@aglyn/plugins-crm 1.0.0-beta.178 → 1.0.0-beta.180

package/src/lib/model/lead-source-values.d.ts

@@ -0,0 +1,82 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type CrmPicklist } from '@aglyn/aglyn/app-utils/crm';
+/**
+ * THE LEAD SOURCE LIST'S EDITS (AGL-3298), as pure moves over a picklist.
+ *
+ * The Fields page applies the ones that touch only the list — add, reorder,
+ * sort, activate, deactivate, default — as one client write of the whole
+ * document. The two that change what RECORDS hold — a rename and a delete
+ * with its replacement — go to `crm/lead-source-values`, which rewrites the
+ * list and every lead and contact holding the old label in one request;
+ * this module is where both sides agree what each move does.
+ */
+/** The route the two record-changing moves are posted to. */
+export declare const CRM_LEAD_SOURCE_VALUES_ROUTE: "crm/lead-source-values";
+export declare const crmLeadSourceValuesRouteUrl: () => string;
+/** What the route is asked. `hostId` or `orgId` names the org, as every CRM route's scope does. */
+export type LeadSourceValuesRequest = {
+    hostId?: string | null;
+    orgId?: string;
+} & ({
+    action: 'rename';
+    valueId: string;
+    label: string;
+} | {
+    action: 'delete';
+    valueId: string;
+    /** An active value's label the records move to, or `null` to clear them. */
+    replaceWith: string | null;
+});
+/** What the route answers. */
+export interface LeadSourceValuesResponse {
+    ok: true;
+    /** How many leads now hold the new label (or none). */
+    leads: number;
+    /**
+     * How many contact FACETS were rewritten — one per holder that held the
+     * old label, so a person two sites both filed under it counts twice.
+     */
+    contacts: number;
+}
+/** Why a move is refused, in the sentence the page shows. */
+export type PicklistMove = {
+    ok: true;
+    picklist: CrmPicklist;
+} | {
+    ok: false;
+    error: string;
+};
+/** Append a value. */
+export declare function addPicklistValue(picklist: CrmPicklist, rawLabel: string): PicklistMove;
+/** Rename a value, keeping its id — the list half of the route's rename. */
+export declare function renamePicklistValue(picklist: CrmPicklist, valueId: string, rawLabel: string): PicklistMove;
+/**
+ * Remove a value — the list half of the route's delete. The replacement,
+ * when there is one, must be another ACTIVE value: records are not moved
+ * onto a value the pickers no longer offer. A default that named the
+ * deleted value is cleared.
+ */
+export declare function deletePicklistValue(picklist: CrmPicklist, valueId: string, replaceWith: string | null): PicklistMove;
+/** Turn a value on or off. Deactivating the default clears the default. */
+export declare function setPicklistValueActive(picklist: CrmPicklist, valueId: string, active: boolean): CrmPicklist;
+/** Make a value the default for new records, or clear the default with `null`. */
+export declare function setPicklistDefault(picklist: CrmPicklist, valueId: string | null): CrmPicklist;
+/** Move the value at `from` to `to`, the drag and the arrows alike. */
+export declare function movePicklistValue(picklist: CrmPicklist, from: number, to: number): CrmPicklist;
+/** Every value in A–Z order by label, as Salesforce's "Sort alphabetically" does. */
+export declare function sortPicklistValues(picklist: CrmPicklist): CrmPicklist;

package/src/lib/model/lead-source-values.js

@@ -0,0 +1,149 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { crmPicklistValueByLabel, crmPicklistValueId, normalizeCrmPicklistLabel } from "@aglyn/aglyn/app-utils/crm";
+/**
+ * THE LEAD SOURCE LIST'S EDITS (AGL-3298), as pure moves over a picklist.
+ *
+ * The Fields page applies the ones that touch only the list — add, reorder,
+ * sort, activate, deactivate, default — as one client write of the whole
+ * document. The two that change what RECORDS hold — a rename and a delete
+ * with its replacement — go to `crm/lead-source-values`, which rewrites the
+ * list and every lead and contact holding the old label in one request;
+ * this module is where both sides agree what each move does.
+ */ /** The route the two record-changing moves are posted to. */ export const CRM_LEAD_SOURCE_VALUES_ROUTE = 'crm/lead-source-values';
+export const crmLeadSourceValuesRouteUrl = ()=>`/api/${CRM_LEAD_SOURCE_VALUES_ROUTE}`;
+const DUPLICATE = (label)=>`“${label}” is already in the list.`;
+/** Append a value. */ export function addPicklistValue(picklist, rawLabel) {
+    const label = normalizeCrmPicklistLabel(rawLabel);
+    if (!label) return {
+        ok: false,
+        error: 'Enter a name for the value.'
+    };
+    const existing = crmPicklistValueByLabel(picklist, label);
+    if (existing) {
+        return {
+            ok: false,
+            error: existing.active ? DUPLICATE(existing.label) : `“${existing.label}” is in the list, inactive — activate it instead.`
+        };
+    }
+    const value = {
+        id: crmPicklistValueId(label, picklist.values.map((entry)=>entry.id)),
+        label,
+        active: true
+    };
+    return {
+        ok: true,
+        picklist: _extends({}, picklist, {
+            values: [
+                ...picklist.values,
+                value
+            ]
+        })
+    };
+}
+/** Rename a value, keeping its id — the list half of the route's rename. */ export function renamePicklistValue(picklist, valueId, rawLabel) {
+    const label = normalizeCrmPicklistLabel(rawLabel);
+    if (!label) return {
+        ok: false,
+        error: 'Enter a name for the value.'
+    };
+    if (!picklist.values.some((value)=>value.id === valueId)) {
+        return {
+            ok: false,
+            error: 'That value is no longer in the list.'
+        };
+    }
+    const clash = crmPicklistValueByLabel(picklist, label);
+    if (clash && clash.id !== valueId) return {
+        ok: false,
+        error: DUPLICATE(clash.label)
+    };
+    return {
+        ok: true,
+        picklist: _extends({}, picklist, {
+            values: picklist.values.map((value)=>value.id === valueId ? _extends({}, value, {
+                    label
+                }) : value)
+        })
+    };
+}
+/**
+ * Remove a value — the list half of the route's delete. The replacement,
+ * when there is one, must be another ACTIVE value: records are not moved
+ * onto a value the pickers no longer offer. A default that named the
+ * deleted value is cleared.
+ */ export function deletePicklistValue(picklist, valueId, replaceWith) {
+    if (!picklist.values.some((value)=>value.id === valueId)) {
+        return {
+            ok: false,
+            error: 'That value is no longer in the list.'
+        };
+    }
+    if (replaceWith !== null) {
+        const target = crmPicklistValueByLabel(picklist, replaceWith);
+        if (!target || target.id === valueId || !target.active) {
+            return {
+                ok: false,
+                error: 'Pick an active value to move its records to, or none.'
+            };
+        }
+    }
+    return {
+        ok: true,
+        picklist: {
+            values: picklist.values.filter((value)=>value.id !== valueId),
+            defaultValueId: picklist.defaultValueId === valueId ? null : picklist.defaultValueId
+        }
+    };
+}
+/** Turn a value on or off. Deactivating the default clears the default. */ export function setPicklistValueActive(picklist, valueId, active) {
+    return {
+        values: picklist.values.map((value)=>value.id === valueId ? _extends({}, value, {
+                active
+            }) : value),
+        defaultValueId: !active && picklist.defaultValueId === valueId ? null : picklist.defaultValueId
+    };
+}
+/** Make a value the default for new records, or clear the default with `null`. */ export function setPicklistDefault(picklist, valueId) {
+    const value = picklist.values.find((entry)=>entry.id === valueId);
+    return _extends({}, picklist, {
+        defaultValueId: (value == null ? void 0 : value.active) ? value.id : null
+    });
+}
+/** Move the value at `from` to `to`, the drag and the arrows alike. */ export function movePicklistValue(picklist, from, to) {
+    const size = picklist.values.length;
+    if (from === to || from < 0 || to < 0 || from >= size || to >= size) return picklist;
+    const values = [
+        ...picklist.values
+    ];
+    const [moved] = values.splice(from, 1);
+    values.splice(to, 0, moved);
+    return _extends({}, picklist, {
+        values
+    });
+}
+/** Every value in A–Z order by label, as Salesforce's "Sort alphabetically" does. */ export function sortPicklistValues(picklist) {
+    return _extends({}, picklist, {
+        values: [
+            ...picklist.values
+        ].sort((a, b)=>a.label.localeCompare(b.label, undefined, {
+                sensitivity: 'base'
+            }))
+    });
+}
+
+//# sourceMappingURL=lead-source-values.js.map

package/src/lib/model/lead-source-values.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/model/lead-source-values.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type CrmPicklist,\n  type CrmPicklistValue,\n  crmPicklistValueByLabel,\n  crmPicklistValueId,\n  normalizeCrmPicklistLabel,\n} from '@aglyn/aglyn/app-utils/crm'\n\n/**\n * THE LEAD SOURCE LIST'S EDITS (AGL-3298), as pure moves over a picklist.\n *\n * The Fields page applies the ones that touch only the list — add, reorder,\n * sort, activate, deactivate, default — as one client write of the whole\n * document. The two that change what RECORDS hold — a rename and a delete\n * with its replacement — go to `crm/lead-source-values`, which rewrites the\n * list and every lead and contact holding the old label in one request;\n * this module is where both sides agree what each move does.\n */\n\n/** The route the two record-changing moves are posted to. */\nexport const CRM_LEAD_SOURCE_VALUES_ROUTE = 'crm/lead-source-values' as const\n\nexport const crmLeadSourceValuesRouteUrl = (): string => `/api/${CRM_LEAD_SOURCE_VALUES_ROUTE}`\n\n/** What the route is asked. `hostId` or `orgId` names the org, as every CRM route's scope does. */\nexport type LeadSourceValuesRequest = { hostId?: string | null; orgId?: string } & (\n  | { action: 'rename'; valueId: string; label: string }\n  | {\n      action: 'delete'\n      valueId: string\n      /** An active value's label the records move to, or `null` to clear them. */\n      replaceWith: string | null\n    }\n)\n\n/** What the route answers. */\nexport interface LeadSourceValuesResponse {\n  ok: true\n  /** How many leads now hold the new label (or none). */\n  leads: number\n  /**\n   * How many contact FACETS were rewritten — one per holder that held the\n   * old label, so a person two sites both filed under it counts twice.\n   */\n  contacts: number\n}\n\n/** Why a move is refused, in the sentence the page shows. */\nexport type PicklistMove = { ok: true; picklist: CrmPicklist } | { ok: false; error: string }\n\nconst DUPLICATE = (label: string) => `“${label}” is already in the list.`\n\n/** Append a value. */\nexport function addPicklistValue(picklist: CrmPicklist, rawLabel: string): PicklistMove {\n  const label = normalizeCrmPicklistLabel(rawLabel)\n  if (!label) return { ok: false, error: 'Enter a name for the value.' }\n  const existing = crmPicklistValueByLabel(picklist, label)\n  if (existing) {\n    return {\n      ok: false,\n      error: existing.active\n        ? DUPLICATE(existing.label)\n        : `“${existing.label}” is in the list, inactive — activate it instead.`,\n    }\n  }\n  const value: CrmPicklistValue = {\n    id: crmPicklistValueId(\n      label,\n      picklist.values.map((entry) => entry.id),\n    ),\n    label,\n    active: true,\n  }\n  return { ok: true, picklist: { ...picklist, values: [...picklist.values, value] } }\n}\n\n/** Rename a value, keeping its id — the list half of the route's rename. */\nexport function renamePicklistValue(\n  picklist: CrmPicklist,\n  valueId: string,\n  rawLabel: string,\n): PicklistMove {\n  const label = normalizeCrmPicklistLabel(rawLabel)\n  if (!label) return { ok: false, error: 'Enter a name for the value.' }\n  if (!picklist.values.some((value) => value.id === valueId)) {\n    return { ok: false, error: 'That value is no longer in the list.' }\n  }\n  const clash = crmPicklistValueByLabel(picklist, label)\n  if (clash && clash.id !