@aglyn/aglyn 1.0.0-beta.268 → 1.0.0-beta.270

package/src/lib/app-utils/org-role-grants.js

@@ -0,0 +1,193 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * WHAT EACH ORG ROLE MAY DO, AS DATA (AGL-243, AGL-3950).
+ *
+ * The core permission catalog and the core keys each org role holds when
+ * nothing refines it. `org-permissions.ts` builds the console's live
+ * catalog from these (adding the keys plugins declare, with their own role
+ * defaults), and the native apps read the same grants through the generated
+ * contracts, so a native gate (`hosts.create`, `data.manage`) answers as the
+ * console does for a member row that carries no `resolvedPermissions` stamp.
+ *
+ * `ORG_ROLE_GRANTS` in the contracts is this table with every plugin's
+ * declared catalog keys added (`assembleOrgRoleGrants`, run by
+ * `generate:native-contracts` over each plugin's declarations), which is
+ * exactly the set the console's `DEFAULT_ROLE_PERMISSIONS` holds once the
+ * plugins have registered.
+ *
+ * NO IMPORTS, on purpose: the native apps read it through the generated
+ * contracts.
+ */ /** The four org roles. */ import { _ as _extends } from "@swc/helpers/_/_extends";
+export const ORG_ROLE_NAMES = [
+    'owner',
+    'admin',
+    'editor',
+    'viewer'
+];
+/**
+ * The core keys, in display order for role editors. Every key here is
+ * enforced server-side (`apps/console/specs/org-permissions-are-enforced.spec.ts`).
+ */ export const CORE_ORG_PERMISSION_ENTRIES = [
+    {
+        key: 'org.settings',
+        label: 'Organization settings',
+        description: 'Rename the organization, change its slug, transfer it.'
+    },
+    {
+        key: 'org.auditLog',
+        label: 'Activity & audit log',
+        description: 'See the organization activity feed.'
+    },
+    {
+        key: 'billing.view',
+        label: 'View billing',
+        description: 'See the plan, usage meters, and invoices.'
+    },
+    {
+        key: 'billing.manage',
+        label: 'Manage billing',
+        description: 'Change plans, buy add-ons, update payment details.'
+    },
+    {
+        key: 'members.manage',
+        label: 'Manage members',
+        description: 'Invite, remove, and re-role organization members.'
+    },
+    {
+        key: 'hosts.create',
+        label: 'Create sites',
+        description: 'Create new sites in the organization.'
+    },
+    {
+        key: 'hosts.delete',
+        label: 'Delete sites',
+        description: 'Delete sites the member can access.'
+    },
+    {
+        key: 'data.manage',
+        label: 'Manage data',
+        description: 'Create, edit, and delete organization datasets.'
+    },
+    {
+        key: 'marketplace.publish',
+        label: 'Publish to marketplace',
+        description: 'Publish listings under the organization profile.'
+    },
+    {
+        key: 'plugins.install',
+        label: 'Install plugins',
+        description: 'Install or remove marketplace plugins.'
+    }
+];
+const CORE_KEYS = CORE_ORG_PERMISSION_ENTRIES.map((entry)=>entry.key);
+/**
+ * The core keys each org role holds when nothing refines it: owners and
+ * admins hold every core key (owner-only acts like deleting the
+ * organization stay role-checked, not permission-checked); editors work on
+ * content and see no money or roster controls; viewers read only.
+ */ export const CORE_ORG_ROLE_GRANTS = {
+    owner: CORE_KEYS,
+    admin: CORE_KEYS,
+    editor: [
+        'data.manage',
+        'marketplace.publish',
+        'plugins.install'
+    ],
+    viewer: []
+};
+/** The core's catalog and grants; the contracts' value adds the plugins' keys. */ export const ORG_ROLE_GRANTS = {
+    permissions: CORE_ORG_PERMISSION_ENTRIES.map((entry)=>_extends({}, entry)),
+    grants: {
+        owner: [
+            ...CORE_ORG_ROLE_GRANTS.owner
+        ],
+        admin: [
+            ...CORE_ORG_ROLE_GRANTS.admin
+        ],
+        editor: [
+            ...CORE_ORG_ROLE_GRANTS.editor
+        ],
+        viewer: [
+            ...CORE_ORG_ROLE_GRANTS.viewer
+        ]
+    }
+};
+/**
+ * The catalog with plugins' declared keys after the core ones, each role
+ * holding a declared key when its declaration's `roleDefaults` says so. A
+ * declaration naming a core key is refused, as the console's catalog refuses
+ * it: the core key keeps its meaning and defaults.
