@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/server/task-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/task-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type AglynOrgMember,\n  consentGroupForHost,\n  CRM_COLLECTIONS,\n  type CrmTask,\n  crmScopeTokens,\n  crmTaskReminderAfterEdit,\n  crmTaskReminderPending,\n  isOrgWideMember,\n  memberCanSee,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  type PluginApiResponse,\n} from '@aglyn/aglyn/server'\nimport {\n  crmNextActivityLinksOf,\n  firebaseAdmin,\n  getOrgForHost,\n  memberHasOrgPermission,\n  notifyUsers,\n  recomputeCrmNextTaskAt,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CRM_TASK_BATCH_MAX,\n  type CrmTaskCompleteOutcome,\n  type CrmTaskCompleteResponse,\n  type CrmTaskFields,\n  type CrmTaskSaveOutcome,\n  type CrmTaskSaveResponse,\n  type CrmTasksCompleteResponse,\n  type CrmTasksSaveResponse,\n  readCrmTaskFields,\n} from '../model/task-routes'\nimport { CRM_ORG_TASK_SCOPE } from '../model/task-scope'\nimport {\n  authorizeOrgCaller,\n  type CrmRouteScope,\n  readCrmRouteScope,\n} from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/**\n * The two things a task does that a browser must not do alone (AGL-2599).\n *\n * Every other task write is client-direct against the Firestore rules —\n * reopening, deleting, the list's own reads. These two are routes because\n * each has a side effect that lives outside the document:\n *\n * - SAVING a task assigned to somebody else NOTIFIES them, and a\n *   notification is an Admin-SDK write into another person's inbox. Rather\n *   than a client-direct write followed by a \"please notify\" call — two\n *   operations that can disagree about whether the task exists — the route\n *   persists the task itself and notifies from the same code path, so a\n *   notification can never announce a task that failed to save. It also\n *   stamps the scope, the provenance and the timestamps, which is one\n *   creator computing `visibleTo` rather than two.\n *\n * - COMPLETING a task EMITS the `taskCompleted` host event, which is what a\n *   workflow triggers on. A browser cannot run the workflow runner.\n *\n * Both authenticate the way the other console plugin routes do — the ID\n * token in the `Authorization` header — and then ask the same two questions\n * the rules ask of a `crmTasks` write: is this member allowed to write org\n * data (`owner`/`admin`/`editor`, and `data.manage` resolved through their\n * custom role), and can they reach THIS document's scope.\n *\n * ## The organization variant (AGL-2637)\n *\n * `{ orgId, … }` instead of a site: the org-level hub. The caller is\n * authorized by the ORG — an org-wide member holding `data.manage`, the\n * hub's own gate, never a site collaborator — and reaches every task the\n * org holds, so no scope check is made against the document. A NEW task\n * names the site it is filed from beside the org, or names none and is the\n * organization's own: `hostId: null`, the org scope token alone. Completing\n * emits on the task's OWN site, where its automations live; an\n * organization task has none and emits nothing, as an uncaptured deal's\n * stage change emits nothing.\n *\n * The org variant also takes a BATCH — `taskIds` to complete, `tasks` to\n * save — so the org hub's bulk bar makes one request per action rather\n * than one per task. Each task is answered on its own in `results`; the\n * request as a whole is refused only for what refuses every task alike.\n */\n\nexport type Refusal = {\n  ok: false\n  status: number\n  body: { error: string; reason?: string; code?: string }\n}\n\n/** What the suite gate names when a task route refuses a plan without it. */\nconst TASKS_ACT = \"Working a record's tasks\"\n\nexport interface Writer {\n  ok: true\n  uid: string\n  staff: boolean\n  orgId: string\n  org: Record<string, unknown>\n  /** The member document under a site; `null` at the org level, where the reach is the org's. */\n  member: Partial<AglynOrgMember> | null\n  level: CrmRouteScope['level']\n}\n\nexport const refuse = (status: number, error: string): Refusal => ({\n  ok: false,\n  status,\n  body: { error },\n})\n\nconst ORG_REFUSAL =\n  'Editing tasks at the organization level requires the \"Manage data\" ' +\n  'permission across the whole workspace.'\n\nexport interface CrmWriterOptions {\n  /**\n   * The act a plan without the CRM is refused for, named the way\n   * `crmSuiteRefusalMessage` takes it. `null` for a route that asks the plan\n   * itself, once it knows what the request writes, so the refusal can name\n   * that act — a contact update names the first field it carries. Tasks\n   * when unsaid.\n   */\n  suiteAct?: string | null\n}\n\n/**\n * Who is asking, and whether they may write this CRM at all.\n *\n * Under a site: the org resolved from the site and the rules' own role and\n * permission questions. At the organization level: the org the body names,\n * for an org-wide member with the permission. The scope question — may they\n * reach THIS task — is asked by the caller against the document, because on\n * a create the document does not exist yet and its scope is what the route\n * is about to stamp.\n */\nexport async function authorizeCrmWriter(\n  req: PluginApiRequest,\n  scope: CrmRouteScope,\n  options: CrmWriterOptions = {},\n): Promise<Writer | Refusal> {\n  const suiteAct = options.suiteAct === undefined ? TASKS_ACT : options.suiteAct\n  if (scope.level === 'org') {\n    const caller = await authorizeOrgCaller(req, scope.orgId, {\n      needs: 'data.manage',\n      refusal: ORG_REFUSAL,\n    })\n    if (caller.ok === false) return refuse(caller.status, caller.error)\n    // The plan after the person (AGL-2787): see `suite-gate.ts`.\n    const suite = suiteAct ? crmSuiteRefusal(caller.org, suiteAct) : null\n    if (suite) return { ok: false, status: suite.status, body: suite.body }\n    return {\n      ok: true,\n      uid: caller.uid,\n      staff: caller.staff,\n      orgId: caller.orgId,\n      org: caller.org as Record<string, unknown>,\n      member: null,\n      level: 'org',\n    }\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return refuse(401, 'Unauthenticated')\n\n  const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  const staff = decoded['staff'] === true\n  const resolved = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!resolved) {\n    return refuse(404, 'This site has no organization, so it has no CRM.')\n  }\n  const { orgId, org } = resolved\n  const membership = await resolveOrgMembership(decoded.uid, orgId).catch(\n    () => null,\n  )\n  const member = (membership?.member ?? null) as Partial<AglynOrgMember> | null\n  if (!staff) {\n    const role = String(member?.role ?? '')\n    /*\n     * The rules' `canWriteOrgData()` restated: the role list is what an\n     * unstamped permission map falls through to, and the permission is the\n     * only half a custom role's revocation can reach. A route that checked\n     * one and not the other would open a door the rules keep shut.\n     */\n    const writerRole = role === 'owner' || role === 'admin' || role === 'editor'\n    const suspended =\n      (member as { orgSuspended?: boolean } | null)?.orgSuspended === true\n    if (!member || !writerRole || suspended) {\n      return refuse(403, 'Your organization role does not allow editing the CRM.')