@aglyn/plugins-crm 1.0.0-beta.203 → 1.0.0-beta.204

package/src/lib/server/leads-import.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/leads-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-import` — one chunk of a leads file, written\n * (AGL-2701).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-lead-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the owner against the\n * org's roster, and writes it in two halves.\n *\n * ## The capture half goes through the door every capture goes through\n *\n * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up\n * handler and both booking paths — is the writer here too. That is what\n * makes an imported row key on `personKey` the way a second form\n * submission does, land under the site by path with `capturedByHostIds`\n * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction\n * that writes, and record NO marketing basis. A bulk path with its own\n * `add()` would grow an unkeyed, unbounded copy of the site's leads under\n * a second set of rules.\n *\n * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`\n *\n * The five org collections carry `visibleTo` because they sit under\n * `orgs/{orgId}` and the rules decide per document which sites may read\n * them. A lead does not: `hosts/{hostId}/leads` is private to the site by\n * path, the rules admit the site's own members, and the list therefore\n * reads it with no scope clause. An import that stamped scope tokens onto\n * a lead would be writing a field nothing reads, and would suggest a\n * sharing decision the collection does not have. The site is the whole\n * scope, and the drawer's picker is where it is chosen.\n *\n * ## No file may hand a lead a consent it did not give\n *\n * A capture writes a marketing basis only when the visitor ticked a box in\n * front of them. A CSV row has no such event behind it, so the lead\n * vocabulary has no consent column and this route passes no\n * `marketingConsent`: an imported lead is mailable only if some earlier\n * capture on this site already recorded a basis, which `addHostLead`\n * carries forward untouched. The contacts import has a consent column\n * because its own export writes one and the merchant is asserting a basis\n * they hold per person; the leads export writes none, and a column the\n * file cannot fill is a column that cannot be misread.\n *\n * ## The working half is written the way the list writes it\n *\n * A status, an owner, a reason and notes are the CRM's annotations, not\n * the capture's, and the leads list already writes them client-direct onto\n * the same document. A row that carries any of them gets one merge write\n * after the door's, stamped `updatedAt` exactly as the list stamps it. A\n * row that carries none costs nothing extra.\n *\n * ## Created or merged is read once for the chunk\n *\n * The door reports only whether the lead was STORED, and the result panel\n * has to say how many people were added and how many updated. One\n * `getAll` over the chunk's document ids answers that for every row in a\n * single round trip, before any of them is written — which is also the\n * only moment the answer is still true.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  type ContactSource,\n  LEADS_MAX_PER_HOST,\n  personKey,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  LEAD_IMPORT_CHUNK_SIZE,\n  LEAD_IMPORT_MAX_BODY_BYTES,\n  type LeadImportChunkResult,\n  type LeadImportRawRow,\n  type LeadImportRow,\n  type LeadImportSkippedRow,\n  normalizeLeadImportRow,\n} from '../model/crm-lead-import'\nimport {\n  addHostLead,\n  firebaseAdmin,\n  orgLeadsForHost,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\nimport { readLeadSourcePicklist, resolveLeadSourceWrite } from './lead-source-picklist'\n\n/**\n * The surface an imported lead names, beside `signup`, `booking` and\n * `form:{formId}`.\n *\n * Typed as the capture-source union rather than a bare string, which is\n * what the contacts import gets for free from the door it calls: a lead's\n * `source` is plain text on the way in, so this is the only place the word\n * can be held to the same vocabulary the source filters and the labels\n * read. One person brought in by one file reads the same on both records.\n */\nconst LEAD_IMPORT_SOURCE: ContactSource = 'import'\n\n/**\n * How many of the org's campaigns one chunk reads to resolve the names a\n * file carries (AGL-3254). Well past what an org keeps — the picker offers\n * fifty — and read once per chunk rather than once per row.\n */\nconst CAMPAIGN_DIRECTORY_CEILING = 200\n\n/**\n * The org's live campaigns by NAME, lower-cased, for the `campaigns`\n * column. A lead is an org record, so every live container of the org\n * (`orgs/{orgId}/emailCampaigns`) may be named, whichever sites it is\n * placed on; where two share a name, the one placed on the importing site\n * wins, because that is the one its picker shows. A name the org does not\n * have is not guessed at: the row is refused whole and named, because a\n * lead filed under half its campaigns is a lead nobody asked for. Read\n * only when some row names one.\n */\nasync function campaignDirectory(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostId: string,\n): Promise<Map<string, string>> {\n  const directory = new Map<string, string>()\n  if (!orgId) return directory\n  const containers = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('emailCampaigns')\n    .limit(CAMPAIGN_DIRECTORY_CEILING)\n    .get()\n  const live = containers.docs.filter((container) => !container.get('deletedAt'))\n  const placed = (container: FirebaseFirestore.QueryDocumentSnapshot) =>\n    visibleToHost(container.get('visibleTo') as string[] | undefined, hostId)\n  for (const container of [...live.filter(placed), ...live.filter((entry) => !placed(entry))]) {\n    const name = String(container.get('name') ?? '').trim().toLowerCase()\n    if (name && !directory.has(name)) directory.set(name, container.id)\n  }\n  return directory\n}\n\n/**\n * The team's annotations on one row and the lead's own profile\n * (AGL-3231), or nothing when the file named none of either. A profile\n * value lands as the record's card would write it; the file never clears\n * one, because a blank cell is a cell nobody filled.\n */\nfunction workingState(\n  row: LeadImportRow,\n  ownerUid: string | undefined,\n  campaignIds: readonly string[],\n): Record<string, unknown> | null {\n  const fields: Record<string, unknown> = {\n    ...(row.status ? { status: row.status } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.unqualifiedReason ? { unqualifiedReason: row.unqualifiedReason } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n    ...row.profile,\n    // Added to what a lead the site already held carries (AGL-3254): a\n    // file re-imported under a new campaign files the person under one\n    // more, and never takes them out of the last.\n    ...(campaignIds.length ? { campaignIds: FieldValue.arrayUnion(...campaignIds) } : {}),\n  }\n  return Object.keys(fields).length ? fields : null\n}\n\n/**\n * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.\n *\n * Rows are written one after another so the ceiling's local count stays\n * honest across the request.\n */\nexport const crmLeadsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<LeadImportRawRow>(req, {\n    maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,\n    chunkSize: LEAD_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: LeadImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: LeadImportRow; key: string }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged, for\n     * the reason the contacts import gives: the second row would merge\n     * onto the first's document and the tally would read one created and\n     * one merged for one person in one file. Across requests the door's\n     * own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeLeadImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      // Non-null by construction: the normalizer refused every address\n      // this derivation could not key.\n      const key = personKey(verdict.row.email) as string\n      if (seen.has(key)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row, key })\n    })\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(context.hostId)\n    const leadsRef = await orgLeadsForHost(context.hostId)\n    const refs = normalized.map((entry) => leadsRef.doc(entry.key))\n    const namesCampaigns = normalized.some((entry) => entry.row.campaigns?.length)\n    const [owners, before, campaigns, leadSources] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      refs.length ? firestore.getAll(...refs) : Promise.resolve([]),\n      namesCampaigns\n        ? campaignDirectory(firestore, context.orgId, context.hostId)\n        : Promise.resolve(new Map<string, string>()),\n      // The org's lead source list (AGL-3298): one read per chunk, for the\n      // values rows name and the default a new lead starts from.\n      readLeadSourcePicklist(firestore, context.orgId),\n    ])\n    const beforeById = new Map(before.map((snapshot) => [snapshot.id, snapshot]))\n    const held = new Set(\n      before.filter((snapshot) => snapshot.exists).map((snapshot) => snapshot.id),\n    )\n    const ownersUnresolved = new Set<string>()\n    let counted: number | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row, key } of normalized) {\n      // The campaigns the row names, every one of them the org's, or the\n      // row is refused whole and named (AGL-3254).\n      const campaignIds = (row.campaigns ?? []).map((name) => campaigns.get(name.toLowerCase()) ?? '')\n      if (campaignIds.some((id) => !id)) {\n        skipped.push({ index, email: row.email, reason: 'campaign-unknown' })\n        continue\n      }\n      const isNew = !held.has(key)\n      /*\n       * THE LEAD SOURCE, restricted to the org's list (AGL-3298). A value\n       * the list does not hold is refused whole and named, as a campaign\n       * the org does not have is — the drawer's notice has already listed\n       * the values the list allows — and a lead the site already held\n       * keeps the value it has. A new lead with no value starts from the\n       * list's default.\n       */\n      const leadSource = resolveLeadSourceWrite(leadSources, row.profile.leadSource, {\n        current: beforeById.get(key)?.get('leadSource'),\n        created: isNew,\n      })\n      if (leadSource.ok === false) {\n        skipped.push({ index, email: row.email, reason: 'lead-source-unknown' })\n        continue\n      }\n      if (leadSource.write) row.profile.leadSource = leadSource.write\n      /*\n       * The platform lead ceiling, judged the way the deals import judges\n       * the records band: one count at the first create, re-judged locally\n       * as the request creates more. The door re-judges it authoritatively\n       * inside its own transaction, so a race is still refused there — this\n       * is what lets the operator's skipped file say WHY rather than only\n       * that the row could not be saved.\n       */\n      if (isNew) {\n        if (counted === null) {\n          counted = (await leadsRef.count().get()).data().count\n        }\n        if (\n          checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST)\n            .exceeded\n        ) {\n          skipped.push({ index, email: row.email, reason: 'lead-ceiling' })\n          continue\n        }\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const stored = await addHostLead({\n        hostRef,\n        hostId: context.hostId,\n        lead: {\n          email: row.email,\n          ...(row.name ? { name: row.name } : {}),\n          source: LEAD_IMPORT_SOURCE,\n        },\n      })\n      if (!stored) {\n        skipped.push({ index, email: row.email, reason: 'write-failed' })\n        continue\n      }\n      const working = workingState(row, ownerUid, [...new Set(campaignIds)])\n      if (working) {\n        await leadsRef\n          .doc(key)\n          .set(\n            { ...working, updatedAt: FieldValue.serverTimestamp() },\n            { merge: true },\n          )\n        // The file's profile, tags, status and lead source are what the\n        // Leads list searches and filters by (AGL-3321).\n        await restampCrmListFieldsAt(leadsRef.doc(key), 'leads')\n      }\n      if (isNew) {\n        created += 1\n        createdHere += 1\n      } else {\n        merged += 1\n      }\n    }\n\n    const result: LeadImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/leads-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["checkVisitorRecordCeiling","LEADS_MAX_PER_HOST","personKey","LEAD_IMPORT_CHUNK_SIZE","LEAD_IMPORT_MAX_BODY_BYTES","normalizeLeadImportRow","addHostLead","firebaseAdmin","orgLeadsForHost","restampCrmListFieldsAt","visibleToHost","FieldValue","ownerDirectory","readImportRows","resolveImportContext","readLeadSourcePicklist","resolveLeadSourceWrite","LEAD_IMPORT_SOURCE","CAMPAIGN_DIRECTORY_CEILING","campaignDirectory","firestore","orgId","hostId","directory","Map","containers","collection","doc","limit","get","live","docs","filter","container","placed","entry","name","String","trim","toLowerCase","has","set","id","workingState","row","ownerUid","campaignIds","fields","status","unqualifiedReason","notes","profile","length","arrayUnion","Object","keys","crmLeadsImportHandler","req","res","method","setHeader","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","seen","Set","rows","forEach","raw","index","verdict","push","email","input","reason","key","add","field","app","hostRef","leadsRef","refs","map","namesCampaigns","some","campaigns","owners","before","leadSources","Promise","all","getAll","resolve","beforeById","snapshot","held","exists","ownersUnresolved","counted","createdHere","created","merged","isNew","leadSource","current","write","count","data","exceeded","ownerEmail","stored","lead","source","working","updatedAt","serverTimestamp","merge","result","received","sort","a","b","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DC,GAED,SACEA,yBAAyB,EAEzBC,kBAAkB,EAClBC,SAAS,QAEJ,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SACEC,WAAW,EACXC,aAAa,EACbC,eAAe,EACfC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AACzB,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AAEvF;;;;;;;;;CASC,GACD,MAAMC,qBAAoC;AAE1C;;;;CAIC,GACD,MAAMC,6BAA6B;AAEnC;;;;;;;;;CASC,GACD,eAAeC,kBACbC,SAAsC,EACtCC,KAAa,EACbC,MAAc;IAEd,MAAMC,YAAY,IAAIC;IACtB,IAAI,CAACH,OAAO,OAAOE;IACnB,MAAME,aAAa,MAAML,UACtBM,UAAU,CAAC,QACXC,GAAG,CAACN,OACJK,UAAU,CAAC,kBACXE,KAAK,CAACV,4BACNW,GAAG;IACN,MAAMC,OAAOL,WAAWM,IAAI,CAACC,MAAM,CAAC,CAACC,YAAc,CAACA,UAAUJ,GAAG,CAAC;IAClE,MAAMK,SAAS,CAACD,YACdvB,cAAcuB,UAAUJ,GAAG,CAAC,cAAsCP;IACpE,KAAK,MAAMW,aAAa;WAAIH,KAAKE,MAAM,CAACE;WAAYJ,KAAKE,MAAM,CAAC,CAACG,QAAU,CAACD,OAAOC;KAAQ,CAAE;YACvEF;QAApB,MAAMG,OAAOC,QAAOJ,iBAAAA,UAAUJ,GAAG,CAAC,mBAAdI,iBAAyB,IAAIK,IAAI,GAAGC,WAAW;QACnE,IAAIH,QAAQ,CAACb,UAAUiB,GAAG,CAACJ,OAAOb,UAAUkB,GAAG,CAACL,MAAMH,UAAUS,EAAE;IACpE;IACA,OAAOnB;AACT;AAEA;;;;;CAKC,GACD,SAASoB,aACPC,GAAkB,EAClBC,QAA4B,EAC5BC,WAA8B;IAE9B,MAAMC,SAAkC,aAClCH,IAAII,MAAM,GAAG;QAAEA,QAAQJ,IAAII,MAAM;IAAC,IAAI,CAAC,GACvCH,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3BD,IAAIK,iBAAiB,GAAG;QAAEA,mBAAmBL,IAAIK,iBAAiB;IAAC,IAAI,CAAC,GACxEL,IAAIM,KAAK,GAAG;QAAEA,OAAON,IAAIM,KAAK;IAAC,IAAI,CAAC,GACrCN,IAAIO,OAAO,EAIVL,YAAYM,MAAM,GAAG;QAAEN,aAAanC,WAAW0C,UAAU,IAAIP;IAAa,IAAI,CAAC;IAErF,OAAOQ,OAAOC,IAAI,CAACR,QAAQK,MAAM,GAAGL,SAAS;AAC/C;AAEA;;;;;CAKC,GACD,OAAO,MAAMS,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOlD,eAAiC4C,KAAK;QACjDO,cAAc5D;QACd6D,WAAW9D;IACb;IACA,IAAI,WAAW4D,MAAM,OAAOL,IAAIV,MAAM,CAACe,KAAKf,MAAM,EAAEa,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMpD,qBAAqB2C;QAC3C,IAAIS,QAAQC,EAAE,KAAK,OAAO,OAAOT,IAAIV,MAAM,CAACkB,QAAQlB,MAAM,EAAEa,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAmE,EAAE;QAC3E;;;;;;KAMC,GACD,MAAMC,OAAO,IAAIC;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAUzE,uBAAuBuE;YACvC,IAAIE,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,iEAAiE;YACjE,iCAAiC;YACjC,MAAMC,MAAMjF,UAAU4E,QAAQlC,GAAG,CAACoC,KAAK;YACvC,IAAIR,KAAKhC,GAAG,CAAC2C,MAAM;gBACjBd,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQlC,GAAG,CAACoC,KAAK;oBAAEE,QAAQ;gBAAY;gBACpE;YACF;YACAV,KAAKY,GAAG,CAACD;YACT,KAAK,MAAMhD,SAAS2C,QAAQlC,GAAG,CAAC0B,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACnC,MAAMkD,KAAK,CAAC,GAAG,EAACf,uBAAAA,OAAO,CAACnC,MAAMkD,KAAK,CAAC,YAApBf,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAOjC,KAAKkC,QAAQlC,GAAG;gBAAEuC;YAAI;QACjD;QAEA,MAAM/D,YAAYb,cAAc+E,GAAG,GAAGlE,SAAS;QAC/C,MAAMmE,UAAUnE,UAAUM,UAAU,CAAC,SAASC,GAAG,CAACuC,QAAQ5C,MAAM;QAChE,MAAMkE,WAAW,MAAMhF,gBAAgB0D,QAAQ5C,MAAM;QACrD,MAAMmE,OAAOlB,WAAWmB,GAAG,CAAC,CAACvD,QAAUqD,SAAS7D,GAAG,CAACQ,MAAMgD,GAAG;QAC7D,MAAMQ,iBAAiBpB,WAAWqB,IAAI,CAAC,CAACzD;gBAAUA;oBAAAA,uBAAAA,MAAMS,GAAG,CAACiD,SAAS,qBAAnB1D,qBAAqBiB,MAAM;;QAC7E,MAAM,CAAC0C,QAAQC,QAAQF,WAAWG,YAAY,GAAG,MAAMC,QAAQC,GAAG,CAAC;YACjEtF,eACEsD,QAAQ7C,KAAK,EACbkD,WAAWmB,GAAG,CAAC,CAACvD,QAAUA,MAAMS,GAAG;YAErC6C,KAAKrC,MAAM,GAAGhC,UAAU+E,MAAM,IAAIV,QAAQQ,QAAQG,OAAO,CAAC,EAAE;YAC5DT,iBACIxE,kBAAkBC,WAAW8C,QAAQ7C,KAAK,EAAE6C,QAAQ5C,MAAM,IAC1D2E,QAAQG,OAAO,CAAC,IAAI5E;YACxB,qEAAqE;YACrE,2DAA2D;YAC3DT,uBAAuBK,WAAW8C,QAAQ7C,KAAK;SAChD;QACD,MAAMgF,aAAa,IAAI7E,IAAIuE,OAAOL,GAAG,CAAC,CAACY,WAAa;gBAACA,SAAS5D,EAAE;gBAAE4D;aAAS;QAC3E,MAAMC,OAAO,IAAI9B,IACfsB,OAAO/D,MAAM,CAAC,CAACsE,WAAaA,SAASE,MAAM,EAAEd,GAAG,CAAC,CAACY,WAAaA,SAAS5D,EAAE;QAE5E,MAAM+D,mBAAmB,IAAIhC;QAC7B,IAAIiC,UAAyB;QAC7B,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAEhC,KAAK,EAAEjC,GAAG,EAAEuC,GAAG,EAAE,IAAIZ,WAAY;gBAGvB3B;gBAeVyD;YAjBX,mEAAmE;YACnE,6CAA6C;YAC7C,MAAMvD,cAAc,EAACF,iBAAAA,IAAIiD,SAAS,YAAbjD,iBAAiB,EAAE,EAAE8C,GAAG,CAAC,CAACtD;oBAASyD;wBAAAA,iBAAAA,UAAUhE,GAAG,CAACO,KAAKG,WAAW,eAA9BsD,iBAAqC;;YAC7F,IAAI/C,YAAY8C,IAAI,CAAC,CAAClD,KAAO,CAACA,KAAK;gBACjC2B,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAmB;gBACnE;YACF;YACA,MAAM4B,QAAQ,CAACP,KAAK/D,GAAG,CAAC2C;YACxB;;;;;;;OAOC,GACD,MAAM4B,aAAa/F,uBAAuBgF,aAAapD,IAAIO,OAAO,CAAC4D,UAAU,EAAE;gBAC7EC,OAAO,GAAEX,kBAAAA,WAAWxE,GAAG,CAACsD,yBAAfkB,gBAAqBxE,GAAG,CAAC;gBAClC+E,SAASE;YACX;YACA,IAAIC,WAAW5C,EAAE,KAAK,OAAO;gBAC3BE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAsB;gBACtE;YACF;YACA,IAAI6B,WAAWE,KAAK,EAAErE,IAAIO,OAAO,CAAC4D,UAAU,GAAGA,WAAWE,KAAK;YAC/D;;;;;;;OAOC,GACD,IAAIH,OAAO;gBACT,IAAIJ,YAAY,MAAM;oBACpBA,UAAU,AAAC,CAAA,MAAMlB,SAAS0B,KAAK,GAAGrF,GAAG,EAAC,EAAGsF,IAAI,GAAGD,KAAK;gBACvD;gBACA,IACElH,0BAA0B0G,UAAUC,aAAa1G,oBAC9CmH,QAAQ,EACX;oBACA/C,QAAQU,IAAI,CAAC;wBAAEF;wBAAOG,OAAOpC,IAAIoC,KAAK;wBAAEE,QAAQ;oBAAe;oBAC/D;gBACF;YACF;YACA,IAAIrC;YACJ,IAAID,IAAIyE,UAAU,EAAE;gBAClBxE,WAAWiD,OAAOjE,GAAG,CAACe,IAAIyE,UAAU;gBACpC,IAAI,CAACxE,UAAU4D,iBAAiBrB,GAAG,CAACxC,IAAIyE,UAAU;YACpD;YACA,MAAMC,SAAS,MAAMhH,YAAY;gBAC/BiF;gBACAjE,QAAQ4C,QAAQ5C,MAAM;gBACtBiG,MAAM;oBACJvC,OAAOpC,IAAIoC,KAAK;mBACZpC,IAAIR,IAAI,GAAG;oBAAEA,MAAMQ,IAAIR,IAAI;gBAAC,IAAI,CAAC;oBACrCoF,QAAQvG;;YAEZ;YACA,IAAI,CAACqG,QAAQ;gBACXjD,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAMuC,UAAU9E,aAAaC,KAAKC,UAAU;mBAAI,IAAI4B,IAAI3B;aAAa;YACrE,IAAI2E,SAAS;gBACX,MAAMjC,SACH7D,GAAG,CAACwD,KACJ1C,GAAG,CACF,aAAKgF;oBAASC,WAAW/G,WAAWgH,eAAe;oBACnD;oBAAEC,OAAO;gBAAK;gBAElB,gEAAgE;gBAChE,iDAAiD;gBACjD,MAAMnH,uBAAuB+E,SAAS7D,GAAG,CAACwD,MAAM;YAClD;YACA,IAAI2B,OAAO;gBACTF,WAAW;gBACXD,eAAe;YACjB,OAAO;gBACLE,UAAU;YACZ;QACF;QAEA,MAAMgB,SAAgC;YACpCC,UAAU/D,KAAKW,IAAI,CAACtB,MAAM;YAC1BwD;YACAC;YACAxC,SAASA,QAAQ0D,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEnD,KAAK,GAAGoD,EAAEpD,KAAK;YACjDP;YACAmC,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO/C,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAACgE;IAC9B,EAAE,OAAO/D,OAAO;QACdoE,QAAQpE,KAAK,CAAC,2BAA2BA;QACzC,OAAOJ,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/leads-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-import` — one chunk of a leads file, written\n * (AGL-2701).