@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/contacts-import.js

@@ -1,393 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * `POST /api/crm/contacts-import` — one chunk of a contact file, written
- * (AGL-2602).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw
- * rows in the field vocabulary `crm-import.ts` defines. This route judges
- * each one and writes it, and it is the ONLY place either happens: the
- * drawer shows a preview from the same mapper but stores nothing, so a
- * stale tab cannot store something the server would have refused.
- *
- * ## Every row goes through the door every capture goes through
- *
- * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,
- * the one writer of the contacts collection for every door that is not the
- * v1 API: forms, checkout, bookings, the newsletter box — is the writer
- * here too, so a row this file creates raises `contactCreated` like any
- * other capture (AGL-2605). That is what makes an import
- * dedupe on the address the way a second form submission does, land in the
- * capturing group's facet the way a form capture does, record consent
- * against the capturing site, and stop at a hard band where a form
- * capture stops. A bulk path with its own `add()` would be the fastest way
- * to grow an unscoped, unbanded, unconsented copy of the address book.
- *
- * What the door did not know how to write until now — a phone, a title, a
- * company, an owner, a stage, custom values — it now takes as `facet`, and
- * what it did not say until now — created or merged or refused — it now
- * returns as a verdict. Both changes are the door's, so the v1 API and the
- * manual add can reach them next.
- *
- * ## Every lookup paid once per request, not once per row (AGL-3423)
- *
- * A request has sixty seconds, and a row that reads for itself spends them
- * a round trip at a time: the door alone was a dozen serial reads and three
- * aggregate counts per new person, and a two-hundred-row chunk of an
- * Apollo export ran out of time before it answered. So nothing here is
- * read per row:
- *
- * - The door's own lookups — the site, the consent group, who each address
- *   already is, who the site erased, the room in the records band — come
- *   from one `prepareContactCaptureBatch` for the whole chunk, which every
- *   row's capture is handed. The door still makes every decision.
- * - An owner is named by email and stored by uid, so the org's roster is
- *   read once and every row resolves against it.
- * - A company is named by name and stored by id, so the distinct names are
- *   looked up together, thirty to an `in` query, and the missing ones are
- *   created in one batched write — an Apollo file names a different company
- *   on nearly every row, and that was a read, a count and a write each.
- *
- * What is left per row is the row's own writes and what a new person sets
- * off, and those run {@link CONTACT_IMPORT_CONCURRENCY} at a time. A row is
- * started only inside {@link CONTACT_IMPORT_TIME_BUDGET_MS}; the rest are
- * reported `not-reached`, so a slow chunk answers with what it did instead
- * of being cut off at the limit with no answer at all.
- *
- * ## A retry is a merge, never a second person
- *
- * The door dedupes on the address, through the index and then the `email`
- * query, so a row that landed before a request was cut off is found by the
- * next attempt and merged into — the one-person-one-record rule a second
- * form submission meets. A company is found by its `nameLower` the same way.
- *
- * ## Who may call it
- *
- * `resolveImportContext` (`import-context.ts`) — the two gates every CSV
- * import route asks, shared with the companies import so one permission
- * has one spelling.
- */ import { CRM_COLLECTIONS, crmNewRecordListFields, nameSearchFields, visibleToTokens } from "@aglyn/aglyn/server";
-import { CONTACT_IMPORT_CHUNK_SIZE, CONTACT_IMPORT_MAX_BODY_BYTES, normalizeContactImportRow } from "../model/crm-import.js";
-import { firebaseAdmin, prepareContactCaptureBatch } from "@aglyn/tenant-data-admin";
-import { captureHostContact } from "@aglyn/tenant-runtime";
-// The leaf, so a spec that stands a partial barrel in still reaches it.
-import { countUndeliverableEmails, findUndeliverableEmails, IMPORT_MAIL_CHECK_GRACE_MS, settleWithin } from "@aglyn/tenant-data-admin/server/capture-email-check";
-import { FieldValue } from "firebase-admin/firestore";
-import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
-/** The one sentence every imported contact's timeline opens with. */ export const CONTACT_IMPORT_INTERACTION_SUMMARY = 'Imported from CSV';
-/**
- * How many rows are written at once. Enough to overlap the round trips a
- * row still pays; few enough that a chunk never has more writes in flight
- * than one client connection handles comfortably.
- */ export const CONTACT_IMPORT_CONCURRENCY = 8;
-/**
- * How long after the request arrived a row may still be STARTED. The
- * function is stopped at sixty seconds; this leaves the rows already in
- * flight, and the mail-server check's grace, room to finish before then.
- */ export const CONTACT_IMPORT_TIME_BUDGET_MS = 40000;
-/** The most values one Firestore `in` filter may carry. */ const IN_FILTER_LIMIT = 30;
-/** The most writes one batch may carry. */ const BATCH_WRITE_LIMIT = 500;
-/**
- * The holder's live custom-field definitions.
- *
- * Read in full and filtered in memory: a holder has a handful of fields,
- * and a `where` on `retiredAt` would need an index for a collection that
- * fits in one page. Definitions the caller's scope cannot see are left out
- * for the same reason a value under an undefined key is — a value written
- * under a field the holder's own form will never show is a value nobody
- * can edit.
- */ async function loadFieldDefinitions(orgId, readTokens) {
-    const snapshot = await firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.contactFields).limit(200).get();
-    return snapshot.docs.map((doc)=>doc.data()).filter((field)=>!!field.key && !field.retiredAt && visibleToTokens(field.visibleTo, readTokens));
-}
-function pagesOf(items, size) {
-    const out = [];
-    for(let at = 0; at < items.length; at += size)out.push(items.slice(at, at + size));
-    return out;
-}
-/**
- * The company each row names, in this scope, with the missing ones created.
- *
- * Looked up by `nameLower`, the search twin `nameSearchFields` writes on
- * every company, thirty names to an `in` query and every page at once, and
- * narrowed in memory to the ones the caller's scope can see — two clients
- * of one agency may each have an "Acme" and must each get their own. A
- * name nobody in scope holds is created once for the request, with the
- * same scope stamp every CRM creator uses, so the company lands exactly
- * where a contact captured on this site would; the creates go out in one
- * batched write.
- *
- * THE RECORDS BAND (AGL-2611). A company is a record of the same band the
- * contact behind its row will meet at the door, so the band is walked in
- * file order — the row's company, then the row's contact when the address
- * is new — from the capture batch's one tally. On an org at a full hard
- * band the row gets no company rather than a company it was not allowed to
- * hold, and a later row's company never takes the room an earlier row's
- * contact needed. Nothing is reported here: the contact is refused
- * `audience-band` at its door and the row is listed skipped, which is the
- * one message the operator needs. A plan with an overage rate always
- * admits — a rate is what makes the band meter instead of refuse.
