@aglyn/plugins-marketplace 1.0.0-beta.285 → 1.0.0-beta.288

package/src/lib/server/publish-email-starter.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-email-starter.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  CANVAS_ROOT_ELEMENT_ID,\n  checkEntitlement,\n  createResourceUid,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { decodeStoredNodes } from '@aglyn/aglyn/app-utils/stored-nodes'\nimport { inlineReusableBlocks } from './publish-email-blocks'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  emailStarterRefusal,\n  inspectEmailStarter,\n  MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST,\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/**\n * Publishes a site's campaign email design as a marketplace starter.\n *\n * The source is a `kind: 'email'` SCREEN — the document `createEmailScreen`\n * writes and the screen besigner edits — not an entry in the transactional\n * catalog. That is the whole difference from `publish-email-template`, and it\n * is why the two exist separately: a transactional design is a design FOR a\n * fixed key and installs onto that same key; a starter belongs to no key and\n * installs as a new email of the buyer's own.\n *\n * ## Two things this reads that the transactional publisher does not\n *\n * **The nodes are compressed.** A screen version is written through\n * `screenVersionConverter`, so `nodes` comes back from the Admin SDK as a\n * msgpack `Buffer`. `publish-email-template.ts` reads its `nodes` raw and says\n * why — its besigner saves with a bare `setDoc` and no converter — and copying\n * that line here would publish a Buffer: truthy, non-empty by `Object.keys`\n * (those are byte indices), and scanning as a design with no blocks in it.\n *\n * **The tree is inspected, not just sanitized.** `sanitizeMarketplaceDefinition`\n * DROPS an unsafe URL and publishes what is left, which is right for a page.\n * Here the URL rules are the product: a remote image in an email is a read\n * receipt for whoever hosts it, and quietly removing one teaches the publisher\n * nothing. So `inspectEmailStarter` runs first and REFUSES.\n */\nexport const publishEmailStarterHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const screenId = String(req.body?.screenId ?? '')\n  const displayName = String(req.body?.displayName ?? '').slice(0, 80)\n  const description = String(req.body?.description ?? '').slice(0, 500)\n  const category = String(req.body?.category ?? '').slice(0, 40)\n  const priceUsd = Math.round(Number(req.body?.priceUsd ?? 0)) || 0\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) return res.status(400).json({ error: priceRefusal })\n  if (!hostId || !screenId || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, screenId, or displayName' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not a site admin or editor' })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    if (!checkEntitlement(orgForHost?.org ?? {}, 'marketplaceSelling')) {\n      return res\n        .status(403)\n        .json({ error: 'Publishing to the marketplace requires a Pro plan' })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'templates',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const screenRef = hostRef.collection('screens').doc(screenId)\n    const screenSnapshot = await screenRef.get()\n    const screen = screenSnapshot.data() as Record<string, unknown> | undefined\n    if (!screen || screen['deletedAt']) {\n      return res.status(404).json({ error: 'Unknown email' })\n    }\n    if (screen['kind'] !== 'email') {\n      return res\n        .status(422)\n        .json({ error: 'That design is not an email' })\n    }\n    const activeVersionId = screen['versionId']\n    if (!activeVersionId) {\n      return res\n        .status(404)\n        .json({ error: 'This email has no saved design yet — design and save it first' })\n    }\n    const versionSnapshot = await screenRef\n      .collection('versions')\n      .doc(String(activeVersionId))\n      .get()\n\n    /*\n     * The site's reusable blocks INLINED before anything is judged (AGL-3287).\n     * A buyer's org has none of this site's components, so a placement has to\n     * travel as the blocks it renders — and inlining first is what puts a\n     * shared footer's links and images in front of the inspection below, as\n     * the send path would mail them. An undecodable payload is left as stored,\n     * so the inspection still refuses it by name.\n     */\n    const stored = versionSnapshot.get('nodes')\n    const readable = decodeStoredNodes<Record<string, unknown>>(stored)\n    let design: unknown = stored\n    if (readable && typeof readable === 'object' && !Array.isArray(readable)) {\n      const inlined = await inlineReusableBlocks(readable, {\n        firestore,\n        hostId,\n        rootId: CANVAS_ROOT_ELEMENT_ID,\n      })\n      if (inlined.ok === false) {\n        return res.status(422).json({ error: inlined.error })\n      }\n      design = inlined.nodes\n    }\n    // The inspection decodes, so it is also the guard against publishing a\n    // node map nothing could read — it refuses rather than reporting a\n    // compressed payload as a clean design.\n    const inspection = inspectEmailStarter(design)\n    const violation = emailStarterRefusal(inspection)\n    if (violation) {\n      return res.status(422).json({\n        error: violation,\n        violations: inspection.violations,\n      })\n    }\n    if (!inspection.nodes || !Object.keys(inspection.nodes).length) {\n      return res.status(404).json({ error: 'This email design is empty' })\n    }\n    // Runs after the inspection and over the same decoded map. It enforces the\n    // component-id allowlist and trims node keys; the URL rules it also carries\n    // can no longer fire, because a design that would have tripped them was\n    // refused above rather than silently trimmed.\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId: CANVAS_ROOT_ELEMENT_ID, nodes: inspection.nodes },\n      { componentIds: MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST },\n    )\n    if (sanitized.ok === false) {\n      return res.status(422).json({ error: sanitized.error })\n    }\n\n    // One listing per (publisher org, source screen). Re-publishing the same\n    // email bumps its version rather than minting a second listing, which is\n    // what makes \"update available\" mean anything to everyone who installed it.\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceHostId', '==', hostId)\n      .where('sourceScreenId', '==', screenId)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        emailNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        profileId: publisher.orgId,\n        artifactType: 'emailStarter',\n        sourceHostId: hostId,\n        sourceScreenId: screenId,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef\n      .collection('versions')\n      .doc(String(version))\n      .set({\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        // Copy is part of the design and travels with it.\n        subject: String(screen['emailSubject'] ?? ''),\n        preheader: String(screen['emailPreheader'] ?? ''),\n        // The hosts this design would send a recipient to, recorded at publish\n        // so the listing page can show them BEFORE somebody installs. A tenant\n        // about to mail their own customers under their own name is entitled to\n        // see the domains a stranger's template points them at, and no\n        // allowlist can make that judgment for them.\n        linkHosts: inspection.linkHosts,\n        // Absent `reviewState` is the un-reviewed default, and it is written\n        // NOWHERE here on purpose: a publisher who could stamp their own\n        // version approved would make the field decorative. Staff write it.\n        publishedAt: now,\n      })\n\n    return res\n      .status(200)\n      .json({ listingId: listingRef.id, version, linkHosts: inspection.linkHosts })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Email starter publish failed' })\n  }\n}\n\nexport default publishEmailStarterHandler\n"],"names":["displayNameSearchFields","CANVAS_ROOT_ELEMENT_ID","checkEntitlement","createResourceUid","decodeStoredNodes","inlineReusableBlocks","firebaseAdmin","getOrgForHost","resolveOrgPermissions","emailStarterRefusal","inspectEmailStarter","MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST","marketplacePriceRefusal","sanitizeMarketplaceDefinition","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","publishEmailStarterHandler","req","res","method","status","json","error","hostId","String","body","screenId","displayName","slice","description","category","priceUsd","Math","round","Number","priceRefusal","trim","authorization","headers","idToken","startsWith","length","undefined","hostSnapshot","existing","orgForHost","screen","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","get","exists","memberRole","org","orgId","publisher","refusal","sells","screenRef","screenSnapshot","data","activeVersionId","versionSnapshot","stored","readable","design","Array","isArray","inlined","rootId","ok","nodes","inspection","violation","violations","Object","keys","sanitized","componentIds","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","emailNodes","official","set","profileId","artifactType","sourceHostId","sourceScreenId","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","subject","preheader","linkHosts","listingId","id","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SAASC,oBAAoB,QAAQ,4BAAwB;AAC7D,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,mBAAmB,EACnBC,mBAAmB,EACnBC,gDAAgD,EAChDC,uBAAuB,EACvBC,6BAA6B,QACxB,oBAAU;AACjB,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,OAAO,MAAMC,6BAA+C,OAAOC,KAAKC;iDAkBzCD;QAdPA,WACEA,YACGA,YACAA,YACHA,YACWA;IARnC,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,WAAWF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,QAAQ,oBAAI;IAC9C,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI,IAAIC,KAAK,CAAC,GAAG;IACjE,MAAMC,cAAcL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,WAAW,oBAAI,IAAID,KAAK,CAAC,GAAG;IACjE,MAAME,WAAWN,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI,IAAIF,KAAK,CAAC,GAAG;IAC3D,MAAMG,WAAWC,KAAKC,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUc,QAAQ,oBAAI,OAAO;IAChE,MAAMI,eAAezB,wBAAwBqB;IAC7C,IAAII,cAAc,OAAOjB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAOa;IAAa;IACpE,IAAI,CAACZ,UAAU,CAACG,YAAY,CAACC,YAAYS,IAAI,IAAI;QAC/C,OAAOlB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA2C;IAC9D;IAEA,MAAMe,gBAAgBb,QAAOP,6BAAAA,IAAIqB,OAAO,CAACD,aAAa,YAAzBpB,6BAA6B;IAC1D,MAAMsB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcT,KAAK,CAAC,UAAUa,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAOrB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;YAekBqB,0BA0GTC,qBAaJC,iBAqCaC,sBACEA;QA3KtB,MAAMC,UAAU,MAAM3C,cAAc4C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACX;QAC/D,MAAMY,aAAa,MAAM7C,sBAAsByC,QAAQK,GAAG,EAAE;YAAE7B;QAAO;QACrE,IAAI,CAAC4B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOpC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMiC,YAAYnD,cAAc4C,GAAG,GAAGO,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACnC;QAClD,MAAMoB,eAAe,MAAMa,QAAQG,GAAG;QACtC,IAAI,CAAChB,aAAaiB,MAAM,EAAE;YACxB,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAMuC,aAAa,EAAClB,oBAAAA,aAAagB,GAAG,CAAC,0BAAjBhB,oBAAmC,CAAC,EAAE,CAACI,QAAQK,GAAG,CAAC;QACvE,IAAIS,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAO3C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QAEA,MAAMuB,aAAa,MAAMxC,cAAckB;QACvC,IAAI,CAACvB,0BAAiB6C,8BAAAA,WAAYiB,GAAG,oBAAI,CAAC,GAAG,uBAAuB;YAClE,OAAO5C,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAoD;QACvE;QACA,IAAI,EAACuB,8BAAAA,WAAYkB,KAAK,GAAE;YACtB,OAAO7C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QACA,MAAM0C,YAAY,MAAMpD,wBAAwB2C,WAAWV,WAAWkB,KAAK;QAC3E,MAAME,UAAUpD,2BAA2BmD,WAAW;YACpDjC;YACAmC,OAAO;QACT;QACA,IAAID,SAAS,OAAO/C,IAAIE,MAAM,CAAC6C,QAAQ7C,MAAM,EAAEC,IAAI,CAAC4C,QAAQxC,IAAI;QAEhE,MAAM0C,YAAYX,QAAQC,UAAU,CAAC,WAAWC,GAAG,CAAChC;QACpD,MAAM0C,iBAAiB,MAAMD,UAAUR,GAAG;QAC1C,MAAMb,SAASsB,eAAeC,IAAI;QAClC,IAAI,CAACvB,UAAUA,MAAM,CAAC,YAAY,EAAE;YAClC,OAAO5B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,IAAIwB,MAAM,CAAC,OAAO,KAAK,SAAS;YAC9B,OAAO5B,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACjD;QACA,MAAMgD,kBAAkBxB,MAAM,CAAC,YAAY;QAC3C,IAAI,CAACwB,iBAAiB;YACpB,OAAOpD,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAgE;QACnF;QACA,MAAMiD,kBAAkB,MAAMJ,UAC3BV,UAAU,CAAC,YACXC,GAAG,CAAClC,OAAO8C,kBACXX,GAAG;QAEN;;;;;;;KAOC,GACD,MAAMa,SAASD,gBAAgBZ,GAAG,CAAC;QACnC,MAAMc,WAAWvE,kBAA2CsE;QAC5D,IAAIE,SAAkBF;QACtB,IAAIC,YAAY,OAAOA,aAAa,YAAY,CAACE,MAAMC,OAAO,CAACH,WAAW;YACxE,MAAMI,UAAU,MAAM1E,qBAAqBsE,UAAU;gBACnDlB;gBACAhC;gBACAuD,QAAQ/E;YACV;YACA,IAAI8E,QAAQE,EAAE,KAAK,OAAO;gBACxB,OAAO7D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAOuD,QAAQvD,KAAK;gBAAC;YACrD;YACAoD,SAASG,QAAQG,KAAK;QACxB;QACA,uEAAuE;QACvE,mEAAmE;QACnE,wCAAwC;QACxC,MAAMC,aAAazE,oBAAoBkE;QACvC,MAAMQ,YAAY3E,oBAAoB0E;QACtC,IAAIC,WAAW;YACb,OAAOhE,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO4D;gBACPC,YAAYF,WAAWE,UAAU;YACnC;QACF;QACA,IAAI,CAACF,WAAWD,KAAK,IAAI,CAACI,OAAOC,IAAI,CAACJ,WAAWD,KAAK,EAAEvC,MAAM,EAAE;YAC9D,OAAOvB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QACA,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,8CAA8C;QAC9C,MAAMgE,YAAY3E,8BAChB;YAAEmE,QAAQ/E;YAAwBiF,OAAOC,WAAWD,KAAK;QAAC,GAC1D;YAAEO,cAAc9E;QAAiD;QAEnE,IAAI6E,UAAUP,EAAE,KAAK,OAAO;YAC1B,OAAO7D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOgE,UAAUhE,KAAK;YAAC;QACvD;QAEA,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAMsB,WAAW,MAAMW,UACpBE,UAAU,CAAC,uBACX+B,KAAK,CAAC,aAAa,MAAMxB,UAAUD,KAAK,EACxCyB,KAAK,CAAC,gBAAgB,MAAMjE,QAC5BiE,KAAK,CAAC,kBAAkB,MAAM9D,UAC9B+D,KAAK,CAAC,GACN9B,GAAG;QACN,MAAM+B,aAAa9C,SAAS+C,KAAK,GAC7BpC,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAACzD,uBAChD2C,SAASgD,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUlD,SAAS+C,KAAK,GAC1B,IACAzD,QAAOU,sBAAAA,SAASgD,IAAI,CAAC,EAAE,CAACjC,GAAG,CAAC,4BAArBf,sBAAyC,KAAK;QACzD,MAAMmD,MAAM3F,cAAcmD,SAAS,CAACyC,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAMpF,yBAAyB;YAC9CqF,gBAAgBnC,UAAUD,KAAK;YAC/BqC,SAAS;gBACPzE;gBACA0E,eAAerC,UAAUrC,WAAW;gBACpCE;gBACAyE,YAAYhB,UAAUN,KAAK;YAC7B;YACAuB,UAAUxD,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEjB,kBAAAA,WAAWiB,GAAG,YAAdjB,kBAAkB;QACzB;QACA,IAAIqD,UAAU,OAAOhF,IAAIE,MAAM,CAAC8E,SAAS9E,MAAM,EAAEC,IAAI,CAAC6E,SAASzE,IAAI;QAEnE,MAAMiE,WAAWc,GAAG,CAClB;YACEC,WAAWzC,UAAUD,KAAK;YAC1B2C,cAAc;YACdC,cAAcpF;YACdqF,gBAAgBlF;YAChBC,aAAaA,YAAYS,IAAI;WAG1BtC,wBAAwB6B,YAAYS,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACA8E,eAAef;YACfgB,WAAW;WACPlE,SAAS+C,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgB7G,cAAcmD,SAAS,CAACyC,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAa/G,cAAcmD,SAAS,CAAC6D,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAMtG,0BAA0B2E;QAChC,MAAMA,WACHjC,UAAU,CAAC,YACXC,GAAG,CAAClC,OAAOsE,UACXU,GAAG,CAAC;YACH1B,QAAQQ,UAAUR,MAAM;YACxBE,OAAOM,UAAUN,KAAK;YACtB,kDAAkD;YAClDsC,SAAS9F,QAAOsB,uBAAAA,MAAM,CAAC,eAAe,YAAtBA,uBAA0B;YAC1CyE,WAAW/F,QAAOsB,yBAAAA,MAAM,CAAC,iBAAiB,YAAxBA,yBAA4B;YAC9C,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,+DAA+D;YAC/D,6CAA6C;YAC7C0E,WAAWvC,WAAWuC,SAAS;YAC/B,qEAAqE;YACrE,iEAAiE;YACjE,oEAAoE;YACpEL,aAAapB;QACf;QAEF,OAAO7E,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEoG,WAAW/B,WAAWgC,EAAE;YAAE5B;YAAS0B,WAAWvC,WAAWuC,SAAS;QAAC;IAC/E,EAAE,OAAOlG,OAAO;QACdqG,QAAQrG,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;AACF,EAAC;AAED,eAAeN,2BAA0B"}
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-email-starter.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { holdsStampedSiteKey } from '@aglyn/aglyn/app-utils/host-permissions'\nimport { MARKETPLACE_SITE_ROLE_PRESET, marketplaceSitePermissionRefusal } from '../model/marketplace-site-permissions'\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  CANVAS_ROOT_ELEMENT_ID,\n  checkEntitlement,\n  createResourceUid,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { decodeStoredNodes } from '@aglyn/aglyn/app-utils/stored-nodes'\nimport { inlineReusableBlocks } from './publish-email-blocks'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  emailStarterRefusal,\n  inspectEmailStarter,\n  MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST,\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/**\n * Publishes a site's campaign email design as a marketplace starter.\n *\n * The source is a `kind: 'email'` SCREEN — the document `createEmailScreen`\n * writes and the screen besigner edits — not an entry in the transactional\n * catalog. That is the whole difference from `publish-email-template`, and it\n * is why the two exist separately: a transactional design is a design FOR a\n * fixed key and installs onto that same key; a starter belongs to no key and\n * installs as a new email of the buyer's own.\n *\n * ## Two things this reads that the transactional publisher does not\n *\n * **The nodes are compressed.** A screen version is written through\n * `screenVersionConverter`, so `nodes` comes back from the Admin SDK as a\n * msgpack `Buffer`. `publish-email-template.ts` reads its `nodes` raw and says\n * why — its besigner saves with a bare `setDoc` and no converter — and copying\n * that line here would publish a Buffer: truthy, non-empty by `Object.keys`\n * (those are byte indices), and scanning as a design with no blocks in it.\n *\n * **The tree is inspected, not just sanitized.** `sanitizeMarketplaceDefinition`\n * DROPS an unsafe URL and publishes what is left, which is right for a page.\n * Here the URL rules are the product: a remote image in an email is a read\n * receipt for whoever hosts it, and quietly removing one teaches the publisher\n * nothing. So `inspectEmailStarter` runs first and REFUSES.\n */\nexport const publishEmailStarterHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const screenId = String(req.body?.screenId ?? '')\n  const displayName = String(req.body?.displayName ?? '').slice(0, 80)\n  const description = String(req.body?.description ?? '').slice(0, 500)\n  const category = String(req.body?.category ?? '').slice(0, 40)\n  const priceUsd = Math.round(Number(req.body?.priceUsd ?? 0)) || 0\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) return res.status(400).json({ error: priceRefusal })\n  if (!hostId || !screenId || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, screenId, or displayName' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // \"Publish a site’s items to the marketplace\" (AGL-4047): the site's stamp, else\n    // the preset of the member's site role, the Admin and Editor this asked for.\n    if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketplace.sitePublish', MARKETPLACE_SITE_ROLE_PRESET)) {\n      return res.status(403).json({ error: marketplaceSitePermissionRefusal('marketplace.sitePublish') })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    if (!checkEntitlement(orgForHost?.org ?? {}, 'marketplaceSelling')) {\n      return res\n        .status(403)\n        .json({ error: 'Publishing to the marketplace requires a Pro plan' })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'templates',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const screenRef = hostRef.collection('screens').doc(screenId)\n    const screenSnapshot = await screenRef.get()\n    const screen = screenSnapshot.data() as Record<string, unknown> | undefined\n    if (!screen || screen['deletedAt']) {\n      return res.status(404).json({ error: 'Unknown email' })\n    }\n    if (screen['kind'] !== 'email') {\n      return res\n        .status(422)\n        .json({ error: 'That design is not an email' })\n    }\n    const activeVersionId = screen['versionId']\n    if (!activeVersionId) {\n      return res\n        .status(404)\n        .json({ error: 'This email has no saved design yet — design and save it first' })\n    }\n    const versionSnapshot = await screenRef\n      .collection('versions')\n      .doc(String(activeVersionId))\n      .get()\n\n    /*\n     * The site's reusable blocks INLINED before anything is judged (AGL-3287).\n     * A buyer's org has none of this site's components, so a placement has to\n     * travel as the blocks it renders — and inlining first is what puts a\n     * shared footer's links and images in front of the inspection below, as\n     * the send path would mail them. An undecodable payload is left as stored,\n     * so the inspection still refuses it by name.\n     */\n    const stored = versionSnapshot.get('nodes')\n    const readable = decodeStoredNodes<Record<string, unknown>>(stored)\n    let design: unknown = stored\n    if (readable && typeof readable === 'object' && !Array.isArray(readable)) {\n      const inlined = await inlineReusableBlocks(readable, {\n        firestore,\n        hostId,\n        rootId: CANVAS_ROOT_ELEMENT_ID,\n      })\n      if (inlined.ok === false) {\n        return res.status(422).json({ error: inlined.error })\n      }\n      design = inlined.nodes\n    }\n    // The inspection decodes, so it is also the guard against publishing a\n    // node map nothing could read — it refuses rather than reporting a\n    // compressed payload as a clean design.\n    const inspection = inspectEmailStarter(design)\n    const violation = emailStarterRefusal(inspection)\n    if (violation) {\n      return res.status(422).json({\n        error: violation,\n        violations: inspection.violations,\n      })\n    }\n    if (!inspection.nodes || !Object.keys(inspection.nodes).length) {\n      return res.status(404).json({ error: 'This email design is empty' })\n    }\n    // Runs after the inspection and over the same decoded map. It enforces the\n    // component-id allowlist and trims node keys; the URL rules it also carries\n    // can no longer fire, because a design that would have tripped them was\n    // refused above rather than silently trimmed.\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId: CANVAS_ROOT_ELEMENT_ID, nodes: inspection.nodes },\n      { componentIds: MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST },\n    )\n    if (sanitized.ok === false) {\n      return res.status(422).json({ error: sanitized.error })\n    }\n\n    // One listing per (publisher org, source screen). Re-publishing the same\n    // email bumps its version rather than minting a second listing, which is\n    // what makes \"update available\" mean anything to everyone who installed it.\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceHostId', '==', hostId)\n      .where('sourceScreenId', '==', screenId)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        emailNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        profileId: publisher.orgId,\n        artifactType: 'emailStarter',\n        sourceHostId: hostId,\n        sourceScreenId: screenId,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef\n      .collection('versions')\n      .doc(String(version))\n      .set({\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        // Copy is part of the design and travels with it.\n        subject: String(screen['emailSubject'] ?? ''),\n        preheader: String(screen['emailPreheader'] ?? ''),\n        // The hosts this design would send a recipient to, recorded at publish\n        // so the listing page can show them BEFORE somebody installs. A tenant\n        // about to mail their own customers under their own name is entitled to\n        // see the domains a stranger's template points them at, and no\n        // allowlist can make that judgment for them.\n        linkHosts: inspection.linkHosts,\n        // Absent `reviewState` is the un-reviewed default, and it is written\n        // NOWHERE here on purpose: a publisher who could stamp their own\n        // version approved would make the field decorative. Staff write it.