@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/server/contacts-import.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/contacts-import` — one chunk of a contact file, written
+ * (AGL-2602).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw
+ * rows in the field vocabulary `crm-import.ts` defines. This route judges
+ * each one and writes it, and it is the ONLY place either happens: the
+ * drawer shows a preview from the same mapper but stores nothing, so a
+ * stale tab cannot store something the server would have refused.
+ *
+ * ## Every row goes through the door every capture goes through
+ *
+ * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,
+ * the one writer of the contacts collection for every door that is not the
+ * v1 API: forms, checkout, bookings, the newsletter box — is the writer
+ * here too, so a row this file creates raises `contactCreated` like any
+ * other capture (AGL-2605). That is what makes an import
+ * dedupe on the address the way a second form submission does, land in the
+ * capturing group's facet the way a form capture does, record consent
+ * against the capturing site, and stop at a hard band where a form
+ * capture stops. A bulk path with its own `add()` would be the fastest way
+ * to grow an unscoped, unbanded, unconsented copy of the address book.
+ *
+ * What the door did not know how to write until now — a phone, a title, a
+ * company, an owner, a stage, custom values — it now takes as `facet`, and
+ * what it did not say until now — created or merged or refused — it now
+ * returns as a verdict. Both changes are the door's, so the v1 API and the
+ * manual add can reach them next.
+ *
+ * ## Two lookups paid once per request, not once per row
+ *
+ * An owner is named by email in the file and stored by uid on the record,
+ * so the org's roster is read once and every row resolves against it. A
+ * company is named by name and stored by id, so each distinct name is
+ * looked up once, created once when missing, and remembered for the rest
+ * of the request — two hundred rows at one company is one read and at most
+ * one write, not two hundred of each.
+ *
+ * ## Who may call it
+ *
+ * `resolveImportContext` (`import-context.ts`) — the two gates every CSV
+ * import route asks, shared with the companies import so one permission
+ * has one spelling.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/** The one sentence every imported contact's timeline opens with. */
+export declare const CONTACT_IMPORT_INTERACTION_SUMMARY = "Imported from CSV";
+/**
+ * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
+ *
+ * Rows are written one after another rather than in parallel, because the
+ * door's create path counts the collection before it adds: two hundred
+ * creates racing one another would each count the same audience and each
+ * pass a band the last of them should have hit.
+ */
+export declare const crmContactsImportHandler: PluginApiHandler;

package/src/lib/server/contacts-import.js

@@ -0,0 +1,263 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/contacts-import` — one chunk of a contact file, written
+ * (AGL-2602).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw
+ * rows in the field vocabulary `crm-import.ts` defines. This route judges
+ * each one and writes it, and it is the ONLY place either happens: the
+ * drawer shows a preview from the same mapper but stores nothing, so a
+ * stale tab cannot store something the server would have refused.
+ *
+ * ## Every row goes through the door every capture goes through
+ *
+ * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,
+ * the one writer of the contacts collection for every door that is not the
+ * v1 API: forms, checkout, bookings, the newsletter box — is the writer
+ * here too, so a row this file creates raises `contactCreated` like any
+ * other capture (AGL-2605). That is what makes an import
+ * dedupe on the address the way a second form submission does, land in the
+ * capturing group's facet the way a form capture does, record consent
+ * against the capturing site, and stop at a hard band where a form
+ * capture stops. A bulk path with its own `add()` would be the fastest way
+ * to grow an unscoped, unbanded, unconsented copy of the address book.
+ *
+ * What the door did not know how to write until now — a phone, a title, a
+ * company, an owner, a stage, custom values — it now takes as `facet`, and
+ * what it did not say until now — created or merged or refused — it now
+ * returns as a verdict. Both changes are the door's, so the v1 API and the
+ * manual add can reach them next.
+ *
+ * ## Two lookups paid once per request, not once per row
+ *
+ * An owner is named by email in the file and stored by uid on the record,
+ * so the org's roster is read once and every row resolves against it. A
+ * company is named by name and stored by id, so each distinct name is
+ * looked up once, created once when missing, and remembered for the rest
+ * of the request — two hundred rows at one company is one read and at most
+ * one write, not two hundred of each.
+ *
+ * ## Who may call it
+ *
+ * `resolveImportContext` (`import-context.ts`) — the two gates every CSV
+ * import route asks, shared with the companies import so one permission
+ * has one spelling.
+ */ import { CRM_COLLECTIONS, nameSearchFields, visibleToTokens } from "@aglyn/aglyn/server";
+import { CONTACT_IMPORT_CHUNK_SIZE, CONTACT_IMPORT_MAX_BODY_BYTES, normalizeContactImportRow } from "../model/crm-import.js";
+import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { captureHostContact } from "@aglyn/tenant-runtime";
+import { FieldValue } from "firebase-admin/firestore";
+import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
+/** The one sentence every imported contact's timeline opens with. */ export const CONTACT_IMPORT_INTERACTION_SUMMARY = 'Imported from CSV';
+/**
+ * The holder's live custom-field definitions.
