@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/hooks/use-crm-views.js

@@ -0,0 +1,84 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { CRM_COLLECTIONS, crmViewIsListed, normalizeCrmViewState } from "@aglyn/aglyn";
+import { useFirestore, useFirestoreCollection } from "@aglyn/tenant-feature-instance";
+import { collection, limit, orderBy, query, where } from "firebase/firestore";
+import { useMemo } from "react";
+import { crmScopeListable, crmVisibleToClause } from "./use-crm-scope.js";
+/**
+ * The menu's window.
+ *
+ * A LOOKUP, not a list: nothing pages this, a reader opens a menu rather
+ * than walking it, and a hundred named views for one section of one org is
+ * past what anybody scrolls. Bounded so the listen cannot grow with the
+ * org; a view past the window is still reachable by its address, which
+ * resolves through the same rows and so reads as "not listed" rather than
+ * as missing — see the controller.
+ */ export const CRM_VIEWS_LIMIT = 100;
+/**
+ * The saved views of one section, mine and shared (AGL-2617).
+ *
+ * ONE listener, filtered on the reader's own tokens like every CRM read,
+ * narrowed to the section and ordered by name — the `(visibleTo, section,
+ * name)` index. What the rules admit is wider than what the menu shows: a
+ * colleague's private view is readable under the contacts predicate and
+ * hidden here by `crmViewIsListed`, because the privacy of a working
+ * arrangement is a courtesy between colleagues rather than a disclosure
+ * boundary, and a rule per reader would need a query per reader.
+ *
+ * `orderBy('name')` also FILTERS: a view written without a name would be
+ * missing from its own menu. The controller refuses an empty name, which is
+ * the only writer.
+ */ export function useCrmViews(options) {
+    const { scope, visibleTo, section, uid } = options;
+    const firestore = useFirestore();
+    const { data, status } = useFirestoreCollection(()=>scope && crmScopeListable(visibleTo) ? query(collection(firestore, scope[0], scope[1], CRM_COLLECTIONS.views), ...crmVisibleToClause(visibleTo), where('section', '==', section), orderBy('name'), limit(CRM_VIEWS_LIMIT)) : null, [
+        firestore,
+        scope,
+        visibleTo,
+        section
+    ], {
+        idField: '$id'
+    });
+    const views = useMemo(()=>(data != null ? data : []).map((row)=>{
+            var _row_name, _row_ownerUid, _row_createdByUid, _row_hostId;
+            return _extends({
+                $id: String(row['$id']),
+                section,
+                name: String((_row_name = row['name']) != null ? _row_name : ''),
+                ownerUid: String((_row_ownerUid = row['ownerUid']) != null ? _row_ownerUid : ''),
+                createdByUid: String((_row_createdByUid = row['createdByUid']) != null ? _row_createdByUid : ''),
+                shared: row['shared'] === true,
+                hostId: String((_row_hostId = row['hostId']) != null ? _row_hostId : ''),
+                visibleTo: Array.isArray(row['visibleTo']) ? row['visibleTo'] : [],
+                createdAt: row['createdAt'],
+                updatedAt: row['updatedAt']
+            }, normalizeCrmViewState(row));
+        }).filter((view)=>view.name && crmViewIsListed(view, uid)), [
+        data,
+        section,
+        uid
+    ]);
+    return {
+        views,
+        ready: Boolean(scope) && status !== 'loading'
+    };
+}
+export default useCrmViews;
+
+//# sourceMappingURL=use-crm-views.js.map

