@aglyn/tenant-data-admin 1.0.0-beta.143

package/src/lib/server/crm-inbound-email.js

@@ -0,0 +1,287 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildCrmCapturedEmailActivity, consentGroupForHost, contactCaptureHostIds, crmActivityLogHasRoom, crmCapturedEmailKey, crmInboundCandidates, crmInboundExcerpt, crmInboundRoster, crmScopeTokens, emailAddressOf, emailDomainOf, findMemberByEmailAddress, forwardedSection, htmlToPlainText, isCrmInboundAddress, isCrmInboundToken, mintCrmInboundToken, personKey, readContactFacet } from "@aglyn/aglyn/server";
+import { MEMBER_EMAIL_ALIASES_COLLECTION } from "@aglyn/aglyn/app-utils/member-email-aliases";
+import { findContactByEmail } from "./contact-email-index.js";
+import { createCrmEmailActivity, crmCapturedEmailActivityRef, newCrmActivityRef } from "./crm-email-activity.js";
+import { countCrmActivitiesForRecord } from "./crm-records.js";
+/**
+ * EMAIL CAPTURE (AGL-2657): the half with Firestore.
+ *
+ * The org's capture token — minted once, replaced on a rotation, found
+ * again from a message's recipient — and the filing of one received
+ * message: which record it was with, whether it has been filed before, and
+ * the row it becomes. The pure rules are `@aglyn/aglyn`'s
+ * `crm-inbound.ts`; this module is the reads and the one write.
+ *
+ * Firestore is a parameter throughout, as in `crm-records.ts` and
+ * `crm-email-activity.ts`: the routes hold one, and a module that reached
+ * for the Admin app itself would drag it into every spec that only wants
+ * the matching. The roster is read through that same store by
+ * `loadCrmInboundRoster`, and the caller writes the org's feed line, so a
+ * spec of this module needs a store and nothing else.
+ */ /** The most candidate addresses one message is matched by. */ export const CRM_INBOUND_CANDIDATE_MAX = 6;
+/** The most sites whose leads are consulted for one message. */ export const CRM_INBOUND_LEAD_HOST_MAX = 50;
+/**
+ * The org's capture token, minted the first time anybody asks and kept
+ * thereafter; with `rotate`, replaced. A transaction, so two members
+ * opening the settings page at once mint one token and not two, and a
+ * rotation lands on the token the reader saw.
+ */ export async function ensureCrmInboundToken(firestore, orgId, options = {}) {
+    var _options_nowMs;
+    const rotate = options.rotate === true;
+    const nowMs = (_options_nowMs = options.nowMs) != null ? _options_nowMs : Date.now();
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    return firestore.runTransaction(async (tx)=>{
+        var _snapshot_get;
+        const snapshot = await tx.get(orgRef);
+        if (!snapshot.exists) throw new Error(`[crm-inbound] unknown org ${orgId}`);
+        const current = (_snapshot_get = snapshot.get('crmInbound')) != null ? _snapshot_get : null;
+        const held = isCrmInboundToken(current == null ? void 0 : current.token);
+        if (held && !rotate) {
+            const createdAtMs = Number(current == null ? void 0 : current.createdAtMs);
+            return _extends({
+                token: String(current == null ? void 0 : current.token),
+                createdAtMs: Number.isFinite(createdAtMs) && createdAtMs > 0 ? createdAtMs : nowMs
+            }, typeof (current == null ? void 0 : current.rotatedAtMs) === 'number' ? {
+                rotatedAtMs: current.rotatedAtMs
+            } : {}, {
+                rotated: false
+            });
+        }
+        const createdAtMs = held && Number.isFinite(Number(current == null ? void 0 : current.createdAtMs)) && Number(current == null ? void 0 : current.createdAtMs) > 0 ? Number(current == null ? void 0 : current.createdAtMs) : nowMs;
+        const next = _extends({
+            token: mintCrmInboundToken(),
+            createdAtMs
+        }, held ? {
+            rotatedAtMs: nowMs
+        } : {});
+        tx.update(orgRef, {
+            crmInbound: next
+        });
+        return _extends({}, next, {
+            rotated: held
+        });
+    });
+}
+/**
+ * The org a capture token names, or `null`. One equality on
+ * `crmInbound.token`, which Firestore indexes on its own; a token that is
+ * not one by shape is refused before the query, so a malformed local part
+ * costs no read.
+ */ export async function findOrgByCrmInboundToken(firestore, token) {
+    var _doc_data;
+    if (!isCrmInboundToken(token)) return null;
+    const page = await firestore.collection('orgs').where('crmInbound.token', '==', token).limit(1).get();
+    const doc = page.docs[0];
+    if (!doc) return null;
+    return {
+        orgId: doc.id,
+        org: _extends({
+            $id: doc.id
+        }, (_doc_data = doc.data()) != null ? _doc_data : {})
+    };
+}
+/**
+ * Every site of the organization, by id, up to the ceiling — the set a
+ * message's lead lookup sweeps. One equality on `hosts.orgId`.
+ */ export async function crmInboundHostIds(firestore, orgId) {
+    const page = await firestore.collection('hosts').where('orgId', '==', orgId).limit(CRM_INBOUND_LEAD_HOST_MAX).get();
+    return page.docs.map((doc)=>String(doc.id));
+}
+/**
+ * The first candidate that is a contact of the org — through the address
+ * index, so a merged record's alternate address answers — or a lead on any
+ * of its sites. Candidates are tried in the order the rule gave them and
+ * the first hit wins; a contact is looked for before a lead at each
+ * address, because a converted lead's address is its contact's.
+ */ export async function matchCrmInboundCorrespondent(firestore, input) {
+    const { orgId, org } = input;
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const contacts = orgRef.collection('contacts');
+    const tokensOf = (record)=>{
+        const raw = record['visibleTo'];
+        return Array.isArray(raw) ? raw.map((token)=>String(token)) : [];
+    };
+    for (const candidate of input.candidates.slice(0, CRM_INBOUND_CANDIDATE_MAX)){
+        const contact = await findContactByEmail(contacts, candidate.email);
+        if (contact) {
+            var _contact_data, _record_hostId;
+            const record = (_contact_data = contact.data()) != null ? _contact_data : {};
+            const hostId = String((_record_hostId = record['hostId']) != null ? _record_hostId : '').trim() || contactCaptureHostIds(record)[0] || '';
+            const link = {
+                contactId: contact.id
+            };
+            if (hostId) {
+                // The company the capturing site files this person under, so the
+                // row shows on the company's log as a sent email's does.
+                const group = consentGroupForHost(org, hostId);
+                const facet = readContactFacet(record, group.groupId);
+                if (facet.companyId) link.companyId = facet.companyId;
+            }
+            return {
+                email: candidate.email,
+                direction: candidate.direction,
+                kind: 'contact',
+                link,
+                hostId,
+                visibleTo: tokensOf(record)
+            };
+        }
+        const key = personKey(candidate.email);
+        if (!key) continue;
+        for (const hostId of input.hostIds.slice(0, CRM_INBOUND_LEAD_HOST_MAX)){
+            var _lead_get;
+            const lead = await firestore.collection('hosts').doc(hostId).collection('leads').doc(key).get();
+            if (!lead.exists) continue;
+            const link = {
+                leadId: lead.id
+            };
+            // A converted lead's mail belongs on the contact it became as well.
+            const converted = String((_lead_get = lead.get('convertedContactId')) != null ? _lead_get : '').trim();
+            if (converted) link.contactId = converted;
+            return {
+                email: candidate.email,
+                direction: candidate.direction,
+                kind: 'lead',
+                link,
+                hostId,
+                // A lead carries no tokens of its own: the site's scope, as every
+                // record created from that site is stamped.
+                visibleTo: crmScopeTokens(org, consentGroupForHost(org, hostId))
+            };
+        }
+    }
+    return null;
+}
+/**
+ * The workspace's roster as the filer matches against it: the member
+ * documents and every member's stored alias document, two reads under the
+ * org, reduced by `crmInboundRoster` to each member's sign-in address and
+ * the aliases they have confirmed (AGL-2975).
+ */ export async function loadCrmInboundRoster(firestore, orgId) {
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const [members, aliases] = await Promise.all([
+        orgRef.collection('members').get(),
+        orgRef.collection(MEMBER_EMAIL_ALIASES_COLLECTION).get()
+    ]);
+    const rows = members.docs.map((doc)=>{
+        var _doc_data;
+        return _extends({}, (_doc_data = doc.data()) != null ? _doc_data : {}, {
+            $id: doc.id
+        });
+    });
+    const aliasDocuments = new Map(aliases.docs.map((doc)=>[
+            String(doc.id),
+            doc.data()
+        ]));
+    return crmInboundRoster(rows, aliasDocuments);
+}
+/**
+ * Files one received message on the record it was with (AGL-2657).
