@aglyn/plugins-workflows 1.0.0-beta.143

package/src/lib/plugin.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Workflows feature plugin (AGL-395). Console-only — workflows, actions,
+ * and webhooks run server-side (event pipelines, `/api/hooks`), not through
+ * a canvas element, so there is no UI bundle. The console half declares the
+ * Automation nav + page through the ConsoleExtension registry, gated by the
+ * `workflows` entitlement (the Actions/Webhooks tabs run their own per-plan
+ * checks off the passed `org`). Where a workflow is used is asked of the
+ * platform's scan and drawn in a zone this plugin hosts.
+ *
+ * `pluginId`, `featureFlag` and `navTabId` all still read `workflows`: they
+ * are stored — an org's enabled-plugin ids, the plan's entitlement flags, the
+ * Remote Config release flag — and a section's name is not a reason to orphan
+ * them. Only what a reader sees carries the new name.
+ */
+export declare function registerWorkflowsConsole(): void;
+export { default as HostActivityCard } from './components/host-activity-card.component';
+export type { HostActivityCardProps } from './components/host-activity-card.component';

package/src/lib/plugin.js

@@ -0,0 +1,94 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { mdiSitemap } from "@aglyn/shared-data-mdi";
+import { lazy } from "react";
+import { HostActivityCard } from "./components/host-activity-card.component.js";
+import { WORKFLOWS_CONSOLE_SECTIONS } from "./components/workflows-console-sections.js";
+import { registerPluginZone } from "@aglyn/aglyn/plugin-manager/plugin-zones";
+import { WORKFLOW_USAGE_ZONE } from "./components/workflow-zones.js";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+/** Code-split: the Automation console page only loads when opened. */ const WorkflowsConsolePage = lazy(()=>import("./components/workflows-console-page.js"));
+/**
+ * Workflows feature plugin (AGL-395). Console-only — workflows, actions,
+ * and webhooks run server-side (event pipelines, `/api/hooks`), not through
+ * a canvas element, so there is no UI bundle. The console half declares the
+ * Automation nav + page through the ConsoleExtension registry, gated by the
+ * `workflows` entitlement (the Actions/Webhooks tabs run their own per-plan
+ * checks off the passed `org`). Where a workflow is used is asked of the
+ * platform's scan and drawn in a zone this plugin hosts.
+ *
+ * `pluginId`, `featureFlag` and `navTabId` all still read `workflows`: they
+ * are stored — an org's enabled-plugin ids, the plan's entitlement flags, the
+ * Remote Config release flag — and a section's name is not a reason to orphan
+ * them. Only what a reader sees carries the new name.
+ */ export function registerWorkflowsConsole() {
+    registerPluginZone({
+        zone: WORKFLOW_USAGE_ZONE,
+        label: 'Where a workflow is used',
+        surface: 'console',
+        description: 'On the Automation page, after a reader asks where a workflow is used. A widget here lays out the scan the page already ran; it is handed the site, the answer and a way to close, and it writes nothing.'
+    }, // Named, because a spec calls this registrar without the loader.
+    {
+        pluginId: BUNDLE_ID
+    });
+    Aglyn.registerConsoleExtension({
+        // Host activity feed (AGL-419): rendered by the shell's
+        // 'hostActivity' widget slot (dashboard + editor view page).
+        widgets: [
+            {
+                slot: 'hostActivity',
+                widgetId: 'workflows-host-activity',
+                title: 'Recent Activity',
+                Component: HostActivityCard
+            }
+        ],
+        pluginId: BUNDLE_ID,
+        displayName: 'Automation',
+        featureFlag: 'workflows',
+        navItems: [
+            {
+                label: 'Automation',
+                // Workflows, Actions and Webhooks are the tabs INSIDE this section, so
+                // the section is named for what they have in common. `/workflows` —
+                // the address before the section had its own name — is redirected here
+                // by the console (see `Route.HOST_WORKFLOWS`).
+                href: '/automation',
+                // Sections as ROUTES (AGL-2501): each is a real URL the shell
+                // resolves and gates, so the page mounts the one being read.
+                sections: WORKFLOWS_CONSOLE_SECTIONS,
+                // Reuse the existing release-flag nav-tab so staff-preview gating is
+                // unchanged now that the tab comes from the plugin (AGL-395).
