@aglyn/plugins-crm 1.0.0-beta.218 → 1.0.0-beta.219

package/src/lib/constants/api-routes.js

@@ -30,6 +30,11 @@
    * every facet write the console makes; see `server/contact-update.ts`.
    */ contactUpdate: 'crm/contact-update',
     /**
+   * `POST` — lets one or more contacts go from a site, or deletes them once
+   * nobody else holds them, keeping every marketing refusal they held
+   * (AGL-3338); see `server/contact-remove.ts`.
+   */ contactRemove: 'crm/contact-remove',
+    /**
    * `POST` — unlinks the contacts that name a company, then deletes it
    * (AGL-2804); see `server/company-delete.ts`.
    */ companyDelete: 'crm/company-delete',
@@ -52,7 +57,28 @@
    * `POST` — the workspace's email capture address (AGL-2657), minted on
    * the first ask and replaced with `rotate: true`; see
    * `server/inbound-address.ts`.
-   */ inboundAddress: 'crm/inbound-address'
+   */ inboundAddress: 'crm/inbound-address',
+    /**
+   * `POST` (a run) or `GET` (the plan) — the daily digest, posted by the
+   * scheduler with the cron secret (AGL-2619); a machine's route, see
+   * `server/daily-digest-route.ts`.
+   */ dailyDigest: 'crm/daily-digest',
+    /**
+   * `POST` (a run) or `GET` (the plan) — the hourly task reminders, posted
+   * by the scheduler with the cron secret (AGL-2659); a machine's route, see
+   * `server/task-reminders-route.ts`.
+   */ taskReminders: 'crm/task-reminders',
+    /**
+   * `POST` — the mail provider's signed notice of a message received at a
+   * capture address (AGL-2657); a machine's route, see
+   * `server/inbound-route.ts`.
+   */ inbound: 'crm/inbound',
+    /**
+   * `GET` — one of the organization's CRM collections, or a site's leads,
+   * as a CSV streamed over every row (AGL-2662); the contacts and leads
+   * files are every workspace's (a portability route), see
+   * `server/export-route.ts`.
+   */ export: 'crm/export'
 };
 /**
  * What an organization-level activity line may point at: the CRM's record

