@aglyn/tenant-data-admin 1.0.0-beta.143

package/src/lib/server/domain-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/domain-provider.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * How a hostname gets served — the one seam the hosting vendor lives behind.\n *\n * ## The lock-in this removes\n *\n * Attaching a name was `POST https://api.vercel.com/...`, written out five\n * times across the console routes and this library. Every workspace subdomain\n * and every customer's custom domain therefore required a Vercel project and a\n * Vercel token, and a self-hosted install had no way to register a name at all\n * — it got `skipped` and a console that advertised a URL nothing resolved.\n * \"Bring your own Firebase, run it on Docker\" cannot be true while the way a\n * site becomes reachable is one vendor's API.\n *\n * So the vendor is a driver now. The three operations a name needs are the\n * whole contract, and an operator picks — or writes — the implementation:\n *\n * | provider   | for                                                       |\n * |------------|-----------------------------------------------------------|\n * | `vercel`   | Aglyn's own hosting, and anyone else on Vercel             |\n * | `wildcard` | a container behind a proxy with `*.example.com` DNS        |\n * | `webhook`  | anything else — Caddy, Traefik, cert-manager, a registrar  |\n * | `none`     | names are somebody else's job entirely                     |\n *\n * ## Why a webhook is the extension point and not a module path\n *\n * The obvious \"supply your own layer\" is a file path the app imports at boot.\n * It does not survive the product: both apps are bundled by Next, so a path\n * resolved at runtime is not in the bundle, and an operator running the\n * published image has no build step to add one to. A webhook needs no rebuild,\n * works from the shipped image, and is the same shape whether the operator's\n * DNS lives in Caddy's admin API, a Traefik provider, or a shell script behind\n * `nc`. The cost is one HTTP hop on an operation that already makes one.\n *\n * ## The contract every driver owes\n *\n * 1. **Never throw.** A caller creates orgs and renders cards with these\n *    results; an exception takes down an org creation over a DNS API. Return\n *    `failed` — or `skipped`, which is not a failure.\n * 2. **Idempotent.** `attach` on a name already attached is `already-exists`,\n *    which is success. Reconcile passes and create paths both run.\n * 3. **`skipped` means \"not my job\", not \"it went wrong\".** It is what an\n *    unconfigured driver returns, and callers treat it as neither success nor\n *    failure.\n * 4. **`unknown` status is not evidence of a problem.** {@link domainStateServes}\n *    returns true for it deliberately: a probe that could not answer must not\n *    strand every domain on a deployment whose provider has no status API.\n */\n\n/**\n * Which deployment a name should reach.\n *\n * Two, because Aglyn runs two apps: the console at `app.<domain>` with its\n * per-workspace subdomains, and the tenant runtime that serves published\n * sites and every customer's own domain. On Vercel they are separate projects;\n * behind a proxy they are separate upstreams; for a webhook they are a field.\n */\nexport type DomainScope = 'console' | 'tenant'\n\nexport type DomainOutcome =\n  | 'attached'\n  | 'detached'\n  | 'already-exists'\n  | 'not-found'\n  | 'skipped'\n  | 'failed'\n\nexport interface DomainResult {\n  outcome: DomainOutcome\n  domain: string\n  /** Why, when the outcome alone does not say it. Never user-facing prose. */\n  detail?: string\n}\n\nexport interface DomainAttachOptions {\n  /**\n   * Register the name as a REDIRECT to this bare hostname rather than serving\n   * the app on it — how a renamed workspace keeps its old slug working.