@aglyn/tenant-data-admin 1.0.0-beta.143

package/src/lib/server/erase-person.js

@@ -0,0 +1,272 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { FieldValue } from "firebase-admin/firestore";
+// The leaves, not the barrel — see `email-suppression.ts` for why: a spec
+// of this sweep substitutes a store, not the pure helpers it leans on.
+import { normalizeContactEmail } from "@aglyn/aglyn/app-utils/contacts";
+import { CRM_COLLECTIONS } from "@aglyn/aglyn/app-utils/crm";
+import { personKey } from "@aglyn/aglyn/app-utils/person-key";
+import { runPluginPersonErasers } from "@aglyn/aglyn/plugin-manager/plugin-person-erasure";
+import { companyContactsCountFields } from "./contact-company-link.js";
+import { eraseEmailDeliveriesForAddresses } from "./email-delivery-log.js";
+import { suppressEmailForHostErasure } from "./email-suppression.js";
+import firebaseAdmin from "./firebase-admin.js";
+import { listMemberDocIds } from "./list-members.js";
+const defaultFirestore = ()=>firebaseAdmin.app().firestore();
+/** Firestore caps a batch at 500 writes; a page under it keeps a margin. */ const PAGE = 400;
+/**
+ * A pathological collection must not hold the erasure open indefinitely:
+ * twenty pages of four hundred is eight thousand rows of one kind for one
+ * person, past anything a real relationship produces.
+ */ const MAX_PAGES = 20;
+/**
+ * Remove one person from one workspace (AGL-2623).
+ *
+ * `planContactDetach` is deliberately not consulted: the CRM's delete is a
+ * detach that leaves the row for the other holders, and this is the act
+ * that must not. The contact document goes whole — every site's facet,
+ * every consent entry, every attribution — and with it everything the
+ * workspace keeps beside the person.
+ *
+ * ## Order
+ *
+ *   1. **Suppress first.** One row per site on the per-site suppression
+ *      list, before any delete: a form filled in while the sweep runs must
+ *      already find the door closed, or the sweep deletes a row that the
+ *      capture re-creates a moment later.
+ *   2. The plugins' share: every eraser registered on
+ *      `plugin-person-erasure`, handed the address, its key and the ids of
+ *      the contacts about to go, while those documents still exist.
+ *   3. The contact and its satellites — company counts, deals unlinked,
+ *      tasks and activities deleted — by the contact's id, then the
+ *      document itself.
+ *   4. Leads, list memberships, orders and bookings by the address, on
+ *      every site of the workspace.
+ *   5. The delivery log, last: it is filed under the address alone, and the
+ *      tombstone it leaves is what keeps a later import from refilling it.
+ *
+ * ## What is anonymized rather than deleted
+ *
+ * An order is the merchant's record of a sale and a booking of an
+ * appointment; the amounts, the line items and the tax are theirs to keep
+ * and the law expects them kept. The person is taken OFF those records —
+ * name, email, phone, addresses — and a stamp says when. A deal is the
+ * team's own pipeline record and is unlinked. Everything else that names
+ * the person is about the person and is deleted.
+ *
+ * ## What is not reached, and why
+ *
+ * A form submission keeps the address inside `fields`, under whatever the
+ * form called it — there is no key to query by and a scan of every
+ * submission on every site is unbounded. A site member's login is their
+ * own account. A subscription carries the address it bills, and a live one
+ * cannot be anonymized without breaking its receipts. Each is named to the
+ * admin by the dialog so they can finish by hand.
+ *
+ * Every sweep is best-effort against the others: a failure in one is
+ * logged and counted as zero, and the request's counts say what happened.
+ * The caller decides whether zero contacts on a person it could see is a
+ * failure to retry.
+ */ export async function erasePerson(options) {
+    var _options_firestore, _options_now;
+    const email = normalizeContactEmail(options.email);
+    const key = email ? personKey(email) : null;
+    if (!email || !key) return {
+        ok: false,
+        skippedReason: 'invalid-email'
+    };
+    const db = (_options_firestore = options.firestore) != null ? _options_firestore : defaultFirestore();
+    const now = (_options_now = options.now) != null ? _options_now : Date.now();
+    const orgRef = db.collection('orgs').doc(options.orgId);
+    const counts = {
+        hosts: 0,
+        hostsSuppressed: 0,
+        contacts: 0,
+        companyLinks: 0,
+        deals: 0,
+        tasks: 0,
+        activities: 0,
+        leads: 0,
+        listMemberships: 0,
+        orders: 0,
+        bookings: 0,
+        emailDeliveries: 0,
+        plugins: {}
+    };
+    const hosts = await db.collection('hosts').where('orgId', '==', options.orgId).get();
+    const hostIds = hosts.docs.map((doc)=>String(doc.id));
+    counts.hosts = hostIds.length;
+    for (const hostId of hostIds){
+        try {
+            const written = await suppressEmailForHostErasure({
+                hostId,
+                email,
+                firestore: db
+            });
+            if (written) counts.hostsSuppressed += 1;
+        } catch (error) {
+            console.error(`erasePerson: suppression write failed for ${hostId}`, error);
+        }
+    }
+    const contacts = await orgRef.collection('contacts').where('email', '==', email).get();
+    // What the plugins keep about the person (AGL-2981): records filed under
+    // the organization by the contact or by the address, which none of the
+    // sweeps here can see. Every site's door is already closed above, and
+    // the contacts are still there for an eraser that reads one. Isolated
+    // per plugin: one that fails is recorded as `null` and the erasure goes
+    // on. This erasure has no plan of its own, so it is never a dry run.