+ *
+ * The order is the cost: the candidate rule is arithmetic; the match is
+ * the reads that decide everything after it; a message filed before is
+ * answered off one read of the row it would write, before the ceiling's
+ * aggregate; the ceiling comes last and refuses rather than dropping a row
+ * on a full log. The write is a `create`, so two deliveries racing past
+ * the read still yield one row. The BODY never leaves this function except
+ * as the bounded excerpt in the row.
+ */ export async function fileCrmInboundEmail(firestore, input) {
+    var _ref, _message_to_map_find, _ref1, _ref2;
+    const { orgId, org, message, domain } = input;
+    const plain = (message.text.trim() ? message.text : htmlToPlainText(message.html)).replace(/\r\n?/g, '\n');
+    const forwarded = forwardedSection(plain);
+    const { sender, senderIsMember, candidates } = crmInboundCandidates({
+        from: message.from,
+        to: [
+            ...message.to,
+            ...message.receivedFor
+        ],
+        cc: [
+            ...message.cc,
+            ...message.bcc
+        ],
+        forwardedFrom: (_ref = forwarded == null ? void 0 : forwarded.from) != null ? _ref : undefined,
+        domain,
+        members: input.members
+    });
+    const senderDomain = emailDomainOf(message.from);
+    if (!candidates.length) return {
+        outcome: 'unmatched',
+        senderDomain
+    };
+    const match = await matchCrmInboundCorrespondent(firestore, {
+        orgId,
+        org,
+        candidates,
+        hostIds: input.hostIds
+    });
+    if (!match) return {
+        outcome: 'unmatched',
+        senderDomain
+    };
+    const key = crmCapturedEmailKey(message.messageId, message.id);
+    const ref = key ? crmCapturedEmailActivityRef(firestore, orgId, key) : newCrmActivityRef(firestore, orgId);
+    if (key) {
+        const existing = await ref.get();
+        if (existing.exists) return {
+            outcome: 'duplicate',
+            activityId: ref.id
+        };
+    }
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, match.link))) {
+        return {
+            outcome: 'ceiling',
+            match
+        };
+    }
+    // The member the From is — by sign-in address, or by an alias exactly one
+    // member confirmed. A shared alias names the team and no one person.
+    const author = senderIsMember ? findMemberByEmailAddress(input.members, sender) : null;
+    // The address the message was written to, when it is worth showing: the
+    // correspondent for a copied send, else the first recipient that is not
+    // the capture address.
+    const to = match.direction === 'outbound' ? match.email : (_message_to_map_find = message.to.map((value)=>emailAddressOf(value)).find((value)=>value && !isCrmInboundAddress(value, domain))) != null ? _message_to_map_find : null;
+    const activity = buildCrmCapturedEmailActivity({
+        direction: match.direction,
+        subject: message.subject,
+        excerpt: crmInboundExcerpt(message.text, message.html),
+        from: sender != null ? sender : message.from,
+        to,
+        messageId: message.messageId || message.id,
+        inReplyTo: message.inReplyTo,
+        atMs: message.receivedAtMs,
+        byUid: (_ref1 = author == null ? void 0 : author.uid) != null ? _ref1 : '',
+        byName: (_ref2 = author == null ? void 0 : author.name) != null ? _ref2 : null,
+        link: match.link,
+        hostId: match.hostId,
+        visibleTo: match.visibleTo
+    });
+    const created = await createCrmEmailActivity(ref, activity);
+    return created === 'created' ? {
+        outcome: 'filed',
+        activityId: ref.id,
+        match
+    } : {
+        outcome: 'duplicate',
+        activityId: ref.id
+    };
+}
+
+//# sourceMappingURL=crm-inbound-email.js.map

package/src/lib/server/crm-inbound-email.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/crm-inbound-email.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  buildCrmCapturedEmailActivity,\n  consentGroupForHost,\n  contactCaptureHostIds,\n  crmActivityLogHasRoom,\n  crmCapturedEmailKey,\n  crmInboundCandidates,\n  crmInboundExcerpt,\n  crmInboundRoster,\n  type CrmActivityLink,\n  type CrmEmailDirection,\n  type CrmInboundCandidate,\n  type CrmInboundMember,\n  type CrmInboundRosterRow,\n  crmScopeTokens,\n  emailAddressOf,\n  emailDomainOf,\n  findMemberByEmailAddress,\n  forwardedSection,\n  htmlToPlainText,\n  isCrmInboundAddress,\n  isCrmInboundToken,\n  mintCrmInboundToken,\n  personKey,\n  readContactFacet,\n} from '@aglyn/aglyn/server'\nimport { MEMBER_EMAIL_ALIASES_COLLECTION } from '@aglyn/aglyn/app-utils/member-email-aliases'\nimport type { OrgCrmInbound } from '@aglyn/aglyn/foundation'\nimport type { ReceivedEmail } from '@aglyn/shared-util-email'\nimport { findContactByEmail } from './contact-email-index'\nimport {\n  createCrmEmailActivity,\n  crmCapturedEmailActivityRef,\n  newCrmActivityRef,\n} from './crm-email-activity'\nimport { countCrmActivitiesForRecord } from './crm-records'\n\n/**\n * EMAIL CAPTURE (AGL-2657): the half with Firestore.\n *\n * The org's capture token — minted once, replaced on a rotation, found\n * again from a message's recipient — and the filing of one received\n * message: which record it was with, whether it has been filed before, and\n * the row it becomes. The pure rules are `@aglyn/aglyn`'s\n * `crm-inbound.ts`; this module is the reads and the one write.\n *\n * Firestore is a parameter throughout, as in `crm-records.ts` and\n * `crm-email-activity.ts`: the routes hold one, and a module that reached\n * for the Admin app itself would drag it into every spec that only wants\n * the matching. The roster is read through that same store by\n * `loadCrmInboundRoster`, and the caller writes the org's feed line, so a\n * spec of this module needs a store and nothing else.\n */\n\n/** The most candidate addresses one message is matched by. */\nexport const CRM_INBOUND_CANDIDATE_MAX = 6\n\n/** The most sites whose leads are consulted for one message. */\nexport const CRM_INBOUND_LEAD_HOST_MAX = 50\n\nexport interface CrmInboundTokenResult {\n  token: string\n  createdAtMs: number\n  rotatedAtMs?: number\n  /** True when this call replaced a token that existed. */\n  rotated: boolean\n}\n\n/**\n * The org's capture token, minted the first time anybody asks and kept\n * thereafter; with `rotate`, replaced. A transaction, so two members\n * opening the settings page at once mint one token and not two, and a\n * rotation lands on the token the reader saw.