@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.222

package/src/lib/plan-entitlements.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * THE CRM'S PLAN BAND (AGL-3080): the one-to-one email pace each plan\n * includes. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`); this is where the figure is\n * written, beside the reasoning that sized it.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementQuotas {\n    /**\n     * One-to-one emails a workspace may send from CRM records per UTC day —\n     * the message a rep writes to one person from their contact page, as\n     * against a campaign (`emailSendsPerMonth`) or transactional mail.\n     *\n     * A HARD cap on every tier and a daily one, because it is the only send\n     * class a person can produce by hand at volume: a campaign is one act\n     * over a metered audience, and a receipt follows an order somebody paid\n     * for, but a rep with a template and a list can put a thousand messages\n     * onto the platform's sending reputation in an afternoon. The day\n     * boundary is what makes the cap a pace rather than a wall — tomorrow the\n     * count is zero again — and the number is sized so that every tier holds\n     * its margin with the whole day spent, which is the arithmetic the Drive\n     * pricing decision of 2026-09-05 records. `checkCrmEmailQuota` reads it;\n     * the counter it is enforced against is\n     * `orgs/{orgId}/crmEmailUsage/{day}`.\n     *\n     * Every send still counts on the org's `emailSends` cost meter, like any\n     * other message the provider charged for. 0 on Free, which has no CRM,\n     * and finite on every paid tier, Enterprise's 2,000 included.\n     *\n     * ## This ladder and `emailSendsPerMonth` are NOT the same ladder\n     *\n     * They answer to different principles, deliberately, and a tier's two\n     * numbers are not expected to look like each other. `emailSendsPerMonth`\n     * is sized against SHARED-DOMAIN REPUTATION: campaign mail is bulk on a\n     * pool every tier without its own verified sending domain rides under\n     * `p=reject`, so what one workspace sends is a cost every other workspace\n     * pays. This one is sized against COGS SHARE: one-to-one mail is a\n     * per-tier margin question, which is why it is a daily pace rather than a\n     * monthly band.\n     *\n     * The two are far apart at the entry tier — a band of 0 beside a real\n     * daily allowance — and that reads as an inconsistency until the\n     * principles are named. It is not one. One-to-one mail is addressed to a\n     * single person, usually inside a relationship the recipient started, and\n     * it reaches the provider through a per-user pace limit, both suppression\n     * lists, a `declined` consent basis as a hard stop, and an atomic daily\n     * reservation. Complaint rates on it are structurally unlike bulk.\n     * Reconciling the two ladders would price a reply to one customer as\n     * though it carried a campaign's reputation risk.\n     */\n    crmEmailsPerDay?: number\n  }\n}\n\n/** The one-to-one emails each plan may send a UTC day — see the key's docblock. */\nexport const CRM_EMAILS_PER_DAY_BY_PLAN: Readonly<Record<OrgPlan, number>> = {\n  // No one-to-one email on Free, which has no CRM: the send lives on a\n  // record's page, and Free opens no record. Zero here is what\n  // `checkCrmEmailQuota` refuses against, so a per-org grant of\n  // `features.crm` alone still sends nothing until the band is raised with\n  // it.\n  free: 0,\n  // One-to-one email from a CRM record, per UTC day (AGL-2611). A hard daily\n  // pace rather than a monthly meter, sized so the whole day spent at $0.0009\n  // a message leaves the tier's CRM axis inside the 20% cost share the Drive\n  // pricing decision of 2026-09-05 sets. 50 a day is $1.35 a month against a\n  // $16 annual price. Every send still lands on the `emailSends` cost meter\n  // beside the transactional mail this tier already sends.\n  starter: 50,\n  pro: 150,\n  business: 200,\n  scale: 300,\n  advanced: 500,\n  agency: 1000,\n  // Finite like the campaign allowance beside it, and for the same reason\n  // one-to-one mail is capped on every other tier: a rep with a template and\n  // a list can put thousands of messages onto the platform's sending\n  // reputation in an afternoon. A negotiated agreement whose reps need more\n  // than 2,000 a day says so, and the override is what carries it.\n  enterprise: 2_000,\n}\n\n/** The CRM's plan figures, for the manifest generator. */\nexport function crmPlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    quotas: [\n      {\n        key: 'crmEmailsPerDay',\n        label: 'One-to-one emails / day',\n        byPlan: CRM_EMAILS_PER_DAY_BY_PLAN,\n      },\n    ],\n  }\n}\n"],"names":["CRM_EMAILS_PER_DAY_BY_PLAN","free","starter","pro","business","scale","advanced","agency","enterprise","crmPlanEntitlements","quotas","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,wEAAwE;AA0DxE,iFAAiF,GACjF,OAAO,MAAMA,6BAAgE;IAC3E,qEAAqE;IACrE,6DAA6D;IAC7D,8DAA8D;IAC9D,yEAAyE;IACzE,MAAM;IACNC,MAAM;IACN,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,yDAAyD;IACzDC,SAAS;IACTC,KAAK;IACLC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,QAAQ;IACR,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,0EAA0E;IAC1E,iEAAiE;IACjEC,YAAY;AACd,EAAC;AAED,wDAAwD,GACxD,OAAO,SAASC;IACd,OAAO;QACLC,QAAQ;YACN;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQb;YACV;SACD;IACH;AACF"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * THE CRM'S PLAN BAND (AGL-3080): the one-to-one email pace each plan\n * includes. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`); this is where the figure is\n * written, beside the reasoning that sized it.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementQuotas {\n    /**\n     * One-to-one emails a workspace may send from CRM records per UTC day —\n     * the message a rep writes to one person from their contact page, as\n     * against a campaign (`emailSendsPerMonth`) or transactional mail.\n     *\n     * A HARD cap on every tier and a daily one, because it is the only send\n     * class a person can produce by hand at volume: a campaign is one act\n     * over a metered audience, and a receipt follows an order somebody paid\n     * for, but a rep with a template and a list can put a thousand messages\n     * onto the platform's sending reputation in an afternoon. The day\n     * boundary is what makes the cap a pace rather than a wall — tomorrow the\n     * count is zero again — and the number is sized so that every tier holds\n     * its margin with the whole day spent, which is the arithmetic the Drive\n     * pricing decision of 2026-09-05 records. `checkCrmEmailQuota` reads it;\n     * the counter it is enforced against is\n     * `orgs/{orgId}/crmEmailUsage/{day}`.\n     *\n     * Every send still counts on the org's `emailSends` cost meter, like any\n     * other message the provider charged for. 0 on Free, which has no CRM,\n     * and finite on every paid tier, Enterprise's 2,000 included.\n     *\n     * ## This ladder and `emailSendsPerMonth` are NOT the same ladder\n     *\n     * They answer to different principles, deliberately, and a tier's two\n     * numbers are not expected to look like each other. `emailSendsPerMonth`\n     * is sized against SHARED-DOMAIN REPUTATION: campaign mail is bulk on a\n     * pool every tier without its own verified sending domain rides under\n     * `p=reject`, so what one workspace sends is a cost every other workspace\n     * pays. This one is sized against COGS SHARE: one-to-one mail is a\n     * per-tier margin question, which is why it is a daily pace rather than a\n     * monthly band.