+    counts.plugins = await runPluginPersonErasers({
+        orgId: options.orgId,
+        email,
+        key,
+        contactIds: contacts.docs.map((contact)=>String(contact.id)),
+        dryRun: false
+    });
+    for (const contact of contacts.docs){
+        const contactId = String(contact.id);
+        const companyIds = contact.get('companyIds');
+        const linked = Array.isArray(companyIds) ? companyIds.filter((id)=>typeof id === 'string' && !!id) : [];
+        for (const companyId of new Set(linked)){
+            try {
+                await orgRef.collection(CRM_COLLECTIONS.companies).doc(companyId).update(companyContactsCountFields(-1));
+                counts.companyLinks += 1;
+            } catch (error) {
+                console.error(`erasePerson: company count could not move for ${companyId}`, error);
+            }
+        }
+        counts.deals += await updateWhere(db, orgRef.collection(CRM_COLLECTIONS.deals), 'contactId', contactId, {
+            contactId: FieldValue.delete(),
+            updatedAt: FieldValue.serverTimestamp()
+        });
+        counts.tasks += await deleteWhere(db, orgRef.collection(CRM_COLLECTIONS.tasks), 'contactId', contactId);
+        counts.activities += await deleteWhere(db, orgRef.collection(CRM_COLLECTIONS.activities), 'contactId', contactId);
+        try {
+            await contact.ref.delete();
+            counts.contacts += 1;
+        } catch (error) {
+            console.error(`erasePerson: contact delete failed for ${contactId}`, error);
+        }
+    }
+    const erasedOrder = {
+        customerEmail: null,
+        customerName: null,
+        shippingAddress: FieldValue.delete(),
+        billingAddress: FieldValue.delete(),
+        customerErasedAtMs: now
+    };
+    const erasedBooking = {
+        email: null,
+        name: FieldValue.delete(),
+        phone: FieldValue.delete(),
+        customerErasedAtMs: now
+    };
+    for (const hostId of hostIds){
+        const hostRef = db.collection('hosts').doc(hostId);
+        try {
+            const lead = hostRef.collection('leads').doc(key);
+            if ((await lead.get()).exists) {
+                await lead.delete();
+                counts.leads += 1;
+            }
+        } catch (error) {
+            console.error(`erasePerson: lead delete failed for ${hostId}`, error);
+        }
+        counts.orders += await updateWhere(db, hostRef.collection('orders'), 'customerEmail', email, erasedOrder);
+        counts.bookings += await updateWhere(db, hostRef.collection('bookings'), 'email', email, erasedBooking);
+    }
+    try {
+        const memberIds = listMemberDocIds(email);
+        const lists = await orgRef.collection('lists').get();
+        for (const list of lists.docs){
+            const refs = memberIds.map((id)=>list.ref.collection('members').doc(id));
+            const found = await db.getAll(...refs);
+            for (const member of found){
+                if (!member.exists) continue;
+                await member.ref.delete();
+                counts.listMemberships += 1;
+            }
+        }
+    } catch (error) {
+        console.error('erasePerson: list membership sweep failed', error);
+    }
+    try {
+        const sweep = await eraseEmailDeliveriesForAddresses([
+            {
+                address: email
+            }
+        ], db);
+        counts.emailDeliveries = sweep.removed;
+    } catch (error) {
+        console.error('erasePerson: delivery log sweep failed', error);
+    }
+    await db.collection('adminAudit').add({
+        actorUid: 'system:erase-person',
+        action: 'person.erased',
+        target: `orgs/${options.orgId}/people/${key}`,
+        before: null,
+        after: counts,
+        at: FieldValue.serverTimestamp()
+    }).catch(()=>undefined);
+    return _extends({
+        ok: true
+    }, counts);
+}
+/**
+ * Delete every document in `collection` whose `field` equals `value`, a
+ * page at a time. Returns how many went; a failure logs and stops, and the
+ * count says how far it got.