\n */\nexport async function ensureCrmInboundToken(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  options: { rotate?: boolean; nowMs?: number } = {},\n): Promise<CrmInboundTokenResult> {\n  const rotate = options.rotate === true\n  const nowMs = options.nowMs ?? Date.now()\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  return firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(orgRef)\n    if (!snapshot.exists) throw new Error(`[crm-inbound] unknown org ${orgId}`)\n    const current = (snapshot.get('crmInbound') ?? null) as Partial<OrgCrmInbound> | null\n    const held = isCrmInboundToken(current?.token)\n    if (held && !rotate) {\n      const createdAtMs = Number(current?.createdAtMs)\n      return {\n        token: String(current?.token),\n        createdAtMs: Number.isFinite(createdAtMs) && createdAtMs > 0 ? createdAtMs : nowMs,\n        ...(typeof current?.rotatedAtMs === 'number' ? { rotatedAtMs: current.rotatedAtMs } : {}),\n        rotated: false,\n      }\n    }\n    const createdAtMs =\n      held && Number.isFinite(Number(current?.createdAtMs)) && Number(current?.createdAtMs) > 0\n        ? Number(current?.createdAtMs)\n        : nowMs\n    const next: OrgCrmInbound = {\n      token: mintCrmInboundToken(),\n      createdAtMs,\n      ...(held ? { rotatedAtMs: nowMs } : {}),\n    }\n    tx.update(orgRef, { crmInbound: next })\n    return { ...next, rotated: held }\n  })\n}\n\n/**\n * The org a capture token names, or `null`. One equality on\n * `crmInbound.token`, which Firestore indexes on its own; a token that is\n * not one by shape is refused before the query, so a malformed local part\n * costs no read.\n */\nexport async function findOrgByCrmInboundToken(\n  firestore: FirebaseFirestore.Firestore,\n  token: unknown,\n): Promise<{ orgId: string; org: Record<string, unknown> } | null> {\n  if (!isCrmInboundToken(token)) return null\n  const page = await firestore\n    .collection('orgs')\n    .where('crmInbound.token', '==', token)\n    .limit(1)\n    .get()\n  const doc = page.docs[0]\n  if (!doc) return null\n  return { orgId: doc.id, org: { $id: doc.id, ...(doc.data() ?? {}) } }\n}\n\n/**\n * Every site of the organization, by id, up to the ceiling — the set a\n * message's lead lookup sweeps. One equality on `hosts.orgId`.\n */\nexport async function crmInboundHostIds(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<string[]> {\n  const page = await firestore\n    .collection('hosts')\n    .where('orgId', '==', orgId)\n    .limit(CRM_INBOUND_LEAD_HOST_MAX)\n    .get()\n  return page.docs.map((doc) => String(doc.id))\n}\n\n/** The record one of a message's addresses resolved to. */\nexport interface CrmInboundMatch {\n  email: string\n  direction: CrmEmailDirection\n  kind: 'contact' | 'lead'\n  /** Where the row is filed. */\n  link: CrmActivityLink\n  /** The site the row is stamped with — the record's own. */\n  hostId: string\n  /** Who may list the row — the record's own tokens. */\n  visibleTo: string[]\n}\n\n/**\n * The first candidate that is a contact of the org — through the address\n * index, so a merged record's alternate address answers — or a lead on any\n * of its sites. Candidates are tried in the order the rule gave them and\n * the first hit wins; a contact is looked for before a lead at each\n * address, because a converted lead's address is its contact's.\n */\nexport async function matchCrmInboundCorrespondent(\n  firestore: FirebaseFirestore.Firestore,\n  input: {\n    orgId: string\n    org: Record<string, unknown>\n    candidates: readonly CrmInboundCandidate[]\n    hostIds: readonly string[]\n  },\n): Promise<CrmInboundMatch | null> {\n  const { orgId, org } = input\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const contacts = orgRef.collection('contacts')\n  const tokensOf = (record: Record<string, unknown>): string[] => {\n    const raw = record['visibleTo']\n    return Array.isArray(raw) ? raw.map((token) => String(token)) : []\n  }\n  for (const candidate of input.candidates.slice(0, CRM_INBOUND_CANDIDATE_MAX)) {\n    const contact = await findContactByEmail(contacts, candidate.email)\n    if (contact) {\n      const record = (contact.data() ?? {}) as Record<string, unknown>\n      const hostId =\n        String(record['hostId'] ?? '').trim() || contactCaptureHostIds(record)[0] || ''\n      const link: CrmActivityLink = { contactId: contact.id }\n      if (hostId) {\n        // The company the capturing site files this person under, so the\n        // row shows on the company's log as a sent email's does.\n        const group = consentGroupForHost(org, hostId)\n        const facet = readContactFacet(record, group.groupId)\n        if (facet.companyId) link.companyId = facet.companyId\n      }\n      return {\n        email: candidate.email,\n        direction: candidate.direction,\n        kind: 'contact',\n        link,\n        hostId,\n        visibleTo: tokensOf(record),\n      }\n    }\n    const key = personKey(candidate.email)\n    if (!key) continue\n    for (const hostId of input.hostIds.slice(0, CRM_INBOUND_LEAD_HOST_MAX)) {\n      const lead = await firestore\n        .collection('hosts')\n        .doc(hostId)\n        .collection('leads')\n        .doc(key)\n        .get()\n      if (!lead.exists) continue\n      const link: CrmActivityLink = { leadId: lead.id }\n      // A converted lead's mail belongs on the contact it became as well.\n      const converted = String(lead.get('convertedContactId') ?? '').trim()\n      if (converted) link.contactId = converted\n      return {\n        email: candidate.email,\n        direction: candidate.direction,\n        kind: 'lead',\n        link,\n        hostId,\n        // A lead carries no tokens of its own: the site's scope, as every\n        // record created from that site is stamped.\n        visibleTo: crmScopeTokens(org, consentGroupForHost(org, hostId)),\n      }\n    }\n  }\n  return null\n}\n\n/**\n * The workspace's roster as the filer matches against it: the member\n * documents and every member's stored alias document, two reads under the\n * org, reduced by `crmInboundRoster` to each member's sign-in address and\n * the aliases they have confirmed (AGL-2975).\n */\nexport async function loadCrmInboundRoster(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n): Promise<CrmInboundMember[]> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const [members, aliases] = await Promise.all([\n    orgRef.collection('members').get(),\n    orgRef.collection(MEMBER_EMAIL_ALIASES_COLLECTION).get(),\n  ])\n  const rows: CrmInboundRosterRow[] = members.docs.map((doc) => ({\n    ...((doc.data() ?? {}) as Omit<CrmInboundRosterRow, '$id'>),\n    $id: doc.id,\n  }))\n  const aliasDocuments = new Map<string, unknown>(\n    aliases.docs.map((doc) => [String(doc.id), doc.data()]),\n  )\n  return crmInboundRoster(rows, aliasDocuments)\n}\n\nexport type CrmInboundFileOutcome =\n  /** A row was written. */\n  | { outcome: 'filed'; activityId: string; match: CrmInboundMatch }\n  /** The message had been filed before; nothing written. */\n  | { outcome: 'duplicate'; activityId: string }\n  /** No address on the message is a record of the org; nothing written. */\n  | { outcome: 'unmatched'; senderDomain: string | null }\n  /** The record's activity log is at its ceiling; nothing written. */\n  | { outcome: 'ceiling'; match: CrmInboundMatch }\n\n/**\n * Files one received message on the record it was with (AGL-2657).