@aglyn/aglyn 1.0.0-beta.291 → 1.0.0-beta.293

package/src/lib/app-utils/site-create-return.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/site-create-return.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The query a sites page opens \"Create site\" from, and the way back to it\n * after buying a starter (AGL-3761, AGL-4049).\n *\n * `/{org}/hosts?create=site` opens Create site: the empty console sends a\n * first site there once its workspace exists. A starter bought from \"Choose\n * your starter\" comes back the same way, naming the starter the person picked\n * (`&starter={listingId}`) and how the payment ended (`&purchase=success` or\n * `&purchase=canceled`), so Create site reopens on that pick. The server\n * that opens the payment builds the address from these names, and the sites\n * page reads it with them, so the two cannot disagree.\n */\n\nexport const SITE_CREATE_PARAM = 'create'\nexport const SITE_CREATE_VALUE = 'site'\n/** The starter the person picked before paying for it. */\nexport const SITE_CREATE_STARTER_PARAM = 'starter'\n/** How the payment ended, as the payment page sends the person back. */\nexport const SITE_CREATE_PURCHASE_PARAM = 'purchase'\n\nexport type SiteCreatePurchase = 'success' | 'canceled'\n\n/** A starter Create site reopens on: the person's own pick, and how buying it ended. */\nexport interface SiteCreateStarterReturn {\n  listingId: string\n  /** `success` once paid, `canceled` when the person came back without paying, `null` when it does not say. */\n  purchase: SiteCreatePurchase | null\n}\n\n/** What a sites page's address asks of Create site. */\nexport interface SiteCreateRequest {\n  /** `?create=site` is present. */\n  asked: boolean\n  /** The starter to reopen on, or `null`. */\n  starter: SiteCreateStarterReturn | null\n}\n\n/** A listing id as an address may carry one: the marketplace's own id shape. */\nconst LISTING_ID = /^[A-Za-z0-9_-]{1,128}$/\n\n/**\n * The query that reopens Create site on a starter, in one order, for the\n * payment's way back: `create=site&starter={listingId}`, and `purchase` when\n * it is given. `null` for an id no listing can have, so a malformed one is\n * never written into an address.\n */\nexport function siteCreateReturnQuery(\n  listingId: string,\n  purchase?: SiteCreatePurchase,\n): URLSearchParams | null {\n  const id = typeof listingId === 'string' ? listingId.trim() : ''\n  if (!LISTING_ID.test(id)) return null\n  const params = new URLSearchParams()\n  params.set(SITE_CREATE_PARAM, SITE_CREATE_VALUE)\n  params.set(SITE_CREATE_STARTER_PARAM, id)\n  if (purchase) params.set(SITE_CREATE_PURCHASE_PARAM, purchase)\n  return params\n}\n\n/**\n * What an address asks of Create site, read defensively. A starter is read\n * only with `create=site`, and only a well-formed listing id; a `purchase`\n * value other than the two the payment sends is no answer at all.\n */\nexport function readSiteCreateRequest(\n  params: { get(name: string): string | null } | null | undefined,\n): SiteCreateRequest {\n  const asked = params?.get(SITE_CREATE_PARAM) === SITE_CREATE_VALUE\n  if (!asked) return { asked: false, starter: null }\n  const listingId = (params?.get(SITE_CREATE_STARTER_PARAM) ?? '').trim()\n  if (!LISTING_ID.test(listingId)) return { asked: true, starter: null }\n  const purchase = params?.get(SITE_CREATE_PURCHASE_PARAM)\n  return {\n    asked: true,\n    starter: {\n      listingId,\n      purchase: purchase === 'success' || purchase === 'canceled' ? purchase : null,\n    },\n  }\n}\n"],"names":["SITE_CREATE_PARAM","SITE_CREATE_VALUE","SITE_CREATE_STARTER_PARAM","SITE_CREATE_PURCHASE_PARAM","LISTING_ID","siteCreateReturnQuery","listingId","purchase","id","trim","test","params","URLSearchParams","set","readSiteCreateRequest","asked","get","starter"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC,GAED,OAAO,MAAMA,oBAAoB,SAAQ;AACzC,OAAO,MAAMC,oBAAoB,OAAM;AACvC,wDAAwD,GACxD,OAAO,MAAMC,4BAA4B,UAAS;AAClD,sEAAsE,GACtE,OAAO,MAAMC,6BAA6B,WAAU;AAmBpD,8EAA8E,GAC9E,MAAMC,aAAa;AAEnB;;;;;CAKC,GACD,OAAO,SAASC,sBACdC,SAAiB,EACjBC,QAA6B;IAE7B,MAAMC,KAAK,OAAOF,cAAc,WAAWA,UAAUG,IAAI,KAAK;IAC9D,IAAI,CAACL,WAAWM,IAAI,CAACF,KAAK,OAAO;IACjC,MAAMG,SAAS,IAAIC;IACnBD,OAAOE,GAAG,CAACb,mBAAmBC;IAC9BU,OAAOE,GAAG,CAACX,2BAA2BM;IACtC,IAAID,UAAUI,OAAOE,GAAG,CAACV,4BAA4BI;IACrD,OAAOI;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASG,sBACdH,MAA+D;;IAE/D,MAAMI,QAAQJ,CAAAA,0BAAAA,OAAQK,GAAG,CAAChB,wBAAuBC;IACjD,IAAI,CAACc,OAAO,OAAO;QAAEA,OAAO;QAAOE,SAAS;IAAK;IACjD,MAAMX,YAAY,SAACK,0BAAAA,OAAQK,GAAG,CAACd,6CAA8B,IAAIO,IAAI;IACrE,IAAI,CAACL,WAAWM,IAAI,CAACJ,YAAY,OAAO;QAAES,OAAO;QAAME,SAAS;IAAK;IACrE,MAAMV,WAAWI,0BAAAA,OAAQK,GAAG,CAACb;IAC7B,OAAO;QACLY,OAAO;QACPE,SAAS;YACPX;YACAC,UAAUA,aAAa,aAAaA,aAAa,aAAaA,WAAW;QAC3E;IACF;AACF"}

