@aglyn/tenant-runtime 1.0.0-beta.221 → 1.0.0-beta.222

package/src/lib/assign-contact-owner.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../libs/tenant/runtime/src/lib/assign-contact-owner.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  assignmentRuleMatches,\n  consentGroupForHost,\n  contactFacetPath,\n  type ContactSource,\n  CRM_ROUND_ROBIN_LAST_ASSIGNED_PATH,\n  type CrmAssignmentTarget,\n  personKey,\n  readContactFacet,\n  readCrmAssignmentSettings,\n  roundRobinOrder,\n} from '@aglyn/aglyn/server'\nimport {\n  firebaseAdmin,\n  getHostDocAdmin,\n  getOrgForHost,\n  hostDisplayName,\n  notifyUsers,\n  restampCrmListFieldsAt,\n} from '@aglyn/tenant-data-admin'\nimport { FieldValue } from 'firebase-admin/firestore'\n\n/**\n * WHO A NEW RECORD BELONGS TO — the one place an owner is decided on the\n * server (AGL-2618).\n *\n * Two entry points over one transaction. `assignOwnerForCapture` is the\n * capture door's pass: it runs the org's assignment rules in order, falls\n * back to the capturing site's default owner, and touches only a record\n * that has NO owner — a door that named one (the console's drawer, an\n * import column, a conversion with a picked owner) has expressed a person's\n * choice. `reassignContactOwner` is the automation's: an author who put\n * \"assign an owner\" on a stage change means to reassign, and the step hands\n * this either a member or the rotation.\n *\n * ## One transaction, because the pointer is shared\n *\n * The round-robin pool's pointer lives on the org document, and two\n * captures landing together must take two different members. Firestore\n * transactions serialize on what they read, so the org document, the\n * contact and the roster documents are all read inside the transaction and\n * the pointer is advanced in the same commit that writes the owner: a\n * concurrent capture that read the same pointer retries and reads the moved\n * one. The alternative — read the pointer, decide, then write — is exactly\n * the read-then-write shape that lets two captures pick the same person.\n *\n * ## The roster is checked, once per member per attempt\n *\n * A rule may name a member who has since left, and a pool may hold one. A\n * rule naming nobody on the roster is passed over rather than stopping the\n * pass — the next rule may well assign — and a pool member who is gone is\n * skipped for the next in the order. `orgs/{orgId}/members/{uid}` is keyed\n * by uid, so the check is one document read per candidate, and only the\n * roster is consulted: a project-level Auth lookup would admit people who\n * are not on this organization at all (AGL-1122).\n *\n * ## The lead follows the contact\n *\n * The capture doors that file a lead (`addHostLead`: a form routed to leads,\n * a sign-up, a booking) key it by `personKey(email)`, so the lead's document\n * is addressable from the capture alone. When it exists it is given the same\n * owner in the same transaction; two doors write the lead AFTER the contact\n * they `void`ed, so for those sources the mirror is retried a few times over\n * the next seconds, detached, and the person's Leads list shows the owner\n * as soon as the lead is there.\n *\n * ## The owner is told, unless they chose themselves\n *\n * One console notification per assignment, for the record the recipient\n * will open: the lead when the site holds one for this person, the contact\n * otherwise. Not when the actor IS the new owner — a rep who converts a\n * lead into their own contact has not been handed anything.\n *\n * ## Never rejects\n *\n * The capture has already succeeded and a form submission must not fail\n * because the CRM could not decide who follows up; a failure is logged and\n * answered as `none`, and the record is exactly as assignable by hand as it\n * was before this existed. The automation executor turns a `none` into the\n * step's recorded error.\n */\n\nexport interface OwnerAssignmentInput {\n  hostId: string\n  /** `orgs/{orgId}/contacts/{contactId}` — the record the owner is written on. */\n  contactId: string\n  /** The contact's address, which keys the lead and names the person in the notification. */\n  email: string\n  /**\n   * The signed-in person making the assignment, when there is one. Never\n   * notified about their own choice; absent for a capture and an automation.\n   */\n  actorUid?: string | null\n}\n\nexport interface CaptureAssignmentInput extends OwnerAssignmentInput {\n  source: ContactSource\n  /** The form the capture came through, for a rule conditioned on it. */\n  formId?: string | null\n  /** The tags the capture carried; the contact's own are read from the facet. */\n  tags?: readonly string[]\n}\n\nexport interface ReassignmentInput extends OwnerAssignmentInput {\n  assign: CrmAssignmentTarget\n}\n\n/** Why an assignment assigned nobody — the automation reports these verbatim. */\nexport type OwnerAssignmentRefusal =\n  | 'no-org'\n  | 'no-contact'\n  | 'no-rule'\n  | 'empty-pool'\n  | 'not-a-member'\n  | 'failed'\n\n/** What decided an assignment: a rule, the site default, the step's member, or the rotation. */\nexport type OwnerAssignedBy = 'rule' | 'default' | 'member' | 'roundRobin'\n\nexport type OwnerAssignment =\n  | {\n      outcome: 'assigned'\n      ownerUid: string\n      by: OwnerAssignedBy\n      /** The rule that decided it, when one did. */\n      ruleId?: string\n      /** The lead document existed and now carries the owner too. */\n      leadMirrored: boolean\n      /** A notification was fanned out to the new owner. */\n      notified: boolean\n    }\n  /** The record already had this owner (a capture), or the same one was named again (a reassignment). */\n  | { outcome: 'unchanged'; ownerUid: string }\n  | { outcome: 'none'; reason: OwnerAssignmentRefusal }\n\n/** The words the run history and the log give each refusal. */\nexport const OWNER_ASSIGNMENT_REFUSALS: Record<OwnerAssignmentRefusal, string> = {\n  'no-org': 'this site has no organization',\n  'no-contact': 'the contact no longer exists',\n  'no-rule': 'no assignment rule matched and the site has no default owner',\n  'empty-pool': 'the round-robin pool has nobody on the roster in it',\n  'not-a-member': 'the owner named is not on the team',\n  failed: 'the owner could not be assigned',\n}\n\n/**\n * The doors whose lead lands after the contact they `void`ed — the ones the\n * mirror is worth retrying for. An order, an import, a manual add and an\n * API call file no lead, and a retry for them would be reads for nothing.\n */\nconst LEAD_FILING_SOURCES: ReadonlySet<ContactSource> = new Set([\n  'form',\n  'member',\n  'booking',\n])\n\n/** How long the detached lead mirror waits between its looks, in order. */\nconst LEAD_MIRROR_RETRY_MS: readonly number[] = [1_000, 2_000, 3_000]\n\ntype Policy =\n  | { kind: 'capture'; input: CaptureAssignmentInput }\n  | { kind: 'reassign'; input: ReassignmentInput }\n\ninterface Decision {\n  ownerUid: string\n  by: OwnerAssignedBy\n  ruleId?: string\n  /** The pointer moves only when the rotation chose. */\n  advancePointer: boolean\n}\n\n/**\n * The console path the owner's notification opens, in the `/{hostDocId}/rest`\n * shape every host notification uses — the console rewrites it to\n * `/{orgSlug}/hosts/{subdomain}/rest` when the link is followed, which is\n * why `hostId` and `orgId` travel on the document. The same spelling the\n * CRM's task notification uses; the hub's own route builder lives in the\n * plugin, which this layer cannot import.\n */\nfunction recordLink(hostId: string, record: AssignedRecord): string {\n  const section = record.kind === 'contact' ? 