\n     *\n     * The two are far apart at the entry tier — a band of 0 beside a real\n     * daily allowance — and that reads as an inconsistency until the\n     * principles are named. It is not one. One-to-one mail is addressed to a\n     * single person, usually inside a relationship the recipient started, and\n     * it reaches the provider through a per-user pace limit, both suppression\n     * lists, a `declined` consent basis as a hard stop, and an atomic daily\n     * reservation. Complaint rates on it are structurally unlike bulk.\n     * Reconciling the two ladders would price a reply to one customer as\n     * though it carried a campaign's reputation risk.\n     */\n    crmEmailsPerDay?: number\n  }\n}\n\n/** The one-to-one emails each plan may send a UTC day — see the key's docblock. */\nexport const CRM_EMAILS_PER_DAY_BY_PLAN: Readonly<Record<OrgPlan, number>> = {\n  // No one-to-one email on Free, which has no CRM: the send lives on a\n  // record's page, and Free opens no record. Zero here is what\n  // `checkCrmEmailQuota` refuses against, so a per-org grant of\n  // `features.crm` alone still sends nothing until the band is raised with\n  // it.\n  free: 0,\n  // One-to-one email from a CRM record, per UTC day (AGL-2611). A hard daily\n  // pace rather than a monthly meter, sized so the whole day spent at $0.0009\n  // a message leaves the tier's CRM axis inside the 20% cost share the Drive\n  // pricing decision of 2026-09-05 sets. 35 a day is $0.95 a month against a\n  // $16 annual price — 50 was, until the whole Starter tier had to cover its\n  // full-use cost plus 30% (AGL-3469). Every send still lands on the\n  // `emailSends` cost meter beside the transactional mail this tier already\n  // sends.\n  starter: 35,\n  pro: 150,\n  business: 200,\n  scale: 300,\n  advanced: 500,\n  agency: 1000,\n  // Finite like the campaign allowance beside it, and for the same reason\n  // one-to-one mail is capped on every other tier: a rep with a template and\n  // a list can put thousands of messages onto the platform's sending\n  // reputation in an afternoon. A negotiated agreement whose reps need more\n  // than 2,000 a day says so, and the override is what carries it.\n  enterprise: 2_000,\n}\n\n/** The CRM's plan figures, for the manifest generator. */\nexport function crmPlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    quotas: [\n      {\n        key: 'crmEmailsPerDay',\n        label: 'One-to-one emails / day',\n        byPlan: CRM_EMAILS_PER_DAY_BY_PLAN,\n      },\n    ],\n  }\n}\n"],"names":["CRM_EMAILS_PER_DAY_BY_PLAN","free","starter","pro","business","scale","advanced","agency","enterprise","crmPlanEntitlements","quotas","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,wEAAwE;AA0DxE,iFAAiF,GACjF,OAAO,MAAMA,6BAAgE;IAC3E,qEAAqE;IACrE,6DAA6D;IAC7D,8DAA8D;IAC9D,yEAAyE;IACzE,MAAM;IACNC,MAAM;IACN,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,0EAA0E;IAC1E,SAAS;IACTC,SAAS;IACTC,KAAK;IACLC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,QAAQ;IACR,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,0EAA0E;IAC1E,iEAAiE;IACjEC,YAAY;AACd,EAAC;AAED,wDAAwD,GACxD,OAAO,SAASC;IACd,OAAO;QACLC,QAAQ;YACN;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQb;YACV;SACD;IACH;AACF"}

package/src/lib/plugin.js

@@ -19,10 +19,14 @@ import { lazy } from "react";
 import { CRM_CONSOLE_SECTIONS } from "./components/crm-console-sections.js";
 import { CrmGlanceCard } from "./components/crm-glance-card.js";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
+import { registerCrmTransferResourceUis } from "./transfer/ui.js";
 import { withCrmOrgMount } from "./hooks/use-crm-org-mount.js";
+import { registerCrmRecordCounts } from "./model/crm-record-counts.js";
 import { registerCrmRecordRoutes } from "./model/crm-record-routes.js";
+import { registerCrmRecordLists } from "./model/crm-record-lists.js";
 import { CRM_SEARCH_SOURCES } from "./model/crm-search-sources.js";
 import { registerPluginZone } from "@aglyn/aglyn/plugin-manager/plugin-zones";
+import { registerPluginTransferResourceUi } from "@aglyn/aglyn/plugin-manager/plugin-transfer-resources";
 import { CRM_RECORD_ATTRIBUTION_ZONE } from "./components/crm-attribution-zone.js";
 import { CRM_RECORD_BOOKING_ZONE } from "./components/crm-booking-zone.js";
 /** Code-split: the CRM hub only loads when opened. */ const CrmConsolePage = lazy(()=>import("./components/crm-console-page.js"));
@@ -43,7 +47,20 @@ const CrmTasksDueCard = lazy(()=>import("./components/crm-tasks-due-card.js"));
  * once that backfill reported nothing left (AGL-2614). The `/contacts`
  * address is a URL, not a stored id, and the nav item keeps redirecting it.
  */ export function registerCrmConsole() {
+    // How the Import & export hub names email templates in a workspace package (AGL-3535).
+    registerPluginTransferResourceUi('crm.email-templates', {
+        label: 'Email templates'
+    }, {
+        pluginId: BUNDLE_ID
+    });
     registerCrmRecordRoutes();
+    // How the import wizard and the export dialog name the CRM's records (AGL-3527).
+    registerCrmTransferResourceUis(BUNDLE_ID);
+    // The CRM's records as another plugin's picker lists them (AGL-3080).
+    registerCrmRecordLists();
+    // The leads a site captured and the organization's contacts, counted for
+    // another plugin's figure.
+    registerCrmRecordCounts();
     registerPluginZone({
         zone: CRM_RECORD_BOOKING_ZONE,
         label: 'Book a meeting from a CRM record',

package/src/lib/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiCardAccountDetailsOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nimport { CRM_CONSOLE_SECTIONS } from './components/crm-console-sections'\nimport { CrmGlanceCard } from './components/crm-glance-card'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { withCrmOrgMount } from './hooks/use-crm-org-mount'\nimport { registerCrmRecordRoutes } from './model/crm-record-routes'\nimport { CRM_SEARCH_SOURCES } from './model/crm-search-sources'\nimport { registerPluginZone } from '@aglyn/aglyn/plugin-manager/plugin-zones'\nimport { CRM_RECORD_ATTRIBUTION_ZONE } from './components/crm-attribution-zone'\nimport { CRM_RECORD_BOOKING_ZONE } from './components/crm-booking-zone'\n\n/** Code-split: the CRM hub only loads when opened. */\nconst CrmConsolePage = lazy(\n  () => import('./components/crm-console-page'),\n)\n/** The dashboard glance, split the same way: it loads where the slot mounts it. */\n/** Where a form's fields save on a contact, drawn on the form's own page. */\nconst FormContactFieldsCard = lazy(\n  () => import('./components/form-contact-fields-card'),\n)\n\nconst CrmTasksDueCard = lazy(\n  () => import('./components/crm-tasks-due-card'),\n)\n\n/**\n * CRM feature plugin (AGL-395, the hub since AGL-2595). Console-only — its\n * records live in Firestore and have no canvas element, so there is no UI\n * bundle. The console half declares the CRM nav + hub through the\n * ConsoleExtension registry (release_crm gate via the nav tab); the\n * contacts section reads the `contactsPerHost` quota off the shell-passed\n * `org`.\n *\n * The plugin id is `crm` (AGL-2595). It was `contacts` while the surface was\n * one list; the id is persisted in every org's `enabledPlugins` and every\n * host's `disabledPlugins`, so the runtime read the old value as this one\n * until the stored documents had been rewritten, and the alias was retired\n * once that backfill reported nothing left (AGL-2614). The `/contacts`\n * address is a URL, not a stored id, and the nav item keeps redirecting it.