@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/server/leads-import.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/leads-import` — one chunk of a leads file, written
+ * (AGL-2701).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-lead-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the owner against the
+ * org's roster, and writes it in two halves.
+ *
+ * ## The capture half goes through the door every capture goes through
+ *
+ * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up
+ * handler and both booking paths — is the writer here too. That is what
+ * makes an imported row key on `personKey` the way a second form
+ * submission does, land under the site by path with `capturedByHostIds`
+ * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction
+ * that writes, and record NO marketing basis. A bulk path with its own
+ * `add()` would grow an unkeyed, unbounded copy of the site's leads under
+ * a second set of rules.
+ *
+ * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`
+ *
+ * The five org collections carry `visibleTo` because they sit under
+ * `orgs/{orgId}` and the rules decide per document which sites may read
+ * them. A lead does not: `hosts/{hostId}/leads` is private to the site by
+ * path, the rules admit the site's own members, and the list therefore
+ * reads it with no scope clause. An import that stamped scope tokens onto
+ * a lead would be writing a field nothing reads, and would suggest a
+ * sharing decision the collection does not have. The site is the whole
+ * scope, and the drawer's picker is where it is chosen.
+ *
+ * ## No file may hand a lead a consent it did not give
+ *
+ * A capture writes a marketing basis only when the visitor ticked a box in
+ * front of them. A CSV row has no such event behind it, so the lead
+ * vocabulary has no consent column and this route passes no
+ * `marketingConsent`: an imported lead is mailable only if some earlier
+ * capture on this site already recorded a basis, which `addHostLead`
+ * carries forward untouched. The contacts import has a consent column
+ * because its own export writes one and the merchant is asserting a basis
+ * they hold per person; the leads export writes none, and a column the
+ * file cannot fill is a column that cannot be misread.
+ *
+ * ## The working half is written the way the list writes it
+ *
+ * A status, an owner, a reason and notes are the CRM's annotations, not
+ * the capture's, and the leads list already writes them client-direct onto
+ * the same document. A row that carries any of them gets one merge write
+ * after the door's, stamped `updatedAt` exactly as the list stamps it. A
+ * row that carries none costs nothing extra.
+ *
+ * ## Created or merged is read once for the chunk
+ *
+ * The door reports only whether the lead was STORED, and the result panel
+ * has to say how many people were added and how many updated. One
+ * `getAll` over the chunk's document ids answers that for every row in a
+ * single round trip, before any of them is written — which is also the
+ * only moment the answer is still true.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.
+ *
+ * Rows are written one after another so the ceiling's local count stays
+ * honest across the request.
+ */
+export declare const crmLeadsImportHandler: PluginApiHandler;

package/src/lib/server/leads-import.js

@@ -0,0 +1,261 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/leads-import` — one chunk of a leads file, written
+ * (AGL-2701).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-lead-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the owner against the
+ * org's roster, and writes it in two halves.
+ *
+ * ## The capture half goes through the door every capture goes through
+ *
+ * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up
+ * handler and both booking paths — is the writer here too. That is what
+ * makes an imported row key on `personKey` the way a second form
+ * submission does, land under the site by path with `capturedByHostIds`
+ * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction
+ * that writes, and record NO marketing basis. A bulk path with its own
+ * `add()` would grow an unkeyed, unbounded copy of the site's leads under
+ * a second set of rules.
+ *
+ * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`
+ *
+ * The five org collections carry `visibleTo` because they sit under
+ * `orgs/{orgId}` and the rules decide per document which sites may read
+ * them. A lead does not: `hosts/{hostId}/leads` is private to the site by
+ * path, the rules admit the site's own members, and the list therefore
+ * reads it with no scope clause. An import that stamped scope tokens onto
+ * a lead would be writing a field nothing reads, and would suggest a
+ * sharing decision the collection does not have. The site is the whole
+ * scope, and the drawer's picker is where it is chosen.
+ *
+ * ## No file may hand a lead a consent it did not give
+ *
+ * A capture writes a marketing basis only when the visitor ticked a box in
+ * front of them. A CSV row has no such event behind it, so the lead
+ * vocabulary has no consent column and this route passes no
+ * `marketingConsent`: an imported lead is mailable only if some earlier
+ * capture on this site already recorded a basis, which `addHostLead`
+ * carries forward untouched. The contacts import has a consent column
+ * because its own export writes one and the merchant is asserting a basis
+ * they hold per person; the leads export writes none, and a column the
+ * file cannot fill is a column that cannot be misread.
+ *
+ * ## The working half is written the way the list writes it
+ *
+ * A status, an owner, a reason and notes are the CRM's annotations, not
+ * the capture's, and the leads list already writes them client-direct onto
+ * the same document. A row that carries any of them gets one merge write
+ * after the door's, stamped `updatedAt` exactly as the list stamps it. A
+ * row that carries none costs nothing extra.
