@aglyn/plugins-crm 1.0.0-beta.220 → 1.0.0-beta.222

package/src/lib/server/lead-create.js

@@ -44,15 +44,17 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * to a sibling site holds the key but not the host. Then the CRM suite gate,
  * because a lead entered by hand is suite work: the capture doors that fill
  * a Free workspace's leads do not come through here.
- */ import { checkVisitorRecordCeiling, CONTACT_FIELDS_MAX_PER_ORG, CRM_COLLECTIONS, LEADS_MAX_PER_HOST, normalizeContactEmail, normalizeCrmLeadProfile, personKey, readCrmCustomInput } from "@aglyn/aglyn/server";
+ */ import { checkVisitorRecordCeiling, CONTACT_FIELDS_MAX_PER_ORG, CRM_COLLECTIONS, crmLeadComposedName, CRM_LEAD_STATUS_PICKLIST, LEADS_MAX_PER_HOST, normalizeContactEmail, normalizeCrmLeadProfile, personKey, readCrmCustomInput, resolveCrmLeadStatusWrite } from "@aglyn/aglyn/server";
 import { addHostLead, firebaseAdmin, getOrgForHost, logHostActivity, orgLeadsForHost, restampCrmListFieldsAt, readLeadForHost, scopedToHost } from "@aglyn/tenant-data-admin";
 import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
 import { normalizeContainerIds, readContainerIds } from "@aglyn/aglyn/app-utils/container-membership";
 import { readOrgContainers } from "@aglyn/tenant-data-admin/server/org-containers";
 import { FieldValue } from "firebase-admin/firestore";
 import { fileCampaignFilingActivities } from "./campaign-filing-activity.js";
+import { judgeLeadPicklistPatch, readLeadPicklists } from "./lead-picklists.js";
 import { readLeadSourcePicklist, resolveLeadSourceWrite } from "./lead-source-picklist.js";
 import { holdsDataManage } from "./org-caller.js";
+import { readCrmPicklist } from "./read-picklist.js";
 import { crmSuiteRefusal } from "./suite-gate.js";
 /** The statuses a lead may be entered in — everything but the converted state. */ const CREATE_STATUSES = [
     'new',
@@ -140,17 +142,11 @@ export const leadCreateHandler = async (req, res)=>{
         return;
     }
     const rawStatus = String((_body_status = body.status) != null ? _body_status : '').trim();
-    if (rawStatus && !CREATE_STATUSES.includes(rawStatus)) {
-        res.status(400).json({
-            error: 'A new lead is New or Working.'
-        });
-        return;
-    }
     const name = String((_body_name = body.name) != null ? _body_name : '').trim().replace(/\s+/g, ' ').slice(0, NAME_MAX);
     const ownerUid = String((_body_ownerUid = body.ownerUid) != null ? _body_ownerUid : '').trim().slice(0, 128);
     const notes = String((_body_notes = body.notes) != null ? _body_notes : '').trim().slice(0, NOTES_MAX);
     try {
-        var _ref, _decoded_name, _decoded_email;
+        var _ref, _ref1, _ref2, _ref3, _decoded_name, _decoded_email;
         const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
         const staff = decoded['staff'] === true;
         const membership = await resolveOrgPermissions(decoded.uid, {
@@ -234,6 +230,39 @@ export const leadCreateHandler = async (req, res)=>{
         if (leadSource.write === undefined) delete patch.leadSource;
         else patch.leadSource = leadSource.write;
         /*
+     * SALUTATION, INDUSTRY AND RATING (AGL-3513), the contact's and the
+     * company's own lists, judged the same way: a value outside the list
+     * is refused under its field, the lead's current value is kept, and a
+     * new lead starts from each list's default.
+     */ const picklistRefusals = judgeLeadPicklistPatch(await readLeadPicklists(firestore, resolved.orgId), patch, {
+            current: (_ref = before == null ? void 0 : before.data()) != null ? _ref : null,
+            created
+        });
+        const [picklistRefusal] = Object.entries(picklistRefusals);
+        if (picklistRefusal) {
+            res.status(400).json({
+                error: picklistRefusal[1],
+                field: picklistRefusal[0]
+            });
+            return;
+        }
+        // While a first or last name is set, the name is theirs (AGL-3513).
+        const composedName = crmLeadComposedName((_ref1 = before == null ? void 0 : before.data()) != null ? _ref1 : null, patch);
+        /*
+     * THE ORG'S LEAD STATUSES (AGL-3512): a label or a meaning, of New or
+     * Working only, stored as the meaning and the org's label together.
+     */ const status = rawStatus ? resolveCrmLeadStatusWrite(await readCrmPicklist(firestore, resolved.orgId, CRM_LEAD_STATUS_PICKLIST), rawStatus, {
+            allowed: CREATE_STATUSES,
+            current: (_ref2 = before == null ? void 0 : before.data()) != null ? _ref2 : null
+        }) : null;
+        if ((status == null ? void 0 : status.ok) === false) {
+            res.status(400).json({
+                error: `A new lead is New or Working. ${status.error}`,
+                field: 'status'
+            });
+            return;
+        }
+        /*
      * The platform ceiling, judged here so the drawer can say WHY rather
      * than only that the lead could not be saved; the door re-judges it
      * inside its own transaction, so a race is still refused there.
@@ -254,8 +283,8 @@ export const leadCreateHandler = async (req, res)=>{
             hostId,
             lead: _extends({
                 email
-            }, name ? {
-                name
+            }, composedName || name ? {
+                name: composedName || name
             } : {}, {
                 source: LEAD_MANUAL_SOURCE
             })
@@ -266,8 +295,11 @@ export const leadCreateHandler = async (req, res)=>{
             });
             return;
         }
-        const working = _extends({}, leadProfileWrite(patch), rawStatus ? {
-            status: rawStatus
+        const working = _extends({}, leadProfileWrite(patch), composedName ? {
+            name: composedName
+        } : {}, (status == null ? void 0 : status.ok) ? {
+            status: status.status,
+            statusLabel: status.statusLabel
         } : {}, ownerUid ? {
             ownerUid
         } : {}, notes ? {
@@ -304,7 +336,7 @@ export const leadCreateHandler = async (req, res)=>{
             campaigns: campaigns.filter((campaign)=>!already.includes(campaign.id)),
             atMs: Date.now(),
             byUid: decoded.uid,
-            byName: String((_ref = (_decoded_name = decoded['name']) != null ? _decoded_name : decoded.email) != null ? _ref : '').trim() || null
+            byName: String((_ref3 = (_decoded_name = decoded['name']) != null ? _decoded_name : decoded.email) != null ? _ref3 : '').trim() || null
         });
         /*
      * The audit line, written by the route that verified the caller and
@@ -316,7 +348,7 @@ export const leadCreateHandler = async (req, res)=>{
         }, created ? 'Added lead' : 'Updated lead', {
             type: 'lead',
             id: leadId,
-            name: name || email
+            name: composedName || name || email
         });
         const answer = {
             leadId,