package/src/lib/hooks/use-crm-views.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/hooks/use-crm-views.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  CRM_COLLECTIONS,\n  type CrmSavedView,\n  type CrmViewSection,\n  crmViewIsListed,\n  normalizeCrmViewState,\n} from '@aglyn/aglyn'\nimport { useFirestore, useFirestoreCollection } from '@aglyn/tenant-feature-instance'\nimport { collection, limit, orderBy, query, where } from 'firebase/firestore'\nimport { useMemo } from 'react'\nimport { crmScopeListable, crmVisibleToClause } from './use-crm-scope'\n\n/** One saved view as the menu lists it: the document, held to shape, with its id. */\nexport interface CrmSavedViewRow extends CrmSavedView {\n  $id: string\n}\n\n/**\n * The menu's window.\n *\n * A LOOKUP, not a list: nothing pages this, a reader opens a menu rather\n * than walking it, and a hundred named views for one section of one org is\n * past what anybody scrolls. Bounded so the listen cannot grow with the\n * org; a view past the window is still reachable by its address, which\n * resolves through the same rows and so reads as \"not listed\" rather than\n * as missing — see the controller.\n */\nexport const CRM_VIEWS_LIMIT = 100\n\n/**\n * The saved views of one section, mine and shared (AGL-2617).\n *\n * ONE listener, filtered on the reader's own tokens like every CRM read,\n * narrowed to the section and ordered by name — the `(visibleTo, section,\n * name)` index. What the rules admit is wider than what the menu shows: a\n * colleague's private view is readable under the contacts predicate and\n * hidden here by `crmViewIsListed`, because the privacy of a working\n * arrangement is a courtesy between colleagues rather than a disclosure\n * boundary, and a rule per reader would need a query per reader.\n *\n * `orderBy('name')` also FILTERS: a view written without a name would be\n * missing from its own menu. The controller refuses an empty name, which is\n * the only writer.\n */\nexport function useCrmViews(options: {\n  scope: readonly ['orgs', string] | null\n  /** The reader's tokens, or `null` at the organization level — no clause (AGL-2630). */\n  visibleTo: readonly string[] | null\n  section: CrmViewSection\n  uid: string | null | undefined\n}): { views: CrmSavedViewRow[]; ready: boolean } {\n  const { scope, visibleTo, section, uid } = options\n  const firestore = useFirestore()\n  const { data, status } = useFirestoreCollection<Record<string, unknown>>(\n    () =>\n      scope && crmScopeListable(visibleTo)\n        ? query(\n            collection(firestore, scope[0], scope[1], CRM_COLLECTIONS.views),\n            ...crmVisibleToClause(visibleTo),\n            where('section', '==', section),\n            orderBy('name'),\n            limit(CRM_VIEWS_LIMIT),\n          )\n        : null,\n    [firestore, scope, visibleTo, section],\n    { idField: '$id' },\n  )\n  const views = useMemo<CrmSavedViewRow[]>(\n    () =>\n      (data ?? [])\n        .map((row) => ({\n          $id: String(row['$id']),\n          section,\n          name: String(row['name'] ?? ''),\n          ownerUid: String(row['ownerUid'] ?? ''),\n          createdByUid: String(row['createdByUid'] ?? ''),\n          shared: row['shared'] === true,\n          hostId: String(row['hostId'] ?? ''),\n          visibleTo: Array.isArray(row['visibleTo'])\n            ? (row['visibleTo'] as string[])\n            : [],\n          createdAt: row['createdAt'],\n          updatedAt: row['updatedAt'],\n          ...normalizeCrmViewState(row),\n        }))\n        .filter((view) => view.name && crmViewIsListed(view, uid)),\n    [data, section, uid],\n  )\n  return { views, ready: Boolean(scope) && status !== 'loading' }\n}\n\nexport default useCrmViews\n"],"names":["CRM_COLLECTIONS","crmViewIsListed","normalizeCrmViewState","useFirestore","useFirestoreCollection","collection","limit","orderBy","query","where","useMemo","crmScopeListable","crmVisibleToClause","CRM_VIEWS_LIMIT","useCrmViews","options","scope","visibleTo","section","uid","firestore","data","status","views","idField","map","row","$id","String","name","ownerUid","createdByUid","shared","hostId","Array","isArray","createdAt","updatedAt","filter","view","ready","Boolean"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SACEA,eAAe,EAGfC,eAAe,EACfC,qBAAqB,QAChB,eAAc;AACrB,SAASC,YAAY,EAAEC,sBAAsB,QAAQ,iCAAgC;AACrF,SAASC,UAAU,EAAEC,KAAK,EAAEC,OAAO,EAAEC,KAAK,EAAEC,KAAK,QAAQ,qBAAoB;AAC7E,SAASC,OAAO,QAAQ,QAAO;AAC/B,SAASC,gBAAgB,EAAEC,kBAAkB,QAAQ,qBAAiB;AAOtE;;;;;;;;;CASC,GACD,OAAO,MAAMC,kBAAkB,IAAG;AAElC;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,YAAYC,OAM3B;IACC,MAAM,EAAEC,KAAK,EAAEC,SAAS,EAAEC,OAAO,EAAEC,GAAG,EAAE,GAAGJ;IAC3C,MAAMK,YAAYjB;IAClB,MAAM,EAAEkB,IAAI,EAAEC,MAAM,EAAE,GAAGlB,uBACvB,IACEY,SAASL,iBAAiBM,aACtBT,MACEH,WAAWe,WAAWJ,KAAK,CAAC,EAAE,EAAEA,KAAK,CAAC,EAAE,EAAEhB,gBAAgBuB,KAAK,MAC5DX,mBAAmBK,YACtBR,MAAM,WAAW,MAAMS,UACvBX,QAAQ,SACRD,MAAMO,oBAER,MACN;QAACO;QAAWJ;QAAOC;QAAWC;KAAQ,EACtC;QAAEM,SAAS;IAAM;IAEnB,MAAMD,QAAQb,QACZ,IACE,CAACW,eAAAA,OAAQ,EAAE,EACRI,GAAG,CAAC,CAACC;gBAGSA,WACIA,eACIA,mBAENA;mBAPF;gBACbC,KAAKC,OAAOF,GAAG,CAAC,MAAM;gBACtBR;gBACAW,MAAMD,QAAOF,YAAAA,GAAG,CAAC,OAAO,YAAXA,YAAe;gBAC5BI,UAAUF,QAAOF,gBAAAA,GAAG,CAAC,WAAW,YAAfA,gBAAmB;gBACpCK,cAAcH,QAAOF,oBAAAA,GAAG,CAAC,eAAe,YAAnBA,oBAAuB;gBAC5CM,QAAQN,GAAG,CAAC,SAAS,KAAK;gBAC1BO,QAAQL,QAAOF,cAAAA,GAAG,CAAC,SAAS,YAAbA,cAAiB;gBAChCT,WAAWiB,MAAMC,OAAO,CAACT,GAAG,CAAC,YAAY,IACpCA,GAAG,CAAC,YAAY,GACjB,EAAE;gBACNU,WAAWV,GAAG,CAAC,YAAY;gBAC3BW,WAAWX,GAAG,CAAC,YAAY;eACxBxB,sBAAsBwB;WAE1BY,MAAM,CAAC,CAACC,OAASA,KAAKV,IAAI,IAAI5B,gBAAgBsC,MAAMpB,OACzD;QAACE;QAAMH;QAASC;KAAI;IAEtB,OAAO;QAAEI;QAAOiB,OAAOC,QAAQzB,UAAUM,WAAW;IAAU;AAChE;AAEA,eAAeR,YAAW"}

package/src/lib/hooks/use-deal-stage-api.d.ts

@@ -0,0 +1,69 @@
+/** What `POST /api/crm/deal-stage` accepts, minus the `hostId` this hook adds. */
+export type DealStageRequest = {
+    dealId: string;
+    stageId: string;
+} | {
+    dealId: string;
+    status: 'won';
+} | {
+    dealId: string;
+    status: 'lost';
+    lostReason?: string;
+};
+/** What the route answers on success. */
+export interface DealStageResponse {
+    ok: true;
+    dealId: string;
+    stageId: string;
+    status: 'open' | 'won' | 'lost';
+    previousStageId: string;
+    /** The host event that was emitted, or `null` for a move to the same stage. */
+    event: 'dealStageChanged' | 'dealWon' | 'dealLost' | null;
+    /**
+     * What a win did to the deal's contact (AGL-2641): the lifecycle stage
+     * the person now holds and whether this call raised it to `customer`.
+     * `null` on anything but a win, and on a deal that names no contact.
+     */
+    customer: {
+        contactId: string;
+        lifecycleStage: string;
+        advanced: boolean;
+    } | null;
+}
+/**
+ * The ONE door a stage change goes through (AGL-2598).
+ *
+ * A deal's stage, its won and its lost are not written by the browser even
+ * though the rules would let them be: the console can create and edit a deal
+ * client-direct, but a move is the moment an automation wants to hear about
+ * — "notify the owner when a deal is won", "file a task when one goes to
+ * negotiation" — and a workflow can only hear an event the server emits.
+ * Every surface that moves a deal (the board's drag, a card's menu, the
+ * detail page's stepper and its Won and Lost buttons) calls this, so there
+ * is no stage change that fires no event.
+ *
+ * Errors are thrown with the route's own message, which is written for the
+ * person reading it, so a caller shows `error.message` and nothing else.
+ */
+/**
+ * What a call names: the deal, and — at the organization level (AGL-2630),
+ * where the surface has no site of its own — the site the deal was made on,
+ * which is the site the route emits the stage event for. Under a site the
+ * mounted site wins, as it always has.
+ */
+export interface DealStageRef {
+    $id: string;
+    hostId?: string;
+}
+/**
+ * Beneath the org hub's mount the body names the ORG (AGL-2634), and the
+ * route runs its org variant: authorized by the org rather than by a role
+ * on the deal's site, so a deal no site captured moves too — the site
+ * beside it, when the deal has one, is where the event goes.
+ */
+export declare function useDealStageApi(hostId: string | null): {
+    moveToStage: (deal: DealStageRef, stageId: string) => Promise<DealStageResponse>;
+    markWon: (deal: DealStageRef) => Promise<DealStageResponse>;
+    markLost: (deal: DealStageRef, lostReason?: string) => Promise<DealStageResponse>;
+};
+export type DealStageApi = ReturnType<typeof useDealStageApi>;

