@aglyn/aglyn 1.0.0-beta.143

package/src/lib/app-utils/activity-presenter.js

@@ -0,0 +1,326 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // Activity-feed presenter (AGL-810). The `hosts/{id}/activity` and
+// `orgs/{id}/activity` logs store a free-text `action` plus a `{ type, id,
+// name }` target, written from ~40 scattered call sites. The three renderers
+// (host card, host table, org card) used to each format entries their own
+// way — one dropped the target entirely, one printed the raw Firestore doc
+// id when no name was recorded. This module is the single place that turns a
+// stored entry into something a human reads, and into a deep link to the
+// thing that changed. It is deliberately dependency-free (only the string
+// route table) so plugin libs and the console app can both import it via
+// `@aglyn/aglyn/app-utils/activity-presenter`.
+import { Route, buildRoute } from "./console-routes.js";
+import { CRM_RECORD_SECTIONS, crmRecordHref, crmSectionHref } from "./console-record-links.js";
+import { hostEventLabel } from "./workflows.js";
+import { duplicateActivityActionLabel } from "./duplicate-resource.js";
+import { pluginActivityActionLabel, pluginActivityGroupForAction, pluginActivityTargetNoun } from "../plugin-manager/plugin-activity-actions.js";
+/** Human, singular noun for a target type. Falls back to the raw type. */ const TYPE_LABELS = {
+    host: 'Site',
+    screen: 'Screen',
+    layout: 'Layout',
+    theme: 'Theme',
+    media: 'Media',
+    content: 'Content',
+    variable: 'Variable',
+    function: 'Function',
+    workflow: 'Workflow',
+    member: 'Member',
+    component: 'Component',
+    template: 'Template',
+    org: 'Organization',
+    invite: 'Invitation',
+    subscription: 'Subscription',
+    // A custom role's AI permission flipped (AGL-2929).
+    role: 'Role',
+    // A generation job (AGL-2904): the org feed names the job, and each of its
+    // outputs names the resource it produced.
+    aiJob: 'AI generation',
+    // CRM records (AGL-2622): a person added, a company or a deal created or
+    // deleted, a lead converted — logged into the feed of the site whose
+    // console did it, and linked to the record the way a screen is.
+    contact: 'Contact',
+    lead: 'Lead',
+    company: 'Company',
+    deal: 'Deal'
+};
+/** The activity target types that are CRM records, for the link switch. */ const CRM_TARGET_KINDS = new Set(Object.keys(CRM_RECORD_SECTIONS));
+/**
+ * The org-level hub's section for each record kind an org feed entry may
+ * name (AGL-2634): the four record kinds, and tasks, which have a section
+ * and no page of their own.
+ */ const ORG_CRM_SECTIONS = _extends({}, CRM_RECORD_SECTIONS, {
+    task: 'tasks'
+});
+/**
+ * Human noun for a target type, e.g. `'screen'` → `'Screen'`. A plugin's
+ * own resource is stored as `pluginId:noun` (AGL-2978), and a reader sees
+ * the noun: `acme-mail:mailbox` → `Mailbox`.
+ */ export function activityTypeLabel(type) {
+    var _pluginActivityTargetNoun;
+    if (!type) return 'Item';
+    const known = TYPE_LABELS[type];
+    if (known) return known;
+    const noun = (_pluginActivityTargetNoun = pluginActivityTargetNoun(type)) != null ? _pluginActivityTargetNoun : type;
+    return noun.charAt(0).toUpperCase() + noun.slice(1);
+}
+/**
+ * A label for the target column/link. Prefers the recorded name; when none
+ * was written (older entries, id-only saves) it degrades to the humanized
+ * type — NEVER the raw doc id, which is meaningless to a reader.
+ */ export function activityTargetLabel(target) {
+    if (target == null ? void 0 : target.name) return target.name;
+    return activityTypeLabel(target == null ? void 0 : target.type);
+}
+/**
+ * What the action column reads (AGL-2929). Most actions are the sentence
+ * their writer stored; a plugin's rows store a code (`ai.job.output`) so
+ * that three surfaces can recognize them without parsing prose, and the
+ * code is translated here — once, from the plugin-declared catalog
+ * (AGL-2940) — rather than shown to a reader as a dotted path.
+ */ export function activityActionLabel(action) {
+    var _ref, _ref1, _pluginActivityActionLabel;
+    const stored = (_ref = action == null ? void 0 : action.trim()) != null ? _ref : '';
+    return (_ref1 = (_pluginActivityActionLabel = pluginActivityActionLabel(stored)) != null ? _pluginActivityActionLabel : duplicateActivityActionLabel(stored)) != null ? _ref1 : stored;
+}
+/**
+ * The filter group an entry's code belongs to — the chip that keeps it —
+ * or `undefined` for a prose action no plugin declared.
+ */ export function activityEntryGroupId(entry) {
+    var _pluginActivityGroupForAction, _entry_action;
+    return (_pluginActivityGroupForAction = pluginActivityGroupForAction((_entry_action = entry.action) == null ? void 0 : _entry_action.trim())) == null ? void 0 : _pluginActivityGroupForAction.id;
+}
+/**
+ * The primary line for a feed entry: the action, suffixed with the target
+ * name when one is known, so "Saved the screen" becomes "Saved the screen —
+ * Home". A missing action degrades to the target label rather than blank.
+ */ export function activityPrimaryText(entry) {
+    var _entry_target_name, _entry_target;
+    const action = activityActionLabel(entry.action);
+    const name = (_entry_target = entry.target) == null ? void 0 : (_entry_target_name = _entry_target.name) == null ? void 0 : _entry_target_name.trim();
+    if (action && name) return `${action} — ${name}`;
+    if (action) return action;
+    return activityTargetLabel(entry.target);
+}
+/** How an integration's key is named wherever an actor is: `API key Zapier`. */ export function apiKeyActorLabel(name) {
+    return `API key ${name}`;
+}
+/**
+ * The "who" line for an entry: the actor's address, else the key that wrote
+ * it by name, else `Someone` — for an entry that recorded neither, which
+ * every key-written entry was before the name was carried.
+ */ export function activityActorLabel(entry) {
+    if (entry.actorEmail) return entry.actorEmail;
+    if (entry.apiKeyName) return apiKeyActorLabel(entry.apiKeyName);
+    return 'Someone';
+}
+/**
+ * A deep link to the resource an entry points at, or `undefined` when it
+ * cannot be built (missing context, or a type with nowhere sensible to go).
+ * `buildRoute` emits `<orgSlug?>` placeholders for missing params, so every
+ * branch guards its inputs and returns `undefined` rather than a dead link.