== valueId) return { ok: false, error: DUPLICATE(clash.label) }\n  return {\n    ok: true,\n    picklist: {\n      ...picklist,\n      values: picklist.values.map((value) => (value.id === valueId ? { ...value, label } : value)),\n    },\n  }\n}\n\n/**\n * Remove a value — the list half of the route's delete. The replacement,\n * when there is one, must be another ACTIVE value: records are not moved\n * onto a value the pickers no longer offer. A default that named the\n * deleted value is cleared.\n */\nexport function deletePicklistValue(\n  picklist: CrmPicklist,\n  valueId: string,\n  replaceWith: string | null,\n): PicklistMove {\n  if (!picklist.values.some((value) => value.id === valueId)) {\n    return { ok: false, error: 'That value is no longer in the list.' }\n  }\n  if (replaceWith !== null) {\n    const target = crmPicklistValueByLabel(picklist, replaceWith)\n    if (!target || target.id === valueId || !target.active) {\n      return { ok: false, error: 'Pick an active value to move its records to, or none.' }\n    }\n  }\n  return {\n    ok: true,\n    picklist: {\n      values: picklist.values.filter((value) => value.id !== valueId),\n      defaultValueId: picklist.defaultValueId === valueId ? null : picklist.defaultValueId,\n    },\n  }\n}\n\n/** Turn a value on or off. Deactivating the default clears the default. */\nexport function setPicklistValueActive(\n  picklist: CrmPicklist,\n  valueId: string,\n  active: boolean,\n): CrmPicklist {\n  return {\n    values: picklist.values.map((value) => (value.id === valueId ? { ...value, active } : value)),\n    defaultValueId:\n      !active && picklist.defaultValueId === valueId ? null : picklist.defaultValueId,\n  }\n}\n\n/** Make a value the default for new records, or clear the default with `null`. */\nexport function setPicklistDefault(picklist: CrmPicklist, valueId: string | null): CrmPicklist {\n  const value = picklist.values.find((entry) => entry.id === valueId)\n  return { ...picklist, defaultValueId: value?.active ? value.id : null }\n}\n\n/** Move the value at `from` to `to`, the drag and the arrows alike. */\nexport function movePicklistValue(picklist: CrmPicklist, from: number, to: number): CrmPicklist {\n  const size = picklist.values.length\n  if (from === to || from < 0 || to < 0 || from >= size || to >= size) return picklist\n  const values = [...picklist.values]\n  const [moved] = values.splice(from, 1)\n  values.splice(to, 0, moved)\n  return { ...picklist, values }\n}\n\n/** Every value in A–Z order by label, as Salesforce's \"Sort alphabetically\" does. */\nexport function sortPicklistValues(picklist: CrmPicklist): CrmPicklist {\n  return {\n    ...picklist,\n    values: [...picklist.values].sort((a, b) =>\n      a.label.localeCompare(b.label, undefined, { sensitivity: 'base' }),\n    ),\n  }\n}\n"],"names":["crmPicklistValueByLabel","crmPicklistValueId","normalizeCrmPicklistLabel","CRM_LEAD_SOURCE_VALUES_ROUTE","crmLeadSourceValuesRouteUrl","DUPLICATE","label","addPicklistValue","picklist","rawLabel","ok","error","existing","active","value","id","values","map","entry","renamePicklistValue","valueId","some","clash","deletePicklistValue","replaceWith","target","filter","defaultValueId","setPicklistValueActive","setPicklistDefault","find","movePicklistValue","from","to","size","length","moved","splice","sortPicklistValues","sort","a","b","localeCompare","undefined","sensitivity"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAGEA,uBAAuB,EACvBC,kBAAkB,EAClBC,yBAAyB,QACpB,6BAA4B;AAEnC;;;;;;;;;CASC,GAED,2DAA2D,GAC3D,OAAO,MAAMC,+BAA+B,yBAAiC;AAE7E,OAAO,MAAMC,8BAA8B,IAAc,CAAC,KAAK,EAAED,8BAA8B,CAAA;AA4B/F,MAAME,YAAY,CAACC,QAAkB,CAAC,CAAC,EAAEA,MAAM,yBAAyB,CAAC;AAEzE,oBAAoB,GACpB,OAAO,SAASC,iBAAiBC,QAAqB,EAAEC,QAAgB;IACtE,MAAMH,QAAQJ,0BAA0BO;IACxC,IAAI,CAACH,OAAO,OAAO;QAAEI,IAAI;QAAOC,OAAO;IAA8B;IACrE,MAAMC,WAAWZ,wBAAwBQ,UAAUF;IACnD,IAAIM,UAAU;QACZ,OAAO;YACLF,IAAI;YACJC,OAAOC,SAASC,MAAM,GAClBR,UAAUO,SAASN,KAAK,IACxB,CAAC,CAAC,EAAEM,SAASN,KAAK,CAAC,iDAAiD,CAAC;QAC3E;IACF;IACA,MAAMQ,QAA0B;QAC9BC,IAAId,mBACFK,OACAE,SAASQ,MAAM,CAACC,GAAG,CAAC,CAACC,QAAUA,MAAMH,EAAE;QAEzCT;QACAO,QAAQ;IACV;IACA,OAAO;QAAEH,IAAI;QAAMF,UAAU,aAAKA;YAAUQ,QAAQ;mBAAIR,SAASQ,MAAM;gBAAEF;aAAM;;IAAG;AACpF;AAEA,0EAA0E,GAC1E,OAAO,SAASK,oBACdX,QAAqB,EACrBY,OAAe,EACfX,QAAgB;IAEhB,MAAMH,QAAQJ,0BAA0BO;IACxC,IAAI,CAACH,OAAO,OAAO;QAAEI,IAAI;QAAOC,OAAO;IAA8B;IACrE,IAAI,CAACH,SAASQ,MAAM,CAACK,IAAI,CAAC,CAACP,QAAUA,MAAMC,EAAE,KAAKK,UAAU;QAC1D,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAuC;IACpE;IACA,MAAMW,QAAQtB,wBAAwBQ,UAAUF;IAChD,IAAIgB,SAASA,MAAMP,EAAE,KAAKK,SAAS,OAAO;QAAEV,IAAI;QAAOC,OAAON,UAAUiB,MAAMhB,KAAK;IAAE;IACrF,OAAO;QACLI,IAAI;QACJF,UAAU,aACLA;YACHQ,QAAQR,SAASQ,MAAM,CAACC,GAAG,CAAC,CAACH,QAAWA,MAAMC,EAAE,KAAKK,UAAU,aAAKN;oBAAOR;qBAAUQ;;IAEzF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASS,oBACdf,QAAqB,EACrBY,OAAe,EACfI,WAA0B;IAE1B,IAAI,CAAChB,SAASQ,MAAM,CAACK,IAAI,CAAC,CAACP,QAAUA,MAAMC,EAAE,KAAKK,UAAU;QAC1D,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAuC;IACpE;IACA,IAAIa,gBAAgB,MAAM;QACxB,MAAMC,SAASzB,wBAAwBQ,UAAUgB;QACjD,IAAI,CAACC,UAAUA,OAAOV,EAAE,KAAKK,WAAW,CAACK,OAAOZ,MAAM,EAAE;YACtD,OAAO;gBAAEH,IAAI;gBAAOC,OAAO;YAAwD;QACrF;IACF;IACA,OAAO;QACLD,IAAI;QACJF,UAAU;YACRQ,QAAQR,SAASQ,MAAM,CAACU,MAAM,CAAC,CAACZ,QAAUA,MAAMC,EAAE,KAAKK;YACvDO,gBAAgBnB,SAASmB,cAAc,KAAKP,UAAU,OAAOZ,SAASmB,cAAc;QACtF;IACF;AACF;AAEA,yEAAyE,GACzE,OAAO,SAASC,uBACdpB,QAAqB,EACrBY,OAAe,EACfP,MAAe;IAEf,OAAO;QACLG,QAAQR,SAASQ,MAAM,CAACC,GAAG,CAAC,CAACH,QAAWA,MAAMC,EAAE,KAAKK,UAAU,aAAKN;gBAAOD;iBAAWC;QACtFa,gBACE,CAACd,UAAUL,SAASmB,cAAc,KAAKP,UAAU,OAAOZ,SAASmB,cAAc;IACnF;AACF;AAEA,gFAAgF,GAChF,OAAO,SAASE,mBAAmBrB,QAAqB,EAAEY,OAAsB;IAC9E,MAAMN,QAAQN,SAASQ,MAAM,CAACc,IAAI,CAAC,CAACZ,QAAUA,MAAMH,EAAE,KAAKK;IAC3D,OAAO,aAAKZ;QAAUmB,gBAAgBb,CAAAA,yBAAAA,MAAOD,MAAM,IAAGC,MAAMC,EAAE,GAAG;;AACnE;AAEA,qEAAqE,GACrE,OAAO,SAASgB,kBAAkBvB,QAAqB,EAAEwB,IAAY,EAAEC,EAAU;IAC/E,MAAMC,OAAO1B,SAASQ,MAAM,CAACmB,MAAM;IACnC,IAAIH,SAASC,MAAMD,OAAO,KAAKC,KAAK,KAAKD,QAAQE,QAAQD,MAAMC,MAAM,OAAO1B;IAC5E,MAAMQ,SAAS;WAAIR,SAASQ,MAAM;KAAC;IACnC,MAAM,CAACoB,MAAM,GAAGpB,OAAOqB,MAAM,CAACL,MAAM;IACpChB,OAAOqB,MAAM,CAACJ,IAAI,GAAGG;IACrB,OAAO,aAAK5B;QAAUQ;;AACxB;AAEA,mFAAmF,GACnF,OAAO,SAASsB,mBAAmB9B,QAAqB;IACtD,OAAO,aACFA;QACHQ,QAAQ;eAAIR,SAASQ,MAAM;SAAC,CAACuB,IAAI,CAAC,CAACC,GAAGC,IACpCD,EAAElC,KAAK,CAACoC,aAAa,CAACD,EAAEnC,KAAK,EAAEqC,WAAW;gBAAEC,aAAa;YAAO;;AAGtE"}

package/src/lib/server/contact-update.js

@@ -1,3 +1,4 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
 /**
  * @license
  * Copyright 2026 Aglyn LLC
@@ -67,7 +68,7 @@
  * link: summed per company and settled once the contacts are written, so a
  * company deleted in between cannot fail the save of the people at it — the
  * company page's live aggregate is what corrects a count that did not move.
- */ import { consentGroupForHost, CONTACT_FIELDS_MAX_PER_ORG, campaignMembershipValue, contactCampaignFieldPath, contactFacetPath, contactPrimaryGroup, CRM_COLLECTIONS, CRM_MEDIA_IDS_FIELD, crmReadTokens, isOrgWideMember, normalizeAddress, normalizeCrmMediaIds, normalizePhone, planContactCompanyLink, readContactCompanyLink, readContactFacet, readCrmCustomInput, visibleToTokens } from "@aglyn/aglyn/server";
+ */ import { consentGroupForHost, CONTACT_FIELDS_MAX_PER_ORG, campaignMembershipValue, contactCampaignFieldPath, contactFacetPath, contactPrimaryGroup, CRM_COLLECTIONS, CRM_LEAD_SOURCE_PICKLIST, CRM_MEDIA_IDS_FIELD, crmReadTokens, effectiveCrmLeadSourcePicklist, isOrgWideMember, judgeCrmLeadSource, normalizeAddress, normalizeCrmMediaIds, normalizeCrmPicklistLabel, normalizePhone, planContactCompanyLink, readContactCompanyLink, readContactFacet, readCrmCustomInput, visibleToTokens } from "@aglyn/aglyn/server";
 import { companyContactsCountFields, contactCompanyLinkFields, firebaseAdmin, resolveOrgMembership } from "@aglyn/tenant-data-admin";
 import { FieldValue } from "firebase-admin/firestore";
 import { CONTACT_UPDATE_FIELDS, CRM_CONTACT_UPDATE_MAX } from "../model/contact-update.js";
@@ -79,6 +80,7 @@ import { authorizeCrmWriter, canReach } from "./task-routes.js";
     name: "Editing a contact's profile",
     phone: "Editing a contact's profile",
     jobTitle: "Editing a contact's profile",
+    leadSource: "Editing a contact's profile",
     address: "Editing a contact's profile",
     notes: "Editing a contact's notes",
     tags: 'Tagging a contact',
@@ -132,6 +134,9 @@ import { authorizeCrmWriter, canReach } from "./task-routes.js";
         fields.phone = phone;
     }
     if ('jobTitle' in raw) fields.jobTitle = typed(raw['jobTitle'], 120);
+    // Held to the label's shape here; judged against the org's list by the
+    // handler, which alone can read it (AGL-3298).
+    if ('leadSource' in raw) fields.leadSource = normalizeCrmPicklistLabel(raw['leadSource']);
     if ('address' in raw) {
         const address = raw['address'];
         fields.address = address && typeof address === 'object' && !Array.isArray(address) ? normalizeAddress(address) : null;
@@ -257,6 +262,7 @@ const refused = (contactId, error)=>({
         update['phone'] = text(fields.phone);
     }
     if (fields.jobTitle !== undefined) update[path('jobTitle')] = text(fields.jobTitle);
+    if (fields.leadSource !== undefined) update[path('leadSource')] = text(fields.leadSource);
     if (fields.address !== undefined) {
         var _fields_address;
         update[path('address')] = (_fields_address = fields.address) != null ? _fields_address : FieldValue.delete();
@@ -420,6 +426,11 @@ export const crmContactUpdateHandler = async (req, res)=>{
             }
             custom = judged.values;
         }
+        /*
+     * THE ORG'S LEAD SOURCES (AGL-3298), read only when the body names one.
+     * Judged per contact below, because a contact keeps the value it
+     * already holds even when the list has since deactivated it.
+     */ const leadSources = fields.leadSource ? effectiveCrmLeadSourcePicklist((await orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST).get()).data()) : null;
         if (fields.ownerUid) {
             const owner = await resolveOrgMembership(fields.ownerUid, writer.orgId).catch(()=>null);
             if (!(owner == null ? void 0 : owner.member)) {
@@ -470,7 +481,19 @@ export const crmContactUpdateHandler = async (req, res)=>{
                 outcomes.set(contactId, refused(contactId, NO_HOLDER_REFUSAL));
                 return;
             }
-            const patch = contactPatch(data, group.groupId, fields, custom, linkedCompanyName);
+            let rowFields = fields;
+            if (leadSources && fields.leadSource) {
+                var _judged_value;
+                const judged = judgeCrmLeadSource(leadSources, fields.leadSource, readContactFacet(data, group.groupId).leadSource);
+                if (judged.ok === false) {
+                    outcomes.set(contactId, refused(contactId, judged.error));
+                    return;
+                }
+                rowFields = _extends({}, fields, {
+                    leadSource: (_judged_value = judged.value) != null ? _judged_value : ''
+                });
+            }
+            const patch = contactPatch(data, group.groupId, rowFields, custom, linkedCompanyName);
             if ('refused' in patch) {
                 outcomes.set(contactId, refused(contactId, patch.refused));
                 return;

