@aglyn/plugins-marketing 1.0.0-beta.287 → 1.0.0-beta.289

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-marketing",
-  "version": "1.0.0-beta.287",
+  "version": "1.0.0-beta.289",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,21 +25,21 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.287",
-    "@aglyn/shared-data-enums": "1.0.0-beta.287",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.287",
-    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.287",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.287",
-    "@aglyn/shared-ui-jsx-forms": "1.0.0-beta.287",
-    "@aglyn/shared-ui-next": "1.0.0-beta.287",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.287",
-    "@aglyn/shared-util-email": "1.0.0-beta.287",
-    "@aglyn/shared-util-http": "1.0.0-beta.287",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.287",
-    "@aglyn/shared-util-tools": "1.0.0-beta.287",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.287",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.287",
-    "@aglyn/tenant-runtime": "1.0.0-beta.287",
+    "@aglyn/aglyn": "1.0.0-beta.289",
+    "@aglyn/shared-data-enums": "1.0.0-beta.289",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.289",
+    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.289",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.289",
+    "@aglyn/shared-ui-jsx-forms": "1.0.0-beta.289",
+    "@aglyn/shared-ui-next": "1.0.0-beta.289",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.289",
+    "@aglyn/shared-util-email": "1.0.0-beta.289",
+    "@aglyn/shared-util-http": "1.0.0-beta.289",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.289",
+    "@aglyn/shared-util-tools": "1.0.0-beta.289",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.289",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.289",
+    "@aglyn/tenant-runtime": "1.0.0-beta.289",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/declarations.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The plugin's DECLARATIONS (AGL-4047): "Run email campaigns", which the one
+ * permission catalog lists beside the core keys. Loaded eagerly by the
+ * console (client and server) and the tenant's server through the generated
+ * declarations manifest, so the role editor offers it, a custom role or a
+ * per-member override keeps it, and the site's stamp carries it. Light by
+ * construction: nothing here reaches a provider, Firestore or React.
+ */
+export declare function registerMarketingDeclarations(): void;

package/src/lib/declarations.js

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginEntitlements } from "@aglyn/aglyn/plugin-manager/plugin-entitlements";
+import { MARKETING_SITE_PERMISSIONS } from "./model/marketing-permissions.js";
+let declared = false;
+/**
+ * The plugin's DECLARATIONS (AGL-4047): "Run email campaigns", which the one
+ * permission catalog lists beside the core keys. Loaded eagerly by the
+ * console (client and server) and the tenant's server through the generated
+ * declarations manifest, so the role editor offers it, a custom role or a
+ * per-member override keeps it, and the site's stamp carries it. Light by
+ * construction: nothing here reaches a provider, Firestore or React.
+ */ export function registerMarketingDeclarations() {
+    if (declared) return;
+    declared = true;
+    registerPluginEntitlements({
+        pluginId: 'marketing',
+        orgPermissions: MARKETING_SITE_PERMISSIONS
+    });
+}
+registerMarketingDeclarations();
+
+//# sourceMappingURL=declarations.js.map

package/src/lib/declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/marketing/src/lib/declarations.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginEntitlements } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport { MARKETING_SITE_PERMISSIONS } from './model/marketing-permissions'\n\nlet declared = false\n\n/**\n * The plugin's DECLARATIONS (AGL-4047): \"Run email campaigns\", which the one\n * permission catalog lists beside the core keys. Loaded eagerly by the\n * console (client and server) and the tenant's server through the generated\n * declarations manifest, so the role editor offers it, a custom role or a\n * per-member override keeps it, and the site's stamp carries it. Light by\n * construction: nothing here reaches a provider, Firestore or React.\n */\nexport function registerMarketingDeclarations(): void {\n  if (declared) return\n  declared = true\n  registerPluginEntitlements({ pluginId: 'marketing', orgPermissions: MARKETING_SITE_PERMISSIONS })\n}\n\nregisterMarketingDeclarations()\n"],"names":["registerPluginEntitlements","MARKETING_SITE_PERMISSIONS","declared","registerMarketingDeclarations","pluginId","orgPermissions"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,kDAAiD;AAC5F,SAASC,0BAA0B,QAAQ,mCAA+B;AAE1E,IAAIC,WAAW;AAEf;;;;;;;CAOC,GACD,OAAO,SAASC;IACd,IAAID,UAAU;IACdA,WAAW;IACXF,2BAA2B;QAAEI,UAAU;QAAaC,gBAAgBJ;IAA2B;AACjG;AAEAE"}

