@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/leads-import.js

@@ -1,367 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * `POST /api/crm/leads-import` — one chunk of a leads file, written
- * (AGL-2701).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-lead-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the owner against the
- * org's roster, and writes it in two halves.
- *
- * ## The capture half goes through the door every capture goes through
- *
- * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up
- * handler and both booking paths — is the writer here too. That is what
- * makes an imported row key on `personKey` the way a second form
- * submission does, land under the site by path with `capturedByHostIds`
- * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction
- * that writes, and record NO marketing basis. A bulk path with its own
- * `add()` would grow an unkeyed, unbounded copy of the site's leads under
- * a second set of rules.
- *
- * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`
- *
- * The five org collections carry `visibleTo` because they sit under
- * `orgs/{orgId}` and the rules decide per document which sites may read
- * them. A lead does not: `hosts/{hostId}/leads` is private to the site by
- * path, the rules admit the site's own members, and the list therefore
- * reads it with no scope clause. An import that stamped scope tokens onto
- * a lead would be writing a field nothing reads, and would suggest a
- * sharing decision the collection does not have. The site is the whole
- * scope, and the drawer's picker is where it is chosen.
- *
- * ## No file may hand a lead a consent it did not give
- *
- * A capture writes a marketing basis only when the visitor ticked a box in
- * front of them. A CSV row has no such event behind it, so the lead
- * vocabulary has no consent column and this route passes no
- * `marketingConsent`: an imported lead is mailable only if some earlier
- * capture on this site already recorded a basis, which `addHostLead`
- * carries forward untouched. The contacts import has a consent column
- * because its own export writes one and the merchant is asserting a basis
- * they hold per person; the leads export writes none, and a column the
- * file cannot fill is a column that cannot be misread.
- *
- * ## The working half is written the way the list writes it
- *
- * A status, an owner, a reason and notes are the CRM's annotations, not
- * the capture's, and the leads list already writes them client-direct onto
- * the same document. A row that carries any of them gets one merge write
- * after the door's, stamped `updatedAt` exactly as the list stamps it. A
- * row that carries none costs nothing extra.
- *
- * ## Created or merged is read once for the chunk
- *
- * The door reports only whether the lead was STORED, and the result panel
- * has to say how many people were added and how many updated. One
- * `getAll` over the chunk's document ids answers that for every row in a
- * single round trip, before any of them is written — which is also the
- * only moment the answer is still true.
- */ import { checkVisitorRecordCeiling, LEADS_MAX_PER_HOST, personKey } from "@aglyn/aglyn/server";
-import { LEAD_IMPORT_CHUNK_SIZE, LEAD_IMPORT_MAX_BODY_BYTES, normalizeLeadImportRow } from "../model/crm-lead-import.js";
-import { addHostLead, firebaseAdmin, orgLeadsForHost, restampCrmListFieldsAt } from "@aglyn/tenant-data-admin";
-import { visibleToHost } from "@aglyn/aglyn/app-utils/scope-tokens";
-import { listOrgContainers } from "@aglyn/tenant-data-admin/server/org-containers";
-// The leaf, for the reason the webhook imports the delivery log from its
-// leaf: a spec that stands a partial barrel in must still reach it.
-import { countUndeliverableEmails, findUndeliverableEmails, IMPORT_MAIL_CHECK_GRACE_MS, settleWithin } from "@aglyn/tenant-data-admin/server/capture-email-check";
-import { FieldValue } from "firebase-admin/firestore";
-import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
-import { readLeadSourcePicklist, resolveLeadSourceWrite } from "./lead-source-picklist.js";
-/**
- * The surface an imported lead names, beside `signup`, `booking` and
- * `form:{formId}`.
- *
- * Typed as the capture-source union rather than a bare string, which is
- * what the contacts import gets for free from the door it calls: a lead's
- * `source` is plain text on the way in, so this is the only place the word
- * can be held to the same vocabulary the source filters and the labels
- * read. One person brought in by one file reads the same on both records.
- */ const LEAD_IMPORT_SOURCE = 'import';
-/**
- * How many of the org's campaigns one chunk reads to resolve the names a
- * file carries (AGL-3254). Well past what an org keeps — the picker offers
- * fifty — and read once per chunk rather than once per row.
- */ const CAMPAIGN_DIRECTORY_CEILING = 200;
-/**
- * The org's live campaigns by NAME, lower-cased, for the `campaigns`
- * column. A lead is an org record, so every live container of the org's
- * `campaign` kind may be named, whichever sites it is
- * placed on; where two share a name, the one placed on the importing site
- * wins, because that is the one its picker shows. A name the org does not
- * have is not guessed at: the row is refused whole and named, because a
- * lead filed under half its campaigns is a lead nobody asked for. Read
- * only when some row names one.
- */ async function campaignDirectory(firestore, orgId, hostId) {
-    const directory = new Map();
-    if (!orgId) return directory;
-    const containers = await listOrgContainers(firestore, 'campaign', orgId, CAMPAIGN_DIRECTORY_CEILING);
-    const live = containers.filter((container)=>container.live);
-    const placed = (container)=>visibleToHost(container.visibleTo, hostId);
-    for (const container of [
-        ...live.filter(placed),
-        ...live.filter((entry)=>!placed(entry))
-    ]){
-        const name = container.name.toLowerCase();
-        if (name && !directory.has(name)) directory.set(name, container.id);
-    }
-    return directory;
-}
-/**
- * The team's annotations on one row and the lead's own profile
- * (AGL-3231), or nothing when the file named none of either. A profile
- * value lands as the record's card would write it; the file never clears
- * one, because a blank cell is a cell nobody filled.
- */ function workingState(row, ownerUid, campaignIds) {
-    const fields = _extends({}, row.status ? {
-        status: row.status
-    } : {}, ownerUid ? {
-        ownerUid
-    } : {}, row.unqualifiedReason ? {
-        unqualifiedReason: row.unqualifiedReason
-    } : {}, row.notes ? {
-        notes: row.notes
-    } : {}, row.profile, campaignIds.length ? {
-        campaignIds: FieldValue.arrayUnion(...campaignIds)
-    } : {});
-    return Object.keys(fields).length ? fields : null;
-}
-/**
- * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.
- *
- * Rows are written one after another so the ceiling's local count stays
- * honest across the request.
- */ export const crmLeadsImportHandler = async (req, res)=>{
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        return res.status(405).json({
-            error: 'Method not allowed'
-        });
-    }
-    const read = readImportRows(req, {
-        maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,
-        chunkSize: LEAD_IMPORT_CHUNK_SIZE
-    });
-    if ('error' in read) return res.status(read.status).json({
-        error: read.error
-    });
-    try {
-        const context = await resolveImportContext(req);
-        if (context.ok === false) return res.status(context.status).json(context.body);
-        const skipped = [];
-        const dropped = {};
-        const normalized = [];
-        /*
-     * A duplicate WITHIN the request is skipped rather than merged, for
-     * the reason the contacts import gives: the second row would merge
-     * onto the first's document and the tally would read one created and
-     * one merged for one person in one file. Across requests the door's
-     * own dedupe answers, and reports a merge.
-     */ const seen = new Set();
-        read.rows.forEach((raw, index)=>{
-            const verdict = normalizeLeadImportRow(raw);
-            if (verdict.ok === false) {
-                skipped.push({
-                    index,
-                    email: verdict.input,
-                    reason: verdict.reason
-                });
-                return;
-            }
-            // Non-null by construction: the normalizer refused every address
-            // this derivation could not key.