+ */ async function deleteWhere(db, collection, field, value) {
+    let removed = 0;
+    try {
+        for(let pass = 0; pass < MAX_PAGES; pass += 1){
+            const page = await collection.where(field, '==', value).limit(PAGE).get();
+            if (page.empty) break;
+            const batch = db.batch();
+            page.docs.forEach((doc)=>batch.delete(doc.ref));
+            await batch.commit();
+            removed += page.size;
+            if (page.size < PAGE) break;
+        }
+    } catch (error) {
+        console.error(`erasePerson: delete sweep failed on ${field}`, error);
+    }
+    return removed;
+}
+/**
+ * Apply `patch` to every document in `collection` whose `field` equals
+ * `value`. Because the patch clears the very field that was matched on, a
+ * second page never sees the first page's rows again, so the loop needs no
+ * cursor; the page cap is the only bound.
+ */ async function updateWhere(db, collection, field, value, patch) {
+    let changed = 0;
+    try {
+        for(let pass = 0; pass < MAX_PAGES; pass += 1){
+            const page = await collection.where(field, '==', value).limit(PAGE).get();
+            if (page.empty) break;
+            const batch = db.batch();
+            page.docs.forEach((doc)=>batch.update(doc.ref, patch));
+            await batch.commit();
+            changed += page.size;
+            if (page.size < PAGE) break;
+        }
+    } catch (error) {
+        console.error(`erasePerson: update sweep failed on ${field}`, error);
+    }
+    return changed;
+}
+
+//# sourceMappingURL=erase-person.js.map

package/src/lib/server/erase-person.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/erase-person.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { FieldValue } from 'firebase-admin/firestore'\n// The leaves, not the barrel — see `email-suppression.ts` for why: a spec\n// of this sweep substitutes a store, not the pure helpers it leans on.\nimport { normalizeContactEmail } from '@aglyn/aglyn/app-utils/contacts'\nimport { CRM_COLLECTIONS } from '@aglyn/aglyn/app-utils/crm'\nimport { personKey } from '@aglyn/aglyn/app-utils/person-key'\nimport {\n  runPluginPersonErasers,\n  type PluginPersonErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-person-erasure'\nimport { companyContactsCountFields } from './contact-company-link'\nimport { eraseEmailDeliveriesForAddresses } from './email-delivery-log'\nimport { suppressEmailForHostErasure } from './email-suppression'\nimport firebaseAdmin from './firebase-admin'\nimport { listMemberDocIds } from './list-members'\n\nconst defaultFirestore = () => firebaseAdmin.app().firestore()\n\n/** Firestore caps a batch at 500 writes; a page under it keeps a margin. */\nconst PAGE = 400\n\n/**\n * A pathological collection must not hold the erasure open indefinitely:\n * twenty pages of four hundred is eight thousand rows of one kind for one\n * person, past anything a real relationship produces.\n */\nconst MAX_PAGES = 20\n\nexport interface ErasePersonOptions {\n  orgId: string\n  /** Any spelling; normalized before anything is looked up. */\n  email: unknown\n  /** Injectable for tests; defaults to the admin app's Firestore. */\n  firestore?: any\n  /** Injectable for tests; defaults to `Date.now()`. */\n  now?: number\n}\n\n/**\n * Counts, never identities: this is what the request document and the\n * audit row record, and both are read by people who must not learn the\n * address from them.