@aglyn/plugins-crm 1.0.0-beta.296 → 1.1.0

package/src/lib/server/crm-sharing.js

@@ -40,6 +40,7 @@ import { countCrmActivitiesForRecord } from "@aglyn/tenant-data-admin/server/crm
 import { FieldPath, FieldValue } from "firebase-admin/firestore";
 import { BUNDLE_ID } from "../constants/bundle-common.js";
 import { activeSharingRules, CRM_SHARING_CRITERIA_FOR, CRM_SHARING_CRITERIA_KEYS, CRM_SHARING_FIELD, CRM_SHARING_IDS_MAX, CRM_SHARING_OBJECT_LABELS, CRM_SHARING_RULE_IDS_PATH, CRM_SHARING_RULES_MAX, CRM_WRITE_SCOPE_FIELD, describeShareTargets, evaluateRecordGrants, isCrmShareAccess, isCrmSharingObject, planRecordSharing, readCrmSharingRule, readCrmSharingRules, recordHeldScope, sharingPlanChanges, shareTargetsFrom, sharingRulesAskLeadSourceDirection, withManualShares, withoutManualShares } from "../model/crm-sharing.js";
+import { stampCrmActivityCompany } from "../model/crm-activity-link.js";
 import { readLeadSourcePicklist } from "./lead-source-picklist.js";
 import { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from "./org-caller.js";
 import { crmSuiteRefusal } from "./suite-gate.js";
@@ -227,10 +228,16 @@ const ORG_TARGET = {
             ])
         ];
         if (!visibleTo.length) return;
-        const link = {
+        const named = {
             [LINK_FIELD[input.object]]: input.id
         };
-        if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) return;
+        if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, named))) return;
+        // The record just read is the deal or the contact the entry rolls up from.
+        const link = stampCrmActivityCompany(named, _extends({}, input.object === 'deals' ? {
+            deal: record
+        } : {}, input.object === 'contacts' ? {
+            contact: record
+        } : {}));
         const hostId = typeof record['hostId'] === 'string' && record['hostId'] ? record['hostId'] : (_hostIdsFromScope_ = hostIdsFromScope(held)[0]) != null ? _hostIdsFromScope_ : '';
         await orgRef.collection(CRM_COLLECTIONS.activities).doc(createResourceUid()).create(_extends({
             kind: 'note',

package/src/lib/server/crm-sharing.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/crm-sharing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The server half of CRM sharing (AGL-3336) — see `model/crm-sharing.ts`\n * for the model.\n *\n * Three writers, one transaction shape. A record's sharing is RECOMPUTED,\n * never patched: the transaction reads the record, keeps its hand shares\n * (changed by the caller when the act is a share or an unshare), matches\n * every active rule against it as it stands, and writes `visibleTo`,\n * `writeTo`, `sharing` and the list fields derived from `visibleTo` only\n * when any of them moves. So the same function serves\n *\n * - a manager's share or unshare (`crm/sharing`, `share`/`unshare`);\n * - a write to the record anywhere on the server, through the core's\n *   record-written seam (`crmSharingRecordWritten`), and a client-direct\n *   write's follow-up (`evaluate`);\n * - a rule's recompute over existing records (`rule-save`, `rule-continue`),\n *   and its removal (`rule-delete`), in budgeted passes with the progress on\n *   the rule.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  crmActivityLogHasRoom,\n  type CrmActivityLink,\n  crmListFieldsPatch,\n} from '@aglyn/aglyn/app-utils/crm'\nimport { createResourceUid } from '@aglyn/aglyn/app-utils/create-resource-uid'\nimport { hostIdsFromScope } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost, logOrgActivity } from '@aglyn/tenant-data-admin'\nimport { countCrmActivitiesForRecord } from '@aglyn/tenant-data-admin/server/crm-records'\nimport { FieldPath, FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport {\n  activeSharingRules,\n  CRM_SHARING_CRITERIA_FOR,\n  CRM_SHARING_CRITERIA_KEYS,\n  CRM_SHARING_FIELD,\n  CRM_SHARING_IDS_MAX,\n  CRM_SHARING_OBJECT_LABELS,\n  CRM_SHARING_RULE_IDS_PATH,\n  CRM_SHARING_RULES_MAX,\n  CRM_WRITE_SCOPE_FIELD,\n  type CrmShareAccess,\n  type CrmShareGrant,\n  type CrmSharingContext,\n  type CrmSharingCriteria,\n  type CrmSharingObject,\n  type CrmSharingResponse,\n  type CrmSharingRule,\n  type CrmSharingRuleRun,\n  type CrmSharingSite,\n  describeShareTargets,\n  evaluateRecordGrants,\n  isCrmShareAccess,\n  isCrmSharingObject,\n  planRecordSharing,\n  readCrmSharingRule,\n  readCrmSharingRules,\n  recordHeldScope,\n  sharingPlanChanges,\n  shareTargetsFrom,\n  sharingRulesAskLeadSourceDirection,\n  withManualShares,\n  withoutManualShares,\n} from '../model/crm-sharing'\nimport { readLeadSourcePicklist } from './lead-source-picklist'\nimport { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter } from './task-routes'\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/*==========================================\n * THE RULES, READ OFF THE ORG DOCUMENT.\n *=========================================*/\n\n/**\n * A few seconds of memory per process: every CRM write asks, and an org\n * with no rules should cost it nothing past the first read. A cached list\n * is never the reason a grant is TAKEN away — see `recomputeRecordSharing`.\n */\nconst RULES_TTL_MS = 10_000\nconst rulesCache = new Map<string, { atMs: number; rules: CrmSharingRule[] }>()\n\n/** Test seam, and what a rule write calls so its own process reads it fresh. */\nexport function forgetCrmSharingRules(orgId?: string): void {\n  if (orgId) rulesCache.delete(orgId)\n  else rulesCache.clear()\n}\n\nexport async function crmSharingRulesOf(\n  firestore: Firestore,\n  orgId: string,\n  options: { fresh?: boolean; nowMs?: number } = {},\n): Promise<{ rules: CrmSharingRule[]; fresh: boolean }> {\n  const nowMs = options.nowMs ?? Date.now()\n  const cached = rulesCache.get(orgId)\n  if (!options.fresh && cached && nowMs - cached.atMs < RULES_TTL_MS) {\n    return { rules: cached.rules, fresh: false }\n  }\n  const snapshot = await firestore.collection('orgs').doc(orgId).get()\n  const rules = readCrmSharingRules(snapshot.data() ?? null)\n  rulesCache.set(orgId, { atMs: nowMs, rules })\n  return { rules, fresh: true }\n}\n\n/**\n * What the rules for `object` are evaluated against beyond the record: the\n * org's Lead source list, read only when an active rule asks a lead source\n * direction (AGL-3511) — an org whose rules never do pays no read for it.\n */\nexport async function crmSharingContextFor(\n  firestore: Firestore,\n  orgId: string,\n  rules: readonly CrmSharingRule[],\n  object: CrmSharingObject,\n): Promise<CrmSharingContext> {\n  if (!sharingRulesAskLeadSourceDirection(rules, object)) return {}\n  return { leadSources: await readLeadSourcePicklist(firestore, orgId) }\n}\n\n/*==========================================\n * ONE RECORD, RECOMPUTED.\n *=========================================*/\n\nexport interface RecomputeRecordSharingInput {\n  firestore: Firestore\n  orgId: string\n  object: CrmSharingObject\n  id: string\n  /** Every rule the org has, in any state. */\n  rules: readonly CrmSharingRule[]\n  /** Whether `rules` was read just now; a stale list is re-read before it takes a grant away. */\n  fresh: boolean\n  /** The hand shares' change, for a share or an unshare. */\n  manual?: (grants: Record<string, CrmShareGrant>) => Record<string, CrmShareGrant>\n  /** What the rules are evaluated against beyond the record — see {@link crmSharingContextFor}. */\n  context?: CrmSharingContext\n  atMs: number\n}\n\nexport type RecomputeOutcome = 'changed' | 'unchanged' | 'missing'\n\nexport async function recomputeRecordSharing(\n  input: RecomputeRecordSharingInput,\n): Promise<RecomputeOutcome> {\n  const { firestore, orgId, object, id, atMs } = input\n  const ref = firestore.collection('orgs').doc(orgId).collection(object).doc(id)\n  return await firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(ref)\n    if (!snapshot.exists) return 'missing' as const\n    const record = (snapshot.data() ?? {}) as Record<string, unknown>\n    let rules = input.rules\n    /*\n     * A GRANT IS NEVER TAKEN AWAY ON A STALE ANSWER. A rule grant whose rule\n     * the cached list does not name is dropped only once a fresh read of the\n     * org agrees: another process may have saved that rule seconds ago and\n     * applied it to this very record.\n     */\n    if (!input.fresh) {\n      const known = new Set(rules.map((rule) => rule.id))\n      const stored = record[CRM_SHARING_FIELD] as { ruleIds?: unknown } | undefined\n      const ruleIds = Array.isArray(stored?.ruleIds) ? (stored.ruleIds as unknown[]) : []\n      if (ruleIds.some((ruleId) => !known.has(String(ruleId)))) {\n        const org = await tx.get(firestore.collection('orgs').doc(orgId))\n        rules = readCrmSharingRules(org.data() ?? null)\n      }\n    }\n    // A rule read afresh above may ask a direction the caller's context was not read for.\n    const context =\n      input.context?.leadSources || rules === input.rules\n        ? input.context\n        : await crmSharingContextFor(firestore, orgId, rules, object)\n    let grants = evaluateRecordGrants(object, record, rules, atMs, context)\n    if (input.manual) grants = input.manual(grants)\n    const plan = planRecordSharing(record, grants)\n    if (!sharingPlanChanges(record, plan)) return 'unchanged' as const\n    const next = {\n      ...record,\n      visibleTo: plan.visibleTo,\n      [CRM_WRITE_SCOPE_FIELD]: plan.writeTo ?? undefined,\n      [CRM_SHARING_FIELD]: plan.sharing ?? undefined,\n    }\n    tx.update(ref, {\n      visibleTo: plan.visibleTo,\n      [CRM_WRITE_SCOPE_FIELD]: plan.writeTo ?? FieldValue.delete(),\n      [CRM_SHARING_FIELD]: plan.sharing ?? FieldValue.delete(),\n      // The scoped list fields are derived from `visibleTo` (AGL-3321), so a\n      // target site's folded search finds the record the moment it can see it.\n      ...crmListFieldsPatch(object, next),\n    })\n    return 'changed' as const\n  })\n}\n\n/** Several records at once, a few in flight. */\nasync function recomputeMany(\n  input: Omit<RecomputeRecordSharingInput, 'id'>,\n  ids: readonly string[],\n): Promise<{ changed: string[]; missing: number }> {\n  const queue = [...new Set(ids)]\n  const changed: string[] = []\n  let missing = 0\n  const worker = async () => {\n    for (let id = queue.shift(); id !== undefined; id = queue.shift()) {\n      const outcome = await recomputeRecordSharing({ ...input, id })\n      if (outcome === 'changed') changed.push(id)\n      if (outcome === 'missing') missing += 1\n    }\n  }\n  await Promise.all(Array.from({ length: Math.min(8, queue.length) }, worker))\n  return { changed, missing }\n}\n\n/**\n * Re-evaluates the org's rules for these records — the one thing a write\n * anywhere owes the sharing. An org with no active rule for the object\n * costs one cached read and nothing else; grants of a rule switched off\n * are taken away by that rule's own removal pass, not here.\n */\nexport async function evaluateCrmSharing(\n  firestore: Firestore,\n  orgId: string,\n  object: CrmSharingObject,\n  ids: readonly string[],\n): Promise<{ changed: number; missing: number }> {\n  const { rules, fresh } = await crmSharingRulesOf(firestore, orgId)\n  if (!activeSharingRules(rules, object).length) return { changed: 0, missing: 0 }\n  const context = await crmSharingContextFor(firestore, orgId, rules, object)\n  const outcome = await recomputeMany(\n    { firestore, orgId, object, rules, fresh, context, atMs: Date.now() },\n    ids,\n  )\n  return { changed: outcome.changed.length, missing: outcome.missing }\n}\n\n/**\n * The core's record-written seam (AGL-3336): every server writer of a lead,\n * a contact, a company or a deal restamps it, and the restamp tells this.\n * Never throws — the write it is told about already landed.\n */\nexport async function crmSharingRecordWritten(event: {\n  path: string\n  collection: string\n}): Promise<void> {\n  if (!isCrmSharingObject(event.collection)) return\n  const segments = event.path.split('/')\n  if (segments.length !== 4 || segments[0] !== 'orgs' || segments[2] !== event.collection) return\n  try {\n    await evaluateCrmSharing(\n      firebaseAdmin.app().firestore(),\n      segments[1],\n      event.collection,\n      [segments[3]],\n    )\n  } catch (error) {\n    console.error(`[crm] sharing rules could not be evaluated for ${event.path}`, error)\n  }\n}\n\n/*==========================================\n * THE AUDIT: a line on the record, a line in the org's feed.\n *=========================================*/\n\nconst LINK_FIELD: Readonly<Record<CrmSharingObject, keyof CrmActivityLink>> = {\n  leads: 'leadId',\n  contacts: 'contactId',\n  companies: 'companyId',\n  deals: 'dealId',\n}\n\nconst ORG_TARGET: Readonly<Record<CrmSharingObject, 'lead' | 'contact' | 'company' | 'deal'>> = {\n  leads: 'lead',\n  contacts: 'contact',\n  companies: 'company',\n  deals: 'deal',\n}\n\n/**\n * The entry on the record's Activity: who shared it with which sites, or\n * took a share away. Visible to the sites that hold the record and to the\n * sites it names, so both sides of a share read how it came about.\n */\nasync function fileSharingActivity(\n  firestore: Firestore,\n  input: {\n    orgId: string\n    object: CrmSharingObject\n    id: string\n    body: string\n    targets: readonly string[]\n    by: { uid: string; name: string }\n    atMs: number\n  },\n): Promise<void> {\n  try {\n    const orgRef = firestore.collection('orgs').doc(input.orgId)\n    const record = (await orgRef.collection(input.object).doc(input.id).get()).data() ?? {}\n    const held = recordHeldScope(record)\n    const visibleTo = [...new Set([...held, ...input.targets])]\n    if (!visibleTo.length) return\n    const link: CrmActivityLink = { [LINK_FIELD[input.object]]: input.id }\n    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, link))) return\n    const hostId =\n      typeof record['hostId'] === 'string' && record['hostId']\n        ? record['hostId']\n        : (hostIdsFromScope(held)[0] ?? '')\n    await orgRef\n      .collection(CRM_COLLECTIONS.activities)\n      .doc(createResourceUid())\n      .create({\n        kind: 'note',\n        body: input.body,\n        atMs: input.atMs,\n        byUid: input.by.uid,\n        ...(input.by.name ? { byName: input.by.name } : {}),\n        ...link,\n        hostId,\n        visibleTo,\n        sourcePluginId: BUNDLE_ID,\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n  } catch (error) {\n    console.error('[crm] the sharing entry could not be written on the record', input.id, error)\n  }\n}\n\n/*==========================================\n * THE ORG'S SITES.