@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/companies-import.js

@@ -1,242 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * `POST /api/crm/companies-import` — one chunk of a companies file, written
- * (AGL-2621).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link COMPANY_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-company-import.ts` defines. This route judges
- * each one through the same normalizers the company drawer runs, and
- * writes it — the ONLY place either happens, so a stale tab cannot store
- * something the server would have refused.
- *
- * ## Matched by domain, then by name
- *
- * A row is one company the org may already have. The domain is a key and
- * the name a spelling, so a row with a domain is looked up by it first,
- * and by the name's search key when no company carries the domain or the
- * row has none — two files calling one business "Acme" and "Acme Inc" meet
- * at `acme.com`, and a file with no domain column still finds "Acme" by
- * name. Both lookups are narrowed to what the caller's scope can see: two
- * clients of one agency may each have an "Acme" and must each get their
- * own. A match is UPDATED with what the row carries, tags unioned; no
- * match is CREATED with the stamp every CRM creator writes.
- *
- * ## The band is counted once per request
- *
- * A created company is a CRM record and meets the records band (AGL-2611).
- * The aggregate is taken once at the first create and the verdict re-judged
- * locally as the request creates more — `checkCrmRecordsQuota` is pure over
- * a count — so two hundred rows cost three aggregate reads, not six
- * hundred. A metered plan never refuses; a hard band refuses the rows past
- * it as `records-band`, and updates to matched companies go through either
- * way, because an update adds no record.
- */ import { checkCrmRecordsQuota, CRM_COLLECTIONS, crmCompanyListFields, crmNewRecordListFields, fieldDefinitionsForObject, nameSearchFields, visibleToTokens } from "@aglyn/aglyn/server";
-import { COMPANY_IMPORT_CHUNK_SIZE, COMPANY_IMPORT_MAX_BODY_BYTES, companyImportMatchKey, normalizeCompanyImportRow } from "../model/crm-company-import.js";
-import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
-import { FieldValue } from "firebase-admin/firestore";
-import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
-/** The company a row refers to in this scope — by domain, then by name — or `null`. */ async function findCompany(companies, readTokens, row) {
-    const seen = (snapshot)=>{
-        var _snapshot_docs_find;
-        return (_snapshot_docs_find = snapshot.docs.find((doc)=>visibleToTokens(doc.get('visibleTo'), readTokens))) != null ? _snapshot_docs_find : null;
-    };
-    if (row.domain) {
-        const byDomain = seen(await companies.where('domain', '==', row.domain).limit(10).get());
-        if (byDomain) return byDomain;
-    }
-    return seen(await companies.where('nameLower', '==', nameSearchFields(row.name).nameLower).limit(10).get());
-}
-/**
- * The fields a row writes — on a create and on an update alike. Only what
- * the row carries: an update must not clear a website the file did not
- * mention, so an absent optional is left absent here rather than deleted.
- */ function storedFields(row, ownerUid) {
-    return _extends({}, nameSearchFields(row.name), row.domain ? {
-        domain: row.domain
-    } : {}, row.website ? {
-        website: row.website
-    } : {}, row.phone ? {
-        phone: row.phone
-    } : {}, row.industry ? {
-        industry: row.industry
-    } : {}, ownerUid ? {
-        ownerUid
-    } : {}, row.address ? {
-        address: row.address
-    } : {}, row.notes ? {
-        notes: row.notes
-    } : {});
-}
-/**
- * The row's custom values as a MERGE writes them: one dotted path per key,
- * so a company already filed keeps every value the file did not carry
- * (AGL-2661). A create spreads the map itself — see the loop below.
- */ function customUpdate(row) {
-    return Object.fromEntries(Object.entries(row.custom).map(([key, value])=>[
-            `custom.${key}`,
-            value
-        ]));
-}
-/**
- * The org's live COMPANY field definitions (AGL-2661) — the contact
- * import's read, narrowed to the object this import writes. Read in full
- * and filtered in memory: a holder has a handful of fields, and a `where`
- * on `object` would need an index for a collection that fits in one page.
