@aglyn/plugins-crm 1.0.0-beta.203 → 1.0.0-beta.205

package/src/lib/server/record-email-state.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","BUNDLE_ID","NONE","records","stampRecord","ref","incoming","force","snapshot","get","exists","current","data","next","status","atMs","source","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,SAAS,QAAQ,gCAA4B;AAkCtD,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc;IAEd,MAAMC,WAAW,MAAMH,IAAII,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUb,eAAeU,SAASI,IAAI;IAC5C,MAAMC,OAAOlB,eAAegB,SAASL,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEM,SAASF,WACRA,WACCE,KAAKC,MAAM,KAAKH,QAAQG,MAAM,IAC9BD,KAAKE,IAAI,KAAKJ,QAAQI,IAAI,IAC1BF,KAAKG,MAAM,KAAKL,QAAQK,MAAM,IAC9BH,KAAKI,MAAM,KAAKN,QAAQM,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMZ,IAAIa,GAAG,CACX;QAAE,CAACxB,kBAAkB,EAAEmB;QAAM,CAACpB,uBAAuB,EAAEoB,KAAKC,MAAM;IAAC,GACnE;QAAEK,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQnB,GAAG;IAChE,OAAOc,KAAKb,MAAM,GAAGe,QAAOF,YAAAA,KAAKd,GAAG,CAAC,oBAATc,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQtC,sBAAsB0B,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQrC,UAAUqC,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOjC;YAC3B,MAAMmB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOlC;YACT;YACA,IAAI,CAACwB,OAAO,OAAOxB;YACnB,MAAMoC,QAAoB;gBACxBxB,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BC,MAAMwB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACvB,IAAI,KAAKO,QAAQgB,KAAK,CAACvB,IAAI,GAAG,IAAIO,QAAQgB,KAAK,CAACvB,IAAI,GAAG0B,KAAKC,GAAG;gBACnG1B,QAAQM,QAAQgB,KAAK,CAACtB,MAAM;gBAC5BC,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMtC,QAAQe,QAAQf,KAAK,KAAK;YAChC,IAAIJ,UAAU;YACd,IAAI;gBACF,MAAM2C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMhD,mBAAmB+C,UAAUZ;gBACnD,IAAIa,WAAY,MAAM3C,YAAY2C,QAAQ1C,GAAG,EAAEiC,OAAO/B,QAASJ,WAAW;YAC5E,EAAE,OAAOiC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMhC,YACRiB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACA/B,QACC;oBACDJ,WAAW;gBACb;YACF,EAAE,OAAOiC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEjC;YAAQ;QACnB;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAAS6C;IACd,OAAO;QAAE3B,WAAW,IAAMrB,cAAciD,GAAG,GAAG5B,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAAS6B,kCACdlB,OAAgCgB,gCAAgC;IAEhExD,qCAAqCuC,gCAAgCC,OAAO;QAAEmB,UAAUlD;IAAU;AACpG"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  CRM_EMAIL_STATUS_NONE,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n  withdraw = false,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  /*\n   * A WITHDRAWAL takes back the one verdict it names (AGL-3328): the\n   * deliverability check's \"Would bounce\" once the domain takes mail again.\n   * Any other standing verdict — a bounce DNS cannot see — is left alone.\n   */\n  if (withdraw) {\n    if (current?.status !== incoming.status) return false\n    await ref.update({\n      [EMAIL_STATE_FIELD]: FieldValue.delete(),\n      [CRM_EMAIL_STATUS_FIELD]: CRM_EMAIL_STATUS_NONE,\n    })\n    return true\n  }\n  // The deliverability check saying again what the record already holds:\n  // the date it was first found is the one worth keeping.\n  if (incoming.source === 'check' && current?.status === incoming.status) return false\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      const withdraw = request.withdraw === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force, withdraw))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n          withdraw,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","CRM_EMAIL_STATUS_NONE","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","FieldValue","BUNDLE_ID","NONE","records","stampRecord","ref","incoming","force","withdraw","snapshot","get","exists","current","data","status","update","delete","source","next","atMs","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,qBAAqB,EACrBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,SAAS,QAAQ,gCAA4B;AAkCtD,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc,EACdC,WAAW,KAAK;IAEhB,MAAMC,WAAW,MAAMJ,IAAIK,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUf,eAAeY,SAASI,IAAI;IAC5C;;;;GAIC,GACD,IAAIL,UAAU;QACZ,IAAII,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;QAChD,MAAMT,IAAIU,MAAM,CAAC;YACf,CAACtB,kBAAkB,EAAEO,WAAWgB,MAAM;YACtC,CAACzB,uBAAuB,EAAEC;QAC5B;QACA,OAAO;IACT;IACA,uEAAuE;IACvE,wDAAwD;IACxD,IAAIc,SAASW,MAAM,KAAK,WAAWL,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;IAC/E,MAAMI,OAAOxB,eAAekB,SAASN,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEW,SAASN,WACRA,WACCM,KAAKJ,MAAM,KAAKF,QAAQE,MAAM,IAC9BI,KAAKC,IAAI,KAAKP,QAAQO,IAAI,IAC1BD,KAAKD,MAAM,KAAKL,QAAQK,MAAM,IAC9BC,KAAKE,MAAM,KAAKR,QAAQQ,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMf,IAAIgB,GAAG,CACX;QAAE,CAAC5B,kBAAkB,EAAEyB;QAAM,CAAC3B,uBAAuB,EAAE2B,KAAKJ,MAAM;IAAC,GACnE;QAAEQ,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQrB,GAAG;IAChE,OAAOgB,KAAKf,MAAM,GAAGiB,QAAOF,YAAAA,KAAKhB,GAAG,CAAC,oBAATgB,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQ1C,sBAAsB8B,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQzC,UAAUyC,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOpC;YAC3B,MAAMsB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOrC;YACT;YACA,IAAI,CAAC2B,OAAO,OAAO3B;YACnB,MAAMuC,QAAoB;gBACxB3B,QAAQW,QAAQgB,KAAK,CAAC3B,MAAM;gBAC5BK,MAAMuB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACtB,IAAI,KAAKM,QAAQgB,KAAK,CAACtB,IAAI,GAAG,IAAIM,QAAQgB,KAAK,CAACtB,IAAI,GAAGyB,KAAKC,GAAG;gBACnG5B,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BG,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMzC,QAAQkB,QAAQlB,KAAK,KAAK;YAChC,MAAMC,WAAWiB,QAAQjB,QAAQ,KAAK;YACtC,IAAIL,UAAU;YACd,IAAI;gBACF,MAAM8C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMpD,mBAAmBmD,UAAUZ;gBACnD,IAAIa,WAAY,MAAM9C,YAAY8C,QAAQ7C,GAAG,EAAEoC,OAAOlC,OAAOC,WAAYL,WAAW;YACtF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMnC,YACRoB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACAlC,OACAC,WACC;oBACDL,WAAW;gBACb;YACF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEpC;YAAQ;QACnB;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAASgD;IACd,OAAO;QAAE3B,WAAW,IAAMzB,cAAcqD,GAAG,GAAG5B,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAAS6B,kCACdlB,OAAgCgB,gCAAgC;IAEhE7D,qCAAqC4C,gCAAgCC,OAAO;QAAEmB,UAAUrD;IAAU;AACpG"}

package/src/lib/server/task-routes.d.ts

@@ -70,6 +70,8 @@ export type Refusal = {
 export interface Writer {
     ok: true;
     uid: string;
+    /** The caller's address, for who set off the runs a write causes (AGL-3376). */
+    email: string | null;
     staff: boolean;
     orgId: string;
     org: Record<string, unknown>;

package/src/lib/server/task-routes.js

@@ -44,6 +44,7 @@ const ORG_REFUSAL = 'Editing tasks at the organization level requires the "Manag
     var _req_headers_authorization, _ref;
     const suiteAct = options.suiteAct === undefined ? TASKS_ACT : options.suiteAct;
     if (scope.level === 'org') {
+        var _caller_email;
         const caller = await authorizeOrgCaller(req, scope.orgId, {
             needs: 'data.manage',
             refusal: ORG_REFUSAL
@@ -59,6 +60,7 @@ const ORG_REFUSAL = 'Editing tasks at the organization level requires the "Manag
         return {
             ok: true,
             uid: caller.uid,
+            email: (_caller_email = caller.email) != null ? _caller_email : null,
             staff: caller.staff,
             orgId: caller.orgId,
             org: caller.org,
@@ -104,6 +106,7 @@ const ORG_REFUSAL = 'Editing tasks at the organization level requires the "Manag
     return {
         ok: true,
         uid: decoded.uid,
+        email: typeof decoded.email === 'string' ? decoded.email : null,
         staff,
         orgId,
         org: org != null ? org : {},
@@ -589,6 +592,12 @@ const tasksCollection = (orgId)=>firebaseAdmin.app().firestore().collection('org
             companyId: String((_task_companyId = task.companyId) != null ? _task_companyId : ''),
             dealId: String((_task_dealId = task.dealId) != null ? _task_dealId : ''),
             taskHostId: String((_task_hostId1 = task.hostId) != null ? _task_hostId1 : '')
+        }, {
+            actor: {
+                kind: 'member',
+                uid: writer.uid,
+                email: writer.email
+            }
         });
     }
     return {

package/src/lib/server/task-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/task-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type AglynOrgMember,\n  consentGroupForHost,\n  CRM_COLLECTIONS,\n  type CrmTask,\n  crmScopeTokens,\n  crmTaskListFields,\n  crmTaskReminderAfterEdit,\n  crmTaskReminderPending,\n  isOrgWideMember,\n  memberCanSee,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  type PluginApiResponse,\n} from '@aglyn/aglyn/server'\nimport {\n  crmNextActivityLinksOf,\n  firebaseAdmin,\n  getOrgForHost,\n  memberHasOrgPermission,\n  notifyUsers,\n  recomputeCrmNextTaskAt,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CRM_TASK_BATCH_MAX,\n  type CrmTaskCompleteOutcome,\n  type CrmTaskCompleteResponse,\n  type CrmTaskFields,\n  type CrmTaskSaveOutcome,\n  type CrmTaskSaveResponse,\n  type CrmTasksCompleteResponse,\n  type CrmTasksSaveResponse,\n  readCrmTaskFields,\n} from '../model/task-routes'\nimport { CRM_ORG_TASK_SCOPE } from '../model/task-scope'\nimport {\n  authorizeOrgCaller,\n  type CrmRouteScope,\n  readCrmRouteScope,\n} from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/**\n * The two things a task does that a browser must not do alone (AGL-2599).\n *\n * Every other task write is client-direct against the Firestore rules —\n * reopening, deleting, the list's own reads. These two are routes because\n * each has a side effect that lives outside the document:\n *\n * - SAVING a task assigned to somebody else NOTIFIES them, and a\n *   notification is an Admin-SDK write into another person's inbox. Rather\n *   than a client-direct write followed by a \"please notify\" call — two\n *   operations that can disagree about whether the task exists — the route\n *   persists the task itself and notifies from the same code path, so a\n *   notification can never announce a task that failed to save. It also\n *   stamps the scope, the provenance and the timestamps, which is one\n *   creator computing `visibleTo` rather than two.\n *\n * - COMPLETING a task EMITS the `taskCompleted` host event, which is what a\n *   workflow triggers on. A browser cannot run the workflow runner.\n *\n * Both authenticate the way the other console plugin routes do — the ID\n * token in the `Authorization` header — and then ask the same two questions\n * the rules ask of a `crmTasks` write: is this member allowed to write org\n * data (`owner`/`admin`/`editor`, and `data.manage` resolved through their\n * custom role), and can they reach THIS document's scope.\n *\n * ## The organization variant (AGL-2637)\n *\n * `{ orgId, … }` instead of a site: the org-level hub. The caller is\n * authorized by the ORG — an org-wide member holding `data.manage`, the\n * hub's own gate, never a site collaborator — and reaches every task the\n * org holds, so no scope check is made against the document. A NEW task\n * names the site it is filed from beside the org, or names none and is the\n * organization's own: `hostId: null`, the org scope token alone. Completing\n * emits on the task's OWN site, where its automations live; an\n * organization task has none and emits nothing, as an uncaptured deal's\n * stage change emits nothing.\n *\n * The org variant also takes a BATCH — `taskIds` to complete, `tasks` to\n * save — so the org hub's bulk bar makes one request per action rather\n * than one per task. Each task is answered on its own in `results`; the\n * request as a whole is refused only for what refuses every task alike.\n */\n\nexport type Refusal = {\n  ok: false\n  status: number\n  body: { error: string; reason?: string; code?: string }\n}\n\n/** What the suite gate names when a task route refuses a plan without it. */\nconst TASKS_ACT = \"Working a record's tasks\"\n\nexport interface Writer {\n  ok: true\n  uid: string\n  staff: boolean\n  orgId: string\n  org: Record<string, unknown>\n  /** The member document under a site; `null` at the org level, where the reach is the org's. */\n  member: Partial<AglynOrgMember> | null\n  level: CrmRouteScope['level']\n}\n\nexport const refuse = (status: number, error: string): Refusal => ({\n  ok: false,\n  status,\n  body: { error },\n})\n\nconst ORG_REFUSAL =\n  'Editing tasks at the organization level requires the \"Manage data\" ' +\n  'permission across the whole workspace.'\n\nexport interface CrmWriterOptions {\n  /**\n   * The act a plan without the CRM is refused for, named the way\n   * `crmSuiteRefusalMessage` takes it. `null` for a route that asks the plan\n   * itself, once it knows what the request writes, so the refusal can name\n   * that act — a contact update names the first field it carries. Tasks\n   * when unsaid.\n   */\n  suiteAct?: string | null\n}\n\n/**\n * Who is asking, and whether they may write this CRM at all.\n *\n * Under a site: the org resolved from the site and the rules' own role and\n * permission questions. At the organization level: the org the body names,\n * for an org-wide member with the permission. The scope question — may they\n * reach THIS task — is asked by the caller against the document, because on\n * a create the document does not exist yet and its scope is what the route\n * is about to stamp.\n */\nexport async function authorizeCrmWriter(\n  req: PluginApiRequest,\n  scope: CrmRouteScope,\n  options: CrmWriterOptions = {},\n): Promise<Writer | Refusal> {\n  const suiteAct = options.suiteAct === undefined ? TASKS_ACT : options.suiteAct\n  if (scope.level === 'org') {\n    const caller = await authorizeOrgCaller(req, scope.orgId, {\n      needs: 'data.manage',\n      refusal: ORG_REFUSAL,\n    })\n    if (caller.ok === false) return refuse(caller.status, caller.error)\n    // The plan after the person (AGL-2787): see `suite-gate.ts`.\n    const suite = suiteAct ? crmSuiteRefusal(caller.org, suiteAct) : null\n    if (suite) return { ok: false, status: suite.status, body: suite.body }\n    return {\n      ok: true,\n      uid: caller.uid,\n      staff: caller.staff,\n      orgId: caller.orgId,\n      org: caller.org as Record<string, unknown>,\n      member: null,\n      level: 'org',\n    }\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return refuse(401, 'Unauthenticated')\n\n  const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  const staff = decoded['staff'] === true\n  const resolved = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!resolved) {\n    return refuse(404, 'This site has no organization, so it has no CRM.')\n  }\n  const { orgId, org } = resolved\n  const membership = await resolveOrgMembership(decoded.uid, orgId).catch(\n    () => null,\n  )\n  const member = (membership?.member ?? null) as Partial<AglynOrgMember> | null\n  if (!staff) {\n    const role = String(member?.role ?? '')\n    /*\n     * The rules' `canWriteOrgData()` restated: the role list is what an\n     * unstamped permission map falls through to, and the permission is the\n     * only half a custom role's revocation can reach. A route that checked\n     * one and not the other would open a door the rules keep shut.\n     */\n    const writerRole = role === 'owner' || role === 'admin' || role === 'editor'\n    const suspended =\n      (member as { orgSuspended?: boolean } | null)?.orgSuspended === true\n    if (!member || !writerRole || suspended) {\n      return refuse(403, 'Your organization role does not allow editing the CRM.')\n    }\n    if (!(await memberHasOrgPermission(orgId, member, 'data.manage'))) {\n      return refuse(\n        403,\n        'Your organization role does not allow editing the CRM.',\n      )\n    }\n  }\n  const suite = suiteAct ? crmSuiteRefusal(org, suiteAct) : null\n  if (suite) return { ok: false, status: suite.status, body: suite.body }\n  return {\n    ok: true,\n    uid: decoded.uid,\n    staff,\n    orgId,\n    org: (org ?? {}) as Record<string, unknown>,\n    member,\n    level: 'site',\n  }\n}\n\n/**\n * The rules' `canReadScoped()`, for a document the route has in hand. An\n * org-level writer was admitted as org-wide, and an org-wide member reads\n * every row.\n */\nexport const canReach = (writer: Writer, visibleTo: unknown): boolean =>\n  writer.staff ||\n  writer.level === 'org' ||\n  isOrgWideMember(writer.member) ||\n  memberCanSee(writer.member, visibleTo as string[] | undefined)\n\n/**\n * The records the task names carry `nextTaskAtMs` (AGL-2661), recomputed\n * after every write here. Its own catch: the task IS saved by now, and a\n * denormalized figure that could not move is logged and left for the\n * Fields section's recompute, not reported as a task that failed to save.\n */\nasync function settleNextActivity(\n  orgId: string,\n  links: readonly (Partial<CrmTaskFields> | Record<string, unknown> | null | undefined)[],\n): Promise<void> {\n  try {\n    await recomputeCrmNextTaskAt(\n      firebaseAdmin.app().firestore(),\n      orgId,\n      links.map((link) => crmNextActivityLinksOf(link as Record<string, unknown>)),\n    )\n  } catch (error) {\n    console.error('[crm] next activity could not be recomputed', orgId, error)\n  }\n}\n\n/**\n * The console path the assignee's notification opens: the record the task\n * is for, in the hub, or the tasks list when it is for nobody in particular.\n *\n * In the `/{hostDocId}/rest` shape every host notification uses — the\n * console rewrites it to `/{orgSlug}/hosts/{subdomain}/rest` when the link\n * is followed, which is why `hostId` and `orgId` travel on the document. An\n * organization task has no site to open under, so its link is the `/org`\n * shape the console rewrites onto the organization's own hub.\n */\nfunction assignmentLink(hostId: string | null, fields: CrmTaskFields): string {\n  const base = hostId ? `/${hostId}/crm` : '/org/crm'\n  if (fields.contactId) return `${base}/contacts/${encodeURIComponent(fields.contactId)}`\n  if (fields.dealId) return `${base}/deals/${encodeURIComponent(fields.dealId)}`\n  if (fields.companyId) return `${base}/companies/${encodeURIComponent(fields.companyId)}`\n  return `${base}/tasks`\n}\n\n/**\n * The editable fields as a Firestore write.