\n *=========================================*/\n\nexport async function crmSharingSites(firestore: Firestore, orgId: string): Promise<CrmSharingSite[]> {\n  const hosts = await firestore.collection('hosts').where('orgId', '==', orgId).get()\n  return hosts.docs\n    .map((doc) => {\n      const displayName = String(doc.get('displayName') ?? '').trim()\n      const subdomain = String(doc.get('subdomain') ?? '').trim()\n      return { id: String(doc.id), name: displayName || subdomain || String(doc.id) }\n    })\n    .sort((a, b) => a.name.localeCompare(b.name))\n}\n\n/*==========================================\n * A RULE, SAVED FROM A REQUEST.\n *=========================================*/\n\nfunction listFrom(raw: unknown, max: number): string[] {\n  if (!Array.isArray(raw)) return []\n  return [\n    ...new Set(\n      raw.map((entry) => String(entry ?? '').trim().slice(0, 200)).filter(Boolean),\n    ),\n  ].slice(0, max)\n}\n\n/**\n * The rule a request describes, judged: an object, a name, sites that are\n * the org's own, targets that are the org's own or all sites. `null` with\n * the reason when it cannot be saved.\n */\nexport function ruleFromRequest(\n  raw: unknown,\n  context: { hostIds: readonly string[]; existing: CrmSharingRule | null; uid: string; nowMs: number },\n): { rule: CrmSharingRule; error: null } | { rule: null; error: string } {\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { rule: null, error: 'Describe the rule.' }\n  }\n  const value = raw as Record<string, unknown>\n  const object = value['object']\n  if (!isCrmSharingObject(object)) {\n    return { rule: null, error: 'Choose which records the rule shares.' }\n  }\n  const name = String(value['name'] ?? '').trim().slice(0, 120)\n  if (!name) return { rule: null, error: 'Name the rule.' }\n  const own = new Set(context.hostIds)\n  const sourceHostIds = listFrom(value['sourceHostIds'], 30)\n  if (sourceHostIds.some((id) => !own.has(id))) {\n    return { rule: null, error: 'A site the rule names is not one of this organization’s.' }\n  }\n  const targets = shareTargetsFrom(value['targets'])\n  if (!targets) return { rule: null, error: 'Choose the sites to share with, or All sites.' }\n  if (hostIdsFromScope(targets).some((id) => !own.has(id))) {\n    return { rule: null, error: 'A site the rule shares with is not one of this organization’s.' }\n  }\n  const access = value['access']\n  if (access !== undefined && !isCrmShareAccess(access)) {\n    return { rule: null, error: 'Access is read-only, or read and edit.' }\n  }\n  const rawCriteria = (value['criteria'] ?? {}) as Record<string, unknown>\n  const criteria: CrmSharingCriteria = {}\n  for (const key of CRM_SHARING_CRITERIA_KEYS) {\n    if (!CRM_SHARING_CRITERIA_FOR[object].includes(key)) continue\n    const list = listFrom(rawCriteria[key], 20)\n    if (list.length) criteria[key] = list\n  }\n  const existing = context.existing\n  const rule = readCrmSharingRule({\n    id: existing?.id ?? createResourceUid(),\n    name,\n    object,\n    enabled: value['enabled'] !== false,\n    sourceHostIds,\n    criteria,\n    targets,\n    access: (access as CrmShareAccess | undefined) ?? 'read',\n    createdByUid: existing?.createdByUid ?? context.uid,\n    createdAtMs: existing?.createdAtMs ?? context.nowMs,\n    updatedAtMs: context.nowMs,\n  })\n  if (!rule) return { rule: null, error: 'The rule could not be read.' }\n  return { rule, error: null }\n}\n\n/** A rule as the org document stores it — no `undefined` anywhere. */\nfunction storedRule(rule: CrmSharingRule): Record<string, unknown> {\n  return JSON.parse(JSON.stringify(rule)) as Record<string, unknown>\n}\n\n/**\n * Writes the org's rule list through `change`, in a transaction over the org\n * document, and answers the list as written.\n */\nasync function writeRules(\n  firestore: Firestore,\n  orgId: string,\n  change: (rules: CrmSharingRule[]) => CrmSharingRule[] | { error: string },\n): Promise<{ rules: CrmSharingRule[]; error: null } | { rules: null; error: string }> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const result = await firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(orgRef)\n    const next = change(readCrmSharingRules(snapshot.data() ?? null))\n    if ('error' in next) return { rules: null, error: next.error }\n    tx.update(orgRef, new FieldPath('crm', 'sharingRules'), next.map(storedRule))\n    return { rules: next, error: null }\n  })\n  forgetCrmSharingRules(orgId)\n  return result as { rules: CrmSharingRule[]; error: null } | { rules: null; error: string }\n}\n\n/** Replaces one rule's run, leaving every other rule as it is. */\nasync function writeRun(\n  firestore: Firestore,\n  orgId: string,\n  ruleId: string,\n  run: CrmSharingRuleRun,\n  options: { dropRule?: boolean } = {},\n): Promise<CrmSharingRule | null> {\n  const written = await writeRules(firestore, orgId, (rules) =>\n    options.dropRule\n      ? rules.filter((rule) => rule.id !== ruleId)\n      : rules.map((rule) => (rule.id === ruleId ? { ...rule, run } : rule)),\n  )\n  return written.rules?.find((rule) => rule.id === ruleId) ?? null\n}\n\n/*==========================================\n * A RULE'S RUN: apply it everywhere, or take it away.\n *=========================================*/\n\nconst RUN_PAGE = 200\n\n/**\n * One budgeted pass of a rule's run, with the progress written on the rule\n * after every page so a reopened settings page shows where it stands and\n * `rule-continue` picks up from the cursor.\n *\n * `apply` walks the object's whole collection by document id — a rule\n * matches on fields no index narrows to (a facet's tags, a site that\n * captured the person) — and writes only the records whose sharing moves.\n * `remove` asks for exactly the records the rule holds a grant on\n * (`sharing.ruleIds`), each of which the recompute then takes it off; a\n * page that makes no progress fails the run rather than looping.\n */\nexport async function advanceSharingRuleRun(\n  firestore: Firestore,\n  orgId: string,\n  ruleId: string,\n  deadlineMs: number,\n): Promise<{ rule: CrmSharingRule | null; more: boolean }> {\n  const read = await crmSharingRulesOf(firestore, orgId, { fresh: true })\n  let rule = read.rules.find((entry) => entry.id === ruleId) ?? null\n  if (!rule?.run || rule.run.status !== 'running') return { rule, more: false }\n  const records = firestore.collection('orgs').doc(orgId).collection(rule.object)\n  let run: CrmSharingRuleRun = { ...rule.run }\n  const seen = new Set<string>()\n  try {\n    while (Date.now() < deadlineMs) {\n      const { rules } = await crmSharingRulesOf(firestore, orgId, { fresh: true })\n      const context = await crmSharingContextFor(firestore, orgId, rules, rule.object)\n      let page: FirebaseFirestore.QuerySnapshot\n      if (run.mode === 'apply') {\n        let query = records.orderBy(FieldPath.documentId()).limit(RUN_PAGE)\n        if (run.cursor) query = query.startAfter(run.cursor)\n        page = await query.get()\n      } else {\n        page = await records.where(CRM_SHARING_RULE_IDS_PATH, 'array-contains', ruleId).limit(RUN_PAGE).get()\n      }\n      const atMs = Date.now()\n      // Only the records whose sharing would move are written.\n      const moving = page.docs\n        .filter((doc) => {\n          const record = (doc.data() ?? {}) as Record<string, unknown>\n          const plan = planRecordSharing(\n            record,\n            evaluateRecordGrants(rule!.object, record, rules, atMs, context),\n          )\n          return sharingPlanChanges(record, plan)\n        })\n        .map((doc) => doc.id)\n      if (run.mode === 'remove' && page.docs.length && page.docs.every((doc) => seen.has(doc.id))) {\n        throw new Error('the rule’s grants did not come off these records')\n      }\n      for (const doc of page.docs) seen.add(doc.id)\n      const outcome = await recomputeMany(\n        { firestore, orgId, object: rule.object, rules, fresh: true, context, atMs },\n        moving,\n      )\n      const done = run.mode === 'apply' ? page.size < RUN_PAGE : page.empty\n      run = {\n        ...run,\n        processed: run.processed + page.size,\n        changed: run.changed + outcome.changed.length,\n        cursor: run.mode === 'apply' ? (page.docs[page.docs.length - 1]?.id ?? run.cursor ?? null) : null,\n        ...(done ? { status: 'done' as const, finishedAtMs: Date.now() } : {}),\n      }\n      rule = await writeRun(firestore, orgId, ruleId, run, {\n        dropRule: done && rule.deleting === true,\n      })\n      if (done || !rule) return { rule, more: false }\n    }\n    return { rule, more: true }\n  } catch (error) {\n    console.error('[crm] a sharing rule run failed', orgId, ruleId, error)\n    rule = await writeRun(firestore, orgId, ruleId, {\n      ...run,\n      status: 'failed',\n      finishedAtMs: Date.now(),\n      error: 'The recompute stopped. Resume it to carry on from where it stopped.',\n    })\n    return { rule, more: false }\n  }\n}\n\n/*==========================================\n * THE ROUTE.\n *=========================================*/\n\n/** How long one request works on a rule before it answers and the page asks again. */\nconst RUN_BUDGET_MS = 20_000\n\nconst MANAGERS_ONLY =\n  'Sharing records across sites is for the workspace’s owners and admins.'\n\nfunction readIds(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null\n  const ids = [\n    ...new Set(\n      raw.map((entry) => String(entry ?? '').trim().slice(0, 256)).filter((id) => id && !id.includes('/')),\n    ),\n  ].slice(0, CRM_SHARING_IDS_MAX)\n  return ids.length ? ids : null\n}\n\n/**\n * `POST /api/crm/sharing` — `{ action, hostId | orgId, … }`.\n *\n * Every action but `evaluate` is an org manager's: an OWNER or ADMIN of the\n * whole workspace (`authorizeOrgCaller(…, 'manage-org')`), under a site's\n * hub or the org's. `evaluate` is what a client-direct write owes the rules\n * and is open to whoever may write the CRM. The plan gate is the CRM's own\n * (`crmSuiteRefusal`): sharing is only meaningful across several sites, and\n * the number of sites a workspace may have is already the plan's.\n */\nexport const crmSharingHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const action = String(body['action'] ?? '')\n  const firestore = firebaseAdmin.app().firestore()\n  try {\n    if (action === 'evaluate') {\n      const object = body['object']\n      const ids = readIds(body['ids'])\n      if (!isCrmSharingObject(object) || !ids) {\n        res.status(400).json({ error: 'Name the records.' })\n        return\n      }\n      const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n      if (writer.ok === false) {\n        res.status(writer.status).json(writer.body)\n        return\n      }\n      const outcome = await evaluateCrmSharing(firestore, writer.orgId, object, ids)\n      const answer: CrmSharingResponse = { ok: true, ...outcome }\n      res.status(200).json(answer)\n      return\n    }\n\n    const orgId =\n      scope.level === 'org'\n        ? scope.orgId\n        : ((await getOrgForHost(scope.hostId).catch(() => null))?.orgId ?? '')\n    if (!orgId) {\n      res.status(404).json({ error: 'This site has no organization, so it has no CRM.' })\n      return\n    }\n    const caller = await authorizeOrgCaller(req, orgId, {\n      needs: 'manage-org',\n      refusal: MANAGERS_ONLY,\n    })\n    if (caller.ok === false) {\n      res.status(caller.status).json({ error: caller.error })\n      return\n    }\n    const suite = crmSuiteRefusal(caller.org, 'Sharing records across sites')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const actor = { uid: caller.uid, email: caller.email }\n    const byName = caller.name || caller.email || ''\n    const nowMs = Date.now()\n\n    if (action === 'sites') {\n      const answer: CrmSharingResponse = { ok: true, sites: await crmSharingSites(firestore, orgId) }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'share' || action === 'unshare') {\n      const object = body['object']\n      const ids = readIds(body['ids'])\n      if (!isCrmSharingObject(object) || !ids) {\n        res.status(400).json({ error: 'Name the records to share.' })\n        return\n      }\n      const targets = shareTargetsFrom(body['targets'])\n      if (!targets) {\n        res.status(400).json({ error: 'Choose the sites, or All sites.' })\n        return\n      }\n      const sites = await crmSharingSites(firestore, orgId)\n      const own = new Set(sites.map((site) => site.id))\n      if (hostIdsFromScope(targets).some((id) => !own.has(id))) {\n        res.status(400).json({ error: 'A site named is not one of this organization’s.' })\n        return\n      }\n      const access: CrmShareAccess = body['access'] === 'edit' ? 'edit' : 'read'\n      const { rules, fresh } = await crmSharingRulesOf(firestore, orgId)\n      const context = await crmSharingContextFor(firestore, orgId, rules, object)\n      const outcome = await recomputeMany(\n        {\n          firestore,\n          orgId,\n          object,\n          rules,\n          fresh,\n          context,\n          atMs: nowMs,\n          manual: (grants) =>\n            action === 'share'\n              ? withManualShares(grants, targets, access, { uid: caller.uid, name: byName }, nowMs)\n              : withoutManualShares(grants, targets),\n        },\n        ids,\n      )\n      const siteName = (id: string) => sites.find((site) => site.id === id)?.name ?? 'a site'\n      const named = describeShareTargets(targets, siteName)\n      const sentence =\n        action === 'share'\n          ? `Shared with ${named}${access === 'edit' ? ' (read and edit)' : ' (read-only)'}`\n          : `Stopped sharing with ${named}`\n      await Promise.all(\n        outcome.changed.map((id) =>\n          fileSharingActivity(firestore, {\n            orgId,\n            object,\n            id,\n            body: sentence,\n            targets,\n            by: { uid: caller.uid, name: byName },\n            atMs: nowMs,\n          }),\n        ),\n      )\n      if (outcome.changed.length) {\n        const label = CRM_SHARING_OBJECT_LABELS[object]\n        await logOrgActivity(\n          orgId,\n          actor,\n          outcome.changed.length === 1\n            ? `${sentence}: one ${label.one}`\n            : `${sentence}: ${outcome.changed.length} ${label.many.toLowerCase()}`,\n          {\n            type: ORG_TARGET[object],\n            ...