@aglyn/tenant-data-admin 1.0.0-beta.230 → 1.0.0-beta.232

package/src/lib/server/content-entry-drafts.js

@@ -0,0 +1,307 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { hostCollectionKind } from "@aglyn/aglyn/app-utils/collection-kind";
+import { COLLECTIONS_MAX_PER_HOST, ENTRIES_MAX_PER_COLLECTION } from "@aglyn/aglyn/app-utils/collection-entries";
+import { entryHasByline } from "@aglyn/aglyn/app-utils/content-authors";
+import { entryTitleSearchFields } from "@aglyn/aglyn/app-utils/content-query-fields";
+import { hostRoleCanPublish, hostRoleCanWrite } from "@aglyn/aglyn/app-utils/organizations";
+/**
+ * A SITE'S POSTS WRITTEN ON A MEMBER'S BEHALF (AGL-3676).
+ *
+ * A blog is a core content collection — `hosts/{hostId}/collections/{id}`
+ * with `kind: 'content'` and a slug the tenant serves its listing at — and
+ * its posts are the collection's entries. The console makes both through two
+ * routes: `/api/hosts/collections` claims the slug inside a transaction and
+ * holds the per-site collection cap, and `/api/hosts/resources` creates an
+ * entry from its allow-list, under the per-collection cap, born a DRAFT.
+ *
+ * A server job that writes a site's first posts (the guided start's) needs
+ * the same writes without a browser's token, so they live here, in the lib
+ * both runtimes already share, under the same rules:
+ *
+ *  - THE ROLE is the member's on the site: one who may write its content
+ *    creates; one who may publish publishes. Refused in the routes' words.
+ *  - THE SLUG of a collection is claimed per host and per kind in the
+ *    transaction that creates it, and the collection cap is counted there.
+ *  - AN ENTRY keeps only the fields the resources route's allow-list keeps,
+ *    is counted against `ENTRIES_MAX_PER_COLLECTION`, and is stamped
+ *    `status: 'draft'` with its title's search keys — never sent published.
+ *  - PUBLISHING is a separate act, as it is in the console: it needs the
+ *    publish role and a byline (`entryHasByline`), and sets `publishedAt`.
+ *
+ * Every write is idempotent on the id its caller chose: asked again, it
+ * reports what it already wrote.
+ */ /** The fields an entry keeps: the resources route's `entry` allow-list. */ export const CONTENT_ENTRY_DRAFT_FIELDS = [
+    'title',
+    'slug',
+    'excerpt',
+    'body',
+    'coverImage',
+    'coverImageAlt',
+    'coverVideo',
+    'coverVideoDuration',
+    'seoTitle',
+    'seoDescription',
+    'authorName',
+    'categoryId',
+    'category',
+    'tags',
+    'authorId'
+];
+/** The routes' refusal for a member who may not write the site's content. */ export const CONTENT_DRAFT_ROLE_REFUSAL = 'Editing requires the editor role';
+/** The refusal for a member who may not publish it. */ export const CONTENT_PUBLISH_ROLE_REFUSAL = 'Publishing requires the publisher role';
+/** The collections route's refusal at the per-site cap. */ export const CONTENT_COLLECTIONS_FULL_REFUSAL = `This site holds the maximum of ${COLLECTIONS_MAX_PER_HOST} collections — delete one to make room`;
+/** The resources route's refusal at the per-collection cap. */ export const CONTENT_ENTRIES_FULL_REFUSAL = `A collection holds at most ${ENTRIES_MAX_PER_COLLECTION} entries — delete some to make room`;
+/** A collection slug the collections route accepts. */ const SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** The longest entry slug this writer mints from a title. */ export const CONTENT_ENTRY_SLUG_MAX = 80;
+/** A title as an entry slug: lowercase words joined by dashes. */ export function contentEntrySlug(title) {
+    const slug = title.normalize('NFKD').replace(/[̀-ͯ]/g, '').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, CONTENT_ENTRY_SLUG_MAX).replace(/-+$/g, '');
+    return slug || 'post';
+}
+function roleOf(host, uid) {
+    var _host_get;
+    return ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[uid];
+}
+/**
+ * The site's content collection under `id`, created when it does not exist:
+ * the first of `slugs` no other content collection of the site serves, under
+ * the collection cap. Refused for a member who may not write the site, or
+ * when every slug is taken.
+ */ export async function writeContentCollection(firestore, request) {
+    const slugs = [
+        ...new Set(request.slugs.map((slug)=>slug.trim().toLowerCase()))
+    ].filter((slug)=>SLUG.test(slug));
+    if (!slugs.length) return {
+        ok: false,
+        status: 400,
+        error: 'Slug must be lowercase letters, numbers, and dashes'
+    };
+    const hostRef = firestore.collection('hosts').doc(request.hostId);
+    const collections = hostRef.collection('collections');
+    const ref = collections.doc(request.id);
+    return firestore.runTransaction(async (tx)=>{
+        // Every read before the write, which Firestore requires.