-            const key = personKey(verdict.row.email);
-            if (seen.has(key)) {
-                skipped.push({
-                    index,
-                    email: verdict.row.email,
-                    reason: 'duplicate'
-                });
-                return;
-            }
-            seen.add(key);
-            for (const entry of verdict.row.dropped){
-                var _dropped_entry_field;
-                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
-            }
-            normalized.push({
-                index,
-                row: verdict.row,
-                key
-            });
-        });
-        /*
-     * THE ADDRESSES' MAIL SERVERS (AGL-3328), asked now so the answers
-     * arrive while the rows are written, and read after the last one for
-     * the result's "N addresses have no mail server". The records
-     * themselves are stamped by the check `addHostLead` queues.
-     */ const mailServers = findUndeliverableEmails(normalized.map((entry)=>entry.row.email));
-        const imported = [];
-        const firestore = firebaseAdmin.app().firestore();
-        const hostRef = firestore.collection('hosts').doc(context.hostId);
-        const leadsRef = await orgLeadsForHost(context.hostId);
-        const refs = normalized.map((entry)=>leadsRef.doc(entry.key));
-        const namesCampaigns = normalized.some((entry)=>{
-            var _entry_row_campaigns;
-            return (_entry_row_campaigns = entry.row.campaigns) == null ? void 0 : _entry_row_campaigns.length;
-        });
-        const [owners, before, campaigns, leadSources] = await Promise.all([
-            ownerDirectory(context.orgId, normalized.map((entry)=>entry.row)),
-            refs.length ? firestore.getAll(...refs) : Promise.resolve([]),
-            namesCampaigns ? campaignDirectory(firestore, context.orgId, context.hostId) : Promise.resolve(new Map()),
-            // The org's lead source list (AGL-3298): one read per chunk, for the
-            // values rows name and the default a new lead starts from.
-            readLeadSourcePicklist(firestore, context.orgId)
-        ]);
-        const beforeById = new Map(before.map((snapshot)=>[
-                snapshot.id,
-                snapshot
-            ]));
-        const held = new Set(before.filter((snapshot)=>snapshot.exists).map((snapshot)=>snapshot.id));
-        const ownersUnresolved = new Set();
-        let counted = null;
-        let createdHere = 0;
-        let created = 0;
-        let merged = 0;
-        for (const { index, row, key } of normalized){
-            var _row_campaigns;
-            var _beforeById_get;
-            // The campaigns the row names, every one of them the org's, or the
-            // row is refused whole and named (AGL-3254).
-            const campaignIds = ((_row_campaigns = row.campaigns) != null ? _row_campaigns : []).map((name)=>{
-                var _campaigns_get;
-                return (_campaigns_get = campaigns.get(name.toLowerCase())) != null ? _campaigns_get : '';
-            });
-            if (campaignIds.some((id)=>!id)) {
-                skipped.push({
-                    index,
-                    email: row.email,
-                    reason: 'campaign-unknown'
-                });
-                continue;
-            }
-            const isNew = !held.has(key);
-            /*
-       * THE LEAD SOURCE, restricted to the org's list (AGL-3298). A value
-       * the list does not hold is refused whole and named, as a campaign
-       * the org does not have is — the drawer's notice has already listed
-       * the values the list allows — and a lead the site already held
-       * keeps the value it has. A new lead with no value starts from the
-       * list's default.
-       */ const leadSource = resolveLeadSourceWrite(leadSources, row.profile.leadSource, {
-                current: (_beforeById_get = beforeById.get(key)) == null ? void 0 : _beforeById_get.get('leadSource'),
-                created: isNew
-            });
-            if (leadSource.ok === false) {
-                skipped.push({
-                    index,
-                    email: row.email,
-                    reason: 'lead-source-unknown'
-                });
-                continue;
-            }
-            if (leadSource.write) row.profile.leadSource = leadSource.write;
-            /*
-       * The platform lead ceiling, judged the way the deals import judges
-       * the records band: one count at the first create, re-judged locally
-       * as the request creates more. The door re-judges it authoritatively
-       * inside its own transaction, so a race is still refused there — this
-       * is what lets the operator's skipped file say WHY rather than only
-       * that the row could not be saved.
-       */ if (isNew) {
-                if (counted === null) {
-                    counted = (await leadsRef.count().get()).data().count;
-                }
-                if (checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST).exceeded) {
-                    skipped.push({
-                        index,
-                        email: row.email,
-                        reason: 'lead-ceiling'
-                    });
-                    continue;
-                }
-            }
-            let ownerUid;
-            if (row.ownerEmail) {
-                ownerUid = owners.get(row.ownerEmail);
-                if (!ownerUid) ownersUnresolved.add(row.ownerEmail);
-            }
-            const stored = await addHostLead({
-                hostRef,
-                hostId: context.hostId,
-                lead: _extends({
-                    email: row.email
-                }, row.name ? {
-                    name: row.name
-                } : {}, {
-                    source: LEAD_IMPORT_SOURCE
-                })
-            });
-            if (!stored) {
-                skipped.push({
-                    index,
-                    email: row.email,
-                    reason: 'write-failed'
-                });
-                continue;
-            }
-            const working = workingState(row, ownerUid, [
-                ...new Set(campaignIds)
-            ]);
-            if (working) {
-                await leadsRef.doc(key).set(_extends({}, working, {
-                    updatedAt: FieldValue.serverTimestamp()
-                }), {
-                    merge: true
-                });
-                // The file's profile, tags, status and lead source are what the
-                // Leads list searches and filters by (AGL-3321).
-                await restampCrmListFieldsAt(leadsRef.doc(key), 'leads');
-            }
-            imported.push(row.email);
-            if (isNew) {
-                created += 1;
-                createdHere += 1;
-            } else {
-                merged += 1;
-            }
-        }
-        const noMailServer = countUndeliverableEmails(imported, await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS));
-        const result = _extends({
-            received: read.rows.length,
-            created,
-            merged,
-            skipped: skipped.sort((a, b)=>a.index - b.index),
-            dropped,
-            ownersUnresolved: [
-                ...ownersUnresolved
-            ]
-        }, noMailServer !== undefined ? {
-            noMailServer
-        } : {});
-        return res.status(200).json(result);
-    } catch (error) {
-        console.error('crm/leads-import failed', error);
-        return res.status(500).json({
-            error: 'The import could not continue.'