(outcome.changed.length === 1 ? { id: outcome.changed[0] } : {}),\n          },\n        ).catch(() => undefined)\n      }\n      const answer: CrmSharingResponse = {\n        ok: true,\n        changed: outcome.changed.length,\n        missing: outcome.missing,\n      }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'rule-save') {\n      const hostIds = await orgHostIds(firestore, orgId)\n      const raw = body['rule']\n      const ruleId = raw && typeof raw === 'object' ? String((raw as Record<string, unknown>)['id'] ?? '') : ''\n      let saved: CrmSharingRule | null = null\n      let error: string | null = null\n      const written = await writeRules(firestore, orgId, (rules) => {\n        const existing = ruleId ? (rules.find((rule) => rule.id === ruleId) ?? null) : null\n        if (ruleId && !existing) return { error: 'That rule no longer exists.' }\n        if (existing?.deleting) return { error: 'That rule is being deleted.' }\n        if (!existing && rules.length >= CRM_SHARING_RULES_MAX) {\n          return { error: `A workspace keeps at most ${CRM_SHARING_RULES_MAX} sharing rules.` }\n        }\n        const judged = ruleFromRequest(raw, { hostIds, existing, uid: caller.uid, nowMs })\n        if (!judged.rule) {\n          error = judged.error\n          return { error: judged.error }\n        }\n        /*\n         * An enabled rule walks every record — it may now match some and not\n         * others. A disabled one only has grants to take away, and asks for\n         * exactly the records holding them.\n         */\n        saved = {\n          ...judged.rule,\n          run: {\n            status: 'running',\n            mode: judged.rule.enabled ? 'apply' : 'remove',\n            processed: 0,\n            changed: 0,\n            cursor: null,\n            startedAtMs: nowMs,\n          },\n        }\n        return existing\n          ? rules.map((rule) => (rule.id === existing.id ? saved! : rule))\n          : [...rules, saved]\n      })\n      if (!written.rules || !saved) {\n        res.status(400).json({ error: error ?? written.error ?? 'The rule could not be saved.' })\n        return\n      }\n      const rule = saved as CrmSharingRule\n      await logOrgActivity(\n        orgId,\n        actor,\n        `${ruleId ? 'Changed' : 'Added'} the sharing rule “${rule.name}”`,\n        { type: `${BUNDLE_ID}:sharingRule`, id: rule.id, name: rule.name },\n      ).catch(() => undefined)\n      const advanced = await advanceSharingRuleRun(firestore, orgId, rule.id, Date.now() + RUN_BUDGET_MS)\n      const answer: CrmSharingResponse = { ok: true, rule: advanced.rule, more: advanced.more }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'rule-delete' || action === 'rule-continue') {\n      const ruleId = String(body['ruleId'] ?? '').trim()\n      if (!ruleId) {\n        res.status(400).json({ error: 'Name the rule.' })\n        return\n      }\n      if (action === 'rule-delete') {\n        let name = ''\n        const written = await writeRules(firestore, orgId, (rules) => {\n          const existing = rules.find((rule) => rule.id === ruleId)\n          if (!existing) return { error: 'That rule no longer exists.' }\n          name = existing.name\n          return rules.map((rule) =>\n            rule.id === ruleId\n              ? {\n                  ...rule,\n                  enabled: false,\n                  deleting: true,\n                  updatedAtMs: nowMs,\n                  run: {\n                    status: 'running' as const,\n                    mode: 'remove' as const,\n                    processed: 0,\n                    changed: 0,\n                    cursor: null,\n                    startedAtMs: nowMs,\n                  },\n                }\n              : rule,\n          )\n        })\n        if (!written.rules) {\n          res.status(404).json({ error: written.error })\n          return\n        }\n        await logOrgActivity(orgId, actor, `Deleted the sharing rule “${name}”`, {\n          type: `${BUNDLE_ID}:sharingRule`,\n          id: ruleId,\n          name,\n        }).catch(() => undefined)\n      } else {\n        // A failed run resumes from its cursor.\n        await writeRules(firestore, orgId, (rules) =>\n          rules.map((rule) =>\n            rule.id === ruleId && rule.run?.status === 'failed'\n              ? { ...rule, run: { ...rule.run, status: 'running' as const } }\n              : rule,\n          ),\n        )\n      }\n      const advanced = await advanceSharingRuleRun(firestore, orgId, ruleId, Date.now() + RUN_BUDGET_MS)\n      const answer: CrmSharingResponse = { ok: true, rule: advanced.rule, more: advanced.more }\n      res.status(200).json(answer)\n      return\n    }\n\n    res.status(400).json({ error: 'Unknown sharing action.' })\n  } catch (error) {\n    console.error('[crm] sharing failed', action, error)\n    res.status(500).json({ error: 'The sharing could not be saved. Try again.' })\n  }\n}\n\n"],"names":["CRM_COLLECTIONS","crmActivityLogHasRoom","crmListFieldsPatch","createResourceUid","hostIdsFromScope","firebaseAdmin","getOrgForHost","logOrgActivity","countCrmActivitiesForRecord","FieldPath","FieldValue","BUNDLE_ID","activeSharingRules","CRM_SHARING_CRITERIA_FOR","CRM_SHARING_CRITERIA_KEYS","CRM_SHARING_FIELD","CRM_SHARING_IDS_MAX","CRM_SHARING_OBJECT_LABELS","CRM_SHARING_RULE_IDS_PATH","CRM_SHARING_RULES_MAX","CRM_WRITE_SCOPE_FIELD","describeShareTargets","evaluateRecordGrants","isCrmShareAccess","isCrmSharingObject","planRecordSharing","readCrmSharingRule","readCrmSharingRules","recordHeldScope","sharingPlanChanges","shareTargetsFrom","sharingRulesAskLeadSourceDirection","withManualShares","withoutManualShares","readLeadSourcePicklist","authorizeOrgCaller","orgHostIds","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","RULES_TTL_MS","rulesCache","Map","forgetCrmSharingRules","orgId","delete","clear","crmSharingRulesOf","firestore","options","snapshot","nowMs","Date","now","cached","get","fresh","atMs","rules","collection","doc","data","set","crmSharingContextFor","object","leadSources","recomputeRecordSharing","input","id","ref","runTransaction","tx","plan","exists","record","known","Set","map","rule","stored","ruleIds","Array","isArray","some","ruleId","has","String","org","context","grants","manual","next","visibleTo","writeTo","undefined","sharing","update","recomputeMany","ids","queue","changed","missing","worker","shift","outcome","push","Promise","all","from","length","Math","min","evaluateCrmSharing","crmSharingRecordWritten","event","segments","path","split","app","error","console","LINK_FIELD","leads","contacts","companies","deals","ORG_TARGET","fileSharingActivity","orgRef","held","targets","link","hostId","activities","create","kind","body","byUid","by","uid","name","byName","sourcePluginId","createdAt","serverTimestamp","updatedAt","crmSharingSites","hosts","where","docs","displayName","trim","subdomain","sort","a","b","localeCompare","listFrom","raw","max","entry","slice","filter","Boolean","ruleFromRequest","value","own","hostIds","sourceHostIds","access","rawCriteria","criteria","key","includes","list","existing","enabled","createdByUid","createdAtMs","updatedAtMs","storedRule","JSON","parse","stringify","writeRules","change","result","writeRun","run","written","dropRule","find","RUN_PAGE","advanceSharingRuleRun","deadlineMs","read","status","more","records","seen","page","mode","query","orderBy","documentId","limit","cursor","startAfter","moving","every","Error","add","done","size","empty","processed","finishedAtMs","deleting","RUN_BUDGET_MS","MANAGERS_ONLY","readIds","crmSharingHandler","req","res","method","setHeader","json","scope","action","writer","suiteAct","ok","answer","level","catch","caller","needs","refusal","suite","actor","email","sites","site","siteName","named","sentence","label","one","many","toLowerCase","type","saved","judged","startedAtMs","advanced"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;CAkBC,GAED,SACEA,eAAe,EACfC,qBAAqB,EAErBC,kBAAkB,QACb,6BAA4B;AACnC,SAASC,iBAAiB,QAAQ,6CAA4C;AAC9E,SAASC,gBAAgB,QAAQ,sCAAqC;AAEtE,SAASC,aAAa,EAAEC,aAAa,EAAEC,cAAc,QAAQ,2BAA0B;AACvF,SAASC,2BAA2B,QAAQ,8CAA6C;AACzF,SAASC,SAAS,EAAEC,UAAU,QAAQ,2BAA0B;AAChE,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SACEC,kBAAkB,EAClBC,wBAAwB,EACxBC,yBAAyB,EACzBC,iBAAiB,EACjBC,mBAAmB,EACnBC,yBAAyB,EACzBC,yBAAyB,EACzBC,qBAAqB,EACrBC,qBAAqB,EAUrBC,oBAAoB,EACpBC,oBAAoB,EACpBC,gBAAgB,EAChBC,kBAAkB,EAClBC,iBAAiB,EACjBC,kBAAkB,EAClBC,mBAAmB,EACnBC,eAAe,EACfC,kBAAkB,EAClBC,gBAAgB,EAChBC,kCAAkC,EAClCC,gBAAgB,EAChBC,mBAAmB,QACd,0BAAsB;AAC7B,SAASC,sBAAsB,QAAQ,4BAAwB;AAC/D,SAASC,kBAAkB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAChF,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,QAAQ,mBAAe;AAIlD;;2CAE2C,GAE3C;;;;CAIC,GACD,MAAMC,eAAe;AACrB,MAAMC,aAAa,IAAIC;AAEvB,8EAA8E,GAC9E,OAAO,SAASC,sBAAsBC,KAAc;IAClD,IAAIA,OAAOH,WAAWI,MAAM,CAACD;SACxBH,WAAWK,KAAK;AACvB;AAEA,OAAO,eAAeC,kBACpBC,SAAoB,EACpBJ,KAAa,EACbK,UAA+C,CAAC,CAAC;QAEnCA,gBAMoBC;IANlC,MAAMC,SAAQF,iBAAAA,QAAQE,KAAK,YAAbF,iBAAiBG,KAAKC,GAAG;IACvC,MAAMC,SAASb,WAAWc,GAAG,CAACX;IAC9B,IAAI,CAACK,QAAQO,KAAK,IAAIF,UAAUH,QAAQG,OAAOG,IAAI,GAAGjB,cAAc;QAClE,OAAO;YAAEkB,OAAOJ,OAAOI,KAAK;YAAEF,OAAO;QAAM;IAC7C;IACA,MAAMN,WAAW,MAAMF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOW,GAAG;IAClE,MAAMG,QAAQ/B,qBAAoBuB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB;IACrDT,WAAWqB,GAAG,CAAClB,OAAO;QAAEa,MAAMN;QAAOO;IAAM;IAC3C,OAAO;QAAEA;QAAOF,OAAO;IAAK;AAC9B;AAEA;;;;CAIC,GACD,OAAO,eAAeO,qBACpBf,SAAoB,EACpBJ,KAAa,EACbc,KAAgC,EAChCM,MAAwB;IAExB,IAAI,CAACjC,mCAAmC2B,OAAOM,SAAS,OAAO,CAAC;IAChE,OAAO;QAAEC,aAAa,MAAM/B,uBAAuBc,WAAWJ;IAAO;AACvE;AAwBA,OAAO,eAAesB,uBACpBC,KAAkC;IAElC,MAAM,EAAEnB,SAAS,EAAEJ,KAAK,EAAEoB,MAAM,EAAEI,EAAE,EAAEX,IAAI,EAAE,GAAGU;IAC/C,MAAME,MAAMrB,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOe,UAAU,CAACK,QAAQJ,GAAG,CAACQ;IAC3E,OAAO,MAAMpB,UAAUsB,cAAc,CAAC,OAAOC;YAG3BrB,gBA6BWsB,eACJA,eAIIA,gBACJA;YAhBrBL;QArBF,MAAMjB,WAAW,MAAMqB,GAAGhB,GAAG,CAACc;QAC9B,IAAI,CAACnB,SAASuB,MAAM,EAAE,OAAO;QAC7B,MAAMC,UAAUxB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB,CAAC;QACpC,IAAIQ,QAAQS,MAAMT,KAAK;QACvB;;;;;KAKC,GACD,IAAI,CAACS,MAAMX,KAAK,EAAE;YAChB,MAAMmB,QAAQ,IAAIC,IAAIlB,MAAMmB,GAAG,CAAC,CAACC,OAASA,KAAKV,EAAE;YACjD,MAAMW,SAASL,MAAM,CAAC3D,kBAAkB;YACxC,MAAMiE,UAAUC,MAAMC,OAAO,CAACH,0BAAAA,OAAQC,OAAO,IAAKD,OAAOC,OAAO,GAAiB,EAAE;YACnF,IAAIA,QAAQG,IAAI,CAAC,CAACC,SAAW,CAACT,MAAMU,GAAG,CAACC,OAAOF,WAAW;oBAE5BG;gBAD5B,MAAMA,MAAM,MAAMhB,GAAGhB,GAAG,CAACP,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB;gBAC1Dc,QAAQ/B,qBAAoB4D,YAAAA,IAAI1B,IAAI,cAAR0B,YAAc;YAC5C;QACF;QACA,sFAAsF;QACtF,MAAMC,UACJrB,EAAAA,iBAAAA,MAAMqB,OAAO,qBAAbrB,eAAeF,WAAW,KAAIP,UAAUS,MAAMT,KAAK,GAC/CS,MAAMqB,OAAO,GACb,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;QAC1D,IAAIyB,SAASnE,qBAAqB0C,QAAQU,QAAQhB,OAAOD,MAAM+B;QAC/D,IAAIrB,MAAMuB,MAAM,EAAED,SAAStB,MAAMuB,MAAM,CAACD;QACxC,MAAMjB,OAAO/C,kBAAkBiD,QAAQe;QACvC,IAAI,CAAC5D,mBAAmB6C,QAAQF,OAAO,OAAO;QAC9C,MAAMmB,OAAO,aACRjB;YACHkB,WAAWpB,KAAKoB,SAAS;YACzB,CAACxE,sBAAsB,GAAEoD,gBAAAA,KAAKqB,OAAO,YAAZrB,gBAAgBsB;YACzC,CAAC/E,kBAAkB,GAAEyD,gBAAAA,KAAKuB,OAAO,YAAZvB,gBAAgBsB;;QAEvCvB,GAAGyB,MAAM,CAAC3B,KAAK;YACbuB,WAAWpB,KAAKoB,SAAS;YACzB,CAACxE,sBAAsB,GAAEoD,iBAAAA,KAAKqB,OAAO,YAAZrB,iBAAgB9D,WAAWmC,MAAM;YAC1D,CAAC9B,kBAAkB,GAAEyD,iBAAAA,KAAKuB,OAAO,YAAZvB,iBAAgB9D,WAAWmC,MAAM;WAGnD3C,mBAAmB8D,QAAQ2B;QAEhC,OAAO;IACT;AACF;AAEA,8CAA8C,GAC9C,eAAeM,cACb9B,KAA8C,EAC9C+B,GAAsB;IAEtB,MAAMC,QAAQ;WAAI,IAAIvB,IAAIsB;KAAK;IAC/B,MAAME,UAAoB,EAAE;IAC5B,IAAIC,UAAU;IACd,MAAMC,SAAS;QACb,IAAK,IAAIlC,KAAK+B,MAAMI,KAAK,IAAInC,OAAO0B,WAAW1B,KAAK+B,MAAMI,KAAK,GAAI;YACjE,MAAMC,UAAU,MAAMtC,uBAAuB,aAAKC;gBAAOC;;YACzD,IAAIoC,YAAY,WAAWJ,QAAQK,IAAI,CAACrC;YACxC,IAAIoC,YAAY,WAAWH,WAAW;QACxC;IACF;IACA,MAAMK,QAAQC,GAAG,CAAC1B,MAAM2B,IAAI,CAAC;QAAEC,QAAQC,KAAKC,GAAG,CAAC,GAAGZ,MAAMU,MAAM;IAAE,GAAGP;IACpE,OAAO;QAAEF;QAASC;IAAQ;AAC5B;AAEA;;;;;CAKC,GACD,OAAO,eAAeW,mBACpBhE,SAAoB,EACpBJ,KAAa,EACboB,MAAwB,EACxBkC,GAAsB;IAEtB,MAAM,EAAExC,KAAK,EAAEF,KAAK,EAAE,GAAG,MAAMT,kBAAkBC,WAAWJ;IAC5D,IAAI,CAAChC,mBAAmB8C,OAAOM,QAAQ6C,MAAM,EAAE,OAAO;QAAET,SAAS;QAAGC,SAAS;IAAE;IAC/E,MAAMb,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;IACpE,MAAMwC,UAAU,MAAMP,cACpB;QAAEjD;QAAWJ;QAAOoB;QAAQN;QAAOF;QAAOgC;QAAS/B,MAAML,KAAKC,GAAG;IAAG,GACpE6C;IAEF,OAAO;QAAEE,SAASI,QAAQJ,OAAO,CAACS,MAAM;QAAER,SAASG,QAAQH,OAAO;IAAC;AACrE;AAEA;;;;CAIC,GACD,OAAO,eAAeY,wBAAwBC,KAG7C;IACC,IAAI,CAAC1F,mBAAmB0F,MAAMvD,UAAU,GAAG;IAC3C,MAAMwD,WAAWD,MAAME,IAAI,CAACC,KAAK,CAAC;IAClC,IAAIF,SAASN,MAAM,KAAK,KAAKM,QAAQ,CAAC,EAAE,KAAK,UAAUA,QAAQ,CAAC,EAAE,KAAKD,MAAMvD,UAAU,EAAE;IACzF,IAAI;QACF,MAAMqD,mBACJ3G,cAAciH,GAAG,GAAGtE,SAAS,IAC7BmE,QAAQ,CAAC,EAAE,EACXD,MAAMvD,UAAU,EAChB;YAACwD,QAAQ,CAAC,EAAE;SAAC;IAEjB,EAAE,OAAOI,OAAO;QACdC,QAAQD,KAAK,CAAC,CAAC,+CAA+C,EAAEL,MAAME,IAAI,EAAE,EAAEG;IAChF;AACF;AAEA;;2CAE2C,GAE3C,MAAME,aAAwE;IAC5EC,OAAO;IACPC,UAAU;IACVC,WAAW;IACXC,OAAO;AACT;AAEA,MAAMC,aAA0F;IAC9FJ,OAAO;IACPC,UAAU;IACVC,WAAW;IACXC,OAAO;AACT;AAEA;;;;CAIC,GACD,eAAeE,oBACb/E,SAAoB,EACpBmB,KAQC;IAED,IAAI;YAEa,OASR/D;QAVP,MAAM4H,SAAShF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAACO,MAAMvB,KAAK;QAC3D,MAAM8B,UAAS,QAAA,AAAC,CAAA,MAAMsD,OAAOrE,UAAU,CAACQ,MAAMH,MAAM,EAAEJ,GAAG,CAACO,MAAMC,EAAE,EAAEb,GAAG,EAAC,EAAGM,IAAI,cAAhE,QAAsE,CAAC;QACtF,MAAMoE,OAAOrG,gBAAgB8C;QAC7B,MAAMkB,YAAY;eAAI,IAAIhB,IAAI;mBAAIqD;mBAAS9D,MAAM+D,OAAO;aAAC;SAAE;QAC3D,IAAI,CAACtC,UAAUiB,MAAM,EAAE;QACvB,MAAMsB,OAAwB;YAAE,CAACV,UAAU,CAACtD,MAAMH,MAAM,CAAC,CAAC,EAAEG,MAAMC,EAAE;QAAC;QACrE,IAAI,CAACnE,sBAAsB,MAAMO,4BAA4BwH,QAAQG,QAAQ;QAC7E,MAAMC,SACJ,OAAO1D,MAAM,CAAC,SAAS,KAAK,YAAYA,MAAM,CAAC,SAAS,GACpDA,MAAM,CAAC,SAAS,IACftE,qBAAAA,iBAAiB6H,KAAK,CAAC,EAAE,YAAzB7H,qBAA6B;QACpC,MAAM4H,OACHrE,UAAU,CAAC3D,gBAAgBqI,UAAU,EACrCzE,GAAG,CAACzD,qBACJmI,MAAM,CAAC;YACNC,MAAM;YACNC,MAAMrE,MAAMqE,IAAI;YAChB/E,MAAMU,MAAMV,IAAI;YAChBgF,OAAOtE,MAAMuE,EAAE,CAACC,GAAG;WACfxE,MAAMuE,EAAE,CAACE,IAAI,GAAG;YAAEC,QAAQ1E,MAAMuE,EAAE,CAACE,IAAI;QAAC,IAAI,CAAC,GAC9CT;YACHC;YACAxC;YACAkD,gBAAgBnI;YAChBoI,WAAWrI,WAAWsI,eAAe;YACrCC,WAAWvI,WAAWsI,eAAe;;IAE3C,EAAE,OAAOzB,OAAO;QACdC,QAAQD,KAAK,CAAC,8DAA8DpD,MAAMC,EAAE,EAAEmD;IACxF;AACF;AAEA;;2CAE2C,GAE3C,OAAO,eAAe2B,gBAAgBlG,SAAoB,EAAEJ,KAAa;IACvE,MAAMuG,QAAQ,MAAMnG,UAAUW,UAAU,CAAC,SAASyF,KAAK,CAAC,SAAS,MAAMxG,OAAOW,GAAG;IACjF,OAAO4F,MAAME,IAAI,CACdxE,GAAG,CAAC,CAACjB;YACuBA,UACFA;QADzB,MAAM0F,cAAchE,QAAO1B,WAAAA,IAAIL,GAAG,CAAC,0BAARK,WAA0B,IAAI2F,IAAI;QAC7D,MAAMC,YAAYlE,QAAO1B,YAAAA,IAAIL,GAAG,CAAC,wBAARK,YAAwB,IAAI2F,IAAI;QACzD,OAAO;YAAEnF,IAAIkB,OAAO1B,IAAIQ,EAAE;YAAGwE,MAAMU,eAAeE,aAAalE,OAAO1B,IAAIQ,EAAE;QAAE;IAChF,GACCqF,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEd,IAAI,CAACgB,aAAa,CAACD,EAAEf,IAAI;AAC/C;AAEA;;2CAE2C,GAE3C,SAASiB,SAASC,GAAY,EAAEC,GAAW;IACzC,IAAI,CAAC9E,MAAMC,OAAO,CAAC4E,MAAM,OAAO,EAAE;IAClC,OAAO;WACF,IAAIlF,IACLkF,IAAIjF,GAAG,CAAC,CAACmF,QAAU1E,OAAO0E,gBAAAA,QAAS,IAAIT,IAAI,GAAGU,KAAK,CAAC,GAAG,MAAMC,MAAM,CAACC;KAEvE,CAACF,KAAK,CAAC,GAAGF;AACb;AAEA;;;;CAIC,GACD,OAAO,SAASK,gBACdN,GAAY,EACZtE,OAAoG;QAUhF6E,aAgBCA;IAxBrB,IAAI,CAACP,OAAO,OAAOA,QAAQ,YAAY7E,MAAMC,OAAO,CAAC4E,MAAM;QACzD,OAAO;YAAEhF,MAAM;YAAMyC,OAAO;QAAqB;IACnD;IACA,MAAM8C,QAAQP;IACd,MAAM9F,SAASqG,KAAK,CAAC,SAAS;IAC9B,IAAI,CAAC7I,mBAAmBwC,SAAS;QAC/B,OAAO;YAAEc,MAAM;YAAMyC,OAAO;QAAwC;IACtE;IACA,MAAMqB,OAAOtD,QAAO+E,cAAAA,KAAK,CAAC,OAAO,YAAbA,cAAiB,IAAId,IAAI,GAAGU,KAAK,CAAC,GAAG;IACzD,IAAI,CAACrB,MAAM,OAAO;QAAE9D,MAAM;QAAMyC,OAAO;IAAiB;IACxD,MAAM+C,MAAM,IAAI1F,IAAIY,QAAQ+E,OAAO;IACnC,MAAMC,gBAAgBX,SAASQ,KAAK,CAAC,gBAAgB,EAAE;IACvD,IAAIG,cAAcrF,IAAI,CAAC,CAACf,KAAO,CAACkG,IAAIjF,GAAG,CAACjB,MAAM;QAC5C,OAAO;YAAEU,MAAM;YAAMyC,OAAO;QAA2D;IACzF;IACA,MAAMW,UAAUpG,iBAAiBuI,KAAK,CAAC,UAAU;IACjD,IAAI,CAACnC,SAAS,OAAO;QAAEpD,MAAM;QAAMyC,OAAO;IAAgD;IAC1F,IAAInH,iBAAiB8H,SAAS/C,IAAI,CAAC,CAACf,KAAO,CAACkG,IAAIjF,GAAG,CAACjB,MAAM;QACxD,OAAO;YAAEU,MAAM;YAAMyC,OAAO;QAAiE;IAC/F;IACA,MAAMkD,SAASJ,KAAK,CAAC,SAAS;IAC9B,IAAII,WAAW3E,aAAa,CAACvE,iBAAiBkJ,SAAS;QACrD,OAAO;YAAE3F,MAAM;YAAMyC,OAAO;QAAyC;IACvE;IACA,MAAMmD,eAAeL,kBAAAA,KAAK,CAAC,WAAW,YAAjBA,kBAAqB,CAAC;IAC3C,MAAMM,WAA+B,CAAC;IACtC,KAAK,MAAMC,OAAO9J,0BAA2B;QAC3C,IAAI,CAACD,wBAAwB,CAACmD,OAAO,CAAC6G,QAAQ,CAACD,MAAM;QACrD,MAAME,OAAOjB,SAASa,WAAW,CAACE,IAAI,EAAE;QACxC,IAAIE,KAAKjE,MAAM,EAAE8D,QAAQ,CAACC,IAAI,GAAGE;IACnC;IACA,MAAMC,WAAWvF,QAAQuF,QAAQ;IACjC,MAAMjG,OAAOpD,mBAAmB;QAC9B0C,EAAE,UAAE2G,4BAAAA,SAAU3G,EAAE,mBAAIjE;QACpByI;QACA5E;QACAgH,SAASX,KAAK,CAAC,UAAU,KAAK;QAC9BG;QACAG;QACAzC;QACAuC,MAAM,EAAGA,iBAAAA,SAAyC;QAClDQ,YAAY,WAAEF,4BAAAA,SAAUE,YAAY,oBAAIzF,QAAQmD,GAAG;QACnDuC,WAAW,WAAEH,4BAAAA,SAAUG,WAAW,oBAAI1F,QAAQrC,KAAK;QACnDgI,aAAa3F,QAAQrC,KAAK;IAC5B;IACA,IAAI,CAAC2B,MAAM,OAAO;QAAEA,MAAM;QAAMyC,OAAO;IAA8B;IACrE,OAAO;QAAEzC;QAAMyC,OAAO;IAAK;AAC7B;AAEA,oEAAoE,GACpE,SAAS6D,WAAWtG,IAAoB;IACtC,OAAOuG,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAACzG;AACnC;AAEA;;;CAGC,GACD,eAAe0G,WACbxI,SAAoB,EACpBJ,KAAa,EACb6I,MAAyE;IAEzE,MAAMzD,SAAShF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB;IAChD,MAAM8I,SAAS,MAAM1I,UAAUsB,cAAc,CAAC,OAAOC;YAEXrB;QADxC,MAAMA,WAAW,MAAMqB,GAAGhB,GAAG,CAACyE;QAC9B,MAAMrC,OAAO8F,OAAO9J,qBAAoBuB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB;QAC3D,IAAI,WAAWyC,MAAM,OAAO;YAAEjC,OAAO;YAAM6D,OAAO5B,KAAK4B,KAAK;QAAC;QAC7DhD,GAAGyB,MAAM,CAACgC,QAAQ,IAAIvH,UAAU,OAAO,iBAAiBkF,KAAKd,GAAG,CAACuG;QACjE,OAAO;YAAE1H,OAAOiC;YAAM4B,OAAO;QAAK;IACpC;IACA5E,sBAAsBC;IACtB,OAAO8I;AACT;AAEA,gEAAgE,GAChE,eAAeC,SACb3I,SAAoB,EACpBJ,KAAa,EACbwC,MAAc,EACdwG,GAAsB,EACtB3I,UAAkC,CAAC,CAAC;;QAO7B4I;IALP,MAAMA,UAAU,MAAML,WAAWxI,WAAWJ,OAAO,CAACc,QAClDT,QAAQ6I,QAAQ,GACZpI,MAAMwG,MAAM,CAAC,CAACpF,OAASA,KAAKV,EAAE,KAAKgB,UACnC1B,MAAMmB,GAAG,CAAC,CAACC,OAAUA,KAAKV,EAAE,KAAKgB,SAAS,aAAKN;gBAAM8G;iBAAQ9G;IAEnE,gBAAO+G,iBAAAA,QAAQnI,KAAK,qBAAbmI,eAAeE,IAAI,CAAC,CAACjH,OAASA,KAAKV,EAAE,KAAKgB,0BAAW;AAC9D;AAEA;;2CAE2C,GAE3C,MAAM4G,WAAW;AAEjB;;;;;;;;;;;CAWC,GACD,OAAO,eAAeC,sBACpBjJ,SAAoB,EACpBJ,KAAa,EACbwC,MAAc,EACd8G,UAAkB;QAGPC;IADX,MAAMA,OAAO,MAAMpJ,kBAAkBC,WAAWJ,OAAO;QAAEY,OAAO;IAAK;IACrE,IAAIsB,QAAOqH,mBAAAA,KAAKzI,KAAK,CAACqI,IAAI,CAAC,CAAC/B,QAAUA,MAAM5F,EAAE,KAAKgB,mBAAxC+G,mBAAmD;IAC9D,IAAI,EAACrH,wBAAAA,KAAM8G,GAAG,KAAI9G,KAAK8G,GAAG,CAACQ,MAAM,KAAK,WAAW,OAAO;QAAEtH;QAAMuH,MAAM;IAAM;IAC5E,MAAMC,UAAUtJ,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOe,UAAU,CAACmB,KAAKd,MAAM;IAC9E,IAAI4H,MAAyB,aAAK9G,KAAK8G,GAAG;IAC1C,MAAMW,OAAO,IAAI3H;IACjB,IAAI;QACF,MAAOxB,KAAKC,GAAG,KAAK6I,WAAY;gBAoCIM;gBAAAA;YAnClC,MAAM,EAAE9I,KAAK,EAAE,GAAG,MAAMX,kBAAkBC,WAAWJ,OAAO;gBAAEY,OAAO;YAAK;YAC1E,MAAMgC,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOoB,KAAKd,MAAM;YAC/E,IAAIwI;YACJ,IAAIZ,IAAIa,IAAI,KAAK,SAAS;gBACxB,IAAIC,QAAQJ,QAAQK,OAAO,CAAClM,UAAUmM,UAAU,IAAIC,KAAK,CAACb;gBAC1D,IAAIJ,IAAIkB,MAAM,EAAEJ,QAAQA,MAAMK,UAAU,CAACnB,IAAIkB,MAAM;gBACnDN,OAAO,MAAME,MAAMnJ,GAAG;YACxB,OAAO;gBACLiJ,OAAO,MAAMF,QAAQlD,KAAK,CAAClI,2BAA2B,kBAAkBkE,QAAQyH,KAAK,CAACb,UAAUzI,GAAG;YACrG;YACA,MAAME,OAAOL,KAAKC,GAAG;YACrB,yDAAyD;YACzD,MAAM2J,SAASR,KAAKnD,IAAI,CACrBa,MAAM,CAAC,CAACtG;oBACSA;gBAAhB,MAAMc,UAAUd,YAAAA,IAAIC,IAAI,cAARD,YAAc,CAAC;gBAC/B,MAAMY,OAAO/C,kBACXiD,QACApD,qBAAqBwD,KAAMd,MAAM,EAAEU,QAAQhB,OAAOD,MAAM+B;gBAE1D,OAAO3D,mBAAmB6C,QAAQF;YACpC,GACCK,GAAG,CAAC,CAACjB,MAAQA,IAAIQ,EAAE;YACtB,IAAIwH,IAAIa,IAAI,KAAK,YAAYD,KAAKnD,IAAI,CAACxC,MAAM,IAAI2F,KAAKnD,IAAI,CAAC4D,KAAK,CAAC,CAACrJ,MAAQ2I,KAAKlH,GAAG,CAACzB,IAAIQ,EAAE,IAAI;gBAC3F,MAAM,IAAI8I,MAAM;YAClB;YACA,KAAK,MAAMtJ,OAAO4I,KAAKnD,IAAI,CAAEkD,KAAKY,GAAG,CAACvJ,IAAIQ,EAAE;YAC5C,MAAMoC,UAAU,MAAMP,cACpB;gBAAEjD;gBAAWJ;gBAAOoB,QAAQc,KAAKd,MAAM;gBAAEN;gBAAOF,OAAO;gBAAMgC;gBAAS/B;YAAK,GAC3EuJ;YAEF,MAAMI,OAAOxB,IAAIa,IAAI,KAAK,UAAUD,KAAKa,IAAI,GAAGrB,WAAWQ,KAAKc,KAAK;YACrE1B,MAAM,aACDA;gBACH2B,WAAW3B,IAAI2B,SAAS,GAAGf,KAAKa,IAAI;gBACpCjH,SAASwF,IAAIxF,OAAO,GAAGI,QAAQJ,OAAO,CAACS,MAAM;gBAC7CiG,QAAQlB,IAAIa,IAAI,KAAK,WAAWD,iBAAAA,cAAAA,KAAKnD,IAAI,CAACmD,KAAKnD,IAAI,CAACxC,MAAM,GAAG,EAAE,qBAA/B2F,YAAiCpI,EAAE,oBAAIwH,IAAIkB,MAAM,YAAjDN,OAAqD,OAAQ;eACzFY,OAAO;gBAAEhB,QAAQ;gBAAiBoB,cAAcpK,KAAKC,GAAG;YAAG,IAAI,CAAC;YAEtEyB,OAAO,MAAM6G,SAAS3I,WAAWJ,OAAOwC,QAAQwG,KAAK;gBACnDE,UAAUsB,QAAQtI,KAAK2I,QAAQ,KAAK;YACtC;YACA,IAAIL,QAAQ,CAACtI,MAAM,OAAO;gBAAEA;gBAAMuH,MAAM;YAAM;QAChD;QACA,OAAO;YAAEvH;YAAMuH,MAAM;QAAK;IAC5B,EAAE,OAAO9E,OAAO;QACdC,QAAQD,KAAK,CAAC,mCAAmC3E,OAAOwC,QAAQmC;QAChEzC,OAAO,MAAM6G,SAAS3I,WAAWJ,OAAOwC,QAAQ,aAC3CwG;YACHQ,QAAQ;YACRoB,cAAcpK,KAAKC,GAAG;YACtBkE,OAAO;;QAET,OAAO;YAAEzC;YAAMuH,MAAM;QAAM;IAC7B;AACF;AAEA;;2CAE2C,GAE3C,oFAAoF,GACpF,MAAMqB,gBAAgB;AAEtB,MAAMC,gBACJ;AAEF,SAASC,QAAQ9D,GAAY;IAC3B,IAAI,CAAC7E,MAAMC,OAAO,CAAC4E,MAAM,OAAO;IAChC,MAAM5D,MAAM;WACP,IAAItB,IACLkF,IAAIjF,GAAG,CAAC,CAACmF,QAAU1E,OAAO0E,gBAAAA,QAAS,IAAIT,IAAI,GAAGU,KAAK,CAAC,GAAG,MAAMC,MAAM,CAAC,CAAC9F,KAAOA,MAAM,CAACA,GAAGyG,QAAQ,CAAC;KAElG,CAACZ,KAAK,CAAC,GAAGjJ;IACX,OAAOkF,IAAIW,MAAM,GAAGX,MAAM;AAC5B;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAM2H,oBAAsC,OAAOC,KAAKC;QAM/CD,WAMQtF;IAXtB,IAAIsF,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE3G,OAAO;QAAqB;QACnD;IACF;IACA,MAAMiB,QAAQsF,YAAAA,IAAItF,IAAI,YAARsF,YAAY,CAAC;IAC3B,MAAMK,QAAQ9L,kBAAkBmG;IAChC,IAAI,CAAC2F,OAAO;QACVJ,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE3G,OAAO;QAAiB;QAC/C;IACF;IACA,MAAM6G,SAAS9I,QAAOkD,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMxF,YAAY3C,cAAciH,GAAG,GAAGtE,SAAS;IAC/C,IAAI;;YAsBM;QArBR,IAAIoL,WAAW,YAAY;YACzB,MAAMpK,SAASwE,IAAI,CAAC,SAAS;YAC7B,MAAMtC,MAAM0H,QAAQpF,IAAI,CAAC,MAAM;YAC/B,IAAI,CAAChH,mBAAmBwC,WAAW,CAACkC,KAAK;gBACvC6H,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,OAAO;gBAAoB;gBAClD;YACF;YACA,MAAM8G,SAAS,MAAM9L,mBAAmBuL,KAAKK,OAAO;gBAAEG,UAAU;YAAK;YACrE,IAAID,OAAOE,EAAE,KAAK,OAAO;gBACvBR,IAAI3B,MAAM,CAACiC,OAAOjC,MAAM,EAAE8B,IAAI,CAACG,OAAO7F,IAAI;gBAC1C;YACF;YACA,MAAMhC,UAAU,MAAMQ,mBAAmBhE,WAAWqL,OAAOzL,KAAK,EAAEoB,QAAQkC;YAC1E,MAAMsI,SAA6B;gBAAED,IAAI;eAAS/H;YAClDuH,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,MAAM5L,QACJuL,MAAMM,KAAK,KAAK,QACZN,MAAMvL,KAAK,YACT,QAAA,MAAMtC,cAAc6N,MAAM/F,MAAM,EAAEsG,KAAK,CAAC,IAAM,0BAA/C,AAAC,MAAsD9L,KAAK,mBAAI;QACvE,IAAI,CAACA,OAAO;YACVmL,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;gBAAE3G,OAAO;YAAmD;YACjF;QACF;QACA,MAAMoH,SAAS,MAAMxM,mBAAmB2L,KAAKlL,OAAO;YAClDgM,OAAO;YACPC,SAASlB;QACX;QACA,IAAIgB,OAAOJ,EAAE,KAAK,OAAO;YACvBR,IAAI3B,MAAM,CAACuC,OAAOvC,MAAM,EAAE8B,IAAI,CAAC;gBAAE3G,OAAOoH,OAAOpH,KAAK;YAAC;YACrD;QACF;QACA,MAAMuH,QAAQxM,gBAAgBqM,OAAOpJ,GAAG,EAAE;QAC1C,IAAIuJ,OAAO;YACTf,IAAI3B,MAAM,CAAC0C,MAAM1C,MAAM,EAAE8B,IAAI,CAACY,MAAMtG,IAAI;YACxC;QACF;QACA,MAAMuG,QAAQ;YAAEpG,KAAKgG,OAAOhG,GAAG;YAAEqG,OAAOL,OAAOK,KAAK;QAAC;QACrD,MAAMnG,SAAS8F,OAAO/F,IAAI,IAAI+F,OAAOK,KAAK,IAAI;QAC9C,MAAM7L,QAAQC,KAAKC,GAAG;QAEtB,IAAI+K,WAAW,SAAS;YACtB,MAAMI,SAA6B;gBAAED,IAAI;gBAAMU,OAAO,MAAM/F,gBAAgBlG,WAAWJ;YAAO;YAC9FmL,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,WAAWA,WAAW,WAAW;YAC9C,MAAMpK,SAASwE,IAAI,CAAC,SAAS;YAC7B,MAAMtC,MAAM0H,QAAQpF,IAAI,CAAC,MAAM;YAC/B,IAAI,CAAChH,mBAAmBwC,WAAW,CAACkC,KAAK;gBACvC6H,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,OAAO;gBAA6B;gBAC3D;YACF;YACA,MAAMW,UAAUpG,iBAAiB0G,IAAI,CAAC,UAAU;YAChD,IAAI,CAACN,SAAS;gBACZ6F,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,OAAO;gBAAkC;gBAChE;YACF;YACA,MAAM0H,QAAQ,MAAM/F,gBAAgBlG,WAAWJ;YAC/C,MAAM0H,MAAM,IAAI1F,IAAIqK,MAAMpK,GAAG,CAAC,CAACqK,OAASA,KAAK9K,EAAE;YAC/C,IAAIhE,iBAAiB8H,SAAS/C,IAAI,CAAC,CAACf,KAAO,CAACkG,IAAIjF,GAAG,CAACjB,MAAM;gBACxD2J,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,OAAO;gBAAkD;gBAChF;YACF;YACA,MAAMkD,SAAyBjC,IAAI,CAAC,SAAS,KAAK,SAAS,SAAS;YACpE,MAAM,EAAE9E,KAAK,EAAEF,KAAK,EAAE,GAAG,MAAMT,kBAAkBC,WAAWJ;YAC5D,MAAM4C,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;YACpE,MAAMwC,UAAU,MAAMP,cACpB;gBACEjD;gBACAJ;gBACAoB;gBACAN;gBACAF;gBACAgC;gBACA/B,MAAMN;gBACNuC,QAAQ,CAACD,SACP2I,WAAW,UACPpM,iBAAiByD,QAAQyC,SAASuC,QAAQ;wBAAE9B,KAAKgG,OAAOhG,GAAG;wBAAEC,MAAMC;oBAAO,GAAG1F,SAC7ElB,oBAAoBwD,QAAQyC;YACpC,GACAhC;YAEF,MAAMiJ,WAAW,CAAC/K;;oBAAe6K;gCAAAA,cAAAA,MAAMlD,IAAI,CAAC,CAACmD,OAASA,KAAK9K,EAAE,KAAKA,wBAAjC6K,YAAsCrG,IAAI,mBAAI;;YAC/E,MAAMwG,QAAQ/N,qBAAqB6G,SAASiH;YAC5C,MAAME,WACJjB,WAAW,UACP,CAAC,YAAY,EAAEgB,QAAQ3E,WAAW,SAAS,qBAAqB,gBAAgB,GAChF,CAAC,qBAAqB,EAAE2E,OAAO;YACrC,MAAM1I,QAAQC,GAAG,CACfH,QAAQJ,OAAO,CAACvB,GAAG,CAAC,CAACT,KACnB2D,oBAAoB/E,WAAW;oBAC7BJ;oBACAoB;oBACAI;oBACAoE,MAAM6G;oBACNnH;oBACAQ,IAAI;wBAAEC,KAAKgG,OAAOhG,GAAG;wBAAEC,MAAMC;oBAAO;oBACpCpF,MAAMN;gBACR;YAGJ,IAAIqD,QAAQJ,OAAO,CAACS,MAAM,EAAE;gBAC1B,MAAMyI,QAAQrO,yBAAyB,CAAC+C,OAAO;gBAC/C,MAAMzD,eACJqC,OACAmM,OACAvI,QAAQJ,OAAO,CAACS,MAAM,KAAK,IACvB,GAAGwI,SAAS,MAAM,EAAEC,MAAMC,GAAG,EAAE,GAC/B,GAAGF,SAAS,EAAE,EAAE7I,QAAQJ,OAAO,CAACS,MAAM,CAAC,CAAC,EAAEyI,MAAME,IAAI,CAACC,WAAW,IAAI,EACxE;oBACEC,MAAM5H,UAAU,CAAC9D,OAAO;mBACpBwC,QAAQJ,OAAO,CAACS,MAAM,KAAK,IAAI;oBAAEzC,IAAIoC,QAAQJ,OAAO,CAAC,EAAE;gBAAC,IAAI,CAAC,IAEnEsI,KAAK,CAAC,IAAM5I;YAChB;YACA,MAAM0I,SAA6B;gBACjCD,IAAI;gBACJnI,SAASI,QAAQJ,OAAO,CAACS,MAAM;gBAC/BR,SAASG,QAAQH,OAAO;YAC1B;YACA0H,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,aAAa;gBAG6B;YAFvD,MAAM7D,UAAU,MAAMnI,WAAWY,WAAWJ;YAC5C,MAAMkH,MAAMtB,IAAI,CAAC,OAAO;YACxB,MAAMpD,SAAS0E,OAAO,OAAOA,QAAQ,WAAWxE,QAAO,UAAA,AAACwE,GAA+B,CAAC,KAAK,YAAtC,UAA0C,MAAM;YACvG,IAAI6F,QAA+B;YACnC,IAAIpI,QAAuB;YAC3B,MAAMsE,UAAU,MAAML,WAAWxI,WAAWJ,OAAO,CAACc;oBACvBA;gBAA3B,MAAMqH,WAAW3F,UAAU1B,cAAAA,MAAMqI,IAAI,CAAC,CAACjH,OAASA,KAAKV,EAAE,KAAKgB,mBAAjC1B,cAA4C,OAAQ;gBAC/E,IAAI0B,UAAU,CAAC2F,UAAU,OAAO;oBAAExD,OAAO;gBAA8B;gBACvE,IAAIwD,4BAAAA,SAAU0C,QAAQ,EAAE,OAAO;oBAAElG,OAAO;gBAA8B;gBACtE,IAAI,CAACwD,YAAYrH,MAAMmD,MAAM,IAAI1F,uBAAuB;oBACtD,OAAO;wBAAEoG,OAAO,CAAC,0BAA0B,EAAEpG,sBAAsB,eAAe,CAAC;oBAAC;gBACtF;gBACA,MAAMyO,SAASxF,gBAAgBN,KAAK;oBAAES;oBAASQ;oBAAUpC,KAAKgG,OAAOhG,GAAG;oBAAExF;gBAAM;gBAChF,IAAI,CAACyM,OAAO9K,IAAI,EAAE;oBAChByC,QAAQqI,OAAOrI,KAAK;oBACpB,OAAO;wBAAEA,OAAOqI,OAAOrI,KAAK;oBAAC;gBAC/B;gBACA;;;;SAIC,GACDoI,QAAQ,aACHC,OAAO9K,IAAI;oBACd8G,KAAK;wBACHQ,QAAQ;wBACRK,MAAMmD,OAAO9K,IAAI,CAACkG,OAAO,GAAG,UAAU;wBACtCuC,WAAW;wBACXnH,SAAS;wBACT0G,QAAQ;wBACR+C,aAAa1M;oBACf;;gBAEF,OAAO4H,WACHrH,MAAMmB,GAAG,CAAC,CAACC,OAAUA,KAAKV,EAAE,KAAK2G,SAAS3G,EAAE,GAAGuL,QAAS7K,QACxD;uBAAIpB;oBAAOiM;iBAAM;YACvB;YACA,IAAI,CAAC9D,QAAQnI,KAAK,IAAI,CAACiM,OAAO;oBACEpI;gBAA9BwG,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,KAAK,GAAEA,QAAAA,gBAAAA,QAASsE,QAAQtE,KAAK,YAAtBA,QAA0B;gBAA+B;gBACvF;YACF;YACA,MAAMzC,OAAO6K;YACb,MAAMpP,eACJqC,OACAmM,OACA,GAAG3J,SAAS,YAAY,QAAQ,mBAAmB,EAAEN,KAAK8D,IAAI,CAAC,CAAC,CAAC,EACjE;gBAAE8G,MAAM,GAAG/O,UAAU,YAAY,CAAC;gBAAEyD,IAAIU,KAAKV,EAAE;gBAAEwE,MAAM9D,KAAK8D,IAAI;YAAC,GACjE8F,KAAK,CAAC,IAAM5I;YACd,MAAMgK,WAAW,MAAM7D,sBAAsBjJ,WAAWJ,OAAOkC,KAAKV,EAAE,EAAEhB,KAAKC,GAAG,KAAKqK;YACrF,MAAMc,SAA6B;gBAAED,IAAI;gBAAMzJ,MAAMgL,SAAShL,IAAI;gBAAEuH,MAAMyD,SAASzD,IAAI;YAAC;YACxF0B,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,iBAAiBA,WAAW,iBAAiB;gBACpC5F;YAAtB,MAAMpD,SAASE,QAAOkD,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB,IAAIe,IAAI;YAChD,IAAI,CAACnE,QAAQ;gBACX2I,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE3G,OAAO;gBAAiB;gBAC/C;YACF;YACA,IAAI6G,WAAW,eAAe;gBAC5B,IAAIxF,OAAO;gBACX,MAAMiD,UAAU,MAAML,WAAWxI,WAAWJ,OAAO,CAACc;oBAClD,MAAMqH,WAAWrH,MAAMqI,IAAI,CAAC,CAACjH,OAASA,KAAKV,EAAE,KAAKgB;oBAClD,IAAI,CAAC2F,UAAU,OAAO;wBAAExD,OAAO;oBAA8B;oBAC7DqB,OAAOmC,SAASnC,IAAI;oBACpB,OAAOlF,MAAMmB,GAAG,CAAC,CAACC,OAChBA,KAAKV,EAAE,KAAKgB,SACR,aACKN;4BACHkG,SAAS;4BACTyC,UAAU;4BACVtC,aAAahI;4BACbyI,KAAK;gCACHQ,QAAQ;gCACRK,MAAM;gCACNc,WAAW;gCACXnH,SAAS;gCACT0G,QAAQ;gCACR+C,aAAa1M;4BACf;6BAEF2B;gBAER;gBACA,IAAI,CAAC+G,QAAQnI,KAAK,EAAE;oBAClBqK,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;wBAAE3G,OAAOsE,QAAQtE,KAAK;oBAAC;oBAC5C;gBACF;gBACA,MAAMhH,eAAeqC,OAAOmM,OAAO,CAAC,0BAA0B,EAAEnG,KAAK,CAAC,CAAC,EAAE;oBACvE8G,MAAM,GAAG/O,UAAU,YAAY,CAAC;oBAChCyD,IAAIgB;oBACJwD;gBACF,GAAG8F,KAAK,CAAC,IAAM5I;YACjB,OAAO;gBACL,wCAAwC;gBACxC,MAAM0F,WAAWxI,WAAWJ,OAAO,CAACc,QAClCA,MAAMmB,GAAG,CAAC,CAACC;4BACaA;+BAAtBA,KAAKV,EAAE,KAAKgB,UAAUN,EAAAA,YAAAA,KAAK8G,GAAG,qBAAR9G,UAAUsH,MAAM,MAAK,WACvC,aAAKtH;4BAAM8G,KAAK,aAAK9G,KAAK8G,GAAG;gCAAEQ,QAAQ;;6BACvCtH;;YAGV;YACA,MAAMgL,WAAW,MAAM7D,sBAAsBjJ,WAAWJ,OAAOwC,QAAQhC,KAAKC,GAAG,KAAKqK;YACpF,MAAMc,SAA6B;gBAAED,IAAI;gBAAMzJ,MAAMgL,SAAShL,IAAI;gBAAEuH,MAAMyD,SAASzD,IAAI;YAAC;YACxF0B,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEAT,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE3G,OAAO;QAA0B;IAC1D,EAAE,OAAOA,OAAO;QACdC,QAAQD,KAAK,CAAC,wBAAwB6G,QAAQ7G;QAC9CwG,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE3G,OAAO;QAA6C;IAC7E;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/server/crm-sharing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The server half of CRM sharing (AGL-3336) — see `model/crm-sharing.ts`\n * for the model.\n *\n * Three writers, one transaction shape. A record's sharing is RECOMPUTED,\n * never patched: the transaction reads the record, keeps its hand shares\n * (changed by the caller when the act is a share or an unshare), matches\n * every active rule against it as it stands, and writes `visibleTo`,\n * `writeTo`, `sharing` and the list fields derived from `visibleTo` only\n * when any of them moves. So the same function serves\n *\n * - a manager's share or unshare (`crm/sharing`, `share`/`unshare`);\n * - a write to the record anywhere on the server, through the core's\n *   record-written seam (`crmSharingRecordWritten`), and a client-direct\n *   write's follow-up (`evaluate`);\n * - a rule's recompute over existing records (`rule-save`, `rule-continue`),\n *   and its removal (`rule-delete`), in budgeted passes with the progress on\n *   the rule.