@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/model/company-delete.d.ts

@@ -0,0 +1,42 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * DELETING A COMPANY IS ONE REQUEST (AGL-2597; a route since AGL-2804, shared
+ * by the record page and the bulk bar since AGL-2621).
+ *
+ * Firestore does not cascade, so a delete unlinks every contact at the
+ * company before the company goes — and the unlink clears each holder's
+ * facet that named it, which is the server's to write. `crm/company-delete`
+ * runs the pass, bounded and honest past the bound; this module is the
+ * console's side of it.
+ */
+import type { CrmApiResult, CrmApiRoute } from '../components/use-crm-api';
+import type { CompanyDeleteOutcome } from './company-delete-route';
+export { COMPANY_DETACH_LIMIT, type CompanyDeleteOutcome } from './company-delete-route';
+/** The CRM API caller a surface already holds — `useCrmApi`'s. */
+export type CrmApiCall = (route: CrmApiRoute, payload: Record<string, unknown>) => Promise<CrmApiResult>;
+/**
+ * Delete one company through the route: the contacts unlinked, then the
+ * company — or, past the bound, a pass's worth unlinked and the company left
+ * standing. A refusal throws with the route's own sentence.
+ */
+export declare function deleteCompanyThroughRoute(call: CrmApiCall, companyId: string): Promise<CompanyDeleteOutcome>;
+/**
+ * What a failed delete says: the route's own sentence, which names the
+ * reason — a member scoped to particular sites is told why they cannot.
+ */
+export declare function companyDeleteFailureMessage(error: unknown): string;

package/src/lib/model/company-delete.js

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * DELETING A COMPANY IS ONE REQUEST (AGL-2597; a route since AGL-2804, shared
+ * by the record page and the bulk bar since AGL-2621).
+ *
+ * Firestore does not cascade, so a delete unlinks every contact at the
+ * company before the company goes — and the unlink clears each holder's
+ * facet that named it, which is the server's to write. `crm/company-delete`
+ * runs the pass, bounded and honest past the bound; this module is the
+ * console's side of it.
+ */ export { COMPANY_DETACH_LIMIT } from "./company-delete-route.js";
+/**
+ * Delete one company through the route: the contacts unlinked, then the
+ * company — or, past the bound, a pass's worth unlinked and the company left
+ * standing. A refusal throws with the route's own sentence.
+ */ export async function deleteCompanyThroughRoute(call, companyId) {
+    var _payload_detached;
+    const { response, payload } = await call('company-delete', {
+        companyId
+    });
+    if (!response.ok) {
+        const error = payload['error'];
+        throw new Error(typeof error === 'string' && error ? error : `The company could not be deleted (${response.status}).`);
+    }
+    return {
+        deleted: payload['deleted'] === true,
+        detached: Number((_payload_detached = payload['detached']) != null ? _payload_detached : 0),
+        moreRemain: payload['moreRemain'] === true
+    };
+}
+/**
+ * What a failed delete says: the route's own sentence, which names the
+ * reason — a member scoped to particular sites is told why they cannot.
+ */ export function companyDeleteFailureMessage(error) {
+    return error instanceof Error && error.message ? error.message : 'An error has occurred';
+}
+
+//# sourceMappingURL=company-delete.js.map

package/src/lib/model/company-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/company-delete.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * DELETING A COMPANY IS ONE REQUEST (AGL-2597; a route since AGL-2804, shared\n * by the record page and the bulk bar since AGL-2621).\n *\n * Firestore does not cascade, so a delete unlinks every contact at the\n * company before the company goes — and the unlink clears each holder's\n * facet that named it, which is the server's to write. `crm/company-delete`\n * runs the pass, bounded and honest past the bound; this module is the\n * console's side of it.\n */\n\nimport type { CrmApiResult, CrmApiRoute } from '../components/use-crm-api'\nimport type { CompanyDeleteOutcome } from './company-delete-route'\n\nexport { COMPANY_DETACH_LIMIT, type CompanyDeleteOutcome } from './company-delete-route'\n\n/** The CRM API caller a surface already holds — `useCrmApi`'s. */\nexport type CrmApiCall = (\n  route: CrmApiRoute,\n  payload: Record<string, unknown>,\n) => Promise<CrmApiResult>\n\n/**\n * Delete one company through the route: the contacts unlinked, then the\n * company — or, past the bound, a pass's worth unlinked and the company left\n * standing. A refusal throws with the route's own sentence.\n */\nexport async function deleteCompanyThroughRoute(\n  call: CrmApiCall,\n  companyId: string,\n): Promise<CompanyDeleteOutcome> {\n  const { response, payload } = await call('company-delete', { companyId })\n  if (!response.ok) {\n    const error = payload['error']\n    throw new Error(\n      typeof error === 'string' && error\n        ? error\n        : `The company could not be deleted (${response.status}).`,\n    )\n  }\n  return {\n    deleted: payload['deleted'] === true,\n    detached: Number(payload['detached'] ?? 0),\n    moreRemain: payload['moreRemain'] === true,\n  }\n}\n\n/**\n * What a failed delete says: the route's own sentence, which names the\n * reason — a member scoped to particular sites is told why they cannot.\n */\nexport function companyDeleteFailureMessage(error: unknown): string {\n  return error instanceof Error && error.message ? error.message : 'An error has occurred'\n}\n"],"names":["COMPANY_DETACH_LIMIT","deleteCompanyThroughRoute","call","companyId","payload","response","ok","error","Error","status","deleted","detached","Number","moreRemain","companyDeleteFailureMessage","message"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;CASC,GAKD,SAASA,oBAAoB,QAAmC,4BAAwB;AAQxF;;;;CAIC,GACD,OAAO,eAAeC,0BACpBC,IAAgB,EAChBC,SAAiB;QAaEC;IAXnB,MAAM,EAAEC,QAAQ,EAAED,OAAO,EAAE,GAAG,MAAMF,KAAK,kBAAkB;QAAEC;IAAU;IACvE,IAAI,CAACE,SAASC,EAAE,EAAE;QAChB,MAAMC,QAAQH,OAAO,CAAC,QAAQ;QAC9B,MAAM,IAAII,MACR,OAAOD,UAAU,YAAYA,QACzBA,QACA,CAAC,kCAAkC,EAAEF,SAASI,MAAM,CAAC,EAAE,CAAC;IAEhE;IACA,OAAO;QACLC,SAASN,OAAO,CAAC,UAAU,KAAK;QAChCO,UAAUC,QAAOR,oBAAAA,OAAO,CAAC,WAAW,YAAnBA,oBAAuB;QACxCS,YAAYT,OAAO,CAAC,aAAa,KAAK;IACxC;AACF;AAEA;;;CAGC,GACD,OAAO,SAASU,4BAA4BP,KAAc;IACxD,OAAOA,iBAAiBC,SAASD,MAAMQ,OAAO,GAAGR,MAAMQ,OAAO,GAAG;AACnE"}