+ */ export function activityHref(entry, ctx) {
+    var _entry_target, _ref, _ref1;
+    const { orgSlug, host } = ctx;
+    if (!orgSlug) return undefined;
+    const target = (_entry_target = entry.target) != null ? _entry_target : undefined;
+    const type = (_ref = target == null ? void 0 : target.type) != null ? _ref : entry.type;
+    const id = (_ref1 = target == null ? void 0 : target.id) != null ? _ref1 : entry.targetId;
+    const versionId = target == null ? void 0 : target.versionId;
+    // Host-scoped entries: every host route needs both orgSlug and host.
+    if (host) {
+        switch(type){
+            case 'host':
+                return buildRoute(Route.HOST_DASHBOARD, {
+                    orgSlug,
+                    host
+                });
+            case 'screen':
+                // The screen detail page is version-addressed; without a versionId
+                // there is no "current" pointer to route through, so land on the list.
+                return id && versionId ? buildRoute(Route.SCREEN_DETAILS, {
+                    orgSlug,
+                    host,
+                    screenId: id,
+                    versionId
+                }) : buildRoute(Route.HOST_SCREENS, {
+                    orgSlug,
+                    host
+                });
+            case 'component':
+                return id ? buildRoute(Route.COMPONENT_DETAILS, {
+                    orgSlug,
+                    host,
+                    componentId: id
+                }) : buildRoute(Route.HOST_COMPONENTS, {
+                    orgSlug,
+                    host
+                });
+            case 'template':
+                return id ? buildRoute(Route.TEMPLATE_DETAILS, {
+                    orgSlug,
+                    host,
+                    templateId: id
+                }) : buildRoute(Route.HOST_TEMPLATES, {
+                    orgSlug,
+                    host
+                });
+            case 'layout':
+                return id ? buildRoute(Route.LAYOUT_DETAILS, {
+                    orgSlug,
+                    host,
+                    layoutId: id
+                }) : buildRoute(Route.HOST_LAYOUTS, {
+                    orgSlug,
+                    host
+                });
+            case 'theme':
+                return buildRoute(Route.HOST_SETUP_THEME, {
+                    orgSlug,
+                    host
+                });
+            case 'media':
+                return buildRoute(Route.HOST_MEDIA, {
+                    orgSlug,
+                    host
+                });
+            case 'content':
+                return buildRoute(Route.HOST_CONTENT, {
+                    orgSlug,
+                    host
+                });
+            case 'variable':
+                return buildRoute(Route.HOST_DATA, {
+                    orgSlug,
+                    host
+                });
+            case 'function':
+                return buildRoute(Route.HOST_LOGIC, {
+                    orgSlug,
+                    host
+                });
+            case 'workflow':
+                return buildRoute(Route.HOST_AUTOMATION, {
+                    orgSlug,
+                    host
+                });
+            case 'member':
+                // Site team is managed on the Setup page — there is no per-member
+                // host route.
+                return buildRoute(Route.HOST_SETUP, {
+                    orgSlug,
+                    host
+                });
+            default:
+                // A CRM record's own page, or its list when the entry named no id —
+                // a deleted record still has a list to land on. The CRM is a plugin
+                // hub, so its addresses come from the shared builder rather than
+                // the route table, the same door the console's search uses.
+                if (type && CRM_TARGET_KINDS.has(type)) {
+                    const kind = type;
+                    return id ? crmRecordHref({
+                        orgSlug,
+                        host
+                    }, kind, id) : crmSectionHref({
+                        orgSlug,
+                        host
+                    }, CRM_RECORD_SECTIONS[kind]);
+                }
+                return undefined;
+        }
+    }
+    // Org-scoped entries.
+    switch(type){
+        case 'org':
+            return buildRoute(Route.ORG_SETTINGS, {
+                orgSlug
+            });
+        case 'member':
+            return id ? buildRoute(Route.MANAGE_TEAM_MEMBER, {
+                orgSlug,
+                uid: id
+            }) : buildRoute(Route.MANAGE_TEAM, {
+                orgSlug
+            });
+        case 'invite':
+            return buildRoute(Route.MANAGE_TEAM, {
+                orgSlug
+            });
+        default:
+            {
+                // A CRM record acted on at the ORGANIZATION level (AGL-2634) — a deal
+                // moved from the org board, a merge, a bulk bar's action — opens in
+                // the org-level hub. A lead's org address needs its site, which the
+                // entry does not carry, and a bulk line names no record: both land
+                // on the section.
+                const section = type ? ORG_CRM_SECTIONS[type] : undefined;
+                if (!section) return undefined;
+                const hub = `${buildRoute(Route.ORG_CRM, {
+                    orgSlug
+                })}/${section}`;
+                return id && type !== 'lead' && type !== 'task' ? `${hub}/${encodeURIComponent(id)}` : hub;
+            }
+    }
+}
+/**
+ * `formSubmission` → `Form submitted`.
+ *
+ * The console rendered the raw camelCase identifier in the trigger select
+ * and in every run row. The words are `HOST_EVENT_LABELS` in `workflows.ts`
+ * — one map, so the picker an author chose from and the run row they read
+ * afterwards cannot name the same event differently.
+ */ export function actionTriggerLabel(event) {
+    return hostEventLabel(event);
+}
+/**
+ * The run's outcome, tolerating rows written before it was recorded.
+ *
+ * A legacy entry carries only the prose `action` string, so it is read
+ * back: `with errors:` means it failed and `Action ran on` means it
+ * succeeded. Anything else is not a run at all — the activity collection
+ * also holds publishes, media saves and member changes, and calling one of
+ * those `succeeded` would put it in the run history under a verdict that
+ * means nothing for it.
+ */ export function actionRunResult(entry) {
+    var _entry_result, _entry_action;
+    const stored = String((_entry_result = entry.result) != null ? _entry_result : '').trim();
+    if (stored === 'succeeded' || stored === 'failed' || stored === 'skipped') {
+        return stored;
+    }
+    const action = String((_entry_action = entry.action) != null ? _entry_action : '');
+    if (!action.startsWith('Action ran on')) return undefined;
+    return action.includes('with errors:') ? 'failed' : 'succeeded';
+}
+/**
+ * The `What happened` column: `Sent email · saved to Leads · webhook 200`.
+ *
+ * Falls back to the legacy prose, minus its `Action ran on <event>` prefix
+ * — that fact is the Trigger column now, and repeating it in the summary
+ * would make every historic row say the same thing twice.
+ */ export function actionRunSummary(entry) {
+    var _entry_summary, _entry_action;
+    const summary = String((_entry_summary = entry.summary) != null ? _entry_summary : '').trim();
+    if (summary) return summary;
+    const action = String((_entry_action = entry.action) != null ? _entry_action : '').trim();
+    const errors = action.match(/with errors:\s*(.+)$/);
+    if (errors) return errors[1];
+    // A pre-AGL-2171 success recorded nothing but the fact that it ran.