+        const [host, existing] = await Promise.all([
+            tx.get(hostRef),
+            tx.get(ref)
+        ]);
+        if (!host.exists) return {
+            ok: false,
+            status: 404,
+            error: 'Unknown site'
+        };
+        if (existing.exists) {
+            var _existing_get, _existing_get1;
+            if (hostCollectionKind(existing.data()) !== 'content') {
+                return {
+                    ok: false,
+                    status: 409,
+                    error: 'That collection belongs to a different part of the console'
+                };
+            }
+            return {
+                ok: true,
+                replayed: true,
+                id: existing.id,
+                slug: String((_existing_get = existing.get('slug')) != null ? _existing_get : ''),
+                displayName: String((_existing_get1 = existing.get('displayName')) != null ? _existing_get1 : '')
+            };
+        }
+        if (!hostRoleCanWrite(roleOf(host, request.uid))) return {
+            ok: false,
+            status: 403,
+            error: CONTENT_DRAFT_ROLE_REFUSAL
+        };
+        const held = await tx.get(collections.where('slug', 'in', slugs.slice(0, 10)));
+        const taken = new Set(held.docs.filter((doc)=>hostCollectionKind(doc.data()) === 'content').map((doc)=>String(doc.get('slug'))));
+        const slug = slugs.find((candidate)=>!taken.has(candidate));
+        if (!slug) return {
+            ok: false,
+            status: 409,
+            error: `Another collection already serves /${slugs[0]}`
+        };
+        const count = (await tx.get(collections.count())).data().count;
+        if (count >= COLLECTIONS_MAX_PER_HOST) return {
+            ok: false,
+            status: 403,
+            error: CONTENT_COLLECTIONS_FULL_REFUSAL
+        };
+        tx.create(ref, {
+            displayName: request.displayName,
+            slug,
+            kind: 'content',
+            createdAt: request.now
+        });
+        return {
+            ok: true,
+            replayed: false,
+            id: request.id,
+            slug,
+            displayName: request.displayName
+        };
+    });
+}
+/**
+ * One draft entry of a content collection under `id`: the allow-listed
+ * fields of `content`, a slug no other entry of the collection holds (from
+ * the title when none is given), `status: 'draft'`, its title's search keys
+ * and its author. Never published here.
+ */ export async function writeContentEntryDraft(firestore, request) {
+    const title = typeof request.content['title'] === 'string' ? request.content['title'].trim() : '';
+    if (!title) return {
+        ok: false,
+        status: 400,
+        error: 'A post needs a title'
+    };
+    const fields = {};
+    for (const key of CONTENT_ENTRY_DRAFT_FIELDS){
+        const value = request.content[key];
+        if (value !== undefined && value !== null) fields[key] = value;
+    }
+    fields['title'] = title;
+    const base = contentEntrySlug(typeof fields['slug'] === 'string' && fields['slug'] ? String(fields['slug']) : title);
+    const hostRef = firestore.collection('hosts').doc(request.hostId);
+    const parentRef = hostRef.collection('collections').doc(request.collectionId);
+    const entries = parentRef.collection('entries');
+    const ref = entries.doc(request.id);
+    return firestore.runTransaction(async (tx)=>{
+        var _candidates_find;
+        const [host, parent, existing] = await Promise.all([
+            tx.get(hostRef),
+            tx.get(parentRef),
+            tx.get(ref)
+        ]);
+        if (!host.exists) return {
+            ok: false,
+            status: 404,
+            error: 'Unknown site'
+        };
+        if (existing.exists) {
+            var _existing_get, _existing_get1;
+            return {
+                ok: true,
+                replayed: true,
+                id: existing.id,
+                slug: String((_existing_get = existing.get('slug')) != null ? _existing_get : ''),
+                title: String((_existing_get1 = existing.get('title')) != null ? _existing_get1 : '')
+            };
+        }
+        if (!parent.exists || hostCollectionKind(parent.data()) !== 'content') {
+            return {
+                ok: false,
+                status: 404,
+                error: 'Unknown collections document'
+            };
+        }
+        if (!hostRoleCanWrite(roleOf(host, request.uid))) return {
+            ok: false,
+            status: 403,
+            error: CONTENT_DRAFT_ROLE_REFUSAL
+        };
+        const candidates = Array.from({
+            length: 10
+        }, (_, index)=>index === 0 ? base : `${base}-${index + 1}`);
+        const held = new Set((await tx.get(entries.where('slug', 'in', candidates))).docs.map((doc)=>String(doc.get('slug'))));
+        const slug = (_candidates_find = candidates.find((candidate)=>!held.has(candidate))) != null ? _candidates_find : `${base}-${request.id.slice(0, 8).toLowerCase()}`;
+        const count = (await tx.get(entries.count())).data().count;
+        if (count >= ENTRIES_MAX_PER_COLLECTION) return {
+            ok: false,
+            status: 403,
+            error: CONTENT_ENTRIES_FULL_REFUSAL
+        };
+        tx.create(ref, _extends({}, fields, {
+            slug,
+            // Born a draft, as the resources route stamps it (AGL-2266).
+            status: 'draft'
+        }, entryTitleSearchFields(title), {
+            createdAt: request.now,
+            updatedAt: request.now,
+            createdBy: request.uid
+        }));
+        return {
+            ok: true,
+            replayed: false,
+            id: request.id,
+            slug,
+            title
+        };
+    });
+}
+/** The console's refusal for an entry with no byline (`ENTRY_BYLINE_REQUIRED_MESSAGE`'s sense). */ export const CONTENT_PUBLISH_NO_BYLINE = 'It has no author yet. Add one in Content and publish it.';
+export const CONTENT_PUBLISH_GONE = 'It was deleted before it could be published.';
+/**
+ * Publishes draft entries of a collection on a member's behalf, as the
+ * entry editor's Publish does: `status: 'published'` and `publishedAt`, for a
+ * member who may publish the site and an entry that names its byline. An
+ * entry already published stays as it is; one that cannot be published is
+ * kept a draft and reported. Never throws for an entry.
