@aglyn/plugins-crm 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/server/read-picklist.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type CrmPicklist, type CrmPicklistId, type CrmTaskPicklists } from '@aglyn/aglyn/server';
+/** An org's list for one picklist as every server door judges against it (AGL-3510). */
+export declare function readCrmPicklist(firestore: FirebaseFirestore.Firestore, orgId: string, id: CrmPicklistId): Promise<CrmPicklist>;
+/** An org's Status, Priority and Type lists for tasks (AGL-3517), the three read together. */
+export declare function readCrmTaskPicklists(firestore: FirebaseFirestore.Firestore, orgId: string): Promise<CrmTaskPicklists>;
+/**
+ * What a record write stores under picklist `id`, from what the request
+ * said about the field:
+ *
+ *  - `undefined` (not named): nothing — except on a CREATE, which starts
+ *    from the list's default when it has one, as Salesforce's does.
+ *  - `null` (cleared): the clear.
+ *  - a label: {@link judgeCrmPicklistValue} — an active value's label, the
+ *    record's own current value kept, and on a restricted picklist anything
+ *    else refused naming the values the list allows.
+ *
+ * `write` undefined means leave the field alone.
+ */
+export declare function resolveCrmPicklistWrite(id: CrmPicklistId, picklist: CrmPicklist, requested: string | null | undefined, options: {
+    current?: unknown;
+    created: boolean;
+}): {
+    ok: true;
+    write: string | null | undefined;
+} | {
+    ok: false;
+    error: string;
+};

package/src/lib/server/read-picklist.js

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { CRM_COLLECTIONS, CRM_TASK_PICKLIST_IDS, crmPicklistDefaultLabel, effectiveCrmPicklist, effectiveCrmTaskPicklists, judgeCrmPicklistValue } from "@aglyn/aglyn/server";
+/** An org's list for one picklist as every server door judges against it (AGL-3510). */ export async function readCrmPicklist(firestore, orgId, id) {
+    const snapshot = await firestore.collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.picklists).doc(id).get();
+    return effectiveCrmPicklist(id, snapshot.data());
+}
+/** An org's Status, Priority and Type lists for tasks (AGL-3517), the three read together. */ export async function readCrmTaskPicklists(firestore, orgId) {
+    const lists = firestore.collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.picklists);
+    const [status, priority, type] = await Promise.all([
+        lists.doc(CRM_TASK_PICKLIST_IDS.status).get(),
+        lists.doc(CRM_TASK_PICKLIST_IDS.priority).get(),
+        lists.doc(CRM_TASK_PICKLIST_IDS.type).get()
+    ]);
+    return effectiveCrmTaskPicklists({
+        status: status == null ? void 0 : status.data(),
+        priority: priority == null ? void 0 : priority.data(),
+        type: type == null ? void 0 : type.data()
+    });
+}
+/**
+ * What a record write stores under picklist `id`, from what the request
+ * said about the field:
+ *
+ *  - `undefined` (not named): nothing — except on a CREATE, which starts
+ *    from the list's default when it has one, as Salesforce's does.
+ *  - `null` (cleared): the clear.
+ *  - a label: {@link judgeCrmPicklistValue} — an active value's label, the
+ *    record's own current value kept, and on a restricted picklist anything
+ *    else refused naming the values the list allows.
+ *
+ * `write` undefined means leave the field alone.
+ */ export function resolveCrmPicklistWrite(id, picklist, requested, options) {
+    if (requested === undefined) {
+        const fallback = options.created ? crmPicklistDefaultLabel(picklist) : null;
+        return {
+            ok: true,
+            write: fallback != null ? fallback : undefined
+        };
+    }
+    if (requested === null) return {
+        ok: true,
+        write: null
+    };
+    const judged = judgeCrmPicklistValue(id, picklist, requested, options.current);
+    return judged.ok === false ? judged : {
+        ok: true,
+        write: judged.value
+    };
+}
+
+//# sourceMappingURL=read-picklist.js.map

package/src/lib/server/read-picklist.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/read-picklist.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  CRM_TASK_PICKLIST_IDS,\n  type CrmPicklist,\n  type CrmPicklistId,\n  type CrmTaskPicklists,\n  crmPicklistDefaultLabel,\n  effectiveCrmPicklist,\n  effectiveCrmTaskPicklists,\n  judgeCrmPicklistValue,\n} from '@aglyn/aglyn/server'\n\n/** An org's list for one picklist as every server door judges against it (AGL-3510). */\nexport async function readCrmPicklist(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  id: CrmPicklistId,\n): Promise<CrmPicklist> {\n  const snapshot = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection(CRM_COLLECTIONS.picklists)\n    .doc(id)\n    .get()\n  return effectiveCrmPicklist(id, snapshot.data())\n}\n\n/** An org's Status, Priority and Type lists for tasks (AGL-3517), the three read together. */\nexport async function readCrmTaskPicklists(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<CrmTaskPicklists> {\n  const lists = firestore.collection('orgs').doc(orgId).collection(CRM_COLLECTIONS.picklists)\n  const [status, priority, type] = await Promise.all([\n    lists.doc(CRM_TASK_PICKLIST_IDS.status).get(),\n    lists.doc(CRM_TASK_PICKLIST_IDS.priority).get(),\n    lists.doc(CRM_TASK_PICKLIST_IDS.type).get(),\n  ])\n  return effectiveCrmTaskPicklists({\n    status: status?.data(),\n    priority: priority?.data(),\n    type: type?.data(),\n  })\n}\n\n/**\n * What a record write stores under picklist `id`, from what the request\n * said about the field:\n *\n *  - `undefined` (not named): nothing — except on a CREATE, which starts\n *    from the list's default when it has one, as Salesforce's does.\n *  - `null` (cleared): the clear.\n *  - a label: {@link judgeCrmPicklistValue} — an active value's label, the\n *    record's own current value kept, and on a restricted picklist anything\n *    else refused naming the values the list allows.\n *\n * `write` undefined means leave the field alone.\n */\nexport function resolveCrmPicklistWrite(\n  id: CrmPicklistId,\n  picklist: CrmPicklist,\n  requested: string | null | undefined,\n  options: { current?: unknown; created: boolean },\n): { ok: true; write: string | null | undefined } | { ok: false; error: string } {\n  if (requested === undefined) {\n    const fallback = options.created ? crmPicklistDefaultLabel(picklist) : null\n    return { ok: true, write: fallback ?? undefined }\n  }\n  if (requested === null) return { ok: true, write: null }\n  const judged = judgeCrmPicklistValue(id, picklist, requested, options.current)\n  return judged.ok === false ? judged : { ok: true, write: judged.value }\n}\n"],"names":["CRM_COLLECTIONS","CRM_TASK_PICKLIST_IDS","crmPicklistDefaultLabel","effectiveCrmPicklist","effectiveCrmTaskPicklists","judgeCrmPicklistValue","readCrmPicklist","firestore","orgId","id","snapshot","collection","doc","picklists","get","data","readCrmTaskPicklists","lists","status","priority","type","Promise","all","resolveCrmPicklistWrite","picklist","requested","options","undefined","fallback","created","ok","write","judged","current","value"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,eAAe,EACfC,qBAAqB,EAIrBC,uBAAuB,EACvBC,oBAAoB,EACpBC,yBAAyB,EACzBC,qBAAqB,QAChB,sBAAqB;AAE5B,sFAAsF,GACtF,OAAO,eAAeC,gBACpBC,SAAsC,EACtCC,KAAa,EACbC,EAAiB;IAEjB,MAAMC,WAAW,MAAMH,UACpBI,UAAU,CAAC,QACXC,GAAG,CAACJ,OACJG,UAAU,CAACX,gBAAgBa,SAAS,EACpCD,GAAG,CAACH,IACJK,GAAG;IACN,OAAOX,qBAAqBM,IAAIC,SAASK,IAAI;AAC/C;AAEA,4FAA4F,GAC5F,OAAO,eAAeC,qBACpBT,SAAsC,EACtCC,KAAa;IAEb,MAAMS,QAAQV,UAAUI,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAACX,gBAAgBa,SAAS;IAC1F,MAAM,CAACK,QAAQC,UAAUC,KAAK,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACjDL,MAAML,GAAG,CAACX,sBAAsBiB,MAAM,EAAEJ,GAAG;QAC3CG,MAAML,GAAG,CAACX,sBAAsBkB,QAAQ,EAAEL,GAAG;QAC7CG,MAAML,GAAG,CAACX,sBAAsBmB,IAAI,EAAEN,GAAG;KAC1C;IACD,OAAOV,0BAA0B;QAC/Bc,MAAM,EAAEA,0BAAAA,OAAQH,IAAI;QACpBI,QAAQ,EAAEA,4BAAAA,SAAUJ,IAAI;QACxBK,IAAI,EAAEA,wBAAAA,KAAML,IAAI;IAClB;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASQ,wBACdd,EAAiB,EACjBe,QAAqB,EACrBC,SAAoC,EACpCC,OAAgD;IAEhD,IAAID,cAAcE,WAAW;QAC3B,MAAMC,WAAWF,QAAQG,OAAO,GAAG3B,wBAAwBsB,YAAY;QACvE,OAAO;YAAEM,IAAI;YAAMC,KAAK,EAAEH,mBAAAA,WAAYD;QAAU;IAClD;IACA,IAAIF,cAAc,MAAM,OAAO;QAAEK,IAAI;QAAMC,OAAO;IAAK;IACvD,MAAMC,SAAS3B,sBAAsBI,IAAIe,UAAUC,WAAWC,QAAQO,OAAO;IAC7E,OAAOD,OAAOF,EAAE,KAAK,QAAQE,SAAS;QAAEF,IAAI;QAAMC,OAAOC,OAAOE,KAAK;IAAC;AACxE"}

package/src/lib/server/recipe-routes.js

@@ -47,11 +47,14 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * host role that creates actions today), so a site-level caller gets the
  * same answers; the org variant (`orgId` in the body) is the one the org
  * hub uses.
- */ import { ACTIONS_MAX_PER_HOST, checkEntitlement, createResourceUid, crmActionRecipe, hostActionDocument, hostActionRecipeId, hostRoleCanWrite, planLabelGrantingFeature, validateHostAction } from "@aglyn/aglyn/server";
+ */ import { ACTIONS_MAX_PER_HOST, checkEntitlement, createResourceUid, hostRoleCanWrite, planLabelGrantingFeature, siteInteractionDocument } from "@aglyn/aglyn/server";
+import { interactionRecipeStamp } from "@aglyn/aglyn/plugin-manager/interaction-recipes";
+import { validateStoredInteraction } from "@aglyn/aglyn/plugin-manager/interaction-step-checks";
 import { firebaseAdmin, getOrgForHost, logHostActivity, logOrgActivity } from "@aglyn/tenant-data-admin";
 import { isRefusedIdToken } from "@aglyn/tenant-data-admin/server/id-token-refusal";
 import { FieldValue } from "firebase-admin/firestore";
 import { CRM_API_ROUTES } from "../constants/api-routes.js";
+import { crmActionRecipe } from "../model/crm-recipes.js";
 import { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from "./org-caller.js";
 import { crmSuiteRefusal } from "./suite-gate.js";
 export const CRM_RECIPE_INSTALL_ROUTE = CRM_API_ROUTES.recipeInstall;
@@ -148,9 +151,11 @@ function typed(value, max) {
     for (const row of rows.docs){
         if (row.get('deletedAt') != null) continue;
         live += 1;
-        const stamp = hostActionRecipeId(row.data());
+        const stamp = interactionRecipeStamp(row.data());
         if (stamp === undefined) unstamped += 1;
-        else if (stamp && !installed.has(stamp)) installed.set(stamp, row.id);
+        else if (stamp && !installed.has(stamp)) {
+            installed.set(stamp, row.id);
+        }
     }
     return {
         installed,
@@ -198,6 +203,7 @@ const stampsQuery = (host)=>host.collection('actions').select('recipe', 'deleted
     }
     const formId = typed(body.formId, 200);
     try {
+        var _recipe_picks;
         const firestore = firebaseAdmin.app().firestore();
         let writer;
         if (scope.level === 'org') {
@@ -257,8 +263,9 @@ const stampsQuery = (host)=>host.collection('actions').select('recipe', 'deleted
         }
         const hostRef = writer.host.ref;
         let form;
-        if (recipe.needs === 'form') {
+        if (((_recipe_picks = recipe.picks) == null ? void 0 : _recipe_picks.kind) === 'form') {
             var _snapshot_get;
+            var _snapshot_get1;
             if (!formId) {
                 res.status(400).json({
                     error: 'Pick one of the site’s forms'
@@ -282,13 +289,20 @@ const stampsQuery = (host)=>host.collection('actions').select('recipe', 'deleted
             }
             form = {
                 id: snapshot.id,
-                name: String((_snapshot_get = snapshot.get('displayName')) != null ? _snapshot_get : '').trim() || snapshot.id
+                name: String((_snapshot_get = snapshot.get('displayName')) != null ? _snapshot_get : '').trim() || snapshot.id,
+                // The fact the Forms plugin's list source shares (AGL-3458): a
+                // lead-routed form makes leads, so its recipe listens for one.