+ *
+ * ## Created or merged is read once for the chunk
+ *
+ * The door reports only whether the lead was STORED, and the result panel
+ * has to say how many people were added and how many updated. One
+ * `getAll` over the chunk's document ids answers that for every row in a
+ * single round trip, before any of them is written — which is also the
+ * only moment the answer is still true.
+ */ import { checkVisitorRecordCeiling, LEADS_MAX_PER_HOST, personKey } from "@aglyn/aglyn/server";
+import { LEAD_IMPORT_CHUNK_SIZE, LEAD_IMPORT_MAX_BODY_BYTES, normalizeLeadImportRow } from "../model/crm-lead-import.js";
+import { addHostLead, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
+/**
+ * The surface an imported lead names, beside `signup`, `booking` and
+ * `form:{formId}`.
+ *
+ * Typed as the capture-source union rather than a bare string, which is
+ * what the contacts import gets for free from the door it calls: a lead's
+ * `source` is plain text on the way in, so this is the only place the word
+ * can be held to the same vocabulary the source filters and the labels
+ * read. One person brought in by one file reads the same on both records.
+ */ const LEAD_IMPORT_SOURCE = 'import';
+/** The team's annotations on one row, or nothing when the file named none. */ function workingState(row, ownerUid) {
+    const fields = _extends({}, row.status ? {
+        status: row.status
+    } : {}, ownerUid ? {
+        ownerUid
+    } : {}, row.unqualifiedReason ? {
+        unqualifiedReason: row.unqualifiedReason
+    } : {}, row.notes ? {
+        notes: row.notes
+    } : {});
+    return Object.keys(fields).length ? fields : null;
+}
+/**
+ * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.
+ *
+ * Rows are written one after another so the ceiling's local count stays
+ * honest across the request.
+ */ export const crmLeadsImportHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const read = readImportRows(req, {
+        maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,
+        chunkSize: LEAD_IMPORT_CHUNK_SIZE
+    });
+    if ('error' in read) return res.status(read.status).json({
+        error: read.error
+    });
+    try {
+        const context = await resolveImportContext(req);
+        if (context.ok === false) return res.status(context.status).json(context.body);
+        const skipped = [];
+        const dropped = {};
+        const normalized = [];
+        /*
+     * A duplicate WITHIN the request is skipped rather than merged, for
+     * the reason the contacts import gives: the second row would merge
+     * onto the first's document and the tally would read one created and
+     * one merged for one person in one file. Across requests the door's
+     * own dedupe answers, and reports a merge.
+     */ const seen = new Set();
+        read.rows.forEach((raw, index)=>{
+            const verdict = normalizeLeadImportRow(raw);
+            if (verdict.ok === false) {
+                skipped.push({
+                    index,
+                    email: verdict.input,
+                    reason: verdict.reason
+                });
+                return;
+            }
+            // Non-null by construction: the normalizer refused every address
+            // this derivation could not key.
+            const key = personKey(verdict.row.email);
+            if (seen.has(key)) {
+                skipped.push({
+                    index,
+                    email: verdict.row.email,
+                    reason: 'duplicate'
+                });
+                return;
+            }
+            seen.add(key);
+            for (const entry of verdict.row.dropped){
+                var _dropped_entry_field;
+                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
+            }
+            normalized.push({
+                index,
+                row: verdict.row,
+                key
+            });
+        });
+        const firestore = firebaseAdmin.app().firestore();
+        const hostRef = firestore.collection('hosts').doc(context.hostId);
+        const leadsRef = hostRef.collection('leads');
+        const refs = normalized.map((entry)=>leadsRef.doc(entry.key));
+        const [owners, before] = await Promise.all([
+            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
+            refs.length ? firestore.getAll(...refs) : Promise.resolve([])
+        ]);
+        const held = new Set(before.filter((snapshot)=>snapshot.exists).map((snapshot)=>snapshot.id));
+        const ownersUnresolved = new Set();
+        let counted = null;
+        let createdHere = 0;
+        let created = 0;
+        let merged = 0;
+        for (const { index, row, key } of normalized){
+            const isNew = !held.has(key);
+            /*
+       * The platform lead ceiling, judged the way the deals import judges
+       * the records band: one count at the first create, re-judged locally
+       * as the request creates more. The door re-judges it authoritatively
+       * inside its own transaction, so a race is still refused there — this
+       * is what lets the operator's skipped file say WHY rather than only
+       * that the row could not be saved.