+ */ export async function publishContentEntries(firestore, request) {
+    const hostRef = firestore.collection('hosts').doc(request.hostId);
+    const host = await hostRef.get();
+    if (!host.exists) return {
+        ok: false,
+        status: 404,
+        error: 'Unknown site'
+    };
+    if (!hostRoleCanPublish(roleOf(host, request.uid))) return {
+        ok: false,
+        status: 403,
+        error: CONTENT_PUBLISH_ROLE_REFUSAL
+    };
+    const entries = hostRef.collection('collections').doc(request.collectionId).collection('entries');
+    const result = {
+        published: [],
+        kept: []
+    };
+    const batch = firestore.batch();
+    for (const id of new Set(request.ids)){
+        const entry = await entries.doc(id).get();
+        if (!entry.exists || entry.get('deletedAt') != null) {
+            result.kept.push({
+                id,
+                reason: CONTENT_PUBLISH_GONE
+            });
+            continue;
+        }
+        if (entry.get('status') === 'published') {
+            result.published.push(id);
+            continue;
+        }
+        if (!entryHasByline({
+            authorId: entry.get('authorId'),
+            authorName: entry.get('authorName')
+        })) {
+            result.kept.push({
+                id,
+                reason: CONTENT_PUBLISH_NO_BYLINE
+            });
+            continue;
+        }
+        batch.set(entries.doc(id), {
+            status: 'published',
+            publishedAt: request.now,
+            updatedAt: request.now
+        }, {
+            merge: true
+        });
+        result.published.push(id);
+    }
+    await batch.commit();
+    return result;
+}
+
+//# sourceMappingURL=content-entry-drafts.js.map

package/src/lib/server/content-entry-drafts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/content-entry-drafts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { hostCollectionKind } from '@aglyn/aglyn/app-utils/collection-kind'\nimport {\n  COLLECTIONS_MAX_PER_HOST,\n  ENTRIES_MAX_PER_COLLECTION,\n} from '@aglyn/aglyn/app-utils/collection-entries'\nimport { entryHasByline } from '@aglyn/aglyn/app-utils/content-authors'\nimport { entryTitleSearchFields } from '@aglyn/aglyn/app-utils/content-query-fields'\nimport { hostRoleCanPublish, hostRoleCanWrite } from '@aglyn/aglyn/app-utils/organizations'\nimport type { Firestore } from 'firebase-admin/firestore'\n\n/**\n * A SITE'S POSTS WRITTEN ON A MEMBER'S BEHALF (AGL-3676).\n *\n * A blog is a core content collection — `hosts/{hostId}/collections/{id}`\n * with `kind: 'content'` and a slug the tenant serves its listing at — and\n * its posts are the collection's entries. The console makes both through two\n * routes: `/api/hosts/collections` claims the slug inside a transaction and\n * holds the per-site collection cap, and `/api/hosts/resources` creates an\n * entry from its allow-list, under the per-collection cap, born a DRAFT.\n *\n * A server job that writes a site's first posts (the guided start's) needs\n * the same writes without a browser's token, so they live here, in the lib\n * both runtimes already share, under the same rules:\n *\n *  - THE ROLE is the member's on the site: one who may write its content\n *    creates; one who may publish publishes. Refused in the routes' words.\n *  - THE SLUG of a collection is claimed per host and per kind in the\n *    transaction that creates it, and the collection cap is counted there.\n *  - AN ENTRY keeps only the fields the resources route's allow-list keeps,\n *    is counted against `ENTRIES_MAX_PER_COLLECTION`, and is stamped\n *    `status: 'draft'` with its title's search keys — never sent published.\n *  - PUBLISHING is a separate act, as it is in the console: it needs the\n *    publish role and a byline (`entryHasByline`), and sets `publishedAt`.\n *\n * Every write is idempotent on the id its caller chose: asked again, it\n * reports what it already wrote.