in a free-form form-submission fields map — forms\n * don't guarantee a canonical email field, so prefer keys that look like\n * email fields before falling back to any email-shaped value.\n */\nexport function extractEmailFromFields(\n  fields: Record<string, unknown> | null | undefined,\n): string | null {\n  const entries = Object.entries(fields ?? {})\n  const preferred = entries.find(([key]) => /email/i.test(key))\n  const fromPreferred = normalizeContactEmail(preferred?.[1])\n  if (fromPreferred) return fromPreferred\n  for (const [, value] of entries) {\n    const email = normalizeContactEmail(value)\n    if (email) return email\n  }\n  return null\n}\n\n/**\n * Merges a new interaction into a contact: source flag set, interaction\n * prepended, timeline capped. Pure — the caller persists the result.\n */\nexport function mergeContactInteraction(\n  existing: Pick<HostContact, 'sources' | 'interactions'> & {\n    name?: string\n  },\n  update: { source: ContactSource; interaction: ContactInteraction; name?: string },\n): Pick<HostContact, 'sources' | 'interactions'> & { name?: string } {\n  return {\n    // Existing names win — a later anonymous form shouldn't blank a name.\n    name: existing.name || update.name,\n    sources: { ...existing.sources, [update.source]: true as const },\n    interactions: [update.interaction, ...(existing.interactions ?? [])].slice(\n      0,\n      CONTACT_INTERACTIONS_CAP,\n    ),\n  }\n}\n\n/**\n * THE PER-HOLDER FACET on a shared contact document.\n *\n * ## What is shared and what is not\n *\n * One human who touched two sites is ONE document. That is not a compromise:\n * it is the dedupe the shared address book exists for, it is what keeps a\n * bounce and a suppression describing one person, and it is what makes a\n * multi-brand account bill once for one human instead of once per site. A\n * document per host would push an agency toward twelve separate accounts and\n * throw the whole advantage away.\n *\n * But almost nothing ON that document is legitimately shared.\n *\n *  - **SHARED IDENTITY** — `email`, and the canonical `name`. One human, one\n *    identity. This is the only part two unrelated businesses may both see,\n *    and it is the minimum that makes them one row.\n *  - **PER-HOLDER FACET** — everything in this interface. A note, a tag, a\n *    call log and a lifetime value are the HOLDER's own business records.\n *    Host A's note about a customer is Host A's; a competitor sharing the\n *    platform must not read it, and while these lived at the top of the\n *    document every site in the org could.\n *  - **CONSENT AND VISIBILITY** — per declared group, decided by\n *    `marketing-consent.ts` and by `visibleTo`.\n *\n * ## Keyed by GROUP, not by host\n *\n * A business that declared three sites to be one sender is one CRM: a note\n * written on the shop belongs beside the booking made on the booking page,\n * because one team keeps both. Across groups, never — and an undeclared site\n * is a group of one, so the agency case is isolated with nothing configured.\n *\n * ## Commercial figures are per-facet, and that is not a billing change\n *\n * `ltvCents` and `ordersCount` answer \"what is this person worth to ME\". Two\n * unrelated merchants who both sell to one person have two different answers\n * and neither is entitled to the other's. Billing counts DOCUMENTS, and there\n * is still one document, so a person held by two hosts stays one billable\n * contact.\n */\nexport interface ContactFacet {\n  /**\n   * This holder's display name for the person, overriding the canonical one.\n   *\n   * The canonical `name` is shared and mutable, so without this a rename on\n   * one site changes what an unrelated business sees in its own CRM — two\n   * companies that do not know each other exist editing each other's records.\n   * The override is written by whoever edits the name from their own console;\n   * the canonical field stays as the identity of last resort, for a holder\n   * that has never set one.\n   */\n  name?: string\n  /** Which capture surfaces THIS holder saw the person through. */\n  sources: Partial<Record<ContactSource, true>>\n  /** THIS holder's timeline, newest-first and capped. */\n  interactions: ContactInteraction[]\n  /** THIS holder's tags. */\n  tags?: string[]\n  /** THIS holder's notes. */\n  notes?: string\n  /**\n   * The campaigns THIS holder has filed the person under.\n   *\n   * A label on the CRM record, not an audience: who a campaign's mail reaches\n   * is decided by the campaign's lists and by each send's own picker, and\n   * nothing in the send path reads this. It answers \"who did we put in the\n   * spring push\", which is a question about the holder's own working set.\n   *\n   * Per-holder for the reason the notes are: two unrelated businesses sharing\n   * one row must not read each other's segmentation of a person they both\n   * know. See `container-membership.ts` for the field and the path.\n   */\n  campaignIds?: string[]\n  /** Gross of fees and refunds — see `upsertHostContact`. */\n  ltvCents?: number\n  ordersCount?: number\n  lastPurchaseAtMs?: number\n  firstPurchaseAtMs?: number\n  refundedCents?: number\n  refundedOrdersCount?: number\n  lastRefundAtMs?: number\n  /*\n   * CRM v2 (AGL-2595): the profile a sales team keeps on a person.\n   *\n   * Per-holder like everything above them, and for the same reason: a phone\n   * number, a job title, an owner and a lifecycle stage are one business's\n   * knowledge of a person, and two unrelated businesses sharing the row must\n   * not read each other's. `companyId` points at a company document in the\n   * same scope, never at the org's whole company list. `custom` is keyed by\n   * `ContactFieldDefinition.key`, so a holder's field definitions and a\n   * holder's values live under the same group and cannot be joined across\n   * one.\n   *\n   * ⛔ None of these reach the org view. `ORG_CONTACT_FIELDS` is an\n   * allow-list, and the org-view spec seeds every one of these with a\n   * sentinel and proves it never surfaces.\n   */\n  /** E.164 — `normalizePhone` before writing. */\n  phone?: string\n  jobTitle?: string\n  /**\n   * Where this holder met the person — Salesforce's Lead Source, carried\n   * from the lead on conversion and picked from the org's lead source\n   * values after it (AGL-3298). The value's label, as the lead stores it.\n   */\n  leadSource?: string\n  /** `orgs/{orgId}/companies/{companyId}`, in this holder's scope. */\n  companyId?: string\n  /**\n   * The company's name as this holder knows it.\n   *\n   * Free text, so a person can be filed under a company before one exists\n   * as a record; the company picker that later sets `companyId` writes the\n   * picked company's name here too, so the row reads the same whether the\n   * link was made or the name typed. The top-level `companyName` on the\n   * document is the search echo of this value — see `HostContact`.\n   */\n  companyName?: string\n  address?: AglynPostalAddress | null\n  /** The team member responsible for the relationship. */\n  ownerUid?: string\n  lifecycleStage?: ContactLifecycleStage\n  /** Custom field values, keyed by `ContactFieldDefinition.key`. */\n  custom?: Record<string, ContactCustomValue>\n  /**\n   * When this person last OPENED or CLICKED a campaign sent by one of this\n   * holder's sites, epoch ms (AGL-2616).\n   *\n   * Stamped by the delivery webhook, forward-only, on the first open and the\n   * first click of each message — the same bound the per-person rollup on\n   * `emailDeliveries/{key}` keeps, so a reader opening one newsletter six\n   * times is one write. Per-holder because it answers \"is this person still\n   * reading OUR mail\": the address-level rollup counts every sender's mail\n   * and a sibling business's, and a re-engagement audience built on that\n   * would mail people who are reading somebody else.\n   *\n   * Absent until the first engagement after the stamp shipped; a message\n   * opened before then advanced the address-level rollup and nothing here.\n   */\n  lastEmailEngagementAtMs?: number\n  /**\n   * The org-library files THIS holder has attached to the person\n   * (AGL-2662), by media document id.\n   *\n   * Per-holder for the reason every other field here is: an agency running\n   * two client brands has one contact document between them, and a signed\n   * contract one client filed is not the other client's to see. Ids rather\n   * than URLs so a file moved between folders keeps its attachment, and so\n   * a private asset is still served through the signed CDN door.\n   */\n  mediaIds?: string[]\n}\n\n/** The map field holding the facets: `{ [groupId]: ContactFacet }`. */\nexport const CONTACT_FACETS_FIELD = 'facets'\n\n/**\n * The facet one group holds, or an empty one.\n *\n * `map[groupId]` — a lookup, not a search, for the reason the consent map is\n * shaped the same way: there is no expression of this form that returns\n * another holder's notes.\n *\n * An absent facet reads EMPTY rather than falling back to the top-level\n * fields. A fallback would hand every holder in the org the fields the\n * pre-facet document carried at its top, which is the disclosure this shape\n * exists to end; the migration moves them into the capturing group's facet\n * instead.\n */\nexport function readContactFacet(\n  contact: Record<string, unknown> | null | undefined,\n  groupId: string,\n): ContactFacet {\n  const facets = (contact ?? {})[CONTACT_FACETS_FIELD]\n  const facet =\n    facets && typeof facets === 'object' && !Array.isArray(facets)\n      ? (facets as Record<string, unknown>)[groupId]\n      : undefined\n  if (!facet || typeof facet !== 'object' || Array.isArray(facet)) {\n    return { sources: {}, interactions: [] }\n  }\n  const value = facet as Record<string, unknown>\n  return {\n    ...(value as unknown as ContactFacet),\n    sources: (value['sources'] ?? {}) as ContactFacet['sources'],\n    interactions: Array.isArray(value['interactions'])\n      ? (value['interactions'] as ContactInteraction[])\n      : [],\n  }\n}\n\n/** The dotted Firestore path to one field of one holder's facet. */\nexport function contactFacetPath(groupId: string, field: string): string {\n  if (!groupId) throw new Error('a contact facet must name a holder')\n  return `${CONTACT_FACETS_FIELD}.${groupId}.${field}`\n}\n\n/**\n * The name a given holder should SEE for this person.\n *\n * Their own override first, the canonical identity second. Nothing falls\n * through to another holder's override: that would be one business's edit\n * showing up in another's CRM, which is the thing the override exists to\n * prevent.\n */\nexport function contactDisplayName(\n  contact: Record<string, unknown> | null | undefined,\n  groupId: string,\n): string {\n  const facet = readContactFacet(contact, groupId)\n  if (facet.name) return facet.name\n  const canonical = (contact ?? {})['name']\n  return typeof canonical === 'string' ? canonical : ''\n}\n\n/**\n * Every group that holds this contact — the reference count behind a detach.\n *\n * Read from `visibleTo` rather than from the facet map, because `visibleTo`\n * is what both enforcement layers actually evaluate: a holder that can still\n * READ the row is still holding it whether or not they ever wrote a note. A\n * count taken from the facets would drop a holder who has one and no facet\n * and leave them able to see a document nothing believes they hold.\n *\n * Less the tokens a share ADDED (AGL-3336): a site the record was shared\n * with sees it and holds nothing, so it must not keep the record alive when\n * its last holder lets go — `heldScopeTokens` is `visibleTo` without them.\n */\nexport function contactHolderTokens(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  return heldScopeTokens(contact)\n}\n\n/** What a holder letting go of a contact should do to the document. */\nexport type ContactDetach =\n  | {\n      /** Nobody else holds it. Delete the document. */\n      action: 'delete'\n      /**\n       * Every refusal the document holds, every site's and the unscoped one,\n       * which the delete keeps in `retainedRefusals` in the same transaction\n       * — see `retained-refusals.ts`. `null` when it holds none.\n       */\n      retained: RetainedRefusals | null\n    }\n  | {\n      /** Other holders remain. Drop this one's half. */\n      action: 'detach'\n      /**\n       * Field-level removals, as a patch. Dotted paths so the OTHER holders'\n       * facets and consent entries are untouched — a nested write would\n       * replace the whole map and take every other holder's records with it.\n       *\n       * A consent entry that is a REFUSAL is not among them: it stays on the\n       * document for the holders that remain, because a person's \"no\" is not\n       * the leaving holder's to take with it.\n       */\n      remove: string[]\n      /** Scope tokens to pull out of `visibleTo`. */\n      removeTokens: string[]\n      /** Host ids to pull out of the capture attribution. */\n      removeHostIds: string[]\n    }\n\n/**\n * DELETE IS A DETACH.\n *\n * One holder removing a contact from their own CRM must not destroy another\n * holder's relationship with that person: they have their own notes, their\n * own order history and their own consent, none of which the deleting holder\n * ever had a claim on. So a delete drops the deleting group's facet, its\n * consent grants, its capture attribution and its scope tokens — and the\n * DOCUMENT dies only when the last holder lets go.\n *\n * A REFUSAL IS NOT LET GO (AGL-3338). The list gate reads a stored refusal\n * as the one fact an operator's attestation cannot overrule, so a detach\n * leaves the leaving group's refusal entries on the document, and a delete\n * answers every refusal the document holds for the caller to retain beside\n * the delete. Read off the document's own data: a table row's projection\n * carries neither the consent map nor the unscoped field.\n *\n * ⛔ This is NOT the erasure path. A privacy erasure removes the person\n * everywhere regardless of how many holders remain, and routing it through\n * reference counting would turn a lawful erasure into a partial one — the same\n * absent-versus-invisible defect this area keeps hitting, in the one place\n * where getting it wrong is a legal failure rather than a bug. Erasure calls\n * the document delete directly and must never consult this function.\n *\n * @param group the holder letting go, with every site it covers.\n */\nexport function planContactDetach(\n  contact: Record<string, unknown> | null | undefined,\n  group: { groupId: string; hostIds: readonly string[] },\n): ContactDetach {\n  const held = contactHolderTokens(contact)\n  const leaving = new Set(group.hostIds.map((id) => `host:${id}`))\n  /*\n   * A remaining holder is a token naming somebody else. `'org'` counts as one\n   * and blocks the delete on purpose: an org-wide row is held by every site\n   * in the account, so one site letting go leaves it held. Narrowing it would\n   * be a scope decision, and a delete button is not where that belongs.\n   */\n  const remaining = held.filter((token) => !leaving.has(token))\n  if (!remaining.length) return { action: 'delete', retained: refusalsOf(contact) }\n  const refused = refusalsOf(contact)?.byHost ?? {}\n  return {\n    action: 'detach',\n    remove: [\n      `${CONTACT_FACETS_FIELD}.${group.groupId}`,\n      ...group.hostIds\n        .filter((id) => !(id in refused))\n        .map((id) => `${MARKETING_CONSENT_BY_HOST_FIELD}.${id}`),\n    ],\n    removeTokens: [...leaving],\n    removeHostIds: [...group.hostIds],\n  }\n}\n\n/**\n * The interactions one group of sites may see on a shared contact.\n *\n * An interaction with NO host is shown to everyone: it predates the\n * attribution, so hiding it would empty every existing timeline, and it is\n * already visible to anyone who can read the row. An interaction that names a\n * site is shown only to that site's own group — the agency case, where one\n * client must not read another client's bookings off a person they both know.\n */\nexport function interactionsForGroup(\n  interactions: readonly ContactInteraction[] | undefined,\n  hostIds: readonly string[],\n): ContactInteraction[] {\n  const reach = new Set(hostIds)\n  return (interactions ?? []).filter(\n    (interaction) => !interaction.hostId || reach.has(interaction.hostId),\n  )\n}\n\n/** `orgs/{orgId}/contactSegments/{id}` — a saved audience filter. */\nexport interface ContactSegment {\n  name: string\n  /** Match contacts sharing at least one tag (empty = any). */\n  tags?: string[]\n  /** Match contacts with at least one of these sources (empty = any). */\n  sources?: ContactSource[]\n}\n\n/** Segment matching (AGL-199): AND across filter kinds, OR within one. */\nexport function contactMatchesSegment(\n  contact: Pick<HostContact, 'tags' | 'sources'>,\n  segment: Pick<ContactSegment, 'tags' | 'sources'>,\n): boolean {\n  if (segment.tags?.length) {\n    const contactTags = new Set(\n      (contact.tags ?? []).map((tag) => tag.toLowerCase()),\n    )\n    if (!segment.tags.some((tag) => contactTags.has(tag.toLowerCase()))) {\n      return false\n    }\n  }\n  if (segment.sources?.length) {\n    if (!segment.sources.some((source) => contact.sources?.[source])) {\n      return false\n    }\n  }\n  return true\n}\n\n/*==========================================\n * THE ORG-LEVEL VIEW: the complement of the facet reader above.\n *\n * {@link readContactFacet} answers \"what does THIS holder know about this\n * person\". Everything below answers the question no host page can:\n *\n *   who does this ORGANIZATION know, and which of its sites know them.\n *\n * That question is the entire justification for one shared document. Dedupe,\n * suppression and honest billing all rest on one human being one row, and\n * with no surface that shows the deduped person the model's benefit is\n * invisible and the billing unit — unique people per org — looks arbitrary.\n *\n * ## The org view crosses the host boundary, so it carries LESS, not more\n *\n * It is the one place in the product designed to read across holders, which\n * makes it the one place where a careless field re-creates the disclosure the\n * facets exist to end. So the projection is an ALLOW-LIST\n * ({@link ORG_CONTACT_FIELDS}) rather than an omission: identity, capture\n * attribution and consent state. Notes, tags, timelines, call logs and\n * commercial figures are the holder's own business records and are not read\n * here at all — not summarized, not counted, not indicated by their absence.\n *\n * An allow-list rather than a `delete facets` is the load-bearing choice. A\n * subtraction is correct only for as long as somebody remembers to extend it,\n * and a field added to {@link ContactFacet} tomorrow would ride out through a\n * subtraction and be caught by an allow-list.\n *\n * ## The NAME is the canonical one, never a holder's override\n *\n * {@link contactDisplayName} prefers the viewing group's own override, which\n * is right on a host page and wrong here: an override is a name ONE business\n * chose, and rendering it at org level shows an agency the label its client\n * picked. The shared identity is what every holder already sees, so it is the\n * only name that belongs to the org.