+       */ if (isNew) {
+                if (counted === null) {
+                    counted = (await leadsRef.count().get()).data().count;
+                }
+                if (checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST).exceeded) {
+                    skipped.push({
+                        index,
+                        email: row.email,
+                        reason: 'lead-ceiling'
+                    });
+                    continue;
+                }
+            }
+            let ownerUid;
+            if (row.ownerEmail) {
+                ownerUid = owners.get(row.ownerEmail);
+                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
+            }
+            const stored = await addHostLead({
+                hostRef,
+                hostId: context.hostId,
+                lead: _extends({
+                    email: row.email
+                }, row.name ? {
+                    name: row.name
+                } : {}, {
+                    source: LEAD_IMPORT_SOURCE
+                })
+            });
+            if (!stored) {
+                skipped.push({
+                    index,
+                    email: row.email,
+                    reason: 'write-failed'
+                });
+                continue;
+            }
+            const working = workingState(row, ownerUid);
+            if (working) {
+                await leadsRef.doc(key).set(_extends({}, working, {
+                    updatedAt: FieldValue.serverTimestamp()
+                }), {
+                    merge: true
+                });
+            }
+            if (isNew) {
+                created += 1;
+                createdHere += 1;
+            } else {
+                merged += 1;
+            }
+        }
+        const result = {
+            received: read.rows.length,
+            created,
+            merged,
+            skipped: skipped.sort((a, b)=>a.index - b.index),
+            dropped,
+            ownersUnresolved: [
+                ...ownersUnresolved
+            ]
+        };
+        return res.status(200).json(result);
+    } catch (error) {
+        console.error('crm/leads-import failed', error);
+        return res.status(500).json({
+            error: 'The import could not continue.'
+        });
+    }
+};
+
+//# sourceMappingURL=leads-import.js.map

package/src/lib/server/leads-import.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/leads-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-import` — one chunk of a leads file, written\n * (AGL-2701).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-lead-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the owner against the\n * org's roster, and writes it in two halves.\n *\n * ## The capture half goes through the door every capture goes through\n *\n * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up\n * handler and both booking paths — is the writer here too. That is what\n * makes an imported row key on `personKey` the way a second form\n * submission does, land under the site by path with `capturedByHostIds`\n * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction\n * that writes, and record NO marketing basis. A bulk path with its own\n * `add()` would grow an unkeyed, unbounded copy of the site's leads under\n * a second set of rules.\n *\n * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`\n *\n * The five org collections carry `visibleTo` because they sit under\n * `orgs/{orgId}` and the rules decide per document which sites may read\n * them. A lead does not: `hosts/{hostId}/leads` is private to the site by\n * path, the rules admit the site's own members, and the list therefore\n * reads it with no scope clause. An import that stamped scope tokens onto\n * a lead would be writing a field nothing reads, and would suggest a\n * sharing decision the collection does not have. The site is the whole\n * scope, and the drawer's picker is where it is chosen.\n *\n * ## No file may hand a lead a consent it did not give\n *\n * A capture writes a marketing basis only when the visitor ticked a box in\n * front of them. A CSV row has no such event behind it, so the lead\n * vocabulary has no consent column and this route passes no\n * `marketingConsent`: an imported lead is mailable only if some earlier\n * capture on this site already recorded a basis, which `addHostLead`\n * carries forward untouched. The contacts import has a consent column\n * because its own export writes one and the merchant is asserting a basis\n * they hold per person; the leads export writes none, and a column the\n * file cannot fill is a column that cannot be misread.\n *\n * ## The working half is written the way the list writes it\n *\n * A status, an owner, a reason and notes are the CRM's annotations, not\n * the capture's, and the leads list already writes them client-direct onto\n * the same document. A row that carries any of them gets one merge write\n * after the door's, stamped `updatedAt` exactly as the list stamps it. A\n * row that carries none costs nothing extra.