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-lead-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the owner against the\n * org's roster, and writes it in two halves.\n *\n * ## The capture half goes through the door every capture goes through\n *\n * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up\n * handler and both booking paths — is the writer here too. That is what\n * makes an imported row key on `personKey` the way a second form\n * submission does, land under the site by path with `capturedByHostIds`\n * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction\n * that writes, and record NO marketing basis. A bulk path with its own\n * `add()` would grow an unkeyed, unbounded copy of the site's leads under\n * a second set of rules.\n *\n * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`\n *\n * The five org collections carry `visibleTo` because they sit under\n * `orgs/{orgId}` and the rules decide per document which sites may read\n * them. A lead does not: `hosts/{hostId}/leads` is private to the site by\n * path, the rules admit the site's own members, and the list therefore\n * reads it with no scope clause. An import that stamped scope tokens onto\n * a lead would be writing a field nothing reads, and would suggest a\n * sharing decision the collection does not have. The site is the whole\n * scope, and the drawer's picker is where it is chosen.\n *\n * ## No file may hand a lead a consent it did not give\n *\n * A capture writes a marketing basis only when the visitor ticked a box in\n * front of them. A CSV row has no such event behind it, so the lead\n * vocabulary has no consent column and this route passes no\n * `marketingConsent`: an imported lead is mailable only if some earlier\n * capture on this site already recorded a basis, which `addHostLead`\n * carries forward untouched. The contacts import has a consent column\n * because its own export writes one and the merchant is asserting a basis\n * they hold per person; the leads export writes none, and a column the\n * file cannot fill is a column that cannot be misread.\n *\n * ## The working half is written the way the list writes it\n *\n * A status, an owner, a reason and notes are the CRM's annotations, not\n * the capture's, and the leads list already writes them client-direct onto\n * the same document. A row that carries any of them gets one merge write\n * after the door's, stamped `updatedAt` exactly as the list stamps it. A\n * row that carries none costs nothing extra.\n *\n * ## Created or merged is read once for the chunk\n *\n * The door reports only whether the lead was STORED, and the result panel\n * has to say how many people were added and how many updated. One\n * `getAll` over the chunk's document ids answers that for every row in a\n * single round trip, before any of them is written — which is also the\n * only moment the answer is still true.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  type ContactSource,\n  LEADS_MAX_PER_HOST,\n  personKey,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  LEAD_IMPORT_CHUNK_SIZE,\n  LEAD_IMPORT_MAX_BODY_BYTES,\n  type LeadImportChunkResult,\n  type LeadImportRawRow,\n  type LeadImportRow,\n  type LeadImportSkippedRow,\n  normalizeLeadImportRow,\n} from '../model/crm-lead-import'\nimport {\n  addHostLead,\n  firebaseAdmin,\n  orgLeadsForHost,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\n// The leaf, for the reason the webhook imports the delivery log from its\n// leaf: a spec that stands a partial barrel in must still reach it.\nimport {\n  countUndeliverableEmails,\n  findUndeliverableEmails,\n  IMPORT_MAIL_CHECK_GRACE_MS,\n  settleWithin,\n} from '@aglyn/tenant-data-admin/server/capture-email-check'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\nimport { readLeadSourcePicklist, resolveLeadSourceWrite } from './lead-source-picklist'\n\n/**\n * The surface an imported lead names, beside `signup`, `booking` and\n * `form:{formId}`.\n *\n * Typed as the capture-source union rather than a bare string, which is\n * what the contacts import gets for free from the door it calls: a lead's\n * `source` is plain text on the way in, so this is the only place the word\n * can be held to the same vocabulary the source filters and the labels\n * read. One person brought in by one file reads the same on both records.\n */\nconst LEAD_IMPORT_SOURCE: ContactSource = 'import'\n\n/**\n * How many of the org's campaigns one chunk reads to resolve the names a\n * file carries (AGL-3254). Well past what an org keeps — the picker offers\n * fifty — and read once per chunk rather than once per row.\n */\nconst CAMPAIGN_DIRECTORY_CEILING = 200\n\n/**\n * The org's live campaigns by NAME, lower-cased, for the `campaigns`\n * column. A lead is an org record, so every live container of the org\n * (`orgs/{orgId}/emailCampaigns`) may be named, whichever sites it is\n * placed on; where two share a name, the one placed on the importing site\n * wins, because that is the one its picker shows. A name the org does not\n * have is not guessed at: the row is refused whole and named, because a\n * lead filed under half its campaigns is a lead nobody asked for. Read\n * only when some row names one.\n */\nasync function campaignDirectory(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostId: string,\n): Promise<Map<string, string>> {\n  const directory = new Map<string, string>()\n  if (!orgId) return directory\n  const containers = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('emailCampaigns')\n    .limit(CAMPAIGN_DIRECTORY_CEILING)\n    .get()\n  const live = containers.docs.filter((container) => !container.get('deletedAt'))\n  const placed = (container: FirebaseFirestore.QueryDocumentSnapshot) =>\n    visibleToHost(container.get('visibleTo') as string[] | undefined, hostId)\n  for (const container of [...live.filter(placed), ...live.filter((entry) => !placed(entry))]) {\n    const name = String(container.get('name') ?? '').trim().toLowerCase()\n    if (name && !directory.has(name)) directory.set(name, container.id)\n  }\n  return directory\n}\n\n/**\n * The team's annotations on one row and the lead's own profile\n * (AGL-3231), or nothing when the file named none of either. A profile\n * value lands as the record's card would write it; the file never clears\n * one, because a blank cell is a cell nobody filled.\n */\nfunction workingState(\n  row: LeadImportRow,\n  ownerUid: string | undefined,\n  campaignIds: readonly string[],\n): Record<string, unknown> | null {\n  const fields: Record<string, unknown> = {\n    ...(row.status ? { status: row.status } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.unqualifiedReason ? { unqualifiedReason: row.unqualifiedReason } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n    ...row.profile,\n    // Added to what a lead the site already held carries (AGL-3254): a\n    // file re-imported under a new campaign files the person under one\n    // more, and never takes them out of the last.\n    ...(campaignIds.length ? { campaignIds: FieldValue.arrayUnion(...campaignIds) } : {}),\n  }\n  return Object.keys(fields).length ? fields : null\n}\n\n/**\n * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.\n *\n * Rows are written one after another so the ceiling's local count stays\n * honest across the request.\n */\nexport const crmLeadsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<LeadImportRawRow>(req, {\n    maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,\n    chunkSize: LEAD_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: LeadImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: LeadImportRow; key: string }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged, for\n     * the reason the contacts import gives: the second row would merge\n     * onto the first's document and the tally would read one created and\n     * one merged for one person in one file. Across requests the door's\n     * own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeLeadImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      // Non-null by construction: the normalizer refused every address\n      // this derivation could not key.\n      const key = personKey(verdict.row.email) as string\n      if (seen.has(key)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row, key })\n    })\n\n    /*\n     * THE ADDRESSES' MAIL SERVERS (AGL-3328), asked now so the answers\n     * arrive while the rows are written, and read after the last one for\n     * the result's \"N addresses have no mail server\". The records\n     * themselves are stamped by the check `addHostLead` queues.\n     */\n    const mailServers = findUndeliverableEmails(normalized.map((entry) => entry.row.email))\n    const imported: string[] = []\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(context.hostId)\n    const leadsRef = await orgLeadsForHost(context.hostId)\n    const refs = normalized.map((entry) => leadsRef.doc(entry.key))\n    const namesCampaigns = normalized.some((entry) => entry.row.campaigns?.length)\n    const [owners, before, campaigns, leadSources] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      refs.length ? firestore.getAll(...refs) : Promise.resolve([]),\n      namesCampaigns\n        ? campaignDirectory(firestore, context.orgId, context.hostId)\n        : Promise.resolve(new Map<string, string>()),\n      // The org's lead source list (AGL-3298): one read per chunk, for the\n      // values rows name and the default a new lead starts from.\n      readLeadSourcePicklist(firestore, context.orgId),\n    ])\n    const beforeById = new Map(before.map((snapshot) => [snapshot.id, snapshot]))\n    const held = new Set(\n      before.filter((snapshot) => snapshot.exists).map((snapshot) => snapshot.id),\n    )\n    const ownersUnresolved = new Set<string>()\n    let counted: number | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row, key } of normalized) {\n      // The campaigns the row names, every one of them the org's, or the\n      // row is refused whole and named (AGL-3254).\n      const campaignIds = (row.campaigns ?? []).map((name) => campaigns.get(name.toLowerCase()) ?? '')\n      if (campaignIds.some((id) => !id)) {\n        skipped.push({ index, email: row.email, reason: 'campaign-unknown' })\n        continue\n      }\n      const isNew = !held.has(key)\n      /*\n       * THE LEAD SOURCE, restricted to the org's list (AGL-3298). A value\n       * the list does not hold is refused whole and named, as a campaign\n       * the org does not have is — the drawer's notice has already listed\n       * the values the list allows — and a lead the site already held\n       * keeps the value it has. A new lead with no value starts from the\n       * list's default.\n       */\n      const leadSource = resolveLeadSourceWrite(leadSources, row.profile.leadSource, {\n        current: beforeById.get(key)?.get('leadSource'),\n        created: isNew,\n      })\n      if (leadSource.ok === false) {\n        skipped.push({ index, email: row.email, reason: 'lead-source-unknown' })\n        continue\n      }\n      if (leadSource.write) row.profile.leadSource = leadSource.write\n      /*\n       * The platform lead ceiling, judged the way the deals import judges\n       * the records band: one count at the first create, re-judged locally\n       * as the request creates more. The door re-judges it authoritatively\n       * inside its own transaction, so a race is still refused there — this\n       * is what lets the operator's skipped file say WHY rather than only\n       * that the row could not be saved.\n       */\n      if (isNew) {\n        if (counted === null) {\n          counted = (await leadsRef.count().get()).data().count\n        }\n        if (\n          checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST)\n            .exceeded\n        ) {\n          skipped.push({ index, email: row.email, reason: 'lead-ceiling' })\n          continue\n        }\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const stored = await addHostLead({\n        hostRef,\n        hostId: context.hostId,\n        lead: {\n          email: row.email,\n          ...(row.name ? { name: row.name } : {}),\n          source: LEAD_IMPORT_SOURCE,\n        },\n      })\n      if (!stored) {\n        skipped.push({ index, email: row.email, reason: 'write-failed' })\n        continue\n      }\n      const working = workingState(row, ownerUid, [...new Set(campaignIds)])\n      if (working) {\n        await leadsRef\n          .doc(key)\n          .set(\n            { ...working, updatedAt: FieldValue.serverTimestamp() },\n            { merge: true },\n          )\n        // The file's profile, tags, status and lead source are what the\n        // Leads list searches and filters by (AGL-3321).\n        await restampCrmListFieldsAt(leadsRef.doc(key), 'leads')\n      }\n      imported.push(row.email)\n      if (isNew) {\n        created += 1\n        createdHere += 1\n      } else {\n        merged += 1\n      }\n    }\n    const noMailServer = countUndeliverableEmails(\n      imported,\n      await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS),\n    )\n\n    const result: LeadImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n      ...(noMailServer !