package/src/lib/app-utils/site-starter-pick.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { SiteStarterSummary } from '../plugin-manager/plugin-site-starters';
+/**
+ * A starter picked in "Choose your starter" (AGL-4049), as Create site
+ * decides about it: whether a site can be created from it yet, and what the
+ * create's refusal of it asks for. Pure, so every surface that offers the
+ * picker — the console, the native apps — decides the same way.
+ */
+/**
+ * What stands between a pick and Create site: nothing picked (`none`), or a
+ * price the workspace has not paid (`purchase`); `null` when the site can be
+ * created from it. `owned` is what the surface knows better than the
+ * search's own answer (the person just paid, or the create still asked for
+ * payment); absent, the summary's `owned` stands.
+ */
+export type SiteStarterPickBlock = 'none' | 'purchase';
+export declare function siteStarterPickBlock(pick: SiteStarterSummary | null | undefined, owned?: boolean): SiteStarterPickBlock | null;
+/** What Create site does with a create that refused the starter it was asked for. */
+export interface SiteStarterPickRefused {
+    /** The pick stays: it can still be created from, once bought. */
+    keep: boolean;
+    /** It is the price that stands in the way, so buying it is offered. */
+    purchase: boolean;
+    /** The create's own words for why. */
+    message: string;
+}
+/**
+ * The create's refusal of THIS pick, or `null` for a refusal about anything
+ * else (the name, the address, the plan's site count), which Create site
+ * answers as it always has. A refusal of a pick names its listing: a 402 is
+ * a price to pay, and the pick stays with "Buy and continue"; anything else
+ * (the release not open to the workspace, a starter that is gone, one with
+ * more pages than the plan holds, an AI starter before the AI start takes
+ * them) clears the pick, with the reason said.
+ */
+export declare function readSiteStarterPickRefusal(status: number, payload: unknown, listingId: string): SiteStarterPickRefused | null;

package/src/lib/app-utils/site-starter-pick.js

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export function siteStarterPickBlock(pick, owned) {
+    if (!pick) return 'none';
+    if (pick.priceUsd > 0 && !(owned != null ? owned : pick.owned === true)) return 'purchase';
+    return null;
+}
+/**
+ * The create's refusal of THIS pick, or `null` for a refusal about anything
+ * else (the name, the address, the plan's site count), which Create site
+ * answers as it always has. A refusal of a pick names its listing: a 402 is
+ * a price to pay, and the pick stays with "Buy and continue"; anything else
+ * (the release not open to the workspace, a starter that is gone, one with
+ * more pages than the plan holds, an AI starter before the AI start takes
+ * them) clears the pick, with the reason said.
+ */ export function readSiteStarterPickRefusal(status, payload, listingId) {
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return null;
+    const body = payload;
+    if (!listingId || body['listingId'] !== listingId) return null;
+    const error = body['error'];
+    const message = typeof error === 'string' && error.trim() ? error.trim() : 'That starter cannot be used.';
+    if (status === 402) return {
+        keep: true,
+        purchase: true,
+        message
+    };
+    return {
+        keep: false,
+        purchase: false,
+        message
+    };
+}
+
+//# sourceMappingURL=site-starter-pick.js.map

package/src/lib/app-utils/site-starter-pick.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/site-starter-pick.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { SiteStarterSummary } from '../plugin-manager/plugin-site-starters'\n\n/**\n * A starter picked in \"Choose your starter\" (AGL-4049), as Create site\n * decides about it: whether a site can be created from it yet, and what the\n * create's refusal of it asks for. Pure, so every surface that offers the\n * picker — the console, the native apps — decides the same way.\n */\n\n/**\n * What stands between a pick and Create site: nothing picked (`none`), or a\n * price the workspace has not paid (`purchase`); `null` when the site can be\n * created from it. `owned` is what the surface knows better than the\n * search's own answer (the person just paid, or the create still asked for\n * payment); absent, the summary's `owned` stands.\n */\nexport type SiteStarterPickBlock = 'none' | 'purchase'\n\nexport function siteStarterPickBlock(\n  pick: SiteStarterSummary | null | undefined,\n  owned?: boolean,\n): SiteStarterPickBlock | null {\n  if (!pick) return 'none'\n  if (pick.priceUsd > 0 && !(owned ?? pick.owned === true)) return 'purchase'\n  return null\n}\n\n/** What Create site does with a create that refused the starter it was asked for. */\nexport interface SiteStarterPickRefused {\n  /** The pick stays: it can still be created from, once bought. */\n  keep: boolean\n  /** It is the price that stands in the way, so buying it is offered. */\n  purchase: boolean\n  /** The create's own words for why. */\n  message: string\n}\n\n/**\n * The create's refusal of THIS pick, or `null` for a refusal about anything\n * else (the name, the address, the plan's site count), which Create site\n * answers as it always has. A refusal of a pick names its listing: a 402 is\n * a price to pay, and the pick stays with \"Buy and continue\"; anything else\n * (the release not open to the workspace, a starter that is gone, one with\n * more pages than the plan holds, an AI starter before the AI start takes\n * them) clears the pick, with the reason said.\n */\nexport function readSiteStarterPickRefusal(\n  status: number,\n  payload: unknown,\n  listingId: string,\n): SiteStarterPickRefused | null {\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return null\n  const body = payload as Record<string, unknown>\n  if (!listingId || body['listingId'] !== listingId) return null\n  const error = body['error']\n  const message = typeof error === 'string' && error.trim() ? error.trim() : 'That starter cannot be used.'\n  if (status === 402) return { keep: true, purchase: true, message }\n  return { keep: false, purchase: false, message }\n}\n"],"names":["siteStarterPickBlock","pick","owned","priceUsd","readSiteStarterPickRefusal","status","payload","listingId","Array","isArray","body","error","message","trim","keep","purchase"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAoBD,OAAO,SAASA,qBACdC,IAA2C,EAC3CC,KAAe;IAEf,IAAI,CAACD,MAAM,OAAO;IAClB,IAAIA,KAAKE,QAAQ,GAAG,KAAK,EAAED,gBAAAA,QAASD,KAAKC,KAAK,KAAK,OAAO,OAAO;IACjE,OAAO;AACT;AAYA;;;;;;;;CAQC,GACD,OAAO,SAASE,2BACdC,MAAc,EACdC,OAAgB,EAChBC,SAAiB;IAEjB,IAAI,CAACD,WAAW,OAAOA,YAAY,YAAYE,MAAMC,OAAO,CAACH,UAAU,OAAO;IAC9E,MAAMI,OAAOJ;IACb,IAAI,CAACC,aAAaG,IAAI,CAAC,YAAY,KAAKH,WAAW,OAAO;IAC1D,MAAMI,QAAQD,IAAI,CAAC,QAAQ;IAC3B,MAAME,UAAU,OAAOD,UAAU,YAAYA,MAAME,IAAI,KAAKF,MAAME,IAAI,KAAK;IAC3E,IAAIR,WAAW,KAAK,OAAO;QAAES,MAAM;QAAMC,UAAU;QAAMH;IAAQ;IACjE,OAAO;QAAEE,MAAM;QAAOC,UAAU;QAAOH;IAAQ;AACjD"}