\n        publishedAt: now,\n      })\n\n    return res\n      .status(200)\n      .json({ listingId: listingRef.id, version, linkHosts: inspection.linkHosts })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Email starter publish failed' })\n  }\n}\n\nexport default publishEmailStarterHandler\n"],"names":["holdsStampedSiteKey","MARKETPLACE_SITE_ROLE_PRESET","marketplaceSitePermissionRefusal","displayNameSearchFields","CANVAS_ROOT_ELEMENT_ID","checkEntitlement","createResourceUid","decodeStoredNodes","inlineReusableBlocks","firebaseAdmin","getOrgForHost","resolveOrgPermissions","emailStarterRefusal","inspectEmailStarter","MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST","marketplacePriceRefusal","sanitizeMarketplaceDefinition","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","publishEmailStarterHandler","req","res","method","status","json","error","hostId","String","body","screenId","displayName","slice","description","category","priceUsd","Math","round","Number","priceRefusal","trim","authorization","headers","idToken","startsWith","length","undefined","existing","orgForHost","screen","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","hostSnapshot","get","exists","org","orgId","publisher","refusal","sells","screenRef","screenSnapshot","data","activeVersionId","versionSnapshot","stored","readable","design","Array","isArray","inlined","rootId","ok","nodes","inspection","violation","violations","Object","keys","sanitized","componentIds","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","emailNodes","official","set","profileId","artifactType","sourceHostId","sourceScreenId","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","subject","preheader","linkHosts","listingId","id","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,0CAAyC;AAC7E,SAASC,4BAA4B,EAAEC,gCAAgC,QAAQ,2CAAuC;AACtH,SAASC,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SAASC,oBAAoB,QAAQ,4BAAwB;AAC7D,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,mBAAmB,EACnBC,mBAAmB,EACnBC,gDAAgD,EAChDC,uBAAuB,EACvBC,6BAA6B,QACxB,oBAAU;AACjB,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,OAAO,MAAMC,6BAA+C,OAAOC,KAAKC;iDAkBzCD;QAdPA,WACEA,YACGA,YACAA,YACHA,YACWA;IARnC,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,WAAWF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,QAAQ,oBAAI;IAC9C,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI,IAAIC,KAAK,CAAC,GAAG;IACjE,MAAMC,cAAcL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,WAAW,oBAAI,IAAID,KAAK,CAAC,GAAG;IACjE,MAAME,WAAWN,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI,IAAIF,KAAK,CAAC,GAAG;IAC3D,MAAMG,WAAWC,KAAKC,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUc,QAAQ,oBAAI,OAAO;IAChE,MAAMI,eAAezB,wBAAwBqB;IAC7C,IAAII,cAAc,OAAOjB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAOa;IAAa;IACpE,IAAI,CAACZ,UAAU,CAACG,YAAY,CAACC,YAAYS,IAAI,IAAI;QAC/C,OAAOlB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA2C;IAC9D;IAEA,MAAMe,gBAAgBb,QAAOP,6BAAAA,IAAIqB,OAAO,CAACD,aAAa,YAAzBpB,6BAA6B;IAC1D,MAAMsB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcT,KAAK,CAAC,UAAUa,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAOrB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;mBA0HSqB,qBAaJC,iBAqCaC,sBACEA;QA5KtB,MAAMC,UAAU,MAAM1C,cAAc2C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACV;QAC/D,MAAMW,aAAa,MAAM5C,sBAAsBwC,QAAQK,GAAG,EAAE;YAAE5B;QAAO;QACrE,IAAI,CAAC2B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOnC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMgC,YAAYlD,cAAc2C,GAAG,GAAGO,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAAClC;QAClD,MAAMmC,eAAe,MAAMH,QAAQI,GAAG;QACtC,IAAI,CAACD,aAAaE,MAAM,EAAE;YACxB,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,iFAAiF;QACjF,6EAA6E;QAC7E,IAAI,CAAC3B,oBAAoB+D,cAAcZ,QAAQK,GAAG,EAAE,2BAA2BvD,+BAA+B;YAC5G,OAAOsB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOzB,iCAAiC;YAA2B;QACnG;QAEA,MAAM+C,aAAa,MAAMvC,cAAckB;QACvC,IAAI,CAACvB,0BAAiB4C,8BAAAA,WAAYiB,GAAG,oBAAI,CAAC,GAAG,uBAAuB;YAClE,OAAO3C,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAoD;QACvE;QACA,IAAI,EAACsB,8BAAAA,WAAYkB,KAAK,GAAE;YACtB,OAAO5C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QACA,MAAMyC,YAAY,MAAMnD,wBAAwB0C,WAAWV,WAAWkB,KAAK;QAC3E,MAAME,UAAUnD,2BAA2BkD,WAAW;YACpDhC;YACAkC,OAAO;QACT;QACA,IAAID,SAAS,OAAO9C,IAAIE,MAAM,CAAC4C,QAAQ5C,MAAM,EAAEC,IAAI,CAAC2C,QAAQvC,IAAI;QAEhE,MAAMyC,YAAYX,QAAQC,UAAU,CAAC,WAAWC,GAAG,CAAC/B;QACpD,MAAMyC,iBAAiB,MAAMD,UAAUP,GAAG;QAC1C,MAAMd,SAASsB,eAAeC,IAAI;QAClC,IAAI,CAACvB,UAAUA,MAAM,CAAC,YAAY,EAAE;YAClC,OAAO3B,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgB;QACvD;QACA,IAAIuB,MAAM,CAAC,OAAO,KAAK,SAAS;YAC9B,OAAO3B,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAA8B;QACjD;QACA,MAAM+C,kBAAkBxB,MAAM,CAAC,YAAY;QAC3C,IAAI,CAACwB,iBAAiB;YACpB,OAAOnD,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAgE;QACnF;QACA,MAAMgD,kBAAkB,MAAMJ,UAC3BV,UAAU,CAAC,YACXC,GAAG,CAACjC,OAAO6C,kBACXV,GAAG;QAEN;;;;;;;KAOC,GACD,MAAMY,SAASD,gBAAgBX,GAAG,CAAC;QACnC,MAAMa,WAAWtE,kBAA2CqE;QAC5D,IAAIE,SAAkBF;QACtB,IAAIC,YAAY,OAAOA,aAAa,YAAY,CAACE,MAAMC,OAAO,CAACH,WAAW;YACxE,MAAMI,UAAU,MAAMzE,qBAAqBqE,UAAU;gBACnDlB;gBACA/B;gBACAsD,QAAQ9E;YACV;YACA,IAAI6E,QAAQE,EAAE,KAAK,OAAO;gBACxB,OAAO5D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAOsD,QAAQtD,KAAK;gBAAC;YACrD;YACAmD,SAASG,QAAQG,KAAK;QACxB;QACA,uEAAuE;QACvE,mEAAmE;QACnE,wCAAwC;QACxC,MAAMC,aAAaxE,oBAAoBiE;QACvC,MAAMQ,YAAY1E,oBAAoByE;QACtC,IAAIC,WAAW;YACb,OAAO/D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO2D;gBACPC,YAAYF,WAAWE,UAAU;YACnC;QACF;QACA,IAAI,CAACF,WAAWD,KAAK,IAAI,CAACI,OAAOC,IAAI,CAACJ,WAAWD,KAAK,EAAEtC,MAAM,EAAE;YAC9D,OAAOvB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QACA,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM+D,YAAY1E,8BAChB;YAAEkE,QAAQ9E;YAAwBgF,OAAOC,WAAWD,KAAK;QAAC,GAC1D;YAAEO,cAAc7E;QAAiD;QAEnE,IAAI4E,UAAUP,EAAE,KAAK,OAAO;YAC1B,OAAO5D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO+D,UAAU/D,KAAK;YAAC;QACvD;QAEA,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAMqB,WAAW,MAAMW,UACpBE,UAAU,CAAC,uBACX+B,KAAK,CAAC,aAAa,MAAMxB,UAAUD,KAAK,EACxCyB,KAAK,CAAC,gBAAgB,MAAMhE,QAC5BgE,KAAK,CAAC,kBAAkB,MAAM7D,UAC9B8D,KAAK,CAAC,GACN7B,GAAG;QACN,MAAM8B,aAAa9C,SAAS+C,KAAK,GAC7BpC,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAACxD,uBAChD0C,SAASgD,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUlD,SAAS+C,KAAK,GAC1B,IACAxD,QAAOS,sBAAAA,SAASgD,IAAI,CAAC,EAAE,CAAChC,GAAG,CAAC,4BAArBhB,sBAAyC,KAAK;QACzD,MAAMmD,MAAM1F,cAAckD,SAAS,CAACyC,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAMnF,yBAAyB;YAC9CoF,gBAAgBnC,UAAUD,KAAK;YAC/BqC,SAAS;gBACPxE;gBACAyE,eAAerC,UAAUpC,WAAW;gBACpCE;gBACAwE,YAAYhB,UAAUN,KAAK;YAC7B;YACAuB,UAAUxD,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEjB,kBAAAA,WAAWiB,GAAG,YAAdjB,kBAAkB;QACzB;QACA,IAAIqD,UAAU,OAAO/E,IAAIE,MAAM,CAAC6E,SAAS7E,MAAM,EAAEC,IAAI,CAAC4E,SAASxE,IAAI;QAEnE,MAAMgE,WAAWc,GAAG,CAClB;YACEC,WAAWzC,UAAUD,KAAK;YAC1B2C,cAAc;YACdC,cAAcnF;YACdoF,gBAAgBjF;YAChBC,aAAaA,YAAYS,IAAI;WAG1BtC,wBAAwB6B,YAAYS,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACA6E,eAAef;YACfgB,WAAW;WACPlE,SAAS+C,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgB5G,cAAckD,SAAS,CAACyC,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAa9G,cAAckD,SAAS,CAAC6D,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAMrG,0BAA0B0E;QAChC,MAAMA,WACHjC,UAAU,CAAC,YACXC,GAAG,CAACjC,OAAOqE,UACXU,GAAG,CAAC;YACH1B,QAAQQ,UAAUR,MAAM;YACxBE,OAAOM,UAAUN,KAAK;YACtB,kDAAkD;YAClDsC,SAAS7F,QAAOqB,uBAAAA,MAAM,CAAC,eAAe,YAAtBA,uBAA0B;YAC1CyE,WAAW9F,QAAOqB,yBAAAA,MAAM,CAAC,iBAAiB,YAAxBA,yBAA4B;YAC9C,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,+DAA+D;YAC/D,6CAA6C;YAC7C0E,WAAWvC,WAAWuC,SAAS;YAC/B,qEAAqE;YACrE,iEAAiE;YACjE,oEAAoE;YACpEL,aAAapB;QACf;QAEF,OAAO5E,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEmG,WAAW/B,WAAWgC,EAAE;YAAE5B;YAAS0B,WAAWvC,WAAWuC,SAAS;QAAC;IAC/E,EAAE,OAAOjG,OAAO;QACdoG,QAAQpG,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA+B;IACtE;AACF,EAAC;AAED,eAAeN,2BAA0B"}

package/src/lib/server/publish-email-template.js

@@ -14,7 +14,9 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { displayNameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
+ */ import { holdsStampedSiteKey } from "@aglyn/aglyn/app-utils/host-permissions";
+import { MARKETPLACE_SITE_ROLE_PRESET, marketplaceSitePermissionRefusal } from "../model/marketplace-site-permissions.js";
+import { displayNameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
 import { checkEntitlement, createResourceUid, decodeStoredNodes } from "@aglyn/aglyn/server";
 import { inlineReusableBlocks } from "./publish-email-blocks.js";
 import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
@@ -80,7 +82,7 @@ import { refreshListingQueryFields } from "./listing-query-fields.js";
         error: 'Unauthenticated'
     });
     try {
-        var _hostSnapshot_get, _ref6, _versionSnapshot_get, _existing_docs__get, _orgForHost_org, _templateSnapshot_get, _templateSnapshot_get1;
+        var _ref6, _versionSnapshot_get, _existing_docs__get, _orgForHost_org, _templateSnapshot_get, _templateSnapshot_get1;
         const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
         const membership = await resolveOrgPermissions(decoded.uid, {
             hostId
@@ -98,10 +100,11 @@ import { refreshListingQueryFields } from "./listing-query-fields.js";
                 error: 'Unknown site'
             });
         }
-        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
-        if (memberRole !== 'admin' && memberRole !== 'editor') {
+        // "Publish a site’s items to the marketplace" (AGL-4047): the site's stamp, else
+        // the preset of the member's site role, the Admin and Editor this asked for.
+        if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketplace.sitePublish', MARKETPLACE_SITE_ROLE_PRESET)) {
             return res.status(403).json({
-                error: 'Not a site admin or editor'
+                error: marketplaceSitePermissionRefusal('marketplace.sitePublish')
             });
         }
         const orgForHost = await getOrgForHost(hostId);

package/src/lib/server/publish-email-template.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-email-template.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  checkEntitlement,\n  createResourceUid,\n  decodeStoredNodes,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { inlineReusableBlocks } from './publish-email-blocks'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  EMAIL_NODE_ROOT_ID,\n  getTenantEmail,\n  isTenantEmailEditable,\n  TENANT_EMAIL_COLLECTION,\n} from '@aglyn/shared-util-email'\nimport {\n  MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST,\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/**\n * Publishes a site's designed transactional email to the marketplace\n * (AGL-657).\n *\n * An email design is a node tree like any other artifact, but it does NOT live\n * in the host's screen routing map — which is exactly why `publish-template`\n * could never capture one (it only sees `hostSnapshot.get('screens')`). The\n * tree lives at `hosts/{h}/emailTemplates/{key}/versions/{versionId}`, so this\n * reads it directly.\n *\n * `templateKey` is a fixed catalog key ('booking-confirmed', …), not a free\n * id: a published email means \"a design FOR this transactional email\", so the\n * key travels with the listing and the installer lands on the same key.\n */\nexport const publishEmailTemplateHandler: PluginApiHandler = async (\n  req,\n  res,\n) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const templateKey = String(req.body?.templateKey ?? '')\n  const displayName = String(req.body?.displayName ?? '').slice(0, 80)\n  const description = String(req.body?.description ?? '').slice(0, 500)\n  const category = String(req.body?.category ?? '').slice(0, 40)\n  const priceUsd = Math.round(Number(req.body?.priceUsd ?? 0)) || 0\n  // The price floor and ceiling, from ONE validator (AGL-2343): a paid listing\n  // under `MARKETPLACE_MIN_PRICE_USD` loses money on every sale, because\n  // marketplace checkout is a destination charge whose Stripe fee is debited\n  // from the platform's balance. Also enforced in `publishPreconditionRefusal`\n  // below, so a door that drops this line is still covered.\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) {\n    return res.status(400).json({ error: priceRefusal })\n  }\n  if (!hostId || !templateKey || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, templateKey, or displayName' })\n  }\n  const entry = getTenantEmail(templateKey)\n  if (!entry || !isTenantEmailEditable(entry)) {\n    return res.status(400).json({ error: 'Not a designable email template' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not a site admin or editor' })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    if (!checkEntitlement(orgForHost?.org ?? {}, 'marketplaceSelling')) {\n      return res\n        .status(403)\n        .json({ error: 'Publishing to the marketplace requires a Pro plan' })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    // Profile, payouts AND the publisher agreement, in one gate\n    // (AGL-2282) — see `publishPreconditionRefusal`.\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'templates',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const templateRef = hostRef\n      .collection(TENANT_EMAIL_COLLECTION)\n      .doc(templateKey)\n    const templateSnapshot = await templateRef.get()\n    const activeVersionId = templateSnapshot.get('versionId')\n    if (!templateSnapshot.exists || !activeVersionId) {\n      return res.status(404).json({\n        error: 'This email has no published design yet — design and save it first',\n      })\n    }\n    const versionSnapshot = await templateRef\n      .collection('versions')\n      .doc(String(activeVersionId))\n      .get()\n    // Decoded, like the screen and layout publish paths (AGL-1395): the email\n    // besigner now compresses through a converter as those do, and versions\n    // written before it did are still plain maps, which come back unchanged.\n    //\n    // `sanitizeMarketplaceDefinition` below would refuse an undecoded tree\n    // rather than publish garbage, so this is the difference between the\n    // feature working and a publish that always says the design is invalid.