@aglyn/plugins-crm 1.0.0-beta.217 → 1.0.0-beta.219

package/src/lib/server/contact-update.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contact-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contact-update` — one holder's profile fields on one or\n * more contacts (AGL-2804).\n *\n * Body: `{ hostId, contactIds, set }` under a site, or `{ orgId, hostId?,\n * contactIds, set }` at the organization level, where `set` is\n * `ContactUpdateFields`. Answers `{ ok, results }`: one outcome per contact,\n * in the order the ids were sent.\n *\n * ## Why every facet write comes here\n *\n * A contact's fields live in the facet of the holder that keeps them —\n * `facets.{groupId}.*` — and the Firestore rules cannot tell one field of a\n * facet from another: the holder is a map key a rule cannot address, and a\n * write's affected keys name only `facets`. So the rules let a client update\n * change nothing in a facet beyond letting a holder go, and the console's\n * edits arrive here, where the plan is asked about the fields the request\n * actually carries.\n *\n * ## Who may call it\n *\n * The CRM writer the task routes admit (`authorizeCrmWriter`): under a site,\n * a member whose role writes org data, who holds `data.manage` and whose\n * access reaches the site; at the organization level, an org-wide member\n * with the permission. Each contact must then be one the caller may read —\n * the rules' `canReadScoped()` — and, under a site, one the site's hub lists.\n *\n * ## The plan\n *\n * Every field is the CRM's (AGL-2790), and a plan without the CRM has none\n * of it (AGL-2851), so it edits no contact: not the owner, company, custom\n * values or files, and not the profile a capture writes (name, phone, job\n * title, address), the tags, the notes or the campaign filing either. A\n * request carrying any field is refused to such a plan once the caller is\n * known, and before a contact is read — staff included, because the plan is\n * a fact about the workspace. Erasing a person is another route, open on\n * every plan.\n *\n * ## One holder, by dotted path\n *\n * Under a site the facet is the site's consent group's; at the organization\n * level it is each contact's own primary holder, the facet the record page\n * shows there. Every field is one dotted path — a nested `facets` object\n * would replace every other holder's map — and a text field sent empty is\n * deleted rather than stored blank, so \"no phone\" has one shape.\n *\n * ## Many contacts, one commit\n *\n * The contacts are read together and written in one batch. A batch that\n * fails is retried contact by contact, so the one that could not be written\n * is named and the rest still land. A company's contacts count follows the\n * link: summed per company and settled once the contacts are written, so a\n * company deleted in between cannot fail the save of the people at it — the\n * company page's live aggregate is what corrects a count that did not move.\n */\n\nimport {\n  type AglynPostalAddress,\n  consentGroupForHost,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactCompanyLinkPlan,\n  type ContactCustomValue,\n  type ContactFieldDefinition,\n  campaignMembershipValue,\n  contactCampaignFieldPath,\n  contactFacetPath,\n  contactPrimaryGroup,\n  CRM_COLLECTIONS,\n  CRM_LEAD_SOURCE_PICKLIST,\n  CRM_MEDIA_IDS_FIELD,\n  crmReadTokens,\n  effectiveCrmLeadSourcePicklist,\n  isOrgWideMember,\n  judgeCrmLeadSource,\n  normalizeAddress,\n  normalizeCrmMediaIds,\n  normalizeCrmPicklistLabel,\n  normalizePhone,\n  type PluginApiHandler,\n  planContactCompanyLink,\n  readContactCompanyLink,\n  readContactFacet,\n  readCrmCustomInput,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  companyContactsCountFields,\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  resolveOrgMembership,\n  restampCrmListFieldsOf,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CONTACT_UPDATE_FIELDS,\n  type ContactUpdateFields,\n  type ContactUpdateOutcome,\n  type ContactUpdateResponse,\n  CRM_CONTACT_UPDATE_MAX,\n} from '../model/contact-update'\nimport {\n  CONTACT_NOTES_MAX,\n  CONTACT_PHONE_REFUSAL,\n  CONTACT_TAGS_MAX,\n  normalizeTags,\n  readBulkTag,\n  typed,\n} from './contact-profile'\nimport { readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter, canReach, type Writer } from './task-routes'\n\n/** What the suite gate names for each field a request can carry. */\nconst SUITE_ACTS: Record<keyof ContactUpdateFields, string> = {\n  name: \"Editing a contact's profile\",\n  phone: \"Editing a contact's profile\",\n  jobTitle: \"Editing a contact's profile\",\n  leadSource: \"Editing a contact's profile\",\n  address: \"Editing a contact's profile\",\n  notes: \"Editing a contact's notes\",\n  tags: 'Tagging a contact',\n  addTag: 'Tagging a contact',\n  removeTag: 'Tagging a contact',\n  campaignIds: 'Filing a contact under a campaign',\n  ownerUid: \"Assigning a contact's owner\",\n  companyId: 'Filing a contact under a company',\n  companyName: 'Filing a contact under a company',\n  custom: \"Editing a contact's custom fields\",\n  mediaIds: 'Attaching files to a contact',\n}\n\n/** A contact read at the organization level that no site has captured. */\nconst NO_HOLDER_REFUSAL = 'No site holds this contact yet, so it has no profile to edit.'\n\n/**\n * The act a request is refused for on a plan without the CRM: the first\n * field it carries, in the order the route reads them. Every field is the\n * CRM's, so whichever field a request names is the act its refusal names.\n */\nexport function contactUpdateSuiteAct(fields: ContactUpdateFields): string {\n  const field = CONTACT_UPDATE_FIELDS.find((key) => fields[key] !== undefined)\n  return field ? SUITE_ACTS[field] : \"Editing a contact's profile\"\n}\n\n/**\n * A body's `set`, read into the fields it names, or the sentence refusing\n * it. A key the route does not save is refused rather than dropped: a save\n * that silently lost a field would read as a save that kept it.\n */\nexport function readContactUpdateFields(\n  input: unknown,\n): { ok: true; fields: ContactUpdateFields } | { ok: false; error: string } {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) {\n    return { ok: false, error: 'Name the fields to save.' }\n  }\n  const raw = input as Record<string, unknown>\n  const unknownKey = Object.keys(raw).find(\n    (key) => !(CONTACT_UPDATE_FIELDS as readonly string[]).includes(key),\n  )\n  if (unknownKey) {\n    return { ok: false, error: `\"${unknownKey}\" is not a field a contact's profile saves.` }\n  }\n  const fields: ContactUpdateFields = {}\n  if ('name' in raw) fields.name = typed(raw['name'], 120)\n  if ('phone' in raw) {\n    const text = typed(raw['phone'], 40)\n    const phone = text ? normalizePhone(text) : ''\n    if (phone === null) return { ok: false, error: CONTACT_PHONE_REFUSAL }\n    fields.phone = phone\n  }\n  if ('jobTitle' in raw) fields.jobTitle = typed(raw['jobTitle'], 120)\n  // Held to the label's shape here; judged against the org's list by the\n  // handler, which alone can read it (AGL-3298).\n  if ('leadSource' in raw) fields.leadSource = normalizeCrmPicklistLabel(raw['leadSource'])\n  if ('address' in raw) {\n    const address = raw['address']\n    fields.address =\n      address && typeof address === 'object' && !Array.isArray(address)\n        ? normalizeAddress(address as AglynPostalAddress)\n        : null\n  }\n  if ('notes' in raw) fields.notes = String(raw['notes'] ?? '').slice(0, CONTACT_NOTES_MAX)\n  // One write may carry one transform per field, so the tags are replaced,\n  // added to or taken from — never two of those at once.\n  if (['tags', 'addTag', 'removeTag'].filter((key) => key in raw).length > 1) {\n    return { ok: false, error: 'Send the tags, a tag to add or a tag to remove — one of them.' }\n  }\n  if ('tags' in raw) {\n    if (!Array.isArray(raw['tags'])) return { ok: false, error: 'Tags must be a list.' }\n    fields.tags = normalizeTags(raw['tags'])\n  }\n  for (const key of ['addTag', 'removeTag'] as const) {\n    if (!(key in raw)) continue\n    const tag = readBulkTag(raw[key])\n    if (!tag) return { ok: false, error: 'Name the tag.' }\n    fields[key] = tag\n  }\n  if ('campaignIds' in raw) {\n    const ids = raw['campaignIds']\n    if (!Array.isArray(ids)) return { ok: false, error: 'Campaigns must be a list.' }\n    fields.campaignIds = campaignMembershipValue(ids.map((id) => String(id ?? '')))\n  }\n  if ('ownerUid' in raw) fields.ownerUid = typed(raw['ownerUid'], 128)\n  if ('companyId' in raw) {\n    const companyId = raw['companyId'] === null ? null : typed(raw['companyId'], 128)\n    if (companyId !== null && (!companyId || companyId.includes('/'))) {\n      return { ok: false, error: 'The company could not be read.' }\n    }\n    fields.companyId = companyId\n  }\n  if ('companyName' in raw) fields.companyName = typed(raw['companyName'], 120)\n  if ('custom' in raw) {\n    const custom = raw['custom']\n    if (!custom || typeof custom !== 'object' || Array.isArray(custom)) {\n      return { ok: false, error: 'Custom fields must be values keyed by field key.' }\n    }\n    fields.custom = custom as Record<string, ContactCustomValue>\n  }\n  if ('mediaIds' in raw) {\n    if (!Array.isArray(raw['mediaIds'])) {\n      return { ok: false, error: 'Files must be a list of ids.' }\n    }\n    fields.mediaIds = normalizeCrmMediaIds(raw['mediaIds'])\n  }\n  if (!Object.keys(fields).length) return { ok: false, error: 'Name the fields to save.' }\n  return { ok: true, fields }\n}\n\n/** The ids a body names, deduplicated — or `null` when any is unreadable or there are too many. */\nfunction readContactIds(value: unknown): string[] | null {\n  if (!Array.isArray(value) || !value.length || value.length > CRM_CONTACT_UPDATE_MAX) {\n    return null\n  }\n  const ids = value.map((id) => typed(id, 200))\n  if (ids.some((id) => !id || id.includes('/'))) return null\n  return [...new Set(ids)]\n}\n\n/**\n * Under a site, whether the caller's access reaches it. The rules could not\n * ask this of a facet write — they cannot see which holder a write is for —\n * and a collaborator on one site must not write another site's notes on a\n * person both of them hold.\n */\nfunction reachesSite(writer: Writer, hostId: string): boolean {\n  return (\n    writer.staff ||\n    isOrgWideMember(writer.member) ||\n    Boolean((writer.member?.hostAccess as Record<string, unknown> | undefined)?.[hostId])\n  )\n}\n\nconst refused = (contactId: string, error: string): ContactUpdateOutcome => ({\n  contactId,\n  ok: false,\n  error,\n})\n\ninterface ContactWrite {\n  contactId: string\n  ref: FirebaseFirestore.DocumentReference\n  update: Record<string, unknown>\n  counts: ContactCompanyLinkPlan['counts']\n}\n\n/**\n * One contact's update for one holder, or the sentence refusing the row.\n * `update` is `null` when the document already says everything asked — a tag\n * the row already carries, a link already made.