- */ async function loadCompanyFieldDefinitions(orgId, readTokens) {
-    const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.contactFields).limit(200).get();
-    return fieldDefinitionsForObject(snapshot.docs.map((doc)=>doc.data()), 'company').filter((field)=>!!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens));
-}
-/**
- * `POST crm/companies-import` — `{ hostId, rows }` → a {@link CompanyImportChunkResult}.
- *
- * Rows are written one after another rather than in parallel: two rows
- * for one company racing each other would each miss the other's create.
- */ export const crmCompaniesImportHandler = async (req, res)=>{
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        return res.status(405).json({
-            error: 'Method not allowed'
-        });
-    }
-    const read = readImportRows(req, {
-        maxBodyBytes: COMPANY_IMPORT_MAX_BODY_BYTES,
-        chunkSize: COMPANY_IMPORT_CHUNK_SIZE
-    });
-    if ('error' in read) return res.status(read.status).json({
-        error: read.error
-    });
-    try {
-        const context = await resolveImportContext(req);
-        if (context.ok === false) return res.status(context.status).json(context.body);
-        const skipped = [];
-        const dropped = {};
-        const normalized = [];
-        const fields = await loadCompanyFieldDefinitions(context.orgId, context.readTokens);
-        /*
-     * A duplicate WITHIN the request is skipped rather than merged: the
-     * second row would update the first's record and the count would read
-     * one created and one merged for one company in one file. Across
-     * requests the lookup answers, and reports a merge.
-     */ const seen = new Set();
-        read.rows.forEach((raw, index)=>{
-            const verdict = normalizeCompanyImportRow(raw, fields);
-            if (verdict.ok === false) {
-                skipped.push({
-                    index,
-                    name: verdict.input,
-                    reason: verdict.reason
-                });
-                return;
-            }
-            const key = companyImportMatchKey(verdict.row);
-            if (seen.has(key)) {
-                skipped.push({
-                    index,
-                    name: verdict.row.name,
-                    reason: 'duplicate'
-                });
-                return;
-            }
-            seen.add(key);
-            for (const entry of verdict.row.dropped){
-                var _dropped_entry_field;
-                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
-            }
-            normalized.push({
-                index,
-                row: verdict.row
-            });
-        });
-        const owners = await ownerDirectory(context.orgId, normalized.map((entry)=>entry.row));
-        const ownersUnresolved = new Set();
-        const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
-        const companies = orgRef.collection(CRM_COLLECTIONS.companies);
-        const stamp = creationStamp(context);
-        let counted = null;
-        let createdHere = 0;
-        let created = 0;
-        let merged = 0;
-        for (const { index, row } of normalized){
-            let ownerUid;
-            if (row.ownerEmail) {
-                ownerUid = owners.get(row.ownerEmail);
-                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
-            }
-            const existing = await findCompany(companies, context.readTokens, row);
-            const stored = storedFields(row, ownerUid);
-            if (existing) {
-                await existing.ref.update(_extends({}, stored, crmCompanyListFields(_extends({}, existing.data(), stored)), row.tags.length ? {
-                    tags: FieldValue.arrayUnion(...row.tags)
-                } : {}, customUpdate(row), {
-                    updatedAt: FieldValue.serverTimestamp()
-                }));
-                merged += 1;
-                continue;
-            }
-            if (!counted) counted = await crmRecordsQuotaForOrg(context.org, orgRef);
-            const room = checkCrmRecordsQuota(context.org, counted.crmRecordsCount + createdHere);
-            if (!room.allowed) {
-                skipped.push({
-                    index,
-                    name: row.name,
-                    reason: 'records-band'
-                });
-                continue;
-            }
-            await companies.add(_extends({}, stored, {
-                tags: row.tags
-            }, Object.keys(row.custom).length ? {
-                custom: row.custom
-            } : {}, stamp, crmNewRecordListFields('companies', _extends({}, stored, stamp))));
-            createdHere += 1;
-            created += 1;
-        }
-        const result = {
-            received: read.rows.length,
-            created,
-            merged,
-            skipped: skipped.sort((a, b)=>a.index - b.index),
-            dropped,
-            ownersUnresolved: [
-                ...ownersUnresolved
-            ]
-        };
-        return res.status(200).json(result);
-    } catch (error) {
-        console.error('crm/companies-import failed', error);
-        return res.status(500).json({
-            error: 'The import could not continue.'
