@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/model/tasks-csv.js

@@ -0,0 +1,28 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The tasks CSV — one file from the section's Export button and the bulk
+ * bar's (AGL-2621).
+ *
+ * A task hangs off a contact, a company or a deal by id; the file names
+ * each by the name the list already resolved for the row, so a spreadsheet
+ * reads "Acme" and not a document id. The assignee is written by address
+ * for the same reason. A due date is an INSTANT — a task due at nine is due
+ * at nine in the assignee's zone — so it is written as an ISO timestamp,
+ * and a spreadsheet renders it in whatever zone it is opened in.
+ */ /* The writer moved to `@aglyn/aglyn` under AGL-2662 — see `deals-csv.ts`. */ export { TASK_CSV_COLUMNS, tasksCsv } from "@aglyn/aglyn";
+
+//# sourceMappingURL=tasks-csv.js.map

package/src/lib/model/tasks-csv.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/tasks-csv.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The tasks CSV — one file from the section's Export button and the bulk\n * bar's (AGL-2621).\n *\n * A task hangs off a contact, a company or a deal by id; the file names\n * each by the name the list already resolved for the row, so a spreadsheet\n * reads \"Acme\" and not a document id. The assignee is written by address\n * for the same reason. A due date is an INSTANT — a task due at nine is due\n * at nine in the assignee's zone — so it is written as an ISO timestamp,\n * and a spreadsheet renders it in whatever zone it is opened in.\n */\n\n/* The writer moved to `@aglyn/aglyn` under AGL-2662 — see `deals-csv.ts`. */\nexport {\n  TASK_CSV_COLUMNS,\n  tasksCsv,\n  type TaskCsvOptions,\n  type TaskCsvRow,\n} from '@aglyn/aglyn'\n"],"names":["TASK_CSV_COLUMNS","tasksCsv"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;CAUC,GAED,2EAA2E,GAC3E,SACEA,gBAAgB,EAChBC,QAAQ,QAGH,eAAc"}

package/src/lib/plugin.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * CRM feature plugin (AGL-395, the hub since AGL-2595). Console-only — its
+ * records live in Firestore and have no canvas element, so there is no UI
+ * bundle. The console half declares the CRM nav + hub through the
+ * ConsoleExtension registry (release_crm gate via the nav tab); the
+ * contacts section reads the `contactsPerHost` quota off the shell-passed
+ * `org`.
+ *
+ * The plugin id is `crm` (AGL-2595). It was `contacts` while the surface was
+ * one list; the id is persisted in every org's `enabledPlugins` and every
+ * host's `disabledPlugins`, so the runtime read the old value as this one
+ * until the stored documents had been rewritten, and the alias was retired
+ * once that backfill reported nothing left (AGL-2614). The `/contacts`
+ * address is a URL, not a stored id, and the nav item keeps redirecting it.
+ */
+export declare function registerCrmConsole(): void;

package/src/lib/plugin.js

@@ -0,0 +1,208 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { mdiCardAccountDetailsOutline } from "@aglyn/shared-data-mdi";
+import { lazy } from "react";
+import { CRM_CONSOLE_SECTIONS } from "./components/crm-console-sections.js";
+import { CrmGlanceCard } from "./components/crm-glance-card.js";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+import { withCrmOrgMount } from "./hooks/use-crm-org-mount.js";
+import { registerCrmRecordRoutes } from "./model/crm-record-routes.js";
+import { registerPluginZone } from "@aglyn/aglyn/plugin-manager/plugin-zones";
+import { CRM_RECORD_ATTRIBUTION_ZONE } from "./components/crm-attribution-zone.js";
+import { CRM_RECORD_BOOKING_ZONE } from "./components/crm-booking-zone.js";
+/** Code-split: the CRM hub only loads when opened. */ const CrmConsolePage = lazy(()=>import("./components/crm-console-page.js"));
+/** The dashboard glance, split the same way: it loads where the slot mounts it. */ /** Where a form's fields save on a contact, drawn on the form's own page. */ const FormContactFieldsCard = lazy(()=>import("./components/form-contact-fields-card.js"));
+const CrmTasksDueCard = lazy(()=>import("./components/crm-tasks-due-card.js"));
+/**
+ * CRM feature plugin (AGL-395, the hub since AGL-2595). Console-only — its
+ * records live in Firestore and have no canvas element, so there is no UI
+ * bundle. The console half declares the CRM nav + hub through the
+ * ConsoleExtension registry (release_crm gate via the nav tab); the
+ * contacts section reads the `contactsPerHost` quota off the shell-passed
+ * `org`.
+ *
+ * The plugin id is `crm` (AGL-2595). It was `contacts` while the surface was
+ * one list; the id is persisted in every org's `enabledPlugins` and every
+ * host's `disabledPlugins`, so the runtime read the old value as this one
+ * until the stored documents had been rewritten, and the alias was retired
+ * once that backfill reported nothing left (AGL-2614). The `/contacts`
+ * address is a URL, not a stored id, and the nav item keeps redirecting it.
+ */ export function registerCrmConsole() {
+    registerCrmRecordRoutes();
+    registerPluginZone({
+        zone: CRM_RECORD_BOOKING_ZONE,
+        label: 'Book a meeting from a CRM record',
+        surface: 'console',
+        // One control in a record header's row of actions, and one beside the
+        // composer's fields: the page lays them out, so the zone adds nothing.
+        layout: 'bare',
+        description: 'In a record’s header and beside the one-to-one composer. A widget here offers the site’s bookable services and the link a visitor books one at; it is handed the site, the record and, from the composer, a way to insert the chosen link. It writes nothing.'
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    registerPluginZone({
+        zone: CRM_RECORD_ATTRIBUTION_ZONE,
+        label: 'Where a CRM record came from',
+        surface: 'console',
+        description: 'On a contact’s page and in a lead’s history. A widget here says which campaign or link brought the person; it is handed the site, what the record is and its id, and it writes nothing.'
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    Aglyn.registerConsoleExtension({
+        pluginId: BUNDLE_ID,
+        displayName: 'CRM',
+        /*
+     * WHO may open the CRM, declared so the shell enforces it.
+     *
+     * `navTabId` below is a release flag, not authorization: it says whether
+     * the surface has shipped, and `FeatureGate` reads it as
+     * `released || isStaff`. Nothing above this page decided who among a
+     * workspace's members may read it, and the page is a full editor over
+     * org-shared people data — names, addresses, order history, notes,
+     * consent, and a CSV export of all of it.
