@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/import-context.js

@@ -1,182 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * WHAT EVERY CSV IMPORT ROUTE ASKS BEFORE IT READS A ROW (AGL-2602, shared
- * by the companies import since AGL-2621).
- *
- * Who is asking and on whose behalf, whether the request is the size a
- * chunk is allowed to be, and — when a row names an owner — which member
- * of the org that address is. The contacts route settled each answer; the
- * companies route needs the same three and must not spell them
- * differently, because two gates for one permission is how one of them
- * comes to be wider.
- *
- * ## Who may call an import
- *
- * The same two gates the rules put on every CRM collection: a site role
- * on the host the request names, AND the organization's `data.manage`
- * permission resolved through the member's custom role and overrides. The
- * Admin SDK evaluates no rules, so this is the enforcement rather than an
- * echo of it — and `data.manage` rather than the raw role because an owner
- * who unticked "Manage data" on a custom role meant it. A staff token
- * passes both gates the way it does on every console route: support
- * importing a customer's file for them is the support act this exists for.
- */ import { consentGroupScope, crmScopeTokens, ORG_SCOPE_TOKEN } from "@aglyn/aglyn/server";
-import { consentGroupForSite, firebaseAdmin, getOrgForHost, listOrgMembers, memberHasOrgPermission, resolveOrgMembership } from "@aglyn/tenant-data-admin";
-import { crmSuiteRefusal } from "./suite-gate.js";
-/** Who is asking, and on whose behalf. */ export async function resolveImportContext(req) {
-    var _ref, _req_headers_authorization, _hostSnapshot_get, _ref1, _ref2;
-    var _req_body;
-    const hostId = String((_ref = (_req_body = req.body) == null ? void 0 : _req_body.hostId) != null ? _ref : '');
-    if (!hostId) {
-        return {
-            ok: false,
-            status: 400,
-            body: {
-                error: 'Missing hostId'
-            }
-        };
-    }
-    const authorization = String((_req_headers_authorization = req.headers.authorization) != null ? _req_headers_authorization : '');
-    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
-    if (!idToken) {
-        return {
-            ok: false,
-            status: 401,
-            body: {
-                error: 'Unauthenticated'
-            }
-        };
-    }
-    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
-    const staff = decoded['staff'] === true;
-    const firestore = firebaseAdmin.app().firestore();
-    const hostSnapshot = await firestore.collection('hosts').doc(hostId).get();
-    if (!hostSnapshot.exists) {
-        return {
-            ok: false,
-            status: 404,
-            body: {
-                error: 'Unknown site'
-            }
-        };
-    }
-    const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
-    if (!staff && memberRole !== 'admin' && memberRole !== 'editor') {
-        return {
-            ok: false,
-            status: 403,
-            body: {
-                error: 'Not a site admin or editor'
-            }
-        };
-    }
-    const resolved = await getOrgForHost(hostId).catch(()=>null);
-    const orgId = String((_ref1 = resolved == null ? void 0 : resolved.orgId) != null ? _ref1 : '');
-    if (!orgId) {
-        return {
-            ok: false,
-            status: 404,
-            body: {
-                error: 'This site has no organization, so it has no CRM.'
-            }
-        };
-    }
-    const org = (_ref2 = resolved == null ? void 0 : resolved.org) != null ? _ref2 : {};
-    const membership = await resolveOrgMembership(decoded.uid, orgId).catch(()=>null);
-    const member = membership == null ? void 0 : membership.member;
-    if (!staff && (!member || member.orgSuspended === true || !await memberHasOrgPermission(orgId, member, 'data.manage'))) {
-        return {
-            ok: false,
-            status: 403,
-            body: {
-                error: 'Your organization role does not allow managing contacts and ' + 'companies, so it cannot import them.'
-            }
-        };
-    }
-    // Every file this context serves — contacts, companies, deals, tasks and
-    // leads — is the CRM's to import, whoever is asking (AGL-2787).
-    const suite = crmSuiteRefusal(org, 'Importing from a CSV file');
-    if (suite) return {
-        ok: false,
-        status: suite.status,
-        body: suite.body
-    };
-    const group = await consentGroupForSite(hostId);
-    return {
-        ok: true,
-        uid: decoded.uid,
-        email: typeof decoded.email === 'string' ? decoded.email : null,
-        hostId,
-        orgId,
-        org,
-        scopeTokens: crmScopeTokens(org, group),
-        readTokens: [
-            ORG_SCOPE_TOKEN,
-            ...consentGroupScope(group)
-        ]
-    };
-}
-/** The rows a request may carry, or the refusal to send back. */ export function readImportRows(req, limits) {
-    var _ref;
-    var _req_rawBody, _req_body;
-    if (((_ref = (_req_rawBody = req.rawBody) == null ? void 0 : _req_rawBody.length) != null ? _ref : 0) > limits.maxBodyBytes) {
-        return {
-            status: 413,
-            error: 'That request is too large. Import the file in smaller pieces.'
-        };
-    }
-    const rows = (_req_body = req.body) == null ? void 0 : _req_body.rows;
-    if (!Array.isArray(rows) || rows.length === 0) {
-        return {
-            status: 400,
-            error: 'No rows to import.'
-        };
-    }
-    if (rows.length > limits.chunkSize) {
-        return {
-            status: 400,
-            error: `At most ${limits.chunkSize} rows per request.`
-        };
-    }
-    if (!rows.every((row)=>row && typeof row === 'object' && !Array.isArray(row))) {
-        return {
-            status: 400,
-            error: 'Every row must be an object.'
-        };
-    }
-    return {
-        rows: rows
-    };
-}
-/**
- * The org's members by address, read only when a row names an owner.
- *
- * A file with no owner column costs no roster read; a file with one costs
- * exactly one, however many rows it has.