+                facts: {
+                    routesLeads: ((_snapshot_get1 = snapshot.get('routing')) == null ? void 0 : _snapshot_get1.lead) === true
+                }
             };
         }
         const action = recipe.build(form ? {
-            form
+            picked: form
         } : undefined);
-        const problem = validateHostAction(action);
+        // The automation editor's own checks of every step, registered from its
+        // declarations: a recipe installs only what that editor would save.
+        const problem = validateStoredInteraction(action);
         if (problem) {
             res.status(400).json({
                 error: problem
@@ -312,7 +326,7 @@ const stampsQuery = (host)=>host.collection('actions').select('recipe', 'deleted
                     error: `interactions and actions are capped at ${ACTIONS_MAX_PER_HOST} per site`
                 };
             }
-            tx.create(hostRef.collection('actions').doc(actionId), _extends({}, hostActionDocument(action), {
+            tx.create(hostRef.collection('actions').doc(actionId), _extends({}, siteInteractionDocument(action), {
                 createdAt: FieldValue.serverTimestamp(),
                 updatedAt: FieldValue.serverTimestamp(),
                 createdBy: writer.uid

package/src/lib/server/recipe-routes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/recipe-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * THE RECIPES, INSTALLED FROM THE ORGANIZATION (AGL-2639).\n *\n * On a site, a recipe opens the Actions editor prefilled and writes nothing\n * until the person saves — the editor is the writer, and the site's own\n * role is the authority. The organization-level CRM hub has no editor: it\n * mounts over every site with no site of its own, and an org running five\n * sites installed \"Welcome a new lead\" five times by hand. These two routes\n * are the org hub's door to a site's automations.\n *\n * `crm/recipe-install` writes the action a recipe builds into ONE site's\n * `hosts/{hostId}/actions`, as the site editor would have saved it — the\n * same builder, the same validator, the same stored shape — and refuses a\n * second install of the same recipe on the same site by the stamp the\n * builder puts on it. A server route rather than a client write for three\n * reasons the browser cannot supply: the document is created by a server\n * on every plan (the rules close `actions` to client creates, and the\n * per-site cap is counted here); the stamp is the server's word, not the\n * caller's; and the site is checked to be one the caller may manage —\n * at the org level, a site OF THE ORG the caller holds org-wide reach in,\n * so a host id typed into the body cannot reach a site under another\n * workspace.\n *\n * `crm/recipe-status` reads the stamps back for every site of the org, so\n * the card can say which sites carry which recipe. An action with no stamp\n * at all — saved before the stamp existed — is counted, not ignored: it\n * may well be a recipe, and the reader is told the site \"may already have\n * it\" rather than shown a clean slate.\n *\n * Both routes serve the site variant too (`hostId` alone, authorized by the\n * host role that creates actions today), so a site-level caller gets the\n * same answers; the org variant (`orgId` in the body) is the one the org\n * hub uses.\n */\n\nimport {\n  ACTIONS_MAX_PER_HOST,\n  type AglynOrganization,\n  checkEntitlement,\n  createResourceUid,\n  crmActionRecipe,\n  type CrmActionRecipeId,\n  hostActionDocument,\n  hostActionRecipeId,\n  hostRoleCanWrite,\n  planLabelGrantingFeature,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  validateHostAction,\n} from '@aglyn/aglyn/server'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  logOrgActivity,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CRM_API_ROUTES,\n  type CrmRecipeInstallRequest,\n  type CrmRecipeInstallResult,\n  type CrmRecipeSiteStatus,\n} from '../constants/api-routes'\nimport { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\nexport const CRM_RECIPE_INSTALL_ROUTE = CRM_API_ROUTES.recipeInstall\nexport const CRM_RECIPE_STATUS_ROUTE = CRM_API_ROUTES.recipeStatus\n\ntype Refusal = { ok: false; status: number; error: string }\n\n/** A verified caller who may write a site's actions, and the site's org. */\ninterface SiteWriter {\n  ok: true\n  uid: string\n  email: string | null\n  staff: boolean\n  orgId: string\n  org: Partial<AglynOrganization>\n  host: FirebaseFirestore.DocumentSnapshot\n}\n\nconst INSTALL_REFUSAL =\n  'Installing a recipe requires the data permission across the whole workspace'\nconst STATUS_REFUSAL =\n  'Reading which sites carry a recipe requires the data permission across the whole workspace'\n\nfunction typed(value: unknown, max: number): string {\n  return String(value ?? '')\n    .trim()\n    .slice(0, max)\n}\n\n/**\n * The site variant's authority: the role on the host document that creates\n * an action through `/api/hosts/resources` today. Staff pass, as they pass\n * that route. Answers the host snapshot it read, so the caller reads it\n * once.\n */\nasync function authorizeSiteWriter(\n  req: PluginApiRequest,\n  hostId: string,\n): Promise<SiteWriter | Refusal> {\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return { ok: false, status: 401, error: 'Unauthenticated' }\n  let decoded: { uid: string; email?: string; staff?: unknown }\n  try {\n    decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  } catch (error) {\n    // A refused credential is the caller's 401; a failure to check one is\n    // ours and keeps a 5xx (AGL-2852).\n    if (isRefusedIdToken(error)) return { ok: false, status: 401, error: 'Unauthenticated' }\n    console.error('[crm] the recipe site writer could not be verified', error)\n    return { ok: false, status: 500, error: 'The sign-in could not be checked. Try again.' }\n  }\n  const staff = decoded.staff === true\n  const host = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .get()\n  if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n  const role = (host.get('memberRoles') ?? {})[decoded.uid]\n  if (!staff && !hostRoleCanWrite(role)) {\n    return { ok: false, status: 403, error: 'Editing requires the editor role' }\n  }\n  const resolved = await getOrgForHost(hostId)\n  if (!resolved) return { ok: false, status: 404, error: 'Unknown site' }\n  return {\n    ok: true,\n    uid: decoded.uid,\n    email: decoded.email ?? null,\n    staff,\n    orgId: resolved.orgId,\n    org: resolved.org,\n    host,\n  }\n}\n\n/**\n * The org variant's site check: the host document, when it belongs to the\n * organization the caller was admitted to. A site under another workspace\n * — or none — reads as unknown, so a probe learns nothing from the answer.\n */\nasync function siteOfOrg(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n  orgId: string,\n): Promise<FirebaseFirestore.DocumentSnapshot | null> {\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists && host.get('orgId') === orgId ? host : null\n}\n\n/** How a site reads in a feed line: its display name, its subdomain, its id. */\nfunction siteLabel(host: FirebaseFirestore.DocumentSnapshot): string {\n  return (\n    String(host.get('displayName') ?? '').trim() ||\n    String(host.get('subdomain') ?? '').trim() ||\n    host.id\n  )\n}\n\n/**\n * The stamps a site's LIVE actions carry, read with a field mask: the\n * install's duplicate check and the status sweep ask the same question,\n * and neither needs a trigger or a step list to answer it. A soft-deleted\n * action (`deletedAt`) is a freed slot and counts for nothing.\n */\nfunction readSiteStamps(rows: FirebaseFirestore.QuerySnapshot): {\n  installed: Map<CrmActionRecipeId, string>\n  unstamped: number\n  live: number\n} {\n  const installed = new Map<CrmActionRecipeId, string>()\n  let unstamped = 0\n  let live = 0\n  for (const row of rows.docs) {\n    if (row.get('deletedAt') != null) continue\n    live += 1\n    const stamp = hostActionRecipeId(row.data())\n    if (stamp === undefined) unstamped += 1\n    else if (stamp && !installed.has(stamp)) installed.set(stamp, row.id)\n  }\n  return { installed, unstamped, live }\n}\n\nconst stampsQuery = (host: FirebaseFirestore.DocumentReference) =>\n  host.collection('actions').select('recipe', 'deletedAt')\n\n/**\n * `POST /api/crm/recipe-install`\n *\n * The body is a CrmRecipeInstallRequest: the site, the recipe, the form a\n * recipe that needs one is keyed on, and the org at the organization level.\n * Answers 201 with a CrmRecipeInstallResult once the action is written, and\n * 409 when a live action on the site already carries the stamp — naming it,\n * so the caller can say \"already installed\" rather than install it twice.\n *\n * The write is one transaction: the stamps are read, the duplicate and the\n * per-site cap are judged, and the document is created — all inside it, so\n * two installs racing for the same site cannot both land.\n */\nexport const crmRecipeInstallHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body: Partial<CrmRecipeInstallRequest> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const scope = readCrmRouteScope(body as Record<string, unknown>)\n  const hostId = scope?.hostId ?? ''\n  if (!scope || !hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const recipe = crmActionRecipe(typed(body.recipeId, 64))\n  if (!recipe) {\n    res.status(400).json({ error: 'Pick a recipe' })\n    return\n  }\n  const formId = typed(body.formId, 200)\n\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    let writer: SiteWriter\n    if (scope.level === 'org') {\n      const caller = await authorizeOrgCaller(req, scope.orgId, {\n        needs: 'data.manage',\n        refusal: INSTALL_REFUSAL,\n      })\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      const host = await siteOfOrg(firestore, hostId, caller.orgId)\n      if (!host) {\n        res.status(404).json({ error: 'Unknown site' })\n        return\n      }\n      writer = {\n        ok: true,\n        uid: caller.uid,\n        email: caller.email,\n        staff: caller.staff,\n        orgId: caller.orgId,\n        org: caller.org,\n        host,\n      }\n    } else {\n      const caller = await authorizeSiteWriter(req, hostId)\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      writer = caller\n    }\n\n    // A recipe is a CRM automation first (AGL-2787): the suite is asked\n    // before the actions builder, so a plan without either is told about\n    // the one the recipe belongs to.