+    if (action.startsWith('Action ran on')) return 'Ran';
+    return action;
+}
+
+//# sourceMappingURL=activity-presenter.js.map

package/src/lib/app-utils/activity-presenter.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/activity-presenter.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Activity-feed presenter (AGL-810). The `hosts/{id}/activity` and\n// `orgs/{id}/activity` logs store a free-text `action` plus a `{ type, id,\n// name }` target, written from ~40 scattered call sites. The three renderers\n// (host card, host table, org card) used to each format entries their own\n// way — one dropped the target entirely, one printed the raw Firestore doc\n// id when no name was recorded. This module is the single place that turns a\n// stored entry into something a human reads, and into a deep link to the\n// thing that changed. It is deliberately dependency-free (only the string\n// route table) so plugin libs and the console app can both import it via\n// `@aglyn/aglyn/app-utils/activity-presenter`.\n\nimport { Route, buildRoute } from './console-routes'\nimport {\n  CRM_RECORD_SECTIONS,\n  crmRecordHref,\n  crmSectionHref,\n  type CrmRecordKind,\n} from './console-record-links'\nimport { hostEventLabel } from './workflows'\nimport { duplicateActivityActionLabel } from './duplicate-resource'\nimport {\n  pluginActivityActionLabel,\n  pluginActivityGroupForAction,\n  pluginActivityTargetNoun,\n} from '../plugin-manager/plugin-activity-actions'\n\n/** The stored `target` sub-object, read defensively (any field may be absent). */\nexport interface ActivityTargetLike {\n  type?: string\n  id?: string\n  name?: string\n  /** Present on screen saves so the deep link can hit the exact version. */\n  versionId?: string\n}\n\n/** A stored activity document, read defensively. */\nexport interface ActivityEntryLike {\n  action?: string\n  target?: ActivityTargetLike | null\n  // Some early org entries carried the type/target id at the top level rather\n  // than nested under `target` — tolerate both so no entry renders blank.\n  type?: string\n  targetId?: string\n  /** The address the actor had when the entry was written; null for a key. */\n  actorEmail?: string | null\n  /** The name of the API key that wrote the entry, when a key did (AGL-2632). */\n  apiKeyName?: string | null\n}\n\n/**\n * Who a host activity entry is attributed to — the writer's half of the\n * contract whose reader is {@link activityActorLabel}.\n *\n * A person is their verified uid and the address they had at the time. An\n * integration is the literal uid `'api'`, no address, and the name the\n * organization gave its key — carried because a feed that says \"Someone\"\n * about every write a key made is an audit trail with a hole in it: three\n * Zapier zaps and a nightly import all read as the same nobody.\n */\nexport interface HostActivityActor {\n  uid: string\n  email?: string | null\n  /** The API key's name, for an entry an integration wrote. */\n  apiKeyName?: string | null\n}\n\n/**\n * What the presenter needs to build a link. `host` is the `[host]` URL\n * segment — the site SLUG the console routes by (AGL-622), NOT the host doc\n * id — so pass `useParams().host`, not the doc id. When it is present the\n * entry is treated as host-scoped, otherwise org-scoped — which\n * disambiguates `member`, the one type both logs use.\n */\nexport interface ActivityLinkContext {\n  orgSlug?: string\n  host?: string\n}\n\n/** Human, singular noun for a target type. Falls back to the raw type. */\nconst TYPE_LABELS: Record<string, string> = {\n  host: 'Site',\n  screen: 'Screen',\n  layout: 'Layout',\n  theme: 'Theme',\n  media: 'Media',\n  content: 'Content',\n  variable: 'Variable',\n  function: 'Function',\n  workflow: 'Workflow',\n  member: 'Member',\n  component: 'Component',\n  template: 'Template',\n  org: 'Organization',\n  invite: 'Invitation',\n  subscription: 'Subscription',\n  // A custom role's AI permission flipped (AGL-2929).\n  role: 'Role',\n  // A generation job (AGL-2904): the org feed names the job, and each of its\n  // outputs names the resource it produced.\n  aiJob: 'AI generation',\n  // CRM records (AGL-2622): a person added, a company or a deal created or\n  // deleted, a lead converted — logged into the feed of the site whose\n  // console did it, and linked to the record the way a screen is.\n  contact: 'Contact',\n  lead: 'Lead',\n  company: 'Company',\n  deal: 'Deal',\n}\n\n/** The activity target types that are CRM records, for the link switch. */\nconst CRM_TARGET_KINDS = new Set<string>(Object.keys(CRM_RECORD_SECTIONS))\n\n/**\n * The org-level hub's section for each record kind an org feed entry may\n * name (AGL-2634): the four record kinds, and tasks, which have a section\n * and no page of their own.\n */\nconst ORG_CRM_SECTIONS: Record<string, string> = {\n  ...CRM_RECORD_SECTIONS,\n  task: 'tasks',\n}\n\n/**\n * Human noun for a target type, e.g. `'screen'` → `'Screen'`. A plugin's\n * own resource is stored as `pluginId:noun` (AGL-2978), and a reader sees\n * the noun: `acme-mail:mailbox` → `Mailbox`.\n */\nexport function activityTypeLabel(type: string | undefined): string {\n  if (!type) return 'Item'\n  const known = TYPE_LABELS[type]\n  if (known) return known\n  const noun = pluginActivityTargetNoun(type) ?? type\n  return noun.charAt(0).toUpperCase() + noun.slice(1)\n}\n\n/**\n * A label for the target column/link. Prefers the recorded name; when none\n * was written (older entries, id-only saves) it degrades to the humanized\n * type — NEVER the raw doc id, which is meaningless to a reader.