- */ export async function ownerDirectory(orgId, rows) {
-    const directory = new Map();
-    if (!rows.some((row)=>row.ownerEmail)) return directory;
-    const members = await listOrgMembers(orgId);
-    for (const member of members){
-        var _member_email;
-        const email = String((_member_email = member.email) != null ? _member_email : '').trim().toLowerCase();
-        if (email && member.$id) directory.set(email, String(member.$id));
-    }
-    return directory;
-}
-
-//# sourceMappingURL=import-context.js.map

package/src/lib/server/import-context.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/import-context.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT EVERY CSV IMPORT ROUTE ASKS BEFORE IT READS A ROW (AGL-2602, shared\n * by the companies import since AGL-2621).\n *\n * Who is asking and on whose behalf, whether the request is the size a\n * chunk is allowed to be, and — when a row names an owner — which member\n * of the org that address is. The contacts route settled each answer; the\n * companies route needs the same three and must not spell them\n * differently, because two gates for one permission is how one of them\n * comes to be wider.\n *\n * ## Who may call an import\n *\n * The same two gates the rules put on every CRM collection: a site role\n * on the host the request names, AND the organization's `data.manage`\n * permission resolved through the member's custom role and overrides. The\n * Admin SDK evaluates no rules, so this is the enforcement rather than an\n * echo of it — and `data.manage` rather than the raw role because an owner\n * who unticked \"Manage data\" on a custom role meant it. A staff token\n * passes both gates the way it does on every console route: support\n * importing a customer's file for them is the support act this exists for.\n */\n\nimport {\n  consentGroupScope,\n  crmScopeTokens,\n  ORG_SCOPE_TOKEN,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  firebaseAdmin,\n  getOrgForHost,\n  listOrgMembers,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { crmSuiteRefusal } from './suite-gate'\n\n/** Everything an import needs about who is asking, or the refusal to send back. */\nexport type ImportContext =\n  | {\n      ok: true\n      uid: string\n      /** The importer's address, for who set off the runs it causes (AGL-3376). */\n      email: string | null\n      hostId: string\n      orgId: string\n      org: Record<string, unknown>\n      /**\n       * The stamp a record CREATED by this import carries — the org, when\n       * the org widened its default, and otherwise the capturing group.\n       */\n      scopeTokens: string[]\n      /**\n       * The tokens a record must overlap to be SEEN from this site: the\n       * group's own, plus `org`, because an org-wide record is visible to\n       * every site in the account. The reader's set is wider than the\n       * creator's stamp, exactly as it is on the collection listeners.\n       */\n      readTokens: string[]\n    }\n  | { ok: false; status: number; body: Record<string, unknown> }\n\nexport type ImportRequest = Parameters<PluginApiHandler>[0]\n\n/** Who is asking, and on whose behalf. */\nexport async function resolveImportContext(req: ImportRequest): Promise<ImportContext> {\n  const hostId = String(req.body?.hostId ?? '')\n  if (!hostId) {\n    return { ok: false, status: 400, body: { error: 'Missing hostId' } }\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) {\n    return { ok: false, status: 401, body: { error: 'Unauthenticated' } }\n  }\n  const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  const staff = decoded['staff'] === true\n  const firestore = firebaseAdmin.app().firestore()\n  const hostSnapshot = await firestore.collection('hosts').doc(hostId).get()\n  if (!hostSnapshot.exists) {\n    return { ok: false, status: 404, body: { error: 'Unknown site' } }\n  }\n  const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n  if (!staff && memberRole !== 'admin' && memberRole !== 'editor') {\n    return {\n      ok: false,\n      status: 403,\n      body: { error: 'Not a site admin or editor' },\n    }\n  }\n  const resolved = await getOrgForHost(hostId).catch(() => null)\n  const orgId = String(resolved?.orgId ?? '')\n  if (!orgId) {\n    return {\n      ok: false,\n      status: 404,\n      body: { error: 'This site has no organization, so it has no CRM.' },\n    }\n  }\n  const org = (resolved?.org ?? {}) as Record<string, unknown>\n  const membership = await resolveOrgMembership(decoded.uid, orgId).catch(\n    () => null,\n  )\n  const member = membership?.member\n  if (\n    !staff &&\n    (!member ||\n      (member as { orgSuspended?: boolean }).orgSuspended === true ||\n      !(await memberHasOrgPermission(orgId, member, 'data.manage')))\n  ) {\n    return {\n      ok: false,\n      status: 403,\n      body: {\n        error:\n          'Your organization role does not allow managing contacts and ' +\n          'companies, so it cannot import them.',\n      },\n    }\n  }\n  // Every file this context serves — contacts, companies, deals, tasks and\n  // leads — is the CRM's to import, whoever is asking (AGL-2787).\n  const suite = crmSuiteRefusal(org, 'Importing from a CSV file')\n  if (suite) return { ok: false, status: suite.status, body: suite.body }\n  const group = await consentGroupForSite(hostId)\n  return {\n    ok: true,\n    uid: decoded.uid,\n    email: typeof decoded.email === 'string' ? decoded.email : null,\n    hostId,\n    orgId,\n    org,\n    scopeTokens: crmScopeTokens(org, group),\n    readTokens: [ORG_SCOPE_TOKEN, ...consentGroupScope(group)],\n  }\n}\n\n/** The rows a request may carry, or the refusal to send back. */\nexport function readImportRows<R>(\n  req: ImportRequest,\n  limits: { maxBodyBytes: number; chunkSize: number },\n): { rows: R[] } | { status: number; error: string } {\n  if ((req.rawBody?.length ?? 