package/src/lib/server/lead-create.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-create.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-create` — a lead typed in by hand (AGL-3231).\n *\n * Salesforce's New Lead: a person the team has heard of and has not yet\n * qualified, entered with what is known about them — the address, the\n * name, the company as text, a title, a phone, a website, an address, tags,\n * where they came from — and nothing else brought into being. No contact,\n * no company record: those are the conversion's to make, once the lead is\n * real. Until then the lead is the whole record, which is what lets the\n * Leads section be worked without a second row for every person in it.\n *\n * ## Through the one door\n *\n * `addHostLead` is the single writer of `hosts/{hostId}/leads` — the\n * capture doors, the import and the REST create all reach it — and it is\n * the writer here. That is what keys the lead on the person, so a second\n * \"new lead\" for one address updates the first rather than filing twice;\n * counts it against the platform ceiling inside the transaction that\n * writes; and records NO marketing basis, because a person typed in by the\n * team is not a person who ticked a box. The profile and the working state\n * are the CRM's own annotations and land in one merge write after the\n * door's, exactly as the import writes them.\n *\n * ## Who may call it\n *\n * The same two gates the convert route asks: `data.manage` in the org, and\n * a role on THIS site — a lead is the site's record, so an org member scoped\n * to a sibling site holds the key but not the host. Then the CRM suite gate,\n * because a lead entered by hand is suite work: the capture doors that fill\n * a Free workspace's leads do not come through here.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  type CrmCustomValue,\n  type CrmLeadProfilePatch,\n  type CrmLeadStatus,\n  LEADS_MAX_PER_HOST,\n  normalizeContactEmail,\n  normalizeCrmLeadProfile,\n  personKey,\n  type PluginApiHandler,\n  readCrmCustomInput,\n} from '@aglyn/aglyn/server'\nimport {\n  addHostLead,\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  orgLeadsForHost,\n  restampCrmListFieldsAt,\n  readLeadForHost,\n  scopedToHost,\n} from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport { normalizeContainerIds, readContainerIds } from '@aglyn/aglyn/app-utils/container-membership'\nimport { readOrgContainers } from '@aglyn/tenant-data-admin/server/org-containers'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport type { CampaignFilingRef } from '../model/campaign-filing-activity'\nimport { fileCampaignFilingActivities } from './campaign-filing-activity'\nimport { readLeadSourcePicklist, resolveLeadSourceWrite } from './lead-source-picklist'\nimport { holdsDataManage } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/** The statuses a lead may be entered in — everything but the converted state. */\nconst CREATE_STATUSES: readonly CrmLeadStatus[] = ['new', 'working']\n\nconst NAME_MAX = 120\nconst NOTES_MAX = 4000\n\n/** The surface a hand-entered lead names, beside `signup`, `booking`, `form:{id}` and `import`. */\nexport const LEAD_MANUAL_SOURCE = 'manual'\n\n/** What the New lead drawer posts. */\nexport interface LeadCreateRequest {\n  hostId: string\n  email: string\n  name?: string\n  company?: string\n  jobTitle?: string\n  phone?: string\n  website?: string\n  address?: Record<string, unknown> | null\n  tags?: string[]\n  leadSource?: string\n  status?: CrmLeadStatus\n  ownerUid?: string\n  notes?: string\n  /** The org's campaigns to file the lead under (AGL-3254), by container id. */\n  campaignIds?: string[]\n  /**\n   * The org's custom LEAD fields (AGL-3272), keyed by each definition's\n   * `key`. Judged against the definitions whose `object` is `lead`, so a\n   * contact field of the same name cannot be written through this door.\n   */\n  custom?: Record<string, CrmCustomValue>\n}\n\n/** The sentence a campaign that is not the org's live one is refused with, under the field. */\nexport const LEAD_CAMPAIGN_REFUSAL =\n  \"One of the campaigns picked doesn't exist any more. Pick it again.\"\n\n/**\n * The campaigns a request may file a lead under: the organization's own\n * live containers of the `campaign` kind, and nothing else. A\n * request can claim any id, and a lead filed under another org's campaign\n * — or one the console soft-deleted — would sit on a page nobody in this\n * org can open. A lead is an org record, so any live campaign of the org\n * qualifies, whichever sites it is placed on. Answered with the names as\n * they stand, for the timeline entries the filing writes (AGL-3274).\n *\n * @returns the clean ids with their names, or `null` when one is not the org's.\n */\nexport async function orgCampaigns(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  raw: unknown,\n): Promise<CampaignFilingRef[] | null> {\n  const ids = normalizeContainerIds(raw)\n  if (!ids.length) return []\n  if (!orgId || ids.some((id) => id.includes('/'))) return null\n  const found = await readOrgContainers(firestore, 'campaign', orgId, ids)\n  return found.every((container) => container.live)\n    ? found.map((container) => ({ id: container.id, name: container.name || container.id }))\n    : null\n}\n\n/** The ids alone — see {@link orgCampaigns}. */\nexport async function orgCampaignIds(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  raw: unknown,\n): Promise<string[] | null> {\n  const campaigns = await orgCampaigns(firestore, orgId, raw)\n  return campaigns ? campaigns.map((campaign) => campaign.id) : null\n}\n\n/** What the route answers on success. */\nexport interface LeadCreateResponse {\n  leadId: string\n  /** False when the site already held a lead for the address — it was updated. */\n  created: boolean\n}\n\n/** The lead's own fields as one write, `null` in the patch meaning a clear. */\nexport function leadProfileWrite(patch: CrmLeadProfilePatch): Record<string, unknown> {\n  const write: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(patch)) {\n    if (value === undefined) continue\n    write[key] = value === null ? FieldValue.delete() : value\n  }\n  return write\n}\n\nexport const leadCreateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) {\n    res.status(401).json({ error: 'Unauthenticated' })\n    return\n  }\n  const body: Partial<LeadCreateRequest> & Record<string, unknown> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n    .trim()\n    .slice(0, 128)\n  if (!hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const email = normalizeContactEmail(body.email)\n  if (!email) {\n    res.status(400).json({ error: 'Enter a valid email address.' })\n    return\n  }\n  /*\n   * The profile, refused BEFORE any read: a phone or a website the record\n   * cannot hold is answered under its field, the sentence the drawer shows\n   * beneath the input, and nothing was written to retry against.\n   */\n  const { patch, errors } = normalizeCrmLeadProfile(body)\n  const [firstError] = Object.entries(errors)\n  if (firstError) {\n    res.status(400).json({ error: firstError[1], field: firstError[0] })\n    return\n  }\n  const rawStatus = String(body.status ?? '').trim()\n  if (rawStatus && !CREATE_STATUSES.includes(rawStatus as CrmLeadStatus)) {\n    res.status(400).json({ error: 'A new lead is New or Working.' })\n    return\n  }\n  const name = String(body.name ?? '')\n    .trim()\n    .replace(/\\s+/g, ' ')\n    .slice(0, NAME_MAX)\n  const ownerUid = String(body.ownerUid ?? '')\n    .trim()\n    .slice(0, 128)\n  const notes = String(body.notes ?? '')\n    .trim()\n    .slice(0, NOTES_MAX)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const staff = decoded['staff'] === true\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (\n      !staff &&\n      !(membership.hostRole && (await holdsDataManage(membership.orgId, decoded.uid)))\n    ) {\n      res\n        .status(403)\n        .json({ error: 'Adding a lead requires the data permission on this site' })\n      return\n    }\n    const resolved = await getOrgForHost(hostId)\n    if (!resolved) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const suite = crmSuiteRefusal(resolved.org, 'Adding a lead by hand')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const leadsRef = await orgLeadsForHost(hostId)\n    /*\n     * The org's own lead fields (AGL-3272), judged before any write and\n     * only when the body carried a map — a body without `custom` pays for\n     * no definition read. The refusal is the definition reader's own\n     * sentence, so a client learns which key it spelled wrong rather than\n     * that the lead could not be saved.\n     */\n    let custom: Record<string, CrmCustomValue> | undefined\n    if (body.custom !== undefined) {\n      const definitions = await firestore\n        .collection('orgs')\n        .doc(resolved.orgId)\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        body.custom,\n        definitions.docs.map((entry) => entry.data() as ContactFieldDefinition),\n        'lead',\n      )\n      if ('errors' in judged) {\n        const [field, message] = Object.entries(judged.errors)[0] ?? []\n        res.status(400).json({\n          error: message ?? 'A custom value could not be saved.',\n          ...(field ? { field } : {}),\n        })\n        return\n      }\n      custom = judged.values\n    }\n    // The campaigns, judged before any write, so a refused pick leaves\n    // nothing to retry against (AGL-3254).\n    const campaigns = await orgCampaigns(firestore, resolved.orgId, body.campaignIds)\n    if (campaigns === null) {\n      res.status(400).json({ error: LEAD_CAMPAIGN_REFUSAL, field: 'campaignIds' })\n      return\n    }\n    const campaignIds = campaigns.map((campaign) => campaign.id)\n    // Non-null by construction: the normalizer refused every address this\n    // derivation could not key.\n    const leadId = personKey(email) as string\n    const before = await readLeadForHost(hostId, leadId)\n    const created = !before\n    /*\n     * THE ORG'S LEAD SOURCES (AGL-3298), judged before any write: a value\n     * outside the list is refused under the field naming what the list\n     * allows, a lead the site already held keeps the value it has, and a\n     * new lead that named none starts from the list's default.\n     */\n    const leadSource = resolveLeadSourceWrite(\n      await readLeadSourcePicklist(firestore, resolved.orgId),\n      patch.leadSource,\n      { current: before?.get('leadSource'), created },\n    )\n    if (leadSource.ok === false) {\n      res.status(400).json({ error: leadSource.error, field: 'leadSource' })\n      return\n    }\n    if (leadSource.write === undefined) delete patch.leadSource\n    else patch.leadSource = leadSource.write\n    /*\n     * The platform ceiling, judged here so the drawer can say WHY rather\n     * than only that the lead could not be saved; the door re-judges it\n     * inside its own transaction, so a race is still refused there.\n     */\n    if (created) {\n      // What THIS site may see, not the whole org's collection (AGL-3275) —\n      // the same narrowing `addHostLead` re-applies inside its transaction.\n      const used = (await scopedToHost(leadsRef, hostId).count().get()).data().count\n      if (checkVisitorRecordCeiling(used, LEADS_MAX_PER_HOST).exceeded) {\n        res.status(409).json({\n          error:\n            'This site is at the platform lead limit, so the lead was not ' +\n            'added. Remove some leads, or contact support if this is real ' +\n            'traffic.',\n          reason: 'lead-ceiling',\n        })\n        return\n      }\n    }\n    const stored = await addHostLead({\n      hostRef,\n      hostId,\n      lead: {\n        email,\n        ...(name ? { name } : {}),\n        source: LEAD_MANUAL_SOURCE,\n      },\n    })\n    if (!stored) {\n      res.status(500).json({ error: 'The lead could not be saved.' })\n      return\n    }\n    const working: Record<string, unknown> = {\n      ...leadProfileWrite(patch),\n      ...(rawStatus ? { status: rawStatus } : {}),\n      ...(ownerUid ? { ownerUid } : {}),\n      ...(notes ? { notes } : {}),\n      // Added to what a lead the site already held carries, never in place\n      // of it: a second \"new lead\" for an address files it under one more\n      // campaign, as the bulk bar would.\n      ...(campaignIds.length ? { campaignIds: FieldValue.arrayUnion(...campaignIds) } : {}),\n      /*\n       * The map as a map, because the write below is a `set` with `merge`\n       * and a merge is a DEEP one: the keys this body named land, and a\n       * second \"new lead\" for an address the site already holds leaves\n       * every other key's value where it was. A dotted path would not do\n       * it — only `update` reads dots as paths, and `set` would file a\n       * field literally called `custom.tier`.