\n */\nexport function activityTargetLabel(\n  target: ActivityTargetLike | null | undefined,\n): string {\n  if (target?.name) return target.name\n  return activityTypeLabel(target?.type)\n}\n\n/**\n * What the action column reads (AGL-2929). Most actions are the sentence\n * their writer stored; a plugin's rows store a code (`ai.job.output`) so\n * that three surfaces can recognize them without parsing prose, and the\n * code is translated here — once, from the plugin-declared catalog\n * (AGL-2940) — rather than shown to a reader as a dotted path.\n */\nexport function activityActionLabel(action: string | undefined): string {\n  const stored = action?.trim() ?? ''\n  return (\n    pluginActivityActionLabel(stored) ??\n    duplicateActivityActionLabel(stored) ??\n    stored\n  )\n}\n\n/**\n * The filter group an entry's code belongs to — the chip that keeps it —\n * or `undefined` for a prose action no plugin declared.\n */\nexport function activityEntryGroupId(entry: ActivityEntryLike): string | undefined {\n  return pluginActivityGroupForAction(entry.action?.trim())?.id\n}\n\n/**\n * The primary line for a feed entry: the action, suffixed with the target\n * name when one is known, so \"Saved the screen\" becomes \"Saved the screen —\n * Home\". A missing action degrades to the target label rather than blank.\n */\nexport function activityPrimaryText(entry: ActivityEntryLike): string {\n  const action = activityActionLabel(entry.action)\n  const name = entry.target?.name?.trim()\n  if (action && name) return `${action} — ${name}`\n  if (action) return action\n  return activityTargetLabel(entry.target)\n}\n\n/** How an integration's key is named wherever an actor is: `API key Zapier`. */\nexport function apiKeyActorLabel(name: string): string {\n  return `API key ${name}`\n}\n\n/**\n * The \"who\" line for an entry: the actor's address, else the key that wrote\n * it by name, else `Someone` — for an entry that recorded neither, which\n * every key-written entry was before the name was carried.\n */\nexport function activityActorLabel(entry: ActivityEntryLike): string {\n  if (entry.actorEmail) return entry.actorEmail\n  if (entry.apiKeyName) return apiKeyActorLabel(entry.apiKeyName)\n  return 'Someone'\n}\n\n/**\n * A deep link to the resource an entry points at, or `undefined` when it\n * cannot be built (missing context, or a type with nowhere sensible to go).\n * `buildRoute` emits `<orgSlug?>` placeholders for missing params, so every\n * branch guards its inputs and returns `undefined` rather than a dead link.\n */\nexport function activityHref(\n  entry: ActivityEntryLike,\n  ctx: ActivityLinkContext,\n): string | undefined {\n  const { orgSlug, host } = ctx\n  if (!orgSlug) return undefined\n  const target = entry.target ?? undefined\n  const type = target?.type ?? entry.type\n  const id = target?.id ?? entry.targetId\n  const versionId = target?.versionId\n\n  // Host-scoped entries: every host route needs both orgSlug and host.\n  if (host) {\n    switch (type) {\n      case 'host':\n        return buildRoute(Route.HOST_DASHBOARD, { orgSlug, host })\n      case 'screen':\n        // The screen detail page is version-addressed; without a versionId\n        // there is no \"current\" pointer to route through, so land on the list.\n        return id && versionId\n          ? buildRoute(Route.SCREEN_DETAILS, {\n              orgSlug,\n              host,\n              screenId: id,\n              versionId,\n            })\n          : buildRoute(Route.HOST_SCREENS, { orgSlug, host })\n      case 'component':\n        return id\n          ? buildRoute(Route.COMPONENT_DETAILS, {\n              orgSlug,\n              host,\n              componentId: id,\n            })\n          : buildRoute(Route.HOST_COMPONENTS, { orgSlug, host })\n      case 'template':\n        return id\n          ? buildRoute(Route.TEMPLATE_DETAILS, {\n              orgSlug,\n              host,\n              templateId: id,\n            })\n          : buildRoute(Route.HOST_TEMPLATES, { orgSlug, host })\n      case 'layout':\n        return id\n          ? buildRoute(Route.LAYOUT_DETAILS, { orgSlug, host, layoutId: id })\n          : buildRoute(Route.HOST_LAYOUTS, { orgSlug, host })\n      case 'theme':\n        return buildRoute(Route.HOST_SETUP_THEME, { orgSlug, host })\n      case 'media':\n        return buildRoute(Route.HOST_MEDIA, { orgSlug, host })\n      case 'content':\n        return buildRoute(Route.HOST_CONTENT, { orgSlug, host })\n      case 'variable':\n        return buildRoute(Route.HOST_DATA, { orgSlug, host })\n      case 'function':\n        return buildRoute(Route.HOST_LOGIC, { orgSlug, host })\n      case 'workflow':\n        return buildRoute(Route.HOST_AUTOMATION, { orgSlug, host })\n      case 'member':\n        // Site team is managed on the Setup page — there is no per-member\n        // host route.\n        return buildRoute(Route.HOST_SETUP, { orgSlug, host })\n      default:\n        // A CRM record's own page, or its list when the entry named no id —\n        // a deleted record still has a list to land on. The CRM is a plugin\n        // hub, so its addresses come from the shared builder rather than\n        // the route table, the same door the console's search uses.