package/src/lib/model/contact-duplicates.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * LIKELY DUPLICATES (AGL-2625): the rule, with no Firestore attached.
+ *
+ * Two records are likely one person when they share a name AND a phone
+ * number, or a name AND a company. A name alone is two people called Sam
+ * Lee; a phone alone is a household; either beside the same name is a
+ * person who filled in two forms from two addresses. The card runs ONE
+ * bounded query — same normalized name, among the contacts this viewer may
+ * list, on the index the list's own search uses — and applies this rule to
+ * the page, so no index has to be added for it.
+ *
+ * Read through the VIEWING group's facet, the way the record page reads
+ * everything: the phone and company another holder keeps on the same row
+ * are theirs, and matching on them would tell this holder what another
+ * business knows. The top-level search echoes stand in only where this
+ * holder's facet has nothing, since those are what the global search
+ * already shows this reader.
+ */
+/** Why a candidate reads as the same person. */
+export type DuplicateReason = 'phone' | 'company';
+/** How many same-name rows the card reads before applying the rule. */
+export declare const CONTACT_DUPLICATES_LIMIT = 25;
+/**
+ * The name two records are compared on: this holder's own name for the
+ * person, else the canonical one — normalized the way the search key is,
+ * so "Jane  Doe" and "jane doe" are one name.
+ */
+export declare function duplicateNameKey(doc: Record<string, unknown>, groupId: string): string;
+/**
+ * Every reason `candidate` reads as the same person as `current` — empty
+ * when it does not. A candidate with a different name, or the record
+ * itself, never matches.
+ */
+export declare function likelyDuplicateReasons(current: {
+    id: string;
+    doc: Record<string, unknown>;
+}, candidate: {
+    id: string;
+    doc: Record<string, unknown>;
+}, groupId: string): DuplicateReason[];
+/** How a reason reads on the card. */
+export declare const DUPLICATE_REASON_LABELS: Record<DuplicateReason, string>;

package/src/lib/model/contact-duplicates.js

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { nameSearchKey, readContactFacet, readContactCompanyLink } from "@aglyn/aglyn";
+/** How many same-name rows the card reads before applying the rule. */ export const CONTACT_DUPLICATES_LIMIT = 25;
+function text(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+/** This holder's phone for the person, or the echo the last writer left. */ function phoneOf(doc, groupId) {
+    return text(readContactFacet(doc, groupId).phone) || text(doc['phone']);
+}
+/** The company keys a record answers to: its linked ids and its typed name. */ function companyKeysOf(doc, groupId) {
+    const facet = readContactFacet(doc, groupId);
+    const link = readContactCompanyLink(doc, groupId);
+    const name = nameSearchKey(facet.companyName || text(doc['companyName']));
+    return [
+        ...link.companyId ? [
+            `id:${link.companyId}`
+        ] : [],
+        ...link.companyIds.map((id)=>`id:${id}`),
+        ...name ? [
+            `name:${name}`
+        ] : []
+    ];
+}
+/**
+ * The name two records are compared on: this holder's own name for the
+ * person, else the canonical one — normalized the way the search key is,
+ * so "Jane  Doe" and "jane doe" are one name.
+ */ export function duplicateNameKey(doc, groupId) {
+    return nameSearchKey(text(readContactFacet(doc, groupId).name) || text(doc['name']));
+}
+/**
+ * Every reason `candidate` reads as the same person as `current` — empty
+ * when it does not. A candidate with a different name, or the record
+ * itself, never matches.
+ */ export function likelyDuplicateReasons(current, candidate, groupId) {
+    if (current.id === candidate.id) return [];
+    const name = duplicateNameKey(current.doc, groupId);
+    if (!name || name !== duplicateNameKey(candidate.doc, groupId)) return [];
+    const reasons = [];
+    const phone = phoneOf(current.doc, groupId);
+    if (phone && phone === phoneOf(candidate.doc, groupId)) reasons.push('phone');
+    const keys = new Set(companyKeysOf(current.doc, groupId));
+    if (companyKeysOf(candidate.doc, groupId).some((key)=>keys.has(key))) {
+        reasons.push('company');
+    }
+    return reasons;
+}
+/** How a reason reads on the card. */ export const DUPLICATE_REASON_LABELS = {
+    phone: 'Same name and phone',
+    company: 'Same name and company'
+};
+
+//# sourceMappingURL=contact-duplicates.js.map

