@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/deals-import.js

@@ -1,248 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * `POST /api/crm/deals-import` — one chunk of a deals file, written
- * (AGL-2662).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-deal-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the two names a deal is
- * filed under, and writes it with the stamp every CRM creator writes.
- *
- * ## The pipeline and the stage are looked up ONCE per request
- *
- * The org's pipelines are read once — the active ones the caller's scope
- * can see — and every row resolves against that list by name. A row
- * naming no pipeline lands in the default one (or the only one); a row
- * naming no stage lands in its pipeline's first open stage. A name that
- * matches nothing refuses the row by name, before any write, so the
- * operator's skipped file says exactly which cell to fix.
- *
- * ## A deal's status is its stage's kind
- *
- * Landing in a `won` or `lost` stage closes the deal on creation, stamped
- * with the same clock as `stageChangedAtMs`, the way the REST create does.
- * No `dealWon` event fires for an imported win: the deal was won before it
- * was filed here, and an automation on the event is for what happens next.
- *
- * ## The band is counted once per request
- *
- * A deal is a CRM record and meets the records band (AGL-2611), judged
- * the way the companies import judges it: one aggregate at the first
- * create, re-judged locally as the request creates more.
- */ import { checkCrmRecordsQuota, CRM_COLLECTIONS, crmNewRecordListFields, isPipelineArchived, nameSearchKey, visibleToTokens } from "@aglyn/aglyn/server";
-import { DEAL_IMPORT_CHUNK_SIZE, DEAL_IMPORT_MAX_BODY_BYTES, dealImportNameKey, normalizeDealImportRow } from "../model/crm-deal-import.js";
-import { crmRecordsQuotaForOrg, firebaseAdmin } from "@aglyn/tenant-data-admin";
-import { FieldValue } from "firebase-admin/firestore";
-import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
-/** The default currency a deal carries when the file names none. */ const DEFAULT_CURRENCY = 'usd';
-/** The active pipelines the caller's scope can see, in read order. */ async function readPipelines(orgRef, readTokens) {
-    const snapshot = await orgRef.collection(CRM_COLLECTIONS.pipelines).get();
-    const choices = [];
-    for (const doc of snapshot.docs){
-        var _pipeline_stages;
-        const pipeline = doc.data();
-        if (isPipelineArchived(pipeline)) continue;
-        if (!visibleToTokens(pipeline.visibleTo, readTokens)) continue;
-        const stages = [
-            ...(_pipeline_stages = pipeline.stages) != null ? _pipeline_stages : []
-        ].sort((a, b)=>a.order - b.order);
-        choices.push({
-            id: doc.id,
-            pipeline,
-            stages
-        });
-    }
-    return choices;
-}
-/**
- * Where one row lands: its pipeline and its stage, or which of the two
- * names the org does not have.
- */ export function placeDealImportRow(choices, row) {
-    let pipeline;
-    if (row.pipeline) {
-        const wanted = dealImportNameKey(row.pipeline);
-        pipeline = choices.find((choice)=>{
-            var _choice_pipeline_name;
-            return dealImportNameKey((_choice_pipeline_name = choice.pipeline.name) != null ? _choice_pipeline_name : '') === wanted;
-        });
-    } else {
-        var _choices_find;
-        pipeline = (_choices_find = choices.find((choice)=>choice.pipeline.isDefault)) != null ? _choices_find : choices.length === 1 ? choices[0] : undefined;
-    }
-    if (!pipeline) return {
-        ok: false,
-        reason: 'unknown-pipeline'
-    };
-    let stage;
-    if (row.stage) {
-        const wanted = dealImportNameKey(row.stage);
-        stage = pipeline.stages.find((candidate)=>{
-            var _candidate_name;
-            return dealImportNameKey((_candidate_name = candidate.name) != null ? _candidate_name : '') === wanted;
-        });
-    } else {
-        var _pipeline_stages_find;
-        stage = (_pipeline_stages_find = pipeline.stages.find((candidate)=>candidate.kind === 'open')) != null ? _pipeline_stages_find : pipeline.stages[0];
-    }
-    if (!stage) return {
-        ok: false,
-        reason: 'unknown-stage'
-    };
-    return {
-        ok: true,
-        pipeline,
-        stage
-    };
-}
-/**
- * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.
- *
- * Rows are written one after another so the band's local count stays
- * honest across the request.