package/src/lib/hooks/use-deal-stage-api.js

@@ -0,0 +1,78 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { useCallback, useMemo } from "react";
+import { useCrmOrgMount } from "./use-crm-org-mount.js";
+/**
+ * Beneath the org hub's mount the body names the ORG (AGL-2634), and the
+ * route runs its org variant: authorized by the org rather than by a role
+ * on the deal's site, so a deal no site captured moves too — the site
+ * beside it, when the deal has one, is where the event goes.
+ */ export function useDealStageApi(hostId) {
+    var _ref;
+    var _useCrmOrgMount;
+    const { data: user } = useUser();
+    const orgId = (_ref = (_useCrmOrgMount = useCrmOrgMount()) == null ? void 0 : _useCrmOrgMount.orgId) != null ? _ref : null;
+    const call = useCallback(async (deal, body)=>{
+        var _ref;
+        const site = (_ref = hostId != null ? hostId : deal.hostId) != null ? _ref : null;
+        if (!site && !orgId) {
+            throw new Error('This deal names no site, so its stage cannot be moved.');
+        }
+        const response = await authorizedFetch(user, '/api/crm/deal-stage', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(_extends({
+                hostId: site
+            }, orgId ? {
+                orgId
+            } : {}, body))
+        });
+        const payload = await response.json().catch(()=>({}));
+        if (!response.ok || !('ok' in payload)) {
+            throw new Error(payload.error || 'The deal could not be moved. Try again.');
+        }
+        return payload;
+    }, [
+        user,
+        hostId,
+        orgId
+    ]);
+    return useMemo(()=>({
+            moveToStage: (deal, stageId)=>call(deal, {
+                    dealId: deal.$id,
+                    stageId
+                }),
+            markWon: (deal)=>call(deal, {
+                    dealId: deal.$id,
+                    status: 'won'
+                }),
+            markLost: (deal, lostReason)=>call(deal, {
+                    dealId: deal.$id,
+                    status: 'lost',
+                    lostReason
+                })
+        }), [
+        call
+    ]);
+}
+
+//# sourceMappingURL=use-deal-stage-api.js.map

package/src/lib/hooks/use-deal-stage-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/hooks/use-deal-stage-api.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport { useUser } from '@aglyn/tenant-feature-instance'\nimport { useCallback, useMemo } from 'react'\nimport { useCrmOrgMount } from './use-crm-org-mount'\n\n/** What `POST /api/crm/deal-stage` accepts, minus the `hostId` this hook adds. */\nexport type DealStageRequest =\n  | { dealId: string; stageId: string }\n  | { dealId: string; status: 'won' }\n  | { dealId: string; status: 'lost'; lostReason?: string }\n\n/** What the route answers on success. */\nexport interface DealStageResponse {\n  ok: true\n  dealId: string\n  stageId: string\n  status: 'open' | 'won' | 'lost'\n  previousStageId: string\n  /** The host event that was emitted, or `null` for a move to the same stage. */\n  event: 'dealStageChanged' | 'dealWon' | 'dealLost' | null\n  /**\n   * What a win did to the deal's contact (AGL-2641): the lifecycle stage\n   * the person now holds and whether this call raised it to `customer`.\n   * `null` on anything but a win, and on a deal that names no contact.\n   */\n  customer: { contactId: string; lifecycleStage: string; advanced: boolean } | null\n}\n\n/**\n * The ONE door a stage change goes through (AGL-2598).\n *\n * A deal's stage, its won and its lost are not written by the browser even\n * though the rules would let them be: the console can create and edit a deal\n * client-direct, but a move is the moment an automation wants to hear about\n * — \"notify the owner when a deal is won\", \"file a task when one goes to\n * negotiation\" — and a workflow can only hear an event the server emits.\n * Every surface that moves a deal (the board's drag, a card's menu, the\n * detail page's stepper and its Won and Lost buttons) calls this, so there\n * is no stage change that fires no event.\n *\n * Errors are thrown with the route's own message, which is written for the\n * person reading it, so a caller shows `error.message` and nothing else.\n */\n/**\n * What a call names: the deal, and — at the organization level (AGL-2630),\n * where the surface has no site of its own — the site the deal was made on,\n * which is the site the route emits the stage event for. Under a site the\n * mounted site wins, as it always has.\n */\nexport interface DealStageRef {\n  $id: string\n  hostId?: string\n}\n\n/**\n * Beneath the org hub's mount the body names the ORG (AGL-2634), and the\n * route runs its org variant: authorized by the org rather than by a role\n * on the deal's site, so a deal no site captured moves too — the site\n * beside it, when the deal has one, is where the event goes.\n */\nexport function useDealStageApi(hostId: string | null) {\n  const { data: user } = useUser()\n  const orgId = useCrmOrgMount()?.orgId ?? null\n\n  const call = useCallback(\n    async (\n      deal: DealStageRef,\n      body: DealStageRequest,\n    ): Promise<DealStageResponse> => {\n      const site = hostId ?? deal.hostId ?? null\n      if (!site && !orgId) {\n        throw new Error('This deal names no site, so its stage cannot be moved.')\n      }\n      const response = await authorizedFetch(user, '/api/crm/deal-stage', {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          hostId: site,\n          ...(orgId ? { orgId } : {}),\n          ...body,\n        }),\n      })\n      const payload = (await response.json().catch(() => ({}))) as\n        | DealStageResponse\n        | { error?: string }\n      if (!response.ok || !('ok' in payload)) {\n        throw new Error(\n          (payload as { error?: string }).error ||\n            'The deal could not be moved. Try again.',\n        )\n      }\n      return payload\n    },\n    [user, hostId, orgId],\n  )\n\n  return useMemo(\n    () => ({\n      moveToStage: (deal: DealStageRef, stageId: string) =>\n        call(deal, { dealId: deal.$id, stageId }),\n      markWon: (deal: DealStageRef) => call(deal, { dealId: deal.$id, status: 'won' }),\n      markLost: (deal: DealStageRef, lostReason?: string) =>\n        call(deal, { dealId: deal.$id, status: 'lost', lostReason }),\n    }),\n    [call],\n  )\n}\n\nexport type DealStageApi = ReturnType<typeof useDealStageApi>\n"],"names":["authorizedFetch","useUser","useCallback","useMemo","useCrmOrgMount","useDealStageApi","hostId","data","user","orgId","call","deal","body","site","Error","response","method","headers","JSON","stringify","payload","json","catch","ok","error","moveToStage","stageId","dealId","$id","markWon","status","markLost","lostReason"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,eAAe,QAAQ,2CAA0C;AAC1E,SAASC,OAAO,QAAQ,iCAAgC;AACxD,SAASC,WAAW,EAAEC,OAAO,QAAQ,QAAO;AAC5C,SAASC,cAAc,QAAQ,yBAAqB;AAmDpD;;;;;CAKC,GACD,OAAO,SAASC,gBAAgBC,MAAqB;;QAErCF;IADd,MAAM,EAAEG,MAAMC,IAAI,EAAE,GAAGP;IACvB,MAAMQ,iBAAQL,kBAAAA,qCAAAA,gBAAkBK,KAAK,mBAAI;IAEzC,MAAMC,OAAOR,YACX,OACES,MACAC;YAEaN;QAAb,MAAMO,QAAOP,OAAAA,iBAAAA,SAAUK,KAAKL,MAAM,YAArBA,OAAyB;QACtC,IAAI,CAACO,QAAQ,CAACJ,OAAO;YACnB,MAAM,IAAIK,MAAM;QAClB;QACA,MAAMC,WAAW,MAAMf,gBAAgBQ,MAAM,uBAAuB;YAClEQ,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CL,MAAMM,KAAKC,SAAS,CAAC;gBACnBb,QAAQO;eACJJ,QAAQ;gBAAEA;YAAM,IAAI,CAAC,GACtBG;QAEP;QACA,MAAMQ,UAAW,MAAML,SAASM,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;QAGrD,IAAI,CAACP,SAASQ,EAAE,IAAI,CAAE,CAAA,QAAQH,OAAM,GAAI;YACtC,MAAM,IAAIN,MACR,AAACM,QAA+BI,KAAK,IACnC;QAEN;QACA,OAAOJ;IACT,GACA;QAACZ;QAAMF;QAAQG;KAAM;IAGvB,OAAON,QACL,IAAO,CAAA;YACLsB,aAAa,CAACd,MAAoBe,UAChChB,KAAKC,MAAM;oBAAEgB,QAAQhB,KAAKiB,GAAG;oBAAEF;gBAAQ;YACzCG,SAAS,CAAClB,OAAuBD,KAAKC,MAAM;oBAAEgB,QAAQhB,KAAKiB,GAAG;oBAAEE,QAAQ;gBAAM;YAC9EC,UAAU,CAACpB,MAAoBqB,aAC7BtB,KAAKC,MAAM;oBAAEgB,QAAQhB,KAAKiB,GAAG;oBAAEE,QAAQ;oBAAQE;gBAAW;QAC9D,CAAA,GACA;QAACtB;KAAK;AAEV"}