-        });
-    }
-};
-
-//# sourceMappingURL=leads-import.js.map

package/src/lib/server/leads-import.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/leads-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/leads-import` — one chunk of a leads file, written\n * (AGL-2701).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link LEAD_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-lead-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the owner against the\n * org's roster, and writes it in two halves.\n *\n * ## The capture half goes through the door every capture goes through\n *\n * `addHostLead` — the ONE writer of `hosts/{hostId}/leads` for the sign-up\n * handler and both booking paths — is the writer here too. That is what\n * makes an imported row key on `personKey` the way a second form\n * submission does, land under the site by path with `capturedByHostIds`\n * naming it, count against `LEADS_MAX_PER_HOST` inside the transaction\n * that writes, and record NO marketing basis. A bulk path with its own\n * `add()` would grow an unkeyed, unbounded copy of the site's leads under\n * a second set of rules.\n *\n * ## A lead is host-scoped by path, so nothing here stamps `visibleTo`\n *\n * The five org collections carry `visibleTo` because they sit under\n * `orgs/{orgId}` and the rules decide per document which sites may read\n * them. A lead does not: `hosts/{hostId}/leads` is private to the site by\n * path, the rules admit the site's own members, and the list therefore\n * reads it with no scope clause. An import that stamped scope tokens onto\n * a lead would be writing a field nothing reads, and would suggest a\n * sharing decision the collection does not have. The site is the whole\n * scope, and the drawer's picker is where it is chosen.\n *\n * ## No file may hand a lead a consent it did not give\n *\n * A capture writes a marketing basis only when the visitor ticked a box in\n * front of them. A CSV row has no such event behind it, so the lead\n * vocabulary has no consent column and this route passes no\n * `marketingConsent`: an imported lead is mailable only if some earlier\n * capture on this site already recorded a basis, which `addHostLead`\n * carries forward untouched. The contacts import has a consent column\n * because its own export writes one and the merchant is asserting a basis\n * they hold per person; the leads export writes none, and a column the\n * file cannot fill is a column that cannot be misread.\n *\n * ## The working half is written the way the list writes it\n *\n * A status, an owner, a reason and notes are the CRM's annotations, not\n * the capture's, and the leads list already writes them client-direct onto\n * the same document. A row that carries any of them gets one merge write\n * after the door's, stamped `updatedAt` exactly as the list stamps it. A\n * row that carries none costs nothing extra.\n *\n * ## Created or merged is read once for the chunk\n *\n * The door reports only whether the lead was STORED, and the result panel\n * has to say how many people were added and how many updated. One\n * `getAll` over the chunk's document ids answers that for every row in a\n * single round trip, before any of them is written — which is also the\n * only moment the answer is still true.\n */\n\nimport {\n  checkVisitorRecordCeiling,\n  type ContactSource,\n  LEADS_MAX_PER_HOST,\n  personKey,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport {\n  LEAD_IMPORT_CHUNK_SIZE,\n  LEAD_IMPORT_MAX_BODY_BYTES,\n  type LeadImportChunkResult,\n  type LeadImportRawRow,\n  type LeadImportRow,\n  type LeadImportSkippedRow,\n  normalizeLeadImportRow,\n} from '../model/crm-lead-import'\nimport {\n  addHostLead,\n  firebaseAdmin,\n  orgLeadsForHost,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport {\n  listOrgContainers,\n  type OrgContainerRecord,\n} from '@aglyn/tenant-data-admin/server/org-containers'\n// The leaf, for the reason the webhook imports the delivery log from its\n// leaf: a spec that stands a partial barrel in must still reach it.\nimport {\n  countUndeliverableEmails,\n  findUndeliverableEmails,\n  IMPORT_MAIL_CHECK_GRACE_MS,\n  settleWithin,\n} from '@aglyn/tenant-data-admin/server/capture-email-check'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  ownerDirectory,\n  readImportRows,\n  resolveImportContext,\n} from './import-context'\nimport { readLeadSourcePicklist, resolveLeadSourceWrite } from './lead-source-picklist'\n\n/**\n * The surface an imported lead names, beside `signup`, `booking` and\n * `form:{formId}`.\n *\n * Typed as the capture-source union rather than a bare string, which is\n * what the contacts import gets for free from the door it calls: a lead's\n * `source` is plain text on the way in, so this is the only place the word\n * can be held to the same vocabulary the source filters and the labels\n * read. One person brought in by one file reads the same on both records.\n */\nconst LEAD_IMPORT_SOURCE: ContactSource = 'import'\n\n/**\n * How many of the org's campaigns one chunk reads to resolve the names a\n * file carries (AGL-3254). Well past what an org keeps — the picker offers\n * fifty — and read once per chunk rather than once per row.\n */\nconst CAMPAIGN_DIRECTORY_CEILING = 200\n\n/**\n * The org's live campaigns by NAME, lower-cased, for the `campaigns`\n * column. A lead is an org record, so every live container of the org's\n * `campaign` kind may be named, whichever sites it is\n * placed on; where two share a name, the one placed on the importing site\n * wins, because that is the one its picker shows. A name the org does not\n * have is not guessed at: the row is refused whole and named, because a\n * lead filed under half its campaigns is a lead nobody asked for. Read\n * only when some row names one.\n */\nasync function campaignDirectory(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostId: string,\n): Promise<Map<string, string>> {\n  const directory = new Map<string, string>()\n  if (!orgId) return directory\n  const containers = await listOrgContainers(firestore, 'campaign', orgId, CAMPAIGN_DIRECTORY_CEILING)\n  const live = containers.filter((container) => container.live)\n  const placed = (container: OrgContainerRecord) => visibleToHost(container.visibleTo, hostId)\n  for (const container of [...live.filter(placed), ...live.filter((entry) => !placed(entry))]) {\n    const name = container.name.toLowerCase()\n    if (name && !directory.has(name)) directory.set(name, container.id)\n  }\n  return directory\n}\n\n/**\n * The team's annotations on one row and the lead's own profile\n * (AGL-3231), or nothing when the file named none of either. A profile\n * value lands as the record's card would write it; the file never clears\n * one, because a blank cell is a cell nobody filled.