package/src/lib/constants/api-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/constants/api-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { CrmActionRecipeId } from '@aglyn/aglyn'\n\n/**\n * The CRM plugin's console API routes, as the dispatcher keys them.\n *\n * One file both halves import, because the server registers the path and\n * the client fetches it, and a route spelled twice is a route that 404s\n * the day one spelling changes. Client-safe: constants only.\n */\nexport const CRM_API_ROUTES = {\n  ping: 'crm/ping',\n  /**\n   * `POST` — moves one contact to a lifecycle stage, or clears it; see\n   * `server.ts`.\n   */\n  contactStage: 'crm/contact-stage',\n  /**\n   * `POST` — one holder's profile fields on one or more contacts (AGL-2804):\n   * every facet write the console makes; see `server/contact-update.ts`.\n   */\n  contactUpdate: 'crm/contact-update',\n  /**\n   * `POST` — unlinks the contacts that name a company, then deletes it\n   * (AGL-2804); see `server/company-delete.ts`.\n   */\n  companyDelete: 'crm/company-delete',\n  /** `POST` — one email to one person from a record; see `server/email-send.ts`. */\n  emailSend: 'crm/email-send',\n  /**\n   * `POST` — one line in the ORGANIZATION's activity feed for an act the\n   * org-level hub performed client-direct (AGL-2634); see\n   * `server/org-activity.ts`.\n   */\n  orgActivity: 'crm/org-activity',\n  /**\n   * `POST` — installs one recipe's action on one site (AGL-2639): the\n   * server builds it, stamps it and writes it into the site's actions;\n   * see `server/recipe-routes.ts`.\n   */\n  recipeInstall: 'crm/recipe-install',\n  /**\n   * `POST` — which recipes each of the organization's sites carries\n   * (AGL-2639), read off the stamps; see `server/recipe-routes.ts`.\n   */\n  recipeStatus: 'crm/recipe-status',\n  /**\n   * `POST` — the workspace's email capture address (AGL-2657), minted on\n   * the first ask and replaced with `rotate: true`; see\n   * `server/inbound-address.ts`.\n   */\n  inboundAddress: 'crm/inbound-address',\n} as const\n\n/**\n * One site's answer to `crm/recipe-status` (AGL-2639).\n *\n * `installed` names the recipes a live action on the site is stamped with.\n * `unstamped` counts the live actions that carry NO stamp — every action\n * saved before the stamp existed — and a site with any is one the reader\n * cannot call free of a recipe: the card names it as \"may already have\n * it\" rather than offering the install as if to a blank site.\n */\nexport interface CrmRecipeSiteStatus {\n  hostId: string\n  installed: CrmActionRecipeId[]\n  unstamped: number\n}\n\n/** The body `crm/recipe-install` reads, beside the route scope. */\nexport interface CrmRecipeInstallRequest {\n  hostId: string\n  orgId?: string\n  recipeId: CrmActionRecipeId\n  /** The site's form a recipe that `needs: 'form'` is keyed on. */\n  formId?: string\n}\n\n/** What a successful `crm/recipe-install` answers with. */\nexport interface CrmRecipeInstallResult {\n  ok: true\n  actionId: string\n  /** The installed action's name, as the site's Actions list will show it. */\n  name: string\n  recipeId: CrmActionRecipeId\n}\n\n/**\n * What an organization-level activity line may point at: the CRM's record\n * kinds, and nothing the org feed holds for its own reasons (a member, a\n * subscription). The route refuses any other type, so a bulk bar cannot\n * write a line the feed's presenter would render as a workspace event.\n */\nexport const CRM_ORG_ACTIVITY_KINDS = [\n  'contact',\n  'company',\n  'deal',\n  'lead',\n  'task',\n] as const\n\nexport type CrmOrgActivityKind = (typeof CRM_ORG_ACTIVITY_KINDS)[number]\n\n/** The most an activity line may say — a sentence, not a report. */\nexport const CRM_ORG_ACTIVITY_ACTION_MAX = 160\n\n/** The browser-side URL for a route key. */\nexport function crmApiUrl(route: keyof typeof CRM_API_ROUTES): string {\n  return `/api/${CRM_API_ROUTES[route]}`\n}\n"],"names":["CRM_API_ROUTES","ping","contactStage","contactUpdate","companyDelete","emailSend","orgActivity","recipeInstall","recipeStatus","inboundAddress","CRM_ORG_ACTIVITY_KINDS","CRM_ORG_ACTIVITY_ACTION_MAX","crmApiUrl","route"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;CAMC,GACD,OAAO,MAAMA,iBAAiB;IAC5BC,MAAM;IACN;;;GAGC,GACDC,cAAc;IACd;;;GAGC,GACDC,eAAe;IACf;;;GAGC,GACDC,eAAe;IACf,gFAAgF,GAChFC,WAAW;IACX;;;;GAIC,GACDC,aAAa;IACb;;;;GAIC,GACDC,eAAe;IACf;;;GAGC,GACDC,cAAc;IACd;;;;GAIC,GACDC,gBAAgB;AAClB,EAAU;AAmCV;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpC;IACA;IACA;IACA;IACA;CACD,CAAS;AAIV,kEAAkE,GAClE,OAAO,MAAMC,8BAA8B,IAAG;AAE9C,0CAA0C,GAC1C,OAAO,SAASC,UAAUC,KAAkC;IAC1D,OAAO,CAAC,KAAK,EAAEb,cAAc,CAACa,MAAM,EAAE;AACxC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/constants/api-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { CrmActionRecipeId } from '@aglyn/aglyn'\n\n/**\n * The CRM plugin's console API routes, as the dispatcher keys them.\n *\n * One file both halves import, because the server registers the path and\n * the client fetches it, and a route spelled twice is a route that 404s\n * the day one spelling changes. Client-safe: constants only.\n */\nexport const CRM_API_ROUTES = {\n  ping: 'crm/ping',\n  /**\n   * `POST` — moves one contact to a lifecycle stage, or clears it; see\n   * `server.ts`.\n   */\n  contactStage: 'crm/contact-stage',\n  /**\n   * `POST` — one holder's profile fields on one or more contacts (AGL-2804):\n   * every facet write the console makes; see `server/contact-update.ts`.\n   */\n  contactUpdate: 'crm/contact-update',\n  /**\n   * `POST` — lets one or more contacts go from a site, or deletes them once\n   * nobody else holds them, keeping every marketing refusal they held\n   * (AGL-3338); see `server/contact-remove.ts`.\n   */\n  contactRemove: 'crm/contact-remove',\n  /**\n   * `POST` — unlinks the contacts that name a company, then deletes it\n   * (AGL-2804); see `server/company-delete.ts`.\n   */\n  companyDelete: 'crm/company-delete',\n  /** `POST` — one email to one person from a record; see `server/email-send.ts`. */\n  emailSend: 'crm/email-send',\n  /**\n   * `POST` — one line in the ORGANIZATION's activity feed for an act the\n   * org-level hub performed client-direct (AGL-2634); see\n   * `server/org-activity.ts`.\n   */\n  orgActivity: 'crm/org-activity',\n  /**\n   * `POST` — installs one recipe's action on one site (AGL-2639): the\n   * server builds it, stamps it and writes it into the site's actions;\n   * see `server/recipe-routes.ts`.\n   */\n  recipeInstall: 'crm/recipe-install',\n  /**\n   * `POST` — which recipes each of the organization's sites carries\n   * (AGL-2639), read off the stamps; see `server/recipe-routes.ts`.\n   */\n  recipeStatus: 'crm/recipe-status',\n  /**\n   * `POST` — the workspace's email capture address (AGL-2657), minted on\n   * the first ask and replaced with `rotate: true`; see\n   * `server/inbound-address.ts`.\n   */\n  inboundAddress: 'crm/inbound-address',\n  /**\n   * `POST` (a run) or `GET` (the plan) — the daily digest, posted by the\n   * scheduler with the cron secret (AGL-2619); a machine's route, see\n   * `server/daily-digest-route.ts`.\n   */\n  dailyDigest: 'crm/daily-digest',\n  /**\n   * `POST` (a run) or `GET` (the plan) — the hourly task reminders, posted\n   * by the scheduler with the cron secret (AGL-2659); a machine's route, see\n   * `server/task-reminders-route.ts`.\n   */\n  taskReminders: 'crm/task-reminders',\n  /**\n   * `POST` — the mail provider's signed notice of a message received at a\n   * capture address (AGL-2657); a machine's route, see\n   * `server/inbound-route.ts`.\n   */\n  inbound: 'crm/inbound',\n  /**\n   * `GET` — one of the organization's CRM collections, or a site's leads,\n   * as a CSV streamed over every row (AGL-2662); the contacts and leads\n   * files are every workspace's (a portability route), see\n   * `server/export-route.ts`.\n   */\n  export: 'crm/export',\n} as const\n\n/**\n * One site's answer to `crm/recipe-status` (AGL-2639).\n *\n * `installed` names the recipes a live action on the site is stamped with.\n * `unstamped` counts the live actions that carry NO stamp — every action\n * saved before the stamp existed — and a site with any is one the reader\n * cannot call free of a recipe: the card names it as \"may already have\n * it\" rather than offering the install as if to a blank site.\n */\nexport interface CrmRecipeSiteStatus {\n  hostId: string\n  installed: CrmActionRecipeId[]\n  unstamped: number\n}\n\n/** The body `crm/recipe-install` reads, beside the route scope. */\nexport interface CrmRecipeInstallRequest {\n  hostId: string\n  orgId?: string\n  recipeId: CrmActionRecipeId\n  /** The site's form a recipe that `needs: 'form'` is keyed on. */\n  formId?: string\n}\n\n/** What a successful `crm/recipe-install` answers with. */\nexport interface CrmRecipeInstallResult {\n  ok: true\n  actionId: string\n  /** The installed action's name, as the site's Actions list will show it. */\n  name: string\n  recipeId: CrmActionRecipeId\n}\n\n/**\n * What an organization-level activity line may point at: the CRM's record\n * kinds, and nothing the org feed holds for its own reasons (a member, a\n * subscription). The route refuses any other type, so a bulk bar cannot\n * write a line the feed's presenter would render as a workspace event.\n */\nexport const CRM_ORG_ACTIVITY_KINDS = [\n  'contact',\n  'company',\n  'deal',\n  'lead',\n  'task',\n] as const\n\nexport type CrmOrgActivityKind = (typeof CRM_ORG_ACTIVITY_KINDS)[number]\n\n/** The most an activity line may say — a sentence, not a report. */\nexport const CRM_ORG_ACTIVITY_ACTION_MAX = 160\n\n/** The browser-side URL for a route key. */\nexport function crmApiUrl(route: keyof typeof CRM_API_ROUTES): string {\n  return `/api/${CRM_API_ROUTES[route]}`\n}\n"],"names":["CRM_API_ROUTES","ping","contactStage","contactUpdate","contactRemove","companyDelete","emailSend","orgActivity","recipeInstall","recipeStatus","inboundAddress","dailyDigest","taskReminders","inbound","export","CRM_ORG_ACTIVITY_KINDS","CRM_ORG_ACTIVITY_ACTION_MAX","crmApiUrl","route"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;CAMC,GACD,OAAO,MAAMA,iBAAiB;IAC5BC,MAAM;IACN;;;GAGC,GACDC,cAAc;IACd;;;GAGC,GACDC,eAAe;IACf;;;;GAIC,GACDC,eAAe;IACf;;;GAGC,GACDC,eAAe;IACf,gFAAgF,GAChFC,WAAW;IACX;;;;GAIC,GACDC,aAAa;IACb;;;;GAIC,GACDC,eAAe;IACf;;;GAGC,GACDC,cAAc;IACd;;;;GAIC,GACDC,gBAAgB;IAChB;;;;GAIC,GACDC,aAAa;IACb;;;;GAIC,GACDC,eAAe;IACf;;;;GAIC,GACDC,SAAS;IACT;;;;;GAKC,GACDC,QAAQ;AACV,EAAU;AAmCV;;;;;CAKC,GACD,OAAO,MAAMC,yBAAyB;IACpC;IACA;IACA;IACA;IACA;CACD,CAAS;AAIV,kEAAkE,GAClE,OAAO,MAAMC,8BAA8B,IAAG;AAE9C,0CAA0C,GAC1C,OAAO,SAASC,UAAUC,KAAkC;IAC1D,OAAO,CAAC,KAAK,EAAElB,cAAc,CAACkB,MAAM,EAAE;AACxC"}

package/src/lib/declarations.console-server.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The CRM's CONSOLE-ONLY server declarations, named under
+ * `consoleServerDeclarations` in `plugins.config.json` and run at the
+ * console's boot.
+ *
+ * It serves the CRM's resources of `/v1` (AGL-2606): the console's router
+ * owns the pipeline in front of them — the key, the plan's API access, the
+ * quota, the rate limit, the error envelope — and hands every request under
+ * `/v1/contacts`, `/v1/deals` and the rest to the CRM once the key is
+ * authenticated and the organization's plan carries the CRM. Each resource
+ * brings its description for the API's OpenAPI document, and the CRM's
+ * records band and collection sizes join `GET /v1/usage`. The API is the
+ * console's alone, so the tenant runtime does not register them.
+ *
+ * Light at boot: each resource's module is imported with its first request,
+ * the descriptions when the document is first built, and the usage reader
+ * with the first usage call.
+ * Registering again replaces this plugin's own entries, so a second call (a
+ * hot reload, a spec) is harmless.
+ */
+export declare function registerCrmConsoleServerDeclarations(): void;