\n *\n * The optional ids and the assignee are ABSENT on the document when unset,\n * never `null` — the record cards query `where('contactId', '==', id)` and\n * the \"My tasks\" view `where('assigneeUid', '==', uid)`, and neither is\n * helped by a null. So a create leaves an unset optional out, and an update\n * DELETES it: an assignee cleared in the drawer has to come off the\n * document, and an update that merely omitted the key would keep them.\n * `dueAtMs` is the one field written as `null` when unset, because every\n * view orders by it and a document missing the field drops out of an\n * `orderBy` entirely.\n */\nfunction storedFields(\n  fields: CrmTaskFields,\n  mode: 'create' | 'update',\n): Record<string, unknown> {\n  const absent = mode === 'update' ? FieldValue.delete() : undefined\n  const optional = (value: string | null) =>\n    value ? { present: true, value } : { present: mode === 'update', value: absent }\n  const out: Record<string, unknown> = {\n    title: fields.title,\n    kind: fields.kind,\n    priority: fields.priority,\n    dueAtMs: fields.dueAtMs,\n    notes: fields.notes,\n  }\n  for (const [key, value] of [\n    ['assigneeUid', fields.assigneeUid],\n    ['contactId', fields.contactId],\n    ['companyId', fields.companyId],\n    ['dealId', fields.dealId],\n  ] as const) {\n    const slot = optional(value)\n    if (slot.present) out[key] = slot.value\n  }\n  return out\n}\n\n/**\n * The reminder a save leaves (AGL-2659), as a Firestore write.\n *\n * `crmTaskReminderAfterEdit` decides which reminder the task ends up with;\n * this turns the decision into fields. Written as `null` when unset, like\n * `dueAtMs`, so the document says the reminder was decided. A reminder that\n * MOVED — to a new time, or to none — is a reminder not yet sent, so the\n * runner's mark comes off with it; one that stayed keeps its mark, which is\n * what stops a title correction from re-sending last week's reminder.\n */\nfunction reminderFields(\n  fields: CrmTaskFields,\n  existing: FirebaseFirestore.DocumentSnapshot | null,\n): Record<string, unknown> {\n  const previous = existing\n    ? {\n        dueAtMs: (existing.get('dueAtMs') as number | null | undefined) ?? null,\n        remindAtMs: (existing.get('remindAtMs') as number | null | undefined) ?? null,\n      }\n    : null\n  const remindAtMs = crmTaskReminderAfterEdit({\n    dueAtMs: fields.dueAtMs,\n    remindAtMs: fields.remindAtMs,\n    previous,\n  })\n  const out: Record<string, unknown> = { remindAtMs }\n  if (previous && remindAtMs !== previous.remindAtMs) {\n    out['reminderSentAtMs'] = FieldValue.delete()\n  }\n  return out\n}\n\nconst tasksCollection = (orgId: string) =>\n  firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.tasks)\n\ntype TasksCollection = ReturnType<typeof tasksCollection>\n\n/**\n * Whether a uid names a member of the org, answered once per uid across a\n * batch: a bar reassigning forty tasks to one person asks the roster once.\n */\nfunction rosterOf(orgId: string) {\n  const known = new Map<string, Promise<boolean>>()\n  return (uid: string): Promise<boolean> => {\n    let answer = known.get(uid)\n    if (!answer) {\n      answer = resolveOrgMembership(uid, orgId)\n        .then((found) => Boolean(found?.member))\n        .catch(() => false)\n      known.set(uid, answer)\n    }\n    return answer\n  }\n}\n\n/** Tell the assignee, when they are somebody new and somebody else. */\nasync function notifyAssignee(\n  writer: Writer,\n  fields: CrmTaskFields,\n  previousAssignee: string | null,\n  hostId: string | null,\n): Promise<boolean> {\n  const assignee = fields.assigneeUid\n  const notified = Boolean(\n    assignee && assignee !== writer.uid && assignee !== previousAssignee,\n  )\n  if (!notified || !assignee) return false\n  const due =\n    typeof fields.dueAtMs === 'number'\n      ? ` · due ${new Date(fields.dueAtMs).toLocaleString()}`\n      : ''\n  await notifyUsers([assignee], {\n    type: 'content.taskAssigned',\n    title: 'Task assigned to you',\n    body: `${fields.title}${due}`,\n    link: assignmentLink(hostId, fields),\n    orgId: writer.orgId,\n    ...(hostId ? { hostId } : {}),\n  })\n  return true\n}\n\n/**\n * Rewrite one existing task's editable fields, and tell a new assignee.\n *\n * `visibleTo` is not touched: the rules let only an org-wide member move a\n * record's scope, and this route is not the place that does it. `hostId`\n * and `createdByUid` are provenance and never rewritten. The notification\n * opens under the site the caller is on, or — at the organization level —\n * under the task's own site, and under the org hub for a task with none.\n */\nasync function updateTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const existing = await tasks.doc(taskId).get()\n  if (!existing.exists) return refuse(404, 'That task no longer exists.')\n  if (!canReach(writer, existing.get('visibleTo'))) {\n    return refuse(403, 'That task is not visible to you.')\n  }\n  const previousAssignee = String(existing.get('assigneeUid') ?? '') || null\n  const previousLinks = crmNextActivityLinksOf(existing.data() as Record<string, unknown>)\n  const stored = storedFields(fields, 'update')\n  await tasks.doc(taskId).update({\n    ...stored,\n    ...reminderFields(fields, existing),\n    // The title is what the Tasks list searches (AGL-3321).\n    ...crmTaskListFields({ ...existing.data(), ...stored }),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  // Both sides: a task moved off one deal onto another leaves neither stale.\n  await settleNextActivity(writer.orgId, [previousLinks, fields])\n  const linkHostId =\n    scope.level === 'site'\n      ? scope.hostId\n      : String(existing.get('hostId') ?? '').trim() || null\n  const notified = await notifyAssignee(writer, fields, previousAssignee, linkHostId)\n  return { ok: true, notified }\n}\n\n/**\n * Where a NEW task is filed from: the mounted site, or at the organization\n * level the site the body names — which has to be one of THIS org's, or an\n * org-wide member of one org could stamp a task with another org's site\n * token — or no site at all, the organization's own.\n */\nasync function resolveFiledFrom(\n  writer: Writer,\n  scope: CrmRouteScope,\n): Promise<{ ok: true; hostId: string | null } | Refusal> {\n  if (scope.level === 'site') return { ok: true, hostId: scope.hostId }\n  if (!scope.hostId) return { ok: true, hostId: null }\n  const owner = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!owner || owner.orgId !== writer.orgId) {\n    return refuse(400, 'That site is not one of this organization’s.')\n  }\n  return { ok: true, hostId: scope.hostId }\n}\n\n/**\n * Create one task, stamped with its scope and provenance.\n *\n * The scope every CRM creator stamps for a task filed from a site: the\n * whole org when the org has chosen that, and otherwise the sites this\n * site presents as one sender with — which, undeclared, is this site\n * alone. A scoped member creating a record they could not then see is\n * refused, which is the rules' `canCreateScoped()` said before the write\n * instead of after. An organization task — no site — carries\n * `CRM_ORG_TASK_SCOPE` and `hostId: null`.\n */\nasync function createTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; taskId: string; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const filed = await resolveFiledFrom(writer, scope)\n  if (filed.ok === false) return filed\n  const { hostId } = filed\n  const visibleTo = hostId\n    ? crmScopeTokens(writer.org, consentGroupForHost(writer.org, hostId))\n    : [...CRM_ORG_TASK_SCOPE]\n  if (!canReach(writer, visibleTo)) {\n    return refuse(403, 'Your access to this organization does not reach this site.')\n  }\n  const ref = tasks.doc()\n  await ref.set({\n    ...storedFields(fields, 'create'),\n    ...reminderFields(fields, null),\n    // What the Tasks list searches (AGL-3321).\n    ...crmTaskListFields({ ...storedFields(fields, 'create'), visibleTo }),\n    status: 'open',\n    completedAtMs: null,\n    visibleTo,\n    hostId,\n    createdByUid: writer.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [fields])\n  const notified = await notifyAssignee(writer, fields, null, hostId)\n  return { ok: true, taskId: ref.id, notified }\n}\n\n/**\n * `POST crm/task-save` — create or update a task, and tell its assignee.\n *\n * Body: `{ hostId, taskId?, task: CrmTaskFields }` under a site;\n * `{ orgId, hostId?, taskId?, task }` at the organization level; or the\n * org-level batch `{ orgId, tasks: [{ taskId, task }] }`. Answers\n * `{ ok, taskId, notified }`, or `{ ok, results }` for the batch.\n *\n * The NOTIFICATION fires when the saved assignee is somebody other than the\n * person saving AND is not who the task was already assigned to. Assigning\n * a task to yourself is a note to self; re-saving a task's title does not\n * re-announce it to the person who already has it. The assignee must be a\n * member of the org — a uid nobody can find in the roster is refused rather\n * than written, because a notification to a stranger's inbox is the one\n * thing this route must never do.\n */\nexport const crmTaskSaveHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  if (Array.isArray(req.body?.tasks)) {\n    await saveBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  const read = readCrmTaskFields(req.body?.task)\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const fields = read.fields\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    let body: CrmTaskSaveResponse\n    if (taskId) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId, notified: saved.notified }\n    } else {\n      const saved = await createTask(writer, scope, tasks, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId: saved.taskId, notified: saved.notified }\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save failed', error)\n    res.status(500).json({ error: 'The task could not be saved.' })\n  }\n}\n\n/**\n * The batch: every entry read before any is written, so a body with one\n * unreadable entry is refused whole rather than half-applied; then each\n * task in order, each answered on its own.\n */\nasync function saveBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope,\n): Promise<void> {\n  if (scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is saved at the organization level only.',\n    })\n    return\n  }\n  const entries = (req.body?.tasks as unknown[]).slice(0, CRM_TASK_BATCH_MAX + 1)\n  if (!entries.length || entries.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Save between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n  const parsed: Array<{ taskId: string; fields: CrmTaskFields }> = []\n  for (const entry of entries) {\n    const raw = (entry ?? {}) as Record<string, unknown>\n    const taskId = String(raw['taskId'] ?? '').trim()\n    const read = readCrmTaskFields(raw['task'])\n    if (!taskId || read.ok === false) {\n      res.status(400).json({\n        error: read.ok === false ? read.error : 'Every task in a batch names its taskId.',\n      })\n      return\n    }\n    parsed.push({ taskId, fields: read.fields })\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    const results: CrmTaskSaveOutcome[] = []\n    for (const { taskId, fields } of parsed) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      results.push(\n        saved.ok === false\n          ? { taskId, ok: false, error: saved.body.error }\n          : { taskId, ok: true, notified: saved.notified },\n      )\n    }\n    const body: CrmTasksSaveResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be saved.' })\n  }\n}\n\n/**\n * Mark one task done and fire `taskCompleted` on the site whose automations\n * hear it: under a site, the site whose console ticked the box — workflows\n * belong to a site, and the person is on that site's console. At the\n * organization level there is no such console, so the event goes to the\n * task's OWN site, and an organization task, having none, fires nothing.\n * The task's own `hostId` rides in the payload as `taskHostId` either way,\n * for a workflow that cares about the difference.\n *\n * Idempotent on purpose: two people ticking the same box, or one person\n * double-clicking, completes a task once and fires its event once. The\n * second call reads the stored `completedAtMs` back and writes nothing.\n */\nasync function completeTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n): Promise<CrmTaskCompleteOutcome> {\n  const ref = tasks.doc(taskId)\n  const snapshot = await ref.get()\n  if (!snapshot.exists) {\n    return { taskId, ok: false, error: 'That task no longer exists.' }\n  }\n  const task = snapshot.data() as Partial<CrmTask>\n  if (!canReach(writer, task.visibleTo)) {\n    return { taskId, ok: false, error: 'That task is not visible to you.' }\n  }\n  if (task.status === 'done') {\n    return {\n      taskId,\n      ok: true,\n      completedAtMs: Number(task.completedAtMs ?? 0),\n      alreadyDone: true,\n    }\n  }\n\n  const completedAtMs = Date.now()\n  await ref.update({\n    status: 'done',\n    completedAtMs,\n    completedByUid: writer.uid,\n    // A reminder still owed on a task that is done is owed to nobody\n    // (AGL-2659); one already sent stays, as a fact about what happened.\n    ...(crmTaskReminderPending(task) ? { remindAtMs: null } : {}),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [task as Record<string, unknown>])\n\n  const eventHostId =\n    scope.level === 'site' ? scope.hostId : String(task.hostId ?? '').trim()\n  if (eventHostId) {\n    /*\n     * The payload is what a workflow filter can read: every field a string,\n     * number or boolean, and every optional one present as an empty string\n     * rather than absent, so `contactId != \"\"` is a filter somebody can\n     * write without knowing whether the key exists.\n     */\n    await emitHostEvent(eventHostId, 'taskCompleted', {\n      taskId,\n      title: String(task.title ?? ''),\n      kind: String(task.kind ?? ''),\n      priority: String(task.priority ?? ''),\n      dueAtMs: typeof task.dueAtMs === 'number' ? task.dueAtMs : 0,\n      completedAtMs,\n      completedByUid: writer.uid,\n      assigneeUid: String(task.assigneeUid ?? ''),\n      createdByUid: String(task.createdByUid ?? ''),\n      contactId: String(task.contactId ?? ''),\n      companyId: String(task.companyId ?? ''),\n      dealId: String(task.dealId ?? ''),\n      taskHostId: String(task.hostId ?? ''),\n    })\n  }\n  return { taskId, ok: true, completedAtMs }\n}\n\n/** A per-task outcome as the single-task route has always answered. */\nconst completeStatus = (outcome: Extract<CrmTaskCompleteOutcome, { ok: false }>) =>\n  outcome.error === 'That task no longer exists.' ? 404 : 403\n\n/**\n * `POST crm/task-complete` — mark a task done and fire `taskCompleted`.\n *\n * Body: `{ hostId, taskId }` under a site, `{ orgId, taskId }` at the\n * organization level, or the org-level batch `{ orgId, taskIds }`. Answers\n * `{ ok, completedAtMs, alreadyDone? }`, or `{ ok, results }` for the batch.\n */\nexport const crmTaskCompleteHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (Array.isArray(req.body?.taskIds)) {\n    await completeBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  if (!scope || !taskId) {\n    res.status(400).json({ error: 'Missing hostId or taskId' })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const outcome = await completeTask(writer, scope, tasksCollection(writer.orgId), taskId)\n    if (outcome.ok === false) {\n      res.status(completeStatus(outcome)).json({ error: outcome.error })\n      return\n    }\n    const body: CrmTaskCompleteResponse = {\n      ok: true,\n      completedAtMs: outcome.completedAtMs,\n      ...(outcome.alreadyDone ? { alreadyDone: true } : {}),\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete failed', error)\n    res.status(500).json({ error: 'The task could not be completed.' })\n  }\n}\n\n/**\n * The batch: the ids deduplicated and capped, then each task in order —\n * in order rather than at once, because each completion may run a site's\n * workflows, and two hundred runners started together is the burst the\n * per-task client call was written to avoid.\n */\nasync function completeBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope | null,\n): Promise<void> {\n  if (!scope || scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is completed at the organization level only.',\n    })\n    return\n  }\n  const taskIds = [\n    ...new Set(\n      (req.body?.taskIds as unknown[]).map((id) => String(id ?? '').trim()).filter(Boolean),\n    ),\n  ]\n  if (!taskIds.length || taskIds.