+ */ export function assembleOrgRoleGrants(core, declarations) {
+    const permissions = [
+        ...core.permissions
+    ];
+    const grants = Object.fromEntries(ORG_ROLE_NAMES.map((role)=>[
+            role,
+            [
+                ...core.grants[role]
+            ]
+        ]));
+    const taken = new Set(permissions.map((entry)=>entry.key));
+    for (const declaration of declarations){
+        if (!(declaration == null ? void 0 : declaration.key) || taken.has(declaration.key)) continue;
+        taken.add(declaration.key);
+        permissions.push(_extends({
+            key: declaration.key,
+            label: declaration.label,
+            description: declaration.description
+        }, declaration.pluginId ? {
+            pluginId: declaration.pluginId
+        } : {}));
+        for (const role of ORG_ROLE_NAMES){
+            var _declaration_roleDefaults;
+            if (((_declaration_roleDefaults = declaration.roleDefaults) == null ? void 0 : _declaration_roleDefaults[role]) === true) grants[role].push(declaration.key);
+        }
+    }
+    return {
+        permissions,
+        grants
+    };
+}
+/**
+ * A member's effective permissions, as the console's `resolveOrgPermissions`
+ * answers them: the role's defaults, then the custom role's explicit
+ * verdicts (when the member has one), then the member's own overrides,
+ * later layers winning key by key, over the catalog's keys only. A missing
+ * role reads as viewer; a role the catalog does not know holds nothing.
+ */ export function rolePermissions(catalog, role, customRole, overrides) {
+    var _catalog_grants_name;
+    const keys = catalog.permissions.map((entry)=>entry.key);
+    const name = role != null ? role : 'viewer';
+    const held = new Set((_catalog_grants_name = catalog.grants[name]) != null ? _catalog_grants_name : []);
+    const out = Object.fromEntries(keys.map((key)=>[
+            key,
+            held.has(key)
+        ]));
+    for (const layer of [
+        customRole,
+        overrides
+    ]){
+        const values = layer == null ? void 0 : layer.permissions;
+        if (!values) continue;
+        for (const key of keys){
+            if (typeof values[key] === 'boolean') out[key] = values[key];
+        }
+    }
+    return out;
+}
+
+//# sourceMappingURL=org-role-grants.js.map

package/src/lib/app-utils/org-role-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/org-role-grants.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT EACH ORG ROLE MAY DO, AS DATA (AGL-243, AGL-3950).\n *\n * The core permission catalog and the core keys each org role holds when\n * nothing refines it. `org-permissions.ts` builds the console's live\n * catalog from these (adding the keys plugins declare, with their own role\n * defaults), and the native apps read the same grants through the generated\n * contracts, so a native gate (`hosts.create`, `data.manage`) answers as the\n * console does for a member row that carries no `resolvedPermissions` stamp.\n *\n * `ORG_ROLE_GRANTS` in the contracts is this table with every plugin's\n * declared catalog keys added (`assembleOrgRoleGrants`, run by\n * `generate:native-contracts` over each plugin's declarations), which is\n * exactly the set the console's `DEFAULT_ROLE_PERMISSIONS` holds once the\n * plugins have registered.\n *\n * NO IMPORTS, on purpose: the native apps read it through the generated\n * contracts.