package/src/lib/server/contact-update.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contact-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contact-update` — one holder's profile fields on one or\n * more contacts (AGL-2804).\n *\n * Body: `{ hostId, contactIds, set }` under a site, or `{ orgId, hostId?,\n * contactIds, set }` at the organization level, where `set` is\n * `ContactUpdateFields`. Answers `{ ok, results }`: one outcome per contact,\n * in the order the ids were sent.\n *\n * ## Why every facet write comes here\n *\n * A contact's fields live in the facet of the holder that keeps them —\n * `facets.{groupId}.*` — and the Firestore rules cannot tell one field of a\n * facet from another: the holder is a map key a rule cannot address, and a\n * write's affected keys name only `facets`. So the rules let a client update\n * change nothing in a facet beyond letting a holder go, and the console's\n * edits arrive here, where the plan is asked about the fields the request\n * actually carries.\n *\n * ## Who may call it\n *\n * The CRM writer the task routes admit (`authorizeCrmWriter`): under a site,\n * a member whose role writes org data, who holds `data.manage` and whose\n * access reaches the site; at the organization level, an org-wide member\n * with the permission. Each contact must then be one the caller may read —\n * the rules' `canReadScoped()` — and, under a site, one the site's hub lists.\n *\n * ## The plan\n *\n * Every field is the CRM's (AGL-2790), and a plan without the CRM has none\n * of it (AGL-2851), so it edits no contact: not the owner, company, custom\n * values or files, and not the profile a capture writes (name, phone, job\n * title, address), the tags, the notes or the campaign filing either. A\n * request carrying any field is refused to such a plan once the caller is\n * known, and before a contact is read — staff included, because the plan is\n * a fact about the workspace. Erasing a person is another route, open on\n * every plan.\n *\n * ## One holder, by dotted path\n *\n * Under a site the facet is the site's consent group's; at the organization\n * level it is each contact's own primary holder, the facet the record page\n * shows there. Every field is one dotted path — a nested `facets` object\n * would replace every other holder's map — and a text field sent empty is\n * deleted rather than stored blank, so \"no phone\" has one shape.\n *\n * ## Many contacts, one commit\n *\n * The contacts are read together and written in one batch. A batch that\n * fails is retried contact by contact, so the one that could not be written\n * is named and the rest still land. A company's contacts count follows the\n * link: summed per company and settled once the contacts are written, so a\n * company deleted in between cannot fail the save of the people at it — the\n * company page's live aggregate is what corrects a count that did not move.\n */\n\nimport {\n  type AglynPostalAddress,\n  consentGroupForHost,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactCompanyLinkPlan,\n  type ContactCustomValue,\n  type ContactFieldDefinition,\n  campaignMembershipValue,\n  contactCampaignFieldPath,\n  contactFacetPath,\n  contactPrimaryGroup,\n  CRM_COLLECTIONS,\n  CRM_MEDIA_IDS_FIELD,\n  crmReadTokens,\n  isOrgWideMember,\n  normalizeAddress,\n  normalizeCrmMediaIds,\n  normalizePhone,\n  type PluginApiHandler,\n  planContactCompanyLink,\n  readContactCompanyLink,\n  readContactFacet,\n  readCrmCustomInput,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  companyContactsCountFields,\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CONTACT_UPDATE_FIELDS,\n  type ContactUpdateFields,\n  type ContactUpdateOutcome,\n  type ContactUpdateResponse,\n  CRM_CONTACT_UPDATE_MAX,\n} from '../model/contact-update'\nimport {\n  CONTACT_NOTES_MAX,\n  CONTACT_PHONE_REFUSAL,\n  CONTACT_TAGS_MAX,\n  normalizeTags,\n  readBulkTag,\n  typed,\n} from './contact-profile'\nimport { readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter, canReach, type Writer } from './task-routes'\n\n/** What the suite gate names for each field a request can carry. */\nconst SUITE_ACTS: Record<keyof ContactUpdateFields, string> = {\n  name: \"Editing a contact's profile\",\n  phone: \"Editing a contact's profile\",\n  jobTitle: \"Editing a contact's profile\",\n  address: \"Editing a contact's profile\",\n  notes: \"Editing a contact's notes\",\n  tags: 'Tagging a contact',\n  addTag: 'Tagging a contact',\n  removeTag: 'Tagging a contact',\n  campaignIds: 'Filing a contact under a campaign',\n  ownerUid: \"Assigning a contact's owner\",\n  companyId: 'Filing a contact under a company',\n  companyName: 'Filing a contact under a company',\n  custom: \"Editing a contact's custom fields\",\n  mediaIds: 'Attaching files to a contact',\n}\n\n/** A contact read at the organization level that no site has captured. */\nconst NO_HOLDER_REFUSAL = 'No site holds this contact yet, so it has no profile to edit.'\n\n/**\n * The act a request is refused for on a plan without the CRM: the first\n * field it carries, in the order the route reads them. Every field is the\n * CRM's, so whichever field a request names is the act its refusal names.\n */\nexport function contactUpdateSuiteAct(fields: ContactUpdateFields): string {\n  const field = CONTACT_UPDATE_FIELDS.find((key) => fields[key] !== undefined)\n  return field ? SUITE_ACTS[field] : \"Editing a contact's profile\"\n}\n\n/**\n * A body's `set`, read into the fields it names, or the sentence refusing\n * it. A key the route does not save is refused rather than dropped: a save\n * that silently lost a field would read as a save that kept it.\n */\nexport function readContactUpdateFields(\n  input: unknown,\n): { ok: true; fields: ContactUpdateFields } | { ok: false; error: string } {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) {\n    return { ok: false, error: 'Name the fields to save.' }\n  }\n  const raw = input as Record<string, unknown>\n  const unknownKey = Object.keys(raw).find(\n    (key) => !(CONTACT_UPDATE_FIELDS as readonly string[]).includes(key),\n  )\n  if (unknownKey) {\n    return { ok: false, error: `\"${unknownKey}\" is not a field a contact's profile saves.` }\n  }\n  const fields: ContactUpdateFields = {}\n  if ('name' in raw) fields.name = typed(raw['name'], 120)\n  if ('phone' in raw) {\n    const text = typed(raw['phone'], 40)\n    const phone = text ? normalizePhone(text) : ''\n    if (phone === null) return { ok: false, error: CONTACT_PHONE_REFUSAL }\n    fields.phone = phone\n  }\n  if ('jobTitle' in raw) fields.jobTitle = typed(raw['jobTitle'], 120)\n  if ('address' in raw) {\n    const address = raw['address']\n    fields.address =\n      address && typeof address === 'object' && !Array.isArray(address)\n        ? normalizeAddress(address as AglynPostalAddress)\n        : null\n  }\n  if ('notes' in raw) fields.notes = String(raw['notes'] ?? '').slice(0, CONTACT_NOTES_MAX)\n  // One write may carry one transform per field, so the tags are replaced,\n  // added to or taken from — never two of those at once.\n  if (['tags', 'addTag', 'removeTag'].filter((key) => key in raw).length > 1) {\n    return { ok: false, error: 'Send the tags, a tag to add or a tag to remove — one of them.' }\n  }\n  if ('tags' in raw) {\n    if (!Array.isArray(raw['tags'])) return { ok: false, error: 'Tags must be a list.' }\n    fields.tags = normalizeTags(raw['tags'])\n  }\n  for (const key of ['addTag', 'removeTag'] as const) {\n    if (!(key in raw)) continue\n    const tag = readBulkTag(raw[key])\n    if (!tag) return { ok: false, error: 'Name the tag.' }\n    fields[key] = tag\n  }\n  if ('campaignIds' in raw) {\n    const ids = raw['campaignIds']\n    if (!Array.isArray(ids)) return { ok: false, error: 'Campaigns must be a list.' }\n    fields.campaignIds = campaignMembershipValue(ids.map((id) => String(id ?? '')))\n  }\n  if ('ownerUid' in raw) fields.ownerUid = typed(raw['ownerUid'], 128)\n  if ('companyId' in raw) {\n    const companyId = raw['companyId'] === null ? null : typed(raw['companyId'], 128)\n    if (companyId !== null && (!companyId || companyId.includes('/'))) {\n      return { ok: false, error: 'The company could not be read.' }\n    }\n    fields.companyId = companyId\n  }\n  if ('companyName' in raw) fields.companyName = typed(raw['companyName'], 120)\n  if ('custom' in raw) {\n    const custom = raw['custom']\n    if (!custom || typeof custom !== 'object' || Array.isArray(custom)) {\n      return { ok: false, error: 'Custom fields must be values keyed by field key.' }\n    }\n    fields.custom = custom as Record<string, ContactCustomValue>\n  }\n  if ('mediaIds' in raw) {\n    if (!Array.isArray(raw['mediaIds'])) {\n      return { ok: false, error: 'Files must be a list of ids.' }\n    }\n    fields.mediaIds = normalizeCrmMediaIds(raw['mediaIds'])\n  }\n  if (!Object.keys(fields).length) return { ok: false, error: 'Name the fields to save.' }\n  return { ok: true, fields }\n}\n\n/** The ids a body names, deduplicated — or `null` when any is unreadable or there are too many. */\nfunction readContactIds(value: unknown): string[] | null {\n  if (!Array.isArray(value) || !value.length || value.length > CRM_CONTACT_UPDATE_MAX) {\n    return null\n  }\n  const ids = value.map((id) => typed(id, 200))\n  if (ids.some((id) => !id || id.includes('/'))) return null\n  return [...new Set(ids)]\n}\n\n/**\n * Under a site, whether the caller's access reaches it. The rules could not\n * ask this of a facet write — they cannot see which holder a write is for —\n * and a collaborator on one site must not write another site's notes on a\n * person both of them hold.\n */\nfunction reachesSite(writer: Writer, hostId: string): boolean {\n  return (\n    writer.staff ||\n    isOrgWideMember(writer.member) ||\n    Boolean((writer.member?.hostAccess as Record<string, unknown> | undefined)?.[hostId])\n  )\n}\n\nconst refused = (contactId: string, error: string): ContactUpdateOutcome => ({\n  contactId,\n  ok: false,\n  error,\n})\n\ninterface ContactWrite {\n  contactId: string\n  ref: FirebaseFirestore.DocumentReference\n  update: Record<string, unknown>\n  counts: ContactCompanyLinkPlan['counts']\n}\n\n/**\n * One contact's update for one holder, or the sentence refusing the row.\n * `update` is `null` when the document already says everything asked — a tag\n * the row already carries, a link already made.\n */\nfunction contactPatch(\n  contact: Record<string, unknown>,\n  groupId: string,\n  fields: ContactUpdateFields,\n  custom: Record<string, ContactCustomValue> | undefined,\n  linkedCompanyName: string,\n):\n  | { update: Record<string, unknown> | null; counts: ContactCompanyLinkPlan['counts'] }\n  | { refused: string } {\n  const path = (field: string) => contactFacetPath(groupId, field)\n  /** A text field as stored: the value, or the field's absence. */\n  const text = (value: string) => value || FieldValue.delete()\n  const update: Record<string, unknown> = {}\n  let counts: ContactCompanyLinkPlan['counts'] = []\n\n  if (fields.name !== undefined) update[path('name')] = text(fields.name)\n  if (fields.phone !== undefined) {\n    update[path('phone')] = text(fields.phone)\n    // The search echo — see `HostContact.phone`.\n    update['phone'] = text(fields.phone)\n  }\n  if (fields.jobTitle !== undefined) update[path('jobTitle')] = text(fields.jobTitle)\n  if (fields.address !== undefined) {\n    update[path('address')] = fields.address ?? FieldValue.delete()\n  }\n  if (fields.notes !== undefined) update[path('notes')] = fields.notes\n  if (fields.tags !== undefined) update[path('tags')] = fields.tags\n\n  const held = (readContactFacet(contact, groupId).tags ?? []).map((tag) =>\n    String(tag).toLowerCase(),\n  )\n  if (fields.addTag && !held.includes(fields.addTag)) {\n    // The record page's cap, which a selection must not slip past.\n    if (held.length >= CONTACT_TAGS_MAX) {\n      return { refused: `already has ${CONTACT_TAGS_MAX} tags` }\n    }\n    update[path('tags')] = FieldValue.arrayUnion(fields.addTag)\n  }\n  if (fields.removeTag && held.includes(fields.removeTag)) {\n    update[path('tags')] = FieldValue.arrayRemove(fields.removeTag)\n  }\n  if (fields.campaignIds !== undefined) {\n    update[contactCampaignFieldPath(groupId)] = fields.campaignIds\n  }\n  if (fields.ownerUid !== undefined) update[path('ownerUid')] = text(fields.ownerUid)\n\n  if (fields.companyId !== undefined) {\n    const plan = planContactCompanyLink(\n      readContactCompanyLink(contact, groupId),\n      fields.companyId,\n    )\n    if (plan) {\n      Object.assign(update, contactCompanyLinkFields(plan, groupId))\n      counts = plan.counts\n      if (fields.companyName === undefined) {\n        // The label follows the link: the company's own name, or nothing.