- */ export const crmDealsImportHandler = async (req, res)=>{
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        return res.status(405).json({
-            error: 'Method not allowed'
-        });
-    }
-    const read = readImportRows(req, {
-        maxBodyBytes: DEAL_IMPORT_MAX_BODY_BYTES,
-        chunkSize: DEAL_IMPORT_CHUNK_SIZE
-    });
-    if ('error' in read) return res.status(read.status).json({
-        error: read.error
-    });
-    try {
-        const context = await resolveImportContext(req);
-        if (context.ok === false) return res.status(context.status).json(context.body);
-        const skipped = [];
-        const dropped = {};
-        const normalized = [];
-        read.rows.forEach((raw, index)=>{
-            const verdict = normalizeDealImportRow(raw);
-            if (verdict.ok === false) {
-                skipped.push({
-                    index,
-                    title: verdict.input,
-                    reason: verdict.reason
-                });
-                return;
-            }
-            for (const entry of verdict.row.dropped){
-                var _dropped_entry_field;
-                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
-            }
-            normalized.push({
-                index,
-                row: verdict.row
-            });
-        });
-        const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId);
-        const [owners, pipelines] = await Promise.all([
-            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
-            normalized.length ? readPipelines(orgRef, context.readTokens) : Promise.resolve([])
-        ]);
-        const ownersUnresolved = new Set();
-        const deals = orgRef.collection(CRM_COLLECTIONS.deals);
-        const stamp = creationStamp(context);
-        let counted = null;
-        let createdHere = 0;
-        let created = 0;
-        for (const { index, row } of normalized){
-            var _row_currency;
-            const placed = placeDealImportRow(pipelines, row);
-            if (placed.ok === false) {
-                skipped.push({
-                    index,
-                    title: row.title,
-                    reason: placed.reason
-                });
-                continue;
-            }
-            let ownerUid;
-            if (row.ownerEmail) {
-                ownerUid = owners.get(row.ownerEmail);
-                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
-            }
-            if (!counted) counted = await crmRecordsQuotaForOrg(context.org, orgRef);
-            const room = checkCrmRecordsQuota(context.org, counted.crmRecordsCount + createdHere);
-            if (!room.allowed) {
-                skipped.push({
-                    index,
-                    title: row.title,
-                    reason: 'records-band'
-                });
-                continue;
-            }
-            const nowMs = Date.now();
-            const { stage } = placed;
-            const status = stage.kind === 'won' ? 'won' : stage.kind === 'lost' ? 'lost' : 'open';
-            await deals.add(_extends({
-                title: row.title,
-                titleLower: nameSearchKey(row.title),
-                pipelineId: placed.pipeline.id,
-                stageId: stage.id,
-                status,
-                stageChangedAtMs: nowMs,
-                closedAtMs: status === 'open' ? null : nowMs,
-                currency: (_row_currency = row.currency) != null ? _row_currency : DEFAULT_CURRENCY
-            }, typeof row.amountCents === 'number' ? {
-                amountCents: row.amountCents
-            } : {}, ownerUid ? {
-                ownerUid
-            } : {}, typeof row.expectedCloseAtMs === 'number' ? {
-                expectedCloseAtMs: row.expectedCloseAtMs
-            } : {}, row.notes ? {
-                notes: row.notes
-            } : {}, stamp, crmNewRecordListFields('deals', _extends({
-                title: row.title
-            }, stamp))));
-            createdHere += 1;
-            created += 1;
-        }
-        const result = {
-            received: read.rows.length,
-            created,
-            merged: 0,
-            skipped: skipped.sort((a, b)=>a.index - b.index),
-            dropped,
-            ownersUnresolved: [
-                ...ownersUnresolved
-            ]
-        };
-        return res.status(200).json(result);
-    } catch (error) {
-        console.error('crm/deals-import failed', error);
-        return res.status(500).json({
-            error: 'The import could not continue.'