package/src/lib/model/contact-duplicates.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/contact-duplicates.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { nameSearchKey, readContactFacet, readContactCompanyLink } from '@aglyn/aglyn'\n\n/**\n * LIKELY DUPLICATES (AGL-2625): the rule, with no Firestore attached.\n *\n * Two records are likely one person when they share a name AND a phone\n * number, or a name AND a company. A name alone is two people called Sam\n * Lee; a phone alone is a household; either beside the same name is a\n * person who filled in two forms from two addresses. The card runs ONE\n * bounded query — same normalized name, among the contacts this viewer may\n * list, on the index the list's own search uses — and applies this rule to\n * the page, so no index has to be added for it.\n *\n * Read through the VIEWING group's facet, the way the record page reads\n * everything: the phone and company another holder keeps on the same row\n * are theirs, and matching on them would tell this holder what another\n * business knows. The top-level search echoes stand in only where this\n * holder's facet has nothing, since those are what the global search\n * already shows this reader.\n */\n\n/** Why a candidate reads as the same person. */\nexport type DuplicateReason = 'phone' | 'company'\n\n/** How many same-name rows the card reads before applying the rule. */\nexport const CONTACT_DUPLICATES_LIMIT = 25\n\nfunction text(value: unknown): string {\n  return typeof value === 'string' ? value.trim() : ''\n}\n\n/** This holder's phone for the person, or the echo the last writer left. */\nfunction phoneOf(doc: Record<string, unknown>, groupId: string): string {\n  return text(readContactFacet(doc, groupId).phone) || text(doc['phone'])\n}\n\n/** The company keys a record answers to: its linked ids and its typed name. */\nfunction companyKeysOf(doc: Record<string, unknown>, groupId: string): string[] {\n  const facet = readContactFacet(doc, groupId)\n  const link = readContactCompanyLink(doc, groupId)\n  const name = nameSearchKey(facet.companyName || text(doc['companyName']))\n  return [\n    ...(link.companyId ? [`id:${link.companyId}`] : []),\n    ...link.companyIds.map((id) => `id:${id}`),\n    ...(name ? [`name:${name}`] : []),\n  ]\n}\n\n/**\n * The name two records are compared on: this holder's own name for the\n * person, else the canonical one — normalized the way the search key is,\n * so \"Jane  Doe\" and \"jane doe\" are one name.\n */\nexport function duplicateNameKey(\n  doc: Record<string, unknown>,\n  groupId: string,\n): string {\n  return nameSearchKey(text(readContactFacet(doc, groupId).name) || text(doc['name']))\n}\n\n/**\n * Every reason `candidate` reads as the same person as `current` — empty\n * when it does not. A candidate with a different name, or the record\n * itself, never matches.\n */\nexport function likelyDuplicateReasons(\n  current: { id: string; doc: Record<string, unknown> },\n  candidate: { id: string; doc: Record<string, unknown> },\n  groupId: string,\n): DuplicateReason[] {\n  if (current.id === candidate.id) return []\n  const name = duplicateNameKey(current.doc, groupId)\n  if (!name || name !== duplicateNameKey(candidate.doc, groupId)) return []\n  const reasons: DuplicateReason[] = []\n  const phone = phoneOf(current.doc, groupId)\n  if (phone && phone === phoneOf(candidate.doc, groupId)) reasons.push('phone')\n  const keys = new Set(companyKeysOf(current.doc, groupId))\n  if (companyKeysOf(candidate.doc, groupId).some((key) => keys.has(key))) {\n    reasons.push('company')\n  }\n  return reasons\n}\n\n/** How a reason reads on the card. */\nexport const DUPLICATE_REASON_LABELS: Record<DuplicateReason, string> = {\n  phone: 'Same name and phone',\n  company: 'Same name and company',\n}\n"],"names":["nameSearchKey","readContactFacet","readContactCompanyLink","CONTACT_DUPLICATES_LIMIT","text","value","trim","phoneOf","doc","groupId","phone","companyKeysOf","facet","link","name","companyName","companyId","companyIds","map","id","duplicateNameKey","likelyDuplicateReasons","current","candidate","reasons","push","keys","Set","some","key","has","DUPLICATE_REASON_LABELS","company"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,aAAa,EAAEC,gBAAgB,EAAEC,sBAAsB,QAAQ,eAAc;AAwBtF,qEAAqE,GACrE,OAAO,MAAMC,2BAA2B,GAAE;AAE1C,SAASC,KAAKC,KAAc;IAC1B,OAAO,OAAOA,UAAU,WAAWA,MAAMC,IAAI,KAAK;AACpD;AAEA,0EAA0E,GAC1E,SAASC,QAAQC,GAA4B,EAAEC,OAAe;IAC5D,OAAOL,KAAKH,iBAAiBO,KAAKC,SAASC,KAAK,KAAKN,KAAKI,GAAG,CAAC,QAAQ;AACxE;AAEA,6EAA6E,GAC7E,SAASG,cAAcH,GAA4B,EAAEC,OAAe;IAClE,MAAMG,QAAQX,iBAAiBO,KAAKC;IACpC,MAAMI,OAAOX,uBAAuBM,KAAKC;IACzC,MAAMK,OAAOd,cAAcY,MAAMG,WAAW,IAAIX,KAAKI,GAAG,CAAC,cAAc;IACvE,OAAO;WACDK,KAAKG,SAAS,GAAG;YAAC,CAAC,GAAG,EAAEH,KAAKG,SAAS,EAAE;SAAC,GAAG,EAAE;WAC/CH,KAAKI,UAAU,CAACC,GAAG,CAAC,CAACC,KAAO,CAAC,GAAG,EAAEA,IAAI;WACrCL,OAAO;YAAC,CAAC,KAAK,EAAEA,MAAM;SAAC,GAAG,EAAE;KACjC;AACH;AAEA;;;;CAIC,GACD,OAAO,SAASM,iBACdZ,GAA4B,EAC5BC,OAAe;IAEf,OAAOT,cAAcI,KAAKH,iBAAiBO,KAAKC,SAASK,IAAI,KAAKV,KAAKI,GAAG,CAAC,OAAO;AACpF;AAEA;;;;CAIC,GACD,OAAO,SAASa,uBACdC,OAAqD,EACrDC,SAAuD,EACvDd,OAAe;IAEf,IAAIa,QAAQH,EAAE,KAAKI,UAAUJ,EAAE,EAAE,OAAO,EAAE;IAC1C,MAAML,OAAOM,iBAAiBE,QAAQd,GAAG,EAAEC;IAC3C,IAAI,CAACK,QAAQA,SAASM,iBAAiBG,UAAUf,GAAG,EAAEC,UAAU,OAAO,EAAE;IACzE,MAAMe,UAA6B,EAAE;IACrC,MAAMd,QAAQH,QAAQe,QAAQd,GAAG,EAAEC;IACnC,IAAIC,SAASA,UAAUH,QAAQgB,UAAUf,GAAG,EAAEC,UAAUe,QAAQC,IAAI,CAAC;IACrE,MAAMC,OAAO,IAAIC,IAAIhB,cAAcW,QAAQd,GAAG,EAAEC;IAChD,IAAIE,cAAcY,UAAUf,GAAG,EAAEC,SAASmB,IAAI,CAAC,CAACC,MAAQH,KAAKI,GAAG,CAACD,OAAO;QACtEL,QAAQC,IAAI,CAAC;IACf;IACA,OAAOD;AACT;AAEA,oCAAoC,GACpC,OAAO,MAAMO,0BAA2D;IACtErB,OAAO;IACPsB,SAAS;AACX,EAAC"}