\n        const label = plan.companyId ? linkedCompanyName : ''\n        update[path('companyName')] = text(label)\n        // The search echo — see `HostContact.companyName`.\n        update['companyName'] = text(label)\n      }\n    }\n  }\n  if (fields.companyName !== undefined) {\n    update[path('companyName')] = text(fields.companyName)\n    update['companyName'] = text(fields.companyName)\n  }\n  for (const [key, value] of Object.entries(custom ?? {})) {\n    update[path(`custom.${key}`)] = value\n  }\n  if (fields.mediaIds !== undefined) update[path(CRM_MEDIA_IDS_FIELD)] = fields.mediaIds\n\n  if (!Object.keys(update).length) return { update: null, counts }\n  update['updatedAt'] = FieldValue.serverTimestamp()\n  return { update, counts }\n}\n\n/**\n * Every write in one batch, and — when the batch is refused — each on its\n * own, so the contact that could not be written is the only one reported.\n * Answers the ids that were not written.\n */\nasync function commitContactWrites(\n  firestore: FirebaseFirestore.Firestore,\n  writes: readonly ContactWrite[],\n): Promise<Set<string>> {\n  const failed = new Set<string>()\n  if (!writes.length) return failed\n  const batch = firestore.batch()\n  for (const write of writes) batch.update(write.ref, write.update)\n  try {\n    await batch.commit()\n    return failed\n  } catch {\n    // A batch names no document; the pass below finds the one it was.\n  }\n  for (const write of writes) {\n    try {\n      await write.ref.update(write.update)\n    } catch (error) {\n      console.error('[crm] contact-update could not write a contact', write.contactId, error)\n      failed.add(write.contactId)\n    }\n  }\n  return failed\n}\n\n/** Each company's contacts count moved once, by the sum of what the written links moved. */\nasync function settleCompanyCounts(\n  companies: FirebaseFirestore.CollectionReference,\n  writes: readonly ContactWrite[],\n): Promise<void> {\n  const deltas = new Map<string, number>()\n  for (const write of writes) {\n    for (const count of write.counts) {\n      deltas.set(count.companyId, (deltas.get(count.companyId) ?? 0) + count.delta)\n    }\n  }\n  await Promise.all(\n    [...deltas]\n      .filter(([, delta]) => delta !== 0)\n      .map(([companyId, delta]) =>\n        companies\n          .doc(companyId)\n          .update(companyContactsCountFields(delta))\n          .catch((error: unknown) => {\n            console.error('[crm] company contacts count could not move', companyId, delta, error)\n          }),\n      ),\n  )\n}\n\nexport const crmContactUpdateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const contactIds = readContactIds(body['contactIds'])\n  if (!contactIds) {\n    res.status(400).json({ error: `Name between 1 and ${CRM_CONTACT_UPDATE_MAX} contacts.` })\n    return\n  }\n  const read = readContactUpdateFields(body['set'])\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const { fields } = read\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    if (scope.level === 'site' && !reachesSite(writer, scope.hostId)) {\n      res.status(403).json({ error: 'Your access to this organization does not reach this site.' })\n      return\n    }\n    // The plan after the person, and before any contact is read (AGL-2787).\n    const suite = crmSuiteRefusal(writer.org, contactUpdateSuiteAct(fields))\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(writer.orgId)\n    const siteGroup =\n      scope.level === 'site' ? consentGroupForHost(writer.org, scope.hostId) : null\n    const siteTokens = siteGroup ? crmReadTokens(siteGroup) : null\n\n    let custom: Record<string, ContactCustomValue> | undefined\n    if (fields.custom) {\n      const definitions = await orgRef\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        fields.custom,\n        definitions.docs.map((doc) => doc.data() as ContactFieldDefinition),\n        'contact',\n      )\n      if ('errors' in judged) {\n        res.status(400).json({\n          error: Object.values(judged.errors)[0] ?? 'A custom value could not be saved.',\n        })\n        return\n      }\n      custom = judged.values\n    }\n\n    if (fields.ownerUid) {\n      const owner = await resolveOrgMembership(fields.ownerUid, writer.orgId).catch(() => null)\n      if (!owner?.member) {\n        res.status(400).json({ error: 'The owner is not a member of this organization.' })\n        return\n      }\n    }\n\n    // The company a link names has to exist and be visible to the caller and\n    // the site, or a person could be filed under a record nobody here can open.\n    let linkedCompanyName = ''\n    if (fields.companyId) {\n      const company = await orgRef\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(fields.companyId)\n        .get()\n      const tokens = company.exists ? (company.get('visibleTo') as string[] | undefined) : undefined\n      const visible =\n        company.exists &&\n        canReach(writer, tokens) &&\n        (!siteTokens || visibleToTokens(tokens, siteTokens))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      linkedCompanyName = typed(company.get('name'), 120)\n    }\n\n    const contacts = orgRef.collection('contacts')\n    const snapshots = await firestore.getAll(...contactIds.map((id) => contacts.doc(id)))\n    const outcomes = new Map<string, ContactUpdateOutcome>()\n    const writes: ContactWrite[] = []\n    snapshots.forEach((snapshot, index) => {\n      const contactId = contactIds[index]\n      if (!snapshot.exists) {\n        outcomes.set(contactId, refused(contactId, 'That contact no longer exists.'))\n        return\n      }\n      const data = (snapshot.data() ?? {}) as Record<string, unknown>\n      const visibleTo = data['visibleTo'] as string[] | undefined\n      if (!canReach(writer, visibleTo)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to you.'))\n        return\n      }\n      if (siteTokens && !visibleToTokens(visibleTo, siteTokens)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to this site.'))\n        return\n      }\n      const group = siteGroup ?? contactPrimaryGroup(data, writer.org)\n      if (!group.groupId) {\n        outcomes.set(contactId, refused(contactId, NO_HOLDER_REFUSAL))\n        return\n      }\n      const patch = contactPatch(data, group.groupId, fields, custom, linkedCompanyName)\n      if ('refused' in patch) {\n        outcomes.set(contactId, refused(contactId, patch.refused))\n        return\n      }\n      outcomes.set(contactId, { contactId, ok: true })\n      if (patch.update) {\n        writes.push({ contactId, ref: snapshot.ref, update: patch.update, counts: patch.counts })\n      }\n    })\n\n    const failed = await commitContactWrites(firestore, writes)\n    for (const contactId of failed) {\n      outcomes.set(contactId, refused(contactId, 'The contact could not be saved.'))\n    }\n    await settleCompanyCounts(\n      orgRef.collection(CRM_COLLECTIONS.companies),\n      writes.filter((write) => !failed.has(write.contactId)),\n    )\n\n    const answer: ContactUpdateResponse = {\n      ok: true,\n      results: contactIds.map(\n        (contactId) => outcomes.get(contactId) ?? refused(contactId, 'The contact could not be saved.'),\n      ),\n    }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] contact-update failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n"],"names":["consentGroupForHost","CONTACT_FIELDS_MAX_PER_ORG","campaignMembershipValue","contactCampaignFieldPath","contactFacetPath","contactPrimaryGroup","CRM_COLLECTIONS","CRM_MEDIA_IDS_FIELD","crmReadTokens","isOrgWideMember","normalizeAddress","normalizeCrmMediaIds","normalizePhone","planContactCompanyLink","readContactCompanyLink","readContactFacet","readCrmCustomInput","visibleToTokens","companyContactsCountFields","contactCompanyLinkFields","firebaseAdmin","resolveOrgMembership","FieldValue","CONTACT_UPDATE_FIELDS","CRM_CONTACT_UPDATE_MAX","CONTACT_NOTES_MAX","CONTACT_PHONE_REFUSAL","CONTACT_TAGS_MAX","normalizeTags","readBulkTag","typed","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","canReach","SUITE_ACTS","name","phone","jobTitle","address","notes","tags","addTag","removeTag","campaignIds","ownerUid","companyId","companyName","custom","mediaIds","NO_HOLDER_REFUSAL","contactUpdateSuiteAct","fields","field","find","key","undefined","readContactUpdateFields","input","raw","Array","isArray","ok","error","unknownKey","Object","keys","includes","text","String","slice","filter","length","tag","ids","map","id","readContactIds","value","some","Set","reachesSite","writer","hostId","staff","member","Boolean","hostAccess","refused","contactId","contactPatch","contact","groupId","linkedCompanyName","path","delete","update","counts","held","toLowerCase","arrayUnion","arrayRemove","plan","assign","label","entries","serverTimestamp","commitContactWrites","firestore","writes","failed","batch","write","ref","commit","console","add","settleCompanyCounts","companies","deltas","Map","count","set","get","delta","Promise","all","doc","catch","crmContactUpdateHandler","req","res","method","setHeader","status","json","body","scope","contactIds","read","suiteAct","level","suite","org","app","orgRef","collection","orgId","siteGroup","siteTokens","definitions","contactFields","limit","judged","docs","data","values","errors","owner","company","tokens","exists","visible","contacts","snapshots","getAll","outcomes","forEach","snapshot","index","visibleTo","group","patch","push","has","answer","results"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDC,GAED,SAEEA,mBAAmB,EACnBC,0BAA0B,EAI1BC,uBAAuB,EACvBC,wBAAwB,EACxBC,gBAAgB,EAChBC,mBAAmB,EACnBC,eAAe,EACfC,mBAAmB,EACnBC,aAAa,EACbC,eAAe,EACfC,gBAAgB,EAChBC,oBAAoB,EACpBC,cAAc,EAEdC,sBAAsB,EACtBC,sBAAsB,EACtBC,gBAAgB,EAChBC,kBAAkB,EAClBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,0BAA0B,EAC1BC,wBAAwB,EACxBC,aAAa,EACbC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,qBAAqB,EAIrBC,sBAAsB,QACjB,6BAAyB;AAChC,SACEC,iBAAiB,EACjBC,qBAAqB,EACrBC,gBAAgB,EAChBC,aAAa,EACbC,WAAW,EACXC,KAAK,QACA,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,EAAEC,QAAQ,QAAqB,mBAAe;AAEzE,kEAAkE,GAClE,MAAMC,aAAwD;IAC5DC,MAAM;IACNC,OAAO;IACPC,UAAU;IACVC,SAAS;IACTC,OAAO;IACPC,MAAM;IACNC,QAAQ;IACRC,WAAW;IACXC,aAAa;IACbC,UAAU;IACVC,WAAW;IACXC,aAAa;IACbC,QAAQ;IACRC,UAAU;AACZ;AAEA,wEAAwE,GACxE,MAAMC,oBAAoB;AAE1B;;;;CAIC,GACD,OAAO,SAASC,sBAAsBC,MAA2B;IAC/D,MAAMC,QAAQ9B,sBAAsB+B,IAAI,CAAC,CAACC,MAAQH,MAAM,CAACG,IAAI,KAAKC;IAClE,OAAOH,QAAQlB,UAAU,CAACkB,MAAM,GAAG;AACrC;AAEA;;;;CAIC,GACD,OAAO,SAASI,wBACdC,KAAc;QA4B4BC;IA1B1C,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYE,MAAMC,OAAO,CAACH,QAAQ;QAC/D,OAAO;YAAEI,IAAI;YAAOC,OAAO;QAA2B;IACxD;IACA,MAAMJ,MAAMD;IACZ,MAAMM,aAAaC,OAAOC,IAAI,CAACP,KAAKL,IAAI,CACtC,CAACC,MAAQ,CAAC,AAAChC,sBAA4C4C,QAAQ,CAACZ;IAElE,IAAIS,YAAY;QACd,OAAO;YAAEF,IAAI;YAAOC,OAAO,CAAC,CAAC,EAAEC,WAAW,2CAA2C,CAAC;QAAC;IACzF;IACA,MAAMZ,SAA8B,CAAC;IACrC,IAAI,UAAUO,KAAKP,OAAOhB,IAAI,GAAGN,MAAM6B,GAAG,CAAC,OAAO,EAAE;IACpD,IAAI,WAAWA,KAAK;QAClB,MAAMS,OAAOtC,MAAM6B,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAMtB,QAAQ+B,OAAOxD,eAAewD,QAAQ;QAC5C,IAAI/B,UAAU,MAAM,OAAO;YAAEyB,IAAI;YAAOC,OAAOrC;QAAsB;QACrE0B,OAAOf,KAAK,GAAGA;IACjB;IACA,IAAI,cAAcsB,KAAKP,OAAOd,QAAQ,GAAGR,MAAM6B,GAAG,CAAC,WAAW,EAAE;IAChE,IAAI,aAAaA,KAAK;QACpB,MAAMpB,UAAUoB,GAAG,CAAC,UAAU;QAC9BP,OAAOb,OAAO,GACZA,WAAW,OAAOA,YAAY,YAAY,CAACqB,MAAMC,OAAO,CAACtB,WACrD7B,iBAAiB6B,WACjB;IACR;IACA,IAAI,WAAWoB,KAAKP,OAAOZ,KAAK,GAAG6B,QAAOV,aAAAA,GAAG,CAAC,QAAQ,YAAZA,aAAgB,IAAIW,KAAK,CAAC,GAAG7C;IACvE,yEAAyE;IACzE,uDAAuD;IACvD,IAAI;QAAC;QAAQ;QAAU;KAAY,CAAC8C,MAAM,CAAC,CAAChB,MAAQA,OAAOI,KAAKa,MAAM,GAAG,GAAG;QAC1E,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAgE;IAC7F;IACA,IAAI,UAAUJ,KAAK;QACjB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,OAAO,GAAG,OAAO;YAAEG,IAAI;YAAOC,OAAO;QAAuB;QACnFX,OAAOX,IAAI,GAAGb,cAAc+B,GAAG,CAAC,OAAO;IACzC;IACA,KAAK,MAAMJ,OAAO;QAAC;QAAU;KAAY,CAAW;QAClD,IAAI,CAAEA,CAAAA,OAAOI,GAAE,GAAI;QACnB,MAAMc,MAAM5C,YAAY8B,GAAG,CAACJ,IAAI;QAChC,IAAI,CAACkB,KAAK,OAAO;YAAEX,