@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/server/contacts-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contacts-merge.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contacts-merge` — two records for one person become one\n * (AGL-2625).\n *\n * Body: `{ hostId, survivorId, mergedId }`. The survivor keeps its address\n * as the identity; the merged record's address becomes an alternate on it,\n * every deal, task, activity and lead naming the merged record is repointed,\n * and the merged document is deleted. `mergeContacts` in the data library\n * is the whole of the work, so the REST door performs the same merge.\n *\n * ## Who may call it\n *\n * An ORG-WIDE member holding `data.manage`. Narrower than the other CRM\n * routes, which admit a site-scoped member for the site they reach, and\n * deliberately: a merge is org-scoped by nature. Contacts are org documents\n * shared by every site that captured the person, and folding two of them\n * together touches every holder's facet, every site's consent entry and\n * every deal in the org that named the merged record — a decision about\n * records a site-scoped member cannot read, made on their behalf. The\n * console offers the action to org-wide members only, and this is the door\n * that makes that a rule rather than a hint.\n *\n * ## Why a server route\n *\n * A browser could write the survivor and delete the merged record under the\n * rules, and could not do the rest: a scoped `array-contains-any` listener\n * cannot repoint deals it may not list, the address index is closed to\n * clients, and the transaction over both documents is what keeps two merges\n * of one pair from both succeeding.\n *\n * ## The organization variant (AGL-2634)\n *\n * `{ orgId, hostId?, survivorId, mergedId }` from the org-level hub. The\n * same org-wide caller, authorized by the org directly rather than through\n * a site it names — so a record no site captured can be merged there — and\n * the act logged in the org's feed. A site beside the org is the record's\n * own, and is where the data library files the timeline note and the\n * site's feed line when there is one.\n */\n\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  logOrgActivity,\n  mergeContacts,\n} from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport { authorizeOrgCaller, holdsDataManage, readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\nexport const CONTACTS_MERGE_ROUTE = 'crm/contacts-merge'\n\n/** The body the console's merge dialog posts. */\nexport interface ContactsMergeRequest {\n  /** The site the merge runs as; at the organization level the record's own, or absent. */\n  hostId?: string\n  /** The organization, at the organization level (AGL-2634). */\n  orgId?: string\n  /** `orgs/{orgId}/contacts/{id}` — the record that stays. */\n  survivorId: string\n  /** The record folded into it and deleted. */\n  mergedId: string\n}\n\n/** What the route answers on success. */\nexport interface ContactsMergeResponse {\n  ok: true\n  survivorId: string\n  survivorEmail: string\n  mergedId: string\n  mergedEmail: string\n  /** Every address the survivor answers to now, primary first. */\n  emails: string[]\n  repointed: { deals: number; tasks: number; activities: number; leads: number }\n}\n\nfunction typed(value: unknown, max: number): string {\n  return String(value ?? '')\n    .trim()\n    .slice(0, max)\n}\n\nexport const contactsMergeHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body: Partial<ContactsMergeRequest> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const routeScope = readCrmRouteScope(body as Record<string, unknown>)\n  const survivorId = typed(body.survivorId, 200)\n  const mergedId = typed(body.mergedId, 200)\n  if (!routeScope || !survivorId || !mergedId) {\n    res.status(400).json({ error: 'Missing hostId, survivorId or mergedId' })\n    return\n  }\n  if (survivorId === mergedId) {\n    res.status(400).json({ error: 'Pick two different contacts to merge' })\n    return\n  }\n  const { hostId } = routeScope\n  const refusal =\n    'Merging contacts requires the data permission across the whole workspace'\n\n  try {\n    let orgId: string\n    let org: unknown\n    let actor: { uid: string; email: string | null }\n    let actorName: string | null\n    let orgActor: typeof actor | null = null\n    if (routeScope.level === 'org') {\n      const caller = await authorizeOrgCaller(req, routeScope.orgId, {\n        needs: 'data.manage',\n        refusal,\n      })\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      orgId = caller.orgId\n      org = caller.org\n      actor = { uid: caller.uid, email: caller.email }\n      actorName = caller.name || null\n      orgActor = actor\n    } else {\n      const authorization = String(req.headers.authorization ?? '')\n      const idToken = authorization.startsWith('Bearer ')\n        ? authorization.slice('Bearer '.length)\n        : undefined\n      if (!idToken) {\n        res.status(401).json({ error: 'Unauthenticated' })\n        return\n      }\n      const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n      const staff = decoded['staff'] === true\n      const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n      if (\n        !staff &&\n        !