@aglyn/plugins-crm 1.0.0-beta.296 → 1.1.0

package/src/lib/native-nav.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/native-nav.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type NativeNavContribution,\n  type NativeNavCreateContribution,\n  type NativeNavRow,\n  nativeNavHubSection,\n  nativeNavIcon,\n  nativeNavRef,\n} from '@aglyn/aglyn/app-utils/native-nav'\n\n/**\n * The CRM in the native apps' navigation (AGL-3943): the rows this plugin\n * adds to the manifest the shells draw, placed into the core's lists by\n * `order` (`assembleNativeNav`, `generate:native-contracts`). Labels are the\n * console's words, held by `apps/console/specs/native-nav-manifest.spec.ts`.\n *\n * Imports only the core's plain nav module, so the native contracts read it.\n */\n\n/**\n * The row at either scope. The workspace's opens the console's org page\n * (`orgNavItems`, `/[orgSlug]/crm`), the site's the site's hub; both list\n * the same sections under the same ids.\n */\nfunction row(scope: 'org' | 'host', order: number): NativeNavRow {\n  return {\n    id: 'crm',\n    label: 'CRM',\n    icon: nativeNavIcon('person.text.rectangle', 'contact_mail'),\n    screen: 'crm.contacts',\n    pluginId: 'crm',\n    order,\n    keywords: ['contacts', 'people', 'deals', 'tasks'],\n    sections: [\n      nativeNavHubSection(scope, '/crm', 'contacts', 'Contacts', 'crm.contacts'),\n      nativeNavHubSection(scope, '/crm', 'leads', 'Leads', 'crm.leads'),\n      nativeNavHubSection(scope, '/crm', 'companies', 'Companies', 'crm.companies'),\n      nativeNavHubSection(scope, '/crm', 'deals', 'Deals', 'crm.deals'),\n      nativeNavHubSection(scope, '/crm', 'tasks', 'Tasks', 'crm.tasks'),\n      nativeNavHubSection(scope, '/crm', 'reports', 'Reports', 'crm.reports'),\n      nativeNavHubSection(scope, '/crm', 'fields', 'Fields', 'crm.fields'),\n      nativeNavHubSection(scope, '/crm', 'settings', 'Settings', 'crm.settings'),\n    ],\n    docs: scope === 'org' ? '/content-and-data/crm/overview#at-the-organization-level' : '/content-and-data/crm/overview',\n    console: nativeNavRef(scope === 'org' ? 'orgPluginTab' : 'hostPluginTab', '/crm'),\n  }\n}\n\nexport const NATIVE_NAV_ROWS: readonly NativeNavContribution[] = [\n  { list: 'workspace', group: 'workspace', row: row('org', 20) },\n  { list: 'site', group: 'customers', row: row('host', 20) },\n]\n\n/** A contact, at either scope: the console's \"New contact\" on the CRM's Contacts. */\nfunction contact(scope: 'org' | 'host', order: number): NativeNavCreateContribution['item'] {\n  return {\n    id: 'contact',\n    label: 'Contact',\n    icon: nativeNavIcon('person.badge.plus', 'person_add'),\n    screen: 'crm.contacts',\n    params: { new: '1' },\n    pluginId: 'crm',\n    permission: 'data.manage',\n    planFeature: 'crm',\n    order,\n    console: nativeNavRef(scope === 'org' ? 'orgPluginSection' : 'hostPluginSection', '/crm/contacts'),\n  }\n}\n\nexport const NATIVE_NAV_CREATE: readonly NativeNavCreateContribution[] = [\n  { scope: 'workspace', item: contact('org', 20) },\n  { scope: 'site', item: contact('host', 70) },\n]\n"],"names":["nativeNavHubSection","nativeNavIcon","nativeNavRef","row","scope","order","id","label","icon","screen","pluginId","keywords","sections","docs","console","NATIVE_NAV_ROWS","list","group","contact","params","new","permission","planFeature","NATIVE_NAV_CREATE","item"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAIEA,mBAAmB,EACnBC,aAAa,EACbC,YAAY,QACP,oCAAmC;AAE1C;;;;;;;CAOC,GAED;;;;CAIC,GACD,SAASC,IAAIC,KAAqB,EAAEC,KAAa;IAC/C,OAAO;QACLC,IAAI;QACJC,OAAO;QACPC,MAAMP,cAAc,yBAAyB;QAC7CQ,QAAQ;QACRC,UAAU;QACVL;QACAM,UAAU;YAAC;YAAY;YAAU;YAAS;SAAQ;QAClDC,UAAU;YACRZ,oBAAoBI,OAAO,QAAQ,YAAY,YAAY;YAC3DJ,oBAAoBI,OAAO,QAAQ,SAAS,SAAS;YACrDJ,oBAAoBI,OAAO,QAAQ,aAAa,aAAa;YAC7DJ,oBAAoBI,OAAO,QAAQ,SAAS,SAAS;YACrDJ,oBAAoBI,OAAO,QAAQ,SAAS,SAAS;YACrDJ,oBAAoBI,OAAO,QAAQ,WAAW,WAAW;YACzDJ,oBAAoBI,OAAO,QAAQ,UAAU,UAAU;YACvDJ,oBAAoBI,OAAO,QAAQ,YAAY,YAAY;SAC5D;QACDS,MAAMT,UAAU,QAAQ,6DAA6D;QACrFU,SAASZ,aAAaE,UAAU,QAAQ,iBAAiB,iBAAiB;IAC5E;AACF;AAEA,OAAO,MAAMW,kBAAoD;IAC/D;QAAEC,MAAM;QAAaC,OAAO;QAAad,KAAKA,IAAI,OAAO;IAAI;IAC7D;QAAEa,MAAM;QAAQC,OAAO;QAAad,KAAKA,IAAI,QAAQ;IAAI;CAC1D,CAAA;AAED,mFAAmF,GACnF,SAASe,QAAQd,KAAqB,EAAEC,KAAa;IACnD,OAAO;QACLC,IAAI;QACJC,OAAO;QACPC,MAAMP,cAAc,qBAAqB;QACzCQ,QAAQ;QACRU,QAAQ;YAAEC,KAAK;QAAI;QACnBV,UAAU;QACVW,YAAY;QACZC,aAAa;QACbjB;QACAS,SAASZ,aAAaE,UAAU,QAAQ,qBAAqB,qBAAqB;IACpF;AACF;AAEA,OAAO,MAAMmB,oBAA4D;IACvE;QAAEnB,OAAO;QAAaoB,MAAMN,QAAQ,OAAO;IAAI;IAC/C;QAAEd,OAAO;QAAQoB,MAAMN,QAAQ,QAAQ;IAAI;CAC5C,CAAA"}
+{"version":3,"sources":["../../../../../../libs/plugins/crm/src/lib/native-nav.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type NativeNavContribution,\n  type NativeNavCreateContribution,\n  type NativeNavRow,\n  nativeNavHubSection,\n  nativeNavIcon,\n  nativeNavRef,\n} from '@aglyn/aglyn/app-utils/native-nav'\n\n/**\n * The CRM in the native apps' navigation (AGL-3943): the rows this plugin\n * adds to the manifest the shells draw, placed into the core's lists by\n * `order` (`assembleNativeNav`, `generate:native-contracts`). Labels are the\n * console's words, held by `apps/console/specs/native-nav-manifest.spec.ts`.\n *\n * Imports only the core's plain nav module, so the native contracts read it.\n */\n\n/**\n * The row at either scope. The workspace's opens the console's org page\n * (`orgNavItems`, `/[orgSlug]/crm`), the site's the site's hub; both list\n * the same sections under the same ids.