@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/person-refund.js

@@ -0,0 +1,221 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { mergeContactInteraction, normalizeContactEmail } from "@aglyn/aglyn/server";
+import { firebaseAdmin, orgDataCollectionForHost } from "@aglyn/tenant-data-admin";
+// Leaf imports, not the barrel: most specs in this library mock
+// `@aglyn/tenant-data-admin` wholesale, and a permissive stub of either
+// function would turn every case below green without a document ever having
+// to exist.
+import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
+import { updateExisting } from "@aglyn/tenant-data-admin/server/update-existing";
+/**
+ * Money going BACK to a customer, recorded on their contact (AGL-1754).
+ *
+ * The CRM's answer to `plugin-person-records`' `recordRefund` (AGL-3080):
+ * commerce reports a refund or a lost dispute through the seam, and what it
+ * does to the person is decided here, by the plugin that keeps them. It used
+ * to be commerce's own module, writing these fields onto the CRM's contacts.
+ *
+ * `upsertHostContact` accumulates `ltvCents` and nothing anywhere decremented
+ * it, so a customer who bought $500 and returned all of it read identically to
+ * one who bought $500 and kept it — and the first surface built on the field
+ * (RFM segmentation, a lifetime-value column, a best-customers list) would have
+ * ranked a serial returner among the merchant's best customers.
+ *
+ * WHAT THIS WRITES, AND WHY IT IS NOT A DECREMENT
+ *
+ * `ltvCents` is left exactly as it is and the reversal is recorded BESIDE it:
+ *
+ * | field | meaning |
+ * | -- | -- |
+ * | `ltvCents` | gross money handed over, unchanged (AGL-1748) |
+ * | `refundedCents` | gross money handed back |
+ * | `ordersCount` | orders placed, unchanged |
+ * | `refundedOrdersCount` | of those, how many ended fully reversed |
+ * | `lastRefundAtMs` | when money last went back |
+ *
+ * This is the shape AGL-1747 chose two days earlier for the same question on
+ * the orders CSV — `amountUsd` stayed gross under its existing name and
+ * `refundedUsd`/`netUsd` were appended — and it is the shape AGL-1748 named
+ * when it recorded the gross semantics in `upsert-contact.ts`. Netting in
+ * place would make a stored number mean one thing for rows written before this
+ * commit and another for rows written after, with nothing on the document to
+ * tell the two apart. Two fields cost one number's worth of storage and keep
+ * both facts, and a reader that wants the net has `ltvCents - refundedCents`.
+ *
+ * It also answers "can it go negative?" by moving the question off storage.
+ * Both figures are monotonic counters of money that actually moved in one
+ * direction, so neither can go negative. The DERIVED net can, for exactly one
+ * reason: an order placed before AGL-1748 taught POS, drafts, reservations and
+ * bookings to pass `purchaseCents` at all, whose sale was never added and whose
+ * refund is subtracted here. That is a true statement about the data, and
+ * clamping it away at write time would erase the only evidence that a purchase
+ * is missing. AGL-1753 is the backfill that reconciles it, by SETTING both
+ * fields from the orders — which already carry `refundedCents`, so whatever a
+ * reader decides here costs the rebuild nothing. A merchant-facing reader
+ * should show gross and refunded, and clamp only the net it ranks on.
+ *
+ * `ordersCount` is deliberately NOT decremented. A fully refunded order still
+ * happened, and a decrement cannot be undone by a reader that would rather
+ * count it — while `refundedOrdersCount` beside it lets RFM's frequency term
+ * net the two, or not, at the point of display. Same argument as the amount,
+ * one field along.
+ *
+ * WHEN THE CONTACT IS MISSING, THIS REFUSES — and records the refusal.
+ *
+ * Refusing is right on AGL-1732's test, "does refusing discard money or work
+ * that already happened?", because it does not: the refund is durable on the
+ * order (`refundedCents`, the timeline entry, Stripe), and the contact is a
+ * derived aggregate that AGL-1753's rebuild reads back out of those same
+ * orders. Creating one here would be worse three ways — creation is audience
+ * BAND gated, so it hard-bands a Free org (raising the AGL-891 dropped-contacts
+ * alert for a record the merchant never had) or meters onto a paid invoice; the
+ * contact it created would hold a refund and no purchase, which is the negative
+ * lifetime value above with nothing to reconcile it against; and it is the
+ * phantom-document shape the `updateExisting` sweep spent yesterday closing.
+ *
+ * So the write is an `update()`, never `set(…, { merge: true })` — the contact
+ * may have been deleted between the query and the write, and a merge-set would
+ * resurrect it as a document holding nothing but a refund. Every refusal
+ * increments `hosts/{hostId}/counters/contactRefundsUnmatched`, the counter
+ * shape `contactsDropped` already uses, so a refund that reached no contact is
+ * countable rather than silent.
+ *
+ * CHARGEBACKS (AGL-1554) are a separate decision and are NOT handled here.
+ * This takes `kind` so the handler that eventually answers
+ * `charge.dispute.closed` can record a lost dispute through the same writer
+ * with the same fields: money reversed is money reversed, whichever door it
+ * left by, and only the wording of the timeline entry differs.
+ */ export async function recordPersonRefund(request) {
+    var _snapshot_get, _snapshot_get1;
+    /*
+   * The request's fields, as the seam names them. `refId` is the order the
+   * money went back on — the contact timeline's `refId`. `email` is the buyer
+   * as the ORDER recorded them, raw, normalized here because that is the key
+   * the contacts are stored under and orders are not consistent about it
+   * (AGL-1753 item 3); no name rides along on purpose — a refund is not a
+   * capture point and must not rewrite who the contact is. `amountCents` is
+   * what THIS attempt reversed, never the order total: the seller caps each
+   * attempt against what is left, so several partials sum to at most the
+   * total. `closedTheSale` is true only for the write that moved the order
+   * INTO `refunded` — two partials settling at once can both observe a fully
+   * refunded total, so the caller decides it from the transition it made.
+   */ const options = {
+        hostId: request.hostId,
+        orderId: request.refId,
+        email: request.email,
+        amountCents: request.amountCents,
+        closedTheOrder: request.closedTheSale,
+        kind: request.reason
+    };
+    // The money has already moved and the order already records it, so nothing
+    // here may fail the refund: a throw reaches `recordPluginPersonRefund`,
+    // which logs it and answers the seller `null`.
+    const amountCents = Math.round(Number(options.amountCents));
+    // Nothing went back, so there is nothing to record against anybody.
+    if (!(amountCents > 0)) return 'recorded';
+    const email = normalizeContactEmail(options.email);
+    if (!email) {
+        await recordUnmatchedRefund(options.hostId, options.orderId, 'no-email');
+        return 'no-email';
+    }
+    // Contacts are ORG-scoped (AGL-237), not `hosts/{h}/contacts`, and reads
+    // narrow to what this host may see (AGL-1039) — the same lookup
+    // `upsertHostContact` makes, through the org's address index
+    // (AGL-2633), so both writers resolve the same document even when the
+    // order's address is one a merge folded into the buyer's record.
+    const contactsRef = await orgDataCollectionForHost(options.hostId, 'contacts');
+    const snapshot = await findContactByEmail(contactsRef, email, {
+        hostId: options.hostId
+    });
+    if (!snapshot) {
+        await recordUnmatchedRefund(options.hostId, options.orderId, 'no-contact');
+        return 'no-person';
+    }
+    const atMs = Date.now();
+    const interaction = {
+        // `refId` names an order, so the interaction is an order interaction.
+        // There is no `'refund'` ContactSource and this deliberately does not
+        // add one: `sources` records which capture silo produced the contact,
+        // and a refund captures nobody.
+        type: 'order',
+        atMs,
+        refId: options.orderId,
+        summary: `$${(amountCents / 100).toFixed(2)} ` + (options.kind === 'chargeback' ? 'charged back' : 'refunded') + (options.closedTheOrder ? ' (full)' : '')
+    };
+    // Reused for the newest-first ordering and the interactions cap; only the
+    // timeline is taken. The `sources` half of the merge is discarded on
+    // purpose, per the note above.
+    const { interactions } = mergeContactInteraction({
+        sources: (_snapshot_get = snapshot.get('sources')) != null ? _snapshot_get : {},
+        interactions: (_snapshot_get1 = snapshot.get('interactions')) != null ? _snapshot_get1 : []
+    }, {
+        source: 'order',
+        interaction
+    });
+    const FieldValue = firebaseAdmin.firestore.FieldValue;
+    // Every field is top-level. `update()` replaces a nested map wholesale
+    // rather than merging into it, so anything under a map would have to be
+    // written as a dotted path; there is nothing here that is.
+    //
+    // The amounts are increments, so two refunds settling at once both land.
+    // `interactions` is a read-modify-write and therefore CAN lose one of two
+    // concurrent entries — the same exposure `upsertHostContact` has on the
+    // same array, and it costs a timeline line rather than a number.
+    const landed = await updateExisting(snapshot.ref, _extends({
+        refundedCents: FieldValue.increment(amountCents)
+    }, options.closedTheOrder ? {
+        refundedOrdersCount: FieldValue.increment(1)
+    } : {}, {
+        lastRefundAtMs: atMs,
+        interactions,
+        updatedAt: FieldValue.serverTimestamp()
+    }));
+    if (!landed) {
+        await recordUnmatchedRefund(options.hostId, options.orderId, 'contact-deleted');
+        return 'gone';
+    }
+    return 'recorded';
+}
+/**
+ * A refund that reached no contact, recorded rather than dropped (AGL-1754).