package/src/lib/hooks/use-deals.d.ts

@@ -0,0 +1,47 @@
+import { type CrmDealStatus } from '@aglyn/aglyn';
+import type { DealDoc } from '../model/deal-board-model';
+/**
+ * The most open cards one pipeline draws. A board past this is a board
+ * nobody reads column by column; the table is paged and reaches the rest.
+ */
+export declare const BOARD_OPEN_LIMIT = 500;
+/** Closed deals shown per closed column when it is expanded. */
+export declare const BOARD_CLOSED_LIMIT = 50;
+/** Deals listed on a contact's or a company's page. */
+export declare const LINKED_DEALS_LIMIT = 25;
+/**
+ * The deals of one status in one pipeline, newest activity first (AGL-2598).
+ *
+ * Every query here carries the viewer's scope tokens and an `orderBy`, and
+ * each shape sits on an index the foundation declared:
+ * `(visibleTo, pipelineId, status, updatedAt DESC)`. Passing `null` for the
+ * pipeline or an EMPTY token list issues nothing, which is how a column
+ * stays quiet until the pipeline has loaded and a collapsed Won column
+ * costs no read. A `null` token list is the ORGANIZATION level (AGL-2630):
+ * the clause is dropped and the query rides the `(pipelineId, status,
+ * updatedAt DESC)` twin of that index.
+ */
+export declare function useDealsByStatus(orgId: string | null, readTokens: readonly string[] | null, pipelineId: string | null, status: CrmDealStatus, max: number): import("@aglyn/tenant-feature-instance").UseFirestoreCollectionResult<DealDoc>;
+/**
+ * Every deal the viewer may see, paged, optionally narrowed to one status
+ * and to one pipeline — the table's read. Four shapes, four indexes:
+ * `(visibleTo, updatedAt DESC)`, `(visibleTo, status, updatedAt DESC)`,
+ * `(visibleTo, pipelineId, updatedAt DESC)` and
+ * `(visibleTo, pipelineId, status, updatedAt DESC)`. At the organization
+ * level (AGL-2630) the scope clause is dropped and the same shapes ride
+ * their twins without `visibleTo` — `(status, updatedAt DESC)`,
+ * `(pipelineId, updatedAt DESC)`, `(pipelineId, status, updatedAt DESC)`;
+ * the first shape orders on one field and needs none.
+ */
+export declare function usePagedDeals(orgId: string | null, readTokens: readonly string[] | null, status: CrmDealStatus | 'all', pipelineId?: string | null): import("@aglyn/tenant-feature-instance").UsePagedCollectionResult<DealDoc>;
+/**
+ * The deals that name one contact or one company, for the card on that
+ * record's page. `(visibleTo, contactId|companyId, updatedAt DESC)`.
+ */
+export declare function useLinkedDeals(orgId: string | null, readTokens: readonly string[] | null, link: {
+    contactId: string;
+} | {
+    companyId: string;
+}): import("@aglyn/tenant-feature-instance").UseFirestoreCollectionResult<DealDoc>;
+/** One deal, live. `undefined` while loading, and after a delete. */
+export declare function useDeal(orgId: string | null, dealId: string): import("@aglyn/tenant-feature-instance").UseFirestoreDocResult<DealDoc>;

package/src/lib/hooks/use-deals.js

@@ -0,0 +1,105 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { CRM_COLLECTIONS } from "@aglyn/aglyn";
+import { useFirestore, useFirestoreCollection, useFirestoreDoc, usePagedCollection } from "@aglyn/tenant-feature-instance";
+import { collection, doc, limit, orderBy, query, where } from "firebase/firestore";
+import { crmScopeListable, crmVisibleToClause } from "./use-crm-scope.js";
+/**
+ * The most open cards one pipeline draws. A board past this is a board
+ * nobody reads column by column; the table is paged and reaches the rest.
+ */ export const BOARD_OPEN_LIMIT = 500;
+/** Closed deals shown per closed column when it is expanded. */ export const BOARD_CLOSED_LIMIT = 50;
+/** Deals listed on a contact's or a company's page. */ export const LINKED_DEALS_LIMIT = 25;
+/**
+ * The deals of one status in one pipeline, newest activity first (AGL-2598).
+ *
+ * Every query here carries the viewer's scope tokens and an `orderBy`, and
+ * each shape sits on an index the foundation declared:
+ * `(visibleTo, pipelineId, status, updatedAt DESC)`. Passing `null` for the
+ * pipeline or an EMPTY token list issues nothing, which is how a column
+ * stays quiet until the pipeline has loaded and a collapsed Won column
+ * costs no read. A `null` token list is the ORGANIZATION level (AGL-2630):
+ * the clause is dropped and the query rides the `(pipelineId, status,
+ * updatedAt DESC)` twin of that index.
+ */ export function useDealsByStatus(orgId, readTokens, pipelineId, status, max) {
+    const firestore = useFirestore();
+    return useFirestoreCollection(()=>orgId && pipelineId && crmScopeListable(readTokens) ? query(collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals), ...crmVisibleToClause(readTokens), where('pipelineId', '==', pipelineId), where('status', '==', status), orderBy('updatedAt', 'desc'), limit(max)) : null, [
+        firestore,
+        orgId,
+        readTokens,
+        pipelineId,
+        status,
+        max
+    ], {
+        idField: '$id'
+    });
+}
+/**
+ * Every deal the viewer may see, paged, optionally narrowed to one status
+ * and to one pipeline — the table's read. Four shapes, four indexes:
+ * `(visibleTo, updatedAt DESC)`, `(visibleTo, status, updatedAt DESC)`,
+ * `(visibleTo, pipelineId, updatedAt DESC)` and
+ * `(visibleTo, pipelineId, status, updatedAt DESC)`. At the organization
+ * level (AGL-2630) the scope clause is dropped and the same shapes ride
+ * their twins without `visibleTo` — `(status, updatedAt DESC)`,
+ * `(pipelineId, updatedAt DESC)`, `(pipelineId, status, updatedAt DESC)`;
+ * the first shape orders on one field and needs none.
+ */ export function usePagedDeals(orgId, readTokens, status, pipelineId = null) {
+    const firestore = useFirestore();
+    return usePagedCollection((pageLimit)=>orgId && crmScopeListable(readTokens) ? query(collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals), ...crmVisibleToClause(readTokens), ...pipelineId ? [
+            where('pipelineId', '==', pipelineId)
+        ] : [], ...status === 'all' ? [] : [
+            where('status', '==', status)
+        ], orderBy('updatedAt', 'desc'), limit(pageLimit)) : null, [
+        firestore,
+        orgId,
+        readTokens,
+        status,
+        pipelineId
+    ], {
+        idField: '$id'
+    });
+}
+/**
+ * The deals that name one contact or one company, for the card on that
+ * record's page. `(visibleTo, contactId|companyId, updatedAt DESC)`.
+ */ export function useLinkedDeals(orgId, readTokens, link) {
+    const firestore = useFirestore();
+    const field = 'contactId' in link ? 'contactId' : 'companyId';
+    const id = 'contactId' in link ? link.contactId : link.companyId;
+    return useFirestoreCollection(()=>orgId && id && crmScopeListable(readTokens) ? query(collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals), ...crmVisibleToClause(readTokens), where(field, '==', id), orderBy('updatedAt', 'desc'), limit(LINKED_DEALS_LIMIT)) : null, [
+        firestore,
+        orgId,
+        readTokens,
+        field,
+        id
+    ], {
+        idField: '$id'
+    });
+}
+/** One deal, live. `undefined` while loading, and after a delete. */ export function useDeal(orgId, dealId) {
+    const firestore = useFirestore();
+    return useFirestoreDoc(()=>orgId && dealId ? doc(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals, dealId) : null, [
+        firestore,
+        orgId,
+        dealId
+    ], {
+        idField: '$id'
+    });
+}
+
+//# sourceMappingURL=use-deals.js.map