+     *
+     * `data.manage` rather than a key of this plugin's own, because it is
+     * the catalog key whose subject is exactly this data. The Firestore
+     * rules place contacts in the org-shared data block with datasets and
+     * gate writes on `canWriteOrgData()` — owner, admin, editor — which is
+     * the population `data.manage` defaults to, so the console gate and the
+     * rules agree on the built-in roles by construction. A custom role or a
+     * per-member override then narrows the console further, and the rules
+     * stay the boundary for the data itself.
+     *
+     * Minting a `contacts.*` key instead would advertise a control that does
+     * not exist. Console contact writes are client-direct against the rules,
+     * so a new key would have no server enforcement point to sit on, and a
+     * permission a customer can untick that changes nothing is worse than
+     * its absence.
+     *
+     * A SITE COLLABORATOR holding it reaches this page deliberately. They
+     * are a real org member document, so this gate is the first thing that
+     * has ever asked about them here — and the answer is yes, scoped: the
+     * listener filters on `visibleTo`, the rules prove the same predicate
+     * per document, and every field the page shows is read through the
+     * viewing group's own facet. Refusing them outright would delete a
+     * shipped capability rather than close a hole.
+     */ permission: 'data.manage',
+        /*
+     * WHAT the workspace must have bought (AGL-2851). The CRM is included
+     * from Starter and a Free workspace has none of it, so the flag is
+     * declared once, here, and the shell refuses every surface this
+     * registers on a plan without it: the hub body at both mounts, every
+     * section and record beneath it, drawn locked beside the upgrade notice,
+     * and the dashboard cards. The nav tab stays, as every plan-locked tab
+     * does, because it is the way to that notice. The CRM's routes, `/v1`
+     * and the Firestore rules ask the same question where the data is
+     * (`server/suite-gate.ts`).
+     */ featureFlag: 'crm',
+        /*
+     * Dashboard cards (AGL-2599, AGL-2604): the site dashboard's `hostDashboard`
+     * slot composes this extension's permission over each, so a card appears
+     * only where the CRM is enabled and only for a reader who may open it —
+     * registered here rather than imported by the dashboard so the shell's
+     * enablement and entitlement gate decides whether a site that never turned
+     * the CRM on sees them, the rule every card on that row follows. The tasks
+     * card is a glance at the reader's own overdue and due-today work and
+     * renders nothing on a workspace that has never made a task; the glance
+     * card is four server-counted figures, each a link into the hub.
+     *
+     * Both name `features.crm`, as the extension does (AGL-2611, AGL-2851):
+     * the slot composes the two, so a plan without the CRM gets neither card
+     * — absent, not upsold, the treatment every gated card gets.
+     *
+     * The same two cards again on the organization's `orgDashboard` slot
+     * (AGL-2636) — the org's sites page — under the same flag, with the same
+     * ids: the id names the card, and it is one card totaling the whole
+     * organization there instead of one site. The shell hands that slot the
+     * org mount as a prop, and `withCrmOrgMount` is what puts the mount's
+     * provider around each card, since the sites page cannot import one.
+     */ widgets: [
+            // Which contact field each of a form's fields saves to, on the form's
+            // own page. The forms plugin hosts the zone and writes the form
+            // document; what a contact's fields ARE is this plugin's, so the card
+            // is too.
+            {
+                slot: 'formContactFields',
+                widgetId: 'crm-form-contact-fields',
+                title: 'Saves to contact fields',
+                // A contact's custom fields are part of the suite, so a workspace
+                // without it has none to map a form's field onto.
+                featureFlag: 'crm',
+                Component: FormContactFieldsCard
+            },
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,
+                widgetId: 'crm-tasks-due',
+                title: 'Tasks due',
+                featureFlag: 'crm',
+                Component: CrmTasksDueCard
+            },
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,
+                widgetId: 'crm-glance',
+                title: 'CRM at a glance',
+                featureFlag: 'crm',
+                Component: CrmGlanceCard
+            },
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,
+                widgetId: 'crm-tasks-due',
+                title: 'Tasks due',
+                featureFlag: 'crm',
+                Component: withCrmOrgMount(CrmTasksDueCard)
+            },
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,
+                widgetId: 'crm-glance',
+                title: 'CRM at a glance',
+                featureFlag: 'crm',
+                Component: withCrmOrgMount(CrmGlanceCard)
+            }
+        ],
+        navItems: [
+            {
+                label: 'CRM',
+                href: '/crm',
+                // The address the surface had while it was one list. A link kept
+                // from then — a bookmark, a docs page, an email — still opens the
+                // hub rather than the shell's "not available" notice.
+                legacyHrefs: [
+                    '/contacts'
+                ],
+                // Sections as ROUTES (AGL-2595): each is a real URL the shell
+                // resolves and gates, so the page mounts the one being read and a
+                // bare `/crm` lands on the first. Every section inherits this
+                // item's `release_crm` gate.