-        });
-    }
-};
-/** The scope, the site, the importer and the clocks every created deal carries. */ function creationStamp(context) {
-    return {
-        hostId: context.hostId,
-        visibleTo: context.scopeTokens,
-        createdByUid: context.uid,
-        createdAt: FieldValue.serverTimestamp(),
-        updatedAt: FieldValue.serverTimestamp()
-    };
-}
-
-//# sourceMappingURL=deals-import.js.map

package/src/lib/server/deals-import.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/deals-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/deals-import` — one chunk of a deals file, written\n * (AGL-2662).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link DEAL_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-deal-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the two names a deal is\n * filed under, and writes it with the stamp every CRM creator writes.\n *\n * ## The pipeline and the stage are looked up ONCE per request\n *\n * The org's pipelines are read once — the active ones the caller's scope\n * can see — and every row resolves against that list by name. A row\n * naming no pipeline lands in the default one (or the only one); a row\n * naming no stage lands in its pipeline's first open stage. A name that\n * matches nothing refuses the row by name, before any write, so the\n * operator's skipped file says exactly which cell to fix.\n *\n * ## A deal's status is its stage's kind\n *\n * Landing in a `won` or `lost` stage closes the deal on creation, stamped\n * with the same clock as `stageChangedAtMs`, the way the REST create does.\n * No `dealWon` event fires for an imported win: the deal was won before it\n * was filed here, and an automation on the event is for what happens next.\n *\n * ## The band is counted once per request\n *\n * A deal is a CRM record and meets the records band (AGL-2611), judged\n * the way the companies import judges it: one aggregate at the first\n * create, re-judged locally as the request creates more.\n */\n\nimport {\n  checkCrmRecordsQuota,\n  CRM_COLLECTIONS,\n  type CrmDealStage,\n  crmNewRecordListFields,\n  type CrmPipeline,\n  isPipelineArchived,\n  nameSearchKey,\n  type PluginApiHandler,\n  visibleToTokens,\n} from '@aglyn/aglyn/server'\nimport {\n  DEAL_IMPORT_CHUNK_SIZE,\n  DEAL_IMPORT_MAX_BODY_BYTES,\n  type DealImportChunkResult,\n  type DealImportRawRow,\n  type DealImportRow,\n  type DealImportSkippedRow,\n  dealImportNameKey,\n  normalizeDealImportRow,\n} from '../model/crm-deal-import'\nimport { crmRecordsQuotaForOrg, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  type ImportContext,\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\n\n/** The default currency a deal carries when the file names none. */\nconst DEFAULT_CURRENCY = 'usd'\n\n/** One pipeline the request can file into, with its stages by name. */\ninterface PipelineChoice {\n  id: string\n  pipeline: CrmPipeline\n  stages: CrmDealStage[]\n}\n\n/** The active pipelines the caller's scope can see, in read order. */\nasync function readPipelines(\n  orgRef: FirebaseFirestore.DocumentReference,\n  readTokens: readonly string[],\n): Promise<PipelineChoice[]> {\n  const snapshot = await orgRef.collection(CRM_COLLECTIONS.pipelines).get()\n  const choices: PipelineChoice[] = []\n  for (const doc of snapshot.docs) {\n    const pipeline = doc.data() as CrmPipeline\n    if (isPipelineArchived(pipeline)) continue\n    if (!visibleToTokens(pipeline.visibleTo, readTokens)) continue\n    const stages = [...