+ *
+ * The `set(…, { merge: true })` here IS meant to conjure the document — it is
+ * a counter, and the shape is `counters/contactsDropped`'s, so an operator
+ * reading a host's counters finds both kinds of missed contact record in one
+ * place. The reason is stamped because the three cases want different answers:
+ * `no-email` is an order that never identified its buyer, `no-contact` is the
+ * AGL-1753 backfill's work, and `contact-deleted` is a contact removed between
+ * the sale and the refund, which nothing should recreate.
+ */ async function recordUnmatchedRefund(hostId, orderId, reason) {
+    console.warn('refund reached no contact', {
+        hostId,
+        orderId,
+        reason
+    });
+    const FieldValue = firebaseAdmin.firestore.FieldValue;
+    await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('counters').doc('contactRefundsUnmatched').set({
+        total: FieldValue.increment(1),
+        lastOrderId: orderId,
+        lastReason: reason,
+        lastAtMs: Date.now()
+    }, {
+        merge: true
+    }).catch(()=>undefined);
+}
+
+//# sourceMappingURL=person-refund.js.map

package/src/lib/server/person-refund.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/person-refund.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  mergeContactInteraction,\n  normalizeContactEmail,\n  type ContactInteraction,\n} from '@aglyn/aglyn/server'\nimport type {\n  PluginPersonRefundOutcome,\n  PluginPersonRefundRequest,\n} from '@aglyn/aglyn/plugin-manager/plugin-person-records'\nimport {\n  firebaseAdmin,\n  orgDataCollectionForHost,\n} from '@aglyn/tenant-data-admin'\n// Leaf imports, not the barrel: most specs in this library mock\n// `@aglyn/tenant-data-admin` wholesale, and a permissive stub of either\n// function would turn every case below green without a document ever having\n// to exist.\nimport { findContactByEmail } from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { updateExisting } from '@aglyn/tenant-data-admin/server/update-existing'\n\n/**\n * Money going BACK to a customer, recorded on their contact (AGL-1754).\n *\n * The CRM's answer to `plugin-person-records`' `recordRefund` (AGL-3080):\n * commerce reports a refund or a lost dispute through the seam, and what it\n * does to the person is decided here, by the plugin that keeps them. It used\n * to be commerce's own module, writing these fields onto the CRM's contacts.\n *\n * `upsertHostContact` accumulates `ltvCents` and nothing anywhere decremented\n * it, so a customer who bought $500 and returned all of it read identically to\n * one who bought $500 and kept it — and the first surface built on the field\n * (RFM segmentation, a lifetime-value column, a best-customers list) would have\n * ranked a serial returner among the merchant's best customers.\n *\n * WHAT THIS WRITES, AND WHY IT IS NOT A DECREMENT\n *\n * `ltvCents` is left exactly as it is and the reversal is recorded BESIDE it:\n *\n * | field | meaning |\n * | -- | -- |\n * | `ltvCents` | gross money handed over, unchanged (AGL-1748) |\n * | `refundedCents` | gross money handed back |\n * | `ordersCount` | orders placed, unchanged |\n * | `refundedOrdersCount` | of those, how many ended fully reversed |\n * | `lastRefundAtMs` | when money last went back |\n *\n * This is the shape AGL-1747 chose two days earlier for the same question on\n * the orders CSV — `amountUsd` stayed gross under its existing name and\n * `refundedUsd`/`netUsd` were appended — and it is the shape AGL-1748 named\n * when it recorded the gross semantics in `upsert-contact.ts`. Netting in\n * place would make a stored number mean one thing for rows written before this\n * commit and another for rows written after, with nothing on the document to\n * tell the two apart. Two fields cost one number's worth of storage and keep\n * both facts, and a reader that wants the net has `ltvCents - refundedCents`.\n *\n * It also answers \"can it go negative?\" by moving the question off storage.\n * Both figures are monotonic counters of money that actually moved in one\n * direction, so neither can go negative. The DERIVED net can, for exactly one\n * reason: an order placed before AGL-1748 taught POS, drafts, reservations and\n * bookings to pass `purchaseCents` at all, whose sale was never added and whose\n * refund is subtracted here. That is a true statement about the data, and\n * clamping it away at write time would erase the only evidence that a purchase\n * is missing. AGL-1753 is the backfill that reconciles it, by SETTING both\n * fields from the orders — which already carry `refundedCents`, so whatever a\n * reader decides here costs the rebuild nothing. A merchant-facing reader\n * should show gross and refunded, and clamp only the net it ranks on.\n *\n * `ordersCount` is deliberately NOT decremented. A fully refunded order still\n * happened, and a decrement cannot be undone by a reader that would rather\n * count it — while `refundedOrdersCount` beside it lets RFM's frequency term\n * net the two, or not, at the point of display. Same argument as the amount,\n * one field along.\n *\n * WHEN THE CONTACT IS MISSING, THIS REFUSES — and records the refusal.\n *\n * Refusing is right on AGL-1732's test, \"does refusing discard money or work\n * that already happened?\", because it does not: the refund is durable on the\n * order (`refundedCents`, the timeline entry, Stripe), and the contact is a\n * derived aggregate that AGL-1753's rebuild reads back out of those same\n * orders. Creating one here would be worse three ways — creation is audience\n * BAND gated, so it hard-bands a Free org (raising the AGL-891 dropped-contacts\n * alert for a record the merchant never had) or meters onto a paid invoice; the\n * contact it created would hold a refund and no purchase, which is the negative\n * lifetime value above with nothing to reconcile it against; and it is the\n * phantom-document shape the `updateExisting` sweep spent yesterday closing.\n *\n * So the write is an `update()`, never `set(…, { merge: true })` — the contact\n * may have been deleted between the query and the write, and a merge-set would\n * resurrect it as a document holding nothing but a refund. Every refusal\n * increments `hosts/{hostId}/counters/contactRefundsUnmatched`, the counter\n * shape `contactsDropped` already uses, so a refund that reached no contact is\n * countable rather than silent.\n *\n * CHARGEBACKS (AGL-1554) are a separate decision and are NOT handled here.\n * This takes `kind` so the handler that eventually answers\n * `charge.dispute.closed` can record a lost dispute through the same writer\n * with the same fields: money reversed is money reversed, whichever door it\n * left by, and only the wording of the timeline entry differs.\n */\nexport async function recordPersonRefund(\n  request: PluginPersonRefundRequest,\n): Promise<PluginPersonRefundOutcome> {\n  /*\n   * The request's fields, as the seam names them. `refId` is the order the\n   * money went back on — the contact timeline's `refId`. `email` is the buyer\n   * as the ORDER recorded them, raw, normalized here because that is the key\n   * the contacts are stored under and orders are not consistent about it\n   * (AGL-1753 item 3); no name rides along on purpose — a refund is not a\n   * capture point and must not rewrite who the contact is. `amountCents` is\n   * what THIS attempt reversed, never the order total: the seller caps each\n   * attempt against what is left, so several partials sum to at most the\n   * total. `closedTheSale` is true only for the write that moved the order\n   * INTO `refunded` — two partials settling at once can both observe a fully\n   * refunded total, so the caller decides it from the transition it made.\n   */\n  const options = {\n    hostId: request.hostId,\n    orderId: request.refId,\n    email: request.email,\n    amountCents: request.amountCents,\n    closedTheOrder: request.closedTheSale,\n    kind: request.reason,\n  }\n  // The money has already moved and the order already records it, so nothing\n  // here may fail the refund: a throw reaches `recordPluginPersonRefund`,\n  // which logs it and answers the seller `null`.\n  const amountCents = Math.round(Number(options.amountCents))\n  // Nothing went back, so there is nothing to record against anybody.\n  if (!(amountCents > 0)) return 'recorded'\n  const email = normalizeContactEmail(options.email)\n  if (!email) {\n    await recordUnmatchedRefund(options.hostId, options.orderId, 'no-email')\n    return 'no-email'\n  }\n  // Contacts are ORG-scoped (AGL-237), not `hosts/{h}/contacts`, and reads\n  // narrow to what this host may see (AGL-1039) — the same lookup\n  // `upsertHostContact` makes, through the org's address index\n  // (AGL-2633), so both writers resolve the same document even when the\n  // order's address is one a merge folded into the buyer's record.