\n   *\n   * A driver that cannot express a redirect returns `skipped` rather than\n   * attaching a serving name, because the two are not interchangeable: a\n   * serving twin is a second live copy of the console on a name that was\n   * supposed to forward.\n   */\n  redirectTo?: string\n}\n\nexport type ProjectDomainState =\n  | 'serving'\n  | 'certificate-pending'\n  | 'ownership-pending'\n  | 'dns-misconfigured'\n  | 'not-attached'\n  | 'skipped'\n  | 'unknown'\n\n/** One challenge record a provider wants before it will serve the name. */\nexport interface ProjectDomainVerification {\n  type: string\n  domain: string\n  value: string\n  reason?: string\n}\n\nexport interface ProjectDomainStatus {\n  state: ProjectDomainState\n  domain: string\n  /** Present when `state` is `ownership-pending`; what to add at the registrar. */\n  verification: ProjectDomainVerification[]\n  /**\n   * Records answering for this name that are not ours, as the provider sees\n   * them. A non-empty list on an otherwise-serving domain is the shadowing\n   * case: it resolves correctly some of the time.\n   */\n  conflicts: { type?: string; name?: string; value?: string }[]\n  /** Why, when the state alone does not say it. */\n  detail?: string\n}\n\nexport interface DomainProvider {\n  /** Stable id, used in this module's log lines. Never a display name. */\n  readonly id: string\n  /** Whether this deployment can actually register names for `scope`. */\n  configured(scope: DomainScope): boolean\n  attach(\n    scope: DomainScope,\n    domain: string,\n    options?: DomainAttachOptions,\n  ): Promise<DomainResult>\n  detach(scope: DomainScope, domain: string): Promise<DomainResult>\n  status(scope: DomainScope, domain: string): Promise<ProjectDomainStatus>\n}\n\n/**\n * Whether a probed state means visitors may be sent to the domain (AGL-2011).\n *\n * The ONE definition of \"serving\", because it has to be. The predicate lived\n * inline in `/api/domains/attach` and again in\n * `/api/admin/finish-domain-attachments`, and the sweeper's own comment says\n * why that is dangerous: a sweeper using a looser definition than the door it\n * completes for re-introduces the bug that door was fixed to avoid.\n *\n * `certificate-pending` is NOT serving (AGL-1996): the name is accepted and\n * routed but no certificate exists yet, so the destination answers with a TLS\n * error. `unknown` and `skipped` ARE, deliberately — a status probe that could\n * not answer is not evidence of a problem, and treating it as one would strand\n * every domain on a deployment whose provider has no status API to ask.\n */\nexport function domainStateServes(state: ProjectDomainState): boolean {\n  return (\n    state !== 'not-attached' &&\n    state !== 'ownership-pending' &&\n    state !== 'dns-misconfigured' &&\n    state !== 'certificate-pending'\n  )\n}\n\nexport function domainStatus(\n  domain: string,\n  state: ProjectDomainState,\n  extra: Partial<ProjectDomainStatus> = {},\n): ProjectDomainStatus {\n  return { state, domain, verification: [], conflicts: [], ...extra }\n}\n\nconst HOSTNAME_PATTERN =\n  /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/\n\nexport function normalizeHost(input: string): string {\n  return String(input ?? '')\n    .trim()\n    .toLowerCase()\n    .replace(/\\.$/, '')\n}\n\n/**\n * A redirect target reduced to a BARE HOSTNAME, or `null` if it is not one.