\n    const stored = decodeStoredNodes<Record<string, any>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!stored || !Object.keys(stored).length) {\n      return res.status(404).json({ error: 'This email design is empty' })\n    }\n    const rootId = versionSnapshot.get('rootId') ?? EMAIL_NODE_ROOT_ID\n    // The site's reusable blocks INLINED (AGL-3287): a listing is installed\n    // into another org, which has none of this site's components, and the\n    // sanitizer below refuses a component reference outright.\n    const inlined = await inlineReusableBlocks(stored, {\n      firestore,\n      hostId,\n      rootId,\n    })\n    if (inlined.ok === false) {\n      return res.status(422).json({ error: inlined.error })\n    }\n    const nodes = inlined.nodes\n    // Emails are built from `plugins-email` blocks only, so the page allowlist\n    // is REPLACED rather than extended — see MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST\n    // for why `emailHtml` is not on the list.\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId, nodes },\n      { componentIds: MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST },\n    )\n    if (sanitized.ok === false) {\n      return res.status(422).json({ error: sanitized.error })\n    }\n\n    // One listing per (source site, template key).\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceHostId', '==', hostId)\n      .where('emailTemplateKey', '==', templateKey)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        emailNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        profileId: publisher.orgId,\n        artifactType: 'emailTemplate',\n        sourceHostId: hostId,\n        emailTemplateKey: templateKey,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef\n      .collection('versions')\n      .doc(String(version))\n      .set({\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        emailTemplateKey: templateKey,\n        // The copy fields are part of the design, not the tree.\n        subject: String(templateSnapshot.get('subject') ?? ''),\n        preheader: String(templateSnapshot.get('preheader') ?? ''),\n        publishedAt: now,\n      })\n\n    return res.status(200).json({ listingId: listingRef.id, version })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Publish failed' })\n  }\n}\n\nexport default publishEmailTemplateHandler\n"],"names":["displayNameSearchFields","checkEntitlement","createResourceUid","decodeStoredNodes","inlineReusableBlocks","firebaseAdmin","getOrgForHost","resolveOrgPermissions","EMAIL_NODE_ROOT_ID","getTenantEmail","isTenantEmailEditable","TENANT_EMAIL_COLLECTION","MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST","marketplacePriceRefusal","sanitizeMarketplaceDefinition","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","publishEmailTemplateHandler","req","res","method","status","json","error","hostId","String","body","templateKey","displayName","slice","description","category","priceUsd","Math","round","Number","priceRefusal","trim","entry","authorization","headers","idToken","startsWith","length","undefined","hostSnapshot","versionSnapshot","existing","orgForHost","templateSnapshot","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","get","exists","memberRole","org","orgId","publisher","refusal","sells","templateRef","activeVersionId","stored","Object","keys","rootId","inlined","ok","nodes","sanitized","componentIds","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","emailNodes","official","set","profileId","artifactType","sourceHostId","emailTemplateKey","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","subject","preheader","listingId","id","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,gBAAgB,EAChBC,iBAAiB,EACjBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,oBAAoB,QAAQ,4BAAwB;AAC7D,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,kBAAkB,EAClBC,cAAc,EACdC,qBAAqB,EACrBC,uBAAuB,QAClB,2BAA0B;AACjC,SACEC,wCAAwC,EACxCC,uBAAuB,EACvBC,6BAA6B,QACxB,oBAAU;AACjB,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,8BAAgD,OAC3DC,KACAC;iDA8B6BD;QAzBPA,WACKA,YACAA,YACAA,YACHA,YACWA;IARnC,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,cAAcF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,WAAW,oBAAI;IACpD,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI,IAAIC,KAAK,CAAC,GAAG;IACjE,MAAMC,cAAcL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,WAAW,oBAAI,IAAID,KAAK,CAAC,GAAG;IACjE,MAAME,WAAWN,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI,IAAIF,KAAK,CAAC,GAAG;IAC3D,MAAMG,WAAWC,KAAKC,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUc,QAAQ,oBAAI,OAAO;IAChE,6EAA6E;IAC7E,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAMI,eAAezB,wBAAwBqB;IAC7C,IAAII,cAAc;QAChB,OAAOjB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOa;QAAa;IACpD;IACA,IAAI,CAACZ,UAAU,CAACG,eAAe,CAACC,YAAYS,IAAI,IAAI;QAClD,OAAOlB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA8C;IACjE;IACA,MAAMe,QAAQ/B,eAAeoB;IAC7B,IAAI,CAACW,SAAS,CAAC9B,sBAAsB8B,QAAQ;QAC3C,OAAOnB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkC;IACzE;IAEA,MAAMgB,gBAAgBd,QAAOP,6BAAAA,IAAIsB,OAAO,CAACD,aAAa,YAAzBrB,6BAA6B;IAC1D,MAAMuB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcV,KAAK,CAAC,UAAUc,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAOtB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;YAekBsB,0BAmDLC,sBAqCJC,qBAaJC,iBAsCaC,uBACEA;QA1JtB,MAAMC,UAAU,MAAM/C,cAAcgD,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACZ;QAC/D,MAAMa,aAAa,MAAMjD,sBAAsB6C,QAAQK,GAAG,EAAE;YAAE/B;QAAO;QACrE,IAAI,CAAC8B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOtC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMmC,YAAYvD,cAAcgD,GAAG,GAAGO,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACrC;QAClD,MAAMqB,eAAe,MAAMc,QAAQG,GAAG;QACtC,IAAI,CAACjB,aAAakB,MAAM,EAAE;YACxB,OAAO5C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAMyC,aAAa,EAACnB,oBAAAA,aAAaiB,GAAG,CAAC,0BAAjBjB,oBAAmC,CAAC,EAAE,CAACK,QAAQK,GAAG,CAAC;QACvE,IAAIS,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAO7C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QAEA,MAAMyB,aAAa,MAAM5C,cAAcoB;QACvC,IAAI,CAACzB,0BAAiBiD,8BAAAA,WAAYiB,GAAG,oBAAI,CAAC,GAAG,uBAAuB;YAClE,OAAO9C,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAoD;QACvE;QACA,IAAI,EAACyB,8BAAAA,WAAYkB,KAAK,GAAE;YACtB,OAAO/C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QAEA,MAAM4C,YAAY,MAAMtD,wBAAwB6C,WAAWV,WAAWkB,KAAK;QAC3E,4DAA4D;QAC5D,iDAAiD;QACjD,MAAME,UAAUtD,2BAA2BqD,WAAW;YACpDnC;YACAqC,OAAO;QACT;QACA,IAAID,SAAS,OAAOjD,IAAIE,MAAM,CAAC+C,QAAQ/C,MAAM,EAAEC,IAAI,CAAC8C,QAAQ1C,IAAI;QAEhE,MAAM4C,cAAcX,QACjBC,UAAU,CAACnD,yBACXoD,GAAG,CAAClC;QACP,MAAMsB,mBAAmB,MAAMqB,YAAYR,GAAG;QAC9C,MAAMS,kBAAkBtB,iBAAiBa,GAAG,CAAC;QAC7C,IAAI,CAACb,iBAAiBc,MAAM,IAAI,CAACQ,iBAAiB;YAChD,OAAOpD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,MAAMuB,kBAAkB,MAAMwB,YAC3BV,UAAU,CAAC,YACXC,GAAG,CAACpC,OAAO8C,kBACXT,GAAG;QACN,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,MAAMU,SAASvE,kBACb6C,gBAAgBgB,GAAG,CAAC;QAEtB,IAAI,CAACU,UAAU,CAACC,OAAOC,IAAI,CAACF,QAAQ7B,MAAM,EAAE;YAC1C,OAAOxB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QACA,MAAMoD,UAAS7B,uBAAAA,gBAAgBgB,GAAG,CAAC,qBAApBhB,uBAAiCxC;QAChD,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAC1D,MAAMsE,UAAU,MAAM1E,qBAAqBsE,QAAQ;YACjDd;YACAlC;YACAmD;QACF;QACA,IAAIC,QAAQC,EAAE,KAAK,OAAO;YACxB,OAAO1D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOqD,QAAQrD,KAAK;YAAC;QACrD;QACA,MAAMuD,QAAQF,QAAQE,KAAK;QAC3B,2EAA2E;QAC3E,kFAAkF;QAClF,0CAA0C;QAC1C,MAAMC,YAAYnE,8BAChB;YAAE+D;YAAQG;QAAM,GAChB;YAAEE,cAActE;QAAyC;QAE3D,IAAIqE,UAAUF,EAAE,KAAK,OAAO;YAC1B,OAAO1D,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOwD,UAAUxD,KAAK;YAAC;QACvD;QAEA,+CAA+C;QAC/C,MAAMwB,WAAW,MAAMW,UACpBE,UAAU,CAAC,uBACXqB,KAAK,CAAC,aAAa,MAAMd,UAAUD,KAAK,EACxCe,KAAK,CAAC,gBAAgB,MAAMzD,QAC5ByD,KAAK,CAAC,oBAAoB,MAAMtD,aAChCuD,KAAK,CAAC,GACNpB,GAAG;QACN,MAAMqB,aAAapC,SAASqC,KAAK,GAC7B1B,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAAC7D,uBAChD+C,SAASsC,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUxC,SAASqC,KAAK,GAC1B,IACAjD,QAAOY,sBAAAA,SAASsC,IAAI,CAAC,EAAE,CAACvB,GAAG,CAAC,4BAArBf,sBAAyC,KAAK;QACzD,MAAMyC,MAAMrF,cAAcuD,SAAS,CAAC+B,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAM5E,yBAAyB;YAC9C6E,gBAAgBzB,UAAUD,KAAK;YAC/B2B,SAAS;gBACPjE;gBACAkE,eAAe3B,UAAUvC,WAAW;gBACpCE;gBACAiE,YAAYhB,UAAUD,KAAK;YAC7B;YACAkB,UAAU9C,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEjB,kBAAAA,WAAWiB,GAAG,YAAdjB,kBAAkB;QACzB;QACA,IAAI2C,UAAU,OAAOxE,IAAIE,MAAM,CAACsE,SAAStE,MAAM,EAAEC,IAAI,CAACqE,SAASjE,IAAI;QAEnE,MAAMyD,WAAWc,GAAG,CAClB;YACEC,WAAW/B,UAAUD,KAAK;YAC1BiC,cAAc;YACdC,cAAc5E;YACd6E,kBAAkB1E;YAClBC,aAAaA,YAAYS,IAAI;WAG1BvC,wBAAwB8B,YAAYS,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACAsE,eAAef;YACfgB,WAAW;WACPxD,SAASqC,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgBvG,cAAcuD,SAAS,CAAC+B,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAazG,cAAcuD,SAAS,CAACmD,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAM9F,0BAA0BmE;QAChC,MAAMA,WACHvB,UAAU,CAAC,YACXC,GAAG,CAACpC,OAAO8D,UACXU,GAAG,CAAC;YACHtB,QAAQI,UAAUJ,MAAM;YACxBG,OAAOC,UAAUD,KAAK;YACtBuB,kBAAkB1E;YAClB,wDAAwD;YACxDoF,SAAStF,QAAOwB,wBAAAA,iBAAiBa,GAAG,CAAC,sBAArBb,wBAAmC;YACnD+D,WAAWvF,QAAOwB,yBAAAA,iBAAiBa,GAAG,CAAC,wBAArBb,yBAAqC;YACvD2D,aAAapB;QACf;QAEF,OAAOrE,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE2F,WAAW9B,WAAW+B,EAAE;YAAE3B;QAAQ;IAClE,EAAE,OAAOhE,OAAO;QACd4F,QAAQ5F,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;IACxD;AACF,EAAC;AAED,eAAeN,4BAA2B"}
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-email-template.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { holdsStampedSiteKey } from '@aglyn/aglyn/app-utils/host-permissions'\nimport { MARKETPLACE_SITE_ROLE_PRESET, marketplaceSitePermissionRefusal } from '../model/marketplace-site-permissions'\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  checkEntitlement,\n  createResourceUid,\n  decodeStoredNodes,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { inlineReusableBlocks } from './publish-email-blocks'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  EMAIL_NODE_ROOT_ID,\n  getTenantEmail,\n  isTenantEmailEditable,\n  TENANT_EMAIL_COLLECTION,\n} from '@aglyn/shared-util-email'\nimport {\n  MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST,\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/**\n * Publishes a site's designed transactional email to the marketplace\n * (AGL-657).\n *\n * An email design is a node tree like any other artifact, but it does NOT live\n * in the host's screen routing map — which is exactly why `publish-template`\n * could never capture one (it only sees `hostSnapshot.get('screens')`). The\n * tree lives at `hosts/{h}/emailTemplates/{key}/versions/{versionId}`, so this\n * reads it directly.\n *\n * `templateKey` is a fixed catalog key ('booking-confirmed', …), not a free\n * id: a published email means \"a design FOR this transactional email\", so the\n * key travels with the listing and the installer lands on the same key.\n */\nexport const publishEmailTemplateHandler: PluginApiHandler = async (\n  req,\n  res,\n) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const templateKey = String(req.body?.templateKey ?? '')\n  const displayName = String(req.body?.displayName ?? '').slice(0, 80)\n  const description = String(req.body?.description ?? '').slice(0, 500)\n  const category = String(req.body?.category ?? '').slice(0, 40)\n  const priceUsd = Math.round(Number(req.body?.priceUsd ?? 0)) || 0\n  // The price floor and ceiling, from ONE validator (AGL-2343): a paid listing\n  // under `MARKETPLACE_MIN_PRICE_USD` loses money on every sale, because\n  // marketplace checkout is a destination charge whose Stripe fee is debited\n  // from the platform's balance. Also enforced in `publishPreconditionRefusal`\n  // below, so a door that drops this line is still covered.\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) {\n    return res.status(400).json({ error: priceRefusal })\n  }\n  if (!hostId || !templateKey || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, templateKey, or displayName' })\n  }\n  const entry = getTenantEmail(templateKey)\n  if (!entry || !isTenantEmailEditable(entry)) {\n    return res.status(400).json({ error: 'Not a designable email template' })\n  }\n\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // \"Publish a site’s items to the marketplace\" (AGL-4047): the site's stamp, else\n    // the preset of the member's site role, the Admin and Editor this asked for.