@aglyn/tenant-data-admin 1.0.0-beta.219 → 1.0.0-beta.220

package/src/tenancy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/tenant/data/admin/src/tenancy.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/server/analytics-retention'\nexport * from './lib/server/api-http'\nexport * from './lib/server/api-keys'\nexport * from './lib/server/account-emails'\nexport * from './lib/server/auth-pools'\nexport * from './lib/server/client-error-report'\n// The merchant's payment account, as a contract. Its adapter is not exported:\n// a plugin asks the contract, and the doors that only need the readiness rule\n// import `@aglyn/tenant-data-admin/server/payment-provider` directly, which\n// loads no Firebase.\nexport {\n  merchantAccountIsReady,\n  merchantAccountReadiness,\n  paymentProvider,\n} from './lib/server/payment-provider'\nexport type {\n  MerchantAccountReadiness,\n  MerchantAccountReadinessInput,\n  PaymentMode,\n  PaymentProvider,\n  PaymentProviderEvent,\n} from './lib/server/payment-provider'\nexport * from './lib/server/auth-handoff'\nexport * from './lib/server/console-domains'\nexport * from './lib/server/dns-probe'\nexport * from './lib/server/sending-domains'\nexport * from './lib/server/sender-readiness'\nexport * from './lib/server/host-sending-domain'\nexport * from './lib/server/sending-domain-debt'\nexport * from './lib/server/sending-domain-recheck'\n// The hosting seam itself, so a door can ask whether this deployment is able\n// to register a name at all before it promises the caller one.\n// `workspace-domains` re-exports the pieces its own callers share with it; the\n// provider behind it is not among them.\nexport { domainProvider } from './lib/server/domain-provider'\nexport type {\n  DomainProvider,\n  DomainProviderId,\n  DomainScope,\n} from './lib/server/domain-provider'\nexport * from './lib/server/platform-domain-names'\nexport * from './lib/server/consume-once'\nexport * from './lib/server/csp-aggregate'\nexport * from './lib/server/data-storage-gate'\nexport * from './lib/server/contact-suppression'\nexport * from './lib/server/email-suppression'\n// The double opt-in quarantine, after the module whose keying it shares and\n// whose `filterTopicSendable` is the reader that makes it a quarantine rather\n// than a stored fact.\nexport * from './lib/server/email-topic-confirmation'\nexport * from './lib/server/email-unsubscribe-link'\nexport * from './lib/server/email-flow-gate'\n// Side-effecting on purpose, for the reason `email-send-rate` below is:\n// evaluating this module INSTALLS the marketing gate on `sendEmail`, so the\n// unsubscribe header, the suppression check and the frequency ceiling reach\n// every bulk sender without a call at each server entrypoint.\nexport * from './lib/server/email-marketing-gate'\n// A consent group change (AGL-3320): the carries of the three stores above,\n// and the executor that runs a change around them.\nexport * from './lib/server/consent-group-carry'\nexport * from './lib/server/consent-group-change'\n// A person's refusal kept after the record it was written on is deleted\n// (AGL-3338): the delete's write, the list gate's read, and the change's carry.\nexport * from './lib/server/retained-refusals'\nexport * from './lib/server/sms-keywords'\nexport * from './lib/server/document-id'\nexport * from './lib/server/collection-preview-token'\nexport * from './lib/server/edit-access-authz'\nexport * from './lib/server/edit-access-token'\nexport * from './lib/server/edit-hint-token'\nexport * from './lib/server/email-metering'\n// Side-effecting on purpose (AGL-2409): evaluating this module INSTALLS the\n// platform send-rate governor on `sendEmail`. Every server surface already\n// imports this barrel, so nothing has to remember to call an installer.\nexport * from './lib/server/campaign-conversion-attribution'\nexport * from './lib/server/email-send-rate'\n// Side-effecting on purpose, for the same reason (AGL-3328): evaluating this\n// module INSTALLS the deliverability preflight on `sendEmail`, so a recipient\n// whose domain takes no mail is refused, and bulk mail behind a gateway that\n// refused its sending domain twice is held, on every send path at once.\nexport * from './lib/server/email-deliverability'\nexport * from './lib/server/email-sender-reputation'\nexport * from './lib/server/erase'\nexport * from './lib/server/erase-person'\nexport * from './lib/server/dynamic-list-materialize'\nexport * from './lib/server/firebase-admin'\nexport * from './lib/server/free-workspace-cap'\nexport * from './lib/server/ga4-measurement-protocol'\nexport * from './lib/server/host-memberships'\nexport * from './lib/server/host-visitor-records'\nexport * from './lib/server/list-members'\nexport * from './lib/server/lockdown'\nexport * from './lib/server/token-revocation'\nexport * from './lib/server/tenant-write-lockdown'\nexport * from './lib/server/outbound-send-review'\n// The same review for a published page, read where it is composed (AGL-3356).\nexport * from './lib/server/hosted-page-review'\n// Every hold, flag, lock and pause tells owners and staff through one seam (AGL-3368).\nexport * from './lib/server/risk-notice'\nexport * from './lib/server/host-email-tokens'\nexport * from './lib/server/notifications'\n// Every operator alert raises through one entry point, and every health check\n// remembers its state (AGL-3377).\nexport * from './lib/server/operator-alerts'\nexport * from './lib/server/operator-health'\nexport * from './lib/server/org-billing'\nexport * from './lib/server/organizations'\nexport * from './lib/server/duplicate-activity'\nexport * from './lib/server/duplicate-resource'\nexport * from './lib/server/workspace-domains'\nexport * from './lib/server/membership-recover-throttle'\nexport * from './lib/server/password-reset-throttle'\nexport * from './lib/server/rate-limit-store'\nexport * from './lib/server/verify-email-cooldown'\nexport * from './lib/server/vercel-drain-signature'\nexport * from './lib/server/vercel-log-drain'\nexport * from './lib/server/visitor-write-rate-limit'\nexport * from './lib/server/card-payment-velocity'\nexport * from './lib/server/console-api-rate-limit'\nexport * from './lib/server/realm-plugins'\nexport * from './lib/server/release-flags'\nexport * from './lib/server/resolve-people'\nexport * from './lib/server/member-photo'\nexport * from './lib/server/personal-data-export'\nexport * from './lib/server/media-delivery'\nexport * from './lib/server/media-download-tokens'\nexport * from './lib/server/media-quarantine'\nexport * from './lib/server/media-signing'\nexport * from './lib/server/media-storage-path'\nexport * from './lib/server/safe-equal'\nexport * from './lib/server/media-strong-digest'\nexport * from './lib/server/media-tombstone'\nexport * from './lib/server/media-variants'\nexport * from './lib/server/serve-media-cdn'\nexport * from './lib/server/serve-plugin-fetch'\nexport * from './lib/server/configured-url-fetch'\nexport * from './lib/server/sso-break-glass-owners'\nexport * from './lib/server/sso-domain-policy'\nexport * from './lib/server/sso-enforcement'\nexport * from './lib/server/sso-provisioning'\nexport * from './lib/server/update-existing'\nexport * from './lib/server/contact-company-link'\nexport * from './lib/server/contact-email-index'\nexport * from './lib/server/upsert-contact'\nexport * from './lib/server/crm-records'\n// The `nextTaskAtMs` a contact, a company and a deal carry, recomputed from\n// their open tasks by every server-side task writer (AGL-2661).\nexport * from './lib/server/crm-next-activity'\n// Where a one-to-one email's activity row lives and how the delivery\n// webhook advances it (AGL-2615).\nexport * from './lib/server/crm-email-activity'\n// What a confirmed booking files on the CRM record — the meeting and the\n// follow-up (AGL-2660).\nexport * from './lib/server/crm-booking-activity'\n// The org's email capture token and the filing of one received message\n// on the record it was with (AGL-2657).\nexport * from './lib/server/crm-inbound-email'\n// A member's own addresses in a workspace, and the signed link that\n// confirms one (AGL-2975).\nexport * from './lib/server/member-email-aliases'\nexport * from './lib/server/user-profiles'\n// The one \"New account\" staff notice per account, keyed on the auth\n// record's creation (AGL-3225).\nexport * from './lib/server/new-account-announcement'\nexport * from './lib/server/legal-acceptance'\n// The person's decision about the platform's own product email, on their\n// document and on the operator's marketing contact (AGL-3185).\nexport * from './lib/server/platform-marketing-consent'\n"],"names":["merchantAccountIsReady","merchantAccountReadiness","paymentProvider","domainProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sCAAkC;AAChD,cAAc,2BAAuB;AACrC,cAAc,2BAAuB;AACrC,cAAc,iCAA6B;AAC3C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qBAAqB;AACrB,SACEA,sBAAsB,EACtBC,wBAAwB,EACxBC,eAAe,QACV,mCAA+B;AAQtC,cAAc,+BAA2B;AACzC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,sCAAkC;AAChD,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,6EAA6E;AAC7E,+DAA+D;AAC/D,+EAA+E;AAC/E,wCAAwC;AACxC,SAASC,cAAc,QAAQ,kCAA8B;AAM7D,cAAc,wCAAoC;AAClD,cAAc,+BAA2B;AACzC,cAAc,gCAA4B;AAC1C,cAAc,oCAAgC;AAC9C,cAAc,sCAAkC;AAChD,cAAc,oCAAgC;AAC9C,4EAA4E;AAC5E,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,2CAAuC;AACrD,cAAc,yCAAqC;AACnD,cAAc,kCAA8B;AAC5C,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,8DAA8D;AAC9D,cAAc,uCAAmC;AACjD,4EAA4E;AAC5E,mDAAmD;AACnD,cAAc,sCAAkC;AAChD,cAAc,uCAAmC;AACjD,wEAAwE;AACxE,gFAAgF;AAChF,cAAc,oCAAgC;AAC9C,cAAc,+BAA2B;AACzC,cAAc,8BAA0B;AACxC,cAAc,2CAAuC;AACrD,cAAc,oCAAgC;AAC9C,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,cAAc,kDAA8C;AAC5D,cAAc,kCAA8B;AAC5C,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,cAAc,uCAAmC;AACjD,cAAc,0CAAsC;AACpD,cAAc,wBAAoB;AAClC,cAAc,+BAA2B;AACzC,cAAc,2CAAuC;AACrD,cAAc,iCAA6B;AAC3C,cAAc,qCAAiC;AAC/C,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,2BAAuB;AACrC,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,uCAAmC;AACjD,8EAA8E;AAC9E,cAAc,qCAAiC;AAC/C,uFAAuF;AACvF,cAAc,8BAA0B;AACxC,cAAc,oCAAgC;AAC9C,cAAc,gCAA4B;AAC1C,8EAA8E;AAC9E,kCAAkC;AAClC,cAAc,kCAA8B;AAC5C,cAAc,kCAA8B;AAC5C,cAAc,8BAA0B;AACxC,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,qCAAiC;AAC/C,cAAc,oCAAgC;AAC9C,cAAc,8CAA0C;AACxD,cAAc,0CAAsC;AACpD,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,mCAA+B;AAC7C,cAAc,2CAAuC;AACrD,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,gCAA4B;AAC1C,cAAc,gCAA4B;AAC1C,cAAc,iCAA6B;AAC3C,cAAc,+BAA2B;AACzC,cAAc,uCAAmC;AACjD,cAAc,iCAA6B;AAC3C,cAAc,wCAAoC;AAClD,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,cAAc,kCAA8B;AAC5C,cAAc,qCAAiC;AAC/C,cAAc,uCAAmC;AACjD,cAAc,yCAAqC;AACnD,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,uCAAmC;AACjD,cAAc,sCAAkC;AAChD,cAAc,iCAA6B;AAC3C,cAAc,8BAA0B;AACxC,4EAA4E;AAC5E,gEAAgE;AAChE,cAAc,oCAAgC;AAC9C,qEAAqE;AACrE,kCAAkC;AAClC,cAAc,qCAAiC;AAC/C,yEAAyE;AACzE,wBAAwB;AACxB,cAAc,uCAAmC;AACjD,uEAAuE;AACvE,wCAAwC;AACxC,cAAc,oCAAgC;AAC9C,oEAAoE;AACpE,2BAA2B;AAC3B,cAAc,uCAAmC;AACjD,cAAc,gCAA4B;AAC1C,oEAAoE;AACpE,gCAAgC;AAChC,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,yEAAyE;AACzE,+DAA+D;AAC/D,cAAc,6CAAyC"}
+{"version":3,"sources":["../../../../../../libs/tenant/data/admin/src/tenancy.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/server/analytics-retention'\nexport * from './lib/server/api-http'\nexport * from './lib/server/api-keys'\nexport * from './lib/server/account-emails'\nexport * from './lib/server/auth-pools'\nexport * from './lib/server/client-error-report'\n// The merchant's payment account, as a contract. Its adapter is not exported:\n// a plugin asks the contract, and the doors that only need the readiness rule\n// import `@aglyn/tenant-data-admin/server/payment-provider` directly, which\n// loads no Firebase.\nexport {\n  merchantAccountIsReady,\n  merchantAccountReadiness,\n  paymentProvider,\n} from './lib/server/payment-provider'\nexport type {\n  MerchantAccountReadiness,\n  MerchantAccountReadinessInput,\n  PaymentMode,\n  PaymentProvider,\n  PaymentProviderEvent,\n} from './lib/server/payment-provider'\nexport * from './lib/server/auth-handoff'\nexport * from './lib/server/console-domains'\nexport * from './lib/server/dns-probe'\nexport * from './lib/server/sending-domains'\nexport * from './lib/server/sender-readiness'\nexport * from './lib/server/host-sending-domain'\nexport * from './lib/server/sending-domain-debt'\nexport * from './lib/server/sending-domain-recheck'\n// The hosting seam itself, so a door can ask whether this deployment is able\n// to register a name at all before it promises the caller one.\n// `workspace-domains` re-exports the pieces its own callers share with it; the\n// provider behind it is not among them.