package/src/lib/hooks/use-deals.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/hooks/use-deals.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { CRM_COLLECTIONS, type CrmDealStatus } from '@aglyn/aglyn'\nimport {\n  useFirestore,\n  useFirestoreCollection,\n  useFirestoreDoc,\n  usePagedCollection,\n} from '@aglyn/tenant-feature-instance'\nimport {\n  collection,\n  doc,\n  limit,\n  orderBy,\n  query,\n  where,\n} from 'firebase/firestore'\nimport type { DealDoc } from '../model/deal-board-model'\nimport { crmScopeListable, crmVisibleToClause } from './use-crm-scope'\n\n/**\n * The most open cards one pipeline draws. A board past this is a board\n * nobody reads column by column; the table is paged and reaches the rest.\n */\nexport const BOARD_OPEN_LIMIT = 500\n\n/** Closed deals shown per closed column when it is expanded. */\nexport const BOARD_CLOSED_LIMIT = 50\n\n/** Deals listed on a contact's or a company's page. */\nexport const LINKED_DEALS_LIMIT = 25\n\n/**\n * The deals of one status in one pipeline, newest activity first (AGL-2598).\n *\n * Every query here carries the viewer's scope tokens and an `orderBy`, and\n * each shape sits on an index the foundation declared:\n * `(visibleTo, pipelineId, status, updatedAt DESC)`. Passing `null` for the\n * pipeline or an EMPTY token list issues nothing, which is how a column\n * stays quiet until the pipeline has loaded and a collapsed Won column\n * costs no read. A `null` token list is the ORGANIZATION level (AGL-2630):\n * the clause is dropped and the query rides the `(pipelineId, status,\n * updatedAt DESC)` twin of that index.\n */\nexport function useDealsByStatus(\n  orgId: string | null,\n  readTokens: readonly string[] | null,\n  pipelineId: string | null,\n  status: CrmDealStatus,\n  max: number,\n) {\n  const firestore = useFirestore()\n  return useFirestoreCollection<DealDoc>(\n    () =>\n      orgId && pipelineId && crmScopeListable(readTokens)\n        ? query(\n            collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals),\n            ...crmVisibleToClause(readTokens),\n            where('pipelineId', '==', pipelineId),\n            where('status', '==', status),\n            orderBy('updatedAt', 'desc'),\n            limit(max),\n          )\n        : null,\n    [firestore, orgId, readTokens, pipelineId, status, max],\n    { idField: '$id' },\n  )\n}\n\n/**\n * Every deal the viewer may see, paged, optionally narrowed to one status\n * and to one pipeline — the table's read. Four shapes, four indexes:\n * `(visibleTo, updatedAt DESC)`, `(visibleTo, status, updatedAt DESC)`,\n * `(visibleTo, pipelineId, updatedAt DESC)` and\n * `(visibleTo, pipelineId, status, updatedAt DESC)`. At the organization\n * level (AGL-2630) the scope clause is dropped and the same shapes ride\n * their twins without `visibleTo` — `(status, updatedAt DESC)`,\n * `(pipelineId, updatedAt DESC)`, `(pipelineId, status, updatedAt DESC)`;\n * the first shape orders on one field and needs none.\n */\nexport function usePagedDeals(\n  orgId: string | null,\n  readTokens: readonly string[] | null,\n  status: CrmDealStatus | 'all',\n  pipelineId: string | null = null,\n) {\n  const firestore = useFirestore()\n  return usePagedCollection<DealDoc>(\n    (pageLimit) =>\n      orgId && crmScopeListable(readTokens)\n        ? query(\n            collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals),\n            ...crmVisibleToClause(readTokens),\n            ...(pipelineId ? [where('pipelineId', '==', pipelineId)] : []),\n            ...(status === 'all' ? [] : [where('status', '==', status)]),\n            orderBy('updatedAt', 'desc'),\n            limit(pageLimit),\n          )\n        : null,\n    [firestore, orgId, readTokens, status, pipelineId],\n    { idField: '$id' },\n  )\n}\n\n/**\n * The deals that name one contact or one company, for the card on that\n * record's page. `(visibleTo, contactId|companyId, updatedAt DESC)`.\n */\nexport function useLinkedDeals(\n  orgId: string | null,\n  readTokens: readonly string[] | null,\n  link: { contactId: string } | { companyId: string },\n) {\n  const firestore = useFirestore()\n  const field = 'contactId' in link ? 'contactId' : 'companyId'\n  const id = 'contactId' in link ? link.contactId : link.companyId\n  return useFirestoreCollection<DealDoc>(\n    () =>\n      orgId && id && crmScopeListable(readTokens)\n        ? query(\n            collection(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals),\n            ...crmVisibleToClause(readTokens),\n            where(field, '==', id),\n            orderBy('updatedAt', 'desc'),\n            limit(LINKED_DEALS_LIMIT),\n          )\n        : null,\n    [firestore, orgId, readTokens, field, id],\n    { idField: '$id' },\n  )\n}\n\n/** One deal, live. `undefined` while loading, and after a delete. */\nexport function useDeal(orgId: string | null, dealId: string) {\n  const firestore = useFirestore()\n  return useFirestoreDoc<DealDoc>(\n    () =>\n      orgId && dealId\n        ? doc(firestore, 'orgs', orgId, CRM_COLLECTIONS.deals, dealId)\n        : null,\n    [firestore, orgId, dealId],\n    { idField: '$id' },\n  )\n}\n"],"names":["CRM_COLLECTIONS","useFirestore","useFirestoreCollection","useFirestoreDoc","usePagedCollection","collection","doc","limit","orderBy","query","where","crmScopeListable","crmVisibleToClause","BOARD_OPEN_LIMIT","BOARD_CLOSED_LIMIT","LINKED_DEALS_LIMIT","useDealsByStatus","orgId","readTokens","pipelineId","status","max","firestore","deals","idField","usePagedDeals","pageLimit","useLinkedDeals","link","field","id","contactId","companyId","useDeal","dealId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,SAASA,eAAe,QAA4B,eAAc;AAClE,SACEC,YAAY,EACZC,sBAAsB,EACtBC,eAAe,EACfC,kBAAkB,QACb,iCAAgC;AACvC,SACEC,UAAU,EACVC,GAAG,EACHC,KAAK,EACLC,OAAO,EACPC,KAAK,EACLC,KAAK,QACA,qBAAoB;AAE3B,SAASC,gBAAgB,EAAEC,kBAAkB,QAAQ,qBAAiB;AAEtE;;;CAGC,GACD,OAAO,MAAMC,mBAAmB,IAAG;AAEnC,8DAA8D,GAC9D,OAAO,MAAMC,qBAAqB,GAAE;AAEpC,qDAAqD,GACrD,OAAO,MAAMC,qBAAqB,GAAE;AAEpC;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,iBACdC,KAAoB,EACpBC,UAAoC,EACpCC,UAAyB,EACzBC,MAAqB,EACrBC,GAAW;IAEX,MAAMC,YAAYrB;IAClB,OAAOC,uBACL,IACEe,SAASE,cAAcR,iBAAiBO,cACpCT,MACEJ,WAAWiB,WAAW,QAAQL,OAAOjB,gBAAgBuB,KAAK,MACvDX,mBAAmBM,aACtBR,MAAM,cAAc,MAAMS,aAC1BT,MAAM,UAAU,MAAMU,SACtBZ,QAAQ,aAAa,SACrBD,MAAMc,QAER,MACN;QAACC;QAAWL;QAAOC;QAAYC;QAAYC;QAAQC;KAAI,EACvD;QAAEG,SAAS;IAAM;AAErB;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASC,cACdR,KAAoB,EACpBC,UAAoC,EACpCE,MAA6B,EAC7BD,aAA4B,IAAI;IAEhC,MAAMG,YAAYrB;IAClB,OAAOG,mBACL,CAACsB,YACCT,SAASN,iBAAiBO,cACtBT,MACEJ,WAAWiB,WAAW,QAAQL,OAAOjB,gBAAgBuB,KAAK,MACvDX,mBAAmBM,gBAClBC,aAAa;YAACT,MAAM,cAAc,MAAMS;SAAY,GAAG,EAAE,KACzDC,WAAW,QAAQ,EAAE,GAAG;YAACV,MAAM,UAAU,MAAMU;SAAQ,EAC3DZ,QAAQ,aAAa,SACrBD,MAAMmB,cAER,MACN;QAACJ;QAAWL;QAAOC;QAAYE;QAAQD;KAAW,EAClD;QAAEK,SAAS;IAAM;AAErB;AAEA;;;CAGC,GACD,OAAO,SAASG,eACdV,KAAoB,EACpBC,UAAoC,EACpCU,IAAmD;IAEnD,MAAMN,YAAYrB;IAClB,MAAM4B,QAAQ,eAAeD,OAAO,cAAc;IAClD,MAAME,KAAK,eAAeF,OAAOA,KAAKG,SAAS,GAAGH,KAAKI,SAAS;IAChE,OAAO9B,uBACL,IACEe,SAASa,MAAMnB,iBAAiBO,cAC5BT,MACEJ,WAAWiB,WAAW,QAAQL,OAAOjB,gBAAgBuB,KAAK,MACvDX,mBAAmBM,aACtBR,MAAMmB,OAAO,MAAMC,KACnBtB,QAAQ,aAAa,SACrBD,MAAMQ,uBAER,MACN;QAACO;QAAWL;QAAOC;QAAYW;QAAOC;KAAG,EACzC;QAAEN,SAAS;IAAM;AAErB;AAEA,mEAAmE,GACnE,OAAO,SAASS,QAAQhB,KAAoB,EAAEiB,MAAc;IAC1D,MAAMZ,YAAYrB;IAClB,OAAOE,gBACL,IACEc,SAASiB,SACL5B,IAAIgB,WAAW,QAAQL,OAAOjB,gBAAgBuB,KAAK,EAAEW,UACrD,MACN;QAACZ;QAAWL;QAAOiB;KAAO,EAC1B;QAAEV,SAAS;IAAM;AAErB"}