\n       */\n      ...(custom && Object.keys(custom).length ? { custom } : {}),\n    }\n    if (Object.keys(working).length) {\n      await leadsRef\n        .doc(leadId)\n        .set({ ...working, updatedAt: FieldValue.serverTimestamp() }, { merge: true })\n      // The profile, tags and lead source are what the Leads list searches\n      // and filters by (AGL-3321): restamped from the merged lead.\n      await restampCrmListFieldsAt(leadsRef.doc(leadId), 'leads')\n    }\n    /*\n     * The filing on the lead's Activity (AGL-3274): one \"Filed under\" per\n     * campaign the lead was not already in, by the member who added it.\n     * After the write and never before, and never failing it — the\n     * membership is on the document; the entry records the act.\n     */\n    const already = readContainerIds(before ? (before.data() as Record<string, unknown>) : null, 'campaign')\n    await fileCampaignFilingActivities(firestore, {\n      orgId: resolved.orgId,\n      org: resolved.org as Record<string, unknown>,\n      hostId,\n      link: { leadId },\n      action: 'filed',\n      campaigns: campaigns.filter((campaign) => !already.includes(campaign.id)),\n      atMs: Date.now(),\n      byUid: decoded.uid,\n      byName: String(decoded['name'] ?? decoded.email ?? '').trim() || null,\n    })\n    /*\n     * The audit line, written by the route that verified the caller and\n     * performed the write — the one writer that cannot record an add that\n     * did not happen. An update of a lead the site already held says so.\n     */\n    await logHostActivity(\n      hostId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      created ? 'Added lead' : 'Updated lead',\n      { type: 'lead', id: leadId, name: name || email },\n    )\n    const answer: LeadCreateResponse = { leadId, created }\n    res.status(created ? 201 : 200).json(answer)\n  } catch (error) {\n    console.error('leads-create failed', error)\n    res.status(500).json({ error: 'The lead could not be saved.' })\n  }\n}\n\nexport default leadCreateHandler\n"],"names":["checkVisitorRecordCeiling","CONTACT_FIELDS_MAX_PER_ORG","CRM_COLLECTIONS","LEADS_MAX_PER_HOST","normalizeContactEmail","normalizeCrmLeadProfile","personKey","readCrmCustomInput","addHostLead","firebaseAdmin","getOrgForHost","logHostActivity","orgLeadsForHost","restampCrmListFieldsAt","readLeadForHost","scopedToHost","resolveOrgPermissions","normalizeContainerIds","readContainerIds","readOrgContainers","FieldValue","fileCampaignFilingActivities","readLeadSourcePicklist","resolveLeadSourceWrite","holdsDataManage","crmSuiteRefusal","CREATE_STATUSES","NAME_MAX","NOTES_MAX","LEAD_MANUAL_SOURCE","LEAD_CAMPAIGN_REFUSAL","orgCampaigns","firestore","orgId","raw","ids","length","some","id","includes","found","every","container","live","map","name","orgCampaignIds","campaigns","campaign","leadProfileWrite","patch","write","key","value","Object","entries","undefined","delete","leadCreateHandler","req","res","body","method","setHeader","status","json","error","authorization","String","headers","idToken","startsWith","slice","JSON","parse","hostId","trim","email","errors","firstError","field","rawStatus","replace","ownerUid","notes","decoded","app","auth","verifyIdToken","staff","membership","uid","hostRole","resolved","suite","org","hostRef","collection","doc","leadsRef","custom","definitions","contactFields","limit","get","judged","docs","entry","data","message","values","campaignIds","leadId","before","created","leadSource","current","ok","used","count","exceeded","reason","stored","lead","source","working","arrayUnion","keys","set","updatedAt","serverTimestamp","merge","already","link","action","filter","atMs","Date","now","byUid","byName","type","answer","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GAED,SACEA,yBAAyB,EACzBC,0BAA0B,EAE1BC,eAAe,EAIfC,kBAAkB,EAClBC,qBAAqB,EACrBC,uBAAuB,EACvBC,SAAS,EAETC,kBAAkB,QACb,sBAAqB;AAC5B,SACEC,WAAW,EACXC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,eAAe,EACfC,sBAAsB,EACtBC,eAAe,EACfC,YAAY,QACP,2BAA0B;AACjC,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SAASC,qBAAqB,EAAEC,gBAAgB,QAAQ,8CAA6C;AACrG,SAASC,iBAAiB,QAAQ,iDAAgD;AAClF,SAASC,UAAU,QAAQ,2BAA0B;AAErD,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AACvF,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,eAAe,QAAQ,kBAAc;AAE9C,gFAAgF,GAChF,MAAMC,kBAA4C;IAAC;IAAO;CAAU;AAEpE,MAAMC,WAAW;AACjB,MAAMC,YAAY;AAElB,iGAAiG,GACjG,OAAO,MAAMC,qBAAqB,SAAQ;AA2B1C,6FAA6F,GAC7F,OAAO,MAAMC,wBACX,qEAAoE;AAEtE;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,aACpBC,SAAsC,EACtCC,KAAa,EACbC,GAAY;IAEZ,MAAMC,MAAMlB,sBAAsBiB;IAClC,IAAI,CAACC,IAAIC,MAAM,EAAE,OAAO,EAAE;IAC1B,IAAI,CAACH,SAASE,IAAIE,IAAI,CAAC,CAACC,KAAOA,GAAGC,QAAQ,CAAC,OAAO,OAAO;IACzD,MAAMC,QAAQ,MAAMrB,kBAAkBa,WAAW,YAAYC,OAAOE;IACpE,OAAOK,MAAMC,KAAK,CAAC,CAACC,YAAcA,UAAUC,IAAI,IAC5CH,MAAMI,GAAG,CAAC,CAACF,YAAe,CAAA;YAAEJ,IAAII,UAAUJ,EAAE;YAAEO,MAAMH,UAAUG,IAAI,IAAIH,UAAUJ,EAAE;QAAC,CAAA,KACnF;AACN;AAEA,8CAA8C,GAC9C,OAAO,eAAeQ,eACpBd,SAAsC,EACtCC,KAAa,EACbC,GAAY;IAEZ,MAAMa,YAAY,MAAMhB,aAAaC,WAAWC,OAAOC;IACvD,OAAOa,YAAYA,UAAUH,GAAG,CAAC,CAACI,WAAaA,SAASV,EAAE,IAAI;AAChE;AASA,6EAA6E,GAC7E,OAAO,SAASW,iBAAiBC,KAA0B;IACzD,MAAMC,QAAiC,CAAC;IACxC,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACL,OAAQ;QAChD,IAAIG,UAAUG,WAAW;QACzBL,KAAK,CAACC,IAAI,GAAGC,UAAU,OAAOjC,WAAWqC,MAAM,KAAKJ;IACtD;IACA,OAAOF;AACT;AAEA,OAAO,MAAMO,oBAAsC,OAAOC,KAAKC;QAMhCD,4BAS4BA,WACnCE,cAuBGA,cAKLA,YAIIA,gBAGHA;IAlDrB,IAAIF,IAAIG,MAAM,KAAK,QAAQ;QACzBF,IAAIG,SAAS,CAAC,SAAS;QACvBH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMC,gBAAgBC,QAAOT,6BAAAA,IAAIU,OAAO,CAACF,aAAa,YAAzBR,6BAA6B;IAC1D,MAAMW,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUpC,MAAM,IACpCoB;IACJ,IAAI,CAACc,SAAS;QACZV,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QAChD;IACF;IACA,MAAML,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWY,KAAKC,KAAK,CAACf,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMgB,SAASP,QAAOP,eAAAA,KAAKc,MAAM,YAAXd,eAAe,IAClCe,IAAI,GACJJ,KAAK,CAAC,GAAG;IACZ,IAAI,CAACG,QAAQ;QACXf,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAMW,QAAQzE,sBAAsByD,KAAKgB,KAAK;IAC9C,IAAI,CAACA,OAAO;QACVjB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;QAC7D;IACF;IACA;;;;GAIC,GACD,MAAM,EAAEhB,KAAK,EAAE4B,MAAM,EAAE,GAAGzE,wBAAwBwD;IAClD,MAAM,CAACkB,WAAW,GAAGzB,OAAOC,OAAO,CAACuB;IACpC,IAAIC,YAAY;QACdnB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOa,UAAU,CAAC,EAAE;YAAEC,OAAOD,UAAU,CAAC,EAAE;QAAC;QAClE;IACF;IACA,MAAME,YAAYb,QAAOP,eAAAA,KAAKG,MAAM,YAAXH,eAAe,IAAIe,IAAI;IAChD,IAAIK,aAAa,CAACvD,gBAAgBa,QAAQ,CAAC0C,YAA6B;QACtErB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAgC;QAC9D;IACF;IACA,MAAMrB,OAAOuB,QAAOP,aAAAA,KAAKhB,IAAI,YAATgB,aAAa,IAC9Be,IAAI,GACJM,OAAO,CAAC,QAAQ,KAChBV,KAAK,CAAC,GAAG7C;IACZ,MAAMwD,WAAWf,QAAOP,iBAAAA,KAAKsB,QAAQ,YAAbtB,iBAAiB,IACtCe,IAAI,GACJJ,KAAK,CAAC,GAAG;IACZ,MAAMY,QAAQhB,QAAOP,cAAAA,KAAKuB,KAAK,YAAVvB,cAAc,IAChCe,IAAI,GACJJ,KAAK,CAAC,GAAG5C;IAEZ,IAAI;YAmKeyD,MAAAA,eASYA;QA3K7B,MAAMA,UAAU,MAAM5E,cAAc6E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAAClB;QAC/D,MAAMmB,QAAQJ,OAAO,CAAC,QAAQ,KAAK;QACnC,MAAMK,aAAa,MAAM1E,sBAAsBqE,QAAQM,GAAG,EAAE;YAAEhB;QAAO;QACrE,IACE,CAACc,SACD,CAAEC,CAAAA,WAAWE,QAAQ,IAAK,MAAMpE,gBAAgBkE,WAAWzD,KAAK,EAAEoD,QAAQM,GAAG,CAAC,GAC9E;YACA/B,IACGI,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAA0D;YAC3E;QACF;QACA,MAAM2B,WAAW,MAAMnF,cAAciE;QACrC,IAAI,CAACkB,UAAU;YACbjC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAM4B,QAAQrE,gBAAgBoE,SAASE,GAAG,EAAE;QAC5C,IAAID,OAAO;YACTlC,IAAII,MAAM,CAAC8B,MAAM9B,MAAM,EAAEC,IAAI,CAAC6B,MAAMjC,IAAI;YACxC;QACF;QAEA,MAAM7B,YAAYvB,cAAc6E,GAAG,GAAGtD,SAAS;QAC/C,MAAMgE,UAAUhE,UAAUiE,UAAU,CAAC,SAASC,GAAG,CAACvB;QAClD,MAAMwB,WAAW,MAAMvF,gBAAgB+D;QACvC;;;;;;KAMC,GACD,IAAIyB;QACJ,IAAIvC,KAAKuC,MAAM,KAAK5C,WAAW;YAC7B,MAAM6C,cAAc,MAAMrE,UACvBiE,UAAU,CAAC,QACXC,GAAG,CAACL,SAAS5D,KAAK,EAClBgE,UAAU,CAAC/F,gBAAgBoG,aAAa,EACxCC,KAAK,CAACtG,4BACNuG,GAAG;YACN,MAAMC,SAASlG,mBACbsD,KAAKuC,MAAM,EACXC,YAAYK,IAAI,CAAC9D,GAAG,CAAC,CAAC+D,QAAUA,MAAMC,IAAI,KAC1C;YAEF,IAAI,YAAYH,QAAQ;oBACGnD;gBAAzB,MAAM,CAAC0B,OAAO6B,QAAQ,IAAGvD,mBAAAA,OAAOC,OAAO,CAACkD,OAAO3B,MAAM,CAAC,CAAC,EAAE,YAAhCxB,mBAAoC,EAAE;gBAC/DM,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,KAAK,EAAE2C,kBAAAA,UAAW;mBACd7B,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;gBAE3B;YACF;YACAoB,SAASK,OAAOK,MAAM;QACxB;QACA,mEAAmE;QACnE,uCAAuC;QACvC,MAAM/D,YAAY,MAAMhB,aAAaC,WAAW6D,SAAS5D,KAAK,EAAE4B,KAAKkD,WAAW;QAChF,IAAIhE,cAAc,MAAM;YACtBa,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOpC;gBAAuBkD,OAAO;YAAc;YAC1E;QACF;QACA,MAAM+B,cAAchE,UAAUH,GAAG,CAAC,CAACI,WAAaA,SAASV,EAAE;QAC3D,sEAAsE;QACtE,4BAA4B;QAC5B,MAAM0E,SAAS1G,UAAUuE;QACzB,MAAMoC,SAAS,MAAMnG,gBAAgB6D,QAAQqC;QAC7C,MAAME,UAAU,CAACD;QACjB;;;;;KAKC,GACD,MAAME,aAAa5F,uBACjB,MAAMD,uBAAuBU,WAAW6D,SAAS5D,KAAK,GACtDiB,MAAMiE,UAAU,EAChB;YAAEC,OAAO,EAAEH,0BAAAA,OAAQT,GAAG,CAAC;YAAeU;QAAQ;QAEhD,IAAIC,WAAWE,EAAE,KAAK,OAAO;YAC3BzD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOiD,WAAWjD,KAAK;gBAAEc,OAAO;YAAa;YACpE;QACF;QACA,IAAImC,WAAWhE,KAAK,KAAKK,WAAW,OAAON,MAAMiE,UAAU;aACtDjE,MAAMiE,UAAU,GAAGA,WAAWhE,KAAK;QACxC;;;;KAIC,GACD,IAAI+D,SAAS;YACX,sEAAsE;YACtE,sEAAsE;YACtE,MAAMI,OAAO,AAAC,CAAA,MAAMvG,aAAaoF,UAAUxB,QAAQ4C,KAAK,GAAGf,GAAG,EAAC,EAAGI,IAAI,GAAGW,KAAK;YAC9E,IAAIvH,0BAA0BsH,MAAMnH,oBAAoBqH,QAAQ,EAAE;gBAChE5D,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,OACE,kEACA,kEACA;oBACFuD,QAAQ;gBACV;gBACA;YACF;QACF;QACA,MAAMC,SAAS,MAAMlH,YAAY;YAC/BwF;YACArB;YACAgD,MAAM;gBACJ9C;eACIhC,OAAO;gBAAEA;YAAK,IAAI,CAAC;gBACvB+E,QAAQ/F;;QAEZ;QACA,IAAI,CAAC6F,QAAQ;YACX9D,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+B;YAC7D;QACF;QACA,MAAM2D,UAAmC,aACpC5E,iBAAiBC,QAChB+B,YAAY;YAAEjB,QAAQiB;QAAU,IAAI,CAAC,GACrCE,WAAW;YAAEA;QAAS,IAAI,CAAC,GAC3BC,QAAQ;YAAEA;QAAM,IAAI,CAAC,GAIrB2B,YAAY3E,MAAM,GAAG;YAAE2E,aAAa3F,WAAW0G,UAAU,IAAIf;QAAa,IAAI,CAAC,GAS/EX,UAAU9C,OAAOyE,IAAI,CAAC3B,QAAQhE,MAAM,GAAG;YAAEgE;QAAO,IAAI,CAAC;QAE3D,IAAI9C,OAAOyE,IAAI,CAACF,SAASzF,MAAM,EAAE;YAC/B,MAAM+D,SACHD,GAAG,CAACc,QACJgB,GAAG,CAAC,aAAKH;gBAASI,WAAW7G,WAAW8G,eAAe;gBAAM;gBAAEC,OAAO;YAAK;YAC9E,qEAAqE;YACrE,6DAA6D;YAC7D,MAAMtH,uBAAuBsF,SAASD,GAAG,CAACc,SAAS;QACrD;QACA;;;;;KAKC,GACD,MAAMoB,UAAUlH,iBAAiB+F,SAAUA,OAAOL,IAAI,KAAiC,MAAM;QAC7F,MAAMvF,6BAA6BW,WAAW;YAC5CC,OAAO4D,SAAS5D,KAAK;YACrB8D,KAAKF,SAASE,GAAG;YACjBpB;YACA0D,MAAM;gBAAErB;YAAO;YACfsB,QAAQ;YACRvF,WAAWA,UAAUwF,MAAM,CAAC,CAACvF,WAAa,CAACoF,QAAQ7F,QAAQ,CAACS,SAASV,EAAE;YACvEkG,MAAMC,KAAKC,GAAG;YACdC,OAAOtD,QAAQM,GAAG;YAClBiD,QAAQxE,QAAOiB,QAAAA,gBAAAA,OAAO,CAAC,OAAO,YAAfA,gBAAmBA,QAAQR,KAAK,YAAhCQ,OAAoC,IAAIT,IAAI,MAAM;QACnE;QACA;;;;KAIC,GACD,MAAMjE,gBACJgE,QACA;YAAEgB,KAAKN,QAAQM,GAAG;YAAEd,KAAK,GAAEQ,iBAAAA,QAAQR,KAAK,YAAbQ,iBAAiB;QAAK,GACjD6B,UAAU,eAAe,gBACzB;YAAE2B,MAAM;YAAQvG,IAAI0E;YAAQnE,MAAMA,QAAQgC;QAAM;QAElD,MAAMiE,SAA6B;YAAE9B;YAAQE;QAAQ;QACrDtD,IAAII,MAAM,CAACkD,UAAU,MAAM,KAAKjD,IAAI,CAAC6E;IACvC,EAAE,OAAO5E,OAAO;QACd6E,QAAQ7E,KAAK,CAAC,uBAAuBA;QACrCN,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IAC/D;AACF,EAAC;AAED,eAAeR,kBAAiB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-create.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-create` — a lead typed in by hand (AGL-3231).\n *\n * Salesforce's New Lead: a person the team has heard of and has not yet\n * qualified, entered with what is known about them — the address, the\n * name, the company as text, a title, a phone, a website, an address, tags,\n * where they came from — and nothing else brought into being. No contact,\n * no company record: those are the conversion's to make, once the lead is\n * real. Until then the lead is the whole record, which is what lets the\n * Leads section be worked without a second row for every person in it.\n *\n * ## Through the one door\n *\n * `addHostLead` is the single writer of `hosts/{hostId}/leads` — the\n * capture doors, the import and the REST create all reach it — and it is\n * the writer here. That is what keys the lead on the person, so a second\n * \"new lead\" for one address updates the first rather than filing twice;\n * counts it against the platform ceiling inside the transaction that\n * writes; and records NO marketing basis, because a person typed in by the\n * team is not a person who ticked a box. The profile and the working state\n * are the CRM's own annotations and land in one merge write after the\n * door's, exactly as the import writes them.\n *\n * ## Who may call it\n *\n * The same two gates the convert route asks: `data.manage` in the org, and\n * a role on THIS site — a lead is the site's record, so an org member scoped\n * to a sibling site holds the key but not the host. Then the CRM suite gate,\n * because a lead entered by hand is suite work: the capture doors that fill\n * a Free workspace's leads do not come through here.