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Complete between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const results: CrmTaskCompleteOutcome[] = []\n    for (const taskId of taskIds) {\n      results.push(await completeTask(writer, scope, tasks, taskId))\n    }\n    const body: CrmTasksCompleteResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be completed.' })\n  }\n}\n"],"names":["consentGroupForHost","CRM_COLLECTIONS","crmScopeTokens","crmTaskListFields","crmTaskReminderAfterEdit","crmTaskReminderPending","isOrgWideMember","memberCanSee","crmNextActivityLinksOf","firebaseAdmin","getOrgForHost","memberHasOrgPermission","notifyUsers","recomputeCrmNextTaskAt","resolveOrgMembership","emitHostEvent","FieldValue","CRM_TASK_BATCH_MAX","readCrmTaskFields","CRM_ORG_TASK_SCOPE","authorizeOrgCaller","readCrmRouteScope","crmSuiteRefusal","TASKS_ACT","refuse","status","error","ok","body","ORG_REFUSAL","authorizeCrmWriter","req","scope","options","suiteAct","undefined","level","caller","orgId","needs","refusal","suite","org","uid","staff","member","authorization","String","headers","idToken","startsWith","slice","length","decoded","app","auth","verifyIdToken","resolved","hostId","catch","membership","role","writerRole","suspended","orgSuspended","canReach","writer","visibleTo","settleNextActivity","links","firestore","map","link","console","assignmentLink","fields","base","contactId","encodeURIComponent","dealId","companyId","storedFields","mode","absent","delete","optional","value","present","out","title","kind","priority","dueAtMs","notes","key","assigneeUid","slot","reminderFields","existing","previous","get","remindAtMs","tasksCollection","collection","doc","tasks","rosterOf","known","Map","answer","then","found","Boolean","set","notifyAssignee","previousAssignee","assignee","notified","due","Date","toLocaleString","type","updateTask","taskId","onRoster","exists","previousLinks","data","stored","update","updatedAt","serverTimestamp","linkHostId","trim","resolveFiledFrom","owner","createTask","filed","ref","completedAtMs","createdByUid","createdAt","id","crmTaskSaveHandler","res","method","setHeader","json","Array","isArray","saveBatch","read","task","saved","entries","parsed","entry","raw","push","results","completeTask","snapshot","Number","alreadyDone","now","completedByUid","eventHostId","taskHostId","completeStatus","outcome","crmTaskCompleteHandler","taskIds","completeBatch","Set","filter"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,mBAAmB,EACnBC,eAAe,EAEfC,cAAc,EACdC,iBAAiB,EACjBC,wBAAwB,EACxBC,sBAAsB,EACtBC,eAAe,EACfC,YAAY,QAIP,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,aAAa,EACbC,aAAa,EACbC,sBAAsB,EACtBC,WAAW,EACXC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,aAAa,QAAQ,wBAAuB;AACrD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,kBAAkB,EAQlBC,iBAAiB,QACZ,0BAAsB;AAC7B,SAASC,kBAAkB,QAAQ,yBAAqB;AACxD,SACEC,kBAAkB,EAElBC,iBAAiB,QACZ,kBAAc;AACrB,SAASC,eAAe,QAAQ,kBAAc;AAmD9C,2EAA2E,GAC3E,MAAMC,YAAY;AAalB,OAAO,MAAMC,SAAS,CAACC,QAAgBC,QAA4B,CAAA;QACjEC,IAAI;QACJF;QACAG,MAAM;YAAEF;QAAM;IAChB,CAAA,EAAE;AAEF,MAAMG,cACJ,wEACA;AAaF;;;;;;;;;CASC,GACD,OAAO,eAAeC,mBACpBC,GAAqB,EACrBC,KAAoB,EACpBC,UAA4B,CAAC,CAAC;QAuBDF;IArB7B,MAAMG,WAAWD,QAAQC,QAAQ,KAAKC,YAAYZ,YAAYU,QAAQC,QAAQ;IAC9E,IAAIF,MAAMI,KAAK,KAAK,OAAO;QACzB,MAAMC,SAAS,MAAMjB,mBAAmBW,KAAKC,MAAMM,KAAK,EAAE;YACxDC,OAAO;YACPC,SAASX;QACX;QACA,IAAIQ,OAAOV,EAAE,KAAK,OAAO,OAAOH,OAAOa,OAAOZ,MAAM,EAAEY,OAAOX,KAAK;QAClE,6DAA6D;QAC7D,MAAMe,QAAQP,WAAWZ,gBAAgBe,OAAOK,GAAG,EAAER,YAAY;QACjE,IAAIO,OAAO,OAAO;YAAEd,IAAI;YAAOF,QAAQgB,MAAMhB,MAAM;YAAEG,MAAMa,MAAMb,IAAI;QAAC;QACtE,OAAO;YACLD,IAAI;YACJgB,KAAKN,OAAOM,GAAG;YACfC,OAAOP,OAAOO,KAAK;YACnBN,OAAOD,OAAOC,KAAK;YACnBI,KAAKL,OAAOK,GAAG;YACfG,QAAQ;YACRT,OAAO;QACT;IACF;IAEA,MAAMU,gBAAgBC,QAAOhB,6BAAAA,IAAIiB,OAAO,CAACF,aAAa,YAAzBf,6BAA6B;IAC1D,MAAMkB,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpCjB;IACJ,IAAI,CAACc,SAAS,OAAOzB,OAAO,KAAK;IAEjC,MAAM6B,UAAU,MAAM5C,cAAc6C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACP;IAC/D,MAAML,QAAQS,OAAO,CAAC,QAAQ,KAAK;IACnC,MAAMI,WAAW,MAAM/C,cAAcsB,MAAM0B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC/D,IAAI,CAACF,UAAU;QACb,OAAOjC,OAAO,KAAK;IACrB;IACA,MAAM,EAAEc,KAAK,EAAEI,GAAG,EAAE,GAAGe;IACvB,MAAMG,aAAa,MAAM9C,qBAAqBuC,QAAQV,GAAG,EAAEL,OAAOqB,KAAK,CACrE,IAAM;IAER,MAAMd,iBAAUe,8BAAAA,WAAYf,MAAM,mBAAI;IACtC,IAAI,CAACD,OAAO;;QACV,MAAMiB,OAAOd,gBAAOF,0BAAAA,OAAQgB,IAAI,oBAAI;QACpC;;;;;KAKC,GACD,MAAMC,aAAaD,SAAS,WAAWA,SAAS,WAAWA,SAAS;QACpE,MAAME,YACJ,CAAClB,0BAAD,AAACA,OAA8CmB,YAAY,MAAK;QAClE,IAAI,CAACnB,UAAU,CAACiB,cAAcC,WAAW;YACvC,OAAOvC,OAAO,KAAK;QACrB;QACA,IAAI,CAAE,MAAMb,uBAAuB2B,OAAOO,QAAQ,gBAAiB;YACjE,OAAOrB,OACL,KACA;QAEJ;IACF;IACA,MAAMiB,QAAQP,WAAWZ,gBAAgBoB,KAAKR,YAAY;IAC1D,IAAIO,OAAO,OAAO;QAAEd,IAAI;QAAOF,QAAQgB,MAAMhB,MAAM;QAAEG,MAAMa,MAAMb,IAAI;IAAC;IACtE,OAAO;QACLD,IAAI;QACJgB,KAAKU,QAAQV,GAAG;QAChBC;QACAN;QACAI,GAAG,EAAGA,cAAAA,MAAO,CAAC;QACdG;QACAT,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,MAAM6B,WAAW,CAACC,QAAgBC,YACvCD,OAAOtB,KAAK,IACZsB,OAAO9B,KAAK,KAAK,SACjB9B,gBAAgB4D,OAAOrB,MAAM,KAC7BtC,aAAa2D,OAAOrB,MAAM,EAAEsB,WAAkC;AAEhE;;;;;CAKC,GACD,eAAeC,mBACb9B,KAAa,EACb+B,KAAuF;IAEvF,IAAI;QACF,MAAMxD,uBACJJ,cAAc6C,GAAG,GAAGgB,SAAS,IAC7BhC,OACA+B,MAAME,GAAG,CAAC,CAACC,OAAShE,uBAAuBgE;IAE/C,EAAE,OAAO9C,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,+CAA+CY,OAAOZ;IACtE;AACF;AAEA;;;;;;;;;CASC,GACD,SAASgD,eAAehB,MAAqB,EAAEiB,MAAqB;IAClE,MAAMC,OAAOlB,SAAS,CAAC,CAAC,EAAEA,OAAO,IAAI,CAAC,GAAG;IACzC,IAAIiB,OAAOE,SAAS,EAAE,OAAO,GAAGD,KAAK,UAAU,EAAEE,mBAAmBH,OAAOE,SAAS,GAAG;IACvF,IAAIF,OAAOI,MAAM,EAAE,OAAO,GAAGH,KAAK,OAAO,EAAEE,mBAAmBH,OAAOI,MAAM,GAAG;IAC9E,IAAIJ,OAAOK,SAAS,EAAE,OAAO,GAAGJ,KAAK,WAAW,EAAEE,mBAAmBH,OAAOK,SAAS,GAAG;IACxF,OAAO,GAAGJ,KAAK,MAAM,CAAC;AACxB;AAEA;;;;;;;;;;;;CAYC,GACD,SAASK,aACPN,MAAqB,EACrBO,IAAyB;IAEzB,MAAMC,SAASD,SAAS,WAAWlE,WAAWoE,MAAM,KAAKjD;IACzD,MAAMkD,WAAW,CAACC,QAChBA,QAAQ;YAAEC,SAAS;YAAMD;QAAM,IAAI;YAAEC,SAASL,SAAS;YAAUI,OAAOH;QAAO;IACjF,MAAMK,MAA+B;QACnCC,OAAOd,OAAOc,KAAK;QACnBC,MAAMf,OAAOe,IAAI;QACjBC,UAAUhB,OAAOgB,QAAQ;QACzBC,SAASjB,OAAOiB,OAAO;QACvBC,OAAOlB,OAAOkB,KAAK;IACrB;IACA,KAAK,MAAM,CAACC,KAAKR,MAAM,IAAI;QACzB;YAAC;YAAeX,OAAOoB,WAAW;SAAC;QACnC;YAAC;YAAapB,OAAOE,SAAS;SAAC;QAC/B;YAAC;YAAaF,OAAOK,SAAS;SAAC;QAC/B;YAAC;YAAUL,OAAOI,MAAM;SAAC;KAC1B,CAAW;QACV,MAAMiB,OAAOX,SAASC;QACtB,IAAIU,KAAKT,OAAO,EAAEC,GAAG,CAACM,IAAI,GAAGE,KAAKV,KAAK;IACzC;IACA,OAAOE;AACT;AAEA;;;;;;;;;CASC,GACD,SAASS,eACPtB,MAAqB,EACrBuB,QAAmD;QAInCA,eACGA;IAHnB,MAAMC,WAAWD,WACb;QACEN,OAAO,GAAGM,gBAAAA,SAASE,GAAG,CAAC,sBAAbF,gBAAyD;QACnEG,UAAU,GAAGH,iBAAAA,SAASE,GAAG,CAAC,yBAAbF,iBAA4D;IAC3E,IACA;IACJ,MAAMG,aAAajG,yBAAyB;QAC1CwF,SAASjB,OAAOiB,OAAO;QACvBS,YAAY1B,OAAO0B,UAAU;QAC7BF;IACF;IACA,MAAMX,MAA+B;QAAEa;IAAW;IAClD,IAAIF,YAAYE,eAAeF,SAASE,UAAU,EAAE;QAClDb,GAAG,CAAC,mBAAmB,GAAGxE,WAAWoE,MAAM;IAC7C;IACA,OAAOI;AACT;AAEA,MAAMc,kBAAkB,CAAChE,QACvB7B,cACG6C,GAAG,GACHgB,SAAS,GACTiC,UAAU,CAAC,QACXC,GAAG,CAAClE,OACJiE,UAAU,CAACtG,gBAAgBwG,KAAK;AAIrC;;;CAGC,GACD,SAASC,SAASpE,KAAa;IAC7B,MAAMqE,QAAQ,IAAIC;IAClB,OAAO,CAACjE;QACN,IAAIkE,SAASF,MAAMP,GAAG,CAACzD;QACvB,IAAI,CAACkE,QAAQ;YACXA,SAAS/F,qBAAqB6B,KAAKL,OAChCwE,IAAI,CAAC,CAACC,QAAUC,QAAQD,yBAAAA,MAAOlE,MAAM,GACrCc,KAAK,CAAC,IAAM;YACfgD,MAAMM,GAAG,CAACtE,KAAKkE;QACjB;QACA,OAAOA;IACT;AACF;AAEA,qEAAqE,GACrE,eAAeK,eACbhD,MAAc,EACdS,MAAqB,EACrBwC,gBAA+B,EAC/BzD,MAAqB;IAErB,MAAM0D,WAAWzC,OAAOoB,WAAW;IACnC,MAAMsB,WAAWL,QACfI,YAAYA,aAAalD,OAAOvB,GAAG,IAAIyE,aAAaD;IAEtD,IAAI,CAACE,YAAY,CAACD,UAAU,OAAO;IACnC,MAAME,MACJ,OAAO3C,OAAOiB,OAAO,KAAK,WACtB,CAAC,OAAO,EAAE,IAAI2B,KAAK5C,OAAOiB,OAAO,EAAE4B,cAAc,IAAI,GACrD;IACN,MAAM5G,YAAY;QAACwG;KAAS,EAAE;QAC5BK,MAAM;QACNhC,OAAO;QACP7D,MAAM,GAAG+C,OAAOc,KAAK,GAAG6B,KAAK;QAC7B9C,MAAME,eAAehB,QAAQiB;QAC7BrC,OAAO4B,OAAO5B,KAAK;OACfoB,SAAS;QAAEA;IAAO,IAAI,CAAC;IAE7B,OAAO;AACT;AAEA;;;;;;;;CAQC,GACD,eAAegE,WACbxD,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtBkB,MAAc,EACdhD,MAAqB,EACrBiD,QAA2C;QAUX1B,eAenBA;IAvBb,IAAIvB,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOvE,OAAO,KAAK;IACrB;IACA,MAAM0E,WAAW,MAAMO,MAAMD,GAAG,CAACmB,QAAQvB,GAAG;IAC5C,IAAI,CAACF,SAAS2B,MAAM,EAAE,OAAOrG,OAAO,KAAK;IACzC,IAAI,CAACyC,SAASC,QAAQgC,SAASE,GAAG,CAAC,eAAe;QAChD,OAAO5E,OAAO,KAAK;IACrB;IACA,MAAM2F,mBAAmBpE,QAAOmD,gBAAAA,SAASE,GAAG,CAAC,0BAAbF,gBAA+B,OAAO;IACtE,MAAM4B,gBAAgBtH,uBAAuB0F,SAAS6B,IAAI;IAC1D,MAAMC,SAAS/C,aAAaN,QAAQ;IACpC,MAAM8B,MAAMD,GAAG,CAACmB,QAAQM,MAAM,CAAC,aAC1BD,QACA/B,eAAetB,QAAQuB,WAEvB/F,kBAAkB,aAAK+F,SAAS6B,IAAI,IAAOC;QAC9CE,WAAWlH,WAAWmH,eAAe;;IAEvC,2EAA2E;IAC3E,MAAM/D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACwF;QAAenD;KAAO;IAC9D,MAAMyD,aACJpG,MAAMI,KAAK,KAAK,SACZJ,MAAM0B,MAAM,GACZX,QAAOmD,iBAAAA,SAASE,GAAG,CAAC,qBAAbF,iBAA0B,IAAImC,IAAI,MAAM;IACrD,MAAMhB,WAAW,MAAMH,eAAehD,QAAQS,QAAQwC,kBAAkBiB;IACxE,OAAO;QAAEzG,IAAI;QAAM0F;IAAS;AAC9B;AAEA;;;;;CAKC,GACD,eAAeiB,iBACbpE,MAAc,EACdlC,KAAoB;IAEpB,IAAIA,MAAMI,KAAK,KAAK,QAAQ,OAAO;QAAET,IAAI;QAAM+B,QAAQ1B,MAAM0B,MAAM;IAAC;IACpE,IAAI,CAAC1B,MAAM0B,MAAM,EAAE,OAAO;QAAE/B,IAAI;QAAM+B,QAAQ;IAAK;IACnD,MAAM6E,QAAQ,MAAM7H,cAAcsB,MAAM0B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC5D,IAAI,CAAC4E,SAASA,MAAMjG,KAAK,KAAK4B,OAAO5B,KAAK,EAAE;QAC1C,OAAOd,OAAO,KAAK;IACrB;IACA,OAAO;QAAEG,IAAI;QAAM+B,QAAQ1B,MAAM0B,MAAM;IAAC;AAC1C;AAEA;;;;;;;;;;CAUC,GACD,eAAe8E,WACbtE,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtB9B,MAAqB,EACrBiD,QAA2C;IAE3C,IAAIjD,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOvE,OAAO,KAAK;IACrB;IACA,MAAMiH,QAAQ,MAAMH,iBAAiBpE,QAAQlC;IAC7C,IAAIyG,MAAM9G,EAAE,KAAK,OAAO,OAAO8G;IAC/B,MAAM,EAAE/E,MAAM,EAAE,GAAG+E;IACnB,MAAMtE,YAAYT,SACdxD,eAAegE,OAAOxB,GAAG,EAAE1C,oBAAoBkE,OAAOxB,GAAG,EAAEgB,WAC3D;WAAIvC;KAAmB;IAC3B,IAAI,CAAC8C,SAASC,QAAQC,YAAY;QAChC,OAAO3C,OAAO,KAAK;IACrB;IACA,MAAMkH,MAAMjC,MAAMD,GAAG;IACrB,MAAMkC,IAAIzB,GAAG,CAAC,aACThC,aAAaN,QAAQ,WACrBsB,eAAetB,QAAQ,OAEvBxE,kBAAkB,aAAK8E,aAAaN,QAAQ;QAAWR;;QAC1D1C,QAAQ;QACRkH,eAAe;QACfxE;QACAT;QACAkF,cAAc1E,OAAOvB,GAAG;QACxBkG,WAAW7H,WAAWmH,eAAe;QACrCD,WAAWlH,WAAWmH,eAAe;;IAEvC,MAAM/D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACqC;KAAO;IAC/C,MAAM0C,WAAW,MAAMH,eAAehD,QAAQS,QAAQ,MAAMjB;IAC5D,OAAO;QAAE/B,IAAI;QAAMgG,QAAQe,IAAII,EAAE;QAAEzB;IAAS;AAC9C;AAEA;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAM0B,qBAAuC,OAAOhH,KAAKiH;;QAW5CjH,WAIIA,YACSA;IAf/B,IAAIA,IAAIkH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAI,CAACI,OAAO;QACVgH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAiB;QAC/C;IACF;IACA,IAAI0H,MAAMC,OAAO,EAACtH,YAAAA,IAAIH,IAAI,qBAARG,UAAU0E,KAAK,GAAG;QAClC,MAAM6C,UAAUvH,KAAKiH,KAAKhH;QAC1B;IACF;IACA,MAAM2F,SAAS5E,gBAAOhB,aAAAA,IAAIH,IAAI,qBAARG,WAAU4F,MAAM,mBAAI,IAAIU,IAAI;IAClD,MAAMkB,OAAOrI,mBAAkBa,aAAAA,IAAIH,IAAI,qBAARG,WAAUyH,IAAI;IAC7C,IAAID,KAAK5H,EAAE,KAAK,OAAO;QACrBqH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO6H,KAAK7H,KAAK;QAAC;QACzC;IACF;IACA,MAAMiD,SAAS4E,KAAK5E,MAAM;IAE1B,IAAI;QACF,MAAMT,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBqH,IAAIvH,MAAM,CAACyC,OAAOzC,MAAM,EAAE0H,IAAI,CAACjF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMsF,WAAWlB,SAASxC,OAAO5B,KAAK;QACtC,IAAIV;QACJ,IAAI+F,QAAQ;YACV,MAAM8B,QAAQ,MAAM/B,WAAWxD,QAAQlC,OAAOyE,OAAOkB,QAAQhD,QAAQiD;YACrE,IAAI6B,MAAM9H,EAAE,KAAK,OAAO;gBACtBqH,IAAIvH,MAAM,CAACgI,MAAMhI,MAAM,EAAE0H,IAAI,CAACM,MAAM7H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMgG;gBAAQN,UAAUoC,MAAMpC,QAAQ;YAAC;QACtD,OAAO;YACL,MAAMoC,QAAQ,MAAMjB,WAAWtE,QAAQlC,OAAOyE,OAAO9B,QAAQiD;YAC7D,IAAI6B,MAAM9H,EAAE,KAAK,OAAO;gBACtBqH,IAAIvH,MAAM,CAACgI,MAAMhI,MAAM,EAAE0H,IAAI,CAACM,MAAM7H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMgG,QAAQ8B,MAAM9B,MAAM;gBAAEN,UAAUoC,MAAMpC,QAAQ;YAAC;QACpE;QACA2B,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAACvH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,0BAA0BA;QACxCsH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAA+B;IAC/D;AACF,EAAC;AAED;;;;CAIC,GACD,eAAe4H,UACbvH,GAAqB,EACrBiH,GAAsB,EACtBhH,KAAoB;QAQHD;IANjB,IAAIC,MAAMI,KAAK,KAAK,OAAO;QACzB4G,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YACnBzH,OAAO;QACT;QACA;IACF;IACA,MAAMgI,UAAU,EAAC3H,YAAAA,IAAIH,IAAI,qBAARG,UAAU0E,KAAK,EAAetD,KAAK,CAAC,GAAGlC,qBAAqB;IAC7E,IAAI,CAACyI,QAAQtG,MAAM,IAAIsG,QAAQtG,MAAM,GAAGnC,oBAAoB;QAC1D+H,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YACnBzH,OAAO,CAAC,mBAAmB,EAAET,mBAAmB,iBAAiB,CAAC;QACpE;QACA;IACF;IACA,MAAM0I,SAA2D,EAAE;IACnE,KAAK,MAAMC,SAASF,QAAS;YAELG;QADtB,MAAMA,MAAOD,gBAAAA,QAAS,CAAC;QACvB,MAAMjC,SAAS5E,QAAO8G,cAAAA,GAAG,CAAC,SAAS,YAAbA,cAAiB,IAAIxB,IAAI;QAC/C,MAAMkB,OAAOrI,kBAAkB2I,GAAG,CAAC,OAAO;QAC1C,IAAI,CAAClC,UAAU4B,KAAK5H,EAAE,KAAK,OAAO;YAChCqH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;gBACnBzH,OAAO6H,KAAK5H,EAAE,KAAK,QAAQ4H,KAAK7H,KAAK,GAAG;YAC1C;YACA;QACF;QACAiI,OAAOG,IAAI,CAAC;YAAEnC;YAAQhD,QAAQ4E,KAAK5E,MAAM;QAAC;IAC5C;IAEA,IAAI;QACF,MAAMT,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBqH,IAAIvH,MAAM,CAACyC,OAAOzC,MAAM,EAAE0H,IAAI,CAACjF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMsF,WAAWlB,SAASxC,OAAO5B,KAAK;QACtC,MAAMyH,UAAgC,EAAE;QACxC,KAAK,MAAM,EAAEpC,MAAM,EAAEhD,MAAM,EAAE,IAAIgF,OAAQ;YACvC,MAAMF,QAAQ,MAAM/B,WAAWxD,QAAQlC,OAAOyE,OAAOkB,QAAQhD,QAAQiD;YACrEmC,QAAQD,IAAI,CACVL,MAAM9H,EAAE,KAAK,QACT;gBAAEgG;gBAAQhG,IAAI;gBAAOD,OAAO+H,MAAM7H,IAAI,CAACF,KAAK;YAAC,IAC7C;gBAAEiG;gBAAQhG,IAAI;gBAAM0F,UAAUoC,MAAMpC,QAAQ;YAAC;QAErD;QACA,MAAMzF,OAA6B;YAAED,IAAI;YAAMoI;QAAQ;QACvDf,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAACvH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,gCAAgCA;QAC9CsH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAgC;IAChE;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,eAAesI,aACb9F,MAAc,EACdlC,KAAoB,EACpByE,KAAsB,EACtBkB,MAAc;QAiCmC6B;IA/BjD,MAAMd,MAAMjC,MAAMD,GAAG,CAACmB;IACtB,MAAMsC,WAAW,MAAMvB,IAAItC,GAAG;IAC9B,IAAI,CAAC6D,SAASpC,MAAM,EAAE;QACpB,OAAO;YAAEF;YAAQhG,IAAI;YAAOD,OAAO;QAA8B;IACnE;IACA,MAAM8H,OAAOS,SAASlC,IAAI;IAC1B,IAAI,CAAC9D,SAASC,QAAQsF,KAAKrF,SAAS,GAAG;QACrC,OAAO;YAAEwD;YAAQhG,IAAI;YAAOD,OAAO;QAAmC;IACxE;IACA,IAAI8H,KAAK/H,MAAM,KAAK,QAAQ;YAIF+H;QAHxB,OAAO;YACL7B;YACAhG,IAAI;YACJgH,eAAeuB,QAAOV,sBAAAA,KAAKb,aAAa,YAAlBa,sBAAsB;YAC5CW,aAAa;QACf;IACF;IAEA,MAAMxB,gBAAgBpB,KAAK6C,GAAG;IAC9B,MAAM1B,IAAIT,MAAM,CAAC;QACfxG,QAAQ;QACRkH;QACA0B,gBAAgBnG,OAAOvB,GAAG;OAGtBtC,uBAAuBmJ,QAAQ;QAAEnD,YAAY;IAAK,IAAI,CAAC;QAC3D6B,WAAWlH,WAAWmH,eAAe;;IAEvC,MAAM/D,mBAAmBF,OAAO5B,KAAK,EAAE;QAACkH;KAAgC;IAExE,MAAMc,cACJtI,MAAMI,KAAK,KAAK,SAASJ,MAAM0B,MAAM,GAAGX,QAAOyG,eAAAA,KAAK9F,MAAM,YAAX8F,eAAe,IAAInB,IAAI;IACxE,IAAIiC,aAAa;YASCd,aACDA,YACIA,gBAIGA,mBACCA,oBACHA,iBACAA,iBACHA,cACIA;QAnBrB;;;;;KAKC,GACD,MAAMzI,cAAcuJ,aAAa,iBAAiB;YAChD3C;YACAlC,OAAO1C,QAAOyG,cAAAA,KAAK/D,KAAK,YAAV+D,cAAc;YAC5B9D,MAAM3C,QAAOyG,aAAAA,KAAK9D,IAAI,YAAT8D,aAAa;YAC1B7D,UAAU5C,QAAOyG,iBAAAA,KAAK7D,QAAQ,YAAb6D,iBAAiB;YAClC5D,SAAS,OAAO4D,KAAK5D,OAAO,KAAK,WAAW4D,KAAK5D,OAAO,GAAG;YAC3D+C;YACA0B,gBAAgBnG,OAAOvB,GAAG;YAC1BoD,aAAahD,QAAOyG,oBAAAA,KAAKzD,WAAW,YAAhByD,oBAAoB;YACxCZ,cAAc7F,QAAOyG,qBAAAA,KAAKZ,YAAY,YAAjBY,qBAAqB;YAC1C3E,WAAW9B,QAAOyG,kBAAAA,KAAK3E,SAAS,YAAd2E,kBAAkB;YACpCxE,WAAWjC,QAAOyG,kBAAAA,KAAKxE,SAAS,YAAdwE,kBAAkB;YACpCzE,QAAQhC,QAAOyG,eAAAA,KAAKzE,MAAM,YAAXyE,eAAe;YAC9Be,YAAYxH,QAAOyG,gBAAAA,KAAK9F,MAAM,YAAX8F,gBAAe;QACpC;IACF;IACA,OAAO;QAAE7B;QAAQhG,IAAI;QAAMgH;IAAc;AAC3C;AAEA,qEAAqE,GACrE,MAAM6B,iBAAiB,CAACC,UACtBA,QAAQ/I,KAAK,KAAK,gCAAgC,MAAM;AAE1D;;;;;;CAMC,GACD,OAAO,MAAMgJ,yBAA2C,OAAO3I,KAAKiH;;QAOhDjH,WAIIA;IAVtB,IAAIA,IAAIkH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAIwH,MAAMC,OAAO,EAACtH,YAAAA,IAAIH,IAAI,qBAARG,UAAU4I,OAAO,GAAG;QACpC,MAAMC,cAAc7I,KAAKiH,KAAKhH;QAC9B;IACF;IACA,MAAM2F,SAAS5E,gBAAOhB,aAAAA,IAAIH,IAAI,qBAARG,WAAU4F,MAAM,mBAAI,IAAIU,IAAI;IAClD,IAAI,CAACrG,SAAS,CAAC2F,QAAQ;QACrBqB,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAA2B;QACzD;IACF;IAEA,IAAI;QACF,MAAMwC,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBqH,IAAIvH,MAAM,CAACyC,OAAOzC,MAAM,EAAE0H,IAAI,CAACjF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6I,UAAU,MAAMT,aAAa9F,QAAQlC,OAAOsE,gBAAgBpC,OAAO5B,KAAK,GAAGqF;QACjF,IAAI8C,QAAQ9I,EAAE,KAAK,OAAO;YACxBqH,IAAIvH,MAAM,CAAC+I,eAAeC,UAAUtB,IAAI,CAAC;gBAAEzH,OAAO+I,QAAQ/I,KAAK;YAAC;YAChE;QACF;QACA,MAAME,OAAgC;YACpCD,IAAI;YACJgH,eAAe8B,QAAQ9B,aAAa;WAChC8B,QAAQN,WAAW,GAAG;YAAEA,aAAa;QAAK,IAAI,CAAC;QAErDnB,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAACvH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,8BAA8BA;QAC5CsH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAmC;IACnE;AACF,EAAC;AAED;;;;;CAKC,GACD,eAAekJ,cACb7I,GAAqB,EACrBiH,GAAsB,EACtBhH,KAA2B;QAUtBD;IARL,IAAI,CAACC,SAASA,MAAMI,KAAK,KAAK,OAAO;QACnC4G,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YACnBzH,OAAO;QACT;QACA;IACF;IACA,MAAMiJ,UAAU;WACX,IAAIE,IACL,EAAC9I,YAAAA,IAAIH,IAAI,qBAARG,UAAU4I,OAAO,EAAepG,GAAG,CAAC,CAACuE,KAAO/F,OAAO+F,aAAAA,KAAM,IAAIT,IAAI,IAAIyC,MAAM,CAAC9D;KAEhF;IACD,IAAI,CAAC2D,QAAQvH,MAAM,IAAIuH,QAAQvH,MAAM,GAAGnC,oBAAoB;QAC1D+H,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YACnBzH,OAAO,CAAC,uBAAuB,EAAET,mBAAmB,iBAAiB,CAAC;QACxE;QACA;IACF;IAEA,IAAI;QACF,MAAMiD,SAAS,MAAMpC,mBAAmBC,KAAKC;QAC7C,IAAIkC,OAAOvC,EAAE,KAAK,OAAO;YACvBqH,IAAIvH,MAAM,CAACyC,OAAOzC,MAAM,EAAE0H,IAAI,CAACjF,OAAOtC,IAAI;YAC1C;QACF;QACA,MAAM6E,QAAQH,gBAAgBpC,OAAO5B,KAAK;QAC1C,MAAMyH,UAAoC,EAAE;QAC5C,KAAK,MAAMpC,UAAUgD,QAAS;YAC5BZ,QAAQD,IAAI,CAAC,MAAME,aAAa9F,QAAQlC,OAAOyE,OAAOkB;QACxD;QACA,MAAM/F,OAAiC;YAAED,IAAI;YAAMoI;QAAQ;QAC3Df,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAACvH;IACvB,EAAE,OAAOF,OAAO;QACd+C,QAAQ/C,KAAK,CAAC,oCAAoCA;QAClDsH,IAAIvH,MAAM,CAAC,KAAK0H,IAAI,CAAC;YAAEzH,OAAO;QAAoC;IACpE;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/task-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type AglynOrgMember,\n  consentGroupForHost,\n  CRM_COLLECTIONS,\n  type CrmTask,\n  crmScopeTokens,\n  crmTaskListFields,\n  crmTaskReminderAfterEdit,\n  crmTaskReminderPending,\n  isOrgWideMember,\n  memberCanSee,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  type PluginApiResponse,\n} from '@aglyn/aglyn/server'\nimport {\n  crmNextActivityLinksOf,\n  firebaseAdmin,\n  getOrgForHost,\n  memberHasOrgPermission,\n  notifyUsers,\n  recomputeCrmNextTaskAt,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CRM_TASK_BATCH_MAX,\n  type CrmTaskCompleteOutcome,\n  type CrmTaskCompleteResponse,\n  type CrmTaskFields,\n  type CrmTaskSaveOutcome,\n  type CrmTaskSaveResponse,\n  type CrmTasksCompleteResponse,\n  type CrmTasksSaveResponse,\n  readCrmTaskFields,\n} from '../model/task-routes'\nimport { CRM_ORG_TASK_SCOPE } from '../model/task-scope'\nimport {\n  authorizeOrgCaller,\n  type CrmRouteScope,\n  readCrmRouteScope,\n} from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/**\n * The two things a task does that a browser must not do alone (AGL-2599).\n *\n * Every other task write is client-direct against the Firestore rules —\n * reopening, deleting, the list's own reads. These two are routes because\n * each has a side effect that lives outside the document:\n *\n * - SAVING a task assigned to somebody else NOTIFIES them, and a\n *   notification is an Admin-SDK write into another person's inbox. Rather\n *   than a client-direct write followed by a \"please notify\" call — two\n *   operations that can disagree about whether the task exists — the route\n *   persists the task itself and notifies from the same code path, so a\n *   notification can never announce a task that failed to save. It also\n *   stamps the scope, the provenance and the timestamps, which is one\n *   creator computing `visibleTo` rather than two.\n *\n * - COMPLETING a task EMITS the `taskCompleted` host event, which is what a\n *   workflow triggers on. A browser cannot run the workflow runner.\n *\n * Both authenticate the way the other console plugin routes do — the ID\n * token in the `Authorization` header — and then ask the same two questions\n * the rules ask of a `crmTasks` write: is this member allowed to write org\n * data (`owner`/`admin`/`editor`, and `data.manage` resolved through their\n * custom role), and can they reach THIS document's scope.