IAAI;YAAOC,OAAO;QAAgB;QACrDX,MAAM,CAACG,IAAI,GAAGkB;IAChB;IACA,IAAI,iBAAiBd,KAAK;QACxB,MAAMe,MAAMf,GAAG,CAAC,cAAc;QAC9B,IAAI,CAACC,MAAMC,OAAO,CAACa,MAAM,OAAO;YAAEZ,IAAI;YAAOC,OAAO;QAA4B;QAChFX,OAAOR,WAAW,GAAG1C,wBAAwBwE,IAAIC,GAAG,CAAC,CAACC,KAAOP,OAAOO,aAAAA,KAAM;IAC5E;IACA,IAAI,cAAcjB,KAAKP,OAAOP,QAAQ,GAAGf,MAAM6B,GAAG,CAAC,WAAW,EAAE;IAChE,IAAI,eAAeA,KAAK;QACtB,MAAMb,YAAYa,GAAG,CAAC,YAAY,KAAK,OAAO,OAAO7B,MAAM6B,GAAG,CAAC,YAAY,EAAE;QAC7E,IAAIb,cAAc,QAAS,CAAA,CAACA,aAAaA,UAAUqB,QAAQ,CAAC,IAAG,GAAI;YACjE,OAAO;gBAAEL,IAAI;gBAAOC,OAAO;YAAiC;QAC9D;QACAX,OAAON,SAAS,GAAGA;IACrB;IACA,IAAI,iBAAiBa,KAAKP,OAAOL,WAAW,GAAGjB,MAAM6B,GAAG,CAAC,cAAc,EAAE;IACzE,IAAI,YAAYA,KAAK;QACnB,MAAMX,SAASW,GAAG,CAAC,SAAS;QAC5B,IAAI,CAACX,UAAU,OAAOA,WAAW,YAAYY,MAAMC,OAAO,CAACb,SAAS;YAClE,OAAO;gBAAEc,IAAI;gBAAOC,OAAO;YAAmD;QAChF;QACAX,OAAOJ,MAAM,GAAGA;IAClB;IACA,IAAI,cAAcW,KAAK;QACrB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,WAAW,GAAG;YACnC,OAAO;gBAAEG,IAAI;gBAAOC,OAAO;YAA+B;QAC5D;QACAX,OAAOH,QAAQ,GAAGtC,qBAAqBgD,GAAG,CAAC,WAAW;IACxD;IACA,IAAI,CAACM,OAAOC,IAAI,CAACd,QAAQoB,MAAM,EAAE,OAAO;QAAEV,IAAI;QAAOC,OAAO;IAA2B;IACvF,OAAO;QAAED,IAAI;QAAMV;IAAO;AAC5B;AAEA,iGAAiG,GACjG,SAASyB,eAAeC,KAAc;IACpC,IAAI,CAAClB,MAAMC,OAAO,CAACiB,UAAU,CAACA,MAAMN,MAAM,IAAIM,MAAMN,MAAM,GAAGhD,wBAAwB;QACnF,OAAO;IACT;IACA,MAAMkD,MAAMI,MAAMH,GAAG,CAAC,CAACC,KAAO9C,MAAM8C,IAAI;IACxC,IAAIF,IAAIK,IAAI,CAAC,CAACH,KAAO,CAACA,MAAMA,GAAGT,QAAQ,CAAC,OAAO,OAAO;IACtD,OAAO;WAAI,IAAIa,IAAIN;KAAK;AAC1B;AAEA;;;;;CAKC,GACD,SAASO,YAAYC,MAAc,EAAEC,MAAc;QAItCD,2BAAAA;IAHX,OACEA,OAAOE,KAAK,IACZ3E,gBAAgByE,OAAOG,MAAM,KAC7BC,SAASJ,iBAAAA,OAAOG,MAAM,sBAAbH,4BAAAA,eAAeK,UAAU,qBAA1B,AAACL,yBAAmE,CAACC,OAAO;AAExF;AAEA,MAAMK,UAAU,CAACC,WAAmB1B,QAAyC,CAAA;QAC3E0B;QACA3B,IAAI;QACJC;IACF,CAAA;AASA;;;;CAIC,GACD,SAAS2B,aACPC,OAAgC,EAChCC,OAAe,EACfxC,MAA2B,EAC3BJ,MAAsD,EACtD6C,iBAAyB;QAuBX9E;IAnBd,MAAM+E,OAAO,CAACzC,QAAkBjD,iBAAiBwF,SAASvC;IAC1D,+DAA+D,GAC/D,MAAMe,OAAO,CAACU,QAAkBA,SAASxD,WAAWyE,MAAM;IAC1D,MAAMC,SAAkC,CAAC;IACzC,IAAIC,SAA2C,EAAE;IAEjD,IAAI7C,OAAOhB,IAAI,KAAKoB,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1B,KAAKhB,OAAOhB,IAAI;IACtE,IAAIgB,OAAOf,KAAK,KAAKmB,WAAW;QAC9BwC,MAAM,CAACF,KAAK,SAAS,GAAG1B,KAAKhB,OAAOf,KAAK;QACzC,6CAA6C;QAC7C2D,MAAM,CAAC,QAAQ,GAAG5B,KAAKhB,OAAOf,KAAK;IACrC;IACA,IAAIe,OAAOd,QAAQ,KAAKkB,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOd,QAAQ;IAClF,IAAIc,OAAOb,OAAO,KAAKiB,WAAW;YACNJ;QAA1B4C,MAAM,CAACF,KAAK,WAAW,IAAG1C,kBAAAA,OAAOb,OAAO,YAAda,kBAAkB9B,WAAWyE,MAAM;IAC/D;IACA,IAAI3C,OAAOZ,KAAK,KAAKgB,WAAWwC,MAAM,CAACF,KAAK,SAAS,GAAG1C,OAAOZ,KAAK;IACpE,IAAIY,OAAOX,IAAI,KAAKe,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1C,OAAOX,IAAI;IAEjE,MAAMyD,OAAO,EAACnF,yBAAAA,iBAAiB4E,SAASC,SAASnD,IAAI,YAAvC1B,yBAA2C,EAAE,EAAE4D,GAAG,CAAC,CAACF,MAChEJ,OAAOI,KAAK0B,WAAW;IAEzB,IAAI/C,OAAOV,MAAM,IAAI,CAACwD,KAAK/B,QAAQ,CAACf,OAAOV,MAAM,GAAG;QAClD,+DAA+D;QAC/D,IAAIwD,KAAK1B,MAAM,IAAI7C,kBAAkB;YACnC,OAAO;gBAAE6D,SAAS,CAAC,YAAY,EAAE7D,iBAAiB,KAAK,CAAC;YAAC;QAC3D;QACAqE,MAAM,CAACF,KAAK,QAAQ,GAAGxE,WAAW8E,UAAU,CAAChD,OAAOV,MAAM;IAC5D;IACA,IAAIU,OAAOT,SAAS,IAAIuD,KAAK/B,QAAQ,CAACf,OAAOT,SAAS,GAAG;QACvDqD,MAAM,CAACF,KAAK,QAAQ,GAAGxE,WAAW+E,WAAW,CAACjD,OAAOT,SAAS;IAChE;IACA,IAAIS,OAAOR,WAAW,KAAKY,WAAW;QACpCwC,MAAM,CAAC7F,yBAAyByF,SAAS,GAAGxC,OAAOR,WAAW;IAChE;IACA,IAAIQ,OAAOP,QAAQ,KAAKW,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOP,QAAQ;IAElF,IAAIO,OAAON,SAAS,KAAKU,WAAW;QAClC,MAAM8C,OAAOzF,uBACXC,uBAAuB6E,SAASC,UAChCxC,OAAON,SAAS;QAElB,IAAIwD,MAAM;YACRrC,OAAOsC,MAAM,CAACP,QAAQ7E,yBAAyBmF,MAAMV;YACrDK,SAASK,KAAKL,MAAM;YACpB,IAAI7C,OAAOL,WAAW,KAAKS,WAAW;gBACpC,kEAAkE;gBAClE,MAAMgD,QAAQF,KAAKxD,SAAS,GAAG+C,oBAAoB;gBACnDG,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKoC;gBACnC,mDAAmD;gBACnDR,MAAM,CAAC,cAAc,GAAG5B,KAAKoC;YAC/B;QACF;IACF;IACA,IAAIpD,OAAOL,WAAW,KAAKS,WAAW;QACpCwC,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKhB,OAAOL,WAAW;QACrDiD,MAAM,CAAC,cAAc,GAAG5B,KAAKhB,OAAOL,WAAW;IACjD;IACA,KAAK,MAAM,CAACQ,KAAKuB,MAAM,IAAIb,OAAOwC,OAAO,CAACzD,iBAAAA,SAAU,CAAC,GAAI;QACvDgD,MAAM,CAACF,KAAK,CAAC,OAAO,EAAEvC,KAAK,EAAE,GAAGuB;IAClC;IACA,IAAI1B,OAAOH,QAAQ,KAAKO,WAAWwC,MAAM,CAACF,KAAKvF,qBAAqB,GAAG6C,OAAOH,QAAQ;IAEtF,IAAI,CAACgB,OAAOC,IAAI,CAAC8B,QAAQxB,MAAM,EAAE,OAAO;QAAEwB,QAAQ;QAAMC;IAAO;IAC/DD,MAAM,CAAC,YAAY,GAAG1E,WAAWoF,eAAe;IAChD,OAAO;QAAEV;QAAQC;IAAO;AAC1B;AAEA;;;;CAIC,GACD,eAAeU,oBACbC,SAAsC,EACtCC,MAA+B;IAE/B,MAAMC,SAAS,IAAI9B;IACnB,IAAI,CAAC6B,OAAOrC,MAAM,EAAE,OAAOsC;IAC3B,MAAMC,QAAQH,UAAUG,KAAK;IAC7B,KAAK,MAAMC,SAASH,OAAQE,MAAMf,MAAM,CAACgB,MAAMC,GAAG,EAAED,MAAMhB,MAAM;IAChE,IAAI;QACF,MAAMe,MAAMG,MAAM;QAClB,OAAOJ;IACT,EAAE,eAAM;IACN,kEAAkE;IACpE;IACA,KAAK,MAAME,SAASH,OAAQ;QAC1B,IAAI;YACF,MAAMG,MAAMC,GAAG,CAACjB,MAAM,CAACgB,MAAMhB,MAAM;QACrC,EAAE,OAAOjC,OAAO;YACdoD,QAAQpD,KAAK,CAAC,kDAAkDiD,MAAMvB,SAAS,EAAE1B;YACjF+C,OAAOM,GAAG,CAACJ,MAAMvB,SAAS;QAC5B;IACF;IACA,OAAOqB;AACT;AAEA,0FAA0F,GAC1F,eAAeO,oBACbC,SAAgD,EAChDT,MAA+B;IAE/B,MAAMU,SAAS,IAAIC;IACnB,KAAK,MAAMR,SAASH,OAAQ;QAC1B,KAAK,MAAMY,SAAST,MAAMf,MAAM,CAAE;gBACHsB;YAA7BA,OAAOG,GAAG,CAACD,MAAM3E,SAAS,EAAE,EAACyE,cAAAA,OAAOI,GAAG,CAACF,MAAM3E,SAAS,aAA1ByE,cAA+B,KAAKE,MAAMG,KAAK;QAC9E;IACF;IACA,MAAMC,QAAQC,GAAG,CACf;WAAIP;KAAO,CACRhD,MAAM,CAAC,CAAC,GAAGqD,MAAM,GAAKA,UAAU,GAChCjD,GAAG,CAAC,CAAC,CAAC7B,WAAW8E,MAAM,GACtBN,UACGS,GAAG,CAACjF,WACJkD,MAAM,CAAC9E,2BAA2B0G,QAClCI,KAAK,CAAC,CAACjE;YACNoD,QAAQpD,KAAK,CAAC,+CAA+CjB,WAAW8E,OAAO7D;QACjF;AAGV;AAEA,OAAO,MAAMkE,0BAA4C,OAAOC,KAAKC;QAMrDD;IALd,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAqB;QACnD;IACF;IACA,MAAMyE,QAAQN,YAAAA,IAAIM,IAAI,YAARN,YAAY,CAAC;IAC3B,MAAMO,QAAQ1G,kBAAkByG;IAChC,IAAI,CAACC,OAAO;QACVN,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM2E,aAAa7D,eAAe2D,IAAI,CAAC,aAAa;IACpD,IAAI,CAACE,YAAY;QACfP,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO,CAAC,mBAAmB,EAAEvC,uBAAuB,UAAU,CAAC;QAAC;QACvF;IACF;IACA,MAAMmH,OAAOlF,wBAAwB+E,IAAI,CAAC,MAAM;IAChD,IAAIG,KAAK7E,EAAE,KAAK,OAAO;QACrBqE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO4E,KAAK5E,KAAK;QAAC;QACzC;IACF;IACA,MAAM,EAAEX,MAAM,EAAE,GAAGuF;IAEnB,IAAI;QACF,MAAMzD,SAAS,MAAMjD,mBAAmBiG,KAAKO,OAAO;YAAEG,UAAU;QAAK;QACrE,IAAI1D,OAAOpB,EAAE,KAAK,OAAO;YACvBqE,IAAIG,MAAM,CAACpD,OAAOoD,MAAM,EAAEC,IAAI,CAACrD,OAAOsD,IAAI;YAC1C;QACF;QACA,IAAIC,MAAMI,KAAK,KAAK,UAAU,CAAC5D,YAAYC,QAAQuD,MAAMtD,MAAM,GAAG;YAChEgD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAExE,OAAO;YAA6D;YAC3F;QACF;QACA,wEAAwE;QACxE,MAAM+E,QAAQ9G,gBAAgBkD,OAAO6D,GAAG,EAAE5F,sBAAsBC;QAChE,IAAI0F,OAAO;YACTX,IAAIG,MAAM,CAACQ,MAAMR,MAAM,EAAEC,IAAI,CAACO,MAAMN,IAAI;YACxC;QACF;QAEA,MAAM5B,YAAYxF,cAAc4H,GAAG,GAAGpC,SAAS;QAC/C,MAAMqC,SAASrC,UAAUsC,UAAU,CAAC,QAAQnB,GAAG,CAAC7C,OAAOiE,KAAK;QAC5D,MAAMC,YACJX,MAAMI,KAAK,KAAK,SAAS7I,oBAAoBkF,OAAO6D,GAAG,EAAEN,MAAMtD,MAAM,IAAI;QAC3E,MAAMkE,aAAaD,YAAY5I,cAAc4I,aAAa;QAE1D,IAAIpG;QACJ,IAAII,OAAOJ,MAAM,EAAE;YACjB,MAAMsG,cAAc,MAAML,OACvBC,UAAU,CAAC5I,gBAAgBiJ,aAAa,EACxCC,KAAK,CAACvJ,4BACN0H,GAAG;YACN,MAAM8B,SAASzI,mBACboC,OAAOJ,MAAM,EACbsG,YAAYI,IAAI,CAAC/E,GAAG,CAAC,CAACoD,MAAQA,IAAI4B,IAAI,KACtC;YAEF,IAAI,YAAYF,QAAQ;oBAEbxF;gBADTkE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBxE,KAAK,GAAEE,kBAAAA,OAAO2F,MAAM,CAACH,OAAOI,MAAM,CAAC,CAAC,EAAE,YAA/B5F,kBAAmC;gBAC5C;gBACA;YACF;YACAjB,SAASyG,OAAOG,MAAM;QACxB;QAEA,IAAIxG,OAAOP,QAAQ,EAAE;YACnB,MAAMiH,QAAQ,MAAMzI,qBAAqB+B,OAAOP,QAAQ,EAAEqC,OAAOiE,KAAK,EAAEnB,KAAK,CAAC,IAAM;YACpF,IAAI,EAAC8B,yBAAAA,MAAOzE,MAAM,GAAE;gBAClB8C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAExE,OAAO;gBAAkD;gBAChF;YACF;QACF;QAEA,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI8B,oBAAoB;QACxB,IAAIzC,OAAON,SAAS,EAAE;YACpB,MAAMiH,UAAU,MAAMd,OACnBC,UAAU,CAAC5I,gBAAgBgH,SAAS,EACpCS,GAAG,CAAC3E,OAAON,SAAS,EACpB6E,GAAG;YACN,MAAMqC,SAASD,QAAQE,MAAM,GAAIF,QAAQpC,GAAG,CAAC,eAAwCnE;YACrF,MAAM0G,UACJH,QAAQE,MAAM,IACd/H,SAASgD,QAAQ8E,WAChB,CAAA,CAACX,cAAcpI,gBAAgB+I,QAAQX,WAAU;YACpD,IAAI,CAACa,SAAS;gBACZ/B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAExE,OAAO;gBAAkB;gBAChD;YACF;YACA8B,oBAAoB/D,MAAMiI,QAAQpC,GAAG,CAAC,SAAS;QACjD;QAEA,MAAMwC,WAAWlB,OAAOC,UAAU,CAAC;QACnC,MAAMkB,YAAY,MAAMxD,UAAUyD,MAAM,IAAI3B,WAAW/D,GAAG,CAAC,CAACC,KAAOuF,SAASpC,GAAG,CAACnD;QAChF,MAAM0F,WAAW,IAAI9C;QACrB,MAAMX,SAAyB,EAAE;QACjCuD,UAAUG,OAAO,CAAC,CAACC,UAAUC;gBAMbD;YALd,MAAM/E,YAAYiD,UAAU,CAAC+B,MAAM;YACnC,IAAI,CAACD,SAASP,MAAM,EAAE;gBACpBK,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMkE,QAAQa,iBAAAA,SAASb,IAAI,cAAba,iBAAmB,CAAC;YAClC,MAAME,YAAYf,IAAI,CAAC,YAAY;YACnC,IAAI,CAACzH,SAASgD,QAAQwF,YAAY;gBAChCJ,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,IAAI4D,cAAc,CAACpI,gBAAgByJ,WAAWrB,aAAa;gBACzDiB,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMkF,QAAQvB,oBAAAA,YAAa/I,oBAAoBsJ,MAAMzE,OAAO6D,GAAG;YAC/D,IAAI,CAAC4B,MAAM/E,OAAO,EAAE;gBAClB0E,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAWvC;gBAC3C;YACF;YACA,MAAM0H,QAAQlF,aAAaiE,MAAMgB,MAAM/E,OAAO,EAAExC,QAAQJ,QAAQ6C;YAChE,IAAI,aAAa+E,OAAO;gBACtBN,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAWmF,MAAMpF,OAAO;gBACxD;YACF;YACA8E,SAAS5C,GAAG,CAACjC,WAAW;gBAAEA;gBAAW3B,IAAI;YAAK;YAC9C,IAAI8G,MAAM5E,MAAM,EAAE;gBAChBa,OAAOgE,IAAI,CAAC;oBAAEpF;oBAAWwB,KAAKuD,SAASvD,GAAG;oBAAEjB,QAAQ4E,MAAM5E,MAAM;oBAAEC,QAAQ2E,MAAM3E,MAAM;gBAAC;YACzF;QACF;QAEA,MAAMa,SAAS,MAAMH,oBAAoBC,WAAWC;QACpD,KAAK,MAAMpB,aAAaqB,OAAQ;YAC9BwD,SAAS5C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;QAC7C;QACA,MAAM4B,oBACJ4B,OAAOC,UAAU,CAAC5I,gBAAgBgH,SAAS,GAC3CT,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOgE,GAAG,CAAC9D,MAAMvB,SAAS;QAGtD,MAAMsF,SAAgC;YACpCjH,IAAI;YACJkH,SAAStC,WAAW/D,GAAG,CACrB,CAACc;oBAAc6E;wBAAAA,gBAAAA,SAAS3C,GAAG,CAAClC,sBAAb6E,gBAA2B9E,QAAQC,WAAW;;QAEjE;QACA0C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACwC;IACvB,EAAE,OAAOhH,OAAO;QACdoD,QAAQpD,KAAK,CAAC,+BAA+BA;QAC7CoE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAkC;IAClE;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contact-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contact-update` — one holder's profile fields on one or\n * more contacts (AGL-2804).\n *\n * Body: `{ hostId, contactIds, set }` under a site, or `{ orgId, hostId?,\n * contactIds, set }` at the organization level, where `set` is\n * `ContactUpdateFields`. Answers `{ ok, results }`: one outcome per contact,\n * in the order the ids were sent.\n *\n * ## Why every facet write comes here\n *\n * A contact's fields live in the facet of the holder that keeps them —\n * `facets.{groupId}.*` — and the Firestore rules cannot tell one field of a\n * facet from another: the holder is a map key a rule cannot address, and a\n * write's affected keys name only `facets`. So the rules let a client update\n * change nothing in a facet beyond letting a holder go, and the console's\n * edits arrive here, where the plan is asked about the fields the request\n * actually carries.\n *\n * ## Who may call it\n *\n * The CRM writer the task routes admit (`authorizeCrmWriter`): under a site,\n * a member whose role writes org data, who holds `data.manage` and whose\n * access reaches the site; at the organization level, an org-wide member\n * with the permission. Each contact must then be one the caller may read —\n * the rules' `canReadScoped()` — and, under a site, one the site's hub lists.\n *\n * ## The plan\n *\n * Every field is the CRM's (AGL-2790), and a plan without the CRM has none\n * of it (AGL-2851), so it edits no contact: not the owner, company, custom\n * values or files, and not the profile a capture writes (name, phone, job\n * title, address), the tags, the notes or the campaign filing either. A\n * request carrying any field is refused to such a plan once the caller is\n * known, and before a contact is read — staff included, because the plan is\n * a fact about the workspace. Erasing a person is another route, open on\n * every plan.\n *\n * ## One holder, by dotted path\n *\n * Under a site the facet is the site's consent group's; at the organization\n * level it is each contact's own primary holder, the facet the record page\n * shows there. Every field is one dotted path — a nested `facets` object\n * would replace every other holder's map — and a text field sent empty is\n * deleted rather than stored blank, so \"no phone\" has one shape.