@aglyn/plugins-redirects 1.0.0-beta.244 → 1.0.0-beta.246

package/src/lib/server/redirect-ai-capability.js

@@ -0,0 +1,128 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginAiCapability } from "@aglyn/aglyn/plugin-manager/plugin-ai-capabilities";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { REDIRECT_DRAFT_ACTIONS, REDIRECT_DRAFT_DESTINATION_MAX, REDIRECT_DRAFT_RESOURCE, REDIRECT_DRAFT_SOURCE_MAX } from "../model/redirect-draft-content.js";
+import { REDIRECT_KINDS, REDIRECT_STATUS_CODES } from "../model/redirects.js";
+/**
+ * WHAT AN AI BUILD CAN DO WITH REDIRECTS (AGL-3745): create, change and remove
+ * a site's redirect rules — "redirect /old-menu to /menu", "send /shop to my
+ * store page", "stop redirecting /promo".
+ *
+ * The capability the AI plugin's build planner offers; its item is written by
+ * this plugin's `redirect` writer (`redirect-ai-writer.ts`), so every rule is
+ * the redirects page's: the publishing role, the `redirects` feature, the
+ * `redirectsPerHost` allowance on a create, lockdown, the page's validation,
+ * duplicates and loops, and a published page's path kept unless the person
+ * asked. No model runs: the planner fills the arguments and they ARE the
+ * change, so an item costs no credits.
+ *
+ * Free has no redirects (`redirectsPerHost: 0`, no `redirects` feature), so a
+ * Free workspace's build is never offered one. No page block depends on it.
+ *
+ * A rule is live once written (`live`): a redirect has no draft state, and the
+ * console's own Save writes it live. The build's plan card is the person's
+ * agreement to it, so the intent says so.
+ */ /** The operation's name in a build plan. */ export const REDIRECT_AI_OP = 'redirect';
+/** The writer's content for an item: its arguments, the status code read as the number the rule stores. */ export function redirectDraftContentFromArgs(args) {
+    const content = {};
+    for (const [key, value] of Object.entries(args)){
+        if (value === undefined || value === null || value === '') continue;
+        content[key] = key === 'statusCode' && typeof value === 'string' ? Number(value) : value;
+    }
+    return content;
+}
+export const redirectAiCapability = {
+    op: REDIRECT_AI_OP,
+    noun: 'redirect',
+    where: 'Redirects',
+    intents: [
+        'redirects: send an old or short address on the site to a page it has, or to an https:// address; change where a redirect goes; stop a redirect. Live as soon as the build runs'
+    ],
+    argsSchema: {
+        type: 'object',
+        properties: {
+            action: {
+                type: 'string',
+                description: 'create a new redirect, update the one at source, or remove the one at source.',
+                enum: REDIRECT_DRAFT_ACTIONS
+            },
+            source: {
+                type: 'string',
+                description: 'The address that redirects, as a site path like /old-menu (for update and remove, the path the redirect has now). With kind regex, a pattern over the path.',
+                maxLength: REDIRECT_DRAFT_SOURCE_MAX
+            },
+            destination: {
+                type: 'string',
+                description: 'Where visitors are sent: the path of a page the site has, from the site inventory (/menu), or an https:// address the request gives. Never a path or address the request and the inventory do not name. Required for create.',
+                maxLength: REDIRECT_DRAFT_DESTINATION_MAX
+            },
+            newSource: {
+                type: 'string',
+                description: 'update only: the new path the redirect answers at, when the request moves it.',
+                maxLength: REDIRECT_DRAFT_SOURCE_MAX
+            },
+            kind: {
+                type: 'string',
+                description: 'exact (the default) matches the path only; prefix also matches every path under it (/blog and /blog/post); regex is a pattern. For update and remove, give it only when the site has two redirects at that path.',
+                enum: REDIRECT_KINDS
+            },
+            statusCode: {
+                type: 'string',
+                description: '302 (the default) while a move may change; 301 when the request says the move is permanent; 307 and 308 keep a form submission as it was sent.',
+                enum: REDIRECT_STATUS_CODES.map(String)
+            },
+            priority: {
+                type: 'integer',
+                description: 'Evaluation order, lower first; leave it out for the default, 100.'
+            },
+            enabled: {
+                type: 'boolean',
+                description: 'false to keep the redirect but switch it off; leave it out otherwise.'
+            },
+            replacesLivePage: {
+                type: 'boolean',
+                description: 'true only when the request asks to redirect the address of a page the site publishes, so the redirect takes that page\'s place. A redirect from a published page\'s path is refused without it.'
+            }
+        },
+        required: [
+            'action',
+            'source'
+        ],
+        additionalProperties: false
+    },
+    maxPerPlan: 10,
+    // Free includes no redirects: neither the feature nor a slot.
+    freeAllowed: false,
+    feature: 'redirects',
+    quota: 'redirectsPerHost',
+    draftResource: REDIRECT_DRAFT_RESOURCE,
+    live: true,
+    // Written without a model: the planner already filled the arguments.