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  CONTACT_FIELDS_MAX_PER_ORG,\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  type CrmCustomValue,\n  crmLeadComposedName,\n  type CrmLeadProfilePatch,\n  CRM_LEAD_STATUS_PICKLIST,\n  type CrmLeadStatus,\n  LEADS_MAX_PER_HOST,\n  normalizeContactEmail,\n  normalizeCrmLeadProfile,\n  personKey,\n  type PluginApiHandler,\n  readCrmCustomInput,\n  resolveCrmLeadStatusWrite,\n} from '@aglyn/aglyn/server'\nimport {\n  addHostLead,\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  orgLeadsForHost,\n  restampCrmListFieldsAt,\n  readLeadForHost,\n  scopedToHost,\n} from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport { normalizeContainerIds, readContainerIds } from '@aglyn/aglyn/app-utils/container-membership'\nimport { readOrgContainers } from '@aglyn/tenant-data-admin/server/org-containers'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport type { CampaignFilingRef } from '../model/campaign-filing-activity'\nimport { fileCampaignFilingActivities } from './campaign-filing-activity'\nimport { judgeLeadPicklistPatch, readLeadPicklists } from './lead-picklists'\nimport { readLeadSourcePicklist, resolveLeadSourceWrite } from './lead-source-picklist'\nimport { holdsDataManage } from './org-caller'\nimport { readCrmPicklist } from './read-picklist'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/** The statuses a lead may be entered in — everything but the converted state. */\nconst CREATE_STATUSES: readonly CrmLeadStatus[] = ['new', 'working']\n\nconst NAME_MAX = 120\nconst NOTES_MAX = 4000\n\n/** The surface a hand-entered lead names, beside `signup`, `booking`, `form:{id}` and `import`. */\nexport const LEAD_MANUAL_SOURCE = 'manual'\n\n/** What the New lead drawer posts. */\nexport interface LeadCreateRequest {\n  hostId: string\n  email: string\n  name?: string\n  company?: string\n  jobTitle?: string\n  phone?: string\n  website?: string\n  address?: Record<string, unknown> | null\n  tags?: string[]\n  leadSource?: string\n  /**\n   * One of the org's Lead status values by its label, or a meaning — New\n   * or Working either way (AGL-3512).\n   */\n  status?: string\n  ownerUid?: string\n  notes?: string\n  /** The org's campaigns to file the lead under (AGL-3254), by container id. */\n  campaignIds?: string[]\n  /*\n   * Salesforce's standard lead fields (AGL-3513): `salutation`,\n   * `firstName`, `lastName`, `mobilePhone`, `fax`, `doNotCall`, `industry`,\n   * `rating`, `annualRevenueCents`, `currency`, `numberOfEmployees` — read\n   * by `normalizeCrmLeadProfile` with the rest of the profile.\n   */\n  salutation?: string\n  firstName?: string\n  lastName?: string\n  mobilePhone?: string\n  fax?: string\n  doNotCall?: boolean\n  industry?: string\n  rating?: string\n  annualRevenueCents?: number\n  currency?: string\n  numberOfEmployees?: number\n  /**\n   * The org's custom LEAD fields (AGL-3272), keyed by each definition's\n   * `key`. Judged against the definitions whose `object` is `lead`, so a\n   * contact field of the same name cannot be written through this door.\n   */\n  custom?: Record<string, CrmCustomValue>\n}\n\n/** The sentence a campaign that is not the org's live one is refused with, under the field. */\nexport const LEAD_CAMPAIGN_REFUSAL =\n  \"One of the campaigns picked doesn't exist any more. Pick it again.\"\n\n/**\n * The campaigns a request may file a lead under: the organization's own\n * live containers of the `campaign` kind, and nothing else. A\n * request can claim any id, and a lead filed under another org's campaign\n * — or one the console soft-deleted — would sit on a page nobody in this\n * org can open. A lead is an org record, so any live campaign of the org\n * qualifies, whichever sites it is placed on. Answered with the names as\n * they stand, for the timeline entries the filing writes (AGL-3274).\n *\n * @returns the clean ids with their names, or `null` when one is not the org's.\n */\nexport async function orgCampaigns(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  raw: unknown,\n): Promise<CampaignFilingRef[] | null> {\n  const ids = normalizeContainerIds(raw)\n  if (!ids.length) return []\n  if (!orgId || ids.some((id) => id.includes('/'))) return null\n  const found = await readOrgContainers(firestore, 'campaign', orgId, ids)\n  return found.every((container) => container.live)\n    ? found.map((container) => ({ id: container.id, name: container.name || container.id }))\n    : null\n}\n\n/** The ids alone — see {@link orgCampaigns}. */\nexport async function orgCampaignIds(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  raw: unknown,\n): Promise<string[] | null> {\n  const campaigns = await orgCampaigns(firestore, orgId, raw)\n  return campaigns ? campaigns.map((campaign) => campaign.id) : null\n}\n\n/** What the route answers on success. */\nexport interface LeadCreateResponse {\n  leadId: string\n  /** False when the site already held a lead for the address — it was updated. */\n  created: boolean\n}\n\n/** The lead's own fields as one write, `null` in the patch meaning a clear. */\nexport function leadProfileWrite(patch: CrmLeadProfilePatch): Record<string, unknown> {\n  const write: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(patch)) {\n    if (value === undefined) continue\n    write[key] = value === null ? FieldValue.delete() : value\n  }\n  return write\n}\n\nexport const leadCreateHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) {\n    res.status(401).json({ error: 'Unauthenticated' })\n    return\n  }\n  const body: Partial<LeadCreateRequest> & Record<string, unknown> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const hostId = String(body.hostId ?? '')\n    .trim()\n    .slice(0, 128)\n  if (!hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const email = normalizeContactEmail(body.email)\n  if (!email) {\n    res.status(400).json({ error: 'Enter a valid email address.' })\n    return\n  }\n  /*\n   * The profile, refused BEFORE any read: a phone or a website the record\n   * cannot hold is answered under its field, the sentence the drawer shows\n   * beneath the input, and nothing was written to retry against.\n   */\n  const { patch, errors } = normalizeCrmLeadProfile(body)\n  const [firstError] = Object.entries(errors)\n  if (firstError) {\n    res.status(400).json({ error: firstError[1], field: firstError[0] })\n    return\n  }\n  const rawStatus = String(body.status ?? '').trim()\n  const name = String(body.name ?? '')\n    .trim()\n    .replace(/\\s+/g, ' ')\n    .slice(0, NAME_MAX)\n  const ownerUid = String(body.ownerUid ?? '')\n    .trim()\n    .slice(0, 128)\n  const notes = String(body.notes ?? '')\n    .trim()\n    .slice(0, NOTES_MAX)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const staff = decoded['staff'] === true\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (\n      !staff &&\n      !(membership.hostRole && (await holdsDataManage(membership.orgId, decoded.uid)))\n    ) {\n      res\n        .status(403)\n        .json({ error: 'Adding a lead requires the data permission on this site' })\n      return\n    }\n    const resolved = await getOrgForHost(hostId)\n    if (!resolved) {\n      res.status(404).json({ error: 'Unknown site' })\n      return\n    }\n    const suite = crmSuiteRefusal(resolved.org, 'Adding a lead by hand')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const leadsRef = await orgLeadsForHost(hostId)\n    /*\n     * The org's own lead fields (AGL-3272), judged before any write and\n     * only when the body carried a map — a body without `custom` pays for\n     * no definition read. The refusal is the definition reader's own\n     * sentence, so a client learns which key it spelled wrong rather than\n     * that the lead could not be saved.\n     */\n    let custom: Record<string, CrmCustomValue> | undefined\n    if (body.custom !== undefined) {\n      const definitions = await firestore\n        .collection('orgs')\n        .doc(resolved.orgId)\n        .collection(CRM_COLLECTIONS.contactFields)\n        .limit(CONTACT_FIELDS_MAX_PER_ORG)\n        .get()\n      const judged = readCrmCustomInput(\n        body.custom,\n        definitions.docs.map((entry) => entry.data() as ContactFieldDefinition),\n        'lead',\n      )\n      if ('errors' in judged) {\n        const [field, message] = Object.entries(judged.errors)[0] ?? []\n        res.status(400).json({\n          error: message ?? 'A custom value could not be saved.',\n          ...(field ? { field } : {}),\n        })\n        return\n      }\n      custom = judged.values\n    }\n    // The campaigns, judged before any write, so a refused pick leaves\n    // nothing to retry against (AGL-3254).\n    const campaigns = await orgCampaigns(firestore, resolved.orgId, body.campaignIds)\n    if (campaigns === null) {\n      res.status(400).json({ error: LEAD_CAMPAIGN_REFUSAL, field: 'campaignIds' })\n      return\n    }\n    const campaignIds = campaigns.map((campaign) => campaign.id)\n    // Non-null by construction: the normalizer refused every address this\n    // derivation could not key.\n    const leadId = personKey(email) as string\n    const before = await readLeadForHost(hostId, leadId)\n    const created = !before\n    /*\n     * THE ORG'S LEAD SOURCES (AGL-3298), judged before any write: a value\n     * outside the list is refused under the field naming what the list\n     * allows, a lead the site already held keeps the value it has, and a\n     * new lead that named none starts from the list's default.\n     */\n    const leadSource = resolveLeadSourceWrite(\n      await readLeadSourcePicklist(firestore, resolved.orgId),\n      patch.leadSource,\n      { current: before?.get('leadSource'), created },\n    )\n    if (leadSource.ok === false) {\n      res.status(400).json({ error: leadSource.error, field: 'leadSource' })\n      return\n    }\n    if (leadSource.write === undefined) delete patch.leadSource\n    else patch.leadSource = leadSource.write\n    /*\n     * SALUTATION, INDUSTRY AND RATING (AGL-3513), the contact's and the\n     * company's own lists, judged the same way: a value outside the list\n     * is refused under its field, the lead's current value is kept, and a\n     * new lead starts from each list's default.\n     */\n    const picklistRefusals = judgeLeadPicklistPatch(\n      await readLeadPicklists(firestore, resolved.orgId),\n      patch,\n      { current: before?.data() ?? null, created },\n    )\n    const [picklistRefusal] = Object.entries(picklistRefusals)\n    if (picklistRefusal) {\n      res.status(400).json({ error: picklistRefusal[1], field: picklistRefusal[0] })\n      return\n    }\n    // While a first or last name is set, the name is theirs (AGL-3513).\n    const composedName = crmLeadComposedName(before?.data() ?? null, patch)\n    /*\n     * THE ORG'S LEAD STATUSES (AGL-3512): a label or a meaning, of New or\n     * Working only, stored as the meaning and the org's label together.\n     */\n    const status = rawStatus\n      ? resolveCrmLeadStatusWrite(\n          await readCrmPicklist(firestore, resolved.orgId, CRM_LEAD_STATUS_PICKLIST),\n          rawStatus,\n          { allowed: CREATE_STATUSES, current: before?.data() ?? null },\n        )\n      : null\n    if (status?.ok === false) {\n      res.status(400).json({ error: `A new lead is New or Working. ${status.error}`, field: 'status' })\n      return\n    }\n    /*\n     * The platform ceiling, judged here so the drawer can say WHY rather\n     * than only that the lead could not be saved; the door re-judges it\n     * inside its own transaction, so a race is still refused there.\n     */\n    if (created) {\n      // What THIS site may see, not the whole org's collection (AGL-3275) —\n      // the same narrowing `addHostLead` re-applies inside its transaction.\n      const used = (await scopedToHost(leadsRef, hostId).count().get()).data().count\n      if (checkVisitorRecordCeiling(used, LEADS_MAX_PER_HOST).exceeded) {\n        res.status(409).json({\n          error:\n            'This site is at the platform lead limit, so the lead was not ' +\n            'added. Remove some leads, or contact support if this is real ' +\n            'traffic.',\n          reason: 'lead-ceiling',\n        })\n        return\n      }\n    }\n    const stored = await addHostLead({\n      hostRef,\n      hostId,\n      lead: {\n        email,\n        ...(composedName || name ? { name: composedName || name } : {}),\n        source: LEAD_MANUAL_SOURCE,\n      },\n    })\n    if (!stored) {\n      res.status(500).json({ error: 'The lead could not be saved.' })\n      return\n    }\n    const working: Record<string, unknown> = {\n      ...leadProfileWrite(patch),\n      ...(composedName ? { name: composedName } : {}),\n      ...(status?.ok ? { status: status.status, statusLabel: status.statusLabel } : {}),\n      ...(ownerUid ? { ownerUid } : {}),\n      ...