\n */\n\nimport {\n  CRM_COLLECTIONS,\n  crmActivityLogHasRoom,\n  type CrmActivityLink,\n  crmListFieldsPatch,\n} from '@aglyn/aglyn/app-utils/crm'\nimport { createResourceUid } from '@aglyn/aglyn/app-utils/create-resource-uid'\nimport { hostIdsFromScope } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost, logOrgActivity } from '@aglyn/tenant-data-admin'\nimport { countCrmActivitiesForRecord } from '@aglyn/tenant-data-admin/server/crm-records'\nimport { FieldPath, FieldValue } from 'firebase-admin/firestore'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport {\n  activeSharingRules,\n  CRM_SHARING_CRITERIA_FOR,\n  CRM_SHARING_CRITERIA_KEYS,\n  CRM_SHARING_FIELD,\n  CRM_SHARING_IDS_MAX,\n  CRM_SHARING_OBJECT_LABELS,\n  CRM_SHARING_RULE_IDS_PATH,\n  CRM_SHARING_RULES_MAX,\n  CRM_WRITE_SCOPE_FIELD,\n  type CrmShareAccess,\n  type CrmShareGrant,\n  type CrmSharingContext,\n  type CrmSharingCriteria,\n  type CrmSharingObject,\n  type CrmSharingResponse,\n  type CrmSharingRule,\n  type CrmSharingRuleRun,\n  type CrmSharingSite,\n  describeShareTargets,\n  evaluateRecordGrants,\n  isCrmShareAccess,\n  isCrmSharingObject,\n  planRecordSharing,\n  readCrmSharingRule,\n  readCrmSharingRules,\n  recordHeldScope,\n  sharingPlanChanges,\n  shareTargetsFrom,\n  sharingRulesAskLeadSourceDirection,\n  withManualShares,\n  withoutManualShares,\n} from '../model/crm-sharing'\nimport { stampCrmActivityCompany } from '../model/crm-activity-link'\nimport { readLeadSourcePicklist } from './lead-source-picklist'\nimport { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from './org-caller'\nimport { crmSuiteRefusal } from './suite-gate'\nimport { authorizeCrmWriter } from './task-routes'\n\ntype Firestore = FirebaseFirestore.Firestore\n\n/*==========================================\n * THE RULES, READ OFF THE ORG DOCUMENT.\n *=========================================*/\n\n/**\n * A few seconds of memory per process: every CRM write asks, and an org\n * with no rules should cost it nothing past the first read. A cached list\n * is never the reason a grant is TAKEN away — see `recomputeRecordSharing`.\n */\nconst RULES_TTL_MS = 10_000\nconst rulesCache = new Map<string, { atMs: number; rules: CrmSharingRule[] }>()\n\n/** Test seam, and what a rule write calls so its own process reads it fresh. */\nexport function forgetCrmSharingRules(orgId?: string): void {\n  if (orgId) rulesCache.delete(orgId)\n  else rulesCache.clear()\n}\n\nexport async function crmSharingRulesOf(\n  firestore: Firestore,\n  orgId: string,\n  options: { fresh?: boolean; nowMs?: number } = {},\n): Promise<{ rules: CrmSharingRule[]; fresh: boolean }> {\n  const nowMs = options.nowMs ?? Date.now()\n  const cached = rulesCache.get(orgId)\n  if (!options.fresh && cached && nowMs - cached.atMs < RULES_TTL_MS) {\n    return { rules: cached.rules, fresh: false }\n  }\n  const snapshot = await firestore.collection('orgs').doc(orgId).get()\n  const rules = readCrmSharingRules(snapshot.data() ?? null)\n  rulesCache.set(orgId, { atMs: nowMs, rules })\n  return { rules, fresh: true }\n}\n\n/**\n * What the rules for `object` are evaluated against beyond the record: the\n * org's Lead source list, read only when an active rule asks a lead source\n * direction (AGL-3511) — an org whose rules never do pays no read for it.\n */\nexport async function crmSharingContextFor(\n  firestore: Firestore,\n  orgId: string,\n  rules: readonly CrmSharingRule[],\n  object: CrmSharingObject,\n): Promise<CrmSharingContext> {\n  if (!sharingRulesAskLeadSourceDirection(rules, object)) return {}\n  return { leadSources: await readLeadSourcePicklist(firestore, orgId) }\n}\n\n/*==========================================\n * ONE RECORD, RECOMPUTED.\n *=========================================*/\n\nexport interface RecomputeRecordSharingInput {\n  firestore: Firestore\n  orgId: string\n  object: CrmSharingObject\n  id: string\n  /** Every rule the org has, in any state. */\n  rules: readonly CrmSharingRule[]\n  /** Whether `rules` was read just now; a stale list is re-read before it takes a grant away. */\n  fresh: boolean\n  /** The hand shares' change, for a share or an unshare. */\n  manual?: (grants: Record<string, CrmShareGrant>) => Record<string, CrmShareGrant>\n  /** What the rules are evaluated against beyond the record — see {@link crmSharingContextFor}. */\n  context?: CrmSharingContext\n  atMs: number\n}\n\nexport type RecomputeOutcome = 'changed' | 'unchanged' | 'missing'\n\nexport async function recomputeRecordSharing(\n  input: RecomputeRecordSharingInput,\n): Promise<RecomputeOutcome> {\n  const { firestore, orgId, object, id, atMs } = input\n  const ref = firestore.collection('orgs').doc(orgId).collection(object).doc(id)\n  return await firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(ref)\n    if (!snapshot.exists) return 'missing' as const\n    const record = (snapshot.data() ?? {}) as Record<string, unknown>\n    let rules = input.rules\n    /*\n     * A GRANT IS NEVER TAKEN AWAY ON A STALE ANSWER. A rule grant whose rule\n     * the cached list does not name is dropped only once a fresh read of the\n     * org agrees: another process may have saved that rule seconds ago and\n     * applied it to this very record.\n     */\n    if (!input.fresh) {\n      const known = new Set(rules.map((rule) => rule.id))\n      const stored = record[CRM_SHARING_FIELD] as { ruleIds?: unknown } | undefined\n      const ruleIds = Array.isArray(stored?.ruleIds) ? (stored.ruleIds as unknown[]) : []\n      if (ruleIds.some((ruleId) => !known.has(String(ruleId)))) {\n        const org = await tx.get(firestore.collection('orgs').doc(orgId))\n        rules = readCrmSharingRules(org.data() ?? null)\n      }\n    }\n    // A rule read afresh above may ask a direction the caller's context was not read for.\n    const context =\n      input.context?.leadSources || rules === input.rules\n        ? input.context\n        : await crmSharingContextFor(firestore, orgId, rules, object)\n    let grants = evaluateRecordGrants(object, record, rules, atMs, context)\n    if (input.manual) grants = input.manual(grants)\n    const plan = planRecordSharing(record, grants)\n    if (!sharingPlanChanges(record, plan)) return 'unchanged' as const\n    const next = {\n      ...record,\n      visibleTo: plan.visibleTo,\n      [CRM_WRITE_SCOPE_FIELD]: plan.writeTo ?? undefined,\n      [CRM_SHARING_FIELD]: plan.sharing ?? undefined,\n    }\n    tx.update(ref, {\n      visibleTo: plan.visibleTo,\n      [CRM_WRITE_SCOPE_FIELD]: plan.writeTo ?? FieldValue.delete(),\n      [CRM_SHARING_FIELD]: plan.sharing ?? FieldValue.delete(),\n      // The scoped list fields are derived from `visibleTo` (AGL-3321), so a\n      // target site's folded search finds the record the moment it can see it.\n      ...crmListFieldsPatch(object, next),\n    })\n    return 'changed' as const\n  })\n}\n\n/** Several records at once, a few in flight. */\nasync function recomputeMany(\n  input: Omit<RecomputeRecordSharingInput, 'id'>,\n  ids: readonly string[],\n): Promise<{ changed: string[]; missing: number }> {\n  const queue = [...new Set(ids)]\n  const changed: string[] = []\n  let missing = 0\n  const worker = async () => {\n    for (let id = queue.shift(); id !== undefined; id = queue.shift()) {\n      const outcome = await recomputeRecordSharing({ ...input, id })\n      if (outcome === 'changed') changed.push(id)\n      if (outcome === 'missing') missing += 1\n    }\n  }\n  await Promise.all(Array.from({ length: Math.min(8, queue.length) }, worker))\n  return { changed, missing }\n}\n\n/**\n * Re-evaluates the org's rules for these records — the one thing a write\n * anywhere owes the sharing. An org with no active rule for the object\n * costs one cached read and nothing else; grants of a rule switched off\n * are taken away by that rule's own removal pass, not here.\n */\nexport async function evaluateCrmSharing(\n  firestore: Firestore,\n  orgId: string,\n  object: CrmSharingObject,\n  ids: readonly string[],\n): Promise<{ changed: number; missing: number }> {\n  const { rules, fresh } = await crmSharingRulesOf(firestore, orgId)\n  if (!activeSharingRules(rules, object).length) return { changed: 0, missing: 0 }\n  const context = await crmSharingContextFor(firestore, orgId, rules, object)\n  const outcome = await recomputeMany(\n    { firestore, orgId, object, rules, fresh, context, atMs: Date.now() },\n    ids,\n  )\n  return { changed: outcome.changed.length, missing: outcome.missing }\n}\n\n/**\n * The core's record-written seam (AGL-3336): every server writer of a lead,\n * a contact, a company or a deal restamps it, and the restamp tells this.\n * Never throws — the write it is told about already landed.\n */\nexport async function crmSharingRecordWritten(event: {\n  path: string\n  collection: string\n}): Promise<void> {\n  if (!isCrmSharingObject(event.collection)) return\n  const segments = event.path.split('/')\n  if (segments.length !== 4 || segments[0] !== 'orgs' || segments[2] !== event.collection) return\n  try {\n    await evaluateCrmSharing(\n      firebaseAdmin.app().firestore(),\n      segments[1],\n      event.collection,\n      [segments[3]],\n    )\n  } catch (error) {\n    console.error(`[crm] sharing rules could not be evaluated for ${event.path}`, error)\n  }\n}\n\n/*==========================================\n * THE AUDIT: a line on the record, a line in the org's feed.\n *=========================================*/\n\nconst LINK_FIELD: Readonly<Record<CrmSharingObject, keyof CrmActivityLink>> = {\n  leads: 'leadId',\n  contacts: 'contactId',\n  companies: 'companyId',\n  deals: 'dealId',\n}\n\nconst ORG_TARGET: Readonly<Record<CrmSharingObject, 'lead' | 'contact' | 'company' | 'deal'>> = {\n  leads: 'lead',\n  contacts: 'contact',\n  companies: 'company',\n  deals: 'deal',\n}\n\n/**\n * The entry on the record's Activity: who shared it with which sites, or\n * took a share away. Visible to the sites that hold the record and to the\n * sites it names, so both sides of a share read how it came about.\n */\nasync function fileSharingActivity(\n  firestore: Firestore,\n  input: {\n    orgId: string\n    object: CrmSharingObject\n    id: string\n    body: string\n    targets: readonly string[]\n    by: { uid: string; name: string }\n    atMs: number\n  },\n): Promise<void> {\n  try {\n    const orgRef = firestore.collection('orgs').doc(input.orgId)\n    const record = (await orgRef.collection(input.object).doc(input.id).get()).data() ?? {}\n    const held = recordHeldScope(record)\n    const visibleTo = [...new Set([...held, ...input.targets])]\n    if (!visibleTo.length) return\n    const named: CrmActivityLink = { [LINK_FIELD[input.object]]: input.id }\n    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, named))) return\n    // The record just read is the deal or the contact the entry rolls up from.\n    const link = stampCrmActivityCompany(named, {\n      ...(input.object === 'deals' ? { deal: record } : {}),\n      ...(input.object === 'contacts' ? { contact: record } : {}),\n    })\n    const hostId =\n      typeof record['hostId'] === 'string' && record['hostId']\n        ? record['hostId']\n        : (hostIdsFromScope(held)[0] ?? '')\n    await orgRef\n      .collection(CRM_COLLECTIONS.activities)\n      .doc(createResourceUid())\n      .create({\n        kind: 'note',\n        body: input.body,\n        atMs: input.atMs,\n        byUid: input.by.uid,\n        ...(input.by.name ? { byName: input.by.name } : {}),\n        ...link,\n        hostId,\n        visibleTo,\n        sourcePluginId: BUNDLE_ID,\n        createdAt: FieldValue.serverTimestamp(),\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n  } catch (error) {\n    console.error('[crm] the sharing entry could not be written on the record', input.id, error)\n  }\n}\n\n/*==========================================\n * THE ORG'S SITES.\n *=========================================*/\n\nexport async function crmSharingSites(firestore: Firestore, orgId: string): Promise<CrmSharingSite[]> {\n  const hosts = await firestore.collection('hosts').where('orgId', '==', orgId).get()\n  return hosts.docs\n    .map((doc) => {\n      const displayName = String(doc.get('displayName') ?? '').trim()\n      const subdomain = String(doc.get('subdomain') ?? '').trim()\n      return { id: String(doc.id), name: displayName || subdomain || String(doc.id) }\n    })\n    .sort((a, b) => a.name.localeCompare(b.name))\n}\n\n/*==========================================\n * A RULE, SAVED FROM A REQUEST.\n *=========================================*/\n\nfunction listFrom(raw: unknown, max: number): string[] {\n  if (!Array.isArray(raw)) return []\n  return [\n    ...new Set(\n      raw.map((entry) => String(entry ?? '').trim().slice(0, 200)).filter(Boolean),\n    ),\n  ].slice(0, max)\n}\n\n/**\n * The rule a request describes, judged: an object, a name, sites that are\n * the org's own, targets that are the org's own or all sites. `null` with\n * the reason when it cannot be saved.\n */\nexport function ruleFromRequest(\n  raw: unknown,\n  context: { hostIds: readonly string[]; existing: CrmSharingRule | null; uid: string; nowMs: number },\n): { rule: CrmSharingRule; error: null } | { rule: null; error: string } {\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { rule: null, error: 'Describe the rule.' }\n  }\n  const value = raw as Record<string, unknown>\n  const object = value['object']\n  if (!isCrmSharingObject(object)) {\n    return { rule: null, error: 'Choose which records the rule shares.' }\n  }\n  const name = String(value['name'] ?? '').trim().slice(0, 120)\n  if (!name) return { rule: null, error: 'Name the rule.' }\n  const own = new Set(context.hostIds)\n  const sourceHostIds = listFrom(value['sourceHostIds'], 30)\n  if (sourceHostIds.some((id) => !own.has(id))) {\n    return { rule: null, error: 'A site the rule names is not one of this organization’s.' }\n  }\n  const targets = shareTargetsFrom(value['targets'])\n  if (!targets) return { rule: null, error: 'Choose the sites to share with, or All sites.' }\n  if (hostIdsFromScope(targets).some((id) => !own.has(id))) {\n    return { rule: null, error: 'A site the rule shares with is not one of this organization’s.' }\n  }\n  const access = value['access']\n  if (access !== undefined && !isCrmShareAccess(access)) {\n    return { rule: null, error: 'Access is read-only, or read and edit.' }\n  }\n  const rawCriteria = (value['criteria'] ?? {}) as Record<string, unknown>\n  const criteria: CrmSharingCriteria = {}\n  for (const key of CRM_SHARING_CRITERIA_KEYS) {\n    if (!CRM_SHARING_CRITERIA_FOR[object].includes(key)) continue\n    const list = listFrom(rawCriteria[key], 20)\n    if (list.length) criteria[key] = list\n  }\n  const existing = context.existing\n  const rule = readCrmSharingRule({\n    id: existing?.id ?? createResourceUid(),\n    name,\n    object,\n    enabled: value['enabled'] !