+                navTabId: 'nav-tab-workflows',
+                icon: {
+                    path: mdiSitemap.path
+                },
+                header: {
+                    title: 'Automation',
+                    icon: {
+                        path: mdiSitemap.path
+                    },
+                    docsTopic: 'workflows'
+                },
+                Component: WorkflowsConsolePage
+            }
+        ]
+    });
+}
+// Activity feed consumed directly by the app (dashboard + screen view).
+export { default as HostActivityCard } from "./components/host-activity-card.component.js";
+
+//# sourceMappingURL=plugin.js.map

package/src/lib/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/workflows/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiSitemap } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nimport { HostActivityCard } from './components/host-activity-card.component'\nimport { WORKFLOWS_CONSOLE_SECTIONS } from './components/workflows-console-sections'\nimport { registerPluginZone } from '@aglyn/aglyn/plugin-manager/plugin-zones'\nimport { WORKFLOW_USAGE_ZONE } from './components/workflow-zones'\nimport { BUNDLE_ID } from './constants/bundle-common'\n\n/** Code-split: the Automation console page only loads when opened. */\nconst WorkflowsConsolePage = lazy(\n  () => import('./components/workflows-console-page'),\n)\n\n/**\n * Workflows feature plugin (AGL-395). Console-only — workflows, actions,\n * and webhooks run server-side (event pipelines, `/api/hooks`), not through\n * a canvas element, so there is no UI bundle. The console half declares the\n * Automation nav + page through the ConsoleExtension registry, gated by the\n * `workflows` entitlement (the Actions/Webhooks tabs run their own per-plan\n * checks off the passed `org`). Where a workflow is used is asked of the\n * platform's scan and drawn in a zone this plugin hosts.\n *\n * `pluginId`, `featureFlag` and `navTabId` all still read `workflows`: they\n * are stored — an org's enabled-plugin ids, the plan's entitlement flags, the\n * Remote Config release flag — and a section's name is not a reason to orphan\n * them. Only what a reader sees carries the new name.\n */\nexport function registerWorkflowsConsole(): void {\n  registerPluginZone(\n    {\n      zone: WORKFLOW_USAGE_ZONE,\n      label: 'Where a workflow is used',\n      surface: 'console',\n      description:\n        'On the Automation page, after a reader asks where a workflow is used. A widget here lays out the scan the page already ran; it is handed the site, the answer and a way to close, and it writes nothing.',\n    },\n    // Named, because a spec calls this registrar without the loader.\n    { pluginId: BUNDLE_ID },\n  )\n  Aglyn.registerConsoleExtension({\n    // Host activity feed (AGL-419): rendered by the shell's\n    // 'hostActivity' widget slot (dashboard + editor view page).\n    widgets: [\n      {\n        slot: 'hostActivity',\n        widgetId: 'workflows-host-activity',\n        title: 'Recent Activity',\n        Component: HostActivityCard,\n      },\n    ],\n    pluginId: BUNDLE_ID,\n    displayName: 'Automation',\n    featureFlag: 'workflows',\n    navItems: [\n      {\n        label: 'Automation',\n        // Workflows, Actions and Webhooks are the tabs INSIDE this section, so\n        // the section is named for what they have in common. `/workflows` —\n        // the address before the section had its own name — is redirected here\n        // by the console (see `Route.HOST_WORKFLOWS`).\n        href: '/automation',\n        // Sections as ROUTES (AGL-2501): each is a real URL the shell\n        // resolves and gates, so the page mounts the one being read.\n        sections: WORKFLOWS_CONSOLE_SECTIONS,\n        // Reuse the existing release-flag nav-tab so staff-preview gating is\n        // unchanged now that the tab comes from the plugin (AGL-395).