+    estimateCredits: ()=>0,
+    degrade: 'omit',
+    draftContent: (item)=>redirectDraftContentFromArgs(item.args)
+};
+/**
+ * Registers the capability; the console's server declarations call it beside
+ * the writer, since only the console runs AI jobs (AGL-3026). Idempotent.
+ */ export function registerRedirectAiCapability() {
+    registerPluginAiCapability(redirectAiCapability, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=redirect-ai-capability.js.map

package/src/lib/server/redirect-ai-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/redirects/src/lib/server/redirect-ai-capability.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginAiCapability,\n  type PluginAiCapability,\n  type PluginAiCapabilityArgs,\n} from '@aglyn/aglyn/plugin-manager/plugin-ai-capabilities'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport {\n  REDIRECT_DRAFT_ACTIONS,\n  REDIRECT_DRAFT_DESTINATION_MAX,\n  REDIRECT_DRAFT_RESOURCE,\n  REDIRECT_DRAFT_SOURCE_MAX,\n} from '../model/redirect-draft-content'\nimport { REDIRECT_KINDS, REDIRECT_STATUS_CODES } from '../model/redirects'\n\n/**\n * WHAT AN AI BUILD CAN DO WITH REDIRECTS (AGL-3745): create, change and remove\n * a site's redirect rules — \"redirect /old-menu to /menu\", \"send /shop to my\n * store page\", \"stop redirecting /promo\".\n *\n * The capability the AI plugin's build planner offers; its item is written by\n * this plugin's `redirect` writer (`redirect-ai-writer.ts`), so every rule is\n * the redirects page's: the publishing role, the `redirects` feature, the\n * `redirectsPerHost` allowance on a create, lockdown, the page's validation,\n * duplicates and loops, and a published page's path kept unless the person\n * asked. No model runs: the planner fills the arguments and they ARE the\n * change, so an item costs no credits.\n *\n * Free has no redirects (`redirectsPerHost: 0`, no `redirects` feature), so a\n * Free workspace's build is never offered one. No page block depends on it.\n *\n * A rule is live once written (`live`): a redirect has no draft state, and the\n * console's own Save writes it live. The build's plan card is the person's\n * agreement to it, so the intent says so.\n */\n\n/** The operation's name in a build plan. */\nexport const REDIRECT_AI_OP = 'redirect'\n\n/** The writer's content for an item: its arguments, the status code read as the number the rule stores. */\nexport function redirectDraftContentFromArgs(args: PluginAiCapabilityArgs): Readonly<Record<string, unknown>> {\n  const content: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(args)) {\n    if (value === undefined || value === null || value === '') continue\n    content[key] = key === 'statusCode' && typeof value === 'string' ? Number(value) : value\n  }\n  return content\n}\n\nexport const redirectAiCapability: PluginAiCapability = {\n  op: REDIRECT_AI_OP,\n  noun: 'redirect',\n  where: 'Redirects',\n  intents: [\n    'redirects: send an old or short address on the site to a page it has, or to an https:// address; change where a redirect goes; stop a redirect. Live as soon as the build runs',\n  ],\n  argsSchema: {\n    type: 'object',\n    properties: {\n      action: {\n        type: 'string',\n        description: 'create a new redirect, update the one at source, or remove the one at source.',\n        enum: REDIRECT_DRAFT_ACTIONS,\n      },\n      source: {\n        type: 'string',\n        description:\n          'The address that redirects, as a site path like /old-menu (for update and remove, the path the redirect has now). With kind regex, a pattern over the path.',\n        maxLength: REDIRECT_DRAFT_SOURCE_MAX,\n      },\n      destination: {\n        type: 'string',\n        description:\n          'Where visitors are sent: the path of a page the site has, from the site inventory (/menu), or an https:// address the request gives. Never a path or address the request and the inventory do not name. Required for create.',\n        maxLength: REDIRECT_DRAFT_DESTINATION_MAX,\n      },\n      newSource: {\n        type: 'string',\n        description: 'update only: the new path the redirect answers at, when the request moves it.',\n        maxLength: REDIRECT_DRAFT_SOURCE_MAX,\n      },\n      kind: {\n        type: 'string',\n        description:\n          'exact (the default) matches the path only; prefix also matches every path under it (/blog and /blog/post); regex is a pattern. For update and remove, give it only when the site has two redirects at that path.',\n        enum: REDIRECT_KINDS,\n      },\n      statusCode: {\n        type: 'string',\n        description:\n          '302 (the default) while a move may change; 301 when the request says the move is permanent; 307 and 308 