package/src/lib/app-utils/site-styles.d.ts

@@ -0,0 +1,110 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The styles a new site can start in (AGL-4049), and the record of which one
+ * a site was created with.
+ *
+ * Nothing in "Create site" is chosen for a person: a site is created only
+ * once they have picked a style. A style is a kind of site's look — the same
+ * 21 the AI start's Style step offers, each with an example home page as its
+ * picture — so the starter site and the AI start speak one vocabulary.
+ *
+ * This module is the LIST: what a person may choose on any surface, the
+ * native apps included (the derived-values generator emits it). The LOOK a
+ * style gives a site is the AI plugin's, behind the `core.site-style-looks`
+ * seam (`plugin-manager/plugin-site-style-looks.ts`); with no plugin
+ * answering, a site still starts in the default theme and the choice is
+ * still recorded. The AI plugin's own kinds are held to this list, id for id
+ * and in order, by `ai-site-kinds.spec.ts`.
+ *
+ * Pure data and readers, safe for any surface to import.
+ */
+/** Where the console serves each style's picture: `<dir>/<id>.webp`. */
+export declare const SITE_STYLE_PREVIEW_DIR = "/_static/starter/styles";
+/** The width and height every style picture is drawn at. */
+export declare const SITE_STYLE_PREVIEW_SIZE: {
+    readonly width: 800;
+    readonly height: 800;
+};
+/** One style a site can start in. */
+export interface SiteStyle {
+    /** A persisted identifier: the AI start's kind id, stored on the site. */
+    id: string;
+    /** The card's title. */
+    name: string;
+    /** One line under it. */
+    blurb: string;
+    /** The example home page's picture, as a path on the console's origin. */
+    preview: string;
+    /** What the picture shows, for a reader who cannot see it. */
+    alt: string;
+}
+/** Every style, in the order a person is shown them. */
+export declare const SITE_STYLES: readonly SiteStyle[];
+/**
+ * "Pick for me": the AI start's style card that lets the answers decide. It
+ * is a card a person CLICKS, never a default, and it exists only where
+ * something can pick for them (the AI start); the starter site has no such
+ * card, so a site created with the starter always names a real style.
+ */
+export declare const SITE_STYLE_AUTO = "auto";
+/** Whether a value names one of the {@link SITE_STYLES}. */
+export declare function isSiteStyleId(value: unknown): value is string;
+/** The style an id names, or `null`. */
+export declare function siteStyleOf(id: unknown): SiteStyle | null;
+/**
+ * How a site was started: the starter site (`starter`), the AI start (`ai`),
+ * a site brought in from somewhere else (`import`), or a program through the
+ * public API (`api`), which keeps the default and chooses no style.
+ */
+export type HostStarterStart = 'starter' | 'ai' | 'import' | 'api';
+export declare const HOST_STARTER_STARTS: readonly HostStarterStart[];
+/**
+ * `hosts/{id}.starterChoice` (AGL-4049): what a site was created with, written
+ * by the server in the create's own transaction and never by a client, so
+ * which styles people choose can be counted, and a site created and then left
+ * alone can be told apart from one that was built on.
+ *
+ * - `kind`: the style id; {@link SITE_STYLE_AUTO} when the AI start's "Pick
+ *   for me" was chosen; `null` when none was (the API, a seed);
+ * - `listingId` / `version`: the marketplace starter picked, or `null`;
+ * - `mode`: `base` copies a starter's pages, `ai` writes them for the business.
+ */
+export interface HostStarterChoice {
+    listingId: string | null;
+    version: string | null;
+    kind: string | null;
+    mode: 'base' | 'ai';
+    start: HostStarterStart;
+}
+/** A choice with its unset parts filled: no listing, no style, `base`. */
+export declare function hostStarterChoice(input: Partial<HostStarterChoice> & {
+    start: HostStarterStart;
+}): HostStarterChoice;
+/** A stored or answered choice, read defensively; `null` when it is not one. */
+export declare function readHostStarterChoice(value: unknown): HostStarterChoice | null;
+/**
+ * The `host_created` event's parameters for a site's choice: how it was
+ * started (`unknown` when the create's answer did not say), its style
+ * (`auto` for "Pick for me", `none` for no style) and the starter listing
+ * (`none` for none). Ids only, never a name a person typed.
+ */
+export declare function hostCreatedEventParams(choice: HostStarterChoice | null): {
+    start: string;
+    starter_kind: string;
+    starter_listing: string;
+};