\n *=========================================*/\n\n/**\n * Every field of a contact document the org view may read.\n *\n * Stated as a value so it can be asserted against — see the org-view spec,\n * which seeds each facet field with a sentinel and proves none of them\n * reaches a row.\n */\nexport const ORG_CONTACT_FIELDS = [\n  'email',\n  'name',\n  CAPTURED_BY_HOST_FIELD,\n  MARKETING_CONSENT_BY_HOST_FIELD,\n  MARKETING_CONSENT_FIELD,\n] as const\n\n/**\n * What one site's relationship with one person amounts to, at org level.\n *\n * Consent is per (contact, host-or-group) and there is no expression that\n * returns another controller's grant, so a row cannot carry one consent\n * verdict. It carries one PER CAPTURING SITE, each naming the controller it\n * was read for — a bare \"consented\" with nobody attached would be exactly the\n * confusion the per-brand model was built to prevent.\n */\nexport interface OrgContactHostConsent {\n  /** The site this verdict answers about, and no other. */\n  hostId: string\n  /** The controller the basis runs to — the declared group, or the site. */\n  groupId: string\n  /**\n   * The group's disclosed name, or `null` for a site that pools with nobody.\n   *\n   * `null` is not \"unknown\": it is the group of one, where the site's own\n   * name is the disclosure and inventing a second would put a label in front\n   * of a reader that nothing else uses.\n   */\n  groupName: string | null\n  /** Whether the controller is a DECLARED group rather than the site alone. */\n  declared: boolean\n  /** `granted` | `declined` | `unrecorded` — never collapsed to a boolean. */\n  basis: MarketingBasis\n}\n\n/** One person, as the organization may see them across all of its sites. */\nexport interface OrgContactRow {\n  $id: string\n  /** The dedupe key, and the reason two captures are one row. */\n  email: string\n  /** The SHARED identity. Never a holder's own override. */\n  name: string\n  /** Every site that has captured this person, sorted for a stable render. */\n  capturedByHostIds: string[]\n  /** One verdict per capturing site, in the same order. */\n  consent: OrgContactHostConsent[]\n}\n\n/**\n * Every site that has captured this person.\n *\n * Sorted, because the array is maintained by `arrayUnion` and therefore\n * carries capture order, which is not an order anything should render: two\n * readers of the same row would see the sites in different places on the\n * screen depending on which site met the person first.\n */\nexport function contactCaptureHostIds(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  const raw = (contact ?? {})[CAPTURED_BY_HOST_FIELD]\n  if (!Array.isArray(raw)) return []\n  return [\n    ...new Set(\n      raw\n        .map((id) => String(id ?? '').trim())\n        .filter((id): id is string => id !== ''),\n    ),\n  ].sort()\n}\n\n/**\n * One contact document, projected to what an ORG may see.\n *\n * @param org - the org document — the only input that can resolve a declared\n *   consent group, and required for that reason. Without it every site reads\n *   as a group of one, which understates the disclosure a person was given\n *   and is the safe direction to be wrong in.\n */\nexport function orgContactRow(\n  contact: Record<string, unknown> | null | undefined,\n  contactId: string,\n  org: Record<string, unknown> | null | undefined,\n): OrgContactRow {\n  const record = contact ?? {}\n  const capturedByHostIds = contactCaptureHostIds(record)\n  return {\n    $id: contactId,\n    email: typeof record['email'] === 'string' ? record['email'] : '',\n    name: typeof record['name'] === 'string' ? record['name'] : '',\n    capturedByHostIds,\n    consent: capturedByHostIds.map((hostId) => {\n      /*\n       * READ FOR THE SITE, one call per site. `readMarketingBasis` requires\n       * the group it is being read for and has no default, so this cannot\n       * accidentally report a grant that belongs to somebody else — the\n       * argument is the guarantee, and passing the whole row through one\n       * call would have had to invent a controller to ask about.\n       */\n      const group = consentGroupForHost(org, hostId)\n      const { basis } = readMarketingBasis(record, group)\n      return {\n        hostId,\n        groupId: group.groupId,\n        groupName: group.name,\n        declared: group.declared,\n        basis,\n      }\n    }),\n  }\n}\n\n/**\n * How a basis reads on screen.\n *\n * Three labels because there are three states. \"Opted in\" and \"No record\" are\n * not opposites and must never collapse into one negative: absence is the\n * commonest case by far — a record captured before the checkbox existed — and\n * showing it as a refusal would tell a merchant they may not mail somebody\n * who never said so.\n */\nexport const MARKETING_BASIS_LABELS: Record<MarketingBasis, string> = {\n  granted: 'Opted in',\n  declined: 'Opted out',\n  unrecorded: 'No record',\n}\n\n/**\n * One consent verdict, WITH THE CONTROLLER IT RUNS TO, as one string.\n *\n * ⛔ There is no function here that returns a basis on its own, and that is\n * the point. A basis is per (person, controller): the same person can be\n * opted in to one brand in an org and opted out of another, so \"consented\"\n * with nobody attached is not a shortened truth, it is a different and false\n * claim — precisely the confusion the per-brand model was built to prevent.\n * Joining the two into a single value is what stops a caller rendering half\n * of it.\n *\n * The controller is the DECLARED GROUP when there is one, because that is who\n * the person was told they would hear from, and the site otherwise. A group\n * of one is named by the site, which is what the capture surface already\n * showed them.\n *\n * @param siteName - how this site reads — the caller resolves it, since the\n *   contact document holds ids and not names. An empty one falls back to the\n *   id: a site whose name cannot be resolved must still be NAMED, because\n *   dropping it would understate which brands hold a relationship.\n */\nexport function orgContactConsentLabel(\n  entry: OrgContactHostConsent,\n  siteName?: string,\n): string {\n  const controller = entry.declared\n    ? (entry.groupName ?? entry.groupId)\n    : siteName || entry.hostId\n  return `${controller} · ${MARKETING_BASIS_LABELS[entry.basis]}`\n}\n"],"names":["consentGroupForHost","heldScopeTokens","CAPTURED_BY_HOST_FIELD","MARKETING_CONSENT_BY_HOST_FIELD","MARKETING_CONSENT_FIELD","readMarketingBasis","refusalsOf","CONTACT_SOURCE_LABELS","form","member","order","booking","newsletter","api","manual","import","account","CONTACT_INTERACTIONS_CAP","CONTACT_ALTERNATE_EMAILS_FIELD","CONTACT_ALTERNATE_EMAILS_CAP","CONTACT_EMAIL_INDEX_COLLECTION","contactEmails","contact","out","seen","Set","push","value","email","normalizeContactEmail","has","add","alternates","Array","isArray","forEach","CONTACT_FORM_IDS_FIELD","CONTACT_FORM_IDS_CAP","EMAIL_PATTERN","input","String","trim","toLowerCase","test","length","extractEmailFromFields","fields","entries","Object","preferred","find","key","fromPreferred","mergeContactInteraction","existing","update","name","sources","source","interactions","interaction","slice","CONTACT_FACETS_FIELD","readContactFacet","groupId","facets","facet","undefined","contactFacetPath","field","Error","contactDisplayName","canonical","contactHolderTokens","planContactDetach","group","held","leaving","hostIds","map","id","remaining","filter","token","action","retained","refused","byHost","remove","removeTokens","removeHostIds","interactionsForGroup","reach","hostId","contactMatchesSegment","segment","tags","contactTags","tag","some","ORG_CONTACT_FIELDS","contactCaptureHostIds","raw","sort","orgContactRow","contactId","org","record","capturedByHostIds","$id","consent","basis","groupName","declared","MARKETING_BASIS_LABELS","granted","declined","unrecorded","orgContactConsentLabel","entry","siteName","controller"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;CAMC;AAGD,SAASA,mBAAmB,QAAQ,sBAAkB;AAGtD,SAASC,eAAe,QAAQ,oBAAgB;AAChD,SACEC,sBAAsB,EACtBC,+BAA+B,EAC/BC,uBAAuB,EACvBC,kBAAkB,QAEb,yBAAqB;AAC5B,SAASC,UAAU,QAA+B,yBAAqB;AA+BvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,wBAAuD;IAClEC,MAAM;IACNC,QAAQ;IACRC,OAAO;IACPC,SAAS;IACTC,YAAY;IACZC,KAAK;IACLC,QAAQ;IACRC,QAAQ;IACRC,SAAS;AACX,EAAC;AA0JD,mEAAmE,GACnE,OAAO,MAAMC,2BAA2B,GAAE;AAE1C,2DAA2D,GAC3D,OAAO,MAAMC,iCAAiC,kBAAiB;AAE/D;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,GAAE;AAE9C;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAMC,iCAAiC,aAAY;AAE1D;;;;CAIC,GACD,OAAO,SAASC,cACdC,OAAmD;IAEnD,MAAMC,MAAgB,EAAE;IACxB,MAAMC,OAAO,IAAIC;IACjB,MAAMC,OAAO,CAACC;QACZ,MAAMC,QAAQC,sBAAsBF;QACpC,IAAIC,SAAS,CAACJ,KAAKM,GAAG,CAACF,QAAQ;YAC7BJ,KAAKO,GAAG,CAACH;YACTL,IAAIG,IAAI,CAACE;QACX;IACF;IACAF,KAAK,CAACJ,kBAAAA,UAAW,CAAC,EAAE,CAAC,QAAQ;IAC7B,MAAMU,aAAa,CAACV,kBAAAA,UAAW,CAAC,EAAE,CAACJ,+BAA+B;IAClE,IAAIe,MAAMC,OAAO,CAACF,aAAaA,WAAWG,OAAO,CAACT;IAClD,OAAOH;AACT;AAEA,iGAAiG,GACjG,OAAO,MAAMa,yBAAyB,UAAS;AAE/C;;;;;;;;;CASC,GACD,OAAO,MAAMC,uBAAuB,GAAE;AAEtC,MAAMC,gBAAgB;AAEtB,wEAAwE,GACxE,OAAO,SAAST,sBAAsBU,KAAc;IAClD,MAAMX,QAAQY,OAAOD,gBAAAA,QAAS,IAC3BE,IAAI,GACJC,WAAW;IACd,OAAOJ,cAAcK,IAAI,CAACf,UAAUA,MAAMgB,MAAM,IAAI,MAAMhB,QAAQ;AACpE;AAEA;;;;CAIC,GACD,OAAO,SAASiB,uBACdC,MAAkD;IAElD,MAAMC,UAAUC,OAAOD,OAAO,CAACD,iBAAAA,SAAU,CAAC;IAC1C,MAAMG,YAAYF,QAAQG,IAAI,CAAC,CAAC,CAACC,IAAI,GAAK,SAASR,IAAI,CAACQ;IACxD,MAAMC,gBAAgBvB,sBAAsBoB,6BAAAA,SAAW,CAAC,EAAE;IAC1D,IAAIG,eAAe,OAAOA;IAC1B,KAAK,MAAM,GAAGzB,MAAM,IAAIoB,QAAS;QAC/B,MAAMnB,QAAQC,sBAAsBF;QACpC,IAAIC,OAAO,OAAOA;IACpB;IACA,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,SAASyB,wBACdC,QAEC,EACDC,MAAiF;QAMxCD;IAJzC,OAAO;QACL,sEAAsE;QACtEE,MAAMF,SAASE,IAAI,IAAID,OAAOC,IAAI;QAClCC,SAAS,aAAKH,SAASG,OAAO;YAAE,CAACF,OAAOG,MAAM,CAAC,EAAE;;QACjDC,cAAc;YAACJ,OAAOK,WAAW;gBAAMN,yBAAAA,SAASK,YAAY,YAArBL,yBAAyB,EAAE;SAAE,CAACO,KAAK,CACxE,GACA5C;IAEJ;AACF;AA2JA,qEAAqE,GACrE,OAAO,MAAM6C,uBAAuB,SAAQ;AAE5C;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,iBACdzC,OAAmD,EACnD0C,OAAe;QAaHrC;IAXZ,MAAMsC,SAAS,CAAC3C,kBAAAA,UAAW,CAAC,EAAE,CAACwC,qBAAqB;IACpD,MAAMI,QACJD,UAAU,OAAOA,WAAW,YAAY,CAAChC,MAAMC,OAAO,CAAC+B,UACnD,AAACA,MAAkC,CAACD,QAAQ,GAC5CG;IACN,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYjC,MAAMC,OAAO,CAACgC,QAAQ;QAC/D,OAAO;YAAET,SAAS,CAAC;YAAGE,cAAc,EAAE;QAAC;IACzC;IACA,MAAMhC,QAAQuC;IACd,OAAO,aACDvC;QACJ8B,OAAO,GAAG9B,iBAAAA,KAAK,CAAC,UAAU,YAAhBA,iBAAoB,CAAC;QAC/BgC,cAAc1B,MAAMC,OAAO,CAACP,KAAK,CAAC,eAAe,IAC5CA,KAAK,CAAC,eAAe,GACtB,EAAE;;AAEV;AAEA,kEAAkE,GAClE,OAAO,SAASyC,iBAAiBJ,OAAe,EAAEK,KAAa;IAC7D,IAAI,CAACL,SAAS,MAAM,IAAIM,MAAM;IAC9B,OAAO,GAAGR,qBAAqB,CAAC,EAAEE,QAAQ,CAAC,EAAEK,OAAO;AACtD;AAEA;;;;;;;CAOC,GACD,OAAO,SAASE,mBACdjD,OAAmD,EACnD0C,OAAe;IAEf,MAAME,QAAQH,iBAAiBzC,SAAS0C;IACxC,IAAIE,MAAMV,IAAI,EAAE,OAAOU,MAAMV,IAAI;IACjC,MAAMgB,YAAY,CAAClD,kBAAAA,UAAW,CAAC,EAAE,CAAC,OAAO;IACzC,OAAO,OAAOkD,cAAc,WAAWA,YAAY;AACrD;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,oBACdnD,OAAmD;IAEnD,OAAOrB,gBAAgBqB;AACzB;AAiCA;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,OAAO,SAASoD,kBACdpD,OAAmD,EACnDqD,KAAsD;;QAYtCrE;IAVhB,MAAMsE,OAAOH,oBAAoBnD;IACjC,MAAMuD,UAAU,IAAIpD,IAAIkD,MAAMG,OAAO,CAACC,GAAG,CAAC,CAACC,KAAO,CAAC,KAAK,EAAEA,IAAI;IAC9D;;;;;GAKC,GACD,MAAMC,YAAYL,KAAKM,MAAM,CAAC,CAACC,QAAU,CAACN,QAAQ/C,GAAG,CAACqD;IACtD,IAAI,CAACF,UAAUrC,MAAM,EAAE,OAAO;QAAEwC,QAAQ;QAAUC,UAAU/E,WAAWgB;IAAS;IAChF,MAAMgE,mBAAUhF,cAAAA,WAAWgB,6BAAXhB,YAAqBiF,MAAM,mBAAI,CAAC;IAChD,OAAO;QACLH,QAAQ;QACRI,QAAQ;YACN,GAAG1B,qBAAqB,CAAC,EAAEa,MAAMX,OAAO,EAAE;eACvCW,MAAMG,OAAO,CACbI,MAAM,CAAC,CAACF,KAAO,CAAEA,CAAAA,MAAMM,OAAM,GAC7BP,GAAG,CAAC,CAACC,KAAO,GAAG7E,gCAAgC,CAAC,EAAE6E,IAAI;SAC1D;QACDS,cAAc;eAAIZ;SAAQ;QAC1Ba,eAAe;eAAIf,MAAMG,OAAO;SAAC;IACnC;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASa,qBACdhC,YAAuD,EACvDmB,OAA0B;IAE1B,MAAMc,QAAQ,IAAInE,IAAIqD;IACtB,OAAO,CAACnB,uBAAAA,eAAgB,EAAE,EAAEuB,MAAM,CAChC,CAACtB,cAAgB,CAACA,YAAYiC,MAAM,IAAID,MAAM9D,GAAG,CAAC8B,YAAYiC,MAAM;AAExE;AAWA,wEAAwE,GACxE,OAAO,SAASC,sBACdxE,OAA8C,EAC9CyE,OAAiD;QAE7CA,eAQAA;IARJ,KAAIA,gBAAAA,QAAQC,IAAI,qBAAZD,cAAcnD,MAAM,EAAE;YAErBtB;QADH,MAAM2E,cAAc,IAAIxE,IACtB,EAACH,gBAAAA,QAAQ0E,IAAI,YAAZ1E,gBAAgB,EAAE,EAAEyD,GAAG,CAAC,CAACmB,MAAQA,IAAIxD,WAAW;QAEnD,IAAI,CAACqD,QAAQC,IAAI,CAACG,IAAI,CAAC,CAACD,MAAQD,YAAYnE,GAAG,CAACoE,IAAIxD,WAAW,MAAM;YACnE,OAAO;QACT;IACF;IACA,KAAIqD,mBAAAA,QAAQtC,OAAO,qBAAfsC,iBAAiBnD,MAAM,EAAE;QAC3B,IAAI,CAACmD,QAAQtC,OAAO,CAAC0C,IAAI,CAAC,CAACzC;gBAAWpC;oBAAAA,mBAAAA,QAAQmC,OAAO,qBAAfnC,gBAAiB,CAACoC,OAAO;YAAG;YAChE,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAmC2C,GAE3C;;;;;;CAMC,GACD,OAAO,MAAM0C,qBAAqB;IAChC;IACA;IACAlG;IACAC;IACAC;CACD,CAAS;AA2CV;;;;;;;CAOC,GACD,OAAO,SAASiG,sBACd/E,OAAmD;IAEnD,MAAMgF,MAAM,CAAChF,kBAAAA,UAAW,CAAC,EAAE,CAACpB,uBAAuB;IACnD,IAAI,CAAC+B,MAAMC,OAAO,CAACoE,MAAM,OAAO,EAAE;IAClC,OAAO;WACF,IAAI7E,IACL6E,IACGvB,GAAG,CAAC,CAACC,KAAOxC,OAAOwC,aAAAA,KAAM,IAAIvC,IAAI,IACjCyC,MAAM,CAAC,CAACF,KAAqBA,OAAO;KAE1C,CAACuB,IAAI;AACR;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,cACdlF,OAAmD,EACnDmF,SAAiB,EACjBC,GAA+C;IAE/C,MAAMC,SAASrF,kBAAAA,UAAW,CAAC;IAC3B,MAAMsF,oBAAoBP,sBAAsBM;IAChD,OAAO;QACLE,KAAKJ;QACL7E,OAAO,OAAO+E,MAAM,CAAC,QAAQ,KAAK,WAAWA,MAAM,CAAC,QAAQ,GAAG;QAC/DnD,MAAM,OAAOmD,MAAM,CAAC,OAAO,KAAK,WAAWA,MAAM,CAAC,OAAO,GAAG;QAC5DC;QACAE,SAASF,kBAAkB7B,GAAG,CAAC,CAACc;YAC9B;;;;;;OAMC,GACD,MAAMlB,QAAQ3E,oBAAoB0G,KAAKb;YACvC,MAAM,EAAEkB,KAAK,EAAE,GAAG1G,mBAAmBsG,QAAQhC;YAC7C,OAAO;gBACLkB;gBACA7B,SAASW,MAAMX,OAAO;gBACtBgD,WAAWrC,MAAMnB,IAAI;gBACrByD,UAAUtC,MAAMsC,QAAQ;gBACxBF;YACF;QACF;IACF;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,MAAMG,yBAAyD;IACpEC,SAAS;IACTC,UAAU;IACVC,YAAY;AACd,EAAC;AAED;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,SAASC,uBACdC,KAA4B,EAC5BC,QAAiB;QAGZD;IADL,MAAME,aAAaF,MAAMN,QAAQ,IAC5BM,mBAAAA,MAAMP,SAAS,YAAfO,mBAAmBA,MAAMvD,OAAO,GACjCwD,YAAYD,MAAM1B,MAAM;IAC5B,OAAO,GAAG4B,WAAW,GAAG,EAAEP,sBAAsB,CAACK,MAAMR,KAAK,CAAC,EAAE;AACjE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contacts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Contacts CRM v1 (AGL-197): one contact per normalized email per host,\n * fed by the four existing capture silos (forms, members, orders,\n * bookings). Pure data module — the admin-SDK upsert lives in\n * `@aglyn/tenant-data-admin` (`upsertHostContact`) and the console reads\n * client-side under the host-admin rules.\n */\n\nimport type { AglynPostalAddress } from '../foundation'\nimport { consentGroupForHost } from './consent-groups'\nimport type { ContactCustomValue, ContactLifecycleStage } from './crm'\nimport type { EmailState } from './email-state'\nimport { heldScopeTokens } from './scope-tokens'\nimport {\n  CAPTURED_BY_HOST_FIELD,\n  MARKETING_CONSENT_BY_HOST_FIELD,\n  MARKETING_CONSENT_FIELD,\n  readMarketingBasis,\n  type MarketingBasis,\n} from './marketing-consent'\nimport { refusalsOf, type RetainedRefusals } from './retained-refusals'\n\nexport type ContactSource =\n  | 'form'\n  | 'member'\n  | 'order'\n  | 'booking'\n  | 'newsletter'\n  // AGL-2276: `POST /v1/contacts`. A first-class source rather than a blank\n  // one, because \"where did this person come from\" is the question the\n  // console's source filter exists to answer, and an integration importing a\n  // CRM is a different answer from a visitor filling in a form. Adding it to\n  // the union is what makes `SOURCE_LABELS` and the filter cover it — a raw\n  // string written past the type would render as `api` and match no filter.\n  | 'api'\n  // CRM v2 (AGL-2595): the two doors that are not a capture at all. A person\n  // typed into the console by a member of the team, and a person who arrived\n  // in a file. Both are first-class for the reason `api` is — a merchant\n  // asking \"who did we add ourselves\" and \"who came from the spreadsheet\" is\n  // asking the source filter, and a source the union does not name is one it\n  // cannot answer for.\n  | 'manual'\n  | 'import'\n  // AGL-3185: the platform's own console — an account created there, and\n  // the product-updates decision that account makes at sign-up, in its\n  // preferences or at the one-time prompt. First-class for the reason `api`\n  // is: the operator's CRM asks \"who signed up for the product\", and\n  // `member` is a SITE's member, which an account holder of the platform\n  // is not.\n  | 'account'\n\n/**\n * How a capture source reads on screen.\n *\n * Typed `Record<ContactSource, string>` so a source added to the union cannot\n * ship without a label, and kept beside the union rather than in the console\n * that first needed it: the contacts filter, the campaign audience and the\n * dynamic-list rule editor all name the same six sources, and three copies of\n * this map is three places for `order` to stop reading as \"Customer\".\n */\nexport const CONTACT_SOURCE_LABELS: Record<ContactSource, string> = {\n  form: 'Form',\n  member: 'Member',\n  order: 'Customer',\n  booking: 'Booking',\n  newsletter: 'Newsletter',\n  api: 'API',\n  manual: 'Added by hand',\n  import: 'Import',\n  account: 'Account',\n}\n\nexport interface ContactInteraction {\n  type: ContactSource\n  /** Source doc id (formSubmissions/siteMembers/orders/bookings). */\n  refId?: string\n  /** Epoch millis — Timestamps don't serialize into arrays cleanly. */\n  atMs: number\n  summary?: string\n  /**\n   * WHICH SITE this interaction happened on.\n   *\n   * A contact document is shared by every site in the org — one human who\n   * touched two sites is one person, and splitting them into two rows would\n   * bill the org twice for the same address and lose the dedupe that makes a\n   * multi-brand account worth having. But the HISTORY on that shared row is\n   * not shared: a booking made on one client's site is that client's, and a\n   * timeline that cannot be split by site shows an agency's client the other\n   * clients' activity.\n   *\n   * Optional because a row written before this field existed carries none,\n   * and an interaction whose site is unknown must read as unattributed rather\n   * than be assigned to whoever is looking. Nothing may infer it from the\n   * contact's own capture attribution: `capturedByHostIds` says which sites\n   * met this person, not which of them produced any particular visit.\n   */\n  hostId?: string\n  /**\n   * THE ENTRY POINT: the form this capture came in through.\n   *\n   * `sources` answers \"what KIND of surface met this person\" and is what the\n   * console's capture filter reads; it cannot answer \"which form\", because\n   * every form on the site sets the same `form` flag. The id rather than the\n   * name, for the reason the submission carries the id: a form's caption is\n   * editable and a stored name splits the moment somebody renames it.\n   *\n   * Beside {@link refId} rather than derived from it. The submission the\n   * interaction names does carry the form, but reading it back would be a\n   * document read per row of a timeline the console renders straight out of\n   * the contact.\n   */\n  formId?: string\n  /**\n   * THE ENTRY POINT: the page the person was on when this happened.