keep a form submission as it was sent.',\n        enum: REDIRECT_STATUS_CODES.map(String),\n      },\n      priority: {\n        type: 'integer',\n        description: 'Evaluation order, lower first; leave it out for the default, 100.',\n      },\n      enabled: {\n        type: 'boolean',\n        description: 'false to keep the redirect but switch it off; leave it out otherwise.',\n      },\n      replacesLivePage: {\n        type: 'boolean',\n        description:\n          'true only when the request asks to redirect the address of a page the site publishes, so the redirect takes that page\\'s place. A redirect from a published page\\'s path is refused without it.',\n      },\n    },\n    required: ['action', 'source'],\n    additionalProperties: false,\n  },\n  maxPerPlan: 10,\n  // Free includes no redirects: neither the feature nor a slot.\n  freeAllowed: false,\n  feature: 'redirects',\n  quota: 'redirectsPerHost',\n  draftResource: REDIRECT_DRAFT_RESOURCE,\n  live: true,\n  // Written without a model: the planner already filled the arguments.\n  estimateCredits: () => 0,\n  degrade: 'omit',\n  draftContent: (item) => redirectDraftContentFromArgs(item.args),\n}\n\n/**\n * Registers the capability; the console's server declarations call it beside\n * the writer, since only the console runs AI jobs (AGL-3026). Idempotent.\n */\nexport function registerRedirectAiCapability(): void {\n  registerPluginAiCapability(redirectAiCapability, { pluginId: BUNDLE_ID })\n}\n"],"names":["registerPluginAiCapability","BUNDLE_ID","REDIRECT_DRAFT_ACTIONS","REDIRECT_DRAFT_DESTINATION_MAX","REDIRECT_DRAFT_RESOURCE","REDIRECT_DRAFT_SOURCE_MAX","REDIRECT_KINDS","REDIRECT_STATUS_CODES","REDIRECT_AI_OP","redirectDraftContentFromArgs","args","content","key","value","Object","entries","undefined","Number","redirectAiCapability","op","noun","where","intents","argsSchema","type","properties","action","description","enum","source","maxLength","destination","newSource","kind","statusCode","map","String","priority","enabled","replacesLivePage","required","additionalProperties","maxPerPlan","freeAllowed","feature","quota","draftResource","live","estimateCredits","degrade","draftContent","item","registerRedirectAiCapability","pluginId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,0BAA0B,QAGrB,qDAAoD;AAC3D,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SACEC,sBAAsB,EACtBC,8BAA8B,EAC9BC,uBAAuB,EACvBC,yBAAyB,QACpB,qCAAiC;AACxC,SAASC,cAAc,EAAEC,qBAAqB,QAAQ,wBAAoB;AAE1E;;;;;;;;;;;;;;;;;;;CAmBC,GAED,0CAA0C,GAC1C,OAAO,MAAMC,iBAAiB,WAAU;AAExC,yGAAyG,GACzG,OAAO,SAASC,6BAA6BC,IAA4B;IACvE,MAAMC,UAAmC,CAAC;IAC1C,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACL,MAAO;QAC/C,IAAIG,UAAUG,aAAaH,UAAU,QAAQA,UAAU,IAAI;QAC3DF,OAAO,CAACC,IAAI,GAAGA,QAAQ,gBAAgB,OAAOC,UAAU,WAAWI,OAAOJ,SAASA;IACrF;IACA,OAAOF;AACT;AAEA,OAAO,MAAMO,uBAA2C;IACtDC,IAAIX;IACJY,MAAM;IACNC,OAAO;IACPC,SAAS;QACP;KACD;IACDC,YAAY;QACVC,MAAM;QACNC,YAAY;YACVC,QAAQ;gBACNF,MAAM;gBACNG,aAAa;gBACbC,MAAM1B;YACR;YACA2B,QAAQ;gBACNL,MAAM;gBACNG,aACE;gBACFG,WAAWzB;YACb;YACA0B,aAAa;gBACXP,MAAM;gBACNG,aACE;gBACFG,WAAW3B;YACb;YACA6B,WAAW;gBACTR,MAAM;gBACNG,aAAa;gBACbG,WAAWzB;YACb;YACA4B,MAAM;gBACJT,MAAM;gBACNG,aACE;gBACFC,MAAMtB;YACR;YACA4B,YAAY;gBACVV,MAAM;gBACNG,aACE;gBACFC,MAAMrB,sBAAsB4B,GAAG,CAACC;YAClC;YACAC,UAAU;gBACRb,MAAM;gBACNG,aAAa;YACf;YACAW,SAAS;gBACPd,MAAM;gBACNG,aAAa;YACf;YACAY,kBAAkB;gBAChBf,MAAM;gBACNG,aACE;YACJ;QACF;QACAa,UAAU;YAAC;YAAU;SAAS;QAC9BC,sBAAsB;IACxB;IACAC,YAAY;IACZ,8DAA8D;IAC9DC,aAAa;IACbC,SAAS;IACTC,OAAO;IACPC,eAAe1C;IACf2C,MAAM;IACN,qEAAqE;IACrEC,iBAAiB,IAAM;IACvBC,SAAS;IACTC,cAAc,CAACC,OAAS1C,6BAA6B0C,KAAKzC,IAAI;AAChE,EAAC;AAED;;;CAGC,GACD,OAAO,SAAS0C;IACdpD,2BAA2BkB,sBAAsB;QAAEmC,UAAUpD;IAAU;AACzE"}

package/src/lib/server/redirect-ai-writer.console.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginResourceDraftWriter } from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts';
+export declare function redirectAiWriter(): PluginResourceDraftWriter;

package/src/lib/server/redirect-ai-writer.console.js

@@ -0,0 +1,71 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { dropPluginSiteCache } from "@aglyn/aglyn/plugin-manager/plugin-site-cache";
+import { firebaseAdmin, logHostActivity } from "@aglyn/tenant-data-admin";
+import { findUserByUidAcrossPools } from "@aglyn/tenant-data-admin/server/auth-pools";
+import { getLockdownVerdict } from "@aglyn/tenant-data-admin/server/lockdown";
+import { createRedirectAiWriter } from "./redirect-ai-writer.js";
+/**
+ * The `redirect` writer (AGL-3745) over the console's Admin SDK, made once per
+ * process on its first call. The declarations file reaches it by a relative
+ * `import()`, so the console's boot loads neither this nor the Admin SDK.