\n *\n * The order is the cost: the candidate rule is arithmetic; the match is\n * the reads that decide everything after it; a message filed before is\n * answered off one read of the row it would write, before the ceiling's\n * aggregate; the ceiling comes last and refuses rather than dropping a row\n * on a full log. The write is a `create`, so two deliveries racing past\n * the read still yield one row. The BODY never leaves this function except\n * as the bounded excerpt in the row.\n */\nexport async function fileCrmInboundEmail(\n  firestore: FirebaseFirestore.Firestore,\n  input: {\n    orgId: string\n    org: Record<string, unknown>\n    message: ReceivedEmail\n    /** The capture domain, so the capture address is never the correspondent. */\n    domain: string\n    /** The roster, from `loadCrmInboundRoster`: sign-in addresses and confirmed aliases. */\n    members: readonly CrmInboundMember[]\n    hostIds: readonly string[]\n  },\n): Promise<CrmInboundFileOutcome> {\n  const { orgId, org, message, domain } = input\n  const plain = (message.text.trim() ? message.text : htmlToPlainText(message.html)).replace(\n    /\\r\\n?/g,\n    '\\n',\n  )\n  const forwarded = forwardedSection(plain)\n  const { sender, senderIsMember, candidates } = crmInboundCandidates({\n    from: message.from,\n    to: [...message.to, ...message.receivedFor],\n    cc: [...message.cc, ...message.bcc],\n    forwardedFrom: forwarded?.from ?? undefined,\n    domain,\n    members: input.members,\n  })\n  const senderDomain = emailDomainOf(message.from)\n  if (!candidates.length) return { outcome: 'unmatched', senderDomain }\n\n  const match = await matchCrmInboundCorrespondent(firestore, {\n    orgId,\n    org,\n    candidates,\n    hostIds: input.hostIds,\n  })\n  if (!match) return { outcome: 'unmatched', senderDomain }\n\n  const key = crmCapturedEmailKey(message.messageId, message.id)\n  const ref = key\n    ? crmCapturedEmailActivityRef(firestore, orgId, key)\n    : newCrmActivityRef(firestore, orgId)\n  if (key) {\n    const existing = await ref.get()\n    if (existing.exists) return { outcome: 'duplicate', activityId: ref.id }\n  }\n\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  if (!crmActivityLogHasRoom(await countCrmActivitiesForRecord(orgRef, match.link))) {\n    return { outcome: 'ceiling', match }\n  }\n\n  // The member the From is — by sign-in address, or by an alias exactly one\n  // member confirmed. A shared alias names the team and no one person.\n  const author = senderIsMember ? findMemberByEmailAddress(input.members, sender) : null\n  // The address the message was written to, when it is worth showing: the\n  // correspondent for a copied send, else the first recipient that is not\n  // the capture address.\n  const to =\n    match.direction === 'outbound'\n      ? match.email\n      : (message.to\n          .map((value) => emailAddressOf(value))\n          .find((value) => value && !isCrmInboundAddress(value, domain)) ?? null)\n  const activity = buildCrmCapturedEmailActivity({\n    direction: match.direction,\n    subject: message.subject,\n    excerpt: crmInboundExcerpt(message.text, message.html),\n    from: sender ?? message.from,\n    to,\n    messageId: message.messageId || message.id,\n    inReplyTo: message.inReplyTo,\n    atMs: message.receivedAtMs,\n    byUid: author?.uid ?? '',\n    byName: author?.name ?? null,\n    link: match.link,\n    hostId: match.hostId,\n    visibleTo: match.visibleTo,\n  })\n  const created = await createCrmEmailActivity(ref, activity)\n  return created === 'created'\n    ? { outcome: 'filed', activityId: ref.id, match }\n    : { outcome: 'duplicate', activityId: ref.id }\n}\n"],"names":["buildCrmCapturedEmailActivity","consentGroupForHost","contactCaptureHostIds","crmActivityLogHasRoom","crmCapturedEmailKey","crmInboundCandidates","crmInboundExcerpt","crmInboundRoster","crmScopeTokens","emailAddressOf","emailDomainOf","findMemberByEmailAddress","forwardedSection","htmlToPlainText","isCrmInboundAddress","isCrmInboundToken","mintCrmInboundToken","personKey","readContactFacet","MEMBER_EMAIL_ALIASES_COLLECTION","findContactByEmail","createCrmEmailActivity","crmCapturedEmailActivityRef","newCrmActivityRef","countCrmActivitiesForRecord","CRM_INBOUND_CANDIDATE_MAX","CRM_INBOUND_LEAD_HOST_MAX","ensureCrmInboundToken","firestore","orgId","options","rotate","nowMs","Date","now","orgRef","collection","doc","runTransaction","tx","snapshot","get","exists","Error","current","held","token","createdAtMs","Number","String","isFinite","rotatedAtMs","rotated","next","update","crmInbound","findOrgByCrmInboundToken","page","where","limit","docs","id","org","$id","data","crmInboundHostIds","map","matchCrmInboundCorrespondent","input","contacts","tokensOf","record","raw","Array","isArray","candidate","candidates","slice","contact","email","hostId","trim","link","contactId","group","facet","groupId","companyId","direction","kind","visibleTo","key","hostIds","lead","leadId","converted","loadCrmInboundRoster","members","aliases","Promise","all","rows","aliasDocuments","Map","fileCrmInboundEmail","message","domain","plain","text","html","replace","forwarded","sender","senderIsMember","from","to","receivedFor","cc","bcc","forwardedFrom","undefined","senderDomain","length","outcome","match","messageId","ref","existing","activityId","author","value","find","activity","subject","excerpt","inReplyTo","atMs","receivedAtMs","byUid","uid","byName","name","created"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,6BAA6B,EAC7BC,mBAAmB,EACnBC,qBAAqB,EACrBC,qBAAqB,EACrBC,mBAAmB,EACnBC,oBAAoB,EACpBC,iBAAiB,EACjBC,gBAAgB,EAMhBC,cAAc,EACdC,cAAc,EACdC,aAAa,EACbC,wBAAwB,EACxBC,gBAAgB,EAChBC,eAAe,EACfC,mBAAmB,EACnBC,iBAAiB,EACjBC,mBAAmB,EACnBC,SAAS,EACTC,gBAAgB,QACX,sBAAqB;AAC5B,SAASC,+BAA+B,QAAQ,8CAA6C;AAG7F,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,iBAAiB,QACZ,0BAAsB;AAC7B,SAASC,2BAA2B,QAAQ,mBAAe;AAE3D;;;;;;;;;;;;;;;CAeC,GAED,4DAA4D,GAC5D,OAAO,MAAMC,4BAA4B,EAAC;AAE1C,8DAA8D,GAC9D,OAAO,MAAMC,4BAA4B,GAAE;AAU3C;;;;;CAKC,GACD,OAAO,eAAeC,sBACpBC,SAAsC,EACtCC,KAAa,EACbC,UAAgD,CAAC,CAAC;QAGpCA;IADd,MAAMC,SAASD,QAAQC,MAAM,KAAK;IAClC,MAAMC,SAAQF,iBAAAA,QAAQE,KAAK,YAAbF,iBAAiBG,KAAKC,GAAG;IACvC,MAAMC,SAASP,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACR;IAChD,OAAOD,UAAUU,cAAc,CAAC,OAAOC;YAGpBC;QAFjB,MAAMA,WAAW,MAAMD,GAAGE,GAAG,CAACN;QAC9B,IAAI,CAACK,SAASE,MAAM,EAAE,MAAM,IAAIC,MAAM,CAAC,0BAA0B,EAAEd,OAAO;QAC1E,MAAMe,WAAWJ,gBAAAA,SAASC,GAAG,CAAC,yBAAbD,gBAA8B;QAC/C,MAAMK,OAAO9B,kBAAkB6B,2BAAAA,QAASE,KAAK;QAC7C,IAAID,QAAQ,CAACd,QAAQ;YACnB,MAAMgB,cAAcC,OAAOJ,2BAAAA,QAASG,WAAW;YAC/C,OAAO;gBACLD,OAAOG,OAAOL,2BAAAA,