+ *
+ * Read in full and filtered in memory: a holder has a handful of fields,
+ * and a `where` on `retiredAt` would need an index for a collection that
+ * fits in one page. Definitions the caller's scope cannot see are left out
+ * for the same reason a value under an undefined key is — a value written
+ * under a field the holder's own form will never show is a value nobody
+ * can edit.
+ */ async function loadFieldDefinitions(orgId, readTokens) {
+    const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.contactFields).limit(200).get();
+    return snapshot.docs.map((doc)=>doc.data()).filter((field)=>!!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens));
+}
+/**
+ * The company a name refers to in this scope, created when there is none.
+ *
+ * Looked up by `nameLower`, the search twin `nameSearchFields` writes on
+ * every company, and narrowed in memory to the ones the caller's scope can
+ * see — two clients of one agency may each have an "Acme" and must each get
+ * their own. Created with the same scope stamp every CRM creator uses, so
+ * the company lands exactly where a contact captured on this site would.
+ */ async function resolveCompanyId(context, name, cache, tally) {
+    const fields = nameSearchFields(name);
+    const cached = cache.get(fields.nameLower);
+    if (cached) return cached;
+    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
+    const companies = orgRef.collection(CRM_COLLECTIONS.companies);
+    const matches = await companies.where('nameLower', '==', fields.nameLower).limit(10).get();
+    const seen = matches.docs.find((doc)=>visibleToTokens(doc.get('visibleTo'), context.readTokens));
+    if (seen) {
+        cache.set(fields.nameLower, seen.id);
+        return seen.id;
+    }
+    /*
+   * THE RECORDS BAND (AGL-2611). A company is a record of the same band
+   * the contact behind this row will meet at its own door, so on an org
+   * at a full hard band the row gets no company rather than a company it
+   * was not allowed to hold. Nothing is reported here: the contact is
+   * refused `audience-band` a few lines on and the row is listed skipped,
+   * which is the one message the operator needs. A plan with an overage
+   * rate never reaches this branch — a rate is what makes the band meter
+   * instead of refuse.
+   */ const room = await crmRecordsQuotaForOrg(context.org, orgRef);
+    if (!room.allowed) return '';
+    const created = await companies.add(_extends({}, fields, {
+        hostId: context.hostId,
+        visibleTo: context.scopeTokens,
+        createdByUid: context.uid,
+        createdAt: FieldValue.serverTimestamp(),
+        updatedAt: FieldValue.serverTimestamp()
+    }));
+    tally.created += 1;
+    cache.set(fields.nameLower, created.id);
+    return created.id;
+}
+/**
+ * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
+ *
+ * Rows are written one after another rather than in parallel, because the
+ * door's create path counts the collection before it adds: two hundred
+ * creates racing one another would each count the same audience and each
+ * pass a band the last of them should have hit.
+ */ export const crmContactsImportHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const read = readImportRows(req, {
+        maxBodyBytes: CONTACT_IMPORT_MAX_BODY_BYTES,
+        chunkSize: CONTACT_IMPORT_CHUNK_SIZE
+    });
+    if ('error' in read) return res.status(read.status).json({
+        error: read.error
+    });
+    try {
+        const context = await resolveImportContext(req);
+        if (context.ok === false) return res.status(context.status).json(context.body);
+        const fields = await loadFieldDefinitions(context.orgId, context.readTokens);
+        const skipped = [];
+        const dropped = {};
+        const normalized = [];
+        /*
+     * A duplicate WITHIN the request is skipped rather than merged: the
+     * second row would merge onto the first's record and the count would
+     * read one created and one merged for one person in one file, which is
+     * a number the operator cannot reconcile against the rows they sent.
+     * Across requests the door's own dedupe answers, and reports a merge.
+     */ const seen = new Set();
+        read.rows.forEach((raw, index)=>{
+            const verdict = normalizeContactImportRow(raw, fields);
+            if (verdict.ok === false) {
+                skipped.push({
+                    index,
+                    email: verdict.input,
+                    reason: verdict.reason
+                });
+                return;
+            }
+            if (seen.has(verdict.row.email)) {
+                skipped.push({
+                    index,
+                    email: verdict.row.email,
+                    reason: 'duplicate'
+                });
+                return;
+            }
+            seen.add(verdict.row.email);
+            for (const entry of verdict.row.dropped){
+                var _dropped_entry_field;
+                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
+            }
+            normalized.push({
+                index,
+                row: verdict.row
+            });
+        });
+        const owners = await ownerDirectory(context.orgId, normalized.map((entry)=>entry.row));
+        const ownersUnresolved = new Set();
+        const companies = new Map();
+        const companyTally = {
+            created: 0
+        };
+        let created = 0;
+        let merged = 0;
+        for (const { index, row } of normalized){
+            let ownerUid;
+            if (row.ownerEmail) {
+                ownerUid = owners.get(row.ownerEmail);
+                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
+            }
+            const companyId = row.companyName ? await resolveCompanyId(context, row.companyName, companies, companyTally) : undefined;
+            const verdict = await captureHostContact(_extends({
+                hostId: context.hostId,
+                email: row.email
+            }, row.name ? {
+                name: row.name
+            } : {}, {
+                source: 'import',
+                interaction: {
+                    summary: CONTACT_IMPORT_INTERACTION_SUMMARY
+                },
+                marketingConsent: row.marketingConsent,
+                tags: row.tags,
+                facet: _extends({}, row.phone ? {
+                    phone: row.phone
+                } : {}, row.jobTitle ? {
+                    jobTitle: row.jobTitle
+                } : {}, companyId ? {
+                    companyId
+                } : {}, row.address ? {
+                    address: row.address
+                } : {}, ownerUid ? {
+                    ownerUid
+                } : {}, row.lifecycleStage ? {
+                    lifecycleStage: row.lifecycleStage
+                } : {}, Object.keys(row.custom).length ? {
+                    custom: row.custom
+                } : {}),
+                // An import is the merchant's own act and files nobody under a
+                // campaign; the picker on the profile is where that happens.