+                sections: CRM_CONSOLE_SECTIONS,
+                navTabId: 'nav-tab-contacts',
+                icon: {
+                    path: mdiCardAccountDetailsOutline.path
+                },
+                header: {
+                    title: 'CRM',
+                    icon: {
+                        path: mdiCardAccountDetailsOutline.path
+                    },
+                    docsTopic: 'crm'
+                },
+                Component: CrmConsolePage
+            }
+        ]
+    });
+}
+
+//# sourceMappingURL=plugin.js.map

package/src/lib/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiCardAccountDetailsOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nimport { CRM_CONSOLE_SECTIONS } from './components/crm-console-sections'\nimport { CrmGlanceCard } from './components/crm-glance-card'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { withCrmOrgMount } from './hooks/use-crm-org-mount'\nimport { registerCrmRecordRoutes } from './model/crm-record-routes'\nimport { registerPluginZone } from '@aglyn/aglyn/plugin-manager/plugin-zones'\nimport { CRM_RECORD_ATTRIBUTION_ZONE } from './components/crm-attribution-zone'\nimport { CRM_RECORD_BOOKING_ZONE } from './components/crm-booking-zone'\n\n/** Code-split: the CRM hub only loads when opened. */\nconst CrmConsolePage = lazy(\n  () => import('./components/crm-console-page'),\n)\n/** The dashboard glance, split the same way: it loads where the slot mounts it. */\n/** Where a form's fields save on a contact, drawn on the form's own page. */\nconst FormContactFieldsCard = lazy(\n  () => import('./components/form-contact-fields-card'),\n)\n\nconst CrmTasksDueCard = lazy(\n  () => import('./components/crm-tasks-due-card'),\n)\n\n/**\n * CRM feature plugin (AGL-395, the hub since AGL-2595). Console-only — its\n * records live in Firestore and have no canvas element, so there is no UI\n * bundle. The console half declares the CRM nav + hub through the\n * ConsoleExtension registry (release_crm gate via the nav tab); the\n * contacts section reads the `contactsPerHost` quota off the shell-passed\n * `org`.\n *\n * The plugin id is `crm` (AGL-2595). It was `contacts` while the surface was\n * one list; the id is persisted in every org's `enabledPlugins` and every\n * host's `disabledPlugins`, so the runtime read the old value as this one\n * until the stored documents had been rewritten, and the alias was retired\n * once that backfill reported nothing left (AGL-2614). The `/contacts`\n * address is a URL, not a stored id, and the nav item keeps redirecting it.\n */\nexport function registerCrmConsole(): void {\n  registerCrmRecordRoutes()\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_BOOKING_ZONE,\n      label: 'Book a meeting from a CRM record',\n      surface: 'console',\n      // One control in a record header's row of actions, and one beside the\n      // composer's fields: the page lays them out, so the zone adds nothing.\n      layout: 'bare',\n      description:\n        'In a record’s header and beside the one-to-one composer. A widget here offers the site’s bookable services and the link a visitor books one at; it is handed the site, the record and, from the composer, a way to insert the chosen link. It writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_ATTRIBUTION_ZONE,\n      label: 'Where a CRM record came from',\n      surface: 'console',\n      description:\n        'On a contact’s page and in a lead’s history. A widget here says which campaign or link brought the person; it is handed the site, what the record is and its id, and it writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'CRM',\n    /*\n     * WHO may open the CRM, declared so the shell enforces it.\n     *\n     * `navTabId` below is a release flag, not authorization: it says whether\n     * the surface has shipped, and `FeatureGate` reads it as\n     * `released || isStaff`. Nothing above this page decided who among a\n     * workspace's members may read it, and the page is a full editor over\n     * org-shared people data — names, addresses, order history, notes,\n     * consent, and a CSV export of all of it.\n     *\n     * `data.manage` rather than a key of this plugin's own, because it is\n     * the catalog key whose subject is exactly this data. The Firestore\n     * rules place contacts in the org-shared data block with datasets and\n     * gate writes on `canWriteOrgData()` — owner, admin, editor — which is\n     * the population `data.manage` defaults to, so the console gate and the\n     * rules agree on the built-in roles by construction. A custom role or a\n     * per-member override then narrows the console further, and the rules\n     * stay the boundary for the data itself.\n     *\n     * Minting a `contacts.*` key instead would advertise a control that does\n     * not exist. Console contact writes are client-direct against the rules,\n     * so a new key would have no server enforcement point to sit on, and a\n     * permission a customer can untick that changes nothing is worse than\n     * its absence.\n     *\n     * A SITE COLLABORATOR holding it reaches this page deliberately. They\n     * are a real org member document, so this gate is the first thing that\n     * has ever asked about them here — and the answer is yes, scoped: the\n     * listener filters on `visibleTo`, the rules prove the same predicate\n     * per document, and every field the page shows is read through the\n     * viewing group's own facet. Refusing them outright would delete a\n     * shipped capability rather than close a hole.\n     */\n    permission: 'data.manage',\n    /*\n     * WHAT the workspace must have bought (AGL-2851). The CRM is included\n     * from Starter and a Free workspace has none of it, so the flag is\n     * declared once, here, and the shell refuses every surface this\n     * registers on a plan without it: the hub body at both mounts, every\n     * section and record beneath it, drawn locked beside the upgrade notice,\n     * and the dashboard cards. The nav tab stays, as every plan-locked tab\n     * does, because it is the way to that notice. The CRM's routes, `/v1`\n     * and the Firestore rules ask the same question where the data is\n     * (`server/suite-gate.ts`).\n     */\n    featureFlag: 'crm',\n    /*\n     * Dashboard cards (AGL-2599, AGL-2604): the site dashboard's `hostDashboard`\n     * slot composes this extension's permission over each, so a card appears\n     * only where the CRM is enabled and only for a reader who may open it —\n     * registered here rather than imported by the dashboard so the shell's\n     * enablement and entitlement gate decides whether a site that never turned\n     * the CRM on sees them, the rule every card on that row follows. The tasks\n     * card is a glance at the reader's own overdue and due-today work and\n     * renders nothing on a workspace that has never made a task; the glance\n     * card is four server-counted figures, each a link into the hub.\n     *\n     * Both name `features.crm`, as the extension does (AGL-2611, AGL-2851):\n     * the slot composes the two, so a plan without the CRM gets neither card\n     * — absent, not upsold, the treatment every gated card gets.\n     *\n     * The same two cards again on the organization's `orgDashboard` slot\n     * (AGL-2636) — the org's sites page — under the same flag, with the same\n     * ids: the id names the card, and it is one card totaling the whole\n     * organization there instead of one site. The shell hands that slot the\n     * org mount as a prop, and `withCrmOrgMount` is what puts the mount's\n     * provider around each card, since the sites page cannot import one.