0) > limits.maxBodyBytes) {\n    return {\n      status: 413,\n      error: 'That request is too large. Import the file in smaller pieces.',\n    }\n  }\n  const rows = req.body?.rows\n  if (!Array.isArray(rows) || rows.length === 0) {\n    return { status: 400, error: 'No rows to import.' }\n  }\n  if (rows.length > limits.chunkSize) {\n    return {\n      status: 400,\n      error: `At most ${limits.chunkSize} rows per request.`,\n    }\n  }\n  if (!rows.every((row) => row && typeof row === 'object' && !Array.isArray(row))) {\n    return { status: 400, error: 'Every row must be an object.' }\n  }\n  return { rows: rows as R[] }\n}\n\n/**\n * The org's members by address, read only when a row names an owner.\n *\n * A file with no owner column costs no roster read; a file with one costs\n * exactly one, however many rows it has.\n */\nexport async function ownerDirectory(\n  orgId: string,\n  rows: readonly { ownerEmail?: string }[],\n): Promise<Map<string, string>> {\n  const directory = new Map<string, string>()\n  if (!rows.some((row) => row.ownerEmail)) return directory\n  const members = await listOrgMembers(orgId)\n  for (const member of members) {\n    const email = String(member.email ?? '')\n      .trim()\n      .toLowerCase()\n    if (email && member.$id) directory.set(email, String(member.$id))\n  }\n  return directory\n}\n"],"names":["consentGroupScope","crmScopeTokens","ORG_SCOPE_TOKEN","consentGroupForSite","firebaseAdmin","getOrgForHost","listOrgMembers","memberHasOrgPermission","resolveOrgMembership","crmSuiteRefusal","resolveImportContext","req","hostSnapshot","hostId","String","body","ok","status","error","authorization","headers","idToken","startsWith","slice","length","undefined","decoded","app","auth","verifyIdToken","staff","firestore","collection","doc","get","exists","memberRole","uid","resolved","catch","orgId","org","membership","member","orgSuspended","suite","group","email","scopeTokens","readTokens","readImportRows","limits","rawBody","maxBodyBytes","rows","Array","isArray","chunkSize","every","row","ownerDirectory","directory","Map","some","ownerEmail","members","trim","toLowerCase","$id","set"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;CAqBC,GAED,SACEA,iBAAiB,EACjBC,cAAc,EACdC,eAAe,QAEV,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,aAAa,EACbC,aAAa,EACbC,cAAc,EACdC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,eAAe,QAAQ,kBAAc;AA6B9C,wCAAwC,GACxC,OAAO,eAAeC,qBAAqBC,GAAkB;cAK9BA,4BAcTC;QAlBED;IAAtB,MAAME,SAASC,gBAAOH,YAAAA,IAAII,IAAI,qBAARJ,UAAUE,MAAM,mBAAI;IAC1C,IAAI,CAACA,QAAQ;QACX,OAAO;YAAEG,IAAI;YAAOC,QAAQ;YAAKF,MAAM;gBAAEG,OAAO;YAAiB;QAAE;IACrE;IACA,MAAMC,gBAAgBL,QAAOH,6BAAAA,IAAIS,OAAO,CAACD,aAAa,YAAzBR,6BAA6B;IAC1D,MAAMU,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS;QACZ,OAAO;YAAEL,IAAI;YAAOC,QAAQ;YAAKF,MAAM;gBAAEG,OAAO;YAAkB;QAAE;IACtE;IACA,MAAMQ,UAAU,MAAMtB,cAAcuB,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR;IAC/D,MAAMS,QAAQJ,OAAO,CAAC,QAAQ,KAAK;IACnC,MAAMK,YAAY3B,cAAcuB,GAAG,GAAGI,SAAS;IAC/C,MAAMnB,eAAe,MAAMmB,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACpB,QAAQqB,GAAG;IACxE,IAAI,CAACtB,aAAauB,MAAM,EAAE;QACxB,OAAO;YAAEnB,IAAI;YAAOC,QAAQ;YAAKF,MAAM;gBAAEG,OAAO;YAAe;QAAE;IACnE;IACA,MAAMkB,aAAa,EAACxB,oBAAAA,aAAasB,GAAG,CAAC,0BAAjBtB,oBAAmC,CAAC,EAAE,CAACc,QAAQW,GAAG,CAAC;IACvE,IAAI,CAACP,SAASM,eAAe,WAAWA,eAAe,UAAU;QAC/D,OAAO;YACLpB,IAAI;YACJC,QAAQ;YACRF,MAAM;gBAAEG,OAAO;YAA6B;QAC9C;IACF;IACA,MAAMoB,WAAW,MAAMjC,cAAcQ,QAAQ0B,KAAK,CAAC,IAAM;IACzD,MAAMC,QAAQ1B,gBAAOwB,4BAAAA,SAAUE,KAAK,oBAAI;IACxC,IAAI,CAACA,OAAO;QACV,OAAO;YACLxB,IAAI;YACJC,QAAQ;YACRF,MAAM;gBAAEG,OAAO;YAAmD;QACpE;IACF;IACA,MAAMuB,eAAOH,4BAAAA,SAAUG,GAAG,oBAAI,CAAC;IAC/B,MAAMC,aAAa,MAAMlC,qBAAqBkB,QAAQW,GAAG,EAAEG,OAAOD,KAAK,CACrE,IAAM;IAER,MAAMI,SAASD,8BAAAA,WAAYC,MAAM;IACjC,IACE,CAACb,SACA,CAAA,CAACa,UACA,AAACA,OAAsCC,YAAY,KAAK,QACxD,CAAE,MAAMrC,uBAAuBiC,OAAOG,QAAQ,cAAc,GAC9D;QACA,OAAO;YACL3B,IAAI;YACJC,QAAQ;YACRF,MAAM;gBACJG,OACE,iEACA;YACJ;QACF;IACF;IACA,yEAAyE;IACzE,gEAAgE;IAChE,MAAM2B,QAAQpC,gBAAgBgC,KAAK;IACnC,IAAII,OAAO,OAAO;QAAE7B,IAAI;QAAOC,QAAQ4B,MAAM5B,MAAM;QAAEF,MAAM8B,MAAM9B,IAAI;IAAC;IACtE,MAAM+B,QAAQ,MAAM3C,oBAAoBU;IACxC,OAAO;QACLG,IAAI;QACJqB,KAAKX,QAAQW,GAAG;QAChBU,OAAO,OAAOrB,QAAQqB,KAAK,KAAK,WAAWrB,QAAQqB,KAAK,GAAG;QAC3DlC;QACA2B;QACAC;QACAO,aAAa/C,eAAewC,KAAKK;QACjCG,YAAY;YAAC/C;eAAoBF,kBAAkB8C;SAAO;IAC5D;AACF;AAEA,+DAA+D,GAC/D,OAAO,SAASI,eACdvC,GAAkB,EAClBwC,MAAmD;;QAE9CxC,cAMQA;IANb,IAAI,UAACA,eAAAA,IAAIyC,OAAO,qBAAXzC,aAAaa,MAAM,mBAAI,KAAK2B,OAAOE,YAAY,EAAE;QACpD,OAAO;YACLpC,QAAQ;YACRC,OAAO;QACT;IACF;IACA,MAAMoC,QAAO3C,YAAAA,IAAII,IAAI,qBAARJ,UAAU2C,IAAI;IAC3B,IAAI,CAACC,MAAMC,OAAO,CAACF,SAASA,KAAK9B,MAAM,KAAK,GAAG;QAC7C,OAAO;YAAEP,QAAQ;YAAKC,OAAO;QAAqB;IACpD;IACA,IAAIoC,KAAK9B,MAAM,GAAG2B,OAAOM,SAAS,EAAE;QAClC,OAAO;YACLxC,QAAQ;YACRC,OAAO,CAAC,QAAQ,EAAEiC,OAAOM,SAAS,CAAC,kBAAkB,CAAC;QACxD;IACF;IACA,IAAI,CAACH,KAAKI,KAAK,CAAC,CAACC,MAAQA,OAAO,OAAOA,QAAQ,YAAY,CAACJ,MAAMC,OAAO,CAACG,OAAO;QAC/E,OAAO;YAAE1C,QAAQ;YAAKC,OAAO;QAA+B;IAC9D;IACA,OAAO;QAAEoC,MAAMA;IAAY;AAC7B;AAEA;;;;;CAKC,GACD,OAAO,eAAeM,eACpBpB,KAAa,EACbc,IAAwC;IAExC,MAAMO,YAAY,IAAIC;IACtB,IAAI,CAACR,KAAKS,IAAI,CAAC,CAACJ,MAAQA,IAAIK,UAAU,GAAG,OAAOH;IAChD,MAAMI,UAAU,MAAM3D,eAAekC;IACrC,KAAK,MAAMG,UAAUsB,QAAS;YACPtB;QAArB,MAAMI,QAAQjC,QAAO6B,gBAAAA,OAAOI,KAAK,YAAZJ,gBAAgB,IAClCuB,IAAI,GACJC,WAAW;QACd,IAAIpB,SAASJ,OAAOyB,GAAG,EAAEP,UAAUQ,GAAG,CAACtB,OAAOjC,OAAO6B,OAAOyB,GAAG;IACjE;IACA,OAAOP;AACT"}

package/src/lib/server/lead-source-values.d.ts

@@ -1,50 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { type PluginApiHandler } from '@aglyn/aglyn/server';
-/**
- * `POST crm/lead-source-values` — rename a lead source value, or delete one
- * and move its records to another (AGL-3298).