\n    const suite = crmSuiteRefusal(writer.org, 'A CRM recipe')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    // The gate the site's own Recipes menu applies, judged here from the\n    // org document rather than trusted from the console: a recipe is an\n    // action, and the plan that carries one carries the other.\n    if (!checkEntitlement(writer.org, 'actions')) {\n      res.status(403).json({\n        error:\n          `The actions builder requires the ${planLabelGrantingFeature('actions') ?? 'Pro'} ` +\n          'plan — see Billing to upgrade',\n      })\n      return\n    }\n\n    const hostRef = writer.host.ref\n    let form: { id: string; name: string } | undefined\n    if (recipe.needs === 'form') {\n      if (!formId) {\n        res.status(400).json({ error: 'Pick one of the site’s forms' })\n        return\n      }\n      const snapshot = await hostRef.collection('forms').doc(formId).get()\n      if (!snapshot.exists) {\n        res.status(404).json({ error: 'Unknown form' })\n        return\n      }\n      // An archived form collects nothing, so a recipe keyed on it would\n      // never fire; the name falls back to the id the way every form list's does.\n      if (snapshot.get('archivedAt') != null) {\n        res.status(400).json({ error: 'That form is archived and collects nothing' })\n        return\n      }\n      form = {\n        id: snapshot.id,\n        name: String(snapshot.get('displayName') ?? '').trim() || snapshot.id,\n      }\n    }\n\n    const action = recipe.build(form ? { form } : undefined)\n    const problem = validateHostAction(action)\n    if (problem) {\n      res.status(400).json({ error: problem })\n      return\n    }\n\n    const actionId = createResourceUid()\n    const outcome = await firestore.runTransaction(async (tx) => {\n      const stamps = readSiteStamps(await tx.get(stampsQuery(hostRef)))\n      const existing = stamps.installed.get(recipe.id)\n      if (existing) {\n        return {\n          status: 409,\n          error: 'Already installed on this site',\n          actionId: existing,\n        }\n      }\n      if (stamps.live >= ACTIONS_MAX_PER_HOST) {\n        return {\n          status: 403,\n          error: `interactions and actions are capped at ${ACTIONS_MAX_PER_HOST} per site`,\n        }\n      }\n      tx.create(hostRef.collection('actions').doc(actionId), {\n        ...hostActionDocument(action),\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n        createdBy: writer.uid,\n      })\n      return null\n    })\n    if (outcome) {\n      res.status(outcome.status).json({\n        error: outcome.error,\n        ...(outcome.actionId ? { actionId: outcome.actionId } : {}),\n      })\n      return\n    }\n\n    const actor = { uid: writer.uid, email: writer.email }\n    await logHostActivity(hostId, actor, 'Installed recipe', {\n      type: 'content',\n      id: actionId,\n      name: action.name,\n    })\n    // The org hub's own feed line, for the act it performed (AGL-2634).\n    if (scope.level === 'org') {\n      await logOrgActivity(\n        writer.orgId,\n        actor,\n        `Installed the “${recipe.title}” recipe on ${siteLabel(writer.host)}`,\n        { type: 'host', id: hostId, name: siteLabel(writer.host) },\n      )\n    }\n    const answer: CrmRecipeInstallResult = {\n      ok: true,\n      actionId,\n      name: action.name,\n      recipeId: recipe.id,\n    }\n    res.status(201).json(answer)\n  } catch (error) {\n    console.error('[crm] recipe install failed', hostId, error)\n    res.status(500).json({ error: 'The recipe could not be installed' })\n  }\n}\n\n/**\n * `POST /api/crm/recipe-status`\n *\n * The body names the organization (`orgId`) for every one of its sites, or\n * one site (`hostId`) for that site alone. Answers `ok: true` and `sites`,\n * one CrmRecipeSiteStatus per site swept.\n */\nexport const crmRecipeStatusHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body: Record<string, unknown> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing orgId or hostId' })\n    return\n  }\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    let orgId: string | null = null\n    let org: unknown\n    if (scope.level === 'org') {\n      const caller = await authorizeOrgCaller(req, scope.orgId, {\n        needs: 'data.manage',\n        refusal: STATUS_REFUSAL,\n      })\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      orgId = caller.orgId\n      org = caller.org\n    } else {\n      const caller = await authorizeSiteWriter(req, scope.hostId)\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      org = caller.org\n    }\n    // The plan after the caller, before any site is read (AGL-2851).\n    const suite = crmSuiteRefusal(org, 'Reading which sites carry a CRM recipe')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const hostIds = orgId ? await orgHostIds(firestore, orgId) : [scope.hostId]\n    const sites = await Promise.all(\n      hostIds.map(async (hostId): Promise<CrmRecipeSiteStatus> => {\n        const stamps = readSiteStamps(\n          await stampsQuery(firestore.collection('hosts').doc(hostId)).get(),\n        )\n        return {\n          hostId,\n          installed: [...stamps.installed.keys()],\n          unstamped: stamps.unstamped,\n        }\n      }),\n    )\n    res.status(200).json({ ok: true, sites })\n  } catch (error) {\n    console.error('[crm] recipe status failed', error)\n    res.status(500).json({ error: 'The recipe status could not be read' })\n  }\n}\n"],"names":["ACTIONS_MAX_PER_HOST","checkEntitlement","createResourceUid","crmActionRecipe","hostActionDocument","hostActionRecipeId","hostRoleCanWrite","planLabelGrantingFeature","validateHostAction","firebaseAdmin","getOrgForHost","logHostActivity","logOrgActivity","isRefusedIdToken","FieldValue","CRM_API_ROUTES","authorizeOrgCaller","orgHostIds","readCrmRouteScope","crmSuiteRefusal","CRM_RECIPE_INSTALL_ROUTE","recipeInstall","CRM_RECIPE_STATUS_ROUTE","recipeStatus","INSTALL_REFUSAL","STATUS_REFUSAL","typed","value","max","String","trim","slice","authorizeSiteWriter","req","hostId","host","decoded","authorization","headers","idToken","startsWith","length","undefined","ok","status","error","app","auth","verifyIdToken","console","staff","firestore","collection","doc","get","exists","role","uid","resolved","email","orgId","org","siteOfOrg","siteLabel","id","readSiteStamps","rows","installed","Map","unstamped","live","row","docs","stamp","data","has","set","stampsQuery","select","crmRecipeInstallHandler","res","method","setHeader","json","body","JSON","parse","scope","recipe","recipeId","formId","writer","level","caller","needs","refusal","suite","hostRef","ref","form","snapshot","name","action","build","problem","actionId","outcome","runTransaction","tx","stamps","existing","create","createdAt","serverTimestamp","updatedAt","createdBy","actor","type","title","answer","crmRecipeStatusHandler","hostIds","sites","Promise","all","map","keys"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCC,GAED,SACEA,oBAAoB,EAEpBC,gBAAgB,EAChBC,iBAAiB,EACjBC,eAAe,EAEfC,kBAAkB,EAClBC,kBAAkB,EAClBC,gBAAgB,EAChBC,wBAAwB,EAGxBC,kBAAkB,QACb,sBAAqB;AAC5B,SACEC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,cAAc,QACT,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,QAIT,6BAAyB;AAChC,SAASC,kBAAkB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAChF,SAASC,eAAe,QAAQ,kBAAc;AAE9C,OAAO,MAAMC,2BAA2BL,eAAeM,aAAa,CAAA;AACpE,OAAO,MAAMC,0BAA0BP,eAAeQ,YAAY,CAAA;AAelE,MAAMC,kBACJ;AACF,MAAMC,iBACJ;AAEF,SAASC,MAAMC,KAAc,EAAEC,GAAW;IACxC,OAAOC,OAAOF,gBAAAA,QAAS,IACpBG,IAAI,GACJC,KAAK,CAAC,GAAGH;AACd;AAEA;;;;;CAKC,GACD,eAAeI,oBACbC,GAAqB,EACrBC,MAAc;QAEeD,4BAuBfE,WASLC;IAhCT,MAAMC,gBAAgBR,QAAOI,6BAAAA,IAAIK,OAAO,CAACD,aAAa,YAAzBJ,6BAA6B;IAC1D,MAAMM,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcN,KAAK,CAAC,UAAUU,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAO;QAAEI,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAkB;IACxE,IAAIT;IACJ,IAAI;QACFA,UAAU,MAAM3B,cAAcqC,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACT;IAC3D,EAAE,OAAOM,OAAO;QACd,sEAAsE;QACtE,mCAAmC;QACnC,IAAIhC,iBAAiBgC,QAAQ,OAAO;YAAEF,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAkB;QACvFI,QAAQJ,KAAK,CAAC,sDAAsDA;QACpE,OAAO;YAAEF,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAA+C;IACzF;IACA,MAAMK,QAAQd,QAAQc,KAAK,KAAK;IAChC,MAAMf,OAAO,MAAM1B,cAChBqC,GAAG,GACHK,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACnB,QACJoB,GAAG;IACN,IAAI,CAACnB,KAAKoB,MAAM,EAAE,OAAO;QAAEZ,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAe;IACzE,MAAMW,OAAO,EAACrB,YAAAA,KAAKmB,GAAG,CAAC,0BAATnB,YAA2B,CAAC,EAAE,CAACC,QAAQqB,GAAG,CAAC;IACzD,IAAI,CAACP,SAAS,CAAC5C,iBAAiBkD,OAAO;QACrC,OAAO;YAAEb,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAmC;IAC7E;IACA,MAAMa,WAAW,MAAMhD,cAAcwB;IACrC,IAAI,CAACwB,UAAU,OAAO;QAAEf,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAe;IACtE,OAAO;QACLF,IAAI;QACJc,KAAKrB,QAAQqB,GAAG;QAChBE,KAAK,GAAEvB,iBAAAA,QAAQuB,KAAK,YAAbvB,iBAAiB;QACxBc;QACAU,OAAOF,SAASE,KAAK;QACrBC,KAAKH,SAASG,GAAG;QACjB1B;IACF;AACF;AAEA;;;;CAIC,GACD,eAAe2B,UACbX,SAAsC,EACtCjB,MAAc,EACd0B,KAAa;IAEb,MAAMzB,OAAO,MAAMgB,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACnB,QAAQoB,GAAG;IAChE,OAAOnB,KAAKoB,MAAM,IAAIpB,KAAKmB,GAAG,CAAC,aAAaM,QAAQzB,OAAO;AAC7D;AAEA,8EAA8E,GAC9E,SAAS4B,UAAU5B,IAAwC;QAEhDA,WACAA;IAFT,OACEN,QAAOM,YAAAA,KAAKmB,GAAG,CAAC,0BAATnB,YAA2B,IAAIL,IAAI,MAC1CD,QAAOM,aAAAA,KAAKmB,GAAG,CAAC,wBAATnB,aAAyB,IAAIL,IAAI,MACxCK,KAAK6B,EAAE;AAEX;AAEA;;;;;CAKC,GACD,SAASC,eAAeC,IAAqC;IAK3D,MAAMC,YAAY,IAAIC;IACtB,IAAIC,YAAY;IAChB,IAAIC,OAAO;IACX,KAAK,MAAMC,OAAOL,KAAKM,IAAI,CAAE;QAC3B,IAAID,IAAIjB,GAAG,CAAC,gBAAgB,MAAM;QAClCgB,QAAQ;QACR,MAAMG,QAAQpE,mBAAmBkE,IAAIG,IAAI;QACzC,IAAID,UAAU/B,WAAW2B,aAAa;aACjC,IAAII,SAAS,CAACN,UAAUQ,GAAG,CAACF,QAAQN,UAAUS,GAAG,CAACH,OAAOF,IAAIP,EAAE;IACtE;IACA,OAAO;QAAEG;QAAWE;QAAWC;IAAK;AACtC;AAEA,MAAMO,cAAc,CAAC1C,OACnBA,KAAKiB,UAAU,CAAC,WAAW0B,MAAM,CAAC,UAAU;AAE9C;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,0BAA4C,OAAO9C,KAAK+C;QAOV/C;IANzD,IAAIA,IAAIgD,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMuC,OACJ,OAAOnD,IAAImD,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACrD,IAAImD,IAAI,KAAKnD,YAAAA,IAAImD,IAAI,YAARnD,YAAY,CAAC;IACtE,MAAMsD,QAAQrE,kBAAkBkE;IAChC,MAAMlD,iBAASqD,yBAAAA,MAAOrD,MAAM,mBAAI;IAChC,IAAI,CAACqD,SAAS,CAACrD,QAAQ;QACrB8C,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM2C,SAASrF,gBAAgBuB,MAAM0D,KAAKK,QAAQ,EAAE;IACpD,IAAI,CAACD,QAAQ;QACXR,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAgB;QAC9C;IACF;IACA,MAAM6C,SAAShE,MAAM0D,KAAKM,MAAM,EAAE;IAElC,IAAI;QACF,MAAMvC,YAAY1C,cAAcqC,GAAG,GAAGK,SAAS;QAC/C,IAAIwC;QACJ,IAAIJ,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMC,SAAS,MAAM7E,mBAAmBiB,KAAKsD,MAAM3B,KAAK,EAAE;gBACxDkC,OAAO;gBACPC,SAASvE;YACX;YACA,IAAIqE,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACA,MAAMV,OAAO,MAAM2B,UAAUX,WAAWjB,QAAQ2D,OAAOjC,KAAK;YAC5D,IAAI,CAACzB,MAAM;gBACT6C,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAAe;gBAC7C;YACF;YACA8C,SAAS;gBACPhD,IAAI;gBACJc,KAAKoC,OAAOpC,GAAG;gBACfE,OAAOkC,OAAOlC,KAAK;gBACnBT,OAAO2C,OAAO3C,KAAK;gBACnBU,OAAOiC,OAAOjC,KAAK;gBACnBC,KAAKgC,OAAOhC,GAAG;gBACf1B;YACF;QACF,OAAO;YACL,MAAM0D,SAAS,MAAM7D,oBAAoBC,KAAKC;YAC9C,IAAI2D,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACA8C,SAASE;QACX;QAEA,oEAAoE;QACpE,qEAAqE;QACrE,iCAAiC;QACjC,MAAMG,QAAQ7E,gBAAgBwE,OAAO9B,GAAG,EAAE;QAC1C,IAAImC,OAAO;YACThB,IAAIpC,MAAM,CAACoD,MAAMpD,MAAM,EAAEuC,IAAI,CAACa,MAAMZ,IAAI;YACxC;QACF;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,CAACnF,iBAAiB0F,OAAO9B,GAAG,EAAE,YAAY;gBAGJtD;YAFxCyE,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;gBACnBtC,OACE,CAAC,iCAAiC,GAAEtC,4BAAAA,yBAAyB,sBAAzBA,4BAAuC,MAAM,CAAC,CAAC,GACnF;YACJ;YACA;QACF;QAEA,MAAM0F,UAAUN,OAAOxD,IAAI,CAAC+D,GAAG;QAC/B,IAAIC;QACJ,IAAIX,OAAOM,KAAK,KAAK,QAAQ;gBAkBZM;YAjBf,IAAI,CAACV,QAAQ;gBACXV,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAA+B;gBAC7D;YACF;YACA,MAAMuD,WAAW,MAAMH,QAAQ7C,UAAU,CAAC,SAASC,GAAG,CAACqC,QAAQpC,GAAG;YAClE,IAAI,CAAC8C,SAAS7C,MAAM,EAAE;gBACpByB,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAAe;gBAC7C;YACF;YACA,mEAAmE;YACnE,4EAA4E;YAC5E,IAAIuD,SAAS9C,GAAG,CAAC,iBAAiB,MAAM;gBACtC0B,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAA6C;gBAC3E;YACF;YACAsD,OAAO;gBACLnC,IAAIoC,SAASpC,EAAE;gBACfqC,MAAMxE,QAAOuE,gBAAAA,SAAS9C,GAAG,CAAC,0BAAb8C,gBAA+B,IAAItE,IAAI,MAAMsE,SAASpC,EAAE;YACvE;QACF;QAEA,MAAMsC,SAASd,OAAOe,KAAK,CAACJ,OAAO;YAAEA;QAAK,IAAIzD;QAC9C,MAAM8D,UAAUhG,mBAAmB8F;QACnC,IAAIE,SAAS;YACXxB,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;gBAAEtC,OAAO2D;YAAQ;YACtC;QACF;QAEA,MAAMC,WAAWvG;QACjB,MAAMwG,UAAU,MAAMvD,UAAUwD,cAAc,CAAC,OAAOC;YACpD,MAAMC,SAAS5C,eAAe,MAAM2C,GAAGtD,GAAG,CAACuB,YAAYoB;YACvD,MAAMa,WAAWD,OAAO1C,SAAS,CAACb,GAAG,CAACkC,OAAOxB,EAAE;YAC/C,IAAI8C,UAAU;gBACZ,OAAO;oBACLlE,QAAQ;oBACRC,OAAO;oBACP4D,UAAUK;gBACZ;YACF;YACA,IAAID,OAAOvC,IAAI,IAAItE,sBAAsB;gBACvC,OAAO;oBACL4C,QAAQ;oBACRC,OAAO,CAAC,uCAAuC,EAAE7C,qBAAqB,SAAS,CAAC;gBAClF;YACF;YACA4G,GAAGG,MAAM,CAACd,QAAQ7C,UAAU,CAAC,WAAWC,GAAG,CAACoD,WAAW,aAClDrG,mBAAmBkG;gBACtBU,WAAWlG,WAAWmG,eAAe;gBACrCC,WAAWpG,WAAWmG,eAAe;gBACrCE,WAAWxB,OAAOlC,GAAG;;YAEvB,OAAO;QACT;QACA,IAAIiD,SAAS;YACX1B,IAAIpC,MAAM,CAAC8D,QAAQ9D,MAAM,EAAEuC,IAAI,CAAC;gBAC9BtC,OAAO6D,QAAQ7D,KAAK;eAChB6D,QAAQD,QAAQ,GAAG;gBAAEA,UAAUC,QAAQD,QAAQ;YAAC,IAAI,CAAC;YAE3D;QACF;QAEA,MAAMW,QAAQ;YAAE3D,KAAKkC,OAAOlC,GAAG;YAAEE,OAAOgC,OAAOhC,KAAK;QAAC;QACrD,MAAMhD,gBAAgBuB,QAAQkF,OAAO,oBAAoB;YACvDC,MAAM;YACNrD,IAAIyC;YACJJ,MAAMC,OAAOD,IAAI;QACnB;QACA,oEAAoE;QACpE,IAAId,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMhF,eACJ+E,OAAO/B,KAAK,EACZwD,OACA,CAAC,eAAe,EAAE5B,OAAO8B,KAAK,CAAC,YAAY,EAAEvD,UAAU4B,OAAOxD,IAAI,GAAG,EACrE;gBAAEkF,MAAM;gBAAQrD,IAAI9B;gBAAQmE,MAAMtC,UAAU4B,OAAOxD,IAAI;YAAE;QAE7D;QACA,MAAMoF,SAAiC;YACrC5E,IAAI;YACJ8D;YACAJ,MAAMC,OAAOD,IAAI;YACjBZ,UAAUD,OAAOxB,EAAE;QACrB;QACAgB,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAACoC;IACvB,EAAE,OAAO1E,OAAO;QACdI,QAAQJ,KAAK,CAAC,+BAA+BX,QAAQW;QACrDmC,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAoC;IACpE;AACF,EAAC;AAED;;;;;;CAMC,GACD,OAAO,MAAM2E,yBAA2C,OAAOvF,KAAK+C;QAOT/C;IANzD,IAAIA,IAAIgD,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMuC,OACJ,OAAOnD,IAAImD,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACrD,IAAImD,IAAI,KAAKnD,YAAAA,IAAImD,IAAI,YAARnD,YAAY,CAAC;IACtE,MAAMsD,QAAQrE,kBAAkBkE;IAChC,IAAI,CAACG,OAAO;QACVP,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAA0B;QACxD;IACF;IACA,IAAI;QACF,MAAMM,YAAY1C,cAAcqC,GAAG,GAAGK,SAAS;QAC/C,IAAIS,QAAuB;QAC3B,IAAIC;QACJ,IAAI0B,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMC,SAAS,MAAM7E,mBAAmBiB,KAAKsD,MAAM3B,KAAK,EAAE;gBACxDkC,OAAO;gBACPC,SAAStE;YACX;YACA,IAAIoE,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACAe,QAAQiC,OAAOjC,KAAK;YACpBC,MAAMgC,OAAOhC,GAAG;QAClB,OAAO;YACL,MAAMgC,SAAS,MAAM7D,oBAAoBC,KAAKsD,MAAMrD,MAAM;YAC1D,IAAI2D,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACAgB,MAAMgC,OAAOhC,GAAG;QAClB;QACA,iEAAiE;QACjE,MAAMmC,QAAQ7E,gBAAgB0C,KAAK;QACnC,IAAImC,OAAO;YACThB,IAAIpC,MAAM,CAACoD,MAAMpD,MAAM,EAAEuC,IAAI,CAACa,MAAMZ,IAAI;YACxC;QACF;QACA,MAAMqC,UAAU7D,QAAQ,MAAM3C,WAAWkC,WAAWS,SAAS;YAAC2B,MAAMrD,MAAM;SAAC;QAC3E,MAAMwF,QAAQ,MAAMC,QAAQC,GAAG,CAC7BH,QAAQI,GAAG,CAAC,OAAO3F;YACjB,MAAM2E,SAAS5C,eACb,MAAMY,YAAY1B,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACnB,SAASoB,GAAG;YAElE,OAAO;gBACLpB;gBACAiC,WAAW;uBAAI0C,OAAO1C,SAAS,CAAC2D,IAAI;iBAAG;gBACvCzD,WAAWwC,OAAOxC,SAAS;YAC7B;QACF;QAEFW,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAExC,IAAI;YAAM+E;QAAM;IACzC,EAAE,OAAO7E,OAAO;QACdI,QAAQJ,KAAK,CAAC,8BAA8BA;QAC5CmC,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAsC;IACtE;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/recipe-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * THE RECIPES, INSTALLED FROM THE ORGANIZATION (AGL-2639).\n *\n * On a site, a recipe opens the Actions editor prefilled and writes nothing\n * until the person saves — the editor is the writer, and the site's own\n * role is the authority. The organization-level CRM hub has no editor: it\n * mounts over every site with no site of its own, and an org running five\n * sites installed \"Welcome a new lead\" five times by hand. These two routes\n * are the org hub's door to a site's automations.\n *\n * `crm/recipe-install` writes the action a recipe builds into ONE site's\n * `hosts/{hostId}/actions`, as the site editor would have saved it — the\n * same builder, the same validator, the same stored shape — and refuses a\n * second install of the same recipe on the same site by the stamp the\n * builder puts on it. A server route rather than a client write for three\n * reasons the browser cannot supply: the document is created by a server\n * on every plan (the rules close `actions` to client creates, and the\n * per-site cap is counted here); the stamp is the server's word, not the\n * caller's; and the site is checked to be one the caller may manage —\n * at the org level, a site OF THE ORG the caller holds org-wide reach in,\n * so a host id typed into the body cannot reach a site under another\n * workspace.\n *\n * `crm/recipe-status` reads the stamps back for every site of the org, so\n * the card can say which sites carry which recipe. An action with no stamp\n * at all — saved before the stamp existed — is counted, not ignored: it\n * may well be a recipe, and the reader is told the site \"may already have\n * it\" rather than shown a clean slate.\n *\n * Both routes serve the site variant too (`hostId` alone, authorized by the\n * host role that creates actions today), so a site-level caller gets the\n * same answers; the org variant (`orgId` in the body) is the one the org\n * hub uses.\n */\n\nimport {\n  ACTIONS_MAX_PER_HOST,\n  type AglynOrganization,\n  checkEntitlement,\n  createResourceUid,\n  hostRoleCanWrite,\n  planLabelGrantingFeature,\n  type PluginApiHandler,\n  type PluginApiRequest,\n  siteInteractionDocument,\n} from '@aglyn/aglyn/server'\nimport { interactionRecipeStamp } from '@aglyn/aglyn/plugin-manager/interaction-recipes'\nimport { validateStoredInteraction } from '@aglyn/aglyn/plugin-manager/interaction-step-checks'\nimport {\n  firebaseAdmin,\n  getOrgForHost,\n  logHostActivity,\n  logOrgActivity,\n} from '@aglyn/tenant-data-admin'\nimport { isRefusedIdToken } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  CRM_API_ROUTES,\n  type CrmRecipeInstallRequest,\n  type CrmRecipeInstallResult,\n  type CrmRecipeSiteStatus,\n} from '../constants/api-routes'\nimport { crmActionRecipe, type CrmActionRecipeId } from '../model/crm-recipes'\nimport { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\n\nexport const CRM_RECIPE_INSTALL_ROUTE = CRM_API_ROUTES.recipeInstall\nexport const CRM_RECIPE_STATUS_ROUTE = CRM_API_ROUTES.recipeStatus\n\ntype Refusal = { ok: false; status: number; error: string }\n\n/** A verified caller who may write a site's actions, and the site's org. */\ninterface SiteWriter {\n  ok: true\n  uid: string\n  email: string | null\n  staff: boolean\n  orgId: string\n  org: Partial<AglynOrganization>\n  host: FirebaseFirestore.DocumentSnapshot\n}\n\nconst INSTALL_REFUSAL =\n  'Installing a recipe requires the data permission across the whole workspace'\nconst STATUS_REFUSAL =\n  'Reading which sites carry a recipe requires the data permission across the whole workspace'\n\nfunction typed(value: unknown, max: number): string {\n  return String(value ?? '')\n    .trim()\n    .slice(0, max)\n}\n\n/**\n * The site variant's authority: the role on the host document that creates\n * an action through `/api/hosts/resources` today. Staff pass, as they pass\n * that route. Answers the host snapshot it read, so the caller reads it\n * once.\n */\nasync function authorizeSiteWriter(\n  req: PluginApiRequest,\n  hostId: string,\n): Promise<SiteWriter | Refusal> {\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return { ok: false, status: 401, error: 'Unauthenticated' }\n  let decoded: { uid: string; email?: string; staff?: unknown }\n  try {\n    decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  } catch (error) {\n    // A refused credential is the caller's 401; a failure to check one is\n    // ours and keeps a 5xx (AGL-2852).\n    if (isRefusedIdToken(error)) return { ok: false, status: 401, error: 'Unauthenticated' }\n    console.error('[crm] the recipe site writer could not be verified', error)\n    return { ok: false, status: 500, error: 'The sign-in could not be checked. Try again.' }\n  }\n  const staff = decoded.staff === true\n  const host = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .get()\n  if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n  const role = (host.get('memberRoles') ?? {})[decoded.uid]\n  if (!staff && !hostRoleCanWrite(role)) {\n    return { ok: false, status: 403, error: 'Editing requires the editor role' }\n  }\n  const resolved = await getOrgForHost(hostId)\n  if (!resolved) return { ok: false, status: 404, error: 'Unknown site' }\n  return {\n    ok: true,\n    uid: decoded.uid,\n    email: decoded.email ?? null,\n    staff,\n    orgId: resolved.orgId,\n    org: resolved.org,\n    host,\n  }\n}\n\n/**\n * The org variant's site check: the host document, when it belongs to the\n * organization the caller was admitted to. A site under another workspace\n * — or none — reads as unknown, so a probe learns nothing from the answer.