-        });
-    }
-};
-/**
- * What every company this import CREATES carries beside its fields: the
- * scope every CRM creator stamps, the site as provenance, who imported it,
- * and the clocks. A record written without `visibleTo` is seen by nobody.
- */ function creationStamp(context) {
-    return {
-        hostId: context.hostId,
-        visibleTo: context.scopeTokens,
-        createdByUid: context.uid,
-        createdAt: FieldValue.serverTimestamp(),
-        updatedAt: FieldValue.serverTimestamp()
-    };
-}
-
-//# sourceMappingURL=companies-import.js.map

package/src/lib/server/companies-import.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/companies-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/companies-import` — one chunk of a companies file, written\n * (AGL-2621).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link COMPANY_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-company-import.ts` defines. This route judges\n * each one through the same normalizers the company drawer runs, and\n * writes it — the ONLY place either happens, so a stale tab cannot store\n * something the server would have refused.\n *\n * ## Matched by domain, then by name\n *\n * A row is one company the org may already have. The domain is a key and\n * the name a spelling, so a row with a domain is looked up by it first,\n * and by the name's search key when no company carries the domain or the\n * row has none — two files calling one business \"Acme\" and \"Acme Inc\" meet\n * at `acme.com`, and a file with no domain column still finds \"Acme\" by\n * name. Both lookups are narrowed to what the caller's scope can see: two\n * clients of one agency may each have an \"Acme\" and must each get their\n * own. A match is UPDATED with what the row carries, tags unioned; no\n * match is CREATED with the stamp every CRM creator writes.\n *\n * ## The band is counted once per request\n *\n * A created company is a CRM record and meets the records band (AGL-2611).\n * The aggregate is taken once at the first create and the verdict re-judged\n * locally as the request creates more — `checkCrmRecordsQuota` is pure over\n * a count — so two hundred rows cost three aggregate reads, not six\n * hundred. A metered plan never refuses; a hard band refuses the rows past\n * it as `records-band`, and updates to matched companies go through either\n * way, because an update adds no record.\n */\n\nimport {\n  checkCrmRecordsQuota,\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  crmCompanyListFields,\n  crmNewRecordListFields,\n  fieldDefinitionsForObject,\n  nameSearchFields,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  COMPANY_IMPORT_CHUNK_SIZE,\n  COMPANY_IMPORT_MAX_BODY_BYTES,\n  type CompanyImportChunkResult,\n  type CompanyImportRawRow,\n  type CompanyImportRow,\n  type CompanyImportSkippedRow,\n  companyImportMatchKey,\n  normalizeCompanyImportRow,\n} from '../model/crm-company-import'\nimport { crmRecordsQuotaForOrg, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\ntype Companies = FirebaseFirestore.CollectionReference\n\n/** The company a row refers to in this scope — by domain, then by name — or `null`. */\nasync function findCompany(\n  companies: Companies,\n  readTokens: readonly string[],\n  row: Pick<CompanyImportRow, 