(membership.orgWide && (await holdsDataManage(membership.orgId, decoded.uid)))\n      ) {\n        res.status(403).json({ error: refusal })\n        return\n      }\n      const resolved = await getOrgForHost(hostId)\n      if (!resolved) {\n        res.status(404).json({ error: 'Unknown site' })\n        return\n      }\n      orgId = resolved.orgId\n      org = resolved.org\n      actor = { uid: decoded.uid, email: decoded.email ?? null }\n      actorName = typeof decoded['name'] === 'string' ? decoded['name'] : null\n    }\n    // Merging is the CRM's at either level (AGL-2787).\n    const suite = crmSuiteRefusal(org, 'Merging two contacts')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const result = await mergeContacts({\n      firestore,\n      orgRef: firestore.collection('orgs').doc(orgId),\n      survivorId,\n      mergedId,\n      actor,\n      hostId: hostId || null,\n      actorName,\n    })\n    if (result.ok === false) {\n      if (result.reason === 'same-record') {\n        res.status(400).json({ error: 'Pick two different contacts to merge' })\n        return\n      }\n      res.status(404).json({\n        error:\n          result.reason === 'survivor-missing'\n            ? 'The contact to keep could not be found'\n            : 'The contact to merge could not be found — it may already have been merged',\n      })\n      return\n    }\n    // The org-level act, in the org's feed: the data library wrote the\n    // site's line when a site was named, and the org's is this door's.\n    if (orgActor) {\n      await logOrgActivity(orgId, orgActor, `Merged with ${result.mergedEmail}`, {\n        type: 'contact',\n        id: result.survivorId,\n        name: result.survivorEmail,\n      })\n    }\n    const answer: ContactsMergeResponse = {\n      ok: true,\n      survivorId: result.survivorId,\n      survivorEmail: result.survivorEmail,\n      mergedId: result.mergedId,\n      mergedEmail: result.mergedEmail,\n      emails: result.emails,\n      repointed: result.repointed,\n    }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] contacts-merge failed', routeScope, survivorId, mergedId, error)\n    res.status(500).json({ error: 'The contacts could not be merged.' })\n  }\n}\n\nexport default contactsMergeHandler\n"],"names":["firebaseAdmin","getOrgForHost","logOrgActivity","mergeContacts","resolveOrgPermissions","authorizeOrgCaller","holdsDataManage","readCrmRouteScope","crmSuiteRefusal","CONTACTS_MERGE_ROUTE","typed","value","max","String","trim","slice","contactsMergeHandler","req","res","method","setHeader","status","json","error","body","JSON","parse","routeScope","survivorId","mergedId","hostId","refusal","orgId","org","actor","actorName","orgActor","level","caller","needs","ok","uid","email","name","decoded","authorization","headers","idToken","startsWith","length","undefined","app","auth","verifyIdToken","staff","membership","orgWide","resolved","suite","firestore","result","orgRef","collection","doc","reason","mergedEmail","type","id","survivorEmail","answer","emails","repointed","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GAGD,SACEA,aAAa,EACbC,aAAa,EACbC,cAAc,EACdC,aAAa,QACR,2BAA0B;AACjC,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SAASC,kBAAkB,EAAEC,eAAe,EAAEC,iBAAiB,QAAQ,kBAAc;AACrF,SAASC,eAAe,QAAQ,kBAAc;AAE9C,OAAO,MAAMC,uBAAuB,qBAAoB;AA0BxD,SAASC,MAAMC,KAAc,EAAEC,GAAW;IACxC,OAAOC,OAAOF,gBAAAA,QAAS,IACpBG,IAAI,GACJC,KAAK,CAAC,GAAGH;AACd;AAEA,OAAO,MAAMI,uBAAyC,OAAOC,KAAKC;QAOPD;IANzD,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMC,OACJ,OAAOP,IAAIO,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACT,IAAIO,IAAI,KAAKP,YAAAA,IAAIO,IAAI,YAARP,YAAY,CAAC;IACtE,MAAMU,aAAapB,kBAAkBiB;IACrC,MAAMI,aAAalB,MAAMc,KAAKI,UAAU,EAAE;IAC1C,MAAMC,WAAWnB,MAAMc,KAAKK,QAAQ,EAAE;IACtC,IAAI,CAACF,cAAc,CAACC,cAAc,CAACC,UAAU;QAC3CX,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAyC;QACvE;IACF;IACA,IAAIK,eAAeC,UAAU;QAC3BX,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAuC;QACrE;IACF;IACA,MAAM,EAAEO,MAAM,EAAE,GAAGH;IACnB,MAAMI,UACJ;IAEF,IAAI;QACF,IAAIC;QACJ,IAAIC;QACJ,IAAIC;QACJ,IAAIC;QACJ,IAAIC,WAAgC;QACpC,IAAIT,WAAWU,KAAK,KAAK,OAAO;YAC9B,MAAMC,SAAS,MAAMjC,mBAAmBY,KAAKU,WAAWK,KAAK,EAAE;gBAC7DO,OAAO;gBACPR;YACF;YACA,IAAIO,OAAOE,EAAE,KAAK,OAAO;gBACvBtB,IAAIG,MAAM,CAACiB,OAAOjB,MAAM,EAAEC,IAAI,CAAC;oBAAEC,OAAOe,OAAOf,KAAK;gBAAC;gBACrD;YACF;YACAS,QAAQM,OAAON,KAAK;YACpBC,MAAMK,OAAOL,GAAG;YAChBC,QAAQ;gBAAEO,KAAKH,OAAOG,GAAG;gBAAEC,OAAOJ,OAAOI,KAAK;YAAC;YAC/CP,YAAYG,OAAOK,IAAI,IAAI;YAC3BP,WAAWF;QACb,OAAO;gBACwBjB,4BAyBM2B;YAzBnC,MAAMC,gBAAgBhC,QAAOI,6BAAAA,IAAI6B,OAAO,CAACD,aAAa,YAAzB5B,6BAA6B;YAC1D,MAAM8B,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAc9B,KAAK,CAAC,UAAUkC,MAAM,IACpCC;YACJ,IAAI,CAACH,SAAS;gBACZ7B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAkB;gBAChD;YACF;YACA,MAAMqB,UAAU,MAAM5C,cAAcmD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACN;YAC/D,MAAMO,QAAQV,OAAO,CAAC,QAAQ,KAAK;YACnC,MAAMW,aAAa,MAAMnD,sBAAsBwC,QAAQH,GAAG,EAAE;gBAAEX;YAAO;YACrE,IACE,CAACwB,SACD,CAAEC,CAAAA,WAAWC,OAAO,IAAK,MAAMlD,gBAAgBiD,WAAWvB,KAAK,EAAEY,QAAQH,GAAG,CAAC,GAC7E;gBACAvB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAOQ;gBAAQ;gBACtC;YACF;YACA,MAAM0B,WAAW,MAAMxD,cAAc6B;YACrC,IAAI,CAAC2B,UAAU;gBACbvC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAe;gBAC7C;YACF;YACAS,QAAQyB,SAASzB,KAAK;YACtBC,MAAMwB,SAASxB,GAAG