\n */\nfunction row(scope: 'org' | 'host', order: number): NativeNavRow {\n  return {\n    id: 'crm',\n    label: 'CRM',\n    icon: nativeNavIcon('person.text.rectangle', 'contact_mail'),\n    screen: 'crm.contacts',\n    pluginId: 'crm',\n    order,\n    keywords: ['contacts', 'people', 'deals', 'tasks'],\n    sections: [\n      nativeNavHubSection(scope, '/crm', 'contacts', 'Contacts', 'crm.contacts'),\n      nativeNavHubSection(scope, '/crm', 'leads', 'Leads', 'crm.leads'),\n      nativeNavHubSection(scope, '/crm', 'companies', 'Companies', 'crm.companies'),\n      nativeNavHubSection(scope, '/crm', 'deals', 'Deals / Opportunities', 'crm.deals'),\n      nativeNavHubSection(scope, '/crm', 'tasks', 'Tasks', 'crm.tasks'),\n      nativeNavHubSection(scope, '/crm', 'reports', 'Reports', 'crm.reports'),\n      nativeNavHubSection(scope, '/crm', 'fields', 'Fields', 'crm.fields'),\n      nativeNavHubSection(scope, '/crm', 'settings', 'Settings', 'crm.settings'),\n    ],\n    docs: scope === 'org' ? '/content-and-data/crm/overview#at-the-organization-level' : '/content-and-data/crm/overview',\n    console: nativeNavRef(scope === 'org' ? 'orgPluginTab' : 'hostPluginTab', '/crm'),\n  }\n}\n\nexport const NATIVE_NAV_ROWS: readonly NativeNavContribution[] = [\n  { list: 'workspace', group: 'workspace', row: row('org', 20) },\n  { list: 'site', group: 'customers', row: row('host', 20) },\n]\n\n/** A contact, at either scope: the console's \"New contact\" on the CRM's Contacts. */\nfunction contact(scope: 'org' | 'host', order: number): NativeNavCreateContribution['item'] {\n  return {\n    id: 'contact',\n    label: 'Contact',\n    icon: nativeNavIcon('person.badge.plus', 'person_add'),\n    screen: 'crm.contacts',\n    params: { new: '1' },\n    pluginId: 'crm',\n    permission: 'data.manage',\n    planFeature: 'crm',\n    order,\n    console: nativeNavRef(scope === 'org' ? 'orgPluginSection' : 'hostPluginSection', '/crm/contacts'),\n  }\n}\n\nexport const NATIVE_NAV_CREATE: readonly NativeNavCreateContribution[] = [\n  { scope: 'workspace', item: contact('org', 20) },\n  { scope: 'site', item: contact('host', 70) },\n]\n"],"names":["nativeNavHubSection","nativeNavIcon","nativeNavRef","row","scope","order","id","label","icon","screen","pluginId","keywords","sections","docs","console","NATIVE_NAV_ROWS","list","group","contact","params","new","permission","planFeature","NATIVE_NAV_CREATE","item"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAIEA,mBAAmB,EACnBC,aAAa,EACbC,YAAY,QACP,oCAAmC;AAE1C;;;;;;;CAOC,GAED;;;;CAIC,GACD,SAASC,IAAIC,KAAqB,EAAEC,KAAa;IAC/C,OAAO;QACLC,IAAI;QACJC,OAAO;QACPC,MAAMP,cAAc,yBAAyB;QAC7CQ,QAAQ;QACRC,UAAU;QACVL;QACAM,UAAU;YAAC;YAAY;YAAU;YAAS;SAAQ;QAClDC,UAAU;YACRZ,oBAAoBI,OAAO,QAAQ,YAAY,YAAY;YAC3DJ,oBAAoBI,OAAO,QAAQ,SAAS,SAAS;YACrDJ,oBAAoBI,OAAO,QAAQ,aAAa,aAAa;YAC7DJ,oBAAoBI,OAAO,QAAQ,SAAS,yBAAyB;YACrEJ,oBAAoBI,OAAO,QAAQ,SAAS,SAAS;YACrDJ,oBAAoBI,OAAO,QAAQ,WAAW,WAAW;YACzDJ,oBAAoBI,OAAO,QAAQ,UAAU,UAAU;YACvDJ,oBAAoBI,OAAO,QAAQ,YAAY,YAAY;SAC5D;QACDS,MAAMT,UAAU,QAAQ,6DAA6D;QACrFU,SAASZ,aAAaE,UAAU,QAAQ,iBAAiB,iBAAiB;IAC5E;AACF;AAEA,OAAO,MAAMW,kBAAoD;IAC/D;QAAEC,MAAM;QAAaC,OAAO;QAAad,KAAKA,IAAI,OAAO;IAAI;IAC7D;QAAEa,MAAM;QAAQC,OAAO;QAAad,KAAKA,IAAI,QAAQ;IAAI;CAC1D,CAAA;AAED,mFAAmF,GACnF,SAASe,QAAQd,KAAqB,EAAEC,KAAa;IACnD,OAAO;QACLC,IAAI;QACJC,OAAO;QACPC,MAAMP,cAAc,qBAAqB;QACzCQ,QAAQ;QACRU,QAAQ;YAAEC,KAAK;QAAI;QACnBV,UAAU;QACVW,YAAY;QACZC,aAAa;QACbjB;QACAS,SAASZ,aAAaE,UAAU,QAAQ,qBAAqB,qBAAqB;IACpF;AACF;AAEA,OAAO,MAAMmB,oBAA4D;IACvE;QAAEnB,OAAO;QAAaoB,MAAMN,QAAQ,OAAO;IAAI;IAC/C;QAAEd,OAAO;QAAQoB,MAAMN,QAAQ,QAAQ;IAAI;CAC5C,CAAA"}

package/src/lib/server/add-contact-by-hand.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ContactProfileInput } from '@aglyn/tenant-data-admin/server/upsert-contact';
+/**
+ * A PERSON THE TEAM ADDS WHO DID NOT COME THROUGH A SITE'S CAPTURE (AGL-4122).
+ *
+ * `upsertHostContact` is the door for somebody a site met, and it needs what a
+ * site's capture always has: a site and an address. A person typed in by the
+ * team may have neither. They may be a name and a phone number, added at the
+ * organization level, because the team is working a deal with someone whose
+ * email comes later. That is this path, and only that: a site AND an address
+ * still go through the capture door, which is why the route asks.
+ *
+ * ## Who the person already is
+ *
+ * The address when there is one, through the same index the capture reads. With
+ * none, the phone number. With neither, nobody: two blank emails are not the
+ * same person, and a name is not an identity.
+ *
+ * The phone lookup is the one narrowing the capture's address lookup refuses,
+ * deliberately. An address names one human, so the capture recognizes them
+ * across every site. A phone number can be a shared office line, so it only
+ * matches somebody this caller's view already holds, and an agency's two
+ * clients who share a switchboard stay two records.
+ *
+ * ## The facet, and what names no site
+ *
+ * With a Source site the profile lives in that site's group's facet, as a
+ * capture's would. With none it lives in `ORG_CONTACT_HOLDER_ID`, and the row
+ * has no capturing site: `hostId` is `null`, `capturedByHostIds` is empty, and
+ * the record says so instead of guessing a brand that never met the person.
+ *
+ * ## Consent
+ *
+ * Only with an address, since a basis for mail needs somewhere to send it. With
+ * a site, for that site or the group it disclosed. With none, the person told
+ * the organization yes, so the grant is written on every site it has. One entry
+ * per site, each a group of one: `byHost[hostId]` stays a lookup, and a site
+ * added next month inherits nothing.
+ *
+ * ## What is not announced
+ *
+ * A created person with no site or no address fires no `contactCreated`: the
+ * event belongs to a site, and what listens for it is mostly mail. The team
+ * added them on purpose, so owner rules and domain matching have nothing to add
+ * either.