package/src/lib/declarations.console-server.js

@@ -0,0 +1,103 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // The registry's own module, not the data layer's barrel: boot needs one
+// registry, not the whole server surface.
+import { registerApiV1Resource, registerApiV1UsageFigures } from "@aglyn/tenant-data-admin/server/api-v1-resources";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+/**
+ * The plan feature every CRM resource of `/v1` needs, and the sentence its
+ * refusal says (AGL-2611, AGL-2851): the whole CRM is included from
+ * Starter, so a Free workspace reads and changes none of it over the API. A
+ * capture still records people on every plan; working them is the CRM.
+ */ const CRM_SUITE = {
+    feature: 'crm',
+    message: 'The CRM — contacts, leads, companies, deals, tasks, pipelines, ' + 'activities and email templates — is not included in this organization’s plan'
+};
+/**
+ * The CRM's resources on the customer REST API, each handler loaded with the
+ * first request for it. In the order the API root lists them: the people
+ * first, then the records a team keeps about them, then a site's leads
+ * (`/v1/leads?siteId=`, a top-level path with the site as a parameter), then
+ * the letters sent from a record (AGL-2658).
+ */ const CRM_API_V1_RESOURCES = [
+    [
+        'contacts',
+        async (...args)=>(await import("./server/api-v1/contacts.js")).handleContacts(...args)
+    ],
+    [
+        'companies',
+        async (...args)=>(await import("./server/api-v1/crm-companies.js")).handleCompanies(...args)
+    ],
+    [
+        'pipelines',
+        async (...args)=>(await import("./server/api-v1/crm-pipelines.js")).handlePipelines(...args)
+    ],
+    [
+        'deals',
+        async (...args)=>(await import("./server/api-v1/crm-deals.js")).handleDeals(...args)
+    ],
+    [
+        'tasks',
+        async (...args)=>(await import("./server/api-v1/crm-tasks.js")).handleTasks(...args)
+    ],
+    [
+        'activities',
+        async (...args)=>(await import("./server/api-v1/crm-activities.js")).handleActivities(...args)
+    ],
+    [
+        'leads',
+        async (...args)=>(await import("./server/api-v1/crm-leads.js")).handleLeads(...args)
+    ],
+    [
+        'email-templates',
+        async (...args)=>(await import("./server/api-v1/crm-email-templates.js")).handleEmailTemplates(...args)
+    ]
+];
+/**
+ * The CRM's CONSOLE-ONLY server declarations, named under
+ * `consoleServerDeclarations` in `plugins.config.json` and run at the
+ * console's boot.
+ *
+ * It serves the CRM's resources of `/v1` (AGL-2606): the console's router
+ * owns the pipeline in front of them — the key, the plan's API access, the
+ * quota, the rate limit, the error envelope — and hands every request under
+ * `/v1/contacts`, `/v1/deals` and the rest to the CRM once the key is
+ * authenticated and the organization's plan carries the CRM. Each resource
+ * brings its description for the API's OpenAPI document, and the CRM's
+ * records band and collection sizes join `GET /v1/usage`. The API is the
+ * console's alone, so the tenant runtime does not register them.
+ *
+ * Light at boot: each resource's module is imported with its first request,
+ * the descriptions when the document is first built, and the usage reader
+ * with the first usage call.
+ * Registering again replaces this plugin's own entries, so a second call (a
+ * hot reload, a spec) is harmless.
+ */ export function registerCrmConsoleServerDeclarations() {
+    for (const [resource, handle] of CRM_API_V1_RESOURCES){
+        registerApiV1Resource(resource, {
+            handle,
+            entitlement: CRM_SUITE,
+            describe: async ()=>(await import("./server/api-v1/openapi.js")).CRM_API_V1_DESCRIPTIONS[resource]
+        }, {
+            pluginId: BUNDLE_ID
+        });
+    }
+    registerApiV1UsageFigures(async (ctx)=>(await import("./server/api-v1/usage.js")).crmUsageFigures(ctx), {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=declarations.console-server.js.map

package/src/lib/declarations.console-server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/declarations.console-server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry's own module, not the data layer's barrel: boot needs one\n// registry, not the whole server surface.\nimport {\n  type ApiV1ResourceHandler,\n  registerApiV1Resource,\n  registerApiV1UsageFigures,\n} from '@aglyn/tenant-data-admin/server/api-v1-resources'\nimport { BUNDLE_ID } from './constants/bundle-common'\n\n/**\n * The plan feature every CRM resource of `/v1` needs, and the sentence its\n * refusal says (AGL-2611, AGL-2851): the whole CRM is included from\n * Starter, so a Free workspace reads and changes none of it over the API. A\n * capture still records people on every plan; working them is the CRM.\n */\nconst CRM_SUITE = {\n  feature: 'crm',\n  message:\n    'The CRM — contacts, leads, companies, deals, tasks, pipelines, ' +\n    'activities and email templates — is not included in this organization’s plan',\n} as const\n\n/**\n * The CRM's resources on the customer REST API, each handler loaded with the\n * first request for it. In the order the API root lists them: the people\n * first, then the records a team keeps about them, then a site's leads\n * (`/v1/leads?siteId=`, a top-level path with the site as a parameter), then\n * the letters sent from a record (AGL-2658).\n */\nconst CRM_API_V1_RESOURCES: ReadonlyArray<readonly [string, ApiV1ResourceHandler]> = [\n  ['contacts', async (...args) => (await import('./server/api-v1/contacts')).handleContacts(...args)],\n  ['companies', async (...args) => (await import('./server/api-v1/crm-companies')).handleCompanies(...args)],\n  ['pipelines', async (...args) => (await import('./server/api-v1/crm-pipelines')).handlePipelines(...args)],\n  ['deals', async (...args) => (await import('./server/api-v1/crm-deals')).handleDeals(...args)],\n  ['tasks', async (...args) => (await import('./server/api-v1/crm-tasks')).handleTasks(...args)],\n  ['activities', async (...args) => (await import('./server/api-v1/crm-activities')).handleActivities(...args)],\n  ['leads', async (...args) => (await import('./server/api-v1/crm-leads')).handleLeads(...args)],\n  [\n    'email-templates',\n    async (...args) => (await import('./server/api-v1/crm-email-templates')).handleEmailTemplates(...args),\n  ],\n]\n\n/**\n * The CRM's CONSOLE-ONLY server declarations, named under\n * `consoleServerDeclarations` in `plugins.config.json` and run at the\n * console's boot.\n *\n * It serves the CRM's resources of `/v1` (AGL-2606): the console's router\n * owns the pipeline in front of them — the key, the plan's API access, the\n * quota, the rate limit, the error envelope — and hands every request under\n * `/v1/contacts`, `/v1/deals` and the rest to the CRM once the key is\n * authenticated and the organization's plan carries the CRM. Each resource\n * brings its description for the API's OpenAPI document, and the CRM's\n * records band and collection sizes join `GET /v1/usage`. The API is the\n * console's alone, so the tenant runtime does not register them.\n *\n * Light at boot: each resource's module is imported with its first request,\n * the descriptions when the document is first built, and the usage reader\n * with the first usage call.\n * Registering again replaces this plugin's own entries, so a second call (a\n * hot reload, a spec) is harmless.\n */\nexport function registerCrmConsoleServerDeclarations(): void {\n  for (const [resource, handle] of CRM_API_V1_RESOURCES) {\n    registerApiV1Resource(\n      resource,\n      {\n        handle,\n        entitlement: CRM_SUITE,\n        describe: async () =>\n          (await import('./server/api-v1/openapi')).CRM_API_V1_DESCRIPTIONS[resource],\n      },\n      { pluginId: BUNDLE_ID },\n    )\n  }\n  registerApiV1UsageFigures(\n    async (ctx) => (await import('./server/api-v1/usage')).crmUsageFigures(ctx),\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerApiV1Resource","registerApiV1UsageFigures","BUNDLE_ID","CRM_SUITE","feature","message","CRM_API_V1_RESOURCES","args","handleContacts","handleCompanies","handlePipelines","handleDeals","handleTasks","handleActivities","handleLeads","handleEmailTemplates","registerCrmConsoleServerDeclarations","resource","handle","entitlement","describe","CRM_API_V1_DESCRIPTIONS","pluginId","ctx","crmUsageFigures"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,yEAAyE;AACzE,0CAA0C;AAC1C,SAEEA,qBAAqB,EACrBC,yBAAyB,QACpB,mDAAkD;AACzD,SAASC,SAAS,QAAQ,+BAA2B;AAErD;;;;;CAKC,GACD,MAAMC,YAAY;IAChBC,SAAS;IACTC,SACE,oEACA;AACJ;AAEA;;;;;;CAMC,GACD,MAAMC,uBAA+E;IACnF;QAAC;QAAY,OAAO,GAAGC,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGC,cAAc,IAAID;KAAM;IACnG;QAAC;QAAa,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,mCAA+B,EAAGE,eAAe,IAAIF;KAAM;IAC1G;QAAC;QAAa,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,mCAA+B,EAAGG,eAAe,IAAIH;KAAM;IAC1G;QAAC;QAAS,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGI,WAAW,IAAIJ;KAAM;IAC9F;QAAC;QAAS,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGK,WAAW,IAAIL;KAAM;IAC9F;QAAC;QAAc,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,oCAAgC,EAAGM,gBAAgB,IAAIN;KAAM;IAC7G;QAAC;QAAS,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGO,WAAW,IAAIP;KAAM;IAC9F;QACE;QACA,OAAO,GAAGA,OAAS,AAAC,CAAA,MAAM,MAAM,CAAC,yCAAqC,EAAGQ,oBAAoB,IAAIR;KAClG;CACF;AAED;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,SAASS;IACd,KAAK,MAAM,CAACC,UAAUC,OAAO,IAAIZ,qBAAsB;QACrDN,sBACEiB,UACA;YACEC;YACAC,aAAahB;YACbiB,UAAU,UACR,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGC,uBAAuB,CAACJ,SAAS;QAC/E,GACA;YAAEK,UAAUpB;QAAU;IAE1B;IACAD,0BACE,OAAOsB,MAAQ,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,eAAe,CAACD,MACvE;QAAED,UAAUpB;IAAU;AAE1B"}