package/src/lib/app-utils/site-styles.js

@@ -0,0 +1,126 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The styles a new site can start in (AGL-4049), and the record of which one
+ * a site was created with.
+ *
+ * Nothing in "Create site" is chosen for a person: a site is created only
+ * once they have picked a style. A style is a kind of site's look — the same
+ * 21 the AI start's Style step offers, each with an example home page as its
+ * picture — so the starter site and the AI start speak one vocabulary.
+ *
+ * This module is the LIST: what a person may choose on any surface, the
+ * native apps included (the derived-values generator emits it). The LOOK a
+ * style gives a site is the AI plugin's, behind the `core.site-style-looks`
+ * seam (`plugin-manager/plugin-site-style-looks.ts`); with no plugin
+ * answering, a site still starts in the default theme and the choice is
+ * still recorded. The AI plugin's own kinds are held to this list, id for id
+ * and in order, by `ai-site-kinds.spec.ts`.
+ *
+ * Pure data and readers, safe for any surface to import.
+ */ /** Where the console serves each style's picture: `<dir>/<id>.webp`. */ export const SITE_STYLE_PREVIEW_DIR = '/_static/starter/styles';
+/** The width and height every style picture is drawn at. */ export const SITE_STYLE_PREVIEW_SIZE = {
+    width: 800,
+    height: 800
+};
+const style = (id, name, blurb, alt)=>({
+        id,
+        name,
+        blurb,
+        preview: `${SITE_STYLE_PREVIEW_DIR}/${id}.webp`,
+        alt
+    });
+/** Every style, in the order a person is shown them. */ export const SITE_STYLES = [
+    style('business', 'Business & services', 'Say what you do, why choose you, and how to reach you', "A cleaning company's home page: its heading beside a photo of gloved hands wiping a desk, then its services as cards"),
+    style('trades', 'Home services & trades', 'Roofers, plumbers, towing, landscaping: bold, direct, built on trust', "A roofer's home page: a bold heading over a full-width photo of a roofer carrying shingles, then roofing services"),
+    style('professional', 'Law, finance & consulting', 'Law firms, accountants, advisers: calm, established, credible', "A consulting firm's home page: its heading on a white card over a full-width photo of a team at a planning board"),
+    style('wellness', 'Health & wellness', 'Therapists, clinics, dentists, coaches: warm, reassuring, clear', "A therapy practice's home page: half the page a photo of a calm, sunlit room, its heading in the other half, then its sessions"),
+    style('restaurant', 'Restaurant & café', 'Warm, photo-led pages for food, drink and a place to visit', "A café's home page: its heading centered over a photo of the owner at the counter, then menu highlights"),
+    style('store', 'Online store', 'Product-first pages for things you sell', "A handmade goods shop's home page: its heading beside two overlapping photos of wax seals, then featured products"),
+    style('portfolio', 'Portfolio', 'Minimal, image-led pages that put the work first', "A prop stylist's home page: a large heading over a grid of three styled sets"),
+    style('studio', 'Design studio & agency', 'Bold type and case studies for creative teams', "A design studio's home page: an oversized heading on black over a wide photo of the team at a brand board"),
+    style('photography', 'Photography', 'Galleries first, words second', "A photographer's home page: its heading on black over a gallery of a wedding, a portrait and a maker"),
+    style('blog', 'Blog & writing', 'Reading-first pages with a calm serif voice', "A food journal's home page: its heading centered in a narrow column over a wide photo of vegetables on a cutting board"),
+    style('events', 'Events & weddings', 'Dates, places and the details guests need', "A festival's home page: two overlapping photos of a lantern-lit night market beside its dates, then the program"),
+    style('fitness', 'Fitness & sports', 'Gyms, trainers and studios with energy', "A gym's home page: a bold heading on black beside a photo of rows of dumbbells, then this week's classes"),
+    style('yoga', 'Yoga & mindfulness', 'Calm, spacious pages for classes and retreats', "A yoga studio's home page: a quiet centered heading over a wide photo of a class stretching on mats"),
+    style('beauty', 'Beauty & salon', 'Salons, barbers, spas and studios with style', "A hair salon's home page: its heading beside two overlapping photos of a stylist at work and the salon's chairs"),
+    style('realestate', 'Real estate', 'Agents, brokers and property: polished and local', "A real estate agent's home page: its heading on a white card over a photo of a white house, then new listings"),
+    style('education', 'Courses & education', 'Tutors, schools and courses, clear and encouraging', "A tutoring center's home page: a photo of a tutor at the whiteboard beside its heading, then its courses"),
+    style('nonprofit', 'Nonprofit & community', 'A cause, its impact and how to help', "A food bank's home page: its heading over a full-width photo of volunteers sorting donations, then the ways to help"),
+    style('music', 'Music & bands', 'Artists, bands and DJs, loud and visual', "A band's home page: its name in large type over a photo of a band under stage lights, then its tour dates"),
+    style('personal', 'Personal & resume', 'A simple page about you and your work', "A product manager's personal page: a round portrait over her centered introduction, then her experience"),
+    style('landing', 'Landing page', 'One page that leads to one action', "A budgeting app's landing page: its pitch centered on a colored band over a photo of a couple planning on a phone"),
+    style('coming-soon', 'Coming soon', 'A placeholder that collects interest', "A café's coming soon page: its heading and notify button centered over a photo of the café's coffee shelves")
+];
+/**
+ * "Pick for me": the AI start's style card that lets the answers decide. It
+ * is a card a person CLICKS, never a default, and it exists only where
+ * something can pick for them (the AI start); the starter site has no such
+ * card, so a site created with the starter always names a real style.
+ */ export const SITE_STYLE_AUTO = 'auto';
+/** Whether a value names one of the {@link SITE_STYLES}. */ export function isSiteStyleId(value) {
+    return typeof value === 'string' && SITE_STYLES.some((entry)=>entry.id === value);
+}
+/** The style an id names, or `null`. */ export function siteStyleOf(id) {
+    var _SITE_STYLES_find;
+    return (_SITE_STYLES_find = SITE_STYLES.find((entry)=>entry.id === id)) != null ? _SITE_STYLES_find : null;
+}
+export const HOST_STARTER_STARTS = [
+    'starter',
+    'ai',
+    'import',
+    'api'
+];
+/** A choice with its unset parts filled: no listing, no style, `base`. */ export function hostStarterChoice(input) {
+    var _input_listingId, _input_kind;
+    return {
+        listingId: (_input_listingId = input.listingId) != null ? _input_listingId : null,
+        version: input.version == null ? null : String(input.version),
+        kind: (_input_kind = input.kind) != null ? _input_kind : null,
+        mode: input.mode === 'ai' ? 'ai' : 'base',
+        start: input.start
+    };
+}
+const textOrNull = (value)=>typeof value === 'string' && value.trim() ? value.trim() : null;
+/** A stored or answered choice, read defensively; `null` when it is not one. */ export function readHostStarterChoice(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) return null;
+    const record = value;
+    const start = record['start'];
+    if (!HOST_STARTER_STARTS.includes(start)) return null;
+    return hostStarterChoice({
+        listingId: textOrNull(record['listingId']),
+        version: textOrNull(record['version']),
+        kind: textOrNull(record['kind']),
+        mode: record['mode'] === 'ai' ? 'ai' : 'base',
+        start: start
+    });
+}
+/**
+ * The `host_created` event's parameters for a site's choice: how it was
+ * started (`unknown` when the create's answer did not say), its style
+ * (`auto` for "Pick for me", `none` for no style) and the starter listing
+ * (`none` for none). Ids only, never a name a person typed.
+ */ export function hostCreatedEventParams(choice) {
+    var _ref, _ref1, _ref2;
+    return {
+        start: (_ref = choice == null ? void 0 : choice.start) != null ? _ref : 'unknown',
+        starter_kind: (_ref1 = choice == null ? void 0 : choice.kind) != null ? _ref1 : 'none',
+        starter_listing: (_ref2 = choice == null ? void 0 : choice.listingId) != null ? _ref2 : 'none'
+    };
+}
+
+//# sourceMappingURL=site-styles.js.map