+ */
+export interface AddContactByHandInput {
+    orgId: string;
+    org: Record<string, unknown> | null | undefined;
+    /** The site they came from, or `null` for none. */
+    sourceHostId: string | null;
+    /** Normalized, or `null` for a person with no address yet. */
+    email: string | null;
+    name?: string;
+    facet?: ContactProfileInput;
+    tags?: readonly string[];
+    /** An opt-in the person gave. Ignored with no address. */
+    marketingConsent?: boolean;
+    /** The consent-group sentence shown beside the box, with a Source site. */
+    disclosedConsentGroup?: string;
+}
+export type AddContactByHandVerdict = {
+    contactId: string;
+    created: boolean;
+} | {
+    refused: 'band' | 'erased' | 'error';
+};
+/** Adds the person, or merges into who they already are. Never rejects. */
+export declare function addContactByHand(input: AddContactByHandInput): Promise<AddContactByHandVerdict>;

package/src/lib/server/add-contact-by-hand.js

@@ -0,0 +1,212 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { CAPTURED_BY_HOST_FIELD, checkCrmRecordsQuota, composeContactName, consentGroupForGrant, consentGroupForHost, consentGroupScope, CONTACT_COMPANY_IDS_FIELD, CONTACT_FACETS_FIELD, contactFacetPath, crmDefaultScopeOf, crmNewRecordListFields, crmReadTokens, createResourceUid, MARKETING_CONSENT_BY_HOST_FIELD, marketingConsentFieldsForGroup, marketingConsentFieldsForHost, nameSearchFields, ORG_CONTACT_HOLDER_ID, ORG_SCOPE_TOKEN, planContactCompanyLink, readContactCompanyLink } from "@aglyn/aglyn/server";
+import { contactCompanyLinkFields, firebaseAdmin, restampCrmListFieldsAt } from "@aglyn/tenant-data-admin";
+import { scheduleCapturedEmailCheck } from "@aglyn/tenant-data-admin/server/capture-email-check";
+import { settleCompanyContactsCounts } from "@aglyn/tenant-data-admin/server/contact-company-link";
+import { emailIndexBeside, findContactByEmail, writeContactEmailIndex } from "@aglyn/tenant-data-admin/server/contact-email-index";
+import { countCrmRecords } from "@aglyn/tenant-data-admin/server/crm-records";
+import { hostRefusesCaptureForErasure } from "@aglyn/tenant-data-admin/server/email-suppression";
+import { storableProfile } from "@aglyn/tenant-data-admin/server/upsert-contact";
+import { FieldValue } from "firebase-admin/firestore";
+import { ORG_HOLDER_GROUP, contactPrimaryGroup } from "../model/contact-holder.js";
+import { orgHostIds } from "./org-caller.js";
+/** The Consent entries for the opt-in, keyed `byHost[hostId]`. */ function consentEntries(input, group, hostIds) {
+    if (!input.marketingConsent || !input.email) return {};
+    const now = Date.now();
+    const fields = input.sourceHostId ? marketingConsentFieldsForGroup(consentGroupForGrant(group, input.disclosedConsentGroup), now) : Object.assign({}, ...hostIds.map((hostId)=>marketingConsentFieldsForHost(hostId, now)[MARKETING_CONSENT_BY_HOST_FIELD]));
+    return input.sourceHostId ? fields[MARKETING_CONSENT_BY_HOST_FIELD] : fields;
+}
+/** Who a person with this number already is, among those the caller can see. */ async function findVisibleContactByPhone(contacts, phone, readable) {
+    const matches = await contacts.where('phone', '==', phone).limit(10).get();
+    const visible = matches.docs.find((doc)=>{
+        if (!readable) return true;
+        const tokens = doc.get('visibleTo');
+        return Array.isArray(tokens) && tokens.some((token)=>readable.includes(String(token)));
+    });
+    return visible != null ? visible : null;
+}
+/** The profile written into a holder's existing facet, one dotted path per field. */ function facetUpdate(groupId, profile, name, tags) {
+    const { custom } = profile, fields = _object_without_properties_loose(profile, [
+        "custom"
+    ]);
+    const update = {};
+    for (const [field, value] of Object.entries(fields)){
+        if (value !== undefined) update[contactFacetPath(groupId, field)] = value;
+    }
+    for (const [key, value] of Object.entries(custom != null ? custom : {})){
+        update[contactFacetPath(groupId, `custom.${key}`)] = value;
+    }
+    if (name) update[contactFacetPath(groupId, 'name')] = name;
+    if (tags.length) update[contactFacetPath(groupId, 'tags')] = FieldValue.arrayUnion(...tags);
+    return update;
+}
+/** Adds the person, or merges into who they already are. Never rejects. */ export async function addContactByHand(input) {
+    try {
+        var _input_tags;
+        const { orgId, org, sourceHostId, email } = input;
+        const firestore = firebaseAdmin.app().firestore();
+        const orgRef = firestore.collection('orgs').doc(orgId);
+        const contacts = orgRef.collection('contacts');
+        const group = sourceHostId ? consentGroupForHost(org, sourceHostId) : ORG_HOLDER_GROUP;
+        const hostIds = sourceHostId ? [
+            sourceHostId
+        ] : await orgHostIds(firestore, orgId);
+        const tags = (_input_tags = input.tags) != null ? _input_tags : [];
+        const profile = storableProfile(input.facet);
+        if (profile.address === null) delete profile.address;
+        if (profile.otherAddress === null) delete profile.otherAddress;
+        const composedName = composeContactName(profile.firstName, profile.lastName);
+        const canonicalName = (input.name || composedName || '').slice(0, 120);
+        const holderName = (composedName || input.name || '').slice(0, 120);
+        // The one number the record can be found by; a person who gave only a
+        // mobile is found by that.
+        const phone = profile.phone || profile.mobilePhone || '';
+        const scope = crmDefaultScopeOf(org) === 'org' ? [
+            ORG_SCOPE_TOKEN
+        ] : consentGroupScope(group);
+        const existing = email ? await findContactByEmail(contacts, email) : phone ? await findVisibleContactByPhone(contacts, phone, sourceHostId && crmDefaultScopeOf(org) !== 'org' ? crmReadTokens(group) : null) : null;
+        if (existing) {
+            var _existing_data;
+            const data = (_existing_data = existing.data()) != null ? _existing_data : {};
+            const groupId = sourceHostId ? group.groupId : contactPrimaryGroup(data, org).groupId || ORG_CONTACT_HOLDER_ID;
+            const { companyId } = profile, withoutCompany = _object_without_properties_loose(profile, [
+                "companyId"
+            ]);
+            const link = companyId ? planContactCompanyLink(readContactCompanyLink(data, groupId), companyId) : null;
+            const consent = consentEntries(input, group, hostIds);
+            await existing.ref.update(_extends({}, facetUpdate(groupId, withoutCompany, holderName, tags), link ? contactCompanyLinkFields(link, groupId) : {}, phone && !data['phone'] ? {
+                phone
+            } : {}, Object.fromEntries(Object.entries(consent).map(([hostId, entry])=>[
+                    `${MARKETING_CONSENT_BY_HOST_FIELD}.${hostId}`,
+                    entry
+                ])), sourceHostId ? {
+                [CAPTURED_BY_HOST_FIELD]: FieldValue.arrayUnion(sourceHostId),
+                visibleTo: FieldValue.arrayUnion(...scope)
+            } : {}, {
+                updatedAt: FieldValue.serverTimestamp()
+            }));
+            if (link) await settleCompanyContactsCounts(orgRef.collection('companies'), link);
+            await restampCrmListFieldsAt(existing.ref, 'contacts');
+            return {
+                contactId: existing.id,
+                created: false
+            };
+        }
+        // An erased person stays erased, whichever door they come back through.
+        if (email) {
+            for (const hostId of hostIds){
+                if (await hostRefusesCaptureForErasure(hostId, email, firestore)) {
+                    return {
+                        refused: 'erased'
+                    };
+                }
+            }
+        }
+        const { crmRecordsCount } = await countCrmRecords(orgRef, contacts);
+        if (!checkCrmRecordsQuota(org != null ? org : null, crmRecordsCount).allowed) {
+            return {
+                refused: 'band'
+            };
+        }
+        const facet = _extends({
+            sources: {
+                manual: true
+            },
+            interactions: [
+                _extends({
+                    type: 'manual',
+                    atMs: Date.now()
+                }, sourceHostId ? {
+                    hostId: sourceHostId
+                } : {}, {
+                    summary: 'Added by hand'
+                })
+            ],
+            tags: [
+                ...tags
+            ]
+        }, holderName ? {
+            name: holderName
+        } : {}, profile);
+        const consent = consentEntries(input, group, hostIds);
+        const record = _extends({
+            hostId: sourceHostId,
+            [CAPTURED_BY_HOST_FIELD]: sourceHostId ? [
+                sourceHostId
+            ] : [],
+            visibleTo: scope,
+            /*
+       * BLANK RATHER THAN ABSENT. The Contacts table sorts by every column, and
+       * a Firestore `orderBy` drops a document that lacks the field, so a person
+       * with no address would vanish from the list the moment someone sorted it
+       * by email. Blank sorts first and reads as nothing, and no reader treats
+       * it as an address: `normalizeContactEmail` answers `null`.