\n  const contactsRef = await orgDataCollectionForHost(\n    options.hostId,\n    'contacts',\n  )\n  const snapshot = await findContactByEmail(contactsRef, email, {\n    hostId: options.hostId,\n  })\n  if (!snapshot) {\n    await recordUnmatchedRefund(options.hostId, options.orderId, 'no-contact')\n    return 'no-person'\n  }\n  const atMs = Date.now()\n  const interaction: ContactInteraction = {\n    // `refId` names an order, so the interaction is an order interaction.\n    // There is no `'refund'` ContactSource and this deliberately does not\n    // add one: `sources` records which capture silo produced the contact,\n    // and a refund captures nobody.\n    type: 'order',\n    atMs,\n    refId: options.orderId,\n    summary:\n      `$${(amountCents / 100).toFixed(2)} ` +\n      (options.kind === 'chargeback' ? 'charged back' : 'refunded') +\n      (options.closedTheOrder ? ' (full)' : ''),\n  }\n  // Reused for the newest-first ordering and the interactions cap; only the\n  // timeline is taken. The `sources` half of the merge is discarded on\n  // purpose, per the note above.\n  const { interactions } = mergeContactInteraction(\n    {\n      sources: snapshot.get('sources') ?? {},\n      interactions: snapshot.get('interactions') ?? [],\n    },\n    { source: 'order', interaction },\n  )\n\n  const FieldValue = firebaseAdmin.firestore.FieldValue\n  // Every field is top-level. `update()` replaces a nested map wholesale\n  // rather than merging into it, so anything under a map would have to be\n  // written as a dotted path; there is nothing here that is.\n  //\n  // The amounts are increments, so two refunds settling at once both land.\n  // `interactions` is a read-modify-write and therefore CAN lose one of two\n  // concurrent entries — the same exposure `upsertHostContact` has on the\n  // same array, and it costs a timeline line rather than a number.\n  const landed = await updateExisting(snapshot.ref, {\n    refundedCents: FieldValue.increment(amountCents),\n    ...(options.closedTheOrder\n      ? { refundedOrdersCount: FieldValue.increment(1) }\n      : {}),\n    lastRefundAtMs: atMs,\n    interactions,\n    updatedAt: FieldValue.serverTimestamp(),\n  })\n  if (!landed) {\n    await recordUnmatchedRefund(\n      options.hostId,\n      options.orderId,\n      'contact-deleted',\n    )\n    return 'gone'\n  }\n  return 'recorded'\n}\n\n/**\n * A refund that reached no contact, recorded rather than dropped (AGL-1754).\n *\n * The `set(…, { merge: true })` here IS meant to conjure the document — it is\n * a counter, and the shape is `counters/contactsDropped`'s, so an operator\n * reading a host's counters finds both kinds of missed contact record in one\n * place. The reason is stamped because the three cases want different answers:\n * `no-email` is an order that never identified its buyer, `no-contact` is the\n * AGL-1753 backfill's work, and `contact-deleted` is a contact removed between\n * the sale and the refund, which nothing should recreate.\n */\nasync function recordUnmatchedRefund(\n  hostId: string,\n  orderId: string,\n  reason: 'no-email' | 'no-contact' | 'contact-deleted',\n): Promise<void> {\n  console.warn('refund reached no contact', { hostId, orderId, reason })\n  const FieldValue = firebaseAdmin.firestore.FieldValue\n  await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .collection('counters')\n    .doc('contactRefundsUnmatched')\n    .set(\n      {\n        total: FieldValue.increment(1),\n        lastOrderId: orderId,\n        lastReason: reason,\n        lastAtMs: Date.now(),\n      },\n      { merge: true },\n    )\n    .catch(() => undefined)\n}\n"],"names":["mergeContactInteraction","normalizeContactEmail","firebaseAdmin","orgDataCollectionForHost","findContactByEmail","updateExisting","recordPersonRefund","request","snapshot","options","hostId","orderId","refId","email","amountCents","closedTheOrder","closedTheSale","kind","reason","Math","round","Number","recordUnmatchedRefund","contactsRef","atMs","Date","now","interaction","type","summary","toFixed","interactions","sources","get","source","FieldValue","firestore","landed","ref","refundedCents","increment","refundedOrdersCount","lastRefundAtMs","updatedAt","serverTimestamp","console","warn","app","collection","doc","set","total","lastOrderId","lastReason","lastAtMs","merge","catch","undefined"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,uBAAuB,EACvBC,qBAAqB,QAEhB,sBAAqB;AAK5B,SACEC,aAAa,EACbC,wBAAwB,QACnB,2BAA0B;AACjC,gEAAgE;AAChE,wEAAwE;AACxE,4EAA4E;AAC5E,YAAY;AACZ,SAASC,kBAAkB,QAAQ,sDAAqD;AACxF,SAASC,cAAc,QAAQ,kDAAiD;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8EC,GACD,OAAO,eAAeC,mBACpBC,OAAkC;QAqErBC,eACKA;IApElB;;;;;;;;;;;;GAYC,GACD,MAAMC,UAAU;QACdC,QAAQH,QAAQG,MAAM;QACtBC,SAASJ,QAAQK,KAAK;QACtBC,OAAON,QAAQM,KAAK;QACpBC,aAAaP,QAAQO,WAAW;QAChCC,gBAAgBR,QAAQS,aAAa;QACrCC,MAAMV,QAAQW,MAAM;IACtB;IACA,2EAA2E;IAC3E,wEAAwE;IACxE,+CAA+C;IAC/C,MAAMJ,cAAcK,KAAKC,KAAK,CAACC,OAAOZ,QAAQK,WAAW;IACzD,oEAAoE;IACpE,IAAI,CAAEA,CAAAA,cAAc,CAAA,GAAI,OAAO;IAC/B,MAAMD,QAAQZ,sBAAsBQ,QAAQI,KAAK;IACjD,IAAI,CAACA,OAAO;QACV,MAAMS,sBAAsBb,QAAQC,MAAM,EAAED,QAAQE,OAAO,EAAE;QAC7D,OAAO;IACT;IACA,yEAAyE;IACzE,gEAAgE;IAChE,6DAA6D;IAC7D,sEAAsE;IACtE,iEAAiE;IACjE,MAAMY,cAAc,MAAMpB,yBACxBM,QAAQC,MAAM,EACd;IAEF,MAAMF,WAAW,MAAMJ,mBAAmBmB,aAAaV,OAAO;QAC5DH,QAAQD,QAAQC,MAAM;IACxB;IACA,IAAI,CAACF,UAAU;QACb,MAAMc,sBAAsBb,QAAQC,MAAM,EAAED,QAAQE,OAAO,EAAE;QAC7D,OAAO;IACT;IACA,MAAMa,OAAOC,KAAKC,GAAG;IACrB,MAAMC,cAAkC;QACtC,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,gCAAgC;QAChCC,MAAM;QACNJ;QACAZ,OAAOH,QAAQE,OAAO;QACtBkB,SACE,CAAC,CAAC,EAAE,AAACf,CAAAA,cAAc,GAAE,EAAGgB,OAAO,CAAC,GAAG,CAAC,CAAC,GACpCrB,CAAAA,QAAQQ,IAAI,KAAK,eAAe,iBAAiB,UAAS,IAC1DR,CAAAA,QAAQM,cAAc,GAAG,YAAY,EAAC;IAC3C;IACA,0EAA0E;IAC1E,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,EAAEgB,YAAY,EAAE,GAAG/B,wBACvB;QACEgC,OAAO,GAAExB,gBAAAA,SAASyB,GAAG,CAAC,sBAAbzB,gBAA2B,CAAC;QACrCuB,YAAY,GAAEvB,iBAAAA,SAASyB,GAAG,CAAC,2BAAbzB,iBAAgC,EAAE;IAClD,GACA;QAAE0B,QAAQ;QAASP;IAAY;IAGjC,MAAMQ,aAAajC,cAAckC,SAAS,CAACD,UAAU;IACrD,uEAAuE;IACvE,wEAAwE;IACxE,2DAA2D;IAC3D,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,iEAAiE;IACjE,MAAME,SAAS,MAAMhC,eAAeG,SAAS8B,GAAG,EAAE;QAChDC,eAAeJ,WAAWK,SAAS,CAAC1B;OAChCL,QAAQM,cAAc,GACtB;QAAE0B,qBAAqBN,WAAWK,SAAS,CAAC;IAAG,IAC/C,CAAC;QACLE,gBAAgBlB;QAChBO;QACAY,WAAWR,WAAWS,eAAe;;IAEvC,IAAI,CAACP,QAAQ;QACX,MAAMf,sBACJb,QAAQC,MAAM,EACdD,QAAQE,OAAO,EACf;QAEF,OAAO;IACT;IACA,OAAO;AACT;AAEA;;;;;;;;;;CAUC,GACD,eAAeW,sBACbZ,MAAc,EACdC,OAAe,EACfO,MAAqD;IAErD2B,QAAQC,IAAI,CAAC,6BAA6B;QAAEpC;QAAQC;QAASO;IAAO;IACpE,MAAMiB,aAAajC,cAAckC,SAAS,CAACD,UAAU;IACrD,MAAMjC,cACH6C,GAAG,GACHX,SAAS,GACTY,UAAU,CAAC,SACXC,GAAG,CAACvC,QACJsC,UAAU,CAAC,YACXC,GAAG,CAAC,2BACJC,GAAG,CACF;QACEC,OAAOhB,WAAWK,SAAS,CAAC;QAC5BY,aAAazC;QACb0C,YAAYnC;QACZoC,UAAU7B,KAAKC,GAAG;IACpB,GACA;QAAE6B,OAAO;IAAK,GAEfC,KAAK,CAAC,IAAMC;AACjB"}

package/src/lib/server/picklist-values.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/** `POST crm/picklist-values` — any registered picklist, named by `picklistId`. */
+export declare const crmPicklistValuesHandler: PluginApiHandler;
+/** `POST crm/lead-source-values` — the same route with the picklist fixed to the lead source. */
+export declare const crmLeadSourceValuesHandler: PluginApiHandler;

package/src/lib/server/picklist-values.js

@@ -0,0 +1,308 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { consentGroupForHost, CONTACT_FACETS_FIELD, CRM_COLLECTIONS, CRM_CONTACT_FACET_KEYS_FIELD, CRM_LEAD_SOURCE_PICKLIST, crmContactFacetKeys, crmPicklistDefinition, crmPicklistKey, effectiveCrmPicklist, newResourceScopeFields, normalizeCrmPicklist, ORG_SCOPE_TOKEN } from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { FieldPath, FieldValue } from "firebase-admin/firestore";
+import { deletePicklistValue, renamePicklistValue } from "../model/picklist-values.js";
+import { orgHostIds, readCrmRouteScope } from "./org-caller.js";
+import { authorizeCrmWriter } from "./task-routes.js";
+/** What the suite gate names when a plan without the CRM asks. */ const suiteAct = (definition)=>`Editing the organization's ${definition.plural}`;
+/** The org subcollection each target object's records live in. */ const TARGET_COLLECTIONS = {
+    contact: 'contacts',
+    lead: 'leads',
+    company: CRM_COLLECTIONS.companies,
+    deal: CRM_COLLECTIONS.deals,
+    task: CRM_COLLECTIONS.tasks
+};
+/** Writes per batch — under Firestore's 500, with room to spare. */ const BATCH_SIZE = 400;
+/**
+ * Set `field` to `to` (or remove it, for `null`) on every document `query`
+ * finds holding `from`, a batch at a time, with `beside` written alongside.