+                campaignIds: []
+            }));
+            if ('refused' in verdict) {
+                skipped.push({
+                    index,
+                    email: row.email,
+                    reason: verdict.refused === 'band' ? 'audience-band' : verdict.refused === 'invalid-email' ? 'invalid-email' : verdict.refused === 'erased' ? 'erased' : 'write-failed'
+                });
+                continue;
+            }
+            if (verdict.created) created += 1;
+            else merged += 1;
+        }
+        const result = {
+            received: read.rows.length,
+            created,
+            merged,
+            skipped: skipped.sort((a, b)=>a.index - b.index),
+            dropped,
+            companiesCreated: companyTally.created,
+            ownersUnresolved: [
+                ...ownersUnresolved
+            ]
+        };
+        return res.status(200).json(result);
+    } catch (error) {
+        console.error('crm/contacts-import failed', error);
+        return res.status(500).json({
+            error: 'The import could not continue.'
+        });
+    }
+};
+
+//# sourceMappingURL=contacts-import.js.map

package/src/lib/server/contacts-import.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contacts-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contacts-import` — one chunk of a contact file, written\n * (AGL-2602).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw\n * rows in the field vocabulary `crm-import.ts` defines. This route judges\n * each one and writes it, and it is the ONLY place either happens: the\n * drawer shows a preview from the same mapper but stores nothing, so a\n * stale tab cannot store something the server would have refused.\n *\n * ## Every row goes through the door every capture goes through\n *\n * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,\n * the one writer of the contacts collection for every door that is not the\n * v1 API: forms, checkout, bookings, the newsletter box — is the writer\n * here too, so a row this file creates raises `contactCreated` like any\n * other capture (AGL-2605). That is what makes an import\n * dedupe on the address the way a second form submission does, land in the\n * capturing group's facet the way a form capture does, record consent\n * against the capturing site, and stop at a hard band where a form\n * capture stops. A bulk path with its own `add()` would be the fastest way\n * to grow an unscoped, unbanded, unconsented copy of the address book.\n *\n * What the door did not know how to write until now — a phone, a title, a\n * company, an owner, a stage, custom values — it now takes as `facet`, and\n * what it did not say until now — created or merged or refused — it now\n * returns as a verdict. Both changes are the door's, so the v1 API and the\n * manual add can reach them next.\n *\n * ## Two lookups paid once per request, not once per row\n *\n * An owner is named by email in the file and stored by uid on the record,\n * so the org's roster is read once and every row resolves against it. A\n * company is named by name and stored by id, so each distinct name is\n * looked up once, created once when missing, and remembered for the rest\n * of the request — two hundred rows at one company is one read and at most\n * one write, not two hundred of each.\n *\n * ## Who may call it\n *\n * `resolveImportContext` (`import-context.ts`) — the two gates every CSV\n * import route asks, shared with the companies import so one permission\n * has one spelling.\n */\n\nimport {\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  nameSearchFields,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  CONTACT_IMPORT_CHUNK_SIZE,\n  CONTACT_IMPORT_MAX_BODY_BYTES,\n  type ContactImportChunkResult,\n  type ContactImportRawRow,\n  type ContactImportRow,\n  type ContactImportSkippedRow,\n  normalizeContactImportRow,\n} from '../model/crm-import'\nimport { crmRecordsQuotaForOrg, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { captureHostContact } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\n/** The one sentence every imported contact's timeline opens with. */\nexport const CONTACT_IMPORT_INTERACTION_SUMMARY = 'Imported from CSV'\n\n/**\n * The holder's live custom-field definitions.