\n        navTabId: 'nav-tab-workflows',\n        icon: { path: mdiSitemap.path },\n        header: {\n          title: 'Automation',\n          icon: { path: mdiSitemap.path },\n          docsTopic: 'workflows',\n        },\n        Component: WorkflowsConsolePage,\n      },\n    ],\n  })\n}\n\n// Activity feed consumed directly by the app (dashboard + screen view).\nexport { default as HostActivityCard } from './components/host-activity-card.component'\nexport type { HostActivityCardProps } from './components/host-activity-card.component'\n"],"names":["Aglyn","mdiSitemap","lazy","HostActivityCard","WORKFLOWS_CONSOLE_SECTIONS","registerPluginZone","WORKFLOW_USAGE_ZONE","BUNDLE_ID","WorkflowsConsolePage","registerWorkflowsConsole","zone","label","surface","description","pluginId","registerConsoleExtension","widgets","slot","widgetId","title","Component","displayName","featureFlag","navItems","href","sections","navTabId","icon","path","header","docsTopic","default"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,IAAI,QAAQ,QAAO;AAC5B,SAASC,gBAAgB,QAAQ,+CAA2C;AAC5E,SAASC,0BAA0B,QAAQ,6CAAyC;AACpF,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,mBAAmB,QAAQ,iCAA6B;AACjE,SAASC,SAAS,QAAQ,+BAA2B;AAErD,oEAAoE,GACpE,MAAMC,uBAAuBN,KAC3B,IAAM,MAAM,CAAC;AAGf;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASO;IACdJ,mBACE;QACEK,MAAMJ;QACNK,OAAO;QACPC,SAAS;QACTC,aACE;IACJ,GACA,iEAAiE;IACjE;QAAEC,UAAUP;IAAU;IAExBP,MAAMe,wBAAwB,CAAC;QAC7B,wDAAwD;QACxD,6DAA6D;QAC7DC,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVC,OAAO;gBACPC,WAAWjB;YACb;SACD;QACDW,UAAUP;QACVc,aAAa;QACbC,aAAa;QACbC,UAAU;YACR;gBACEZ,OAAO;gBACP,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,+CAA+C;gBAC/Ca,MAAM;gBACN,8DAA8D;gBAC9D,6DAA6D;gBAC7DC,UAAUrB;gBACV,qEAAqE;gBACrE,8DAA8D;gBAC9DsB,UAAU;gBACVC,MAAM;oBAAEC,MAAM3B,WAAW2B,IAAI;gBAAC;gBAC9BC,QAAQ;oBACNV,OAAO;oBACPQ,MAAM;wBAAEC,MAAM3B,WAAW2B,IAAI;oBAAC;oBAC9BE,WAAW;gBACb;gBACAV,WAAWZ;YACb;SACD;IACH;AACF;AAEA,wEAAwE;AACxE,SAASuB,WAAW5B,gBAAgB,QAAQ,+CAA2C"}

package/src/lib/server-automation-drafts.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type HostAction, type HostActionStepType } from '@aglyn/aglyn/app-utils/actions';
+import { type PluginDraftCheck, type PluginResourceDraftWriter } from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts';
+/**
+ * AN AUTOMATION ANOTHER PLUGIN ASKS FOR (AGL-2919).
+ *
+ * The draft writer this plugin registers for the `automation` resource on the
+ * core's resource-drafts seam. A plugin that produces an automation — a
+ * generator working from a description, an importer bringing flows over from
+ * another tool — asks for the writer by name and gets this plugin's rules,
+ * never a copy of them:
+ *
+ *  - THE DOCUMENT is `hosts/{hostId}/actions/{id}` in the stored shape the
+ *    Actions editor saves (`hostActionDocument`), with only the fields each
+ *    step type holds. It is listed on the Automation page's Actions, opens in
+ *    that editor, and runs through the same executor as one a person made.
+ *  - IT IS OFF. A draft is written `enabled: false` whatever the caller sent,
+ *    so nothing it describes runs until a person switches it on.
+ *  - THE SCHEMA is the editor's own validator, `validateHostAction`, which the
+ *    executor's writers share. A placeholder the draft could not fill — a
+ *    bracketed list name, a bracketed condition value — passes it, because it
+ *    is a value a person replaces, and the facts name every one.
+ *  - THE ROOM is the flat platform cap on live actions, counted inside the
+ *    transaction with the arithmetic `/api/hosts/resources` uses.
+ *  - THE ROLE is the resources route's: a member who may write the site's
+ *    content. THE PLAN is the Actions editor's: the `actions` entitlement.
+ *
+ * Nothing is enabled, sent or run, and the writer touches the one new document.