\n *\n * ## Many contacts, one commit\n *\n * The contacts are read together and written in one batch. A batch that\n * fails is retried contact by contact, so the one that could not be written\n * is named and the rest still land. A company's contacts count follows the\n * link: summed per company and settled once the contacts are written, so a\n * company deleted in between cannot fail the save of the people at it — the\n * company page's live aggregate is what corrects a count that did not move.\n */\n\nimport {\n  type AglynPostalAddress,\n  consentGroupForHost,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactCompanyLinkPlan,\n  type ContactCustomValue,\n  type ContactFieldDefinition,\n  campaignMembershipValue,\n  contactCampaignFieldPath,\n  contactFacetPath,\n  contactPrimaryGroup,\n  CRM_COLLECTIONS,\n  CRM_LEAD_SOURCE_PICKLIST,\n  CRM_MEDIA_IDS_FIELD,\n  crmReadTokens,\n  effectiveCrmLeadSourcePicklist,\n  isOrgWideMember,\n  judgeCrmLeadSource,\n  normalizeAddress,\n  normalizeCrmMediaIds,\n  normalizeCrmPicklistLabel,\n  normalizePhone,\n  type PluginApiHandler,\n  planContactCompanyLink,\n  readContactCompanyLink,\n  readContactFacet,\n  readCrmCustomInput,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  companyContactsCountFields,\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CONTACT_UPDATE_FIELDS,\n  type ContactUpdateFields,\n  type ContactUpdateOutcome,\n  type ContactUpdateResponse,\n  CRM_CONTACT_UPDATE_MAX,\n} from '../model/contact-update'\nimport {\n  CONTACT_NOTES_MAX,\n  CONTACT_PHONE_REFUSAL,\n  CONTACT_TAGS_MAX,\n  normalizeTags,\n  readBulkTag,\n  typed,\n} from './contact-profile'\nimport { readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter, canReach, type Writer } from './task-routes'\n\n/** What the suite gate names for each field a request can carry. */\nconst SUITE_ACTS: Record<keyof ContactUpdateFields, string> = {\n  name: \"Editing a contact's profile\",\n  phone: \"Editing a contact's profile\",\n  jobTitle: \"Editing a contact's profile\",\n  leadSource: \"Editing a contact's profile\",\n  address: \"Editing a contact's profile\",\n  notes: \"Editing a contact's notes\",\n  tags: 'Tagging a contact',\n  addTag: 'Tagging a contact',\n  removeTag: 'Tagging a contact',\n  campaignIds: 'Filing a contact under a campaign',\n  ownerUid: \"Assigning a contact's owner\",\n  companyId: 'Filing a contact under a company',\n  companyName: 'Filing a contact under a company',\n  custom: \"Editing a contact's custom fields\",\n  mediaIds: 'Attaching files to a contact',\n}\n\n/** A contact read at the organization level that no site has captured. */\nconst NO_HOLDER_REFUSAL = 'No site holds this contact yet, so it has no profile to edit.'\n\n/**\n * The act a request is refused for on a plan without the CRM: the first\n * field it carries, in the order the route reads them. Every field is the\n * CRM's, so whichever field a request names is the act its refusal names.\n */\nexport function contactUpdateSuiteAct(fields: ContactUpdateFields): string {\n  const field = CONTACT_UPDATE_FIELDS.find((key) => fields[key] !== undefined)\n  return field ? SUITE_ACTS[field] : \"Editing a contact's profile\"\n}\n\n/**\n * A body's `set`, read into the fields it names, or the sentence refusing\n * it. A key the route does not save is refused rather than dropped: a save\n * that silently lost a field would read as a save that kept it.\n */\nexport function readContactUpdateFields(\n  input: unknown,\n): { ok: true; fields: ContactUpdateFields } | { ok: false; error: string } {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) {\n    return { ok: false, error: 'Name the fields to save.' }\n  }\n  const raw = input as Record<string, unknown>\n  const unknownKey = Object.keys(raw).find(\n    (key) => !(CONTACT_UPDATE_FIELDS as readonly string[]).includes(key),\n  )\n  if (unknownKey) {\n    return { ok: false, error: `\"${unknownKey}\" is not a field a contact's profile saves.` }\n  }\n  const fields: ContactUpdateFields = {}\n  if ('name' in raw) fields.name = typed(raw['name'], 120)\n  if ('phone' in raw) {\n    const text = typed(raw['phone'], 40)\n    const phone = text ? normalizePhone(text) : ''\n    if (phone === null) return { ok: false, error: CONTACT_PHONE_REFUSAL }\n    fields.phone = phone\n  }\n  if ('jobTitle' in raw) fields.jobTitle = typed(raw['jobTitle'], 120)\n  // Held to the label's shape here; judged against the org's list by the\n  // handler, which alone can read it (AGL-3298).\n  if ('leadSource' in raw) fields.leadSource = normalizeCrmPicklistLabel(raw['leadSource'])\n  if ('address' in raw) {\n    const address = raw['address']\n    fields.address =\n      address && typeof address === 'object' && !Array.isArray(address)\n        ? normalizeAddress(address as AglynPostalAddress)\n        : null\n  }\n  if ('notes' in raw) fields.notes = String(raw['notes'] ?? '').slice(0, CONTACT_NOTES_MAX)\n  // One write may carry one transform per field, so the tags are replaced,\n  // added to or taken from — never two of those at once.\n  if (['tags', 'addTag', 'removeTag'].filter((key) => key in raw).length > 1) {\n    return { ok: false, error: 'Send the tags, a tag to add or a tag to remove — one of them.' }\n  }\n  if ('tags' in raw) {\n    if (!Array.isArray(raw['tags'])) return { ok: false, error: 'Tags must be a list.' }\n    fields.tags = normalizeTags(raw['tags'])\n  }\n  for (const key of ['addTag', 'removeTag'] as const) {\n    if (!(key in raw)) continue\n    const tag = readBulkTag(raw[key])\n    if (!tag) return { ok: false, error: 'Name the tag.' }\n    fields[key] = tag\n  }\n  if ('campaignIds' in raw) {\n    const ids = raw['campaignIds']\n    if (!Array.isArray(ids)) return { ok: false, error: 'Campaigns must be a list.' }\n    fields.campaignIds = campaignMembershipValue(ids.map((id) => String(id ?? '')))\n  }\n  if ('ownerUid' in raw) fields.ownerUid = typed(raw['ownerUid'], 128)\n  if ('companyId' in raw) {\n    const companyId = raw['companyId'] === null ? null : typed(raw['companyId'], 128)\n    if (companyId !== null && (!companyId || companyId.includes('/'))) {\n      return { ok: false, error: 'The company could not be read.' }\n    }\n    fields.companyId = companyId\n  }\n  if ('companyName' in raw) fields.companyName = typed(raw['companyName'], 120)\n  if ('custom' in raw) {\n    const custom = raw['custom']\n    if (!custom || typeof custom !== 'object' || Array.isArray(custom)) {\n      return { ok: false, error: 'Custom fields must be values keyed by field key.' }\n    }\n    fields.custom = custom as Record<string, ContactCustomValue>\n  }\n  if ('mediaIds' in raw) {\n    if (!Array.isArray(raw['mediaIds'])) {\n      return { ok: false, error: 'Files must be a list of ids.' }\n    }\n    fields.mediaIds = normalizeCrmMediaIds(raw['mediaIds'])\n  }\n  if (!Object.keys(fields).length) return { ok: false, error: 'Name the fields to save.' }\n  return { ok: true, fields }\n}\n\n/** The ids a body names, deduplicated — or `null` when any is unreadable or there are too many. */\nfunction readContactIds(value: unknown): string[] | null {\n  if (!Array.isArray(value) || !value.length || value.length > CRM_CONTACT_UPDATE_MAX) {\n    return null\n  }\n  const ids = value.map((id) => typed(id, 200))\n  if (ids.some((id) => !id || id.includes('/'))) return null\n  return [...new Set(ids)]\n}\n\n/**\n * Under a site, whether the caller's access reaches it. The rules could not\n * ask this of a facet write — they cannot see which holder a write is for —\n * and a collaborator on one site must not write another site's notes on a\n * person both of them hold.\n */\nfunction reachesSite(writer: Writer, hostId: string): boolean {\n  return (\n    writer.staff ||\n    isOrgWideMember(writer.member) ||\n    Boolean((writer.member?.hostAccess as Record<string, unknown> | undefined)?.[hostId])\n  )\n}\n\nconst refused = (contactId: string, error: string): ContactUpdateOutcome => ({\n  contactId,\n  ok: false,\n  error,\n})\n\ninterface ContactWrite {\n  contactId: string\n  ref: FirebaseFirestore.DocumentReference\n  update: Record<string, unknown>\n  counts: ContactCompanyLinkPlan['counts']\n}\n\n/**\n * One contact's update for one holder, or the sentence refusing the row.\n * `update` is `null` when the document already says everything asked — a tag\n * the row already carries, a link already made.\n */\nfunction contactPatch(\n  contact: Record<string, unknown>,\n  groupId: string,\n  fields: ContactUpdateFields,\n  custom: Record<string, ContactCustomValue> | undefined,\n  linkedCompanyName: string,\n):\n  | { update: Record<string, unknown> | null; counts: ContactCompanyLinkPlan['counts'] }\n  | { refused: string } {\n  const path = (field: string) => contactFacetPath(groupId, field)\n  /** A text field as stored: the value, or the field's absence. */\n  const text = (value: string) => value || FieldValue.delete()\n  const update: Record<string, unknown> = {}\n  let counts: ContactCompanyLinkPlan['counts'] = []\n\n  if (fields.name !== undefined) update[path('name')] = text(fields.name)\n  if (fields.phone !== undefined) {\n    update[path('phone')] = text(fields.phone)\n    // The search echo — see `HostContact.phone`.\n    update['phone'] = text(fields.phone)\n  }\n  if (fields.jobTitle !== undefined) update[path('jobTitle')] = text(fields.jobTitle)\n  if (fields.leadSource !== undefined) update[path('leadSource')] = text(fields.leadSource)\n  if (fields.address !== undefined) {\n    update[path('address')] = fields.address ?? FieldValue.delete()\n  }\n  if (fields.notes !== undefined) update[path('notes')] = fields.notes\n  if (fields.tags !== undefined) update[path('tags')] = fields.tags\n\n  const held = (readContactFacet(contact, groupId).tags ?? []).map((tag) =>\n    String(tag).toLowerCase(),\n  )\n  if (fields.addTag && !held.includes(fields.addTag)) {\n    // The record page's cap, which a selection must not slip past.\n    if (held.length >= CONTACT_TAGS_MAX) {\n      return { refused: `already has ${CONTACT_TAGS_MAX} tags` }\n    }\n    update[path('tags')] = FieldValue.arrayUnion(fields.addTag)\n  }\n  if (fields.removeTag && held.includes(fields.removeTag)) {\n    update[path('tags')] = FieldValue.arrayRemove(fields.removeTag)\n  }\n  if (fields.campaignIds !== undefined) {\n    update[contactCampaignFieldPath(groupId)] = fields.campaignIds\n  }\n  if (fields.ownerUid !== undefined) update[path('ownerUid')] = text(fields.ownerUid)\n\n  if (fields.companyId !== undefined) {\n    const plan = planContactCompanyLink(\n      readContactCompanyLink(contact, groupId),\n      fields.companyId,\n    )\n    if (plan) {\n      Object.assign(update, contactCompanyLinkFields(plan, groupId))\n      counts = plan.counts\n      if (fields.companyName === undefined) {\n        // The label follows the link: the company's own name, or nothing.\n        const label = plan.companyId ? linkedCompanyName : ''\n        update[path('companyName')] = text(label)\n        // The search echo — see `HostContact.companyName`.\n        update['companyName'] = text(label)\n      }\n    }\n  }\n  if (fields.companyName !== undefined) {\n    update[path('companyName')] = text(fields.companyName)\n    update['companyName'] = text(fields.companyName)\n  }\n  for (const [key, value] of Object.entries(custom ?? {})) {\n    update[path(`custom.${key}`)] = value\n  }\n  if (fields.mediaIds !== undefined) update[path(CRM_MEDIA_IDS_FIELD)] = fields.mediaIds\n\n  if (!Object.keys(update).length) return { update: null, counts }\n  update['updatedAt'] = FieldValue.serverTimestamp()\n  return { update, counts }\n}\n\n/**\n * Every write in one batch, and — when the batch is refused — each on its\n * own, so the contact that could not be written is the only one reported.\n * Answers the ids that were not written.\n */\nasync function commitContactWrites(\n  firestore: FirebaseFirestore.Firestore,\n  writes: readonly ContactWrite[],\n): Promise<Set<string>> {\n  const failed = new Set<string>()\n  if (!writes.length) return failed\n  const batch = firestore.batch()\n  for (const write of writes) batch.update(write.ref, write.update)\n  try {\n    await batch.commit()\n    return failed\n  } catch {\n    // A batch names no document; the pass below finds the one it was.