\n */\nexport interface ErasePersonCounts {\n  /** Sites in the workspace the sweep walked. */\n  hosts: number\n  /** Suppression rows written, one per site. */\n  hostsSuppressed: number\n  /** Contact documents deleted — the row every site shared. */\n  contacts: number\n  /** Companies whose contact count moved down. */\n  companyLinks: number\n  /** Deals whose `contactId` was removed. */\n  deals: number\n  tasks: number\n  activities: number\n  /** `hosts/{hostId}/leads/{personKey}` rows deleted. */\n  leads: number\n  /** Audience-list member rows deleted, across every list. */\n  listMemberships: number\n  /** Orders with the buyer's identity removed; the record stays. */\n  orders: number\n  /** Bookings with the person's identity removed; the record stays. */\n  bookings: number\n  /** Delivery-log messages deleted under the address. */\n  emailDeliveries: number\n  /**\n   * Each plugin's share (AGL-2981), by plugin id: its eraser's own counts,\n   * or `null` for an eraser that failed — its data may remain.\n   */\n  plugins: Record<string, PluginPersonErasureReport | null>\n}\n\nexport type ErasePersonResult =\n  | ({ ok: true } & ErasePersonCounts)\n  | { ok: false; skippedReason: 'invalid-email' }\n\n/**\n * Remove one person from one workspace (AGL-2623).\n *\n * `planContactDetach` is deliberately not consulted: the CRM's delete is a\n * detach that leaves the row for the other holders, and this is the act\n * that must not. The contact document goes whole — every site's facet,\n * every consent entry, every attribution — and with it everything the\n * workspace keeps beside the person.\n *\n * ## Order\n *\n *   1. **Suppress first.** One row per site on the per-site suppression\n *      list, before any delete: a form filled in while the sweep runs must\n *      already find the door closed, or the sweep deletes a row that the\n *      capture re-creates a moment later.\n *   2. The plugins' share: every eraser registered on\n *      `plugin-person-erasure`, handed the address, its key and the ids of\n *      the contacts about to go, while those documents still exist.\n *   3. The contact and its satellites — company counts, deals unlinked,\n *      tasks and activities deleted — by the contact's id, then the\n *      document itself.\n *   4. Leads, list memberships, orders and bookings by the address, on\n *      every site of the workspace.\n *   5. The delivery log, last: it is filed under the address alone, and the\n *      tombstone it leaves is what keeps a later import from refilling it.\n *\n * ## What is anonymized rather than deleted\n *\n * An order is the merchant's record of a sale and a booking of an\n * appointment; the amounts, the line items and the tax are theirs to keep\n * and the law expects them kept. The person is taken OFF those records —\n * name, email, phone, addresses — and a stamp says when. A deal is the\n * team's own pipeline record and is unlinked. Everything else that names\n * the person is about the person and is deleted.\n *\n * ## What is not reached, and why\n *\n * A form submission keeps the address inside `fields`, under whatever the\n * form called it — there is no key to query by and a scan of every\n * submission on every site is unbounded. A site member's login is their\n * own account. A subscription carries the address it bills, and a live one\n * cannot be anonymized without breaking its receipts. Each is named to the\n * admin by the dialog so they can finish by hand.\n *\n * Every sweep is best-effort against the others: a failure in one is\n * logged and counted as zero, and the request's counts say what happened.