- *
- * Body: `{ hostId | orgId, action: 'rename', valueId, label }` or
- * `{ hostId | orgId, action: 'delete', valueId, replaceWith: label | null }`.
- *
- * Records store the value's LABEL (see the picklist block in `crm.ts`), so
- * both moves change records as well as the list: every lead and every
- * contact holding the old label is rewritten to the new one — or, for a
- * delete with no replacement, cleared. That is Salesforce's Replace, done
- * as part of the move, so a report grouped by lead source follows a rename
- * instead of splitting into the old name and the new.
- *
- * ## The list first, then the records
- *
- * The list is written in a transaction before any record: from that moment
- * no picker offers the old label and no import or API write accepts it, so
- * the sweep that follows cannot be outrun by a new record taking the name
- * it is removing. A sweep interrupted part-way leaves records holding a
- * label the list no longer has, which they show as "(not in the list)"; the
- * same request sent again finishes it, because the rename of a value to its
- * own current label is a no-op on the list and still sweeps.
- *
- * ## Who may
- *
- * Whoever may write the CRM — `authorizeCrmWriter`, the question every CRM
- * route asks — which is who the rules let edit the list itself. The sweep
- * reaches every lead and contact in the org whatever the caller's scope:
- * it changes one label to another that the same caller could already have
- * picked, and reveals nothing about the records but their count.
- */
-export declare const crmLeadSourceValuesHandler: PluginApiHandler;

package/src/lib/server/lead-source-values.js

@@ -1,191 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { consentGroupForHost, CONTACT_FACETS_FIELD, CRM_COLLECTIONS, CRM_LEAD_SOURCE_KEY_FIELD, CRM_LEAD_SOURCE_PICKLIST, crmLeadSourceKey, effectiveCrmLeadSourcePicklist, newResourceScopeFields, normalizeCrmPicklist, ORG_SCOPE_TOKEN } from "@aglyn/aglyn/server";
-import { firebaseAdmin } from "@aglyn/tenant-data-admin";
-import { FieldPath, FieldValue } from "firebase-admin/firestore";
-import { deletePicklistValue, renamePicklistValue } from "../model/lead-source-values.js";
-import { orgHostIds, readCrmRouteScope } from "./org-caller.js";
-import { authorizeCrmWriter } from "./task-routes.js";
-/** What the suite gate names when a plan without the CRM asks. */ const SUITE_ACT = "Editing the organization's lead sources";
-/** Writes per batch — under Firestore's 500, with room to spare. */ const BATCH_SIZE = 400;
-/**
- * Set `field` to `to` (or remove it, for `null`) on every document `query`
- * finds holding `from`, a batch at a time, with `beside` written alongside.
- * Answers how many were written.
- *
- * The query is re-run after each batch rather than paged, because each
- * batch moves its documents OUT of the query's answer — the next run finds
- * only what is left, and a run that finds nothing is the end.
- */ async function replaceEverywhere(firestore, query, field, to, beside = {}) {
-    let written = 0;
-    for(;;){
-        const page = await query.limit(BATCH_SIZE).get();
-        if (page.empty) return written;
-        const batch = firestore.batch();
-        for (const snapshot of page.docs){
-            batch.update(snapshot.ref, field, to != null ? to : FieldValue.delete(), 'updatedAt', FieldValue.serverTimestamp(), ...Object.entries(beside).flat());
-        }
-        await batch.commit();
-        written += page.size;
-        if (page.size < BATCH_SIZE) return written;
-    }
-}
-/**
- * `POST crm/lead-source-values` — rename a lead source value, or delete one
- * and move its records to another (AGL-3298).
- *
- * Body: `{ hostId | orgId, action: 'rename', valueId, label }` or
- * `{ hostId | orgId, action: 'delete', valueId, replaceWith: label | null }`.
- *
- * Records store the value's LABEL (see the picklist block in `crm.ts`), so
- * both moves change records as well as the list: every lead and every
- * contact holding the old label is rewritten to the new one — or, for a
- * delete with no replacement, cleared. That is Salesforce's Replace, done
- * as part of the move, so a report grouped by lead source follows a rename
- * instead of splitting into the old name and the new.
- *
- * ## The list first, then the records
- *
- * The list is written in a transaction before any record: from that moment
- * no picker offers the old label and no import or API write accepts it, so
- * the sweep that follows cannot be outrun by a new record taking the name
- * it is removing. A sweep interrupted part-way leaves records holding a
- * label the list no longer has, which they show as "(not in the list)"; the
- * same request sent again finishes it, because the rename of a value to its
- * own current label is a no-op on the list and still sweeps.
- *
- * ## Who may
- *
- * Whoever may write the CRM — `authorizeCrmWriter`, the question every CRM
- * route asks — which is who the rules let edit the list itself. The sweep
- * reaches every lead and contact in the org whatever the caller's scope:
- * it changes one label to another that the same caller could already have
- * picked, and reveals nothing about the records but their count.