\n *\n * Read in full and filtered in memory: a holder has a handful of fields,\n * and a `where` on `retiredAt` would need an index for a collection that\n * fits in one page. Definitions the caller's scope cannot see are left out\n * for the same reason a value under an undefined key is — a value written\n * under a field the holder's own form will never show is a value nobody\n * can edit.\n */\nasync function loadFieldDefinitions(\n  orgId: string,\n  readTokens: readonly string[],\n): Promise<ContactFieldDefinition[]> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.contactFields)\n    .limit(200)\n    .get()\n  return snapshot.docs\n    .map((doc) => doc.data() as ContactFieldDefinition)\n    .filter(\n      (field) =>\n        !!field.key &&\n        !field.retiredAt &&\n        visibleToTokens(field.visibleTo, readTokens),\n    )\n}\n\n/**\n * The company a name refers to in this scope, created when there is none.\n *\n * Looked up by `nameLower`, the search twin `nameSearchFields` writes on\n * every company, and narrowed in memory to the ones the caller's scope can\n * see — two clients of one agency may each have an \"Acme\" and must each get\n * their own. Created with the same scope stamp every CRM creator uses, so\n * the company lands exactly where a contact captured on this site would.\n */\nasync function resolveCompanyId(\n  context: Extract<ImportContext, { ok: true }>,\n  name: string,\n  cache: Map<string, string>,\n  tally: { created: number },\n): Promise<string> {\n  const fields = nameSearchFields(name)\n  const cached = cache.get(fields.nameLower)\n  if (cached) return cached\n  const orgRef = firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(context.orgId)\n  const companies = orgRef.collection(CRM_COLLECTIONS.companies)\n  const matches = await companies\n    .where('nameLower', '==', fields.nameLower)\n    .limit(10)\n    .get()\n  const seen = matches.docs.find((doc) =>\n    visibleToTokens(doc.get('visibleTo'), context.readTokens),\n  )\n  if (seen) {\n    cache.set(fields.nameLower, seen.id)\n    return seen.id\n  }\n  /*\n   * THE RECORDS BAND (AGL-2611). A company is a record of the same band\n   * the contact behind this row will meet at its own door, so on an org\n   * at a full hard band the row gets no company rather than a company it\n   * was not allowed to hold. Nothing is reported here: the contact is\n   * refused `audience-band` a few lines on and the row is listed skipped,\n   * which is the one message the operator needs. A plan with an overage\n   * rate never reaches this branch — a rate is what makes the band meter\n   * instead of refuse.\n   */\n  const room = await crmRecordsQuotaForOrg(context.org as never, orgRef)\n  if (!room.allowed) return ''\n  const created = await companies.add({\n    ...fields,\n    hostId: context.hostId,\n    visibleTo: context.scopeTokens,\n    createdByUid: context.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  tally.created += 1\n  cache.set(fields.nameLower, created.id)\n  return created.id\n}\n\n/**\n * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.\n *\n * Rows are written one after another rather than in parallel, because the\n * door's create path counts the collection before it adds: two hundred\n * creates racing one another would each count the same audience and each\n * pass a band the last of them should have hit.\n */\nexport const crmContactsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<ContactImportRawRow>(req, {\n    maxBodyBytes: CONTACT_IMPORT_MAX_BODY_BYTES,\n    chunkSize: CONTACT_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const fields = await loadFieldDefinitions(context.orgId, context.readTokens)\n    const skipped: ContactImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: ContactImportRow }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged: the\n     * second row would merge onto the first's record and the count would\n     * read one created and one merged for one person in one file, which is\n     * a number the operator cannot reconcile against the rows they sent.