== undefined ? { noMailServer } : {}),\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/leads-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["checkVisitorRecordCeiling","LEADS_MAX_PER_HOST","personKey","LEAD_IMPORT_CHUNK_SIZE","LEAD_IMPORT_MAX_BODY_BYTES","normalizeLeadImportRow","addHostLead","firebaseAdmin","orgLeadsForHost","restampCrmListFieldsAt","visibleToHost","countUndeliverableEmails","findUndeliverableEmails","IMPORT_MAIL_CHECK_GRACE_MS","settleWithin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","readLeadSourcePicklist","resolveLeadSourceWrite","LEAD_IMPORT_SOURCE","CAMPAIGN_DIRECTORY_CEILING","campaignDirectory","firestore","orgId","hostId","directory","Map","containers","collection","doc","limit","get","live","docs","filter","container","placed","entry","name","String","trim","toLowerCase","has","set","id","workingState","row","ownerUid","campaignIds","fields","status","unqualifiedReason","notes","profile","length","arrayUnion","Object","keys","crmLeadsImportHandler","req","res","method","setHeader","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","seen","Set","rows","forEach","raw","index","verdict","push","email","input","reason","key","add","field","mailServers","map","imported","app","hostRef","leadsRef","refs","namesCampaigns","some","campaigns","owners","before","leadSources","Promise","all","getAll","resolve","beforeById","snapshot","held","exists","ownersUnresolved","counted","createdHere","created","merged","isNew","leadSource","current","write","count","data","exceeded","ownerEmail","stored","lead","source","working","updatedAt","serverTimestamp","merge","noMailServer","result","received","sort","a","b","undefined","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DC,GAED,SACEA,yBAAyB,EAEzBC,kBAAkB,EAClBC,SAAS,QAEJ,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SACEC,WAAW,EACXC,aAAa,EACbC,eAAe,EACfC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,aAAa,QAAQ,sCAAqC;AACnE,yEAAyE;AACzE,oEAAoE;AACpE,SACEC,wBAAwB,EACxBC,uBAAuB,EACvBC,0BAA0B,EAC1BC,YAAY,QACP,sDAAqD;AAC5D,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AACzB,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AAEvF;;;;;;;;;CASC,GACD,MAAMC,qBAAoC;AAE1C;;;;CAIC,GACD,MAAMC,6BAA6B;AAEnC;;;;;;;;;CASC,GACD,eAAeC,kBACbC,SAAsC,EACtCC,KAAa,EACbC,MAAc;IAEd,MAAMC,YAAY,IAAIC;IACtB,IAAI,CAACH,OAAO,OAAOE;IACnB,MAAME,aAAa,MAAML,UACtBM,UAAU,CAAC,QACXC,GAAG,CAACN,OACJK,UAAU,CAAC,kBACXE,KAAK,CAACV,4BACNW,GAAG;IACN,MAAMC,OAAOL,WAAWM,IAAI,CAACC,MAAM,CAAC,CAACC,YAAc,CAACA,UAAUJ,GAAG,CAAC;IAClE,MAAMK,SAAS,CAACD,YACd3B,cAAc2B,UAAUJ,GAAG,CAAC,cAAsCP;IACpE,KAAK,MAAMW,aAAa;WAAIH,KAAKE,MAAM,CAACE;WAAYJ,KAAKE,MAAM,CAAC,CAACG,QAAU,CAACD,OAAOC;KAAQ,CAAE;YACvEF;QAApB,MAAMG,OAAOC,QAAOJ,iBAAAA,UAAUJ,GAAG,CAAC,mBAAdI,iBAAyB,IAAIK,IAAI,GAAGC,WAAW;QACnE,IAAIH,QAAQ,CAACb,UAAUiB,GAAG,CAACJ,OAAOb,UAAUkB,GAAG,CAACL,MAAMH,UAAUS,EAAE;IACpE;IACA,OAAOnB;AACT;AAEA;;;;;CAKC,GACD,SAASoB,aACPC,GAAkB,EAClBC,QAA4B,EAC5BC,WAA8B;IAE9B,MAAMC,SAAkC,aAClCH,IAAII,MAAM,GAAG;QAAEA,QAAQJ,IAAII,MAAM;IAAC,IAAI,CAAC,GACvCH,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3BD,IAAIK,iBAAiB,GAAG;QAAEA,mBAAmBL,IAAIK,iBAAiB;IAAC,IAAI,CAAC,GACxEL,IAAIM,KAAK,GAAG;QAAEA,OAAON,IAAIM,KAAK;IAAC,IAAI,CAAC,GACrCN,IAAIO,OAAO,EAIVL,YAAYM,MAAM,GAAG;QAAEN,aAAanC,WAAW0C,UAAU,IAAIP;IAAa,IAAI,CAAC;IAErF,OAAOQ,OAAOC,IAAI,CAACR,QAAQK,MAAM,GAAGL,SAAS;AAC/C;AAEA;;;;;CAKC,GACD,OAAO,MAAMS,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOlD,eAAiC4C,KAAK;QACjDO,cAAchE;QACdiE,WAAWlE;IACb;IACA,IAAI,WAAWgE,MAAM,OAAOL,IAAIV,MAAM,CAACe,KAAKf,MAAM,EAAEa,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMpD,qBAAqB2C;QAC3C,IAAIS,QAAQC,EAAE,KAAK,OAAO,OAAOT,IAAIV,MAAM,CAACkB,QAAQlB,MAAM,EAAEa,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAmE,EAAE;QAC3E;;;;;;KAMC,GACD,MAAMC,OAAO,IAAIC;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU7E,uBAAuB2E;YACvC,IAAIE,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,iEAAiE;YACjE,iCAAiC;YACjC,MAAMC,MAAMrF,UAAUgF,QAAQlC,GAAG,CAACoC,KAAK;YACvC,IAAIR,KAAKhC,GAAG,CAAC2C,MAAM;gBACjBd,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQlC,GAAG,CAACoC,KAAK;oBAAEE,QAAQ;gBAAY;gBACpE;YACF;YACAV,KAAKY,GAAG,CAACD;YACT,KAAK,MAAMhD,SAAS2C,QAAQlC,GAAG,CAAC0B,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACnC,MAAMkD,KAAK,CAAC,GAAG,EAACf,uBAAAA,OAAO,CAACnC,MAAMkD,KAAK,CAAC,YAApBf,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAOjC,KAAKkC,QAAQlC,GAAG;gBAAEuC;YAAI;QACjD;QAEA;;;;;KAKC,GACD,MAAMG,cAAc9E,wBAAwB+D,WAAWgB,GAAG,CAAC,CAACpD,QAAUA,MAAMS,GAAG,CAACoC,KAAK;QACrF,MAAMQ,WAAqB,EAAE;QAE7B,MAAMpE,YAAYjB,cAAcsF,GAAG,GAAGrE,SAAS;QAC/C,MAAMsE,UAAUtE,UAAUM,UAAU,CAAC,SAASC,GAAG,CAACuC,QAAQ5C,MAAM;QAChE,MAAMqE,WAAW,MAAMvF,gBAAgB8D,QAAQ5C,MAAM;QACrD,MAAMsE,OAAOrB,WAAWgB,GAAG,CAAC,CAACpD,QAAUwD,SAAShE,GAAG,CAACQ,MAAMgD,GAAG;QAC7D,MAAMU,iBAAiBtB,WAAWuB,IAAI,CAAC,CAAC3D;gBAAUA;oBAAAA,uBAAAA,MAAMS,GAAG,CAACmD,SAAS,qBAAnB5D,qBAAqBiB,MAAM;;QAC7E,MAAM,CAAC4C,QAAQC,QAAQF,WAAWG,YAAY,GAAG,MAAMC,QAAQC,GAAG,CAAC;YACjExF,eACEsD,QAAQ7C,KAAK,EACbkD,WAAWgB,GAAG,CAAC,CAACpD,QAAUA,MAAMS,GAAG;YAErCgD,KAAKxC,MAAM,GAAGhC,UAAUiF,MAAM,IAAIT,QAAQO,QAAQG,OAAO,CAAC,EAAE;YAC5DT,iBACI1E,kBAAkBC,WAAW8C,QAAQ7C,KAAK,EAAE6C,QAAQ5C,MAAM,IAC1D6E,QAAQG,OAAO,CAAC,IAAI9E;YACxB,qEAAqE;YACrE,2DAA2D;YAC3DT,uBAAuBK,WAAW8C,QAAQ7C,KAAK;SAChD;QACD,MAAMkF,aAAa,IAAI/E,IAAIyE,OAAOV,GAAG,CAAC,CAACiB,WAAa;gBAACA,SAAS9D,EAAE;gBAAE8D;aAAS;QAC3E,MAAMC,OAAO,IAAIhC,IACfwB,OAAOjE,MAAM,CAAC,CAACwE,WAAaA,SAASE,MAAM,EAAEnB,GAAG,CAAC,CAACiB,WAAaA,SAAS9D,EAAE;QAE5E,MAAMiE,mBAAmB,IAAIlC;QAC7B,IAAImC,UAAyB;QAC7B,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAElC,KAAK,EAAEjC,GAAG,EAAEuC,GAAG,EAAE,IAAIZ,WAAY;gBAGvB3B;gBAeV2D;YAjBX,mEAAmE;YACnE,6CAA6C;YAC7C,MAAMzD,cAAc,EAACF,iBAAAA,IAAImD,SAAS,YAAbnD,iBAAiB,EAAE,EAAE2C,GAAG,CAAC,CAACnD;oBAAS2D;wBAAAA,iBAAAA,UAAUlE,GAAG,CAACO,KAAKG,WAAW,eAA9BwD,iBAAqC;;YAC7F,IAAIjD,YAAYgD,IAAI,CAAC,CAACpD,KAAO,CAACA,KAAK;gBACjC2B,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAmB;gBACnE;YACF;YACA,MAAM8B,QAAQ,CAACP,KAAKjE,GAAG,CAAC2C;YACxB;;;;;;;OAOC,GACD,MAAM8B,aAAajG,uBAAuBkF,aAAatD,IAAIO,OAAO,CAAC8D,UAAU,EAAE;gBAC7EC,OAAO,GAAEX,kBAAAA,WAAW1E,GAAG,CAACsD,yBAAfoB,gBAAqB1E,GAAG,CAAC;gBAClCiF,SAASE;YACX;YACA,IAAIC,WAAW9C,EAAE,KAAK,OAAO;gBAC3BE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAsB;gBACtE;YACF;YACA,IAAI+B,WAAWE,KAAK,EAAEvE,IAAIO,OAAO,CAAC8D,UAAU,GAAGA,WAAWE,KAAK;YAC/D;;;;;;;OAOC,GACD,IAAIH,OAAO;gBACT,IAAIJ,YAAY,MAAM;oBACpBA,UAAU,AAAC,CAAA,MAAMjB,SAASyB,KAAK,GAAGvF,GAAG,EAAC,EAAGwF,IAAI,GAAGD,KAAK;gBACvD;gBACA,IACExH,0BAA0BgH,UAAUC,aAAahH,oBAC9CyH,QAAQ,EACX;oBACAjD,QAAQU,IAAI,CAAC;wBAAEF;wBAAOG,OAAOpC,IAAIoC,KAAK;wBAAEE,QAAQ;oBAAe;oBAC/D;gBACF;YACF;YACA,IAAIrC;YACJ,IAAID,IAAI2E,UAAU,EAAE;gBAClB1E,WAAWmD,OAAOnE,GAAG,CAACe,IAAI2E,UAAU;gBACpC,IAAI,CAAC1E,UAAU8D,iBAAiBvB,GAAG,CAACxC,IAAI2E,UAAU;YACpD;YACA,MAAMC,SAAS,MAAMtH,YAAY;gBAC/BwF;gBACApE,QAAQ4C,QAAQ5C,MAAM;gBACtBmG,MAAM;oBACJzC,OAAOpC,IAAIoC,KAAK;mBACZpC,IAAIR,IAAI,GAAG;oBAAEA,MAAMQ,IAAIR,IAAI;gBAAC,IAAI,CAAC;oBACrCsF,QAAQzG;;YAEZ;YACA,IAAI,CAACuG,QAAQ;gBACXnD,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAMyC,UAAUhF,aAAaC,KAAKC,UAAU;mBAAI,IAAI4B,IAAI3B;aAAa;YACrE,IAAI6E,SAAS;gBACX,MAAMhC,SACHhE,GAAG,CAACwD,KACJ1C,GAAG,CACF,aAAKkF;oBAASC,WAAWjH,WAAWkH,eAAe;oBACnD;oBAAEC,OAAO;gBAAK;gBAElB,gEAAgE;gBAChE,iDAAiD;gBACjD,MAAMzH,uBAAuBsF,SAAShE,GAAG,CAACwD,MAAM;YAClD;YACAK,SAAST,IAAI,CAACnC,IAAIoC,KAAK;YACvB,IAAIgC,OAAO;gBACTF,WAAW;gBACXD,eAAe;YACjB,OAAO;gBACLE,UAAU;YACZ;QACF;QACA,MAAMgB,eAAexH,yBACnBiF,UACA,MAAM9E,aAAa4E,aAAa7E;QAGlC,MAAMuH,SAAgC;YACpCC,UAAUlE,KAAKW,IAAI,CAACtB,MAAM;YAC1B0D;YACAC;YACA1C,SAASA,QAAQ6D,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEtD,KAAK,GAAGuD,EAAEvD,KAAK;YACjDP;YACAqC,kBAAkB;mBAAIA;aAAiB;WACnCoB,iBAAiBM,YAAY;YAAEN;QAAa,IAAI,CAAC;QAEvD,OAAOrE,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAACmE;IAC9B,EAAE,OAAOlE,OAAO;QACdwE,QAAQxE,KAAK,CAAC,2BAA2BA;QACzC,OAAOJ,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/record-email-state.js

@@ -15,8 +15,9 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { registerPluginRecordEmailStateWriter } from "@aglyn/aglyn/plugin-manager/plugin-record-email-state";
-import { CRM_EMAIL_STATUS_FIELD, EMAIL_STATE_FIELD, nextEmailState, normalizeContactEmail, personKey, readEmailState } from "@aglyn/aglyn/server";
+import { CRM_EMAIL_STATUS_FIELD, CRM_EMAIL_STATUS_NONE, EMAIL_STATE_FIELD, nextEmailState, normalizeContactEmail, personKey, readEmailState } from "@aglyn/aglyn/server";
 import { findContactByEmail, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldValue } from "firebase-admin/firestore";
 import { BUNDLE_ID } from "../constants/bundle-common.js";
 const NONE = {
     records: 0
@@ -26,10 +27,25 @@ const NONE = {
  * a merge rather than a transaction: two verdicts landing together each
  * compare against a state at least as old as their own, and the ranking
  * makes the order of two writes of the same rank immaterial.
- */ async function stampRecord(ref, incoming, force) {
+ */ async function stampRecord(ref, incoming, force, withdraw = false) {
     const snapshot = await ref.get();
     if (!snapshot.exists) return false;
     const current = readEmailState(snapshot.data());
+    /*
+   * A WITHDRAWAL takes back the one verdict it names (AGL-3328): the
+   * deliverability check's "Would bounce" once the domain takes mail again.
+   * Any other standing verdict — a bounce DNS cannot see — is left alone.
+   */ if (withdraw) {
+        if ((current == null ? void 0 : current.status) !== incoming.status) return false;
+        await ref.update({
+            [EMAIL_STATE_FIELD]: FieldValue.delete(),
+            [CRM_EMAIL_STATUS_FIELD]: CRM_EMAIL_STATUS_NONE
+        });
+        return true;
+    }
+    // The deliverability check saying again what the record already holds:
+    // the date it was first found is the one worth keeping.
+    if (incoming.source === 'check' && (current == null ? void 0 : current.status) === incoming.status) return false;
     const next = nextEmailState(current, incoming, {
         force
     });
@@ -81,11 +97,12 @@ export function createCrmRecordEmailStateWriter(deps) {
                 enrollmentId: request.state.enrollmentId
             } : {});
             const force = request.force === true;
+            const withdraw = request.withdraw === true;
             let records = 0;
             try {
                 const contacts = firestore.collection('orgs').doc(orgId).collection('contacts');
                 const contact = await findContactByEmail(contacts, email);
-                if (contact && await stampRecord(contact.ref, state, force)) records += 1;
+                if (contact && await stampRecord(contact.ref, state, force, withdraw)) records += 1;
             } catch (error) {
                 console.error('[crm] the contact could not be stamped with an email state', orgId, error);
             }
@@ -95,7 +112,7 @@ export function createCrmRecordEmailStateWriter(deps) {
          * verdict on the ADDRESS, and since AGL-3277 there is one document
          * carrying it — the per-site loop beside this had nothing left to
          * find once AGL-3276 emptied the host path.
-         */ if (await stampRecord(firestore.collection('orgs').doc(orgId).collection('leads').doc(key), state, force)) {
+         */ if (await stampRecord(firestore.collection('orgs').doc(orgId).collection('leads').doc(key), state, force, withdraw)) {
                     records += 1;
                 }
             } catch (error) {

package/src/lib/server/record-email-state.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","BUNDLE_ID","NONE","records","stampRecord","ref","incoming","force","snapshot","get","exists","current","data","next","status","atMs","source","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,SAAS,QAAQ,gCAA4B;AAkCtD,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc;IAEd,MAAMC,WAAW,MAAMH,IAAII,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUb,eAAeU,SAASI,IAAI;IAC5C,MAAMC,OAAOlB,eAAegB,SAASL,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEM,SAASF,WACRA,WACCE,KAAKC,MAAM,KAAKH,QAAQG,MAAM,IAC9BD,KAAKE,IAAI,KAAKJ,QAAQI,IAAI,IAC1BF,KAAKG,MAAM,KAAKL,QAAQK,MAAM,IAC9BH,KAAKI,MAAM,KAAKN,QAAQM,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMZ,IAAIa,GAAG,CACX;QAAE,CAACxB,kBAAkB,EAAEmB;QAAM,CAACpB,uBAAuB,EAAEoB,KAAKC,MAAM;IAAC,GACnE;QAAEK,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQnB,GAAG;IAChE,OAAOc,KAAKb,MAAM,GAAGe,QAAOF,YAAAA,KAAKd,GAAG,CAAC,oBAATc,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQtC,sBAAsB0B,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQrC,UAAUqC,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOjC;YAC3B,MAAMmB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOlC;YACT;YACA,IAAI,CAACwB,OAAO,OAAOxB;YACnB,MAAMoC,QAAoB;gBACxBxB,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BC,MAAMwB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACvB,IAAI,KAAKO,QAAQgB,KAAK,CAACvB,IAAI,GAAG,IAAIO,QAAQgB,KAAK,CAACvB,IAAI,GAAG0B,KAAKC,GAAG;gBACnG1B,QAAQM,QAAQgB,KAAK,CAACtB,MAAM;gBAC5BC,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMtC,QAAQe,QAAQf,KAAK,KAAK;YAChC,IAAIJ,UAAU;YACd,IAAI;gBACF,MAAM2C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMhD,mBAAmB+C,UAAUZ;gBACnD,IAAIa,WAAY,MAAM3C,YAAY2C,QAAQ1C,GAAG,EAAEiC,OAAO/B,QAASJ,WAAW;YAC5E,EAAE,OAAOiC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMhC,YACRiB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACA/B,QACC;oBACDJ,WAAW;gBACb;YACF,EAAE,OAAOiC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEjC;YAAQ;QACnB;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAAS6C;IACd,OAAO;QAAE3B,WAAW,IAAMrB,cAAciD,GAAG,GAAG5B,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAAS6B,kCACdlB,OAAgCgB,gCAAgC;IAEhExD,qCAAqCuC,gCAAgCC,OAAO;QAAEmB,UAAUlD;IAAU;AACpG"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  CRM_EMAIL_STATUS_NONE,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n  withdraw = false,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  /*\n   * A WITHDRAWAL takes back the one verdict it names (AGL-3328): the\n   * deliverability check's \"Would bounce\" once the domain takes mail again.\n   * Any other standing verdict — a bounce DNS cannot see — is left alone.\n   */\n  if (withdraw) {\n    if (current?.status !== incoming.status) return false\n    await ref.update({\n      [EMAIL_STATE_FIELD]: FieldValue.delete(),\n      [CRM_EMAIL_STATUS_FIELD]: CRM_EMAIL_STATUS_NONE,\n    })\n    return true\n  }\n  // The deliverability check saying again what the record already holds:\n  // the date it was first found is the one worth keeping.\n  if (incoming.source === 'check' && current?.status === incoming.status) return false\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      const withdraw = request.withdraw === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force, withdraw))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n          withdraw,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","CRM_EMAIL_STATUS_NONE","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","FieldValue","BUNDLE_ID","NONE","records","stampRecord","ref","incoming","force","withdraw","snapshot","get","exists","current","data","status","update","delete","source","next","atMs","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,qBAAqB,EACrBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,SAAS,QAAQ,gCAA4B;AAkCtD,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc,EACdC,WAAW,KAAK;IAEhB,MAAMC,WAAW,MAAMJ,IAAIK,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUf,eAAeY,SAASI,IAAI;IAC5C;;;;GAIC,GACD,IAAIL,UAAU;QACZ,IAAII,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;QAChD,MAAMT,IAAIU,MAAM,CAAC;YACf,CAACtB,kBAAkB,EAAEO,WAAWgB,MAAM;YACtC,CAACzB,uBAAuB,EAAEC;QAC5B;QACA,OAAO;IACT;IACA,uEAAuE;IACvE,wDAAwD;IACxD,IAAIc,SAASW,MAAM,KAAK,WAAWL,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;IAC/E,MAAMI,OAAOxB,eAAekB,SAASN,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEW,SAASN,WACRA,WACCM,KAAKJ,MAAM,KAAKF,QAAQE,MAAM,IAC9BI,KAAKC,IAAI,KAAKP,QAAQO,IAAI,IAC1BD,KAAKD,MAAM,KAAKL,QAAQK,MAAM,IAC9BC,KAAKE,MAAM,KAAKR,QAAQQ,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMf,IAAIgB,GAAG,CACX;QAAE,CAAC5B,kBAAkB,EAAEyB;QAAM,CAAC3B,uBAAuB,EAAE2B,KAAKJ,MAAM;IAAC,GACnE;QAAEQ,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQrB,GAAG;IAChE,OAAOgB,KAAKf,MAAM,GAAGiB,QAAOF,YAAAA,KAAKhB,GAAG,CAAC,oBAATgB,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQ1C,sBAAsB8B,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQzC,UAAUyC,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOpC;YAC3B,MAAMsB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOrC;YACT;YACA,IAAI,CAAC2B,OAAO,OAAO3B;YACnB,MAAMuC,QAAoB;gBACxB3B,QAAQW,QAAQgB,KAAK,CAAC3B,MAAM;gBAC5BK,MAAMuB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACtB,IAAI,KAAKM,QAAQgB,KAAK,CAACtB,IAAI,GAAG,IAAIM,QAAQgB,KAAK,CAACtB,IAAI,GAAGyB,KAAKC,GAAG;gBACnG5B,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BG,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMzC,QAAQkB,QAAQlB,KAAK,KAAK;YAChC,MAAMC,WAAWiB,QAAQjB,QAAQ,KAAK;YACtC,IAAIL,UAAU;YACd,IAAI;gBACF,MAAM8C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMpD,mBAAmBmD,UAAUZ;gBACnD,IAAIa,WAAY,MAAM9C,YAAY8C,QAAQ7C,GAAG,EAAEoC,OAAOlC,OAAOC,WAAYL,WAAW;YACtF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMnC,YACRoB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACAlC,OACAC,WACC;oBACDL,WAAW;gBACb;YACF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEpC;YAAQ;QACnB;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAASgD;IACd,OAAO;QAAE3B,WAAW,IAAMzB,cAAcqD,GAAG,GAAG5B,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAAS6B,kCACdlB,OAAgCgB,gCAAgC;IAEhE7D,qCAAqC4C,gCAAgCC,OAAO;QAAEmB,UAAUrD;IAAU;AACpG"}

package/src/lib/server.js

@@ -73,6 +73,7 @@ import { crmLeadsImportHandler } from "./server/leads-import.js";
 import { crmTasksImportHandler } from "./server/tasks-import.js";
 import { crmDealStageHandler } from "./server-deal-stage.js";
 import { crmEmailSendHandler } from "./server/email-send.js";
+import { CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler } from "./server/email-check.js";
 import { leadConvertHandler } from "./server/lead-convert.js";
 import { leadCreateHandler } from "./server/lead-create.js";
 import { CONTACT_EMAIL_HISTORY_ROUTE, contactEmailHistoryHandler } from "./server/contact-email-history.js";
@@ -613,6 +614,11 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
     // read off the record, the daily cap and both suppression lists are
     // judged, and the message leaves on the site's sending identity.
     registerPluginApiRoute(CRM_API_ROUTES.emailSend, crmEmailSendHandler);
+    // What the platform knows about one address before somebody writes to it
+    // (AGL-3328): the gateway chip on a record page, and the composer's
+    // warning about a domain with no mail server or a gateway holding this
+    // site's mail. DNS and the ledger are the server's.
+    registerPluginApiRoute(CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler);
     // Two records for one person become one (AGL-2625): the repoint of every
     // row naming the merged record and the transaction over both documents
     // are the server's, and the address index it writes is closed to clients.