'name' | 'domain'>,\n): Promise<FirebaseFirestore.QueryDocumentSnapshot | null> {\n  const seen = (snapshot: FirebaseFirestore.QuerySnapshot) =>\n    snapshot.docs.find((doc) => visibleToTokens(doc.get('visibleTo'), readTokens)) ?? null\n  if (row.domain) {\n    const byDomain = seen(\n      await companies.where('domain', '==', row.domain).limit(10).get(),\n    )\n    if (byDomain) return byDomain\n  }\n  return seen(\n    await companies\n      .where('nameLower', '==', nameSearchFields(row.name).nameLower)\n      .limit(10)\n      .get(),\n  )\n}\n\n/**\n * The fields a row writes — on a create and on an update alike. Only what\n * the row carries: an update must not clear a website the file did not\n * mention, so an absent optional is left absent here rather than deleted.\n */\nfunction storedFields(\n  row: CompanyImportRow,\n  ownerUid: string | undefined,\n): Record<string, unknown> {\n  return {\n    ...nameSearchFields(row.name),\n    ...(row.domain ? { domain: row.domain } : {}),\n    ...(row.website ? { website: row.website } : {}),\n    ...(row.phone ? { phone: row.phone } : {}),\n    ...(row.industry ? { industry: row.industry } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.address ? { address: row.address } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n  }\n}\n\n/**\n * The row's custom values as a MERGE writes them: one dotted path per key,\n * so a company already filed keeps every value the file did not carry\n * (AGL-2661). A create spreads the map itself — see the loop below.\n */\nfunction customUpdate(row: CompanyImportRow): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(row.custom).map(([key, value]) => [`custom.${key}`, value]),\n  )\n}\n\n/**\n * The org's live COMPANY field definitions (AGL-2661) — the contact\n * import's read, narrowed to the object this import writes. Read in full\n * and filtered in memory: a holder has a handful of fields, and a `where`\n * on `object` would need an index for a collection that fits in one page.\n */\nasync function loadCompanyFieldDefinitions(\n  orgId: string,\n  readTokens: readonly string[],\n): Promise<ContactFieldDefinition[]> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.contactFields)\n    .limit(200)\n    .get()\n  return fieldDefinitionsForObject(\n    snapshot.docs.map((doc) => doc.data() as ContactFieldDefinition),\n    'company',\n  ).filter(\n    (field) =>\n      !!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens),\n  )\n}\n\n/**\n * `POST crm/companies-import` — `{ hostId, rows }` → a {@link CompanyImportChunkResult}.\n *\n * Rows are written one after another rather than in parallel: two rows\n * for one company racing each other would each miss the other's create.\n */\nexport const crmCompaniesImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<CompanyImportRawRow>(req, {\n    maxBodyBytes: COMPANY_IMPORT_MAX_BODY_BYTES,\n    chunkSize: COMPANY_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: CompanyImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: CompanyImportRow }[] = []\n    const fields = await loadCompanyFieldDefinitions(context.orgId, context.readTokens)\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged: the\n     * second row would update the first's record and the count would read\n     * one created and one