+ * Answers how many were written.
+ *
+ * The query is re-run after each batch rather than paged, because each
+ * batch moves its documents OUT of the query's answer — the next run finds
+ * only what is left, and a run that finds nothing is the end.
+ */ async function replaceEverywhere(firestore, query, field, to, beside = {}) {
+    let written = 0;
+    for(;;){
+        const page = await query.limit(BATCH_SIZE).get();
+        if (page.empty) return written;
+        const batch = firestore.batch();
+        for (const snapshot of page.docs){
+            const alongside = typeof beside === 'function' ? beside(snapshot) : beside;
+            batch.update(snapshot.ref, field, to != null ? to : FieldValue.delete(), 'updatedAt', FieldValue.serverTimestamp(), ...Object.entries(alongside).flat());
+        }
+        await batch.commit();
+        written += page.size;
+        if (page.size < BATCH_SIZE) return written;
+    }
+}
+/**
+ * Rewrite an ARRAY target (AGL-3521): every record whose `keyField` lists
+ * the old label's key has each entry of `field` holding `from` at
+ * `arrayKey` moved to `to` — or the entry's label removed, for `null` —
+ * and its `keyField` restamped from the entries as moved. Answers how many
+ * records were written.
+ *
+ * Paged by document id rather than re-run, because a rename that changes
+ * only the label's case keeps its key, so a written record can stay in the
+ * query's answer.
+ */ async function replaceInArrayEverywhere(firestore, records, target, from, to) {
+    const fromKey = crmPicklistKey(from);
+    if (!fromKey) return 0;
+    const query = records.where(target.keyField, 'array-contains', fromKey).orderBy(FieldPath.documentId()).limit(BATCH_SIZE);
+    let written = 0;
+    let after = null;
+    for(;;){
+        var _page_docs_;
+        const page = await (after ? query.startAfter(after) : query).get();
+        if (page.empty) return written;
+        const batch = firestore.batch();
+        let changed = 0;
+        for (const snapshot of page.docs){
+            const entries = snapshot.get(target.field);
+            if (!Array.isArray(entries)) continue;
+            let moved = false;
+            const next = entries.map((entry)=>{
+                if (!entry || typeof entry !== 'object') return entry;
+                const row = entry;
+                if (row[target.arrayKey] !== from) return entry;
+                moved = true;
+                const rest = _extends({}, row);
+                delete rest[target.arrayKey];
+                return to === null ? rest : _extends({}, rest, {
+                    [target.arrayKey]: to
+                });
+            });
+            if (!moved) continue;
+            const keys = new Set();
+            for (const entry of next){
+                const key = entry && typeof entry === 'object' ? crmPicklistKey(entry[target.arrayKey]) : null;
+                if (key) keys.add(key);
+            }
+            batch.update(snapshot.ref, {
+                [target.field]: next,
+                [target.keyField]: [
+                    ...keys
+                ],
+                updatedAt: FieldValue.serverTimestamp()
+            });
+            changed += 1;
+        }
+        if (changed) await batch.commit();
+        written += changed;
+        if (page.size < BATCH_SIZE) return written;
+        after = (_page_docs_ = page.docs[page.docs.length - 1]) != null ? _page_docs_ : null;
+    }
+}
+/** A contact as it reads once one holder's facet field holds `to` (or nothing, for `null`). */ function withFacetValue(data, groupId, field, to) {
+    var _data_CONTACT_FACETS_FIELD, _facets_groupId;
+    const facets = _extends({}, (_data_CONTACT_FACETS_FIELD = data[CONTACT_FACETS_FIELD]) != null ? _data_CONTACT_FACETS_FIELD : {});
+    const facet = _extends({}, (_facets_groupId = facets[groupId]) != null ? _facets_groupId : {});
+    if (to === null) delete facet[field];
+    else facet[field] = to;
+    facets[groupId] = facet;
+    return _extends({}, data, {
+        [CONTACT_FACETS_FIELD]: facets
+    });
+}
+/**
+ * `POST crm/picklist-values` — rename a value of one of the CRM's standard
+ * picklists, or delete an added one and move its records to another
+ * (AGL-3298, AGL-3510). `crm/lead-source-values` is the same route with the
+ * picklist fixed to the lead source.
+ *
+ * Body: `{ hostId | orgId, picklistId, action: 'rename', valueId, label }` or
+ * `{ hostId | orgId, picklistId, action: 'delete', valueId, replaceWith: label | null }`.
+ * `picklistId` is one of `CRM_PICKLIST_DEFINITIONS`; anything else is refused.
+ *
+ * Records store the value's LABEL (see the picklist block in `crm.ts`), so
+ * both moves change records as well as the list: every record the
+ * definition's `targets` name that holds the old label is rewritten to the
+ * new one — or, for a delete with no replacement, cleared. That is
+ * Salesforce's Replace, done as part of the move, so a report grouped by
+ * the field follows a rename instead of splitting into the old name and
+ * the new. A standard value cannot be deleted, and on a definition with
+ * meanings a delete's replacement must mean the same (see
+ * `deletePicklistValue`).
+ *
+ * ## The list first, then the records
+ *
+ * The list is written in a transaction before any record: from that moment
+ * no picker offers the old label and no import or API write accepts it, so
+ * the sweep that follows cannot be outrun by a new record taking the name
+ * it is removing. A sweep interrupted part-way leaves records holding a
+ * label the list no longer has, which they show as "(not in the list)"; the
+ * same request sent again finishes it, because the rename of a value to its
+ * own current label is a no-op on the list and still sweeps.
+ *
+ * ## Who may
+ *
+ * Whoever may write the CRM — `authorizeCrmWriter`, the question every CRM
+ * route asks — which is who the rules let edit the list itself. The sweep
+ * reaches every record in the org whatever the caller's scope: it changes
+ * one label to another that the same caller could already have picked, and
+ * reveals nothing about the records but their count.
+ */ function picklistValuesHandler(fixed) {
+    return async (req, res)=>{
+        var _req_body, _body_valueId;
+        if (req.method !== 'POST') {
+            res.setHeader('Allow', 'POST');
+            res.status(405).json({
+                error: 'Method not allowed'
+            });
+            return;
+        }
+        const body = (_req_body = req.body) != null ? _req_body : {};
+        const scope = readCrmRouteScope(body);
+        if (!scope) {
+            res.status(400).json({
+                error: 'Missing hostId'
+            });
+            return;
+        }
+        const definition = crmPicklistDefinition(fixed != null ? fixed : body['picklistId']);
+        if (!definition) {
+            res.status(400).json({
+                error: 'Name one of the CRM’s picklists.'
+            });
+            return;
+        }
+        const picklistId = definition.id;
+        const action = body['action'];
+        const valueId = String((_body_valueId = body['valueId']) != null ? _body_valueId : '').trim().slice(0, 64);
+        if (action !== 'rename' && action !== 'delete' || !valueId) {
+            res.status(400).json({
+                error: 'Name a value, and whether to rename or delete it.'
+            });
+            return;
+        }
+        const replaceWith = body['replaceWith'] === null || body['replaceWith'] === undefined ? null : String(body['replaceWith']);
+        try {
+            const writer = await authorizeCrmWriter(req, scope, {
+                suiteAct: suiteAct(definition)
+            });
+            if (writer.ok === false) {
+                res.status(writer.status).json(writer.body);
+                return;
+            }
+            const firestore = firebaseAdmin.app().firestore();
+            const orgRef = firestore.collection('orgs').doc(writer.orgId);
+            const listRef = orgRef.collection(CRM_COLLECTIONS.picklists).doc(picklistId);
+            /*
+       * THE LIST. Read and written in one transaction, so two admins editing
+       * at once cannot each write a list missing the other's change.
+       */ const moved = await firestore.runTransaction(async (transaction)=>{
+                var _body_label, _ref, _ref1;
+                var _move_picklist_values_find, _move_picklist_values_find1;
+                const snapshot = await transaction.get(listRef);
+                const before = effectiveCrmPicklist(picklistId, snapshot.data());
+                const value = before.values.find((entry)=>entry.id === valueId);
+                if (!value) return {
+                    ok: false,
+                    error: 'That value is no longer in the list.'