\n * The caller decides whether zero contacts on a person it could see is a\n * failure to retry.\n */\nexport async function erasePerson(\n  options: ErasePersonOptions,\n): Promise<ErasePersonResult> {\n  const email = normalizeContactEmail(options.email)\n  const key = email ? personKey(email) : null\n  if (!email || !key) return { ok: false, skippedReason: 'invalid-email' }\n  const db = options.firestore ?? defaultFirestore()\n  const now = options.now ?? Date.now()\n  const orgRef = db.collection('orgs').doc(options.orgId)\n\n  const counts: ErasePersonCounts = {\n    hosts: 0,\n    hostsSuppressed: 0,\n    contacts: 0,\n    companyLinks: 0,\n    deals: 0,\n    tasks: 0,\n    activities: 0,\n    leads: 0,\n    listMemberships: 0,\n    orders: 0,\n    bookings: 0,\n    emailDeliveries: 0,\n    plugins: {},\n  }\n\n  const hosts = await db\n    .collection('hosts')\n    .where('orgId', '==', options.orgId)\n    .get()\n  const hostIds: string[] = hosts.docs.map((doc: any) => String(doc.id))\n  counts.hosts = hostIds.length\n\n  for (const hostId of hostIds) {\n    try {\n      const written = await suppressEmailForHostErasure({ hostId, email, firestore: db })\n      if (written) counts.hostsSuppressed += 1\n    } catch (error) {\n      console.error(`erasePerson: suppression write failed for ${hostId}`, error)\n    }\n  }\n\n  const contacts = await orgRef.collection('contacts').where('email', '==', email).get()\n\n  // What the plugins keep about the person (AGL-2981): records filed under\n  // the organization by the contact or by the address, which none of the\n  // sweeps here can see. Every site's door is already closed above, and\n  // the contacts are still there for an eraser that reads one. Isolated\n  // per plugin: one that fails is recorded as `null` and the erasure goes\n  // on. This erasure has no plan of its own, so it is never a dry run.\n  counts.plugins = await runPluginPersonErasers({\n    orgId: options.orgId,\n    email,\n    key,\n    contactIds: contacts.docs.map((contact: any) => String(contact.id)),\n    dryRun: false,\n  })\n\n  for (const contact of contacts.docs) {\n    const contactId = String(contact.id)\n    const companyIds: unknown = contact.get('companyIds')\n    const linked = Array.isArray(companyIds)\n      ? companyIds.filter((id): id is string => typeof id === 'string' && !!id)\n      : []\n    for (const companyId of new Set(linked)) {\n      try {\n        await orgRef\n          .collection(CRM_COLLECTIONS.companies)\n          .doc(companyId)\n          .update(companyContactsCountFields(-1))\n        counts.companyLinks += 1\n      } catch (error) {\n        console.error(`erasePerson: company count could not move for ${companyId}`, error)\n      }\n    }\n    counts.deals += await updateWhere(\n      db,\n      orgRef.collection(CRM_COLLECTIONS.deals),\n      'contactId',\n      contactId,\n      { contactId: FieldValue.delete(), updatedAt: FieldValue.serverTimestamp() },\n    )\n    counts.tasks += await deleteWhere(db, orgRef.collection(CRM_COLLECTIONS.tasks), 'contactId', contactId)\n    counts.activities += await deleteWhere(\n      db,\n      orgRef.collection(CRM_COLLECTIONS.activities),\n      'contactId',\n      contactId,\n    )\n    try {\n      await contact.ref.delete()\n      counts.contacts += 1\n    } catch (error) {\n      console.error(`erasePerson: contact delete failed for ${contactId}`, error)\n    }\n  }\n\n  const erasedOrder = {\n    customerEmail: null,\n    