package/src/lib/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The Contacts plugin's SERVER half (AGL-2595).\n *\n * Contacts CRM v1 had none: every console write was client-direct against\n * the Firestore rules, and the one server path that creates a contact —\n * `upsertHostContact` — belongs to the capture doors, not to this plugin.\n * v2 needs a server for the things a browser must not do alone: an import\n * that dedupes forty thousand rows, a bulk action over a selection, an\n * auto-association of contacts to companies by domain. Each of those lands\n * as a `crm/<route>` handler registered here.\n *\n * `crm/ping` exists so the wiring is PROVEN rather than assumed:\n * `plugins.config.json` names this module's register function and the\n * `crm` API prefix, the generated server manifest loads this file, and the\n * console's `/api/[...pluginApi]` dispatcher reaches the handler. A plugin\n * whose first real route also had to be its first wiring test would have\n * two things to debug at once.\n *\n * The real routes are the writes with a side effect outside the document:\n * `crm/contact-stage` (AGL-2605) exists for the EVENT — `contactStageChanged`\n * can only be emitted by a server path that performed the write, so a record\n * page that moved the stage client-direct would move the person and tell no\n * automation; the task routes (AGL-2599) carry an assignee's notification and\n * the `taskCompleted` event; `crm/contacts-import` (AGL-2602) pushes one chunk\n * of a file through the same capture door every other server door uses.\n * `crm/deal-stage` (AGL-2598) is the one writer of a deal's stage, won and lost,\n * because a stage change is what automations listen for (`server-deal-stage.ts`).\n * `crm/contacts-create` (AGL-2596) is a person typed into the console by a\n * member of the team — a server route because the dedupe against every\n * holder's rows and the audience band are judgments the browser cannot make.\n * `crm/contact-update` (AGL-2804) is every other write to a contact's facets:\n * the rules cannot tell one field of a holder's facet from another, so they\n * leave a client nothing there but letting a holder go, and the plan is\n * asked here about the fields a save carries.\n */\n\nimport {\n  CONTACT_ERASED_MESSAGE,\n  contactFacetPath,\n  CRM_COLLECTIONS,\n  crmReadTokens,\n  isContactLifecycleStage,\n  isOrgWideMember,\n  normalizeAddress,\n  normalizeContactEmail,\n  normalizePhone,\n  type AglynPostalAddress,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  readContactFacet,\n  registerPluginApiRoute,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  memberHasOrgPermission,\n  orgDataCollectionForHost,\n  resolveOrgMembership,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { captureHostContact, emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { CRM_API_ROUTES } from './constants/api-routes'\nimport { registerCrmServerDeclarations } from './declarations.server'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { CRM_NEXT_ACTIVITY_ROUTE } from './model/next-activity'\nimport { CRM_LIST_FIELDS_ROUTE } from './model/list-fields'\nimport { CRM_LEAD_SOURCE_VALUES_ROUTE } from './model/lead-source-values'\nimport { CRM_TASK_ROUTES } from './model/task-routes'\nimport { crmNextActivityHandler } from './server/next-activity-routes'\nimport { crmListFieldsHandler } from './server/list-fields-routes'\nimport { crmLeadSourceValuesHandler } from './server/lead-source-values'\nimport { registerCrmRecordEmailStateWriter } from './server/record-email-state'\nimport { registerCrmRecordTimelineWriter } from './server/record-timeline'\nimport { crmTaskCompleteHandler, crmTaskSaveHandler } from './server/task-routes'\nimport { crmCompaniesImportHandler } from './server/companies-import'\nimport { crmContactsImportHandler } from './server/contacts-import'\nimport { crmDealsImportHandler } from './server/deals-import'\nimport { crmLeadsImportHandler } from './server/leads-import'\nimport { crmTasksImportHandler } from './server/tasks-import'\nimport { crmDealStageHandler } from './server-deal-stage'\nimport { crmEmailSendHandler } from './server/email-send'\nimport { leadConvertHandler } from './server/lead-convert'\nimport { leadCreateHandler } from './server/lead-create'\nimport {\n  CONTACT_EMAIL_HISTORY_ROUTE,\n  contactEmailHistoryHandler,\n} from './server/contact-email-history'\nimport { CONTACTS_MERGE_ROUTE, contactsMergeHandler } from './server/contacts-merge'\nimport { CRM_ERASE_PERSON_ROUTE, crmErasePersonHandler } from './server/erase-person'\nimport { CRM_ORG_ACTIVITY_ROUTE, crmOrgActivityHandler } from './server/org-activity'\nimport { CRM_INBOUND_ADDRESS_ROUTE, crmInboundAddressHandler } from './server/inbound-address'\nimport { crmCompanyDeleteHandler } from './server/company-delete'\nimport { CONTACT_PHONE_REFUSAL, normalizeTags, typed } from './server/contact-profile'\nimport { crmContactUpdateHandler } from './server/contact-update'\nimport {\n  CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE,\n  crmEmailTemplateDuplicateHandler,\n} from './server/email-template-duplicate'\nimport { registerCrmRecordFactsReaders } from './server/record-facts'\nimport { crmSuiteRefusal } from './server/suite-gate'\nimport {\n  CRM_RECIPE_INSTALL_ROUTE,\n  CRM_RECIPE_STATUS_ROUTE,\n  crmRecipeInstallHandler,\n  crmRecipeStatusHandler,\n} from './server/recipe-routes'\n\n/**\n * `GET /api/crm/ping` → `{ ok: true, plugin: 'crm' }`.\n *\n * No auth, no host, no data: it answers whether the plugin's server bundle\n * was loaded and its routes registered, which is a fact about the process\n * and not about any org. Anything that reads a document goes behind the\n * same session and role checks the other plugins' console routes use.\n */\nexport const crmPingHandler: PluginApiHandler = (req, res) => {\n  if (req.method !== 'GET') {\n    res.setHeader('Allow', 'GET')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  res.status(200).json({ ok: true, plugin: BUNDLE_ID })\n}\n\ntype Refusal = { ok: false; status: number; error: string }\n\n/**\n * Who is calling, and whether they may edit this site's CRM.\n *\n * The same check the inbox, bookings and email console routes make: a\n * bearer ID token, verified, and an `admin` or `editor` role on the host\n * document. A contact is a site's business record, so the site's own role\n * map is the right authority; org-wide reach is not required, because a\n * site editor who can open the record in the console can already write\n * every other field on it client-direct.\n */\nasync function authorizeSiteEditor(\n  req: PluginApiRequest,\n  hostId: string,\n): Promise<{ ok: true; uid: string } | Refusal> {\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return { ok: false, status: 401, error: 'Unauthenticated' }\n  let uid: string\n  try {\n    uid = (await firebaseAdmin.app().auth().verifyIdToken(idToken)).uid\n  } catch (error) {\n    // A refused credential is the caller's 401; a failure to check one is\n    // ours and keeps a 5xx (AGL-2852).\n    if (isRefusedIdToken(error)) return { ok: false, status: 401, error: 'Unauthenticated' }\n    console.error('[crm] the site editor could not be verified', error)\n    return { ok: false, status: 500, error: 'The sign-in could not be checked. Try again.' }\n  }\n  const hostSnapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .get()\n  if (!hostSnapshot.exists) {\n    return { ok: false, status: 404, error: 'Unknown site' }\n  }\n  const memberRole = (hostSnapshot.get('memberRoles') ?? {})[uid]\n  if (memberRole !== 'admin' && memberRole !== 'editor') {\n    return { ok: false, status: 403, error: 'Not a site admin or editor' }\n  }\n  return { ok: true, uid }\n}\n\n/**\n * `POST /api/crm/contact-stage` with `{ hostId, contactId, lifecycleStage }`.\n *\n * Writes the stage into THIS site's facet on the contact — a dotted\n * `update()`, never a top-level field, because the row is shared by every\n * site in the org and a stage is one holder's reading of the person — and\n * then announces `contactStageChanged` with the stage it replaced.\n *\n * A stage set to what it already is writes nothing and announces nothing:\n * the response says `changed: false`, and no automation listening for a\n * change hears one that did not happen.\n *\n * `lifecycleStage: null` CLEARS the stage (AGL-2804). A facet is the\n * server's to write, so \"not placed yet\" comes through the route that owns\n * the stage rather than as a client-direct delete, and it is refused to a\n * plan without the suite the way a move is. There is no event for \"no\n * stage\", so a clear announces nothing; an empty string names no stage and\n * is refused like any other the list does not have.\n *\n * The contact is looked up by id and then checked against `visibleTo`,\n * because the Admin SDK evaluates no rules: a caller who can edit site A\n * must not be able to restage a contact only site B holds by guessing its\n * id, and the scoped query the list uses is not available to a `doc()` read.\n */\nexport const contactStageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const hostId = String(req.body?.hostId ?? '').trim()\n  const contactId = String(req.body?.contactId ?? '').trim()\n  const requested: unknown = req.body?.lifecycleStage\n  if (!hostId || !contactId) {\n    res.status(400).json({ error: 'Missing hostId or contactId' })\n    return\n  }\n  // `null` clears the stage; anything else has to be one of the list's.\n  const clearing = requested === null\n  const lifecycleStage = clearing\n    ? ''\n    : isContactLifecycleStage(requested)\n      ? requested\n      : null\n  if (lifecycleStage === null) {\n    res.status(400).json({ error: 'Pick a lifecycle stage' })\n    return\n  }\n  const caller = await authorizeSiteEditor(req, hostId)\n  if (caller.ok === false) {\n    res.status(caller.status).json({ error: caller.error })\n    return\n  }\n  try {\n    // A lifecycle stage is the suite's (AGL-2787) — see `suite-gate.ts`.\n    const owner = await getOrgForHost(hostId)\n    if (!owner) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const suite = crmSuiteRefusal(owner.org, \"Moving a contact's lifecycle stage\")\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const contactsRef = await orgDataCollectionForHost(hostId, 'contacts')\n    const snapshot = await contactsRef.doc(contactId).get()\n    if (!snapshot.exists || !visibleToHost(snapshot.get('visibleTo'), hostId)) {\n      res.status(404).json({ error: 'Unknown contact' })\n      return\n    }\n    const group = await consentGroupForSite(hostId)\n    const facet = readContactFacet(\n      snapshot.data() as Record<string, unknown>,\n      group.groupId,\n    )\n    const previousStage = facet.lifecycleStage ?? ''\n    if (previousStage === lifecycleStage) {\n      res\n        .status(200)\n        .json({ ok: true, changed: false, lifecycleStage, previousStage })\n      return\n    }\n    await snapshot.ref.update({\n      [contactFacetPath(group.groupId, 'lifecycleStage')]: clearing\n        ? FieldValue.delete()\n        : lifecycleStage,\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The stage is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(snapshot.ref, 'contacts')\n    // Awaited, not floated: a serverless response ending cancels in-flight\n    // work, and the event is the reason this route exists. A clear has none.\n    if (!clearing) {\n      await emitHostEvent(hostId, 'contactStageChanged', {\n        contactId,\n        email: String(snapshot.get('email') ?? ''),\n        lifecycleStage,\n        previousStage,\n      })\n    }\n    res\n      .status(200)\n      .json({ ok: true, changed: true, lifecycleStage, previousStage })\n  } catch (error) {\n    console.error('[crm] contact-stage failed', hostId, contactId, error)\n    res.status(500).json({ error: 'The stage could not be changed' })\n  }\n}\n\n/**\n * What the create route says when the band refused (AGL-2596).\n *\n * The contacts list's own alert, in the past tense: the list says new\n * visitors are \"no longer captured\", and this says the one contact the\n * reader just tried to add was not. The remedy is the same sentence in both\n * places, so a reader who sees one and then the other is told one thing.\n */\nexport const CONTACT_BAND_FULL_MESSAGE =\n  'Contact limit reached — this contact was not added. Upgrade in Billing ' +\n  'to keep collecting.'\n\n/**\n * `POST /api/crm/contacts-create` — a person added by hand (AGL-2596).\n *\n * Body: `{ hostId, email, name?, phone?, jobTitle?, companyName?,\n * companyId?, address?, ownerUid?, lifecycleStage?, tags?,\n * marketingConsent?, disclosedConsentGroup? }`. Answers\n * `{ contactId, created }`: `created` is\n * false when the address already belonged to somebody, in which case what\n * was typed MERGES into the existing row — the dedupe the shared address\n * book exists for, and the reason a second \"create\" of one person is not\n * an error.\n *\n * ## Who may call it\n *\n * The caller's ID token, then `data.manage` on the site's org — the same key\n * the console surface itself is gated on, resolved through the same\n * three-layer permission read the members route uses. A scoped member is\n * admitted only for a site they reach: the rules would refuse a browser\n * write outside their tokens, and a server route that admitted it would be\n * a way round the rules rather than a service in front of them.\n *\n * ## What it refuses, and how\n *\n * A malformed email or phone number is a 400 with a sentence the drawer can\n * show under the field. The band is a 409 carrying the list's own wording:\n * it is not a bad request and not a server fault, it is the plan saying no,\n * and the drawer relays the sentence rather than inventing one.\n *\n * ## The company (AGL-2613)\n *\n * `companyId` is the picker's choice, and it is checked before anything is\n * written: the company has to exist and be visible to the capturing site's\n * scope, or a caller could file a person under a record they cannot open —\n * the same refusal the lead conversion makes. It reaches the upsert as\n * `facet.companyId`, which is where the link is kept in step with its mirror\n * and the company's contacts count; a merge onto somebody already at another\n * company is a MOVE there, not a second link. The stored company's own name\n * is what is echoed, over whatever the client sent, because the name on the\n * record is the company's and not the form's.\n *\n * ## What it writes beyond the upsert\n *\n * `upsertHostContact` takes the profile — phone, title, address, owner,\n * stage, company — and writes it into the capturing group's facet. The two\n * things it does not take are written here by DOTTED path afterwards: the\n * tags, which union into whatever the person already carried, and the\n * company name — the picked company's, or free text for a person filed\n * under a name no company record carries yet. Dotted paths because this is\n * an `update()`, and only an update reads a dot as a path — a nested object\n * here would replace the facet map and take every other holder's records\n * with it.\n */\nexport const crmContactsCreateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const hostId = typed(body['hostId'], 128)\n  if (!hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const email = normalizeContactEmail(body['email'])\n  if (!email) {\n    res.status(400).json({ error: 'Enter a valid email address.' })\n    return\n  }\n  const rawPhone = typed(body['phone'], 40)\n  const phone = rawPhone ? normalizePhone(rawPhone) : null\n  if (rawPhone && !phone) {\n    res.status(400).json({ error: CONTACT_PHONE_REFUSAL })\n    return\n  }\n  const rawStage = typed(body['lifecycleStage'], 40)\n  if (rawStage && !isContactLifecycleStage(rawStage)) {\n    res.status(400).json({ error: 'Unknown lifecycle stage.' })\n    return\n  }\n  const name = typed(body['name'], 120)\n  const jobTitle = typed(body['jobTitle'], 120)\n  let companyName = typed(body['companyName'], 120)\n  const companyId = typed(body['companyId'], 128)\n  const ownerUid = typed(body['ownerUid'], 128)\n  const address =\n    body['address'] && typeof body['address'] === 'object'\n      ? normalizeAddress(body['address'] as AglynPostalAddress)\n      : null\n  const tags = normalizeTags(body['tags'])\n  const marketingConsent = body['marketingConsent'] === true\n  // The key of the consent-group sentence the drawer showed beside the box\n  // (AGL-3320): the opt-in covers the site's group only while it is the\n  // group's current one, and the capturing site alone otherwise.\n  const disclosedConsentGroup = typed(body['disclosedConsentGroup'], 64)\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) {\n    res.status(401).json({ error: 'Unauthenticated' })\n    return\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const resolved = await getOrgForHost(hostId)\n    if (!resolved) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const isStaff = decoded['staff'] === true\n    if (!isStaff) {\n      const membership = await resolveOrgMembership(decoded.uid, resolved.orgId)\n      const member = membership?.member ?? null\n      const reaches =\n        isOrgWideMember(member) || Boolean(member?.hostAccess?.[hostId])\n      const allowed =\n        member &&\n        reaches &&\n        (await memberHasOrgPermission(resolved.orgId, member, 'data.manage'))\n      if (!allowed) {\n        res.status(403).json({\n          error: 'Adding contacts requires the data.manage permission on this site',\n        })\n        return\n      }\n    }\n\n    // A person typed in by the team is the suite's; the capture doors that\n    // fill a Free workspace's contacts do not come through here (AGL-2787).