package/src/lib/declarations.server.d.ts

@@ -15,6 +15,7 @@
  * limitations under the License.
  */
 import { type PluginContactCaptureWriter } from '@aglyn/aglyn/plugin-manager/plugin-contact-capture';
+import { type PluginRecordIndex } from '@aglyn/aglyn/plugin-manager/plugin-record-index';
 /**
  * The CRM as the plugin that keeps people.
  *
@@ -25,6 +26,11 @@ import { type PluginContactCaptureWriter } from '@aglyn/aglyn/plugin-manager/plu
  * including ones that will never touch the CRM.
  */
 export declare const crmContactCaptureWriter: PluginContactCaptureWriter;
+/**
+ * The `pipeline` record index, its reads loaded with the first one — see
+ * `server/pipeline-record-index.ts` for what it answers.
+ */
+export declare const crmPipelineRecordIndex: PluginRecordIndex;
 /**
  * The plugin's SERVER declarations: what the server must know at boot, before
  * any door of the CRM has been called.

package/src/lib/declarations.server.js

@@ -19,7 +19,9 @@ import { registerPluginConsentGroupParticipant } from "@aglyn/aglyn/plugin-manag
 import { registerPluginContactCaptureWriter } from "@aglyn/aglyn/plugin-manager/plugin-contact-capture";
 import { registerPluginLeadConversionListener } from "@aglyn/aglyn/plugin-manager/plugin-lead-conversion";
 import { registerPluginPersonMatcher } from "@aglyn/aglyn/plugin-manager/plugin-person-matches";
+import { registerPluginRecordIndex } from "@aglyn/aglyn/plugin-manager/plugin-record-index";
 import { registerPluginRecordEmailStateWriter } from "@aglyn/aglyn/plugin-manager/plugin-record-email-state";
+import { registerPluginRecordWrittenListener } from "@aglyn/aglyn/plugin-manager/plugin-record-written";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
 import { summarizeConsentGroupChange } from "./model/consent-group-summary.js";
 /**
@@ -36,6 +38,19 @@ import { summarizeConsentGroupChange } from "./model/consent-group-summary.js";
         return await captureContactForCrm(request);
     }
 };
+/**
+ * The `pipeline` record index, its reads loaded with the first one — see
+ * `server/pipeline-record-index.ts` for what it answers.
+ */ export const crmPipelineRecordIndex = {
+    async list (request) {
+        const { pipelineRecordIndex } = await import("./server/pipeline-record-index.js");
+        return pipelineRecordIndex.list(request);
+    },
+    async get (request) {
+        const { pipelineRecordIndex } = await import("./server/pipeline-record-index.js");
+        return pipelineRecordIndex.get(request);
+    }
+};
 /**
  * The plugin's SERVER declarations: what the server must know at boot, before
  * any door of the CRM has been called.
@@ -105,6 +120,24 @@ import { summarizeConsentGroupChange } from "./model/consent-group-summary.js";
     }, {
         pluginId: BUNDLE_ID
     });
+    // Sharing rules (AGL-3336), re-evaluated after every server write of a
+    // lead, a contact, a company or a deal: the core tells its record-written
+    // listeners from the list-field restamp every such writer ends with, in
+    // both apps — a form's capture on the tenant, an edit in the console.
+    // Deferred like the rest: an org with no rules pays one cached read.
+    registerPluginRecordWrittenListener(async (event)=>{
+        const { crmSharingRecordWritten } = await import("./server/crm-sharing.js");
+        await crmSharingRecordWritten(event);
+    }, {
+        pluginId: BUNDLE_ID,
+        key: 'sharing'
+    });
+    // The organization's pipelines and their stages, as another plugin reads
+    // them (AGL-3080): an automation the AI drafts names the stage a deal
+    // moves to. Deferred like the rest: the reads load with the first one.
+    registerPluginRecordIndex('pipeline', crmPipelineRecordIndex, {
+        pluginId: BUNDLE_ID
+    });
     registerPluginConsentGroupParticipant({
         async preview (request) {
             const { consentGroupParticipant } = await import("./server/consent-group-participant.js");