\n *\n * ## Created or merged is read once for the chunk\n *\n * The door reports only whether the lead was STORED, and the result panel\n * has to say how many people were added and how many updated. One\n * `getAll` over the chunk's document ids answers that for every row in a\n * single round trip, before any of them is written — which is also the\n * only moment the answer is still true.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  type ContactSource,\n  LEADS_MAX_PER_HOST,\n  personKey,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  LEAD_IMPORT_CHUNK_SIZE,\n  LEAD_IMPORT_MAX_BODY_BYTES,\n  type LeadImportChunkResult,\n  type LeadImportRawRow,\n  type LeadImportRow,\n  type LeadImportSkippedRow,\n  normalizeLeadImportRow,\n} from '../model/crm-lead-import'\nimport { addHostLead, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\n/**\n * The surface an imported lead names, beside `signup`, `booking` and\n * `form:{formId}`.\n *\n * Typed as the capture-source union rather than a bare string, which is\n * what the contacts import gets for free from the door it calls: a lead's\n * `source` is plain text on the way in, so this is the only place the word\n * can be held to the same vocabulary the source filters and the labels\n * read. One person brought in by one file reads the same on both records.\n */\nconst LEAD_IMPORT_SOURCE: ContactSource = 'import'\n\n/** The team's annotations on one row, or nothing when the file named none. */\nfunction workingState(\n  row: LeadImportRow,\n  ownerUid: string | undefined,\n): Record<string, unknown> | null {\n  const fields: Record<string, unknown> = {\n    ...(row.status ? { status: row.status } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.unqualifiedReason ? { unqualifiedReason: row.unqualifiedReason } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n  }\n  return Object.keys(fields).length ? fields : null\n}\n\n/**\n * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.\n *\n * Rows are written one after another so the ceiling's local count stays\n * honest across the request.\n */\nexport const crmLeadsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<LeadImportRawRow>(req, {\n    maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,\n    chunkSize: LEAD_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: LeadImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: LeadImportRow; key: string }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged, for\n     * the reason the contacts import gives: the second row would merge\n     * onto the first's document and the tally would read one created and\n     * one merged for one person in one file. Across requests the door's\n     * own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeLeadImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      // Non-null by construction: the normalizer refused every address\n      // this derivation could not key.\n      const key = personKey(verdict.row.email) as string\n      if (seen.has(key)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row, key })\n    })\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(context.hostId)\n    const leadsRef = hostRef.collection('leads')\n    const refs = normalized.map((entry) => leadsRef.doc(entry.key))\n    const [owners, before] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      refs.length ? firestore.getAll(...refs) : Promise.resolve([]),\n    ])\n    const held = new Set(\n      before.filter((snapshot) => snapshot.exists).map((snapshot) => snapshot.id),\n    )\n    const ownersUnresolved = new Set<string>()\n    let counted: number | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row, key } of normalized) {\n      const isNew = !held.has(key)\n      /*\n       * The platform lead ceiling, judged the way the deals import judges\n       * the records band: one count at the first create, re-judged locally\n       * as the request creates more. The door re-judges it authoritatively\n       * inside its own transaction, so a race is still refused there — this\n       * is what lets the operator's skipped file say WHY rather than only\n       * that the row could not be saved.\n       */\n      if (isNew) {\n        if (counted === null) {\n          counted = (await leadsRef.count().get()).data().count\n        }\n        if (\n          checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST)\n            .exceeded\n        ) {\n          skipped.push({ index, email: row.email, reason: 'lead-ceiling' })\n          continue\n        }\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const stored = await addHostLead({\n        hostRef,\n        hostId: context.hostId,\n        lead: {\n          email: row.email,\n          ...