package/src/lib/model/marketing-permissions.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { HostAccessRole } from '@aglyn/aglyn/foundation/definitions/organization.types';
+import type { PluginOrgPermissionDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-entitlements';
+/** Marketing's keys whose preset is the site role. */
+export type MarketingSitePermission = 'marketing.campaigns';
+/** Who ran a site's campaigns before it was a key: the site's Admin and Editor. */
+export declare const MARKETING_CAMPAIGNS_SITE_ROLE_PRESET: Readonly<Record<HostAccessRole, boolean>>;
+/** The key as the plugin declares it into the org permission catalog. */
+export declare const MARKETING_SITE_PERMISSIONS: readonly PluginOrgPermissionDeclaration[];
+/** The refusal a door answers without it: names the permission, never a role. */
+export declare const MARKETING_CAMPAIGNS_REFUSAL = "Your role does not include \"Run email campaigns\" \u2014 ask an organization admin";

package/src/lib/model/marketing-permissions.js

@@ -0,0 +1,42 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+/** Who ran a site's campaigns before it was a key: the site's Admin and Editor. */ export const MARKETING_CAMPAIGNS_SITE_ROLE_PRESET = {
+    admin: true,
+    editor: true,
+    author: false,
+    viewer: false
+};
+/** The key as the plugin declares it into the org permission catalog. */ export const MARKETING_SITE_PERMISSIONS = [
+    {
+        key: 'marketing.campaigns',
+        label: 'Run email campaigns',
+        description: 'Draft, send, duplicate and manage email campaigns, and see who a send reached. Follows the site role on a site, and the workspace role in the organization hub, unless a role or member sets it.',
+        roleDefaults: {
+            owner: true,
+            admin: true,
+            editor: true,
+            viewer: false
+        },
+        hostRoleDefaults: _extends({}, MARKETING_CAMPAIGNS_SITE_ROLE_PRESET),
+        group: 'marketing',
+        groupLabel: 'Marketing',
+        presetFromSiteRole: true
+    }
+];
+/** The refusal a door answers without it: names the permission, never a role. */ export const MARKETING_CAMPAIGNS_REFUSAL = 'Your role does not include "Run email campaigns" — ask an organization admin';
+
+//# sourceMappingURL=marketing-permissions.js.map

package/src/lib/model/marketing-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketing/src/lib/model/marketing-permissions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { HostAccessRole } from '@aglyn/aglyn/foundation/definitions/organization.types'\nimport type { PluginOrgPermissionDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\n\n/*\n * MARKETING'S KEY (AGL-4047).\n *\n * Composing, sending and managing email campaigns, and reading who a send\n * reached, was the site Admin's and Editor's on a site, and an owner's,\n * admin's or editor's of the whole workspace from the organization hub. That\n * is now \"Run email campaigns\", whose preset is the site role on a site\n * (`presetFromSiteRole`) and the workspace role with no site named\n * (`roleDefaults`), so every member keeps exactly the access they had, and a\n * custom role, a member's own permissions or a site's toggle can grant or\n * refuse it.\n */\n\n/** Marketing's keys whose preset is the site role. */\nexport type MarketingSitePermission = 'marketing.campaigns'\n\n/** Who ran a site's campaigns before it was a key: the site's Admin and Editor. */\nexport const MARKETING_CAMPAIGNS_SITE_ROLE_PRESET: Readonly<Record<HostAccessRole, boolean>> = {\n  admin: true,\n  editor: true,\n  author: false,\n  viewer: false,\n}\n\n/** The key as the plugin declares it into the org permission catalog. */\nexport const MARKETING_SITE_PERMISSIONS: readonly PluginOrgPermissionDeclaration[] = [\n  {\n    key: 'marketing.campaigns',\n    label: 'Run email campaigns',\n    description:\n      'Draft, send, duplicate and manage email campaigns, and see who a send reached. Follows the site role on a site, and the workspace role in the organization hub, unless a role or member sets it.',\n    roleDefaults: { owner: true, admin: true, editor: true, viewer: false },\n    hostRoleDefaults: { ...MARKETING_CAMPAIGNS_SITE_ROLE_PRESET },\n    group: 'marketing',\n    groupLabel: 'Marketing',\n    presetFromSiteRole: true,\n  },\n]\n\n/** The refusal a door answers without it: names the permission, never a role. */\nexport const MARKETING_CAMPAIGNS_REFUSAL = 'Your role does not include \"Run email campaigns\" — ask an organization admin'\n"],"names":["MARKETING_CAMPAIGNS_SITE_ROLE_PRESET","admin","editor","author","viewer","MARKETING_SITE_PERMISSIONS","key","label","description","roleDefaults","owner","hostRoleDefaults","group","groupLabel","presetFromSiteRole","MARKETING_CAMPAIGNS_REFUSAL"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAqBD,iFAAiF,GACjF,OAAO,MAAMA,uCAAkF;IAC7FC,OAAO;IACPC,QAAQ;IACRC,QAAQ;IACRC,QAAQ;AACV,EAAC;AAED,uEAAuE,GACvE,OAAO,MAAMC,6BAAwE;IACnF;QACEC,KAAK;QACLC,OAAO;QACPC,aACE;QACFC,cAAc;YAAEC,OAAO;YAAMT,OAAO;YAAMC,QAAQ;YAAME,QAAQ;QAAM;QACtEO,kBAAkB,aAAKX;QACvBY,OAAO;QACPC,YAAY;QACZC,oBAAoB;IACtB;CACD,CAAA;AAED,+EAA+E,GAC/E,OAAO,MAAMC,8BAA8B,+EAA8E"}