\n    }\n    if (!(await memberHasOrgPermission(orgId, member, 'data.manage'))) {\n      return refuse(\n        403,\n        'Your organization role does not allow editing the CRM.',\n      )\n    }\n  }\n  const suite = suiteAct ? crmSuiteRefusal(org, suiteAct) : null\n  if (suite) return { ok: false, status: suite.status, body: suite.body }\n  return {\n    ok: true,\n    uid: decoded.uid,\n    staff,\n    orgId,\n    org: (org ?? {}) as Record<string, unknown>,\n    member,\n    level: 'site',\n  }\n}\n\n/**\n * The rules' `canReadScoped()`, for a document the route has in hand. An\n * org-level writer was admitted as org-wide, and an org-wide member reads\n * every row.\n */\nexport const canReach = (writer: Writer, visibleTo: unknown): boolean =>\n  writer.staff ||\n  writer.level === 'org' ||\n  isOrgWideMember(writer.member) ||\n  memberCanSee(writer.member, visibleTo as string[] | undefined)\n\n/**\n * The records the task names carry `nextTaskAtMs` (AGL-2661), recomputed\n * after every write here. Its own catch: the task IS saved by now, and a\n * denormalized figure that could not move is logged and left for the\n * Fields section's recompute, not reported as a task that failed to save.\n */\nasync function settleNextActivity(\n  orgId: string,\n  links: readonly (Partial<CrmTaskFields> | Record<string, unknown> | null | undefined)[],\n): Promise<void> {\n  try {\n    await recomputeCrmNextTaskAt(\n      firebaseAdmin.app().firestore(),\n      orgId,\n      links.map((link) => crmNextActivityLinksOf(link as Record<string, unknown>)),\n    )\n  } catch (error) {\n    console.error('[crm] next activity could not be recomputed', orgId, error)\n  }\n}\n\n/**\n * The console path the assignee's notification opens: the record the task\n * is for, in the hub, or the tasks list when it is for nobody in particular.\n *\n * In the `/{hostDocId}/rest` shape every host notification uses — the\n * console rewrites it to `/{orgSlug}/hosts/{subdomain}/rest` when the link\n * is followed, which is why `hostId` and `orgId` travel on the document. An\n * organization task has no site to open under, so its link is the `/org`\n * shape the console rewrites onto the organization's own hub.\n */\nfunction assignmentLink(hostId: string | null, fields: CrmTaskFields): string {\n  const base = hostId ? `/${hostId}/crm` : '/org/crm'\n  if (fields.contactId) return `${base}/contacts/${encodeURIComponent(fields.contactId)}`\n  if (fields.dealId) return `${base}/deals/${encodeURIComponent(fields.dealId)}`\n  if (fields.companyId) return `${base}/companies/${encodeURIComponent(fields.companyId)}`\n  return `${base}/tasks`\n}\n\n/**\n * The editable fields as a Firestore write.\n *\n * The optional ids and the assignee are ABSENT on the document when unset,\n * never `null` — the record cards query `where('contactId', '==', id)` and\n * the \"My tasks\" view `where('assigneeUid', '==', uid)`, and neither is\n * helped by a null. So a create leaves an unset optional out, and an update\n * DELETES it: an assignee cleared in the drawer has to come off the\n * document, and an update that merely omitted the key would keep them.\n * `dueAtMs` is the one field written as `null` when unset, because every\n * view orders by it and a document missing the field drops out of an\n * `orderBy` entirely.\n */\nfunction storedFields(\n  fields: CrmTaskFields,\n  mode: 'create' | 'update',\n): Record<string, unknown> {\n  const absent = mode === 'update' ? FieldValue.delete() : undefined\n  const optional = (value: string | null) =>\n    value ? { present: true, value } : { present: mode === 'update', value: absent }\n  const out: Record<string, unknown> = {\n    title: fields.title,\n    kind: fields.kind,\n    priority: fields.priority,\n    dueAtMs: fields.dueAtMs,\n    notes: fields.notes,\n  }\n  for (const [key, value] of [\n    ['assigneeUid', fields.assigneeUid],\n    ['contactId', fields.contactId],\n    ['companyId', fields.companyId],\n    ['dealId', fields.dealId],\n  ] as const) {\n    const slot = optional(value)\n    if (slot.present) out[key] = slot.value\n  }\n  return out\n}\n\n/**\n * The reminder a save leaves (AGL-2659), as a Firestore write.\n *\n * `crmTaskReminderAfterEdit` decides which reminder the task ends up with;\n * this turns the decision into fields. Written as `null` when unset, like\n * `dueAtMs`, so the document says the reminder was decided. A reminder that\n * MOVED — to a new time, or to none — is a reminder not yet sent, so the\n * runner's mark comes off with it; one that stayed keeps its mark, which is\n * what stops a title correction from re-sending last week's reminder.\n */\nfunction reminderFields(\n  fields: CrmTaskFields,\n  existing: FirebaseFirestore.DocumentSnapshot | null,\n): Record<string, unknown> {\n  const previous = existing\n    ? {\n        dueAtMs: (existing.get('dueAtMs') as number | null | undefined) ?? null,\n        remindAtMs: (existing.get('remindAtMs') as number | null | undefined) ?? null,\n      }\n    : null\n  const remindAtMs = crmTaskReminderAfterEdit({\n    dueAtMs: fields.dueAtMs,\n    remindAtMs: fields.remindAtMs,\n    previous,\n  })\n  const out: Record<string, unknown> = { remindAtMs }\n  if (previous && remindAtMs !== previous.remindAtMs) {\n    out['reminderSentAtMs'] = FieldValue.delete()\n  }\n  return out\n}\n\nconst tasksCollection = (orgId: string) =>\n  firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.tasks)\n\ntype TasksCollection = ReturnType<typeof tasksCollection>\n\n/**\n * Whether a uid names a member of the org, answered once per uid across a\n * batch: a bar reassigning forty tasks to one person asks the roster once.\n */\nfunction rosterOf(orgId: string) {\n  const known = new Map<string, Promise<boolean>>()\n  return (uid: string): Promise<boolean> => {\n    let answer = known.get(uid)\n    if (!answer) {\n      answer = resolveOrgMembership(uid, orgId)\n        .then((found) => Boolean(found?.member))\n        .catch(() => false)\n      known.set(uid, answer)\n    }\n    return answer\n  }\n}\n\n/** Tell the assignee, when they are somebody new and somebody else. */\nasync function notifyAssignee(\n  writer: Writer,\n  fields: CrmTaskFields,\n  previousAssignee: string | null,\n  hostId: string | null,\n): Promise<boolean> {\n  const assignee = fields.assigneeUid\n  const notified = Boolean(\n    assignee && assignee !== writer.uid && assignee !== previousAssignee,\n  )\n  if (!notified || !assignee) return false\n  const due =\n    typeof fields.dueAtMs === 'number'\n      ? ` · due ${new Date(fields.dueAtMs).toLocaleString()}`\n      : ''\n  await notifyUsers([assignee], {\n    type: 'content.taskAssigned',\n    title: 'Task assigned to you',\n    body: `${fields.title}${due}`,\n    link: assignmentLink(hostId, fields),\n    orgId: writer.orgId,\n    ...(hostId ? { hostId } : {}),\n  })\n  return true\n}\n\n/**\n * Rewrite one existing task's editable fields, and tell a new assignee.\n *\n * `visibleTo` is not touched: the rules let only an org-wide member move a\n * record's scope, and this route is not the place that does it. `hostId`\n * and `createdByUid` are provenance and never rewritten. The notification\n * opens under the site the caller is on, or — at the organization level —\n * under the task's own site, and under the org hub for a task with none.