\n  }\n  for (const write of writes) {\n    try {\n      await write.ref.update(write.update)\n    } catch (error) {\n      console.error('[crm] contact-update could not write a contact', write.contactId, error)\n      failed.add(write.contactId)\n    }\n  }\n  return failed\n}\n\n/** Each company's contacts count moved once, by the sum of what the written links moved. */\nasync function settleCompanyCounts(\n  companies: FirebaseFirestore.CollectionReference,\n  writes: readonly ContactWrite[],\n): Promise<void> {\n  const deltas = new Map<string, number>()\n  for (const write of writes) {\n    for (const count of write.counts) {\n      deltas.set(count.companyId, (deltas.get(count.companyId) ?? 0) + count.delta)\n    }\n  }\n  await Promise.all(\n    [...deltas]\n      .filter(([, delta]) => delta !== 0)\n      .map(([companyId, delta]) =>\n        companies\n          .doc(companyId)\n          .update(companyContactsCountFields(delta))\n          .catch((error: unknown) => {\n            console.error('[crm] company contacts count could not move', companyId, delta, error)\n          }),\n      ),\n  )\n}\n\nexport const crmContactUpdateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const contactIds = readContactIds(body['contactIds'])\n  if (!contactIds) {\n    res.status(400).json({ error: `Name between 1 and ${CRM_CONTACT_UPDATE_MAX} contacts.` })\n    return\n  }\n  const read = readContactUpdateFields(body['set'])\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const { fields } = read\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    if (scope.level === 'site' && !reachesSite(writer, scope.hostId)) {\n      res.status(403).json({ error: 'Your access to this organization does not reach this site.' })\n      return\n    }\n    // The plan after the person, and before any contact is read (AGL-2787).\n    const suite = crmSuiteRefusal(writer.org, contactUpdateSuiteAct(fields))\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(writer.orgId)\n    const siteGroup =\n      scope.level === 'site' ? consentGroupForHost(writer.org, scope.hostId) : null\n    const siteTokens = siteGroup ? crmReadTokens(siteGroup) : null\n\n    let custom: Record<string, ContactCustomValue> | undefined\n    if (fields.custom) {\n      const definitions = await orgRef\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        fields.custom,\n        definitions.docs.map((doc) => doc.data() as ContactFieldDefinition),\n        'contact',\n      )\n      if ('errors' in judged) {\n        res.status(400).json({\n          error: Object.values(judged.errors)[0] ?? 'A custom value could not be saved.',\n        })\n        return\n      }\n      custom = judged.values\n    }\n\n    /*\n     * THE ORG'S LEAD SOURCES (AGL-3298), read only when the body names one.\n     * Judged per contact below, because a contact keeps the value it\n     * already holds even when the list has since deactivated it.\n     */\n    const leadSources = fields.leadSource\n      ? effectiveCrmLeadSourcePicklist(\n          (\n            await orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST).get()\n          ).data(),\n        )\n      : null\n\n    if (fields.ownerUid) {\n      const owner = await resolveOrgMembership(fields.ownerUid, writer.orgId).catch(() => null)\n      if (!owner?.member) {\n        res.status(400).json({ error: 'The owner is not a member of this organization.' })\n        return\n      }\n    }\n\n    // The company a link names has to exist and be visible to the caller and\n    // the site, or a person could be filed under a record nobody here can open.\n    let linkedCompanyName = ''\n    if (fields.companyId) {\n      const company = await orgRef\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(fields.companyId)\n        .get()\n      const tokens = company.exists ? (company.get('visibleTo') as string[] | undefined) : undefined\n      const visible =\n        company.exists &&\n        canReach(writer, tokens) &&\n        (!siteTokens || visibleToTokens(tokens, siteTokens))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      linkedCompanyName = typed(company.get('name'), 120)\n    }\n\n    const contacts = orgRef.collection('contacts')\n    const snapshots = await firestore.getAll(...contactIds.map((id) => contacts.doc(id)))\n    const outcomes = new Map<string, ContactUpdateOutcome>()\n    const writes: ContactWrite[] = []\n    snapshots.forEach((snapshot, index) => {\n      const contactId = contactIds[index]\n      if (!snapshot.exists) {\n        outcomes.set(contactId, refused(contactId, 'That contact no longer exists.'))\n        return\n      }\n      const data = (snapshot.data() ?? {}) as Record<string, unknown>\n      const visibleTo = data['visibleTo'] as string[] | undefined\n      if (!canReach(writer, visibleTo)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to you.'))\n        return\n      }\n      if (siteTokens && !visibleToTokens(visibleTo, siteTokens)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to this site.'))\n        return\n      }\n      const group = siteGroup ?? contactPrimaryGroup(data, writer.org)\n      if (!group.groupId) {\n        outcomes.set(contactId, refused(contactId, NO_HOLDER_REFUSAL))\n        return\n      }\n      let rowFields = fields\n      if (leadSources && fields.leadSource) {\n        const judged = judgeCrmLeadSource(\n          leadSources,\n          fields.leadSource,\n          readContactFacet(data, group.groupId).leadSource,\n        )\n        if (judged.ok === false) {\n          outcomes.set(contactId, refused(contactId, judged.error))\n          return\n        }\n        rowFields = { ...fields, leadSource: judged.value ?? '' }\n      }\n      const patch = contactPatch(data, group.groupId, rowFields, custom, linkedCompanyName)\n      if ('refused' in patch) {\n        outcomes.set(contactId, refused(contactId, patch.refused))\n        return\n      }\n      outcomes.set(contactId, { contactId, ok: true })\n      if (patch.update) {\n        writes.push({ contactId, ref: snapshot.ref, update: patch.update, counts: patch.counts })\n      }\n    })\n\n    const failed = await commitContactWrites(firestore, writes)\n    for (const contactId of failed) {\n      outcomes.set(contactId, refused(contactId, 'The contact could not be saved.'))\n    }\n    await settleCompanyCounts(\n      orgRef.collection(CRM_COLLECTIONS.companies),\n      writes.filter((write) => !failed.has(write.contactId)),\n    )\n\n    const answer: ContactUpdateResponse = {\n      ok: true,\n      results: contactIds.map(\n        (contactId) => outcomes.get(contactId) ?? refused(contactId, 'The contact could not be saved.'),\n      ),\n    }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] contact-update failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n"],"names":["consentGroupForHost","CONTACT_FIELDS_MAX_PER_ORG","campaignMembershipValue","contactCampaignFieldPath","contactFacetPath","contactPrimaryGroup","CRM_COLLECTIONS","CRM_LEAD_SOURCE_PICKLIST","CRM_MEDIA_IDS_FIELD","crmReadTokens","effectiveCrmLeadSourcePicklist","isOrgWideMember","judgeCrmLeadSource","normalizeAddress","normalizeCrmMediaIds","normalizeCrmPicklistLabel","normalizePhone","planContactCompanyLink","readContactCompanyLink","readContactFacet","readCrmCustomInput","visibleToTokens","companyContactsCountFields","contactCompanyLinkFields","firebaseAdmin","resolveOrgMembership","FieldValue","CONTACT_UPDATE_FIELDS","CRM_CONTACT_UPDATE_MAX","CONTACT_NOTES_MAX","CONTACT_PHONE_REFUSAL","CONTACT_TAGS_MAX","normalizeTags","readBulkTag","typed","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","canReach","SUITE_ACTS","name","phone","jobTitle","leadSource","address","notes","tags","addTag","removeTag","campaignIds","ownerUid","companyId","companyName","custom","mediaIds","NO_HOLDER_REFUSAL","contactUpdateSuiteAct","fields","field","find","key","undefined","readContactUpdateFields","input","raw","Array","isArray","ok","error","unknownKey","Object","keys","includes","text","String","slice","filter","length","tag","ids","map","id","readContactIds","value","some","Set","reachesSite","writer","hostId","staff","member","Boolean","hostAccess","refused","contactId","contactPatch","contact","groupId","linkedCompanyName","path","delete","update","counts","held","toLowerCase","arrayUnion","arrayRemove","plan","assign","label","entries","serverTimestamp","commitContactWrites","firestore","writes","failed","batch","write","ref","commit","console","add","settleCompanyCounts","companies","deltas","Map","count","set","get","delta","Promise","all","doc","catch","crmContactUpdateHandler","req","res","method","setHeader","status","json","body","scope","contactIds","read","suiteAct","level","suite","org","app","orgRef","collection","orgId","siteGroup","siteTokens","definitions","contactFields","limit","judged","docs","data","values","errors","leadSources","picklists","owner","company","tokens","exists","visible","contacts","snapshots","getAll","outcomes","forEach","snapshot","index","visibleTo","group","rowFields","patch","push","has","answer","results"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDC,GAED,SAEEA,mBAAmB,EACnBC,0BAA0B,EAI1BC,uBAAuB,EACvBC,wBAAwB,EACxBC,gBAAgB,EAChBC,mBAAmB,EACnBC,eAAe,EACfC,wBAAwB,EACxBC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,EAC9BC,eAAe,EACfC,kBAAkB,EAClBC,gBAAgB,EAChBC,oBAAoB,EACpBC,yBAAyB,EACzBC,cAAc,EAEdC,sBAAsB,EACtBC,sBAAsB,EACtBC,gBAAgB,EAChBC,kBAAkB,EAClBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,0BAA0B,EAC1BC,wBAAwB,EACxBC,aAAa,EACbC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,qBAAqB,EAIrBC,sBAAsB,QACjB,6BAAyB;AAChC,SACEC,iBAAiB,EACjBC,qBAAqB,EACrBC,gBAAgB,EAChBC,aAAa,EACbC,WAAW,EACXC,KAAK,QACA,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,EAAEC,QAAQ,QAAqB,mBAAe;AAEzE,kEAAkE,GAClE,MAAMC,aAAwD;IAC5DC,MAAM;IACNC,OAAO;IACPC,UAAU;IACVC,YAAY;IACZC,SAAS;IACTC,OAAO;IACPC,MAAM;IACNC,QAAQ;IACRC,WAAW;IACXC,aAAa;IACbC,UAAU;IACVC,WAAW;IACXC,aAAa;IACbC,QAAQ;IACRC,UAAU;AACZ;AAEA,wEAAwE,GACxE,MAAMC,oBAAoB;AAE1B;;;;CAIC,GACD,OAAO,SAASC,sBAAsBC,MAA2B;IAC/D,MAAMC,QAAQ/B,sBAAsBgC,IAAI,CAAC,CAACC,MAAQH,MAAM,CAACG,IAAI,KAAKC;IAClE,OAAOH,QAAQnB,UAAU,CAACmB,MAAM,GAAG;AACrC;AAEA;;;;CAIC,GACD,OAAO,SAASI,wBACdC,KAAc;QA+B4BC;IA7B1C,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYE,MAAMC,OAAO,CAACH,QAAQ;QAC/D,OAAO;YAAEI,IAAI;YAAOC,OAAO;QAA2B;IACxD;IACA,MAAMJ,MAAMD;IACZ,MAAMM,aAAaC,OAAOC,IAAI,CAACP,KAAKL,IAAI,CACtC,CAACC,MAAQ,CAAC,AAACjC,sBAA4C6C,QAAQ,CAACZ;IAElE,IAAIS,YAAY;QACd,OAAO;YAAEF,IAAI;YAAOC,OAAO,CAAC,CAAC,EAAEC,WAAW,2CAA2C,CAAC;QAAC;IACzF;IACA,MAAMZ,SAA8B,CAAC;IACrC,IAAI,UAAUO,KAAKP,OAAOjB,IAAI,GAAGN,MAAM8B,GAAG,CAAC,OAAO,EAAE;IACpD,IAAI,WAAWA,KAAK;QAClB,MAAMS,OAAOvC,MAAM8B,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAMvB,QAAQgC,OAAOzD,eAAeyD,QAAQ;QAC5C,IAAIhC,UAAU,MAAM,OAAO;YAAE0B,IAAI;YAAOC,OAAOtC;QAAsB;QACrE2B,OAAOhB,KAAK,GAAGA;IACjB;IACA,IAAI,cAAcuB,KAAKP,OAAOf,QAAQ,GAAGR,MAAM8B,GAAG,CAAC,WAAW,EAAE;IAChE,uEAAuE;IACvE,+CAA+C;IAC/C,IAAI,gBAAgBA,KAAKP,OAAOd,UAAU,GAAG5B,0BAA0BiD,GAAG,CAAC,aAAa;IACxF,IAAI,aAAaA,KAAK;QACpB,MAAMpB,UAAUoB,GAAG,CAAC,UAAU;QAC9BP,OAAOb,OAAO,GACZA,WAAW,OAAOA,YAAY,YAAY,CAACqB,MAAMC,OAAO,CAACtB,WACrD/B,iBAAiB+B,WACjB;IACR;IACA,IAAI,WAAWoB,KAAKP,OAAOZ,KAAK,GAAG6B,QAAOV,aAAAA,GAAG,CAAC,QAAQ,YAAZA,aAAgB,IAAIW,KAAK,CAAC,GAAG9C;IACvE,yEAAyE;IACzE,uDAAuD;IACvD,IAAI;QAAC;QAAQ;QAAU;KAAY,CAAC+C,MAAM,CAAC,CAAChB,MAAQA,OAAOI,KAAKa,MAAM,GAAG,GAAG;QAC1E,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAgE;IAC7F;IACA,IAAI,UAAUJ,KAAK;QACjB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,OAAO,GAAG,OAAO;YAAEG,IAAI;YAAOC,OAAO;QAAuB;QACnFX,OAAOX,IAAI,GAAGd,cAAcgC,GAAG,CAAC,OAAO;IACzC;IACA,KAAK,MAAMJ,OAAO;QAAC;QAAU;KAAY,CAAW;QAClD,IAAI,CAAEA,CAAAA,OAAOI,GAAE,GAAI;QACnB,MAAMc,MAAM7C,YAAY+B,GAAG,CAACJ,IAAI;QAChC,IAAI,CAACkB,KAAK,OAAO;YAAEX,IAAI;YAAOC,OAAO;QAAgB;QACrDX,MAAM,CAACG,IAAI,GAAGkB;IAChB;IACA,IAAI,iBAAiBd,KAAK;QACxB,MAAMe,MAAMf,GAAG,CAAC,cAAc;QAC9B,IAAI,CAACC,MAAMC,OAAO