package/src/lib/model/contact-record.d.ts

@@ -0,0 +1,113 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as Aglyn from '@aglyn/aglyn';
+import type { AglynPostalAddress, ConsentGroup, ContactInteraction, ContactLifecycleStage, ContactSource } from '@aglyn/aglyn';
+/**
+ * One contact, as the VIEWING GROUP may see it (AGL-2596).
+ *
+ * A contact document is shared by every site in the org, and almost nothing
+ * on it is legitimately shared: the notes, tags, timeline, profile and
+ * commercial figures are the holder's own records and live in that holder's
+ * facet. This is the row after the facet read — flat, so the list, the
+ * record page and the export can render fields by name without any of them
+ * reaching into `facets.{groupId}` for itself. One projection rather than a
+ * facet read at every field is what keeps a surface from ever showing
+ * another holder's records: there is no field on this shape that came from
+ * the top of the document except the two that ARE shared, the address and
+ * the canonical name.
+ */
+export interface ContactRecord {
+    $id: string;
+    /**
+     * The facet this row was flattened through — the viewing group under a
+     * site, the person's primary holder at the org level (AGL-2630). A write
+     * that edits the row goes back to the same facet, so a surface that has
+     * only the flat record can still address the holder's own fields.
+     */
+    groupId: string;
+    /**
+     * A site of that holder's group — the viewing site under a site, and at
+     * the organization level the site the primary holder was resolved from —
+     * which is where a stage move for this row is made and announced. `''` for
+     * a row no site holds.
+     */
+    holderHostId: string;
+    /** Every site that has captured this person, sorted — the org-level "Known by". */
+    capturedByHostIds: string[];
+    /** The shared identity and the dedupe key. */
+    email: string;
+    /** The other addresses a merge folded into this record (AGL-2625). */
+    alternateEmails: string[];
+    /** What THIS holder sees — their own override, or the canonical name. */
+    name: string;
+    /** The canonical name: the identity of last resort, shared by every holder. */
+    canonicalName: string;
+    /** This holder's own name for the person, when they have set one. */
+    nameOverride: string;
+    sources: Partial<Record<ContactSource, true>>;
+    /** This holder's timeline, narrowed to the sites the group covers. */
+    interactions: ContactInteraction[];
+    tags: string[];
+    notes: string;
+    campaignIds: string[];
+    ltvCents: number;
+    ordersCount: number;
+    phone: string;
+    jobTitle: string;
+    companyName: string;
+    companyId: string;
+    /**
+     * What linking this person to a company has to know — this holder's link,
+     * the shared mirror and the other holders' ids — so the properties card
+     * and the bulk bar can plan a link from the row without the document. Not
+     * a display field: the mirror is an index every reader of the document
+     * already holds, and nothing renders it.
+     */
+    companyLink: Aglyn.ContactCompanyLinkState;
+    address: AglynPostalAddress | null;
+    /** This holder's custom field values, keyed by definition key (AGL-2601). */
+    custom?: Record<string, Aglyn.ContactCustomValue>;
+    /** This holder's attached org-library files, by media id (AGL-2662). */
+    mediaIds?: string[];
+    ownerUid: string;
+    /** Empty when the holder has not placed the person in the funnel. */
+    lifecycleStage: ContactLifecycleStage | '';
+    /**
+     * When the person last opened or clicked one of this holder's campaigns
+     * (AGL-2616), or `null` when they never have since the stamp shipped.
+     */
+    lastEmailEngagementAtMs: number | null;
+    /**
+     * When the earliest open task against this person is due (AGL-2661), or
+     * `null` when nothing is scheduled. SHARED, not the holder's: a task is
+     * filed against the contact document, and every holder reading the row
+     * sees the same next step.
+     */
+    nextTaskAtMs: number | null;
+    createdAt?: unknown;
+    updatedAt?: unknown;
+}
+export { contactPrimaryGroup, NO_HOLDER_GROUP } from '@aglyn/aglyn';
+/** A document off the wire, flattened through one group's facet. */
+export declare function contactRecordFromDoc(row: Record<string, any>, group: ConsentGroup): ContactRecord;
+/**
+ * Tags as typed — comma-separated — into the shape the facet stores:
+ * lower-cased, trimmed, deduplicated and capped, so a tag typed on the
+ * record page and one typed in the create drawer are the same tag to the
+ * segment filter that matches on them.
+ */
+export declare function parseContactTags(input: string): string[];