\n   *\n   * The same `path` the submission stores. It belongs on the interaction and\n   * not on the contact, because a person who came in through the pricing page\n   * and returned through a blog post has two entry points and one row —\n   * a single field at the top would keep whichever capture wrote last.\n   */\n  path?: string\n}\n\n/** `orgs/{orgId}/contacts/{contactId}` doc shape. */\nexport interface HostContact {\n  /** Normalized (trimmed, lowercased) email — the dedupe key. */\n  email: string\n  name?: string\n  sources: Partial<Record<ContactSource, true>>\n  /** Newest-first, capped — the profile timeline. */\n  interactions: ContactInteraction[]\n  tags?: string[]\n  notes?: string\n  /**\n   * Every site that has captured this person, in no order.\n   *\n   * An ARRAY and a top-level field, because this is the one attribution that\n   * has to survive being a QUERY: \"everyone captured on A, B or C\" is an\n   * audience, and `array-contains-any` is what answers it. The per-interaction\n   * host says which visit belonged to whom; this says which sites have a\n   * relationship at all, and only the second shape can be filtered on in\n   * Firestore.\n   *\n   * Grows by `arrayUnion` on every capture, including the ones that merge\n   * onto an existing row — which is exactly what the create-only `hostId`\n   * beside it could never do.\n   */\n  capturedByHostIds?: string[]\n  /**\n   * Every form this person has come in through, in no order (AGL-2612).\n   *\n   * The entry point proper is `interactions[].formId` inside the capturing\n   * holder's facet, and that stays the record: which form produced which\n   * visit is one holder's business. But Firestore cannot select documents\n   * by a field of an array ELEMENT, and a facet path is per group, so\n   * \"everyone who filled in this form\" — the question the form's own page\n   * asks of the Contacts list — has to be a top-level array an\n   * `array-contains` can hit, exactly as `capturedByHostIds` is for sites\n   * and `companyIds` is for companies. A form id is minted under one site,\n   * so a query on it is one site's captures by construction.\n   *\n   * Grows by `arrayUnion` on every form capture, create or merge, bounded at\n   * {@link CONTACT_FORM_IDS_CAP}: a person who has filled in more forms than\n   * that keeps the first twenty and the timeline keeps the rest. The facet is\n   * the truth and this is its index — a reader answering \"which form\" reads\n   * the interaction; only a QUERY reads this.\n   */\n  formIds?: string[]\n  /*\n   * SEARCH KEYS (AGL-2596), and nothing more.\n   *\n   * The console's global search reads a window of contact documents and\n   * matches over their top-level fields; it never resolves a holder's facet,\n   * because it is one search over a dozen collections and a facet read is a\n   * contacts-only idea. So the two profile values a person is looked up BY —\n   * their phone number and the company they work for — are mirrored here by\n   * every writer that sets them on a facet, as plain values a query can hit.\n   *\n   * The FACET is the record. These are a last-writer-wins echo of it: two\n   * holders who keep different numbers for one person each overwrite the\n   * echo and each keep their own facet value, and nothing renders these to a\n   * reader — the list, the record page and the export all read through the\n   * viewing group's facet. `ORG_CONTACT_FIELDS` below is an allow-list, so\n   * neither reaches the org view either.\n   */\n  /** E.164, mirrored from the last facet write that set one. */\n  phone?: string\n  /** The company name as typed, mirrored the same way. */\n  companyName?: string\n  /**\n   * The OTHER addresses this person answers to (AGL-2625).\n   *\n   * A contact is keyed on one email, so one human with a work address and a\n   * personal one is two documents until somebody merges them. The merge keeps\n   * the survivor's `email` as the identity and records the merged record's\n   * address here, so a later capture on it — a form filled in from the\n   * personal account — resolves to this row rather than minting the second\n   * document again. `emailIndex` (see {@link CONTACT_EMAIL_INDEX_COLLECTION})\n   * is the lookup; this array is the record of why an entry there points\n   * where it does, and what the record page shows as \"also\".\n   *\n   * Shared identity like `email`, not a facet field: which addresses are one\n   * person is a fact about the person, and a holder that did not perform the\n   * merge still needs its capture on the alternate address to land on the\n   * shared row. Bounded at {@link CONTACT_ALTERNATE_EMAILS_CAP}.\n   */\n  alternateEmails?: string[]\n  /**\n   * When the earliest OPEN task filed against this person is due, epoch\n   * ms, or `null` when none is (AGL-2661) — see `CrmDeal.nextTaskAtMs` in\n   * `crm.ts` for the rule. On the SHARED row rather than a facet, because a\n   * task lives at the organization level and names the contact, not a\n   * holder's view of them.\n   */\n  nextTaskAtMs?: number | null\n  /**\n   * The last verdict on the address (AGL-3245) — bounced, blocked,\n   * unsubscribed, do-not-contact — written by the platform's senders only,\n   * on the SHARED row because the address is shared. Absent means nothing\n   * is known. See `email-state.ts`.\n   */\n  emailState?: EmailState\n}\n\n/** Timeline cap: keeps the doc small; older interactions age out. */\nexport const CONTACT_INTERACTIONS_CAP = 50\n\n/** The field holding {@link HostContact.alternateEmails}. */\nexport const CONTACT_ALTERNATE_EMAILS_FIELD = 'alternateEmails'\n\n/**\n * The most alternate addresses one contact carries. Ten is past any real\n * person's mailbox count, and it bounds the index writes one merge fans out.\n */\nexport const CONTACT_ALTERNATE_EMAILS_CAP = 10\n\n/**\n * `orgs/{orgId}/emailIndex/{personKey}` → `{ email, contactId }` (AGL-2625).\n *\n * The address-to-contact lookup the capture door consults BEFORE the\n * per-document `email ==` query, so an address recorded as an alternate on a\n * merged row resolves to the survivor. Keyed by `personKey` — the sha256 of\n * the normalized address — so a document id never carries the address\n * itself, the same derivation a lead and a list membership use.\n *\n * WRITTEN LAZILY, never backfilled: the query on `email` stays as the\n * fallback, and a contact that has no entry gets one on the next write that\n * finds it. A row the index has never seen therefore costs one extra read\n * once, and nothing needs to run over the existing collection.\n *\n * Server-written only; the rules close it to every client.\n */\nexport const CONTACT_EMAIL_INDEX_COLLECTION = 'emailIndex'\n\n/**\n * Every address a contact answers to — the primary first, then the\n * alternates — normalized and deduplicated, so an index writer and a lead\n * lookup walk one list.\n */\nexport function contactEmails(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  const out: string[] = []\n  const seen = new Set<string>()\n  const push = (value: unknown) => {\n    const email = normalizeContactEmail(value)\n    if (email && !seen.has(email)) {\n      seen.add(email)\n      out.push(email)\n    }\n  }\n  push((contact ?? {})['email'])\n  const alternates = (contact ?? {})[CONTACT_ALTERNATE_EMAILS_FIELD]\n  if (Array.isArray(alternates)) alternates.forEach(push)\n  return out\n}\n\n/** The top-level field naming every form a contact came in through — see `HostContact.formIds`. */\nexport const CONTACT_FORM_IDS_FIELD = 'formIds'\n\n/**\n * How many forms the {@link CONTACT_FORM_IDS_FIELD} mirror holds.\n *\n * The same figure as the tag cap: enough that no real person reaches it,\n * small enough that the array never becomes the document. Past it the\n * capture stops adding rather than dropping the oldest, because the mirror\n * is an index of the facet's timeline and an index that silently forgets an\n * entry the timeline still holds would answer a form's contact list wrongly\n * in the one direction nobody would notice.\n */\nexport const CONTACT_FORM_IDS_CAP = 20\n\nconst EMAIL_PATTERN = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n\n/** Normalized dedupe key, or null when the input isn't a usable email. */\nexport function normalizeContactEmail(input: unknown): string | null {\n  const email = String(input ?? '')\n    .trim()\n    .toLowerCase()\n  return EMAIL_PATTERN.test(email) && email.length <= 320 ? email : null\n}\n\n/**\n * First usable email in a free-form form-submission fields map — forms\n * don't guarantee a canonical email field, so prefer keys that look like\n * email fields before falling back to any email-shaped value.\n */\nexport function extractEmailFromFields(\n  fields: Record<string, unknown> | null | undefined,\n): string | null {\n  const entries = Object.entries(fields ?? {})\n  const preferred = entries.find(([key]) => /email/i.test(key))\n  const fromPreferred = normalizeContactEmail(preferred?.[1])\n  if (fromPreferred) return fromPreferred\n  for (const [, value] of entries) {\n    const email = normalizeContactEmail(value)\n    if (email) return email\n  }\n  return null\n}\n\n/**\n * Merges a new interaction into a contact: source flag set, interaction\n * prepended, timeline capped. Pure — the caller persists the result.\n */\nexport function mergeContactInteraction(\n  existing: Pick<HostContact, 'sources' | 'interactions'> & {\n    name?: string\n  },\n  update: { source: ContactSource; interaction: ContactInteraction; name?: string },\n): Pick<HostContact, 'sources' | 'interactions'> & { name?: string } {\n  return {\n    // Existing names win — a later anonymous form shouldn't blank a name.\n    name: existing.name || update.name,\n    sources: { ...existing.sources, [update.source]: true as const },\n    interactions: [update.interaction, ...(existing.interactions ?? [])].slice(\n      0,\n      CONTACT_INTERACTIONS_CAP,\n    ),\n  }\n}\n\n/**\n * THE PER-HOLDER FACET on a shared contact document.\n *\n * ## What is shared and what is not\n *\n * One human who touched two sites is ONE document. That is not a compromise:\n * it is the dedupe the shared address book exists for, it is what keeps a\n * bounce and a suppression describing one person, and it is what makes a\n * multi-brand account bill once for one human instead of once per site. A\n * document per host would push an agency toward twelve separate accounts and\n * throw the whole advantage away.\n *\n * But almost nothing ON that document is legitimately shared.\n *\n *  - **SHARED IDENTITY** — `email`, and the canonical `name`. One human, one\n *    identity. This is the only part two unrelated businesses may both see,\n *    and it is the minimum that makes them one row.\n *  - **PER-HOLDER FACET** — everything in this interface. A note, a tag, a\n *    call log and a lifetime value are the HOLDER's own business records.\n *    Host A's note about a customer is Host A's; a competitor sharing the\n *    platform must not read it, and while these lived at the top of the\n *    document every site in the org could.\n *  - **CONSENT AND VISIBILITY** — per declared group, decided by\n *    `marketing-consent.ts` and by `visibleTo`.\n *\n * ## Keyed by GROUP, not by host\n *\n * A business that declared three sites to be one sender is one CRM: a note\n * written on the shop belongs beside the booking made on the booking page,\n * because one team keeps both. Across groups, never — and an undeclared site\n * is a group of one, so the agency case is isolated with nothing configured.\n *\n * ## Commercial figures are per-facet, and that is not a billing change\n *\n * `ltvCents` and `ordersCount` answer \"what is this person worth to ME\". Two\n * unrelated merchants who both sell to one person have two different answers\n * and neither is entitled to the other's. Billing counts DOCUMENTS, and there\n * is still one document, so a person held by two hosts stays one billable\n * contact.\n */\nexport interface ContactFacet {\n  /**\n   * This holder's display name for the person, overriding the canonical one.\n   *\n   * The canonical `name` is shared and mutable, so without this a rename on\n   * one site changes what an unrelated business sees in its own CRM — two\n   * companies that do not know each other exist editing each other's records.\n   * The override is written by whoever edits the name from their own console;\n   * the canonical field stays as the identity of last resort, for a holder\n   * that has never set one.\n   */\n  name?: string\n  /** Which capture surfaces THIS holder saw the person through. */\n  sources: Partial<Record<ContactSource, true>>\n  /** THIS holder's timeline, newest-first and capped. */\n  interactions: ContactInteraction[]\n  /** THIS holder's tags. */\n  tags?: string[]\n  /** THIS holder's notes. */\n  notes?: string\n  /**\n   * The campaigns THIS holder has filed the person under.\n   *\n   * A label on the CRM record, not an audience: who a campaign's mail reaches\n   * is decided by the campaign's lists and by each send's own picker, and\n   * nothing in the send path reads this. It answers \"who did we put in the\n   * spring push\", which is a question about the holder's own working set.\n   *\n   * Per-holder for the reason the notes are: two unrelated businesses sharing\n   * one row must not read each other's segmentation of a person they both\n   * know. See `container-membership.ts` for the field and the path.\n   */\n  campaignIds?: string[]\n  /** Gross of fees and refunds — see `upsertHostContact`. */\n  ltvCents?: number\n  ordersCount?: number\n  lastPurchaseAtMs?: number\n  firstPurchaseAtMs?: number\n  refundedCents?: number\n  refundedOrdersCount?: number\n  lastRefundAtMs?: number\n  /*\n   * CRM v2 (AGL-2595): the profile a sales team keeps on a person.\n   *\n   * Per-holder like everything above them, and for the same reason: a phone\n   * number, a job title, an owner and a lifecycle stage are one business's\n   * knowledge of a person, and two unrelated businesses sharing the row must\n   * not read each other's. `companyId` points at a company document in the\n   * same scope, never at the org's whole company list. `custom` is keyed by\n   * `ContactFieldDefinition.key`, so a holder's field definitions and a\n   * holder's values live under the same group and cannot be joined across\n   * one.\n   *\n   * ⛔ None of these reach the org view. `ORG_CONTACT_FIELDS` is an\n   * allow-list, and the org-view spec seeds every one of these with a\n   * sentinel and proves it never surfaces.\n   */\n  /** E.164 — `normalizePhone` before writing. */\n  phone?: string\n  jobTitle?: string\n  /**\n   * Where this holder met the person — Salesforce's Lead Source, carried\n   * from the lead on conversion and picked from the org's lead source\n   * values after it (AGL-3298). The value's label, as the lead stores it.\n   */\n  leadSource?: string\n  /** `orgs/{orgId}/companies/{companyId}`, in this holder's scope. */\n  companyId?: string\n  /**\n   * The company's name as this holder knows it.\n   *\n   * Free text, so a person can be filed under a company before one exists\n   * as a record; the company picker that later sets `companyId` writes the\n   * picked company's name here too, so the row reads the same whether the\n   * link was made or the name typed. The top-level `companyName` on the\n   * document is the search echo of this value — see `HostContact`.\n   */\n  companyName?: string\n  address?: AglynPostalAddress | null\n  /** The team member responsible for the relationship. */\n  ownerUid?: string\n  lifecycleStage?: ContactLifecycleStage\n  /** Custom field values, keyed by `ContactFieldDefinition.key`. */\n  custom?: Record<string, ContactCustomValue>\n  /**\n   * When this person last OPENED or CLICKED a campaign sent by one of this\n   * holder's sites, epoch ms (AGL-2616).\n   *\n   * Stamped by the delivery webhook, forward-only, on the first open and the\n   * first click of each message — the same bound the per-person rollup on\n   * `emailDeliveries/{key}` keeps, so a reader opening one newsletter six\n   * times is one write. Per-holder because it answers \"is this person still\n   * reading OUR mail\": the address-level rollup counts every sender's mail\n   * and a sibling business's, and a re-engagement audience built on that\n   * would mail people who are reading somebody else.\n   *\n   * Absent until the first engagement after the stamp shipped; a message\n   * opened before then advanced the address-level rollup and nothing here.\n   */\n  lastEmailEngagementAtMs?: number\n  /**\n   * The org-library files THIS holder has attached to the person\n   * (AGL-2662), by media document id.\n   *\n   * Per-holder for the reason every other field here is: an agency running\n   * two client brands has one contact document between them, and a signed\n   * contract one client filed is not the other client's to see. Ids rather\n   * than URLs so a file moved between folders keeps its attachment, and so\n   * a private asset is still served through the signed CDN door.\n   */\n  mediaIds?: string[]\n  /*\n   * SALESFORCE'S STANDARD CONTACT FIELDS (AGL-3515), per holder like the\n   * profile above and for the same reason. Every one of them is personal\n   * data about the person, so none reaches the org view (see\n   * `ORG_CONTACT_FIELDS`) and an erasure takes them with the document.\n   */\n  /** One of the org's salutation values, by label (`Mr.`, `Dr.` …). */\n  salutation?: string\n  /**\n   * The person's given and family names. While either is set, {@link name}\n   * is their composition — see {@link composeContactName} — so every reader\n   * of the display name reads the same person the structured fields name. A\n   * facet holding only `name` keeps it as typed: nothing splits a stored\n   * name into parts after the fact.\n   */\n  firstName?: string\n  lastName?: string\n  department?: string\n  /** E.164, like {@link phone}. */\n  mobilePhone?: string\n  /** E.164. */\n  homePhone?: string\n  /** E.164. */\n  otherPhone?: string\n  /** E.164. */\n  fax?: string\n  /** A calendar date, `YYYY-MM-DD`, never in the future — {@link normalizeContactBirthdate}. */\n  birthdate?: string\n  assistantName?: string\n  /** E.164. */\n  assistantPhone?: string\n  /**\n   * Another contact of the org this holder can see — the person's manager.\n   * Never the contact itself, and never a contact whose own chain leads\n   * back here: `crm/contact-update` refuses both. `null` is \"nobody\" — what\n   * a merge leaves where a pointer would have named the person themselves.\n   */\n  reportsToContactId?: string | null\n  /**\n   * A second postal address. {@link address} is the MAILING address — the\n   * one a letter goes to — and keeps its field name; this is Salesforce's\n   * Other Address beside it.\n   */\n  otherAddress?: AglynPostalAddress | null\n  /**\n   * The person asked not to be phoned. Stored only as `true`; absent is\n   * \"may be called\". A hint beside every number and on the Call button,\n   * never a block: the rep decides.\n   */\n  doNotCall?: boolean\n}\n\n/**\n * The profile's phone fields besides `phone` (AGL-3515), each stored E.164\n * through `normalizePhone`, in the order a record page lists them.