\n */\nexport function registerCrmConsole(): void {\n  registerCrmRecordRoutes()\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_BOOKING_ZONE,\n      label: 'Book a meeting from a CRM record',\n      surface: 'console',\n      // One control in a record header's row of actions, and one beside the\n      // composer's fields: the page lays them out, so the zone adds nothing.\n      layout: 'bare',\n      description:\n        'In a record’s header and beside the one-to-one composer. A widget here offers the site’s bookable services and the link a visitor books one at; it is handed the site, the record and, from the composer, a way to insert the chosen link. It writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_ATTRIBUTION_ZONE,\n      label: 'Where a CRM record came from',\n      surface: 'console',\n      description:\n        'On a contact’s page and in a lead’s history. A widget here says which campaign or link brought the person; it is handed the site, what the record is and its id, and it writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'CRM',\n    /*\n     * WHO may open the CRM, declared so the shell enforces it.\n     *\n     * `navTabId` below is a release flag, not authorization: it says whether\n     * the surface has shipped, and `FeatureGate` reads it as\n     * `released || isStaff`. Nothing above this page decided who among a\n     * workspace's members may read it, and the page is a full editor over\n     * org-shared people data — names, addresses, order history, notes,\n     * consent, and a CSV export of all of it.\n     *\n     * `data.manage` rather than a key of this plugin's own, because it is\n     * the catalog key whose subject is exactly this data. The Firestore\n     * rules place contacts in the org-shared data block with datasets and\n     * gate writes on `canWriteOrgData()` — owner, admin, editor — which is\n     * the population `data.manage` defaults to, so the console gate and the\n     * rules agree on the built-in roles by construction. A custom role or a\n     * per-member override then narrows the console further, and the rules\n     * stay the boundary for the data itself.\n     *\n     * Minting a `contacts.*` key instead would advertise a control that does\n     * not exist. Console contact writes are client-direct against the rules,\n     * so a new key would have no server enforcement point to sit on, and a\n     * permission a customer can untick that changes nothing is worse than\n     * its absence.\n     *\n     * A SITE COLLABORATOR holding it reaches this page deliberately. They\n     * are a real org member document, so this gate is the first thing that\n     * has ever asked about them here — and the answer is yes, scoped: the\n     * listener filters on `visibleTo`, the rules prove the same predicate\n     * per document, and every field the page shows is read through the\n     * viewing group's own facet. Refusing them outright would delete a\n     * shipped capability rather than close a hole.\n     */\n    permission: 'data.manage',\n    /*\n     * WHAT the workspace must have bought (AGL-2851). The CRM is included\n     * from Starter and a Free workspace has none of it, so the flag is\n     * declared once, here, and the shell refuses every surface this\n     * registers on a plan without it: the hub body at both mounts, every\n     * section and record beneath it, drawn locked beside the upgrade notice,\n     * and the dashboard cards. The nav tab stays, as every plan-locked tab\n     * does, because it is the way to that notice. The CRM's routes, `/v1`\n     * and the Firestore rules ask the same question where the data is\n     * (`server/suite-gate.ts`).\n     */\n    featureFlag: 'crm',\n    // What the console's search finds here, under the two gates above.\n    searchSources: CRM_SEARCH_SOURCES,\n    /*\n     * Dashboard cards (AGL-2599, AGL-2604): the site dashboard's `hostDashboard`\n     * slot composes this extension's permission over each, so a card appears\n     * only where the CRM is enabled and only for a reader who may open it —\n     * registered here rather than imported by the dashboard so the shell's\n     * enablement and entitlement gate decides whether a site that never turned\n     * the CRM on sees them, the rule every card on that row follows. The tasks\n     * card is a glance at the reader's own overdue and due-today work and\n     * renders nothing on a workspace that has never made a task; the glance\n     * card is four server-counted figures, each a link into the hub.\n     *\n     * Both name `features.crm`, as the extension does (AGL-2611, AGL-2851):\n     * the slot composes the two, so a plan without the CRM gets neither card\n     * — absent, not upsold, the treatment every gated card gets.\n     *\n     * The same two cards again on the organization's `orgDashboard` slot\n     * (AGL-2636) — the org's sites page — under the same flag, with the same\n     * ids: the id names the card, and it is one card totaling the whole\n     * organization there instead of one site. The shell hands that slot the\n     * org mount as a prop, and `withCrmOrgMount` is what puts the mount's\n     * provider around each card, since the sites page cannot import one.\n     */\n    widgets: [\n      // Which contact field each of a form's fields saves to, on the form's\n      // own page. The forms plugin hosts the zone and writes the form\n      // document; what a contact's fields ARE is this plugin's, so the card\n      // is too.\n      {\n        slot: 'formContactFields',\n        widgetId: 'crm-form-contact-fields',\n        title: 'Saves to contact fields',\n        // A contact's custom fields are part of the suite, so a workspace\n        // without it has none to map a form's field onto.\n        featureFlag: 'crm',\n        Component: FormContactFieldsCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: CrmTasksDueCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: CrmGlanceCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmTasksDueCard),\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmGlanceCard),\n      },\n    ],\n    navItems: [\n      {\n        label: 'CRM',\n        href: '/crm',\n        // The address the surface had while it was one list. A link kept\n        // from then — a bookmark, a docs page, an email — still opens the\n        // hub rather than the shell's \"not available\" notice.\n        legacyHrefs: ['/contacts'],\n        // Sections as ROUTES (AGL-2595): each is a real URL the shell\n        // resolves and gates, so the page mounts the one being read and a\n        // bare `/crm` lands on the first. Every section inherits this\n        // item's `release_crm` gate.\n        sections: CRM_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-contacts',\n        icon: { path: mdiCardAccountDetailsOutline.path },\n        header: {\n          title: 'CRM',\n          icon: { path: mdiCardAccountDetailsOutline.path },\n          docsTopic: 'crm',\n        },\n        Component: CrmConsolePage,\n      },\n    ],\n    /*\n     * The ORGANIZATION's CRM hub (AGL-2630), at `/[orgSlug]/crm`: the same\n     * sections over every site at once, mounted with no site and the org's\n     * sites as `orgMount`. Its listeners carry no scope clause, so the\n     * shell's org route refuses a site collaborator on REACH before it asks\n     * the `data.manage` declared above; a permission alone, which a\n     * collaborator's role can carry, never opens it.