+ */ let writer = null;
+export function redirectAiWriter() {
+    writer != null ? writer : writer = createRedirectAiWriter({
+        firestore: ()=>firebaseAdmin.app().firestore(),
+        // The verdict every console write door asks: the platform, the workspace,
+        // the site and the member, for a write.
+        lockdown: async ({ uid, org, host })=>Boolean(await getLockdownVerdict({
+                staff: false,
+                uid,
+                org: org,
+                host: host,
+                intent: 'write'
+            })),
+        // The create route's announcement, for every path a change touches.
+        announcePaths: async (hostId, paths)=>{
+            await dropPluginSiteCache({
+                hostIds: [
+                    hostId
+                ],
+                paths: {
+                    [hostId]: [
+                        ...paths
+                    ]
+                },
+                reason: 'redirect rules were changed'
+            });
+        },
+        // The create route's activity line for a created rule.
+        logCreated: async (hostId, actorUid, ruleId, declared)=>{
+            var _declared_activityType;
+            const email = await findUserByUidAcrossPools(actorUid).then((found)=>{
+                var _ref;
+                return (_ref = found == null ? void 0 : found.record.email) != null ? _ref : null;
+            }).catch(()=>null);
+            await logHostActivity(hostId, {
+                uid: actorUid,
+                email
+            }, `Created ${declared.activityNoun}`, {
+                type: (_declared_activityType = declared.activityType) != null ? _declared_activityType : 'content',
+                id: ruleId
+            });
+        }
+    });
+    return writer;
+}
+
+//# sourceMappingURL=redirect-ai-writer.console.js.map

package/src/lib/server/redirect-ai-writer.console.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/redirects/src/lib/server/redirect-ai-writer.console.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { dropPluginSiteCache } from '@aglyn/aglyn/plugin-manager/plugin-site-cache'\nimport type { PluginResourceDraftWriter } from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts'\nimport type { HostActivityTarget } from '@aglyn/tenant-data-admin'\nimport { firebaseAdmin, logHostActivity } from '@aglyn/tenant-data-admin'\nimport { findUserByUidAcrossPools } from '@aglyn/tenant-data-admin/server/auth-pools'\nimport { getLockdownVerdict } from '@aglyn/tenant-data-admin/server/lockdown'\nimport { createRedirectAiWriter } from './redirect-ai-writer'\n\n/**\n * The `redirect` writer (AGL-3745) over the console's Admin SDK, made once per\n * process on its first call. The declarations file reaches it by a relative\n * `import()`, so the console's boot loads neither this nor the Admin SDK.\n */\nlet writer: PluginResourceDraftWriter | null = null\n\nexport function redirectAiWriter(): PluginResourceDraftWriter {\n  writer ??= createRedirectAiWriter({\n    firestore: () => firebaseAdmin.app().firestore() as unknown as FirebaseFirestore.Firestore,\n    // The verdict every console write door asks: the platform, the workspace,\n    // the site and the member, for a write.\n    lockdown: async ({ uid, org, host }) =>\n      Boolean(\n        await getLockdownVerdict({ staff: false, uid, org: org as never, host: host as never, intent: 'write' }),\n      ),\n    // The create route's announcement, for every path a change touches.\n    announcePaths: async (hostId, paths) => {\n      await dropPluginSiteCache({ hostIds: [hostId], paths: { [hostId]: [...paths] }, reason: 'redirect rules were changed' })\n    },\n    // The create route's activity line for a created rule.\n    logCreated: async (hostId, actorUid, ruleId, declared) => {\n      const email = await findUserByUidAcrossPools(actorUid)\n        .then((found) => found?.record.email ?? null)\n        .catch(() => null)\n      await logHostActivity(\n        hostId,\n        { uid: actorUid, email },\n        `Created ${declared.activityNoun}`,\n        { type: (declared.activityType ?? 