\n */\nexport const CONTACT_EXTRA_PHONE_FIELDS = [\n  'mobilePhone',\n  'homePhone',\n  'otherPhone',\n  'fax',\n  'assistantPhone',\n] as const\n\nexport type ContactExtraPhoneField = (typeof CONTACT_EXTRA_PHONE_FIELDS)[number]\n\n/** How each phone field is labeled on screen, in a file and in the docs. */\nexport const CONTACT_PHONE_FIELD_LABELS: Record<'phone' | ContactExtraPhoneField, string> = {\n  phone: 'Phone',\n  mobilePhone: 'Mobile phone',\n  homePhone: 'Home phone',\n  otherPhone: 'Other phone',\n  fax: 'Fax',\n  assistantPhone: 'Assistant phone',\n}\n\n/** The longest first or last name a facet keeps — the composed name stays within 120. */\nexport const CONTACT_NAME_PART_MAX = 59\n\n/**\n * The display name a holder's first and last names make: `\"First Last\"`,\n * either alone, or `''` when neither is set — Salesforce's Name, less the\n * salutation, which is a form of address and not part of who the person is.\n */\nexport function composeContactName(firstName: unknown, lastName: unknown): string {\n  const part = (value: unknown) =>\n    String(value ?? '')\n      .trim()\n      .replace(/\\s+/g, ' ')\n      .slice(0, CONTACT_NAME_PART_MAX)\n  return [part(firstName), part(lastName)].filter(Boolean).join(' ')\n}\n\n/** The sentence a birthdate that cannot be stored is refused with. */\nexport const CONTACT_BIRTHDATE_REFUSAL =\n  'Birthdate must be a past date written YYYY-MM-DD, like 1984-07-21.'\n\n/**\n * A birthdate as stored: `YYYY-MM-DD` for a real calendar date that is not\n * in the future, `''` for a blank (a clear), and `null` for anything else.\n *\n * \"Not in the future\" is judged against the latest calendar day anywhere on\n * Earth (UTC+14), so a person entering today's date where the day has\n * already turned is never refused.\n */\nexport function normalizeContactBirthdate(value: unknown, nowMs = Date.now()): string | null {\n  const text = String(value ?? '').trim()\n  if (!text) return ''\n  const match = /^(\\d{4})-(\\d{2})-(\\d{2})$/.exec(text)\n  if (!match) return null\n  const [year, month, day] = [Number(match[1]), Number(match[2]), Number(match[3])]\n  const date = new Date(Date.UTC(year, month - 1, day))\n  if (\n    year < 1000 ||\n    date.getUTCFullYear() !== year ||\n    date.getUTCMonth() !== month - 1 ||\n    date.getUTCDate() !== day\n  ) {\n    return null\n  }\n  const latestToday = new Date(nowMs + 14 * 60 * 60 * 1000).toISOString().slice(0, 10)\n  return text > latestToday ? null : text\n}\n\n/** The map field holding the facets: `{ [groupId]: ContactFacet }`. */\nexport const CONTACT_FACETS_FIELD = 'facets'\n\n/**\n * The facet one group holds, or an empty one.\n *\n * `map[groupId]` — a lookup, not a search, for the reason the consent map is\n * shaped the same way: there is no expression of this form that returns\n * another holder's notes.\n *\n * An absent facet reads EMPTY rather than falling back to the top-level\n * fields. A fallback would hand every holder in the org the fields the\n * pre-facet document carried at its top, which is the disclosure this shape\n * exists to end; the migration moves them into the capturing group's facet\n * instead.\n */\nexport function readContactFacet(\n  contact: Record<string, unknown> | null | undefined,\n  groupId: string,\n): ContactFacet {\n  const facets = (contact ?? {})[CONTACT_FACETS_FIELD]\n  const facet =\n    facets && typeof facets === 'object' && !Array.isArray(facets)\n      ? (facets as Record<string, unknown>)[groupId]\n      : undefined\n  if (!facet || typeof facet !== 'object' || Array.isArray(facet)) {\n    return { sources: {}, interactions: [] }\n  }\n  const value = facet as Record<string, unknown>\n  return {\n    ...(value as unknown as ContactFacet),\n    sources: (value['sources'] ?? {}) as ContactFacet['sources'],\n    interactions: Array.isArray(value['interactions'])\n      ? (value['interactions'] as ContactInteraction[])\n      : [],\n  }\n}\n\n/** The dotted Firestore path to one field of one holder's facet. */\nexport function contactFacetPath(groupId: string, field: string): string {\n  if (!groupId) throw new Error('a contact facet must name a holder')\n  return `${CONTACT_FACETS_FIELD}.${groupId}.${field}`\n}\n\n/**\n * The name a given holder should SEE for this person.\n *\n * Their own override first, the canonical identity second. Nothing falls\n * through to another holder's override: that would be one business's edit\n * showing up in another's CRM, which is the thing the override exists to\n * prevent.\n */\nexport function contactDisplayName(\n  contact: Record<string, unknown> | null | undefined,\n  groupId: string,\n): string {\n  const facet = readContactFacet(contact, groupId)\n  if (facet.name) return facet.name\n  const canonical = (contact ?? {})['name']\n  return typeof canonical === 'string' ? canonical : ''\n}\n\n/**\n * Every group that holds this contact — the reference count behind a detach.\n *\n * Read from `visibleTo` rather than from the facet map, because `visibleTo`\n * is what both enforcement layers actually evaluate: a holder that can still\n * READ the row is still holding it whether or not they ever wrote a note. A\n * count taken from the facets would drop a holder who has one and no facet\n * and leave them able to see a document nothing believes they hold.\n *\n * Less the tokens a share ADDED (AGL-3336): a site the record was shared\n * with sees it and holds nothing, so it must not keep the record alive when\n * its last holder lets go — `heldScopeTokens` is `visibleTo` without them.\n */\nexport function contactHolderTokens(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  return heldScopeTokens(contact)\n}\n\n/** What a holder letting go of a contact should do to the document. */\nexport type ContactDetach =\n  | {\n      /** Nobody else holds it. Delete the document. */\n      action: 'delete'\n      /**\n       * Every refusal the document holds, every site's and the unscoped one,\n       * which the delete keeps in `retainedRefusals` in the same transaction\n       * — see `retained-refusals.ts`. `null` when it holds none.\n       */\n      retained: RetainedRefusals | null\n    }\n  | {\n      /** Other holders remain. Drop this one's half. */\n      action: 'detach'\n      /**\n       * Field-level removals, as a patch. Dotted paths so the OTHER holders'\n       * facets and consent entries are untouched — a nested write would\n       * replace the whole map and take every other holder's records with it.\n       *\n       * A consent entry that is a REFUSAL is not among them: it stays on the\n       * document for the holders that remain, because a person's \"no\" is not\n       * the leaving holder's to take with it.\n       */\n      remove: string[]\n      /** Scope tokens to pull out of `visibleTo`. */\n      removeTokens: string[]\n      /** Host ids to pull out of the capture attribution. */\n      removeHostIds: string[]\n    }\n\n/**\n * DELETE IS A DETACH.\n *\n * One holder removing a contact from their own CRM must not destroy another\n * holder's relationship with that person: they have their own notes, their\n * own order history and their own consent, none of which the deleting holder\n * ever had a claim on. So a delete drops the deleting group's facet, its\n * consent grants, its capture attribution and its scope tokens — and the\n * DOCUMENT dies only when the last holder lets go.\n *\n * A REFUSAL IS NOT LET GO (AGL-3338). The list gate reads a stored refusal\n * as the one fact an operator's attestation cannot overrule, so a detach\n * leaves the leaving group's refusal entries on the document, and a delete\n * answers every refusal the document holds for the caller to retain beside\n * the delete. Read off the document's own data: a table row's projection\n * carries neither the consent map nor the unscoped field.\n *\n * ⛔ This is NOT the erasure path. A privacy erasure removes the person\n * everywhere regardless of how many holders remain, and routing it through\n * reference counting would turn a lawful erasure into a partial one — the same\n * absent-versus-invisible defect this area keeps hitting, in the one place\n * where getting it wrong is a legal failure rather than a bug. Erasure calls\n * the document delete directly and must never consult this function.\n *\n * @param group the holder letting go, with every site it covers.\n */\nexport function planContactDetach(\n  contact: Record<string, unknown> | null | undefined,\n  group: { groupId: string; hostIds: readonly string[] },\n): ContactDetach {\n  const held = contactHolderTokens(contact)\n  const leaving = new Set(group.hostIds.map((id) => `host:${id}`))\n  /*\n   * A remaining holder is a token naming somebody else. `'org'` counts as one\n   * and blocks the delete on purpose: an org-wide row is held by every site\n   * in the account, so one site letting go leaves it held. Narrowing it would\n   * be a scope decision, and a delete button is not where that belongs.\n   */\n  const remaining = held.filter((token) => !leaving.has(token))\n  if (!remaining.length) return { action: 'delete', retained: refusalsOf(contact) }\n  const refused = refusalsOf(contact)?.byHost ?? {}\n  return {\n    action: 'detach',\n    remove: [\n      `${CONTACT_FACETS_FIELD}.${group.groupId}`,\n      ...group.hostIds\n        .filter((id) => !(id in refused))\n        .map((id) => `${MARKETING_CONSENT_BY_HOST_FIELD}.${id}`),\n    ],\n    removeTokens: [...leaving],\n    removeHostIds: [...group.hostIds],\n  }\n}\n\n/**\n * The interactions one group of sites may see on a shared contact.\n *\n * An interaction with NO host is shown to everyone: it predates the\n * attribution, so hiding it would empty every existing timeline, and it is\n * already visible to anyone who can read the row. An interaction that names a\n * site is shown only to that site's own group — the agency case, where one\n * client must not read another client's bookings off a person they both know.\n */\nexport function interactionsForGroup(\n  interactions: readonly ContactInteraction[] | undefined,\n  hostIds: readonly string[],\n): ContactInteraction[] {\n  const reach = new Set(hostIds)\n  return (interactions ?? []).filter(\n    (interaction) => !interaction.hostId || reach.has(interaction.hostId),\n  )\n}\n\n/** `orgs/{orgId}/contactSegments/{id}` — a saved audience filter. */\nexport interface ContactSegment {\n  name: string\n  /** Match contacts sharing at least one tag (empty = any). */\n  tags?: string[]\n  /** Match contacts with at least one of these sources (empty = any). */\n  sources?: ContactSource[]\n}\n\n/** Segment matching (AGL-199): AND across filter kinds, OR within one. */\nexport function contactMatchesSegment(\n  contact: Pick<HostContact, 'tags' | 'sources'>,\n  segment: Pick<ContactSegment, 'tags' | 'sources'>,\n): boolean {\n  if (segment.tags?.length) {\n    const contactTags = new Set(\n      (contact.tags ?? []).map((tag) => tag.toLowerCase()),\n    )\n    if (!segment.tags.some((tag) => contactTags.has(tag.toLowerCase()))) {\n      return false\n    }\n  }\n  if (segment.sources?.length) {\n    if (!segment.sources.some((source) => contact.sources?.[source])) {\n      return false\n    }\n  }\n  return true\n}\n\n/*==========================================\n * THE ORG-LEVEL VIEW: the complement of the facet reader above.\n *\n * {@link readContactFacet} answers \"what does THIS holder know about this\n * person\". Everything below answers the question no host page can:\n *\n *   who does this ORGANIZATION know, and which of its sites know them.\n *\n * That question is the entire justification for one shared document. Dedupe,\n * suppression and honest billing all rest on one human being one row, and\n * with no surface that shows the deduped person the model's benefit is\n * invisible and the billing unit — unique people per org — looks arbitrary.\n *\n * ## The org view crosses the host boundary, so it carries LESS, not more\n *\n * It is the one place in the product designed to read across holders, which\n * makes it the one place where a careless field re-creates the disclosure the\n * facets exist to end. So the projection is an ALLOW-LIST\n * ({@link ORG_CONTACT_FIELDS}) rather than an omission: identity, capture\n * attribution and consent state. Notes, tags, timelines, call logs and\n * commercial figures are the holder's own business records and are not read\n * here at all — not summarized, not counted, not indicated by their absence.\n *\n * An allow-list rather than a `delete facets` is the load-bearing choice. A\n * subtraction is correct only for as long as somebody remembers to extend it,\n * and a field added to {@link ContactFacet} tomorrow would ride out through a\n * subtraction and be caught by an allow-list.\n *\n * ## The NAME is the canonical one, never a holder's override\n *\n * {@link contactDisplayName} prefers the viewing group's own override, which\n * is right on a host page and wrong here: an override is a name ONE business\n * chose, and rendering it at org level shows an agency the label its client\n * picked. The shared identity is what every holder already sees, so it is the\n * only name that belongs to the org.\n *=========================================*/\n\n/**\n * Every field of a contact document the org view may read.\n *\n * Stated as a value so it can be asserted against — see the org-view spec,\n * which seeds each facet field with a sentinel and proves none of them\n * reaches a row.\n */\nexport const ORG_CONTACT_FIELDS = [\n  'email',\n  'name',\n  CAPTURED_BY_HOST_FIELD,\n  MARKETING_CONSENT_BY_HOST_FIELD,\n  MARKETING_CONSENT_FIELD,\n] as const\n\n/**\n * What one site's relationship with one person amounts to, at org level.\n *\n * Consent is per (contact, host-or-group) and there is no expression that\n * returns another controller's grant, so a row cannot carry one consent\n * verdict. It carries one PER CAPTURING SITE, each naming the controller it\n * was read for — a bare \"consented\" with nobody attached would be exactly the\n * confusion the per-brand model was built to prevent.\n */\nexport interface OrgContactHostConsent {\n  /** The site this verdict answers about, and no other. */\n  hostId: string\n  /** The controller the basis runs to — the declared group, or the site. */\n  groupId: string\n  /**\n   * The group's disclosed name, or `null` for a site that pools with nobody.\n   *\n   * `null` is not \"unknown\": it is the group of one, where the site's own\n   * name is the disclosure and inventing a second would put a label in front\n   * of a reader that nothing else uses.\n   */\n  groupName: string | null\n  /** Whether the controller is a DECLARED group rather than the site alone. */\n  declared: boolean\n  /** `granted` | `declined` | `unrecorded` — never collapsed to a boolean. */\n  basis: MarketingBasis\n}\n\n/** One person, as the organization may see them across all of its sites. */\nexport interface OrgContactRow {\n  $id: string\n  /** The dedupe key, and the reason two captures are one row. */\n  email: string\n  /** The SHARED identity. Never a holder's own override. */\n  name: string\n  /** Every site that has captured this person, sorted for a stable render. */\n  capturedByHostIds: string[]\n  /** One verdict per capturing site, in the same order. */\n  consent: OrgContactHostConsent[]\n}\n\n/**\n * Every site that has captured this person.\n *\n * Sorted, because the array is maintained by `arrayUnion` and therefore\n * carries capture order, which is not an order anything should render: two\n * readers of the same row would see the sites in different places on the\n * screen depending on which site met the person first.\n */\nexport function contactCaptureHostIds(\n  contact: Record<string, unknown> | null | undefined,\n): string[] {\n  const raw = (contact ?? {})[CAPTURED_BY_HOST_FIELD]\n  if (!Array.isArray(raw)) return []\n  return [\n    ...new Set(\n      raw\n        .map((id) => String(id ?? '').trim())\n        .filter((id): id is string => id !== ''),\n    ),\n  ].sort()\n}\n\n/**\n * One contact document, projected to what an ORG may see.\n *\n * @param org - the org document — the only input that can resolve a declared\n *   consent group, and required for that reason. Without it every site reads\n *   as a group of one, which understates the disclosure a person was given\n *   and is the safe direction to be wrong in.\n */\nexport function orgContactRow(\n  contact: Record<string, unknown> | null | undefined,\n  contactId: string,\n  org: Record<string, unknown> | null | undefined,\n): OrgContactRow {\n  const record = contact ?? {}\n  const capturedByHostIds = contactCaptureHostIds(record)\n  return {\n    $id: contactId,\n    email: typeof record['email'] === 'string' ? record['email'] : '',\n    name: typeof record['name'] === 'string' ? record['name'] : '',\n    capturedByHostIds,\n    consent: capturedByHostIds.map((hostId) => {\n      /*\n       * READ FOR THE SITE, one call per site. `readMarketingBasis` requires\n       * the group it is being read for and has no default, so this cannot\n       * accidentally report a grant that belongs to somebody else — the\n       * argument is the guarantee, and passing the whole row through one\n       * call would have had to invent a controller to ask about.\n       */\n      const group = consentGroupForHost(org, hostId)\n      const { basis } = readMarketingBasis(record, group)\n      return {\n        hostId,\n        groupId: group.groupId,\n        groupName: group.name,\n        declared: group.declared,\n        basis,\n      }\n    }),\n  }\n}\n\n/**\n * How a basis reads on screen.\n *\n * Three labels because there are three states. \"Opted in\" and \"No record\" are\n * not opposites and must never collapse into one negative: absence is the\n * commonest case by far — a record captured before the checkbox existed — and\n * showing it as a refusal would tell a merchant they may not mail somebody\n * who never said so.\n */\nexport const MARKETING_BASIS_LABELS: Record<MarketingBasis, string> = {\n  granted: 'Opted in',\n  declined: 'Opted out',\n  unrecorded: 'No record',\n}\n\n/**\n * One consent verdict, WITH THE CONTROLLER IT RUNS TO, as one string.\n *\n * ⛔ There is no function here that returns a basis on its own, and that is\n * the point. A basis is per (person, controller): the same person can be\n * opted in to one brand in an org and opted out of another, so \"consented\"\n * with nobody attached is not a shortened truth, it is a different and false\n * claim — precisely the confusion the per-brand model was built to prevent.\n * Joining the two into a single value is what stops a caller rendering half\n * of it.\n *\n * The controller is the DECLARED GROUP when there is one, because that is who\n * the person was told they would hear from, and the site otherwise. A group\n * of one is named by the site, which is what the capture surface already\n * showed them.\n *\n * @param siteName - how this site reads — the caller resolves it, since the\n *   contact document holds ids and not names. An empty one falls back to the\n *   id: a site whose name cannot be resolved must still be NAMED, because\n *   dropping it would understate which brands hold a relationship.