\n     *\n     * It carries the SITE tab's id on purpose: `release_contacts` names\n     * `nav-tab-contacts`, so one flag holds both halves of the CRM, and the\n     * org half cannot ship while the site half is switched off. First among\n     * the organization's plugin tabs, beside Data, the org's other shared\n     * collection of records. The help opens the docs heading about this\n     * mount. Its old address, `/[orgSlug]/contacts`, is a console redirect\n     * (`consoleRedirects`), so it needs no `legacyHrefs` here.\n     */\n    orgNavItems: [\n      {\n        label: 'CRM',\n        href: '/crm',\n        sections: CRM_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-contacts',\n        tabOrder: -100,\n        icon: { path: mdiCardAccountDetailsOutline.path },\n        header: {\n          title: 'CRM',\n          icon: { path: mdiCardAccountDetailsOutline.path },\n          docsTopic: 'crm',\n          docsAnchor: '#at-the-organization-level',\n        },\n        Component: CrmConsolePage,\n      },\n    ],\n  })\n}\n"],"names":["Aglyn","mdiCardAccountDetailsOutline","lazy","CRM_CONSOLE_SECTIONS","CrmGlanceCard","BUNDLE_ID","withCrmOrgMount","registerCrmRecordRoutes","CRM_SEARCH_SOURCES","registerPluginZone","CRM_RECORD_ATTRIBUTION_ZONE","CRM_RECORD_BOOKING_ZONE","CrmConsolePage","FormContactFieldsCard","CrmTasksDueCard","registerCrmConsole","zone","label","surface","layout","description","pluginId","registerConsoleExtension","displayName","permission","featureFlag","searchSources","widgets","slot","widgetId","title","Component","CONSOLE_WIDGET_SLOTS","hostDashboard","orgDashboard","navItems","href","legacyHrefs","sections","navTabId","icon","path","header","docsTopic","orgNavItems","tabOrder","docsAnchor"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,4BAA4B,QAAQ,yBAAwB;AACrE,SAASC,IAAI,QAAQ,QAAO;AAC5B,SAASC,oBAAoB,QAAQ,uCAAmC;AACxE,SAASC,aAAa,QAAQ,kCAA8B;AAC5D,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,eAAe,QAAQ,+BAA2B;AAC3D,SAASC,uBAAuB,QAAQ,+BAA2B;AACnE,SAASC,kBAAkB,QAAQ,gCAA4B;AAC/D,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,uBAAuB,QAAQ,mCAA+B;AAEvE,oDAAoD,GACpD,MAAMC,iBAAiBV,KACrB,IAAM,MAAM,CAAC;AAEf,iFAAiF,GACjF,2EAA2E,GAC3E,MAAMW,wBAAwBX,KAC5B,IAAM,MAAM,CAAC;AAGf,MAAMY,kBAAkBZ,KACtB,IAAM,MAAM,CAAC;AAGf;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASa;IACdR;IACAE,mBACE;QACEO,MAAML;QACNM,OAAO;QACPC,SAAS;QACT,sEAAsE;QACtE,uEAAuE;QACvEC,QAAQ;QACRC,aACE;IACJ,GACA;QAAEC,UAAUhB;IAAU;IAExBI,mBACE;QACEO,MAAMN;QACNO,OAAO;QACPC,SAAS;QACTE,aACE;IACJ,GACA;QAAEC,UAAUhB;IAAU;IAExBL,MAAMsB,wBAAwB,CAAC;QAC7BD,UAAUhB;QACVkB,aAAa;QACb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgCC,GACDC,YAAY;QACZ;;;;;;;;;;KAUC,GACDC,aAAa;QACb,mEAAmE;QACnEC,eAAelB;QACf;;;;;;;;;;;;;;;;;;;;;KAqBC,GACDmB,SAAS;YACP,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,UAAU;YACV;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACP,kEAAkE;gBAClE,kDAAkD;gBAClDL,aAAa;gBACbM,WAAWlB;YACb;YACA;gBACEe,MAAM5B,MAAMgC,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAWjB;YACb;YACA;gBACEc,MAAM5B,MAAMgC,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAW3B;YACb;YACA;gBACEwB,MAAM5B,MAAMgC,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAWzB,gBAAgBQ;YAC7B;YACA;gBACEc,MAAM5B,MAAMgC,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAWzB,gBAAgBF;YAC7B;SACD;QACD+B,UAAU;YACR;gBACElB,OAAO;gBACPmB,MAAM;gBACN,iEAAiE;gBACjE,kEAAkE;gBAClE,sDAAsD;gBACtDC,aAAa;oBAAC;iBAAY;gBAC1B,8DAA8D;gBAC9D,kEAAkE;gBAClE,8DAA8D;gBAC9D,6BAA6B;gBAC7BC,UAAUnC;gBACVoC,UAAU;gBACVC,MAAM;oBAAEC,MAAMxC,6BAA6BwC,IAAI;gBAAC;gBAChDC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEC,MAAMxC,6BAA6BwC,IAAI;oBAAC;oBAChDE,WAAW;gBACb;gBACAZ,WAAWnB;YACb;SACD;QACD;;;;;;;;;;;;;;;KAeC,GACDgC,aAAa;YACX;gBACE3B,OAAO;gBACPmB,MAAM;gBACNE,UAAUnC;gBACVoC,UAAU;gBACVM,UAAU,CAAC;gBACXL,MAAM;oBAAEC,MAAMxC,6BAA6BwC,IAAI;gBAAC;gBAChDC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEC,MAAMxC,6BAA6BwC,IAAI;oBAAC;oBAChDE,WAAW;oBACXG,YAAY;gBACd;gBACAf,WAAWnB;YACb;SACD;IACH;AACF"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiCardAccountDetailsOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nimport { CRM_CONSOLE_SECTIONS } from './components/crm-console-sections'\nimport { CrmGlanceCard } from './components/crm-glance-card'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCrmTransferResourceUis } from './transfer/ui'\nimport { withCrmOrgMount } from './hooks/use-crm-org-mount'\nimport { registerCrmRecordCounts } from './model/crm-record-counts'\nimport { registerCrmRecordRoutes } from './model/crm-record-routes'\nimport { registerCrmRecordLists } from './model/crm-record-lists'\nimport { CRM_SEARCH_SOURCES } from './model/crm-search-sources'\nimport { registerPluginZone } from '@aglyn/aglyn/plugin-manager/plugin-zones'\nimport { registerPluginTransferResourceUi } from '@aglyn/aglyn/plugin-manager/plugin-transfer-resources'\nimport { CRM_RECORD_ATTRIBUTION_ZONE } from './components/crm-attribution-zone'\nimport { CRM_RECORD_BOOKING_ZONE } from './components/crm-booking-zone'\n\n/** Code-split: the CRM hub only loads when opened. */\nconst CrmConsolePage = lazy(\n  () => import('./components/crm-console-page'),\n)\n/** The dashboard glance, split the same way: it loads where the slot mounts it. */\n/** Where a form's fields save on a contact, drawn on the form's own page. */\nconst FormContactFieldsCard = lazy(\n  () => import('./components/form-contact-fields-card'),\n)\n\nconst CrmTasksDueCard = lazy(\n  () => import('./components/crm-tasks-due-card'),\n)\n\n/**\n * CRM feature plugin (AGL-395, the hub since AGL-2595). Console-only — its\n * records live in Firestore and have no canvas element, so there is no UI\n * bundle. The console half declares the CRM nav + hub through the\n * ConsoleExtension registry (release_crm gate via the nav tab); the\n * contacts section reads the `contactsPerHost` quota off the shell-passed\n * `org`.\n *\n * The plugin id is `crm` (AGL-2595). It was `contacts` while the surface was\n * one list; the id is persisted in every org's `enabledPlugins` and every\n * host's `disabledPlugins`, so the runtime read the old value as this one\n * until the stored documents had been rewritten, and the alias was retired\n * once that backfill reported nothing left (AGL-2614). The `/contacts`\n * address is a URL, not a stored id, and the nav item keeps redirecting it.\n */\nexport function registerCrmConsole(): void {\n  // How the Import & export hub names email templates in a workspace package (AGL-3535).\n  registerPluginTransferResourceUi('crm.email-templates', { label: 'Email templates' }, { pluginId: BUNDLE_ID })\n  registerCrmRecordRoutes()\n  // How the import wizard and the export dialog name the CRM's records (AGL-3527).\n  registerCrmTransferResourceUis(BUNDLE_ID)\n  // The CRM's records as another plugin's picker lists them (AGL-3080).\n  registerCrmRecordLists()\n  // The leads a site captured and the organization's contacts, counted for\n  // another plugin's figure.\n  registerCrmRecordCounts()\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_BOOKING_ZONE,\n      label: 'Book a meeting from a CRM record',\n      surface: 'console',\n      // One control in a record header's row of actions, and one beside the\n      // composer's fields: the page lays them out, so the zone adds nothing.