@aglyn/plugins-crm 1.0.0-beta.217 → 1.0.0-beta.219

package/src/lib/server/api-v1/crm-companies.js

@@ -0,0 +1,391 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * `/v1/companies` (AGL-2606) — the organizations behind the people.
+ *
+ * A company is keyed, in practice, by its domain: two contacts at
+ * `example.com` work for one company, and the console's auto-association
+ * (`companyDomainForEmail`) files them under it by that string. So the
+ * domain is normalized exactly as the console stores it, a second company on
+ * a domain already held is a `409 company_exists` naming the first — the
+ * contact create's own rule for a second row on one email — and `?domain=`
+ * is the lookup a sync starts with.
+ */ import { nameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
+import { CRM_COLLECTIONS, CRM_MEDIA_IDS_MAX, createResourceUid, crmNewRecordListFields, normalizeAddress, normalizeCompanyDomain, normalizeCrmMediaIds, normalizePhone } from "@aglyn/aglyn/server";
+import { apiJson, ApiErrors, restampCrmListFieldsAt } from "@aglyn/tenant-data-admin";
+import { Timestamp } from "firebase-admin/firestore";
+import { claimWrite, readJsonBody, requireScope } from "@aglyn/tenant-data-admin/server/api-v1-kit";
+import { CRM_LABEL_MAX, CRM_TEXT_MAX, CRM_TITLE_MAX, createPayload, crmCollection, crmCreateStamp, crmCustomUpdate, crmCustomView, crmRecordsBandRefusal, crmTimes, crmValidationFailed, isoFromMs, listCrm, memberError, readCrmCustomBody, readCrmSite, readEqualityFilters, readOptionalText, refuseUnknownKeys, updatePayload } from "./crm-shared.js";
+/** The company object as published. Every writable field appears here. */ function companyView(doc) {
+    var _doc_data, _data_name, _data_domain, _data_website, _data_phone, _data_address, _data_industry, _data_ownerUid, _data_notes, _data_hostId;
+    const data = (_doc_data = doc.data()) != null ? _doc_data : {};
+    return _extends({
+        id: doc.id,
+        object: 'company',
+        name: (_data_name = data.name) != null ? _data_name : null,
+        domain: (_data_domain = data.domain) != null ? _data_domain : null,
+        website: (_data_website = data.website) != null ? _data_website : null,
+        phone: (_data_phone = data.phone) != null ? _data_phone : null,
+        address: (_data_address = data.address) != null ? _data_address : null,
+        industry: (_data_industry = data.industry) != null ? _data_industry : null,
+        ownerUid: (_data_ownerUid = data.ownerUid) != null ? _data_ownerUid : null,
+        notes: (_data_notes = data.notes) != null ? _data_notes : null,
+        // The org's company custom fields, keyed by field key (AGL-2661).
+        custom: crmCustomView(data),
+        // When the earliest open task against the company is due — see
+        // `CrmDeal.nextTaskAtMs`. Read-only: the tasks resource maintains it.
+        nextTaskAt: isoFromMs(data.nextTaskAtMs),
+        mediaIds: normalizeCrmMediaIds(data.mediaIds),
+        siteId: (_data_hostId = data.hostId) != null ? _data_hostId : null
+    }, crmTimes(data));
+}
+const COMPANY_WRITABLE = new Set([
+    'name',
+    'domain',
+    'website',
+    'phone',
+    'address',
+    'industry',
+    'ownerUid',
+    'notes',
+    'custom',
+    'mediaIds'
+]);
+/**
+ * The writable half of a company, validated. `partial` separates PATCH from
+ * POST as every reader in this API does: a create needs a name, an update
+ * may send one field alone. Unknown keys are named, never dropped.
+ *
+ * `domain` and `phone` go through the console's own normalizers so the API
+ * cannot store a value the console would never have written, and a value
+ * that does not survive normalization names the field rather than storing
+ * the raw string — a raw domain would never match the auto-association, and
+ * a raw phone is the unusable half-number `normalizePhone` exists to end.
+ */ function readCompanyInput(body, { partial }) {
+    const errors = {};
+    const values = {};
+    const allowed = new Set(COMPANY_WRITABLE);
+    if (!partial) allowed.add('consentSiteId');
+    refuseUnknownKeys(body, allowed, 'company', errors);
+    if (body.name !== undefined || !partial) {
+        var _body_name;
+        const name = String((_body_name = body.name) != null ? _body_name : '').trim().slice(0, CRM_TITLE_MAX);
+        if (name) values.name = name;
+        else errors.name = partial ? 'Must not be empty' : 'A name is required';
+    }
+    if (body.mediaIds !== undefined) {
+        if (!Array.isArray(body.mediaIds)) {
+            errors.mediaIds = 'Must be an array of media ids';
+        } else if (body.mediaIds.length > CRM_MEDIA_IDS_MAX) {
+            errors.mediaIds = `At most ${CRM_MEDIA_IDS_MAX} files may be attached`;
+        } else {
+            // The SAME normalizer the console card writes through, so the API
+            // cannot store a list the console would refuse. An empty array is
+            // legal and clears the attachments.
+            values.mediaIds = normalizeCrmMediaIds(body.mediaIds);
+        }
+    }
+    const domain = readOptionalText(body, 'domain', CRM_TITLE_MAX, errors);
+    if (domain) {
+        const normalized = normalizeCompanyDomain(domain);
+        if (normalized) values.domain = normalized;
+        else errors.domain = 'Must be a domain name, like example.com';
+    } else if (domain === null) {
+        values.domain = null;
+    }
+    const website = readOptionalText(body, 'website', CRM_TITLE_MAX * 4, errors);
+    if (website) {
+        // A bare `example.com` is what people paste; stored with the scheme so the
+        // console can render it as a link without guessing one.
+        const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(website) ? website : `https://${website}`;
+        let parsed;
+        try {
+            parsed = new URL(withScheme);
+        } catch (unused) {
+            parsed = null;
+        }
+        if (parsed && /^https?:$/.test(parsed.protocol) && normalizeCompanyDomain(parsed.hostname)) {
+            values.website = parsed.toString();
+        } else {
+            errors.website = 'Must be a web address, like https://example.com';
+        }
+    } else if (website === null) {
+        values.website = null;
+    }
+    const phone = readOptionalText(body, 'phone', CRM_LABEL_MAX, errors);
+    if (phone) {
+        const normalized = normalizePhone(phone);
+        if (normalized) values.phone = normalized;
+        else errors.phone = 'Must be a phone number with a country code, like +15125550123';
+    } else if (phone === null) {
+        values.phone = null;
+    }
+    if (body.address !== undefined) {
+        if (body.address === null) {
+            values.address = null;
+        } else if (typeof body.address !== 'object' || Array.isArray(body.address)) {
+            errors.address = 'Must be an address object';
+        } else {
+            // A blank address normalizes to `null`, which clears — an object of
+            // empty strings must not read as "has an address".
+            values.address = normalizeAddress(body.address);
+        }
+    }
+    const industry = readOptionalText(body, 'industry', CRM_LABEL_MAX, errors);
+    if (industry !== undefined) values.industry = industry;
+    const ownerUid = readOptionalText(body, 'ownerUid', CRM_LABEL_MAX, errors);
+    if (ownerUid !== undefined) values.ownerUid = ownerUid;
+    const notes = readOptionalText(body, 'notes', CRM_TEXT_MAX, errors);
+    if (notes !== undefined) values.notes = notes;
+    // `custom` is shape-checked here and judged against the org's
+    // definitions by the writers, which is where the read is paid.