\n */\nexport function orgContactConsentLabel(\n  entry: OrgContactHostConsent,\n  siteName?: string,\n): string {\n  const controller = entry.declared\n    ? (entry.groupName ?? entry.groupId)\n    : siteName || entry.hostId\n  return `${controller} · ${MARKETING_BASIS_LABELS[entry.basis]}`\n}\n"],"names":["consentGroupForHost","heldScopeTokens","CAPTURED_BY_HOST_FIELD","MARKETING_CONSENT_BY_HOST_FIELD","MARKETING_CONSENT_FIELD","readMarketingBasis","refusalsOf","CONTACT_SOURCE_LABELS","form","member","order","booking","newsletter","api","manual","import","account","CONTACT_INTERACTIONS_CAP","CONTACT_ALTERNATE_EMAILS_FIELD","CONTACT_ALTERNATE_EMAILS_CAP","CONTACT_EMAIL_INDEX_COLLECTION","contactEmails","contact","out","seen","Set","push","value","email","normalizeContactEmail","has","add","alternates","Array","isArray","forEach","CONTACT_FORM_IDS_FIELD","CONTACT_FORM_IDS_CAP","EMAIL_PATTERN","input","String","trim","toLowerCase","test","length","extractEmailFromFields","fields","entries","Object","preferred","find","key","fromPreferred","mergeContactInteraction","existing","update","name","sources","source","interactions","interaction","slice","CONTACT_EXTRA_PHONE_FIELDS","CONTACT_PHONE_FIELD_LABELS","phone","mobilePhone","homePhone","otherPhone","fax","assistantPhone","CONTACT_NAME_PART_MAX","composeContactName","firstName","lastName","part","replace","filter","Boolean","join","CONTACT_BIRTHDATE_REFUSAL","normalizeContactBirthdate","nowMs","Date","now","text","match","exec","year","month","day","Number","date","UTC","getUTCFullYear","getUTCMonth","getUTCDate","latestToday","toISOString","CONTACT_FACETS_FIELD","readContactFacet","groupId","facets","facet","undefined","contactFacetPath","field","Error","contactDisplayName","canonical","contactHolderTokens","planContactDetach","group","held","leaving","hostIds","map","id","remaining","token","action","retained","refused","byHost","remove","removeTokens","removeHostIds","interactionsForGroup","reach","hostId","contactMatchesSegment","segment","tags","contactTags","tag","some","ORG_CONTACT_FIELDS","contactCaptureHostIds","raw","sort","orgContactRow","contactId","org","record","capturedByHostIds","$id","consent","basis","groupName","declared","MARKETING_BASIS_LABELS","granted","declined","unrecorded","orgContactConsentLabel","entry","siteName","controller"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;CAMC;AAGD,SAASA,mBAAmB,QAAQ,sBAAkB;AAGtD,SAASC,eAAe,QAAQ,oBAAgB;AAChD,SACEC,sBAAsB,EACtBC,+BAA+B,EAC/BC,uBAAuB,EACvBC,kBAAkB,QAEb,yBAAqB;AAC5B,SAASC,UAAU,QAA+B,yBAAqB;AA+BvE;;;;;;;;CAQC,GACD,OAAO,MAAMC,wBAAuD;IAClEC,MAAM;IACNC,QAAQ;IACRC,OAAO;IACPC,SAAS;IACTC,YAAY;IACZC,KAAK;IACLC,QAAQ;IACRC,QAAQ;IACRC,SAAS;AACX,EAAC;AA0JD,mEAAmE,GACnE,OAAO,MAAMC,2BAA2B,GAAE;AAE1C,2DAA2D,GAC3D,OAAO,MAAMC,iCAAiC,kBAAiB;AAE/D;;;CAGC,GACD,OAAO,MAAMC,+BAA+B,GAAE;AAE9C;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAMC,iCAAiC,aAAY;AAE1D;;;;CAIC,GACD,OAAO,SAASC,cACdC,OAAmD;IAEnD,MAAMC,MAAgB,EAAE;IACxB,MAAMC,OAAO,IAAIC;IACjB,MAAMC,OAAO,CAACC;QACZ,MAAMC,QAAQC,sBAAsBF;QACpC,IAAIC,SAAS,CAACJ,KAAKM,GAAG,CAACF,QAAQ;YAC7BJ,KAAKO,GAAG,CAACH;YACTL,IAAIG,IAAI,CAACE;QACX;IACF;IACAF,KAAK,CAACJ,kBAAAA,UAAW,CAAC,EAAE,CAAC,QAAQ;IAC7B,MAAMU,aAAa,CAACV,kBAAAA,UAAW,CAAC,EAAE,CAACJ,+BAA+B;IAClE,IAAIe,MAAMC,OAAO,CAACF,aAAaA,WAAWG,OAAO,CAACT;IAClD,OAAOH;AACT;AAEA,iGAAiG,GACjG,OAAO,MAAMa,yBAAyB,UAAS;AAE/C;;;;;;;;;CASC,GACD,OAAO,MAAMC,uBAAuB,GAAE;AAEtC,MAAMC,gBAAgB;AAEtB,wEAAwE,GACxE,OAAO,SAAST,sBAAsBU,KAAc;IAClD,MAAMX,QAAQY,OAAOD,gBAAAA,QAAS,IAC3BE,IAAI,GACJC,WAAW;IACd,OAAOJ,cAAcK,IAAI,CAACf,UAAUA,MAAMgB,MAAM,IAAI,MAAMhB,QAAQ;AACpE;AAEA;;;;CAIC,GACD,OAAO,SAASiB,uBACdC,MAAkD;IAElD,MAAMC,UAAUC,OAAOD,OAAO,CAACD,iBAAAA,SAAU,CAAC;IAC1C,MAAMG,YAAYF,QAAQG,IAAI,CAAC,CAAC,CAACC,IAAI,GAAK,SAASR,IAAI,CAACQ;IACxD,MAAMC,gBAAgBvB,sBAAsBoB,6BAAAA,SAAW,CAAC,EAAE;IAC1D,IAAIG,eAAe,OAAOA;IAC1B,KAAK,MAAM,GAAGzB,MAAM,IAAIoB,QAAS;QAC/B,MAAMnB,QAAQC,sBAAsBF;QACpC,IAAIC,OAAO,OAAOA;IACpB;IACA,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,SAASyB,wBACdC,QAEC,EACDC,MAAiF;QAMxCD;IAJzC,OAAO;QACL,sEAAsE;QACtEE,MAAMF,SAASE,IAAI,IAAID,OAAOC,IAAI;QAClCC,SAAS,aAAKH,SAASG,OAAO;YAAE,CAACF,OAAOG,MAAM,CAAC,EAAE;;QACjDC,cAAc;YAACJ,OAAOK,WAAW;gBAAMN,yBAAAA,SAASK,YAAY,YAArBL,yBAAyB,EAAE;SAAE,CAACO,KAAK,CACxE,GACA5C;IAEJ;AACF;AA6MA;;;CAGC,GACD,OAAO,MAAM6C,6BAA6B;IACxC;IACA;IACA;IACA;IACA;CACD,CAAS;AAIV,0EAA0E,GAC1E,OAAO,MAAMC,6BAA+E;IAC1FC,OAAO;IACPC,aAAa;IACbC,WAAW;IACXC,YAAY;IACZC,KAAK;IACLC,gBAAgB;AAClB,EAAC;AAED,uFAAuF,GACvF,OAAO,MAAMC,wBAAwB,GAAE;AAEvC;;;;CAIC,GACD,OAAO,SAASC,mBAAmBC,SAAkB,EAAEC,QAAiB;IACtE,MAAMC,OAAO,CAAC/C,QACZa,OAAOb,gBAAAA,QAAS,IACbc,IAAI,GACJkC,OAAO,CAAC,QAAQ,KAChBd,KAAK,CAAC,GAAGS;IACd,OAAO;QAACI,KAAKF;QAAYE,KAAKD;KAAU,CAACG,MAAM,CAACC,SAASC,IAAI,CAAC;AAChE;AAEA,oEAAoE,GACpE,OAAO,MAAMC,4BACX,qEAAoE;AAEtE;;;;;;;CAOC,GACD,OAAO,SAASC,0BAA0BrD,KAAc,EAAEsD,QAAQC,KAAKC,GAAG,EAAE;IAC1E,MAAMC,OAAO5C,OAAOb,gBAAAA,QAAS,IAAIc,IAAI;IACrC,IAAI,CAAC2C,MAAM,OAAO;IAClB,MAAMC,QAAQ,4BAA4BC,IAAI,CAACF;IAC/C,IAAI,CAACC,OAAO,OAAO;IACnB,MAAM,CAACE,MAAMC,OAAOC,IAAI,GAAG;QAACC,OAAOL,KAAK,CAAC,EAAE;QAAGK,OAAOL,KAAK,CAAC,EAAE;QAAGK,OAAOL,KAAK,CAAC,EAAE;KAAE;IACjF,MAAMM,OAAO,IAAIT,KAAKA,KAAKU,GAAG,CAACL,MAAMC,QAAQ,GAAGC;IAChD,IACEF,OAAO,QACPI,KAAKE,cAAc,OAAON,QAC1BI,KAAKG,WAAW,OAAON,QAAQ,KAC/BG,KAAKI,UAAU,OAAON,KACtB;QACA,OAAO;IACT;IACA,MAAMO,cAAc,IAAId,KAAKD,QAAQ,KAAK,KAAK,KAAK,MAAMgB,WAAW,GAAGpC,KAAK,CAAC,GAAG;IACjF,OAAOuB,OAAOY,cAAc,OAAOZ;AACrC;AAEA,qEAAqE,GACrE,OAAO,MAAMc,uBAAuB,SAAQ;AAE5C;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,iBACd7E,OAAmD,EACnD8E,OAAe;QAaHzE;IAXZ,MAAM0E,SAAS,CAAC/E,kBAAAA,UAAW,CAAC,EAAE,CAAC4E,qBAAqB;IACpD,MAAMI,QACJD,UAAU,OAAOA,WAAW,YAAY,CAACpE,MAAMC,OAAO,CAACmE,UACnD,AAACA,MAAkC,CAACD,QAAQ,GAC5CG;IACN,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYrE,MAAMC,OAAO,CAACoE,QAAQ;QAC/D,OAAO;YAAE7C,SAAS,CAAC;YAAGE,cAAc,EAAE;QAAC;IACzC;IACA,MAAMhC,QAAQ2E;IACd,OAAO,aACD3E;QACJ8B,OAAO,GAAG9B,iBAAAA,KAAK,CAAC,UAAU,YAAhBA,iBAAoB,CAAC;QAC/BgC,cAAc1B,MAAMC,OAAO,CAACP,KAAK,CAAC,eAAe,IAC5CA,KAAK,CAAC,eAAe,GACtB,EAAE;;AAEV;AAEA,kEAAkE,GAClE,OAAO,SAAS6E,iBAAiBJ,OAAe,EAAEK,KAAa;IAC7D,IAAI,CAACL,SAAS,MAAM,IAAIM,MAAM;IAC9B,OAAO,GAAGR,qBAAqB,CAAC,EAAEE,QAAQ,CAAC,EAAEK,OAAO;AACtD;AAEA;;;;;;;CAOC,GACD,OAAO,SAASE,mBACdrF,OAAmD,EACnD8E,OAAe;IAEf,MAAME,QAAQH,iBAAiB7E,SAAS8E;IACxC,IAAIE,MAAM9C,IAAI,EAAE,OAAO8C,MAAM9C,IAAI;IACjC,MAAMoD,YAAY,CAACtF,kBAAAA,UAAW,CAAC,EAAE,CAAC,OAAO;IACzC,OAAO,OAAOsF,cAAc,WAAWA,YAAY;AACrD;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,oBACdvF,OAAmD;IAEnD,OAAOrB,gBAAgBqB;AACzB;AAiCA;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,OAAO,SAASwF,kBACdxF,OAAmD,EACnDyF,KAAsD;;QAYtCzG;IAVhB,MAAM0G,OAAOH,oBAAoBvF;IACjC,MAAM2F,UAAU,IAAIxF,IAAIsF,MAAMG,OAAO,CAACC,GAAG,CAAC,CAACC,KAAO,CAAC,KAAK,EAAEA,IAAI;IAC9D;;;;;GAKC,GACD,MAAMC,YAAYL,KAAKpC,MAAM,CAAC,CAAC0C,QAAU,CAACL,QAAQnF,GAAG,CAACwF;IACtD,IAAI,CAACD,UAAUzE,MAAM,EAAE,OAAO;QAAE2E,QAAQ;QAAUC,UAAUlH,WAAWgB;IAAS;IAChF,MAAMmG,mBAAUnH,cAAAA,WAAWgB,6BAAXhB,YAAqBoH,MAAM,mBAAI,CAAC;IAChD,OAAO;QACLH,QAAQ;QACRI,QAAQ;YACN,GAAGzB,qBAAqB,CAAC,EAAEa,MAAMX,OAAO,EAAE;eACvCW,MAAMG,OAAO,CACbtC,MAAM,CAAC,CAACwC,KAAO,CAAEA,CAAAA,MAAMK,OAAM,GAC7BN,GAAG,CAAC,CAACC,KAAO,GAAGjH,gCAAgC,CAAC,EAAEiH,IAAI;SAC1D;QACDQ,cAAc;eAAIX;SAAQ;QAC1BY,eAAe;eAAId,MAAMG,OAAO;SAAC;IACnC;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASY,qBACdnE,YAAuD,EACvDuD,OAA0B;IAE1B,MAAMa,QAAQ,IAAItG,IAAIyF;IACtB,OAAO,CAACvD,uBAAAA,eAAgB,EAAE,EAAEiB,MAAM,CAChC,CAAChB,cAAgB,CAACA,YAAYoE,MAAM,IAAID,MAAMjG,GAAG,CAAC8B,YAAYoE,MAAM;AAExE;AAWA,wEAAwE,GACxE,OAAO,SAASC,sBACd3G,OAA8C,EAC9C4G,OAAiD;QAE7CA,eAQAA;IARJ,KAAIA,gBAAAA,QAAQC,IAAI,qBAAZD,cAActF,MAAM,EAAE;YAErBtB;QADH,MAAM8G,cAAc,IAAI3G,IACtB,EAACH,gBAAAA,QAAQ6G,IAAI,YAAZ7G,gBAAgB,EAAE,EAAE6F,GAAG,CAAC,CAACkB,MAAQA,IAAI3F,WAAW;QAEnD,IAAI,CAACwF,QAAQC,IAAI,CAACG,IAAI,CAAC,CAACD,MAAQD,YAAYtG,GAAG,CAACuG,IAAI3F,WAAW,MAAM;YACnE,OAAO;QACT;IACF;IACA,KAAIwF,mBAAAA,QAAQzE,OAAO,qBAAfyE,iBAAiBtF,MAAM,EAAE;QAC3B,IAAI,CAACsF,QAAQzE,OAAO,CAAC6E,IAAI,CAAC,CAAC5E;gBAAWpC;oBAAAA,mBAAAA,QAAQmC,OAAO,qBAAfnC,gBAAiB,CAACoC,OAAO;YAAG;YAChE,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAmC2C,GAE3C;;;;;;CAMC,GACD,OAAO,MAAM6E,qBAAqB;IAChC;IACA;IACArI;IACAC;IACAC;CACD,CAAS;AA2CV;;;;;;;CAOC,GACD,OAAO,SAASoI,sBACdlH,OAAmD;IAEnD,MAAMmH,MAAM,CAACnH,kBAAAA,UAAW,CAAC,EAAE,CAACpB,uBAAuB;IACnD,IAAI,CAAC+B,MAAMC,OAAO,CAACuG,MAAM,OAAO,EAAE;IAClC,OAAO;WACF,IAAIhH,IACLgH,IACGtB,GAAG,CAAC,CAACC,KAAO5E,OAAO4E,aAAAA,KAAM,IAAI3E,IAAI,IACjCmC,MAAM,CAAC,CAACwC,KAAqBA,OAAO;KAE1C,CAACsB,IAAI;AACR;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,cACdrH,OAAmD,EACnDsH,SAAiB,EACjBC,GAA+C;IAE/C,MAAMC,SAASxH,kBAAAA,UAAW,CAAC;IAC3B,MAAMyH,oBAAoBP,sBAAsBM;IAChD,OAAO;QACLE,KAAKJ;QACLhH,OAAO,OAAOkH,MAAM,CAAC,QAAQ,KAAK,WAAWA,MAAM,CAAC,QAAQ,GAAG;QAC/DtF,MAAM,OAAOsF,MAAM,CAAC,OAAO,KAAK,WAAWA,MAAM,CAAC,OAAO,GAAG;QAC5DC;QACAE,SAASF,kBAAkB5B,GAAG,CAAC,CAACa;YAC9B;;;;;;OAMC,GACD,MAAMjB,QAAQ/G,oBAAoB6I,KAAKb;YACvC,MAAM,EAAEkB,KAAK,EAAE,GAAG7I,mBAAmByI,QAAQ/B;YAC7C,OAAO;gBACLiB;gBACA5B,SAASW,MAAMX,OAAO;gBACtB+C,WAAWpC,MAAMvD,IAAI;gBACrB4F,UAAUrC,MAAMqC,QAAQ;gBACxBF;YACF;QACF;IACF;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,MAAMG,yBAAyD;IACpEC,SAAS;IACTC,UAAU;IACVC,YAAY;AACd,EAAC;AAED;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,SAASC,uBACdC,KAA4B,EAC5BC,QAAiB;QAGZD;IADL,MAAME,aAAaF,MAAMN,QAAQ,IAC5BM,mBAAAA,MAAMP,SAAS,YAAfO,mBAAmBA,MAAMtD,OAAO,GACjCuD,YAAYD,MAAM1B,MAAM;IAC5B,OAAO,GAAG4B,WAAW,GAAG,EAAEP,sBAAsB,CAACK,MAAMR,KAAK,CAAC,EAAE;AACjE"}

package/src/lib/app-utils/contexts.d.ts

@@ -35,3 +35,4 @@ export * from './page-header-help-context';
 export * from './page-header-record-context';
 export * from './screen-link-context';
 export * from './site-context';
+export * from './transfer-launcher-context';

package/src/lib/app-utils/contexts.js

@@ -33,5 +33,6 @@ export * from "./page-header-help-context.js";
 export * from "./page-header-record-context.js";
 export * from "./screen-link-context.js";
 export * from "./site-context.js";
+export * from "./transfer-launcher-context.js";
 
 //# sourceMappingURL=contexts.js.map

package/src/lib/app-utils/contexts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contexts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Client-only React contexts that live in @aglyn/aglyn (not a UI lib) so\n * every canvas-rendering surface — console, plugins, tenant render — shares\n * ONE context module instance (a second instance renders the site blank).\n * They call `createContext` at module scope, which App Router forbids in a\n * Server Component's module graph, so they are split out of the server-safe\n * `./server` barrel and only reachable via the full `@aglyn/aglyn` barrel\n * (client) — never `@aglyn/aglyn/server` (AGL-405).\n */\nexport * from './console-widget-slot-context'\nexport * from './deployment-capabilities-context'\nexport * from './enabled-plugins-context'\nexport * from './entity-picker-context'\nexport * from './link-target-search-context'\nexport * from './media-picker-context'\nexport * from './node-identity'\nexport * from './page-header-actions-context'\nexport * from './page-header-help-context'\nexport * from './page-header-record-context'\nexport * from './screen-link-context'\nexport * from './site-context'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;CAQC,GACD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,6BAAyB;AACvC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,qBAAiB;AAC/B,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,kCAA8B;AAC5C,cAAc,2BAAuB;AACrC,cAAc,oBAAgB"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contexts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Client-only React contexts that live in @aglyn/aglyn (not a UI lib) so\n * every canvas-rendering surface — console, plugins, tenant render — shares\n * ONE context module instance (a second instance renders the site blank).\n * They call `createContext` at module scope, which App Router forbids in a\n * Server Component's module graph, so they are split out of the server-safe\n * `./server` barrel and only reachable via the full `@aglyn/aglyn` barrel\n * (client) — never `@aglyn/aglyn/server` (AGL-405).\n */\nexport * from './console-widget-slot-context'\nexport * from './deployment-capabilities-context'\nexport * from './enabled-plugins-context'\nexport * from './entity-picker-context'\nexport * from './link-target-search-context'\nexport * from './media-picker-context'\nexport * from './node-identity'\nexport * from './page-header-actions-context'\nexport * from './page-header-help-context'\nexport * from './page-header-record-context'\nexport * from './screen-link-context'\nexport * from './site-context'\nexport * from './transfer-launcher-context'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;CAQC,GACD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,6BAAyB;AACvC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,qBAAiB;AAC/B,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,kCAA8B;AAC5C,cAAc,2BAAuB;AACrC,cAAc,oBAAgB;AAC9B,cAAc,iCAA6B"}

package/src/lib/app-utils/crm-email-templates.js

@@ -283,11 +283,20 @@ const text = (value)=>typeof value === 'string' ? value.trim() : '';
                 const groupId = text(context.contactGroupId);
                 const facet = readContactFacet(contact, groupId);
                 const name = groupId ? contactDisplayName(contact, groupId) : text(contact['name']);
+                /*
+       * The holder's own first and last names when it keeps them (AGL-3515)
+       * — a two-word first name or a particle in a surname is then what the
+       * person wrote — and the display name split at its first space when
+       * it keeps neither.
+       */ const parts = text(facet.firstName) || text(facet.lastName) ? {
+                    firstName: text(facet.firstName),
+                    lastName: text(facet.lastName)
+                } : splitPersonName(name);
                 switch(field){
                     case 'firstName':
-                        return splitPersonName(name).firstName;
+                        return parts.firstName;
                     case 'lastName':
-                        return splitPersonName(name).lastName;
+                        return parts.lastName;
                     case 'name':
                         return name;
                     case 'email':
@@ -305,11 +314,19 @@ const text = (value)=>typeof value === 'string' ? value.trim() : '';
             {
                 const lead = context.lead;
                 if (!lead) return '';
+                /*
+       * The lead's own first and last names when it keeps them (AGL-3513),
+       * as the contact's are read; the name split at its first space when
+       * it keeps neither.
+       */ const parts = text(lead['firstName']) || text(lead['lastName']) ? {
+                    firstName: text(lead['firstName']),
+                    lastName: text(lead['lastName'])
+                } : splitPersonName(lead['name']);
                 switch(field){
                     case 'firstName':
-                        return splitPersonName(lead['name']).firstName;
+                        return parts.firstName;
                     case 'lastName':
-                        return splitPersonName(lead['name']).lastName;
+                        return parts.lastName;
                     case 'name':
                         return text(lead['name']);
                     case 'email':

package/src/lib/app-utils/crm-email-templates.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/crm-email-templates.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * EMAIL TEMPLATES, SNIPPETS AND MERGE FIELDS (AGL-2658).\n *\n * A one-to-one email is a letter, and a rep writes the same three letters\n * all week: the follow-up, the proposal cover note, the \"still keen?\". A\n * TEMPLATE is one of those letters kept under a name — a subject and a body\n * the dialog fills in whole. A SNIPPET is a paragraph kept under a name —\n * a signature block, a pricing line — inserted where the caret is. Both\n * carry MERGE FIELDS, `{{contact.firstName}}` and the like, which the send\n * route fills from the record the email is about, so a template written\n * once reads as a letter to each person it is sent to.\n *\n * ## One resolver, run twice\n *\n * The server resolves at send time, off the documents it has already read\n * to find the recipient, and what it writes to the timeline is the letter\n * as it left. The dialog runs the SAME resolver over the same documents to\n * show the rep what will go out, so the preview and the message cannot\n * disagree. The resolver is pure and lives here, beside the model, so\n * neither caller can drift into its own grammar.\n *\n * ## What a field with no value does\n *\n * It renders as nothing. A template that greets `{{contact.firstName}}` is\n * sent to a contact known only by email as \"Hi ,\" — which is why the dialog\n * counts the empty fields and says so before the rep clicks Send, and why\n * an unknown field name renders as nothing too rather than as its own\n * braces: a typo in a merge field must not reach a customer as `{{contct.\n * firstName}}`. Nothing is escaped, because the mail is plain text.\n *\n * ## Shared or personal\n *\n * A template is either the team's — every CRM editor may use and change it\n * — or one person's, listed for its owner alone. The rules gate the writes\n * (`cloud/firebase-firestore.rules`); the listing hides a colleague's\n * personal rows the way a private saved view is hidden (AGL-2617), because\n * a rule per reader would need a query per reader.\n *==========================================*/\n\nimport {\n  contactDisplayName,\n  normalizeContactEmail,\n  readContactFacet,\n} from './contacts'\nimport { CRM_EMAIL_BODY_MAX, CRM_EMAIL_SUBJECT_MAX, type CrmScoped } from './crm'\n\n/** The most a template's name may hold. */\nexport const CRM_EMAIL_TEMPLATE_NAME_MAX = 80\n\n/**\n * The listing's window, and the ceiling the console's create respects.\n *\n * A LOOKUP rather than a list: the picker is a menu a rep opens, and two\n * hundred named letters for one workspace is past what anybody scrolls.\n * Bounded so the listen cannot grow with the org.\n */\nexport const CRM_EMAIL_TEMPLATES_LIMIT = 200\n\n/** A whole letter under a name, or a paragraph under one. */\nexport const CRM_EMAIL_TEMPLATE_KINDS = ['template', 'snippet'] as const\nexport type CrmEmailTemplateKind = (typeof CRM_EMAIL_TEMPLATE_KINDS)[number]\n\nexport const CRM_EMAIL_TEMPLATE_KIND_LABELS: Record<CrmEmailTemplateKind, string> = {\n  template: 'Template',\n  snippet: 'Snippet',\n}\n\nexport function isCrmEmailTemplateKind(value: unknown): value is CrmEmailTemplateKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_EMAIL_TEMPLATE_KINDS as readonly string[]).includes(value)\n  )\n}\n\n/** The team's, or one person's. */\nexport const CRM_EMAIL_TEMPLATE_VISIBILITIES = ['shared', 'personal'] as const\nexport type CrmEmailTemplateVisibility = (typeof CRM_EMAIL_TEMPLATE_VISIBILITIES)[number]\n\nexport const CRM_EMAIL_TEMPLATE_VISIBILITY_LABELS: Record<CrmEmailTemplateVisibility, string> = {\n  shared: 'Shared',\n  personal: 'Personal',\n}\n\nexport function isCrmEmailTemplateVisibility(\n  value: unknown,\n): value is CrmEmailTemplateVisibility {\n  return (\n    typeof value === 'string' &&\n    (CRM_EMAIL_TEMPLATE_VISIBILITIES as readonly string[]).includes(value)\n  )\n}\n\n/**\n * `orgs/{orgId}/crmEmailTemplates/{templateId}`.