\n */\n\n/** The four org roles. */\nexport type OrgRoleName = 'owner' | 'admin' | 'editor' | 'viewer'\n\n/** One key of the org permission catalog. */\nexport interface OrgPermissionEntry {\n  key: string\n  label: string\n  description: string\n  /** The plugin that declared it; absent for a core key. */\n  pluginId?: string\n}\n\n/** The catalog and each role's default grants. */\nexport interface OrgRoleGrants {\n  /** Every key, in the order the role editor lists them. */\n  permissions: OrgPermissionEntry[]\n  /** The keys each role holds when no custom role or per-member override sets them. */\n  grants: Record<OrgRoleName, string[]>\n}\n\n/** A key a plugin declares into the catalog, as `PluginOrgPermissionDeclaration` carries it. */\nexport interface OrgPermissionDeclaration {\n  key: string\n  label: string\n  description: string\n  roleDefaults: Record<OrgRoleName, boolean>\n}\n\n/** A custom role (`orgs/{orgId}/roles/{roleId}`) or a member's overrides: explicit verdicts per key. */\nexport interface OrgPermissionLayer {\n  permissions?: Record<string, boolean>\n}\n\nexport const ORG_ROLE_NAMES: readonly OrgRoleName[] = ['owner', 'admin', 'editor', 'viewer']\n\n/**\n * The core keys, in display order for role editors. Every key here is\n * enforced server-side (`apps/console/specs/org-permissions-are-enforced.spec.ts`).\n */\nexport const CORE_ORG_PERMISSION_ENTRIES: readonly OrgPermissionEntry[] = [\n  {\n    key: 'org.settings',\n    label: 'Organization settings',\n    description: 'Rename the organization, change its slug, transfer it.',\n  },\n  {\n    key: 'org.auditLog',\n    label: 'Activity & audit log',\n    description: 'See the organization activity feed.',\n  },\n  {\n    key: 'billing.view',\n    label: 'View billing',\n    description: 'See the plan, usage meters, and invoices.',\n  },\n  {\n    key: 'billing.manage',\n    label: 'Manage billing',\n    description: 'Change plans, buy add-ons, update payment details.',\n  },\n  {\n    key: 'members.manage',\n    label: 'Manage members',\n    description: 'Invite, remove, and re-role organization members.',\n  },\n  {\n    key: 'hosts.create',\n    label: 'Create sites',\n    description: 'Create new sites in the organization.',\n  },\n  {\n    key: 'hosts.delete',\n    label: 'Delete sites',\n    description: 'Delete sites the member can access.',\n  },\n  {\n    key: 'data.manage',\n    label: 'Manage data',\n    description: 'Create, edit, and delete organization datasets.',\n  },\n  {\n    key: 'marketplace.publish',\n    label: 'Publish to marketplace',\n    description: 'Publish listings under the organization profile.',\n  },\n  {\n    key: 'plugins.install',\n    label: 'Install plugins',\n    description: 'Install or remove marketplace plugins.',\n  },\n]\n\nconst CORE_KEYS = CORE_ORG_PERMISSION_ENTRIES.map((entry) => entry.key)\n\n/**\n * The core keys each org role holds when nothing refines it: owners and\n * admins hold every core key (owner-only acts like deleting the\n * organization stay role-checked, not permission-checked); editors work on\n * content and see no money or roster controls; viewers read only.