+    if (body.custom !== undefined) {
+        if (!body.custom || typeof body.custom !== 'object' || Array.isArray(body.custom)) {
+            errors.custom = 'Must be an object of field values keyed by field key';
+        }
+    }
+    return Object.keys(errors).length ? {
+        errors
+    } : {
+        values
+    };
+}
+/**
+ * `POST /v1/companies`. Claimed first and released on the duplicate, the
+ * ordering `createContact` argues for: a refusal that clears when the
+ * duplicate is removed must not burn the key the retry will carry.
+ */ async function createCompany(request, ctx) {
+    const body = await readJsonBody(request);
+    const parsed = readCompanyInput(body, {
+        partial: false
+    });
+    if ('errors' in parsed) return crmValidationFailed(ctx, 'company', parsed.errors);
+    const site = readCrmSite(ctx, 'company', body);
+    if ('response' in site) return site.response;
+    const owner = await memberError(ctx, 'ownerUid', parsed.values.ownerUid);
+    if (Object.keys(owner).length) return crmValidationFailed(ctx, 'company', owner);
+    // Judged against the org's company definitions, above the claim like
+    // every other deterministic 400 (AGL-2661).
+    const custom = await readCrmCustomBody(ctx, body, 'company');
+    if (custom && 'errors' in custom) return crmValidationFailed(ctx, 'company', custom.errors);
+    const customValues = custom && 'values' in custom ? custom.values : {};
+    const collection = crmCollection(ctx, CRM_COLLECTIONS.companies);
+    const claimed = await claimWrite(ctx, '*', request.headers.get('Idempotency-Key'), 'companies');
+    if ('replay' in claimed) return claimed.replay;
+    const { claim } = claimed;
+    try {
+        const _parsed_values = parsed.values, { name, domain } = _parsed_values, rest = _object_without_properties_loose(_parsed_values, [
+            "name",
+            "domain"
+        ]);
+        if (domain) {
+            const existing = await collection.where('domain', '==', domain).limit(1).get();
+            if (!existing.empty) {
+                await claim.release();
+                return ApiErrors.conflict({
+                    message: `A company with this domain already exists (${existing.docs[0].id}). Update it instead.`,
+                    code: 'company_exists',
+                    headers: ctx.headers
+                });
+            }
+        }
+        // The records band (AGL-2611), after the duplicate check for the reason
+        // the claim ordering gives: a refusal that clears when the band is raised
+        // must not burn the key the retry will carry.
+        const bandFull = await crmRecordsBandRefusal(ctx);
+        if (bandFull) {
+            await claim.release();
+            return bandFull;
+        }
+        const id = createResourceUid();
+        const record = _extends({}, nameSearchFields(name != null ? name : ''), createPayload(_extends({
+            domain
+        }, rest)), Object.keys(customValues).length ? {
+            custom: createPayload(customValues)
+        } : {}, crmCreateStamp(ctx, site.siteId));
+        // What the console's Companies list searches and filters by (AGL-3321).
+        await collection.doc(id).create(_extends({}, record, crmNewRecordListFields('companies', record)));
+        const view = companyView(await collection.doc(id).get());
+        // Stored as 200 so a replay is distinguishable from the fresh 201.
+        await claim.record(200, view);
+        return apiJson(view, {
+            status: 201,
+            headers: ctx.headers
+        });
+    } catch (error) {
+        await claim.release();
+        throw error;
+    }
+}
+/** `PATCH /v1/companies/{id}` — no key, for `updateContact`'s reason. */ async function updateCompany(request, ctx, ref) {
+    const body = await readJsonBody(request);
+    const parsed = readCompanyInput(body, {
+        partial: true
+    });
+    if ('errors' in parsed) return crmValidationFailed(ctx, 'company', parsed.errors);
+    const snap = await ref.get();
+    if (!snap.exists) {
+        return ApiErrors.notFound({
+            message: 'No such company',
+            headers: ctx.headers
+        });
+    }
+    const owner = await memberError(ctx, 'ownerUid', parsed.values.ownerUid);
+    if (Object.keys(owner).length) return crmValidationFailed(ctx, 'company', owner);
+    const custom = await readCrmCustomBody(ctx, body, 'company');
+    if (custom && 'errors' in custom) return crmValidationFailed(ctx, 'company', custom.errors);
+    const _parsed_values = parsed.values, { name, domain } = _parsed_values, rest = _object_without_properties_loose(_parsed_values, [
+        "name",
+        "domain"
+    ]);
+    if (domain && domain !== snap.get('domain')) {
+        const existing = await ref.parent.where('domain', '==', domain).limit(1).get();
+        if (!existing.empty && existing.docs[0].id !== ref.id) {
+            return ApiErrors.conflict({
+                message: `A company with this domain already exists (${existing.docs[0].id}).`,
+                code: 'company_exists',
+                headers: ctx.headers
+            });
+        }
+    }
+    const update = _extends({}, name !== undefined ? nameSearchFields(name) : {}, updatePayload(_extends({
+        domain
+    }, rest)), custom && 'values' in custom ? crmCustomUpdate(custom.values) : {});
+    // An empty body is a no-op answered with the current company.
+    if (Object.keys(update).length > 0) {
+        await ref.update(_extends({}, update, {
+            updatedAt: Timestamp.now()
+        }));
+        // What the console's Companies list searches (AGL-3321).
+        await restampCrmListFieldsAt(ref, 'companies');
+    }
+    return apiJson(companyView(await ref.get()), {
+        headers: ctx.headers
+    });
+}
+/**
+ * `DELETE /v1/companies/{id}` — the company alone. The deals, tasks and
+ * activities filed against it keep their `companyId`; they are records of
+ * their own, and a delete that cascaded through them would erase a sales
+ * history because somebody removed a duplicate account.
+ */ async function deleteCompany(request, ctx, ref) {
+    const claimed = await claimWrite(ctx, '*', request.headers.get('Idempotency-Key'), 'company-deletes');
+    if ('replay' in claimed) return claimed.replay;
+    const { claim } = claimed;
+    try {
+        const snap = await ref.get();
+        if (!snap.exists) {
+            await claim.release();
+            return ApiErrors.notFound({
+                message: 'No such company',
+                headers: ctx.headers
+            });
+        }
+        await ref.delete();
+        const view = {
+            id: ref.id,
+            object: 'company',
+            deleted: true
+        };
+        await claim.record(200, view);
+        return apiJson(view, {
+            headers: ctx.headers
+        });
+    } catch (error) {
+        await claim.release();
+        throw error;
+    }
+}
+/**
+ * `GET /v1/companies` filters. `domain` is normalized exactly as the write
+ * stores it, so `?domain=https://www.Example.com/about` finds `example.com`; a
+ * value that is not a domain at all is a `400`, not an empty page, for the
+ * reason `listContacts` gives about `?email=`.
+ */ async function listCompanies(ctx, collection, url) {
+    const rawDomain = url.searchParams.get('domain');
+    const filters = readEqualityFilters(url, [
+        'ownerUid'
+    ]);
+    if (rawDomain !== null && rawDomain.trim() !== '') {
+        const domain = normalizeCompanyDomain(rawDomain);
+        if (!domain) {
+            return crmValidationFailed(ctx, 'company filter', {
+                domain: 'Must be a domain name, like example.com'
+            });
+        }
+        // The domain is unique, so it is the clause that goes to Firestore.