(row.name ? { name: row.name } : {}),\n          source: LEAD_IMPORT_SOURCE,\n        },\n      })\n      if (!stored) {\n        skipped.push({ index, email: row.email, reason: 'write-failed' })\n        continue\n      }\n      const working = workingState(row, ownerUid)\n      if (working) {\n        await leadsRef\n          .doc(key)\n          .set(\n            { ...working, updatedAt: FieldValue.serverTimestamp() },\n            { merge: true },\n          )\n      }\n      if (isNew) {\n        created += 1\n        createdHere += 1\n      } else {\n        merged += 1\n      }\n    }\n\n    const result: LeadImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/leads-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["checkVisitorRecordCeiling","LEADS_MAX_PER_HOST","personKey","LEAD_IMPORT_CHUNK_SIZE","LEAD_IMPORT_MAX_BODY_BYTES","normalizeLeadImportRow","addHostLead","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","LEAD_IMPORT_SOURCE","workingState","row","ownerUid","fields","status","unqualifiedReason","notes","Object","keys","length","crmLeadsImportHandler","req","res","method","setHeader","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","seen","Set","rows","forEach","raw","index","verdict","push","email","input","reason","key","has","add","entry","field","firestore","app","hostRef","collection","doc","hostId","leadsRef","refs","map","owners","before","Promise","all","orgId","getAll","resolve","held","filter","snapshot","exists","id","ownersUnresolved","counted","createdHere","created","merged","isNew","count","get","data","exceeded","ownerEmail","stored","lead","name","source","working","set","updatedAt","serverTimestamp","merge","result","received","sort","a","b","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DC,GAED,SACEA,yBAAyB,EAEzBC,kBAAkB,EAClBC,SAAS,QAEJ,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SAASC,WAAW,EAAEC,aAAa,QAAQ,2BAA0B;AACrE,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAEzB;;;;;;;;;CASC,GACD,MAAMC,qBAAoC;AAE1C,4EAA4E,GAC5E,SAASC,aACPC,GAAkB,EAClBC,QAA4B;IAE5B,MAAMC,SAAkC,aAClCF,IAAIG,MAAM,GAAG;QAAEA,QAAQH,IAAIG,MAAM;IAAC,IAAI,CAAC,GACvCF,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3BD,IAAII,iBAAiB,GAAG;QAAEA,mBAAmBJ,IAAII,iBAAiB;IAAC,IAAI,CAAC,GACxEJ,IAAIK,KAAK,GAAG;QAAEA,OAAOL,IAAIK,KAAK;IAAC,IAAI,CAAC;IAE1C,OAAOC,OAAOC,IAAI,CAACL,QAAQM,MAAM,GAAGN,SAAS;AAC/C;AAEA;;;;;CAKC,GACD,OAAO,MAAMO,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIR,MAAM,CAAC,KAAKW,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOpB,eAAiCc,KAAK;QACjDO,cAAc3B;QACd4B,WAAW7B;IACb;IACA,IAAI,WAAW2B,MAAM,OAAOL,IAAIR,MAAM,CAACa,KAAKb,MAAM,EAAEW,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMtB,qBAAqBa;QAC3C,IAAIS,QAAQC,EAAE,KAAK,OAAO,OAAOT,IAAIR,MAAM,CAACgB,QAAQhB,MAAM,EAAEW,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAmE,EAAE;QAC3E;;;;;;KAMC,GACD,MAAMC,OAAO,IAAIC;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAUxC,uBAAuBsC;YACvC,IAAIE,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,iEAAiE;YACjE,iCAAiC;YACjC,MAAMC,MAAMhD,UAAU2C,QAAQ/B,GAAG,CAACiC,KAAK;YACvC,IAAIR,KAAKY,GAAG,CAACD,MAAM;gBACjBd,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQ/B,GAAG,CAACiC,KAAK;oBAAEE,QAAQ;gBAAY;gBACpE;YACF;YACAV,KAAKa,GAAG,CAACF;YACT,KAAK,MAAMG,SAASR,QAAQ/B,GAAG,CAACuB,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACgB,MAAMC,KAAK,CAAC,GAAG,EAACjB,uBAAAA,OAAO,CAACgB,MAAMC,KAAK,CAAC,YAApBjB,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAO9B,KAAK+B,QAAQ/B,GAAG;gBAAEoC;YAAI;QACjD;QAEA,MAAMK,YAAYhD,cAAciD,GAAG,GAAGD,SAAS;QAC/C,MAAME,UAAUF,UAAUG,UAAU,CAAC,SAASC,GAAG,CAAC1B,QAAQ2B,MAAM;QAChE,MAAMC,WAAWJ,QAAQC,UAAU,CAAC;QACpC,MAAMI,OAAOxB,WAAWyB,GAAG,CAAC,CAACV,QAAUQ,SAASF,GAAG,CAACN,MAAMH,GAAG;QAC7D,MAAM,CAACc,QAAQC,OAAO,GAAG,MAAMC,QAAQC,GAAG,CAAC;YACzC1D,eACEwB,QAAQmC,KAAK,EACb9B,WAAWyB,GAAG,CAAC,CAACV,QAAUA,MAAMvC,GAAG;YAErCgD,KAAKxC,MAAM,GAAGiC,UAAUc,MAAM,IAAIP,QAAQI,QAAQI,OAAO,CAAC,EAAE;SAC7D;QACD,MAAMC,OAAO,IAAI/B,IACfyB,OAAOO,MAAM,CAAC,CAACC,WAAaA,SAASC,MAAM,EAAEX,GAAG,CAAC,CAACU,WAAaA,SAASE,EAAE;QAE5E,MAAMC,mBAAmB,IAAIpC;QAC7B,IAAIqC,UAAyB;QAC7B,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAEpC,KAAK,EAAE9B,GAAG,EAAEoC,GAAG,EAAE,IAAIZ,WAAY;YAC5C,MAAM2C,QAAQ,CAACV,KAAKpB,GAAG,CAACD;YACxB;;;;;;;OAOC,GACD,IAAI+B,OAAO;gBACT,IAAIJ,YAAY,MAAM;oBACpBA,UAAU,AAAC,CAAA,MAAMhB,SAASqB,KAAK,GAAGC,GAAG,EAAC,EAAGC,IAAI,GAAGF,KAAK;gBACvD;gBACA,IACElF,0BAA0B6E,UAAUC,aAAa7E,oBAC9CoF,QAAQ,EACX;oBACAjD,QAAQU,IAAI,CAAC;wBAAEF;wBAAOG,OAAOjC,IAAIiC,KAAK;wBAAEE,QAAQ;oBAAe;oBAC/D;gBACF;YACF;YACA,IAAIlC;YACJ,IAAID,IAAIwE,UAAU,EAAE;gBAClBvE,WAAWiD,OAAOmB,GAAG,CAACrE,IAAIwE,UAAU;gBACpC,IAAI,CAACvE,UAAU6D,iBAAiBxB,GAAG,CAACtC,IAAIwE,UAAU;YACpD;YACA,MAAMC,SAAS,MAAMjF,YAAY;gBAC/BmD;gBACAG,QAAQ3B,QAAQ2B,MAAM;gBACtB4B,MAAM;oBACJzC,OAAOjC,IAAIiC,KAAK;mBACZjC,IAAI2E,IAAI,GAAG;oBAAEA,MAAM3E,IAAI2E,IAAI;gBAAC,IAAI,CAAC;oBACrCC,QAAQ9E;;YAEZ;YACA,IAAI,CAAC2E,QAAQ;gBACXnD,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOjC,IAAIiC,KAAK;oBAAEE,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAM0C,UAAU9E,aAAaC,KAAKC;YAClC,IAAI4E,SAAS;gBACX,MAAM9B,SACHF,GAAG,CAACT,KACJ0C,GAAG,CACF,aAAKD;oBAASE,WAAWrF,WAAWsF,eAAe;oBACnD;oBAAEC,OAAO;gBAAK;YAEpB;YACA,IAAId,OAAO;gBACTF,WAAW;gBACXD,eAAe;YACjB,OAAO;gBACLE,UAAU;YACZ;QACF;QAEA,MAAMgB,SAAgC;YACpCC,UAAUnE,KAAKW,IAAI,CAACnB,MAAM;YAC1ByD;YACAC;YACA5C,SAASA,QAAQ8D,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEvD,KAAK,GAAGwD,EAAExD,KAAK;YACjDP;YACAuC,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAOnD,IAAIR,MAAM,CAAC,KAAKW,IAAI,CAACoE;IAC9B,EAAE,OAAOnE,OAAO;QACdwE,QAAQxE,KAAK,CAAC,2BAA2BA;QACzC,OAAOJ,IAAIR,MAAM,CAAC,KAAKW,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/next-activity-routes.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * `POST crm/next-activity` — recompute `nextTaskAtMs` (AGL-2661).