'content') as HostActivityTarget['type'], id: ruleId },\n      )\n    },\n  })\n  return writer\n}\n"],"names":["dropPluginSiteCache","firebaseAdmin","logHostActivity","findUserByUidAcrossPools","getLockdownVerdict","createRedirectAiWriter","writer","redirectAiWriter","firestore","app","lockdown","uid","org","host","Boolean","staff","intent","announcePaths","hostId","paths","hostIds","reason","logCreated","actorUid","ruleId","declared","email","then","found","record","catch","activityNoun","type","activityType","id"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,QAAQ,gDAA+C;AAGnF,SAASC,aAAa,EAAEC,eAAe,QAAQ,2BAA0B;AACzE,SAASC,wBAAwB,QAAQ,6CAA4C;AACrF,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,sBAAsB,QAAQ,0BAAsB;AAE7D;;;;CAIC,GACD,IAAIC,SAA2C;AAE/C,OAAO,SAASC;IACdD,iBAAAA,SAAAA,SAAWD,uBAAuB;QAChCG,WAAW,IAAMP,cAAcQ,GAAG,GAAGD,SAAS;QAC9C,0EAA0E;QAC1E,wCAAwC;QACxCE,UAAU,OAAO,EAAEC,GAAG,EAAEC,GAAG,EAAEC,IAAI,EAAE,GACjCC,QACE,MAAMV,mBAAmB;gBAAEW,OAAO;gBAAOJ;gBAAKC,KAAKA;gBAAcC,MAAMA;gBAAeG,QAAQ;YAAQ;QAE1G,oEAAoE;QACpEC,eAAe,OAAOC,QAAQC;YAC5B,MAAMnB,oBAAoB;gBAAEoB,SAAS;oBAACF;iBAAO;gBAAEC,OAAO;oBAAE,CAACD,OAAO,EAAE;2BAAIC;qBAAM;gBAAC;gBAAGE,QAAQ;YAA8B;QACxH;QACA,uDAAuD;QACvDC,YAAY,OAAOJ,QAAQK,UAAUC,QAAQC;gBAQhCA;YAPX,MAAMC,QAAQ,MAAMvB,yBAAyBoB,UAC1CI,IAAI,CAAC,CAACC;;+BAAUA,yBAAAA,MAAOC,MAAM,CAACH,KAAK,mBAAI;eACvCI,KAAK,CAAC,IAAM;YACf,MAAM5B,gBACJgB,QACA;gBAAEP,KAAKY;gBAAUG;YAAM,GACvB,CAAC,QAAQ,EAAED,SAASM,YAAY,EAAE,EAClC;gBAAEC,IAAI,GAAGP,yBAAAA,SAASQ,YAAY,YAArBR,yBAAyB;gBAA0CS,IAAIV;YAAO;QAE3F;IACF;IACA,OAAOlB;AACT"}

package/src/lib/server/redirect-ai-writer.d.ts

@@ -0,0 +1,46 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ResolvedPluginHostResource } from '@aglyn/aglyn/plugin-manager/plugin-host-resources';
+import type { PluginDraftContext, PluginResourceDraftWriter } from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts';
+type Firestore = FirebaseFirestore.Firestore;
+type StoredRule = Record<string, unknown>;
+/** The page's refusal for a member without the publishing role. */
+export declare const REDIRECT_AI_ROLE_REFUSAL = "Changing a redirect needs a publishing role \u2014 ask an editor or admin";
+/** The page's refusal for a plan without redirects. */
+export declare const REDIRECT_AI_PLAN_REFUSAL = "URL redirects require a Starter plan \u2014 see Billing to upgrade";
+/** What a member is told while a lockdown refuses writes to the site. */
+export declare const REDIRECT_AI_LOCKED_REFUSAL = "This site is not accepting changes right now.";
+/** The create route's refusal at the plan's allowance. */
+export declare function redirectAiLimitRefusal(limit: number): string;
+/** Whether a lockdown refuses this member's write to this site; `true` refuses. */
+export type RedirectAiLockdownCheck = (input: {
+    uid: string;
+    org: PluginDraftContext['org'];
+    host: StoredRule;
+}) => Promise<boolean>;
+export interface RedirectAiWriterDeps {
+    firestore: () => Firestore;
+    lockdown: RedirectAiLockdownCheck;
+    /** The `redirect` kind's declaration; the create route's otherwise. */
+    declaration?: () => ResolvedPluginHostResource;
+    /** Drops the site's cached pages at these paths, best effort. */
+    announcePaths?(hostId: string, paths: readonly string[]): Promise<void>;
+    /** Writes the site activity line for a created rule, best effort. */
+    logCreated?(hostId: string, actorUid: string, ruleId: string, declared: ResolvedPluginHostResource): Promise<void>;
+}
+export declare function createRedirectAiWriter(deps: RedirectAiWriterDeps): PluginResourceDraftWriter;
+export {};

package/src/lib/server/redirect-ai-writer.js

@@ -0,0 +1,333 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { hostRoleCanPublish } from "@aglyn/aglyn/app-utils/organizations";
+import { checkEntitlement, checkQuota } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { FieldValue, Timestamp } from "firebase-admin/firestore";
+import { checkRedirectDraftContent, readRedirectDraftContent } from "../model/redirect-draft-content.js";
+import { REDIRECT_DEFAULT_PRIORITY, findDuplicateRedirect, isExternalRedirectDestination, normalizeRedirectSource, redirectSourceIsLivePage, walkRedirectChain } from "../model/redirects.js";
+import { announcedPath, redirectDeclaration, redirectRuleValues, ruleProblem, storedFields, withDefaults } from "../transfer/redirects-transfer.js";
+import { REDIRECT_FIELD } from "../transfer/redirects-transfer-fields.js";
+/** The page's refusal for a member without the publishing role. */ export const REDIRECT_AI_ROLE_REFUSAL = 'Changing a redirect needs a publishing role — ask an editor or admin';
+/** The page's refusal for a plan without redirects. */ export const REDIRECT_AI_PLAN_REFUSAL = 'URL redirects require a Starter plan — see Billing to upgrade';
+/** What a member is told while a lockdown refuses writes to the site. */ export const REDIRECT_AI_LOCKED_REFUSAL = 'This site is not accepting changes right now.';
+/** The create route's refusal at the plan's allowance. */ export function redirectAiLimitRefusal(limit) {
+    return `Your plan includes ${limit} redirects — upgrade in Billing for more`;
+}
+/** What a caller is told about a rule: what it is, and that it is live. */ function factsOf(action, data) {