\n      layout: 'bare',\n      description:\n        'In a record’s header and beside the one-to-one composer. A widget here offers the site’s bookable services and the link a visitor books one at; it is handed the site, the record and, from the composer, a way to insert the chosen link. It writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginZone(\n    {\n      zone: CRM_RECORD_ATTRIBUTION_ZONE,\n      label: 'Where a CRM record came from',\n      surface: 'console',\n      description:\n        'On a contact’s page and in a lead’s history. A widget here says which campaign or link brought the person; it is handed the site, what the record is and its id, and it writes nothing.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'CRM',\n    /*\n     * WHO may open the CRM, declared so the shell enforces it.\n     *\n     * `navTabId` below is a release flag, not authorization: it says whether\n     * the surface has shipped, and `FeatureGate` reads it as\n     * `released || isStaff`. Nothing above this page decided who among a\n     * workspace's members may read it, and the page is a full editor over\n     * org-shared people data — names, addresses, order history, notes,\n     * consent, and a CSV export of all of it.\n     *\n     * `data.manage` rather than a key of this plugin's own, because it is\n     * the catalog key whose subject is exactly this data. The Firestore\n     * rules place contacts in the org-shared data block with datasets and\n     * gate writes on `canWriteOrgData()` — owner, admin, editor — which is\n     * the population `data.manage` defaults to, so the console gate and the\n     * rules agree on the built-in roles by construction. A custom role or a\n     * per-member override then narrows the console further, and the rules\n     * stay the boundary for the data itself.\n     *\n     * Minting a `contacts.*` key instead would advertise a control that does\n     * not exist. Console contact writes are client-direct against the rules,\n     * so a new key would have no server enforcement point to sit on, and a\n     * permission a customer can untick that changes nothing is worse than\n     * its absence.\n     *\n     * A SITE COLLABORATOR holding it reaches this page deliberately. They\n     * are a real org member document, so this gate is the first thing that\n     * has ever asked about them here — and the answer is yes, scoped: the\n     * listener filters on `visibleTo`, the rules prove the same predicate\n     * per document, and every field the page shows is read through the\n     * viewing group's own facet. Refusing them outright would delete a\n     * shipped capability rather than close a hole.\n     */\n    permission: 'data.manage',\n    /*\n     * WHAT the workspace must have bought (AGL-2851). The CRM is included\n     * from Starter and a Free workspace has none of it, so the flag is\n     * declared once, here, and the shell refuses every surface this\n     * registers on a plan without it: the hub body at both mounts, every\n     * section and record beneath it, drawn locked beside the upgrade notice,\n     * and the dashboard cards. The nav tab stays, as every plan-locked tab\n     * does, because it is the way to that notice. The CRM's routes, `/v1`\n     * and the Firestore rules ask the same question where the data is\n     * (`server/suite-gate.ts`).\n     */\n    featureFlag: 'crm',\n    // What the console's search finds here, under the two gates above.\n    searchSources: CRM_SEARCH_SOURCES,\n    /*\n     * Dashboard cards (AGL-2599, AGL-2604): the site dashboard's `hostDashboard`\n     * slot composes this extension's permission over each, so a card appears\n     * only where the CRM is enabled and only for a reader who may open it —\n     * registered here rather than imported by the dashboard so the shell's\n     * enablement and entitlement gate decides whether a site that never turned\n     * the CRM on sees them, the rule every card on that row follows. The tasks\n     * card is a glance at the reader's own overdue and due-today work and\n     * renders nothing on a workspace that has never made a task; the glance\n     * card is four server-counted figures, each a link into the hub.\n     *\n     * Both name `features.crm`, as the extension does (AGL-2611, AGL-2851):\n     * the slot composes the two, so a plan without the CRM gets neither card\n     * — absent, not upsold, the treatment every gated card gets.\n     *\n     * The same two cards again on the organization's `orgDashboard` slot\n     * (AGL-2636) — the org's sites page — under the same flag, with the same\n     * ids: the id names the card, and it is one card totaling the whole\n     * organization there instead of one site. The shell hands that slot the\n     * org mount as a prop, and `withCrmOrgMount` is what puts the mount's\n     * provider around each card, since the sites page cannot import one.\n     */\n    widgets: [\n      // Which contact field each of a form's fields saves to, on the form's\n      // own page. The forms plugin hosts the zone and writes the form\n      // document; what a contact's fields ARE is this plugin's, so the card\n      // is too.\n      {\n        slot: 'formContactFields',\n        widgetId: 'crm-form-contact-fields',\n        title: 'Saves to contact fields',\n        // A contact's custom fields are part of the suite, so a workspace\n        // without it has none to map a form's field onto.\n        featureFlag: 'crm',\n        Component: FormContactFieldsCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: CrmTasksDueCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: CrmGlanceCard,\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-tasks-due',\n        title: 'Tasks due',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmTasksDueCard),\n      },\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.orgDashboard,\n        widgetId: 'crm-glance',\n        title: 'CRM at a glance',\n        featureFlag: 'crm',\n        Component: withCrmOrgMount(CrmGlanceCard),\n      },\n    ],\n    navItems: [\n      {\n        label: 'CRM',\n        href: '/crm',\n        // The address the surface had while it was one list. A link kept\n        // from then — a bookmark, a docs page, an email — still opens the\n        // hub rather than the shell's \"not available\" notice.\n        legacyHrefs: ['/contacts'],\n        // Sections as ROUTES (AGL-2595): each is a real URL the shell\n        // resolves and gates, so the page mounts the one being read and a\n        // bare `/crm` lands on the first. Every section inherits this\n        // item's `release_crm` gate.\n        sections: CRM_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-contacts',\n        icon: { path: mdiCardAccountDetailsOutline.path },\n        header: {\n          title: 'CRM',\n          icon: { path: mdiCardAccountDetailsOutline.path },\n          docsTopic: 'crm',\n        },\n        Component: CrmConsolePage,\n      },\n    ],\n    /*\n     * The ORGANIZATION's CRM hub (AGL-2630), at `/[orgSlug]/crm`: the same\n     * sections over every site at once, mounted with no site and the org's\n     * sites as `orgMount`. Its listeners carry no scope clause, so the\n     * shell's org route refuses a site collaborator on REACH before it asks\n     * the `data.manage` declared above; a permission alone, which a\n     * collaborator's role can carry, never opens it.\n     *\n     * It carries the SITE tab's id on purpose: `release_contacts` names\n     * `nav-tab-contacts`, so one flag holds both halves of the CRM, and the\n     * org half cannot ship while the site half is switched off. First among\n     * the organization's plugin tabs, beside Data, the org's other shared\n     * collection of records. The help opens the docs heading about this\n     * mount. Its old address, `/[orgSlug]/contacts`, is a console redirect\n     * (`consoleRedirects`), so it needs no `legacyHrefs` here.