customerName: null,\n    shippingAddress: FieldValue.delete(),\n    billingAddress: FieldValue.delete(),\n    customerErasedAtMs: now,\n  }\n  const erasedBooking = {\n    email: null,\n    name: FieldValue.delete(),\n    phone: FieldValue.delete(),\n    customerErasedAtMs: now,\n  }\n  for (const hostId of hostIds) {\n    const hostRef = db.collection('hosts').doc(hostId)\n    try {\n      const lead = hostRef.collection('leads').doc(key)\n      if ((await lead.get()).exists) {\n        await lead.delete()\n        counts.leads += 1\n      }\n    } catch (error) {\n      console.error(`erasePerson: lead delete failed for ${hostId}`, error)\n    }\n    counts.orders += await updateWhere(db, hostRef.collection('orders'), 'customerEmail', email, erasedOrder)\n    counts.bookings += await updateWhere(db, hostRef.collection('bookings'), 'email', email, erasedBooking)\n  }\n\n  try {\n    const memberIds = listMemberDocIds(email)\n    const lists = await orgRef.collection('lists').get()\n    for (const list of lists.docs) {\n      const refs = memberIds.map((id) => list.ref.collection('members').doc(id))\n      const found = await db.getAll(...refs)\n      for (const member of found) {\n        if (!member.exists) continue\n        await member.ref.delete()\n        counts.listMemberships += 1\n      }\n    }\n  } catch (error) {\n    console.error('erasePerson: list membership sweep failed', error)\n  }\n\n  try {\n    const sweep = await eraseEmailDeliveriesForAddresses([{ address: email }], db)\n    counts.emailDeliveries = sweep.removed\n  } catch (error) {\n    console.error('erasePerson: delivery log sweep failed', error)\n  }\n\n  await db\n    .collection('adminAudit')\n    .add({\n      actorUid: 'system:erase-person',\n      action: 'person.erased',\n      target: `orgs/${options.orgId}/people/${key}`,\n      before: null,\n      after: counts,\n      at: FieldValue.serverTimestamp(),\n    })\n    .catch(() => undefined)\n\n  return { ok: true, ...counts }\n}\n\n/**\n * Delete every document in `collection` whose `field` equals `value`, a\n * page at a time. Returns how many went; a failure logs and stops, and the\n * count says how far it got.\n */\nasync function deleteWhere(\n  db: any,\n  collection: any,\n  field: string,\n  value: string,\n): Promise<number> {\n  let removed = 0\n  try {\n    for (let pass = 0; pass < MAX_PAGES; pass += 1) {\n      const page = await collection.where(field, '==', value).limit(PAGE).get()\n      if (page.empty) break\n      const batch = db.batch()\n      page.docs.forEach((doc: any) => batch.delete(doc.ref))\n      await batch.commit()\n      removed += page.size\n      if (page.size < PAGE) break\n    }\n  } catch (error) {\n    console.error(`erasePerson: delete sweep failed on ${field}`, error)\n  }\n  return removed\n}\n\n/**\n * Apply `patch` to every document in `collection` whose `field` equals\n * `value`. Because the patch clears the very field that was matched on, a\n * second page never sees the first page's rows again, so the loop needs no\n * cursor; the page cap is the only bound.