+        filters.unshift({
+            field: 'domain',
+            value: domain
+        });
+    }
+    return listCrm(ctx, collection, url, filters, companyView);
+}
+export async function handleCompanies(request, ctx, segments, url) {
+    const collection = crmCollection(ctx, CRM_COLLECTIONS.companies);
+    const [, companyId] = segments;
+    if (!companyId) {
+        if (request.method === 'GET') {
+            const denied = requireScope(ctx, 'crm:read');
+            if (denied) return denied;
+            return listCompanies(ctx, collection, url);
+        }
+        if (request.method === 'POST') {
+            const denied = requireScope(ctx, 'crm:write');
+            if (denied) return denied;
+            return createCompany(request, ctx);
+        }
+        return ApiErrors.methodNotAllowed({
+            headers: _extends({}, ctx.headers, {
+                Allow: 'GET, POST'
+            })
+        });
+    }
+    const ref = collection.doc(companyId);
+    if (request.method === 'GET') {
+        const denied = requireScope(ctx, 'crm:read');
+        if (denied) return denied;
+        const snap = await ref.get();
+        if (!snap.exists) {
+            return ApiErrors.notFound({
+                message: 'No such company',
+                headers: ctx.headers
+            });
+        }
+        return apiJson(companyView(snap), {
+            headers: ctx.headers
+        });
+    }
+    if (request.method === 'PATCH') {
+        const denied = requireScope(ctx, 'crm:write');
+        if (denied) return denied;
+        return updateCompany(request, ctx, ref);
+    }
+    if (request.method === 'DELETE') {
+        const denied = requireScope(ctx, 'crm:write');
+        if (denied) return denied;
+        return deleteCompany(request, ctx, ref);
+    }
+    return ApiErrors.methodNotAllowed({
+        headers: _extends({}, ctx.headers, {
+            Allow: 'GET, PATCH, DELETE'
+        })
+    });
+}
+
+//# sourceMappingURL=crm-companies.js.map

package/src/lib/server/api-v1/crm-companies.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/plugins/crm/src/lib/server/api-v1/crm-companies.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `/v1/companies` (AGL-2606) — the organizations behind the people.\n *\n * A company is keyed, in practice, by its domain: two contacts at\n * `example.com` work for one company, and the console's auto-association\n * (`companyDomainForEmail`) files them under it by that string. So the\n * domain is normalized exactly as the console stores it, a second company on\n * a domain already held is a `409 company_exists` naming the first — the\n * contact create's own rule for a second row on one email — and `?domain=`\n * is the lookup a sync starts with.\n */\nimport { nameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  CRM_COLLECTIONS,\n  CRM_MEDIA_IDS_MAX,\n  createResourceUid,\n  crmNewRecordListFields,\n  normalizeAddress,\n  normalizeCompanyDomain,\n  normalizeCrmMediaIds,\n  normalizePhone,\n} from '@aglyn/aglyn/server'\nimport { apiJson, ApiErrors, restampCrmListFieldsAt } from '@aglyn/tenant-data-admin'\nimport { Timestamp } from 'firebase-admin/firestore'\nimport {\n  type ApiV1Context,\n  claimWrite,\n  readJsonBody,\n  requireScope,\n} from '@aglyn/tenant-data-admin/server/api-v1-kit'\nimport {\n  type Clearable,\n  CRM_LABEL_MAX,\n  CRM_TEXT_MAX,\n  CRM_TITLE_MAX,\n  createPayload,\n  crmCollection,\n  crmCreateStamp,\n  crmCustomUpdate,\n  crmCustomView,\n  crmRecordsBandRefusal,\n  crmTimes,\n  crmValidationFailed,\n  isoFromMs,\n  listCrm,\n  memberError,\n  readCrmCustomBody,\n  readCrmSite,\n  readEqualityFilters,\n  readOptionalText,\n  refuseUnknownKeys,\n  updatePayload,\n} from './crm-shared'\n\n/** The company object as published. Every writable field appears here. */\nfunction companyView(doc: FirebaseFirestore.DocumentSnapshot) {\n  const data = doc.data() ?? {}\n  return {\n    id: doc.id,\n    object: 'company',\n    name: data.name ?? null,\n    domain: data.domain ?? null,\n    website: data.website ?? null,\n    phone: data.phone ?? null,\n    address: data.address ?? null,\n    industry: data.industry ?? null,\n    ownerUid: data.ownerUid ?? null,\n    notes: data.notes ?? null,\n    // The org's company custom fields, keyed by field key (AGL-2661).\n    custom: crmCustomView(data),\n    // When the earliest open task against the company is due — see\n    // `CrmDeal.nextTaskAtMs`. Read-only: the tasks resource maintains it.\n    nextTaskAt: isoFromMs(data.nextTaskAtMs),\n    mediaIds: normalizeCrmMediaIds(data.mediaIds),\n    siteId: data.hostId ?? null,\n    ...crmTimes(data),\n  }\n}\n\nconst COMPANY_WRITABLE = new Set([\n  'name',\n  'domain',\n  'website',\n  'phone',\n  'address',\n  'industry',\n  'ownerUid',\n  'notes',\n  'custom',\n  'mediaIds',\n])\n\ninterface CompanyInput {\n  name?: string\n  domain?: Clearable<string>\n  website?: Clearable<string>\n  phone?: Clearable<string>\n  address?: Clearable<ReturnType<typeof normalizeAddress>>\n  industry?: Clearable<string>\n  ownerUid?: Clearable<string>\n  notes?: Clearable<string>\n  /** Org-library files attached to the company (AGL-2662), by media id. */\n  mediaIds?: string[]\n}\n\n/**\n * The writable half of a company, validated. `partial` separates PATCH from\n * POST as every reader in this API does: a create needs a name, an update\n * may send one field alone. Unknown keys are named, never dropped.