\n     */\n    widgets: [\n      // Which contact field each of a form's fields saves to, on the form's\n      // own page. The forms plugin hosts the zone and writes the form\n      // document; what a contact's fields ARE is this plugin's, so the card\n      // is too.\n      {\n        slot: 'formContactFields',\n        widgetId: 'crm-form-contact-fields',\n        title: 'Saves to contact fields',\n        // A contact's custom fields are part of the suite, so a workspace\n        // without it has none to map a form's field onto.\n        featureFlag: 'crm',\n        Component: FormContactFieldsCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: CrmTasksDueCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: CrmGlanceCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmTasksDueCard),\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmGlanceCard),\n      },\n    ],\n    navItems: [\n      {\n        label: 'CRM',\n        href: '/crm',\n        // The address the surface had while it was one list. A link kept\n        // from then — a bookmark, a docs page, an email — still opens the\n        // hub rather than the shell's \"not available\" notice.\n        legacyHrefs: ['/contacts'],\n        // Sections as ROUTES (AGL-2595): each is a real URL the shell\n        // resolves and gates, so the page mounts the one being read and a\n        // bare `/crm` lands on the first. Every section inherits this\n        // item's `release_crm` gate.\n        sections: CRM_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-contacts',\n        icon: { path: mdiCardAccountDetailsOutline.path },\n        header: {\n          title: 'CRM',\n          icon: { path: mdiCardAccountDetailsOutline.path },\n          docsTopic: 'crm',\n        },\n        Component: CrmConsolePage,\n      },\n    ],\n  })\n}\n"],"names":["Aglyn","mdiCardAccountDetailsOutline","lazy","CRM_CONSOLE_SECTIONS","CrmGlanceCard","BUNDLE_ID","withCrmOrgMount","registerCrmRecordRoutes","registerPluginZone","CRM_RECORD_ATTRIBUTION_ZONE","CRM_RECORD_BOOKING_ZONE","CrmConsolePage","FormContactFieldsCard","CrmTasksDueCard","registerCrmConsole","zone","label","surface","layout","description","pluginId","registerConsoleExtension","displayName","permission","featureFlag","widgets","slot","widgetId","title","Component","CONSOLE_WIDGET_SLOTS","hostDashboard","orgDashboard","navItems","href","legacyHrefs","sections","navTabId","icon","path","header","docsTopic"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,4BAA4B,QAAQ,yBAAwB;AACrE,SAASC,IAAI,QAAQ,QAAO;AAC5B,SAASC,oBAAoB,QAAQ,uCAAmC;AACxE,SAASC,aAAa,QAAQ,kCAA8B;AAC5D,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,eAAe,QAAQ,+BAA2B;AAC3D,SAASC,uBAAuB,QAAQ,+BAA2B;AACnE,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,uBAAuB,QAAQ,mCAA+B;AAEvE,oDAAoD,GACpD,MAAMC,iBAAiBT,KACrB,IAAM,MAAM,CAAC;AAEf,iFAAiF,GACjF,2EAA2E,GAC3E,MAAMU,wBAAwBV,KAC5B,IAAM,MAAM,CAAC;AAGf,MAAMW,kBAAkBX,KACtB,IAAM,MAAM,CAAC;AAGf;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASY;IACdP;IACAC,mBACE;QACEO,MAAML;QACNM,OAAO;QACPC,SAAS;QACT,sEAAsE;QACtE,uEAAuE;QACvEC,QAAQ;QACRC,aACE;IACJ,GACA;QAAEC,UAAUf;IAAU;IAExBG,mBACE;QACEO,MAAMN;QACNO,OAAO;QACPC,SAAS;QACTE,aACE;IACJ,GACA;QAAEC,UAAUf;IAAU;IAExBL,MAAMqB,wBAAwB,CAAC;QAC7BD,UAAUf;QACViB,aAAa;QACb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgCC,GACDC,YAAY;QACZ;;;;;;;;;;KAUC,GACDC,aAAa;QACb;;;;;;;;;;;;;;;;;;;;;KAqBC,GACDC,SAAS;YACP,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,UAAU;YACV;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACP,kEAAkE;gBAClE,kDAAkD;gBAClDJ,aAAa;gBACbK,WAAWjB;YACb;YACA;gBACEc,MAAM1B,MAAM8B,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPJ,aAAa;gBACbK,WAAWhB;YACb;YACA;gBACEa,MAAM1B,MAAM8B,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPJ,aAAa;gBACbK,WAAWzB;YACb;YACA;gBACEsB,MAAM1B,MAAM8B,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPJ,aAAa;gBACbK,WAAWvB,gBAAgBO;YAC7B;YACA;gBACEa,MAAM1B,MAAM8B,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPJ,aAAa;gBACbK,WAAWvB,gBAAgBF;YAC7B;SACD;QACD6B,UAAU;YACR;gBACEjB,OAAO;gBACPkB,MAAM;gBACN,iEAAiE;gBACjE,kEAAkE;gBAClE,sDAAsD;gBACtDC,aAAa;oBAAC;iBAAY;gBAC1B,8DAA8D;gBAC9D,kEAAkE;gBAClE,8DAA8D;gBAC9D,6BAA6B;gBAC7BC,UAAUjC;gBACVkC,UAAU;gBACVC,MAAM;oBAAEC,MAAMtC,6BAA6BsC,IAAI;gBAAC;gBAChDC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEC,MAAMtC,6BAA6BsC,IAAI;oBAAC;oBAChDE,WAAW;gBACb;gBACAZ,WAAWlB;YACb;SACD;IACH;AACF"}

package/src/lib/server/companies-import.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/companies-import` — one chunk of a companies file, written
+ * (AGL-2621).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link COMPANY_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-company-import.ts` defines. This route judges
+ * each one through the same normalizers the company drawer runs, and
+ * writes it — the ONLY place either happens, so a stale tab cannot store
+ * something the server would have refused.
+ *
+ * ## Matched by domain, then by name
+ *
+ * A row is one company the org may already have. The domain is a key and
+ * the name a spelling, so a row with a domain is looked up by it first,
+ * and by the name's search key when no company carries the domain or the
+ * row has none — two files calling one business "Acme" and "Acme Inc" meet
+ * at `acme.com`, and a file with no domain column still finds "Acme" by
+ * name. Both lookups are narrowed to what the caller's scope can see: two
+ * clients of one agency may each have an "Acme" and must each get their
+ * own. A match is UPDATED with what the row carries, tags unioned; no
+ * match is CREATED with the stamp every CRM creator writes.
+ *
+ * ## The band is counted once per request
+ *
+ * A created company is a CRM record and meets the records band (AGL-2611).
+ * The aggregate is taken once at the first create and the verdict re-judged
+ * locally as the request creates more — `checkCrmRecordsQuota` is pure over
+ * a count — so two hundred rows cost three aggregate reads, not six
+ * hundred. A metered plan never refuses; a hard band refuses the rows past
+ * it as `records-band`, and updates to matched companies go through either
+ * way, because an update adds no record.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * `POST crm/companies-import` — `{ hostId, rows }` → a {@link CompanyImportChunkResult}.
+ *
+ * Rows are written one after another rather than in parallel: two rows
+ * for one company racing each other would each miss the other's create.
+ */
+export declare const crmCompaniesImportHandler: PluginApiHandler;

package/src/lib/server/companies-import.js

@@ -0,0 +1,242 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/companies-import` — one chunk of a companies file, written
+ * (AGL-2621).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link COMPANY_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-company-import.ts` defines. This route judges
+ * each one through the same normalizers the company drawer runs, and
+ * writes it — the ONLY place either happens, so a stale tab cannot store
+ * something the server would have refused.
+ *
+ * ## Matched by domain, then by name
+ *
+ * A row is one company the org may already have. The domain is a key and
+ * the name a spelling, so a row with a domain is looked up by it first,
+ * and by the name's search key when no company carries the domain or the
+ * row has none — two files calling one business "Acme" and "Acme Inc" meet
+ * at `acme.com`, and a file with no domain column still finds "Acme" by
+ * name. Both lookups are narrowed to what the caller's scope can see: two
+ * clients of one agency may each have an "Acme" and must each get their
+ * own. A match is UPDATED with what the row carries, tags unioned; no
+ * match is CREATED with the stamp every CRM creator writes.