QAASE,KAAK;gBAC5BC,aAAaC,OAAOE,QAAQ,CAACH,gBAAgBA,cAAc,IAAIA,cAAcf;eACzE,QAAOY,2BAAAA,QAASO,WAAW,MAAK,WAAW;gBAAEA,aAAaP,QAAQO,WAAW;YAAC,IAAI,CAAC;gBACvFC,SAAS;;QAEb;QACA,MAAML,cACJF,QAAQG,OAAOE,QAAQ,CAACF,OAAOJ,2BAAAA,QAASG,WAAW,MAAMC,OAAOJ,2BAAAA,QAASG,WAAW,IAAI,IACpFC,OAAOJ,2BAAAA,QAASG,WAAW,IAC3Bf;QACN,MAAMqB,OAAsB;YAC1BP,OAAO9B;YACP+B;WACIF,OAAO;YAAEM,aAAanB;QAAM,IAAI,CAAC;QAEvCO,GAAGe,MAAM,CAACnB,QAAQ;YAAEoB,YAAYF;QAAK;QACrC,OAAO,aAAKA;YAAMD,SAASP;;IAC7B;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeW,yBACpB5B,SAAsC,EACtCkB,KAAc;QAUkCT;IARhD,IAAI,CAACtB,kBAAkB+B,QAAQ,OAAO;IACtC,MAAMW,OAAO,MAAM7B,UAChBQ,UAAU,CAAC,QACXsB,KAAK,CAAC,oBAAoB,MAAMZ,OAChCa,KAAK,CAAC,GACNlB,GAAG;IACN,MAAMJ,MAAMoB,KAAKG,IAAI,CAAC,EAAE;IACxB,IAAI,CAACvB,KAAK,OAAO;IACjB,OAAO;QAAER,OAAOQ,IAAIwB,EAAE;QAAEC,KAAK;YAAEC,KAAK1B,IAAIwB,EAAE;YAAMxB,YAAAA,IAAI2B,IAAI,cAAR3B,YAAc,CAAC;IAAK;AACtE;AAEA;;;CAGC,GACD,OAAO,eAAe4B,kBACpBrC,SAAsC,EACtCC,KAAa;IAEb,MAAM4B,OAAO,MAAM7B,UAChBQ,UAAU,CAAC,SACXsB,KAAK,CAAC,SAAS,MAAM7B,OACrB8B,KAAK,CAACjC,2BACNe,GAAG;IACN,OAAOgB,KAAKG,IAAI,CAACM,GAAG,CAAC,CAAC7B,MAAQY,OAAOZ,IAAIwB,EAAE;AAC7C;AAeA;;;;;;CAMC,GACD,OAAO,eAAeM,6BACpBvC,SAAsC,EACtCwC,KAKC;IAED,MAAM,EAAEvC,KAAK,EAAEiC,GAAG,EAAE,GAAGM;IACvB,MAAMjC,SAASP,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACR;IAChD,MAAMwC,WAAWlC,OAAOC,UAAU,CAAC;IACnC,MAAMkC,WAAW,CAACC;QAChB,MAAMC,MAAMD,MAAM,CAAC,YAAY;QAC/B,OAAOE,MAAMC,OAAO,CAACF,OAAOA,IAAIN,GAAG,CAAC,CAACpB,QAAUG,OAAOH,UAAU,EAAE;IACpE;IACA,KAAK,MAAM6B,aAAaP,MAAMQ,UAAU,CAACC,KAAK,CAAC,GAAGpD,2BAA4B;QAC5E,MAAMqD,UAAU,MAAM1D,mBAAmBiD,UAAUM,UAAUI,KAAK;QAClE,IAAID,SAAS;gBACKA,eAEPP;YAFT,MAAMA,UAAUO,gBAAAA,QAAQd,IAAI,cAAZc,gBAAkB,CAAC;YACnC,MAAME,SACJ/B,QAAOsB,iBAAAA,MAAM,CAAC,SAAS,YAAhBA,iBAAoB,IAAIU,IAAI,MAAM/E,sBAAsBqE,OAAO,CAAC,EAAE,IAAI;YAC/E,MAAMW,OAAwB;gBAAEC,WAAWL,QAAQjB,EAAE;YAAC;YACtD,IAAImB,QAAQ;gBACV,iEAAiE;gBACjE,yDAAyD;gBACzD,MAAMI,QAAQnF,oBAAoB6D,KAAKkB;gBACvC,MAAMK,QAAQnE,iBAAiBqD,QAAQa,MAAME,OAAO;gBACpD,IAAID,MAAME,SAAS,EAAEL,KAAKK,SAAS,GAAGF,MAAME,SAAS;YACvD;YACA,OAAO;gBACLR,OAAOJ,UAAUI,KAAK;gBACtBS,WAAWb,UAAUa,SAAS;gBAC9BC,MAAM;gBACNP;gBACAF;gBACAU,WAAWpB,SAASC;YACtB;QACF;QACA,MAAMoB,MAAM1E,UAAU0D,UAAUI,KAAK;QACrC,IAAI,CAACY,KAAK;QACV,KAAK,MAAMX,UAAUZ,MAAMwB,OAAO,CAACf,KAAK,CAAC,GAAGnD,2BAA4B;gBAU7CmE;YATzB,MAAMA,OAAO,MAAMjE,UAChBQ,UAAU,CAAC,SACXC,GAAG,CAAC2C,QACJ5C,UAAU,CAAC,SACXC,GAAG,CAACsD,KACJlD,GAAG;YACN,IAAI,CAACoD,KAAKnD,MAAM,EAAE;YAClB,MAAMwC,OAAwB;gBAAEY,QAAQD,KAAKhC,EAAE;YAAC;YAChD,oEAAoE;YACpE,MAAMkC,YAAY9C,QAAO4C,YAAAA,KAAKpD,GAAG,CAAC,iCAAToD,YAAkC,IAAIZ,IAAI;YACnE,IAAIc,WAAWb,KAAKC,SAAS,GAAGY;YAChC,OAAO;gBACLhB,OAAOJ,UAAUI,KAAK;gBACtBS,WAAWb,UAAUa,SAAS;gBAC9BC,MAAM;gBACNP;gBACAF;gBACA,kEAAkE;gBAClE,4CAA4C;gBAC5CU,WAAWlF,eAAesD,KAAK7D,oBAAoB6D,KAAKkB;YAC1D;QACF;IACF;IACA,OAAO;AACT;AAEA;;;;;CAKC,GACD,OAAO,eAAegB,qBACpBpE,SAAsC,EACtCC,KAAa;IAEb,MAAMM,SAASP,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACR;IAChD,MAAM,CAACoE,SAASC,QAAQ,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC3CjE,OAAOC,UAAU,CAAC,WAAWK,GAAG;QAChCN,OAAOC,UAAU,CAACjB,iCAAiCsB,GAAG;KACvD;IACD,MAAM4D,OAA8BJ,QAAQrC,IAAI,CAACM,GAAG,CAAC,CAAC7B;YAC/CA;eADwD,cACxDA,YAAAA,IAAI2B,IAAI,cAAR3B,YAAc,CAAC;YACpB0B,KAAK1B,IAAIwB,EAAE;;;IAEb,MAAMyC,iBAAiB,IAAIC,IACzBL,QAAQtC,IAAI,CAACM,GAAG,CAAC,CAAC7B,MAAQ;YAACY,OAAOZ,IAAIwB,EAAE;YAAGxB,IAAI2B,IAAI;SAAG;IAExD,OAAOzD,iBAAiB8F,MAAMC;AAChC;AAYA;;;;;;;;;;CAUC,GACD,OAAO,eAAeE,oBACpB5E,SAAsC,EACtCwC,KASC;cAkDMqC;IAhDP,MAAM,EAAE5E,KAAK,EAAEiC,GAAG,EAAE2C,OAAO,EAAEC,MAAM,EAAE,GAAGtC;IACxC,MAAMuC,QAAQ,AAACF,CAAAA,QAAQG,IAAI,CAAC3B,IAAI,KAAKwB,QAAQG,IAAI,GAAG/F,gBAAgB4F,QAAQI,IAAI,CAAA,EAAGC,OAAO,CACxF,UACA;IAEF,MAAMC,YAAYnG,iBAAiB+F;IACnC,MAAM,EAAEK,MAAM,EAAEC,cAAc,EAAErC,UAAU,EAAE,GAAGvE,qBAAqB;QAClE6G,MAAMT,QAAQS,IAAI;QAClBC,IAAI;eAAIV,QAAQU,EAAE;eAAKV,QAAQW,WAAW;SAAC;QAC3CC,IAAI;eAAIZ,QAAQY,EAAE;eAAKZ,QAAQa,GAAG;SAAC;QACnCC,aAAa,UAAER,6BAAAA,UAAWG,IAAI,mBAAIM;QAClCd;QACAT,SAAS7B,MAAM6B,OAAO;IACxB;IACA,MAAMwB,eAAe/G,cAAc+F,QAAQS,IAAI;IAC/C,IAAI,CAACtC,WAAW8C,MAAM,EAAE,OAAO;QAAEC,SAAS;QAAaF;IAAa;IAEpE,MAAMG,QAAQ,MAAMzD,6BAA6BvC,WAAW;QAC1DC;QACAiC;QACAc;QACAgB,SAASxB,MAAMwB,OAAO;IACxB;IACA,IAAI,CAACgC,OAAO,OAAO;QAAED,SAAS;QAAaF;IAAa;IAExD,MAAM9B,MAAMvF,oBAAoBqG,QAAQoB,SAAS,EAAEpB,QAAQ5C,EAAE;IAC7D,MAAMiE,MAAMnC,MACRrE,4BAA4BM,WAAWC,OAAO8D,OAC9CpE,kBAAkBK,WAAWC;IACjC,IAAI8D,KAAK;QACP,MAAMoC,WAAW,MAAMD,IAAIrF,GAAG;QAC9B,IAAIsF,SAASrF,MAAM,EAAE,OAAO;YAAEiF,SAAS;YAAaK,YAAYF,IAAIjE,EAAE;QAAC;IACzE;IAEA,MAAM1B,SAASP,UAAUQ,UAAU,CAAC,QAAQC,GAAG,CAACR;IAChD,IAAI,CAAC1B,sBAAsB,MAAMqB,4BAA4BW,QAAQyF,MAAM1C,IAAI,IAAI;QACjF,OAAO;YAAEyC,SAAS;YAAWC;QAAM;IACrC;IAEA,0EAA0E;IAC1E,qEAAqE;IACrE,MAAMK,SAAShB,iBAAiBtG,yBAAyByD,MAAM6B,OAAO,EAAEe,UAAU;IAClF,wEAAwE;IACxE,wEAAwE;IACxE,uBAAuB;IACvB,MAAMG,KACJS,MAAMpC,SAAS,KAAK,aAChBoC,MAAM7C,KAAK,IACV0B,uBAAAA,QAAQU,EAAE,CACRjD,GAAG,CAAC,CAACgE,QAAUzH,eAAeyH,QAC9BC,IAAI,CAAC,CAACD,QAAUA,SAAS,CAACpH,oBAAoBoH,OAAOxB,oBAFvDD,uBAEmE;IAC1E,MAAM2B,WAAWpI,8BAA8B;QAC7CwF,WAAWoC,MAAMpC,SAAS;QAC1B6C,SAAS5B,QAAQ4B,OAAO;QACxBC,SAAShI,kBAAkBmG,QAAQG,IAAI,EAAEH,QAAQI,IAAI;QACrDK,IAAI,EAAEF,iBAAAA,SAAUP,QAAQS,IAAI;QAC5BC;QACAU,WAAWpB,QAAQoB,SAAS,IAAIpB,QAAQ5C,EAAE;QAC1C0E,WAAW9B,QAAQ8B,SAAS;QAC5BC,MAAM/B,QAAQgC,YAAY;QAC1BC,KAAK,WAAET,0BAAAA,OAAQU,GAAG,oBAAI;QACtBC,MAAM,WAAEX,0BAAAA,OAAQY,IAAI,oBAAI;QACxB3D,MAAM0C,MAAM1C,IAAI;QAChBF,QAAQ4C,MAAM5C,MAAM;QACpBU,WAAWkC,MAAMlC,SAAS;IAC5B;IACA,MAAMoD,UAAU,MAAMzH,uBAAuByG,KAAKM;IAClD,OAAOU,YAAY,YACf;QAAEnB,SAAS;QAASK,YAAYF,IAAIjE,EAAE;QAAE+D;IAAM,IAC9C;QAAED,SAAS;QAAaK,YAAYF,IAAIjE,EAAE;IAAC;AACjD"}

package/src/lib/server/crm-next-activity.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type CrmNextActivityLink, type CrmNextActivityLinkField } from '@aglyn/aglyn/app-utils/crm-next-activity';
+/** The collection each link field's record lives in, under `orgs/{orgId}/`. */
+export declare const CRM_NEXT_ACTIVITY_COLLECTIONS: Readonly<Record<CrmNextActivityLinkField, string>>;
+export interface CrmNextActivityRecompute {
+    /** Records whose stored value was written (or rewritten to the same figure). */
+    records: number;
+    /** Records that no longer exist — a task can outlive what it was filed against. */
+    missing: number;
+}
+/**
+ * Recompute `nextTaskAtMs` for every record the links name, once each.
+ *
+ * Hand in BOTH sides of a change — the links a task carried before an
+ * update and the ones it carries after — so a task moved from one deal to
+ * another leaves neither stale. A record the task named that has since been
+ * deleted is counted in `missing` and skipped; nothing here creates one.
+ */
+export declare function recomputeCrmNextTaskAt(firestore: FirebaseFirestore.Firestore, orgId: string, links: readonly (CrmNextActivityLink | null | undefined)[]): Promise<CrmNextActivityRecompute>;
+/**
+ * The same, from a task document rather than a link — what a writer holds
+ * after it has read the task it is about to change or has just changed.