package/src/lib/hooks/use-org-leads.d.ts

@@ -0,0 +1,53 @@
+import { type DocumentData } from 'firebase/firestore';
+/** One site's lead, as the organization-level list carries it. */
+export interface OrgLeadRow extends DocumentData {
+    /**
+     * The grid's row id: `{hostId}/{leadId}`. A lead's own id is a PERSON
+     * KEY — the same person on two sites has the same id on both — so the
+     * document id alone cannot key a list that spans sites.
+     */
+    $id: string;
+    /** `hosts/{hostId}/leads/{leadId}` — the document id. */
+    leadId: string;
+    /** The site the lead lives under; what every write and link names. */
+    hostId: string;
+}
+export interface OrgLeadsResult {
+    /** Every site's window, merged and ordered newest-seen first, cut to the window. */
+    data: OrgLeadRow[];
+    /** `loading` until every site has answered once; `error` when any refused. */
+    status: 'loading' | 'success' | 'error';
+    /** Some site had more than its window — there are leads this list is not showing. */
+    truncated: boolean;
+}
+/**
+ * THE ORGANIZATION'S LEADS, read a site at a time (AGL-2630).
+ *
+ * A lead lives under its site — `hosts/{hostId}/leads`, host-scoped by
+ * PATH — and there is no org-level collection to listen to, no `orgId` on
+ * the document to group by, and no rule admitting a collection-group read.
+ * So the org hub opens one listener per site the org has, each the exact
+ * query the site's own Leads section runs, and merges the answers. An
+ * org-wide member is a member of every site, which is what admits each
+ * listener under the rules the site section already relies on; an org has
+ * a handful of sites and at most thirty in a consent group, so the fan-out
+ * is bounded by the org, not by the data.
+ *
+ * Each site's window is cut at `windowSize + 1`, the way the site section
+ * cuts its own, and the merged list is cut again at `windowSize`: the list
+ * is "the most recently seen across the org", and a site with a thousand
+ * leads must not crowd out a site with ten. `truncated` says some site had
+ * more, so the caption beneath the table can say the window is not the
+ * whole collection.
+ *
+ * The listeners are torn down together when the site list changes — a site
+ * added or removed re-opens the set — and nothing opens for an empty list,
+ * which is also how the hook stays quiet under a site, where the section
+ * hands it no sites at all.
+ */
+export declare function useOrgLeads(options: {
+    /** The org's sites, by document id; empty opens nothing. */
+    hostIds: readonly string[];
+    windowSize: number;
+}): OrgLeadsResult;
+export default useOrgLeads;