\n */\n\n/** The fields an entry keeps: the resources route's `entry` allow-list. */\nexport const CONTENT_ENTRY_DRAFT_FIELDS = [\n  'title',\n  'slug',\n  'excerpt',\n  'body',\n  'coverImage',\n  'coverImageAlt',\n  'coverVideo',\n  'coverVideoDuration',\n  'seoTitle',\n  'seoDescription',\n  'authorName',\n  'categoryId',\n  'category',\n  'tags',\n  'authorId',\n] as const\n\n/** The routes' refusal for a member who may not write the site's content. */\nexport const CONTENT_DRAFT_ROLE_REFUSAL = 'Editing requires the editor role'\n/** The refusal for a member who may not publish it. */\nexport const CONTENT_PUBLISH_ROLE_REFUSAL = 'Publishing requires the publisher role'\n/** The collections route's refusal at the per-site cap. */\nexport const CONTENT_COLLECTIONS_FULL_REFUSAL =\n  `This site holds the maximum of ${COLLECTIONS_MAX_PER_HOST} collections — delete one to make room`\n/** The resources route's refusal at the per-collection cap. */\nexport const CONTENT_ENTRIES_FULL_REFUSAL =\n  `A collection holds at most ${ENTRIES_MAX_PER_COLLECTION} entries — delete some to make room`\n\n/** A collection slug the collections route accepts. */\nconst SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/\n\n/** The longest entry slug this writer mints from a title. */\nexport const CONTENT_ENTRY_SLUG_MAX = 80\n\n/** A title as an entry slug: lowercase words joined by dashes. */\nexport function contentEntrySlug(title: string): string {\n  const slug = title\n    .normalize('NFKD')\n    .replace(/[̀-ͯ]/g, '')\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, CONTENT_ENTRY_SLUG_MAX)\n    .replace(/-+$/g, '')\n  return slug || 'post'\n}\n\nexport type ContentDraftRefusal = { ok: false; status: 400 | 403 | 404 | 409; error: string }\n\nexport type ContentCollectionWrite =\n  | { ok: true; id: string; slug: string; displayName: string; replayed: boolean }\n  | ContentDraftRefusal\n\nexport type ContentEntryWrite =\n  | { ok: true; id: string; slug: string; title: string; replayed: boolean }\n  | ContentDraftRefusal\n\nfunction roleOf(host: FirebaseFirestore.DocumentSnapshot, uid: string): unknown {\n  return (host.get('memberRoles') ?? {})[uid]\n}\n\n/**\n * The site's content collection under `id`, created when it does not exist:\n * the first of `slugs` no other content collection of the site serves, under\n * the collection cap. Refused for a member who may not write the site, or\n * when every slug is taken.\n */\nexport async function writeContentCollection(\n  firestore: Firestore,\n  request: { hostId: string; uid: string; id: string; displayName: string; slugs: readonly string[]; now: Date },\n): Promise<ContentCollectionWrite> {\n  const slugs = [...new Set(request.slugs.map((slug) => slug.trim().toLowerCase()))].filter((slug) => SLUG.test(slug))\n  if (!slugs.length) return { ok: false, status: 400, error: 'Slug must be lowercase letters, numbers, and dashes' }\n  const hostRef = firestore.collection('hosts').doc(request.hostId)\n  const collections = hostRef.collection('collections')\n  const ref = collections.doc(request.id)\n  return firestore.runTransaction(async (tx): Promise<ContentCollectionWrite> => {\n    // Every read before the write, which Firestore requires.\n    const [host, existing] = await Promise.all([tx.get(hostRef), tx.get(ref)])\n    if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n    if (existing.exists) {\n      if (hostCollectionKind(existing.data()) !