@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/server/contact-profile.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * What one typed field of a contact's profile may be, for the server routes
+ * that write one: the create route (AGL-2596) and the profile route
+ * (AGL-2804). One module, so a tag typed into the create drawer and a tag
+ * saved on the record page are the same tag to the segment filter that
+ * matches on them, and a phone number both refuse is refused in one sentence.
+ */
+/** The most tags one holder keeps on a person — the record page's cap. */
+export declare const CONTACT_TAGS_MAX = 20;
+/** The longest note the record page keeps. */
+export declare const CONTACT_NOTES_MAX = 2000;
+/** The sentence a phone number that cannot be read is refused with, under the field. */
+export declare const CONTACT_PHONE_REFUSAL: string;
+/** What one typed field may be, after the trim every string gets. */
+export declare function typed(value: unknown, max: number): string;
+/**
+ * Tags as the record page stores them: lower-cased, trimmed, deduplicated,
+ * capped.
+ */
+export declare function normalizeTags(value: unknown): string[];
+/**
+ * One tag a bulk action names, as the contacts bar normalizes it, or `null`
+ * when nothing survives the trim.
+ */
+export declare function readBulkTag(value: unknown): string | null;

package/src/lib/server/contact-profile.js

@@ -0,0 +1,45 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * What one typed field of a contact's profile may be, for the server routes
+ * that write one: the create route (AGL-2596) and the profile route
+ * (AGL-2804). One module, so a tag typed into the create drawer and a tag
+ * saved on the record page are the same tag to the segment filter that
+ * matches on them, and a phone number both refuse is refused in one sentence.
+ */ /** The most tags one holder keeps on a person — the record page's cap. */ export const CONTACT_TAGS_MAX = 20;
+/** The longest note the record page keeps. */ export const CONTACT_NOTES_MAX = 2000;
+/** The sentence a phone number that cannot be read is refused with, under the field. */ export const CONTACT_PHONE_REFUSAL = 'That phone number could not be read. Enter it with its country code, like ' + '+1 512 555 0107.';
+/** What one typed field may be, after the trim every string gets. */ export function typed(value, max) {
+    return String(value != null ? value : '').trim().slice(0, max);
+}
+/**
+ * Tags as the record page stores them: lower-cased, trimmed, deduplicated,
+ * capped.
+ */ export function normalizeTags(value) {
+    if (!Array.isArray(value)) return [];
+    return [
+        ...new Set(value.map((tag)=>typed(tag, 40).toLowerCase()).filter(Boolean).slice(0, CONTACT_TAGS_MAX))
+    ];
+}
+/**
+ * One tag a bulk action names, as the contacts bar normalizes it, or `null`
+ * when nothing survives the trim.
+ */ export function readBulkTag(value) {
+    const tag = typed(value, 60).toLowerCase();
+    return tag || null;
+}
+
+//# sourceMappingURL=contact-profile.js.map

package/src/lib/server/contact-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contact-profile.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What one typed field of a contact's profile may be, for the server routes\n * that write one: the create route (AGL-2596) and the profile route\n * (AGL-2804). One module, so a tag typed into the create drawer and a tag\n * saved on the record page are the same tag to the segment filter that\n * matches on them, and a phone number both refuse is refused in one sentence.\n */\n\n/** The most tags one holder keeps on a person — the record page's cap. */\nexport const CONTACT_TAGS_MAX = 20\n\n/** The longest note the record page keeps. */\nexport const CONTACT_NOTES_MAX = 2000\n\n/** The sentence a phone number that cannot be read is refused with, under the field. */\nexport const CONTACT_PHONE_REFUSAL =\n  'That phone number could not be read. Enter it with its country code, like ' +\n  '+1 512 555 0107.'\n\n/** What one typed field may be, after the trim every string gets. */\nexport function typed(value: unknown, max: number): string {\n  return String(value ?? '')\n    .trim()\n    .slice(0, max)\n}\n\n/**\n * Tags as the record page stores them: lower-cased, trimmed, deduplicated,\n * capped.\n */\nexport function normalizeTags(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  return [\n    ...new Set(\n      value\n        .map((tag) => typed(tag, 40).toLowerCase())\n        .filter(Boolean)\n        .slice(0, CONTACT_TAGS_MAX),\n    ),\n  ]\n}\n\n/**\n * One tag a bulk action names, as the contacts bar normalizes it, or `null`\n * when nothing survives the trim.\n */\nexport function readBulkTag(value: unknown): string | null {\n  const tag = typed(value, 60).toLowerCase()\n  return tag || null\n}\n"],"names":["CONTACT_TAGS_MAX","CONTACT_NOTES_MAX","CONTACT_PHONE_REFUSAL","typed","value","max","String","trim","slice","normalizeTags","Array","isArray","Set","map","tag","toLowerCase","filter","Boolean","readBulkTag"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;CAMC,GAED,wEAAwE,GACxE,OAAO,MAAMA,mBAAmB,GAAE;AAElC,4CAA4C,GAC5C,OAAO,MAAMC,oBAAoB,KAAI;AAErC,sFAAsF,GACtF,OAAO,MAAMC,wBACX,+EACA,mBAAkB;AAEpB,mEAAmE,GACnE,OAAO,SAASC,MAAMC,KAAc,EAAEC,GAAW;IAC/C,OAAOC,OAAOF,gBAAAA,QAAS,IACpBG,IAAI,GACJC,KAAK,CAAC,GAAGH;AACd;AAEA;;;CAGC,GACD,OAAO,SAASI,cAAcL,KAAc;IAC1C,IAAI,CAACM,MAAMC,OAAO,CAACP,QAAQ,OAAO,EAAE;IACpC,OAAO;WACF,IAAIQ,IACLR,MACGS,GAAG,CAAC,CAACC,MAAQX,MAAMW,KAAK,IAAIC,WAAW,IACvCC,MAAM,CAACC,SACPT,KAAK,CAAC,GAAGR;KAEf;AACH;AAEA;;;CAGC,GACD,OAAO,SAASkB,YAAYd,KAAc;IACxC,MAAMU,MAAMX,MAAMC,OAAO,IAAIW,WAAW;IACxC,OAAOD,OAAO;AAChB"}