;YAClBC,QAAQ;gBAAEO,KAAKG,QAAQH,GAAG;gBAAEC,KAAK,GAAEE,iBAAAA,QAAQF,KAAK,YAAbE,iBAAiB;YAAK;YACzDT,YAAY,OAAOS,OAAO,CAAC,OAAO,KAAK,WAAWA,OAAO,CAAC,OAAO,GAAG;QACtE;QACA,mDAAmD;QACnD,MAAMc,QAAQlD,gBAAgByB,KAAK;QACnC,IAAIyB,OAAO;YACTxC,IAAIG,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMlC,IAAI;YACxC;QACF;QACA,MAAMmC,YAAY3D,cAAcmD,GAAG,GAAGQ,SAAS;QAC/C,MAAMC,SAAS,MAAMzD,cAAc;YACjCwD;YACAE,QAAQF,UAAUG,UAAU,CAAC,QAAQC,GAAG,CAAC/B;YACzCJ;YACAC;YACAK;YACAJ,QAAQA,UAAU;YAClBK;QACF;QACA,IAAIyB,OAAOpB,EAAE,KAAK,OAAO;YACvB,IAAIoB,OAAOI,MAAM,KAAK,eAAe;gBACnC9C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAuC;gBACrE;YACF;YACAL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBACnBC,OACEqC,OAAOI,MAAM,KAAK,qBACd,2CACA;YACR;YACA;QACF;QACA,mEAAmE;QACnE,mEAAmE;QACnE,IAAI5B,UAAU;YACZ,MAAMlC,eAAe8B,OAAOI,UAAU,CAAC,YAAY,EAAEwB,OAAOK,WAAW,EAAE,EAAE;gBACzEC,MAAM;gBACNC,IAAIP,OAAOhC,UAAU;gBACrBe,MAAMiB,OAAOQ,aAAa;YAC5B;QACF;QACA,MAAMC,SAAgC;YACpC7B,IAAI;YACJZ,YAAYgC,OAAOhC,UAAU;YAC7BwC,eAAeR,OAAOQ,aAAa;YACnCvC,UAAU+B,OAAO/B,QAAQ;YACzBoC,aAAaL,OAAOK,WAAW;YAC/BK,QAAQV,OAAOU,MAAM;YACrBC,WAAWX,OAAOW,SAAS;QAC7B;QACArD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC+C;IACvB,EAAE,OAAO9C,OAAO;QACdiD,QAAQjD,KAAK,CAAC,+BAA+BI,YAAYC,YAAYC,UAAUN;QAC/EL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoC;IACpE;AACF,EAAC;AAED,eAAeP,qBAAoB"}

package/src/lib/server/deals-import.d.ts

@@ -0,0 +1,76 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/deals-import` — one chunk of a deals file, written
+ * (AGL-2662).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-deal-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the two names a deal is
+ * filed under, and writes it with the stamp every CRM creator writes.
+ *
+ * ## The pipeline and the stage are looked up ONCE per request
+ *
+ * The org's pipelines are read once — the active ones the caller's scope
+ * can see — and every row resolves against that list by name. A row
+ * naming no pipeline lands in the default one (or the only one); a row
+ * naming no stage lands in its pipeline's first open stage. A name that
+ * matches nothing refuses the row by name, before any write, so the
+ * operator's skipped file says exactly which cell to fix.
+ *
+ * ## A deal's status is its stage's kind
+ *
+ * Landing in a `won` or `lost` stage closes the deal on creation, stamped
+ * with the same clock as `stageChangedAtMs`, the way the REST create does.
+ * No `dealWon` event fires for an imported win: the deal was won before it
+ * was filed here, and an automation on the event is for what happens next.
+ *
+ * ## The band is counted once per request
+ *
+ * A deal is a CRM record and meets the records band (AGL-2611), judged
+ * the way the companies import judges it: one aggregate at the first
+ * create, re-judged locally as the request creates more.
+ */
+import { type CrmDealStage, type CrmPipeline, type PluginApiHandler } from '@aglyn/aglyn/server';
+import { type DealImportRow } from '../model/crm-deal-import';
+/** One pipeline the request can file into, with its stages by name. */
+interface PipelineChoice {
+    id: string;
+    pipeline: CrmPipeline;
+    stages: CrmDealStage[];
+}
+/**
+ * Where one row lands: its pipeline and its stage, or which of the two
+ * names the org does not have.
+ */
+export declare function placeDealImportRow(choices: readonly PipelineChoice[], row: Pick<DealImportRow, 'pipeline' | 'stage'>): {
+    ok: true;
+    pipeline: PipelineChoice;
+    stage: CrmDealStage;
+} | {
+    ok: false;
+    reason: 'unknown-pipeline' | 'unknown-stage';
+};
+/**
+ * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.
+ *
+ * Rows are written one after another so the band's local count stays
+ * honest across the request.
+ */
+export declare const crmDealsImportHandler: PluginApiHandler;
+export {};

package/src/lib/server/deals-import.js

@@ -0,0 +1,246 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/deals-import` — one chunk of a deals file, written
+ * (AGL-2662).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-deal-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the two names a deal is
+ * filed under, and writes it with the stamp every CRM creator writes.
+ *
+ * ## The pipeline and the stage are looked up ONCE per request
+ *
+ * The org's pipelines are read once — the active ones the caller's scope
+ * can see — and every row resolves against that list by name. A row
+ * naming no pipeline lands in the default one (or the only one); a row
+ * naming no stage lands in its pipeline's first open stage. A name that
+ * matches nothing refuses the row by name, before any write, so the
+ * operator's skipped file says exactly which cell to fix.
+ *
+ * ## A deal's status is its stage's kind
+ *
+ * Landing in a `won` or `lost` stage closes the deal on creation, stamped
+ * with the same clock as `stageChangedAtMs`, the way the REST create does.
+ * No `dealWon` event fires for an imported win: the deal was won before it
+ * was filed here, and an automation on the event is for what happens next.
+ *
+ * ## The band is counted once per request
+ *
+ * A deal is a CRM record and meets the records band (AGL-2611), judged
+ * the way the companies import judges it: one aggregate at the first
+ * create, re-judged locally as the request creates more.