\n */\nasync function updateTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const existing = await tasks.doc(taskId).get()\n  if (!existing.exists) return refuse(404, 'That task no longer exists.')\n  if (!canReach(writer, existing.get('visibleTo'))) {\n    return refuse(403, 'That task is not visible to you.')\n  }\n  const previousAssignee = String(existing.get('assigneeUid') ?? '') || null\n  const previousLinks = crmNextActivityLinksOf(existing.data() as Record<string, unknown>)\n  await tasks.doc(taskId).update({\n    ...storedFields(fields, 'update'),\n    ...reminderFields(fields, existing),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  // Both sides: a task moved off one deal onto another leaves neither stale.\n  await settleNextActivity(writer.orgId, [previousLinks, fields])\n  const linkHostId =\n    scope.level === 'site'\n      ? scope.hostId\n      : String(existing.get('hostId') ?? '').trim() || null\n  const notified = await notifyAssignee(writer, fields, previousAssignee, linkHostId)\n  return { ok: true, notified }\n}\n\n/**\n * Where a NEW task is filed from: the mounted site, or at the organization\n * level the site the body names — which has to be one of THIS org's, or an\n * org-wide member of one org could stamp a task with another org's site\n * token — or no site at all, the organization's own.\n */\nasync function resolveFiledFrom(\n  writer: Writer,\n  scope: CrmRouteScope,\n): Promise<{ ok: true; hostId: string | null } | Refusal> {\n  if (scope.level === 'site') return { ok: true, hostId: scope.hostId }\n  if (!scope.hostId) return { ok: true, hostId: null }\n  const owner = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!owner || owner.orgId !== writer.orgId) {\n    return refuse(400, 'That site is not one of this organization’s.')\n  }\n  return { ok: true, hostId: scope.hostId }\n}\n\n/**\n * Create one task, stamped with its scope and provenance.\n *\n * The scope every CRM creator stamps for a task filed from a site: the\n * whole org when the org has chosen that, and otherwise the sites this\n * site presents as one sender with — which, undeclared, is this site\n * alone. A scoped member creating a record they could not then see is\n * refused, which is the rules' `canCreateScoped()` said before the write\n * instead of after. An organization task — no site — carries\n * `CRM_ORG_TASK_SCOPE` and `hostId: null`.\n */\nasync function createTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; taskId: string; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const filed = await resolveFiledFrom(writer, scope)\n  if (filed.ok === false) return filed\n  const { hostId } = filed\n  const visibleTo = hostId\n    ? crmScopeTokens(writer.org, consentGroupForHost(writer.org, hostId))\n    : [...CRM_ORG_TASK_SCOPE]\n  if (!canReach(writer, visibleTo)) {\n    return refuse(403, 'Your access to this organization does not reach this site.')\n  }\n  const ref = tasks.doc()\n  await ref.set({\n    ...storedFields(fields, 'create'),\n    ...reminderFields(fields, null),\n    status: 'open',\n    completedAtMs: null,\n    visibleTo,\n    hostId,\n    createdByUid: writer.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [fields])\n  const notified = await notifyAssignee(writer, fields, null, hostId)\n  return { ok: true, taskId: ref.id, notified }\n}\n\n/**\n * `POST crm/task-save` — create or update a task, and tell its assignee.\n *\n * Body: `{ hostId, taskId?, task: CrmTaskFields }` under a site;\n * `{ orgId, hostId?, taskId?, task }` at the organization level; or the\n * org-level batch `{ orgId, tasks: [{ taskId, task }] }`. Answers\n * `{ ok, taskId, notified }`, or `{ ok, results }` for the batch.\n *\n * The NOTIFICATION fires when the saved assignee is somebody other than the\n * person saving AND is not who the task was already assigned to. Assigning\n * a task to yourself is a note to self; re-saving a task's title does not\n * re-announce it to the person who already has it. The assignee must be a\n * member of the org — a uid nobody can find in the roster is refused rather\n * than written, because a notification to a stranger's inbox is the one\n * thing this route must never do.\n */\nexport const crmTaskSaveHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  if (Array.isArray(req.body?.tasks)) {\n    await saveBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  const read = readCrmTaskFields(req.body?.task)\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const fields = read.fields\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    let body: CrmTaskSaveResponse\n    if (taskId) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId, notified: saved.notified }\n    } else {\n      const saved = await createTask(writer, scope, tasks, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId: saved.taskId, notified: saved.notified }\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save failed', error)\n    res.status(500).json({ error: 'The task could not be saved.' })\n  }\n}\n\n/**\n * The batch: every entry read before any is written, so a body with one\n * unreadable entry is refused whole rather than half-applied; then each\n * task in order, each answered on its own.\n */\nasync function saveBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope,\n): Promise<void> {\n  if (scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is saved at the organization level only.',\n    })\n    return\n  }\n  const entries = (req.body?.tasks as unknown[]).slice(0, CRM_TASK_BATCH_MAX + 1)\n  if (!entries.length || entries.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Save between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n  const parsed: Array<{ taskId: string; fields: CrmTaskFields }> = []\n  for (const entry of entries) {\n    const raw = (entry ?? {}) as Record<string, unknown>\n    const taskId = String(raw['taskId'] ?? '').trim()\n    const read = readCrmTaskFields(raw['task'])\n    if (!taskId || read.ok === false) {\n      res.status(400).json({\n        error: read.ok === false ? read.error : 'Every task in a batch names its taskId.',\n      })\n      return\n    }\n    parsed.push({ taskId, fields: read.fields })\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    const results: CrmTaskSaveOutcome[] = []\n    for (const { taskId, fields } of parsed) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      results.push(\n        saved.ok === false\n          ? { taskId, ok: false, error: saved.body.error }\n          : { taskId, ok: true, notified: saved.notified },\n      )\n    }\n    const body: CrmTasksSaveResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be saved.' })\n  }\n}\n\n/**\n * Mark one task done and fire `taskCompleted` on the site whose automations\n * hear it: under a site, the site whose console ticked the box — workflows\n * belong to a site, and the person is on that site's console. At the\n * organization level there is no such console, so the event goes to the\n * task's OWN site, and an organization task, having none, fires nothing.\n * The task's own `hostId` rides in the payload as `taskHostId` either way,\n * for a workflow that cares about the difference.\n *\n * Idempotent on purpose: two people ticking the same box, or one person\n * double-clicking, completes a task once and fires its event once. The\n * second call reads the stored `completedAtMs` back and writes nothing.