+                };
+                const move = action === 'rename' ? renamePicklistValue(before, valueId, String((_body_label = body['label']) != null ? _body_label : '')) : deletePicklistValue(definition, before, valueId, replaceWith);
+                if (move.ok === false) return move;
+                const created = normalizeCrmPicklist(snapshot.data()) === null;
+                transaction.set(listRef, _extends({
+                    values: move.picklist.values,
+                    defaultValueId: move.picklist.defaultValueId,
+                    updatedAt: FieldValue.serverTimestamp()
+                }, created ? _extends({
+                    hostId: scope.hostId || null,
+                    createdAt: FieldValue.serverTimestamp()
+                }, newResourceScopeFields([
+                    ORG_SCOPE_TOKEN
+                ])) : {}), {
+                    merge: true
+                });
+                const to = action === 'rename' ? (_ref = (_move_picklist_values_find = move.picklist.values.find((entry)=>entry.id === valueId)) == null ? void 0 : _move_picklist_values_find.label) != null ? _ref : null : replaceWith === null ? null : (_ref1 = (_move_picklist_values_find1 = move.picklist.values.find((entry)=>entry.label.toLowerCase() === replaceWith.trim().toLowerCase())) == null ? void 0 : _move_picklist_values_find1.label) != null ? _ref1 : null;
+                return {
+                    ok: true,
+                    from: value.label,
+                    to
+                };
+            });
+            if (moved.ok === false) {
+                res.status(400).json({
+                    error: moved.error
+                });
+                return;
+            }
+            /*
+       * THE RECORDS, target by target: a record's own field, with its query
+       * key moved beside it; for an array target, each entry of a record's
+       * list (a deal's contact roles); or, for a facet target, each holder's
+       * facet on a contact — one query per consent group the org's sites
+       * belong to.
+       * A rename to the same label moves nothing, and says so.
+       */ const updated = {};
+            let groupIds = null;
+            for (const target of definition.targets){
+                var _updated, _target_object, _, _updated_target_object;
+                (_ = (_updated = updated)[_target_object = target.object]) != null ? _ : _updated[_target_object] = 0;
+                if (moved.from === moved.to) continue;
+                const records = orgRef.collection(TARGET_COLLECTIONS[target.object]);
+                if (target.arrayKey && target.keyField) {
+                    var _updated_target_object1;
+                    updated[target.object] = ((_updated_target_object1 = updated[target.object]) != null ? _updated_target_object1 : 0) + await replaceInArrayEverywhere(firestore, records, _extends({}, target, {
+                        arrayKey: target.arrayKey,
+                        keyField: target.keyField
+                    }), moved.from, moved.to);
+                    continue;
+                }
+                if (target.facet) {
+                    if (!groupIds) {
+                        const hostIds = await orgHostIds(firestore, writer.orgId);
+                        groupIds = [
+                            ...new Set(hostIds.map((hostId)=>consentGroupForHost(writer.org, hostId).groupId))
+                        ].filter(Boolean);
+                    }
+                    for (const groupId of groupIds){
+                        var _updated_target_object2;
+                        const path = new FieldPath(CONTACT_FACETS_FIELD, groupId, target.field);
+                        updated[target.object] = ((_updated_target_object2 = updated[target.object]) != null ? _updated_target_object2 : 0) + await replaceEverywhere(firestore, records.where(path, '==', moved.from), path, moved.to, // A facet value a contact list filters by is keyed in
+                        // `facetKeys` (AGL-3511), restamped from the record as moved.
+                        (snapshot)=>({
+                                [CRM_CONTACT_FACET_KEYS_FIELD]: crmContactFacetKeys(withFacetValue(snapshot.data(), groupId, target.field, moved.to))
+                            }));
+                    }
+                    continue;
+                }
+                updated[target.object] = ((_updated_target_object = updated[target.object]) != null ? _updated_target_object : 0) + await replaceEverywhere(firestore, records.where(target.field, '==', moved.from), target.field, moved.to, target.keyField ? {
+                    [target.keyField]: crmPicklistKey(moved.to)
+                } : {});
+            }
+            const answer = {
+                ok: true,
+                updated
+            };
+            res.status(200).json(answer);
+        } catch (error) {
+            console.error('[crm] picklist-values failed', error);
+            res.status(500).json({
+                error: `The ${definition.plural} could not be saved.`
+            });
+        }
+    };
+}
+/** `POST crm/picklist-values` — any registered picklist, named by `picklistId`. */ export const crmPicklistValuesHandler = picklistValuesHandler();
+/** `POST crm/lead-source-values` — the same route with the picklist fixed to the lead source. */ export const crmLeadSourceValuesHandler = picklistValuesHandler(CRM_LEAD_SOURCE_PICKLIST);
+
+//# sourceMappingURL=picklist-values.js.map

package/src/lib/server/picklist-values.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/picklist-values.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  consentGroupForHost,\n  CONTACT_FACETS_FIELD,\n  CRM_COLLECTIONS,\n  CRM_CONTACT_FACET_KEYS_FIELD,\n  CRM_LEAD_SOURCE_PICKLIST,\n  type CrmPicklist,\n  type CrmPicklistDefinition,\n  type CrmPicklistId,\n  type CrmPicklistObject,\n  type CrmPicklistTarget,\n  crmContactFacetKeys,\n  crmPicklistDefinition,\n  crmPicklistKey,\n  effectiveCrmPicklist,\n  newResourceScopeFields,\n  normalizeCrmPicklist,\n  ORG_SCOPE_TOKEN,\n  type PluginApiHandler,\n} from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldPath, FieldValue } from 'firebase-admin/firestore'\nimport {\n  deletePicklistValue,\n  type PicklistMove,\n  type PicklistValuesResponse,\n  renamePicklistValue,\n} from '../model/picklist-values'\nimport { orgHostIds, readCrmRouteScope } from './org-caller'\nimport { authorizeCrmWriter } from './task-routes'\n\n/** What the suite gate names when a plan without the CRM asks. */\nconst suiteAct = (definition: CrmPicklistDefinition) =>\n  `Editing the organization's ${definition.plural}`\n\n/** The org subcollection each target object's records live in. */\nconst TARGET_COLLECTIONS: Record<CrmPicklistObject, string> = {\n  contact: 'contacts',\n  lead: 'leads',\n  company: CRM_COLLECTIONS.companies,\n  deal: CRM_COLLECTIONS.deals,\n  task: CRM_COLLECTIONS.tasks,\n}\n\n/** Writes per batch — under Firestore's 500, with room to spare. */\nconst BATCH_SIZE = 400\n\n/**\n * Set `field` to `to` (or remove it, for `null`) on every document `query`\n * finds holding `from`, a batch at a time, with `beside` written alongside.\n * Answers how many were written.\n *\n * The query is re-run after each batch rather than paged, because each\n * batch moves its documents OUT of the query's answer — the next run finds\n * only what is left, and a run that finds nothing is the end.