\n     * Across requests the door's own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeContactImportRow(raw, fields)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      if (seen.has(verdict.row.email)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(verdict.row.email)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    const owners = await ownerDirectory(\n      context.orgId,\n      normalized.map((entry) => entry.row),\n    )\n    const ownersUnresolved = new Set<string>()\n    const companies = new Map<string, string>()\n    const companyTally = { created: 0 }\n    let created = 0\n    let merged = 0\n\n    for (const { index, row } of normalized) {\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const companyId = row.companyName\n        ? await resolveCompanyId(context, row.companyName, companies, companyTally)\n        : undefined\n      const verdict = await captureHostContact({\n        hostId: context.hostId,\n        email: row.email,\n        ...(row.name ? { name: row.name } : {}),\n        source: 'import',\n        interaction: { summary: CONTACT_IMPORT_INTERACTION_SUMMARY },\n        marketingConsent: row.marketingConsent,\n        tags: row.tags,\n        facet: {\n          ...(row.phone ? { phone: row.phone } : {}),\n          ...(row.jobTitle ? { jobTitle: row.jobTitle } : {}),\n          ...(companyId ? { companyId } : {}),\n          ...(row.address ? { address: row.address } : {}),\n          ...(ownerUid ? { ownerUid } : {}),\n          ...(row.lifecycleStage ? { lifecycleStage: row.lifecycleStage } : {}),\n          ...(Object.keys(row.custom).length ? { custom: row.custom } : {}),\n        },\n        // An import is the merchant's own act and files nobody under a\n        // campaign; the picker on the profile is where that happens.\n        campaignIds: [],\n      })\n      if ('refused' in verdict) {\n        skipped.push({\n          index,\n          email: row.email,\n          reason:\n            verdict.refused === 'band'\n              ? 'audience-band'\n              : verdict.refused === 'invalid-email'\n                ? 'invalid-email'\n                : verdict.refused === 'erased'\n                  ? 'erased'\n                  : 'write-failed',\n        })\n        continue\n      }\n      if (verdict.created) created += 1\n      else merged += 1\n    }\n\n    const result: ContactImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      companiesCreated: companyTally.created,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/contacts-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["CRM_COLLECTIONS","nameSearchFields","visibleToTokens","CONTACT_IMPORT_CHUNK_SIZE","CONTACT_IMPORT_MAX_BODY_BYTES","normalizeContactImportRow","crmRecordsQuotaForOrg","firebaseAdmin","captureHostContact","FieldValue","ownerDirectory","readImportRows","resolveImportContext","CONTACT_IMPORT_INTERACTION_SUMMARY","loadFieldDefinitions","orgId","readTokens","snapshot","app","firestore","collection","doc","contactFields","limit","get","docs","map","data","filter","field","key","retiredAt","visibleTo","resolveCompanyId","context","name","cache","tally","fields","cached","nameLower","orgRef","companies","matches","where","seen","find","set","id","room","org","allowed","created","add","hostId","scopeTokens","createdByUid","uid","createdAt","serverTimestamp","updatedAt","crmContactsImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","ok","body","skipped","dropped","normalized","Set","rows","forEach","raw","index","verdict","push","email","input","reason","has","row","entry","owners","ownersUnresolved","Map","companyTally","merged","ownerUid","ownerEmail","companyId","companyName","undefined","source","interaction","summary","marketingConsent","tags","facet","phone","jobTitle","address","lifecycleStage","Object","keys","custom","length","campaignIds","refused","result","received","sort","a","b","companiesCreated","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CC,GAED,SAEEA,eAAe,EACfC,gBAAgB,EAEhBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,yBAAyB,EACzBC,6BAA6B,EAK7BC,yBAAyB,QACpB,yBAAqB;AAC5B,SAASC,qBAAqB,EAAEC,aAAa,QAAQ,2BAA0B;AAC/E,SAASC,kBAAkB,QAAQ,wBAAuB;AAC1D,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAEzB,mEAAmE,GACnE,OAAO,MAAMC,qCAAqC,oBAAmB;AAErE;;;;;;;;;CASC,GACD,eAAeC,qBACbC,KAAa,EACbC,UAA6B;IAE7B,MAAMC,WAAW,MAAMV,cACpBW,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACN,OACJK,UAAU,CAACpB,gBAAgBsB,aAAa,EACxCC,KAAK,CAAC,KACNC,GAAG;IACN,OAAOP,SAASQ,IAAI,CACjBC,GAAG,CAAC,CAACL,MAAQA,IAAIM,IAAI,IACrBC,MAAM,CACL,CAACC,QACC,CAAC,CAACA,MAAMC,GAAG,IACX,CAACD,MAAME,SAAS,IAChB7B,gBAAgB2B,MAAMG,SAAS,EAAEhB;AAEzC;AAEA;;;;;;;;CAQC,GACD,eAAeiB,iBACbC,OAA6C,EAC7CC,IAAY,EACZC,KAA0B,EAC1BC,KAA0B;IAE1B,MAAMC,SAASrC,iBAAiBkC;IAChC,MAAMI,SAASH,MAAMZ,GAAG,CAACc,OAAOE,SAAS;IACzC,IAAID,QAAQ,OAAOA;IACnB,MAAME,SAASlC,cACZW,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACa,QAAQnB,KAAK;IACpB,MAAM2B,YAAYD,OAAOrB,UAAU,CAACpB,gBAAgB0C,SAAS;IAC7D,MAAMC,UAAU,MAAMD,UACnBE,KAAK,CAAC,aAAa,MAAMN,OAAOE,SAAS,EACzCjB,KAAK,CAAC,IACNC,GAAG;IACN,MAAMqB,OAAOF,QAAQlB,IAAI,CAACqB,IAAI,CAAC,CAACzB,MAC9BnB,gBAAgBmB,IAAIG,GAAG,CAAC,cAAcU,QAAQlB,UAAU;IAE1D,IAAI6B,MAAM;QACRT,MAAMW,GAAG,CAACT,OAAOE,SAAS,EAAEK,KAAKG,EAAE;QACnC,OAAOH,KAAKG,EAAE;IAChB;IACA;;;;;;;;;GASC,GACD,MAAMC,OAAO,MAAM3C,sBAAsB4B,QAAQgB,GAAG,EAAWT;IAC/D,IAAI,CAACQ,KAAKE,OAAO,EAAE,OAAO;IAC1B,MAAMC,UAAU,MAAMV,UAAUW,GAAG,CAAC,aAC/Bf;QACHgB,QAAQpB,QAAQoB,MAAM;QACtBtB,WAAWE,QAAQqB,WAAW;QAC9BC,cAActB,QAAQuB,GAAG;QACzBC,WAAWjD,WAAWkD,eAAe;QACrCC,WAAWnD,WAAWkD,eAAe;;IAEvCtB,MAAMe,OAAO,IAAI;IACjBhB,MAAMW,GAAG,CAACT,OAAOE,SAAS,EAAEY,QAAQJ,EAAE;IACtC,OAAOI,QAAQJ,EAAE;AACnB;AAEA;;;;;;;CAOC,GACD,OAAO,MAAMa,2BAA6C,OAAOC,KAAKC;IACpE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAO1D,eAAoCmD,KAAK;QACpDQ,cAAclE;QACdmE,WAAWpE;IACb;IACA,IAAI,WAAWkE,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMlC,UAAU,MAAMtB,qBAAqBkD;QAC3C,IAAI5B,QAAQsC,EAAE,KAAK,OAAO,OAAOT,IAAIG,MAAM,CAAChC,QAAQgC,MAAM,EAAEC,IAAI,CAACjC,QAAQuC,IAAI;QAE7E,MAAMnC,SAAS,MAAMxB,qBAAqBoB,QAAQnB,KAAK,EAAEmB,QAAQlB,UAAU;QAC3E,MAAM0D,UAAqC,EAAE;QAC7C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAyD,EAAE;QACjE;;;;;;KAMC,GACD,MAAM/B,OAAO,IAAIgC;QACjBR,KAAKS,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU7E,0BAA0B2E,KAAK1C;YAC/C,IAAI4C,QAAQV,EAAE,KAAK,OAAO;gBACxBE,QAAQS,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,IAAIzC,KAAK0C,GAAG,CAACL,QAAQM,GAAG,CAACJ,KAAK,GAAG;gBAC/BV,QAAQS,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQM,GAAG,CAACJ,KAAK;oBAAEE,QAAQ;gBAAY;gBACpE;YACF;YACAzC,KAAKQ,GAAG,CAAC6B,QAAQM,GAAG,CAACJ,KAAK;YAC1B,KAAK,MAAMK,SAASP,QAAQM,GAAG,CAACb,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACc,MAAM5D,KAAK,CAAC,GAAG,EAAC8C,uBAAAA,OAAO,CAACc,MAAM5D,KAAK,CAAC,YAApB8C,uBAAwB,KAAK;YACvD;YACAC,WAAWO,IAAI,CAAC;gBAAEF;gBAAOO,KAAKN,QAAQM,GAAG;YAAC;QAC5C;QAEA,MAAME,SAAS,MAAMhF,eACnBwB,QAAQnB,KAAK,EACb6D,WAAWlD,GAAG,CAAC,CAAC+D,QAAUA,MAAMD,GAAG;QAErC,MAAMG,mBAAmB,IAAId;QAC7B,MAAMnC,YAAY,IAAIkD;QACtB,MAAMC,eAAe;YAAEzC,SAAS;QAAE;QAClC,IAAIA,UAAU;QACd,IAAI0C,SAAS;QAEb,KAAK,MAAM,EAAEb,KAAK,EAAEO,GAAG,EAAE,IAAIZ,WAAY;YACvC,IAAImB;YACJ,IAAIP,IAAIQ,UAAU,EAAE;gBAClBD,WAAWL,OAAOlE,GAAG,CAACgE,IAAIQ,UAAU;gBACpC,IAAI,CAACD,UAAUJ,iBAAiBtC,GAAG,CAACmC,IAAIQ,UAAU;YACpD;YACA,MAAMC,YAAYT,IAAIU,WAAW,GAC7B,MAAMjE,iBAAiBC,SAASsD,IAAIU,WAAW,EAAExD,WAAWmD,gBAC5DM;YACJ,MAAMjB,UAAU,MAAM1E,mBAAmB;gBACvC8C,QAAQpB,QAAQoB,MAAM;gBACtB8B,OAAOI,IAAIJ,KAAK;eACZI,IAAIrD,IAAI,GAAG;gBAAEA,MAAMqD,IAAIrD,IAAI;YAAC,IAAI,CAAC;gBACrCiE,QAAQ;gBACRC,aAAa;oBAAEC,SAASzF;gBAAmC;gBAC3D0F,kBAAkBf,IAAIe,gBAAgB;gBACtCC,MAAMhB,IAAIgB,IAAI;gBACdC,OAAO,aACDjB,IAAIkB,KAAK,GAAG;oBAAEA,OAAOlB,IAAIkB,KAAK;gBAAC,IAAI,CAAC,GACpClB,IAAImB,QAAQ,GAAG;oBAAEA,UAAUnB,IAAImB,QAAQ;gBAAC,IAAI,CAAC,GAC7CV,YAAY;oBAAEA;gBAAU,IAAI,CAAC,GAC7BT,IAAIoB,OAAO,GAAG;oBAAEA,SAASpB,IAAIoB,OAAO;gBAAC,IAAI,CAAC,GAC1Cb,WAAW;oBAAEA;gBAAS,IAAI,CAAC,GAC3BP,IAAIqB,cAAc,GAAG;oBAAEA,gBAAgBrB,IAAIqB,cAAc;gBAAC,IAAI,CAAC,GAC/DC,OAAOC,IAAI,CAACvB,IAAIwB,MAAM,EAAEC,MAAM,GAAG;oBAAED,QAAQxB,IAAIwB,MAAM;gBAAC,IAAI,CAAC;gBAEjE,+DAA+D;gBAC/D,6DAA6D;gBAC7DE,aAAa,EAAE;;YAEjB,IAAI,aAAahC,SAAS;gBACxBR,QAAQS,IAAI,CAAC;oBACXF;oBACAG,OAAOI,IAAIJ,KAAK;oBAChBE,QACEJ,QAAQiC,OAAO,KAAK,SAChB,kBACAjC,QAAQiC,OAAO,KAAK,kBAClB,kBACAjC,QAAQiC,OAAO,KAAK,WAClB,WACA;gBACZ;gBACA;YACF;YACA,IAAIjC,QAAQ9B,OAAO,EAAEA,WAAW;iBAC3B0C,UAAU;QACjB;QAEA,MAAMsB,SAAmC;YACvCC,UAAUhD,KAAKS,IAAI,CAACmC,MAAM;YAC1B7D;YACA0C;YACApB,SAASA,QAAQ4C,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEtC,KAAK,GAAGuC,EAAEvC,KAAK;YACjDN;YACA8C,kBAAkB5B,aAAazC,OAAO;YACtCuC,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO5B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACiD;IAC9B,EAAE,OAAOhD,OAAO;QACdsD,QAAQtD,KAAK,CAAC,8BAA8BA;QAC5C,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/contacts-merge.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/contacts-merge` — two records for one person become one
+ * (AGL-2625).