'contacts' : 'leads'\n  return `/${hostId}/crm/${section}/${encodeURIComponent(record.id)}`\n}\n\n/** The record an assignment notification opens. */\nexport type AssignedRecord =\n  | { kind: 'contact'; id: string }\n  | { kind: 'lead'; id: string }\n\n/**\n * Tells a member a record is now theirs — one console notification, typed\n * by the record it opens — unless the member handed it to themselves.\n * Shared by the pass above and by the routes where a person picks the\n * owner outright (a lead conversion naming a colleague), so every server\n * path that writes `ownerUid` says so in the same words. Never throws;\n * the fan-out swallows its own failures.\n */\nexport async function notifyRecordAssigned(input: {\n  hostId: string\n  orgId: string\n  ownerUid: string\n  actorUid?: string | null\n  record: AssignedRecord\n  /** How the person reads in the message: their name, else their address. */\n  who: string\n}): Promise<boolean> {\n  if (!input.ownerUid || input.ownerUid === (input.actorUid ?? '')) return false\n  const lead = input.record.kind === 'lead'\n  /*\n   * THE BODY SAYS WHAT HAPPENED, AND ON WHICH SITE (AGL-3432).\n   *\n   * It was the bare name, so a member who owns records on several sites read\n   * \"Ada\" in an email body and could not tell what Ada was or where. The\n   * site's name is one request-cached read of a document most callers have\n   * already paid for, taken only when somebody is actually notified; a read\n   * that fails drops the \"on {site}\" clause rather than the notification.\n   */\n  let site = ''\n  try {\n    const host = await getHostDocAdmin(input.hostId)\n    if (host) site = ` on ${hostDisplayName(host, input.hostId)}`\n  } catch {\n    // The clause goes, never the notification.\n  }\n  await notifyUsers([input.ownerUid], {\n    type: lead ? 'content.leadAssigned' : 'content.contactAssigned',\n    title: lead ? 'Lead assigned to you' : 'Contact assigned to you',\n    body: `${input.who} was assigned to you as a ${lead ? 'lead' : 'contact'}${site}.`,\n    link: recordLink(input.hostId, input.record),\n    orgId: input.orgId,\n    hostId: input.hostId,\n  })\n  return true\n}\n\nasync function assignOwner(policy: Policy): Promise<OwnerAssignment> {\n  const { input } = policy\n  try {\n    const resolved = await getOrgForHost(input.hostId)\n    if (!resolved) return { outcome: 'none', reason: 'no-org' }\n    const { orgId } = resolved\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(orgId)\n    const contactRef = orgRef.collection('contacts').doc(input.contactId)\n    const membersRef = orgRef.collection('members')\n    const leadKey = personKey(input.email)\n    // Beside the contact on the org, keyed by the same address (AGL-3275).\n    const leadRef = leadKey ? orgRef.collection('leads').doc(leadKey) : null\n\n    let contactName = ''\n    const verdict = await firestore.runTransaction(\n      async (tx): Promise<OwnerAssignment> => {\n        /*\n         * ALL READS BEFORE THE WRITE, which Firestore requires. The org\n         * document is read here rather than trusted from `getOrgForHost`,\n         * because the pointer it carries is the one thing a concurrent\n         * capture may have moved, and the rules and the pool are read from\n         * the same snapshot so the decision and the pointer agree.\n         */\n        const [orgSnapshot, contactSnapshot, leadSnapshot] = await Promise.all([\n          tx.get(orgRef),\n          tx.get(contactRef),\n          leadRef ? tx.get(leadRef) : Promise.resolve(null),\n        ])\n        if (!contactSnapshot.exists) {\n          return { outcome: 'none', reason: 'no-contact' }\n        }\n        const org = (orgSnapshot.data() ?? {}) as Record<string, unknown>\n        const contact = (contactSnapshot.data() ?? {}) as Record<string, unknown>\n        contactName = String(contact['name'] ?? '')\n        const group = consentGroupForHost(org, input.hostId)\n        const facet = readContactFacet(contact, group.groupId)\n        const current = typeof facet.ownerUid === 'string' ? facet.ownerUid : ''\n        if (policy.kind === 'capture' && current) {\n          return { outcome: 'unchanged', ownerUid: current }\n        }\n        const settings = readCrmAssignmentSettings(org)\n\n        // One read per candidate per attempt; a retried transaction reads\n        // afresh, as it must.\n        const onRoster = new Map<string, Promise<boolean>>()\n        const isMember = (uid: string): Promise<boolean> => {\n          let known = onRoster.get(uid)\n          if (!known) {\n            known = tx.get(membersRef.doc(uid)).then((snapshot) => snapshot.exists)\n            onRoster.set(uid, known)\n          }\n          return known\n        }\n        const fromPool = async (): Promise<string | null> => {\n          for (const uid of roundRobinOrder(\n            settings.pool.memberUids,\n            settings.pool.lastAssignedUid,\n          )) {\n            if (await isMember(uid)) return uid\n          }\n          return null\n        }\n        const resolveTarget = async (\n          target: CrmAssignmentTarget,\n        ): Promise<{ uid: string; advancePointer: boolean } | null> => {\n          if ('roundRobin' in target) {\n            const uid = await fromPool()\n            return uid ? { uid, advancePointer: true } : null\n          }\n          return (await isMember(target.memberUid))\n            ? { uid: target.memberUid, advancePointer: false }\n            : null\n        }\n\n        let decision: Decision | null = null\n        let refusal: OwnerAssignmentRefusal = 'no-rule'\n        if (policy.kind === 'capture') {\n          const capture = {\n            source: policy.input.source,\n            email: input.email,\n            formId: policy.input.formId ?? null,\n            tags: [...(policy.input.tags ?? []), ...(facet.tags ?? [])],\n          }\n          for (const rule of settings.rules) {\n            if (!assignmentRuleMatches(rule.when, capture)) continue\n            const hit = await resolveTarget(rule.assign)\n            if (hit) {\n              decision = { ...hit, ownerUid: hit.uid, by: 'rule', ruleId: rule.id }\n              break\n            }\n          }\n          const fallback = settings.hostDefaultOwners[input.hostId]\n          if (!decision && fallback && (await isMember(fallback))) {\n            decision = { ownerUid: fallback, by: 'default', advancePointer: false }\n          }\n        } else {\n          const { assign } = policy.input\n          const hit = await resolveTarget(assign)\n          if (hit) {\n            decision = {\n              ...hit,\n              ownerUid: hit.uid,\n              by: 'roundRobin' in assign ? 'roundRobin' : 'member',\n            }\n          } else {\n            refusal = 'roundRobin' in assign ? 'empty-pool' : 'not-a-member'\n          }\n        }\n        if (!decision) return { outcome: 'none', reason: refusal }\n        if (decision.ownerUid === current) {\n          return { outcome: 'unchanged', ownerUid: current }\n        }\n\n        tx.update(contactRef, {\n          [contactFacetPath(group.groupId, 'ownerUid')]: decision.ownerUid,\n          updatedAt: FieldValue.serverTimestamp(),\n        })\n        if (decision.advancePointer) {\n          tx.update(orgRef, {\n            [CRM_ROUND_ROBIN_LAST_ASSIGNED_PATH]: decision.ownerUid,\n          })\n        }\n        /*\n         * A lead somebody already assigned by hand keeps its owner on a\n         * capture — the contact was new, the lead may not have been — and\n         * follows the contact on a deliberate reassignment.