\n    const suite = crmSuiteRefusal(resolved.org, 'Adding a contact by hand')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    if (companyId) {\n      const group = await consentGroupForSite(\n        hostId,\n        resolved.org as Record<string, unknown>,\n      )\n      const readable = new Set<string>(crmReadTokens(group))\n      const companySnapshot = await firebaseAdmin\n        .app()\n        .firestore()\n        .collection('orgs')\n        .doc(resolved.orgId)\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(companyId)\n        .get()\n      const tokens: unknown = companySnapshot.exists\n        ? companySnapshot.get('visibleTo')\n        : undefined\n      const visible =\n        Array.isArray(tokens) && tokens.some((token) => readable.has(String(token)))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      companyName = typed(companySnapshot.get('name'), 120) || companyName\n    }\n\n    const result = await captureHostContact({\n      hostId,\n      email,\n      ...(name ? { name } : {}),\n      source: 'manual',\n      interaction: { summary: 'Added by hand' },\n      marketingConsent,\n      ...(marketingConsent && disclosedConsentGroup\n        ? { disclosedConsentGroup }\n        : {}),\n      facet: {\n        ...(phone ? { phone } : {}),\n        ...(jobTitle ? { jobTitle } : {}),\n        ...(companyId ? { companyId } : {}),\n        ...(address ? { address } : {}),\n        ...(ownerUid ? { ownerUid } : {}),\n        ...(rawStage && isContactLifecycleStage(rawStage)\n          ? { lifecycleStage: rawStage }\n          : {}),\n      },\n    })\n\n    if ('refused' in result) {\n      if (result.refused === 'band') {\n        res.status(409).json({ error: CONTACT_BAND_FULL_MESSAGE, reason: 'band' })\n        return\n      }\n      if (result.refused === 'invalid-email') {\n        res.status(400).json({ error: 'Enter a valid email address.' })\n        return\n      }\n      // The person was erased from this workspace (AGL-2623). A conflict,\n      // like the band: the request was well-formed and the answer is a\n      // standing fact about the address, not a fault in the call.\n      if (result.refused === 'erased') {\n        res.status(409).json({ error: CONTACT_ERASED_MESSAGE, reason: 'erased' })\n        return\n      }\n      res.status(500).json({ error: 'The contact could not be saved.' })\n      return\n    }\n\n    if (tags.length || companyName) {\n      const group = await consentGroupForSite(\n        hostId,\n        resolved.org as Record<string, unknown>,\n      )\n      const contacts = await orgDataCollectionForHost(hostId, 'contacts')\n      await contacts.doc(result.contactId).update({\n        ...(tags.length\n          ? {\n              [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(\n                ...tags,\n              ),\n            }\n          : {}),\n        ...(companyName\n          ? {\n              [contactFacetPath(group.groupId, 'companyName')]: companyName,\n              // The search echo — see `HostContact.companyName`.\n              companyName,\n            }\n          : {}),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      // The tags are what the Contacts list filters by (AGL-3321).\n      await restampCrmListFieldsAt(contacts.doc(result.contactId), 'contacts')\n    }\n\n    /*\n     * The audit line, written HERE rather than by the console (AGL-2622):\n     * a route that verified the caller and performed the write is the one\n     * writer that cannot record an act that did not happen, which is the\n     * reason `check-activity-coverage.mjs` counts this file. A merge into\n     * a person the org already held is said to be one — the row was\n     * updated, not added — so the feed cannot claim two people for one.\n     */\n    await logHostActivity(\n      hostId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      result.created ? 'Added contact' : 'Updated contact',\n      { type: 'contact', id: result.contactId, name: name || email },\n    )\n\n    res\n      .status(result.created ? 201 : 200)\n      .json({ contactId: result.contactId, created: result.created })\n  } catch (error) {\n    console.error('[crm] contact create failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n\n/** Console API registration, named in `plugins.config.json` as `consoleApi`. */\nexport function registerCrmConsoleApi(): void {\n  /*\n   * The contact-capture writer, again (AGL-3080). Both apps run it at boot\n   * from their generated server-declarations manifest, and this is the\n   * backstop for a process whose boot did not: the first CRM door to load\n   * registers it. Registering twice replaces in place.\n   */\n  registerCrmServerDeclarations()\n  registerPluginApiRoute(CRM_API_ROUTES.ping, crmPingHandler)\n  registerPluginApiRoute(CRM_API_ROUTES.contactStage, contactStageHandler)\n  // Every other console write to a contact's facets (AGL-2804): the rules\n  // cannot tell one facet field from another, so the plan is asked here.\n  registerPluginApiRoute(CRM_API_ROUTES.contactUpdate, crmContactUpdateHandler)\n  // A company's contacts unlinked, then the company (AGL-2804): the unlink\n  // clears a facet, which is the server's to write.\n  registerPluginApiRoute(CRM_API_ROUTES.companyDelete, crmCompanyDeleteHandler)\n  // Tasks (AGL-2599): the two writes with a side effect outside the document\n  // — an assignee's notification, and the `taskCompleted` host event.\n  registerPluginApiRoute(CRM_TASK_ROUTES.save, crmTaskSaveHandler)\n  registerPluginApiRoute(CRM_TASK_ROUTES.complete, crmTaskCompleteHandler)\n  // A client-direct task write's door to `nextTaskAtMs` (AGL-2661).\n  registerPluginApiRoute(CRM_NEXT_ACTIVITY_ROUTE, crmNextActivityHandler)\n  // What a client-direct write the browser cannot follow up asks for: the\n  // fields the CRM lists query, restamped from the record (AGL-3321).\n  registerPluginApiRoute(CRM_LIST_FIELDS_ROUTE, crmListFieldsHandler)\n  // A lead source value renamed or deleted (AGL-3298): the list and every\n  // lead and contact holding the old label, in one request.\n  registerPluginApiRoute(CRM_LEAD_SOURCE_VALUES_ROUTE, crmLeadSourceValuesHandler)\n  // One chunk of a contact file (AGL-2602), judged and written through the\n  // same door every capture uses.\n  registerPluginApiRoute('crm/contacts-import', crmContactsImportHandler)\n  // One chunk of a companies file (AGL-2621), matched by domain then name\n  // and written with the stamp every CRM creator writes.\n  registerPluginApiRoute('crm/companies-import', crmCompaniesImportHandler)\n  // One chunk of a deals file and one of a tasks file (AGL-2662): the\n  // pipeline, the stage and the assignee resolved by name, a row refused\n  // when the org has no such name.\n  registerPluginApiRoute('crm/deals-import', crmDealsImportHandler)\n  registerPluginApiRoute('crm/tasks-import', crmTasksImportHandler)\n  // One chunk of a leads file (AGL-2701), written through `addHostLead` —\n  // the same door a sign-up, a booking and a form submission file a lead\n  // through, so an imported row is keyed, bounded and unconsented exactly\n  // as a captured one is.\n  registerPluginApiRoute('crm/leads-import', crmLeadsImportHandler)\n  // The one writer of a deal's stage, won and lost (AGL-2598): the browser\n  // could write the field, but only a server can emit the event an\n  // automation listens for.\n  registerPluginApiRoute('crm/deal-stage', crmDealStageHandler)\n  // A person typed into the console (AGL-2596): the capture doors' own\n  // function behind a session check, so the dedupe and the band are judged\n  // where every other door judges them.\n  registerPluginApiRoute('crm/contacts-create', crmContactsCreateHandler)\n  // A lead becomes a contact, a company and a deal (AGL-2608) — the one CRM\n  // write a browser cannot make alone, because only the server may create a\n  // contact through the dedupe-and-meter door.\n  registerPluginApiRoute('crm/lead-convert', leadConvertHandler)\n  // A lead entered by hand (AGL-3231): the New lead drawer's route.\n  registerPluginApiRoute('crm/leads-create', leadCreateHandler)\n  // The one READ behind a route (AGL-2616): the per-recipient delivery log\n  // is closed to clients, so a contact's campaign mail is projected here.\n  registerPluginApiRoute(CONTACT_EMAIL_HISTORY_ROUTE, contactEmailHistoryHandler)\n  // One email to one person from their record (AGL-2615): the recipient is\n  // read off the record, the daily cap and both suppression lists are\n  // judged, and the message leaves on the site's sending identity.\n  registerPluginApiRoute(CRM_API_ROUTES.emailSend, crmEmailSendHandler)\n  // Two records for one person become one (AGL-2625): the repoint of every\n  // row naming the merged record and the transaction over both documents\n  // are the server's, and the address index it writes is closed to clients.\n  registerPluginApiRoute(CONTACTS_MERGE_ROUTE, contactsMergeHandler)\n  // Files a person's privacy erasure for the daily job (AGL-2623);\n  // workspace admins only.\n  registerPluginApiRoute(CRM_ERASE_PERSON_ROUTE, crmErasePersonHandler)\n  // One line in the organization's activity feed for an act the org-level\n  // hub performed client-direct (AGL-2634): the feed is closed to clients,\n  // so the bulk bars' lines come through here.\n  registerPluginApiRoute(CRM_ORG_ACTIVITY_ROUTE, crmOrgActivityHandler)\n  // A recipe's action written into one site's automations from the org\n  // hub (AGL-2639), stamped and deduplicated by the server, and the stamps\n  // read back per site so the hub can say which sites carry which recipe.\n  registerPluginApiRoute(CRM_RECIPE_INSTALL_ROUTE, crmRecipeInstallHandler)\n  registerPluginApiRoute(CRM_RECIPE_STATUS_ROUTE, crmRecipeStatusHandler)\n  // The workspace's email capture address (AGL-2657): the token is minted\n  // and rotated here, behind the CRM's own gate, and the org document that\n  // carries it is closed to every client.\n  registerPluginApiRoute(CRM_INBOUND_ADDRESS_ROUTE, crmInboundAddressHandler)\n  registerPluginApiRoute(\n    CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE,\n    crmEmailTemplateDuplicateHandler,\n  )\n  // The facts of a contact, company, deal or lead, and an import's field\n  // catalog, for another plugin in this process (AGL-2917): read on the core's\n  // record-facts seam under the rules every CRM door applies, and written\n  // nowhere.\n  registerCrmRecordFactsReaders()\n  // The CRM as the workspace's record system on the core's record-timeline\n  // seam (AGL-2981): another plugin files an email, a reply or a task on a\n  // record through it, under the CRM's own scope, dedupe and ceiling.\n  registerCrmRecordTimelineWriter()\n  // And on the record email-state seam (AGL-3245): a sender that filed a\n  // verdict on an address — a bounce, a complaint, an unsubscribe, a\n  // do-not-contact mark — stamps the lead and the contact through it.\n  registerCrmRecordEmailStateWriter()\n}\n"],"names":["CONTACT_ERASED_MESSAGE","contactFacetPath","CRM_COLLECTIONS","crmReadTokens","isContactLifecycleStage","isOrgWideMember","normalizeAddress","normalizeContactEmail","normalizePhone","readContactFacet","registerPluginApiRoute","visibleToHost","consentGroupForSite","firebaseAdmin","getOrgForHost","logHostActivity","memberHasOrgPermission","orgDataCollectionForHost","resolveOrgMembership","restampCrmListFieldsAt","isRefusedIdToken","captureHostContact","emitHostEvent","FieldValue","CRM_API_ROUTES","registerCrmServerDeclarations","BUNDLE_ID","CRM_NEXT_ACTIVITY_ROUTE","CRM_LIST_FIELDS_ROUTE","CRM_LEAD_SOURCE_VALUES_ROUTE","CRM_TASK_ROUTES","crmNextActivityHandler","crmListFieldsHandler","crmLeadSourceValuesHandler","registerCrmRecordEmailStateWriter","registerCrmRecordTimelineWriter","crmTaskCompleteHandler","crmTaskSaveHandler","crmCompaniesImportHandler","crmContactsImportHandler","crmDealsImportHandler","crmLeadsImportHandler","crmTasksImportHandler","crmDealStageHandler","crmEmailSendHandler","leadConvertHandler","leadCreateHandler","CONTACT_EMAIL_HISTORY_ROUTE","contactEmailHistoryHandler","CONTACTS_MERGE_ROUTE","contactsMergeHandler","CRM_ERASE_PERSON_ROUTE","crmErasePersonHandler","CRM_ORG_ACTIVITY_ROUTE","crmOrgActivityHandler","CRM_INBOUND_ADDRESS_ROUTE","crmInboundAddressHandler","crmCompanyDeleteHandler","CONTACT_PHONE_REFUSAL","normalizeTags","typed","crmContactUpdateHandler","CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE","crmEmailTemplateDuplicateHandler","registerCrmRecordFactsReaders","crmSuiteRefusal","CRM_RECIPE_INSTALL_ROUTE","CRM_RECIPE_STATUS_ROUTE","crmRecipeInstallHandler","crmRecipeStatusHandler","crmPingHandler","req","res","method","setHeader","status","json","error","ok","plugin","authorizeSiteEditor","hostId","hostSnapshot","authorization","String","headers","idToken","startsWith","slice","length","undefined","uid","app","auth","verifyIdToken","console","firestore","collection","doc","get","exists","memberRole","contactStageHandler","body","trim","contactId","requested","lifecycleStage","clearing","caller","facet","owner","suite","org","contactsRef","snapshot","group","data","groupId","previousStage","changed","ref","update","delete","updatedAt","serverTimestamp","email","CONTACT_BAND_FULL_MESSAGE","crmContactsCreateHandler","rawPhone","phone","rawStage","name","jobTitle","companyName","companyId","ownerUid","address","tags","marketingConsent","disclosedConsentGroup","decoded","resolved","isStaff","member","membership","orgId","reaches","Boolean","hostAccess","allowed","readable","Set","companySnapshot","companies","tokens","visible","Array","isArray","some","token","has","result","source","interaction","summary","refused","reason","contacts","arrayUnion","created","type","id","registerCrmConsoleApi","ping","contactStage","contactUpdate","companyDelete","save","complete","emailSend"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCC,GAED,SACEA,sBAAsB,EACtBC,gBAAgB,EAChBC,eAAe,EACfC,aAAa,EACbC,uBAAuB,EACvBC,eAAe,EACfC,gBAAgB,EAChBC,qBAAqB,EACrBC,cAAc,EAIdC,gBAAgB,EAChBC,sBAAsB,EACtBC,aAAa,QACR,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,sBAAsB,EACtBC,wBAAwB,EACxBC,oBAAoB,EACpBC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,wBAAuB;AACzE,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,cAAc,QAAQ,4BAAwB;AACvD,SAASC,6BAA6B,QAAQ,2BAAuB;AACrE,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,uBAAuB,QAAQ,2BAAuB;AAC/D,SAASC,qBAAqB,QAAQ,yBAAqB;AAC3D,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,eAAe,QAAQ,yBAAqB;AACrD,SAASC,sBAAsB,QAAQ,mCAA+B;AACtE,SAASC,oBAAoB,QAAQ,iCAA6B;AAClE,SAASC,0BAA0B,QAAQ,iCAA6B;AACxE,SAASC,iCAAiC,QAAQ,iCAA6B;AAC/E,SAASC,+BAA+B,QAAQ,8BAA0B;AAC1E,SAASC,sBAAsB,EAAEC,kBAAkB,QAAQ,0BAAsB;AACjF,SAASC,yBAAyB,QAAQ,+BAA2B;AACrE,SAASC,wBAAwB,QAAQ,8BAA0B;AACnE,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,mBAAmB,QAAQ,yBAAqB;AACzD,SAASC,mBAAmB,QAAQ,yBAAqB;AACzD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SACEC,2BAA2B,EAC3BC,0BAA0B,QACrB,oCAAgC;AACvC,SAASC,oBAAoB,EAAEC,oBAAoB,QAAQ,6BAAyB;AACpF,SAASC,sBAAsB,EAAEC,qBAAqB,QAAQ,2BAAuB;AACrF,SAASC,sBAAsB,EAAEC,qBAAqB,QAAQ,2BAAuB;AACrF,SAASC,yBAAyB,EAAEC,wBAAwB,QAAQ,8BAA0B;AAC9F,SAASC,uBAAuB,QAAQ,6BAAyB;AACjE,SAASC,qBAAqB,EAAEC,aAAa,EAAEC,KAAK,QAAQ,8BAA0B;AACtF,SAASC,uBAAuB,QAAQ,6BAAyB;AACjE,SACEC,kCAAkC,EAClCC,gCAAgC,QAC3B,uCAAmC;AAC1C,SAASC,6BAA6B,QAAQ,2BAAuB;AACrE,SAASC,eAAe,QAAQ,yBAAqB;AACrD,SACEC,wBAAwB,EACxBC,uBAAuB,EACvBC,uBAAuB,EACvBC,sBAAsB,QACjB,4BAAwB;AAE/B;;;;;;;CAOC,GACD,OAAO,MAAMC,iBAAmC,CAACC,KAAKC;IACpD,IAAID,IAAIE,MAAM,KAAK,OAAO;QACxBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACAL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEE,IAAI;QAAMC,QAAQrD;IAAU;AACrD,EAAC;AAID;;;;;;;;;CASC,GACD,eAAesD,oBACbT,GAAqB,EACrBU,MAAc;QAEeV,4BAwBTW;IAxBpB,MAAMC,gBAAgBC,QAAOb,6BAAAA,IAAIc,OAAO,CAACF,aAAa,YAAzBZ,6BAA6B;IAC1D,MAAMe,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAO;QAAER,IAAI;QAAOH,QAAQ;QAAKE,OAAO;IAAkB;IACxE,IAAIc;IACJ,IAAI;QACFA,MAAM,AAAC,CAAA,MAAM9E,cAAc+E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR,QAAO,EAAGK,GAAG;IACrE,EAAE,OAAOd,OAAO;QACd,sEAAsE;QACtE,mCAAmC;QACnC,IAAIzD,iBAAiByD,QAAQ,OAAO;YAAEC,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAAkB;QACvFkB,QAAQlB,KAAK,CAAC,+CAA+CA;QAC7D,OAAO;YAAEC,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAA+C;IACzF;IACA,MAAMK,eAAe,MAAMrE,cACxB+E,GAAG,GACHI,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACjB,QACJkB,GAAG;IACN,IAAI,CAACjB,aAAakB,MAAM,EAAE;QACxB,OAAO;YAAEtB,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAAe;IACzD;IACA,MAAMwB,aAAa,EAACnB,oBAAAA,aAAaiB,GAAG,CAAC,0BAAjBjB,oBAAmC,CAAC,EAAE,CAACS,IAAI;IAC/D,IAAIU,eAAe,WAAWA,eAAe,UAAU;QACrD,OAAO;YAAEvB,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAA6B;IACvE;IACA,OAAO;QAAEC,IAAI;QAAMa;IAAI;AACzB;AAEA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,OAAO,MAAMW,sBAAwC,OAAO/B,KAAKC;;QAMzCD,WACGA,YACEA;IAP3B,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMI,SAASG,gBAAOb,YAAAA,IAAIgC,IAAI,qBAARhC,UAAUU,MAAM,mBAAI,IAAIuB,IAAI;IAClD,MAAMC,YAAYrB,iBAAOb,aAAAA,IAAIgC,IAAI,qBAARhC,WAAUkC,SAAS,oBAAI,IAAID,IAAI;IACxD,MAAME,aAAqBnC,aAAAA,IAAIgC,IAAI,qBAARhC,WAAUoC,cAAc;IACnD,IAAI,CAAC1B,UAAU,CAACwB,WAAW;QACzBjC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;QAC5D;IACF;IACA,sEAAsE;IACtE,MAAM+B,WAAWF,cAAc;IAC/B,MAAMC,iBAAiBC,WACnB,KACAxG,wBAAwBsG,aACtBA,YACA;IACN,IAAIC,mBAAmB,MAAM;QAC3BnC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAyB;QACvD;IACF;IACA,MAAMgC,SAAS,MAAM7B,oBAAoBT,KAAKU;IAC9C,IAAI4B,OAAO/B,EAAE,KAAK,OAAO;QACvBN,IAAIG,MAAM,CAACkC,OAAOlC,MAAM,EAAEC,IAAI,CAAC;YAAEC,OAAOgC,OAAOhC,KAAK;QAAC;QACrD;IACF;IACA,IAAI;YAuBoBiC;QAtBtB,qEAAqE;QACrE,MAAMC,QAAQ,MAAMjG,cAAcmE;QAClC,IAAI,CAAC8B,OAAO;YACVvC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAMmC,QAAQ/C,gBAAgB8C,MAAME,GAAG,EAAE;QACzC,IAAID,OAAO;YACTxC,IAAIG,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMT,IAAI;YACxC;QACF;QACA,MAAMW,cAAc,MAAMjG,yBAAyBgE,QAAQ;QAC3D,MAAMkC,WAAW,MAAMD,YAAYhB,GAAG,CAACO,WAAWN,GAAG;QACrD,IAAI,CAACgB,SAASf,MAAM,IAAI,CAACzF,cAAcwG,SAAShB,GAAG,CAAC,cAAclB,SAAS;YACzET,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;YAChD;QACF;QACA,MAAMuC,QAAQ,MAAMxG,oBAAoBqE;QACxC,MAAM6B,QAAQrG,iBACZ0G,SAASE,IAAI,IACbD,MAAME,OAAO;QAEf,MAAMC,iBAAgBT,wBAAAA,MAAMH,cAAc,YAApBG,wBAAwB;QAC9C,IAAIS,kBAAkBZ,gBAAgB;YACpCnC,IACGG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEE,IAAI;gBAAM0C,SAAS;gBAAOb;gBAAgBY;YAAc;YAClE;QACF;QACA,MAAMJ,SAASM,GAAG,CAACC,MAAM,CAAC;YACxB,CAACzH,iBAAiBmH,MAAME,OAAO,EAAE,kBAAkB,EAAEV,WACjDrF,WAAWoG,MAAM,KACjBhB;YACJiB,WAAWrG,WAAWsG,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM1G,uBAAuBgG,SAASM,GAAG,EAAE;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAACb,UAAU;gBAGGO;YAFhB,MAAM7F,cAAc2D,QAAQ,uBAAuB;gBACjDwB;gBACAqB,OAAO1C,QAAO+B,gBAAAA,SAAShB,GAAG,CAAC,oBAAbgB,gBAAyB;gBACvCR;gBACAY;YACF;QACF;QACA/C,IACGG,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEE,IAAI;YAAM0C,SAAS;YAAMb;YAAgBY;QAAc;IACnE,EAAE,OAAO1C,OAAO;QACdkB,QAAQlB,KAAK,CAAC,8BAA8BI,QAAQwB,WAAW5B;QAC/DL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACjE;AACF,EAAC;AAED;;;;;;;CAOC,GACD,OAAO,MAAMkD,4BACX,4EACA,sBAAqB;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDC,GACD,OAAO,MAAMC,2BAA6C,OAAOzD,KAAKC;QAOtDD,WAsCeA;IA5C7B,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IAEA,MAAM0B,QAAQhC,YAAAA,IAAIgC,IAAI,YAARhC,YAAY,CAAC;IAC3B,MAAMU,SAASrB,MAAM2C,IAAI,CAAC,SAAS,EAAE;IACrC,IAAI,CAACtB,QAAQ;QACXT,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAMiD,QAAQvH,sBAAsBgG,IAAI,CAAC,QAAQ;IACjD,IAAI,CAACuB,OAAO;QACVtD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;QAC7D;IACF;IACA,MAAMoD,WAAWrE,MAAM2C,IAAI,CAAC,QAAQ,EAAE;IACtC,MAAM2B,QAAQD,WAAWzH,eAAeyH,YAAY;IACpD,IAAIA,YAAY,CAACC,OAAO;QACtB1D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOnB;QAAsB;QACpD;IACF;IACA,MAAMyE,WAAWvE,MAAM2C,IAAI,CAAC,iBAAiB,EAAE;IAC/C,IAAI4B,YAAY,CAAC/H,wBAAwB+H,WAAW;QAClD3D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;QACzD;IACF;IACA,MAAMuD,OAAOxE,MAAM2C,IAAI,CAAC,OAAO,EAAE;IACjC,MAAM8B,WAAWzE,MAAM2C,IAAI,CAAC,WAAW,EAAE;IACzC,IAAI+B,cAAc1E,MAAM2C,IAAI,CAAC,cAAc,EAAE;IAC7C,MAAMgC,YAAY3E,MAAM2C,IAAI,CAAC,YAAY,EAAE;IAC3C,MAAMiC,WAAW5E,MAAM2C,IAAI,CAAC,WAAW,EAAE;IACzC,MAAMkC,UACJlC,IAAI,CAAC,UAAU,IAAI,OAAOA,IAAI,CAAC,UAAU,KAAK,WAC1CjG,iBAAiBiG,IAAI,CAAC,UAAU,IAChC;IACN,MAAMmC,OAAO/E,cAAc4C,IAAI,CAAC,OAAO;IACvC,MAAMoC,mBAAmBpC,IAAI,CAAC,mBAAmB,KAAK;IACtD,yEAAyE;IACzE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAMqC,wBAAwBhF,MAAM2C,IAAI,CAAC,wBAAwB,EAAE;IAEnE,MAAMpB,gBAAgBC,QAAOb,6BAAAA,IAAIc,OAAO,CAACF,aAAa,YAAzBZ,6BAA6B;IAC1D,MAAMe,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS;QACZd,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QAChD;IACF;IAEA,IAAI;YA0I2BgE;QAzI7B,MAAMA,UAAU,MAAMhI,cAAc+E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR;QAC/D,MAAMwD,WAAW,MAAMhI,cAAcmE;QACrC,IAAI,CAAC6D,UAAU;YACbtE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAMkE,UAAUF,OAAO,CAAC,QAAQ,KAAK;QACrC,IAAI,CAACE,SAAS;;gBAIyBC;YAHrC,MAAMC,aAAa,MAAM/H,qBAAqB2H,QAAQlD,GAAG,EAAEmD,SAASI,KAAK;YACzE,MAAMF,iBAASC,8BAAAA,WAAYD,MAAM,mBAAI;YACrC,MAAMG,UACJ9I,gBAAgB2I,WAAWI,QAAQJ,2BAAAA,qBAAAA,OAAQK,UAAU,qBAAlBL,kBAAoB,CAAC/D,OAAO;YACjE,MAAMqE,UACJN,UACAG,WACC,MAAMnI,uBAAuB8H,SAASI,KAAK,EAAEF,QAAQ;YACxD,IAAI,CAACM,SAAS;gBACZ9E,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,OAAO;gBACT;gBACA;YACF;QACF;QAEA,uEAAuE;QACvE,wEAAwE;QACxE,MAAMmC,QAAQ/C,gBAAgB6E,SAAS7B,GAAG,EAAE;QAC5C,IAAID,OAAO;YACTxC,IAAIG,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMT,IAAI;YACxC;QACF;QAEA,IAAIgC,WAAW;YACb,MAAMnB,QAAQ,MAAMxG,oBAClBqE,QACA6D,SAAS7B,GAAG;YAEd,MAAMsC,WAAW,IAAIC,IAAYrJ,cAAciH;YAC/C,MAAMqC,kBAAkB,MAAM5I,cAC3B+E,GAAG,GACHI,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAAC4C,SAASI,KAAK,EAClBjD,UAAU,CAAC/F,gBAAgBwJ,SAAS,EACpCxD,GAAG,CAACqC,WACJpC,GAAG;YACN,MAAMwD,SAAkBF,gBAAgBrD,MAAM,GAC1CqD,gBAAgBtD,GAAG,CAAC,eACpBT;YACJ,MAAMkE,UACJC,MAAMC,OAAO,CAACH,WAAWA,OAAOI,IAAI,CAAC,CAACC,QAAUT,SAASU,GAAG,CAAC7E,OAAO4E;YACtE,IAAI,CAACJ,SAAS;gBACZpF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAkB;gBAChD;YACF;YACAyD,cAAc1E,MAAM6F,gBAAgBtD,GAAG,CAAC,SAAS,QAAQmC;QAC3D;QAEA,MAAM4B,SAAS,MAAM7I,mBAAmB;YACtC4D;YACA6C;WACIM,OAAO;YAAEA;QAAK,IAAI,CAAC;YACvB+B,QAAQ;YACRC,aAAa;gBAAEC,SAAS;YAAgB;YACxC1B;WACIA,oBAAoBC,wBACpB;YAAEA;QAAsB,IACxB,CAAC;YACL9B,OAAO,aACDoB,QAAQ;gBAAEA;YAAM,IAAI,CAAC,GACrBG,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3BE,YAAY;gBAAEA;YAAU,IAAI,CAAC,GAC7BE,UAAU;gBAAEA;YAAQ,IAAI,CAAC,GACzBD,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3BL,YAAY/H,wBAAwB+H,YACpC;gBAAExB,gBAAgBwB;YAAS,IAC3B,CAAC;;QAIT,IAAI,aAAa+B,QAAQ;YACvB,IAAIA,OAAOI,OAAO,KAAK,QAAQ;gBAC7B9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAOkD;oBAA2BwC,QAAQ;gBAAO;gBACxE;YACF;YACA,IAAIL,OAAOI,OAAO,KAAK,iBAAiB;gBACtC9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAA+B;gBAC7D;YACF;YACA,oEAAoE;YACpE,iEAAiE;YACjE,4DAA4D;YAC5D,IAAIqF,OAAOI,OAAO,KAAK,UAAU;gBAC/B9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO7E;oBAAwBuK,QAAQ;gBAAS;gBACvE;YACF;YACA/F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;YAChE;QACF;QAEA,IAAI6D,KAAKjD,MAAM,IAAI6C,aAAa;YAC9B,MAAMlB,QAAQ,MAAMxG,oBAClBqE,QACA6D,SAAS7B,GAAG;YAEd,MAAMuD,WAAW,MAAMvJ,yBAAyBgE,QAAQ;YACxD,MAAMuF,SAAStE,GAAG,CAACgE,OAAOzD,SAAS,EAAEiB,MAAM,CAAC,aACtCgB,KAAKjD,MAAM,GACX;gBACE,CAACxF,iBAAiBmH,MAAME,OAAO,EAAE,QAAQ,EAAE/F,WAAWkJ,UAAU,IAC3D/B;YAEP,IACA,CAAC,GACDJ,cACA;gBACE,CAACrI,iBAAiBmH,MAAME,OAAO,EAAE,eAAe,EAAEgB;gBAClD,mDAAmD;gBACnDA;YACF,IACA,CAAC;gBACLV,WAAWrG,WAAWsG,eAAe;;YAEvC,6DAA6D;YAC7D,MAAM1G,uBAAuBqJ,SAAStE,GAAG,CAACgE,OAAOzD,SAAS,GAAG;QAC/D;QAEA;;;;;;;KAOC,GACD,MAAM1F,gBACJkE,QACA;YAAEU,KAAKkD,QAAQlD,GAAG;YAAEmC,KAAK,GAAEe,iBAAAA,QAAQf,KAAK,YAAbe,iBAAiB;QAAK,GACjDqB,OAAOQ,OAAO,GAAG,kBAAkB,mBACnC;YAAEC,MAAM;YAAWC,IAAIV,OAAOzD,SAAS;YAAE2B,MAAMA,QAAQN;QAAM;QAG/DtD,IACGG,MAAM,CAACuF,OAAOQ,OAAO,GAAG,MAAM,KAC9B9F,IAAI,CAAC;YAAE6B,WAAWyD,OAAOzD,SAAS;YAAEiE,SAASR,OAAOQ,OAAO;QAAC;IACjE,EAAE,OAAO7F,OAAO;QACdkB,QAAQlB,KAAK,CAAC,+BAA+BA;QAC7CL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkC;IAClE;AACF,EAAC;AAED,8EAA8E,GAC9E,OAAO,SAASgG;IACd;;;;;GAKC,GACDpJ;IACAf,uBAAuBc,eAAesJ,IAAI,EAAExG;IAC5C5D,uBAAuBc,eAAeuJ,YAAY,EAAEzE;IACpD,wEAAwE;IACxE,uEAAuE;IACvE5F,uBAAuBc,eAAewJ,aAAa,EAAEnH;IACrD,yEAAyE;IACzE,kDAAkD;IAClDnD,uBAAuBc,eAAeyJ,aAAa,EAAExH;IACrD,2EAA2E;IAC3E,oEAAoE;IACpE/C,uBAAuBoB,gBAAgBoJ,IAAI,EAAE7I;IAC7C3B,uBAAuBoB,gBAAgBqJ,QAAQ,EAAE/I;IACjD,kEAAkE;IAClE1B,uBAAuBiB,yBAAyBI;IAChD,wEAAwE;IACxE,oEAAoE;IACpErB,uBAAuBkB,uBAAuBI;IAC9C,wEAAwE;IACxE,0DAA0D;IAC1DtB,uBAAuBmB,8BAA8BI;IACrD,yEAAyE;IACzE,gCAAgC;IAChCvB,uBAAuB,uBAAuB6B;IAC9C,wEAAwE;IACxE,uDAAuD;IACvD7B,uBAAuB,wBAAwB4B;IAC/C,oEAAoE;IACpE,uEAAuE;IACvE,iCAAiC;IACjC5B,uBAAuB,oBAAoB8B;IAC3C9B,uBAAuB,oBAAoBgC;IAC3C,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,wBAAwB;IACxBhC,uBAAuB,oBAAoB+B;IAC3C,yEAAyE;IACzE,iEAAiE;IACjE,0BAA0B;IAC1B/B,uBAAuB,kBAAkBiC;IACzC,qEAAqE;IACrE,yEAAyE;IACzE,sCAAsC;IACtCjC,uBAAuB,uBAAuBsH;IAC9C,0EAA0E;IAC1E,0EAA0E;IAC1E,6CAA6C;IAC7CtH,uBAAuB,oBAAoBmC;IAC3C,kEAAkE;IAClEnC,uBAAuB,oBAAoBoC;IAC3C,yEAAyE;IACzE,wEAAwE;IACxEpC,uBAAuBqC,6BAA6BC;IACpD,yEAAyE;IACzE,oEAAoE;IACpE,iEAAiE;IACjEtC,uBAAuBc,eAAe4J,SAAS,EAAExI;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1ElC,uBAAuBuC,sBAAsBC;IAC7C,iEAAiE;IACjE,yBAAyB;IACzBxC,uBAAuByC,wBAAwBC;IAC/C,wEAAwE;IACxE,yEAAyE;IACzE,6CAA6C;IAC7C1C,uBAAuB2C,wBAAwBC;IAC/C,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE5C,uBAAuBwD,0BAA0BE;IACjD1D,uBAAuByD,yBAAyBE;IAChD,wEAAwE;IACxE,yEAAyE;IACzE,wCAAwC;IACxC3D,uBAAuB6C,2BAA2BC;IAClD9C,uBACEoD,oCACAC;IAEF,uEAAuE;IACvE,6EAA6E;IAC7E,wEAAwE;IACxE,WAAW;IACXC;IACA,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE7B;IACA,uEAAuE;IACvE,mEAAmE;IACnE,oEAAoE;IACpED;AACF"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The Contacts plugin's SERVER half (AGL-2595).\n *\n * Contacts CRM v1 had none: every console write was client-direct against\n * the Firestore rules, and the one server path that creates a contact —\n * `upsertHostContact` — belongs to the capture doors, not to this plugin.\n * v2 needs a server for the things a browser must not do alone: an import\n * that dedupes forty thousand rows, a bulk action over a selection, an\n * auto-association of contacts to companies by domain. Each of those lands\n * as a `crm/<route>` handler registered here.\n *\n * `crm/ping` exists so the wiring is PROVEN rather than assumed:\n * `plugins.config.json` names this module's register function and the\n * `crm` API prefix, the generated server manifest loads this file, and the\n * console's `/api/[...pluginApi]` dispatcher reaches the handler. A plugin\n * whose first real route also had to be its first wiring test would have\n * two things to debug at once.\n *\n * The real routes are the writes with a side effect outside the document:\n * `crm/contact-stage` (AGL-2605) exists for the EVENT — `contactStageChanged`\n * can only be emitted by a server path that performed the write, so a record\n * page that moved the stage client-direct would move the person and tell no\n * automation; the task routes (AGL-2599) carry an assignee's notification and\n * the `taskCompleted` event; `crm/contacts-import` (AGL-2602) pushes one chunk\n * of a file through the same capture door every other server door uses.\n * `crm/deal-stage` (AGL-2598) is the one writer of a deal's stage, won and lost,\n * because a stage change is what automations listen for (`server-deal-stage.ts`).\n * `crm/contacts-create` (AGL-2596) is a person typed into the console by a\n * member of the team — a server route because the dedupe against every\n * holder's rows and the audience band are judgments the browser cannot make.\n * `crm/contact-update` (AGL-2804) is every other write to a contact's facets:\n * the rules cannot tell one field of a holder's facet from another, so they\n * leave a client nothing there but letting a holder go, and the plan is\n * asked here about the fields a save carries.\n */\n\nimport {\n  CONTACT_ERASED_MESSAGE,\n  contactFacetPath,\n  CRM_COLLECTIONS,\n  crmReadTokens,\n  isContactLifecycleStage,\n  isOrgWideMember,\n  normalizeAddress,\n  normalizeContactEmail,\n  normalizePhone,\n  type AglynPostalAddress,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  readContactFacet,\n  registerPluginApiRoute,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  memberHasOrgPermission,\n  orgDataCollectionForHost,\n  resolveOrgMembership,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { captureHostContact, emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { CRM_API_ROUTES } from './constants/api-routes'\nimport { registerCrmServerDeclarations } from './declarations.server'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { CRM_NEXT_ACTIVITY_ROUTE } from './model/next-activity'\nimport { CRM_LIST_FIELDS_ROUTE } from './model/list-fields'\nimport { CRM_LEAD_SOURCE_VALUES_ROUTE } from './model/lead-source-values'\nimport { CRM_TASK_ROUTES } from './model/task-routes'\nimport { crmNextActivityHandler } from './server/next-activity-routes'\nimport { crmListFieldsHandler } from './server/list-fields-routes'\nimport { crmLeadSourceValuesHandler } from './server/lead-source-values'\nimport { registerCrmRecordEmailStateWriter } from './server/record-email-state'\nimport { registerCrmRecordTimelineWriter } from './server/record-timeline'\nimport { crmTaskCompleteHandler, crmTaskSaveHandler } from './server/task-routes'\nimport { crmCompaniesImportHandler } from './server/companies-import'\nimport { crmContactsImportHandler } from './server/contacts-import'\nimport { crmDealsImportHandler } from './server/deals-import'\nimport { crmLeadsImportHandler } from './server/leads-import'\nimport { crmTasksImportHandler } from './server/tasks-import'\nimport { crmDealStageHandler } from './server-deal-stage'\nimport { crmEmailSendHandler } from './server/email-send'\nimport { CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler } from './server/email-check'\nimport { leadConvertHandler } from './server/lead-convert'\nimport { leadCreateHandler } from './server/lead-create'\nimport {\n  CONTACT_EMAIL_HISTORY_ROUTE,\n  contactEmailHistoryHandler,\n} from './server/contact-email-history'\nimport { CONTACTS_MERGE_ROUTE, contactsMergeHandler } from './server/contacts-merge'\nimport { CRM_ERASE_PERSON_ROUTE, crmErasePersonHandler } from './server/erase-person'\nimport { CRM_ORG_ACTIVITY_ROUTE, crmOrgActivityHandler } from './server/org-activity'\nimport { CRM_INBOUND_ADDRESS_ROUTE, crmInboundAddressHandler } from './server/inbound-address'\nimport { crmCompanyDeleteHandler } from './server/company-delete'\nimport { CONTACT_PHONE_REFUSAL, normalizeTags, typed } from './server/contact-profile'\nimport { crmContactUpdateHandler } from './server/contact-update'\nimport {\n  CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE,\n  crmEmailTemplateDuplicateHandler,\n} from './server/email-template-duplicate'\nimport { registerCrmRecordFactsReaders } from './server/record-facts'\nimport { crmSuiteRefusal } from './server/suite-gate'\nimport {\n  CRM_RECIPE_INSTALL_ROUTE,\n  CRM_RECIPE_STATUS_ROUTE,\n  crmRecipeInstallHandler,\n  crmRecipeStatusHandler,\n} from './server/recipe-routes'\n\n/**\n * `GET /api/crm/ping` → `{ ok: true, plugin: 'crm' }`.\n *\n * No auth, no host, no data: it answers whether the plugin's server bundle\n * was loaded and its routes registered, which is a fact about the process\n * and not about any org. Anything that reads a document goes behind the\n * same session and role checks the other plugins' console routes use.\n */\nexport const crmPingHandler: PluginApiHandler = (req, res) => {\n  if (req.method !== 'GET') {\n    res.setHeader('Allow', 'GET')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  res.status(200).json({ ok: true, plugin: BUNDLE_ID })\n}\n\ntype Refusal = { ok: false; status: number; error: string }\n\n/**\n * Who is calling, and whether they may edit this site's CRM.\n *\n * The same check the inbox, bookings and email console routes make: a\n * bearer ID token, verified, and an `admin` or `editor` role on the host\n * document. A contact is a site's business record, so the site's own role\n * map is the right authority; org-wide reach is not required, because a\n * site editor who can open the record in the console can already write\n * every other field on it client-direct.\n */\nasync function authorizeSiteEditor(\n  req: PluginApiRequest,\n  hostId: string,\n): Promise<{ ok: true; uid: string } | Refusal> {\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return { ok: false, status: 401, error: 'Unauthenticated' }\n  let uid: string\n  try {\n    uid = (await firebaseAdmin.app().auth().verifyIdToken(idToken)).uid\n  } catch (error) {\n    // A refused credential is the caller's 401; a failure to check one is\n    // ours and keeps a 5xx (AGL-2852).\n    if (isRefusedIdToken(error)) return { ok: false, status: 401, error: 'Unauthenticated' }\n    console.error('[crm] the site editor could not be verified', error)\n    return { ok: false, status: 500, error: 'The sign-in could not be checked. Try again.' }\n  }\n  const hostSnapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .get()\n  if (!hostSnapshot.exists) {\n    return { ok: false, status: 404, error: 'Unknown site' }\n  }\n  const memberRole = (hostSnapshot.get('memberRoles') ?? {})[uid]\n  if (memberRole !== 'admin' && memberRole !== 'editor') {\n    return { ok: false, status: 403, error: 'Not a site admin or editor' }\n  }\n  return { ok: true, uid }\n}\n\n/**\n * `POST /api/crm/contact-stage` with `{ hostId, contactId, lifecycleStage }`.\n *\n * Writes the stage into THIS site's facet on the contact — a dotted\n * `update()`, never a top-level field, because the row is shared by every\n * site in the org and a stage is one holder's reading of the person — and\n * then announces `contactStageChanged` with the stage it replaced.\n *\n * A stage set to what it already is writes nothing and announces nothing:\n * the response says `changed: false`, and no automation listening for a\n * change hears one that did not happen.\n *\n * `lifecycleStage: null` CLEARS the stage (AGL-2804). A facet is the\n * server's to write, so \"not placed yet\" comes through the route that owns\n * the stage rather than as a client-direct delete, and it is refused to a\n * plan without the suite the way a move is. There is no event for \"no\n * stage\", so a clear announces nothing; an empty string names no stage and\n * is refused like any other the list does not have.\n *\n * The contact is looked up by id and then checked against `visibleTo`,\n * because the Admin SDK evaluates no rules: a caller who can edit site A\n * must not be able to restage a contact only site B holds by guessing its\n * id, and the scoped query the list uses is not available to a `doc()` read.