package/src/lib/declarations.server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The contract from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else, and the barrel reaches the client contexts.\nimport { registerPluginConsentGroupParticipant } from '@aglyn/aglyn/plugin-manager/plugin-consent-group-change'\nimport {\n  registerPluginContactCaptureWriter,\n  type PluginContactCaptureWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-contact-capture'\nimport { registerPluginLeadConversionListener } from '@aglyn/aglyn/plugin-manager/plugin-lead-conversion'\nimport { registerPluginPersonMatcher } from '@aglyn/aglyn/plugin-manager/plugin-person-matches'\nimport { registerPluginRecordEmailStateWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { summarizeConsentGroupChange } from './model/consent-group-summary'\n\n/**\n * The CRM as the plugin that keeps people.\n *\n * Light by construction, the way the workflows listener is: the capture\n * itself is imported when the first one arrives, not when the process\n * starts, so a process that never captures anybody pays for this object and\n * nothing else. That matters because this registers in EVERY server process,\n * including ones that will never touch the CRM.\n */\nexport const crmContactCaptureWriter: PluginContactCaptureWriter = {\n  async capture(request) {\n    const { captureContactForCrm } = await import('./server/capture-contact')\n    return await captureContactForCrm(request)\n  },\n}\n\n/**\n * The plugin's SERVER declarations: what the server must know at boot, before\n * any door of the CRM has been called.\n *\n * ## Why a declaration and not a `tenantApi` registration\n *\n * The doors that meet a person mostly never load this plugin. A form\n * submission is a core route; an order and a booking are captured inside\n * STRIPE WEBHOOKS. None of them has a reason to load the CRM, and a registry\n * filled by a surface that did not load answers `null` — which\n * `capturePluginContact` defines as \"this workspace has no record system\", a\n * sentence that would be false and silent. Orders would stop creating\n * contacts with nothing red anywhere, which is the AGL-3025 shape.\n *\n * Running from both apps' generated server-declarations manifest at boot is\n * what makes the answer true in every process. It is also called from the\n * plugin's own API register functions, so a process whose boot did not run it\n * still registers the writer the first time a CRM door loads. Registering\n * twice replaces in place.\n *\n * ⚠️ The registry holds ONE writer: a workspace keeps one set of people. A\n * second plugin's is refused naming both, and the incumbent keeps serving.\n */\nexport function registerCrmServerDeclarations(): void {\n  registerPluginContactCaptureWriter(crmContactCaptureWriter, {\n    pluginId: BUNDLE_ID,\n  })\n  // The CRM's own share of a lead conversion (AGL-3254): the lead's\n  // campaigns go onto the contact's facet. Through the seam every door\n  // that converts a lead reaches, and deferred like the capture: the\n  // module that writes is loaded when the first conversion arrives, and\n  // it brings the Admin SDK with it — this file defers the plugin's OWN\n  // module only. A library imported statically across the plugin cannot\n  // also be lazy-loaded here: `enforce-module-boundaries` refuses every\n  // static import of a library the project lazy-loads anywhere.\n  registerPluginLeadConversionListener(\n    async (request) => {\n      const { carryLeadCampaignsOnConversion } =\n        await import('./server/lead-campaign-carry')\n      return carryLeadCampaignsOnConversion(request)\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  // \"Did this workspace already know this person?\" (AGL-3289), asked by the\n  // staff console's acquisition card. Deferred like the rest: the reads load\n  // when a staff member first opens a card, not when the process starts.\n  registerPluginPersonMatcher(\n    async (request) => {\n      const { matchCrmPeople } = await import('./server/person-matches')\n      return matchCrmPeople(request)\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  // The CRM's share of a consent group change (AGL-3320): a contact's\n  // per-site refusal carried across a separation, and the records keyed by a\n  // group re-homed after the flip. Registered whether or not a workspace has\n  // the CRM switched on, because the contacts — and the refusals on them —\n  // outlive the switch. Deferred like the rest; the summary is plain words\n  // and answers synchronously.\n  // The record email-state writer (AGL-3245), here as well as in the console\n  // API so the tenant's doors reach it too: a form submission's capture is\n  // checked for deliverability after its response (AGL-3328), and the \"Would\n  // bounce\" that check finds is written through this seam. Deferred like the\n  // rest; the console's own registration replaces this one with the same\n  // writer, loaded eagerly.\n  registerPluginRecordEmailStateWriter(\n    {\n      async stamp(request) {\n        const { createCrmRecordEmailStateWriter, defaultCrmRecordEmailStateDeps } =\n          await import('./server/record-email-state')\n        return createCrmRecordEmailStateWriter(defaultCrmRecordEmailStateDeps()).stamp(request)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginConsentGroupParticipant(\n    {\n      async preview(request) {\n        const { consentGroupParticipant } = await import('./server/consent-group-participant')\n        return consentGroupParticipant.preview(request)\n      },\n      async run(request) {\n        const { consentGroupParticipant } = await import('./server/consent-group-participant')\n        return consentGroupParticipant.run(request)\n      },\n      summarize: summarizeConsentGroupChange,\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n\n"],"names":["registerPluginConsentGroupParticipant","registerPluginContactCaptureWriter","registerPluginLeadConversionListener","registerPluginPersonMatcher","registerPluginRecordEmailStateWriter","BUNDLE_ID","summarizeConsentGroupChange","crmContactCaptureWriter","capture","request","captureContactForCrm","registerCrmServerDeclarations","pluginId","carryLeadCampaignsOnConversion","matchCrmPeople","stamp","createCrmRecordEmailStateWriter","defaultCrmRecordEmailStateDeps","preview","consentGroupParticipant","run","summarize"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,6EAA6E;AAC7E,SAASA,qCAAqC,QAAQ,0DAAyD;AAC/G,SACEC,kCAAkC,QAE7B,qDAAoD;AAC3D,SAASC,oCAAoC,QAAQ,qDAAoD;AACzG,SAASC,2BAA2B,QAAQ,oDAAmD;AAC/F,SAASC,oCAAoC,QAAQ,wDAAuD;AAC5G,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,2BAA2B,QAAQ,mCAA+B;AAE3E;;;;;;;;CAQC,GACD,OAAO,MAAMC,0BAAsD;IACjE,MAAMC,SAAQC,OAAO;QACnB,MAAM,EAAEC,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC9C,OAAO,MAAMA,qBAAqBD;IACpC;AACF,EAAC;AAED;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,OAAO,SAASE;IACdV,mCAAmCM,yBAAyB;QAC1DK,UAAUP;IACZ;IACA,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,8DAA8D;IAC9DH,qCACE,OAAOO;QACL,MAAM,EAAEI,8BAA8B,EAAE,GACtC,MAAM,MAAM,CAAC;QACf,OAAOA,+BAA+BJ;IACxC,GACA;QAAEG,UAAUP;IAAU;IAExB,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvEF,4BACE,OAAOM;QACL,MAAM,EAAEK,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC;QACxC,OAAOA,eAAeL;IACxB,GACA;QAAEG,UAAUP;IAAU;IAExB,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,6BAA6B;IAC7B,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,0BAA0B;IAC1BD,qCACE;QACE,MAAMW,OAAMN,OAAO;YACjB,MAAM,EAAEO,+BAA+B,EAAEC,8BAA8B,EAAE,GACvE,MAAM,MAAM,CAAC;YACf,OAAOD,gCAAgCC,kCAAkCF,KAAK,CAACN;QACjF;IACF,GACA;QAAEG,UAAUP;IAAU;IAExBL,sCACE;QACE,MAAMkB,SAAQT,OAAO;YACnB,MAAM,EAAEU,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC;YACjD,OAAOA,wBAAwBD,OAAO,CAACT;QACzC;QACA,MAAMW,KAAIX,OAAO;YACf,MAAM,EAAEU,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC;YACjD,OAAOA,wBAAwBC,GAAG,CAACX;QACrC;QACAY,WAAWf;IACb,GACA;QAAEM,UAAUP;IAAU;AAE1B"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The contract from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else, and the barrel reaches the client contexts.\nimport { registerPluginConsentGroupParticipant } from '@aglyn/aglyn/plugin-manager/plugin-consent-group-change'\nimport {\n  registerPluginContactCaptureWriter,\n  type PluginContactCaptureWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-contact-capture'\nimport { registerPluginLeadConversionListener } from '@aglyn/aglyn/plugin-manager/plugin-lead-conversion'\nimport { registerPluginPersonMatcher } from '@aglyn/aglyn/plugin-manager/plugin-person-matches'\nimport {\n  registerPluginRecordIndex,\n  type PluginRecordIndex,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-index'\nimport { registerPluginRecordEmailStateWriter } from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport { registerPluginRecordWrittenListener } from '@aglyn/aglyn/plugin-manager/plugin-record-written'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { summarizeConsentGroupChange } from './model/consent-group-summary'\n\n/**\n * The CRM as the plugin that keeps people.