\n         */\n        const leadOwner = String(leadSnapshot?.get('ownerUid') ?? '')\n        const leadMirrored = Boolean(\n          leadSnapshot?.exists && (policy.kind === 'reassign' || !leadOwner),\n        )\n        if (leadMirrored && leadRef) {\n          tx.update(leadRef, {\n            ownerUid: decision.ownerUid,\n            updatedAt: FieldValue.serverTimestamp(),\n          })\n        }\n        return {\n          outcome: 'assigned',\n          ownerUid: decision.ownerUid,\n          by: decision.by,\n          ...(decision.ruleId ? { ruleId: decision.ruleId } : {}),\n          leadMirrored,\n          notified: false,\n        }\n      },\n    )\n    if (verdict.outcome !== 'assigned') return verdict\n    // The owner is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contactRef, 'contacts')\n\n    if (\n      !verdict.leadMirrored &&\n      leadRef &&\n      policy.kind === 'capture' &&\n      LEAD_FILING_SOURCES.has(policy.input.source)\n    ) {\n      void mirrorOwnerOntoLeadLater(leadRef, verdict.ownerUid)\n    }\n\n    const notified = await notifyRecordAssigned({\n      hostId: input.hostId,\n      orgId,\n      ownerUid: verdict.ownerUid,\n      actorUid: input.actorUid,\n      record:\n        verdict.leadMirrored && leadKey\n          ? { kind: 'lead', id: leadKey }\n          : { kind: 'contact', id: input.contactId },\n      who: contactName || input.email,\n    })\n    return { ...verdict, notified }\n  } catch (error) {\n    console.error(\n      'assignContactOwner failed',\n      input.hostId,\n      input.contactId,\n      error,\n    )\n    return { outcome: 'none', reason: 'failed' }\n  }\n}\n\n/**\n * The detached second look for a lead that lands after the contact.\n *\n * Bounded, and only ever ADDS an owner: a lead that arrived with one (a\n * person assigned it in the meantime) is left alone, and a lead that never\n * arrives costs three reads over six seconds and nothing else. Detached\n * because the capture must not hold `contactCreated` back for it — an\n * automation welcoming the contact has nothing to do with the lead's owner\n * column.\n */\nasync function mirrorOwnerOntoLeadLater(\n  leadRef: FirebaseFirestore.DocumentReference,\n  ownerUid: string,\n  delaysMs: readonly number[] = LEAD_MIRROR_RETRY_MS,\n): Promise<boolean> {\n  for (const delay of delaysMs) {\n    await new Promise((resolve) => setTimeout(resolve, delay))\n    try {\n      const lead = await leadRef.get()\n      if (!lead.exists) continue\n      if (String(lead.get('ownerUid') ?? '')) return false\n      await leadRef.update({\n        ownerUid,\n        updatedAt: FieldValue.serverTimestamp(),\n      })\n      return true\n    } catch (error) {\n      console.error('assignContactOwner lead mirror failed', leadRef.path, error)\n      return false\n    }\n  }\n  return false\n}\n\n/**\n * The capture door's pass: the org's rules in order, then the capturing\n * site's default owner, on a record that has no owner yet. See the module\n * comment for the whole of it.\n */\nexport function assignOwnerForCapture(\n  input: CaptureAssignmentInput,\n): Promise<OwnerAssignment> {\n  return assignOwner({ kind: 'capture', input })\n}\n\n/**\n * The deliberate assignment — the `assignContactOwner` step, and a person\n * handing a record to somebody: a member by uid (verified on the roster) or\n * the next in the round-robin pool, overwriting whoever held it. Naming the\n * owner the record already has changes nothing and tells nobody.\n */\nexport function reassignContactOwner(\n  input: ReassignmentInput,\n): Promise<OwnerAssignment> {\n  return assignOwner({ kind: 'reassign', input })\n}\n\nexport default assignOwnerForCapture\n"],"names":["assignmentRuleMatches","consentGroupForHost","contactFacetPath","CRM_ROUND_ROBIN_LAST_ASSIGNED_PATH","personKey","readContactFacet","readCrmAssignmentSettings","roundRobinOrder","firebaseAdmin","getHostDocAdmin","getOrgForHost","hostDisplayName","notifyUsers","restampCrmListFieldsAt","FieldValue","OWNER_ASSIGNMENT_REFUSALS","failed","LEAD_FILING_SOURCES","Set","LEAD_MIRROR_RETRY_MS","recordLink","hostId","record","section","kind","encodeURIComponent","id","notifyRecordAssigned","input","ownerUid","actorUid","lead","site","host","type","title","body","who","link","orgId","assignOwner","policy","resolved","outcome","reason","firestore","app","orgRef","collection","doc","contactRef","contactId","membersRef","leadKey","email","leadRef","contactName","verdict","runTransaction","tx","orgSnapshot","contactSnapshot","contact","leadSnapshot","Promise","all","get","resolve","exists","org","data","String","group","facet","groupId","current","settings","onRoster","Map","isMember","uid","known","then","snapshot","set","fromPool","pool","memberUids","lastAssignedUid","resolveTarget","target","advancePointer","memberUid","decision","refusal","capture","source","formId","tags","rule","rules","when","hit","assign","by","ruleId","fallback","hostDefaultOwners","update","updatedAt","serverTimestamp","leadOwner","leadMirrored","Boolean","notified","has","mirrorOwnerOntoLeadLater","error","console","delaysMs","delay","setTimeout","path","assignOwnerForCapture","reassignContactOwner"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,mBAAmB,EACnBC,gBAAgB,EAEhBC,kCAAkC,EAElCC,SAAS,EACTC,gBAAgB,EAChBC,yBAAyB,EACzBC,eAAe,QACV,sBAAqB;AAC5B,SACEC,aAAa,EACbC,eAAe,EACfC,aAAa,EACbC,eAAe,EACfC,WAAW,EACXC,sBAAsB,QACjB,2BAA0B;AACjC,SAASC,UAAU,QAAQ,2BAA0B;AAmHrD,6DAA6D,GAC7D,OAAO,MAAMC,4BAAoE;IAC/E,UAAU;IACV,cAAc;IACd,WAAW;IACX,cAAc;IACd,gBAAgB;IAChBC,QAAQ;AACV,EAAC;AAED;;;;CAIC,GACD,MAAMC,sBAAkD,IAAIC,IAAI;IAC9D;IACA;IACA;CACD;AAED,yEAAyE,GACzE,MAAMC,uBAA0C;IAAC;IAAO;IAAO;CAAM;AAcrE;;;;;;;CAOC,GACD,SAASC,WAAWC,MAAc,EAAEC,MAAsB;IACxD,MAAMC,UAAUD,OAAOE,IAAI,KAAK,YAAY,aAAa;IACzD,OAAO,CAAC,CAAC,EAAEH,OAAO,KAAK,EAAEE,QAAQ,CAAC,EAAEE,mBAAmBH,OAAOI,EAAE,GAAG;AACrE;AAOA;;;;;;;CAOC,GACD,OAAO,eAAeC,qBAAqBC,KAQ1C;QAC4CA;IAA3C,IAAI,CAACA,MAAMC,QAAQ,IAAID,MAAMC,QAAQ,OAAMD,kBAAAA,MAAME,QAAQ,YAAdF,kBAAkB,KAAK,OAAO;IACzE,MAAMG,OAAOH,MAAMN,MAAM,CAACE,IAAI,KAAK;IACnC;;;;;;;;GAQC,GACD,IAAIQ,OAAO;IACX,IAAI;QACF,MAAMC,OAAO,MAAMxB,gBAAgBmB,MAAMP,MAAM;QAC/C,IAAIY,MAAMD,OAAO,CAAC,IAAI,EAAErB,gBAAgBsB,MAAML,MAAMP,MAAM,GAAG;IAC/D,EAAE,eAAM;IACN,2CAA2C;IAC7C;IACA,MAAMT,YAAY;QAACgB,MAAMC,QAAQ;KAAC,EAAE;QAClCK,MAAMH,OAAO,yBAAyB;QACtCI,OAAOJ,OAAO,yBAAyB;QACvCK,MAAM,GAAGR,MAAMS,GAAG,CAAC,0BAA0B,EAAEN,OAAO,SAAS,YAAYC,KAAK,CAAC,CAAC;QAClFM,MAAMlB,WAAWQ,MAAMP,MAAM,EAAEO,MAAMN,MAAM;QAC3CiB,OAAOX,MAAMW,KAAK;QAClBlB,QAAQO,MAAMP,MAAM;IACtB;IACA,OAAO;AACT;AAEA,eAAemB,YAAYC,MAAc;IACvC,MAAM,EAAEb,KAAK,EAAE,GAAGa;IAClB,IAAI;QACF,MAAMC,WAAW,MAAMhC,cAAckB,MAAMP,MAAM;QACjD,IAAI,CAACqB,UAAU,OAAO;YAAEC,SAAS;YAAQC,QAAQ;QAAS;QAC1D,MAAM,EAAEL,KAAK,EAAE,GAAGG;QAClB,MAAMG,YAAYrC,cAAcsC,GAAG,GAAGD,SAAS;QAC/C,MAAME,SAASF,UAAUG,UAAU,CAAC,QAAQC,GAAG,CAACV;QAChD,MAAMW,aAAaH,OAAOC,UAAU,CAAC,YAAYC,GAAG,CAACrB,MAAMuB,SAAS;QACpE,MAAMC,aAAaL,OAAOC,UAAU,CAAC;QACrC,MAAMK,UAAUjD,UAAUwB,MAAM0B,KAAK;QACrC,uEAAuE;QACvE,MAAMC,UAAUF,UAAUN,OAAOC,UAAU,CAAC,SAASC,GAAG,CAACI,WAAW;QAEpE,IAAIG,cAAc;QAClB,MAAMC,UAAU,MAAMZ,UAAUa,cAAc,CAC5C,OAAOC;gBAgBQC,mBACIC,uBACIC;YAjBrB;;;;;;SAMC,GACD,MAAM,CAACF,aAAaC,iBAAiBE,aAAa,GAAG,MAAMC,QAAQC,GAAG,CAAC;gBACrEN,GAAGO,GAAG,CAACnB;gBACPY,GAAGO,GAAG,CAAChB;gBACPK,UAAUI,GAAGO,GAAG,CAACX,WAAWS,QAAQG,OAAO,CAAC;aAC7C;YACD,IAAI,CAACN,gBAAgBO,MAAM,EAAE;gBAC3B,OAAO;oBAAEzB,SAAS;oBAAQC,QAAQ;gBAAa;YACjD;YACA,MAAMyB,OAAOT,oBAAAA,YAAYU,IAAI,cAAhBV,oBAAsB,CAAC;YACpC,MAAME,WAAWD,wBAAAA,gBAAgBS,IAAI,cAApBT,wBAA0B,CAAC;YAC5CL,cAAce,QAAOT,gBAAAA,OAAO,CAAC,OAAO,YAAfA,gBAAmB;YACxC,MAAMU,QAAQvE,oBAAoBoE,KAAKzC,MAAMP,MAAM;YACnD,MAAMoD,QAAQpE,iBAAiByD,SAASU,MAAME,OAAO;YACrD,MAAMC,UAAU,OAAOF,MAAM5C,QAAQ,KAAK,