\n    if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketplace.sitePublish', MARKETPLACE_SITE_ROLE_PRESET)) {\n      return res.status(403).json({ error: marketplaceSitePermissionRefusal('marketplace.sitePublish') })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    if (!checkEntitlement(orgForHost?.org ?? {}, 'marketplaceSelling')) {\n      return res\n        .status(403)\n        .json({ error: 'Publishing to the marketplace requires a Pro plan' })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    // Profile, payouts AND the publisher agreement, in one gate\n    // (AGL-2282) — see `publishPreconditionRefusal`.\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'templates',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const templateRef = hostRef\n      .collection(TENANT_EMAIL_COLLECTION)\n      .doc(templateKey)\n    const templateSnapshot = await templateRef.get()\n    const activeVersionId = templateSnapshot.get('versionId')\n    if (!templateSnapshot.exists || !activeVersionId) {\n      return res.status(404).json({\n        error: 'This email has no published design yet — design and save it first',\n      })\n    }\n    const versionSnapshot = await templateRef\n      .collection('versions')\n      .doc(String(activeVersionId))\n      .get()\n    // Decoded, like the screen and layout publish paths (AGL-1395): the email\n    // besigner now compresses through a converter as those do, and versions\n    // written before it did are still plain maps, which come back unchanged.\n    //\n    // `sanitizeMarketplaceDefinition` below would refuse an undecoded tree\n    // rather than publish garbage, so this is the difference between the\n    // feature working and a publish that always says the design is invalid.\n    const stored = decodeStoredNodes<Record<string, any>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!stored || !Object.keys(stored).length) {\n      return res.status(404).json({ error: 'This email design is empty' })\n    }\n    const rootId = versionSnapshot.get('rootId') ?? EMAIL_NODE_ROOT_ID\n    // The site's reusable blocks INLINED (AGL-3287): a listing is installed\n    // into another org, which has none of this site's components, and the\n    // sanitizer below refuses a component reference outright.\n    const inlined = await inlineReusableBlocks(stored, {\n      firestore,\n      hostId,\n      rootId,\n    })\n    if (inlined.ok === false) {\n      return res.status(422).json({ error: inlined.error })\n    }\n    const nodes = inlined.nodes\n    // Emails are built from `plugins-email` blocks only, so the page allowlist\n    // is REPLACED rather than extended — see MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST\n    // for why `emailHtml` is not on the list.\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId, nodes },\n      { componentIds: MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST },\n    )\n    if (sanitized.ok === false) {\n      return res.status(422).json({ error: sanitized.error })\n    }\n\n    // One listing per (source site, template key).\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceHostId', '==', hostId)\n      .where('emailTemplateKey', '==', templateKey)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        emailNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        profileId: publisher.orgId,\n        artifactType: 'emailTemplate',\n        sourceHostId: hostId,\n        emailTemplateKey: templateKey,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef\n      .collection('versions')\n      .doc(String(version))\n      .set({\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        emailTemplateKey: templateKey,\n        // The copy fields are part of the design, not the tree.\n        subject: String(templateSnapshot.get('subject') ?? ''),\n        preheader: String(templateSnapshot.get('preheader') ?? ''),\n        publishedAt: now,\n      })\n\n    return res.status(200).json({ listingId: listingRef.id, version })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Publish failed' })\n  }\n}\n\nexport default publishEmailTemplateHandler\n"],"names":["holdsStampedSiteKey","MARKETPLACE_SITE_ROLE_PRESET","marketplaceSitePermissionRefusal","displayNameSearchFields","checkEntitlement","createResourceUid","decodeStoredNodes","inlineReusableBlocks","firebaseAdmin","getOrgForHost","resolveOrgPermissions","EMAIL_NODE_ROOT_ID","getTenantEmail","isTenantEmailEditable","TENANT_EMAIL_COLLECTION","MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST","marketplacePriceRefusal","sanitizeMarketplaceDefinition","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","publishEmailTemplateHandler","req","res","method","status","json","error","hostId","String","body","templateKey","displayName","slice","description","category","priceUsd","Math","round","Number","priceRefusal","trim","entry","authorization","headers","idToken","startsWith","length","undefined","versionSnapshot","existing","orgForHost","templateSnapshot","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","hostSnapshot","get","exists","org","orgId","publisher","refusal","sells","templateRef","activeVersionId","stored","Object","keys","rootId","inlined","ok","nodes","sanitized","componentIds","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","emailNodes","official","set","profileId","artifactType","sourceHostId","emailTemplateKey","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","subject","preheader","listingId","id","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,0CAAyC;AAC7E,SAASC,4BAA4B,EAAEC,gCAAgC,QAAQ,2CAAuC;AACtH,SAASC,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,gBAAgB,EAChBC,iBAAiB,EACjBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,oBAAoB,QAAQ,4BAAwB;AAC7D,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,kBAAkB,EAClBC,cAAc,EACdC,qBAAqB,EACrBC,uBAAuB,QAClB,2BAA0B;AACjC,SACEC,wCAAwC,EACxCC,uBAAuB,EACvBC,6BAA6B,QACxB,oBAAU;AACjB,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,8BAAgD,OAC3DC,KACAC;iDA8B6BD;QAzBPA,WACKA,YACAA,YACAA,YACHA,YACWA;IARnC,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,cAAcF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,WAAW,oBAAI;IACpD,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI,IAAIC,KAAK,CAAC,GAAG;IACjE,MAAMC,cAAcL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,WAAW,oBAAI,IAAID,KAAK,CAAC,GAAG;IACjE,MAAME,WAAWN,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI,IAAIF,KAAK,CAAC,GAAG;IAC3D,MAAMG,WAAWC,KAAKC,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUc,QAAQ,oBAAI,OAAO;IAChE,6EAA6E;IAC7E,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAMI,eAAezB,wBAAwBqB;IAC7C,IAAII,cAAc;QAChB,OAAOjB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOa;QAAa;IACpD;IACA,IAAI,CAACZ,UAAU,CAACG,eAAe,CAACC,YAAYS,IAAI,IAAI;QAClD,OAAOlB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA8C;IACjE;IACA,MAAMe,QAAQ/B,eAAeoB;IAC7B,IAAI,CAACW,SAAS,CAAC9B,sBAAsB8B,QAAQ;QAC3C,OAAOnB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAkC;IACzE;IAEA,MAAMgB,gBAAgBd,QAAOP,6BAAAA,IAAIsB,OAAO,CAACD,aAAa,YAAzBrB,6BAA6B;IAC1D,MAAMuB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcV,KAAK,CAAC,UAAUc,MAAM,IACpCC;IACJ,IAAI,CAACH,SAAS,OAAOtB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;mBAmEasB,sBAqCJC,qBAaJC,iBAsCaC,uBACEA;QA3JtB,MAAMC,UAAU,MAAM9C,cAAc+C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACX;QAC/D,MAAMY,aAAa,MAAMhD,sBAAsB4C,QAAQK,GAAG,EAAE;YAAE9B;QAAO;QACrE,IAAI,CAAC6B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOrC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMkC,YAAYtD,cAAc+C,GAAG,GAAGO,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACpC;QAClD,MAAMqC,eAAe,MAAMH,QAAQI,GAAG;QACtC,IAAI,CAACD,aAAaE,MAAM,EAAE;YACxB,OAAO5C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,iFAAiF;QACjF,6EAA6E;QAC7E,IAAI,CAAC5B,oBAAoBkE,cAAcZ,QAAQK,GAAG,EAAE,2BAA2B1D,+BAA+B;YAC5G,OAAOuB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO1B,iCAAiC;YAA2B;QACnG;QAEA,MAAMkD,aAAa,MAAM3C,cAAcoB;QACvC,IAAI,CAACzB,0BAAiBgD,8BAAAA,WAAYiB,GAAG,oBAAI,CAAC,GAAG,uBAAuB;YAClE,OAAO7C,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEC,OAAO;YAAoD;QACvE;QACA,IAAI,EAACwB,8BAAAA,WAAYkB,KAAK,GAAE;YACtB,OAAO9C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QAEA,MAAM2C,YAAY,MAAMrD,wBAAwB4C,WAAWV,WAAWkB,KAAK;QAC3E,4DAA4D;QAC5D,iDAAiD;QACjD,MAAME,UAAUrD,2BAA2BoD,WAAW;YACpDlC;YACAoC,OAAO;QACT;QACA,IAAID,SAAS,OAAOhD,IAAIE,MAAM,CAAC8C,QAAQ9C,MAAM,EAAEC,IAAI,CAAC6C,QAAQzC,IAAI;QAEhE,MAAM2C,cAAcX,QACjBC,UAAU,CAAClD,yBACXmD,GAAG,CAACjC;QACP,MAAMqB,mBAAmB,MAAMqB,YAAYP,GAAG;QAC9C,MAAMQ,kBAAkBtB,iBAAiBc,GAAG,CAAC;QAC7C,IAAI,CAACd,iBAAiBe,MAAM,IAAI,CAACO,iBAAiB;YAChD,OAAOnD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,MAAMsB,kBAAkB,MAAMwB,YAC3BV,UAAU,CAAC,YACXC,GAAG,CAACnC,OAAO6C,kBACXR,GAAG;QACN,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,MAAMS,SAAStE,kBACb4C,gBAAgBiB,GAAG,CAAC;QAEtB,IAAI,CAACS,UAAU,CAACC,OAAOC,IAAI,CAACF,QAAQ5B,MAAM,EAAE;YAC1C,OAAOxB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QACA,MAAMmD,UAAS7B,uBAAAA,gBAAgBiB,GAAG,CAAC,qBAApBjB,uBAAiCvC;QAChD,wEAAwE;QACxE,sEAAsE;QACtE,0DAA0D;QAC1D,MAAMqE,UAAU,MAAMzE,qBAAqBqE,QAAQ;YACjDd;YACAjC;YACAkD;QACF;QACA,IAAIC,QAAQC,EAAE,KAAK,OAAO;YACxB,OAAOzD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOoD,QAAQpD,KAAK;YAAC;QACrD;QACA,MAAMsD,QAAQF,QAAQE,KAAK;QAC3B,2EAA2E;QAC3E,kFAAkF;QAClF,0CAA0C;QAC1C,MAAMC,YAAYlE,8BAChB;YAAE8D;YAAQG;QAAM,GAChB;YAAEE,cAAcrE;QAAyC;QAE3D,IAAIoE,UAAUF,EAAE,KAAK,OAAO;YAC1B,OAAOzD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOuD,UAAUvD,KAAK;YAAC;QACvD;QAEA,+CAA+C;QAC/C,MAAMuB,WAAW,MAAMW,UACpBE,UAAU,CAAC,uBACXqB,KAAK,CAAC,aAAa,MAAMd,UAAUD,KAAK,EACxCe,KAAK,CAAC,gBAAgB,MAAMxD,QAC5BwD,KAAK,CAAC,oBAAoB,MAAMrD,aAChCsD,KAAK,CAAC,GACNnB,GAAG;QACN,MAAMoB,aAAapC,SAASqC,KAAK,GAC7B1B,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAAC5D,uBAChD8C,SAASsC,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUxC,SAASqC,KAAK,GAC1B,IACAhD,QAAOW,sBAAAA,SAASsC,IAAI,CAAC,EAAE,CAACtB,GAAG,CAAC,4BAArBhB,sBAAyC,KAAK;QACzD,MAAMyC,MAAMpF,cAAcsD,SAAS,CAAC+B,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAM3E,yBAAyB;YAC9C4E,gBAAgBzB,UAAUD,KAAK;YAC/B2B,SAAS;gBACPhE;gBACAiE,eAAe3B,UAAUtC,WAAW;gBACpCE;gBACAgE,YAAYhB,UAAUD,KAAK;YAC7B;YACAkB,UAAU9C,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEjB,kBAAAA,WAAWiB,GAAG,YAAdjB,kBAAkB;QACzB;QACA,IAAI2C,UAAU,OAAOvE,IAAIE,MAAM,CAACqE,SAASrE,MAAM,EAAEC,IAAI,CAACoE,SAAShE,IAAI;QAEnE,MAAMwD,WAAWc,GAAG,CAClB;YACEC,WAAW/B,UAAUD,KAAK;YAC1BiC,cAAc;YACdC,cAAc3E;YACd4E,kBAAkBzE;YAClBC,aAAaA,YAAYS,IAAI;WAG1BvC,wBAAwB8B,YAAYS,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACAqE,eAAef;YACfgB,WAAW;WACPxD,SAASqC,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgBtG,cAAcsD,SAAS,CAAC+B,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAaxG,cAAcsD,SAAS,CAACmD,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAM7F,0BAA0BkE;QAChC,MAAMA,WACHvB,UAAU,CAAC,YACXC,GAAG,CAACnC,OAAO6D,UACXU,GAAG,CAAC;YACHtB,QAAQI,UAAUJ,MAAM;YACxBG,OAAOC,UAAUD,KAAK;YACtBuB,kBAAkBzE;YAClB,wDAAwD;YACxDmF,SAASrF,QAAOuB,wBAAAA,iBAAiBc,GAAG,CAAC,sBAArBd,wBAAmC;YACnD+D,WAAWtF,QAAOuB,yBAAAA,iBAAiBc,GAAG,CAAC,wBAArBd,yBAAqC;YACvD2D,aAAapB;QACf;QAEF,OAAOpE,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAE0F,WAAW9B,WAAW+B,EAAE;YAAE3B;QAAQ;IAClE,EAAE,OAAO/D,OAAO;QACd2F,QAAQ3F,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAiB;IACxD;AACF,EAAC;AAED,eAAeN,4BAA2B"}

package/src/lib/server/publish-layout.js

@@ -14,7 +14,9 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { displayNameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
+ */ import { holdsStampedSiteKey } from "@aglyn/aglyn/app-utils/host-permissions";
+import { MARKETPLACE_SITE_ROLE_PRESET, marketplaceSitePermissionRefusal } from "../model/marketplace-site-permissions.js";
+import { displayNameSearchFields } from "@aglyn/aglyn/app-utils/name-search";
 import { CANVAS_ROOT_ELEMENT_ID, checkEntitlement, createResourceUid, decodeStoredNodes } from "@aglyn/aglyn/server";
 import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
 import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
@@ -73,7 +75,7 @@ import { refreshListingQueryFields } from "./listing-query-fields.js";
         error: 'Unauthenticated'
     });
     try {
-        var _hostSnapshot_get, _ref6, _existing_docs__get, _orgForHost_org;
+        var _ref6, _existing_docs__get, _orgForHost_org;
         const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
         const membership = await resolveOrgPermissions(decoded.uid, {
             hostId
@@ -91,10 +93,11 @@ import { refreshListingQueryFields } from "./listing-query-fields.js";
                 error: 'Unknown site'
             });
         }
-        const memberRole = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
-        if (memberRole !== 'admin' && memberRole !== 'editor') {
+        // "Publish a site’s items to the marketplace" (AGL-4047): the site's stamp, else
+        // the preset of the member's site role, the Admin and Editor this asked for.