\nexport { domainProvider } from './lib/server/domain-provider'\nexport type {\n  DomainProvider,\n  DomainProviderId,\n  DomainScope,\n} from './lib/server/domain-provider'\nexport * from './lib/server/platform-domain-names'\nexport * from './lib/server/consume-once'\nexport * from './lib/server/csp-aggregate'\nexport * from './lib/server/data-storage-gate'\nexport * from './lib/server/contact-suppression'\nexport * from './lib/server/email-suppression'\n// The double opt-in quarantine, after the module whose keying it shares and\n// whose `filterTopicSendable` is the reader that makes it a quarantine rather\n// than a stored fact.\nexport * from './lib/server/topic-subscriptions'\nexport * from './lib/server/email-unsubscribe-link'\nexport * from './lib/server/email-flow-gate'\n// Side-effecting on purpose, for the reason `email-send-rate` below is:\n// evaluating this module INSTALLS the marketing gate on `sendEmail`, so the\n// unsubscribe header, the suppression check and the frequency ceiling reach\n// every bulk sender without a call at each server entrypoint.\nexport * from './lib/server/email-marketing-gate'\n// A consent group change (AGL-3320): the carries of the three stores above,\n// and the executor that runs a change around them.\nexport * from './lib/server/consent-group-carry'\nexport * from './lib/server/consent-group-change'\n// A person's refusal kept after the record it was written on is deleted\n// (AGL-3338): the delete's write, the list gate's read, and the change's carry.\nexport * from './lib/server/retained-refusals'\nexport * from './lib/server/sms-keywords'\nexport * from './lib/server/document-id'\nexport * from './lib/server/collection-preview-token'\nexport * from './lib/server/edit-access-authz'\nexport * from './lib/server/edit-access-token'\nexport * from './lib/server/edit-hint-token'\nexport * from './lib/server/email-metering'\n// Side-effecting on purpose (AGL-2409): evaluating this module INSTALLS the\n// platform send-rate governor on `sendEmail`. Every server surface already\n// imports this barrel, so nothing has to remember to call an installer.\nexport * from './lib/server/campaign-conversion-attribution'\nexport * from './lib/server/email-send-rate'\n// Side-effecting on purpose, for the same reason (AGL-3328): evaluating this\n// module INSTALLS the deliverability preflight on `sendEmail`, so a recipient\n// whose domain takes no mail is refused, and bulk mail behind a gateway that\n// refused its sending domain twice is held, on every send path at once.\nexport * from './lib/server/email-deliverability'\nexport * from './lib/server/email-sender-reputation'\nexport * from './lib/server/erase'\nexport * from './lib/server/erase-person'\nexport * from './lib/server/dynamic-list-materialize'\nexport * from './lib/server/firebase-admin'\nexport * from './lib/server/free-workspace-cap'\nexport * from './lib/server/ga4-measurement-protocol'\nexport * from './lib/server/host-memberships'\nexport * from './lib/server/host-visitor-records'\nexport * from './lib/server/list-members'\nexport * from './lib/server/lockdown'\nexport * from './lib/server/token-revocation'\nexport * from './lib/server/tenant-write-lockdown'\nexport * from './lib/server/outbound-send-review'\n// The same review for a published page, read where it is composed (AGL-3356).\nexport * from './lib/server/hosted-page-review'\n// Every hold, flag, lock and pause tells owners and staff through one seam (AGL-3368).\nexport * from './lib/server/risk-notice'\nexport * from './lib/server/host-email-tokens'\nexport * from './lib/server/notifications'\n// Every operator alert raises through one entry point, and every health check\n// remembers its state (AGL-3377).\nexport * from './lib/server/operator-alerts'\nexport * from './lib/server/operator-health'\nexport * from './lib/server/org-billing'\nexport * from './lib/server/organizations'\nexport * from './lib/server/duplicate-activity'\nexport * from './lib/server/duplicate-resource'\nexport * from './lib/server/workspace-domains'\nexport * from './lib/server/membership-recover-throttle'\nexport * from './lib/server/password-reset-throttle'\nexport * from './lib/server/rate-limit-store'\nexport * from './lib/server/verify-email-cooldown'\nexport * from './lib/server/vercel-drain-signature'\nexport * from './lib/server/vercel-log-drain'\nexport * from './lib/server/visitor-write-rate-limit'\nexport * from './lib/server/card-payment-velocity'\nexport * from './lib/server/console-api-rate-limit'\nexport * from './lib/server/realm-plugins'\nexport * from './lib/server/release-flags'\nexport * from './lib/server/resolve-people'\nexport * from './lib/server/member-photo'\nexport * from './lib/server/personal-data-export'\nexport * from './lib/server/media-delivery'\nexport * from './lib/server/media-download-tokens'\nexport * from './lib/server/media-quarantine'\nexport * from './lib/server/media-signing'\nexport * from './lib/server/media-storage-path'\nexport * from './lib/server/safe-equal'\nexport * from './lib/server/media-strong-digest'\nexport * from './lib/server/media-tombstone'\nexport * from './lib/server/media-variants'\nexport * from './lib/server/serve-media-cdn'\nexport * from './lib/server/serve-plugin-fetch'\nexport * from './lib/server/configured-url-fetch'\nexport * from './lib/server/sso-break-glass-owners'\nexport * from './lib/server/sso-domain-policy'\nexport * from './lib/server/sso-enforcement'\nexport * from './lib/server/sso-provisioning'\nexport * from './lib/server/update-existing'\nexport * from './lib/server/contact-company-link'\nexport * from './lib/server/contact-email-index'\nexport * from './lib/server/upsert-contact'\nexport * from './lib/server/crm-records'\n// The `nextTaskAtMs` a contact, a company and a deal carry, recomputed from\n// their open tasks by every server-side task writer (AGL-2661).\nexport * from './lib/server/crm-next-activity'\n// Where a one-to-one email's activity row lives and how the delivery\n// webhook advances it (AGL-2615).\nexport * from './lib/server/crm-email-activity'\n// A member's own addresses in a workspace, and the signed link that\n// confirms one (AGL-2975).\nexport * from './lib/server/member-email-aliases'\nexport * from './lib/server/user-profiles'\n// The one \"New account\" staff notice per account, keyed on the auth\n// record's creation (AGL-3225).