WAAW4C,MAAM5C,QAAQ,GAAG;YACtE,IAAIY,OAAOjB,IAAI,KAAK,aAAamD,SAAS;gBACxC,OAAO;oBAAEhC,SAAS;oBAAad,UAAU8C;gBAAQ;YACnD;YACA,MAAMC,WAAWtE,0BAA0B+D;YAE3C,kEAAkE;YAClE,sBAAsB;YACtB,MAAMQ,WAAW,IAAIC;YACrB,MAAMC,WAAW,CAACC;gBAChB,IAAIC,QAAQJ,SAASX,GAAG,CAACc;gBACzB,IAAI,CAACC,OAAO;oBACVA,QAAQtB,GAAGO,GAAG,CAACd,WAAWH,GAAG,CAAC+B,MAAME,IAAI,CAAC,CAACC,WAAaA,SAASf,MAAM;oBACtES,SAASO,GAAG,CAACJ,KAAKC;gBACpB;gBACA,OAAOA;YACT;YACA,MAAMI,WAAW;gBACf,KAAK,MAAML,OAAOzE,gBAChBqE,SAASU,IAAI,CAACC,UAAU,EACxBX,SAASU,IAAI,CAACE,eAAe,EAC5B;oBACD,IAAI,MAAMT,SAASC,MAAM,OAAOA;gBAClC;gBACA,OAAO;YACT;YACA,MAAMS,gBAAgB,OACpBC;gBAEA,IAAI,gBAAgBA,QAAQ;oBAC1B,MAAMV,MAAM,MAAMK;oBAClB,OAAOL,MAAM;wBAAEA;wBAAKW,gBAAgB;oBAAK,IAAI;gBAC/C;gBACA,OAAO,AAAC,MAAMZ,SAASW,OAAOE,SAAS,IACnC;oBAAEZ,KAAKU,OAAOE,SAAS;oBAAED,gBAAgB;gBAAM,IAC/C;YACN;YAEA,IAAIE,WAA4B;YAChC,IAAIC,UAAkC;YACtC,IAAIrD,OAAOjB,IAAI,KAAK,WAAW;oBAInBiB,sBACGA,oBAA8BgC;gBAJ3C,MAAMsB,UAAU;oBACdC,QAAQvD,OAAOb,KAAK,CAACoE,MAAM;oBAC3B1C,OAAO1B,MAAM0B,KAAK;oBAClB2C,MAAM,GAAExD,uBAAAA,OAAOb,KAAK,CAACqE,MAAM,YAAnBxD,uBAAuB;oBAC/ByD,MAAM;4BAAKzD,qBAAAA,OAAOb,KAAK,CAACsE,IAAI,YAAjBzD,qBAAqB,EAAE;4BAAOgC,cAAAA,MAAMyB,IAAI,YAAVzB,cAAc,EAAE;qBAAE;gBAC7D;gBACA,KAAK,MAAM0B,QAAQvB,SAASwB,KAAK,CAAE;oBACjC,IAAI,CAACpG,sBAAsBmG,KAAKE,IAAI,EAAEN,UAAU;oBAChD,MAAMO,MAAM,MAAMb,cAAcU,KAAKI,MAAM;oBAC3C,IAAID,KAAK;wBACPT,WAAW,aAAKS;4BAAKzE,UAAUyE,IAAItB,GAAG;4BAAEwB,IAAI;4BAAQC,QAAQN,KAAKzE,EAAE;;wBACnE;oBACF;gBACF;gBACA,MAAMgF,WAAW9B,SAAS+B,iBAAiB,CAAC/E,MAAMP,MAAM,CAAC;gBACzD,IAAI,CAACwE,YAAYa,YAAa,MAAM3B,SAAS2B,WAAY;oBACvDb,WAAW;wBAAEhE,UAAU6E;wBAAUF,IAAI;wBAAWb,gBAAgB;oBAAM;gBACxE;YACF,OAAO;gBACL,MAAM,EAAEY,MAAM,EAAE,GAAG9D,OAAOb,KAAK;gBAC/B,MAAM0E,MAAM,MAAMb,cAAcc;gBAChC,IAAID,KAAK;oBACPT,WAAW,aACNS;wBACHzE,UAAUyE,IAAItB,GAAG;wBACjBwB,IAAI,gBAAgBD,SAAS,eAAe;;gBAEhD,OAAO;oBACLT,UAAU,gBAAgBS,SAAS,eAAe;gBACpD;YACF;YACA,IAAI,CAACV,UAAU,OAAO;gBAAElD,SAAS;gBAAQC,QAAQkD;YAAQ;YACzD,IAAID,SAAShE,QAAQ,KAAK8C,SAAS;gBACjC,OAAO;oBAAEhC,SAAS;oBAAad,UAAU8C;gBAAQ;YACnD;YAEAhB,GAAGiD,MAAM,CAAC1D,YAAY;gBACpB,CAAChD,iBAAiBsE,MAAME,OAAO,EAAE,YAAY,EAAEmB,SAAShE,QAAQ;gBAChEgF,WAAW/F,WAAWgG,eAAe;YACvC;YACA,IAAIjB,SAASF,cAAc,EAAE;gBAC3BhC,GAAGiD,MAAM,CAAC7D,QAAQ;oBAChB,CAAC5C,mCAAmC,EAAE0F,SAAShE,QAAQ;gBACzD;YACF;YACA;;;;SAIC,GACD,MAAMkF,YAAYxC,eAAOR,gCAAAA,aAAcG,GAAG,CAAC,8BAAe;YAC1D,MAAM8C,eAAeC,QACnBlD,CAAAA,gCAAAA,aAAcK,MAAM,KAAK3B,CAAAA,OAAOjB,IAAI,KAAK,cAAc,CAACuF,SAAQ;YAElE,IAAIC,gBAAgBzD,SAAS;gBAC3BI,GAAGiD,MAAM,CAACrD,SAAS;oBACjB1B,UAAUgE,SAAShE,QAAQ;oBAC3BgF,WAAW/F,WAAWgG,eAAe;gBACvC;YACF;YACA,OAAO;gBACLnE,SAAS;gBACTd,UAAUgE,SAAShE,QAAQ;gBAC3B2E,IAAIX,SAASW,EAAE;eACXX,SAASY,MAAM,GAAG;gBAAEA,QAAQZ,SAASY,MAAM;YAAC,IAAI,CAAC;gBACrDO;gBACAE,UAAU;;QAEd;QAEF,IAAIzD,QAAQd,OAAO,KAAK,YAAY,OAAOc;QAC3C,6DAA6D;QAC7D,MAAM5C,uBAAuBqC,YAAY;QAEzC,IACE,CAACO,QAAQuD,YAAY,IACrBzD,WACAd,OAAOjB,IAAI,KAAK,aAChBP,oBAAoBkG,GAAG,CAAC1E,OAAOb,KAAK,CAACoE,MAAM,GAC3C;YACA,KAAKoB,yBAAyB7D,SAASE,QAAQ5B,QAAQ;QACzD;QAEA,MAAMqF,WAAW,MAAMvF,qBAAqB;YAC1CN,QAAQO,MAAMP,MAAM;YACpBkB;YACAV,UAAU4B,QAAQ5B,QAAQ;YAC1BC,UAAUF,MAAME,QAAQ;YACxBR,QACEmC,QAAQuD,YAAY,IAAI3D,UACpB;gBAAE7B,MAAM;gBAAQE,IAAI2B;YAAQ,IAC5B;gBAAE7B,MAAM;gBAAWE,IAAIE,MAAMuB,SAAS;YAAC;YAC7Cd,KAAKmB,eAAe5B,MAAM0B,KAAK;QACjC;QACA,OAAO,aAAKG;YAASyD;;IACvB,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CACX,6BACAzF,MAAMP,MAAM,EACZO,MAAMuB,SAAS,EACfkE;QAEF,OAAO;YAAE1E,SAAS;YAAQC,QAAQ;QAAS;IAC7C;AACF;AAEA;;;;;;;;;CASC,GACD,eAAewE,yBACb7D,OAA4C,EAC5C1B,QAAgB,EAChB0F,WAA8BpG,oBAAoB;IAElD,KAAK,MAAMqG,SAASD,SAAU;QAC5B,MAAM,IAAIvD,QAAQ,CAACG,UAAYsD,WAAWtD,SAASqD;QACnD,IAAI;gBAGSzF;YAFX,MAAMA,OAAO,MAAMwB,QAAQW,GAAG;YAC9B,IAAI,CAACnC,KAAKqC,MAAM,EAAE;YAClB,IAAIG,QAAOxC,YAAAA,KAAKmC,GAAG,CAAC,uBAATnC,YAAwB,KAAK,OAAO;YAC/C,MAAMwB,QAAQqD,MAAM,CAAC;gBACnB/E;gBACAgF,WAAW/F,WAAWgG,eAAe;YACvC;YACA,OAAO;QACT,EAAE,OAAOO,OAAO;YACdC,QAAQD,KAAK,CAAC,yCAAyC9D,QAAQmE,IAAI,EAAEL;YACrE,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASM,sBACd/F,KAA6B;IAE7B,OAAOY,YAAY;QAAEhB,MAAM;QAAWI;IAAM;AAC9C;AAEA;;;;;CAKC,GACD,OAAO,SAASgG,qBACdhG,KAAwB;IAExB,OAAOY,YAAY;QAAEhB,MAAM;QAAYI;IAAM;AAC/C;AAEA,eAAe+F,sBAAqB"}

package/src/lib/associate-company-by-domain.d.ts

@@ -1,70 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { type HostContactCreated } from '@aglyn/tenant-data-admin';
-/** What the association did, for the spec and the log. */
-export type CompanyAssociation = {
-    outcome: 'linked' | 'created';
-    companyId: string;
-} | {
-    outcome: 'none';
-    reason: 'no-domain' | 'no-org' | 'ambiguous' | 'no-match' | 'failed';
-};
-/**
- * Link a NEW contact to the company its email domain names (AGL-2613).
- *
- * HubSpot associates a contact with a company on domain the moment the
- * contact exists, and that is the moment this runs: once, from the capture
- * door, for a person the org did not hold before. A repeat visit by somebody
- * already held is not a new person and re-asks nothing; a door that already
- * knew the company — the console's create drawer, an import row naming one
- * — has said so in the facet and this is not called at all.
- *
- * ## Bounded: one query, one commit
- *
- * The query is `companies where domain == d and visibleTo array-contains-any
- * (the capturing scope's read tokens)`, capped at two — the `(visibleTo
- * CONTAINS, domain ASC)` composite serves it. Two rather than one because
- * the answer has to be "exactly one": two companies at one domain visible
- * to this site is an ambiguity a capture must not resolve by picking the
- * first, and the contact waits for a person. The scope predicate is the
- * console's own listener predicate, so a company this site could not open
- * is not a match — an agency's client at `acme.com` is not linked to a
- * sibling client's Acme.
- *
- * The write is one batch: the facet and the mirror on the contact, and the
- * count on the company. The contact is fresh, so the plan is the trivial
- * one — no previous link, nothing held elsewhere — and needs no read of the
- * document.
- *
- * ## Creating is a setting, and off by default
- *
- * With `crm.autoCreateCompanies` on the org document, a domain no visible
- * company carries becomes one, named after the domain and scoped exactly as
- * the contact was — `crmScopeTokens`, the stamp every CRM creator uses —
- * with the count starting at one. Public mailbox domains never reach this
- * branch, because `companyDomainForEmail` answers `null` for them: a
- * workspace's consumer list is not a list of accounts.
- *
- * ## The same posture as the capture
- *
- * Never throws. The capture has already succeeded and a form submission
- * must not fail because the CRM could not file its author; a failure is
- * logged and answered as `none`, and the person is exactly as capturable
- * by hand as they were before this existed.
- */
-export declare function associateCompanyByDomain(created: Pick<HostContactCreated, 'hostId' | 'contactId' | 'email'>): Promise<CompanyAssociation>;
-export default associateCompanyByDomain;

package/src/lib/associate-company-by-domain.js

@@ -1,153 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { companyDomainForEmail, companyNameForDomain, CRM_COLLECTIONS, crmReadTokens, crmScopeTokens, nameSearchFields, orgAutoCreatesCompanies } from "@aglyn/aglyn/server";
-import { consentGroupForSite, contactCompanyLinkFields, firebaseAdmin, getOrgForHost, restampCrmListFieldsAt, writeContactCompanyLink } from "@aglyn/tenant-data-admin";
-import { COMPANY_CONTACTS_COUNT_FIELD, crmNewRecordListFields, planContactCompanyLink } from "@aglyn/aglyn/server";
-import { FieldValue } from "firebase-admin/firestore";
-/**
- * Link a NEW contact to the company its email domain names (AGL-2613).