- */ export const crmLeadSourceValuesHandler = async (req, res)=>{
-    var _req_body, _body_valueId;
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        res.status(405).json({
-            error: 'Method not allowed'
-        });
-        return;
-    }
-    const body = (_req_body = req.body) != null ? _req_body : {};
-    const scope = readCrmRouteScope(body);
-    if (!scope) {
-        res.status(400).json({
-            error: 'Missing hostId'
-        });
-        return;
-    }
-    const action = body['action'];
-    const valueId = String((_body_valueId = body['valueId']) != null ? _body_valueId : '').trim().slice(0, 64);
-    if (action !== 'rename' && action !== 'delete' || !valueId) {
-        res.status(400).json({
-            error: 'Name a value, and whether to rename or delete it.'
-        });
-        return;
-    }
-    const replaceWith = body['replaceWith'] === null || body['replaceWith'] === undefined ? null : String(body['replaceWith']);
-    try {
-        const writer = await authorizeCrmWriter(req, scope, {
-            suiteAct: SUITE_ACT
-        });
-        if (writer.ok === false) {
-            res.status(writer.status).json(writer.body);
-            return;
-        }
-        const firestore = firebaseAdmin.app().firestore();
-        const orgRef = firestore.collection('orgs').doc(writer.orgId);
-        const listRef = orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST);
-        /*
-     * THE LIST. Read and written in one transaction, so two admins editing
-     * at once cannot each write a list missing the other's change.
-     */ const moved = await firestore.runTransaction(async (transaction)=>{
-            var _body_label, _ref, _ref1;
-            var _move_picklist_values_find, _move_picklist_values_find1;
-            const snapshot = await transaction.get(listRef);
-            const before = effectiveCrmLeadSourcePicklist(snapshot.data());
-            const value = before.values.find((entry)=>entry.id === valueId);
-            if (!value) return {
-                ok: false,
-                error: 'That value is no longer in the list.'
-            };
-            const move = action === 'rename' ? renamePicklistValue(before, valueId, String((_body_label = body['label']) != null ? _body_label : '')) : deletePicklistValue(before, valueId, replaceWith);
-            if (move.ok === false) return move;
-            const created = normalizeCrmPicklist(snapshot.data()) === null;
-            transaction.set(listRef, _extends({
-                values: move.picklist.values,
-                defaultValueId: move.picklist.defaultValueId,
-                updatedAt: FieldValue.serverTimestamp()
-            }, created ? _extends({
-                hostId: scope.hostId || null,
-                createdAt: FieldValue.serverTimestamp()
-            }, newResourceScopeFields([
-                ORG_SCOPE_TOKEN
-            ])) : {}), {
-                merge: true
-            });
-            const to = action === 'rename' ? (_ref = (_move_picklist_values_find = move.picklist.values.find((entry)=>entry.id === valueId)) == null ? void 0 : _move_picklist_values_find.label) != null ? _ref : null : replaceWith === null ? null : (_ref1 = (_move_picklist_values_find1 = move.picklist.values.find((entry)=>entry.label.toLowerCase() === replaceWith.trim().toLowerCase())) == null ? void 0 : _move_picklist_values_find1.label) != null ? _ref1 : null;
-            return {
-                ok: true,
-                from: value.label,
-                to
-            };
-        });
-        if (moved.ok === false) {
-            res.status(400).json({
-                error: moved.error
-            });
-            return;
-        }
-        /*
-     * THE RECORDS. Leads by the field itself; contacts by each holder's
-     * facet, one query per consent group the org's sites belong to — a
-     * contact's lead source is the holder's own, like the rest of its
-     * profile. A rename to the same label moves nothing, and says so.
-     */ let leads = 0;
-        let contacts = 0;
-        if (moved.from !== moved.to) {
-            leads = await replaceEverywhere(firestore, orgRef.collection('leads').where('leadSource', '==', moved.from), 'leadSource', moved.to, // The key the Leads list filters by moves with the label (AGL-3321).
-            {
-                [CRM_LEAD_SOURCE_KEY_FIELD]: crmLeadSourceKey(moved.to)
-            });
-            const hostIds = await orgHostIds(firestore, writer.orgId);
-            const groupIds = [
-                ...new Set(hostIds.map((hostId)=>consentGroupForHost(writer.org, hostId).groupId))
-            ].filter(Boolean);
-            for (const groupId of groupIds){
-                const path = new FieldPath(CONTACT_FACETS_FIELD, groupId, 'leadSource');
-                contacts += await replaceEverywhere(firestore, orgRef.collection('contacts').where(path, '==', moved.from), path, moved.to);
-            }
-        }
-        const answer = {
-            ok: true,
-            leads,
-            contacts
-        };
-        res.status(200).json(answer);
-    } catch (error) {
-        console.error('[crm] lead-source-values failed', error);
-        res.status(500).json({
-            error: 'The lead sources could not be saved.'