merged for one company in one file. Across\n     * requests the lookup answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeCompanyImportRow(raw, fields)\n      if (verdict.ok === false) {\n        skipped.push({ index, name: verdict.input, reason: verdict.reason })\n        return\n      }\n      const key = companyImportMatchKey(verdict.row)\n      if (seen.has(key)) {\n        skipped.push({ index, name: verdict.row.name, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    const owners = await ownerDirectory(\n      context.orgId,\n      normalized.map((entry) => entry.row),\n    )\n    const ownersUnresolved = new Set<string>()\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId)\n    const companies = orgRef.collection(CRM_COLLECTIONS.companies)\n    const stamp = creationStamp(context)\n    let counted: { crmRecordsCount: number } | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row } of normalized) {\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const existing = await findCompany(companies, context.readTokens, row)\n      const stored = storedFields(row, ownerUid)\n      if (existing) {\n        await existing.ref.update({\n          ...stored,\n          // The file may rename the company: what the list searches follows.\n          ...crmCompanyListFields({ ...existing.data(), ...stored }),\n          ...(row.tags.length ? { tags: FieldValue.arrayUnion(...row.tags) } : {}),\n          ...customUpdate(row),\n          updatedAt: FieldValue.serverTimestamp(),\n        })\n        merged += 1\n        continue\n      }\n      if (!counted) counted = await crmRecordsQuotaForOrg(context.org as never, orgRef)\n      const room = checkCrmRecordsQuota(\n        context.org as never,\n        counted.crmRecordsCount + createdHere,\n      )\n      if (!room.allowed) {\n        skipped.push({ index, name: row.name, reason: 'records-band' })\n        continue\n      }\n      await companies.add({\n        ...stored,\n        tags: row.tags,\n        ...(Object.keys(row.custom).length ? { custom: row.custom } : {}),\n        ...stamp,\n        // What the Companies list searches and filters by (AGL-3321).\n        ...crmNewRecordListFields('companies', { ...stored, ...stamp }),\n      })\n      createdHere += 1\n      created += 1\n    }\n\n    const result: CompanyImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/companies-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n\n/**\n * What every company this import CREATES carries beside its fields: the\n * scope every CRM creator stamps, the site as provenance, who imported it,\n * and the clocks. A record written without `visibleTo` is seen by nobody.\n */\nfunction creationStamp(\n  context: Extract<ImportContext, { ok: true }>,\n): Record<string, unknown> {\n  return {\n    hostId: context.hostId,\n    visibleTo: context.scopeTokens,\n    createdByUid: context.