+       */ email: email != null ? email : ''
+        }, canonicalName ? nameSearchFields(canonicalName) : {}, phone ? {
+            phone
+        } : {}, profile.companyName ? {
+            companyName: profile.companyName
+        } : {}, profile.companyId ? {
+            [CONTACT_COMPANY_IDS_FIELD]: [
+                profile.companyId
+            ]
+        } : {}, {
+            [CONTACT_FACETS_FIELD]: {
+                [group.groupId]: facet
+            }
+        }, Object.keys(consent).length ? {
+            [MARKETING_CONSENT_BY_HOST_FIELD]: consent
+        } : {}, {
+            createdAt: FieldValue.serverTimestamp(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        const created = contacts.doc(createResourceUid());
+        await created.set(_extends({}, record, crmNewRecordListFields('contacts', record)));
+        if (email) {
+            await writeContactEmailIndex(emailIndexBeside(contacts), created.id, [
+                email
+            ]);
+            scheduleCapturedEmailCheck(_extends({
+                orgId
+            }, sourceHostId ? {
+                hostId: sourceHostId
+            } : {}, {
+                email
+            }));
+        }
+        if (profile.companyId) {
+            await settleCompanyContactsCounts(orgRef.collection('companies'), planContactCompanyLink({
+                companyId: null,
+                companyIds: [],
+                heldElsewhere: []
+            }, profile.companyId));
+        }
+        return {
+            contactId: created.id,
+            created: true
+        };
+    } catch (error) {
+        console.error('[crm] addContactByHand failed', error);
+        return {
+            refused: 'error'
+        };
+    }
+}
+
+//# sourceMappingURL=add-contact-by-hand.js.map

package/src/lib/server/add-contact-by-hand.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/add-contact-by-hand.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  CAPTURED_BY_HOST_FIELD,\n  checkCrmRecordsQuota,\n  composeContactName,\n  type ConsentGroup,\n  consentGroupForGrant,\n  consentGroupForHost,\n  consentGroupScope,\n  CONTACT_COMPANY_IDS_FIELD,\n  CONTACT_FACETS_FIELD,\n  type ContactFacet,\n  contactFacetPath,\n  crmDefaultScopeOf,\n  crmNewRecordListFields,\n  crmReadTokens,\n  createResourceUid,\n  MARKETING_CONSENT_BY_HOST_FIELD,\n  marketingConsentFieldsForGroup,\n  marketingConsentFieldsForHost,\n  nameSearchFields,\n  ORG_CONTACT_HOLDER_ID,\n  ORG_SCOPE_TOKEN,\n  planContactCompanyLink,\n  readContactCompanyLink,\n} from '@aglyn/aglyn/server'\nimport {\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { scheduleCapturedEmailCheck } from '@aglyn/tenant-data-admin/server/capture-email-check'\nimport { settleCompanyContactsCounts } from '@aglyn/tenant-data-admin/server/contact-company-link'\nimport {\n  emailIndexBeside,\n  findContactByEmail,\n  writeContactEmailIndex,\n} from '@aglyn/tenant-data-admin/server/contact-email-index'\nimport { countCrmRecords } from '@aglyn/tenant-data-admin/server/crm-records'\nimport { hostRefusesCaptureForErasure } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport {\n  type ContactProfileInput,\n  storableProfile,\n} from '@aglyn/tenant-data-admin/server/upsert-contact'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { ORG_HOLDER_GROUP, contactPrimaryGroup } from '../model/contact-holder'\nimport { orgHostIds } from './org-caller'\n\n/**\n * A PERSON THE TEAM ADDS WHO DID NOT COME THROUGH A SITE'S CAPTURE (AGL-4122).\n *\n * `upsertHostContact` is the door for somebody a site met, and it needs what a\n * site's capture always has: a site and an address. A person typed in by the\n * team may have neither. They may be a name and a phone number, added at the\n * organization level, because the team is working a deal with someone whose\n * email comes later. That is this path, and only that: a site AND an address\n * still go through the capture door, which is why the route asks.\n *\n * ## Who the person already is\n *\n * The address when there is one, through the same index the capture reads. With\n * none, the phone number. With neither, nobody: two blank emails are not the\n * same person, and a name is not an identity.\n *\n * The phone lookup is the one narrowing the capture's address lookup refuses,\n * deliberately. An address names one human, so the capture recognizes them\n * across every site. A phone number can be a shared office line, so it only\n * matches somebody this caller's view already holds, and an agency's two\n * clients who share a switchboard stay two records.\n *\n * ## The facet, and what names no site\n *\n * With a Source site the profile lives in that site's group's facet, as a\n * capture's would. With none it lives in `ORG_CONTACT_HOLDER_ID`, and the row\n * has no capturing site: `hostId` is `null`, `capturedByHostIds` is empty, and\n * the record says so instead of guessing a brand that never met the person.\n *\n * ## Consent\n *\n * Only with an address, since a basis for mail needs somewhere to send it. With\n * a site, for that site or the group it disclosed. With none, the person told\n * the organization yes, so the grant is written on every site it has. One entry\n * per site, each a group of one: `byHost[hostId]` stays a lookup, and a site\n * added next month inherits nothing.\n *\n * ## What is not announced\n *\n * A created person with no site or no address fires no `contactCreated`: the\n * event belongs to a site, and what listens for it is mostly mail. The team\n * added them on purpose, so owner rules and domain matching have nothing to add\n * either.