\n *\n * Vercel rejects `https://aglyn.com` here with `bad_request`, whose message\n * reads \"Unable to redirect to https://…, because that domain is not added to\n * the project\" — it blames the target for being absent when the format was\n * wrong. That misreading is why AGL-1273's redirect shipped looking correct\n * and never once succeeded, and survived weeks before AGL-1365 caught it.\n *\n * Enforced at the seam rather than trusted per driver, so a webhook operator\n * receives the same shape Vercel demands and no driver has to re-derive it.\n */\nexport function redirectHostname(target: string): string | null {\n  const raw = normalizeHost(target)\n  if (!raw) return null\n  const host = raw\n    .replace(/^[a-z][a-z0-9+.-]*:\\/\\//, '')\n    .split(/[/?#]/)[0]\n    .replace(/\\.$/, '')\n  return HOSTNAME_PATTERN.test(host) ? host : null\n}\n\n/**\n * Ceiling on any provider call (AGL-1136).\n *\n * These are awaited — org creation and rename wait for them — so an\n * unresponsive DNS API would otherwise hang the operation until the platform\n * killed the function, turning \"the subdomain is not attached yet\" into \"the\n * workspace could not be created\". The whole point of the call being\n * best-effort is that it can lose without taking anything with it, and a\n * promise with no timeout cannot lose.\n */\nexport const DOMAIN_PROVIDER_TIMEOUT_MS = 5000\n\n/** `AbortSignal.timeout`, without assuming the runtime has it. */\nexport function domainDeadline(): AbortSignal | undefined {\n  try {\n    return AbortSignal.timeout(DOMAIN_PROVIDER_TIMEOUT_MS)\n  } catch {\n    return undefined\n  }\n}\n\n/** Whether a rejection was our own deadline rather than the network's. */\nexport function abortedDetail(error: unknown): 'timeout' | 'network' {\n  const name = (error as { name?: string })?.name\n  return name === 'TimeoutError' || name === 'AbortError' ? 'timeout' : 'network'\n}\n\n/**\n * The driver that registers nothing.\n *\n * Not an error state. A deployment can legitimately have names handled\n * entirely outside the product — a platform team's own DNS pipeline, or an\n * install that only ever uses path routing — and the correct behaviour there\n * is silence, not a failure logged on every signup forever.\n */\nexport const NO_DOMAIN_PROVIDER: DomainProvider = {\n  id: 'none',\n  configured: () => false,\n  attach: async (_scope, domain) => ({ outcome: 'skipped', domain }),\n  detach: async (_scope, domain) => ({ outcome: 'skipped', domain }),\n  status: async (_scope, domain) => domainStatus(domain, 'skipped'),\n}\n\nexport type DomainProviderId = 'vercel' | 'wildcard' | 'webhook' | 'none'\n\n/**\n * The configured provider id, or `null` to let {@link domainProvider} infer it.\n *\n * An explicit value always wins, including `none` — an operator switching a\n * driver off while its credentials are still in the environment means it.\n */\nfunction requestedProviderId(): DomainProviderId | null {\n  const raw = String(process.env.AGLYN_DOMAIN_PROVIDER ?? '')\n    .trim()\n    .toLowerCase()\n  if (!raw) return null\n  if (\n    raw === 'vercel' ||\n    raw === 'wildcard' ||\n    raw === 'webhook' ||\n    raw === 'none'\n  ) {\n    return raw\n  }\n  console.error(\n    `[domain-provider] unknown AGLYN_DOMAIN_PROVIDER \"${raw}\" — falling back ` +\n      'to detection. Valid values: vercel, wildcard, webhook, none.',\n  )\n  return null\n}\n\nlet cached: { key: string; provider: DomainProvider } | null = null\n\n/**\n * The provider this deployment uses.\n *\n * ⚠️ Detection, when `AGLYN_DOMAIN_PROVIDER` is unset, deliberately only ever\n * selects `vercel` — never `wildcard`. Wildcard reports a name as SERVING\n * without checking anything, and inferring it from an apex an operator merely\n * configured would have the console advertise addresses that resolve nowhere\n * while showing a green chip. Claiming to serve a name is the operator's\n * assertion to make, so it takes their explicit setting.