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  }\n}\n"],"names":["checkCrmRecordsQuota","CRM_COLLECTIONS","crmCompanyListFields","crmNewRecordListFields","fieldDefinitionsForObject","nameSearchFields","visibleToTokens","COMPANY_IMPORT_CHUNK_SIZE","COMPANY_IMPORT_MAX_BODY_BYTES","companyImportMatchKey","normalizeCompanyImportRow","crmRecordsQuotaForOrg","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","findCompany","companies","readTokens","row","seen","snapshot","docs","find","doc","get","domain","byDomain","where","limit","name","nameLower","storedFields","ownerUid","website","phone","industry","address","notes","customUpdate","Object","fromEntries","entries","custom","map","key","value","loadCompanyFieldDefinitions","orgId","app","firestore","collection","contactFields","data","filter","field","retiredAt","visibleTo","crmCompaniesImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","fields","Set","rows","forEach","raw","index","verdict","push","input","reason","has","add","entry","owners","ownersUnresolved","orgRef","stamp","creationStamp","counted","createdHere","created","merged","ownerEmail","existing","stored","ref","update","tags","length","arrayUnion","updatedAt","serverTimestamp","org","room","crmRecordsCount","allowed","keys","result","received","sort","a","b","console","hostId","scopeTokens","createdByUid","uid","createdAt"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCC,GAED,SACEA,oBAAoB,EAEpBC,eAAe,EACfC,oBAAoB,EACpBC,sBAAsB,EACtBC,yBAAyB,EACzBC,gBAAgB,EAEhBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,yBAAyB,EACzBC,6BAA6B,EAK7BC,qBAAqB,EACrBC,yBAAyB,QACpB,iCAA6B;AACpC,SAASC,qBAAqB,EAAEC,aAAa,QAAQ,2BAA0B;AAC/E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAIzB,qFAAqF,GACrF,eAAeC,YACbC,SAAoB,EACpBC,UAA6B,EAC7BC,GAA8C;IAE9C,MAAMC,OAAO,CAACC;YACZA;gBAAAA,sBAAAA,SAASC,IAAI,CAACC,IAAI,CAAC,CAACC,MAAQnB,gBAAgBmB,IAAIC,GAAG,CAAC,cAAcP,wBAAlEG,sBAAkF;;IACpF,IAAIF,IAAIO,MAAM,EAAE;QACd,MAAMC,WAAWP,KACf,MAAMH,UAAUW,KAAK,CAAC,UAAU,MAAMT,IAAIO,MAAM,EAAEG,KAAK,CAAC,IAAIJ,GAAG;QAEjE,IAAIE,UAAU,OAAOA;IACvB;IACA,OAAOP,KACL,MAAMH,UACHW,KAAK,CAAC,aAAa,MAAMxB,iBAAiBe,IAAIW,IAAI,EAAEC,SAAS,EAC7DF,KAAK,CAAC,IACNJ,GAAG;AAEV;AAEA;;;;CAIC,GACD,SAASO,aACPb,GAAqB,EACrBc,QAA4B;IAE5B,OAAO,aACF7B,iBAAiBe,IAAIW,IAAI,GACxBX,IAAIO,MAAM,GAAG;QAAEA,QAAQP,IAAIO,MAAM;IAAC,IAAI,CAAC,GACvCP,IAAIe,OAAO,GAAG;QAAEA,SAASf,IAAIe,OAAO;IAAC,IAAI,CAAC,GAC1Cf,IAAIgB,KAAK,GAAG;QAAEA,OAAOhB,IAAIgB,KAAK;IAAC,IAAI,CAAC,GACpChB,IAAIiB,QAAQ,GAAG;QAAEA,UAAUjB,IAAIiB,QAAQ;IAAC,IAAI,CAAC,GAC7CH,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3Bd,IAAIkB,OAAO,GAAG;QAAEA,SAASlB,IAAIkB,OAAO;IAAC,IAAI,CAAC,GAC1ClB,IAAImB,KAAK,GAAG;QAAEA,OAAOnB,IAAImB,KAAK;IAAC,IAAI,CAAC;AAE5C;AAEA;;;;CAIC,GACD,SAASC,aAAapB,GAAqB;IACzC,OAAOqB,OAAOC,WAAW,CACvBD,OAAOE,OAAO,CAACvB,IAAIwB,MAAM,EAAEC,GAAG,CAAC,CAAC,CAACC,KAAKC,MAAM,GAAK;YAAC,CAAC,OAAO,EAAED,KAAK;YAAEC;SAAM;AAE7E;AAEA;;;;;CAKC,GACD,eAAeC,4BACbC,KAAa,EACb9B,UAA6B;IAE7B,MAAMG,WAAW,MAAMV,cACpBsC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACX3B,GAAG,CAACwB,OACJG,UAAU,CAACnD,gBAAgBoD,aAAa,EACxCvB,KAAK,CAAC,KACNJ,GAAG;IACN,OAAOtB,0BACLkB,SAASC,IAAI,CAACsB,GAAG,CAAC,CAACpB,MAAQA,IAAI6B,IAAI,KACnC,WACAC,MAAM,CACN,CAACC,QACC,CAAC,CAACA,MAAMV,GAAG,IAAI,CAACU,MAAMC,SAAS,IAAInD,gBAAgBkD,MAAME,SAAS,EAAEvC;AAE1E;AAEA;;;;;CAKC,GACD,OAAO,MAAMwC,4BAA8C,OAAOC,KAAKC;IACrE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOpD,eAAoC6C,KAAK;QACpDQ,cAAc5D;QACd6D,WAAW9D;IACb;IACA,IAAI,WAAW4D,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMtD,qBAAqB4C;QAC3C,IAAIU,QAAQC,EAAE,KAAK,OAAO,OAAOV,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAqC,EAAE;QAC7C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAyD,EAAE;QACjE,MAAMC,SAAS,MAAM