\n */\n\nexport interface AddContactByHandInput {\n  orgId: string\n  org: Record<string, unknown> | null | undefined\n  /** The site they came from, or `null` for none. */\n  sourceHostId: string | null\n  /** Normalized, or `null` for a person with no address yet. */\n  email: string | null\n  name?: string\n  facet?: ContactProfileInput\n  tags?: readonly string[]\n  /** An opt-in the person gave. Ignored with no address. */\n  marketingConsent?: boolean\n  /** The consent-group sentence shown beside the box, with a Source site. */\n  disclosedConsentGroup?: string\n}\n\nexport type AddContactByHandVerdict =\n  | { contactId: string; created: boolean }\n  | { refused: 'band' | 'erased' | 'error' }\n\n/** The Consent entries for the opt-in, keyed `byHost[hostId]`. */\nfunction consentEntries(\n  input: AddContactByHandInput,\n  group: ConsentGroup,\n  hostIds: readonly string[],\n): Record<string, unknown> {\n  if (!input.marketingConsent || !input.email) return {}\n  const now = Date.now()\n  const fields = input.sourceHostId\n    ? marketingConsentFieldsForGroup(\n        consentGroupForGrant(group, input.disclosedConsentGroup),\n        now,\n      )\n    : Object.assign(\n        {},\n        ...hostIds.map(\n          (hostId) =>\n            marketingConsentFieldsForHost(hostId, now)[MARKETING_CONSENT_BY_HOST_FIELD],\n        ),\n      )\n  return input.sourceHostId\n    ? (fields[MARKETING_CONSENT_BY_HOST_FIELD] as Record<string, unknown>)\n    : fields\n}\n\n/** Who a person with this number already is, among those the caller can see. */\nasync function findVisibleContactByPhone(\n  contacts: FirebaseFirestore.CollectionReference,\n  phone: string,\n  readable: readonly string[] | null,\n): Promise<FirebaseFirestore.DocumentSnapshot | null> {\n  const matches = await contacts.where('phone', '==', phone).limit(10).get()\n  const visible = matches.docs.find((doc) => {\n    if (!readable) return true\n    const tokens = doc.get('visibleTo')\n    return Array.isArray(tokens) && tokens.some((token) => readable.includes(String(token)))\n  })\n  return visible ?? null\n}\n\n/** The profile written into a holder's existing facet, one dotted path per field. */\nfunction facetUpdate(\n  groupId: string,\n  profile: ReturnType<typeof storableProfile>,\n  name: string,\n  tags: readonly string[],\n): Record<string, unknown> {\n  const { custom, ...fields } = profile\n  const update: Record<string, unknown> = {}\n  for (const [field, value] of Object.entries(fields)) {\n    if (value !== undefined) update[contactFacetPath(groupId, field)] = value\n  }\n  for (const [key, value] of Object.entries(custom ?? {})) {\n    update[contactFacetPath(groupId, `custom.${key}`)] = value\n  }\n  if (name) update[contactFacetPath(groupId, 'name')] = name\n  if (tags.length) update[contactFacetPath(groupId, 'tags')] = FieldValue.arrayUnion(...tags)\n  return update\n}\n\n/** Adds the person, or merges into who they already are. Never rejects. */\nexport async function addContactByHand(\n  input: AddContactByHandInput,\n): Promise<AddContactByHandVerdict> {\n  try {\n    const { orgId, org, sourceHostId, email } = input\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(orgId)\n    const contacts = orgRef.collection('contacts')\n    const group = sourceHostId ? consentGroupForHost(org, sourceHostId) : ORG_HOLDER_GROUP\n    const hostIds = sourceHostId ? [sourceHostId] : await orgHostIds(firestore, orgId)\n    const tags = input.tags ?? []\n\n    const profile = storableProfile(input.facet)\n    if (profile.address === null) delete profile.address\n    if (profile.otherAddress === null) delete profile.otherAddress\n    const composedName = composeContactName(profile.firstName, profile.lastName)\n    const canonicalName = (input.name || composedName || '').slice(0, 120)\n    const holderName = (composedName || input.name || '').slice(0, 120)\n    // The one number the record can be found by; a person who gave only a\n    // mobile is found by that.\n    const phone = profile.phone || profile.mobilePhone || ''\n    const scope = crmDefaultScopeOf(org) === 'org' ? [ORG_SCOPE_TOKEN] : consentGroupScope(group)\n\n    const existing = email\n      ? await findContactByEmail(contacts, email)\n      : phone\n        ? await findVisibleContactByPhone(\n            contacts,\n            phone,\n            sourceHostId && crmDefaultScopeOf(org) !== 'org' ? crmReadTokens(group) : null,\n          )\n        : null\n\n    if (existing) {\n      const data = (existing.data() ?? {}) as Record<string, unknown>\n      const groupId = sourceHostId\n        ? group.groupId\n        : contactPrimaryGroup(data, org).groupId || ORG_CONTACT_HOLDER_ID\n      const { companyId, ...withoutCompany } = profile\n      const link = companyId\n        ? planContactCompanyLink(readContactCompanyLink(data, groupId), companyId)\n        : null\n      const consent = consentEntries(input, group, hostIds)\n      await existing.ref.update({\n        ...facetUpdate(groupId, withoutCompany, holderName, tags),\n        ...(link ? contactCompanyLinkFields(link, groupId) : {}),\n        ...(phone && !data['phone'] ? { phone } : {}),\n        ...Object.fromEntries(\n          Object.entries(consent).map(([hostId, entry]) => [\n            `${MARKETING_CONSENT_BY_HOST_FIELD}.${hostId}`,\n            entry,\n          ]),\n        ),\n        ...(sourceHostId\n          ? {\n              [CAPTURED_BY_HOST_FIELD]: FieldValue.arrayUnion(sourceHostId),\n              visibleTo: FieldValue.arrayUnion(...scope),\n            }\n          : {}),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      if (link) await settleCompanyContactsCounts(orgRef.collection('companies'), link)\n      await restampCrmListFieldsAt(existing.ref, 'contacts')\n      return { contactId: existing.id, created: false }\n    }\n\n    // An erased person stays erased, whichever door they come back through.\n    if (email) {\n      for (const hostId of hostIds) {\n        if (await hostRefusesCaptureForErasure(hostId, email, firestore)) {\n          return { refused: 'erased' }\n        }\n      }\n    }\n\n    const { crmRecordsCount } = await countCrmRecords(orgRef, contacts)\n    if (!checkCrmRecordsQuota((org as never) ?? null, crmRecordsCount).allowed) {\n      return { refused: 'band' }\n    }\n\n    const facet: Partial<ContactFacet> & Record<string, unknown> = {\n      sources: { manual: true },\n      interactions: [\n        {\n          type: 'manual',\n          atMs: Date.now(),\n          ...(sourceHostId ? { hostId: sourceHostId } : {}),\n          summary: 'Added by hand',\n        },\n      ],\n      tags: [...tags],\n      ...