+ *
+ * Body: `{ hostId | orgId, links: [{ contactId?, companyId?, dealId? }] }`
+ * after a client-direct task write, or `{ hostId | orgId, all: true }` for
+ * the Fields section's whole-organization recompute. Authorized the way the
+ * task routes are — a member who may write this CRM — and never more
+ * revealing than a task write: the route stores a figure derived from
+ * tasks the caller could already read, and answers with counts.
+ *
+ * The links are not checked against the caller's scope. A scoped member
+ * naming a record they cannot see gets that record's figure recomputed
+ * from its own tasks, which is the figure it should carry anyway; nothing
+ * about the record comes back.
+ */
+export declare const crmNextActivityHandler: PluginApiHandler;

package/src/lib/server/next-activity-routes.js

@@ -0,0 +1,110 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { firebaseAdmin, recomputeCrmNextTaskAt, sweepCrmNextTaskAt } from "@aglyn/tenant-data-admin";
+import { CRM_NEXT_ACTIVITY_LINKS_MAX } from "../model/next-activity.js";
+import { readCrmRouteScope } from "./org-caller.js";
+import { authorizeCrmWriter } from "./task-routes.js";
+/**
+ * `POST crm/next-activity` — recompute `nextTaskAtMs` (AGL-2661).
+ *
+ * Body: `{ hostId | orgId, links: [{ contactId?, companyId?, dealId? }] }`
+ * after a client-direct task write, or `{ hostId | orgId, all: true }` for
+ * the Fields section's whole-organization recompute. Authorized the way the
+ * task routes are — a member who may write this CRM — and never more
+ * revealing than a task write: the route stores a figure derived from
+ * tasks the caller could already read, and answers with counts.
+ *
+ * The links are not checked against the caller's scope. A scoped member
+ * naming a record they cannot see gets that record's figure recomputed
+ * from its own tasks, which is the figure it should carry anyway; nothing
+ * about the record comes back.
+ */ export const crmNextActivityHandler = async (req, res)=>{
+    var _req_body;
+    if (req.method !== 'POST') {
+        res.status(405).json({
+            error: 'Method not allowed'
+        });
+        return;
+    }
+    const body = (_req_body = req.body) != null ? _req_body : {};
+    const scope = readCrmRouteScope(body);
+    if (!scope) {
+        res.status(400).json({
+            error: 'Missing hostId'
+        });
+        return;
+    }
+    try {
+        const writer = await authorizeCrmWriter(req, scope);
+        if (writer.ok === false) {
+            res.status(writer.status).json(writer.body);
+            return;
+        }
+        const firestore = firebaseAdmin.app().firestore();
+        if (body['all'] === true) {
+            const sweep = await sweepCrmNextTaskAt(firestore, writer.orgId);
+            const answer = {
+                ok: true,
+                records: sweep.scheduled + sweep.cleared,
+                missing: 0,
+                tasks: sweep.tasks,
+                cleared: sweep.cleared,
+                truncated: sweep.truncated
+            };
+            res.status(200).json(answer);
+            return;
+        }
+        const links = readLinks(body['links']);
+        if (!links) {
+            res.status(400).json({
+                error: 'Name the records to recompute, or ask for all of them.'
+            });
+            return;
+        }
+        const result = await recomputeCrmNextTaskAt(firestore, writer.orgId, links);
+        const answer = _extends({
+            ok: true
+        }, result);
+        res.status(200).json(answer);
+    } catch (error) {
+        console.error('[crm] next-activity failed', error);
+        res.status(500).json({
+            error: 'The next activity could not be recomputed.'