+ */ import { checkCrmRecordsQuota, CRM_COLLECTIONS, isPipelineArchived, nameSearchKey, visibleToTokens } from "@aglyn/aglyn/server";
+import { DEAL_IMPORT_CHUNK_SIZE, DEAL_IMPORT_MAX_BODY_BYTES, dealImportNameKey, normalizeDealImportRow } from "../model/crm-deal-import.js";
+import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
+/** The default currency a deal carries when the file names none. */ const DEFAULT_CURRENCY = 'usd';
+/** The active pipelines the caller's scope can see, in read order. */ async function readPipelines(orgRef, readTokens) {
+    const snapshot = await orgRef.collection(CRM_COLLECTIONS.pipelines).get();
+    const choices = [];
+    for (const doc of snapshot.docs){
+        var _pipeline_stages;
+        const pipeline = doc.data();
+        if (isPipelineArchived(pipeline)) continue;
+        if (!visibleToTokens(pipeline.visibleTo, readTokens)) continue;
+        const stages = [
+            ...(_pipeline_stages = pipeline.stages) != null ? _pipeline_stages : []
+        ].sort((a, b)=>a.order - b.order);
+        choices.push({
+            id: doc.id,
+            pipeline,
+            stages
+        });
+    }
+    return choices;
+}
+/**
+ * Where one row lands: its pipeline and its stage, or which of the two
+ * names the org does not have.
+ */ export function placeDealImportRow(choices, row) {
+    let pipeline;
+    if (row.pipeline) {
+        const wanted = dealImportNameKey(row.pipeline);
+        pipeline = choices.find((choice)=>{
+            var _choice_pipeline_name;
+            return dealImportNameKey((_choice_pipeline_name = choice.pipeline.name) != null ? _choice_pipeline_name : '') === wanted;
+        });
+    } else {
+        var _choices_find;
+        pipeline = (_choices_find = choices.find((choice)=>choice.pipeline.isDefault)) != null ? _choices_find : choices.length === 1 ? choices[0] : undefined;
+    }
+    if (!pipeline) return {
+        ok: false,
+        reason: 'unknown-pipeline'
+    };
+    let stage;
+    if (row.stage) {
+        const wanted = dealImportNameKey(row.stage);
+        stage = pipeline.stages.find((candidate)=>{
+            var _candidate_name;
+            return dealImportNameKey((_candidate_name = candidate.name) != null ? _candidate_name : '') === wanted;
+        });
+    } else {
+        var _pipeline_stages_find;
+        stage = (_pipeline_stages_find = pipeline.stages.find((candidate)=>candidate.kind === 'open')) != null ? _pipeline_stages_find : pipeline.stages[0];
+    }
+    if (!stage) return {
+        ok: false,
+        reason: 'unknown-stage'
+    };
+    return {
+        ok: true,
+        pipeline,
+        stage
+    };
+}
+/**
+ * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.
+ *
+ * Rows are written one after another so the band's local count stays
+ * honest across the request.
+ */ export const crmDealsImportHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const read = readImportRows(req, {
+        maxBodyBytes: DEAL_IMPORT_MAX_BODY_BYTES,
+        chunkSize: DEAL_IMPORT_CHUNK_SIZE
+    });
+    if ('error' in read) return res.status(read.status).json({
+        error: read.error
+    });
+    try {
+        const context = await resolveImportContext(req);
+        if (context.ok === false) return res.status(context.status).json(context.body);
+        const skipped = [];
+        const dropped = {};
+        const normalized = [];
+        read.rows.forEach((raw, index)=>{
+            const verdict = normalizeDealImportRow(raw);
+            if (verdict.ok === false) {
+                skipped.push({
+                    index,
+                    title: verdict.input,
+                    reason: verdict.reason
+                });
+                return;
+            }
+            for (const entry of verdict.row.dropped){
+                var _dropped_entry_field;
+                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
+            }
+            normalized.push({
+                index,
+                row: verdict.row
+            });
+        });
+        const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
+        const [owners, pipelines] = await Promise.all([
+            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
+            normalized.length ? readPipelines(orgRef, context.readTokens) : Promise.resolve([])
+        ]);
+        const ownersUnresolved = new Set();
+        const deals = orgRef.collection(CRM_COLLECTIONS.deals);
+        const stamp = creationStamp(context);
+        let counted = null;
+        let createdHere = 0;
+        let created = 0;
+        for (const { index, row } of normalized){
+            var _row_currency;
+            const placed = placeDealImportRow(pipelines, row);
+            if (placed.ok === false) {
+                skipped.push({
+                    index,
+                    title: row.title,
+                    reason: placed.reason
+                });
+                continue;
+            }
+            let ownerUid;
+            if (row.ownerEmail) {
+                ownerUid = owners.get(row.ownerEmail);
+                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
+            }
+            if (!counted) counted = await crmRecordsQuotaForOrg(context.org, orgRef);
+            const room = checkCrmRecordsQuota(context.org, counted.crmRecordsCount + createdHere);
+            if (!room.allowed) {
+                skipped.push({
+                    index,
+                    title: row.title,
+                    reason: 'records-band'
+                });
+                continue;
+            }
+            const nowMs = Date.now();
+            const { stage } = placed;
+            const status = stage.kind === 'won' ? 'won' : stage.kind === 'lost' ? 'lost' : 'open';
+            await deals.add(_extends({
+                title: row.title,
+                titleLower: nameSearchKey(row.title),
+                pipelineId: placed.pipeline.id,
+                stageId: stage.id,
+                status,
+                stageChangedAtMs: nowMs,
+                closedAtMs: status === 'open' ? null : nowMs,
+                currency: (_row_currency = row.currency) != null ? _row_currency : DEFAULT_CURRENCY
+            }, typeof row.amountCents === 'number' ? {
+                amountCents: row.amountCents
+            } : {}, ownerUid ? {
+                ownerUid
+            } : {}, typeof row.expectedCloseAtMs === 'number' ? {
+                expectedCloseAtMs: row.expectedCloseAtMs
+            } : {}, row.notes ? {
+                notes: row.notes
+            } : {}, stamp));
+            createdHere += 1;
+            created += 1;
+        }
+        const result = {
+            received: read.rows.length,
+            created,
+            merged: 0,
+            skipped: skipped.sort((a, b)=>a.index - b.index),
+            dropped,
+            ownersUnresolved: [
+                ...ownersUnresolved
+            ]
+        };
+        return res.status(200).json(result);
+    } catch (error) {
+        console.error('crm/deals-import failed', error);
+        return res.status(500).json({
+            error: 'The import could not continue.'