+ */
+type Firestore = FirebaseFirestore.Firestore;
+/** The resource name this writer is registered under. */
+export declare const AUTOMATION_DRAFT_RESOURCE = "automation";
+/** The longest name the Actions editor stores. */
+export declare const AUTOMATION_DRAFT_NAME_MAX_CHARS = 60;
+/** A draft's name when the caller asks for none. */
+export declare const AUTOMATION_DRAFT_DEFAULT_NAME = "New automation";
+/** The resources route's refusal for a member who may not write the site. */
+export declare const AUTOMATION_DRAFT_ROLE_REFUSAL = "Editing requires the editor role";
+/** What a person is told when their plan has no actions builder. It names the page that sells one. */
+export declare const AUTOMATION_DRAFT_PLAN_REFUSAL = "Automations are not included on this workspace\u2019s plan. Upgrade in Billing to build them.";
+/** The resources route's refusal at the cap. */
+export declare const AUTOMATION_DRAFT_LIMIT_REFUSAL: string;
+/**
+ * The fields each step type holds, besides `type` and the step's own `when`.
+ * Total over the step types, so a type the model gains is a compile error here
+ * until its fields are named, rather than a draft that silently drops them.
+ */
+export declare const AUTOMATION_STEP_FIELDS: Readonly<Record<HostActionStepType, readonly string[]>>;
+export type AutomationDraftContentRead = {
+    ok: true;
+    action: HostAction;
+} | {
+    ok: false;
+    problems: string[];
+};
+/**
+ * What a caller sends as `content` — `{ action }` — read into the action this
+ * writer would store: the trigger's and each step's own fields and nothing
+ * else, named, OFF, and held to the editor's validator.
+ */
+export declare function readAutomationDraftContent(content: Readonly<Record<string, unknown>>): AutomationDraftContentRead;
+/** Whether content is an automation this site could store: well-formed, off, and valid. */
+export declare function checkAutomationDraftContent(content: Readonly<Record<string, unknown>>): PluginDraftCheck;
+export interface AutomationDraftWriterDeps {
+    /** The Admin SDK handle; specs hand in a double. */
+    firestore?: () => Firestore;
+}
+export declare function createAutomationDraftWriter(deps?: AutomationDraftWriterDeps): PluginResourceDraftWriter;
+export declare const automationDraftWriter: PluginResourceDraftWriter;
+/**
+ * Registers the writer; the console surface calls it, since only the console
+ * runs AI jobs (AGL-3026). Idempotent: a second call replaces the first.
+ */
+export declare function registerAutomationDraftWriter(): void;
+export {};

package/src/lib/server-automation-drafts.js

@@ -0,0 +1,429 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { ACTIONS_MAX_PER_HOST, hostActionDocument, validateHostAction } from "@aglyn/aglyn/app-utils/actions";
+import { automationPlaceholders } from "@aglyn/aglyn/app-utils/automation-placeholders";
+import { hostRoleCanWrite } from "@aglyn/aglyn/app-utils/organizations";
+import { checkEntitlement } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { registerPluginResourceDraftWriter } from "@aglyn/aglyn/plugin-manager/plugin-resource-drafts";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+/** The resource name this writer is registered under. */ export const AUTOMATION_DRAFT_RESOURCE = 'automation';
+/** The longest name the Actions editor stores. */ export const AUTOMATION_DRAFT_NAME_MAX_CHARS = 60;
+/** A draft's name when the caller asks for none. */ export const AUTOMATION_DRAFT_DEFAULT_NAME = 'New automation';
+/** The resources route's refusal for a member who may not write the site. */ export const AUTOMATION_DRAFT_ROLE_REFUSAL = 'Editing requires the editor role';
+/** What a person is told when their plan has no actions builder. It names the page that sells one. */ export const AUTOMATION_DRAFT_PLAN_REFUSAL = 'Automations are not included on this workspace’s plan. Upgrade in Billing to build them.';
+/** The resources route's refusal at the cap. */ export const AUTOMATION_DRAFT_LIMIT_REFUSAL = `interactions and actions are capped at ${ACTIONS_MAX_PER_HOST} per site — ` + 'delete some to make room';
+/** A trigger bound to one element, which makes an action an interaction of its page. */ const LEAF_SELECTOR = /^\[data-aglyn="leaf:.+"\]$/;
+/**
+ * The fields each step type holds, besides `type` and the step's own `when`.