(notes ? { notes } : {}),\n      // Added to what a lead the site already held carries, never in place\n      // of it: a second \"new lead\" for an address files it under one more\n      // campaign, as the bulk bar would.\n      ...(campaignIds.length ? { campaignIds: FieldValue.arrayUnion(...campaignIds) } : {}),\n      /*\n       * The map as a map, because the write below is a `set` with `merge`\n       * and a merge is a DEEP one: the keys this body named land, and a\n       * second \"new lead\" for an address the site already holds leaves\n       * every other key's value where it was. A dotted path would not do\n       * it — only `update` reads dots as paths, and `set` would file a\n       * field literally called `custom.tier`.\n       */\n      ...(custom && Object.keys(custom).length ? { custom } : {}),\n    }\n    if (Object.keys(working).length) {\n      await leadsRef\n        .doc(leadId)\n        .set({ ...working, updatedAt: FieldValue.serverTimestamp() }, { merge: true })\n      // The profile, tags and lead source are what the Leads list searches\n      // and filters by (AGL-3321): restamped from the merged lead.\n      await restampCrmListFieldsAt(leadsRef.doc(leadId), 'leads')\n    }\n    /*\n     * The filing on the lead's Activity (AGL-3274): one \"Filed under\" per\n     * campaign the lead was not already in, by the member who added it.\n     * After the write and never before, and never failing it — the\n     * membership is on the document; the entry records the act.\n     */\n    const already = readContainerIds(before ? (before.data() as Record<string, unknown>) : null, 'campaign')\n    await fileCampaignFilingActivities(firestore, {\n      orgId: resolved.orgId,\n      org: resolved.org as Record<string, unknown>,\n      hostId,\n      link: { leadId },\n      action: 'filed',\n      campaigns: campaigns.filter((campaign) => !already.includes(campaign.id)),\n      atMs: Date.now(),\n      byUid: decoded.uid,\n      byName: String(decoded['name'] ?? decoded.email ?? '').trim() || null,\n    })\n    /*\n     * The audit line, written by the route that verified the caller and\n     * performed the write — the one writer that cannot record an add that\n     * did not happen. An update of a lead the site already held says so.\n     */\n    await logHostActivity(\n      hostId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      created ? 'Added lead' : 'Updated lead',\n      { type: 'lead', id: leadId, name: composedName || name || email },\n    )\n    const answer: LeadCreateResponse = { leadId, created }\n    res.status(created ? 201 : 200).json(answer)\n  } catch (error) {\n    console.error('leads-create failed', error)\n    res.status(500).json({ error: 'The lead could not be saved.' })\n  }\n}\n\nexport default leadCreateHandler\n"],"names":["checkVisitorRecordCeiling","CONTACT_FIELDS_MAX_PER_ORG","CRM_COLLECTIONS","crmLeadComposedName","CRM_LEAD_STATUS_PICKLIST","LEADS_MAX_PER_HOST","normalizeContactEmail","normalizeCrmLeadProfile","personKey","readCrmCustomInput","resolveCrmLeadStatusWrite","addHostLead","firebaseAdmin","getOrgForHost","logHostActivity","orgLeadsForHost","restampCrmListFieldsAt","readLeadForHost","scopedToHost","resolveOrgPermissions","normalizeContainerIds","readContainerIds","readOrgContainers","FieldValue","fileCampaignFilingActivities","judgeLeadPicklistPatch","readLeadPicklists","readLeadSourcePicklist","resolveLeadSourceWrite","holdsDataManage","readCrmPicklist","crmSuiteRefusal","CREATE_STATUSES","NAME_MAX","NOTES_MAX","LEAD_MANUAL_SOURCE","LEAD_CAMPAIGN_REFUSAL","orgCampaigns","firestore","orgId","raw","ids","length","some","id","includes","found","every","container","live","map","name","orgCampaignIds","campaigns","campaign","leadProfileWrite","patch","write","key","value","Object","entries","undefined","delete","leadCreateHandler","req","res","body","method","setHeader","status","json","error","authorization","String","headers","idToken","startsWith","slice","JSON","parse","hostId","trim","email","errors","firstError","field","rawStatus","replace","ownerUid","notes","decoded","app","auth","verifyIdToken","staff","membership","uid","hostRole","resolved","suite","org","hostRef","collection","doc","leadsRef","custom","definitions","contactFields","limit","get","judged","docs","entry","data","message","values","campaignIds","leadId","before","created","leadSource","current","ok","picklistRefusals","picklistRefusal","composedName","allowed","used","count","exceeded","reason","stored","lead","source","working","statusLabel","arrayUnion","keys","set","updatedAt","serverTimestamp","merge","already","link","action","filter","atMs","Date","now","byUid","byName","type","answer","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GAED,SACEA,yBAAyB,EACzBC,0BAA0B,EAE1BC,eAAe,EAEfC,mBAAmB,EAEnBC,wBAAwB,EAExBC,kBAAkB,EAClBC,qBAAqB,EACrBC,uBAAuB,EACvBC,SAAS,EAETC,kBAAkB,EAClBC,yBAAyB,QACpB,sBAAqB;AAC5B,SACEC,WAAW,EACXC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,eAAe,EACfC,sBAAsB,EACtBC,eAAe,EACfC,YAAY,QACP,2BAA0B;AACjC,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SAASC,qBAAqB,EAAEC,gBAAgB,QAAQ,8CAA6C;AACrG,SAASC,iBAAiB,QAAQ,iDAAgD;AAClF,SAASC,UAAU,QAAQ,2BAA0B;AAErD,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,sBAAsB,EAAEC,iBAAiB,QAAQ,sBAAkB;AAC5E,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AACvF,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,eAAe,QAAQ,qBAAiB;AACjD,SAASC,eAAe,QAAQ,kBAAc;AAE9C,gFAAgF,GAChF,MAAMC,kBAA4C;IAAC;IAAO;CAAU;AAEpE,MAAMC,WAAW;AACjB,MAAMC,YAAY;AAElB,iGAAiG,GACjG,OAAO,MAAMC,qBAAqB,SAAQ;AAgD1C,6FAA6F,GAC7F,OAAO,MAAMC,wBACX,qEAAoE;AAEtE;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,aACpBC,SAAsC,EACtCC,KAAa,EACbC,GAAY;IAEZ,MAAMC,MAAMrB,sBAAsBoB;IAClC,IAAI,CAACC,IAAIC,MAAM,EAAE,OAAO,EAAE;IAC1B,IAAI,CAACH,SAASE,IAAIE,IAAI,CAAC,CAACC,KAAOA,GAAGC,QAAQ,CAAC,OAAO,OAAO;IACzD,MAAMC,QAAQ,MAAMxB,kBAAkBgB,WAAW,YAAYC,OAAOE;IACpE,OAAOK,MAAMC,KAAK,CAAC,CAACC,YAAcA,UAAUC,IAAI,IAC5CH,MAAMI,GAAG,CAAC,CAACF,YAAe,CAAA;YAAEJ,IAAII,UAAUJ,EAAE;YAAEO,MAAMH,UAAUG,IAAI,IAAIH,UAAUJ,EAAE;QAAC,CAAA,KACnF;AACN;AAEA,8CAA8C,GAC9C,OAAO,eAAeQ,eACpBd,SAAsC,EACtCC,KAAa,EACbC,GAAY;IAEZ,MAAMa,YAAY,MAAMhB,aAAaC,WAAWC,OAAOC;IACvD,OAAOa,YAAYA,UAAUH,GAAG,CAAC,CAACI,WAAaA,SAASV,EAAE,IAAI;AAChE;AASA,6EAA6E,GAC7E,OAAO,SAASW,iBAAiBC,KAA0B;IACzD,MAAMC,QAAiC,CAAC;IACxC,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACL,OAAQ;QAChD,IAAIG,UAAUG,WAAW;QACzBL,KAAK,CAACC,IAAI,GAAGC,UAAU,OAAOpC,WAAWwC,MAAM,KAAKJ;IACtD;IACA,OAAOF;AACT;AAEA,OAAO,MAAMO,oBAAsC,OAAOC,KAAKC;QAMhCD,4BAS4BA,WACnCE,cAuBGA,cACLA,YAIIA,gBAGHA;IA9CrB,IAAIF,IAAIG,MAAM,KAAK,QAAQ;QACzBF,IAAIG,SAAS,CAAC,SAAS;QACvBH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMC,gBAAgBC,QAAOT,6BAAAA,IAAIU,OAAO,CAACF,aAAa,YAAzBR,6BAA6B;IAC1D,MAAMW,UAAUH,cAAcI,UAAU,CAAC,aACrCJ,cAAcK,KAAK,CAAC,UAAUpC,MAAM,IACpCoB;IACJ,IAAI,CAACc,SAAS;QACZV,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkB;QAChD;IACF;IACA,MAAML,OACJ,OAAOF,IAAIE,IAAI,KAAK,WAAWY,KAAKC,KAAK,CAACf,IAAIE,IAAI,KAAKF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IACtE,MAAMgB,SAASP,QAAOP,eAAAA,KAAKc,MAAM,YAAXd,eAAe,IAClCe,IAAI,GACJJ,KAAK,CAAC,GAAG;IACZ,IAAI,CAACG,QAAQ;QACXf,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAMW,QAAQ7E,sBAAsB6D,KAAKgB,KAAK;IAC9C,IAAI,CAACA,OAAO;QACVjB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;QAC7D;IACF;IACA;;;;GAIC,GACD,MAAM,EAAEhB,KAAK,EAAE4B,MAAM,EAAE,GAAG7E,wBAAwB4D;IAClD,MAAM,CAACkB,WAAW,GAAGzB,OAAOC,OAAO,CAACuB;IACpC,IAAIC,YAAY;QACdnB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOa,UAAU,CAAC,EAAE;YAAEC,OAAOD,UAAU,CAAC,EAAE;QAAC;QAClE;IACF;IACA,MAAME,YAAYb,QAAOP,eAAAA,KAAKG,MAAM,YAAXH,eAAe,IAAIe,IAAI;IAChD,MAAM/B,OAAOuB,QAAOP,aAAAA,KAAKhB,IAAI,YAATgB,aAAa,IAC9Be,IAAI,GACJM,OAAO,CAAC,QAAQ,KAChBV,KAAK,CAAC,GAAG7C;IACZ,MAAMwD,WAAWf,QAAOP,iBAAAA,KAAKsB,QAAQ,YAAbtB,iBAAiB,IACtCe,IAAI,GACJJ,KAAK,CAAC,GAAG;IACZ,MAAMY,QAAQhB,QAAOP,cAAAA,KAAKuB,KAAK,YAAVvB,cAAc,IAChCe,IAAI,GACJJ,KAAK,CAAC,GAAG5C;IAEZ,IAAI;gCAqMeyD,OAAAA,eASYA;QA7M7B,MAAMA,UAAU,MAAM/E,cAAcgF,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAAClB;QAC/D,MAAMmB,QAAQJ,OAAO,CAAC,QAAQ,KAAK;QACnC,MAAMK,aAAa,MAAM7E,sBAAsBwE,QAAQM,GAAG,EAAE;YAAEhB;QAAO;QACrE,IACE,CAACc,SACD,CAAEC,CAAAA,WAAWE,QAAQ,IAAK,MAAMrE,gBAAgBmE,WAAWzD,KAAK,EAAEoD,QAAQM,GAAG,CAAC,GAC9E;YACA/B,IACGI,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAA0D;YAC3E;QACF;QACA,MAAM2B,WAAW,MAAMtF,cAAcoE;QACrC,IAAI,CAACkB,UAAU;YACbjC,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;YAC7C;QACF;QACA,MAAM4B,QAAQrE,gBAAgBoE,SAASE,GAAG,EAAE;QAC5C,IAAID,OAAO;YACTlC,IAAII,MAAM,CAAC8B,MAAM9B,MAAM,EAAEC,IAAI,CAAC6B,MAAMjC,IAAI;YACxC;QACF;QAEA,MAAM7B,YAAY1B,cAAcgF,GAAG,GAAGtD,SAAS;QAC/C,MAAMgE,UAAUhE,UAAUiE,UAAU,CAAC,SAASC,GAAG,CAACvB;QAClD,MAAMwB,WAAW,MAAM1F,gBAAgBkE;QACvC;;;;;;KAMC,GACD,IAAIyB;QACJ,IAAIvC,KAAKuC,MAAM,KAAK5C,WAAW;YAC7B,MAAM6C,cAAc,MAAMrE,UACvBiE,UAAU,CAAC,QACXC,GAAG,CAACL,SAAS5D,KAAK,EAClBgE,UAAU,CAACrG,gBAAgB0G,aAAa,EACxCC,KAAK,CAAC5G,4BACN6G,GAAG;YACN,MAAMC,SAAStG,mBACb0D,KAAKuC,MAAM,EACXC,YAAYK,IAAI,CAAC9D,GAAG,CAAC,CAAC+D,QAAUA,MAAMC,IAAI,KAC1C;YAEF,IAAI,YAAYH,QAAQ;oBACGnD;gBAAzB,MAAM,CAAC0B,OAAO6B,QAAQ,IAAGvD,mBAAAA,OAAOC,OAAO,CAACkD,OAAO3B,MAAM,CAAC,CAAC,EAAE,YAAhCxB,mBAAoC,EAAE;gBAC/DM,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,KAAK,EAAE2C,kBAAAA,UAAW;mBACd7B,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;gBAE3B;YACF;YACAoB,SAASK,OAAOK,MAAM;QACxB;QACA,mEAAmE;QACnE,uCAAuC;QACvC,MAAM/D,YAAY,MAAMhB,aAAaC,WAAW6D,SAAS5D,KAAK,EAAE4B,KAAKkD,WAAW;QAChF,IAAIhE,cAAc,MAAM;YACtBa,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOpC;gBAAuBkD,OAAO;YAAc;YAC1E;QACF;QACA,MAAM+B,cAAchE,UAAUH,GAAG,CAAC,CAACI,WAAaA,SAASV,EAAE;QAC3D,sEAAsE;QACtE,4BAA4B;QAC5B,MAAM0E,SAAS9G,UAAU2E;QACzB,MAAMoC,SAAS,MAAMtG,gBAAgBgE,QAAQqC;QAC7C,MAAME,UAAU,CAACD;QACjB;;;;;KAKC,GACD,MAAME,aAAa7F,uBACjB,MAAMD,uBAAuBW,WAAW6D,SAAS5D,KAAK,GACtDiB,MAAMiE,UAAU,EAChB;YAAEC,OAAO,EAAEH,0BAAAA,OAAQT,GAAG,CAAC;YAAeU;QAAQ;QAEhD,IAAIC,WAAWE,EAAE,KAAK,OAAO;YAC3BzD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOiD,WAAWjD,KAAK;gBAAEc,OAAO;YAAa;YACpE;QACF;QACA,IAAImC,WAAWhE,KAAK,KAAKK,WAAW,OAAON,MAAMiE,UAAU;aACtDjE,MAAMiE,UAAU,GAAGA,WAAWhE,KAAK;QACxC;;;;;KAKC,GACD,MAAMmE,mBAAmBnG,uBACvB,MAAMC,kBAAkBY,WAAW6D,SAAS5D,KAAK,GACjDiB,OACA;YAAEkE,OAAO,UAAEH,0BAAAA,OAAQL,IAAI,qBAAM;YAAMM;QAAQ;QAE7C,MAAM,CAACK,gBAAgB,GAAGjE,OAAOC,OAAO,CAAC+D;QACzC,IAAIC,iBAAiB;YACnB3D,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOqD,eAAe,CAAC,EAAE;gBAAEvC,OAAOuC,eAAe,CAAC,EAAE;YAAC;YAC5E;QACF;QACA,oEAAoE;QACpE,MAAMC,eAAe3H,6BAAoBoH,0BAAAA,OAAQL,IAAI,sBAAM,MAAM1D;QACjE;;;KAGC,GACD,MAAMc,SAASiB,YACX7E,0BACE,MAAMoB,gBAAgBQ,WAAW6D,SAAS5D,KAAK,EAAEnC,2BACjDmF,WACA;YAAEwC,SAAS/F;YAAiB0F,OAAO,WAAEH,0BAAAA,OAAQL,IAAI,sBAAM;QAAK,KAE9D;QACJ,IAAI5C,CAAAA,0BAAAA,OAAQqD,EAAE,MAAK,OAAO;YACxBzD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO,CAAC,8BAA8B,EAAEF,OAAOE,KAAK,EAAE;gBAAEc,OAAO;YAAS;YAC/F;QACF;QACA;;;;KAIC,GACD,IAAIkC,SAAS;YACX,sEAAsE;YACtE,sEAAsE;YACtE,MAAMQ,OAAO,AAAC,CAAA,MAAM9G,aAAauF,UAAUxB,QAAQgD,KAAK,GAAGnB,GAAG,EAAC,EAAGI,IAAI,GAAGe,KAAK;YAC9E,IAAIjI,0BAA0BgI,MAAM3H,oBAAoB6H,QAAQ,EAAE;gBAChEhE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;oBACnBC,OACE,kEACA,kEACA;oBACF2D,QAAQ;gBACV;gBACA;YACF;QACF;QACA,MAAMC,SAAS,MAAMzH,YAAY;YAC/B2F;YACArB;YACAoD,MAAM;gBACJlD;eACI2C,gBAAgB3E,OAAO;gBAAEA,MAAM2E,gBAAgB3E;YAAK,IAAI,CAAC;gBAC7DmF,QAAQnG;;QAEZ;QACA,IAAI,CAACiG,QAAQ;YACXlE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA+B;YAC7D;QACF;QACA,MAAM+D,UAAmC,aACpChF,iBAAiBC,QAChBsE,eAAe;YAAE3E,MAAM2E;QAAa,IAAI,CAAC,GACzCxD,CAAAA,0BAAAA,OAAQqD,EAAE,IAAG;YAAErD,QAAQA,OAAOA,MAAM;YAAEkE,aAAalE,OAAOkE,WAAW;QAAC,IAAI,CAAC,GAC3E/C,WAAW;YAAEA;QAAS,IAAI,CAAC,GAC3BC,QAAQ;YAAEA;QAAM,IAAI,CAAC,GAIrB2B,YAAY3E,MAAM,GAAG;YAAE2E,aAAa9F,WAAWkH,UAAU,IAAIpB;QAAa,IAAI,CAAC,GAS/EX,UAAU9C,OAAO8E,IAAI,CAAChC,QAAQhE,MAAM,GAAG;YAAEgE;QAAO,IAAI,CAAC;QAE3D,IAAI9C,OAAO8E,IAAI,CAACH,SAAS7F,MAAM,EAAE;YAC/B,MAAM+D,SACHD,GAAG,CAACc,QACJqB,GAAG,CAAC,aAAKJ;gBAASK,WAAWrH,WAAWsH,eAAe;gBAAM;gBAAEC,OAAO;YAAK;YAC9E,qEAAqE;YACrE,6DAA6D;YAC7D,MAAM9H,uBAAuByF,SAASD,GAAG,CAACc,SAAS;QACrD;QACA;;;;;KAKC,GACD,MAAMyB,UAAU1H,iBAAiBkG,SAAUA,OAAOL,IAAI,KAAiC,MAAM;QAC7F,MAAM1F,6BAA6Bc,WAAW;YAC5CC,OAAO4D,SAAS5D,KAAK;YACrB8D,KAAKF,SAASE,GAAG;YACjBpB;YACA+D,MAAM;gBAAE1B;YAAO;YACf2B,QAAQ;YACR5F,WAAWA,UAAU6F,MAAM,CAAC,CAAC5F,WAAa,CAACyF,QAAQlG,QAAQ,CAACS,SAASV,EAAE;YACvEuG,MAAMC,KAAKC,GAAG;YACdC,OAAO3D,QAAQM,GAAG;YAClBsD,QAAQ7E,QAAOiB,SAAAA,gBAAAA,OAAO,CAAC,OAAO,YAAfA,gBAAmBA,QAAQR,KAAK,YAAhCQ,QAAoC,IAAIT,IAAI,MAAM;QACnE;QACA;;;;KAIC,GACD,MAAMpE,gBACJmE,QACA;YAAEgB,KAAKN,QAAQM,GAAG;YAAEd,KAAK,GAAEQ,iBAAAA,QAAQR,KAAK,YAAbQ,iBAAiB;QAAK,GACjD6B,UAAU,eAAe,gBACzB;YAAEgC,MAAM;YAAQ5G,IAAI0E;YAAQnE,MAAM2E,gBAAgB3E,QAAQgC;QAAM;QAElE,MAAMsE,SAA6B;YAAEnC;YAAQE;QAAQ;QACrDtD,IAAII,MAAM,CAACkD,UAAU,MAAM,KAAKjD,IAAI,CAACkF;IACvC,EAAE,OAAOjF,OAAO;QACdkF,QAAQlF,KAAK,CAAC,uBAAuBA;QACrCN,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IAC/D;AACF,EAAC;AAED,eAAeR,kBAAiB"}