package/src/lib/server/contact-update.d.ts

@@ -0,0 +1,92 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/contact-update` — one holder's profile fields on one or
+ * more contacts (AGL-2804).
+ *
+ * Body: `{ hostId, contactIds, set }` under a site, or `{ orgId, hostId?,
+ * contactIds, set }` at the organization level, where `set` is
+ * `ContactUpdateFields`. Answers `{ ok, results }`: one outcome per contact,
+ * in the order the ids were sent.
+ *
+ * ## Why every facet write comes here
+ *
+ * A contact's fields live in the facet of the holder that keeps them —
+ * `facets.{groupId}.*` — and the Firestore rules cannot tell one field of a
+ * facet from another: the holder is a map key a rule cannot address, and a
+ * write's affected keys name only `facets`. So the rules let a client update
+ * change nothing in a facet beyond letting a holder go, and the console's
+ * edits arrive here, where the plan is asked about the fields the request
+ * actually carries.
+ *
+ * ## Who may call it
+ *
+ * The CRM writer the task routes admit (`authorizeCrmWriter`): under a site,
+ * a member whose role writes org data, who holds `data.manage` and whose
+ * access reaches the site; at the organization level, an org-wide member
+ * with the permission. Each contact must then be one the caller may read —
+ * the rules' `canReadScoped()` — and, under a site, one the site's hub lists.
+ *
+ * ## The plan
+ *
+ * Every field is the CRM's (AGL-2790), and a plan without the CRM has none
+ * of it (AGL-2851), so it edits no contact: not the owner, company, custom
+ * values or files, and not the profile a capture writes (name, phone, job
+ * title, address), the tags, the notes or the campaign filing either. A
+ * request carrying any field is refused to such a plan once the caller is
+ * known, and before a contact is read — staff included, because the plan is
+ * a fact about the workspace. Erasing a person is another route, open on
+ * every plan.
+ *
+ * ## One holder, by dotted path
+ *
+ * Under a site the facet is the site's consent group's; at the organization
+ * level it is each contact's own primary holder, the facet the record page
+ * shows there. Every field is one dotted path — a nested `facets` object
+ * would replace every other holder's map — and a text field sent empty is
+ * deleted rather than stored blank, so "no phone" has one shape.
+ *
+ * ## Many contacts, one commit
+ *
+ * The contacts are read together and written in one batch. A batch that
+ * fails is retried contact by contact, so the one that could not be written
+ * is named and the rest still land. A company's contacts count follows the
+ * link: summed per company and settled once the contacts are written, so a
+ * company deleted in between cannot fail the save of the people at it — the
+ * company page's live aggregate is what corrects a count that did not move.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+import { type ContactUpdateFields } from '../model/contact-update';
+/**
+ * The act a request is refused for on a plan without the CRM: the first
+ * field it carries, in the order the route reads them. Every field is the
+ * CRM's, so whichever field a request names is the act its refusal names.
+ */
+export declare function contactUpdateSuiteAct(fields: ContactUpdateFields): string;
+/**
+ * A body's `set`, read into the fields it names, or the sentence refusing
+ * it. A key the route does not save is refused rather than dropped: a save
+ * that silently lost a field would read as a save that kept it.
+ */
+export declare function readContactUpdateFields(input: unknown): {
+    ok: true;
+    fields: ContactUpdateFields;
+} | {
+    ok: false;
+    error: string;
+};
+export declare const crmContactUpdateHandler: PluginApiHandler;