+    const values = redirectRuleValues('', data);
+    return {
+        action,
+        source: values['source'],
+        destination: values['destination'],
+        kind: values['kind'],
+        statusCode: values['statusCode'],
+        priority: values['priority'],
+        enabled: action === 'remove' ? false : values['enabled'],
+        removed: action === 'remove',
+        live: true
+    };
+}
+function recordOf(id, action, data) {
+    var _data_source, _data_destination;
+    return {
+        id,
+        name: `${String((_data_source = data['source']) != null ? _data_source : '')} → ${String((_data_destination = data['destination']) != null ? _data_destination : '')}`,
+        versionId: null,
+        facts: factsOf(action, data)
+    };
+}
+function isLive(data) {
+    return Boolean(data) && !(data == null ? void 0 : data['deletedAt']);
+}
+/** A from-path as a rule of `kind` stores it: a pattern trimmed, a path normalized. */ function storedSourceOf(kind, source) {
+    return kind === 'regex' ? source.trim() || null : normalizeRedirectSource(source);
+}
+export function createRedirectAiWriter(deps) {
+    var _deps_declaration;
+    const declaration = (_deps_declaration = deps.declaration) != null ? _deps_declaration : redirectDeclaration;
+    const hostRef = (hostId)=>deps.firestore().collection('hosts').doc(hostId);
+    const rulesOf = (hostId)=>hostRef(hostId).collection('redirects');
+    async function refusalFor(host, context) {
+        var _host_data, _data_memberRoles, _context_org;
+        if (!host.exists) return {
+            status: 404,
+            error: 'Unknown site'
+        };
+        const data = (_host_data = host.data()) != null ? _host_data : {};
+        const role = ((_data_memberRoles = data['memberRoles']) != null ? _data_memberRoles : {})[context.uid];
+        if (!hostRoleCanPublish(role)) return {
+            status: 403,
+            error: REDIRECT_AI_ROLE_REFUSAL
+        };
+        const declared = declaration();
+        if (declared.entitlement && !checkEntitlement((_context_org = context.org) != null ? _context_org : {}, declared.entitlement)) {
+            return {
+                status: 403,
+                error: REDIRECT_AI_PLAN_REFUSAL
+            };
+        }
+        if (await deps.lockdown({
+            uid: context.uid,
+            org: context.org,
+            host: data
+        })) {
+            return {
+                status: 403,
+                error: REDIRECT_AI_LOCKED_REFUSAL
+            };
+        }
+        return null;
+    }
+    /** Every rule document of the site, soft-deleted ones included. */ async function readAllRules(hostId) {
+        const snapshot = await rulesOf(hostId).get();
+        return snapshot.docs.map((doc)=>{
+            var _doc_data;
+            return {
+                id: doc.id,
+                data: (_doc_data = doc.data()) != null ? _doc_data : {}
+            };
+        });
+    }
+    /** The live rules at a from-path, of `kind` when it is given. */ function rulesAt(all, source, kind) {
+        return all.filter(({ data })=>{
+            const ruleKind = typeof data['kind'] === 'string' && data['kind'] ? data['kind'] : 'exact';
+            if (kind && ruleKind !== kind) return false;
+            return data['source'] === storedSourceOf(ruleKind, source);
+        });
+    }
+    /** Why the rule a change leaves cannot be saved among the site's live rules, or `null`. */ function setProblem(rows, rule) {
+        if (findDuplicateRedirect(rows, rule)) return `A rule for ${rule.source} already exists`;
+        const walk = walkRedirectChain(rows, rule);
+        if (walk.loop) return 'That destination chains back to this rule — a redirect loop';
+        if (walk.cycle) return 'That destination leads into a redirect loop other rules already make';
+        return null;
+    }
+    function livePageProblem(host, source, kind, asked) {
+        if (asked || kind === 'regex' || !redirectSourceIsLivePage(host['screens'], source)) {
+            return null;
+        }
+        return `${source} is a published page, and a redirect there would take its place. Redirect it only when the person asks for that page to send visitors elsewhere.`;
+    }
+    async function announce(hostId, paths) {
+        const unique = [
+            ...new Set(paths.filter((path)=>Boolean(path)))
+        ];
+        if (unique.length && deps.announcePaths) await deps.announcePaths(hostId, unique).catch(()=>undefined);
+    }
+    const refuse = (status, error)=>({
+            ok: false,
+            status,
+            error
+        });
+    return {