\n *\n * Scoped like a task (AGL-2637): under a site it carries that site's tokens\n * and `hostId`; written from the organization's own hub it carries the org\n * token and `hostId: null`, because a letter the whole workspace keeps is\n * not any one brand's. `ownerUid` is set on a personal template only, and\n * is the one member the listing shows it to.\n */\nexport interface CrmEmailTemplate extends Omit<CrmScoped, 'hostId'> {\n  /** The site it was written under, or `null` for the organization's own. */\n  hostId: string | null\n  name: string\n  /** The subject line a template fills in; `''` on a snippet. */\n  subject: string\n  /** Plain text, with merge fields — see {@link renderCrmMergeFields}. */\n  body: string\n  kind: CrmEmailTemplateKind\n  visibility: CrmEmailTemplateVisibility\n  /** The one member a personal template is listed for; absent on a shared one. */\n  ownerUid?: string\n  /** Who made it — `'api'` for a key, which has no uid. */\n  createdByUid: string\n  createdAtMs: number\n  updatedAtMs: number\n}\n\n/** A template as a listener hands it back: the document plus its id. */\nexport type CrmEmailTemplateRow = CrmEmailTemplate & { $id: string }\n\n/**\n * Whether a template belongs in `uid`'s menu: every shared one, and the\n * personal ones they own. A colleague's personal template is readable under\n * the rules and hidden here — see the module header.\n */\nexport function crmEmailTemplateIsListed(\n  template: Pick<CrmEmailTemplate, 'visibility' | 'ownerUid'>,\n  uid: string | null | undefined,\n): boolean {\n  if (template.visibility !== 'personal') return true\n  return Boolean(uid) && template.ownerUid === uid\n}\n\nconst asText = (value: unknown, max: number): string =>\n  typeof value === 'string' ? value.slice(0, max) : ''\n\nconst asMs = (value: unknown): number =>\n  typeof value === 'number' && Number.isFinite(value) ? value : 0\n\n/**\n * A stored document held to shape, for a listener that reads it raw.\n *\n * Lenient where the rules are not: a kind or a visibility the union does not\n * name reads as the default, because a row some other writer produced is\n * still a letter somebody kept, and dropping it from the menu would lose it.\n */\nexport function normalizeCrmEmailTemplate(\n  row: Record<string, unknown> | null | undefined,\n): CrmEmailTemplate {\n  const data = row ?? {}\n  const visibility = isCrmEmailTemplateVisibility(data['visibility'])\n    ? data['visibility']\n    : 'shared'\n  const ownerUid = asText(data['ownerUid'], 128)\n  return {\n    name: asText(data['name'], CRM_EMAIL_TEMPLATE_NAME_MAX).trim(),\n    subject: asText(data['subject'], CRM_EMAIL_SUBJECT_MAX),\n    body: asText(data['body'], CRM_EMAIL_BODY_MAX),\n    kind: isCrmEmailTemplateKind(data['kind']) ? data['kind'] : 'template',\n    visibility,\n    ...(visibility === 'personal' && ownerUid ? { ownerUid } : {}),\n    createdByUid: asText(data['createdByUid'], 128),\n    createdAtMs: asMs(data['createdAtMs']),\n    updatedAtMs: asMs(data['updatedAtMs']),\n    hostId: typeof data['hostId'] === 'string' ? data['hostId'] : null,\n    visibleTo: Array.isArray(data['visibleTo'])\n      ? (data['visibleTo'] as unknown[]).map(String)\n      : [],\n    createdAt: data['createdAt'],\n    updatedAt: data['updatedAt'],\n  }\n}\n\n/*==========================================\n * MERGE FIELDS.\n *==========================================*/\n\n/** The group a field belongs to, as the picker headings it. */\nexport type CrmMergeFieldGroup = 'Contact' | 'Lead' | 'Deal' | 'You' | 'Site'\n\nexport interface CrmMergeFieldDefinition {\n  key: string\n  label: string\n  group: CrmMergeFieldGroup\n}\n\n/**\n * Every field the resolver knows, in the order the picker offers them.\n *\n * A fixed list rather than a path into the document, because a merge field\n * is a promise about what a person will read: `contact.title` has to mean\n * the job title on every send, whatever the document happens to call it\n * this year, and a free path would let a template reach into a note or a\n * consent map.\n */\nexport const CRM_MERGE_FIELDS: readonly CrmMergeFieldDefinition[] = [\n  { key: 'contact.firstName', label: 'First name', group: 'Contact' },\n  { key: 'contact.lastName', label: 'Last name', group: 'Contact' },\n  { key: 'contact.name', label: 'Full name', group: 'Contact' },\n  { key: 'contact.email', label: 'Email address', group: 'Contact' },\n  { key: 'contact.company', label: 'Company', group: 'Contact' },\n  { key: 'contact.title', label: 'Job title', group: 'Contact' },\n  { key: 'lead.firstName', label: 'First name', group: 'Lead' },\n  { key: 'lead.lastName', label: 'Last name', group: 'Lead' },\n  { key: 'lead.name', label: 'Full name', group: 'Lead' },\n  { key: 'lead.email', label: 'Email address', group: 'Lead' },\n  { key: 'lead.company', label: 'Company', group: 'Lead' },\n  { key: 'lead.title', label: 'Job title', group: 'Lead' },\n  { key: 'deal.name', label: 'Deal name', group: 'Deal' },\n  { key: 'deal.amount', label: 'Deal amount', group: 'Deal' },\n  { key: 'sender.firstName', label: 'Your first name', group: 'You' },\n  { key: 'sender.name', label: 'Your name', group: 'You' },\n  { key: 'sender.email', label: 'Your email address', group: 'You' },\n  { key: 'site.name', label: 'Site name', group: 'Site' },\n]\n\n/** `{{key}}` — the one spelling the resolver reads and the picker inserts. */\nexport function crmMergeFieldToken(key: string): string {\n  return `{{${key}}}`\n}\n\n/**\n * What the resolver reads from: the documents as they are stored, so the\n * send route hands over what it already read and the dialog what it\n * fetched for the preview, with no projection in between to drift.\n */\nexport interface CrmMergeContext {\n  /** The contact document, `orgs/{orgId}/contacts/{id}`. */\n  contact?: Record<string, unknown> | null\n  /**\n   * The holder group whose facet names the contact — the sending site's,\n   * since a name, a job title and a company are one holder's knowledge of\n   * a person (`readContactFacet`). The canonical name is the fallback.\n   */\n  contactGroupId?: string | null\n  /** The lead document, `hosts/{hostId}/leads/{id}`. */\n  lead?: Record<string, unknown> | null\n  /** The deal document, `orgs/{orgId}/deals/{id}`. */\n  deal?: Record<string, unknown> | null\n  /** The person sending, as their token or session names them. */\n  sender?: { name?: string | null; email?: string | null } | null\n  /** The site the email leaves from. */\n  site?: { name?: string | null } | null\n  /**\n   * Fields a caller brings from a record of its own, keyed by the whole\n   * `group.field` name — a plugin's `enrollment.personalLine`, say.\n   *\n   * Read only for a group the resolver above does not know, so no caller can\n   * change what `contact.email` means. The fixed list is a promise about what\n   * a person will read, and this is where a caller that makes its own promise\n   * keeps it: the value is passed as written, never looked up by path.\n   */\n  extra?: Readonly<Record<string, string | null | undefined>> | null\n}\n\nexport interface CrmMergeResult {\n  /** The text with every field replaced — by its value, or by nothing. */\n  text: string\n  /** The fields that rendered as nothing, unique, in order of appearance. */\n  unresolved: string[]\n}\n\n/*\n * `{{ group.field }}`, spaces allowed inside the braces because a rep will\n * type them. A single brace pair or a bare word is left alone: a letter may\n * legitimately contain braces.\n */\nconst MERGE_FIELD_PATTERN = /\\{\\{\\s*([A-Za-z][A-Za-z0-9]*\\.[A-Za-z][A-Za-z0-9]*)\\s*\\}\\}/g\n\n/** The merge fields a text names, unique, in order of first appearance. */\nexport function crmMergeFieldsIn(text: string): string[] {\n  const seen = new Set<string>()\n  const fields: string[] = []\n  for (const match of String(text ?? '').matchAll(MERGE_FIELD_PATTERN)) {\n    const key = match[1]\n    if (seen.has(key)) continue\n    seen.add(key)\n    fields.push(key)\n  }\n  return fields\n}\n\nexport function hasCrmMergeFields(text: string): boolean {\n  MERGE_FIELD_PATTERN.lastIndex = 0\n  return MERGE_FIELD_PATTERN.test(String(text ?? ''))\n}\n\n/** A name as one string → its first word and the rest. */\nexport function splitPersonName(name: unknown): { firstName: string; lastName: string } {\n  const words = String(name ?? '')\n    .trim()\n    .split(/\\s+/)\n    .filter(Boolean)\n  return {\n    firstName: words[0] ?? '',\n    lastName: words.slice(1).join(' '),\n  }\n}\n\n/**\n * A deal's amount as a letter prints it.\n *\n * A fixed locale rather than the reader's, on purpose: the server has no\n * reader, and the preview has to print what the server will send. Cents\n * that are not a number render as nothing, so a deal with no value greets\n * nobody with \"$0.00\".\n */\nexport function formatCrmMergeAmount(cents: unknown, currency: unknown): string {\n  if (typeof cents !== 'number' || !Number.isFinite(cents)) return ''\n  const code = String(currency || 'usd').toUpperCase()\n  const amount = cents / 100\n  try {\n    return new Intl.NumberFormat('en-US', { style: 'currency', currency: code }).format(amount)\n  } catch {\n    return `${amount.toFixed(2)} ${code}`\n  }\n}\n\nconst text = (value: unknown): string => (typeof value === 'string' ? value.trim() : '')\n\n/** One field's value from the context, or `''` for anything it cannot answer. */\nfunction resolveCrmMergeField(key: string, context: CrmMergeContext): string {\n  const [group, field] = key.split('.')\n  switch (group) {\n    case 'contact': {\n      const contact = context.contact\n      if (!contact) return ''\n      const groupId = text(context.contactGroupId)\n      const facet = readContactFacet(contact, groupId)\n      const name = groupId\n        ? contactDisplayName(contact, groupId)\n        : text(contact['name'])\n      switch (field) {\n        case 'firstName':\n          return splitPersonName(name).firstName\n        case 'lastName':\n          return splitPersonName(name).lastName\n        case 'name':\n          return name\n        case 'email':\n          return normalizeContactEmail(contact['email']) ?? ''\n        case 'company':\n          return text(facet.companyName)\n        case 'title':\n          return text(facet.jobTitle)\n        default:\n          return ''\n      }\n    }\n    case 'lead': {\n      const lead = context.lead\n      if (!lead) return ''\n      switch (field) {\n        case 'firstName':\n          return splitPersonName(lead['name']).firstName\n        case 'lastName':\n          return splitPersonName(lead['name']).lastName\n        case 'name':\n          return text(lead['name'])\n        case 'email':\n          return normalizeContactEmail(lead['email']) ?? ''\n        // The lead's own profile (AGL-3231): the company as text, the title.\n        case 'company':\n          return text(lead['company'])\n        case 'title':\n          return text(lead['jobTitle'])\n        default:\n          return ''\n      }\n    }\n    case 'deal': {\n      const deal = context.deal\n      if (!deal) return ''\n      switch (field) {\n        case 'name':\n          return text(deal['title'])\n        case 'amount':\n          return formatCrmMergeAmount(deal['amountCents'], deal['currency'])\n        default:\n          return ''\n      }\n    }\n    case 'sender': {\n      const sender = context.sender\n      if (!sender) return ''\n      switch (field) {\n        case 'firstName':\n          return splitPersonName(sender.name).firstName\n        case 'name':\n          return text(sender.name)\n        case 'email':\n          return normalizeContactEmail(sender.email) ?? ''\n        default:\n          return ''\n      }\n    }\n    case 'site':\n      return field === 'name' ? text(context.site?.name) : ''\n    default: {\n      const extra = context.extra\n      return extra && Object.prototype.hasOwnProperty.call(extra, key)\n        ? text(extra[key])\n        : ''\n    }\n  }\n}\n\n/**\n * Every merge field in `text` replaced from `context`, and the ones that\n * had nothing to say. Pure, and never throws: a missing record, an unknown\n * field, a malformed context each render as nothing and are named in\n * `unresolved`.\n */\nexport function resolveCrmMergeFields(\n  text: string,\n  context: CrmMergeContext | null | undefined,\n): CrmMergeResult {\n  const source = String(text ?? '')\n  const ctx = context ?? {}\n  const unresolved = new Set<string>()\n  const rendered = source.replace(MERGE_FIELD_PATTERN, (_match, key: string) => {\n    const value = resolveCrmMergeField(key, ctx)\n    if (!value) unresolved.add(key)\n    return value\n  })\n  return { text: rendered, unresolved: [...unresolved] }\n}\n\n/** {@link resolveCrmMergeFields}, text alone — what the send route sends. */\nexport function renderCrmMergeFields(\n  text: string,\n  context: CrmMergeContext | null | undefined,\n): string {\n  return resolveCrmMergeFields(text, context).text\n}\n\n/** What the dialog says under a draft whose fields have nothing to fill. */\nexport function crmMergeUnresolvedMessage(unresolved: readonly string[]): string {\n  if (unresolved.length === 0) return ''\n  const count = unresolved.length\n  const noun = count === 1 ? '1 field has no value' : `${count} fields have no value`\n  return `${noun}: ${unresolved.map(crmMergeFieldToken).join(', ')}`\n}\n"],"names":["contactDisplayName","normalizeContactEmail","readContactFacet","CRM_EMAIL_BODY_MAX","CRM_EMAIL_SUBJECT_MAX","CRM_EMAIL_TEMPLATE_NAME_MAX","CRM_EMAIL_TEMPLATES_LIMIT","CRM_EMAIL_TEMPLATE_KINDS","CRM_EMAIL_TEMPLATE_KIND_LABELS","template","snippet","isCrmEmailTemplateKind","value","includes","CRM_EMAIL_TEMPLATE_VISIBILITIES","CRM_EMAIL_TEMPLATE_VISIBILITY_LABELS","shared","personal","isCrmEmailTemplateVisibility","crmEmailTemplateIsListed","uid","visibility","Boolean","ownerUid","asText","max","slice","asMs","Number","isFinite","normalizeCrmEmailTemplate","row","data","name","trim","subject","body","kind","createdByUid","createdAtMs","updatedAtMs","hostId","visibleTo","Array","isArray","map","String","createdAt","updatedAt","CRM_MERGE_FIELDS","key","label","group","crmMergeFieldToken","MERGE_FIELD_PATTERN","crmMergeFieldsIn","text","seen","Set","fields","match","matchAll","has","add","push","hasCrmMergeFields","lastIndex","test","splitPersonName","words","split","filter","firstName","lastName","join","formatCrmMergeAmount","cents","currency","code","toUpperCase","amount","Intl","NumberFormat","style","format","toFixed","resolveCrmMergeField","context","field","contact","groupId","contactGroupId","facet","companyName","jobTitle","lead","deal","sender","email","site","extra","Object","prototype","hasOwnProperty","call","resolveCrmMergeFields","source","ctx","unresolved","rendered","replace","_match","renderCrmMergeFields","crmMergeUnresolvedMessage","length","count","noun"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAqC4C,GAE5C,SACEA,kBAAkB,EAClBC,qBAAqB,EACrBC,gBAAgB,QACX,gBAAY;AACnB,SAASC,kBAAkB,EAAEC,qBAAqB,QAAwB,WAAO;AAEjF,yCAAyC,GACzC,OAAO,MAAMC,8BAA8B,GAAE;AAE7C;;;;;;CAMC,GACD,OAAO,MAAMC,4BAA4B,IAAG;AAE5C,2DAA2D,GAC3D,OAAO,MAAMC,2BAA2B;IAAC;IAAY;CAAU,CAAS;AAGxE,OAAO,MAAMC,iCAAuE;IAClFC,UAAU;IACVC,SAAS;AACX,EAAC;AAED,OAAO,SAASC,uBAAuBC,KAAc;IACnD,OACE,OAAOA,UAAU,YACjB,AAACL,yBAA+CM,QAAQ,CAACD;AAE7D;AAEA,iCAAiC,GACjC,OAAO,MAAME,kCAAkC;IAAC;IAAU;CAAW,CAAS;AAG9E,OAAO,MAAMC,uCAAmF;IAC9FC,QAAQ;IACRC,UAAU;AACZ,EAAC;AAED,OAAO,SAASC,6BACdN,KAAc;IAEd,OACE,OAAOA,UAAU,YACjB,AAACE,gCAAsDD,QAAQ,CAACD;AAEpE;AAgCA;;;;CAIC,GACD,OAAO,SAASO,yBACdV,QAA2D,EAC3DW,GAA8B;IAE9B,IAAIX,SAASY,UAAU,KAAK,YAAY,OAAO;IAC/C,OAAOC,QAAQF,QAAQX,SAASc,QAAQ,KAAKH;AAC/C;AAEA,MAAMI,SAAS,CAACZ,OAAgBa,MAC9B,OAAOb,UAAU,WAAWA,MAAMc,KAAK,CAAC,GAAGD,OAAO;AAEpD,MAAME,OAAO,CAACf,QACZ,OAAOA,UAAU,YAAYgB,OAAOC,QAAQ,CAACjB,SAASA,QAAQ;AAEhE;;;;;;CAMC,GACD,OAAO,SAASkB,0BACdC,GAA+C;IAE/C,MAAMC,OAAOD,cAAAA,MAAO,CAAC;IACrB,MAAMV,aAAaH,6BAA6Bc,IAAI,CAAC,aAAa,IAC9DA,IAAI,CAAC,aAAa,GAClB;IACJ,MAAMT,WAAWC,OAAOQ,IAAI,CAAC,WAAW,EAAE;IAC1C,OAAO;QACLC,MAAMT,OAAOQ,IAAI,CAAC,OAAO,EAAE3B,6BAA6B6B,IAAI;QAC5DC,SAASX,OAAOQ,IAAI,CAAC,UAAU,EAAE5B;QACjCgC,MAAMZ,OAAOQ,IAAI,CAAC,OAAO,EAAE7B;QAC3BkC,MAAM1B,uBAAuBqB,IAAI,CAAC,OAAO,IAAIA,IAAI,CAAC,OAAO,GAAG;QAC5DX;OACIA,eAAe,cAAcE,WAAW;QAAEA;IAAS,IAAI,CAAC;QAC5De,cAAcd,OAAOQ,IAAI,CAAC,eAAe,EAAE;QAC3CO,aAAaZ,KAAKK,IAAI,CAAC,cAAc;QACrCQ,aAAab,KAAKK,IAAI,CAAC,cAAc;QACrCS,QAAQ,OAAOT,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QAC9DU,WAAWC,MAAMC,OAAO,CAACZ,IAAI,CAAC,YAAY,IACtC,AAACA,IAAI,CAAC,YAAY,CAAea,GAAG,CAACC,UACrC,EAAE;QACNC,WAAWf,IAAI,CAAC,YAAY;QAC5BgB,WAAWhB,IAAI,CAAC,YAAY;;AAEhC;AAeA;;;;;;;;CAQC,GACD,OAAO,MAAMiB,mBAAuD;IAClE;QAAEC,KAAK;QAAqBC,OAAO;QAAcC,OAAO;IAAU;IAClE;QAAEF,KAAK;QAAoBC,OAAO;QAAaC,OAAO;IAAU;IAChE;QAAEF,KAAK;QAAgBC,OAAO;QAAaC,OAAO;IAAU;IAC5D;QAAEF,KAAK;QAAiBC,OAAO;QAAiBC,OAAO;IAAU;IACjE;QAAEF,KAAK;QAAmBC,OAAO;QAAWC,OAAO;IAAU;IAC7D;QAAEF,KAAK;QAAiBC,OAAO;QAAaC,OAAO;IAAU;IAC7D;QAAEF,KAAK;QAAkBC,OAAO;QAAcC,OAAO;IAAO;IAC5D;QAAEF,KAAK;QAAiBC,OAAO;QAAaC,OAAO;IAAO;IAC1D;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;IACtD;QAAEF,KAAK;QAAcC,OAAO;QAAiBC,OAAO;IAAO;IAC3D;QAAEF,KAAK;QAAgBC,OAAO;QAAWC,OAAO;IAAO;IACvD;QAAEF,KAAK;QAAcC,OAAO;QAAaC,OAAO;IAAO;IACvD;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;IACtD;QAAEF,KAAK;QAAeC,OAAO;QAAeC,OAAO;IAAO;IAC1D;QAAEF,KAAK;QAAoBC,OAAO;QAAmBC,OAAO;IAAM;IAClE;QAAEF,KAAK;QAAeC,OAAO;QAAaC,OAAO;IAAM;IACvD;QAAEF,KAAK;QAAgBC,OAAO;QAAsBC,OAAO;IAAM;IACjE;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;CACvD,CAAA;AAED,4EAA4E,GAC5E,OAAO,SAASC,mBAAmBH,GAAW;IAC5C,OAAO,CAAC,EAAE,EAAEA,IAAI,EAAE,CAAC;AACrB;AA2CA;;;;CAIC,GACD,MAAMI,sBAAsB;AAE5B,yEAAyE,GACzE,OAAO,SAASC,iBAAiBC,IAAY;IAC3C,MAAMC,OAAO,IAAIC;IACjB,MAAMC,SAAmB,EAAE;IAC3B,KAAK,MAAMC,SAASd,OAAOU,eAAAA,OAAQ,IAAIK,QAAQ,CAACP,qBAAsB;QACpE,MAAMJ,MAAMU,KAAK,CAAC,EAAE;QACpB,IAAIH,KAAKK,GAAG,CAACZ,MAAM;QACnBO,KAAKM,GAAG,CAACb;QACTS,OAAOK,IAAI,CAACd;IACd;IACA,OAAOS;AACT;AAEA,OAAO,SAASM,kBAAkBT,IAAY;IAC5CF,oBAAoBY,SAAS,GAAG;IAChC,OAAOZ,oBAAoBa,IAAI,CAACrB,OAAOU,eAAAA,OAAQ;AACjD;AAEA,wDAAwD,GACxD,OAAO,SAASY,gBAAgBnC,IAAa;QAM9BoC;IALb,MAAMA,QAAQvB,OAAOb,eAAAA,OAAQ,IAC1BC,IAAI,GACJoC,KAAK,CAAC,OACNC,MAAM,CAACjD;IACV,OAAO;QACLkD,SAAS,GAAEH,UAAAA,KAAK,CAAC,EAAE,YAARA,UAAY;QACvBI,UAAUJ,MAAM3C,KAAK,CAAC,GAAGgD,IAAI,CAAC;IAChC;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,qBAAqBC,KAAc,EAAEC,QAAiB;IACpE,IAAI,OAAOD,UAAU,YAAY,CAAChD,OAAOC,QAAQ,CAAC+C,QAAQ,OAAO;IACjE,MAAME,OAAOhC,OAAO+B,YAAY,OAAOE,WAAW;IAClD,MAAMC,SAASJ,QAAQ;IACvB,IAAI;QACF,OAAO,IAAIK,KAAKC,YAAY,CAAC,SAAS;YAAEC,OAAO;YAAYN,UAAUC;QAAK,GAAGM,MAAM,CAACJ;IACtF,EAAE,eAAM;QACN,OAAO,GAAGA,OAAOK,OAAO,CAAC,GAAG,CAAC,EAAEP,MAAM;IACvC;AACF;AAEA,MAAMtB,OAAO,CAAC5C,QAA4B,OAAOA,UAAU,WAAWA,MAAMsB,IAAI,KAAK;AAErF,+EAA+E,GAC/E,SAASoD,qBAAqBpC,GAAW,EAAEqC,OAAwB;IACjE,MAAM,CAACnC,OAAOoC,MAAM,GAAGtC,IAAIoB,KAAK,CAAC;IACjC,OAAQlB;QACN,KAAK;YAAW;gBACd,MAAMqC,UAAUF,QAAQE,OAAO;gBAC/B,IAAI,CAACA,SAAS,OAAO;gBACrB,MAAMC,UAAUlC,KAAK+B,QAAQI,cAAc;gBAC3C,MAAMC,QAAQ1F,iBAAiBuF,SAASC;gBACxC,MAAMzD,OAAOyD,UACT1F,mBAAmByF,SAASC,WAC5BlC,KAAKiC,OAAO,CAAC,OAAO;gBACxB,OAAQD;oBACN,KAAK;wBACH,OAAOpB,gBAAgBnC,MAAMuC,SAAS;oBACxC,KAAK;wBACH,OAAOJ,gBAAgBnC,MAAMwC,QAAQ;oBACvC,KAAK;wBACH,OAAOxC;oBACT,KAAK;4BACIhC;wBAAP,QAAOA,yBAAAA,sBAAsBwF,OAAO,CAAC,QAAQ,aAAtCxF,yBAA2C;oBACpD,KAAK;wBACH,OAAOuD,KAAKoC,MAAMC,WAAW;oBAC/B,KAAK;wBACH,OAAOrC,KAAKoC,MAAME,QAAQ;oBAC5B;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAQ;gBACX,MAAMC,OAAOR,QAAQQ,IAAI;gBACzB,IAAI,CAACA,MAAM,OAAO;gBAClB,OAAQP;oBACN,KAAK;wBACH,OAAOpB,gBAAgB2B,IAAI,CAAC,OAAO,EAAEvB,SAAS;oBAChD,KAAK;wBACH,OAAOJ,gBAAgB2B,IAAI,CAAC,OAAO,EAAEtB,QAAQ;oBAC/C,KAAK;wBACH,OAAOjB,KAAKuC,IAAI,CAAC,OAAO;oBAC1B,KAAK;4BACI9F;wBAAP,QAAOA,0BAAAA,sBAAsB8F,IAAI,CAAC,QAAQ,aAAnC9F,0BAAwC;oBACjD,qEAAqE;oBACrE,KAAK;wBACH,OAAOuD,KAAKuC,IAAI,CAAC,UAAU;oBAC7B,KAAK;wBACH,OAAOvC,KAAKuC,IAAI,CAAC,WAAW;oBAC9B;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAQ;gBACX,MAAMC,OAAOT,QAAQS,IAAI;gBACzB,IAAI,CAACA,MAAM,OAAO;gBAClB,OAAQR;oBACN,KAAK;wBACH,OAAOhC,KAAKwC,IAAI,CAAC,QAAQ;oBAC3B,KAAK;wBACH,OAAOrB,qBAAqBqB,IAAI,CAAC,cAAc,EAAEA,IAAI,CAAC,WAAW;oBACnE;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAU;gBACb,MAAMC,SAASV,QAAQU,MAAM;gBAC7B,IAAI,CAACA,QAAQ,OAAO;gBACpB,OAAQT;oBACN,KAAK;wBACH,OAAOpB,gBAAgB6B,OAAOhE,IAAI,EAAEuC,SAAS;oBAC/C,KAAK;wBACH,OAAOhB,KAAKyC,OAAOhE,IAAI;oBACzB,KAAK;4BACIhC;wBAAP,QAAOA,0BAAAA,sBAAsBgG,OAAOC,KAAK,aAAlCjG,0BAAuC;oBAChD;wBACE,OAAO;gBACX;YACF;QACA,KAAK;gBAC4BsF;YAA/B,OAAOC,UAAU,SAAShC,MAAK+B,gBAAAA,QAAQY,IAAI,qBAAZZ,cAActD,IAAI,IAAI;QACvD;YAAS;gBACP,MAAMmE,QAAQb,QAAQa,KAAK;gBAC3B,OAAOA,SAASC,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACJ,OAAOlD,OACxDM,KAAK4C,KAAK,CAAClD,IAAI,IACf;YACN;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASuD,sBACdjD,IAAY,EACZ+B,OAA2C;IAE3C,MAAMmB,SAAS5D,OAAOU,eAAAA,OAAQ;IAC9B,MAAMmD,MAAMpB,kBAAAA,UAAW,CAAC;IACxB,MAAMqB,aAAa,IAAIlD;IACvB,MAAMmD,WAAWH,OAAOI,OAAO,CAACxD,qBAAqB,CAACyD,QAAQ7D;QAC5D,MAAMtC,QAAQ0E,qBAAqBpC,KAAKyD;QACxC,IAAI,CAAC/F,OAAOgG,WAAW7C,GAAG,CAACb;QAC3B,OAAOtC;IACT;IACA,OAAO;QAAE4C,MAAMqD;QAAUD,YAAY;eAAIA;SAAW;IAAC;AACvD;AAEA,2EAA2E,GAC3E,OAAO,SAASI,qBACdxD,IAAY,EACZ+B,OAA2C;IAE3C,OAAOkB,sBAAsBjD,MAAM+B,SAAS/B,IAAI;AAClD;AAEA,0EAA0E,GAC1E,OAAO,SAASyD,0BAA0BL,UAA6B;IACrE,IAAIA,WAAWM,MAAM,KAAK,GAAG,OAAO;IACpC,MAAMC,QAAQP,WAAWM,MAAM;IAC/B,MAAME,OAAOD,UAAU,IAAI,yBAAyB,GAAGA,MAAM,qBAAqB,CAAC;IACnF,OAAO,GAAGC,KAAK,EAAE,EAAER,WAAW/D,GAAG,CAACQ,oBAAoBqB,IAAI,CAAC,OAAO;AACpE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/crm-email-templates.