\n     */\n    orgNavItems: [\n      {\n        label: 'CRM',\n        href: '/crm',\n        sections: CRM_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-contacts',\n        tabOrder: -100,\n        icon: { path: mdiCardAccountDetailsOutline.path },\n        header: {\n          title: 'CRM',\n          icon: { path: mdiCardAccountDetailsOutline.path },\n          docsTopic: 'crm',\n          docsAnchor: '#at-the-organization-level',\n        },\n        Component: CrmConsolePage,\n      },\n    ],\n  })\n}\n"],"names":["Aglyn","mdiCardAccountDetailsOutline","lazy","CRM_CONSOLE_SECTIONS","CrmGlanceCard","BUNDLE_ID","registerCrmTransferResourceUis","withCrmOrgMount","registerCrmRecordCounts","registerCrmRecordRoutes","registerCrmRecordLists","CRM_SEARCH_SOURCES","registerPluginZone","registerPluginTransferResourceUi","CRM_RECORD_ATTRIBUTION_ZONE","CRM_RECORD_BOOKING_ZONE","CrmConsolePage","FormContactFieldsCard","CrmTasksDueCard","registerCrmConsole","label","pluginId","zone","surface","layout","description","registerConsoleExtension","displayName","permission","featureFlag","searchSources","widgets","slot","widgetId","title","Component","CONSOLE_WIDGET_SLOTS","hostDashboard","orgDashboard","navItems","href","legacyHrefs","sections","navTabId","icon","path","header","docsTopic","orgNavItems","tabOrder","docsAnchor"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,4BAA4B,QAAQ,yBAAwB;AACrE,SAASC,IAAI,QAAQ,QAAO;AAC5B,SAASC,oBAAoB,QAAQ,uCAAmC;AACxE,SAASC,aAAa,QAAQ,kCAA8B;AAC5D,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,8BAA8B,QAAQ,mBAAe;AAC9D,SAASC,eAAe,QAAQ,+BAA2B;AAC3D,SAASC,uBAAuB,QAAQ,+BAA2B;AACnE,SAASC,uBAAuB,QAAQ,+BAA2B;AACnE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,kBAAkB,QAAQ,gCAA4B;AAC/D,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,gCAAgC,QAAQ,wDAAuD;AACxG,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,uBAAuB,QAAQ,mCAA+B;AAEvE,oDAAoD,GACpD,MAAMC,iBAAiBd,KACrB,IAAM,MAAM,CAAC;AAEf,iFAAiF,GACjF,2EAA2E,GAC3E,MAAMe,wBAAwBf,KAC5B,IAAM,MAAM,CAAC;AAGf,MAAMgB,kBAAkBhB,KACtB,IAAM,MAAM,CAAC;AAGf;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASiB;IACd,uFAAuF;IACvFN,iCAAiC,uBAAuB;QAAEO,OAAO;IAAkB,GAAG;QAAEC,UAAUhB;IAAU;IAC5GI;IACA,iFAAiF;IACjFH,+BAA+BD;IAC/B,sEAAsE;IACtEK;IACA,yEAAyE;IACzE,2BAA2B;IAC3BF;IACAI,mBACE;QACEU,MAAMP;QACNK,OAAO;QACPG,SAAS;QACT,sEAAsE;QACtE,uEAAuE;QACvEC,QAAQ;QACRC,aACE;IACJ,GACA;QAAEJ,UAAUhB;IAAU;IAExBO,mBACE;QACEU,MAAMR;QACNM,OAAO;QACPG,SAAS;QACTE,aACE;IACJ,GACA;QAAEJ,UAAUhB;IAAU;IAExBL,MAAM0B,wBAAwB,CAAC;QAC7BL,UAAUhB;QACVsB,aAAa;QACb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgCC,GACDC,YAAY;QACZ;;;;;;;;;;KAUC,GACDC,aAAa;QACb,mEAAmE;QACnEC,eAAenB;QACf;;;;;;;;;;;;;;;;;;;;;KAqBC,GACDoB,SAAS;YACP,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,UAAU;YACV;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACP,kEAAkE;gBAClE,kDAAkD;gBAClDL,aAAa;gBACbM,WAAWlB;YACb;YACA;gBACEe,MAAMhC,MAAMoC,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAWjB;YACb;YACA;gBACEc,MAAMhC,MAAMoC,oBAAoB,CAACC,aAAa;gBAC9CJ,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAW/B;YACb;YACA;gBACE4B,MAAMhC,MAAMoC,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAW5B,gBAAgBW;YAC7B;YACA;gBACEc,MAAMhC,MAAMoC,oBAAoB,CAACE,YAAY;gBAC7CL,UAAU;gBACVC,OAAO;gBACPL,aAAa;gBACbM,WAAW5B,gBAAgBH;YAC7B;SACD;QACDmC,UAAU;YACR;gBACEnB,OAAO;gBACPoB,MAAM;gBACN,iEAAiE;gBACjE,kEAAkE;gBAClE,sDAAsD;gBACtDC,aAAa;oBAAC;iBAAY;gBAC1B,8DAA8D;gBAC9D,kEAAkE;gBAClE,8DAA8D;gBAC9D,6BAA6B;gBAC7BC,UAAUvC;gBACVwC,UAAU;gBACVC,MAAM;oBAAEC,MAAM5C,6BAA6B4C,IAAI;gBAAC;gBAChDC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEC,MAAM5C,6BAA6B4C,IAAI;oBAAC;oBAChDE,WAAW;gBACb;gBACAZ,WAAWnB;YACb;SACD;QACD;;;;;;;;;;;;;;;KAeC,GACDgC,aAAa;YACX;gBACE5B,OAAO;gBACPoB,MAAM;gBACNE,UAAUvC;gBACVwC,UAAU;gBACVM,UAAU,CAAC;gBACXL,MAAM;oBAAEC,MAAM5C,6BAA6B4C,IAAI;gBAAC;gBAChDC,QAAQ;oBACNZ,OAAO;oBACPU,MAAM;wBAAEC,MAAM5C,6BAA6B4C,IAAI;oBAAC;oBAChDE,WAAW;oBACXG,YAAY;gBACd;gBACAf,WAAWnB;YACb;SACD;IACH;AACF"}

package/src/lib/server/api-v1/contacts.js

@@ -15,7 +15,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { nameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
-import { CAPTURED_BY_HOST_FIELD, CONTACT_COMPANY_IDS_FIELD, CONTACT_FACETS_FIELD, CONTACT_FIELDS_MAX_PER_ORG, CONTACT_LIFECYCLE_STAGES, consentGroupForHost, contactFacetPath, createResourceUid, CRM_COLLECTIONS, CRM_MEDIA_IDS_MAX, isContactLifecycleStage, MARKETING_CONSENT_BY_HOST_FIELD, marketingConsentFieldsForGroup, marketingConsentHostIds, normalizeAddress, normalizeContactEmail, normalizeCrmMediaIds, normalizePhone, ORG_SCOPE_TOKEN, planContactCompanyLink, readContactCompanyLink, readContactCustomInput, readContactFacet, soloConsentGroup } from "@aglyn/aglyn/server";
+import { CAPTURED_BY_HOST_FIELD, composeContactName, CONTACT_BIRTHDATE_REFUSAL, CONTACT_COMPANY_IDS_FIELD, CONTACT_EXTRA_PHONE_FIELDS, CONTACT_FACETS_FIELD, CONTACT_FIELDS_MAX_PER_ORG, CONTACT_LIFECYCLE_STAGES, CONTACT_NAME_PART_MAX, consentGroupForHost, contactFacetPath, createResourceUid, CRM_COLLECTIONS, CRM_LEAD_SOURCE_PICKLIST, CRM_MEDIA_IDS_MAX, CRM_SALUTATION_PICKLIST, isContactLifecycleStage, judgeCrmPicklistValue, MARKETING_CONSENT_BY_HOST_FIELD, marketingConsentFieldsForGroup, marketingConsentHostIds, normalizeAddress, normalizeContactBirthdate, normalizeContactEmail, normalizeCrmMediaIds, normalizePhone, ORG_SCOPE_TOKEN, planContactCompanyLink, readContactCompanyLink, readContactCustomInput, readContactFacet, soloConsentGroup } from "@aglyn/aglyn/server";
 import { ApiErrors, apiJson, contactCompanyMirrorValue, crmRecordsQuotaForOrg, listResponse, restampCrmListFieldsAt, settleCompanyContactsCounts } from "@aglyn/tenant-data-admin";
 import { claimWrite, orgOwnsHost, paginate, readJsonBody, requireScope, serialize } from "@aglyn/tenant-data-admin/server/api-v1-kit";
 // The leaf, so a spec that stands a partial barrel in still reaches it.
@@ -28,7 +28,11 @@ import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-emai
 import { deleteWholeContact, removeContactKeepingRefusals } from "@aglyn/tenant-data-admin/server/retained-refusals";
 import { FieldPath, Timestamp } from "firebase-admin/firestore";
 import { mergeContactRoute } from "./contacts-merge.js";
-import { CRM_ID_MAX, CRM_LABEL_MAX, createPayload, crmRefErrors, memberError, readChoice, readOptionalText, readRefId, updatePayload } from "./crm-shared.js";
+import { sweepDealContactRoles } from "../deal-contact-roles.js";
+import { cachedContactReader, clearReportsToOf, CONTACT_REPORTS_TO_LOOP_REFUSAL, CONTACT_REPORTS_TO_SELF_REFUSAL, contactReportsToLoops } from "../contact-reports-to.js";
+import { readCrmPicklist } from "../read-picklist.js";
+import { CRM_ID_MAX, CRM_LABEL_MAX, createPayload, crmRefErrors, memberError, readChoice, readOptionalText, readOrgLeadSourcePicklist, readRefId, updatePayload } from "./crm-shared.js";
+import { resolveCrmPicklistWrite } from "../read-picklist.js";
 /**
  * `/v1/contacts` (AGL-618, AGL-2276, AGL-2606): the organization's people —
  * list, read, create, update, delete, and `POST /v1/contacts/{id}/merge` —
@@ -76,10 +80,27 @@ import { CRM_ID_MAX, CRM_LABEL_MAX, createPayload, crmRefErrors, memberError, re
     'address',
     'ownerUid',
     'lifecycleStage',
+    // The holder's Lead source, one of the org's picklist values (AGL-3511).