package/src/lib/model/contact-record.js

@@ -0,0 +1,70 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+/*
+ * `NO_HOLDER_GROUP` and `contactPrimaryGroup` moved to `@aglyn/aglyn`
+ * under AGL-2662 so the server's whole-collection export can flatten a
+ * contact the way the organization-level list does — the console app may
+ * not import this plugin. Re-exported here, so every caller is unchanged.
+ */ export { contactPrimaryGroup, NO_HOLDER_GROUP } from "@aglyn/aglyn";
+/** A document off the wire, flattened through one group's facet. */ export function contactRecordFromDoc(row, group) {
+    var _row_$id, _facet_name, _facet_tags, _facet_notes, _facet_ltvCents, _facet_ordersCount, _facet_phone, _facet_jobTitle, _facet_companyName, _facet_companyId, _facet_address, _facet_custom, _facet_mediaIds, _facet_ownerUid;
+    const facet = Aglyn.readContactFacet(row, group.groupId);
+    return {
+        $id: String((_row_$id = row['$id']) != null ? _row_$id : ''),
+        groupId: group.groupId,
+        holderHostId: group.hostId,
+        capturedByHostIds: Aglyn.contactCaptureHostIds(row),
+        email: typeof row['email'] === 'string' ? row['email'] : '',
+        alternateEmails: Array.isArray(row[Aglyn.CONTACT_ALTERNATE_EMAILS_FIELD]) ? row[Aglyn.CONTACT_ALTERNATE_EMAILS_FIELD].filter((email)=>typeof email === 'string') : [],
+        name: Aglyn.contactDisplayName(row, group.groupId),
+        canonicalName: typeof row['name'] === 'string' ? row['name'] : '',
+        nameOverride: (_facet_name = facet.name) != null ? _facet_name : '',
+        sources: facet.sources,
+        interactions: Aglyn.interactionsForGroup(facet.interactions, group.hostIds),
+        tags: (_facet_tags = facet.tags) != null ? _facet_tags : [],
+        notes: (_facet_notes = facet.notes) != null ? _facet_notes : '',
+        campaignIds: Aglyn.readContactCampaignIds(row, group.groupId),
+        ltvCents: (_facet_ltvCents = facet.ltvCents) != null ? _facet_ltvCents : 0,
+        ordersCount: (_facet_ordersCount = facet.ordersCount) != null ? _facet_ordersCount : 0,
+        phone: (_facet_phone = facet.phone) != null ? _facet_phone : '',
+        jobTitle: (_facet_jobTitle = facet.jobTitle) != null ? _facet_jobTitle : '',
+        companyName: (_facet_companyName = facet.companyName) != null ? _facet_companyName : '',
+        companyId: (_facet_companyId = facet.companyId) != null ? _facet_companyId : '',
+        companyLink: Aglyn.readContactCompanyLink(row, group.groupId),
+        address: (_facet_address = facet.address) != null ? _facet_address : null,
+        custom: (_facet_custom = facet.custom) != null ? _facet_custom : {},
+        mediaIds: (_facet_mediaIds = facet.mediaIds) != null ? _facet_mediaIds : [],
+        ownerUid: (_facet_ownerUid = facet.ownerUid) != null ? _facet_ownerUid : '',
+        lifecycleStage: Aglyn.isContactLifecycleStage(facet.lifecycleStage) ? facet.lifecycleStage : '',
+        lastEmailEngagementAtMs: typeof facet.lastEmailEngagementAtMs === 'number' && Number.isFinite(facet.lastEmailEngagementAtMs) && facet.lastEmailEngagementAtMs > 0 ? facet.lastEmailEngagementAtMs : null,
+        nextTaskAtMs: Aglyn.readNextTaskAtMs(row),
+        createdAt: row['createdAt'],
+        updatedAt: row['updatedAt']
+    };
+}
+/**
+ * Tags as typed — comma-separated — into the shape the facet stores:
+ * lower-cased, trimmed, deduplicated and capped, so a tag typed on the
+ * record page and one typed in the create drawer are the same tag to the
+ * segment filter that matches on them.
+ */ export function parseContactTags(input) {
+    return [
+        ...new Set(input.split(',').map((tag)=>tag.trim().toLowerCase().slice(0, 40)).filter(Boolean).slice(0, 20))
+    ];
+}
+
+//# sourceMappingURL=contact-record.js.map

