@aglyn/aglyn 1.0.0-beta.292 → 1.0.0-beta.293

package/src/lib/plugin-manager/plugin-site-starters.d.ts

@@ -40,6 +40,19 @@ export interface SiteStarterSummary {
     priceUsd: number;
     previewImageUrl: string | null;
     facets: SiteStarterFacets;
+    /**
+     * What kind of site it is, in words a card shows ("Restaurant & café"), or
+     * `null` where it names none. Optional: a source with no such words still
+     * satisfies the seam, and `facets.kind` stays the id a search filters on.
+     */
+    category?: string | null;
+    /**
+     * The asking workspace may create from it without paying (AGL-4049):
+     * bought already, or its own. Read for the person who asked, so it is set
+     * only by an answer that knows who that is, and absent where it does not
+     * say; a free starter needs no purchase either way.
+     */
+    owned?: boolean;
 }
 /** Who is asking: the workspace the site will belong to, and the person. */
 export interface SiteStarterViewer {
@@ -70,6 +83,15 @@ export interface PluginSiteStarterSource {
     installed?(choice: SiteStarterChoice, viewer: SiteStarterViewer, site: {
         hostId: string;
     }): Promise<void>;
+    /**
+     * One starter as a search would list it for this viewer, or `null` when it
+     * is not one they may see (AGL-4049): what the create path records a site
+     * was started from, and the name it files the starter's theme under, and
+     * what "Choose your starter" shows for a pick it restores. Best-effort.
+     * Optional, so a source that cannot describe a single listing still
+     * satisfies the seam; read it through {@link describeSiteStarter}.
+     */
+    describe?(choice: SiteStarterChoice, viewer: SiteStarterViewer): Promise<SiteStarterSummary | null>;
 }
 export declare const PLUGIN_SITE_STARTERS: import("./plugin-services").PluginServiceContract<PluginSiteStarterSource>;
 /** Registers the plugin that serves site starters. One per deployment; a second is refused. */
@@ -78,3 +100,11 @@ export declare function registerPluginSiteStarterSource(impl: PluginSiteStarterS
 }): void;
 /** The registered starter source, or `null` when no plugin serves starters. */
 export declare function resolveSiteStarterSource(): PluginSiteStarterSource | null;
+/**
+ * A starter as the source describes it, or `null` when the source cannot say
+ * (AGL-4049): no `describe`, a listing the viewer may not see, or a source
+ * that failed. Never throws, because nothing it answers is required: the
+ * create path falls back to the payload's own facts, and the picker to the
+ * search.
+ */
+export declare function describeSiteStarter(source: PluginSiteStarterSource | null, choice: SiteStarterChoice, viewer: SiteStarterViewer): Promise<SiteStarterSummary | null>;

package/src/lib/plugin-manager/plugin-site-starters.js

@@ -26,5 +26,24 @@ export const PLUGIN_SITE_STARTERS = definePluginServiceContract('core.site-start
     var _resolvePluginService;
     return (_resolvePluginService = resolvePluginService(PLUGIN_SITE_STARTERS)) != null ? _resolvePluginService : null;
 }
+/**
+ * A starter as the source describes it, or `null` when the source cannot say
+ * (AGL-4049): no `describe`, a listing the viewer may not see, or a source
+ * that failed. Never throws, because nothing it answers is required: the
+ * create path falls back to the payload's own facts, and the picker to the
+ * search.
+ */ export async function describeSiteStarter(source, choice, viewer) {
+    if (!(source == null ? void 0 : source.describe) || !(choice == null ? void 0 : choice.listingId)) return null;
+    try {
+        const summary = await source.describe(choice, viewer);
+        return summary && typeof summary === 'object' && summary.listingId === choice.listingId ? summary : null;
+    } catch (error) {
+        console.error('[site-starters] describe failed', {
+            listingId: choice.listingId,
+            error
+        });
+        return null;
+    }
+}
 