\n */\nasync function replaceEverywhere(\n  firestore: FirebaseFirestore.Firestore,\n  query: FirebaseFirestore.Query,\n  field: string | FirebaseFirestore.FieldPath,\n  to: string | null,\n  beside:\n    | Record<string, unknown>\n    | ((snapshot: FirebaseFirestore.QueryDocumentSnapshot) => Record<string, unknown>) = {},\n): Promise<number> {\n  let written = 0\n  for (;;) {\n    const page = await query.limit(BATCH_SIZE).get()\n    if (page.empty) return written\n    const batch = firestore.batch()\n    for (const snapshot of page.docs) {\n      const alongside = typeof beside === 'function' ? beside(snapshot) : beside\n      batch.update(\n        snapshot.ref,\n        field,\n        to ?? FieldValue.delete(),\n        'updatedAt',\n        FieldValue.serverTimestamp(),\n        ...Object.entries(alongside).flat(),\n      )\n    }\n    await batch.commit()\n    written += page.size\n    if (page.size < BATCH_SIZE) return written\n  }\n}\n\n/**\n * Rewrite an ARRAY target (AGL-3521): every record whose `keyField` lists\n * the old label's key has each entry of `field` holding `from` at\n * `arrayKey` moved to `to` — or the entry's label removed, for `null` —\n * and its `keyField` restamped from the entries as moved. Answers how many\n * records were written.\n *\n * Paged by document id rather than re-run, because a rename that changes\n * only the label's case keeps its key, so a written record can stay in the\n * query's answer.\n */\nasync function replaceInArrayEverywhere(\n  firestore: FirebaseFirestore.Firestore,\n  records: FirebaseFirestore.CollectionReference,\n  target: CrmPicklistTarget & { arrayKey: string; keyField: string },\n  from: string,\n  to: string | null,\n): Promise<number> {\n  const fromKey = crmPicklistKey(from)\n  if (!fromKey) return 0\n  const query = records\n    .where(target.keyField, 'array-contains', fromKey)\n    .orderBy(FieldPath.documentId())\n    .limit(BATCH_SIZE)\n  let written = 0\n  let after: FirebaseFirestore.QueryDocumentSnapshot | null = null\n  for (;;) {\n    const page: FirebaseFirestore.QuerySnapshot = await (after ? query.startAfter(after) : query).get()\n    if (page.empty) return written\n    const batch = firestore.batch()\n    let changed = 0\n    for (const snapshot of page.docs) {\n      const entries = snapshot.get(target.field)\n      if (!Array.isArray(entries)) continue\n      let moved = false\n      const next = entries.map((entry: unknown) => {\n        if (!entry || typeof entry !== 'object') return entry\n        const row = entry as Record<string, unknown>\n        if (row[target.arrayKey] !== from) return entry\n        moved = true\n        const rest = { ...row }\n        delete rest[target.arrayKey]\n        return to === null ? rest : { ...rest, [target.arrayKey]: to }\n      })\n      if (!moved) continue\n      const keys = new Set<string>()\n      for (const entry of next) {\n        const key =\n          entry && typeof entry === 'object'\n            ? crmPicklistKey((entry as Record<string, unknown>)[target.arrayKey])\n            : null\n        if (key) keys.add(key)\n      }\n      batch.update(snapshot.ref, {\n        [target.field]: next,\n        [target.keyField]: [...keys],\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      changed += 1\n    }\n    if (changed) await batch.commit()\n    written += changed\n    if (page.size < BATCH_SIZE) return written\n    after = page.docs[page.docs.length - 1] ?? null\n  }\n}\n\n/** A contact as it reads once one holder's facet field holds `to` (or nothing, for `null`). */\nfunction withFacetValue(\n  data: Record<string, unknown>,\n  groupId: string,\n  field: string,\n  to: string | null,\n): Record<string, unknown> {\n  const facets = { ...((data[CONTACT_FACETS_FIELD] as Record<string, unknown> | undefined) ?? {}) }\n  const facet = { ...((facets[groupId] as Record<string, unknown> | undefined) ?? {}) }\n  if (to === null) delete facet[field]\n  else facet[field] = to\n  facets[groupId] = facet\n  return { ...data, [CONTACT_FACETS_FIELD]: facets }\n}\n\n/**\n * `POST crm/picklist-values` — rename a value of one of the CRM's standard\n * picklists, or delete an added one and move its records to another\n * (AGL-3298, AGL-3510). `crm/lead-source-values` is the same route with the\n * picklist fixed to the lead source.\n *\n * Body: `{ hostId | orgId, picklistId, action: 'rename', valueId, label }` or\n * `{ hostId | orgId, picklistId, action: 'delete', valueId, replaceWith: label | null }`.\n * `picklistId` is one of `CRM_PICKLIST_DEFINITIONS`; anything else is refused.\n *\n * Records store the value's LABEL (see the picklist block in `crm.ts`), so\n * both moves change records as well as the list: every record the\n * definition's `targets` name that holds the old label is rewritten to the\n * new one — or, for a delete with no replacement, cleared. That is\n * Salesforce's Replace, done as part of the move, so a report grouped by\n * the field follows a rename instead of splitting into the old name and\n * the new. A standard value cannot be deleted, and on a definition with\n * meanings a delete's replacement must mean the same (see\n * `deletePicklistValue`).\n *\n * ## The list first, then the records\n *\n * The list is written in a transaction before any record: from that moment\n * no picker offers the old label and no import or API write accepts it, so\n * the sweep that follows cannot be outrun by a new record taking the name\n * it is removing. A sweep interrupted part-way leaves records holding a\n * label the list no longer has, which they show as \"(not in the list)\"; the\n * same request sent again finishes it, because the rename of a value to its\n * own current label is a no-op on the list and still sweeps.\n *\n * ## Who may\n *\n * Whoever may write the CRM — `authorizeCrmWriter`, the question every CRM\n * route asks — which is who the rules let edit the list itself. The sweep\n * reaches every record in the org whatever the caller's scope: it changes\n * one label to another that the same caller could already have picked, and\n * reveals nothing about the records but their count.\n */\nfunction picklistValuesHandler(fixed?: CrmPicklistId): PluginApiHandler {\n  return async (req, res) => {\n    if (req.method !== 'POST') {\n      res.setHeader('Allow', 'POST')\n      res.status(405).json({ error: 'Method not allowed' })\n      return\n    }\n    const body = (req.body ?? {}) as Record<string, unknown>\n    const scope = readCrmRouteScope(body)\n    if (!scope) {\n      res.status(400).json({ error: 'Missing hostId' })\n      return\n    }\n    const definition = crmPicklistDefinition(fixed ?? body['picklistId'])\n    if (!definition) {\n      res.status(400).json({ error: 'Name one of the CRM’s picklists.' })\n      return\n    }\n    const picklistId = definition.id as CrmPicklistId\n    const action = body['action']\n    const valueId = String(body['valueId'] ?? '').trim().slice(0, 64)\n    if ((action !== 'rename' && action !== 'delete') || !valueId) {\n      res.status(400).json({ error: 'Name a value, and whether to rename or delete it.' })\n      return\n    }\n    const replaceWith =\n      body['replaceWith'] === null || body['replaceWith'] === undefined\n        ? null\n        : String(body['replaceWith'])\n\n    try {\n      const writer = await authorizeCrmWriter(req, scope, { suiteAct: suiteAct(definition) })\n      if (writer.ok === false) {\n        res.status(writer.status).json(writer.body)\n        return\n      }\n      const firestore = firebaseAdmin.app().firestore()\n      const orgRef = firestore.collection('orgs').doc(writer.orgId)\n      const listRef = orgRef.collection(CRM_COLLECTIONS.picklists).doc(picklistId)\n\n      /*\n       * THE LIST. Read and written in one transaction, so two admins editing\n       * at once cannot each write a list missing the other's change.