\n        if (type && CRM_TARGET_KINDS.has(type)) {\n          const kind = type as CrmRecordKind\n          return id\n            ? crmRecordHref({ orgSlug, host }, kind, id)\n            : crmSectionHref({ orgSlug, host }, CRM_RECORD_SECTIONS[kind])\n        }\n        return undefined\n    }\n  }\n\n  // Org-scoped entries.\n  switch (type) {\n    case 'org':\n      return buildRoute(Route.ORG_SETTINGS, { orgSlug })\n    case 'member':\n      return id\n        ? buildRoute(Route.MANAGE_TEAM_MEMBER, { orgSlug, uid: id })\n        : buildRoute(Route.MANAGE_TEAM, { orgSlug })\n    case 'invite':\n      return buildRoute(Route.MANAGE_TEAM, { orgSlug })\n    default: {\n      // A CRM record acted on at the ORGANIZATION level (AGL-2634) — a deal\n      // moved from the org board, a merge, a bulk bar's action — opens in\n      // the org-level hub. A lead's org address needs its site, which the\n      // entry does not carry, and a bulk line names no record: both land\n      // on the section.\n      const section = type ? ORG_CRM_SECTIONS[type] : undefined\n      if (!section) return undefined\n      const hub = `${buildRoute(Route.ORG_CRM, { orgSlug })}/${section}`\n      return id && type !== 'lead' && type !== 'task'\n        ? `${hub}/${encodeURIComponent(id)}`\n        : hub\n    }\n  }\n}\n\n/**\n * How an automation run ended (AGL-2171).\n *\n * `skipped` is a first-class outcome, not an absence. An unmet condition\n * used to be a bare `continue` that wrote nothing, so \"why didn't my\n * automation fire?\" — the most common support question about automations —\n * had no answer anywhere in the product, while `/product/workflows`\n * advertises an amber `Skipped` row that answers it.\n */\nexport type ActionRunResult = 'succeeded' | 'failed' | 'skipped'\n\n/** A stored run entry: an activity document with the run fields on it. */\nexport interface ActionRunEntryLike extends ActivityEntryLike {\n  result?: string\n  trigger?: string\n  summary?: string\n}\n\n/**\n * `formSubmission` → `Form submitted`.\n *\n * The console rendered the raw camelCase identifier in the trigger select\n * and in every run row. The words are `HOST_EVENT_LABELS` in `workflows.ts`\n * — one map, so the picker an author chose from and the run row they read\n * afterwards cannot name the same event differently.\n */\nexport function actionTriggerLabel(event: string | undefined): string {\n  return hostEventLabel(event)\n}\n\n/**\n * The run's outcome, tolerating rows written before it was recorded.\n *\n * A legacy entry carries only the prose `action` string, so it is read\n * back: `with errors:` means it failed and `Action ran on` means it\n * succeeded. Anything else is not a run at all — the activity collection\n * also holds publishes, media saves and member changes, and calling one of\n * those `succeeded` would put it in the run history under a verdict that\n * means nothing for it.\n */\nexport function actionRunResult(\n  entry: ActionRunEntryLike,\n): ActionRunResult | undefined {\n  const stored = String(entry.result ?? '').trim()\n  if (stored === 'succeeded' || stored === 'failed' || stored === 'skipped') {\n    return stored\n  }\n  const action = String(entry.action ?? '')\n  if (!action.startsWith('Action ran on')) return undefined\n  return action.includes('with errors:') ? 'failed' : 'succeeded'\n}\n\n/**\n * The `What happened` column: `Sent email · saved to Leads · webhook 200`.\n *\n * Falls back to the legacy prose, minus its `Action ran on <event>` prefix\n * — that fact is the Trigger column now, and repeating it in the summary\n * would make every historic row say the same thing twice.\n */\nexport function actionRunSummary(entry: ActionRunEntryLike): string {\n  const summary = String(entry.summary ?? '').trim()\n  if (summary) return summary\n  const action = String(entry.action ?? '').trim()\n  const errors = action.match(/with errors:\\s*(.+)$/)\n  if (errors) return errors[1]\n  // A pre-AGL-2171 success recorded nothing but the fact that it ran.\n  if (action.startsWith('Action ran on')) return 'Ran'\n  return action\n}\n"],"names":["Route","buildRoute","CRM_RECORD_SECTIONS","crmRecordHref","crmSectionHref","hostEventLabel","duplicateActivityActionLabel","pluginActivityActionLabel","pluginActivityGroupForAction","pluginActivityTargetNoun","TYPE_LABELS","host","screen","layout","theme","media","content","variable","function","workflow","member","component","template","org","invite","subscription","role","aiJob","contact","lead","company","deal","CRM_TARGET_KINDS","Set","Object","keys","ORG_CRM_SECTIONS","task","activityTypeLabel","type","known","noun","charAt","toUpperCase","slice","activityTargetLabel","target","name","activityActionLabel","action","stored","trim","activityEntryGroupId","entry","id","activityPrimaryText","apiKeyActorLabel","activityActorLabel","actorEmail","apiKeyName","activityHref","ctx","orgSlug","undefined","targetId","versionId","HOST_DASHBOARD","SCREEN_DETAILS","screenId","HOST_SCREENS","COMPONENT_DETAILS","componentId","HOST_COMPONENTS","TEMPLATE_DETAILS","templateId","HOST_TEMPLATES","LAYOUT_DETAILS","layoutId","HOST_LAYOUTS","HOST_SETUP_THEME","HOST_MEDIA","HOST_CONTENT","HOST_DATA","HOST_LOGIC","HOST_AUTOMATION","HOST_SETUP","has","kind","ORG_SETTINGS","MANAGE_TEAM_MEMBER","uid","MANAGE_TEAM","section","hub","ORG_CRM","encodeURIComponent","actionTriggerLabel","event","actionRunResult","String