 //# sourceMappingURL=plugin-site-starters.js.map

package/src/lib/plugin-manager/plugin-site-starters.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-site-starters.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  SiteStarterChoice,\n  SiteStarterFacets,\n  SiteStarterPayload,\n} from '../app-utils/site-starter'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginService,\n} from './plugin-services'\n\n/**\n * Where site starters come from, as the console's SERVER reads them\n * (AGL-4049).\n *\n * \"Create site\" offers a starter for every site, chosen before the site\n * exists, and the site is created from the one picked. The starters are\n * listings a plugin keeps — searched, priced and bought there — so the core\n * names the two questions the create path asks and one plugin answers them:\n * which starters match a search, and what a picked one creates. With none\n * registered there are no starters to offer, and the create path keeps its\n * own default site.\n */\n\n/** One starter as a search lists it. */\nexport interface SiteStarterSummary {\n  listingId: string\n  displayName: string\n  description: string\n  /** Who made it, as the search shows them. */\n  authorName: string\n  /** Published by the platform itself; listed first. */\n  official: boolean\n  /** The price in US dollars; 0 for free. */\n  priceUsd: number\n  previewImageUrl: string | null\n  facets: SiteStarterFacets\n}\n\n/** Who is asking: the workspace the site will belong to, and the person. */\nexport interface SiteStarterViewer {\n  orgId: string | null\n  uid: string\n}\n\nexport interface PluginSiteStarterSource {\n  /** The starters matching a search, best first, at most `limit` of them. */\n  search(\n    input: { word: string; filter: Partial<SiteStarterFacets>; limit: number },\n    viewer: SiteStarterViewer,\n  ): Promise<SiteStarterSummary[]>\n  /**\n   * What a picked starter creates, or why this viewer cannot have it: 402\n   * while a priced starter is unpaid (with its price), 403 when the viewer may\n   * not install it, 404 when it is gone.\n   */\n  resolve(\n    choice: SiteStarterChoice,\n    viewer: SiteStarterViewer,\n  ): Promise<SiteStarterPayload | { error: string; status: 402 | 403 | 404; priceUsd?: number }>\n  /**\n   * Records that a site was created from a starter; best-effort, never throws.\n   * Optional, so a source that does not count installs still satisfies the seam.\n   */\n  installed?(choice: SiteStarterChoice, viewer: SiteStarterViewer, site: { hostId: string }): Promise<void>\n}\n\nexport const PLUGIN_SITE_STARTERS = definePluginServiceContract<PluginSiteStarterSource>(\n  'core.site-starters',\n  { multiple: false },\n)\n\n/** Registers the plugin that serves site starters. One per deployment; a second is refused. */\nexport function registerPluginSiteStarterSource(\n  impl: PluginSiteStarterSource,\n  options: { pluginId: string },\n): void {\n  registerPluginService(PLUGIN_SITE_STARTERS, impl, { pluginId: options.pluginId })\n}\n\n/** The registered starter source, or `null` when no plugin serves starters. */\nexport function resolveSiteStarterSource(): PluginSiteStarterSource | null {\n  return resolvePluginService(PLUGIN_SITE_STARTERS) ?? null\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginService","PLUGIN_SITE_STARTERS","multiple","registerPluginSiteStarterSource","impl","options","pluginId","resolveSiteStarterSource"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAOD,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,oBAAoB,QACf,uBAAmB;AA0D1B,OAAO,MAAMC,uBAAuBH,4BAClC,sBACA;IAAEI,UAAU;AAAM,GACnB;AAED,6FAA6F,GAC7F,OAAO,SAASC,gCACdC,IAA6B,EAC7BC,OAA6B;IAE7BN,sBAAsBE,sBAAsBG,MAAM;QAAEE,UAAUD,QAAQC,QAAQ;IAAC;AACjF;AAEA,6EAA6E,GAC7E,OAAO,SAASC;QACPP;IAAP,QAAOA,wBAAAA,qBAAqBC,iCAArBD,wBAA8C;AACvD"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-site-starters.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  SiteStarterChoice,\n  SiteStarterFacets,\n  SiteStarterPayload,\n} from '../app-utils/site-starter'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginService,\n} from './plugin-services'\n\n/**\n * Where site starters come from, as the console's SERVER reads them\n * (AGL-4049).\n *\n * \"Create site\" offers a starter for every site, chosen before the site\n * exists, and the site is created from the one picked. The starters are\n * listings a plugin keeps — searched, priced and bought there — so the core\n * names the two questions the create path asks and one plugin answers them:\n * which starters match a search, and what a picked one creates. With none\n * registered there are no starters to offer, and the create path keeps its\n * own default site.