+        if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketplace.sitePublish', MARKETPLACE_SITE_ROLE_PRESET)) {
             return res.status(403).json({
-                error: 'Not a site admin or editor'
+                error: marketplaceSitePermissionRefusal('marketplace.sitePublish')
             });
         }
         const orgForHost = await getOrgForHost(hostId);

package/src/lib/server/publish-layout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-layout.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  CANVAS_ROOT_ELEMENT_ID,\n  checkEntitlement,\n  createResourceUid,\n  decodeStoredNodes,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model/marketplace'\nimport { sanitizeMarketplaceProps } from '../model/marketplace-props'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/** The node marking where a bound screen's content grafts in. */\nconst LAYOUT_SLOT_COMPONENT_ID = 'layoutSlot'\n\n/**\n * Publishes a shared layout to the marketplace (AGL-671).\n *\n * Layouts were the one design asset that could not be shared at all:\n * `publish-template` captures screens and theme only, and `layoutSlot` is\n * excluded from the marketplace allowlist as \"layout chrome\". Both are\n * addressed here — the slot is permitted for this artifact type\n * specifically, since a layout without one is chrome with nowhere to put\n * the page.\n *\n * Gates mirror template publishing exactly: org permission, host role,\n * `marketplaceSelling`, an org publisher profile, and payouts configured\n * before anything can be sold.\n */\nexport const publishLayoutHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const layoutId = String(req.body?.layoutId ?? '')\n  const displayName = String(req.body?.displayName ?? '')\n  const description = String(req.body?.description ?? '')\n  const category = String(req.body?.category ?? '')\n  const priceUsd = Math.max(0, Math.round(Number(req.body?.priceUsd ?? 0)))\n  if (!hostId || !layoutId || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, layoutId or displayName' })\n  }\n  // The price floor and ceiling, from ONE validator (AGL-2343). This door had\n  // NO price validation at all: it clamped to zero and stored whatever came in,\n  // so both a $1 listing that loses money on every sale and a $250,000 one were\n  // publishable here. Also enforced in `publishPreconditionRefusal` below.\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) {\n    return res.status(400).json({ error: priceRefusal })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    const memberRole = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    if (memberRole !== 'admin' && memberRole !== 'editor') {\n      return res.status(403).json({ error: 'Not a site admin or editor' })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    const org = orgForHost?.org ?? {}\n    if (!checkEntitlement(org as any, 'marketplaceSelling')) {\n      return res.status(403).json({\n        error: 'Publishing to the marketplace requires a Pro plan',\n      })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    // Profile, payouts AND the publisher agreement, in one gate\n    // (AGL-2282) — see `publishPreconditionRefusal`.\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'layouts',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const layoutRef = hostRef.collection('layouts').doc(layoutId)\n    const layoutSnapshot = await layoutRef.get()\n    if (!layoutSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown layout' })\n    }\n    const versionId = layoutSnapshot.get('versionId')\n    if (!versionId) {\n      return res.status(422).json({\n        error: 'Publish this layout on your site first — there is no ' +\n          'published version to share',\n      })\n    }\n    const versionSnapshot = await layoutRef\n      .collection('versions')\n      .doc(String(versionId))\n      .get()\n    // `nodes` is stored in more than one form and the besigner writes the\n    // COMPRESSED one, which the Admin SDK materialises as a Node `Buffer`\n    // (AGL-1395). Read raw, this was worse than the template path: the length\n    // check passed on the BYTE COUNT, and the root search below walked byte\n    // INDICES — byte 0 is a number, a number has no `parentId`, so `rootId`\n    // resolved to `'0'` and the sanitizer built a wrapper around nothing.\n    // Every besigner-edited layout was refused as empty or slotless.\n    const nodes = decodeStoredNodes<Record<string, any>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!nodes || !Object.keys(nodes).length) {\n      return res.status(422).json({ error: 'Layout version has no content' })\n    }\n\n    // The layout properties its tree binds to (AGL-2933), from the same\n    // version. A default the sanitizer refuses is cleared and its property\n    // kept — see `sanitizeMarketplaceProps`.\n    const props = sanitizeMarketplaceProps(versionSnapshot.get('props'))\n    if (props.ok === false) {\n      return res.status(422).json({ error: props.error })\n    }\n\n    // Layout versions have no explicit rootId. The besigner canvas roots them\n    // at the same wrapper screens use, so prefer it outright; the parentless\n    // search stays as the fallback for anything authored before that, and\n    // matches how the renderer walks them. Preferring the wrapper also means a\n    // top-level node that relies on child arrays alone — legal, see\n    // `compose-layout-nodes` — can no longer win the search over the real root.\n    const rootId: string =\n      (nodes[CANVAS_ROOT_ELEMENT_ID] && CANVAS_ROOT_ELEMENT_ID) ||\n      Object.keys(nodes).find((id) => !nodes[id]?.parentId) ||\n      Object.keys(nodes)[0] ||\n      ''\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId, nodes },\n      {\n        extraComponentIds: [LAYOUT_SLOT_COMPONENT_ID],\n        // A link or image bound whole to a Link or Image property travels\n        // bound (AGL-2933).\n        declaredProps: props.props,\n      },\n    )\n    // `=== false` rather than `!sanitized.ok`: the compiler does not narrow\n    // the union on the negated form here, and publish-template hit the same\n    // thing first.\n    if (sanitized.ok === false) {\n      return res.status(400).json({ error: sanitized.error })\n    }\n    // A layout whose slot did not survive would render as chrome with the\n    // page content missing — better to refuse than to publish that.\n    const hasSlot = Object.values(sanitized.nodes).some(\n      (node: any) => node.componentId === LAYOUT_SLOT_COMPONENT_ID,\n    )\n    if (!hasSlot) {\n      return res.status(422).json({\n        error:\n          'This layout has no content slot, so pages using it would have ' +\n          'nowhere to render',\n      })\n    }\n\n    // One listing per source layout; re-publish bumps the version.\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceLayoutId', '==', layoutId)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        pageNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        artifactType: 'layout',\n        profileId: publisher.orgId,\n        sourceHostId: hostId,\n        sourceLayoutId: layoutId,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef.collection('versions').doc(String(version)).set({\n      // `props` is always a list, even an empty one: install and update read a\n      // version with none as one published before properties were carried.\n      layout: {\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        props: props.props,\n      },\n      publishedAt: now,\n    })\n\n    return res.status(200).json({ listingId: listingRef.id, version })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Layout publish failed' })\n  }\n}\n\nexport default publishLayoutHandler\n"],"names":["displayNameSearchFields","CANVAS_ROOT_ELEMENT_ID","checkEntitlement","createResourceUid","decodeStoredNodes","firebaseAdmin","getOrgForHost","resolveOrgPermissions","marketplacePriceRefusal","sanitizeMarketplaceDefinition","sanitizeMarketplaceProps","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","LAYOUT_SLOT_COMPONENT_ID","publishLayoutHandler","req","res","method","status","json","error","hostId","String","body","layoutId","displayName","description","category","priceUsd","Math","max","round","Number","trim","priceRefusal","authorization","headers","idToken","startsWith","slice","length","undefined","hostSnapshot","existing","orgForHost","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","get","exists","memberRole","org","orgId","publisher","refusal","sells","layoutRef","layoutSnapshot","versionId","versionSnapshot","nodes","Object","keys","props","ok","rootId","find","id","parentId","sanitized","extraComponentIds","declaredProps","hasSlot","values","some","node","componentId","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","pageNodes","official","set","artifactType","profileId","sourceHostId","sourceLayoutId","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","layout","listingId","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,iBAAiB,EACjBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,0BAAsB;AAC7B,SAASC,wBAAwB,QAAQ,gCAA4B;AACrE,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE,+DAA+D,GAC/D,MAAMC,2BAA2B;AAEjC;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,uBAAyC,OAAOC,KAAKC;iDAuBnCD;QAnBPA,WACEA,YACGA,YACAA,YACHA,YACuBA;IAR/C,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,WAAWF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,QAAQ,oBAAI;IAC9C,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI;IACpD,MAAMC,cAAcJ,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUW,WAAW,oBAAI;IACpD,MAAMC,WAAWL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,QAAQ,oBAAI;IAC9C,MAAMC,WAAWC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI;IACrE,IAAI,CAACP,UAAU,CAACG,YAAY,CAACC,YAAYQ,IAAI,IAAI;QAC/C,OAAOjB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA0C;IAC7D;IACA,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAMc,eAAe5B,wBAAwBsB;IAC7C,IAAIM,cAAc;QAChB,OAAOlB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOc;QAAa;IACpD;IACA,MAAMC,gBAAgBb,QAAOP,6BAAAA,IAAIqB,OAAO,CAACD,aAAa,YAAzBpB,6BAA6B;IAC1D,MAAMsB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOrB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;YAgBkBsB,0BAkHTC,qBAaJC;QA9IP,MAAMC,UAAU,MAAM1C,cAAc2C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACX;QAC/D,MAAMY,aAAa,MAAM5C,sBAAsBwC,QAAQK,GAAG,EAAE;YAAE7B;QAAO;QACrE,IAAI,CAAC4B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOpC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMiC,YAAYlD,cAAc2C,GAAG,GAAGO,SAAS;QAE/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACnC;QAClD,MAAMqB,eAAe,MAAMY,QAAQG,GAAG;QACtC,IAAI,CAACf,aAAagB,MAAM,EAAE;YACxB,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,MAAMuC,aAAa,EAACjB,oBAAAA,aAAae,GAAG,CAAC,0BAAjBf,oBAAmC,CAAC,EAAE,CAACG,QAAQK,GAAG,CAAC;QACvE,IAAIS,eAAe,WAAWA,eAAe,UAAU;YACrD,OAAO3C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAA6B;QACpE;QAEA,MAAMwB,aAAa,MAAMxC,cAAciB;QACvC,MAAMuC,eAAMhB,8BAAAA,WAAYgB,GAAG,oBAAI,CAAC;QAChC,IAAI,CAAC5D,iBAAiB4D,KAAY,uBAAuB;YACvD,OAAO5C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,IAAI,EAACwB,8BAAAA,WAAYiB,KAAK,GAAE;YACtB,OAAO7C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QAEA,MAAM0C,YAAY,MAAMrD,wBAAwB4C,WAAWT,WAAWiB,KAAK;QAC3E,4DAA4D;QAC5D,iDAAiD;QACjD,MAAME,UAAUrD,2BAA2BoD,WAAW;YACpDlC;YACAoC,OAAO;QACT;QACA,IAAID,SAAS,OAAO/C,IAAIE,MAAM,CAAC6C,QAAQ7C,MAAM,EAAEC,IAAI,CAAC4C,QAAQxC,IAAI;QAEhE,MAAM0C,YAAYX,QAAQC,UAAU,CAAC,WAAWC,GAAG,CAAChC;QACpD,MAAM0C,iBAAiB,MAAMD,UAAUR,GAAG;QAC1C,IAAI,CAACS,eAAeR,MAAM,EAAE;YAC1B,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;QACxD;QACA,MAAM+C,YAAYD,eAAeT,GAAG,CAAC;QACrC,IAAI,CAACU,WAAW;YACd,OAAOnD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO,0DACL;YACJ;QACF;QACA,MAAMgD,kBAAkB,MAAMH,UAC3BV,UAAU,CAAC,YACXC,GAAG,CAAClC,OAAO6C,YACXV,GAAG;QACN,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,MAAMY,QAAQnE,kBACZkE,gBAAgBX,GAAG,CAAC;QAEtB,IAAI,CAACY,SAAS,CAACC,OAAOC,IAAI,CAACF,OAAO7B,MAAM,EAAE;YACxC,OAAOxB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgC;QACvE;QAEA,oEAAoE;QACpE,uEAAuE;QACvE,yCAAyC;QACzC,MAAMoD,QAAQhE,yBAAyB4D,gBAAgBX,GAAG,CAAC;QAC3D,IAAIe,MAAMC,EAAE,KAAK,OAAO;YACtB,OAAOzD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOoD,MAAMpD,KAAK;YAAC;QACnD;QAEA,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,gEAAgE;QAChE,4EAA4E;QAC5E,MAAMsD,SACJ,AAACL,KAAK,CAACtE,uBAAuB,IAAIA,0BAClCuE,OAAOC,IAAI,CAACF,OAAOM,IAAI,CAAC,CAACC;gBAAQP;mBAAD,GAACA,YAAAA,KAAK,CAACO,GAAG,qBAATP,UAAWQ,QAAQ;cACpDP,OAAOC,IAAI,CAACF,MAAM,CAAC,EAAE,IACrB;QACF,MAAMS,YAAYvE,8BAChB;YAAEmE;YAAQL;QAAM,GAChB;YACEU,mBAAmB;gBAAClE;aAAyB;YAC7C,kEAAkE;YAClE,oBAAoB;YACpBmE,eAAeR,MAAMA,KAAK;QAC5B;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,eAAe;QACf,IAAIM,UAAUL,EAAE,KAAK,OAAO;YAC1B,OAAOzD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO0D,UAAU1D,KAAK;YAAC;QACvD;QACA,sEAAsE;QACtE,gEAAgE;QAChE,MAAM6D,UAAUX,OAAOY,MAAM,CAACJ,UAAUT,KAAK,EAAEc,IAAI,CACjD,CAACC,OAAcA,KAAKC,WAAW,KAAKxE;QAEtC,IAAI,CAACoE,SAAS;YACZ,OAAOjE,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE,mEACA;YACJ;QACF;QAEA,+DAA+D;QAC/D,MAAMuB,WAAW,MAAMU,UACpBE,UAAU,CAAC,uBACX+B,KAAK,CAAC,aAAa,MAAMxB,UAAUD,KAAK,EACxCyB,KAAK,CAAC,kBAAkB,MAAM9D,UAC9B+D,KAAK,CAAC,GACN9B,GAAG;QACN,MAAM+B,aAAa7C,SAAS8C,KAAK,GAC7BpC,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAACvD,uBAChD0C,SAAS+C,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUjD,SAAS8C,KAAK,GAC1B,IACAzD,QAAOW,sBAAAA,SAAS+C,IAAI,CAAC,EAAE,CAACjC,GAAG,CAAC,4BAArBd,sBAAyC,KAAK;QACzD,MAAMkD,MAAM1F,cAAckD,SAAS,CAACyC,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAMrF,yBAAyB;YAC9CsF,gBAAgBnC,UAAUD,KAAK;YAC/BqC,SAAS;gBACPzE;gBACA0E,eAAerC,UAAUrC,WAAW;gBACpCC;gBACA0E,WAAWtB,UAAUT,KAAK;YAC5B;YACAgC,UAAUxD,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEhB,kBAAAA,WAAWgB,GAAG,YAAdhB,kBAAkB;QACzB;QACA,IAAIoD,UAAU,OAAOhF,IAAIE,MAAM,CAAC8E,SAAS9E,MAAM,EAAEC,IAAI,CAAC6E,SAASzE,IAAI;QAEnE,MAAMiE,WAAWc,GAAG,CAClB;YACEC,cAAc;YACdC,WAAW1C,UAAUD,KAAK;YAC1B4C,cAAcpF;YACdqF,gBAAgBlF;YAChBC,aAAaA,YAAYQ,IAAI;WAG1BnC,wBAAwB2B,YAAYQ,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACA+E,eAAef;YACfgB,WAAW;WACPjE,SAAS8C,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgB5G,cAAckD,SAAS,CAACyC,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAa9G,cAAckD,SAAS,CAAC6D,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAMvG,0BAA0B4E;QAChC,MAAMA,WAAWjC,UAAU,CAAC,YAAYC,GAAG,CAAClC,OAAOsE,UAAUU,GAAG,CAAC;YAC/D,yEAAyE;YACzE,qEAAqE;YACrEc,QAAQ;gBACN1C,QAAQI,UAAUJ,MAAM;gBACxBL,OAAOS,UAAUT,KAAK;gBACtBG,OAAOA,MAAMA,KAAK;YACpB;YACAyC,aAAapB;QACf;QAEA,OAAO7E,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEkG,WAAW7B,WAAWZ,EAAE;YAAEgB;QAAQ;IAClE,EAAE,OAAOxE,OAAO;QACdkG,QAAQlG,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAwB;IAC/D;AACF,EAAC;AAED,eAAeN,qBAAoB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/server/publish-layout.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { holdsStampedSiteKey } from '@aglyn/aglyn/app-utils/host-permissions'\nimport { MARKETPLACE_SITE_ROLE_PRESET, marketplaceSitePermissionRefusal } from '../model/marketplace-site-permissions'\nimport { displayNameSearchFields } from '@aglyn/aglyn/app-utils/name-search'\nimport {\n  CANVAS_ROOT_ELEMENT_ID,\n  checkEntitlement,\n  createResourceUid,\n  decodeStoredNodes,\n} from '@aglyn/aglyn/server'\nimport { type PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport { resolveOrgPermissions } from '@aglyn/tenant-runtime/org-permissions'\nimport {\n  marketplacePriceRefusal,\n  sanitizeMarketplaceDefinition,\n} from '../model/marketplace'\nimport { sanitizeMarketplaceProps } from '../model/marketplace-props'\nimport { resolvePublisherProfile } from './publisher-profile'\nimport { publishPreconditionRefusal } from './publish-preconditions'\nimport { listingSubmissionRefusal } from './listing-screen'\nimport { refreshListingQueryFields } from './listing-query-fields'\n\n/** The node marking where a bound screen's content grafts in. */\nconst LAYOUT_SLOT_COMPONENT_ID = 'layoutSlot'\n\n/**\n * Publishes a shared layout to the marketplace (AGL-671).\n *\n * Layouts were the one design asset that could not be shared at all:\n * `publish-template` captures screens and theme only, and `layoutSlot` is\n * excluded from the marketplace allowlist as \"layout chrome\". Both are\n * addressed here — the slot is permitted for this artifact type\n * specifically, since a layout without one is chrome with nowhere to put\n * the page.\n *\n * Gates mirror template publishing exactly: org permission, host role,\n * `marketplaceSelling`, an org publisher profile, and payouts configured\n * before anything can be sold.\n */\nexport const publishLayoutHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  const hostId = String(req.body?.hostId ?? '')\n  const layoutId = String(req.body?.layoutId ?? '')\n  const displayName = String(req.body?.displayName ?? '')\n  const description = String(req.body?.description ?? '')\n  const category = String(req.body?.category ?? '')\n  const priceUsd = Math.max(0, Math.round(Number(req.body?.priceUsd ?? 0)))\n  if (!hostId || !layoutId || !displayName.trim()) {\n    return res\n      .status(400)\n      .json({ error: 'Missing hostId, layoutId or displayName' })\n  }\n  // The price floor and ceiling, from ONE validator (AGL-2343). This door had\n  // NO price validation at all: it clamped to zero and stored whatever came in,\n  // so both a $1 listing that loses money on every sale and a $250,000 one were\n  // publishable here. Also enforced in `publishPreconditionRefusal` below.\n  const priceRefusal = marketplacePriceRefusal(priceUsd)\n  if (priceRefusal) {\n    return res.status(400).json({ error: priceRefusal })\n  }\n  const authorization = String(req.headers.authorization ?? '')\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    const membership = await resolveOrgPermissions(decoded.uid, { hostId })\n    if (!membership.permissions.publishToMarketplace) {\n      return res.status(403).json({\n        error:\n          'Your organization role does not allow publishing to the marketplace',\n      })\n    }\n    const firestore = firebaseAdmin.app().firestore()\n\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown site' })\n    }\n    // \"Publish a site’s items to the marketplace\" (AGL-4047): the site's stamp, else\n    // the preset of the member's site role, the Admin and Editor this asked for.\n    if (!holdsStampedSiteKey(hostSnapshot, decoded.uid, 'marketplace.sitePublish', MARKETPLACE_SITE_ROLE_PRESET)) {\n      return res.status(403).json({ error: marketplaceSitePermissionRefusal('marketplace.sitePublish') })\n    }\n\n    const orgForHost = await getOrgForHost(hostId)\n    const org = orgForHost?.org ?? {}\n    if (!checkEntitlement(org as any, 'marketplaceSelling')) {\n      return res.status(403).json({\n        error: 'Publishing to the marketplace requires a Pro plan',\n      })\n    }\n    if (!orgForHost?.orgId) {\n      return res.status(409).json({ error: 'Site has no owning organization' })\n    }\n\n    const publisher = await resolvePublisherProfile(firestore, orgForHost.orgId)\n    // Profile, payouts AND the publisher agreement, in one gate\n    // (AGL-2282) — see `publishPreconditionRefusal`.\n    const refusal = publishPreconditionRefusal(publisher, {\n      priceUsd,\n      sells: 'layouts',\n    })\n    if (refusal) return res.status(refusal.status).json(refusal.body)\n\n    const layoutRef = hostRef.collection('layouts').doc(layoutId)\n    const layoutSnapshot = await layoutRef.get()\n    if (!layoutSnapshot.exists) {\n      return res.status(404).json({ error: 'Unknown layout' })\n    }\n    const versionId = layoutSnapshot.get('versionId')\n    if (!versionId) {\n      return res.status(422).json({\n        error: 'Publish this layout on your site first — there is no ' +\n          'published version to share',\n      })\n    }\n    const versionSnapshot = await layoutRef\n      .collection('versions')\n      .doc(String(versionId))\n      .get()\n    // `nodes` is stored in more than one form and the besigner writes the\n    // COMPRESSED one, which the Admin SDK materialises as a Node `Buffer`\n    // (AGL-1395). Read raw, this was worse than the template path: the length\n    // check passed on the BYTE COUNT, and the root search below walked byte\n    // INDICES — byte 0 is a number, a number has no `parentId`, so `rootId`\n    // resolved to `'0'` and the sanitizer built a wrapper around nothing.\n    // Every besigner-edited layout was refused as empty or slotless.\n    const nodes = decodeStoredNodes<Record<string, any>>(\n      versionSnapshot.get('nodes'),\n    )\n    if (!nodes || !Object.keys(nodes).length) {\n      return res.status(422).json({ error: 'Layout version has no content' })\n    }\n\n    // The layout properties its tree binds to (AGL-2933), from the same\n    // version. A default the sanitizer refuses is cleared and its property\n    // kept — see `sanitizeMarketplaceProps`.\n    const props = sanitizeMarketplaceProps(versionSnapshot.get('props'))\n    if (props.ok === false) {\n      return res.status(422).json({ error: props.error })\n    }\n\n    // Layout versions have no explicit rootId. The besigner canvas roots them\n    // at the same wrapper screens use, so prefer it outright; the parentless\n    // search stays as the fallback for anything authored before that, and\n    // matches how the renderer walks them. Preferring the wrapper also means a\n    // top-level node that relies on child arrays alone — legal, see\n    // `compose-layout-nodes` — can no longer win the search over the real root.\n    const rootId: string =\n      (nodes[CANVAS_ROOT_ELEMENT_ID] && CANVAS_ROOT_ELEMENT_ID) ||\n      Object.keys(nodes).find((id) => !nodes[id]?.parentId) ||\n      Object.keys(nodes)[0] ||\n      ''\n    const sanitized = sanitizeMarketplaceDefinition(\n      { rootId, nodes },\n      {\n        extraComponentIds: [LAYOUT_SLOT_COMPONENT_ID],\n        // A link or image bound whole to a Link or Image property travels\n        // bound (AGL-2933).\n        declaredProps: props.props,\n      },\n    )\n    // `=== false` rather than `!sanitized.ok`: the compiler does not narrow\n    // the union on the negated form here, and publish-template hit the same\n    // thing first.\n    if (sanitized.ok === false) {\n      return res.status(400).json({ error: sanitized.error })\n    }\n    // A layout whose slot did not survive would render as chrome with the\n    // page content missing — better to refuse than to publish that.\n    const hasSlot = Object.values(sanitized.nodes).some(\n      (node: any) => node.componentId === LAYOUT_SLOT_COMPONENT_ID,\n    )\n    if (!hasSlot) {\n      return res.status(422).json({\n        error:\n          'This layout has no content slot, so pages using it would have ' +\n          'nowhere to render',\n      })\n    }\n\n    // One listing per source layout; re-publish bumps the version.\n    const existing = await firestore\n      .collection('marketplaceListings')\n      .where('profileId', '==', publisher.orgId)\n      .where('sourceLayoutId', '==', layoutId)\n      .limit(1)\n      .get()\n    const listingRef = existing.empty\n      ? firestore.collection('marketplaceListings').doc(createResourceUid())\n      : existing.docs[0].ref\n    const version = existing.empty\n      ? 