@aglyn/aglyn 1.0.0-beta.149 → 1.0.0-beta.151

package/src/lib/plugin-manager/feature-plugins.d.ts

@@ -84,6 +84,17 @@ export interface ConsolePluginOrgHost {
  */
 export interface ConsolePluginOrgMount {
     orgId: string;
+    /**
+     * The organization's URL slug (AGL-3080) — the segment its console pages
+     * hang under, and what a surface needs to link to one of its siblings.
+     *
+     * Carried because plugins were reconstructing it: from `hostsPath` by
+     * splitting a string, or by resolving a site's org through an async lookup
+     * that can come back empty and leave a link unbuilt (AGL-867). The shell
+     * has it synchronously; every plugin paying for it again, differently, is
+     * the cost of not handing it over.
+     */
+    orgSlug: string;
     hosts: readonly ConsolePluginOrgHost[];
     hostsReady: boolean;
     /**
@@ -94,6 +105,27 @@ export interface ConsolePluginOrgMount {
      * cannot import the console's route table.
      */
     hostsPath: string;
+    /**
+     * Where this organization manages its PLAN — the console's billing page
+     * for the org (AGL-3080).
+     *
+     * Here for the same reason `hostsPath` is: a plugin cannot import the
+     * console's route table, and a surface that has to say "on a paid plan the
+     * cut is lower" is useless without somewhere to send the person who just
+     * read it. The shell's own upgrade notice covers an ENTITLEMENT refusal,
+     * where the surface never renders; this covers the case the surface renders
+     * fine and the plan is still the answer — a marketplace publisher seeing
+     * the free-plan fee on a listing they are about to price.
+     *
+     * OPTIONAL, and a plugin must branch on it rather than assume it: a
+     * deployment that bills nobody has no such page, and a self-hoster who
+     * removed it should not get a plugin's link into a 404. The shell's own
+     * upgrade notice makes the same allowance. `resolveOrgMount` supplies it
+     * for every mount this console builds.
+     *
+     * A plugin renders a link to it or does not, and never parses it.
+     */
+    billingPath?: string;
 }
 /**
  * Props every plugin-contributed console page receives from the shell's
@@ -113,6 +145,26 @@ export interface ConsolePluginPageProps {
     hostId: string | null;
     /** Present only at an org-level mount — see {@link ConsolePluginOrgMount}. */
     orgMount?: ConsolePluginOrgMount;
+    /**
+     * Every workspace the SIGNED-IN PERSON belongs to, as the org switcher
+     * already names them (AGL-3080) — not the mounted org's siblings, and
+     * nothing about what any of them contain.
+     *
+     * For a surface whose subject crosses workspaces. The marketplace's
+     * licences panel is the case: a purchase licenses one organization, so
+     * "I bought this once — which workspace did the licence land in?" is a
+     * question about the BUYER, and the answer is a name the reader already
+     * sees in the switcher. Resolving it from ids would be a read per row of
+     * documents the shell is already holding.
+     *
+     * Absent when the shell has not resolved them, and a surface must name the
+     * id rather than wait: this is a label, and a row with a raw id in it is
+     * worse than nothing only if the row does not appear at all.
+     */
+    viewerOrgs?: readonly {
+        id: string;
+        name: string;
+    }[];
     /** True when the org holds the extension's `featureFlag` entitlement. */
     entitled: boolean;
     /**
@@ -495,8 +547,6 @@ export declare const CONSOLE_WIDGET_SLOTS: {
     readonly orgData: "orgData";
     /** Besigner functions (ƒx) panel. Props: hostId. */
     readonly besignerFunctions: "besignerFunctions";
-    /** Marketplace listing detail body. Props: hostId, listingId, permissions. */
-    readonly marketplaceListing: "marketplaceListing";
     /**
      * Wherever a console page offers to publish something it holds (AGL-3080).
      * Props: {@link ConsoleArtifactPublishZoneProps}.
@@ -525,27 +575,6 @@ export declare const CONSOLE_WIDGET_SLOTS: {
      * marketplace.