\n */\nasync function completeTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n): Promise<CrmTaskCompleteOutcome> {\n  const ref = tasks.doc(taskId)\n  const snapshot = await ref.get()\n  if (!snapshot.exists) {\n    return { taskId, ok: false, error: 'That task no longer exists.' }\n  }\n  const task = snapshot.data() as Partial<CrmTask>\n  if (!canReach(writer, task.visibleTo)) {\n    return { taskId, ok: false, error: 'That task is not visible to you.' }\n  }\n  if (task.status === 'done') {\n    return {\n      taskId,\n      ok: true,\n      completedAtMs: Number(task.completedAtMs ?? 0),\n      alreadyDone: true,\n    }\n  }\n\n  const completedAtMs = Date.now()\n  await ref.update({\n    status: 'done',\n    completedAtMs,\n    completedByUid: writer.uid,\n    // A reminder still owed on a task that is done is owed to nobody\n    // (AGL-2659); one already sent stays, as a fact about what happened.\n    ...(crmTaskReminderPending(task) ? { remindAtMs: null } : {}),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [task as Record<string, unknown>])\n\n  const eventHostId =\n    scope.level === 'site' ? scope.hostId : String(task.hostId ?? '').trim()\n  if (eventHostId) {\n    /*\n     * The payload is what a workflow filter can read: every field a string,\n     * number or boolean, and every optional one present as an empty string\n     * rather than absent, so `contactId != \"\"` is a filter somebody can\n     * write without knowing whether the key exists.\n     */\n    await emitHostEvent(eventHostId, 'taskCompleted', {\n      taskId,\n      title: String(task.title ?? ''),\n      kind: String(task.kind ?? ''),\n      priority: String(task.priority ?? ''),\n      dueAtMs: typeof task.dueAtMs === 'number' ? task.dueAtMs : 0,\n      completedAtMs,\n      completedByUid: writer.uid,\n      assigneeUid: String(task.assigneeUid ?? ''),\n      createdByUid: String(task.createdByUid ?? ''),\n      contactId: String(task.contactId ?? ''),\n      companyId: String(task.companyId ?? ''),\n      dealId: String(task.dealId ?? ''),\n      taskHostId: String(task.hostId ?? ''),\n    })\n  }\n  return { taskId, ok: true, completedAtMs }\n}\n\n/** A per-task outcome as the single-task route has always answered. */\nconst completeStatus = (outcome: Extract<CrmTaskCompleteOutcome, { ok: false }>) =>\n  outcome.error === 'That task no longer exists.' ? 404 : 403\n\n/**\n * `POST crm/task-complete` — mark a task done and fire `taskCompleted`.\n *\n * Body: `{ hostId, taskId }` under a site, `{ orgId, taskId }` at the\n * organization level, or the org-level batch `{ orgId, taskIds }`. Answers\n * `{ ok, completedAtMs, alreadyDone? }`, or `{ ok, results }` for the batch.\n */\nexport const crmTaskCompleteHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (Array.isArray(req.body?.taskIds)) {\n    await completeBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  if (!scope || !taskId) {\n    res.status(400).json({ error: 'Missing hostId or taskId' })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const outcome = await completeTask(writer, scope, tasksCollection(writer.orgId), taskId)\n    if (outcome.ok === false) {\n      res.status(completeStatus(outcome)).json({ error: outcome.error })\n      return\n    }\n    const body: CrmTaskCompleteResponse = {\n      ok: true,\n      completedAtMs: outcome.completedAtMs,\n      ...(outcome.alreadyDone ? { alreadyDone: true } : {}),\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete failed', error)\n    res.status(500).json({ error: 'The task could not be completed.' })\n  }\n}\n\n/**\n * The batch: the ids deduplicated and capped, then each task in order —\n * in order rather than at once, because each completion may run a site's\n * workflows, and two hundred runners started together is the burst the\n * per-task client call was written to avoid.\n */\nasync function completeBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope | null,\n): Promise<void> {\n  if (!scope || scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is completed at the organization level only.',\n    })\n    return\n  }\n  const taskIds = [\n    ...new Set(\n      (req.body?.taskIds as unknown[]).map((id) => String(id ?? '').trim()).filter(Boolean),\n    ),\n  ]\n  if (!taskIds.length || taskIds.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Complete between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const results: CrmTaskCompleteOutcome[] = []\n    for (const taskId of taskIds) {\n      results.push(await completeTask(writer, scope, tasks, taskId))\n    }\n    const body: CrmTasksCompleteResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be completed.' })\n  }\n}\n"],"names":["consentGroupForHost","CRM_COLLECTIONS","crmScopeTokens","crmTaskReminderAfterEdit","crmTaskReminderPending","isOrgWideMember","memberCanSee","crmNextActivityLinksOf","firebaseAdmin","getOrgForHost","memberHasOrgPermission","notifyUsers","recomputeCrmNextTaskAt","resolveOrgMembership","emitHostEvent","FieldValue","CRM_TASK_BATCH_MAX","readCrmTaskFields","CRM_ORG_TASK_SCOPE","authorizeOrgCaller","readCrmRouteScope","crmSuiteRefusal","TASKS_ACT","refuse","status","error","ok","body","ORG_REFUSAL","authorizeCrmWriter","req","scope","options","suiteAct","undefined","level","caller","orgId","needs","refusal","suite","org","uid","staff","member","authorization","String","headers","idToken","startsWith","slice","length","decoded","app","auth","verifyIdToken","resolved","hostId","catch","membership","role","writerRole","suspended","orgSuspended","canReach","writer","visibleTo","settleNextActivity","links","firestore","map","link","console","assignmentLink","fields","base","contactId","encodeURIComponent","dealId","companyId","storedFields","mode","absent","delete","optional","value","present","out","title","kind","priority","dueAtMs","notes","key","assigneeUid","slot","reminderFields","existing","previous","get","remindAtMs","tasksCollection","collection","doc","tasks","rosterOf","known","Map","answer","then","found","Boolean","set","notifyAssignee","previousAssignee","assignee","notified","due","Date","toLocaleString","type","updateTask","taskId","onRoster","exists","previousLinks","data","update","updatedAt","serverTimestamp","linkHostId","trim","resolveFiledFrom","owner","createTask","filed","ref","completedAtMs","createdByUid","createdAt","id","crmTaskSaveHandler","res","method","setHeader","json","Array","isArray","saveBatch","read","task","saved","entries","parsed","entry","raw","push","results","completeTask","snapshot","Number","alreadyDone","now","completedByUid","eventHostId","taskHostId","completeStatus","outcome","crmTaskCompleteHandler","taskIds","completeBatch","Set","filter"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,mBAAmB,EACnBC,eAAe,EAEfC,cAAc,EACdC,wBAAwB,EACxBC,sBAAsB,EACtBC,eAAe,EACfC,YAAY,QAIP,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,aAAa,EACbC,aAAa,EACbC,sBAAsB,EACtBC,WAAW,EACXC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,aAAa,QAAQ,wBAAuB;AACrD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,kBAAkB,EAQlBC,iBAAiB,QACZ,0BAAsB;AAC7B,SAASC,kBAAkB,QAAQ,yBAAqB;AACxD,SACEC,kBAAkB,EAElBC,iBAAiB,QACZ,kBAAc;AACrB,SAASC,eAAe,QAAQ,kBAAc;AAmD9C,2EAA2E,GAC3E,MAAMC,YAAY;AAalB,OAAO,MAAMC,SAAS,CAACC,QAAgBC,QAA4B,CAAA;QACjEC,IAAI;QACJF;QACAG,MAAM;YAAEF;QAAM;IAChB,CAAA,EAAE;AAEF,MAAMG,cACJ,wEACA