package/src/lib/app-utils/site-styles.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/site-styles.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The styles a new site can start in (AGL-4049), and the record of which one\n * a site was created with.\n *\n * Nothing in \"Create site\" is chosen for a person: a site is created only\n * once they have picked a style. A style is a kind of site's look — the same\n * 21 the AI start's Style step offers, each with an example home page as its\n * picture — so the starter site and the AI start speak one vocabulary.\n *\n * This module is the LIST: what a person may choose on any surface, the\n * native apps included (the derived-values generator emits it). The LOOK a\n * style gives a site is the AI plugin's, behind the `core.site-style-looks`\n * seam (`plugin-manager/plugin-site-style-looks.ts`); with no plugin\n * answering, a site still starts in the default theme and the choice is\n * still recorded. The AI plugin's own kinds are held to this list, id for id\n * and in order, by `ai-site-kinds.spec.ts`.\n *\n * Pure data and readers, safe for any surface to import.\n */\n\n/** Where the console serves each style's picture: `<dir>/<id>.webp`. */\nexport const SITE_STYLE_PREVIEW_DIR = '/_static/starter/styles'\n\n/** The width and height every style picture is drawn at. */\nexport const SITE_STYLE_PREVIEW_SIZE = { width: 800, height: 800 } as const\n\n/** One style a site can start in. */\nexport interface SiteStyle {\n  /** A persisted identifier: the AI start's kind id, stored on the site. */\n  id: string\n  /** The card's title. */\n  name: string\n  /** One line under it. */\n  blurb: string\n  /** The example home page's picture, as a path on the console's origin. */\n  preview: string\n  /** What the picture shows, for a reader who cannot see it. */\n  alt: string\n}\n\nconst style = (id: string, name: string, blurb: string, alt: string): SiteStyle => ({\n  id,\n  name,\n  blurb,\n  preview: `${SITE_STYLE_PREVIEW_DIR}/${id}.webp`,\n  alt,\n})\n\n/** Every style, in the order a person is shown them. */\nexport const SITE_STYLES: readonly SiteStyle[] = [\n  style('business', 'Business & services', 'Say what you do, why choose you, and how to reach you', \"A cleaning company's home page: its heading beside a photo of gloved hands wiping a desk, then its services as cards\"),\n  style('trades', 'Home services & trades', 'Roofers, plumbers, towing, landscaping: bold, direct, built on trust', \"A roofer's home page: a bold heading over a full-width photo of a roofer carrying shingles, then roofing services\"),\n  style('professional', 'Law, finance & consulting', 'Law firms, accountants, advisers: calm, established, credible', \"A consulting firm's home page: its heading on a white card over a full-width photo of a team at a planning board\"),\n  style('wellness', 'Health & wellness', 'Therapists, clinics, dentists, coaches: warm, reassuring, clear', \"A therapy practice's home page: half the page a photo of a calm, sunlit room, its heading in the other half, then its sessions\"),\n  style('restaurant', 'Restaurant & café', 'Warm, photo-led pages for food, drink and a place to visit', \"A café's home page: its heading centered over a photo of the owner at the counter, then menu highlights\"),\n  style('store', 'Online store', 'Product-first pages for things you sell', \"A handmade goods shop's home page: its heading beside two overlapping photos of wax seals, then featured products\"),\n  style('portfolio', 'Portfolio', 'Minimal, image-led pages that put the work first', \"A prop stylist's home page: a large heading over a grid of three styled sets\"),\n  style('studio', 'Design studio & agency', 'Bold type and case studies for creative teams', \"A design studio's home page: an oversized heading on black over a wide photo of the team at a brand board\"),\n  style('photography', 'Photography', 'Galleries first, words second', \"A photographer's home page: its heading on black over a gallery of a wedding, a portrait and a maker\"),\n  style('blog', 'Blog & writing', 'Reading-first pages with a calm serif voice', \"A food journal's home page: its heading centered in a narrow column over a wide photo of vegetables on a cutting board\"),\n  style('events', 'Events & weddings', 'Dates, places and the details guests need', \"A festival's home page: two overlapping photos of a lantern-lit night market beside its dates, then the program\"),\n  style('fitness', 'Fitness & sports', 'Gyms, trainers and studios with energy', \"A gym's home page: a bold heading on black beside a photo of rows of dumbbells, then this week's classes\"),\n  style('yoga', 'Yoga & mindfulness', 'Calm, spacious pages for classes and retreats', \"A yoga studio's home page: a quiet centered heading over a wide photo of a class stretching on mats\"),\n  style('beauty', 'Beauty & salon', 'Salons, barbers, spas and studios with style', \"A hair salon's home page: its heading beside two overlapping photos of a stylist at work and the salon's chairs\"),\n  style('realestate', 'Real estate', 'Agents, brokers and property: polished and local', \"A real estate agent's home page: its heading on a white card over a photo of a white house, then new listings\"),\n  style('education', 'Courses & education', 'Tutors, schools and courses, clear and encouraging', \"A tutoring center's home page: a photo of a tutor at the whiteboard beside its heading, then its courses\"),\n  style('nonprofit', 'Nonprofit & community', 'A cause, its impact and how to help', \"A food bank's home page: its heading over a full-width photo of volunteers sorting donations, then the ways to help\"),\n  style('music', 'Music & bands', 'Artists, bands and DJs, loud and visual', \"A band's home page: its name in large type over a photo of a band under stage lights, then its tour dates\"),\n  style('personal', 'Personal & resume', 'A simple page about you and your work', \"A product manager's personal page: a round portrait over her centered introduction, then her experience\"),\n  style('landing', 'Landing page', 'One page that leads to one action', \"A budgeting app's landing page: its pitch centered on a colored band over a photo of a couple planning on a phone\"),\n  style('coming-soon', 'Coming soon', 'A placeholder that collects interest', \"A café's coming soon page: its heading and notify button centered over a photo of the café's coffee shelves\"),\n]\n\n/**\n * \"Pick for me\": the AI start's style card that lets the answers decide. It\n * is a card a person CLICKS, never a default, and it exists only where\n * something can pick for them (the AI start); the starter site has no such\n * card, so a site created with the starter always names a real style.