\n */\nexport const CORE_ORG_ROLE_GRANTS: Readonly<Record<OrgRoleName, readonly string[]>> = {\n  owner: CORE_KEYS,\n  admin: CORE_KEYS,\n  editor: ['data.manage', 'marketplace.publish', 'plugins.install'],\n  viewer: [],\n}\n\n/** The core's catalog and grants; the contracts' value adds the plugins' keys. */\nexport const ORG_ROLE_GRANTS: OrgRoleGrants = {\n  permissions: CORE_ORG_PERMISSION_ENTRIES.map((entry) => ({ ...entry })),\n  grants: {\n    owner: [...CORE_ORG_ROLE_GRANTS.owner],\n    admin: [...CORE_ORG_ROLE_GRANTS.admin],\n    editor: [...CORE_ORG_ROLE_GRANTS.editor],\n    viewer: [...CORE_ORG_ROLE_GRANTS.viewer],\n  },\n}\n\n/**\n * The catalog with plugins' declared keys after the core ones, each role\n * holding a declared key when its declaration's `roleDefaults` says so. A\n * declaration naming a core key is refused, as the console's catalog refuses\n * it: the core key keeps its meaning and defaults.\n */\nexport function assembleOrgRoleGrants(\n  core: OrgRoleGrants,\n  declarations: readonly (OrgPermissionDeclaration & { pluginId?: string })[],\n): OrgRoleGrants {\n  const permissions = [...core.permissions]\n  const grants = Object.fromEntries(ORG_ROLE_NAMES.map((role) => [role, [...core.grants[role]]])) as Record<\n    OrgRoleName,\n    string[]\n  >\n  const taken = new Set(permissions.map((entry) => entry.key))\n  for (const declaration of declarations) {\n    if (!declaration?.key || taken.has(declaration.key)) continue\n    taken.add(declaration.key)\n    permissions.push({\n      key: declaration.key,\n      label: declaration.label,\n      description: declaration.description,\n      ...(declaration.pluginId ? { pluginId: declaration.pluginId } : {}),\n    })\n    for (const role of ORG_ROLE_NAMES) {\n      if (declaration.roleDefaults?.[role] === true) grants[role].push(declaration.key)\n    }\n  }\n  return { permissions, grants }\n}\n\n/**\n * A member's effective permissions, as the console's `resolveOrgPermissions`\n * answers them: the role's defaults, then the custom role's explicit\n * verdicts (when the member has one), then the member's own overrides,\n * later layers winning key by key, over the catalog's keys only. A missing\n * role reads as viewer; a role the catalog does not know holds nothing.\n */\nexport function rolePermissions(\n  catalog: OrgRoleGrants,\n  role: string | null | undefined,\n  customRole?: OrgPermissionLayer | null,\n  overrides?: OrgPermissionLayer | null,\n): Record<string, boolean> {\n  const keys = catalog.permissions.map((entry) => entry.key)\n  const name = role ?? 'viewer'\n  const held = new Set((catalog.grants as Record<string, string[] | undefined>)[name] ?? [])\n  const out: Record<string, boolean> = Object.fromEntries(keys.map((key) => [key, held.has(key)]))\n  for (const layer of [customRole, overrides]) {\n    const values = layer?.permissions\n    if (!values) continue\n    for (const key of keys) {\n      if (typeof values[key] === 'boolean') out[key] = values[key]\n    }\n  }\n  return out\n}\n"],"names":["ORG_ROLE_NAMES","CORE_ORG_PERMISSION_ENTRIES","key","label","description","CORE_KEYS","map","entry","CORE_ORG_ROLE_GRANTS","owner","admin","editor","viewer","ORG_ROLE_GRANTS","permissions","grants","assembleOrgRoleGrants","core","declarations","Object","fromEntries","role","taken","Set","declaration","has","add","push","pluginId","roleDefaults","rolePermissions","catalog","customRole","overrides","keys","name","held","out","layer","values"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;CAkBC,GAED,wBAAwB;AAiCxB,OAAO,MAAMA,iBAAyC;IAAC;IAAS;IAAS;IAAU;CAAS,CAAA;AAE5F;;;CAGC,GACD,OAAO,MAAMC,8BAA6D;IACxE;QACEC,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;IACA;QACEF,KAAK;QACLC,OAAO;QACPC,aAAa;IACf;CACD,CAAA;AAED,MAAMC,YAAYJ,4BAA4BK,GAAG,CAAC,CAACC,QAAUA,MAAML,GAAG;AAEtE;;;;;CAKC