(holderName ? { name: holderName } : {}),\n      ...profile,\n    }\n    const consent = consentEntries(input, group, hostIds)\n    const record: Record<string, unknown> = {\n      hostId: sourceHostId,\n      [CAPTURED_BY_HOST_FIELD]: sourceHostId ? [sourceHostId] : [],\n      visibleTo: scope,\n      /*\n       * BLANK RATHER THAN ABSENT. The Contacts table sorts by every column, and\n       * a Firestore `orderBy` drops a document that lacks the field, so a person\n       * with no address would vanish from the list the moment someone sorted it\n       * by email. Blank sorts first and reads as nothing, and no reader treats\n       * it as an address: `normalizeContactEmail` answers `null`.\n       */\n      email: email ?? '',\n      ...(canonicalName ? nameSearchFields(canonicalName) : {}),\n      ...(phone ? { phone } : {}),\n      ...(profile.companyName ? { companyName: profile.companyName } : {}),\n      ...(profile.companyId ? { [CONTACT_COMPANY_IDS_FIELD]: [profile.companyId] } : {}),\n      [CONTACT_FACETS_FIELD]: { [group.groupId]: facet },\n      ...(Object.keys(consent).length ? { [MARKETING_CONSENT_BY_HOST_FIELD]: consent } : {}),\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    const created = contacts.doc(createResourceUid())\n    await created.set({\n      ...record,\n      ...crmNewRecordListFields('contacts', record),\n    })\n    if (email) {\n      await writeContactEmailIndex(emailIndexBeside(contacts), created.id, [email])\n      scheduleCapturedEmailCheck({ orgId, ...(sourceHostId ? { hostId: sourceHostId } : {}), email })\n    }\n    if (profile.companyId) {\n      await settleCompanyContactsCounts(\n        orgRef.collection('companies'),\n        planContactCompanyLink(\n          { companyId: null, companyIds: [], heldElsewhere: [] },\n          profile.companyId,\n        ),\n      )\n    }\n    return { contactId: created.id, created: true }\n  } catch (error) {\n    console.error('[crm] addContactByHand failed', error)\n    return { refused: 'error' }\n  }\n}\n"],"names":["CAPTURED_BY_HOST_FIELD","checkCrmRecordsQuota","composeContactName","consentGroupForGrant","consentGroupForHost","consentGroupScope","CONTACT_COMPANY_IDS_FIELD","CONTACT_FACETS_FIELD","contactFacetPath","crmDefaultScopeOf","crmNewRecordListFields","crmReadTokens","createResourceUid","MARKETING_CONSENT_BY_HOST_FIELD","marketingConsentFieldsForGroup","marketingConsentFieldsForHost","nameSearchFields","ORG_CONTACT_HOLDER_ID","ORG_SCOPE_TOKEN","planContactCompanyLink","readContactCompanyLink","contactCompanyLinkFields","firebaseAdmin","restampCrmListFieldsAt","scheduleCapturedEmailCheck","settleCompanyContactsCounts","emailIndexBeside","findContactByEmail","writeContactEmailIndex","countCrmRecords","hostRefusesCaptureForErasure","storableProfile","FieldValue","ORG_HOLDER_GROUP","contactPrimaryGroup","orgHostIds","consentEntries","input","group","hostIds","marketingConsent","email","now","Date","fields","sourceHostId","disclosedConsentGroup","Object","assign","map","hostId","findVisibleContactByPhone","contacts","phone","readable","matches","where","limit","get","visible","docs","find","doc","tokens","Array","isArray","some","token","includes","String","facetUpdate","groupId","profile","name","tags","custom","update","field","value","entries","undefined","key","length","arrayUnion","addContactByHand","orgId","org","firestore","app","orgRef","collection","facet","address","otherAddress","composedName","firstName","lastName","canonicalName","slice","holderName","mobilePhone","scope","existing","data","companyId","withoutCompany","link","consent","ref","fromEntries","entry","visibleTo","updatedAt","serverTimestamp","contactId","id","created","refused","crmRecordsCount","allowed","sources","manual","interactions","type","atMs","summary","record","companyName","keys","createdAt","set","companyIds","heldElsewhere","error","console"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,sBAAsB,EACtBC,oBAAoB,EACpBC,kBAAkB,EAElBC,oBAAoB,EACpBC,mBAAmB,EACnBC,iBAAiB,EACjBC,yBAAyB,EACzBC,oBAAoB,EAEpBC,gBAAgB,EAChBC,iBAAiB,EACjBC,sBAAsB,EACtBC,aAAa,EACbC,iBAAiB,EACjBC,+BAA+B,EAC/BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,gBAAgB,EAChBC,qBAAqB,EACrBC,eAAe,EACfC,sBAAsB,EACtBC,sBAAsB,QACjB,sBAAqB;AAC5B,SACEC,wBAAwB,EACxBC,aAAa,EACbC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,0BAA0B,QAAQ,sDAAqD;AAChG,SAASC,2BAA2B,QAAQ,uDAAsD;AAClG,SACEC,gBAAgB,EAChBC,kBAAkB,EAClBC,sBAAsB,QACjB,sDAAqD;AAC5D,SAASC,eAAe,QAAQ,8CAA6C;AAC7E,SAASC,4BAA4B,QAAQ,oDAAmD;AAChG,SAEEC,eAAe,QACV,iDAAgD;AACvD,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,gBAAgB,EAAEC,mBAAmB,QAAQ,6BAAyB;AAC/E,SAASC,UAAU,QAAQ,kBAAc;AAmEzC,gEAAgE,GAChE,SAASC,eACPC,KAA4B,EAC5BC,KAAmB,EACnBC,OAA0B;IAE1B,IAAI,CAACF,MAAMG,gBAAgB,IAAI,CAACH,MAAMI,KAAK,EAAE,OAAO,CAAC;IACrD,MAAMC,MAAMC,KAAKD,GAAG;IACpB,MAAME,SAASP,MAAMQ,YAAY,GAC7B/B,+BACEX,qBAAqBmC,OAAOD,MAAMS,qBAAqB,GACvDJ,OAEFK,OAAOC,MAAM,CACX,CAAC,MACET,QAAQU,GAAG,CACZ,CAACC,SACCnC,8BAA8BmC,QAAQR,IAAI,CAAC7B,gCAAgC;IAGrF,OAAOwB,MAAMQ,YAAY,GACpBD,MAAM,CAAC/B,gCAAgC,GACxC+B;AACN;AAEA,8EAA8E,GAC9E,eAAeO,0BACbC,QAA+C,EAC/CC,KAAa,EACbC,QAAkC;IAElC,MAAMC,UAAU,MAAMH,SAASI,KAAK,CAAC,SAAS,MAAMH,OAAOI,KAAK,CAAC,IAAIC,GAAG;IACxE,MAAMC,UAAUJ,QAAQK,IAAI,CAACC,IAAI,CAAC,CAACC;QACjC,IAAI,CAACR,UAAU,OAAO;QACtB,MAAMS,SAASD,IAAIJ,GAAG,CAAC;QACvB,OAAOM,MAAMC,OAAO,CAACF,WAAWA,OAAOG,IAAI,CAAC,CAACC,QAAUb,SAASc,QAAQ,CAACC,OAAOF;IAClF;IACA,OAAOR,kBAAAA,UAAW;AACpB;AAEA,mFAAmF,GACnF,SAASW,YACPC,OAAe,EACfC,OAA2C,EAC3CC,IAAY,EACZC,IAAuB;IAEvB,MAAM,EAAEC,MAAM,EAAa,GAAGH,SAAX5B,0CAAW4B;;;IAC9B,MAAMI,SAAkC,CAAC;IACzC,KAAK,MAAM,CAACC,OAAOC,MAAM,IAAI/B,OAAOgC,OAAO,CAACnC,QAAS;QACnD,IAAIkC,UAAUE,WAAWJ,MAAM,CAACpE,iBAAiB+D,SAASM,OAAO,GAAGC;IACtE;IACA,KAAK,MAAM,CAACG,KAAKH,MAAM,IAAI/B,OAAOgC,OAAO,CAACJ,iBAAAA,SAAU,CAAC,GAAI;QACvDC,MAAM,CAACpE,iBAAiB+D,SAAS,CAAC,OAAO,EAAEU,KAAK,EAAE,GAAGH;IACvD;IACA,IAAIL,MAAMG,MAAM,CAACpE,iBAAiB+D,SAAS,QAAQ,GAAGE;IACtD,IAAIC,KAAKQ,MAAM,EAAEN,MAAM,CAACpE,iBAAiB+D,SAAS,QAAQ,GAAGvC,WAAWmD,UAAU,IAAIT;IACtF,OAAOE;AACT;AAEA,yEAAyE,GACzE,OAAO,eAAeQ,iBACpB/C,KAA4B;IAE5B,IAAI;YAOWA;QANb,MAAM,EAAEgD,KAAK,EAAEC,GAAG,EAAEzC,YAAY,EAAEJ,KAAK,EAAE,GAAGJ;QAC5C,MAAMkD,YAAYjE,cAAckE,GAAG,GAAGD,SAAS;QAC/C,MAAME,SAASF,UAAUG,UAAU,CAAC,QAAQ5B,GAAG,CAACuB;QAChD,MAAMjC,WAAWqC,OAAOC,UAAU,CAAC;QACnC,MAAMpD,QAAQO,eAAezC,oBAAoBkF,KAAKzC,gBAAgBZ;QACtE,MAAMM,UAAUM,eAAe;YAACA;SAAa,GAAG,MAAMV,WAAWoD,WAAWF;QAC5E,MAAMX,QAAOrC,cAAAA,MAAMqC,IAAI,YAAVrC,cAAc,EAAE;QAE7B,MAAMmC,UAAUzC,gBAAgBM,MAAMsD,KAAK;QAC3C,IAAInB,QAAQoB,OAAO,KAAK,MAAM,OAAOpB,QAAQoB,OAAO;QACpD,IAAIpB,QAAQqB,YAAY,KAAK,MAAM,OAAOrB,QAAQqB,YAAY;QAC9D,MAAMC,eAAe5F,mBAAmBsE,QAAQuB,SAAS,EAAEvB,QAAQwB,QAAQ;QAC3E,MAAMC,gBAAgB,AAAC5D,CAAAA,MAAMoC,IAAI,IAAIqB,gBAAgB,EAAC,EAAGI,KAAK,CAAC,GAAG;QAClE,MAAMC,aAAa,AAACL,CAAAA,gBAAgBzD,MAAMoC,IAAI,IAAI,EAAC,EAAGyB,KAAK,CAAC,GAAG;QAC/D,sEAAsE;QACtE,2BAA2B;QAC3B,MAAM7C,QAAQmB,QAAQnB,KAAK,IAAImB,QAAQ4B,WAAW,IAAI;QACtD,MAAMC,QAAQ5F,kBAAkB6E,SAAS,QAAQ;YAACpE;SAAgB,GAAGb,kBAAkBiC;QAEvF,MAAMgE,WAAW7D,QACb,MAAMd,mBAAmByB,UAAUX,SACnCY,QACE,MAAMF,0BACJC,UACAC,OACAR,gBAAgBpC,kBAAkB6E,SAAS,QAAQ3E,cAAc2B,SAAS,QAE5E;QAEN,IAAIgE,UAAU;gBACEA;YAAd,MAAMC,QAAQD,iBAAAA,SAASC,IAAI,cAAbD,iBAAmB,CAAC;YAClC,MAAM/B,UAAU1B,eACZP,MAAMiC,OAAO,GACbrC,oBAAoBqE,MAAMjB,KAAKf,OAAO,IAAItD;YAC9C,MAAM,EAAEuF,SAAS,EAAqB,GAAGhC,SAAnBiC,kDAAmBjC;;;YACzC,MAAMkC,OAAOF,YACTrF,uBAAuBC,uBAAuBmF,MAAMhC,UAAUiC,aAC9D;YACJ,MAAMG,UAAUvE,eAAeC,OAAOC,OAAOC;YAC7C,MAAM+D,SAASM,GAAG,CAAChC,MAAM,CAAC,aACrBN,YAAYC,SAASkC,gBAAgBN,YAAYzB,OAChDgC,OAAOrF,yBAAyBqF,MAAMnC,WAAW,CAAC,GAClDlB,SAAS,CAACkD,IAAI,CAAC,QAAQ,GAAG;gBAAElD;YAAM,IAAI,CAAC,GACxCN,OAAO8D,WAAW,CACnB9D,OAAOgC,OAAO,CAAC4B,SAAS1D,GAAG,CAAC,CAAC,CAACC,QAAQ4D,MAAM,GAAK;oBAC/C,GAAGjG,gCAAgC,CAAC,EAAEqC,QAAQ;oBAC9C4D;iBACD,IAECjE,eACA;gBACE,CAAC7C,uBAAuB,EAAEgC,WAAWmD,UAAU,CAACtC;gBAChDkE,WAAW/E,WAAWmD,UAAU,IAAIkB;YACtC,IACA,CAAC;gBACLW,WAAWhF,WAAWiF,eAAe;;YAEvC,IAAIP,MAAM,MAAMjF,4BAA4BgE,OAAOC,UAAU,CAAC,cAAcgB;YAC5E,MAAMnF,uBAAuB+E,SAASM,GAAG,EAAE;YAC3C,OAAO;gBAAEM,WAAWZ,SAASa,EAAE;gBAAEC,SAAS;YAAM;QAClD;QAEA,wEAAwE;QACxE,IAAI3E,OAAO;YACT,KAAK,MAAMS,UAAUX,QAAS;gBAC5B,IAAI,MAAMT,6BAA6BoB,QAAQT,OAAO8C,YAAY;oBAChE,OAAO;wBAAE8B,SAAS;oBAAS;gBAC7B;YACF;QACF;QAEA,MAAM,EAAEC,eAAe,EAAE,GAAG,MAAMzF,gBAAgB4D,QAAQrC;QAC1D,IAAI,CAACnD,qBAAsBqF,cAAAA,MAAiB,MAAMgC,iBAAiBC,OAAO,EAAE;YAC1E,OAAO;gBAAEF,SAAS;YAAO;QAC3B;QAEA,MAAM1B,QAAyD;YAC7D6B,SAAS;gBAAEC,QAAQ;YAAK;YACxBC,cAAc;gBACZ;oBACEC,MAAM;oBACNC,MAAMjF,KAAKD,GAAG;mBACVG,eAAe;oBAAEK,QAAQL;gBAAa,IAAI,CAAC;oBAC/CgF,SAAS;;aAEZ;YACDnD,MAAM;mBAAIA;aAAK;WACXyB,aAAa;YAAE1B,MAAM0B;QAAW,IAAI,CAAC,GACtC3B;QAEL,MAAMmC,UAAUvE,eAAeC,OAAOC,OAAOC;QAC7C,MAAMuF,SAAkC;YACtC5E,QAAQL;YACR,CAAC7C,uBAAuB,EAAE6C,eAAe;gBAACA;aAAa,GAAG,EAAE;YAC5DkE,WAAWV;YACX;;;;;;OAMC,GACD5D,KAAK,EAAEA,gBAAAA,QAAS;WACZwD,gBAAgBjF,iBAAiBiF,iBAAiB,CAAC,GACnD5C,QAAQ;YAAEA;QAAM,IAAI,CAAC,GACrBmB,QAAQuD,WAAW,GAAG;YAAEA,aAAavD,QAAQuD,WAAW;QAAC,IAAI,CAAC,GAC9DvD,QAAQgC,SAAS,GAAG;YAAE,CAAClG,0BAA0B,EAAE;gBAACkE,QAAQgC,SAAS;aAAC;QAAC,IAAI,CAAC;YAChF,CAACjG,qBAAqB,EAAE;gBAAE,CAAC+B,MAAMiC,OAAO,CAAC,EAAEoB;YAAM;WAC7C5C,OAAOiF,IAAI,CAACrB,SAASzB,MAAM,GAAG;YAAE,CAACrE,gCAAgC,EAAE8F;QAAQ,IAAI,CAAC;YACpFsB,WAAWjG,WAAWiF,eAAe;YACrCD,WAAWhF,WAAWiF,eAAe;;QAEvC,MAAMG,UAAUhE,SAASU,GAAG,CAAClD;QAC7B,MAAMwG,QAAQc,GAAG,CAAC,aACbJ,QACApH,uBAAuB,YAAYoH;QAExC,IAAIrF,OAAO;YACT,MAAMb,uBAAuBF,iBAAiB0B,WAAWgE,QAAQD,EAAE,EAAE;gBAAC1E;aAAM;YAC5EjB,2BAA2B;gBAAE6D;eAAWxC,eAAe;gBAAEK,QAAQL;YAAa,IAAI,CAAC;gBAAIJ;;QACzF;QACA,IAAI+B,QAAQgC,SAAS,EAAE;YACrB,MAAM/E,4BACJgE,OAAOC,UAAU,CAAC,cAClBvE,uBACE;gBAAEqF,WAAW;gBAAM2B,YAAY,EAAE;gBAAEC,eAAe,EAAE;YAAC,GACrD5D,QAAQgC,SAAS;QAGvB;QACA,OAAO;YAAEU,WAAWE,QAAQD,EAAE;YAAEC,SAAS;QAAK;IAChD,EAAE,OAAOiB,OAAO;QACdC,QAAQD,KAAK,CAAC,iCAAiCA;QAC/C,OAAO;YAAEhB,SAAS;QAAQ;IAC5B;AACF"}

package/src/lib/server/api-v1/contacts.js

@@ -15,7 +15,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { nameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
-import { CAPTURED_BY_HOST_FIELD, composeContactName, CONTACT_BIRTHDATE_REFUSAL, CONTACT_COMPANY_IDS_FIELD, CONTACT_EXTRA_PHONE_FIELDS, CONTACT_FACETS_FIELD, CONTACT_FIELDS_MAX_PER_ORG, CONTACT_LIFECYCLE_STAGES, CONTACT_NAME_PART_MAX, consentGroupForHost, contactFacetPath, createResourceUid, CRM_COLLECTIONS, CRM_LEAD_SOURCE_PICKLIST, CRM_MEDIA_IDS_MAX, CRM_SALUTATION_PICKLIST, isContactLifecycleStage, judgeCrmPicklistValue, MARKETING_CONSENT_BY_HOST_FIELD, marketingConsentFieldsForGroup, marketingConsentHostIds, normalizeAddress, normalizeContactBirthdate, normalizeContactEmail, normalizeCrmMediaIds, normalizePhone, ORG_SCOPE_TOKEN, planContactCompanyLink, readContactCompanyLink, readContactCustomInput, readContactFacet, soloConsentGroup } from "@aglyn/aglyn/server";
+import { CAPTURED_BY_HOST_FIELD, composeContactName, CONTACT_BIRTHDATE_REFUSAL, CONTACT_COMPANY_IDS_FIELD, CONTACT_EXTRA_PHONE_FIELDS, CONTACT_FACETS_FIELD, ORG_CONTACT_HOLDER_ID, CONTACT_FIELDS_MAX_PER_ORG, CONTACT_LIFECYCLE_STAGES, CONTACT_NAME_PART_MAX, consentGroupForHost, crmDefaultScopeOf, crmScopeTokens, contactFacetPath, createResourceUid, CRM_COLLECTIONS, CRM_LEAD_SOURCE_PICKLIST, CRM_MEDIA_IDS_MAX, CRM_SALUTATION_PICKLIST, isContactLifecycleStage, judgeCrmPicklistValue, MARKETING_CONSENT_BY_HOST_FIELD, marketingConsentFieldsForGroup, marketingConsentHostIds, normalizeAddress, normalizeContactBirthdate, normalizeContactEmail, normalizeCrmMediaIds, normalizePhone, ORG_SCOPE_TOKEN, planContactCompanyLink, readContactCompanyLink, readContactCustomInput, readContactFacet, soloConsentGroup } from "@aglyn/aglyn/server";
 import { ApiErrors, apiJson, contactCompanyMirrorValue, crmRecordsQuotaForOrg, listResponse, restampCrmListFieldsAt, settleCompanyContactsCounts } from "@aglyn/tenant-data-admin";
 import { claimWrite, orgOwnsHost, paginate, readJsonBody, requireScope, serialize } from "@aglyn/tenant-data-admin/server/api-v1-kit";
 // The leaf, so a spec that stands a partial barrel in still reaches it.
@@ -163,12 +163,13 @@ function contactCrmProfile(data, groupId) {
  * @param groupId - the holder whose CRM profile to publish, or `null` for
  *   the union — see {@link contactCrmProfile}.
  */ function contactView(doc, groupId = null) {
-    var _doc_data, _data_email, _data_name, _data_tags, _data_notes, _serialize, _serialize1;
+    var _doc_data, _data_name, _data_tags, _data_notes, _serialize, _serialize1;
     const data = (_doc_data = doc.data()) != null ? _doc_data : {};
     return _extends({
         id: doc.id,
         object: 'contact',
-        email: (_data_email = data.email) != null ? _data_email : null,
+        // Blank in the store so a sort lists them; no address to an integrator.