","result","startsWith","includes","actionRunSummary","summary","errors","match"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,mEAAmE;AACnE,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,+CAA+C;AAE/C,SAASA,KAAK,EAAEC,UAAU,QAAQ,sBAAkB;AACpD,SACEC,mBAAmB,EACnBC,aAAa,EACbC,cAAc,QAET,4BAAwB;AAC/B,SAASC,cAAc,QAAQ,iBAAa;AAC5C,SAASC,4BAA4B,QAAQ,0BAAsB;AACnE,SACEC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wBAAwB,QACnB,+CAA2C;AAsDlD,wEAAwE,GACxE,MAAMC,cAAsC;IAC1CC,MAAM;IACNC,QAAQ;IACRC,QAAQ;IACRC,OAAO;IACPC,OAAO;IACPC,SAAS;IACTC,UAAU;IACVC,UAAU;IACVC,UAAU;IACVC,QAAQ;IACRC,WAAW;IACXC,UAAU;IACVC,KAAK;IACLC,QAAQ;IACRC,cAAc;IACd,oDAAoD;IACpDC,MAAM;IACN,2EAA2E;IAC3E,0CAA0C;IAC1CC,OAAO;IACP,yEAAyE;IACzE,qEAAqE;IACrE,gEAAgE;IAChEC,SAAS;IACTC,MAAM;IACNC,SAAS;IACTC,MAAM;AACR;AAEA,yEAAyE,GACzE,MAAMC,mBAAmB,IAAIC,IAAYC,OAAOC,IAAI,CAACjC;AAErD;;;;CAIC,GACD,MAAMkC,mBAA2C,aAC5ClC;IACHmC,MAAM;;AAGR;;;;CAIC,GACD,OAAO,SAASC,kBAAkBC,IAAwB;QAI3C9B;IAHb,IAAI,CAAC8B,MAAM,OAAO;IAClB,MAAMC,QAAQ9B,WAAW,CAAC6B,KAAK;IAC/B,IAAIC,OAAO,OAAOA;IAClB,MAAMC,QAAOhC,4BAAAA,yBAAyB8B,iBAAzB9B,4BAAkC8B;IAC/C,OAAOE,KAAKC,MAAM,CAAC,GAAGC,WAAW,KAAKF,KAAKG,KAAK,CAAC;AACnD;AAEA;;;;CAIC,GACD,OAAO,SAASC,oBACdC,MAA6C;IAE7C,IAAIA,0BAAAA,OAAQC,IAAI,EAAE,OAAOD,OAAOC,IAAI;IACpC,OAAOT,kBAAkBQ,0BAAAA,OAAQP,IAAI;AACvC;AAEA;;;;;;CAMC,GACD,OAAO,SAASS,oBAAoBC,MAA0B;cAG1D1C,OAAAA;IAFF,MAAM2C,iBAASD,0BAAAA,OAAQE,IAAI,qBAAM;IACjC,QACE5C,SAAAA,6BAAAA,0BAA0B2C,mBAA1B3C,6BACAD,6BAA6B4C,mBAD7B3C,QAEA2C;AAEJ;AAEA;;;CAGC,GACD,OAAO,SAASE,qBAAqBC,KAAwB;QACpD7C,+BAA6B6C;IAApC,QAAO7C,gCAAAA,8BAA6B6C,gBAAAA,MAAMJ,MAAM,qBAAZI,cAAcF,IAAI,wBAA/C3C,8BAAoD8C,EAAE;AAC/D;AAEA;;;;CAIC,GACD,OAAO,SAASC,oBAAoBF,KAAwB;QAE7CA,oBAAAA;IADb,MAAMJ,SAASD,oBAAoBK,MAAMJ,MAAM;IAC/C,MAAMF,QAAOM,gBAAAA,MAAMP,MAAM,sBAAZO,qBAAAA,cAAcN,IAAI,qBAAlBM,mBAAoBF,IAAI;IACrC,IAAIF,UAAUF,MAAM,OAAO,GAAGE,OAAO,GAAG,EAAEF,MAAM;IAChD,IAAIE,QAAQ,OAAOA;IACnB,OAAOJ,oBAAoBQ,MAAMP,MAAM;AACzC;AAEA,8EAA8E,GAC9E,OAAO,SAASU,iBAAiBT,IAAY;IAC3C,OAAO,CAAC,QAAQ,EAAEA,MAAM;AAC1B;AAEA;;;;CAIC,GACD,OAAO,SAASU,mBAAmBJ,KAAwB;IACzD,IAAIA,MAAMK,UAAU,EAAE,OAAOL,MAAMK,UAAU;IAC7C,IAAIL,MAAMM,UAAU,EAAE,OAAOH,iBAAiBH,MAAMM,UAAU;IAC9D,OAAO;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASC,aACdP,KAAwB,EACxBQ,GAAwB;QAITR;IAFf,MAAM,EAAES,OAAO,EAAEnD,IAAI,EAAE,GAAGkD;IAC1B,IAAI,CAACC,SAAS,OAAOC;IACrB,MAAMjB,UAASO,gBAAAA,MAAMP,MAAM,YAAZO,gBAAgBU;IAC/B,MAAMxB,eAAOO,0BAAAA,OAAQP,IAAI,mBAAIc,MAAMd,IAAI;IACvC,MAAMe,cAAKR,0BAAAA,OAAQQ,EAAE,oBAAID,MAAMW,QAAQ;IACvC,MAAMC,YAAYnB,0BAAAA,OAAQmB,SAAS;IAEnC,qEAAqE;IACrE,IAAItD,MAAM;QACR,OAAQ4B;YACN,KAAK;gBACH,OAAOtC,WAAWD,MAAMkE,cAAc,EAAE;oBAAEJ;oBAASnD;gBAAK;YAC1D,KAAK;gBACH,mEAAmE;gBACnE,uEAAuE;gBACvE,OAAO2C,MAAMW,YACThE,WAAWD,MAAMmE,cAAc,EAAE;oBAC/BL;oBACAnD;oBACAyD,UAAUd;oBACVW;gBACF,KACAhE,WAAWD,MAAMqE,YAAY,EAAE;oBAAEP;oBAASnD;gBAAK;YACrD,KAAK;gBACH,OAAO2C,KACHrD,WAAWD,MAAMsE,iBAAiB,EAAE;oBAClCR;oBACAnD;oBACA4D,aAAajB;gBACf,KACArD,WAAWD,MAAMwE,eAAe,EAAE;oBAAEV;oBAASnD;gBAAK;YACxD,KAAK;gBACH,OAAO2C,KACHrD,WAAWD,MAAMyE,gBAAgB,EAAE;oBACjCX;oBACAnD;oBACA+D,YAAYpB;gBACd,KACArD,WAAWD,MAAM2E,cAAc,EAAE;oBAAEb;oBAASnD;gBAAK;YACvD,KAAK;gBACH,OAAO2C,KACHrD,WAAWD,MAAM4E,cAAc,EAAE;oBAAEd;oBAASnD;oBAAMkE,UAAUvB;gBAAG,KAC/DrD,WAAWD,MAAM8E,YAAY,EAAE;oBAAEhB;oBAASnD;gBAAK;YACrD,KAAK;gBACH,OAAOV,WAAWD,MAAM+E,gBAAgB,EAAE;oBAAEjB;oBAASnD;gBAAK;YAC5D,KAAK;gBACH,OAAOV,WAAWD,MAAMgF,UAAU,EAAE;oBAAElB;oBAASnD;gBAAK;YACtD,KAAK;gBACH,OAAOV,WAAWD,MAAMiF,YAAY,EAAE;oBAAEnB;oBAASnD;gBAAK;YACxD,KAAK;gBACH,OAAOV,WAAWD,MAAMkF,SAAS,EAAE;oBAAEpB;oBAASnD;gBAAK;YACrD,KAAK;gBACH,OAAOV,WAAWD,MAAMmF,UAAU,EAAE;oBAAErB;oBAASnD;gBAAK;YACtD,KAAK;gBACH,OAAOV,WAAWD,MAAMoF,eAAe,EAAE;oBAAEtB;oBAASnD;gBAAK;YAC3D,KAAK;gBACH,kEAAkE;gBAClE,cAAc;gBACd,OAAOV,WAAWD,MAAMqF,UAAU,EAAE;oBAAEvB;oBAASnD;gBAAK;YACtD;gBACE,oEAAoE;gBACpE,oEAAoE;gBACpE,iEAAiE;gBACjE,4DAA4D;gBAC5D,IAAI4B,QAAQP,iBAAiBsD,GAAG,CAAC/C,OAAO;oBACtC,MAAMgD,OAAOhD;oBACb,OAAOe,KACHnD,cAAc;wBAAE2D;wBAASnD;oBAAK,GAAG4E,MAAMjC,MACvClD,eAAe;wBAAE0D;wBAASnD;oBAAK,GAAGT,mBAAmB,CAACqF,KAAK;gBACjE;gBACA,OAAOxB;QACX;IACF;IAEA,sBAAsB;IACtB,OAAQxB;QACN,KAAK;YACH,OAAOtC,WAAWD,MAAMwF,YAAY,EAAE;gBAAE1B;YAAQ;QAClD,KAAK;YACH,OAAOR,KACHrD,WAAWD,MAAMyF,kBAAkB,EAAE;gBAAE3B;gBAAS4B,KAAKpC;YAAG,KACxDrD,WAAWD,MAAM2F,WAAW,EAAE;gBAAE7B;YAAQ;QAC9C,KAAK;YACH,OAAO7D,WAAWD,MAAM2F,WAAW,EAAE;gBAAE7B;YAAQ;QACjD;YAAS;gBACP,sEAAsE;gBACtE,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,kBAAkB;gBAClB,MAAM8B,UAAUrD,OAAOH,gBAAgB,CAACG,KAAK,GAAGwB;gBAChD,IAAI,CAAC6B,SAAS,OAAO7B;gBACrB,MAAM8B,MAAM,GAAG5F,WAAWD,MAAM8F,OAAO,EAAE;oBAAEhC;gBAAQ,GAAG,CAAC,EAAE8B,SAAS;gBAClE,OAAOtC,MAAMf,SAAS,UAAUA,SAAS,SACrC,GAAGsD,IAAI,CAAC,EAAEE,mBAAmBzC,KAAK,GAClCuC;YACN;IACF;AACF;AAoBA;;;;;;;CAOC,GACD,OAAO,SAASG,mBAAmBC,KAAyB;IAC1D,OAAO5F,eAAe4F;AACxB;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASC,gBACd7C,KAAyB;QAEHA,eAIAA;IAJtB,MAAMH,SAASiD,QAAO9C,gBAAAA,MAAM+C,MAAM,YAAZ/C,gBAAgB,IAAIF,IAAI;IAC9C,IAAID,WAAW,eAAeA,WAAW,YAAYA,WAAW,WAAW;QACzE,OAAOA;IACT;IACA,MAAMD,SAASkD,QAAO9C,gBAAAA,MAAMJ,MAAM,YAAZI,gBAAgB;IACtC,IAAI,CAACJ,OAAOoD,UAAU,CAAC,kBAAkB,OAAOtC;IAChD,OAAOd,OAAOqD,QAAQ,CAAC,kBAAkB,WAAW;AACtD;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,iBAAiBlD,KAAyB;QACjCA,gBAEDA;IAFtB,MAAMmD,UAAUL,QAAO9C,iBAAAA,MAAMmD,OAAO,YAAbnD,iBAAiB,IAAIF,IAAI;IAChD,IAAIqD,SAAS,OAAOA;IACpB,MAAMvD,SAASkD,QAAO9C,gBAAAA,MAAMJ,MAAM,YAAZI,gBAAgB,IAAIF,IAAI;IAC9C,MAAMsD,SAASxD,OAAOyD,KAAK,CAAC;IAC5B,IAAID,QAAQ,OAAOA,MAAM,CAAC,EAAE;IAC5B,oEAAoE;IACpE,IAAIxD,OAAOoD,UAAU,CAAC,kBAAkB,OAAO;IAC/C,OAAOpD;AACT"}