== 'content') {\n        return { ok: false, status: 409, error: 'That collection belongs to a different part of the console' }\n      }\n      return {\n        ok: true,\n        replayed: true,\n        id: existing.id,\n        slug: String(existing.get('slug') ?? ''),\n        displayName: String(existing.get('displayName') ?? ''),\n      }\n    }\n    if (!hostRoleCanWrite(roleOf(host, request.uid))) return { ok: false, status: 403, error: CONTENT_DRAFT_ROLE_REFUSAL }\n    const held = await tx.get(collections.where('slug', 'in', slugs.slice(0, 10)))\n    const taken = new Set(\n      held.docs.filter((doc) => hostCollectionKind(doc.data()) === 'content').map((doc) => String(doc.get('slug'))),\n    )\n    const slug = slugs.find((candidate) => !taken.has(candidate))\n    if (!slug) return { ok: false, status: 409, error: `Another collection already serves /${slugs[0]}` }\n    const count = (await tx.get(collections.count())).data().count\n    if (count >= COLLECTIONS_MAX_PER_HOST) return { ok: false, status: 403, error: CONTENT_COLLECTIONS_FULL_REFUSAL }\n    tx.create(ref, { displayName: request.displayName, slug, kind: 'content', createdAt: request.now })\n    return { ok: true, replayed: false, id: request.id, slug, displayName: request.displayName }\n  })\n}\n\n/**\n * One draft entry of a content collection under `id`: the allow-listed\n * fields of `content`, a slug no other entry of the collection holds (from\n * the title when none is given), `status: 'draft'`, its title's search keys\n * and its author. Never published here.\n */\nexport async function writeContentEntryDraft(\n  firestore: Firestore,\n  request: {\n    hostId: string\n    collectionId: string\n    uid: string\n    id: string\n    content: Readonly<Record<string, unknown>>\n    now: Date\n  },\n): Promise<ContentEntryWrite> {\n  const title = typeof request.content['title'] === 'string' ? request.content['title'].trim() : ''\n  if (!title) return { ok: false, status: 400, error: 'A post needs a title' }\n  const fields: Record<string, unknown> = {}\n  for (const key of CONTENT_ENTRY_DRAFT_FIELDS) {\n    const value = request.content[key]\n    if (value !== undefined && value !== null) fields[key] = value\n  }\n  fields['title'] = title\n  const base = contentEntrySlug(typeof fields['slug'] === 'string' && fields['slug'] ? String(fields['slug']) : title)\n  const hostRef = firestore.collection('hosts').doc(request.hostId)\n  const parentRef = hostRef.collection('collections').doc(request.collectionId)\n  const entries = parentRef.collection('entries')\n  const ref = entries.doc(request.id)\n  return firestore.runTransaction(async (tx): Promise<ContentEntryWrite> => {\n    const [host, parent, existing] = await Promise.all([tx.get(hostRef), tx.get(parentRef), tx.get(ref)])\n    if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n    if (existing.exists) {\n      return {\n        ok: true,\n        replayed: true,\n        id: existing.id,\n        slug: String(existing.get('slug') ?? ''),\n        title: String(existing.get('title') ?? ''),\n      }\n    }\n    if (!parent.exists || hostCollectionKind(parent.data()) !== 'content') {\n      return { ok: false, status: 404, error: 'Unknown collections document' }\n    }\n    if (!hostRoleCanWrite(roleOf(host, request.uid))) return { ok: false, status: 403, error: CONTENT_DRAFT_ROLE_REFUSAL }\n    const candidates = Array.from({ length: 10 }, (_, index) => (index === 0 ? base : `${base}-${index + 1}`))\n    const held = new Set((await tx.get(entries.where('slug', 'in', candidates))).docs.map((doc) => String(doc.get('slug'))))\n    const slug = candidates.find((candidate) => !held.has(candidate)) ?? `${base}-${request.id.slice(0, 8).toLowerCase()}`\n    const count = (await tx.get(entries.count())).data().count\n    if (count >= ENTRIES_MAX_PER_COLLECTION) return { ok: false, status: 403, error: CONTENT_ENTRIES_FULL_REFUSAL }\n    tx.create(ref, {\n      ...fields,\n      slug,\n      // Born a draft, as the resources route stamps it (AGL-2266).\n      status: 'draft',\n      ...entryTitleSearchFields(title),\n      createdAt: request.now,\n      updatedAt: request.now,\n      createdBy: request.uid,\n    })\n    return { ok: true, replayed: false, id: request.id, slug, title }\n  })\n}\n\n/** What publishing a set of entries came to. */\nexport interface ContentEntriesPublish {\n  published: string[]\n  /** Entries left as they were, each with the plain sentence for why. */\n  kept: Array<{ id: string; reason: string }>\n}\n\n/** The console's refusal for an entry with no byline (`ENTRY_BYLINE_REQUIRED_MESSAGE`'s sense). */\nexport const CONTENT_PUBLISH_NO_BYLINE = 'It has no author yet. Add one in Content and publish it.'