+        refusal: async (context)=>refusalFor(await hostRef(context.hostId).get(), context),
+        check: (content)=>checkRedirectDraftContent(content),
+        read: async ({ hostId, id })=>{
+            var _snapshot_data;
+            const snapshot = await rulesOf(hostId).doc(id).get();
+            if (!snapshot.exists) return null;
+            const data = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
+            return recordOf(id, isLive(data) ? 'create' : 'remove', data);
+        },
+        write: async (request)=>{
+            var _hostSnapshot_data, _ref, _fields_kind, _current_approvalField;
+            var _declared_externalDestination;
+            const read = readRedirectDraftContent(request.content);
+            if (read.ok === false) return refuse(400, read.problems[0]);
+            const change = read.value;
+            const hostSnapshot = await hostRef(request.hostId).get();
+            const refusal = await refusalFor(hostSnapshot, request);
+            if (refusal) return _extends({
+                ok: false
+            }, refusal);
+            const host = (_hostSnapshot_data = hostSnapshot.data()) != null ? _hostSnapshot_data : {};
+            const declared = declaration();
+            const approvalField = (_ref = (_declared_externalDestination = declared.externalDestination) == null ? void 0 : _declared_externalDestination.approvedByField) != null ? _ref : REDIRECT_FIELD.approvedBy;
+            const stampFor = (destination)=>declared.externalDestination && isExternalRedirectDestination(String(destination != null ? destination : '')) ? request.uid : null;
+            const at = Timestamp.fromDate(request.now);
+            const all = await readAllRules(request.hostId);
+            const live = all.filter(({ data })=>isLive(data));
+            const rows = live.map(({ id, data })=>({
+                    $id: id,
+                    source: data['source'],
+                    destination: data['destination'],
+                    kind: data['kind']
+                }));
+            if (change.action === 'create') {
+                var _change_kind, _change_statusCode, _change_priority, _change_enabled, _fields_kind1;
+                const ref = rulesOf(request.hostId).doc(request.id);
+                const before = all.find((one)=>one.id === request.id);
+                if (before) return _extends({
+                    ok: true,
+                    replayed: true
+                }, recordOf(request.id, 'create', before.data));
+                const rule = withDefaults({
+                    source: change.source,
+                    destination: change.destination,
+                    kind: (_change_kind = change.kind) != null ? _change_kind : 'exact',
+                    statusCode: (_change_statusCode = change.statusCode) != null ? _change_statusCode : 302,
+                    priority: (_change_priority = change.priority) != null ? _change_priority : REDIRECT_DEFAULT_PRIORITY,
+                    enabled: (_change_enabled = change.enabled) != null ? _change_enabled : true
+                });
+                const problem = ruleProblem(rule, host);
+                if (problem) return refuse(400, problem.detail);
+                const fields = storedFields(rule, declared.fields);
+                const source = String(fields['source']);
+                const kind = String((_fields_kind1 = fields['kind']) != null ? _fields_kind1 : 'exact');
+                const shadow = livePageProblem(host, source, kind, change.replacesLivePage);
+                if (shadow) return refuse(409, shadow);
+                const clash = setProblem(rows, {
+                    $id: request.id,
+                    source,
+                    destination: String(fields['destination']),
+                    kind
+                });
+                if (clash) return refuse(409, clash);
+                const stamp = stampFor(fields['destination']);
+                const written = _extends({}, fields, stamp ? {
+                    [approvalField]: stamp
+                } : {});
+                const db = deps.firestore();
+                const outcome = await db.runTransaction(async (tx)=>{
+                    var _existing_data;
+                    const existing = await tx.get(ref);
+                    if (existing.exists) return {
+                        existed: (_existing_data = existing.data()) != null ? _existing_data : {}
+                    };
+                    if (declared.quotaKey) {
+                        var _request_org;
+                        // Every document, soft-deleted ones included, as the create route counts.