package/src/lib/server/lead-nurturing.d.ts

@@ -21,3 +21,9 @@ export declare function nurtureReachedLeads(firestore: Firestore, input: {
     hostId: string;
     emails: readonly string[];
 }): Promise<number>;
+/** Move the leads that wrote back, still New or Nurturing, to Working; how many moved. */
+export declare function workRepliedLeads(firestore: Firestore, input: {
+    orgId: string;
+    hostId: string;
+    emails: readonly string[];
+}): Promise<number>;

package/src/lib/server/lead-nurturing.js

@@ -1,3 +1,4 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
 /**
  * @license
  * Copyright 2026 Aglyn LLC
@@ -14,39 +15,60 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ /**
- * WHAT A DELIVERED MARKETING EMAIL DOES TO A LEAD (AGL-3446).
+ * WHAT MAIL DOES TO A LEAD'S STAGE: delivered (AGL-3446), and answered
+ * (AGL-3080).
  *
- * A lead nobody has touched, once a campaign email has been delivered to
- * it, moves from New to Nurturing: automated email is reaching it, so the
- * CRM digest must not count it as unworked, but no person has engaged yet.
- * Sequences make the same move from their own send job. A sender reaches
- * this through the record email-state seam's `reached`
- * (`stampRecordEmailReach`), never by importing the CRM.
+ * A lead nobody has touched, once a campaign email or a sequence step has
+ * been delivered to it, moves from New to Nurturing: automated email is
+ * reaching it, so the CRM digest must not count it as unworked, but no person
+ * has engaged yet. A lead that WROTE BACK — New or Nurturing — moves to
+ * Working: somebody answered, the lead is being worked, and a queue that
+ * still showed it as New would send a rep to open a conversation already
+ * open. A sender reaches both through the record email-state seam's
+ * `reached` and `replied` (`stampRecordEmailReach`, `stampRecordEmailReply`),
+ * never by importing the CRM.
  *
  * Found by address rather than by audience: a lead's document id IS the
  * `personKey` of its address (`orgs/{orgId}/leads/{personKey}`, AGL-3275),
- * so every audience — the leads, a list, a segment, typed-in addresses —
- * resolves the people it reached to their lead rows by one batched read,
- * with no query and no index.
+ * so every audience — the leads, a list, a segment, typed-in addresses, a
+ * sequence's enrollment — resolves the people it reached to their lead rows
+ * by one batched read, with no query and no index.
  *
  * Only a lead the sending site holds is moved — `visibleTo` names it — so
- * one brand's campaign never writes the stage of a lead another brand in
- * the same organization keeps. Only `new` moves; Nurturing, Working, the
- * closed states and a converted lead are left as they stand.
+ * one brand's mail never writes the stage of a lead another brand in the
+ * same organization keeps. Only the stages named move; Working, the closed
+ * states and a converted lead are left as they stand, so mail never reopens
+ * a verdict or moves a contact's record.
  *
  * Never throws: the mail has already gone, and a stage that could not be
  * written is one a rep sets by hand.
- */ import { crmLeadStatus } from "@aglyn/aglyn/app-utils/crm";
+ */ import { CRM_COLLECTIONS, CRM_LEAD_STATUS_PICKLIST, crmLeadStatus, crmLeadStatusLabelFor, effectiveCrmLeadStatusPicklist } from "@aglyn/aglyn/app-utils/crm";
 import { personKey } from "@aglyn/aglyn/app-utils/person-key";
 import { visibleToHost } from "@aglyn/aglyn/app-utils/scope-tokens";
 import { FieldValue } from "firebase-admin/firestore";
 /** `getAll` takes this many references per call, and a batch this many writes. */ const CHUNK = 300;
-/** Move the delivered-to leads still New to Nurturing; how many moved. */ export async function nurtureReachedLeads(firestore, input) {
+/** Move the leads at these addresses that stand in `from` to `to`; how many moved. */ async function advanceLeadsAt(firestore, input, from, to) {
     if (!input.orgId || !input.emails.length) return 0;
     const keys = [
         ...new Set(input.emails.map((email)=>personKey(email)).filter((key)=>Boolean(key)))
     ];
     const leads = firestore.collection('orgs').doc(input.orgId).collection('leads');
+    /*
+   * The org's label for the stage, stamped beside the meaning (AGL-3512) —
+   * read once, and only once a lead is due to move. A list that cannot be
+   * read stamps the meaning alone, which every reader labels itself.
+   */ let label;
+    const labelFor = async ()=>{
+        if (label !== undefined) return label;
+        try {
+            const list = await firestore.collection('orgs').doc(input.orgId).collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_STATUS_PICKLIST).get();
+            label = crmLeadStatusLabelFor(effectiveCrmLeadStatusPicklist(list.data()), to);
+        } catch (error) {
+            console.error('[crm] the lead statuses could not be read', input.orgId, error);
+            label = null;
+        }
+        return label;
+    };
     let moved = 0;
     for(let start = 0; start < keys.length; start += CHUNK){
         try {
@@ -59,11 +81,15 @@ import { FieldValue } from "firebase-admin/firestore";
                 const lead = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
                 if (lead['convertedContactId']) continue;
                 if (!visibleToHost(lead['visibleTo'], input.hostId)) continue;
-                if (crmLeadStatus(lead) !== 'new') continue;
-                batch.set(snapshot.ref, {
-                    status: 'nurturing',
+                if (!from.includes(crmLeadStatus(lead))) continue;
+                const statusLabel = await labelFor();
+                batch.set(snapshot.ref, _extends({
+                    status: to
+                }, statusLabel ? {
+                    statusLabel
+                } : {}, {
                     updatedAt: FieldValue.serverTimestamp()
-                }, {
+                }), {
                     merge: true
                 });
                 writes += 1;
@@ -73,10 +99,21 @@ import { FieldValue } from "firebase-admin/firestore";
                 moved += writes;
             }
         } catch (error) {
-            console.error('[crm] the reached leads could not be marked nurturing', input.orgId, error);
+            console.error(`[crm] the leads could not be marked ${to}`, input.orgId, error);
         }
     }
     return moved;
 }
+/** Move the delivered-to leads still New to Nurturing; how many moved. */ export function nurtureReachedLeads(firestore, input) {
+    return advanceLeadsAt(firestore, input, [
+        'new'
+    ], 'nurturing');
+}
+/** Move the leads that wrote back, still New or Nurturing, to Working; how many moved. */ export function workRepliedLeads(firestore, input) {
+    return advanceLeadsAt(firestore, input, [
+        'new',
+        'nurturing'
+    ], 'working');
+}
 