- *
- * HubSpot associates a contact with a company on domain the moment the
- * contact exists, and that is the moment this runs: once, from the capture
- * door, for a person the org did not hold before. A repeat visit by somebody
- * already held is not a new person and re-asks nothing; a door that already
- * knew the company — the console's create drawer, an import row naming one
- * — has said so in the facet and this is not called at all.
- *
- * ## Bounded: one query, one commit
- *
- * The query is `companies where domain == d and visibleTo array-contains-any
- * (the capturing scope's read tokens)`, capped at two — the `(visibleTo
- * CONTAINS, domain ASC)` composite serves it. Two rather than one because
- * the answer has to be "exactly one": two companies at one domain visible
- * to this site is an ambiguity a capture must not resolve by picking the
- * first, and the contact waits for a person. The scope predicate is the
- * console's own listener predicate, so a company this site could not open
- * is not a match — an agency's client at `acme.com` is not linked to a
- * sibling client's Acme.
- *
- * The write is one batch: the facet and the mirror on the contact, and the
- * count on the company. The contact is fresh, so the plan is the trivial
- * one — no previous link, nothing held elsewhere — and needs no read of the
- * document.
- *
- * ## Creating is a setting, and off by default
- *
- * With `crm.autoCreateCompanies` on the org document, a domain no visible
- * company carries becomes one, named after the domain and scoped exactly as
- * the contact was — `crmScopeTokens`, the stamp every CRM creator uses —
- * with the count starting at one. Public mailbox domains never reach this
- * branch, because `companyDomainForEmail` answers `null` for them: a
- * workspace's consumer list is not a list of accounts.
- *
- * ## The same posture as the capture
- *
- * Never throws. The capture has already succeeded and a form submission
- * must not fail because the CRM could not file its author; a failure is
- * logged and answered as `none`, and the person is exactly as capturable
- * by hand as they were before this existed.
- */ export async function associateCompanyByDomain(created) {
-    const domain = companyDomainForEmail(created.email);
-    if (!domain) return {
-        outcome: 'none',
-        reason: 'no-domain'
-    };
-    try {
-        const resolved = await getOrgForHost(created.hostId);
-        if (!resolved) return {
-            outcome: 'none',
-            reason: 'no-org'
-        };
-        const org = resolved.org;
-        const group = await consentGroupForSite(created.hostId, org);
-        const firestore = firebaseAdmin.app().firestore();
-        const orgRef = firestore.collection('orgs').doc(resolved.orgId);
-        const companiesRef = orgRef.collection(CRM_COLLECTIONS.companies);
-        const contactRef = orgRef.collection('contacts').doc(created.contactId);
-        const matches = await companiesRef.where('domain', '==', domain).where('visibleTo', 'array-contains-any', crmReadTokens(group)).limit(2).get();
-        if (matches.size > 1) return {
-            outcome: 'none',
-            reason: 'ambiguous'
-        };
-        if (matches.size === 1) {
-            const companyId = matches.docs[0].id;
-            await writeContactCompanyLink({
-                firestore,
-                contactRef,
-                contact: null,
-                companiesRef,
-                groupId: group.groupId,
-                companyId
-            });
-            return {
-                outcome: 'linked',
-                companyId
-            };
-        }
-        if (!orgAutoCreatesCompanies(org)) {
-            return {
-                outcome: 'none',
-                reason: 'no-match'
-            };
-        }
-        /*
-     * The company and the link in one commit, so a company never exists
-     * with a count of one and no contact naming it — or the reverse. The
-     * count is written as a value rather than an increment because the
-     * document is being created in the same batch, and the plan's `+1` is
-     * exactly what a fresh company with one contact stores.
-     */ const plan = planContactCompanyLink({
-            companyId: null,
-            companyIds: [],
-            heldElsewhere: []
-        }, companiesRef.doc().id);
-        if (!(plan == null ? void 0 : plan.companyId)) return {
-            outcome: 'none',
-            reason: 'failed'
-        };
-        const companyRef = companiesRef.doc(plan.companyId);
-        const batch = firestore.batch();
-        const company = _extends({}, nameSearchFields(companyNameForDomain(domain)), {
-            domain,
-            visibleTo: crmScopeTokens(org, group),
-            hostId: created.hostId,
-            [COMPANY_CONTACTS_COUNT_FIELD]: 1,
-            createdAt: FieldValue.serverTimestamp(),
-            updatedAt: FieldValue.serverTimestamp()
-        });
-        batch.set(companyRef, _extends({}, company, crmNewRecordListFields('companies', company)));
-        batch.update(contactRef, _extends({}, contactCompanyLinkFields(plan, group.groupId), {
-            updatedAt: FieldValue.serverTimestamp()
-        }));
-        await batch.commit();
-        // The company is what the Contacts list filters by (AGL-3321).
-        await restampCrmListFieldsAt(contactRef, 'contacts');
-        return {
-            outcome: 'created',
-            companyId: plan.companyId
-        };
-    } catch (error) {
-        console.error('associateCompanyByDomain failed', created.hostId, created.contactId, error);
-        return {
-            outcome: 'none',
-            reason: 'failed'
-        };
-    }
-}
-export default associateCompanyByDomain;
-
-//# sourceMappingURL=associate-company-by-domain.js.map

package/src/lib/associate-company-by-domain.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../libs/tenant/runtime/src/lib/associate-company-by-domain.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  companyDomainForEmail,\n  companyNameForDomain,\n  CRM_COLLECTIONS,\n  crmReadTokens,\n  crmScopeTokens,\n  nameSearchFields,\n  orgAutoCreatesCompanies,\n} from '@aglyn/aglyn/server'\nimport {\n  consentGroupForSite,\n  contactCompanyLinkFields,\n  firebaseAdmin,\n  getOrgForHost,\n  type HostContactCreated,\n  restampCrmListFieldsAt,\n  writeContactCompanyLink,\n} from '@aglyn/tenant-data-admin'\nimport {\n  COMPANY_CONTACTS_COUNT_FIELD,\n  crmNewRecordListFields,\n  planContactCompanyLink,\n} from '@aglyn/aglyn/server'\nimport { FieldValue } from 'firebase-admin/firestore'\n\n/** What the association did, for the spec and the log. */\nexport type CompanyAssociation =\n  | { outcome: 'linked' | 'created'; companyId: string }\n  | {\n      outcome: 'none'\n      reason: 'no-domain' | 'no-org' | 'ambiguous' | 'no-match' | 'failed'\n    }\n\n/**\n * Link a NEW contact to the company its email domain names (AGL-2613).\n *\n * HubSpot associates a contact with a company on domain the moment the\n * contact exists, and that is the moment this runs: once, from the capture\n * door, for a person the org did not hold before. A repeat visit by somebody\n * already held is not a new person and re-asks nothing; a door that already\n * knew the company — the console's create drawer, an import row naming one\n * — has said so in the facet and this is not called at all.\n *\n * ## Bounded: one query, one commit\n *\n * The query is `companies where domain == d and visibleTo array-contains-any\n * (the capturing scope's read tokens)`, capped at two — the `(visibleTo\n * CONTAINS, domain ASC)` composite serves it. Two rather than one because\n * the answer has to be \"exactly one\": two companies at one domain visible\n * to this site is an ambiguity a capture must not resolve by picking the\n * first, and the contact waits for a person. The scope predicate is the\n * console's own listener predicate, so a company this site could not open\n * is not a match — an agency's client at `acme.com` is not linked to a\n * sibling client's Acme.\n *\n * The write is one batch: the facet and the mirror on the contact, and the\n * count on the company. The contact is fresh, so the plan is the trivial\n * one — no previous link, nothing held elsewhere — and needs no read of the\n * document.\n *\n * ## Creating is a setting, and off by default\n *\n * With `crm.autoCreateCompanies` on the org document, a domain no visible\n * company carries becomes one, named after the domain and scoped exactly as\n * the contact was — `crmScopeTokens`, the stamp every CRM creator uses —\n * with the count starting at one. Public mailbox domains never reach this\n * branch, because `companyDomainForEmail` answers `null` for them: a\n * workspace's consumer list is not a list of accounts.