- *
- * Keyed by `nameLower`; a name absent from the map gets no company.
- */ async function resolveCompanies(context, capture, rows) {
-    const firestore = firebaseAdmin.app().firestore();
-    const collection = firestore.collection('orgs').doc(context.orgId).collection(CRM_COLLECTIONS.companies);
-    const named = new Map();
-    for (const { row } of rows){
-        if (!row.companyName) continue;
-        const fields = nameSearchFields(row.companyName);
-        if (!named.has(fields.nameLower)) named.set(fields.nameLower, fields);
-    }
-    const companies = new Map();
-    await Promise.all(pagesOf([
-        ...named.keys()
-    ], IN_FILTER_LIMIT).map(async (page)=>{
-        const matches = await collection.where('nameLower', 'in', page).get();
-        for (const doc of matches.docs){
-            var _doc_get, _ref, _doc_get1;
-            var _named_get;
-            const nameLower = String((_doc_get = doc.get('nameLower')) != null ? _doc_get : '');
-            if (!named.has(nameLower) || companies.has(nameLower)) continue;
-            if (!visibleToTokens(doc.get('visibleTo'), context.readTokens)) continue;
-            // The name as the record spells it, not as this row typed it, so the
-            // contact's facet reads the same as the company page.
-            companies.set(nameLower, {
-                id: doc.id,
-                name: String((_ref = (_doc_get1 = doc.get('name')) != null ? _doc_get1 : (_named_get = named.get(nameLower)) == null ? void 0 : _named_get.name) != null ? _ref : '')
-            });
-        }
-    }));
-    const creates = [];
-    for (const { row } of rows){
-        if (row.companyName) {
-            const nameLower = nameSearchFields(row.companyName).nameLower;
-            if (!companies.has(nameLower) && capture.admit()) {
-                const fields = named.get(nameLower);
-                const ref = collection.doc();
-                creates.push({
-                    ref,
-                    record: _extends({}, fields, {
-                        hostId: context.hostId,
-                        visibleTo: context.scopeTokens,
-                        createdByUid: context.uid,
-                        createdAt: FieldValue.serverTimestamp(),
-                        updatedAt: FieldValue.serverTimestamp()
-                    }, crmNewRecordListFields('companies', _extends({}, fields, {
-                        visibleTo: context.scopeTokens
-                    })))
-                });
-                companies.set(nameLower, {
-                    id: ref.id,
-                    name: row.companyName
-                });
-            }
-        }
-        if (capture.peek(row.email) === null && capture.erased(row.email) !== true) {
-            capture.reserve(row.email);
-        }
-    }
-    for (const page of pagesOf(creates, BATCH_WRITE_LIMIT)){
-        const batch = firestore.batch();
-        for (const { ref, record } of page)batch.set(ref, record);
-        await batch.commit();
-    }
-    return {
-        companies,
-        created: creates.length
-    };
-}
-/**
- * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.
- *
- * Rows are written {@link CONTACT_IMPORT_CONCURRENCY} at a time, which the
- * band allows because it is no longer counted per row: the capture batch
- * counted once, and every create is admitted from its tally — reserved in
- * file order before any row is written, so which rows the band keeps does
- * not depend on which write happened to finish first.
- */ export const crmContactsImportHandler = async (req, res)=>{
-    const startedAt = Date.now();
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        return res.status(405).json({
-            error: 'Method not allowed'
-        });
-    }
-    const read = readImportRows(req, {
-        maxBodyBytes: CONTACT_IMPORT_MAX_BODY_BYTES,
-        chunkSize: CONTACT_IMPORT_CHUNK_SIZE
-    });
-    if ('error' in read) return res.status(read.status).json({
-        error: read.error
-    });
-    try {
-        const context = await resolveImportContext(req);
-        if (context.ok === false) return res.status(context.status).json(context.body);
-        const fields = await loadFieldDefinitions(context.orgId, context.readTokens);
-        const skipped = [];
-        const dropped = {};
-        const normalized = [];
-        /*
-     * A duplicate WITHIN the request is skipped rather than merged: the
-     * second row would merge onto the first's record and the count would
-     * read one created and one merged for one person in one file, which is
-     * a number the operator cannot reconcile against the rows they sent.
-     * Across requests the door's own dedupe answers, and reports a merge.
-     */ const seen = new Set();
-        read.rows.forEach((raw, index)=>{
-            const verdict = normalizeContactImportRow(raw, fields);
-            if (verdict.ok === false) {
-                skipped.push({
-                    index,
-                    email: verdict.input,
-                    reason: verdict.reason
-                });
-                return;
-            }
-            if (seen.has(verdict.row.email)) {
-                skipped.push({
-                    index,
-                    email: verdict.row.email,
-                    reason: 'duplicate'
-                });
-                return;
-            }
-            seen.add(verdict.row.email);
-            for (const entry of verdict.row.dropped){
-                var _dropped_entry_field;
-                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
-            }
-            normalized.push({
-                index,
-                row: verdict.row
-            });
-        });
-        // The addresses' mail servers (AGL-3328), asked while the rows are
-        // written — see the leads import. The check `upsertHostContact` queues
-        // stamps the records; this is the count the result states.
-        const mailServers = findUndeliverableEmails(normalized.map((entry)=>entry.row.email));
-        const imported = [];
-        const [owners, capture] = await Promise.all([
-            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
-            prepareContactCaptureBatch(context.hostId, normalized.map((entry)=>entry.row.email))
-        ]);
-        const { companies, created: companiesCreated } = await resolveCompanies(context, capture, normalized);
-        const ownersUnresolved = new Set();
-        let created = 0;
-        let merged = 0;
-        const writeRow = async ({ index, row })=>{
-            let ownerUid;
-            if (row.ownerEmail) {
-                ownerUid = owners.get(row.ownerEmail);
-                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
-            }
-            const company = row.companyName ? companies.get(nameSearchFields(row.companyName).nameLower) : undefined;
-            const verdict = await captureHostContact(_extends({
-                hostId: context.hostId,
-                email: row.email
-            }, row.name ? {
-                name: row.name
-            } : {}, {
-                source: 'import',
-                actor: {
-                    kind: 'member',
-                    uid: context.uid,
-                    email: context.email
-                },
-                interaction: {
-                    summary: CONTACT_IMPORT_INTERACTION_SUMMARY
-                },
-                marketingConsent: row.marketingConsent,
-                tags: row.tags,
-                facet: _extends({}, row.phone ? {
-                    phone: row.phone
-                } : {}, row.jobTitle ? {
-                    jobTitle: row.jobTitle
-                } : {}, company ? {
-                    companyId: company.id,
-                    companyName: company.name
-                } : {}, row.address ? {
-                    address: row.address
-                } : {}, ownerUid ? {
-                    ownerUid
-                } : {}, row.lifecycleStage ? {
-                    lifecycleStage: row.lifecycleStage
-                } : {}, Object.keys(row.custom).length ? {
-                    custom: row.custom
-                } : {}),
-                // An import is the merchant's own act and files nobody under a
-                // campaign; the picker on the profile is where that happens.