\n *\n * Light by construction, the way the workflows listener is: the capture\n * itself is imported when the first one arrives, not when the process\n * starts, so a process that never captures anybody pays for this object and\n * nothing else. That matters because this registers in EVERY server process,\n * including ones that will never touch the CRM.\n */\nexport const crmContactCaptureWriter: PluginContactCaptureWriter = {\n  async capture(request) {\n    const { captureContactForCrm } = await import('./server/capture-contact')\n    return await captureContactForCrm(request)\n  },\n}\n\n/**\n * The `pipeline` record index, its reads loaded with the first one — see\n * `server/pipeline-record-index.ts` for what it answers.\n */\nexport const crmPipelineRecordIndex: PluginRecordIndex = {\n  async list(request) {\n    const { pipelineRecordIndex } = await import('./server/pipeline-record-index')\n    return pipelineRecordIndex.list(request)\n  },\n  async get(request) {\n    const { pipelineRecordIndex } = await import('./server/pipeline-record-index')\n    return pipelineRecordIndex.get(request)\n  },\n}\n\n/**\n * The plugin's SERVER declarations: what the server must know at boot, before\n * any door of the CRM has been called.\n *\n * ## Why a declaration and not a `tenantApi` registration\n *\n * The doors that meet a person mostly never load this plugin. A form\n * submission is a core route; an order and a booking are captured inside\n * STRIPE WEBHOOKS. None of them has a reason to load the CRM, and a registry\n * filled by a surface that did not load answers `null` — which\n * `capturePluginContact` defines as \"this workspace has no record system\", a\n * sentence that would be false and silent. Orders would stop creating\n * contacts with nothing red anywhere, which is the AGL-3025 shape.\n *\n * Running from both apps' generated server-declarations manifest at boot is\n * what makes the answer true in every process. It is also called from the\n * plugin's own API register functions, so a process whose boot did not run it\n * still registers the writer the first time a CRM door loads. Registering\n * twice replaces in place.\n *\n * ⚠️ The registry holds ONE writer: a workspace keeps one set of people. A\n * second plugin's is refused naming both, and the incumbent keeps serving.\n */\nexport function registerCrmServerDeclarations(): void {\n  registerPluginContactCaptureWriter(crmContactCaptureWriter, {\n    pluginId: BUNDLE_ID,\n  })\n  // The CRM's own share of a lead conversion (AGL-3254): the lead's\n  // campaigns go onto the contact's facet. Through the seam every door\n  // that converts a lead reaches, and deferred like the capture: the\n  // module that writes is loaded when the first conversion arrives, and\n  // it brings the Admin SDK with it — this file defers the plugin's OWN\n  // module only. A library imported statically across the plugin cannot\n  // also be lazy-loaded here: `enforce-module-boundaries` refuses every\n  // static import of a library the project lazy-loads anywhere.\n  registerPluginLeadConversionListener(\n    async (request) => {\n      const { carryLeadCampaignsOnConversion } =\n        await import('./server/lead-campaign-carry')\n      return carryLeadCampaignsOnConversion(request)\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  // \"Did this workspace already know this person?\" (AGL-3289), asked by the\n  // staff console's acquisition card. Deferred like the rest: the reads load\n  // when a staff member first opens a card, not when the process starts.\n  registerPluginPersonMatcher(\n    async (request) => {\n      const { matchCrmPeople } = await import('./server/person-matches')\n      return matchCrmPeople(request)\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  // The CRM's share of a consent group change (AGL-3320): a contact's\n  // per-site refusal carried across a separation, and the records keyed by a\n  // group re-homed after the flip. Registered whether or not a workspace has\n  // the CRM switched on, because the contacts — and the refusals on them —\n  // outlive the switch. Deferred like the rest; the summary is plain words\n  // and answers synchronously.\n  // The record email-state writer (AGL-3245), here as well as in the console\n  // API so the tenant's doors reach it too: a form submission's capture is\n  // checked for deliverability after its response (AGL-3328), and the \"Would\n  // bounce\" that check finds is written through this seam. Deferred like the\n  // rest; the console's own registration replaces this one with the same\n  // writer, loaded eagerly.\n  registerPluginRecordEmailStateWriter(\n    {\n      async stamp(request) {\n        const { createCrmRecordEmailStateWriter, defaultCrmRecordEmailStateDeps } =\n          await import('./server/record-email-state')\n        return createCrmRecordEmailStateWriter(defaultCrmRecordEmailStateDeps()).stamp(request)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  // Sharing rules (AGL-3336), re-evaluated after every server write of a\n  // lead, a contact, a company or a deal: the core tells its record-written\n  // listeners from the list-field restamp every such writer ends with, in\n  // both apps — a form's capture on the tenant, an edit in the console.\n  // Deferred like the rest: an org with no rules pays one cached read.\n  registerPluginRecordWrittenListener(\n    async (event) => {\n      const { crmSharingRecordWritten } = await import('./server/crm-sharing')\n      await crmSharingRecordWritten(event)\n    },\n    { pluginId: BUNDLE_ID, key: 'sharing' },\n  )\n  // The organization's pipelines and their stages, as another plugin reads\n  // them (AGL-3080): an automation the AI drafts names the stage a deal\n  // moves to. Deferred like the rest: the reads load with the first one.\n  registerPluginRecordIndex('pipeline', crmPipelineRecordIndex, { pluginId: BUNDLE_ID })\n  registerPluginConsentGroupParticipant(\n    {\n      async preview(request) {\n        const { consentGroupParticipant } = await import('./server/consent-group-participant')\n        return consentGroupParticipant.preview(request)\n      },\n      async run(request) {\n        const { consentGroupParticipant } = await import('./server/consent-group-participant')\n        return consentGroupParticipant.run(request)\n      },\n      summarize: summarizeConsentGroupChange,\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n\n"],"names":["registerPluginConsentGroupParticipant","registerPluginContactCaptureWriter","registerPluginLeadConversionListener","registerPluginPersonMatcher","registerPluginRecordIndex","registerPluginRecordEmailStateWriter","registerPluginRecordWrittenListener","BUNDLE_ID","summarizeConsentGroupChange","crmContactCaptureWriter","capture","request","captureContactForCrm","crmPipelineRecordIndex","list","pipelineRecordIndex","get","registerCrmServerDeclarations","pluginId","carryLeadCampaignsOnConversion","matchCrmPeople","stamp","createCrmRecordEmailStateWriter","defaultCrmRecordEmailStateDeps","event","crmSharingRecordWritten","key","preview","consentGroupParticipant","run","summarize"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,6EAA6E;AAC7E,SAASA,qCAAqC,QAAQ,0DAAyD;AAC/G,SACEC,kCAAkC,QAE7B,qDAAoD;AAC3D,SAASC,oCAAoC,QAAQ,qDAAoD;AACzG,SAASC,2BAA2B,QAAQ,oDAAmD;AAC/F,SACEC,yBAAyB,QAEpB,kDAAiD;AACxD,SAASC,oCAAoC,QAAQ,wDAAuD;AAC5G,SAASC,mCAAmC,QAAQ,oDAAmD;AACvG,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,2BAA2B,QAAQ,mCAA+B;AAE3E;;;;;;;;CAQC,GACD,OAAO,MAAMC,0BAAsD;IACjE,MAAMC,SAAQC,OAAO;QACnB,MAAM,EAAEC,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC9C,OAAO,MAAMA,qBAAqBD;IACpC;AACF,EAAC;AAED;;;CAGC,GACD,OAAO,MAAME,yBAA4C;IACvD,MAAMC,MAAKH,OAAO;QAChB,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC7C,OAAOA,oBAAoBD,IAAI,CAACH;IAClC;IACA,MAAMK,KAAIL,OAAO;QACf,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC7C,OAAOA,oBAAoBC,GAAG,CAACL;IACjC;AACF,EAAC;AAED;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,OAAO,SAASM;IACdhB,mCAAmCQ,yBAAyB;QAC1DS,UAAUX;IACZ;IACA,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,8DAA8D;IAC9DL,qCACE,OAAOS;QACL,MAAM,EAAEQ,8BAA8B,EAAE,GACtC,MAAM,MAAM,CAAC;QACf,OAAOA,+BAA+BR;IACxC,GACA;QAAEO,UAAUX;IAAU;IAExB,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvEJ,4BACE,OAAOQ;QACL,MAAM,EAAES,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC;QACxC,OAAOA,eAAeT;IACxB,GACA;QAAEO,UAAUX;IAAU;IAExB,oEAAoE;IACpE,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,6BAA6B;IAC7B,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,0BAA0B;IAC1BF,qCACE;QACE,MAAMgB,OAAMV,OAAO;YACjB,MAAM,EAAEW,+BAA+B,EAAEC,8BAA8B,EAAE,GACvE,MAAM,MAAM,CAAC;YACf,OAAOD,gCAAgCC,kCAAkCF,KAAK,CAACV;QACjF;IACF,GACA;QAAEO,UAAUX;IAAU;IAExB,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrED,oCACE,OAAOkB;QACL,MAAM,EAAEC,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC;QACjD,MAAMA,wBAAwBD;IAChC,GACA;QAAEN,UAAUX;QAAWmB,KAAK;IAAU;IAExC,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvEtB,0BAA0B,YAAYS,wBAAwB;QAAEK,UAAUX;IAAU;IACpFP,sCACE;QACE,MAAM2B,SAAQhB,OAAO;YACnB,MAAM,EAAEiB,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC;YACjD,OAAOA,wBAAwBD,OAAO,CAAChB;QACzC;QACA,MAAMkB,KAAIlB,OAAO;YACf,MAAM,EAAEiB,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC;YACjD,OAAOA,wBAAwBC,GAAG,CAAClB;QACrC;QACAmB,WAAWtB;IACb,GACA;QAAEU,UAAUX;IAAU;AAE1B"}