;AAaF;;;;;;;;;CASC,GACD,OAAO,eAAeC,mBACpBC,GAAqB,EACrBC,KAAoB,EACpBC,UAA4B,CAAC,CAAC;QAuBDF;IArB7B,MAAMG,WAAWD,QAAQC,QAAQ,KAAKC,YAAYZ,YAAYU,QAAQC,QAAQ;IAC9E,IAAIF,MAAMI,KAAK,KAAK,OAAO;QACzB,MAAMC,SAAS,MAAMjB,mBAAmBW,KAAKC,MAAMM,KAAK,EAAE;YACxDC,OAAO;YACPC,SAASX;QACX;QACA,IAAIQ,OAAOV,EAAE,KAAK,OAAO,OAAOH,OAAOa,OAAOZ,MAAM,EAAEY,OAAOX,KAAK;QAClE,6DAA6D;QAC7D,MAAMe,QAAQP,WAAWZ,gBAAgBe,OAAOK,GAAG,EAAER,YAAY;QACjE,IAAIO,OAAO,OAAO;YAAEd,IAAI;YAAOF,QAAQgB,MAAMhB,MAAM;YAAEG,MAAMa,MAAMb,IAAI;QAAC;QACtE,OAAO;YACLD,IAAI;YACJgB,KAAKN,OAAOM,GAAG;YACfC,OAAOP,OAAOO,KAAK;YACnBN,OAAOD,OAAOC,KAAK;YACnBI,KAAKL,OAAOK,GAAG;YACfG,QAAQ;YACRT,OAAO;QACT;IACF;IAEA,MAAMU,gBAAgBC,QAAOhB,6BAAAA,IAAIiB,OAAO,CAACF,aAAa,YAAzBf,6BAA6B;IAC1D,MAAMkB,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCjB;IACJ,IAAI,CAACc,SAAS,OAAOzB,OAAO,KAAK;IAEjC,MAAM6B,UAAU,MAAM5C,cAAc6C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACP;IAC/D,MAAML,QAAQS,OAAO,CAAC,QAAQ,KAAK;IACnC,MAAMI,WAAW,MAAM/C,cAAcsB,MAAM0B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC/D,IAAI,CAACF,UAAU;QACb,OAAOjC,OAAO,KAAK;IACrB;IACA,MAAM,EAAEc,KAAK,EAAEI,GAAG,EAAE,GAAGe;IACvB,MAAMG,aAAa,MAAM9C,qBAAqBuC,QAAQV,GAAG,EAAEL,OAAOqB,KAAK,CACrE,IAAM;IAER,MAAMd,iBAAUe,8BAAAA,WAAYf,MAAM,mBAAI;IACtC,IAAI,CAACD,OAAO;;QACV,MAAMiB,OAAOd,gBAAOF,0BAAAA,OAAQgB,IAAI,oBAAI;QACpC;;;;;KAKC,GACD,MAAMC,aAAaD,SAAS,WAAWA,SAAS,WAAWA,SAAS;QACpE,MAAME,YACJ,CAAClB,0BAAD,AAACA,OAA8CmB,YAAY,MAAK;QAClE,IAAI,CAACnB,UAAU,CAACiB,cAAcC,WAAW;YACvC,OAAOvC,OAAO,KAAK;QACrB;QACA,IAAI,CAAE,MAAMb,uBAAuB2B,OAAOO,QAAQ,gBAAiB;YACjE,OAAOrB,OACL,KACA;QAEJ;IACF;IACA,MAAMiB,QAAQP,WAAWZ,gBAAgBoB,KAAKR,YAAY;IAC1D,IAAIO,OAAO,OAAO;QAAEd,IAAI;QAAOF,QAAQgB,MAAMhB,MAAM;QAAEG,MAAMa,MAAMb,IAAI;IAAC;IACtE,OAAO;QACLD,IAAI;QACJgB,KAAKU,QAAQV,GAAG;QAChBC;QACAN;QACAI,GAAG,EAAGA,cAAAA,MAAO,CAAC;QACdG;QACAT,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,MAAM6B,WAAW,CAACC,QAAgBC,YACvCD,OAAOtB,KAAK,IACZsB,OAAO9B,KAAK,KAAK,SACjB9B,gBAAgB4D,OAAOrB,MAAM,KAC7BtC,aAAa2D,OAAOrB,MAAM,EAAEsB,WAAkC;AAEhE;;;;;CAKC,GACD,eAAeC,mBACb9B,KAAa,EACb+B,KAAuF;IAEvF,IAAI;QACF,MAAMxD,uBACJJ,cAAc6C,GAAG,GAAGgB,SAAS,IAC7BhC,OACA+B,MAAME,GAAG,CAAC,CAACC,OAAShE,uBAAuBgE;IAE/C,EAAE,OAAO9C,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,+CAA+CY,OAAOZ;IACtE;AACF;AAEA;;;;;;;;;CASC,GACD,SAASgD,eAAehB,MAAqB,EAAEiB,MAAqB;IAClE,MAAMC,OAAOlB,SAAS,CAAC,CAAC,EAAEA,OAAO,IAAI,CAAC,GAAG;IACzC,IAAIiB,OAAOE,SAAS,EAAE,OAAO,GAAGD,KAAK,UAAU,EAAEE,mBAAmBH,OAAOE,SAAS,GAAG;IACvF,IAAIF,OAAOI,MAAM,EAAE,OAAO,GAAGH,KAAK,OAAO,EAAEE,mBAAmBH,OAAOI,MAAM,GAAG;IAC9E,IAAIJ,OAAOK,SAAS,EAAE,OAAO,GAAGJ,KAAK,WAAW,EAAEE,mBAAmBH,OAAOK,SAAS,GAAG;IACxF,OAAO,GAAGJ,KAAK,MAAM,CAAC;AACxB;AAEA;;;;;;;;;;;;CAYC,GACD,SAASK,aACPN,MAAqB,EACrBO,IAAyB;IAEzB,MAAMC,SAASD,SAAS,WAAWlE,WAAWoE,MAAM,KAAKjD;IACzD,MAAMkD,WAAW,CAACC,QAChBA,QAAQ;YAAEC,SAAS;YAAMD;QAAM,IAAI;YAAEC,SAASL,SAAS;YAAUI,OAAOH;QAAO;IACjF,MAAMK,MAA+B;QACnCC,OAAOd,OAAOc,KAAK;QACnBC,MAAMf,OAAOe,IAAI;QACjBC,UAAUhB,OAAOgB,QAAQ;QACzBC,SAASjB,OAAOiB,OAAO;QACvBC,OAAOlB,OAAOkB,KAAK;IACrB;IACA,KAAK,MAAM,CAACC,KAAKR,MAAM,IAAI;QACzB;YAAC;YAAeX,OAAOoB,WAAW;SAAC;QACnC;YAAC;YAAapB,OAAOE,SAAS;SAAC;QAC/B;YAAC;YAAaF,OAAOK,SAAS;SAAC;QAC/B;YAAC;YAAUL,OAAOI,MAAM;SAAC;KAC1B,CAAW;QACV,MAAMiB,OAAOX,SAASC;QACtB,IAAIU,KAAKT,OAAO,EAAEC,GAAG,CAACM,IAAI,GAAGE,KAAKV,KAAK;IACzC;IACA,OAAOE;AACT;AAEA;;;;;;;;;CASC,GACD,SAASS,eACPtB,MAAqB,EACrBuB,QAAmD;QAInCA,eACGA;IAHnB,MAAMC,WAAWD,WACb;QACEN,OAAO,GAAGM,gBAAAA,SAASE,GAAG,CAAC,sBAAbF,gBAAyD;QACnEG,UAAU,GAAGH,iBAAAA,SAASE,GAAG,CAAC,yBAAbF,iBAA4D;IAC3E,IACA;IACJ,MAAMG,aAAajG,yBAAyB;QAC1CwF,SAASjB,OAAOiB,OAAO;QACvBS,YAAY1B,OAAO0B,UAAU;QAC7BF;IACF;IACA,MAAMX,MAA+B;QAAEa;IAAW;IAClD,IAAIF,YAAYE,eAAeF,SAASE,UAAU,EAAE;QAClDb,GAAG,CAAC,mBAAmB,GAAGxE,WAAWoE,MAAM;IAC7C;IACA,OAAOI;AACT;AAEA,MAAMc,kBAAkB,CAAChE,QACvB7B,cACG6C,GAAG,GACHgB,SAAS,GACTiC,UAAU,CAAC,QACXC,GAAG,CAAClE,OACJiE,UAAU,CAACrG,gBAAgBuG,KAAK;AAIrC;;;CAGC,GACD,SAASC,SAASpE,KAAa;IAC7B,MAAMqE,QAAQ,IAAIC;IAClB,OAAO,CAACjE;QACN,IAAIkE,SAASF,MAAMP,GAAG,CAACzD;QACvB,IAAI,CAACkE,QAAQ;YACXA,SAAS/F,qBAAqB6B,KAAKL,OAChCwE,IAAI,CAAC,CAACC,QAAUC,QAAQD,yBAAAA,MAAOlE,MAAM,GACrCc,KAAK,CAAC,IAAM;YACfgD,MAAMM,GAAG,CAACtE,KAAKkE;QACjB;QACA,OAAOA;IACT;AACF;AAEA,qEAAqE,GACrE,eAAeK,eACbhD,MAAc,EACdS,MAAqB,EACrBwC,gBAA+B,EAC/BzD,MAAqB;IAErB,MAAM0D,WAAWzC,OAAOoB,WAAW;IACnC,MAAMsB,WAAWL,QACfI,YAAYA,aAAalD,OAAOvB,GAAG,IAAIyE,aAAaD;IAEtD,IAAI,CAACE,YAAY,CAACD,UAAU,OAAO;IACnC,MAAME,MACJ,OAAO3C,OAAOiB,OAAO,KAAK,WACtB,CAAC,OAAO,EAAE,IAAI2B,KAAK5C,OAAOiB,OAAO,EAAE4B,cAAc,IAAI,GACrD;IACN,MAAM5G,YAAY;QAACwG;KAAS,EAAE;QAC5BK,MAAM;QACNhC,OAAO;QACP7D,MAAM,GAAG+C,OAAOc,KAAK,GAAG6B,KAAK;QAC7B9C,MAAME,eAAehB,QAAQiB;QAC7BrC,OAAO4B,OAAO5B,KAAK;OACfoB,SAAS;QAAEA;IAAO,IAAI,CAAC;IAE7B,OAAO;AACT;AAEA;;;;;;;;CAQC,GACD,eAAegE,WACbxD,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtBkB,MAAc,EACdhD,MAAqB,EACrBiD,QAA2C;QAUX1B,eAYnBA;IApBb,IAAIvB,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOvE,OAAO,KAAK;IACrB;IACA,MAAM0E,WAAW,MAAMO,MAAMD,GAAG,CAACmB,QAAQvB,GAAG;IAC5C,IAAI,CAACF,SAAS2B,MAAM,EAAE,OAAOrG,OAAO,KAAK;IACzC,IAAI,CAACyC,SAASC,QAAQgC,SAASE,GAAG,CAAC,eAAe;QAChD,OAAO5E,OAAO,KAAK;IACrB;IACA,MAAM2F,mBAAmBpE,QAAOmD,gBAAAA,SAASE,GAAG,CAAC,0BAAbF,gBAA+B,OAAO;IACtE,MAAM4B,gBAAgBtH,uBAAuB0F,SAAS6B,IAAI;IAC1D,MAAMtB,MAAMD,GAAG,CAACmB,QAAQK,MAAM,CAAC,aAC1B/C,aAAaN,QAAQ,WACrBsB,eAAetB,QAAQuB;QAC1B+B,WAAWjH,WAAWkH,eAAe;;IAEvC,2EAA2E;IAC3E,MAAM9D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACwF;QAAenD;KAAO;IAC9D,MAAMwD,aACJnG,MAAMI,KAAK,KAAK,SACZJ,MAAM0B,MAAM,GACZX,QAAOmD,iBAAAA,SAASE,GAAG,CAAC,qBAAbF,iBAA0B,IAAIkC,IAAI,MAAM;IACrD,MAAMf,WAAW,MAAMH,eAAehD,QAAQS,QAAQwC,kBAAkBgB;IACxE,OAAO;QAAExG,IAAI;QAAM0F;IAAS;AAC9B;AAEA;;;;;CAKC,GACD,eAAegB,iBACbnE,MAAc,EACdlC,KAAoB;IAEpB,IAAIA,MAAMI,KAAK,KAAK,QAAQ,OAAO;QAAET,IAAI;QAAM+B,QAAQ1B,MAAM0B,MAAM;IAAC;IACpE,IAAI,CAAC1B,MAAM0B,MAAM,EAAE,OAAO;QAAE/B,IAAI;QAAM+B,QAAQ;IAAK;IACnD,MAAM4E,QAAQ,MAAM5H,cAAcsB,MAAM0B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC5D,IAAI,CAAC2E,SAASA,MAAMhG,KAAK,KAAK4B,OAAO5B,KAAK,EAAE;QAC1C,OAAOd,OAAO,KAAK;IACrB;IACA,OAAO;QAAEG,IAAI;QAAM+B,QAAQ1B,MAAM0B,MAAM;IAAC;AAC1C;AAEA;;;;;;;;;;CAUC,GACD,eAAe6E,WACbrE,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtB9B,MAAqB,EACrBiD,QAA2C;IAE3C,IAAIjD,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOvE,OAAO,KAAK;IACrB;IACA,MAAMgH,QAAQ,MAAMH,iBAAiBnE,QAAQlC;IAC7C,IAAIwG,MAAM7G,EAAE,KAAK,OAAO,OAAO6G;IAC/B,MAAM,EAAE9E,MAAM,EAAE,GAAG8E;IACnB,MAAMrE,YAAYT,SACdvD,eAAe+D,OAAOxB,GAAG,EAAEzC,oBAAoBiE,OAAOxB,GAAG,EAAEgB,WAC3D;WAAIvC;KAAmB;IAC3B,IAAI,CAAC8C,SAASC,QAAQC,YAAY;QAChC,OAAO3C,OAAO,KAAK;IACrB;IACA,MAAMiH,MAAMhC,MAAMD,GAAG;IACrB,MAAMiC,IAAIxB,GAAG,CAAC,aACThC,aAAaN,QAAQ,WACrBsB,eAAetB,QAAQ;QAC1BlD,QAAQ;QACRiH,eAAe;QACfvE;QACAT;QACAiF,cAAczE,OAAOvB,GAAG;QACxBiG,WAAW5H,WAAWkH,eAAe;QACrCD,WAAWjH,WAAWkH,eAAe;;IAEvC,MAAM9D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACqC;KAAO;IAC/C,MAAM0C,WAAW,MAAMH,eAAehD,QAAQS,QAAQ,MAAMjB;IAC5D,OAAO;QAAE/B,IAAI;QAAMgG,QAAQc,IAAII,EAAE;QAAExB;IAAS;AAC9C;AAEA;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAMyB,qBAAuC,OAAO/G,KAAKgH;;QAW5ChH,WAIIA,YACSA;IAf/B,IAAIA,IAAIiH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAI,CAACI,OAAO;QACV+G,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAiB;QAC/C;IACF;IACA,IAAIyH,MAAMC,OAAO,EAACrH,YAAAA,IAAIH,IAAI,qBAARG,UAAU0E,KAAK,GAAG;QAClC,MAAM4C,UAAUtH,KAAKgH,KAAK/G;QAC1B;IACF;IACA,MAAM2F,SAAS5E,gBAAOhB,aAAAA,IAAIH,IAAI,qBAARG,WAAU4F,MAAM,mBAAI,IAAIS,IAAI;IAClD,MAAMkB,OAAOpI,mBAAkBa,aAAAA,IAAIH,IAAI,qBAARG,WAAUwH,IAAI;IAC7C,IAAID,KAAK3H,EAAE,KAAK,OAAO;QACrBoH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO4H,KAAK5H,KAAK;QAAC;QACzC;IACF;IACA,MAAMiD,SAAS2E,KAAK3E,MAAM;IAE1B,IAAI;QACF,MAAMT,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBoH,IAAItH,MAAM,CAACyC,OAAOzC,MAAM,EAAEyH,IAAI,CAAChF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMsF,WAAWlB,SAASxC,OAAO5B,KAAK;QACtC,IAAIV;QACJ,IAAI+F,QAAQ;YACV,MAAM6B,QAAQ,MAAM9B,WAAWxD,QAAQlC,OAAOyE,OAAOkB,QAAQhD,QAAQiD;YACrE,IAAI4B,MAAM7H,EAAE,KAAK,OAAO;gBACtBoH,IAAItH,MAAM,CAAC+H,MAAM/H,MAAM,EAAEyH,IAAI,CAACM,MAAM5H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMgG;gBAAQN,UAAUmC,MAAMnC,QAAQ;YAAC;QACtD,OAAO;YACL,MAAMmC,QAAQ,MAAMjB,WAAWrE,QAAQlC,OAAOyE,OAAO9B,QAAQiD;YAC7D,IAAI4B,MAAM7H,EAAE,KAAK,OAAO;gBACtBoH,IAAItH,MAAM,CAAC+H,MAAM/H,MAAM,EAAEyH,IAAI,CAACM,MAAM5H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMgG,QAAQ6B,MAAM7B,MAAM;gBAAEN,UAAUmC,MAAMnC,QAAQ;YAAC;QACpE;QACA0B,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAACtH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,0BAA0BA;QACxCqH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAA+B;IAC/D;AACF,EAAC;AAED;;;;CAIC,GACD,eAAe2H,UACbtH,GAAqB,EACrBgH,GAAsB,EACtB/G,KAAoB;QAQHD;IANjB,IAAIC,MAAMI,KAAK,KAAK,OAAO;QACzB2G,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YACnBxH,OAAO;QACT;QACA;IACF;IACA,MAAM+H,UAAU,EAAC1H,YAAAA,IAAIH,IAAI,qBAARG,UAAU0E,KAAK,EAAetD,KAAK,CAAC,GAAGlC,qBAAqB;IAC7E,IAAI,CAACwI,QAAQrG,MAAM,IAAIqG,QAAQrG,MAAM,GAAGnC,oBAAoB;QAC1D8H,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YACnBxH,OAAO,CAAC,mBAAmB,EAAET,mBAAmB,iBAAiB,CAAC;QACpE;QACA;IACF;IACA,MAAMyI,SAA2D,EAAE;IACnE,KAAK,MAAMC,SAASF,QAAS;YAELG;QADtB,MAAMA,MAAOD,gBAAAA,QAAS,CAAC;QACvB,MAAMhC,SAAS5E,QAAO6G,cAAAA,GAAG,CAAC,SAAS,YAAbA,cAAiB,IAAIxB,IAAI;QAC/C,MAAMkB,OAAOpI,kBAAkB0I,GAAG,CAAC,OAAO;QAC1C,IAAI,CAACjC,UAAU2B,KAAK3H,EAAE,KAAK,OAAO;YAChCoH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;gBACnBxH,OAAO4H,KAAK3H,EAAE,KAAK,QAAQ2H,KAAK5H,KAAK,GAAG;YAC1C;YACA;QACF;QACAgI,OAAOG,IAAI,CAAC;YAAElC;YAAQhD,QAAQ2E,KAAK3E,MAAM;QAAC;IAC5C;IAEA,IAAI;QACF,MAAMT,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBoH,IAAItH,MAAM,CAACyC,OAAOzC,MAAM,EAAEyH,IAAI,CAAChF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMsF,WAAWlB,SAASxC,OAAO5B,KAAK;QACtC,MAAMwH,UAAgC,EAAE;QACxC,KAAK,MAAM,EAAEnC,MAAM,EAAEhD,MAAM,EAAE,IAAI+E,OAAQ;YACvC,MAAMF,QAAQ,MAAM9B,WAAWxD,QAAQlC,OAAOyE,OAAOkB,QAAQhD,QAAQiD;YACrEkC,QAAQD,IAAI,CACVL,MAAM7H,EAAE,KAAK,QACT;gBAAEgG;gBAAQhG,IAAI;gBAAOD,OAAO8H,MAAM5H,IAAI,CAACF,KAAK;YAAC,IAC7C;gBAAEiG;gBAAQhG,IAAI;gBAAM0F,UAAUmC,MAAMnC,QAAQ;YAAC;QAErD;QACA,MAAMzF,OAA6B;YAAED,IAAI;YAAMmI;QAAQ;QACvDf,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAACtH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,gCAAgCA;QAC9CqH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAgC;IAChE;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,eAAeqI,aACb7F,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtBkB,MAAc;QAiCmC4B;IA/BjD,MAAMd,MAAMhC,MAAMD,GAAG,CAACmB;IACtB,MAAMqC,WAAW,MAAMvB,IAAIrC,GAAG;IAC9B,IAAI,CAAC4D,SAASnC,MAAM,EAAE;QACpB,OAAO;YAAEF;YAAQhG,IAAI;YAAOD,OAAO;QAA8B;IACnE;IACA,MAAM6H,OAAOS,SAASjC,IAAI;IAC1B,IAAI,CAAC9D,SAASC,QAAQqF,KAAKpF,SAAS,GAAG;QACrC,OAAO;YAAEwD;YAAQhG,IAAI;YAAOD,OAAO;QAAmC;IACxE;IACA,IAAI6H,KAAK9H,MAAM,KAAK,QAAQ;YAIF8H;QAHxB,OAAO;YACL5B;YACAhG,IAAI;YACJ+G,eAAeuB,QAAOV,sBAAAA,KAAKb,aAAa,YAAlBa,sBAAsB;YAC5CW,aAAa;QACf;IACF;IAEA,MAAMxB,gBAAgBnB,KAAK4C,GAAG;IAC9B,MAAM1B,IAAIT,MAAM,CAAC;QACfvG,QAAQ;QACRiH;QACA0B,gBAAgBlG,OAAOvB,GAAG;OAGtBtC,uBAAuBkJ,QAAQ;QAAElD,YAAY;IAAK,IAAI,CAAC;QAC3D4B,WAAWjH,WAAWkH,eAAe;;IAEvC,MAAM9D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACiH;KAAgC;IAExE,MAAMc,cACJrI,MAAMI,KAAK,KAAK,SAASJ,MAAM0B,MAAM,GAAGX,QAAOwG,eAAAA,KAAK7F,MAAM,YAAX6F,eAAe,IAAInB,IAAI;IACxE,IAAIiC,aAAa;YASCd,aACDA,YACIA,gBAIGA,mBACCA,oBACHA,iBACAA,iBACHA,cACIA;QAnBrB;;;;;KAKC,GACD,MAAMxI,cAAcsJ,aAAa,iBAAiB;YAChD1C;YACAlC,OAAO1C,QAAOwG,cAAAA,KAAK9D,KAAK,YAAV8D,cAAc;YAC5B7D,MAAM3C,QAAOwG,aAAAA,KAAK7D,IAAI,YAAT6D,aAAa;YAC1B5D,UAAU5C,QAAOwG,iBAAAA,KAAK5D,QAAQ,YAAb4D,iBAAiB;YAClC3D,SAAS,OAAO2D,KAAK3D,OAAO,KAAK,WAAW2D,KAAK3D,OAAO,GAAG;YAC3D8C;YACA0B,gBAAgBlG,OAAOvB,GAAG;YAC1BoD,aAAahD,QAAOwG,oBAAAA,KAAKxD,WAAW,YAAhBwD,oBAAoB;YACxCZ,cAAc5F,QAAOwG,qBAAAA,KAAKZ,YAAY,YAAjBY,qBAAqB;YAC1C1E,WAAW9B,QAAOwG,kBAAAA,KAAK1E,SAAS,YAAd0E,kBAAkB;YACpCvE,WAAWjC,QAAOwG,kBAAAA,KAAKvE,SAAS,YAAduE,kBAAkB;YACpCxE,QAAQhC,QAAOwG,eAAAA,KAAKxE,MAAM,YAAXwE,eAAe;YAC9Be,YAAYvH,QAAOwG,gBAAAA,KAAK7F,MAAM,YAAX6F,gBAAe;QACpC;IACF;IACA,OAAO;QAAE5B;QAAQhG,IAAI;QAAM+G;IAAc;AAC3C;AAEA,qEAAqE,GACrE,MAAM6B,iBAAiB,CAACC,UACtBA,QAAQ9I,KAAK,KAAK,gCAAgC,MAAM;AAE1D;;;;;;CAMC,GACD,OAAO,MAAM+I,yBAA2C,OAAO1I,KAAKgH;;QAOhDhH,WAIIA;IAVtB,IAAIA,IAAIiH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAIuH,MAAMC,OAAO,EAACrH,YAAAA,IAAIH,IAAI,qBAARG,UAAU2I,OAAO,GAAG;QACpC,MAAMC,cAAc5I,KAAKgH,KAAK/G;QAC9B;IACF;IACA,MAAM2F,SAAS5E,gBAAOhB,aAAAA,IAAIH,IAAI,qBAARG,WAAU4F,MAAM,mBAAI,IAAIS,IAAI;IAClD,IAAI,CAACpG,SAAS,CAAC2F,QAAQ;QACrBoB,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAA2B;QACzD;IACF;IAEA,IAAI;QACF,MAAMwC,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBoH,IAAItH,MAAM,CAACyC,OAAOzC,MAAM,EAAEyH,IAAI,CAAChF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM4I,UAAU,MAAMT,aAAa7F,QAAQlC,OAAOsE,gBAAgBpC,OAAO5B,KAAK,GAAGqF;QACjF,IAAI6C,QAAQ7I,EAAE,KAAK,OAAO;YACxBoH,IAAItH,MAAM,CAAC8I,eAAeC,UAAUtB,IAAI,CAAC;gBAAExH,OAAO8I,QAAQ9I,KAAK;YAAC;YAChE;QACF;QACA,MAAME,OAAgC;YACpCD,IAAI;YACJ+G,eAAe8B,QAAQ9B,aAAa;WAChC8B,QAAQN,WAAW,GAAG;YAAEA,aAAa;QAAK,IAAI,CAAC;QAErDnB,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAACtH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,8BAA8BA;QAC5CqH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAmC;IACnE;AACF,EAAC;AAED;;;;;CAKC,GACD,eAAeiJ,cACb5I,GAAqB,EACrBgH,GAAsB,EACtB/G,KAA2B;QAUtBD;IARL,IAAI,CAACC,SAASA,MAAMI,KAAK,KAAK,OAAO;QACnC2G,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YACnBxH,OAAO;QACT;QACA;IACF;IACA,MAAMgJ,UAAU;WACX,IAAIE,IACL,EAAC7I,YAAAA,IAAIH,IAAI,qBAARG,UAAU2I,OAAO,EAAenG,GAAG,CAAC,CAACsE,KAAO9F,OAAO8F,aAAAA,KAAM,IAAIT,IAAI,IAAIyC,MAAM,CAAC7D;KAEhF;IACD,IAAI,CAAC0D,QAAQtH,MAAM,IAAIsH,QAAQtH,MAAM,GAAGnC,oBAAoB;QAC1D8H,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YACnBxH,OAAO,CAAC,uBAAuB,EAAET,mBAAmB,iBAAiB,CAAC;QACxE;QACA;IACF;IAEA,IAAI;QACF,MAAMiD,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBoH,IAAItH,MAAM,CAACyC,OAAOzC,MAAM,EAAEyH,IAAI,CAAChF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMwH,UAAoC,EAAE;QAC5C,KAAK,MAAMnC,UAAU+C,QAAS;YAC5BZ,QAAQD,IAAI,CAAC,MAAME,aAAa7F,QAAQlC,OAAOyE,OAAOkB;QACxD;QACA,MAAM/F,OAAiC;YAAED,IAAI;YAAMmI;QAAQ;QAC3Df,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAACtH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,oCAAoCA;QAClDqH,IAAItH,MAAM,CAAC,KAAKyH,IAAI,CAAC;YAAExH,OAAO;QAAoC;IACpE;AACF"}

package/src/lib/server/tasks-import.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/tasks-import` — one chunk of a tasks file, written
+ * (AGL-2662).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-task-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the assignee against the
+ * org's roster, and writes the document in the shape the task-save route
+ * writes — the optional ids absent rather than null, `dueAtMs` null when
+ * unset so the ordered views keep the row.