\n *\n * ## The organization variant (AGL-2637)\n *\n * `{ orgId, … }` instead of a site: the org-level hub. The caller is\n * authorized by the ORG — an org-wide member holding `data.manage`, the\n * hub's own gate, never a site collaborator — and reaches every task the\n * org holds, so no scope check is made against the document. A NEW task\n * names the site it is filed from beside the org, or names none and is the\n * organization's own: `hostId: null`, the org scope token alone. Completing\n * emits on the task's OWN site, where its automations live; an\n * organization task has none and emits nothing, as an uncaptured deal's\n * stage change emits nothing.\n *\n * The org variant also takes a BATCH — `taskIds` to complete, `tasks` to\n * save — so the org hub's bulk bar makes one request per action rather\n * than one per task. Each task is answered on its own in `results`; the\n * request as a whole is refused only for what refuses every task alike.\n */\n\nexport type Refusal = {\n  ok: false\n  status: number\n  body: { error: string; reason?: string; code?: string }\n}\n\n/** What the suite gate names when a task route refuses a plan without it. */\nconst TASKS_ACT = \"Working a record's tasks\"\n\nexport interface Writer {\n  ok: true\n  uid: string\n  /** The caller's address, for who set off the runs a write causes (AGL-3376). */\n  email: string | null\n  staff: boolean\n  orgId: string\n  org: Record<string, unknown>\n  /** The member document under a site; `null` at the org level, where the reach is the org's. */\n  member: Partial<AglynOrgMember> | null\n  level: CrmRouteScope['level']\n}\n\nexport const refuse = (status: number, error: string): Refusal => ({\n  ok: false,\n  status,\n  body: { error },\n})\n\nconst ORG_REFUSAL =\n  'Editing tasks at the organization level requires the \"Manage data\" ' +\n  'permission across the whole workspace.'\n\nexport interface CrmWriterOptions {\n  /**\n   * The act a plan without the CRM is refused for, named the way\n   * `crmSuiteRefusalMessage` takes it. `null` for a route that asks the plan\n   * itself, once it knows what the request writes, so the refusal can name\n   * that act — a contact update names the first field it carries. Tasks\n   * when unsaid.\n   */\n  suiteAct?: string | null\n}\n\n/**\n * Who is asking, and whether they may write this CRM at all.\n *\n * Under a site: the org resolved from the site and the rules' own role and\n * permission questions. At the organization level: the org the body names,\n * for an org-wide member with the permission. The scope question — may they\n * reach THIS task — is asked by the caller against the document, because on\n * a create the document does not exist yet and its scope is what the route\n * is about to stamp.\n */\nexport async function authorizeCrmWriter(\n  req: PluginApiRequest,\n  scope: CrmRouteScope,\n  options: CrmWriterOptions = {},\n): Promise<Writer | Refusal> {\n  const suiteAct = options.suiteAct === undefined ? TASKS_ACT : options.suiteAct\n  if (scope.level === 'org') {\n    const caller = await authorizeOrgCaller(req, scope.orgId, {\n      needs: 'data.manage',\n      refusal: ORG_REFUSAL,\n    })\n    if (caller.ok === false) return refuse(caller.status, caller.error)\n    // The plan after the person (AGL-2787): see `suite-gate.ts`.\n    const suite = suiteAct ? crmSuiteRefusal(caller.org, suiteAct) : null\n    if (suite) return { ok: false, status: suite.status, body: suite.body }\n    return {\n      ok: true,\n      uid: caller.uid,\n      email: caller.email ?? null,\n      staff: caller.staff,\n      orgId: caller.orgId,\n      org: caller.org as Record<string, unknown>,\n      member: null,\n      level: 'org',\n    }\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return refuse(401, 'Unauthenticated')\n\n  const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  const staff = decoded['staff'] === true\n  const resolved = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!resolved) {\n    return refuse(404, 'This site has no organization, so it has no CRM.')\n  }\n  const { orgId, org } = resolved\n  const membership = await resolveOrgMembership(decoded.uid, orgId).catch(\n    () => null,\n  )\n  const member = (membership?.member ?? null) as Partial<AglynOrgMember> | null\n  if (!staff) {\n    const role = String(member?.role ?? '')\n    /*\n     * The rules' `canWriteOrgData()` restated: the role list is what an\n     * unstamped permission map falls through to, and the permission is the\n     * only half a custom role's revocation can reach. A route that checked\n     * one and not the other would open a door the rules keep shut.\n     */\n    const writerRole = role === 'owner' || role === 'admin' || role === 'editor'\n    const suspended =\n      (member as { orgSuspended?: boolean } | null)?.orgSuspended === true\n    if (!member || !writerRole || suspended) {\n      return refuse(403, 'Your organization role does not allow editing the CRM.')\n    }\n    if (!(await memberHasOrgPermission(orgId, member, 'data.manage'))) {\n      return refuse(\n        403,\n        'Your organization role does not allow editing the CRM.',\n      )\n    }\n  }\n  const suite = suiteAct ? crmSuiteRefusal(org, suiteAct) : null\n  if (suite) return { ok: false, status: suite.status, body: suite.body }\n  return {\n    ok: true,\n    uid: decoded.uid,\n    email: typeof decoded.email === 'string' ? decoded.email : null,\n    staff,\n    orgId,\n    org: (org ?? {}) as Record<string, unknown>,\n    member,\n    level: 'site',\n  }\n}\n\n/**\n * The rules' `canReadScoped()`, for a document the route has in hand. An\n * org-level writer was admitted as org-wide, and an org-wide member reads\n * every row.\n */\nexport const canReach = (writer: Writer, visibleTo: unknown): boolean =>\n  writer.staff ||\n  writer.level === 'org' ||\n  isOrgWideMember(writer.member) ||\n  memberCanSee(writer.member, visibleTo as string[] | undefined)\n\n/**\n * The records the task names carry `nextTaskAtMs` (AGL-2661), recomputed\n * after every write here. Its own catch: the task IS saved by now, and a\n * denormalized figure that could not move is logged and left for the\n * Fields section's recompute, not reported as a task that failed to save.\n */\nasync function settleNextActivity(\n  orgId: string,\n  links: readonly (Partial<CrmTaskFields> | Record<string, unknown> | null | undefined)[],\n): Promise<void> {\n  try {\n    await recomputeCrmNextTaskAt(\n      firebaseAdmin.app().firestore(),\n      orgId,\n      links.map((link) => crmNextActivityLinksOf(link as Record<string, unknown>)),\n    )\n  } catch (error) {\n    console.error('[crm] next activity could not be recomputed', orgId, error)\n  }\n}\n\n/**\n * The console path the assignee's notification opens: the record the task\n * is for, in the hub, or the tasks list when it is for nobody in particular.\n *\n * In the `/{hostDocId}/rest` shape every host notification uses — the\n * console rewrites it to `/{orgSlug}/hosts/{subdomain}/rest` when the link\n * is followed, which is why `hostId` and `orgId` travel on the document. An\n * organization task has no site to open under, so its link is the `/org`\n * shape the console rewrites onto the organization's own hub.\n */\nfunction assignmentLink(hostId: string | null, fields: CrmTaskFields): string {\n  const base = hostId ? `/${hostId}/crm` : '/org/crm'\n  if (fields.contactId) return `${base}/contacts/${encodeURIComponent(fields.contactId)}`\n  if (fields.dealId) return `${base}/deals/${encodeURIComponent(fields.dealId)}`\n  if (fields.companyId) return `${base}/companies/${encodeURIComponent(fields.companyId)}`\n  return `${base}/tasks`\n}\n\n/**\n * The editable fields as a Firestore write.\n *\n * The optional ids and the assignee are ABSENT on the document when unset,\n * never `null` — the record cards query `where('contactId', '==', id)` and\n * the \"My tasks\" view `where('assigneeUid', '==', uid)`, and neither is\n * helped by a null. So a create leaves an unset optional out, and an update\n * DELETES it: an assignee cleared in the drawer has to come off the\n * document, and an update that merely omitted the key would keep them.\n * `dueAtMs` is the one field written as `null` when unset, because every\n * view orders by it and a document missing the field drops out of an\n * `orderBy` entirely.\n */\nfunction storedFields(\n  fields: CrmTaskFields,\n  mode: 'create' | 'update',\n): Record<string, unknown> {\n  const absent = mode === 'update' ? FieldValue.delete() : undefined\n  const optional = (value: string | null) =>\n    value ? { present: true, value } : { present: mode === 'update', value: absent }\n  const out: Record<string, unknown> = {\n    title: fields.title,\n    kind: fields.kind,\n    priority: fields.priority,\n    dueAtMs: fields.dueAtMs,\n    notes: fields.notes,\n  }\n  for (const [key, value] of [\n    ['assigneeUid', fields.assigneeUid],\n    ['contactId', fields.contactId],\n    ['companyId', fields.companyId],\n    ['dealId', fields.dealId],\n  ] as const) {\n    const slot = optional(value)\n    if (slot.present) out[key] = slot.value\n  }\n  return out\n}\n\n/**\n * The reminder a save leaves (AGL-2659), as a Firestore write.\n *\n * `crmTaskReminderAfterEdit` decides which reminder the task ends up with;\n * this turns the decision into fields. Written as `null` when unset, like\n * `dueAtMs`, so the document says the reminder was decided. A reminder that\n * MOVED — to a new time, or to none — is a reminder not yet sent, so the\n * runner's mark comes off with it; one that stayed keeps its mark, which is\n * what stops a title correction from re-sending last week's reminder.\n */\nfunction reminderFields(\n  fields: CrmTaskFields,\n  existing: FirebaseFirestore.DocumentSnapshot | null,\n): Record<string, unknown> {\n  const previous = existing\n    ? {\n        dueAtMs: (existing.get('dueAtMs') as number | null | undefined) ?? null,\n        remindAtMs: (existing.get('remindAtMs') as number | null | undefined) ?? null,\n      }\n    : null\n  const remindAtMs = crmTaskReminderAfterEdit({\n    dueAtMs: fields.dueAtMs,\n    remindAtMs: fields.remindAtMs,\n    previous,\n  })\n  const out: Record<string, unknown> = { remindAtMs }\n  if (previous && remindAtMs !== previous.remindAtMs) {\n    out['reminderSentAtMs'] = FieldValue.delete()\n  }\n  return out\n}\n\nconst tasksCollection = (orgId: string) =>\n  firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.tasks)\n\ntype TasksCollection = ReturnType<typeof tasksCollection>\n\n/**\n * Whether a uid names a member of the org, answered once per uid across a\n * batch: a bar reassigning forty tasks to one person asks the roster once.\n */\nfunction rosterOf(orgId: string) {\n  const known = new Map<string, Promise<boolean>>()\n  return (uid: string): Promise<boolean> => {\n    let answer = known.get(uid)\n    if (!answer) {\n      answer = resolveOrgMembership(uid, orgId)\n        .then((found) => Boolean(found?.member))\n        .catch(() => false)\n      known.set(uid, answer)\n    }\n    return answer\n  }\n}\n\n/** Tell the assignee, when they are somebody new and somebody else. */\nasync function notifyAssignee(\n  writer: Writer,\n  fields: CrmTaskFields,\n  previousAssignee: string | null,\n  hostId: string | null,\n): Promise<boolean> {\n  const assignee = fields.assigneeUid\n  const notified = Boolean(\n    assignee && assignee !== writer.uid && assignee !== previousAssignee,\n  )\n  if (!notified || !assignee) return false\n  const due =\n    typeof fields.dueAtMs === 'number'\n      ? ` · due ${new Date(fields.dueAtMs).toLocaleString()}`\n      : ''\n  await notifyUsers([assignee], {\n    type: 'content.taskAssigned',\n    title: 'Task assigned to you',\n    body: `${fields.title}${due}`,\n    link: assignmentLink(hostId, fields),\n    orgId: writer.orgId,\n    ...(hostId ? { hostId } : {}),\n  })\n  return true\n}\n\n/**\n * Rewrite one existing task's editable fields, and tell a new assignee.\n *\n * `visibleTo` is not touched: the rules let only an org-wide member move a\n * record's scope, and this route is not the place that does it. `hostId`\n * and `createdByUid` are provenance and never rewritten. The notification\n * opens under the site the caller is on, or — at the organization level —\n * under the task's own site, and under the org hub for a task with none.\n */\nasync function updateTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const existing = await tasks.doc(taskId).get()\n  if (!existing.exists) return refuse(404, 'That task no longer exists.')\n  if (!canReach(writer, existing.get('visibleTo'))) {\n    return refuse(403, 'That task is not visible to you.')\n  }\n  const previousAssignee = String(existing.get('assigneeUid') ?? '') || null\n  const previousLinks = crmNextActivityLinksOf(existing.data() as Record<string, unknown>)\n  const stored = storedFields(fields, 'update')\n  await tasks.doc(taskId).update({\n    ...stored,\n    ...reminderFields(fields, existing),\n    // The title is what the Tasks list searches (AGL-3321).\n    ...crmTaskListFields({ ...existing.data(), ...stored }),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  // Both sides: a task moved off one deal onto another leaves neither stale.\n  await settleNextActivity(writer.orgId, [previousLinks, fields])\n  const linkHostId =\n    scope.level === 'site'\n      ? scope.hostId\n      : String(existing.get('hostId') ?? '').trim() || null\n  const notified = await notifyAssignee(writer, fields, previousAssignee, linkHostId)\n  return { ok: true, notified }\n}\n\n/**\n * Where a NEW task is filed from: the mounted site, or at the organization\n * level the site the body names — which has to be one of THIS org's, or an\n * org-wide member of one org could stamp a task with another org's site\n * token — or no site at all, the organization's own.\n */\nasync function resolveFiledFrom(\n  writer: Writer,\n  scope: CrmRouteScope,\n): Promise<{ ok: true; hostId: string | null } | Refusal> {\n  if (scope.level === 'site') return { ok: true, hostId: scope.hostId }\n  if (!scope.hostId) return { ok: true, hostId: null }\n  const owner = await getOrgForHost(scope.hostId).catch(() => null)\n  if (!owner || owner.orgId !== writer.orgId) {\n    return refuse(400, 'That site is not one of this organization’s.')\n  }\n  return { ok: true, hostId: scope.hostId }\n}\n\n/**\n * Create one task, stamped with its scope and provenance.\n *\n * The scope every CRM creator stamps for a task filed from a site: the\n * whole org when the org has chosen that, and otherwise the sites this\n * site presents as one sender with — which, undeclared, is this site\n * alone. A scoped member creating a record they could not then see is\n * refused, which is the rules' `canCreateScoped()` said before the write\n * instead of after. An organization task — no site — carries\n * `CRM_ORG_TASK_SCOPE` and `hostId: null`.\n */\nasync function createTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  fields: CrmTaskFields,\n  onRoster: (uid: string) => Promise<boolean>,\n): Promise<{ ok: true; taskId: string; notified: boolean } | Refusal> {\n  if (fields.assigneeUid && !(await onRoster(fields.assigneeUid))) {\n    return refuse(400, 'The assignee is not a member of this organization.')\n  }\n  const filed = await resolveFiledFrom(writer, scope)\n  if (filed.ok === false) return filed\n  const { hostId } = filed\n  const visibleTo = hostId\n    ? crmScopeTokens(writer.org, consentGroupForHost(writer.org, hostId))\n    : [...CRM_ORG_TASK_SCOPE]\n  if (!canReach(writer, visibleTo)) {\n    return refuse(403, 'Your access to this organization does not reach this site.')\n  }\n  const ref = tasks.doc()\n  await ref.set({\n    ...storedFields(fields, 'create'),\n    ...reminderFields(fields, null),\n    // What the Tasks list searches (AGL-3321).\n    ...crmTaskListFields({ ...storedFields(fields, 'create'), visibleTo }),\n    status: 'open',\n    completedAtMs: null,\n    visibleTo,\n    hostId,\n    createdByUid: writer.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [fields])\n  const notified = await notifyAssignee(writer, fields, null, hostId)\n  return { ok: true, taskId: ref.id, notified }\n}\n\n/**\n * `POST crm/task-save` — create or update a task, and tell its assignee.\n *\n * Body: `{ hostId, taskId?, task: CrmTaskFields }` under a site;\n * `{ orgId, hostId?, taskId?, task }` at the organization level; or the\n * org-level batch `{ orgId, tasks: [{ taskId, task }] }`. Answers\n * `{ ok, taskId, notified }`, or `{ ok, results }` for the batch.\n *\n * The NOTIFICATION fires when the saved assignee is somebody other than the\n * person saving AND is not who the task was already assigned to. Assigning\n * a task to yourself is a note to self; re-saving a task's title does not\n * re-announce it to the person who already has it. The assignee must be a\n * member of the org — a uid nobody can find in the roster is refused rather\n * than written, because a notification to a stranger's inbox is the one\n * thing this route must never do.\n */\nexport const crmTaskSaveHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  if (Array.isArray(req.body?.tasks)) {\n    await saveBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  const read = readCrmTaskFields(req.body?.task)\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const fields = read.fields\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    let body: CrmTaskSaveResponse\n    if (taskId) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId, notified: saved.notified }\n    } else {\n      const saved = await createTask(writer, scope, tasks, fields, onRoster)\n      if (saved.ok === false) {\n        res.status(saved.status).json(saved.body)\n        return\n      }\n      body = { ok: true, taskId: saved.taskId, notified: saved.notified }\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save failed', error)\n    res.status(500).json({ error: 'The task could not be saved.' })\n  }\n}\n\n/**\n * The batch: every entry read before any is written, so a body with one\n * unreadable entry is refused whole rather than half-applied; then each\n * task in order, each answered on its own.\n */\nasync function saveBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope,\n): Promise<void> {\n  if (scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is saved at the organization level only.',\n    })\n    return\n  }\n  const entries = (req.body?.tasks as unknown[]).slice(0, CRM_TASK_BATCH_MAX + 1)\n  if (!entries.length || entries.