\n *\n * `domain` and `phone` go through the console's own normalizers so the API\n * cannot store a value the console would never have written, and a value\n * that does not survive normalization names the field rather than storing\n * the raw string — a raw domain would never match the auto-association, and\n * a raw phone is the unusable half-number `normalizePhone` exists to end.\n */\nfunction readCompanyInput(\n  body: Record<string, unknown>,\n  { partial }: { partial: boolean },\n): { values: CompanyInput } | { errors: Record<string, string> } {\n  const errors: Record<string, string> = {}\n  const values: CompanyInput = {}\n  const allowed = new Set(COMPANY_WRITABLE)\n  if (!partial) allowed.add('consentSiteId')\n  refuseUnknownKeys(body, allowed, 'company', errors)\n\n  if (body.name !== undefined || !partial) {\n    const name = String(body.name ?? '')\n      .trim()\n      .slice(0, CRM_TITLE_MAX)\n    if (name) values.name = name\n    else errors.name = partial ? 'Must not be empty' : 'A name is required'\n  }\n\n\n  if (body.mediaIds !== undefined) {\n    if (!Array.isArray(body.mediaIds)) {\n      errors.mediaIds = 'Must be an array of media ids'\n    } else if (body.mediaIds.length > CRM_MEDIA_IDS_MAX) {\n      errors.mediaIds = `At most ${CRM_MEDIA_IDS_MAX} files may be attached`\n    } else {\n      // The SAME normalizer the console card writes through, so the API\n      // cannot store a list the console would refuse. An empty array is\n      // legal and clears the attachments.\n      values.mediaIds = normalizeCrmMediaIds(body.mediaIds)\n    }\n  }\n\n  const domain = readOptionalText(body, 'domain', CRM_TITLE_MAX, errors)\n  if (domain) {\n    const normalized = normalizeCompanyDomain(domain)\n    if (normalized) values.domain = normalized\n    else errors.domain = 'Must be a domain name, like example.com'\n  } else if (domain === null) {\n    values.domain = null\n  }\n\n  const website = readOptionalText(body, 'website', CRM_TITLE_MAX * 4, errors)\n  if (website) {\n    // A bare `example.com` is what people paste; stored with the scheme so the\n    // console can render it as a link without guessing one.\n    const withScheme = /^[a-z][a-z0-9+.-]*:\\/\\//i.test(website)\n      ? website\n      : `https://${website}`\n    let parsed: URL | null\n    try {\n      parsed = new URL(withScheme)\n    } catch {\n      parsed = null\n    }\n    if (parsed && /^https?:$/.test(parsed.protocol) && normalizeCompanyDomain(parsed.hostname)) {\n      values.website = parsed.toString()\n    } else {\n      errors.website = 'Must be a web address, like https://example.com'\n    }\n  } else if (website === null) {\n    values.website = null\n  }\n\n  const phone = readOptionalText(body, 'phone', CRM_LABEL_MAX, errors)\n  if (phone) {\n    const normalized = normalizePhone(phone)\n    if (normalized) values.phone = normalized\n    else errors.phone = 'Must be a phone number with a country code, like +15125550123'\n  } else if (phone === null) {\n    values.phone = null\n  }\n\n  if (body.address !== undefined) {\n    if (body.address === null) {\n      values.address = null\n    } else if (typeof body.address !== 'object' || Array.isArray(body.address)) {\n      errors.address = 'Must be an address object'\n    } else {\n      // A blank address normalizes to `null`, which clears — an object of\n      // empty strings must not read as \"has an address\".\n      values.address = normalizeAddress(body.address as never)\n    }\n  }\n\n  const industry = readOptionalText(body, 'industry', CRM_LABEL_MAX, errors)\n  if (industry !== undefined) values.industry = industry\n\n  const ownerUid = readOptionalText(body, 'ownerUid', CRM_LABEL_MAX, errors)\n  if (ownerUid !== undefined) values.ownerUid = ownerUid\n\n  const notes = readOptionalText(body, 'notes', CRM_TEXT_MAX, errors)\n  if (notes !== undefined) values.notes = notes\n\n  // `custom` is shape-checked here and judged against the org's\n  // definitions by the writers, which is where the read is paid.\n  if (body.custom !== undefined) {\n    if (!body.custom || typeof body.custom !== 'object' || Array.isArray(body.custom)) {\n      errors.custom = 'Must be an object of field values keyed by field key'\n    }\n  }\n\n  return Object.keys(errors).length ? { errors } : { values }\n}\n\n/**\n * `POST /v1/companies`. Claimed first and released on the duplicate, the\n * ordering `createContact` argues for: a refusal that clears when the\n * duplicate is removed must not burn the key the retry will carry.