 //# sourceMappingURL=lead-nurturing.js.map

package/src/lib/server/lead-nurturing.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-nurturing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT A DELIVERED MARKETING EMAIL DOES TO A LEAD (AGL-3446).\n *\n * A lead nobody has touched, once a campaign email has been delivered to\n * it, moves from New to Nurturing: automated email is reaching it, so the\n * CRM digest must not count it as unworked, but no person has engaged yet.\n * Sequences make the same move from their own send job. A sender reaches\n * this through the record email-state seam's `reached`\n * (`stampRecordEmailReach`), never by importing the CRM.\n *\n * Found by address rather than by audience: a lead's document id IS the\n * `personKey` of its address (`orgs/{orgId}/leads/{personKey}`, AGL-3275),\n * so every audience — the leads, a list, a segment, typed-in addresses —\n * resolves the people it reached to their lead rows by one batched read,\n * with no query and no index.\n *\n * Only a lead the sending site holds is moved — `visibleTo` names it — so\n * one brand's campaign never writes the stage of a lead another brand in\n * the same organization keeps. Only `new` moves; Nurturing, Working, the\n * closed states and a converted lead are left as they stand.\n *\n * Never throws: the mail has already gone, and a stage that could not be\n * written is one a rep sets by hand.\n */\n\nimport { crmLeadStatus } from '@aglyn/aglyn/app-utils/crm'\nimport { personKey } from '@aglyn/aglyn/app-utils/person-key'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport { FieldValue, type Firestore } from 'firebase-admin/firestore'\n\n/** `getAll` takes this many references per call, and a batch this many writes. */\nconst CHUNK = 300\n\n/** Move the delivered-to leads still New to Nurturing; how many moved. */\nexport async function nurtureReachedLeads(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; emails: readonly string[] },\n): Promise<number> {\n  if (!input.orgId || !input.emails.length) return 0\n  const keys = [\n    ...new Set(input.emails.map((email) => personKey(email)).filter((key): key is string => Boolean(key))),\n  ]\n  const leads = firestore.collection('orgs').doc(input.orgId).collection('leads')\n  let moved = 0\n  for (let start = 0; start < keys.length; start += CHUNK) {\n    try {\n      const snapshots = await firestore.getAll(...keys.slice(start, start + CHUNK).map((key) => leads.doc(key)))\n      const batch = firestore.batch()\n      let writes = 0\n      for (const snapshot of snapshots) {\n        if (!snapshot.exists) continue\n        const lead = snapshot.data() ?? {}\n        if (lead['convertedContactId']) continue\n        if (!visibleToHost(lead['visibleTo'] as string[] | undefined, input.hostId)) continue\n        if (crmLeadStatus(lead as never) !== 'new') continue\n        batch.set(snapshot.ref, { status: 'nurturing', updatedAt: FieldValue.serverTimestamp() }, { merge: true })\n        writes += 1\n      }\n      if (writes) {\n        await batch.commit()\n        moved += writes\n      }\n    } catch (error) {\n      console.error('[crm] the reached leads could not be marked nurturing', input.orgId, error)\n    }\n  }\n  return moved\n}\n"],"names":["crmLeadStatus","personKey","visibleToHost","FieldValue","CHUNK","nurtureReachedLeads","firestore","input","orgId","emails","length","keys","Set","map","email","filter","key","Boolean","leads","collection","doc","moved","start","snapshots","getAll","slice","batch","writes","snapshot","exists","lead","data","hostId","set","ref","status","updatedAt","serverTimestamp","merge","commit","error","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,SAASA,aAAa,QAAQ,6BAA4B;AAC1D,SAASC,SAAS,QAAQ,oCAAmC;AAC7D,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SAASC,UAAU,QAAwB,2BAA0B;AAErE,gFAAgF,GAChF,MAAMC,QAAQ;AAEd,wEAAwE,GACxE,OAAO,eAAeC,oBACpBC,SAAoB,EACpBC,KAAmE;IAEnE,IAAI,CAACA,MAAMC,KAAK,IAAI,CAACD,MAAME,MAAM,CAACC,MAAM,EAAE,OAAO;IACjD,MAAMC,OAAO;WACR,IAAIC,IAAIL,MAAME,MAAM,CAACI,GAAG,CAAC,CAACC,QAAUb,UAAUa,QAAQC,MAAM,CAAC,CAACC,MAAuBC,QAAQD;KACjG;IACD,MAAME,QAAQZ,UAAUa,UAAU,CAAC,QAAQC,GAAG,CAACb,MAAMC,KAAK,EAAEW,UAAU,CAAC;IACvE,IAAIE,QAAQ;IACZ,IAAK,IAAIC,QAAQ,GAAGA,QAAQX,KAAKD,MAAM,EAAEY,SAASlB,MAAO;QACvD,IAAI;YACF,MAAMmB,YAAY,MAAMjB,UAAUkB,MAAM,IAAIb,KAAKc,KAAK,CAACH,OAAOA,QAAQlB,OAAOS,GAAG,CAAC,CAACG,MAAQE,MAAME,GAAG,CAACJ;YACpG,MAAMU,QAAQpB,UAAUoB,KAAK;YAC7B,IAAIC,SAAS;YACb,KAAK,MAAMC,YAAYL,UAAW;oBAEnBK;gBADb,IAAI,CAACA,SAASC,MAAM,EAAE;gBACtB,MAAMC,QAAOF,iBAAAA,SAASG,IAAI,cAAbH,iBAAmB,CAAC;gBACjC,IAAIE,IAAI,CAAC,qBAAqB,EAAE;gBAChC,IAAI,CAAC5B,cAAc4B,IAAI,CAAC,YAAY,EAA0BvB,MAAMyB,MAAM,GAAG;gBAC7E,IAAIhC,cAAc8B,UAAmB,OAAO;gBAC5CJ,MAAMO,GAAG,CAACL,SAASM,GAAG,EAAE;oBAAEC,QAAQ;oBAAaC,WAAWjC,WAAWkC,eAAe;gBAAG,GAAG;oBAAEC,OAAO;gBAAK;gBACxGX,UAAU;YACZ;YACA,IAAIA,QAAQ;gBACV,MAAMD,MAAMa,MAAM;gBAClBlB,SAASM;YACX;QACF,EAAE,OAAOa,OAAO;YACdC,QAAQD,KAAK,CAAC,yDAAyDjC,MAAMC,KAAK,EAAEgC;QACtF;IACF;IACA,OAAOnB;AACT"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-nurturing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT MAIL DOES TO A LEAD'S STAGE: delivered (AGL-3446), and answered\n * (AGL-3080).\n *\n * A lead nobody has touched, once a campaign email or a sequence step has\n * been delivered to it, moves from New to Nurturing: automated email is\n * reaching it, so the CRM digest must not count it as unworked, but no person\n * has engaged yet. A lead that WROTE BACK — New or Nurturing — moves to\n * Working: somebody answered, the lead is being worked, and a queue that\n * still showed it as New would send a rep to open a conversation already\n * open. A sender reaches both through the record email-state seam's\n * `reached` and `replied` (`stampRecordEmailReach`, `stampRecordEmailReply`),\n * never by importing the CRM.\n *\n * Found by address rather than by audience: a lead's document id IS the\n * `personKey` of its address (`orgs/{orgId}/leads/{personKey}`, AGL-3275),\n * so every audience — the leads, a list, a segment, typed-in addresses, a\n * sequence's enrollment — resolves the people it reached to their lead rows\n * by one batched read, with no query and no index.\n *\n * Only a lead the sending site holds is moved — `visibleTo` names it — so\n * one brand's mail never writes the stage of a lead another brand in the\n * same organization keeps. Only the stages named move; Working, the closed\n * states and a converted lead are left as they stand, so mail never reopens\n * a verdict or moves a contact's record.\n *\n * Never throws: the mail has already gone, and a stage that could not be\n * written is one a rep sets by hand.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  CRM_LEAD_STATUS_PICKLIST,\n  type CrmLeadStatus,\n  crmLeadStatus,\n  crmLeadStatusLabelFor,\n  effectiveCrmLeadStatusPicklist,\n} from '@aglyn/aglyn/app-utils/crm'\nimport { personKey } from '@aglyn/aglyn/app-utils/person-key'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport { FieldValue, type Firestore } from 'firebase-admin/firestore'\n\n/** `getAll` takes this many references per call, and a batch this many writes. */\nconst CHUNK = 300\n\n/** Move the leads at these addresses that stand in `from` to `to`; how many moved. */\nasync function advanceLeadsAt(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; emails: readonly string[] },\n  from: readonly CrmLeadStatus[],\n  to: CrmLeadStatus,\n): Promise<number> {\n  if (!input.orgId || !input.emails.length) return 0\n  const keys = [\n    ...new Set(input.emails.map((email) => personKey(email)).filter((key): key is string => Boolean(key))),\n  ]\n  const leads = firestore.collection('orgs').doc(input.orgId).collection('leads')\n  /*\n   * The org's label for the stage, stamped beside the meaning (AGL-3512) —\n   * read once, and only once a lead is due to move. A list that cannot be\n   * read stamps the meaning alone, which every reader labels itself.\n   */\n  let label: string | null | undefined\n  const labelFor = async (): Promise<string | null> => {\n    if (label !== undefined) return label\n    try {\n      const list = await firestore\n        .collection('orgs')\n        .doc(input.orgId)\n        .collection(CRM_COLLECTIONS.picklists)\n        .doc(CRM_LEAD_STATUS_PICKLIST)\n        .get()\n      label = crmLeadStatusLabelFor(effectiveCrmLeadStatusPicklist(list.data()), to)\n    } catch (error) {\n      console.error('[crm] the lead statuses could not be read', input.orgId, error)\n      label = null\n    }\n    return label\n  }\n  let moved = 0\n  for (let start = 0; start < keys.length; start += CHUNK) {\n    try {\n      const snapshots = await firestore.getAll(...keys.slice(start, start + CHUNK).map((key) => leads.doc(key)))\n      const batch = firestore.batch()\n      let writes = 0\n      for (const snapshot of snapshots) {\n        if (!snapshot.exists) continue\n        const lead = snapshot.data() ?? {}\n        if (lead['convertedContactId']) continue\n        if (!visibleToHost(lead['visibleTo'] as string[] | undefined, input.hostId)) continue\n        if (!from.includes(crmLeadStatus(lead as never))) continue\n        const statusLabel = await labelFor()\n        batch.set(\n          snapshot.ref,\n          { status: to, ...(statusLabel ? { statusLabel } : {}), updatedAt: FieldValue.serverTimestamp() },\n          { merge: true },\n        )\n        writes += 1\n      }\n      if (writes) {\n        await batch.commit()\n        moved += writes\n      }\n    } catch (error) {\n      console.error(`[crm] the leads could not be marked ${to}`, input.orgId, error)\n    }\n  }\n  return moved\n}\n\n/** Move the delivered-to leads still New to Nurturing; how many moved. */\nexport function nurtureReachedLeads(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; emails: readonly string[] },\n): Promise<number> {\n  return advanceLeadsAt(firestore, input, ['new'], 'nurturing')\n}\n\n/** Move the leads that wrote back, still New or Nurturing, to Working; how many moved. */\nexport function workRepliedLeads(\n  firestore: Firestore,\n  input: { orgId: string; hostId: string; emails: readonly string[] },\n): Promise<number> {\n  return advanceLeadsAt(firestore, input, ['new', 'nurturing'], 'working')\n}\n"],"names":["CRM_COLLECTIONS","CRM_LEAD_STATUS_PICKLIST","crmLeadStatus","crmLeadStatusLabelFor","effectiveCrmLeadStatusPicklist","personKey","visibleToHost","FieldValue","CHUNK","advanceLeadsAt","firestore","input","from","to","orgId","emails","length","keys","Set","map","email","filter","key","Boolean","leads","collection","doc","label","labelFor","undefined","list","picklists","get","data","error","console","moved","start","snapshots","getAll","slice","batch","writes","snapshot","exists","lead","hostId","includes","statusLabel","set","ref","status","updatedAt","serverTimestamp","merge","commit","nurtureReachedLeads","workRepliedLeads"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BC,GAED,SACEA,eAAe,EACfC,wBAAwB,EAExBC,aAAa,EACbC,qBAAqB,EACrBC,8BAA8B,QACzB,6BAA4B;AACnC,SAASC,SAAS,QAAQ,oCAAmC;AAC7D,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SAASC,UAAU,QAAwB,2BAA0B;AAErE,gFAAgF,GAChF,MAAMC,QAAQ;AAEd,oFAAoF,GACpF,eAAeC,eACbC,SAAoB,EACpBC,KAAmE,EACnEC,IAA8B,EAC9BC,EAAiB;IAEjB,IAAI,CAACF,MAAMG,KAAK,IAAI,CAACH,MAAMI,MAAM,CAACC,MAAM,EAAE,OAAO;IACjD,MAAMC,OAAO;WACR,IAAIC,IAAIP,MAAMI,MAAM,CAACI,GAAG,CAAC,CAACC,QAAUf,UAAUe,QAAQC,MAAM,CAAC,CAACC,MAAuBC,QAAQD;KACjG;IACD,MAAME,QAAQd,UAAUe,UAAU,CAAC,QAAQC,GAAG,CAACf,MAAMG,KAAK,EAAEW,UAAU,CAAC;IACvE;;;;GAIC,GACD,IAAIE;IACJ,MAAMC,WAAW;QACf,IAAID,UAAUE,WAAW,OAAOF;QAChC,IAAI;YACF,MAAMG,OAAO,MAAMpB,UAChBe,UAAU,CAAC,QACXC,GAAG,CAACf,MAAMG,KAAK,EACfW,UAAU,CAACzB,gBAAgB+B,SAAS,EACpCL,GAAG,CAACzB,0BACJ+B,GAAG;YACNL,QAAQxB,sBAAsBC,+BAA+B0B,KAAKG,IAAI,KAAKpB;QAC7E,EAAE,OAAOqB,OAAO;YACdC,QAAQD,KAAK,CAAC,6CAA6CvB,MAAMG,KAAK,EAAEoB;YACxEP,QAAQ;QACV;QACA,OAAOA;IACT;IACA,IAAIS,QAAQ;IACZ,IAAK,IAAIC,QAAQ,GAAGA,QAAQpB,KAAKD,MAAM,EAAEqB,SAAS7B,MAAO;QACvD,IAAI;YACF,MAAM8B,YAAY,MAAM5B,UAAU6B,MAAM,IAAItB,KAAKuB,KAAK,CAACH,OAAOA,QAAQ7B,OAAOW,GAAG,CAAC,CAACG,MAAQE,MAAME,GAAG,CAACJ;YACpG,MAAMmB,QAAQ/B,UAAU+B,KAAK;YAC7B,IAAIC,SAAS;YACb,KAAK,MAAMC,YAAYL,UAAW;oBAEnBK;gBADb,IAAI,CAACA,SAASC,MAAM,EAAE;gBACtB,MAAMC,QAAOF,iBAAAA,SAASV,IAAI,cAAbU,iBAAmB,CAAC;gBACjC,IAAIE,IAAI,CAAC,qBAAqB,EAAE;gBAChC,IAAI,CAACvC,cAAcuC,IAAI,CAAC,YAAY,EAA0BlC,MAAMmC,MAAM,GAAG;gBAC7E,IAAI,CAAClC,KAAKmC,QAAQ,CAAC7C,cAAc2C,QAAiB;gBAClD,MAAMG,cAAc,MAAMpB;gBAC1Ba,MAAMQ,GAAG,CACPN,SAASO,GAAG,EACZ;oBAAEC,QAAQtC;mBAAQmC,cAAc;oBAAEA;gBAAY,IAAI,CAAC;oBAAII,WAAW7C,WAAW8C,eAAe;oBAC5F;oBAAEC,OAAO;gBAAK;gBAEhBZ,UAAU;YACZ;YACA,IAAIA,QAAQ;gBACV,MAAMD,MAAMc,MAAM;gBAClBnB,SAASM;YACX;QACF,EAAE,OAAOR,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,oCAAoC,EAAErB,IAAI,EAAEF,MAAMG,KAAK,EAAEoB;QAC1E;IACF;IACA,OAAOE;AACT;AAEA,wEAAwE,GACxE,OAAO,SAASoB,oBACd9C,SAAoB,EACpBC,KAAmE;IAEnE,OAAOF,eAAeC,WAAWC,OAAO;QAAC;KAAM,EAAE;AACnD;AAEA,wFAAwF,GACxF,OAAO,SAAS8C,iBACd/C,SAAoB,EACpBC,KAAmE;IAEnE,OAAOF,eAAeC,WAAWC,OAAO;QAAC;QAAO;KAAY,EAAE;AAChE"}