\n */\n\n/** One starter as a search lists it. */\nexport interface SiteStarterSummary {\n  listingId: string\n  displayName: string\n  description: string\n  /** Who made it, as the search shows them. */\n  authorName: string\n  /** Published by the platform itself; listed first. */\n  official: boolean\n  /** The price in US dollars; 0 for free. */\n  priceUsd: number\n  previewImageUrl: string | null\n  facets: SiteStarterFacets\n  /**\n   * What kind of site it is, in words a card shows (\"Restaurant & café\"), or\n   * `null` where it names none. Optional: a source with no such words still\n   * satisfies the seam, and `facets.kind` stays the id a search filters on.\n   */\n  category?: string | null\n  /**\n   * The asking workspace may create from it without paying (AGL-4049):\n   * bought already, or its own. Read for the person who asked, so it is set\n   * only by an answer that knows who that is, and absent where it does not\n   * say; a free starter needs no purchase either way.\n   */\n  owned?: boolean\n}\n\n/** Who is asking: the workspace the site will belong to, and the person. */\nexport interface SiteStarterViewer {\n  orgId: string | null\n  uid: string\n}\n\nexport interface PluginSiteStarterSource {\n  /** The starters matching a search, best first, at most `limit` of them. */\n  search(\n    input: { word: string; filter: Partial<SiteStarterFacets>; limit: number },\n    viewer: SiteStarterViewer,\n  ): Promise<SiteStarterSummary[]>\n  /**\n   * What a picked starter creates, or why this viewer cannot have it: 402\n   * while a priced starter is unpaid (with its price), 403 when the viewer may\n   * not install it, 404 when it is gone.\n   */\n  resolve(\n    choice: SiteStarterChoice,\n    viewer: SiteStarterViewer,\n  ): Promise<SiteStarterPayload | { error: string; status: 402 | 403 | 404; priceUsd?: number }>\n  /**\n   * Records that a site was created from a starter; best-effort, never throws.\n   * Optional, so a source that does not count installs still satisfies the seam.\n   */\n  installed?(choice: SiteStarterChoice, viewer: SiteStarterViewer, site: { hostId: string }): Promise<void>\n  /**\n   * One starter as a search would list it for this viewer, or `null` when it\n   * is not one they may see (AGL-4049): what the create path records a site\n   * was started from, and the name it files the starter's theme under, and\n   * what \"Choose your starter\" shows for a pick it restores. Best-effort.\n   * Optional, so a source that cannot describe a single listing still\n   * satisfies the seam; read it through {@link describeSiteStarter}.\n   */\n  describe?(choice: SiteStarterChoice, viewer: SiteStarterViewer): Promise<SiteStarterSummary | null>\n}\n\nexport const PLUGIN_SITE_STARTERS = definePluginServiceContract<PluginSiteStarterSource>(\n  'core.site-starters',\n  { multiple: false },\n)\n\n/** Registers the plugin that serves site starters. One per deployment; a second is refused. */\nexport function registerPluginSiteStarterSource(\n  impl: PluginSiteStarterSource,\n  options: { pluginId: string },\n): void {\n  registerPluginService(PLUGIN_SITE_STARTERS, impl, { pluginId: options.pluginId })\n}\n\n/** The registered starter source, or `null` when no plugin serves starters. */\nexport function resolveSiteStarterSource(): PluginSiteStarterSource | null {\n  return resolvePluginService(PLUGIN_SITE_STARTERS) ?? null\n}\n\n/**\n * A starter as the source describes it, or `null` when the source cannot say\n * (AGL-4049): no `describe`, a listing the viewer may not see, or a source\n * that failed. Never throws, because nothing it answers is required: the\n * create path falls back to the payload's own facts, and the picker to the\n * search.\n */\nexport async function describeSiteStarter(\n  source: PluginSiteStarterSource | null,\n  choice: SiteStarterChoice,\n  viewer: SiteStarterViewer,\n): Promise<SiteStarterSummary | null> {\n  if (!source?.describe || !choice?.listingId) return null\n  try {\n    const summary = await source.describe(choice, viewer)\n    return summary && typeof summary === 'object' && summary.listingId === choice.listingId ? summary : null\n  } catch (error) {\n    console.error('[site-starters] describe failed', { listingId: choice.listingId, error })\n    return null\n  }\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginService","PLUGIN_SITE_STARTERS","multiple","registerPluginSiteStarterSource","impl","options","pluginId","resolveSiteStarterSource","describeSiteStarter","source","choice","viewer","describe","listingId","summary","error","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAOD,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,oBAAoB,QACf,uBAAmB;AAgF1B,OAAO,MAAMC,uBAAuBH,4BAClC,sBACA;IAAEI,UAAU;AAAM,GACnB;AAED,6FAA6F,GAC7F,OAAO,SAASC,gCACdC,IAA6B,EAC7BC,OAA6B;IAE7BN,sBAAsBE,sBAAsBG,MAAM;QAAEE,UAAUD,QAAQC,QAAQ;IAAC;AACjF;AAEA,6EAA6E,GAC7E,OAAO,SAASC;QACPP;IAAP,QAAOA,wBAAAA,qBAAqBC,iCAArBD,wBAA8C;AACvD;AAEA;;;;;;CAMC,GACD,OAAO,eAAeQ,oBACpBC,MAAsC,EACtCC,MAAyB,EACzBC,MAAyB;IAEzB,IAAI,EAACF,0BAAAA,OAAQG,QAAQ,KAAI,EAACF,0BAAAA,OAAQG,SAAS,GAAE,OAAO;IACpD,IAAI;QACF,MAAMC,UAAU,MAAML,OAAOG,QAAQ,CAACF,QAAQC;QAC9C,OAAOG,WAAW,OAAOA,YAAY,YAAYA,QAAQD,SAAS,KAAKH,OAAOG,SAAS,GAAGC,UAAU;IACtG,EAAE,OAAOC,OAAO;QACdC,QAAQD,KAAK,CAAC,mCAAmC;YAAEF,WAAWH,OAAOG,SAAS;YAAEE;QAAM;QACtF,OAAO;IACT;AACF"}