+        email: data.email || null,
         name: (_data_name = data.name) != null ? _data_name : null,
         tags: (_data_tags = data.tags) != null ? _data_tags : [],
         notes: (_data_notes = data.notes) != null ? _data_notes : null
@@ -259,9 +260,13 @@ function readContactInput(body, { partial }) {
         // The SAME normalizer every capture point uses. Re-implementing the
         // check here would let the API accept an address `upsertHostContact`
         // would reject, and the two would then disagree about who is a duplicate.
-        const email = normalizeContactEmail(body.email);
-        if (!email) errors.email = 'A valid email address is required';
-        else values.email = email;
+        // Optional (AGL-4122): an address that was sent still has to be one, and
+        // a person with none is named below instead.
+        if (body.email !== undefined && body.email !== null && body.email !== '') {
+            const email = normalizeContactEmail(body.email);
+            if (!email) errors.email = 'A valid email address is required';
+            else values.email = email;
+        }
     }
     if (body.name !== undefined) {
         var _body_name;
@@ -449,9 +454,16 @@ function readContactInput(body, { partial }) {
    * sites is this write made on behalf of — and an integrator should not
    * learn two names for it. Beside a refusal the site is accepted, since the
    * refusal still applies to every site and the site now names the facet.
-   */ if (writesCrm && !values.consentSiteId) {
+   */ if (writesCrm && !values.consentSiteId && partial) {
         errors.consentSiteId = 'Required with a CRM profile field — name the site whose profile of this person to write';
     }
+    /*
+   * WHO THIS IS (AGL-4122). A contact needs no address, so a create needs
+   * something else to call them by. With no site and no address the profile is
+   * the organization's own, and nothing here narrows that.
+   */ if (!partial && !values.email && !values.name && !values.crm.phone && !values.crm.mobilePhone && !values.crm.firstName && !values.crm.lastName && !errors.email) {
+        errors.email = 'Send an email, a name or a phone number';
+    }
     if (values.marketingConsent === false && values.consentSiteId && !writesCrm) {
         errors.consentSiteId = 'Not accepted with marketingConsent: false — a refusal applies to every site';
     }
@@ -580,10 +592,11 @@ function readContactInput(body, { partial }) {
     // The holder's name is the first and last names' when either was given.
     const composed = composeContactName(crm.firstName, crm.lastName);
     if (composed) stored['name'] = composed;
-    const group = consentGroupForHost(ctx.org, siteId);
+    // The person's holder, or the organization when no site was named (AGL-4122).
+    const groupId = siteId ? consentGroupForHost(ctx.org, siteId).groupId : ORG_CONTACT_HOLDER_ID;
     return _extends({
         [CONTACT_FACETS_FIELD]: {
-            [group.groupId]: _extends({
+            [groupId]: _extends({
                 sources: {
                     api: true
                 },
@@ -717,10 +730,11 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
  * taking-and-releasing on a genuine refusal. AGL-2278 applies it to the two
  * older creates.
  *
- * `visibleTo` is stamped with `ORG_SCOPE_TOKEN`, as capture does. A contact
- * written without it matches no `array-contains-any` and is therefore visible
- * on NO site (AGL-1044) — the API would create data nobody can see, which is
- * worse than refusing.
+ * `visibleTo` is stamped with `ORG_SCOPE_TOKEN`, as capture does — or, in an
+ * org that keeps each site's records apart, the named site's group, which
+ * that org must then name. A contact written without one matches no
+ * `array-contains-any` and is therefore visible on NO site (AGL-1044) — the
+ * API would create data nobody can see, which is worse than refusing.
  */ async function createContact(request, ctx) {
     // Validation stays above the claim, as `createRecord` argues: a
     // deterministic 400 must never take the key at all, so an integrator fixes
@@ -747,6 +761,25 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
             headers: ctx.headers
         });
     }
+    /*
+   * Who may see the new contact: the whole org, unless the org keeps each
+   * site's records apart — then the named site's group, and a contact named
+   * by no site has nowhere to belong. A deterministic 400, so above the claim.
+   */ const orgDocument = ctx.org;
+    const keepsSitesApart = crmDefaultScopeOf(orgDocument) === 'host';
+    if (keepsSitesApart && !consentSiteId) {
+        return ApiErrors.badRequest({
+            message: 'Contact failed validation',
+            code: 'validation_failed',
+            fields: {
+                consentSiteId: "Required — this organization keeps each site's records apart, so name the site this contact belongs to"
+            },
+            headers: ctx.headers
+        });
+    }
+    const visibleTo = keepsSitesApart && consentSiteId ? crmScopeTokens(orgDocument, consentGroupForHost(orgDocument, consentSiteId)) : [
+        ORG_SCOPE_TOKEN
+    ];
     // Judged against the org's definitions, above the claim like every other
     // deterministic 400: an unknown key is named, never dropped (AGL-2601).
     const custom = parsed.values.custom ? readContactCustomInput(parsed.values.custom, await readOrgContactFieldDefinitions(ctx)) : null;
@@ -780,16 +813,20 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
     if ('replay' in claimed) return claimed.replay;
     const { claim } = claimed;
     try {
+        var _docs_;
         // Through the org's address index (AGL-2633): an address a merge folded
         // into another record is that record's, and a create on it would mint
         // the duplicate the merge removed.
-        const existing = await findContactByEmail(collection, email);
+        // With no address the number is who they are, and with neither nobody is:
+        // two blank emails are not the same person (AGL-4122).
+        const phone = crm.phone || crm.mobilePhone || '';
+        const existing = email ? await findContactByEmail(collection, email) : phone ? (_docs_ = (await collection.where('phone', '==', phone).limit(1).get()).docs[0]) != null ? _docs_ : null : null;
         if (existing) {
             // Released: the conflict clears if that contact is deleted or merged
             // upstream, and the retry that should then succeed must not replay it.
             await claim.release();
             return ApiErrors.conflict({
-                message: `A contact with this email already exists (${existing.id}). Update it instead.`,
+                message: `A contact with this ${email ? 'email' : 'phone number'} already exists (${existing.id}). Update it instead.`,
                 code: 'contact_exists',
                 headers: ctx.headers
             });
@@ -813,8 +850,11 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
         }
         const id = createResourceUid();
         await collection.doc(id).create(_extends({
-            email
-        }, canonicalName ? nameSearchFields(canonicalName) : {}, {
+            // Blank rather than absent, so a sort by email still lists them.
+            email: email != null ? email : ''
+        }, !email && phone ? {
+            phone
+        } : {}, canonicalName ? nameSearchFields(canonicalName) : {}, {
             tags: tags != null ? tags : []
         }, notes ? {
             notes
@@ -826,7 +866,7 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
             ] : []
         }, marketingConsent === false ? {
             marketingConsent: false
-        } : {}, consentSiteId ? contactCrmCreateFields(ctx, crm, consentSiteId) : {}, {
+        } : {}, contactCrmCreateFields(ctx, crm, consentSiteId), {
             // `sources.api` — a first-class provenance value beside `form`,
             // `member`, `order` and `booking`, so a merchant reading the console
             // can see which people an integration put there.
@@ -838,9 +878,7 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
             // "No next activity" filter asks as `null` (AGL-3321).
             nextTaskAtMs: null,
             // AGL-1044/AGL-1037: without this the contact matches no scoped read.
-            visibleTo: [
-                ORG_SCOPE_TOKEN
-            ],
+            visibleTo,
             createdAt: Timestamp.now(),
             updatedAt: Timestamp.now()
         }));
@@ -849,14 +887,14 @@ const contactsCollection = (ctx)=>ctx.firestore.collection('orgs').doc(ctx.orgId
         await restampCrmListFieldsAt(collection.doc(id), 'contacts');
         // The address's domain, checked after the response (AGL-3328): a domain
         // that takes no mail makes the new contact read "Would bounce".
-        scheduleCapturedEmailCheck({
+        if (email) scheduleCapturedEmailCheck({
             orgId: ctx.orgId,
             email
         });
         // The company the body named has one more contact naming it (AGL-2613);
         // a fresh row's plan is the trivial one, and `crmRefErrors` has already
         // required the company to exist.
-        if (consentSiteId && crm.companyId) {
+        if (crm.companyId) {
             await settleCompanyContactsCounts(companiesCollection(ctx), planContactCompanyLink({
                 companyId: null,
                 companyIds: [],