\nexport const CONTENT_PUBLISH_GONE = 'It was deleted before it could be published.'\n\n/**\n * Publishes draft entries of a collection on a member's behalf, as the\n * entry editor's Publish does: `status: 'published'` and `publishedAt`, for a\n * member who may publish the site and an entry that names its byline. An\n * entry already published stays as it is; one that cannot be published is\n * kept a draft and reported. Never throws for an entry.\n */\nexport async function publishContentEntries(\n  firestore: Firestore,\n  request: { hostId: string; collectionId: string; uid: string; ids: readonly string[]; now: Date },\n): Promise<ContentEntriesPublish | ContentDraftRefusal> {\n  const hostRef = firestore.collection('hosts').doc(request.hostId)\n  const host = await hostRef.get()\n  if (!host.exists) return { ok: false, status: 404, error: 'Unknown site' }\n  if (!hostRoleCanPublish(roleOf(host, request.uid))) return { ok: false, status: 403, error: CONTENT_PUBLISH_ROLE_REFUSAL }\n  const entries = hostRef.collection('collections').doc(request.collectionId).collection('entries')\n  const result: ContentEntriesPublish = { published: [], kept: [] }\n  const batch = firestore.batch()\n  for (const id of new Set(request.ids)) {\n    const entry = await entries.doc(id).get()\n    if (!entry.exists || entry.get('deletedAt') != null) {\n      result.kept.push({ id, reason: CONTENT_PUBLISH_GONE })\n      continue\n    }\n    if (entry.get('status') === 'published') {\n      result.published.push(id)\n      continue\n    }\n    if (!entryHasByline({ authorId: entry.get('authorId'), authorName: entry.get('authorName') })) {\n      result.kept.push({ id, reason: CONTENT_PUBLISH_NO_BYLINE })\n      continue\n    }\n    batch.set(entries.doc(id), { status: 'published', publishedAt: request.now, updatedAt: request.now }, { merge: true })\n    result.published.push(id)\n  }\n  await batch.commit()\n  return result\n}\n"],"names":["hostCollectionKind","COLLECTIONS_MAX_PER_HOST","ENTRIES_MAX_PER_COLLECTION","entryHasByline","entryTitleSearchFields","hostRoleCanPublish","hostRoleCanWrite","CONTENT_ENTRY_DRAFT_FIELDS","CONTENT_DRAFT_ROLE_REFUSAL","CONTENT_PUBLISH_ROLE_REFUSAL","CONTENT_COLLECTIONS_FULL_REFUSAL","CONTENT_ENTRIES_FULL_REFUSAL","SLUG","CONTENT_ENTRY_SLUG_MAX","contentEntrySlug","title","slug","normalize","replace","toLowerCase","slice","roleOf","host","uid","get","writeContentCollection","firestore","request","slugs","Set","map","trim","filter","test","length","ok","status","error","hostRef","collection","doc","hostId","collections","ref","id","runTransaction","tx","existing","Promise","all","exists","data","replayed","String","displayName","held","where","taken","docs","find","candidate","has","count","create","kind","createdAt","now","writeContentEntryDraft","content","fields","key","value","undefined","base","parentRef","collectionId","entries","candidates","parent","Array","from","_","index","updatedAt","createdBy","CONTENT_PUBLISH_NO_BYLINE","CONTENT_PUBLISH_GONE","publishContentEntries","result","published","kept","batch","ids","entry","push","reason","authorId","authorName","set","publishedAt","merge","commit"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,kBAAkB,QAAQ,yCAAwC;AAC3E,SACEC,wBAAwB,EACxBC,0BAA0B,QACrB,4CAA2C;AAClD,SAASC,cAAc,QAAQ,yCAAwC;AACvE,SAASC,sBAAsB,QAAQ,8CAA6C;AACpF,SAASC,kBAAkB,EAAEC,gBAAgB,QAAQ,uCAAsC;AAG3F;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BC,GAED,yEAAyE,GACzE,OAAO,MAAMC,6BAA6B;IACxC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAEV,2EAA2E,GAC3E,OAAO,MAAMC,6BAA6B,mCAAkC;AAC5E,qDAAqD,GACrD,OAAO,MAAMC,+BAA+B,yCAAwC;AACpF,yDAAyD,GACzD,OAAO,MAAMC,mCACX,CAAC,+BAA+B,EAAET,yBAAyB,sCAAsC,CAAC,CAAA;AACpG,6DAA6D,GAC7D,OAAO,MAAMU,+BACX,CAAC,2BAA2B,EAAET,2BAA2B,mCAAmC,CAAC,CAAA;AAE/F,qDAAqD,GACrD,MAAMU,OAAO;AAEb,2DAA2D,GAC3D,OAAO,MAAMC,yBAAyB,GAAE;AAExC,gEAAgE,GAChE,OAAO,SAASC,iBAAiBC,KAAa;IAC5C,MAAMC,OAAOD,MACVE,SAAS,CAAC,QACVC,OAAO,CAAC,UAAU,IAClBC,WAAW,GACXD,OAAO,CAAC,eAAe,KACvBA,OAAO,CAAC,YAAY,IACpBE,KAAK,CAAC,GAAGP,wBACTK,OAAO,CAAC,QAAQ;IACnB,OAAOF,QAAQ;AACjB;AAYA,SAASK,OAAOC,IAAwC,EAAEC,GAAW;QAC3DD;IAAR,OAAO,EAACA,YAAAA,KAAKE,GAAG,CAAC,0BAATF,YAA2B,CAAC,EAAE,CAACC,IAAI;AAC7C;AAEA;;;;;CAKC,GACD,OAAO,eAAeE,uBACpBC,SAAoB,EACpBC,OAA8G;IAE9G,MAAMC,QAAQ;WAAI,IAAIC,IAAIF,QAAQC,KAAK,CAACE,GAAG,CAAC,CAACd,OAASA,KAAKe,IAAI,GAAGZ,WAAW;KAAK,CAACa,MAAM,CAAC,CAAChB,OAASJ,KAAKqB,IAAI,CAACjB;IAC9G,IAAI,CAACY,MAAMM,MAAM,EAAE,OAAO;QAAEC,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAsD;IACjH,MAAMC,UAAUZ,UAAUa,UAAU,CAAC,SAASC,GAAG,CAACb,QAAQc,MAAM;IAChE,MAAMC,cAAcJ,QAAQC,UAAU,CAAC;IACvC,MAAMI,MAAMD,YAAYF,GAAG,CAACb,QAAQiB,EAAE;IACtC,OAAOlB,UAAUmB,cAAc,CAAC,OAAOC;QACrC,yDAAyD;QACzD,MAAM,CAACxB,MAAMyB,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAACH,GAAGtB,GAAG,CAACc;YAAUQ,GAAGtB,GAAG,CAACmB;SAAK;QACzE,IAAI,CAACrB,KAAK4B,MAAM,EAAE,OAAO;YAAEf,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAe;QACzE,IAAIU,SAASG,MAAM,EAAE;gBAQJH,eACOA;YARtB,IAAI/C,mBAAmB+C,SAASI,IAAI,QAAQ,WAAW;gBACrD,OAAO;oBAAEhB,IAAI;oBAAOC,QAAQ;oBAAKC,OAAO;gBAA6D;YACvG;YACA,OAAO;gBACLF,IAAI;gBACJiB,UAAU;gBACVR,IAAIG,SAASH,EAAE;gBACf5B,MAAMqC,QAAON,gBAAAA,SAASvB,GAAG,CAAC,mBAAbuB,gBAAwB;gBACrCO,aAAaD,QAAON,iBAAAA,SAASvB,GAAG,CAAC,0BAAbuB,iBAA+B;YACrD;QACF;QACA,IAAI,CAACzC,iBAAiBe,OAAOC,MAAMK,QAAQJ,GAAG,IAAI,OAAO;YAAEY,IAAI;YAAOC,QAAQ;YAAKC,OAAO7B;QAA2B;QACrH,MAAM+C,OAAO,MAAMT,GAAGtB,GAAG,CAACkB,YAAYc,KAAK,CAAC,QAAQ,MAAM5B,MAAMR,KAAK,CAAC,GAAG;QACzE,MAAMqC,QAAQ,IAAI5B,IAChB0B,KAAKG,IAAI,CAAC1B,MAAM,CAAC,CAACQ,MAAQxC,mBAAmBwC,IAAIW,IAAI,QAAQ,WAAWrB,GAAG,CAAC,CAACU,MAAQa,OAAOb,IAAIhB,GAAG,CAAC;QAEtG,MAAMR,OAAOY,MAAM+B,IAAI,CAAC,CAACC,YAAc,CAACH,MAAMI,GAAG,CAACD;QAClD,IAAI,CAAC5C,MAAM,OAAO;YAAEmB,IAAI;YAAOC,QAAQ;YAAKC,OAAO,CAAC,mCAAmC,EAAET,KAAK,CAAC,EAAE,EAAE;QAAC;QACpG,MAAMkC,QAAQ,AAAC,CAAA,MAAMhB,GAAGtB,GAAG,CAACkB,YAAYoB,KAAK,GAAE,EAAGX,IAAI,GAAGW,KAAK;QAC9D,IAAIA,SAAS7D,0BAA0B,OAAO;YAAEkC,IAAI;YAAOC,QAAQ;YAAKC,OAAO3B;QAAiC;QAChHoC,GAAGiB,MAAM,CAACpB,KAAK;YAAEW,aAAa3B,QAAQ2B,WAAW;YAAEtC;YAAMgD,MAAM;YAAWC,WAAWtC,QAAQuC,GAAG;QAAC;QACjG,OAAO;YAAE/B,IAAI;YAAMiB,UAAU;YAAOR,IAAIjB,QAAQiB,EAAE;YAAE5B;YAAMsC,aAAa3B,QAAQ2B,WAAW;QAAC;IAC7F;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAea,uBACpBzC,SAAoB,EACpBC,OAOC;IAED,MAAMZ,QAAQ,OAAOY,QAAQyC,OAAO,CAAC,QAAQ,KAAK,WAAWzC,QAAQyC,OAAO,CAAC,QAAQ,CAACrC,IAAI,KAAK;IAC/F,IAAI,CAAChB,OAAO,OAAO;QAAEoB,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAuB;IAC3E,MAAMgC,SAAkC,CAAC;IACzC,KAAK,MAAMC,OAAO/D,2BAA4B;QAC5C,MAAMgE,QAAQ5C,QAAQyC,OAAO,CAACE,IAAI;QAClC,IAAIC,UAAUC,aAAaD,UAAU,MAAMF,MAAM,CAACC,IAAI,GAAGC;IAC3D;IACAF,MAAM,CAAC,QAAQ,GAAGtD;IAClB,MAAM0D,OAAO3D,iBAAiB,OAAOuD,MAAM,CAAC,OAAO,KAAK,YAAYA,MAAM,CAAC,OAAO,GAAGhB,OAAOgB,MAAM,CAAC,OAAO,IAAItD;IAC9G,MAAMuB,UAAUZ,UAAUa,UAAU,CAAC,SAASC,GAAG,CAACb,QAAQc,MAAM;IAChE,MAAMiC,YAAYpC,QAAQC,UAAU,CAAC,eAAeC,GAAG,CAACb,QAAQgD,YAAY;IAC5E,MAAMC,UAAUF,UAAUnC,UAAU,CAAC;IACrC,MAAMI,MAAMiC,QAAQpC,GAAG,CAACb,QAAQiB,EAAE;IAClC,OAAOlB,UAAUmB,cAAc,CAAC,OAAOC;YAkBxB+B;QAjBb,MAAM,CAACvD,MAAMwD,QAAQ/B,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAACH,GAAGtB,GAAG,CAACc;YAAUQ,GAAGtB,GAAG,CAACkD;YAAY5B,GAAGtB,GAAG,CAACmB;SAAK;QACpG,IAAI,CAACrB,KAAK4B,MAAM,EAAE,OAAO;YAAEf,IAAI;YAAOC,QAAQ;YAAKC,OAAO;QAAe;QACzE,IAAIU,SAASG,MAAM,EAAE;gBAKJH,eACCA;YALhB,OAAO;gBACLZ,IAAI;gBACJiB,UAAU;gBACVR,IAAIG,SAASH,EAAE;gBACf5B,MAAMqC,QAAON,gBAAAA,SAASvB,GAAG,CAAC,mBAAbuB,gBAAwB;gBACrChC,OAAOsC,QAAON,iBAAAA,SAASvB,GAAG,CAAC,oBAAbuB,iBAAyB;YACzC;QACF;QACA,IAAI,CAAC+B,OAAO5B,MAAM,IAAIlD,mBAAmB8E,OAAO3B,IAAI,QAAQ,WAAW;YACrE,OAAO;gBAAEhB,IAAI;gBAAOC,QAAQ;gBAAKC,OAAO;