package/src/lib/app-utils/advertising-tag-mounts.d.ts

@@ -0,0 +1,133 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ResolvedAdvertisingTag } from './advertising-tags';
+import { type ReactElement } from 'react';
+/**
+ * The MOUNT and the WITHDRAWAL for consent-gated advertising tags, with no
+ * opinion about where the verdict came from.
+ *
+ * ## Why this is a shared component and not a second copy per surface
+ *
+ * Aglyn runs advertising tags on three first-party surfaces and they resolve
+ * consent through three different mechanisms: the tenant runtime reads a host
+ * document and a per-host record, the console reads the platform record its
+ * own posture machinery wrote, and the docs site reads the registrable-domain
+ * mirror of that record. Those are genuinely different questions.
+ *
+ * What is NOT different is what happens once the answer is known: mount an
+ * inline boot and a library per vendor, and — the half that is easy to forget
+ * and impossible to retrofit — stop them the moment the answer changes. A
+ * second copy of that half is how one surface comes to keep firing after
+ * consent is withdrawn on another, because the copy that was not updated
+ * still looks exactly like the one that was.
+ *
+ * So the verdict is a PROP and the machinery is shared. Each surface answers
+ * its own question with its own resolver; none of them owns a teardown.
+ *
+ * ## Why it renders even when the answer is no
+ *
+ * Because the withdrawal path needs a listener. A visitor who accepts and then
+ * turns advertising off must stop being tracked in THAT pageview, and by then
+ * the vendor library has executed — React dropping the `<Script>` does not
+ * unload it (AGL-1608). So this component stays mounted whenever the surface
+ * participates at all, and subscribes to
+ * {@link VISITOR_CONSENT_CHANGED_EVENT}; the teardown runs from the event,
+ * synchronously with the visitor's click, rather than waiting on a re-render.
+ *
+ * Both paths run and they agree, which is deliberate: the render gate is what
+ * keeps the tag out of a fresh pageview, the listener is what removes one that
+ * is already there, and neither can do the other's job.
+ */
+export interface AdvertisingTagMountsProps {
+    /**
+     * Whether this surface participates in the gate AT ALL.
+     *
+     * False installs nothing — no listener, no scripts. That is the clause that
+     * keeps the tenant runtime's teardown off a customer's site: we did not load
+     * their pixel, we do not know what basis it runs on, and reaching into their
+     * page to kill it would be its own breach. `revokeAdvertisingTags` is
+     * additionally attribute-scoped, so there are two independent scopes.
+     */
+    readonly active: boolean;
+    /** The verdict for THIS render: the tags that may exist right now. */
+    readonly tags: readonly ResolvedAdvertisingTag[];
+    /**
+     * Re-read the verdict from live state, for the withdrawal listener.
+     *
+     * A callback rather than the `tags` prop, because the listener fires from
+     * the visitor's own click in the same tick as the record is written — the
+     * props for the current render are by definition the state before it.
+     */
+    readonly resolve: () => readonly ResolvedAdvertisingTag[];
+    /**
+     * The request's CSP nonce, stamped onto BOTH elements of every pair.
+     *
+     * A surface that enforces a nonce'd `script-src` refuses an inline script
+     * that does not carry it, and the boot half of every pair is inline. Next's
+     * `<Script>` stamps a nonce only when one reaches it: the automatic path
+     * reads `HeadManagerContext`, and the App Router's client provider carries
+     * no nonce at all — so a pair mounted after hydration, which is the only
+     * time this component ever mounts one, is unnonced unless the caller hands
+     * the value down. An explicit prop wins inside `next/script`
+     * (`restProps.nonce || nonce`), which is what makes this the one door.
+     *
+     * The failure without it is silent and lopsided: the library beside the
+     * boot has a `src` the policy allows, so the vendor's code loads and runs
+     * against an account nobody configured, and the conversions this surface
+     * sends are lost with nothing in the page but a CSP violation.
+     *
+     * Absent on a surface that sends no `script-src`: nothing is stamped, and
+     * nothing is refused.
+     */
+    readonly nonce?: string;
+    /**
+     * Libraries the HOST PAGE mounts itself, named by the needle a vendor
+     * declares in `sharesLibrary` (AGL-2681).
+     *
+     * {@link sharedLibraryPresent} reads the document at render time, and that
+     * is the right instrument for a loader some other party put there. It is
+     * the wrong one for a loader the SAME render is about to create. On the
+     * tenant the GA pair and this component both wait on `consent.ready`, so
+     * the first render that may emit either emits both — GA's `<Script>` is not
+     * in the document yet when this component looks, the check honestly says
+     * "absent", and the visitor downloads `gtag.js` twice: once as ours with
+     * `?id=AW-…`, once as gtag's own destination fetch for the `config` that
+     * follows. Measured on `aglyn.com/solutions/small-business` with
+     * advertising granted: two 147 KiB loaders for one account.