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * EMAIL TEMPLATES, SNIPPETS AND MERGE FIELDS (AGL-2658).\n *\n * A one-to-one email is a letter, and a rep writes the same three letters\n * all week: the follow-up, the proposal cover note, the \"still keen?\". A\n * TEMPLATE is one of those letters kept under a name — a subject and a body\n * the dialog fills in whole. A SNIPPET is a paragraph kept under a name —\n * a signature block, a pricing line — inserted where the caret is. Both\n * carry MERGE FIELDS, `{{contact.firstName}}` and the like, which the send\n * route fills from the record the email is about, so a template written\n * once reads as a letter to each person it is sent to.\n *\n * ## One resolver, run twice\n *\n * The server resolves at send time, off the documents it has already read\n * to find the recipient, and what it writes to the timeline is the letter\n * as it left. The dialog runs the SAME resolver over the same documents to\n * show the rep what will go out, so the preview and the message cannot\n * disagree. The resolver is pure and lives here, beside the model, so\n * neither caller can drift into its own grammar.\n *\n * ## What a field with no value does\n *\n * It renders as nothing. A template that greets `{{contact.firstName}}` is\n * sent to a contact known only by email as \"Hi ,\" — which is why the dialog\n * counts the empty fields and says so before the rep clicks Send, and why\n * an unknown field name renders as nothing too rather than as its own\n * braces: a typo in a merge field must not reach a customer as `{{contct.\n * firstName}}`. Nothing is escaped, because the mail is plain text.\n *\n * ## Shared or personal\n *\n * A template is either the team's — every CRM editor may use and change it\n * — or one person's, listed for its owner alone. The rules gate the writes\n * (`cloud/firebase-firestore.rules`); the listing hides a colleague's\n * personal rows the way a private saved view is hidden (AGL-2617), because\n * a rule per reader would need a query per reader.\n *==========================================*/\n\nimport {\n  contactDisplayName,\n  normalizeContactEmail,\n  readContactFacet,\n} from './contacts'\nimport { CRM_EMAIL_BODY_MAX, CRM_EMAIL_SUBJECT_MAX, type CrmScoped } from './crm'\n\n/** The most a template's name may hold. */\nexport const CRM_EMAIL_TEMPLATE_NAME_MAX = 80\n\n/**\n * The listing's window, and the ceiling the console's create respects.\n *\n * A LOOKUP rather than a list: the picker is a menu a rep opens, and two\n * hundred named letters for one workspace is past what anybody scrolls.\n * Bounded so the listen cannot grow with the org.\n */\nexport const CRM_EMAIL_TEMPLATES_LIMIT = 200\n\n/** A whole letter under a name, or a paragraph under one. */\nexport const CRM_EMAIL_TEMPLATE_KINDS = ['template', 'snippet'] as const\nexport type CrmEmailTemplateKind = (typeof CRM_EMAIL_TEMPLATE_KINDS)[number]\n\nexport const CRM_EMAIL_TEMPLATE_KIND_LABELS: Record<CrmEmailTemplateKind, string> = {\n  template: 'Template',\n  snippet: 'Snippet',\n}\n\nexport function isCrmEmailTemplateKind(value: unknown): value is CrmEmailTemplateKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_EMAIL_TEMPLATE_KINDS as readonly string[]).includes(value)\n  )\n}\n\n/** The team's, or one person's. */\nexport const CRM_EMAIL_TEMPLATE_VISIBILITIES = ['shared', 'personal'] as const\nexport type CrmEmailTemplateVisibility = (typeof CRM_EMAIL_TEMPLATE_VISIBILITIES)[number]\n\nexport const CRM_EMAIL_TEMPLATE_VISIBILITY_LABELS: Record<CrmEmailTemplateVisibility, string> = {\n  shared: 'Shared',\n  personal: 'Personal',\n}\n\nexport function isCrmEmailTemplateVisibility(\n  value: unknown,\n): value is CrmEmailTemplateVisibility {\n  return (\n    typeof value === 'string' &&\n    (CRM_EMAIL_TEMPLATE_VISIBILITIES as readonly string[]).includes(value)\n  )\n}\n\n/**\n * `orgs/{orgId}/crmEmailTemplates/{templateId}`.\n *\n * Scoped like a task (AGL-2637): under a site it carries that site's tokens\n * and `hostId`; written from the organization's own hub it carries the org\n * token and `hostId: null`, because a letter the whole workspace keeps is\n * not any one brand's. `ownerUid` is set on a personal template only, and\n * is the one member the listing shows it to.\n */\nexport interface CrmEmailTemplate extends Omit<CrmScoped, 'hostId'> {\n  /** The site it was written under, or `null` for the organization's own. */\n  hostId: string | null\n  name: string\n  /** The subject line a template fills in; `''` on a snippet. */\n  subject: string\n  /** Plain text, with merge fields — see {@link renderCrmMergeFields}. */\n  body: string\n  kind: CrmEmailTemplateKind\n  visibility: CrmEmailTemplateVisibility\n  /** The one member a personal template is listed for; absent on a shared one. */\n  ownerUid?: string\n  /** Who made it — `'api'` for a key, which has no uid. */\n  createdByUid: string\n  createdAtMs: number\n  updatedAtMs: number\n}\n\n/** A template as a listener hands it back: the document plus its id. */\nexport type CrmEmailTemplateRow = CrmEmailTemplate & { $id: string }\n\n/**\n * Whether a template belongs in `uid`'s menu: every shared one, and the\n * personal ones they own. A colleague's personal template is readable under\n * the rules and hidden here — see the module header.\n */\nexport function crmEmailTemplateIsListed(\n  template: Pick<CrmEmailTemplate, 'visibility' | 'ownerUid'>,\n  uid: string | null | undefined,\n): boolean {\n  if (template.visibility !== 'personal') return true\n  return Boolean(uid) && template.ownerUid === uid\n}\n\nconst asText = (value: unknown, max: number): string =>\n  typeof value === 'string' ? value.slice(0, max) : ''\n\nconst asMs = (value: unknown): number =>\n  typeof value === 'number' && Number.isFinite(value) ? value : 0\n\n/**\n * A stored document held to shape, for a listener that reads it raw.\n *\n * Lenient where the rules are not: a kind or a visibility the union does not\n * name reads as the default, because a row some other writer produced is\n * still a letter somebody kept, and dropping it from the menu would lose it.\n */\nexport function normalizeCrmEmailTemplate(\n  row: Record<string, unknown> | null | undefined,\n): CrmEmailTemplate {\n  const data = row ?? {}\n  const visibility = isCrmEmailTemplateVisibility(data['visibility'])\n    ? data['visibility']\n    : 'shared'\n  const ownerUid = asText(data['ownerUid'], 128)\n  return {\n    name: asText(data['name'], CRM_EMAIL_TEMPLATE_NAME_MAX).trim(),\n    subject: asText(data['subject'], CRM_EMAIL_SUBJECT_MAX),\n    body: asText(data['body'], CRM_EMAIL_BODY_MAX),\n    kind: isCrmEmailTemplateKind(data['kind']) ? data['kind'] : 'template',\n    visibility,\n    ...(visibility === 'personal' && ownerUid ? { ownerUid } : {}),\n    createdByUid: asText(data['createdByUid'], 128),\n    createdAtMs: asMs(data['createdAtMs']),\n    updatedAtMs: asMs(data['updatedAtMs']),\n    hostId: typeof data['hostId'] === 'string' ? data['hostId'] : null,\n    visibleTo: Array.isArray(data['visibleTo'])\n      ? (data['visibleTo'] as unknown[]).map(String)\n      : [],\n    createdAt: data['createdAt'],\n    updatedAt: data['updatedAt'],\n  }\n}\n\n/*==========================================\n * MERGE FIELDS.\n *==========================================*/\n\n/** The group a field belongs to, as the picker headings it. */\nexport type CrmMergeFieldGroup = 'Contact' | 'Lead' | 'Deal' | 'You' | 'Site'\n\nexport interface CrmMergeFieldDefinition {\n  key: string\n  label: string\n  group: CrmMergeFieldGroup\n}\n\n/**\n * Every field the resolver knows, in the order the picker offers them.\n *\n * A fixed list rather than a path into the document, because a merge field\n * is a promise about what a person will read: `contact.title` has to mean\n * the job title on every send, whatever the document happens to call it\n * this year, and a free path would let a template reach into a note or a\n * consent map.\n */\nexport const CRM_MERGE_FIELDS: readonly CrmMergeFieldDefinition[] = [\n  { key: 'contact.firstName', label: 'First name', group: 'Contact' },\n  { key: 'contact.lastName', label: 'Last name', group: 'Contact' },\n  { key: 'contact.name', label: 'Full name', group: 'Contact' },\n  { key: 'contact.email', label: 'Email address', group: 'Contact' },\n  { key: 'contact.company', label: 'Company', group: 'Contact' },\n  { key: 'contact.title', label: 'Job title', group: 'Contact' },\n  { key: 'lead.firstName', label: 'First name', group: 'Lead' },\n  { key: 'lead.lastName', label: 'Last name', group: 'Lead' },\n  { key: 'lead.name', label: 'Full name', group: 'Lead' },\n  { key: 'lead.email', label: 'Email address', group: 'Lead' },\n  { key: 'lead.company', label: 'Company', group: 'Lead' },\n  { key: 'lead.title', label: 'Job title', group: 'Lead' },\n  { key: 'deal.name', label: 'Deal name', group: 'Deal' },\n  { key: 'deal.amount', label: 'Deal amount', group: 'Deal' },\n  { key: 'sender.firstName', label: 'Your first name', group: 'You' },\n  { key: 'sender.name', label: 'Your name', group: 'You' },\n  { key: 'sender.email', label: 'Your email address', group: 'You' },\n  { key: 'site.name', label: 'Site name', group: 'Site' },\n]\n\n/** `{{key}}` — the one spelling the resolver reads and the picker inserts. */\nexport function crmMergeFieldToken(key: string): string {\n  return `{{${key}}}`\n}\n\n/**\n * What the resolver reads from: the documents as they are stored, so the\n * send route hands over what it already read and the dialog what it\n * fetched for the preview, with no projection in between to drift.\n */\nexport interface CrmMergeContext {\n  /** The contact document, `orgs/{orgId}/contacts/{id}`. */\n  contact?: Record<string, unknown> | null\n  /**\n   * The holder group whose facet names the contact — the sending site's,\n   * since a name, a job title and a company are one holder's knowledge of\n   * a person (`readContactFacet`). The canonical name is the fallback.\n   */\n  contactGroupId?: string | null\n  /** The lead document, `hosts/{hostId}/leads/{id}`. */\n  lead?: Record<string, unknown> | null\n  /** The deal document, `orgs/{orgId}/deals/{id}`. */\n  deal?: Record<string, unknown> | null\n  /** The person sending, as their token or session names them. */\n  sender?: { name?: string | null; email?: string | null } | null\n  /** The site the email leaves from. */\n  site?: { name?: string | null } | null\n  /**\n   * Fields a caller brings from a record of its own, keyed by the whole\n   * `group.field` name — a plugin's `enrollment.personalLine`, say.\n   *\n   * Read only for a group the resolver above does not know, so no caller can\n   * change what `contact.email` means. The fixed list is a promise about what\n   * a person will read, and this is where a caller that makes its own promise\n   * keeps it: the value is passed as written, never looked up by path.\n   */\n  extra?: Readonly<Record<string, string | null | undefined>> | null\n}\n\nexport interface CrmMergeResult {\n  /** The text with every field replaced — by its value, or by nothing. */\n  text: string\n  /** The fields that rendered as nothing, unique, in order of appearance. */\n  unresolved: string[]\n}\n\n/*\n * `{{ group.field }}`, spaces allowed inside the braces because a rep will\n * type them. A single brace pair or a bare word is left alone: a letter may\n * legitimately contain braces.\n */\nconst MERGE_FIELD_PATTERN = /\\{\\{\\s*([A-Za-z][A-Za-z0-9]*\\.[A-Za-z][A-Za-z0-9]*)\\s*\\}\\}/g\n\n/** The merge fields a text names, unique, in order of first appearance. */\nexport function crmMergeFieldsIn(text: string): string[] {\n  const seen = new Set<string>()\n  const fields: string[] = []\n  for (const match of String(text ?? '').matchAll(MERGE_FIELD_PATTERN)) {\n    const key = match[1]\n    if (seen.has(key)) continue\n    seen.add(key)\n    fields.push(key)\n  }\n  return fields\n}\n\nexport function hasCrmMergeFields(text: string): boolean {\n  MERGE_FIELD_PATTERN.lastIndex = 0\n  return MERGE_FIELD_PATTERN.test(String(text ?? ''))\n}\n\n/** A name as one string → its first word and the rest. */\nexport function splitPersonName(name: unknown): { firstName: string; lastName: string } {\n  const words = String(name ?? '')\n    .trim()\n    .split(/\\s+/)\n    .filter(Boolean)\n  return {\n    firstName: words[0] ?? '',\n    lastName: words.slice(1).join(' '),\n  }\n}\n\n/**\n * A deal's amount as a letter prints it.\n *\n * A fixed locale rather than the reader's, on purpose: the server has no\n * reader, and the preview has to print what the server will send. Cents\n * that are not a number render as nothing, so a deal with no value greets\n * nobody with \"$0.00\".\n */\nexport function formatCrmMergeAmount(cents: unknown, currency: unknown): string {\n  if (typeof cents !== 'number' || !Number.isFinite(cents)) return ''\n  const code = String(currency || 'usd').toUpperCase()\n  const amount = cents / 100\n  try {\n    return new Intl.NumberFormat('en-US', { style: 'currency', currency: code }).format(amount)\n  } catch {\n    return `${amount.toFixed(2)} ${code}`\n  }\n}\n\nconst text = (value: unknown): string => (typeof value === 'string' ? value.trim() : '')\n\n/** One field's value from the context, or `''` for anything it cannot answer. */\nfunction resolveCrmMergeField(key: string, context: CrmMergeContext): string {\n  const [group, field] = key.split('.')\n  switch (group) {\n    case 'contact': {\n      const contact = context.contact\n      if (!contact) return ''\n      const groupId = text(context.contactGroupId)\n      const facet = readContactFacet(contact, groupId)\n      const name = groupId\n        ? contactDisplayName(contact, groupId)\n        : text(contact['name'])\n      /*\n       * The holder's own first and last names when it keeps them (AGL-3515)\n       * — a two-word first name or a particle in a surname is then what the\n       * person wrote — and the display name split at its first space when\n       * it keeps neither.\n       */\n      const parts =\n        text(facet.firstName) || text(facet.lastName)\n          ? { firstName: text(facet.firstName), lastName: text(facet.lastName) }\n          : splitPersonName(name)\n      switch (field) {\n        case 'firstName':\n          return parts.firstName\n        case 'lastName':\n          return parts.lastName\n        case 'name':\n          return name\n        case 'email':\n          return normalizeContactEmail(contact['email']) ?? ''\n        case 'company':\n          return text(facet.companyName)\n        case 'title':\n          return text(facet.jobTitle)\n        default:\n          return ''\n      }\n    }\n    case 'lead': {\n      const lead = context.lead\n      if (!lead) return ''\n      /*\n       * The lead's own first and last names when it keeps them (AGL-3513),\n       * as the contact's are read; the name split at its first space when\n       * it keeps neither.\n       */\n      const parts =\n        text(lead['firstName']) || text(lead['lastName'])\n          ? { firstName: text(lead['firstName']), lastName: text(lead['lastName']) }\n          : splitPersonName(lead['name'])\n      switch (field) {\n        case 'firstName':\n          return parts.firstName\n        case 'lastName':\n          return parts.lastName\n        case 'name':\n          return text(lead['name'])\n        case 'email':\n          return normalizeContactEmail(lead['email']) ?? ''\n        // The lead's own profile (AGL-3231): the company as text, the title.\n        case 'company':\n          return text(lead['company'])\n        case 'title':\n          return text(lead['jobTitle'])\n        default:\n          return ''\n      }\n    }\n    case 'deal': {\n      const deal = context.deal\n      if (!deal) return ''\n      switch (field) {\n        case 'name':\n          return text(deal['title'])\n        case 'amount':\n          return formatCrmMergeAmount(deal['amountCents'], deal['currency'])\n        default:\n          return ''\n      }\n    }\n    case 'sender': {\n      const sender = context.sender\n      if (!sender) return ''\n      switch (field) {\n        case 'firstName':\n          return splitPersonName(sender.name).firstName\n        case 'name':\n          return text(sender.name)\n        case 'email':\n          return normalizeContactEmail(sender.email) ?? ''\n        default:\n          return ''\n      }\n    }\n    case 'site':\n      return field === 'name' ? text(context.site?.name) : ''\n    default: {\n      const extra = context.extra\n      return extra && Object.prototype.hasOwnProperty.call(extra, key)\n        ? text(extra[key])\n        : ''\n    }\n  }\n}\n\n/**\n * Every merge field in `text` replaced from `context`, and the ones that\n * had nothing to say. Pure, and never throws: a missing record, an unknown\n * field, a malformed context each render as nothing and are named in\n * `unresolved`.