-                campaignIds: [],
-                batch: capture
-            }));
-            if ('refused' in verdict) {
-                skipped.push({
-                    index,
-                    email: row.email,
-                    reason: verdict.refused === 'band' ? 'audience-band' : verdict.refused === 'invalid-email' ? 'invalid-email' : verdict.refused === 'erased' ? 'erased' : 'write-failed'
-                });
-                return;
-            }
-            imported.push(row.email);
-            if (verdict.created) created += 1;
-            else merged += 1;
-        };
-        // A fixed pool drawing from one queue in file order; a row is started
-        // only inside the budget, and whatever is left is reported, not dropped.
-        let next = 0;
-        const worker = async ()=>{
-            while(next < normalized.length){
-                if (Date.now() - startedAt >= CONTACT_IMPORT_TIME_BUDGET_MS) return;
-                const entry = normalized[next];
-                next += 1;
-                await writeRow(entry);
-            }
-        };
-        await Promise.all(Array.from({
-            length: Math.min(CONTACT_IMPORT_CONCURRENCY, normalized.length)
-        }, worker));
-        for (const { index, row } of normalized.slice(next)){
-            skipped.push({
-                index,
-                email: row.email,
-                reason: 'not-reached'
-            });
-        }
-        const noMailServer = countUndeliverableEmails(imported, await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS));
-        const result = _extends({
-            received: read.rows.length,
-            created,
-            merged,
-            skipped: skipped.sort((a, b)=>a.index - b.index),
-            dropped,
-            companiesCreated,
-            ownersUnresolved: [
-                ...ownersUnresolved
-            ]
-        }, noMailServer !== undefined ? {
-            noMailServer
-        } : {});
-        return res.status(200).json(result);
-    } catch (error) {
-        console.error('crm/contacts-import failed', error);
-        return res.status(500).json({
-            error: 'The import could not continue.'
-        });
-    }
-};
-
-//# sourceMappingURL=contacts-import.js.map

package/src/lib/server/contacts-import.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/contacts-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/contacts-import` — one chunk of a contact file, written\n * (AGL-2602).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link CONTACT_IMPORT_CHUNK_SIZE} raw\n * rows in the field vocabulary `crm-import.ts` defines. This route judges\n * each one and writes it, and it is the ONLY place either happens: the\n * drawer shows a preview from the same mapper but stores nothing, so a\n * stale tab cannot store something the server would have refused.\n *\n * ## Every row goes through the door every capture goes through\n *\n * `captureHostContact` — the runtime's wrapper over `upsertHostContact`,\n * the one writer of the contacts collection for every door that is not the\n * v1 API: forms, checkout, bookings, the newsletter box — is the writer\n * here too, so a row this file creates raises `contactCreated` like any\n * other capture (AGL-2605). That is what makes an import\n * dedupe on the address the way a second form submission does, land in the\n * capturing group's facet the way a form capture does, record consent\n * against the capturing site, and stop at a hard band where a form\n * capture stops. A bulk path with its own `add()` would be the fastest way\n * to grow an unscoped, unbanded, unconsented copy of the address book.\n *\n * What the door did not know how to write until now — a phone, a title, a\n * company, an owner, a stage, custom values — it now takes as `facet`, and\n * what it did not say until now — created or merged or refused — it now\n * returns as a verdict. Both changes are the door's, so the v1 API and the\n * manual add can reach them next.\n *\n * ## Every lookup paid once per request, not once per row (AGL-3423)\n *\n * A request has sixty seconds, and a row that reads for itself spends them\n * a round trip at a time: the door alone was a dozen serial reads and three\n * aggregate counts per new person, and a two-hundred-row chunk of an\n * Apollo export ran out of time before it answered. So nothing here is\n * read per row:\n *\n * - The door's own lookups — the site, the consent group, who each address\n *   already is, who the site erased, the room in the records band — come\n *   from one `prepareContactCaptureBatch` for the whole chunk, which every\n *   row's capture is handed. The door still makes every decision.\n * - An owner is named by email and stored by uid, so the org's roster is\n *   read once and every row resolves against it.\n * - A company is named by name and stored by id, so the distinct names are\n *   looked up together, thirty to an `in` query, and the missing ones are\n *   created in one batched write — an Apollo file names a different company\n *   on nearly every row, and that was a read, a count and a write each.