+ *
+ * ## The band is counted once per request
+ *
+ * A created company is a CRM record and meets the records band (AGL-2611).
+ * The aggregate is taken once at the first create and the verdict re-judged
+ * locally as the request creates more — `checkCrmRecordsQuota` is pure over
+ * a count — so two hundred rows cost three aggregate reads, not six
+ * hundred. A metered plan never refuses; a hard band refuses the rows past
+ * it as `records-band`, and updates to matched companies go through either
+ * way, because an update adds no record.
+ */ import { checkCrmRecordsQuota, CRM_COLLECTIONS, fieldDefinitionsForObject, nameSearchFields, visibleToTokens } from "@aglyn/aglyn/server";
+import { COMPANY_IMPORT_CHUNK_SIZE, COMPANY_IMPORT_MAX_BODY_BYTES, companyImportMatchKey, normalizeCompanyImportRow } from "../model/crm-company-import.js";
+import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
+/** The company a row refers to in this scope — by domain, then by name — or `null`. */ async function findCompany(companies, readTokens, row) {
+    const seen = (snapshot)=>{
+        var _snapshot_docs_find;
+        return (_snapshot_docs_find = snapshot.docs.find((doc)=>visibleToTokens(doc.get('visibleTo'), readTokens))) != null ? _snapshot_docs_find : null;
+    };
+    if (row.domain) {
+        const byDomain = seen(await companies.where('domain', '==', row.domain).limit(10).get());
+        if (byDomain) return byDomain;
+    }
+    return seen(await companies.where('nameLower', '==', nameSearchFields(row.name).nameLower).limit(10).get());
+}
+/**
+ * The fields a row writes — on a create and on an update alike. Only what
+ * the row carries: an update must not clear a website the file did not
+ * mention, so an absent optional is left absent here rather than deleted.
+ */ function storedFields(row, ownerUid) {
+    return _extends({}, nameSearchFields(row.name), row.domain ? {
+        domain: row.domain
+    } : {}, row.website ? {
+        website: row.website
+    } : {}, row.phone ? {
+        phone: row.phone
+    } : {}, row.industry ? {
+        industry: row.industry
+    } : {}, ownerUid ? {
+        ownerUid
+    } : {}, row.address ? {
+        address: row.address
+    } : {}, row.notes ? {
+        notes: row.notes
+    } : {});
+}
+/**
+ * The row's custom values as a MERGE writes them: one dotted path per key,
+ * so a company already filed keeps every value the file did not carry
+ * (AGL-2661). A create spreads the map itself — see the loop below.
+ */ function customUpdate(row) {
+    return Object.fromEntries(Object.entries(row.custom).map(([key, value])=>[
+            `custom.${key}`,
+            value
+        ]));
+}
+/**
+ * The org's live COMPANY field definitions (AGL-2661) — the contact
+ * import's read, narrowed to the object this import writes. Read in full
+ * and filtered in memory: a holder has a handful of fields, and a `where`
+ * on `object` would need an index for a collection that fits in one page.
+ */ async function loadCompanyFieldDefinitions(orgId, readTokens) {
+    const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.contactFields).limit(200).get();
+    return fieldDefinitionsForObject(snapshot.docs.map((doc)=>doc.data()), 'company').filter((field)=>!!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens));
+}
+/**
+ * `POST crm/companies-import` — `{ hostId, rows }` → a {@link CompanyImportChunkResult}.
+ *
+ * Rows are written one after another rather than in parallel: two rows
+ * for one company racing each other would each miss the other's create.
+ */ export const crmCompaniesImportHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const read = readImportRows(req, {
+        maxBodyBytes: COMPANY_IMPORT_MAX_BODY_BYTES,
+        chunkSize: COMPANY_IMPORT_CHUNK_SIZE
+    });
+    if ('error' in read) return res.status(read.status).json({
+        error: read.error
+    });
+    try {
+        const context = await resolveImportContext(req);
+        if (context.ok === false) return res.status(context.status).json(context.body);
+        const skipped = [];
+        const dropped = {};
+        const normalized = [];
+        const fields = await loadCompanyFieldDefinitions(context.orgId, context.readTokens);
+        /*
+     * A duplicate WITHIN the request is skipped rather than merged: the
+     * second row would update the first's record and the count would read
+     * one created and one merged for one company in one file. Across
+     * requests the lookup answers, and reports a merge.
+     */ const seen = new Set();
+        read.rows.forEach((raw, index)=>{
+            const verdict = normalizeCompanyImportRow(raw, fields);
+            if (verdict.ok === false) {
+                skipped.push({
+                    index,
+                    name: verdict.input,
+                    reason: verdict.reason
+                });
+                return;
+            }
+            const key = companyImportMatchKey(verdict.row);
+            if (seen.has(key)) {
+                skipped.push({
+                    index,
+                    name: verdict.row.name,
+                    reason: 'duplicate'
+                });
+                return;
+            }
+            seen.add(key);
+            for (const entry of verdict.row.dropped){
+                var _dropped_entry_field;
+                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
+            }
+            normalized.push({
+                index,
+                row: verdict.row
+            });
+        });
+        const owners = await ownerDirectory(context.orgId, normalized.map((entry)=>entry.row));
+        const ownersUnresolved = new Set();
+        const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
+        const companies = orgRef.collection(CRM_COLLECTIONS.companies);
+        const stamp = creationStamp(context);
+        let counted = null;
+        let createdHere = 0;
+        let created = 0;
+        let merged = 0;
+        for (const { index, row } of normalized){
+            let ownerUid;
+            if (row.ownerEmail) {
+                ownerUid = owners.get(row.ownerEmail);
+                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
+            }
+            const existing = await findCompany(companies, context.readTokens, row);
+            const stored = storedFields(row, ownerUid);
+            if (existing) {
+                await existing.ref.update(_extends({}, stored, row.tags.length ? {
+                    tags: FieldValue.arrayUnion(...row.tags)
+                } : {}, customUpdate(row), {
+                    updatedAt: FieldValue.serverTimestamp()
+                }));
+                merged += 1;
+                continue;
+            }
+            if (!counted) counted = await crmRecordsQuotaForOrg(context.org, orgRef);
+            const room = checkCrmRecordsQuota(context.org, counted.crmRecordsCount + createdHere);
+            if (!room.allowed) {
+                skipped.push({
+                    index,
+                    name: row.name,
+                    reason: 'records-band'
+                });
+                continue;
+            }
+            await companies.add(_extends({}, stored, {
+                tags: row.tags
+            }, Object.keys(row.custom).length ? {
+                custom: row.custom
+            } : {}, stamp));
+            createdHere += 1;
+            created += 1;
+        }
+        const result = {
+            received: read.rows.length,
+            created,
+            merged,
+            skipped: skipped.sort((a, b)=>a.index - b.index),
+            dropped,
+            ownersUnresolved: [
+                ...ownersUnresolved
+            ]
+        };
+        return res.status(200).json(result);
+    } catch (error) {
+        console.error('crm/companies-import failed', error);
+        return res.status(500).json({
+            error: 'The import could not continue.'