\n       */\n      const moved = await firestore.runTransaction(async (transaction) => {\n        const snapshot = await transaction.get(listRef)\n        const before: CrmPicklist = effectiveCrmPicklist(picklistId, snapshot.data())\n        const value = before.values.find((entry) => entry.id === valueId)\n        if (!value) return { ok: false as const, error: 'That value is no longer in the list.' }\n        const move: PicklistMove =\n          action === 'rename'\n            ? renamePicklistValue(before, valueId, String(body['label'] ?? ''))\n            : deletePicklistValue(definition, before, valueId, replaceWith)\n        if (move.ok === false) return move\n        const created = normalizeCrmPicklist(snapshot.data()) === null\n        transaction.set(\n          listRef,\n          {\n            values: move.picklist.values,\n            defaultValueId: move.picklist.defaultValueId,\n            updatedAt: FieldValue.serverTimestamp(),\n            // The stamp every org-wide CRM document carries (see the Fields\n            // page), written when this move is what creates the document.\n            ...(created\n              ? {\n                  hostId: scope.hostId || null,\n                  createdAt: FieldValue.serverTimestamp(),\n                  ...newResourceScopeFields([ORG_SCOPE_TOKEN]),\n                }\n              : {}),\n          },\n          { merge: true },\n        )\n        const to =\n          action === 'rename'\n            ? (move.picklist.values.find((entry) => entry.id === valueId)?.label ?? null)\n            : replaceWith === null\n              ? null\n              : (move.picklist.values.find(\n                  (entry) => entry.label.toLowerCase() === replaceWith.trim().toLowerCase(),\n                )?.label ?? null)\n        return { ok: true as const, from: value.label, to }\n      })\n      if (moved.ok === false) {\n        res.status(400).json({ error: moved.error })\n        return\n      }\n\n      /*\n       * THE RECORDS, target by target: a record's own field, with its query\n       * key moved beside it; for an array target, each entry of a record's\n       * list (a deal's contact roles); or, for a facet target, each holder's\n       * facet on a contact — one query per consent group the org's sites\n       * belong to.\n       * A rename to the same label moves nothing, and says so.\n       */\n      const updated: PicklistValuesResponse['updated'] = {}\n      let groupIds: string[] | null = null\n      for (const target of definition.targets) {\n        updated[target.object] ??= 0\n        if (moved.from === moved.to) continue\n        const records = orgRef.collection(TARGET_COLLECTIONS[target.object])\n        if (target.arrayKey && target.keyField) {\n          updated[target.object] =\n            (updated[target.object] ?? 0) +\n            (await replaceInArrayEverywhere(\n              firestore,\n              records,\n              { ...target, arrayKey: target.arrayKey, keyField: target.keyField },\n              moved.from,\n              moved.to,\n            ))\n          continue\n        }\n        if (target.facet) {\n          if (!groupIds) {\n            const hostIds = await orgHostIds(firestore, writer.orgId)\n            groupIds = [\n              ...new Set(hostIds.map((hostId) => consentGroupForHost(writer.org, hostId).groupId)),\n            ].filter(Boolean)\n          }\n          for (const groupId of groupIds) {\n            const path = new FieldPath(CONTACT_FACETS_FIELD, groupId, target.field)\n            updated[target.object] =\n              (updated[target.object] ?? 0) +\n              (await replaceEverywhere(\n                firestore,\n                records.where(path, '==', moved.from),\n                path,\n                moved.to,\n                // A facet value a contact list filters by is keyed in\n                // `facetKeys` (AGL-3511), restamped from the record as moved.\n                (snapshot) => ({\n                  [CRM_CONTACT_FACET_KEYS_FIELD]: crmContactFacetKeys(\n                    withFacetValue(snapshot.data(), groupId, target.field, moved.to),\n                  ),\n                }),\n              ))\n          }\n          continue\n        }\n        updated[target.object] =\n          (updated[target.object] ?? 0) +\n          (await replaceEverywhere(\n            firestore,\n            records.where(target.field, '==', moved.from),\n            target.field,\n            moved.to,\n            target.keyField ? { [target.keyField]: crmPicklistKey(moved.to) } : {},\n          ))\n      }\n      const answer: PicklistValuesResponse = { ok: true, updated }\n      res.status(200).json(answer)\n    } catch (error) {\n      console.error('[crm] picklist-values failed', error)\n      res.status(500).json({ error: `The ${definition.plural} could not be saved.` })\n    }\n  }\n}\n\n/** `POST crm/picklist-values` — any registered picklist, named by `picklistId`. */\nexport const crmPicklistValuesHandler: PluginApiHandler = picklistValuesHandler()\n\n/** `POST crm/lead-source-values` — the same route with the picklist fixed to the lead source. */\nexport const crmLeadSourceValuesHandler: PluginApiHandler =\n  picklistValuesHandler(CRM_LEAD_SOURCE_PICKLIST)\n"],"names":["consentGroupForHost","CONTACT_FACETS_FIELD","CRM_COLLECTIONS","CRM_CONTACT_FACET_KEYS_FIELD","CRM_LEAD_SOURCE_PICKLIST","crmContactFacetKeys","crmPicklistDefinition","crmPicklistKey","effectiveCrmPicklist","newResourceScopeFields","normalizeCrmPicklist","ORG_SCOPE_TOKEN","firebaseAdmin","FieldPath","FieldValue","deletePicklistValue","renamePicklistValue","orgHostIds","readCrmRouteScope","authorizeCrmWriter","suiteAct","definition","plural","TARGET_COLLECTIONS","contact","lead","company","companies","deal","deals","task","tasks","BATCH_SIZE","replaceEverywhere","firestore","query","field","to","beside","written","page","limit","get","empty","batch","snapshot","docs","alongside","update","ref","delete","serverTimestamp","Object","entries","flat","commit","size","replaceInArrayEverywhere","records","target","from","fromKey","where","keyField","orderBy","documentId","after","startAfter","changed","Array","isArray","moved","next","map","entry","row","arrayKey","rest","keys","Set","key","add","updatedAt","length","withFacetValue","data","groupId","facets","facet","picklistValuesHandler","fixed","req","res","body","method","setHeader","status","json","error","scope","picklistId","id","action","valueId","String","trim","slice","replaceWith","undefined","writer","ok","app","orgRef","collection","doc","orgId","listRef","picklists","runTransaction","transaction","move","before","value","values","find","created","set","picklist","defaultValueId","hostId","createdAt","merge","label","toLowerCase","updated","groupIds","targets","object","hostIds","org","filter","Boolean","path","answer","console","crmPicklistValuesHandler","crmLeadSourceValuesHandler"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,mBAAmB,EACnBC,oBAAoB,EACpBC,eAAe,EACfC,4BAA4B,EAC5BC,wBAAwB,EAMxBC,mBAAmB,EACnBC,qBAAqB,EACrBC,cAAc,EACdC,oBAAoB,EACpBC,sBAAsB,EACtBC,oBAAoB,EACpBC,eAAe,QAEV,sBAAqB;AAC5B,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,EAAEC,UAAU,QAAQ,2BAA0B;AAChE,SACEC,mBAAmB,EAGnBC,mBAAmB,QACd,8BAA0B;AACjC,SAASC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAC5D,SAASC,kBAAkB,QAAQ,mBAAe;AAElD,gEAAgE,GAChE,MAAMC,WAAW,CAACC,aAChB,CAAC,2BAA2B,EAAEA,WAAWC,MAAM,EAAE;AAEnD,gEAAgE,GAChE,MAAMC,qBAAwD;IAC5DC,SAAS;IACTC,MAAM;IACNC,SAASxB,gBAAgByB,SAAS;IAClCC,MAAM1B,gBAAgB2B,KAAK;IAC3BC,MAAM5B,gBAAgB6B,KAAK;AAC7B;AAEA,kEAAkE,GAClE,MAAMC,aAAa;AAEnB;;;;;;;;CAQC,GACD,eAAeC,kBACbC,SAAsC,EACtCC,KAA8B,EAC9BC,KAA2C,EAC3CC,EAAiB,EACjBC,SAEuF,CAAC,CAAC;IAEzF,IAAIC,UAAU;IACd,OAAS;QACP,MAAMC,OAAO,MAAML,MAAMM,KAAK,CAACT,YAAYU,GAAG;QAC9C,IAAIF,KAAKG,KAAK,EAAE,OAAOJ;QACvB,MAAMK,QAAQV,UAAUU,KAAK;QAC7B,KAAK,MAAMC,YAAYL,KAAKM,IAAI,CAAE;YAChC,MAAMC,YAAY,OAAOT,WAAW,aAAaA,OAAOO,YAAYP;YACpEM,MAAMI,MAAM,CACVH,SAASI,GAAG,EACZb,OACAC,aAAAA,KAAMvB,WAAWoC,MAAM,IACvB,aACApC,WAAWqC,eAAe,OACvBC,OAAOC,OAAO,CAACN,WAAWO,IAAI;QAErC;QACA,MAAMV,MAAMW,MAAM;QAClBhB,WAAWC,KAAKgB,IAAI;QACpB,IAAIhB,KAAKgB,IAAI,GAAGxB,YAAY,OAAOO;IACrC;AACF;AAEA;;;;;;;;;;CAUC,GACD,eAAekB,yBACbvB,SAAsC,EACtCwB,OAA8C,EAC9CC,MAAkE,EAClEC,IAAY,EACZvB,EAAiB;IAEjB,MAAMwB,UAAUtD,eAAeqD;IAC/B,IAAI,CAACC,SAAS,OAAO;IACrB,MAAM1B,QAAQuB,QACXI,KAAK,CAACH,OAAOI,QAAQ,EAAE,kBAAkBF,SACzCG,OAAO,CAACnD,UAAUoD,UAAU,IAC5BxB,KAAK,CAACT;IACT,IAAIO,UAAU;IACd,IAAI2B,QAAwD;IAC5D,OAAS;YAqCC1B;QApCR,MAAMA,OAAwC,MAAM,AAAC0B,CAAAA,QAAQ/B,MAAMgC,UAAU,CAACD,SAAS/B,KAAI,EAAGO,GAAG;QACjG,IAAIF,KAAKG,KAAK,EAAE,OAAOJ;QACvB,MAAMK,QAAQV,UAAUU,KAAK;QAC7B,IAAIwB,UAAU;QACd,KAAK,MAAMvB,YAAYL,KAAKM,IAAI,CAAE;YAChC,MAAMO,UAAUR,SAASH,GAAG,CAACiB,OAAOvB,KAAK;YACzC,IAAI,CAACiC,MAAMC,OAAO,CAACjB,UAAU;YAC7B,IAAIkB,QAAQ;YACZ,MAAMC,OAAOnB,QAAQoB,GAAG,CAAC,CAACC;gBACxB,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAOA;gBAChD,MAAMC,MAAMD;gBACZ,IAAIC,GAAG,CAAChB,OAAOiB,QAAQ,CAAC,KAAKhB,MAAM,OAAOc;gBAC1CH,QAAQ;gBACR,MAAMM,OAAO,aAAKF;gBAClB,OAAOE,IAAI,CAAClB,OAAOiB,QAAQ,CAAC;gBAC5B,OAAOvC,OAAO,OAAOwC,OAAO,aAAKA;oBAAM,CAAClB,OAAOiB,QAAQ,CAAC,EAAEvC;;YAC5D;YACA,IAAI,CAACkC,OAAO;YACZ,MAAMO,OAAO,IAAIC;YACjB,KAAK,MAAML,SAASF,KAAM;gBACxB,MAAMQ,MACJN,SAAS,OAAOA,UAAU,WACtBnE,eAAe,AAACmE,KAAiC,CAACf,OAAOiB,QAAQ,CAAC,IAClE;gBACN,IAAII,KAAKF,KAAKG,GAAG,CAACD;YACpB;YACApC,MAAMI,MAAM,CAACH,SAASI,GAAG,EAAE;gBACzB,CAACU,OAAOvB,KAAK,CAAC,EAAEoC;gBAChB,CAACb,OAAOI,QAAQ,CAAC,EAAE;uBAAIe;iBAAK;gBAC5BI,WAAWpE,WAAWqC,eAAe;YACvC;YACAiB,WAAW;QACb;QACA,IAAIA,SAAS,MAAMxB,MAAMW,MAAM;QAC/BhB,WAAW6B;QACX,IAAI5B,KAAKgB,IAAI,GAAGxB,YAAY,OAAOO;QACnC2B,SAAQ1B,cAAAA,KAAKM,IAAI,CAACN,KAAKM,IAAI,CAACqC,MAAM,GAAG,EAAE,YAA/B3C,cAAmC;IAC7C;AACF;AAEA,6FAA6F,GAC7F,SAAS4C,eACPC,IAA6B,EAC7BC,OAAe,EACflD,KAAa,EACbC,EAAiB;QAEKgD,4BACDE;IADrB,MAAMA,SAAS,cAAOF,6BAAAA,IAAI,CAACpF,qBAAqB,YAA1BoF,6BAAsE,CAAC;IAC7F,MAAMG,QAAQ,cAAOD,kBAAAA,MAAM,CAACD,QAAQ,YAAfC,kBAA2D,CAAC;IACjF,IAAIlD,OAAO,MAAM,OAAOmD,KAAK,CAACpD,MAAM;SAC/BoD,KAAK,CAACpD,MAAM,GAAGC;IACpBkD,MAAM,CAACD,QAAQ,GAAGE;IAClB,OAAO,aAAKH;QAAM,CAACpF,qBAAqB,EAAEsF;;AAC5C;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCC,GACD,SAASE,sBAAsBC,KAAqB;IAClD,OAAO,OAAOC,KAAKC;YAMHD,WAaSE;QAlBvB,IAAIF,IAAIG,MAAM,KAAK,QAAQ;YACzBF,IAAIG,SAAS,CAAC,SAAS;YACvBH,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAqB;YACnD;QACF;QACA,MAAML,QAAQF,YAAAA,IAAIE,IAAI,YAARF,YAAY,CAAC;QAC3B,MAAMQ,QAAQjF,kBAAkB2E;QAChC,IAAI,CAACM,OAAO;YACVP,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;YAC/C;QACF;QACA,MAAM7E,aAAaf,sBAAsBoF,gBAAAA,QAASG,IAAI,CAAC,aAAa;QACpE,IAAI,CAACxE,YAAY;YACfuE,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAmC;YACjE;QACF;QACA,MAAME,aAAa/E,WAAWgF,EAAE;QAChC,MAAMC,SAAST,IAAI,CAAC,SAAS;QAC7B,MAAMU,UAAUC,QAAOX,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB,IAAIY,IAAI,GAAGC,KAAK,CAAC,GAAG;QAC9D,IAAI,AAACJ,WAAW,YAAYA,WAAW,YAAa,CAACC,SAAS;YAC5DX,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAoD;YAClF;QACF;QACA,MAAMS,cACJd,IAAI,CAAC,cAAc,KAAK,QAAQA,IAAI,CAAC,cAAc,KAAKe,YACpD,OACAJ,OAAOX,IAAI,CAAC,cAAc;QAEhC,IAAI;YACF,MAAMgB,SAAS,MAAM1F,mBAAmBwE,KAAKQ,OAAO;gBAAE/E,UAAUA,SAASC;YAAY;YACrF,IAAIwF,OAAOC,EAAE,KAAK,OAAO;gBACvBlB,IAAII,MAAM,CAACa,OAAOb,MAAM,EAAEC,IAAI,CAACY,OAAOhB,IAAI;gBAC1C;YACF;YACA,MAAM3D,YAAYtB,cAAcmG,GAAG,GAAG7E,SAAS;YAC/C,MAAM8E,SAAS9E,UAAU+E,UAAU,CAAC,QAAQC,GAAG,CAACL,OAAOM,KAAK;YAC5D,MAAMC,UAAUJ,OAAOC,UAAU,CAAC/G,gBAAgBmH,SAAS,EAAEH,GAAG,CAACd;YAEjE;;;OAGC,GACD,MAAM7B,QAAQ,MAAMrC,UAAUoF,cAAc,CAAC,OAAOC;oBAOA1B;oBAwB3C2B,4BAGEA;gBAjCT,MAAM3E,WAAW,MAAM0E,YAAY7E,GAAG,CAAC0E;gBACvC,MAAMK,SAAsBjH,qBAAqB4F,YAAYvD,SAASwC,IAAI;gBAC1E,MAAMqC,QAAQD,OAAOE,MAAM,CAACC,IAAI,CAAC,CAAClD,QAAUA,MAAM2B,EAAE,KAAKE;gBACzD,IAAI,CAACmB,OAAO,OAAO;oBAAEZ,IAAI;oBAAgBZ,OAAO;gBAAuC;gBACvF,MAAMsB,OACJlB,WAAW,WACPtF,oBAAoByG,QAAQlB,SAASC,QAAOX,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,OAC7D9E,oBAAoBM,YAAYoG,QAAQlB,SAASI;gBACvD,IAAIa,KAAKV,EAAE,KAAK,OAAO,OAAOU;gBAC9B,MAAMK,UAAUnH,qBAAqBmC,SAASwC,IAAI,QAAQ;gBAC1DkC,YAAYO,GAAG,CACbV,SACA;oBACEO,QAAQH,KAAKO,QAAQ,CAACJ,MAAM;oBAC5BK,gBAAgBR,KAAKO,QAAQ,CAACC,cAAc;oBAC5C9C,WAAWpE,WAAWqC,eAAe;mBAGjC0E,UACA;oBACEI,QAAQ9B,MAAM8B,MAAM,IAAI;oBACxBC,WAAWpH,WAAWqC,eAAe;mBAClC1C,uBAAuB;oBAACE;iBAAgB,KAE7C,CAAC,IAEP;oBAAEwH,OAAO;gBAAK;gBAEhB,MAAM9F,KACJiE,WAAW,oBACNkB,6BAAAA,KAAKO,QAAQ,CAACJ,MAAM,CAACC,IAAI,CAAC,CAAClD,QAAUA,MAAM2B,EAAE,KAAKE,6BAAlDiB,2BAA4DY,KAAK,mBAAI,OACtEzB,gBAAgB,OACd,iBACCa,8BAAAA,KAAKO,QAAQ,CAACJ,MAAM,CAACC,IAAI,CACxB,CAAClD,QAAUA,MAAM0D,KAAK,CAACC,WAAW,OAAO1B,YAAYF,IAAI,GAAG4B,WAAW,wBADxEb,4BAEEY,KAAK,oBAAI;gBACpB,OAAO;oBAAEtB,IAAI;oBAAelD,MAAM8D,MAAMU,KAAK;oBAAE/F;gBAAG;YACpD;YACA,IAAIkC,MAAMuC,EAAE,KAAK,OAAO;gBACtBlB,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO3B,MAAM2B,KAAK;gBAAC;gBAC1C;YACF;YAEA;;;;;;;OAOC,GACD,MAAMoC,UAA6C,CAAC;YACpD,IAAIC,WAA4B;YAChC,KAAK,MAAM5E,UAAUtC,WAAWmH,OAAO,CAAE;oBACvCF,UAAQ3E,gBAAR2E,GA2CGA;iBA3CHA,IAAAA,CAAAA,WAAAA,QAAO,CAAC3E,iBAAAA,OAAO8E,MAAM,CAAC,YAAtBH,IAAAA,QAAO,CAAC3E,eAAc,GAAK;gBAC3B,IAAIY,MAAMX,IAAI,KAAKW,MAAMlC,EAAE,EAAE;gBAC7B,MAAMqB,UAAUsD,OAAOC,UAAU,CAAC1F,kBAAkB,CAACoC,OAAO8E,MAAM,CAAC;gBACnE,IAAI9E,OAAOiB,QAAQ,IAAIjB,OAAOI,QAAQ,EAAE;wBAEnCuE;oBADHA,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,GACpB,EAACH,0BAAAA,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,YAAtBH,0BAA0B,KAC1B,MAAM7E,yBACLvB,WACAwB,SACA,aAAKC;wBAAQiB,UAAUjB,OAAOiB,QAAQ;wBAAEb,UAAUJ,OAAOI,QAAQ;wBACjEQ,MAAMX,IAAI,EACVW,MAAMlC,EAAE;oBAEZ;gBACF;gBACA,IAAIsB,OAAO6B,KAAK,EAAE;oBAChB,IAAI,CAAC+C,UAAU;wBACb,MAAMG,UAAU,MAAMzH,WAAWiB,WAAW2E,OAAOM,KAAK;wBACxDoB,WAAW;+BACN,IAAIxD,IAAI2D,QAAQjE,GAAG,CAAC,CAACwD,SAAWjI,oBAAoB6G,OAAO8B,GAAG,EAAEV,QAAQ3C,OAAO;yBACnF,CAACsD,MAAM,CAACC;oBACX;oBACA,KAAK,MAAMvD,WAAWiD,SAAU;4BAG3BD;wBAFH,MAAMQ,OAAO,IAAIjI,UAAUZ,sBAAsBqF,SAAS3B,OAAOvB,KAAK;wBACtEkG,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,GACpB,EAACH,0BAAAA,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,YAAtBH,0BAA0B,KAC1B,MAAMrG,kBACLC,WACAwB,QAAQI,KAAK,CAACgF,MAAM,MAAMvE,MAAMX,IAAI,GACpCkF,MACAvE,MAAMlC,EAAE,EACR,sDAAsD;wBACtD,8DAA8D;wBAC9D,CAACQ,WAAc,CAAA;gCACb,CAAC1C,6BAA6B,EAAEE,oBAC9B+E,eAAevC,SAASwC,IAAI,IAAIC,SAAS3B,OAAOvB,KAAK,EAAEmC,MAAMlC,EAAE;4BAEnE,CAAA;oBAEN;oBACA;gBACF;gBACAiG,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,GACpB,EAACH,yBAAAA,OAAO,CAAC3E,OAAO8E,MAAM,CAAC,YAAtBH,yBAA0B,KAC1B,MAAMrG,kBACLC,WACAwB,QAAQI,KAAK,CAACH,OAAOvB,KAAK,EAAE,MAAMmC,MAAMX,IAAI,GAC5CD,OAAOvB,KAAK,EACZmC,MAAMlC,EAAE,EACRsB,OAAOI,QAAQ,GAAG;oBAAE,CAACJ,OAAOI,QAAQ,CAAC,EAAExD,eAAegE,MAAMlC,EAAE;gBAAE,IAAI,CAAC;YAE3E;YACA,MAAM0G,SAAiC;gBAAEjC,IAAI;gBAAMwB;YAAQ;YAC3D1C,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC8C;QACvB,EAAE,OAAO7C,OAAO;YACd8C,QAAQ9C,KAAK,CAAC,gCAAgCA;YAC9CN,IAAII,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO,CAAC,IAAI,EAAE7E,WAAWC,MAAM,CAAC,oBAAoB,CAAC;YAAC;QAC/E;IACF;AACF;AAEA,iFAAiF,GACjF,OAAO,MAAM2H,2BAA6CxD,wBAAuB;AAEjF,+FAA+F,GAC/F,OAAO,MAAMyD,6BACXzD,sBAAsBrF,0BAAyB"}