(pipeline.stages ?? [])].sort((a, b) => a.order - b.order)\n    choices.push({ id: doc.id, pipeline, stages })\n  }\n  return choices\n}\n\n/**\n * Where one row lands: its pipeline and its stage, or which of the two\n * names the org does not have.\n */\nexport function placeDealImportRow(\n  choices: readonly PipelineChoice[],\n  row: Pick<DealImportRow, 'pipeline' | 'stage'>,\n):\n  | { ok: true; pipeline: PipelineChoice; stage: CrmDealStage }\n  | { ok: false; reason: 'unknown-pipeline' | 'unknown-stage' } {\n  let pipeline: PipelineChoice | undefined\n  if (row.pipeline) {\n    const wanted = dealImportNameKey(row.pipeline)\n    pipeline = choices.find((choice) => dealImportNameKey(choice.pipeline.name ?? '') === wanted)\n  } else {\n    pipeline = choices.find((choice) => choice.pipeline.isDefault) ?? (choices.length === 1 ? choices[0] : undefined)\n  }\n  if (!pipeline) return { ok: false, reason: 'unknown-pipeline' }\n  let stage: CrmDealStage | undefined\n  if (row.stage) {\n    const wanted = dealImportNameKey(row.stage)\n    stage = pipeline.stages.find((candidate) => dealImportNameKey(candidate.name ?? '') === wanted)\n  } else {\n    stage = pipeline.stages.find((candidate) => candidate.kind === 'open') ?? pipeline.stages[0]\n  }\n  if (!stage) return { ok: false, reason: 'unknown-stage' }\n  return { ok: true, pipeline, stage }\n}\n\n/**\n * `POST crm/deals-import` — `{ hostId, rows }` → a {@link DealImportChunkResult}.\n *\n * Rows are written one after another so the band's local count stays\n * honest across the request.\n */\nexport const crmDealsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<DealImportRawRow>(req, {\n    maxBodyBytes: DEAL_IMPORT_MAX_BODY_BYTES,\n    chunkSize: DEAL_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: DealImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: DealImportRow }[] = []\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeDealImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, title: verdict.input, reason: verdict.reason })\n        return\n      }\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(context.orgId)\n    const [owners, pipelines] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      normalized.length ? readPipelines(orgRef, context.readTokens) : Promise.resolve([]),\n    ])\n    const ownersUnresolved = new Set<string>()\n    const deals = orgRef.collection(CRM_COLLECTIONS.deals)\n    const stamp = creationStamp(context)\n    let counted: { crmRecordsCount: number } | null = null\n    let createdHere = 0\n    let created = 0\n\n    for (const { index, row } of normalized) {\n      const placed = placeDealImportRow(pipelines, row)\n      if (placed.ok === false) {\n        skipped.push({ index, title: row.title, reason: placed.reason })\n        continue\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      if (!counted) counted = await crmRecordsQuotaForOrg(context.org as never, orgRef)\n      const room = checkCrmRecordsQuota(\n        context.org as never,\n        counted.crmRecordsCount + createdHere,\n      )\n      if (!room.allowed) {\n        skipped.push({ index, title: row.title, reason: 'records-band' })\n        continue\n      }\n      const nowMs = Date.now()\n      const { stage } = placed\n      const status = stage.kind === 'won' ? 