\n */\nasync function createCompany(\n  request: Request,\n  ctx: ApiV1Context,\n): Promise<Response> {\n  const body = await readJsonBody(request)\n  const parsed = readCompanyInput(body, { partial: false })\n  if ('errors' in parsed) return crmValidationFailed(ctx, 'company', parsed.errors)\n  const site = readCrmSite(ctx, 'company', body)\n  if ('response' in site) return site.response\n  const owner = await memberError(ctx, 'ownerUid', parsed.values.ownerUid)\n  if (Object.keys(owner).length) return crmValidationFailed(ctx, 'company', owner)\n  // Judged against the org's company definitions, above the claim like\n  // every other deterministic 400 (AGL-2661).\n  const custom = await readCrmCustomBody(ctx, body, 'company')\n  if (custom && 'errors' in custom) return crmValidationFailed(ctx, 'company', custom.errors)\n  const customValues = custom && 'values' in custom ? custom.values : {}\n\n  const collection = crmCollection(ctx, CRM_COLLECTIONS.companies)\n  const claimed = await claimWrite(\n    ctx,\n    '*',\n    request.headers.get('Idempotency-Key'),\n    'companies',\n  )\n  if ('replay' in claimed) return claimed.replay\n  const { claim } = claimed\n\n  try {\n    const { name, domain, ...rest } = parsed.values\n    if (domain) {\n      const existing = await collection.where('domain', '==', domain).limit(1).get()\n      if (!existing.empty) {\n        await claim.release()\n        return ApiErrors.conflict({\n          message: `A company with this domain already exists (${existing.docs[0].id}). Update it instead.`,\n          code: 'company_exists',\n          headers: ctx.headers,\n        })\n      }\n    }\n    // The records band (AGL-2611), after the duplicate check for the reason\n    // the claim ordering gives: a refusal that clears when the band is raised\n    // must not burn the key the retry will carry.\n    const bandFull = await crmRecordsBandRefusal(ctx)\n    if (bandFull) {\n      await claim.release()\n      return bandFull\n    }\n    const id = createResourceUid()\n    const record: Record<string, unknown> = {\n      // `nameLower`/`nameTokens` travel with the name: the console's company\n      // list searches the collection, not the page it fetched.\n      ...nameSearchFields(name ?? ''),\n      ...createPayload({ domain, ...rest }),\n      // An empty map writes no `custom` key at all; a `null` inside one is\n      // an explicit clear a fresh record has no use for.\n      ...(Object.keys(customValues).length\n        ? { custom: createPayload(customValues) }\n        : {}),\n      ...crmCreateStamp(ctx, site.siteId),\n    }\n    // What the console's Companies list searches and filters by (AGL-3321).\n    await collection.doc(id).create({ ...record, ...crmNewRecordListFields('companies', record) })\n    const view = companyView(await collection.doc(id).get())\n    // Stored as 200 so a replay is distinguishable from the fresh 201.\n    await claim.record(200, view)\n    return apiJson(view, { status: 201, headers: ctx.headers })\n  } catch (error) {\n    await claim.release()\n    throw error\n  }\n}\n\n/** `PATCH /v1/companies/{id}` — no key, for `updateContact`'s reason. */\nasync function updateCompany(\n  request: Request,\n  ctx: ApiV1Context,\n  ref: FirebaseFirestore.DocumentReference,\n): Promise<Response> {\n  const body = await readJsonBody(request)\n  const parsed = readCompanyInput(body, { partial: true })\n  if ('errors' in parsed) return crmValidationFailed(ctx, 'company', parsed.errors)\n  const snap = await ref.get()\n  if (!snap.exists) {\n    return ApiErrors.notFound({ message: 'No such company', headers: ctx.headers })\n  }\n  const owner = await memberError(ctx, 'ownerUid', parsed.values.ownerUid)\n  if (Object.keys(owner).length) return crmValidationFailed(ctx, 'company', owner)\n  const custom = await readCrmCustomBody(ctx, body, 'company')\n  if (custom && 'errors' in custom) return crmValidationFailed(ctx, 'company', custom.errors)\n\n  const { name, domain, ...rest } = parsed.values\n  if (domain && domain !== snap.get('domain')) {\n    const existing = await ref.parent.where('domain', '==', domain).limit(1).get()\n    if (!existing.empty && existing.docs[0].id !== ref.id) {\n      return ApiErrors.conflict({\n        message: `A company with this domain already exists (${existing.docs[0].id}).`,\n        code: 'company_exists',\n        headers: ctx.headers,\n      })\n    }\n  }\n  const update: Record<string, unknown> = {\n    ...(name !== undefined ? nameSearchFields(name) : {}),\n    ...updatePayload({ domain, ...rest }),\n    ...(custom && 'values' in custom ? crmCustomUpdate(custom.values) : {}),\n  }\n  // An empty body is a no-op answered with the current company.\n  if (Object.keys(update).length > 0) {\n    await ref.update({ ...update, updatedAt: Timestamp.now() })\n    // What the console's Companies list searches (AGL-3321).\n    await restampCrmListFieldsAt(ref, 'companies')\n  }\n  return apiJson(companyView(await ref.get()), { headers: ctx.headers })\n}\n\n/**\n * `DELETE /v1/companies/{id}` — the company alone. The deals, tasks and\n * activities filed against it keep their `companyId`; they are records of\n * their own, and a delete that cascaded through them would erase a sales\n * history because somebody removed a duplicate account.