+ */
+export declare function crmNextActivityLinksOf(task: Record<string, unknown> | null | undefined): CrmNextActivityLink;
+/** The most open tasks one org-wide recompute walks. */
+export declare const CRM_NEXT_ACTIVITY_SWEEP_MAX = 20000;
+export interface CrmNextActivitySweep {
+    /** Open tasks read. */
+    tasks: number;
+    /** Records that now carry a time. */
+    scheduled: number;
+    /** Records that carried a time and now carry `null`. */
+    cleared: number;
+    /** Whether the org held more open tasks than the sweep reads. */
+    truncated: boolean;
+}
+/**
+ * The one-off recompute for a whole organization — the Fields section's
+ * "Recompute next activity" (AGL-2661), for the records written before the
+ * field existed and for whatever a client-direct write left behind.
+ *
+ * Two passes and no per-record task query: every OPEN task once, grouped
+ * by the records it names, so each record with something scheduled is
+ * written its earliest due time; then every record in the three
+ * collections that CARRIES a time and was not in that group, cleared to
+ * `null`. A record that was never written is left alone — every reader
+ * already treats absent as `null`, and writing a null onto every contact
+ * an org holds would cost a write per person to say nothing.
+ *
+ * The clearing pass runs only when the first pass read EVERY open task.
+ * "No open task names this record" is a statement about all of them, and
+ * an organization holding more than the cap has open tasks the sweep never
+ * saw — clearing on a partial read would blank records that are perfectly
+ * scheduled. Past the cap the sweep is the writing half alone, and
+ * `truncated` says so.
+ */
+export declare function sweepCrmNextTaskAt(firestore: FirebaseFirestore.Firestore, orgId: string, options?: {
+    max?: number;
+}): Promise<CrmNextActivitySweep>;

package/src/lib/server/crm-next-activity.js

@@ -0,0 +1,194 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The `nextTaskAtMs` a record carries, as the Admin SDK writes it (AGL-2661).
+ *
+ * A contact, a company and a deal each denormalize when their earliest OPEN
+ * task is due, so a list can draw a "Next activity" column and answer
+ * "which deals have nothing scheduled" without a task query per row. This
+ * is the writer: given the records a task names, read that record's tasks
+ * back and store the answer `nextTaskAtMsOf` gives. Every server-side task
+ * writer — the console's task routes, the REST resource, the workflow step
+ * that files a task, the merge that repoints one — calls it after its own
+ * write; a client-direct task write asks the console's `crm/next-activity`
+ * route, which calls it too.
+ *
+ * Imported by module path rather than from the `@aglyn/aglyn/server`
+ * barrel, for the reason `contact-company-link.ts` gives.
+ *
+ * The task query is ONE equality on the link field, the query the record
+ * cards already run, and the status is judged in memory — no composite
+ * index, and a record with a hundred done tasks reads a hundred small
+ * documents once per write against it, which is the price of never being
+ * wrong. The record write is a bare `update()` of the one field, so
+ * `updatedAt` stays where the person's last edit left it: a task moving is
+ * not the record being edited, and the lists order by `updatedAt`.
+ */ import { CRM_COLLECTIONS } from "@aglyn/aglyn/app-utils/crm";
+import { CRM_NEXT_ACTIVITY_FIELD, mergeNextActivityLinks, nextActivityLinksOfTask, nextTaskAtMsOf, readNextTaskAtMs } from "@aglyn/aglyn/app-utils/crm-next-activity";
+/** The collection each link field's record lives in, under `orgs/{orgId}/`. */ export const CRM_NEXT_ACTIVITY_COLLECTIONS = {
+    contactId: 'contacts',
+    companyId: CRM_COLLECTIONS.companies,
+    dealId: CRM_COLLECTIONS.deals
+};
+const isNotFound = (error)=>{
+    const { code, message } = error != null ? error : {};
+    return code === 5 || code === 'not-found' || code === 'NOT_FOUND' || typeof message === 'string' && message.includes('NOT_FOUND');
+};
+/**
+ * Store one record's `nextTaskAtMs` from its tasks. `null` for a record
+ * that no longer exists, else the value written.
+ */ async function recomputeOne(orgRef, field, id) {
+    const tasks = await orgRef.collection(CRM_COLLECTIONS.tasks).where(field, '==', id).get();
+    const value = nextTaskAtMsOf(tasks.docs.map((doc)=>({
+            status: doc.get('status'),
+            dueAtMs: doc.get('dueAtMs')
+        })));
+    try {
+        await orgRef.collection(CRM_NEXT_ACTIVITY_COLLECTIONS[field]).doc(id).update({
+            [CRM_NEXT_ACTIVITY_FIELD]: value
+        });
+    } catch (error) {
+        if (isNotFound(error)) return {
+            written: false
+        };
+        throw error;
+    }
+    return {
+        written: true,
+        value
+    };
+}
+/**
+ * Recompute `nextTaskAtMs` for every record the links name, once each.
+ *
+ * Hand in BOTH sides of a change — the links a task carried before an
+ * update and the ones it carries after — so a task moved from one deal to
+ * another leaves neither stale. A record the task named that has since been
+ * deleted is counted in `missing` and skipped; nothing here creates one.
+ */ export async function recomputeCrmNextTaskAt(firestore, orgId, links) {
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const result = {
+        records: 0,
+        missing: 0
+    };
+    for (const { field, id } of mergeNextActivityLinks(links)){
+        const outcome = await recomputeOne(orgRef, field, id);
+        if (outcome.written) result.records += 1;
+        else result.missing += 1;
+    }
+    return result;
+}
+/**
+ * The same, from a task document rather than a link — what a writer holds
+ * after it has read the task it is about to change or has just changed.
+ */ export function crmNextActivityLinksOf(task) {
+    return nextActivityLinksOfTask(task);
+}
+/** The most open tasks one org-wide recompute walks. */ export const CRM_NEXT_ACTIVITY_SWEEP_MAX = 20000;
+/**
+ * The one-off recompute for a whole organization — the Fields section's
+ * "Recompute next activity" (AGL-2661), for the records written before the
+ * field existed and for whatever a client-direct write left behind.
+ *
+ * Two passes and no per-record task query: every OPEN task once, grouped
+ * by the records it names, so each record with something scheduled is
+ * written its earliest due time; then every record in the three
+ * collections that CARRIES a time and was not in that group, cleared to
+ * `null`. A record that was never written is left alone — every reader
+ * already treats absent as `null`, and writing a null onto every contact
+ * an org holds would cost a write per person to say nothing.
+ *
+ * The clearing pass runs only when the first pass read EVERY open task.
+ * "No open task names this record" is a statement about all of them, and
+ * an organization holding more than the cap has open tasks the sweep never
+ * saw — clearing on a partial read would blank records that are perfectly
+ * scheduled. Past the cap the sweep is the writing half alone, and
+ * `truncated` says so.
+ */ export async function sweepCrmNextTaskAt(firestore, orgId, options = {}) {
+    var _options_max;
+    const max = (_options_max = options.max) != null ? _options_max : CRM_NEXT_ACTIVITY_SWEEP_MAX;
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const open = await orgRef.collection(CRM_COLLECTIONS.tasks).where('status', '==', 'open').limit(max + 1).get();
+    const truncated = open.docs.length > max;
+    const docs = open.docs.slice(0, max);
+    const earliest = new Map();
+    for (const field of Object.keys(CRM_NEXT_ACTIVITY_COLLECTIONS)){
+        earliest.set(field, new Map());
+    }
+    for (const doc of docs){
+        const task = {
+            status: doc.get('status'),
+            dueAtMs: doc.get('dueAtMs')
+        };
+        const links = nextActivityLinksOfTask({
+            contactId: doc.get('contactId'),
+            companyId: doc.get('companyId'),
+            dealId: doc.get('dealId')
+        });
+        for (const { field, id } of mergeNextActivityLinks([
+            links
+        ])){
+            var _byId_get;
+            const byId = earliest.get(field);
+            byId.set(id, nextTaskAtMsOf([
+                task,
+                {
+                    status: 'open',
+                    dueAtMs: (_byId_get = byId.get(id)) != null ? _byId_get : null
+                }
+            ]));
+        }
+    }
+    const sweep = {
+        tasks: docs.length,
+        scheduled: 0,
+        cleared: 0,
+        truncated
+    };
+    for (const [field, byId] of earliest){
+        const records = orgRef.collection(CRM_NEXT_ACTIVITY_COLLECTIONS[field]);
+        for (const [id, value] of byId){
+            try {
+                await records.doc(id).update({
+                    [CRM_NEXT_ACTIVITY_FIELD]: value
+                });
+                sweep.scheduled += 1;
+            } catch (error) {
+                if (!isNotFound(error)) throw error;
+            }
+        }
+        /*
+     * The stale half: a record that says something is scheduled when no
+     * open task names it any more. `> 0` is the one query a stored time
+     * answers without an index of its own, and matches what
+     * `readNextTaskAtMs` calls a usable value.