\n */\nfunction contactPatch(\n  contact: Record<string, unknown>,\n  groupId: string,\n  fields: ContactUpdateFields,\n  custom: Record<string, ContactCustomValue> | undefined,\n  linkedCompanyName: string,\n):\n  | { update: Record<string, unknown> | null; counts: ContactCompanyLinkPlan['counts'] }\n  | { refused: string } {\n  const path = (field: string) => contactFacetPath(groupId, field)\n  /** A text field as stored: the value, or the field's absence. */\n  const text = (value: string) => value || FieldValue.delete()\n  const update: Record<string, unknown> = {}\n  let counts: ContactCompanyLinkPlan['counts'] = []\n\n  if (fields.name !== undefined) update[path('name')] = text(fields.name)\n  if (fields.phone !== undefined) {\n    update[path('phone')] = text(fields.phone)\n    // The search echo — see `HostContact.phone`.\n    update['phone'] = text(fields.phone)\n  }\n  if (fields.jobTitle !== undefined) update[path('jobTitle')] = text(fields.jobTitle)\n  if (fields.leadSource !== undefined) update[path('leadSource')] = text(fields.leadSource)\n  if (fields.address !== undefined) {\n    update[path('address')] = fields.address ?? FieldValue.delete()\n  }\n  if (fields.notes !== undefined) update[path('notes')] = fields.notes\n  if (fields.tags !== undefined) update[path('tags')] = fields.tags\n\n  const held = (readContactFacet(contact, groupId).tags ?? []).map((tag) =>\n    String(tag).toLowerCase(),\n  )\n  if (fields.addTag && !held.includes(fields.addTag)) {\n    // The record page's cap, which a selection must not slip past.\n    if (held.length >= CONTACT_TAGS_MAX) {\n      return { refused: `already has ${CONTACT_TAGS_MAX} tags` }\n    }\n    update[path('tags')] = FieldValue.arrayUnion(fields.addTag)\n  }\n  if (fields.removeTag && held.includes(fields.removeTag)) {\n    update[path('tags')] = FieldValue.arrayRemove(fields.removeTag)\n  }\n  if (fields.campaignIds !== undefined) {\n    update[contactCampaignFieldPath(groupId)] = fields.campaignIds\n  }\n  if (fields.ownerUid !== undefined) update[path('ownerUid')] = text(fields.ownerUid)\n\n  if (fields.companyId !== undefined) {\n    const plan = planContactCompanyLink(\n      readContactCompanyLink(contact, groupId),\n      fields.companyId,\n    )\n    if (plan) {\n      Object.assign(update, contactCompanyLinkFields(plan, groupId))\n      counts = plan.counts\n      if (fields.companyName === undefined) {\n        // The label follows the link: the company's own name, or nothing.\n        const label = plan.companyId ? linkedCompanyName : ''\n        update[path('companyName')] = text(label)\n        // The search echo — see `HostContact.companyName`.\n        update['companyName'] = text(label)\n      }\n    }\n  }\n  if (fields.companyName !== undefined) {\n    update[path('companyName')] = text(fields.companyName)\n    update['companyName'] = text(fields.companyName)\n  }\n  for (const [key, value] of Object.entries(custom ?? {})) {\n    update[path(`custom.${key}`)] = value\n  }\n  if (fields.mediaIds !== undefined) update[path(CRM_MEDIA_IDS_FIELD)] = fields.mediaIds\n\n  if (!Object.keys(update).length) return { update: null, counts }\n  update['updatedAt'] = FieldValue.serverTimestamp()\n  return { update, counts }\n}\n\n/**\n * Every write in one batch, and — when the batch is refused — each on its\n * own, so the contact that could not be written is the only one reported.\n * Answers the ids that were not written.\n */\nasync function commitContactWrites(\n  firestore: FirebaseFirestore.Firestore,\n  writes: readonly ContactWrite[],\n): Promise<Set<string>> {\n  const failed = new Set<string>()\n  if (!writes.length) return failed\n  const batch = firestore.batch()\n  for (const write of writes) batch.update(write.ref, write.update)\n  let committed = false\n  try {\n    await batch.commit()\n    committed = true\n  } catch {\n    // A batch names no document; the pass below finds the one it was.\n  }\n  if (!committed) {\n    for (const write of writes) {\n      try {\n        await write.ref.update(write.update)\n      } catch (error) {\n        console.error('[crm] contact-update could not write a contact', write.contactId, error)\n        failed.add(write.contactId)\n      }\n    }\n  }\n  // The owner, tags, company and custom values are what the Contacts list\n  // filters by through `facetKeys` (AGL-3321): restamped from each row.\n  await restampCrmListFieldsOf(\n    writes.filter((write) => !failed.has(write.contactId)).map((write) => write.ref),\n    'contacts',\n  )\n  return failed\n}\n\n/** Each company's contacts count moved once, by the sum of what the written links moved. */\nasync function settleCompanyCounts(\n  companies: FirebaseFirestore.CollectionReference,\n  writes: readonly ContactWrite[],\n): Promise<void> {\n  const deltas = new Map<string, number>()\n  for (const write of writes) {\n    for (const count of write.counts) {\n      deltas.set(count.companyId, (deltas.get(count.companyId) ?? 0) + count.delta)\n    }\n  }\n  await Promise.all(\n    [...deltas]\n      .filter(([, delta]) => delta !== 0)\n      .map(([companyId, delta]) =>\n        companies\n          .doc(companyId)\n          .update(companyContactsCountFields(delta))\n          .catch((error: unknown) => {\n            console.error('[crm] company contacts count could not move', companyId, delta, error)\n          }),\n      ),\n  )\n}\n\nexport const crmContactUpdateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const contactIds = readContactIds(body['contactIds'])\n  if (!contactIds) {\n    res.status(400).json({ error: `Name between 1 and ${CRM_CONTACT_UPDATE_MAX} contacts.` })\n    return\n  }\n  const read = readContactUpdateFields(body['set'])\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const { fields } = read\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    if (scope.level === 'site' && !reachesSite(writer, scope.hostId)) {\n      res.status(403).json({ error: 'Your access to this organization does not reach this site.' })\n      return\n    }\n    // The plan after the person, and before any contact is read (AGL-2787).\n    const suite = crmSuiteRefusal(writer.org, contactUpdateSuiteAct(fields))\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(writer.orgId)\n    const siteGroup =\n      scope.level === 'site' ? consentGroupForHost(writer.org, scope.hostId) : null\n    const siteTokens = siteGroup ? crmReadTokens(siteGroup) : null\n\n    let custom: Record<string, ContactCustomValue> | undefined\n    if (fields.custom) {\n      const definitions = await orgRef\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        fields.custom,\n        definitions.docs.map((doc) => doc.data() as ContactFieldDefinition),\n        'contact',\n      )\n      if ('errors' in judged) {\n        res.status(400).json({\n          error: Object.values(judged.errors)[0] ?? 'A custom value could not be saved.',\n        })\n        return\n      }\n      custom = judged.values\n    }\n\n    /*\n     * THE ORG'S LEAD SOURCES (AGL-3298), read only when the body names one.\n     * Judged per contact below, because a contact keeps the value it\n     * already holds even when the list has since deactivated it.\n     */\n    const leadSources = fields.leadSource\n      ? effectiveCrmLeadSourcePicklist(\n          (\n            await orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST).get()\n          ).data(),\n        )\n      : null\n\n    if (fields.ownerUid) {\n      const owner = await resolveOrgMembership(fields.ownerUid, writer.orgId).catch(() => null)\n      if (!owner?.member) {\n        res.status(400).json({ error: 'The owner is not a member of this organization.' })\n        return\n      }\n    }\n\n    // The company a link names has to exist and be visible to the caller and\n    // the site, or a person could be filed under a record nobody here can open.\n    let linkedCompanyName = ''\n    if (fields.companyId) {\n      const company = await orgRef\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(fields.companyId)\n        .get()\n      const tokens = company.exists ? (company.get('visibleTo') as string[] | undefined) : undefined\n      const visible =\n        company.exists &&\n        canReach(writer, tokens) &&\n        (!siteTokens || visibleToTokens(tokens, siteTokens))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      linkedCompanyName = typed(company.get('name'), 120)\n    }\n\n    const contacts = orgRef.collection('contacts')\n    const snapshots = await firestore.getAll(...contactIds.map((id) => contacts.doc(id)))\n    const outcomes = new Map<string, ContactUpdateOutcome>()\n    const writes: ContactWrite[] = []\n    snapshots.forEach((snapshot, index) => {\n      const contactId = contactIds[index]\n      if (!snapshot.exists) {\n        outcomes.set(contactId, refused(contactId, 'That contact no longer exists.'))\n        return\n      }\n      const data = (snapshot.data() ?? {}) as Record<string, unknown>\n      const visibleTo = data['visibleTo'] as string[] | undefined\n      if (!canReach(writer, visibleTo)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to you.'))\n        return\n      }\n      if (siteTokens && !visibleToTokens(visibleTo, siteTokens)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to this site.'))\n        return\n      }\n      const group = siteGroup ?? contactPrimaryGroup(data, writer.org)\n      if (!group.groupId) {\n        outcomes.set(contactId, refused(contactId, NO_HOLDER_REFUSAL))\n        return\n      }\n      let rowFields = fields\n      if (leadSources && fields.leadSource) {\n        const judged = judgeCrmLeadSource(\n          leadSources,\n          fields.leadSource,\n          readContactFacet(data, group.groupId).leadSource,\n        )\n        if (judged.ok === false) {\n          outcomes.set(contactId, refused(contactId, judged.error))\n          return\n        }\n        rowFields = { ...fields, leadSource: judged.value ?? '' }\n      }\n      const patch = contactPatch(data, group.groupId, rowFields, custom, linkedCompanyName)\n      if ('refused' in patch) {\n        outcomes.set(contactId, refused(contactId, patch.refused))\n        return\n      }\n      outcomes.set(contactId, { contactId, ok: true })\n      if (patch.update) {\n        writes.push({ contactId, ref: snapshot.ref, update: patch.update, counts: patch.counts })\n      }\n    })\n\n    const failed = await commitContactWrites(firestore, writes)\n    for (const contactId of failed) {\n      outcomes.set(contactId, refused(contactId, 'The contact could not be saved.'))