@aglyn/aglyn 1.0.0-beta.144 → 1.0.0-beta.146

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/aglyn",
-  "version": "1.0.0-beta.144",
+  "version": "1.0.0-beta.146",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -33,15 +33,15 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.144",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.144",
-    "@aglyn/shared-data-types": "1.0.0-beta.144",
-    "@aglyn/shared-util-email": "1.0.0-beta.144",
-    "@aglyn/shared-util-http": "1.0.0-beta.144",
-    "@aglyn/shared-util-logger": "1.0.0-beta.144",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.144",
-    "@aglyn/shared-util-tools": "1.0.0-beta.144",
-    "@aglyn/shared-util-vendor": "1.0.0-beta.144",
+    "@aglyn/shared-data-enums": "1.0.0-beta.146",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.146",
+    "@aglyn/shared-data-types": "1.0.0-beta.146",
+    "@aglyn/shared-util-email": "1.0.0-beta.146",
+    "@aglyn/shared-util-http": "1.0.0-beta.146",
+    "@aglyn/shared-util-logger": "1.0.0-beta.146",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.146",
+    "@aglyn/shared-util-tools": "1.0.0-beta.146",
+    "@aglyn/shared-util-vendor": "1.0.0-beta.146",
     "@data-driven-forms/react-form-renderer": "^4.2.0",
     "@msgpack/msgpack": "^3.1.3",
     "@types/unist": "^3.0.3",

package/src/lib/app-utils/contexts.d.ts

@@ -24,6 +24,7 @@
  * (client) — never `@aglyn/aglyn/server` (AGL-405).
  */
 export * from './console-widget-slot-context';
+export * from './deployment-capabilities-context';
 export * from './enabled-plugins-context';
 export * from './entity-picker-context';
 export * from './link-target-search-context';

package/src/lib/app-utils/contexts.js

@@ -22,6 +22,7 @@
  * `./server` barrel and only reachable via the full `@aglyn/aglyn` barrel
  * (client) — never `@aglyn/aglyn/server` (AGL-405).
  */ export * from "./console-widget-slot-context.js";
+export * from "./deployment-capabilities-context.js";
 export * from "./enabled-plugins-context.js";
 export * from "./entity-picker-context.js";
 export * from "./link-target-search-context.js";

package/src/lib/app-utils/contexts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contexts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Client-only React contexts that live in @aglyn/aglyn (not a UI lib) so\n * every canvas-rendering surface — console, plugins, tenant render — shares\n * ONE context module instance (a second instance renders the site blank).\n * They call `createContext` at module scope, which App Router forbids in a\n * Server Component's module graph, so they are split out of the server-safe\n * `./server` barrel and only reachable via the full `@aglyn/aglyn` barrel\n * (client) — never `@aglyn/aglyn/server` (AGL-405).\n */\nexport * from './console-widget-slot-context'\nexport * from './enabled-plugins-context'\nexport * from './entity-picker-context'\nexport * from './link-target-search-context'\nexport * from './media-picker-context'\nexport * from './node-identity'\nexport * from './page-header-actions-context'\nexport * from './page-header-record-context'\nexport * from './screen-link-context'\nexport * from './site-context'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;CAQC,GACD,cAAc,mCAA+B;AAC7C,cAAc,+BAA2B;AACzC,cAAc,6BAAyB;AACvC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,qBAAiB;AAC/B,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,2BAAuB;AACrC,cAAc,oBAAgB"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/contexts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Client-only React contexts that live in @aglyn/aglyn (not a UI lib) so\n * every canvas-rendering surface — console, plugins, tenant render — shares\n * ONE context module instance (a second instance renders the site blank).\n * They call `createContext` at module scope, which App Router forbids in a\n * Server Component's module graph, so they are split out of the server-safe\n * `./server` barrel and only reachable via the full `@aglyn/aglyn` barrel\n * (client) — never `@aglyn/aglyn/server` (AGL-405).\n */\nexport * from './console-widget-slot-context'\nexport * from './deployment-capabilities-context'\nexport * from './enabled-plugins-context'\nexport * from './entity-picker-context'\nexport * from './link-target-search-context'\nexport * from './media-picker-context'\nexport * from './node-identity'\nexport * from './page-header-actions-context'\nexport * from './page-header-record-context'\nexport * from './screen-link-context'\nexport * from './site-context'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;CAQC,GACD,cAAc,mCAA+B;AAC7C,cAAc,uCAAmC;AACjD,cAAc,+BAA2B;AACzC,cAAc,6BAAyB;AACvC,cAAc,kCAA8B;AAC5C,cAAc,4BAAwB;AACtC,cAAc,qBAAiB;AAC/B,cAAc,mCAA+B;AAC7C,cAAc,kCAA8B;AAC5C,cAAc,2BAAuB;AACrC,cAAc,oBAAgB"}