\n *\n * ## The same posture as the capture\n *\n * Never throws. The capture has already succeeded and a form submission\n * must not fail because the CRM could not file its author; a failure is\n * logged and answered as `none`, and the person is exactly as capturable\n * by hand as they were before this existed.\n */\nexport async function associateCompanyByDomain(\n  created: Pick<HostContactCreated, 'hostId' | 'contactId' | 'email'>,\n): Promise<CompanyAssociation> {\n  const domain = companyDomainForEmail(created.email)\n  if (!domain) return { outcome: 'none', reason: 'no-domain' }\n  try {\n    const resolved = await getOrgForHost(created.hostId)\n    if (!resolved) return { outcome: 'none', reason: 'no-org' }\n    const org = resolved.org as Record<string, unknown>\n    const group = await consentGroupForSite(created.hostId, org)\n    const firestore = firebaseAdmin.app().firestore()\n    const orgRef = firestore.collection('orgs').doc(resolved.orgId)\n    const companiesRef = orgRef.collection(CRM_COLLECTIONS.companies)\n    const contactRef = orgRef.collection('contacts').doc(created.contactId)\n\n    const matches = await companiesRef\n      .where('domain', '==', domain)\n      .where('visibleTo', 'array-contains-any', crmReadTokens(group))\n      .limit(2)\n      .get()\n    if (matches.size > 1) return { outcome: 'none', reason: 'ambiguous' }\n    if (matches.size === 1) {\n      const companyId = matches.docs[0].id\n      await writeContactCompanyLink({\n        firestore,\n        contactRef,\n        contact: null,\n        companiesRef,\n        groupId: group.groupId,\n        companyId,\n      })\n      return { outcome: 'linked', companyId }\n    }\n    if (!orgAutoCreatesCompanies(org)) {\n      return { outcome: 'none', reason: 'no-match' }\n    }\n\n    /*\n     * The company and the link in one commit, so a company never exists\n     * with a count of one and no contact naming it — or the reverse. The\n     * count is written as a value rather than an increment because the\n     * document is being created in the same batch, and the plan's `+1` is\n     * exactly what a fresh company with one contact stores.\n     */\n    const plan = planContactCompanyLink(\n      { companyId: null, companyIds: [], heldElsewhere: [] },\n      companiesRef.doc().id,\n    )\n    if (!plan?.companyId) return { outcome: 'none', reason: 'failed' }\n    const companyRef = companiesRef.doc(plan.companyId)\n    const batch = firestore.batch()\n    const company: Record<string, unknown> = {\n      ...nameSearchFields(companyNameForDomain(domain)),\n      domain,\n      visibleTo: crmScopeTokens(org, group),\n      hostId: created.hostId,\n      [COMPANY_CONTACTS_COUNT_FIELD]: 1,\n      createdAt: FieldValue.serverTimestamp(),\n      updatedAt: FieldValue.serverTimestamp(),\n    }\n    batch.set(companyRef, {\n      ...company,\n      // What the Companies list searches and filters by (AGL-3321).\n      ...crmNewRecordListFields('companies', company),\n    })\n    batch.update(contactRef, {\n      ...contactCompanyLinkFields(plan, group.groupId),\n      updatedAt: FieldValue.serverTimestamp(),\n    })\n    await batch.commit()\n    // The company is what the Contacts list filters by (AGL-3321).\n    await restampCrmListFieldsAt(contactRef, 'contacts')\n    return { outcome: 'created', companyId: plan.companyId }\n  } catch (error) {\n    console.error(\n      'associateCompanyByDomain failed',\n      created.hostId,\n      created.contactId,\n      error,\n    )\n    return { outcome: 'none', reason: 'failed' }\n  }\n}\n\nexport default associateCompanyByDomain\n"],"names":["companyDomainForEmail","companyNameForDomain","CRM_COLLECTIONS","crmReadTokens","crmScopeTokens","nameSearchFields","orgAutoCreatesCompanies","consentGroupForSite","contactCompanyLinkFields","firebaseAdmin","getOrgForHost","restampCrmListFieldsAt","writeContactCompanyLink","COMPANY_CONTACTS_COUNT_FIELD","crmNewRecordListFields","planContactCompanyLink","FieldValue","associateCompanyByDomain","created","domain","email","outcome","reason","resolved","hostId","org","group","firestore","app","orgRef","collection","doc","orgId","companiesRef","companies","contactRef","contactId","matches","where","limit","get","size","companyId","docs","id","contact","groupId","plan","companyIds","heldElsewhere","companyRef","batch","company","visibleTo","createdAt","serverTimestamp","updatedAt","set","update","commit","error","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,oBAAoB,EACpBC,eAAe,EACfC,aAAa,EACbC,cAAc,EACdC,gBAAgB,EAChBC,uBAAuB,QAClB,sBAAqB;AAC5B,SACEC,mBAAmB,EACnBC,wBAAwB,EACxBC,aAAa,EACbC,aAAa,EAEbC,sBAAsB,EACtBC,uBAAuB,QAClB,2BAA0B;AACjC,SACEC,4BAA4B,EAC5BC,sBAAsB,EACtBC,sBAAsB,QACjB,sBAAqB;AAC5B,SAASC,UAAU,QAAQ,2BAA0B;AAUrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CC,GACD,OAAO,eAAeC,yBACpBC,OAAmE;IAEnE,MAAMC,SAASnB,sBAAsBkB,QAAQE,KAAK;IAClD,IAAI,CAACD,QAAQ,OAAO;QAAEE,SAAS;QAAQC,QAAQ;IAAY;IAC3D,IAAI;QACF,MAAMC,WAAW,MAAMb,cAAcQ,QAAQM,MAAM;QACnD,IAAI,CAACD,UAAU,OAAO;YAAEF,SAAS;YAAQC,QAAQ;QAAS;QAC1D,MAAMG,MAAMF,SAASE,GAAG;QACxB,MAAMC,QAAQ,MAAMnB,oBAAoBW,QAAQM,MAAM,EAAEC;QACxD,MAAME,YAAYlB,cAAcmB,GAAG,GAAGD,SAAS;QAC/C,MAAME,SAASF,UAAUG,UAAU,CAAC,QAAQC,GAAG,CAACR,SAASS,KAAK;QAC9D,MAAMC,eAAeJ,OAAOC,UAAU,CAAC5B,gBAAgBgC,SAAS;QAChE,MAAMC,aAAaN,OAAOC,UAAU,CAAC,YAAYC,GAAG,CAACb,QAAQkB,SAAS;QAEtE,MAAMC,UAAU,MAAMJ,aACnBK,KAAK,CAAC,UAAU,MAAMnB,QACtBmB,KAAK,CAAC,aAAa,sBAAsBnC,cAAcuB,QACvDa,KAAK,CAAC,GACNC,GAAG;QACN,IAAIH,QAAQI,IAAI,GAAG,GAAG,OAAO;YAAEpB,SAAS;YAAQC,QAAQ;QAAY;QACpE,IAAIe,QAAQI,IAAI,KAAK,GAAG;YACtB,MAAMC,YAAYL,QAAQM,IAAI,CAAC,EAAE,CAACC,EAAE;YACpC,MAAMhC,wBAAwB;gBAC5Be;gBACAQ;gBACAU,SAAS;gBACTZ;gBACAa,SAASpB,MAAMoB,OAAO;gBACtBJ;YACF;YACA,OAAO;gBAAErB,SAAS;gBAAUqB;YAAU;QACxC;QACA,IAAI,CAACpC,wBAAwBmB,MAAM;YACjC,OAAO;gBAAEJ,SAAS;gBAAQC,QAAQ;YAAW;QAC/C;QAEA;;;;;;KAMC,GACD,MAAMyB,OAAOhC,uBACX;YAAE2B,WAAW;YAAMM,YAAY,EAAE;YAAEC,eAAe,EAAE;QAAC,GACrDhB,aAAaF,GAAG,GAAGa,EAAE;QAEvB,IAAI,EAACG,wBAAAA,KAAML,SAAS,GAAE,OAAO;YAAErB,SAAS;YAAQC,QAAQ;QAAS;QACjE,MAAM4B,aAAajB,aAAaF,GAAG,CAACgB,KAAKL,SAAS;QAClD,MAAMS,QAAQxB,UAAUwB,KAAK;QAC7B,MAAMC,UAAmC,aACpC/C,iBAAiBJ,qBAAqBkB;YACzCA;YACAkC,WAAWjD,eAAeqB,KAAKC;YAC/BF,QAAQN,QAAQM,MAAM;YACtB,CAACX,6BAA6B,EAAE;YAChCyC,WAAWtC,WAAWuC,eAAe;YACrCC,WAAWxC,WAAWuC,eAAe;;QAEvCJ,MAAMM,GAAG,CAACP,YAAY,aACjBE,SAEAtC,uBAAuB,aAAasC;QAEzCD,MAAMO,MAAM,CAACvB,YAAY,aACpB3B,yBAAyBuC,MAAMrB,MAAMoB,OAAO;YAC/CU,WAAWxC,WAAWuC,eAAe;;QAEvC,MAAMJ,MAAMQ,MAAM;QAClB,+DAA+D;QAC/D,MAAMhD,uBAAuBwB,YAAY;QACzC,OAAO;YAAEd,SAAS;YAAWqB,WAAWK,KAAKL,SAAS;QAAC;IACzD,EAAE,OAAOkB,OAAO;QACdC,QAAQD,KAAK,CACX,mCACA1C,QAAQM,MAAM,EACdN,QAAQkB,SAAS,EACjBwB;QAEF,OAAO;YAAEvC,SAAS;YAAQC,QAAQ;QAAS;IAC7C;AACF;AAEA,eAAeL,yBAAwB"}

package/src/lib/capture-host-contact.d.ts

@@ -1,104 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { type HostContactCreated, type UpsertHostContactOptions, type UpsertHostContactVerdict } from '@aglyn/tenant-data-admin';
-import type { HostEventActor, HostEventPayload } from './host-event-listeners';
-/**
- * THE contact capture door for a server path (AGL-2605).
- *
- * `upsertHostContact` writes the contact and reports, through its
- * `onCreated` hook, when the write made a NEW person. This wrapper is the
- * one place that hook is bound to `contactCreated`, and it is the function
- * every server door calls — the forms route, the membership and newsletter
- * handlers, the order and booking webhooks. A door that calls
- * `upsertHostContact` directly still captures the contact and fires nothing,
- * which is a contact no automation can welcome; `capture-host-contact.spec`
- * scans for exactly that call.
- *
- * ## Why the binding lives here and not in the data library
- *
- * What listens for the event — the automation engine among them — imports
- * the data library for its Firestore handle, its org helpers and its
- * senders. The data library emitting an event would import the listeners
- * back, which is a cycle, and the module boundaries (`scope:data` depends on
- * data and util only) refuse it in any case. So the lower layer reports a
- * fact and this layer, which already knows how to announce one, announces
- * it. The alternative — a sink the runtime registers into when its module
- * happens to be imported — would fire only in a process that had loaded the
- * runtime, and a Stripe webhook that created a contact in a process that had
- * not would announce nothing with no error anywhere. The listeners themselves
- * are registered by a call made at boot (`host-event-listeners.ts`), so every
- * process has them before its first request.
- *
- * Fire-and-forget in the same sense the capture itself is: the hook's
- * failure is caught inside `upsertHostContact`, so a runner that throws
- * costs the door nothing, and this function never rejects.