+ *
+ * ## A stranger refuses the row
+ *
+ * The task-save route refuses an assignee who is not a member, because a
+ * notification to a stranger's inbox is the one thing it must never do.
+ * The import refuses the same way, per row, as `unknown-assignee`: the
+ * roster is read once for the request, and an address it does not hold
+ * sends the row back to the operator's skipped file. No notification is
+ * sent for an imported task, so nothing here reaches an inbox at all.
+ *
+ * ## Every task is the site's
+ *
+ * The shared drawer names a site even at the organization level, so an
+ * imported task carries that site's scope the way a task typed under it
+ * does. The organization's own tasks — no site — are filed one at a time
+ * from the organization hub, not from a file.
+ *
+ * Tasks are not CRM records for the band: no quota is asked.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.
+ *
+ * The writes are batched: a task has no key to collide on and no count to
+ * keep honest between rows, so a chunk is one commit.
+ */
+export declare const crmTasksImportHandler: PluginApiHandler;

package/src/lib/server/tasks-import.js

@@ -0,0 +1,157 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `POST /api/crm/tasks-import` — one chunk of a tasks file, written
+ * (AGL-2662).
+ *
+ * The browser has already read the file and applied the operator's column
+ * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw
+ * rows in the vocabulary `crm-task-import.ts` defines. This route judges
+ * each one through the same normalizer, resolves the assignee against the
+ * org's roster, and writes the document in the shape the task-save route
+ * writes — the optional ids absent rather than null, `dueAtMs` null when
+ * unset so the ordered views keep the row.
+ *
+ * ## A stranger refuses the row
+ *
+ * The task-save route refuses an assignee who is not a member, because a
+ * notification to a stranger's inbox is the one thing it must never do.
+ * The import refuses the same way, per row, as `unknown-assignee`: the
+ * roster is read once for the request, and an address it does not hold
+ * sends the row back to the operator's skipped file. No notification is
+ * sent for an imported task, so nothing here reaches an inbox at all.
+ *
+ * ## Every task is the site's
+ *
+ * The shared drawer names a site even at the organization level, so an
+ * imported task carries that site's scope the way a task typed under it
+ * does. The organization's own tasks — no site — are filed one at a time
+ * from the organization hub, not from a file.
+ *
+ * Tasks are not CRM records for the band: no quota is asked.
+ */ import { CRM_COLLECTIONS } from "@aglyn/aglyn/server";
+import { TASK_IMPORT_CHUNK_SIZE, TASK_IMPORT_MAX_BODY_BYTES, normalizeTaskImportRow } from "../model/crm-task-import.js";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
+import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
+/**
+ * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.
+ *
+ * The writes are batched: a task has no key to collide on and no count to
+ * keep honest between rows, so a chunk is one commit.
+ */ export const crmTasksImportHandler = async (req, res)=>{
+    if (req.method !== 'POST') {
+        res.setHeader('Allow', 'POST');
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    const read = readImportRows(req, {
+        maxBodyBytes: TASK_IMPORT_MAX_BODY_BYTES,
+        chunkSize: TASK_IMPORT_CHUNK_SIZE
+    });
+    if ('error' in read) return res.status(read.status).json({
+        error: read.error
+    });
+    try {
+        const context = await resolveImportContext(req);
+        if (context.ok === false) return res.status(context.status).json(context.body);
+        const skipped = [];
+        const dropped = {};
+        const normalized = [];
+        read.rows.forEach((raw, index)=>{
+            const verdict = normalizeTaskImportRow(raw);
+            if (verdict.ok === false) {
+                skipped.push({
+                    index,
+                    title: verdict.input,
+                    reason: verdict.reason
+                });
+                return;
+            }
+            for (const entry of verdict.row.dropped){
+                var _dropped_entry_field;
+                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
+            }
+            normalized.push({
+                index,
+                row: verdict.row
+            });
+        });
+        // The roster reader keys on `ownerEmail`; a task's word for it is assignee.
+        const members = await ownerDirectory(context.orgId, normalized.map((entry)=>({
+                ownerEmail: entry.row.assigneeEmail
+            })));
+        const firestore = firebaseAdmin.app().firestore();
+        const tasks = firestore.collection('orgs').doc(context.orgId).collection(CRM_COLLECTIONS.tasks);
+        const batch = firestore.batch();
+        const nowMs = Date.now();
+        let created = 0;
+        for (const { index, row } of normalized){
+            var _row_notes;
+            let assigneeUid;
+            if (row.assigneeEmail) {
+                assigneeUid = members.get(row.assigneeEmail);
+                if (!assigneeUid) {
+                    skipped.push({
+                        index,
+                        title: row.title,
+                        reason: 'unknown-assignee'
+                    });
+                    continue;
+                }
+            }
+            batch.set(tasks.doc(), _extends({
+                title: row.title,
+                kind: row.kind,
+                priority: row.priority,
+                status: row.status,
+                dueAtMs: row.dueAtMs,
+                notes: (_row_notes = row.notes) != null ? _row_notes : '',
+                completedAtMs: row.status === 'done' ? nowMs : null
+            }, row.status === 'done' ? {
+                completedByUid: context.uid
+            } : {}, assigneeUid ? {
+                assigneeUid
+            } : {}, {
+                visibleTo: context.scopeTokens,
+                hostId: context.hostId,
+                createdByUid: context.uid,
+                createdAt: FieldValue.serverTimestamp(),
+                updatedAt: FieldValue.serverTimestamp()
+            }));
+            created += 1;
+        }
+        if (created) await batch.commit();
+        const result = {
+            received: read.rows.length,
+            created,
+            merged: 0,
+            skipped: skipped.sort((a, b)=>a.index - b.index),
+            dropped,
+            ownersUnresolved: []
+        };
+        return res.status(200).json(result);
+    } catch (error) {
+        console.error('crm/tasks-import failed', error);
+        return res.status(500).json({
+            error: 'The import could not continue.'
+        });
+    }
+};
+
+//# sourceMappingURL=tasks-import.js.map

package/src/lib/server/tasks-import.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/tasks-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/tasks-import` — one chunk of a tasks file, written\n * (AGL-2662).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-task-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the assignee against the\n * org's roster, and writes the document in the shape the task-save route\n * writes — the optional ids absent rather than null, `dueAtMs` null when\n * unset so the ordered views keep the row.\n *\n * ## A stranger refuses the row\n *\n * The task-save route refuses an assignee who is not a member, because a\n * notification to a stranger's inbox is the one thing it must never do.\n * The import refuses the same way, per row, as `unknown-assignee`: the\n * roster is read once for the request, and an address it does not hold\n * sends the row back to the operator's skipped file. No notification is\n * sent for an imported task, so nothing here reaches an inbox at all.\n *\n * ## Every task is the site's\n *\n * The shared drawer names a site even at the organization level, so an\n * imported task carries that site's scope the way a task typed under it\n * does. The organization's own tasks — no site — are filed one at a time\n * from the organization hub, not from a file.\n *\n * Tasks are not CRM records for the band: no quota is asked.\n */\n\nimport { CRM_COLLECTIONS, type PluginApiHandler } from '@aglyn/aglyn/server'\nimport {\n  TASK_IMPORT_CHUNK_SIZE,\n  TASK_IMPORT_MAX_BODY_BYTES,\n  type TaskImportChunkResult,\n  type TaskImportRawRow,\n  type TaskImportRow,\n  type TaskImportSkippedRow,\n  normalizeTaskImportRow,\n} from '../model/crm-task-import'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { ownerDirectory, readImportRows, resolveImportContext } from './import-context'\n\n/**\n * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.\n *\n * The writes are batched: a task has no key to collide on and no count to\n * keep honest between rows, so a chunk is one commit.