\n */\nexport function resolveCrmMergeFields(\n  text: string,\n  context: CrmMergeContext | null | undefined,\n): CrmMergeResult {\n  const source = String(text ?? '')\n  const ctx = context ?? {}\n  const unresolved = new Set<string>()\n  const rendered = source.replace(MERGE_FIELD_PATTERN, (_match, key: string) => {\n    const value = resolveCrmMergeField(key, ctx)\n    if (!value) unresolved.add(key)\n    return value\n  })\n  return { text: rendered, unresolved: [...unresolved] }\n}\n\n/** {@link resolveCrmMergeFields}, text alone — what the send route sends. */\nexport function renderCrmMergeFields(\n  text: string,\n  context: CrmMergeContext | null | undefined,\n): string {\n  return resolveCrmMergeFields(text, context).text\n}\n\n/** What the dialog says under a draft whose fields have nothing to fill. */\nexport function crmMergeUnresolvedMessage(unresolved: readonly string[]): string {\n  if (unresolved.length === 0) return ''\n  const count = unresolved.length\n  const noun = count === 1 ? '1 field has no value' : `${count} fields have no value`\n  return `${noun}: ${unresolved.map(crmMergeFieldToken).join(', ')}`\n}\n"],"names":["contactDisplayName","normalizeContactEmail","readContactFacet","CRM_EMAIL_BODY_MAX","CRM_EMAIL_SUBJECT_MAX","CRM_EMAIL_TEMPLATE_NAME_MAX","CRM_EMAIL_TEMPLATES_LIMIT","CRM_EMAIL_TEMPLATE_KINDS","CRM_EMAIL_TEMPLATE_KIND_LABELS","template","snippet","isCrmEmailTemplateKind","value","includes","CRM_EMAIL_TEMPLATE_VISIBILITIES","CRM_EMAIL_TEMPLATE_VISIBILITY_LABELS","shared","personal","isCrmEmailTemplateVisibility","crmEmailTemplateIsListed","uid","visibility","Boolean","ownerUid","asText","max","slice","asMs","Number","isFinite","normalizeCrmEmailTemplate","row","data","name","trim","subject","body","kind","createdByUid","createdAtMs","updatedAtMs","hostId","visibleTo","Array","isArray","map","String","createdAt","updatedAt","CRM_MERGE_FIELDS","key","label","group","crmMergeFieldToken","MERGE_FIELD_PATTERN","crmMergeFieldsIn","text","seen","Set","fields","match","matchAll","has","add","push","hasCrmMergeFields","lastIndex","test","splitPersonName","words","split","filter","firstName","lastName","join","formatCrmMergeAmount","cents","currency","code","toUpperCase","amount","Intl","NumberFormat","style","format","toFixed","resolveCrmMergeField","context","field","contact","groupId","contactGroupId","facet","parts","companyName","jobTitle","lead","deal","sender","email","site","extra","Object","prototype","hasOwnProperty","call","resolveCrmMergeFields","source","ctx","unresolved","rendered","replace","_match","renderCrmMergeFields","crmMergeUnresolvedMessage","length","count","noun"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAqC4C,GAE5C,SACEA,kBAAkB,EAClBC,qBAAqB,EACrBC,gBAAgB,QACX,gBAAY;AACnB,SAASC,kBAAkB,EAAEC,qBAAqB,QAAwB,WAAO;AAEjF,yCAAyC,GACzC,OAAO,MAAMC,8BAA8B,GAAE;AAE7C;;;;;;CAMC,GACD,OAAO,MAAMC,4BAA4B,IAAG;AAE5C,2DAA2D,GAC3D,OAAO,MAAMC,2BAA2B;IAAC;IAAY;CAAU,CAAS;AAGxE,OAAO,MAAMC,iCAAuE;IAClFC,UAAU;IACVC,SAAS;AACX,EAAC;AAED,OAAO,SAASC,uBAAuBC,KAAc;IACnD,OACE,OAAOA,UAAU,YACjB,AAACL,yBAA+CM,QAAQ,CAACD;AAE7D;AAEA,iCAAiC,GACjC,OAAO,MAAME,kCAAkC;IAAC;IAAU;CAAW,CAAS;AAG9E,OAAO,MAAMC,uCAAmF;IAC9FC,QAAQ;IACRC,UAAU;AACZ,EAAC;AAED,OAAO,SAASC,6BACdN,KAAc;IAEd,OACE,OAAOA,UAAU,YACjB,AAACE,gCAAsDD,QAAQ,CAACD;AAEpE;AAgCA;;;;CAIC,GACD,OAAO,SAASO,yBACdV,QAA2D,EAC3DW,GAA8B;IAE9B,IAAIX,SAASY,UAAU,KAAK,YAAY,OAAO;IAC/C,OAAOC,QAAQF,QAAQX,SAASc,QAAQ,KAAKH;AAC/C;AAEA,MAAMI,SAAS,CAACZ,OAAgBa,MAC9B,OAAOb,UAAU,WAAWA,MAAMc,KAAK,CAAC,GAAGD,OAAO;AAEpD,MAAME,OAAO,CAACf,QACZ,OAAOA,UAAU,YAAYgB,OAAOC,QAAQ,CAACjB,SAASA,QAAQ;AAEhE;;;;;;CAMC,GACD,OAAO,SAASkB,0BACdC,GAA+C;IAE/C,MAAMC,OAAOD,cAAAA,MAAO,CAAC;IACrB,MAAMV,aAAaH,6BAA6Bc,IAAI,CAAC,aAAa,IAC9DA,IAAI,CAAC,aAAa,GAClB;IACJ,MAAMT,WAAWC,OAAOQ,IAAI,CAAC,WAAW,EAAE;IAC1C,OAAO;QACLC,MAAMT,OAAOQ,IAAI,CAAC,OAAO,EAAE3B,6BAA6B6B,IAAI;QAC5DC,SAASX,OAAOQ,IAAI,CAAC,UAAU,EAAE5B;QACjCgC,MAAMZ,OAAOQ,IAAI,CAAC,OAAO,EAAE7B;QAC3BkC,MAAM1B,uBAAuBqB,IAAI,CAAC,OAAO,IAAIA,IAAI,CAAC,OAAO,GAAG;QAC5DX;OACIA,eAAe,cAAcE,WAAW;QAAEA;IAAS,IAAI,CAAC;QAC5De,cAAcd,OAAOQ,IAAI,CAAC,eAAe,EAAE;QAC3CO,aAAaZ,KAAKK,IAAI,CAAC,cAAc;QACrCQ,aAAab,KAAKK,IAAI,CAAC,cAAc;QACrCS,QAAQ,OAAOT,IAAI,CAAC,SAAS,KAAK,WAAWA,IAAI,CAAC,SAAS,GAAG;QAC9DU,WAAWC,MAAMC,OAAO,CAACZ,IAAI,CAAC,YAAY,IACtC,AAACA,IAAI,CAAC,YAAY,CAAea,GAAG,CAACC,UACrC,EAAE;QACNC,WAAWf,IAAI,CAAC,YAAY;QAC5BgB,WAAWhB,IAAI,CAAC,YAAY;;AAEhC;AAeA;;;;;;;;CAQC,GACD,OAAO,MAAMiB,mBAAuD;IAClE;QAAEC,KAAK;QAAqBC,OAAO;QAAcC,OAAO;IAAU;IAClE;QAAEF,KAAK;QAAoBC,OAAO;QAAaC,OAAO;IAAU;IAChE;QAAEF,KAAK;QAAgBC,OAAO;QAAaC,OAAO;IAAU;IAC5D;QAAEF,KAAK;QAAiBC,OAAO;QAAiBC,OAAO;IAAU;IACjE;QAAEF,KAAK;QAAmBC,OAAO;QAAWC,OAAO;IAAU;IAC7D;QAAEF,KAAK;QAAiBC,OAAO;QAAaC,OAAO;IAAU;IAC7D;QAAEF,KAAK;QAAkBC,OAAO;QAAcC,OAAO;IAAO;IAC5D;QAAEF,KAAK;QAAiBC,OAAO;QAAaC,OAAO;IAAO;IAC1D;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;IACtD;QAAEF,KAAK;QAAcC,OAAO;QAAiBC,OAAO;IAAO;IAC3D;QAAEF,KAAK;QAAgBC,OAAO;QAAWC,OAAO;IAAO;IACvD;QAAEF,KAAK;QAAcC,OAAO;QAAaC,OAAO;IAAO;IACvD;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;IACtD;QAAEF,KAAK;QAAeC,OAAO;QAAeC,OAAO;IAAO;IAC1D;QAAEF,KAAK;QAAoBC,OAAO;QAAmBC,OAAO;IAAM;IAClE;QAAEF,KAAK;QAAeC,OAAO;QAAaC,OAAO;IAAM;IACvD;QAAEF,KAAK;QAAgBC,OAAO;QAAsBC,OAAO;IAAM;IACjE;QAAEF,KAAK;QAAaC,OAAO;QAAaC,OAAO;IAAO;CACvD,CAAA;AAED,4EAA4E,GAC5E,OAAO,SAASC,mBAAmBH,GAAW;IAC5C,OAAO,CAAC,EAAE,EAAEA,IAAI,EAAE,CAAC;AACrB;AA2CA;;;;CAIC,GACD,MAAMI,sBAAsB;AAE5B,yEAAyE,GACzE,OAAO,SAASC,iBAAiBC,IAAY;IAC3C,MAAMC,OAAO,IAAIC;IACjB,MAAMC,SAAmB,EAAE;IAC3B,KAAK,MAAMC,SAASd,OAAOU,eAAAA,OAAQ,IAAIK,QAAQ,CAACP,qBAAsB;QACpE,MAAMJ,MAAMU,KAAK,CAAC,EAAE;QACpB,IAAIH,KAAKK,GAAG,CAACZ,MAAM;QACnBO,KAAKM,GAAG,CAACb;QACTS,OAAOK,IAAI,CAACd;IACd;IACA,OAAOS;AACT;AAEA,OAAO,SAASM,kBAAkBT,IAAY;IAC5CF,oBAAoBY,SAAS,GAAG;IAChC,OAAOZ,oBAAoBa,IAAI,CAACrB,OAAOU,eAAAA,OAAQ;AACjD;AAEA,wDAAwD,GACxD,OAAO,SAASY,gBAAgBnC,IAAa;QAM9BoC;IALb,MAAMA,QAAQvB,OAAOb,eAAAA,OAAQ,IAC1BC,IAAI,GACJoC,KAAK,CAAC,OACNC,MAAM,CAACjD;IACV,OAAO;QACLkD,SAAS,GAAEH,UAAAA,KAAK,CAAC,EAAE,YAARA,UAAY;QACvBI,UAAUJ,MAAM3C,KAAK,CAAC,GAAGgD,IAAI,CAAC;IAChC;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,SAASC,qBAAqBC,KAAc,EAAEC,QAAiB;IACpE,IAAI,OAAOD,UAAU,YAAY,CAAChD,OAAOC,QAAQ,CAAC+C,QAAQ,OAAO;IACjE,MAAME,OAAOhC,OAAO+B,YAAY,OAAOE,WAAW;IAClD,MAAMC,SAASJ,QAAQ;IACvB,IAAI;QACF,OAAO,IAAIK,KAAKC,YAAY,CAAC,SAAS;YAAEC,OAAO;YAAYN,UAAUC;QAAK,GAAGM,MAAM,CAACJ;IACtF,EAAE,eAAM;QACN,OAAO,GAAGA,OAAOK,OAAO,CAAC,GAAG,CAAC,EAAEP,MAAM;IACvC;AACF;AAEA,MAAMtB,OAAO,CAAC5C,QAA4B,OAAOA,UAAU,WAAWA,MAAMsB,IAAI,KAAK;AAErF,+EAA+E,GAC/E,SAASoD,qBAAqBpC,GAAW,EAAEqC,OAAwB;IACjE,MAAM,CAACnC,OAAOoC,MAAM,GAAGtC,IAAIoB,KAAK,CAAC;IACjC,OAAQlB;QACN,KAAK;YAAW;gBACd,MAAMqC,UAAUF,QAAQE,OAAO;gBAC/B,IAAI,CAACA,SAAS,OAAO;gBACrB,MAAMC,UAAUlC,KAAK+B,QAAQI,cAAc;gBAC3C,MAAMC,QAAQ1F,iBAAiBuF,SAASC;gBACxC,MAAMzD,OAAOyD,UACT1F,mBAAmByF,SAASC,WAC5BlC,KAAKiC,OAAO,CAAC,OAAO;gBACxB;;;;;OAKC,GACD,MAAMI,QACJrC,KAAKoC,MAAMpB,SAAS,KAAKhB,KAAKoC,MAAMnB,QAAQ,IACxC;oBAAED,WAAWhB,KAAKoC,MAAMpB,SAAS;oBAAGC,UAAUjB,KAAKoC,MAAMnB,QAAQ;gBAAE,IACnEL,gBAAgBnC;gBACtB,OAAQuD;oBACN,KAAK;wBACH,OAAOK,MAAMrB,SAAS;oBACxB,KAAK;wBACH,OAAOqB,MAAMpB,QAAQ;oBACvB,KAAK;wBACH,OAAOxC;oBACT,KAAK;4BACIhC;wBAAP,QAAOA,yBAAAA,sBAAsBwF,OAAO,CAAC,QAAQ,aAAtCxF,yBAA2C;oBACpD,KAAK;wBACH,OAAOuD,KAAKoC,MAAME,WAAW;oBAC/B,KAAK;wBACH,OAAOtC,KAAKoC,MAAMG,QAAQ;oBAC5B;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAQ;gBACX,MAAMC,OAAOT,QAAQS,IAAI;gBACzB,IAAI,CAACA,MAAM,OAAO;gBAClB;;;;OAIC,GACD,MAAMH,QACJrC,KAAKwC,IAAI,CAAC,YAAY,KAAKxC,KAAKwC,IAAI,CAAC,WAAW,IAC5C;oBAAExB,WAAWhB,KAAKwC,IAAI,CAAC,YAAY;oBAAGvB,UAAUjB,KAAKwC,IAAI,CAAC,WAAW;gBAAE,IACvE5B,gBAAgB4B,IAAI,CAAC,OAAO;gBAClC,OAAQR;oBACN,KAAK;wBACH,OAAOK,MAAMrB,SAAS;oBACxB,KAAK;wBACH,OAAOqB,MAAMpB,QAAQ;oBACvB,KAAK;wBACH,OAAOjB,KAAKwC,IAAI,CAAC,OAAO;oBAC1B,KAAK;4BACI/F;wBAAP,QAAOA,0BAAAA,sBAAsB+F,IAAI,CAAC,QAAQ,aAAnC/F,0BAAwC;oBACjD,qEAAqE;oBACrE,KAAK;wBACH,OAAOuD,KAAKwC,IAAI,CAAC,UAAU;oBAC7B,KAAK;wBACH,OAAOxC,KAAKwC,IAAI,CAAC,WAAW;oBAC9B;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAQ;gBACX,MAAMC,OAAOV,QAAQU,IAAI;gBACzB,IAAI,CAACA,MAAM,OAAO;gBAClB,OAAQT;oBACN,KAAK;wBACH,OAAOhC,KAAKyC,IAAI,CAAC,QAAQ;oBAC3B,KAAK;wBACH,OAAOtB,qBAAqBsB,IAAI,CAAC,cAAc,EAAEA,IAAI,CAAC,WAAW;oBACnE;wBACE,OAAO;gBACX;YACF;QACA,KAAK;YAAU;gBACb,MAAMC,SAASX,QAAQW,MAAM;gBAC7B,IAAI,CAACA,QAAQ,OAAO;gBACpB,OAAQV;oBACN,KAAK;wBACH,OAAOpB,gBAAgB8B,OAAOjE,IAAI,EAAEuC,SAAS;oBAC/C,KAAK;wBACH,OAAOhB,KAAK0C,OAAOjE,IAAI;oBACzB,KAAK;4BACIhC;wBAAP,QAAOA,0BAAAA,sBAAsBiG,OAAOC,KAAK,aAAlClG,0BAAuC;oBAChD;wBACE,OAAO;gBACX;YACF;QACA,KAAK;gBAC4BsF;YAA/B,OAAOC,UAAU,SAAShC,MAAK+B,gBAAAA,QAAQa,IAAI,qBAAZb,cAActD,IAAI,IAAI;QACvD;YAAS;gBACP,MAAMoE,QAAQd,QAAQc,KAAK;gBAC3B,OAAOA,SAASC,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACJ,OAAOnD,OACxDM,KAAK6C,KAAK,CAACnD,IAAI,IACf;YACN;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASwD,sBACdlD,IAAY,EACZ+B,OAA2C;IAE3C,MAAMoB,SAAS7D,OAAOU,eAAAA,OAAQ;IAC9B,MAAMoD,MAAMrB,kBAAAA,UAAW,CAAC;IACxB,MAAMsB,aAAa,IAAInD;IACvB,MAAMoD,WAAWH,OAAOI,OAAO,CAACzD,qBAAqB,CAAC0D,QAAQ9D;QAC5D,MAAMtC,QAAQ0E,qBAAqBpC,KAAK0D;QACxC,IAAI,CAAChG,OAAOiG,WAAW9C,GAAG,CAACb;QAC3B,OAAOtC;IACT;IACA,OAAO;QAAE4C,MAAMsD;QAAUD,YAAY;eAAIA;SAAW;IAAC;AACvD;AAEA,2EAA2E,GAC3E,OAAO,SAASI,qBACdzD,IAAY,EACZ+B,OAA2C;IAE3C,OAAOmB,sBAAsBlD,MAAM+B,SAAS/B,IAAI;AAClD;AAEA,0EAA0E,GAC1E,OAAO,SAAS0D,0BAA0BL,UAA6B;IACrE,IAAIA,WAAWM,MAAM,KAAK,GAAG,OAAO;IACpC,MAAMC,QAAQP,WAAWM,MAAM;IAC/B,MAAME,OAAOD,UAAU,IAAI,yBAAyB,GAAGA,MAAM,qBAAqB,CAAC;IACnF,OAAO,GAAGC,KAAK,EAAE,EAAER,WAAWhE,GAAG,CAACQ,oBAAoBqB,IAAI,CAAC,OAAO;AACpE"}

package/src/lib/app-utils/crm-kinds.d.ts

@@ -59,6 +59,8 @@ export declare function isCrmTaskKind(value: unknown): value is CrmTaskKind;
  * nobody will find on the list when it comes due.
  */
 export declare const CRM_TASK_MAX_DUE_DAYS = 365;
+/** Longest tag an automation may write — the console's own tag field cap. */
+export declare const CONTACT_TAG_MAX_LENGTH = 60;
 /**
  * What a person can log, in the order the picker offers them (AGL-2600).
  *

package/src/lib/app-utils/crm-kinds.js

@@ -70,6 +70,7 @@ export function isCrmTaskKind(value) {
  * an annual renewal check, and a task dated further out than that is one
  * nobody will find on the list when it comes due.
  */ export const CRM_TASK_MAX_DUE_DAYS = 365;
+/** Longest tag an automation may write — the console's own tag field cap. */ export const CONTACT_TAG_MAX_LENGTH = 60;
 /**
  * What a person can log, in the order the picker offers them (AGL-2600).
  *

package/src/lib/app-utils/crm-kinds.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/crm-kinds.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The CRM's fixed vocabularies — lifecycle stages, task kinds, activity\n * kinds — and the guards that check a value against them.\n *\n * A leaf module with no imports, re-exported by `crm.ts`, so every existing\n * `crm` import keeps working. It is separate because the actions builder\n * validates an automation step against these lists, and the actions builder\n * ships with the element renderer to every published page: importing them\n * from `crm.ts` put the whole CRM record model — companies, deals, tasks,\n * the contact facet helpers it reads — in front of every visitor to check a\n * string against a four-item list.\n *\n * Only the lists, their types, their guards and the task horizon live here.\n * The on-screen labels stay in `crm.ts`, beside the records they describe.\n */\n\n/**\n * Where a person sits in the relationship, as one of a fixed list.\n *\n * A fixed list rather than free text so that a report can count people per\n * stage and a filter can select one, and in the order a person usually moves\n * through them so a picker reads as a progression. `other` is the escape\n * hatch for a business whose funnel has a step none of these name; it is a\n * deliberate stage, not an absent one.\n */\nexport const CONTACT_LIFECYCLE_STAGES = [\n  'subscriber',\n  'lead',\n  'marketing-qualified',\n  'sales-qualified',\n  'opportunity',\n  'customer',\n  'evangelist',\n  'other',\n] as const\n\nexport type ContactLifecycleStage = (typeof CONTACT_LIFECYCLE_STAGES)[number]\n\nexport function isContactLifecycleStage(\n  value: unknown,\n): value is ContactLifecycleStage {\n  return (\n    typeof value === 'string' &&\n    (CONTACT_LIFECYCLE_STAGES as readonly string[]).includes(value)\n  )\n}\n\n/**\n * What a task is, as a fixed list.\n *\n * A const array rather than a bare union because two surfaces have to\n * enumerate it — the task form's picker and the automation step that creates\n * a task without a form — and a union cannot be iterated at run time.\n */\nexport const CRM_TASK_KINDS = ['call', 'email', 'meeting', 'todo'] as const\nexport type CrmTaskKind = (typeof CRM_TASK_KINDS)[number]\n\nexport function isCrmTaskKind(value: unknown): value is CrmTaskKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_TASK_KINDS as readonly string[]).includes(value)\n  )\n}\n\n/**\n * How far ahead an automation may date a task, in days.\n *\n * A year, because the longest follow-up anybody schedules from a trigger is\n * an annual renewal check, and a task dated further out than that is one\n * nobody will find on the list when it comes due.\n */\nexport const CRM_TASK_MAX_DUE_DAYS = 365\n\n/**\n * What a person can log, in the order the picker offers them (AGL-2600).\n *\n * A fixed list rather than free text for the reason the lifecycle stages are\n * one: a report counts calls per week and a filter selects meetings, and\n * neither can be done over a string somebody typed. `note` is the plain\n * entry — something worth writing down that was not a conversation — and\n * `other` the escape hatch for the kind none of these name.\n */\nexport const CRM_ACTIVITY_KINDS = ['call', 'email', 'meeting', 'note', 'other'] as const\n\nexport type CrmActivityKind = (typeof CRM_ACTIVITY_KINDS)[number]\n\nexport function isCrmActivityKind(value: unknown): value is CrmActivityKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_ACTIVITY_KINDS as readonly string[]).includes(value)\n  )\n}\n"],"names":["CONTACT_LIFECYCLE_STAGES","isContactLifecycleStage","value","includes","CRM_TASK_KINDS","isCrmTaskKind","CRM_TASK_MAX_DUE_DAYS","CRM_ACTIVITY_KINDS","isCrmActivityKind"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;CAcC,GAED;;;;;;;;CAQC,GACD,OAAO,MAAMA,2BAA2B;IACtC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAIV,OAAO,SAASC,wBACdC,KAAc;IAEd,OACE,OAAOA,UAAU,YACjB,AAACF,yBAA+CG,QAAQ,CAACD;AAE7D;AAEA;;;;;;CAMC,GACD,OAAO,MAAME,iBAAiB;IAAC;IAAQ;IAAS;IAAW;CAAO,CAAS;AAG3E,OAAO,SAASC,cAAcH,KAAc;IAC1C,OACE,OAAOA,UAAU,YACjB,AAACE,eAAqCD,QAAQ,CAACD;AAEnD;AAEA;;;;;;CAMC,GACD,OAAO,MAAMI,wBAAwB,IAAG;AAExC;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB;IAAC;IAAQ;IAAS;IAAW;IAAQ;CAAQ,CAAS;AAIxF,OAAO,SAASC,kBAAkBN,KAAc;IAC9C,OACE,OAAOA,UAAU,YACjB,AAACK,mBAAyCJ,QAAQ,CAACD;AAEvD"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/crm-kinds.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The CRM's fixed vocabularies — lifecycle stages, task kinds, activity\n * kinds — and the guards that check a value against them.\n *\n * A leaf module with no imports, re-exported by `crm.ts`, so every existing\n * `crm` import keeps working. It is separate because the actions builder\n * validates an automation step against these lists, and the actions builder\n * ships with the element renderer to every published page: importing them\n * from `crm.ts` put the whole CRM record model — companies, deals, tasks,\n * the contact facet helpers it reads — in front of every visitor to check a\n * string against a four-item list.\n *\n * Only the lists, their types, their guards and the task horizon live here.\n * The on-screen labels stay in `crm.ts`, beside the records they describe.\n */\n\n/**\n * Where a person sits in the relationship, as one of a fixed list.\n *\n * A fixed list rather than free text so that a report can count people per\n * stage and a filter can select one, and in the order a person usually moves\n * through them so a picker reads as a progression. `other` is the escape\n * hatch for a business whose funnel has a step none of these name; it is a\n * deliberate stage, not an absent one.\n */\nexport const CONTACT_LIFECYCLE_STAGES = [\n  'subscriber',\n  'lead',\n  'marketing-qualified',\n  'sales-qualified',\n  'opportunity',\n  'customer',\n  'evangelist',\n  'other',\n] as const\n\nexport type ContactLifecycleStage = (typeof CONTACT_LIFECYCLE_STAGES)[number]\n\nexport function isContactLifecycleStage(\n  value: unknown,\n): value is ContactLifecycleStage {\n  return (\n    typeof value === 'string' &&\n    (CONTACT_LIFECYCLE_STAGES as readonly string[]).includes(value)\n  )\n}\n\n/**\n * What a task is, as a fixed list.\n *\n * A const array rather than a bare union because two surfaces have to\n * enumerate it — the task form's picker and the automation step that creates\n * a task without a form — and a union cannot be iterated at run time.\n */\nexport const CRM_TASK_KINDS = ['call', 'email', 'meeting', 'todo'] as const\nexport type CrmTaskKind = (typeof CRM_TASK_KINDS)[number]\n\nexport function isCrmTaskKind(value: unknown): value is CrmTaskKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_TASK_KINDS as readonly string[]).includes(value)\n  )\n}\n\n/**\n * How far ahead an automation may date a task, in days.\n *\n * A year, because the longest follow-up anybody schedules from a trigger is\n * an annual renewal check, and a task dated further out than that is one\n * nobody will find on the list when it comes due.\n */\nexport const CRM_TASK_MAX_DUE_DAYS = 365\n\n/** Longest tag an automation may write — the console's own tag field cap. */\nexport const CONTACT_TAG_MAX_LENGTH = 60\n\n/**\n * What a person can log, in the order the picker offers them (AGL-2600).\n *\n * A fixed list rather than free text for the reason the lifecycle stages are\n * one: a report counts calls per week and a filter selects meetings, and\n * neither can be done over a string somebody typed. `note` is the plain\n * entry — something worth writing down that was not a conversation — and\n * `other` the escape hatch for the kind none of these name.\n */\nexport const CRM_ACTIVITY_KINDS = ['call', 'email', 'meeting', 'note', 'other'] as const\n\nexport type CrmActivityKind = (typeof CRM_ACTIVITY_KINDS)[number]\n\nexport function isCrmActivityKind(value: unknown): value is CrmActivityKind {\n  return (\n    typeof value === 'string' &&\n    (CRM_ACTIVITY_KINDS as readonly string[]).includes(value)\n  )\n}\n"],"names":["CONTACT_LIFECYCLE_STAGES","isContactLifecycleStage","value","includes","CRM_TASK_KINDS","isCrmTaskKind","CRM_TASK_MAX_DUE_DAYS","CONTACT_TAG_MAX_LENGTH","CRM_ACTIVITY_KINDS","isCrmActivityKind"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;CAcC,GAED;;;;;;;;CAQC,GACD,OAAO,MAAMA,2BAA2B;IACtC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAIV,OAAO,SAASC,wBACdC,KAAc;IAEd,OACE,OAAOA,UAAU,YACjB,AAACF,yBAA+CG,QAAQ,CAACD;AAE7D;AAEA;;;;;;CAMC,GACD,OAAO,MAAME,iBAAiB;IAAC;IAAQ;IAAS;IAAW;CAAO,CAAS;AAG3E,OAAO,SAASC,cAAcH,KAAc;IAC1C,OACE,OAAOA,UAAU,YACjB,AAACE,eAAqCD,QAAQ,CAACD;AAEnD;AAEA;;;;;;CAMC,GACD,OAAO,MAAMI,wBAAwB,IAAG;AAExC,2EAA2E,GAC3E,OAAO,MAAMC,yBAAyB,GAAE;AAExC;;;;;;;;CAQC,GACD,OAAO,MAAMC,qBAAqB;IAAC;IAAQ;IAAS;IAAW;IAAQ;CAAQ,CAAS;AAIxF,OAAO,SAASC,kBAAkBP,KAAc;IAC9C,OACE,OAAOA,UAAU,YACjB,AAACM,mBAAyCL,QAAQ,CAACD;AAEvD"}