,GACD,OAAO,MAAMM,uBAAyE;IACpFC,OAAOJ;IACPK,OAAOL;IACPM,QAAQ;QAAC;QAAe;QAAuB;KAAkB;IACjEC,QAAQ,EAAE;AACZ,EAAC;AAED,gFAAgF,GAChF,OAAO,MAAMC,kBAAiC;IAC5CC,aAAab,4BAA4BK,GAAG,CAAC,CAACC,QAAW,aAAKA;IAC9DQ,QAAQ;QACNN,OAAO;eAAID,qBAAqBC,KAAK;SAAC;QACtCC,OAAO;eAAIF,qBAAqBE,KAAK;SAAC;QACtCC,QAAQ;eAAIH,qBAAqBG,MAAM;SAAC;QACxCC,QAAQ;eAAIJ,qBAAqBI,MAAM;SAAC;IAC1C;AACF,EAAC;AAED;;;;;CAKC,GACD,OAAO,SAASI,sBACdC,IAAmB,EACnBC,YAA2E;IAE3E,MAAMJ,cAAc;WAAIG,KAAKH,WAAW;KAAC;IACzC,MAAMC,SAASI,OAAOC,WAAW,CAACpB,eAAeM,GAAG,CAAC,CAACe,OAAS;YAACA;YAAM;mBAAIJ,KAAKF,MAAM,CAACM,KAAK;aAAC;SAAC;IAI7F,MAAMC,QAAQ,IAAIC,IAAIT,YAAYR,GAAG,CAAC,CAACC,QAAUA,MAAML,GAAG;IAC1D,KAAK,MAAMsB,eAAeN,aAAc;QACtC,IAAI,EAACM,+BAAAA,YAAatB,GAAG,KAAIoB,MAAMG,GAAG,CAACD,YAAYtB,GAAG,GAAG;QACrDoB,MAAMI,GAAG,CAACF,YAAYtB,GAAG;QACzBY,YAAYa,IAAI,CAAC;YACfzB,KAAKsB,YAAYtB,GAAG;YACpBC,OAAOqB,YAAYrB,KAAK;YACxBC,aAAaoB,YAAYpB,WAAW;WAChCoB,YAAYI,QAAQ,GAAG;YAAEA,UAAUJ,YAAYI,QAAQ;QAAC,IAAI,CAAC;QAEnE,KAAK,MAAMP,QAAQrB,eAAgB;gBAC7BwB;YAAJ,IAAIA,EAAAA,4BAAAA,YAAYK,YAAY,qBAAxBL,yBAA0B,CAACH,KAAK,MAAK,MAAMN,MAAM,CAACM,KAAK,CAACM,IAAI,CAACH,YAAYtB,GAAG;QAClF;IACF;IACA,OAAO;QAAEY;QAAaC;IAAO;AAC/B;AAEA;;;;;;CAMC,GACD,OAAO,SAASe,gBACdC,OAAsB,EACtBV,IAA+B,EAC/BW,UAAsC,EACtCC,SAAqC;QAIhB;IAFrB,MAAMC,OAAOH,QAAQjB,WAAW,CAACR,GAAG,CAAC,CAACC,QAAUA,MAAML,GAAG;IACzD,MAAMiC,OAAOd,eAAAA,OAAQ;IACrB,MAAMe,OAAO,IAAIb,KAAI,uBAAA,AAACQ,QAAQhB,MAAM,AAAyC,CAACoB,KAAK,YAA9D,uBAAkE,EAAE;IACzF,MAAME,MAA+BlB,OAAOC,WAAW,CAACc,KAAK5B,GAAG,CAAC,CAACJ,MAAQ;YAACA;YAAKkC,KAAKX,GAAG,CAACvB;SAAK;IAC9F,KAAK,MAAMoC,SAAS;QAACN;QAAYC;KAAU,CAAE;QAC3C,MAAMM,SAASD,yBAAAA,MAAOxB,WAAW;QACjC,IAAI,CAACyB,QAAQ;QACb,KAAK,MAAMrC,OAAOgC,KAAM;YACtB,IAAI,OAAOK,MAAM,CAACrC,IAAI,KAAK,WAAWmC,GAAG,CAACnC,IAAI,GAAGqC,MAAM,CAACrC,IAAI;QAC9D;IACF;IACA,OAAOmC;AACT"}

package/src/lib/app-utils/plan-entitlements.d.ts

@@ -220,6 +220,14 @@ export declare const SELF_SERVE_PLANS: OrgPlan[];
  * "free". Revenue for such an org comes from `subscription.customMonthlyUsd`.
  */
 export declare function isCustomPricedPlan(plan: OrgPlan | undefined | null): boolean;
+/**
+ * Whether a plan sells the Site Care add-on (AGL-3954): every paid self-serve
+ * plan, never `free` (no subscription to bill it on) and never a
+ * custom-priced plan (Enterprise names it in the agreement instead). An
+ * unknown plan string sells nothing. The ONE reading of that rule — the
+ * add-on ceiling, the checkout refusal and the Billing card all ask it.
+ */
+export declare function planSellsSiteCare(plan: OrgPlan | string | undefined | null): boolean;
 /** Human plan names — the ONE source every plan badge/label reads. */
 export declare const PLAN_LABELS: Record<OrgPlan, string>;
 /**
@@ -235,6 +243,24 @@ export declare const PLAN_LABELS: Record<OrgPlan, string>;
  * The marketing copy on /pricing is written against that behaviour.
  */
 export declare const EVENT_CALENDAR_ADDON_MONTHLY_USD = 9;
+/**
+ * Site Care add-on (AGL-3954): $49/mo per organization, the managed-website
+ * service. It buys staff time, not capacity: small changes to the owner's
+ * existing site (hours, prices, photos, a staff member, a seasonal banner, a
+ * section on an existing page), up to about one hour of work a month, done
+ * within two business days, minutes logged and no rollover. New pages, new
+ * forms, redesigns, brand work, photography, whole-site copy and ads are
+ * quoted separately, and it never raises a plan limit — a 26th page or a
+ * second site is still an upgrade.