\n *\n * Memoized on the environment values it reads rather than once per process, so\n * a spec can change them between cases without a reset hook that production\n * would carry for nobody.\n */\nexport function domainProvider(): DomainProvider {\n  const requested = requestedProviderId()\n  const key = [\n    requested ?? '',\n    process.env.VERCEL_TOKEN ? '1' : '',\n    process.env.AGLYN_DOMAIN_WEBHOOK_URL ?? '',\n    process.env.AGLYN_DOMAIN_WILDCARD_SUFFIXES ?? '',\n    process.env.NEXT_PUBLIC_WORKSPACE_DOMAIN ?? '',\n    process.env.NEXT_PUBLIC_TENANT_DOMAIN ?? '',\n  ].join('\\x00')\n  if (cached?.key === key) return cached.provider\n\n  const provider = selectProvider(requested)\n  cached = { key, provider }\n  return provider\n}\n\nfunction selectProvider(requested: DomainProviderId | null): DomainProvider {\n  // Required lazily so a deployment pays for only the driver it uses, and so\n  // this module stays importable from an edge runtime that has no `fetch`\n  // credentials of its own.\n  switch (requested ?? (process.env.VERCEL_TOKEN ? 'vercel' : 'none')) {\n    case 'vercel':\n      return require('./domain-provider-vercel').VERCEL_DOMAIN_PROVIDER\n    case 'wildcard':\n      return require('./domain-provider-wildcard').wildcardDomainProvider()\n    case 'webhook':\n      return require('./domain-provider-webhook').webhookDomainProvider()\n    default:\n      return NO_DOMAIN_PROVIDER\n  }\n}\n"],"names":["domainStateServes","state","domainStatus","domain","extra","verification","conflicts","HOSTNAME_PATTERN","normalizeHost","input","String","trim","toLowerCase","replace","redirectHostname","target","raw","host","split","test","DOMAIN_PROVIDER_TIMEOUT_MS","domainDeadline","AbortSignal","timeout","undefined","abortedDetail","error","name","NO_DOMAIN_PROVIDER","id","configured","attach","_scope","outcome","detach","status","requestedProviderId","process","env","AGLYN_DOMAIN_PROVIDER","console","cached","domainProvider","requested","key","VERCEL_TOKEN","AGLYN_DOMAIN_WEBHOOK_URL","AGLYN_DOMAIN_WILDCARD_SUFFIXES","NEXT_PUBLIC_WORKSPACE_DOMAIN","NEXT_PUBLIC_TENANT_DOMAIN","join","provider","selectProvider","require","VERCEL_DOMAIN_PROVIDER","wildcardDomainProvider","webhookDomainProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CC,GAED;;;;;;;CAOC;AA6ED;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASA,kBAAkBC,KAAyB;IACzD,OACEA,UAAU,kBACVA,UAAU,uBACVA,UAAU,uBACVA,UAAU;AAEd;AAEA,OAAO,SAASC,aACdC,MAAc,EACdF,KAAyB,EACzBG,QAAsC,CAAC,CAAC;IAExC,OAAO;QAAEH;QAAOE;QAAQE,cAAc,EAAE;QAAEC,WAAW,EAAE;OAAKF;AAC9D;AAEA,MAAMG,mBACJ;AAEF,OAAO,SAASC,cAAcC,KAAa;IACzC,OAAOC,OAAOD,gBAAAA,QAAS,IACpBE,IAAI,GACJC,WAAW,GACXC,OAAO,CAAC,OAAO;AACpB;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,iBAAiBC,MAAc;IAC7C,MAAMC,MAAMR,cAAcO;IAC1B,IAAI,CAACC,KAAK,OAAO;IACjB,MAAMC,OAAOD,IACVH,OAAO,CAAC,2BAA2B,IACnCK,KAAK,CAAC,QAAQ,CAAC,EAAE,CACjBL,OAAO,CAAC,OAAO;IAClB,OAAON,iBAAiBY,IAAI,CAACF,QAAQA,OAAO;AAC9C;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMG,6BAA6B,KAAI;AAE9C,gEAAgE,GAChE,OAAO,SAASC;IACd,IAAI;QACF,OAAOC,YAAYC,OAAO,CAACH;IAC7B,EAAE,eAAM;QACN,OAAOI;IACT;AACF;AAEA,wEAAwE,GACxE,OAAO,SAASC,cAAcC,KAAc;IAC1C,MAAMC,OAAQD,yBAAD,AAACA,MAA6BC,IAAI;IAC/C,OAAOA,SAAS,kBAAkBA,SAAS,eAAe,YAAY;AACxE;AAEA;;;;;;;CAOC,GACD,OAAO,MAAMC,qBAAqC;IAChDC,IAAI;IACJC,YAAY,IAAM;IAClBC,QAAQ,OAAOC,QAAQ7B,SAAY,CAAA;YAAE8B,SAAS;YAAW9B;QAAO,CAAA;IAChE+B,QAAQ,OAAOF,QAAQ7B,SAAY,CAAA;YAAE8B,SAAS;YAAW9B;QAAO,CAAA;IAChEgC,QAAQ,OAAOH,QAAQ7B,SAAWD,aAAaC,QAAQ;AACzD,EAAC;AAID;;;;;CAKC,GACD,SAASiC;QACYC;IAAnB,MAAMrB,MAAMN,QAAO2B,qCAAAA,QAAQC,GAAG,CAACC,qBAAqB,YAAjCF,qCAAqC,IACrD1B,IAAI,GACJC,WAAW;IACd,IAAI,CAACI,KAAK,OAAO;IACjB,IACEA,QAAQ,YACRA,QAAQ,cACRA,QAAQ,aACRA,QAAQ,QACR;QACA,OAAOA;IACT;IACAwB,QAAQd,KAAK,CACX,CAAC,iDAAiD,EAAEV,IAAI,iBAAiB,CAAC,GACxE;IAEJ,OAAO;AACT;AAEA,IAAIyB,SAA2D;AAE/D;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC;QAKZL,uCACAA,6CACAA,2CACAA;IAPF,MAAMM,YAAYP;IAClB,MAAMQ,MAAM;QACVD,oBAAAA,YAAa;QACbN,QAAQC,GAAG,CAACO,YAAY,GAAG,MAAM;SACjCR,wCAAAA,QAAQC,GAAG,CAACQ,wBAAwB,YAApCT,wCAAwC;SACxCA,8CAAAA,QAAQC,GAAG,CAACS,8BAA8B,YAA1CV,8CAA8C;SAC9CA,4CAAAA,QAAQC,GAAG,CAACU,4BAA4B,YAAxCX,4CAA4C;SAC5CA,yCAAAA,QAAQC,GAAG,CAACW,yBAAyB,YAArCZ,yCAAyC;KAC1C,CAACa,IAAI,CAAC;IACP,IAAIT,CAAAA,0BAAAA,OAAQG,GAAG,MAAKA,KAAK,OAAOH,OAAOU,QAAQ;IAE/C,MAAMA,WAAWC,eAAeT;IAChCF,SAAS;QAAEG;QAAKO;IAAS;IACzB,OAAOA;AACT;AAEA,SAASC,eAAeT,SAAkC;IACxD,2EAA2E;IAC3E,wEAAwE;IACxE,0BAA0B;IAC1B,OAAQA,oBAAAA,YAAcN,QAAQC,GAAG,CAACO,YAAY,GAAG,WAAW;QAC1D,KAAK;YACH,OAAOQ,QAAQ,4BAA4BC,sBAAsB;QACnE,KAAK;YACH,OAAOD,QAAQ,8BAA8BE,sBAAsB;QACrE,KAAK;YACH,OAAOF,QAAQ,6BAA6BG,qBAAqB;QACnE;YACE,OAAO5B;IACX;AACF"}

package/src/lib/server/duplicate-activity.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The activity writer for a whole-resource copy (AGL-2936).
+ *
+ * One row per copy in the site's feed and one in the workspace's, both
+ * carrying the `<kind>.duplicated` code from the shared catalog so the feed
+ * translates it once and a filter on "duplicated" finds every kind's copies
+ * together. The row's target is the COPY — that is the document a reader
+ * wants to open from the feed — and the original is named in the free text
+ * beside it, because the target shape carries one id and the copy's is the
+ * one every deep link needs.
+ *
+ * A kind the activity unions have no member for files under `content`, the
+ * same classification the create routes give it: a persisted type no
+ * presenter branches on would render as an unlinked row.
+ */
+import { type DuplicableResourceKind } from '@aglyn/aglyn/app-utils/duplicate-resource';
+export interface ResourceDuplicatedActor {
+    uid: string;
+    email?: string | null;
+}
+export interface ResourceDuplicated {
+    orgId: string;
+    /** Absent for a workspace-level resource, which has no site feed. */
+    hostId?: string | null;
+    source: {
+        id: string;
+        name: string;
+    };
+    target: {
+        id: string;
+        name: string;
+        versionId?: string | null;
+    };
+}
+/** `<name> · from <source name>`, the only free text the row carries. */
+export declare function duplicatedTargetName(copy: ResourceDuplicated): string;
+/** `<kind>.duplicated` — a whole copy of a resource was made. */
+export declare function logResourceDuplicated(kind: DuplicableResourceKind, actor: ResourceDuplicatedActor, copy: ResourceDuplicated): Promise<void>;

package/src/lib/server/duplicate-activity.js

@@ -0,0 +1,67 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The activity writer for a whole-resource copy (AGL-2936).
+ *
+ * One row per copy in the site's feed and one in the workspace's, both
+ * carrying the `<kind>.duplicated` code from the shared catalog so the feed
+ * translates it once and a filter on "duplicated" finds every kind's copies
+ * together. The row's target is the COPY — that is the document a reader
+ * wants to open from the feed — and the original is named in the free text
+ * beside it, because the target shape carries one id and the copy's is the
+ * one every deep link needs.
+ *
+ * A kind the activity unions have no member for files under `content`, the
+ * same classification the create routes give it: a persisted type no
+ * presenter branches on would render as an unlinked row.