+     *
+     * A page that KNOWS it renders the library says so here, from the same
+     * condition that renders it, and the document check stays as the fallback
+     * for loaders it does not know about. Naming the needle rather than passing
+     * a boolean keeps the declaration per library: a page that mounts gtag has
+     * said nothing about the Meta pixel.
+     */
+    readonly sharedLibraries?: readonly string[];
+}
+/**
+ * Is a library matching `needle` already in the document?
+ *
+ * Read at RENDER time rather than in an effect: the decision is whether to
+ * emit a `<Script>` at all, and by the time an effect could answer, Next has
+ * already appended it. `document` is guarded because this component renders on
+ * the server too, where nothing is mounted and the honest answer is "no" — the
+ * client render then re-evaluates with the real document.
+ *
+ * Blind to a loader the current render is creating alongside this one — see
+ * `sharedLibraries` on the props for the case that needs the page to say so.
+ */
+export declare function sharedLibraryPresent(needle: string): boolean;
+export default function AdvertisingTagMounts({ active, tags, resolve, nonce, sharedLibraries, }: AdvertisingTagMountsProps): ReactElement | null;

package/src/lib/app-utils/advertising-tag-mounts.js

@@ -0,0 +1,118 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // NO `'use client'` here, and it is a lint rule rather than a preference
+// (AGL-52): a directive inside `@aglyn/aglyn` makes the bundler split a
+// duplicate module graph, and the second canvas/emitter singleton renders the
+// tenant site blank. Every component that mounts this one carries the
+// directive itself, which is where the client boundary belongs.
+//
+// Deep app-utils modules, never the `@aglyn/aglyn` barrel (AGL-1550): this
+// file is reached from `site-analytics.tsx`, whose import closure
+// `site-analytics-independence.spec.ts` walks and which must stay independent
+// of the site-plugin gate.
+import { ADVERTISING_TAG_ATTRIBUTE, restoreAdvertisingTags, revokeAdvertisingTags } from "./advertising-tags.js";
+import { VISITOR_CONSENT_CHANGED_EVENT } from "./visitor-consent.js";
+import Script from "next/script";
+import { Fragment, useEffect, useRef } from "react";
+/**
+ * Is a library matching `needle` already in the document?
+ *
+ * Read at RENDER time rather than in an effect: the decision is whether to
+ * emit a `<Script>` at all, and by the time an effect could answer, Next has
+ * already appended it. `document` is guarded because this component renders on
+ * the server too, where nothing is mounted and the honest answer is "no" — the
+ * client render then re-evaluates with the real document.
+ *
+ * Blind to a loader the current render is creating alongside this one — see
+ * `sharedLibraries` on the props for the case that needs the page to say so.
+ */ export function sharedLibraryPresent(needle) {
+    if (typeof document === 'undefined') return false;
+    try {
+        return Boolean(document.querySelector(`script[src*="${needle}"]`));
+    } catch (unused) {
+        // A hostile or absent DOM: assume nothing is mounted, which mounts our
+        // own copy — the cost is a duplicate fetch, never a missing tag.
+        return false;
+    }
+}
+export default function AdvertisingTagMounts({ active, tags, resolve, nonce, sharedLibraries }) {
+    /** Declared by the page, or found in the document: either means "ride it". */ const libraryProvided = (needle)=>{
+        var _ref;
+        return ((_ref = sharedLibraries == null ? void 0 : sharedLibraries.includes(needle)) != null ? _ref : false) || sharedLibraryPresent(needle);
+    };
+    /*
+   * The resolver is held in a ref rather than listed as an effect dependency.
+   *
+   * Every caller passes a closure over its own live consent state, so the
+   * function identity changes on every render; depending on it would tear the
+   * listener down and re-install it each time, and a withdrawal that landed in
+   * that window would find no subscriber. The ref makes the subscription's
+   * lifetime `active`, which is the only thing that genuinely changes it,
+   * while the callback it invokes is always the newest one.
+   */ const resolveRef = useRef(resolve);
+    resolveRef.current = resolve;
+    useEffect(()=>{
+        if (!active) return undefined;
+        const sync = ()=>{
+            if (resolveRef.current().length === 0) {
+                revokeAdvertisingTags();
+            } else {
+                // Symmetric: a visitor who withdrew and changed their mind inside one
+                // pageview would otherwise stay un-tracked until they navigated,
+                // because a re-rendered `<Script>` cannot re-execute a library the
+                // browser already ran.
+                restoreAdvertisingTags();
+            }
+        };
+        window.addEventListener(VISITOR_CONSENT_CHANGED_EVENT, sync);
+        return ()=>window.removeEventListener(VISITOR_CONSENT_CHANGED_EVENT, sync);
+    }, [
+        active
+    ]);
+    if (!active || tags.length === 0) return null;
+    return /*#__PURE__*/ _jsx(_Fragment, {
+        children: tags.map(({ vendor, accountId })=>// A PAIR per vendor, inline boot first and library second — the same
+            // shape as the GA `ga-init` / `ga-src` pair, and for the same reason:
+            // the boot defines the vendor's queue shim and declares the consent
+            // state, so nothing the library later drains was queued under a state
+            // nobody chose. Both elements carry the teardown's scope marker; only
+            // elements carrying it are ever revoked, removed or cookie-swept.
+            /*#__PURE__*/ _jsxs(Fragment, {
+                children: [
+                    /*#__PURE__*/ _jsx(Script, {
+                        id: `ad-tag-${vendor.id}-init`,
+                        strategy: "afterInteractive",
+                        nonce: nonce,
+                        [ADVERTISING_TAG_ATTRIBUTE]: vendor.id,
+                        children: vendor.bootSnippet ? vendor.bootSnippet(accountId) : ''
+                    }),
+                    vendor.sharesLibrary && libraryProvided(vendor.sharesLibrary) ? null : /*#__PURE__*/ _jsx(Script, {
+                        id: `ad-tag-${vendor.id}-src`,
+                        strategy: "afterInteractive",
+                        nonce: nonce,
+                        [ADVERTISING_TAG_ATTRIBUTE]: vendor.id,
+                        // `scriptSrcFor` where the vendor has one: gtag reads the
+                        // container out of the loader's query, so the copy we bring
+                        // ourselves has to name the account. See `scriptSrcFor`.
+                        src: vendor.scriptSrcFor ? vendor.scriptSrcFor(accountId) : vendor.scriptSrc
+                    })
+                ]
+            }, vendor.id))
+    });
+}
+
+//# sourceMappingURL=advertising-tag-mounts.js.map