package/src/lib/hooks/use-contact-remove.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { CrmBulkAnswer } from '../model/crm-bulk-writes';
+/**
+ * THE CONSOLE'S DOOR TO `crm/contact-remove` (AGL-3338).
+ *
+ * The record page's Delete and the contacts bar's Remove let contacts go
+ * through here rather than writing the document: the route decides detach
+ * or delete against the stored consent map, keeps every refusal, and the
+ * rules refuse a client the write.
+ *
+ * A request refused WHOLE — no session, no permission — throws with the
+ * route's sentence. `removeMany` answers per contact in the bulk runners'
+ * shape; `removeOne` throws that contact's refusal and otherwise says
+ * whether the document was deleted or only this site's half of it.
+ */
+export declare function useContactRemove(hostId: string | null): {
+    removeMany: (contactIds: readonly string[]) => Promise<CrmBulkAnswer[]>;
+    removeOne: (contactId: string) => Promise<"deleted" | "detached">;
+};
+export default useContactRemove;

package/src/lib/hooks/use-contact-remove.js

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { useCallback, useMemo } from "react";
+import { useCrmApi } from "../components/use-crm-api.js";
+/**
+ * THE CONSOLE'S DOOR TO `crm/contact-remove` (AGL-3338).
+ *
+ * The record page's Delete and the contacts bar's Remove let contacts go
+ * through here rather than writing the document: the route decides detach
+ * or delete against the stored consent map, keeps every refusal, and the
+ * rules refuse a client the write.
+ *
+ * A request refused WHOLE — no session, no permission — throws with the
+ * route's sentence. `removeMany` answers per contact in the bulk runners'
+ * shape; `removeOne` throws that contact's refusal and otherwise says
+ * whether the document was deleted or only this site's half of it.
+ */ export function useContactRemove(hostId) {
+    const callCrm = useCrmApi(hostId);
+    const removeOutcomes = useCallback(async (contactIds)=>{
+        const { response, payload } = await callCrm('contact-remove', {
+            contactIds: [
+                ...contactIds
+            ]
+        });
+        if (!response.ok) {
+            const error = payload['error'];
+            throw new Error(typeof error === 'string' && error ? error : `The contact could not be removed (${response.status}).`);
+        }
+        return Array.isArray(payload['results']) ? payload['results'] : [];
+    }, [
+        callCrm
+    ]);
+    const removeMany = useCallback(async (contactIds)=>(await removeOutcomes(contactIds)).map((outcome)=>_extends({
+                id: outcome.contactId,
+                ok: outcome.ok
+            }, 'error' in outcome ? {
+                error: outcome.error
+            } : {})), [
+        removeOutcomes
+    ]);
+    const removeOne = useCallback(async (contactId)=>{
+        const [outcome] = await removeOutcomes([
+            contactId
+        ]);
+        if (!(outcome == null ? void 0 : outcome.ok)) {
+            throw new Error(outcome && 'error' in outcome && outcome.error || 'The contact could not be removed.');
+        }
+        return outcome.removed;
+    }, [
+        removeOutcomes
+    ]);
+    return useMemo(()=>({
+            removeMany,
+            removeOne
+        }), [
+        removeMany,
+        removeOne
+    ]);
+}
+export default useContactRemove;
+
+//# sourceMappingURL=use-contact-remove.js.map

package/src/lib/hooks/use-contact-remove.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/hooks/use-contact-remove.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n'use client'\n\nimport { useCallback, useMemo } from 'react'\nimport { useCrmApi } from '../components/use-crm-api'\nimport type { ContactRemoveOutcome } from '../model/contact-remove'\nimport type { CrmBulkAnswer } from '../model/crm-bulk-writes'\n\n/**\n * THE CONSOLE'S DOOR TO `crm/contact-remove` (AGL-3338).\n *\n * The record page's Delete and the contacts bar's Remove let contacts go\n * through here rather than writing the document: the route decides detach\n * or delete against the stored consent map, keeps every refusal, and the\n * rules refuse a client the write.\n *\n * A request refused WHOLE — no session, no permission — throws with the\n * route's sentence. `removeMany` answers per contact in the bulk runners'\n * shape; `removeOne` throws that contact's refusal and otherwise says\n * whether the document was deleted or only this site's half of it.\n */\nexport function useContactRemove(hostId: string | null) {\n  const callCrm = useCrmApi(hostId)\n\n  const removeOutcomes = useCallback(\n    async (contactIds: readonly string[]): Promise<ContactRemoveOutcome[]> => {\n      const { response, payload } = await callCrm('contact-remove', {\n        contactIds: [...contactIds],\n      })\n      if (!response.ok) {\n        const error = payload['error']\n        throw new Error(\n          typeof error === 'string' && error\n            ? error\n            : `The contact could not be removed (${response.status}).`,\n        )\n      }\n      return Array.isArray(payload['results']) ? payload['results'] : []\n    },\n    [callCrm],\n  )\n\n  const removeMany = useCallback(\n    async (contactIds: readonly string[]): Promise<CrmBulkAnswer[]> =>\n      (await removeOutcomes(contactIds)).map((outcome) => ({\n        id: outcome.contactId,\n        ok: outcome.ok,\n        ...('error' in outcome ? { error: outcome.error } : {}),\n      })),\n    [removeOutcomes],\n  )\n\n  const removeOne = useCallback(\n    async (contactId: string): Promise<'deleted' | 'detached'> => {\n      const [outcome] = await removeOutcomes([contactId])\n      if (!outcome?.ok) {\n        throw new Error(\n          (outcome && 'error' in outcome && outcome.error) || 'The contact could not be removed.',\n        )\n      }\n      return outcome.removed\n    },\n    [removeOutcomes],\n  )\n\n  return useMemo(() => ({ removeMany, removeOne }), [removeMany, removeOne])\n}\n\nexport default useContactRemove\n"],"names":["useCallback","useMemo","useCrmApi","useContactRemove","hostId","callCrm","removeOutcomes","contactIds","response","payload","ok","error","Error","status","Array","isArray","removeMany","map","outcome","id","contactId","removeOne","removed"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;AAEA,SAASA,WAAW,EAAEC,OAAO,QAAQ,QAAO;AAC5C,SAASC,SAAS,QAAQ,+BAA2B;AAIrD;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,iBAAiBC,MAAqB;IACpD,MAAMC,UAAUH,UAAUE;IAE1B,MAAME,iBAAiBN,YACrB,OAAOO;QACL,MAAM,EAAEC,QAAQ,EAAEC,OAAO,EAAE,GAAG,MAAMJ,QAAQ,kBAAkB;YAC5DE,YAAY;mBAAIA;aAAW;QAC7B;QACA,IAAI,CAACC,SAASE,EAAE,EAAE;YAChB,MAAMC,QAAQF,OAAO,CAAC,QAAQ;YAC9B,MAAM,IAAIG,MACR,OAAOD,UAAU,YAAYA,QACzBA,QACA,CAAC,kCAAkC,EAAEH,SAASK,MAAM,CAAC,EAAE,CAAC;QAEhE;QACA,OAAOC,MAAMC,OAAO,CAACN,OAAO,CAAC,UAAU,IAAIA,OAAO,CAAC,UAAU,GAAG,EAAE;IACpE,GACA;QAACJ;KAAQ;IAGX,MAAMW,aAAahB,YACjB,OAAOO,aACL,AAAC,CAAA,MAAMD,eAAeC,WAAU,EAAGU,GAAG,CAAC,CAACC,UAAa;gBACnDC,IAAID,QAAQE,SAAS;gBACrBV,IAAIQ,QAAQR,EAAE;eACV,WAAWQ,UAAU;gBAAEP,OAAOO,QAAQP,KAAK;YAAC,IAAI,CAAC,KAEzD;QAACL;KAAe;IAGlB,MAAMe,YAAYrB,YAChB,OAAOoB;QACL,MAAM,CAACF,QAAQ,GAAG,MAAMZ,eAAe;YAACc;SAAU;QAClD,IAAI,EAACF,2BAAAA,QAASR,EAAE,GAAE;YAChB,MAAM,IAAIE,MACR,AAACM,WAAW,WAAWA,WAAWA,QAAQP,KAAK,IAAK;QAExD;QACA,OAAOO,QAAQI,OAAO;IACxB,GACA;QAAChB;KAAe;IAGlB,OAAOL,QAAQ,IAAO,CAAA;YAAEe;YAAYK;QAAU,CAAA,GAAI;QAACL;QAAYK;KAAU;AAC3E;AAEA,eAAelB,iBAAgB"}