5B,4BAA4BsB,QAAQrB,KAAK,EAAEqB,QAAQnD,UAAU;QAClF;;;;;KAKC,GACD,MAAME,OAAO,IAAIwD;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAUxE,0BAA0BsE,KAAKJ;YAC/C,IAAIM,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMmD,QAAQE,KAAK;oBAAEC,QAAQH,QAAQG,MAAM;gBAAC;gBAClE;YACF;YACA,MAAMvC,MAAMrC,sBAAsByE,QAAQ9D,GAAG;YAC7C,IAAIC,KAAKiE,GAAG,CAACxC,MAAM;gBACjB2B,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMmD,QAAQ9D,GAAG,CAACW,IAAI;oBAAEsD,QAAQ;gBAAY;gBAClE;YACF;YACAhE,KAAKkE,GAAG,CAACzC;YACT,KAAK,MAAM0C,SAASN,QAAQ9D,GAAG,CAACsD,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACc,MAAMhC,KAAK,CAAC,GAAG,EAACkB,uBAAAA,OAAO,CAACc,MAAMhC,KAAK,CAAC,YAApBkB,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAO7D,KAAK8D,QAAQ9D,GAAG;YAAC;QAC5C;QAEA,MAAMqE,SAAS,MAAM3E,eACnBwD,QAAQrB,KAAK,EACb0B,WAAW9B,GAAG,CAAC,CAAC2C,QAAUA,MAAMpE,GAAG;QAErC,MAAMsE,mBAAmB,IAAIb;QAC7B,MAAMc,SAAS/E,cAAcsC,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,QAAQ3B,GAAG,CAAC6C,QAAQrB,KAAK;QACnF,MAAM/B,YAAYyE,OAAOvC,UAAU,CAACnD,gBAAgBiB,SAAS;QAC7D,MAAM0E,QAAQC,cAAcvB;QAC5B,IAAIwB,UAA8C;QAClD,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAEhB,KAAK,EAAE7D,GAAG,EAAE,IAAIuD,WAAY;YACvC,IAAIzC;YACJ,IAAId,IAAI8E,UAAU,EAAE;gBAClBhE,WAAWuD,OAAO/D,GAAG,CAACN,IAAI8E,UAAU;gBACpC,IAAI,CAAChE,UAAUwD,iBAAiBH,GAAG,CAACnE,IAAI8E,UAAU;YACpD;YACA,MAAMC,WAAW,MAAMlF,YAAYC,WAAWoD,QAAQnD,UAAU,EAAEC;YAClE,MAAMgF,SAASnE,aAAab,KAAKc;YACjC,IAAIiE,UAAU;gBACZ,MAAMA,SAASE,GAAG,CAACC,MAAM,CAAC,aACrBF,QAEAlG,qBAAqB,aAAKiG,SAAS7C,IAAI,IAAO8C,UAC7ChF,IAAImF,IAAI,CAACC,MAAM,GAAG;oBAAED,MAAM1F,WAAW4F,UAAU,IAAIrF,IAAImF,IAAI;gBAAE,IAAI,CAAC,GACnE/D,aAAapB;oBAChBsF,WAAW7F,WAAW8F,eAAe;;gBAEvCV,UAAU;gBACV;YACF;YACA,IAAI,CAACH,SAASA,UAAU,MAAMnF,sBAAsB2D,QAAQsC,GAAG,EAAWjB;YAC1E,MAAMkB,OAAO7G,qBACXsE,QAAQsC,GAAG,EACXd,QAAQgB,eAAe,GAAGf;YAE5B,IAAI,CAACc,KAAKE,OAAO,EAAE;gBACjBtC,QAAQU,IAAI,CAAC;oBAAEF;oBAAOlD,MAAMX,IAAIW,IAAI;oBAAEsD,QAAQ;gBAAe;gBAC7D;YACF;YACA,MAAMnE,UAAUqE,GAAG,CAAC,aACfa;gBACHG,MAAMnF,IAAImF,IAAI;eACV9D,OAAOuE,IAAI,CAAC5F,IAAIwB,MAAM,EAAE4D,MAAM,GAAG;gBAAE5D,QAAQxB,IAAIwB,MAAM;YAAC,IAAI,CAAC,GAC5DgD,OAEAzF,uBAAuB,aAAa,aAAKiG,QAAWR;YAEzDG,eAAe;YACfC,WAAW;QACb;QAEA,MAAMiB,SAAmC;YACvCC,UAAU/C,KAAKW,IAAI,CAAC0B,MAAM;YAC1BR;YACAC;YACAxB,SAASA,QAAQ0C,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEnC,KAAK,GAAGoC,EAAEpC,KAAK;YACjDP;YACAgB,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO7B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACgD;IAC9B,EAAE,OAAO/C,OAAO;QACdoD,QAAQpD,KAAK,CAAC,+BAA+BA;QAC7C,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC;AAED;;;;CAIC,GACD,SAAS2B,cACPvB,OAA6C;IAE7C,OAAO;QACLiD,QAAQjD,QAAQiD,MAAM;QACtB7D,WAAWY,QAAQkD,WAAW;QAC9BC,cAAcnD,QAAQoD,GAAG;QACzBC,WAAW9G,WAAW8F,eAAe;QACrCD,WAAW7F,WAAW8F,eAAe;IACvC;AACF"}

package/src/lib/server/contacts-import.d.ts

@@ -1,109 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/**
- * `POST /api/crm/contacts-import` — one chunk of a contact file, written
- * (AGL-2602).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw
- * rows in the field vocabulary `crm-import.ts` defines. This route judges
- * each one and writes it, and it is the ONLY place either happens: the
- * drawer shows a preview from the same mapper but stores nothing, so a
- * stale tab cannot store something the server would have refused.