package/src/lib/server/campaign-manage.d.ts

@@ -24,10 +24,8 @@ export declare const CAMPAIGN_DRAFT_DEFAULT_NAME = "Untitled campaign";
 export declare const CAMPAIGN_DRAFT_HEADER_MAX_CHARS = 200;
 /** The most alternative subject lines or preheaders a drafted email keeps. */
 export declare const CAMPAIGN_DRAFT_MAX_VARIANTS = 10;
-/** The site roles that may compose this site's mail. */
-export declare const CAMPAIGN_DRAFT_ROLES: readonly ["admin", "editor"];
-/** The send route's refusal for a member who may not compose this site's mail. */
-export declare const CAMPAIGN_DRAFT_ROLE_REFUSAL = "Not a site admin or editor";
+/** The refusal for a member without "Run email campaigns" here (AGL-4047): names the permission. */
+export declare const CAMPAIGN_DRAFT_ROLE_REFUSAL = "Your role does not include \"Run email campaigns\" \u2014 ask an organization admin";
 /** The id of the one email inside a drafted campaign. */
 export declare function campaignDraftEmailId(campaignId: string): string;
 /** Every field a drafted email is written with, and so every field it can hold. */

package/src/lib/server/campaign-manage.js

@@ -96,7 +96,9 @@ import { claimAttempt, createResourceUid } from "@aglyn/aglyn/server";
  * are what the contact pass and the organization door need, and taking them
  * from `@aglyn/tenant-data-admin`'s index would pull the whole Next server
  * pipeline back into this file's graph.
- */ import { getOrgDoc, resolveOrgIdForHost, resolveOrgMembership } from "@aglyn/tenant-data-admin/server/organizations";
+ */ import { getOrgDoc, memberHasOrgPermission, resolveOrgIdForHost, resolveOrgMembership } from "@aglyn/tenant-data-admin/server/organizations";
+import { holdsStampedSiteKey } from "@aglyn/aglyn/app-utils/host-permissions";
+import { MARKETING_CAMPAIGNS_REFUSAL, MARKETING_CAMPAIGNS_SITE_ROLE_PRESET } from "../model/marketing-permissions.js";
 import { isOrgWideMember } from "@aglyn/aglyn/server";
 import { CAMPAIGN_SEND_CONTAINER_FIELD, CAMPAIGN_SEND_HOST_FIELD, campaignPlacedOnHost, campaignSiteIds, campaignVisibleTo } from "../model/campaign-container.js";
 import { campaignSendSiteStamp, orgCampaignSends, orgEmailCampaigns, sendHostId, sendIsOnHost } from "./campaign-org-refs.js";
@@ -630,11 +632,7 @@ import { isPluginEnabled } from "@aglyn/aglyn/plugin-manager/enabled-plugins";
 /** A drafted campaign's name when the caller asks for none. */ export const CAMPAIGN_DRAFT_DEFAULT_NAME = 'Untitled campaign';
 /** The longest subject or preheader a drafted email stores: the send route's header cap. */ export const CAMPAIGN_DRAFT_HEADER_MAX_CHARS = 200;
 /** The most alternative subject lines or preheaders a drafted email keeps. */ export const CAMPAIGN_DRAFT_MAX_VARIANTS = 10;
-/** The site roles that may compose this site's mail. */ export const CAMPAIGN_DRAFT_ROLES = [
-    'admin',
-    'editor'
-];
-/** The send route's refusal for a member who may not compose this site's mail. */ export const CAMPAIGN_DRAFT_ROLE_REFUSAL = 'Not a site admin or editor';
+/** The refusal for a member without "Run email campaigns" here (AGL-4047): names the permission. */ export const CAMPAIGN_DRAFT_ROLE_REFUSAL = MARKETING_CAMPAIGNS_REFUSAL;
 /** The id of the one email inside a drafted campaign. */ export function campaignDraftEmailId(campaignId) {
     return `${campaignId}-email`;