package/src/lib/model/contact-record.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/contact-record.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport type {\n  AglynPostalAddress,\n  ConsentGroup,\n  ContactInteraction,\n  ContactLifecycleStage,\n  ContactSource,\n} from '@aglyn/aglyn'\n\n/**\n * One contact, as the VIEWING GROUP may see it (AGL-2596).\n *\n * A contact document is shared by every site in the org, and almost nothing\n * on it is legitimately shared: the notes, tags, timeline, profile and\n * commercial figures are the holder's own records and live in that holder's\n * facet. This is the row after the facet read — flat, so the list, the\n * record page and the export can render fields by name without any of them\n * reaching into `facets.{groupId}` for itself. One projection rather than a\n * facet read at every field is what keeps a surface from ever showing\n * another holder's records: there is no field on this shape that came from\n * the top of the document except the two that ARE shared, the address and\n * the canonical name.\n */\nexport interface ContactRecord {\n  $id: string\n  /**\n   * The facet this row was flattened through — the viewing group under a\n   * site, the person's primary holder at the org level (AGL-2630). A write\n   * that edits the row goes back to the same facet, so a surface that has\n   * only the flat record can still address the holder's own fields.\n   */\n  groupId: string\n  /**\n   * A site of that holder's group — the viewing site under a site, and at\n   * the organization level the site the primary holder was resolved from —\n   * which is where a stage move for this row is made and announced. `''` for\n   * a row no site holds.\n   */\n  holderHostId: string\n  /** Every site that has captured this person, sorted — the org-level \"Known by\". */\n  capturedByHostIds: string[]\n  /** The shared identity and the dedupe key. */\n  email: string\n  /** The other addresses a merge folded into this record (AGL-2625). */\n  alternateEmails: string[]\n  /** What THIS holder sees — their own override, or the canonical name. */\n  name: string\n  /** The canonical name: the identity of last resort, shared by every holder. */\n  canonicalName: string\n  /** This holder's own name for the person, when they have set one. */\n  nameOverride: string\n  sources: Partial<Record<ContactSource, true>>\n  /** This holder's timeline, narrowed to the sites the group covers. */\n  interactions: ContactInteraction[]\n  tags: string[]\n  notes: string\n  campaignIds: string[]\n  ltvCents: number\n  ordersCount: number\n  phone: string\n  jobTitle: string\n  companyName: string\n  companyId: string\n  /**\n   * What linking this person to a company has to know — this holder's link,\n   * the shared mirror and the other holders' ids — so the properties card\n   * and the bulk bar can plan a link from the row without the document. Not\n   * a display field: the mirror is an index every reader of the document\n   * already holds, and nothing renders it.\n   */\n  companyLink: Aglyn.ContactCompanyLinkState\n  address: AglynPostalAddress | null\n  /** This holder's custom field values, keyed by definition key (AGL-2601). */\n  custom?: Record<string, Aglyn.ContactCustomValue>\n  /** This holder's attached org-library files, by media id (AGL-2662). */\n  mediaIds?: string[]\n  ownerUid: string\n  /** Empty when the holder has not placed the person in the funnel. */\n  lifecycleStage: ContactLifecycleStage | ''\n  /**\n   * When the person last opened or clicked one of this holder's campaigns\n   * (AGL-2616), or `null` when they never have since the stamp shipped.\n   */\n  lastEmailEngagementAtMs: number | null\n  /**\n   * When the earliest open task against this person is due (AGL-2661), or\n   * `null` when nothing is scheduled. SHARED, not the holder's: a task is\n   * filed against the contact document, and every holder reading the row\n   * sees the same next step.\n   */\n  nextTaskAtMs: number | null\n  createdAt?: unknown\n  updatedAt?: unknown\n}\n\n/*\n * `NO_HOLDER_GROUP` and `contactPrimaryGroup` moved to `@aglyn/aglyn`\n * under AGL-2662 so the server's whole-collection export can flatten a\n * contact the way the organization-level list does — the console app may\n * not import this plugin. Re-exported here, so every caller is unchanged.\n */\nexport { contactPrimaryGroup, NO_HOLDER_GROUP } from '@aglyn/aglyn'\n\n/** A document off the wire, flattened through one group's facet. */\nexport function contactRecordFromDoc(\n  row: Record<string, any>,\n  group: ConsentGroup,\n): ContactRecord {\n  const facet = Aglyn.readContactFacet(row, group.groupId)\n  return {\n    $id: String(row['$id'] ?? ''),\n    groupId: group.groupId,\n    holderHostId: group.hostId,\n    capturedByHostIds: Aglyn.contactCaptureHostIds(row),\n    email: typeof row['email'] === 'string' ? row['email'] : '',\n    alternateEmails: Array.isArray(row[Aglyn.CONTACT_ALTERNATE_EMAILS_FIELD])\n      ? (row[Aglyn.CONTACT_ALTERNATE_EMAILS_FIELD] as unknown[]).filter(\n          (email): email is string => typeof email === 'string',\n        )\n      : [],\n    name: Aglyn.contactDisplayName(row, group.groupId),\n    canonicalName: typeof row['name'] === 'string' ? row['name'] : '',\n    nameOverride: facet.name ?? '',\n    sources: facet.sources,\n    interactions: Aglyn.interactionsForGroup(facet.interactions, group.hostIds),\n    tags: facet.tags ?? [],\n    notes: facet.notes ?? '',\n    campaignIds: Aglyn.readContactCampaignIds(row, group.groupId),\n    ltvCents: facet.ltvCents ?? 0,\n    ordersCount: facet.ordersCount ?? 0,\n    phone: facet.phone ?? '',\n    jobTitle: facet.jobTitle ?? '',\n    companyName: facet.companyName ?? '',\n    companyId: facet.companyId ?? '',\n    companyLink: Aglyn.readContactCompanyLink(row, group.groupId),\n    address: facet.address ?? null,\n    custom: facet.custom ?? {},\n    mediaIds: facet.mediaIds ?? [],\n    ownerUid: facet.ownerUid ?? '',\n    lifecycleStage: Aglyn.isContactLifecycleStage(facet.lifecycleStage)\n      ? facet.lifecycleStage\n      : '',\n    lastEmailEngagementAtMs:\n      typeof facet.lastEmailEngagementAtMs === 'number' &&\n      Number.isFinite(facet.lastEmailEngagementAtMs) &&\n      facet.lastEmailEngagementAtMs > 0\n        ? facet.lastEmailEngagementAtMs\n        : null,\n    nextTaskAtMs: Aglyn.readNextTaskAtMs(row as { nextTaskAtMs?: unknown }),\n    createdAt: row['createdAt'],\n    updatedAt: row['updatedAt'],\n  }\n}\n\n/**\n * Tags as typed — comma-separated — into the shape the facet stores:\n * lower-cased, trimmed, deduplicated and capped, so a tag typed on the\n * record page and one typed in the create drawer are the same tag to the\n * segment filter that matches on them.\n */\nexport function parseContactTags(input: string): string[] {\n  return [\n    ...new Set(\n      input\n        .split(',')\n        .map((tag) => tag.trim().toLowerCase().slice(0, 40))\n        .filter(Boolean)\n        .slice(0, 20),\n    ),\n  ]\n}\n"],"names":["Aglyn","contactPrimaryGroup","NO_HOLDER_GROUP","contactRecordFromDoc","row","group","facet","readContactFacet","groupId","$id","String","holderHostId","hostId","capturedByHostIds","contactCaptureHostIds","email","alternateEmails","Array","isArray","CONTACT_ALTERNATE_EMAILS_FIELD","filter","name","contactDisplayName","canonicalName","nameOverride","sources","interactions","interactionsForGroup","hostIds","tags","notes","campaignIds","readContactCampaignIds","ltvCents","ordersCount","phone","jobTitle","companyName","companyId","companyLink","readContactCompanyLink","address","custom","mediaIds","ownerUid","lifecycleStage","isContactLifecycleStage","lastEmailEngagementAtMs","Number","isFinite","nextTaskAtMs","readNextTaskAtMs","createdAt","updatedAt","parseContactTags","input","Set","split","map","tag","trim","toLowerCase","slice","Boolean"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AA+FrC;;;;;CAKC,GACD,SAASC,mBAAmB,EAAEC,eAAe,QAAQ,eAAc;AAEnE,kEAAkE,GAClE,OAAO,SAASC,qBACdC,GAAwB,EACxBC,KAAmB;QAILD,UAYEE,aAGRA,aACCA,cAEGA,iBACGA,oBACNA,cACGA,iBACGA,oBACFA,kBAEFA,gBACDA,eACEA,iBACAA;IA9BZ,MAAMA,QAAQN,MAAMO,gBAAgB,CAACH,KAAKC,MAAMG,OAAO;IACvD,OAAO;QACLC,KAAKC,QAAON,WAAAA,GAAG,CAAC,MAAM,YAAVA,WAAc;QAC1BI,SAASH,MAAMG,OAAO;QACtBG,cAAcN,MAAMO,MAAM;QAC1BC,mBAAmBb,MAAMc,qBAAqB,CAACV;QAC/CW,OAAO,OAAOX,GAAG,CAAC,QAAQ,KAAK,WAAWA,GAAG,CAAC,QAAQ,GAAG;QACzDY,iBAAiBC,MAAMC,OAAO,CAACd,GAAG,CAACJ,MAAMmB,8BAA8B,CAAC,IACpE,AAACf,GAAG,CAACJ,MAAMmB,8BAA8B,CAAC,CAAeC,MAAM,CAC7D,CAACL,QAA2B,OAAOA,UAAU,YAE/C,EAAE;QACNM,MAAMrB,MAAMsB,kBAAkB,CAAClB,KAAKC,MAAMG,OAAO;QACjDe,eAAe,OAAOnB,GAAG,CAAC,OAAO,KAAK,WAAWA,GAAG,CAAC,OAAO,GAAG;QAC/DoB,YAAY,GAAElB,cAAAA,MAAMe,IAAI,YAAVf,cAAc;QAC5BmB,SAASnB,MAAMmB,OAAO;QACtBC,cAAc1B,MAAM2B,oBAAoB,CAACrB,MAAMoB,YAAY,EAAErB,MAAMuB,OAAO;QAC1EC,IAAI,GAAEvB,cAAAA,MAAMuB,IAAI,YAAVvB,cAAc,EAAE;QACtBwB,KAAK,GAAExB,eAAAA,MAAMwB,KAAK,YAAXxB,eAAe;QACtByB,aAAa/B,MAAMgC,sBAAsB,CAAC5B,KAAKC,MAAMG,OAAO;QAC5DyB,QAAQ,GAAE3B,kBAAAA,MAAM2B,QAAQ,YAAd3B,kBAAkB;QAC5B4B,WAAW,GAAE5B,qBAAAA,MAAM4B,WAAW,YAAjB5B,qBAAqB;QAClC6B,KAAK,GAAE7B,eAAAA,MAAM6B,KAAK,YAAX7B,eAAe;QACtB8B,QAAQ,GAAE9B,kBAAAA,MAAM8B,QAAQ,YAAd9B,kBAAkB;QAC5B+B,WAAW,GAAE/B,qBAAAA,MAAM+B,WAAW,YAAjB/B,qBAAqB;QAClCgC,SAAS,GAAEhC,mBAAAA,MAAMgC,SAAS,YAAfhC,mBAAmB;QAC9BiC,aAAavC,MAAMwC,sBAAsB,CAACpC,KAAKC,MAAMG,OAAO;QAC5DiC,OAAO,GAAEnC,iBAAAA,MAAMmC,OAAO,YAAbnC,iBAAiB;QAC1BoC,MAAM,GAAEpC,gBAAAA,MAAMoC,MAAM,YAAZpC,gBAAgB,CAAC;QACzBqC,QAAQ,GAAErC,kBAAAA,MAAMqC,QAAQ,YAAdrC,kBAAkB,EAAE;QAC9BsC,QAAQ,GAAEtC,kBAAAA,MAAMsC,QAAQ,YAAdtC,kBAAkB;QAC5BuC,gBAAgB7C,MAAM8C,uBAAuB,CAACxC,MAAMuC,cAAc,IAC9DvC,MAAMuC,cAAc,GACpB;QACJE,yBACE,OAAOzC,MAAMyC,uBAAuB,KAAK,YACzCC,OAAOC,QAAQ,CAAC3C,MAAMyC,uBAAuB,KAC7CzC,MAAMyC,uBAAuB,GAAG,IAC5BzC,MAAMyC,uBAAuB,GAC7B;QACNG,cAAclD,MAAMmD,gBAAgB,CAAC/C;QACrCgD,WAAWhD,GAAG,CAAC,YAAY;QAC3BiD,WAAWjD,GAAG,CAAC,YAAY;IAC7B;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASkD,iBAAiBC,KAAa;IAC5C,OAAO;WACF,IAAIC,IACLD,MACGE,KAAK,CAAC,KACNC,GAAG,CAAC,CAACC,MAAQA,IAAIC,IAAI,GAAGC,WAAW,GAAGC,KAAK,CAAC,GAAG,KAC/C1C,MAAM,CAAC2C,SACPD,KAAK,CAAC,GAAG;KAEf;AACH"}