\nexport * from './lib/server/new-account-announcement'\nexport * from './lib/server/legal-acceptance'\n// The person's decision about the platform's own product email, on their\n// document and on the operator's marketing contact (AGL-3185).\nexport * from './lib/server/platform-marketing-consent'\n"],"names":["merchantAccountIsReady","merchantAccountReadiness","paymentProvider","domainProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,sCAAkC;AAChD,cAAc,2BAAuB;AACrC,cAAc,2BAAuB;AACrC,cAAc,iCAA6B;AAC3C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qBAAqB;AACrB,SACEA,sBAAsB,EACtBC,wBAAwB,EACxBC,eAAe,QACV,mCAA+B;AAQtC,cAAc,+BAA2B;AACzC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,sCAAkC;AAChD,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,6EAA6E;AAC7E,+DAA+D;AAC/D,+EAA+E;AAC/E,wCAAwC;AACxC,SAASC,cAAc,QAAQ,kCAA8B;AAM7D,cAAc,wCAAoC;AAClD,cAAc,+BAA2B;AACzC,cAAc,gCAA4B;AAC1C,cAAc,oCAAgC;AAC9C,cAAc,sCAAkC;AAChD,cAAc,oCAAgC;AAC9C,4EAA4E;AAC5E,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,sCAAkC;AAChD,cAAc,yCAAqC;AACnD,cAAc,kCAA8B;AAC5C,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,8DAA8D;AAC9D,cAAc,uCAAmC;AACjD,4EAA4E;AAC5E,mDAAmD;AACnD,cAAc,sCAAkC;AAChD,cAAc,uCAAmC;AACjD,wEAAwE;AACxE,gFAAgF;AAChF,cAAc,oCAAgC;AAC9C,cAAc,+BAA2B;AACzC,cAAc,8BAA0B;AACxC,cAAc,2CAAuC;AACrD,cAAc,oCAAgC;AAC9C,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,cAAc,kDAA8C;AAC5D,cAAc,kCAA8B;AAC5C,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,cAAc,uCAAmC;AACjD,cAAc,0CAAsC;AACpD,cAAc,wBAAoB;AAClC,cAAc,+BAA2B;AACzC,cAAc,2CAAuC;AACrD,cAAc,iCAA6B;AAC3C,cAAc,qCAAiC;AAC/C,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,2BAAuB;AACrC,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,uCAAmC;AACjD,8EAA8E;AAC9E,cAAc,qCAAiC;AAC/C,uFAAuF;AACvF,cAAc,8BAA0B;AACxC,cAAc,oCAAgC;AAC9C,cAAc,gCAA4B;AAC1C,8EAA8E;AAC9E,kCAAkC;AAClC,cAAc,kCAA8B;AAC5C,cAAc,kCAA8B;AAC5C,cAAc,8BAA0B;AACxC,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,qCAAiC;AAC/C,cAAc,oCAAgC;AAC9C,cAAc,8CAA0C;AACxD,cAAc,0CAAsC;AACpD,cAAc,mCAA+B;AAC7C,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,mCAA+B;AAC7C,cAAc,2CAAuC;AACrD,cAAc,wCAAoC;AAClD,cAAc,yCAAqC;AACnD,cAAc,gCAA4B;AAC1C,cAAc,gCAA4B;AAC1C,cAAc,iCAA6B;AAC3C,cAAc,+BAA2B;AACzC,cAAc,uCAAmC;AACjD,cAAc,iCAA6B;AAC3C,cAAc,wCAAoC;AAClD,cAAc,mCAA+B;AAC7C,cAAc,gCAA4B;AAC1C,cAAc,qCAAiC;AAC/C,cAAc,6BAAyB;AACvC,cAAc,sCAAkC;AAChD,cAAc,kCAA8B;AAC5C,cAAc,iCAA6B;AAC3C,cAAc,kCAA8B;AAC5C,cAAc,qCAAiC;AAC/C,cAAc,uCAAmC;AACjD,cAAc,yCAAqC;AACnD,cAAc,oCAAgC;AAC9C,cAAc,kCAA8B;AAC5C,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,uCAAmC;AACjD,cAAc,sCAAkC;AAChD,cAAc,iCAA6B;AAC3C,cAAc,8BAA0B;AACxC,4EAA4E;AAC5E,gEAAgE;AAChE,cAAc,oCAAgC;AAC9C,qEAAqE;AACrE,kCAAkC;AAClC,cAAc,qCAAiC;AAC/C,oEAAoE;AACpE,2BAA2B;AAC3B,cAAc,uCAAmC;AACjD,cAAc,gCAA4B;AAC1C,oEAAoE;AACpE,gCAAgC;AAChC,cAAc,2CAAuC;AACrD,cAAc,mCAA+B;AAC7C,yEAAyE;AACzE,+DAA+D;AAC/D,cAAc,6CAAyC"}

package/src/lib/server/contact-email-engagement.d.ts

@@ -1,32 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import type { EmailDeliveryEventOutcome } from './email-delivery-log';
-/** The facet field the stamp lives under. */
-export declare const CONTACT_EMAIL_ENGAGEMENT_FIELD = "lastEmailEngagementAtMs";
-/**
- * Stamps the sending site's contact facet for every person these outcomes
- * say engaged for the first time with a message.
- *
- * @param hostId the site the campaign went out from — the `hostId` tag the
- *   send stamped, which is the only tenant identity a delivery event carries.
- * @returns how many contact documents were written.
- */
-export declare function recordContactEmailEngagement(args: {
-    hostId: string;
-    outcomes: readonly EmailDeliveryEventOutcome[];
-    firestore?: any;
-}): Promise<number>;

package/src/lib/server/contact-email-engagement.js

@@ -1,145 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ /**
- * THE CONTACT'S OWN ENGAGEMENT STAMP (AGL-2616):
- * `facets.{groupId}.lastEmailEngagementAtMs` on `orgs/{orgId}/contacts`.
- *
- * ## What it answers
- *
- * "When did this person last read one of OUR campaigns?" — on the record
- * page as "Last engaged", as a column on the list, and as the audience rule
- * `engagedWithinDays`. The per-person rollup on `emailDeliveries/{key}`
- * already answers "when did this address last read anything from anybody",
- * which is the right question for a sunset that refuses to mail cold
- * addresses and the wrong one for a re-engagement audience: it moves when
- * the person opens a receipt, an invite, or a sibling business's newsletter
- * on the same shared row. This stamp moves only when they open or click a
- * campaign this holder's own sites sent.
- *
- * ## What one webhook event costs
- *
- * The same bound the rollup keeps: only an event that is the FIRST of its
- * type for its message reaches here, which `recordEmailDeliveryEvent`'s
- * transaction already decided. A reader opening one newsletter six times is
- * one transaction, and a replayed event finds its type already recorded and
- * contributes nothing. Inside that bound the cost per person is one org
- * resolution and one group resolution per batch, then one keyed query and
- * at most one update per person.
- *
- * ## Forward-only, in a transaction
- *
- * Provider events are unordered and at-least-once, so an old instant
- * arriving late must not overwrite a fresh stamp — the same reasoning
- * `recordPersonEngagement` gives. The query for the contact rides inside
- * the transaction so the compare-and-write is atomic against a second event
- * for the same person landing in another instance.
- *
- * ## Only a contact this site may see, and only this holder's facet
- *
- * The contact row is shared by every site in the org. The stamp is written
- * under the sending site's consent group, never at the top of the document,
- * and only onto a row whose `visibleTo` admits the site — a person another
- * holder captured and this site never met is not this site's contact, and a
- * write onto their row would mint a facet for a holder that does not hold
- * them. `updatedAt` is left alone: an open is something the person did, not
- * an edit the team made, and a list sorted on recency must not reshuffle on
- * every mailbox prefetch.
- *
- * ## Never throws
- *
- * Best-effort for the reason everything on the webhook path is: a stamp that
- * failed loses a fact a page can live without, and a stamp that threw would
- * lose the provider's acknowledgement and teach it to retry the whole event.