      */
     readonly hostArtifactPublish: "hostArtifactPublish";
-    /**
-     * Above the whole Marketplace subtree: what THIS DEPLOYMENT cannot do
-     * (AGL-2019, moved out of the console app by AGL-3080). No props — the
-     * widget reads {@link DeploymentCapabilities} from the context the org's
-     * server layout provides, and draws nothing when the deployment is
-     * configured.
-     *
-     * A zone rather than a component the app holds, because the sentence is
-     * the marketplace's: it names what still works without a Stripe platform
-     * (browsing, free installs) and that is the plugin's knowledge, not the
-     * shell's. The app supplies only the fact.
-     */
-    readonly marketplaceCapability: "marketplaceCapability";
-    /**
-     * Org marketplace browse body (AGL-772). Props: hostId (acting site),
-     * permissions, orgScoped. The single org-scope place to browse + install,
-     * replacing the per-site marketplace tab.
-     */
-    readonly orgMarketplace: "orgMarketplace";
-    /** Plugins & add-ons hub installs section. Props: hostId. */
-    readonly orgAddons: "orgAddons";
     /** Bottom of the host dashboard. Props: hostId, org. (AGL-433) */
     readonly dashboardFooter: "dashboardFooter";
     /** Org settings page, below the tabbed cards. Props: orgId, org. */
@@ -1213,6 +1242,48 @@ export interface ConsoleUpgradeNotice {
 export interface ConsoleStaffPageProps {
     /** The page's own console path, `/admin/{id}`. */
     basePath: string;
+    /**
+     * Path segments beneath {@link basePath}, `[]` on the page's own URL
+     * (AGL-3080). Only ever non-empty for a page that declared
+     * {@link ConsoleStaffPage.ownsSubtree}.
+     *
+     * The staff twin of {@link ConsolePluginPageProps.segments}, and for the
+     * same case: a queue is a list, and a row of it is a page. A staff page
+     * without this could only ever BE the list.
+     */
+    segments?: readonly string[];
+    /**
+     * The viewer's staff ROLE, or `null` while the claim is still resolving
+     * (AGL-3080).
+     *
+     * Not every staff act is open to every staff role — six are `super`-only
+     * on the server — and a page that cannot tell renders live controls to a
+     * `support` engineer who clicks them and gets a raw 403. Pass it to
+     * `resolveStaffRoleGate` and render the verdict with
+     * `BlockedControl`; `null` must never be treated as a refusal, or every
+     * page flashes a disabled button at the people who may use it.
+     *
+     * ⚠️ NOT the boundary. The routes verify the decoded token per request and
+     * refuse regardless of what rendered. This exists so the console stops
+     * promising what the server will refuse.
+     */
+    staffRole?: string | null;
+    /**
+     * Console destinations a staff page may link ACROSS to, built by the shell
+     * (AGL-3080) — the staff twin of {@link ConsolePluginOrgMount}'s paths,
+     * and for the same reason: a plugin cannot import the console's route
+     * table, and a plugin that rebuilt one of these from a string would break
+     * silently the day the console moved it.
+     */
+    staffPaths?: ConsoleStaffPagePaths;
+}
+export interface ConsoleStaffPagePaths {
+    /**
+     * The staff console's page for one workspace. `undefined` on a deployment
+     * that has no such page, which a caller renders as no link rather than a
+     * dead one.
+     */
+    orgDetail(orgId: string): string | undefined;
 }
 /**
  * A page a plugin adds to the STAFF area (AGL-2939): a tab in the staff
@@ -1245,6 +1316,25 @@ export interface ConsoleStaffPage {
         icon?: MdiIconProps;
         docsTopic?: string;
     };
+    /**
+     * Whether this page claims every path beneath `/admin/{id}` too
+     * (AGL-3080) — the staff twin of {@link ConsoleNavItem.ownsSubtree}, with
+     * the same trade and the same duty.