package/src/lib/hooks/use-org-leads.js

@@ -0,0 +1,114 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { useFirestore } from "@aglyn/tenant-feature-instance";
+import { collection, limit, onSnapshot, orderBy, query } from "firebase/firestore";
+import { useEffect, useMemo, useState } from "react";
+/**
+ * THE ORGANIZATION'S LEADS, read a site at a time (AGL-2630).
+ *
+ * A lead lives under its site — `hosts/{hostId}/leads`, host-scoped by
+ * PATH — and there is no org-level collection to listen to, no `orgId` on
+ * the document to group by, and no rule admitting a collection-group read.
+ * So the org hub opens one listener per site the org has, each the exact
+ * query the site's own Leads section runs, and merges the answers. An
+ * org-wide member is a member of every site, which is what admits each
+ * listener under the rules the site section already relies on; an org has
+ * a handful of sites and at most thirty in a consent group, so the fan-out
+ * is bounded by the org, not by the data.
+ *
+ * Each site's window is cut at `windowSize + 1`, the way the site section
+ * cuts its own, and the merged list is cut again at `windowSize`: the list
+ * is "the most recently seen across the org", and a site with a thousand
+ * leads must not crowd out a site with ten. `truncated` says some site had
+ * more, so the caption beneath the table can say the window is not the
+ * whole collection.
+ *
+ * The listeners are torn down together when the site list changes — a site
+ * added or removed re-opens the set — and nothing opens for an empty list,
+ * which is also how the hook stays quiet under a site, where the section
+ * hands it no sites at all.
+ */ export function useOrgLeads(options) {
+    const { hostIds, windowSize } = options;
+    const firestore = useFirestore();
+    const key = hostIds.join('\n');
+    const [bySite, setBySite] = useState({});
+    useEffect(()=>{
+        setBySite({});
+        const sites = key ? key.split('\n') : [];
+        if (!sites.length) return undefined;
+        const stops = sites.map((hostId)=>onSnapshot(query(collection(firestore, 'hosts', hostId, 'leads'), orderBy('lastSeenAtMs', 'desc'), limit(windowSize + 1)), (snapshot)=>{
+                const rows = snapshot.docs.map((entry)=>_extends({}, entry.data(), {
+                        $id: `${hostId}/${entry.id}`,
+                        leadId: entry.id,
+                        hostId
+                    }));
+                setBySite((current)=>_extends({}, current, {
+                        [hostId]: {
+                            rows: rows.slice(0, windowSize),
+                            truncated: rows.length > windowSize
+                        }
+                    }));
+            }, (error)=>{
+                console.error(error);
+                setBySite((current)=>_extends({}, current, {
+                        [hostId]: 'error'
+                    }));
+            }));
+        return ()=>{
+            for (const stop of stops)stop();
+        };
+    }, [
+        firestore,
+        key,
+        windowSize
+    ]);
+    return useMemo(()=>{
+        const sites = key ? key.split('\n') : [];
+        const answers = sites.map((hostId)=>bySite[hostId]);
+        if (answers.some((answer)=>answer === 'error')) {
+            return {
+                data: [],
+                status: 'error',
+                truncated: false
+            };
+        }
+        if (!sites.length || answers.some((answer)=>!answer)) {
+            return {
+                data: [],
+                status: 'loading',
+                truncated: false
+            };
+        }
+        const merged = answers.flatMap((answer)=>answer === 'error' || !answer ? [] : answer.rows).sort((a, b)=>{
+            var _b_lastSeenAtMs, _a_lastSeenAtMs;
+            return Number((_b_lastSeenAtMs = b['lastSeenAtMs']) != null ? _b_lastSeenAtMs : 0) - Number((_a_lastSeenAtMs = a['lastSeenAtMs']) != null ? _a_lastSeenAtMs : 0);
+        });
+        return {
+            data: merged.slice(0, windowSize),
+            status: 'success',
+            truncated: merged.length > windowSize || answers.some((answer)=>answer !== 'error' && (answer == null ? void 0 : answer.truncated))
+        };
+    }, [
+        bySite,
+        key,
+        windowSize
+    ]);
+}
+export default useOrgLeads;
+
+//# sourceMappingURL=use-org-leads.js.map