+        });
+    }
+};
+/** The scope, the site, the importer and the clocks every created deal carries. */ function creationStamp(context) {
+    return {
+        hostId: context.hostId,
+        visibleTo: context.scopeTokens,
+        createdByUid: context.uid,
+        createdAt: FieldValue.serverTimestamp(),
+        updatedAt: FieldValue.serverTimestamp()
+    };
+}
+
+//# sourceMappingURL=deals-import.js.map

package/src/lib/server/deals-import.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/deals-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/deals-import` — one chunk of a deals file, written\n * (AGL-2662).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-deal-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the two names a deal is\n * filed under, and writes it with the stamp every CRM creator writes.\n *\n * ## The pipeline and the stage are looked up ONCE per request\n *\n * The org's pipelines are read once — the active ones the caller's scope\n * can see — and every row resolves against that list by name. A row\n * naming no pipeline lands in the default one (or the only one); a row\n * naming no stage lands in its pipeline's first open stage. A name that\n * matches nothing refuses the row by name, before any write, so the\n * operator's skipped file says exactly which cell to fix.\n *\n * ## A deal's status is its stage's kind\n *\n * Landing in a `won` or `lost` stage closes the deal on creation, stamped\n * with the same clock as `stageChangedAtMs`, the way the REST create does.\n * No `dealWon` event fires for an imported win: the deal was won before it\n * was filed here, and an automation on the event is for what happens next.\n *\n * ## The band is counted once per request\n *\n * A deal is a CRM record and meets the records band (AGL-2611), judged\n * the way the companies import judges it: one aggregate at the first\n * create, re-judged locally as the request creates more.\n */\n\nimport {\n  checkCrmRecordsQuota,\n  CRM_COLLECTIONS,\n  type CrmDealStage,\n  type CrmPipeline,\n  isPipelineArchived,\n  nameSearchKey,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  DEAL_IMPORT_CHUNK_SIZE,\n  DEAL_IMPORT_MAX_BODY_BYTES,\n  type DealImportChunkResult,\n  type DealImportRawRow,\n  type DealImportRow,\n  type DealImportSkippedRow,\n  dealImportNameKey,\n  normalizeDealImportRow,\n} from '../model/crm-deal-import'\nimport { crmRecordsQuotaForOrg, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\n/** The default currency a deal carries when the file names none. */\nconst DEFAULT_CURRENCY = 'usd'\n\n/** One pipeline the request can file into, with its stages by name. */\ninterface PipelineChoice {\n  id: string\n  pipeline: CrmPipeline\n  stages: CrmDealStage[]\n}\n\n/** The active pipelines the caller's scope can see, in read order. */\nasync function readPipelines(\n  orgRef: FirebaseFirestore.DocumentReference,\n  readTokens: readonly string[],\n): Promise<PipelineChoice[]> {\n  const snapshot = await orgRef.collection(CRM_COLLECTIONS.pipelines).get()\n  const choices: PipelineChoice[] = []\n  for (const doc of snapshot.docs) {\n    const pipeline = doc.data() as CrmPipeline\n    if (isPipelineArchived(pipeline)) continue\n    if (!visibleToTokens(pipeline.visibleTo, readTokens)) continue\n    const stages = [...(pipeline.stages ?? [])].sort((a, b) => a.order - b.order)\n    choices.push({ id: doc.id, pipeline, stages })\n  }\n  return choices\n}\n\n/**\n * Where one row lands: its pipeline and its stage, or which of the two\n * names the org does not have.\n */\nexport function placeDealImportRow(\n  choices: readonly PipelineChoice[],\n  row: Pick<DealImportRow, 'pipeline' | 'stage'>,\n):\n  | { ok: true; pipeline: PipelineChoice; stage: CrmDealStage }\n  | { ok: false; reason: 'unknown-pipeline' | 'unknown-stage' } {\n  let pipeline: PipelineChoice | undefined\n  if (row.pipeline) {\n    const wanted = dealImportNameKey(row.pipeline)\n    pipeline = choices.find((choice) => dealImportNameKey(choice.pipeline.name ?? '') === wanted)\n  } else {\n    pipeline = choices.find((choice) => choice.pipeline.isDefault) ?? (choices.length === 1 ? choices[0] : undefined)\n  }\n  if (!pipeline) return { ok: false, reason: 'unknown-pipeline' }\n  let stage: CrmDealStage | undefined\n  if (row.stage) {\n    const wanted = dealImportNameKey(row.stage)\n    stage = pipeline.stages.find((candidate) => dealImportNameKey(candidate.name ?? '') === wanted)\n  } else {\n    stage = pipeline.stages.find((candidate) => candidate.kind === 'open') ?? pipeline.stages[0]\n  }\n  if (!stage) return { ok: false, reason: 'unknown-stage' }\n  return { ok: true, pipeline, stage }\n}\n\n/**\n * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.\n *\n * Rows are written one after another so the band's local count stays\n * honest across the request.