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Save between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n  const parsed: Array<{ taskId: string; fields: CrmTaskFields }> = []\n  for (const entry of entries) {\n    const raw = (entry ?? {}) as Record<string, unknown>\n    const taskId = String(raw['taskId'] ?? '').trim()\n    const read = readCrmTaskFields(raw['task'])\n    if (!taskId || read.ok === false) {\n      res.status(400).json({\n        error: read.ok === false ? read.error : 'Every task in a batch names its taskId.',\n      })\n      return\n    }\n    parsed.push({ taskId, fields: read.fields })\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const onRoster = rosterOf(writer.orgId)\n    const results: CrmTaskSaveOutcome[] = []\n    for (const { taskId, fields } of parsed) {\n      const saved = await updateTask(writer, scope, tasks, taskId, fields, onRoster)\n      results.push(\n        saved.ok === false\n          ? { taskId, ok: false, error: saved.body.error }\n          : { taskId, ok: true, notified: saved.notified },\n      )\n    }\n    const body: CrmTasksSaveResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-save batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be saved.' })\n  }\n}\n\n/**\n * Mark one task done and fire `taskCompleted` on the site whose automations\n * hear it: under a site, the site whose console ticked the box — workflows\n * belong to a site, and the person is on that site's console. At the\n * organization level there is no such console, so the event goes to the\n * task's OWN site, and an organization task, having none, fires nothing.\n * The task's own `hostId` rides in the payload as `taskHostId` either way,\n * for a workflow that cares about the difference.\n *\n * Idempotent on purpose: two people ticking the same box, or one person\n * double-clicking, completes a task once and fires its event once. The\n * second call reads the stored `completedAtMs` back and writes nothing.\n */\nasync function completeTask(\n  writer: Writer,\n  scope: CrmRouteScope,\n  tasks: TasksCollection,\n  taskId: string,\n): Promise<CrmTaskCompleteOutcome> {\n  const ref = tasks.doc(taskId)\n  const snapshot = await ref.get()\n  if (!snapshot.exists) {\n    return { taskId, ok: false, error: 'That task no longer exists.' }\n  }\n  const task = snapshot.data() as Partial<CrmTask>\n  if (!canReach(writer, task.visibleTo)) {\n    return { taskId, ok: false, error: 'That task is not visible to you.' }\n  }\n  if (task.status === 'done') {\n    return {\n      taskId,\n      ok: true,\n      completedAtMs: Number(task.completedAtMs ?? 0),\n      alreadyDone: true,\n    }\n  }\n\n  const completedAtMs = Date.now()\n  await ref.update({\n    status: 'done',\n    completedAtMs,\n    completedByUid: writer.uid,\n    // A reminder still owed on a task that is done is owed to nobody\n    // (AGL-2659); one already sent stays, as a fact about what happened.\n    ...(crmTaskReminderPending(task) ? { remindAtMs: null } : {}),\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  await settleNextActivity(writer.orgId, [task as Record<string, unknown>])\n\n  const eventHostId =\n    scope.level === 'site' ? scope.hostId : String(task.hostId ?? '').trim()\n  if (eventHostId) {\n    /*\n     * The payload is what a workflow filter can read: every field a string,\n     * number or boolean, and every optional one present as an empty string\n     * rather than absent, so `contactId != \"\"` is a filter somebody can\n     * write without knowing whether the key exists.\n     */\n    await emitHostEvent(\n      eventHostId,\n      'taskCompleted',\n      {\n      taskId,\n      title: String(task.title ?? ''),\n      kind: String(task.kind ?? ''),\n      priority: String(task.priority ?? ''),\n      dueAtMs: typeof task.dueAtMs === 'number' ? task.dueAtMs : 0,\n      completedAtMs,\n      completedByUid: writer.uid,\n      assigneeUid: String(task.assigneeUid ?? ''),\n      createdByUid: String(task.createdByUid ?? ''),\n      contactId: String(task.contactId ?? ''),\n      companyId: String(task.companyId ?? ''),\n      dealId: String(task.dealId ?? ''),\n      taskHostId: String(task.hostId ?? ''),\n      },\n      { actor: { kind: 'member', uid: writer.uid, email: writer.email } },\n    )\n  }\n  return { taskId, ok: true, completedAtMs }\n}\n\n/** A per-task outcome as the single-task route has always answered. */\nconst completeStatus = (outcome: Extract<CrmTaskCompleteOutcome, { ok: false }>) =>\n  outcome.error === 'That task no longer exists.' ? 404 : 403\n\n/**\n * `POST crm/task-complete` — mark a task done and fire `taskCompleted`.\n *\n * Body: `{ hostId, taskId }` under a site, `{ orgId, taskId }` at the\n * organization level, or the org-level batch `{ orgId, taskIds }`. Answers\n * `{ ok, completedAtMs, alreadyDone? }`, or `{ ok, results }` for the batch.\n */\nexport const crmTaskCompleteHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const scope = readCrmRouteScope(req.body as Record<string, unknown>)\n  if (Array.isArray(req.body?.taskIds)) {\n    await completeBatch(req, res, scope)\n    return\n  }\n  const taskId = String(req.body?.taskId ?? '').trim()\n  if (!scope || !taskId) {\n    res.status(400).json({ error: 'Missing hostId or taskId' })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const outcome = await completeTask(writer, scope, tasksCollection(writer.orgId), taskId)\n    if (outcome.ok === false) {\n      res.status(completeStatus(outcome)).json({ error: outcome.error })\n      return\n    }\n    const body: CrmTaskCompleteResponse = {\n      ok: true,\n      completedAtMs: outcome.completedAtMs,\n      ...(outcome.alreadyDone ? { alreadyDone: true } : {}),\n    }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete failed', error)\n    res.status(500).json({ error: 'The task could not be completed.' })\n  }\n}\n\n/**\n * The batch: the ids deduplicated and capped, then each task in order —\n * in order rather than at once, because each completion may run a site's\n * workflows, and two hundred runners started together is the burst the\n * per-task client call was written to avoid.\n */\nasync function completeBatch(\n  req: PluginApiRequest,\n  res: PluginApiResponse,\n  scope: CrmRouteScope | null,\n): Promise<void> {\n  if (!scope || scope.level !== 'org') {\n    res.status(400).json({\n      error: 'A batch of tasks is completed at the organization level only.',\n    })\n    return\n  }\n  const taskIds = [\n    ...new Set(\n      (req.body?.taskIds as unknown[]).map((id) => String(id ?? '').trim()).filter(Boolean),\n    ),\n  ]\n  if (!taskIds.length || taskIds.length > CRM_TASK_BATCH_MAX) {\n    res.status(400).json({\n      error: `Complete between 1 and ${CRM_TASK_BATCH_MAX} tasks at a time.`,\n    })\n    return\n  }\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope)\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const tasks = tasksCollection(writer.orgId)\n    const results: CrmTaskCompleteOutcome[] = []\n    for (const taskId of taskIds) {\n      results.push(await completeTask(writer, scope, tasks, taskId))\n    }\n    const body: CrmTasksCompleteResponse = { ok: true, results }\n    res.status(200).json(body)\n  } catch (error) {\n    console.error('[crm] task-complete batch failed', error)\n    res.status(500).json({ error: 'The tasks could not be completed.' })\n  }\n}\n"],"names":["consentGroupForHost","CRM_COLLECTIONS","crmScopeTokens","crmTaskListFields","crmTaskReminderAfterEdit","crmTaskReminderPending","isOrgWideMember","memberCanSee","crmNextActivityLinksOf","firebaseAdmin","getOrgForHost","memberHasOrgPermission","notifyUsers","recomputeCrmNextTaskAt","resolveOrgMembership","emitHostEvent","FieldValue","CRM_TASK_BATCH_MAX","readCrmTaskFields","CRM_ORG_TASK_SCOPE","authorizeOrgCaller","readCrmRouteScope","crmSuiteRefusal","TASKS_ACT","refuse","status","error","ok","body","ORG_REFUSAL","authorizeCrmWriter","req","scope","options","suiteAct","undefined","level","caller","orgId","needs","refusal","suite","org","uid","email","staff","member","authorization","String","headers","idToken","startsWith","slice","length","decoded","app","auth","verifyIdToken","resolved","hostId","catch","membership","role","writerRole","suspended","orgSuspended","canReach","writer","visibleTo","settleNextActivity","links","firestore","map","link","console","assignmentLink","fields","base","contactId","encodeURIComponent","dealId","companyId","storedFields","mode","absent","delete","optional","value","present","out","title","kind","priority","dueAtMs","notes","key","assigneeUid","slot","reminderFields","existing","previous","get","remindAtMs","tasksCollection","collection","doc","tasks","rosterOf","known","Map","answer","then","found","Boolean","set","notifyAssignee","previousAssignee","assignee","notified","due","Date","toLocaleString","type","updateTask","taskId","onRoster","exists","previousLinks","data","stored","update","updatedAt","serverTimestamp","linkHostId","trim","resolveFiledFrom","owner","createTask","filed","ref","completedAtMs","createdByUid","createdAt","id","crmTaskSaveHandler","res","method","setHeader","json","Array","isArray","saveBatch","read","task","saved","entries","parsed","entry","raw","push","results","completeTask","snapshot","Number","alreadyDone","now","completedByUid","eventHostId","taskHostId","actor","completeStatus","outcome","crmTaskCompleteHandler","taskIds","completeBatch","Set","filter"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,mBAAmB,EACnBC,eAAe,EAEfC,cAAc,EACdC,iBAAiB,EACjBC,wBAAwB,EACxBC,sBAAsB,EACtBC,eAAe,EACfC,YAAY,QAIP,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,aAAa,EACbC,aAAa,EACbC,sBAAsB,EACtBC,WAAW,EACXC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,aAAa,QAAQ,wBAAuB;AACrD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,kBAAkB,EAQlBC,iBAAiB,QACZ,0BAAsB;AAC7B,SAASC,kBAAkB,QAAQ,yBAAqB;AACxD,SACEC,kBAAkB,EAElBC,iBAAiB,QACZ,kBAAc;AACrB,SAASC,eAAe,QAAQ,kBAAc;AAmD9C,2EAA2E,GAC3E,MAAMC,YAAY;AAelB,OAAO,MAAMC,SAAS,CAACC,QAAgBC,QAA4B,CAAA;QACjEC,IAAI;QACJF;QACAG,MAAM;YAAEF;QAAM;IAChB,CAAA,EAAE;AAEF,MAAMG,cACJ,wEACA;AAaF;;;;;;;;;CASC,GACD,OAAO,eAAeC,mBACpBC,GAAqB,EACrBC,KAAoB,EACpBC,UAA4B,CAAC,CAAC;QAwBDF;IAtB7B,MAAMG,WAAWD,QAAQC,QAAQ,KAAKC,YAAYZ,YAAYU,QAAQC,QAAQ;IAC9E,IAAIF,MAAMI,KAAK,KAAK,OAAO;YAYhBC;QAXT,MAAMA,SAAS,MAAMjB,mBAAmBW,KAAKC,MAAMM,KAAK,EAAE;YACxDC,OAAO;YACPC,SAASX;QACX;QACA,IAAIQ,OAAOV,EAAE,KAAK,OAAO,OAAOH,OAAOa,OAAOZ,MAAM,EAAEY,OAAOX,KAAK;QAClE,6DAA6D;QAC7D,MAAMe,QAAQP,WAAWZ,gBAAgBe,OAAOK,GAAG,EAAER,YAAY;QACjE,IAAIO,OAAO,OAAO;YAAEd,IAAI;YAAOF,QAAQgB,MAAMhB,MAAM;YAAEG,MAAMa,MAAMb,IAAI;QAAC;QACtE,OAAO;YACLD,IAAI;YACJgB,KAAKN,OAAOM,GAAG;YACfC,KAAK,GAAEP,gBAAAA,OAAOO,KAAK,YAAZP,gBAAgB;YACvBQ,OAAOR,OAAOQ,KAAK;YACnBP,OAAOD,OAAOC,KAAK;YACnBI,KAAKL,OAAOK,GAAG;YACfI,QAAQ;YACRV,OAAO;QACT;IACF;IAEA,MAAMW,gBAAgBC,QAAOjB,6BAAAA,IAAIkB,OAAO,CAACF,aAAa,YAAzBhB,6BAA6B;IAC1D,MAAMmB,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUC,MAAM,IACpClB;IACJ,IAAI,CAACe,SAAS,OAAO1B,OAAO,KAAK;IAEjC,MAAM8B,UAAU,MAAM7C,cAAc8C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACP;IAC/D,MAAML,QAAQS,OAAO,CAAC,QAAQ,KAAK;IACnC,MAAMI,WAAW,MAAMhD,cAAcsB,MAAM2B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC/D,IAAI,CAACF,UAAU;QACb,OAAOlC,OAAO,KAAK;IACrB;IACA,MAAM,EAAEc,KAAK,EAAEI,GAAG,EAAE,GAAGgB;IACvB,MAAMG,aAAa,MAAM/C,qBAAqBwC,QAAQX,GAAG,EAAEL,OAAOsB,KAAK,CACrE,IAAM;IAER,MAAMd,iBAAUe,8BAAAA,WAAYf,MAAM,mBAAI;IACtC,IAAI,CAACD,OAAO;;QACV,MAAMiB,OAAOd,gBAAOF,0BAAAA,OAAQgB,IAAI,oBAAI;QACpC;;;;;KAKC,GACD,MAAMC,aAAaD,SAAS,WAAWA,SAAS,WAAWA,SAAS;QACpE,MAAME,YACJ,CAAClB,0BAAD,AAACA,OAA8CmB,YAAY,MAAK;QAClE,IAAI,CAACnB,UAAU,CAACiB,cAAcC,WAAW;YACvC,OAAOxC,OAAO,KAAK;QACrB;QACA,IAAI,CAAE,MAAMb,uBAAuB2B,OAAOQ,QAAQ,gBAAiB;YACjE,OAAOtB,OACL,KACA;QAEJ;IACF;IACA,MAAMiB,QAAQP,WAAWZ,gBAAgBoB,KAAKR,YAAY;IAC1D,IAAIO,OAAO,OAAO;QAAEd,IAAI;QAAOF,QAAQgB,MAAMhB,MAAM;QAAEG,MAAMa,MAAMb,IAAI;IAAC;IACtE,OAAO;QACLD,IAAI;QACJgB,KAAKW,QAAQX,GAAG;QAChBC,OAAO,OAAOU,QAAQV,KAAK,KAAK,WAAWU,QAAQV,KAAK,GAAG;QAC3DC;QACAP;QACAI,GAAG,EAAGA,cAAAA,MAAO,CAAC;QACdI;QACAV,OAAO;IACT;AACF;AAEA;;;;CAIC,GACD,OAAO,MAAM8B,WAAW,CAACC,QAAgBC,YACvCD,OAAOtB,KAAK,IACZsB,OAAO/B,KAAK,KAAK,SACjB9B,gBAAgB6D,OAAOrB,MAAM,KAC7BvC,aAAa4D,OAAOrB,MAAM,EAAEsB,WAAkC;AAEhE;;;;;CAKC,GACD,eAAeC,mBACb/B,KAAa,EACbgC,KAAuF;IAEvF,IAAI;QACF,MAAMzD,uBACJJ,cAAc8C,GAAG,GAAGgB,SAAS,IAC7BjC,OACAgC,MAAME,GAAG,CAAC,CAACC,OAASjE,uBAAuBiE;IAE/C,EAAE,OAAO/C,OAAO;QACdgD,QAAQhD,KAAK,CAAC,+CAA+CY,OAAOZ;IACtE;AACF;AAEA;;;;;;;;;CASC,GACD,SAASiD,eAAehB,MAAqB,EAAEiB,MAAqB;IAClE,MAAMC,OAAOlB,SAAS,CAAC,CAAC,EAAEA,OAAO,IAAI,CAAC,GAAG;IACzC,IAAIiB,OAAOE,SAAS,EAAE,OAAO,GAAGD,KAAK,UAAU,EAAEE,mBAAmBH,OAAOE,SAAS,GAAG;IACvF,IAAIF,OAAOI,MAAM,EAAE,OAAO,GAAGH,KAAK,OAAO,EAAEE,mBAAmBH,OAAOI,MAAM,GAAG;IAC9E,IAAIJ,OAAOK,SAAS,EAAE,OAAO,GAAGJ,KAAK,WAAW,EAAEE,mBAAmBH,OAAOK,SAAS,GAAG;IACxF,OAAO,GAAGJ,KAAK,MAAM,CAAC;AACxB;AAEA;;;;;;;;;;;;CAYC,GACD,SAASK,aACPN,MAAqB,EACrBO,IAAyB;IAEzB,MAAMC,SAASD,SAAS,WAAWnE,WAAWqE,MAAM,KAAKlD;IACzD,MAAMmD,WAAW,CAACC,QAChBA,QAAQ;YAAEC,SAAS;YAAMD;QAAM,IAAI;YAAEC,SAASL,SAAS;YAAUI,OAAOH;QAAO;IACjF,MAAMK,MAA+B;QACnCC,OAAOd,OAAOc,KAAK;QACnBC,MAAMf,OAAOe,IAAI;QACjBC,UAAUhB,OAAOgB,QAAQ;QACzBC,SAASjB,OAAOiB,OAAO;QACvBC,OAAOlB,OAAOkB,KAAK;IACrB;IACA,KAAK,MAAM,CAACC,KAAKR,MAAM,IAAI;QACzB;YAAC;YAAeX,OAAOoB,WAAW;SAAC;QACnC;YAAC;YAAapB,OAAOE,SAAS;SAAC;QAC/B;YAAC;YAAaF,OAAOK,SAAS;SAAC;QAC/B;YAAC;YAAUL,OAAOI,MAAM;SAAC;KAC1B,CAAW;QACV,MAAMiB,OAAOX,SAASC;QACtB,IAAIU,KAAKT,OAAO,EAAEC,GAAG,CAACM,IAAI,GAAGE,KAAKV,KAAK;IACzC;IACA,OAAOE;AACT;AAEA;;;;;;;;;CASC,GACD,SAASS,eACPtB,MAAqB,EACrBuB,QAAmD;QAInCA,eACGA;IAHnB,MAAMC,WAAWD,WACb;QACEN,OAAO,GAAGM,gBAAAA,SAASE,GAAG,CAAC,sBAAbF,gBAAyD;QACnEG,UAAU,GAAGH,iBAAAA,SAASE,GAAG,CAAC,yBAAbF,iBAA4D;IAC3E,IACA;IACJ,MAAMG,aAAalG,yBAAyB;QAC1CyF,SAASjB,OAAOiB,OAAO;QACvBS,YAAY1B,OAAO0B,UAAU;QAC7BF;IACF;IACA,MAAMX,MAA+B;QAAEa;IAAW;IAClD,IAAIF,YAAYE,eAAeF,SAASE,UAAU,EAAE;QAClDb,GAAG,CAAC,mBAAmB,GAAGzE,WAAWqE,MAAM;IAC7C;IACA,OAAOI;AACT;AAEA,MAAMc,kBAAkB,CAACjE,QACvB7B,cACG8C,GAAG,GACHgB,SAAS,GACTiC,UAAU,CAAC,QACXC,GAAG,CAACnE,OACJkE,UAAU,CAACvG,gBAAgByG,KAAK;AAIrC;;;CAGC,GACD,SAASC,SAASrE,KAAa;IAC7B,MAAMsE,QAAQ,IAAIC;IAClB,OAAO,CAAClE;QACN,IAAImE,SAASF,MAAMP,GAAG,CAAC1D;QACvB,IAAI,CAACmE,QAAQ;YACXA,SAAShG,qBAAqB6B,KAAKL,OAChCyE,IAAI,CAAC,CAACC,QAAUC,QAAQD,yBAAAA,MAAOlE,MAAM,GACrCc,KAAK,CAAC,IAAM;YACfgD,MAAMM,GAAG,CAACvE,KAAKmE;QACjB;QACA,OAAOA;IACT;AACF;AAEA,qEAAqE,GACrE,eAAeK,eACbhD,MAAc,EACdS,MAAqB,EACrBwC,gBAA+B,EAC/BzD,MAAqB;IAErB,MAAM0D,WAAWzC,OAAOoB,WAAW;IACnC,MAAMsB,WAAWL,QACfI,YAAYA,aAAalD,OAAOxB,GAAG,IAAI0E,aAAaD;IAEtD,IAAI,CAACE,YAAY,CAACD,UAAU,OAAO;IACnC,MAAME,MACJ,OAAO3C,OAAOiB,OAAO,KAAK,WACtB,CAAC,OAAO,EAAE,IAAI2B,KAAK5C,OAAOiB,OAAO,EAAE4B,cAAc,IAAI,GACrD;IACN,MAAM7G,YAAY;QAACyG;KAAS,EAAE;QAC5BK,MAAM;QACNhC,OAAO;QACP9D,MAAM,GAAGgD,OAAOc,KAAK,GAAG6B,KAAK;QAC7B9C,MAAME,eAAehB,QAAQiB;QAC7BtC,OAAO6B,OAAO7B,KAAK;OACfqB,SAAS;QAAEA;IAAO,IAAI,CAAC;IAE7B,OAAO;AACT;AAEA;;;;;;;;CAQC,GACD,eAAegE,WACbxD,MAAc,EACdnC,KAAoB,EACpB0E,KAAsB,EACtBkB,MAAc,EACdhD,MAAqB,EACrBiD,QAA2C;QAUX1B,eAenBA;IAvBb,IAAIvB,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOxE,OAAO,KAAK;IACrB;IACA,MAAM2E,WAAW,MAAMO,MAAMD,GAAG,CAACmB,QAAQvB,GAAG;IAC5C,IAAI,CAACF,SAAS2B,MAAM,EAAE,OAAOtG,OAAO,KAAK;IACzC,IAAI,CAAC0C,SAASC,QAAQgC,SAASE,GAAG,CAAC,eAAe;QAChD,OAAO7E,OAAO,KAAK;IACrB;IACA,MAAM4F,mBAAmBpE,QAAOmD,gBAAAA,SAASE,GAAG,CAAC,0BAAbF,gBAA+B,OAAO;IACtE,MAAM4B,gBAAgBvH,uBAAuB2F,SAAS6B,IAAI;IAC1D,MAAMC,SAAS/C,aAAaN,QAAQ;IACpC,MAAM8B,MAAMD,GAAG,CAACmB,QAAQM,MAAM,CAAC,aAC1BD,QACA/B,eAAetB,QAAQuB,WAEvBhG,kBAAkB,aAAKgG,SAAS6B,IAAI,IAAOC;QAC9CE,WAAWnH,WAAWoH,eAAe;;IAEvC,2EAA2E;IAC3E,MAAM/D,mBAAmBF,OAAO7B,KAAK,EAAE;QAACyF;QAAenD;KAAO;IAC9D,MAAMyD,aACJrG,MAAMI,KAAK,KAAK,SACZJ,MAAM2B,MAAM,GACZX,QAAOmD,iBAAAA,SAASE,GAAG,CAAC,qBAAbF,iBAA0B,IAAImC,IAAI,MAAM;IACrD,MAAMhB,WAAW,MAAMH,eAAehD,QAAQS,QAAQwC,kBAAkBiB;IACxE,OAAO;QAAE1G,IAAI;QAAM2F;IAAS;AAC9B;AAEA;;;;;CAKC,GACD,eAAeiB,iBACbpE,MAAc,EACdnC,KAAoB;IAEpB,IAAIA,MAAMI,KAAK,KAAK,QAAQ,OAAO;QAAET,IAAI;QAAMgC,QAAQ3B,MAAM2B,MAAM;IAAC;IACpE,IAAI,CAAC3B,MAAM2B,MAAM,EAAE,OAAO;QAAEhC,IAAI;QAAMgC,QAAQ;IAAK;IACnD,MAAM6E,QAAQ,MAAM9H,cAAcsB,MAAM2B,MAAM,EAAEC,KAAK,CAAC,IAAM;IAC5D,IAAI,CAAC4E,SAASA,MAAMlG,KAAK,KAAK6B,OAAO7B,KAAK,EAAE;QAC1C,OAAOd,OAAO,KAAK;IACrB;IACA,OAAO;QAAEG,IAAI;QAAMgC,QAAQ3B,MAAM2B,MAAM;IAAC;AAC1C;AAEA;;;;;;;;;;CAUC,GACD,eAAe8E,WACbtE,MAAc,EACdnC,KAAoB,EACpB0E,KAAsB,EACtB9B,MAAqB,EACrBiD,QAA2C;IAE3C,IAAIjD,OAAOoB,WAAW,IAAI,CAAE,MAAM6B,SAASjD,OAAOoB,WAAW,GAAI;QAC/D,OAAOxE,OAAO,KAAK;IACrB;IACA,MAAMkH,QAAQ,MAAMH,iBAAiBpE,QAAQnC;IAC7C,IAAI0G,MAAM/G,EAAE,KAAK,OAAO,OAAO+G;IAC/B,MAAM,EAAE/E,MAAM,EAAE,GAAG+E;IACnB,MAAMtE,YAAYT,SACdzD,eAAeiE,OAAOzB,GAAG,EAAE1C,oBAAoBmE,OAAOzB,GAAG,EAAEiB,WAC3D;WAAIxC;KAAmB;IAC3B,IAAI,CAAC+C,SAASC,QAAQC,YAAY;QAChC,OAAO5C,OAAO,KAAK;IACrB;IACA,MAAMmH,MAAMjC,MAAMD,GAAG;IACrB,MAAMkC,IAAIzB,GAAG,CAAC,aACThC,aAAaN,QAAQ,WACrBsB,eAAetB,QAAQ,OAEvBzE,kBAAkB,aAAK+E,aAAaN,QAAQ;QAAWR;;QAC1D3C,QAAQ;QACRmH,eAAe;QACfxE;QACAT;QACAkF,cAAc1E,OAAOxB,GAAG;QACxBmG,WAAW9H,WAAWoH,eAAe;QACrCD,WAAWnH,WAAWoH,eAAe;;IAEvC,MAAM/D,mBAAmBF,OAAO7B,KAAK,EAAE;QAACsC;KAAO;IAC/C,MAAM0C,WAAW,MAAMH,eAAehD,QAAQS,QAAQ,MAAMjB;IAC5D,OAAO;QAAEhC,IAAI;QAAMiG,QAAQe,IAAII,EAAE;QAAEzB;IAAS;AAC9C;AAEA;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAM0B,qBAAuC,OAAOjH,KAAKkH;;QAW5ClH,WAIIA,YACSA;IAf/B,IAAIA,IAAImH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAI,CAACI,OAAO;QACViH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAiB;QAC/C;IACF;IACA,IAAI2H,MAAMC,OAAO,EAACvH,YAAAA,IAAIH,IAAI,qBAARG,UAAU2E,KAAK,GAAG;QAClC,MAAM6C,UAAUxH,KAAKkH,KAAKjH;QAC1B;IACF;IACA,MAAM4F,SAAS5E,gBAAOjB,aAAAA,IAAIH,IAAI,qBAARG,WAAU6F,MAAM,mBAAI,IAAIU,IAAI;IAClD,MAAMkB,OAAOtI,mBAAkBa,aAAAA,IAAIH,IAAI,qBAARG,WAAU0H,IAAI;IAC7C,IAAID,KAAK7H,EAAE,KAAK,OAAO;QACrBsH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO8H,KAAK9H,KAAK;QAAC;QACzC;IACF;IACA,MAAMkD,SAAS4E,KAAK5E,MAAM;IAE1B,IAAI;QACF,MAAMT,SAAS,MAAMrC,mBAAmBC,KAAKC;QAC7C,IAAImC,OAAOxC,EAAE,KAAK,OAAO;YACvBsH,IAAIxH,MAAM,CAAC0C,OAAO1C,MAAM,EAAE2H,IAAI,CAACjF,OAAOvC,IAAI;YAC1C;QACF;QACA,MAAM8E,QAAQH,gBAAgBpC,OAAO7B,KAAK;QAC1C,MAAMuF,WAAWlB,SAASxC,OAAO7B,KAAK;QACtC,IAAIV;QACJ,IAAIgG,QAAQ;YACV,MAAM8B,QAAQ,MAAM/B,WAAWxD,QAAQnC,OAAO0E,OAAOkB,QAAQhD,QAAQiD;YACrE,IAAI6B,MAAM/H,EAAE,KAAK,OAAO;gBACtBsH,IAAIxH,MAAM,CAACiI,MAAMjI,MAAM,EAAE2H,IAAI,CAACM,MAAM9H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMiG;gBAAQN,UAAUoC,MAAMpC,QAAQ;YAAC;QACtD,OAAO;YACL,MAAMoC,QAAQ,MAAMjB,WAAWtE,QAAQnC,OAAO0E,OAAO9B,QAAQiD;YAC7D,IAAI6B,MAAM/H,EAAE,KAAK,OAAO;gBACtBsH,IAAIxH,MAAM,CAACiI,MAAMjI,MAAM,EAAE2H,IAAI,CAACM,MAAM9H,IAAI;gBACxC;YACF;YACAA,OAAO;gBAAED,IAAI;gBAAMiG,QAAQ8B,MAAM9B,MAAM;gBAAEN,UAAUoC,MAAMpC,QAAQ;YAAC;QACpE;QACA2B,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAACxH;IACvB,EAAE,OAAOF,OAAO;QACdgD,QAAQhD,KAAK,CAAC,0BAA0BA;QACxCuH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAA+B;IAC/D;AACF,EAAC;AAED;;;;CAIC,GACD,eAAe6H,UACbxH,GAAqB,EACrBkH,GAAsB,EACtBjH,KAAoB;QAQHD;IANjB,IAAIC,MAAMI,KAAK,KAAK,OAAO;QACzB6G,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YACnB1H,OAAO;QACT;QACA;IACF;IACA,MAAMiI,UAAU,EAAC5H,YAAAA,IAAIH,IAAI,qBAARG,UAAU2E,KAAK,EAAetD,KAAK,CAAC,GAAGnC,qBAAqB;IAC7E,IAAI,CAAC0I,QAAQtG,MAAM,IAAIsG,QAAQtG,MAAM,GAAGpC,oBAAoB;QAC1DgI,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YACnB1H,OAAO,CAAC,mBAAmB,EAAET,mBAAmB,iBAAiB,CAAC;QACpE;QACA;IACF;IACA,MAAM2I,SAA2D,EAAE;IACnE,KAAK,MAAMC,SAASF,QAAS;YAELG;QADtB,MAAMA,MAAOD,gBAAAA,QAAS,CAAC;QACvB,MAAMjC,SAAS5E,QAAO8G,cAAAA,GAAG,CAAC,SAAS,YAAbA,cAAiB,IAAIxB,IAAI;QAC/C,MAAMkB,OAAOtI,kBAAkB4I,GAAG,CAAC,OAAO;QAC1C,IAAI,CAAClC,UAAU4B,KAAK7H,EAAE,KAAK,OAAO;YAChCsH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;gBACnB1H,OAAO8H,KAAK7H,EAAE,KAAK,QAAQ6H,KAAK9H,KAAK,GAAG;YAC1C;YACA;QACF;QACAkI,OAAOG,IAAI,CAAC;YAAEnC;YAAQhD,QAAQ4E,KAAK5E,MAAM;QAAC;IAC5C;IAEA,IAAI;QACF,MAAMT,SAAS,MAAMrC,mBAAmBC,KAAKC;QAC7C,IAAImC,OAAOxC,EAAE,KAAK,OAAO;YACvBsH,IAAIxH,MAAM,CAAC0C,OAAO1C,MAAM,EAAE2H,IAAI,CAACjF,OAAOvC,IAAI;YAC1C;QACF;QACA,MAAM8E,QAAQH,gBAAgBpC,OAAO7B,KAAK;QAC1C,MAAMuF,WAAWlB,SAASxC,OAAO7B,KAAK;QACtC,MAAM0H,UAAgC,EAAE;QACxC,KAAK,MAAM,EAAEpC,MAAM,EAAEhD,MAAM,EAAE,IAAIgF,OAAQ;YACvC,MAAMF,QAAQ,MAAM/B,WAAWxD,QAAQnC,OAAO0E,OAAOkB,QAAQhD,QAAQiD;YACrEmC,QAAQD,IAAI,CACVL,MAAM/H,EAAE,KAAK,QACT;gBAAEiG;gBAAQjG,IAAI;gBAAOD,OAAOgI,MAAM9H,IAAI,CAACF,KAAK;YAAC,IAC7C;gBAAEkG;gBAAQjG,IAAI;gBAAM2F,UAAUoC,MAAMpC,QAAQ;YAAC;QAErD;QACA,MAAM1F,OAA6B;YAAED,IAAI;YAAMqI;QAAQ;QACvDf,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAACxH;IACvB,EAAE,OAAOF,OAAO;QACdgD,QAAQhD,KAAK,CAAC,gCAAgCA;QAC9CuH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAgC;IAChE;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,eAAeuI,aACb9F,MAAc,EACdnC,KAAoB,EACpB0E,KAAsB,EACtBkB,MAAc;QAiCmC6B;IA/BjD,MAAMd,MAAMjC,MAAMD,GAAG,CAACmB;IACtB,MAAMsC,WAAW,MAAMvB,IAAItC,GAAG;IAC9B,IAAI,CAAC6D,SAASpC,MAAM,EAAE;QACpB,OAAO;YAAEF;YAAQjG,IAAI;YAAOD,OAAO;QAA8B;IACnE;IACA,MAAM+H,OAAOS,SAASlC,IAAI;IAC1B,IAAI,CAAC9D,SAASC,QAAQsF,KAAKrF,SAAS,GAAG;QACrC,OAAO;YAAEwD;YAAQjG,IAAI;YAAOD,OAAO;QAAmC;IACxE;IACA,IAAI+H,KAAKhI,MAAM,KAAK,QAAQ;YAIFgI;QAHxB,OAAO;YACL7B;YACAjG,IAAI;YACJiH,eAAeuB,QAAOV,sBAAAA,KAAKb,aAAa,YAAlBa,sBAAsB;YAC5CW,aAAa;QACf;IACF;IAEA,MAAMxB,gBAAgBpB,KAAK6C,GAAG;IAC9B,MAAM1B,IAAIT,MAAM,CAAC;QACfzG,QAAQ;QACRmH;QACA0B,gBAAgBnG,OAAOxB,GAAG;OAGtBtC,uBAAuBoJ,QAAQ;QAAEnD,YAAY;IAAK,IAAI,CAAC;QAC3D6B,WAAWnH,WAAWoH,eAAe;;IAEvC,MAAM/D,mBAAmBF,OAAO7B,KAAK,EAAE;QAACmH;KAAgC;IAExE,MAAMc,cACJvI,MAAMI,KAAK,KAAK,SAASJ,MAAM2B,MAAM,GAAGX,QAAOyG,eAAAA,KAAK9F,MAAM,YAAX8F,eAAe,IAAInB,IAAI;IACxE,IAAIiC,aAAa;YAYCd,aACDA,YACIA,gBAIGA,mBACCA,oBACHA,iBACAA,iBACHA,cACIA;QAtBrB;;;;;KAKC,GACD,MAAM1I,cACJwJ,aACA,iBACA;YACA3C;YACAlC,OAAO1C,QAAOyG,cAAAA,KAAK/D,KAAK,YAAV+D,cAAc;YAC5B9D,MAAM3C,QAAOyG,aAAAA,KAAK9D,IAAI,YAAT8D,aAAa;YAC1B7D,UAAU5C,QAAOyG,iBAAAA,KAAK7D,QAAQ,YAAb6D,iBAAiB;YAClC5D,SAAS,OAAO4D,KAAK5D,OAAO,KAAK,WAAW4D,KAAK5D,OAAO,GAAG;YAC3D+C;YACA0B,gBAAgBnG,OAAOxB,GAAG;YAC1BqD,aAAahD,QAAOyG,oBAAAA,KAAKzD,WAAW,YAAhByD,oBAAoB;YACxCZ,cAAc7F,QAAOyG,qBAAAA,KAAKZ,YAAY,YAAjBY,qBAAqB;YAC1C3E,WAAW9B,QAAOyG,kBAAAA,KAAK3E,SAAS,YAAd2E,kBAAkB;YACpCxE,WAAWjC,QAAOyG,kBAAAA,KAAKxE,SAAS,YAAdwE,kBAAkB;YACpCzE,QAAQhC,QAAOyG,eAAAA,KAAKzE,MAAM,YAAXyE,eAAe;YAC9Be,YAAYxH,QAAOyG,gBAAAA,KAAK9F,MAAM,YAAX8F,gBAAe;QAClC,GACA;YAAEgB,OAAO;gBAAE9E,MAAM;gBAAUhD,KAAKwB,OAAOxB,GAAG;gBAAEC,OAAOuB,OAAOvB,KAAK;YAAC;QAAE;IAEtE;IACA,OAAO;QAAEgF;QAAQjG,IAAI;QAAMiH;IAAc;AAC3C;AAEA,qEAAqE,GACrE,MAAM8B,iBAAiB,CAACC,UACtBA,QAAQjJ,KAAK,KAAK,gCAAgC,MAAM;AAE1D;;;;;;CAMC,GACD,OAAO,MAAMkJ,yBAA2C,OAAO7I,KAAKkH;;QAOhDlH,WAIIA;IAVtB,IAAIA,IAAImH,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAqB;QACnD;IACF;IACA,MAAMM,QAAQX,kBAAkBU,IAAIH,IAAI;IACxC,IAAIyH,MAAMC,OAAO,EAACvH,YAAAA,IAAIH,IAAI,qBAARG,UAAU8I,OAAO,GAAG;QACpC,MAAMC,cAAc/I,KAAKkH,KAAKjH;QAC9B;IACF;IACA,MAAM4F,SAAS5E,gBAAOjB,aAAAA,IAAIH,IAAI,qBAARG,WAAU6F,MAAM,mBAAI,IAAIU,IAAI;IAClD,IAAI,CAACtG,SAAS,CAAC4F,QAAQ;QACrBqB,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAA2B;QACzD;IACF;IAEA,IAAI;QACF,MAAMyC,SAAS,MAAMrC,mBAAmBC,KAAKC;QAC7C,IAAImC,OAAOxC,EAAE,KAAK,OAAO;YACvBsH,IAAIxH,MAAM,CAAC0C,OAAO1C,MAAM,EAAE2H,IAAI,CAACjF,OAAOvC,IAAI;YAC1C;QACF;QACA,MAAM+I,UAAU,MAAMV,aAAa9F,QAAQnC,OAAOuE,gBAAgBpC,OAAO7B,KAAK,GAAGsF;QACjF,IAAI+C,QAAQhJ,EAAE,KAAK,OAAO;YACxBsH,IAAIxH,MAAM,CAACiJ,eAAeC,UAAUvB,IAAI,CAAC;gBAAE1H,OAAOiJ,QAAQjJ,KAAK;YAAC;YAChE;QACF;QACA,MAAME,OAAgC;YACpCD,IAAI;YACJiH,eAAe+B,QAAQ/B,aAAa;WAChC+B,QAAQP,WAAW,GAAG;YAAEA,aAAa;QAAK,IAAI,CAAC;QAErDnB,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAACxH;IACvB,EAAE,OAAOF,OAAO;QACdgD,QAAQhD,KAAK,CAAC,8BAA8BA;QAC5CuH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAmC;IACnE;AACF,EAAC;AAED;;;;;CAKC,GACD,eAAeoJ,cACb/I,GAAqB,EACrBkH,GAAsB,EACtBjH,KAA2B;QAUtBD;IARL,IAAI,CAACC,SAASA,MAAMI,KAAK,KAAK,OAAO;QACnC6G,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YACnB1H,OAAO;QACT;QACA;IACF;IACA,MAAMmJ,UAAU;WACX,IAAIE,IACL,EAAChJ,YAAAA,IAAIH,IAAI,qBAARG,UAAU8I,OAAO,EAAerG,GAAG,CAAC,CAACuE,KAAO/F,OAAO+F,aAAAA,KAAM,IAAIT,IAAI,IAAI0C,MAAM,CAAC/D;KAEhF;IACD,IAAI,CAAC4D,QAAQxH,MAAM,IAAIwH,QAAQxH,MAAM,GAAGpC,oBAAoB;QAC1DgI,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YACnB1H,OAAO,CAAC,uBAAuB,EAAET,mBAAmB,iBAAiB,CAAC;QACxE;QACA;IACF;IAEA,IAAI;QACF,MAAMkD,SAAS,MAAMrC,mBAAmBC,KAAKC;QAC7C,IAAImC,OAAOxC,EAAE,KAAK,OAAO;YACvBsH,IAAIxH,MAAM,CAAC0C,OAAO1C,MAAM,EAAE2H,IAAI,CAACjF,OAAOvC,IAAI;YAC1C;QACF;QACA,MAAM8E,QAAQH,gBAAgBpC,OAAO7B,KAAK;QAC1C,MAAM0H,UAAoC,EAAE;QAC5C,KAAK,MAAMpC,UAAUiD,QAAS;YAC5Bb,QAAQD,IAAI,CAAC,MAAME,aAAa9F,QAAQnC,OAAO0E,OAAOkB;QACxD;QACA,MAAMhG,OAAiC;YAAED,IAAI;YAAMqI;QAAQ;QAC3Df,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAACxH;IACvB,EAAE,OAAOF,OAAO;QACdgD,QAAQhD,KAAK,CAAC,oCAAoCA;QAClDuH,IAAIxH,MAAM,CAAC,KAAK2H,IAAI,CAAC;YAAE1H,OAAO;QAAoC;IACpE;AACF"}

package/src/lib/server-deal-stage.js

@@ -124,6 +124,8 @@ export const crmDealStageHandler = async (req, res)=>{
    */ let orgId;
     let org;
     let actor = null;
+    // Who moved the deal, at either level, for the runs it sets off (AGL-3376).
+    let eventActor;
     if (routeScope.level === 'org') {
         const caller = await authorizeOrgCaller(req, routeScope.orgId, {
             needs: 'data.manage',
@@ -140,6 +142,7 @@ export const crmDealStageHandler = async (req, res)=>{
             uid: caller.uid,
             email: caller.email
         };
+        eventActor = actor;
     } else {
         var _req_headers_authorization;
         const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
@@ -151,7 +154,12 @@ export const crmDealStageHandler = async (req, res)=>{
         }
         let uid;
         try {
-            uid = (await firebaseAdmin.app().auth().verifyIdToken(idToken)).uid;
+            const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+            uid = decoded.uid;
+            eventActor = {
+                uid,
+                email: typeof decoded.email === 'string' ? decoded.email : null
+            };
         } catch (error) {
             // A refused credential is the caller's 401; a failure to check one is
             // ours and keeps a 5xx (AGL-2852).
@@ -273,7 +281,11 @@ export const crmDealStageHandler = async (req, res)=>{
         await emitHostEvent(eventHostId, event, dealEventPayload(dealId, _extends({}, deal, {
             stageId: target.id,
             lostReason: nextStatus === 'lost' ? lostReason : undefined
-        }), previousStageId));
+        }), previousStageId), {
+            actor: _extends({
+                kind: 'member'
+            }, eventActor)
+        });
     }
     if ((customer == null ? void 0 : customer.outcome) === 'advanced') {
         // The stage change is the win's effect, announced after its cause, to
@@ -284,6 +296,10 @@ export const crmDealStageHandler = async (req, res)=>{
             email: customer.email,
             lifecycleStage: customer.lifecycleStage,
             previousStage: customer.previousStage
+        }, {
+            actor: _extends({
+                kind: 'member'
+            }, eventActor)
         });
     }
     if (actor) {

package/src/lib/server-deal-stage.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/server-deal-stage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/deal-stage` — the one writer of a deal's stage (AGL-2598).\n *\n * ## Why a route, when the rules would let the browser do it\n *\n * A deal's title, amount and owner are edited client-direct against the\n * Firestore rules, and nothing about a stage change needs a server to be\n * SAFE. What it needs a server for is to be HEARD: a move between stages, a\n * win and a loss are the three moments an automation wants — \"when a deal is\n * won, email the owner\", \"when one reaches negotiation, file a task\" — and a\n * workflow only fires on an event the tenant runtime emits. A stage written\n * by the browser would be a fact nothing could react to. So every surface\n * that moves a deal calls here, and this handler updates the document and\n * then emits `dealStageChanged`, `dealWon` or `dealLost` with a flat payload\n * a workflow filter can read.\n *\n * ## Who may call it\n *\n * Three gates, in the order the cheapest fails first:\n *\n *  1. A verified Firebase session — the console's `authorizedFetch` puts the\n *     id token on every call.\n *  2. An admin or editor role ON THIS SITE, resolved by `hostRoleFor` from\n *     the org member document, which is the same projection the rules read.\n *  3. The `data.manage` permission in the org — the key the whole CRM is\n *     gated on, resolved through the custom-role and per-member layers by\n *     `memberHasOrgPermission`, because a member document alone cannot say\n *     what a custom role took away.\n *\n * And then the deal has to be VISIBLE to the site: its `visibleTo` must\n * intersect the scope tokens a contact captured on this site would carry.\n * The Admin SDK evaluates no rules, so without this check an editor of one\n * site in an agency could move another client's deals by id.\n *\n * ## The organization variant (AGL-2634)\n *\n * `{ orgId, dealId, … }` instead of a site: the org-level hub's board. The\n * caller is authorized by the ORG — an org-wide member holding\n * `data.manage`, the org hub's own gate — and no visibility check is made,\n * because an org-wide member reads every row the org holds. The event\n * still goes to the deal's own capturing site, which is where the\n * automations that listen for it live; a deal no site captured has none to\n * tell. And the act is logged in the org's feed, since there is no one\n * site's feed it happened in.\n *\n * ## What it writes\n *\n * `stageId`, `status` (from the target stage's `kind`, never from the body),\n * `stageChangedAtMs`, `closedAtMs` (set on a close, cleared on a reopen) and\n * `lostReason` (kept on a loss, removed on anything else). A move to the\n * stage the deal is already in writes nothing and emits nothing — an\n * automation must not fire twice because a card was dropped where it was.\n *\n * ## A won deal makes its contact a customer (AGL-2641)\n *\n * A win is the same fact as a purchase — the business has decided this\n * person bought — and an order already floors a contact's lifecycle stage\n * at `customer` on capture. So the transition INTO `won` applies the same\n * floor to the contact the deal names, in the same write path, behind no\n * setting: `floorContactLifecycleStage` fills an empty stage or advances an\n * earlier one inside the facet of the site the deal was made on, and never\n * moves anybody back — a customer stays a customer, an evangelist an\n * evangelist. When the stage did move, `contactStageChanged` is announced\n * after `dealWon`, so an automation keyed on \"became a customer\" hears it,\n * and the org's activity line says so. A failure to write the contact does\n * not undo the win: the deal is already closed, and the response reports\n * `customer: null` rather than a 500 for a stage change that did happen.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  type CrmDeal,\n  type CrmPipeline,\n  dealStageById,\n  hostRoleFor,\n  hostScopeToken,\n  ORG_SCOPE_TOKEN,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  type ContactLifecycleFloor,\n  firebaseAdmin,\n  floorContactLifecycleStage,\n  getOrgForHost,\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  closingStage,\n  dealEventName,\n  dealEventPayload,\n} from './model/deal-board-model'\nimport { authorizeOrgCaller, readCrmRouteScope } from './server/org-caller'\nimport { crmSuiteRefusal } from './server/suite-gate'\n\n/** The most a lost reason may carry — a sentence or two, not a post-mortem. */\nexport const LOST_REASON_MAX = 500\n\nexport const crmDealStageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n\n  const routeScope = readCrmRouteScope(req.body as Record<string, unknown>)\n  const dealId = String(req.body?.dealId ?? '').trim()\n  const stageId =\n    typeof req.body?.stageId === 'string' ? req.body.stageId.trim() : ''\n  const status = req.body?.status\n  const closing = status === 'won' || status === 'lost' ? status : null\n  const lostReason = String(req.body?.lostReason ?? '')\n    .trim()\n    .slice(0, LOST_REASON_MAX)\n  if (!routeScope || !dealId) {\n    return res.status(400).json({ error: 'Missing hostId or dealId' })\n  }\n  if (!stageId && !closing) {\n    return res.status(400).json({\n      error: 'Name a stageId to move to, or a status of won or lost.',\n    })\n  }\n\n  /*\n   * Who is calling, and the org whose deal it is. The site variant\n   * resolves the org from the site and the caller's role on it; the org\n   * variant is authorized by the org itself, and the site the body may\n   * name beside it is not consulted — the deal's own site, read off the\n   * document, is the one its event goes to.\n   */\n  let orgId: string\n  let org: Record<string, unknown>\n  let actor: { uid: string; email: string | null } | null = null\n  if (routeScope.level === 'org') {\n    const caller = await authorizeOrgCaller(req, routeScope.orgId, {\n      needs: 'data.manage',\n      refusal:\n        'Moving a deal at the organization level requires the \"Manage data\" ' +\n        'permission across the whole workspace.',\n    })\n    if (caller.ok === false) {\n      return res.status(caller.status).json({ error: caller.error })\n    }\n    orgId = caller.orgId\n    org = caller.org as Record<string, unknown>\n    actor = { uid: caller.uid, email: caller.email }\n  } else {\n    const authorization = String(req.headers.authorization ?? '')\n    const idToken = authorization.startsWith('Bearer ')\n      ? authorization.slice('Bearer '.length)\n      : ''\n    if (!idToken) {\n      return res.status(401).json({ error: 'Unauthenticated' })\n    }\n    let uid: string\n    try {\n      uid = (await firebaseAdmin.app().auth().verifyIdToken(idToken)).uid\n    } catch (error) {\n      // A refused credential is the caller's 401; a failure to check one is\n      // ours and keeps a 5xx (AGL-2852).\n      if (isRefusedIdToken(error)) return res.status(401).json({ error: 'Unauthenticated' })\n      console.error('[crm] deal-stage could not verify the caller', error)\n      return res.status(500).json({ error: 'The sign-in could not be checked. Try again.' })\n    }\n\n    const owner = await getOrgForHost(routeScope.hostId).catch(() => null)\n    if (!owner) {\n      return res.status(404).json({\n        error: 'This site has no organization, so it has no deals.',\n      })\n    }\n    const membership = await resolveOrgMembership(uid, owner.orgId).catch(\n      () => null,\n    )\n    const member = membership?.member\n    const hostRole = hostRoleFor(member, routeScope.hostId)\n    if (!member || (hostRole !== 'admin' && hostRole !== 'editor')) {\n      return res.status(403).json({\n        error: 'Moving a deal needs an admin or editor role on this site.',\n      })\n    }\n    if (!(await memberHasOrgPermission(owner.orgId, member, 'data.manage'))) {\n      return res.status(403).json({\n        error: 'Moving a deal requires the \"Manage data\" permission.',\n      })\n    }\n    orgId = owner.orgId\n    org = owner.org as Record<string, unknown>\n  }\n\n  // Deals are the CRM suite's, at either level (AGL-2787).\n  const suite = crmSuiteRefusal(org, 'Moving a deal through its pipeline')\n  if (suite) return res.status(suite.status).json(suite.body)\n\n  const firestore = firebaseAdmin.app().firestore()\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const dealRef = orgRef.collection(CRM_COLLECTIONS.deals).doc(dealId)\n  const dealSnapshot = await dealRef.get()\n  if (!dealSnapshot.exists) {\n    return res.status(404).json({ error: 'Unknown deal' })\n  }\n  const deal = dealSnapshot.data() as CrmDeal\n\n  if (routeScope.level === 'site') {\n    const group = await consentGroupForSite(routeScope.hostId, org)\n    const readable = new Set<string>([\n      ORG_SCOPE_TOKEN,\n      ...group.hostIds.map(hostScopeToken),\n    ])\n    if (!(deal.visibleTo ?? []).some((token) => readable.has(token))) {\n      return res.status(403).json({ error: 'This deal is not visible to this site.' })\n    }\n  }\n\n  const pipelineSnapshot = await orgRef\n    .collection(CRM_COLLECTIONS.pipelines)\n    .doc(String(deal.pipelineId ?? ''))\n    .get()\n  if (!pipelineSnapshot.exists) {\n    return res.status(409).json({\n      error: \"This deal's pipeline no longer exists, so it has no stages to move to.\",\n    })\n  }\n  const pipeline = pipelineSnapshot.data() as CrmPipeline\n  const target = stageId\n    ? dealStageById(pipeline, stageId)\n    : closingStage(pipeline, closing as 'won' | 'lost')\n  if (!target) {\n    return res.status(400).json({\n      error: stageId\n        ? 