+     */ if (truncated) continue;
+        const carrying = await records.where(CRM_NEXT_ACTIVITY_FIELD, '>', 0).get();
+        for (const doc of carrying.docs){
+            if (byId.has(doc.id)) continue;
+            if (readNextTaskAtMs({
+                nextTaskAtMs: doc.get(CRM_NEXT_ACTIVITY_FIELD)
+            }) === null) continue;
+            await doc.ref.update({
+                [CRM_NEXT_ACTIVITY_FIELD]: null
+            });
+            sweep.cleared += 1;
+        }
+    }
+    return sweep;
+}
+
+//# sourceMappingURL=crm-next-activity.js.map

package/src/lib/server/crm-next-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/crm-next-activity.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The `nextTaskAtMs` a record carries, as the Admin SDK writes it (AGL-2661).\n *\n * A contact, a company and a deal each denormalize when their earliest OPEN\n * task is due, so a list can draw a \"Next activity\" column and answer\n * \"which deals have nothing scheduled\" without a task query per row. This\n * is the writer: given the records a task names, read that record's tasks\n * back and store the answer `nextTaskAtMsOf` gives. Every server-side task\n * writer — the console's task routes, the REST resource, the workflow step\n * that files a task, the merge that repoints one — calls it after its own\n * write; a client-direct task write asks the console's `crm/next-activity`\n * route, which calls it too.\n *\n * Imported by module path rather than from the `@aglyn/aglyn/server`\n * barrel, for the reason `contact-company-link.ts` gives.\n *\n * The task query is ONE equality on the link field, the query the record\n * cards already run, and the status is judged in memory — no composite\n * index, and a record with a hundred done tasks reads a hundred small\n * documents once per write against it, which is the price of never being\n * wrong. The record write is a bare `update()` of the one field, so\n * `updatedAt` stays where the person's last edit left it: a task moving is\n * not the record being edited, and the lists order by `updatedAt`.\n */\n\nimport { CRM_COLLECTIONS } from '@aglyn/aglyn/app-utils/crm'\nimport {\n  CRM_NEXT_ACTIVITY_FIELD,\n  type CrmNextActivityLink,\n  type CrmNextActivityLinkField,\n  mergeNextActivityLinks,\n  nextActivityLinksOfTask,\n  nextTaskAtMsOf,\n  readNextTaskAtMs,\n} from '@aglyn/aglyn/app-utils/crm-next-activity'\n\n/** The collection each link field's record lives in, under `orgs/{orgId}/`. */\nexport const CRM_NEXT_ACTIVITY_COLLECTIONS: Readonly<Record<CrmNextActivityLinkField, string>> = {\n  contactId: 'contacts',\n  companyId: CRM_COLLECTIONS.companies,\n  dealId: CRM_COLLECTIONS.deals,\n}\n\nexport interface CrmNextActivityRecompute {\n  /** Records whose stored value was written (or rewritten to the same figure). */\n  records: number\n  /** Records that no longer exist — a task can outlive what it was filed against. */\n  missing: number\n}\n\nconst isNotFound = (error: unknown): boolean => {\n  const { code, message } = (error ?? {}) as { code?: unknown; message?: unknown }\n  return (\n    code === 5 ||\n    code === 'not-found' ||\n    code === 'NOT_FOUND' ||\n    (typeof message === 'string' && message.includes('NOT_FOUND'))\n  )\n}\n\n/**\n * Store one record's `nextTaskAtMs` from its tasks. `null` for a record\n * that no longer exists, else the value written.\n */\nasync function recomputeOne(\n  orgRef: FirebaseFirestore.DocumentReference,\n  field: CrmNextActivityLinkField,\n  id: string,\n): Promise<{ written: true; value: number | null } | { written: false }> {\n  const tasks = await orgRef\n    .collection(CRM_COLLECTIONS.tasks)\n    .where(field, '==', id)\n    .get()\n  const value = nextTaskAtMsOf(\n    tasks.docs.map((doc) => ({\n      status: doc.get('status'),\n      dueAtMs: doc.get('dueAtMs'),\n    })),\n  )\n  try {\n    await orgRef\n      .collection(CRM_NEXT_ACTIVITY_COLLECTIONS[field])\n      .doc(id)\n      .update({ [CRM_NEXT_ACTIVITY_FIELD]: value })\n  } catch (error) {\n    if (isNotFound(error)) return { written: false }\n    throw error\n  }\n  return { written: true, value }\n}\n\n/**\n * Recompute `nextTaskAtMs` for every record the links name, once each.\n *\n * Hand in BOTH sides of a change — the links a task carried before an\n * update and the ones it carries after — so a task moved from one deal to\n * another leaves neither stale. A record the task named that has since been\n * deleted is counted in `missing` and skipped; nothing here creates one.\n */\nexport async function recomputeCrmNextTaskAt(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  links: readonly (CrmNextActivityLink | null | undefined)[],\n): Promise<CrmNextActivityRecompute> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const result: CrmNextActivityRecompute = { records: 0, missing: 0 }\n  for (const { field, id } of mergeNextActivityLinks(links)) {\n    const outcome = await recomputeOne(orgRef, field, id)\n    if (outcome.written) result.records += 1\n    else result.missing += 1\n  }\n  return result\n}\n\n/**\n * The same, from a task document rather than a link — what a writer holds\n * after it has read the task it is about to change or has just changed.\n */\nexport function crmNextActivityLinksOf(\n  task: Record<string, unknown> | null | undefined,\n): CrmNextActivityLink {\n  return nextActivityLinksOfTask(task as Parameters<typeof nextActivityLinksOfTask>[0])\n}\n\n/** The most open tasks one org-wide recompute walks. */\nexport const CRM_NEXT_ACTIVITY_SWEEP_MAX = 20_000\n\nexport interface CrmNextActivitySweep {\n  /** Open tasks read. */\n  tasks: number\n  /** Records that now carry a time. */\n  scheduled: number\n  /** Records that carried a time and now carry `null`. */\n  cleared: number\n  /** Whether the org held more open tasks than the sweep reads. */\n  truncated: boolean\n}\n\n/**\n * The one-off recompute for a whole organization — the Fields section's\n * \"Recompute next activity\" (AGL-2661), for the records written before the\n * field existed and for whatever a client-direct write left behind.\n *\n * Two passes and no per-record task query: every OPEN task once, grouped\n * by the records it names, so each record with something scheduled is\n * written its earliest due time; then every record in the three\n * collections that CARRIES a time and was not in that group, cleared to\n * `null`. A record that was never written is left alone — every reader\n * already treats absent as `null`, and writing a null onto every contact\n * an org holds would cost a write per person to say nothing.\n *\n * The clearing pass runs only when the first pass read EVERY open task.