\n */\nasync function siteOfOrg(\n  firestore: FirebaseFirestore.Firestore,\n  hostId: string,\n  orgId: string,\n): Promise<FirebaseFirestore.DocumentSnapshot | null> {\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists && host.get('orgId') === orgId ? host : null\n}\n\n/** How a site reads in a feed line: its display name, its subdomain, its id. */\nfunction siteLabel(host: FirebaseFirestore.DocumentSnapshot): string {\n  return (\n    String(host.get('displayName') ?? '').trim() ||\n    String(host.get('subdomain') ?? '').trim() ||\n    host.id\n  )\n}\n\n/**\n * The stamps a site's LIVE actions carry, read with a field mask: the\n * install's duplicate check and the status sweep ask the same question,\n * and neither needs a trigger or a step list to answer it. A soft-deleted\n * action (`deletedAt`) is a freed slot and counts for nothing.\n */\nfunction readSiteStamps(rows: FirebaseFirestore.QuerySnapshot): {\n  installed: Map<CrmActionRecipeId, string>\n  unstamped: number\n  live: number\n} {\n  const installed = new Map<CrmActionRecipeId, string>()\n  let unstamped = 0\n  let live = 0\n  for (const row of rows.docs) {\n    if (row.get('deletedAt') != null) continue\n    live += 1\n    const stamp = interactionRecipeStamp(row.data())\n    if (stamp === undefined) unstamped += 1\n    else if (stamp && !installed.has(stamp as CrmActionRecipeId)) {\n      installed.set(stamp as CrmActionRecipeId, row.id)\n    }\n  }\n  return { installed, unstamped, live }\n}\n\nconst stampsQuery = (host: FirebaseFirestore.DocumentReference) =>\n  host.collection('actions').select('recipe', 'deletedAt')\n\n/**\n * `POST /api/crm/recipe-install`\n *\n * The body is a CrmRecipeInstallRequest: the site, the recipe, the form a\n * recipe that needs one is keyed on, and the org at the organization level.\n * Answers 201 with a CrmRecipeInstallResult once the action is written, and\n * 409 when a live action on the site already carries the stamp — naming it,\n * so the caller can say \"already installed\" rather than install it twice.\n *\n * The write is one transaction: the stamps are read, the duplicate and the\n * per-site cap are judged, and the document is created — all inside it, so\n * two installs racing for the same site cannot both land.\n */\nexport const crmRecipeInstallHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body: Partial<CrmRecipeInstallRequest> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const scope = readCrmRouteScope(body as Record<string, unknown>)\n  const hostId = scope?.hostId ?? ''\n  if (!scope || !hostId) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const recipe = crmActionRecipe(typed(body.recipeId, 64))\n  if (!recipe) {\n    res.status(400).json({ error: 'Pick a recipe' })\n    return\n  }\n  const formId = typed(body.formId, 200)\n\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    let writer: SiteWriter\n    if (scope.level === 'org') {\n      const caller = await authorizeOrgCaller(req, scope.orgId, {\n        needs: 'data.manage',\n        refusal: INSTALL_REFUSAL,\n      })\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      const host = await siteOfOrg(firestore, hostId, caller.orgId)\n      if (!host) {\n        res.status(404).json({ error: 'Unknown site' })\n        return\n      }\n      writer = {\n        ok: true,\n        uid: caller.uid,\n        email: caller.email,\n        staff: caller.staff,\n        orgId: caller.orgId,\n        org: caller.org,\n        host,\n      }\n    } else {\n      const caller = await authorizeSiteWriter(req, hostId)\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      writer = caller\n    }\n\n    // A recipe is a CRM automation first (AGL-2787): the suite is asked\n    // before the actions builder, so a plan without either is told about\n    // the one the recipe belongs to.\n    const suite = crmSuiteRefusal(writer.org, 'A CRM recipe')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n\n    // The gate the site's own Recipes menu applies, judged here from the\n    // org document rather than trusted from the console: a recipe is an\n    // action, and the plan that carries one carries the other.\n    if (!checkEntitlement(writer.org, 'actions')) {\n      res.status(403).json({\n        error:\n          `The actions builder requires the ${planLabelGrantingFeature('actions') ?? 'Pro'} ` +\n          'plan — see Billing to upgrade',\n      })\n      return\n    }\n\n    const hostRef = writer.host.ref\n    let form: { id: string; name: string; facts: { routesLeads: boolean } } | undefined\n    if (recipe.picks?.kind === 'form') {\n      if (!formId) {\n        res.status(400).json({ error: 'Pick one of the site’s forms' })\n        return\n      }\n      const snapshot = await hostRef.collection('forms').doc(formId).get()\n      if (!snapshot.exists) {\n        res.status(404).json({ error: 'Unknown form' })\n        return\n      }\n      // An archived form collects nothing, so a recipe keyed on it would\n      // never fire; the name falls back to the id the way every form list's does.\n      if (snapshot.get('archivedAt') != null) {\n        res.status(400).json({ error: 'That form is archived and collects nothing' })\n        return\n      }\n      form = {\n        id: snapshot.id,\n        name: String(snapshot.get('displayName') ?? '').trim() || snapshot.id,\n        // The fact the Forms plugin's list source shares (AGL-3458): a\n        // lead-routed form makes leads, so its recipe listens for one.\n        facts: { routesLeads: snapshot.get('routing')?.lead === true },\n      }\n    }\n\n    const action = recipe.build(form ? { picked: form } : undefined)\n    // The automation editor's own checks of every step, registered from its\n    // declarations: a recipe installs only what that editor would save.\n    const problem = validateStoredInteraction(action)\n    if (problem) {\n      res.status(400).json({ error: problem })\n      return\n    }\n\n    const actionId = createResourceUid()\n    const outcome = await firestore.runTransaction(async (tx) => {\n      const stamps = readSiteStamps(await tx.get(stampsQuery(hostRef)))\n      const existing = stamps.installed.get(recipe.id)\n      if (existing) {\n        return {\n          status: 409,\n          error: 'Already installed on this site',\n          actionId: existing,\n        }\n      }\n      if (stamps.live >= ACTIONS_MAX_PER_HOST) {\n        return {\n          status: 403,\n          error: `interactions and actions are capped at ${ACTIONS_MAX_PER_HOST} per site`,\n        }\n      }\n      tx.create(hostRef.collection('actions').doc(actionId), {\n        ...siteInteractionDocument(action),\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n        createdBy: writer.uid,\n      })\n      return null\n    })\n    if (outcome) {\n      res.status(outcome.status).json({\n        error: outcome.error,\n        ...(outcome.actionId ? { actionId: outcome.actionId } : {}),\n      })\n      return\n    }\n\n    const actor = { uid: writer.uid, email: writer.email }\n    await logHostActivity(hostId, actor, 'Installed recipe', {\n      type: 'content',\n      id: actionId,\n      name: action.name,\n    })\n    // The org hub's own feed line, for the act it performed (AGL-2634).\n    if (scope.level === 'org') {\n      await logOrgActivity(\n        writer.orgId,\n        actor,\n        `Installed the “${recipe.title}” recipe on ${siteLabel(writer.host)}`,\n        { type: 'host', id: hostId, name: siteLabel(writer.host) },\n      )\n    }\n    const answer: CrmRecipeInstallResult = {\n      ok: true,\n      actionId,\n      name: action.name,\n      recipeId: recipe.id,\n    }\n    res.status(201).json(answer)\n  } catch (error) {\n    console.error('[crm] recipe install failed', hostId, error)\n    res.status(500).json({ error: 'The recipe could not be installed' })\n  }\n}\n\n/**\n * `POST /api/crm/recipe-status`\n *\n * The body names the organization (`orgId`) for every one of its sites, or\n * one site (`hostId`) for that site alone. Answers `ok: true` and `sites`,\n * one CrmRecipeSiteStatus per site swept.\n */\nexport const crmRecipeStatusHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body: Record<string, unknown> =\n    typeof req.body === 'string' ? JSON.parse(req.body) : (req.body ?? {})\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing orgId or hostId' })\n    return\n  }\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    let orgId: string | null = null\n    let org: unknown\n    if (scope.level === 'org') {\n      const caller = await authorizeOrgCaller(req, scope.orgId, {\n        needs: 'data.manage',\n        refusal: STATUS_REFUSAL,\n      })\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      orgId = caller.orgId\n      org = caller.org\n    } else {\n      const caller = await authorizeSiteWriter(req, scope.hostId)\n      if (caller.ok === false) {\n        res.status(caller.status).json({ error: caller.error })\n        return\n      }\n      org = caller.org\n    }\n    // The plan after the caller, before any site is read (AGL-2851).