,CAACa,MAAM,OAAO;YAAEZ,IAAI;YAAOC,OAAO;QAA4B;QAChFX,OAAOR,WAAW,GAAG/C,wBAAwB6E,IAAIC,GAAG,CAAC,CAACC,KAAOP,OAAOO,aAAAA,KAAM;IAC5E;IACA,IAAI,cAAcjB,KAAKP,OAAOP,QAAQ,GAAGhB,MAAM8B,GAAG,CAAC,WAAW,EAAE;IAChE,IAAI,eAAeA,KAAK;QACtB,MAAMb,YAAYa,GAAG,CAAC,YAAY,KAAK,OAAO,OAAO9B,MAAM8B,GAAG,CAAC,YAAY,EAAE;QAC7E,IAAIb,cAAc,QAAS,CAAA,CAACA,aAAaA,UAAUqB,QAAQ,CAAC,IAAG,GAAI;YACjE,OAAO;gBAAEL,IAAI;gBAAOC,OAAO;YAAiC;QAC9D;QACAX,OAAON,SAAS,GAAGA;IACrB;IACA,IAAI,iBAAiBa,KAAKP,OAAOL,WAAW,GAAGlB,MAAM8B,GAAG,CAAC,cAAc,EAAE;IACzE,IAAI,YAAYA,KAAK;QACnB,MAAMX,SAASW,GAAG,CAAC,SAAS;QAC5B,IAAI,CAACX,UAAU,OAAOA,WAAW,YAAYY,MAAMC,OAAO,CAACb,SAAS;YAClE,OAAO;gBAAEc,IAAI;gBAAOC,OAAO;YAAmD;QAChF;QACAX,OAAOJ,MAAM,GAAGA;IAClB;IACA,IAAI,cAAcW,KAAK;QACrB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,WAAW,GAAG;YACnC,OAAO;gBAAEG,IAAI;gBAAOC,OAAO;YAA+B;QAC5D;QACAX,OAAOH,QAAQ,GAAGxC,qBAAqBkD,GAAG,CAAC,WAAW;IACxD;IACA,IAAI,CAACM,OAAOC,IAAI,CAACd,QAAQoB,MAAM,EAAE,OAAO;QAAEV,IAAI;QAAOC,OAAO;IAA2B;IACvF,OAAO;QAAED,IAAI;QAAMV;IAAO;AAC5B;AAEA,iGAAiG,GACjG,SAASyB,eAAeC,KAAc;IACpC,IAAI,CAAClB,MAAMC,OAAO,CAACiB,UAAU,CAACA,MAAMN,MAAM,IAAIM,MAAMN,MAAM,GAAGjD,wBAAwB;QACnF,OAAO;IACT;IACA,MAAMmD,MAAMI,MAAMH,GAAG,CAAC,CAACC,KAAO/C,MAAM+C,IAAI;IACxC,IAAIF,IAAIK,IAAI,CAAC,CAACH,KAAO,CAACA,MAAMA,GAAGT,QAAQ,CAAC,OAAO,OAAO;IACtD,OAAO;WAAI,IAAIa,IAAIN;KAAK;AAC1B;AAEA;;;;;CAKC,GACD,SAASO,YAAYC,MAAc,EAAEC,MAAc;QAItCD,2BAAAA;IAHX,OACEA,OAAOE,KAAK,IACZ9E,gBAAgB4E,OAAOG,MAAM,KAC7BC,SAASJ,iBAAAA,OAAOG,MAAM,sBAAbH,4BAAAA,eAAeK,UAAU,qBAA1B,AAACL,yBAAmE,CAACC,OAAO;AAExF;AAEA,MAAMK,UAAU,CAACC,WAAmB1B,QAAyC,CAAA;QAC3E0B;QACA3B,IAAI;QACJC;IACF,CAAA;AASA;;;;CAIC,GACD,SAAS2B,aACPC,OAAgC,EAChCC,OAAe,EACfxC,MAA2B,EAC3BJ,MAAsD,EACtD6C,iBAAyB;QAwBX/E;IApBd,MAAMgF,OAAO,CAACzC,QAAkBtD,iBAAiB6F,SAASvC;IAC1D,+DAA+D,GAC/D,MAAMe,OAAO,CAACU,QAAkBA,SAASzD,WAAW0E,MAAM;IAC1D,MAAMC,SAAkC,CAAC;IACzC,IAAIC,SAA2C,EAAE;IAEjD,IAAI7C,OAAOjB,IAAI,KAAKqB,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1B,KAAKhB,OAAOjB,IAAI;IACtE,IAAIiB,OAAOhB,KAAK,KAAKoB,WAAW;QAC9BwC,MAAM,CAACF,KAAK,SAAS,GAAG1B,KAAKhB,OAAOhB,KAAK;QACzC,6CAA6C;QAC7C4D,MAAM,CAAC,QAAQ,GAAG5B,KAAKhB,OAAOhB,KAAK;IACrC;IACA,IAAIgB,OAAOf,QAAQ,KAAKmB,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOf,QAAQ;IAClF,IAAIe,OAAOd,UAAU,KAAKkB,WAAWwC,MAAM,CAACF,KAAK,cAAc,GAAG1B,KAAKhB,OAAOd,UAAU;IACxF,IAAIc,OAAOb,OAAO,KAAKiB,WAAW;YACNJ;QAA1B4C,MAAM,CAACF,KAAK,WAAW,IAAG1C,kBAAAA,OAAOb,OAAO,YAAda,kBAAkB/B,WAAW0E,MAAM;IAC/D;IACA,IAAI3C,OAAOZ,KAAK,KAAKgB,WAAWwC,MAAM,CAACF,KAAK,SAAS,GAAG1C,OAAOZ,KAAK;IACpE,IAAIY,OAAOX,IAAI,KAAKe,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1C,OAAOX,IAAI;IAEjE,MAAMyD,OAAO,EAACpF,yBAAAA,iBAAiB6E,SAASC,SAASnD,IAAI,YAAvC3B,yBAA2C,EAAE,EAAE6D,GAAG,CAAC,CAACF,MAChEJ,OAAOI,KAAK0B,WAAW;IAEzB,IAAI/C,OAAOV,MAAM,IAAI,CAACwD,KAAK/B,QAAQ,CAACf,OAAOV,MAAM,GAAG;QAClD,+DAA+D;QAC/D,IAAIwD,KAAK1B,MAAM,IAAI9C,kBAAkB;YACnC,OAAO;gBAAE8D,SAAS,CAAC,YAAY,EAAE9D,iBAAiB,KAAK,CAAC;YAAC;QAC3D;QACAsE,MAAM,CAACF,KAAK,QAAQ,GAAGzE,WAAW+E,UAAU,CAAChD,OAAOV,MAAM;IAC5D;IACA,IAAIU,OAAOT,SAAS,IAAIuD,KAAK/B,QAAQ,CAACf,OAAOT,SAAS,GAAG;QACvDqD,MAAM,CAACF,KAAK,QAAQ,GAAGzE,WAAWgF,WAAW,CAACjD,OAAOT,SAAS;IAChE;IACA,IAAIS,OAAOR,WAAW,KAAKY,WAAW;QACpCwC,MAAM,CAAClG,yBAAyB8F,SAAS,GAAGxC,OAAOR,WAAW;IAChE;IACA,IAAIQ,OAAOP,QAAQ,KAAKW,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOP,QAAQ;IAElF,IAAIO,OAAON,SAAS,KAAKU,WAAW;QAClC,MAAM8C,OAAO1F,uBACXC,uBAAuB8E,SAASC,UAChCxC,OAAON,SAAS;QAElB,IAAIwD,MAAM;YACRrC,OAAOsC,MAAM,CAACP,QAAQ9E,yBAAyBoF,MAAMV;YACrDK,SAASK,KAAKL,MAAM;YACpB,IAAI7C,OAAOL,WAAW,KAAKS,WAAW;gBACpC,kEAAkE;gBAClE,MAAMgD,QAAQF,KAAKxD,SAAS,GAAG+C,oBAAoB;gBACnDG,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKoC;gBACnC,mDAAmD;gBACnDR,MAAM,CAAC,cAAc,GAAG5B,KAAKoC;YAC/B;QACF;IACF;IACA,IAAIpD,OAAOL,WAAW,KAAKS,WAAW;QACpCwC,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKhB,OAAOL,WAAW;QACrDiD,MAAM,CAAC,cAAc,GAAG5B,KAAKhB,OAAOL,WAAW;IACjD;IACA,KAAK,MAAM,CAACQ,KAAKuB,MAAM,IAAIb,OAAOwC,OAAO,CAACzD,iBAAAA,SAAU,CAAC,GAAI;QACvDgD,MAAM,CAACF,KAAK,CAAC,OAAO,EAAEvC,KAAK,EAAE,GAAGuB;IAClC;IACA,IAAI1B,OAAOH,QAAQ,KAAKO,WAAWwC,MAAM,CAACF,KAAK3F,qBAAqB,GAAGiD,OAAOH,QAAQ;IAEtF,IAAI,CAACgB,OAAOC,IAAI,CAAC8B,QAAQxB,MAAM,EAAE,OAAO;QAAEwB,QAAQ;QAAMC;IAAO;IAC/DD,MAAM,CAAC,YAAY,GAAG3E,WAAWqF,eAAe;IAChD,OAAO;QAAEV;QAAQC;IAAO;AAC1B;AAEA;;;;CAIC,GACD,eAAeU,oBACbC,SAAsC,EACtCC,MAA+B;IAE/B,MAAMC,SAAS,IAAI9B;IACnB,IAAI,CAAC6B,OAAOrC,MAAM,EAAE,OAAOsC;IAC3B,MAAMC,QAAQH,UAAUG,KAAK;IAC7B,KAAK,MAAMC,SAASH,OAAQE,MAAMf,MAAM,CAACgB,MAAMC,GAAG,EAAED,MAAMhB,MAAM;IAChE,IAAI;QACF,MAAMe,MAAMG,MAAM;QAClB,OAAOJ;IACT,EAAE,eAAM;IACN,kEAAkE;IACpE;IACA,KAAK,MAAME,SAASH,OAAQ;QAC1B,IAAI;YACF,MAAMG,MAAMC,GAAG,CAACjB,MAAM,CAACgB,MAAMhB,MAAM;QACrC,EAAE,OAAOjC,OAAO;YACdoD,QAAQpD,KAAK,CAAC,kDAAkDiD,MAAMvB,SAAS,EAAE1B;YACjF+C,OAAOM,GAAG,CAACJ,MAAMvB,SAAS;QAC5B;IACF;IACA,OAAOqB;AACT;AAEA,0FAA0F,GAC1F,eAAeO,oBACbC,SAAgD,EAChDT,MAA+B;IAE/B,MAAMU,SAAS,IAAIC;IACnB,KAAK,MAAMR,SAASH,OAAQ;QAC1B,KAAK,MAAMY,SAAST,MAAMf,MAAM,CAAE;gBACHsB;YAA7BA,OAAOG,GAAG,CAACD,MAAM3E,SAAS,EAAE,EAACyE,cAAAA,OAAOI,GAAG,CAACF,MAAM3E,SAAS,aAA1ByE,cAA+B,KAAKE,MAAMG,KAAK;QAC9E;IACF;IACA,MAAMC,QAAQC,GAAG,CACf;WAAIP;KAAO,CACRhD,MAAM,CAAC,CAAC,GAAGqD,MAAM,GAAKA,UAAU,GAChCjD,GAAG,CAAC,CAAC,CAAC7B,WAAW8E,MAAM,GACtBN,UACGS,GAAG,CAACjF,WACJkD,MAAM,CAAC/E,2BAA2B2G,QAClCI,KAAK,CAAC,CAACjE;YACNoD,QAAQpD,KAAK,CAAC,+CAA+CjB,WAAW8E,OAAO7D;QACjF;AAGV;AAEA,OAAO,MAAMkE,0BAA4C,OAAOC,KAAKC;QAMrDD;IALd,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAqB;QACnD;IACF;IACA,MAAMyE,QAAQN,YAAAA,IAAIM,IAAI,YAARN,YAAY,CAAC;IAC3B,MAAMO,QAAQ3G,kBAAkB0G;IAChC,IAAI,CAACC,OAAO;QACVN,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM2E,aAAa7D,eAAe2D,IAAI,CAAC,aAAa;IACpD,IAAI,CAACE,YAAY;QACfP,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO,CAAC,mBAAmB,EAAExC,uBAAuB,UAAU,CAAC;QAAC;QACvF;IACF;IACA,MAAMoH,OAAOlF,wBAAwB+E,IAAI,CAAC,MAAM;IAChD,IAAIG,KAAK7E,EAAE,KAAK,OAAO;QACrBqE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO4E,KAAK5E,KAAK;QAAC;QACzC;IACF;IACA,MAAM,EAAEX,MAAM,EAAE,GAAGuF;IAEnB,IAAI;QACF,MAAMzD,SAAS,MAAMlD,mBAAmBkG,KAAKO,OAAO;YAAEG,UAAU;QAAK;QACrE,IAAI1D,OAAOpB,EAAE,KAAK,OAAO;YACvBqE,IAAIG,MAAM,CAACpD,OAAOoD,MAAM,EAAEC,IAAI,CAACrD,OAAOsD,IAAI;YAC1C;QACF;QACA,IAAIC,MAAMI,KAAK,KAAK,UAAU,CAAC5D,YAAYC,QAAQuD,MAAMtD,MAAM,GAAG;YAChEgD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAExE,OAAO;YAA6D;YAC3F;QACF;QACA,wEAAwE;QACxE,MAAM+E,QAAQ/G,gBAAgBmD,OAAO6D,GAAG,EAAE5F,sBAAsBC;QAChE,IAAI0F,OAAO;YACTX,IAAIG,MAAM,CAACQ,MAAMR,MAAM,EAAEC,IAAI,CAACO,MAAMN,IAAI;YACxC;QACF;QAEA,MAAM5B,YAAYzF,cAAc6H,GAAG,GAAGpC,SAAS;QAC/C,MAAMqC,SAASrC,UAAUsC,UAAU,CAAC,QAAQnB,GAAG,CAAC7C,OAAOiE,KAAK;QAC5D,MAAMC,YACJX,MAAMI,KAAK,KAAK,SAASlJ,oBAAoBuF,OAAO6D,GAAG,EAAEN,MAAMtD,MAAM,IAAI;QAC3E,MAAMkE,aAAaD,YAAYhJ,cAAcgJ,aAAa;QAE1D,IAAIpG;QACJ,IAAII,OAAOJ,MAAM,EAAE;YACjB,MAAMsG,cAAc,MAAML,OACvBC,UAAU,CAACjJ,gBAAgBsJ,aAAa,EACxCC,KAAK,CAAC5J,4BACN+H,GAAG;YACN,MAAM8B,SAAS1I,mBACbqC,OAAOJ,MAAM,EACbsG,YAAYI,IAAI,CAAC/E,GAAG,CAAC,CAACoD,MAAQA,IAAI4B,IAAI,KACtC;YAEF,IAAI,YAAYF,QAAQ;oBAEbxF;gBADTkE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBxE,KAAK,GAAEE,kBAAAA,OAAO2F,MAAM,CAACH,OAAOI,MAAM,CAAC,CAAC,EAAE,YAA/B5F,kBAAmC;gBAC5C;gBACA;YACF;YACAjB,SAASyG,OAAOG,MAAM;QACxB;QAEA;;;;KAIC,GACD,MAAME,cAAc1G,OAAOd,UAAU,GACjCjC,+BACE,AACE,CAAA,MAAM4I,OAAOC,UAAU,CAACjJ,gBAAgB8J,SAAS,EAAEhC,GAAG,CAAC7H,0BAA0ByH,GAAG,EAAC,EACrFgC,IAAI,MAER;QAEJ,IAAIvG,OAAOP,QAAQ,EAAE;YACnB,MAAMmH,QAAQ,MAAM5I,qBAAqBgC,OAAOP,QAAQ,EAAEqC,OAAOiE,KAAK,EAAEnB,KAAK,CAAC,IAAM;YACpF,IAAI,EAACgC,yBAAAA,MAAO3E,MAAM,GAAE;gBAClB8C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAExE,OAAO;gBAAkD;gBAChF;YACF;QACF;QAEA,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI8B,oBAAoB;QACxB,IAAIzC,OAAON,SAAS,EAAE;YACpB,MAAMmH,UAAU,MAAMhB,OACnBC,UAAU,CAACjJ,gBAAgBqH,SAAS,EACpCS,GAAG,CAAC3E,OAAON,SAAS,EACpB6E,GAAG;YACN,MAAMuC,SAASD,QAAQE,MAAM,GAAIF,QAAQtC,GAAG,CAAC,eAAwCnE;YACrF,MAAM4G,UACJH,QAAQE,MAAM,IACdlI,SAASiD,QAAQgF,WAChB,CAAA,CAACb,cAAcrI,gBAAgBkJ,QAAQb,WAAU;YACpD,IAAI,CAACe,SAAS;gBACZjC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAExE,OAAO;gBAAkB;gBAChD;YACF;YACA8B,oBAAoBhE,MAAMoI,QAAQtC,GAAG,CAAC,SAAS;QACjD;QAEA,MAAM0C,WAAWpB,OAAOC,UAAU,CAAC;QACnC,MAAMoB,YAAY,MAAM1D,UAAU2D,MAAM,IAAI7B,WAAW/D,GAAG,CAAC,CAACC,KAAOyF,SAAStC,GAAG,CAACnD;QAChF,MAAM4F,WAAW,IAAIhD;QACrB,MAAMX,SAAyB,EAAE;QACjCyD,UAAUG,OAAO,CAAC,CAACC,UAAUC;gBAMbD;YALd,MAAMjF,YAAYiD,UAAU,CAACiC,MAAM;YACnC,IAAI,CAACD,SAASP,MAAM,EAAE;gBACpBK,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMkE,QAAQe,iBAAAA,SAASf,IAAI,cAAbe,iBAAmB,CAAC;YAClC,MAAME,YAAYjB,IAAI,CAAC,YAAY;YACnC,IAAI,CAAC1H,SAASiD,QAAQ0F,YAAY;gBAChCJ,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,IAAI4D,cAAc,CAACrI,gBAAgB4J,WAAWvB,aAAa;gBACzDmB,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMoF,QAAQzB,oBAAAA,YAAapJ,oBAAoB2J,MAAMzE,OAAO6D,GAAG;YAC/D,IAAI,CAAC8B,MAAMjF,OAAO,EAAE;gBAClB4E,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAWvC;gBAC3C;YACF;YACA,IAAI4H,YAAY1H;YAChB,IAAI0G,eAAe1G,OAAOd,UAAU,EAAE;oBAUCmH;gBATrC,MAAMA,SAASlJ,mBACbuJ,aACA1G,OAAOd,UAAU,EACjBxB,iBAAiB6I,MAAMkB,MAAMjF,OAAO,EAAEtD,UAAU;gBAElD,IAAImH,OAAO3F,EAAE,KAAK,OAAO;oBACvB0G,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAWgE,OAAO1F,KAAK;oBACvD;gBACF;gBACA+G,YAAY,aAAK1H;oBAAQd,UAAU,GAAEmH,gBAAAA,OAAO3E,KAAK,YAAZ2E,gBAAgB;;YACvD;YACA,MAAMsB,QAAQrF,aAAaiE,MAAMkB,MAAMjF,OAAO,EAAEkF,WAAW9H,QAAQ6C;YACnE,IAAI,aAAakF,OAAO;gBACtBP,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAWsF,MAAMvF,OAAO;gBACxD;YACF;YACAgF,SAAS9C,GAAG,CAACjC,WAAW;gBAAEA;gBAAW3B,IAAI;YAAK;YAC9C,IAAIiH,MAAM/E,MAAM,EAAE;gBAChBa,OAAOmE,IAAI,CAAC;oBAAEvF;oBAAWwB,KAAKyD,SAASzD,GAAG;oBAAEjB,QAAQ+E,MAAM/E,MAAM;oBAAEC,QAAQ8E,MAAM9E,MAAM;gBAAC;YACzF;QACF;QAEA,MAAMa,SAAS,MAAMH,oBAAoBC,WAAWC;QACpD,KAAK,MAAMpB,aAAaqB,OAAQ;YAC9B0D,SAAS9C,GAAG,CAACjC,WAAWD,QAAQC,WAAW;QAC7C;QACA,MAAM4B,oBACJ4B,OAAOC,UAAU,CAACjJ,gBAAgBqH,SAAS,GAC3CT,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOmE,GAAG,CAACjE,MAAMvB,SAAS;QAGtD,MAAMyF,SAAgC;YACpCpH,IAAI;YACJqH,SAASzC,WAAW/D,GAAG,CACrB,CAACc;oBAAc+E;wBAAAA,gBAAAA,SAAS7C,GAAG,CAAClC,sBAAb+E,gBAA2BhF,QAAQC,WAAW;;QAEjE;QACA0C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC2C;IACvB,EAAE,OAAOnH,OAAO;QACdoD,QAAQpD,KAAK,CAAC,+BAA+BA;QAC7CoE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAExE,OAAO;QAAkC;IAClE;AACF,EAAC"}

package/src/lib/server/lead-create.js

@@ -50,6 +50,7 @@ import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
 import { normalizeCampaignIds, readCampaignIds } from "@aglyn/aglyn/app-utils/campaign-membership";
 import { FieldValue } from "firebase-admin/firestore";
 import { fileCampaignFilingActivities } from "./campaign-filing-activity.js";
+import { readLeadSourcePicklist, resolveLeadSourceWrite } from "./lead-source-picklist.js";
 import { holdsDataManage } from "./org-caller.js";
 import { crmSuiteRefusal } from "./suite-gate.js";
 /** The statuses a lead may be entered in — everything but the converted state. */ const CREATE_STATUSES = [
@@ -220,6 +221,24 @@ export const leadCreateHandler = async (req, res)=>{
         const before = await readLeadForHost(hostId, leadId);
         const created = !before;
         /*
+     * THE ORG'S LEAD SOURCES (AGL-3298), judged before any write: a value
+     * outside the list is refused under the field naming what the list
+     * allows, a lead the site already held keeps the value it has, and a
+     * new lead that named none starts from the list's default.
+     */ const leadSource = resolveLeadSourceWrite(await readLeadSourcePicklist(firestore, resolved.orgId), patch.leadSource, {
+            current: before == null ? void 0 : before.get('leadSource'),
+            created
+        });
+        if (leadSource.ok === false) {
+            res.status(400).json({
+                error: leadSource.error,
+                field: 'leadSource'
+            });
+            return;
+        }
+        if (leadSource.write === undefined) delete patch.leadSource;
+        else patch.leadSource = leadSource.write;
+        /*
      * The platform ceiling, judged here so the drawer can say WHY rather
      * than only that the lead could not be saved; the door re-judges it
      * inside its own transaction, so a race is still refused there.