\n    }\n    await settleCompanyCounts(\n      orgRef.collection(CRM_COLLECTIONS.companies),\n      writes.filter((write) => !failed.has(write.contactId)),\n    )\n\n    const answer: ContactUpdateResponse = {\n      ok: true,\n      results: contactIds.map(\n        (contactId) => outcomes.get(contactId) ?? refused(contactId, 'The contact could not be saved.'),\n      ),\n    }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] contact-update failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n"],"names":["consentGroupForHost","CONTACT_FIELDS_MAX_PER_ORG","campaignMembershipValue","contactCampaignFieldPath","contactFacetPath","contactPrimaryGroup","CRM_COLLECTIONS","CRM_LEAD_SOURCE_PICKLIST","CRM_MEDIA_IDS_FIELD","crmReadTokens","effectiveCrmLeadSourcePicklist","isOrgWideMember","judgeCrmLeadSource","normalizeAddress","normalizeCrmMediaIds","normalizeCrmPicklistLabel","normalizePhone","planContactCompanyLink","readContactCompanyLink","readContactFacet","readCrmCustomInput","visibleToTokens","companyContactsCountFields","contactCompanyLinkFields","firebaseAdmin","resolveOrgMembership","restampCrmListFieldsOf","FieldValue","CONTACT_UPDATE_FIELDS","CRM_CONTACT_UPDATE_MAX","CONTACT_NOTES_MAX","CONTACT_PHONE_REFUSAL","CONTACT_TAGS_MAX","normalizeTags","readBulkTag","typed","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","canReach","SUITE_ACTS","name","phone","jobTitle","leadSource","address","notes","tags","addTag","removeTag","campaignIds","ownerUid","companyId","companyName","custom","mediaIds","NO_HOLDER_REFUSAL","contactUpdateSuiteAct","fields","field","find","key","undefined","readContactUpdateFields","input","raw","Array","isArray","ok","error","unknownKey","Object","keys","includes","text","String","slice","filter","length","tag","ids","map","id","readContactIds","value","some","Set","reachesSite","writer","hostId","staff","member","Boolean","hostAccess","refused","contactId","contactPatch","contact","groupId","linkedCompanyName","path","delete","update","counts","held","toLowerCase","arrayUnion","arrayRemove","plan","assign","label","entries","serverTimestamp","commitContactWrites","firestore","writes","failed","batch","write","ref","committed","commit","console","add","has","settleCompanyCounts","companies","deltas","Map","count","set","get","delta","Promise","all","doc","catch","crmContactUpdateHandler","req","res","method","setHeader","status","json","body","scope","contactIds","read","suiteAct","level","suite","org","app","orgRef","collection","orgId","siteGroup","siteTokens","definitions","contactFields","limit","judged","docs","data","values","errors","leadSources","picklists","owner","company","tokens","exists","visible","contacts","snapshots","getAll","outcomes","forEach","snapshot","index","visibleTo","group","rowFields","patch","push","answer","results"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDC,GAED,SAEEA,mBAAmB,EACnBC,0BAA0B,EAI1BC,uBAAuB,EACvBC,wBAAwB,EACxBC,gBAAgB,EAChBC,mBAAmB,EACnBC,eAAe,EACfC,wBAAwB,EACxBC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,EAC9BC,eAAe,EACfC,kBAAkB,EAClBC,gBAAgB,EAChBC,oBAAoB,EACpBC,yBAAyB,EACzBC,cAAc,EAEdC,sBAAsB,EACtBC,sBAAsB,EACtBC,gBAAgB,EAChBC,kBAAkB,EAClBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,0BAA0B,EAC1BC,wBAAwB,EACxBC,aAAa,EACbC,oBAAoB,EACpBC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,qBAAqB,EAIrBC,sBAAsB,QACjB,6BAAyB;AAChC,SACEC,iBAAiB,EACjBC,qBAAqB,EACrBC,gBAAgB,EAChBC,aAAa,EACbC,WAAW,EACXC,KAAK,QACA,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,EAAEC,QAAQ,QAAqB,mBAAe;AAEzE,kEAAkE,GAClE,MAAMC,aAAwD;IAC5DC,MAAM;IACNC,OAAO;IACPC,UAAU;IACVC,YAAY;IACZC,SAAS;IACTC,OAAO;IACPC,MAAM;IACNC,QAAQ;IACRC,WAAW;IACXC,aAAa;IACbC,UAAU;IACVC,WAAW;IACXC,aAAa;IACbC,QAAQ;IACRC,UAAU;AACZ;AAEA,wEAAwE,GACxE,MAAMC,oBAAoB;AAE1B;;;;CAIC,GACD,OAAO,SAASC,sBAAsBC,MAA2B;IAC/D,MAAMC,QAAQ/B,sBAAsBgC,IAAI,CAAC,CAACC,MAAQH,MAAM,CAACG,IAAI,KAAKC;IAClE,OAAOH,QAAQnB,UAAU,CAACmB,MAAM,GAAG;AACrC;AAEA;;;;CAIC,GACD,OAAO,SAASI,wBACdC,KAAc;QA+B4BC;IA7B1C,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYE,MAAMC,OAAO,CAACH,QAAQ;QAC/D,OAAO;YAAEI,IAAI;YAAOC,OAAO;QAA2B;IACxD;IACA,MAAMJ,MAAMD;IACZ,MAAMM,aAAaC,OAAOC,IAAI,CAACP,KAAKL,IAAI,CACtC,CAACC,MAAQ,CAAC,AAACjC,sBAA4C6C,QAAQ,CAACZ;IAElE,IAAIS,YAAY;QACd,OAAO;YAAEF,IAAI;YAAOC,OAAO,CAAC,CAAC,EAAEC,WAAW,2CAA2C,CAAC;QAAC;IACzF;IACA,MAAMZ,SAA8B,CAAC;IACrC,IAAI,UAAUO,KAAKP,OAAOjB,IAAI,GAAGN,MAAM8B,GAAG,CAAC,OAAO,EAAE;IACpD,IAAI,WAAWA,KAAK;QAClB,MAAMS,OAAOvC,MAAM8B,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAMvB,QAAQgC,OAAO1D,eAAe0D,QAAQ;QAC5C,IAAIhC,UAAU,MAAM,OAAO;YAAE0B,IAAI;YAAOC,OAAOtC;QAAsB;QACrE2B,OAAOhB,KAAK,GAAGA;IACjB;IACA,IAAI,cAAcuB,KAAKP,OAAOf,QAAQ,GAAGR,MAAM8B,GAAG,CAAC,WAAW,EAAE;IAChE,uEAAuE;IACvE,+CAA+C;IAC/C,IAAI,gBAAgBA,KAAKP,OAAOd,UAAU,GAAG7B,0BAA0BkD,GAAG,CAAC,aAAa;IACxF,IAAI,aAAaA,KAAK;QACpB,MAAMpB,UAAUoB,GAAG,CAAC,UAAU;QAC9BP,OAAOb,OAAO,GACZA,WAAW,OAAOA,YAAY,YAAY,CAACqB,MAAMC,OAAO,CAACtB,WACrDhC,iBAAiBgC,WACjB;IACR;IACA,IAAI,WAAWoB,KAAKP,OAAOZ,KAAK,GAAG6B,QAAOV,aAAAA,GAAG,CAAC,QAAQ,YAAZA,aAAgB,IAAIW,KAAK,CAAC,GAAG9C;IACvE,yEAAyE;IACzE,uDAAuD;IACvD,IAAI;QAAC;QAAQ;QAAU;KAAY,CAAC+C,MAAM,CAAC,CAAChB,MAAQA,OAAOI,KAAKa,MAAM,GAAG,GAAG;QAC1E,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAgE;IAC7F;IACA,IAAI,UAAUJ,KAAK;QACjB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,OAAO,GAAG,OAAO;YAAEG,IAAI;YAAOC,OAAO;QAAuB;QACnFX,OAAOX,IAAI,GAAGd,cAAcgC,GAAG,CAAC,OAAO;IACzC;IACA,KAAK,MAAMJ,OAAO;QAAC;QAAU;KAAY,CAAW;QAClD,IAAI,CAAEA,CAAAA,OAAOI,GAAE,GAAI;QACnB,MAAMc,MAAM7C,YAAY+B,GAAG,CAACJ,IAAI;QAChC,IAAI,CAACkB,KAAK,OAAO;YAAEX,IAAI;YAAOC,OAAO;QAAgB;QACrDX,MAAM,CAACG,IAAI,GAAGkB;IAChB;IACA,IAAI,iBAAiBd,KAAK;QACxB,MAAMe,MAAMf,GAAG,CAAC,cAAc;QAC9B,IAAI,CAACC,MAAMC,OAAO,CAACa,MAAM,OAAO;YAAEZ,IAAI;YAAOC,OAAO;QAA4B;QAChFX,OAAOR,WAAW,GAAGhD,wBAAwB8E,IAAIC,GAAG,CAAC,CAACC,KAAOP,OAAOO,aAAAA,KAAM;IAC5E;IACA,IAAI,cAAcjB,KAAKP,OAAOP,QAAQ,GAAGhB,MAAM8B,GAAG,CAAC,WAAW,EAAE;IAChE,IAAI,eAAeA,KAAK;QACtB,MAAMb,YAAYa,GAAG,CAAC,YAAY,KAAK,OAAO,OAAO9B,MAAM8B,GAAG,CAAC,YAAY,EAAE;QAC7E,IAAIb,cAAc,QAAS,CAAA,CAACA,aAAaA,UAAUqB,QAAQ,CAAC,IAAG,GAAI;YACjE,OAAO;gBAAEL,IAAI;gBAAOC,OAAO;YAAiC;QAC9D;QACAX,OAAON,SAAS,GAAGA;IACrB;IACA,IAAI,iBAAiBa,KAAKP,OAAOL,WAAW,GAAGlB,MAAM8B,GAAG,CAAC,cAAc,EAAE;IACzE,IAAI,YAAYA,KAAK;QACnB,MAAMX,SAASW,GAAG,CAAC,SAAS;QAC5B,IAAI,CAACX,UAAU,OAAOA,WAAW,YAAYY,MAAMC,OAAO,CAACb,SAAS;YAClE,OAAO;gBAAEc,IAAI;gBAAOC,OAAO;YAAmD;QAChF;QACAX,OAAOJ,MAAM,GAAGA;IAClB;IACA,IAAI,cAAcW,KAAK;QACrB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,WAAW,GAAG;YACnC,OAAO;gBAAEG,IAAI;gBAAOC,OAAO;YAA+B;QAC5D;QACAX,OAAOH,QAAQ,GAAGzC,qBAAqBmD,GAAG,CAAC,WAAW;IACxD;IACA,IAAI,CAACM,OAAOC,IAAI,CAACd,QAAQoB,MAAM,EAAE,OAAO;QAAEV,IAAI;QAAOC,OAAO;IAA2B;IACvF,OAAO;QAAED,IAAI;QAAMV;IAAO;AAC5B;AAEA,iGAAiG,GACjG,SAASyB,eAAeC,KAAc;IACpC,IAAI,CAAClB,MAAMC,OAAO,CAACiB,UAAU,CAACA,MAAMN,MAAM,IAAIM,MAAMN,MAAM,GAAGjD,wBAAwB;QACnF,OAAO;IACT;IACA,MAAMmD,MAAMI,MAAMH,GAAG,CAAC,CAACC,KAAO/C,MAAM+C,IAAI;IACxC,IAAIF,IAAIK,IAAI,CAAC,CAACH,KAAO,CAACA,MAAMA,GAAGT,QAAQ,CAAC,OAAO,OAAO;IACtD,OAAO;WAAI,IAAIa,IAAIN;KAAK;AAC1B;AAEA;;;;;CAKC,GACD,SAASO,YAAYC,MAAc,EAAEC,MAAc;QAItCD,2BAAAA;IAHX,OACEA,OAAOE,KAAK,IACZ/E,gBAAgB6E,OAAOG,MAAM,KAC7BC,SAASJ,iBAAAA,OAAOG,MAAM,sBAAbH,4BAAAA,eAAeK,UAAU,qBAA1B,AAACL,yBAAmE,CAACC,OAAO;AAExF;AAEA,MAAMK,UAAU,CAACC,WAAmB1B,QAAyC,CAAA;QAC3E0B;QACA3B,IAAI;QACJC;IACF,CAAA;AASA;;;;CAIC,GACD,SAAS2B,aACPC,OAAgC,EAChCC,OAAe,EACfxC,MAA2B,EAC3BJ,MAAsD,EACtD6C,iBAAyB;QAwBXhF;IApBd,MAAMiF,OAAO,CAACzC,QAAkBvD,iBAAiB8F,SAASvC;IAC1D,+DAA+D,GAC/D,MAAMe,OAAO,CAACU,QAAkBA,SAASzD,WAAW0E,MAAM;IAC1D,MAAMC,SAAkC,CAAC;IACzC,IAAIC,SAA2C,EAAE;IAEjD,IAAI7C,OAAOjB,IAAI,KAAKqB,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1B,KAAKhB,OAAOjB,IAAI;IACtE,IAAIiB,OAAOhB,KAAK,KAAKoB,WAAW;QAC9BwC,MAAM,CAACF,KAAK,SAAS,GAAG1B,KAAKhB,OAAOhB,KAAK;QACzC,6CAA6C;QAC7C4D,MAAM,CAAC,QAAQ,GAAG5B,KAAKhB,OAAOhB,KAAK;IACrC;IACA,IAAIgB,OAAOf,QAAQ,KAAKmB,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOf,QAAQ;IAClF,IAAIe,OAAOd,UAAU,KAAKkB,WAAWwC,MAAM,CAACF,KAAK,cAAc,GAAG1B,KAAKhB,OAAOd,UAAU;IACxF,IAAIc,OAAOb,OAAO,KAAKiB,WAAW;YACNJ;QAA1B4C,MAAM,CAACF,KAAK,WAAW,IAAG1C,kBAAAA,OAAOb,OAAO,YAAda,kBAAkB/B,WAAW0E,MAAM;IAC/D;IACA,IAAI3C,OAAOZ,KAAK,KAAKgB,WAAWwC,MAAM,CAACF,KAAK,SAAS,GAAG1C,OAAOZ,KAAK;IACpE,IAAIY,OAAOX,IAAI,KAAKe,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1C,OAAOX,IAAI;IAEjE,MAAMyD,OAAO,EAACrF,yBAAAA,iBAAiB8E,SAASC,SAASnD,IAAI,YAAvC5B,yBAA2C,EAAE,EAAE8D,GAAG,CAAC,CAACF,MAChEJ,OAAOI,KAAK0B,WAAW;IAEzB,IAAI/C,OAAOV,MAAM,IAAI,CAACwD,KAAK/B,QAAQ,CAACf,OAAOV,MAAM,GAAG;QAClD,+DAA+D;QAC/D,IAAIwD,KAAK1B,MAAM,IAAI9C,kBAAkB;YACnC,OAAO;gBAAE8D,SAAS,CAAC,YAAY,EAAE9D,iBAAiB,KAAK,CAAC;YAAC;QAC3D;QACAsE,MAAM,CAACF,KAAK,QAAQ,GAAGzE,WAAW+E,UAAU,CAAChD,OAAOV,MAAM;IAC5D;IACA,IAAIU,OAAOT,SAAS,IAAIuD,KAAK/B,QAAQ,CAACf,OAAOT,SAAS,GAAG;QACvDqD,MAAM,CAACF,KAAK,QAAQ,GAAGzE,WAAWgF,WAAW,CAACjD,OAAOT,SAAS;IAChE;IACA,IAAIS,OAAOR,WAAW,KAAKY,WAAW;QACpCwC,MAAM,CAACnG,yBAAyB+F,SAAS,GAAGxC,OAAOR,WAAW;IAChE;IACA,IAAIQ,OAAOP,QAAQ,KAAKW,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOP,QAAQ;IAElF,IAAIO,OAAON,SAAS,KAAKU,WAAW;QAClC,MAAM8C,OAAO3F,uBACXC,uBAAuB+E,SAASC,UAChCxC,OAAON,SAAS;QAElB,IAAIwD,MAAM;YACRrC,OAAOsC,MAAM,CAACP,QAAQ/E,yBAAyBqF,MAAMV;YACrDK,SAASK,KAAKL,MAAM;YACpB,IAAI7C,OAAOL,WAAW,KAAKS,WAAW;gBACpC,kEAAkE;gBAClE,MAAMgD,QAAQF,KAAKxD,SAAS,GAAG+C,oBAAoB;gBACnDG,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKoC;gBACnC,mDAAmD;gBACnDR,MAAM,CAAC,cAAc,GAAG5B,KAAKoC;YAC/B;QACF;IACF;IACA,IAAIpD,OAAOL,WAAW,KAAKS,WAAW;QACpCwC,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKhB,OAAOL,WAAW;QACrDiD,MAAM,CAAC,cAAc,GAAG5B,KAAKhB,OAAOL,WAAW;IACjD;IACA,KAAK,MAAM,CAACQ,KAAKuB,MAAM,IAAIb,OAAOwC,OAAO,CAACzD,iBAAAA,SAAU,CAAC,GAAI;QACvDgD,MAAM,CAACF,KAAK,CAAC,OAAO,EAAEvC,KAAK,EAAE,GAAGuB;IAClC;IACA,IAAI1B,OAAOH,QAAQ,KAAKO,WAAWwC,MAAM,CAACF,KAAK5F,qBAAqB,GAAGkD,OAAOH,QAAQ;IAEtF,IAAI,CAACgB,OAAOC,IAAI,CAAC8B,QAAQxB,MAAM,EAAE,OAAO;QAAEwB,QAAQ;QAAMC;IAAO;IAC/DD,MAAM,CAAC,YAAY,GAAG3E,WAAWqF,eAAe;IAChD,OAAO;QAAEV;QAAQC;IAAO;AAC1B;AAEA;;;;CAIC,GACD,eAAeU,oBACbC,SAAsC,EACtCC,MAA+B;IAE/B,MAAMC,SAAS,IAAI9B;IACnB,IAAI,CAAC6B,OAAOrC,MAAM,EAAE,OAAOsC;IAC3B,MAAMC,QAAQH,UAAUG,KAAK;IAC7B,KAAK,MAAMC,SAASH,OAAQE,MAAMf,MAAM,CAACgB,MAAMC,GAAG,EAAED,MAAMhB,MAAM;IAChE,IAAIkB,YAAY;IAChB,IAAI;QACF,MAAMH,MAAMI,MAAM;QAClBD,YAAY;IACd,EAAE,eAAM;IACN,kEAAkE;IACpE;IACA,IAAI,CAACA,WAAW;QACd,KAAK,MAAMF,SAASH,OAAQ;YAC1B,IAAI;gBACF,MAAMG,MAAMC,GAAG,CAACjB,MAAM,CAACgB,MAAMhB,MAAM;YACrC,EAAE,OAAOjC,OAAO;gBACdqD,QAAQrD,KAAK,CAAC,kDAAkDiD,MAAMvB,SAAS,EAAE1B;gBACjF+C,OAAOO,GAAG,CAACL,MAAMvB,SAAS;YAC5B;QACF;IACF;IACA,wEAAwE;IACxE,sEAAsE;IACtE,MAAMrE,uBACJyF,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOQ,GAAG,CAACN,MAAMvB,SAAS,GAAGd,GAAG,CAAC,CAACqC,QAAUA,MAAMC,GAAG,GAC/E;IAEF,OAAOH;AACT;AAEA,0FAA0F,GAC1F,eAAeS,oBACbC,SAAgD,EAChDX,MAA+B;IAE/B,MAAMY,SAAS,IAAIC;IACnB,KAAK,MAAMV,SAASH,OAAQ;QAC1B,KAAK,MAAMc,SAASX,MAAMf,MAAM,CAAE;gBACHwB;YAA7BA,OAAOG,GAAG,CAACD,MAAM7E,SAAS,EAAE,EAAC2E,cAAAA,OAAOI,GAAG,CAACF,MAAM7E,SAAS,aAA1B2E,cAA+B,KAAKE,MAAMG,KAAK;QAC9E;IACF;IACA,MAAMC,QAAQC,GAAG,CACf;WAAIP;KAAO,CACRlD,MAAM,CAAC,CAAC,GAAGuD,MAAM,GAAKA,UAAU,GAChCnD,GAAG,CAAC,CAAC,CAAC7B,WAAWgF,MAAM,GACtBN,UACGS,GAAG,CAACnF,WACJkD,MAAM,CAAChF,2BAA2B8G,QAClCI,KAAK,CAAC,CAACnE;YACNqD,QAAQrD,KAAK,CAAC,+CAA+CjB,WAAWgF,OAAO/D;QACjF;AAGV;AAEA,OAAO,MAAMoE,0BAA4C,OAAOC,KAAKC;QAMrDD;IALd,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAqB;QACnD;IACF;IACA,MAAM2E,QAAQN,YAAAA,IAAIM,IAAI,YAARN,YAAY,CAAC;IAC3B,MAAMO,QAAQ7G,kBAAkB4G;IAChC,IAAI,CAACC,OAAO;QACVN,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM6E,aAAa/D,eAAe6D,IAAI,CAAC,aAAa;IACpD,IAAI,CAACE,YAAY;QACfP,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO,CAAC,mBAAmB,EAAExC,uBAAuB,UAAU,CAAC;QAAC;QACvF;IACF;IACA,MAAMsH,OAAOpF,wBAAwBiF,IAAI,CAAC,MAAM;IAChD,IAAIG,KAAK/E,EAAE,KAAK,OAAO;QACrBuE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO8E,KAAK9E,KAAK;QAAC;QACzC;IACF;IACA,MAAM,EAAEX,MAAM,EAAE,GAAGyF;IAEnB,IAAI;QACF,MAAM3D,SAAS,MAAMlD,mBAAmBoG,KAAKO,OAAO;YAAEG,UAAU;QAAK;QACrE,IAAI5D,OAAOpB,EAAE,KAAK,OAAO;YACvBuE,IAAIG,MAAM,CAACtD,OAAOsD,MAAM,EAAEC,IAAI,CAACvD,OAAOwD,IAAI;YAC1C;QACF;QACA,IAAIC,MAAMI,KAAK,KAAK,UAAU,CAAC9D,YAAYC,QAAQyD,MAAMxD,MAAM,GAAG;YAChEkD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAE1E,OAAO;YAA6D;YAC3F;QACF;QACA,wEAAwE;QACxE,MAAMiF,QAAQjH,gBAAgBmD,OAAO+D,GAAG,EAAE9F,sBAAsBC;QAChE,IAAI4F,OAAO;YACTX,IAAIG,MAAM,CAACQ,MAAMR,MAAM,EAAEC,IAAI,CAACO,MAAMN,IAAI;YACxC;QACF;QAEA,MAAM9B,YAAY1F,cAAcgI,GAAG,GAAGtC,SAAS;QAC/C,MAAMuC,SAASvC,UAAUwC,UAAU,CAAC,QAAQnB,GAAG,CAAC/C,OAAOmE,KAAK;QAC5D,MAAMC,YACJX,MAAMI,KAAK,KAAK,SAASrJ,oBAAoBwF,OAAO+D,GAAG,EAAEN,MAAMxD,MAAM,IAAI;QAC3E,MAAMoE,aAAaD,YAAYnJ,cAAcmJ,aAAa;QAE1D,IAAItG;QACJ,IAAII,OAAOJ,MAAM,EAAE;YACjB,MAAMwG,cAAc,MAAML,OACvBC,UAAU,CAACpJ,gBAAgByJ,aAAa,EACxCC,KAAK,CAAC/J,4BACNkI,GAAG;YACN,MAAM8B,SAAS7I,mBACbsC,OAAOJ,MAAM,EACbwG,YAAYI,IAAI,CAACjF,GAAG,CAAC,CAACsD,MAAQA,IAAI4B,IAAI,KACtC;YAEF,IAAI,YAAYF,QAAQ;oBAEb1F;gBADToE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnB1E,KAAK,GAAEE,kBAAAA,OAAO6F,MAAM,CAACH,OAAOI,MAAM,CAAC,CAAC,EAAE,YAA/B9F,kBAAmC;gBAC5C;gBACA;YACF;YACAjB,SAAS2G,OAAOG,MAAM;QACxB;QAEA;;;;KAIC,GACD,MAAME,cAAc5G,OAAOd,UAAU,GACjClC,+BACE,AACE,CAAA,MAAM+I,OAAOC,UAAU,CAACpJ,gBAAgBiK,SAAS,EAAEhC,GAAG,CAAChI,0BAA0B4H,GAAG,EAAC,EACrFgC,IAAI,MAER;QAEJ,IAAIzG,OAAOP,QAAQ,EAAE;YACnB,MAAMqH,QAAQ,MAAM/I,qBAAqBiC,OAAOP,QAAQ,EAAEqC,OAAOmE,KAAK,EAAEnB,KAAK,CAAC,IAAM;YACpF,IAAI,EAACgC,yBAAAA,MAAO7E,MAAM,GAAE;gBAClBgD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAE1E,OAAO;gBAAkD;gBAChF;YACF;QACF;QAEA,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI8B,oBAAoB;QACxB,IAAIzC,OAAON,SAAS,EAAE;YACpB,MAAMqH,UAAU,MAAMhB,OACnBC,UAAU,CAACpJ,gBAAgBwH,SAAS,EACpCS,GAAG,CAAC7E,OAAON,SAAS,EACpB+E,GAAG;YACN,MAAMuC,SAASD,QAAQE,MAAM,GAAIF,QAAQtC,GAAG,CAAC,eAAwCrE;YACrF,MAAM8G,UACJH,QAAQE,MAAM,IACdpI,SAASiD,QAAQkF,WAChB,CAAA,CAACb,cAAcxI,gBAAgBqJ,QAAQb,WAAU;YACpD,IAAI,CAACe,SAAS;gBACZjC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAE1E,OAAO;gBAAkB;gBAChD;YACF;YACA8B,oBAAoBhE,MAAMsI,QAAQtC,GAAG,CAAC,SAAS;QACjD;QAEA,MAAM0C,WAAWpB,OAAOC,UAAU,CAAC;QACnC,MAAMoB,YAAY,MAAM5D,UAAU6D,MAAM,IAAI7B,WAAWjE,GAAG,CAAC,CAACC,KAAO2F,SAAStC,GAAG,CAACrD;QAChF,MAAM8F,WAAW,IAAIhD;QACrB,MAAMb,SAAyB,EAAE;QACjC2D,UAAUG,OAAO,CAAC,CAACC,UAAUC;gBAMbD;YALd,MAAMnF,YAAYmD,UAAU,CAACiC,MAAM;YACnC,IAAI,CAACD,SAASP,MAAM,EAAE;gBACpBK,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMoE,QAAQe,iBAAAA,SAASf,IAAI,cAAbe,iBAAmB,CAAC;YAClC,MAAME,YAAYjB,IAAI,CAAC,YAAY;YACnC,IAAI,CAAC5H,SAASiD,QAAQ4F,YAAY;gBAChCJ,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,IAAI8D,cAAc,CAACxI,gBAAgB+J,WAAWvB,aAAa;gBACzDmB,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMsF,QAAQzB,oBAAAA,YAAavJ,oBAAoB8J,MAAM3E,OAAO+D,GAAG;YAC/D,IAAI,CAAC8B,MAAMnF,OAAO,EAAE;gBAClB8E,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWvC;gBAC3C;YACF;YACA,IAAI8H,YAAY5H;YAChB,IAAI4G,eAAe5G,OAAOd,UAAU,EAAE;oBAUCqH;gBATrC,MAAMA,SAASrJ,mBACb0J,aACA5G,OAAOd,UAAU,EACjBzB,iBAAiBgJ,MAAMkB,MAAMnF,OAAO,EAAEtD,UAAU;gBAElD,IAAIqH,OAAO7F,EAAE,KAAK,OAAO;oBACvB4G,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWkE,OAAO5F,KAAK;oBACvD;gBACF;gBACAiH,YAAY,aAAK5H;oBAAQd,UAAU,GAAEqH,gBAAAA,OAAO7E,KAAK,YAAZ6E,gBAAgB;;YACvD;YACA,MAAMsB,QAAQvF,aAAamE,MAAMkB,MAAMnF,OAAO,EAAEoF,WAAWhI,QAAQ6C;YACnE,IAAI,aAAaoF,OAAO;gBACtBP,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWwF,MAAMzF,OAAO;gBACxD;YACF;YACAkF,SAAS9C,GAAG,CAACnC,WAAW;gBAAEA;gBAAW3B,IAAI;YAAK;YAC9C,IAAImH,MAAMjF,MAAM,EAAE;gBAChBa,OAAOqE,IAAI,CAAC;oBAAEzF;oBAAWwB,KAAK2D,SAAS3D,GAAG;oBAAEjB,QAAQiF,MAAMjF,MAAM;oBAAEC,QAAQgF,MAAMhF,MAAM;gBAAC;YACzF;QACF;QAEA,MAAMa,SAAS,MAAMH,oBAAoBC,WAAWC;QACpD,KAAK,MAAMpB,aAAaqB,OAAQ;YAC9B4D,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;QAC7C;QACA,MAAM8B,oBACJ4B,OAAOC,UAAU,CAACpJ,gBAAgBwH,SAAS,GAC3CX,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOQ,GAAG,CAACN,MAAMvB,SAAS;QAGtD,MAAM0F,SAAgC;YACpCrH,IAAI;YACJsH,SAASxC,WAAWjE,GAAG,CACrB,CAACc;oBAAciF;wBAAAA,gBAAAA,SAAS7C,GAAG,CAACpC,sBAAbiF,gBAA2BlF,QAAQC,WAAW;;QAEjE;QACA4C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC0C;IACvB,EAAE,OAAOpH,OAAO;QACdqD,QAAQrD,KAAK,CAAC,+BAA+BA;QAC7CsE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAkC;IAClE;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contact-update.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contact-update` — one holder's profile fields on one or\n * more contacts (AGL-2804).\n *\n * Body: `{ hostId, contactIds, set }` under a site, or `{ orgId, hostId?,\n * contactIds, set }` at the organization level, where `set` is\n * `ContactUpdateFields`. Answers `{ ok, results }`: one outcome per contact,\n * in the order the ids were sent.\n *\n * ## Why every facet write comes here\n *\n * A contact's fields live in the facet of the holder that keeps them —\n * `facets.{groupId}.*` — and the Firestore rules cannot tell one field of a\n * facet from another: the holder is a map key a rule cannot address, and a\n * write's affected keys name only `facets`. So the rules let a client update\n * change nothing in a facet beyond letting a holder go, and the console's\n * edits arrive here, where the plan is asked about the fields the request\n * actually carries.\n *\n * ## Who may call it\n *\n * The CRM writer the task routes admit (`authorizeCrmWriter`): under a site,\n * a member whose role writes org data, who holds `data.manage` and whose\n * access reaches the site; at the organization level, an org-wide member\n * with the permission. Each contact must then be one the caller may read —\n * the rules' `canReadScoped()` — and, under a site, one the site's hub lists.\n *\n * ## The plan\n *\n * Every field is the CRM's (AGL-2790), and a plan without the CRM has none\n * of it (AGL-2851), so it edits no contact: not the owner, company, custom\n * values or files, and not the profile a capture writes (name, phone, job\n * title, address), the tags, the notes or the campaign filing either. A\n * request carrying any field is refused to such a plan once the caller is\n * known, and before a contact is read — staff included, because the plan is\n * a fact about the workspace. Erasing a person is another route, open on\n * every plan.\n *\n * ## One holder, by dotted path\n *\n * Under a site the facet is the site's consent group's; at the organization\n * level it is each contact's own primary holder, the facet the record page\n * shows there. Every field is one dotted path — a nested `facets` object\n * would replace every other holder's map — and a text field sent empty is\n * deleted rather than stored blank, so \"no phone\" has one shape.\n *\n * ## Many contacts, one commit\n *\n * The contacts are read together and written in one batch. A batch that\n * fails is retried contact by contact, so the one that could not be written\n * is named and the rest still land. A company's contacts count follows the\n * link: summed per company and settled once the contacts are written, so a\n * company deleted in between cannot fail the save of the people at it — the\n * company page's live aggregate is what corrects a count that did not move.\n */\n\nimport {\n  type AglynPostalAddress,\n  consentGroupForHost,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactCompanyLinkPlan,\n  type ContactCustomValue,\n  type ContactFieldDefinition,\n  campaignMembershipValue,\n  contactCampaignFieldPath,\n  contactFacetPath,\n  CRM_COLLECTIONS,\n  CRM_LEAD_SOURCE_PICKLIST,\n  CRM_MEDIA_IDS_FIELD,\n  crmReadTokens,\n  effectiveCrmLeadSourcePicklist,\n  isOrgWideMember,\n  judgeCrmLeadSource,\n  normalizeAddress,\n  normalizeCrmMediaIds,\n  normalizeCrmPicklistLabel,\n  normalizePhone,\n  type PluginApiHandler,\n  planContactCompanyLink,\n  readContactCompanyLink,\n  readContactFacet,\n  readCrmCustomInput,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  companyContactsCountFields,\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  resolveOrgMembership,\n  restampCrmListFieldsOf,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CONTACT_UPDATE_FIELDS,\n  type ContactUpdateFields,\n  type ContactUpdateOutcome,\n  type ContactUpdateResponse,\n  CRM_CONTACT_UPDATE_MAX,\n} from '../model/contact-update'\nimport {\n  CONTACT_NOTES_MAX,\n  CONTACT_PHONE_REFUSAL,\n  CONTACT_TAGS_MAX,\n  normalizeTags,\n  readBulkTag,\n  typed,\n} from './contact-profile'\nimport { readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter, canReach, type Writer } from './task-routes'\nimport { contactPrimaryGroup } from '../model/contact-holder'\n\n/** What the suite gate names for each field a request can carry. */\nconst SUITE_ACTS: Record<keyof ContactUpdateFields, string> = {\n  name: \"Editing a contact's profile\",\n  phone: \"Editing a contact's profile\",\n  jobTitle: \"Editing a contact's profile\",\n  leadSource: \"Editing a contact's profile\",\n  address: \"Editing a contact's profile\",\n  notes: \"Editing a contact's notes\",\n  tags: 'Tagging a contact',\n  addTag: 'Tagging a contact',\n  removeTag: 'Tagging a contact',\n  campaignIds: 'Filing a contact under a campaign',\n  ownerUid: \"Assigning a contact's owner\",\n  companyId: 'Filing a contact under a company',\n  companyName: 'Filing a contact under a company',\n  custom: \"Editing a contact's custom fields\",\n  mediaIds: 'Attaching files to a contact',\n}\n\n/** A contact read at the organization level that no site has captured. */\nconst NO_HOLDER_REFUSAL = 'No site holds this contact yet, so it has no profile to edit.'\n\n/**\n * The act a request is refused for on a plan without the CRM: the first\n * field it carries, in the order the route reads them. Every field is the\n * CRM's, so whichever field a request names is the act its refusal names.\n */\nexport function contactUpdateSuiteAct(fields: ContactUpdateFields): string {\n  const field = CONTACT_UPDATE_FIELDS.find((key) => fields[key] !== undefined)\n  return field ? SUITE_ACTS[field] : \"Editing a contact's profile\"\n}\n\n/**\n * A body's `set`, read into the fields it names, or the sentence refusing\n * it. A key the route does not save is refused rather than dropped: a save\n * that silently lost a field would read as a save that kept it.\n */\nexport function readContactUpdateFields(\n  input: unknown,\n): { ok: true; fields: ContactUpdateFields } | { ok: false; error: string } {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) {\n    return { ok: false, error: 'Name the fields to save.' }\n  }\n  const raw = input as Record<string, unknown>\n  const unknownKey = Object.keys(raw).find(\n    (key) => !(CONTACT_UPDATE_FIELDS as readonly string[]).includes(key),\n  )\n  if (unknownKey) {\n    return { ok: false, error: `\"${unknownKey}\" is not a field a contact's profile saves.` }\n  }\n  const fields: ContactUpdateFields = {}\n  if ('name' in raw) fields.name = typed(raw['name'], 120)\n  if ('phone' in raw) {\n    const text = typed(raw['phone'], 40)\n    const phone = text ? normalizePhone(text) : ''\n    if (phone === null) return { ok: false, error: CONTACT_PHONE_REFUSAL }\n    fields.phone = phone\n  }\n  if ('jobTitle' in raw) fields.jobTitle = typed(raw['jobTitle'], 120)\n  // Held to the label's shape here; judged against the org's list by the\n  // handler, which alone can read it (AGL-3298).