+ * Total over the step types, so a type the model gains is a compile error here
+ * until its fields are named, rather than a draft that silently drops them.
+ */ export const AUTOMATION_STEP_FIELDS = {
+    runWorkflow: [
+        'workflowId',
+        'workflowName'
+    ],
+    siteAlert: [
+        'message',
+        'severity'
+    ],
+    customEvent: [
+        'eventName'
+    ],
+    datasetAppend: [
+        'datasetId',
+        'datasetName'
+    ],
+    webhookPost: [
+        'webhookId',
+        'webhookName'
+    ],
+    showOverlay: [
+        'overlayId',
+        'overlayName'
+    ],
+    stickyNav: [
+        'selector'
+    ],
+    addClass: [
+        'selector',
+        'className'
+    ],
+    removeClass: [
+        'selector',
+        'className'
+    ],
+    toggleClass: [
+        'selector',
+        'className'
+    ],
+    showElement: [
+        'selector',
+        'delayMs',
+        'dismissOn'
+    ],
+    hideElement: [
+        'selector',
+        'delayMs'
+    ],
+    toggleElement: [
+        'selector',
+        'delayMs',
+        'dismissOn'
+    ],
+    setAttribute: [
+        'selector',
+        'name',
+        'value'
+    ],
+    removeAttribute: [
+        'selector',
+        'name'
+    ],
+    scrollTo: [
+        'selector',
+        'behavior',
+        'offsetPx'
+    ],
+    playVideo: [
+        'selector'
+    ],
+    openDrawer: [
+        'drawerNodeId'
+    ],
+    closeDrawer: [
+        'drawerNodeId'
+    ],
+    toggleDrawer: [
+        'drawerNodeId'
+    ],
+    openMenu: [
+        'menuNodeId'
+    ],
+    closeMenu: [
+        'menuNodeId'
+    ],
+    toggleMenu: [
+        'menuNodeId'
+    ],
+    showHtml: [
+        'html'
+    ],
+    runJs: [
+        'code'
+    ],
+    redirect: [
+        'url',
+        'screenId'
+    ],
+    trackGaEvent: [
+        'eventName',
+        'params'
+    ],
+    sendEmail: [
+        'subject',
+        'body',
+        'toField',
+        'topicId'
+    ],
+    notifyAdmins: [
+        'title',
+        'body'
+    ],
+    enrollList: [
+        'listId',
+        'listName'
+    ],
+    updateDataset: [
+        'datasetId',
+        'datasetName'
+    ],
+    assignCampaign: [
+        'campaignId',
+        'campaignName'
+    ],
+    wait: [
+        'delayMinutes'
+    ],
+    waitForEvent: [
+        'eventName',
+        'timeoutMinutes'
+    ],
+    exitFlow: [],
+    setContactStage: [
+        'lifecycleStage'
+    ],
+    addContactTag: [
+        'tag'
+    ],
+    assignContactOwner: [
+        'ownerUid',
+        'ownerEmail',
+        'roundRobin'
+    ],
+    createCrmTask: [
+        'title',
+        'kind',
+        'dueInDays',
+        'assigneeUid',
+        'assigneeEmail'
+    ],
+    logCrmActivity: [
+        'kind',
+        'body'
+    ]
+};
+/** The trigger keys an automation stores. */ const TRIGGER_FIELDS = [
+    'event',
+    'filter',
+    'conditions',
+    'combinator',
+    'selector',
+    'threshold',
+    'pathPattern',
+    'oncePerVisitor',
+    'oncePerSession',
+    'cooldownMinutes',
+    'everyTime'
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** The keys of `source` that `keys` names and that hold something. */ function picked(source, keys) {
+    const out = {};
+    for (const key of keys){
+        if (source[key] !== undefined && source[key] !== null) out[key] = source[key];
+    }
+    return out;
+}
+function conditionOf(value) {
+    if (!isRecord(value)) return null;
+    return picked(value, [
+        'field',
+        'op',
+        'value'
+    ]);
+}
+/**
+ * What a caller sends as `content` — `{ action }` — read into the action this
+ * writer would store: the trigger's and each step's own fields and nothing
+ * else, named, OFF, and held to the editor's validator.