- *
- * ## The company, before the announcement (AGL-2613)
- *
- * A new person with a work email address is linked to the company at that
- * domain here, in the same hook, BEFORE `contactCreated` goes out — so an
- * automation that reads the new contact finds them already filed, rather
- * than racing a link that lands a moment later. Only when the door did not
- * name a company itself: the console's drawer and an import row that
- * carried one have written it into the facet, and the capture must not
- * second-guess a person's choice with a domain match. The association never
- * rejects, and its own catch keeps a failed lookup from costing the event.
- *
- * ## The owner, on the same terms (AGL-2618)
- *
- * Then the org's assignment rules and the site's default owner decide who
- * follows the new person up — again before `contactCreated`, so an
- * automation's "create a task for the owner" finds one — and again only
- * when the door named none: a drawer, an import column or a conversion
- * that picked an owner has said whose the record is. The pass reads the
- * form and the tags off the same options the data library was handed,
- * because the created-report carries the identity and not the routing.
- * It never rejects either; a record it could not assign is one somebody
- * assigns by hand, which is what every record was before this existed.
- *
- * What this does NOT do is close a lead (AGL-3232): a lead is the CRM's
- * record, and which relationship closes one is the CRM's rule, answered in
- * its capture writer for the doors that report through the capture seam.
- * The order doors call this directly and close nothing — a buyer with an
- * open lead is a lead the rep converts, as in Salesforce.
- */
-export declare function captureHostContact(captureOptions: Omit<UpsertHostContactOptions, 'onCreated'> & {
-    /** Who caused the capture, when the door knows (AGL-3376). */
-    actor?: HostEventActor;
-}): Promise<UpsertHostContactVerdict>;
-/**
- * The `contactCreated` payload, as the scalars an event may carry.
- *
- * `HostEventPayload` holds strings, numbers and booleans and nothing
- * nested, because the payload seeds an expression scope and a condition
- * editor whose operators compare strings. So `campaignIds` rides as one
- * comma-joined string — `contains` still finds a campaign in it — and is
- * present only when the capture had campaigns, so `notEmpty` on it reads
- * as "came in through a campaign form". `name` and `lifecycleStage` are
- * always present, empty when the door had none, so a condition on either
- * never sees a missing key: `lifecycleStage == "lead"` is the filter that
- * picks the form captures out of the sign-ups (AGL-2612).
- *
- * `formId` rides the same way `campaignIds` does — present only when the
- * capture came through a form — because the created-report carries the
- * person's identity and not the routing, and the form is routing: it is
- * read off the interaction the door was handed. Present, it is what lets a
- * condition say `formId` equals this form and no other (AGL-2626); absent,
- * `notEmpty` on it reads as "came in through a form".
- */
-export declare function contactCreatedPayload(created: HostContactCreated, formId?: string | null): HostEventPayload;
-export default captureHostContact;

package/src/lib/capture-host-contact.js

@@ -1,151 +0,0 @@
-import { _ as _extends } from "@swc/helpers/_/_extends";
-import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { upsertHostContact } from "@aglyn/tenant-data-admin";
-import { assignOwnerForCapture } from "./assign-contact-owner.js";
-import { associateCompanyByDomain } from "./associate-company-by-domain.js";
-import { emitHostEvent } from "./emit-host-event.js";
-import { contactCaptureActor } from "./capture-actor.js";
-/**
- * THE contact capture door for a server path (AGL-2605).
- *
- * `upsertHostContact` writes the contact and reports, through its
- * `onCreated` hook, when the write made a NEW person. This wrapper is the
- * one place that hook is bound to `contactCreated`, and it is the function
- * every server door calls — the forms route, the membership and newsletter
- * handlers, the order and booking webhooks. A door that calls
- * `upsertHostContact` directly still captures the contact and fires nothing,
- * which is a contact no automation can welcome; `capture-host-contact.spec`
- * scans for exactly that call.
- *
- * ## Why the binding lives here and not in the data library
- *
- * What listens for the event — the automation engine among them — imports
- * the data library for its Firestore handle, its org helpers and its
- * senders. The data library emitting an event would import the listeners
- * back, which is a cycle, and the module boundaries (`scope:data` depends on
- * data and util only) refuse it in any case. So the lower layer reports a
- * fact and this layer, which already knows how to announce one, announces
- * it. The alternative — a sink the runtime registers into when its module
- * happens to be imported — would fire only in a process that had loaded the
- * runtime, and a Stripe webhook that created a contact in a process that had
- * not would announce nothing with no error anywhere. The listeners themselves
- * are registered by a call made at boot (`host-event-listeners.ts`), so every
- * process has them before its first request.
- *
- * Fire-and-forget in the same sense the capture itself is: the hook's
- * failure is caught inside `upsertHostContact`, so a runner that throws
- * costs the door nothing, and this function never rejects.
- *
- * ## The company, before the announcement (AGL-2613)
- *
- * A new person with a work email address is linked to the company at that
- * domain here, in the same hook, BEFORE `contactCreated` goes out — so an
- * automation that reads the new contact finds them already filed, rather
- * than racing a link that lands a moment later. Only when the door did not
- * name a company itself: the console's drawer and an import row that
- * carried one have written it into the facet, and the capture must not
- * second-guess a person's choice with a domain match. The association never
- * rejects, and its own catch keeps a failed lookup from costing the event.
- *
- * ## The owner, on the same terms (AGL-2618)
- *
- * Then the org's assignment rules and the site's default owner decide who
- * follows the new person up — again before `contactCreated`, so an
- * automation's "create a task for the owner" finds one — and again only
- * when the door named none: a drawer, an import column or a conversion
- * that picked an owner has said whose the record is. The pass reads the
- * form and the tags off the same options the data library was handed,
- * because the created-report carries the identity and not the routing.
- * It never rejects either; a record it could not assign is one somebody
- * assigns by hand, which is what every record was before this existed.
- *
- * What this does NOT do is close a lead (AGL-3232): a lead is the CRM's
- * record, and which relationship closes one is the CRM's rule, answered in
- * its capture writer for the doors that report through the capture seam.
- * The order doors call this directly and close nothing — a buyer with an
- * open lead is a lead the rep converts, as in Salesforce.
- */ export async function captureHostContact(captureOptions) {
-    const { actor } = captureOptions, options = _object_without_properties_loose(captureOptions, [
-        "actor"
-    ]);
-    return upsertHostContact(_extends({}, options, {
-        onCreated: async (created)=>{
-            var _options_facet, _options_facet1;
-            if (!((_options_facet = options.facet) == null ? void 0 : _options_facet.companyId)) {
-                await associateCompanyByDomain(created).catch((error)=>{
-                    console.error('captureHostContact company association failed', error);
-                });
-            }
-            if (!((_options_facet1 = options.facet) == null ? void 0 : _options_facet1.ownerUid)) {
-                var _options_interaction_formId;
-                await assignOwnerForCapture({
-                    hostId: created.hostId,
-                    contactId: created.contactId,
-                    email: created.email,
-                    source: created.source,
-                    formId: (_options_interaction_formId = options.interaction.formId) != null ? _options_interaction_formId : null,
-                    tags: options.tags
-                }).catch((error)=>{
-                    console.error('captureHostContact owner assignment failed', error);
-                });
-            }
-            const cause = contactCaptureActor(created.source, created.email, actor);
-            await emitHostEvent(created.hostId, 'contactCreated', contactCreatedPayload(created, options.interaction.formId), cause ? {
-                actor: cause
-            } : {});
-        }
-    }));
-}
-/**
- * The `contactCreated` payload, as the scalars an event may carry.
- *
- * `HostEventPayload` holds strings, numbers and booleans and nothing
- * nested, because the payload seeds an expression scope and a condition
- * editor whose operators compare strings. So `campaignIds` rides as one
- * comma-joined string — `contains` still finds a campaign in it — and is
- * present only when the capture had campaigns, so `notEmpty` on it reads
- * as "came in through a campaign form". `name` and `lifecycleStage` are
- * always present, empty when the door had none, so a condition on either
- * never sees a missing key: `lifecycleStage == "lead"` is the filter that
- * picks the form captures out of the sign-ups (AGL-2612).
- *
- * `formId` rides the same way `campaignIds` does — present only when the
- * capture came through a form — because the created-report carries the
- * person's identity and not the routing, and the form is routing: it is
- * read off the interaction the door was handed. Present, it is what lets a
- * condition say `formId` equals this form and no other (AGL-2626); absent,
- * `notEmpty` on it reads as "came in through a form".