\n  if ('leadSource' in raw) fields.leadSource = normalizeCrmPicklistLabel(raw['leadSource'])\n  if ('address' in raw) {\n    const address = raw['address']\n    fields.address =\n      address && typeof address === 'object' && !Array.isArray(address)\n        ? normalizeAddress(address as AglynPostalAddress)\n        : null\n  }\n  if ('notes' in raw) fields.notes = String(raw['notes'] ?? '').slice(0, CONTACT_NOTES_MAX)\n  // One write may carry one transform per field, so the tags are replaced,\n  // added to or taken from — never two of those at once.\n  if (['tags', 'addTag', 'removeTag'].filter((key) => key in raw).length > 1) {\n    return { ok: false, error: 'Send the tags, a tag to add or a tag to remove — one of them.' }\n  }\n  if ('tags' in raw) {\n    if (!Array.isArray(raw['tags'])) return { ok: false, error: 'Tags must be a list.' }\n    fields.tags = normalizeTags(raw['tags'])\n  }\n  for (const key of ['addTag', 'removeTag'] as const) {\n    if (!(key in raw)) continue\n    const tag = readBulkTag(raw[key])\n    if (!tag) return { ok: false, error: 'Name the tag.' }\n    fields[key] = tag\n  }\n  if ('campaignIds' in raw) {\n    const ids = raw['campaignIds']\n    if (!Array.isArray(ids)) return { ok: false, error: 'Campaigns must be a list.' }\n    fields.campaignIds = campaignMembershipValue(ids.map((id) => String(id ?? '')))\n  }\n  if ('ownerUid' in raw) fields.ownerUid = typed(raw['ownerUid'], 128)\n  if ('companyId' in raw) {\n    const companyId = raw['companyId'] === null ? null : typed(raw['companyId'], 128)\n    if (companyId !== null && (!companyId || companyId.includes('/'))) {\n      return { ok: false, error: 'The company could not be read.' }\n    }\n    fields.companyId = companyId\n  }\n  if ('companyName' in raw) fields.companyName = typed(raw['companyName'], 120)\n  if ('custom' in raw) {\n    const custom = raw['custom']\n    if (!custom || typeof custom !== 'object' || Array.isArray(custom)) {\n      return { ok: false, error: 'Custom fields must be values keyed by field key.' }\n    }\n    fields.custom = custom as Record<string, ContactCustomValue>\n  }\n  if ('mediaIds' in raw) {\n    if (!Array.isArray(raw['mediaIds'])) {\n      return { ok: false, error: 'Files must be a list of ids.' }\n    }\n    fields.mediaIds = normalizeCrmMediaIds(raw['mediaIds'])\n  }\n  if (!Object.keys(fields).length) return { ok: false, error: 'Name the fields to save.' }\n  return { ok: true, fields }\n}\n\n/** The ids a body names, deduplicated — or `null` when any is unreadable or there are too many. */\nfunction readContactIds(value: unknown): string[] | null {\n  if (!Array.isArray(value) || !value.length || value.length > CRM_CONTACT_UPDATE_MAX) {\n    return null\n  }\n  const ids = value.map((id) => typed(id, 200))\n  if (ids.some((id) => !id || id.includes('/'))) return null\n  return [...new Set(ids)]\n}\n\n/**\n * Under a site, whether the caller's access reaches it. The rules could not\n * ask this of a facet write — they cannot see which holder a write is for —\n * and a collaborator on one site must not write another site's notes on a\n * person both of them hold.\n */\nfunction reachesSite(writer: Writer, hostId: string): boolean {\n  return (\n    writer.staff ||\n    isOrgWideMember(writer.member) ||\n    Boolean((writer.member?.hostAccess as Record<string, unknown> | undefined)?.[hostId])\n  )\n}\n\nconst refused = (contactId: string, error: string): ContactUpdateOutcome => ({\n  contactId,\n  ok: false,\n  error,\n})\n\ninterface ContactWrite {\n  contactId: string\n  ref: FirebaseFirestore.DocumentReference\n  update: Record<string, unknown>\n  counts: ContactCompanyLinkPlan['counts']\n}\n\n/**\n * One contact's update for one holder, or the sentence refusing the row.\n * `update` is `null` when the document already says everything asked — a tag\n * the row already carries, a link already made.\n */\nfunction contactPatch(\n  contact: Record<string, unknown>,\n  groupId: string,\n  fields: ContactUpdateFields,\n  custom: Record<string, ContactCustomValue> | undefined,\n  linkedCompanyName: string,\n):\n  | { update: Record<string, unknown> | null; counts: ContactCompanyLinkPlan['counts'] }\n  | { refused: string } {\n  const path = (field: string) => contactFacetPath(groupId, field)\n  /** A text field as stored: the value, or the field's absence. */\n  const text = (value: string) => value || FieldValue.delete()\n  const update: Record<string, unknown> = {}\n  let counts: ContactCompanyLinkPlan['counts'] = []\n\n  if (fields.name !== undefined) update[path('name')] = text(fields.name)\n  if (fields.phone !== undefined) {\n    update[path('phone')] = text(fields.phone)\n    // The search echo — see `HostContact.phone`.\n    update['phone'] = text(fields.phone)\n  }\n  if (fields.jobTitle !== undefined) update[path('jobTitle')] = text(fields.jobTitle)\n  if (fields.leadSource !== undefined) update[path('leadSource')] = text(fields.leadSource)\n  if (fields.address !== undefined) {\n    update[path('address')] = fields.address ?? FieldValue.delete()\n  }\n  if (fields.notes !== undefined) update[path('notes')] = fields.notes\n  if (fields.tags !== undefined) update[path('tags')] = fields.tags\n\n  const held = (readContactFacet(contact, groupId).tags ?? []).map((tag) =>\n    String(tag).toLowerCase(),\n  )\n  if (fields.addTag && !held.includes(fields.addTag)) {\n    // The record page's cap, which a selection must not slip past.\n    if (held.length >= CONTACT_TAGS_MAX) {\n      return { refused: `already has ${CONTACT_TAGS_MAX} tags` }\n    }\n    update[path('tags')] = FieldValue.arrayUnion(fields.addTag)\n  }\n  if (fields.removeTag && held.includes(fields.removeTag)) {\n    update[path('tags')] = FieldValue.arrayRemove(fields.removeTag)\n  }\n  if (fields.campaignIds !== undefined) {\n    update[contactCampaignFieldPath(groupId)] = fields.campaignIds\n  }\n  if (fields.ownerUid !== undefined) update[path('ownerUid')] = text(fields.ownerUid)\n\n  if (fields.companyId !== undefined) {\n    const plan = planContactCompanyLink(\n      readContactCompanyLink(contact, groupId),\n      fields.companyId,\n    )\n    if (plan) {\n      Object.assign(update, contactCompanyLinkFields(plan, groupId))\n      counts = plan.counts\n      if (fields.companyName === undefined) {\n        // The label follows the link: the company's own name, or nothing.\n        const label = plan.companyId ? linkedCompanyName : ''\n        update[path('companyName')] = text(label)\n        // The search echo — see `HostContact.companyName`.\n        update['companyName'] = text(label)\n      }\n    }\n  }\n  if (fields.companyName !== undefined) {\n    update[path('companyName')] = text(fields.companyName)\n    update['companyName'] = text(fields.companyName)\n  }\n  for (const [key, value] of Object.entries(custom ?? {})) {\n    update[path(`custom.${key}`)] = value\n  }\n  if (fields.mediaIds !== undefined) update[path(CRM_MEDIA_IDS_FIELD)] = fields.mediaIds\n\n  if (!Object.keys(update).length) return { update: null, counts }\n  update['updatedAt'] = FieldValue.serverTimestamp()\n  return { update, counts }\n}\n\n/**\n * Every write in one batch, and — when the batch is refused — each on its\n * own, so the contact that could not be written is the only one reported.\n * Answers the ids that were not written.\n */\nasync function commitContactWrites(\n  firestore: FirebaseFirestore.Firestore,\n  writes: readonly ContactWrite[],\n): Promise<Set<string>> {\n  const failed = new Set<string>()\n  if (!writes.length) return failed\n  const batch = firestore.batch()\n  for (const write of writes) batch.update(write.ref, write.update)\n  let committed = false\n  try {\n    await batch.commit()\n    committed = true\n  } catch {\n    // A batch names no document; the pass below finds the one it was.\n  }\n  if (!committed) {\n    for (const write of writes) {\n      try {\n        await write.ref.update(write.update)\n      } catch (error) {\n        console.error('[crm] contact-update could not write a contact', write.contactId, error)\n        failed.add(write.contactId)\n      }\n    }\n  }\n  // The owner, tags, company and custom values are what the Contacts list\n  // filters by through `facetKeys` (AGL-3321): restamped from each row.\n  await restampCrmListFieldsOf(\n    writes.filter((write) => !failed.has(write.contactId)).map((write) => write.ref),\n    'contacts',\n  )\n  return failed\n}\n\n/** Each company's contacts count moved once, by the sum of what the written links moved. */\nasync function settleCompanyCounts(\n  companies: FirebaseFirestore.CollectionReference,\n  writes: readonly ContactWrite[],\n): Promise<void> {\n  const deltas = new Map<string, number>()\n  for (const write of writes) {\n    for (const count of write.counts) {\n      deltas.set(count.companyId, (deltas.get(count.companyId) ?? 0) + count.delta)\n    }\n  }\n  await Promise.all(\n    [...deltas]\n      .filter(([, delta]) => delta !== 0)\n      .map(([companyId, delta]) =>\n        companies\n          .doc(companyId)\n          .update(companyContactsCountFields(delta))\n          .catch((error: unknown) => {\n            console.error('[crm] company contacts count could not move', companyId, delta, error)\n          }),\n      ),\n  )\n}\n\nexport const crmContactUpdateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const contactIds = readContactIds(body['contactIds'])\n  if (!contactIds) {\n    res.status(400).json({ error: `Name between 1 and ${CRM_CONTACT_UPDATE_MAX} contacts.` })\n    return\n  }\n  const read = readContactUpdateFields(body['set'])\n  if (read.ok === false) {\n    res.status(400).json({ error: read.error })\n    return\n  }\n  const { fields } = read\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    if (scope.level === 'site' && !reachesSite(writer, scope.hostId)) {\n      res.status(403).json({ error: 'Your access to this organization does not reach this site.' })\n      return\n    }\n    // The plan after the person, and before any contact is read (AGL-2787).\n    const suite = crmSuiteRefusal(writer.org, contactUpdateSuiteAct(fields))\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(writer.orgId)\n    const siteGroup =\n      scope.level === 'site' ? consentGroupForHost(writer.org, scope.hostId) : null\n    const siteTokens = siteGroup ? crmReadTokens(siteGroup) : null\n\n    let custom: Record<string, ContactCustomValue> | undefined\n    if (fields.custom) {\n      const definitions = await orgRef\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        fields.custom,\n        definitions.docs.map((doc) => doc.data() as ContactFieldDefinition),\n        'contact',\n      )\n      if ('errors' in judged) {\n        res.status(400).json({\n          error: Object.values(judged.errors)[0] ?? 'A custom value could not be saved.',\n        })\n        return\n      }\n      custom = judged.values\n    }\n\n    /*\n     * THE ORG'S LEAD SOURCES (AGL-3298), read only when the body names one.\n     * Judged per contact below, because a contact keeps the value it\n     * already holds even when the list has since deactivated it.\n     */\n    const leadSources = fields.leadSource\n      ? effectiveCrmLeadSourcePicklist(\n          (\n            await orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST).get()\n          ).data(),\n        )\n      : null\n\n    if (fields.ownerUid) {\n      const owner = await resolveOrgMembership(fields.ownerUid, writer.orgId).catch(() => null)\n      if (!owner?.member) {\n        res.status(400).json({ error: 'The owner is not a member of this organization.' })\n        return\n      }\n    }\n\n    // The company a link names has to exist and be visible to the caller and\n    // the site, or a person could be filed under a record nobody here can open.