+ */ export function readAutomationDraftContent(content) {
+    var _raw_name;
+    const raw = content['action'];
+    if (!isRecord(raw)) return {
+        ok: false,
+        problems: [
+            'The draft holds no automation'
+        ]
+    };
+    const trigger = raw['trigger'];
+    const steps = raw['steps'];
+    if (!isRecord(trigger)) return {
+        ok: false,
+        problems: [
+            'Pick a trigger event'
+        ]
+    };
+    if (!Array.isArray(steps)) return {
+        ok: false,
+        problems: [
+            'Add at least one step'
+        ]
+    };
+    const problems = [];
+    const knownTypes = new Set(Object.keys(AUTOMATION_STEP_FIELDS));
+    const cleanSteps = [];
+    steps.forEach((step, index)=>{
+        const type = isRecord(step) ? step['type'] : undefined;
+        if (typeof type !== 'string' || !knownTypes.has(type)) {
+            problems.push(`Step ${index + 1}: not a step the Actions editor offers`);
+            return;
+        }
+        const source = step;
+        const when = isRecord(source['when']) ? _extends({
+            conditions: (Array.isArray(source['when']['conditions']) ? source['when']['conditions'] : []).map(conditionOf).filter((clause)=>clause !== null)
+        }, typeof source['when']['combinator'] === 'string' ? {
+            combinator: source['when']['combinator']
+        } : {}) : null;
+        cleanSteps.push(_extends({
+            type
+        }, picked(source, AUTOMATION_STEP_FIELDS[type]), when && when.conditions.length ? {
+            when
+        } : {}));
+    });
+    const cleanTrigger = picked(trigger, TRIGGER_FIELDS);
+    if (Array.isArray(cleanTrigger['conditions'])) {
+        cleanTrigger['conditions'] = cleanTrigger['conditions'].map(conditionOf).filter((clause)=>clause !== null);
+    }
+    // An element's own interaction belongs to the page that holds the element,
+    // and is authored there; the Actions list does not show one.
+    if (typeof cleanTrigger['selector'] === 'string' && LEAF_SELECTOR.test(cleanTrigger['selector'])) {
+        problems.push('An interaction on one element is set up on that element, not as an automation');
+    }
+    const name = String((_raw_name = raw['name']) != null ? _raw_name : '').replace(/\s+/g, ' ').trim().slice(0, AUTOMATION_DRAFT_NAME_MAX_CHARS);
+    const action = {
+        name: name || AUTOMATION_DRAFT_DEFAULT_NAME,
+        trigger: cleanTrigger,
+        steps: cleanSteps,
+        enabled: false
+    };
+    const invalid = validateHostAction(action);
+    if (invalid) problems.push(invalid);
+    return problems.length ? {
+        ok: false,
+        problems
+    } : {
+        ok: true,
+        action
+    };
+}
+/** What the writer reports about an automation beyond its identity. */ function factsOf(action) {
+    var _ref, _action_steps;
+    var _action_trigger;
+    return {
+        event: (_ref = (_action_trigger = action.trigger) == null ? void 0 : _action_trigger.event) != null ? _ref : '',
+        steps: ((_action_steps = action.steps) != null ? _action_steps : []).length,
+        enabled: action.enabled === true,
+        placeholders: automationPlaceholders(action).length
+    };
+}
+/** Whether content is an automation this site could store: well-formed, off, and valid. */ export function checkAutomationDraftContent(content) {
+    const read = readAutomationDraftContent(content);
+    return read.ok === false ? read : {
+        ok: true,
+        facts: factsOf(read.action)
+    };
+}
+function recordOf(snapshot) {
+    var _snapshot_data, _data_name;
+    const data = (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {};
+    return {
+        id: snapshot.id,
+        name: String((_data_name = data.name) != null ? _data_name : ''),
+        versionId: null,
+        facts: factsOf(data)
+    };
+}
+function roleRefusal(host, uid) {
+    var _host_get;
+    const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[uid];
+    return hostRoleCanWrite(role) ? null : {
+        status: 403,
+        error: AUTOMATION_DRAFT_ROLE_REFUSAL
+    };
+}
+function planRefusal(org) {
+    return checkEntitlement(org, 'actions') ? null : {
+        status: 403,
+        error: AUTOMATION_DRAFT_PLAN_REFUSAL
+    };
+}