\n */\nasync function updateWhere(\n  db: any,\n  collection: any,\n  field: string,\n  value: string,\n  patch: Record<string, unknown>,\n): Promise<number> {\n  let changed = 0\n  try {\n    for (let pass = 0; pass < MAX_PAGES; pass += 1) {\n      const page = await collection.where(field, '==', value).limit(PAGE).get()\n      if (page.empty) break\n      const batch = db.batch()\n      page.docs.forEach((doc: any) => batch.update(doc.ref, patch))\n      await batch.commit()\n      changed += page.size\n      if (page.size < PAGE) break\n    }\n  } catch (error) {\n    console.error(`erasePerson: update sweep failed on ${field}`, error)\n  }\n  return changed\n}\n"],"names":["FieldValue","normalizeContactEmail","CRM_COLLECTIONS","personKey","runPluginPersonErasers","companyContactsCountFields","eraseEmailDeliveriesForAddresses","suppressEmailForHostErasure","firebaseAdmin","listMemberDocIds","defaultFirestore","app","firestore","PAGE","MAX_PAGES","erasePerson","options","email","key","ok","skippedReason","db","now","Date","orgRef","collection","doc","orgId","counts","hosts","hostsSuppressed","contacts","companyLinks","deals","tasks","activities","leads","listMemberships","orders","bookings","emailDeliveries","plugins","where","get","hostIds","docs","map","String","id","length","hostId","written","error","console","contactIds","contact","dryRun","contactId","companyIds","linked","Array","isArray","filter","companyId","Set","companies","update","updateWhere","delete","updatedAt","serverTimestamp","deleteWhere","ref","erasedOrder","customerEmail","customerName","shippingAddress","billingAddress","customerErasedAtMs","erasedBooking","name","phone","hostRef","lead","exists","memberIds","lists","list","refs","found","getAll","member","sweep","address","removed","add","actorUid","action","target","before","after","at","catch","undefined","field","value","pass","page","limit","empty","batch","forEach","commit","size","patch","changed"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,2BAA0B;AACrD,0EAA0E;AAC1E,uEAAuE;AACvE,SAASC,qBAAqB,QAAQ,kCAAiC;AACvE,SAASC,eAAe,QAAQ,6BAA4B;AAC5D,SAASC,SAAS,QAAQ,oCAAmC;AAC7D,SACEC,sBAAsB,QAEjB,oDAAmD;AAC1D,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,gCAAgC,QAAQ,0BAAsB;AACvE,SAASC,2BAA2B,QAAQ,yBAAqB;AACjE,OAAOC,mBAAmB,sBAAkB;AAC5C,SAASC,gBAAgB,QAAQ,oBAAgB;AAEjD,MAAMC,mBAAmB,IAAMF,cAAcG,GAAG,GAAGC,SAAS;AAE5D,0EAA0E,GAC1E,MAAMC,OAAO;AAEb;;;;CAIC,GACD,MAAMC,YAAY;AAmDlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDC,GACD,OAAO,eAAeC,YACpBC,OAA2B;QAKhBA,oBACCA;IAJZ,MAAMC,QAAQhB,sBAAsBe,QAAQC,KAAK;IACjD,MAAMC,MAAMD,QAAQd,UAAUc,SAAS;IACvC,IAAI,CAACA,SAAS,CAACC,KAAK,OAAO;QAAEC,IAAI;QAAOC,eAAe;IAAgB;IACvE,MAAMC,MAAKL,qBAAAA,QAAQJ,SAAS,YAAjBI,qBAAqBN;IAChC,MAAMY,OAAMN,eAAAA,QAAQM,GAAG,YAAXN,eAAeO,KAAKD,GAAG;IACnC,MAAME,SAASH,GAAGI,UAAU,CAAC,QAAQC,GAAG,CAACV,QAAQW,KAAK;IAEtD,MAAMC,SAA4B;QAChCC,OAAO;QACPC,iBAAiB;QACjBC,UAAU;QACVC,cAAc;QACdC,OAAO;QACPC,OAAO;QACPC,YAAY;QACZC,OAAO;QACPC,iBAAiB;QACjBC,QAAQ;QACRC,UAAU;QACVC,iBAAiB;QACjBC,SAAS,CAAC;IACZ;IAEA,MAAMZ,QAAQ,MAAMR,GACjBI,UAAU,CAAC,SACXiB,KAAK,CAAC,SAAS,MAAM1B,QAAQW,KAAK,EAClCgB,GAAG;IACN,MAAMC,UAAoBf,MAAMgB,IAAI,CAACC,GAAG,CAAC,CAACpB,MAAaqB,OAAOrB,IAAIsB,EAAE;IACpEpB,OAAOC,KAAK,GAAGe,QAAQK,MAAM;IAE7B,KAAK,MAAMC,UAAUN,QAAS;QAC5B,IAAI;YACF,MAAMO,UAAU,MAAM5C,4BAA4B;gBAAE2C;gBAAQjC;gBAAOL,WAAWS;YAAG;YACjF,IAAI8B,SAASvB,OAAOE,eAAe,IAAI;QACzC,EAAE,OAAOsB,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,0CAA0C,EAAEF,QAAQ,EAAEE;QACvE;IACF;IAEA,MAAMrB,WAAW,MAAMP,OAAOC,UAAU,CAAC,YAAYiB,KAAK,CAAC,SAAS,MAAMzB,OAAO0B,GAAG;IAEpF,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,qEAAqE;IACrEf,OAAOa,OAAO,GAAG,MAAMrC,uBAAuB;QAC5CuB,OAAOX,QAAQW,KAAK;QACpBV;QACAC;QACAoC,YAAYvB,SAASc,IAAI,CAACC,GAAG,CAAC,CAACS,UAAiBR,OAAOQ,QAAQP,EAAE;QACjEQ,QAAQ;IACV;IAEA,KAAK,MAAMD,WAAWxB,SAASc,IAAI,CAAE;QACnC,MAAMY,YAAYV,OAAOQ,QAAQP,EAAE;QACnC,MAAMU,aAAsBH,QAAQZ,GAAG,CAAC;QACxC,MAAMgB,SAASC,MAAMC,OAAO,CAACH,cACzBA,WAAWI,MAAM,CAAC,CAACd,KAAqB,OAAOA,OAAO,YAAY,CAAC