- */ import { contactFacetPath, normalizeContactEmail, readContactFacet, visibleToHost } from "@aglyn/aglyn/server";
-import { findContactByEmail } from "./contact-email-index.js";
-import { firebaseAdmin } from "./firebase-admin.js";
-import { consentGroupForSite, orgDataCollectionForHost } from "./organizations.js";
-/** The facet field the stamp lives under. */ export const CONTACT_EMAIL_ENGAGEMENT_FIELD = 'lastEmailEngagementAtMs';
-/** The event types that count as a person engaging with a campaign. */ const ENGAGEMENT_TYPES = new Set([
-    'opened',
-    'clicked'
-]);
-/**
- * Stamps the sending site's contact facet for every person these outcomes
- * say engaged for the first time with a message.
- *
- * @param hostId the site the campaign went out from — the `hostId` tag the
- *   send stamped, which is the only tenant identity a delivery event carries.
- * @returns how many contact documents were written.
- */ export async function recordContactEmailEngagement(args) {
-    var _args_hostId, _args_firestore;
-    const hostId = String((_args_hostId = args.hostId) != null ? _args_hostId : '');
-    if (!hostId) return 0;
-    /** Address → the newest engagement instant in this batch. */ const byEmail = new Map();
-    for (const outcome of args.outcomes){
-        var _byEmail_get;
-        if (!outcome.firstOfType) continue;
-        if (!ENGAGEMENT_TYPES.has(outcome.type)) continue;
-        const email = normalizeContactEmail(outcome.to);
-        const at = Number(outcome.at);
-        if (!email || !Number.isFinite(at) || at <= 0) continue;
-        byEmail.set(email, Math.max((_byEmail_get = byEmail.get(email)) != null ? _byEmail_get : 0, at));
-    }
-    if (!byEmail.size) return 0;
-    let contactsRef;
-    let groupId;
-    try {
-        contactsRef = await orgDataCollectionForHost(hostId, 'contacts');
-        groupId = (await consentGroupForSite(hostId)).groupId;
-    } catch (error) {
-        console.error('[contact-email-engagement] site could not be resolved', hostId, error);
-        return 0;
-    }
-    const db = (_args_firestore = args.firestore) != null ? _args_firestore : firebaseAdmin.app().firestore();
-    const field = contactFacetPath(groupId, CONTACT_EMAIL_ENGAGEMENT_FIELD);
-    let written = 0;
-    for (const [email, at] of byEmail){
-        try {
-            await db.runTransaction(async (transaction)=>{
-                var _snapshot_data, _readContactFacet_CONTACT_EMAIL_ENGAGEMENT_FIELD;
-                /*
-         * The same unscoped lookup the capture door makes — one human is one
-         * row whichever site met them, and through the address index
-         * (AGL-2633) the row is found under an address a merge folded into
-         * it too — followed by the scope check the capture door's
-         * `visibleTo` write is the source of. Read THROUGH the transaction:
-         * the stamp below is a compare-and-set against the instant this
-         * read saw.
-         */ const snapshot = await findContactByEmail(contactsRef, email, {
-                    transaction
-                });
-                if (!snapshot) return;
-                const data = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
-                if (!visibleToHost(data['visibleTo'], hostId)) {
-                    return;
-                }
-                const stored = Number((_readContactFacet_CONTACT_EMAIL_ENGAGEMENT_FIELD = readContactFacet(data, groupId)[CONTACT_EMAIL_ENGAGEMENT_FIELD]) != null ? _readContactFacet_CONTACT_EMAIL_ENGAGEMENT_FIELD : 0);
-                // Nothing moved forward, so nothing is written — the out-of-order
-                // and the replayed event are the ordinary cases this skips.
-                if (Number.isFinite(stored) && stored >= at) return;
-                transaction.update(snapshot.ref, {
-                    [field]: at
-                });
-                written += 1;
-            });
-        } catch (error) {
-            console.error('[contact-email-engagement] stamp failed', hostId, error);
-        }
-    }
-    return written;
-}
-
-//# sourceMappingURL=contact-email-engagement.js.map

package/src/lib/server/contact-email-engagement.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/contact-email-engagement.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * THE CONTACT'S OWN ENGAGEMENT STAMP (AGL-2616):\n * `facets.{groupId}.lastEmailEngagementAtMs` on `orgs/{orgId}/contacts`.\n *\n * ## What it answers\n *\n * \"When did this person last read one of OUR campaigns?\" — on the record\n * page as \"Last engaged\", as a column on the list, and as the audience rule\n * `engagedWithinDays`. The per-person rollup on `emailDeliveries/{key}`\n * already answers \"when did this address last read anything from anybody\",\n * which is the right question for a sunset that refuses to mail cold\n * addresses and the wrong one for a re-engagement audience: it moves when\n * the person opens a receipt, an invite, or a sibling business's newsletter\n * on the same shared row. This stamp moves only when they open or click a\n * campaign this holder's own sites sent.\n *\n * ## What one webhook event costs\n *\n * The same bound the rollup keeps: only an event that is the FIRST of its\n * type for its message reaches here, which `recordEmailDeliveryEvent`'s\n * transaction already decided. A reader opening one newsletter six times is\n * one transaction, and a replayed event finds its type already recorded and\n * contributes nothing. Inside that bound the cost per person is one org\n * resolution and one group resolution per batch, then one keyed query and\n * at most one update per person.\n *\n * ## Forward-only, in a transaction\n *\n * Provider events are unordered and at-least-once, so an old instant\n * arriving late must not overwrite a fresh stamp — the same reasoning\n * `recordPersonEngagement` gives. The query for the contact rides inside\n * the transaction so the compare-and-write is atomic against a second event\n * for the same person landing in another instance.\n *\n * ## Only a contact this site may see, and only this holder's facet\n *\n * The contact row is shared by every site in the org. The stamp is written\n * under the sending site's consent group, never at the top of the document,\n * and only onto a row whose `visibleTo` admits the site — a person another\n * holder captured and this site never met is not this site's contact, and a\n * write onto their row would mint a facet for a holder that does not hold\n * them. `updatedAt` is left alone: an open is something the person did, not\n * an edit the team made, and a list sorted on recency must not reshuffle on\n * every mailbox prefetch.