@aglyn/aglyn 1.0.0-beta.270 → 1.0.0-beta.271

package/src/lib/plugin-manager/purchase-gate-preclearance.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/purchase-gate-preclearance.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHO MAY WAIVE A PURCHASE GATE, ONCE (AGL-3955).\n *\n * A plugin that sells something can hold a purchase behind a gate the\n * workspace has to earn: the domains plugin refuses to register a name until\n * the workspace has a paid platform invoice at least 72 hours old. Core owns\n * the one thing that can stand in for that history: a staff member who met\n * the owner in person and minted a single-use bundle link for that one\n * workspace, accountable for it in `adminAudit`.\n *\n * The plugin cannot read core's bundle-link records (a plugin never imports\n * core's storage, and never another plugin), so the waiver is a contract\n * here. The plugin asks `check` while deciding whether the gate refuses, and\n * calls `consume` after it has taken its own hold and before it charges: a\n * `false` from `consume` refuses the purchase, so one preclearance buys\n * exactly one thing.\n *\n * Only the named gate is waived. Every other refusal the plugin makes (a\n * brand lookalike, its per-workspace caps) stands, and an implementation has\n * no say in them.\n *\n * ## FAILS CLOSED\n *\n * {@link checkPurchaseGatePreclearance} answers null on any error and when\n * nothing is registered, and {@link consumePurchaseGatePreclearance} answers\n * false: a waiver that cannot be confirmed is no waiver, and the gate keeps\n * refusing.\n */\n\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/** The gates a preclearance may waive. One today. */\nexport type PurchaseGate = 'domain-payment-history'\n\nexport interface PurchaseGatePreclearanceInput {\n  /** The workspace the purchase is for. */\n  orgId: string\n  gate: PurchaseGate\n}\n\nexport interface PurchaseGatePreclearance {\n  /**\n   * A live, unused waiver for this workspace and gate, or null. Reads only:\n   * asking does not spend it.\n   */\n  check(input: PurchaseGatePreclearanceInput): Promise<{ preclearanceId: string } | null>\n  /**\n   * Spend the waiver: true exactly once per id, in a transaction that marks it\n   * used only if nothing has. False for an id this implementation does not\n   * hold, one already spent, or one that expired.\n   */\n  consume(preclearanceId: string): Promise<boolean>\n}\n\n/**\n * A set: more than one surface may mint a waiver (a bundle link today), and\n * the gate asks each in turn.\n */\nexport const PURCHASE_GATE_PRECLEARANCE =\n  definePluginServiceContract<PurchaseGatePreclearance>('core.purchase-gate-preclearance', {\n    multiple: true,\n  })\n\n/** Installs an implementation. The console registers the bundle links at boot. */\nexport function registerPurchaseGatePreclearance(\n  impl: PurchaseGatePreclearance,\n  options?: { pluginId?: string; key?: string },\n): void {\n  if (typeof impl?.check !== 'function' || typeof impl?.consume !== 'function') {\n    throw new Error('a purchase gate preclearance needs check and consume functions')\n  }\n  registerPluginService(PURCHASE_GATE_PRECLEARANCE, impl, {\n    ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n    ...(options?.key ? { key: options.key } : {}),\n  })\n}\n\n/**\n * The first live waiver any implementation holds for the workspace and gate,\n * or null. Never throws; an implementation that throws is skipped and\n * logged, so it can only ever cost a waiver, never grant one.