package/src/lib/model/contact-update.d.ts

@@ -0,0 +1,93 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AglynPostalAddress, ContactCustomValue } from '@aglyn/aglyn';
+/**
+ * THE CONTACT PROFILE ROUTE'S CONTRACT (AGL-2804), in one module both halves
+ * import, so the field the console sends and the field the handler reads
+ * cannot drift apart.
+ *
+ * `crm/contact-update` is the console's one writer of a contact's facets.
+ * The Firestore rules cannot tell one field of a holder's facet from another
+ * — the holder is a map key a rule cannot address — so a client update may
+ * not change a facet at all beyond letting a holder go, and every edit the
+ * console makes to one arrives here: the record page's profile, custom
+ * fields, files and campaign filing, the company page's link, and the bulk
+ * bar's tags, owner and company. A lifecycle stage has a route of its own,
+ * `crm/contact-stage`, because moving it is an event.
+ */
+/**
+ * The most contacts one request names — the contacts list's window, which is
+ * as much as a selection reaches. A larger selection is sent in pieces.
+ */
+export declare const CRM_CONTACT_UPDATE_MAX = 200;
+/**
+ * What one request sets, for ONE holder: the viewing site's group under a
+ * site, and at the organization level each contact's own primary holder.
+ *
+ * A text field sent as `''` is CLEARED — removed from the facet — except
+ * `notes`, which are stored as typed. A list replaces the stored list;
+ * `addTag` and `removeTag` change one tag and leave the rest as the server
+ * holds them.
+ */
+export interface ContactUpdateFields {
+    /** This holder's own name for the person. The canonical name is never written. */
+    name?: string;
+    /** As typed; stored as E.164, and refused when it cannot be read as a number. */
+    phone?: string;
+    jobTitle?: string;
+    address?: AglynPostalAddress | null;
+    notes?: string;
+    tags?: string[];
+    addTag?: string;
+    removeTag?: string;
+    campaignIds?: string[];
+    /** A member of the organization, or `''` for nobody. */
+    ownerUid?: string;
+    /** The company to file the person under, or `null` to unlink them. */
+    companyId?: string | null;
+    /**
+     * The company's label on the record. Left out beside `companyId`, the
+     * linked company's own name is written, and an unlink clears it.
+     */
+    companyName?: string;
+    /** Only the keys that changed, each judged against its definition; `null` clears. */
+    custom?: Record<string, ContactCustomValue>;
+    mediaIds?: string[];
+}
+/** Every field the route reads. A body naming any other is refused, not trimmed. */
+export declare const CONTACT_UPDATE_FIELDS: ReadonlyArray<keyof ContactUpdateFields>;
+export interface ContactUpdateRequest {
+    /** The mounted site; at the organization level the record's own site, or nothing. */
+    hostId?: string | null;
+    /** The organization, which makes the call the route's organization variant. */
+    orgId?: string;
+    contactIds: string[];
+    set: ContactUpdateFields;
+}
+/** One contact's answer: saved, or refused with a sentence written for the reader. */
+export type ContactUpdateOutcome = {
+    contactId: string;
+    ok: true;
+} | {
+    contactId: string;
+    ok: false;
+    error: string;
+};
+export interface ContactUpdateResponse {
+    ok: true;
+    results: ContactUpdateOutcome[];
+}