\n */\nexport const crmDealsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<DealImportRawRow>(req, {\n    maxBodyBytes: DEAL_IMPORT_MAX_BODY_BYTES,\n    chunkSize: DEAL_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: DealImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: DealImportRow }[] = []\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeDealImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, title: verdict.input, reason: verdict.reason })\n        return\n      }\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId)\n    const [owners, pipelines] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      normalized.length ? readPipelines(orgRef, context.readTokens) : Promise.resolve([]),\n    ])\n    const ownersUnresolved = new Set<string>()\n    const deals = orgRef.collection(CRM_COLLECTIONS.deals)\n    const stamp = creationStamp(context)\n    let counted: { crmRecordsCount: number } | null = null\n    let createdHere = 0\n    let created = 0\n\n    for (const { index, row } of normalized) {\n      const placed = placeDealImportRow(pipelines, row)\n      if (placed.ok === false) {\n        skipped.push({ index, title: row.title, reason: placed.reason })\n        continue\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      if (!counted) counted = await crmRecordsQuotaForOrg(context.org as never, orgRef)\n      const room = checkCrmRecordsQuota(\n        context.org as never,\n        counted.crmRecordsCount + createdHere,\n      )\n      if (!room.allowed) {\n        skipped.push({ index, title: row.title, reason: 'records-band' })\n        continue\n      }\n      const nowMs = Date.now()\n      const { stage } = placed\n      const status = stage.kind === 'won' ? 'won' : stage.kind === 'lost' ? 'lost' : 'open'\n      await deals.add({\n        title: row.title,\n        titleLower: nameSearchKey(row.title),\n        pipelineId: placed.pipeline.id,\n        stageId: stage.id,\n        status,\n        stageChangedAtMs: nowMs,\n        closedAtMs: status === 'open' ? null : nowMs,\n        currency: row.currency ?? DEFAULT_CURRENCY,\n        ...(typeof row.amountCents === 'number' ? { amountCents: row.amountCents } : {}),\n        ...(ownerUid ? { ownerUid } : {}),\n        ...(typeof row.expectedCloseAtMs === 'number'\n          ? { expectedCloseAtMs: row.expectedCloseAtMs }\n          : {}),\n        ...(row.notes ? { notes: row.notes } : {}),\n        ...stamp,\n      })\n      createdHere += 1\n      created += 1\n    }\n\n    const result: DealImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged: 0,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/deals-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n\n/** The scope, the site, the importer and the clocks every created deal carries. */\nfunction creationStamp(\n  context: Extract<ImportContext, { ok: true }>,\n): Record<string, unknown> {\n  return {\n    hostId: context.hostId,\n    visibleTo: context.scopeTokens,\n    createdByUid: context.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  }\n}\n"],"names":["checkCrmRecordsQuota","CRM_COLLECTIONS","isPipelineArchived","nameSearchKey","visibleToTokens","DEAL_IMPORT_CHUNK_SIZE","DEAL_IMPORT_MAX_BODY_BYTES","dealImportNameKey","normalizeDealImportRow","crmRecordsQuotaForOrg","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","DEFAULT_CURRENCY","readPipelines","orgRef","readTokens","snapshot","collection","pipelines","get","choices","doc","docs","pipeline","data","visibleTo","stages","sort","a","b","order","push","id","placeDealImportRow","row","wanted","find","choice","name","isDefault","length","undefined","ok","reason","stage","candidate","kind","crmDealsImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","body","skipped","dropped","normalized","rows","forEach","raw","index","verdict","title","input","entry","field","app","firestore","orgId","owners","Promise","all","map","resolve","ownersUnresolved","Set","deals","stamp","creationStamp","counted","createdHere","created","placed","ownerUid","ownerEmail","add","org","room","crmRecordsCount","allowed","nowMs","Date","now","titleLower","pipelineId","stageId","stageChangedAtMs","closedAtMs","currency","amountCents","expectedCloseAtMs","notes","result","received","merged","console","hostId","scopeTokens","createdByUid","uid","createdAt","serverTimestamp","updatedAt"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GAED,SACEA,oBAAoB,EACpBC,eAAe,EAGfC,kBAAkB,EAClBC,aAAa,EAEbC,eAAe,QACV,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,iBAAiB,EACjBC,sBAAsB,QACjB,8BAA0B;AACjC,SAASC,qBAAqB,EAAEC,aAAa,QAAQ,2BAA0B;AAC/E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAEzB,kEAAkE,GAClE,MAAMC,mBAAmB;AASzB,oEAAoE,GACpE,eAAeC,cACbC,MAA2C,EAC3CC,UAA6B;IAE7B,MAAMC,WAAW,MAAMF,OAAOG,UAAU,CAACnB,gBAAgBoB,SAAS,EAAEC,GAAG;IACvE,MAAMC,UAA4B,EAAE;IACpC,KAAK,MAAMC,OAAOL,SAASM,IAAI,CAAE;YAIXC;QAHpB,MAAMA,WAAWF,IAAIG,IAAI;QACzB,IAAIzB,mBAAmBwB,WAAW;QAClC,IAAI,CAACtB,gBAAgBsB,SAASE,SAAS,EAAEV,aAAa;QACtD,MAAMW,SAAS;gBAAKH,mBAAAA,SAASG,MAAM,YAAfH,mBAAmB,EAAE;SAAE,CAACI,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEE,KAAK,GAAGD,EAAEC,KAAK;QAC5EV,QAAQW,IAAI,CAAC;YAAEC,IAAIX,IAAIW,EAAE;YAAET;YAAUG;QAAO;IAC9C;IACA,OAAON;AACT;AAEA;;;CAGC,GACD,OAAO,SAASa,mBACdb,OAAkC,EAClCc,GAA8C;IAI9C,IAAIX;IACJ,IAAIW,IAAIX,QAAQ,EAAE;QAChB,MAAMY,SAAS/B,kBAAkB8B,IAAIX,QAAQ;QAC7CA,WAAWH,QAAQgB,IAAI,CAAC,CAACC;gBAA6BA;mBAAlBjC,mBAAkBiC,wBAAAA,OAAOd,QAAQ,CAACe,IAAI,YAApBD,wBAAwB,QAAQF;;IACxF,OAAO;YACMf;QAAXG,YAAWH,gBAAAA,QAAQgB,IAAI,CAAC,CAACC,SAAWA,OAAOd,QAAQ,CAACgB,SAAS,aAAlDnB,gBAAwDA,QAAQoB,MAAM,KAAK,IAAIpB,OAAO,CAAC,EAAE,GAAGqB;IACzG;IACA,IAAI,CAAClB,UAAU,OAAO;QAAEmB,IAAI;QAAOC,QAAQ;IAAmB;IAC9D,IAAIC;IACJ,IAAIV,IAAIU,KAAK,EAAE;QACb,MAAMT,SAAS/B,kBAAkB8B,IAAIU,KAAK;QAC1CA,QAAQrB,SAASG,MAAM,CAACU,IAAI,CAAC,CAACS;gBAAgCA;mBAAlBzC,mBAAkByC,kBAAAA,UAAUP,IAAI,YAAdO,kBAAkB,QAAQV;;IAC1F,OAAO;YACGZ;QAARqB,SAAQrB,wBAAAA,SAASG,MAAM,CAACU,IAAI,CAAC,CAACS,YAAcA,UAAUC,IAAI,KAAK,mBAAvDvB,wBAAkEA,SAASG,MAAM,CAAC,EAAE;IAC9F;IACA,IAAI,CAACkB,OAAO,OAAO;QAAEF,IAAI;QAAOC,QAAQ;IAAgB;IACxD,OAAO;QAAED,IAAI;QAAMnB;QAAUqB;IAAM;AACrC;AAEA;;;;;CAKC,GACD,OAAO,MAAMG,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAO7C,eAAiCsC,KAAK;QACjDQ,cAAcrD;QACdsD,WAAWvD;IACb;IACA,IAAI,WAAWqD,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAM/C,qBAAqBqC;QAC3C,IAAIU,QAAQhB,EAAE,KAAK,OAAO,OAAOO,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQC,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAsD,EAAE;QAC9DP,KAAKQ,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU9D,uBAAuB4D;YACvC,IAAIE,QAAQzB,EAAE,KAAK,OAAO;gBACxBkB,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOD,QAAQE,KAAK;oBAAE1B,QAAQwB,QAAQxB,MAAM;gBAAC;gBACnE;YACF;YACA,KAAK,MAAM2B,SAASH,QAAQjC,GAAG,CAAC2B,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACS,MAAMC,KAAK,CAAC,GAAG,EAACV,uBAAAA,OAAO,CAACS,MAAMC,KAAK,CAAC,YAApBV,uBAAwB,KAAK;YACvD;YACAC,WAAW/B,IAAI,CAAC;gBAAEmC;gBAAOhC,KAAKiC,QAAQjC,GAAG;YAAC;QAC5C;QAEA,MAAMpB,SAASP,cAAciE,GAAG,GAAGC,SAAS,GAAGxD,UAAU,CAAC,QAAQI,GAAG,CAACqC,QAAQgB,KAAK;QACnF,MAAM,CAACC,QAAQzD,UAAU,GAAG,MAAM0D,QAAQC,GAAG,CAAC;YAC5CpE,eACEiD,QAAQgB,KAAK,EACbZ,WAAWgB,GAAG,CAAC,CAACR,QAAUA,MAAMpC,GAAG;YAErC4B,WAAWtB,MAAM,GAAG3B,cAAcC,QAAQ4C,QAAQ3C,UAAU,IAAI6D,QAAQG,OAAO,CAAC,EAAE;SACnF;QACD,MAAMC,mBAAmB,IAAIC;QAC7B,MAAMC,QAAQpE,OAAOG,UAAU,CAACnB,gBAAgBoF,KAAK;QACrD,MAAMC,QAAQC,cAAc1B;QAC5B,IAAI2B,UAA8C;QAClD,IAAIC,cAAc;QAClB,IAAIC,UAAU;QAEd,KAAK,MAAM,EAAErB,KAAK,EAAEhC,GAAG,EAAE,IAAI4B,WAAY;gBA+B3B5B;YA9BZ,MAAMsD,SAASvD,mBAAmBf,WAAWgB;YAC7C,IAAIsD,OAAO9C,EAAE,KAAK,OAAO;gBACvBkB,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOlC,IAAIkC,KAAK;oBAAEzB,QAAQ6C,OAAO7C,MAAM;gBAAC;gBAC9D;YACF;YACA,IAAI8C;YACJ,IAAIvD,IAAIwD,UAAU,EAAE;gBAClBD,WAAWd,OAAOxD,GAAG,CAACe,IAAIwD,UAAU;gBACpC,IAAI,CAACD,UAAUT,iBAAiBW,GAAG,CAACzD,IAAIwD,UAAU;YACpD;YACA,IAAI,CAACL,SAASA,UAAU,MAAM/E,sBAAsBoD,QAAQkC,GAAG,EAAW9E;YAC1E,MAAM+E,OAAOhG,qBACX6D,QAAQkC,GAAG,EACXP,QAAQS,eAAe,GAAGR;YAE5B,IAAI,CAACO,KAAKE,OAAO,EAAE;gBACjBnC,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOlC,IAAIkC,KAAK;oBAAEzB,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAMqD,QAAQC,KAAKC,GAAG;YACtB,MAAM,EAAEtD,KAAK,EAAE,GAAG4C;YAClB,MAAMpC,SAASR,MAAME,IAAI,KAAK,QAAQ,QAAQF,MAAME,IAAI,KAAK,SAAS,SAAS;YAC/E,MAAMoC,MAAMS,GAAG,CAAC;gBACdvB,OAAOlC,IAAIkC,KAAK;gBAChB+B,YAAYnG,cAAckC,IAAIkC,KAAK;gBACnCgC,YAAYZ,OAAOjE,QAAQ,CAACS,EAAE;gBAC9BqE,SAASzD,MAAMZ,EAAE;gBACjBoB;gBACAkD,kBAAkBN;gBAClBO,YAAYnD,WAAW,SAAS,OAAO4C;gBACvCQ,QAAQ,GAAEtE,gBAAAA,IAAIsE,QAAQ,YAAZtE,gBAAgBtB;eACtB,OAAOsB,IAAIuE,WAAW,KAAK,WAAW;gBAAEA,aAAavE,IAAIuE,WAAW;YAAC,IAAI,CAAC,GAC1EhB,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3B,OAAOvD,IAAIwE,iBAAiB,KAAK,WACjC;gBAAEA,mBAAmBxE,IAAIwE,iBAAiB;YAAC,IAC3C,CAAC,GACDxE,IAAIyE,KAAK,GAAG;gBAAEA,OAAOzE,IAAIyE,KAAK;YAAC,IAAI,CAAC,GACrCxB;YAELG,eAAe;YACfC,WAAW;QACb;QAEA,MAAMqB,SAAgC;YACpCC,UAAUtD,KAAKQ,IAAI,CAACvB,MAAM;YAC1B+C;YACAuB,QAAQ;YACRlD,SAASA,QAAQjC,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEsC,KAAK,GAAGrC,EAAEqC,KAAK;YACjDL;YACAmB,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO/B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACuD;IAC9B,EAAE,OAAOtD,OAAO;QACdyD,QAAQzD,KAAK,CAAC,2BAA2BA;QACzC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC;AAED,iFAAiF,GACjF,SAAS8B,cACP1B,OAA6C;IAE7C,OAAO;QACLsD,QAAQtD,QAAQsD,MAAM;QACtBvF,WAAWiC,QAAQuD,WAAW;QAC9BC,cAAcxD,QAAQyD,GAAG;QACzBC,WAAW5G,WAAW6G,eAAe;QACrCC,WAAW9G,WAAW6G,eAAe;IACvC;AACF"}

package/src/lib/server/email-send.d.ts

@@ -0,0 +1,119 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * `POST /api/crm/email-send` — one email to one person, from their record
+ * (AGL-2615).