'won' : stage.kind === 'lost' ? 'lost' : 'open'\n      await deals.add({\n        title: row.title,\n        titleLower: nameSearchKey(row.title),\n        pipelineId: placed.pipeline.id,\n        stageId: stage.id,\n        status,\n        stageChangedAtMs: nowMs,\n        closedAtMs: status === 'open' ? null : nowMs,\n        currency: row.currency ?? DEFAULT_CURRENCY,\n        ...(typeof row.amountCents === 'number' ? { amountCents: row.amountCents } : {}),\n        ...(ownerUid ? { ownerUid } : {}),\n        ...(typeof row.expectedCloseAtMs === 'number'\n          ? { expectedCloseAtMs: row.expectedCloseAtMs }\n          : {}),\n        ...(row.notes ? { notes: row.notes } : {}),\n        ...stamp,\n        // What the Deals list searches and filters by (AGL-3321).\n        ...crmNewRecordListFields('deals', { title: row.title, ...stamp }),\n      })\n      createdHere += 1\n      created += 1\n    }\n\n    const result: DealImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged: 0,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/deals-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n\n/** The scope, the site, the importer and the clocks every created deal carries. */\nfunction creationStamp(\n  context: Extract<ImportContext, { ok: true }>,\n): Record<string, unknown> {\n  return {\n    hostId: context.hostId,\n    visibleTo: context.scopeTokens,\n    createdByUid: context.uid,\n    createdAt: FieldValue.serverTimestamp(),\n    updatedAt: FieldValue.serverTimestamp(),\n  }\n}\n"],"names":["checkCrmRecordsQuota","CRM_COLLECTIONS","crmNewRecordListFields","isPipelineArchived","nameSearchKey","visibleToTokens","DEAL_IMPORT_CHUNK_SIZE","DEAL_IMPORT_MAX_BODY_BYTES","dealImportNameKey","normalizeDealImportRow","crmRecordsQuotaForOrg","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","DEFAULT_CURRENCY","readPipelines","orgRef","readTokens","snapshot","collection","pipelines","get","choices","doc","docs","pipeline","data","visibleTo","stages","sort","a","b","order","push","id","placeDealImportRow","row","wanted","find","choice","name","isDefault","length","undefined","ok","reason","stage","candidate","kind","crmDealsImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","body","skipped","dropped","normalized","rows","forEach","raw","index","verdict","title","input","entry","field","app","firestore","orgId","owners","Promise","all","map","resolve","ownersUnresolved","Set","deals","stamp","creationStamp","counted","createdHere","created","placed","ownerUid","ownerEmail","add","org","room","crmRecordsCount","allowed","nowMs","Date","now","titleLower","pipelineId","stageId","stageChangedAtMs","closedAtMs","currency","amountCents","expectedCloseAtMs","notes","result","received","merged","console","hostId","scopeTokens","createdByUid","uid","createdAt","serverTimestamp","updatedAt"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GAED,SACEA,oBAAoB,EACpBC,eAAe,EAEfC,sBAAsB,EAEtBC,kBAAkB,EAClBC,aAAa,EAEbC,eAAe,QACV,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,iBAAiB,EACjBC,sBAAsB,QACjB,8BAA0B;AACjC,SAASC,qBAAqB,EAAEC,aAAa,QAAQ,2BAA0B;AAC/E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAEEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AAEzB,kEAAkE,GAClE,MAAMC,mBAAmB;AASzB,oEAAoE,GACpE,eAAeC,cACbC,MAA2C,EAC3CC,UAA6B;IAE7B,MAAMC,WAAW,MAAMF,OAAOG,UAAU,CAACpB,gBAAgBqB,SAAS,EAAEC,GAAG;IACvE,MAAMC,UAA4B,EAAE;IACpC,KAAK,MAAMC,OAAOL,SAASM,IAAI,CAAE