+ *
+ * Body: `{ hostId, survivorId, mergedId }`. The survivor keeps its address
+ * as the identity; the merged record's address becomes an alternate on it,
+ * every deal, task, activity and lead naming the merged record is repointed,
+ * and the merged document is deleted. `mergeContacts` in the data library
+ * is the whole of the work, so the REST door performs the same merge.
+ *
+ * ## Who may call it
+ *
+ * An ORG-WIDE member holding `data.manage`. Narrower than the other CRM
+ * routes, which admit a site-scoped member for the site they reach, and
+ * deliberately: a merge is org-scoped by nature. Contacts are org documents
+ * shared by every site that captured the person, and folding two of them
+ * together touches every holder's facet, every site's consent entry and
+ * every deal in the org that named the merged record — a decision about
+ * records a site-scoped member cannot read, made on their behalf. The
+ * console offers the action to org-wide members only, and this is the door
+ * that makes that a rule rather than a hint.
+ *
+ * ## Why a server route
+ *
+ * A browser could write the survivor and delete the merged record under the
+ * rules, and could not do the rest: a scoped `array-contains-any` listener
+ * cannot repoint deals it may not list, the address index is closed to
+ * clients, and the transaction over both documents is what keeps two merges
+ * of one pair from both succeeding.
+ *
+ * ## The organization variant (AGL-2634)
+ *
+ * `{ orgId, hostId?, survivorId, mergedId }` from the org-level hub. The
+ * same org-wide caller, authorized by the org directly rather than through
+ * a site it names — so a record no site captured can be merged there — and
+ * the act logged in the org's feed. A site beside the org is the record's
+ * own, and is where the data library files the timeline note and the
+ * site's feed line when there is one.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+export declare const CONTACTS_MERGE_ROUTE = "crm/contacts-merge";
+/** The body the console's merge dialog posts. */
+export interface ContactsMergeRequest {
+    /** The site the merge runs as; at the organization level the record's own, or absent. */
+    hostId?: string;
+    /** The organization, at the organization level (AGL-2634). */
+    orgId?: string;
+    /** `orgs/{orgId}/contacts/{id}` — the record that stays. */
+    survivorId: string;
+    /** The record folded into it and deleted. */
+    mergedId: string;
+}
+/** What the route answers on success. */
+export interface ContactsMergeResponse {
+    ok: true;
+    survivorId: string;
+    survivorEmail: string;
+    mergedId: string;
+    mergedEmail: string;
+    /** Every address the survivor answers to now, primary first. */
+    emails: string[];
+    repointed: {
+        deals: number;
+        tasks: number;
+        activities: number;
+        leads: number;
+    };
+}
+export declare const contactsMergeHandler: PluginApiHandler;
+export default contactsMergeHandler;

package/src/lib/server/contacts-merge.js

@@ -0,0 +1,206 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/contacts-merge` — two records for one person become one
+ * (AGL-2625).
+ *
+ * Body: `{ hostId, survivorId, mergedId }`. The survivor keeps its address
+ * as the identity; the merged record's address becomes an alternate on it,
+ * every deal, task, activity and lead naming the merged record is repointed,
+ * and the merged document is deleted. `mergeContacts` in the data library
+ * is the whole of the work, so the REST door performs the same merge.
+ *
+ * ## Who may call it
+ *
+ * An ORG-WIDE member holding `data.manage`. Narrower than the other CRM
+ * routes, which admit a site-scoped member for the site they reach, and
+ * deliberately: a merge is org-scoped by nature. Contacts are org documents
+ * shared by every site that captured the person, and folding two of them
+ * together touches every holder's facet, every site's consent entry and
+ * every deal in the org that named the merged record — a decision about
+ * records a site-scoped member cannot read, made on their behalf. The
+ * console offers the action to org-wide members only, and this is the door
+ * that makes that a rule rather than a hint.
+ *
+ * ## Why a server route
+ *
+ * A browser could write the survivor and delete the merged record under the
+ * rules, and could not do the rest: a scoped `array-contains-any` listener
+ * cannot repoint deals it may not list, the address index is closed to
+ * clients, and the transaction over both documents is what keeps two merges
+ * of one pair from both succeeding.
+ *
+ * ## The organization variant (AGL-2634)
+ *
+ * `{ orgId, hostId?, survivorId, mergedId }` from the org-level hub. The
+ * same org-wide caller, authorized by the org directly rather than through
+ * a site it names — so a record no site captured can be merged there — and
+ * the act logged in the org's feed. A site beside the org is the record's
+ * own, and is where the data library files the timeline note and the
+ * site's feed line when there is one.