\n *\n * What is left per row is the row's own writes and what a new person sets\n * off, and those run {@link CONTACT_IMPORT_CONCURRENCY} at a time. A row is\n * started only inside {@link CONTACT_IMPORT_TIME_BUDGET_MS}; the rest are\n * reported `not-reached`, so a slow chunk answers with what it did instead\n * of being cut off at the limit with no answer at all.\n *\n * ## A retry is a merge, never a second person\n *\n * The door dedupes on the address, through the index and then the `email`\n * query, so a row that landed before a request was cut off is found by the\n * next attempt and merged into — the one-person-one-record rule a second\n * form submission meets. A company is found by its `nameLower` the same way.\n *\n * ## Who may call it\n *\n * `resolveImportContext` (`import-context.ts`) — the two gates every CSV\n * import route asks, shared with the companies import so one permission\n * has one spelling.\n */\n\nimport {\n  type ContactFieldDefinition,\n  CRM_COLLECTIONS,\n  crmNewRecordListFields,\n  nameSearchFields,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  CONTACT_IMPORT_CHUNK_SIZE,\n  CONTACT_IMPORT_MAX_BODY_BYTES,\n  type ContactImportChunkResult,\n  type ContactImportRawRow,\n  type ContactImportRow,\n  type ContactImportSkippedRow,\n  normalizeContactImportRow,\n} from '../model/crm-import'\nimport {\n  type ContactCaptureBatch,\n  firebaseAdmin,\n  prepareContactCaptureBatch,\n} from '@aglyn/tenant-data-admin'\nimport { captureHostContact } from '@aglyn/tenant-runtime'\n// The leaf, so a spec that stands a partial barrel in still reaches it.\nimport {\n  countUndeliverableEmails,\n  findUndeliverableEmails,\n  IMPORT_MAIL_CHECK_GRACE_MS,\n  settleWithin,\n} from '@aglyn/tenant-data-admin/server/capture-email-check'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\n/** The one sentence every imported contact's timeline opens with. */\nexport const CONTACT_IMPORT_INTERACTION_SUMMARY = 'Imported from CSV'\n\n/**\n * How many rows are written at once. Enough to overlap the round trips a\n * row still pays; few enough that a chunk never has more writes in flight\n * than one client connection handles comfortably.\n */\nexport const CONTACT_IMPORT_CONCURRENCY = 8\n\n/**\n * How long after the request arrived a row may still be STARTED. The\n * function is stopped at sixty seconds; this leaves the rows already in\n * flight, and the mail-server check's grace, room to finish before then.\n */\nexport const CONTACT_IMPORT_TIME_BUDGET_MS = 40_000\n\n/** The most values one Firestore `in` filter may carry. */\nconst IN_FILTER_LIMIT = 30\n\n/** The most writes one batch may carry. */\nconst BATCH_WRITE_LIMIT = 500\n\n/**\n * The holder's live custom-field definitions.\n *\n * Read in full and filtered in memory: a holder has a handful of fields,\n * and a `where` on `retiredAt` would need an index for a collection that\n * fits in one page. Definitions the caller's scope cannot see are left out\n * for the same reason a value under an undefined key is — a value written\n * under a field the holder's own form will never show is a value nobody\n * can edit.\n */\nasync function loadFieldDefinitions(\n  orgId: string,\n  readTokens: readonly string[],\n): Promise<ContactFieldDefinition[]> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.contactFields)\n    .limit(200)\n    .get()\n  return snapshot.docs\n    .map((doc) => doc.data() as ContactFieldDefinition)\n    .filter(\n      (field) =>\n        !!field.key &&\n        !field.retiredAt &&\n        visibleToTokens(field.visibleTo, readTokens),\n    )\n}\n\n/** A company an import row named, as the CRM stores it. */\ninterface ImportCompany {\n  id: string\n  name: string\n}\n\nfunction pagesOf<T>(items: readonly T[], size: number): T[][] {\n  const out: T[][] = []\n  for (let at = 0; at < items.length; at += size) out.push(items.slice(at, at + size))\n  return out\n}\n\n/**\n * The company each row names, in this scope, with the missing ones created.\n *\n * Looked up by `nameLower`, the search twin `nameSearchFields` writes on\n * every company, thirty names to an `in` query and every page at once, and\n * narrowed in memory to the ones the caller's scope can see — two clients\n * of one agency may each have an \"Acme\" and must each get their own. A\n * name nobody in scope holds is created once for the request, with the\n * same scope stamp every CRM creator uses, so the company lands exactly\n * where a contact captured on this site would; the creates go out in one\n * batched write.\n *\n * THE RECORDS BAND (AGL-2611). A company is a record of the same band the\n * contact behind its row will meet at the door, so the band is walked in\n * file order — the row's company, then the row's contact when the address\n * is new — from the capture batch's one tally. On an org at a full hard\n * band the row gets no company rather than a company it was not allowed to\n * hold, and a later row's company never takes the room an earlier row's\n * contact needed. Nothing is reported here: the contact is refused\n * `audience-band` at its door and the row is listed skipped, which is the\n * one message the operator needs. A plan with an overage rate always\n * admits — a rate is what makes the band meter instead of refuse.