+        });
+    }
+};
+/** The links off the body, held to ids: a string each, trimmed, capped. */ function readLinks(raw) {
+    if (!Array.isArray(raw)) return null;
+    const links = [];
+    for (const entry of raw.slice(0, CRM_NEXT_ACTIVITY_LINKS_MAX)){
+        const record = entry != null ? entry : {};
+        const link = {};
+        for (const field of [
+            'contactId',
+            'companyId',
+            'dealId'
+        ]){
+            var _record_field;
+            const id = String((_record_field = record[field]) != null ? _record_field : '').trim().slice(0, 128);
+            if (id) link[field] = id;
+        }
+        if (Object.keys(link).length) links.push(link);
+    }
+    return links;
+}
+
+//# sourceMappingURL=next-activity-routes.js.map

package/src/lib/server/next-activity-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/next-activity-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { CrmNextActivityLink, PluginApiHandler } from '@aglyn/aglyn/server'\nimport {\n  firebaseAdmin,\n  recomputeCrmNextTaskAt,\n  sweepCrmNextTaskAt,\n} from '@aglyn/tenant-data-admin'\nimport {\n  CRM_NEXT_ACTIVITY_LINKS_MAX,\n  type CrmNextActivityResponse,\n} from '../model/next-activity'\nimport { readCrmRouteScope } from './org-caller'\nimport { authorizeCrmWriter } from './task-routes'\n\n/**\n * `POST crm/next-activity` — recompute `nextTaskAtMs` (AGL-2661).\n *\n * Body: `{ hostId | orgId, links: [{ contactId?, companyId?, dealId? }] }`\n * after a client-direct task write, or `{ hostId | orgId, all: true }` for\n * the Fields section's whole-organization recompute. Authorized the way the\n * task routes are — a member who may write this CRM — and never more\n * revealing than a task write: the route stores a figure derived from\n * tasks the caller could already read, and answers with counts.\n *\n * The links are not checked against the caller's scope. A scoped member\n * naming a record they cannot see gets that record's figure recomputed\n * from its own tasks, which is the figure it should carry anyway; nothing\n * about the record comes back.\n */\nexport const crmNextActivityHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    if (body['all'] === true) {\n      const sweep = await sweepCrmNextTaskAt(firestore, writer.orgId)\n      const answer: CrmNextActivityResponse = {\n        ok: true,\n        records: sweep.scheduled + sweep.cleared,\n        missing: 0,\n        tasks: sweep.tasks,\n        cleared: sweep.cleared,\n        truncated: sweep.truncated,\n      }\n      res.status(200).json(answer)\n      return\n    }\n    const links = readLinks(body['links'])\n    if (!links) {\n      res.status(400).json({ error: 'Name the records to recompute, or ask for all of them.' })\n      return\n    }\n    const result = await recomputeCrmNextTaskAt(firestore, writer.orgId, links)\n    const answer: CrmNextActivityResponse = { ok: true, ...result }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] next-activity failed', error)\n    res.status(500).json({ error: 'The next activity could not be recomputed.' })\n  }\n}\n\n/** The links off the body, held to ids: a string each, trimmed, capped. */\nfunction readLinks(raw: unknown): CrmNextActivityLink[] | null {\n  if (!Array.isArray(raw)) return null\n  const links: CrmNextActivityLink[] = []\n  for (const entry of raw.slice(0, CRM_NEXT_ACTIVITY_LINKS_MAX)) {\n    const record = (entry ?? {}) as Record<string, unknown>\n    const link: CrmNextActivityLink = {}\n    for (const field of ['contactId', 'companyId', 'dealId'] as const) {\n      const id = String(record[field] ?? '').trim().slice(0, 128)\n      if (id) link[field] = id\n    }\n    if (Object.keys(link).length) links.push(link)\n  }\n  return