package/src/lib/hooks/use-crm-sharing.d.ts

@@ -0,0 +1,30 @@
+import { type CrmSharingObject, type CrmSharingSite } from '../model/crm-sharing';
+import type { CrmOrgDoc } from './use-crm-scope';
+export interface CrmSharingSites {
+    sites: CrmSharingSite[];
+    ready: boolean;
+    /** How a site reads: its name, or a neutral phrase for one this reader cannot name. */
+    siteName: (hostId: string) => string;
+}
+/**
+ * The org's sites, for a sharing surface (AGL-3336).
+ *
+ * At the organization level the hub already holds them (`useCrmOrgMount`).
+ * Under a site a member cannot list the org's other sites, so a MANAGER's
+ * surface asks `crm/sharing` for them — the one reader a share is offered
+ * to — and every other reader names them as "another site".
+ */
+export declare function useCrmSharingSites(input: {
+    hostId: string | null;
+    orgId: string | null;
+    enabled: boolean;
+}): CrmSharingSites;
+/** The org's sharing rules, off the org document the shell already passed. */
+export declare function useCrmSharingRules(org: CrmOrgDoc): import("../model/crm-sharing").CrmSharingRule[];
+/**
+ * The follow-up a CLIENT-DIRECT write to a lead, a company or a deal owes
+ * the org's sharing rules (AGL-3336): a server write is followed by the
+ * core's record-written seam, a browser's by this. Fire-and-forget — the
+ * save has landed whether or not a rule then shares the record.
+ */
+export declare function useCrmSharingFollowUp(hostId: string | null | undefined, orgId: string | null | undefined): (object: CrmSharingObject, ids: readonly string[]) => void;

package/src/lib/hooks/use-crm-sharing.js

@@ -0,0 +1,109 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { readCrmSharingRules } from "../model/crm-sharing.js";
+import { callCrmSharing, followUpCrmSharing } from "../model/crm-sharing-api.js";
+import { crmTaskCallScope } from "../model/task-routes.js";
+import { useCrmOrgMount } from "./use-crm-org-mount.js";
+/**
+ * The org's sites, for a sharing surface (AGL-3336).
+ *
+ * At the organization level the hub already holds them (`useCrmOrgMount`).
+ * Under a site a member cannot list the org's other sites, so a MANAGER's
+ * surface asks `crm/sharing` for them — the one reader a share is offered
+ * to — and every other reader names them as "another site".
+ */ export function useCrmSharingSites(input) {
+    const { hostId, orgId, enabled } = input;
+    const mount = useCrmOrgMount();
+    const { data: user } = useUser();
+    const [fetched, setFetched] = useState(null);
+    const scope = crmTaskCallScope(hostId, orgId);
+    const key = scope ? JSON.stringify(scope) : '';
+    const fromMount = mount && !hostId;
+    useEffect(()=>{
+        if (fromMount || !enabled || !scope || !user) return;
+        let cancelled = false;
+        callCrmSharing(user, scope, 'sites').then((answer)=>{
+            var _answer_sites;
+            if (!cancelled) setFetched({
+                key,
+                sites: (_answer_sites = answer.sites) != null ? _answer_sites : []
+            });
+        }).catch(()=>{
+            if (!cancelled) setFetched({
+                key,
+                sites: []
+            });
+        });
+        return ()=>{
+            cancelled = true;
+        };
+    // `scope` is keyed by `key`; the object itself is rebuilt every render.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [
+        fromMount,
+        enabled,
+        key,
+        user
+    ]);
+    const sites = useMemo(()=>fromMount ? mount.hosts.map((host)=>({
+                id: host.id,
+                name: host.name
+            })) : (fetched == null ? void 0 : fetched.key) === key ? fetched.sites : [], [
+        fromMount,
+        mount,
+        fetched,
+        key
+    ]);
+    const ready = fromMount ? mount.hostsReady : (fetched == null ? void 0 : fetched.key) === key || !enabled;
+    const siteName = useCallback((id)=>{
+        var _ref;
+        var _sites_find;
+        return (_ref = (_sites_find = sites.find((site)=>site.id === id)) == null ? void 0 : _sites_find.name) != null ? _ref : id === hostId ? 'This site' : 'another site';
+    }, [
+        sites,
+        hostId
+    ]);
+    return {
+        sites,
+        ready,
+        siteName
+    };
+}
+/** The org's sharing rules, off the org document the shell already passed. */ export function useCrmSharingRules(org) {
+    return useMemo(()=>readCrmSharingRules(org != null ? org : null), [
+        org
+    ]);
+}
+/**
+ * The follow-up a CLIENT-DIRECT write to a lead, a company or a deal owes
+ * the org's sharing rules (AGL-3336): a server write is followed by the
+ * core's record-written seam, a browser's by this. Fire-and-forget — the
+ * save has landed whether or not a rule then shares the record.
+ */ export function useCrmSharingFollowUp(hostId, orgId) {
+    const { data: user } = useUser();
+    return useCallback((object, ids)=>{
+        void followUpCrmSharing(user, crmTaskCallScope(hostId, orgId), object, ids);
+    }, [
+        user,
+        hostId,
+        orgId
+    ]);
+}
+
+//# sourceMappingURL=use-crm-sharing.js.map