package/src/lib/plugin-manager/plugin-site-style-looks.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { SiteStarterTheme } from '../app-utils/site-starter';
+/**
+ * The look each site style gives a new site, as the console's SERVER reads it
+ * (AGL-4049).
+ *
+ * A site is created only once a person has chosen a style
+ * (`app-utils/site-styles.ts`). The core keeps the list of styles; what each
+ * one LOOKS like — a built-in theme, a brand color, a font pairing — is the
+ * AI plugin's, which designed the 21 looks. So the core names the one
+ * question the create asks and one plugin answers it. With none registered,
+ * a site still starts in the default theme, and its style is still recorded.
+ */
+/** A built-in theme with a brand and fonts over it: the shape a style's look takes. */
+export type SiteStyleLook = Extract<SiteStarterTheme, {
+    kind: 'builtin';
+}>;
+export interface PluginSiteStyleLookSource {
+    /** The look a style starts a site in, or `null` for a style this source has none for. */
+    look(styleId: string): Promise<SiteStyleLook | null>;
+}
+export declare const PLUGIN_SITE_STYLE_LOOKS: import("./plugin-services").PluginServiceContract<PluginSiteStyleLookSource>;
+/** Registers the plugin that answers each style's look. One per deployment; a second is refused. */
+export declare function registerPluginSiteStyleLooks(impl: PluginSiteStyleLookSource, options: {
+    pluginId: string;
+}): void;
+/** The registered look source, or `null` when no plugin answers. */
+export declare function resolveSiteStyleLooks(): PluginSiteStyleLookSource | null;

package/src/lib/plugin-manager/plugin-site-style-looks.js

@@ -0,0 +1,30 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { definePluginServiceContract, registerPluginService, resolvePluginService } from "./plugin-services.js";
+export const PLUGIN_SITE_STYLE_LOOKS = definePluginServiceContract('core.site-style-looks', {
+    multiple: false
+});
+/** Registers the plugin that answers each style's look. One per deployment; a second is refused. */ export function registerPluginSiteStyleLooks(impl, options) {
+    registerPluginService(PLUGIN_SITE_STYLE_LOOKS, impl, {
+        pluginId: options.pluginId
+    });
+}
+/** The registered look source, or `null` when no plugin answers. */ export function resolveSiteStyleLooks() {
+    var _resolvePluginService;
+    return (_resolvePluginService = resolvePluginService(PLUGIN_SITE_STYLE_LOOKS)) != null ? _resolvePluginService : null;
+}
+
+//# sourceMappingURL=plugin-site-style-looks.js.map