\n    const suite = crmSuiteRefusal(org, 'Reading which sites carry a CRM recipe')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const hostIds = orgId ? await orgHostIds(firestore, orgId) : [scope.hostId]\n    const sites = await Promise.all(\n      hostIds.map(async (hostId): Promise<CrmRecipeSiteStatus> => {\n        const stamps = readSiteStamps(\n          await stampsQuery(firestore.collection('hosts').doc(hostId)).get(),\n        )\n        return {\n          hostId,\n          installed: [...stamps.installed.keys()],\n          unstamped: stamps.unstamped,\n        }\n      }),\n    )\n    res.status(200).json({ ok: true, sites })\n  } catch (error) {\n    console.error('[crm] recipe status failed', error)\n    res.status(500).json({ error: 'The recipe status could not be read' })\n  }\n}\n"],"names":["ACTIONS_MAX_PER_HOST","checkEntitlement","createResourceUid","hostRoleCanWrite","planLabelGrantingFeature","siteInteractionDocument","interactionRecipeStamp","validateStoredInteraction","firebaseAdmin","getOrgForHost","logHostActivity","logOrgActivity","isRefusedIdToken","FieldValue","CRM_API_ROUTES","crmActionRecipe","authorizeOrgCaller","orgHostIds","readCrmRouteScope","crmSuiteRefusal","CRM_RECIPE_INSTALL_ROUTE","recipeInstall","CRM_RECIPE_STATUS_ROUTE","recipeStatus","INSTALL_REFUSAL","STATUS_REFUSAL","typed","value","max","String","trim","slice","authorizeSiteWriter","req","hostId","host","decoded","authorization","headers","idToken","startsWith","length","undefined","ok","status","error","app","auth","verifyIdToken","console","staff","firestore","collection","doc","get","exists","role","uid","resolved","email","orgId","org","siteOfOrg","siteLabel","id","readSiteStamps","rows","installed","Map","unstamped","live","row","docs","stamp","data","has","set","stampsQuery","select","crmRecipeInstallHandler","res","method","setHeader","json","body","JSON","parse","scope","recipe","recipeId","formId","writer","level","caller","needs","refusal","suite","hostRef","ref","form","picks","kind","snapshot","name","facts","routesLeads","lead","action","build","picked","problem","actionId","outcome","runTransaction","tx","stamps","existing","create","createdAt","serverTimestamp","updatedAt","createdBy","actor","type","title","answer","crmRecipeStatusHandler","hostIds","sites","Promise","all","map","keys"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCC,GAED,SACEA,oBAAoB,EAEpBC,gBAAgB,EAChBC,iBAAiB,EACjBC,gBAAgB,EAChBC,wBAAwB,EAGxBC,uBAAuB,QAClB,sBAAqB;AAC5B,SAASC,sBAAsB,QAAQ,kDAAiD;AACxF,SAASC,yBAAyB,QAAQ,sDAAqD;AAC/F,SACEC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,cAAc,QACT,2BAA0B;AACjC,SAASC,gBAAgB,QAAQ,mDAAkD;AACnF,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SACEC,cAAc,QAIT,6BAAyB;AAChC,SAASC,eAAe,QAAgC,0BAAsB;AAC9E,SAASC,kBAAkB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAChF,SAASC,eAAe,QAAQ,kBAAc;AAE9C,OAAO,MAAMC,2BAA2BN,eAAeO,aAAa,CAAA;AACpE,OAAO,MAAMC,0BAA0BR,eAAeS,YAAY,CAAA;AAelE,MAAMC,kBACJ;AACF,MAAMC,iBACJ;AAEF,SAASC,MAAMC,KAAc,EAAEC,GAAW;IACxC,OAAOC,OAAOF,gBAAAA,QAAS,IACpBG,IAAI,GACJC,KAAK,CAAC,GAAGH;AACd;AAEA;;;;;CAKC,GACD,eAAeI,oBACbC,GAAqB,EACrBC,MAAc;QAEeD,4BAuBfE,WASLC;IAhCT,MAAMC,gBAAgBR,QAAOI,6BAAAA,IAAIK,OAAO,CAACD,aAAa,YAAzBJ,6BAA6B;IAC1D,MAAMM,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcN,KAAK,CAAC,UAAUU,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAO;QAAEI,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAkB;IACxE,IAAIT;IACJ,IAAI;QACFA,UAAU,MAAM5B,cAAcsC,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACT;IAC3D,EAAE,OAAOM,OAAO;QACd,sEAAsE;QACtE,mCAAmC;QACnC,IAAIjC,iBAAiBiC,QAAQ,OAAO;YAAEF,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAkB;QACvFI,QAAQJ,KAAK,CAAC,sDAAsDA;QACpE,OAAO;YAAEF,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAA+C;IACzF;IACA,MAAMK,QAAQd,QAAQc,KAAK,KAAK;IAChC,MAAMf,OAAO,MAAM3B,cAChBsC,GAAG,GACHK,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACnB,QACJoB,GAAG;IACN,IAAI,CAACnB,KAAKoB,MAAM,EAAE,OAAO;QAAEZ,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAe;IACzE,MAAMW,OAAO,EAACrB,YAAAA,KAAKmB,GAAG,CAAC,0BAATnB,YAA2B,CAAC,EAAE,CAACC,QAAQqB,GAAG,CAAC;IACzD,IAAI,CAACP,SAAS,CAAC/C,iBAAiBqD,OAAO;QACrC,OAAO;YAAEb,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAmC;IAC7E;IACA,MAAMa,WAAW,MAAMjD,cAAcyB;IACrC,IAAI,CAACwB,UAAU,OAAO;QAAEf,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAe;IACtE,OAAO;QACLF,IAAI;QACJc,KAAKrB,QAAQqB,GAAG;QAChBE,KAAK,GAAEvB,iBAAAA,QAAQuB,KAAK,YAAbvB,iBAAiB;QACxBc;QACAU,OAAOF,SAASE,KAAK;QACrBC,KAAKH,SAASG,GAAG;QACjB1B;IACF;AACF;AAEA;;;;CAIC,GACD,eAAe2B,UACbX,SAAsC,EACtCjB,MAAc,EACd0B,KAAa;IAEb,MAAMzB,OAAO,MAAMgB,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACnB,QAAQoB,GAAG;IAChE,OAAOnB,KAAKoB,MAAM,IAAIpB,KAAKmB,GAAG,CAAC,aAAaM,QAAQzB,OAAO;AAC7D;AAEA,8EAA8E,GAC9E,SAAS4B,UAAU5B,IAAwC;QAEhDA,WACAA;IAFT,OACEN,QAAOM,YAAAA,KAAKmB,GAAG,CAAC,0BAATnB,YAA2B,IAAIL,IAAI,MAC1CD,QAAOM,aAAAA,KAAKmB,GAAG,CAAC,wBAATnB,aAAyB,IAAIL,IAAI,MACxCK,KAAK6B,EAAE;AAEX;AAEA;;;;;CAKC,GACD,SAASC,eAAeC,IAAqC;IAK3D,MAAMC,YAAY,IAAIC;IACtB,IAAIC,YAAY;IAChB,IAAIC,OAAO;IACX,KAAK,MAAMC,OAAOL,KAAKM,IAAI,CAAE;QAC3B,IAAID,IAAIjB,GAAG,CAAC,gBAAgB,MAAM;QAClCgB,QAAQ;QACR,MAAMG,QAAQnE,uBAAuBiE,IAAIG,IAAI;QAC7C,IAAID,UAAU/B,WAAW2B,aAAa;aACjC,IAAII,SAAS,CAACN,UAAUQ,GAAG,CAACF,QAA6B;YAC5DN,UAAUS,GAAG,CAACH,OAA4BF,IAAIP,EAAE;QAClD;IACF;IACA,OAAO;QAAEG;QAAWE;QAAWC;IAAK;AACtC;AAEA,MAAMO,cAAc,CAAC1C,OACnBA,KAAKiB,UAAU,CAAC,WAAW0B,MAAM,CAAC,UAAU;AAE9C;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,0BAA4C,OAAO9C,KAAK+C;QAOV/C;IANzD,IAAIA,IAAIgD,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMuC,OACJ,OAAOnD,IAAImD,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACrD,IAAImD,IAAI,KAAKnD,YAAAA,IAAImD,IAAI,YAARnD,YAAY,CAAC;IACtE,MAAMsD,QAAQrE,kBAAkBkE;IAChC,MAAMlD,iBAASqD,yBAAAA,MAAOrD,MAAM,mBAAI;IAChC,IAAI,CAACqD,SAAS,CAACrD,QAAQ;QACrB8C,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM2C,SAASzE,gBAAgBW,MAAM0D,KAAKK,QAAQ,EAAE;IACpD,IAAI,CAACD,QAAQ;QACXR,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAgB;QAC9C;IACF;IACA,MAAM6C,SAAShE,MAAM0D,KAAKM,MAAM,EAAE;IAElC,IAAI;YA0DEF;QAzDJ,MAAMrC,YAAY3C,cAAcsC,GAAG,GAAGK,SAAS;QAC/C,IAAIwC;QACJ,IAAIJ,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMC,SAAS,MAAM7E,mBAAmBiB,KAAKsD,MAAM3B,KAAK,EAAE;gBACxDkC,OAAO;gBACPC,SAASvE;YACX;YACA,IAAIqE,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACA,MAAMV,OAAO,MAAM2B,UAAUX,WAAWjB,QAAQ2D,OAAOjC,KAAK;YAC5D,IAAI,CAACzB,MAAM;gBACT6C,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAAe;gBAC7C;YACF;YACA8C,SAAS;gBACPhD,IAAI;gBACJc,KAAKoC,OAAOpC,GAAG;gBACfE,OAAOkC,OAAOlC,KAAK;gBACnBT,OAAO2C,OAAO3C,KAAK;gBACnBU,OAAOiC,OAAOjC,KAAK;gBACnBC,KAAKgC,OAAOhC,GAAG;gBACf1B;YACF;QACF,OAAO;YACL,MAAM0D,SAAS,MAAM7D,oBAAoBC,KAAKC;YAC9C,IAAI2D,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACA8C,SAASE;QACX;QAEA,oEAAoE;QACpE,qEAAqE;QACrE,iCAAiC;QACjC,MAAMG,QAAQ7E,gBAAgBwE,OAAO9B,GAAG,EAAE;QAC1C,IAAImC,OAAO;YACThB,IAAIpC,MAAM,CAACoD,MAAMpD,MAAM,EAAEuC,IAAI,CAACa,MAAMZ,IAAI;YACxC;QACF;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,CAACnF,iBAAiB0F,OAAO9B,GAAG,EAAE,YAAY;gBAGJzD;YAFxC4E,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;gBACnBtC,OACE,CAAC,iCAAiC,GAAEzC,4BAAAA,yBAAyB,sBAAzBA,4BAAuC,MAAM,CAAC,CAAC,GACnF;YACJ;YACA;QACF;QAEA,MAAM6F,UAAUN,OAAOxD,IAAI,CAAC+D,GAAG;QAC/B,IAAIC;QACJ,IAAIX,EAAAA,gBAAAA,OAAOY,KAAK,qBAAZZ,cAAca,IAAI,MAAK,QAAQ;gBAkBlBC;gBAGSA;YApBxB,IAAI,CAACZ,QAAQ;gBACXV,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAA+B;gBAC7D;YACF;YACA,MAAMyD,WAAW,MAAML,QAAQ7C,UAAU,CAAC,SAASC,GAAG,CAACqC,QAAQpC,GAAG;YAClE,IAAI,CAACgD,SAAS/C,MAAM,EAAE;gBACpByB,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAAe;gBAC7C;YACF;YACA,mEAAmE;YACnE,4EAA4E;YAC5E,IAAIyD,SAAShD,GAAG,CAAC,iBAAiB,MAAM;gBACtC0B,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;oBAAEtC,OAAO;gBAA6C;gBAC3E;YACF;YACAsD,OAAO;gBACLnC,IAAIsC,SAAStC,EAAE;gBACfuC,MAAM1E,QAAOyE,gBAAAA,SAAShD,GAAG,CAAC,0BAAbgD,gBAA+B,IAAIxE,IAAI,MAAMwE,SAAStC,EAAE;gBACrE,+DAA+D;gBAC/D,+DAA+D;gBAC/DwC,OAAO;oBAAEC,aAAaH,EAAAA,iBAAAA,SAAShD,GAAG,CAAC,+BAAbgD,eAAyBI,IAAI,MAAK;gBAAK;YAC/D;QACF;QAEA,MAAMC,SAASnB,OAAOoB,KAAK,CAACT,OAAO;YAAEU,QAAQV;QAAK,IAAIzD;QACtD,wEAAwE;QACxE,oEAAoE;QACpE,MAAMoE,UAAUvG,0BAA0BoG;QAC1C,IAAIG,SAAS;YACX9B,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;gBAAEtC,OAAOiE;YAAQ;YACtC;QACF;QAEA,MAAMC,WAAW7G;QACjB,MAAM8G,UAAU,MAAM7D,UAAU8D,cAAc,CAAC,OAAOC;YACpD,MAAMC,SAASlD,eAAe,MAAMiD,GAAG5D,GAAG,CAACuB,YAAYoB;YACvD,MAAMmB,WAAWD,OAAOhD,SAAS,CAACb,GAAG,CAACkC,OAAOxB,EAAE;YAC/C,IAAIoD,UAAU;gBACZ,OAAO;oBACLxE,QAAQ;oBACRC,OAAO;oBACPkE,UAAUK;gBACZ;YACF;YACA,IAAID,OAAO7C,IAAI,IAAItE,sBAAsB;gBACvC,OAAO;oBACL4C,QAAQ;oBACRC,OAAO,CAAC,uCAAuC,EAAE7C,qBAAqB,SAAS,CAAC;gBAClF;YACF;YACAkH,GAAGG,MAAM,CAACpB,QAAQ7C,UAAU,CAAC,WAAWC,GAAG,CAAC0D,WAAW,aAClD1G,wBAAwBsG;gBAC3BW,WAAWzG,WAAW0G,eAAe;gBACrCC,WAAW3G,WAAW0G,eAAe;gBACrCE,WAAW9B,OAAOlC,GAAG;;YAEvB,OAAO;QACT;QACA,IAAIuD,SAAS;YACXhC,IAAIpC,MAAM,CAACoE,QAAQpE,MAAM,EAAEuC,IAAI,CAAC;gBAC9BtC,OAAOmE,QAAQnE,KAAK;eAChBmE,QAAQD,QAAQ,GAAG;gBAAEA,UAAUC,QAAQD,QAAQ;YAAC,IAAI,CAAC;YAE3D;QACF;QAEA,MAAMW,QAAQ;YAAEjE,KAAKkC,OAAOlC,GAAG;YAAEE,OAAOgC,OAAOhC,KAAK;QAAC;QACrD,MAAMjD,gBAAgBwB,QAAQwF,OAAO,oBAAoB;YACvDC,MAAM;YACN3D,IAAI+C;YACJR,MAAMI,OAAOJ,IAAI;QACnB;QACA,oEAAoE;QACpE,IAAIhB,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMjF,eACJgF,OAAO/B,KAAK,EACZ8D,OACA,CAAC,eAAe,EAAElC,OAAOoC,KAAK,CAAC,YAAY,EAAE7D,UAAU4B,OAAOxD,IAAI,GAAG,EACrE;gBAAEwF,MAAM;gBAAQ3D,IAAI9B;gBAAQqE,MAAMxC,UAAU4B,OAAOxD,IAAI;YAAE;QAE7D;QACA,MAAM0F,SAAiC;YACrClF,IAAI;YACJoE;YACAR,MAAMI,OAAOJ,IAAI;YACjBd,UAAUD,OAAOxB,EAAE;QACrB;QACAgB,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC0C;IACvB,EAAE,OAAOhF,OAAO;QACdI,QAAQJ,KAAK,CAAC,+BAA+BX,QAAQW;QACrDmC,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAoC;IACpE;AACF,EAAC;AAED;;;;;;CAMC,GACD,OAAO,MAAMiF,yBAA2C,OAAO7F,KAAK+C;QAOT/C;IANzD,IAAIA,IAAIgD,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAqB;QACnD;IACF;IACA,MAAMuC,OACJ,OAAOnD,IAAImD,IAAI,KAAK,WAAWC,KAAKC,KAAK,CAACrD,IAAImD,IAAI,KAAKnD,YAAAA,IAAImD,IAAI,YAARnD,YAAY,CAAC;IACtE,MAAMsD,QAAQrE,kBAAkBkE;IAChC,IAAI,CAACG,OAAO;QACVP,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAA0B;QACxD;IACF;IACA,IAAI;QACF,MAAMM,YAAY3C,cAAcsC,GAAG,GAAGK,SAAS;QAC/C,IAAIS,QAAuB;QAC3B,IAAIC;QACJ,IAAI0B,MAAMK,KAAK,KAAK,OAAO;YACzB,MAAMC,SAAS,MAAM7E,mBAAmBiB,KAAKsD,MAAM3B,KAAK,EAAE;gBACxDkC,OAAO;gBACPC,SAAStE;YACX;YACA,IAAIoE,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACAe,QAAQiC,OAAOjC,KAAK;YACpBC,MAAMgC,OAAOhC,GAAG;QAClB,OAAO;YACL,MAAMgC,SAAS,MAAM7D,oBAAoBC,KAAKsD,MAAMrD,MAAM;YAC1D,IAAI2D,OAAOlD,EAAE,KAAK,OAAO;gBACvBqC,IAAIpC,MAAM,CAACiD,OAAOjD,MAAM,EAAEuC,IAAI,CAAC;oBAAEtC,OAAOgD,OAAOhD,KAAK;gBAAC;gBACrD;YACF;YACAgB,MAAMgC,OAAOhC,GAAG;QAClB;QACA,iEAAiE;QACjE,MAAMmC,QAAQ7E,gBAAgB0C,KAAK;QACnC,IAAImC,OAAO;YACThB,IAAIpC,MAAM,CAACoD,MAAMpD,MAAM,EAAEuC,IAAI,CAACa,MAAMZ,IAAI;YACxC;QACF;QACA,MAAM2C,UAAUnE,QAAQ,MAAM3C,WAAWkC,WAAWS,SAAS;YAAC2B,MAAMrD,MAAM;SAAC;QAC3E,MAAM8F,QAAQ,MAAMC,QAAQC,GAAG,CAC7BH,QAAQI,GAAG,CAAC,OAAOjG;YACjB,MAAMiF,SAASlD,eACb,MAAMY,YAAY1B,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACnB,SAASoB,GAAG;YAElE,OAAO;gBACLpB;gBACAiC,WAAW;uBAAIgD,OAAOhD,SAAS,CAACiE,IAAI;iBAAG;gBACvC/D,WAAW8C,OAAO9C,SAAS;YAC7B;QACF;QAEFW,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAExC,IAAI;YAAMqF;QAAM;IACzC,EAAE,OAAOnF,OAAO;QACdI,QAAQJ,KAAK,CAAC,8BAA8BA;QAC5CmC,IAAIpC,MAAM,CAAC,KAAKuC,IAAI,CAAC;YAAEtC,OAAO;QAAsC;IACtE;AACF,EAAC"}

package/src/lib/server/record-email-state.js

@@ -20,7 +20,7 @@ import { findContactByEmail, firebaseAdmin } from "@aglyn/tenant-data-admin";
 import { FieldValue } from "firebase-admin/firestore";
 import { BUNDLE_ID } from "../constants/bundle-common.js";
 import { recordContactEmailEngagement } from "./contact-email-engagement.js";
-import { nurtureReachedLeads } from "./lead-nurturing.js";
+import { nurtureReachedLeads, workRepliedLeads } from "./lead-nurturing.js";
 const NONE = {
     records: 0
 };
@@ -144,6 +144,12 @@ export function createCrmRecordEmailStateWriter(deps) {
             return {
                 records: await nurtureReachedLeads(deps.firestore(), request)
             };
+        },
+        // A reply moves a lead nobody had worked to Working (AGL-3080).
+        async replied (request) {
+            return {
+                records: await workRepliedLeads(deps.firestore(), request)
+            };
         }
     };
 }

package/src/lib/server/record-email-state.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  CRM_EMAIL_STATUS_NONE,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { recordContactEmailEngagement } from './contact-email-engagement'\nimport { nurtureReachedLeads } from './lead-nurturing'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n  withdraw = false,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  /*\n   * A WITHDRAWAL takes back the one verdict it names (AGL-3328): the\n   * deliverability check's \"Would bounce\" once the domain takes mail again.\n   * Any other standing verdict — a bounce DNS cannot see — is left alone.\n   */\n  if (withdraw) {\n    if (current?.status !== incoming.status) return false\n    await ref.update({\n      [EMAIL_STATE_FIELD]: FieldValue.delete(),\n      [CRM_EMAIL_STATUS_FIELD]: CRM_EMAIL_STATUS_NONE,\n    })\n    return true\n  }\n  // The deliverability check saying again what the record already holds:\n  // the date it was first found is the one worth keeping.\n  if (incoming.source === 'check' && current?.status === incoming.status) return false\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      const withdraw = request.withdraw === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force, withdraw))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n          withdraw,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n    async engaged(request) {\n      try {\n        const records = await recordContactEmailEngagement({\n          hostId: request.hostId,\n          events: request.events,\n          firestore: deps.firestore(),\n        })\n        return { records }\n      } catch (error) {\n        console.error('[crm] the contacts could not be stamped with an engagement', request.hostId, error)\n        return NONE\n      }\n    },\n    // A delivered campaign moves the New leads it reached to Nurturing (AGL-3446).\n    async reached(request) {\n      return { records: await nurtureReachedLeads(deps.firestore(), request) }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","CRM_EMAIL_STATUS_NONE","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","FieldValue","BUNDLE_ID","recordContactEmailEngagement","nurtureReachedLeads","NONE","records","stampRecord","ref","incoming","force","withdraw","snapshot","get","exists","current","data","status","update","delete","source","next","atMs","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","engaged","events","reached","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,qBAAqB,EACrBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,mBAAmB,QAAQ,sBAAkB;AAkCtD,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc,EACdC,WAAW,KAAK;IAEhB,MAAMC,WAAW,MAAMJ,IAAIK,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUjB,eAAec,SAASI,IAAI;IAC5C;;;;GAIC,GACD,IAAIL,UAAU;QACZ,IAAII,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;QAChD,MAAMT,IAAIU,MAAM,CAAC;YACf,CAACxB,kBAAkB,EAAEO,WAAWkB,MAAM;YACtC,CAAC3B,uBAAuB,EAAEC;QAC5B;QACA,OAAO;IACT;IACA,uEAAuE;IACvE,wDAAwD;IACxD,IAAIgB,SAASW,MAAM,KAAK,WAAWL,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;IAC/E,MAAMI,OAAO1B,eAAeoB,SAASN,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEW,SAASN,WACRA,WACCM,KAAKJ,MAAM,KAAKF,QAAQE,MAAM,IAC9BI,KAAKC,IAAI,KAAKP,QAAQO,IAAI,IAC1BD,KAAKD,MAAM,KAAKL,QAAQK,MAAM,IAC9BC,KAAKE,MAAM,KAAKR,QAAQQ,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMf,IAAIgB,GAAG,CACX;QAAE,CAAC9B,kBAAkB,EAAE2B;QAAM,CAAC7B,uBAAuB,EAAE6B,KAAKJ,MAAM;IAAC,GACnE;QAAEQ,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQrB,GAAG;IAChE,OAAOgB,KAAKf,MAAM,GAAGiB,QAAOF,YAAAA,KAAKhB,GAAG,CAAC,oBAATgB,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQ5C,sBAAsBgC,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQ3C,UAAU2C,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOpC;YAC3B,MAAMsB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOrC;YACT;YACA,IAAI,CAAC2B,OAAO,OAAO3B;YACnB,MAAMuC,QAAoB;gBACxB3B,QAAQW,QAAQgB,KAAK,CAAC3B,MAAM;gBAC5BK,MAAMuB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACtB,IAAI,KAAKM,QAAQgB,KAAK,CAACtB,IAAI,GAAG,IAAIM,QAAQgB,KAAK,CAACtB,IAAI,GAAGyB,KAAKC,GAAG;gBACnG5B,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BG,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMzC,QAAQkB,QAAQlB,KAAK,KAAK;YAChC,MAAMC,WAAWiB,QAAQjB,QAAQ,KAAK;YACtC,IAAIL,UAAU;YACd,IAAI;gBACF,MAAM8C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMtD,mBAAmBqD,UAAUZ;gBACnD,IAAIa,WAAY,MAAM9C,YAAY8C,QAAQ7C,GAAG,EAAEoC,OAAOlC,OAAOC,WAAYL,WAAW;YACtF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMnC,YACRoB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACAlC,OACAC,WACC;oBACDL,WAAW;gBACb;YACF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEpC;YAAQ;QACnB;QACA,MAAMgD,SAAQ1B,OAAO;YACnB,IAAI;gBACF,MAAMtB,UAAU,MAAMH,6BAA6B;oBACjD+B,QAAQN,QAAQM,MAAM;oBACtBqB,QAAQ3B,QAAQ2B,MAAM;oBACtB5B,WAAWW,KAAKX,SAAS;gBAC3B;gBACA,OAAO;oBAAErB;gBAAQ;YACnB,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8Dd,QAAQM,MAAM,EAAEQ;gBAC5F,OAAOrC;YACT;QACF;QACA,+EAA+E;QAC/E,MAAMmD,SAAQ5B,OAAO;YACnB,OAAO;gBAAEtB,SAAS,MAAMF,oBAAoBkC,KAAKX,SAAS,IAAIC;YAAS;QACzE;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAAS6B;IACd,OAAO;QAAE9B,WAAW,IAAM3B,cAAc0D,GAAG,GAAG/B,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAASgC,kCACdrB,OAAgCmB,gCAAgC;IAEhElE,qCAAqC8C,gCAAgCC,OAAO;QAAEsB,UAAU1D;IAAU;AACpG"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordEmailStateWriter,\n  type PluginRecordEmailStateReport,\n  type PluginRecordEmailStateRequest,\n  type PluginRecordEmailStateWriter,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-email-state'\nimport {\n  CRM_EMAIL_STATUS_FIELD,\n  CRM_EMAIL_STATUS_NONE,\n  EMAIL_STATE_FIELD,\n  nextEmailState,\n  normalizeContactEmail,\n  personKey,\n  readEmailState,\n  type EmailState,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail, firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { recordContactEmailEngagement } from './contact-email-engagement'\nimport { nurtureReachedLeads, workRepliedLeads } from './lead-nurturing'\n\n/**\n * THE CRM'S WRITER ON THE CORE'S RECORD EMAIL-STATE SEAM (AGL-3245).\n *\n * A sender filed a verdict on an address — the outreach runtime's bounce,\n * the campaign webhook's complaint, a member's do-not-contact mark, the\n * unsubscribe link — and says so here; this writes it onto every record\n * the address is, as `emailState`, so the record a person reads and the\n * lists a send consults agree.\n *\n * One address can be several records: the contact the organization holds\n * (found through the address index, `findContactByEmail`), and a lead on\n * each site the organization owns — leads are keyed by `personKey`, so a\n * lead is addressed directly under every host. All of them are stamped;\n * the verdict is about the address, not about which record a rep opened.\n * A caller that knows only the site reads the organization off it.\n *\n * The write keeps the STRONGER verdict (`nextEmailState`): a member's\n * do-not-contact mark is not undone by a later bounce, and `ok` lands only\n * when a caller forces it. `updatedAt` is left alone — a verdict is\n * something that happened to the person, not an edit the team made, and a\n * list sorted on recency must not reshuffle on a bounce.\n *\n * Never throws: the list is the control, and a record that could not be\n * stamped is a chip a page goes without, logged.\n */\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface CrmRecordEmailStateDeps {\n  firestore(): Firestore\n}\n\nconst NONE: PluginRecordEmailStateReport = { records: 0 }\n\n/**\n * Applies the verdict to one record; answers whether it moved. A read then\n * a merge rather than a transaction: two verdicts landing together each\n * compare against a state at least as old as their own, and the ranking\n * makes the order of two writes of the same rank immaterial.\n */\nasync function stampRecord(\n  ref: FirebaseFirestore.DocumentReference,\n  incoming: EmailState,\n  force: boolean,\n  withdraw = false,\n): Promise<boolean> {\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return false\n  const current = readEmailState(snapshot.data() as Record<string, unknown>)\n  /*\n   * A WITHDRAWAL takes back the one verdict it names (AGL-3328): the\n   * deliverability check's \"Would bounce\" once the domain takes mail again.\n   * Any other standing verdict — a bounce DNS cannot see — is left alone.\n   */\n  if (withdraw) {\n    if (current?.status !== incoming.status) return false\n    await ref.update({\n      [EMAIL_STATE_FIELD]: FieldValue.delete(),\n      [CRM_EMAIL_STATUS_FIELD]: CRM_EMAIL_STATUS_NONE,\n    })\n    return true\n  }\n  // The deliverability check saying again what the record already holds:\n  // the date it was first found is the one worth keeping.\n  if (incoming.source === 'check' && current?.status === incoming.status) return false\n  const next = nextEmailState(current, incoming, { force })\n  // The current verdict stood, or the same verdict arrived again — a second\n  // run of the caller — and there is nothing to write.\n  if (\n    next === current ||\n    (current &&\n      next.status === current.status &&\n      next.atMs === current.atMs &&\n      next.source === current.source &&\n      next.detail === current.detail)\n  ) {\n    return false\n  }\n  // `emailStatus` beside it: the verdict as the CRM lists filter by it\n  // (AGL-3321) — a key a query can ask, where the state is a map.