\n *\n * ## Never throws\n *\n * Best-effort for the reason everything on the webhook path is: a stamp that\n * failed loses a fact a page can live without, and a stamp that threw would\n * lose the provider's acknowledgement and teach it to retry the whole event.\n */\n\nimport {\n  contactFacetPath,\n  normalizeContactEmail,\n  readContactFacet,\n  visibleToHost,\n} from '@aglyn/aglyn/server'\nimport { findContactByEmail } from './contact-email-index'\nimport type { EmailDeliveryEventOutcome } from './email-delivery-log'\nimport { firebaseAdmin } from './firebase-admin'\nimport { consentGroupForSite, orgDataCollectionForHost } from './organizations'\n\n/** The facet field the stamp lives under. */\nexport const CONTACT_EMAIL_ENGAGEMENT_FIELD = 'lastEmailEngagementAtMs'\n\n/** The event types that count as a person engaging with a campaign. */\nconst ENGAGEMENT_TYPES: ReadonlySet<EmailDeliveryEventOutcome['type']> = new Set([\n  'opened',\n  'clicked',\n])\n\n/**\n * Stamps the sending site's contact facet for every person these outcomes\n * say engaged for the first time with a message.\n *\n * @param hostId the site the campaign went out from — the `hostId` tag the\n *   send stamped, which is the only tenant identity a delivery event carries.\n * @returns how many contact documents were written.\n */\nexport async function recordContactEmailEngagement(args: {\n  hostId: string\n  outcomes: readonly EmailDeliveryEventOutcome[]\n  firestore?: any\n}): Promise<number> {\n  const hostId = String(args.hostId ?? '')\n  if (!hostId) return 0\n\n  /** Address → the newest engagement instant in this batch. */\n  const byEmail = new Map<string, number>()\n  for (const outcome of args.outcomes) {\n    if (!outcome.firstOfType) continue\n    if (!ENGAGEMENT_TYPES.has(outcome.type)) continue\n    const email = normalizeContactEmail(outcome.to)\n    const at = Number(outcome.at)\n    if (!email || !Number.isFinite(at) || at <= 0) continue\n    byEmail.set(email, Math.max(byEmail.get(email) ?? 0, at))\n  }\n  if (!byEmail.size) return 0\n\n  let contactsRef: FirebaseFirestore.CollectionReference\n  let groupId: string\n  try {\n    contactsRef = await orgDataCollectionForHost(hostId, 'contacts')\n    groupId = (await consentGroupForSite(hostId)).groupId\n  } catch (error) {\n    console.error('[contact-email-engagement] site could not be resolved', hostId, error)\n    return 0\n  }\n\n  const db = args.firestore ?? firebaseAdmin.app().firestore()\n  const field = contactFacetPath(groupId, CONTACT_EMAIL_ENGAGEMENT_FIELD)\n  let written = 0\n  for (const [email, at] of byEmail) {\n    try {\n      await db.runTransaction(async (transaction: any) => {\n        /*\n         * The same unscoped lookup the capture door makes — one human is one\n         * row whichever site met them, and through the address index\n         * (AGL-2633) the row is found under an address a merge folded into\n         * it too — followed by the scope check the capture door's\n         * `visibleTo` write is the source of. Read THROUGH the transaction:\n         * the stamp below is a compare-and-set against the instant this\n         * read saw.\n         */\n        const snapshot = await findContactByEmail(contactsRef, email, { transaction })\n        if (!snapshot) return\n        const data = (snapshot.data() ?? {}) as Record<string, unknown>\n        if (!visibleToHost(data['visibleTo'] as string[] | undefined, hostId)) {\n          return\n        }\n        const stored = Number(\n          readContactFacet(data, groupId)[CONTACT_EMAIL_ENGAGEMENT_FIELD] ?? 0,\n        )\n        // Nothing moved forward, so nothing is written — the out-of-order\n        // and the replayed event are the ordinary cases this skips.\n        if (Number.isFinite(stored) && stored >= at) return\n        transaction.update(snapshot.ref, { [field]: at })\n        written += 1\n      })\n    } catch (error) {\n      console.error('[contact-email-engagement] stamp failed', hostId, error)\n    }\n  }\n  return written\n}\n"],"names":["contactFacetPath","normalizeContactEmail","readContactFacet","visibleToHost","findContactByEmail","firebaseAdmin","consentGroupForSite","orgDataCollectionForHost","CONTACT_EMAIL_ENGAGEMENT_FIELD","ENGAGEMENT_TYPES","Set","recordContactEmailEngagement","args","hostId","String","byEmail","Map","outcome","outcomes","firstOfType","has","type","email","to","at","Number","isFinite","set","Math","max","get","size","contactsRef","groupId","error","console","db","firestore","app","field","written","runTransaction","transaction","snapshot","data","stored","update","ref"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDC,GAED,SACEA,gBAAgB,EAChBC,qBAAqB,EACrBC,gBAAgB,EAChBC,aAAa,QACR,sBAAqB;AAC5B,SAASC,kBAAkB,QAAQ,2BAAuB;AAE1D,SAASC,aAAa,QAAQ,sBAAkB;AAChD,SAASC,mBAAmB,EAAEC,wBAAwB,QAAQ,qBAAiB;AAE/E,2CAA2C,GAC3C,OAAO,MAAMC,iCAAiC,0BAAyB;AAEvE,qEAAqE,GACrE,MAAMC,mBAAmE,IAAIC,IAAI;IAC/E;IACA;CACD;AAED;;;;;;;CAOC,GACD,OAAO,eAAeC,6BAA6BC,IAIlD;QACuBA,cAyBXA;IAzBX,MAAMC,SAASC,QAAOF,eAAAA,KAAKC,MAAM,YAAXD,eAAe;IACrC,IAAI,CAACC,QAAQ,OAAO;IAEpB,2DAA2D,GAC3D,MAAME,UAAU,IAAIC;IACpB,KAAK,MAAMC,WAAWL,KAAKM,QAAQ,CAAE;YAMPH;QAL5B,IAAI,CAACE,QAAQE,WAAW,EAAE;QAC1B,IAAI,CAACV,iBAAiBW,GAAG,CAACH,QAAQI,IAAI,GAAG;QACzC,MAAMC,QAAQrB,sBAAsBgB,QAAQM,EAAE;QAC9C,MAAMC,KAAKC,OAAOR,QAAQO,EAAE;QAC5B,IAAI,CAACF,SAAS,CAACG,OAAOC,QAAQ,CAACF,OAAOA,MAAM,GAAG;QAC/CT,QAAQY,GAAG,CAACL,OAAOM,KAAKC,GAAG,EAACd,eAAAA,QAAQe,GAAG,CAACR,kBAAZP,eAAsB,GAAGS;IACvD;IACA,IAAI,CAACT,QAAQgB,IAAI,EAAE,OAAO;IAE1B,IAAIC;IACJ,IAAIC;IACJ,IAAI;QACFD,cAAc,MAAMzB,yBAAyBM,QAAQ;QACrDoB,UAAU,AAAC,CAAA,MAAM3B,oBAAoBO,OAAM,EAAGoB,OAAO;IACvD,EAAE,OAAOC,OAAO;QACdC,QAAQD,KAAK,CAAC,yDAAyDrB,QAAQqB;QAC/E,OAAO;IACT;IAEA,MAAME,MAAKxB,kBAAAA,KAAKyB,SAAS,YAAdzB,kBAAkBP,cAAciC,GAAG,GAAGD,SAAS;IAC1D,MAAME,QAAQvC,iBAAiBiC,SAASzB;IACxC,IAAIgC,UAAU;IACd,KAAK,MAAM,CAAClB,OAAOE,GAAG,IAAIT,QAAS;QACjC,IAAI;YACF,MAAMqB,GAAGK,cAAc,CAAC,OAAOC;oBAYfC,gBAKZzC;gBAhBF;;;;;;;;SAQC,GACD,MAAMyC,WAAW,MAAMvC,mBAAmB4B,aAAaV,OAAO;oBAAEoB;gBAAY;gBAC5E,IAAI,CAACC,UAAU;gBACf,MAAMC,QAAQD,iBAAAA,SAASC,IAAI,cAAbD,iBAAmB,CAAC;gBAClC,IAAI,CAACxC,cAAcyC,IAAI,CAAC,YAAY,EAA0B/B,SAAS;oBACrE;gBACF;gBACA,MAAMgC,SAASpB,QACbvB,mDAAAA,iBAAiB0C,MAAMX,QAAQ,CAACzB,+BAA+B,YAA/DN,mDAAmE;gBAErE,kEAAkE;gBAClE,4DAA4D;gBAC5D,IAAIuB,OAAOC,QAAQ,CAACmB,WAAWA,UAAUrB,IAAI;gBAC7CkB,YAAYI,MAAM,CAACH,SAASI,GAAG,EAAE;oBAAE,CAACR,MAAM,EAAEf;gBAAG;gBAC/CgB,WAAW;YACb;QACF,EAAE,OAAON,OAAO;YACdC,QAAQD,KAAK,CAAC,2CAA2CrB,QAAQqB;QACnE;IACF;IACA,OAAOM;AACT"}

package/src/lib/server/crm-booking-activity.d.ts

@@ -1,86 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { type CrmActivityLink } from '@aglyn/aglyn/server';
-export interface CrmBookingRecordInput {
-    hostId: string;
-    /**
-     * The owning org, as `getOrgForHost` returns it — the plugin set, the
-     * consent groups and the scope default are all read off it.