+        });
+    }
+};
+/**
+ * What every company this import CREATES carries beside its fields: the
+ * scope every CRM creator stamps, the site as provenance, who imported it,
+ * and the clocks. A record written without `visibleTo` is seen by nobody.
+ */ function creationStamp(context) {
+    return {
+        hostId: context.hostId,
+        visibleTo: context.scopeTokens,
+        createdByUid: context.uid,
+        createdAt: FieldValue.serverTimestamp(),
+        updatedAt: FieldValue.serverTimestamp()
+    };
+}
+
+//# sourceMappingURL=companies-import.js.map

package/src/lib/server/companies-import.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/companies-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/companies-import` — one chunk of a companies file, written\n * (AGL-2621).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link COMPANY_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-company-import.ts` defines. This route judges\n * each one through the same normalizers the company drawer runs, and\n * writes it — the ONLY place either happens, so a stale tab cannot store\n * something the server would have refused.\n *\n * ## Matched by domain, then by name\n *\n * A row is one company the org may already have. The domain is a key and\n * the name a spelling, so a row with a domain is looked up by it first,\n * and by the name's search key when no company carries the domain or the\n * row has none — two files calling one business \"Acme\" and \"Acme Inc\" meet\n * at `acme.com`, and a file with no domain column still finds \"Acme\" by\n * name. Both lookups are narrowed to what the caller's scope can see: two\n * clients of one agency may each have an \"Acme\" and must each get their\n * own. A match is UPDATED with what the row carries, tags unioned; no\n * match is CREATED with the stamp every CRM creator writes.\n *\n * ## The band is counted once per request\n *\n * A created company is a CRM record and meets the records band (AGL-2611).\n * The aggregate is taken once at the first create and the verdict re-judged\n * locally as the request creates more — `checkCrmRecordsQuota` is pure over\n * a count — so two hundred rows cost three aggregate reads, not six\n * hundred. A metered plan never refuses; a hard band refuses the rows past\n * it as `records-band`, and updates to matched companies go through either\n * way, because an update adds no record.\n */\n\nimport {\n  checkCrmRecordsQuota,\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  fieldDefinitionsForObject,\n  nameSearchFields,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  COMPANY_IMPORT_CHUNK_SIZE,\n  COMPANY_IMPORT_MAX_BODY_BYTES,\n  type CompanyImportChunkResult,\n  type CompanyImportRawRow,\n  type CompanyImportRow,\n  type CompanyImportSkippedRow,\n  companyImportMatchKey,\n  normalizeCompanyImportRow,\n} from '../model/crm-company-import'\nimport { crmRecordsQuotaForOrg, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\ntype Companies = FirebaseFirestore.CollectionReference\n\n/** The company a row refers to in this scope — by domain, then by name — or `null`. */\nasync function findCompany(\n  companies: Companies,\n  readTokens: readonly string[],\n  row: Pick<CompanyImportRow, 'name' | 'domain'>,\n): Promise<FirebaseFirestore.QueryDocumentSnapshot | null> {\n  const seen = (snapshot: FirebaseFirestore.QuerySnapshot) =>\n    snapshot.docs.find((doc) => visibleToTokens(doc.get('visibleTo'), readTokens)) ?? null\n  if (row.domain) {\n    const byDomain = seen(\n      await companies.where('domain', '==', row.domain).limit(10).get(),\n    )\n    if (byDomain) return byDomain\n  }\n  return seen(\n    await companies\n      .where('nameLower', '==', nameSearchFields(row.name).nameLower)\n      .limit(10)\n      .get(),\n  )\n}\n\n/**\n * The fields a row writes — on a create and on an update alike. Only what\n * the row carries: an update must not clear a website the file did not\n * mention, so an absent optional is left absent here rather than deleted.\n */\nfunction storedFields(\n  row: CompanyImportRow,\n  ownerUid: string | undefined,\n): Record<string, unknown> {\n  return {\n    ...nameSearchFields(row.name),\n    ...(row.domain ? { domain: row.domain } : {}),\n    ...(row.website ? { website: row.website } : {}),\n    ...(row.phone ? { phone: row.phone } : {}),\n    ...(row.industry ? { industry: row.industry } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.address ? { address: row.address } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n  }\n}\n\n/**\n * The row's custom values as a MERGE writes them: one dotted path per key,\n * so a company already filed keeps every value the file did not carry\n * (AGL-2661). A create spreads the map itself — see the loop below.\n */\nfunction customUpdate(row: CompanyImportRow): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(row.custom).map(([key, value]) => [`custom.${key}`, value]),\n  )\n}\n\n/**\n * The org's live COMPANY field definitions (AGL-2661) — the contact\n * import's read, narrowed to the object this import writes. Read in full\n * and filtered in memory: a holder has a handful of fields, and a `where`\n * on `object` would need an index for a collection that fits in one page.