1\n      : Number(existing.docs[0].get('latestVersion') ?? 0) + 1\n    const now = firebaseAdmin.firestore.FieldValue.serverTimestamp()\n\n    // The phishing screen, before anything is listed (AGL-3365).\n    const screened = await listingSubmissionRefusal({\n      publisherOrgId: publisher.orgId,\n      content: {\n        displayName,\n        publisherName: publisher.displayName,\n        description,\n        pageNodes: sanitized.nodes,\n      },\n      official: decoded['staff'] === true,\n      org: orgForHost.org ?? null,\n    })\n    if (screened) return res.status(screened.status).json(screened.body)\n\n    await listingRef.set(\n      {\n        artifactType: 'layout',\n        profileId: publisher.orgId,\n        sourceHostId: hostId,\n        sourceLayoutId: layoutId,\n        displayName: displayName.trim(),\n        // The keys a listing is searched by (AGL-3321): the template gallery's\n        // marketplace shelf asks `nameTokens` on its query.\n        ...displayNameSearchFields(displayName.trim()),\n        ...(description.trim() && { description: description.trim() }),\n        ...(category.trim() && { category: category.trim() }),\n        priceUsd,\n        latestVersion: version,\n        deletedAt: null,\n        ...(existing.empty && { createdAt: now }),\n        updatedAt: now,\n        versionHistory: firebaseAdmin.firestore.FieldValue.arrayUnion({\n          version,\n          publishedAt: firebaseAdmin.firestore.Timestamp.now(),\n        }),\n      },\n      { merge: true },\n    )\n    // The lists this listing appears in query by fields derived from it (AGL-3321).\n    await refreshListingQueryFields(listingRef)\n    await listingRef.collection('versions').doc(String(version)).set({\n      // `props` is always a list, even an empty one: install and update read a\n      // version with none as one published before properties were carried.\n      layout: {\n        rootId: sanitized.rootId,\n        nodes: sanitized.nodes,\n        props: props.props,\n      },\n      publishedAt: now,\n    })\n\n    return res.status(200).json({ listingId: listingRef.id, version })\n  } catch (error) {\n    console.error(error)\n    return res.status(500).json({ error: 'Layout publish failed' })\n  }\n}\n\nexport default publishLayoutHandler\n"],"names":["holdsStampedSiteKey","MARKETPLACE_SITE_ROLE_PRESET","marketplaceSitePermissionRefusal","displayNameSearchFields","CANVAS_ROOT_ELEMENT_ID","checkEntitlement","createResourceUid","decodeStoredNodes","firebaseAdmin","getOrgForHost","resolveOrgPermissions","marketplacePriceRefusal","sanitizeMarketplaceDefinition","sanitizeMarketplaceProps","resolvePublisherProfile","publishPreconditionRefusal","listingSubmissionRefusal","refreshListingQueryFields","LAYOUT_SLOT_COMPONENT_ID","publishLayoutHandler","req","res","method","status","json","error","hostId","String","body","layoutId","displayName","description","category","priceUsd","Math","max","round","Number","trim","priceRefusal","authorization","headers","idToken","startsWith","slice","length","undefined","existing","orgForHost","decoded","app","auth","verifyIdToken","membership","uid","permissions","publishToMarketplace","firestore","hostRef","collection","doc","hostSnapshot","get","exists","org","orgId","publisher","refusal","sells","layoutRef","layoutSnapshot","versionId","versionSnapshot","nodes","Object","keys","props","ok","rootId","find","id","parentId","sanitized","extraComponentIds","declaredProps","hasSlot","values","some","node","componentId","where","limit","listingRef","empty","docs","ref","version","now","FieldValue","serverTimestamp","screened","publisherOrgId","content","publisherName","pageNodes","official","set","artifactType","profileId","sourceHostId","sourceLayoutId","latestVersion","deletedAt","createdAt","updatedAt","versionHistory","arrayUnion","publishedAt","Timestamp","merge","layout","listingId","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,0CAAyC;AAC7E,SAASC,4BAA4B,EAAEC,gCAAgC,QAAQ,2CAAuC;AACtH,SAASC,uBAAuB,QAAQ,qCAAoC;AAC5E,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,iBAAiB,EACjBC,iBAAiB,QACZ,sBAAqB;AAE5B,SAASC,aAAa,EAAEC,aAAa,QAAQ,2BAA0B;AACvE,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,0BAAsB;AAC7B,SAASC,wBAAwB,QAAQ,gCAA4B;AACrE,SAASC,uBAAuB,QAAQ,yBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,wBAAwB,QAAQ,sBAAkB;AAC3D,SAASC,yBAAyB,QAAQ,4BAAwB;AAElE,+DAA+D,GAC/D,MAAMC,2BAA2B;AAEjC;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,uBAAyC,OAAOC,KAAKC;iDAuBnCD;QAnBPA,WACEA,YACGA,YACAA,YACHA,YACuBA;IAR/C,IAAIA,IAAIE,MAAM,KAAK,QAAQ;QACzB,OAAOD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACA,MAAMC,SAASC,gBAAOP,YAAAA,IAAIQ,IAAI,qBAARR,UAAUM,MAAM,mBAAI;IAC1C,MAAMG,WAAWF,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUS,QAAQ,oBAAI;IAC9C,MAAMC,cAAcH,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUU,WAAW,oBAAI;IACpD,MAAMC,cAAcJ,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUW,WAAW,oBAAI;IACpD,MAAMC,WAAWL,iBAAOP,aAAAA,IAAIQ,IAAI,qBAARR,WAAUY,QAAQ,oBAAI;IAC9C,MAAMC,WAAWC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACC,iBAAOjB,aAAAA,IAAIQ,IAAI,qBAARR,WAAUa,QAAQ,oBAAI;IACrE,IAAI,CAACP,UAAU,CAACG,YAAY,CAACC,YAAYQ,IAAI,IAAI;QAC/C,OAAOjB,IACJE,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEC,OAAO;QAA0C;IAC7D;IACA,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAMc,eAAe5B,wBAAwBsB;IAC7C,IAAIM,cAAc;QAChB,OAAOlB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAOc;QAAa;IACpD;IACA,MAAMC,gBAAgBb,QAAOP,6BAAAA,IAAIqB,OAAO,CAACD,aAAa,YAAzBpB,6BAA6B;IAC1D,MAAMsB,UAAUF,cAAcG,UAAU,CAAC,aACrCH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOrB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAAkB;IAErE,IAAI;mBAmISsB,qBAaJC;QA/IP,MAAMC,UAAU,MAAMzC,cAAc0C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACV;QAC/D,MAAMW,aAAa,MAAM3C,sBAAsBuC,QAAQK,GAAG,EAAE;YAAE5B;QAAO;QACrE,IAAI,CAAC2B,WAAWE,WAAW,CAACC,oBAAoB,EAAE;YAChD,OAAOnC,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE;YACJ;QACF;QACA,MAAMgC,YAAYjD,cAAc0C,GAAG,GAAGO,SAAS;QAE/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAAClC;QAClD,MAAMmC,eAAe,MAAMH,QAAQI,GAAG;QACtC,IAAI,CAACD,aAAaE,MAAM,EAAE;YACxB,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAe;QACtD;QACA,iFAAiF;QACjF,6EAA6E;QAC7E,IAAI,CAACzB,oBAAoB6D,cAAcZ,QAAQK,GAAG,EAAE,2BAA2BrD,+BAA+B;YAC5G,OAAOoB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOvB,iCAAiC;YAA2B;QACnG;QAEA,MAAM8C,aAAa,MAAMvC,cAAciB;QACvC,MAAMsC,eAAMhB,8BAAAA,WAAYgB,GAAG,oBAAI,CAAC;QAChC,IAAI,CAAC3D,iBAAiB2D,KAAY,uBAAuB;YACvD,OAAO3C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO;YACT;QACF;QACA,IAAI,EAACuB,8BAAAA,WAAYiB,KAAK,GAAE;YACtB,OAAO5C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAkC;QACzE;QAEA,MAAMyC,YAAY,MAAMpD,wBAAwB2C,WAAWT,WAAWiB,KAAK;QAC3E,4DAA4D;QAC5D,iDAAiD;QACjD,MAAME,UAAUpD,2BAA2BmD,WAAW;YACpDjC;YACAmC,OAAO;QACT;QACA,IAAID,SAAS,OAAO9C,IAAIE,MAAM,CAAC4C,QAAQ5C,MAAM,EAAEC,IAAI,CAAC2C,QAAQvC,IAAI;QAEhE,MAAMyC,YAAYX,QAAQC,UAAU,CAAC,WAAWC,GAAG,CAAC/B;QACpD,MAAMyC,iBAAiB,MAAMD,UAAUP,GAAG;QAC1C,IAAI,CAACQ,eAAeP,MAAM,EAAE;YAC1B,OAAO1C,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;QACxD;QACA,MAAM8C,YAAYD,eAAeR,GAAG,CAAC;QACrC,IAAI,CAACS,WAAW;YACd,OAAOlD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OAAO,0DACL;YACJ;QACF;QACA,MAAM+C,kBAAkB,MAAMH,UAC3BV,UAAU,CAAC,YACXC,GAAG,CAACjC,OAAO4C,YACXT,GAAG;QACN,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,MAAMW,QAAQlE,kBACZiE,gBAAgBV,GAAG,CAAC;QAEtB,IAAI,CAACW,SAAS,CAACC,OAAOC,IAAI,CAACF,OAAO5B,MAAM,EAAE;YACxC,OAAOxB,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAgC;QACvE;QAEA,oEAAoE;QACpE,uEAAuE;QACvE,yCAAyC;QACzC,MAAMmD,QAAQ/D,yBAAyB2D,gBAAgBV,GAAG,CAAC;QAC3D,IAAIc,MAAMC,EAAE,KAAK,OAAO;YACtB,OAAOxD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOmD,MAAMnD,KAAK;YAAC;QACnD;QAEA,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,gEAAgE;QAChE,4EAA4E;QAC5E,MAAMqD,SACJ,AAACL,KAAK,CAACrE,uBAAuB,IAAIA,0BAClCsE,OAAOC,IAAI,CAACF,OAAOM,IAAI,CAAC,CAACC;gBAAQP;mBAAD,GAACA,YAAAA,KAAK,CAACO,GAAG,qBAATP,UAAWQ,QAAQ;cACpDP,OAAOC,IAAI,CAACF,MAAM,CAAC,EAAE,IACrB;QACF,MAAMS,YAAYtE,8BAChB;YAAEkE;YAAQL;QAAM,GAChB;YACEU,mBAAmB;gBAACjE;aAAyB;YAC7C,kEAAkE;YAClE,oBAAoB;YACpBkE,eAAeR,MAAMA,KAAK;QAC5B;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,eAAe;QACf,IAAIM,UAAUL,EAAE,KAAK,OAAO;YAC1B,OAAOxD,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAOyD,UAAUzD,KAAK;YAAC;QACvD;QACA,sEAAsE;QACtE,gEAAgE;QAChE,MAAM4D,UAAUX,OAAOY,MAAM,CAACJ,UAAUT,KAAK,EAAEc,IAAI,CACjD,CAACC,OAAcA,KAAKC,WAAW,KAAKvE;QAEtC,IAAI,CAACmE,SAAS;YACZ,OAAOhE,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAC1BC,OACE,mEACA;YACJ;QACF;QAEA,+DAA+D;QAC/D,MAAMsB,WAAW,MAAMU,UACpBE,UAAU,CAAC,uBACX+B,KAAK,CAAC,aAAa,MAAMxB,UAAUD,KAAK,EACxCyB,KAAK,CAAC,kBAAkB,MAAM7D,UAC9B8D,KAAK,CAAC,GACN7B,GAAG;QACN,MAAM8B,aAAa7C,SAAS8C,KAAK,GAC7BpC,UAAUE,UAAU,CAAC,uBAAuBC,GAAG,CAACtD,uBAChDyC,SAAS+C,IAAI,CAAC,EAAE,CAACC,GAAG;QACxB,MAAMC,UAAUjD,SAAS8C,KAAK,GAC1B,IACAxD,QAAOU,sBAAAA,SAAS+C,IAAI,CAAC,EAAE,CAAChC,GAAG,CAAC,4BAArBf,sBAAyC,KAAK;QACzD,MAAMkD,MAAMzF,cAAciD,SAAS,CAACyC,UAAU,CAACC,eAAe;QAE9D,6DAA6D;QAC7D,MAAMC,WAAW,MAAMpF,yBAAyB;YAC9CqF,gBAAgBnC,UAAUD,KAAK;YAC/BqC,SAAS;gBACPxE;gBACAyE,eAAerC,UAAUpC,WAAW;gBACpCC;gBACAyE,WAAWtB,UAAUT,KAAK;YAC5B;YACAgC,UAAUxD,OAAO,CAAC,QAAQ,KAAK;YAC/Be,GAAG,GAAEhB,kBAAAA,WAAWgB,GAAG,YAAdhB,kBAAkB;QACzB;QACA,IAAIoD,UAAU,OAAO/E,IAAIE,MAAM,CAAC6E,SAAS7E,MAAM,EAAEC,IAAI,CAAC4E,SAASxE,IAAI;QAEnE,MAAMgE,WAAWc,GAAG,CAClB;YACEC,cAAc;YACdC,WAAW1C,UAAUD,KAAK;YAC1B4C,cAAcnF;YACdoF,gBAAgBjF;YAChBC,aAAaA,YAAYQ,IAAI;WAG1BnC,wBAAwB2B,YAAYQ,IAAI,KACvCP,YAAYO,IAAI,MAAM;YAAEP,aAAaA,YAAYO,IAAI;QAAG,GACxDN,SAASM,IAAI,MAAM;YAAEN,UAAUA,SAASM,IAAI;QAAG;YACnDL;YACA8E,eAAef;YACfgB,WAAW;WACPjE,SAAS8C,KAAK,IAAI;YAAEoB,WAAWhB;QAAI;YACvCiB,WAAWjB;YACXkB,gBAAgB3G,cAAciD,SAAS,CAACyC,UAAU,CAACkB,UAAU,CAAC;gBAC5DpB;gBACAqB,aAAa7G,cAAciD,SAAS,CAAC6D,SAAS,CAACrB,GAAG;YACpD;YAEF;YAAEsB,OAAO;QAAK;QAEhB,gFAAgF;QAChF,MAAMtG,0BAA0B2E;QAChC,MAAMA,WAAWjC,UAAU,CAAC,YAAYC,GAAG,CAACjC,OAAOqE,UAAUU,GAAG,CAAC;YAC/D,yEAAyE;YACzE,qEAAqE;YACrEc,QAAQ;gBACN1C,QAAQI,UAAUJ,MAAM;gBACxBL,OAAOS,UAAUT,KAAK;gBACtBG,OAAOA,MAAMA,KAAK;YACpB;YACAyC,aAAapB;QACf;QAEA,OAAO5E,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEiG,WAAW7B,WAAWZ,EAAE;YAAEgB;QAAQ;IAClE,EAAE,OAAOvE,OAAO;QACdiG,QAAQjG,KAAK,CAACA;QACd,OAAOJ,IAAIE,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAwB;IAC/D;AACF,EAAC;AAED,eAAeN,qBAAoB"}

package/src/lib/server/publish-starter.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+/**
+ * Publishes a site as a site starter (AGL-4049): a whole site a person picks
+ * in "Create site" before it exists. Captures every published page with its
+ * published version, the shared layout the Home page sits in — both through
+ * `sanitizeSiteStarterNodes`, the starter's own rule, which keeps what a real
+ * site is made of (its grids, cards, styles and safe interactions) where the
+ * portable rule the other doors use would refuse it — and the theme
+ * in one of its two shapes — a built-in theme with brand colors and fonts
+ * over it, named in the body, or the site's own full theme — into a
+ * `siteStarter` listing that waits for review before anyone else sees it.
+ *
+ * Gates mirror the template door exactly: the price, org permission, site
+ * role, `marketplaceSelling`, a publisher profile with payouts and the current
+ * agreement, then the phishing screen before anything is listed. One listing
+ * per source site, keyed on `sourceStarterHostId` (never `sourceHostId`, which
+ * the template, layout and theme doors share); re-publishing bumps the
+ * version and keeps the review verdict, as a plugin's does.
+ */
+export declare const publishStarterHandler: PluginApiHandler;
+export default publishStarterHandler;