\n */\nexport const SITE_STYLE_AUTO = 'auto'\n\n/** Whether a value names one of the {@link SITE_STYLES}. */\nexport function isSiteStyleId(value: unknown): value is string {\n  return typeof value === 'string' && SITE_STYLES.some((entry) => entry.id === value)\n}\n\n/** The style an id names, or `null`. */\nexport function siteStyleOf(id: unknown): SiteStyle | null {\n  return SITE_STYLES.find((entry) => entry.id === id) ?? null\n}\n\n// ── What a site was created with ────────────────────────────────────────────\n\n/**\n * How a site was started: the starter site (`starter`), the AI start (`ai`),\n * a site brought in from somewhere else (`import`), or a program through the\n * public API (`api`), which keeps the default and chooses no style.\n */\nexport type HostStarterStart = 'starter' | 'ai' | 'import' | 'api'\n\nexport const HOST_STARTER_STARTS: readonly HostStarterStart[] = ['starter', 'ai', 'import', 'api']\n\n/**\n * `hosts/{id}.starterChoice` (AGL-4049): what a site was created with, written\n * by the server in the create's own transaction and never by a client, so\n * which styles people choose can be counted, and a site created and then left\n * alone can be told apart from one that was built on.\n *\n * - `kind`: the style id; {@link SITE_STYLE_AUTO} when the AI start's \"Pick\n *   for me\" was chosen; `null` when none was (the API, a seed);\n * - `listingId` / `version`: the marketplace starter picked, or `null`;\n * - `mode`: `base` copies a starter's pages, `ai` writes them for the business.\n */\nexport interface HostStarterChoice {\n  listingId: string | null\n  version: string | null\n  kind: string | null\n  mode: 'base' | 'ai'\n  start: HostStarterStart\n}\n\n/** A choice with its unset parts filled: no listing, no style, `base`. */\nexport function hostStarterChoice(input: Partial<HostStarterChoice> & { start: HostStarterStart }): HostStarterChoice {\n  return {\n    listingId: input.listingId ?? null,\n    version: input.version == null ? null : String(input.version),\n    kind: input.kind ?? null,\n    mode: input.mode === 'ai' ? 'ai' : 'base',\n    start: input.start,\n  }\n}\n\nconst textOrNull = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() ? value.trim() : null\n\n/** A stored or answered choice, read defensively; `null` when it is not one. */\nexport function readHostStarterChoice(value: unknown): HostStarterChoice | null {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return null\n  const record = value as Record<string, unknown>\n  const start = record['start']\n  if (!(HOST_STARTER_STARTS as readonly unknown[]).includes(start)) return null\n  return hostStarterChoice({\n    listingId: textOrNull(record['listingId']),\n    version: textOrNull(record['version']),\n    kind: textOrNull(record['kind']),\n    mode: record['mode'] === 'ai' ? 'ai' : 'base',\n    start: start as HostStarterStart,\n  })\n}\n\n/**\n * The `host_created` event's parameters for a site's choice: how it was\n * started (`unknown` when the create's answer did not say), its style\n * (`auto` for \"Pick for me\", `none` for no style) and the starter listing\n * (`none` for none). Ids only, never a name a person typed.\n */\nexport function hostCreatedEventParams(choice: HostStarterChoice | null): {\n  start: string\n  starter_kind: string\n  starter_listing: string\n} {\n  return {\n    start: choice?.start ?? 'unknown',\n    starter_kind: choice?.kind ?? 'none',\n    starter_listing: choice?.listingId ?? 'none',\n  }\n}\n"],"names":["SITE_STYLE_PREVIEW_DIR","SITE_STYLE_PREVIEW_SIZE","width","height","style","id","name","blurb","alt","preview","SITE_STYLES","SITE_STYLE_AUTO","isSiteStyleId","value","some","entry","siteStyleOf","find","HOST_STARTER_STARTS","hostStarterChoice","input","listingId","version","String","kind","mode","start","textOrNull","trim","readHostStarterChoice","Array","isArray","record","includes","hostCreatedEventParams","choice","starter_kind","starter_listing"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;CAkBC,GAED,sEAAsE,GACtE,OAAO,MAAMA,yBAAyB,0BAAyB;AAE/D,0DAA0D,GAC1D,OAAO,MAAMC,0BAA0B;IAAEC,OAAO;IAAKC,QAAQ;AAAI,EAAU;AAgB3E,MAAMC,QAAQ,CAACC,IAAYC,MAAcC,OAAeC,MAA4B,CAAA;QAClFH;QACAC;QACAC;QACAE,SAAS,GAAGT,uBAAuB,CAAC,EAAEK,GAAG,KAAK,CAAC;QAC/CG;IACF,CAAA;AAEA,sDAAsD,GACtD,OAAO,MAAME,cAAoC;IAC/CN,MAAM,YAAY,uBAAuB,yDAAyD;IAClGA,MAAM,UAAU,0BAA0B,wEAAwE;IAClHA,MAAM,gBAAgB,6BAA6B,iEAAiE;IACpHA,MAAM,YAAY,qBAAqB,mEAAmE;IAC1GA,MAAM,cAAc,qBAAqB,8DAA8D;IACvGA,MAAM,SAAS,gBAAgB,2CAA2C;IAC1EA,MAAM,aAAa,aAAa,oDAAoD;IACpFA,MAAM,UAAU,0BAA0B,iDAAiD;IAC3FA,MAAM,eAAe,eAAe,iCAAiC;IACrEA,MAAM,QAAQ,kBAAkB,+CAA+C;IAC/EA,MAAM,UAAU,qBAAqB,6CAA6C;IAClFA,MAAM,WAAW,oBAAoB,0CAA0C;IAC/EA,MAAM,QAAQ,sBAAsB,iDAAiD;IACrFA,MAAM,UAAU,kBAAkB,gDAAgD;IAClFA,MAAM,cAAc,eAAe,oDAAoD;IACvFA,MAAM,aAAa,uBAAuB,sDAAsD;IAChGA,MAAM,aAAa,yBAAyB,uCAAuC;IACnFA,MAAM,SAAS,iBAAiB,2CAA2C;IAC3EA,MAAM,YAAY,qBAAqB,yCAAyC;IAChFA,MAAM,WAAW,gBAAgB,qCAAqC;IACtEA,MAAM,eAAe,eAAe,wCAAwC;CAC7E,CAAA;AAED;;;;;CAKC,GACD,OAAO,MAAMO,kBAAkB,OAAM;AAErC,0DAA0D,GAC1D,OAAO,SAASC,cAAcC,KAAc;IAC1C,OAAO,OAAOA,UAAU,YAAYH,YAAYI,IAAI,CAAC,CAACC,QAAUA,MAAMV,EAAE,KAAKQ;AAC/E;AAEA,sCAAsC,GACtC,OAAO,SAASG,YAAYX,EAAW;QAC9BK;IAAP,QAAOA,oBAAAA,YAAYO,IAAI,CAAC,CAACF,QAAUA,MAAMV,EAAE,KAAKA,eAAzCK,oBAAgD;AACzD;AAWA,OAAO,MAAMQ,sBAAmD;IAAC;IAAW;IAAM;IAAU;CAAM,CAAA;AAqBlG,wEAAwE,GACxE,OAAO,SAASC,kBAAkBC,KAA+D;QAElFA,kBAELA;IAHR,OAAO;QACLC,SAAS,GAAED,mBAAAA,MAAMC,SAAS,YAAfD,mBAAmB;QAC9BE,SAASF,MAAME,OAAO,IAAI,OAAO,OAAOC,OAAOH,MAAME,OAAO;QAC5DE,IAAI,GAAEJ,cAAAA,MAAMI,IAAI,YAAVJ,cAAc;QACpBK,MAAML,MAAMK,IAAI,KAAK,OAAO,OAAO;QACnCC,OAAON,MAAMM,KAAK;IACpB;AACF;AAEA,MAAMC,aAAa,CAACd,QAClB,OAAOA,UAAU,YAAYA,MAAMe,IAAI,KAAKf,MAAMe,IAAI,KAAK;AAE7D,8EAA8E,GAC9E,OAAO,SAASC,sBAAsBhB,KAAc;IAClD,IAAI,CAACA,SAAS,OAAOA,UAAU,YAAYiB,MAAMC,OAAO,CAAClB,QAAQ,OAAO;IACxE,MAAMmB,SAASnB;IACf,MAAMa,QAAQM,MAAM,CAAC,QAAQ;IAC7B,IAAI,CAAC,AAACd,oBAA2Ce,QAAQ,CAACP,QAAQ,OAAO;IACzE,OAAOP,kBAAkB;QACvBE,WAAWM,WAAWK,MAAM,CAAC,YAAY;QACzCV,SAASK,WAAWK,MAAM,CAAC,UAAU;QACrCR,MAAMG,WAAWK,MAAM,CAAC,OAAO;QAC/BP,MAAMO,MAAM,CAAC,OAAO,KAAK,OAAO,OAAO;QACvCN,OAAOA;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASQ,uBAAuBC,MAAgC;;IAKrE,OAAO;QACLT,KAAK,UAAES,0BAAAA,OAAQT,KAAK,mBAAI;QACxBU,YAAY,WAAED,0BAAAA,OAAQX,IAAI,oBAAI;QAC9Ba,eAAe,WAAEF,0BAAAA,OAAQd,SAAS,oBAAI;IACxC;AACF"}