package/src/lib/model/contact-update.js

@@ -0,0 +1,50 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * THE CONTACT PROFILE ROUTE'S CONTRACT (AGL-2804), in one module both halves
+ * import, so the field the console sends and the field the handler reads
+ * cannot drift apart.
+ *
+ * `crm/contact-update` is the console's one writer of a contact's facets.
+ * The Firestore rules cannot tell one field of a holder's facet from another
+ * — the holder is a map key a rule cannot address — so a client update may
+ * not change a facet at all beyond letting a holder go, and every edit the
+ * console makes to one arrives here: the record page's profile, custom
+ * fields, files and campaign filing, the company page's link, and the bulk
+ * bar's tags, owner and company. A lifecycle stage has a route of its own,
+ * `crm/contact-stage`, because moving it is an event.
+ */ /**
+ * The most contacts one request names — the contacts list's window, which is
+ * as much as a selection reaches. A larger selection is sent in pieces.
+ */ export const CRM_CONTACT_UPDATE_MAX = 200;
+/** Every field the route reads. A body naming any other is refused, not trimmed. */ export const CONTACT_UPDATE_FIELDS = [
+    'name',
+    'phone',
+    'jobTitle',
+    'address',
+    'notes',
+    'tags',
+    'addTag',
+    'removeTag',
+    'campaignIds',
+    'ownerUid',
+    'companyId',
+    'companyName',
+    'custom',
+    'mediaIds'
+];
+
+//# sourceMappingURL=contact-update.js.map

package/src/lib/model/contact-update.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/contact-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { AglynPostalAddress, ContactCustomValue } from '@aglyn/aglyn'\n\n/**\n * THE CONTACT PROFILE ROUTE'S CONTRACT (AGL-2804), in one module both halves\n * import, so the field the console sends and the field the handler reads\n * cannot drift apart.\n *\n * `crm/contact-update` is the console's one writer of a contact's facets.\n * The Firestore rules cannot tell one field of a holder's facet from another\n * — the holder is a map key a rule cannot address — so a client update may\n * not change a facet at all beyond letting a holder go, and every edit the\n * console makes to one arrives here: the record page's profile, custom\n * fields, files and campaign filing, the company page's link, and the bulk\n * bar's tags, owner and company. A lifecycle stage has a route of its own,\n * `crm/contact-stage`, because moving it is an event.\n */\n\n/**\n * The most contacts one request names — the contacts list's window, which is\n * as much as a selection reaches. A larger selection is sent in pieces.\n */\nexport const CRM_CONTACT_UPDATE_MAX = 200\n\n/**\n * What one request sets, for ONE holder: the viewing site's group under a\n * site, and at the organization level each contact's own primary holder.\n *\n * A text field sent as `''` is CLEARED — removed from the facet — except\n * `notes`, which are stored as typed. A list replaces the stored list;\n * `addTag` and `removeTag` change one tag and leave the rest as the server\n * holds them.\n */\nexport interface ContactUpdateFields {\n  /** This holder's own name for the person. The canonical name is never written. */\n  name?: string\n  /** As typed; stored as E.164, and refused when it cannot be read as a number. */\n  phone?: string\n  jobTitle?: string\n  address?: AglynPostalAddress | null\n  notes?: string\n  tags?: string[]\n  addTag?: string\n  removeTag?: string\n  campaignIds?: string[]\n  /** A member of the organization, or `''` for nobody. */\n  ownerUid?: string\n  /** The company to file the person under, or `null` to unlink them. */\n  companyId?: string | null\n  /**\n   * The company's label on the record. Left out beside `companyId`, the\n   * linked company's own name is written, and an unlink clears it.\n   */\n  companyName?: string\n  /** Only the keys that changed, each judged against its definition; `null` clears. */\n  custom?: Record<string, ContactCustomValue>\n  mediaIds?: string[]\n}\n\n/** Every field the route reads. A body naming any other is refused, not trimmed. */\nexport const CONTACT_UPDATE_FIELDS: ReadonlyArray<keyof ContactUpdateFields> = [\n  'name',\n  'phone',\n  'jobTitle',\n  'address',\n  'notes',\n  'tags',\n  'addTag',\n  'removeTag',\n  'campaignIds',\n  'ownerUid',\n  'companyId',\n  'companyName',\n  'custom',\n  'mediaIds',\n]\n\nexport interface ContactUpdateRequest {\n  /** The mounted site; at the organization level the record's own site, or nothing. */\n  hostId?: string | null\n  /** The organization, which makes the call the route's organization variant. */\n  orgId?: string\n  contactIds: string[]\n  set: ContactUpdateFields\n}\n\n/** One contact's answer: saved, or refused with a sentence written for the reader. */\nexport type ContactUpdateOutcome =\n  | { contactId: string; ok: true }\n  | { contactId: string; ok: false; error: string }\n\nexport interface ContactUpdateResponse {\n  ok: true\n  results: ContactUpdateOutcome[]\n}\n"],"names":["CRM_CONTACT_UPDATE_MAX","CONTACT_UPDATE_FIELDS"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;;;;;;;;CAaC,GAED;;;CAGC,GACD,OAAO,MAAMA,yBAAyB,IAAG;AAqCzC,kFAAkF,GAClF,OAAO,MAAMC,wBAAkE;IAC7E;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}