package/src/lib/app-utils/deployment-capabilities-context.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * What THIS DEPLOYMENT can do — facts about the install, not about the
+ * organization reading it (AGL-3080).
+ *
+ * The third kind of answer a plugin surface needs and cannot reach for
+ * itself. `entitled` says what the workspace bought and `permissions` says
+ * who is reading; neither says whether the software in front of them is
+ * wired up to a provider at all. A self-host install is the case: the
+ * marketplace's release flag defaults ON, so a fresh install draws the whole
+ * thing — browse, listing pages, a Buy button, a payout panel — all of it
+ * backed by Aglyn's Stripe Connect platform, which the operator does not have
+ * and cannot get.
+ *
+ * WHY A CONTEXT, and why the value comes from a SERVER layout. The facts are
+ * server-only secrets: `STRIPE_SECRET_KEY` carries no `NEXT_PUBLIC_` prefix,
+ * so a client component reading `process.env` for it gets `undefined` and
+ * concludes "not configured" on every deployment, our own included. The
+ * console's server layout knows the answer before any JavaScript ships and
+ * hands it down, which is also why this is not a fetch: a notice that says
+ * what a deployment cannot do must not arrive after the click it exists to
+ * precede.
+ *
+ * WHAT IT IS NOT. Not a release flag and not an entitlement — the three
+ * answer different questions and a surface usually needs all three. The flag
+ * asks whether this deployment should show the feature; the entitlement asks
+ * whether this organization bought it; this asks whether the deployment can
+ * carry it out. Nothing here is a gate: browsing and free installs genuinely
+ * work without Stripe, so a surface reads this to EXPLAIN itself, and hiding
+ * on it would remove working functionality to avoid describing one that is
+ * off.
+ */
+export interface DeploymentCapabilities {
+    /**
+     * True when this deployment has a Stripe platform at all (AGL-2019) —
+     * Aglyn as the biller, which is infrastructure, not a tenant's own
+     * checkout.
+     *
+     * ⚠️ Read it the safe way round. The default below is `true`, because the
+     * absence of a provider is not evidence of an absent platform: every
+     * surface rendered outside one — a test harness, a widget mounted in a
+     * zone — would otherwise draw a permanent "not configured" banner on
+     * Aglyn's own console.
+     */
+    payments: boolean;
+}
+export declare const DEPLOYMENT_CAPABILITIES_DEFAULT: DeploymentCapabilities;
+export declare const DeploymentCapabilitiesContext: import("react").Context<DeploymentCapabilities>;
+/** Hook form of {@link DeploymentCapabilitiesContext}. */
+export declare function useDeploymentCapabilities(): DeploymentCapabilities;

package/src/lib/app-utils/deployment-capabilities-context.js

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // Same placement rationale as page-header-record-context.ts: lives in
+// @aglyn/aglyn without a 'use client' banner so both the console app and the
+// feature plugins share one context module.
+import { createContext, useContext } from "react";
+export const DEPLOYMENT_CAPABILITIES_DEFAULT = {
+    payments: true
+};
+export const DeploymentCapabilitiesContext = createContext(DEPLOYMENT_CAPABILITIES_DEFAULT);
+DeploymentCapabilitiesContext.displayName = 'DeploymentCapabilitiesContext';
+/** Hook form of {@link DeploymentCapabilitiesContext}. */ export function useDeploymentCapabilities() {
+    return useContext(DeploymentCapabilitiesContext);
+}
+
+//# sourceMappingURL=deployment-capabilities-context.js.map