\n */\nexport const crmTasksImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<TaskImportRawRow>(req, {\n    maxBodyBytes: TASK_IMPORT_MAX_BODY_BYTES,\n    chunkSize: TASK_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: TaskImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: TaskImportRow }[] = []\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeTaskImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, title: verdict.input, reason: verdict.reason })\n        return\n      }\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    // The roster reader keys on `ownerEmail`; a task's word for it is assignee.\n    const members = await ownerDirectory(\n      context.orgId,\n      normalized.map((entry) => ({ ownerEmail: entry.row.assigneeEmail })),\n    )\n    const firestore = firebaseAdmin.app().firestore()\n    const tasks = firestore\n      .collection('orgs')\n      .doc(context.orgId)\n      .collection(CRM_COLLECTIONS.tasks)\n    const batch = firestore.batch()\n    const nowMs = Date.now()\n    let created = 0\n\n    for (const { index, row } of normalized) {\n      let assigneeUid: string | undefined\n      if (row.assigneeEmail) {\n        assigneeUid = members.get(row.assigneeEmail)\n        if (!assigneeUid) {\n          skipped.push({ index, title: row.title, reason: 'unknown-assignee' })\n          continue\n        }\n      }\n      batch.set(tasks.doc(), {\n        title: row.title,\n        kind: row.kind,\n        priority: row.priority,\n        status: row.status,\n        dueAtMs: row.dueAtMs,\n        notes: row.notes ?? '',\n        completedAtMs: row.status === 'done' ? nowMs : null,\n        ...(row.status === 'done' ? { completedByUid: context.uid } : {}),\n        ...(assigneeUid ? { assigneeUid } : {}),\n        visibleTo: context.scopeTokens,\n        hostId: context.hostId,\n        createdByUid: context.uid,\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      created += 1\n    }\n    if (created) await batch.commit()\n\n    const result: TaskImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged: 0,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/tasks-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["CRM_COLLECTIONS","TASK_IMPORT_CHUNK_SIZE","TASK_IMPORT_MAX_BODY_BYTES","normalizeTaskImportRow","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","crmTasksImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","rows","forEach","raw","index","verdict","push","title","input","reason","entry","row","field","members","orgId","map","ownerEmail","assigneeEmail","firestore","app","tasks","collection","doc","batch","nowMs","Date","now","created","assigneeUid","get","set","kind","priority","dueAtMs","notes","completedAtMs","completedByUid","uid","visibleTo","scopeTokens","hostId","createdByUid","createdAt","serverTimestamp","updatedAt","commit","result","received","length","merged","sort","a","b","ownersUnresolved","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GAED,SAASA,eAAe,QAA+B,sBAAqB;AAC5E,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,cAAc,EAAEC,cAAc,EAAEC,oBAAoB,QAAQ,sBAAkB;AAEvF;;;;;CAKC,GACD,OAAO,MAAMC,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOV,eAAiCG,KAAK;QACjDQ,cAAchB;QACdiB,WAAWlB;IACb;IACA,IAAI,WAAWgB,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMZ,qBAAqBE;QAC3C,IAAIU,QAAQC,EAAE,KAAK,OAAO,OAAOV,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAsD,EAAE;QAC9DR,KAAKS,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU3B,uBAAuByB;YACvC,IAAIE,QAAQT,EAAE,KAAK,OAAO;gBACxBE,QAAQQ,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,KAAK,MAAMC,SAASL,QAAQM,GAAG,CAACZ,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACW,MAAME,KAAK,CAAC,GAAG,EAACb,uBAAAA,OAAO,CAACW,MAAME,KAAK,CAAC,YAApBb,uBAAwB,KAAK;YACvD;YACAC,WAAWM,IAAI,CAAC;gBAAEF;gBAAOO,KAAKN,QAAQM,GAAG;YAAC;QAC5C;QAEA,4EAA4E;QAC5E,MAAME,UAAU,MAAMhC,eACpBc,QAAQmB,KAAK,EACbd,WAAWe,GAAG,CAAC,CAACL,QAAW,CAAA;gBAAEM,YAAYN,MAAMC,GAAG,CAACM,aAAa;YAAC,CAAA;QAEnE,MAAMC,YAAYvC,cAAcwC,GAAG,GAAGD,SAAS;QAC/C,MAAME,QAAQF,UACXG,UAAU,CAAC,QACXC,GAAG,CAAC3B,QAAQmB,KAAK,EACjBO,UAAU,CAAC9C,gBAAgB6C,KAAK;QACnC,MAAMG,QAAQL,UAAUK,KAAK;QAC7B,MAAMC,QAAQC,KAAKC,GAAG;QACtB,IAAIC,UAAU;QAEd,KAAK,MAAM,EAAEvB,KAAK,EAAEO,GAAG,EAAE,IAAIX,WAAY;gBAe9BW;YAdT,IAAIiB;YACJ,IAAIjB,IAAIM,aAAa,EAAE;gBACrBW,cAAcf,QAAQgB,GAAG,CAAClB,IAAIM,aAAa;gBAC3C,IAAI,CAACW,aAAa;oBAChB9B,QAAQQ,IAAI,CAAC;wBAAEF;wBAAOG,OAAOI,IAAIJ,KAAK;wBAAEE,QAAQ;oBAAmB;oBACnE;gBACF;YACF;YACAc,MAAMO,GAAG,CAACV,MAAME,GAAG,IAAI;gBACrBf,OAAOI,IAAIJ,KAAK;gBAChBwB,MAAMpB,IAAIoB,IAAI;gBACdC,UAAUrB,IAAIqB,QAAQ;gBACtB3C,QAAQsB,IAAItB,MAAM;gBAClB4C,SAAStB,IAAIsB,OAAO;gBACpBC,KAAK,GAAEvB,aAAAA,IAAIuB,KAAK,YAATvB,aAAa;gBACpBwB,eAAexB,IAAItB,MAAM,KAAK,SAASmC,QAAQ;eAC3Cb,IAAItB,MAAM,KAAK,SAAS;gBAAE+C,gBAAgBzC,QAAQ0C,GAAG;YAAC,IAAI,CAAC,GAC3DT,cAAc;gBAAEA;YAAY,IAAI,CAAC;gBACrCU,WAAW3C,QAAQ4C,WAAW;gBAC9BC,QAAQ7C,QAAQ6C,MAAM;gBACtBC,cAAc9C,QAAQ0C,GAAG;gBACzBK,WAAW9D,WAAW+D,eAAe;gBACrCC,WAAWhE,WAAW+D,eAAe;;YAEvChB,WAAW;QACb;QACA,IAAIA,SAAS,MAAMJ,MAAMsB,MAAM;QAE/B,MAAMC,SAAgC;YACpCC,UAAUvD,KAAKS,IAAI,CAAC+C,MAAM;YAC1BrB;YACAsB,QAAQ;YACRnD,SAASA,QAAQoD,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAE/C,KAAK,GAAGgD,EAAEhD,KAAK;YACjDL;YACAsD,kBAAkB,EAAE;QACtB;QACA,OAAOnE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACwD;IAC9B,EAAE,OAAOvD,OAAO;QACd+D,QAAQ/D,KAAK,CAAC,2BAA2BA;QACzC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server-deal-stage.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `POST /api/crm/deal-stage` — the one writer of a deal's stage (AGL-2598).
+ *
+ * ## Why a route, when the rules would let the browser do it
+ *
+ * A deal's title, amount and owner are edited client-direct against the
+ * Firestore rules, and nothing about a stage change needs a server to be
+ * SAFE. What it needs a server for is to be HEARD: a move between stages, a
+ * win and a loss are the three moments an automation wants — "when a deal is
+ * won, email the owner", "when one reaches negotiation, file a task" — and a
+ * workflow only fires on an event the tenant runtime emits. A stage written
+ * by the browser would be a fact nothing could react to. So every surface
+ * that moves a deal calls here, and this handler updates the document and
+ * then emits `dealStageChanged`, `dealWon` or `dealLost` with a flat payload
+ * a workflow filter can read.
+ *
+ * ## Who may call it
+ *
+ * Three gates, in the order the cheapest fails first:
+ *
+ *  1. A verified Firebase session — the console's `authorizedFetch` puts the
+ *     id token on every call.
+ *  2. An admin or editor role ON THIS SITE, resolved by `hostRoleFor` from
+ *     the org member document, which is the same projection the rules read.
+ *  3. The `data.manage` permission in the org — the key the whole CRM is
+ *     gated on, resolved through the custom-role and per-member layers by
+ *     `memberHasOrgPermission`, because a member document alone cannot say
+ *     what a custom role took away.
+ *
+ * And then the deal has to be VISIBLE to the site: its `visibleTo` must
+ * intersect the scope tokens a contact captured on this site would carry.
+ * The Admin SDK evaluates no rules, so without this check an editor of one
+ * site in an agency could move another client's deals by id.
+ *
+ * ## The organization variant (AGL-2634)
+ *
+ * `{ orgId, dealId, … }` instead of a site: the org-level hub's board. The
+ * caller is authorized by the ORG — an org-wide member holding
+ * `data.manage`, the org hub's own gate — and no visibility check is made,
+ * because an org-wide member reads every row the org holds. The event
+ * still goes to the deal's own capturing site, which is where the
+ * automations that listen for it live; a deal no site captured has none to
+ * tell. And the act is logged in the org's feed, since there is no one
+ * site's feed it happened in.
+ *
+ * ## What it writes
+ *
+ * `stageId`, `status` (from the target stage's `kind`, never from the body),
+ * `stageChangedAtMs`, `closedAtMs` (set on a close, cleared on a reopen) and
+ * `lostReason` (kept on a loss, removed on anything else). A move to the
+ * stage the deal is already in writes nothing and emits nothing — an
+ * automation must not fire twice because a card was dropped where it was.
+ *
+ * ## A won deal makes its contact a customer (AGL-2641)
+ *
+ * A win is the same fact as a purchase — the business has decided this
+ * person bought — and an order already floors a contact's lifecycle stage
+ * at `customer` on capture. So the transition INTO `won` applies the same
+ * floor to the contact the deal names, in the same write path, behind no
+ * setting: `floorContactLifecycleStage` fills an empty stage or advances an
+ * earlier one inside the facet of the site the deal was made on, and never
+ * moves anybody back — a customer stays a customer, an evangelist an
+ * evangelist. When the stage did move, `contactStageChanged` is announced
+ * after `dealWon`, so an automation keyed on "became a customer" hears it,
+ * and the org's activity line says so. A failure to write the contact does
+ * not undo the win: the deal is already closed, and the response reports
+ * `customer: null` rather than a 500 for a stage change that did happen.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/** The most a lost reason may carry — a sentence or two, not a post-mortem. */
+export declare const LOST_REASON_MAX = 500;
+export declare const crmDealStageHandler: PluginApiHandler;