-        });
-    }
-};
-
-//# sourceMappingURL=lead-source-values.js.map

package/src/lib/server/lead-source-values.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/lead-source-values.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  consentGroupForHost,\n  CONTACT_FACETS_FIELD,\n  CRM_COLLECTIONS,\n  CRM_LEAD_SOURCE_KEY_FIELD,\n  CRM_LEAD_SOURCE_PICKLIST,\n  crmLeadSourceKey,\n  type CrmPicklist,\n  effectiveCrmLeadSourcePicklist,\n  newResourceScopeFields,\n  normalizeCrmPicklist,\n  ORG_SCOPE_TOKEN,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldPath, FieldValue } from 'firebase-admin/firestore'\nimport {\n  deletePicklistValue,\n  type LeadSourceValuesResponse,\n  type PicklistMove,\n  renamePicklistValue,\n} from '../model/lead-source-values'\nimport { orgHostIds, readCrmRouteScope } from './org-caller'\nimport { authorizeCrmWriter } from './task-routes'\n\n/** What the suite gate names when a plan without the CRM asks. */\nconst SUITE_ACT = \"Editing the organization's lead sources\"\n\n/** Writes per batch — under Firestore's 500, with room to spare. */\nconst BATCH_SIZE = 400\n\n/**\n * Set `field` to `to` (or remove it, for `null`) on every document `query`\n * finds holding `from`, a batch at a time, with `beside` written alongside.\n * Answers how many were written.\n *\n * The query is re-run after each batch rather than paged, because each\n * batch moves its documents OUT of the query's answer — the next run finds\n * only what is left, and a run that finds nothing is the end.\n */\nasync function replaceEverywhere(\n  firestore: FirebaseFirestore.Firestore,\n  query: FirebaseFirestore.Query,\n  field: string | FirebaseFirestore.FieldPath,\n  to: string | null,\n  beside: Record<string, unknown> = {},\n): Promise<number> {\n  let written = 0\n  for (;;) {\n    const page = await query.limit(BATCH_SIZE).get()\n    if (page.empty) return written\n    const batch = firestore.batch()\n    for (const snapshot of page.docs) {\n      batch.update(\n        snapshot.ref,\n        field,\n        to ?? FieldValue.delete(),\n        'updatedAt',\n        FieldValue.serverTimestamp(),\n        ...Object.entries(beside).flat(),\n      )\n    }\n    await batch.commit()\n    written += page.size\n    if (page.size < BATCH_SIZE) return written\n  }\n}\n\n/**\n * `POST crm/lead-source-values` — rename a lead source value, or delete one\n * and move its records to another (AGL-3298).\n *\n * Body: `{ hostId | orgId, action: 'rename', valueId, label }` or\n * `{ hostId | orgId, action: 'delete', valueId, replaceWith: label | null }`.\n *\n * Records store the value's LABEL (see the picklist block in `crm.ts`), so\n * both moves change records as well as the list: every lead and every\n * contact holding the old label is rewritten to the new one — or, for a\n * delete with no replacement, cleared. That is Salesforce's Replace, done\n * as part of the move, so a report grouped by lead source follows a rename\n * instead of splitting into the old name and the new.\n *\n * ## The list first, then the records\n *\n * The list is written in a transaction before any record: from that moment\n * no picker offers the old label and no import or API write accepts it, so\n * the sweep that follows cannot be outrun by a new record taking the name\n * it is removing. A sweep interrupted part-way leaves records holding a\n * label the list no longer has, which they show as \"(not in the list)\"; the\n * same request sent again finishes it, because the rename of a value to its\n * own current label is a no-op on the list and still sweeps.\n *\n * ## Who may\n *\n * Whoever may write the CRM — `authorizeCrmWriter`, the question every CRM\n * route asks — which is who the rules let edit the list itself. The sweep\n * reaches every lead and contact in the org whatever the caller's scope:\n * it changes one label to another that the same caller could already have\n * picked, and reveals nothing about the records but their count.\n */\nexport const crmLeadSourceValuesHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const action = body['action']\n  const valueId = String(body['valueId'] ?? '').trim().slice(0, 64)\n  if ((action !== 'rename' && action !== 'delete') || !valueId) {\n    res.status(400).json({ error: 'Name a value, and whether to rename or delete it.' })\n    return\n  }\n  const replaceWith =\n    body['replaceWith'] === null || body['replaceWith'] === undefined\n      ? null\n      : String(body['replaceWith'])\n\n  try {\n    const writer = await authorizeCrmWriter(req, scope, { suiteAct: SUITE_ACT })\n    if (writer.ok === false) {\n      res.status(writer.status).json(writer.body)\n      return\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(writer.orgId)\n    const listRef = orgRef.collection(CRM_COLLECTIONS.picklists).doc(CRM_LEAD_SOURCE_PICKLIST)\n\n    /*\n     * THE LIST. Read and written in one transaction, so two admins editing\n     * at once cannot each write a list missing the other's change.\n     */\n    const moved = await firestore.runTransaction(async (transaction) => {\n      const snapshot = await transaction.get(listRef)\n      const before: CrmPicklist = effectiveCrmLeadSourcePicklist(snapshot.data())\n      const value = before.values.find((entry) => entry.id === valueId)\n      if (!value) return { ok: false as const, error: 'That value is no longer in the list.' }\n      const move: PicklistMove =\n        action === 'rename'\n          ? renamePicklistValue(before, valueId, String(body['label'] ?? ''))\n          : deletePicklistValue(before, valueId, replaceWith)\n      if (move.ok === false) return move\n      const created = normalizeCrmPicklist(snapshot.data()) === null\n      transaction.set(\n        listRef,\n        {\n          values: move.picklist.values,\n          defaultValueId: move.picklist.defaultValueId,\n          updatedAt: FieldValue.serverTimestamp(),\n          // The stamp every org-wide CRM document carries (see the Fields\n          // page), written when this move is what creates the document.