package/src/lib/plugin-manager/plugin-site-style-looks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-site-style-looks.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { SiteStarterTheme } from '../app-utils/site-starter'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginService,\n} from './plugin-services'\n\n/**\n * The look each site style gives a new site, as the console's SERVER reads it\n * (AGL-4049).\n *\n * A site is created only once a person has chosen a style\n * (`app-utils/site-styles.ts`). The core keeps the list of styles; what each\n * one LOOKS like — a built-in theme, a brand color, a font pairing — is the\n * AI plugin's, which designed the 21 looks. So the core names the one\n * question the create asks and one plugin answers it. With none registered,\n * a site still starts in the default theme, and its style is still recorded.\n */\n\n/** A built-in theme with a brand and fonts over it: the shape a style's look takes. */\nexport type SiteStyleLook = Extract<SiteStarterTheme, { kind: 'builtin' }>\n\nexport interface PluginSiteStyleLookSource {\n  /** The look a style starts a site in, or `null` for a style this source has none for. */\n  look(styleId: string): Promise<SiteStyleLook | null>\n}\n\nexport const PLUGIN_SITE_STYLE_LOOKS = definePluginServiceContract<PluginSiteStyleLookSource>(\n  'core.site-style-looks',\n  { multiple: false },\n)\n\n/** Registers the plugin that answers each style's look. One per deployment; a second is refused. */\nexport function registerPluginSiteStyleLooks(\n  impl: PluginSiteStyleLookSource,\n  options: { pluginId: string },\n): void {\n  registerPluginService(PLUGIN_SITE_STYLE_LOOKS, impl, { pluginId: options.pluginId })\n}\n\n/** The registered look source, or `null` when no plugin answers. */\nexport function resolveSiteStyleLooks(): PluginSiteStyleLookSource | null {\n  return resolvePluginService(PLUGIN_SITE_STYLE_LOOKS) ?? null\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginService","PLUGIN_SITE_STYLE_LOOKS","multiple","registerPluginSiteStyleLooks","impl","options","pluginId","resolveSiteStyleLooks"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,oBAAoB,QACf,uBAAmB;AAsB1B,OAAO,MAAMC,0BAA0BH,4BACrC,yBACA;IAAEI,UAAU;AAAM,GACnB;AAED,kGAAkG,GAClG,OAAO,SAASC,6BACdC,IAA+B,EAC/BC,OAA6B;IAE7BN,sBAAsBE,yBAAyBG,MAAM;QAAEE,UAAUD,QAAQC,QAAQ;IAAC;AACpF;AAEA,kEAAkE,GAClE,OAAO,SAASC;QACPP;IAAP,QAAOA,wBAAAA,qBAAqBC,oCAArBD,wBAAiD;AAC1D"}

package/src/lib/plugin-manager/plugin-upload-storage-gate.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * WHETHER A MEMBER'S FILE FITS THE WORKSPACE'S STORAGE (AGL-4096).
+ *
+ * A file a member attaches outside the media library (a quote's proof) is
+ * kept by the shared upload pipeline (`@aglyn/tenant-data-admin/server/visitor-upload`)
+ * and counted toward the workspace's storage like a library file. Before it
+ * is taken it meets the same storage band a library upload does: refused on
+ * a plan that does not bill storage past its allowance, taken and billed on
+ * one that does, refused past a storage cap the workspace set.
+ *
+ * The band and its rules live with the app that holds the media ingress, so
+ * this is a contract: the console registers the one implementation at boot
+ * (`instrumentation.ts`), the same direction as `core.media-ingest`.
+ *
+ * Only a MEMBER's file is asked about. A file a site's visitor sends (a
+ * customer's artwork on a quote, a form's file) is never refused for the
+ * business's storage; it is counted all the same. A process that registered
+ * nothing (the site app) answers `null` from {@link uploadStorageGate}, and
+ * the file is taken.
+ */
+export interface UploadStorageGateInput {
+    /** The site the file is kept on; its workspace's storage is the one asked. */
+    hostId: string;
+    /** The file's size in bytes. */
+    bytes: number;
+}
+/** Why the file does not fit, as the member is told. */
+export interface UploadStorageRefusal {
+    status: number;
+    error: string;
+    /** The storage gate's machine code, as the media library's upload routes answer it. */
+    code: string;
+}
+export interface UploadStorageGate {
+    /** `null` when the file may be kept; otherwise why it may not. */
+    check(input: UploadStorageGateInput): Promise<UploadStorageRefusal | null>;
+}
+/** One implementation: the app that holds the storage band. */
+export declare const UPLOAD_STORAGE_GATE: import("./plugin-services").PluginServiceContract<UploadStorageGate>;
+export declare function registerUploadStorageGate(gate: UploadStorageGate, options?: {
+    pluginId?: string;
+}): void;
+/** The registered gate, or `null` in a process that registered none. */
+export declare function uploadStorageGate(): UploadStorageGate | null;