-     */
-    org: Record<string, unknown> | null | undefined;
-    orgId: string;
-    /** The booking as its row was written. */
-    booking: {
-        id: string;
-        serviceId?: string;
-        serviceName?: string;
-        email?: string;
-        startsAtMs: number;
-        endsAtMs: number;
-        /** The `crm` query value the link carried, kept on the row. */
-        crmRef?: string | null;
-    };
-    /** The service as stored: its two CRM switches and its timezone. */
-    service: {
-        name?: string;
-        timezone?: string;
-        crmFollowUpTask?: boolean;
-        crmMeetingActivity?: boolean;
-    } | null | undefined;
-    /**
-     * The host document's plugin fields, when the caller already holds them;
-     * read here otherwise. The deny-list is per site, and a site that has
-     * switched the CRM off must file nothing.
-     */
-    host?: {
-        disabledPlugins?: string[];
-        enabledPlugins?: string[];
-    } | null;
-}
-export type CrmBookingRecordOutcome = {
-    filed: false;
-    reason: 
-    /** The CRM plugin does not run on this site. */
-    'crm-off'
-    /**
-     * The org's plan does not carry the CRM suite, whose activities and
-     * tasks these are (AGL-2787).
-     */
-     | 'not-entitled'
-    /** Neither the reference nor the address named a record. */
-     | 'no-record'
-    /** A meeting for this booking is already on the timeline. */
-     | 'already-filed'
-    /** The service asks for neither a meeting nor a follow-up. */
-     | 'nothing-to-file'
-    /** A read or a write threw; logged, and nothing is promised. */
-     | 'failed';
-} | {
-    filed: true;
-    /** How the record was found. */
-    matchedBy: 'crmRef' | 'email';
-    link: CrmActivityLink;
-    /** The meeting's id, or `null` when the service files no meeting. */
-    activityId: string | null;
-    /** The follow-up's id, or `null` when the service asks for none. */
-    taskId: string | null;
-};
-/**
- * Files what a confirmed booking owes the CRM: the meeting, and the
- * follow-up when the service asks for one. See the module comment.
- */
-export declare function recordCrmBooking(firestore: FirebaseFirestore.Firestore, input: CrmBookingRecordInput): Promise<CrmBookingRecordOutcome>;

package/src/lib/server/crm-booking-activity.js

@@ -1,257 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { checkEntitlement, consentGroupForHost, CRM_COLLECTIONS, crmTaskListFields, crmActivityLogHasRoom, crmBookingFollowUpDueMs, crmBookingFollowUpTitle, crmBookingMeetingBody, crmScopeTokens, isHostPluginEnabled, parseCrmBookingRef, readContactFacet, visibleToHost } from "@aglyn/aglyn/server";
-import { FieldValue } from "firebase-admin/firestore";
-import { findContactByEmail } from "./contact-email-index.js";
-import { readLeadForHost } from "./host-visitor-records.js";
-import { countCrmActivitiesForRecord } from "./crm-records.js";
-/**
- * WHAT A BOOKING FILES ON THE CRM RECORD (AGL-2660).
- *
- * A confirmed booking is a meeting the record has on its calendar, and the
- * timeline should say so without a rep logging it by hand. So once a
- * booking's row is written — at creation for a free service, on payment
- * for a paid one — the record is found and a `meeting` activity filed under
- * it, with a follow-up task beside it when the service asks for one.
- *
- * ## Which record
- *
- * The reference the booking link carried wins: `crmRef` names the contact,
- * lead or deal the rep dropped the link from, and a booking made through
- * that link belongs to that record even when the booker typed a different
- * address. Without one — a booking taken off the widget cold — the booker's
- * address is looked up through the org's address index, narrowed to this
- * site, exactly as the automation steps resolve an event's contact. A
- * reference to a record the site cannot see, or that no longer exists,
- * falls through to the address rather than filing under nobody.
- *
- * ## Where it lives
- *
- * In the admin library rather than the Bookings plugin, because the row is
- * a CRM record: its scope, its ceiling and its collections are the CRM's,
- * and a plugin that stamped its own would be a second creator to keep in
- * step with `crmScopeTokens`. The Bookings plugin passes what it already
- * holds and reads the outcome; the CRM plugin is never imported.
- *
- * Firestore is a parameter, as in `crm-records.ts`: the callers hold one,
- * and a module that reached for the Admin app itself would drag it into
- * every spec that only wants the arithmetic.
- *
- * ## Failure posture
- *
- * **Never throws.** A booking that could not be filed on the CRM is still
- * a booking — the guest has the slot and the confirmation — so a failure
- * here is logged and reported in the outcome, never raised into the
- * request that took the booking or the webhook that confirmed it.
- */ /** The CRM plugin's id, as `enabledPlugins` and `disabledPlugins` name it. */ const CRM_PLUGIN_ID = 'crm';
-/**
- * The record a booking belongs to — the reference first, the address second.