+     *
+     * The case is a staff QUEUE: the list is the page, and each row opens one
+     * submission. The set of ids is a property of the data, so no static list
+     * could enumerate them, and without this every row's URL is a 404.
+     *
+     * A page that claims its subtree can no longer tell a typo from an id, so
+     * it takes on saying "no such thing" itself — which a queue has to be able
+     * to do anyway for a submission withdrawn while a link to it was still in
+     * a reviewer's inbox.
+     *
+     * The console's own staff routes keep winning their segments either way:
+     * a static path beats a dynamic one segment by segment, so `/admin/orgs/1`
+     * is still the orgs route and never a staff page's subtree.
+     */
+    ownsSubtree?: boolean;
     Component: ComponentType<ConsoleStaffPageProps>;
 }
 export interface ConsoleExtension {

package/src/lib/plugin-manager/feature-plugins.js

@@ -119,7 +119,6 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
     /** Host dashboard commerce summary. Props: hostId, org. */ commerceGlance: 'commerceGlance',
     /** Org Data page body. Props: orgId, org. */ orgData: 'orgData',
     /** Besigner functions (ƒx) panel. Props: hostId. */ besignerFunctions: 'besignerFunctions',
-    /** Marketplace listing detail body. Props: hostId, listingId, permissions. */ marketplaceListing: 'marketplaceListing',
     /**
    * Wherever a console page offers to publish something it holds (AGL-3080).
    * Props: {@link ConsoleArtifactPublishZoneProps}.
@@ -147,25 +146,22 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
    * anyway would be a menu item that opens nothing on a workspace with no
    * marketplace.
    */ hostArtifactPublish: 'hostArtifactPublish',
-    /**
-   * Above the whole Marketplace subtree: what THIS DEPLOYMENT cannot do
-   * (AGL-2019, moved out of the console app by AGL-3080). No props — the
-   * widget reads {@link DeploymentCapabilities} from the context the org's
-   * server layout provides, and draws nothing when the deployment is
-   * configured.
+    /*
+   * `marketplaceListing`, `marketplaceCapability`, `orgMarketplace` and
+   * `orgAddons` were here until AGL-3080, and are gone rather than deprecated.
    *
-   * A zone rather than a component the app holds, because the sentence is
-   * the marketplace's: it names what still works without a Stripe platform
-   * (browsing, free installs) and that is the plugin's knowledge, not the
-   * shell's. The app supplies only the fact.
-   */ marketplaceCapability: 'marketplaceCapability',
-    /**
-   * Org marketplace browse body (AGL-772). Props: hostId (acting site),
-   * permissions, orgScoped. The single org-scope place to browse + install,
-   * replacing the per-site marketplace tab.
-   */ orgMarketplace: 'orgMarketplace',
-    /** Plugins & add-ons hub installs section. Props: hostId. */ orgAddons: 'orgAddons',
-    /** Bottom of the host dashboard. Props: hostId, org. (AGL-433) */ dashboardFooter: 'dashboardFooter',
+   * Each existed for one reason: a CONSOLE ROUTE had to show marketplace UI
+   * and an app may not import a plugin. AGL-3080 moved those routes into the
+   * marketplace plugin, where the components are plain imports — so the four
+   * zones had no drawer left, and a zone nothing draws is a contract nothing
+   * can be held to. `plugin-widget-slot-zones.spec.ts` is what noticed, which
+   * is the whole reason that inventory exists.
+   *
+   * `pluginSiteSet` and `hostArtifactPublish` stayed, and the difference is
+   * the test: both are drawn by a console page that is NOT the marketplace —
+   * the installation detail page and a site's layouts list — offering a
+   * marketplace action in passing.
+   */ /** Bottom of the host dashboard. Props: hostId, org. (AGL-433) */ dashboardFooter: 'dashboardFooter',
     /** Org settings page, below the tabbed cards. Props: orgId, org. */ orgSettings: 'orgSettings',
     /** Host setup page, below the built-in cards. Props: hostId, org. */ hostSettings: 'hostSettings',
     /**