package/src/lib/plugin-manager/plugin-upload-storage-gate.js

@@ -0,0 +1,32 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { definePluginServiceContract, registerPluginService, resolvePluginService } from "./plugin-services.js";
+/** One implementation: the app that holds the storage band. */ export const UPLOAD_STORAGE_GATE = definePluginServiceContract('core.upload-storage-gate', {
+    multiple: false
+});
+export function registerUploadStorageGate(gate, options) {
+    if (typeof (gate == null ? void 0 : gate.check) !== 'function') throw new Error('an upload storage gate needs check');
+    registerPluginService(UPLOAD_STORAGE_GATE, gate, _extends({}, (options == null ? void 0 : options.pluginId) ? {
+        pluginId: options.pluginId
+    } : {}));
+}
+/** The registered gate, or `null` in a process that registered none. */ export function uploadStorageGate() {
+    var _resolvePluginService;
+    return (_resolvePluginService = resolvePluginService(UPLOAD_STORAGE_GATE)) != null ? _resolvePluginService : null;
+}
+
+//# sourceMappingURL=plugin-upload-storage-gate.js.map

package/src/lib/plugin-manager/plugin-upload-storage-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-upload-storage-gate.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginService,\n} from './plugin-services'\n\n/**\n * WHETHER A MEMBER'S FILE FITS THE WORKSPACE'S STORAGE (AGL-4096).\n *\n * A file a member attaches outside the media library (a quote's proof) is\n * kept by the shared upload pipeline (`@aglyn/tenant-data-admin/server/visitor-upload`)\n * and counted toward the workspace's storage like a library file. Before it\n * is taken it meets the same storage band a library upload does: refused on\n * a plan that does not bill storage past its allowance, taken and billed on\n * one that does, refused past a storage cap the workspace set.\n *\n * The band and its rules live with the app that holds the media ingress, so\n * this is a contract: the console registers the one implementation at boot\n * (`instrumentation.ts`), the same direction as `core.media-ingest`.\n *\n * Only a MEMBER's file is asked about. A file a site's visitor sends (a\n * customer's artwork on a quote, a form's file) is never refused for the\n * business's storage; it is counted all the same. A process that registered\n * nothing (the site app) answers `null` from {@link uploadStorageGate}, and\n * the file is taken.\n */\n\nexport interface UploadStorageGateInput {\n  /** The site the file is kept on; its workspace's storage is the one asked. */\n  hostId: string\n  /** The file's size in bytes. */\n  bytes: number\n}\n\n/** Why the file does not fit, as the member is told. */\nexport interface UploadStorageRefusal {\n  status: number\n  error: string\n  /** The storage gate's machine code, as the media library's upload routes answer it. */\n  code: string\n}\n\nexport interface UploadStorageGate {\n  /** `null` when the file may be kept; otherwise why it may not. */\n  check(input: UploadStorageGateInput): Promise<UploadStorageRefusal | null>\n}\n\n/** One implementation: the app that holds the storage band. */\nexport const UPLOAD_STORAGE_GATE = definePluginServiceContract<UploadStorageGate>(\n  'core.upload-storage-gate',\n  { multiple: false },\n)\n\nexport function registerUploadStorageGate(\n  gate: UploadStorageGate,\n  options?: { pluginId?: string },\n): void {\n  if (typeof gate?.check !== 'function') throw new Error('an upload storage gate needs check')\n  registerPluginService(UPLOAD_STORAGE_GATE, gate, {\n    ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n  })\n}\n\n/** The registered gate, or `null` in a process that registered none. */\nexport function uploadStorageGate(): UploadStorageGate | null {\n  return resolvePluginService(UPLOAD_STORAGE_GATE) ?? null\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginService","UPLOAD_STORAGE_GATE","multiple","registerUploadStorageGate","gate","options","check","Error","pluginId","uploadStorageGate"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,oBAAoB,QACf,uBAAmB;AA2C1B,6DAA6D,GAC7D,OAAO,MAAMC,sBAAsBH,4BACjC,4BACA;IAAEI,UAAU;AAAM,GACnB;AAED,OAAO,SAASC,0BACdC,IAAuB,EACvBC,OAA+B;IAE/B,IAAI,QAAOD,wBAAAA,KAAME,KAAK,MAAK,YAAY,MAAM,IAAIC,MAAM;IACvDR,sBAAsBE,qBAAqBG,MAAM,aAC3CC,CAAAA,2BAAAA,QAASG,QAAQ,IAAG;QAAEA,UAAUH,QAAQG,QAAQ;IAAC,IAAI,CAAC;AAE9D;AAEA,sEAAsE,GACtE,OAAO,SAASC;QACPT;IAAP,QAAOA,wBAAAA,qBAAqBC,gCAArBD,wBAA6C;AACtD"}