- */ export function contactCreatedPayload(created, formId) {
-    var _created_name, _created_lifecycleStage;
-    const form = String(formId != null ? formId : '').trim();
-    return _extends({
-        contactId: created.contactId,
-        email: created.email,
-        name: (_created_name = created.name) != null ? _created_name : '',
-        source: created.source,
-        hostId: created.hostId,
-        lifecycleStage: (_created_lifecycleStage = created.lifecycleStage) != null ? _created_lifecycleStage : ''
-    }, created.campaignIds.length ? {
-        campaignIds: created.campaignIds.join(',')
-    } : {}, form ? {
-        formId: form
-    } : {});
-}
-export default captureHostContact;
-
-//# sourceMappingURL=capture-host-contact.js.map

package/src/lib/capture-host-contact.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../libs/tenant/runtime/src/lib/capture-host-contact.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  type HostContactCreated,\n  upsertHostContact,\n  type UpsertHostContactOptions,\n  type UpsertHostContactVerdict,\n} from '@aglyn/tenant-data-admin'\nimport { assignOwnerForCapture } from './assign-contact-owner'\nimport { associateCompanyByDomain } from './associate-company-by-domain'\nimport { emitHostEvent } from './emit-host-event'\nimport { contactCaptureActor } from './capture-actor'\nimport type { HostEventActor, HostEventPayload } from './host-event-listeners'\n\n\n/**\n * THE contact capture door for a server path (AGL-2605).\n *\n * `upsertHostContact` writes the contact and reports, through its\n * `onCreated` hook, when the write made a NEW person. This wrapper is the\n * one place that hook is bound to `contactCreated`, and it is the function\n * every server door calls — the forms route, the membership and newsletter\n * handlers, the order and booking webhooks. A door that calls\n * `upsertHostContact` directly still captures the contact and fires nothing,\n * which is a contact no automation can welcome; `capture-host-contact.spec`\n * scans for exactly that call.\n *\n * ## Why the binding lives here and not in the data library\n *\n * What listens for the event — the automation engine among them — imports\n * the data library for its Firestore handle, its org helpers and its\n * senders. The data library emitting an event would import the listeners\n * back, which is a cycle, and the module boundaries (`scope:data` depends on\n * data and util only) refuse it in any case. So the lower layer reports a\n * fact and this layer, which already knows how to announce one, announces\n * it. The alternative — a sink the runtime registers into when its module\n * happens to be imported — would fire only in a process that had loaded the\n * runtime, and a Stripe webhook that created a contact in a process that had\n * not would announce nothing with no error anywhere. The listeners themselves\n * are registered by a call made at boot (`host-event-listeners.ts`), so every\n * process has them before its first request.\n *\n * Fire-and-forget in the same sense the capture itself is: the hook's\n * failure is caught inside `upsertHostContact`, so a runner that throws\n * costs the door nothing, and this function never rejects.\n *\n * ## The company, before the announcement (AGL-2613)\n *\n * A new person with a work email address is linked to the company at that\n * domain here, in the same hook, BEFORE `contactCreated` goes out — so an\n * automation that reads the new contact finds them already filed, rather\n * than racing a link that lands a moment later. Only when the door did not\n * name a company itself: the console's drawer and an import row that\n * carried one have written it into the facet, and the capture must not\n * second-guess a person's choice with a domain match. The association never\n * rejects, and its own catch keeps a failed lookup from costing the event.\n *\n * ## The owner, on the same terms (AGL-2618)\n *\n * Then the org's assignment rules and the site's default owner decide who\n * follows the new person up — again before `contactCreated`, so an\n * automation's \"create a task for the owner\" finds one — and again only\n * when the door named none: a drawer, an import column or a conversion\n * that picked an owner has said whose the record is. The pass reads the\n * form and the tags off the same options the data library was handed,\n * because the created-report carries the identity and not the routing.\n * It never rejects either; a record it could not assign is one somebody\n * assigns by hand, which is what every record was before this existed.\n *\n * What this does NOT do is close a lead (AGL-3232): a lead is the CRM's\n * record, and which relationship closes one is the CRM's rule, answered in\n * its capture writer for the doors that report through the capture seam.\n * The order doors call this directly and close nothing — a buyer with an\n * open lead is a lead the rep converts, as in Salesforce.\n */\nexport async function captureHostContact(\n  captureOptions: Omit<UpsertHostContactOptions, 'onCreated'> & {\n    /** Who caused the capture, when the door knows (AGL-3376). */\n    actor?: HostEventActor\n  },\n): Promise<UpsertHostContactVerdict> {\n  const { actor, ...options } = captureOptions\n  return upsertHostContact({\n    ...options,\n    onCreated: async (created) => {\n      if (!options.facet?.companyId) {\n        await associateCompanyByDomain(created).catch((error: unknown) => {\n          console.error('captureHostContact company association failed', error)\n        })\n      }\n      if (!options.facet?.ownerUid) {\n        await assignOwnerForCapture({\n          hostId: created.hostId,\n          contactId: created.contactId,\n          email: created.email,\n          source: created.source,\n          formId: options.interaction.formId ?? null,\n          tags: options.tags,\n        }).catch((error: unknown) => {\n          console.error('captureHostContact owner assignment failed', error)\n        })\n      }\n      const cause = contactCaptureActor(created.source, created.email, actor)\n      await emitHostEvent(\n        created.hostId,\n        'contactCreated',\n        contactCreatedPayload(created, options.interaction.formId),\n        cause ? { actor: cause } : {},\n      )\n    },\n  })\n}\n\n/**\n * The `contactCreated` payload, as the scalars an event may carry.\n *\n * `HostEventPayload` holds strings, numbers and booleans and nothing\n * nested, because the payload seeds an expression scope and a condition\n * editor whose operators compare strings. So `campaignIds` rides as one\n * comma-joined string — `contains` still finds a campaign in it — and is\n * present only when the capture had campaigns, so `notEmpty` on it reads\n * as \"came in through a campaign form\". `name` and `lifecycleStage` are\n * always present, empty when the door had none, so a condition on either\n * never sees a missing key: `lifecycleStage == \"lead\"` is the filter that\n * picks the form captures out of the sign-ups (AGL-2612).\n *\n * `formId` rides the same way `campaignIds` does — present only when the\n * capture came through a form — because the created-report carries the\n * person's identity and not the routing, and the form is routing: it is\n * read off the interaction the door was handed. Present, it is what lets a\n * condition say `formId` equals this form and no other (AGL-2626); absent,\n * `notEmpty` on it reads as \"came in through a form\".\n */\nexport function contactCreatedPayload(\n  created: HostContactCreated,\n  formId?: string | null,\n): HostEventPayload {\n  const form = String(formId ?? '').trim()\n  return {\n    contactId: created.contactId,\n    email: created.email,\n    name: created.name ?? '',\n    source: created.source,\n    hostId: created.hostId,\n    lifecycleStage: created.lifecycleStage ?? '',\n    ...(created.campaignIds.length\n      ? { campaignIds: created.campaignIds.join(',') }\n      : {}),\n    ...(form ? { formId: form } : {}),\n  }\n}\n\nexport default captureHostContact\n"],"names":["upsertHostContact","assignOwnerForCapture","associateCompanyByDomain","emitHostEvent","contactCaptureActor","captureHostContact","captureOptions","actor","options","onCreated","created","facet","companyId","catch","error","console","ownerUid","hostId","contactId","email","source","formId","interaction","tags","cause","contactCreatedPayload","form","String","trim","name","lifecycleStage","campaignIds","length","join"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAEEA,iBAAiB,QAGZ,2BAA0B;AACjC,SAASC,qBAAqB,QAAQ,4BAAwB;AAC9D,SAASC,wBAAwB,QAAQ,mCAA+B;AACxE,SAASC,aAAa,QAAQ,uBAAmB;AACjD,SAASC,mBAAmB,QAAQ,qBAAiB;AAIrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DC,GACD,OAAO,eAAeC,mBACpBC,cAGC;IAED,MAAM,EAAEC,KAAK,EAAc,GAAGD,gBAAZE,2CAAYF;;;IAC9B,OAAON,kBAAkB,aACpBQ;QACHC,WAAW,OAAOC;gBACXF,gBAKAA;YALL,IAAI,GAACA,iBAAAA,QAAQG,KAAK,qBAAbH,eAAeI,SAAS,GAAE;gBAC7B,MAAMV,yBAAyBQ,SAASG,KAAK,CAAC,CAACC;oBAC7CC,QAAQD,KAAK,CAAC,iDAAiDA;gBACjE;YACF;YACA,IAAI,GAACN,kBAAAA,QAAQG,KAAK,qBAAbH,gBAAeQ,QAAQ,GAAE;oBAMlBR;gBALV,MAAMP,sBAAsB;oBAC1BgB,QAAQP,QAAQO,MAAM;oBACtBC,WAAWR,QAAQQ,SAAS;oBAC5BC,OAAOT,QAAQS,KAAK;oBACpBC,QAAQV,QAAQU,MAAM;oBACtBC,MAAM,GAAEb,8BAAAA,QAAQc,WAAW,CAACD,MAAM,YAA1Bb,8BAA8B;oBACtCe,MAAMf,QAAQe,IAAI;gBACpB,GAAGV,KAAK,CAAC,CAACC;oBACRC,QAAQD,KAAK,CAAC,8CAA8CA;gBAC9D;YACF;YACA,MAAMU,QAAQpB,oBAAoBM,QAAQU,MAAM,EAAEV,QAAQS,KAAK,EAAEZ;YACjE,MAAMJ,cACJO,QAAQO,MAAM,EACd,kBACAQ,sBAAsBf,SAASF,QAAQc,WAAW,CAACD,MAAM,GACzDG,QAAQ;gBAAEjB,OAAOiB;YAAM,IAAI,CAAC;QAEhC;;AAEJ;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,SAASC,sBACdf,OAA2B,EAC3BW,MAAsB;QAMdX,eAGUA;IAPlB,MAAMgB,OAAOC,OAAON,iBAAAA,SAAU,IAAIO,IAAI;IACtC,OAAO;QACLV,WAAWR,QAAQQ,SAAS;QAC5BC,OAAOT,QAAQS,KAAK;QACpBU,IAAI,GAAEnB,gBAAAA,QAAQmB,IAAI,YAAZnB,gBAAgB;QACtBU,QAAQV,QAAQU,MAAM;QACtBH,QAAQP,QAAQO,MAAM;QACtBa,cAAc,GAAEpB,0BAAAA,QAAQoB,cAAc,YAAtBpB,0BAA0B;OACtCA,QAAQqB,WAAW,CAACC,MAAM,GAC1B;QAAED,aAAarB,QAAQqB,WAAW,CAACE,IAAI,CAAC;IAAK,IAC7C,CAAC,GACDP,OAAO;QAAEL,QAAQK;IAAK,IAAI,CAAC;AAEnC;AAEA,eAAerB,mBAAkB"}