+    'leadSource',
     // Files are a facet field like the rest (AGL-2662): an agency running two
     // client brands has one contact document between them, and a contract one
     // client filed is not the other client's to read.
-    'mediaIds'
+    'mediaIds',
+    // Salesforce's standard contact fields (AGL-3515), per holder like the rest.
+    'salutation',
+    'firstName',
+    'lastName',
+    'department',
+    'mobilePhone',
+    'homePhone',
+    'otherPhone',
+    'fax',
+    'birthdate',
+    'assistantName',
+    'assistantPhone',
+    'reportsToContactId',
+    'otherAddress',
+    'doNotCall'
 ];
 /** The groups holding a facet on this row, in stable order. */ function contactFacetHolders(data) {
     const facets = data[CONTACT_FACETS_FIELD];
@@ -93,9 +114,25 @@ function contactCrmProfile(data, groupId) {
         address: null,
         ownerUid: null,
         lifecycleStage: null,
+        leadSource: null,
         // An empty ARRAY rather than null, so a client can index it without a
         // guard — the same shape `custom` publishes for the same reason.
-        mediaIds: []
+        mediaIds: [],
+        salutation: null,
+        firstName: null,
+        lastName: null,
+        department: null,
+        mobilePhone: null,
+        homePhone: null,
+        otherPhone: null,
+        fax: null,
+        birthdate: null,
+        assistantName: null,
+        assistantPhone: null,
+        reportsToContactId: null,
+        otherAddress: null,
+        // A flag reads `false` rather than null: unset IS "may be called".
+        doNotCall: false
     };
     for (const holder of groupId ? [
         groupId
@@ -111,6 +148,10 @@ function contactCrmProfile(data, groupId) {
                 if (!held.length) profile[field] = normalizeCrmMediaIds(value);
                 continue;
             }
+            if (field === 'doNotCall') {
+                if (value === true) profile[field] = true;
+                continue;
+            }
             if (profile[field] === null && value !== undefined && value !== null) {
                 profile[field] = value;
             }
@@ -303,6 +344,9 @@ function readContactInput(body, { partial }) {
     }
     const ownerUid = readOptionalText(body, 'ownerUid', CONTACT_NAME_MAX, errors);
     if (ownerUid !== undefined) crm.ownerUid = ownerUid;
+    // Shape only here; the org's list judges the value in `contactCrmRefErrors`.
+    const leadSource = readOptionalText(body, 'leadSource', CRM_LABEL_MAX, errors);
+    if (leadSource !== undefined) crm.leadSource = leadSource;
     if (body.mediaIds !== undefined) {
         if (!Array.isArray(body.mediaIds)) {
             errors.mediaIds = 'Must be an array of media ids';
@@ -320,6 +364,60 @@ function readContactInput(body, { partial }) {
         const stage = readChoice(body, 'lifecycleStage', CONTACT_LIFECYCLE_STAGES, errors);
         if (stage) crm.lifecycleStage = stage;
     }
+    /*
+   * Salesforce's standard contact fields (AGL-3515), through the normalizers
+   * the console's profile route uses. The salutation and the reports-to are
+   * judged after this pass, against the org's list and its contacts.
+   */ const salutation = readOptionalText(body, 'salutation', CRM_LABEL_MAX, errors);
+    if (salutation !== undefined) crm.salutation = salutation;
+    for (const key of [
+        'firstName',
+        'lastName'
+    ]){
+        const part = readOptionalText(body, key, CONTACT_NAME_PART_MAX, errors);
+        if (part !== undefined) crm[key] = part;
+    }
+    for (const key of [
+        'department',
+        'assistantName'
+    ]){
+        const text = readOptionalText(body, key, CONTACT_NAME_MAX, errors);
+        if (text !== undefined) crm[key] = text;
+    }
+    for (const key of CONTACT_EXTRA_PHONE_FIELDS){
+        const text = readOptionalText(body, key, CRM_LABEL_MAX, errors);
+        if (text === null) {
+            crm[key] = null;
+        } else if (text !== undefined) {
+            const normalized = normalizePhone(text);
+            if (normalized) crm[key] = normalized;
+            else errors[key] = 'Must be a phone number with a country code, like +15125550123';
+        }
+    }
+    const birthdate = readOptionalText(body, 'birthdate', 32, errors);
+    if (birthdate === null) {
+        crm.birthdate = null;
+    } else if (birthdate !== undefined) {
+        const normalized = normalizeContactBirthdate(birthdate);
+        if (normalized) crm.birthdate = normalized;
+        else errors.birthdate = CONTACT_BIRTHDATE_REFUSAL;
+    }
+    const reportsTo = readRefId(body, 'reportsToContactId', errors);
+    if (reportsTo !== undefined) crm.reportsToContactId = reportsTo;
+    if (body.otherAddress !== undefined) {
+        if (body.otherAddress === null) {
+            crm.otherAddress = null;
+        } else if (typeof body.otherAddress !== 'object' || Array.isArray(body.otherAddress)) {
+            errors.otherAddress = 'Must be an address object';
+        } else {
+            crm.otherAddress = normalizeAddress(body.otherAddress);
+        }
+    }
+    if (body.doNotCall !== undefined) {
+        if (body.doNotCall === null || body.doNotCall === false) crm.doNotCall = null;
+        else if (body.doNotCall === true) crm.doNotCall = true;
+        else errors.doNotCall = 'Must be true or false';
+    }
     values.crm = crm;
     // Whether the body MEANT to write a profile — judged by the keys it sent,
     // not by which of them parsed, so a body whose every profile value was
@@ -380,15 +478,92 @@ function readContactInput(body, { partial }) {
  * and `companyId`, so a contact cannot point at a company `/v1/deals` would
  * refuse. Run after the synchronous grammar, so a body already refused never
  * spends the reads.
- */ async function contactCrmRefErrors(ctx, crm) {
+ */ async function contactCrmRefErrors(ctx, crm, at = {
+    contactId: null
+}) {
     var _crm_companyId;
-    const [owner, refs] = await Promise.all([
+    var _facetAt;
+    const [owner, refs, leadSource, salutation, reportsTo] = await Promise.all([
         memberError(ctx, 'ownerUid', crm.ownerUid),
         crmRefErrors(ctx, {
             companyId: (_crm_companyId = crm.companyId) != null ? _crm_companyId : undefined
-        })
+        }),
+        // The holder's current lead source is kept even when the list no longer offers it.
+        contactLeadSourceErrors(ctx, crm, (_facetAt = facetAt(ctx, at)) == null ? void 0 : _facetAt.facet.leadSource),
+        contactSalutationError(ctx, crm, at),
+        contactReportsToError(ctx, crm, at)
     ]);
-    return _extends({}, owner, refs);
+    return _extends({}, owner, refs, leadSource, salutation, reportsTo);
+}
+/**
+ * The lead source a contact write stores (AGL-3511), judged against the
+ * org's Lead source list exactly as a lead's is: an active value stores the
+ * list's spelling, the holder's current value is always kept, and anything
+ * else is refused naming what the list allows. Rewrites `crm.leadSource` to
+ * the label the list spells. A contact takes no default — the list's default
+ * is for a new LEAD.