+ *
+ * Flat across plans, like the Event Calendar, because the work it pays for
+ * is the same hour whichever tier the site is on; the yearly price is ×12
+ * with no discount, as every add-on's is. Sold on every paid self-serve plan
+ * and never on Free (no subscription to carry it) or Enterprise (quoted per
+ * deal) — `planSellsSiteCare` is that rule. `resolveOrgEntitlements` flips
+ * the org-wide `features.siteCare` from any purchased quantity >= 1.
+ */
+export declare const SITE_CARE_ADDON_MONTHLY_USD = 49;
 /**
  * POS Pro register add-on (AGL-329): $89/mo per extra register/location
  * (Shopify POS Pro parity). Purchased add-ons land as a per-org
@@ -762,6 +788,12 @@ export declare function orgListPriceMonthlyUsd(org: Partial<AglynOrgBilling> | n
  * `NaN` or a negative is none.
  */
 export declare function aiAddonUnits(addons: OrgSeatAddons | null | undefined): 0 | 1;
+/**
+ * How many Site Care add-ons a purchase map counts as: 0 or 1 (AGL-3954).
+ * Org-wide like the Aglyn AI add-on, so a quantity above one is one
+ * purchase, and a non-number, `NaN` or a negative is none.
+ */
+export declare function siteCareUnits(addons: OrgSeatAddons | null | undefined): 0 | 1;
 /**
  * A list price net of a discount (AGL-1105). Percentage discounts scale the
  * whole bill; fixed discounts subtract a flat USD amount. Never below 0, and
@@ -1458,6 +1490,14 @@ export declare function resolveEffectivePlan(org: Partial<AglynOrgBilling> | nul
  * together rather than leaving a rate on a band that has gone.
  */
 export declare function hasAiAddon(org: Partial<AglynOrgBilling> | null | undefined): boolean;
+/**
+ * Whether the org's Site Care add-on currently applies (AGL-3954): bought,
+ * and on a subscription that is still paying for it, so a dead subscription
+ * reads false here exactly as it drops `features.siteCare`. The reader for
+ * surfaces that ask about the purchase rather than the resolved feature —
+ * the staff org page's chip, the request intake.
+ */
+export declare function hasSiteCare(org: Partial<AglynOrgBilling> | null | undefined): boolean;
 /**
  * Numeric entitlement keys that were REMOVED from `PLAN_ENTITLEMENTS` and
  * must never be resolved again from a stored override (AGL-2133).
@@ -1504,7 +1544,7 @@ export declare const PRICE_ENTITLEMENT_KEYS: ReadonlySet<string>;
  * per-key overrides applied (features merge key-by-key too), then
  * purchased add-ons stacked on top (AGL-524): `seatAddons.hosts` raises
  * `hostLimit`, `seatAddons.eventCalendar` switches the `eventCalendar`
- * feature on, and every seat add-on a plugin declared through
+ * feature on, `seatAddons.siteCare` switches `siteCare` on, and every seat add-on a plugin declared through
  * `registerPluginEntitlements` (AGL-2940) widens the quota it names by its
  * per-plan figure per unit and switches its features on — the Aglyn AI
  * add-on (AGL-2896) is the first such declaration. (Seat/dataset add-ons

package/src/lib/app-utils/plan-entitlements.js

@@ -259,6 +259,10 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: false,
             multilingual: false,
             eventCalendar: false,
+            // Site Care (AGL-3954) is never granted by a tier, on this plan or any
+            // other: it is the managed-website add-on, switched on only by a live
+            // `seatAddons.siteCare` purchase (or a staff override), never by a row.