- */ async function resolveBookingRecord(firestore, input, groupId) {
-    var _hit_data;
-    const { hostId, orgId } = input;
-    const orgRef = firestore.collection('orgs').doc(orgId);
-    const contactsRef = orgRef.collection('contacts');
-    const ref = parseCrmBookingRef(input.booking.crmRef);
-    if ((ref == null ? void 0 : ref.kind) === 'contact') {
-        const contact = await contactsRef.doc(ref.id).get();
-        if (contact.exists && visibleToHost(contact.get('visibleTo'), hostId)) {
-            var _contact_data;
-            const facet = readContactFacet((_contact_data = contact.data()) != null ? _contact_data : {}, groupId);
-            return _extends({
-                link: _extends({
-                    contactId: contact.id
-                }, facet.companyId ? {
-                    companyId: facet.companyId
-                } : {}),
-                matchedBy: 'crmRef'
-            }, facet.ownerUid ? {
-                ownerUid: facet.ownerUid
-            } : {});
-        }
-    }
-    if ((ref == null ? void 0 : ref.kind) === 'deal') {
-        const deal = await orgRef.collection(CRM_COLLECTIONS.deals).doc(ref.id).get();
-        if (deal.exists && visibleToHost(deal.get('visibleTo'), hostId)) {
-            var _deal_get, _deal_get1, _deal_get2;
-            const contactId = String((_deal_get = deal.get('contactId')) != null ? _deal_get : '');
-            const companyId = String((_deal_get1 = deal.get('companyId')) != null ? _deal_get1 : '');
-            const ownerUid = String((_deal_get2 = deal.get('ownerUid')) != null ? _deal_get2 : '');
-            return _extends({
-                link: _extends({
-                    dealId: deal.id
-                }, contactId ? {
-                    contactId
-                } : {}, companyId ? {
-                    companyId
-                } : {}),
-                matchedBy: 'crmRef'
-            }, ownerUid ? {
-                ownerUid
-            } : {});
-        }
-    }
-    if ((ref == null ? void 0 : ref.kind) === 'lead') {
-        /*
-     * A lead carries its own `visibleTo` now (AGL-3275) — it used to be
-     * host-scoped by path, and the comment here said so. The seam reads the
-     * org row, and the site has to be allowed to see it before a booking is
-     * filed against it, or one brand's booking would name another's lead.
-     */ const lead = await readLeadForHost(hostId, ref.id);
-        if (lead && visibleToHost(lead.get('visibleTo'), hostId)) {
-            var _lead_get;
-            const ownerUid = String((_lead_get = lead.get('ownerUid')) != null ? _lead_get : '');
-            return _extends({
-                link: {
-                    leadId: lead.id
-                },
-                matchedBy: 'crmRef'
-            }, ownerUid ? {
-                ownerUid
-            } : {});
-        }
-    }
-    const hit = await findContactByEmail(contactsRef, input.booking.email, {
-        hostId
-    });
-    if (!hit) return null;
-    const facet = readContactFacet((_hit_data = hit.data()) != null ? _hit_data : {}, groupId);
-    return _extends({
-        link: _extends({
-            contactId: hit.id
-        }, facet.companyId ? {
-            companyId: facet.companyId
-        } : {}),
-        matchedBy: 'email'
-    }, facet.ownerUid ? {
-        ownerUid: facet.ownerUid
-    } : {});
-}
-/**
- * Files what a confirmed booking owes the CRM: the meeting, and the
- * follow-up when the service asks for one. See the module comment.
- */ export async function recordCrmBooking(firestore, input) {
-    const { hostId, orgId, booking, service } = input;
-    try {
-        var _data, _input_org, _input_org1, _input_org2, _ref, _ref1;
-        if (!hostId || !orgId || !(booking == null ? void 0 : booking.id)) return {
-            filed: false,
-            reason: 'failed'
-        };
-        const wantsMeeting = (service == null ? void 0 : service.crmMeetingActivity) !== false;
-        const wantsTask = (service == null ? void 0 : service.crmFollowUpTask) === true;
-        if (!wantsMeeting && !wantsTask) return {
-            filed: false,
-            reason: 'nothing-to-file'
-        };
-        const host = input.host === undefined ? (_data = (await firestore.collection('hosts').doc(hostId).get()).data()) != null ? _data : null : input.host;
-        if (!isHostPluginEnabled((_input_org = input.org) != null ? _input_org : null, host, CRM_PLUGIN_ID)) {
-            return {
-                filed: false,
-                reason: 'crm-off'
-            };
-        }
-        if (!checkEntitlement(input.org, 'crm')) {
-            return {
-                filed: false,
-                reason: 'not-entitled'
-            };
-        }
-        const orgRef = firestore.collection('orgs').doc(orgId);
-        const activities = orgRef.collection(CRM_COLLECTIONS.activities);
-        // One meeting per booking, whatever path re-enters: the paid webhook is
-        // redelivered for days after any 500, and its own guard is the status,
-        // which this row is not part of.
-        const already = await activities.where('bookingId', '==', booking.id).limit(1).get();
-        if (!already.empty) return {
-            filed: false,
-            reason: 'already-filed'
-        };
-        const group = consentGroupForHost((_input_org1 = input.org) != null ? _input_org1 : null, hostId);
-        const record = await resolveBookingRecord(firestore, input, group.groupId);
-        if (!record) return {
-            filed: false,
-            reason: 'no-record'
-        };
-        const visibleTo = crmScopeTokens((_input_org2 = input.org) != null ? _input_org2 : null, group);
-        const serviceName = String((_ref = (_ref1 = service == null ? void 0 : service.name) != null ? _ref1 : booking.serviceName) != null ? _ref : '').trim();
-        const timezone = (service == null ? void 0 : service.timezone) || undefined;
-        let activityId = null;
-        if (wantsMeeting) {
-            // The per-record ceiling (AGL-2611): a full log refuses the meeting
-            // but not the follow-up — a task is owed either way.
-            const logged = await countCrmActivitiesForRecord(orgRef, record.link);
-            if (crmActivityLogHasRoom(logged)) {
-                const activity = _extends({
-                    kind: 'meeting',
-                    body: crmBookingMeetingBody({
-                        serviceName,
-                        startsAtMs: booking.startsAtMs,
-                        timezone
-                    }),
-                    // When it HAPPENS, which is the slot — not when it was booked.
-                    atMs: booking.startsAtMs,
-                    byUid: ''
-                }, record.link, {
-                    bookingId: booking.id,
-                    hostId,
-                    visibleTo,
-                    createdAt: FieldValue.serverTimestamp(),
-                    updatedAt: FieldValue.serverTimestamp()
-                });
-                const written = await activities.add(activity);
-                activityId = written.id;
-            }
-        }
-        let taskId = null;
-        if (wantsTask) {
-            const task = _extends({
-                title: crmBookingFollowUpTitle(serviceName),
-                kind: 'todo',
-                priority: 'normal',
-                status: 'open',
-                dueAtMs: crmBookingFollowUpDueMs(booking.endsAtMs, timezone)
-            }, record.ownerUid ? {
-                assigneeUid: record.ownerUid
-            } : {}, {
-                createdByUid: ''
-            }, record.link, {
-                hostId,
-                visibleTo,
-                createdAt: FieldValue.serverTimestamp(),
-                updatedAt: FieldValue.serverTimestamp()
-            });
-            // What the Tasks list searches by (AGL-3321), beside the task.
-            const written = await orgRef.collection(CRM_COLLECTIONS.tasks).add(_extends({}, task, crmTaskListFields(task)));
-            taskId = written.id;
-        }
-        return {
-            filed: true,
-            matchedBy: record.matchedBy,
-            link: record.link,
-            activityId,
-            taskId
-        };
-    } catch (error) {
-        console.error('[crm] booking could not be filed', hostId, booking == null ? void 0 : booking.id, error);
-        return {
-            filed: false,
-            reason: 'failed'
-        };
-    }
-}
-
-//# sourceMappingURL=crm-booking-activity.js.map