+                        const used = (await tx.get(rulesOf(request.hostId).count())).data().count;
+                        const quota = checkQuota((_request_org = request.org) != null ? _request_org : {}, declared.quotaKey, Number(used) || 0);
+                        if (!quota.allowed) return {
+                            refusal: redirectAiLimitRefusal(quota.limit)
+                        };
+                    }
+                    tx.create(ref, _extends({}, written, {
+                        createdAt: at,
+                        updatedAt: at,
+                        createdBy: request.uid
+                    }));
+                    return {};
+                });
+                if (outcome.refusal) return refuse(403, outcome.refusal);
+                if (outcome.existed) return _extends({
+                    ok: true,
+                    replayed: true
+                }, recordOf(request.id, 'create', outcome.existed));
+                if (deps.logCreated) {
+                    await deps.logCreated(request.hostId, request.uid, ref.id, declared).catch(()=>undefined);
+                }
+                await announce(request.hostId, [
+                    announcedPath(fields)
+                ]);
+                return _extends({
+                    ok: true,
+                    replayed: false
+                }, recordOf(ref.id, 'create', written));
+            }
+            // An update or a remove names a rule the site has.
+            const found = rulesAt(live, change.source, change.kind);
+            if (found.length > 1) {
+                return refuse(409, `The site has more than one redirect at ${change.source}; say which match mode (exact, prefix or regex) to change`);
+            }
+            const target = found[0];
+            if (!target) {
+                if (change.action === 'remove') {
+                    const gone = rulesAt(all, change.source, change.kind)[0];
+                    if (gone) return _extends({
+                        ok: true,
+                        replayed: true
+                    }, recordOf(gone.id, 'remove', gone.data));
+                }
+                return refuse(404, `The site has no redirect from ${change.source}`);
+            }
+            const ref = rulesOf(request.hostId).doc(target.id);
+            if (change.action === 'remove') {
+                // The page's Delete: marked deleted and off, so the serve path drops it.
+                await ref.set({
+                    deletedAt: at,
+                    enabled: false
+                }, {
+                    merge: true
+                });
+                await announce(request.hostId, [
+                    announcedPath(target.data)
+                ]);
+                return _extends({
+                    ok: true,
+                    replayed: false
+                }, recordOf(target.id, 'remove', target.data));
+            }
+            const current = redirectRuleValues(target.id, target.data);
+            const rule = withDefaults(_extends({}, current, change.newSource !== undefined ? {
+                source: change.newSource
+            } : {}, change.destination !== undefined ? {
+                destination: change.destination
+            } : {}, change.statusCode !== undefined ? {
+                statusCode: change.statusCode
+            } : {}, change.priority !== undefined ? {
+                priority: change.priority
+            } : {}, change.enabled !== undefined ? {
+                enabled: change.enabled
+            } : {}));
+            const problem = ruleProblem(rule, host);
+            if (problem) return refuse(400, problem.detail);
+            const fields = storedFields(rule, declared.fields);
+            const source = String(fields['source']);
+            const kind = String((_fields_kind = fields['kind']) != null ? _fields_kind : 'exact');
+            if (source !== current['source']) {
+                const shadow = livePageProblem(host, source, kind, change.replacesLivePage);
+                if (shadow) return refuse(409, shadow);
+            }
+            const clash = setProblem(rows, {
+                $id: target.id,
+                source,
+                destination: String(fields['destination']),
+                kind
+            });
+            if (clash) return refuse(409, clash);
+            const stamp = stampFor(fields['destination']);
+            const unchanged = Object.entries(fields).every(([key, value])=>current[key] === value) && ((_current_approvalField = current[approvalField]) != null ? _current_approvalField : null) === stamp;
+            const after = _extends({}, target.data, fields, stamp ? {
+                [approvalField]: stamp
+            } : {});
+            if (unchanged) return _extends({
+                ok: true,
+                replayed: true
+            }, recordOf(target.id, 'update', after));
+            // The page's edit: every field the form owns, the stamp set or removed,
+            // `updatedAt`, merged so `lastHitAt` stays.
+            await ref.set(_extends({}, fields, {
+                [approvalField]: stamp != null ? stamp : FieldValue.delete(),
+                updatedAt: at
+            }), {
+                merge: true
+            });
+            await announce(request.hostId, [
+                announcedPath(fields),
+                announcedPath(target.data)
+            ]);
+            return _extends({
+                ok: true,
+                replayed: false
+            }, recordOf(target.id, 'update', after));
+        }
+    };
+}
+
+//# sourceMappingURL=redirect-ai-writer.js.map