\n  await ref.set(\n    { [EMAIL_STATE_FIELD]: next, [CRM_EMAIL_STATUS_FIELD]: next.status },\n    { merge: true },\n  )\n  return true\n}\n\n/** The organization a request names, or the one its site belongs to. */\nasync function resolveOrgId(firestore: Firestore, request: PluginRecordEmailStateRequest): Promise<string> {\n  const named = String(request.orgId ?? '').trim()\n  if (named) return named\n  const hostId = String(request.hostId ?? '').trim()\n  if (!hostId) return ''\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  return host.exists ? String(host.get('orgId') ?? '') : ''\n}\n\nexport function createCrmRecordEmailStateWriter(deps: CrmRecordEmailStateDeps): PluginRecordEmailStateWriter {\n  return {\n    async stamp(request) {\n      const email = normalizeContactEmail(request.email)\n      const key = email ? personKey(email) : null\n      if (!email || !key) return NONE\n      const firestore = deps.firestore()\n      let orgId: string\n      try {\n        orgId = await resolveOrgId(firestore, request)\n      } catch (error) {\n        console.error('[crm] the site’s organization could not be read for an email state', request.hostId, error)\n        return NONE\n      }\n      if (!orgId) return NONE\n      const state: EmailState = {\n        status: request.state.status,\n        atMs: Number.isFinite(request.state.atMs) && request.state.atMs > 0 ? request.state.atMs : Date.now(),\n        source: request.state.source,\n        detail: request.state.detail\n          ? String(request.state.detail).replace(/\\s+/g, ' ').trim().slice(0, 500)\n          : null,\n        ...(request.state.enrollmentId ? { enrollmentId: request.state.enrollmentId } : {}),\n      }\n      const force = request.force === true\n      const withdraw = request.withdraw === true\n      let records = 0\n      try {\n        const contacts = firestore.collection('orgs').doc(orgId).collection('contacts')\n        const contact = await findContactByEmail(contacts, email)\n        if (contact && (await stampRecord(contact.ref, state, force, withdraw))) records += 1\n      } catch (error) {\n        console.error('[crm] the contact could not be stamped with an email state', orgId, error)\n      }\n      try {\n        /*\n         * ONE ORG ROW. A bounce or a do-not-contact mark is the platform's\n         * verdict on the ADDRESS, and since AGL-3277 there is one document\n         * carrying it — the per-site loop beside this had nothing left to\n         * find once AGL-3276 emptied the host path.\n         */\n        if (await stampRecord(\n          firestore.collection('orgs').doc(orgId).collection('leads').doc(key),\n          state,\n          force,\n          withdraw,\n        )) {\n          records += 1\n        }\n      } catch (error) {\n        console.error('[crm] the leads could not be stamped with an email state', orgId, error)\n      }\n      return { records }\n    },\n    async engaged(request) {\n      try {\n        const records = await recordContactEmailEngagement({\n          hostId: request.hostId,\n          events: request.events,\n          firestore: deps.firestore(),\n        })\n        return { records }\n      } catch (error) {\n        console.error('[crm] the contacts could not be stamped with an engagement', request.hostId, error)\n        return NONE\n      }\n    },\n    // A delivered campaign moves the New leads it reached to Nurturing (AGL-3446).\n    async reached(request) {\n      return { records: await nurtureReachedLeads(deps.firestore(), request) }\n    },\n    // A reply moves a lead nobody had worked to Working (AGL-3080).\n    async replied(request) {\n      return { records: await workRepliedLeads(deps.firestore(), request) }\n    },\n  }\n}\n\n/** The platform's own dependencies. Specs build their own. */\nexport function defaultCrmRecordEmailStateDeps(): CrmRecordEmailStateDeps {\n  return { firestore: () => firebaseAdmin.app().firestore() }\n}\n\n/** Registers the CRM as the workspace's record system on the email-state seam. */\nexport function registerCrmRecordEmailStateWriter(\n  deps: CrmRecordEmailStateDeps = defaultCrmRecordEmailStateDeps(),\n): void {\n  registerPluginRecordEmailStateWriter(createCrmRecordEmailStateWriter(deps), { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginRecordEmailStateWriter","CRM_EMAIL_STATUS_FIELD","CRM_EMAIL_STATUS_NONE","EMAIL_STATE_FIELD","nextEmailState","normalizeContactEmail","personKey","readEmailState","findContactByEmail","firebaseAdmin","FieldValue","BUNDLE_ID","recordContactEmailEngagement","nurtureReachedLeads","workRepliedLeads","NONE","records","stampRecord","ref","incoming","force","withdraw","snapshot","get","exists","current","data","status","update","delete","source","next","atMs","detail","set","merge","resolveOrgId","firestore","request","host","named","String","orgId","trim","hostId","collection","doc","createCrmRecordEmailStateWriter","deps","stamp","email","key","error","console","state","Number","isFinite","Date","now","replace","slice","enrollmentId","contacts","contact","engaged","events","reached","replied","defaultCrmRecordEmailStateDeps","app","registerCrmRecordEmailStateWriter","pluginId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,oCAAoC,QAI/B,wDAAuD;AAC9D,SACEC,sBAAsB,EACtBC,qBAAqB,EACrBC,iBAAiB,EACjBC,cAAc,EACdC,qBAAqB,EACrBC,SAAS,EACTC,cAAc,QAET,sBAAqB;AAC5B,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,2BAA0B;AAC5E,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,4BAA4B,QAAQ,gCAA4B;AACzE,SAASC,mBAAmB,EAAEC,gBAAgB,QAAQ,sBAAkB;AAkCxE,MAAMC,OAAqC;IAAEC,SAAS;AAAE;AAExD;;;;;CAKC,GACD,eAAeC,YACbC,GAAwC,EACxCC,QAAoB,EACpBC,KAAc,EACdC,WAAW,KAAK;IAEhB,MAAMC,WAAW,MAAMJ,IAAIK,GAAG;IAC9B,IAAI,CAACD,SAASE,MAAM,EAAE,OAAO;IAC7B,MAAMC,UAAUlB,eAAee,SAASI,IAAI;IAC5C;;;;GAIC,GACD,IAAIL,UAAU;QACZ,IAAII,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;QAChD,MAAMT,IAAIU,MAAM,CAAC;YACf,CAACzB,kBAAkB,EAAEO,WAAWmB,MAAM;YACtC,CAAC5B,uBAAuB,EAAEC;QAC5B;QACA,OAAO;IACT;IACA,uEAAuE;IACvE,wDAAwD;IACxD,IAAIiB,SAASW,MAAM,KAAK,WAAWL,CAAAA,2BAAAA,QAASE,MAAM,MAAKR,SAASQ,MAAM,EAAE,OAAO;IAC/E,MAAMI,OAAO3B,eAAeqB,SAASN,UAAU;QAAEC;IAAM;IACvD,0EAA0E;IAC1E,qDAAqD;IACrD,IACEW,SAASN,WACRA,WACCM,KAAKJ,MAAM,KAAKF,QAAQE,MAAM,IAC9BI,KAAKC,IAAI,KAAKP,QAAQO,IAAI,IAC1BD,KAAKD,MAAM,KAAKL,QAAQK,MAAM,IAC9BC,KAAKE,MAAM,KAAKR,QAAQQ,MAAM,EAChC;QACA,OAAO;IACT;IACA,qEAAqE;IACrE,gEAAgE;IAChE,MAAMf,IAAIgB,GAAG,CACX;QAAE,CAAC/B,kBAAkB,EAAE4B;QAAM,CAAC9B,uBAAuB,EAAE8B,KAAKJ,MAAM;IAAC,GACnE;QAAEQ,OAAO;IAAK;IAEhB,OAAO;AACT;AAEA,sEAAsE,GACtE,eAAeC,aAAaC,SAAoB,EAAEC,OAAsC;QACjEA,gBAECA,iBAGMC;IAL5B,MAAMC,QAAQC,QAAOH,iBAAAA,QAAQI,KAAK,YAAbJ,iBAAiB,IAAIK,IAAI;IAC9C,IAAIH,OAAO,OAAOA;IAClB,MAAMI,SAASH,QAAOH,kBAAAA,QAAQM,MAAM,YAAdN,kBAAkB,IAAIK,IAAI;IAChD,IAAI,CAACC,QAAQ,OAAO;IACpB,MAAML,OAAO,MAAMF,UAAUQ,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQrB,GAAG;IAChE,OAAOgB,KAAKf,MAAM,GAAGiB,QAAOF,YAAAA,KAAKhB,GAAG,CAAC,oBAATgB,YAAqB,MAAM;AACzD;AAEA,OAAO,SAASQ,gCAAgCC,IAA6B;IAC3E,OAAO;QACL,MAAMC,OAAMX,OAAO;YACjB,MAAMY,QAAQ7C,sBAAsBiC,QAAQY,KAAK;YACjD,MAAMC,MAAMD,QAAQ5C,UAAU4C,SAAS;YACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAOpC;YAC3B,MAAMsB,YAAYW,KAAKX,SAAS;YAChC,IAAIK;YACJ,IAAI;gBACFA,QAAQ,MAAMN,aAAaC,WAAWC;YACxC,EAAE,OAAOc,OAAO;gBACdC,QAAQD,KAAK,CAAC,sEAAsEd,QAAQM,MAAM,EAAEQ;gBACpG,OAAOrC;YACT;YACA,IAAI,CAAC2B,OAAO,OAAO3B;YACnB,MAAMuC,QAAoB;gBACxB3B,QAAQW,QAAQgB,KAAK,CAAC3B,MAAM;gBAC5BK,MAAMuB,OAAOC,QAAQ,CAAClB,QAAQgB,KAAK,CAACtB,IAAI,KAAKM,QAAQgB,KAAK,CAACtB,IAAI,GAAG,IAAIM,QAAQgB,KAAK,CAACtB,IAAI,GAAGyB,KAAKC,GAAG;gBACnG5B,QAAQQ,QAAQgB,KAAK,CAACxB,MAAM;gBAC5BG,QAAQK,QAAQgB,KAAK,CAACrB,MAAM,GACxBQ,OAAOH,QAAQgB,KAAK,CAACrB,MAAM,EAAE0B,OAAO,CAAC,QAAQ,KAAKhB,IAAI,GAAGiB,KAAK,CAAC,GAAG,OAClE;eACAtB,QAAQgB,KAAK,CAACO,YAAY,GAAG;gBAAEA,cAAcvB,QAAQgB,KAAK,CAACO,YAAY;YAAC,IAAI,CAAC;YAEnF,MAAMzC,QAAQkB,QAAQlB,KAAK,KAAK;YAChC,MAAMC,WAAWiB,QAAQjB,QAAQ,KAAK;YACtC,IAAIL,UAAU;YACd,IAAI;gBACF,MAAM8C,WAAWzB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;gBACpE,MAAMkB,UAAU,MAAMvD,mBAAmBsD,UAAUZ;gBACnD,IAAIa,WAAY,MAAM9C,YAAY8C,QAAQ7C,GAAG,EAAEoC,OAAOlC,OAAOC,WAAYL,WAAW;YACtF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DV,OAAOU;YACrF;YACA,IAAI;gBACF;;;;;SAKC,GACD,IAAI,MAAMnC,YACRoB,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC,SAASC,GAAG,CAACK,MAChEG,OACAlC,OACAC,WACC;oBACDL,WAAW;gBACb;YACF,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4DAA4DV,OAAOU;YACnF;YACA,OAAO;gBAAEpC;YAAQ;QACnB;QACA,MAAMgD,SAAQ1B,OAAO;YACnB,IAAI;gBACF,MAAMtB,UAAU,MAAMJ,6BAA6B;oBACjDgC,QAAQN,QAAQM,MAAM;oBACtBqB,QAAQ3B,QAAQ2B,MAAM;oBACtB5B,WAAWW,KAAKX,SAAS;gBAC3B;gBACA,OAAO;oBAAErB;gBAAQ;YACnB,EAAE,OAAOoC,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8Dd,QAAQM,MAAM,EAAEQ;gBAC5F,OAAOrC;YACT;QACF;QACA,+EAA+E;QAC/E,MAAMmD,SAAQ5B,OAAO;YACnB,OAAO;gBAAEtB,SAAS,MAAMH,oBAAoBmC,KAAKX,SAAS,IAAIC;YAAS;QACzE;QACA,gEAAgE;QAChE,MAAM6B,SAAQ7B,OAAO;YACnB,OAAO;gBAAEtB,SAAS,MAAMF,iBAAiBkC,KAAKX,SAAS,IAAIC;YAAS;QACtE;IACF;AACF;AAEA,4DAA4D,GAC5D,OAAO,SAAS8B;IACd,OAAO;QAAE/B,WAAW,IAAM5B,cAAc4D,GAAG,GAAGhC,SAAS;IAAG;AAC5D;AAEA,gFAAgF,GAChF,OAAO,SAASiC,kCACdtB,OAAgCoB,gCAAgC;IAEhEpE,qCAAqC+C,gCAAgCC,OAAO;QAAEuB,UAAU5D;IAAU;AACpG"}

package/src/lib/server/record-facts.d.ts

@@ -16,12 +16,15 @@
  */
 import { type PluginRecordFactsReader, type PluginRecordFactsRequest } from '@aglyn/aglyn/plugin-manager/plugin-record-facts';
 import { type ConsentGroup } from '@aglyn/aglyn/server';
+import type { ReleaseFlagKey } from '@aglyn/aglyn/app-utils/release-flags';
 type Data = Record<string, unknown>;
 type Refusal = {
     ok: false;
     status: 400 | 403 | 404;
     error: string;
 };
+/** The release flag that lets a read answer the whole record (AGL-3520). */
+export declare const CRM_ASSIST_WHOLE_RECORD_FLAG: ReleaseFlagKey;
 /** Logged activities read per record before visibility and the timeline cut. */
 export declare const CRM_FACTS_ACTIVITIES_READ = 40;
 /** Tasks read per record, the record page's own window. */