package/src/lib/hooks/use-org-leads.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/hooks/use-org-leads.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { useFirestore } from '@aglyn/tenant-feature-instance'\nimport {\n  collection,\n  limit,\n  onSnapshot,\n  orderBy,\n  query,\n  type DocumentData,\n} from 'firebase/firestore'\nimport { useEffect, useMemo, useState } from 'react'\n\n/** One site's lead, as the organization-level list carries it. */\nexport interface OrgLeadRow extends DocumentData {\n  /**\n   * The grid's row id: `{hostId}/{leadId}`. A lead's own id is a PERSON\n   * KEY — the same person on two sites has the same id on both — so the\n   * document id alone cannot key a list that spans sites.\n   */\n  $id: string\n  /** `hosts/{hostId}/leads/{leadId}` — the document id. */\n  leadId: string\n  /** The site the lead lives under; what every write and link names. */\n  hostId: string\n}\n\nexport interface OrgLeadsResult {\n  /** Every site's window, merged and ordered newest-seen first, cut to the window. */\n  data: OrgLeadRow[]\n  /** `loading` until every site has answered once; `error` when any refused. */\n  status: 'loading' | 'success' | 'error'\n  /** Some site had more than its window — there are leads this list is not showing. */\n  truncated: boolean\n}\n\n/**\n * THE ORGANIZATION'S LEADS, read a site at a time (AGL-2630).\n *\n * A lead lives under its site — `hosts/{hostId}/leads`, host-scoped by\n * PATH — and there is no org-level collection to listen to, no `orgId` on\n * the document to group by, and no rule admitting a collection-group read.\n * So the org hub opens one listener per site the org has, each the exact\n * query the site's own Leads section runs, and merges the answers. An\n * org-wide member is a member of every site, which is what admits each\n * listener under the rules the site section already relies on; an org has\n * a handful of sites and at most thirty in a consent group, so the fan-out\n * is bounded by the org, not by the data.\n *\n * Each site's window is cut at `windowSize + 1`, the way the site section\n * cuts its own, and the merged list is cut again at `windowSize`: the list\n * is \"the most recently seen across the org\", and a site with a thousand\n * leads must not crowd out a site with ten. `truncated` says some site had\n * more, so the caption beneath the table can say the window is not the\n * whole collection.\n *\n * The listeners are torn down together when the site list changes — a site\n * added or removed re-opens the set — and nothing opens for an empty list,\n * which is also how the hook stays quiet under a site, where the section\n * hands it no sites at all.\n */\nexport function useOrgLeads(options: {\n  /** The org's sites, by document id; empty opens nothing. */\n  hostIds: readonly string[]\n  windowSize: number\n}): OrgLeadsResult {\n  const { hostIds, windowSize } = options\n  const firestore = useFirestore()\n  const key = hostIds.join('\\n')\n  const [bySite, setBySite] = useState<\n    Record<string, { rows: OrgLeadRow[]; truncated: boolean } | 'error'>\n  >({})\n\n  useEffect(() => {\n    setBySite({})\n    const sites = key ? key.split('\\n') : []\n    if (!sites.length) return undefined\n    const stops = sites.map((hostId) =>\n      onSnapshot(\n        query(\n          collection(firestore, 'hosts', hostId, 'leads'),\n          orderBy('lastSeenAtMs', 'desc'),\n          limit(windowSize + 1),\n        ),\n        (snapshot) => {\n          const rows = snapshot.docs.map((entry) => ({\n            ...(entry.data() as DocumentData),\n            $id: `${hostId}/${entry.id}`,\n            leadId: entry.id,\n            hostId,\n          }))\n          setBySite((current) => ({\n            ...current,\n            [hostId]: {\n              rows: rows.slice(0, windowSize),\n              truncated: rows.length > windowSize,\n            },\n          }))\n        },\n        (error) => {\n          console.error(error)\n          setBySite((current) => ({ ...current, [hostId]: 'error' }))\n        },\n      ),\n    )\n    return () => {\n      for (const stop of stops) stop()\n    }\n  }, [firestore, key, windowSize])\n\n  return useMemo(() => {\n    const sites = key ? key.split('\\n') : []\n    const answers = sites.map((hostId) => bySite[hostId])\n    if (answers.some((answer) => answer === 'error')) {\n      return { data: [], status: 'error' as const, truncated: false }\n    }\n    if (!sites.length || answers.some((answer) => !answer)) {\n      return { data: [], status: 'loading' as const, truncated: false }\n    }\n    const merged = answers\n      .flatMap((answer) => (answer === 'error' || !answer ? [] : answer.rows))\n      .sort(\n        (a, b) =>\n          Number(b['lastSeenAtMs'] ?? 0) - Number(a['lastSeenAtMs'] ?? 0),\n      )\n    return {\n      data: merged.slice(0, windowSize),\n      status: 'success' as const,\n      truncated:\n        merged.length > windowSize ||\n        answers.some((answer) => answer !== 'error' && answer?.truncated),\n    }\n  }, [bySite, key, windowSize])\n}\n\nexport default useOrgLeads\n"],"names":["useFirestore","collection","limit","onSnapshot","orderBy","query","useEffect","useMemo","useState","useOrgLeads","options","hostIds","windowSize","firestore","key","join","bySite","setBySite","sites","split","length","undefined","stops","map","hostId","snapshot","rows","docs","entry","data","$id","id","leadId","current","slice","truncated","error","console","stop","answers","some","answer","status","merged","flatMap","sort","a","b","Number"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,YAAY,QAAQ,iCAAgC;AAC7D,SACEC,UAAU,EACVC,KAAK,EACLC,UAAU,EACVC,OAAO,EACPC,KAAK,QAEA,qBAAoB;AAC3B,SAASC,SAAS,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,QAAO;AAyBpD;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,OAAO,SAASC,YAAYC,OAI3B;IACC,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAE,GAAGF;IAChC,MAAMG,YAAYb;IAClB,MAAMc,MAAMH,QAAQI,IAAI,CAAC;IACzB,MAAM,CAACC,QAAQC,UAAU,GAAGT,SAE1B,CAAC;IAEHF,UAAU;QACRW,UAAU,CAAC;QACX,MAAMC,QAAQJ,MAAMA,IAAIK,KAAK,CAAC,QAAQ,EAAE;QACxC,IAAI,CAACD,MAAME,MAAM,EAAE,OAAOC;QAC1B,MAAMC,QAAQJ,MAAMK,GAAG,CAAC,CAACC,SACvBrB,WACEE,MACEJ,WAAWY,WAAW,SAASW,QAAQ,UACvCpB,QAAQ,gBAAgB,SACxBF,MAAMU,aAAa,KAErB,CAACa;gBACC,MAAMC,OAAOD,SAASE,IAAI,CAACJ,GAAG,CAAC,CAACK,QAAW,aACrCA,MAAMC,IAAI;wBACdC,KAAK,GAAGN,OAAO,CAAC,EAAEI,MAAMG,EAAE,EAAE;wBAC5BC,QAAQJ,MAAMG,EAAE;wBAChBP;;gBAEFP,UAAU,CAACgB,UAAa,aACnBA;wBACH,CAACT,OAAO,EAAE;4BACRE,MAAMA,KAAKQ,KAAK,CAAC,GAAGtB;4BACpBuB,WAAWT,KAAKN,MAAM,GAAGR;wBAC3B;;YAEJ,GACA,CAACwB;gBACCC,QAAQD,KAAK,CAACA;gBACdnB,UAAU,CAACgB,UAAa,aAAKA;wBAAS,CAACT,OAAO,EAAE;;YAClD;QAGJ,OAAO;YACL,KAAK,MAAMc,QAAQhB,MAAOgB;QAC5B;IACF,GAAG;QAACzB;QAAWC;QAAKF;KAAW;IAE/B,OAAOL,QAAQ;QACb,MAAMW,QAAQJ,MAAMA,IAAIK,KAAK,CAAC,QAAQ,EAAE;QACxC,MAAMoB,UAAUrB,MAAMK,GAAG,CAAC,CAACC,SAAWR,MAAM,CAACQ,OAAO;QACpD,IAAIe,QAAQC,IAAI,CAAC,CAACC,SAAWA,WAAW,UAAU;YAChD,OAAO;gBAAEZ,MAAM,EAAE;gBAAEa,QAAQ;gBAAkBP,WAAW;YAAM;QAChE;QACA,IAAI,CAACjB,MAAME,MAAM,IAAImB,QAAQC,IAAI,CAAC,CAACC,SAAW,CAACA,SAAS;YACtD,OAAO;gBAAEZ,MAAM,EAAE;gBAAEa,QAAQ;gBAAoBP,WAAW;YAAM;QAClE;QACA,MAAMQ,SAASJ,QACZK,OAAO,CAAC,CAACH,SAAYA,WAAW,WAAW,CAACA,SAAS,EAAE,GAAGA,OAAOf,IAAI,EACrEmB,IAAI,CACH,CAACC,GAAGC;gBACKA,iBAAiCD;mBAAxCE,QAAOD,kBAAAA,CAAC,CAAC,eAAe,YAAjBA,kBAAqB,KAAKC,QAAOF,kBAAAA,CAAC,CAAC,eAAe,YAAjBA,kBAAqB;;QAEnE,OAAO;YACLjB,MAAMc,OAAOT,KAAK,CAAC,GAAGtB;YACtB8B,QAAQ;YACRP,WACEQ,OAAOvB,MAAM,GAAGR,cAChB2B,QAAQC,IAAI,CAAC,CAACC,SAAWA,WAAW,YAAWA,0BAAAA,OAAQN,SAAS;QACpE;IACF,GAAG;QAACnB;QAAQF;QAAKF;KAAW;AAC9B;AAEA,eAAeH,YAAW"}