== false,\n    sourceHostIds,\n    criteria,\n    targets,\n    access: (access as CrmShareAccess | undefined) ?? 'read',\n    createdByUid: existing?.createdByUid ?? context.uid,\n    createdAtMs: existing?.createdAtMs ?? context.nowMs,\n    updatedAtMs: context.nowMs,\n  })\n  if (!rule) return { rule: null, error: 'The rule could not be read.' }\n  return { rule, error: null }\n}\n\n/** A rule as the org document stores it — no `undefined` anywhere. */\nfunction storedRule(rule: CrmSharingRule): Record<string, unknown> {\n  return JSON.parse(JSON.stringify(rule)) as Record<string, unknown>\n}\n\n/**\n * Writes the org's rule list through `change`, in a transaction over the org\n * document, and answers the list as written.\n */\nasync function writeRules(\n  firestore: Firestore,\n  orgId: string,\n  change: (rules: CrmSharingRule[]) => CrmSharingRule[] | { error: string },\n): Promise<{ rules: CrmSharingRule[]; error: null } | { rules: null; error: string }> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const result = await firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(orgRef)\n    const next = change(readCrmSharingRules(snapshot.data() ?? null))\n    if ('error' in next) return { rules: null, error: next.error }\n    tx.update(orgRef, new FieldPath('crm', 'sharingRules'), next.map(storedRule))\n    return { rules: next, error: null }\n  })\n  forgetCrmSharingRules(orgId)\n  return result as { rules: CrmSharingRule[]; error: null } | { rules: null; error: string }\n}\n\n/** Replaces one rule's run, leaving every other rule as it is. */\nasync function writeRun(\n  firestore: Firestore,\n  orgId: string,\n  ruleId: string,\n  run: CrmSharingRuleRun,\n  options: { dropRule?: boolean } = {},\n): Promise<CrmSharingRule | null> {\n  const written = await writeRules(firestore, orgId, (rules) =>\n    options.dropRule\n      ? rules.filter((rule) => rule.id !== ruleId)\n      : rules.map((rule) => (rule.id === ruleId ? { ...rule, run } : rule)),\n  )\n  return written.rules?.find((rule) => rule.id === ruleId) ?? null\n}\n\n/*==========================================\n * A RULE'S RUN: apply it everywhere, or take it away.\n *=========================================*/\n\nconst RUN_PAGE = 200\n\n/**\n * One budgeted pass of a rule's run, with the progress written on the rule\n * after every page so a reopened settings page shows where it stands and\n * `rule-continue` picks up from the cursor.\n *\n * `apply` walks the object's whole collection by document id — a rule\n * matches on fields no index narrows to (a facet's tags, a site that\n * captured the person) — and writes only the records whose sharing moves.\n * `remove` asks for exactly the records the rule holds a grant on\n * (`sharing.ruleIds`), each of which the recompute then takes it off; a\n * page that makes no progress fails the run rather than looping.\n */\nexport async function advanceSharingRuleRun(\n  firestore: Firestore,\n  orgId: string,\n  ruleId: string,\n  deadlineMs: number,\n): Promise<{ rule: CrmSharingRule | null; more: boolean }> {\n  const read = await crmSharingRulesOf(firestore, orgId, { fresh: true })\n  let rule = read.rules.find((entry) => entry.id === ruleId) ?? null\n  if (!rule?.run || rule.run.status !== 'running') return { rule, more: false }\n  const records = firestore.collection('orgs').doc(orgId).collection(rule.object)\n  let run: CrmSharingRuleRun = { ...rule.run }\n  const seen = new Set<string>()\n  try {\n    while (Date.now() < deadlineMs) {\n      const { rules } = await crmSharingRulesOf(firestore, orgId, { fresh: true })\n      const context = await crmSharingContextFor(firestore, orgId, rules, rule.object)\n      let page: FirebaseFirestore.QuerySnapshot\n      if (run.mode === 'apply') {\n        let query = records.orderBy(FieldPath.documentId()).limit(RUN_PAGE)\n        if (run.cursor) query = query.startAfter(run.cursor)\n        page = await query.get()\n      } else {\n        page = await records.where(CRM_SHARING_RULE_IDS_PATH, 'array-contains', ruleId).limit(RUN_PAGE).get()\n      }\n      const atMs = Date.now()\n      // Only the records whose sharing would move are written.\n      const moving = page.docs\n        .filter((doc) => {\n          const record = (doc.data() ?? {}) as Record<string, unknown>\n          const plan = planRecordSharing(\n            record,\n            evaluateRecordGrants(rule!.object, record, rules, atMs, context),\n          )\n          return sharingPlanChanges(record, plan)\n        })\n        .map((doc) => doc.id)\n      if (run.mode === 'remove' && page.docs.length && page.docs.every((doc) => seen.has(doc.id))) {\n        throw new Error('the rule’s grants did not come off these records')\n      }\n      for (const doc of page.docs) seen.add(doc.id)\n      const outcome = await recomputeMany(\n        { firestore, orgId, object: rule.object, rules, fresh: true, context, atMs },\n        moving,\n      )\n      const done = run.mode === 'apply' ? page.size < RUN_PAGE : page.empty\n      run = {\n        ...run,\n        processed: run.processed + page.size,\n        changed: run.changed + outcome.changed.length,\n        cursor: run.mode === 'apply' ? (page.docs[page.docs.length - 1]?.id ?? run.cursor ?? null) : null,\n        ...(done ? { status: 'done' as const, finishedAtMs: Date.now() } : {}),\n      }\n      rule = await writeRun(firestore, orgId, ruleId, run, {\n        dropRule: done && rule.deleting === true,\n      })\n      if (done || !rule) return { rule, more: false }\n    }\n    return { rule, more: true }\n  } catch (error) {\n    console.error('[crm] a sharing rule run failed', orgId, ruleId, error)\n    rule = await writeRun(firestore, orgId, ruleId, {\n      ...run,\n      status: 'failed',\n      finishedAtMs: Date.now(),\n      error: 'The recompute stopped. Resume it to carry on from where it stopped.',\n    })\n    return { rule, more: false }\n  }\n}\n\n/*==========================================\n * THE ROUTE.\n *=========================================*/\n\n/** How long one request works on a rule before it answers and the page asks again. */\nconst RUN_BUDGET_MS = 20_000\n\nconst MANAGERS_ONLY =\n  'Sharing records across sites is for the workspace’s owners and admins.'\n\nfunction readIds(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null\n  const ids = [\n    ...new Set(\n      raw.map((entry) => String(entry ?? '').trim().slice(0, 256)).filter((id) => id && !id.includes('/')),\n    ),\n  ].slice(0, CRM_SHARING_IDS_MAX)\n  return ids.length ? ids : null\n}\n\n/**\n * `POST /api/crm/sharing` — `{ action, hostId | orgId, … }`.\n *\n * Every action but `evaluate` is an org manager's: an OWNER or ADMIN of the\n * whole workspace (`authorizeOrgCaller(…, 'manage-org')`), under a site's\n * hub or the org's. `evaluate` is what a client-direct write owes the rules\n * and is open to whoever may write the CRM. The plan gate is the CRM's own\n * (`crmSuiteRefusal`): sharing is only meaningful across several sites, and\n * the number of sites a workspace may have is already the plan's.\n */\nexport const crmSharingHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    res.setHeader('Allow', 'POST')\n    res.status(405).json({ error: 'Method not allowed' })\n    return\n  }\n  const body = (req.body ?? {}) as Record<string, unknown>\n  const scope = readCrmRouteScope(body)\n  if (!scope) {\n    res.status(400).json({ error: 'Missing hostId' })\n    return\n  }\n  const action = String(body['action'] ?? '')\n  const firestore = firebaseAdmin.app().firestore()\n  try {\n    if (action === 'evaluate') {\n      const object = body['object']\n      const ids = readIds(body['ids'])\n      if (!isCrmSharingObject(object) || !ids) {\n        res.status(400).json({ error: 'Name the records.' })\n        return\n      }\n      const writer = await authorizeCrmWriter(req, scope, { suiteAct: null })\n      if (writer.ok === false) {\n        res.status(writer.status).json(writer.body)\n        return\n      }\n      const outcome = await evaluateCrmSharing(firestore, writer.orgId, object, ids)\n      const answer: CrmSharingResponse = { ok: true, ...outcome }\n      res.status(200).json(answer)\n      return\n    }\n\n    const orgId =\n      scope.level === 'org'\n        ? scope.orgId\n        : ((await getOrgForHost(scope.hostId).catch(() => null))?.orgId ?? '')\n    if (!orgId) {\n      res.status(404).json({ error: 'This site has no organization, so it has no CRM.' })\n      return\n    }\n    const caller = await authorizeOrgCaller(req, orgId, {\n      needs: 'manage-org',\n      refusal: MANAGERS_ONLY,\n    })\n    if (caller.ok === false) {\n      res.status(caller.status).json({ error: caller.error })\n      return\n    }\n    const suite = crmSuiteRefusal(caller.org, 'Sharing records across sites')\n    if (suite) {\n      res.status(suite.status).json(suite.body)\n      return\n    }\n    const actor = { uid: caller.uid, email: caller.email }\n    const byName = caller.name || caller.email || ''\n    const nowMs = Date.now()\n\n    if (action === 'sites') {\n      const answer: CrmSharingResponse = { ok: true, sites: await crmSharingSites(firestore, orgId) }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'share' || action === 'unshare') {\n      const object = body['object']\n      const ids = readIds(body['ids'])\n      if (!isCrmSharingObject(object) || !ids) {\n        res.status(400).json({ error: 'Name the records to share.' })\n        return\n      }\n      const targets = shareTargetsFrom(body['targets'])\n      if (!targets) {\n        res.status(400).json({ error: 'Choose the sites, or All sites.' })\n        return\n      }\n      const sites = await crmSharingSites(firestore, orgId)\n      const own = new Set(sites.map((site) => site.id))\n      if (hostIdsFromScope(targets).some((id) => !own.has(id))) {\n        res.status(400).json({ error: 'A site named is not one of this organization’s.' })\n        return\n      }\n      const access: CrmShareAccess = body['access'] === 'edit' ? 'edit' : 'read'\n      const { rules, fresh } = await crmSharingRulesOf(firestore, orgId)\n      const context = await crmSharingContextFor(firestore, orgId, rules, object)\n      const outcome = await recomputeMany(\n        {\n          firestore,\n          orgId,\n          object,\n          rules,\n          fresh,\n          context,\n          atMs: nowMs,\n          manual: (grants) =>\n            action === 'share'\n              ? withManualShares(grants, targets, access, { uid: caller.uid, name: byName }, nowMs)\n              : withoutManualShares(grants, targets),\n        },\n        ids,\n      )\n      const siteName = (id: string) => sites.find((site) => site.id === id)?.name ?? 'a site'\n      const named = describeShareTargets(targets, siteName)\n      const sentence =\n        action === 'share'\n          ? `Shared with ${named}${access === 'edit' ? ' (read and edit)' : ' (read-only)'}`\n          : `Stopped sharing with ${named}`\n      await Promise.all(\n        outcome.changed.map((id) =>\n          fileSharingActivity(firestore, {\n            orgId,\n            object,\n            id,\n            body: sentence,\n            targets,\n            by: { uid: caller.uid, name: byName },\n            atMs: nowMs,\n          }),\n        ),\n      )\n      if (outcome.changed.length) {\n        const label = CRM_SHARING_OBJECT_LABELS[object]\n        await logOrgActivity(\n          orgId,\n          actor,\n          outcome.changed.length === 1\n            ? `${sentence}: one ${label.one}`\n            : `${sentence}: ${outcome.changed.length} ${label.many.toLowerCase()}`,\n          {\n            type: ORG_TARGET[object],\n            ...(outcome.changed.length === 1 ? { id: outcome.changed[0] } : {}),\n          },\n        ).catch(() => undefined)\n      }\n      const answer: CrmSharingResponse = {\n        ok: true,\n        changed: outcome.changed.length,\n        missing: outcome.missing,\n      }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'rule-save') {\n      const hostIds = await orgHostIds(firestore, orgId)\n      const raw = body['rule']\n      const ruleId = raw && typeof raw === 'object' ? String((raw as Record<string, unknown>)['id'] ?? '') : ''\n      let saved: CrmSharingRule | null = null\n      let error: string | null = null\n      const written = await writeRules(firestore, orgId, (rules) => {\n        const existing = ruleId ? (rules.find((rule) => rule.id === ruleId) ?? null) : null\n        if (ruleId && !existing) return { error: 'That rule no longer exists.' }\n        if (existing?.deleting) return { error: 'That rule is being deleted.' }\n        if (!existing && rules.length >= CRM_SHARING_RULES_MAX) {\n          return { error: `A workspace keeps at most ${CRM_SHARING_RULES_MAX} sharing rules.` }\n        }\n        const judged = ruleFromRequest(raw, { hostIds, existing, uid: caller.uid, nowMs })\n        if (!judged.rule) {\n          error = judged.error\n          return { error: judged.error }\n        }\n        /*\n         * An enabled rule walks every record — it may now match some and not\n         * others. A disabled one only has grants to take away, and asks for\n         * exactly the records holding them.\n         */\n        saved = {\n          ...judged.rule,\n          run: {\n            status: 'running',\n            mode: judged.rule.enabled ? 'apply' : 'remove',\n            processed: 0,\n            changed: 0,\n            cursor: null,\n            startedAtMs: nowMs,\n          },\n        }\n        return existing\n          ? rules.map((rule) => (rule.id === existing.id ? saved! : rule))\n          : [...rules, saved]\n      })\n      if (!written.rules || !saved) {\n        res.status(400).json({ error: error ?? written.error ?? 'The rule could not be saved.' })\n        return\n      }\n      const rule = saved as CrmSharingRule\n      await logOrgActivity(\n        orgId,\n        actor,\n        `${ruleId ? 