\n */\nfunction workingState(\n  row: LeadImportRow,\n  ownerUid: string | undefined,\n  campaignIds: readonly string[],\n): Record<string, unknown> | null {\n  const fields: Record<string, unknown> = {\n    ...(row.status ? { status: row.status } : {}),\n    ...(ownerUid ? { ownerUid } : {}),\n    ...(row.unqualifiedReason ? { unqualifiedReason: row.unqualifiedReason } : {}),\n    ...(row.notes ? { notes: row.notes } : {}),\n    ...row.profile,\n    // Added to what a lead the site already held carries (AGL-3254): a\n    // file re-imported under a new campaign files the person under one\n    // more, and never takes them out of the last.\n    ...(campaignIds.length ? { campaignIds: FieldValue.arrayUnion(...campaignIds) } : {}),\n  }\n  return Object.keys(fields).length ? fields : null\n}\n\n/**\n * `POST crm/leads-import` — `{ hostId, rows }` → a {@link LeadImportChunkResult}.\n *\n * Rows are written one after another so the ceiling's local count stays\n * honest across the request.\n */\nexport const crmLeadsImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<LeadImportRawRow>(req, {\n    maxBodyBytes: LEAD_IMPORT_MAX_BODY_BYTES,\n    chunkSize: LEAD_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: LeadImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: LeadImportRow; key: string }[] = []\n    /*\n     * A duplicate WITHIN the request is skipped rather than merged, for\n     * the reason the contacts import gives: the second row would merge\n     * onto the first's document and the tally would read one created and\n     * one merged for one person in one file. Across requests the door's\n     * own dedupe answers, and reports a merge.\n     */\n    const seen = new Set<string>()\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeLeadImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, email: verdict.input, reason: verdict.reason })\n        return\n      }\n      // Non-null by construction: the normalizer refused every address\n      // this derivation could not key.\n      const key = personKey(verdict.row.email) as string\n      if (seen.has(key)) {\n        skipped.push({ index, email: verdict.row.email, reason: 'duplicate' })\n        return\n      }\n      seen.add(key)\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row, key })\n    })\n\n    /*\n     * THE ADDRESSES' MAIL SERVERS (AGL-3328), asked now so the answers\n     * arrive while the rows are written, and read after the last one for\n     * the result's \"N addresses have no mail server\". The records\n     * themselves are stamped by the check `addHostLead` queues.\n     */\n    const mailServers = findUndeliverableEmails(normalized.map((entry) => entry.row.email))\n    const imported: string[] = []\n\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(context.hostId)\n    const leadsRef = await orgLeadsForHost(context.hostId)\n    const refs = normalized.map((entry) => leadsRef.doc(entry.key))\n    const namesCampaigns = normalized.some((entry) => entry.row.campaigns?.length)\n    const [owners, before, campaigns, leadSources] = await Promise.all([\n      ownerDirectory(\n        context.orgId,\n        normalized.map((entry) => entry.row),\n      ),\n      refs.length ? firestore.getAll(...refs) : Promise.resolve([]),\n      namesCampaigns\n        ? campaignDirectory(firestore, context.orgId, context.hostId)\n        : Promise.resolve(new Map<string, string>()),\n      // The org's lead source list (AGL-3298): one read per chunk, for the\n      // values rows name and the default a new lead starts from.\n      readLeadSourcePicklist(firestore, context.orgId),\n    ])\n    const beforeById = new Map(before.map((snapshot) => [snapshot.id, snapshot]))\n    const held = new Set(\n      before.filter((snapshot) => snapshot.exists).map((snapshot) => snapshot.id),\n    )\n    const ownersUnresolved = new Set<string>()\n    let counted: number | null = null\n    let createdHere = 0\n    let created = 0\n    let merged = 0\n\n    for (const { index, row, key } of normalized) {\n      // The campaigns the row names, every one of them the org's, or the\n      // row is refused whole and named (AGL-3254).\n      const campaignIds = (row.campaigns ?? []).map((name) => campaigns.get(name.toLowerCase()) ?? '')\n      if (campaignIds.some((id) => !id)) {\n        skipped.push({ index, email: row.email, reason: 'campaign-unknown' })\n        continue\n      }\n      const isNew = !held.has(key)\n      /*\n       * THE LEAD SOURCE, restricted to the org's list (AGL-3298). A value\n       * the list does not hold is refused whole and named, as a campaign\n       * the org does not have is — the drawer's notice has already listed\n       * the values the list allows — and a lead the site already held\n       * keeps the value it has. A new lead with no value starts from the\n       * list's default.\n       */\n      const leadSource = resolveLeadSourceWrite(leadSources, row.profile.leadSource, {\n        current: beforeById.get(key)?.get('leadSource'),\n        created: isNew,\n      })\n      if (leadSource.ok === false) {\n        skipped.push({ index, email: row.email, reason: 'lead-source-unknown' })\n        continue\n      }\n      if (leadSource.write) row.profile.leadSource = leadSource.write\n      /*\n       * The platform lead ceiling, judged the way the deals import judges\n       * the records band: one count at the first create, re-judged locally\n       * as the request creates more. The door re-judges it authoritatively\n       * inside its own transaction, so a race is still refused there — this\n       * is what lets the operator's skipped file say WHY rather than only\n       * that the row could not be saved.\n       */\n      if (isNew) {\n        if (counted === null) {\n          counted = (await leadsRef.count().get()).data().count\n        }\n        if (\n          checkVisitorRecordCeiling(counted + createdHere, LEADS_MAX_PER_HOST)\n            .exceeded\n        ) {\n          skipped.push({ index, email: row.email, reason: 'lead-ceiling' })\n          continue\n        }\n      }\n      let ownerUid: string | undefined\n      if (row.ownerEmail) {\n        ownerUid = owners.get(row.ownerEmail)\n        if (!ownerUid) ownersUnresolved.add(row.ownerEmail)\n      }\n      const stored = await addHostLead({\n        hostRef,\n        hostId: context.hostId,\n        lead: {\n          email: row.email,\n          ...