package/src/lib/app-utils/deployment-capabilities-context.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/deployment-capabilities-context.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Same placement rationale as page-header-record-context.ts: lives in\n// @aglyn/aglyn without a 'use client' banner so both the console app and the\n// feature plugins share one context module.\nimport { createContext, useContext } from 'react'\n\n/**\n * What THIS DEPLOYMENT can do — facts about the install, not about the\n * organization reading it (AGL-3080).\n *\n * The third kind of answer a plugin surface needs and cannot reach for\n * itself. `entitled` says what the workspace bought and `permissions` says\n * who is reading; neither says whether the software in front of them is\n * wired up to a provider at all. A self-host install is the case: the\n * marketplace's release flag defaults ON, so a fresh install draws the whole\n * thing — browse, listing pages, a Buy button, a payout panel — all of it\n * backed by Aglyn's Stripe Connect platform, which the operator does not have\n * and cannot get.\n *\n * WHY A CONTEXT, and why the value comes from a SERVER layout. The facts are\n * server-only secrets: `STRIPE_SECRET_KEY` carries no `NEXT_PUBLIC_` prefix,\n * so a client component reading `process.env` for it gets `undefined` and\n * concludes \"not configured\" on every deployment, our own included. The\n * console's server layout knows the answer before any JavaScript ships and\n * hands it down, which is also why this is not a fetch: a notice that says\n * what a deployment cannot do must not arrive after the click it exists to\n * precede.\n *\n * WHAT IT IS NOT. Not a release flag and not an entitlement — the three\n * answer different questions and a surface usually needs all three. The flag\n * asks whether this deployment should show the feature; the entitlement asks\n * whether this organization bought it; this asks whether the deployment can\n * carry it out. Nothing here is a gate: browsing and free installs genuinely\n * work without Stripe, so a surface reads this to EXPLAIN itself, and hiding\n * on it would remove working functionality to avoid describing one that is\n * off.\n */\nexport interface DeploymentCapabilities {\n  /**\n   * True when this deployment has a Stripe platform at all (AGL-2019) —\n   * Aglyn as the biller, which is infrastructure, not a tenant's own\n   * checkout.\n   *\n   * ⚠️ Read it the safe way round. The default below is `true`, because the\n   * absence of a provider is not evidence of an absent platform: every\n   * surface rendered outside one — a test harness, a widget mounted in a\n   * zone — would otherwise draw a permanent \"not configured\" banner on\n   * Aglyn's own console.\n   */\n  payments: boolean\n}\n\nexport const DEPLOYMENT_CAPABILITIES_DEFAULT: DeploymentCapabilities = {\n  payments: true,\n}\n\nexport const DeploymentCapabilitiesContext =\n  createContext<DeploymentCapabilities>(DEPLOYMENT_CAPABILITIES_DEFAULT)\nDeploymentCapabilitiesContext.displayName = 'DeploymentCapabilitiesContext'\n\n/** Hook form of {@link DeploymentCapabilitiesContext}. */\nexport function useDeploymentCapabilities(): DeploymentCapabilities {\n  return useContext(DeploymentCapabilitiesContext)\n}\n"],"names":["createContext","useContext","DEPLOYMENT_CAPABILITIES_DEFAULT","payments","DeploymentCapabilitiesContext","displayName","useDeploymentCapabilities"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,sEAAsE;AACtE,6EAA6E;AAC7E,4CAA4C;AAC5C,SAASA,aAAa,EAAEC,UAAU,QAAQ,QAAO;AAgDjD,OAAO,MAAMC,kCAA0D;IACrEC,UAAU;AACZ,EAAC;AAED,OAAO,MAAMC,gCACXJ,cAAsCE,iCAAgC;AACxEE,8BAA8BC,WAAW,GAAG;AAE5C,wDAAwD,GACxD,OAAO,SAASC;IACd,OAAOL,WAAWG;AACpB"}

package/src/lib/app-utils/plan-entitlements.js

@@ -444,9 +444,28 @@ export const PLAN_ENTITLEMENTS = {
         // rule — a positive band with no rate beside it is usage past a bound
         // that is silently free, which `plan-entitlements.spec.ts` forbids.
         //
-        // `features.aiAssist` stays false: the band is credits, not the guided
-        // rung of the console assistant, exactly as on Free. The AI add-on adds
-        // `AI_ADDON_CREDITS_PER_MONTH.starter` on top and switches both flags on.
+        // `features.aiAssist` is TRUE, and AGL-3203 shipping it false was the
+        // defect AGL-3207 closes. The reasoning then was "the band is credits,
+        // not the guided rung, exactly as on Free" — but on Free the band IS
+        // spendable, through `aiGenerative`, which is the door the taste exists
+        // for. Starter carried neither flag, so it was the only row on the
+        // ladder sold a band with nothing to spend it through: 750 credits
+        // reachable only by buying the $9 add-on that was also the only thing
+        // that made them usable. "No plan bands at zero any more" was true of
+        // the number and false of the capability.
+        //
+        // It opens `aiAssist` rather than `aiGenerative` because that is the
+        // shape of every paid rung above it — the included band funds the guided
+        // assistant and generation is the add-on. Opening the generative door
+        // here instead would hand the FIRST paid rung a door Pro through Agency
+        // have to buy.
+        //
+        // No cost moves: `tier-margin-floor.spec.ts` already prices this tier's
+        // assist term at 100% burn of the 750 credits, 75¢/mo. A door does not
+        // widen a band; it only makes spend that was already modeled reachable.
+        //
+        // The AI add-on adds `AI_ADDON_CREDITS_PER_MONTH.starter` on top and
+        // switches `aiGenerative` on as well.
         assistCreditsPerMonth: 750,
         apiRequestsPerMonth: 0,
         datasetsPerOrg: 3,
@@ -481,7 +500,7 @@ export const PLAN_ENTITLEMENTS = {
             removeBranding: true,
             scheduledPublishing: false,
             marketplaceSelling: false,
-            aiAssist: false,
+            aiAssist: true,
             aiGenerative: false,
             workflows: true,
             dataStore: true,