\n */\nasync function loadCompanyFieldDefinitions(\n  orgId: string,\n  readTokens: readonly string[],\n): Promise<ContactFieldDefinition[]> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.contactFields)\n    .limit(200)\n    .get()\n  return fieldDefinitionsForObject(\n    snapshot.docs.map((doc) => doc.data() as ContactFieldDefinition),\n    'company',\n  ).filter(\n    (field) =>\n      !!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens),\n  )\n}\n\n/**\n * `POST crm/companies-import` — `{ hostId, rows }` → a {@link CompanyImportChunkResult}.\n *\n * Rows are written one after another rather than in parallel: two rows\n * for one company racing each other would each miss the other's create.\n */\nexport const crmCompaniesImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<CompanyImportRawRow>(req, {\n    maxBodyBytes: COMPANY_IMPORT_MAX_BODY_BYTES,\n    chunkSize: COMPANY_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: CompanyImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: CompanyImportRow }[] = []\n    const fields = await loadCompanyFieldDefinitions(context.orgId, context.readTokens)\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged: the\n     * second row would update the first's record and the count would read\n     * one created and one merged for one company in one file. Across\n     * requests the lookup answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeCompanyImportRow(raw, fields)\n      if (verdict.ok === false) {\n        skipped.push({ index, name: verdict.input, reason: verdict.reason })\n        return\n      }\n      const key = companyImportMatchKey(verdict.row)\n      if (seen.has(key)) {\n        skipped.push({ index, name: verdict.row.name, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    const owners = await ownerDirectory(\n      context.orgId,\n      normalized.map((entry) => entry.row),\n    )\n    const ownersUnresolved = new Set<string>()\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId)\n    const companies = orgRef.collection(CRM_COLLECTIONS.companies)\n    const stamp = creationStamp(context)\n    let counted: { crmRecordsCount: number } | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row } of normalized) {\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const existing = await findCompany(companies, context.readTokens, row)\n      const stored = storedFields(row, ownerUid)\n      if (existing) {\n        await existing.ref.update({\n          ...stored,\n          ...(row.tags.length ? { tags: FieldValue.arrayUnion(...row.tags) } : {}),\n          ...customUpdate(row),\n          updatedAt: FieldValue.serverTimestamp(),\n        })\n        merged += 1\n        continue\n      }\n      if (!counted) counted = await crmRecordsQuotaForOrg(context.org as never, orgRef)\n      const room = checkCrmRecordsQuota(\n        context.org as never,\n        counted.crmRecordsCount + createdHere,\n      )\n      if (!room.allowed) {\n        skipped.push({ index, name: row.name, reason: 'records-band' })\n        continue\n      }\n      await companies.add({\n        ...stored,\n        tags: row.tags,\n        ...(Object.keys(row.custom).length ? { custom: row.custom } : {}),\n        ...stamp,\n      })\n      createdHere += 1\n      created += 1\n    }\n\n    const result: CompanyImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/companies-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n\n/**\n * What every company this import CREATES carries beside its fields: the\n * scope every CRM creator stamps, the site as provenance, who imported it,\n * and the clocks. A record written without `visibleTo` is seen by nobody.\n */\nfunction creationStamp(\n  context: Extract<ImportContext, { ok: true }>,\n): Record<string, unknown> {\n  return {\n    hostId: context.hostId,\n    visibleTo: context.scopeTokens,\n    createdByUid: context.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  }\n}\n"],"names":["checkCrmRecordsQuota","CRM_COLLECTIONS","fieldDefinitionsForObject","nameSearchFields","visibleToTokens","COMPANY_IMPORT_CHUNK_SIZE","COMPANY_IMPORT_MAX_BODY_BYTES","companyImportMatchKey","normalizeCompanyImportRow","crmRecordsQuotaForOrg","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","findCompany","companies","readTokens","row","seen","snapshot","docs","find","doc","get","domain","byDomain","where","limit","name","nameLower","storedFields","ownerUid","website","phone","industry","address","notes","customUpdate","Object","fromEntries","entries","custom","map","key","value","loadCompanyFieldDefinitions","orgId","app","firestore","collection","contactFields","data","filter","field","retiredAt","visibleTo","crmCompaniesImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","fields","Set","rows","forEach","raw","index","verdict","push","input","reason","has","add","entry","owners","ownersUnresolved","orgRef","stamp","creationStamp","counted","createdHere","created","merged","ownerEmail","existing","stored","ref","update","tags","length","arrayUnion","updatedAt","serverTimestamp","org","room