(row.name ? { name: row.name } : {}),\n          source: LEAD_IMPORT_SOURCE,\n        },\n      })\n      if (!stored) {\n        skipped.push({ index, email: row.email, reason: 'write-failed' })\n        continue\n      }\n      const working = workingState(row, ownerUid, [...new Set(campaignIds)])\n      if (working) {\n        await leadsRef\n          .doc(key)\n          .set(\n            { ...working, updatedAt: FieldValue.serverTimestamp() },\n            { merge: true },\n          )\n        // The file's profile, tags, status and lead source are what the\n        // Leads list searches and filters by (AGL-3321).\n        await restampCrmListFieldsAt(leadsRef.doc(key), 'leads')\n      }\n      imported.push(row.email)\n      if (isNew) {\n        created += 1\n        createdHere += 1\n      } else {\n        merged += 1\n      }\n    }\n    const noMailServer = countUndeliverableEmails(\n      imported,\n      await settleWithin(mailServers, IMPORT_MAIL_CHECK_GRACE_MS),\n    )\n\n    const result: LeadImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [...ownersUnresolved],\n      ...(noMailServer !== undefined ? { noMailServer } : {}),\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/leads-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["checkVisitorRecordCeiling","LEADS_MAX_PER_HOST","personKey","LEAD_IMPORT_CHUNK_SIZE","LEAD_IMPORT_MAX_BODY_BYTES","normalizeLeadImportRow","addHostLead","firebaseAdmin","orgLeadsForHost","restampCrmListFieldsAt","visibleToHost","listOrgContainers","countUndeliverableEmails","findUndeliverableEmails","IMPORT_MAIL_CHECK_GRACE_MS","settleWithin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","readLeadSourcePicklist","resolveLeadSourceWrite","LEAD_IMPORT_SOURCE","CAMPAIGN_DIRECTORY_CEILING","campaignDirectory","firestore","orgId","hostId","directory","Map","containers","live","filter","container","placed","visibleTo","entry","name","toLowerCase","has","set","id","workingState","row","ownerUid","campaignIds","fields","status","unqualifiedReason","notes","profile","length","arrayUnion","Object","keys","crmLeadsImportHandler","req","res","method","setHeader","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","seen","Set","rows","forEach","raw","index","verdict","push","email","input","reason","key","add","field","mailServers","map","imported","app","hostRef","collection","doc","leadsRef","refs","namesCampaigns","some","campaigns","owners","before","leadSources","Promise","all","getAll","resolve","beforeById","snapshot","held","exists","ownersUnresolved","counted","createdHere","created","merged","get","isNew","leadSource","current","write","count","data","exceeded","ownerEmail","stored","lead","source","working","updatedAt","serverTimestamp","merge","noMailServer","result","received","sort","a","b","undefined","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DC,GAED,SACEA,yBAAyB,EAEzBC,kBAAkB,EAClBC,SAAS,QAEJ,sBAAqB;AAC5B,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SACEC,WAAW,EACXC,aAAa,EACbC,eAAe,EACfC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SACEC,iBAAiB,QAEZ,iDAAgD;AACvD,yEAAyE;AACzE,oEAAoE;AACpE,SACEC,wBAAwB,EACxBC,uBAAuB,EACvBC,0BAA0B,EAC1BC,YAAY,QACP,sDAAqD;AAC5D,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,EACdC,cAAc,EACdC,oBAAoB,QACf,sBAAkB;AACzB,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AAEvF;;;;;;;;;CASC,GACD,MAAMC,qBAAoC;AAE1C;;;;CAIC,GACD,MAAMC,6BAA6B;AAEnC;;;;;;;;;CASC,GACD,eAAeC,kBACbC,SAAsC,EACtCC,KAAa,EACbC,MAAc;IAEd,MAAMC,YAAY,IAAIC;IACtB,IAAI,CAACH,OAAO,OAAOE;IACnB,MAAME,aAAa,MAAMnB,kBAAkBc,WAAW,YAAYC,OAAOH;IACzE,MAAMQ,OAAOD,WAAWE,MAAM,CAAC,CAACC,YAAcA,UAAUF,IAAI;IAC5D,MAAMG,SAAS,CAACD,YAAkCvB,cAAcuB,UAAUE,SAAS,EAAER;IACrF,KAAK,MAAMM,aAAa;WAAIF,KAAKC,MAAM,CAACE;WAAYH,KAAKC,MAAM,CAAC,CAACI,QAAU,CAACF,OAAOE;KAAQ,CAAE;QAC3F,MAAMC,OAAOJ,UAAUI,IAAI,CAACC,WAAW;QACvC,IAAID,QAAQ,CAACT,UAAUW,GAAG,CAACF,OAAOT,UAAUY,GAAG,CAACH,MAAMJ,UAAUQ,EAAE;IACpE;IACA,OAAOb;AACT;AAEA;;;;;CAKC,GACD,SAASc,aACPC,GAAkB,EAClBC,QAA4B,EAC5BC,WAA8B;IAE9B,MAAMC,SAAkC,aAClCH,IAAII,MAAM,GAAG;QAAEA,QAAQJ,IAAII,MAAM;IAAC,IAAI,CAAC,GACvCH,WAAW;QAAEA;IAAS,IAAI,CAAC,GAC3BD,IAAIK,iBAAiB,GAAG;QAAEA,mBAAmBL,IAAIK,iBAAiB;IAAC,IAAI,CAAC,GACxEL,IAAIM,KAAK,GAAG;QAAEA,OAAON,IAAIM,KAAK;IAAC,IAAI,CAAC,GACrCN,IAAIO,OAAO,EAIVL,YAAYM,MAAM,GAAG;QAAEN,aAAa7B,WAAWoC,UAAU,IAAIP;IAAa,IAAI,CAAC;IAErF,OAAOQ,OAAOC,IAAI,CAACR,QAAQK,MAAM,GAAGL,SAAS;AAC/C;AAEA;;;;;CAKC,GACD,OAAO,MAAMS,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAO5C,eAAiCsC,KAAK;QACjDO,cAAc3D;QACd4D,WAAW7D;IACb;IACA,IAAI,WAAW2D,MAAM,OAAOL,IAAIV,MAAM,CAACe,KAAKf,MAAM,EAAEa,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAM9C,qBAAqBqC;QAC3C,IAAIS,QAAQC,EAAE,KAAK,OAAO,OAAOT,IAAIV,MAAM,CAACkB,QAAQlB,MAAM,EAAEa,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAmE,EAAE;QAC3E;;;;;;KAMC,GACD,MAAMC,OAAO,IAAIC;QACjBV,KAAKW,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAUxE,uBAAuBsE;YACvC,IAAIE,QAAQX,EAAE,KAAK,OAAO;gBACxBE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,iEAAiE;YACjE,iCAAiC;YACjC,MAAMC,MAAMhF,UAAU2E,QAAQlC,GAAG,CAACoC,KAAK;YACvC,IAAIR,KAAKhC,GAAG,CAAC2C,MAAM;gBACjBd,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQlC,GAAG,CAACoC,KAAK;oBAAEE,QAAQ;gBAAY;gBACpE;YACF;YACAV,KAAKY,GAAG,CAACD;YACT,KAAK,MAAM9C,SAASyC,QAAQlC,GAAG,CAAC0B,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACjC,MAAMgD,KAAK,CAAC,GAAG,EAACf,uBAAAA,OAAO,CAACjC,MAAMgD,KAAK,CAAC,YAApBf,uBAAwB,KAAK;YACvD;YACAC,WAAWQ,IAAI,CAAC;gBAAEF;gBAAOjC,KAAKkC,QAAQlC,GAAG;gBAAEuC;YAAI;QACjD;QAEA;;;;;KAKC,GACD,MAAMG,cAAcxE,wBAAwByD,WAAWgB,GAAG,CAAC,CAAClD,QAAUA,MAAMO,GAAG,CAACoC,KAAK;QACrF,MAAMQ,WAAqB,EAAE;QAE7B,MAAM9D,YAAYlB,cAAciF,GAAG,GAAG/D,SAAS;QAC/C,MAAMgE,UAAUhE,UAAUiE,UAAU,CAAC,SAASC,GAAG,CAAC1B,QAAQtC,MAAM;QAChE,MAAMiE,WAAW,MAAMpF,gBAAgByD,QAAQtC,MAAM;QACrD,MAAMkE,OAAOvB,WAAWgB,GAAG,CAAC,CAAClD,QAAUwD,SAASD,GAAG,CAACvD,MAAM8C,GAAG;QAC7D,MAAMY,iBAAiBxB,WAAWyB,IAAI,CAAC,CAAC3D;gBAAUA;oBAAAA,uBAAAA,MAAMO,GAAG,CAACqD,SAAS,qBAAnB5D,qBAAqBe,MAAM;;QAC7E,MAAM,CAAC8C,QAAQC,QAAQF,WAAWG,YAAY,GAAG,MAAMC,QAAQC,GAAG,CAAC;YACjEpF,eACEgD,QAAQvC,KAAK,EACb4C,WAAWgB,GAAG,CAAC,CAAClD,QAAUA,MAAMO,GAAG;YAErCkD,KAAK1C,MAAM,GAAG1B,UAAU6E,MAAM,IAAIT,QAAQO,QAAQG,OAAO,CAAC,EAAE;YAC5DT,iBACItE,kBAAkBC,WAAWwC,QAAQvC,KAAK,EAAEuC,QAAQtC,MAAM,IAC1DyE,QAAQG,OAAO,CAAC,IAAI1E;YACxB,qEAAqE;YACrE,2DAA2D;YAC3DT,uBAAuBK,WAAWwC,QAAQvC,KAAK;SAChD;QACD,MAAM8E,aAAa,IAAI3E,IAAIqE,OAAOZ,GAAG,CAAC,CAACmB,WAAa;gBAACA,SAAShE,EAAE;gBAAEgE;aAAS;QAC3E,MAAMC,OAAO,IAAIlC,IACf0B,OAAOlE,MAAM,CAAC,CAACyE,WAAaA,SAASE,MAAM,EAAErB,GAAG,CAAC,CAACmB,WAAaA,SAAShE,EAAE;QAE5E,MAAMmE,mBAAmB,IAAIpC;QAC7B,IAAIqC,UAAyB;QAC7B,IAAIC,cAAc;QAClB,IAAIC,UAAU;QACd,IAAIC,SAAS;QAEb,KAAK,MAAM,EAAEpC,KAAK,EAAEjC,GAAG,EAAEuC,GAAG,EAAE,IAAIZ,WAAY;gBAGvB3B;gBAeV6D;YAjBX,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM3D,cAAc,EAACF,iBAAAA,IAAIqD,SAAS,YAAbrD,iBAAiB,EAAE,EAAE2C,GAAG,CAAC,CAACjD;oBAAS2D;wBAAAA,iBAAAA,UAAUiB,GAAG,CAAC5E,KAAKC,WAAW,eAA9B0D,iBAAqC;;YAC7F,IAAInD,YAAYkD,IAAI,CAAC,CAACtD,KAAO,CAACA,KAAK;gBACjC2B,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAmB;gBACnE;YACF;YACA,MAAMiC,QAAQ,CAACR,KAAKnE,GAAG,CAAC2C;YACxB;;;;;;;OAOC,GACD,MAAMiC,aAAa9F,uBAAuB8E,aAAaxD,IAAIO,OAAO,CAACiE,UAAU,EAAE;gBAC7EC,OAAO,GAAEZ,kBAAAA,WAAWS,GAAG,CAAC/B,yBAAfsB,gBAAqBS,GAAG,CAAC;gBAClCF,SAASG;YACX;YACA,IAAIC,WAAWjD,EAAE,KAAK,OAAO;gBAC3BE,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAsB;gBACtE;YACF;YACA,IAAIkC,WAAWE,KAAK,EAAE1E,IAAIO,OAAO,CAACiE,UAAU,GAAGA,WAAWE,KAAK;YAC/D;;;;;;;OAOC,GACD,IAAIH,OAAO;gBACT,IAAIL,YAAY,MAAM;oBACpBA,UAAU,AAAC,CAAA,MAAMjB,SAAS0B,KAAK,GAAGL,GAAG,EAAC,EAAGM,IAAI,GAAGD,KAAK;gBACvD;gBACA,IACEtH,0BAA0B6G,UAAUC,aAAa7G,oBAC9CuH,QAAQ,EACX;oBACApD,QAAQU,IAAI,CAAC;wBAAEF;wBAAOG,OAAOpC,IAAIoC,KAAK;wBAAEE,QAAQ;oBAAe;oBAC/D;gBACF;YACF;YACA,IAAIrC;YACJ,IAAID,IAAI8E,UAAU,EAAE;gBAClB7E,WAAWqD,OAAOgB,GAAG,CAACtE,IAAI8E,UAAU;gBACpC,IAAI,CAAC7E,UAAUgE,iBAAiBzB,GAAG,CAACxC,IAAI8E,UAAU;YACpD;YACA,MAAMC,SAAS,MAAMpH,YAAY;gBAC/BmF;gBACA9D,QAAQsC,QAAQtC,MAAM;gBACtBgG,MAAM;oBACJ5C,OAAOpC,IAAIoC,KAAK;mBACZpC,IAAIN,IAAI,GAAG;oBAAEA,MAAMM,IAAIN,IAAI;gBAAC,IAAI,CAAC;oBACrCuF,QAAQtG;;YAEZ;YACA,IAAI,CAACoG,QAAQ;gBACXtD,QAAQU,IAAI,CAAC;oBAAEF;oBAAOG,OAAOpC,IAAIoC,KAAK;oBAAEE,QAAQ;gBAAe;gBAC/D;YACF;YACA,MAAM4C,UAAUnF,aAAaC,KAAKC,UAAU;mBAAI,IAAI4B,IAAI3B;aAAa;YACrE,IAAIgF,SAAS;gBACX,MAAMjC,SACHD,GAAG,CAACT,KACJ1C,GAAG,CACF,aAAKqF;oBAASC,WAAW9G,WAAW+G,eAAe;oBACnD;oBAAEC,OAAO;gBAAK;gBAElB,gEAAgE;gBAChE,iDAAiD;gBACjD,MAAMvH,uBAAuBmF,SAASD,GAAG,CAACT,MAAM;YAClD;YACAK,SAAST,IAAI,CAACnC,IAAIoC,KAAK;YACvB,IAAImC,OAAO;gBACTH,WAAW;gBACXD,eAAe;YACjB,OAAO;gBACLE,UAAU;YACZ;QACF;QACA,MAAMiB,eAAerH,yBACnB2E,UACA,MAAMxE,aAAasE,aAAavE;QAGlC,MAAMoH,SAAgC;YACpCC,UAAUrE,KAAKW,IAAI,CAACtB,MAAM;YAC1B4D;YACAC;YACA5C,SAASA,QAAQgE,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEzD,KAAK,GAAG0D,EAAE1D,KAAK;YACjDP;YACAuC,kBAAkB;mBAAIA;aAAiB;WACnCqB,iBAAiBM,YAAY;YAAEN;QAAa,IAAI,CAAC;QAEvD,OAAOxE,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAACsE;IAC9B,EAAE,OAAOrE,OAAO;QACd2E,QAAQ3E,KAAK,CAAC,2BAA2BA;QACzC,OAAOJ,IAAIV,MAAM,CAAC,KAAKa,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}

package/src/lib/server/tasks-import.d.ts

@@ -1,54 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/**
- * `POST /api/crm/tasks-import` — one chunk of a tasks file, written
- * (AGL-2662).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-task-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the assignee against the
- * org's roster, and writes the document in the shape the task-save route
- * writes — the optional ids absent rather than null, `dueAtMs` null when
- * unset so the ordered views keep the row.
- *
- * ## A stranger refuses the row
- *
- * The task-save route refuses an assignee who is not a member, because a
- * notification to a stranger's inbox is the one thing it must never do.
- * The import refuses the same way, per row, as `unknown-assignee`: the
- * roster is read once for the request, and an address it does not hold
- * sends the row back to the operator's skipped file. No notification is
- * sent for an imported task, so nothing here reaches an inbox at all.
- *
- * ## Every task is the site's
- *
- * The shared drawer names a site even at the organization level, so an
- * imported task carries that site's scope the way a task typed under it
- * does. The organization's own tasks — no site — are filed one at a time
- * from the organization hub, not from a file.
- *
- * Tasks are not CRM records for the band: no quota is asked.
- */
-import { type PluginApiHandler } from '@aglyn/aglyn/server';
-/**
- * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.
- *
- * The writes are batched: a task has no key to collide on and no count to
- * keep honest between rows, so a chunk is one commit.
- */
-export declare const crmTasksImportHandler: PluginApiHandler;

package/src/lib/server/tasks-import.js

@@ -1,160 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * `POST /api/crm/tasks-import` — one chunk of a tasks file, written
- * (AGL-2662).
- *
- * The browser has already read the file and applied the operator's column
- * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw
- * rows in the vocabulary `crm-task-import.ts` defines. This route judges
- * each one through the same normalizer, resolves the assignee against the
- * org's roster, and writes the document in the shape the task-save route
- * writes — the optional ids absent rather than null, `dueAtMs` null when
- * unset so the ordered views keep the row.
- *
- * ## A stranger refuses the row
- *
- * The task-save route refuses an assignee who is not a member, because a
- * notification to a stranger's inbox is the one thing it must never do.
- * The import refuses the same way, per row, as `unknown-assignee`: the
- * roster is read once for the request, and an address it does not hold
- * sends the row back to the operator's skipped file. No notification is
- * sent for an imported task, so nothing here reaches an inbox at all.
- *
- * ## Every task is the site's
- *
- * The shared drawer names a site even at the organization level, so an
- * imported task carries that site's scope the way a task typed under it
- * does. The organization's own tasks — no site — are filed one at a time
- * from the organization hub, not from a file.
- *
- * Tasks are not CRM records for the band: no quota is asked.
- */ import { CRM_COLLECTIONS, crmTaskListFields } from "@aglyn/aglyn/server";
-import { TASK_IMPORT_CHUNK_SIZE, TASK_IMPORT_MAX_BODY_BYTES, normalizeTaskImportRow } from "../model/crm-task-import.js";
-import { firebaseAdmin } from "@aglyn/tenant-data-admin";
-import { FieldValue } from "firebase-admin/firestore";
-import { ownerDirectory, readImportRows, resolveImportContext } from "./import-context.js";
-/**
- * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.
- *
- * The writes are batched: a task has no key to collide on and no count to
- * keep honest between rows, so a chunk is one commit.