+/** The live actions the site holds: a soft-deleted one frees its slot. */ function liveCount(rows) {
+    return rows.docs.filter((row)=>row.get('deletedAt') == null).length;
+}
+function roomRefusal(live) {
+    return live >= ACTIONS_MAX_PER_HOST ? {
+        status: 403,
+        error: AUTOMATION_DRAFT_LIMIT_REFUSAL
+    } : null;
+}
+export function createAutomationDraftWriter(deps = {}) {
+    var _deps_firestore;
+    const firestore = (_deps_firestore = deps.firestore) != null ? _deps_firestore : ()=>firebaseAdmin.app().firestore();
+    return {
+        refusal: async (context)=>{
+            var _ref, _roleRefusal;
+            const hostRef = firestore().collection('hosts').doc(context.hostId);
+            const host = await hostRef.get();
+            if (!host.exists) return {
+                status: 404,
+                error: 'Unknown site'
+            };
+            return (_ref = (_roleRefusal = roleRefusal(host, context.uid)) != null ? _roleRefusal : planRefusal(context.org)) != null ? _ref : roomRefusal(liveCount(await hostRef.collection('actions').select('deletedAt').get()));
+        },
+        check: (content)=>checkAutomationDraftContent(content),
+        read: async ({ hostId, id })=>{
+            const snapshot = await firestore().collection('hosts').doc(hostId).collection('actions').doc(id).get();
+            return snapshot.exists ? recordOf(snapshot) : null;
+        },
+        write: async (request)=>{
+            var _request_name;
+            const read = readAutomationDraftContent(request.content);
+            if (read.ok === false) return {
+                ok: false,
+                status: 400,
+                error: read.problems[0]
+            };
+            const db = firestore();
+            const hostRef = db.collection('hosts').doc(request.hostId);
+            const actionRef = hostRef.collection('actions').doc(request.id);
+            const name = String((_request_name = request.name) != null ? _request_name : '').replace(/\s+/g, ' ').trim().slice(0, AUTOMATION_DRAFT_NAME_MAX_CHARS) || read.action.name;
+            const action = _extends({}, read.action, {
+                name,
+                enabled: false,
+                recipe: null
+            });
+            return db.runTransaction(async (tx)=>{
+                var _ref, _roleRefusal;
+                // Every read before any write, which Firestore requires.
+                const [host, existing, rows] = await Promise.all([
+                    tx.get(hostRef),
+                    tx.get(actionRef),
+                    tx.get(hostRef.collection('actions').select('deletedAt'))
+                ]);
+                if (!host.exists) return {
+                    ok: false,
+                    status: 404,
+                    error: 'Unknown site'
+                };
+                if (existing.exists) return _extends({
+                    ok: true,
+                    replayed: true
+                }, recordOf(existing));
+                const refusal = (_ref = (_roleRefusal = roleRefusal(host, request.uid)) != null ? _roleRefusal : planRefusal(request.org)) != null ? _ref : roomRefusal(liveCount(rows));
+                if (refusal) return _extends({
+                    ok: false
+                }, refusal);
+                tx.create(actionRef, _extends({}, hostActionDocument(action), {
+                    createdAt: request.now,
+                    updatedAt: request.now,
+                    createdBy: request.uid
+                }));
+                return {
+                    ok: true,
+                    replayed: false,
+                    id: request.id,
+                    name,
+                    versionId: null,
+                    facts: factsOf(action)
+                };
+            });
+        }
+    };
+}
+export const automationDraftWriter = createAutomationDraftWriter();
+/**
+ * Registers the writer; the console surface calls it, since only the console
+ * runs AI jobs (AGL-3026). Idempotent: a second call replaces the first.
+ */ export function registerAutomationDraftWriter() {
+    registerPluginResourceDraftWriter(AUTOMATION_DRAFT_RESOURCE, automationDraftWriter, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=server-automation-drafts.js.map