+ *
+ * Body: `{ hostId, contactId? | leadId? | dealId?, subject, body }`. Answers
+ * `{ ok: true, activityId, to, from, logged }` once the provider accepted
+ * the message, and a refusal with a `reason` the dialog can act on
+ * otherwise. The subject and the body may carry merge fields —
+ * `{{contact.firstName}}`, `{{deal.amount}}` (AGL-2658) — which this route
+ * fills from the record before the send, so the timeline row is the letter
+ * as it left; see `crm-email-templates.ts` for the grammar.
+ *
+ * ## What it is, and what it is not
+ *
+ * A message a teammate wrote to one person they have a relationship with —
+ * a reply to a lead, a follow-up on a deal. It is not marketing: no
+ * campaign audience, no unsubscribe pair, no frequency window, no consent
+ * split. What it does owe is everything a bounce or a complaint owes the
+ * shared sending domain, which is why BOTH suppression lists are consulted
+ * and why a person's own stated refusal — a `declined` basis — is a hard
+ * stop even though the message is not the kind of mail that basis governs.
+ * The recipient asked this site not to write; the kind of writing is not
+ * the point.
+ *
+ * ## Why the recipient is resolved here and not taken from the body
+ *
+ * The dialog shows the address the record carries, and this route reads it
+ * again off the record the caller named, through the same visibility check
+ * every other CRM route makes. A `to` in the body would make this a route
+ * that sends the site's mail to any address a member types, which is a
+ * different product with a different abuse surface.
+ *
+ * ## The organization variant (AGL-2634)
+ *
+ * `{ orgId, hostId?, … }` from the org-level hub. The caller is authorized
+ * by the org — an org-wide member holding `data.manage` — and the record is
+ * read with no site's visibility to check, because an org-wide member reads
+ * every row. What the org level cannot do away with is the SITE the message
+ * leaves from: the sending identity, the suppression list and the person's
+ * stated refusal are each a site's. So the org variant still names one —
+ * the record's own capturing site or the site the reader picked, in the
+ * body; failing that the record's own site read off the document; failing
+ * that the org's only site — and refuses, with a `site` reason, when the
+ * org has several and none was named. The row it writes is visible to
+ * whoever may see the RECORD, so an email to a person another site
+ * captured shows on their timeline under that site's hub; the act is
+ * logged in the org's feed.
+ *
+ * ## The order of the gates
+ *
+ * Cheap and certain first. A malformed body and a missing token cost
+ * nothing; the per-user pace is one counter; the record is one read and
+ * decides everything after it; the ceiling one aggregate; the two
+ * suppression lists two keyed reads; the sending identity next, because it
+ * is the most expensive and the one a workspace fixes once. The daily cap
+ * comes LAST and is the one gate that writes before the provider is called
+ * (AGL-2645): the send is reserved on today's counter inside a transaction,
+ * so two reps at the last slot cannot both pass one reading of it, and a
+ * message the provider refuses gives the slot back. After the provider has
+ * accepted, two more things are written, neither able to fail the send:
+ * the activity row and the org's cost meter.
+ *
+ * ## The new-workspace ramp is part of that cap, not a gate beside it
+ *
+ * A message from a workspace created this morning lands on the sending
+ * domain every other tenant's receipts leave on, so the plan's day is held
+ * to the share of it the workspace has earned — the same ramp the campaign
+ * path is paced by, `readOrgEmailRamp`, taken to the allowance this surface
+ * meters instead of the campaign ceiling. It is handed to the reservation
+ * rather than checked before it, so the ceiling and the count it is judged
+ * against come out of the one transactional read; a ramp consulted
+ * separately would be a second ceiling and two reps could pass it at once.
+ * A workspace past its first week is not ramped and pays nothing to find
+ * that out.
+ */
+/** How many one-to-one emails one person may send in one minute. */
+export declare const CRM_EMAIL_SENDS_PER_MINUTE = 20;
+/** What the route says when the plan carries no one-to-one email at all. */
+export declare const CRM_EMAIL_NOT_INCLUDED_MESSAGE: string;
+/** What the route says at the daily cap; `included` is the plan's figure. */
+export declare function crmEmailCapReachedMessage(included: number): string;
+/**
+ * What the route says when the NEW-WORKSPACE RAMP is the ceiling that was
+ * reached, rather than the plan's own.
+ *
+ * The campaign path's wording, pointed at this surface: the number, what was
+ * spent against it, that nothing was sent or counted, and when it lifts. A
+ * workspace told only "limit reached" against a figure far below the one its
+ * plan page advertises would read it as a billing fault.
+ */
+export declare function crmEmailRampReachedMessage(ceiling: number, used: number): string;
+/** What the route says when the ramp's own history could not be read. */
+export declare const CRM_EMAIL_RAMP_UNAVAILABLE_MESSAGE: string;
+export declare const CRM_EMAIL_SUPPRESSED_MESSAGE: string;
+export declare const CRM_EMAIL_DECLINED_MESSAGE = "This person asked not to be emailed by this site.";
+export declare const CRM_EMAIL_RATE_MESSAGE = "You have sent too many emails in the last minute. Wait a moment and try again.";
+/** What the org variant says when no site was named and the org has several. */
+export declare const CRM_EMAIL_PICK_SITE_MESSAGE: string;
+/** What the route says when a subject or a message is nothing once its fields are filled. */
+export declare const CRM_EMAIL_EMPTY_AFTER_MERGE_MESSAGE: string;
+export declare const crmEmailSendHandler: PluginApiHandler;
+export default crmEmailSendHandler;