package/src/lib/app-utils/site-unavailable.d.ts

@@ -0,0 +1,96 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The site's 503 answer, sent as a 503 (AGL-4110).
+ *
+ * Maintenance mode (AGL-131) and preview (AGL-4086) answer a visitor who is
+ * not let through with the site's designed 503 page, or the built-in notice,
+ * at every address. The body was right and the status was not: every address
+ * said `200 OK`, which tells a crawler the notice IS the page. A live site
+ * that spent a weekend in maintenance could be re-indexed as "Temporarily
+ * unavailable" and drop out of search. `503` with `Retry-After` is the answer
+ * that means "this site is briefly down, come back".
+ *
+ * The body still comes from the ISR-cached catch-all, exactly as before; only
+ * the tenant middleware can set the status, because an App Router page has no
+ * status lever and the middleware is the one layer that runs ahead of the
+ * cache on every request. It asks {@link siteUnavailableForRequest} and
+ * rewrites with the status, so a cached page body never decides it.
+ *
+ * DEPENDENCY-FREE ON PURPOSE, like `site-preview.ts`: the middleware runs on
+ * the edge and deep-imports this leaf, so it imports nothing.
+ */
+/**
+ * How long a crawler or uptime check is told to wait before asking again, in
+ * seconds: an hour.
+ *
+ * The bandwidth cap's figure (`BANDWIDTH_CAP_RETRY_AFTER_SECONDS`), for the
+ * same reason. Both states end the moment the owner flips a switch, and the
+ * site is back within about a minute, so no longer value is ever "correct".
+ * Too long is wrong in the direction that costs the site: a crawler staying
+ * away after the site came back. An hour is short enough to be wrong in the
+ * recoverable direction, and long enough that a crawler does not spend its
+ * visits re-reading "not yet".
+ */
+export declare const SITE_UNAVAILABLE_RETRY_AFTER_SECONDS = 3600;
+/**
+ * Is the site in maintenance mode (AGL-131)?
+ *
+ * The loader's own test, shared with the verdict the middleware reads, so the
+ * status and the body are decided by one predicate: a field the loader reads as
+ * "in maintenance" is a field the middleware reads the same way.
+ */
+export declare function isHostInMaintenance(host: {
+    maintenance?: unknown;
+} | null | undefined): boolean;
+/** What the middleware knows about a site, from its verdict. */
+export interface SiteUnavailableVerdict {
+    /** Maintenance mode is on. */
+    maintenance?: boolean;
+    /** The WHOLE site is in preview. One page in preview is not this. */
+    preview?: boolean;
+}
+/** How the middleware is routing this request. */
+export interface SiteUnavailableRouting {
+    /** An entry preview link (`?aglyn_preview=`) is being opened. */
+    entryPreview: boolean;
+    /**
+     * A team cookie sent this request around the cache to the uncached preview
+     * route, which shows the team the site.
+     */
+    teamPreview: boolean;
+}
+/**
+ * Does this page request get the site's 503 answer as an HTTP 503?
+ *
+ * - **Maintenance: yes, for everyone**, the site's team included. It is the
+ *   switch that means "nobody", and the loader serves the 503 page to every
+ *   request, the team's preview route included, so every status says so.
+ * - **A site in preview: yes, for the public**, the requests answered from the
+ *   shared cache. A request carrying a team cookie goes to the uncached
+ *   preview route instead, which shows the team the whole site.
+ * - **An entry preview link: no.** When the site is unavailable its route
+ *   redirects to the plain address, which answers 503 by the rules above; a
+ *   503 set here would only argue with that redirect.
+ * - **One page in preview: no.** The public gets the site's 404 there, and the
+ *   render's own 404 decides that status.
+ *
+ * Nothing here is a permission. The body is the loader's decision, and a
+ * request this answers `false` for is one whose body is already the site, or
+ * an answer with a status of its own.
+ */
+export declare function siteUnavailableForRequest(verdict: SiteUnavailableVerdict | null | undefined, routing: SiteUnavailableRouting): boolean;

package/src/lib/app-utils/site-unavailable.js

@@ -0,0 +1,80 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The site's 503 answer, sent as a 503 (AGL-4110).
+ *
+ * Maintenance mode (AGL-131) and preview (AGL-4086) answer a visitor who is
+ * not let through with the site's designed 503 page, or the built-in notice,
+ * at every address. The body was right and the status was not: every address
+ * said `200 OK`, which tells a crawler the notice IS the page. A live site
+ * that spent a weekend in maintenance could be re-indexed as "Temporarily
+ * unavailable" and drop out of search. `503` with `Retry-After` is the answer
+ * that means "this site is briefly down, come back".
+ *
+ * The body still comes from the ISR-cached catch-all, exactly as before; only
+ * the tenant middleware can set the status, because an App Router page has no
+ * status lever and the middleware is the one layer that runs ahead of the
+ * cache on every request. It asks {@link siteUnavailableForRequest} and
+ * rewrites with the status, so a cached page body never decides it.
+ *
+ * DEPENDENCY-FREE ON PURPOSE, like `site-preview.ts`: the middleware runs on
+ * the edge and deep-imports this leaf, so it imports nothing.
+ */ /**
+ * How long a crawler or uptime check is told to wait before asking again, in
+ * seconds: an hour.
+ *
+ * The bandwidth cap's figure (`BANDWIDTH_CAP_RETRY_AFTER_SECONDS`), for the
+ * same reason. Both states end the moment the owner flips a switch, and the
+ * site is back within about a minute, so no longer value is ever "correct".
+ * Too long is wrong in the direction that costs the site: a crawler staying
+ * away after the site came back. An hour is short enough to be wrong in the
+ * recoverable direction, and long enough that a crawler does not spend its
+ * visits re-reading "not yet".
+ */ export const SITE_UNAVAILABLE_RETRY_AFTER_SECONDS = 3600;
+/**
+ * Is the site in maintenance mode (AGL-131)?
+ *
+ * The loader's own test, shared with the verdict the middleware reads, so the
+ * status and the body are decided by one predicate: a field the loader reads as
+ * "in maintenance" is a field the middleware reads the same way.
+ */ export function isHostInMaintenance(host) {
+    return Boolean(host == null ? void 0 : host.maintenance);
+}
+/**
+ * Does this page request get the site's 503 answer as an HTTP 503?
+ *
+ * - **Maintenance: yes, for everyone**, the site's team included. It is the
+ *   switch that means "nobody", and the loader serves the 503 page to every
+ *   request, the team's preview route included, so every status says so.
+ * - **A site in preview: yes, for the public**, the requests answered from the
+ *   shared cache. A request carrying a team cookie goes to the uncached
+ *   preview route instead, which shows the team the whole site.
+ * - **An entry preview link: no.** When the site is unavailable its route
+ *   redirects to the plain address, which answers 503 by the rules above; a
+ *   503 set here would only argue with that redirect.
+ * - **One page in preview: no.** The public gets the site's 404 there, and the
+ *   render's own 404 decides that status.
+ *
+ * Nothing here is a permission. The body is the loader's decision, and a
+ * request this answers `false` for is one whose body is already the site, or
+ * an answer with a status of its own.
+ */ export function siteUnavailableForRequest(verdict, routing) {
+    if (!verdict || routing.entryPreview) return false;
+    if (verdict.maintenance === true) return true;
+    return verdict.preview === true && !routing.teamPreview;
+}
+
+//# sourceMappingURL=site-unavailable.js.map