'This pipeline has no such stage.'\n        : `This pipeline has no ${closing} stage.`,\n    })\n  }\n\n  const previousStageId = String(deal.stageId ?? '')\n  const nextStatus = target.kind\n  if (target.id === previousStageId && deal.status === nextStatus) {\n    return res.status(200).json({\n      ok: true,\n      dealId,\n      stageId: target.id,\n      status: nextStatus,\n      previousStageId,\n      event: null,\n    })\n  }\n\n  const nowMs = Date.now()\n  await dealRef.update({\n    stageId: target.id,\n    status: nextStatus,\n    stageChangedAtMs: nowMs,\n    closedAtMs: nextStatus === 'open' ? null : nowMs,\n    lostReason: nextStatus === 'lost' ? lostReason : FieldValue.delete(),\n    updatedAt: new Date(),\n  })\n\n  const event = dealEventName(nextStatus)\n  // The site whose automations hear the move: the mounted site, or at the\n  // organization level the deal's own — a deal no site captured has none.\n  const eventHostId =\n    routeScope.level === 'site' ? routeScope.hostId : String(deal.hostId ?? '').trim()\n\n  /*\n   * The customer floor, on the transition into `won` alone: a move between\n   * open stages, a loss and a reopen say nothing about whether the person\n   * bought. The facet written is the site's the deal was made on — under\n   * a site the mounted one, at the organization level the deal's own, and\n   * for a deal no site captured the person's own capturing site.\n   */\n  let customer: ContactLifecycleFloor | null = null\n  const contactId = String(deal.contactId ?? '').trim()\n  if (nextStatus === 'won' && contactId) {\n    customer = await floorContactLifecycleStage({\n      contactRef: orgRef.collection('contacts').doc(contactId),\n      org,\n      hostId: eventHostId || null,\n      floor: 'customer',\n    }).catch((error: unknown) => {\n      console.error('[crm] deal-stage: the customer floor failed', dealId, contactId, error)\n      return null\n    })\n  }\n  const becameCustomer = customer?.outcome === 'advanced'\n\n  if (eventHostId) {\n    await emitHostEvent(\n      eventHostId,\n      event,\n      dealEventPayload(\n        dealId,\n        {\n          ...deal,\n          stageId: target.id,\n          lostReason: nextStatus === 'lost' ? lostReason : undefined,\n        },\n        previousStageId,\n      ),\n    )\n  }\n  if (customer?.outcome === 'advanced') {\n    // The stage change is the win's effect, announced after its cause, to\n    // the site whose facet moved — the same site as the win's, unless no\n    // site captured the deal and the person's own site holds the stage.\n    await emitHostEvent(customer.hostId, 'contactStageChanged', {\n      contactId: customer.contactId,\n      email: customer.email,\n      lifecycleStage: customer.lifecycleStage,\n      previousStage: customer.previousStage,\n    })\n  }\n  if (actor) {\n    await logOrgActivity(\n      orgId,\n      actor,\n      nextStatus === 'won'\n        ? becameCustomer\n          ? 'Marked deal won — contact now a customer'\n          : 'Marked deal won'\n        : nextStatus === 'lost'\n          ? 'Marked deal lost'\n          : `Moved deal to ${target.name}`,\n      { type: 'deal', id: dealId, name: String(deal.title ?? '') },\n    )\n  }\n\n  return res.status(200).json({\n    ok: true,\n    dealId,\n    stageId: target.id,\n    status: nextStatus,\n    previousStageId,\n    event,\n    /*\n     * What the win did to the contact: the stage it now holds and whether\n     * this call raised it. `null` on anything but a win, on a deal that\n     * names no contact, and on a contact write that failed.\n     */\n    customer:\n      customer && (customer.outcome === 'advanced' || customer.outcome === 'held')\n        ? {\n            contactId: customer.contactId,\n            lifecycleStage: customer.lifecycleStage,\n            advanced: customer.outcome === 'advanced',\n          }\n        : null,\n  })\n}\n"],"names":["CRM_COLLECTIONS","dealStageById","hostRoleFor","hostScopeToken","ORG_SCOPE_TOKEN","consentGroupForSite","firebaseAdmin","floorContactLifecycleStage","getOrgForHost","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","isRefusedIdToken","emitHostEvent","FieldValue","closingStage","dealEventName","dealEventPayload","authorizeOrgCaller","readCrmRouteScope","crmSuiteRefusal","LOST_REASON_MAX","crmDealStageHandler","req","res","deal","method","setHeader","status","json","error","routeScope","body","dealId","String","trim","stageId","closing","lostReason","slice","orgId","org","actor","level","caller","needs","refusal","ok","uid","email","authorization","headers","idToken","startsWith","length","app","auth","verifyIdToken","console","owner","hostId","catch","membership","member","hostRole","suite","firestore","orgRef","collection","doc","dealRef","deals","dealSnapshot","get","exists","data","group","readable","Set","hostIds","map","visibleTo","some","token","has","pipelineSnapshot","pipelines","pipelineId","pipeline","target","previousStageId","nextStatus","kind","id","event","nowMs","Date","now","update","stageChangedAtMs","closedAtMs","delete","updatedAt","eventHostId","customer","contactId","contactRef","floor","becameCustomer","outcome","undefined","lifecycleStage","previousStage","name","type","title","advanced"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEC,GAED,SACEA,eAAe,EAGfC,aAAa,EACbC,WAAW,EACXC,cAAc,EACdC,eAAe,QAEV,sBAAqB;AAC5B,SACEC,mBAAmB,EAEnBC,aAAa,EACbC,0BAA0B,EAC1BC,aAAa,EACbC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,aAAa,QAAQ,wBAAuB;AACrD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,YAAY,EACZC,aAAa,EACbC,gBAAgB,QACX,8BAA0B;AACjC,SAASC,kBAAkB,EAAEC,iBAAiB,QAAQ,yBAAqB;AAC3E,SAASC,eAAe,QAAQ,yBAAqB;AAErD,6EAA6E,GAC7E,OAAO,MAAMC,kBAAkB,IAAG;AAElC,OAAO,MAAMC,sBAAwC,OAAOC,KAAKC;qBAqHjDC,kBAmBiBA,eA2B4BA,cAUlCA;QAtKHF,WAEbA,YACMA,YAEWA;IAX1B,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzBF,IAAIG,SAAS,CAAC,SAAS;QACvB,OAAOH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IAEA,MAAMC,aAAaZ,kBAAkBI,IAAIS,IAAI;IAC7C,MAAMC,SAASC,gBAAOX,YAAAA,IAAIS,IAAI,qBAART,UAAUU,MAAM,mBAAI,IAAIE,IAAI;IAClD,MAAMC,UACJ,SAAOb,aAAAA,IAAIS,IAAI,qBAART,WAAUa,OAAO,MAAK,WAAWb,IAAIS,IAAI,CAACI,OAAO,CAACD,IAAI,KAAK;IACpE,MAAMP,UAASL,aAAAA,IAAIS,IAAI,qBAART,WAAUK,MAAM;IAC/B,MAAMS,UAAUT,WAAW,SAASA,WAAW,SAASA,SAAS;IACjE,MAAMU,aAAaJ,iBAAOX,aAAAA,IAAIS,IAAI,qBAART,WAAUe,UAAU,oBAAI,IAC/CH,IAAI,GACJI,KAAK,CAAC,GAAGlB;IACZ,IAAI,CAACU,cAAc,CAACE,QAAQ;QAC1B,OAAOT,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;IAClE;IACA,IAAI,CAACM,WAAW,CAACC,SAAS;QACxB,OAAOb,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAO;QACT;IACF;IAEA;;;;;;GAMC,GACD,IAAIU;IACJ,IAAIC;IACJ,IAAIC,QAAsD;IAC1D,IAAIX,WAAWY,KAAK,KAAK,OAAO;QAC9B,MAAMC,SAAS,MAAM1B,mBAAmBK,KAAKQ,WAAWS,KAAK,EAAE;YAC7DK,OAAO;YACPC,SACE,wEACA;QACJ;QACA,IAAIF,OAAOG,EAAE,KAAK,OAAO;YACvB,OAAOvB,IAAII,MAAM,CAACgB,OAAOhB,MAAM,EAAEC,IAAI,CAAC;gBAAEC,OAAOc,OAAOd,KAAK;YAAC;QAC9D;QACAU,QAAQI,OAAOJ,KAAK;QACpBC,MAAMG,OAAOH,GAAG;QAChBC,QAAQ;YAAEM,KAAKJ,OAAOI,GAAG;YAAEC,OAAOL,OAAOK,KAAK;QAAC;IACjD,OAAO;YACwB1B;QAA7B,MAAM2B,gBAAgBhB,QAAOX,6BAAAA,IAAI4B,OAAO,CAACD,aAAa,YAAzB3B,6BAA6B;QAC1D,MAAM6B,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcX,KAAK,CAAC,UAAUe,MAAM,IACpC;QACJ,IAAI,CAACF,SAAS;YACZ,OAAO5B,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,IAAIkB;QACJ,IAAI;YACFA,MAAM,AAAC,CAAA,MAAM1C,cAAciD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACL,QAAO,EAAGJ,GAAG;QACrE,EAAE,OAAOlB,OAAO;YACd,sEAAsE;YACtE,mCAAmC;YACnC,IAAIlB,iBAAiBkB,QAAQ,OAAON,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;YACpF4B,QAAQ5B,KAAK,CAAC,gDAAgDA;YAC9D,OAAON,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+C;QACtF;QAEA,MAAM6B,QAAQ,MAAMnD,cAAcuB,WAAW6B,MAAM,EAAEC,KAAK,CAAC,IAAM;QACjE,IAAI,CAACF,OAAO;YACV,OAAOnC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,MAAMgC,aAAa,MAAMnD,qBAAqBqC,KAAKW,MAAMnB,KAAK,EAAEqB,KAAK,CACnE,IAAM;QAER,MAAME,SAASD,8BAAAA,WAAYC,MAAM;QACjC,MAAMC,WAAW9D,YAAY6D,QAAQhC,WAAW6B,MAAM;QACtD,IAAI,CAACG,UAAWC,aAAa,WAAWA,aAAa,UAAW;YAC9D,OAAOxC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,IAAI,CAAE,MAAMpB,uBAAuBiD,MAAMnB,KAAK,EAAEuB,QAAQ,gBAAiB;YACvE,OAAOvC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACAU,QAAQmB,MAAMnB,KAAK;QACnBC,MAAMkB,MAAMlB,GAAG;IACjB;IAEA,yDAAyD;IACzD,MAAMwB,QAAQ7C,gBAAgBqB,KAAK;IACnC,IAAIwB,OAAO,OAAOzC,IAAII,MAAM,CAACqC,MAAMrC,MAAM,EAAEC,IAAI,CAACoC,MAAMjC,IAAI;IAE1D,MAAMkC,YAAY5D,cAAciD,GAAG,GAAGW,SAAS;IAC/C,MAAMC,SAASD,UAAUE,UAAU,CAAC,QAAQC,GAAG,CAAC7B;IAChD,MAAM8B,UAAUH,OAAOC,UAAU,CAACpE,gBAAgBuE,KAAK,EAAEF,GAAG,CAACpC;IAC7D,MAAMuC,eAAe,MAAMF,QAAQG,GAAG;IACtC,IAAI,CAACD,aAAaE,MAAM,EAAE;QACxB,OAAOlD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAe;IACtD;IACA,MAAML,OAAO+C,aAAaG,IAAI;IAE9B,IAAI5C,WAAWY,KAAK,KAAK,QAAQ;YAMzBlB;QALN,MAAMmD,QAAQ,MAAMvE,oBAAoB0B,WAAW6B,MAAM,EAAEnB;QAC3D,MAAMoC,WAAW,IAAIC,IAAY;YAC/B1E;eACGwE,MAAMG,OAAO,CAACC,GAAG,CAAC7E;SACtB;QACD,IAAI,CAAC,EAACsB,kBAAAA,KAAKwD,SAAS,YAAdxD,kBAAkB,EAAE,EAAEyD,IAAI,CAAC,CAACC,QAAUN,SAASO,GAAG,CAACD,SAAS;YAChE,OAAO3D,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyC;QAChF;IACF;IAEA,MAAMuD,mBAAmB,MAAMlB,OAC5BC,UAAU,CAACpE,gBAAgBsF,SAAS,EACpCjB,GAAG,CAACnC,QAAOT,mBAAAA,KAAK8D,UAAU,YAAf9D,mBAAmB,KAC9BgD,GAAG;IACN,IAAI,CAACY,iBAAiBX,MAAM,EAAE;QAC5B,OAAOlD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAO;QACT;IACF;IACA,MAAM0D,WAAWH,iBAAiBV,IAAI;IACtC,MAAMc,SAASrD,UACXnC,cAAcuF,UAAUpD,WACxBrB,aAAayE,UAAUnD;IAC3B,IAAI,CAACoD,QAAQ;QACX,OAAOjE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAOM,UACH,qCACA,CAAC,qBAAqB,EAAEC,QAAQ,OAAO,CAAC;QAC9C;IACF;IAEA,MAAMqD,kBAAkBxD,QAAOT,gBAAAA,KAAKW,OAAO,YAAZX,gBAAgB;IAC/C,MAAMkE,aAAaF,OAAOG,IAAI;IAC9B,IAAIH,OAAOI,EAAE,KAAKH,mBAAmBjE,KAAKG,MAAM,KAAK+D,YAAY;QAC/D,OAAOnE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BkB,IAAI;YACJd;YACAG,SAASqD,OAAOI,EAAE;YAClBjE,QAAQ+D;YACRD;YACAI,OAAO;QACT;IACF;IAEA,MAAMC,QAAQC,KAAKC,GAAG;IACtB,MAAM3B,QAAQ4B,MAAM,CAAC;QACnB9D,SAASqD,OAAOI,EAAE;QAClBjE,QAAQ+D;QACRQ,kBAAkBJ;QAClBK,YAAYT,eAAe,SAAS,OAAOI;QAC3CzD,YAAYqD,eAAe,SAASrD,aAAaxB,WAAWuF,MAAM;QAClEC,WAAW,IAAIN;IACjB;IAEA,MAAMF,QAAQ9E,cAAc2E;IAC5B,wEAAwE;IACxE,wEAAwE;IACxE,MAAMY,cACJxE,WAAWY,KAAK,KAAK,SAASZ,WAAW6B,MAAM,GAAG1B,QAAOT,eAAAA,KAAKmC,MAAM,YAAXnC,eAAe,IAAIU,IAAI;IAElF;;;;;;GAMC,GACD,IAAIqE,WAAyC;IAC7C,MAAMC,YAAYvE,QAAOT,kBAAAA,KAAKgF,SAAS,YAAdhF,kBAAkB,IAAIU,IAAI;IACnD,IAAIwD,eAAe,SAASc,WAAW;QACrCD,WAAW,MAAMjG,2BAA2B;YAC1CmG,YAAYvC,OAAOC,UAAU,CAAC,YAAYC,GAAG,CAACoC;YAC9ChE;YACAmB,QAAQ2C,eAAe;YACvBI,OAAO;QACT,GAAG9C,KAAK,CAAC,CAAC/B;YACR4B,QAAQ5B,KAAK,CAAC,+CAA+CG,QAAQwE,WAAW3E;YAChF,OAAO;QACT;IACF;IACA,MAAM8E,iBAAiBJ,CAAAA,4BAAAA,SAAUK,OAAO,MAAK;IAE7C,IAAIN,aAAa;QACf,MAAM1F,cACJ0F,aACAT,OACA7E,iBACEgB,QACA,aACKR;YACHW,SAASqD,OAAOI,EAAE;YAClBvD,YAAYqD,eAAe,SAASrD,aAAawE;YAEnDpB;IAGN;IACA,IAAIc,CAAAA,4BAAAA,SAAUK,OAAO,MAAK,YAAY;QACpC,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,MAAMhG,cAAc2F,SAAS5C,MAAM,EAAE,uBAAuB;YAC1D6C,WAAWD,SAASC,SAAS;YAC7BxD,OAAOuD,SAASvD,KAAK;YACrB8D,gBAAgBP,SAASO,cAAc;YACvCC,eAAeR,SAASQ,aAAa;QACvC;IACF;IACA,IAAItE,OAAO;YAWkCjB;QAV3C,MAAMhB,eACJ+B,OACAE,OACAiD,eAAe,QACXiB,iBACE,6CACA,oBACFjB,eAAe,SACb,qBACA,CAAC,cAAc,EAAEF,OAAOwB,IAAI,EAAE,EACpC;YAAEC,MAAM;YAAQrB,IAAI5D;YAAQgF,MAAM/E,QAAOT,cAAAA,KAAK0F,KAAK,YAAV1F,cAAc;QAAI;IAE/D;IAEA,OAAOD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;QAC1BkB,IAAI;QACJd;QACAG,SAASqD,OAAOI,EAAE;QAClBjE,QAAQ+D;QACRD;QACAI;QACA;;;;KAIC,GACDU,UACEA,YAAaA,CAAAA,SAASK,OAAO,KAAK,cAAcL,SAASK,OAAO,KAAK,MAAK,IACtE;YACEJ,WAAWD,SAASC,SAAS;YAC7BM,gBAAgBP,SAASO,cAAc;YACvCK,UAAUZ,SAASK,OAAO,KAAK;QACjC,IACA;IACR;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/server-deal-stage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/deal-stage` — the one writer of a deal's stage (AGL-2598).\n *\n * ## Why a route, when the rules would let the browser do it\n *\n * A deal's title, amount and owner are edited client-direct against the\n * Firestore rules, and nothing about a stage change needs a server to be\n * SAFE. What it needs a server for is to be HEARD: a move between stages, a\n * win and a loss are the three moments an automation wants — \"when a deal is\n * won, email the owner\", \"when one reaches negotiation, file a task\" — and a\n * workflow only fires on an event the tenant runtime emits. A stage written\n * by the browser would be a fact nothing could react to. So every surface\n * that moves a deal calls here, and this handler updates the document and\n * then emits `dealStageChanged`, `dealWon` or `dealLost` with a flat payload\n * a workflow filter can read.\n *\n * ## Who may call it\n *\n * Three gates, in the order the cheapest fails first:\n *\n *  1. A verified Firebase session — the console's `authorizedFetch` puts the\n *     id token on every call.\n *  2. An admin or editor role ON THIS SITE, resolved by `hostRoleFor` from\n *     the org member document, which is the same projection the rules read.\n *  3. The `data.manage` permission in the org — the key the whole CRM is\n *     gated on, resolved through the custom-role and per-member layers by\n *     `memberHasOrgPermission`, because a member document alone cannot say\n *     what a custom role took away.\n *\n * And then the deal has to be VISIBLE to the site: its `visibleTo` must\n * intersect the scope tokens a contact captured on this site would carry.\n * The Admin SDK evaluates no rules, so without this check an editor of one\n * site in an agency could move another client's deals by id.\n *\n * ## The organization variant (AGL-2634)\n *\n * `{ orgId, dealId, … }` instead of a site: the org-level hub's board. The\n * caller is authorized by the ORG — an org-wide member holding\n * `data.manage`, the org hub's own gate — and no visibility check is made,\n * because an org-wide member reads every row the org holds. The event\n * still goes to the deal's own capturing site, which is where the\n * automations that listen for it live; a deal no site captured has none to\n * tell. And the act is logged in the org's feed, since there is no one\n * site's feed it happened in.\n *\n * ## What it writes\n *\n * `stageId`, `status` (from the target stage's `kind`, never from the body),\n * `stageChangedAtMs`, `closedAtMs` (set on a close, cleared on a reopen) and\n * `lostReason` (kept on a loss, removed on anything else). A move to the\n * stage the deal is already in writes nothing and emits nothing — an\n * automation must not fire twice because a card was dropped where it was.\n *\n * ## A won deal makes its contact a customer (AGL-2641)\n *\n * A win is the same fact as a purchase — the business has decided this\n * person bought — and an order already floors a contact's lifecycle stage\n * at `customer` on capture. So the transition INTO `won` applies the same\n * floor to the contact the deal names, in the same write path, behind no\n * setting: `floorContactLifecycleStage` fills an empty stage or advances an\n * earlier one inside the facet of the site the deal was made on, and never\n * moves anybody back — a customer stays a customer, an evangelist an\n * evangelist. When the stage did move, `contactStageChanged` is announced\n * after `dealWon`, so an automation keyed on \"became a customer\" hears it,\n * and the org's activity line says so. A failure to write the contact does\n * not undo the win: the deal is already closed, and the response reports\n * `customer: null` rather than a 500 for a stage change that did happen.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  type CrmDeal,\n  type CrmPipeline,\n  dealStageById,\n  hostRoleFor,\n  hostScopeToken,\n  ORG_SCOPE_TOKEN,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  type ContactLifecycleFloor,\n  firebaseAdmin,\n  floorContactLifecycleStage,\n  getOrgForHost,\n  logOrgActivity,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { emitHostEvent } from '@aglyn/tenant-runtime'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  closingStage,\n  dealEventName,\n  dealEventPayload,\n} from './model/deal-board-model'\nimport { authorizeOrgCaller, readCrmRouteScope } from './server/org-caller'\nimport { crmSuiteRefusal } from './server/suite-gate'\n\n/** The most a lost reason may carry — a sentence or two, not a post-mortem. */\nexport const LOST_REASON_MAX = 500\n\nexport const crmDealStageHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n\n  const routeScope = readCrmRouteScope(req.body as Record<string, unknown>)\n  const dealId = String(req.body?.dealId ?? '').trim()\n  const stageId =\n    typeof req.body?.stageId === 'string' ? req.body.stageId.trim() : ''\n  const status = req.body?.status\n  const closing = status === 'won' || status === 'lost' ? status : null\n  const lostReason = String(req.body?.lostReason ?? '')\n    .trim()\n    .slice(0, LOST_REASON_MAX)\n  if (!routeScope || !dealId) {\n    return res.status(400).json({ error: 'Missing hostId or dealId' })\n  }\n  if (!stageId && !closing) {\n    return res.status(400).json({\n      error: 'Name a stageId to move to, or a status of won or lost.',\n    })\n  }\n\n  /*\n   * Who is calling, and the org whose deal it is. The site variant\n   * resolves the org from the site and the caller's role on it; the org\n   * variant is authorized by the org itself, and the site the body may\n   * name beside it is not consulted — the deal's own site, read off the\n   * document, is the one its event goes to.\n   */\n  let orgId: string\n  let org: Record<string, unknown>\n  let actor: { uid: string; email: string | null } | null = null\n  // Who moved the deal, at either level, for the runs it sets off (AGL-3376).\n  let eventActor: { uid: string; email: string | null }\n  if (routeScope.level === 'org') {\n    const caller = await authorizeOrgCaller(req, routeScope.orgId, {\n      needs: 'data.manage',\n      refusal:\n        'Moving a deal at the organization level requires the \"Manage data\" ' +\n        'permission across the whole workspace.',\n    })\n    if (caller.ok === false) {\n      return res.status(caller.status).json({ error: caller.error })\n    }\n    orgId = caller.orgId\n    org = caller.org as Record<string, unknown>\n    actor = { uid: caller.uid, email: caller.email }\n    eventActor = actor\n  } else {\n    const authorization = String(req.headers.authorization ?? '')\n    const idToken = authorization.startsWith('Bearer ')\n      ? authorization.slice('Bearer '.length)\n      : ''\n    if (!idToken) {\n      return res.status(401).json({ error: 'Unauthenticated' })\n    }\n    let uid: string\n    try {\n      const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n      uid = decoded.uid\n      eventActor = {\n        uid,\n        email: typeof decoded.email === 'string' ? decoded.email : null,\n      }\n    } catch (error) {\n      // A refused credential is the caller's 401; a failure to check one is\n      // ours and keeps a 5xx (AGL-2852).