package/src/lib/server/lead-picklists.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type CrmLeadPicklistField, type CrmLeadProfilePatch, type CrmPicklist, type CrmPicklistId } from '@aglyn/aglyn/server';
+/**
+ * The org's lists behind a lead's Salutation, Industry and Rating
+ * (AGL-3513), read together — one document each.
+ */
+export declare function readLeadPicklists(firestore: FirebaseFirestore.Firestore, orgId: string): Promise<Partial<Record<CrmPicklistId, CrmPicklist>>>;
+/** Whether a profile names a lead picklist field, so a write that names none reads no list. */
+export declare function namesLeadPicklist(patch: Readonly<CrmLeadProfilePatch>): boolean;
+/**
+ * A profile's Salutation, Industry and Rating judged against the org's
+ * lists, IN PLACE: each value the list allows is stored as the list spells
+ * it, the lead's `current` value is kept, and on a create a field not named
+ * starts from its list's default. Answers the refusal of each value the
+ * list does not hold, by field — every write door of a lead runs it.
+ */
+export declare function judgeLeadPicklistPatch(lists: Readonly<Partial<Record<CrmPicklistId, CrmPicklist>>>, patch: CrmLeadProfilePatch, options?: {
+    current?: Readonly<Record<string, unknown>> | null;
+    created?: boolean;
+}): Partial<Record<CrmLeadPicklistField, string>>;

package/src/lib/server/lead-picklists.js

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { CRM_LEAD_PICKLIST_FIELDS, judgeCrmLeadPicklists } from "@aglyn/aglyn/server";
+import { readCrmPicklist } from "./read-picklist.js";
+/**
+ * The org's lists behind a lead's Salutation, Industry and Rating
+ * (AGL-3513), read together — one document each.
+ */ export async function readLeadPicklists(firestore, orgId) {
+    const ids = CRM_LEAD_PICKLIST_FIELDS.map((entry)=>entry.picklistId);
+    const lists = await Promise.all(ids.map((id)=>readCrmPicklist(firestore, orgId, id)));
+    return Object.fromEntries(ids.map((id, at)=>[
+            id,
+            lists[at]
+        ]));
+}
+/** Whether a profile names a lead picklist field, so a write that names none reads no list. */ export function namesLeadPicklist(patch) {
+    return CRM_LEAD_PICKLIST_FIELDS.some((entry)=>patch[entry.field] !== undefined);
+}
+/**
+ * A profile's Salutation, Industry and Rating judged against the org's
+ * lists, IN PLACE: each value the list allows is stored as the list spells
+ * it, the lead's `current` value is kept, and on a create a field not named
+ * starts from its list's default. Answers the refusal of each value the
+ * list does not hold, by field — every write door of a lead runs it.
+ */ export function judgeLeadPicklistPatch(lists, patch, options = {}) {
+    const requested = {};
+    for (const { field } of CRM_LEAD_PICKLIST_FIELDS){
+        if (patch[field] !== undefined) requested[field] = patch[field];
+    }
+    const judged = judgeCrmLeadPicklists(lists, requested, options);
+    for (const { field } of CRM_LEAD_PICKLIST_FIELDS){
+        var _judged_values_field;
+        if (judged.errors[field]) continue;
+        if (field in judged.values) patch[field] = (_judged_values_field = judged.values[field]) != null ? _judged_values_field : null;
+    }
+    return judged.errors;
+}
+
+//# sourceMappingURL=lead-picklists.js.map

package/src/lib/server/lead-picklists.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-picklists.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  CRM_LEAD_PICKLIST_FIELDS,\n  type CrmLeadPicklistField,\n  type CrmLeadProfilePatch,\n  type CrmPicklist,\n  type CrmPicklistId,\n  judgeCrmLeadPicklists,\n} from '@aglyn/aglyn/server'\nimport { readCrmPicklist } from './read-picklist'\n\n/**\n * The org's lists behind a lead's Salutation, Industry and Rating\n * (AGL-3513), read together — one document each.\n */\nexport async function readLeadPicklists(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<Partial<Record<CrmPicklistId, CrmPicklist>>> {\n  const ids = CRM_LEAD_PICKLIST_FIELDS.map((entry) => entry.picklistId)\n  const lists = await Promise.all(ids.map((id) => readCrmPicklist(firestore, orgId, id)))\n  return Object.fromEntries(ids.map((id, at) => [id, lists[at]]))\n}\n\n/** Whether a profile names a lead picklist field, so a write that names none reads no list. */\nexport function namesLeadPicklist(patch: Readonly<CrmLeadProfilePatch>): boolean {\n  return CRM_LEAD_PICKLIST_FIELDS.some((entry) => patch[entry.field] !== undefined)\n}\n\n/**\n * A profile's Salutation, Industry and Rating judged against the org's\n * lists, IN PLACE: each value the list allows is stored as the list spells\n * it, the lead's `current` value is kept, and on a create a field not named\n * starts from its list's default. Answers the refusal of each value the\n * list does not hold, by field — every write door of a lead runs it.\n */\nexport function judgeLeadPicklistPatch(\n  lists: Readonly<Partial<Record<CrmPicklistId, CrmPicklist>>>,\n  patch: CrmLeadProfilePatch,\n  options: { current?: Readonly<Record<string, unknown>> | null; created?: boolean } = {},\n): Partial<Record<CrmLeadPicklistField, string>> {\n  const requested: Partial<Record<string, unknown>> = {}\n  for (const { field } of CRM_LEAD_PICKLIST_FIELDS) {\n    if (patch[field] !== undefined) requested[field] = patch[field]\n  }\n  const judged = judgeCrmLeadPicklists(lists, requested, options)\n  for (const { field } of CRM_LEAD_PICKLIST_FIELDS) {\n    if (judged.errors[field]) continue\n    if (field in judged.values) patch[field] = judged.values[field] ?? null\n  }\n  return judged.errors\n}\n"],"names":["CRM_LEAD_PICKLIST_FIELDS","judgeCrmLeadPicklists","readCrmPicklist","readLeadPicklists","firestore","orgId","ids","map","entry","picklistId","lists","Promise","all","id","Object","fromEntries","at","namesLeadPicklist","patch","some","field","undefined","judgeLeadPicklistPatch","options","requested","judged","errors","values"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD,SACEA,wBAAwB,EAKxBC,qBAAqB,QAChB,sBAAqB;AAC5B,SAASC,eAAe,QAAQ,qBAAiB;AAEjD;;;CAGC,GACD,OAAO,eAAeC,kBACpBC,SAAsC,EACtCC,KAAa;IAEb,MAAMC,MAAMN,yBAAyBO,GAAG,CAAC,CAACC,QAAUA,MAAMC,UAAU;IACpE,MAAMC,QAAQ,MAAMC,QAAQC,GAAG,CAACN,IAAIC,GAAG,CAAC,CAACM,KAAOX,gBAAgBE,WAAWC,OAAOQ;IAClF,OAAOC,OAAOC,WAAW,CAACT,IAAIC,GAAG,CAAC,CAACM,IAAIG,KAAO;YAACH;YAAIH,KAAK,CAACM,GAAG;SAAC;AAC/D;AAEA,6FAA6F,GAC7F,OAAO,SAASC,kBAAkBC,KAAoC;IACpE,OAAOlB,yBAAyBmB,IAAI,CAAC,CAACX,QAAUU,KAAK,CAACV,MAAMY,KAAK,CAAC,KAAKC;AACzE;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,uBACdZ,KAA4D,EAC5DQ,KAA0B,EAC1BK,UAAqF,CAAC,CAAC;IAEvF,MAAMC,YAA8C,CAAC;IACrD,KAAK,MAAM,EAAEJ,KAAK,EAAE,IAAIpB,yBAA0B;QAChD,IAAIkB,KAAK,CAACE,MAAM,KAAKC,WAAWG,SAAS,CAACJ,MAAM,GAAGF,KAAK,CAACE,MAAM;IACjE;IACA,MAAMK,SAASxB,sBAAsBS,OAAOc,WAAWD;IACvD,KAAK,MAAM,EAAEH,KAAK,EAAE,IAAIpB,yBAA0B;YAELyB;QAD3C,IAAIA,OAAOC,MAAM,CAACN,MAAM,EAAE;QAC1B,IAAIA,SAASK,OAAOE,MAAM,EAAET,KAAK,CAACE,MAAM,IAAGK,uBAAAA,OAAOE,MAAM,CAACP,MAAM,YAApBK,uBAAwB;IACrE;IACA,OAAOA,OAAOC,MAAM;AACtB"}

package/src/lib/server/lead-source-picklist.d.ts

@@ -17,19 +17,7 @@
 import { type CrmPicklist } from '@aglyn/aglyn/server';
 /** The org's lead source list as every server door judges against it (AGL-3298). */
 export declare function readLeadSourcePicklist(firestore: FirebaseFirestore.Firestore, orgId: string): Promise<CrmPicklist>;
-/**
- * What a lead write stores as its lead source (AGL-3298), from what the
- * request said about it:
- *
- *  - `undefined` (not named): nothing — except on a CREATE, which starts
- *    from the list's default when it has one, as Salesforce's does.
- *  - `null` (cleared): the clear.
- *  - a label: {@link judgeCrmLeadSource} — an active value's label, the
- *    record's own current value kept, anything else refused naming the
- *    values the list allows.
- *
- * `write` undefined means leave the field alone.
- */
+/** What a lead write stores as its lead source — {@link resolveCrmPicklistWrite} for it. */
 export declare function resolveLeadSourceWrite(picklist: CrmPicklist, requested: string | null | undefined, options: {
     current?: unknown;
     created: boolean;

package/src/lib/server/lead-source-picklist.js

@@ -13,40 +13,13 @@
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { CRM_COLLECTIONS, CRM_LEAD_SOURCE_PICKLIST, crmPicklistDefaultLabel, effectiveCrmLeadSourcePicklist, judgeCrmLeadSource } from "@aglyn/aglyn/server";
-/** The org's lead source list as every server door judges against it (AGL-3298). */ export async function readLeadSourcePicklist(firestore, orgId) {
-    const snapshot = await firestore.collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST).get();
-    return effectiveCrmLeadSourcePicklist(snapshot.data());
+ */ import { CRM_LEAD_SOURCE_PICKLIST } from "@aglyn/aglyn/server";
+import { readCrmPicklist, resolveCrmPicklistWrite } from "./read-picklist.js";
+/** The org's lead source list as every server door judges against it (AGL-3298). */ export function readLeadSourcePicklist(firestore, orgId) {
+    return readCrmPicklist(firestore, orgId, CRM_LEAD_SOURCE_PICKLIST);
 }
-/**
- * What a lead write stores as its lead source (AGL-3298), from what the
- * request said about it:
- *
- *  - `undefined` (not named): nothing — except on a CREATE, which starts
- *    from the list's default when it has one, as Salesforce's does.
- *  - `null` (cleared): the clear.
- *  - a label: {@link judgeCrmLeadSource} — an active value's label, the
- *    record's own current value kept, anything else refused naming the
- *    values the list allows.
- *
- * `write` undefined means leave the field alone.
- */ export function resolveLeadSourceWrite(picklist, requested, options) {
-    if (requested === undefined) {
-        const fallback = options.created ? crmPicklistDefaultLabel(picklist) : null;
-        return {
-            ok: true,
-            write: fallback != null ? fallback : undefined
-        };
-    }
-    if (requested === null) return {
-        ok: true,
-        write: null
-    };
-    const judged = judgeCrmLeadSource(picklist, requested, options.current);
-    return judged.ok === false ? judged : {
-        ok: true,
-        write: judged.value
-    };
+/** What a lead write stores as its lead source — {@link resolveCrmPicklistWrite} for it. */ export function resolveLeadSourceWrite(picklist, requested, options) {
+    return resolveCrmPicklistWrite(CRM_LEAD_SOURCE_PICKLIST, picklist, requested, options);
 }
 
 //# sourceMappingURL=lead-source-picklist.js.map