links\n}\n"],"names":["firebaseAdmin","recomputeCrmNextTaskAt","sweepCrmNextTaskAt","CRM_NEXT_ACTIVITY_LINKS_MAX","readCrmRouteScope","authorizeCrmWriter","crmNextActivityHandler","req","res","method","status","json","error","body","scope","writer","ok","firestore","app","sweep","orgId","answer","records","scheduled","cleared","missing","tasks","truncated","links","readLinks","result","console","raw","Array","isArray","entry","slice","record","link","field","id","String","trim","Object","keys","length","push"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,aAAa,EACbC,sBAAsB,EACtBC,kBAAkB,QACb,2BAA0B;AACjC,SACEC,2BAA2B,QAEtB,4BAAwB;AAC/B,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SAASC,kBAAkB,QAAQ,mBAAe;AAElD;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMC,yBAA2C,OAAOC,KAAKC;QAKpDD;IAJd,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMC,QAAQN,YAAAA,IAAIM,IAAI,YAARN,YAAY,CAAC;IAC3B,MAAMO,QAAQV,kBAAkBS;IAChC,IAAI,CAACC,OAAO;QACVN,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,IAAI;QACF,MAAMG,SAAS,MAAMV,mBAAmBE,KAAKO;QAC7C,IAAIC,OAAOC,EAAE,KAAK,OAAO;YACvBR,IAAIE,MAAM,CAACK,OAAOL,MAAM,EAAEC,IAAI,CAACI,OAAOF,IAAI;YAC1C;QACF;QACA,MAAMI,YAAYjB,cAAckB,GAAG,GAAGD,SAAS;QAC/C,IAAIJ,IAAI,CAAC,MAAM,KAAK,MAAM;YACxB,MAAMM,QAAQ,MAAMjB,mBAAmBe,WAAWF,OAAOK,KAAK;YAC9D,MAAMC,SAAkC;gBACtCL,IAAI;gBACJM,SAASH,MAAMI,SAAS,GAAGJ,MAAMK,OAAO;gBACxCC,SAAS;gBACTC,OAAOP,MAAMO,KAAK;gBAClBF,SAASL,MAAMK,OAAO;gBACtBG,WAAWR,MAAMQ,SAAS;YAC5B;YACAnB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAACU;YACrB;QACF;QACA,MAAMO,QAAQC,UAAUhB,IAAI,CAAC,QAAQ;QACrC,IAAI,CAACe,OAAO;YACVpB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyD;YACvF;QACF;QACA,MAAMkB,SAAS,MAAM7B,uBAAuBgB,WAAWF,OAAOK,KAAK,EAAEQ;QACrE,MAAMP,SAAkC;YAAEL,IAAI;WAASc;QACvDtB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAACU;IACvB,EAAE,OAAOT,OAAO;QACdmB,QAAQnB,KAAK,CAAC,8BAA8BA;QAC5CJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA6C;IAC7E;AACF,EAAC;AAED,yEAAyE,GACzE,SAASiB,UAAUG,GAAY;IAC7B,IAAI,CAACC,MAAMC,OAAO,CAACF,MAAM,OAAO;IAChC,MAAMJ,QAA+B,EAAE;IACvC,KAAK,MAAMO,SAASH,IAAII,KAAK,CAAC,GAAGjC,6BAA8B;QAC7D,MAAMkC,SAAUF,gBAAAA,QAAS,CAAC;QAC1B,MAAMG,OAA4B,CAAC;QACnC,KAAK,MAAMC,SAAS;YAAC;YAAa;YAAa;SAAS,CAAW;gBAC/CF;YAAlB,MAAMG,KAAKC,QAAOJ,gBAAAA,MAAM,CAACE,MAAM,YAAbF,gBAAiB,IAAIK,IAAI,GAAGN,KAAK,CAAC,GAAG;YACvD,IAAII,IAAIF,IAAI,CAACC,MAAM,GAAGC;QACxB;QACA,IAAIG,OAAOC,IAAI,CAACN,MAAMO,MAAM,EAAEjB,MAAMkB,IAAI,CAACR;IAC3C;IACA,OAAOV;AACT"}

package/src/lib/server/org-activity.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/org-activity` — one line in the organization's activity
+ * feed (AGL-2634).
+ *
+ * Body: `{ orgId, action, target: { type, id?, name? } }`. Answers
+ * `{ ok: true }` once the line is appended.
+ *
+ * ## Why a route, when the site feed takes the browser's word for it
+ *
+ * A site's feed at `hosts/{hostId}/activity` is written client-direct: the
+ * bulk bars log "Deleted deal" per row through `useHostActivityLogger`,
+ * under a rule that lets a member holding a content role append. The
+ * organization's feed at `orgs/{orgId}/activity` is not — `allow write: if
+ * false` for every client, because the feed names who did what across every
+ * site and its only reader is `/api/orgs/activity`, gated on `org.auditLog`
+ * with the Admin SDK. So an act performed at the ORGANIZATION level with a
+ * client-direct write — a bulk bar over the org's deals, which writes the
+ * documents from the browser — has no feed it can reach, and the org hub
+ * wrote no line at all for its bulk actions. This is the door: the same
+ * trust the site feed extends to the browser (a verified member, holding
+ * the permission the CRM is gated on), narrowed to the org hub's reach
+ * (org-wide, never a site collaborator) and to the CRM's own record kinds.
+ *
+ * What it does NOT vouch for is that the act happened: like every
+ * client-written feed line, the sentence is the caller's. The routes that
+ * perform an org-level act themselves — the stage move, the merge, the
+ * erasure, the email — write their own line with the Admin SDK and never
+ * call here.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import { type CrmOrgActivityKind } from '../constants/api-routes';
+export declare const CRM_ORG_ACTIVITY_ROUTE: "crm/org-activity";
+/** The body the org-level bulk bars post. */
+export interface OrgActivityRequest {
+    orgId: string;
+    /** The sentence — "Owner set on 3 deals" — as the bar's snackbar said it. */
+    action: string;
+    target: {
+        type: CrmOrgActivityKind;
+        id?: string;
+        name?: string;
+    };
+}
+export declare const crmOrgActivityHandler: PluginApiHandler;
+export default crmOrgActivityHandler;