- */ export const crmTasksImportHandler = async (req, res)=>{
-    if (req.method !== 'POST') {
-        res.setHeader('Allow', 'POST');
-        return res.status(405).json({
-            error: 'Method not allowed'
-        });
-    }
-    const read = readImportRows(req, {
-        maxBodyBytes: TASK_IMPORT_MAX_BODY_BYTES,
-        chunkSize: TASK_IMPORT_CHUNK_SIZE
-    });
-    if ('error' in read) return res.status(read.status).json({
-        error: read.error
-    });
-    try {
-        const context = await resolveImportContext(req);
-        if (context.ok === false) return res.status(context.status).json(context.body);
-        const skipped = [];
-        const dropped = {};
-        const normalized = [];
-        read.rows.forEach((raw, index)=>{
-            const verdict = normalizeTaskImportRow(raw);
-            if (verdict.ok === false) {
-                skipped.push({
-                    index,
-                    title: verdict.input,
-                    reason: verdict.reason
-                });
-                return;
-            }
-            for (const entry of verdict.row.dropped){
-                var _dropped_entry_field;
-                dropped[entry.field] = ((_dropped_entry_field = dropped[entry.field]) != null ? _dropped_entry_field : 0) + 1;
-            }
-            normalized.push({
-                index,
-                row: verdict.row
-            });
-        });
-        // The roster reader keys on `ownerEmail`; a task's word for it is assignee.
-        const members = await ownerDirectory(context.orgId, normalized.map((entry)=>({
-                ownerEmail: entry.row.assigneeEmail
-            })));
-        const firestore = firebaseAdmin.app().firestore();
-        const tasks = firestore.collection('orgs').doc(context.orgId).collection(CRM_COLLECTIONS.tasks);
-        const batch = firestore.batch();
-        const nowMs = Date.now();
-        let created = 0;
-        for (const { index, row } of normalized){
-            var _row_notes;
-            let assigneeUid;
-            if (row.assigneeEmail) {
-                assigneeUid = members.get(row.assigneeEmail);
-                if (!assigneeUid) {
-                    skipped.push({
-                        index,
-                        title: row.title,
-                        reason: 'unknown-assignee'
-                    });
-                    continue;
-                }
-            }
-            batch.set(tasks.doc(), _extends({}, crmTaskListFields({
-                title: row.title,
-                visibleTo: context.scopeTokens
-            }), {
-                title: row.title,
-                kind: row.kind,
-                priority: row.priority,
-                status: row.status,
-                dueAtMs: row.dueAtMs,
-                notes: (_row_notes = row.notes) != null ? _row_notes : '',
-                completedAtMs: row.status === 'done' ? nowMs : null
-            }, row.status === 'done' ? {
-                completedByUid: context.uid
-            } : {}, assigneeUid ? {
-                assigneeUid
-            } : {}, {
-                visibleTo: context.scopeTokens,
-                hostId: context.hostId,
-                createdByUid: context.uid,
-                createdAt: FieldValue.serverTimestamp(),
-                updatedAt: FieldValue.serverTimestamp()
-            }));
-            created += 1;
-        }
-        if (created) await batch.commit();
-        const result = {
-            received: read.rows.length,
-            created,
-            merged: 0,
-            skipped: skipped.sort((a, b)=>a.index - b.index),
-            dropped,
-            ownersUnresolved: []
-        };
-        return res.status(200).json(result);
-    } catch (error) {
-        console.error('crm/tasks-import failed', error);
-        return res.status(500).json({
-            error: 'The import could not continue.'
-        });
-    }
-};
-
-//# sourceMappingURL=tasks-import.js.map

package/src/lib/server/tasks-import.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/tasks-import.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * `POST /api/crm/tasks-import` — one chunk of a tasks file, written\n * (AGL-2662).\n *\n * The browser has already read the file and applied the operator's column\n * mapping; what arrives here is up to {@link TASK_IMPORT_CHUNK_SIZE} raw\n * rows in the vocabulary `crm-task-import.ts` defines. This route judges\n * each one through the same normalizer, resolves the assignee against the\n * org's roster, and writes the document in the shape the task-save route\n * writes — the optional ids absent rather than null, `dueAtMs` null when\n * unset so the ordered views keep the row.\n *\n * ## A stranger refuses the row\n *\n * The task-save route refuses an assignee who is not a member, because a\n * notification to a stranger's inbox is the one thing it must never do.\n * The import refuses the same way, per row, as `unknown-assignee`: the\n * roster is read once for the request, and an address it does not hold\n * sends the row back to the operator's skipped file. No notification is\n * sent for an imported task, so nothing here reaches an inbox at all.\n *\n * ## Every task is the site's\n *\n * The shared drawer names a site even at the organization level, so an\n * imported task carries that site's scope the way a task typed under it\n * does. The organization's own tasks — no site — are filed one at a time\n * from the organization hub, not from a file.\n *\n * Tasks are not CRM records for the band: no quota is asked.\n */\n\nimport { CRM_COLLECTIONS, crmTaskListFields, type PluginApiHandler } from '@aglyn/aglyn/server'\nimport {\n  TASK_IMPORT_CHUNK_SIZE,\n  TASK_IMPORT_MAX_BODY_BYTES,\n  type TaskImportChunkResult,\n  type TaskImportRawRow,\n  type TaskImportRow,\n  type TaskImportSkippedRow,\n  normalizeTaskImportRow,\n} from '../model/crm-task-import'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { ownerDirectory, readImportRows, resolveImportContext } from './import-context'\n\n/**\n * `POST crm/tasks-import` — `{ hostId, rows }` → a {@link TaskImportChunkResult}.\n *\n * The writes are batched: a task has no key to collide on and no count to\n * keep honest between rows, so a chunk is one commit.