\n    let linkedCompanyName = ''\n    if (fields.companyId) {\n      const company = await orgRef\n        .collection(CRM_COLLECTIONS.companies)\n        .doc(fields.companyId)\n        .get()\n      const tokens = company.exists ? (company.get('visibleTo') as string[] | undefined) : undefined\n      const visible =\n        company.exists &&\n        canReach(writer, tokens) &&\n        (!siteTokens || visibleToTokens(tokens, siteTokens))\n      if (!visible) {\n        res.status(404).json({ error: 'Unknown company' })\n        return\n      }\n      linkedCompanyName = typed(company.get('name'), 120)\n    }\n\n    const contacts = orgRef.collection('contacts')\n    const snapshots = await firestore.getAll(...contactIds.map((id) => contacts.doc(id)))\n    const outcomes = new Map<string, ContactUpdateOutcome>()\n    const writes: ContactWrite[] = []\n    snapshots.forEach((snapshot, index) => {\n      const contactId = contactIds[index]\n      if (!snapshot.exists) {\n        outcomes.set(contactId, refused(contactId, 'That contact no longer exists.'))\n        return\n      }\n      const data = (snapshot.data() ?? {}) as Record<string, unknown>\n      const visibleTo = data['visibleTo'] as string[] | undefined\n      if (!canReach(writer, visibleTo)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to you.'))\n        return\n      }\n      if (siteTokens && !visibleToTokens(visibleTo, siteTokens)) {\n        outcomes.set(contactId, refused(contactId, 'That contact is not visible to this site.'))\n        return\n      }\n      const group = siteGroup ?? contactPrimaryGroup(data, writer.org)\n      if (!group.groupId) {\n        outcomes.set(contactId, refused(contactId, NO_HOLDER_REFUSAL))\n        return\n      }\n      let rowFields = fields\n      if (leadSources && fields.leadSource) {\n        const judged = judgeCrmLeadSource(\n          leadSources,\n          fields.leadSource,\n          readContactFacet(data, group.groupId).leadSource,\n        )\n        if (judged.ok === false) {\n          outcomes.set(contactId, refused(contactId, judged.error))\n          return\n        }\n        rowFields = { ...fields, leadSource: judged.value ?? '' }\n      }\n      const patch = contactPatch(data, group.groupId, rowFields, custom, linkedCompanyName)\n      if ('refused' in patch) {\n        outcomes.set(contactId, refused(contactId, patch.refused))\n        return\n      }\n      outcomes.set(contactId, { contactId, ok: true })\n      if (patch.update) {\n        writes.push({ contactId, ref: snapshot.ref, update: patch.update, counts: patch.counts })\n      }\n    })\n\n    const failed = await commitContactWrites(firestore, writes)\n    for (const contactId of failed) {\n      outcomes.set(contactId, refused(contactId, 'The contact could not be saved.'))\n    }\n    await settleCompanyCounts(\n      orgRef.collection(CRM_COLLECTIONS.companies),\n      writes.filter((write) => !failed.has(write.contactId)),\n    )\n\n    const answer: ContactUpdateResponse = {\n      ok: true,\n      results: contactIds.map(\n        (contactId) => outcomes.get(contactId) ?? refused(contactId, 'The contact could not be saved.'),\n      ),\n    }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] contact-update failed', error)\n    res.status(500).json({ error: 'The contact could not be saved.' })\n  }\n}\n"],"names":["consentGroupForHost","CONTACT_FIELDS_MAX_PER_ORG","campaignMembershipValue","contactCampaignFieldPath","contactFacetPath","CRM_COLLECTIONS","CRM_LEAD_SOURCE_PICKLIST","CRM_MEDIA_IDS_FIELD","crmReadTokens","effectiveCrmLeadSourcePicklist","isOrgWideMember","judgeCrmLeadSource","normalizeAddress","normalizeCrmMediaIds","normalizeCrmPicklistLabel","normalizePhone","planContactCompanyLink","readContactCompanyLink","readContactFacet","readCrmCustomInput","visibleToTokens","companyContactsCountFields","contactCompanyLinkFields","firebaseAdmin","resolveOrgMembership","restampCrmListFieldsOf","FieldValue","CONTACT_UPDATE_FIELDS","CRM_CONTACT_UPDATE_MAX","CONTACT_NOTES_MAX","CONTACT_PHONE_REFUSAL","CONTACT_TAGS_MAX","normalizeTags","readBulkTag","typed","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","canReach","contactPrimaryGroup","SUITE_ACTS","name","phone","jobTitle","leadSource","address","notes","tags","addTag","removeTag","campaignIds","ownerUid","companyId","companyName","custom","mediaIds","NO_HOLDER_REFUSAL","contactUpdateSuiteAct","fields","field","find","key","undefined","readContactUpdateFields","input","raw","Array","isArray","ok","error","unknownKey","Object","keys","includes","text","String","slice","filter","length","tag","ids","map","id","readContactIds","value","some","Set","reachesSite","writer","hostId","staff","member","Boolean","hostAccess","refused","contactId","contactPatch","contact","groupId","linkedCompanyName","path","delete","update","counts","held","toLowerCase","arrayUnion","arrayRemove","plan","assign","label","entries","serverTimestamp","commitContactWrites","firestore","writes","failed","batch","write","ref","committed","commit","console","add","has","settleCompanyCounts","companies","deltas","Map","count","set","get","delta","Promise","all","doc","catch","crmContactUpdateHandler","req","res","method","setHeader","status","json","body","scope","contactIds","read","suiteAct","level","suite","org","app","orgRef","collection","orgId","siteGroup","siteTokens","definitions","contactFields","limit","judged","docs","data","values","errors","leadSources","picklists","owner","company","tokens","exists","visible","contacts","snapshots","getAll","outcomes","forEach","snapshot","index","visibleTo","group","rowFields","patch","push","answer","results"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDC,GAED,SAEEA,mBAAmB,EACnBC,0BAA0B,EAI1BC,uBAAuB,EACvBC,wBAAwB,EACxBC,gBAAgB,EAChBC,eAAe,EACfC,wBAAwB,EACxBC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,EAC9BC,eAAe,EACfC,kBAAkB,EAClBC,gBAAgB,EAChBC,oBAAoB,EACpBC,yBAAyB,EACzBC,cAAc,EAEdC,sBAAsB,EACtBC,sBAAsB,EACtBC,gBAAgB,EAChBC,kBAAkB,EAClBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,0BAA0B,EAC1BC,wBAAwB,EACxBC,aAAa,EACbC,oBAAoB,EACpBC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,qBAAqB,EAIrBC,sBAAsB,QACjB,6BAAyB;AAChC,SACEC,iBAAiB,EACjBC,qBAAqB,EACrBC,gBAAgB,EAChBC,aAAa,EACbC,WAAW,EACXC,KAAK,QACA,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,kBAAc;AAChD,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,EAAEC,QAAQ,QAAqB,mBAAe;AACzE,SAASC,mBAAmB,QAAQ,6BAAyB;AAE7D,kEAAkE,GAClE,MAAMC,aAAwD;IAC5DC,MAAM;IACNC,OAAO;IACPC,UAAU;IACVC,YAAY;IACZC,SAAS;IACTC,OAAO;IACPC,MAAM;IACNC,QAAQ;IACRC,WAAW;IACXC,aAAa;IACbC,UAAU;IACVC,WAAW;IACXC,aAAa;IACbC,QAAQ;IACRC,UAAU;AACZ;AAEA,wEAAwE,GACxE,MAAMC,oBAAoB;AAE1B;;;;CAIC,GACD,OAAO,SAASC,sBAAsBC,MAA2B;IAC/D,MAAMC,QAAQhC,sBAAsBiC,IAAI,CAAC,CAACC,MAAQH,MAAM,CAACG,IAAI,KAAKC;IAClE,OAAOH,QAAQnB,UAAU,CAACmB,MAAM,GAAG;AACrC;AAEA;;;;CAIC,GACD,OAAO,SAASI,wBACdC,KAAc;QA+B4BC;IA7B1C,IAAI,CAACD,SAAS,OAAOA,UAAU,YAAYE,MAAMC,OAAO,CAACH,QAAQ;QAC/D,OAAO;YAAEI,IAAI;YAAOC,OAAO;QAA2B;IACxD;IACA,MAAMJ,MAAMD;IACZ,MAAMM,aAAaC,OAAOC,IAAI,CAACP,KAAKL,IAAI,CACtC,CAACC,MAAQ,CAAC,AAAClC,sBAA4C8C,QAAQ,CAACZ;IAElE,IAAIS,YAAY;QACd,OAAO;YAAEF,IAAI;YAAOC,OAAO,CAAC,CAAC,EAAEC,WAAW,2CAA2C,CAAC;QAAC;IACzF;IACA,MAAMZ,SAA8B,CAAC;IACrC,IAAI,UAAUO,KAAKP,OAAOjB,IAAI,GAAGP,MAAM+B,GAAG,CAAC,OAAO,EAAE;IACpD,IAAI,WAAWA,KAAK;QAClB,MAAMS,OAAOxC,MAAM+B,GAAG,CAAC,QAAQ,EAAE;QACjC,MAAMvB,QAAQgC,OAAO3D,eAAe2D,QAAQ;QAC5C,IAAIhC,UAAU,MAAM,OAAO;YAAE0B,IAAI;YAAOC,OAAOvC;QAAsB;QACrE4B,OAAOhB,KAAK,GAAGA;IACjB;IACA,IAAI,cAAcuB,KAAKP,OAAOf,QAAQ,GAAGT,MAAM+B,GAAG,CAAC,WAAW,EAAE;IAChE,uEAAuE;IACvE,+CAA+C;IAC/C,IAAI,gBAAgBA,KAAKP,OAAOd,UAAU,GAAG9B,0BAA0BmD,GAAG,CAAC,aAAa;IACxF,IAAI,aAAaA,KAAK;QACpB,MAAMpB,UAAUoB,GAAG,CAAC,UAAU;QAC9BP,OAAOb,OAAO,GACZA,WAAW,OAAOA,YAAY,YAAY,CAACqB,MAAMC,OAAO,CAACtB,WACrDjC,iBAAiBiC,WACjB;IACR;IACA,IAAI,WAAWoB,KAAKP,OAAOZ,KAAK,GAAG6B,QAAOV,aAAAA,GAAG,CAAC,QAAQ,YAAZA,aAAgB,IAAIW,KAAK,CAAC,GAAG/C;IACvE,yEAAyE;IACzE,uDAAuD;IACvD,IAAI;QAAC;QAAQ;QAAU;KAAY,CAACgD,MAAM,CAAC,CAAChB,MAAQA,OAAOI,KAAKa,MAAM,GAAG,GAAG;QAC1E,OAAO;YAAEV,IAAI;YAAOC,OAAO;QAAgE;IAC7F;IACA,IAAI,UAAUJ,KAAK;QACjB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,OAAO,GAAG,OAAO;YAAEG,IAAI;YAAOC,OAAO;QAAuB;QACnFX,OAAOX,IAAI,GAAGf,cAAciC,GAAG,CAAC,OAAO;IACzC;IACA,KAAK,MAAMJ,OAAO;QAAC;QAAU;KAAY,CAAW;QAClD,IAAI,CAAEA,CAAAA,OAAOI,GAAE,GAAI;QACnB,MAAMc,MAAM9C,YAAYgC,GAAG,CAACJ,IAAI;QAChC,IAAI,CAACkB,KAAK,OAAO;YAAEX,IAAI;YAAOC,OAAO;QAAgB;QACrDX,MAAM,CAACG,IAAI,GAAGkB;IAChB;IACA,IAAI,iBAAiBd,KAAK;QACxB,MAAMe,MAAMf,GAAG,CAAC,cAAc;QAC9B,IAAI,CAACC,MAAMC,OAAO,CAACa,MAAM,OAAO;YAAEZ,IAAI;YAAOC,OAAO;QAA4B;QAChFX,OAAOR,WAAW,GAAGhD,wBAAwB8E,IAAIC,GAAG,CAAC,CAACC,KAAOP,OAAOO,aAAAA,KAAM;IAC5E;IACA,IAAI,cAAcjB,KAAKP,OAAOP,QAAQ,GAAGjB,MAAM+B,GAAG,CAAC,WAAW,EAAE;IAChE,IAAI,eAAeA,KAAK;QACtB,MAAMb,YAAYa,GAAG,CAAC,YAAY,KAAK,OAAO,OAAO/B,MAAM+B,GAAG,CAAC,YAAY,EAAE;QAC7E,IAAIb,cAAc,QAAS,CAAA,CAACA,aAAaA,UAAUqB,QAAQ,CAAC,IAAG,GAAI;YACjE,OAAO;gBAAEL,IAAI;gBAAOC,OAAO;YAAiC;QAC9D;QACAX,OAAON,SAAS,GAAGA;IACrB;IACA,IAAI,iBAAiBa,KAAKP,OAAOL,WAAW,GAAGnB,MAAM+B,GAAG,CAAC,cAAc,EAAE;IACzE,IAAI,YAAYA,KAAK;QACnB,MAAMX,SAASW,GAAG,CAAC,SAAS;QAC5B,IAAI,CAACX,UAAU,OAAOA,WAAW,YAAYY,MAAMC,OAAO,CAACb,SAAS;YAClE,OAAO;gBAAEc,IAAI;gBAAOC,OAAO;YAAmD;QAChF;QACAX,OAAOJ,MAAM,GAAGA;IAClB;IACA,IAAI,cAAcW,KAAK;QACrB,IAAI,CAACC,MAAMC,OAAO,CAACF,GAAG,CAAC,WAAW,GAAG;YACnC,OAAO;gBAAEG,IAAI;gBAAOC,OAAO;YAA+B;QAC5D;QACAX,OAAOH,QAAQ,GAAG1C,qBAAqBoD,GAAG,CAAC,WAAW;IACxD;IACA,IAAI,CAACM,OAAOC,IAAI,CAACd,QAAQoB,MAAM,EAAE,OAAO;QAAEV,IAAI;QAAOC,OAAO;IAA2B;IACvF,OAAO;QAAED,IAAI;QAAMV;IAAO;AAC5B;AAEA,iGAAiG,GACjG,SAASyB,eAAeC,KAAc;IACpC,IAAI,CAAClB,MAAMC,OAAO,CAACiB,UAAU,CAACA,MAAMN,MAAM,IAAIM,MAAMN,MAAM,GAAGlD,wBAAwB;QACnF,OAAO;IACT;IACA,MAAMoD,MAAMI,MAAMH,GAAG,CAAC,CAACC,KAAOhD,MAAMgD,IAAI;IACxC,IAAIF,IAAIK,IAAI,CAAC,CAACH,KAAO,CAACA,MAAMA,GAAGT,QAAQ,CAAC,OAAO,OAAO;IACtD,OAAO;WAAI,IAAIa,IAAIN;KAAK;AAC1B;AAEA;;;;;CAKC,GACD,SAASO,YAAYC,MAAc,EAAEC,MAAc;QAItCD,2BAAAA;IAHX,OACEA,OAAOE,KAAK,IACZhF,gBAAgB8E,OAAOG,MAAM,KAC7BC,SAASJ,iBAAAA,OAAOG,MAAM,sBAAbH,4BAAAA,eAAeK,UAAU,qBAA1B,AAACL,yBAAmE,CAACC,OAAO;AAExF;AAEA,MAAMK,UAAU,CAACC,WAAmB1B,QAAyC,CAAA;QAC3E0B;QACA3B,IAAI;QACJC;IACF,CAAA;AASA;;;;CAIC,GACD,SAAS2B,aACPC,OAAgC,EAChCC,OAAe,EACfxC,MAA2B,EAC3BJ,MAAsD,EACtD6C,iBAAyB;QAwBXjF;IApBd,MAAMkF,OAAO,CAACzC,QAAkBvD,iBAAiB8F,SAASvC;IAC1D,+DAA+D,GAC/D,MAAMe,OAAO,CAACU,QAAkBA,SAAS1D,WAAW2E,MAAM;IAC1D,MAAMC,SAAkC,CAAC;IACzC,IAAIC,SAA2C,EAAE;IAEjD,IAAI7C,OAAOjB,IAAI,KAAKqB,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1B,KAAKhB,OAAOjB,IAAI;IACtE,IAAIiB,OAAOhB,KAAK,KAAKoB,WAAW;QAC9BwC,MAAM,CAACF,KAAK,SAAS,GAAG1B,KAAKhB,OAAOhB,KAAK;QACzC,6CAA6C;QAC7C4D,MAAM,CAAC,QAAQ,GAAG5B,KAAKhB,OAAOhB,KAAK;IACrC;IACA,IAAIgB,OAAOf,QAAQ,KAAKmB,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOf,QAAQ;IAClF,IAAIe,OAAOd,UAAU,KAAKkB,WAAWwC,MAAM,CAACF,KAAK,cAAc,GAAG1B,KAAKhB,OAAOd,UAAU;IACxF,IAAIc,OAAOb,OAAO,KAAKiB,WAAW;YACNJ;QAA1B4C,MAAM,CAACF,KAAK,WAAW,IAAG1C,kBAAAA,OAAOb,OAAO,YAAda