+ */ import { DUPLICATE_ACTIVITY_ACTIONS } from "@aglyn/aglyn/app-utils/duplicate-resource";
+import { logHostActivity, logOrgActivity } from "./organizations.js";
+/** The target type each kind's row is filed under, in both feeds. */ const TARGET_TYPE = {
+    screen: 'screen',
+    emailDesign: 'screen',
+    component: 'component',
+    layout: 'layout',
+    template: 'template',
+    workflow: 'workflow',
+    form: 'content',
+    emailTemplate: 'content',
+    campaign: 'content'
+};
+/** `<name> · from <source name>`, the only free text the row carries. */ export function duplicatedTargetName(copy) {
+    const target = copy.target.name.trim();
+    const source = copy.source.name.trim();
+    return source ? `${target} · from ${source}` : target;
+}
+/** `<kind>.duplicated` — a whole copy of a resource was made. */ export async function logResourceDuplicated(kind, actor, copy) {
+    var _actor_email;
+    const action = DUPLICATE_ACTIVITY_ACTIONS[kind];
+    const target = _extends({
+        type: TARGET_TYPE[kind],
+        id: copy.target.id,
+        name: duplicatedTargetName(copy)
+    }, copy.target.versionId ? {
+        versionId: copy.target.versionId
+    } : {});
+    const person = {
+        uid: actor.uid,
+        email: (_actor_email = actor.email) != null ? _actor_email : null
+    };
+    if (copy.hostId) await logHostActivity(copy.hostId, person, action, target);
+    await logOrgActivity(copy.orgId, person, action, target);
+}
+
+//# sourceMappingURL=duplicate-activity.js.map

package/src/lib/server/duplicate-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/duplicate-activity.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The activity writer for a whole-resource copy (AGL-2936).\n *\n * One row per copy in the site's feed and one in the workspace's, both\n * carrying the `<kind>.duplicated` code from the shared catalog so the feed\n * translates it once and a filter on \"duplicated\" finds every kind's copies\n * together. The row's target is the COPY — that is the document a reader\n * wants to open from the feed — and the original is named in the free text\n * beside it, because the target shape carries one id and the copy's is the\n * one every deep link needs.\n *\n * A kind the activity unions have no member for files under `content`, the\n * same classification the create routes give it: a persisted type no\n * presenter branches on would render as an unlinked row.\n */\n\nimport {\n  DUPLICATE_ACTIVITY_ACTIONS,\n  type DuplicableResourceKind,\n} from '@aglyn/aglyn/app-utils/duplicate-resource'\nimport {\n  logHostActivity,\n  logOrgActivity,\n  type HostActivityTarget,\n  type OrgActivityTarget,\n} from './organizations'\n\n/** The target type each kind's row is filed under, in both feeds. */\nconst TARGET_TYPE: Record<\n  DuplicableResourceKind,\n  Extract<OrgActivityTarget['type'], HostActivityTarget['type']>\n> = {\n  screen: 'screen',\n  emailDesign: 'screen',\n  component: 'component',\n  layout: 'layout',\n  template: 'template',\n  workflow: 'workflow',\n  form: 'content',\n  emailTemplate: 'content',\n  campaign: 'content',\n}\n\nexport interface ResourceDuplicatedActor {\n  uid: string\n  email?: string | null\n}\n\nexport interface ResourceDuplicated {\n  orgId: string\n  /** Absent for a workspace-level resource, which has no site feed. */\n  hostId?: string | null\n  source: { id: string; name: string }\n  target: { id: string; name: string; versionId?: string | null }\n}\n\n/** `<name> · from <source name>`, the only free text the row carries. */\nexport function duplicatedTargetName(copy: ResourceDuplicated): string {\n  const target = copy.target.name.trim()\n  const source = copy.source.name.trim()\n  return source ? `${target} · from ${source}` : target\n}\n\n/** `<kind>.duplicated` — a whole copy of a resource was made. */\nexport async function logResourceDuplicated(\n  kind: DuplicableResourceKind,\n  actor: ResourceDuplicatedActor,\n  copy: ResourceDuplicated,\n): Promise<void> {\n  const action = DUPLICATE_ACTIVITY_ACTIONS[kind]\n  const target = {\n    type: TARGET_TYPE[kind],\n    id: copy.target.id,\n    name: duplicatedTargetName(copy),\n    ...