package/src/lib/app-utils/site-unavailable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/site-unavailable.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The site's 503 answer, sent as a 503 (AGL-4110).\n *\n * Maintenance mode (AGL-131) and preview (AGL-4086) answer a visitor who is\n * not let through with the site's designed 503 page, or the built-in notice,\n * at every address. The body was right and the status was not: every address\n * said `200 OK`, which tells a crawler the notice IS the page. A live site\n * that spent a weekend in maintenance could be re-indexed as \"Temporarily\n * unavailable\" and drop out of search. `503` with `Retry-After` is the answer\n * that means \"this site is briefly down, come back\".\n *\n * The body still comes from the ISR-cached catch-all, exactly as before; only\n * the tenant middleware can set the status, because an App Router page has no\n * status lever and the middleware is the one layer that runs ahead of the\n * cache on every request. It asks {@link siteUnavailableForRequest} and\n * rewrites with the status, so a cached page body never decides it.\n *\n * DEPENDENCY-FREE ON PURPOSE, like `site-preview.ts`: the middleware runs on\n * the edge and deep-imports this leaf, so it imports nothing.\n */\n\n/**\n * How long a crawler or uptime check is told to wait before asking again, in\n * seconds: an hour.\n *\n * The bandwidth cap's figure (`BANDWIDTH_CAP_RETRY_AFTER_SECONDS`), for the\n * same reason. Both states end the moment the owner flips a switch, and the\n * site is back within about a minute, so no longer value is ever \"correct\".\n * Too long is wrong in the direction that costs the site: a crawler staying\n * away after the site came back. An hour is short enough to be wrong in the\n * recoverable direction, and long enough that a crawler does not spend its\n * visits re-reading \"not yet\".\n */\nexport const SITE_UNAVAILABLE_RETRY_AFTER_SECONDS = 3600\n\n/**\n * Is the site in maintenance mode (AGL-131)?\n *\n * The loader's own test, shared with the verdict the middleware reads, so the\n * status and the body are decided by one predicate: a field the loader reads as\n * \"in maintenance\" is a field the middleware reads the same way.\n */\nexport function isHostInMaintenance(\n  host: { maintenance?: unknown } | null | undefined,\n): boolean {\n  return Boolean(host?.maintenance)\n}\n\n/** What the middleware knows about a site, from its verdict. */\nexport interface SiteUnavailableVerdict {\n  /** Maintenance mode is on. */\n  maintenance?: boolean\n  /** The WHOLE site is in preview. One page in preview is not this. */\n  preview?: boolean\n}\n\n/** How the middleware is routing this request. */\nexport interface SiteUnavailableRouting {\n  /** An entry preview link (`?aglyn_preview=`) is being opened. */\n  entryPreview: boolean\n  /**\n   * A team cookie sent this request around the cache to the uncached preview\n   * route, which shows the team the site.\n   */\n  teamPreview: boolean\n}\n\n/**\n * Does this page request get the site's 503 answer as an HTTP 503?\n *\n * - **Maintenance: yes, for everyone**, the site's team included. It is the\n *   switch that means \"nobody\", and the loader serves the 503 page to every\n *   request, the team's preview route included, so every status says so.\n * - **A site in preview: yes, for the public**, the requests answered from the\n *   shared cache. A request carrying a team cookie goes to the uncached\n *   preview route instead, which shows the team the whole site.\n * - **An entry preview link: no.** When the site is unavailable its route\n *   redirects to the plain address, which answers 503 by the rules above; a\n *   503 set here would only argue with that redirect.\n * - **One page in preview: no.** The public gets the site's 404 there, and the\n *   render's own 404 decides that status.\n *\n * Nothing here is a permission. The body is the loader's decision, and a\n * request this answers `false` for is one whose body is already the site, or\n * an answer with a status of its own.\n */\nexport function siteUnavailableForRequest(\n  verdict: SiteUnavailableVerdict | null | undefined,\n  routing: SiteUnavailableRouting,\n): boolean {\n  if (!verdict || routing.entryPreview) return false\n  if (verdict.maintenance === true) return true\n  return verdict.preview === true && !routing.teamPreview\n}\n"],"names":["SITE_UNAVAILABLE_RETRY_AFTER_SECONDS","isHostInMaintenance","host","Boolean","maintenance","siteUnavailableForRequest","verdict","routing","entryPreview","preview","teamPreview"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;CAmBC,GAED;;;;;;;;;;;CAWC,GACD,OAAO,MAAMA,uCAAuC,KAAI;AAExD;;;;;;CAMC,GACD,OAAO,SAASC,oBACdC,IAAkD;IAElD,OAAOC,QAAQD,wBAAAA,KAAME,WAAW;AAClC;AAqBA;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,SAASC,0BACdC,OAAkD,EAClDC,OAA+B;IAE/B,IAAI,CAACD,WAAWC,QAAQC,YAAY,EAAE,OAAO;IAC7C,IAAIF,QAAQF,WAAW,KAAK,MAAM,OAAO;IACzC,OAAOE,QAAQG,OAAO,KAAK,QAAQ,CAACF,QAAQG,WAAW;AACzD"}

package/src/lib/app-utils/visitor-upload.d.ts

@@ -145,6 +145,25 @@ export declare function visitorUploadPendingPath(scope: VisitorUploadScope, uplo
 export declare function visitorUploadFolder(scope: VisitorUploadScope): string;
 /** Where a checked file is kept: private to the site, with no download token. */
 export declare function visitorUploadFinalPath(scope: VisitorUploadScope, uploadId: string): string;
+/**
+ * A kept file counts toward its workspace's storage the way a media library
+ * file does. Its bytes are added to the site's storage counter,
+ * `hosts/{hostId}/counters/media`, whose `bytes` is the one figure the
+ * storage band, the Billing meter, the usage alerts and the invoice all read.
+ * So a proof, a customer's file on a quote and a form's file are measured,
+ * warned about and billed exactly as a library upload is, and no reader of
+ * storage can leave them out.
+ *
+ * The same counter says how much of `bytes` is these files, in the two fields
+ * below. That keeps `count` the number of library files and lets the media
+ * library show its own share ({@link mediaLibraryBytes}).
+ */
+export declare const VISITOR_UPLOAD_COUNTER_BYTES = "uploadBytes";
+export declare const VISITOR_UPLOAD_COUNTER_FILES = "uploadCount";
+/** The bytes of kept files a site's storage counter holds, never more than its `bytes`. */
+export declare function visitorUploadCounterBytes(counter: Record<string, unknown> | null | undefined): number;
+/** The media library's own files: the counter's `bytes` less the kept files counted beside them. */
+export declare function mediaLibraryBytes(counter: Record<string, unknown> | null | undefined): number;
 /**
  * The files a browser picked, checked before any is sent: how many, and each
  * one's type and size. `already` is how many the submission holds.