YAA+B;QACzE;QACA,IAAI,CAAC/B,iBAAiBe,OAAOC,MAAMK,QAAQJ,GAAG,IAAI,OAAO;YAAEY,IAAI;YAAOC,QAAQ;YAAKC,OAAO7B;QAA2B;QACrH,MAAMqE,aAAaE,MAAMC,IAAI,CAAC;YAAE9C,QAAQ;QAAG,GAAG,CAAC+C,GAAGC,QAAWA,UAAU,IAAIT,OAAO,GAAGA,KAAK,CAAC,EAAES,QAAQ,GAAG;QACxG,MAAM3B,OAAO,IAAI1B,IAAI,AAAC,CAAA,MAAMiB,GAAGtB,GAAG,CAACoD,QAAQpB,KAAK,CAAC,QAAQ,MAAMqB,YAAW,EAAGnB,IAAI,CAAC5B,GAAG,CAAC,CAACU,MAAQa,OAAOb,IAAIhB,GAAG,CAAC;QAC9G,MAAMR,QAAO6D,mBAAAA,WAAWlB,IAAI,CAAC,CAACC,YAAc,CAACL,KAAKM,GAAG,CAACD,uBAAzCiB,mBAAwD,GAAGJ,KAAK,CAAC,EAAE9C,QAAQiB,EAAE,CAACxB,KAAK,CAAC,GAAG,GAAGD,WAAW,IAAI;QACtH,MAAM2C,QAAQ,AAAC,CAAA,MAAMhB,GAAGtB,GAAG,CAACoD,QAAQd,KAAK,GAAE,EAAGX,IAAI,GAAGW,KAAK;QAC1D,IAAIA,SAAS5D,4BAA4B,OAAO;YAAEiC,IAAI;YAAOC,QAAQ;YAAKC,OAAO1B;QAA6B;QAC9GmC,GAAGiB,MAAM,CAACpB,KAAK,aACV0B;YACHrD;YACA,6DAA6D;YAC7DoB,QAAQ;WACLhC,uBAAuBW;YAC1BkD,WAAWtC,QAAQuC,GAAG;YACtBiB,WAAWxD,QAAQuC,GAAG;YACtBkB,WAAWzD,QAAQJ,GAAG;;QAExB,OAAO;YAAEY,IAAI;YAAMiB,UAAU;YAAOR,IAAIjB,QAAQiB,EAAE;YAAE5B;YAAMD;QAAM;IAClE;AACF;AASA,iGAAiG,GACjG,OAAO,MAAMsE,4BAA4B,2DAA0D;AACnG,OAAO,MAAMC,uBAAuB,+CAA8C;AAElF;;;;;;CAMC,GACD,OAAO,eAAeC,sBACpB7D,SAAoB,EACpBC,OAAiG;IAEjG,MAAMW,UAAUZ,UAAUa,UAAU,CAAC,SAASC,GAAG,CAACb,QAAQc,MAAM;IAChE,MAAMnB,OAAO,MAAMgB,QAAQd,GAAG;IAC9B,IAAI,CAACF,KAAK4B,MAAM,EAAE,OAAO;QAAEf,IAAI;QAAOC,QAAQ;QAAKC,OAAO;IAAe;IACzE,IAAI,CAAChC,mBAAmBgB,OAAOC,MAAMK,QAAQJ,GAAG,IAAI,OAAO;QAAEY,IAAI;QAAOC,QAAQ;QAAKC,OAAO5B;IAA6B;IACzH,MAAMmE,UAAUtC,QAAQC,UAAU,CAAC,eAAeC,GAAG,CAACb,QAAQgD,YAAY,EAAEpC,UAAU,CAAC;IACvF,MAAMiD,SAAgC;QAAEC,WAAW,EAAE;QAAEC,MAAM,EAAE;IAAC;IAChE,MAAMC,QAAQjE,UAAUiE,KAAK;IAC7B,KAAK,MAAM/C,MAAM,IAAIf,IAAIF,QAAQiE,GAAG,EAAG;QACrC,MAAMC,QAAQ,MAAMjB,QAAQpC,GAAG,CAACI,IAAIpB,GAAG;QACvC,IAAI,CAACqE,MAAM3C,MAAM,IAAI2C,MAAMrE,GAAG,CAAC,gBAAgB,MAAM;YACnDgE,OAAOE,IAAI,CAACI,IAAI,CAAC;gBAAElD;gBAAImD,QAAQT;YAAqB;YACpD;QACF;QACA,IAAIO,MAAMrE,GAAG,CAAC,cAAc,aAAa;YACvCgE,OAAOC,SAAS,CAACK,IAAI,CAAClD;YACtB;QACF;QACA,IAAI,CAACzC,eAAe;YAAE6F,UAAUH,MAAMrE,GAAG,CAAC;YAAayE,YAAYJ,MAAMrE,GAAG,CAAC;QAAc,IAAI;YAC7FgE,OAAOE,IAAI,CAACI,IAAI,CAAC;gBAAElD;gBAAImD,QAAQV;YAA0B;YACzD;QACF;QACAM,MAAMO,GAAG,CAACtB,QAAQpC,GAAG,CAACI,KAAK;YAAER,QAAQ;YAAa+D,aAAaxE,QAAQuC,GAAG;YAAEiB,WAAWxD,QAAQuC,GAAG;QAAC,GAAG;YAAEkC,OAAO;QAAK;QACpHZ,OAAOC,SAAS,CAACK,IAAI,CAAClD;IACxB;IACA,MAAM+C,MAAMU,MAAM;IAClB,OAAOb;AACT"}

package/src/lib/server/erase.js

@@ -32,6 +32,8 @@ import { isBillingSubscription } from "@aglyn/aglyn/server";
 // barrel, and which sites a consent group still needs is the rule itself.
 import { consentGroupSiteHold } from "@aglyn/aglyn/app-utils/consent-groups";
 import { listPluginOrgCollections } from "@aglyn/aglyn/plugin-manager/plugin-host-collections";
+import { runPluginEventHandlers } from "@aglyn/aglyn/plugin-manager/plugin-events";
+import { releasedHostNames } from "./host-released-names.js";
 import { readOrgBilling } from "./org-billing.js";
 import { disposeHostSendingDomain, readSendingDomainTeardownByLabel } from "./sending-domain-debt.js";
 import { addAdminAudit } from "./admin-audit-write.js";
@@ -242,6 +244,18 @@ export async function eraseHost(hostId, options = {}) {
     }
     // The host document tree (screens/layouts/versions/counters/products/…).
     await firestore.recursiveDelete(hostRef);
+    // The site's names no longer serve it (AGL-3629): plugins undo what they
+    // registered for each — commerce's Stripe payment method domains. Raised
+    // after the delete, so a plugin checking whether ANOTHER site still serves
+    // the name cannot find this one.
+    for (const domain of releasedHostNames(hostSnapshot.data())){
+        await runPluginEventHandlers('host.domain.released', {
+            orgId: orgId != null ? orgId : null,
+            hostId,
+            domain,
+            reason: 'site-deleted'
+        });
+    }
     // Never throws, and never leaves the slot unaccounted for: whatever the
     // vendors refuse is recorded on the label claim for the reaper to finish.
     return {