\n      if (isRefusedIdToken(error)) return res.status(401).json({ error: 'Unauthenticated' })\n      console.error('[crm] deal-stage could not verify the caller', error)\n      return res.status(500).json({ error: 'The sign-in could not be checked. Try again.' })\n    }\n\n    const owner = await getOrgForHost(routeScope.hostId).catch(() => null)\n    if (!owner) {\n      return res.status(404).json({\n        error: 'This site has no organization, so it has no deals.',\n      })\n    }\n    const membership = await resolveOrgMembership(uid, owner.orgId).catch(\n      () => null,\n    )\n    const member = membership?.member\n    const hostRole = hostRoleFor(member, routeScope.hostId)\n    if (!member || (hostRole !== 'admin' && hostRole !== 'editor')) {\n      return res.status(403).json({\n        error: 'Moving a deal needs an admin or editor role on this site.',\n      })\n    }\n    if (!(await memberHasOrgPermission(owner.orgId, member, 'data.manage'))) {\n      return res.status(403).json({\n        error: 'Moving a deal requires the \"Manage data\" permission.',\n      })\n    }\n    orgId = owner.orgId\n    org = owner.org as Record<string, unknown>\n  }\n\n  // Deals are the CRM suite's, at either level (AGL-2787).\n  const suite = crmSuiteRefusal(org, 'Moving a deal through its pipeline')\n  if (suite) return res.status(suite.status).json(suite.body)\n\n  const firestore = firebaseAdmin.app().firestore()\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const dealRef = orgRef.collection(CRM_COLLECTIONS.deals).doc(dealId)\n  const dealSnapshot = await dealRef.get()\n  if (!dealSnapshot.exists) {\n    return res.status(404).json({ error: 'Unknown deal' })\n  }\n  const deal = dealSnapshot.data() as CrmDeal\n\n  if (routeScope.level === 'site') {\n    const group = await consentGroupForSite(routeScope.hostId, org)\n    const readable = new Set<string>([\n      ORG_SCOPE_TOKEN,\n      ...group.hostIds.map(hostScopeToken),\n    ])\n    if (!(deal.visibleTo ?? []).some((token) => readable.has(token))) {\n      return res.status(403).json({ error: 'This deal is not visible to this site.' })\n    }\n  }\n\n  const pipelineSnapshot = await orgRef\n    .collection(CRM_COLLECTIONS.pipelines)\n    .doc(String(deal.pipelineId ?? ''))\n    .get()\n  if (!pipelineSnapshot.exists) {\n    return res.status(409).json({\n      error: \"This deal's pipeline no longer exists, so it has no stages to move to.\",\n    })\n  }\n  const pipeline = pipelineSnapshot.data() as CrmPipeline\n  const target = stageId\n    ? dealStageById(pipeline, stageId)\n    : closingStage(pipeline, closing as 'won' | 'lost')\n  if (!target) {\n    return res.status(400).json({\n      error: stageId\n        ? 'This pipeline has no such stage.'\n        : `This pipeline has no ${closing} stage.`,\n    })\n  }\n\n  const previousStageId = String(deal.stageId ?? '')\n  const nextStatus = target.kind\n  if (target.id === previousStageId && deal.status === nextStatus) {\n    return res.status(200).json({\n      ok: true,\n      dealId,\n      stageId: target.id,\n      status: nextStatus,\n      previousStageId,\n      event: null,\n    })\n  }\n\n  const nowMs = Date.now()\n  await dealRef.update({\n    stageId: target.id,\n    status: nextStatus,\n    stageChangedAtMs: nowMs,\n    closedAtMs: nextStatus === 'open' ? null : nowMs,\n    lostReason: nextStatus === 'lost' ? lostReason : FieldValue.delete(),\n    updatedAt: new Date(),\n  })\n\n  const event = dealEventName(nextStatus)\n  // The site whose automations hear the move: the mounted site, or at the\n  // organization level the deal's own — a deal no site captured has none.\n  const eventHostId =\n    routeScope.level === 'site' ? routeScope.hostId : String(deal.hostId ?? '').trim()\n\n  /*\n   * The customer floor, on the transition into `won` alone: a move between\n   * open stages, a loss and a reopen say nothing about whether the person\n   * bought. The facet written is the site's the deal was made on — under\n   * a site the mounted one, at the organization level the deal's own, and\n   * for a deal no site captured the person's own capturing site.\n   */\n  let customer: ContactLifecycleFloor | null = null\n  const contactId = String(deal.contactId ?? '').trim()\n  if (nextStatus === 'won' && contactId) {\n    customer = await floorContactLifecycleStage({\n      contactRef: orgRef.collection('contacts').doc(contactId),\n      org,\n      hostId: eventHostId || null,\n      floor: 'customer',\n    }).catch((error: unknown) => {\n      console.error('[crm] deal-stage: the customer floor failed', dealId, contactId, error)\n      return null\n    })\n  }\n  const becameCustomer = customer?.outcome === 'advanced'\n\n  if (eventHostId) {\n    await emitHostEvent(\n      eventHostId,\n      event,\n      dealEventPayload(\n        dealId,\n        {\n          ...deal,\n          stageId: target.id,\n          lostReason: nextStatus === 'lost' ? lostReason : undefined,\n        },\n        previousStageId,\n      ),\n      { actor: { kind: 'member', ...eventActor } },\n    )\n  }\n  if (customer?.outcome === 'advanced') {\n    // The stage change is the win's effect, announced after its cause, to\n    // the site whose facet moved — the same site as the win's, unless no\n    // site captured the deal and the person's own site holds the stage.\n    await emitHostEvent(\n      customer.hostId,\n      'contactStageChanged',\n      {\n        contactId: customer.contactId,\n        email: customer.email,\n        lifecycleStage: customer.lifecycleStage,\n        previousStage: customer.previousStage,\n      },\n      { actor: { kind: 'member', ...eventActor } },\n    )\n  }\n  if (actor) {\n    await logOrgActivity(\n      orgId,\n      actor,\n      nextStatus === 'won'\n        ? becameCustomer\n          ? 'Marked deal won — contact now a customer'\n          : 'Marked deal won'\n        : nextStatus === 'lost'\n          ? 'Marked deal lost'\n          : `Moved deal to ${target.name}`,\n      { type: 'deal', id: dealId, name: String(deal.title ?? '') },\n    )\n  }\n\n  return res.status(200).json({\n    ok: true,\n    dealId,\n    stageId: target.id,\n    status: nextStatus,\n    previousStageId,\n    event,\n    /*\n     * What the win did to the contact: the stage it now holds and whether\n     * this call raised it. `null` on anything but a win, on a deal that\n     * names no contact, and on a contact write that failed.\n     */\n    customer:\n      customer && (customer.outcome === 'advanced' || customer.outcome === 'held')\n        ? {\n            contactId: customer.contactId,\n            lifecycleStage: customer.lifecycleStage,\n            advanced: customer.outcome === 'advanced',\n          }\n        : null,\n  })\n}\n"],"names":["CRM_COLLECTIONS","dealStageById","hostRoleFor","hostScopeToken","ORG_SCOPE_TOKEN","consentGroupForSite","firebaseAdmin","floorContactLifecycleStage","getOrgForHost","logOrgActivity","memberHasOrgPermission","resolveOrgMembership","isRefusedIdToken","emitHostEvent","FieldValue","closingStage","dealEventName","dealEventPayload","authorizeOrgCaller","readCrmRouteScope","crmSuiteRefusal","LOST_REASON_MAX","crmDealStageHandler","req","res","deal","method","setHeader","status","json","error","routeScope","body","dealId","String","trim","stageId","closing","lostReason","slice","orgId","org","actor","eventActor","level","caller","needs","refusal","ok","uid","email","authorization","headers","idToken","startsWith","length","decoded","app","auth","verifyIdToken","console","owner","hostId","catch","membership","member","hostRole","suite","firestore","orgRef","collection","doc","dealRef","deals","dealSnapshot","get","exists","data","group","readable","Set","hostIds","map","visibleTo","some","token","has","pipelineSnapshot","pipelines","pipelineId","pipeline","target","previousStageId","nextStatus","kind","id","event","nowMs","Date","now","update","stageChangedAtMs","closedAtMs","delete","updatedAt","eventHostId","customer","contactId","contactRef","floor","becameCustomer","outcome","undefined","lifecycleStage","previousStage","name","type","title","advanced"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEC,GAED,SACEA,eAAe,EAGfC,aAAa,EACbC,WAAW,EACXC,cAAc,EACdC,eAAe,QAEV,sBAAqB;AAC5B,SACEC,mBAAmB,EAEnBC,aAAa,EACbC,0BAA0B,EAC1BC,aAAa,EACbC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,aAAa,QAAQ,wBAAuB;AACrD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,YAAY,EACZC,aAAa,EACbC,gBAAgB,QACX,8BAA0B;AACjC,SAASC,kBAAkB,EAAEC,iBAAiB,QAAQ,yBAAqB;AAC3E,SAASC,eAAe,QAAQ,yBAAqB;AAErD,6EAA6E,GAC7E,OAAO,MAAMC,kBAAkB,IAAG;AAElC,OAAO,MAAMC,sBAAwC,OAAOC,KAAKC;qBA6HjDC,kBAmBiBA,eA2B4BA,cAUlCA;QA9KHF,WAEbA,YACMA,YAEWA;IAX1B,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzBF,IAAIG,SAAS,CAAC,SAAS;QACvB,OAAOH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IAEA,MAAMC,aAAaZ,kBAAkBI,IAAIS,IAAI;IAC7C,MAAMC,SAASC,gBAAOX,YAAAA,IAAIS,IAAI,qBAART,UAAUU,MAAM,mBAAI,IAAIE,IAAI;IAClD,MAAMC,UACJ,SAAOb,aAAAA,IAAIS,IAAI,qBAART,WAAUa,OAAO,MAAK,WAAWb,IAAIS,IAAI,CAACI,OAAO,CAACD,IAAI,KAAK;IACpE,MAAMP,UAASL,aAAAA,IAAIS,IAAI,qBAART,WAAUK,MAAM;IAC/B,MAAMS,UAAUT,WAAW,SAASA,WAAW,SAASA,SAAS;IACjE,MAAMU,aAAaJ,iBAAOX,aAAAA,IAAIS,IAAI,qBAART,WAAUe,UAAU,oBAAI,IAC/CH,IAAI,GACJI,KAAK,CAAC,GAAGlB;IACZ,IAAI,CAACU,cAAc,CAACE,QAAQ;QAC1B,OAAOT,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2B;IAClE;IACA,IAAI,CAACM,WAAW,CAACC,SAAS;QACxB,OAAOb,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAO;QACT;IACF;IAEA;;;;;;GAMC,GACD,IAAIU;IACJ,IAAIC;IACJ,IAAIC,QAAsD;IAC1D,4EAA4E;IAC5E,IAAIC;IACJ,IAAIZ,WAAWa,KAAK,KAAK,OAAO;QAC9B,MAAMC,SAAS,MAAM3B,mBAAmBK,KAAKQ,WAAWS,KAAK,EAAE;YAC7DM,OAAO;YACPC,SACE,wEACA;QACJ;QACA,IAAIF,OAAOG,EAAE,KAAK,OAAO;YACvB,OAAOxB,IAAII,MAAM,CAACiB,OAAOjB,MAAM,EAAEC,IAAI,CAAC;gBAAEC,OAAOe,OAAOf,KAAK;YAAC;QAC9D;QACAU,QAAQK,OAAOL,KAAK;QACpBC,MAAMI,OAAOJ,GAAG;QAChBC,QAAQ;YAAEO,KAAKJ,OAAOI,GAAG;YAAEC,OAAOL,OAAOK,KAAK;QAAC;QAC/CP,aAAaD;IACf,OAAO;YACwBnB;QAA7B,MAAM4B,gBAAgBjB,QAAOX,6BAAAA,IAAI6B,OAAO,CAACD,aAAa,YAAzB5B,6BAA6B;QAC1D,MAAM8B,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcZ,KAAK,CAAC,UAAUgB,MAAM,IACpC;QACJ,IAAI,CAACF,SAAS;YACZ,OAAO7B,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;QACzD;QACA,IAAImB;QACJ,IAAI;YACF,MAAMO,UAAU,MAAMlD,cAAcmD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACN;YAC/DJ,MAAMO,QAAQP,GAAG;YACjBN,aAAa;gBACXM;gBACAC,OAAO,OAAOM,QAAQN,KAAK,KAAK,WAAWM,QAAQN,KAAK,GAAG;YAC7D;QACF,EAAE,OAAOpB,OAAO;YACd,sEAAsE;YACtE,mCAAmC;YACnC,IAAIlB,iBAAiBkB,QAAQ,OAAON,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkB;YACpF8B,QAAQ9B,KAAK,CAAC,gDAAgDA;YAC9D,OAAON,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+C;QACtF;QAEA,MAAM+B,QAAQ,MAAMrD,cAAcuB,WAAW+B,MAAM,EAAEC,KAAK,CAAC,IAAM;QACjE,IAAI,CAACF,OAAO;YACV,OAAOrC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,MAAMkC,aAAa,MAAMrD,qBAAqBsC,KAAKY,MAAMrB,KAAK,EAAEuB,KAAK,CACnE,IAAM;QAER,MAAME,SAASD,8BAAAA,WAAYC,MAAM;QACjC,MAAMC,WAAWhE,YAAY+D,QAAQlC,WAAW+B,MAAM;QACtD,IAAI,CAACG,UAAWC,aAAa,WAAWA,aAAa,UAAW;YAC9D,OAAO1C,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,IAAI,CAAE,MAAMpB,uBAAuBmD,MAAMrB,KAAK,EAAEyB,QAAQ,gBAAiB;YACvE,OAAOzC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACAU,QAAQqB,MAAMrB,KAAK;QACnBC,MAAMoB,MAAMpB,GAAG;IACjB;IAEA,yDAAyD;IACzD,MAAM0B,QAAQ/C,gBAAgBqB,KAAK;IACnC,IAAI0B,OAAO,OAAO3C,IAAII,MAAM,CAACuC,MAAMvC,MAAM,EAAEC,IAAI,CAACsC,MAAMnC,IAAI;IAE1D,MAAMoC,YAAY9D,cAAcmD,GAAG,GAAGW,SAAS;IAC/C,MAAMC,SAASD,UAAUE,UAAU,CAAC,QAAQC,GAAG,CAAC/B;IAChD,MAAMgC,UAAUH,OAAOC,UAAU,CAACtE,gBAAgByE,KAAK,EAAEF,GAAG,CAACtC;IAC7D,MAAMyC,eAAe,MAAMF,QAAQG,GAAG;IACtC,IAAI,CAACD,aAAaE,MAAM,EAAE;QACxB,OAAOpD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAe;IACtD;IACA,MAAML,OAAOiD,aAAaG,IAAI;IAE9B,IAAI9C,WAAWa,KAAK,KAAK,QAAQ;YAMzBnB;QALN,MAAMqD,QAAQ,MAAMzE,oBAAoB0B,WAAW+B,MAAM,EAAErB;QAC3D,MAAMsC,WAAW,IAAIC,IAAY;YAC/B5E;eACG0E,MAAMG,OAAO,CAACC,GAAG,CAAC/E;SACtB;QACD,IAAI,CAAC,EAACsB,kBAAAA,KAAK0D,SAAS,YAAd1D,kBAAkB,EAAE,EAAE2D,IAAI,CAAC,CAACC,QAAUN,SAASO,GAAG,CAACD,SAAS;YAChE,OAAO7D,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAyC;QAChF;IACF;IAEA,MAAMyD,mBAAmB,MAAMlB,OAC5BC,UAAU,CAACtE,gBAAgBwF,SAAS,EACpCjB,GAAG,CAACrC,QAAOT,mBAAAA,KAAKgE,UAAU,YAAfhE,mBAAmB,KAC9BkD,GAAG;IACN,IAAI,CAACY,iBAAiBX,MAAM,EAAE;QAC5B,OAAOpD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAO;QACT;IACF;IACA,MAAM4D,WAAWH,iBAAiBV,IAAI;IACtC,MAAMc,SAASvD,UACXnC,cAAcyF,UAAUtD,WACxBrB,aAAa2E,UAAUrD;IAC3B,IAAI,CAACsD,QAAQ;QACX,OAAOnE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OAAOM,UACH,qCACA,CAAC,qBAAqB,EAAEC,QAAQ,OAAO,CAAC;QAC9C;IACF;IAEA,MAAMuD,kBAAkB1D,QAAOT,gBAAAA,KAAKW,OAAO,YAAZX,gBAAgB;IAC/C,MAAMoE,aAAaF,OAAOG,IAAI;IAC9B,IAAIH,OAAOI,EAAE,KAAKH,mBAAmBnE,KAAKG,MAAM,KAAKiE,YAAY;QAC/D,OAAOrE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BmB,IAAI;YACJf;YACAG,SAASuD,OAAOI,EAAE;YAClBnE,QAAQiE;YACRD;YACAI,OAAO;QACT;IACF;IAEA,MAAMC,QAAQC,KAAKC,GAAG;IACtB,MAAM3B,QAAQ4B,MAAM,CAAC;QACnBhE,SAASuD,OAAOI,EAAE;QAClBnE,QAAQiE;QACRQ,kBAAkBJ;QAClBK,YAAYT,eAAe,SAAS,OAAOI;QAC3C3D,YAAYuD,eAAe,SAASvD,aAAaxB,WAAWyF,MAAM;QAClEC,WAAW,IAAIN;IACjB;IAEA,MAAMF,QAAQhF,cAAc6E;IAC5B,wEAAwE;IACxE,wEAAwE;IACxE,MAAMY,cACJ1E,WAAWa,KAAK,KAAK,SAASb,WAAW+B,MAAM,GAAG5B,QAAOT,eAAAA,KAAKqC,MAAM,YAAXrC,eAAe,IAAIU,IAAI;IAElF;;;;;;GAMC,GACD,IAAIuE,WAAyC;IAC7C,MAAMC,YAAYzE,QAAOT,kBAAAA,KAAKkF,SAAS,YAAdlF,kBAAkB,IAAIU,IAAI;IACnD,IAAI0D,eAAe,SAASc,WAAW;QACrCD,WAAW,MAAMnG,2BAA2B;YAC1CqG,YAAYvC,OAAOC,UAAU,CAAC,YAAYC,GAAG,CAACoC;YAC9ClE;YACAqB,QAAQ2C,eAAe;YACvBI,OAAO;QACT,GAAG9C,KAAK,CAAC,CAACjC;YACR8B,QAAQ9B,KAAK,CAAC,+CAA+CG,QAAQ0E,WAAW7E;YAChF,OAAO;QACT;IACF;IACA,MAAMgF,iBAAiBJ,CAAAA,4BAAAA,SAAUK,OAAO,MAAK;IAE7C,IAAIN,aAAa;QACf,MAAM5F,cACJ4F,aACAT,OACA/E,iBACEgB,QACA,aACKR;YACHW,SAASuD,OAAOI,EAAE;YAClBzD,YAAYuD,eAAe,SAASvD,aAAa0E;YAEnDpB,kBAEF;YAAElD,OAAO;gBAAEoD,MAAM;eAAanD;QAAa;IAE/C;IACA,IAAI+D,CAAAA,4BAAAA,SAAUK,OAAO,MAAK,YAAY;QACpC,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,MAAMlG,cACJ6F,SAAS5C,MAAM,EACf,uBACA;YACE6C,WAAWD,SAASC,SAAS;YAC7BzD,OAAOwD,SAASxD,KAAK;YACrB+D,gBAAgBP,SAASO,cAAc;YACvCC,eAAeR,SAASQ,aAAa;QACvC,GACA;YAAExE,OAAO;gBAAEoD,MAAM;eAAanD;QAAa;IAE/C;IACA,IAAID,OAAO;YAWkCjB;QAV3C,MAAMhB,eACJ+B,OACAE,OACAmD,eAAe,QACXiB,iBACE,6CACA,oBACFjB,eAAe,SACb,qBACA,CAAC,cAAc,EAAEF,OAAOwB,IAAI,EAAE,EACpC;YAAEC,MAAM;YAAQrB,IAAI9D;YAAQkF,MAAMjF,QAAOT,cAAAA,KAAK4F,KAAK,YAAV5F,cAAc;QAAI;IAE/D;IAEA,OAAOD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;QAC1BmB,IAAI;QACJf;QACAG,SAASuD,OAAOI,EAAE;QAClBnE,QAAQiE;QACRD;QACAI;QACA;;;;KAIC,GACDU,UACEA,YAAaA,CAAAA,SAASK,OAAO,KAAK,cAAcL,SAASK,OAAO,KAAK,MAAK,IACtE;YACEJ,WAAWD,SAASC,SAAS;YAC7BM,gBAAgBP,SAASO,cAAc;YACvCK,UAAUZ,SAASK,OAAO,KAAK;QACjC,IACA;IACR;AACF,EAAC"}

package/src/lib/server.js

@@ -73,6 +73,7 @@ import { crmLeadsImportHandler } from "./server/leads-import.js";
 import { crmTasksImportHandler } from "./server/tasks-import.js";
 import { crmDealStageHandler } from "./server-deal-stage.js";
 import { crmEmailSendHandler } from "./server/email-send.js";
+import { CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler } from "./server/email-check.js";
 import { leadConvertHandler } from "./server/lead-convert.js";
 import { leadCreateHandler } from "./server/lead-create.js";
 import { CONTACT_EMAIL_HISTORY_ROUTE, contactEmailHistoryHandler } from "./server/contact-email-history.js";
@@ -126,8 +127,11 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
         error: 'Unauthenticated'
     };
     let uid;
+    let email;
     try {
-        uid = (await firebaseAdmin.app().auth().verifyIdToken(idToken)).uid;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        uid = decoded.uid;
+        email = typeof decoded.email === 'string' ? decoded.email : null;
     } catch (error) {
         // A refused credential is the caller's 401; a failure to check one is
         // ours and keeps a 5xx (AGL-2852).
@@ -161,7 +165,8 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
     }
     return {
         ok: true,
-        uid
+        uid,
+        email
     };
 }
 /**
@@ -272,6 +277,12 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
                 email: String((_snapshot_get = snapshot.get('email')) != null ? _snapshot_get : ''),
                 lifecycleStage,
                 previousStage
+            }, {
+                actor: {
+                    kind: 'member',
+                    uid: caller.uid,
+                    email: caller.email
+                }
             });
         }
         res.status(200).json({
@@ -461,6 +472,11 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
             interaction: {
                 summary: 'Added by hand'
             },
+            actor: {
+                kind: 'member',
+                uid: decoded.uid,
+                email: typeof decoded.email === 'string' ? decoded.email : null
+            },
             marketingConsent
         }, marketingConsent && disclosedConsentGroup ? {
             disclosedConsentGroup
@@ -613,6 +629,11 @@ import { CRM_RECIPE_INSTALL_ROUTE, CRM_RECIPE_STATUS_ROUTE, crmRecipeInstallHand
     // read off the record, the daily cap and both suppression lists are
     // judged, and the message leaves on the site's sending identity.
     registerPluginApiRoute(CRM_API_ROUTES.emailSend, crmEmailSendHandler);
+    // What the platform knows about one address before somebody writes to it
+    // (AGL-3328): the gateway chip on a record page, and the composer's
+    // warning about a domain with no mail server or a gateway holding this
+    // site's mail. DNS and the ledger are the server's.
+    registerPluginApiRoute(CRM_EMAIL_CHECK_ROUTE, crmEmailCheckHandler);
     // Two records for one person become one (AGL-2625): the repoint of every
     // row naming the merged record and the transaction over both documents
     // are the server's, and the address index it writes is closed to clients.