+ */ import { firebaseAdmin, getOrgForHost, logOrgActivity, mergeContacts } from "@aglyn/tenant-data-admin";
+import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
+import { authorizeOrgCaller, holdsDataManage, readCrmRouteScope } from "./org-caller.js";
+import { crmSuiteRefusal } from "./suite-gate.js";
+export const CONTACTS_MERGE_ROUTE = 'crm/contacts-merge';
+function typed(value, max) {
+    return String(value != null ? value : '').trim().slice(0, max);
+}
+export const contactsMergeHandler = async (req, res)=>{
+    var _req_body;
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        res.status(405).json({
+            error: 'Method not allowed'
+        });
+        return;
+    }
+    const body = typeof req.body === 'string' ? JSON.parse(req.body) : (_req_body = req.body) != null ? _req_body : {};
+    const routeScope = readCrmRouteScope(body);
+    const survivorId = typed(body.survivorId, 200);
+    const mergedId = typed(body.mergedId, 200);
+    if (!routeScope || !survivorId || !mergedId) {
+        res.status(400).json({
+            error: 'Missing hostId, survivorId or mergedId'
+        });
+        return;
+    }
+    if (survivorId === mergedId) {
+        res.status(400).json({
+            error: 'Pick two different contacts to merge'
+        });
+        return;
+    }
+    const { hostId } = routeScope;
+    const refusal = 'Merging contacts requires the data permission across the whole workspace';
+    try {
+        let orgId;
+        let org;
+        let actor;
+        let actorName;
+        let orgActor = null;
+        if (routeScope.level === 'org') {
+            const caller = await authorizeOrgCaller(req, routeScope.orgId, {
+                needs: 'data.manage',
+                refusal
+            });
+            if (caller.ok === false) {
+                res.status(caller.status).json({
+                    error: caller.error
+                });
+                return;
+            }
+            orgId = caller.orgId;
+            org = caller.org;
+            actor = {
+                uid: caller.uid,
+                email: caller.email
+            };
+            actorName = caller.name || null;
+            orgActor = actor;
+        } else {
+            var _req_headers_authorization, _decoded_email;
+            const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
+            const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+            if (!idToken) {
+                res.status(401).json({
+                    error: 'Unauthenticated'
+                });
+                return;
+            }
+            const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+            const staff = decoded['staff'] === true;
+            const membership = await resolveOrgPermissions(decoded.uid, {
+                hostId
+            });
+            if (!staff && !(membership.orgWide && await holdsDataManage(membership.orgId, decoded.uid))) {
+                res.status(403).json({
+                    error: refusal
+                });
+                return;
+            }
+            const resolved = await getOrgForHost(hostId);
+            if (!resolved) {
+                res.status(404).json({
+                    error: 'Unknown site'
+                });
+                return;
+            }
+            orgId = resolved.orgId;
+            org = resolved.org;
+            actor = {
+                uid: decoded.uid,
+                email: (_decoded_email = decoded.email) != null ? _decoded_email : null
+            };
+            actorName = typeof decoded['name'] === 'string' ? decoded['name'] : null;
+        }
+        // Merging is the CRM's at either level (AGL-2787).
+        const suite = crmSuiteRefusal(org, 'Merging two contacts');
+        if (suite) {
+            res.status(suite.status).json(suite.body);
+            return;
+        }
+        const firestore = firebaseAdmin.app().firestore();
+        const result = await mergeContacts({
+            firestore,
+            orgRef: firestore.collection('orgs').doc(orgId),
+            survivorId,
+            mergedId,
+            actor,
+            hostId: hostId || null,
+            actorName
+        });
+        if (result.ok === false) {
+            if (result.reason === 'same-record') {
+                res.status(400).json({
+                    error: 'Pick two different contacts to merge'
+                });
+                return;
+            }
+            res.status(404).json({
+                error: result.reason === 'survivor-missing' ? 'The contact to keep could not be found' : 'The contact to merge could not be found — it may already have been merged'
+            });
+            return;
+        }
+        // The org-level act, in the org's feed: the data library wrote the
+        // site's line when a site was named, and the org's is this door's.
+        if (orgActor) {
+            await logOrgActivity(orgId, orgActor, `Merged with ${result.mergedEmail}`, {
+                type: 'contact',
+                id: result.survivorId,
+                name: result.survivorEmail
+            });
+        }
+        const answer = {
+            ok: true,
+            survivorId: result.survivorId,
+            survivorEmail: result.survivorEmail,
+            mergedId: result.mergedId,
+            mergedEmail: result.mergedEmail,
+            emails: result.emails,
+            repointed: result.repointed
+        };
+        res.status(200).json(answer);
+    } catch (error) {
+        console.error('[crm] contacts-merge failed', routeScope, survivorId, mergedId, error);
+        res.status(500).json({
+            error: 'The contacts could not be merged.'
+        });
+    }
+};
+export default contactsMergeHandler;
+
+//# sourceMappingURL=contacts-merge.js.map