'Changed' : 'Added'} the sharing rule “${rule.name}”`,\n        { type: `${BUNDLE_ID}:sharingRule`, id: rule.id, name: rule.name },\n      ).catch(() => undefined)\n      const advanced = await advanceSharingRuleRun(firestore, orgId, rule.id, Date.now() + RUN_BUDGET_MS)\n      const answer: CrmSharingResponse = { ok: true, rule: advanced.rule, more: advanced.more }\n      res.status(200).json(answer)\n      return\n    }\n\n    if (action === 'rule-delete' || action === 'rule-continue') {\n      const ruleId = String(body['ruleId'] ?? '').trim()\n      if (!ruleId) {\n        res.status(400).json({ error: 'Name the rule.' })\n        return\n      }\n      if (action === 'rule-delete') {\n        let name = ''\n        const written = await writeRules(firestore, orgId, (rules) => {\n          const existing = rules.find((rule) => rule.id === ruleId)\n          if (!existing) return { error: 'That rule no longer exists.' }\n          name = existing.name\n          return rules.map((rule) =>\n            rule.id === ruleId\n              ? {\n                  ...rule,\n                  enabled: false,\n                  deleting: true,\n                  updatedAtMs: nowMs,\n                  run: {\n                    status: 'running' as const,\n                    mode: 'remove' as const,\n                    processed: 0,\n                    changed: 0,\n                    cursor: null,\n                    startedAtMs: nowMs,\n                  },\n                }\n              : rule,\n          )\n        })\n        if (!written.rules) {\n          res.status(404).json({ error: written.error })\n          return\n        }\n        await logOrgActivity(orgId, actor, `Deleted the sharing rule “${name}”`, {\n          type: `${BUNDLE_ID}:sharingRule`,\n          id: ruleId,\n          name,\n        }).catch(() => undefined)\n      } else {\n        // A failed run resumes from its cursor.\n        await writeRules(firestore, orgId, (rules) =>\n          rules.map((rule) =>\n            rule.id === ruleId && rule.run?.status === 'failed'\n              ? { ...rule, run: { ...rule.run, status: 'running' as const } }\n              : rule,\n          ),\n        )\n      }\n      const advanced = await advanceSharingRuleRun(firestore, orgId, ruleId, Date.now() + RUN_BUDGET_MS)\n      const answer: CrmSharingResponse = { ok: true, rule: advanced.rule, more: advanced.more }\n      res.status(200).json(answer)\n      return\n    }\n\n    res.status(400).json({ error: 'Unknown sharing action.' })\n  } catch (error) {\n    console.error('[crm] sharing failed', action, error)\n    res.status(500).json({ error: 'The sharing could not be saved. Try again.' })\n  }\n}\n\n"],"names":["CRM_COLLECTIONS","crmActivityLogHasRoom","crmListFieldsPatch","createResourceUid","hostIdsFromScope","firebaseAdmin","getOrgForHost","logOrgActivity","countCrmActivitiesForRecord","FieldPath","FieldValue","BUNDLE_ID","activeSharingRules","CRM_SHARING_CRITERIA_FOR","CRM_SHARING_CRITERIA_KEYS","CRM_SHARING_FIELD","CRM_SHARING_IDS_MAX","CRM_SHARING_OBJECT_LABELS","CRM_SHARING_RULE_IDS_PATH","CRM_SHARING_RULES_MAX","CRM_WRITE_SCOPE_FIELD","describeShareTargets","evaluateRecordGrants","isCrmShareAccess","isCrmSharingObject","planRecordSharing","readCrmSharingRule","readCrmSharingRules","recordHeldScope","sharingPlanChanges","shareTargetsFrom","sharingRulesAskLeadSourceDirection","withManualShares","withoutManualShares","stampCrmActivityCompany","readLeadSourcePicklist","authorizeOrgCaller","orgHostIds","readCrmRouteScope","crmSuiteRefusal","authorizeCrmWriter","RULES_TTL_MS","rulesCache","Map","forgetCrmSharingRules","orgId","delete","clear","crmSharingRulesOf","firestore","options","snapshot","nowMs","Date","now","cached","get","fresh","atMs","rules","collection","doc","data","set","crmSharingContextFor","object","leadSources","recomputeRecordSharing","input","id","ref","runTransaction","tx","plan","exists","record","known","Set","map","rule","stored","ruleIds","Array","isArray","some","ruleId","has","String","org","context","grants","manual","next","visibleTo","writeTo","undefined","sharing","update","recomputeMany","ids","queue","changed","missing","worker","shift","outcome","push","Promise","all","from","length","Math","min","evaluateCrmSharing","crmSharingRecordWritten","event","segments","path","split","app","error","console","LINK_FIELD","leads","contacts","companies","deals","ORG_TARGET","fileSharingActivity","orgRef","held","targets","named","link","deal","contact","hostId","activities","create","kind","body","byUid","by","uid","name","byName","sourcePluginId","createdAt","serverTimestamp","updatedAt","crmSharingSites","hosts","where","docs","displayName","trim","subdomain","sort","a","b","localeCompare","listFrom","raw","max","entry","slice","filter","Boolean","ruleFromRequest","value","own","hostIds","sourceHostIds","access","rawCriteria","criteria","key","includes","list","existing","enabled","createdByUid","createdAtMs","updatedAtMs","storedRule","JSON","parse","stringify","writeRules","change","result","writeRun","run","written","dropRule","find","RUN_PAGE","advanceSharingRuleRun","deadlineMs","read","status","more","records","seen","page","mode","query","orderBy","documentId","limit","cursor","startAfter","moving","every","Error","add","done","size","empty","processed","finishedAtMs","deleting","RUN_BUDGET_MS","MANAGERS_ONLY","readIds","crmSharingHandler","req","res","method","setHeader","json","scope","action","writer","suiteAct","ok","answer","level","catch","caller","needs","refusal","suite","actor","email","sites","site","siteName","sentence","label","one","many","toLowerCase","type","saved","judged","startedAtMs","advanced"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;CAkBC,GAED,SACEA,eAAe,EACfC,qBAAqB,EAErBC,kBAAkB,QACb,6BAA4B;AACnC,SAASC,iBAAiB,QAAQ,6CAA4C;AAC9E,SAASC,gBAAgB,QAAQ,sCAAqC;AAEtE,SAASC,aAAa,EAAEC,aAAa,EAAEC,cAAc,QAAQ,2BAA0B;AACvF,SAASC,2BAA2B,QAAQ,8CAA6C;AACzF,SAASC,SAAS,EAAEC,UAAU,QAAQ,2BAA0B;AAChE,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SACEC,kBAAkB,EAClBC,wBAAwB,EACxBC,yBAAyB,EACzBC,iBAAiB,EACjBC,mBAAmB,EACnBC,yBAAyB,EACzBC,yBAAyB,EACzBC,qBAAqB,EACrBC,qBAAqB,EAUrBC,oBAAoB,EACpBC,oBAAoB,EACpBC,gBAAgB,EAChBC,kBAAkB,EAClBC,iBAAiB,EACjBC,kBAAkB,EAClBC,mBAAmB,EACnBC,eAAe,EACfC,kBAAkB,EAClBC,gBAAgB,EAChBC,kCAAkC,EAClCC,gBAAgB,EAChBC,mBAAmB,QACd,0BAAsB;AAC7B,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,sBAAsB,QAAQ,4BAAwB;AAC/D,SAASC,kBAAkB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,kBAAc;AAChF,SAASC,eAAe,QAAQ,kBAAc;AAC9C,SAASC,kBAAkB,QAAQ,mBAAe;AAIlD;;2CAE2C,GAE3C;;;;CAIC,GACD,MAAMC,eAAe;AACrB,MAAMC,aAAa,IAAIC;AAEvB,8EAA8E,GAC9E,OAAO,SAASC,sBAAsBC,KAAc;IAClD,IAAIA,OAAOH,WAAWI,MAAM,CAACD;SACxBH,WAAWK,KAAK;AACvB;AAEA,OAAO,eAAeC,kBACpBC,SAAoB,EACpBJ,KAAa,EACbK,UAA+C,CAAC,CAAC;QAEnCA,gBAMoBC;IANlC,MAAMC,SAAQF,iBAAAA,QAAQE,KAAK,YAAbF,iBAAiBG,KAAKC,GAAG;IACvC,MAAMC,SAASb,WAAWc,GAAG,CAACX;IAC9B,IAAI,CAACK,QAAQO,KAAK,IAAIF,UAAUH,QAAQG,OAAOG,IAAI,GAAGjB,cAAc;QAClE,OAAO;YAAEkB,OAAOJ,OAAOI,KAAK;YAAEF,OAAO;QAAM;IAC7C;IACA,MAAMN,WAAW,MAAMF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOW,GAAG;IAClE,MAAMG,QAAQhC,qBAAoBwB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB;IACrDT,WAAWqB,GAAG,CAAClB,OAAO;QAAEa,MAAMN;QAAOO;IAAM;IAC3C,OAAO;QAAEA;QAAOF,OAAO;IAAK;AAC9B;AAEA;;;;CAIC,GACD,OAAO,eAAeO,qBACpBf,SAAoB,EACpBJ,KAAa,EACbc,KAAgC,EAChCM,MAAwB;IAExB,IAAI,CAAClC,mCAAmC4B,OAAOM,SAAS,OAAO,CAAC;IAChE,OAAO;QAAEC,aAAa,MAAM/B,uBAAuBc,WAAWJ;IAAO;AACvE;AAwBA,OAAO,eAAesB,uBACpBC,KAAkC;IAElC,MAAM,EAAEnB,SAAS,EAAEJ,KAAK,EAAEoB,MAAM,EAAEI,EAAE,EAAEX,IAAI,EAAE,GAAGU;IAC/C,MAAME,MAAMrB,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOe,UAAU,CAACK,QAAQJ,GAAG,CAACQ;IAC3E,OAAO,MAAMpB,UAAUsB,cAAc,CAAC,OAAOC;YAG3BrB,gBA6BWsB,eACJA,eAIIA,gBACJA;YAhBrBL;QArBF,MAAMjB,WAAW,MAAMqB,GAAGhB,GAAG,CAACc;QAC9B,IAAI,CAACnB,SAASuB,MAAM,EAAE,OAAO;QAC7B,MAAMC,UAAUxB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB,CAAC;QACpC,IAAIQ,QAAQS,MAAMT,KAAK;QACvB;;;;;KAKC,GACD,IAAI,CAACS,MAAMX,KAAK,EAAE;YAChB,MAAMmB,QAAQ,IAAIC,IAAIlB,MAAMmB,GAAG,CAAC,CAACC,OAASA,KAAKV,EAAE;YACjD,MAAMW,SAASL,MAAM,CAAC5D,kBAAkB;YACxC,MAAMkE,UAAUC,MAAMC,OAAO,CAACH,0BAAAA,OAAQC,OAAO,IAAKD,OAAOC,OAAO,GAAiB,EAAE;YACnF,IAAIA,QAAQG,IAAI,CAAC,CAACC,SAAW,CAACT,MAAMU,GAAG,CAACC,OAAOF,WAAW;oBAE5BG;gBAD5B,MAAMA,MAAM,MAAMhB,GAAGhB,GAAG,CAACP,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB;gBAC1Dc,QAAQhC,qBAAoB6D,YAAAA,IAAI1B,IAAI,cAAR0B,YAAc;YAC5C;QACF;QACA,sFAAsF;QACtF,MAAMC,UACJrB,EAAAA,iBAAAA,MAAMqB,OAAO,qBAAbrB,eAAeF,WAAW,KAAIP,UAAUS,MAAMT,KAAK,GAC/CS,MAAMqB,OAAO,GACb,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;QAC1D,IAAIyB,SAASpE,qBAAqB2C,QAAQU,QAAQhB,OAAOD,MAAM+B;QAC/D,IAAIrB,MAAMuB,MAAM,EAAED,SAAStB,MAAMuB,MAAM,CAACD;QACxC,MAAMjB,OAAOhD,kBAAkBkD,QAAQe;QACvC,IAAI,CAAC7D,mBAAmB8C,QAAQF,OAAO,OAAO;QAC9C,MAAMmB,OAAO,aACRjB;YACHkB,WAAWpB,KAAKoB,SAAS;YACzB,CAACzE,sBAAsB,GAAEqD,gBAAAA,KAAKqB,OAAO,YAAZrB,gBAAgBsB;YACzC,CAAChF,kBAAkB,GAAE0D,gBAAAA,KAAKuB,OAAO,YAAZvB,gBAAgBsB;;QAEvCvB,GAAGyB,MAAM,CAAC3B,KAAK;YACbuB,WAAWpB,KAAKoB,SAAS;YACzB,CAACzE,sBAAsB,GAAEqD,iBAAAA,KAAKqB,OAAO,YAAZrB,iBAAgB/D,WAAWoC,MAAM;YAC1D,CAAC/B,kBAAkB,GAAE0D,iBAAAA,KAAKuB,OAAO,YAAZvB,iBAAgB/D,WAAWoC,MAAM;WAGnD5C,mBAAmB+D,QAAQ2B;QAEhC,OAAO;IACT;AACF;AAEA,8CAA8C,GAC9C,eAAeM,cACb9B,KAA8C,EAC9C+B,GAAsB;IAEtB,MAAMC,QAAQ;WAAI,IAAIvB,IAAIsB;KAAK;IAC/B,MAAME,UAAoB,EAAE;IAC5B,IAAIC,UAAU;IACd,MAAMC,SAAS;QACb,IAAK,IAAIlC,KAAK+B,MAAMI,KAAK,IAAInC,OAAO0B,WAAW1B,KAAK+B,MAAMI,KAAK,GAAI;YACjE,MAAMC,UAAU,MAAMtC,uBAAuB,aAAKC;gBAAOC;;YACzD,IAAIoC,YAAY,WAAWJ,QAAQK,IAAI,CAACrC;YACxC,IAAIoC,YAAY,WAAWH,WAAW;QACxC;IACF;IACA,MAAMK,QAAQC,GAAG,CAAC1B,MAAM2B,IAAI,CAAC;QAAEC,QAAQC,KAAKC,GAAG,CAAC,GAAGZ,MAAMU,MAAM;IAAE,GAAGP;IACpE,OAAO;QAAEF;QAASC;IAAQ;AAC5B;AAEA;;;;;CAKC,GACD,OAAO,eAAeW,mBACpBhE,SAAoB,EACpBJ,KAAa,EACboB,MAAwB,EACxBkC,GAAsB;IAEtB,MAAM,EAAExC,KAAK,EAAEF,KAAK,EAAE,GAAG,MAAMT,kBAAkBC,WAAWJ;IAC5D,IAAI,CAACjC,mBAAmB+C,OAAOM,QAAQ6C,MAAM,EAAE,OAAO;QAAET,SAAS;QAAGC,SAAS;IAAE;IAC/E,MAAMb,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;IACpE,MAAMwC,UAAU,MAAMP,cACpB;QAAEjD;QAAWJ;QAAOoB;QAAQN;QAAOF;QAAOgC;QAAS/B,MAAML,KAAKC,GAAG;IAAG,GACpE6C;IAEF,OAAO;QAAEE,SAASI,QAAQJ,OAAO,CAACS,MAAM;QAAER,SAASG,QAAQH,OAAO;IAAC;AACrE;AAEA;;;;CAIC,GACD,OAAO,eAAeY,wBAAwBC,KAG7C;IACC,IAAI,CAAC3F,mBAAmB2F,MAAMvD,UAAU,GAAG;IAC3C,MAAMwD,WAAWD,MAAME,IAAI,CAACC,KAAK,CAAC;IAClC,IAAIF,SAASN,MAAM,KAAK,KAAKM,QAAQ,CAAC,EAAE,KAAK,UAAUA,QAAQ,CAAC,EAAE,KAAKD,MAAMvD,UAAU,EAAE;IACzF,IAAI;QACF,MAAMqD,mBACJ5G,cAAckH,GAAG,GAAGtE,SAAS,IAC7BmE,QAAQ,CAAC,EAAE,EACXD,MAAMvD,UAAU,EAChB;YAACwD,QAAQ,CAAC,EAAE;SAAC;IAEjB,EAAE,OAAOI,OAAO;QACdC,QAAQD,KAAK,CAAC,CAAC,+CAA+C,EAAEL,MAAME,IAAI,EAAE,EAAEG;IAChF;AACF;AAEA;;2CAE2C,GAE3C,MAAME,aAAwE;IAC5EC,OAAO;IACPC,UAAU;IACVC,WAAW;IACXC,OAAO;AACT;AAEA,MAAMC,aAA0F;IAC9FJ,OAAO;IACPC,UAAU;IACVC,WAAW;IACXC,OAAO;AACT;AAEA;;;;CAIC,GACD,eAAeE,oBACb/E,SAAoB,EACpBmB,KAQC;IAED,IAAI;YAEa,OAcRhE;QAfP,MAAM6H,SAAShF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAACO,MAAMvB,KAAK;QAC3D,MAAM8B,UAAS,QAAA,AAAC,CAAA,MAAMsD,OAAOrE,UAAU,CAACQ,MAAMH,MAAM,EAAEJ,GAAG,CAACO,MAAMC,EAAE,EAAEb,GAAG,EAAC,EAAGM,IAAI,cAAhE,QAAsE,CAAC;QACtF,MAAMoE,OAAOtG,gBAAgB+C;QAC7B,MAAMkB,YAAY;eAAI,IAAIhB,IAAI;mBAAIqD;mBAAS9D,MAAM+D,OAAO;aAAC;SAAE;QAC3D,IAAI,CAACtC,UAAUiB,MAAM,EAAE;QACvB,MAAMsB,QAAyB;YAAE,CAACV,UAAU,CAACtD,MAAMH,MAAM,CAAC,CAAC,EAAEG,MAAMC,EAAE;QAAC;QACtE,IAAI,CAACpE,sBAAsB,MAAMO,4BAA4ByH,QAAQG,SAAS;QAC9E,2EAA2E;QAC3E,MAAMC,OAAOnG,wBAAwBkG,OAAO,aACtChE,MAAMH,MAAM,KAAK,UAAU;YAAEqE,MAAM3D;QAAO,IAAI,CAAC,GAC/CP,MAAMH,MAAM,KAAK,aAAa;YAAEsE,SAAS5D;QAAO,IAAI,CAAC;QAE3D,MAAM6D,SACJ,OAAO7D,MAAM,CAAC,SAAS,KAAK,YAAYA,MAAM,CAAC,SAAS,GACpDA,MAAM,CAAC,SAAS,IACfvE,qBAAAA,iBAAiB8H,KAAK,CAAC,EAAE,YAAzB9H,qBAA6B;QACpC,MAAM6H,OACHrE,UAAU,CAAC5D,gBAAgByI,UAAU,EACrC5E,GAAG,CAAC1D,qBACJuI,MAAM,CAAC;YACNC,MAAM;YACNC,MAAMxE,MAAMwE,IAAI;YAChBlF,MAAMU,MAAMV,IAAI;YAChBmF,OAAOzE,MAAM0E,EAAE,CAACC,GAAG;WACf3E,MAAM0E,EAAE,CAACE,IAAI,GAAG;YAAEC,QAAQ7E,MAAM0E,EAAE,CAACE,IAAI;QAAC,IAAI,CAAC,GAC9CX;YACHG;YACA3C;YACAqD,gBAAgBvI;YAChBwI,WAAWzI,WAAW0I,eAAe;YACrCC,WAAW3I,WAAW0I,eAAe;;IAE3C,EAAE,OAAO5B,OAAO;QACdC,QAAQD,KAAK,CAAC,8DAA8DpD,MAAMC,EAAE,EAAEmD;IACxF;AACF;AAEA;;2CAE2C,GAE3C,OAAO,eAAe8B,gBAAgBrG,SAAoB,EAAEJ,KAAa;IACvE,MAAM0G,QAAQ,MAAMtG,UAAUW,UAAU,CAAC,SAAS4F,KAAK,CAAC,SAAS,MAAM3G,OAAOW,GAAG;IACjF,OAAO+F,MAAME,IAAI,CACd3E,GAAG,CAAC,CAACjB;YACuBA,UACFA;QADzB,MAAM6F,cAAcnE,QAAO1B,WAAAA,IAAIL,GAAG,CAAC,0BAARK,WAA0B,IAAI8F,IAAI;QAC7D,MAAMC,YAAYrE,QAAO1B,YAAAA,IAAIL,GAAG,CAAC,wBAARK,YAAwB,IAAI8F,IAAI;QACzD,OAAO;YAAEtF,IAAIkB,OAAO1B,IAAIQ,EAAE;YAAG2E,MAAMU,eAAeE,aAAarE,OAAO1B,IAAIQ,EAAE;QAAE;IAChF,GACCwF,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEd,IAAI,CAACgB,aAAa,CAACD,EAAEf,IAAI;AAC/C;AAEA;;2CAE2C,GAE3C,SAASiB,SAASC,GAAY,EAAEC,GAAW;IACzC,IAAI,CAACjF,MAAMC,OAAO,CAAC+E,MAAM,OAAO,EAAE;IAClC,OAAO;WACF,IAAIrF,IACLqF,IAAIpF,GAAG,CAAC,CAACsF,QAAU7E,OAAO6E,gBAAAA,QAAS,IAAIT,IAAI,GAAGU,KAAK,CAAC,GAAG,MAAMC,MAAM,CAACC;KAEvE,CAACF,KAAK,CAAC,GAAGF;AACb;AAEA;;;;CAIC,GACD,OAAO,SAASK,gBACdN,GAAY,EACZzE,OAAoG;QAUhFgF,aAgBCA;IAxBrB,IAAI,CAACP,OAAO,OAAOA,QAAQ,YAAYhF,MAAMC,OAAO,CAAC+E,MAAM;QACzD,OAAO;YAAEnF,MAAM;YAAMyC,OAAO;QAAqB;IACnD;IACA,MAAMiD,QAAQP;IACd,MAAMjG,SAASwG,KAAK,CAAC,SAAS;IAC9B,IAAI,CAACjJ,mBAAmByC,SAAS;QAC/B,OAAO;YAAEc,MAAM;YAAMyC,OAAO;QAAwC;IACtE;IACA,MAAMwB,OAAOzD,QAAOkF,cAAAA,KAAK,CAAC,OAAO,YAAbA,cAAiB,IAAId,IAAI,GAAGU,KAAK,CAAC,GAAG;IACzD,IAAI,CAACrB,MAAM,OAAO;QAAEjE,MAAM;QAAMyC,OAAO;IAAiB;IACxD,MAAMkD,MAAM,IAAI7F,IAAIY,QAAQkF,OAAO;IACnC,MAAMC,gBAAgBX,SAASQ,KAAK,CAAC,gBAAgB,EAAE;IACvD,IAAIG,cAAcxF,IAAI,CAAC,CAACf,KAAO,CAACqG,IAAIpF,GAAG,CAACjB,MAAM;QAC5C,OAAO;YAAEU,MAAM;YAAMyC,OAAO;QAA2D;IACzF;IACA,MAAMW,UAAUrG,iBAAiB2I,KAAK,CAAC,UAAU;IACjD,IAAI,CAACtC,SAAS,OAAO;QAAEpD,MAAM;QAAMyC,OAAO;IAAgD;IAC1F,IAAIpH,iBAAiB+H,SAAS/C,IAAI,CAAC,CAACf,KAAO,CAACqG,IAAIpF,GAAG,CAACjB,MAAM;QACxD,OAAO;YAAEU,MAAM;YAAMyC,OAAO;QAAiE;IAC/F;IACA,MAAMqD,SAASJ,KAAK,CAAC,SAAS;IAC9B,IAAII,WAAW9E,aAAa,CAACxE,iBAAiBsJ,SAAS;QACrD,OAAO;YAAE9F,MAAM;YAAMyC,OAAO;QAAyC;IACvE;IACA,MAAMsD,eAAeL,kBAAAA,KAAK,CAAC,WAAW,YAAjBA,kBAAqB,CAAC;IAC3C,MAAMM,WAA+B,CAAC;IACtC,KAAK,MAAMC,OAAOlK,0BAA2B;QAC3C,IAAI,CAACD,wBAAwB,CAACoD,OAAO,CAACgH,QAAQ,CAACD,MAAM;QACrD,MAAME,OAAOjB,SAASa,WAAW,CAACE,IAAI,EAAE;QACxC,IAAIE,KAAKpE,MAAM,EAAEiE,QAAQ,CAACC,IAAI,GAAGE;IACnC;IACA,MAAMC,WAAW1F,QAAQ0F,QAAQ;IACjC,MAAMpG,OAAOrD,mBAAmB;QAC9B2C,EAAE,UAAE8G,4BAAAA,SAAU9G,EAAE,mBAAIlE;QACpB6I;QACA/E;QACAmH,SAASX,KAAK,CAAC,UAAU,KAAK;QAC9BG;QACAG;QACA5C;QACA0C,MAAM,EAAGA,iBAAAA,SAAyC;QAClDQ,YAAY,WAAEF,4BAAAA,SAAUE,YAAY,oBAAI5F,QAAQsD,GAAG;QACnDuC,WAAW,WAAEH,4BAAAA,SAAUG,WAAW,oBAAI7F,QAAQrC,KAAK;QACnDmI,aAAa9F,QAAQrC,KAAK;IAC5B;IACA,IAAI,CAAC2B,MAAM,OAAO;QAAEA,MAAM;QAAMyC,OAAO;IAA8B;IACrE,OAAO;QAAEzC;QAAMyC,OAAO;IAAK;AAC7B;AAEA,oEAAoE,GACpE,SAASgE,WAAWzG,IAAoB;IACtC,OAAO0G,KAAKC,KAAK,CAACD,KAAKE,SAAS,CAAC5G;AACnC;AAEA;;;CAGC,GACD,eAAe6G,WACb3I,SAAoB,EACpBJ,KAAa,EACbgJ,MAAyE;IAEzE,MAAM5D,SAAShF,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB;IAChD,MAAMiJ,SAAS,MAAM7I,UAAUsB,cAAc,CAAC,OAAOC;YAEXrB;QADxC,MAAMA,WAAW,MAAMqB,GAAGhB,GAAG,CAACyE;QAC9B,MAAMrC,OAAOiG,OAAOlK,qBAAoBwB,iBAAAA,SAASW,IAAI,cAAbX,iBAAmB;QAC3D,IAAI,WAAWyC,MAAM,OAAO;YAAEjC,OAAO;YAAM6D,OAAO5B,KAAK4B,KAAK;QAAC;QAC7DhD,GAAGyB,MAAM,CAACgC,QAAQ,IAAIxH,UAAU,OAAO,iBAAiBmF,KAAKd,GAAG,CAAC0G;QACjE,OAAO;YAAE7H,OAAOiC;YAAM4B,OAAO;QAAK;IACpC;IACA5E,sBAAsBC;IACtB,OAAOiJ;AACT