\n */\nasync function deleteCompany(\n  request: Request,\n  ctx: ApiV1Context,\n  ref: FirebaseFirestore.DocumentReference,\n): Promise<Response> {\n  const claimed = await claimWrite(\n    ctx,\n    '*',\n    request.headers.get('Idempotency-Key'),\n    'company-deletes',\n  )\n  if ('replay' in claimed) return claimed.replay\n  const { claim } = claimed\n  try {\n    const snap = await ref.get()\n    if (!snap.exists) {\n      await claim.release()\n      return ApiErrors.notFound({ message: 'No such company', headers: ctx.headers })\n    }\n    await ref.delete()\n    const view = { id: ref.id, object: 'company', deleted: true }\n    await claim.record(200, view)\n    return apiJson(view, { headers: ctx.headers })\n  } catch (error) {\n    await claim.release()\n    throw error\n  }\n}\n\n/**\n * `GET /v1/companies` filters. `domain` is normalized exactly as the write\n * stores it, so `?domain=https://www.Example.com/about` finds `example.com`; a\n * value that is not a domain at all is a `400`, not an empty page, for the\n * reason `listContacts` gives about `?email=`.\n */\nasync function listCompanies(\n  ctx: ApiV1Context,\n  collection: FirebaseFirestore.CollectionReference,\n  url: URL,\n): Promise<Response> {\n  const rawDomain = url.searchParams.get('domain')\n  const filters = readEqualityFilters(url, ['ownerUid'])\n  if (rawDomain !== null && rawDomain.trim() !== '') {\n    const domain = normalizeCompanyDomain(rawDomain)\n    if (!domain) {\n      return crmValidationFailed(ctx, 'company filter', {\n        domain: 'Must be a domain name, like example.com',\n      })\n    }\n    // The domain is unique, so it is the clause that goes to Firestore.\n    filters.unshift({ field: 'domain', value: domain })\n  }\n  return listCrm(ctx, collection, url, filters, companyView)\n}\n\nexport async function handleCompanies(\n  request: Request,\n  ctx: ApiV1Context,\n  segments: string[],\n  url: URL,\n): Promise<Response> {\n  const collection = crmCollection(ctx, CRM_COLLECTIONS.companies)\n  const [, companyId] = segments\n\n  if (!companyId) {\n    if (request.method === 'GET') {\n      const denied = requireScope(ctx, 'crm:read')\n      if (denied) return denied\n      return listCompanies(ctx, collection, url)\n    }\n    if (request.method === 'POST') {\n      const denied = requireScope(ctx, 'crm:write')\n      if (denied) return denied\n      return createCompany(request, ctx)\n    }\n    return ApiErrors.methodNotAllowed({\n      headers: { ...ctx.headers, Allow: 'GET, POST' },\n    })\n  }\n\n  const ref = collection.doc(companyId)\n  if (request.method === 'GET') {\n    const denied = requireScope(ctx, 'crm:read')\n    if (denied) return denied\n    const snap = await ref.get()\n    if (!snap.exists) {\n      return ApiErrors.notFound({ message: 'No such company', headers: ctx.headers })\n    }\n    return apiJson(companyView(snap), { headers: ctx.headers })\n  }\n  if (request.method === 'PATCH') {\n    const denied = requireScope(ctx, 'crm:write')\n    if (denied) return denied\n    return updateCompany(request, ctx, ref)\n  }\n  if (request.method === 'DELETE') {\n    const denied = requireScope(ctx, 'crm:write')\n    if (denied) return denied\n    return deleteCompany(request, ctx, ref)\n  }\n  return ApiErrors.methodNotAllowed({\n    headers: { ...ctx.headers, Allow: 'GET, PATCH, DELETE' },\n  })\n}\n"],"names":["nameSearchFields","CRM_COLLECTIONS","CRM_MEDIA_IDS_MAX","createResourceUid","crmNewRecordListFields","normalizeAddress","normalizeCompanyDomain","normalizeCrmMediaIds","normalizePhone","apiJson","ApiErrors","restampCrmListFieldsAt","Timestamp","claimWrite","readJsonBody","requireScope","CRM_LABEL_MAX","CRM_TEXT_MAX","CRM_TITLE_MAX","createPayload","crmCollection","crmCreateStamp","crmCustomUpdate","crmCustomView","crmRecordsBandRefusal","crmTimes","crmValidationFailed","isoFromMs","listCrm","memberError","readCrmCustomBody","readCrmSite","readEqualityFilters","readOptionalText","refuseUnknownKeys","updatePayload","companyView","doc","data","id","object","name","domain","website","phone","address","industry","ownerUid","notes","custom","nextTaskAt","nextTaskAtMs","mediaIds","siteId","hostId","COMPANY_WRITABLE","Set","readCompanyInput","body","partial","errors","values","allowed","add","undefined","String","trim","slice","Array","isArray","length","normalized","withScheme","test","parsed","URL","protocol","hostname","toString","Object","keys","createCompany","request","ctx","site","response","owner","customValues","collection","companies","claimed","headers","get","replay","claim","rest","existing","where","limit","empty","release","conflict","message","docs","code","bandFull","record","create","view","status","error","updateCompany","ref","snap","exists","notFound","parent","update","updatedAt","now","deleteCompany","delete","deleted","listCompanies","url","rawDomain","searchParams","filters","unshift","field","value","handleCompanies","segments","companyId","method","denied","methodNotAllowed","Allow"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;CAUC,GACD,SAASA,gBAAgB,QAAQ,qCAAoC;AACrE,SACEC,eAAe,EACfC,iBAAiB,EACjBC,iBAAiB,EACjBC,sBAAsB,EACtBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EACpBC,cAAc,QACT,sBAAqB;AAC5B,SAASC,OAAO,EAAEC,SAAS,EAAEC,sBAAsB,QAAQ,2BAA0B;AACrF,SAASC,SAAS,QAAQ,2BAA0B;AACpD,SAEEC,UAAU,EACVC,YAAY,EACZC,YAAY,QACP,6CAA4C;AACnD,SAEEC,aAAa,EACbC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbC,aAAa,EACbC,cAAc,EACdC,eAAe,EACfC,aAAa,EACbC,qBAAqB,EACrBC,QAAQ,EACRC,mBAAmB,EACnBC,SAAS,EACTC,OAAO,EACPC,WAAW,EACXC,iBAAiB,EACjBC,WAAW,EACXC,mBAAmB,EACnBC,gBAAgB,EAChBC,iBAAiB,EACjBC,aAAa,QACR,kBAAc;AAErB,wEAAwE,GACxE,SAASC,YAAYC,GAAuC;QAC7CA,WAILC,YACEA,cACCA,eACFA,aACEA,eACCA,gBACAA,gBACHA,aAOCA;IAlBV,MAAMA,QAAOD,YAAAA,IAAIC,IAAI,cAARD,YAAc,CAAC;IAC5B,OAAO;QACLE,IAAIF,IAAIE,EAAE;QACVC,QAAQ;QACRC,IAAI,GAAEH,aAAAA,KAAKG,IAAI,YAATH,aAAa;QACnBI,MAAM,GAAEJ,eAAAA,KAAKI,MAAM,YAAXJ,eAAe;QACvBK,OAAO,GAAEL,gBAAAA,KAAKK,OAAO,YAAZL,gBAAgB;QACzBM,KAAK,GAAEN,cAAAA,KAAKM,KAAK,YAAVN,cAAc;QACrBO,OAAO,GAAEP,gBAAAA,KAAKO,OAAO,YAAZP,gBAAgB;QACzBQ,QAAQ,GAAER,iBAAAA,KAAKQ,QAAQ,YAAbR,iBAAiB;QAC3BS,QAAQ,GAAET,iBAAAA,KAAKS,QAAQ,YAAbT,iBAAiB;QAC3BU,KAAK,GAAEV,cAAAA,KAAKU,KAAK,YAAVV,cAAc;QACrB,kEAAkE;QAClEW,QAAQ1B,cAAce;QACtB,+DAA+D;QAC/D,sEAAsE;QACtEY,YAAYvB,UAAUW,KAAKa,YAAY;QACvCC,UAAU7C,qBAAqB+B,KAAKc,QAAQ;QAC5CC,MAAM,GAAEf,eAAAA,KAAKgB,MAAM,YAAXhB,eAAe;OACpBb,SAASa;AAEhB;AAEA,MAAMiB,mBAAmB,IAAIC,IAAI;IAC/B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAeD;;;;;;;;;;CAUC,GACD,SAASC,iBACPC,IAA6B,EAC7B,EAAEC,OAAO,EAAwB;IAEjC,MAAMC,SAAiC,CAAC;IACxC,MAAMC,SAAuB,CAAC;IAC9B,MAAMC,UAAU,IAAIN,IAAID;IACxB,IAAI,CAACI,SAASG,QAAQC,GAAG,CAAC;IAC1B7B,kBAAkBwB,MAAMI,SAAS,WAAWF;IAE5C,IAAIF,KAAKjB,IAAI,KAAKuB,aAAa,CAACL,SAAS;YACnBD;QAApB,MAAMjB,OAAOwB,QAAOP,aAAAA,KAAKjB,IAAI,YAATiB,aAAa,IAC9BQ,IAAI,GACJC,KAAK,CAAC,GAAGjD;QACZ,IAAIuB,MAAMoB,OAAOpB,IAAI,GAAGA;aACnBmB,OAAOnB,IAAI,GAAGkB,UAAU,sBAAsB;IACrD;IAGA,IAAID,KAAKN,QAAQ,KAAKY,WAAW;QAC/B,IAAI,CAACI,MAAMC,OAAO,CAACX,KAAKN,QAAQ,GAAG;YACjCQ,OAAOR,QAAQ,GAAG;QACpB,OAAO,IAAIM,KAAKN,QAAQ,CAACkB,MAAM,GAAGpE,mBAAmB;YACnD0D,OAAOR,QAAQ,GAAG,CAAC,QAAQ,EAAElD,kBAAkB,sBAAsB,CAAC;QACxE,OAAO;YACL,kEAAkE;YAClE,kEAAkE;YAClE,oCAAoC;YACpC2D,OAAOT,QAAQ,GAAG7C,qBAAqBmD,KAAKN,QAAQ;QACtD;IACF;IAEA,MAAMV,SAAST,iBAAiByB,MAAM,UAAUxC,eAAe0C;IAC/D,IAAIlB,QAAQ;QACV,MAAM6B,aAAajE,uBAAuBoC;QAC1C,IAAI6B,YAAYV,OAAOnB,MAAM,GAAG6B;aAC3BX,OAAOlB,MAAM,GAAG;IACvB,OAAO,IAAIA,WAAW,MAAM;QAC1BmB,OAAOnB,MAAM,GAAG;IAClB;IAEA,MAAMC,UAAUV,iBAAiByB,MAAM,WAAWxC,gBAAgB,GAAG0C;IACrE,IAAIjB,SAAS;QACX,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM6B,aAAa,2BAA2BC,IAAI,CAAC9B,WAC/CA,UACA,CAAC,QAAQ,EAAEA,SAAS;QACxB,IAAI+B;QACJ,IAAI;YACFA,SAAS,IAAIC,IAAIH;QACnB,EAAE,eAAM;YACNE,SAAS;QACX;QACA,IAAIA,UAAU,YAAYD,IAAI,CAACC,OAAOE,QAAQ,KAAKtE,uBAAuBoE,OAAOG,QAAQ,GAAG;YAC1FhB,OAAOlB,OAAO,GAAG+B,OAAOI,QAAQ;QAClC,OAAO;YACLlB,OAAOjB,OAAO,GAAG;QACnB;IACF,OAAO,IAAIA,YAAY,MAAM;QAC3BkB,OAAOlB,OAAO,GAAG;IACnB;IAEA,MAAMC,QAAQX,iBAAiByB,MAAM,SAAS1C,eAAe4C;IAC7D,IAAIhB,OAAO;QACT,MAAM2B,aAAa/D,eAAeoC;QAClC,IAAI2B,YAAYV,OAAOjB,KAAK,GAAG2B;aAC1BX,OAAOhB,KAAK,GAAG;IACtB,OAAO,IAAIA,UAAU,MAAM;QACzBiB,OAAOjB,KAAK,GAAG;IACjB;IAEA,IAAIc,KAAKb,OAAO,KAAKmB,WAAW;QAC9B,IAAIN,KAAKb,OAAO,KAAK,MAAM;YACzBgB,OAAOhB,OAAO,GAAG;QACnB,OAAO,IAAI,OAAOa,KAAKb,OAAO,KAAK,YAAYuB,MAAMC,OAAO,CAACX,KAAKb,OAAO,GAAG;YAC1Ee,OAAOf,OAAO,GAAG;QACnB,OAAO;YACL,oEAAoE;YACpE,mDAAmD;YACnDgB,OAAOhB,OAAO,GAAGxC,iBAAiBqD,KAAKb,OAAO;QAChD;IACF;IAEA,MAAMC,WAAWb,iBAAiByB,MAAM,YAAY1C,eAAe4C;IACnE,IAAId,aAAakB,WAAWH,OAAOf,QAAQ,GAAGA;IAE9C,MAAMC,WAAWd,iBAAiByB,MAAM,YAAY1C,eAAe4C;IACnE,IAAIb,aAAaiB,WAAWH,OAAOd,QAAQ,GAAGA;IAE9C,MAAMC,QAAQf,iBAAiByB,MAAM,SAASzC,cAAc2C;IAC5D,IAAIZ,UAAUgB,WAAWH,OAAOb,KAAK,GAAGA;IAExC,8DAA8D;IAC9D,+DAA+D;IAC/D,IAAIU,KAAKT,MAAM,KAAKe,WAAW;QAC7B,IAAI,CAACN,KAAKT,MAAM,IAAI,OAAOS,KAAKT,MAAM,KAAK,YAAYmB,MAAMC,OAAO,CAACX,KAAKT,MAAM,GAAG;YACjFW,OAAOX,MAAM,GAAG;QAClB;IACF;IAEA,OAAO8B,OAAOC,IAAI,CAACpB,QAAQU,MAAM,GAAG;QAAEV;IAAO,IAAI;QAAEC;IAAO;AAC5D;AAEA;;;;CAIC,GACD,eAAeoB,cACbC,OAAgB,EAChBC,GAAiB;IAEjB,MAAMzB,OAAO,MAAM5C,aAAaoE;IAChC,MAAMR,SAASjB,iBAAiBC,MAAM;QAAEC,SAAS;IAAM;IACvD,IAAI,YAAYe,QAAQ,OAAOhD,oBAAoByD,KAAK,WAAWT,OAAOd,MAAM;IAChF,MAAMwB,OAAOrD,YAAYoD,KAAK,WAAWzB;IACzC,IAAI,cAAc0B,MAAM,OAAOA,KAAKC,QAAQ;IAC5C,MAAMC,QAAQ,MAAMzD,YAAYsD,KAAK,YAAYT,OAAOb,MAAM,CAACd,QAAQ;IACvE,IAAIgC,OAAOC,IAAI,CAACM,OAAOhB,MAAM,EAAE,OAAO5C,oBAAoByD,KAAK,WAAWG;IAC1E,qEAAqE;IACrE,4CAA4C;IAC5C,MAAMrC,SAAS,MAAMnB,kBAAkBqD,KAAKzB,MAAM;IAClD,IAAIT,UAAU,YAAYA,QAAQ,OAAOvB,oBAAoByD,KAAK,WAAWlC,OAAOW,MAAM;IAC1F,MAAM2B,eAAetC,UAAU,YAAYA,SAASA,OAAOY,MAAM,GAAG,CAAC;IAErE,MAAM2B,aAAapE,cAAc+D,KAAKlF,gBAAgBwF,SAAS;IAC/D,MAAMC,UAAU,MAAM7E,WACpBsE,KACA,KACAD,QAAQS,OAAO,CAACC,GAAG,CAAC,oBACpB;IAEF,IAAI,YAAYF,SAAS,OAAOA,QAAQG,MAAM;IAC9C,MAAM,EAAEC,KAAK,EAAE,GAAGJ;IAElB,IAAI;QACF,MAAkChB,iBAAAA,OAAOb,MAAM,EAAzC,EAAEpB,IAAI,EAAEC,MAAM,EAAW,GAAGgC,gBAATqB,wCAASrB;;;;QAClC,IAAIhC,QAAQ;YACV,MAAMsD,WAAW,MAAMR,WAAWS,KAAK,CAAC,UAAU,MAAMvD,QAAQwD,KAAK,CAAC,GAAGN,GAAG;YAC5E,IAAI,CAACI,SAASG,KAAK,EAAE;gBACnB,MAAML,MAAMM,OAAO;gBACnB,OAAO1F,UAAU2F,QAAQ,CAAC;oBACxBC,SAAS,CAAC,2CAA2C,EAAEN,SAASO,IAAI,CAAC,EAAE,CAAChE,EAAE,CAAC,qBAAqB,CAAC;oBACjGiE,MAAM;oBACNb,SAASR,IAAIQ,OAAO;gBACtB;YACF;QACF;QACA,wEAAwE;QACxE,0EAA0E;QAC1E,8CAA8C;QAC9C,MAAMc,WAAW,MAAMjF,sBAAsB2D;QAC7C,IAAIsB,UAAU;YACZ,MAAMX,MAAMM,OAAO;YACnB,OAAOK;QACT;QACA,MAAMlE,KAAKpC;QACX,MAAMuG,SAAkC,aAGnC1G,iBAAiByC,eAAAA,OAAQ,KACzBtB,cAAc;YAAEuB;WAAWqD,QAG1BhB,OAAOC,IAAI,CAACO,cAAcjB,MAAM,GAChC;YAAErB,QAAQ9B,cAAcoE;QAAc,IACtC,CAAC,GACFlE,eAAe8D,KAAKC,KAAK/B,MAAM;QAEpC,wEAAwE;QACxE,MAAMmC,WAAWnD,GAAG,CAACE,IAAIoE,MAAM,CAAC,aAAKD,QAAWtG,uBAAuB,aAAasG;QACpF,MAAME,OAAOxE,YAAY,MAAMoD,WAAWnD,GAAG,CAACE,IAAIqD,GAAG;QACrD,mEAAmE;QACnE,MAAME,MAAMY,MAAM,CAAC,KAAKE;QACxB,OAAOnG,QAAQmG,MAAM;YAAEC,QAAQ;YAAKlB,SAASR,IAAIQ,OAAO;QAAC;IAC3D,EAAE,OAAOmB,OAAO;QACd,MAAMhB,MAAMM,OAAO;QACnB,MAAMU;IACR;AACF;AAEA,uEAAuE,GACvE,eAAeC,cACb7B,OAAgB,EAChBC,GAAiB,EACjB6B,GAAwC;IAExC,MAAMtD,OAAO,MAAM5C,aAAaoE;IAChC,MAAMR,SAASjB,iBAAiBC,MAAM;QAAEC,SAAS;IAAK;IACtD,IAAI,YAAYe,QAAQ,OAAOhD,oBAAoByD,KAAK,WAAWT,OAAOd,MAAM;IAChF,MAAMqD,OAAO,MAAMD,IAAIpB,GAAG;IAC1B,IAAI,CAACqB,KAAKC,MAAM,EAAE;QAChB,OAAOxG,UAAUyG,QAAQ,CAAC;YAAEb,SAAS;YAAmBX,SAASR,IAAIQ,OAAO;QAAC;IAC/E;IACA,MAAML,QAAQ,MAAMzD,YAAYsD,KAAK,YAAYT,OAAOb,MAAM,CAACd,QAAQ;IACvE,IAAIgC,OAAOC,IAAI,CAACM,OAAOhB,MAAM,EAAE,OAAO5C,oBAAoByD,KAAK,WAAWG;IAC1E,MAAMrC,SAAS,MAAMnB,kBAAkBqD,KAAKzB,MAAM;IAClD,IAAIT,UAAU,YAAYA,QAAQ,OAAOvB,oBAAoByD,KAAK,WAAWlC,OAAOW,MAAM;IAE1F,MAAkCc,iBAAAA,OAAOb,MAAM,EAAzC,EAAEpB,IAAI,EAAEC,MAAM,EAAW,GAAGgC,gBAATqB,wCAASrB;;;;IAClC,IAAIhC,UAAUA,WAAWuE,KAAKrB,GAAG,CAAC,WAAW;QAC3C,MAAMI,WAAW,MAAMgB,IAAII,MAAM,CAACnB,KAAK,CAAC,UAAU,MAAMvD,QAAQwD,KAAK,CAAC,GAAGN,GAAG;QAC5E,IAAI,CAACI,SAASG,KAAK,IAAIH,SAASO,IAAI,CAAC,EAAE,CAAChE,EAAE,KAAKyE,IAAIzE,EAAE,EAAE;YACrD,OAAO7B,UAAU2F,QAAQ,CAAC;gBACxBC,SAAS,CAAC,2CAA2C,EAAEN,SAASO,IAAI,CAAC,EAAE,CAAChE,EAAE,CAAC,EAAE,CAAC;gBAC9EiE,MAAM;gBACNb,SAASR,IAAIQ,OAAO;YACtB;QACF;IACF;IACA,MAAM0B,SAAkC,aAClC5E,SAASuB,YAAYhE,iBAAiByC,QAAQ,CAAC,GAChDN,cAAc;QAAEO;OAAWqD,QAC1B9C,UAAU,YAAYA,SAAS3B,gBAAgB2B,OAAOY,MAAM,IAAI,CAAC;IAEvE,8DAA8D;IAC9D,IAAIkB,OAAOC,IAAI,CAACqC,QAAQ/C,MAAM,GAAG,GAAG;QAClC,MAAM0C,IAAIK,MAAM,CAAC,aAAKA;YAAQC,WAAW1G,UAAU2G,GAAG;;QACtD,yDAAyD;QACzD,MAAM5G,uBAAuBqG,KAAK;IACpC;IACA,OAAOvG,QAAQ2B,YAAY,MAAM4E,IAAIpB,GAAG,KAAK;QAAED,SAASR,IAAIQ,OAAO;IAAC;AACtE;AAEA;;;;;CAKC,GACD,eAAe6B,cACbtC,OAAgB,EAChBC,GAAiB,EACjB6B,GAAwC;IAExC,MAAMtB,UAAU,MAAM7E,WACpBsE,KACA,KACAD,QAAQS,OAAO,CAACC,GAAG,CAAC,oBACpB;IAEF,IAAI,YAAYF,SAAS,OAAOA,QAAQG,MAAM;IAC9C,MAAM,EAAEC,KAAK,EAAE,GAAGJ;IAClB,IAAI;QACF,MAAMuB,OAAO,MAAMD,IAAIpB,GAAG;QAC1B,IAAI,CAACqB,KAAKC,MAAM,EAAE;YAChB,MAAMpB,MAAMM,OAAO;YACnB,OAAO1F,UAAUyG,QAAQ,CAAC;gBAAEb,SAAS;gBAAmBX,SAASR,IAAIQ,OAAO;YAAC;QAC/E;QACA,MAAMqB,IAAIS,MAAM;QAChB,MAAMb,OAAO;YAAErE,IAAIyE,IAAIzE,EAAE;YAAEC,QAAQ;YAAWkF,SAAS;QAAK;QAC5D,MAAM5B,MAAMY,MAAM,CAAC,KAAKE;QACxB,OAAOnG,QAAQmG,MAAM;YAAEjB,SAASR,IAAIQ,OAAO;QAAC;IAC9C,EAAE,OAAOmB,OAAO;QACd,MAAMhB,MAAMM,OAAO;QACnB,MAAMU;IACR;AACF;AAEA;;;;;CAKC,GACD,eAAea,cACbxC,GAAiB,EACjBK,UAAiD,EACjDoC,GAAQ;IAER,MAAMC,YAAYD,IAAIE,YAAY,CAAClC,GAAG,CAAC;IACvC,MAAMmC,UAAU/F,oBAAoB4F,KAAK;QAAC;KAAW;IACrD,IAAIC,cAAc,QAAQA,UAAU3D,IAAI,OAAO,IAAI;QACjD,MAAMxB,SAASpC,uBAAuBuH;QACtC,IAAI,CAACnF,QAAQ;YACX,OAAOhB,oBAAoByD,KAAK,kBAAkB;gBAChDzC,QAAQ;YACV;QACF;QACA,oEAAoE;QACpEqF,QAAQC,OAAO,CAAC;YAAEC,OAAO;YAAUC,OAAOxF;QAAO;IACnD;IACA,OAAOd,QAAQuD,KAAKK,YAAYoC,KAAKG,SAAS3F;AAChD;AAEA,OAAO,eAAe+F,gBACpBjD,OAAgB,EAChBC,GAAiB,EACjBiD,QAAkB,EAClBR,GAAQ;IAER,MAAMpC,aAAapE,cAAc+D,KAAKlF,gBAAgBwF,SAAS;IAC/D,MAAM,GAAG4C,UAAU,GAAGD;IAEtB,IAAI,CAACC,WAAW;QACd,IAAInD,QAAQoD,MAAM,KAAK,OAAO;YAC5B,MAAMC,SAASxH,aAAaoE,KAAK;YACjC,IAAIoD,QAAQ,OAAOA;YACnB,OAAOZ,cAAcxC,KAAKK,YAAYoC;QACxC;QACA,IAAI1C,QAAQoD,MAAM,KAAK,QAAQ;YAC7B,MAAMC,SAASxH,aAAaoE,KAAK;YACjC,IAAIoD,QAAQ,OAAOA;YACnB,OAAOtD,cAAcC,SAASC;QAChC;QACA,OAAOzE,UAAU8H,gBAAgB,CAAC;YAChC7C,SAAS,aAAKR,IAAIQ,OAAO;gBAAE8C,OAAO;;QACpC;IACF;IAEA,MAAMzB,MAAMxB,WAAWnD,GAAG,CAACgG;IAC3B,IAAInD,QAAQoD,MAAM,KAAK,OAAO;QAC5B,MAAMC,SAASxH,aAAaoE,KAAK;QACjC,IAAIoD,QAAQ,OAAOA;QACnB,MAAMtB,OAAO,MAAMD,IAAIpB,GAAG;QAC1B,IAAI,CAACqB,KAAKC,MAAM,EAAE;YAChB,OAAOxG,UAAUyG,QAAQ,CAAC;gBAAEb,SAAS;gBAAmBX,SAASR,IAAIQ,OAAO;YAAC;QAC/E;QACA,OAAOlF,QAAQ2B,YAAY6E,OAAO;YAAEtB,SAASR,IAAIQ,OAAO;QAAC;IAC3D;IACA,IAAIT,QAAQoD,MAAM,KAAK,SAAS;QAC9B,MAAMC,SAASxH,aAAaoE,KAAK;QACjC,IAAIoD,QAAQ,OAAOA;QACnB,OAAOxB,cAAc7B,SAASC,KAAK6B;IACrC;IACA,IAAI9B,QAAQoD,MAAM,KAAK,UAAU;QAC/B,MAAMC,SAASxH,aAAaoE,KAAK;QACjC,IAAIoD,QAAQ,OAAOA;QACnB,OAAOf,cAActC,SAASC,KAAK6B;IACrC;IACA,OAAOtG,UAAU8H,gBAAgB,CAAC;QAChC7C,SAAS,aAAKR,IAAIQ,OAAO;YAAE8C,OAAO;;IACpC;AACF"}

package/src/lib/server/api-v1/crm-deals.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ApiV1Context } from '@aglyn/tenant-data-admin/server/api-v1-kit';
+export declare function handleDeals(request: Request, ctx: ApiV1Context, segments: string[], url: URL): Promise<Response>;