;YAIXC;QAHpB,MAAMA,WAAWF,IAAIG,IAAI;QACzB,IAAIzB,mBAAmBwB,WAAW;QAClC,IAAI,CAACtB,gBAAgBsB,SAASE,SAAS,EAAEV,aAAa;QACtD,MAAMW,SAAS;gBAAKH,mBAAAA,SAASG,MAAM,YAAfH,mBAAmB,EAAE;SAAE,CAACI,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEE,KAAK,GAAGD,EAAEC,KAAK;QAC5EV,QAAQW,IAAI,CAAC;YAAEC,IAAIX,IAAIW,EAAE;YAAET;YAAUG;QAAO;IAC9C;IACA,OAAON;AACT;AAEA;;;CAGC,GACD,OAAO,SAASa,mBACdb,OAAkC,EAClCc,GAA8C;IAI9C,IAAIX;IACJ,IAAIW,IAAIX,QAAQ,EAAE;QAChB,MAAMY,SAAS/B,kBAAkB8B,IAAIX,QAAQ;QAC7CA,WAAWH,QAAQgB,IAAI,CAAC,CAACC;gBAA6BA;mBAAlBjC,mBAAkBiC,wBAAAA,OAAOd,QAAQ,CAACe,IAAI,YAApBD,wBAAwB,QAAQF;;IACxF,OAAO;YACMf;QAAXG,YAAWH,gBAAAA,QAAQgB,IAAI,CAAC,CAACC,SAAWA,OAAOd,QAAQ,CAACgB,SAAS,aAAlDnB,gBAAwDA,QAAQoB,MAAM,KAAK,IAAIpB,OAAO,CAAC,EAAE,GAAGqB;IACzG;IACA,IAAI,CAAClB,UAAU,OAAO;QAAEmB,IAAI;QAAOC,QAAQ;IAAmB;IAC9D,IAAIC;IACJ,IAAIV,IAAIU,KAAK,EAAE;QACb,MAAMT,SAAS/B,kBAAkB8B,IAAIU,KAAK;QAC1CA,QAAQrB,SAASG,MAAM,CAACU,IAAI,CAAC,CAACS;gBAAgCA;mBAAlBzC,mBAAkByC,kBAAAA,UAAUP,IAAI,YAAdO,kBAAkB,QAAQV;;IAC1F,OAAO;YACGZ;QAARqB,SAAQrB,wBAAAA,SAASG,MAAM,CAACU,IAAI,CAAC,CAACS,YAAcA,UAAUC,IAAI,KAAK,mBAAvDvB,wBAAkEA,SAASG,MAAM,CAAC,EAAE;IAC9F;IACA,IAAI,CAACkB,OAAO,OAAO;QAAEF,IAAI;QAAOC,QAAQ;IAAgB;IACxD,OAAO;QAAED,IAAI;QAAMnB;QAAUqB;IAAM;AACrC;AAEA;;;;;CAKC,GACD,OAAO,MAAMG,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAO7C,eAAiCsC,KAAK;QACjDQ,cAAcrD;QACdsD,WAAWvD;IACb;IACA,IAAI,WAAWqD,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAM/C,qBAAqBqC;QAC3C,IAAIU,QAAQhB,EAAE,KAAK,OAAO,OAAOO,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQC,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAsD,EAAE;QAC9DP,KAAKQ,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU9D,uBAAuB4D;YACvC,IAAIE,QAAQzB,EAAE,KAAK,OAAO;gBACxBkB,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOD,QAAQE,KAAK;oBAAE1B,QAAQwB,QAAQxB,MAAM;gBAAC;gBACnE;YACF;YACA,KAAK,MAAM2B,SAASH,QAAQjC,GAAG,CAAC2B,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACS,MAAMC,KAAK,CAAC,GAAG,EAACV,uBAAAA,OAAO,CAACS,MAAMC,KAAK,CAAC,YAApBV,uBAAwB,KAAK;YACvD;YACAC,WAAW/B,IAAI,CAAC;gBAAEmC;gBAAOhC,KAAKiC,QAAQjC,GAAG;YAAC;QAC5C;QAEA,MAAMpB,SAASP,cAAciE,GAAG,GAAGC,SAAS,GAAGxD,UAAU,CAAC,QAAQI,GAAG,CAACqC,QAAQgB,KAAK;QACnF,MAAM,CAACC,QAAQzD,UAAU,GAAG,MAAM0D,QAAQC,GAAG,CAAC;YAC5CpE,eACEiD,QAAQgB,KAAK,EACbZ,WAAWgB,GAAG,CAAC,CAACR,QAAUA,MAAMpC,GAAG;YAErC4B,WAAWtB,MAAM,GAAG3B,cAAcC,QAAQ4C,QAAQ3C,UAAU,IAAI6D,QAAQG,OAAO,CAAC,EAAE;SACnF;QACD,MAAMC,mBAAmB,IAAIC;QAC7B,MAAMC,QAAQpE,OAAOG,UAAU,CAACpB,gBAAgBqF,KAAK;QACrD,MAAMC,QAAQC,cAAc1B;QAC5B,IAAI2B,UAA8C;QAClD,IAAIC,cAAc;QAClB,IAAIC,UAAU;QAEd,KAAK,MAAM,EAAErB,KAAK,EAAEhC,GAAG,EAAE,IAAI4B,WAAY;gBA+B3B5B;YA9BZ,MAAMsD,SAASvD,mBAAmBf,WAAWgB;YAC7C,IAAIsD,OAAO9C,EAAE,KAAK,OAAO;gBACvBkB,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOlC,IAAIkC,KAAK;oBAAEzB,QAAQ6C,OAAO7C,MAAM;gBAAC;gBAC9D;YACF;YACA,IAAI8C;YACJ,IAAIvD,IAAIwD,UAAU,EAAE;gBAClBD,WAAWd,OAAOxD,GAAG,CAACe,IAAIwD,UAAU;gBACpC,IAAI,CAACD,UAAUT,iBAAiBW,GAAG,CAACzD,IAAIwD,UAAU;YACpD;YACA,IAAI,CAACL,SAASA,UAAU,MAAM/E,sBAAsBoD,QAAQkC,GAAG,EAAW9E;YAC1E,MAAM+E,OAAOjG,qBACX8D,QAAQkC,GAAG,EACXP,QAAQS,eAAe,GAAGR;YAE5B,IAAI,CAACO,KAAKE,OAAO,EAAE;gBACjBnC,QAAQ7B,IAAI,CAAC;oBAAEmC;oBAAOE,OAAOlC,IAAIkC,KAAK;oBAAEzB,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAMqD,QAAQC,KAAKC,GAAG;YACtB,MAAM,EAAEtD,KAAK,EAAE,GAAG4C;YAClB,MAAMpC,SAASR,MAAME,IAAI,KAAK,QAAQ,QAAQF,MAAME,IAAI,KAAK,SAAS,SAAS;YAC/E,MAAMoC,MAAMS,GAAG,CAAC;gBACdvB,OAAOlC,IAAIkC,KAAK;gBAChB+B,YAAYnG,cAAckC,IAAIkC,KAAK;gBACnCgC,YAAYZ,OAAOjE,QAAQ,CAACS,EAAE;gBAC9BqE,SAASzD,MAAMZ,EAAE;gBACjBoB;gBACAkD,kBAAkBN;gBAClBO,YAAYnD,WAAW,SAAS,OAAO4C;gBACvCQ,QAAQ,GAAEtE,gBAAAA,IAAIsE,QAAQ,YAAZtE,gBAAgBtB;eACtB,OAAOsB,IAAIuE,WAAW,KAAK,WAAW;gBAAEA,aAAavE,IAAIuE,WAAW;YAAC,IAAI,CAAC,GAC1EhB,WAAW;gBAAEA;YAAS,IAAI,CAAC,GAC3B,OAAOvD,IAAIwE,iBAAiB,KAAK,WACjC;gBAAEA,mBAAmBxE,IAAIwE,iBAAiB;YAAC,IAC3C,CAAC,GACDxE,IAAIyE,KAAK,GAAG;gBAAEA,OAAOzE,IAAIyE,KAAK;YAAC,IAAI,CAAC,GACrCxB,OAEArF,uBAAuB,SAAS;gBAAEsE,OAAOlC,IAAIkC,KAAK;eAAKe;YAE5DG,eAAe;YACfC,WAAW;QACb;QAEA,MAAMqB,SAAgC;YACpCC,UAAUtD,KAAKQ,IAAI,CAACvB,MAAM;YAC1B+C;YACAuB,QAAQ;YACRlD,SAASA,QAAQjC,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEsC,KAAK,GAAGrC,EAAEqC,KAAK;YACjDL;YACAmB,kBAAkB;mBAAIA;aAAiB;QACzC;QACA,OAAO/B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACuD;IAC9B,EAAE,OAAOtD,OAAO;QACdyD,QAAQzD,KAAK,CAAC,2BAA2BA;QACzC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC;AAED,iFAAiF,GACjF,SAAS8B,cACP1B,OAA6C;IAE7C,OAAO;QACLsD,QAAQtD,QAAQsD,MAAM;QACtBvF,WAAWiC,QAAQuD,WAAW;QAC9BC,cAAcxD,QAAQyD,GAAG;QACzBC,WAAW5G,WAAW6G,eAAe;QACrCC,WAAW9G,WAAW6G,eAAe;IACvC;AACF"}

package/src/lib/server/export-route.d.ts

@@ -1,60 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/** Header naming the row count the server undertook to send. */
-export declare const EXPORT_ROWS_HEADER = "X-Aglyn-Export-Rows";
-/**
- * THE WHOLE COLLECTION, STREAMED (AGL-2662).
- *
- * ## What this fixes
- *
- * Every CRM export until now wrote the rows the LIST had loaded — a
- * `limit(1000)` window for contacts, a `limit(200)` view for tasks — and
- * called the file `contacts.csv`. A merchant with 40,000 contacts got 1,000
- * of them and nothing on screen or in the file said so. `docs/bulk-actions.md`
- * said it in prose, which is not where somebody opening a spreadsheet looks.
- * This is the same file over every row there is, and it carries
- * `X-Aglyn-Export-Rows` so the client can prove what it received is whole —
- * a stream that dies halfway yields a perfectly well-formed shorter file, and
- * nothing about the bytes says they are short.
- *
- * ## Why it is a route and not a bigger client read
- *
- * A browser cannot hold an unbounded collection, and the tier that most
- * needs a complete export is the tier with the most rows. Cursor-paged and
- * streamed, completeness costs neither a hang nor a buffer.
- *
- * ## The columns are the client's columns
- *
- * `crmExportHeader` and `crmExportCells` (`model/crm-csv.ts`) are the
- * writers each section's Export button uses. One feature, one file format.
- *
- * ## The order is by document id, deliberately
- *
- * Firestore DROPS every document missing the ordered field, so ordering by
- * `updatedAt` or `dueAtMs` would silently omit rows written before that
- * field existed — the exact silent loss an export must not have. A document
- * id is on every document and is a total order.
- *
- * ## Scope is enforced here, because nothing else can
- *
- * The Admin SDK bypasses the rules, so `memberScopeTokens` IS the
- * enforcement: an org-wide member reads every row, and a scoped
- * collaborator's query carries their own tokens as the `array-contains-any`
- * the rules would have evaluated. Leads are host data by path, so the
- * equivalent check is whether the caller reaches the site.
- */
-export declare function crmExportRoute(request: Request): Promise<Response>;