- *
- * ## Every row goes through the door every capture goes through
- *
- * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,
- * the one writer of the contacts collection for every door that is not the
- * v1 API: forms, checkout, bookings, the newsletter box — is the writer
- * here too, so a row this file creates raises `contactCreated` like any
- * other capture (AGL-2605). That is what makes an import
- * dedupe on the address the way a second form submission does, land in the
- * capturing group's facet the way a form capture does, record consent
- * against the capturing site, and stop at a hard band where a form
- * capture stops. A bulk path with its own `add()` would be the fastest way
- * to grow an unscoped, unbanded, unconsented copy of the address book.
- *
- * What the door did not know how to write until now — a phone, a title, a
- * company, an owner, a stage, custom values — it now takes as `facet`, and
- * what it did not say until now — created or merged or refused — it now
- * returns as a verdict. Both changes are the door's, so the v1 API and the
- * manual add can reach them next.
- *
- * ## Every lookup paid once per request, not once per row (AGL-3423)
- *
- * A request has sixty seconds, and a row that reads for itself spends them
- * a round trip at a time: the door alone was a dozen serial reads and three
- * aggregate counts per new person, and a two-hundred-row chunk of an
- * Apollo export ran out of time before it answered. So nothing here is
- * read per row:
- *
- * - The door's own lookups — the site, the consent group, who each address
- *   already is, who the site erased, the room in the records band — come
- *   from one `prepareContactCaptureBatch` for the whole chunk, which every
- *   row's capture is handed. The door still makes every decision.
- * - An owner is named by email and stored by uid, so the org's roster is
- *   read once and every row resolves against it.
- * - A company is named by name and stored by id, so the distinct names are
- *   looked up together, thirty to an `in` query, and the missing ones are
- *   created in one batched write — an Apollo file names a different company
- *   on nearly every row, and that was a read, a count and a write each.
- *
- * What is left per row is the row's own writes and what a new person sets
- * off, and those run {@link CONTACT_IMPORT_CONCURRENCY} at a time. A row is
- * started only inside {@link CONTACT_IMPORT_TIME_BUDGET_MS}; the rest are
- * reported `not-reached`, so a slow chunk answers with what it did instead
- * of being cut off at the limit with no answer at all.
- *
- * ## A retry is a merge, never a second person
- *
- * The door dedupes on the address, through the index and then the `email`
- * query, so a row that landed before a request was cut off is found by the
- * next attempt and merged into — the one-person-one-record rule a second
- * form submission meets. A company is found by its `nameLower` the same way.
- *
- * ## Who may call it
- *
- * `resolveImportContext` (`import-context.ts`) — the two gates every CSV
- * import route asks, shared with the companies import so one permission
- * has one spelling.
- */
-import { type PluginApiHandler } from '@aglyn/aglyn/server';
-/** The one sentence every imported contact's timeline opens with. */
-export declare const CONTACT_IMPORT_INTERACTION_SUMMARY = "Imported from CSV";
-/**
- * How many rows are written at once. Enough to overlap the round trips a
- * row still pays; few enough that a chunk never has more writes in flight
- * than one client connection handles comfortably.
- */
-export declare const CONTACT_IMPORT_CONCURRENCY = 8;
-/**
- * How long after the request arrived a row may still be STARTED. The
- * function is stopped at sixty seconds; this leaves the rows already in
- * flight, and the mail-server check's grace, room to finish before then.
- */
-export declare const CONTACT_IMPORT_TIME_BUDGET_MS = 40000;
-/**
- * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
- *
- * Rows are written {@link CONTACT_IMPORT_CONCURRENCY} at a time, which the
- * band allows because it is no longer counted per row: the capture batch
- * counted once, and every create is admitted from its tally — reserved in
- * file order before any row is written, so which rows the band keeps does
- * not depend on which write happened to finish first.
- */
-export declare const crmContactsImportHandler: PluginApiHandler;