","crmRecordsCount","allowed","keys","result","received","sort","a","b","console","hostId","scopeTokens","createdByUid","uid","createdAt"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCC,GAED,SACEA,oBAAoB,EAEpBC,eAAe,EACfC,yBAAyB,EACzBC,gBAAgB,EAEhBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,yBAAyB,EACzBC,6BAA6B,EAK7BC,qBAAqB,EACrBC,yBAAyB,QACpB,iCAA6B;AACpC,SAASC,qBAAqB,EAAEC,aAAa,QAAQ,2BAA0B;AAC/E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAIzB,qFAAqF,GACrF,eAAeC,YACbC,SAAoB,EACpBC,UAA6B,EAC7BC,GAA8C;IAE9C,MAAMC,OAAO,CAACC;YACZA;gBAAAA,sBAAAA,SAASC,IAAI,CAACC,IAAI,CAAC,CAACC,MAAQnB,gBAAgBmB,IAAIC,GAAG,CAAC,cAAcP,wBAAlEG,sBAAkF;;IACpF,IAAIF,IAAIO,MAAM,EAAE;QACd,MAAMC,WAAWP,KACf,MAAMH,UAAUW,KAAK,CAAC,UAAU,MAAMT,IAAIO,MAAM,EAAEG,KAAK,CAAC,IAAIJ,GAAG;QAEjE,IAAIE,UAAU,OAAOA;IACvB;IACA,OAAOP,KACL,MAAMH,UACHW,KAAK,CAAC,aAAa,MAAMxB,iBAAiBe,IAAIW,IAAI,EAAEC,SAAS,EAC7DF,KAAK,CAAC,IACNJ,GAAG;AAEV;AAEA;;;;CAIC,GACD,SAASO,aACPb,GAAqB,EACrBc,QAA4B;IAE5B,OAAO,aACF7B,iBAAiBe,IAAIW,IAAI,GACxBX,IAAIO,MAAM,GAAG;QAAEA,QAAQP,IAAIO,MAAM;IAAC,IAAI,CAAC,GACvCP,IAAIe,OAAO,GAAG;QAAEA,SAASf,IAAIe,OAAO;IAAC,IAAI,CAAC,GAC1Cf,IAAIgB,KAAK,GAAG;QAAEA,OAAOhB,IAAIgB,KAAK;IAAC,IAAI,CAAC,GACpChB,IAAIiB,QAAQ,GAAG;QAAEA,UAAUjB,IAAIiB,QAAQ;IAAC,IAAI,CAAC,GAC7CH,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3Bd,IAAIkB,OAAO,GAAG;QAAEA,SAASlB,IAAIkB,OAAO;IAAC,IAAI,CAAC,GAC1ClB,IAAImB,KAAK,GAAG;QAAEA,OAAOnB,IAAImB,KAAK;IAAC,IAAI,CAAC;AAE5C;AAEA;;;;CAIC,GACD,SAASC,aAAapB,GAAqB;IACzC,OAAOqB,OAAOC,WAAW,CACvBD,OAAOE,OAAO,CAACvB,IAAIwB,MAAM,EAAEC,GAAG,CAAC,CAAC,CAACC,KAAKC,MAAM,GAAK;YAAC,CAAC,OAAO,EAAED,KAAK;YAAEC;SAAM;AAE7E;AAEA;;;;;CAKC,GACD,eAAeC,4BACbC,KAAa,EACb9B,UAA6B;IAE7B,MAAMG,WAAW,MAAMV,cACpBsC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACX3B,GAAG,CAACwB,OACJG,UAAU,CAACjD,gBAAgBkD,aAAa,EACxCvB,KAAK,CAAC,KACNJ,GAAG;IACN,OAAOtB,0BACLkB,SAASC,IAAI,CAACsB,GAAG,CAAC,CAACpB,MAAQA,IAAI6B,IAAI,KACnC,WACAC,MAAM,CACN,CAACC,QACC,CAAC,CAACA,MAAMV,GAAG,IAAI,CAACU,MAAMC,SAAS,IAAInD,gBAAgBkD,MAAME,SAAS,EAAEvC;AAE1E;AAEA;;;;;CAKC,GACD,OAAO,MAAMwC,4BAA8C,OAAOC,KAAKC;IACrE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOpD,eAAoC6C,KAAK;QACpDQ,cAAc5D;QACd6D,WAAW9D;IACb;IACA,IAAI,WAAW4D,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMtD,qBAAqB4C;QAC3C,IAAIU,QAAQC,EAAE,KAAK,OAAO,OAAOV,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAqC,EAAE;QAC7C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAyD,EAAE;QACjE,MAAMC,SAAS,MAAM5B,4BAA4BsB,QAAQrB,KAAK,EAAEqB,QAAQnD,UAAU;QAClF;;;;;KAKC,GACD,MAAME,OAAO,IAAIwD;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAUxE,0BAA0BsE,KAAKJ;YAC/C,IAAIM,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMmD,QAAQE,KAAK;oBAAEC,QAAQH,QAAQG,MAAM;gBAAC;gBAClE;YACF;YACA,MAAMvC,MAAMrC,sBAAsByE,QAAQ9D,GAAG;YAC7C,IAAIC,KAAKiE,GAAG,CAACxC,MAAM;gBACjB2B,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMmD,QAAQ9D,GAAG,CAACW,IAAI;oBAAEsD,QAAQ;gBAAY;gBAClE;YACF;YACAhE,KAAKkE,GAAG,CAACzC;YACT,KAAK,MAAM0C,SAASN,QAAQ9D,GAAG,CAACsD,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACc,MAAMhC,KAAK,CAAC,GAAG,EAACkB,uBAAAA,OAAO,CAACc,MAAMhC,KAAK,CAAC,YAApBkB,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAO7D,KAAK8D,QAAQ9D,GAAG;YAAC;QAC5C;QAEA,MAAMqE,SAAS,MAAM3E,eACnBwD,QAAQrB,KAAK,EACb0B,WAAW9B,GAAG,CAAC,CAAC2C,QAAUA,MAAMpE,GAAG;QAErC,MAAMsE,mBAAmB,IAAIb;QAC7B,MAAMc,SAAS/E,cAAcsC,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,QAAQ3B,GAAG,CAAC6C,QAAQrB,KAAK;QACnF,MAAM/B,YAAYyE,OAAOvC,UAAU,CAACjD,gBAAgBe,SAAS;QAC7D,MAAM0E,QAAQC,cAAcvB;QAC5B,IAAIwB,UAA8C;QAClD,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAEhB,KAAK,EAAE7D,GAAG,EAAE,IAAIuD,WAAY;YACvC,IAAIzC;YACJ,IAAId,IAAI8E,UAAU,EAAE;gBAClBhE,WAAWuD,OAAO/D,GAAG,CAACN,IAAI8E,UAAU;gBACpC,IAAI,CAAChE,UAAUwD,iBAAiBH,GAAG,CAACnE,IAAI8E,UAAU;YACpD;YACA,MAAMC,WAAW,MAAMlF,YAAYC,WAAWoD,QAAQnD,UAAU,EAAEC;YAClE,MAAMgF,SAASnE,aAAab,KAAKc;YACjC,IAAIiE,UAAU;gBACZ,MAAMA,SAASE,GAAG,CAACC,MAAM,CAAC,aACrBF,QACChF,IAAImF,IAAI,CAACC,MAAM,GAAG;oBAAED,MAAM1F,WAAW4F,UAAU,IAAIrF,IAAImF,IAAI;gBAAE,IAAI,CAAC,GACnE/D,aAAapB;oBAChBsF,WAAW7F,WAAW8F,eAAe;;gBAEvCV,UAAU;gBACV;YACF;YACA,IAAI,CAACH,SAASA,UAAU,MAAMnF,sBAAsB2D,QAAQsC,GAAG,EAAWjB;YAC1E,MAAMkB,OAAO3G,qBACXoE,QAAQsC,GAAG,EACXd,QAAQgB,eAAe,GAAGf;YAE5B,IAAI,CAACc,KAAKE,OAAO,EAAE;gBACjBtC,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMX,IAAIW,IAAI;oBAAEsD,QAAQ;gBAAe;gBAC7D;YACF;YACA,MAAMnE,UAAUqE,GAAG,CAAC,aACfa;gBACHG,MAAMnF,IAAImF,IAAI;eACV9D,OAAOuE,IAAI,CAAC5F,IAAIwB,MAAM,EAAE4D,MAAM,GAAG;gBAAE5D,QAAQxB,IAAIwB,MAAM;YAAC,IAAI,CAAC,GAC5DgD;YAELG,eAAe;YACfC,WAAW;QACb;QAEA,MAAMiB,SAAmC;YACvCC,UAAU/C,KAAKW,IAAI,CAAC0B,MAAM;YAC1BR;YACAC;YACAxB,SAASA,QAAQ0C,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEnC,KAAK,GAAGoC,EAAEpC,KAAK;YACjDP;YACAgB,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO7B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACgD;IAC9B,EAAE,OAAO/C,OAAO;QACdoD,QAAQpD,KAAK,CAAC,+BAA+BA;QAC7C,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC;AAED;;;;CAIC,GACD,SAAS2B,cACPvB,OAA6C;IAE7C,OAAO;QACLiD,QAAQjD,QAAQiD,MAAM;QACtB7D,WAAWY,QAAQkD,WAAW;QAC9BC,cAAcnD,QAAQoD,GAAG;QACzBC,WAAW9G,WAAW8F,eAAe;QACrCD,WAAW7F,WAAW8F,eAAe;IACvC;AACF"}