\n */\nexport const crmTasksImportHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const read = readImportRows<TaskImportRawRow>(req, {\n    maxBodyBytes: TASK_IMPORT_MAX_BODY_BYTES,\n    chunkSize: TASK_IMPORT_CHUNK_SIZE,\n  })\n  if ('error' in read) return res.status(read.status).json({ error: read.error })\n  try {\n    const context = await resolveImportContext(req)\n    if (context.ok === false) return res.status(context.status).json(context.body)\n\n    const skipped: TaskImportSkippedRow[] = []\n    const dropped: Record<string, number> = {}\n    const normalized: { index: number; row: TaskImportRow }[] = []\n    read.rows.forEach((raw, index) => {\n      const verdict = normalizeTaskImportRow(raw)\n      if (verdict.ok === false) {\n        skipped.push({ index, title: verdict.input, reason: verdict.reason })\n        return\n      }\n      for (const entry of verdict.row.dropped) {\n        dropped[entry.field] = (dropped[entry.field] ?? 0) + 1\n      }\n      normalized.push({ index, row: verdict.row })\n    })\n\n    // The roster reader keys on `ownerEmail`; a task's word for it is assignee.\n    const members = await ownerDirectory(\n      context.orgId,\n      normalized.map((entry) => ({ ownerEmail: entry.row.assigneeEmail })),\n    )\n    const firestore = firebaseAdmin.app().firestore()\n    const tasks = firestore\n      .collection('orgs')\n      .doc(context.orgId)\n      .collection(CRM_COLLECTIONS.tasks)\n    const batch = firestore.batch()\n    const nowMs = Date.now()\n    let created = 0\n\n    for (const { index, row } of normalized) {\n      let assigneeUid: string | undefined\n      if (row.assigneeEmail) {\n        assigneeUid = members.get(row.assigneeEmail)\n        if (!assigneeUid) {\n          skipped.push({ index, title: row.title, reason: 'unknown-assignee' })\n          continue\n        }\n      }\n      batch.set(tasks.doc(), {\n        // What the Tasks list searches by (AGL-3321).\n        ...crmTaskListFields({ title: row.title, visibleTo: context.scopeTokens }),\n        title: row.title,\n        kind: row.kind,\n        priority: row.priority,\n        status: row.status,\n        dueAtMs: row.dueAtMs,\n        notes: row.notes ?? '',\n        completedAtMs: row.status === 'done' ? nowMs : null,\n        ...(row.status === 'done' ? { completedByUid: context.uid } : {}),\n        ...(assigneeUid ? { assigneeUid } : {}),\n        visibleTo: context.scopeTokens,\n        hostId: context.hostId,\n        createdByUid: context.uid,\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      created += 1\n    }\n    if (created) await batch.commit()\n\n    const result: TaskImportChunkResult = {\n      received: read.rows.length,\n      created,\n      merged: 0,\n      skipped: skipped.sort((a, b) => a.index - b.index),\n      dropped,\n      ownersUnresolved: [],\n    }\n    return res.status(200).json(result)\n  } catch (error) {\n    console.error('crm/tasks-import failed', error)\n    return res.status(500).json({ error: 'The import could not continue.' })\n  }\n}\n"],"names":["CRM_COLLECTIONS","crmTaskListFields","TASK_IMPORT_CHUNK_SIZE","TASK_IMPORT_MAX_BODY_BYTES","normalizeTaskImportRow","firebaseAdmin","FieldValue","ownerDirectory","readImportRows","resolveImportContext","crmTasksImportHandler","req","res","method","setHeader","status","json","error","read","maxBodyBytes","chunkSize","context","ok","body","skipped","dropped","normalized","rows","forEach","raw","index","verdict","push","title","input","reason","entry","row","field","members","orgId","map","ownerEmail","assigneeEmail","firestore","app","tasks","collection","doc","batch","nowMs","Date","now","created","assigneeUid","get","set","visibleTo","scopeTokens","kind","priority","dueAtMs","notes","completedAtMs","completedByUid","uid","hostId","createdByUid","createdAt","serverTimestamp","updatedAt","commit","result","received","length","merged","sort","a","b","ownersUnresolved","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GAED,SAASA,eAAe,EAAEC,iBAAiB,QAA+B,sBAAqB;AAC/F,SACEC,sBAAsB,EACtBC,0BAA0B,EAK1BC,sBAAsB,QACjB,8BAA0B;AACjC,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,cAAc,EAAEC,cAAc,EAAEC,oBAAoB,QAAQ,sBAAkB;AAEvF;;;;;CAKC,GACD,OAAO,MAAMC,wBAA0C,OAAOC,KAAKC;IACjE,IAAID,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,OAAOV,eAAiCG,KAAK;QACjDQ,cAAchB;QACdiB,WAAWlB;IACb;IACA,IAAI,WAAWgB,MAAM,OAAON,IAAIG,MAAM,CAACG,KAAKH,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAOC,KAAKD,KAAK;IAAC;IAC7E,IAAI;QACF,MAAMI,UAAU,MAAMZ,qBAAqBE;QAC3C,IAAIU,QAAQC,EAAE,KAAK,OAAO,OAAOV,IAAIG,MAAM,CAACM,QAAQN,MAAM,EAAEC,IAAI,CAACK,QAAQE,IAAI;QAE7E,MAAMC,UAAkC,EAAE;QAC1C,MAAMC,UAAkC,CAAC;QACzC,MAAMC,aAAsD,EAAE;QAC9DR,KAAKS,IAAI,CAACC,OAAO,CAAC,CAACC,KAAKC;YACtB,MAAMC,UAAU3B,uBAAuByB;YACvC,IAAIE,QAAQT,EAAE,KAAK,OAAO;gBACxBE,QAAQQ,IAAI,CAAC;oBAAEF;oBAAOG,OAAOF,QAAQG,KAAK;oBAAEC,QAAQJ,QAAQI,MAAM;gBAAC;gBACnE;YACF;YACA,KAAK,MAAMC,SAASL,QAAQM,GAAG,CAACZ,OAAO,CAAE;oBACfA;gBAAxBA,OAAO,CAACW,MAAME,KAAK,CAAC,GAAG,EAACb,uBAAAA,OAAO,CAACW,MAAME,KAAK,CAAC,YAApBb,uBAAwB,KAAK;YACvD;YACAC,WAAWM,IAAI,CAAC;gBAAEF;gBAAOO,KAAKN,QAAQM,GAAG;YAAC;QAC5C;QAEA,4EAA4E;QAC5E,MAAME,UAAU,MAAMhC,eACpBc,QAAQmB,KAAK,EACbd,WAAWe,GAAG,CAAC,CAACL,QAAW,CAAA;gBAAEM,YAAYN,MAAMC,GAAG,CAACM,aAAa;YAAC,CAAA;QAEnE,MAAMC,YAAYvC,cAAcwC,GAAG,GAAGD,SAAS;QAC/C,MAAME,QAAQF,UACXG,UAAU,CAAC,QACXC,GAAG,CAAC3B,QAAQmB,KAAK,EACjBO,UAAU,CAAC/C,gBAAgB8C,KAAK;QACnC,MAAMG,QAAQL,UAAUK,KAAK;QAC7B,MAAMC,QAAQC,KAAKC,GAAG;QACtB,IAAIC,UAAU;QAEd,KAAK,MAAM,EAAEvB,KAAK,EAAEO,GAAG,EAAE,IAAIX,WAAY;gBAiB9BW;YAhBT,IAAIiB;YACJ,IAAIjB,IAAIM,aAAa,EAAE;gBACrBW,cAAcf,QAAQgB,GAAG,CAAClB,IAAIM,aAAa;gBAC3C,IAAI,CAACW,aAAa;oBAChB9B,QAAQQ,IAAI,CAAC;wBAAEF;wBAAOG,OAAOI,IAAIJ,KAAK;wBAAEE,QAAQ;oBAAmB;oBACnE;gBACF;YACF;YACAc,MAAMO,GAAG,CAACV,MAAME,GAAG,IAAI,aAElB/C,kBAAkB;gBAAEgC,OAAOI,IAAIJ,KAAK;gBAAEwB,WAAWpC,QAAQqC,WAAW;YAAC;gBACxEzB,OAAOI,IAAIJ,KAAK;gBAChB0B,MAAMtB,IAAIsB,IAAI;gBACdC,UAAUvB,IAAIuB,QAAQ;gBACtB7C,QAAQsB,IAAItB,MAAM;gBAClB8C,SAASxB,IAAIwB,OAAO;gBACpBC,KAAK,GAAEzB,aAAAA,IAAIyB,KAAK,YAATzB,aAAa;gBACpB0B,eAAe1B,IAAItB,MAAM,KAAK,SAASmC,QAAQ;eAC3Cb,IAAItB,MAAM,KAAK,SAAS;gBAAEiD,gBAAgB3C,QAAQ4C,GAAG;YAAC,IAAI,CAAC,GAC3DX,cAAc;gBAAEA;YAAY,IAAI,CAAC;gBACrCG,WAAWpC,QAAQqC,WAAW;gBAC9BQ,QAAQ7C,QAAQ6C,MAAM;gBACtBC,cAAc9C,QAAQ4C,GAAG;gBACzBG,WAAW9D,WAAW+D,eAAe;gBACrCC,WAAWhE,WAAW+D,eAAe;;YAEvChB,WAAW;QACb;QACA,IAAIA,SAAS,MAAMJ,MAAMsB,MAAM;QAE/B,MAAMC,SAAgC;YACpCC,UAAUvD,KAAKS,IAAI,CAAC+C,MAAM;YAC1BrB;YACAsB,QAAQ;YACRnD,SAASA,QAAQoD,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAE/C,KAAK,GAAGgD,EAAEhD,KAAK;YACjDL;YACAsD,kBAAkB,EAAE;QACtB;QACA,OAAOnE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAACwD;IAC9B,EAAE,OAAOvD,OAAO;QACd+D,QAAQ/D,KAAK,CAAC,2BAA2BA;QACzC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiC;IACxE;AACF,EAAC"}