\n */\nexport const contactStageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const hostId = String(req.body?.hostId ?? '').trim()\n  const contactId = String(req.body?.contactId ?? '').trim()\n  const requested: unknown = req.body?.lifecycleStage\n  if (!hostId || !contactId) {\n    res.status(400).json({ error: 'Missing hostId or contactId' })\n    return\n  }\n  // `null` clears the stage; anything else has to be one of the list's.\n  const clearing = requested === null\n  const lifecycleStage = clearing\n    ? ''\n    : isContactLifecycleStage(requested)\n      ? requested\n      : null\n  if (lifecycleStage === null) {\n    res.status(400).json({ error: 'Pick a lifecycle stage' })\n    return\n  }\n  const caller = await authorizeSiteEditor(req, hostId)\n  if (caller.ok === false) {\n    res.status(caller.status).json({ error: caller.error })\n    return\n  }\n  try {\n    // A lifecycle stage is the suite's (AGL-2787) — see `suite-gate.ts`.\n    const owner = await getOrgForHost(hostId)\n    if (!owner) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const suite = crmSuiteRefusal(owner.org, \"Moving a contact's lifecycle stage\")\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const contactsRef = await orgDataCollectionForHost(hostId, 'contacts')\n    const snapshot = await contactsRef.doc(contactId).get()\n    if (!snapshot.exists || !visibleToHost(snapshot.get('visibleTo'), hostId)) {\n      res.status(404).json({ error: 'Unknown contact' })\n      return\n    }\n    const group = await consentGroupForSite(hostId)\n    const facet = readContactFacet(\n      snapshot.data() as Record<string, unknown>,\n      group.groupId,\n    )\n    const previousStage = facet.lifecycleStage ?? ''\n    if (previousStage === lifecycleStage) {\n      res\n        .status(200)\n        .json({ ok: true, changed: false, lifecycleStage, previousStage })\n      return\n    }\n    await snapshot.ref.update({\n      [contactFacetPath(group.groupId, 'lifecycleStage')]: clearing\n        ? FieldValue.delete()\n        : lifecycleStage,\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    // The stage is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(snapshot.ref, 'contacts')\n    // Awaited, not floated: a serverless response ending cancels in-flight\n    // work, and the event is the reason this route exists. A clear has none.\n    if (!clearing) {\n      await emitHostEvent(hostId, 'contactStageChanged', {\n        contactId,\n        email: String(snapshot.get('email') ?? ''),\n        lifecycleStage,\n        previousStage,\n      })\n    }\n    res\n      .status(200)\n      .json({ ok: true, changed: true, lifecycleStage, previousStage })\n  } catch (error) {\n    console.error('[crm] contact-stage failed', hostId, contactId, error)\n    res.status(500).json({ error: 'The stage could not be changed' })\n  }\n}\n\n/**\n * What the create route says when the band refused (AGL-2596).\n *\n * The contacts list's own alert, in the past tense: the list says new\n * visitors are \"no longer captured\", and this says the one contact the\n * reader just tried to add was not. The remedy is the same sentence in both\n * places, so a reader who sees one and then the other is told one thing.\n */\nexport const CONTACT_BAND_FULL_MESSAGE =\n  'Contact limit reached — this contact was not added. Upgrade in Billing ' +\n  'to keep collecting.'\n\n/**\n * `POST /api/crm/contacts-create` — a person added by hand (AGL-2596).\n *\n * Body: `{ hostId, email, name?, phone?, jobTitle?, companyName?,\n * companyId?, address?, ownerUid?, lifecycleStage?, tags?,\n * marketingConsent?, disclosedConsentGroup? }`. Answers\n * `{ contactId, created }`: `created` is\n * false when the address already belonged to somebody, in which case what\n * was typed MERGES into the existing row — the dedupe the shared address\n * book exists for, and the reason a second \"create\" of one person is not\n * an error.\n *\n * ## Who may call it\n *\n * The caller's ID token, then `data.manage` on the site's org — the same key\n * the console surface itself is gated on, resolved through the same\n * three-layer permission read the members route uses. A scoped member is\n * admitted only for a site they reach: the rules would refuse a browser\n * write outside their tokens, and a server route that admitted it would be\n * a way round the rules rather than a service in front of them.\n *\n * ## What it refuses, and how\n *\n * A malformed email or phone number is a 400 with a sentence the drawer can\n * show under the field. The band is a 409 carrying the list's own wording:\n * it is not a bad request and not a server fault, it is the plan saying no,\n * and the drawer relays the sentence rather than inventing one.\n *\n * ## The company (AGL-2613)\n *\n * `companyId` is the picker's choice, and it is checked before anything is\n * written: the company has to exist and be visible to the capturing site's\n * scope, or a caller could file a person under a record they cannot open —\n * the same refusal the lead conversion makes. It reaches the upsert as\n * `facet.companyId`, which is where the link is kept in step with its mirror\n * and the company's contacts count; a merge onto somebody already at another\n * company is a MOVE there, not a second link. The stored company's own name\n * is what is echoed, over whatever the client sent, because the name on the\n * record is the company's and not the form's.\n *\n * ## What it writes beyond the upsert\n *\n * `upsertHostContact` takes the profile — phone, title, address, owner,\n * stage, company — and writes it into the capturing group's facet. The two\n * things it does not take are written here by DOTTED path afterwards: the\n * tags, which union into whatever the person already carried, and the\n * company name — the picked company's, or free text for a person filed\n * under a name no company record carries yet. Dotted paths because this is\n * an `update()`, and only an update reads a dot as a path — a nested object\n * here would replace the facet map and take every other holder's records\n * with it.\n */\nexport const crmContactsCreateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const hostId = typed(body['hostId'], 128)\n  if (!hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const email = normalizeContactEmail(body['email'])\n  if (!email) {\n    res.status(400).json({ error: 'Enter a valid email address.' })\n    return\n  }\n  const rawPhone = typed(body['phone'], 40)\n  const phone = rawPhone ? normalizePhone(rawPhone) : null\n  if (rawPhone && !phone) {\n    res.status(400).json({ error: CONTACT_PHONE_REFUSAL })\n    return\n  }\n  const rawStage = typed(body['lifecycleStage'], 40)\n  if (rawStage && !isContactLifecycleStage(rawStage)) {\n    res.status(400).json({ error: 'Unknown lifecycle stage.' })\n    return\n  }\n  const name = typed(body['name'], 120)\n  const jobTitle = typed(body['jobTitle'], 120)\n  let companyName = typed(body['companyName'], 120)\n  const companyId = typed(body['companyId'], 128)\n  const ownerUid = typed(body['ownerUid'], 128)\n  const address =\n    body['address'] && typeof body['address'] === 'object'\n      ? normalizeAddress(body['address'] as AglynPostalAddress)\n      : null\n  const tags = normalizeTags(body['tags'])\n  const marketingConsent = body['marketingConsent'] === true\n  // The key of the consent-group sentence the drawer showed beside the box\n  // (AGL-3320): the opt-in covers the site's group only while it is the\n  // group's current one, and the capturing site alone otherwise.\n  const disclosedConsentGroup = typed(body['disclosedConsentGroup'], 64)\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) {\n    res.status(401).json({ error: 'Unauthenticated' })\n    return\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const resolved = await getOrgForHost(hostId)\n    if (!resolved) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const isStaff = decoded['staff'] === true\n    if (!isStaff) {\n      const membership = await resolveOrgMembership(decoded.uid, resolved.orgId)\n      const member = membership?.member ?? null\n      const reaches =\n        isOrgWideMember(member) || Boolean(member?.hostAccess?.[hostId])\n      const allowed =\n        member &&\n        reaches &&\n        (await memberHasOrgPermission(resolved.orgId, member, 'data.manage'))\n      if (!allowed) {\n        res.status(403).json({\n          error: 'Adding contacts requires the data.manage permission on this site',\n        })\n        return\n      }\n    }\n\n    // A person typed in by the team is the suite's; the capture doors that\n    // fill a Free workspace's contacts do not come through here (AGL-2787).\n    const suite = crmSuiteRefusal(resolved.org, 'Adding a contact by hand')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    if (companyId) {\n      const group = await consentGroupForSite(\n        hostId,\n        resolved.org as Record<string, unknown>,\n      )\n      const readable = new Set<string>(crmReadTokens(group))\n      const companySnapshot = await firebaseAdmin\n        .app()\n        .firestore()\n        .collection('orgs')\n        .doc(resolved.orgId)\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(companyId)\n        .get()\n      const tokens: unknown = companySnapshot.exists\n        ? companySnapshot.get('visibleTo')\n        : undefined\n      const visible =\n        Array.isArray(tokens) && tokens.some((token) => readable.has(String(token)))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      companyName = typed(companySnapshot.get('name'), 120) || companyName\n    }\n\n    const result = await captureHostContact({\n      hostId,\n      email,\n      ...(name ? { name } : {}),\n      source: 'manual',\n      interaction: { summary: 'Added by hand' },\n      marketingConsent,\n      ...(marketingConsent && disclosedConsentGroup\n        ? { disclosedConsentGroup }\n        : {}),\n      facet: {\n        ...(phone ? { phone } : {}),\n        ...(jobTitle ? { jobTitle } : {}),\n        ...(companyId ? { companyId } : {}),\n        ...(address ? { address } : {}),\n        ...(ownerUid ? { ownerUid } : {}),\n        ...(rawStage && isContactLifecycleStage(rawStage)\n          ? { lifecycleStage: rawStage }\n          : {}),\n      },\n    })\n\n    if ('refused' in result) {\n      if (result.refused === 'band') {\n        res.status(409).json({ error: CONTACT_BAND_FULL_MESSAGE, reason: 'band' })\n        return\n      }\n      if (result.refused === 'invalid-email') {\n        res.status(400).json({ error: 'Enter a valid email address.' })\n        return\n      }\n      // The person was erased from this workspace (AGL-2623). A conflict,\n      // like the band: the request was well-formed and the answer is a\n      // standing fact about the address, not a fault in the call.\n      if (result.refused === 'erased') {\n        res.status(409).json({ error: CONTACT_ERASED_MESSAGE, reason: 'erased' })\n        return\n      }\n      res.status(500).json({ error: 'The contact could not be saved.' })\n      return\n    }\n\n    if (tags.length || companyName) {\n      const group = await consentGroupForSite(\n        hostId,\n        resolved.org as Record<string, unknown>,\n      )\n      const contacts = await orgDataCollectionForHost(hostId, 'contacts')\n      await contacts.doc(result.contactId).update({\n        ...(tags.length\n          ? {\n              [contactFacetPath(group.groupId, 'tags')]: FieldValue.arrayUnion(\n                ...tags,\n              ),\n            }\n          : {}),\n        ...(companyName\n          ? {\n              [contactFacetPath(group.groupId, 'companyName')]: companyName,\n              // The search echo — see `HostContact.companyName`.\n              companyName,\n            }\n          : {}),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      // The tags are what the Contacts list filters by (AGL-3321).\n      await restampCrmListFieldsAt(contacts.doc(result.contactId), 'contacts')\n    }\n\n    /*\n     * The audit line, written HERE rather than by the console (AGL-2622):\n     * a route that verified the caller and performed the write is the one\n     * writer that cannot record an act that did not happen, which is the\n     * reason `check-activity-coverage.mjs` counts this file. A merge into\n     * a person the org already held is said to be one — the row was\n     * updated, not added — so the feed cannot claim two people for one.\n     */\n    await logHostActivity(\n      hostId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      result.created ? 'Added contact' : 'Updated contact',\n      { type: 'contact', id: result.contactId, name: name || email },\n    )\n\n    res\n      .status(result.created ? 201 : 200)\n      .json({ contactId: result.contactId, created: result.created })\n  } catch (error) {\n    console.error('[crm] contact create failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n\n/** Console API registration, named in `plugins.config.json` as `consoleApi`. */\nexport function registerCrmConsoleApi(): void {\n  /*\n   * The contact-capture writer, again (AGL-3080). Both apps run it at boot\n   * from their generated server-declarations manifest, and this is the\n   * backstop for a process whose boot did not: the first CRM door to load\n   * registers it. Registering twice replaces in place.\n   */\n  registerCrmServerDeclarations()\n  registerPluginApiRoute(CRM_API_ROUTES.ping, crmPingHandler)\n  registerPluginApiRoute(CRM_API_ROUTES.contactStage, contactStageHandler)\n  // Every other console write to a contact's facets (AGL-2804): the rules\n  // cannot tell one facet field from another, so the plan is asked here.\n  registerPluginApiRoute(CRM_API_ROUTES.contactUpdate, crmContactUpdateHandler)\n  // A company's contacts unlinked, then the company (AGL-2804): the unlink\n  // clears a facet, which is the server's to write.\n  registerPluginApiRoute(CRM_API_ROUTES.companyDelete, crmCompanyDeleteHandler)\n  // Tasks (AGL-2599): the two writes with a side effect outside the document\n  // — an assignee's notification, and the `taskCompleted` host event.\n  registerPluginApiRoute(CRM_TASK_ROUTES.save, crmTaskSaveHandler)\n  registerPluginApiRoute(CRM_TASK_ROUTES.complete, crmTaskCompleteHandler)\n  // A client-direct task write's door to `nextTaskAtMs` (AGL-2661).\n  registerPluginApiRoute(CRM_NEXT_ACTIVITY_ROUTE, crmNextActivityHandler)\n  // What a client-direct write the browser cannot follow up asks for: the\n  // fields the CRM lists query, restamped from the record (AGL-3321).\n  registerPluginApiRoute(CRM_LIST_FIELDS_ROUTE, crmListFieldsHandler)\n  // A lead source value renamed or deleted (AGL-3298): the list and every\n  // lead and contact holding the old label, in one request.\n  registerPluginApiRoute(CRM_LEAD_SOURCE_VALUES_ROUTE, crmLeadSourceValuesHandler)\n  // One chunk of a contact file (AGL-2602), judged and written through the\n  // same door every capture uses.\n  registerPluginApiRoute('crm/contacts-import', crmContactsImportHandler)\n  // One chunk of a companies file (AGL-2621), matched by domain then name\n  // and written with the stamp every CRM creator writes.\n  registerPluginApiRoute('crm/companies-import', crmCompaniesImportHandler)\n  // One chunk of a deals file and one of a tasks file (AGL-2662): the\n  // pipeline, the stage and the assignee resolved by name, a row refused\n  // when the org has no such name.\n  registerPluginApiRoute('crm/deals-import', crmDealsImportHandler)\n  registerPluginApiRoute('crm/tasks-import', crmTasksImportHandler)\n  // One chunk of a leads file (AGL-2701), written through `addHostLead` —\n  // the same door a sign-up, a booking and a form submission file a lead\n  // through, so an imported row is keyed, bounded and unconsented exactly\n  // as a captured one is.\n  registerPluginApiRoute('crm/leads-import', crmLeadsImportHandler)\n  // The one writer of a deal's stage, won and lost (AGL-2598): the browser\n  // could write the field, but only a server can emit the event an\n  // automation listens for.\n  registerPluginApiRoute('crm/deal-stage', crmDealStageHandler)\n  // A person typed into the console (AGL-2596): the capture doors' own\n  // function behind a session check, so the dedupe and the band are judged\n  // where every other door judges them.\n  registerPluginApiRoute('crm/contacts-create', crmContactsCreateHandler)\n  // A lead becomes a contact, a company and a deal (AGL-2608) — the one CRM\n  // write a browser cannot make alone, because only the server may create a\n  // contact through the dedupe-and-meter door.\n  registerPluginApiRoute('crm/lead-convert', leadConvertHandler)\n  // A lead entered by hand (AGL-3231): the New lead drawer's route.\n  registerPluginApiRoute('crm/leads-create', leadCreateHandler)\n  // The one READ behind a route (AGL-2616): the per-recipient delivery log\n  // is closed to clients, so a contact's campaign mail is projected here.\n  registerPluginApiRoute(CONTACT_EMAIL_HISTORY_ROUTE, contactEmailHistoryHandler)\n  // One email to one person from their record (AGL-2615): the recipient is\n  // read off the record, the daily cap and both suppression lists are\n  // judged, and the message leaves on the site's sending identity.