\n *\n * Keyed by `nameLower`; a name absent from the map gets no company.\n */\nasync function resolveCompanies(\n  context: Extract<ImportContext, { ok: true }>,\n  capture: ContactCaptureBatch,\n  rows: readonly { row: ContactImportRow }[],\n): Promise<{ companies: Map<string, ImportCompany>; created: number }> {\n  const firestore = firebaseAdmin.app().firestore()\n  const collection = firestore\n    .collection('orgs')\n    .doc(context.orgId)\n    .collection(CRM_COLLECTIONS.companies)\n  const named = new Map<string, ReturnType<typeof nameSearchFields>>()\n  for (const { row } of rows) {\n    if (!row.companyName) continue\n    const fields = nameSearchFields(row.companyName)\n    if (!named.has(fields.nameLower)) named.set(fields.nameLower, fields)\n  }\n\n  const companies = new Map<string, ImportCompany>()\n  await Promise.all(\n    pagesOf([...named.keys()], IN_FILTER_LIMIT).map(async (page) => {\n      const matches = await collection.where('nameLower', 'in', page).get()\n      for (const doc of matches.docs) {\n        const nameLower = String(doc.get('nameLower') ?? '')\n        if (!named.has(nameLower) || companies.has(nameLower)) continue\n        if (!visibleToTokens(doc.get('visibleTo'), context.readTokens)) continue\n        // The name as the record spells it, not as this row typed it, so the\n        // contact's facet reads the same as the company page.\n        companies.set(nameLower, {\n          id: doc.id,\n          name: String(doc.get('name') ?? named.get(nameLower)?.name ?? ''),\n        })\n      }\n    }),\n  )\n\n  const creates: { ref: FirebaseFirestore.DocumentReference; record: Record<string, unknown> }[] = []\n  for (const { row } of rows) {\n    if (row.companyName) {\n      const nameLower = nameSearchFields(row.companyName).nameLower\n      if (!companies.has(nameLower) && capture.admit()) {\n        const fields = named.get(nameLower) as ReturnType<typeof nameSearchFields>\n        const ref = collection.doc()\n        creates.push({\n          ref,\n          record: {\n            ...fields,\n            hostId: context.hostId,\n            visibleTo: context.scopeTokens,\n            createdByUid: context.uid,\n            createdAt: FieldValue.serverTimestamp(),\n            updatedAt: FieldValue.serverTimestamp(),\n            // What the Companies list searches and filters by (AGL-3321).\n            ...crmNewRecordListFields('companies', { ...fields, visibleTo: context.scopeTokens }),\n          },\n        })\n        companies.set(nameLower, { id: ref.id, name: row.companyName })\n      }\n    }\n    if (capture.peek(row.email) === null && capture.erased(row.email) !== true) {\n      capture.reserve(row.email)\n    }\n  }\n  for (const page of pagesOf(creates, BATCH_WRITE_LIMIT)) {\n    const batch = firestore.batch()\n    for (const { ref, record } of page) batch.set(ref, record)\n    await batch.commit()\n  }\n  return { companies, created: creates.length }\n}\n\n/**\n * `POST crm/contacts-import` — `{ hostId, rows }` → a {@link ContactImportChunkResult}.\n *\n * Rows are written {@link CONTACT_IMPORT_CONCURRENCY} at a time, which the\n * band allows because it is no longer counted per row: the capture batch\n * counted once, and every create is admitted from its tally — reserved in\n * file order before any row is written, so which rows the band keeps does\n * not depend on which write happened to finish first.\n */\nexport const crmContactsImportHandler: PluginApiHandler = async (req, res) => {\n  const startedAt = Date.now()\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<ContactImportRawRow>(req, {\n    maxBodyBytes: CONTACT_IMPORT_MAX_BODY_BYTES,\n    chunkSize: CONTACT_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const fields = await loadFieldDefinitions(context.orgId, context.readTokens)\n    const skipped: ContactImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: ContactImportRow }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged: the\n     * second row would merge onto the first's record and the count would\n     * read one created and one merged for one person in one file, which is\n     * a number the operator cannot reconcile against the rows they sent.\n     * Across requests the door's own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeContactImportRow(raw, fields)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      if (seen.has(verdict.row.email)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(verdict.row.email)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    // The addresses' mail servers (AGL-3328), asked while the rows are\n    // written — see the leads import. The check `upsertHostContact` queues\n    // stamps the records; this is the count the result states.