\n * \"No open task names this record\" is a statement about all of them, and\n * an organization holding more than the cap has open tasks the sweep never\n * saw — clearing on a partial read would blank records that are perfectly\n * scheduled. Past the cap the sweep is the writing half alone, and\n * `truncated` says so.\n */\nexport async function sweepCrmNextTaskAt(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  options: { max?: number } = {},\n): Promise<CrmNextActivitySweep> {\n  const max = options.max ?? CRM_NEXT_ACTIVITY_SWEEP_MAX\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const open = await orgRef\n    .collection(CRM_COLLECTIONS.tasks)\n    .where('status', '==', 'open')\n    .limit(max + 1)\n    .get()\n  const truncated = open.docs.length > max\n  const docs = open.docs.slice(0, max)\n\n  const earliest = new Map<CrmNextActivityLinkField, Map<string, number | null>>()\n  for (const field of Object.keys(CRM_NEXT_ACTIVITY_COLLECTIONS) as CrmNextActivityLinkField[]) {\n    earliest.set(field, new Map())\n  }\n  for (const doc of docs) {\n    const task = { status: doc.get('status'), dueAtMs: doc.get('dueAtMs') }\n    const links = nextActivityLinksOfTask({\n      contactId: doc.get('contactId'),\n      companyId: doc.get('companyId'),\n      dealId: doc.get('dealId'),\n    })\n    for (const { field, id } of mergeNextActivityLinks([links])) {\n      const byId = earliest.get(field) as Map<string, number | null>\n      byId.set(id, nextTaskAtMsOf([task, { status: 'open', dueAtMs: byId.get(id) ?? null }]))\n    }\n  }\n\n  const sweep: CrmNextActivitySweep = { tasks: docs.length, scheduled: 0, cleared: 0, truncated }\n  for (const [field, byId] of earliest) {\n    const records = orgRef.collection(CRM_NEXT_ACTIVITY_COLLECTIONS[field])\n    for (const [id, value] of byId) {\n      try {\n        await records.doc(id).update({ [CRM_NEXT_ACTIVITY_FIELD]: value })\n        sweep.scheduled += 1\n      } catch (error) {\n        if (!isNotFound(error)) throw error\n      }\n    }\n    /*\n     * The stale half: a record that says something is scheduled when no\n     * open task names it any more. `> 0` is the one query a stored time\n     * answers without an index of its own, and matches what\n     * `readNextTaskAtMs` calls a usable value.\n     */\n    if (truncated) continue\n    const carrying = await records.where(CRM_NEXT_ACTIVITY_FIELD, '>', 0).get()\n    for (const doc of carrying.docs) {\n      if (byId.has(doc.id)) continue\n      if (readNextTaskAtMs({ nextTaskAtMs: doc.get(CRM_NEXT_ACTIVITY_FIELD) }) === null) continue\n      await doc.ref.update({ [CRM_NEXT_ACTIVITY_FIELD]: null })\n      sweep.cleared += 1\n    }\n  }\n  return sweep\n}\n"],"names":["CRM_COLLECTIONS","CRM_NEXT_ACTIVITY_FIELD","mergeNextActivityLinks","nextActivityLinksOfTask","nextTaskAtMsOf","readNextTaskAtMs","CRM_NEXT_ACTIVITY_COLLECTIONS","contactId","companyId","companies","dealId","deals","isNotFound","error","code","message","includes","recomputeOne","orgRef","field","id","tasks","collection","where","get","value","docs","map","doc","status","dueAtMs","update","written","recomputeCrmNextTaskAt","firestore","orgId","links","result","records","missing","outcome","crmNextActivityLinksOf","task","CRM_NEXT_ACTIVITY_SWEEP_MAX","sweepCrmNextTaskAt","options","max","open","limit","truncated","length","slice","earliest","Map","Object","keys","set","byId","sweep","scheduled","cleared","carrying","has","nextTaskAtMs","ref"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,SAASA,eAAe,QAAQ,6BAA4B;AAC5D,SACEC,uBAAuB,EAGvBC,sBAAsB,EACtBC,uBAAuB,EACvBC,cAAc,EACdC,gBAAgB,QACX,2CAA0C;AAEjD,6EAA6E,GAC7E,OAAO,MAAMC,gCAAoF;IAC/FC,WAAW;IACXC,WAAWR,gBAAgBS,SAAS;IACpCC,QAAQV,gBAAgBW,KAAK;AAC/B,EAAC;AASD,MAAMC,aAAa,CAACC;IAClB,MAAM,EAAEC,IAAI,EAAEC,OAAO,EAAE,GAAIF,gBAAAA,QAAS,CAAC;IACrC,OACEC,SAAS,KACTA,SAAS,eACTA,SAAS,eACR,OAAOC,YAAY,YAAYA,QAAQC,QAAQ,CAAC;AAErD;AAEA;;;CAGC,GACD,eAAeC,aACbC,MAA2C,EAC3CC,KAA+B,EAC/BC,EAAU;IAEV,MAAMC,QAAQ,MAAMH,OACjBI,UAAU,CAACtB,gBAAgBqB,KAAK,EAChCE,KAAK,CAACJ,OAAO,MAAMC,IACnBI,GAAG;IACN,MAAMC,QAAQrB,eACZiB,MAAMK,IAAI,CAACC,GAAG,CAAC,CAACC,MAAS,CAAA;YACvBC,QAAQD,IAAIJ,GAAG,CAAC;YAChBM,SAASF,IAAIJ,GAAG,CAAC;QACnB,CAAA;IAEF,IAAI;QACF,MAAMN,OACHI,UAAU,CAAChB,6BAA6B,CAACa,MAAM,EAC/CS,GAAG,CAACR,IACJW,MAAM,CAAC;YAAE,CAAC9B,wBAAwB,EAAEwB;QAAM;IAC/C,EAAE,OAAOZ,OAAO;QACd,IAAID,WAAWC,QAAQ,OAAO;YAAEmB,SAAS;QAAM;QAC/C,MAAMnB;IACR;IACA,OAAO;QAAEmB,SAAS;QAAMP;IAAM;AAChC;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeQ,uBACpBC,SAAsC,EACtCC,KAAa,EACbC,KAA0D;IAE1D,MAAMlB,SAASgB,UAAUZ,UAAU,CAAC,QAAQM,GAAG,CAACO;IAChD,MAAME,SAAmC;QAAEC,SAAS;QAAGC,SAAS;IAAE;IAClE,KAAK,MAAM,EAAEpB,KAAK,EAAEC,EAAE,EAAE,IAAIlB,uBAAuBkC,OAAQ;QACzD,MAAMI,UAAU,MAAMvB,aAAaC,QAAQC,OAAOC;QAClD,IAAIoB,QAAQR,OAAO,EAAEK,OAAOC,OAAO,IAAI;aAClCD,OAAOE,OAAO,IAAI;IACzB;IACA,OAAOF;AACT;AAEA;;;CAGC,GACD,OAAO,SAASI,uBACdC,IAAgD;IAEhD,OAAOvC,wBAAwBuC;AACjC;AAEA,sDAAsD,GACtD,OAAO,MAAMC,8BAA8B,MAAM;AAajD;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,eAAeC,mBACpBV,SAAsC,EACtCC,KAAa,EACbU,UAA4B,CAAC,CAAC;QAElBA;IAAZ,MAAMC,OAAMD,eAAAA,QAAQC,GAAG,YAAXD,eAAeF;IAC3B,MAAMzB,SAASgB,UAAUZ,UAAU,CAAC,QAAQM,GAAG,CAACO;IAChD,MAAMY,OAAO,MAAM7B,OAChBI,UAAU,CAACtB,gBAAgBqB,KAAK,EAChCE,KAAK,CAAC,UAAU,MAAM,QACtByB,KAAK,CAACF,MAAM,GACZtB,GAAG;IACN,MAAMyB,YAAYF,KAAKrB,IAAI,CAACwB,MAAM,GAAGJ;IACrC,MAAMpB,OAAOqB,KAAKrB,IAAI,CAACyB,KAAK,CAAC,GAAGL;IAEhC,MAAMM,WAAW,IAAIC;IACrB,KAAK,MAAMlC,SAASmC,OAAOC,IAAI,CAACjD,+BAA8D;QAC5F8C,SAASI,GAAG,CAACrC,OAAO,IAAIkC;IAC1B;IACA,KAAK,MAAMzB,OAAOF,KAAM;QACtB,MAAMgB,OAAO;YAAEb,QAAQD,IAAIJ,GAAG,CAAC;YAAWM,SAASF,IAAIJ,GAAG,CAAC;QAAW;QACtE,MAAMY,QAAQjC,wBAAwB;YACpCI,WAAWqB,IAAIJ,GAAG,CAAC;YACnBhB,WAAWoB,IAAIJ,GAAG,CAAC;YACnBd,QAAQkB,IAAIJ,GAAG,CAAC;QAClB;QACA,KAAK,MAAM,EAAEL,KAAK,EAAEC,EAAE,EAAE,IAAIlB,uBAAuB;YAACkC;SAAM,EAAG;gBAEGqB;YAD9D,MAAMA,OAAOL,SAAS5B,GAAG,CAACL;YAC1BsC,KAAKD,GAAG,CAACpC,IAAIhB,eAAe;gBAACsC;gBAAM;oBAAEb,QAAQ;oBAAQC,OAAO,GAAE2B,YAAAA,KAAKjC,GAAG,CAACJ,eAATqC,YAAgB;gBAAK;aAAE;QACvF;IACF;IAEA,MAAMC,QAA8B;QAAErC,OAAOK,KAAKwB,MAAM;QAAES,WAAW;QAAGC,SAAS;QAAGX;IAAU;IAC9F,KAAK,MAAM,CAAC9B,OAAOsC,KAAK,IAAIL,SAAU;QACpC,MAAMd,UAAUpB,OAAOI,UAAU,CAAChB,6BAA6B,CAACa,MAAM;QACtE,KAAK,MAAM,CAACC,IAAIK,MAAM,IAAIgC,KAAM;YAC9B,IAAI;gBACF,MAAMnB,QAAQV,GAAG,CAACR,IAAIW,MAAM,CAAC;oBAAE,CAAC9B,wBAAwB,EAAEwB;gBAAM;gBAChEiC,MAAMC,SAAS,IAAI;YACrB,EAAE,OAAO9C,OAAO;gBACd,IAAI,CAACD,WAAWC,QAAQ,MAAMA;YAChC;QACF;QACA;;;;;KAKC,GACD,IAAIoC,WAAW;QACf,MAAMY,WAAW,MAAMvB,QAAQf,KAAK,CAACtB,yBAAyB,KAAK,GAAGuB,GAAG;QACzE,KAAK,MAAMI,OAAOiC,SAASnC,IAAI,CAAE;YAC/B,IAAI+B,KAAKK,GAAG,CAAClC,IAAIR,EAAE,GAAG;YACtB,IAAIf,iBAAiB;gBAAE0D,cAAcnC,IAAIJ,GAAG,CAACvB;YAAyB,OAAO,MAAM;YACnF,MAAM2B,IAAIoC,GAAG,CAACjC,MAAM,CAAC;gBAAE,CAAC9B,wBAAwB,EAAE;YAAK;YACvDyD,MAAME,OAAO,IAAI;QACnB;IACF;IACA,OAAOF;AACT"}