(copy.target.versionId ? { versionId: copy.target.versionId } : {}),\n  }\n  const person = { uid: actor.uid, email: actor.email ?? null }\n  if (copy.hostId) await logHostActivity(copy.hostId, person, action, target)\n  await logOrgActivity(copy.orgId, person, action, target)\n}\n"],"names":["DUPLICATE_ACTIVITY_ACTIONS","logHostActivity","logOrgActivity","TARGET_TYPE","screen","emailDesign","component","layout","template","workflow","form","emailTemplate","campaign","duplicatedTargetName","copy","target","name","trim","source","logResourceDuplicated","kind","actor","action","type","id","versionId","person","uid","email","hostId","orgId"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;CAcC,GAED,SACEA,0BAA0B,QAErB,4CAA2C;AAClD,SACEC,eAAe,EACfC,cAAc,QAGT,qBAAiB;AAExB,mEAAmE,GACnE,MAAMC,cAGF;IACFC,QAAQ;IACRC,aAAa;IACbC,WAAW;IACXC,QAAQ;IACRC,UAAU;IACVC,UAAU;IACVC,MAAM;IACNC,eAAe;IACfC,UAAU;AACZ;AAeA,uEAAuE,GACvE,OAAO,SAASC,qBAAqBC,IAAwB;IAC3D,MAAMC,SAASD,KAAKC,MAAM,CAACC,IAAI,CAACC,IAAI;IACpC,MAAMC,SAASJ,KAAKI,MAAM,CAACF,IAAI,CAACC,IAAI;IACpC,OAAOC,SAAS,GAAGH,OAAO,QAAQ,EAAEG,QAAQ,GAAGH;AACjD;AAEA,+DAA+D,GAC/D,OAAO,eAAeI,sBACpBC,IAA4B,EAC5BC,KAA8B,EAC9BP,IAAwB;QASgBO;IAPxC,MAAMC,SAAStB,0BAA0B,CAACoB,KAAK;IAC/C,MAAML,SAAS;QACbQ,MAAMpB,WAAW,CAACiB,KAAK;QACvBI,IAAIV,KAAKC,MAAM,CAACS,EAAE;QAClBR,MAAMH,qBAAqBC;OACvBA,KAAKC,MAAM,CAACU,SAAS,GAAG;QAAEA,WAAWX,KAAKC,MAAM,CAACU,SAAS;IAAC,IAAI,CAAC;IAEtE,MAAMC,SAAS;QAAEC,KAAKN,MAAMM,GAAG;QAAEC,KAAK,GAAEP,eAAAA,MAAMO,KAAK,YAAXP,eAAe;IAAK;IAC5D,IAAIP,KAAKe,MAAM,EAAE,MAAM5B,gBAAgBa,KAAKe,MAAM,EAAEH,QAAQJ,QAAQP;IACpE,MAAMb,eAAeY,KAAKgB,KAAK,EAAEJ,QAAQJ,QAAQP;AACnD"}

package/src/lib/server/duplicate-resource.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type DuplicableHostResourceKind } from '@aglyn/aglyn/app-utils/duplicate-resource';
+export interface DuplicateResourceOptions {
+    orgId: string;
+    hostId: string;
+    sourceId: string;
+    /** The name the copy takes; blank means `Copy of <source>`. */
+    name?: string | null;
+    /** The verified person making the copy. */
+    uid: string;
+    email?: string | null;
+    /**
+     * The owning org's document, when the caller already holds it; read
+     * here otherwise. The bands are resolved from it.
+     */
+    org?: Record<string, unknown> | null;
+    /**
+     * A client-minted key for this attempt, so a double click makes one copy
+     * and a retry of a finished attempt answers what the first did. A caller
+     * with no client behind it — the AI runtime — sends none and is not
+     * claimed.
+     */
+    attemptKey?: string | null;
+}
+export type DuplicateResourceResult = {
+    ok: true;
+    id: string;
+    /** The copy's first version, for the kinds that version. */
+    versionId: string | null;
+    name: string;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+/**
+ * Makes the copy. The caller has authenticated `uid` and verified that they
+ * may write content on `hostId`; this decides everything after that.
+ */
+export declare function duplicateResource(kind: DuplicableHostResourceKind, options: DuplicateResourceOptions): Promise<DuplicateResourceResult>;