,kBAAkBhC,WAAW2E,MAAM;IAC/D;IACA,IAAI3C,OAAOZ,KAAK,KAAKgB,WAAWwC,MAAM,CAACF,KAAK,SAAS,GAAG1C,OAAOZ,KAAK;IACpE,IAAIY,OAAOX,IAAI,KAAKe,WAAWwC,MAAM,CAACF,KAAK,QAAQ,GAAG1C,OAAOX,IAAI;IAEjE,MAAMyD,OAAO,EAACtF,yBAAAA,iBAAiB+E,SAASC,SAASnD,IAAI,YAAvC7B,yBAA2C,EAAE,EAAE+D,GAAG,CAAC,CAACF,MAChEJ,OAAOI,KAAK0B,WAAW;IAEzB,IAAI/C,OAAOV,MAAM,IAAI,CAACwD,KAAK/B,QAAQ,CAACf,OAAOV,MAAM,GAAG;QAClD,+DAA+D;QAC/D,IAAIwD,KAAK1B,MAAM,IAAI/C,kBAAkB;YACnC,OAAO;gBAAE+D,SAAS,CAAC,YAAY,EAAE/D,iBAAiB,KAAK,CAAC;YAAC;QAC3D;QACAuE,MAAM,CAACF,KAAK,QAAQ,GAAG1E,WAAWgF,UAAU,CAAChD,OAAOV,MAAM;IAC5D;IACA,IAAIU,OAAOT,SAAS,IAAIuD,KAAK/B,QAAQ,CAACf,OAAOT,SAAS,GAAG;QACvDqD,MAAM,CAACF,KAAK,QAAQ,GAAG1E,WAAWiF,WAAW,CAACjD,OAAOT,SAAS;IAChE;IACA,IAAIS,OAAOR,WAAW,KAAKY,WAAW;QACpCwC,MAAM,CAACnG,yBAAyB+F,SAAS,GAAGxC,OAAOR,WAAW;IAChE;IACA,IAAIQ,OAAOP,QAAQ,KAAKW,WAAWwC,MAAM,CAACF,KAAK,YAAY,GAAG1B,KAAKhB,OAAOP,QAAQ;IAElF,IAAIO,OAAON,SAAS,KAAKU,WAAW;QAClC,MAAM8C,OAAO5F,uBACXC,uBAAuBgF,SAASC,UAChCxC,OAAON,SAAS;QAElB,IAAIwD,MAAM;YACRrC,OAAOsC,MAAM,CAACP,QAAQhF,yBAAyBsF,MAAMV;YACrDK,SAASK,KAAKL,MAAM;YACpB,IAAI7C,OAAOL,WAAW,KAAKS,WAAW;gBACpC,kEAAkE;gBAClE,MAAMgD,QAAQF,KAAKxD,SAAS,GAAG+C,oBAAoB;gBACnDG,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKoC;gBACnC,mDAAmD;gBACnDR,MAAM,CAAC,cAAc,GAAG5B,KAAKoC;YAC/B;QACF;IACF;IACA,IAAIpD,OAAOL,WAAW,KAAKS,WAAW;QACpCwC,MAAM,CAACF,KAAK,eAAe,GAAG1B,KAAKhB,OAAOL,WAAW;QACrDiD,MAAM,CAAC,cAAc,GAAG5B,KAAKhB,OAAOL,WAAW;IACjD;IACA,KAAK,MAAM,CAACQ,KAAKuB,MAAM,IAAIb,OAAOwC,OAAO,CAACzD,iBAAAA,SAAU,CAAC,GAAI;QACvDgD,MAAM,CAACF,KAAK,CAAC,OAAO,EAAEvC,KAAK,EAAE,GAAGuB;IAClC;IACA,IAAI1B,OAAOH,QAAQ,KAAKO,WAAWwC,MAAM,CAACF,KAAK7F,qBAAqB,GAAGmD,OAAOH,QAAQ;IAEtF,IAAI,CAACgB,OAAOC,IAAI,CAAC8B,QAAQxB,MAAM,EAAE,OAAO;QAAEwB,QAAQ;QAAMC;IAAO;IAC/DD,MAAM,CAAC,YAAY,GAAG5E,WAAWsF,eAAe;IAChD,OAAO;QAAEV;QAAQC;IAAO;AAC1B;AAEA;;;;CAIC,GACD,eAAeU,oBACbC,SAAsC,EACtCC,MAA+B;IAE/B,MAAMC,SAAS,IAAI9B;IACnB,IAAI,CAAC6B,OAAOrC,MAAM,EAAE,OAAOsC;IAC3B,MAAMC,QAAQH,UAAUG,KAAK;IAC7B,KAAK,MAAMC,SAASH,OAAQE,MAAMf,MAAM,CAACgB,MAAMC,GAAG,EAAED,MAAMhB,MAAM;IAChE,IAAIkB,YAAY;IAChB,IAAI;QACF,MAAMH,MAAMI,MAAM;QAClBD,YAAY;IACd,EAAE,eAAM;IACN,kEAAkE;IACpE;IACA,IAAI,CAACA,WAAW;QACd,KAAK,MAAMF,SAASH,OAAQ;YAC1B,IAAI;gBACF,MAAMG,MAAMC,GAAG,CAACjB,MAAM,CAACgB,MAAMhB,MAAM;YACrC,EAAE,OAAOjC,OAAO;gBACdqD,QAAQrD,KAAK,CAAC,kDAAkDiD,MAAMvB,SAAS,EAAE1B;gBACjF+C,OAAOO,GAAG,CAACL,MAAMvB,SAAS;YAC5B;QACF;IACF;IACA,wEAAwE;IACxE,sEAAsE;IACtE,MAAMtE,uBACJ0F,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOQ,GAAG,CAACN,MAAMvB,SAAS,GAAGd,GAAG,CAAC,CAACqC,QAAUA,MAAMC,GAAG,GAC/E;IAEF,OAAOH;AACT;AAEA,0FAA0F,GAC1F,eAAeS,oBACbC,SAAgD,EAChDX,MAA+B;IAE/B,MAAMY,SAAS,IAAIC;IACnB,KAAK,MAAMV,SAASH,OAAQ;QAC1B,KAAK,MAAMc,SAASX,MAAMf,MAAM,CAAE;gBACHwB;YAA7BA,OAAOG,GAAG,CAACD,MAAM7E,SAAS,EAAE,EAAC2E,cAAAA,OAAOI,GAAG,CAACF,MAAM7E,SAAS,aAA1B2E,cAA+B,KAAKE,MAAMG,KAAK;QAC9E;IACF;IACA,MAAMC,QAAQC,GAAG,CACf;WAAIP;KAAO,CACRlD,MAAM,CAAC,CAAC,GAAGuD,MAAM,GAAKA,UAAU,GAChCnD,GAAG,CAAC,CAAC,CAAC7B,WAAWgF,MAAM,GACtBN,UACGS,GAAG,CAACnF,WACJkD,MAAM,CAACjF,2BAA2B+G,QAClCI,KAAK,CAAC,CAACnE;YACNqD,QAAQrD,KAAK,CAAC,+CAA+CjB,WAAWgF,OAAO/D;QACjF;AAGV;AAEA,OAAO,MAAMoE,0BAA4C,OAAOC,KAAKC;QAMrDD;IALd,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAqB;QACnD;IACF;IACA,MAAM2E,QAAQN,YAAAA,IAAIM,IAAI,YAARN,YAAY,CAAC;IAC3B,MAAMO,QAAQ9G,kBAAkB6G;IAChC,IAAI,CAACC,OAAO;QACVN,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM6E,aAAa/D,eAAe6D,IAAI,CAAC,aAAa;IACpD,IAAI,CAACE,YAAY;QACfP,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO,CAAC,mBAAmB,EAAEzC,uBAAuB,UAAU,CAAC;QAAC;QACvF;IACF;IACA,MAAMuH,OAAOpF,wBAAwBiF,IAAI,CAAC,MAAM;IAChD,IAAIG,KAAK/E,EAAE,KAAK,OAAO;QACrBuE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO8E,KAAK9E,KAAK;QAAC;QACzC;IACF;IACA,MAAM,EAAEX,MAAM,EAAE,GAAGyF;IAEnB,IAAI;QACF,MAAM3D,SAAS,MAAMnD,mBAAmBqG,KAAKO,OAAO;YAAEG,UAAU;QAAK;QACrE,IAAI5D,OAAOpB,EAAE,KAAK,OAAO;YACvBuE,IAAIG,MAAM,CAACtD,OAAOsD,MAAM,EAAEC,IAAI,CAACvD,OAAOwD,IAAI;YAC1C;QACF;QACA,IAAIC,MAAMI,KAAK,KAAK,UAAU,CAAC9D,YAAYC,QAAQyD,MAAMxD,MAAM,GAAG;YAChEkD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAE1E,OAAO;YAA6D;YAC3F;QACF;QACA,wEAAwE;QACxE,MAAMiF,QAAQlH,gBAAgBoD,OAAO+D,GAAG,EAAE9F,sBAAsBC;QAChE,IAAI4F,OAAO;YACTX,IAAIG,MAAM,CAACQ,MAAMR,MAAM,EAAEC,IAAI,CAACO,MAAMN,IAAI;YACxC;QACF;QAEA,MAAM9B,YAAY3F,cAAciI,GAAG,GAAGtC,SAAS;QAC/C,MAAMuC,SAASvC,UAAUwC,UAAU,CAAC,QAAQnB,GAAG,CAAC/C,OAAOmE,KAAK;QAC5D,MAAMC,YACJX,MAAMI,KAAK,KAAK,SAASrJ,oBAAoBwF,OAAO+D,GAAG,EAAEN,MAAMxD,MAAM,IAAI;QAC3E,MAAMoE,aAAaD,YAAYpJ,cAAcoJ,aAAa;QAE1D,IAAItG;QACJ,IAAII,OAAOJ,MAAM,EAAE;YACjB,MAAMwG,cAAc,MAAML,OACvBC,UAAU,CAACrJ,gBAAgB0J,aAAa,EACxCC,KAAK,CAAC/J,4BACNkI,GAAG;YACN,MAAM8B,SAAS9I,mBACbuC,OAAOJ,MAAM,EACbwG,YAAYI,IAAI,CAACjF,GAAG,CAAC,CAACsD,MAAQA,IAAI4B,IAAI,KACtC;YAEF,IAAI,YAAYF,QAAQ;oBAEb1F;gBADToE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnB1E,KAAK,GAAEE,kBAAAA,OAAO6F,MAAM,CAACH,OAAOI,MAAM,CAAC,CAAC,EAAE,YAA/B9F,kBAAmC;gBAC5C;gBACA;YACF;YACAjB,SAAS2G,OAAOG,MAAM;QACxB;QAEA;;;;KAIC,GACD,MAAME,cAAc5G,OAAOd,UAAU,GACjCnC,+BACE,AACE,CAAA,MAAMgJ,OAAOC,UAAU,CAACrJ,gBAAgBkK,SAAS,EAAEhC,GAAG,CAACjI,0BAA0B6H,GAAG,EAAC,EACrFgC,IAAI,MAER;QAEJ,IAAIzG,OAAOP,QAAQ,EAAE;YACnB,MAAMqH,QAAQ,MAAMhJ,qBAAqBkC,OAAOP,QAAQ,EAAEqC,OAAOmE,KAAK,EAAEnB,KAAK,CAAC,IAAM;YACpF,IAAI,EAACgC,yBAAAA,MAAO7E,MAAM,GAAE;gBAClBgD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAE1E,OAAO;gBAAkD;gBAChF;YACF;QACF;QAEA,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI8B,oBAAoB;QACxB,IAAIzC,OAAON,SAAS,EAAE;YACpB,MAAMqH,UAAU,MAAMhB,OACnBC,UAAU,CAACrJ,gBAAgByH,SAAS,EACpCS,GAAG,CAAC7E,OAAON,SAAS,EACpB+E,GAAG;YACN,MAAMuC,SAASD,QAAQE,MAAM,GAAIF,QAAQtC,GAAG,CAAC,eAAwCrE;YACrF,MAAM8G,UACJH,QAAQE,MAAM,IACdrI,SAASkD,QAAQkF,WAChB,CAAA,CAACb,cAAczI,gBAAgBsJ,QAAQb,WAAU;YACpD,IAAI,CAACe,SAAS;gBACZjC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAE1E,OAAO;gBAAkB;gBAChD;YACF;YACA8B,oBAAoBjE,MAAMuI,QAAQtC,GAAG,CAAC,SAAS;QACjD;QAEA,MAAM0C,WAAWpB,OAAOC,UAAU,CAAC;QACnC,MAAMoB,YAAY,MAAM5D,UAAU6D,MAAM,IAAI7B,WAAWjE,GAAG,CAAC,CAACC,KAAO2F,SAAStC,GAAG,CAACrD;QAChF,MAAM8F,WAAW,IAAIhD;QACrB,MAAMb,SAAyB,EAAE;QACjC2D,UAAUG,OAAO,CAAC,CAACC,UAAUC;gBAMbD;YALd,MAAMnF,YAAYmD,UAAU,CAACiC,MAAM;YACnC,IAAI,CAACD,SAASP,MAAM,EAAE;gBACpBK,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMoE,QAAQe,iBAAAA,SAASf,IAAI,cAAbe,iBAAmB,CAAC;YAClC,MAAME,YAAYjB,IAAI,CAAC,YAAY;YACnC,IAAI,CAAC7H,SAASkD,QAAQ4F,YAAY;gBAChCJ,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,IAAI8D,cAAc,CAACzI,gBAAgBgK,WAAWvB,aAAa;gBACzDmB,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;gBAC3C;YACF;YACA,MAAMsF,QAAQzB,oBAAAA,YAAarH,oBAAoB4H,MAAM3E,OAAO+D,GAAG;YAC/D,IAAI,CAAC8B,MAAMnF,OAAO,EAAE;gBAClB8E,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWvC;gBAC3C;YACF;YACA,IAAI8H,YAAY5H;YAChB,IAAI4G,eAAe5G,OAAOd,UAAU,EAAE;oBAUCqH;gBATrC,MAAMA,SAAStJ,mBACb2J,aACA5G,OAAOd,UAAU,EACjB1B,iBAAiBiJ,MAAMkB,MAAMnF,OAAO,EAAEtD,UAAU;gBAElD,IAAIqH,OAAO7F,EAAE,KAAK,OAAO;oBACvB4G,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWkE,OAAO5F,KAAK;oBACvD;gBACF;gBACAiH,YAAY,aAAK5H;oBAAQd,UAAU,GAAEqH,gBAAAA,OAAO7E,KAAK,YAAZ6E,gBAAgB;;YACvD;YACA,MAAMsB,QAAQvF,aAAamE,MAAMkB,MAAMnF,OAAO,EAAEoF,WAAWhI,QAAQ6C;YACnE,IAAI,aAAaoF,OAAO;gBACtBP,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAWwF,MAAMzF,OAAO;gBACxD;YACF;YACAkF,SAAS9C,GAAG,CAACnC,WAAW;gBAAEA;gBAAW3B,IAAI;YAAK;YAC9C,IAAImH,MAAMjF,MAAM,EAAE;gBAChBa,OAAOqE,IAAI,CAAC;oBAAEzF;oBAAWwB,KAAK2D,SAAS3D,GAAG;oBAAEjB,QAAQiF,MAAMjF,MAAM;oBAAEC,QAAQgF,MAAMhF,MAAM;gBAAC;YACzF;QACF;QAEA,MAAMa,SAAS,MAAMH,oBAAoBC,WAAWC;QACpD,KAAK,MAAMpB,aAAaqB,OAAQ;YAC9B4D,SAAS9C,GAAG,CAACnC,WAAWD,QAAQC,WAAW;QAC7C;QACA,MAAM8B,oBACJ4B,OAAOC,UAAU,CAACrJ,gBAAgByH,SAAS,GAC3CX,OAAOtC,MAAM,CAAC,CAACyC,QAAU,CAACF,OAAOQ,GAAG,CAACN,MAAMvB,SAAS;QAGtD,MAAM0F,SAAgC;YACpCrH,IAAI;YACJsH,SAASxC,WAAWjE,GAAG,CACrB,CAACc;oBAAciF;wBAAAA,gBAAAA,SAAS7C,GAAG,CAACpC,sBAAbiF,gBAA2BlF,QAAQC,WAAW;;QAEjE;QACA4C,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC0C;IACvB,EAAE,OAAOpH,OAAO;QACdqD,QAAQrD,KAAK,CAAC,+BAA+BA;QAC7CsE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE1E,OAAO;QAAkC;IAClE;AACF,EAAC"}

package/src/lib/server/contacts-import.d.ts

@@ -44,14 +44,37 @@
  * returns as a verdict. Both changes are the door's, so the v1 API and the
  * manual add can reach them next.
  *
- * ## Two lookups paid once per request, not once per row
+ * ## Every lookup paid once per request, not once per row (AGL-3423)
  *
- * An owner is named by email in the file and stored by uid on the record,
- * so the org's roster is read once and every row resolves against it. A
- * company is named by name and stored by id, so each distinct name is
- * looked up once, created once when missing, and remembered for the rest
- * of the request — two hundred rows at one company is one read and at most
- * one write, not two hundred of each.
+ * A request has sixty seconds, and a row that reads for itself spends them
+ * a round trip at a time: the door alone was a dozen serial reads and three
+ * aggregate counts per new person, and a two-hundred-row chunk of an
+ * Apollo export ran out of time before it answered. So nothing here is
+ * read per row:
+ *
+ * - The door's own lookups — the site, the consent group, who each address
+ *   already is, who the site erased, the room in the records band — come
+ *   from one `prepareContactCaptureBatch` for the whole chunk, which every
+ *   row's capture is handed. The door still makes every decision.
+ * - An owner is named by email and stored by uid, so the org's roster is
+ *   read once and every row resolves against it.
+ * - A company is named by name and stored by id, so the distinct names are
+ *   looked up together, thirty to an `in` query, and the missing ones are
+ *   created in one batched write — an Apollo file names a different company
+ *   on nearly every row, and that was a read, a count and a write each.
+ *
+ * What is left per row is the row's own writes and what a new person sets
+ * off, and those run {@link CONTACT_IMPORT_CONCURRENCY} at a time. A row is
+ * started only inside {@link CONTACT_IMPORT_TIME_BUDGET_MS}; the rest are
+ * reported `not-reached`, so a slow chunk answers with what it did instead
+ * of being cut off at the limit with no answer at all.
+ *
+ * ## A retry is a merge, never a second person
+ *
+ * The door dedupes on the address, through the index and then the `email`
+ * query, so a row that landed before a request was cut off is found by the
+ * next attempt and merged into — the one-person-one-record rule a second
+ * form submission meets. A company is found by its `nameLower` the same way.
  *
  * ## Who may call it
  *
@@ -62,12 +85,25 @@
 import { type PluginApiHandler } from '@aglyn/aglyn/server';
 /** The one sentence every imported contact's timeline opens with. */
 export declare const CONTACT_IMPORT_INTERACTION_SUMMARY = "Imported from CSV";
+/**
+ * How many rows are written at once. Enough to overlap the round trips a
+ * row still pays; few enough that a chunk never has more writes in flight
+ * than one client connection handles comfortably.
+ */
+export declare const CONTACT_IMPORT_CONCURRENCY = 8;
+/**
+ * How long after the request arrived a row may still be STARTED. The
+ * function is stopped at sixty seconds; this leaves the rows already in
+ * flight, and the mail-server check's grace, room to finish before then.