+            siteCare: false,
             redirects: false,
             screenAnalytics: false,
             /**
@@ -377,6 +381,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: false,
             multilingual: false,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: false,
             mediaCdn: true,
@@ -490,6 +495,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: true,
             multilingual: false,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -560,6 +566,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: true,
             multilingual: true,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -633,6 +640,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: true,
             multilingual: true,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -703,6 +711,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: true,
             multilingual: true,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -777,6 +786,7 @@ export const PLAN_ENTITLEMENTS = {
             siteExport: true,
             multilingual: true,
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -888,6 +898,7 @@ export const PLAN_ENTITLEMENTS = {
             multilingual: true,
             // Event Calendar stays an add-on purchase, as on every other tier.
             eventCalendar: false,
+            siteCare: false,
             redirects: true,
             screenAnalytics: true,
             mediaCdn: true,
@@ -955,6 +966,17 @@ fillPluginPlanEntitlements(PLAN_ENTITLEMENTS);
  */ export function isCustomPricedPlan(plan) {
     return plan === 'enterprise';
 }
+/**
+ * Whether a plan sells the Site Care add-on (AGL-3954): every paid self-serve
+ * plan, never `free` (no subscription to bill it on) and never a
+ * custom-priced plan (Enterprise names it in the agreement instead). An
+ * unknown plan string sells nothing. The ONE reading of that rule — the
+ * add-on ceiling, the checkout refusal and the Billing card all ask it.
+ */ export function planSellsSiteCare(plan) {
+    if (!plan || plan === 'free') return false;
+    if (isCustomPricedPlan(plan)) return false;
+    return SELF_SERVE_PLANS.includes(plan);
+}
 /** Human plan names — the ONE source every plan badge/label reads. */ export const PLAN_LABELS = {
     free: 'Free',
     starter: 'Starter',
@@ -977,6 +999,23 @@ fillPluginPlanEntitlements(PLAN_ENTITLEMENTS);
  * boolean from any quantity >= 1. One purchase covers every host in the org.
  * The marketing copy on /pricing is written against that behaviour.
  */ export const EVENT_CALENDAR_ADDON_MONTHLY_USD = 9;
+/**
+ * Site Care add-on (AGL-3954): $49/mo per organization, the managed-website
+ * service. It buys staff time, not capacity: small changes to the owner's
+ * existing site (hours, prices, photos, a staff member, a seasonal banner, a
+ * section on an existing page), up to about one hour of work a month, done
+ * within two business days, minutes logged and no rollover. New pages, new
+ * forms, redesigns, brand work, photography, whole-site copy and ads are
+ * quoted separately, and it never raises a plan limit — a 26th page or a
+ * second site is still an upgrade.
+ *
+ * Flat across plans, like the Event Calendar, because the work it pays for
+ * is the same hour whichever tier the site is on; the yearly price is ×12
+ * with no discount, as every add-on's is. Sold on every paid self-serve plan
+ * and never on Free (no subscription to carry it) or Enterprise (quoted per
+ * deal) — `planSellsSiteCare` is that rule. `resolveOrgEntitlements` flips
+ * the org-wide `features.siteCare` from any purchased quantity >= 1.
+ */ export const SITE_CARE_ADDON_MONTHLY_USD = 49;
 /**
  * POS Pro register add-on (AGL-329): $89/mo per extra register/location
  * (Shopify POS Pro parity). Purchased add-ons land as a per-org
@@ -1582,7 +1621,7 @@ function trimmedOrNull(value) {
     const annual = (org == null ? void 0 : (_org_subscription1 = org.subscription) == null ? void 0 : _org_subscription1.interval) === 'year';
     const addons = (_ref = org == null ? void 0 : org.seatAddons) != null ? _ref : {};
     const seats = (quantity, price)=>Math.max(0, quantity != null ? quantity : 0) * (price != null ? price : 0);
-    return (annual ? pricing.basePriceAnnualMonthlyUsd : pricing.basePriceMonthlyUsd) + seats(addons.managers, pricing.extraSeatMonthlyUsd) + seats(addons.members, pricing.extraCollaboratorMonthlyUsd) + seats(addons.datasets, pricing.extraDatasetMonthlyUsd) + seats(addons.hosts, pricing.extraHostMonthlyUsd) + seats(addons.posRegisters, POS_REGISTER_ADDON_MONTHLY_USD) + seats(addons.eventCalendar, EVENT_CALENDAR_ADDON_MONTHLY_USD) + // A toggle, not a quantity: one purchase covers the org, so a stored
+    return (annual ? pricing.basePriceAnnualMonthlyUsd : pricing.basePriceMonthlyUsd) + seats(addons.managers, pricing.extraSeatMonthlyUsd) + seats(addons.members, pricing.extraCollaboratorMonthlyUsd) + seats(addons.datasets, pricing.extraDatasetMonthlyUsd) + seats(addons.hosts, pricing.extraHostMonthlyUsd) + seats(addons.posRegisters, POS_REGISTER_ADDON_MONTHLY_USD) + seats(addons.eventCalendar, EVENT_CALENDAR_ADDON_MONTHLY_USD) + seats(siteCareUnits(addons), SITE_CARE_ADDON_MONTHLY_USD) + // A toggle, not a quantity: one purchase covers the org, so a stored
     // quantity above one bills once.