\n */\nexport async function checkPurchaseGatePreclearance(\n  input: PurchaseGatePreclearanceInput,\n): Promise<{ preclearanceId: string } | null> {\n  const orgId = String(input?.orgId ?? '').trim()\n  if (!orgId || input?.gate !== 'domain-payment-history') return null\n  for (const registration of resolvePluginServices(PURCHASE_GATE_PRECLEARANCE)) {\n    try {\n      const found = await registration.impl.check({ orgId, gate: input.gate })\n      const preclearanceId = String(found?.preclearanceId ?? '').trim()\n      if (preclearanceId) return { preclearanceId }\n    } catch (error) {\n      console.error(\n        `[purchase-gate-preclearance] check failed in \"${registration.pluginId}\"`,\n        error,\n      )\n    }\n  }\n  return null\n}\n\n/**\n * Spend a waiver. True only when an implementation marked it used just now.\n * Never throws: a failure answers false, which refuses the purchase.\n */\nexport async function consumePurchaseGatePreclearance(\n  preclearanceId: string,\n): Promise<boolean> {\n  const id = String(preclearanceId ?? '').trim()\n  if (!id) return false\n  for (const registration of resolvePluginServices(PURCHASE_GATE_PRECLEARANCE)) {\n    try {\n      if ((await registration.impl.consume(id)) === true) return true\n    } catch (error) {\n      console.error(\n        `[purchase-gate-preclearance] consume failed in \"${registration.pluginId}\"`,\n        error,\n      )\n    }\n  }\n  return false\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginServices","PURCHASE_GATE_PRECLEARANCE","multiple","registerPurchaseGatePreclearance","impl","options","check","consume","Error","pluginId","key","checkPurchaseGatePreclearance","input","orgId","String","trim","gate","registration","found","preclearanceId","error","console","consumePurchaseGatePreclearance","id"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BC,GAED,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAyB1B;;;CAGC,GACD,OAAO,MAAMC,6BACXH,4BAAsD,mCAAmC;IACvFI,UAAU;AACZ,GAAE;AAEJ,gFAAgF,GAChF,OAAO,SAASC,iCACdC,IAA8B,EAC9BC,OAA6C;IAE7C,IAAI,QAAOD,wBAAAA,KAAME,KAAK,MAAK,cAAc,QAAOF,wBAAAA,KAAMG,OAAO,MAAK,YAAY;QAC5E,MAAM,IAAIC,MAAM;IAClB;IACAT,sBAAsBE,4BAA4BG,MAAM,aAClDC,CAAAA,2BAAAA,QAASI,QAAQ,IAAG;QAAEA,UAAUJ,QAAQI,QAAQ;IAAC,IAAI,CAAC,GACtDJ,CAAAA,2BAAAA,QAASK,GAAG,IAAG;QAAEA,KAAKL,QAAQK,GAAG;IAAC,IAAI,CAAC;AAE/C;AAEA;;;;CAIC,GACD,OAAO,eAAeC,8BACpBC,KAAoC;;IAEpC,MAAMC,QAAQC,eAAOF,yBAAAA,MAAOC,KAAK,mBAAI,IAAIE,IAAI;IAC7C,IAAI,CAACF,SAASD,CAAAA,yBAAAA,MAAOI,IAAI,MAAK,0BAA0B,OAAO;IAC/D,KAAK,MAAMC,gBAAgBjB,sBAAsBC,4BAA6B;QAC5E,IAAI;;YACF,MAAMiB,QAAQ,MAAMD,aAAab,IAAI,CAACE,KAAK,CAAC;gBAAEO;gBAAOG,MAAMJ,MAAMI,IAAI;YAAC;YACtE,MAAMG,iBAAiBL,gBAAOI,yBAAAA,MAAOC,cAAc,oBAAI,IAAIJ,IAAI;YAC/D,IAAII,gBAAgB,OAAO;gBAAEA;YAAe;QAC9C,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CACX,CAAC,8CAA8C,EAAEH,aAAaR,QAAQ,CAAC,CAAC,CAAC,EACzEW;QAEJ;IACF;IACA,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,eAAeE,gCACpBH,cAAsB;IAEtB,MAAMI,KAAKT,OAAOK,yBAAAA,iBAAkB,IAAIJ,IAAI;IAC5C,IAAI,CAACQ,IAAI,OAAO;IAChB,KAAK,MAAMN,gBAAgBjB,sBAAsBC,4BAA6B;QAC5E,IAAI;YACF,IAAI,AAAC,MAAMgB,aAAab,IAAI,CAACG,OAAO,CAACgB,QAAS,MAAM,OAAO;QAC7D,EAAE,OAAOH,OAAO;YACdC,QAAQD,KAAK,CACX,CAAC,gDAAgD,EAAEH,aAAaR,QAAQ,CAAC,CAAC,CAAC,EAC3EW;QAEJ;IACF;IACA,OAAO;AACT"}