\n          ...(created\n            ? {\n                hostId: scope.hostId || null,\n                createdAt: FieldValue.serverTimestamp(),\n                ...newResourceScopeFields([ORG_SCOPE_TOKEN]),\n              }\n            : {}),\n        },\n        { merge: true },\n      )\n      const to =\n        action === 'rename'\n          ? (move.picklist.values.find((entry) => entry.id === valueId)?.label ?? null)\n          : replaceWith === null\n            ? null\n            : (move.picklist.values.find(\n                (entry) => entry.label.toLowerCase() === replaceWith.trim().toLowerCase(),\n              )?.label ?? null)\n      return { ok: true as const, from: value.label, to }\n    })\n    if (moved.ok === false) {\n      res.status(400).json({ error: moved.error })\n      return\n    }\n\n    /*\n     * THE RECORDS. Leads by the field itself; contacts by each holder's\n     * facet, one query per consent group the org's sites belong to — a\n     * contact's lead source is the holder's own, like the rest of its\n     * profile. A rename to the same label moves nothing, and says so.\n     */\n    let leads = 0\n    let contacts = 0\n    if (moved.from !== moved.to) {\n      leads = await replaceEverywhere(\n        firestore,\n        orgRef.collection('leads').where('leadSource', '==', moved.from),\n        'leadSource',\n        moved.to,\n        // The key the Leads list filters by moves with the label (AGL-3321).\n        { [CRM_LEAD_SOURCE_KEY_FIELD]: crmLeadSourceKey(moved.to) },\n      )\n      const hostIds = await orgHostIds(firestore, writer.orgId)\n      const groupIds = [\n        ...new Set(hostIds.map((hostId) => consentGroupForHost(writer.org, hostId).groupId)),\n      ].filter(Boolean)\n      for (const groupId of groupIds) {\n        const path = new FieldPath(CONTACT_FACETS_FIELD, groupId, 'leadSource')\n        contacts += await replaceEverywhere(\n          firestore,\n          orgRef.collection('contacts').where(path, '==', moved.from),\n          path,\n          moved.to,\n        )\n      }\n    }\n    const answer: LeadSourceValuesResponse = { ok: true, leads, contacts }\n    res.status(200).json(answer)\n  } catch (error) {\n    console.error('[crm] lead-source-values failed', error)\n    res.status(500).json({ error: 'The lead sources could not be saved.' })\n  }\n}\n"],"names":["consentGroupForHost","CONTACT_FACETS_FIELD","CRM_COLLECTIONS","CRM_LEAD_SOURCE_KEY_FIELD","CRM_LEAD_SOURCE_PICKLIST","crmLeadSourceKey","effectiveCrmLeadSourcePicklist","newResourceScopeFields","normalizeCrmPicklist","ORG_SCOPE_TOKEN","firebaseAdmin","FieldPath","FieldValue","deletePicklistValue","renamePicklistValue","orgHostIds","readCrmRouteScope","authorizeCrmWriter","SUITE_ACT","BATCH_SIZE","replaceEverywhere","firestore","query","field","to","beside","written","page","limit","get","empty","batch","snapshot","docs","update","ref","delete","serverTimestamp","Object","entries","flat","commit","size","crmLeadSourceValuesHandler","req","res","body","method","setHeader","status","json","error","scope","action","valueId","String","trim","slice","replaceWith","undefined","writer","suiteAct","ok","app","orgRef","collection","doc","orgId","listRef","picklists","moved","runTransaction","transaction","move","before","data","value","values","find","entry","id","created","set","picklist","defaultValueId","updatedAt","hostId","createdAt","merge","label","toLowerCase","from","leads","contacts","where","hostIds","groupIds","Set","map","org","groupId","filter","Boolean","path","answer","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,mBAAmB,EACnBC,oBAAoB,EACpBC,eAAe,EACfC,yBAAyB,EACzBC,wBAAwB,EACxBC,gBAAgB,EAEhBC,8BAA8B,EAC9BC,sBAAsB,EACtBC,oBAAoB,EACpBC,eAAe,QAEV,sBAAqB;AAC5B,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,EAAEC,UAAU,QAAQ,2BAA0B;AAChE,SACEC,mBAAmB,EAGnBC,mBAAmB,QACd,iCAA6B;AACpC,SAASC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAC5D,SAASC,kBAAkB,QAAQ,mBAAe;AAElD,gEAAgE,GAChE,MAAMC,YAAY;AAElB,kEAAkE,GAClE,MAAMC,aAAa;AAEnB;;;;;;;;CAQC,GACD,eAAeC,kBACbC,SAAsC,EACtCC,KAA8B,EAC9BC,KAA2C,EAC3CC,EAAiB,EACjBC,SAAkC,CAAC,CAAC;IAEpC,IAAIC,UAAU;IACd,OAAS;QACP,MAAMC,OAAO,MAAML,MAAMM,KAAK,CAACT,YAAYU,GAAG;QAC9C,IAAIF,KAAKG,KAAK,EAAE,OAAOJ;QACvB,MAAMK,QAAQV,UAAUU,KAAK;QAC7B,KAAK,MAAMC,YAAYL,KAAKM,IAAI,CAAE;YAChCF,MAAMG,MAAM,CACVF,SAASG,GAAG,EACZZ,OACAC,aAAAA,KAAMZ,WAAWwB,MAAM,IACvB,aACAxB,WAAWyB,eAAe,OACvBC,OAAOC,OAAO,CAACd,QAAQe,IAAI;QAElC;QACA,MAAMT,MAAMU,MAAM;QAClBf,WAAWC,KAAKe,IAAI;QACpB,IAAIf,KAAKe,IAAI,GAAGvB,YAAY,OAAOO;IACrC;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GACD,OAAO,MAAMiB,6BAA+C,OAAOC,KAAKC;QAMxDD,WAOSE;IAZvB,IAAIF,IAAIG,MAAM,KAAK,QAAQ;QACzBF,IAAIG,SAAS,CAAC,SAAS;QACvBH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;QACnD;IACF;IACA,MAAML,QAAQF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;IAC3B,MAAMQ,QAAQpC,kBAAkB8B;IAChC,IAAI,CAACM,OAAO;QACVP,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAME,SAASP,IAAI,CAAC,SAAS;IAC7B,MAAMQ,UAAUC,QAAOT,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB,IAAIU,IAAI,GAAGC,KAAK,CAAC,GAAG;IAC9D,IAAI,AAACJ,WAAW,YAAYA,WAAW,YAAa,CAACC,SAAS;QAC5DT,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoD;QAClF;IACF;IACA,MAAMO,cACJZ,IAAI,CAAC,cAAc,KAAK,QAAQA,IAAI,CAAC,cAAc,KAAKa,YACpD,OACAJ,OAAOT,IAAI,CAAC,cAAc;IAEhC,IAAI;QACF,MAAMc,SAAS,MAAM3C,mBAAmB2B,KAAKQ,OAAO;YAAES,UAAU3C;QAAU;QAC1E,IAAI0C,OAAOE,EAAE,KAAK,OAAO;YACvBjB,IAAII,MAAM,CAACW,OAAOX,MAAM,EAAEC,IAAI,CAACU,OAAOd,IAAI;YAC1C;QACF;QACA,MAAMzB