,CAACA,MACpE,EAAE;QACN,KAAK,MAAMe,aAAa,IAAIC,IAAIL,QAAS;YACvC,IAAI;gBACF,MAAMnC,OACHC,UAAU,CAACvB,gBAAgB+D,SAAS,EACpCvC,GAAG,CAACqC,WACJG,MAAM,CAAC7D,2BAA2B,CAAC;gBACtCuB,OAAOI,YAAY,IAAI;YACzB,EAAE,OAAOoB,OAAO;gBACdC,QAAQD,KAAK,CAAC,CAAC,8CAA8C,EAAEW,WAAW,EAAEX;YAC9E;QACF;QACAxB,OAAOK,KAAK,IAAI,MAAMkC,YACpB9C,IACAG,OAAOC,UAAU,CAACvB,gBAAgB+B,KAAK,GACvC,aACAwB,WACA;YAAEA,WAAWzD,WAAWoE,MAAM;YAAIC,WAAWrE,WAAWsE,eAAe;QAAG;QAE5E1C,OAAOM,KAAK,IAAI,MAAMqC,YAAYlD,IAAIG,OAAOC,UAAU,CAACvB,gBAAgBgC,KAAK,GAAG,aAAauB;QAC7F7B,OAAOO,UAAU,IAAI,MAAMoC,YACzBlD,IACAG,OAAOC,UAAU,CAACvB,gBAAgBiC,UAAU,GAC5C,aACAsB;QAEF,IAAI;YACF,MAAMF,QAAQiB,GAAG,CAACJ,MAAM;YACxBxC,OAAOG,QAAQ,IAAI;QACrB,EAAE,OAAOqB,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,uCAAuC,EAAEK,WAAW,EAAEL;QACvE;IACF;IAEA,MAAMqB,cAAc;QAClBC,eAAe;QACfC,cAAc;QACdC,iBAAiB5E,WAAWoE,MAAM;QAClCS,gBAAgB7E,WAAWoE,MAAM;QACjCU,oBAAoBxD;IACtB;IACA,MAAMyD,gBAAgB;QACpB9D,OAAO;QACP+D,MAAMhF,WAAWoE,MAAM;QACvBa,OAAOjF,WAAWoE,MAAM;QACxBU,oBAAoBxD;IACtB;IACA,KAAK,MAAM4B,UAAUN,QAAS;QAC5B,MAAMsC,UAAU7D,GAAGI,UAAU,CAAC,SAASC,GAAG,CAACwB;QAC3C,IAAI;YACF,MAAMiC,OAAOD,QAAQzD,UAAU,CAAC,SAASC,GAAG,CAACR;YAC7C,IAAI,AAAC,CAAA,MAAMiE,KAAKxC,GAAG,EAAC,EAAGyC,MAAM,EAAE;gBAC7B,MAAMD,KAAKf,MAAM;gBACjBxC,OAAOQ,KAAK,IAAI;YAClB;QACF,EAAE,OAAOgB,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,oCAAoC,EAAEF,QAAQ,EAAEE;QACjE;QACAxB,OAAOU,MAAM,IAAI,MAAM6B,YAAY9C,IAAI6D,QAAQzD,UAAU,CAAC,WAAW,iBAAiBR,OAAOwD;QAC7F7C,OAAOW,QAAQ,IAAI,MAAM4B,YAAY9C,IAAI6D,QAAQzD,UAAU,CAAC,aAAa,SAASR,OAAO8D;IAC3F;IAEA,IAAI;QACF,MAAMM,YAAY5E,iBAAiBQ;QACnC,MAAMqE,QAAQ,MAAM9D,OAAOC,UAAU,CAAC,SAASkB,GAAG;QAClD,KAAK,MAAM4C,QAAQD,MAAMzC,IAAI,CAAE;YAC7B,MAAM2C,OAAOH,UAAUvC,GAAG,CAAC,CAACE,KAAOuC,KAAKf,GAAG,CAAC/C,UAAU,CAAC,WAAWC,GAAG,CAACsB;YACtE,MAAMyC,QAAQ,MAAMpE,GAAGqE,MAAM,IAAIF;YACjC,KAAK,MAAMG,UAAUF,MAAO;gBAC1B,IAAI,CAACE,OAAOP,MAAM,EAAE;gBACpB,MAAMO,OAAOnB,GAAG,CAACJ,MAAM;gBACvBxC,OAAOS,eAAe,IAAI;YAC5B;QACF;IACF,EAAE,OAAOe,OAAO;QACdC,QAAQD,KAAK,CAAC,6CAA6CA;IAC7D;IAEA,IAAI;QACF,MAAMwC,QAAQ,MAAMtF,iCAAiC;YAAC;gBAAEuF,SAAS5E;YAAM;SAAE,EAAEI;QAC3EO,OAAOY,eAAe,GAAGoD,MAAME,OAAO;IACxC,EAAE,OAAO1C,OAAO;QACdC,QAAQD,KAAK,CAAC,0CAA0CA;IAC1D;IAEA,MAAM/B,GACHI,UAAU,CAAC,cACXsE,GAAG,CAAC;QACHC,UAAU;QACVC,QAAQ;QACRC,QAAQ,CAAC,KAAK,EAAElF,QAAQW,KAAK,CAAC,QAAQ,EAAET,KAAK;QAC7CiF,QAAQ;QACRC,OAAOxE;QACPyE,IAAIrG,WAAWsE,eAAe;IAChC,GACCgC,KAAK,CAAC,IAAMC;IAEf,OAAO;QAAEpF,IAAI;OAASS;AACxB;AAEA;;;;CAIC,GACD,eAAe2C,YACblD,EAAO,EACPI,UAAe,EACf+E,KAAa,EACbC,KAAa;IAEb,IAAIX,UAAU;IACd,IAAI;QACF,IAAK,IAAIY,OAAO,GAAGA,OAAO5F,WAAW4F,QAAQ,EAAG;YAC9C,MAAMC,OAAO,MAAMlF,WAAWiB,KAAK,CAAC8D,OAAO,MAAMC,OAAOG,KAAK,CAAC/F,MAAM8B,GAAG;YACvE,IAAIgE,KAAKE,KAAK,EAAE;YAChB,MAAMC,QAAQzF,GAAGyF,KAAK;YACtBH,KAAK9D,IAAI,CAACkE,OAAO,CAAC,CAACrF,MAAaoF,MAAM1C,MAAM,CAAC1C,IAAI8C,GAAG;YACpD,MAAMsC,MAAME,MAAM;YAClBlB,WAAWa,KAAKM,IAAI;YACpB,IAAIN,KAAKM,IAAI,GAAGpG,MAAM;QACxB;IACF,EAAE,OAAOuC,OAAO;QACdC,QAAQD,KAAK,CAAC,CAAC,oCAAoC,EAAEoD,OAAO,EAAEpD;IAChE;IACA,OAAO0C;AACT;AAEA;;;;;CAKC,GACD,eAAe3B,YACb9C,EAAO,EACPI,UAAe,EACf+E,KAAa,EACbC,KAAa,EACbS,KAA8B;IAE9B,IAAIC,UAAU;IACd,IAAI;QACF,IAAK,IAAIT,OAAO,GAAGA,OAAO5F,WAAW4F,QAAQ,EAAG;YAC9C,MAAMC,OAAO,MAAMlF,WAAWiB,KAAK,CAAC8D,OAAO,MAAMC,OAAOG,KAAK,CAAC/F,MAAM8B,GAAG;YACvE,IAAIgE,KAAKE,KAAK,EAAE;YAChB,MAAMC,QAAQzF,GAAGyF,KAAK;YACtBH,KAAK9D,IAAI,CAACkE,OAAO,CAAC,CAACrF,MAAaoF,MAAM5C,MAAM,CAACxC,IAAI8C,GAAG,EAAE0C;YACtD,MAAMJ,MAAME,MAAM;YAClBG,WAAWR,KAAKM,IAAI;YACpB,IAAIN,KAAKM,IAAI,GAAGpG,MAAM;QACxB;IACF,EAAE,OAAOuC,OAAO;QACdC,QAAQD,KAAK,CAAC,CAAC,oCAAoC,EAAEoD,OAAO,EAAEpD;IAChE;IACA,OAAO+D;AACT"}