+ */
+export declare const CONTACT_IMPORT_TIME_BUDGET_MS = 40000;
 /**
  * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
  *
- * Rows are written one after another rather than in parallel, because the
- * door's create path counts the collection before it adds: two hundred
- * creates racing one another would each count the same audience and each
- * pass a band the last of them should have hit.
+ * Rows are written {@link CONTACT_IMPORT_CONCURRENCY} at a time, which the
+ * band allows because it is no longer counted per row: the capture batch
+ * counted once, and every create is admitted from its tally — reserved in
+ * file order before any row is written, so which rows the band keeps does
+ * not depend on which write happened to finish first.
  */
 export declare const crmContactsImportHandler: PluginApiHandler;

package/src/lib/server/contacts-import.js

@@ -44,14 +44,37 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * returns as a verdict. Both changes are the door's, so the v1 API and the
  * manual add can reach them next.
  *
- * ## Two lookups paid once per request, not once per row
+ * ## Every lookup paid once per request, not once per row (AGL-3423)
  *
- * An owner is named by email in the file and stored by uid on the record,
- * so the org's roster is read once and every row resolves against it. A
- * company is named by name and stored by id, so each distinct name is
- * looked up once, created once when missing, and remembered for the rest
- * of the request — two hundred rows at one company is one read and at most
- * one write, not two hundred of each.
+ * A request has sixty seconds, and a row that reads for itself spends them
+ * a round trip at a time: the door alone was a dozen serial reads and three
+ * aggregate counts per new person, and a two-hundred-row chunk of an
+ * Apollo export ran out of time before it answered. So nothing here is
+ * read per row:
+ *
+ * - The door's own lookups — the site, the consent group, who each address
+ *   already is, who the site erased, the room in the records band — come
+ *   from one `prepareContactCaptureBatch` for the whole chunk, which every
+ *   row's capture is handed. The door still makes every decision.
+ * - An owner is named by email and stored by uid, so the org's roster is
+ *   read once and every row resolves against it.
+ * - A company is named by name and stored by id, so the distinct names are
+ *   looked up together, thirty to an `in` query, and the missing ones are
+ *   created in one batched write — an Apollo file names a different company
+ *   on nearly every row, and that was a read, a count and a write each.
+ *
+ * What is left per row is the row's own writes and what a new person sets
+ * off, and those run {@link CONTACT_IMPORT_CONCURRENCY} at a time. A row is
+ * started only inside {@link CONTACT_IMPORT_TIME_BUDGET_MS}; the rest are
+ * reported `not-reached`, so a slow chunk answers with what it did instead
+ * of being cut off at the limit with no answer at all.
+ *
+ * ## A retry is a merge, never a second person
+ *
+ * The door dedupes on the address, through the index and then the `email`
+ * query, so a row that landed before a request was cut off is found by the
+ * next attempt and merged into — the one-person-one-record rule a second
+ * form submission meets. A company is found by its `nameLower` the same way.
  *
  * ## Who may call it
  *
@@ -60,13 +83,25 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * has one spelling.
  */ import { CRM_COLLECTIONS, crmNewRecordListFields, nameSearchFields, visibleToTokens } from "@aglyn/aglyn/server";
 import { CONTACT_IMPORT_CHUNK_SIZE, CONTACT_IMPORT_MAX_BODY_BYTES, normalizeContactImportRow } from "../model/crm-import.js";
-import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { firebaseAdmin, prepareContactCaptureBatch } from "@aglyn/tenant-data-admin";
 import { captureHostContact } from "@aglyn/tenant-runtime";
 // The leaf, so a spec that stands a partial barrel in still reaches it.
 import { countUndeliverableEmails, findUndeliverableEmails, IMPORT_MAIL_CHECK_GRACE_MS, settleWithin } from "@aglyn/tenant-data-admin/server/capture-email-check";
 import { FieldValue } from "firebase-admin/firestore";
 import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
 /** The one sentence every imported contact's timeline opens with. */ export const CONTACT_IMPORT_INTERACTION_SUMMARY = 'Imported from CSV';
+/**
+ * How many rows are written at once. Enough to overlap the round trips a
+ * row still pays; few enough that a chunk never has more writes in flight
+ * than one client connection handles comfortably.
+ */ export const CONTACT_IMPORT_CONCURRENCY = 8;
+/**
+ * How long after the request arrived a row may still be STARTED. The
+ * function is stopped at sixty seconds; this leaves the rows already in
+ * flight, and the mail-server check's grace, room to finish before then.
+ */ export const CONTACT_IMPORT_TIME_BUDGET_MS = 40000;
+/** The most values one Firestore `in` filter may carry. */ const IN_FILTER_LIMIT = 30;
+/** The most writes one batch may carry. */ const BATCH_WRITE_LIMIT = 500;
 /**
  * The holder's live custom-field definitions.
  *
@@ -80,69 +115,112 @@ import { ownerDirectory, readImportRows, resolveImportContext } from "./import-c
     const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.contactFields).limit(200).get();
     return snapshot.docs.map((doc)=>doc.data()).filter((field)=>!!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens));
 }
+function pagesOf(items, size) {
+    const out = [];
+    for(let at = 0; at < items.length; at += size)out.push(items.slice(at, at + size));
+    return out;
+}
 /**
- * The company a name refers to in this scope, created when there is none.
+ * The company each row names, in this scope, with the missing ones created.
  *
  * Looked up by `nameLower`, the search twin `nameSearchFields` writes on
- * every company, and narrowed in memory to the ones the caller's scope can
- * see — two clients of one agency may each have an "Acme" and must each get
- * their own. Created with the same scope stamp every CRM creator uses, so
- * the company lands exactly where a contact captured on this site would.
- */ async function resolveCompany(context, name, cache, tally) {
-    const fields = nameSearchFields(name);
-    const cached = cache.get(fields.nameLower);
-    if (cached) return cached;
-    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
-    const companies = orgRef.collection(CRM_COLLECTIONS.companies);
-    const matches = await companies.where('nameLower', '==', fields.nameLower).limit(10).get();
-    const seen = matches.docs.find((doc)=>visibleToTokens(doc.get('visibleTo'), context.readTokens));
-    if (seen) {
-        var _seen_get;
-        // The name as the record spells it, not as this row typed it, so the
-        // contact's facet reads the same as the company page.
-        const found = {
-            id: seen.id,
-            name: String((_seen_get = seen.get('name')) != null ? _seen_get : name)
-        };
-        cache.set(fields.nameLower, found);
-        return found;
+ * every company, thirty names to an `in` query and every page at once, and
+ * narrowed in memory to the ones the caller's scope can see — two clients
+ * of one agency may each have an "Acme" and must each get their own. A
+ * name nobody in scope holds is created once for the request, with the
+ * same scope stamp every CRM creator uses, so the company lands exactly
+ * where a contact captured on this site would; the creates go out in one
+ * batched write.
+ *
+ * THE RECORDS BAND (AGL-2611). A company is a record of the same band the
+ * contact behind its row will meet at the door, so the band is walked in
+ * file order — the row's company, then the row's contact when the address
+ * is new — from the capture batch's one tally. On an org at a full hard
+ * band the row gets no company rather than a company it was not allowed to
+ * hold, and a later row's company never takes the room an earlier row's
+ * contact needed. Nothing is reported here: the contact is refused
+ * `audience-band` at its door and the row is listed skipped, which is the
+ * one message the operator needs. A plan with an overage rate always
+ * admits — a rate is what makes the band meter instead of refuse.
+ *
+ * Keyed by `nameLower`; a name absent from the map gets no company.
+ */ async function resolveCompanies(context, capture, rows) {
+    const firestore = firebaseAdmin.app().firestore();
+    const collection = firestore.collection('orgs').doc(context.orgId).collection(CRM_COLLECTIONS.companies);
+    const named = new Map();
+    for (const { row } of rows){
+        if (!row.companyName) continue;
+        const fields = nameSearchFields(row.companyName);
+        if (!named.has(fields.nameLower)) named.set(fields.nameLower, fields);
+    }
+    const companies = new Map();
+    await Promise.all(pagesOf([
+        ...named.keys()
+    ], IN_FILTER_LIMIT).map(async (page)=>{
+        const matches = await collection.where('nameLower', 'in', page).get();
+        for (const doc of matches.docs){
+            var _doc_get, _ref, _doc_get1;
+            var _named_get;
+            const nameLower = String((_doc_get = doc.get('nameLower')) != null ? _doc_get : '');
+            if (!named.has(nameLower) || companies.has(nameLower)) continue;
+            if (!visibleToTokens(doc.get('visibleTo'), context.readTokens)) continue;
+            // The name as the record spells it, not as this row typed it, so the
+            // contact's facet reads the same as the company page.
+            companies.set(nameLower, {
+                id: doc.id,
+                name: String((_ref = (_doc_get1 = doc.get('name')) != null ? _doc_get1 : (_named_get = named.get(nameLower)) == null ? void 0 : _named_get.name) != null ? _ref : '')
+            });
+        }
+    }));
+    const creates = [];
+    for (const { row } of rows){
+        if (row.companyName) {
+            const nameLower = nameSearchFields(row.companyName).nameLower;
+            if (!companies.has(nameLower) && capture.admit()) {
+                const fields = named.get(nameLower);
+                const ref = collection.doc();
+                creates.push({
+                    ref,
+                    record: _extends({}, fields, {
+                        hostId: context.hostId,
+                        visibleTo: context.scopeTokens,
+                        createdByUid: context.uid,
+                        createdAt: FieldValue.serverTimestamp(),
+                        updatedAt: FieldValue.serverTimestamp()
+                    }, crmNewRecordListFields('companies', _extends({}, fields, {
+                        visibleTo: context.scopeTokens
+                    })))
+                });
+                companies.set(nameLower, {
+                    id: ref.id,
+                    name: row.companyName
+                });
+            }
+        }
+        if (capture.peek(row.email) === null && capture.erased(row.email) !== true) {
+            capture.reserve(row.email);
+        }
+    }
+    for (const page of pagesOf(creates, BATCH_WRITE_LIMIT)){
+        const batch = firestore.batch();
+        for (const { ref, record } of page)batch.set(ref, record);
+        await batch.commit();
     }
-    /*
-   * THE RECORDS BAND (AGL-2611). A company is a record of the same band
-   * the contact behind this row will meet at its own door, so on an org
-   * at a full hard band the row gets no company rather than a company it
-   * was not allowed to hold. Nothing is reported here: the contact is
-   * refused `audience-band` a few lines on and the row is listed skipped,
-   * which is the one message the operator needs. A plan with an overage
-   * rate never reaches this branch — a rate is what makes the band meter
-   * instead of refuse.
-   */ const room = await crmRecordsQuotaForOrg(context.org, orgRef);
-    if (!room.allowed) return null;
-    const created = await companies.add(_extends({}, fields, {
-        hostId: context.hostId,
-        visibleTo: context.scopeTokens,
-        createdByUid: context.uid,
-        createdAt: FieldValue.serverTimestamp(),
-        updatedAt: FieldValue.serverTimestamp()
-    }, crmNewRecordListFields('companies', _extends({}, fields, {
-        visibleTo: context.scopeTokens
-    }))));
-    tally.created += 1;
-    const made = {
-        id: created.id,
-        name
+    return {
+        companies,
+        created: creates.length
     };
-    cache.set(fields.nameLower, made);
-    return made;
 }
 /**
  * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
  *
- * Rows are written one after another rather than in parallel, because the
- * door's create path counts the collection before it adds: two hundred
- * creates racing one another would each count the same audience and each
- * pass a band the last of them should have hit.
+ * Rows are written {@link CONTACT_IMPORT_CONCURRENCY} at a time, which the
+ * band allows because it is no longer counted per row: the capture batch
+ * counted once, and every create is admitted from its tally — reserved in
+ * file order before any row is written, so which rows the band keeps does
+ * not depend on which write happened to finish first.
  */ export const crmContactsImportHandler = async (req, res)=>{
+    const startedAt = Date.now();
     if (req.method !== 'POST') {
         res.setHeader('Allow', 'POST');
         return res.status(405).json({
@@ -203,21 +281,21 @@ import { ownerDirectory, readImportRows, resolveImportContext } from "./import-c
         // stamps the records; this is the count the result states.
         const mailServers = findUndeliverableEmails(normalized.map((entry)=>entry.row.email));
         const imported = [];
-        const owners = await ownerDirectory(context.orgId, normalized.map((entry)=>entry.row));
+        const [owners, capture] = await Promise.all([
+            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
+            prepareContactCaptureBatch(context.hostId, normalized.map((entry)=>entry.row.email))
+        ]);
+        const { companies, created: companiesCreated } = await resolveCompanies(context, capture, normalized);
         const ownersUnresolved = new Set();
-        const companies = new Map();
-        const companyTally = {
-            created: 0
-        };
         let created = 0;
         let merged = 0;
-        for (const { index, row } of normalized){
+        const writeRow = async ({ index, row })=>{
             let ownerUid;
             if (row.ownerEmail) {
                 ownerUid = owners.get(row.ownerEmail);
                 if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
             }
-            const company = row.companyName ? await resolveCompany(context, row.companyName, companies, companyTally) : null;
+            const company = row.companyName ? companies.get(nameSearchFields(row.companyName).nameLower) : undefined;
             const verdict = await captureHostContact(_extends({
                 hostId: context.hostId,
                 email: row.email
@@ -253,7 +331,8 @@ import { ownerDirectory, readImportRows, resolveImportContext } from "./import-c
                 } : {}),
                 // An import is the merchant's own act and files nobody under a
                 // campaign; the picker on the profile is where that happens.
-                campaignIds: []
+                campaignIds: [],
+                batch: capture
             }));
             if ('refused' in verdict) {
                 skipped.push({
@@ -261,11 +340,32 @@ import { ownerDirectory, readImportRows, resolveImportContext } from "./import-c
                     email: row.email,
                     reason: verdict.refused === 'band' ? 'audience-band' : verdict.refused === 'invalid-email' ? 'invalid-email' : verdict.refused === 'erased' ? 'erased' : 'write-failed'
                 });
-                continue;
+                return;
             }
             imported.push(row.email);
             if (verdict.created) created += 1;
             else merged += 1;
+        };
+        // A fixed pool drawing from one queue in file order; a row is started
+        // only inside the budget, and whatever is left is reported, not dropped.
+        let next = 0;
+        const worker = async ()=>{
+            while(next < normalized.length){
+                if (Date.now() - startedAt >= CONTACT_IMPORT_TIME_BUDGET_MS) return;
+                const entry = normalized[next];
+                next += 1;
+                await writeRow(entry);
+            }
+        };
+        await Promise.all(Array.from({
+            length: Math.min(CONTACT_IMPORT_CONCURRENCY, normalized.length)
+        }, worker));
+        for (const { index, row } of normalized.slice(next)){
+            skipped.push({
+                index,
+                email: row.email,
+                reason: 'not-reached'
+            });
         }
         const noMailServer = countUndeliverableEmails(imported, await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS));
         const result = _extends({
@@ -274,7 +374,7 @@ import { ownerDirectory, readImportRows, resolveImportContext } from "./import-c
             merged,
             skipped: skipped.sort((a, b)=>a.index - b.index),
             dropped,
-            companiesCreated: companyTally.created,
+            companiesCreated,
             ownersUnresolved: [
                 ...ownersUnresolved
             ]