,YAAYX,cAAcqD,GAAG,GAAG1C,SAAS;QAC/C,MAAM2C,SAAS3C,UAAU4C,UAAU,CAAC,QAAQC,GAAG,CAACN,OAAOO,KAAK;QAC5D,MAAMC,UAAUJ,OAAOC,UAAU,CAAC/D,gBAAgBmE,SAAS,EAAEH,GAAG,CAAC9D;QAEjE;;;KAGC,GACD,MAAMkE,QAAQ,MAAMjD,UAAUkD,cAAc,CAAC,OAAOC;gBAOA1B;gBAwB3C2B,4BAGEA;YAjCT,MAAMzC,WAAW,MAAMwC,YAAY3C,GAAG,CAACuC;YACvC,MAAMM,SAAsBpE,+BAA+B0B,SAAS2C,IAAI;YACxE,MAAMC,QAAQF,OAAOG,MAAM,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,EAAE,KAAK1B;YACzD,IAAI,CAACsB,OAAO,OAAO;gBAAEd,IAAI;gBAAgBX,OAAO;YAAuC;YACvF,MAAMsB,OACJpB,WAAW,WACPvC,oBAAoB4D,QAAQpB,SAASC,QAAOT,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,OAC7DjC,oBAAoB6D,QAAQpB,SAASI;YAC3C,IAAIe,KAAKX,EAAE,KAAK,OAAO,OAAOW;YAC9B,MAAMQ,UAAUzE,qBAAqBwB,SAAS2C,IAAI,QAAQ;YAC1DH,YAAYU,GAAG,CACbd,SACA;gBACES,QAAQJ,KAAKU,QAAQ,CAACN,MAAM;gBAC5BO,gBAAgBX,KAAKU,QAAQ,CAACC,cAAc;gBAC5CC,WAAWzE,WAAWyB,eAAe;eAGjC4C,UACA;gBACEK,QAAQlC,MAAMkC,MAAM,IAAI;gBACxBC,WAAW3E,WAAWyB,eAAe;eAClC9B,uBAAuB;gBAACE;aAAgB,KAE7C,CAAC,IAEP;gBAAE+E,OAAO;YAAK;YAEhB,MAAMhE,KACJ6B,WAAW,oBACNoB,6BAAAA,KAAKU,QAAQ,CAACN,MAAM,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,EAAE,KAAK1B,6BAAlDmB,2BAA4DgB,KAAK,mBAAI,OACtE/B,gBAAgB,OACd,iBACCe,8BAAAA,KAAKU,QAAQ,CAACN,MAAM,CAACC,IAAI,CACxB,CAACC,QAAUA,MAAMU,KAAK,CAACC,WAAW,OAAOhC,YAAYF,IAAI,GAAGkC,WAAW,wBADxEjB,4BAEEgB,KAAK,oBAAI;YACpB,OAAO;gBAAE3B,IAAI;gBAAe6B,MAAMf,MAAMa,KAAK;gBAAEjE;YAAG;QACpD;QACA,IAAI8C,MAAMR,EAAE,KAAK,OAAO;YACtBjB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOmB,MAAMnB,KAAK;YAAC;YAC1C;QACF;QAEA;;;;;KAKC,GACD,IAAIyC,QAAQ;QACZ,IAAIC,WAAW;QACf,IAAIvB,MAAMqB,IAAI,KAAKrB,MAAM9C,EAAE,EAAE;YAC3BoE,QAAQ,MAAMxE,kBACZC,WACA2C,OAAOC,UAAU,CAAC,SAAS6B,KAAK,CAAC,cAAc,MAAMxB,MAAMqB,IAAI,GAC/D,cACArB,MAAM9C,EAAE,EACR,qEAAqE;YACrE;gBAAE,CAACrB,0BAA0B,EAAEE,iBAAiBiE,MAAM9C,EAAE;YAAE;YAE5D,MAAMuE,UAAU,MAAMhF,WAAWM,WAAWuC,OAAOO,KAAK;YACxD,MAAM6B,WAAW;mBACZ,IAAIC,IAAIF,QAAQG,GAAG,CAAC,CAACZ,SAAWtF,oBAAoB4D,OAAOuC,GAAG,EAAEb,QAAQc,OAAO;aACnF,CAACC,MAAM,CAACC;YACT,KAAK,MAAMF,WAAWJ,SAAU;gBAC9B,MAAMO,OAAO,IAAI5F,UAAUV,sBAAsBmG,SAAS;gBAC1DP,YAAY,MAAMzE,kBAChBC,WACA2C,OAAOC,UAAU,CAAC,YAAY6B,KAAK,CAACS,MAAM,MAAMjC,MAAMqB,IAAI,GAC1DY,MACAjC,MAAM9C,EAAE;YAEZ;QACF;QACA,MAAMgF,SAAmC;YAAE1C,IAAI;YAAM8B;YAAOC;QAAS;QACrEhD,IAAII,MAAM,CAAC,KAAKC,IAAI,CAACsD;IACvB,EAAE,OAAOrD,OAAO;QACdsD,QAAQtD,KAAK,CAAC,mCAAmCA;QACjDN,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAuC;IACvE;AACF,EAAC"}

package/src/lib/server/leads-import.d.ts

@@ -1,84 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/**
- * `POST /api/crm/leads-import` — one chunk of a leads file, written
- * (AGL-2701).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-lead-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the owner against the
- * org's roster, and writes it in two halves.
- *
- * ## The capture half goes through the door every capture goes through
- *
- * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up
- * handler and both booking paths — is the writer here too. That is what
- * makes an imported row key on `personKey` the way a second form
- * submission does, land under the site by path with `capturedByHostIds`
- * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction
- * that writes, and record NO marketing basis. A bulk path with its own
- * `add()` would grow an unkeyed, unbounded copy of the site's leads under
- * a second set of rules.
- *
- * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`
- *
- * The five org collections carry `visibleTo` because they sit under
- * `orgs/{orgId}` and the rules decide per document which sites may read
- * them. A lead does not: `hosts/{hostId}/leads` is private to the site by
- * path, the rules admit the site's own members, and the list therefore
- * reads it with no scope clause. An import that stamped scope tokens onto
- * a lead would be writing a field nothing reads, and would suggest a
- * sharing decision the collection does not have. The site is the whole
- * scope, and the drawer's picker is where it is chosen.
- *
- * ## No file may hand a lead a consent it did not give
- *
- * A capture writes a marketing basis only when the visitor ticked a box in
- * front of them. A CSV row has no such event behind it, so the lead
- * vocabulary has no consent column and this route passes no
- * `marketingConsent`: an imported lead is mailable only if some earlier
- * capture on this site already recorded a basis, which `addHostLead`
- * carries forward untouched. The contacts import has a consent column
- * because its own export writes one and the merchant is asserting a basis
- * they hold per person; the leads export writes none, and a column the
- * file cannot fill is a column that cannot be misread.
- *
- * ## The working half is written the way the list writes it
- *
- * A status, an owner, a reason and notes are the CRM's annotations, not
- * the capture's, and the leads list already writes them client-direct onto
- * the same document. A row that carries any of them gets one merge write
- * after the door's, stamped `updatedAt` exactly as the list stamps it. A
- * row that carries none costs nothing extra.
- *
- * ## Created or merged is read once for the chunk
- *
- * The door reports only whether the lead was STORED, and the result panel
- * has to say how many people were added and how many updated. One
- * `getAll` over the chunk's document ids answers that for every row in a
- * single round trip, before any of them is written — which is also the
- * only moment the answer is still true.
- */
-import { type PluginApiHandler } from '@aglyn/aglyn/server';
-/**
- * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.
- *
- * Rows are written one after another so the ceiling's local count stays
- * honest across the request.
- */
-export declare const crmLeadsImportHandler: PluginApiHandler;