 }
@@ -705,9 +703,9 @@ export function readCampaignDraftContent(content) {
     };
 }
 function campaignDraftRoleRefusal(host, uid) {
-    var _host_get;
-    const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[uid];
-    return CAMPAIGN_DRAFT_ROLES.includes(role) ? null : {
+    // "Run email campaigns" (AGL-4047): the site's stamp, else the preset of
+    // the member's site role, the Admin and Editor this asked for before.
+    return holdsStampedSiteKey(host, uid, 'marketing.campaigns', MARKETING_CAMPAIGNS_SITE_ROLE_PRESET) ? null : {
         status: 403,
         error: CAMPAIGN_DRAFT_ROLE_REFUSAL
     };
@@ -890,11 +888,6 @@ export const campaignDraftWriter = createCampaignDraftWriter();
         pluginId: MARKETING_PLUGIN_ID
     });
 }
-/** The org roles that may manage campaigns from the organization hub. */ const ORG_MANAGE_ROLES = [
-    'owner',
-    'admin',
-    'editor'
-];
 /**
  * The organization a `campaigns/manage` request from the organization hub is
  * for, read off its JSON body, so the dispatcher's release gate asks about the
@@ -974,7 +967,7 @@ export const campaignDraftWriter = createCampaignDraftWriter();
         const firestore = firebaseAdmin.app().firestore();
         let orgId;
         if (hostId) {
-            var _hostSnapshot_get, _ref4;
+            var _ref4;
             const hostRef = firestore.collection('hosts').doc(hostId);
             const hostSnapshot = await hostRef.get();
             if (!hostSnapshot.exists) {
@@ -982,10 +975,9 @@ export const campaignDraftWriter = createCampaignDraftWriter();
                     error: 'Unknown site'
                 });
             }
-            const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
-            if (memberRole !== 'admin' && memberRole !== 'editor') {
+            if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketing.campaigns', MARKETING_CAMPAIGNS_SITE_ROLE_PRESET)) {
                 return res.status(403).json({
-                    error: 'Not a site admin or editor'
+                    error: MARKETING_CAMPAIGNS_REFUSAL
                 });
             }
             orgId = (_ref4 = await resolveOrgIdForHost(hostId)) != null ? _ref4 : '';
@@ -1004,12 +996,15 @@ export const campaignDraftWriter = createCampaignDraftWriter();
                 });
             }
         } else {
-            var _member_role;
             const membership = await resolveOrgMembership(decoded.uid, requestedOrgId);
             const member = membership == null ? void 0 : membership.member;
-            if (!member || !isOrgWideMember(member) || !ORG_MANAGE_ROLES.includes(String((_member_role = member.role) != null ? _member_role : ''))) {
+            // A member of the whole workspace holding "Run email campaigns" with
+            // no site named (AGL-4047): its default is the owner, admins and
+            // editors this asked for before, then their custom role and their own
+            // permissions.
+            if (!member || !isOrgWideMember(member) || !await memberHasOrgPermission(requestedOrgId, member, 'marketing.campaigns')) {
                 return res.status(403).json({
-                    error: 'Not an organization owner, admin or editor'
+                    error: MARKETING_CAMPAIGNS_REFUSAL
                 });
             }
             /*