\n    const mailServers = findUndeliverableEmails(normalized.map((entry) => entry.row.email))\n    const imported: string[] = []\n    const [owners, capture] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      prepareContactCaptureBatch(\n        context.hostId,\n        normalized.map((entry) => entry.row.email),\n      ),\n    ])\n    const { companies, created: companiesCreated } = await resolveCompanies(\n      context,\n      capture,\n      normalized,\n    )\n    const ownersUnresolved = new Set<string>()\n    let created = 0\n    let merged = 0\n\n    const writeRow = async ({ index, row }: { index: number; row: ContactImportRow }) => {\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const company = row.companyName\n        ? companies.get(nameSearchFields(row.companyName).nameLower)\n        : undefined\n      const verdict = await captureHostContact({\n        hostId: context.hostId,\n        email: row.email,\n        ...(row.name ? { name: row.name } : {}),\n        source: 'import',\n        actor: { kind: 'member', uid: context.uid, email: context.email },\n        interaction: { summary: CONTACT_IMPORT_INTERACTION_SUMMARY },\n        marketingConsent: row.marketingConsent,\n        tags: row.tags,\n        facet: {\n          ...(row.phone ? { phone: row.phone } : {}),\n          ...(row.jobTitle ? { jobTitle: row.jobTitle } : {}),\n          // The link AND the name: the merge fields read the facet's\n          // `companyName`, and a link written alone renders as nothing.\n          ...(company ? { companyId: company.id, companyName: company.name } : {}),\n          ...(row.address ? { address: row.address } : {}),\n          ...(ownerUid ? { ownerUid } : {}),\n          ...(row.lifecycleStage ? { lifecycleStage: row.lifecycleStage } : {}),\n          ...(Object.keys(row.custom).length ? { custom: row.custom } : {}),\n        },\n        // An import is the merchant's own act and files nobody under a\n        // campaign; the picker on the profile is where that happens.\n        campaignIds: [],\n        batch: capture,\n      })\n      if ('refused' in verdict) {\n        skipped.push({\n          index,\n          email: row.email,\n          reason:\n            verdict.refused === 'band'\n              ? 'audience-band'\n              : verdict.refused === 'invalid-email'\n                ? 'invalid-email'\n                : verdict.refused === 'erased'\n                  ? 'erased'\n                  : 'write-failed',\n        })\n        return\n      }\n      imported.push(row.email)\n      if (verdict.created) created += 1\n      else merged += 1\n    }\n\n    // A fixed pool drawing from one queue in file order; a row is started\n    // only inside the budget, and whatever is left is reported, not dropped.\n    let next = 0\n    const worker = async () => {\n      while (next < normalized.length) {\n        if (Date.now() - startedAt >= CONTACT_IMPORT_TIME_BUDGET_MS) return\n        const entry = normalized[next]\n        next += 1\n        await writeRow(entry)\n      }\n    }\n    await Promise.all(\n      Array.from(\n        { length: Math.min(CONTACT_IMPORT_CONCURRENCY, normalized.length) },\n        worker,\n      ),\n    )\n    for (const { index, row } of normalized.slice(next)) {\n      skipped.push({ index, email: row.email, reason: 'not-reached' })\n    }\n\n    const noMailServer = countUndeliverableEmails(\n      imported,\n      await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS),\n    )\n\n    const result: ContactImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      companiesCreated,\n      ownersUnresolved: [...ownersUnresolved],\n      ...(noMailServer !== undefined ? { noMailServer } : {}),\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/contacts-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["CRM_COLLECTIONS","crmNewRecordListFields","nameSearchFields","visibleToTokens","CONTACT_IMPORT_CHUNK_SIZE","CONTACT_IMPORT_MAX_BODY_BYTES","normalizeContactImportRow","firebaseAdmin","prepareContactCaptureBatch","captureHostContact","countUndeliverableEmails","findUndeliverableEmails","IMPORT_MAIL_CHECK_GRACE_MS","settleWithin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","CONTACT_IMPORT_INTERACTION_SUMMARY","CONTACT_IMPORT_CONCURRENCY","CONTACT_IMPORT_TIME_BUDGET_MS","IN_FILTER_LIMIT","BATCH_WRITE_LIMIT","loadFieldDefinitions","orgId","readTokens","snapshot","app","firestore","collection","doc","contactFields","limit","get","docs","map","data","filter","field","key","retiredAt","visibleTo","pagesOf","items","size","out","at","length","push","slice","resolveCompanies","context","capture","rows","companies","named","Map","row","companyName","fields","has","nameLower","set","Promise","all","keys","page","matches","where","String","id","name","creates","admit","ref","record","hostId","scopeTokens","createdByUid","uid","createdAt","serverTimestamp","updatedAt","peek","email","erased","reserve","batch","commit","created","crmContactsImportHandler","req","res","startedAt","Date","now","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","ok","body","skipped","dropped","normalized","seen","Set","forEach","raw","index","verdict","input","reason","add","entry","mailServers","imported","owners","companiesCreated","ownersUnresolved","merged","writeRow","ownerUid","ownerEmail","company","undefined","source","actor","kind","interaction","summary","marketingConsent","tags","facet","phone","jobTitle","companyId","address","lifecycleStage","Object","custom","campaignIds","refused","next","worker","Array","from","Math","min","noMailServer","result","received","sort","a","b","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmEC,GAED,SAEEA,eAAe,EACfC,sBAAsB,EACtBC,gBAAgB,EAEhBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,yBAAyB,EACzBC,6BAA6B,EAK7BC,yBAAyB,QACpB,yBAAqB;AAC5B,SAEEC,aAAa,EACbC,0BAA0B,QACrB,2BAA0B;AACjC,SAASC,kBAAkB,QAAQ,wBAAuB;AAC1D,wEAAwE;AACxE,SACEC,wBAAwB,EACxBC,uBAAuB,EACvBC,0BAA0B,EAC1BC,YAAY,QACP,sDAAqD;AAC5D,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAEzB,mEAAmE,GACnE,OAAO,MAAMC,qCAAqC,oBAAmB;AAErE;;;;CAIC,GACD,OAAO,MAAMC,6BAA6B,EAAC;AAE3C;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,MAAM;AAEnD,yDAAyD,GACzD,MAAMC,kBAAkB;AAExB,yCAAyC,GACzC,MAAMC,oBAAoB;AAE1B;;;;;;;;;CASC,GACD,eAAeC,qBACbC,KAAa,EACbC,UAA6B;IAE7B,MAAMC,WAAW,MAAMnB,cACpBoB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACN,OACJK,UAAU,CAAC7B,gBAAgB+B,aAAa,EACxCC,KAAK,CAAC,KACNC,GAAG;IACN,OAAOP,SAASQ,IAAI,CACjBC,GAAG,CAAC,CAACL,MAAQA,IAAIM,IAAI,IACrBC,MAAM,CACL,CAACC,QACC,CAAC,CAACA,MAAMC,GAAG,IACX,CAACD,MAAME,SAAS,IAChBrC,gBAAgBmC,MAAMG,SAAS,EAAEhB;AAEzC;AAQA,SAASiB,QAAWC,KAAmB,EAAEC,IAAY;IACnD,MAAMC,MAAa,EAAE;IACrB,IAAK,IAAIC,KAAK,GAAGA,KAAKH,MAAMI,MAAM,EAAED,MAAMF,KAAMC,IAAIG,IAAI,CAACL,MAAMM,KAAK,CAACH,IAAIA,KAAKF;IAC9E,OAAOC;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,eAAeK,iBACbC,OAA6C,EAC7CC,OAA4B,EAC5BC,IAA0C;IAE1C,MAAMzB,YAAYrB,cAAcoB,GAAG,GAAGC,SAAS;IAC/C,MAAMC,aAAaD,UAChBC,UAAU,CAAC,QACXC,GAAG,CAACqB,QAAQ3B,KAAK,EACjBK,UAAU,CAAC7B,gBAAgBsD,SAAS;IACvC,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAM,EAAEC,GAAG,EAAE,IAAIJ,KAAM;QAC1B,IAAI,CAACI,IAAIC,WAAW,EAAE;QACtB,MAAMC,SAASzD,iBAAiBuD,IAAIC,WAAW;QAC/C,IAAI,CAACH,MAAMK,GAAG,CAACD,OAAOE,SAAS,GAAGN,MAAMO,GAAG,CAACH,OAAOE,SAAS,EAAEF;IAChE;IAEA,MAAML,YAAY,IAAIE;IACtB,MAAMO,QAAQC,GAAG,CACftB,QAAQ;WAAIa,MAAMU,IAAI;KAAG,EAAE5C,iBAAiBc,GAAG,CAAC,OAAO+B;QACrD,MAAMC,UAAU,MAAMtC,WAAWuC,KAAK,CAAC,aAAa,MAAMF,MAAMjC,GAAG;QACnE,KAAK,MAAMH,OAAOqC,QAAQjC,IAAI,CAAE;gBACLJ,UAOVA,MAAAA;gBAAmByB;YAPlC,MAAMM,YAAYQ,QAAOvC,WAAAA,IAAIG,GAAG,CAAC,wBAARH,WAAwB;YACjD,IAAI,CAACyB,MAAMK,GAAG,CAACC,cAAcP,UAAUM,GAAG,CAACC,YAAY;YACvD,IAAI,CAAC1D,gBAAgB2B,IAAIG,GAAG,CAAC,cAAckB,QAAQ1B,UAAU,GAAG;YAChE,qEAAqE;YACrE,sDAAsD;YACtD6B,UAAUQ,GAAG,CAACD,WAAW;gBACvBS,IAAIxC,IAAIwC,EAAE;gBACVC,MAAMF,QAAOvC,QAAAA,YAAAA,IAAIG,GAAG,CAAC,mBAARH,aAAmByB,aAAAA,MAAMtB,GAAG,CAAC4B,+BAAVN,WAAsBgB,IAAI,YAA7CzC,OAAiD;YAChE;QACF;IACF;IAGF,MAAM0C,UAA2F,EAAE;IACnG,KAAK,MAAM,EAAEf,GAAG,EAAE,IAAIJ,KAAM;QAC1B,IAAII,IAAIC,WAAW,EAAE;YACnB,MAAMG,YAAY3D,iBAAiBuD,IAAIC,WAAW,EAAEG,SAAS;YAC7D,IAAI,CAACP,UAAUM,GAAG,CAACC,cAAcT,QAAQqB,KAAK,IAAI;gBAChD,MAAMd,SAASJ,MAAMtB,GAAG,CAAC4B;gBACzB,MAAMa,MAAM7C,WAAWC,GAAG;gBAC1B0C,QAAQxB,IAAI,CAAC;oBACX0B;oBACAC,QAAQ,aACHhB;wBACHiB,QAAQzB,QAAQyB,MAAM;wBACtBnC,WAAWU,QAAQ0B,WAAW;wBAC9BC,cAAc3B,QAAQ4B,GAAG;wBACzBC,WAAWlE,WAAWmE,eAAe;wBACrCC,WAAWpE,WAAWmE,eAAe;uBAElChF,uBAAuB,aAAa,aAAK0D;wBAAQlB,WAAWU,QAAQ0B,WAAW;;gBAEtF;gBACAvB,UAAUQ,GAAG,CAACD,WAAW;oBAAES,IAAII,IAAIJ,EAAE;oBAAEC,MAAMd,IAAIC,WAAW;gBAAC;YAC/D;QACF;QACA,IAAIN,QAAQ+B,IAAI,CAAC1B,IAAI2B,KAAK,MAAM,QAAQhC,QAAQiC,MAAM,CAAC5B,IAAI2B,KAAK,MAAM,MAAM;YAC1EhC,QAAQkC,OAAO,CAAC7B,IAAI2B,KAAK;QAC3B;IACF;IACA,KAAK,MAAMlB,QAAQxB,QAAQ8B,SAASlD,mBAAoB;QACtD,MAAMiE,QAAQ3D,UAAU2D,KAAK;QAC7B,KAAK,MAAM,EAAEb,GAAG,EAAEC,MAAM,EAAE,IAAIT,KAAMqB,MAAMzB,GAAG,CAACY,KAAKC;QACnD,MAAMY,MAAMC,MAAM;IACpB;IACA,OAAO;QAAElC;QAAWmC,SAASjB,QAAQzB,MAAM;IAAC;AAC9C;AAEA;;;;;;;;CAQC,GACD,OAAO,MAAM2C,2BAA6C,OAAOC,KAAKC;IACpE,MAAMC,YAAYC,KAAKC,GAAG;IAC1B,IAAIJ,IAAIK,MAAM,KAAK,QAAQ;QACzBJ,IAAIK,SAAS,CAAC,SAAS;QACvB,OAAOL,IAAIM,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOrF,eAAoC2E,KAAK;QACpDW,cAAcjG;QACdkG,WAAWnG;IACb;IACA,IAAI,WAAWiG,MAAM,OAAOT,IAAIM,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMjD,UAAU,MAAMlC,qBAAqB0E;QAC3C,IAAIxC,QAAQqD,EAAE,KAAK,OAAO,OAAOZ,IAAIM,MAAM,CAAC/C,QAAQ+C,MAAM,EAAEC,IAAI,CAAChD,QAAQsD,IAAI;QAE7E,MAAM9C,SAAS,MAAMpC,qBAAqB4B,QAAQ3B,KAAK,EAAE2B,QAAQ1B,UAAU;QAC3E,MAAMiF,UAAqC,EAAE;QAC7C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAyD,EAAE;QACjE;;;;;;KAMC,GACD,MAAMC,OAAO,IAAIC;QACjBT,KAAKhD,IAAI,CAAC0D,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU5G,0BAA0B0G,KAAKrD;YAC/C,IAAIuD,QAAQV,EAAE,KAAK,OAAO;gBACxBE,QAAQ1D,IAAI,CAAC;oBAAEiE;oBAAO7B,OAAO8B,QAAQC,KAAK;oBAAEC,QAAQF,QAAQE,MAAM;gBAAC;gBACnE;YACF;YACA,IAAIP,KAAKjD,GAAG,CAACsD,QAAQzD,GAAG,CAAC2B,KAAK,GAAG;gBAC/BsB,QAAQ1D,IAAI,CAAC;oBAAEiE;oBAAO7B,OAAO8B,QAAQzD,GAAG,CAAC2B,KAAK;oBAAEgC,QAAQ;gBAAY;gBACpE;YACF;YACAP,KAAKQ,GAAG,CAACH,QAAQzD,GAAG,CAAC2B,KAAK;YAC1B,KAAK,MAAMkC,SAASJ,QAAQzD,GAAG,CAACkD,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACW,MAAMhF,KAAK,CAAC,GAAG,EAACqE,uBAAAA,OAAO,CAACW,MAAMhF,KAAK,CAAC,YAApBqE,uBAAwB,KAAK;YACvD;YACAC,WAAW5D,IAAI,CAAC;gBAAEiE;gBAAOxD,KAAKyD,QAAQzD,GAAG;YAAC;QAC5C;QAEA,mEAAmE;QACnE,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM8D,cAAc5G,wBAAwBiG,WAAWzE,GAAG,CAAC,CAACmF,QAAUA,MAAM7D,GAAG,CAAC2B,KAAK;QACrF,MAAMoC,WAAqB,EAAE;QAC7B,MAAM,CAACC,QAAQrE,QAAQ,GAAG,MAAMW,QAAQC,GAAG,CAAC;YAC1CjD,eACEoC,QAAQ3B,KAAK,EACboF,WAAWzE,GAAG,CAAC,CAACmF,QAAUA,MAAM7D,GAAG;YAErCjD,2BACE2C,QAAQyB,MAAM,EACdgC,WAAWzE,GAAG,CAAC,CAACmF,QAAUA,MAAM7D,GAAG,CAAC2B,KAAK;SAE5C;QACD,MAAM,EAAE9B,SAAS,EAAEmC,SAASiC,gBAAgB,EAAE,GAAG,MAAMxE,iBACrDC,SACAC,SACAwD;QAEF,MAAMe,mBAAmB,IAAIb;QAC7B,IAAIrB,UAAU;QACd,IAAImC,SAAS;QAEb,MAAMC,WAAW,OAAO,EAAEZ,KAAK,EAAExD,GAAG,EAA4C;YAC9E,IAAIqE;YACJ,IAAIrE,IAAIsE,UAAU,EAAE;gBAClBD,WAAWL,OAAOxF,GAAG,CAACwB,IAAIsE,UAAU;gBACpC,IAAI,CAACD,UAAUH,iBAAiBN,GAAG,CAAC5D,IAAIsE,UAAU;YACpD;YACA,MAAMC,UAAUvE,IAAIC,WAAW,GAC3BJ,UAAUrB,GAAG,CAAC/B,iBAAiBuD,IAAIC,WAAW,EAAEG,SAAS,IACzDoE;YACJ,MAAMf,UAAU,MAAMzG,mBAAmB;gBACvCmE,QAAQzB,QAAQyB,MAAM;gBACtBQ,OAAO3B,IAAI2B,KAAK;eACZ3B,IAAIc,IAAI,GAAG;gBAAEA,MAAMd,IAAIc,IAAI;YAAC,IAAI,CAAC;gBACrC2D,QAAQ;gBACRC,OAAO;oBAAEC,MAAM;oBAAUrD,KAAK5B,QAAQ4B,GAAG;oBAAEK,OAAOjC,QAAQiC,KAAK;gBAAC;gBAChEiD,aAAa;oBAAEC,SAASpH;gBAAmC;gBAC3DqH,kBAAkB9E,IAAI8E,gBAAgB;gBACtCC,MAAM/E,IAAI+E,IAAI;gBACdC,OAAO,aACDhF,IAAIiF,KAAK,GAAG;oBAAEA,OAAOjF,IAAIiF,KAAK;gBAAC,IAAI,CAAC,GACpCjF,IAAIkF,QAAQ,GAAG;oBAAEA,UAAUlF,IAAIkF,QAAQ;gBAAC,IAAI,CAAC,GAG7CX,UAAU;oBAAEY,WAAWZ,QAAQ1D,EAAE;oBAAEZ,aAAasE,QAAQzD,IAAI;gBAAC,IAAI,CAAC,GAClEd,IAAIoF,OAAO,GAAG;oBAAEA,SAASpF,IAAIoF,OAAO;gBAAC,IAAI,CAAC,GAC1Cf,WAAW;oBAAEA;gBAAS,IAAI,CAAC,GAC3BrE,IAAIqF,cAAc,GAAG;oBAAEA,gBAAgBrF,IAAIqF,cAAc;gBAAC,IAAI,CAAC,GAC/DC,OAAO9E,IAAI,CAACR,IAAIuF,MAAM,EAAEjG,MAAM,GAAG;oBAAEiG,QAAQvF,IAAIuF,MAAM;gBAAC,IAAI,CAAC;gBAEjE,+DAA+D;gBAC/D,6DAA6D;gBAC7DC,aAAa,EAAE;gBACf1D,OAAOnC;;YAET,IAAI,aAAa8D,SAAS;gBACxBR,QAAQ1D,IAAI,CAAC;oBACXiE;oBACA7B,OAAO3B,IAAI2B,KAAK;oBAChBgC,QACEF,QAAQgC,OAAO,KAAK,SAChB,kBACAhC,QAAQgC,OAAO,KAAK,kBAClB,kBACAhC,QAAQgC,OAAO,KAAK,WAClB,WACA;gBACZ;gBACA;YACF;YACA1B,SAASxE,IAAI,CAACS,IAAI2B,KAAK;YACvB,IAAI8B,QAAQzB,OAAO,EAAEA,WAAW;iBAC3BmC,UAAU;QACjB;QAEA,sEAAsE;QACtE,yEAAyE;QACzE,IAAIuB,OAAO;QACX,MAAMC,SAAS;YACb,MAAOD,OAAOvC,WAAW7D,MAAM,CAAE;gBAC/B,IAAI+C,KAAKC,GAAG,KAAKF,aAAazE,+BAA+B;gBAC7D,MAAMkG,QAAQV,UAAU,CAACuC,KAAK;gBAC9BA,QAAQ;gBACR,MAAMtB,SAASP;YACjB;QACF;QACA,MAAMvD,QAAQC,GAAG,CACfqF,MAAMC,IAAI,CACR;YAAEvG,QAAQwG,KAAKC,GAAG,CAACrI,4BAA4ByF,WAAW7D,MAAM;QAAE,GAClEqG;QAGJ,KAAK,MAAM,EAAEnC,KAAK,EAAExD,GAAG,EAAE,IAAImD,WAAW3D,KAAK,CAACkG,MAAO;YACnDzC,QAAQ1D,IAAI,CAAC;gBAAEiE;gBAAO7B,OAAO3B,IAAI2B,KAAK;gBAAEgC,QAAQ;YAAc;QAChE;QAEA,MAAMqC,eAAe/I,yBACnB8G,UACA,MAAM3G,aAAa0G,aAAa3G;QAGlC,MAAM8I,SAAmC;YACvCC,UAAUtD,KAAKhD,IAAI,CAACN,MAAM;YAC1B0C;YACAmC;YACAlB,SAASA,QAAQkD,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAE5C,KAAK,GAAG6C,EAAE7C,KAAK;YACjDN;YACAe;YACAC,kBAAkB;mBAAIA;aAAiB;WACnC8B,iBAAiBxB,YAAY;YAAEwB;QAAa,IAAI,CAAC;QAEvD,OAAO7D,IAAIM,MAAM,CAAC,KAAKC,IAAI,CAACuD;IAC9B,EAAE,OAAOtD,OAAO;QACd2D,QAAQ3D,KAAK,CAAC,8BAA8BA;QAC5C,OAAOR,IAAIM,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/deals-import.d.ts

@@ -1,76 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/**
- * `POST /api/crm/deals-import` — one chunk of a deals file, written
- * (AGL-2662).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-deal-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the two names a deal is
- * filed under, and writes it with the stamp every CRM creator writes.
- *
- * ## The pipeline and the stage are looked up ONCE per request
- *
- * The org's pipelines are read once — the active ones the caller's scope
- * can see — and every row resolves against that list by name. A row
- * naming no pipeline lands in the default one (or the only one); a row
- * naming no stage lands in its pipeline's first open stage. A name that
- * matches nothing refuses the row by name, before any write, so the
- * operator's skipped file says exactly which cell to fix.
- *
- * ## A deal's status is its stage's kind
- *
- * Landing in a `won` or `lost` stage closes the deal on creation, stamped
- * with the same clock as `stageChangedAtMs`, the way the REST create does.
- * No `dealWon` event fires for an imported win: the deal was won before it
- * was filed here, and an automation on the event is for what happens next.
- *
- * ## The band is counted once per request
- *
- * A deal is a CRM record and meets the records band (AGL-2611), judged
- * the way the companies import judges it: one aggregate at the first
- * create, re-judged locally as the request creates more.
- */
-import { type CrmDealStage, type CrmPipeline, type PluginApiHandler } from '@aglyn/aglyn/server';
-import { type DealImportRow } from '../model/crm-deal-import';
-/** One pipeline the request can file into, with its stages by name. */
-interface PipelineChoice {
-    id: string;
-    pipeline: CrmPipeline;
-    stages: CrmDealStage[];
-}
-/**
- * Where one row lands: its pipeline and its stage, or which of the two
- * names the org does not have.
- */
-export declare function placeDealImportRow(choices: readonly PipelineChoice[], row: Pick<DealImportRow, 'pipeline' | 'stage'>): {
-    ok: true;
-    pipeline: PipelineChoice;
-    stage: CrmDealStage;
-} | {
-    ok: false;
-    reason: 'unknown-pipeline' | 'unknown-stage';
-};
-/**
- * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.
- *
- * Rows are written one after another so the band's local count stays
- * honest across the request.
- */
-export declare const crmDealsImportHandler: PluginApiHandler;
-export {};