;AAEA,gEAAgE,GAChE,eAAeC,SACb9I,SAAoB,EACpBJ,KAAa,EACbwC,MAAc,EACd2G,GAAsB,EACtB9I,UAAkC,CAAC,CAAC;;QAO7B+I;IALP,MAAMA,UAAU,MAAML,WAAW3I,WAAWJ,OAAO,CAACc,QAClDT,QAAQgJ,QAAQ,GACZvI,MAAM2G,MAAM,CAAC,CAACvF,OAASA,KAAKV,EAAE,KAAKgB,UACnC1B,MAAMmB,GAAG,CAAC,CAACC,OAAUA,KAAKV,EAAE,KAAKgB,SAAS,aAAKN;gBAAMiH;iBAAQjH;IAEnE,gBAAOkH,iBAAAA,QAAQtI,KAAK,qBAAbsI,eAAeE,IAAI,CAAC,CAACpH,OAASA,KAAKV,EAAE,KAAKgB,0BAAW;AAC9D;AAEA;;2CAE2C,GAE3C,MAAM+G,WAAW;AAEjB;;;;;;;;;;;CAWC,GACD,OAAO,eAAeC,sBACpBpJ,SAAoB,EACpBJ,KAAa,EACbwC,MAAc,EACdiH,UAAkB;QAGPC;IADX,MAAMA,OAAO,MAAMvJ,kBAAkBC,WAAWJ,OAAO;QAAEY,OAAO;IAAK;IACrE,IAAIsB,QAAOwH,mBAAAA,KAAK5I,KAAK,CAACwI,IAAI,CAAC,CAAC/B,QAAUA,MAAM/F,EAAE,KAAKgB,mBAAxCkH,mBAAmD;IAC9D,IAAI,EAACxH,wBAAAA,KAAMiH,GAAG,KAAIjH,KAAKiH,GAAG,CAACQ,MAAM,KAAK,WAAW,OAAO;QAAEzH;QAAM0H,MAAM;IAAM;IAC5E,MAAMC,UAAUzJ,UAAUW,UAAU,CAAC,QAAQC,GAAG,CAAChB,OAAOe,UAAU,CAACmB,KAAKd,MAAM;IAC9E,IAAI+H,MAAyB,aAAKjH,KAAKiH,GAAG;IAC1C,MAAMW,OAAO,IAAI9H;IACjB,IAAI;QACF,MAAOxB,KAAKC,GAAG,KAAKgJ,WAAY;gBAoCIM;gBAAAA;YAnClC,MAAM,EAAEjJ,KAAK,EAAE,GAAG,MAAMX,kBAAkBC,WAAWJ,OAAO;gBAAEY,OAAO;YAAK;YAC1E,MAAMgC,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOoB,KAAKd,MAAM;YAC/E,IAAI2I;YACJ,IAAIZ,IAAIa,IAAI,KAAK,SAAS;gBACxB,IAAIC,QAAQJ,QAAQK,OAAO,CAACtM,UAAUuM,UAAU,IAAIC,KAAK,CAACb;gBAC1D,IAAIJ,IAAIkB,MAAM,EAAEJ,QAAQA,MAAMK,UAAU,CAACnB,IAAIkB,MAAM;gBACnDN,OAAO,MAAME,MAAMtJ,GAAG;YACxB,OAAO;gBACLoJ,OAAO,MAAMF,QAAQlD,KAAK,CAACtI,2BAA2B,kBAAkBmE,QAAQ4H,KAAK,CAACb,UAAU5I,GAAG;YACrG;YACA,MAAME,OAAOL,KAAKC,GAAG;YACrB,yDAAyD;YACzD,MAAM8J,SAASR,KAAKnD,IAAI,CACrBa,MAAM,CAAC,CAACzG;oBACSA;gBAAhB,MAAMc,UAAUd,YAAAA,IAAIC,IAAI,cAARD,YAAc,CAAC;gBAC/B,MAAMY,OAAOhD,kBACXkD,QACArD,qBAAqByD,KAAMd,MAAM,EAAEU,QAAQhB,OAAOD,MAAM+B;gBAE1D,OAAO5D,mBAAmB8C,QAAQF;YACpC,GACCK,GAAG,CAAC,CAACjB,MAAQA,IAAIQ,EAAE;YACtB,IAAI2H,IAAIa,IAAI,KAAK,YAAYD,KAAKnD,IAAI,CAAC3C,MAAM,IAAI8F,KAAKnD,IAAI,CAAC4D,KAAK,CAAC,CAACxJ,MAAQ8I,KAAKrH,GAAG,CAACzB,IAAIQ,EAAE,IAAI;gBAC3F,MAAM,IAAIiJ,MAAM;YAClB;YACA,KAAK,MAAMzJ,OAAO+I,KAAKnD,IAAI,CAAEkD,KAAKY,GAAG,CAAC1J,IAAIQ,EAAE;YAC5C,MAAMoC,UAAU,MAAMP,cACpB;gBAAEjD;gBAAWJ;gBAAOoB,QAAQc,KAAKd,MAAM;gBAAEN;gBAAOF,OAAO;gBAAMgC;gBAAS/B;YAAK,GAC3E0J;YAEF,MAAMI,OAAOxB,IAAIa,IAAI,KAAK,UAAUD,KAAKa,IAAI,GAAGrB,WAAWQ,KAAKc,KAAK;YACrE1B,MAAM,aACDA;gBACH2B,WAAW3B,IAAI2B,SAAS,GAAGf,KAAKa,IAAI;gBACpCpH,SAAS2F,IAAI3F,OAAO,GAAGI,QAAQJ,OAAO,CAACS,MAAM;gBAC7CoG,QAAQlB,IAAIa,IAAI,KAAK,WAAWD,iBAAAA,cAAAA,KAAKnD,IAAI,CAACmD,KAAKnD,IAAI,CAAC3C,MAAM,GAAG,EAAE,qBAA/B8F,YAAiCvI,EAAE,oBAAI2H,IAAIkB,MAAM,YAAjDN,OAAqD,OAAQ;eACzFY,OAAO;gBAAEhB,QAAQ;gBAAiBoB,cAAcvK,KAAKC,GAAG;YAAG,IAAI,CAAC;YAEtEyB,OAAO,MAAMgH,SAAS9I,WAAWJ,OAAOwC,QAAQ2G,KAAK;gBACnDE,UAAUsB,QAAQzI,KAAK8I,QAAQ,KAAK;YACtC;YACA,IAAIL,QAAQ,CAACzI,MAAM,OAAO;gBAAEA;gBAAM0H,MAAM;YAAM;QAChD;QACA,OAAO;YAAE1H;YAAM0H,MAAM;QAAK;IAC5B,EAAE,OAAOjF,OAAO;QACdC,QAAQD,KAAK,CAAC,mCAAmC3E,OAAOwC,QAAQmC;QAChEzC,OAAO,MAAMgH,SAAS9I,WAAWJ,OAAOwC,QAAQ,aAC3C2G;YACHQ,QAAQ;YACRoB,cAAcvK,KAAKC,GAAG;YACtBkE,OAAO;;QAET,OAAO;YAAEzC;YAAM0H,MAAM;QAAM;IAC7B;AACF;AAEA;;2CAE2C,GAE3C,oFAAoF,GACpF,MAAMqB,gBAAgB;AAEtB,MAAMC,gBACJ;AAEF,SAASC,QAAQ9D,GAAY;IAC3B,IAAI,CAAChF,MAAMC,OAAO,CAAC+E,MAAM,OAAO;IAChC,MAAM/D,MAAM;WACP,IAAItB,IACLqF,IAAIpF,GAAG,CAAC,CAACsF,QAAU7E,OAAO6E,gBAAAA,QAAS,IAAIT,IAAI,GAAGU,KAAK,CAAC,GAAG,MAAMC,MAAM,CAAC,CAACjG,KAAOA,MAAM,CAACA,GAAG4G,QAAQ,CAAC;KAElG,CAACZ,KAAK,CAAC,GAAGrJ;IACX,OAAOmF,IAAIW,MAAM,GAAGX,MAAM;AAC5B;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAM8H,oBAAsC,OAAOC,KAAKC;QAM/CD,WAMQtF;IAXtB,IAAIsF,IAAIE,MAAM,KAAK,QAAQ;QACzBD,IAAIE,SAAS,CAAC,SAAS;QACvBF,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE9G,OAAO;QAAqB;QACnD;IACF;IACA,MAAMoB,QAAQsF,YAAAA,IAAItF,IAAI,YAARsF,YAAY,CAAC;IAC3B,MAAMK,QAAQjM,kBAAkBsG;IAChC,IAAI,CAAC2F,OAAO;QACVJ,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE9G,OAAO;QAAiB;QAC/C;IACF;IACA,MAAMgH,SAASjJ,QAAOqD,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAM3F,YAAY5C,cAAckH,GAAG,GAAGtE,SAAS;IAC/C,IAAI;;YAsBM;QArBR,IAAIuL,WAAW,YAAY;YACzB,MAAMvK,SAAS2E,IAAI,CAAC,SAAS;YAC7B,MAAMzC,MAAM6H,QAAQpF,IAAI,CAAC,MAAM;YAC/B,IAAI,CAACpH,mBAAmByC,WAAW,CAACkC,KAAK;gBACvCgI,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,OAAO;gBAAoB;gBAClD;YACF;YACA,MAAMiH,SAAS,MAAMjM,mBAAmB0L,KAAKK,OAAO;gBAAEG,UAAU;YAAK;YACrE,IAAID,OAAOE,EAAE,KAAK,OAAO;gBACvBR,IAAI3B,MAAM,CAACiC,OAAOjC,MAAM,EAAE8B,IAAI,CAACG,OAAO7F,IAAI;gBAC1C;YACF;YACA,MAAMnC,UAAU,MAAMQ,mBAAmBhE,WAAWwL,OAAO5L,KAAK,EAAEoB,QAAQkC;YAC1E,MAAMyI,SAA6B;gBAAED,IAAI;eAASlI;YAClD0H,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,MAAM/L,QACJ0L,MAAMM,KAAK,KAAK,QACZN,MAAM1L,KAAK,YACT,QAAA,MAAMvC,cAAciO,MAAM/F,MAAM,EAAEsG,KAAK,CAAC,IAAM,0BAA/C,AAAC,MAAsDjM,KAAK,mBAAI;QACvE,IAAI,CAACA,OAAO;YACVsL,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;gBAAE9G,OAAO;YAAmD;YACjF;QACF;QACA,MAAMuH,SAAS,MAAM3M,mBAAmB8L,KAAKrL,OAAO;YAClDmM,OAAO;YACPC,SAASlB;QACX;QACA,IAAIgB,OAAOJ,EAAE,KAAK,OAAO;YACvBR,IAAI3B,MAAM,CAACuC,OAAOvC,MAAM,EAAE8B,IAAI,CAAC;gBAAE9G,OAAOuH,OAAOvH,KAAK;YAAC;YACrD;QACF;QACA,MAAM0H,QAAQ3M,gBAAgBwM,OAAOvJ,GAAG,EAAE;QAC1C,IAAI0J,OAAO;YACTf,IAAI3B,MAAM,CAAC0C,MAAM1C,MAAM,EAAE8B,IAAI,CAACY,MAAMtG,IAAI;YACxC;QACF;QACA,MAAMuG,QAAQ;YAAEpG,KAAKgG,OAAOhG,GAAG;YAAEqG,OAAOL,OAAOK,KAAK;QAAC;QACrD,MAAMnG,SAAS8F,OAAO/F,IAAI,IAAI+F,OAAOK,KAAK,IAAI;QAC9C,MAAMhM,QAAQC,KAAKC,GAAG;QAEtB,IAAIkL,WAAW,SAAS;YACtB,MAAMI,SAA6B;gBAAED,IAAI;gBAAMU,OAAO,MAAM/F,gBAAgBrG,WAAWJ;YAAO;YAC9FsL,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,WAAWA,WAAW,WAAW;YAC9C,MAAMvK,SAAS2E,IAAI,CAAC,SAAS;YAC7B,MAAMzC,MAAM6H,QAAQpF,IAAI,CAAC,MAAM;YAC/B,IAAI,CAACpH,mBAAmByC,WAAW,CAACkC,KAAK;gBACvCgI,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,OAAO;gBAA6B;gBAC3D;YACF;YACA,MAAMW,UAAUrG,iBAAiB8G,IAAI,CAAC,UAAU;YAChD,IAAI,CAACT,SAAS;gBACZgG,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,OAAO;gBAAkC;gBAChE;YACF;YACA,MAAM6H,QAAQ,MAAM/F,gBAAgBrG,WAAWJ;YAC/C,MAAM6H,MAAM,IAAI7F,IAAIwK,MAAMvK,GAAG,CAAC,CAACwK,OAASA,KAAKjL,EAAE;YAC/C,IAAIjE,iBAAiB+H,SAAS/C,IAAI,CAAC,CAACf,KAAO,CAACqG,IAAIpF,GAAG,CAACjB,MAAM;gBACxD8J,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,OAAO;gBAAkD;gBAChF;YACF;YACA,MAAMqD,SAAyBjC,IAAI,CAAC,SAAS,KAAK,SAAS,SAAS;YACpE,MAAM,EAAEjF,KAAK,EAAEF,KAAK,EAAE,GAAG,MAAMT,kBAAkBC,WAAWJ;YAC5D,MAAM4C,UAAU,MAAMzB,qBAAqBf,WAAWJ,OAAOc,OAAOM;YACpE,MAAMwC,UAAU,MAAMP,cACpB;gBACEjD;gBACAJ;gBACAoB;gBACAN;gBACAF;gBACAgC;gBACA/B,MAAMN;gBACNuC,QAAQ,CAACD,SACP8I,WAAW,UACPxM,iBAAiB0D,QAAQyC,SAAS0C,QAAQ;wBAAE9B,KAAKgG,OAAOhG,GAAG;wBAAEC,MAAMC;oBAAO,GAAG7F,SAC7EnB,oBAAoByD,QAAQyC;YACpC,GACAhC;YAEF,MAAMoJ,WAAW,CAAClL;;oBAAegL;gCAAAA,cAAAA,MAAMlD,IAAI,CAAC,CAACmD,OAASA,KAAKjL,EAAE,KAAKA,wBAAjCgL,YAAsCrG,IAAI,mBAAI;;YAC/E,MAAMZ,QAAQ/G,qBAAqB8G,SAASoH;YAC5C,MAAMC,WACJhB,WAAW,UACP,CAAC,YAAY,EAAEpG,QAAQyC,WAAW,SAAS,qBAAqB,gBAAgB,GAChF,CAAC,qBAAqB,EAAEzC,OAAO;YACrC,MAAMzB,QAAQC,GAAG,CACfH,QAAQJ,OAAO,CAACvB,GAAG,CAAC,CAACT,KACnB2D,oBAAoB/E,WAAW;oBAC7BJ;oBACAoB;oBACAI;oBACAuE,MAAM4G;oBACNrH;oBACAW,IAAI;wBAAEC,KAAKgG,OAAOhG,GAAG;wBAAEC,MAAMC;oBAAO;oBACpCvF,MAAMN;gBACR;YAGJ,IAAIqD,QAAQJ,OAAO,CAACS,MAAM,EAAE;gBAC1B,MAAM2I,QAAQxO,yBAAyB,CAACgD,OAAO;gBAC/C,MAAM1D,eACJsC,OACAsM,OACA1I,QAAQJ,OAAO,CAACS,MAAM,KAAK,IACvB,GAAG0I,SAAS,MAAM,EAAEC,MAAMC,GAAG,EAAE,GAC/B,GAAGF,SAAS,EAAE,EAAE/I,QAAQJ,OAAO,CAACS,MAAM,CAAC,CAAC,EAAE2I,MAAME,IAAI,CAACC,WAAW,IAAI,EACxE;oBACEC,MAAM9H,UAAU,CAAC9D,OAAO;mBACpBwC,QAAQJ,OAAO,CAACS,MAAM,KAAK,IAAI;oBAAEzC,IAAIoC,QAAQJ,OAAO,CAAC,EAAE;gBAAC,IAAI,CAAC,IAEnEyI,KAAK,CAAC,IAAM/I;YAChB;YACA,MAAM6I,SAA6B;gBACjCD,IAAI;gBACJtI,SAASI,QAAQJ,OAAO,CAACS,MAAM;gBAC/BR,SAASG,QAAQH,OAAO;YAC1B;YACA6H,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,aAAa;gBAG6B;YAFvD,MAAM7D,UAAU,MAAMtI,WAAWY,WAAWJ;YAC5C,MAAMqH,MAAMtB,IAAI,CAAC,OAAO;YACxB,MAAMvD,SAAS6E,OAAO,OAAOA,QAAQ,WAAW3E,QAAO,UAAA,AAAC2E,GAA+B,CAAC,KAAK,YAAtC,UAA0C,MAAM;YACvG,IAAI4F,QAA+B;YACnC,IAAItI,QAAuB;YAC3B,MAAMyE,UAAU,MAAML,WAAW3I,WAAWJ,OAAO,CAACc;oBACvBA;gBAA3B,MAAMwH,WAAW9F,UAAU1B,cAAAA,MAAMwI,IAAI,CAAC,CAACpH,OAASA,KAAKV,EAAE,KAAKgB,mBAAjC1B,cAA4C,OAAQ;gBAC/E,IAAI0B,UAAU,CAAC8F,UAAU,OAAO;oBAAE3D,OAAO;gBAA8B;gBACvE,IAAI2D,4BAAAA,SAAU0C,QAAQ,EAAE,OAAO;oBAAErG,OAAO;gBAA8B;gBACtE,IAAI,CAAC2D,YAAYxH,MAAMmD,MAAM,IAAI3F,uBAAuB;oBACtD,OAAO;wBAAEqG,OAAO,CAAC,0BAA0B,EAAErG,sBAAsB,eAAe,CAAC;oBAAC;gBACtF;gBACA,MAAM4O,SAASvF,gBAAgBN,KAAK;oBAAES;oBAASQ;oBAAUpC,KAAKgG,OAAOhG,GAAG;oBAAE3F;gBAAM;gBAChF,IAAI,CAAC2M,OAAOhL,IAAI,EAAE;oBAChByC,QAAQuI,OAAOvI,KAAK;oBACpB,OAAO;wBAAEA,OAAOuI,OAAOvI,KAAK;oBAAC;gBAC/B;gBACA;;;;SAIC,GACDsI,QAAQ,aACHC,OAAOhL,IAAI;oBACdiH,KAAK;wBACHQ,QAAQ;wBACRK,MAAMkD,OAAOhL,IAAI,CAACqG,OAAO,GAAG,UAAU;wBACtCuC,WAAW;wBACXtH,SAAS;wBACT6G,QAAQ;wBACR8C,aAAa5M;oBACf;;gBAEF,OAAO+H,WACHxH,MAAMmB,GAAG,CAAC,CAACC,OAAUA,KAAKV,EAAE,KAAK8G,SAAS9G,EAAE,GAAGyL,QAAS/K,QACxD;uBAAIpB;oBAAOmM;iBAAM;YACvB;YACA,IAAI,CAAC7D,QAAQtI,KAAK,IAAI,CAACmM,OAAO;oBACEtI;gBAA9B2G,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,KAAK,GAAEA,QAAAA,gBAAAA,QAASyE,QAAQzE,KAAK,YAAtBA,QAA0B;gBAA+B;gBACvF;YACF;YACA,MAAMzC,OAAO+K;YACb,MAAMvP,eACJsC,OACAsM,OACA,GAAG9J,SAAS,YAAY,QAAQ,mBAAmB,EAAEN,KAAKiE,IAAI,CAAC,CAAC,CAAC,EACjE;gBAAE6G,MAAM,GAAGlP,UAAU,YAAY,CAAC;gBAAE0D,IAAIU,KAAKV,EAAE;gBAAE2E,MAAMjE,KAAKiE,IAAI;YAAC,GACjE8F,KAAK,CAAC,IAAM/I;YACd,MAAMkK,WAAW,MAAM5D,sBAAsBpJ,WAAWJ,OAAOkC,KAAKV,EAAE,EAAEhB,KAAKC,GAAG,KAAKwK;YACrF,MAAMc,SAA6B;gBAAED,IAAI;gBAAM5J,MAAMkL,SAASlL,IAAI;gBAAE0H,MAAMwD,SAASxD,IAAI;YAAC;YACxF0B,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEA,IAAIJ,WAAW,iBAAiBA,WAAW,iBAAiB;gBACpC5F;YAAtB,MAAMvD,SAASE,QAAOqD,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB,IAAIe,IAAI;YAChD,IAAI,CAACtE,QAAQ;gBACX8I,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;oBAAE9G,OAAO;gBAAiB;gBAC/C;YACF;YACA,IAAIgH,WAAW,eAAe;gBAC5B,IAAIxF,OAAO;gBACX,MAAMiD,UAAU,MAAML,WAAW3I,WAAWJ,OAAO,CAACc;oBAClD,MAAMwH,WAAWxH,MAAMwI,IAAI,CAAC,CAACpH,OAASA,KAAKV,EAAE,KAAKgB;oBAClD,IAAI,CAAC8F,UAAU,OAAO;wBAAE3D,OAAO;oBAA8B;oBAC7DwB,OAAOmC,SAASnC,IAAI;oBACpB,OAAOrF,MAAMmB,GAAG,CAAC,CAACC,OAChBA,KAAKV,EAAE,KAAKgB,SACR,aACKN;4BACHqG,SAAS;4BACTyC,UAAU;4BACVtC,aAAanI;4BACb4I,KAAK;gCACHQ,QAAQ;gCACRK,MAAM;gCACNc,WAAW;gCACXtH,SAAS;gCACT6G,QAAQ;gCACR8C,aAAa5M;4BACf;6BAEF2B;gBAER;gBACA,IAAI,CAACkH,QAAQtI,KAAK,EAAE;oBAClBwK,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;wBAAE9G,OAAOyE,QAAQzE,KAAK;oBAAC;oBAC5C;gBACF;gBACA,MAAMjH,eAAesC,OAAOsM,OAAO,CAAC,0BAA0B,EAAEnG,KAAK,CAAC,CAAC,EAAE;oBACvE6G,MAAM,GAAGlP,UAAU,YAAY,CAAC;oBAChC0D,IAAIgB;oBACJ2D;gBACF,GAAG8F,KAAK,CAAC,IAAM/I;YACjB,OAAO;gBACL,wCAAwC;gBACxC,MAAM6F,WAAW3I,WAAWJ,OAAO,CAACc,QAClCA,MAAMmB,GAAG,CAAC,CAACC;4BACaA;+BAAtBA,KAAKV,EAAE,KAAKgB,UAAUN,EAAAA,YAAAA,KAAKiH,GAAG,qBAARjH,UAAUyH,MAAM,MAAK,WACvC,aAAKzH;4BAAMiH,KAAK,aAAKjH,KAAKiH,GAAG;gCAAEQ,QAAQ;;6BACvCzH;;YAGV;YACA,MAAMkL,WAAW,MAAM5D,sBAAsBpJ,WAAWJ,OAAOwC,QAAQhC,KAAKC,GAAG,KAAKwK;YACpF,MAAMc,SAA6B;gBAAED,IAAI;gBAAM5J,MAAMkL,SAASlL,IAAI;gBAAE0H,MAAMwD,SAASxD,IAAI;YAAC;YACxF0B,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAACM;YACrB;QACF;QAEAT,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE9G,OAAO;QAA0B;IAC1D,EAAE,OAAOA,OAAO;QACdC,QAAQD,KAAK,CAAC,wBAAwBgH,QAAQhH;QAC9C2G,IAAI3B,MAAM,CAAC,KAAK8B,IAAI,CAAC;YAAE9G,OAAO;QAA6C;IAC7E;AACF,EAAC"}

package/src/lib/server/email-send.js

@@ -14,12 +14,13 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { buildCrmEmailActivity, contactCaptureHostIds, CRM_ACTIVITY_LOG_FULL_MESSAGE, CRM_COLLECTIONS, CRM_EMAIL_BODY_MAX, CRM_EMAIL_CONTEXT, CRM_EMAIL_SUBJECT_MAX, crmActivityLogHasRoom, crmEmailDeliveryTags, emailStateRefusal, crmMergeFieldsIn, crmScopeTokens, isOrgWideMember, normalizeContactEmail, readContactFacet, readEmailState, readMarketingBasis, renderCrmMergeFields, resolveOrgEntitlements, visibleToHost } from "@aglyn/aglyn/server";
+ */ import { buildCrmEmailActivity, contactCaptureHostIds, CRM_ACTIVITY_LOG_FULL_MESSAGE, CRM_COLLECTIONS, CRM_EMAIL_BODY_MAX, CRM_EMAIL_CONTEXT, CRM_EMAIL_SUBJECT_MAX, crmActivityLogHasRoom, crmEmailDeliveryTags, emailStateRefusal, crmMergeFieldsIn, crmScopeTokens, isOrgWideMember, normalizeContactEmail, readEmailState, readMarketingBasis, renderCrmMergeFields, resolveOrgEntitlements, visibleToHost } from "@aglyn/aglyn/server";
 import { isEmailConfigured, sendEmail, sendFailureReason } from "@aglyn/shared-util-email";
 import { consentGroupForSite, consumeRateLimit, countCrmActivitiesForRecord, filterSendableForHost, firebaseAdmin, getHostDocAdmin, getOrgForHost, hostSendingIdentity, logOrgActivity, memberHasOrgPermission, orgDataCollectionForHost, readLeadForHost, readOrgEmailRamp, recordEmailSends, releaseCrmEmailSend, reserveCrmEmailSend, resolveOrgMembership } from "@aglyn/tenant-data-admin";
 import { isRefusedIdToken } from "@aglyn/tenant-data-admin/server/id-token-refusal";
 import { authorizeOrgCaller, orgHostIds, readCrmRouteScope } from "./org-caller.js";
 import { crmSuiteRefusal } from "./suite-gate.js";
+import { crmActivityLinkWithCompany } from "./crm-activity-company.js";
 import { newCrmActivityRef, writeCrmEmailActivity } from "./crm-email-activity.js";
 /**
  * `POST /api/crm/email-send` — one email to one person, from their record
@@ -460,12 +461,14 @@ export const crmEmailSendHandler = async (req, res)=>{
         if (site.ok === false) return answer(res, site);
         const { hostId } = site;
         const group = await consentGroupForSite(hostId, org);
-        // The company the sending site files this person under, so the email
-        // shows on the company's log as the automation step's rows do.
-        if (recipient.contact) {
-            const facet = readContactFacet(recipient.contact, group.groupId);
-            if (facet.companyId) recipient.link.companyId = facet.companyId;
-        }
+        const orgRef = firestore.collection('orgs').doc(orgId);
+        // The deal's company, else the one the sending site files this person
+        // under, so the email shows on the company's log as every activity does.
+        recipient.link = await crmActivityLinkWithCompany(orgRef, recipient.link, {
+            deal: recipient.deal,
+            contact: recipient.contact,
+            groupId: group.groupId
+        });
         /*
      * MERGE FIELDS (AGL-2658), filled here rather than in the dialog: the
      * dialog previews with the same resolver, but what leaves and what is
@@ -491,7 +494,6 @@ export const crmEmailSendHandler = async (req, res)=>{
         // The per-record ceiling, before the send: an email that could not be
         // logged would be a message the timeline never shows, and the timeline
         // is the reason the send lives on the record.
-        const orgRef = firestore.collection('orgs').doc(orgId);
         if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, recipient.link))) {
             return answer(res, refuse(409, CRM_ACTIVITY_LOG_FULL_MESSAGE, {
                 reason: 'ceiling'