     seats(aiAddonUnits(addons), pricing.aiAddonMonthlyUsd);
 }
@@ -1596,6 +1635,15 @@ function trimmedOrNull(value) {
     const quantity = Number((_ref = addons == null ? void 0 : addons.aiAddon) != null ? _ref : 0);
     return Number.isFinite(quantity) && quantity >= 1 ? 1 : 0;
 }
+/**
+ * How many Site Care add-ons a purchase map counts as: 0 or 1 (AGL-3954).
+ * Org-wide like the Aglyn AI add-on, so a quantity above one is one
+ * purchase, and a non-number, `NaN` or a negative is none.
+ */ export function siteCareUnits(addons) {
+    var _ref;
+    const quantity = Number((_ref = addons == null ? void 0 : addons.siteCare) != null ? _ref : 0);
+    return Number.isFinite(quantity) && quantity >= 1 ? 1 : 0;
+}
 /**
  * A list price net of a discount (AGL-1105). Percentage discounts scale the
  * whole bill; fixed discounts subtract a flat USD amount. Never below 0, and
@@ -2401,6 +2449,15 @@ function resolvePlan(org) {
  */ export function hasAiAddon(org) {
     return aiAddonUnits(resolvePurchasedAddons(org)) === 1;
 }
+/**
+ * Whether the org's Site Care add-on currently applies (AGL-3954): bought,
+ * and on a subscription that is still paying for it, so a dead subscription
+ * reads false here exactly as it drops `features.siteCare`. The reader for
+ * surfaces that ask about the purchase rather than the resolved feature —
+ * the staff org page's chip, the request intake.
+ */ export function hasSiteCare(org) {
+    return siteCareUnits(resolvePurchasedAddons(org)) === 1;
+}
 /**
  * Numeric entitlement keys that were REMOVED from `PLAN_ENTITLEMENTS` and
  * must never be resolved again from a stored override (AGL-2133).
@@ -2484,7 +2541,7 @@ function resolvePlan(org) {
  * per-key overrides applied (features merge key-by-key too), then
  * purchased add-ons stacked on top (AGL-524): `seatAddons.hosts` raises
  * `hostLimit`, `seatAddons.eventCalendar` switches the `eventCalendar`
- * feature on, and every seat add-on a plugin declared through
+ * feature on, `seatAddons.siteCare` switches `siteCare` on, and every seat add-on a plugin declared through
  * `registerPluginEntitlements` (AGL-2940) widens the quota it names by its
  * per-plan figure per unit and switches its features on — the Aglyn AI
  * add-on (AGL-2896) is the first such declaration. (Seat/dataset add-ons
@@ -2589,17 +2646,22 @@ function resolvePlan(org) {
     const purchased = resolvePurchasedAddons(org);
     const extraHosts = Math.max(0, (_purchased_hosts = purchased.hosts) != null ? _purchased_hosts : 0);
     const eventCalendar = ((_purchased_eventCalendar = purchased.eventCalendar) != null ? _purchased_eventCalendar : 0) >= 1;
+    const siteCare = siteCareUnits(purchased) === 1;
     // A declared add-on's quota is added AFTER the per-org override, so a
     // contracted figure and a purchased add-on stack the way a raised
     // `hostLimit` and purchased sites do. The per-unit figure is the PLAN's,
     // read off the effective plan rather than the stored one, so a dead
     // subscription that resolved to free adds free's figure.
     const folded = foldPluginSeatAddons(resolved, purchased, resolvePlan(org));
-    if (!extraHosts && !eventCalendar && folded === resolved) return resolved;
+    if (!extraHosts && !eventCalendar && !siteCare && folded === resolved) {
+        return resolved;
+    }
     return _extends({}, folded, {
         hostLimit: folded.hostLimit + extraHosts,
         features: _extends({}, folded.features, eventCalendar ? {
             eventCalendar: true
+        } : {}, siteCare ? {
+            siteCare: true
         } : {})
     });
 }