+ */ async function contactLeadSourceErrors(ctx, crm, current) {
+    var _resolved_write;
+    if (typeof crm.leadSource !== 'string') return {};
+    const resolved = resolveCrmPicklistWrite(CRM_LEAD_SOURCE_PICKLIST, await readOrgLeadSourcePicklist(ctx), crm.leadSource, {
+        current,
+        created: false
+    });
+    if (resolved.ok === false) return {
+        leadSource: resolved.error
+    };
+    crm.leadSource = (_resolved_write = resolved.write) != null ? _resolved_write : null;
+    return {};
+}
+/** The facet a write at `at` reads its current values from. */ function facetAt(ctx, at) {
+    if (!at.data || !at.siteId) return null;
+    const group = consentGroupForHost(ctx.org, at.siteId);
+    return {
+        groupId: group.groupId,
+        facet: readContactFacet(at.data, group.groupId)
+    };
+}
+/**
+ * The salutation, judged against the org's list (AGL-3515) the way the
+ * console's route judges it: an active value stores the list's spelling,
+ * the value the contact already holds is kept, anything else is named with
+ * the values allowed. Rewrites `crm.salutation` to the stored spelling.
+ */ async function contactSalutationError(ctx, crm, at) {
+    var _judged_value;
+    var _facetAt;
+    if (!crm.salutation) return {};
+    const judged = judgeCrmPicklistValue(CRM_SALUTATION_PICKLIST, await readCrmPicklist(ctx.firestore, ctx.orgId, CRM_SALUTATION_PICKLIST), crm.salutation, (_facetAt = facetAt(ctx, at)) == null ? void 0 : _facetAt.facet.salutation);
+    if (judged.ok === false) return {
+        salutation: judged.error
+    };
+    crm.salutation = (_judged_value = judged.value) != null ? _judged_value : null;
+    return {};
+}
+/**
+ * The reports-to (AGL-3515): a contact of this organization, never the
+ * contact itself, and never one whose own chain — through the named site's
+ * facets — leads back to it.
+ */ async function contactReportsToError(ctx, crm, at) {
+    const managerId = crm.reportsToContactId;
+    if (!managerId) return {};
+    if (managerId === at.contactId) {
+        return {
+            reportsToContactId: CONTACT_REPORTS_TO_SELF_REFUSAL
+        };
+    }
+    const read = cachedContactReader(contactsCollection(ctx));
+    if (!await read(managerId)) {
+        return {
+            reportsToContactId: 'No such contact in this organization'
+        };
+    }
+    const facet = facetAt(ctx, at);
+    if (at.contactId && facet && await contactReportsToLoops(read, at.contactId, managerId, facet.groupId)) {
+        return {
+            reportsToContactId: CONTACT_REPORTS_TO_LOOP_REFUSAL
+        };
+    }
+    return {};
 }
 /**
  * The facet a create writes when the body carried a CRM profile field, under
@@ -402,6 +577,9 @@ function readContactInput(body, { partial }) {
  */ function contactCrmCreateFields(ctx, crm, siteId) {
     const stored = createPayload(crm);
     if (Object.keys(stored).length === 0) return {};
+    // The holder's name is the first and last names' when either was given.
+    const composed = composeContactName(crm.firstName, crm.lastName);
+    if (composed) stored['name'] = composed;
     const group = consentGroupForHost(ctx.org, siteId);
     return _extends({
         [CONTACT_FACETS_FIELD]: {
@@ -439,6 +617,15 @@ function readContactInput(body, { partial }) {
     for (const [field, value] of Object.entries(updatePayload(crm))){
         update[contactFacetPath(group.groupId, field)] = value;
     }
+    /*
+   * The holder's name follows the first and last names (AGL-3515): either
+   * sent recomposes it from what the facet will hold, and both cleared
+   * leave it as it stands.
+   */ if (crm.firstName !== undefined || crm.lastName !== undefined) {
+        const facet = readContactFacet(data, group.groupId);
+        const composed = composeContactName(crm.firstName === undefined ? facet.firstName : crm.firstName, crm.lastName === undefined ? facet.lastName : crm.lastName);
+        if (composed) update[contactFacetPath(group.groupId, 'name')] = composed;
+    }
     let link = null;
     if (crm.companyId !== undefined) {
         link = planContactCompanyLink(readContactCompanyLink(data, group.groupId), crm.companyId);
@@ -586,6 +773,8 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
             headers: ctx.headers
         });
     }
+    // The canonical name, or the first and last names' for a body with only those.
+    const canonicalName = name || composeContactName(crm.firstName, crm.lastName);
     const collection = contactsCollection(ctx);
     const claimed = await claimWrite(ctx, '*', request.headers.get('Idempotency-Key'), 'contacts');
     if ('replay' in claimed) return claimed.replay;
@@ -625,7 +814,7 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
         const id = createResourceUid();
         await collection.doc(id).create(_extends({
             email
-        }, name ? nameSearchFields(name) : {}, {
+        }, canonicalName ? nameSearchFields(canonicalName) : {}, {
             tags: tags != null ? tags : []
         }, notes ? {
             notes
@@ -695,6 +884,7 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
  * does not grow the audience, and charging a plan refusal for renaming
  * somebody would make a downgraded org unable to correct its own data.
  */ async function updateContact(request, ctx, contactRef) {
+    var _snap_data;
     const parsed = readContactInput(await readJsonBody(request), {
         partial: true
     });
@@ -724,7 +914,11 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
             headers: ctx.headers
         });
     }
-    const crmErrors = await contactCrmRefErrors(ctx, crm);
+    const crmErrors = await contactCrmRefErrors(ctx, crm, {
+        contactId: contactRef.id,
+        siteId: consentSiteId,
+        data: (_snap_data = snap.data()) != null ? _snap_data : {}
+    });
     if (Object.keys(crmErrors).length) {
         return ApiErrors.badRequest({
             message: 'Contact failed validation',
@@ -788,8 +982,8 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
     }
     let link = null;
     if (consentSiteId) {
-        var _snap_data;
-        const crmFields = contactCrmUpdateFields(ctx, (_snap_data = snap.data()) != null ? _snap_data : {}, crm, consentSiteId);
+        var _snap_data1;
+        const crmFields = contactCrmUpdateFields(ctx, (_snap_data1 = snap.data()) != null ? _snap_data1 : {}, crm, consentSiteId);
         Object.assign(update, crmFields.update);
         link = crmFields.link;
     }
@@ -820,7 +1014,10 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
  * Deletes the document whoever else holds it, and keeps every refusal it
  * held — each site's and the unscoped one — in the organization's retained
  * store in the same transaction (AGL-3338), so deleting a person over the
- * API is not a way to add somebody who said no to a list.
+ * API is not a way to add somebody who said no to a list. Then what pointed
+ * at the person goes: every other contact's reports-to naming them, in
+ * every holder's facet (AGL-3537), and their contact roles on deals
+ * (AGL-3521).
  *
  * Takes an `Idempotency-Key` with `deleteRecord`'s exact semantics, and for a
  * sharper reason: an erasure request is the operation most likely to be run
@@ -831,9 +1028,14 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
     if ('replay' in claimed) return claimed.replay;
     const { claim } = claimed;
     try {
+        // The holders whose facets may name the person as a reports-to (AGL-3537).
+        let holders = [];
         const removed = await removeContactKeepingRefusals({
             contactRef,
-            decide: deleteWholeContact,
+            decide: (contact)=>{
+                holders = contactFacetHolders(contact);
+                return deleteWholeContact(contact);
+            },
             nowMs: Date.now()
         });
         if (removed.outcome === 'missing') {
@@ -843,6 +1045,10 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
                 headers: ctx.headers
             });
         }
+        // Nobody reports to a deleted person (AGL-3537)…
+        await clearReportsToOf(ctx.firestore, ctx.firestore.collection('orgs').doc(ctx.orgId).collection('contacts'), holders, contactRef.id);
+        // …and they leave every deal's contact roles (AGL-3521).
+        await sweepDealContactRoles(ctx.firestore, ctx.firestore.collection('orgs').doc(ctx.orgId).collection(CRM_COLLECTIONS.deals), contactRef.id, null, '[api-v1] contacts delete');
         const view = {
             id: contactRef.id,
             object: 'contact',