\n  registerPluginApiRoute(CRM_API_ROUTES.emailSend, crmEmailSendHandler)\n  // What the platform knows about one address before somebody writes to it\n  // (AGL-3328): the gateway chip on a record page, and the composer's\n  // warning about a domain with no mail server or a gateway holding this\n  // site's mail. DNS and the ledger are the server's.\n  registerPluginApiRoute(CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler)\n  // Two records for one person become one (AGL-2625): the repoint of every\n  // row naming the merged record and the transaction over both documents\n  // are the server's, and the address index it writes is closed to clients.\n  registerPluginApiRoute(CONTACTS_MERGE_ROUTE, contactsMergeHandler)\n  // Files a person's privacy erasure for the daily job (AGL-2623);\n  // workspace admins only.\n  registerPluginApiRoute(CRM_ERASE_PERSON_ROUTE, crmErasePersonHandler)\n  // One line in the organization's activity feed for an act the org-level\n  // hub performed client-direct (AGL-2634): the feed is closed to clients,\n  // so the bulk bars' lines come through here.\n  registerPluginApiRoute(CRM_ORG_ACTIVITY_ROUTE, crmOrgActivityHandler)\n  // A recipe's action written into one site's automations from the org\n  // hub (AGL-2639), stamped and deduplicated by the server, and the stamps\n  // read back per site so the hub can say which sites carry which recipe.\n  registerPluginApiRoute(CRM_RECIPE_INSTALL_ROUTE, crmRecipeInstallHandler)\n  registerPluginApiRoute(CRM_RECIPE_STATUS_ROUTE, crmRecipeStatusHandler)\n  // The workspace's email capture address (AGL-2657): the token is minted\n  // and rotated here, behind the CRM's own gate, and the org document that\n  // carries it is closed to every client.\n  registerPluginApiRoute(CRM_INBOUND_ADDRESS_ROUTE, crmInboundAddressHandler)\n  registerPluginApiRoute(\n    CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE,\n    crmEmailTemplateDuplicateHandler,\n  )\n  // The facts of a contact, company, deal or lead, and an import's field\n  // catalog, for another plugin in this process (AGL-2917): read on the core's\n  // record-facts seam under the rules every CRM door applies, and written\n  // nowhere.\n  registerCrmRecordFactsReaders()\n  // The CRM as the workspace's record system on the core's record-timeline\n  // seam (AGL-2981): another plugin files an email, a reply or a task on a\n  // record through it, under the CRM's own scope, dedupe and ceiling.\n  registerCrmRecordTimelineWriter()\n  // And on the record email-state seam (AGL-3245): a sender that filed a\n  // verdict on an address — a bounce, a complaint, an unsubscribe, a\n  // do-not-contact mark — stamps the lead and the contact through it.\n  registerCrmRecordEmailStateWriter()\n}\n"],"names":["CONTACT_ERASED_MESSAGE","contactFacetPath","CRM_COLLECTIONS","crmReadTokens","isContactLifecycleStage","isOrgWideMember","normalizeAddress","normalizeContactEmail","normalizePhone","readContactFacet","registerPluginApiRoute","visibleToHost","consentGroupForSite","firebaseAdmin","getOrgForHost","logHostActivity","memberHasOrgPermission","orgDataCollectionForHost","resolveOrgMembership","restampCrmListFieldsAt","isRefusedIdToken","captureHostContact","emitHostEvent","FieldValue","CRM_API_ROUTES","registerCrmServerDeclarations","BUNDLE_ID","CRM_NEXT_ACTIVITY_ROUTE","CRM_LIST_FIELDS_ROUTE","CRM_LEAD_SOURCE_VALUES_ROUTE","CRM_TASK_ROUTES","crmNextActivityHandler","crmListFieldsHandler","crmLeadSourceValuesHandler","registerCrmRecordEmailStateWriter","registerCrmRecordTimelineWriter","crmTaskCompleteHandler","crmTaskSaveHandler","crmCompaniesImportHandler","crmContactsImportHandler","crmDealsImportHandler","crmLeadsImportHandler","crmTasksImportHandler","crmDealStageHandler","crmEmailSendHandler","CRM_EMAIL_CHECK_ROUTE","crmEmailCheckHandler","leadConvertHandler","leadCreateHandler","CONTACT_EMAIL_HISTORY_ROUTE","contactEmailHistoryHandler","CONTACTS_MERGE_ROUTE","contactsMergeHandler","CRM_ERASE_PERSON_ROUTE","crmErasePersonHandler","CRM_ORG_ACTIVITY_ROUTE","crmOrgActivityHandler","CRM_INBOUND_ADDRESS_ROUTE","crmInboundAddressHandler","crmCompanyDeleteHandler","CONTACT_PHONE_REFUSAL","normalizeTags","typed","crmContactUpdateHandler","CRM_EMAIL_TEMPLATE_DUPLICATE_ROUTE","crmEmailTemplateDuplicateHandler","registerCrmRecordFactsReaders","crmSuiteRefusal","CRM_RECIPE_INSTALL_ROUTE","CRM_RECIPE_STATUS_ROUTE","crmRecipeInstallHandler","crmRecipeStatusHandler","crmPingHandler","req","res","method","setHeader","status","json","error","ok","plugin","authorizeSiteEditor","hostId","hostSnapshot","authorization","String","headers","idToken","startsWith","slice","length","undefined","uid","app","auth","verifyIdToken","console","firestore","collection","doc","get","exists","memberRole","contactStageHandler","body","trim","contactId","requested","lifecycleStage","clearing","caller","facet","owner","suite","org","contactsRef","snapshot","group","data","groupId","previousStage","changed","ref","update","delete","updatedAt","serverTimestamp","email","CONTACT_BAND_FULL_MESSAGE","crmContactsCreateHandler","rawPhone","phone","rawStage","name","jobTitle","companyName","companyId","ownerUid","address","tags","marketingConsent","disclosedConsentGroup","decoded","resolved","isStaff","member","membership","orgId","reaches","Boolean","hostAccess","allowed","readable","Set","companySnapshot","companies","tokens","visible","Array","isArray","some","token","has","result","source","interaction","summary","refused","reason","contacts","arrayUnion","created","type","id","registerCrmConsoleApi","ping","contactStage","contactUpdate","companyDelete","save","complete","emailSend"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCC,GAED,SACEA,sBAAsB,EACtBC,gBAAgB,EAChBC,eAAe,EACfC,aAAa,EACbC,uBAAuB,EACvBC,eAAe,EACfC,gBAAgB,EAChBC,qBAAqB,EACrBC,cAAc,EAIdC,gBAAgB,EAChBC,sBAAsB,EACtBC,aAAa,QACR,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,sBAAsB,EACtBC,wBAAwB,EACxBC,oBAAoB,EACpBC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,wBAAuB;AACzE,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,cAAc,QAAQ,4BAAwB;AACvD,SAASC,6BAA6B,QAAQ,2BAAuB;AACrE,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,uBAAuB,QAAQ,2BAAuB;AAC/D,SAASC,qBAAqB,QAAQ,yBAAqB;AAC3D,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,eAAe,QAAQ,yBAAqB;AACrD,SAASC,sBAAsB,QAAQ,mCAA+B;AACtE,SAASC,oBAAoB,QAAQ,iCAA6B;AAClE,SAASC,0BAA0B,QAAQ,iCAA6B;AACxE,SAASC,iCAAiC,QAAQ,iCAA6B;AAC/E,SAASC,+BAA+B,QAAQ,8BAA0B;AAC1E,SAASC,sBAAsB,EAAEC,kBAAkB,QAAQ,0BAAsB;AACjF,SAASC,yBAAyB,QAAQ,+BAA2B;AACrE,SAASC,wBAAwB,QAAQ,8BAA0B;AACnE,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,qBAAqB,QAAQ,2BAAuB;AAC7D,SAASC,mBAAmB,QAAQ,yBAAqB;AACzD,SAASC,mBAAmB,QAAQ,yBAAqB;AACzD,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,0BAAsB;AAClF,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SACEC,2BAA2B,EAC3BC,0BAA0B,QACrB,oCAAgC;AACvC,SAASC,oBAAoB,EAAEC,oBAAoB,QAAQ,6BAAyB;AACpF,SAASC,sBAAsB,EAAEC,qBAAqB,QAAQ,2BAAuB;AACrF,SAASC,sBAAsB,EAAEC,qBAAqB,QAAQ,2BAAuB;AACrF,SAASC,yBAAyB,EAAEC,wBAAwB,QAAQ,8BAA0B;AAC9F,SAASC,uBAAuB,QAAQ,6BAAyB;AACjE,SAASC,qBAAqB,EAAEC,aAAa,EAAEC,KAAK,QAAQ,8BAA0B;AACtF,SAASC,uBAAuB,QAAQ,6BAAyB;AACjE,SACEC,kCAAkC,EAClCC,gCAAgC,QAC3B,uCAAmC;AAC1C,SAASC,6BAA6B,QAAQ,2BAAuB;AACrE,SAASC,eAAe,QAAQ,yBAAqB;AACrD,SACEC,wBAAwB,EACxBC,uBAAuB,EACvBC,uBAAuB,EACvBC,sBAAsB,QACjB,4BAAwB;AAE/B;;;;;;;CAOC,GACD,OAAO,MAAMC,iBAAmC,CAACC,KAAKC;IACpD,IAAID,IAAIE,MAAM,KAAK,OAAO;QACxBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACAL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEE,IAAI;QAAMC,QAAQvD;IAAU;AACrD,EAAC;AAID;;;;;;;;;CASC,GACD,eAAewD,oBACbT,GAAqB,EACrBU,MAAc;QAEeV,4BAwBTW;IAxBpB,MAAMC,gBAAgBC,QAAOb,6BAAAA,IAAIc,OAAO,CAACF,aAAa,YAAzBZ,6BAA6B;IAC1D,MAAMe,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAO;QAAER,IAAI;QAAOH,QAAQ;QAAKE,OAAO;IAAkB;IACxE,IAAIc;IACJ,IAAI;QACFA,MAAM,AAAC,CAAA,MAAMhF,cAAciF,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR,QAAO,EAAGK,GAAG;IACrE,EAAE,OAAOd,OAAO;QACd,sEAAsE;QACtE,mCAAmC;QACnC,IAAI3D,iBAAiB2D,QAAQ,OAAO;YAAEC,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAAkB;QACvFkB,QAAQlB,KAAK,CAAC,+CAA+CA;QAC7D,OAAO;YAAEC,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAA+C;IACzF;IACA,MAAMK,eAAe,MAAMvE,cACxBiF,GAAG,GACHI,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACjB,QACJkB,GAAG;IACN,IAAI,CAACjB,aAAakB,MAAM,EAAE;QACxB,OAAO;YAAEtB,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAAe;IACzD;IACA,MAAMwB,aAAa,EAACnB,oBAAAA,aAAaiB,GAAG,CAAC,0BAAjBjB,oBAAmC,CAAC,EAAE,CAACS,IAAI;IAC/D,IAAIU,eAAe,WAAWA,eAAe,UAAU;QACrD,OAAO;YAAEvB,IAAI;YAAOH,QAAQ;YAAKE,OAAO;QAA6B;IACvE;IACA,OAAO;QAAEC,IAAI;QAAMa;IAAI;AACzB;AAEA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,OAAO,MAAMW,sBAAwC,OAAO/B,KAAKC;;QAMzCD,WACGA,YACEA;IAP3B,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMI,SAASG,gBAAOb,YAAAA,IAAIgC,IAAI,qBAARhC,UAAUU,MAAM,mBAAI,IAAIuB,IAAI;IAClD,MAAMC,YAAYrB,iBAAOb,aAAAA,IAAIgC,IAAI,qBAARhC,WAAUkC,SAAS,oBAAI,IAAID,IAAI;IACxD,MAAME,aAAqBnC,aAAAA,IAAIgC,IAAI,qBAARhC,WAAUoC,cAAc;IACnD,IAAI,CAAC1B,UAAU,CAACwB,WAAW;QACzBjC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA8B;QAC5D;IACF;IACA,sEAAsE;IACtE,MAAM+B,WAAWF,cAAc;IAC/B,MAAMC,iBAAiBC,WACnB,KACA1G,wBAAwBwG,aACtBA,YACA;IACN,IAAIC,mBAAmB,MAAM;QAC3BnC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAyB;QACvD;IACF;IACA,MAAMgC,SAAS,MAAM7B,oBAAoBT,KAAKU;IAC9C,IAAI4B,OAAO/B,EAAE,KAAK,OAAO;QACvBN,IAAIG,MAAM,CAACkC,OAAOlC,MAAM,EAAEC,IAAI,CAAC;YAAEC,OAAOgC,OAAOhC,KAAK;QAAC;QACrD;IACF;IACA,IAAI;YAuBoBiC;QAtBtB,qEAAqE;QACrE,MAAMC,QAAQ,MAAMnG,cAAcqE;QAClC,IAAI,CAAC8B,OAAO;YACVvC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAMmC,QAAQ/C,gBAAgB8C,MAAME,GAAG,EAAE;QACzC,IAAID,OAAO;YACTxC,IAAIG,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMT,IAAI;YACxC;QACF;QACA,MAAMW,cAAc,MAAMnG,yBAAyBkE,QAAQ;QAC3D,MAAMkC,WAAW,MAAMD,YAAYhB,GAAG,CAACO,WAAWN,GAAG;QACrD,IAAI,CAACgB,SAASf,MAAM,IAAI,CAAC3F,cAAc0G,SAAShB,GAAG,CAAC,cAAclB,SAAS;YACzET,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;YAChD;QACF;QACA,MAAMuC,QAAQ,MAAM1G,oBAAoBuE;QACxC,MAAM6B,QAAQvG,iBACZ4G,SAASE,IAAI,IACbD,MAAME,OAAO;QAEf,MAAMC,iBAAgBT,wBAAAA,MAAMH,cAAc,YAApBG,wBAAwB;QAC9C,IAAIS,kBAAkBZ,gBAAgB;YACpCnC,IACGG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEE,IAAI;gBAAM0C,SAAS;gBAAOb;gBAAgBY;YAAc;YAClE;QACF;QACA,MAAMJ,SAASM,GAAG,CAACC,MAAM,CAAC;YACxB,CAAC3H,iBAAiBqH,MAAME,OAAO,EAAE,kBAAkB,EAAEV,WACjDvF,WAAWsG,MAAM,KACjBhB;YACJiB,WAAWvG,WAAWwG,eAAe;QACvC;QACA,6DAA6D;QAC7D,MAAM5G,uBAAuBkG,SAASM,GAAG,EAAE;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAACb,UAAU;gBAGGO;YAFhB,MAAM/F,cAAc6D,QAAQ,uBAAuB;gBACjDwB;gBACAqB,OAAO1C,QAAO+B,gBAAAA,SAAShB,GAAG,CAAC,oBAAbgB,gBAAyB;gBACvCR;gBACAY;YACF;QACF;QACA/C,IACGG,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEE,IAAI;YAAM0C,SAAS;YAAMb;YAAgBY;QAAc;IACnE,EAAE,OAAO1C,OAAO;QACdkB,QAAQlB,KAAK,CAAC,8BAA8BI,QAAQwB,WAAW5B;QAC/DL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACjE;AACF,EAAC;AAED;;;;;;;CAOC,GACD,OAAO,MAAMkD,4BACX,4EACA,sBAAqB;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDC,GACD,OAAO,MAAMC,2BAA6C,OAAOzD,KAAKC;QAOtDD,WAsCeA;IA5C7B,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IAEA,MAAM0B,QAAQhC,YAAAA,IAAIgC,IAAI,YAARhC,YAAY,CAAC;IAC3B,MAAMU,SAASrB,MAAM2C,IAAI,CAAC,SAAS,EAAE;IACrC,IAAI,CAACtB,QAAQ;QACXT,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAMiD,QAAQzH,sBAAsBkG,IAAI,CAAC,QAAQ;IACjD,IAAI,CAACuB,OAAO;QACVtD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;QAC7D;IACF;IACA,MAAMoD,WAAWrE,MAAM2C,IAAI,CAAC,QAAQ,EAAE;IACtC,MAAM2B,QAAQD,WAAW3H,eAAe2H,YAAY;IACpD,IAAIA,YAAY,CAACC,OAAO;QACtB1D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOnB;QAAsB;QACpD;IACF;IACA,MAAMyE,WAAWvE,MAAM2C,IAAI,CAAC,iBAAiB,EAAE;IAC/C,IAAI4B,YAAY,CAACjI,wBAAwBiI,WAAW;QAClD3D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;QACzD;IACF;IACA,MAAMuD,OAAOxE,MAAM2C,IAAI,CAAC,OAAO,EAAE;IACjC,MAAM8B,WAAWzE,MAAM2C,IAAI,CAAC,WAAW,EAAE;IACzC,IAAI+B,cAAc1E,MAAM2C,IAAI,CAAC,cAAc,EAAE;IAC7C,MAAMgC,YAAY3E,MAAM2C,IAAI,CAAC,YAAY,EAAE;IAC3C,MAAMiC,WAAW5E,MAAM2C,IAAI,CAAC,WAAW,EAAE;IACzC,MAAMkC,UACJlC,IAAI,CAAC,UAAU,IAAI,OAAOA,IAAI,CAAC,UAAU,KAAK,WAC1CnG,iBAAiBmG,IAAI,CAAC,UAAU,IAChC;IACN,MAAMmC,OAAO/E,cAAc4C,IAAI,CAAC,OAAO;IACvC,MAAMoC,mBAAmBpC,IAAI,CAAC,mBAAmB,KAAK;IACtD,yEAAyE;IACzE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAMqC,wBAAwBhF,MAAM2C,IAAI,CAAC,wBAAwB,EAAE;IAEnE,MAAMpB,gBAAgBC,QAAOb,6BAAAA,IAAIc,OAAO,CAACF,aAAa,YAAzBZ,6BAA6B;IAC1D,MAAMe,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS;QACZd,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QAChD;IACF;IAEA,IAAI;YA0I2BgE;QAzI7B,MAAMA,UAAU,MAAMlI,cAAciF,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR;QAC/D,MAAMwD,WAAW,MAAMlI,cAAcqE;QACrC,IAAI,CAAC6D,UAAU;YACbtE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAMkE,UAAUF,OAAO,CAAC,QAAQ,KAAK;QACrC,IAAI,CAACE,SAAS;;gBAIyBC;YAHrC,MAAMC,aAAa,MAAMjI,qBAAqB6H,QAAQlD,GAAG,EAAEmD,SAASI,KAAK;YACzE,MAAMF,iBAASC,8BAAAA,WAAYD,MAAM,mBAAI;YACrC,MAAMG,UACJhJ,gBAAgB6I,WAAWI,QAAQJ,2BAAAA,qBAAAA,OAAQK,UAAU,qBAAlBL,kBAAoB,CAAC/D,OAAO;YACjE,MAAMqE,UACJN,UACAG,WACC,MAAMrI,uBAAuBgI,SAASI,KAAK,EAAEF,QAAQ;YACxD,IAAI,CAACM,SAAS;gBACZ9E,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,OAAO;gBACT;gBACA;YACF;QACF;QAEA,uEAAuE;QACvE,wEAAwE;QACxE,MAAMmC,QAAQ/C,gBAAgB6E,SAAS7B,GAAG,EAAE;QAC5C,IAAID,OAAO;YACTxC,IAAIG,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMT,IAAI;YACxC;QACF;QAEA,IAAIgC,WAAW;YACb,MAAMnB,QAAQ,MAAM1G,oBAClBuE,QACA6D,SAAS7B,GAAG;YAEd,MAAMsC,WAAW,IAAIC,IAAYvJ,cAAcmH;YAC/C,MAAMqC,kBAAkB,MAAM9I,cAC3BiF,GAAG,GACHI,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAAC4C,SAASI,KAAK,EAClBjD,UAAU,CAACjG,gBAAgB0J,SAAS,EACpCxD,GAAG,CAACqC,WACJpC,GAAG;YACN,MAAMwD,SAAkBF,gBAAgBrD,MAAM,GAC1CqD,gBAAgBtD,GAAG,CAAC,eACpBT;YACJ,MAAMkE,UACJC,MAAMC,OAAO,CAACH,WAAWA,OAAOI,IAAI,CAAC,CAACC,QAAUT,SAASU,GAAG,CAAC7E,OAAO4E;YACtE,IAAI,CAACJ,SAAS;gBACZpF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAkB;gBAChD;YACF;YACAyD,cAAc1E,MAAM6F,gBAAgBtD,GAAG,CAAC,SAAS,QAAQmC;QAC3D;QAEA,MAAM4B,SAAS,MAAM/I,mBAAmB;YACtC8D;YACA6C;WACIM,OAAO;YAAEA;QAAK,IAAI,CAAC;YACvB+B,QAAQ;YACRC,aAAa;gBAAEC,SAAS;YAAgB;YACxC1B;WACIA,oBAAoBC,wBACpB;YAAEA;QAAsB,IACxB,CAAC;YACL9B,OAAO,aACDoB,QAAQ;gBAAEA;YAAM,IAAI,CAAC,GACrBG,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3BE,YAAY;gBAAEA;YAAU,IAAI,CAAC,GAC7BE,UAAU;gBAAEA;YAAQ,IAAI,CAAC,GACzBD,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3BL,YAAYjI,wBAAwBiI,YACpC;gBAAExB,gBAAgBwB;YAAS,IAC3B,CAAC;;QAIT,IAAI,aAAa+B,QAAQ;YACvB,IAAIA,OAAOI,OAAO,KAAK,QAAQ;gBAC7B9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAOkD;oBAA2BwC,QAAQ;gBAAO;gBACxE;YACF;YACA,IAAIL,OAAOI,OAAO,KAAK,iBAAiB;gBACtC9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAA+B;gBAC7D;YACF;YACA,oEAAoE;YACpE,iEAAiE;YACjE,4DAA4D;YAC5D,IAAIqF,OAAOI,OAAO,KAAK,UAAU;gBAC/B9F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO/E;oBAAwByK,QAAQ;gBAAS;gBACvE;YACF;YACA/F,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;YAChE;QACF;QAEA,IAAI6D,KAAKjD,MAAM,IAAI6C,aAAa;YAC9B,MAAMlB,QAAQ,MAAM1G,oBAClBuE,QACA6D,SAAS7B,GAAG;YAEd,MAAMuD,WAAW,MAAMzJ,yBAAyBkE,QAAQ;YACxD,MAAMuF,SAAStE,GAAG,CAACgE,OAAOzD,SAAS,EAAEiB,MAAM,CAAC,aACtCgB,KAAKjD,MAAM,GACX;gBACE,CAAC1F,iBAAiBqH,MAAME,OAAO,EAAE,QAAQ,EAAEjG,WAAWoJ,UAAU,IAC3D/B;YAEP,IACA,CAAC,GACDJ,cACA;gBACE,CAACvI,iBAAiBqH,MAAME,OAAO,EAAE,eAAe,EAAEgB;gBAClD,mDAAmD;gBACnDA;YACF,IACA,CAAC;gBACLV,WAAWvG,WAAWwG,eAAe;;YAEvC,6DAA6D;YAC7D,MAAM5G,uBAAuBuJ,SAAStE,GAAG,CAACgE,OAAOzD,SAAS,GAAG;QAC/D;QAEA;;;;;;;KAOC,GACD,MAAM5F,gBACJoE,QACA;YAAEU,KAAKkD,QAAQlD,GAAG;YAAEmC,KAAK,GAAEe,iBAAAA,QAAQf,KAAK,YAAbe,iBAAiB;QAAK,GACjDqB,OAAOQ,OAAO,GAAG,kBAAkB,mBACnC;YAAEC,MAAM;YAAWC,IAAIV,OAAOzD,SAAS;YAAE2B,MAAMA,QAAQN;QAAM;QAG/DtD,IACGG,MAAM,CAACuF,OAAOQ,OAAO,GAAG,MAAM,KAC9B9F,IAAI,CAAC;YAAE6B,WAAWyD,OAAOzD,SAAS;YAAEiE,SAASR,OAAOQ,OAAO;QAAC;IACjE,EAAE,OAAO7F,OAAO;QACdkB,QAAQlB,KAAK,CAAC,+BAA+BA;QAC7CL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkC;IAClE;AACF,EAAC;AAED,8EAA8E,GAC9E,OAAO,SAASgG;IACd;;;;;GAKC,GACDtJ;IACAf,uBAAuBc,eAAewJ,IAAI,EAAExG;IAC5C9D,uBAAuBc,eAAeyJ,YAAY,EAAEzE;IACpD,wEAAwE;IACxE,uEAAuE;IACvE9F,uBAAuBc,eAAe0J,aAAa,EAAEnH;IACrD,yEAAyE;IACzE,kDAAkD;IAClDrD,uBAAuBc,eAAe2J,aAAa,EAAExH;IACrD,2EAA2E;IAC3E,oEAAoE;IACpEjD,uBAAuBoB,gBAAgBsJ,IAAI,EAAE/I;IAC7C3B,uBAAuBoB,gBAAgBuJ,QAAQ,EAAEjJ;IACjD,kEAAkE;IAClE1B,uBAAuBiB,yBAAyBI;IAChD,wEAAwE;IACxE,oEAAoE;IACpErB,uBAAuBkB,uBAAuBI;IAC9C,wEAAwE;IACxE,0DAA0D;IAC1DtB,uBAAuBmB,8BAA8BI;IACrD,yEAAyE;IACzE,gCAAgC;IAChCvB,uBAAuB,uBAAuB6B;IAC9C,wEAAwE;IACxE,uDAAuD;IACvD7B,uBAAuB,wBAAwB4B;IAC/C,oEAAoE;IACpE,uEAAuE;IACvE,iCAAiC;IACjC5B,uBAAuB,oBAAoB8B;IAC3C9B,uBAAuB,oBAAoBgC;IAC3C,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,wBAAwB;IACxBhC,uBAAuB,oBAAoB+B;IAC3C,yEAAyE;IACzE,iEAAiE;IACjE,0BAA0B;IAC1B/B,uBAAuB,kBAAkBiC;IACzC,qEAAqE;IACrE,yEAAyE;IACzE,sCAAsC;IACtCjC,uBAAuB,uBAAuBwH;IAC9C,0EAA0E;IAC1E,0EAA0E;IAC1E,6CAA6C;IAC7CxH,uBAAuB,oBAAoBqC;IAC3C,kEAAkE;IAClErC,uBAAuB,oBAAoBsC;IAC3C,yEAAyE;IACzE,wEAAwE;IACxEtC,uBAAuBuC,6BAA6BC;IACpD,yEAAyE;IACzE,oEAAoE;IACpE,iEAAiE;IACjExC,uBAAuBc,eAAe8J,SAAS,EAAE1I;IACjD,yEAAyE;IACzE,oEAAoE;IACpE,uEAAuE;IACvE,oDAAoD;IACpDlC,uBAAuBmC,uBAAuBC;IAC9C,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1EpC,uBAAuByC,sBAAsBC;IAC7C,iEAAiE;IACjE,yBAAyB;IACzB1C,uBAAuB2C,wBAAwBC;IAC/C,wEAAwE;IACxE,yEAAyE;IACzE,6CAA6C;IAC7C5C,uBAAuB6C,wBAAwBC;IAC/C,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE9C,uBAAuB0D,0BAA0BE;IACjD5D,uBAAuB2D,yBAAyBE;IAChD,wEAAwE;IACxE,yEAAyE;IACzE,wCAAwC;IACxC7D,uBAAuB+C,2BAA2BC;IAClDhD,uBACEsD,oCACAC;IAEF,uEAAuE;IACvE,6EAA6E;IAC7E,wEAAwE;IACxE,WAAW;IACXC;IACA,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE/B;IACA,uEAAuE;IACvE,mEAAmE;IACnE,oEAAoE;IACpED;AACF"}